api

type Action struct {
	// Approval Approval gating for an action. When `required` is true, the runtime
	// holds the action-run HTTP response open while it queues an approval
	// request to the orchestrator; the response unblocks only when the user
	// approves (action runs normally) or denies (returns an
	// `approval_denied` failure envelope). The agent surfaces the approval
	// URL to the user via tool descriptions templated by `aileron-mcp`.
	Approval *ActionApprovalPolicy `json:"approval,omitempty"`

	// Body Markdown content following the closing `+++` delimiter. The first
	// paragraph (or a designated section) is surfaced to the LLM as the
	// function description when the action is exposed as a tool.
	Body *string `json:"body,omitempty"`

	// Enabled Whether the action is currently exposed to the LLM as a callable
	// tool. Sourced from the per-user overlay at
	// `~/.aileron/action-state.json`; absent overlay entries default to
	// `true`. Disabling does not uninstall the action — the manifest
	// file is left untouched. MCP servers must hide disabled actions
	// from `tools/list` and refuse calls against them.
	Enabled *bool               `json:"enabled,omitempty"`
	Execute []ActionExecuteStep `json:"execute"`

	// Inputs Declared call-time arguments. Per ADR-0003, inputs map directly
	// to the JSON Schema `parameters` object the LLM sees when
	// Aileron exposes the action as a tool.
	Inputs *[]ActionInput `json:"inputs,omitempty"`
	Match  ActionMatch    `json:"match"`

	// Name Bare local handle for the action (e.g. "ship-update").
	Name string `json:"name"`

	// Path Absolute path of the source file on disk.
	Path     *string        `json:"path,omitempty"`
	Requires ActionRequires `json:"requires"`

	// Source Fully-qualified URI of the template the action was installed from
	// (e.g. "hub://aileron/ship-update@1.0.0"). Provenance only — not
	// consulted at runtime.
	Source string `json:"source"`

	// Version Strict SemVer of the action manifest.
	Version string `json:"version"`
}

type ActionApprovalDecision struct {
	// Approved True to allow the action to run; false to deny.
	Approved bool `json:"approved"`

	// EditedPayload Kind-specific fields the user changed (or chose) before
	// approving. Omitted when the user approved without edits or
	// the kind doesn't support them. Consumers read kind-specific
	// keys:
	//
	//   - `kind=comms_draft` — `body` carries the edited reply
	//     bytes; the CommsServer dispatcher sends those rather
	//     than the agent's original draft.
	//   - `kind=shell` — `save_policy` carries `""` | `"project"`
	//     | `"user"`; the launch-side approval socket translates
	//     this into the `allow_once` / `allow_project` /
	//     `allow_user` wire string aileron-sh writes the new
	//     allow rule under.
	EditedPayload *map[string]interface{} `json:"edited_payload,omitempty"`

	// Reason Optional commentary from the user. Surfaced to the agent in
	// the deny path so it can recover gracefully (e.g. "wrong
	// recipient — I'll redraft").
	Reason *string `json:"reason,omitempty"`
}

type ActionApprovalListResponse struct {
	Items []PendingActionApproval `json:"items"`
}

type ActionApprovalPolicy struct {
	// Preview Optional `[approval.preview]` directive (ADR-0016). When present, the
	// runtime invokes the named connector op before showing the approval
	// prompt and renders the response alongside the gated call's inputs so
	// the user sees an authoritative summary of what they are approving
	// rather than agent-supplied hints.
	Preview *ActionApprovalPreviewPolicy `json:"preview,omitempty"`

	// Required When true, `POST /v1/actions/{name}/run` blocks on user approval
	// before executing. Default false.
	Required *bool `json:"required,omitempty"`
}

type ActionApprovalPreview struct {
	// Fields Rendered entries in the manifest's declared order. Omitted on
	// wholesale preview failure.
	Fields *[]ActionApprovalPreviewField `json:"fields,omitempty"`

	// Unavailable User-facing reason a wholesale preview failure occurred. Empty
	// on success (even when some individual fields had missing paths).
	Unavailable *string `json:"unavailable,omitempty"`
}

type ActionApprovalPreviewField struct {
	// Label User-facing key from the manifest's `render` table.
	Label string `json:"label"`

	// Missing True when the manifest's render path did not resolve in the
	// preview op's response. The UI surfaces these as "n/a" so the
	// user sees that the connector did not return the field, rather
	// than the field being silently absent.
	Missing *bool `json:"missing,omitempty"`

	// Multiline True when the manifest's `multiline` list named this field's
	// label. The approval surface renders the value as a scrollable
	// blockquote below the inline rows rather than as a single-line
	// `key: value` entry. Omitted (or false) for short fields.
	Multiline *bool `json:"multiline,omitempty"`

	// Value Resolved string. Empty when `missing=true`; the UI renders "n/a"
	// in that case.
	Value *string `json:"value,omitempty"`
}

type ActionApprovalPreviewPolicy struct {
	// Args Inline argument table passed to the preview op. Values may
	// interpolate `${args.<name>}` against the gated action's
	// call-time inputs.
	Args *map[string]interface{} `json:"args,omitempty"`

	// Multiline Labels in `render` whose values are long-form content (email
	// bodies, commit messages, response payloads). The approval surface
	// renders these as scrollable blockquotes below the inline rows
	// rather than as single-line `key: value` entries. Optional; a
	// manifest that omits it renders all fields inline. Entries must
	// appear as keys in `render`; mismatches are rejected at manifest
	// load time.
	Multiline *[]string `json:"multiline,omitempty"`

	// Op Connector op the runtime calls before approval. Must live on the
	// same connector as the gated action's first execute step, must be
	// declared `idempotent = true` in at least one bundled action
	// manifest, and must not itself carry `[approval] required = true`
	// (no preview-of-preview recursion).
	Op string `json:"op"`

	// Render Map of user-facing labels to dotted JSON paths into the preview
	// op's response. Header-style arrays (e.g. Gmail's
	// `message.payload.headers`) use a shorthand: a path segment beyond
	// such an array is interpreted as "find the entry whose `name`
	// equals the segment, return its `value`". Paths that fail to
	// resolve at runtime surface as per-field "n/a" indicators on the
	// approval prompt; the approval still proceeds.
	Render map[string]string `json:"render"`
}

type ActionApprovalResult struct {
	// AuditId Audit log id; populated when `status = completed`.
	AuditId *string `json:"audit_id,omitempty"`

	// Failure Action-side failure envelope; populated when
	// `status = failed`. Same shape the synchronous path would
	// have returned as a 4xx/5xx body.
	Failure *FailureEnvelope `json:"failure,omitempty"`

	// Reason User's deny commentary; populated when `status = denied`.
	// May be empty if the user denied without a reason.
	Reason *string `json:"reason,omitempty"`

	// Result Action output payload; populated when `status = completed`.
	// Same shape as `ActionRunResponse.result`.
	Result *string `json:"result,omitempty"`

	// Status - `pending_approval` — the user has not yet decided.
	// - `awaiting_vault` — the user approved before the daemon
	//   restarted; the entry is replayed but the local vault is
	//   currently locked, so the executor is waiting for the
	//   user to unlock the vault before running the action.
	// - `running` — the user approved; the daemon is executing
	//   the action.
	// - `completed` — the action ran successfully; see `audit_id`
	//   and `result`.
	// - `denied` — the user denied the approval; see `reason`.
	// - `failed` — the action was approved but its execution
	//   errored; see `failure`. Also used at replay time when a
	//   `running` entry was found on disk (daemon crashed
	//   mid-execution; the runtime refuses to auto-rerun
	//   non-idempotent actions). In that case `reason` carries
	//   an explanatory message.
	Status ActionApprovalResultStatus `json:"status"`
}

type ActionApprovalResultStatus string

type ActionConnectorDep struct {
	// AlreadyInstalled True when an entry with this hash is already in the
	// cstore. The CLI renders this so the operator sees which
	// deps are new (will be installed) versus existing (no
	// change).
	AlreadyInstalled bool `json:"already_installed"`

	// Capabilities Subset of the connector's declared capabilities the
	// action will exercise. Empty means the action declared no
	// capability subset.
	Capabilities *[]string `json:"capabilities,omitempty"`

	// Fqn Connector FQN per ADR-0002.
	Fqn string `json:"fqn"`

	// Hash Connector content hash the action pins (`sha256:<hex>`).
	// The runtime verifies this before every connector
	// invocation per ADR-0004.
	Hash string `json:"hash"`

	// Version Strict SemVer pinned by the action.
	Version string `json:"version"`
}

type ActionExecuteStep struct {
	Connector  string                  `json:"connector"`
	Id         string                  `json:"id"`
	Idempotent *bool                   `json:"idempotent,omitempty"`
	Inputs     *map[string]interface{} `json:"inputs,omitempty"`
	Op         string                  `json:"op"`
}

type ActionInput struct {
	// Description Field-level prose surfaced to the LLM in the
	// `parameters.properties[name].description` slot.
	Description string `json:"description"`

	// ItemsType JSON Schema type of an array input's elements. Only meaningful
	// when `type` is `array`. When set, the LLM-facing tool schema
	// emits `"items": {"type": <items_type>}`. When unset on an array
	// input, the schema emits `"items": {}` (any) so MCP clients that
	// default missing-`items` to `string[]` projection do not silently
	// coerce object elements to strings.
	ItemsType *ActionInputItemsType `json:"items_type,omitempty"`

	// Name Argument identifier matching `^[a-z][a-z0-9_]*$`.
	Name string `json:"name"`

	// Required Defaults to true when omitted. Set false to mark the argument
	// as optional in the LLM-facing parameter schema.
	Required *bool `json:"required,omitempty"`

	// Type JSON Schema type. Scalar types (`string`, `integer`, `number`,
	// `boolean`) and structured types (`array`, `object`) are accepted.
	// Structured types are passed through to the LLM-facing tool-use
	// schema with optional shape constraints declared on adjacent
	// fields (`items_type` for arrays); the connector is responsible
	// for validating semantic shape at op time.
	Type ActionInputType `json:"type"`
}

type ActionInputItemsType string

type ActionInputType string

type ActionIntent struct {
	// Domain Carries action-type-specific fields. Exactly one field must be populated,
	// corresponding to the prefix of ActionIntent.type:
	//   - git.* → git
	//   - deploy.* → deploy
	//   - cloud.* → cloud
	//   - email.* → email
	//   - calendar.* → calendar
	//   - payment.* → payment
	//   - procurement.* → procurement
	// The server rejects requests where the populated domain field does not
	// match the action type prefix.
	Domain        *DomainAction           `json:"domain,omitempty"`
	Justification *string                 `json:"justification,omitempty"`
	Metadata      *map[string]interface{} `json:"metadata,omitempty"`
	Summary       string                  `json:"summary"`
	Target        *ActionTarget           `json:"target,omitempty"`
	Type          string                  `json:"type"`
}

type ActionListResponse struct {
	Items      *[]Action          `json:"items,omitempty"`
	LoadErrors *[]ActionLoadError `json:"load_errors,omitempty"`
}

type ActionLoadError struct {
	// Boundary Which layer produced the error (always "action" for load failures).
	Boundary *string `json:"boundary,omitempty"`

	// Class Canonical failure class (e.g. parse_error, validation_error).
	Class string `json:"class"`

	// File Absolute path of the offending file.
	File string `json:"file"`

	// Line Line within the file where the error was detected; 0 when unknown.
	Line    *int   `json:"line,omitempty"`
	Message string `json:"message"`
}

type ActionMatch struct {
	// Intent Canonical phrase the runtime matches against agent intent.
	Intent string `json:"intent"`
}

type ActionPatchRequest struct {
	// Enabled When set, replaces the action's enabled flag in the overlay
	// (see [Action.enabled]). Omit to leave the current value
	// untouched.
	Enabled *bool `json:"enabled,omitempty"`
}

type ActionPreview struct {
	// AlreadyInstalled True when an action with this name is already installed
	// and its hash matches. The CLI uses this to short-circuit
	// past the consent prompt.
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// ConnectorDeps One entry per `[[requires.connectors]]` in the action's
	// manifest, in declaration order.
	ConnectorDeps []ActionConnectorDep `json:"connector_deps"`

	// Existing Set when an action with the same `name` is already
	// installed but its bytes differ from the previewed
	// manifest (typically a different version). Mutually
	// exclusive with `already_installed = true`. The CLI uses
	// this to render an upgrade prompt instead of treating
	// the install as fresh — the operator sees the installed
	// version side-by-side with the requested version and can
	// choose to overwrite.
	Existing *InstalledActionRef `json:"existing,omitempty"`

	// Fqn Canonical FQN of the previewed action.
	Fqn string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the fetched action manifest.
	// Same value the install endpoint will record.
	Hash string `json:"hash"`

	// Intent Action's `[match] intent` — the canonical natural-language
	// phrase the runtime matches against agent requests. Used in
	// the consent prompt so the operator knows when this action
	// will fire. Optional.
	Intent *string `json:"intent,omitempty"`

	// Name Action name from the manifest's `name = "<name>"` field —
	// the slug under `~/.aileron/actions/<name>.md`.
	Name string `json:"name"`

	// SignatureStatus Action signatures are optional in v1 — manifests without a
	// signature surface as `unsigned` rather than as an error.
	// Operators see this in the consent prompt and decide
	// whether to proceed.
	SignatureStatus *ActionPreviewSignatureStatus `json:"signature_status,omitempty"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ActionPreviewSignatureStatus string

type ActionRequires struct {
	Connectors *[]ActionRequiresConnector `json:"connectors,omitempty"`
}

type ActionRequiresConnector struct {
	// Capabilities The action's declared subset of operations on the connector. Per
	// ADR-0003, calls outside this subset are denied at the action
	// boundary even when the connector permits the operation.
	Capabilities []string `json:"capabilities"`

	// Hash Content hash of the connector binary plus its manifest.
	Hash string `json:"hash"`

	// Name Connector FQN per ADR-0002 (e.g. "github://aileron/slack").
	Name string `json:"name"`

	// Version Pinned SemVer of the connector.
	Version string `json:"version"`
}

type ActionRunPendingResponse struct {
	// ApprovalId Opaque server-minted id for the pending approval entry.
	// The agent passes this to the `check_action_status` MCP
	// tool (or to `GET /v1/action-approvals/{id}/result`) to
	// learn the outcome.
	ApprovalId string `json:"approval_id"`

	// Message Human-readable instruction the agent should surface to the
	// user verbatim. Names the approval, the review URL, and the
	// `aileron open approval <id>` shell command alternative.
	Message string `json:"message"`

	// ReviewUrl Deep link to the webapp's approvals page anchored at this
	// approval (`<webapp>/approvals?focus=<id>`). Empty when the
	// daemon has no webapp URL configured.
	ReviewUrl *string `json:"review_url,omitempty"`

	// Status Discriminator. Always `pending_approval` for this shape;
	// included so the agent's MCP wrapper can branch without
	// inspecting the HTTP status code.
	Status ActionRunPendingResponseStatus `json:"status"`
}

type ActionRunPendingResponseStatus string

type ActionRunRequest struct {
	// Args Per-call arguments matching the action's declared inputs.
	Args *map[string]interface{} `json:"args,omitempty"`
}

type ActionRunResponse struct {
	// AuditId Audit log ID for this execution per ADR-0010. Always present
	// so callers can cross-reference into the audit log.
	AuditId string `json:"audit_id"`

	// ConnectorHash Content hash (`sha256:<hex>`) of the connector binary plus its
	// manifest, copied from the action manifest's
	// `[[requires.connectors]]` entry. Present when the action is
	// connector-backed. Pairs with `connector_version` as the
	// actor-side content-addressed provenance for the produced output.
	ConnectorHash *string `json:"connector_hash,omitempty"`

	// ConnectorVersion Pinned semantic version of the connector that produced this
	// result, copied from the action manifest's
	// `[[requires.connectors]]` entry. Present when the action is
	// connector-backed. Part of the actor provenance a caller records
	// on an `output.materialized` event so an output digest walks back
	// to the exact connector build that produced it (issue #1753).
	ConnectorVersion *string `json:"connector_version,omitempty"`

	// ConsentDecision Consent posture under which the action ran. Always `unattended`
	// on this synchronous 200 path: an approval-gated action returns
	// 202 with an `ActionRunPendingResponse` and never reaches this
	// success shape, so a result surfaced here ran without an
	// interactive approval.
	ConsentDecision *string `json:"consent_decision,omitempty"`

	// CredentialBinding Name of the credential binding the action used at the boundary
	// (a reference, never the secret). Present only when a binding
	// resolved; omitted otherwise. Lets an audited output walk back to
	// the exact identity that authorized the read.
	CredentialBinding *string `json:"credential_binding,omitempty"`

	// IdentityLabel Non-secret identity label of the credential binding the action
	// resolved at the boundary (never the credential itself). Present
	// only when the action resolved a single credential binding;
	// omitted for a credential-less action or when no binding resolved.
	IdentityLabel *string `json:"identity_label,omitempty"`

	// Result Action output payload — the same Content the LLM observes
	// as a tool result when the action runs through the gateway's
	// intercept path. Typically a JSON document; may be plain
	// prose for actions whose output is naturally a sentence.
	Result *string `json:"result,omitempty"`
}

type ActionTarget struct {
	DisplayName *string          `json:"display_name,omitempty"`
	Id          *string          `json:"id,omitempty"`
	Kind        ActionTargetKind `json:"kind"`
}

type ActionTargetKind string

type ActorRef struct {
	// CredentialBinding The credential binding the action's identity resolved to. Normalized onto the actor by the daemon at ingest from the runtime's `aileron.actor.credential_binding` payload key.
	CredentialBinding *string `json:"credential_binding,omitempty"`
	DisplayName       *string `json:"display_name,omitempty"`
	Id                string  `json:"id"`

	// IdentityLabel The connector identity label whose credential the action ran under. Normalized onto the actor by the daemon at ingest from the runtime's `aileron.actor.identity_label` payload key.
	IdentityLabel *string      `json:"identity_label,omitempty"`
	Type          ActorRefType `json:"type"`
}

type ActorRefType string

type AgentCredentialSummary struct {
	// Metadata Non-secret metadata stored alongside the credential bytes. Mirrors
	// the `vault.Metadata` shape.
	Metadata *AgentCredentialsMetadata `json:"metadata,omitempty"`

	// Name Agent identifier (e.g. "claude", "codex"), derived from the
	// `<name>` segment of the `agents/<name>/<purpose>` vault path.
	Name string `json:"name"`

	// Purpose Credential purpose (e.g. "oauth", "apikey"), derived from the
	// `<purpose>` segment of the `agents/<name>/<purpose>` vault
	// path. Omitted (absent) entries predate per-purpose listing and
	// should be treated as `oauth`.
	Purpose *string `json:"purpose,omitempty"`
}

type AgentCredentials struct {
	// Metadata Non-secret metadata stored alongside the credential bytes. Mirrors
	// the `vault.Metadata` shape.
	Metadata *AgentCredentialsMetadata `json:"metadata,omitempty"`

	// Value Base64-encoded credential bytes. The launcher writes these
	// verbatim into the agent's in-container credential file.
	Value []byte `json:"value"`
}

type AgentCredentialsList struct {
	Agents []AgentCredentialSummary `json:"agents"`
}

type AgentCredentialsMetadata struct {
	// Environment Optional environment label (e.g. `personal`, `work`).
	Environment *string `json:"environment,omitempty"`

	// Labels Arbitrary key/value pairs for organization.
	Labels *map[string]string `json:"labels,omitempty"`

	// Type Credential classification (e.g. `oauth_refresh_token`,
	// `api_key`). Matches the agent's binding declaration.
	Type *string `json:"type,omitempty"`
}

type AnalyticsSummary struct {
	ApprovalLatencyMs *struct {
		P50 *int `json:"p50,omitempty"`
		P95 *int `json:"p95,omitempty"`
	} `json:"approval_latency_ms,omitempty"`
	ByRiskLevel *map[string]int `json:"by_risk_level,omitempty"`
	Spend       *struct {
		Currency        *string `json:"currency,omitempty"`
		TotalMinorUnits *int    `json:"total_minor_units,omitempty"`
	} `json:"spend,omitempty"`
	Totals *struct {
		ApprovalsGranted    *int `json:"approvals_granted,omitempty"`
		ApprovalsRequested  *int `json:"approvals_requested,omitempty"`
		Denials             *int `json:"denials,omitempty"`
		ExecutionsFailed    *int `json:"executions_failed,omitempty"`
		ExecutionsSucceeded *int `json:"executions_succeeded,omitempty"`
		Intents             *int `json:"intents,omitempty"`
	} `json:"totals,omitempty"`
}

type AnthropicMessage struct {
	// Content String or array of content blocks (`text`, `tool_use`,
	// `tool_result`, `image`, ...). Shape follows Anthropic's
	// Messages contract.
	Content              interface{}            `json:"content"`
	Role                 AnthropicMessageRole   `json:"role"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type AnthropicMessageRole string

type AnthropicTool struct {
	Description *string `json:"description,omitempty"`

	// InputSchema JSON Schema for the tool's input.
	InputSchema          *map[string]interface{} `json:"input_schema,omitempty"`
	Name                 string                  `json:"name"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type AppendEvidenceRequest struct {
	Evidence []EvidenceItem `json:"evidence"`
}

type AppendIntentEvidenceJSONRequestBody = AppendEvidenceRequest

type Approval struct {
	ApprovalId     string                  `json:"approval_id"`
	Approvers      []ApprovalActor         `json:"approvers"`
	EditableBounds *map[string]interface{} `json:"editable_bounds,omitempty"`
	ExpiresAt      *time.Time              `json:"expires_at,omitempty"`
	IntentId       string                  `json:"intent_id"`
	Rationale      *string                 `json:"rationale,omitempty"`
	RequestedAt    time.Time               `json:"requested_at"`
	ResolvedAt     *time.Time              `json:"resolved_at,omitempty"`
	Status         ApprovalStatus          `json:"status"`
	WorkspaceId    *string                 `json:"workspace_id,omitempty"`
}

type ApprovalActionResponse struct {
	ApprovalId       string         `json:"approval_id"`
	ExecutionGrantId *string        `json:"execution_grant_id,omitempty"`
	IntentStatus     *IntentStatus  `json:"intent_status,omitempty"`
	Status           ApprovalStatus `json:"status"`
}

type ApprovalActor struct {
	DisplayName *string              `json:"display_name,omitempty"`
	PrincipalId string               `json:"principal_id"`
	Role        *string              `json:"role,omitempty"`
	Status      *ApprovalActorStatus `json:"status,omitempty"`
}

type ApprovalActorStatus string

type ApprovalId = string

type ApprovalListResponse struct {
	Items      *[]Approval `json:"items,omitempty"`
	Pagination *Pagination `json:"pagination,omitempty"`
}

type ApprovalRequirement struct {
	ApproverGroupId *string                  `json:"approver_group_id,omitempty"`
	Mode            *ApprovalRequirementMode `json:"mode,omitempty"`
	QuorumCount     *int                     `json:"quorum_count,omitempty"`
}

type ApprovalRequirementMode string

type ApprovalStatus string

type ApproveRequest struct {
	ApproveOnce         *bool   `json:"approve_once,omitempty"`
	Comment             *string `json:"comment,omitempty"`
	StepUpAuthAssertion *string `json:"step_up_auth_assertion,omitempty"`
}

type ApproveRequestJSONRequestBody = ApproveRequest

type AttachmentRef struct {
	MimeType   *string `json:"mime_type,omitempty"`
	Name       *string `json:"name,omitempty"`
	StorageRef *string `json:"storage_ref,omitempty"`
	Url        *string `json:"url,omitempty"`
}

type AuditEvent struct {
	Actor ActorRef `json:"actor"`

	// AuditId Stable id minted by the recorder. For failures, also
	// stamped onto the `FailureEnvelope.error.audit_id` so the
	// envelope returned to the caller is a working back-reference.
	AuditId string `json:"audit_id"`

	// EventType Discriminator for the payload shape (e.g.
	// `execution.failed`, `action.installed`, `binding.created`).
	EventType string `json:"event_type"`

	// Payload Event-shaped payload. For failures, contains
	// `class`/`boundary`/`retriable`/`message`/`details`. For
	// success events, contains the event-specific fields the
	// recorder set (e.g. `name`, `connector_fqn`, `kind` for a
	// binding event).
	Payload map[string]interface{} `json:"payload"`

	// Timestamp When the event was recorded; RFC 3339, UTC.
	Timestamp time.Time `json:"timestamp"`
}

type AuditIngestRequest struct {
	Actor ActorRef `json:"actor"`

	// EventType Discriminator for the payload shape (e.g.
	// `flightplan.launch.action`, `flightplan.launch`).
	EventType string `json:"event_type"`

	// Payload Event-shaped payload recorded verbatim.
	Payload map[string]interface{} `json:"payload"`

	// Timestamp Optional, accepted for forward-compatibility. Ignored in
	// v1; the recorder stamps the server clock at commit time.
	Timestamp *time.Time `json:"timestamp,omitempty"`
}

type AuditIngestResponse struct {
	// AuditId The id the recorder minted for the appended event.
	AuditId string `json:"audit_id"`
}

type AuditListResponse struct {
	Events []AuditEvent `json:"events"`
}

type AuditTraceEdge struct {
	// From Parent (downstream/consumer) node id.
	From string `json:"from"`

	// To Child (upstream/producer) node id.
	To string `json:"to"`
}

type AuditTraceNode struct {
	// ContentHash For an artifact node, the content hash it materialized, or
	// for a `plan_input` node, the hash of the plan-provided root
	// input value (`sha256:<hex>`). Absent on step and literal nodes.
	ContentHash *string `json:"content_hash,omitempty"`

	// Dangling True when an artifact node's content hash could not be
	// resolved to a producing record (dangling upstream). Such a
	// node is marked, not fatal.
	Dangling *bool `json:"dangling,omitempty"`

	// Depth Distance from the root artifact (0 = root).
	Depth int `json:"depth"`

	// Event A single audit-log entry. Shape is stable across the events
	// the ADR-0010 recorder emits (failures, action installs,
	// binding lifecycle). Specific keys inside `payload` depend on
	// `event_type` and are documented in the recorder.
	Event *AuditEvent `json:"event,omitempty"`

	// Id Stable node id, unique within the graph.
	Id string `json:"id"`

	// Kind The node's role in the provenance graph.
	Kind AuditTraceNodeKind `json:"kind"`

	// Literal For a `literal` or `plan_input` node, the input
	// binding/source it stands for.
	Literal *struct {
		// Binding The input binding name.
		Binding string `json:"binding"`

		// Source The reference the input resolved (raw source).
		Source *string `json:"source,omitempty"`
	} `json:"literal,omitempty"`

	// Subtitle Optional secondary detail line.
	Subtitle *string `json:"subtitle,omitempty"`

	// Title One-line summary the consumer renders.
	Title string `json:"title"`
}

type AuditTraceNodeKind string

type AuditTraceResponse struct {
	Edges []AuditTraceEdge `json:"edges"`
	Nodes []AuditTraceNode `json:"nodes"`

	// RootId Id of the root artifact node the walk started at.
	RootId string `json:"root_id"`
}

type BadRequest = Error

type Binding struct {
	// AccessKeyId AWS access key ID for an `aws_sigv4` binding. Non-secret (it
	// appears verbatim in the signed `Authorization` header). Empty
	// for other kinds. The signing region and service are derived from
	// the resolved upstream host at egress, so no region rides on the
	// binding.
	AccessKeyId *string `json:"access_key_id,omitempty"`

	// Account Human-readable account label derived from credential metadata when available.
	Account *string `json:"account,omitempty"`

	// ConnectorFqn FQN of the connector this binding was created for.
	ConnectorFqn string    `json:"connector_fqn"`
	CreatedAt    time.Time `json:"created_at"`

	// GrantedScopes OAuth scope strings the provider confirmed on the most
	// recent successful handshake. Empty for non-OAuth kinds and
	// for OAuth bindings created before scope tracking landed
	// (those are migration-marked `stale` on first
	// install-after-upgrade).
	GrantedScopes *[]string `json:"granted_scopes,omitempty"`

	// Identity User-chosen handle distinguishing variants of the same kind+service (e.g. `work`, `personal`).
	Identity string `json:"identity"`

	// Kind Credential kind (e.g. `api_key`, `oauth2`). Matches the connector manifest's `[capabilities.credential].kind`.
	Kind string `json:"kind"`

	// LastRefreshedAt Reserved for OAuth refresh tracking (#388); always null for `api_key`.
	LastRefreshedAt *time.Time `json:"last_refreshed_at,omitempty"`

	// LastUsedAt Last time the runtime resolved this binding for an action invocation.
	LastUsedAt *time.Time `json:"last_used_at,omitempty"`

	// MissingScopes Scope strings the current connector manifest demands but
	// this binding's recorded grant lacks. Populated when
	// `stale_reason == "scope_drift"` and empty otherwise. The
	// webapp/CLI render this so the user can see what
	// reauthorization will unlock.
	MissingScopes *[]string `json:"missing_scopes,omitempty"`

	// Name Full binding name in `<kind>/<service>/<identity>` form.
	Name string `json:"name"`

	// RefreshTokenPresent Reserved for OAuth refresh tracking (#388); always false for `api_key`.
	RefreshTokenPresent *bool `json:"refresh_token_present,omitempty"`

	// Scope Optional scope string copied from the connector manifest at setup time.
	Scope *string `json:"scope,omitempty"`

	// Service Service identifier (e.g. `slack`, `linear`).
	Service string `json:"service"`

	// StaleReason Populated when `status == "stale"`. `scope_drift` means the
	// connector manifest declares a scope this binding lacks;
	// `no_grant_record` means the binding predates scope tracking
	// and was migration-marked on the first install-after-upgrade.
	StaleReason *BindingStaleReason `json:"stale_reason,omitempty"`

	// Status Coarse health flag. `stale` is set by drift detection at
	// connector-install time when the manifest's OAuth scope set
	// demands a scope the binding's recorded grant does not have,
	// or when a pre-existing binding has no recorded grant.
	Status *BindingStatus `json:"status,omitempty"`
}

type BindingListResponse struct {
	Items []Binding `json:"items"`
}

type BindingName = string

type BindingSetupRequest struct {
	Bindings []struct {
		// Account Optional human-readable account label.
		Account *string `json:"account,omitempty"`

		// Identity User-chosen handle for this binding. Combined with the
		// connector's declared kind and service to form the
		// full binding name `<kind>/<service>/<identity>`.
		Identity string `json:"identity"`

		// Service Optional service override. Defaults to the service
		// segment derived from the connector FQN's host.
		Service *string `json:"service,omitempty"`

		// Source Per-binding credential source. Supports `api_key` and `aws_sigv4`
		// directly; `oauth2` is created through the dedicated OAuth dance and
		// setting `kind: oauth2` here returns a structured `400` referencing
		// #388.
		Source BindingSource `json:"source"`
	} `json:"bindings"`

	// ConnectorFqn Fully-qualified connector name (e.g. `github://aileron/slack`).
	// The connector must already be installed.
	ConnectorFqn string `json:"connector_fqn"`

	// SkipExisting When true (default), bindings whose name already exists are
	// skipped silently and reported in the response's `skipped`
	// list. When false, the entire request fails with `409 Conflict`
	// on the first existing binding.
	SkipExisting *bool `json:"skip_existing,omitempty"`
}

type BindingSetupResponse struct {
	Created []Binding `json:"created"`

	// Skipped Names of bindings that already existed (only populated when `skip_existing` was true).
	Skipped *[]string `json:"skipped,omitempty"`
}

type BindingSource struct {
	// AccessKeyId Optional AWS access key ID for an `aws_sigv4` binding. Non-secret
	// (it appears verbatim in the signed `Authorization` header's
	// `Credential=` field). When set it is stored on the binding and
	// wins over the connector manifest's `access_key_id` at signing
	// time. Ignored for other kinds. The signing region and service are
	// derived from the resolved upstream host at egress, so a binding
	// carries no region.
	AccessKeyId *string `json:"access_key_id,omitempty"`

	// Kind Credential kind. Must match the connector manifest's declared
	// `[capabilities.credential].kind` for the requested capability.
	Kind BindingSourceKind `json:"kind"`

	// Value Raw credential bytes. For `api_key` this is the API key; for
	// `aws_sigv4` it is the AWS secret access key. Required for both
	// kinds. The runtime stores this encrypted in the vault and never
	// exposes it to the connector.
	Value *string `json:"value,omitempty"`
}

type BindingSourceKind string

type BindingStaleReason string

type BindingStatus string

type CalendarAction struct {
	Attendees      *[]CalendarAttendee           `json:"attendees,omitempty"`
	CalendarId     *string                       `json:"calendar_id,omitempty"`
	ConferenceType *CalendarActionConferenceType `json:"conference_type,omitempty"`
	Description    *string                       `json:"description,omitempty"`
	EndTime        *time.Time                    `json:"end_time,omitempty"`
	Location       *string                       `json:"location,omitempty"`
	Provider       *CalendarActionProvider       `json:"provider,omitempty"`
	StartTime      *time.Time                    `json:"start_time,omitempty"`
	Timezone       *string                       `json:"timezone,omitempty"`
	Title          *string                       `json:"title,omitempty"`
	Visibility     *CalendarActionVisibility     `json:"visibility,omitempty"`
}

type CalendarActionConferenceType string

type CalendarActionProvider string

type CalendarActionVisibility string

type CalendarAttendee struct {
	Email    openapi_types.Email `json:"email"`
	Name     *string             `json:"name,omitempty"`
	Optional *bool               `json:"optional,omitempty"`
}

type ChatCompletionChoice struct {
	FinishReason         string                 `json:"finish_reason"`
	Index                int                    `json:"index"`
	Message              ChatCompletionMessage  `json:"message"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type ChatCompletionFunctionDef struct {
	Description *string `json:"description,omitempty"`
	Name        string  `json:"name"`

	// Parameters JSON Schema for the function's parameters.
	Parameters           *map[string]interface{} `json:"parameters,omitempty"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type ChatCompletionMessage struct {
	// Content String or array of content parts; shape follows the upstream
	// provider's contract. Aileron does not require parsing.
	Content interface{}               `json:"content,omitempty"`
	Name    *string                   `json:"name,omitempty"`
	Role    ChatCompletionMessageRole `json:"role"`

	// ToolCallId Required on `tool` role messages.
	ToolCallId           *string                   `json:"tool_call_id,omitempty"`
	ToolCalls            *[]ChatCompletionToolCall `json:"tool_calls,omitempty"`
	AdditionalProperties map[string]interface{}    `json:"-"`
}

type ChatCompletionMessageRole string

type ChatCompletionRequest struct {
	Messages []ChatCompletionMessage `json:"messages"`

	// Model Model identifier passed to the upstream provider.
	Model string `json:"model"`

	// Stream When true, the response is `text/event-stream`. Aileron
	// buffers tool-call deltas for augmented actions until the call
	// is structurally complete.
	Stream *bool `json:"stream,omitempty"`

	// ToolChoice Passed through to the upstream provider unchanged.
	ToolChoice interface{} `json:"tool_choice,omitempty"`

	// Tools Agent-declared tools. Aileron preserves these unchanged and
	// appends installed actions to the array before forwarding
	// upstream.
	Tools                *[]ChatCompletionTool  `json:"tools,omitempty"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type ChatCompletionResponse struct {
	Choices              []ChatCompletionChoice  `json:"choices"`
	Created              *int                    `json:"created,omitempty"`
	Id                   string                  `json:"id"`
	Model                string                  `json:"model"`
	Object               string                  `json:"object"`
	Usage                *map[string]interface{} `json:"usage,omitempty"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type ChatCompletionTool struct {
	Function             *ChatCompletionFunctionDef `json:"function,omitempty"`
	Type                 ChatCompletionToolType     `json:"type"`
	AdditionalProperties map[string]interface{}     `json:"-"`
}

type ChatCompletionToolCall struct {
	Function struct {
		// Arguments JSON-encoded argument object.
		Arguments string `json:"arguments"`
		Name      string `json:"name"`
	} `json:"function"`
	Id                   string                     `json:"id"`
	Type                 ChatCompletionToolCallType `json:"type"`
	AdditionalProperties map[string]interface{}     `json:"-"`
}

type ChatCompletionToolCallType string

type ChatCompletionToolType string

type CheckConnectorsParams struct {
	// IncludePrerelease Include pre-release versions when computing the latest version.
	IncludePrerelease *bool `form:"include_prerelease,omitempty" json:"include_prerelease,omitempty"`
}

type CloudAction struct {
	AccountId     *string              `json:"account_id,omitempty"`
	EstimatedCost *Money               `json:"estimated_cost,omitempty"`
	Operation     *string              `json:"operation,omitempty"`
	Provider      *CloudActionProvider `json:"provider,omitempty"`
	Region        *string              `json:"region,omitempty"`
	ResourceId    *string              `json:"resource_id,omitempty"`
	ResourceType  *string              `json:"resource_type,omitempty"`
	Tags          *map[string]string   `json:"tags,omitempty"`
}

type CloudActionProvider string

type CommsMessage struct {
	// Author Sender's display name.
	Author string `json:"author"`

	// Body Full message text.
	Body string `json:"body"`

	// Channel Channel name or ID the message arrived on.
	Channel string `json:"channel"`

	// DraftRequest True when the message arrived on a channel configured for
	// auto-draft and no reply has been drafted yet — the agent
	// should call `draft_reply` with this message's id.
	DraftRequest *bool `json:"draft_request,omitempty"`

	// Id Stable per-message identifier (set by the inbound listener).
	Id string `json:"id"`

	// Service Source service ("slack", "discord", ...).
	Service string `json:"service"`

	// Timestamp When the listener received the message (RFC3339).
	Timestamp time.Time `json:"timestamp"`
}

type ConfirmedFingerprint struct {
	// Fingerprint Publisher-key fingerprint the operator confirmed
	// (`sha256:<22 base64-no-padding chars>`).
	Fingerprint string `json:"fingerprint"`

	// Fqn Connector authority FQN (e.g. `github://alice/conn-x`).
	Fqn string `json:"fqn"`
}

type Conflict = Error

type ConnectAccountCallbackParams struct {
	Code  string  `form:"code" json:"code"`
	State *string `form:"state,omitempty" json:"state,omitempty"`
}

type ConnectAccountParams struct {
	// ReturnTo URL to redirect to after the account is connected. Must be a same-site absolute URL or a relative path. Defaults to /settings/connected-accounts.
	ReturnTo *string `form:"return_to,omitempty" json:"return_to,omitempty"`
}

type ConnectedAccount struct {
	CreatedAt *time.Time `json:"created_at,omitempty"`

	// ExternalUserId Provider-specific user identifier (e.g. email for Gmail, username for GitHub, user ID for Slack)
	ExternalUserId *string                   `json:"external_user_id,omitempty"`
	Id             *string                   `json:"id,omitempty"`
	Provider       *ConnectedAccountProvider `json:"provider,omitempty"`

	// Scopes OAuth scopes granted to Aileron
	Scopes    *[]string               `json:"scopes,omitempty"`
	Status    *ConnectedAccountStatus `json:"status,omitempty"`
	UpdatedAt *time.Time              `json:"updated_at,omitempty"`
	UserId    *string                 `json:"user_id,omitempty"`
}

type ConnectedAccountProvider string

type ConnectedAccountStatus string

type Connector struct {
	Auth        *ConnectorAuth          `json:"auth,omitempty"`
	ConnectorId string                  `json:"connector_id"`
	Environment *string                 `json:"environment,omitempty"`
	Metadata    *map[string]interface{} `json:"metadata,omitempty"`
	Name        string                  `json:"name"`
	PolicyIds   *[]string               `json:"policy_ids,omitempty"`
	Provider    *string                 `json:"provider,omitempty"`
	Status      ConnectorStatus         `json:"status"`
	Type        ConnectorType           `json:"type"`
	WorkspaceId string                  `json:"workspace_id"`
}

type ConnectorAuth struct {
	Method      ConnectorAuthMethod `json:"method"`
	ReferenceId *string             `json:"reference_id,omitempty"`
	Scopes      *[]string           `json:"scopes,omitempty"`
}

type ConnectorAuthMethod string

type ConnectorCheckResult struct {
	// AvailableVersions Versions strictly newer than `current_version`, sorted descending.
	// Omitted when `error` is present. Excludes pre-releases unless
	// the request set `include_prerelease=true`.
	AvailableVersions *[]string `json:"available_versions,omitempty"`

	// CurrentVersion Currently installed SemVer.
	CurrentVersion string `json:"current_version"`

	// Error Per-connector check error (network failure, source removed,
	// unknown scheme, scheme not yet implemented). When present,
	// `latest_version` and `available_versions` may be omitted —
	// the check failed for this connector but did not abort the
	// sweep.
	Error *string `json:"error,omitempty"`

	// Fqn Canonical FQN of the installed connector (per ADR-0002).
	Fqn string `json:"fqn"`

	// LatestVersion Latest available version after applying the prerelease filter.
	// Omitted when `error` is present or when no released versions
	// were found at the source.
	LatestVersion *string `json:"latest_version,omitempty"`

	// UpdateAvailable True when `latest_version` is strictly newer than `current_version`
	// under SemVer 2.0 ordering. False when this connector is up to date,
	// and false when `error` is present (we couldn't tell).
	UpdateAvailable bool `json:"update_available"`
}

type ConnectorId = string

type ConnectorInstallFailure struct {
	// Error Human-readable error from the install pipeline.
	Error   string `json:"error"`
	Fqn     string `json:"fqn"`
	Version string `json:"version"`
}

type ConnectorListResponse struct {
	Items      *[]Connector `json:"items,omitempty"`
	Pagination *Pagination  `json:"pagination,omitempty"`
}

type ConnectorOperationRunRejectedResponse struct {
	// AuditId Audit log ID for the rejected operation attempt.
	AuditId      string                                      `json:"audit_id"`
	ConnectorFqn string                                      `json:"connector_fqn"`
	Message      string                                      `json:"message"`
	Operation    string                                      `json:"operation"`
	Status       ConnectorOperationRunRejectedResponseStatus `json:"status"`
	Tool         string                                      `json:"tool"`
}

type ConnectorOperationRunRejectedResponseStatus string

type ConnectorOperationRunRequest struct {
	// Args JSON arguments supplied to the operation shim.
	Args *map[string]interface{} `json:"args,omitempty"`

	// ConnectorFqn Connector FQN from the installed connector spec.
	ConnectorFqn string `json:"connector_fqn"`

	// Operation Operation name within the tool.
	Operation string `json:"operation"`

	// Tool Sandbox-visible tool command name generated from the spec.
	Tool string `json:"tool"`
}

type ConnectorPreview struct {
	// AlreadyInstalled True when an entry with this hash is already in the
	// cstore. The CLI uses this to skip the consent prompt and
	// short-circuit to a "already installed" message — operators
	// running install twice in a row should not see the prompt
	// twice.
	AlreadyInstalled bool `json:"already_installed"`

	// Capabilities Flattened view of the connector manifest's `[capabilities.*]`
	// blocks. Optional sub-tables that are absent in the manifest
	// are absent here too — the CLI renders only what the connector
	// actually declares.
	Capabilities PreviewCapabilities `json:"capabilities"`

	// Description Human-readable description from the connector manifest.
	// May be empty.
	Description *string `json:"description,omitempty"`

	// Fqn Canonical FQN of the previewed connector.
	Fqn string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the fetched tarball's
	// (binary || manifest) bytes. Same value the install
	// endpoint will produce.
	Hash string `json:"hash"`

	// Publisher FQN authority — the entity that signed the connector. For
	// `github://owner/repo` this is `owner`. The CLI surfaces
	// this so the operator knows whose key trust is being
	// consumed for this install.
	Publisher string `json:"publisher"`

	// SignatureStatus Always `verified` when this preview is returned: a
	// signature failure short-circuits earlier in the pipeline
	// and surfaces as a 422 error per ADR-0007. The field
	// exists on the wire so future verification states (e.g.
	// `experimental_unsigned` for a trusted-but-unsigned dev
	// mode) can be added without breaking the response shape.
	SignatureStatus ConnectorPreviewSignatureStatus `json:"signature_status"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ConnectorPreviewSignatureStatus string

type ConnectorRef struct {
	// Fqn Fully-qualified URI per ADR-0002.
	Fqn string `json:"fqn"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ConnectorStatus string

type ConnectorType string

type ConnectorsCheckResponse struct {
	// Results One entry per installed (FQN, version) pair. Order matches
	// the cstore index's deterministic sort (ascending canonical
	// key); operators rendering this should not assume a
	// different order.
	Results []ConnectorCheckResult `json:"results"`
}

type CreateAuditJSONRequestBody = AuditIngestRequest

type CreateConnectorJSONRequestBody = CreateConnectorRequest

type CreateConnectorRequest struct {
	Auth        ConnectorAuth           `json:"auth"`
	Environment *string                 `json:"environment,omitempty"`
	Metadata    *map[string]interface{} `json:"metadata,omitempty"`
	Name        string                  `json:"name"`
	Provider    *string                 `json:"provider,omitempty"`
	Type        ConnectorType           `json:"type"`
	WorkspaceId string                  `json:"workspace_id"`
}

type CreateCredentialJSONRequestBody = CreateCredentialRequest

type CreateCredentialRequest struct {
	Environment *string                     `json:"environment,omitempty"`
	Metadata    *map[string]interface{}     `json:"metadata,omitempty"`
	Name        string                      `json:"name"`
	Type        CreateCredentialRequestType `json:"type"`
	VaultPath   string                      `json:"vault_path"`
	WorkspaceId string                      `json:"workspace_id"`
}

type CreateCredentialRequestType string

type CreateFundingSourceJSONRequestBody = CreateFundingSourceRequest

type CreateFundingSourceRequest struct {
	Currency         *string                        `json:"currency,omitempty"`
	Metadata         *map[string]interface{}        `json:"metadata,omitempty"`
	Name             string                         `json:"name"`
	SpendingControls *map[string]interface{}        `json:"spending_controls,omitempty"`
	Type             CreateFundingSourceRequestType `json:"type"`
	WorkspaceId      string                         `json:"workspace_id"`
}

type CreateFundingSourceRequestType string

type CreateIntentJSONRequestBody = CreateIntentRequest

type CreateIntentRequest struct {
	Action  ActionIntent `json:"action"`
	AgentId string       `json:"agent_id"`

	// CallbackUrl Optional webhook URL. The control plane will POST status updates
	// to this URL as the intent progresses through the lifecycle
	// (policy evaluated, approval requested, approved/denied, execution
	// started, execution completed). This avoids the need for agents
	// to poll the GET /v1/intents/{id} endpoint.
	CallbackUrl    *string        `json:"callback_url,omitempty"`
	Context        *IntentContext `json:"context,omitempty"`
	IdempotencyKey string         `json:"idempotency_key"`
	WorkspaceId    string         `json:"workspace_id"`
}

type CreatePolicyJSONRequestBody = CreatePolicyRequest

type CreatePolicyRequest struct {
	Description *string       `json:"description,omitempty"`
	Environment *string       `json:"environment,omitempty"`
	Name        string        `json:"name"`
	Rules       []PolicyRule  `json:"rules"`
	Status      *PolicyStatus `json:"status,omitempty"`
	WorkspaceId string        `json:"workspace_id"`
}

type CreateSandboxProxyStepScopeJSONRequestBody = SandboxProxyStepScopeRequest

type CreateSessionJSONRequestBody = CreateSessionRequest

type CreateSessionRequest struct {
	Agent      string  `json:"agent"`
	WorkingDir *string `json:"working_dir,omitempty"`
}

type CreateSessionResponse struct {
	// Agent Agent name (e.g. "claude", "pi").
	Agent string `json:"agent"`

	// CaveatToken Session-scoped, HMAC-signed bearer token for the
	// daemon's `/v1/*` surface. Present when the daemon
	// protects its local surface (loopback bind); absent on
	// an unprotected daemon, where no bearer is required.
	CaveatToken *string    `json:"caveat_token,omitempty"`
	EndedAt     *time.Time `json:"ended_at,omitempty"`

	// ExitCode Agent process exit code, or null when ended_at is set but the daemon never observed a clean exit (orphaned).
	ExitCode *int `json:"exit_code,omitempty"`

	// Id ULID-based session identifier; time-sortable lexicographically.
	Id        string    `json:"id"`
	StartedAt time.Time `json:"started_at"`

	// WorkingDir The directory aileron launch was invoked from.
	WorkingDir string `json:"working_dir"`
}

type CredentialListResponse struct {
	Items      *[]CredentialReference `json:"items,omitempty"`
	Pagination *Pagination            `json:"pagination,omitempty"`
}

type CredentialReference struct {
	CredentialId string                  `json:"credential_id"`
	Environment  *string                 `json:"environment,omitempty"`
	Metadata     *map[string]interface{} `json:"metadata,omitempty"`
	Name         string                  `json:"name"`
	Type         CredentialReferenceType `json:"type"`
	VaultPath    string                  `json:"vault_path"`
	WorkspaceId  string                  `json:"workspace_id"`
}

type CredentialReferenceType string

type DecideActionApprovalJSONRequestBody = ActionApprovalDecision

type Decision struct {
	ApprovalId       *string             `json:"approval_id,omitempty"`
	DenialReason     *string             `json:"denial_reason,omitempty"`
	Disposition      DecisionDisposition `json:"disposition"`
	ExecutionGrantId *string             `json:"execution_grant_id,omitempty"`
	MatchedPolicies  *[]PolicyMatch      `json:"matched_policies,omitempty"`
	RequiresApproval *bool               `json:"requires_approval,omitempty"`
	RiskLevel        RiskLevel           `json:"risk_level"`
}

type DecisionDisposition string

type DeleteAgentCredentialsParams struct {
	// Purpose Credential purpose, forming the third segment of the vault
	// path `agents/<name>/<purpose>` (e.g. `oauth`, `apikey`).
	// Defaults to `oauth` when omitted, so a request with no
	// `purpose` is indistinguishable from the pre-purpose behavior.
	//
	// Because `<purpose>` flows straight into the raw vault map key,
	// the daemon validates it against `^[a-z0-9][a-z0-9_-]*$` before
	// constructing the path. A value containing `/`, `..`, or
	// percent-encoded separators is rejected with `400`
	// (`invalid_request`) so it cannot escape the `agents/<name>/`
	// namespace.
	Purpose *string `form:"purpose,omitempty" json:"purpose,omitempty"`
}

type DenyRequest struct {
	Comment *string `json:"comment,omitempty"`
	Reason  string  `json:"reason"`
}

type DenyRequestJSONRequestBody = DenyRequest

type DeployAction struct {
	ArtifactRef         *string               `json:"artifact_ref,omitempty"`
	ChangeTicketId      *string               `json:"change_ticket_id,omitempty"`
	Cluster             *string               `json:"cluster,omitempty"`
	Environment         *string               `json:"environment,omitempty"`
	ImageRef            *string               `json:"image_ref,omitempty"`
	MaintenanceWindowId *string               `json:"maintenance_window_id,omitempty"`
	Namespace           *string               `json:"namespace,omitempty"`
	Provider            *DeployActionProvider `json:"provider,omitempty"`
	RollbackSupported   *bool                 `json:"rollback_supported,omitempty"`
	Service             *string               `json:"service,omitempty"`
	Strategy            *DeployActionStrategy `json:"strategy,omitempty"`
}

type DeployActionProvider string

type DeployActionStrategy string

type DomainAction struct {
	Calendar    *CalendarAction    `json:"calendar,omitempty"`
	Cloud       *CloudAction       `json:"cloud,omitempty"`
	Deploy      *DeployAction      `json:"deploy,omitempty"`
	Email       *EmailAction       `json:"email,omitempty"`
	Git         *GitAction         `json:"git,omitempty"`
	Payment     *PaymentAction     `json:"payment,omitempty"`
	Procurement *ProcurementAction `json:"procurement,omitempty"`
}

type DraftCommsReplyJSONRequestBody = DraftCommsReplyRequest

type DraftCommsReplyRequest struct {
	// Body Suggested reply text the agent drafted.
	Body string `json:"body"`

	// ReplyTo ID of the original incoming message (from `read_messages`).
	ReplyTo string `json:"reply_to"`
}

type EmailAction struct {
	Attachments *[]AttachmentRef     `json:"attachments,omitempty"`
	Bcc         *[]Recipient         `json:"bcc,omitempty"`
	BodyHtml    *string              `json:"body_html,omitempty"`
	BodyText    *string              `json:"body_text,omitempty"`
	Cc          *[]Recipient         `json:"cc,omitempty"`
	From        *Recipient           `json:"from,omitempty"`
	SendMode    *EmailActionSendMode `json:"send_mode,omitempty"`
	Subject     *string              `json:"subject,omitempty"`
	ThreadRef   *string              `json:"thread_ref,omitempty"`
	To          *[]Recipient         `json:"to,omitempty"`
}

type EmailActionSendMode string

type EndSessionJSONRequestBody = EndSessionRequest

type EndSessionRequest struct {
	// ExitCode Agent process exit code. Omit or send null to mark the
	// session as ended-with-unknown-status (same shape the
	// orphan-reaper produces on daemon restart).
	ExitCode *int `json:"exit_code,omitempty"`
}

type Enterprise struct {
	// AllowedAuthProviders Restrict sign-in to these providers. Empty means all allowed.
	AllowedAuthProviders *[]string `json:"allowed_auth_providers,omitempty"`

	// AllowedEmailDomains Restrict sign-in to these email domains. Empty means all allowed.
	AllowedEmailDomains *[]string           `json:"allowed_email_domains,omitempty"`
	BillingEmail        openapi_types.Email `json:"billing_email"`
	CreatedAt           time.Time           `json:"created_at"`
	Id                  string              `json:"id"`
	Name                string              `json:"name"`

	// Personal True for single-user personal accounts (e.g. Gmail sign-in)
	Personal *bool          `json:"personal,omitempty"`
	Plan     EnterprisePlan `json:"plan"`

	// Slug URL-friendly unique identifier
	Slug        string    `json:"slug"`
	SsoRequired *bool     `json:"sso_required,omitempty"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type EnterprisePlan string

type Error struct {
	Error struct {
		Code      string                    `json:"code"`
		Details   *[]map[string]interface{} `json:"details,omitempty"`
		Message   string                    `json:"message"`
		RequestId *string                   `json:"request_id,omitempty"`
	} `json:"error"`
}

type EvidenceItem struct {
	Label *string          `json:"label,omitempty"`
	Type  EvidenceItemType `json:"type"`
	Value string           `json:"value"`
}

type EvidenceItemType string

type Execution struct {
	ConnectorId *string                 `json:"connector_id,omitempty"`
	ExecutionId string                  `json:"execution_id"`
	FinishedAt  *time.Time              `json:"finished_at,omitempty"`
	IntentId    string                  `json:"intent_id"`
	Output      *map[string]interface{} `json:"output,omitempty"`
	ReceiptRef  *string                 `json:"receipt_ref,omitempty"`
	StartedAt   time.Time               `json:"started_at"`
	Status      ExecutionStatus         `json:"status"`
}

type ExecutionCallbackJSONRequestBody = ExecutionCallbackRequest

type ExecutionCallbackRequest struct {
	ErrorMessage *string                        `json:"error_message,omitempty"`
	Output       *map[string]interface{}        `json:"output,omitempty"`
	ReceiptRef   *string                        `json:"receipt_ref,omitempty"`
	Status       ExecutionCallbackRequestStatus `json:"status"`
}

type ExecutionCallbackRequestStatus string

type ExecutionGrant struct {
	BoundedParameters *map[string]interface{} `json:"bounded_parameters,omitempty"`
	ConnectorId       *string                 `json:"connector_id,omitempty"`
	ExpiresAt         time.Time               `json:"expires_at"`
	GrantId           string                  `json:"grant_id"`
	IntentId          string                  `json:"intent_id"`
	Status            ExecutionGrantStatus    `json:"status"`
}

type ExecutionGrantStatus string

type ExecutionId = string

type ExecutionRunRequest struct {
	GrantId            string                  `json:"grant_id"`
	OverrideParameters *map[string]interface{} `json:"override_parameters,omitempty"`
}

type ExecutionRunResponse struct {
	AcceptedAt  *time.Time                 `json:"accepted_at,omitempty"`
	ExecutionId string                     `json:"execution_id"`
	Status      ExecutionRunResponseStatus `json:"status"`
}

type ExecutionRunResponseStatus string

type ExecutionStatus string

type Failure = FailureEnvelope

type FailureBoundary string

type FailureClass string

type FailureEnvelope struct {
	Error struct {
		// AuditId Reference into the audit log for full context. Stamped
		// by the audit recorder before the response is written.
		AuditId *string `json:"audit_id,omitempty"`

		// Boundary Layer that produced the failure. The closed set excludes `user`
		// which is reserved for post-MVP per-invocation approval flows.
		Boundary FailureBoundary `json:"boundary"`

		// Class Closed taxonomy of failure classes per ADR-0010. Adding a value
		// requires an ADR amendment.
		Class FailureClass `json:"class"`

		// Details Class-specific additional fields.
		Details *map[string]interface{} `json:"details,omitempty"`

		// Message Human-readable description; safe to show end users. Does
		// not contain credentials or sensitive payload.
		Message string `json:"message"`

		// Retriable Whether the failure is safe to retry.
		Retriable bool `json:"retriable"`
	} `json:"error"`
}

type FinishOAuth2BindingJSONRequestBody = OAuth2FinishRequest

type FlightPlanArtifact struct {
	// Digest Content digest of the materialized bytes (`sha256:<hex>`), the
	// content-addressed handle for the artifact.
	Digest string `json:"digest"`

	// MimeType Declared MIME type of the artifact content.
	MimeType *string `json:"mime_type,omitempty"`

	// Name Declared output name.
	Name string `json:"name"`

	// Path Declared relative artifact path. Present for a file-target
	// output; empty for a retained (non-file) output.
	Path *string `json:"path,omitempty"`
}

type FlightPlanInput struct {
	// Description Field-level prose surfaced to the LLM in the tool schema.
	Description *string `json:"description,omitempty"`

	// ItemsType Element type of an array input, mirroring `ActionInput.items_type`.
	// Only meaningful when `type` is `array`. Reserved for future use;
	// plan inputs do not yet carry array element typing, so this is
	// typically unset and the MCP side emits the permissive `items: {}`.
	ItemsType *FlightPlanInputItemsType `json:"items_type,omitempty"`

	// Name Declared input identifier.
	Name string `json:"name"`

	// Required Whether the caller must supply this input. True for a literal-rule
	// input with no declared default; false for dynamic, source, or
	// defaulted inputs that auto-resolve at launch.
	Required bool `json:"required"`

	// Type The raw declared manifest input type. `timestamp` is carried
	// verbatim here; the MCP side projects it to JSON Schema `string`
	// (JSON Schema has no timestamp type) when deriving the tool
	// input schema.
	Type FlightPlanInputType `json:"type"`
}

type FlightPlanInputItemsType string

type FlightPlanInputType string

type FlightPlanLaunchRequest struct {
	// Inputs Literal input overrides, forwarded to the runtime as launch
	// args and resolved once. A key names a declared plan input; its
	// value overrides that input's default. Inputs not named here fall
	// back to their declared default (a missing required input with no
	// default fail-fasts the launch).
	Inputs *map[string]interface{} `json:"inputs,omitempty"`

	// Version Frozen version id to launch (mirrors the CLI `--version`). When
	// omitted, the latest frozen version by freeze time is launched.
	Version *string `json:"version,omitempty"`
}

type FlightPlanLaunchResponse struct {
	// Artifacts The materialized output artifacts.
	Artifacts *[]FlightPlanArtifact `json:"artifacts,omitempty"`

	// AuditIds Audit record ids emitted to the sink for this launch, in
	// emission order.
	AuditIds *[]string `json:"audit_ids,omitempty"`

	// ContentHash Verified content hash of the frozen unit that ran
	// (`sha256:<hex>`). Always present on a successful launch.
	ContentHash string `json:"content_hash"`

	// ResolvedInputs The frozen resolved-input set (Phase A output): every declared
	// input mapped to the value the run used, after applying the
	// request overrides and declared defaults.
	ResolvedInputs *map[string]interface{} `json:"resolved_inputs,omitempty"`

	// StepOutputs Per-step named outputs, keyed by step id. Each value is the map
	// of that step's named outputs.
	StepOutputs *map[string]map[string]interface{} `json:"step_outputs,omitempty"`
}

type FlightPlanListResponse struct {
	Items      *[]FlightPlanSummary   `json:"items,omitempty"`
	LoadErrors *[]FlightPlanLoadError `json:"load_errors,omitempty"`
}

type FlightPlanLoadError struct {
	// Boundary Which layer produced the error (always "flightplan" for load failures).
	Boundary *string `json:"boundary,omitempty"`

	// Class Canonical failure class (e.g. parse_error, verification_error).
	Class string `json:"class"`

	// File Path of the offending frozen version directory.
	File string `json:"file"`

	// Line Line within the manifest where the error was detected; 0 when unknown.
	Line    *int   `json:"line,omitempty"`
	Message string `json:"message"`
}

type FlightPlanOutput struct {
	// Description Field-level prose describing the output.
	Description *string `json:"description,omitempty"`

	// MimeType Declared MIME type of the output content.
	MimeType *string `json:"mime_type,omitempty"`

	// Name Declared output name.
	Name string `json:"name"`
}

type FlightPlanResumeRequest struct {
	// Outputs Seam outputs to inject, keyed `stepId → outputName → value`. For a
	// seam resume this carries exactly the suspended seam step's declared
	// outputs; supplying outputs that do not match the suspended step's
	// declared outputs is a `400`.
	Outputs *map[string]map[string]interface{} `json:"outputs,omitempty"`
}

type FlightPlanSeamPendingResponse struct {
	// RunId Server-minted run id, stable across the whole suspend/resume
	// sequence. The agent passes it to
	// `POST /v1/flightplans/runs/{runId}/resume`.
	RunId string `json:"run_id"`

	// Seam The suspended `llm-seam` step's request payload: everything the agent
	// needs to produce the seam's outputs. The prompt is the sealed
	// instruction template with its bindings resolved for display, the model
	// is the recorded (non-enforced) target hint, and outputs names the
	// results the seam must produce and supply on resume.
	Seam FlightPlanSeamRequest `json:"seam"`

	// Status Discriminator. Always `seam_pending` for this shape; included so
	// the agent's MCP wrapper can branch without inspecting the HTTP
	// status code.
	Status FlightPlanSeamPendingResponseStatus `json:"status"`
}

type FlightPlanSeamPendingResponseStatus string

type FlightPlanSeamRequest struct {
	// Bindings The seam's resolved input bindings (binding name → resolved value),
	// for the agent's context. Never secrets (bindings are references).
	Bindings *map[string]interface{} `json:"bindings,omitempty"`

	// Model The seam's recorded model target (for example
	// `anthropic:claude-haiku-4-5`). A request/hint, never a pin. Empty
	// when the seam declares no model.
	Model *string `json:"model,omitempty"`

	// Outputs The named results the seam must produce. The resume request
	// supplies a value for each under `outputs[stepId]`.
	Outputs []string `json:"outputs"`

	// Prompt The seam's sealed instruction template, rendered with its resolved
	// bindings for display. Empty when the seam declares no prompt.
	Prompt *string `json:"prompt,omitempty"`

	// StepId The id of the suspended `llm-seam` step.
	StepId string `json:"step_id"`
}

type FlightPlanSummary struct {
	// Description Plan description from the manifest frontmatter (empty when the
	// manifest declares none).
	Description *string `json:"description,omitempty"`

	// Inputs The plan's declared inputs, in declaration order.
	Inputs *[]FlightPlanInput `json:"inputs,omitempty"`

	// Name Plan name from the manifest frontmatter (the store handle).
	Name string `json:"name"`

	// Outputs The plan's declared output artifacts.
	Outputs *[]FlightPlanOutput `json:"outputs,omitempty"`

	// Version The latest frozen version id of the plan (what `LatestFrozen`
	// returns). This is the version launched when the plan tool is
	// called with no explicit version.
	Version string `json:"version"`
}

type Forbidden = Error

type FundingSource struct {
	Currency         *string                 `json:"currency,omitempty"`
	FundingSourceId  string                  `json:"funding_source_id"`
	Metadata         *map[string]interface{} `json:"metadata,omitempty"`
	Name             string                  `json:"name"`
	SpendingControls *struct {
		AllowedCategories    *[]string `json:"allowed_categories,omitempty"`
		AllowedMerchants     *[]string `json:"allowed_merchants,omitempty"`
		MaxSingleTransaction *Money    `json:"max_single_transaction,omitempty"`
	} `json:"spending_controls,omitempty"`
	Status      FundingSourceStatus `json:"status"`
	Type        FundingSourceType   `json:"type"`
	WorkspaceId string              `json:"workspace_id"`
}

type FundingSourceListResponse struct {
	Items      *[]FundingSource `json:"items,omitempty"`
	Pagination *Pagination      `json:"pagination,omitempty"`
}

type FundingSourceStatus string

type FundingSourceType string

type GetAgentCredentialsParams struct {
	// Purpose Credential purpose, forming the third segment of the vault
	// path `agents/<name>/<purpose>` (e.g. `oauth`, `apikey`).
	// Defaults to `oauth` when omitted, so a request with no
	// `purpose` is indistinguishable from the pre-purpose behavior.
	//
	// Because `<purpose>` flows straight into the raw vault map key,
	// the daemon validates it against `^[a-z0-9][a-z0-9_-]*$` before
	// constructing the path. A value containing `/`, `..`, or
	// percent-encoded separators is rejected with `400`
	// (`invalid_request`) so it cannot escape the `agents/<name>/`
	// namespace.
	Purpose *string `form:"purpose,omitempty" json:"purpose,omitempty"`
}

type GetAnalyticsSummaryParams struct {
	WorkspaceId string    `form:"workspace_id" json:"workspace_id"`
	From        time.Time `form:"from" json:"from"`
	To          time.Time `form:"to" json:"to"`
}

type GetAuditTraceParams struct {
	// ContentHash Root the walk at the `output.materialized` event carrying
	// this content hash (`sha256:<hex>`). Primary rooting; takes
	// precedence over `invocation_id` when both are supplied.
	ContentHash *string `form:"content_hash,omitempty" json:"content_hash,omitempty"`

	// InvocationId Root the walk at every `output.materialized` event carrying
	// this launch-scoped `aileron.invocation.id`. Used when
	// `content_hash` is absent.
	InvocationId *string `form:"invocation_id,omitempty" json:"invocation_id,omitempty"`
}

type GetHubActionInstallDecisionParams struct {
	// Fqn Action FQN, e.g. `github://ALRubinger/aileron-connector-google/actions/draft-email`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubActionParams struct {
	// Fqn Action FQN, e.g. `github://ALRubinger/aileron-connector-google/actions/draft-email`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubConnectorParams struct {
	// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubInstallDecisionParams struct {
	// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubSuiteInstallDecisionParams struct {
	// Fqn Suite FQN, e.g. `github://ALRubinger/aileron-connector-google/suite`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubSuiteParams struct {
	// Fqn Suite FQN, e.g. `github://ALRubinger/aileron-connector-google/suite`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GitAction struct {
	BaseBranch     *string            `json:"base_branch,omitempty"`
	Branch         *string            `json:"branch,omitempty"`
	ChecksRequired *[]string          `json:"checks_required,omitempty"`
	CommitShas     *[]string          `json:"commit_shas,omitempty"`
	FilesChanged   *[]string          `json:"files_changed,omitempty"`
	IssueAssignees *[]string          `json:"issue_assignees,omitempty"`
	IssueBody      *string            `json:"issue_body,omitempty"`
	IssueLabels    *[]string          `json:"issue_labels,omitempty"`
	IssueTitle     *string            `json:"issue_title,omitempty"`
	Labels         *[]string          `json:"labels,omitempty"`
	PrBody         *string            `json:"pr_body,omitempty"`
	PrTitle        *string            `json:"pr_title,omitempty"`
	Provider       *GitActionProvider `json:"provider,omitempty"`
	Repository     *string            `json:"repository,omitempty"`
	Reviewers      *[]string          `json:"reviewers,omitempty"`
}

type GitActionProvider string

type GrantId = string

type HealthResponse struct {
	Service   string               `json:"service"`
	Status    HealthResponseStatus `json:"status"`
	Timestamp time.Time            `json:"timestamp"`
	Version   string               `json:"version"`
}

type HealthResponseStatus string

type HubActionEntry struct {
	// Category Optional discovery grouping (e.g. `communication`, `productivity`).
	Category *string `json:"category,omitempty"`

	// ConnectorFqn FQN of the connector this action depends on. Used by the
	// Hub UI to filter actions by provider and to compute the
	// install-decision dependency closure.
	ConnectorFqn string `json:"connector_fqn"`

	// Description One-line description of what the action does.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO/actions/NAME`.
	Fqn string `json:"fqn"`

	// Intents Optional informational phrases describing what users would
	// ask their agent to do to trigger this action (e.g.
	// "draft email", "compose gmail").
	Intents *[]string `json:"intents,omitempty"`

	// PublisherGithub GitHub user or org name that owns the action's repo.
	PublisherGithub string `json:"publisher_github"`
}

type HubActionInstallDecision struct {
	Authorities []HubInstallAuthority `json:"authorities"`

	// ConnectorFqn FQN of the connector this action depends on.
	ConnectorFqn string                       `json:"connector_fqn"`
	Description  string                       `json:"description"`
	Fqn          string                       `json:"fqn"`
	Kind         HubActionInstallDecisionKind `json:"kind"`

	// LatestVersion Latest non-prerelease SemVer tag the action's source repo
	// has published, resolved via the connector version lister at
	// decision time. Empty when the source has no published
	// releases (the operator can still install via the CLI by
	// pinning `@<sha>` or `@<tag>`, but the webapp modal needs a
	// concrete version to call `/v1/actions/install`). The webapp
	// uses this directly as the install's `version` argument so
	// the install endpoint sees strict SemVer, not `latest`.
	LatestVersion   *string `json:"latest_version,omitempty"`
	PublisherGithub string  `json:"publisher_github"`
}

type HubActionInstallDecisionKind string

type HubActionList struct {
	Actions []HubActionEntry `json:"actions"`
}

type HubConnectorEntry struct {
	// Description One-line description of what the connector does.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO`.
	Fqn string `json:"fqn"`

	// KeyUrl Public URL of the publisher's ed25519 signing key.
	// Typically `https://raw.githubusercontent.com/OWNER/REPO/main/keys/publisher.pub`.
	KeyUrl string `json:"key_url"`

	// PublisherGithub GitHub user or org name that owns the connector repo.
	PublisherGithub string `json:"publisher_github"`

	// ReleasePattern Glob matching the release tags Aileron should consider.
	ReleasePattern string `json:"release_pattern"`
}

type HubConnectorList struct {
	Connectors []HubConnectorEntry `json:"connectors"`
}

type HubInstallAuthority struct {
	// Fingerprint SHA-256 fingerprint of the publisher's signing key, formatted
	// as `sha256:<base64-without-padding>` to match
	// `aileron keyring trust` output.
	Fingerprint string `json:"fingerprint"`

	// Fqn Connector FQN this authority refers to.
	Fqn string `json:"fqn"`

	// KeyDivergence True when the connector's fetched signing key diverges from
	// the owner-level keyring grant for this publisher. Informational
	// only — never blocks the install decision; the divergence is
	// also surfaced as a `risk_indicators` string and reflected in
	// `trust_state: conflict`. Absent/false when no owner grant
	// exists or the fetched key matches it.
	KeyDivergence *bool `json:"key_divergence,omitempty"`

	// PublisherFootprint FQNs of the owner's other connectors listed in the Hub
	// (owner-granularity context: every repo published under the
	// same owner, informational only).
	PublisherFootprint []string `json:"publisher_footprint"`
	PublisherGithub    string   `json:"publisher_github"`
	RiskIndicators     []string `json:"risk_indicators"`

	// TrustState Trust state for the connector's publisher against the local
	// keyring, evaluated at owner granularity (ADR-0013 per-publisher
	// trust). `already_trusted`: an owner-level grant exists for this
	// publisher whose key matches the fetched signing key (the grant
	// covers every repo the owner publishes, so a sibling FQN grant
	// counts). `unknown`: no owner-level grant for this publisher.
	// `conflict`: an owner-level grant exists but the fetched signing
	// key diverges from the trusted key — a key rotation, MITM, or
	// impersonation signal. The divergence is surfaced as a risk
	// indicator and via `key_divergence`; it is informational and does
	// not block the install on its own.
	TrustState HubTrustState `json:"trust_state"`
}

type HubInstallDecision struct {
	Description string `json:"description"`

	// Fingerprint SHA-256 fingerprint of the publisher's signing key, formatted
	// as `sha256:<base64-without-padding>` to match
	// `aileron keyring trust` output.
	Fingerprint string `json:"fingerprint"`

	// Fqn Canonical FQN.
	Fqn string `json:"fqn"`

	// KeyDivergence True when the connector's fetched signing key diverges from
	// the owner-level keyring grant for this publisher. Informational
	// only — never blocks the install decision; the divergence is
	// also surfaced as a `risk_indicators` string and reflected in
	// `trust_state: conflict`. Absent/false when no owner grant
	// exists or the fetched key matches it.
	KeyDivergence *bool `json:"key_divergence,omitempty"`

	// PublisherFootprint FQNs of the owner's other connectors listed in the Hub
	// (owner-granularity context: every repo published under the
	// same owner, informational only).
	PublisherFootprint []string `json:"publisher_footprint"`
	PublisherGithub    string   `json:"publisher_github"`

	// RiskIndicators Human-readable risk strings derived from the trust state and
	// keyring contents, e.g. "First connector by this publisher
	// you've installed" (informational, yellow) or the owner-level
	// key-divergence warning (conflict, red). Non-blocking by
	// construction: the payload has no boolean gate, so risk
	// strings are rendered as warnings, never as install blockers.
	RiskIndicators []string `json:"risk_indicators"`

	// TrustState Trust state for the connector's publisher against the local
	// keyring, evaluated at owner granularity (ADR-0013 per-publisher
	// trust). `already_trusted`: an owner-level grant exists for this
	// publisher whose key matches the fetched signing key (the grant
	// covers every repo the owner publishes, so a sibling FQN grant
	// counts). `unknown`: no owner-level grant for this publisher.
	// `conflict`: an owner-level grant exists but the fetched signing
	// key diverges from the trusted key — a key rotation, MITM, or
	// impersonation signal. The divergence is surfaced as a risk
	// indicator and via `key_divergence`; it is informational and does
	// not block the install on its own.
	TrustState HubTrustState `json:"trust_state"`
}

type HubSuiteEntry struct {
	// Category Optional discovery grouping (e.g. `communication`, `productivity`).
	Category *string `json:"category,omitempty"`

	// ConnectorsRequired FQNs of the connectors the suite's actions transitively
	// require. Informational metadata for discovery; not part of
	// any trust grant.
	ConnectorsRequired *[]string `json:"connectors_required,omitempty"`

	// Description One-line description of what the suite bundles.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO/suite`.
	Fqn string `json:"fqn"`

	// MemberActions FQNs of the actions bundled in this suite.
	MemberActions []string `json:"member_actions"`

	// PublisherGithub GitHub user or org name that owns the suite's repo.
	PublisherGithub string `json:"publisher_github"`
}

type HubSuiteInstallDecision struct {
	Authorities []HubInstallAuthority       `json:"authorities"`
	Description string                      `json:"description"`
	Fqn         string                      `json:"fqn"`
	Kind        HubSuiteInstallDecisionKind `json:"kind"`

	// LatestVersion Latest non-prerelease SemVer tag from the suite's source
	// repo, resolved at decision time. The webapp passes this as
	// the `version` argument to each per-member install call —
	// every action in a Hub-published suite ships from the same
	// repo, so one tag covers them all. Empty when the source has
	// no published releases.
	LatestVersion   *string  `json:"latest_version,omitempty"`
	MemberActions   []string `json:"member_actions"`
	PublisherGithub string   `json:"publisher_github"`
}

type HubSuiteInstallDecisionKind string

type HubSuiteList struct {
	Suites []HubSuiteEntry `json:"suites"`
}

type HubTrustState string

type InitOAuth2BindingJSONRequestBody = OAuth2InitRequest

type InstallActionJSONRequestBody = InstallActionRequest

type InstallActionRequest struct {
	// AutoInstallConnectors When true, the server transparently installs any
	// `[[requires.connectors]]` whose pinned hash is not already in
	// the local content-addressed store, using the connector's
	// declared version and hash from the action manifest. Each
	// implicit install runs the full connector pipeline (resolve →
	// fetch → verify signature → match `expected_hash`) and any
	// failure aborts the action install with the connector's
	// structured error.
	//
	// When false (default), missing connector deps abort the
	// install with a `422` carrying `error.code = connectors_missing`
	// and `error.details[]` listing each missing connector's
	// `name`, `version`, and `hash` so the CLI can prompt the user
	// for confirmation before retrying with the flag set.
	AutoInstallConnectors *bool `json:"auto_install_connectors,omitempty"`

	// ConfirmedFingerprints Publisher-key fingerprints the operator confirmed at the
	// webapp install modal — one entry per connector authority in
	// the action's dependency closure (suite installs supply the
	// full set on every per-action install; the CLI omits this
	// field entirely since it pre-trusts via `aileron keyring
	// trust`). Mirrors `confirmed_fingerprint` on
	// `InstallConnectorRequest` (#487 / #628) but applies it
	// across every authority the install needs trust for —
	// without this the webapp can't reach the action install
	// endpoint without first running N standalone connector
	// installs to write trust as a side effect.
	//
	// For each entry the daemon looks up `fqn` in the Hub,
	// fetches the publisher's current key, verifies its
	// fingerprint matches the supplied value (anti-tampering
	// check between what the operator saw and what the install
	// endpoint uses), then writes the key to the keyring under
	// the FQN before running the install pipeline. Trust
	// persists even if the install later fails (matches #487 Q4
	// resolution for the singular case). Entries whose FQN is
	// already trusted under the same key short-circuit; mismatch
	// aborts with `fingerprint_mismatch`.
	ConfirmedFingerprints *[]ConfirmedFingerprint `json:"confirmed_fingerprints,omitempty"`

	// Force When true, overwrite an existing action with the same name.
	// When false (default), refuse with `409 Conflict` if an action
	// of the same name already exists.
	Force *bool `json:"force,omitempty"`

	// Fqn Fully-qualified URI of the action template per ADR-0002 / ADR-0003
	// (e.g. `github://ALRubinger/aileron-connector-github/actions/list-recent-prs`).
	// Subpath references are supported for actions published alongside
	// their connector.
	Fqn string `json:"fqn"`

	// Version Strict SemVer (e.g. `0.1.0`).
	Version string `json:"version"`
}

type InstallConnectorJSONRequestBody = InstallConnectorRequest

type InstallConnectorRequest struct {
	// ConfirmedFingerprint Optional publisher-key fingerprint the operator confirmed at
	// the install prompt (terminal y/N/d or webapp install modal),
	// per ADR-0013 / #487. Format matches `aileron keyring trust`
	// output: `sha256:<22 base64-no-padding chars>`.
	//
	// When supplied, the daemon looks up the FQN in the Hub, fetches
	// the publisher's current key, verifies its fingerprint matches
	// this value (anti-tampering — the client and daemon must agree
	// on what the operator saw), then writes the key to the keyring
	// at the FQN authority before running the install pipeline.
	// Trust persists even if the install later fails, matching the
	// #487 Q4 resolution.
	//
	// When omitted, the install requires the publisher key to be
	// pre-established in the keyring (typical for non-TTY installs
	// and connectors not listed in the Hub). Mismatch returns
	// `fingerprint_mismatch`; an FQN with no Hub entry returns
	// `not_found`.
	ConfirmedFingerprint *string `json:"confirmed_fingerprint,omitempty"`

	// ExpectedHash Optional canonical hash (`sha256:<hex>`) the install must match.
	// When supplied (typical when the install is driven by an action
	// file's `[[requires.connectors]] hash`), a computed hash that
	// does not match aborts the install with `hash_mismatch` and
	// nothing is written to the store. When omitted (typical for
	// first install), the pipeline records whatever hash the bytes
	// produce.
	ExpectedHash *string `json:"expected_hash,omitempty"`

	// Fqn Fully-qualified URI per ADR-0002 (e.g. `github://aileron/slack`).
	// Scheme must be one of `github`, `gitlab`, `hub` in v1.
	Fqn string `json:"fqn"`

	// Version Strict SemVer (e.g. `1.2.0`). No ranges, no `latest`.
	Version string `json:"version"`
}

type InstalledAction struct {
	// AlreadyInstalled True when the action was already present and the install was a no-op
	// (the file on disk matched the bytes that would have been written).
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// Fqn FQN the action was installed from.
	Fqn string `json:"fqn"`

	// Name Bare local handle of the installed action (the action manifest's `name`).
	Name string `json:"name"`

	// NewlyStaleBindings Existing bindings whose status flipped to `stale` because
	// this install upgraded a connector whose manifest now demands
	// an OAuth scope the recorded grant lacks (`scope_drift`), or
	// because the binding predates scope tracking and needs a
	// one-time reauthorize (`no_grant_record`). The CLI uses this
	// list to prompt the operator to drop into
	// `aileron binding reauthorize` inline (#741); without this
	// signal the install reports success and the next action
	// invocation that needs the new scope fails with a 403.
	// Aggregated across implicit connector installs the action
	// triggers (`auto_install_connectors=true`).
	NewlyStaleBindings *[]StaleBinding `json:"newly_stale_bindings,omitempty"`

	// Path Absolute path of the installed action file on disk.
	Path string `json:"path"`

	// Source Provenance URI recorded on the installed manifest's `source` field.
	Source string `json:"source"`

	// UnboundCapabilities Credential capabilities the action's connectors declare that
	// do not yet have a binding in the user's vault. The CLI uses
	// this list to prompt the user to drop into `aileron binding
	// setup` immediately after install — the user stays in the CLI
	// and avoids hitting `binding_required` later.
	UnboundCapabilities *[]UnboundCapability `json:"unbound_capabilities,omitempty"`
	Version             string               `json:"version"`
}

type InstalledActionRef struct {
	// Hash `sha256:<hex>` of the installed manifest's bytes on disk.
	// Differs from the previewed `hash` whenever this object is
	// populated.
	Hash string `json:"hash"`

	// Path Absolute path of the installed action file on disk.
	Path string `json:"path"`

	// Source Provenance URI recorded on the installed manifest's `source` field.
	Source string `json:"source"`

	// Version Version field from the installed manifest's frontmatter.
	Version string `json:"version"`
}

type InstalledConnector struct {
	// AlreadyInstalled True when the install was a no-op because an entry with the
	// matching hash already existed (offline reinstall path per
	// ADR-0004).
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// EntryDir Absolute path of the store entry on disk.
	EntryDir string `json:"entry_dir"`
	Fqn      string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the installed bytes.
	Hash string `json:"hash"`

	// NewlyStaleBindings Bindings whose status flipped to `stale` as a result of this
	// install — either because the new manifest demands an OAuth
	// scope the recorded grant lacks (`scope_drift`) or because
	// the binding predates scope tracking (`no_grant_record`) and
	// needs a one-time reauthorize so the daemon can record what
	// was granted. Emitted by the scope-drift hook (#726/#729).
	// The CLI uses this list to prompt the operator to drop into
	// `aileron binding reauthorize` inline (#741); without this
	// signal the install reports success and the next action
	// invocation that needs the new scope fails with a 403 from
	// the upstream provider.
	NewlyStaleBindings *[]StaleBinding `json:"newly_stale_bindings,omitempty"`
	Version            string          `json:"version"`
}

type IntentContext struct {
	Environment      *string   `json:"environment,omitempty"`
	IpAddress        *string   `json:"ip_address,omitempty"`
	RiskHints        *[]string `json:"risk_hints,omitempty"`
	SourcePlatform   *string   `json:"source_platform,omitempty"`
	SourceSessionId  *string   `json:"source_session_id,omitempty"`
	SourceTraceId    *string   `json:"source_trace_id,omitempty"`
	TemporaryGrantId *string   `json:"temporary_grant_id,omitempty"`
	UserPresent      *bool     `json:"user_present,omitempty"`
}

type IntentEnvelope struct {
	Action      ActionIntent    `json:"action"`
	Agent       ActorRef        `json:"agent"`
	Context     *IntentContext  `json:"context,omitempty"`
	CreatedAt   time.Time       `json:"created_at"`
	Decision    Decision        `json:"decision"`
	Evidence    *[]EvidenceItem `json:"evidence,omitempty"`
	IntentId    string          `json:"intent_id"`
	Status      IntentStatus    `json:"status"`
	UpdatedAt   time.Time       `json:"updated_at"`
	WorkspaceId string          `json:"workspace_id"`
}

type IntentId = string

type IntentListResponse struct {
	Items      *[]IntentEnvelope `json:"items,omitempty"`
	Pagination *Pagination       `json:"pagination,omitempty"`
}

type IntentStatus string

type InternalServerError = Error

type InvalidParamFormatError struct {
	ParamName string
	Err       error
}

type LaunchFlightPlan200JSONResponseBody struct {
	// contains filtered or unexported fields
}

type LaunchFlightPlanJSONRequestBody = FlightPlanLaunchRequest

type LineItem struct {
	Description string  `json:"description"`
	Quantity    int     `json:"quantity"`
	Sku         *string `json:"sku,omitempty"`
	UnitAmount  Money   `json:"unit_amount"`
}

type ListApprovalsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
	Assignee    *string    `form:"assignee,omitempty" json:"assignee,omitempty"`
}

type ListAuditParams struct {
	// Since Lower-bound (inclusive) on event timestamp; RFC 3339.
	Since *time.Time `form:"since,omitempty" json:"since,omitempty"`

	// AuditId Match events with this exact `audit_id`.
	AuditId *string `form:"audit_id,omitempty" json:"audit_id,omitempty"`

	// ConnectorFqn Match events that reference this connector FQN.
	ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`

	// Class Match failure events with this `class` (e.g. `binding_required`).
	Class *string `form:"class,omitempty" json:"class,omitempty"`

	// OutputName Match `output.materialized` events for this output name.
	OutputName *string `form:"output_name,omitempty" json:"output_name,omitempty"`

	// ContentHash Match the `output.materialized` event with this content hash (`sha256:<hex>`).
	ContentHash *string `form:"content_hash,omitempty" json:"content_hash,omitempty"`

	// InvocationId Match events with this `aileron.invocation.id` (one launch's records).
	InvocationId *string `form:"invocation_id,omitempty" json:"invocation_id,omitempty"`

	// Limit Maximum events to return; newest first.
	Limit *int `form:"limit,omitempty" json:"limit,omitempty"`
}

type ListBindingsParams struct {
	// ConnectorFqn Restrict to bindings created for the given connector FQN.
	ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`

	// Kind Restrict to bindings of the given credential kind (e.g. `api_key`).
	Kind *string `form:"kind,omitempty" json:"kind,omitempty"`
}

type ListConnectorsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type ListCredentialsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}