api

type Action struct {
	// Approval Approval gating for an action. When `required` is true, the runtime
	// holds the action-run HTTP response open while it queues an approval
	// request to the orchestrator; the response unblocks only when the user
	// approves (action runs normally) or denies (returns an
	// `approval_denied` failure envelope). The agent surfaces the approval
	// URL to the user via tool descriptions templated by `aileron-mcp`.
	Approval *ActionApprovalPolicy `json:"approval,omitempty"`

	// Body Markdown content following the closing `+++` delimiter. The first
	// paragraph (or a designated section) is surfaced to the LLM as the
	// function description when the action is exposed as a tool.
	Body *string `json:"body,omitempty"`

	// Enabled Whether the action is currently exposed to the LLM as a callable
	// tool. Sourced from the per-user overlay at
	// `~/.aileron/action-state.json`; absent overlay entries default to
	// `true`. Disabling does not uninstall the action — the manifest
	// file is left untouched. MCP servers must hide disabled actions
	// from `tools/list` and refuse calls against them.
	Enabled *bool               `json:"enabled,omitempty"`
	Execute []ActionExecuteStep `json:"execute"`

	// Inputs Declared call-time arguments. Per ADR-0003, inputs map directly
	// to the JSON Schema `parameters` object the LLM sees when
	// Aileron exposes the action as a tool.
	Inputs *[]ActionInput `json:"inputs,omitempty"`
	Match  ActionMatch    `json:"match"`

	// Name Bare local handle for the action (e.g. "ship-update").
	Name string `json:"name"`

	// Path Absolute path of the source file on disk.
	Path     *string        `json:"path,omitempty"`
	Requires ActionRequires `json:"requires"`

	// Source Fully-qualified URI of the template the action was installed from
	// (e.g. "hub://aileron/ship-update@1.0.0"). Provenance only — not
	// consulted at runtime.
	Source string `json:"source"`

	// Version Strict SemVer of the action manifest.
	Version string `json:"version"`
}

type ActionApprovalDecision struct {
	// Approved True to allow the action to run; false to deny.
	Approved bool `json:"approved"`

	// EditedPayload Kind-specific fields the user changed (or chose) before
	// approving. Omitted when the user approved without edits or
	// the kind doesn't support them. Consumers read kind-specific
	// keys:
	//
	//   - `kind=comms_draft` — `body` carries the edited reply
	//     bytes; the CommsServer dispatcher sends those rather
	//     than the agent's original draft.
	//   - `kind=shell` — `save_policy` carries `""` | `"project"`
	//     | `"user"`; the launch-side approval socket translates
	//     this into the `allow_once` / `allow_project` /
	//     `allow_user` wire string aileron-sh writes the new
	//     allow rule under.
	EditedPayload *map[string]interface{} `json:"edited_payload,omitempty"`

	// Reason Optional commentary from the user. Surfaced to the agent in
	// the deny path so it can recover gracefully (e.g. "wrong
	// recipient — I'll redraft").
	Reason *string `json:"reason,omitempty"`
}

type ActionApprovalListResponse struct {
	Items []PendingActionApproval `json:"items"`
}

type ActionApprovalPolicy struct {
	// Preview Optional `[approval.preview]` directive (ADR-0016). When present, the
	// runtime invokes the named connector op before showing the approval
	// prompt and renders the response alongside the gated call's inputs so
	// the user sees an authoritative summary of what they are approving
	// rather than agent-supplied hints.
	Preview *ActionApprovalPreviewPolicy `json:"preview,omitempty"`

	// Required When true, `POST /v1/actions/{name}/run` blocks on user approval
	// before executing. Default false.
	Required *bool `json:"required,omitempty"`
}

type ActionApprovalPreview struct {
	// Fields Rendered entries in the manifest's declared order. Omitted on
	// wholesale preview failure.
	Fields *[]ActionApprovalPreviewField `json:"fields,omitempty"`

	// Unavailable User-facing reason a wholesale preview failure occurred. Empty
	// on success (even when some individual fields had missing paths).
	Unavailable *string `json:"unavailable,omitempty"`
}

type ActionApprovalPreviewField struct {
	// Label User-facing key from the manifest's `render` table.
	Label string `json:"label"`

	// Missing True when the manifest's render path did not resolve in the
	// preview op's response. The UI surfaces these as "n/a" so the
	// user sees that the connector did not return the field, rather
	// than the field being silently absent.
	Missing *bool `json:"missing,omitempty"`

	// Multiline True when the manifest's `multiline` list named this field's
	// label. The approval surface renders the value as a scrollable
	// blockquote below the inline rows rather than as a single-line
	// `key: value` entry. Omitted (or false) for short fields.
	Multiline *bool `json:"multiline,omitempty"`

	// Value Resolved string. Empty when `missing=true`; the UI renders "n/a"
	// in that case.
	Value *string `json:"value,omitempty"`
}

type ActionApprovalPreviewPolicy struct {
	// Args Inline argument table passed to the preview op. Values may
	// interpolate `${args.<name>}` against the gated action's
	// call-time inputs.
	Args *map[string]interface{} `json:"args,omitempty"`

	// Multiline Labels in `render` whose values are long-form content (email
	// bodies, commit messages, response payloads). The approval surface
	// renders these as scrollable blockquotes below the inline rows
	// rather than as single-line `key: value` entries. Optional; a
	// manifest that omits it renders all fields inline. Entries must
	// appear as keys in `render`; mismatches are rejected at manifest
	// load time.
	Multiline *[]string `json:"multiline,omitempty"`

	// Op Connector op the runtime calls before approval. Must live on the
	// same connector as the gated action's first execute step, must be
	// declared `idempotent = true` in at least one bundled action
	// manifest, and must not itself carry `[approval] required = true`
	// (no preview-of-preview recursion).
	Op string `json:"op"`

	// Render Map of user-facing labels to dotted JSON paths into the preview
	// op's response. Header-style arrays (e.g. Gmail's
	// `message.payload.headers`) use a shorthand: a path segment beyond
	// such an array is interpreted as "find the entry whose `name`
	// equals the segment, return its `value`". Paths that fail to
	// resolve at runtime surface as per-field "n/a" indicators on the
	// approval prompt; the approval still proceeds.
	Render map[string]string `json:"render"`
}

type ActionApprovalResult struct {
	// AuditId Audit log id; populated when `status = completed`.
	AuditId *string `json:"audit_id,omitempty"`

	// Failure Action-side failure envelope; populated when
	// `status = failed`. Same shape the synchronous path would
	// have returned as a 4xx/5xx body.
	Failure *FailureEnvelope `json:"failure,omitempty"`

	// Reason User's deny commentary; populated when `status = denied`.
	// May be empty if the user denied without a reason.
	Reason *string `json:"reason,omitempty"`

	// Result Action output payload; populated when `status = completed`.
	// Same shape as `ActionRunResponse.result`.
	Result *string `json:"result,omitempty"`

	// Status - `pending_approval` — the user has not yet decided.
	// - `awaiting_vault` — the user approved before the daemon
	//   restarted; the entry is replayed but the local vault is
	//   currently locked, so the executor is waiting for the
	//   user to unlock the vault before running the action.
	// - `running` — the user approved; the daemon is executing
	//   the action.
	// - `completed` — the action ran successfully; see `audit_id`
	//   and `result`.
	// - `denied` — the user denied the approval; see `reason`.
	// - `failed` — the action was approved but its execution
	//   errored; see `failure`. Also used at replay time when a
	//   `running` entry was found on disk (daemon crashed
	//   mid-execution; the runtime refuses to auto-rerun
	//   non-idempotent actions). In that case `reason` carries
	//   an explanatory message.
	Status ActionApprovalResultStatus `json:"status"`
}

type ActionApprovalResultStatus string

type ActionConnectorDep struct {
	// AlreadyInstalled True when an entry with this hash is already in the
	// cstore. The CLI renders this so the operator sees which
	// deps are new (will be installed) versus existing (no
	// change).
	AlreadyInstalled bool `json:"already_installed"`

	// Capabilities Subset of the connector's declared capabilities the
	// action will exercise. Empty means the action declared no
	// capability subset.
	Capabilities *[]string `json:"capabilities,omitempty"`

	// Fqn Connector FQN per ADR-0002.
	Fqn string `json:"fqn"`

	// Hash Connector content hash the action pins (`sha256:<hex>`).
	// The runtime verifies this before every connector
	// invocation per ADR-0004.
	Hash string `json:"hash"`

	// Version Strict SemVer pinned by the action.
	Version string `json:"version"`
}

type ActionExecuteStep struct {
	Connector  string                  `json:"connector"`
	Id         string                  `json:"id"`
	Idempotent *bool                   `json:"idempotent,omitempty"`
	Inputs     *map[string]interface{} `json:"inputs,omitempty"`
	Op         string                  `json:"op"`
}

type ActionInput struct {
	// Description Field-level prose surfaced to the LLM in the
	// `parameters.properties[name].description` slot.
	Description string `json:"description"`

	// ItemsType JSON Schema type of an array input's elements. Only meaningful
	// when `type` is `array`. When set, the LLM-facing tool schema
	// emits `"items": {"type": <items_type>}`. When unset on an array
	// input, the schema emits `"items": {}` (any) so MCP clients that
	// default missing-`items` to `string[]` projection do not silently
	// coerce object elements to strings.
	ItemsType *ActionInputItemsType `json:"items_type,omitempty"`

	// Name Argument identifier matching `^[a-z][a-z0-9_]*$`.
	Name string `json:"name"`

	// Required Defaults to true when omitted. Set false to mark the argument
	// as optional in the LLM-facing parameter schema.
	Required *bool `json:"required,omitempty"`

	// Type JSON Schema type. Scalar types (`string`, `integer`, `number`,
	// `boolean`) and structured types (`array`, `object`) are accepted.
	// Structured types are passed through to the LLM-facing tool-use
	// schema with optional shape constraints declared on adjacent
	// fields (`items_type` for arrays); the connector is responsible
	// for validating semantic shape at op time.
	Type ActionInputType `json:"type"`
}

type ActionInputItemsType string

type ActionInputType string

type ActionIntent struct {
	// Domain Carries action-type-specific fields. Exactly one field must be populated,
	// corresponding to the prefix of ActionIntent.type:
	//   - git.* → git
	//   - deploy.* → deploy
	//   - cloud.* → cloud
	//   - email.* → email
	//   - calendar.* → calendar
	//   - payment.* → payment
	//   - procurement.* → procurement
	// The server rejects requests where the populated domain field does not
	// match the action type prefix.
	Domain        *DomainAction           `json:"domain,omitempty"`
	Justification *string                 `json:"justification,omitempty"`
	Metadata      *map[string]interface{} `json:"metadata,omitempty"`
	Summary       string                  `json:"summary"`
	Target        *ActionTarget           `json:"target,omitempty"`
	Type          string                  `json:"type"`
}

type ActionListResponse struct {
	Items      *[]Action          `json:"items,omitempty"`
	LoadErrors *[]ActionLoadError `json:"load_errors,omitempty"`
}

type ActionLoadError struct {
	// Boundary Which layer produced the error (always "action" for load failures).
	Boundary *string `json:"boundary,omitempty"`

	// Class Canonical failure class (e.g. parse_error, validation_error).
	Class string `json:"class"`

	// File Absolute path of the offending file.
	File string `json:"file"`

	// Line Line within the file where the error was detected; 0 when unknown.
	Line    *int   `json:"line,omitempty"`
	Message string `json:"message"`
}

type ActionMatch struct {
	// Intent Canonical phrase the runtime matches against agent intent.
	Intent string `json:"intent"`
}

type ActionPatchRequest struct {
	// Enabled When set, replaces the action's enabled flag in the overlay
	// (see [Action.enabled]). Omit to leave the current value
	// untouched.
	Enabled *bool `json:"enabled,omitempty"`
}

type ActionPreview struct {
	// AlreadyInstalled True when an action with this name is already installed
	// and its hash matches. The CLI uses this to short-circuit
	// past the consent prompt.
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// ConnectorDeps One entry per `[[requires.connectors]]` in the action's
	// manifest, in declaration order.
	ConnectorDeps []ActionConnectorDep `json:"connector_deps"`

	// Existing Set when an action with the same `name` is already
	// installed but its bytes differ from the previewed
	// manifest (typically a different version). Mutually
	// exclusive with `already_installed = true`. The CLI uses
	// this to render an upgrade prompt instead of treating
	// the install as fresh — the operator sees the installed
	// version side-by-side with the requested version and can
	// choose to overwrite.
	Existing *InstalledActionRef `json:"existing,omitempty"`

	// Fqn Canonical FQN of the previewed action.
	Fqn string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the fetched action manifest.
	// Same value the install endpoint will record.
	Hash string `json:"hash"`

	// Intent Action's `[match] intent` — the canonical natural-language
	// phrase the runtime matches against agent requests. Used in
	// the consent prompt so the operator knows when this action
	// will fire. Optional.
	Intent *string `json:"intent,omitempty"`

	// Name Action name from the manifest's `name = "<name>"` field —
	// the slug under `~/.aileron/actions/<name>.md`.
	Name string `json:"name"`

	// SignatureStatus Action signatures are optional in v1 — manifests without a
	// signature surface as `unsigned` rather than as an error.
	// Operators see this in the consent prompt and decide
	// whether to proceed.
	SignatureStatus *ActionPreviewSignatureStatus `json:"signature_status,omitempty"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ActionPreviewSignatureStatus string

type ActionRequires struct {
	Connectors *[]ActionRequiresConnector `json:"connectors,omitempty"`
}

type ActionRequiresConnector struct {
	// Capabilities The action's declared subset of operations on the connector. Per
	// ADR-0003, calls outside this subset are denied at the action
	// boundary even when the connector permits the operation.
	Capabilities []string `json:"capabilities"`

	// Hash Content hash of the connector binary plus its manifest.
	Hash string `json:"hash"`

	// Name Connector FQN per ADR-0002 (e.g. "github://aileron/slack").
	Name string `json:"name"`

	// Version Pinned SemVer of the connector.
	Version string `json:"version"`
}

type ActionRunPendingResponse struct {
	// ApprovalId Opaque server-minted id for the pending approval entry.
	// The agent passes this to the `check_action_status` MCP
	// tool (or to `GET /v1/action-approvals/{id}/result`) to
	// learn the outcome.
	ApprovalId string `json:"approval_id"`

	// Message Human-readable instruction the agent should surface to the
	// user verbatim. Names the approval, the review URL, and the
	// `aileron open approval <id>` shell command alternative.
	Message string `json:"message"`

	// ReviewUrl Deep link to the webapp's approvals page anchored at this
	// approval (`<webapp>/approvals?focus=<id>`). Empty when the
	// daemon has no webapp URL configured.
	ReviewUrl *string `json:"review_url,omitempty"`

	// Status Discriminator. Always `pending_approval` for this shape;
	// included so the agent's MCP wrapper can branch without
	// inspecting the HTTP status code.
	Status ActionRunPendingResponseStatus `json:"status"`
}

type ActionRunPendingResponseStatus string

type ActionRunRequest struct {
	// Args Per-call arguments matching the action's declared inputs.
	Args *map[string]interface{} `json:"args,omitempty"`
}

type ActionRunResponse struct {
	// AuditId Audit log ID for this execution per ADR-0010. Always present
	// so callers can cross-reference into the audit log.
	AuditId string `json:"audit_id"`

	// Result Action output payload — the same Content the LLM observes
	// as a tool result when the action runs through the gateway's
	// intercept path. Typically a JSON document; may be plain
	// prose for actions whose output is naturally a sentence.
	Result *string `json:"result,omitempty"`
}

type ActionTarget struct {
	DisplayName *string          `json:"display_name,omitempty"`
	Id          *string          `json:"id,omitempty"`
	Kind        ActionTargetKind `json:"kind"`
}

type ActionTargetKind string

type ActorRef struct {
	DisplayName *string      `json:"display_name,omitempty"`
	Id          string       `json:"id"`
	Type        ActorRefType `json:"type"`
}

type ActorRefType string

type AnalyticsSummary struct {
	ApprovalLatencyMs *struct {
		P50 *int `json:"p50,omitempty"`
		P95 *int `json:"p95,omitempty"`
	} `json:"approval_latency_ms,omitempty"`
	ByRiskLevel *map[string]int `json:"by_risk_level,omitempty"`
	Spend       *struct {
		Currency        *string `json:"currency,omitempty"`
		TotalMinorUnits *int    `json:"total_minor_units,omitempty"`
	} `json:"spend,omitempty"`
	Totals *struct {
		ApprovalsGranted    *int `json:"approvals_granted,omitempty"`
		ApprovalsRequested  *int `json:"approvals_requested,omitempty"`
		Denials             *int `json:"denials,omitempty"`
		ExecutionsFailed    *int `json:"executions_failed,omitempty"`
		ExecutionsSucceeded *int `json:"executions_succeeded,omitempty"`
		Intents             *int `json:"intents,omitempty"`
	} `json:"totals,omitempty"`
}

type AnthropicMessage struct {
	// Content String or array of content blocks (`text`, `tool_use`,
	// `tool_result`, `image`, ...). Shape follows Anthropic's
	// Messages contract.
	Content              interface{}            `json:"content"`
	Role                 AnthropicMessageRole   `json:"role"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type AnthropicMessageRole string

type AnthropicTool struct {
	Description *string `json:"description,omitempty"`

	// InputSchema JSON Schema for the tool's input.
	InputSchema          *map[string]interface{} `json:"input_schema,omitempty"`
	Name                 string                  `json:"name"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type AppendEvidenceRequest struct {
	Evidence []EvidenceItem `json:"evidence"`
}

type AppendIntentEvidenceJSONRequestBody = AppendEvidenceRequest

type Approval struct {
	ApprovalId     string                  `json:"approval_id"`
	Approvers      []ApprovalActor         `json:"approvers"`
	EditableBounds *map[string]interface{} `json:"editable_bounds,omitempty"`
	ExpiresAt      *time.Time              `json:"expires_at,omitempty"`
	IntentId       string                  `json:"intent_id"`
	Rationale      *string                 `json:"rationale,omitempty"`
	RequestedAt    time.Time               `json:"requested_at"`
	ResolvedAt     *time.Time              `json:"resolved_at,omitempty"`
	Status         ApprovalStatus          `json:"status"`
	WorkspaceId    *string                 `json:"workspace_id,omitempty"`
}

type ApprovalActionResponse struct {
	ApprovalId       string         `json:"approval_id"`
	ExecutionGrantId *string        `json:"execution_grant_id,omitempty"`
	IntentStatus     *IntentStatus  `json:"intent_status,omitempty"`
	Status           ApprovalStatus `json:"status"`
}

type ApprovalActor struct {
	DisplayName *string              `json:"display_name,omitempty"`
	PrincipalId string               `json:"principal_id"`
	Role        *string              `json:"role,omitempty"`
	Status      *ApprovalActorStatus `json:"status,omitempty"`
}

type ApprovalActorStatus string

type ApprovalId = string

type ApprovalListResponse struct {
	Items      *[]Approval `json:"items,omitempty"`
	Pagination *Pagination `json:"pagination,omitempty"`
}

type ApprovalRequirement struct {
	ApproverGroupId *string                  `json:"approver_group_id,omitempty"`
	Mode            *ApprovalRequirementMode `json:"mode,omitempty"`
	QuorumCount     *int                     `json:"quorum_count,omitempty"`
}

type ApprovalRequirementMode string

type ApprovalStatus string

type ApproveRequest struct {
	ApproveOnce         *bool   `json:"approve_once,omitempty"`
	Comment             *string `json:"comment,omitempty"`
	StepUpAuthAssertion *string `json:"step_up_auth_assertion,omitempty"`
}

type ApproveRequestJSONRequestBody = ApproveRequest

type AttachmentRef struct {
	MimeType   *string `json:"mime_type,omitempty"`
	Name       *string `json:"name,omitempty"`
	StorageRef *string `json:"storage_ref,omitempty"`
	Url        *string `json:"url,omitempty"`
}

type AuditEvent struct {
	Actor struct {
		// Id Stable identifier within the actor type.
		Id string `json:"id"`

		// Type Actor kind (`human`, `agent`, `connector_runtime`, etc.)
		Type string `json:"type"`
	} `json:"actor"`

	// AuditId Stable id minted by the recorder. For failures, also
	// stamped onto the `FailureEnvelope.error.audit_id` so the
	// envelope returned to the caller is a working back-reference.
	AuditId string `json:"audit_id"`

	// EventType Discriminator for the payload shape (e.g.
	// `execution.failed`, `action.installed`, `binding.created`).
	EventType string `json:"event_type"`

	// Payload Event-shaped payload. For failures, contains
	// `class`/`boundary`/`retriable`/`message`/`details`. For
	// success events, contains the event-specific fields the
	// recorder set (e.g. `name`, `connector_fqn`, `kind` for a
	// binding event).
	Payload map[string]interface{} `json:"payload"`

	// Timestamp When the event was recorded; RFC 3339, UTC.
	Timestamp time.Time `json:"timestamp"`
}

type AuditListResponse struct {
	Events []AuditEvent `json:"events"`
}

type BadRequest = Error

type Binding struct {
	// Account Human-readable account label derived from credential metadata when available.
	Account *string `json:"account,omitempty"`

	// ConnectorFqn FQN of the connector this binding was created for.
	ConnectorFqn string    `json:"connector_fqn"`
	CreatedAt    time.Time `json:"created_at"`

	// GrantedScopes OAuth scope strings the provider confirmed on the most
	// recent successful handshake. Empty for non-OAuth kinds and
	// for OAuth bindings created before scope tracking landed
	// (those are migration-marked `stale` on first
	// install-after-upgrade).
	GrantedScopes *[]string `json:"granted_scopes,omitempty"`

	// Identity User-chosen handle distinguishing variants of the same kind+service (e.g. `work`, `personal`).
	Identity string `json:"identity"`

	// Kind Credential kind (e.g. `api_key`, `oauth2`). Matches the connector manifest's `[capabilities.credential].kind`.
	Kind string `json:"kind"`

	// LastRefreshedAt Reserved for OAuth refresh tracking (#388); always null for `api_key`.
	LastRefreshedAt *time.Time `json:"last_refreshed_at,omitempty"`

	// LastUsedAt Last time the runtime resolved this binding for an action invocation.
	LastUsedAt *time.Time `json:"last_used_at,omitempty"`

	// MissingScopes Scope strings the current connector manifest demands but
	// this binding's recorded grant lacks. Populated when
	// `stale_reason == "scope_drift"` and empty otherwise. The
	// webapp/CLI render this so the user can see what
	// reauthorization will unlock.
	MissingScopes *[]string `json:"missing_scopes,omitempty"`

	// Name Full binding name in `<kind>/<service>/<identity>` form.
	Name string `json:"name"`

	// RefreshTokenPresent Reserved for OAuth refresh tracking (#388); always false for `api_key`.
	RefreshTokenPresent *bool `json:"refresh_token_present,omitempty"`

	// Scope Optional scope string copied from the connector manifest at setup time.
	Scope *string `json:"scope,omitempty"`

	// Service Service identifier (e.g. `slack`, `linear`).
	Service string `json:"service"`

	// StaleReason Populated when `status == "stale"`. `scope_drift` means the
	// connector manifest declares a scope this binding lacks;
	// `no_grant_record` means the binding predates scope tracking
	// and was migration-marked on the first install-after-upgrade.
	StaleReason *BindingStaleReason `json:"stale_reason,omitempty"`

	// Status Coarse health flag. `stale` is set by drift detection at
	// connector-install time when the manifest's OAuth scope set
	// demands a scope the binding's recorded grant does not have,
	// or when a pre-existing binding has no recorded grant.
	Status *BindingStatus `json:"status,omitempty"`
}

type BindingListResponse struct {
	Items []Binding `json:"items"`
}

type BindingName = string

type BindingSetupRequest struct {
	Bindings []struct {
		// Account Optional human-readable account label.
		Account *string `json:"account,omitempty"`

		// Identity User-chosen handle for this binding. Combined with the
		// connector's declared kind and service to form the
		// full binding name `<kind>/<service>/<identity>`.
		Identity string `json:"identity"`

		// Service Optional service override. Defaults to the service
		// segment derived from the connector FQN's host.
		Service *string `json:"service,omitempty"`

		// Source Per-binding credential source. v1 supports only `api_key`. Setting
		// `kind: oauth2` returns a structured `400` referencing #388.
		Source BindingSource `json:"source"`
	} `json:"bindings"`

	// ConnectorFqn Fully-qualified connector name (e.g. `github://aileron/slack`).
	// The connector must already be installed.
	ConnectorFqn string `json:"connector_fqn"`

	// SkipExisting When true (default), bindings whose name already exists are
	// skipped silently and reported in the response's `skipped`
	// list. When false, the entire request fails with `409 Conflict`
	// on the first existing binding.
	SkipExisting *bool `json:"skip_existing,omitempty"`
}

type BindingSetupResponse struct {
	Created []Binding `json:"created"`

	// Skipped Names of bindings that already existed (only populated when `skip_existing` was true).
	Skipped *[]string `json:"skipped,omitempty"`
}

type BindingSource struct {
	// Kind Credential kind. Must match the connector manifest's declared
	// `[capabilities.credential].kind` for the requested capability.
	Kind BindingSourceKind `json:"kind"`

	// Value Raw credential bytes (e.g. the API key). Required when `kind`
	// is `api_key`. The runtime stores this encrypted in the vault.
	Value *string `json:"value,omitempty"`
}

type BindingSourceKind string

type BindingStaleReason string

type BindingStatus string

type CalendarAction struct {
	Attendees      *[]CalendarAttendee           `json:"attendees,omitempty"`
	CalendarId     *string                       `json:"calendar_id,omitempty"`
	ConferenceType *CalendarActionConferenceType `json:"conference_type,omitempty"`
	Description    *string                       `json:"description,omitempty"`
	EndTime        *time.Time                    `json:"end_time,omitempty"`
	Location       *string                       `json:"location,omitempty"`
	Provider       *CalendarActionProvider       `json:"provider,omitempty"`
	StartTime      *time.Time                    `json:"start_time,omitempty"`
	Timezone       *string                       `json:"timezone,omitempty"`
	Title          *string                       `json:"title,omitempty"`
	Visibility     *CalendarActionVisibility     `json:"visibility,omitempty"`
}

type CalendarActionConferenceType string

type CalendarActionProvider string

type CalendarActionVisibility string

type CalendarAttendee struct {
	Email    openapi_types.Email `json:"email"`
	Name     *string             `json:"name,omitempty"`
	Optional *bool               `json:"optional,omitempty"`
}

type ChatCompletionChoice struct {
	FinishReason         string                 `json:"finish_reason"`
	Index                int                    `json:"index"`
	Message              ChatCompletionMessage  `json:"message"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type ChatCompletionFunctionDef struct {
	Description *string `json:"description,omitempty"`
	Name        string  `json:"name"`

	// Parameters JSON Schema for the function's parameters.
	Parameters           *map[string]interface{} `json:"parameters,omitempty"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type ChatCompletionMessage struct {
	// Content String or array of content parts; shape follows the upstream
	// provider's contract. Aileron does not require parsing.
	Content interface{}               `json:"content,omitempty"`
	Name    *string                   `json:"name,omitempty"`
	Role    ChatCompletionMessageRole `json:"role"`

	// ToolCallId Required on `tool` role messages.
	ToolCallId           *string                   `json:"tool_call_id,omitempty"`
	ToolCalls            *[]ChatCompletionToolCall `json:"tool_calls,omitempty"`
	AdditionalProperties map[string]interface{}    `json:"-"`
}

type ChatCompletionMessageRole string

type ChatCompletionRequest struct {
	Messages []ChatCompletionMessage `json:"messages"`

	// Model Model identifier passed to the upstream provider.
	Model string `json:"model"`

	// Stream When true, the response is `text/event-stream`. Aileron
	// buffers tool-call deltas for augmented actions until the call
	// is structurally complete.
	Stream *bool `json:"stream,omitempty"`

	// ToolChoice Passed through to the upstream provider unchanged.
	ToolChoice interface{} `json:"tool_choice,omitempty"`

	// Tools Agent-declared tools. Aileron preserves these unchanged and
	// appends installed actions to the array before forwarding
	// upstream.
	Tools                *[]ChatCompletionTool  `json:"tools,omitempty"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type ChatCompletionResponse struct {
	Choices              []ChatCompletionChoice  `json:"choices"`
	Created              *int                    `json:"created,omitempty"`
	Id                   string                  `json:"id"`
	Model                string                  `json:"model"`
	Object               string                  `json:"object"`
	Usage                *map[string]interface{} `json:"usage,omitempty"`
	AdditionalProperties map[string]interface{}  `json:"-"`
}

type ChatCompletionTool struct {
	Function             *ChatCompletionFunctionDef `json:"function,omitempty"`
	Type                 ChatCompletionToolType     `json:"type"`
	AdditionalProperties map[string]interface{}     `json:"-"`
}

type ChatCompletionToolCall struct {
	Function struct {
		// Arguments JSON-encoded argument object.
		Arguments string `json:"arguments"`
		Name      string `json:"name"`
	} `json:"function"`
	Id                   string                     `json:"id"`
	Type                 ChatCompletionToolCallType `json:"type"`
	AdditionalProperties map[string]interface{}     `json:"-"`
}

type ChatCompletionToolCallType string

type ChatCompletionToolType string

type CheckConnectorsParams struct {
	// IncludePrerelease Include pre-release versions when computing the latest version.
	IncludePrerelease *bool `form:"include_prerelease,omitempty" json:"include_prerelease,omitempty"`
}

type CloudAction struct {
	AccountId     *string              `json:"account_id,omitempty"`
	EstimatedCost *Money               `json:"estimated_cost,omitempty"`
	Operation     *string              `json:"operation,omitempty"`
	Provider      *CloudActionProvider `json:"provider,omitempty"`
	Region        *string              `json:"region,omitempty"`
	ResourceId    *string              `json:"resource_id,omitempty"`
	ResourceType  *string              `json:"resource_type,omitempty"`
	Tags          *map[string]string   `json:"tags,omitempty"`
}

type CloudActionProvider string

type CommsMessage struct {
	// Author Sender's display name.
	Author string `json:"author"`

	// Body Full message text.
	Body string `json:"body"`

	// Channel Channel name or ID the message arrived on.
	Channel string `json:"channel"`

	// DraftRequest True when the message arrived on a channel configured for
	// auto-draft and no reply has been drafted yet — the agent
	// should call `draft_reply` with this message's id.
	DraftRequest *bool `json:"draft_request,omitempty"`

	// Id Stable per-message identifier (set by the inbound listener).
	Id string `json:"id"`

	// Service Source service ("slack", "discord", ...).
	Service string `json:"service"`

	// Timestamp When the listener received the message (RFC3339).
	Timestamp time.Time `json:"timestamp"`
}

type ConfirmedFingerprint struct {
	// Fingerprint Publisher-key fingerprint the operator confirmed
	// (`sha256:<22 base64-no-padding chars>`).
	Fingerprint string `json:"fingerprint"`

	// Fqn Connector authority FQN (e.g. `github://alice/conn-x`).
	Fqn string `json:"fqn"`
}

type Conflict = Error

type ConnectAccountCallbackParams struct {
	Code  string  `form:"code" json:"code"`
	State *string `form:"state,omitempty" json:"state,omitempty"`
}

type ConnectAccountParams struct {
	// ReturnTo URL to redirect to after the account is connected. Must be a same-site absolute URL or a relative path. Defaults to /settings/connected-accounts.
	ReturnTo *string `form:"return_to,omitempty" json:"return_to,omitempty"`
}

type ConnectedAccount struct {
	CreatedAt *time.Time `json:"created_at,omitempty"`

	// ExternalUserId Provider-specific user identifier (e.g. email for Gmail, username for GitHub, user ID for Slack)
	ExternalUserId *string                   `json:"external_user_id,omitempty"`
	Id             *string                   `json:"id,omitempty"`
	Provider       *ConnectedAccountProvider `json:"provider,omitempty"`

	// Scopes OAuth scopes granted to Aileron
	Scopes    *[]string               `json:"scopes,omitempty"`
	Status    *ConnectedAccountStatus `json:"status,omitempty"`
	UpdatedAt *time.Time              `json:"updated_at,omitempty"`
	UserId    *string                 `json:"user_id,omitempty"`
}

type ConnectedAccountProvider string

type ConnectedAccountStatus string

type Connector struct {
	Auth        *ConnectorAuth          `json:"auth,omitempty"`
	ConnectorId string                  `json:"connector_id"`
	Environment *string                 `json:"environment,omitempty"`
	Metadata    *map[string]interface{} `json:"metadata,omitempty"`
	Name        string                  `json:"name"`
	PolicyIds   *[]string               `json:"policy_ids,omitempty"`
	Provider    *string                 `json:"provider,omitempty"`
	Status      ConnectorStatus         `json:"status"`
	Type        ConnectorType           `json:"type"`
	WorkspaceId string                  `json:"workspace_id"`
}

type ConnectorAuth struct {
	Method      ConnectorAuthMethod `json:"method"`
	ReferenceId *string             `json:"reference_id,omitempty"`
	Scopes      *[]string           `json:"scopes,omitempty"`
}

type ConnectorAuthMethod string

type ConnectorCheckResult struct {
	// AvailableVersions Versions strictly newer than `current_version`, sorted descending.
	// Omitted when `error` is present. Excludes pre-releases unless
	// the request set `include_prerelease=true`.
	AvailableVersions *[]string `json:"available_versions,omitempty"`

	// CurrentVersion Currently installed SemVer.
	CurrentVersion string `json:"current_version"`

	// Error Per-connector check error (network failure, source removed,
	// unknown scheme, scheme not yet implemented). When present,
	// `latest_version` and `available_versions` may be omitted —
	// the check failed for this connector but did not abort the
	// sweep.
	Error *string `json:"error,omitempty"`

	// Fqn Canonical FQN of the installed connector (per ADR-0002).
	Fqn string `json:"fqn"`

	// LatestVersion Latest available version after applying the prerelease filter.
	// Omitted when `error` is present or when no released versions
	// were found at the source.
	LatestVersion *string `json:"latest_version,omitempty"`

	// UpdateAvailable True when `latest_version` is strictly newer than `current_version`
	// under SemVer 2.0 ordering. False when this connector is up to date,
	// and false when `error` is present (we couldn't tell).
	UpdateAvailable bool `json:"update_available"`
}

type ConnectorId = string

type ConnectorInstallFailure struct {
	// Error Human-readable error from the install pipeline.
	Error   string `json:"error"`
	Fqn     string `json:"fqn"`
	Version string `json:"version"`
}

type ConnectorListResponse struct {
	Items      *[]Connector `json:"items,omitempty"`
	Pagination *Pagination  `json:"pagination,omitempty"`
}

type ConnectorPreview struct {
	// AlreadyInstalled True when an entry with this hash is already in the
	// cstore. The CLI uses this to skip the consent prompt and
	// short-circuit to a "already installed" message — operators
	// running install twice in a row should not see the prompt
	// twice.
	AlreadyInstalled bool `json:"already_installed"`

	// Capabilities Flattened view of the connector manifest's `[capabilities.*]`
	// blocks. Optional sub-tables that are absent in the manifest
	// are absent here too — the CLI renders only what the connector
	// actually declares.
	Capabilities PreviewCapabilities `json:"capabilities"`

	// Description Human-readable description from the connector manifest.
	// May be empty.
	Description *string `json:"description,omitempty"`

	// Fqn Canonical FQN of the previewed connector.
	Fqn string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the fetched tarball's
	// (binary || manifest) bytes. Same value the install
	// endpoint will produce.
	Hash string `json:"hash"`

	// Publisher FQN authority — the entity that signed the connector. For
	// `github://owner/repo` this is `owner`. The CLI surfaces
	// this so the operator knows whose key trust is being
	// consumed for this install.
	Publisher string `json:"publisher"`

	// SignatureStatus Always `verified` when this preview is returned: a
	// signature failure short-circuits earlier in the pipeline
	// and surfaces as a 422 error per ADR-0007. The field
	// exists on the wire so future verification states (e.g.
	// `experimental_unsigned` for a trusted-but-unsigned dev
	// mode) can be added without breaking the response shape.
	SignatureStatus ConnectorPreviewSignatureStatus `json:"signature_status"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ConnectorPreviewSignatureStatus string

type ConnectorRef struct {
	// Fqn Fully-qualified URI per ADR-0002.
	Fqn string `json:"fqn"`

	// Version Strict SemVer.
	Version string `json:"version"`
}

type ConnectorStatus string

type ConnectorType string

type ConnectorsCheckResponse struct {
	// Results One entry per installed (FQN, version) pair. Order matches
	// the cstore index's deterministic sort (ascending canonical
	// key); operators rendering this should not assume a
	// different order.
	Results []ConnectorCheckResult `json:"results"`
}

type CreateConnectorJSONRequestBody = CreateConnectorRequest

type CreateConnectorRequest struct {
	Auth        ConnectorAuth           `json:"auth"`
	Environment *string                 `json:"environment,omitempty"`
	Metadata    *map[string]interface{} `json:"metadata,omitempty"`
	Name        string                  `json:"name"`
	Provider    *string                 `json:"provider,omitempty"`
	Type        ConnectorType           `json:"type"`
	WorkspaceId string                  `json:"workspace_id"`
}

type CreateCredentialJSONRequestBody = CreateCredentialRequest

type CreateCredentialRequest struct {
	Environment *string                     `json:"environment,omitempty"`
	Metadata    *map[string]interface{}     `json:"metadata,omitempty"`
	Name        string                      `json:"name"`
	Type        CreateCredentialRequestType `json:"type"`
	VaultPath   string                      `json:"vault_path"`
	WorkspaceId string                      `json:"workspace_id"`
}

type CreateCredentialRequestType string

type CreateFundingSourceJSONRequestBody = CreateFundingSourceRequest

type CreateFundingSourceRequest struct {
	Currency         *string                        `json:"currency,omitempty"`
	Metadata         *map[string]interface{}        `json:"metadata,omitempty"`
	Name             string                         `json:"name"`
	SpendingControls *map[string]interface{}        `json:"spending_controls,omitempty"`
	Type             CreateFundingSourceRequestType `json:"type"`
	WorkspaceId      string                         `json:"workspace_id"`
}

type CreateFundingSourceRequestType string

type CreateIntentJSONRequestBody = CreateIntentRequest

type CreateIntentRequest struct {
	Action  ActionIntent `json:"action"`
	AgentId string       `json:"agent_id"`

	// CallbackUrl Optional webhook URL. The control plane will POST status updates
	// to this URL as the intent progresses through the lifecycle
	// (policy evaluated, approval requested, approved/denied, execution
	// started, execution completed). This avoids the need for agents
	// to poll the GET /v1/intents/{id} endpoint.
	CallbackUrl    *string        `json:"callback_url,omitempty"`
	Context        *IntentContext `json:"context,omitempty"`
	IdempotencyKey string         `json:"idempotency_key"`
	WorkspaceId    string         `json:"workspace_id"`
}

type CreatePolicyJSONRequestBody = CreatePolicyRequest

type CreatePolicyRequest struct {
	Description *string       `json:"description,omitempty"`
	Environment *string       `json:"environment,omitempty"`
	Name        string        `json:"name"`
	Rules       []PolicyRule  `json:"rules"`
	Status      *PolicyStatus `json:"status,omitempty"`
	WorkspaceId string        `json:"workspace_id"`
}

type CreateSessionJSONRequestBody = CreateSessionRequest

type CreateSessionRequest struct {
	Agent      string  `json:"agent"`
	WorkingDir *string `json:"working_dir,omitempty"`
}

type CredentialListResponse struct {
	Items      *[]CredentialReference `json:"items,omitempty"`
	Pagination *Pagination            `json:"pagination,omitempty"`
}

type CredentialReference struct {
	CredentialId string                  `json:"credential_id"`
	Environment  *string                 `json:"environment,omitempty"`
	Metadata     *map[string]interface{} `json:"metadata,omitempty"`
	Name         string                  `json:"name"`
	Type         CredentialReferenceType `json:"type"`
	VaultPath    string                  `json:"vault_path"`
	WorkspaceId  string                  `json:"workspace_id"`
}

type CredentialReferenceType string

type DecideActionApprovalJSONRequestBody = ActionApprovalDecision

type Decision struct {
	ApprovalId       *string             `json:"approval_id,omitempty"`
	DenialReason     *string             `json:"denial_reason,omitempty"`
	Disposition      DecisionDisposition `json:"disposition"`
	ExecutionGrantId *string             `json:"execution_grant_id,omitempty"`
	MatchedPolicies  *[]PolicyMatch      `json:"matched_policies,omitempty"`
	RequiresApproval *bool               `json:"requires_approval,omitempty"`
	RiskLevel        RiskLevel           `json:"risk_level"`
}

type DecisionDisposition string

type DenyRequest struct {
	Comment *string `json:"comment,omitempty"`
	Reason  string  `json:"reason"`
}

type DenyRequestJSONRequestBody = DenyRequest

type DeployAction struct {
	ArtifactRef         *string               `json:"artifact_ref,omitempty"`
	ChangeTicketId      *string               `json:"change_ticket_id,omitempty"`
	Cluster             *string               `json:"cluster,omitempty"`
	Environment         *string               `json:"environment,omitempty"`
	ImageRef            *string               `json:"image_ref,omitempty"`
	MaintenanceWindowId *string               `json:"maintenance_window_id,omitempty"`
	Namespace           *string               `json:"namespace,omitempty"`
	Provider            *DeployActionProvider `json:"provider,omitempty"`
	RollbackSupported   *bool                 `json:"rollback_supported,omitempty"`
	Service             *string               `json:"service,omitempty"`
	Strategy            *DeployActionStrategy `json:"strategy,omitempty"`
}

type DeployActionProvider string

type DeployActionStrategy string

type DomainAction struct {
	Calendar    *CalendarAction    `json:"calendar,omitempty"`
	Cloud       *CloudAction       `json:"cloud,omitempty"`
	Deploy      *DeployAction      `json:"deploy,omitempty"`
	Email       *EmailAction       `json:"email,omitempty"`
	Git         *GitAction         `json:"git,omitempty"`
	Payment     *PaymentAction     `json:"payment,omitempty"`
	Procurement *ProcurementAction `json:"procurement,omitempty"`
}

type DraftCommsReplyJSONRequestBody = DraftCommsReplyRequest

type DraftCommsReplyRequest struct {
	// Body Suggested reply text the agent drafted.
	Body string `json:"body"`

	// ReplyTo ID of the original incoming message (from `read_messages`).
	ReplyTo string `json:"reply_to"`
}

type EmailAction struct {
	Attachments *[]AttachmentRef     `json:"attachments,omitempty"`
	Bcc         *[]Recipient         `json:"bcc,omitempty"`
	BodyHtml    *string              `json:"body_html,omitempty"`
	BodyText    *string              `json:"body_text,omitempty"`
	Cc          *[]Recipient         `json:"cc,omitempty"`
	From        *Recipient           `json:"from,omitempty"`
	SendMode    *EmailActionSendMode `json:"send_mode,omitempty"`
	Subject     *string              `json:"subject,omitempty"`
	ThreadRef   *string              `json:"thread_ref,omitempty"`
	To          *[]Recipient         `json:"to,omitempty"`
}

type EmailActionSendMode string

type EndSessionJSONRequestBody = EndSessionRequest

type EndSessionRequest struct {
	// ExitCode Agent process exit code. Omit or send null to mark the
	// session as ended-with-unknown-status (same shape the
	// orphan-reaper produces on daemon restart).
	ExitCode *int `json:"exit_code,omitempty"`
}

type Enterprise struct {
	// AllowedAuthProviders Restrict sign-in to these providers. Empty means all allowed.
	AllowedAuthProviders *[]string `json:"allowed_auth_providers,omitempty"`

	// AllowedEmailDomains Restrict sign-in to these email domains. Empty means all allowed.
	AllowedEmailDomains *[]string           `json:"allowed_email_domains,omitempty"`
	BillingEmail        openapi_types.Email `json:"billing_email"`
	CreatedAt           time.Time           `json:"created_at"`
	Id                  string              `json:"id"`
	Name                string              `json:"name"`

	// Personal True for single-user personal accounts (e.g. Gmail sign-in)
	Personal *bool          `json:"personal,omitempty"`
	Plan     EnterprisePlan `json:"plan"`

	// Slug URL-friendly unique identifier
	Slug        string    `json:"slug"`
	SsoRequired *bool     `json:"sso_required,omitempty"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type EnterprisePlan string

type Error struct {
	Error struct {
		Code      string                    `json:"code"`
		Details   *[]map[string]interface{} `json:"details,omitempty"`
		Message   string                    `json:"message"`
		RequestId *string                   `json:"request_id,omitempty"`
	} `json:"error"`
}

type EstablishTeeSessionJSONRequestBody = TeeSessionRequest

type EvidenceItem struct {
	Label *string          `json:"label,omitempty"`
	Type  EvidenceItemType `json:"type"`
	Value string           `json:"value"`
}

type EvidenceItemType string

type Execution struct {
	ConnectorId *string                 `json:"connector_id,omitempty"`
	ExecutionId string                  `json:"execution_id"`
	FinishedAt  *time.Time              `json:"finished_at,omitempty"`
	IntentId    string                  `json:"intent_id"`
	Output      *map[string]interface{} `json:"output,omitempty"`
	ReceiptRef  *string                 `json:"receipt_ref,omitempty"`
	StartedAt   time.Time               `json:"started_at"`
	Status      ExecutionStatus         `json:"status"`
}

type ExecutionCallbackJSONRequestBody = ExecutionCallbackRequest

type ExecutionCallbackRequest struct {
	ErrorMessage *string                        `json:"error_message,omitempty"`
	Output       *map[string]interface{}        `json:"output,omitempty"`
	ReceiptRef   *string                        `json:"receipt_ref,omitempty"`
	Status       ExecutionCallbackRequestStatus `json:"status"`
}

type ExecutionCallbackRequestStatus string

type ExecutionGrant struct {
	BoundedParameters *map[string]interface{} `json:"bounded_parameters,omitempty"`

	// Capability Durable signed grant capability issued from the approved grant scope.
	Capability  *map[string]interface{} `json:"capability,omitempty"`
	ConnectorId *string                 `json:"connector_id,omitempty"`

	// EscrowPolicy How credentials are managed for this grant.
	// - none: no TEE (credentials decrypted in host process)
	// - session: credentials sent to TEE per-execution (real-time only)
	// - escrowed: credentials escrowed inside TEE for async/scheduled use
	EscrowPolicy *ExecutionGrantEscrowPolicy `json:"escrow_policy,omitempty"`
	ExpiresAt    time.Time                   `json:"expires_at"`
	GrantId      string                      `json:"grant_id"`
	IntentId     string                      `json:"intent_id"`
	Status       ExecutionGrantStatus        `json:"status"`
}

type ExecutionGrantEscrowPolicy string

type ExecutionGrantStatus string

type ExecutionId = string

type ExecutionRunRequest struct {
	GrantId            string                  `json:"grant_id"`
	OverrideParameters *map[string]interface{} `json:"override_parameters,omitempty"`
}

type ExecutionRunResponse struct {
	AcceptedAt  *time.Time                 `json:"accepted_at,omitempty"`
	ExecutionId string                     `json:"execution_id"`
	Status      ExecutionRunResponseStatus `json:"status"`
}

type ExecutionRunResponseStatus string

type ExecutionStatus string

type Failure = FailureEnvelope

type FailureBoundary string

type FailureClass string

type FailureEnvelope struct {
	Error struct {
		// AuditId Reference into the audit log for full context. Stamped
		// by the audit recorder before the response is written.
		AuditId *string `json:"audit_id,omitempty"`

		// Boundary Layer that produced the failure. The closed set excludes `user`
		// which is reserved for post-MVP per-invocation approval flows.
		Boundary FailureBoundary `json:"boundary"`

		// Class Closed taxonomy of failure classes per ADR-0010. Adding a value
		// requires an ADR amendment.
		Class FailureClass `json:"class"`

		// Details Class-specific additional fields.
		Details *map[string]interface{} `json:"details,omitempty"`

		// Message Human-readable description; safe to show end users. Does
		// not contain credentials or sensitive payload.
		Message string `json:"message"`

		// Retriable Whether the failure is safe to retry.
		Retriable bool `json:"retriable"`
	} `json:"error"`
}

type FinishOAuth2BindingJSONRequestBody = OAuth2FinishRequest

type Forbidden = Error

type FundingSource struct {
	Currency         *string                 `json:"currency,omitempty"`
	FundingSourceId  string                  `json:"funding_source_id"`
	Metadata         *map[string]interface{} `json:"metadata,omitempty"`
	Name             string                  `json:"name"`
	SpendingControls *struct {
		AllowedCategories    *[]string `json:"allowed_categories,omitempty"`
		AllowedMerchants     *[]string `json:"allowed_merchants,omitempty"`
		MaxSingleTransaction *Money    `json:"max_single_transaction,omitempty"`
	} `json:"spending_controls,omitempty"`
	Status      FundingSourceStatus `json:"status"`
	Type        FundingSourceType   `json:"type"`
	WorkspaceId string              `json:"workspace_id"`
}

type FundingSourceListResponse struct {
	Items      *[]FundingSource `json:"items,omitempty"`
	Pagination *Pagination      `json:"pagination,omitempty"`
}

type FundingSourceStatus string

type FundingSourceType string

type GetAnalyticsSummaryParams struct {
	WorkspaceId string    `form:"workspace_id" json:"workspace_id"`
	From        time.Time `form:"from" json:"from"`
	To          time.Time `form:"to" json:"to"`
}

type GetHubActionInstallDecisionParams struct {
	// Fqn Action FQN, e.g. `github://ALRubinger/aileron-connector-google/actions/draft-email`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubActionParams struct {
	// Fqn Action FQN, e.g. `github://ALRubinger/aileron-connector-google/actions/draft-email`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubConnectorParams struct {
	// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubInstallDecisionParams struct {
	// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubSuiteInstallDecisionParams struct {
	// Fqn Suite FQN, e.g. `github://ALRubinger/aileron-connector-google/suite`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GetHubSuiteParams struct {
	// Fqn Suite FQN, e.g. `github://ALRubinger/aileron-connector-google/suite`.
	Fqn string `form:"fqn" json:"fqn"`
}

type GitAction struct {
	BaseBranch     *string            `json:"base_branch,omitempty"`
	Branch         *string            `json:"branch,omitempty"`
	ChecksRequired *[]string          `json:"checks_required,omitempty"`
	CommitShas     *[]string          `json:"commit_shas,omitempty"`
	FilesChanged   *[]string          `json:"files_changed,omitempty"`
	IssueAssignees *[]string          `json:"issue_assignees,omitempty"`
	IssueBody      *string            `json:"issue_body,omitempty"`
	IssueLabels    *[]string          `json:"issue_labels,omitempty"`
	IssueTitle     *string            `json:"issue_title,omitempty"`
	Labels         *[]string          `json:"labels,omitempty"`
	PrBody         *string            `json:"pr_body,omitempty"`
	PrTitle        *string            `json:"pr_title,omitempty"`
	Provider       *GitActionProvider `json:"provider,omitempty"`
	Repository     *string            `json:"repository,omitempty"`
	Reviewers      *[]string          `json:"reviewers,omitempty"`
}

type GitActionProvider string

type GrantId = string

type HealthResponse struct {
	Service   string               `json:"service"`
	Status    HealthResponseStatus `json:"status"`
	Timestamp time.Time            `json:"timestamp"`
	Version   string               `json:"version"`
}

type HealthResponseStatus string

type HubActionEntry struct {
	// Category Optional discovery grouping (e.g. `communication`, `productivity`).
	Category *string `json:"category,omitempty"`

	// ConnectorFqn FQN of the connector this action depends on. Used by the
	// Hub UI to filter actions by provider and to compute the
	// install-decision dependency closure.
	ConnectorFqn string `json:"connector_fqn"`

	// Description One-line description of what the action does.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO/actions/NAME`.
	Fqn string `json:"fqn"`

	// Intents Optional informational phrases describing what users would
	// ask their agent to do to trigger this action (e.g.
	// "draft email", "compose gmail").
	Intents *[]string `json:"intents,omitempty"`

	// PublisherGithub GitHub user or org name that owns the action's repo.
	PublisherGithub string `json:"publisher_github"`
}

type HubActionInstallDecision struct {
	Authorities []HubInstallAuthority `json:"authorities"`

	// ConnectorFqn FQN of the connector this action depends on.
	ConnectorFqn string                       `json:"connector_fqn"`
	Description  string                       `json:"description"`
	Fqn          string                       `json:"fqn"`
	Kind         HubActionInstallDecisionKind `json:"kind"`

	// LatestVersion Latest non-prerelease SemVer tag the action's source repo
	// has published, resolved via the connector version lister at
	// decision time. Empty when the source has no published
	// releases (the operator can still install via the CLI by
	// pinning `@<sha>` or `@<tag>`, but the webapp modal needs a
	// concrete version to call `/v1/actions/install`). The webapp
	// uses this directly as the install's `version` argument so
	// the install endpoint sees strict SemVer, not `latest`.
	LatestVersion   *string `json:"latest_version,omitempty"`
	PublisherGithub string  `json:"publisher_github"`
}

type HubActionInstallDecisionKind string

type HubActionList struct {
	Actions []HubActionEntry `json:"actions"`
}

type HubConnectorEntry struct {
	// Description One-line description of what the connector does.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO`.
	Fqn string `json:"fqn"`

	// KeyUrl Public URL of the publisher's ed25519 signing key.
	// Typically `https://raw.githubusercontent.com/OWNER/REPO/main/keys/publisher.pub`.
	KeyUrl string `json:"key_url"`

	// PublisherGithub GitHub user or org name that owns the connector repo.
	PublisherGithub string `json:"publisher_github"`

	// ReleasePattern Glob matching the release tags Aileron should consider.
	ReleasePattern string `json:"release_pattern"`
}

type HubConnectorList struct {
	Connectors []HubConnectorEntry `json:"connectors"`
}

type HubInstallAuthority struct {
	// Fingerprint SHA-256 fingerprint of the publisher's signing key, formatted
	// as `sha256:<base64-without-padding>` to match
	// `aileron keyring trust` output.
	Fingerprint string `json:"fingerprint"`

	// Fqn Connector FQN this authority refers to.
	Fqn                string   `json:"fqn"`
	PublisherFootprint []string `json:"publisher_footprint"`
	PublisherGithub    string   `json:"publisher_github"`
	RiskIndicators     []string `json:"risk_indicators"`

	// TrustState Trust state for the connector's FQN against the local keyring.
	// `already_trusted`: the keyring has the publisher's key for this
	// FQN. `unknown`: no keyring entry for this FQN.
	// `conflict`: keyring has a key for the same publisher under a
	// sibling FQN, and that key differs from the one declared by the
	// Hub entry — surface as a risk indicator.
	TrustState HubTrustState `json:"trust_state"`
}

type HubInstallDecision struct {
	Description string `json:"description"`

	// Fingerprint SHA-256 fingerprint of the publisher's signing key, formatted
	// as `sha256:<base64-without-padding>` to match
	// `aileron keyring trust` output.
	Fingerprint string `json:"fingerprint"`

	// Fqn Canonical FQN.
	Fqn string `json:"fqn"`

	// PublisherFootprint FQNs of the publisher's other connectors listed in the Hub
	// (informational context for the user's decision).
	PublisherFootprint []string `json:"publisher_footprint"`
	PublisherGithub    string   `json:"publisher_github"`

	// RiskIndicators Human-readable risk strings derived from the trust state and
	// keyring contents, e.g. "First connector by this publisher
	// you've installed" (informational, yellow) or "Key fingerprint
	// differs from one you trust for a sibling repo" (conflict,
	// red).
	RiskIndicators []string `json:"risk_indicators"`

	// TrustState Trust state for the connector's FQN against the local keyring.
	// `already_trusted`: the keyring has the publisher's key for this
	// FQN. `unknown`: no keyring entry for this FQN.
	// `conflict`: keyring has a key for the same publisher under a
	// sibling FQN, and that key differs from the one declared by the
	// Hub entry — surface as a risk indicator.
	TrustState HubTrustState `json:"trust_state"`
}

type HubSuiteEntry struct {
	// Category Optional discovery grouping (e.g. `communication`, `productivity`).
	Category *string `json:"category,omitempty"`

	// ConnectorsRequired FQNs of the connectors the suite's actions transitively
	// require. Informational metadata for discovery; not part of
	// any trust grant.
	ConnectorsRequired *[]string `json:"connectors_required,omitempty"`

	// Description One-line description of what the suite bundles.
	Description string `json:"description"`

	// Fqn Canonical FQN, e.g. `github://OWNER/REPO/suite`.
	Fqn string `json:"fqn"`

	// MemberActions FQNs of the actions bundled in this suite.
	MemberActions []string `json:"member_actions"`

	// PublisherGithub GitHub user or org name that owns the suite's repo.
	PublisherGithub string `json:"publisher_github"`
}

type HubSuiteInstallDecision struct {
	Authorities []HubInstallAuthority       `json:"authorities"`
	Description string                      `json:"description"`
	Fqn         string                      `json:"fqn"`
	Kind        HubSuiteInstallDecisionKind `json:"kind"`

	// LatestVersion Latest non-prerelease SemVer tag from the suite's source
	// repo, resolved at decision time. The webapp passes this as
	// the `version` argument to each per-member install call —
	// every action in a Hub-published suite ships from the same
	// repo, so one tag covers them all. Empty when the source has
	// no published releases.
	LatestVersion   *string  `json:"latest_version,omitempty"`
	MemberActions   []string `json:"member_actions"`
	PublisherGithub string   `json:"publisher_github"`
}

type HubSuiteInstallDecisionKind string

type HubSuiteList struct {
	Suites []HubSuiteEntry `json:"suites"`
}

type HubTrustState string

type InitOAuth2BindingJSONRequestBody = OAuth2InitRequest

type InitiateAttestationJSONRequestBody = TeeAttestationRequest

type InstallActionJSONRequestBody = InstallActionRequest

type InstallActionRequest struct {
	// AutoInstallConnectors When true, the server transparently installs any
	// `[[requires.connectors]]` whose pinned hash is not already in
	// the local content-addressed store, using the connector's
	// declared version and hash from the action manifest. Each
	// implicit install runs the full connector pipeline (resolve →
	// fetch → verify signature → match `expected_hash`) and any
	// failure aborts the action install with the connector's
	// structured error.
	//
	// When false (default), missing connector deps abort the
	// install with a `422` carrying `error.code = connectors_missing`
	// and `error.details[]` listing each missing connector's
	// `name`, `version`, and `hash` so the CLI can prompt the user
	// for confirmation before retrying with the flag set.
	AutoInstallConnectors *bool `json:"auto_install_connectors,omitempty"`

	// ConfirmedFingerprints Publisher-key fingerprints the operator confirmed at the
	// webapp install modal — one entry per connector authority in
	// the action's dependency closure (suite installs supply the
	// full set on every per-action install; the CLI omits this
	// field entirely since it pre-trusts via `aileron keyring
	// trust`). Mirrors `confirmed_fingerprint` on
	// `InstallConnectorRequest` (#487 / #628) but applies it
	// across every authority the install needs trust for —
	// without this the webapp can't reach the action install
	// endpoint without first running N standalone connector
	// installs to write trust as a side effect.
	//
	// For each entry the daemon looks up `fqn` in the Hub,
	// fetches the publisher's current key, verifies its
	// fingerprint matches the supplied value (anti-tampering
	// check between what the operator saw and what the install
	// endpoint uses), then writes the key to the keyring under
	// the FQN before running the install pipeline. Trust
	// persists even if the install later fails (matches #487 Q4
	// resolution for the singular case). Entries whose FQN is
	// already trusted under the same key short-circuit; mismatch
	// aborts with `fingerprint_mismatch`.
	ConfirmedFingerprints *[]ConfirmedFingerprint `json:"confirmed_fingerprints,omitempty"`

	// Force When true, overwrite an existing action with the same name.
	// When false (default), refuse with `409 Conflict` if an action
	// of the same name already exists.
	Force *bool `json:"force,omitempty"`

	// Fqn Fully-qualified URI of the action template per ADR-0002 / ADR-0003
	// (e.g. `github://ALRubinger/aileron-connector-github/actions/list-recent-prs`).
	// Subpath references are supported for actions published alongside
	// their connector.
	Fqn string `json:"fqn"`

	// Version Strict SemVer (e.g. `0.1.0`).
	Version string `json:"version"`
}

type InstallConnectorJSONRequestBody = InstallConnectorRequest

type InstallConnectorRequest struct {
	// ConfirmedFingerprint Optional publisher-key fingerprint the operator confirmed at
	// the install prompt (terminal y/N/d or webapp install modal),
	// per ADR-0013 / #487. Format matches `aileron keyring trust`
	// output: `sha256:<22 base64-no-padding chars>`.
	//
	// When supplied, the daemon looks up the FQN in the Hub, fetches
	// the publisher's current key, verifies its fingerprint matches
	// this value (anti-tampering — the client and daemon must agree
	// on what the operator saw), then writes the key to the keyring
	// at the FQN authority before running the install pipeline.
	// Trust persists even if the install later fails, matching the
	// #487 Q4 resolution.
	//
	// When omitted, the install requires the publisher key to be
	// pre-established in the keyring (typical for non-TTY installs
	// and connectors not listed in the Hub). Mismatch returns
	// `fingerprint_mismatch`; an FQN with no Hub entry returns
	// `not_found`.
	ConfirmedFingerprint *string `json:"confirmed_fingerprint,omitempty"`

	// ExpectedHash Optional canonical hash (`sha256:<hex>`) the install must match.
	// When supplied (typical when the install is driven by an action
	// file's `[[requires.connectors]] hash`), a computed hash that
	// does not match aborts the install with `hash_mismatch` and
	// nothing is written to the store. When omitted (typical for
	// first install), the pipeline records whatever hash the bytes
	// produce.
	ExpectedHash *string `json:"expected_hash,omitempty"`

	// Fqn Fully-qualified URI per ADR-0002 (e.g. `github://aileron/slack`).
	// Scheme must be one of `github`, `gitlab`, `hub` in v1.
	Fqn string `json:"fqn"`

	// Version Strict SemVer (e.g. `1.2.0`). No ranges, no `latest`.
	Version string `json:"version"`
}

type InstalledAction struct {
	// AlreadyInstalled True when the action was already present and the install was a no-op
	// (the file on disk matched the bytes that would have been written).
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// Fqn FQN the action was installed from.
	Fqn string `json:"fqn"`

	// Name Bare local handle of the installed action (the action manifest's `name`).
	Name string `json:"name"`

	// NewlyStaleBindings Existing bindings whose status flipped to `stale` because
	// this install upgraded a connector whose manifest now demands
	// an OAuth scope the recorded grant lacks (`scope_drift`), or
	// because the binding predates scope tracking and needs a
	// one-time reauthorize (`no_grant_record`). The CLI uses this
	// list to prompt the operator to drop into
	// `aileron binding reauthorize` inline (#741); without this
	// signal the install reports success and the next action
	// invocation that needs the new scope fails with a 403.
	// Aggregated across implicit connector installs the action
	// triggers (`auto_install_connectors=true`).
	NewlyStaleBindings *[]StaleBinding `json:"newly_stale_bindings,omitempty"`

	// Path Absolute path of the installed action file on disk.
	Path string `json:"path"`

	// Source Provenance URI recorded on the installed manifest's `source` field.
	Source string `json:"source"`

	// UnboundCapabilities Credential capabilities the action's connectors declare that
	// do not yet have a binding in the user's vault. The CLI uses
	// this list to prompt the user to drop into `aileron binding
	// setup` immediately after install — the user stays in the CLI
	// and avoids hitting `binding_required` later.
	UnboundCapabilities *[]UnboundCapability `json:"unbound_capabilities,omitempty"`
	Version             string               `json:"version"`
}

type InstalledActionRef struct {
	// Hash `sha256:<hex>` of the installed manifest's bytes on disk.
	// Differs from the previewed `hash` whenever this object is
	// populated.
	Hash string `json:"hash"`

	// Path Absolute path of the installed action file on disk.
	Path string `json:"path"`

	// Source Provenance URI recorded on the installed manifest's `source` field.
	Source string `json:"source"`

	// Version Version field from the installed manifest's frontmatter.
	Version string `json:"version"`
}

type InstalledConnector struct {
	// AlreadyInstalled True when the install was a no-op because an entry with the
	// matching hash already existed (offline reinstall path per
	// ADR-0004).
	AlreadyInstalled *bool `json:"already_installed,omitempty"`

	// EntryDir Absolute path of the store entry on disk.
	EntryDir string `json:"entry_dir"`
	Fqn      string `json:"fqn"`

	// Hash Canonical `sha256:<hex>` of the installed bytes.
	Hash string `json:"hash"`

	// NewlyStaleBindings Bindings whose status flipped to `stale` as a result of this
	// install — either because the new manifest demands an OAuth
	// scope the recorded grant lacks (`scope_drift`) or because
	// the binding predates scope tracking (`no_grant_record`) and
	// needs a one-time reauthorize so the daemon can record what
	// was granted. Emitted by the scope-drift hook (#726/#729).
	// The CLI uses this list to prompt the operator to drop into
	// `aileron binding reauthorize` inline (#741); without this
	// signal the install reports success and the next action
	// invocation that needs the new scope fails with a 403 from
	// the upstream provider.
	NewlyStaleBindings *[]StaleBinding `json:"newly_stale_bindings,omitempty"`
	Version            string          `json:"version"`
}

type IntentContext struct {
	Environment      *string   `json:"environment,omitempty"`
	IpAddress        *string   `json:"ip_address,omitempty"`
	RiskHints        *[]string `json:"risk_hints,omitempty"`
	SourcePlatform   *string   `json:"source_platform,omitempty"`
	SourceSessionId  *string   `json:"source_session_id,omitempty"`
	SourceTraceId    *string   `json:"source_trace_id,omitempty"`
	TemporaryGrantId *string   `json:"temporary_grant_id,omitempty"`
	UserPresent      *bool     `json:"user_present,omitempty"`
}

type IntentEnvelope struct {
	Action      ActionIntent    `json:"action"`
	Agent       ActorRef        `json:"agent"`
	Context     *IntentContext  `json:"context,omitempty"`
	CreatedAt   time.Time       `json:"created_at"`
	Decision    Decision        `json:"decision"`
	Evidence    *[]EvidenceItem `json:"evidence,omitempty"`
	IntentId    string          `json:"intent_id"`
	Status      IntentStatus    `json:"status"`
	UpdatedAt   time.Time       `json:"updated_at"`
	WorkspaceId string          `json:"workspace_id"`
}

type IntentId = string

type IntentListResponse struct {
	Items      *[]IntentEnvelope `json:"items,omitempty"`
	Pagination *Pagination       `json:"pagination,omitempty"`
}

type IntentStatus string

type InvalidParamFormatError struct {
	ParamName string
	Err       error
}

type Jwk struct {
	Alg *string `json:"alg,omitempty"`
	Crv *string `json:"crv,omitempty"`
	E   *string `json:"e,omitempty"`
	Kid string  `json:"kid"`
	Kty string  `json:"kty"`
	N   *string `json:"n,omitempty"`
	Use *string `json:"use,omitempty"`
	X   *string `json:"x,omitempty"`
	Y   *string `json:"y,omitempty"`
}

type Jwks struct {
	Keys []Jwk `json:"keys"`
}

type LineItem struct {
	Description string  `json:"description"`
	Quantity    int     `json:"quantity"`
	Sku         *string `json:"sku,omitempty"`
	UnitAmount  Money   `json:"unit_amount"`
}

type ListApprovalsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
	Assignee    *string    `form:"assignee,omitempty" json:"assignee,omitempty"`
}

type ListAuditParams struct {
	// Since Lower-bound (inclusive) on event timestamp; RFC 3339.
	Since *time.Time `form:"since,omitempty" json:"since,omitempty"`

	// AuditId Match events with this exact `audit_id`.
	AuditId *string `form:"audit_id,omitempty" json:"audit_id,omitempty"`

	// ConnectorFqn Match events that reference this connector FQN.
	ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`

	// Class Match failure events with this `class` (e.g. `binding_required`).
	Class *string `form:"class,omitempty" json:"class,omitempty"`

	// Limit Maximum events to return; newest first.
	Limit *int `form:"limit,omitempty" json:"limit,omitempty"`
}

type ListBindingsParams struct {
	// ConnectorFqn Restrict to bindings created for the given connector FQN.
	ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`

	// Kind Restrict to bindings of the given credential kind (e.g. `api_key`).
	Kind *string `form:"kind,omitempty" json:"kind,omitempty"`
}

type ListConnectorsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type ListCredentialsParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type ListFundingSourcesParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type ListHubActionsParams struct {
	// Q Optional keyword filter applied to FQN and description.
	Q *string `form:"q,omitempty" json:"q,omitempty"`
}

type ListHubConnectorsParams struct {
	// Q Optional keyword filter applied to FQN and description.
	Q *string `form:"q,omitempty" json:"q,omitempty"`
}

type ListHubSuitesParams struct {
	// Q Optional keyword filter applied to FQN and description.
	Q *string `form:"q,omitempty" json:"q,omitempty"`
}

type ListIntentsParams struct {
	PageSize    *PageSize     `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken    `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId *string       `form:"workspace_id,omitempty" json:"workspace_id,omitempty"`
	Status      *IntentStatus `form:"status,omitempty" json:"status,omitempty"`
	ActionType  *string       `form:"action_type,omitempty" json:"action_type,omitempty"`
	AgentId     *string       `form:"agent_id,omitempty" json:"agent_id,omitempty"`
}

type ListPoliciesParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type ListSessionsParams struct {
	ActiveOnly *bool   `form:"active_only,omitempty" json:"active_only,omitempty"`
	Agent      *string `form:"agent,omitempty" json:"agent,omitempty"`

	// Since RFC3339 timestamp; only sessions with StartedAt >= since are returned.
	Since *time.Time `form:"since,omitempty" json:"since,omitempty"`
	Limit *int       `form:"limit,omitempty" json:"limit,omitempty"`
}

type ListTracesParams struct {
	PageSize    *PageSize  `form:"page_size,omitempty" json:"page_size,omitempty"`
	PageToken   *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
	WorkspaceId string     `form:"workspace_id" json:"workspace_id"`
}

type LocalVaultStatusResponse struct {
	// Locked Convenience boolean — true when state is `missing` or `locked`,
	// false when `unlocked`. The webapp uses this to drive the modal.
	Locked bool `json:"locked"`

	// State Lifecycle state of the local vault file.
	//   - `missing`  — no vault file at the canonical path
	//   - `locked`   — vault file present, awaiting passphrase
	//   - `unlocked` — passphrase accepted; the daemon holds the KEK
	State LocalVaultStatusResponseState `json:"state"`
}

type LocalVaultStatusResponseState string

type LocalVaultUnlockRequest struct {
	// Passphrase The vault passphrase. Sent in plaintext over the loopback
	// connection — the daemon derives the KEK locally via Argon2id.
	// Distinct from `UnlockVaultRequest`, which carries a
	// client-derived KEK for the cloud-tier multi-tenant flow.
	Passphrase string `json:"passphrase"`
}

type MessagesRequest struct {
	MaxTokens int                `json:"max_tokens"`
	Messages  []AnthropicMessage `json:"messages"`
	Model     string             `json:"model"`
	Stream    *bool              `json:"stream,omitempty"`

	// System System prompt; string or array of content blocks (Anthropic
	// shape).
	System interface{} `json:"system,omitempty"`

	// ToolChoice Passed through to the upstream provider unchanged.
	ToolChoice interface{} `json:"tool_choice,omitempty"`

	// Tools Agent-declared tools. Aileron preserves these unchanged and
	// appends installed actions to the array before forwarding
	// upstream (Anthropic shape).
	Tools                *[]AnthropicTool       `json:"tools,omitempty"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type MessagesResponse struct {
	Content              []map[string]interface{} `json:"content"`
	Id                   string                   `json:"id"`
	Model                string                   `json:"model"`
	Role                 MessagesResponseRole     `json:"role"`
	StopReason           *string                  `json:"stop_reason,omitempty"`
	StopSequence         *string                  `json:"stop_sequence,omitempty"`
	Type                 MessagesResponseType     `json:"type"`
	Usage                *map[string]interface{}  `json:"usage,omitempty"`
	AdditionalProperties map[string]interface{}   `json:"-"`
}

type MessagesResponseRole string

type MessagesResponseType string

type MiddlewareFunc func(http.Handler) http.Handler

type ModifyApprovalRequest struct {
	Comment       *string                `json:"comment,omitempty"`
	Modifications map[string]interface{} `json:"modifications"`
}

type ModifyRequestJSONRequestBody = ModifyApprovalRequest

type Money struct {
	// Amount Amount in minor units
	Amount   int    `json:"amount"`
	Currency string `json:"currency"`
}

type NotFound = Error

type OAuth2FinishRequest struct {
	// Code Authorization code captured from the OAuth callback.
	Code string `json:"code"`

	// SessionId The session id returned by oauth2/init.
	SessionId string `json:"session_id"`

	// State State token captured from the OAuth callback. Server
	// compares against the session's stored state and rejects
	// on mismatch (CSRF protection).
	State string `json:"state"`
}

type OAuth2InitRequest struct {
	// Account Optional human-readable account label.
	Account *string `json:"account,omitempty"`

	// Caller Selects who serves the OAuth callback. See the endpoint
	// description for the full contract.
	//
	// - `cli` (default) — daemon picks an ephemeral loopback port;
	//   the calling CLI binds it and posts to `oauth2/finish`.
	//   Unchanged from the pre-#743 behavior.
	// - `daemon` — the daemon's own listen address is the callback
	//   target. The provider's redirect lands at
	//   `/v1/bindings/setup/oauth2/callback`, the daemon completes
	//   the flow internally, and the user's browser is then
	//   redirected to `return_to`. Requires `return_to`.
	Caller *OAuth2InitRequestCaller `json:"caller,omitempty"`

	// ConnectorFqn Fully-qualified connector name. Connector must be installed
	// and must declare `[capabilities.credential] kind = "oauth2"`.
	ConnectorFqn string `json:"connector_fqn"`

	// Identity User-chosen handle for the new binding (e.g. `work`,
	// `personal`). Combined with the connector's declared kind
	// and service to form the full binding name.
	Identity string `json:"identity"`

	// Purpose Distinguishes a first-time setup (default) from a scope-drift
	// reauthorize. `reauthorize` requires the named binding to
	// already exist; finish then upserts that binding (preserving
	// CreatedAt / Account) rather than creating a new one, and the
	// authorize URL is built with `prompt=consent` so the provider
	// re-prompts for the upgraded scope set instead of silently
	// reissuing from prior consent.
	Purpose *OAuth2InitRequestPurpose `json:"purpose,omitempty"`

	// ReturnTo URL the daemon redirects the browser to after completing a
	// `caller=daemon` flow. Required when `caller=daemon`; ignored
	// when `caller=cli`. Validated as loopback-only (`127.0.0.1`,
	// `localhost`, or `[::1]`) under http(s) — same boundary as
	// ADR-0002's loopback constraint on the redirect URI itself.
	ReturnTo *string `json:"return_to,omitempty"`

	// Service Optional service override. Defaults to the service segment
	// derived from the connector FQN's repo segment.
	Service *string `json:"service,omitempty"`
}

type OAuth2InitRequestCaller string

type OAuth2InitRequestPurpose string

type OAuth2InitResponse struct {
	// AuthorizeUrl URL the caller should direct the user's browser to. Already
	// includes client_id, redirect_uri, response_type=code,
	// scope, state, code_challenge, and code_challenge_method=S256.
	AuthorizeUrl string `json:"authorize_url"`

	// RedirectUri Loopback URL the caller must serve to capture the OAuth
	// callback (e.g. `http://localhost:54321/callback`). The
	// server has already chosen a free port and embedded the
	// URI in `authorize_url`.
	RedirectUri string `json:"redirect_uri"`

	// SessionId Opaque token the caller passes back to oauth2/finish.
	// Server-side state (PKCE verifier, expected state value)
	// is keyed by this id; TTL is 10 minutes.
	SessionId string `json:"session_id"`
}

type Oauth2BindingCallbackParams struct {
	// Code Authorization code from the OAuth provider.
	Code string `form:"code" json:"code"`

	// State State token from the OAuth provider's redirect. Daemon
	// compares against the session it indexed under this value
	// on init; mismatch (or no session) returns 404.
	State string `form:"state" json:"state"`

	// Error OAuth-provider-supplied error code (e.g. `access_denied`).
	// When present, the daemon clears the session, skips the
	// token exchange, and surfaces the failure on the rendered
	// page. Mutually exclusive with `code` per OAuth2 §4.1.2.1.
	Error *string `form:"error,omitempty" json:"error,omitempty"`

	// ErrorDescription OAuth-provider-supplied human-readable error detail. Used
	// alongside `error` in the failure page.
	ErrorDescription *string `form:"error_description,omitempty" json:"error_description,omitempty"`
}

type PageSize = int

type PageToken = string

type Pagination struct {
	NextPageToken *string `json:"next_page_token,omitempty"`
}

type PassphraseSaltResponse struct {
	// HasPassphrase Whether the user has set a vault passphrase
	HasPassphrase bool `json:"has_passphrase"`

	// Salt Base64-encoded Argon2id salt (omitted when no passphrase is set)
	Salt *[]byte `json:"salt,omitempty"`
}

type PassphraseVerificationResponse struct {
	// HasPassphrase Whether the user has set a vault passphrase
	HasPassphrase bool `json:"has_passphrase"`

	// KekVerification Encrypted verification blob for client-side decryption (omitted when no passphrase is set)
	KekVerification *[]byte `json:"kek_verification,omitempty"`
}

type PatchActionJSONRequestBody = ActionPatchRequest

type PaymentAction struct {
	Amount                      *Money                                    `json:"amount,omitempty"`
	Beneficiary                 *PaymentBeneficiary                       `json:"beneficiary,omitempty"`
	BudgetCode                  *string                                   `json:"budget_code,omitempty"`
	ContractTerm                *string                                   `json:"contract_term,omitempty"`
	FundingSourceId             *string                                   `json:"funding_source_id,omitempty"`
	LineItems                   *[]LineItem                               `json:"line_items,omitempty"`
	MerchantCategory            *string                                   `json:"merchant_category,omitempty"`
	MerchantReference           *string                                   `json:"merchant_reference,omitempty"`
	PaymentInstrumentPreference *PaymentActionPaymentInstrumentPreference `json:"payment_instrument_preference,omitempty"`
	RecurringInterval           *PaymentActionRecurringInterval           `json:"recurring_interval,omitempty"`
	Renewal                     *bool                                     `json:"renewal,omitempty"`
	VendorId                    *string                                   `json:"vendor_id,omitempty"`
	VendorName                  *string                                   `json:"vendor_name,omitempty"`
}

type PaymentActionPaymentInstrumentPreference string

type PaymentActionRecurringInterval string

type PaymentBeneficiary struct {
	Department *string              `json:"department,omitempty"`
	Email      *openapi_types.Email `json:"email,omitempty"`
	Name       *string              `json:"name,omitempty"`
}

type PendingActionApproval struct {
	// ActionName For `kind=action`, the manifest name of the gated action
	// (e.g. "send-email"). For non-action kinds, a short label
	// describing what's being approved ("send_message",
	// "draft_reply", "http_request").
	ActionName string `json:"action_name"`

	// Args Kind-specific arguments. For `action`, the call-time
	// arguments the agent passed in. For comms / HTTP kinds,
	// see the `kind` enum description above.
	Args *map[string]interface{} `json:"args,omitempty"`

	// ConnectorFqn Connector FQN the action's first execute step targets, surfaced
	// so the user can see which integration would actually run.
	// Empty for non-action kinds.
	ConnectorFqn *string `json:"connector_fqn,omitempty"`

	// Id Opaque server-minted identifier for this request.
	Id string `json:"id"`

	// InputFields Rendered projection of the gated action's call-time args
	// through the action manifest's `[[inputs]]` declarations
	// (per the ADR-0003 amendment introducing per-input `label`
	// and `multiline` keys). Surfaced on the approval card so
	// the user sees labeled rows ("To: alr@…", "Subject: …",
	// multiline "Body: …") instead of the raw JSON args dump.
	//
	// Fields are ordered by `[[inputs]]` declaration order
	// (matching the convention `ActionApprovalPreviewPolicy`
	// uses for previews). An input's `label` from the manifest
	// becomes the row's user-facing key; when no label is
	// declared the input's bare name is used. Required inputs
	// the agent did not supply surface as `missing=true` so the
	// UI can render "n/a". Args the agent supplied that aren't
	// declared on the manifest are appended at the end, sorted
	// by key, so the user always sees everything the agent
	// passed.
	//
	// Optional. Omitted when the gated action has no resolvable
	// manifest or its manifest declares no `[[inputs]]` block;
	// in that case the webapp falls back to the historic raw-
	// JSON accordion. The field shape mirrors
	// `ActionApprovalPreviewField` so the webapp can route
	// preview fields and input fields through the same renderer.
	InputFields *[]ActionApprovalPreviewField `json:"input_fields,omitempty"`

	// Kind Discriminates the user-facing card layout the webapp
	// should render.
	//
	//   - `action` — historic action-manifest gate (default).
	//   - `comms_send` — `aileron-mcp`'s `send_message` tool;
	//     args carry `service`, `channel`, `body`.
	//   - `comms_draft` — `aileron-mcp`'s `draft_reply` tool;
	//     args carry `service`, `channel`, `original_author`,
	//     `original_body`, `draft_body`, `reply_to`. The
	//     webapp surfaces `draft_body` as an editable field
	//     and ships the edited bytes back via
	//     `ActionApprovalDecision.edited_payload.body`.
	//   - `http_request` — `aileron-mcp`'s `http_request` tool;
	//     args carry `method`, `url`, `body`, `secret_name`
	//     (the matched binding name; the value is never
	//     surfaced to the webapp).
	Kind PendingActionApprovalKind `json:"kind"`

	// Preview Rendered output of the action manifest's `[approval.preview]`
	// directive (ADR-0016). Surfaced on the approval prompt so the user
	// sees an authoritative summary of what they are approving rather than
	// agent-supplied hints. Two terminal shapes:
	//
	//   - On success, `fields` carries the rendered entries in the
	//     manifest's declared order. A field whose render path did not
	//     resolve in the preview response carries `missing=true` so the UI
	//     renders "n/a" rather than silently omitting the row.
	//   - On wholesale failure (HTTP non-2xx, timeout, sandbox denial,
	//     WASM trap), `unavailable` carries a short user-facing reason
	//     (e.g. "preview unavailable: timeout") and `fields` is omitted.
	//     The approval still proceeds; the user can decline based on the
	//     raw inputs plus the failure note.
	Preview *ActionApprovalPreview `json:"preview,omitempty"`

	// RequestedAt When the queue minted this request.
	RequestedAt time.Time `json:"requested_at"`

	// SessionId Launch session that initiated the request, when one is in
	// scope; empty for daemon-direct callers.
	SessionId *string `json:"session_id,omitempty"`
}

type PendingActionApprovalKind string

type Policy struct {
	CreatedAt   *time.Time   `json:"created_at,omitempty"`
	Description *string      `json:"description,omitempty"`
	Environment *string      `json:"environment,omitempty"`
	Name        string       `json:"name"`
	PolicyId    string       `json:"policy_id"`
	Rules       []PolicyRule `json:"rules"`
	Status      PolicyStatus `json:"status"`
	UpdatedAt   *time.Time   `json:"updated_at,omitempty"`
	Version     int          `json:"version"`
	WorkspaceId string       `json:"workspace_id"`
}

type PolicyCondition struct {
	Field    *string                  `json:"field,omitempty"`
	Operator *PolicyConditionOperator `json:"operator,omitempty"`
	Value    *PolicyCondition_Value   `json:"value,omitempty"`
}

type PolicyConditionOperator string

type PolicyConditionValue0 = string

type PolicyConditionValue1 = float32

type PolicyConditionValue2 = int

type PolicyConditionValue3 = bool

type PolicyConditionValue4 = []interface{}

type PolicyCondition_Value struct {
	// contains filtered or unexported fields
}