@peernova/cuneiform-sf 1.0.2 → 1.0.4-beta.8

package/lib/services/UnconfigureMode.d.ts

@@ -0,0 +1,74 @@
+import type { ServiceResult } from '../models/service-result.js';
+import { type UserConfigurationResult, type IConfigurationServiceDeps } from './UserConfigurationTypes.js';
+/**
+ * Handles the unconfigure workflow for UserConfigurationService.
+ *
+ * Reverses the actions of configure: unassigns permission sets and
+ * disables API-only profiling. Supports idempotent operation — running
+ * unconfigure on an already-unconfigured user produces skip results.
+ *
+ * This class is instantiated by UserConfigurationService and should not be
+ * used directly by consumers.
+ */
+export declare class UnconfigureMode {
+    private readonly deps;
+    constructor(deps: IConfigurationServiceDeps);
+    /**
+     * Creates an empty UserConfigurationResult for error cases.
+     */
+    private static createEmptyConfigurationResult;
+    /**
+     * Builds the configuration state from readiness check.
+     */
+    private static buildConfigurationState;
+    /**
+     * Builds the list of unconfiguration actions (reverse of configure actions).
+     */
+    private static buildUnconfigurationActions;
+    /**
+     * Creates the result when Cuneiform is not installed.
+     */
+    private static createCuneiformNotInstalledResult;
+    /**
+     * Orchestrates user unconfiguration — reverses the actions of configure().
+     *
+     * Checks the current user state, identifies configuration items to reverse
+     * (permission set unassignment, API-only profiling disable), and applies them.
+     *
+     * **Idempotency**: Skips already-unconfigured items. Re-running unconfigure() on
+     * an unconfigured user will report all actions as 'skipped'.
+     *
+     * @param userId - The Salesforce user ID to unconfigure
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    execute(userId: string): Promise<ServiceResult<UserConfigurationResult>>;
+    /**
+     * Executes a single permission set unassignment action.
+     * Queries for the PermissionSetAssignment record and deletes it.
+     */
+    private executePermissionSetUnassignAction;
+    /**
+     * Executes a single disable API-only profiling action.
+     */
+    private executeDisableApiOnlyProfilingAction;
+    /**
+     * Executes all unconfiguration actions sequentially.
+     */
+    private executeUnconfigurationActions;
+    /**
+     * Fetches user readiness state and user info in parallel.
+     */
+    private fetchUserReadinessState;
+    /**
+     * Fetches the updated configuration state after applying changes.
+     */
+    private fetchUpdatedState;
+    /**
+     * Builds the final configuration result based on execution outcomes.
+     */
+    private buildConfigurationResult;
+    /**
+     * Creates the result when no changes are needed.
+     */
+    private createNoChangesResult;
+}

package/lib/services/UnconfigureMode.js

@@ -0,0 +1,378 @@
+/*
+ * Copyright (c) 2026, PeerNova, Inc. All Rights Reserved.
+ * PROPRIETARY AND CONFIDENTIAL. Unauthorized copying, modification,
+ * or distribution is strictly prohibited. Use is governed by the
+ * Master Subscription Agreement (MSA) between PeerNova, Inc. and the
+ * licensee. See LICENSE file in the repo root.
+ */
+import { createSuccessResult, createFailureResult } from '../models/service-result.js';
+import { ServiceErrorCodes } from '../adapters/errors.js';
+import { CuneiformQueryBuilder } from '../adapters/soql/cuneiform-query-builder.js';
+import { CUNEIFORM_NAMESPACE } from './namespace-constants.js';
+import { validateRequiredString } from './validation.js';
+import { REQUIRED_PERMISSION_SETS, REQUIRED_PERMISSION_SET_LABELS } from './UserReadinessService.js';
+import { CONFIGURABLE_PERMISSION_SETS, } from './UserConfigurationTypes.js';
+/**
+ * Handles the unconfigure workflow for UserConfigurationService.
+ *
+ * Reverses the actions of configure: unassigns permission sets and
+ * disables API-only profiling. Supports idempotent operation — running
+ * unconfigure on an already-unconfigured user produces skip results.
+ *
+ * This class is instantiated by UserConfigurationService and should not be
+ * used directly by consumers.
+ */
+export class UnconfigureMode {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    // ============================================================================
+    // Static helpers
+    // ============================================================================
+    /**
+     * Creates an empty UserConfigurationResult for error cases.
+     */
+    static createEmptyConfigurationResult(userId, username = '') {
+        return {
+            user: { id: userId, username },
+            dryRun: false,
+            previousState: {
+                userId,
+                username,
+                hasRequiredPermissionSets: false,
+                missingPermissionSets: [...REQUIRED_PERMISSION_SETS],
+                apiOnlyProfilingEnabled: false,
+            },
+            actions: [],
+            currentState: null,
+            summary: {
+                changesRequired: 0,
+                changesApplied: 0,
+                changesFailed: 0,
+                isReady: false,
+            },
+        };
+    }
+    /**
+     * Builds the configuration state from readiness check.
+     */
+    static buildConfigurationState(userId, username, readiness) {
+        return {
+            userId,
+            username,
+            hasRequiredPermissionSets: readiness.permissionSets.hasAllRequired,
+            missingPermissionSets: readiness.permissionSets.missingRequired,
+            apiOnlyProfilingEnabled: readiness.configProfile.apiOnlyProfilingEnabled ?? false,
+            profileDeveloperName: readiness.configProfile.profileDeveloperName,
+        };
+    }
+    /**
+     * Builds the list of unconfiguration actions (reverse of configure actions).
+     */
+    static buildUnconfigurationActions(currentState) {
+        const actions = [];
+        // Find configurable permission sets that ARE assigned (reverse: unassign them)
+        const assignedConfigurable = CONFIGURABLE_PERMISSION_SETS.filter((ps) => !currentState.missingPermissionSets.includes(ps));
+        for (const assignedPerm of assignedConfigurable) {
+            actions.push({
+                type: 'unassignPermissionSet',
+                target: assignedPerm,
+                targetLabel: REQUIRED_PERMISSION_SET_LABELS[assignedPerm],
+                status: 'applied',
+            });
+        }
+        // If API-only profiling IS enabled, add disable action
+        if (currentState.apiOnlyProfilingEnabled && currentState.profileDeveloperName) {
+            actions.push({
+                type: 'disableApiOnlyProfiling',
+                target: currentState.profileDeveloperName,
+                status: 'applied',
+            });
+        }
+        return actions;
+    }
+    /**
+     * Creates the result when Cuneiform is not installed.
+     */
+    static createCuneiformNotInstalledResult(userId, username, previousState, startTime) {
+        return createFailureResult({
+            user: { id: userId, username },
+            dryRun: false,
+            previousState,
+            actions: [],
+            currentState: null,
+            summary: { changesRequired: 0, changesApplied: 0, changesFailed: 0, isReady: false },
+        }, ServiceErrorCodes.USER_CUNEIFORM_NAMESPACE_NOT_FOUND, 'Cuneiform for Salesforce is not installed in this org', { metadata: { duration: Date.now() - startTime } });
+    }
+    /**
+     * Orchestrates user unconfiguration — reverses the actions of configure().
+     *
+     * Checks the current user state, identifies configuration items to reverse
+     * (permission set unassignment, API-only profiling disable), and applies them.
+     *
+     * **Idempotency**: Skips already-unconfigured items. Re-running unconfigure() on
+     * an unconfigured user will report all actions as 'skipped'.
+     *
+     * @param userId - The Salesforce user ID to unconfigure
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    async execute(userId) {
+        const startTime = Date.now();
+        // Validate userId
+        const validationError = validateRequiredString(userId, 'User ID');
+        if (validationError) {
+            return createFailureResult(UnconfigureMode.createEmptyConfigurationResult(userId), ServiceErrorCodes.USER_CONFIG_USER_ID_REQUIRED, validationError, { metadata: { duration: Date.now() - startTime } });
+        }
+        try {
+            this.deps.logger?.log(`Unconfiguring user: ${userId}`);
+            // Step 1: Get current user readiness state
+            const { readiness: rawReadiness, username, errorResult } = await this.fetchUserReadinessState(userId, startTime);
+            if (errorResult)
+                return errorResult;
+            // readiness is guaranteed non-undefined when errorResult is null
+            const readiness = rawReadiness;
+            const previousState = UnconfigureMode.buildConfigurationState(userId, username, readiness);
+            // Check if Cuneiform is installed
+            if (!readiness.isCuneiformInstalled) {
+                return UnconfigureMode.createCuneiformNotInstalledResult(userId, username, previousState, startTime);
+            }
+            // Step 2: Identify unconfiguration actions
+            const actions = UnconfigureMode.buildUnconfigurationActions(previousState);
+            const changesRequired = actions.length;
+            // No changes needed — already unconfigured
+            if (changesRequired === 0) {
+                return this.createNoChangesResult(userId, username, previousState, actions, changesRequired, readiness.isReady, startTime);
+            }
+            // Step 3: Execute unconfiguration actions
+            const { changesApplied, changesFailed } = await this.executeUnconfigurationActions(actions, userId);
+            // Step 4: Get updated state
+            const currentState = await this.fetchUpdatedState(userId, username, changesApplied);
+            return this.buildConfigurationResult(userId, username, previousState, actions, currentState, changesRequired, changesApplied, changesFailed, Date.now() - startTime);
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            this.deps.logger?.log(`Unconfiguration failed: ${errorMessage}`);
+            return createFailureResult(UnconfigureMode.createEmptyConfigurationResult(userId), ServiceErrorCodes.USER_CONFIG_QUERY_FAILED, errorMessage, { metadata: { duration: Date.now() - startTime } });
+        }
+    }
+    // ============================================================================
+    // Private instance helpers
+    // ============================================================================
+    /**
+     * Executes a single permission set unassignment action.
+     * Queries for the PermissionSetAssignment record and deletes it.
+     */
+    async executePermissionSetUnassignAction(action, userId) {
+        // First, find the permission set ID
+        const permSetIdResult = await this.deps.getPermissionSetId(action.target, CUNEIFORM_NAMESPACE);
+        if (!permSetIdResult.success || !permSetIdResult.data) {
+            return {
+                applied: false,
+                failed: true,
+                update: {
+                    status: 'failed',
+                    message: permSetIdResult.message ?? 'Permission set not found',
+                },
+            };
+        }
+        // Query for the PermissionSetAssignment record
+        try {
+            const soql = new CuneiformQueryBuilder()
+                .select(['Id'])
+                .from('PermissionSetAssignment')
+                .where('AssigneeId', '=', userId)
+                .andWhere('PermissionSetId', '=', permSetIdResult.data)
+                .limit(1)
+                .toSOQL();
+            const queryResult = await this.deps.soqlAdapter.query(soql);
+            if (!queryResult.success || queryResult.data.records.length === 0) {
+                // Already unassigned — idempotent skip
+                return {
+                    applied: false,
+                    failed: false,
+                    update: { status: 'skipped', message: 'Permission set already unassigned' },
+                };
+            }
+            const assignmentId = queryResult.data.records[0].Id;
+            const deleteResult = await this.deps.restApiAdapter.deleteRecord('PermissionSetAssignment', assignmentId);
+            if (!deleteResult.success) {
+                return {
+                    applied: false,
+                    failed: true,
+                    update: {
+                        status: 'failed',
+                        message: deleteResult.message ?? 'Failed to delete permission set assignment',
+                    },
+                };
+            }
+            return {
+                applied: true,
+                failed: false,
+                update: {
+                    status: 'applied',
+                    message: 'Permission set unassigned',
+                    details: { permissionSetAssignmentId: assignmentId },
+                },
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return {
+                applied: false,
+                failed: true,
+                update: { status: 'failed', message: errorMessage },
+            };
+        }
+    }
+    /**
+     * Executes a single disable API-only profiling action.
+     */
+    async executeDisableApiOnlyProfilingAction(action) {
+        const deployResult = await this.deps.disableApiOnlyProfiling(action.target);
+        if (!deployResult.success) {
+            return {
+                applied: false,
+                failed: true,
+                update: {
+                    status: 'failed',
+                    message: deployResult.message ?? 'Failed to disable API-only profiling',
+                },
+            };
+        }
+        const update = {
+            status: 'applied',
+            message: 'API-only profiling disable deployment triggered',
+        };
+        if (deployResult.data.jobId) {
+            update.details = { deploymentJobId: deployResult.data.jobId };
+            // Wait for deployment to complete so state is consistent for subsequent operations
+            const completionResult = await this.deps.waitForDeploymentCompletion(deployResult.data.jobId);
+            if (completionResult.success && completionResult.data.status === 'Failed') {
+                return {
+                    applied: false,
+                    failed: true,
+                    update: {
+                        status: 'failed',
+                        message: completionResult.data.errorMessage ?? 'CMT disable deployment failed',
+                        details: { deploymentJobId: deployResult.data.jobId },
+                    },
+                };
+            }
+            update.message = `API-only profiling disable deployment ${completionResult.data.status.toLowerCase()}`;
+        }
+        return { applied: true, failed: false, update };
+    }
+    /**
+     * Executes all unconfiguration actions sequentially.
+     */
+    async executeUnconfigurationActions(actions, userId) {
+        let changesApplied = 0;
+        let changesFailed = 0;
+        /* eslint-disable no-await-in-loop -- Sequential execution required for unconfiguration */
+        for (const [i, action] of actions.entries()) {
+            const result = action.type === 'unassignPermissionSet'
+                ? await this.executePermissionSetUnassignAction(action, userId)
+                : await this.executeDisableApiOnlyProfilingAction(action);
+            Object.assign(actions[i], result.update);
+            if (result.applied)
+                changesApplied++;
+            if (result.failed)
+                changesFailed++;
+        }
+        /* eslint-enable no-await-in-loop */
+        return { changesApplied, changesFailed };
+    }
+    /**
+     * Fetches user readiness state and user info in parallel.
+     */
+    async fetchUserReadinessState(userId, startTime) {
+        const [readinessResult, userInfoResult] = await Promise.all([
+            this.deps.userReadinessService.checkReadiness(userId),
+            this.deps.userReadinessService.getUserInfo(userId),
+        ]);
+        if (!readinessResult.success) {
+            return {
+                readiness: undefined,
+                username: '',
+                errorResult: createFailureResult(UnconfigureMode.createEmptyConfigurationResult(userId), readinessResult.errorCode ?? ServiceErrorCodes.USER_CONFIG_QUERY_FAILED, readinessResult.message ?? 'Failed to check user readiness', { metadata: { duration: Date.now() - startTime } }),
+            };
+        }
+        return {
+            readiness: readinessResult.data,
+            username: userInfoResult.success ? userInfoResult.data.username : '',
+            errorResult: null,
+        };
+    }
+    /**
+     * Fetches the updated configuration state after applying changes.
+     */
+    async fetchUpdatedState(userId, username, changesApplied) {
+        if (changesApplied === 0)
+            return null;
+        const updatedReadinessResult = await this.deps.userReadinessService.checkReadiness(userId);
+        if (!updatedReadinessResult.success)
+            return null;
+        return UnconfigureMode.buildConfigurationState(userId, username, updatedReadinessResult.data);
+    }
+    /**
+     * Builds the final configuration result based on execution outcomes.
+     */
+    buildConfigurationResult(userId, username, previousState, actions, currentState, changesRequired, changesApplied, changesFailed, duration) {
+        const isReady = currentState?.hasRequiredPermissionSets === true && currentState?.apiOnlyProfilingEnabled === true;
+        const result = {
+            user: { id: userId, username },
+            dryRun: false,
+            previousState,
+            actions,
+            currentState,
+            summary: { changesRequired, changesApplied, changesFailed, isReady },
+        };
+        // All changes failed
+        if (changesFailed > 0 && changesApplied === 0) {
+            this.deps.logger?.log(`Configuration failed: all ${changesFailed} change(s) failed`);
+            return createFailureResult(result, ServiceErrorCodes.USER_CONFIG_PERMISSION_SET_ASSIGN_FAILED, `Configuration failed: all ${changesFailed} change(s) failed`, { metadata: { duration } });
+        }
+        // Partial failure
+        if (changesFailed > 0) {
+            this.deps.logger?.log(`Configuration partially complete: ${changesApplied} applied, ${changesFailed} failed`);
+            return createSuccessResult(result, {
+                message: `Configuration partially complete: ${changesApplied} applied, ${changesFailed} failed`,
+                warnings: [`${changesFailed} configuration action(s) failed`],
+                metadata: { duration },
+            });
+        }
+        // All changes applied successfully
+        this.deps.logger?.log(`Configuration complete: ${changesApplied} change(s) applied`);
+        return createSuccessResult(result, {
+            message: `Configuration complete: ${changesApplied} change(s) applied`,
+            metadata: { duration },
+        });
+    }
+    /**
+     * Creates the result when no changes are needed.
+     */
+    createNoChangesResult(userId, username, previousState, actions, changesRequired, isReadinessReady, startTime) {
+        const duration = Date.now() - startTime;
+        const isReady = changesRequired === 0 && isReadinessReady;
+        const message = 'This user is already fully configured; no changes are necessary';
+        this.deps.logger?.log(message);
+        return createSuccessResult({
+            user: { id: userId, username },
+            dryRun: false,
+            previousState,
+            actions: actions.map((a) => ({ ...a, message: 'Already configured' })),
+            currentState: previousState,
+            summary: {
+                changesRequired,
+                changesApplied: 0,
+                changesFailed: 0,
+                isReady,
+            },
+        }, {
+            message,
+            metadata: { duration },
+        });
+    }
+}
+//# sourceMappingURL=UnconfigureMode.js.map

package/lib/services/UnconfigureMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnconfigureMode.js","sourceRoot":"","sources":["../../src/services/UnconfigureMode.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,EACL,4BAA4B,GAK7B,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,OAAO,eAAe;IACT,IAAI,CAA4B;IAEjD,YAAmB,IAA+B;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACK,MAAM,CAAC,8BAA8B,CAAC,MAAc,EAAE,QAAQ,GAAG,EAAE;QACzE,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,aAAa,EAAE;gBACb,MAAM;gBACN,QAAQ;gBACR,yBAAyB,EAAE,KAAK;gBAChC,qBAAqB,EAAE,CAAC,GAAG,wBAAwB,CAAC;gBACpD,uBAAuB,EAAE,KAAK;aAC/B;YACD,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE;gBACP,eAAe,EAAE,CAAC;gBAClB,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK;aACf;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,uBAAuB,CACpC,MAAc,EACd,QAAgB,EAChB,SAAwB;QAExB,OAAO;YACL,MAAM;YACN,QAAQ;YACR,yBAAyB,EAAE,SAAS,CAAC,cAAc,CAAC,cAAc;YAClE,qBAAqB,EAAE,SAAS,CAAC,cAAc,CAAC,eAAe;YAC/D,uBAAuB,EAAE,SAAS,CAAC,aAAa,CAAC,uBAAuB,IAAI,KAAK;YACjF,oBAAoB,EAAE,SAAS,CAAC,aAAa,CAAC,oBAAoB;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,2BAA2B,CAAC,YAAgC;QACzE,MAAM,OAAO,GAA0B,EAAE,CAAC;QAE1C,+EAA+E;QAC/E,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,MAAM,CAC9D,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC,CACzD,CAAC;QAEF,KAAK,MAAM,YAAY,IAAI,oBAAoB,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,8BAA8B,CAAC,YAAY,CAAC;gBACzD,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;QACL,CAAC;QAED,uDAAuD;QACvD,IAAI,YAAY,CAAC,uBAAuB,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,YAAY,CAAC,oBAAoB;gBACzC,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,iCAAiC,CAC9C,MAAc,EACd,QAAgB,EAChB,aAAiC,EACjC,SAAiB;QAEjB,OAAO,mBAAmB,CACxB;YACE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,aAAa;YACb,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;SACrF,EACD,iBAAiB,CAAC,kCAAkC,EACpD,uDAAuD,EACvD,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,OAAO,CAAC,MAAc;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,kBAAkB;QAClB,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,mBAAmB,CACxB,eAAe,CAAC,8BAA8B,CAAC,MAAM,CAAC,EACtD,iBAAiB,CAAC,4BAA4B,EAC9C,eAAe,EACf,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;YAEvD,2CAA2C;YAC3C,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACjH,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;YACpC,iEAAiE;YACjE,MAAM,SAAS,GAAG,YAAa,CAAC;YAEhC,MAAM,aAAa,GAAG,eAAe,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAE3F,kCAAkC;YAClC,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC;gBACpC,OAAO,eAAe,CAAC,iCAAiC,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;YACvG,CAAC;YAED,2CAA2C;YAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC;YAC3E,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;YAEvC,2CAA2C;YAC3C,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,qBAAqB,CAC/B,MAAM,EACN,QAAQ,EACR,aAAa,EACb,OAAO,EACP,eAAe,EACf,SAAS,CAAC,OAAO,EACjB,SAAS,CACV,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEpG,4BAA4B;YAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YAEpF,OAAO,IAAI,CAAC,wBAAwB,CAClC,MAAM,EACN,QAAQ,EACR,aAAa,EACb,OAAO,EACP,YAAY,EACZ,eAAe,EACf,cAAc,EACd,aAAa,EACb,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;YAEjE,OAAO,mBAAmB,CACxB,eAAe,CAAC,8BAA8B,CAAC,MAAM,CAAC,EACtD,iBAAiB,CAAC,wBAAwB,EAC1C,YAAY,EACZ,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2BAA2B;IAC3B,+EAA+E;IAE/E;;;OAGG;IACK,KAAK,CAAC,kCAAkC,CAC9C,MAA2B,EAC3B,MAAc;QAMd,oCAAoC;QACpC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAE/F,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,eAAe,CAAC,OAAO,IAAI,0BAA0B;iBAC/D;aACF,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,qBAAqB,EAAE;iBACrC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;iBACd,IAAI,CAAC,yBAAyB,CAAC;iBAC/B,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC;iBAChC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC;iBACtD,KAAK,CAAC,CAAC,CAAC;iBACR,MAAM,EAAE,CAAC;YAEZ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAiB,IAAI,CAAC,CAAC;YAE5E,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,uCAAuC;gBACvC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mCAAmC,EAAE;iBAC5E,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;YAE1G,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE;wBACN,MAAM,EAAE,QAAQ;wBAChB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,4CAA4C;qBAC9E;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE;oBACN,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,2BAA2B;oBACpC,OAAO,EAAE,EAAE,yBAAyB,EAAE,YAAY,EAAE;iBACrD;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;aACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oCAAoC,CAAC,MAA2B;QAK5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE5E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,sCAAsC;iBACxE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAiC;YAC3C,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,iDAAiD;SAC3D,CAAC;QACF,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAE9D,mFAAmF;YACnF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9F,IAAI,gBAAgB,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE;wBACN,MAAM,EAAE,QAAQ;wBAChB,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,IAAI,+BAA+B;wBAC9E,OAAO,EAAE,EAAE,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE;qBACtD;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,OAAO,GAAG,yCAAyC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACzG,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,6BAA6B,CACzC,OAA8B,EAC9B,MAAc;QAEd,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,0FAA0F;QAC1F,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,uBAAuB;gBACrC,CAAC,CAAC,MAAM,IAAI,CAAC,kCAAkC,CAAC,MAAM,EAAE,MAAM,CAAC;gBAC/D,CAAC,CAAC,MAAM,IAAI,CAAC,oCAAoC,CAAC,MAAM,CAAC,CAAC;YAE9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,MAAM,CAAC,OAAO;gBAAE,cAAc,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM;gBAAE,aAAa,EAAE,CAAC;QACrC,CAAC;QACD,oCAAoC;QAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CACnC,MAAc,EACd,SAAiB;QAMjB,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,mBAAmB,CAC9B,eAAe,CAAC,8BAA8B,CAAC,MAAM,CAAC,EACtD,eAAe,CAAC,SAAS,IAAI,iBAAiB,CAAC,wBAAwB,EACvE,eAAe,CAAC,OAAO,IAAI,gCAAgC,EAC3D,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,eAAe,CAAC,IAAI;YAC/B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACpE,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,MAAc,EACd,QAAgB,EAChB,cAAsB;QAEtB,IAAI,cAAc,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,sBAAsB,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEjD,OAAO,eAAe,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC9B,MAAc,EACd,QAAgB,EAChB,aAAiC,EACjC,OAA8B,EAC9B,YAAuC,EACvC,eAAuB,EACvB,cAAsB,EACtB,aAAqB,EACrB,QAAgB;QAEhB,MAAM,OAAO,GAAG,YAAY,EAAE,yBAAyB,KAAK,IAAI,IAAI,YAAY,EAAE,uBAAuB,KAAK,IAAI,CAAC;QAEnH,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,aAAa;YACb,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE;SACrE,CAAC;QAEF,qBAAqB;QACrB,IAAI,aAAa,GAAG,CAAC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,6BAA6B,aAAa,mBAAmB,CAAC,CAAC;YACrF,OAAO,mBAAmB,CACxB,MAAM,EACN,iBAAiB,CAAC,wCAAwC,EAC1D,6BAA6B,aAAa,mBAAmB,EAC7D,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,qCAAqC,cAAc,aAAa,aAAa,SAAS,CAAC,CAAC;YAC9G,OAAO,mBAAmB,CAAC,MAAM,EAAE;gBACjC,OAAO,EAAE,qCAAqC,cAAc,aAAa,aAAa,SAAS;gBAC/F,QAAQ,EAAE,CAAC,GAAG,aAAa,iCAAiC,CAAC;gBAC7D,QAAQ,EAAE,EAAE,QAAQ,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,2BAA2B,cAAc,oBAAoB,CAAC,CAAC;QACrF,OAAO,mBAAmB,CAAC,MAAM,EAAE;YACjC,OAAO,EAAE,2BAA2B,cAAc,oBAAoB;YACtE,QAAQ,EAAE,EAAE,QAAQ,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,MAAc,EACd,QAAgB,EAChB,aAAiC,EACjC,OAA8B,EAC9B,eAAuB,EACvB,gBAAyB,EACzB,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,eAAe,KAAK,CAAC,IAAI,gBAAgB,CAAC;QAC1D,MAAM,OAAO,GAAG,iEAAiE,CAAC;QAElF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAE/B,OAAO,mBAAmB,CACxB;YACE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtE,YAAY,EAAE,aAAa;YAC3B,OAAO,EAAE;gBACP,eAAe;gBACf,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;gBAChB,OAAO;aACR;SACF,EACD;YACE,OAAO;YACP,QAAQ,EAAE,EAAE,QAAQ,EAAE;SACvB,CACF,CAAC;IACJ,CAAC;CACF"}

package/lib/services/UserConfigurationService.d.ts

@@ -0,0 +1,155 @@
+import type { ServiceResult } from '../models/service-result.js';
+import type { UserConfig, DeploymentResult, DeploymentStatus, UserConfigurationResult, IUserConfigurationServiceConfig } from './UserConfigurationTypes.js';
+export { CONFIGURABLE_PERMISSION_SETS } from './UserConfigurationTypes.js';
+export type { UserConfig, DeploymentResult, DeploymentStatus, ConfigurationState, ConfigurationAction, UserConfigurationResult, IUserConfigurationServiceConfig, } from './UserConfigurationTypes.js';
+/**
+ * Service for checking and updating user-level Cuneiform configuration.
+ *
+ * Provides methods to query current configuration profiles and trigger
+ * CMT updates via the ISV REST endpoint. Permission set assignment is
+ * handled via REST sObject insert.
+ *
+ * Configure and unconfigure workflows are delegated to {@link ConfigureMode}
+ * and {@link UnconfigureMode} respectively.
+ *
+ * @example
+ * ```typescript
+ * const service = new UserConfigurationService({
+ *   soqlAdapter,
+ *   restApiAdapter,
+ * });
+ *
+ * // Check current config
+ * const config = await service.getCurrentConfig(userId);
+ * if (config.success && !config.data.apiOnlyProfilingEnabled) {
+ *   // Enable API-only profiling
+ *   const result = await service.enableApiOnlyProfiling('Production');
+ *   if (result.success && result.data.jobId) {
+ *     // Check deployment status
+ *     const status = await service.getDeploymentStatus(result.data.jobId);
+ *   }
+ * }
+ * ```
+ */
+export declare class UserConfigurationService {
+    private readonly soqlAdapter;
+    private readonly restApiAdapter;
+    private readonly userReadinessService?;
+    private readonly logger?;
+    /** Configure mode handler (lazy-initialized when userReadinessService is available) */
+    private configureMode?;
+    /** Unconfigure mode handler (lazy-initialized when userReadinessService is available) */
+    private unconfigureMode?;
+    constructor(config: IUserConfigurationServiceConfig);
+    /**
+     * Checks if an error message indicates Cuneiform namespace is not found.
+     *
+     * This typically means the Cuneiform for Salesforce package is not installed in the org.
+     */
+    private static isCuneiformNamespaceNotFoundError;
+    /**
+     * Creates an empty UserConfig result for error cases.
+     */
+    private static createEmptyConfig;
+    /**
+     * Retrieves the current Cuneiform configuration for a user.
+     *
+     * Queries the Active Configuration CMT to get the linked Configuration Profile
+     * and its settings. Returns empty config if Cuneiform is not installed.
+     *
+     * @param userId - The Salesforce user ID (for context, not filtered)
+     * @returns ServiceResult containing UserConfig
+     */
+    getCurrentConfig(userId: string): Promise<ServiceResult<UserConfig>>;
+    /**
+     * Enables API-only profiling for a configuration profile.
+     *
+     * Triggers a CMT configuration update via the ISV REST endpoint.
+     * Returns the deployment job ID for status tracking.
+     *
+     * @param profileDeveloperName - The developer name of the Configuration Profile to update
+     * @returns ServiceResult containing DeploymentResult with job ID
+     */
+    enableApiOnlyProfiling(profileDeveloperName: string): Promise<ServiceResult<DeploymentResult>>;
+    /**
+     * Retrieves the status of a CMT deployment job.
+     *
+     * Queries the DeployRequest object to check deployment progress.
+     *
+     * @param jobId - The deployment job ID to check
+     * @returns ServiceResult containing DeploymentStatus
+     */
+    getDeploymentStatus(jobId: string): Promise<ServiceResult<DeploymentStatus>>;
+    /**
+     * Polls for CMT deployment completion with exponential backoff.
+     *
+     * Waits for a metadata deployment to reach a terminal state (Succeeded, Failed, or Canceled).
+     * Uses exponential backoff starting at 1s, capped at 5s, with a maximum total wait of 30s.
+     *
+     * @param jobId - The deployment job ID to monitor
+     * @returns ServiceResult containing the final DeploymentStatus
+     */
+    waitForDeploymentCompletion(jobId: string): Promise<ServiceResult<DeploymentStatus>>;
+    /**
+     * Retrieves the ID of a permission set by name and namespace.
+     *
+     * Queries the PermissionSet object to find the permission set ID. This is
+     * needed before assigning a permission set to a user via PermissionSetAssignment.
+     *
+     * @param name - The permission set API name (e.g., 'Cuneiform_for_CRM_Global_Profiling_Support')
+     * @param namespace - The namespace prefix (e.g., 'pnova')
+     * @returns ServiceResult containing the permission set ID or null if not found
+     */
+    getPermissionSetId(name: string, namespace: string): Promise<ServiceResult<string | null>>;
+    /**
+     * Orchestrates user configuration for Cuneiform operations.
+     *
+     * Delegates to {@link ConfigureMode} for the full configure workflow.
+     * See ConfigureMode for implementation details.
+     *
+     * @param userId - The Salesforce user ID to configure
+     * @param options - Configuration options
+     * @param options.dryRun - If true, reports planned changes without applying them (default: false)
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    configure(userId: string, options?: {
+        dryRun?: boolean;
+    }): Promise<ServiceResult<UserConfigurationResult>>;
+    /**
+     * Orchestrates user unconfiguration — reverses the actions of configure().
+     *
+     * Delegates to {@link UnconfigureMode} for the full unconfigure workflow.
+     * See UnconfigureMode for implementation details.
+     *
+     * @param userId - The Salesforce user ID to unconfigure
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    unconfigure(userId: string): Promise<ServiceResult<UserConfigurationResult>>;
+    /**
+     * Disables API-only profiling for a configuration profile.
+     *
+     * Triggers a CMT configuration update via the ISV REST endpoint to set
+     * Enable_API_Only_Profiling__c to false. Uses the same deployment
+     * pattern as enableApiOnlyProfiling().
+     *
+     * @param profileDeveloperName - The developer name of the Configuration Profile to update
+     * @returns ServiceResult containing DeploymentResult with job ID
+     */
+    disableApiOnlyProfiling(profileDeveloperName: string): Promise<ServiceResult<DeploymentResult>>;
+    /**
+     * Deploys a CMT configuration update via the ISV REST endpoint and returns
+     * the result including any jobId from the response.
+     *
+     * On 404 (endpoint not available), returns a graceful error explaining that
+     * an ISV upgrade is needed.
+     *
+     * @param profileDeveloperName - The developer name of the Configuration Profile to update
+     * @param enableApiOnlyProfiling - Whether to enable (true) or disable (false) API-only profiling
+     * @returns ServiceResult containing DeploymentResult with job ID
+     */
+    private deployCmtViaRest;
+    /**
+     * Validates dependencies required for configure()/unconfigure() methods.
+     */
+    private validateConfigureDependencies;
+}