@eide/foir-proto-ts 0.22.0 → 0.24.0

package/src/integrations/v1/integrations_pb.d.ts

@@ -1,1757 +0,0 @@
-// @generated by protoc-gen-es v2.11.0 with parameter "import_extension=js"
-// @generated from file integrations/v1/integrations.proto (package integrations.v1, syntax proto3)
-/* eslint-disable */
-
-import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { JsonObject, Message } from "@bufbuild/protobuf";
-import type { Timestamp } from "@bufbuild/protobuf/wkt";
-
-/**
- * Describes the file integrations/v1/integrations.proto.
- */
-export declare const file_integrations_v1_integrations: GenFile;
-
-/**
- * Middleware reference. v1 carries only the URL but is defined as a message
- * so additional fields (timeouts, retry hints, etc.) can be added later
- * without a schema migration.
- *
- * @generated from message integrations.v1.IntegrationMiddleware
- */
-export declare type IntegrationMiddleware = Message<"integrations.v1.IntegrationMiddleware"> & {
-  /**
-   * Full https URL. The gateway streams webhook bodies to `${url}/webhook`,
-   * opens OAuth via `${url}/authorize/start`, and dispatches manual triggers
-   * to `${url}/trigger`. http URLs are rejected at validation time — the
-   * credential-free middleware model relies on TLS between gateway and
-   * middleware.
-   *
-   * @generated from field: string url = 1;
-   */
-  url: string;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationMiddleware.
- * Use `create(IntegrationMiddlewareSchema)` to create a new message.
- */
-export declare const IntegrationMiddlewareSchema: GenMessage<IntegrationMiddleware>;
-
-/**
- * External-service credentials. The `values` blob is never populated on
- * read endpoints — it is written separately via the dedicated credentials
- * endpoint and stored encrypted. It is present in the message so admin-UI
- * and CLI write paths can carry authorized values end-to-end in a single
- * request where appropriate.
- *
- * @generated from message integrations.v1.IntegrationCredentials
- */
-export declare type IntegrationCredentials = Message<"integrations.v1.IntegrationCredentials"> & {
-  /**
-   * Credential strategy drives which authorization flow the admin UI renders.
-   * CREDENTIAL_STRATEGY_UNSPECIFIED is rejected — every declared integration
-   * must pick a strategy, even if it is NONE (explicitly "no credentials").
-   *
-   * @generated from field: integrations.v1.CredentialStrategy strategy = 1;
-   */
-  strategy: CredentialStrategy;
-
-  /**
-   * @generated from field: optional google.protobuf.Struct values = 2;
-   */
-  values?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationCredentials.
- * Use `create(IntegrationCredentialsSchema)` to create a new message.
- */
-export declare const IntegrationCredentialsSchema: GenMessage<IntegrationCredentials>;
-
-/**
- * A single field in a model seed. Carries the type and any options the
- * CLI/admin UI needs to create the seeded field. Kept deliberately flat —
- * this is a bootstrap schema, not an ongoing declaration. The model's
- * long-term shape lives under `models.<key>`.
- *
- * @generated from message integrations.v1.ModelSeedField
- */
-export declare type ModelSeedField = Message<"integrations.v1.ModelSeedField"> & {
-  /**
-   * @generated from field: string type = 1;
-   */
-  type: string;
-
-  /**
-   * @generated from field: bool required = 2;
-   */
-  required: boolean;
-
-  /**
-   * @generated from field: bool natural_key = 3;
-   */
-  naturalKey: boolean;
-
-  /**
-   * @generated from field: optional string label = 4;
-   */
-  label?: string;
-
-  /**
-   * @generated from field: optional string help_text = 5;
-   */
-  helpText?: string;
-
-  /**
-   * @generated from field: optional google.protobuf.Struct config = 6;
-   */
-  config?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.ModelSeedField.
- * Use `create(ModelSeedFieldSchema)` to create a new message.
- */
-export declare const ModelSeedFieldSchema: GenMessage<ModelSeedField>;
-
-/**
- * Optional one-time bootstrap schema used at first push if the target model
- * doesn't yet exist. Ignored on every subsequent push — the model's shape
- * lives under `models` from that point on.
- *
- * @generated from message integrations.v1.ModelSeed
- */
-export declare type ModelSeed = Message<"integrations.v1.ModelSeed"> & {
-  /**
-   * @generated from field: map<string, integrations.v1.ModelSeedField> fields = 1;
-   */
-  fields: { [key: string]: ModelSeedField };
-};
-
-/**
- * Describes the message integrations.v1.ModelSeed.
- * Use `create(ModelSeedSchema)` to create a new message.
- */
-export declare const ModelSeedSchema: GenMessage<ModelSeed>;
-
-/**
- * Per-source-type sync mapping. Declares which foir model a source type
- * writes into, which foir field holds the upstream natural key, and the
- * explicit field mapping. No auto-inference, no alias tables.
- *
- * @generated from message integrations.v1.IntegrationSyncMapping
- */
-export declare type IntegrationSyncMapping = Message<"integrations.v1.IntegrationSyncMapping"> & {
-  /**
-   * foir model key that this source type writes into.
-   *
-   * @generated from field: string model = 1;
-   */
-  model: string;
-
-  /**
-   * foir field holding the upstream natural key. UPSERTs are keyed on this.
-   *
-   * @generated from field: string natural_key = 2;
-   */
-  naturalKey: string;
-
-  /**
-   * Explicit field mapping: source field name -> foir field key.
-   * Unmapped source fields are discarded at runtime.
-   *
-   * @generated from field: map<string, string> fields = 3;
-   */
-  fields: { [key: string]: string };
-
-  /**
-   * Optional one-time bootstrap schema if the target model is missing.
-   *
-   * @generated from field: optional integrations.v1.ModelSeed model_seed = 4;
-   */
-  modelSeed?: ModelSeed;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationSyncMapping.
- * Use `create(IntegrationSyncMappingSchema)` to create a new message.
- */
-export declare const IntegrationSyncMappingSchema: GenMessage<IntegrationSyncMapping>;
-
-/**
- * Status reported by the middleware after each sync cycle and on meaningful
- * state transitions. Nothing here is computed platform-side — the middleware
- * is the source of truth for its own status.
- *
- * @generated from message integrations.v1.IntegrationStatus
- */
-export declare type IntegrationStatus = Message<"integrations.v1.IntegrationStatus"> & {
-  /**
-   * @generated from field: optional google.protobuf.Timestamp last_sync_at = 1;
-   */
-  lastSyncAt?: Timestamp;
-
-  /**
-   * @generated from field: optional int64 last_sync_duration_ms = 2;
-   */
-  lastSyncDurationMs?: bigint;
-
-  /**
-   * @generated from field: optional int64 last_sync_record_count = 3;
-   */
-  lastSyncRecordCount?: bigint;
-
-  /**
-   * @generated from field: optional string last_error = 4;
-   */
-  lastError?: string;
-
-  /**
-   * @generated from field: optional google.protobuf.Timestamp last_error_at = 5;
-   */
-  lastErrorAt?: Timestamp;
-
-  /**
-   * @generated from field: integrations.v1.SubscriptionHealth subscription_health = 6;
-   */
-  subscriptionHealth: SubscriptionHealth;
-
-  /**
-   * @generated from field: integrations.v1.AuthStatus auth_status = 7;
-   */
-  authStatus: AuthStatus;
-
-  /**
-   * Free-text description of the middleware's delete handling for admin
-   * display. e.g. "soft (deletedAt field)", "hard", "ignore".
-   *
-   * @generated from field: optional string deletion_strategy = 8;
-   */
-  deletionStrategy?: string;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationStatus.
- * Use `create(IntegrationStatusSchema)` to create a new message.
- */
-export declare const IntegrationStatusSchema: GenMessage<IntegrationStatus>;
-
-/**
- * The full per-project integration declaration. Lives in the platform;
- * declared from foir.config.ts or the admin UI.
- *
- * @generated from message integrations.v1.IntegrationConfig
- */
-export declare type IntegrationConfig = Message<"integrations.v1.IntegrationConfig"> & {
-  /**
-   * Kebab-case name, unique per project. Matches the key in foir.config.ts
-   * under `integrations.<name>`.
-   *
-   * @generated from field: string name = 1;
-   */
-  name: string;
-
-  /**
-   * @generated from field: bool enabled = 2;
-   */
-  enabled: boolean;
-
-  /**
-   * @generated from field: integrations.v1.IntegrationMiddleware middleware = 3;
-   */
-  middleware?: IntegrationMiddleware;
-
-  /**
-   * @generated from field: integrations.v1.IntegrationCredentials credentials = 4;
-   */
-  credentials?: IntegrationCredentials;
-
-  /**
-   * Sync mapping, keyed by source-type name (e.g. "product", "collection").
-   *
-   * @generated from field: map<string, integrations.v1.IntegrationSyncMapping> sync = 5;
-   */
-  sync: { [key: string]: IntegrationSyncMapping };
-
-  /**
-   * Opaque middleware-specific settings. The platform and CLI do not
-   * interpret this blob — the middleware reads and validates it at runtime.
-   *
-   * @generated from field: optional google.protobuf.Struct settings = 6;
-   */
-  settings?: JsonObject;
-
-  /**
-   * Optional metadata for admin-UI display (display name, description,
-   * category). Unused by the runtime.
-   *
-   * @generated from field: optional google.protobuf.Struct metadata = 7;
-   */
-  metadata?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationConfig.
- * Use `create(IntegrationConfigSchema)` to create a new message.
- */
-export declare const IntegrationConfigSchema: GenMessage<IntegrationConfig>;
-
-/**
- * @generated from message integrations.v1.ExtensionPlacement
- */
-export declare type ExtensionPlacement = Message<"integrations.v1.ExtensionPlacement"> & {
-  /**
-   * @generated from field: integrations.v1.ExtensionTarget target = 1;
-   */
-  target: ExtensionTarget;
-
-  /**
-   * foir model key this placement attaches to.
-   *
-   * @generated from field: string model = 2;
-   */
-  model: string;
-
-  /**
-   * Tab key used as an HTML slug and as the SDK addressable id.
-   *
-   * @generated from field: string tab = 3;
-   */
-  tab: string;
-
-  /**
-   * Human-readable tab title shown in the admin UI.
-   *
-   * @generated from field: string title = 4;
-   */
-  title: string;
-
-  /**
-   * Optional free-form hints for the placement (icon, ordering, etc.).
-   *
-   * @generated from field: optional google.protobuf.Struct hints = 5;
-   */
-  hints?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.ExtensionPlacement.
- * Use `create(ExtensionPlacementSchema)` to create a new message.
- */
-export declare const ExtensionPlacementSchema: GenMessage<ExtensionPlacement>;
-
-/**
- * @generated from message integrations.v1.ExtensionConfig
- */
-export declare type ExtensionConfig = Message<"integrations.v1.ExtensionConfig"> & {
-  /**
-   * Kebab-case name, unique per project.
-   *
-   * @generated from field: string name = 1;
-   */
-  name: string;
-
-  /**
-   * https URL of the iframe app. The admin UI loads this URL in an iframe
-   * at the declared placements.
-   *
-   * @generated from field: string url = 2;
-   */
-  url: string;
-
-  /**
-   * @generated from field: repeated integrations.v1.ExtensionPlacement placements = 3;
-   */
-  placements: ExtensionPlacement[];
-
-  /**
-   * Optional metadata for admin-UI display.
-   *
-   * @generated from field: optional google.protobuf.Struct metadata = 4;
-   */
-  metadata?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.ExtensionConfig.
- * Use `create(ExtensionConfigSchema)` to create a new message.
- */
-export declare const ExtensionConfigSchema: GenMessage<ExtensionConfig>;
-
-/**
- * A single credential slot for one (project, integration). The encrypted
- * payload's plaintext shape is middleware-specific (Shopify OAuth token,
- * Stripe API key, SSH keypair, etc.) — the platform treats it as opaque
- * bytes and never parses it.
- *
- * @generated from message integrations.v1.IntegrationCredentialValue
- */
-export declare type IntegrationCredentialValue = Message<"integrations.v1.IntegrationCredentialValue"> & {
-  /**
-   * Plaintext credential bytes. Populated on read responses (after successful
-   * capability check + decryption) and on write requests. NEVER populated on
-   * any other response.
-   *
-   * @generated from field: bytes value = 1;
-   */
-  value: Uint8Array;
-
-  /**
-   * Identifier of the key that encrypted this value at rest. Carried across
-   * the wire so rotation is possible without breaking old rows.
-   *
-   * @generated from field: string encryption_key_id = 2;
-   */
-  encryptionKeyId: string;
-
-  /**
-   * When the credential was last decrypted and returned to a caller. Updated
-   * on every successful GetIntegrationCredential call. Null if never read.
-   *
-   * @generated from field: optional google.protobuf.Timestamp last_read_at = 3;
-   */
-  lastReadAt?: Timestamp;
-
-  /**
-   * When the credential was last written. Null if never written.
-   *
-   * @generated from field: optional google.protobuf.Timestamp last_written_at = 4;
-   */
-  lastWrittenAt?: Timestamp;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationCredentialValue.
- * Use `create(IntegrationCredentialValueSchema)` to create a new message.
- */
-export declare const IntegrationCredentialValueSchema: GenMessage<IntegrationCredentialValue>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationCredentialRequest
- */
-export declare type GetIntegrationCredentialRequest = Message<"integrations.v1.GetIntegrationCredentialRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string integration_name = 2;
-   */
-  integrationName: string;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationCredentialRequest.
- * Use `create(GetIntegrationCredentialRequestSchema)` to create a new message.
- */
-export declare const GetIntegrationCredentialRequestSchema: GenMessage<GetIntegrationCredentialRequest>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationCredentialResponse
- */
-export declare type GetIntegrationCredentialResponse = Message<"integrations.v1.GetIntegrationCredentialResponse"> & {
-  /**
-   * @generated from field: integrations.v1.IntegrationCredentialValue credential = 1;
-   */
-  credential?: IntegrationCredentialValue;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationCredentialResponse.
- * Use `create(GetIntegrationCredentialResponseSchema)` to create a new message.
- */
-export declare const GetIntegrationCredentialResponseSchema: GenMessage<GetIntegrationCredentialResponse>;
-
-/**
- * @generated from message integrations.v1.WriteIntegrationCredentialRequest
- */
-export declare type WriteIntegrationCredentialRequest = Message<"integrations.v1.WriteIntegrationCredentialRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string integration_name = 2;
-   */
-  integrationName: string;
-
-  /**
-   * Plaintext bytes to encrypt and store. Replaces any existing value for
-   * this (project, integration).
-   *
-   * @generated from field: bytes value = 3;
-   */
-  value: Uint8Array;
-
-  /**
-   * Optional correlation context to include in the audit log entry
-   * (webhook delivery id, manual trigger id, admin action id, etc.).
-   *
-   * @generated from field: optional string context = 4;
-   */
-  context?: string;
-};
-
-/**
- * Describes the message integrations.v1.WriteIntegrationCredentialRequest.
- * Use `create(WriteIntegrationCredentialRequestSchema)` to create a new message.
- */
-export declare const WriteIntegrationCredentialRequestSchema: GenMessage<WriteIntegrationCredentialRequest>;
-
-/**
- * @generated from message integrations.v1.WriteIntegrationCredentialResponse
- */
-export declare type WriteIntegrationCredentialResponse = Message<"integrations.v1.WriteIntegrationCredentialResponse"> & {
-  /**
-   * Metadata about the newly stored credential. Never includes the plaintext.
-   *
-   * @generated from field: string encryption_key_id = 1;
-   */
-  encryptionKeyId: string;
-
-  /**
-   * @generated from field: google.protobuf.Timestamp last_written_at = 2;
-   */
-  lastWrittenAt?: Timestamp;
-};
-
-/**
- * Describes the message integrations.v1.WriteIntegrationCredentialResponse.
- * Use `create(WriteIntegrationCredentialResponseSchema)` to create a new message.
- */
-export declare const WriteIntegrationCredentialResponseSchema: GenMessage<WriteIntegrationCredentialResponse>;
-
-/**
- * @generated from message integrations.v1.IssueExchangeTicketRequest
- */
-export declare type IssueExchangeTicketRequest = Message<"integrations.v1.IssueExchangeTicketRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string integration_name = 2;
-   */
-  integrationName: string;
-};
-
-/**
- * Describes the message integrations.v1.IssueExchangeTicketRequest.
- * Use `create(IssueExchangeTicketRequestSchema)` to create a new message.
- */
-export declare const IssueExchangeTicketRequestSchema: GenMessage<IssueExchangeTicketRequest>;
-
-/**
- * @generated from message integrations.v1.IssueExchangeTicketResponse
- */
-export declare type IssueExchangeTicketResponse = Message<"integrations.v1.IssueExchangeTicketResponse"> & {
-  /**
-   * Opaque single-use ticket id. Must be embedded in OAuth `state` and
-   * POSTed back by the middleware to the gateway's /auth/exchange-ticket
-   * endpoint, which in turn redeems it via RedeemExchangeTicket below.
-   *
-   * @generated from field: string ticket = 1;
-   */
-  ticket: string;
-
-  /**
-   * Absolute expiry (10 minutes from issue). After this point the ticket
-   * is rejected even if it has not yet been redeemed.
-   *
-   * @generated from field: google.protobuf.Timestamp expires_at = 2;
-   */
-  expiresAt?: Timestamp;
-};
-
-/**
- * Describes the message integrations.v1.IssueExchangeTicketResponse.
- * Use `create(IssueExchangeTicketResponseSchema)` to create a new message.
- */
-export declare const IssueExchangeTicketResponseSchema: GenMessage<IssueExchangeTicketResponse>;
-
-/**
- * Atomic single-use redemption of an exchange ticket. Called by the
- * public API gateway's /auth/exchange-ticket endpoint when a middleware
- * POSTs a ticket it received via the authorize redirect. The redemption
- * flips used_at in a single DB round trip and returns the resolved
- * subject so the gateway can mint a scoped token locally.
- *
- * This RPC is intentionally unauthenticated at the admin-session level —
- * ticket possession is the auth factor. Network-level service auth is
- * expected to come from the gap #11 internalauth interceptor pair.
- *
- * @generated from message integrations.v1.RedeemExchangeTicketRequest
- */
-export declare type RedeemExchangeTicketRequest = Message<"integrations.v1.RedeemExchangeTicketRequest"> & {
-  /**
-   * Opaque ticket id originally issued by IssueExchangeTicket. Must
-   * match an unused, unexpired row in auth_exchange_tickets.
-   *
-   * @generated from field: string ticket = 1;
-   */
-  ticket: string;
-
-  /**
-   * Free-text identity of the redeeming actor, written to the
-   * ticket_redeem auth_events row. Gateway callers pass something like
-   * "api-public:exchange-ticket:<ip>".
-   *
-   * @generated from field: string actor_ref = 2;
-   */
-  actorRef: string;
-};
-
-/**
- * Describes the message integrations.v1.RedeemExchangeTicketRequest.
- * Use `create(RedeemExchangeTicketRequestSchema)` to create a new message.
- */
-export declare const RedeemExchangeTicketRequestSchema: GenMessage<RedeemExchangeTicketRequest>;
-
-/**
- * @generated from message integrations.v1.RedeemExchangeTicketResponse
- */
-export declare type RedeemExchangeTicketResponse = Message<"integrations.v1.RedeemExchangeTicketResponse"> & {
-  /**
-   * The redeemed ticket id, echoed back for caller-side audit
-   * correlation. Matches request.ticket on success.
-   *
-   * @generated from field: string ticket_id = 1;
-   */
-  ticketId: string;
-
-  /**
-   * @generated from field: string tenant_id = 2;
-   */
-  tenantId: string;
-
-  /**
-   * @generated from field: string project_id = 3;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string integration_name = 4;
-   */
-  integrationName: string;
-
-  /**
-   * Single capability string the minted token should carry, e.g.
-   * "credentials:write". Taken verbatim from the ticket row.
-   *
-   * @generated from field: string capability = 5;
-   */
-  capability: string;
-
-  /**
-   * @generated from field: google.protobuf.Timestamp expires_at = 6;
-   */
-  expiresAt?: Timestamp;
-};
-
-/**
- * Describes the message integrations.v1.RedeemExchangeTicketResponse.
- * Use `create(RedeemExchangeTicketResponseSchema)` to create a new message.
- */
-export declare const RedeemExchangeTicketResponseSchema: GenMessage<RedeemExchangeTicketResponse>;
-
-/**
- * Summary row returned in ListIntegrationsResponse. Bundles the declaration
- * with the operational status glyphs the list page renders, so the admin UI
- * doesn't need a fan-out per row.
- *
- * @generated from message integrations.v1.IntegrationSummary
- */
-export declare type IntegrationSummary = Message<"integrations.v1.IntegrationSummary"> & {
-  /**
-   * @generated from field: integrations.v1.IntegrationConfig config = 1;
-   */
-  config?: IntegrationConfig;
-
-  /**
-   * True iff an integration_credentials row exists for this (project, name).
-   * Drives the "authorized / unauthorized" column in the list view.
-   *
-   * @generated from field: bool authorized = 2;
-   */
-  authorized: boolean;
-
-  /**
-   * Current integration_status row, if any. Absent if the middleware has
-   * never reported a cycle.
-   *
-   * @generated from field: optional integrations.v1.IntegrationStatus status = 3;
-   */
-  status?: IntegrationStatus;
-
-  /**
-   * Stable gateway webhook URL — same string for every caller and cycle.
-   * Included in the summary so the list page can show copyable URLs without
-   * a second round trip per row.
-   *
-   * @generated from field: string webhook_url = 4;
-   */
-  webhookUrl: string;
-};
-
-/**
- * Describes the message integrations.v1.IntegrationSummary.
- * Use `create(IntegrationSummarySchema)` to create a new message.
- */
-export declare const IntegrationSummarySchema: GenMessage<IntegrationSummary>;
-
-/**
- * @generated from message integrations.v1.ListIntegrationsRequest
- */
-export declare type ListIntegrationsRequest = Message<"integrations.v1.ListIntegrationsRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-};
-
-/**
- * Describes the message integrations.v1.ListIntegrationsRequest.
- * Use `create(ListIntegrationsRequestSchema)` to create a new message.
- */
-export declare const ListIntegrationsRequestSchema: GenMessage<ListIntegrationsRequest>;
-
-/**
- * @generated from message integrations.v1.ListIntegrationsResponse
- */
-export declare type ListIntegrationsResponse = Message<"integrations.v1.ListIntegrationsResponse"> & {
-  /**
-   * @generated from field: repeated integrations.v1.IntegrationSummary integrations = 1;
-   */
-  integrations: IntegrationSummary[];
-};
-
-/**
- * Describes the message integrations.v1.ListIntegrationsResponse.
- * Use `create(ListIntegrationsResponseSchema)` to create a new message.
- */
-export declare const ListIntegrationsResponseSchema: GenMessage<ListIntegrationsResponse>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationRequest
- */
-export declare type GetIntegrationRequest = Message<"integrations.v1.GetIntegrationRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationRequest.
- * Use `create(GetIntegrationRequestSchema)` to create a new message.
- */
-export declare const GetIntegrationRequestSchema: GenMessage<GetIntegrationRequest>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationResponse
- */
-export declare type GetIntegrationResponse = Message<"integrations.v1.GetIntegrationResponse"> & {
-  /**
-   * @generated from field: integrations.v1.IntegrationConfig config = 1;
-   */
-  config?: IntegrationConfig;
-
-  /**
-   * @generated from field: optional integrations.v1.IntegrationStatus status = 2;
-   */
-  status?: IntegrationStatus;
-
-  /**
-   * @generated from field: bool authorized = 3;
-   */
-  authorized: boolean;
-
-  /**
-   * Stable gateway URL an operator registers with the external service. The
-   * admin detail page surfaces this as copyable text.
-   *
-   * @generated from field: string webhook_url = 4;
-   */
-  webhookUrl: string;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationResponse.
- * Use `create(GetIntegrationResponseSchema)` to create a new message.
- */
-export declare const GetIntegrationResponseSchema: GenMessage<GetIntegrationResponse>;
-
-/**
- * @generated from message integrations.v1.UpsertIntegrationRequest
- */
-export declare type UpsertIntegrationRequest = Message<"integrations.v1.UpsertIntegrationRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * Full integration declaration. Name inside config.name must match the
-   * URL-path name on write; the handler rejects a mismatch.
-   *
-   * @generated from field: integrations.v1.IntegrationConfig config = 2;
-   */
-  config?: IntegrationConfig;
-};
-
-/**
- * Describes the message integrations.v1.UpsertIntegrationRequest.
- * Use `create(UpsertIntegrationRequestSchema)` to create a new message.
- */
-export declare const UpsertIntegrationRequestSchema: GenMessage<UpsertIntegrationRequest>;
-
-/**
- * @generated from message integrations.v1.UpsertIntegrationResponse
- */
-export declare type UpsertIntegrationResponse = Message<"integrations.v1.UpsertIntegrationResponse"> & {
-  /**
-   * @generated from field: integrations.v1.IntegrationConfig config = 1;
-   */
-  config?: IntegrationConfig;
-
-  /**
-   * @generated from field: string webhook_url = 2;
-   */
-  webhookUrl: string;
-};
-
-/**
- * Describes the message integrations.v1.UpsertIntegrationResponse.
- * Use `create(UpsertIntegrationResponseSchema)` to create a new message.
- */
-export declare const UpsertIntegrationResponseSchema: GenMessage<UpsertIntegrationResponse>;
-
-/**
- * @generated from message integrations.v1.DeleteIntegrationRequest
- */
-export declare type DeleteIntegrationRequest = Message<"integrations.v1.DeleteIntegrationRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.DeleteIntegrationRequest.
- * Use `create(DeleteIntegrationRequestSchema)` to create a new message.
- */
-export declare const DeleteIntegrationRequestSchema: GenMessage<DeleteIntegrationRequest>;
-
-/**
- * @generated from message integrations.v1.DeleteIntegrationResponse
- */
-export declare type DeleteIntegrationResponse = Message<"integrations.v1.DeleteIntegrationResponse"> & {
-};
-
-/**
- * Describes the message integrations.v1.DeleteIntegrationResponse.
- * Use `create(DeleteIntegrationResponseSchema)` to create a new message.
- */
-export declare const DeleteIntegrationResponseSchema: GenMessage<DeleteIntegrationResponse>;
-
-/**
- * @generated from message integrations.v1.ListExtensionsRequest
- */
-export declare type ListExtensionsRequest = Message<"integrations.v1.ListExtensionsRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-};
-
-/**
- * Describes the message integrations.v1.ListExtensionsRequest.
- * Use `create(ListExtensionsRequestSchema)` to create a new message.
- */
-export declare const ListExtensionsRequestSchema: GenMessage<ListExtensionsRequest>;
-
-/**
- * @generated from message integrations.v1.ListExtensionsResponse
- */
-export declare type ListExtensionsResponse = Message<"integrations.v1.ListExtensionsResponse"> & {
-  /**
-   * @generated from field: repeated integrations.v1.ExtensionConfig extensions = 1;
-   */
-  extensions: ExtensionConfig[];
-};
-
-/**
- * Describes the message integrations.v1.ListExtensionsResponse.
- * Use `create(ListExtensionsResponseSchema)` to create a new message.
- */
-export declare const ListExtensionsResponseSchema: GenMessage<ListExtensionsResponse>;
-
-/**
- * @generated from message integrations.v1.GetExtensionRequest
- */
-export declare type GetExtensionRequest = Message<"integrations.v1.GetExtensionRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.GetExtensionRequest.
- * Use `create(GetExtensionRequestSchema)` to create a new message.
- */
-export declare const GetExtensionRequestSchema: GenMessage<GetExtensionRequest>;
-
-/**
- * @generated from message integrations.v1.GetExtensionResponse
- */
-export declare type GetExtensionResponse = Message<"integrations.v1.GetExtensionResponse"> & {
-  /**
-   * @generated from field: integrations.v1.ExtensionConfig extension = 1;
-   */
-  extension?: ExtensionConfig;
-};
-
-/**
- * Describes the message integrations.v1.GetExtensionResponse.
- * Use `create(GetExtensionResponseSchema)` to create a new message.
- */
-export declare const GetExtensionResponseSchema: GenMessage<GetExtensionResponse>;
-
-/**
- * @generated from message integrations.v1.UpsertExtensionRequest
- */
-export declare type UpsertExtensionRequest = Message<"integrations.v1.UpsertExtensionRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: integrations.v1.ExtensionConfig config = 2;
-   */
-  config?: ExtensionConfig;
-};
-
-/**
- * Describes the message integrations.v1.UpsertExtensionRequest.
- * Use `create(UpsertExtensionRequestSchema)` to create a new message.
- */
-export declare const UpsertExtensionRequestSchema: GenMessage<UpsertExtensionRequest>;
-
-/**
- * @generated from message integrations.v1.UpsertExtensionResponse
- */
-export declare type UpsertExtensionResponse = Message<"integrations.v1.UpsertExtensionResponse"> & {
-  /**
-   * @generated from field: integrations.v1.ExtensionConfig config = 1;
-   */
-  config?: ExtensionConfig;
-};
-
-/**
- * Describes the message integrations.v1.UpsertExtensionResponse.
- * Use `create(UpsertExtensionResponseSchema)` to create a new message.
- */
-export declare const UpsertExtensionResponseSchema: GenMessage<UpsertExtensionResponse>;
-
-/**
- * @generated from message integrations.v1.DeleteExtensionRequest
- */
-export declare type DeleteExtensionRequest = Message<"integrations.v1.DeleteExtensionRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.DeleteExtensionRequest.
- * Use `create(DeleteExtensionRequestSchema)` to create a new message.
- */
-export declare const DeleteExtensionRequestSchema: GenMessage<DeleteExtensionRequest>;
-
-/**
- * @generated from message integrations.v1.DeleteExtensionResponse
- */
-export declare type DeleteExtensionResponse = Message<"integrations.v1.DeleteExtensionResponse"> & {
-};
-
-/**
- * Describes the message integrations.v1.DeleteExtensionResponse.
- * Use `create(DeleteExtensionResponseSchema)` to create a new message.
- */
-export declare const DeleteExtensionResponseSchema: GenMessage<DeleteExtensionResponse>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationStatusRequest
- */
-export declare type GetIntegrationStatusRequest = Message<"integrations.v1.GetIntegrationStatusRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationStatusRequest.
- * Use `create(GetIntegrationStatusRequestSchema)` to create a new message.
- */
-export declare const GetIntegrationStatusRequestSchema: GenMessage<GetIntegrationStatusRequest>;
-
-/**
- * @generated from message integrations.v1.GetIntegrationStatusResponse
- */
-export declare type GetIntegrationStatusResponse = Message<"integrations.v1.GetIntegrationStatusResponse"> & {
-  /**
-   * @generated from field: optional integrations.v1.IntegrationStatus status = 1;
-   */
-  status?: IntegrationStatus;
-
-  /**
-   * @generated from field: google.protobuf.Timestamp updated_at = 2;
-   */
-  updatedAt?: Timestamp;
-
-  /**
-   * @generated from field: optional string updated_by_jti = 3;
-   */
-  updatedByJti?: string;
-};
-
-/**
- * Describes the message integrations.v1.GetIntegrationStatusResponse.
- * Use `create(GetIntegrationStatusResponseSchema)` to create a new message.
- */
-export declare const GetIntegrationStatusResponseSchema: GenMessage<GetIntegrationStatusResponse>;
-
-/**
- * Write path for integration_status. Called by the gateway's status
- * resolver on behalf of scoped-token middleware callers after a sync
- * cycle. The handler accepts either an admin session or a scoped token
- * carrying status:write, and pulls tenant from the caller's context.
- *
- * Fields are flat to avoid dragging the SubscriptionHealth / AuthStatus
- * enums into the write shape — middleware reports these as free-text
- * strings that the resolver maps 1:1 to integration_status rows.
- *
- * @generated from message integrations.v1.UpsertIntegrationStatusRequest
- */
-export declare type UpsertIntegrationStatusRequest = Message<"integrations.v1.UpsertIntegrationStatusRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string integration_name = 2;
-   */
-  integrationName: string;
-
-  /**
-   * @generated from field: optional google.protobuf.Timestamp last_sync_at = 3;
-   */
-  lastSyncAt?: Timestamp;
-
-  /**
-   * @generated from field: optional int64 last_sync_duration_ms = 4;
-   */
-  lastSyncDurationMs?: bigint;
-
-  /**
-   * @generated from field: optional int64 last_sync_record_count = 5;
-   */
-  lastSyncRecordCount?: bigint;
-
-  /**
-   * @generated from field: optional string last_error = 6;
-   */
-  lastError?: string;
-
-  /**
-   * @generated from field: optional google.protobuf.Timestamp last_error_at = 7;
-   */
-  lastErrorAt?: Timestamp;
-
-  /**
-   * @generated from field: optional string subscription_health = 8;
-   */
-  subscriptionHealth?: string;
-
-  /**
-   * @generated from field: optional string auth_status = 9;
-   */
-  authStatus?: string;
-
-  /**
-   * @generated from field: optional string deletion_strategy = 10;
-   */
-  deletionStrategy?: string;
-
-  /**
-   * @generated from field: optional google.protobuf.Struct extra = 11;
-   */
-  extra?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.UpsertIntegrationStatusRequest.
- * Use `create(UpsertIntegrationStatusRequestSchema)` to create a new message.
- */
-export declare const UpsertIntegrationStatusRequestSchema: GenMessage<UpsertIntegrationStatusRequest>;
-
-/**
- * @generated from message integrations.v1.UpsertIntegrationStatusResponse
- */
-export declare type UpsertIntegrationStatusResponse = Message<"integrations.v1.UpsertIntegrationStatusResponse"> & {
-  /**
-   * @generated from field: google.protobuf.Timestamp updated_at = 1;
-   */
-  updatedAt?: Timestamp;
-};
-
-/**
- * Describes the message integrations.v1.UpsertIntegrationStatusResponse.
- * Use `create(UpsertIntegrationStatusResponseSchema)` to create a new message.
- */
-export declare const UpsertIntegrationStatusResponseSchema: GenMessage<UpsertIntegrationStatusResponse>;
-
-/**
- * Flow 2 ("manual trigger") in the doc. Mints a 30-minute scoped token with
- * the same capability set a webhook delivery would carry and POSTs it to
- * `${middleware.url}/trigger`. The RPC does NOT block on sync completion —
- * it returns the middleware's immediate response (typically a 202) and the
- * middleware reports progress via the existing status endpoint.
- *
- * @generated from message integrations.v1.TriggerSyncRequest
- */
-export declare type TriggerSyncRequest = Message<"integrations.v1.TriggerSyncRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string name = 2;
-   */
-  name: string;
-};
-
-/**
- * Describes the message integrations.v1.TriggerSyncRequest.
- * Use `create(TriggerSyncRequestSchema)` to create a new message.
- */
-export declare const TriggerSyncRequestSchema: GenMessage<TriggerSyncRequest>;
-
-/**
- * @generated from message integrations.v1.TriggerSyncResponse
- */
-export declare type TriggerSyncResponse = Message<"integrations.v1.TriggerSyncResponse"> & {
-  /**
-   * @generated from field: int32 middleware_http_status = 1;
-   */
-  middlewareHttpStatus: number;
-
-  /**
-   * @generated from field: string middleware_body = 2;
-   */
-  middlewareBody: string;
-
-  /**
-   * @generated from field: google.protobuf.Timestamp triggered_at = 3;
-   */
-  triggeredAt?: Timestamp;
-
-  /**
-   * JTI of the scoped token minted for this trigger. Logged on auth_events
-   * with source=manual_trigger and propagated through the middleware's
-   * subsequent callbacks so the admin UI can correlate.
-   *
-   * @generated from field: string token_jti = 4;
-   */
-  tokenJti: string;
-};
-
-/**
- * Describes the message integrations.v1.TriggerSyncResponse.
- * Use `create(TriggerSyncResponseSchema)` to create a new message.
- */
-export declare const TriggerSyncResponseSchema: GenMessage<TriggerSyncResponse>;
-
-/**
- * Structured validation result. Runs protovalidate-go on the submitted config
- * plus the DB-level cross-reference checks (model existence, field presence,
- * dimension/locale/permission resolution) that protovalidate can't express
- * without DB access.
- *
- * @generated from message integrations.v1.ValidationIssue
- */
-export declare type ValidationIssue = Message<"integrations.v1.ValidationIssue"> & {
-  /**
-   * Dotted field path into the submitted config, e.g.
-   * "integrations.shopify-storefront.sync.product.model". May be empty for
-   * root-level issues.
-   *
-   * @generated from field: string field_path = 1;
-   */
-  fieldPath: string;
-
-  /**
-   * @generated from field: string message = 2;
-   */
-  message: string;
-};
-
-/**
- * Describes the message integrations.v1.ValidationIssue.
- * Use `create(ValidationIssueSchema)` to create a new message.
- */
-export declare const ValidationIssueSchema: GenMessage<ValidationIssue>;
-
-/**
- * @generated from message integrations.v1.ValidateConfigRequest
- */
-export declare type ValidateConfigRequest = Message<"integrations.v1.ValidateConfigRequest"> & {
-  /**
-   * Full config blob (the same shape foir push sends to ApplyConfig). Runs
-   * the full validation pipeline without writing anything.
-   *
-   * @generated from field: google.protobuf.Struct config = 1;
-   */
-  config?: JsonObject;
-};
-
-/**
- * Describes the message integrations.v1.ValidateConfigRequest.
- * Use `create(ValidateConfigRequestSchema)` to create a new message.
- */
-export declare const ValidateConfigRequestSchema: GenMessage<ValidateConfigRequest>;
-
-/**
- * @generated from message integrations.v1.ValidateConfigResponse
- */
-export declare type ValidateConfigResponse = Message<"integrations.v1.ValidateConfigResponse"> & {
-  /**
-   * @generated from field: repeated integrations.v1.ValidationIssue errors = 1;
-   */
-  errors: ValidationIssue[];
-
-  /**
-   * @generated from field: repeated integrations.v1.ValidationIssue warnings = 2;
-   */
-  warnings: ValidationIssue[];
-};
-
-/**
- * Describes the message integrations.v1.ValidateConfigResponse.
- * Use `create(ValidateConfigResponseSchema)` to create a new message.
- */
-export declare const ValidateConfigResponseSchema: GenMessage<ValidateConfigResponse>;
-
-/**
- * Entry in the project's last-applied config history. The full raw JSON is
- * fetched separately via GetConfigHistoryEntry so the list page doesn't carry
- * per-row blobs that can be tens of KB each.
- *
- * @generated from message integrations.v1.ConfigHistoryEntry
- */
-export declare type ConfigHistoryEntry = Message<"integrations.v1.ConfigHistoryEntry"> & {
-  /**
-   * @generated from field: string id = 1;
-   */
-  id: string;
-
-  /**
-   * @generated from field: google.protobuf.Timestamp pushed_at = 2;
-   */
-  pushedAt?: Timestamp;
-
-  /**
-   * Free-text identity of who pushed — admin user id for admin-session
-   * pushes, "foir push (CLI)" for CLI pushes, "api:<client_id>" for machine.
-   *
-   * @generated from field: string pushed_by = 3;
-   */
-  pushedBy: string;
-
-  /**
-   * Lowercase source label for filter UIs: "cli", "admin", "api".
-   *
-   * @generated from field: string source = 4;
-   */
-  source: string;
-
-  /**
-   * @generated from field: bool ok = 5;
-   */
-  ok: boolean;
-
-  /**
-   * One-line summary: "4 models, 1 integration" or "error: model foo missing".
-   *
-   * @generated from field: string result_summary = 6;
-   */
-  resultSummary: string;
-
-  /**
-   * @generated from field: bool has_diff = 7;
-   */
-  hasDiff: boolean;
-};
-
-/**
- * Describes the message integrations.v1.ConfigHistoryEntry.
- * Use `create(ConfigHistoryEntrySchema)` to create a new message.
- */
-export declare const ConfigHistoryEntrySchema: GenMessage<ConfigHistoryEntry>;
-
-/**
- * @generated from message integrations.v1.ListConfigHistoryRequest
- */
-export declare type ListConfigHistoryRequest = Message<"integrations.v1.ListConfigHistoryRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * Optional page size. Server-side cap of 200, default 50.
-   *
-   * @generated from field: int32 limit = 2;
-   */
-  limit: number;
-
-  /**
-   * Opaque cursor from the previous response's next_cursor. Empty for first
-   * page.
-   *
-   * @generated from field: string cursor = 3;
-   */
-  cursor: string;
-};
-
-/**
- * Describes the message integrations.v1.ListConfigHistoryRequest.
- * Use `create(ListConfigHistoryRequestSchema)` to create a new message.
- */
-export declare const ListConfigHistoryRequestSchema: GenMessage<ListConfigHistoryRequest>;
-
-/**
- * @generated from message integrations.v1.ListConfigHistoryResponse
- */
-export declare type ListConfigHistoryResponse = Message<"integrations.v1.ListConfigHistoryResponse"> & {
-  /**
-   * @generated from field: repeated integrations.v1.ConfigHistoryEntry entries = 1;
-   */
-  entries: ConfigHistoryEntry[];
-
-  /**
-   * Empty string when there are no more entries.
-   *
-   * @generated from field: string next_cursor = 2;
-   */
-  nextCursor: string;
-};
-
-/**
- * Describes the message integrations.v1.ListConfigHistoryResponse.
- * Use `create(ListConfigHistoryResponseSchema)` to create a new message.
- */
-export declare const ListConfigHistoryResponseSchema: GenMessage<ListConfigHistoryResponse>;
-
-/**
- * @generated from message integrations.v1.GetConfigHistoryEntryRequest
- */
-export declare type GetConfigHistoryEntryRequest = Message<"integrations.v1.GetConfigHistoryEntryRequest"> & {
-  /**
-   * @generated from field: string project_id = 1;
-   */
-  projectId: string;
-
-  /**
-   * @generated from field: string id = 2;
-   */
-  id: string;
-};
-
-/**
- * Describes the message integrations.v1.GetConfigHistoryEntryRequest.
- * Use `create(GetConfigHistoryEntryRequestSchema)` to create a new message.
- */
-export declare const GetConfigHistoryEntryRequestSchema: GenMessage<GetConfigHistoryEntryRequest>;
-
-/**
- * @generated from message integrations.v1.GetConfigHistoryEntryResponse
- */
-export declare type GetConfigHistoryEntryResponse = Message<"integrations.v1.GetConfigHistoryEntryResponse"> & {
-  /**
-   * @generated from field: integrations.v1.ConfigHistoryEntry entry = 1;
-   */
-  entry?: ConfigHistoryEntry;
-
-  /**
-   * Raw applied config blob. Populated only by this RPC.
-   *
-   * @generated from field: google.protobuf.Struct config_json = 2;
-   */
-  configJson?: JsonObject;
-
-  /**
-   * Unified-diff style text against the previous entry, precomputed at
-   * write time. Empty if this was the first entry for the project.
-   *
-   * @generated from field: string diff_from_previous = 3;
-   */
-  diffFromPrevious: string;
-};
-
-/**
- * Describes the message integrations.v1.GetConfigHistoryEntryResponse.
- * Use `create(GetConfigHistoryEntryResponseSchema)` to create a new message.
- */
-export declare const GetConfigHistoryEntryResponseSchema: GenMessage<GetConfigHistoryEntryResponse>;
-
-/**
- * Credential strategies the middleware uses when talking to the external
- * service. Drives which authorization flow the admin UI renders.
- *
- * @generated from enum integrations.v1.CredentialStrategy
- */
-export enum CredentialStrategy {
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_UNSPECIFIED = 0;
-   */
-  UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_OAUTH = 1;
-   */
-  OAUTH = 1,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_API_KEY = 2;
-   */
-  API_KEY = 2,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_SHARED_SECRET = 3;
-   */
-  SHARED_SECRET = 3,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_SSH_KEY = 4;
-   */
-  SSH_KEY = 4,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_NONE = 5;
-   */
-  NONE = 5,
-
-  /**
-   * @generated from enum value: CREDENTIAL_STRATEGY_MANAGED = 6;
-   */
-  MANAGED = 6,
-}
-
-/**
- * Describes the enum integrations.v1.CredentialStrategy.
- */
-export declare const CredentialStrategySchema: GenEnum<CredentialStrategy>;
-
-/**
- * Subscription health reported by the middleware for the external-service
- * webhook subscription this integration depends on.
- *
- * @generated from enum integrations.v1.SubscriptionHealth
- */
-export enum SubscriptionHealth {
-  /**
-   * @generated from enum value: SUBSCRIPTION_HEALTH_UNSPECIFIED = 0;
-   */
-  UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: SUBSCRIPTION_HEALTH_OK = 1;
-   */
-  OK = 1,
-
-  /**
-   * @generated from enum value: SUBSCRIPTION_HEALTH_STALE = 2;
-   */
-  STALE = 2,
-
-  /**
-   * @generated from enum value: SUBSCRIPTION_HEALTH_BROKEN = 3;
-   */
-  BROKEN = 3,
-}
-
-/**
- * Describes the enum integrations.v1.SubscriptionHealth.
- */
-export declare const SubscriptionHealthSchema: GenEnum<SubscriptionHealth>;
-
-/**
- * Auth status reported by the middleware for the external-service credentials.
- *
- * @generated from enum integrations.v1.AuthStatus
- */
-export enum AuthStatus {
-  /**
-   * @generated from enum value: AUTH_STATUS_UNSPECIFIED = 0;
-   */
-  UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: AUTH_STATUS_OK = 1;
-   */
-  OK = 1,
-
-  /**
-   * @generated from enum value: AUTH_STATUS_EXPIRED = 2;
-   */
-  EXPIRED = 2,
-
-  /**
-   * @generated from enum value: AUTH_STATUS_REVOKED = 3;
-   */
-  REVOKED = 3,
-}
-
-/**
- * Describes the enum integrations.v1.AuthStatus.
- */
-export declare const AuthStatusSchema: GenEnum<AuthStatus>;
-
-/**
- * @generated from enum integrations.v1.ExtensionTarget
- */
-export enum ExtensionTarget {
-  /**
-   * @generated from enum value: EXTENSION_TARGET_UNSPECIFIED = 0;
-   */
-  UNSPECIFIED = 0,
-
-  /**
-   * @generated from enum value: EXTENSION_TARGET_RECORD = 1;
-   */
-  RECORD = 1,
-
-  /**
-   * @generated from enum value: EXTENSION_TARGET_MODEL_LIST = 2;
-   */
-  MODEL_LIST = 2,
-}
-
-/**
- * Describes the enum integrations.v1.ExtensionTarget.
- */
-export declare const ExtensionTargetSchema: GenEnum<ExtensionTarget>;
-
-/**
- * @generated from service integrations.v1.IntegrationCredentialsService
- */
-export declare const IntegrationCredentialsService: GenService<{
-  /**
-   * Return the plaintext credential for (project, integration). Requires
-   * the caller's capability set to include credentials:read for this
-   * integration. On success, updates last_read_at and emits an audit row.
-   *
-   * @generated from rpc integrations.v1.IntegrationCredentialsService.GetIntegrationCredential
-   */
-  getIntegrationCredential: {
-    methodKind: "unary";
-    input: typeof GetIntegrationCredentialRequestSchema;
-    output: typeof GetIntegrationCredentialResponseSchema;
-  },
-  /**
-   * Encrypt and store a credential for (project, integration). Overwrites
-   * any existing value. Requires the caller's capability set to include
-   * credentials:write for this integration. Emits an audit row of kind
-   * credential_write.
-   *
-   * @generated from rpc integrations.v1.IntegrationCredentialsService.WriteIntegrationCredential
-   */
-  writeIntegrationCredential: {
-    methodKind: "unary";
-    input: typeof WriteIntegrationCredentialRequestSchema;
-    output: typeof WriteIntegrationCredentialResponseSchema;
-  },
-}>;
-
-/**
- * @generated from service integrations.v1.IntegrationAuthService
- */
-export declare const IntegrationAuthService: GenService<{
-  /**
-   * Create a single-use exchange ticket for the given (project, integration)
-   * with capability credentials:write. The admin caller must have
-   * TENANT_OWNER / PROJECT_ADMIN (or be a platform admin) for the target
-   * project. Emits an auth_events row of kind ticket_issue.
-   *
-   * @generated from rpc integrations.v1.IntegrationAuthService.IssueExchangeTicket
-   */
-  issueExchangeTicket: {
-    methodKind: "unary";
-    input: typeof IssueExchangeTicketRequestSchema;
-    output: typeof IssueExchangeTicketResponseSchema;
-  },
-  /**
-   * Atomically redeem a ticket and return the resolved subject.
-   *
-   * @generated from rpc integrations.v1.IntegrationAuthService.RedeemExchangeTicket
-   */
-  redeemExchangeTicket: {
-    methodKind: "unary";
-    input: typeof RedeemExchangeTicketRequestSchema;
-    output: typeof RedeemExchangeTicketResponseSchema;
-  },
-}>;
-
-/**
- * @generated from service integrations.v1.IntegrationsService
- */
-export declare const IntegrationsService: GenService<{
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.ListIntegrations
-   */
-  listIntegrations: {
-    methodKind: "unary";
-    input: typeof ListIntegrationsRequestSchema;
-    output: typeof ListIntegrationsResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.GetIntegration
-   */
-  getIntegration: {
-    methodKind: "unary";
-    input: typeof GetIntegrationRequestSchema;
-    output: typeof GetIntegrationResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.UpsertIntegration
-   */
-  upsertIntegration: {
-    methodKind: "unary";
-    input: typeof UpsertIntegrationRequestSchema;
-    output: typeof UpsertIntegrationResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.DeleteIntegration
-   */
-  deleteIntegration: {
-    methodKind: "unary";
-    input: typeof DeleteIntegrationRequestSchema;
-    output: typeof DeleteIntegrationResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.ListExtensions
-   */
-  listExtensions: {
-    methodKind: "unary";
-    input: typeof ListExtensionsRequestSchema;
-    output: typeof ListExtensionsResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.GetExtension
-   */
-  getExtension: {
-    methodKind: "unary";
-    input: typeof GetExtensionRequestSchema;
-    output: typeof GetExtensionResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.UpsertExtension
-   */
-  upsertExtension: {
-    methodKind: "unary";
-    input: typeof UpsertExtensionRequestSchema;
-    output: typeof UpsertExtensionResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.DeleteExtension
-   */
-  deleteExtension: {
-    methodKind: "unary";
-    input: typeof DeleteExtensionRequestSchema;
-    output: typeof DeleteExtensionResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.GetIntegrationStatus
-   */
-  getIntegrationStatus: {
-    methodKind: "unary";
-    input: typeof GetIntegrationStatusRequestSchema;
-    output: typeof GetIntegrationStatusResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.UpsertIntegrationStatus
-   */
-  upsertIntegrationStatus: {
-    methodKind: "unary";
-    input: typeof UpsertIntegrationStatusRequestSchema;
-    output: typeof UpsertIntegrationStatusResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.TriggerSync
-   */
-  triggerSync: {
-    methodKind: "unary";
-    input: typeof TriggerSyncRequestSchema;
-    output: typeof TriggerSyncResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.ValidateConfig
-   */
-  validateConfig: {
-    methodKind: "unary";
-    input: typeof ValidateConfigRequestSchema;
-    output: typeof ValidateConfigResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.ListConfigHistory
-   */
-  listConfigHistory: {
-    methodKind: "unary";
-    input: typeof ListConfigHistoryRequestSchema;
-    output: typeof ListConfigHistoryResponseSchema;
-  },
-  /**
-   * @generated from rpc integrations.v1.IntegrationsService.GetConfigHistoryEntry
-   */
-  getConfigHistoryEntry: {
-    methodKind: "unary";
-    input: typeof GetConfigHistoryEntryRequestSchema;
-    output: typeof GetConfigHistoryEntryResponseSchema;
-  },
-}>;
-