@augstash/sdk 0.2.0 → 0.3.0

package/dist/generated/src/apis/SalesforceApi.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Augstash Public API
+ * Every /api/_** response is wrapped in {success, code, data, message, traceId, timestamp}; the schema shown for an operation is what arrives in `data`, and the SDKs unwrap it. Errors carry a stable `code` - branch on that, never on `message`. Authentication is an ask_live_* key on X-Api-Key, or a bearer token. Operations marked \'Not reachable with an ask_live_* API key\' need a user token.
+ *
+ * The version of the OpenAPI document: v1
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { PageResponseSalesforceAccountResponse, PageResponseSalesforceOpportunityResponse, Pageable, SalesforceAuthorizeUrlResponse, SalesforceRunResponse, SalesforceStatusResponse, UpdateSalesforceSettingsRequest } from '../models/index';
+export interface AccountsRequest {
+    pageable: Pageable;
+}
+export interface AuthorizeUrlIntegrationsSalesforceRequest {
+    environment?: string;
+}
+export interface OpportunitiesRequest {
+    pageable: Pageable;
+}
+export interface SyncNowIntegrationsSalesforceRequest {
+    xIdempotencyKey?: string;
+}
+export interface UpdateSettingsIntegrationsSalesforceRequest {
+    updateSalesforceSettingsRequest: UpdateSalesforceSettingsRequest;
+    xIdempotencyKey?: string;
+}
+/**
+ * SalesforceApi - interface
+ *
+ * @export
+ * @interface SalesforceApiInterface
+ */
+export interface SalesforceApiInterface {
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * @summary The Accounts mirrored from this tenant\'s Salesforce org
+     * @param {Pageable} pageable
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    accountsRaw(requestParameters: AccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageResponseSalesforceAccountResponse>>;
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Accounts mirrored from this tenant\'s Salesforce org
+     */
+    accounts(requestParameters: AccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageResponseSalesforceAccountResponse>;
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * @summary Build the Salesforce consent URL that starts a connect
+     * @param {string} [environment]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    authorizeUrlIntegrationsSalesforceRaw(requestParameters: AuthorizeUrlIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceAuthorizeUrlResponse>>;
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * Build the Salesforce consent URL that starts a connect
+     */
+    authorizeUrlIntegrationsSalesforce(requestParameters: AuthorizeUrlIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceAuthorizeUrlResponse>;
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * @summary The Opportunities this tenant\'s syncs have observed, most recently moved first
+     * @param {Pageable} pageable
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    opportunitiesRaw(requestParameters: OpportunitiesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageResponseSalesforceOpportunityResponse>>;
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Opportunities this tenant\'s syncs have observed, most recently moved first
+     */
+    opportunities(requestParameters: OpportunitiesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageResponseSalesforceOpportunityResponse>;
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * @summary Whether this tenant has connected Salesforce, and what the last sync did
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    statusIntegrationsSalesforceRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceStatusResponse>>;
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * Whether this tenant has connected Salesforce, and what the last sync did
+     */
+    statusIntegrationsSalesforce(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceStatusResponse>;
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * @summary Run this tenant\'s Salesforce sync now
+     * @param {string} [xIdempotencyKey] Makes this call replayable instead of re-executed on retry (AS-TGT-001). The first 2xx response is cached per (tenant, key) for 24h and replayed verbatim, with &#x60;X-Idempotent-Replay&#x60; set. Reusing a key with a different body is refused with 409 IDEMPOTENCY_KEY_REUSED. The SDKs send one automatically on mutating calls.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    syncNowIntegrationsSalesforceRaw(requestParameters: SyncNowIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceRunResponse>>;
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * Run this tenant\'s Salesforce sync now
+     */
+    syncNowIntegrationsSalesforce(requestParameters: SyncNowIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceRunResponse>;
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * @summary Change how this tenant\'s Salesforce integration behaves
+     * @param {UpdateSalesforceSettingsRequest} updateSalesforceSettingsRequest
+     * @param {string} [xIdempotencyKey] Makes this call replayable instead of re-executed on retry (AS-TGT-001). The first 2xx response is cached per (tenant, key) for 24h and replayed verbatim, with &#x60;X-Idempotent-Replay&#x60; set. Reusing a key with a different body is refused with 409 IDEMPOTENCY_KEY_REUSED. The SDKs send one automatically on mutating calls.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceApiInterface
+     */
+    updateSettingsIntegrationsSalesforceRaw(requestParameters: UpdateSettingsIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceStatusResponse>>;
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * Change how this tenant\'s Salesforce integration behaves
+     */
+    updateSettingsIntegrationsSalesforce(requestParameters: UpdateSettingsIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceStatusResponse>;
+}
+/**
+ *
+ */
+export declare class SalesforceApi extends runtime.BaseAPI implements SalesforceApiInterface {
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Accounts mirrored from this tenant\'s Salesforce org
+     */
+    accountsRaw(requestParameters: AccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageResponseSalesforceAccountResponse>>;
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Accounts mirrored from this tenant\'s Salesforce org
+     */
+    accounts(requestParameters: AccountsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageResponseSalesforceAccountResponse>;
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * Build the Salesforce consent URL that starts a connect
+     */
+    authorizeUrlIntegrationsSalesforceRaw(requestParameters: AuthorizeUrlIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceAuthorizeUrlResponse>>;
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * Build the Salesforce consent URL that starts a connect
+     */
+    authorizeUrlIntegrationsSalesforce(requestParameters?: AuthorizeUrlIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceAuthorizeUrlResponse>;
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Opportunities this tenant\'s syncs have observed, most recently moved first
+     */
+    opportunitiesRaw(requestParameters: OpportunitiesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PageResponseSalesforceOpportunityResponse>>;
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Opportunities this tenant\'s syncs have observed, most recently moved first
+     */
+    opportunities(requestParameters: OpportunitiesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PageResponseSalesforceOpportunityResponse>;
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * Whether this tenant has connected Salesforce, and what the last sync did
+     */
+    statusIntegrationsSalesforceRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceStatusResponse>>;
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * Whether this tenant has connected Salesforce, and what the last sync did
+     */
+    statusIntegrationsSalesforce(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceStatusResponse>;
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * Run this tenant\'s Salesforce sync now
+     */
+    syncNowIntegrationsSalesforceRaw(requestParameters: SyncNowIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceRunResponse>>;
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * Run this tenant\'s Salesforce sync now
+     */
+    syncNowIntegrationsSalesforce(requestParameters?: SyncNowIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceRunResponse>;
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * Change how this tenant\'s Salesforce integration behaves
+     */
+    updateSettingsIntegrationsSalesforceRaw(requestParameters: UpdateSettingsIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SalesforceStatusResponse>>;
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * Change how this tenant\'s Salesforce integration behaves
+     */
+    updateSettingsIntegrationsSalesforce(requestParameters: UpdateSettingsIntegrationsSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SalesforceStatusResponse>;
+}

package/dist/generated/src/apis/SalesforceApi.js

@@ -0,0 +1,287 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Augstash Public API
+ * Every /api/_** response is wrapped in {success, code, data, message, traceId, timestamp}; the schema shown for an operation is what arrives in `data`, and the SDKs unwrap it. Errors carry a stable `code` - branch on that, never on `message`. Authentication is an ask_live_* key on X-Api-Key, or a bearer token. Operations marked \'Not reachable with an ask_live_* API key\' need a user token.
+ *
+ * The version of the OpenAPI document: v1
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SalesforceApi = void 0;
+const runtime = __importStar(require("../runtime"));
+const index_1 = require("../models/index");
+/**
+ *
+ */
+class SalesforceApi extends runtime.BaseAPI {
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Accounts mirrored from this tenant\'s Salesforce org
+     */
+    async accountsRaw(requestParameters, initOverrides) {
+        if (requestParameters['pageable'] == null) {
+            throw new runtime.RequiredError('pageable', 'Required parameter "pageable" was null or undefined when calling accounts().');
+        }
+        const queryParameters = {};
+        if (requestParameters['pageable'] != null) {
+            queryParameters['pageable'] = requestParameters['pageable'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce/accounts`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.PageResponseSalesforceAccountResponseFromJSON)(jsonValue));
+    }
+    /**
+     * A read model (NI-10b): Salesforce owns these records and nothing here creates, edits or deletes one, so every field but the id may be null. crmModifiedAt is how current the data is and lastPulledAt is when we last looked — a sweep that finds nothing changed advances the second and not the first. A Contact link carries its crmAccountId, so \"everyone at Acme\" is a join on this list. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Accounts mirrored from this tenant\'s Salesforce org
+     */
+    async accounts(requestParameters, initOverrides) {
+        const response = await this.accountsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * Build the Salesforce consent URL that starts a connect
+     */
+    async authorizeUrlIntegrationsSalesforceRaw(requestParameters, initOverrides) {
+        const queryParameters = {};
+        if (requestParameters['environment'] != null) {
+            queryParameters['environment'] = requestParameters['environment'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce/authorize-url`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.SalesforceAuthorizeUrlResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Returns the absolute Salesforce OAuth URL to navigate the browser to, carrying a signed state token that binds this tenant for the unauthenticated callback. environment selects the login host: production (the default) uses login.salesforce.com, sandbox uses test.salesforce.com. ⚠️ Choosing the wrong one fails at consent as invalid_grant, which reads as a wrong password — so offer the user the choice explicitly rather than defaulting silently. scopes is the exact list the consent screen will show, space-separated in the order Salesforce receives it; render it so an admin knows what is being asked before they are standing on the screen. The state field is for diagnostics only — it is already embedded in authorizeUrl and must not be parsed, stored or resent by a client. Makes no Salesforce call. Writes < 300ms. Requires API-key scope: integrations:write.
+     * Build the Salesforce consent URL that starts a connect
+     */
+    async authorizeUrlIntegrationsSalesforce(requestParameters = {}, initOverrides) {
+        const response = await this.authorizeUrlIntegrationsSalesforceRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Opportunities this tenant\'s syncs have observed, most recently moved first
+     */
+    async opportunitiesRaw(requestParameters, initOverrides) {
+        if (requestParameters['pageable'] == null) {
+            throw new runtime.RequiredError('pageable', 'Required parameter "pageable" was null or undefined when calling opportunities().');
+        }
+        const queryParameters = {};
+        if (requestParameters['pageable'] != null) {
+            queryParameters['pageable'] = requestParameters['pageable'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce/opportunities`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.PageResponseSalesforceOpportunityResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Exists (NI-10b) so somebody building an automation can see the stage values their own org uses: a DEAL_STAGE_CHANGED flow triggers on stage, which is StageName\'s API value — Salesforce has no separate stage id, and the label is what an admin renames. closed and won are Salesforce\'s own IsClosed/IsWon, the answer to \"is this Closed Won\" however the org spells the stage. stageChangedAt is when we observed the move, not when Salesforce recorded it. Paginated, default 20 and max 100. Reads < 300ms. Requires API-key scope: integrations:read.
+     * The Opportunities this tenant\'s syncs have observed, most recently moved first
+     */
+    async opportunities(requestParameters, initOverrides) {
+        const response = await this.opportunitiesRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * Whether this tenant has connected Salesforce, and what the last sync did
+     */
+    async statusIntegrationsSalesforceRaw(initOverrides) {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.SalesforceStatusResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Health comes from the shared connection substrate, so status here always matches GET /api/v1/integrations/salesforce. The counters are from the last run and are zero before the first one. activityWatermark is how far conversation history has been written onto CRM records, which is the only field that answers why a recent chat is not on the record yet. instanceUrl and environment are returned so an operator can confirm the integration points at the org they meant — connecting a sandbox by mistake is this integration\'s most likely misconfiguration. Never returns a token. Reads < 300ms. Requires API-key scope: integrations:read.
+     * Whether this tenant has connected Salesforce, and what the last sync did
+     */
+    async statusIntegrationsSalesforce(initOverrides) {
+        const response = await this.statusIntegrationsSalesforceRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * Run this tenant\'s Salesforce sync now
+     */
+    async syncNowIntegrationsSalesforceRaw(requestParameters, initOverrides) {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (requestParameters['xIdempotencyKey'] != null) {
+            headerParameters['X-Idempotency-Key'] = String(requestParameters['xIdempotencyKey']);
+        }
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce/sync`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.SalesforceRunResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Five phases in order: Accounts, Contacts, Leads (when syncLeads is on), Opportunities (when syncOpportunities is on — each stage CHANGE is announced to automations as a CRM deal-stage event with vendor salesforce; stageChanges counts them, and against opportunitiesPulled it is the difference between modified and moved), then the conversation activity write-back — which, when pushPeopleAs is set, first CREATES the record for anybody the org lacks and counts it in peoplePushed. Contacts run before Leads because a person who is both — which a converted Lead makes routine — has their conversations filed against the Contact. Each phase is independently fallible, so an org that has spent its daily API allowance usually yields PARTIAL with phasesCompleted saying how much got through rather than an all-or-nothing failure. ⚠️ A Salesforce rate limit is a DAILY org budget shared with every other tool the customer has connected, so PARTIAL can persist for hours and does NOT mean the grant is broken — do not prompt a reconnect for it. Importing a Contact or Lead records NO consent on any channel; a CRM record is a sales record, not a permission list. Note that this platform\'s consent model is opt-out, so recording nothing leaves an imported person reachable exactly as a CSV import does; every one carries the salesforce tag so they can be segmented out. tokenRefreshes above 1 means the org\'s session timeout is shorter than a sync takes. Bounded per run, so a large first sync arrives over several runs and each resumes where the last stopped. Runs synchronously and returns what it did, which is why this is a long but bounded budget: < 60s. Requires API-key scope: integrations:write.
+     * Run this tenant\'s Salesforce sync now
+     */
+    async syncNowIntegrationsSalesforce(requestParameters = {}, initOverrides) {
+        const response = await this.syncNowIntegrationsSalesforceRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * Change how this tenant\'s Salesforce integration behaves
+     */
+    async updateSettingsIntegrationsSalesforceRaw(requestParameters, initOverrides) {
+        if (requestParameters['updateSalesforceSettingsRequest'] == null) {
+            throw new runtime.RequiredError('updateSalesforceSettingsRequest', 'Required parameter "updateSalesforceSettingsRequest" was null or undefined when calling updateSettingsIntegrationsSalesforce().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (requestParameters['xIdempotencyKey'] != null) {
+            headerParameters['X-Idempotency-Key'] = String(requestParameters['xIdempotencyKey']);
+        }
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Api-Key"] = await this.configuration.apiKey("X-Api-Key"); // ApiKeyAuth authentication
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/v1/integrations/salesforce/settings`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'PATCH',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, index_1.UpdateSalesforceSettingsRequestToJSON)(requestParameters['updateSalesforceSettingsRequest']),
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.SalesforceStatusResponseFromJSON)(jsonValue));
+    }
+    /**
+     * A genuine partial update: send only the fields to change. syncLeads defaults TRUE, unlike NI-6\'s setting, because this one only reads — and Leads are usually the larger and more interesting half of an org for a messaging product. Turn it off for an org whose Lead table is a purchased list the sales team ignores. syncOpportunities (NI-10b) defaults TRUE and also only reads — but it ANNOUNCES: a CRM deal-stage automation whose trigger was never narrowed on vendor fires for ANY CRM, so a flow built for HubSpot and left unnarrowed starts being enrolled by Salesforce Opportunities the sweep after this is on. Turn it off here or narrow the flow. pushPeopleAs (NI-10b) is none|lead|contact and defaults none: the other two WRITE people into the customer\'s org, and Salesforce forces a choice HubSpot never did — a Lead needs no Account and may be treated as spam by the sales team; a Contact is the record they work from and arrives with no Account. Only people a conversation already exists with, only ones with an email, bounded per run. Importing a Contact or a Lead — or creating one — records NO consent on any channel. Writes < 500ms. Requires API-key scope: integrations:write.
+     * Change how this tenant\'s Salesforce integration behaves
+     */
+    async updateSettingsIntegrationsSalesforce(requestParameters, initOverrides) {
+        const response = await this.updateSettingsIntegrationsSalesforceRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+}
+exports.SalesforceApi = SalesforceApi;

package/dist/generated/src/apis/SalesforceOAuthCallbackApi.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Augstash Public API
+ * Every /api/_** response is wrapped in {success, code, data, message, traceId, timestamp}; the schema shown for an operation is what arrives in `data`, and the SDKs unwrap it. Errors carry a stable `code` - branch on that, never on `message`. Authentication is an ask_live_* key on X-Api-Key, or a bearer token. Operations marked \'Not reachable with an ask_live_* API key\' need a user token.
+ *
+ * The version of the OpenAPI document: v1
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+export interface CallbackAuthSalesforceRequest {
+    code?: string;
+    state?: string;
+    error?: string;
+    errorDescription?: string;
+}
+/**
+ * SalesforceOAuthCallbackApi - interface
+ *
+ * @export
+ * @interface SalesforceOAuthCallbackApiInterface
+ */
+export interface SalesforceOAuthCallbackApiInterface {
+    /**
+     * Verifies the signed state, exchanges the authorization code for a grant, proves the grant can query the org, and stores it — then redirects the browser back into the console. Every outcome is a 302, including every failure: a person is looking at this in a browser and a raw JSON error is not something they can act on. Not called by any client directly — it is the connected app\'s registered Callback URL, and Salesforce matches that value exactly. Spends two Salesforce round trips (the code exchange, then an org query that proves the grant works), so a real connect is dominated by Salesforce\'s own latency: < 2s.
+     * @summary Handle Salesforce\'s connect redirect
+     * @param {string} [code]
+     * @param {string} [state]
+     * @param {string} [error]
+     * @param {string} [errorDescription]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SalesforceOAuthCallbackApiInterface
+     */
+    callbackAuthSalesforceRaw(requestParameters: CallbackAuthSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Verifies the signed state, exchanges the authorization code for a grant, proves the grant can query the org, and stores it — then redirects the browser back into the console. Every outcome is a 302, including every failure: a person is looking at this in a browser and a raw JSON error is not something they can act on. Not called by any client directly — it is the connected app\'s registered Callback URL, and Salesforce matches that value exactly. Spends two Salesforce round trips (the code exchange, then an org query that proves the grant works), so a real connect is dominated by Salesforce\'s own latency: < 2s.
+     * Handle Salesforce\'s connect redirect
+     */
+    callbackAuthSalesforce(requestParameters: CallbackAuthSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}
+/**
+ *
+ */
+export declare class SalesforceOAuthCallbackApi extends runtime.BaseAPI implements SalesforceOAuthCallbackApiInterface {
+    /**
+     * Verifies the signed state, exchanges the authorization code for a grant, proves the grant can query the org, and stores it — then redirects the browser back into the console. Every outcome is a 302, including every failure: a person is looking at this in a browser and a raw JSON error is not something they can act on. Not called by any client directly — it is the connected app\'s registered Callback URL, and Salesforce matches that value exactly. Spends two Salesforce round trips (the code exchange, then an org query that proves the grant works), so a real connect is dominated by Salesforce\'s own latency: < 2s.
+     * Handle Salesforce\'s connect redirect
+     */
+    callbackAuthSalesforceRaw(requestParameters: CallbackAuthSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Verifies the signed state, exchanges the authorization code for a grant, proves the grant can query the org, and stores it — then redirects the browser back into the console. Every outcome is a 302, including every failure: a person is looking at this in a browser and a raw JSON error is not something they can act on. Not called by any client directly — it is the connected app\'s registered Callback URL, and Salesforce matches that value exactly. Spends two Salesforce round trips (the code exchange, then an org query that proves the grant works), so a real connect is dominated by Salesforce\'s own latency: < 2s.
+     * Handle Salesforce\'s connect redirect
+     */
+    callbackAuthSalesforce(requestParameters?: CallbackAuthSalesforceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+}