api

type API struct {
	// contains filtered or unexported fields
}

type AccessTokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in"` // In seconds
	RefreshToken string `json:"refresh_token,omitempty"`
	Scope        string `json:"scope,omitempty"`
}

type AdminReviewInput struct {
	Data struct {
		Attributes struct {
			FinalPrivacyScore  int            `json:"final_privacy_score"`
			AssignedCatalogues models.JSONMap `json:"assigned_catalogues"`
			ReviewNotes        string         `json:"review_notes"`
			Feedback           string         `json:"feedback"` // submitter-facing feedback (for reject/changes_requested)
			// MCP server submissions only: the reviewer's deployment target and
			// whether to publish the created server right away.
			GatewayTags *[]string `json:"gateway_tags"`
			Publish     bool      `json:"publish"`
		} `json:"attributes"`
	} `json:"data"`
}

type AgentConfigRequest struct {
	Name        string                 `json:"name" binding:"required"`
	Description string                 `json:"description"`
	PluginID    uint                   `json:"plugin_id" binding:"required"`
	AppID       uint                   `json:"app_id" binding:"required"`
	Config      map[string]interface{} `json:"config"`
	GroupIDs    []uint                 `json:"group_ids"`
	// IsActive is the live switch. Omitted = active on create (the historical
	// default), unchanged on update. Setting it needs agents:publish.
	IsActive  *bool  `json:"is_active"`
	Namespace string `json:"namespace"`
}

type AgentMessageRequest struct {
	Message   string                   `json:"message" binding:"required"`
	History   []map[string]interface{} `json:"history"`
	SessionID string                   `json:"session_id"`
}

type AppDetailResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name            string     `json:"name"`
		Description     string     `json:"description"`
		UserID          uint       `json:"user_id"`
		CredentialID    uint       `json:"credential_id"`
		DatasourceIDs   []uint     `json:"datasource_ids"`
		LLMIDs          []uint     `json:"llm_ids"`
		ToolIDs         []uint     `json:"tool_ids"`
		MonthlyBudget   *float64   `json:"monthly_budget"`
		BudgetStartDate *time.Time `json:"budget_start_date"`
		TeamID          *uint      `json:"team_id"`
		// BudgetSource tells the portal where the budget came from: "team"
		// when the App's team hands out budgets from a pool, else empty.
		BudgetSource string           `json:"budget_source,omitempty"`
		IsOrphaned   bool             `json:"is_orphaned"`
		IsActive     bool             `json:"is_active"`
		Credential   CredentialDetail `json:"credential"`
		// MCPServerIDs / MCPServers mirror the list endpoint (serializeApp):
		// the portal app page mounts its "MCP access" section from them.
		MCPServerIDs []uint               `json:"mcp_server_ids"`
		MCPServers   []AppMCPServerOutput `json:"mcp_servers,omitempty"`
		// Model Routers the app is granted (Enterprise); the portal app page
		// shows their unified-ingress model strings.
		ModelRouterIDs []uint                 `json:"model_router_ids"`
		ModelRouters   []AppModelRouterOutput `json:"model_routers,omitempty"`
		// Semantic Routers the app is granted (Enterprise).
		SemanticRouterIDs []uint                    `json:"semantic_router_ids"`
		SemanticRouters   []AppSemanticRouterOutput `json:"semantic_routers,omitempty"`
	} `json:"attributes"`
}

type AppInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name            string                 `json:"name"`
			Description     string                 `json:"description"`
			UserID          uint                   `json:"user_id"`
			DatasourceIDs   []uint                 `json:"datasource_ids"`
			LLMIDs          []uint                 `json:"llm_ids"`
			ToolIDs         []uint                 `json:"tool_ids"`
			MonthlyBudget   *float64               `json:"monthly_budget"`
			BudgetStartDate *time.Time             `json:"budget_start_date"`
			Namespace       string                 `json:"namespace,omitempty"`
			Metadata        map[string]interface{} `json:"metadata,omitempty"`
			PluginResources []PluginResourceInput  `json:"plugin_resources,omitempty"`
			// MCPServerIDs binds Tyk-managed MCP servers (Enterprise). Omitted
			// leaves the bindings unchanged on update; an empty list clears them.
			MCPServerIDs *[]uint `json:"mcp_server_ids,omitempty"`
			// ModelRouterIDs grants Model Routers (Enterprise). Omitted leaves
			// the grants unchanged on update; an empty list clears them.
			ModelRouterIDs *[]uint `json:"model_router_ids,omitempty"`
			// SemanticRouterIDs grants Semantic Routers (Enterprise), with
			// the same omitted/empty rules.
			SemanticRouterIDs *[]uint `json:"semantic_router_ids,omitempty"`
			// IsActive is the live switch. Omitted = unchanged on update, live
			// on create (unless the caller lacks apps:publish, in which case
			// the app is created inactive). Setting it needs apps:publish.
			IsActive *bool `json:"is_active,omitempty"`
			// TeamID attributes the App to a team (Enterprise team budgets).
			// Omitted = the owner's budget team on create, unchanged on update.
			TeamID *uint `json:"team_id,omitempty"`
		} `json:"attributes"`
	} `json:"data"`
}

type AppListResponse struct {
	Data []AppResponse `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
}

type AppMCPServerOutput struct {
	ID           uint   `json:"id"`
	Name         string `json:"name"`
	Slug         string `json:"slug"`
	ConnectionID *uint  `json:"connection_id"`
	AuthMode     string `json:"auth_mode"`
	EndpointURL  string `json:"endpoint_url"`
	Brokerable   bool   `json:"brokerable"`
}

type AppModelRouterOutput struct {
	ID   uint   `json:"id"`
	Name string `json:"name"`
	Slug string `json:"slug"`
}

type AppResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name         string `json:"name"`
		Description  string `json:"description"`
		UserID       uint   `json:"user_id"`
		CredentialID uint   `json:"credential_id"`
		// CredentialActive is the state of the app's credential, null when the
		// app has none, so the apps list can show it without a credentials fetch.
		CredentialActive *bool                  `json:"credential_active"`
		DatasourceIDs    []uint                 `json:"datasource_ids"`
		LLMIDs           []uint                 `json:"llm_ids"`
		ToolIDs          []uint                 `json:"tool_ids"`
		MonthlyBudget    *float64               `json:"monthly_budget"`
		BudgetStartDate  *time.Time             `json:"budget_start_date"`
		TeamID           *uint                  `json:"team_id"`
		IsActive         bool                   `json:"is_active"` // live switch (apps:publish)
		IsOrphaned       bool                   `json:"is_orphaned"`
		Metadata         map[string]interface{} `json:"metadata,omitempty"`
		Namespace        string                 `json:"namespace,omitempty"`
		PluginResources  []PluginResourceOutput `json:"plugin_resources,omitempty"`
		// Tyk-managed MCP servers bound to the app (Enterprise).
		MCPServerIDs []uint               `json:"mcp_server_ids"`
		MCPServers   []AppMCPServerOutput `json:"mcp_servers,omitempty"`
		// Model Routers the app is granted (Enterprise).
		ModelRouterIDs []uint                 `json:"model_router_ids"`
		ModelRouters   []AppModelRouterOutput `json:"model_routers,omitempty"`
		// Semantic Routers the app is granted (Enterprise).
		SemanticRouterIDs []uint                    `json:"semantic_router_ids"`
		SemanticRouters   []AppSemanticRouterOutput `json:"semantic_routers,omitempty"`
	} `json:"attributes"`
}

type AppSemanticRouterOutput struct {
	ID     uint     `json:"id"`
	Name   string   `json:"name"`
	Slug   string   `json:"slug"`
	Models []string `json:"models"`
}

type AppUsageSummary struct {
	AppID           string     `json:"app_id"`
	CurrentSpend    float64    `json:"current_spend"`
	MonthlyBudget   *float64   `json:"monthly_budget"`
	Percentage      *float64   `json:"percentage"`
	BudgetStartDate time.Time  `json:"budget_start_date"`
	LastAccessAt    *time.Time `json:"last_access_at"`
	Requests30d     int64      `json:"requests_30d"`
}

type AppUsageSummaryResponse struct {
	Data map[string]AppUsageSummary `json:"data"`
	// SpendTracked is false in Community Edition, where spending is not
	// recorded and current_spend is always zero.
	SpendTracked bool `json:"spend_tracked"`
}

type AppWithTools struct {
	ID          uint     `json:"id"`
	Name        string   `json:"name"`
	Description string   `json:"description"`
	Tools       []string `json:"tools"`
}

type ApprovalRequest struct {
	Approved bool `json:"approved" binding:"required"`
}

type AttestationTemplateInput struct {
	Data struct {
		Attributes struct {
			Name          string `json:"name"`
			Text          string `json:"text"`
			Required      bool   `json:"required"`
			AppliesToType string `json:"applies_to_type"`
			Active        bool   `json:"active"`
			SortOrder     int    `json:"sort_order"`
		} `json:"attributes"`
	} `json:"data"`
}

type AuthResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Token string `json:"token"`
		User  struct {
			ID    string `json:"id"`
			Email string `json:"email"`
			Name  string `json:"name"`
		} `json:"user"`
	} `json:"attributes"`
}

type BrandingConfig struct {
	AppTitle         string `json:"app_title"`
	PrimaryColor     string `json:"primary_color"`
	SecondaryColor   string `json:"secondary_color"`
	BackgroundColor  string `json:"background_color"`
	CustomCSS        string `json:"custom_css"`
	HasCustomLogo    bool   `json:"has_custom_logo"`
	HasCustomFavicon bool   `json:"has_custom_favicon"`
}

type BrandingSettingsAttributes struct {
	AppTitle         string `json:"app_title"`
	PrimaryColor     string `json:"primary_color"`
	SecondaryColor   string `json:"secondary_color"`
	BackgroundColor  string `json:"background_color"`
	CustomCSS        string `json:"custom_css"`
	HasCustomLogo    bool   `json:"has_custom_logo"`
	HasCustomFavicon bool   `json:"has_custom_favicon"`
}

type BrandingSettingsResponse struct {
	Type       string                     `json:"type"`
	ID         string                     `json:"id"`
	Attributes BrandingSettingsAttributes `json:"attributes"`
}

type BulkActionInput struct {
	Action string   `json:"action" example:"deactivate"`
	IDs    []BulkID `json:"ids" swaggertype:"array,integer"`
}

type BulkActionResponse struct {
	Data struct {
		Action    string             `json:"action"`
		Results   []BulkActionResult `json:"results"`
		Succeeded int                `json:"succeeded"`
		Failed    int                `json:"failed"`
	} `json:"data"`
}

type BulkActionResult struct {
	ID    uint   `json:"id"`
	OK    bool   `json:"ok"`
	Error string `json:"error,omitempty"`
}

type BulkID uint

type CMessageListResponse struct {
	Data []CMessageResponse `json:"data"`
}

type CMessageResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Session   string    `json:"session"`
		Content   any       `json:"content"`
		CreatedAt time.Time `json:"created_at"`
		ChatID    uint      `json:"chat_id"`
	} `json:"attributes"`
}

type CallOperationInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			OperationID string                 `json:"operation_id"`
			Parameters  map[string][]string    `json:"parameters"`
			Payload     map[string]interface{} `json:"payload"`
			Headers     map[string][]string    `json:"headers"`
		} `json:"attributes"`
	} `json:"data"`
}

type CatalogFilterOption struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	Name string `json:"name"`
}

type CatalogItem struct {
	Type       string                `json:"type"`
	ID         string                `json:"id"`
	Attributes CatalogItemAttributes `json:"attributes"`
	// Portal-visible governed metadata (Enterprise), display-ready.
	GovernedMetadata interface{} `json:"governed_metadata,omitempty"`
}

type CatalogItemAttributes struct {
	Name             string `json:"name"`
	ShortDescription string `json:"short_description"`
	LongDescription  string `json:"long_description,omitempty"`
	LogoURL          string `json:"logo_url,omitempty"`
	// Kind is the type-specific sub-classification: the vendor code of an LLM
	// provider, the store type of a data source, the protocol of a tool and
	// "<plugin id>:<slug>" for a plugin resource. KindLabel is set when the
	// backend knows a display name (plugin resource types); the UI maps the
	// built-in codes itself.
	Kind               string       `json:"kind"`
	KindLabel          string       `json:"kind_label,omitempty"`
	PrivacyScore       *int         `json:"privacy_score"`
	CommunitySubmitted bool         `json:"community_submitted"`
	Tags               []string     `json:"tags"`
	Catalogs           []CatalogRef `json:"catalogs"`
	CreatedAt          *time.Time   `json:"created_at"`
	UpdatedAt          *time.Time   `json:"updated_at"`
	// AccessGrantedViaApp says whether building an App is how a developer
	// gets to use this item. Always true for LLM providers, data sources and
	// tools; for plugin resources it is the type's resolved value with any
	// per-instance override applied. When false the portal shows no
	// "Build app" action.
	//
	// PortalDetailURL is the providing plugin's own page for the item, set
	// whenever the type declared portal_detail_path. When access is not
	// granted through an App it replaces the built-in detail page as the
	// item's detail view; otherwise it is a secondary link next to
	// "Build app".
	AccessGrantedViaApp bool   `json:"access_granted_via_app"`
	PortalDetailURL     string `json:"portal_detail_url,omitempty"`

	// LLM providers
	DefaultModel  string   `json:"default_model,omitempty"`
	AllowedModels []string `json:"allowed_models,omitempty"`
	// Detail responses only: the known models and the provider's metadata
	// (secrets redacted, as on the admin API).
	Models   []CatalogModelInfo     `json:"models,omitempty"`
	Metadata map[string]interface{} `json:"metadata,omitempty"`

	// Data sources
	EmbedVendor string `json:"embed_vendor,omitempty"`
	EmbedModel  string `json:"embed_model,omitempty"`

	// Tools. A tool is served by the AI Studio gateway; the access methods say
	// how an App may reach it, and each URL is present only when its method is
	// switched on. A tool with neither method on is chat only and is not in
	// the catalog at all.
	Operations        []string `json:"operations,omitempty"`
	RESTAccessEnabled *bool    `json:"rest_access_enabled,omitempty"`
	MCPAccessEnabled  *bool    `json:"mcp_access_enabled,omitempty"`
	RESTEndpointURL   string   `json:"rest_endpoint_url,omitempty"`
	MCPEndpointURL    string   `json:"mcp_endpoint_url,omitempty"`

	// Plugin resources
	ResourceType *CatalogResourceType `json:"resource_type,omitempty"`

	// MCP servers (Tyk-managed): how a client reaches the proxy and what it
	// offers. Brokerable says whether an App credential can be minted for it.
	AuthMode     string                               `json:"auth_mode,omitempty"`
	AuthHeader   string                               `json:"auth_header,omitempty"`
	EndpointURL  string                               `json:"endpoint_url,omitempty"`
	EndpointURLs map[string]string                    `json:"endpoint_urls,omitempty"`
	Primitives   []models.MCPPrimitive                `json:"primitives,omitempty"`
	GatewayTags  []string                             `json:"gateway_tags,omitempty"`
	Brokerable   *bool                                `json:"brokerable,omitempty"`
	OAuth        *models.MCPProtectedResourceMetadata `json:"oauth,omitempty"`

	// Model Routers: the slug, the "{slug}/{model}" strings a client sends
	// to the unified ingress, and (detail only) the LLMs it can route to.
	RouterSlug   string             `json:"router_slug,omitempty"`
	RouterModels []string           `json:"router_models,omitempty"`
	RouterLLMs   []CatalogRouterLLM `json:"router_llms,omitempty"`
	// RouterRoutes are a Semantic Router's routes (name and description; the
	// examples and keywords that pick them are configuration and stay out).
	RouterRoutes []CatalogRouterRoute `json:"router_routes,omitempty"`
}

type CatalogItemResponse struct {
	Data CatalogItem `json:"data"`
}

type CatalogKindFacet struct {
	Type  string `json:"type"`
	Kind  string `json:"kind"`
	Label string `json:"label,omitempty"`
	Count int    `json:"count"`
}

type CatalogListMeta struct {
	Total         int                   `json:"total"`
	Page          int                   `json:"page"`
	PageSize      int                   `json:"page_size"`
	TotalPages    int                   `json:"total_pages"`
	Counts        map[string]int        `json:"counts"`
	Kinds         []CatalogKindFacet    `json:"kinds"`
	Catalogs      []CatalogFilterOption `json:"catalogs"`
	ResourceTypes []CatalogResourceType `json:"resource_types"`
}

type CatalogListResponse struct {
	Data []CatalogItem   `json:"data"`
	Meta CatalogListMeta `json:"meta"`
}

type CatalogModelInfo struct {
	Name                  string   `json:"name"`
	IsDefault             bool     `json:"is_default"`
	InputPricePerMillion  *float64 `json:"input_price_per_million,omitempty"`
	OutputPricePerMillion *float64 `json:"output_price_per_million,omitempty"`
	Currency              string   `json:"currency,omitempty"`
}

type CatalogRef struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type CatalogResourceType struct {
	PluginID uint   `json:"plugin_id"`
	Slug     string `json:"slug"`
	Name     string `json:"name"`
	Icon     string `json:"icon,omitempty"`
	// AccessGrantedViaApp is the type-level answer to "does an App credential
	// grant access to these?"; the item carries the per-instance value.
	AccessGrantedViaApp bool `json:"access_granted_via_app"`
}

type CatalogRouterLLM struct {
	ID     string `json:"id"`
	Name   string `json:"name"`
	Vendor string `json:"vendor"`
}

type CatalogRouterRoute struct {
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
	Default     bool   `json:"default,omitempty"`
}

type CatalogueGroupsResponse struct {
	Data []services.CatalogueGroup `json:"data"`
}

type CatalogueInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name string `json:"name"`
		} `json:"attributes"`
	} `json:"data"`
}

type CatalogueLLMInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type CatalogueResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name     string   `json:"name"`
		LLMNames []string `json:"llm_names"`
	} `json:"attributes"`
}

type CatalogueRouterRef struct {
	ID     uint   `json:"id"`
	Name   string `json:"name"`
	Slug   string `json:"slug"`
	Active bool   `json:"active"`
}

type CatalogueRoutersInput struct {
	ModelRouterIDs    *[]uint `json:"model_router_ids"`
	SemanticRouterIDs *[]uint `json:"semantic_router_ids"`
}

type ChatDefaultsResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name                string                        `json:"name"`
		DefaultDataSource   *SimplifiedDataSourceResponse `json:"default_data_source"`
		DefaultTools        []SimplifiedToolResponse      `json:"default_tools"`
		SupportsTools       bool                          `json:"supports_tools"`
		RagResultsPerSource int                           `json:"rag_results_per_source"`
	} `json:"attributes"`
}

type ChatHistoryRecordInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			SessionID string `json:"session_id"`
			ChatID    uint   `json:"chat_id"`
			UserID    uint   `json:"user_id"`
			Name      string `json:"name"`
		} `json:"attributes"`
	} `json:"data"`
}

type ChatHistoryRecordListResponse struct {
	Data []ChatHistoryRecordResponse `json:"data"`
}

type ChatHistoryRecordResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		SessionID string `json:"session_id"`
		ChatID    uint   `json:"chat_id"`
		UserID    uint   `json:"user_id"`
		Name      string `json:"name"`
	} `json:"attributes"`
}

type ChatInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name                string `json:"name"`
			Description         string `json:"description"`
			LLMSettingsID       uint   `json:"llm_settings_id"`
			LLMID               uint   `json:"llm_id"`
			GroupIDs            []uint `json:"group_ids"`
			FilterIDs           []uint `json:"filter_ids"`
			RagN                int    `json:"rag_n"`
			ToolSupport         bool   `json:"tool_support"`
			SystemPrompt        string `json:"system_prompt"`
			DefaultDataSourceID int    `json:"default_data_source_id"`
			DefaultToolIDs      []uint `json:"default_tool_ids"`
		} `json:"attributes"`
	} `json:"data"`
}

type ChatMessage struct {
	Type        string               `json:"type"`
	Payload     string               `json:"payload"`
	FileRefs    []string             `json:"file_refs"`
	Tools       []models.Tool        `json:"tools,omitempty"`
	Datasources []*models.Datasource `json:"datasources,omitempty"`
}

type ChatResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name                string                   `json:"name"`
		Description         string                   `json:"description"`
		LLMSettingsID       string                   `json:"llm_settings_id"`
		LLMID               string                   `json:"llm_id"`
		Groups              []GroupResponse          `json:"groups"`
		Filters             []FilterResponse         `json:"filters"`
		RagN                int                      `json:"rag_n"`
		ToolSupport         bool                     `json:"tool_support"`
		SystemPrompt        string                   `json:"system_prompt"`
		DefaultDataSourceID int                      `json:"default_data_source_id"`
		DefaultDataSource   DatasourceResponse       `json:"default_data_source"`
		ExtraContext        []FileStoreResponse      `json:"extra_context"`
		DefaultTools        []ToolResponse           `json:"default_tools"`
		PromptTemplates     []PromptTemplateResponse `json:"prompt_templates"`
	} `json:"attributes"`
}

type CloneRoleInput struct {
	Name string `json:"name"`
}

type ClusterStatusFunc func(ctx context.Context) (interface{}, error)

type ConsentDetailsResponse struct {
	AuthRequestID string         `json:"auth_req_id"`
	ClientName    string         `json:"client_name"`
	Scopes        []string       `json:"scopes"`
	AvailableApps []AppWithTools `json:"available_apps"`
	NoAppsMessage string         `json:"no_apps_message,omitempty"`
}

type CreateAppRequest struct {
	Name            string                `json:"name" binding:"required"`
	Description     string                `json:"description" binding:"required"`
	DataSourceIDs   []uint                `json:"data_source_ids" binding:"required"`
	LLMIDs          []uint                `json:"llm_ids" binding:"required"`
	ToolIDs         []uint                `json:"tool_ids" binding:"required"`
	MonthlyBudget   *float64              `json:"monthly_budget"`
	BudgetStartDate *time.Time            `json:"budget_start_date"`
	PluginResources []PluginResourceInput `json:"plugin_resources,omitempty"`
	// MCPServerIDs binds Tyk-managed MCP servers the user's teams can see.
	MCPServerIDs []uint `json:"mcp_server_ids,omitempty"`
	// ModelRouterIDs grants Model Routers published in the user's LLM
	// catalogues (Enterprise).
	ModelRouterIDs []uint `json:"model_router_ids,omitempty"`
	// SemanticRouterIDs grants Semantic Routers published in the user's LLM
	// catalogues (Enterprise).
	SemanticRouterIDs []uint `json:"semantic_router_ids,omitempty"`
}

type CredentialDetail struct {
	KeyID  string `json:"key_id"`
	Secret string `json:"secret"`
	Active bool   `json:"active"`
}

type CredentialInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			KeyID  string `json:"key_id"`
			Secret string `json:"secret"`
			Active bool   `json:"active"`
		} `json:"attributes"`
	} `json:"data"`
}

type CredentialResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		KeyID  string `json:"key_id"`
		Secret string `json:"secret"`
		Active bool   `json:"active"`
	} `json:"attributes"`
}

type DataCatalogueDatasourceInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type DataCatalogueInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name             string `json:"name"`
			ShortDescription string `json:"short_description"`
			LongDescription  string `json:"long_description"`
			Icon             string `json:"icon"`
		} `json:"attributes"`
	} `json:"data"`
}

type DataCatalogueResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name             string               `json:"name"`
		ShortDescription string               `json:"short_description"`
		LongDescription  string               `json:"long_description"`
		Icon             string               `json:"icon"`
		Datasources      []DatasourceResponse `json:"datasources"`
		Tags             []TagResponse        `json:"tags"`
	} `json:"attributes"`
}

type DataCatalogueTagInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type DatasourceInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name             string   `json:"name"`
			ShortDescription string   `json:"short_description"`
			LongDescription  string   `json:"long_description"`
			Icon             string   `json:"icon"`
			Url              string   `json:"url"`
			PrivacyScore     int      `json:"privacy_score"`
			UserID           uint     `json:"user_id"`
			Tags             []string `json:"tags"`
			DBConnString     string   `json:"db_conn_string"`
			DBSourceType     string   `json:"db_source_type"`
			DBConnAPIKey     string   `json:"db_conn_api_key"`
			DBName           string   `json:"db_name"`
			EmbedVendor      string   `json:"embed_vendor"`
			EmbedUrl         string   `json:"embed_url"`
			EmbedAPIKey      string   `json:"embed_api_key"`
			EmbedModel       string   `json:"embed_model"`
			// EmbedderID links an embedder and takes precedence over the
			// embed_* fields (0 unlinks). Without it, the embed_* fields are
			// resolved to a matching embedder.
			EmbedderID *uint  `json:"embedder_id,omitempty"`
			Active     bool   `json:"active"`
			Namespace  string `json:"namespace"`
			// Governed metadata (Enterprise). nil = untouched; {} = clear.
			GovernedMetadata *map[string]interface{} `json:"governed_metadata,omitempty"`
		} `json:"attributes"`
	} `json:"data"`
}

type DatasourceResponse struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	// Governed metadata (Enterprise); see LLMResponse.
	GovernedMetadata       interface{} `json:"governed_metadata,omitempty"`
	GovernedMetadataStatus string      `json:"governed_metadata_status,omitempty"`
	Attributes             struct {
		Name             string              `json:"name"`
		ShortDescription string              `json:"short_description"`
		LongDescription  string              `json:"long_description"`
		Icon             string              `json:"icon"`
		Url              string              `json:"url"`
		PrivacyScore     int                 `json:"privacy_score"`
		UserID           uint                `json:"user_id"`
		Tags             []TagResponse       `json:"tags"`
		DBConnString     string              `json:"db_conn_string"`
		DBSourceType     string              `json:"db_source_type"`
		DBConnAPIKey     string              `json:"db_conn_api_key"`
		HasDBConnAPIKey  bool                `json:"has_db_conn_api_key"`
		DBName           string              `json:"db_name"`
		EmbedVendor      string              `json:"embed_vendor"`
		EmbedUrl         string              `json:"embed_url"`
		EmbedAPIKey      string              `json:"embed_api_key"`
		HasEmbedAPIKey   bool                `json:"has_embed_api_key"`
		EmbedModel       string              `json:"embed_model"`
		EmbedderID       *uint               `json:"embedder_id"`
		EmbedderName     string              `json:"embedder_name"`
		Active           bool                `json:"active"`
		Namespace        string              `json:"namespace"`
		Files            []FileStoreResponse `json:"files"`
	} `json:"attributes"`
}

type DependencyInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type DependencyListResponse struct {
	Data []ToolResponse `json:"data"`
}

type DependentsResponse struct {
	Data struct {
		Type       string              `json:"type"`
		ID         string              `json:"id"`
		Attributes services.Dependents `json:"attributes"`
	} `json:"data"`
}

type EdgeListResponse struct {
	Data []EdgeResponse `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
}

type EdgeOwner struct {
	OwnerNodeID string `json:"owner_node_id"`
	// OwnerLabel is the replica's label (cluster.NodeOptions.Label), empty
	// when it has none or is no longer registered.
	OwnerLabel string `json:"owner_label"`
	// OwnerLive: the replica's registration is fresh.
	OwnerLive bool `json:"owner_live"`
}

type EdgeResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		EdgeID        string                 `json:"edge_id"`
		Namespace     string                 `json:"namespace"` // Always "default" in CE
		Version       string                 `json:"version"`
		BuildHash     string                 `json:"build_hash"`
		Metadata      map[string]interface{} `json:"metadata"`
		LastHeartbeat *time.Time             `json:"last_heartbeat"`
		Status        string                 `json:"status"`
		SessionID     string                 `json:"session_id"`
		// Sync status fields for configuration sync tracking
		SyncStatus     string     `json:"sync_status"`
		LoadedChecksum string     `json:"loaded_checksum"`
		LoadedVersion  string     `json:"loaded_version"`
		LastSyncAck    *time.Time `json:"last_sync_ack"`
		CreatedAt      time.Time  `json:"created_at"`
		UpdatedAt      time.Time  `json:"updated_at"`
		EdgeOwner
	} `json:"attributes"`
}

type EffectiveAccessResponse struct {
	UserID         uint                               `json:"user_id"`
	Permissions    []string                           `json:"permissions"`
	Roles          []rbac.RoleSummary                 `json:"roles"`
	Sources        map[string][]rbac.PermissionSource `json:"sources"`
	IsFullAdmin    bool                               `json:"is_full_admin"`
	HasAdminAccess bool                               `json:"has_admin_access"`
	Enabled        bool                               `json:"enabled"`
}

type EmbedderAttributes struct {
	Name        string `json:"name"`
	Description string `json:"description"`
	LLMID       *uint  `json:"llm_id"`
	Vendor      string `json:"vendor"`
	Endpoint    string `json:"endpoint"`
	// APIKey: "[redacted]" on update keeps the stored key.
	APIKey       string `json:"api_key"`
	Model        string `json:"model"`
	PrivacyScore int    `json:"privacy_score"`
}

type EmbedderInput struct {
	Data struct {
		Type       string             `json:"type"`
		Attributes EmbedderAttributes `json:"attributes"`
	} `json:"data"`
}

type EndpointAuthPluginsRequest struct {
	// PluginIDs in execution order; empty detaches every auth plugin.
	PluginIDs []uint `json:"plugin_ids"`
}

type ErrorResponse struct {
	Errors []struct {
		Title  string `json:"title"`
		Detail string `json:"detail"`
	} `json:"errors"`
}

type ExportRequest struct {
	SourceType string `json:"source_type" binding:"required,oneof=app llm user"`
	SourceID   uint   `json:"source_id" binding:"required"`
	StartDate  string `json:"start_date" binding:"required"`
	EndDate    string `json:"end_date" binding:"required"`
	Search     string `json:"search"`
}

type FileStoreInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			FileName    string `json:"file_name"`
			Description string `json:"description"`
			Content     string `json:"content"`
			Length      int    `json:"length"`
		} `json:"attributes"`
	} `json:"data"`
}

type FileStoreResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		FileName        string    `json:"file_name"`
		Description     string    `json:"description"`
		Content         string    `json:"-"`
		Length          int       `json:"length"`
		LastProcessedOn time.Time `json:"last_processed_on"`
	} `json:"attributes"`
}

type FilterAttributes struct {
	Name           string                 `json:"name"`
	Description    string                 `json:"description"`
	Script         []byte                 `json:"script"`
	ResponseFilter bool                   `json:"response_filter"`
	Namespace      string                 `json:"namespace"`
	Kind           string                 `json:"kind"`
	Config         map[string]interface{} `json:"config,omitempty"`
}

type FilterInput struct {
	Data struct {
		Type       string                `json:"type"`
		Attributes FilterInputAttributes `json:"attributes"`
	} `json:"data"`
}

type FilterInputAttributes struct {
	Name           string `json:"name"`
	Description    string `json:"description"`
	Script         []byte `json:"script"`
	ResponseFilter bool   `json:"response_filter"`
	Namespace      string `json:"namespace"`
	// Kind is "script" (default) or "guardrail".
	Kind string `json:"kind"`
	// Config is the guardrail configuration (provider, detectors,
	// action, ...) for a guardrail filter.
	Config map[string]interface{} `json:"config"`
}

type FilterResponse struct {
	Type       string           `json:"type"`
	ID         string           `json:"id"`
	Attributes FilterAttributes `json:"attributes"`
}

type FilterTestInput struct {
	Script string                 `json:"script"`
	Kind   string                 `json:"kind"`
	Config map[string]interface{} `json:"config"`
	// FilterID names the saved filter this test belongs to. A guardrail config
	// whose connection holds $SECRET/ or $ENV/ references is only run when
	// its connection block matches that saved filter's, so the test endpoint
	// cannot be used to send a resolved secret to a caller-chosen endpoint.
	FilterID       uint                   `json:"filter_id"`
	ResponseFilter bool                   `json:"response_filter"`
	Input          map[string]interface{} `json:"input" binding:"required"`
}

type FilterTestOutput struct {
	Success bool                   `json:"success"`
	Output  map[string]interface{} `json:"output,omitempty"`
	Error   string                 `json:"error,omitempty"`
}

type ForgotPasswordInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Email string `json:"email"`
		} `json:"attributes"`
	} `json:"data"`
}

type ForgotPasswordResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type FrontendConfig struct {
	APIBaseURL           string `json:"apiBaseURL"`
	ProxyURL             string `json:"proxyURL"`
	ToolDisplayURL       string `json:"toolDisplayURL"`
	DataSourceDisplayURL string `json:"dataSourceDisplayURL"`
	// UnifiedRouterPath is the base path of the gateway's unified OpenAI-compatible
	// ingress ({base}/chat/completions), normalized as the proxy itself resolves it.
	// Empty when the ingress is disabled, so the portal hides it instead of
	// advertising an endpoint that would 404.
	UnifiedRouterPath string            `json:"unifiedRouterPath"`
	DefaultSignUpMode string            `json:"defaultSignUpMode"`
	TIBEnabled        bool              `json:"tibEnabled"`
	IsEnterprise      bool              `json:"is_enterprise"`
	DocsLinks         map[string]string `json:"docsLinks"`
	Branding          *BrandingConfig   `json:"branding,omitempty"`
	DocsEnabled       bool              `json:"docsEnabled"`
	DocsURL           string            `json:"docsURL,omitempty"`
	// AllowSSOUserAPIKeys mirrors ALLOW_SSO_USER_API_KEYS so the console can
	// hide key issuance for SSO-provisioned users instead of offering a
	// button that returns 403.
	AllowSSOUserAPIKeys bool `json:"allowSSOUserAPIKeys"`
	// BasePath is the path prefix the console is served under ("" for the
	// root), so it can build URLs and route under it.
	BasePath string `json:"basePath"`
	// AuthMode is "local" when Studio signs users in itself and "host" when
	// the application it is embedded in does; then LoginURL and LogoutURL
	// say where to send the user.
	AuthMode  string `json:"authMode"`
	LoginURL  string `json:"loginURL,omitempty"`
	LogoutURL string `json:"logoutURL,omitempty"`
	// CSRFTokenHeader and CSRFTokenURL say how the console obtains and
	// presents a CSRF token for cookie-authenticated writes.
	CSRFTokenHeader string `json:"csrfTokenHeader"`
	CSRFTokenURL    string `json:"csrfTokenURL"`
	// Chrome is "none" when the host application draws the navigation, and
	// the console then leaves out its top bar and drawers; "full" otherwise.
	Chrome string `json:"chrome"`
}

type GroupAttributes struct {
	Name           string                  `json:"name"`
	Users          []UserResponse          `json:"users,omitempty"`
	Catalogues     []CatalogueResponse     `json:"catalogues,omitempty"`
	DataCatalogues []DataCatalogueResponse `json:"data_catalogues,omitempty"`
	ToolCatalogues []ToolCatalogueResponse `json:"tool_catalogues,omitempty"`
	Roles          []rbac.RoleSummary      `json:"roles,omitempty"`
}

type GroupCatalogueInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type GroupCataloguesRequest struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Catalogues     []uint `json:"catalogues"`
			DataCatalogues []uint `json:"data_catalogues"`
			ToolCatalogues []uint `json:"tool_catalogues"`
		} `json:"attributes"`
	} `json:"data"`
}

type GroupDataCatalogueInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type GroupInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name           string `json:"name"`
			Members        []uint `json:"members"`
			Catalogues     []uint `json:"catalogues"`
			DataCatalogues []uint `json:"data_catalogues"`
			ToolCatalogues []uint `json:"tool_catalogues"`
		} `json:"attributes"`
	} `json:"data"`
}

type GroupListResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name               string             `json:"name"`
		UserCount          int                `json:"user_count"`
		CatalogueCount     int                `json:"catalogue_count"`
		DataCatalogueCount int                `json:"data_catalogue_count"`
		ToolCatalogueCount int                `json:"tool_catalogue_count"`
		CatalogueNames     []string           `json:"catalogue_names"`
		DataCatalogueNames []string           `json:"data_catalogue_names"`
		ToolCatalogueNames []string           `json:"tool_catalogue_names"`
		Roles              []rbac.RoleSummary `json:"roles,omitempty"`
	} `json:"attributes"`
}

type GroupResponse struct {
	Type       string          `json:"type"`
	ID         string          `json:"id"`
	Attributes GroupAttributes `json:"attributes"`
}

type GroupToolCatalogueInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type GroupUsersInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Members []uint `json:"members"`
		} `json:"attributes"`
	} `json:"data"`
}

type HubSession interface {
	ID() string
	Stop()
}

type LLMInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name             string                 `json:"name"`
			APIKey           string                 `json:"api_key"`
			APIEndpoint      string                 `json:"api_endpoint"`
			PrivacyScore     int                    `json:"privacy_score"`
			ShortDescription string                 `json:"short_description"`
			LongDescription  string                 `json:"long_description"`
			LogoURL          string                 `json:"logo_url"`
			Vendor           string                 `json:"vendor"`
			Active           bool                   `json:"active"`
			Filters          []uint                 `json:"filters"`
			DefaultModel     string                 `json:"default_model"`
			AllowedModels    []string               `json:"allowed_models"`
			MonthlyBudget    *float64               `json:"monthly_budget"`
			BudgetStartDate  *string                `json:"budget_start_date"`
			Namespace        string                 `json:"namespace,omitempty"`
			DontLogBodies    bool                   `json:"dont_log_bodies"`
			Metadata         map[string]interface{} `json:"metadata,omitempty"`
			// Governed metadata (Enterprise). nil = untouched; {} = clear.
			GovernedMetadata *map[string]interface{} `json:"governed_metadata,omitempty"`
			// Failover waterfall. On PATCH an absent key keeps the stored
			// value and an explicit null clears it.
			Failover *models.LLMFailover `json:"failover,omitempty"`
		} `json:"attributes"`
	} `json:"data"`
}

type LLMResponse struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	// Governed metadata (Enterprise): admin responses carry the raw values map and a
	// status; portal responses carry a display-ready [{key,label,type,value}] list.
	GovernedMetadata       interface{} `json:"governed_metadata,omitempty"`
	GovernedMetadataStatus string      `json:"governed_metadata_status,omitempty"`
	Attributes             struct {
		Name             string                 `json:"name"`
		APIKey           string                 `json:"api_key"`
		HasAPIKey        bool                   `json:"has_api_key"`
		CredentialStatus string                 `json:"credential_status"`
		CredentialRef    string                 `json:"credential_ref,omitempty"`
		APIEndpoint      string                 `json:"api_endpoint"`
		PrivacyScore     int                    `json:"privacy_score"`
		ShortDescription string                 `json:"short_description"`
		LongDescription  string                 `json:"long_description"`
		LogoURL          string                 `json:"logo_url"`
		Vendor           string                 `json:"vendor"`
		Active           bool                   `json:"active"`
		Filters          []FilterResponse       `json:"filters"`
		DefaultModel     string                 `json:"default_model"`
		AllowedModels    []string               `json:"allowed_models"`
		MonthlyBudget    *float64               `json:"monthly_budget"`
		BudgetStartDate  *time.Time             `json:"budget_start_date"`
		Namespace        string                 `json:"namespace"`
		DontLogBodies    bool                   `json:"dont_log_bodies"`
		Plugins          []PluginResponse       `json:"plugins"`
		Metadata         map[string]interface{} `json:"metadata,omitempty"`
		Failover         *models.LLMFailover    `json:"failover,omitempty"`
	} `json:"attributes"`
}

type LLMSettingsInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			ModelName         string                 `json:"model_name"`
			MaxLength         int                    `json:"max_length"`
			MaxTokens         int                    `json:"max_tokens"`
			Metadata          map[string]interface{} `json:"metadata"`
			MinLength         int                    `json:"min_length"`
			RepetitionPenalty float64                `json:"repetition_penalty"`
			Seed              int                    `json:"seed"`
			StopWords         []string               `json:"stop_words"`
			Temperature       float64                `json:"temperature"`
			TopK              int                    `json:"top_k"`
			TopP              float64                `json:"top_p"`
			SystemPrompt      string                 `json:"system_prompt"`
		} `json:"attributes"`
	} `json:"data"`
}

type LLMSettingsResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		ModelName         string                 `json:"model_name"`
		MaxLength         int                    `json:"max_length"`
		MaxTokens         int                    `json:"max_tokens"`
		Metadata          map[string]interface{} `json:"metadata"`
		MinLength         int                    `json:"min_length"`
		RepetitionPenalty float64                `json:"repetition_penalty"`
		Seed              int                    `json:"seed"`
		StopWords         []string               `json:"stop_words"`
		Temperature       float64                `json:"temperature"`
		TopK              int                    `json:"top_k"`
		TopP              float64                `json:"top_p"`
		SystemPrompt      string                 `json:"system_prompt"`
	} `json:"attributes"`
}

type LoginInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Email    string `json:"email"`
			Password string `json:"password"`
		} `json:"attributes"`
	} `json:"data"`
}

type LoginPageProfileResponse struct {
	Type       string `json:"type"`
	ID         uint   `json:"id"`
	Attributes struct {
		ProfileID            string `json:"profile_id"`
		Name                 string `json:"name"`
		SelectedProviderType string `json:"selected_provider_type"`
		LoginURL             string `json:"login_url"`
		UseInLoginPage       bool   `json:"use_in_login_page"`
	} `json:"attributes"`
}

type LoginResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type LogoutResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type MarketplaceAdminHandlers struct {
	// contains filtered or unexported fields
}

type MarketplaceHandlers struct {
	// contains filtered or unexported fields
}

type MetadataSchemaInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name        string                    `json:"name"`
			Slug        string                    `json:"slug"`
			Description string                    `json:"description"`
			AppliesTo   []string                  `json:"applies_to"`
			Fields      []models.MetadataFieldDef `json:"fields"`
			Enforcement string                    `json:"enforcement"`
			Active      *bool                     `json:"active"`
			Order       *int                      `json:"order"`
		} `json:"attributes"`
	} `json:"data"`
}

type MetadataValidationError struct {
	Title  string `json:"title"`
	Detail string `json:"detail"`
	Code   string `json:"code,omitempty"`
	Source *struct {
		Pointer string `json:"pointer"`
	} `json:"source,omitempty"`
}

type MetadataValidationErrorResponse struct {
	Errors []MetadataValidationError `json:"errors"`
}

type MetadataVocabularyInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name        string                  `json:"name"`
			Slug        string                  `json:"slug"`
			Description string                  `json:"description"`
			Terms       []models.VocabularyTerm `json:"terms"`
		} `json:"attributes"`
	} `json:"data"`
}

type ModelMappingInput struct {
	SourceModel string `json:"source_model"`
	TargetModel string `json:"target_model"`
}

type ModelPoolInput struct {
	Name               string            `json:"name"`
	ModelPattern       string            `json:"model_pattern"`
	SelectionAlgorithm string            `json:"selection_algorithm"`
	Priority           int               `json:"priority"`
	Vendors            []PoolVendorInput `json:"vendors"`
}

type ModelPriceInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			ModelName    string  `json:"model_name"`
			Vendor       string  `json:"vendor"`
			CPT          float64 `json:"cpt"`
			CPIT         float64 `json:"cpit"`
			CacheWritePT float64 `json:"cache_write_pt"`
			CacheReadPT  float64 `json:"cache_read_pt"`
			Currency     string  `json:"currency"`
		} `json:"attributes"`
	} `json:"data"`
}

type ModelPriceResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		ModelName    string  `json:"model_name"`
		Vendor       string  `json:"vendor"`
		CPT          float64 `json:"cpt"`
		CPIT         float64 `json:"cpit"`
		CacheWritePT float64 `json:"cache_write_pt"`
		CacheReadPT  float64 `json:"cache_read_pt"`
		Currency     string  `json:"currency"`
	} `json:"attributes"`
}

type ModelRouterInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name        string `json:"name"`
			Slug        string `json:"slug"`
			Description string `json:"description"`
			APICompat   string `json:"api_compat"`
			// Active is the live switch. Omitted = inactive on create (the
			// model default), unchanged on update. Setting it needs
			// model-routers:publish.
			Active    *bool            `json:"active"`
			Namespace string           `json:"namespace"`
			Pools     []ModelPoolInput `json:"pools"`
			// Portal presentation (the router is published in LLM catalogues).
			ShortDescription string `json:"short_description"`
			LongDescription  string `json:"long_description"`
			LogoURL          string `json:"logo_url"`
		} `json:"attributes"`
	} `json:"data"`
}

type NavItem struct {
	ID         string    `json:"id"`
	Text       string    `json:"text"`
	Path       string    `json:"path,omitempty"`
	Icon       string    `json:"icon,omitempty"`
	Exact      bool      `json:"exact,omitempty"`
	Title      string    `json:"title,omitempty"`
	Permission string    `json:"permission,omitempty"`
	PluginID   uint      `json:"pluginId,omitempty"`
	Items      []NavItem `json:"items,omitempty"`
}

type NavManifest struct {
	Surfaces []NavItem `json:"surfaces"`
	Admin    []NavItem `json:"admin"`
	Portal   []NavItem `json:"portal"`
	Chat     []NavItem `json:"chat"`
}

type NotificationHandlers struct {
	// contains filtered or unexported fields
}

type OAuthErrorResponse struct {
	Error            string `json:"error"`
	ErrorDescription string `json:"error_description,omitempty"`
	ErrorURI         string `json:"error_uri,omitempty"`
}

type OAuthServerMetadata struct {
	Issuer                                string   `json:"issuer"`
	AuthorizationEndpoint                 string   `json:"authorization_endpoint"`
	TokenEndpoint                         string   `json:"token_endpoint"`
	RegistrationEndpoint                  string   `json:"registration_endpoint,omitempty"`
	ScopesSupported                       []string `json:"scopes_supported,omitempty"`
	ResponseTypesSupported                []string `json:"response_types_supported"`
	GrantTypesSupported                   []string `json:"grant_types_supported,omitempty"`
	TokenEndpointAuthMethodsSupported     []string `json:"token_endpoint_auth_methods_supported,omitempty"`
	CodeChallengeMethodsSupported         []string `json:"code_challenge_methods_supported,omitempty"`
	IntrospectionEndpoint                 string   `json:"introspection_endpoint,omitempty"`
	RevocationEndpoint                    string   `json:"revocation_endpoint,omitempty"`
	DeviceAuthorizationEndpoint           string   `json:"device_authorization_endpoint,omitempty"`
	PushedAuthorizationRequestEndpoint    string   `json:"pushed_authorization_request_endpoint,omitempty"`
	RequirePushedAuthorizationRequests    bool     `json:"require_pushed_authorization_requests,omitempty"`
	TlsClientCertificateBoundAccessTokens bool     `json:"tls_client_certificate_bound_access_tokens,omitempty"`
	RequestURIParameterSupported          bool     `json:"request_uri_parameter_supported,omitempty"`
	RequestParameterSupported             bool     `json:"request_parameter_supported,omitempty"`
	ServiceDocumentation                  string   `json:"service_documentation,omitempty"`
	UILocalesSupported                    []string `json:"ui_locales_supported,omitempty"`
	OpPolicyURI                           string   `json:"op_policy_uri,omitempty"`
	OpTosURI                              string   `json:"op_tos_uri,omitempty"`
	JwksURI                               string   `json:"jwks_uri,omitempty"`
}

type ObjectMetadataInput struct {
	Values map[string]interface{} `json:"values"`
	Merge  bool                   `json:"merge"`
}

type OperationInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Operation string `json:"operation"`
		} `json:"attributes"`
	} `json:"data"`
	// Operation is the bare-form alternative to the data envelope above.
	Operation string `json:"operation,omitempty"`
}

type OperationsResponse struct {
	Operations []string `json:"operations"`
}

type PaginatedProxyLogs struct {
	Data []ProxyLogResponse `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
}

type PermissionCatalogueResponse struct {
	Enabled   bool             `json:"enabled"`
	Groups    []string         `json:"groups"`
	Resources []authz.Resource `json:"resources"`
	Actions   []authz.Action   `json:"actions"`
	// Version changes whenever a plugin registers or removes permission
	// resources, so clients can tell a cached catalogue is stale.
	Version uint64 `json:"version"`
}

type PluginInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name            string                 `json:"name"`
			Slug            string                 `json:"slug"`
			Description     string                 `json:"description"`
			Command         string                 `json:"command"`
			Checksum        string                 `json:"checksum,omitempty"`
			Config          map[string]interface{} `json:"config"`
			HookType        string                 `json:"hook_type"`
			IsActive        bool                   `json:"is_active"`
			Namespace       string                 `json:"namespace,omitempty"`
			PluginType      string                 `json:"plugin_type,omitempty"`
			OCIReference    string                 `json:"oci_reference,omitempty"`
			LoadImmediately bool                   `json:"load_immediately,omitempty"`
		} `json:"attributes"`
	} `json:"data"`
}

type PluginListResponse struct {
	Data []PluginResponse `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
	// UpdatesAvailable counts installed plugins (across all pages) with a newer marketplace version.
	UpdatesAvailable int64 `json:"updates_available"`
}

type PluginMarketplaceInfo struct {
	MarketplaceID    string `json:"marketplace_id"`
	InstalledVersion string `json:"installed_version"`
	AvailableVersion string `json:"available_version"`
	UpdateAvailable  bool   `json:"update_available"`
}

type PluginResourceInput struct {
	PluginID         uint     `json:"plugin_id"`
	ResourceTypeSlug string   `json:"resource_type_slug"`
	InstanceIDs      []string `json:"instance_ids"`
}

type PluginResourceOutput struct {
	PluginID         uint     `json:"plugin_id"`
	ResourceTypeSlug string   `json:"resource_type_slug"`
	ResourceTypeName string   `json:"resource_type_name"`
	InstanceIDs      []string `json:"instance_ids"`
}

type PluginResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name         string                 `json:"name"`
		Description  string                 `json:"description"`
		Command      string                 `json:"command"`
		Checksum     string                 `json:"checksum,omitempty"`
		Config       map[string]interface{} `json:"config"`
		HookType     string                 `json:"hook_type"`
		IsActive     bool                   `json:"is_active"`
		Namespace    string                 `json:"namespace"`
		PluginType   string                 `json:"plugin_type"`   // "gateway" or "ai_studio"
		OCIReference string                 `json:"oci_reference"` // OCI artifact reference (for OCI plugins)
		Manifest     map[string]interface{} `json:"manifest"`      // Plugin manifest for UI extensions
		CreatedAt    string                 `json:"created_at"`
		UpdatedAt    string                 `json:"updated_at"`
	} `json:"attributes"`
	// PermissionKey is the RBAC resource that stands for this plugin
	// ("plugin:<manifest id>"); omitted for plugins with no admin surface.
	// Top level rather than inside Attributes so the many hand-written
	// Attributes literals in this package stay untouched.
	PermissionKey string `json:"permission_key,omitempty"`
	// Version and Marketplace are top level for the same reason.
	Version       string                 `json:"version,omitempty"`
	Marketplace   *PluginMarketplaceInfo `json:"marketplace,omitempty"`
	Relationships *struct {
		LLMs struct {
			Data []struct {
				Type       string `json:"type"`
				ID         string `json:"id"`
				Attributes struct {
					Name   string `json:"name"`
					Vendor string `json:"vendor"`
					Active bool   `json:"active"`
				} `json:"attributes"`
			} `json:"data"`
		} `json:"llms"`
	} `json:"relationships,omitempty"`
}

type PluginUpgradePreviewRequest struct {
	Version string `json:"version"` // empty = latest upgrade candidate
}

type PluginUpgradeResponse struct {
	Data    PluginResponse                `json:"data"`
	Upgrade *services.PluginUpgradeResult `json:"upgrade"`
}

type PoolVendorInput struct {
	LLMID    uint                `json:"llm_id"`
	Weight   int                 `json:"weight"`
	Active   bool                `json:"active"`
	Mappings []ModelMappingInput `json:"mappings"`
}

type PreferencesResponse struct {
	// NotificationsEnabled is the in-app admin fan-out consent (new users,
	// app requests). It can only be on for administrators.
	NotificationsEnabled bool `json:"notifications_enabled"`
	// EmailNotificationsEnabled controls whether notifications are also
	// emailed; the bell receives them either way.
	EmailNotificationsEnabled bool `json:"email_notifications_enabled"`
}

type PreferencesUpdateRequest struct {
	NotificationsEnabled      *bool `json:"notifications_enabled"`
	EmailNotificationsEnabled *bool `json:"email_notifications_enabled"`
}

type ProfileInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			ProfileID                 string                 `json:"profile_id"`
			Name                      string                 `json:"name"`
			OrgID                     string                 `json:"org_id"`
			ActionType                string                 `json:"action_type"`
			MatchedPolicyID           string                 `json:"matched_policy_id"`
			Type                      string                 `json:"type"`
			ProviderName              string                 `json:"provider_name"`
			CustomEmailField          string                 `json:"custom_email_field"`
			CustomUserIDField         string                 `json:"custom_user_id_field"`
			ProviderConfig            map[string]interface{} `json:"provider_config"`
			IdentityHandlerConfig     map[string]interface{} `json:"identity_handler_config"`
			ProviderConstraintsDomain string                 `json:"provider_constraints_domain"`
			ProviderConstraintsGroup  string                 `json:"provider_constraints_group"`
			ReturnURL                 string                 `json:"return_url"`
			DefaultUserGroupID        string                 `json:"default_user_group_id"`
			CustomUserGroupField      string                 `json:"custom_user_group_field"`
			UserGroupMapping          map[string]string      `json:"user_group_mapping"`
			UserGroupSeparator        string                 `json:"user_group_separator"`
			SSOOnlyForRegisteredUsers bool                   `json:"sso_only_for_registered_users"`
			// Provisioning defaults for users this profile creates. Pointers so
			// that an omitted field means "show" rather than "hide".
			NewUserShowPortal *bool `json:"new_user_show_portal"`
			NewUserShowChat   *bool `json:"new_user_show_chat"`
		} `json:"attributes"`
	} `json:"data"`
}

type ProfileListItem struct {
	Type       string `json:"type"`
	ID         uint   `json:"id"`
	Attributes struct {
		Name           string    `json:"name"`
		ProfileID      string    `json:"profile_id"`
		ProfileType    string    `json:"profile_type"`
		ProviderType   string    `json:"provider_type"`
		UpdatedBy      string    `json:"updated_by"`
		UpdatedAt      time.Time `json:"updated_at"`
		UseInLoginPage bool      `json:"use_in_login_page"`
	} `json:"attributes"`
}

type ProfileResponse struct {
	Type       string `json:"type"`
	ID         uint   `json:"id"`
	Attributes struct {
		ProfileID                 string                 `json:"profile_id"`
		Name                      string                 `json:"name"`
		OrgID                     string                 `json:"org_id"`
		ActionType                string                 `json:"action_type"`
		MatchedPolicyID           string                 `json:"matched_policy_id"`
		Type                      string                 `json:"type"`
		ProviderName              string                 `json:"provider_name"`
		CustomEmailField          string                 `json:"custom_email_field"`
		CustomUserIDField         string                 `json:"custom_user_id_field"`
		ProviderConfig            map[string]interface{} `json:"provider_config"`
		IdentityHandlerConfig     map[string]interface{} `json:"identity_handler_config"`
		ProviderConstraintsDomain string                 `json:"provider_constraints_domain"`
		ProviderConstraintsGroup  string                 `json:"provider_constraints_group"`
		ReturnURL                 string                 `json:"return_url"`
		DefaultUserGroupID        string                 `json:"default_user_group_id"`
		CustomUserGroupField      string                 `json:"custom_user_group_field"`
		UserGroupMapping          map[string]string      `json:"user_group_mapping"`
		UserGroupSeparator        string                 `json:"user_group_separator"`
		SSOOnlyForRegisteredUsers bool                   `json:"sso_only_for_registered_users"`
		NewUserShowPortal         bool                   `json:"new_user_show_portal"`
		NewUserShowChat           bool                   `json:"new_user_show_chat"`
		SelectedProviderType      string                 `json:"selected_provider_type"`
		LoginURL                  string                 `json:"login_url"`
		CallbackURL               string                 `json:"callback_url"`
		FailureRedirectURL        string                 `json:"failure_redirect_url"`
		UseInLoginPage            bool                   `json:"use_in_login_page"`
	} `json:"attributes"`
}

type ProfilesResponse struct {
	Data []ProfileListItem `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
}

type PromptTemplateInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name   string `json:"name"`
			Prompt string `json:"prompt"`
			ChatID uint   `json:"chat_id"`
		} `json:"attributes"`
	} `json:"data"`
}

type PromptTemplateResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name   string `json:"name"`
		Prompt string `json:"prompt"`
		ChatID uint   `json:"chat_id"`
	} `json:"attributes"`
}

type ProxyLogResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		AppID        uint      `json:"app_id"`
		UserID       uint      `json:"user_id"`
		TimeStamp    time.Time `json:"time_stamp"`
		Vendor       string    `json:"vendor"`
		RequestBody  string    `json:"request_body"`
		ResponseBody string    `json:"response_body"`
		ResponseCode int       `json:"response_code"`
	} `json:"attributes"`
}

type RegisterInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Email      string `json:"email"`
			Name       string `json:"name"`
			Password   string `json:"password"`
			WithPortal bool   `json:"with_portal"`
			WithChat   bool   `json:"with_chat"`
		} `json:"attributes"`
	} `json:"data"`
}

type RegisterOAuthClientInput struct {
	ClientName              string   `json:"client_name" binding:"required"`
	RedirectURIs            []string `json:"redirect_uris" binding:"required,dive,url"`
	Scope                   string   `json:"scope"` // Optional
	GrantTypes              []string `json:"grant_types"`
	ResponseTypes           []string `json:"response_types"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
}

type RegisterOAuthClientOutput struct {
	ClientID                string   `json:"client_id"`
	ClientSecret            string   `json:"client_secret,omitempty"` // Only shown once
	ClientName              string   `json:"client_name"`
	RedirectURIs            []string `json:"redirect_uris"`
	Scope                   string   `json:"scope"`
	GrantTypes              []string `json:"grant_types"`
	ResponseTypes           []string `json:"response_types"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
	ClientSecretExpiresAt   int      `json:"client_secret_expires_at"` // RFC7591: 0 means never expires
}

type RegisterResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type ResendVerificationInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Email string `json:"email"`
		} `json:"attributes"`
	} `json:"data"`
}

type ResendVerificationResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type ResetPasswordInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Token    string `json:"token"`
			Password string `json:"password"`
		} `json:"attributes"`
	} `json:"data"`
}

type ResetPasswordResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type RoleAttributes struct {
	Name        string   `json:"name"`
	Slug        string   `json:"slug"`
	Description string   `json:"description"`
	IsSystem    bool     `json:"is_system"`
	Permissions []string `json:"permissions"`
	// OrphanedPermissions are held permissions whose resource is not in the
	// catalogue right now: grants on a plugin that is uninstalled or not
	// loaded. They stay on the role and take effect again when the plugin
	// returns; the role editor lists them separately.
	OrphanedPermissions []string  `json:"orphaned_permissions"`
	UsersCount          int64     `json:"users_count"`
	GroupsCount         int64     `json:"groups_count"`
	CreatedAt           time.Time `json:"created_at"`
	UpdatedAt           time.Time `json:"updated_at"`
}

type RoleBindingAttributes struct {
	SubjectType string            `json:"subject_type"`
	SubjectID   uint              `json:"subject_id"`
	RoleID      uint              `json:"role_id"`
	Role        *rbac.RoleSummary `json:"role,omitempty"`
	ScopeType   string            `json:"scope_type"`
	ScopeID     string            `json:"scope_id"`
	// Source is "host" for a binding the host application manages
	// (read-only here), empty otherwise.
	Source    string    `json:"source"`
	CreatedAt time.Time `json:"created_at"`
}

type RoleBindingInput struct {
	SubjectType string `json:"subject_type"`
	SubjectID   uint   `json:"subject_id"`
	RoleID      uint   `json:"role_id"`
}

type RoleBindingResponse struct {
	Type       string                `json:"type"`
	ID         string                `json:"id"`
	Attributes RoleBindingAttributes `json:"attributes"`
}

type RoleInput struct {
	Name        string   `json:"name"`
	Description string   `json:"description"`
	Permissions []string `json:"permissions"`
}

type RoleResponse struct {
	Type       string         `json:"type"`
	ID         string         `json:"id"`
	Attributes RoleAttributes `json:"attributes"`
}

type RouterCatalogueRef struct {
	ID   uint   `json:"id"`
	Name string `json:"name"`
}

type SecretInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Value   string `json:"value"`
			VarName string `json:"var_name"`
		} `json:"attributes"`
	} `json:"data"`
}

type SecretListResponse struct {
	Data []SecretResponse `json:"data"`
	Meta struct {
		TotalCount int64 `json:"total_count"`
		TotalPages int   `json:"total_pages"`
		PageSize   int   `json:"page_size"`
		PageNumber int   `json:"page_number"`
	} `json:"meta"`
}

type SecretReferenceResponse struct {
	Type string `json:"type"`
	ID   uint   `json:"id"`
	Name string `json:"name"`
}

type SecretResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Value   string `json:"value"`
		VarName string `json:"var_name"`
		// HasValue says whether the secret holds a non-empty value without
		// exposing it, so the list can flag a placeholder that was never
		// filled in.
		HasValue bool `json:"has_value"`
		// ReferencedBy lists the objects that read this secret through a
		// $SECRET/<name> reference. Always present, empty when nothing does.
		ReferencedBy []SecretReferenceResponse `json:"referenced_by"`
	} `json:"attributes"`
}

type SemanticRouterAttributes struct {
	Name        string `json:"name"`
	Slug        string `json:"slug"`
	Description string `json:"description"`
	// Active is the live switch. Omitted = inactive on create, unchanged on
	// update. Setting it needs semantic-routers:publish.
	Active    *bool  `json:"active"`
	Namespace string `json:"namespace"`
	// Portal presentation (the router is published in LLM catalogues).
	ShortDescription string `json:"short_description"`
	LongDescription  string `json:"long_description"`
	LogoURL          string `json:"logo_url"`

	Settings sr.Settings `json:"settings"`
	Routes   []sr.Route  `json:"routes"`

	// EmbedderID is the embedder of the embedding stage (0 or omitted: none).
	// A settings.embedding naming an LLM ({llm_id, model}) is still accepted
	// and saved as the embedder linked to that LLM with that model.
	EmbedderID *uint `json:"embedder_id"`
}

type SemanticRouterInput struct {
	Data struct {
		Type       string                   `json:"type"`
		Attributes SemanticRouterAttributes `json:"attributes"`
	} `json:"data"`
}

type SemanticRouterTestInput struct {
	Messages []SemanticRouterTestMessage `json:"messages" binding:"required"`
	Model    string                      `json:"model"`
	// Router is the draft to test (POST /semantic-routers/test only).
	Router *SemanticRouterAttributes `json:"router,omitempty"`
}

type SemanticRouterTestMessage struct {
	Role    string `json:"role"`
	Content string `json:"content"`
}

type SessionHub struct {
	// contains filtered or unexported fields
}

type SimplifiedDataSourceResponse struct {
	ID   uint   `json:"id"`
	Name string `json:"name"`
}

type SimplifiedToolResponse struct {
	ID   uint   `json:"id"`
	Name string `json:"name"`
}

type SubmissionInput struct {
	Data struct {
		Attributes struct {
			ResourceType         string         `json:"resource_type"`
			PluginResourceTypeID *uint          `json:"plugin_resource_type_id"` // required when resource_type == "plugin"
			Status               string         `json:"status"`                  // draft or submitted
			ResourcePayload      models.JSONMap `json:"resource_payload"`
			Attestations         models.JSONMap `json:"attestations"`
			SuggestedPrivacy     int            `json:"suggested_privacy"`
			PrivacyJustification string         `json:"privacy_justification"`
			PrimaryContact       string         `json:"primary_contact"`
			SecondaryContact     string         `json:"secondary_contact"`
			SLAExpectation       string         `json:"sla_expectation"`
			DataCutoffDate       *string        `json:"data_cutoff_date"` // ISO 8601 string
			DocumentationURL     string         `json:"documentation_url"`
			Notes                string         `json:"notes"`
		} `json:"attributes"`
	} `json:"data"`
}

type SubmitConsentInput struct {
	AuthRequestID string `json:"auth_req_id" form:"auth_req_id" binding:"required"`
	Decision      string `json:"decision" form:"decision" binding:"required"`
	SelectedAppID uint   `json:"selected_app_id" form:"selected_app_id"`
}

type SuccessResponse struct {
	Message string `json:"message"`
}

type SyncStatusHandlers struct {
	// contains filtered or unexported fields
}

type TagInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name string `json:"name"`
		} `json:"attributes"`
	} `json:"data"`
}

type TagResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name string `json:"name"`
	} `json:"attributes"`
}

type TeamBudgetSettingsBody struct {
	Enabled bool `json:"enabled"`
}

type ToolCatalogueInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name             string `json:"name"`
			ShortDescription string `json:"short_description"`
			LongDescription  string `json:"long_description"`
			Icon             string `json:"icon"`
		} `json:"attributes"`
	} `json:"data"`
}

type ToolCatalogueResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Name             string         `json:"name"`
		ShortDescription string         `json:"short_description"`
		LongDescription  string         `json:"long_description"`
		Icon             string         `json:"icon"`
		Tools            []ToolResponse `json:"tools"`
		Tags             []TagResponse  `json:"tags"`
	} `json:"attributes"`
}

type ToolCatalogueTagInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type ToolCatalogueToolInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type ToolGatewayAccess struct {
	// Slug is the path segment the gateway serves the tool under. It is
	// computed server-side (with transliteration), so clients must not derive
	// it from the name.
	Slug string `json:"slug"`
	// Access methods. Chat is always available and is not listed.
	// AppGrantable is false for a chat-only tool, which cannot be bound to an
	// App.
	RESTAccessEnabled bool `json:"rest_access_enabled"`
	MCPAccessEnabled  bool `json:"mcp_access_enabled"`
	AppGrantable      bool `json:"app_grantable"`
	// Gateway URLs of the two access methods, built from TOOL_DISPLAY_URL (or
	// PROXY_URL) and the slug. Empty for client tools and when no base URL is
	// configured. They say where a method is served, not whether it is on.
	RESTEndpointURL string `json:"rest_endpoint_url"`
	MCPEndpointURL  string `json:"mcp_endpoint_url"`
}

type ToolImportConnection struct {
	ID             uint   `json:"id"`
	Name           string `json:"name"`
	DashboardURL   string `json:"dashboard_url"`
	Status         string `json:"status"`
	Degraded       bool   `json:"degraded"`
	DegradedReason string `json:"degraded_reason,omitempty"`
	EffectiveMode  string `json:"effective_mode"`
	// APIsRead is the probed state of the apis_read capability
	// (ok | denied | unverified | no), empty when never probed.
	APIsRead string `json:"apis_read"`
}

type ToolInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Name        string `json:"name"`
			Description string `json:"description"`
			ToolType    string `json:"tool_type"`
			// OASSpec must be the base64 encoding of the UTF-8 OpenAPI
			// document. Raw JSON or YAML is rejected with a 400.
			OASSpec        string   `json:"oas_spec"`
			PrivacyScore   int      `json:"privacy_score"`
			AuthKey        string   `json:"auth_key"`
			AuthSchemaName string   `json:"auth_schema_name"`
			Operations     []string `json:"operations"`
			Namespace      string   `json:"namespace"`
			// Active is the live switch. Omitted = unchanged on update, live on
			// create (unless the caller lacks tools:publish, in which case the
			// tool is created inactive). Setting it needs tools:publish.
			Active *bool `json:"active,omitempty"`
			// Access methods. Omitted = unchanged on update; on create a new
			// tool is chat only (both off). Not accepted on client tools.
			RESTAccessEnabled *bool `json:"rest_access_enabled,omitempty"`
			MCPAccessEnabled  *bool `json:"mcp_access_enabled,omitempty"`
			// Governed metadata (Enterprise). nil = untouched; {} = clear.
			GovernedMetadata *map[string]interface{} `json:"governed_metadata,omitempty"`
		} `json:"attributes"`
	} `json:"data"`
}

type ToolResponse struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	// Governed metadata (Enterprise); see LLMResponse.
	GovernedMetadata       interface{}            `json:"governed_metadata,omitempty"`
	GovernedMetadataStatus string                 `json:"governed_metadata_status,omitempty"`
	Attributes             ToolResponseAttributes `json:"attributes"`
}

type ToolResponseAttributes struct {
	Name           string              `json:"name"`
	Description    string              `json:"description"`
	ToolType       string              `json:"tool_type"`
	OASSpec        string              `json:"oas_spec"`
	PrivacyScore   int                 `json:"privacy_score"`
	Operations     []string            `json:"operations"`
	AuthKey        string              `json:"auth_key"`
	HasAuthKey     bool                `json:"has_auth_key"`
	AuthSchemaName string              `json:"auth_schema_name"`
	Active         bool                `json:"active"`
	Namespace      string              `json:"namespace"`
	FileStores     []FileStoreResponse `json:"file_stores"`
	Filters        []FilterResponse    `json:"filters"`
	Dependencies   []ToolResponse      `json:"dependencies"`

	// Flattened into the attributes; see toolGatewayAccess.
	ToolGatewayAccess
}

type UpdateBrandingSettingsRequest struct {
	AppTitle        *string `json:"app_title"`
	PrimaryColor    *string `json:"primary_color"`
	SecondaryColor  *string `json:"secondary_color"`
	BackgroundColor *string `json:"background_color"`
	CustomCSS       *string `json:"custom_css"`
}

type UpdateSubmissionInput struct {
	Data struct {
		Attributes struct {
			ResourceType         string         `json:"resource_type"`
			TargetResourceID     uint           `json:"target_resource_id"`
			Status               string         `json:"status"`
			ResourcePayload      models.JSONMap `json:"resource_payload"`
			Attestations         models.JSONMap `json:"attestations"`
			SuggestedPrivacy     int            `json:"suggested_privacy"`
			PrivacyJustification string         `json:"privacy_justification"`
			PrimaryContact       string         `json:"primary_contact"`
			SecondaryContact     string         `json:"secondary_contact"`
			SLAExpectation       string         `json:"sla_expectation"`
			DataCutoffDate       *string        `json:"data_cutoff_date"`
			DocumentationURL     string         `json:"documentation_url"`
			Notes                string         `json:"notes"`
		} `json:"attributes"`
	} `json:"data"`
}

type UserAccessibleCataloguesResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Catalogues []CatalogueResponse `json:"catalogues"`
	} `json:"attributes"`
}

type UserAttributes struct {
	Email                string             `json:"email"`
	Name                 string             `json:"name"`
	IsAdmin              bool               `json:"is_admin"`
	ShowChat             bool               `json:"show_chat"`
	ShowPortal           bool               `json:"show_portal"`
	EmailVerified        bool               `json:"email_verified"`
	APIKey               string             `json:"api_key,omitempty"`
	APIKeyHint           string             `json:"api_key_hint,omitempty"`
	HasAPIKey            bool               `json:"has_api_key"`
	NotificationsEnabled bool               `json:"notifications_enabled"`
	AccessToSSOConfig    bool               `json:"access_to_sso_config"`
	Role                 string             `json:"role"`
	Groups               []GroupResponse    `json:"groups,omitempty"`
	Roles                []rbac.RoleSummary `json:"roles,omitempty"`

	// Provenance and activity. auth_source is local | admin | sso | host;
	// sso_profile_id names the identity provider profile that provisioned
	// (or last signed in) the user.
	AuthSource       string     `json:"auth_source"`
	SSOProfileID     string     `json:"sso_profile_id,omitempty"`
	LastLoginAt      *time.Time `json:"last_login_at,omitempty"`
	LastLoginMethod  string     `json:"last_login_method,omitempty"`
	APIKeyLastUsedAt *time.Time `json:"api_key_last_used_at,omitempty"`

	// Account switch. A disabled user cannot authenticate by any means.
	Disabled   bool       `json:"disabled"`
	DisabledAt *time.Time `json:"disabled_at,omitempty"`

	// BudgetTeamID is the team the user's new Apps and chat spend are
	// attributed to (Enterprise team budgets); null = resolved automatically.
	BudgetTeamID *uint `json:"budget_team_id"`
}

type UserBudgetTeamBody struct {
	TeamID *uint `json:"team_id"`
}

type UserGroupInput struct {
	Data struct {
		Type string `json:"type"`
		ID   string `json:"id"`
	} `json:"data"`
}

type UserInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Email                string `json:"email"`
			Name                 string `json:"name"`
			Password             string `json:"password,omitempty"`
			IsAdmin              *bool  `json:"is_admin"` // omitted means unchanged; roles are the source of truth in Enterprise
			ShowChat             bool   `json:"show_chat"`
			ShowPortal           bool   `json:"show_portal"`
			EmailVerified        bool   `json:"email_verified"`
			NotificationsEnabled bool   `json:"notifications_enabled"`
			AccessToSSOConfig    bool   `json:"access_to_sso_config"`
			Groups               []uint `json:"groups"`
		} `json:"attributes"`
	} `json:"data"`
}

type UserResponse struct {
	Type       string         `json:"type"`
	ID         string         `json:"id"`
	Attributes UserAttributes `json:"attributes"`
}

type UserWithEntitlementsResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Email        string `json:"email"`
		Name         string `json:"name"`
		IsAdmin      bool   `json:"is_admin"`
		IsSuperAdmin bool   `json:"is_super_admin"`
		// HasAdminAccess is true when the user holds at least one permission
		// and may therefore open the administration surface.
		HasAdminAccess bool `json:"has_admin_access"`
		// Permissions is the effective permission set; ["*"] for full admins.
		Permissions []string `json:"permissions"`
		// Roles lists the roles behind the permissions (Enterprise only).
		Roles []rbac.RoleSummary `json:"roles"`
		// RBACEnabled reports whether fine-grained roles are active.
		RBACEnabled bool `json:"rbac_enabled"`

		// Profile fields for the signed-in user's own menu. AccountType is
		// the legacy role label the users list shows as "role"; the key
		// itself is never included here (see POST /common/me/api-key/roll).
		AccountType               string     `json:"account_type"`
		AuthSource                string     `json:"auth_source"`
		HasAPIKey                 bool       `json:"has_api_key"`
		APIKeyLastUsedAt          *time.Time `json:"api_key_last_used_at"`
		NotificationsEnabled      bool       `json:"notifications_enabled"`
		EmailNotificationsEnabled bool       `json:"email_notifications_enabled"`
		// SSOAPIKeysAllowed is whether this user may hold an API key under
		// the ALLOW_SSO_USER_API_KEYS policy (always true for non-SSO users).
		SSOAPIKeysAllowed bool `json:"sso_api_keys_allowed"`

		UIOptions struct {
			ShowChat       bool `json:"show_chat"`
			ShowPortal     bool `json:"show_portal"`
			ShowSSOConfig  bool `json:"show_sso_config"`
			SkipQuickStart bool `json:"skip_quick_start"`
		} `json:"ui_options"`
		Entitlements struct {
			Catalogues     []CatalogueResponse     `json:"catalogues"`
			DataCatalogues []DataCatalogueResponse `json:"data_catalogues"`
			ToolCatalogues []ToolCatalogueResponse `json:"tool_catalogues"`
			Chats          []ChatResponse          `json:"chats"`
		} `json:"entitlements"`
	} `json:"attributes"`
}

type V2ChatSummary struct {
	ID              uint                    `json:"id"`
	Name            string                  `json:"name"`
	Description     string                  `json:"description"`
	ToolSupport     bool                    `json:"tool_support"`
	PromptTemplates []models.PromptTemplate `json:"prompt_templates"`
}

type V2ClientToolInfo struct {
	Name        string          `json:"name"`
	Description string          `json:"description"`
	Schema      json.RawMessage `json:"schema"`
	UI          json.RawMessage `json:"ui,omitempty"`
}

type V2Message struct {
	ID        string    `json:"id"`
	Role      string    `json:"role"` // "user" | "assistant"
	Parts     []V2Part  `json:"parts"`
	CreatedAt time.Time `json:"created_at"`
}

type V2Part struct {
	Type string `json:"type"`

	// text
	Text string `json:"text,omitempty"`

	// tool-call
	ToolCallID string          `json:"toolCallId,omitempty"`
	ToolName   string          `json:"toolName,omitempty"`
	ArgsText   string          `json:"argsText,omitempty"`
	Args       json.RawMessage `json:"args,omitempty"`
	Result     json.RawMessage `json:"result,omitempty"`
	IsError    bool            `json:"isError,omitempty"`

	// data
	Name string          `json:"name,omitempty"`
	Data json.RawMessage `json:"data,omitempty"`
}

type V2RunRequest struct {
	Message        string         `json:"message"`
	FileRefs       []string       `json:"file_refs"`
	Regenerate     bool           `json:"regenerate"`
	AfterMessageID *string        `json:"after_message_id"`
	ToolResults    []V2ToolResult `json:"tool_results"`
}

type V2SessionResponse struct {
	SessionID   string             `json:"session_id"`
	Tools       []V2ToolSummary    `json:"tools"`
	Datasources []V2SourceSummary  `json:"datasources"`
	ClientTools []V2ClientToolInfo `json:"client_tools"`
	// PendingToolCallIDs lists client tool calls still waiting for an answer
	// when a session is resumed, so the UI can offer them again.
	PendingToolCallIDs []string      `json:"pending_tool_call_ids,omitempty"`
	Chat               V2ChatSummary `json:"chat"`
}

type V2SourceSummary struct {
	ID               uint   `json:"id"`
	Name             string `json:"name"`
	ShortDescription string `json:"short_description"`
}

type V2ToolResult struct {
	ToolCallID string          `json:"tool_call_id"`
	Result     json.RawMessage `json:"result"`
	IsError    bool            `json:"is_error"`
}

type V2ToolSummary struct {
	ID          uint   `json:"id"`
	Name        string `json:"name"`
	Description string `json:"description"`
	ToolType    string `json:"tool_type"`
}

type ValidateAndLoadResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Command      string                 `json:"command"`
		HookTypes    []string               `json:"hook_types"`
		PrimaryHook  string                 `json:"primary_hook"`
		ConfigSchema map[string]interface{} `json:"config_schema,omitempty"`
		Manifest     map[string]interface{} `json:"manifest,omitempty"`
		Scopes       []string               `json:"scopes"`
		Status       string                 `json:"status"`
		LoadedAt     string                 `json:"loaded_at"`
	} `json:"attributes"`
}

type ValidateMetadataInput struct {
	ObjectType string                 `json:"object_type"`
	Values     map[string]interface{} `json:"values"`
}

type VendorListResponse struct {
	Data []string `json:"data"`
}

type VerifyEmailInput struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Token string `json:"token"`
		} `json:"attributes"`
	} `json:"data"`
}

type VerifyEmailResponse struct {
	Data struct {
		Type       string `json:"type"`
		Attributes struct {
			Message string `json:"message"`
		} `json:"attributes"`
	} `json:"data"`
}

type WorkflowStatusResponse struct {
	Type       string `json:"type"`
	ID         string `json:"id"`
	Attributes struct {
		Status                  string   `json:"status"`
		ServiceScopes           []string `json:"service_scopes"`
		ServiceAccessAuthorized bool     `json:"service_access_authorized"`
		RequiresApproval        bool     `json:"requires_approval"`
		LastManifestLoadedAt    string   `json:"last_manifest_loaded_at,omitempty"`
	} `json:"attributes"`
}