@revenexx/node 0.1.1 → 0.2.0

package/dist/services/customers-contacts.d.mts

@@ -1,11 +1,15 @@
 import { Client } from '../client.mjs';
 import { Models } from '../models.mjs';
 import { Status } from '../enums/status.mjs';
+import { OrderApprovalMode } from '../enums/order-approval-mode.mjs';
 import { RegistrationStatus } from '../enums/registration-status.mjs';
 import { CustomersContactsCreateRegistrationStatus } from '../enums/customers-contacts-create-registration-status.mjs';
 import { ContactStatus } from '../enums/contact-status.mjs';
 import { ContactActivityKind } from '../enums/contact-activity-kind.mjs';
 import '../query.mjs';
+import '../enums/accept-line-decision.mjs';
+import '../enums/accept-result-origin.mjs';
+import '../enums/accept-result-status.mjs';
 import '../enums/address-type-row-tone.mjs';
 import '../enums/address-type-row-create-request-tone.mjs';
 import '../enums/address-type-row-update-request-tone.mjs';
@@ -19,11 +23,22 @@ import '../enums/approval-rule-update-request-approver-type.mjs';
 import '../enums/approval-rule-update-request-condition.mjs';
 import '../enums/approval-rule-update-request-effect.mjs';
 import '../enums/assets-source.mjs';
+import '../enums/assignment-role-tone.mjs';
+import '../enums/assignment-role-create-request-tone.mjs';
+import '../enums/assignment-role-update-request-tone.mjs';
+import '../enums/attach-request-direction.mjs';
+import '../enums/attach-request-visibility.mjs';
 import '../enums/attribute-value-bucket.mjs';
 import '../enums/auth-mail-source.mjs';
+import '../enums/auth-mfa-challenge-request-factor.mjs';
 import '../enums/recovery-mail-source.mjs';
+import '../enums/availability-state-tone.mjs';
+import '../enums/banner-draft-layout.mjs';
+import '../enums/banner-draft-update-request-layout.mjs';
 import '../enums/budget-change-reason.mjs';
 import '../enums/budget-movement-result-status.mjs';
+import '../enums/budget-release-scope.mjs';
+import '../enums/budget-release-status.mjs';
 import '../enums/cart-status.mjs';
 import '../enums/cart-merge-strategy.mjs';
 import '../enums/cart-price-snapshot-mode.mjs';
@@ -51,16 +66,41 @@ import '../enums/channel-vocabulary-tone.mjs';
 import '../enums/channel-vocabulary-name.mjs';
 import '../enums/channel-vocabulary-source.mjs';
 import '../enums/channel-vocabulary-ref-name.mjs';
+import '../enums/consent-record-action.mjs';
+import '../enums/consent-record-surface.mjs';
+import '../enums/consent-record-create-request-action.mjs';
+import '../enums/consent-record-create-request-surface.mjs';
+import '../enums/consent-vocabulary-source.mjs';
+import '../enums/contact-order-approval-mode.mjs';
 import '../enums/contact-registration-status.mjs';
 import '../enums/contact-create-request-registration-status.mjs';
 import '../enums/contact-event-kind-tone.mjs';
 import '../enums/contact-event-kind-create-request-tone.mjs';
 import '../enums/contact-event-kind-update-request-tone.mjs';
-import '../enums/contact-update-request-registration-status.mjs';
+import '../enums/contact-point-kind-tone.mjs';
+import '../enums/contact-point-kind-create-request-tone.mjs';
+import '../enums/contact-point-kind-update-request-tone.mjs';
+import '../enums/cookie-kind.mjs';
+import '../enums/cookie-create-request-kind.mjs';
+import '../enums/cookie-update-request-kind.mjs';
 import '../enums/cost-center-budget-type.mjs';
+import '../enums/cost-center-create-request-budget-type.mjs';
 import '../enums/cost-center-restriction-type.mjs';
 import '../enums/cost-center-restriction-create-request-type.mjs';
 import '../enums/cost-center-restriction-update-request-type.mjs';
+import '../enums/cost-center-update-request-budget-type.mjs';
+import '../enums/cost-centers-vocabulary-tone.mjs';
+import '../enums/cost-centers-vocabulary-name.mjs';
+import '../enums/cost-centers-vocabulary-source.mjs';
+import '../enums/cost-centers-vocabulary-summary-name.mjs';
+import '../enums/direct-order-status.mjs';
+import '../enums/document-source.mjs';
+import '../enums/document-visibility.mjs';
+import '../enums/document-kind-tone.mjs';
+import '../enums/document-vocabulary-default-tone.mjs';
+import '../enums/document-vocabulary-name.mjs';
+import '../enums/document-vocabulary-source.mjs';
+import '../enums/document-vocabulary-tone.mjs';
 import '../enums/payment-fee-type.mjs';
 import '../enums/payment-method-kind.mjs';
 import '../enums/form-status.mjs';
@@ -70,6 +110,7 @@ import '../enums/form-submission-prune-request-status.mjs';
 import '../enums/forms-vocabulary-tone.mjs';
 import '../enums/forms-vocabulary-name.mjs';
 import '../enums/forms-vocabulary-summary-name.mjs';
+import '../enums/inventory-receive-warning-code.mjs';
 import '../enums/inventory-vocabulary-default-tone.mjs';
 import '../enums/inventory-vocabulary-source.mjs';
 import '../enums/cart-io-apply-mode.mjs';
@@ -77,6 +118,7 @@ import '../enums/cart-io-direction.mjs';
 import '../enums/cart-io-entity.mjs';
 import '../enums/io-profile-resource-apply-mode.mjs';
 import '../enums/io-profile-resource-direction.mjs';
+import '../enums/inventory-unorderable-reason.mjs';
 import '../enums/lifecycle-stage-tone.mjs';
 import '../enums/lifecycle-stage-create-request-tone.mjs';
 import '../enums/lifecycle-stage-update-request-tone.mjs';
@@ -93,28 +135,40 @@ import '../enums/markets-vocabulary-tone.mjs';
 import '../enums/markets-vocabulary-name.mjs';
 import '../enums/markets-vocabulary-source.mjs';
 import '../enums/markets-vocabulary-summary-name.mjs';
+import '../enums/note-request-visibility.mjs';
 import '../enums/order-fulfillment-status.mjs';
 import '../enums/order-payment-status.mjs';
 import '../enums/order-status.mjs';
 import '../enums/order-cancellation-scope.mjs';
 import '../enums/order-comment-visibility.mjs';
+import '../enums/order-discount-target.mjs';
+import '../enums/order-discount-effect-kind.mjs';
+import '../enums/order-discount-placement.mjs';
+import '../enums/order-discount-source.mjs';
+import '../enums/order-discount-value-type.mjs';
 import '../enums/order-item-type.mjs';
 import '../enums/order-list-kind-tone.mjs';
 import '../enums/order-list-kind-row-tone.mjs';
+import '../enums/order-list-skip-reason.mjs';
 import '../enums/order-list-cart-mode.mjs';
 import '../enums/order-list-vocabulary-default-tone.mjs';
 import '../enums/order-list-vocabulary-name.mjs';
 import '../enums/order-list-vocabulary-source.mjs';
 import '../enums/order-list-vocabulary-tone.mjs';
+import '../enums/order-return-refund-mode.mjs';
 import '../enums/order-return-status.mjs';
 import '../enums/order-return-settlement.mjs';
-import '../enums/order-return-refusal.mjs';
 import '../enums/order-vocabulary-tone.mjs';
+import '../enums/order-return-refusal.mjs';
 import '../enums/order-vocabulary-name.mjs';
 import '../enums/order-vocabulary-source.mjs';
 import '../enums/order-vocabulary-summary-name.mjs';
 import '../enums/order-resolution-stage.mjs';
+import '../enums/organization-credit-limit-mode.mjs';
+import '../enums/organization-shipping-advice.mjs';
 import '../enums/organization-status.mjs';
+import '../enums/credit-limit-mode.mjs';
+import '../enums/shipping-advice.mjs';
 import '../enums/page-status.mjs';
 import '../enums/pages-vocabulary-app.mjs';
 import '../enums/pages-vocabulary-tone.mjs';
@@ -136,6 +190,7 @@ import '../enums/price-entries-adjust-response-rounding-mode.mjs';
 import '../enums/price-entries-bulk-mode.mjs';
 import '../enums/price-rounding-mode.mjs';
 import '../enums/price-entry-type.mjs';
+import '../enums/price-line-price-reason.mjs';
 import '../enums/price-list-status.mjs';
 import '../enums/price-list-tax-basis.mjs';
 import '../enums/price-currency-source.mjs';
@@ -147,22 +202,86 @@ import '../enums/price-vocabulary-tone.mjs';
 import '../enums/price-vocabulary-name.mjs';
 import '../enums/price-vocabulary-source.mjs';
 import '../enums/price-vocabulary-ref-name.mjs';
+import '../enums/procurement-vocabulary-default-tone.mjs';
+import '../enums/procurement-vocabulary-name.mjs';
+import '../enums/procurement-vocabulary-source.mjs';
+import '../enums/procurement-vocabulary-summary-name.mjs';
+import '../enums/procurement-vocabulary-value-tone.mjs';
 import '../enums/product-categories-source.mjs';
 import '../enums/product-grid-column-source.mjs';
 import '../enums/product-label-source.mjs';
 import '../enums/product-label-attribute-source.mjs';
 import '../enums/products-kind.mjs';
+import '../enums/promotion-condition-match.mjs';
+import '../enums/promotion-reach.mjs';
+import '../enums/promotion-recurrence-kind.mjs';
+import '../enums/promotion-return-behaviour.mjs';
+import '../enums/promotion-status.mjs';
+import '../enums/promotion-bundle-allocation.mjs';
+import '../enums/promotion-bundle-patch-allocation.mjs';
+import '../enums/promotion-bundle-write-allocation.mjs';
+import '../enums/promotion-condition-kind.mjs';
+import '../enums/promotion-condition-match-mode.mjs';
+import '../enums/promotion-condition-patch-kind.mjs';
+import '../enums/promotion-condition-patch-match-mode.mjs';
+import '../enums/promotion-condition-write-kind.mjs';
+import '../enums/promotion-condition-write-match-mode.mjs';
+import '../enums/promotion-effect-kind.mjs';
+import '../enums/promotion-effect-target-scope.mjs';
+import '../enums/promotion-effect-unit-choice.mjs';
+import '../enums/promotion-effect-value-type.mjs';
+import '../enums/promotion-effect-patch-kind.mjs';
+import '../enums/promotion-effect-patch-target-scope.mjs';
+import '../enums/promotion-effect-patch-unit-choice.mjs';
+import '../enums/promotion-effect-patch-value-type.mjs';
+import '../enums/promotion-effect-write-kind.mjs';
+import '../enums/promotion-effect-write-target-scope.mjs';
+import '../enums/promotion-effect-write-unit-choice.mjs';
+import '../enums/promotion-effect-write-value-type.mjs';
+import '../enums/promotion-patch-condition-match.mjs';
+import '../enums/promotion-patch-reach.mjs';
+import '../enums/promotion-patch-recurrence-kind.mjs';
+import '../enums/promotion-patch-return-behaviour.mjs';
+import '../enums/promotion-patch-status.mjs';
+import '../enums/promotion-release-request-reason.mjs';
+import '../enums/promotion-write-condition-match.mjs';
+import '../enums/promotion-write-reach.mjs';
+import '../enums/promotion-write-recurrence-kind.mjs';
+import '../enums/promotion-write-return-behaviour.mjs';
+import '../enums/promotion-write-status.mjs';
+import '../enums/punchout-entry-probe-result-entry-probe-status.mjs';
+import '../enums/punchout-entry-test-result-protocol.mjs';
+import '../enums/punchout-field-mapping-import-request-protocol.mjs';
+import '../enums/punchout-return-preview-protocol.mjs';
 import '../enums/purchase-request-status.mjs';
 import '../enums/purchase-request-event-name.mjs';
 import '../enums/purchase-request-item-type.mjs';
 import '../enums/purchase-request-item-create-request-type.mjs';
 import '../enums/purchase-request-item-update-request-type.mjs';
+import '../enums/purpose-legal-basis.mjs';
+import '../enums/purpose-create-request-legal-basis.mjs';
+import '../enums/purpose-update-request-legal-basis.mjs';
+import '../enums/quote-origin.mjs';
+import '../enums/quote-status.mjs';
+import '../enums/quote-attachment-direction.mjs';
+import '../enums/quote-attachment-visibility.mjs';
+import '../enums/quote-detail-origin.mjs';
+import '../enums/quote-detail-status.mjs';
+import '../enums/quote-event-visibility.mjs';
+import '../enums/quote-item-decision.mjs';
+import '../enums/quote-item-price-reason.mjs';
+import '../enums/quote-line-input-price-reason.mjs';
+import '../enums/redemption-state.mjs';
 import '../enums/reorder-point-source.mjs';
 import '../enums/reservation-status.mjs';
 import '../enums/price-on-request-reason.mjs';
 import '../enums/price-tax-basis.mjs';
 import '../enums/price-tax-basis-source.mjs';
 import '../enums/role-catalog-response-source.mjs';
+import '../enums/sales-rep-vocabulary-default-tone.mjs';
+import '../enums/sales-rep-vocabulary-source.mjs';
+import '../enums/seed-request-mode.mjs';
+import '../enums/seed-result-mode.mjs';
 import '../enums/segment-rule-match.mjs';
 import '../enums/segment-member-source.mjs';
 import '../enums/segment-rule-operator.mjs';
@@ -192,14 +311,35 @@ import '../enums/shipping-vocabulary-tone.mjs';
 import '../enums/shipping-weight-unit-create-request-tone.mjs';
 import '../enums/shipping-weight-unit-row-tone.mjs';
 import '../enums/shipping-weight-unit-update-request-tone.mjs';
+import '../enums/stacking-group-mode.mjs';
+import '../enums/stacking-group-patch-mode.mjs';
+import '../enums/stacking-group-write-mode.mjs';
 import '../enums/stock-movement-type.mjs';
 import '../enums/store-asset-request-visibility.mjs';
 import '../enums/submit-item-type.mjs';
 import '../enums/submit-result-outcome.mjs';
+import '../enums/tag-manager-container-check-reason.mjs';
+import '../enums/tag-manager-marketing-tag-kind.mjs';
+import '../enums/tag-manager-marketing-tag-load.mjs';
+import '../enums/tag-manager-marketing-tag-input-kind.mjs';
+import '../enums/tag-manager-marketing-tag-input-load.mjs';
+import '../enums/tag-manager-trigger-kind.mjs';
+import '../enums/tag-manager-trigger-input-kind.mjs';
+import '../enums/tag-manager-variable-kind.mjs';
+import '../enums/tag-manager-variable-input-kind.mjs';
 import '../enums/validation-failed-response-status.mjs';
+import '../enums/vendor-legal-basis-override.mjs';
+import '../enums/vendor-create-request-legal-basis-override.mjs';
+import '../enums/vendor-update-request-legal-basis-override.mjs';
 import '../enums/vocabulary-default-tone.mjs';
 import '../enums/vocabulary-source.mjs';
 import '../enums/vocabulary-tone.mjs';
+import '../enums/voucher-status.mjs';
+import '../enums/voucher-batch-status.mjs';
+import '../enums/voucher-batch-patch-status.mjs';
+import '../enums/voucher-batch-write-status.mjs';
+import '../enums/voucher-patch-status.mjs';
+import '../enums/voucher-write-status.mjs';
 import '../enums/attribute-boolean-status.mjs';
 import '../enums/attribute-datetime-status.mjs';
 import '../enums/attribute-email-status.mjs';
@@ -323,13 +463,15 @@ declare class CustomersContacts {
      * @param {string} params.id - Filter to exactly one person.
      * @param {string} params.organizationId - Filter to one company's people. The company address book.
      * @param {string} params.email - Filter by exact email — the one lookup that is guaranteed to return at most one person, because the address is unique per tenant.
+     * @param {string} params.username - Filter to rows whose `username` is exactly this value. What this person types instead of an address, unique within the tenant where it is set. Free text the shop assigns or the buyer chooses — a customer number with a name behind it, a works login, whatever the trade already says. It exists because an address is not something every B2B buyer has, and because a customer number alone names a company rather than a person.
      * @param {string} params.firstName - Filter to rows whose `first_name` is exactly this value. Given name. Optional: an ERP import often has only a mailbox.
      * @param {string} params.lastName - Filter to rows whose `last_name` is exactly this value. Family name. Optional for the same reason.
      * @param {string} params.phone - Filter to rows whose `phone` is exactly this value. Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
      * @param {string} params.jobTitle - Filter to rows whose `job_title` is exactly this value. What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} params.role - Filter by role. One of the tenant's own roles (GET /customers/roles) — a tenant that never edited the ledger has viewer, requester, buyer, approver, admin.
      * @param {Status} params.status - Filter by status.
-     * @param {number} params.orderApprovalLimit - Filter to rows whose `order_approval_limit` is exactly this value. Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {OrderApprovalMode} params.orderApprovalMode - Filter to rows whose `order_approval_mode` is exactly this value. How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here.
+     * @param {number} params.orderApprovalLimit - Filter to rows whose `order_approval_limit` is exactly this value. Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role.
      * @param {RegistrationStatus} params.registrationStatus - Filter by registration state. `pending` IS the approval inbox — there is no second entity for it.
      * @param {string} params.registrationDecidedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When a merchant approved or rejected the application. Null while nobody has decided.
      * @param {string} params.registrationDecidedBy - Filter to rows whose `registration_decided_by` is exactly this value. Who decided — free text as the deciding client supplied it (an operator id or an email address), not a resolvable user reference.
@@ -337,6 +479,8 @@ declare class CustomersContacts {
      * @param {string} params.locale - Filter to rows whose `locale` is exactly this value. The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
      * @param {boolean} params.isPrimary - Filter to the primary contacts — with `organization_id`, the one person a merchant calls first at that company.
      * @param {string} params.externalUserId - Find the contact behind a platform user id. What a storefront session resolves with when it has an auth id and needs the customer record.
+     * @param {string} params.externalId - Filter to rows whose `external_id` is exactly this value. Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform.
+     * @param {string} params.sourceSyncedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When this row was last confirmed against its source. What a delta run asks for changes since, and what tells an operator that a feed has gone quiet — a row edited in the Cockpit does not touch it, because it says when the SOURCE was last seen, not when the row changed. Null for a row no source owns.
      * @param {string} params.createdAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When this person record was created in this app.
      * @param {string} params.updatedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When any column of this row last changed.
      * @param {number} params.limit - Page size (default 50, max 200).
@@ -349,12 +493,14 @@ declare class CustomersContacts {
         id?: string;
         organizationId?: string;
         email?: string;
+        username?: string;
         firstName?: string;
         lastName?: string;
         phone?: string;
         jobTitle?: string;
         role?: string;
         status?: Status;
+        orderApprovalMode?: OrderApprovalMode;
         orderApprovalLimit?: number;
         registrationStatus?: RegistrationStatus;
         registrationDecidedAt?: string;
@@ -363,6 +509,8 @@ declare class CustomersContacts {
         locale?: string;
         isPrimary?: boolean;
         externalUserId?: string;
+        externalId?: string;
+        sourceSyncedAt?: string;
         createdAt?: string;
         updatedAt?: string;
         limit?: number;
@@ -375,13 +523,15 @@ declare class CustomersContacts {
      * @param {string} id - Filter to exactly one person.
      * @param {string} organizationId - Filter to one company's people. The company address book.
      * @param {string} email - Filter by exact email — the one lookup that is guaranteed to return at most one person, because the address is unique per tenant.
+     * @param {string} username - Filter to rows whose `username` is exactly this value. What this person types instead of an address, unique within the tenant where it is set. Free text the shop assigns or the buyer chooses — a customer number with a name behind it, a works login, whatever the trade already says. It exists because an address is not something every B2B buyer has, and because a customer number alone names a company rather than a person.
      * @param {string} firstName - Filter to rows whose `first_name` is exactly this value. Given name. Optional: an ERP import often has only a mailbox.
      * @param {string} lastName - Filter to rows whose `last_name` is exactly this value. Family name. Optional for the same reason.
      * @param {string} phone - Filter to rows whose `phone` is exactly this value. Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
      * @param {string} jobTitle - Filter to rows whose `job_title` is exactly this value. What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} role - Filter by role. One of the tenant's own roles (GET /customers/roles) — a tenant that never edited the ledger has viewer, requester, buyer, approver, admin.
      * @param {Status} status - Filter by status.
-     * @param {number} orderApprovalLimit - Filter to rows whose `order_approval_limit` is exactly this value. Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {OrderApprovalMode} orderApprovalMode - Filter to rows whose `order_approval_mode` is exactly this value. How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here.
+     * @param {number} orderApprovalLimit - Filter to rows whose `order_approval_limit` is exactly this value. Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role.
      * @param {RegistrationStatus} registrationStatus - Filter by registration state. `pending` IS the approval inbox — there is no second entity for it.
      * @param {string} registrationDecidedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When a merchant approved or rejected the application. Null while nobody has decided.
      * @param {string} registrationDecidedBy - Filter to rows whose `registration_decided_by` is exactly this value. Who decided — free text as the deciding client supplied it (an operator id or an email address), not a resolvable user reference.
@@ -389,6 +539,8 @@ declare class CustomersContacts {
      * @param {string} locale - Filter to rows whose `locale` is exactly this value. The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
      * @param {boolean} isPrimary - Filter to the primary contacts — with `organization_id`, the one person a merchant calls first at that company.
      * @param {string} externalUserId - Find the contact behind a platform user id. What a storefront session resolves with when it has an auth id and needs the customer record.
+     * @param {string} externalId - Filter to rows whose `external_id` is exactly this value. Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform.
+     * @param {string} sourceSyncedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When this row was last confirmed against its source. What a delta run asks for changes since, and what tells an operator that a feed has gone quiet — a row edited in the Cockpit does not touch it, because it says when the SOURCE was last seen, not when the row changed. Null for a row no source owns.
      * @param {string} createdAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When this person record was created in this app.
      * @param {string} updatedAt - Exact timestamp equality — this API has no range filter. To bound a period, sort with `order` and page. When any column of this row last changed.
      * @param {number} limit - Page size (default 50, max 200).
@@ -398,20 +550,23 @@ declare class CustomersContacts {
      * @returns {Promise<{}>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsList(id?: string, organizationId?: string, email?: string, firstName?: string, lastName?: string, phone?: string, jobTitle?: string, role?: string, status?: Status, orderApprovalLimit?: number, registrationStatus?: RegistrationStatus, registrationDecidedAt?: string, registrationDecidedBy?: string, registrationReason?: string, locale?: string, isPrimary?: boolean, externalUserId?: string, createdAt?: string, updatedAt?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
+    customersContactsList(id?: string, organizationId?: string, email?: string, username?: string, firstName?: string, lastName?: string, phone?: string, jobTitle?: string, role?: string, status?: Status, orderApprovalMode?: OrderApprovalMode, orderApprovalLimit?: number, registrationStatus?: RegistrationStatus, registrationDecidedAt?: string, registrationDecidedBy?: string, registrationReason?: string, locale?: string, isPrimary?: boolean, externalUserId?: string, externalId?: string, sourceSyncedAt?: string, createdAt?: string, updatedAt?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
     /**
-     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. Creates the person and their platform login together, so a contact that exists can always sign in. `role` names one of this tenant's own roles and decides what they may do; `registration_status` may only be set to `pending` or `approved` here, because a rejection has to carry a reason and that is the reject route's job. `email` is the only field a create cannot omit; everything else is optional or defaulted by the database. Two rows of this tenant may not share `email` or `external_user_id` (while external_user_id IS NOT NULL).
+     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. Creates the person and their platform login together, so a contact that exists can always sign in. `role` names one of this tenant's own roles and decides what they may do; `registration_status` may only be set to `pending` or `approved` here, because a rejection has to carry a reason and that is the reject route's job. Two rows of this tenant may not share `email`, `external_user_id` (while external_user_id IS NOT NULL), `external_id` (while external_id IS NOT NULL) or `username` (while username IS NOT NULL).
      *
-     * @param {string} params.email - Login identity and the unique key of a person within the tenant. Changing it changes the platform login with it. Two people at the same company therefore need two addresses — a shared purchasing mailbox is one contact, not several.
+     * @param {string} params.email - One of the things this person can sign in with, unique within the tenant where it is set. Changing it changes the platform login with it. It is OPTIONAL: B2B buyers without an address of their own are a routine case, and they sign in by username instead. Two people sharing one address is still not possible — a shared purchasing mailbox is one contact, not several.
+     * @param {string} params.createdAt - When this person record was created in this app. Accepted on create only from a call naming no acting contact — an operator, an import, an ERP carrying a record over with its original date. A buyer sending it, or any update changing it, is a 400 `server_owned_field`.
+     * @param {string} params.externalId - Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform. Writable, so a record can be adopted or a wrong id corrected — but it is the key a repeated import matches on, so changing it on a row an import owns makes the next run create a second one rather than update this.
      * @param {string} params.firstName - Given name. Optional: an ERP import often has only a mailbox.
      * @param {boolean} params.isPrimary - The main contact of its organization — who a merchant calls first. At most one per company is the intent; the tenant's `primary_contact_required` setting decides whether the last one may be demoted or deleted.
      * @param {string} params.jobTitle - What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} params.lastName - Family name. Optional for the same reason.
      * @param {string} params.locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
-     * @param {number} params.orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {number} params.orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role. Required with `order_approval_mode` 'limited' and refused with any other mode (400 `limited_mode_requires_limit` / `limit_requires_limited_mode`).
+     * @param {OrderApprovalMode} params.orderApprovalMode - How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here. Default 'none'. Leaving 'limited' without sending `order_approval_limit` clears the amount.
      * @param {string} params.organizationId - The company this person belongs to. NULL is a legitimate state, not a defect: a standalone buyer with no company behind them. Deleting the organization sets this null and keeps the person. Membership is mirrored to the platform team.
      * @param {string} params.phone - Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
-     * @param {CustomersContactsCreateRegistrationStatus} params.registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject. Ignored on update.
+     * @param {CustomersContactsCreateRegistrationStatus} params.registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject.
      * @param {string} params.role - The person's role INSIDE its organization, and the only thing permissions are derived from. One of the tenant's own roles (GET /customers/roles); a tenant that never edited the ledger has viewer, requester, buyer, approver, admin. Also the team role on the platform mirror. There is no global role — the same person in two companies is two contacts. A tenant that never edited the ledger has viewer, requester, buyer, approver, admin; a create without a role gets the one flagged as default, and a role the tenant does not keep is a 400.
      * @param {ContactStatus} params.status - Whether this person may act: 'invited' has been created but has not accepted, 'active' works, 'blocked' cannot log in. A create through the API defaults to 'invited'; a self-registration in an open store lands 'active'. Default 'invited' on create.
      * @throws {RevenexxException}
@@ -419,12 +574,15 @@ declare class CustomersContacts {
      */
     customersContactsCreate(params: {
         email: string;
+        createdAt?: string;
+        externalId?: string;
         firstName?: string;
         isPrimary?: boolean;
         jobTitle?: string;
         lastName?: string;
         locale?: string;
         orderApprovalLimit?: number;
+        orderApprovalMode?: OrderApprovalMode;
         organizationId?: string;
         phone?: string;
         registrationStatus?: CustomersContactsCreateRegistrationStatus;
@@ -432,25 +590,28 @@ declare class CustomersContacts {
         status?: ContactStatus;
     }): Promise<Models.Contact>;
     /**
-     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. Creates the person and their platform login together, so a contact that exists can always sign in. `role` names one of this tenant's own roles and decides what they may do; `registration_status` may only be set to `pending` or `approved` here, because a rejection has to carry a reason and that is the reject route's job. `email` is the only field a create cannot omit; everything else is optional or defaulted by the database. Two rows of this tenant may not share `email` or `external_user_id` (while external_user_id IS NOT NULL).
+     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. Creates the person and their platform login together, so a contact that exists can always sign in. `role` names one of this tenant's own roles and decides what they may do; `registration_status` may only be set to `pending` or `approved` here, because a rejection has to carry a reason and that is the reject route's job. Two rows of this tenant may not share `email`, `external_user_id` (while external_user_id IS NOT NULL), `external_id` (while external_id IS NOT NULL) or `username` (while username IS NOT NULL).
      *
-     * @param {string} email - Login identity and the unique key of a person within the tenant. Changing it changes the platform login with it. Two people at the same company therefore need two addresses — a shared purchasing mailbox is one contact, not several.
+     * @param {string} email - One of the things this person can sign in with, unique within the tenant where it is set. Changing it changes the platform login with it. It is OPTIONAL: B2B buyers without an address of their own are a routine case, and they sign in by username instead. Two people sharing one address is still not possible — a shared purchasing mailbox is one contact, not several.
+     * @param {string} createdAt - When this person record was created in this app. Accepted on create only from a call naming no acting contact — an operator, an import, an ERP carrying a record over with its original date. A buyer sending it, or any update changing it, is a 400 `server_owned_field`.
+     * @param {string} externalId - Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform. Writable, so a record can be adopted or a wrong id corrected — but it is the key a repeated import matches on, so changing it on a row an import owns makes the next run create a second one rather than update this.
      * @param {string} firstName - Given name. Optional: an ERP import often has only a mailbox.
      * @param {boolean} isPrimary - The main contact of its organization — who a merchant calls first. At most one per company is the intent; the tenant's `primary_contact_required` setting decides whether the last one may be demoted or deleted.
      * @param {string} jobTitle - What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} lastName - Family name. Optional for the same reason.
      * @param {string} locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
-     * @param {number} orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {number} orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role. Required with `order_approval_mode` 'limited' and refused with any other mode (400 `limited_mode_requires_limit` / `limit_requires_limited_mode`).
+     * @param {OrderApprovalMode} orderApprovalMode - How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here. Default 'none'. Leaving 'limited' without sending `order_approval_limit` clears the amount.
      * @param {string} organizationId - The company this person belongs to. NULL is a legitimate state, not a defect: a standalone buyer with no company behind them. Deleting the organization sets this null and keeps the person. Membership is mirrored to the platform team.
      * @param {string} phone - Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
-     * @param {CustomersContactsCreateRegistrationStatus} registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject. Ignored on update.
+     * @param {CustomersContactsCreateRegistrationStatus} registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject.
      * @param {string} role - The person's role INSIDE its organization, and the only thing permissions are derived from. One of the tenant's own roles (GET /customers/roles); a tenant that never edited the ledger has viewer, requester, buyer, approver, admin. Also the team role on the platform mirror. There is no global role — the same person in two companies is two contacts. A tenant that never edited the ledger has viewer, requester, buyer, approver, admin; a create without a role gets the one flagged as default, and a role the tenant does not keep is a 400.
      * @param {ContactStatus} status - Whether this person may act: 'invited' has been created but has not accepted, 'active' works, 'blocked' cannot log in. A create through the API defaults to 'invited'; a self-registration in an open store lands 'active'. Default 'invited' on create.
      * @throws {RevenexxException}
      * @returns {Promise<Models.Contact>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsCreate(email: string, firstName?: string, isPrimary?: boolean, jobTitle?: string, lastName?: string, locale?: string, orderApprovalLimit?: number, organizationId?: string, phone?: string, registrationStatus?: CustomersContactsCreateRegistrationStatus, role?: string, status?: ContactStatus): Promise<Models.Contact>;
+    customersContactsCreate(email: string, createdAt?: string, externalId?: string, firstName?: string, isPrimary?: boolean, jobTitle?: string, lastName?: string, locale?: string, orderApprovalLimit?: number, orderApprovalMode?: OrderApprovalMode, organizationId?: string, phone?: string, registrationStatus?: CustomersContactsCreateRegistrationStatus, role?: string, status?: ContactStatus): Promise<Models.Contact>;
     /**
      * This is how a call, a visit, a meeting, an email or a plain note reaches one person's timeline. It writes a contact_events row with kind != 'system' and emits contact_event.created, so an activity travels on the same bus as a registration decision and a timeline is one query rather than a union. organization_id is DERIVED from the contact, never taken from the body — an activity cannot be filed under a company the person does not belong to.
      *
@@ -485,12 +646,34 @@ declare class CustomersContacts {
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     customersContactsEventsCreate(contactId: string, subject: string, actor?: string, kind?: ContactActivityKind, note?: string, occurredAt?: string): Promise<Models.ContactEvent>;
+    /**
+     * Repair the one contact an import leaves unable to sign in. A contact created through this API is mirrored as a platform login in the same call; a contact written straight into the record by a migration or an ERP feed is not, and reads as a customer everywhere while being able to do nothing — no password, no recovery, and "no account found for that address" as the only explanation. This call creates the missing login and links it. It is idempotent: a contact that already has one is answered with it and `created` false, and nothing is touched, so a whole import is healed with one call per contact and is safe to re-run. It takes no password — the person is handed to `POST /customers/auth/recovery` and mints their own. It mirrors the state it finds: a blocked contact, or one whose registration is still pending or rejected, gets its login created DISABLED, so a repair can never hand access to somebody who was refused it. And it delivers nothing at all — telling the person is what the invitation is for.
+     *
+     * @param {string} params.contactId - The person whose login is missing.
+     * @param {string} params.createdBy - Who ordered the repair, for the timeline entry. An automated sweep names itself here.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.ContactIdentityResponse>}
+     */
+    customersContactsIdentity(params: {
+        contactId: string;
+        createdBy?: string;
+    }): Promise<Models.ContactIdentityResponse>;
+    /**
+     * Repair the one contact an import leaves unable to sign in. A contact created through this API is mirrored as a platform login in the same call; a contact written straight into the record by a migration or an ERP feed is not, and reads as a customer everywhere while being able to do nothing — no password, no recovery, and "no account found for that address" as the only explanation. This call creates the missing login and links it. It is idempotent: a contact that already has one is answered with it and `created` false, and nothing is touched, so a whole import is healed with one call per contact and is safe to re-run. It takes no password — the person is handed to `POST /customers/auth/recovery` and mints their own. It mirrors the state it finds: a blocked contact, or one whose registration is still pending or rejected, gets its login created DISABLED, so a repair can never hand access to somebody who was refused it. And it delivers nothing at all — telling the person is what the invitation is for.
+     *
+     * @param {string} contactId - The person whose login is missing.
+     * @param {string} createdBy - Who ordered the repair, for the timeline entry. An automated sweep names itself here.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.ContactIdentityResponse>}
+     * @deprecated Use the object parameter style method for a better developer experience.
+     */
+    customersContactsIdentity(contactId: string, createdBy?: string): Promise<Models.ContactIdentityResponse>;
     /**
      * Tell somebody they were added to a company. A deliberate act rather than a side effect of creating the contact: a merchant entering a colleague from a business card is not always ready to mail them, and "added" and "told" are different decisions. No secret travels — the platform team membership is confirmed as it is created, so there is nothing to accept; the message says "you are in, here is the way in". Unlike the auth mails, a failure here IS a failure: the identity service sends nothing for this occasion, so this is the only message the person gets.
      *
      * @param {string} params.contactId - The person being told. They are already a member — this only sends the message.
      * @param {string} params.url - Where the invitation points — the storefront sign-in, normally. There is no token in it: the person is already a member and only has to sign in.
-     * @param {string} params.invitedBy - Who did the inviting, as the recipient should read it. Absent, the company name is used — "Beispiel GmbH invited you" reads better than the name of somebody they have never heard of.
+     * @param {string} params.invitedBy - Who did the inviting, as the recipient should read it. Absent, the company name is used — "Beispiel GmbH invited you" reads better than the name of somebody they have never heard of. Ignored on a buyer's call: the mail then names the buyer, because a name in the shop's own mail is a claim the shop makes.
      * @throws {RevenexxException}
      * @returns {Promise<Models.ContactInviteResponse>}
      */
@@ -504,7 +687,7 @@ declare class CustomersContacts {
      *
      * @param {string} contactId - The person being told. They are already a member — this only sends the message.
      * @param {string} url - Where the invitation points — the storefront sign-in, normally. There is no token in it: the person is already a member and only has to sign in.
-     * @param {string} invitedBy - Who did the inviting, as the recipient should read it. Absent, the company name is used — "Beispiel GmbH invited you" reads better than the name of somebody they have never heard of.
+     * @param {string} invitedBy - Who did the inviting, as the recipient should read it. Absent, the company name is used — "Beispiel GmbH invited you" reads better than the name of somebody they have never heard of. Ignored on a buyer's call: the mail then names the buyer, because a name in the shop's own mail is a claim the shop makes.
      * @throws {RevenexxException}
      * @returns {Promise<Models.ContactInviteResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
@@ -615,19 +798,20 @@ declare class CustomersContacts {
      */
     customersContactsGet(id: string): Promise<Models.Contact>;
     /**
-     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. A partial update — send only what changes. `external_user_id` and every `registration_*` column are ignored: the link to platform auth is mirror-managed, and registration state is only ever moved by the approve and reject routes, which record why. Two rows of this tenant may not share `email` or `external_user_id` (while external_user_id IS NOT NULL).
+     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. A partial update — send only what changes. `external_user_id` and every `registration_*` column are ignored: the link to platform auth is mirror-managed, and registration state is only ever moved by the approve and reject routes, which record why. Two rows of this tenant may not share `email`, `external_user_id` (while external_user_id IS NOT NULL), `external_id` (while external_id IS NOT NULL) or `username` (while username IS NOT NULL).
      *
      * @param {string} params.id - The contact to update.
-     * @param {string} params.email - Login identity and the unique key of a person within the tenant. Changing it changes the platform login with it. Two people at the same company therefore need two addresses — a shared purchasing mailbox is one contact, not several.
+     * @param {string} params.email - One of the things this person can sign in with, unique within the tenant where it is set. Changing it changes the platform login with it. It is OPTIONAL: B2B buyers without an address of their own are a routine case, and they sign in by username instead. Two people sharing one address is still not possible — a shared purchasing mailbox is one contact, not several.
+     * @param {string} params.externalId - Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform. Writable, so a record can be adopted or a wrong id corrected — but it is the key a repeated import matches on, so changing it on a row an import owns makes the next run create a second one rather than update this.
      * @param {string} params.firstName - Given name. Optional: an ERP import often has only a mailbox.
      * @param {boolean} params.isPrimary - The main contact of its organization — who a merchant calls first. At most one per company is the intent; the tenant's `primary_contact_required` setting decides whether the last one may be demoted or deleted.
      * @param {string} params.jobTitle - What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} params.lastName - Family name. Optional for the same reason.
      * @param {string} params.locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
-     * @param {number} params.orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {number} params.orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role. Required with `order_approval_mode` 'limited' and refused with any other mode (400 `limited_mode_requires_limit` / `limit_requires_limited_mode`).
+     * @param {OrderApprovalMode} params.orderApprovalMode - How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here. Default 'none'. Leaving 'limited' without sending `order_approval_limit` clears the amount.
      * @param {string} params.organizationId - The company this person belongs to. NULL is a legitimate state, not a defect: a standalone buyer with no company behind them. Deleting the organization sets this null and keeps the person. Membership is mirrored to the platform team.
      * @param {string} params.phone - Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
-     * @param {CustomersContactsCreateRegistrationStatus} params.registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject. Ignored on update.
      * @param {string} params.role - The person's role INSIDE its organization, and the only thing permissions are derived from. One of the tenant's own roles (GET /customers/roles); a tenant that never edited the ledger has viewer, requester, buyer, approver, admin. Also the team role on the platform mirror. There is no global role — the same person in two companies is two contacts. A tenant that never edited the ledger has viewer, requester, buyer, approver, admin; a create without a role gets the one flagged as default, and a role the tenant does not keep is a 400.
      * @param {ContactStatus} params.status - Whether this person may act: 'invited' has been created but has not accepted, 'active' works, 'blocked' cannot log in. A create through the API defaults to 'invited'; a self-registration in an open store lands 'active'. Default 'invited' on create.
      * @throws {RevenexxException}
@@ -636,39 +820,41 @@ declare class CustomersContacts {
     customersContactsUpdate(params: {
         id: string;
         email?: string;
+        externalId?: string;
         firstName?: string;
         isPrimary?: boolean;
         jobTitle?: string;
         lastName?: string;
         locale?: string;
         orderApprovalLimit?: number;
+        orderApprovalMode?: OrderApprovalMode;
         organizationId?: string;
         phone?: string;
-        registrationStatus?: CustomersContactsCreateRegistrationStatus;
         role?: string;
         status?: ContactStatus;
     }): Promise<Models.Contact>;
     /**
-     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. A partial update — send only what changes. `external_user_id` and every `registration_*` column are ignored: the link to platform auth is mirror-managed, and registration state is only ever moved by the approve and reject routes, which record why. Two rows of this tenant may not share `email` or `external_user_id` (while external_user_id IS NOT NULL).
+     * A contact is a PERSON, and the unit that logs in: one platform user, one email address, one role held inside its organization. A contact without an organization is a standalone buyer rather than an error, and two people at the same company are two contacts sharing an `organization_id`. A partial update — send only what changes. `external_user_id` and every `registration_*` column are ignored: the link to platform auth is mirror-managed, and registration state is only ever moved by the approve and reject routes, which record why. Two rows of this tenant may not share `email`, `external_user_id` (while external_user_id IS NOT NULL), `external_id` (while external_id IS NOT NULL) or `username` (while username IS NOT NULL).
      *
      * @param {string} id - The contact to update.
-     * @param {string} email - Login identity and the unique key of a person within the tenant. Changing it changes the platform login with it. Two people at the same company therefore need two addresses — a shared purchasing mailbox is one contact, not several.
+     * @param {string} email - One of the things this person can sign in with, unique within the tenant where it is set. Changing it changes the platform login with it. It is OPTIONAL: B2B buyers without an address of their own are a routine case, and they sign in by username instead. Two people sharing one address is still not possible — a shared purchasing mailbox is one contact, not several.
+     * @param {string} externalId - Id of this person in the system the record came from — an ERP contact number, a CRM id. Nullable, because a contact created in the shop has none and never will, and unique per tenant where it is set, which is what lets a repeated import find the row it wrote last time instead of adding a second one. Distinct from `external_user_id`, which points at the platform account: this one points OUT of the platform. Writable, so a record can be adopted or a wrong id corrected — but it is the key a repeated import matches on, so changing it on a row an import owns makes the next run create a second one rather than update this.
      * @param {string} firstName - Given name. Optional: an ERP import often has only a mailbox.
      * @param {boolean} isPrimary - The main contact of its organization — who a merchant calls first. At most one per company is the intent; the tenant's `primary_contact_required` setting decides whether the last one may be demoted or deleted.
      * @param {string} jobTitle - What this person does at the company — free text on purpose, because it is a title and not a grant. The permission ladder is `role`; overloading a job title with authority silently un-grants everyone the day the ledger is enforced.
      * @param {string} lastName - Family name. Optional for the same reason.
      * @param {string} locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default.
-     * @param {number} orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Null means no ceiling. An amount, never a grant — the grant comes from the role.
+     * @param {number} orderApprovalLimit - Amount ceiling for this person, in the market's currency: with the `orders.approve` permission it is the most they may sign off. Set exactly when `order_approval_mode` is 'limited', and then above 0; null otherwise. An amount, never a grant — the grant comes from the role. Required with `order_approval_mode` 'limited' and refused with any other mode (400 `limited_mode_requires_limit` / `limit_requires_limited_mode`).
+     * @param {OrderApprovalMode} orderApprovalMode - How far `orders.approve` reaches for this person: 'none' (no order — the default), 'limited' (up to `order_approval_limit`) or 'unlimited'. Meaningful only with a role that grants `orders.approve`; the grant comes from the role, the reach from here. Default 'none'. Leaving 'limited' without sending `order_approval_limit` clears the amount.
      * @param {string} organizationId - The company this person belongs to. NULL is a legitimate state, not a defect: a standalone buyer with no company behind them. Deleting the organization sets this null and keeps the person. Membership is mirrored to the platform team.
      * @param {string} phone - Direct number of this person, as somebody typed it — free text, no format is enforced or normalized. E.164 is what an integration should send.
-     * @param {CustomersContactsCreateRegistrationStatus} registrationStatus - Where this person's own application stands: 'approved' (the default, and what an open store creates), 'pending' while a merchant has yet to decide, 'rejected' once they declined. Only the approve/reject routes move it; it is ignored on an ordinary update. On CREATE only, and only to file the contact as an application: 'pending' creates the platform user disabled and routes the contact through approve/reject. Ignored on update.
      * @param {string} role - The person's role INSIDE its organization, and the only thing permissions are derived from. One of the tenant's own roles (GET /customers/roles); a tenant that never edited the ledger has viewer, requester, buyer, approver, admin. Also the team role on the platform mirror. There is no global role — the same person in two companies is two contacts. A tenant that never edited the ledger has viewer, requester, buyer, approver, admin; a create without a role gets the one flagged as default, and a role the tenant does not keep is a 400.
      * @param {ContactStatus} status - Whether this person may act: 'invited' has been created but has not accepted, 'active' works, 'blocked' cannot log in. A create through the API defaults to 'invited'; a self-registration in an open store lands 'active'. Default 'invited' on create.
      * @throws {RevenexxException}
      * @returns {Promise<Models.Contact>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsUpdate(id: string, email?: string, firstName?: string, isPrimary?: boolean, jobTitle?: string, lastName?: string, locale?: string, orderApprovalLimit?: number, organizationId?: string, phone?: string, registrationStatus?: CustomersContactsCreateRegistrationStatus, role?: string, status?: ContactStatus): Promise<Models.Contact>;
+    customersContactsUpdate(id: string, email?: string, externalId?: string, firstName?: string, isPrimary?: boolean, jobTitle?: string, lastName?: string, locale?: string, orderApprovalLimit?: number, orderApprovalMode?: OrderApprovalMode, organizationId?: string, phone?: string, role?: string, status?: ContactStatus): Promise<Models.Contact>;
     /**
      * Same row as the contact route, reached from the organization. 'contact_id' is required and must belong to THIS organization — the picker offering the contacts is not filtered, so the membership check here is what stops a call with one company being filed under someone else's person.
      *