model

type Credential struct {
	// ID uniquely identifies the credential.
	ID string `json:"id"`
	// ProviderType is the upstream provider type/key (e.g. "openai", "anthropic").
	ProviderType string `json:"provider_type"`
	// ProviderID identifies the concrete provider instance this credential belongs to.
	ProviderID string `json:"provider_id"`
	// Type identifies the credential kind (e.g. api_key, oauth_token).
	Type string `json:"type"`
	// Label is a human-readable label for logging and display.
	Label string `json:"label,omitempty"`
	// Scope controls scheduler matching for this credential.
	Scope string `json:"scope,omitempty"`
	// Attributes stores provider-specific configuration (e.g. api_key, base_url, priority).
	Attributes map[string]string `json:"attributes,omitempty"`
	// Metadata stores runtime mutable provider state (e.g. tokens, cookies).
	Metadata map[string]any `json:"metadata,omitempty"`
	// Disabled marks the credential as intentionally excluded from scheduling.
	Disabled bool `json:"disabled,omitempty"`
	// CreatedAt is the creation timestamp.
	CreatedAt time.Time `json:"created_at"`
	// UpdatedAt is the last modification timestamp.
	UpdatedAt time.Time `json:"updated_at"`
}

type Error struct {
	Code       string `json:"code,omitempty"`
	Message    string `json:"message"`
	Retryable  bool   `json:"retryable"`
	HTTPStatus int    `json:"http_status,omitempty"`
}

type ManagedCredential struct {
	Credential
	// Unavailable flags transient provider unavailability (e.g. quota exceeded).
	Unavailable bool `json:"unavailable,omitempty"`
	// CredentialWideUnavailable flags a transient block across every model.
	CredentialWideUnavailable bool `json:"credential_wide_unavailable,omitempty"`
	// CredentialWideNextRetryAfter bounds a credential-wide transient block.
	CredentialWideNextRetryAfter time.Time `json:"credential_wide_next_retry_after,omitempty"`
	// NextRetryAfter is the earliest time a retry should be attempted.
	NextRetryAfter time.Time `json:"next_retry_after,omitempty"`
	// Quota captures recent quota information for load-balancing decisions.
	Quota QuotaState `json:"quota"`
	// LastError records the last failure encountered.
	LastError *Error `json:"last_error,omitempty"`
	// ModelStates tracks per-model runtime availability data.
	ModelStates map[string]*ModelState `json:"model_states,omitempty"`
	// AuthInvalid flags credentials rejected by upstream authentication (e.g. 401/403).
	AuthInvalid bool `json:"auth_invalid,omitempty"`
	// StateUpdatedAt is the last runtime-state update timestamp.
	StateUpdatedAt time.Time `json:"state_updated_at,omitempty"`
}

type ModelState struct {
	// Unavailable flags transient unavailability for this model.
	Unavailable bool `json:"unavailable,omitempty"`
	// NextRetryAfter is the earliest time this model may be retried.
	NextRetryAfter time.Time `json:"next_retry_after,omitempty"`
	// LastError records the latest error observed for this model.
	LastError *Error `json:"last_error,omitempty"`
	// Quota retains quota information if this model hit rate limits.
	Quota QuotaState `json:"quota"`
	// AuthInvalid flags model-specific authentication failure state.
	AuthInvalid bool `json:"auth_invalid,omitempty"`
	// UpdatedAt tracks the last update timestamp.
	UpdatedAt time.Time `json:"updated_at"`
}

type QuotaState struct {
	Exceeded      bool      `json:"exceeded"`
	Reason        string    `json:"reason,omitempty"`
	NextRecoverAt time.Time `json:"next_recover_at,omitempty"`
	BackoffLevel  int       `json:"backoff_level,omitempty"`
}