proto

type AIProvider struct {
	Name    string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Type    string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	Enabled bool   `protobuf:"varint,3,opt,name=enabled,proto3" json:"enabled,omitempty"`
	BaseUrl string `protobuf:"bytes,4,opt,name=base_url,json=baseUrl,proto3" json:"base_url,omitempty"`
	// keys carries bearer API keys, populated only for enabled providers.
	Keys []string `protobuf:"bytes,5,rep,name=keys,proto3" json:"keys,omitempty"`
	// bedrock is populated when the provider's settings include Bedrock
	// credentials (regardless of provider type).
	Bedrock *AIProviderKindBedrock `protobuf:"bytes,6,opt,name=bedrock,proto3" json:"bedrock,omitempty"`
	// contains filtered or unexported fields
}

type AIProviderKindBedrock struct {
	Region          string `protobuf:"bytes,1,opt,name=region,proto3" json:"region,omitempty"`
	AccessKey       string `protobuf:"bytes,2,opt,name=access_key,json=accessKey,proto3" json:"access_key,omitempty"`
	AccessKeySecret string `protobuf:"bytes,3,opt,name=access_key_secret,json=accessKeySecret,proto3" json:"access_key_secret,omitempty"`
	Model           string `protobuf:"bytes,4,opt,name=model,proto3" json:"model,omitempty"`
	SmallFastModel  string `protobuf:"bytes,5,opt,name=small_fast_model,json=smallFastModel,proto3" json:"small_fast_model,omitempty"`
	RoleArn         string `protobuf:"bytes,6,opt,name=role_arn,json=roleArn,proto3" json:"role_arn,omitempty"`
	ExternalId      string `protobuf:"bytes,7,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
	// protocol selects the Bedrock wire protocol ("invoke-model" or "mantle").
	// Empty falls back to invoke-model.
	Protocol string `protobuf:"bytes,8,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// contains filtered or unexported fields
}

type DRPCAuthorizerClient interface {
	DRPCConn() drpc.Conn

	IsAuthorized(ctx context.Context, in *IsAuthorizedRequest) (*IsAuthorizedResponse, error)
	IsBudgetExceeded(ctx context.Context, in *IsBudgetExceededRequest) (*IsBudgetExceededResponse, error)
}

type DRPCAuthorizerDescription struct{}

type DRPCAuthorizerServer interface {
	IsAuthorized(context.Context, *IsAuthorizedRequest) (*IsAuthorizedResponse, error)
	IsBudgetExceeded(context.Context, *IsBudgetExceededRequest) (*IsBudgetExceededResponse, error)
}

type DRPCAuthorizerUnimplementedServer struct{}

type DRPCAuthorizer_IsAuthorizedStream interface {
	drpc.Stream
	SendAndClose(*IsAuthorizedResponse) error
}

type DRPCAuthorizer_IsBudgetExceededStream interface {
	drpc.Stream
	SendAndClose(*IsBudgetExceededResponse) error
}

type DRPCMCPConfiguratorClient interface {
	DRPCConn() drpc.Conn

	GetMCPServerConfigs(ctx context.Context, in *GetMCPServerConfigsRequest) (*GetMCPServerConfigsResponse, error)
	GetMCPServerAccessTokensBatch(ctx context.Context, in *GetMCPServerAccessTokensBatchRequest) (*GetMCPServerAccessTokensBatchResponse, error)
}

type DRPCMCPConfiguratorDescription struct{}

type DRPCMCPConfiguratorServer interface {
	GetMCPServerConfigs(context.Context, *GetMCPServerConfigsRequest) (*GetMCPServerConfigsResponse, error)
	GetMCPServerAccessTokensBatch(context.Context, *GetMCPServerAccessTokensBatchRequest) (*GetMCPServerAccessTokensBatchResponse, error)
}

type DRPCMCPConfiguratorUnimplementedServer struct{}

type DRPCMCPConfigurator_GetMCPServerAccessTokensBatchStream interface {
	drpc.Stream
	SendAndClose(*GetMCPServerAccessTokensBatchResponse) error
}

type DRPCMCPConfigurator_GetMCPServerConfigsStream interface {
	drpc.Stream
	SendAndClose(*GetMCPServerConfigsResponse) error
}

type DRPCProviderConfiguratorClient interface {
	DRPCConn() drpc.Conn

	GetAIProviders(ctx context.Context, in *GetAIProvidersRequest) (*GetAIProvidersResponse, error)
	WatchAIProviders(ctx context.Context, in *WatchAIProvidersRequest) (DRPCProviderConfigurator_WatchAIProvidersClient, error)
}

type DRPCProviderConfiguratorDescription struct{}

type DRPCProviderConfiguratorServer interface {
	GetAIProviders(context.Context, *GetAIProvidersRequest) (*GetAIProvidersResponse, error)
	WatchAIProviders(*WatchAIProvidersRequest, DRPCProviderConfigurator_WatchAIProvidersStream) error
}

type DRPCProviderConfiguratorUnimplementedServer struct{}

type DRPCProviderConfigurator_GetAIProvidersStream interface {
	drpc.Stream
	SendAndClose(*GetAIProvidersResponse) error
}

type DRPCProviderConfigurator_WatchAIProvidersClient interface {
	drpc.Stream
	Recv() (*WatchAIProvidersResponse, error)
}

type DRPCProviderConfigurator_WatchAIProvidersStream interface {
	drpc.Stream
	Send(*WatchAIProvidersResponse) error
}

type DRPCRecorderClient interface {
	DRPCConn() drpc.Conn

	RecordInterception(ctx context.Context, in *RecordInterceptionRequest) (*RecordInterceptionResponse, error)
	RecordInterceptionEnded(ctx context.Context, in *RecordInterceptionEndedRequest) (*RecordInterceptionEndedResponse, error)
	RecordTokenUsage(ctx context.Context, in *RecordTokenUsageRequest) (*RecordTokenUsageResponse, error)
	RecordPromptUsage(ctx context.Context, in *RecordPromptUsageRequest) (*RecordPromptUsageResponse, error)
	RecordToolUsage(ctx context.Context, in *RecordToolUsageRequest) (*RecordToolUsageResponse, error)
	RecordModelThought(ctx context.Context, in *RecordModelThoughtRequest) (*RecordModelThoughtResponse, error)
}

type DRPCRecorderDescription struct{}

type DRPCRecorderServer interface {
	RecordInterception(context.Context, *RecordInterceptionRequest) (*RecordInterceptionResponse, error)
	RecordInterceptionEnded(context.Context, *RecordInterceptionEndedRequest) (*RecordInterceptionEndedResponse, error)
	RecordTokenUsage(context.Context, *RecordTokenUsageRequest) (*RecordTokenUsageResponse, error)
	RecordPromptUsage(context.Context, *RecordPromptUsageRequest) (*RecordPromptUsageResponse, error)
	RecordToolUsage(context.Context, *RecordToolUsageRequest) (*RecordToolUsageResponse, error)
	RecordModelThought(context.Context, *RecordModelThoughtRequest) (*RecordModelThoughtResponse, error)
}

type DRPCRecorderUnimplementedServer struct{}

type DRPCRecorder_RecordInterceptionEndedStream interface {
	drpc.Stream
	SendAndClose(*RecordInterceptionEndedResponse) error
}

type DRPCRecorder_RecordInterceptionStream interface {
	drpc.Stream
	SendAndClose(*RecordInterceptionResponse) error
}

type DRPCRecorder_RecordModelThoughtStream interface {
	drpc.Stream
	SendAndClose(*RecordModelThoughtResponse) error
}

type DRPCRecorder_RecordPromptUsageStream interface {
	drpc.Stream
	SendAndClose(*RecordPromptUsageResponse) error
}

type DRPCRecorder_RecordTokenUsageStream interface {
	drpc.Stream
	SendAndClose(*RecordTokenUsageResponse) error
}

type DRPCRecorder_RecordToolUsageStream interface {
	drpc.Stream
	SendAndClose(*RecordToolUsageResponse) error
}

type GetAIProvidersRequest struct {
	// contains filtered or unexported fields
}

type GetAIProvidersResponse struct {
	Providers []*AIProvider `protobuf:"bytes,1,rep,name=providers,proto3" json:"providers,omitempty"`
	// contains filtered or unexported fields
}

type GetMCPServerAccessTokensBatchRequest struct {
	UserId             string   `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"` // UUID.
	McpServerConfigIds []string `protobuf:"bytes,2,rep,name=mcp_server_config_ids,json=mcpServerConfigIds,proto3" json:"mcp_server_config_ids,omitempty"`
	// contains filtered or unexported fields
}

type GetMCPServerAccessTokensBatchResponse struct {
	AccessTokens map[string]string `` /* 185-byte string literal not displayed */
	Errors       map[string]string `` /* 153-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetMCPServerConfigsRequest struct {
	UserId string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"` // UUID. // Not used yet, will be necessary for later RBAC purposes.
	// contains filtered or unexported fields
}

type GetMCPServerConfigsResponse struct {
	CoderMcpConfig         *MCPServerConfig   `protobuf:"bytes,1,opt,name=coder_mcp_config,json=coderMcpConfig,proto3" json:"coder_mcp_config,omitempty"`
	ExternalAuthMcpConfigs []*MCPServerConfig `` /* 131-byte string literal not displayed */
	// contains filtered or unexported fields
}

type IsAuthorizedRequest struct {

	// key is the full "<id>-<secret>" API token presented over HTTP.
	// Mutually exclusive with key_id.
	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	// key_id authenticates a request without the secret. Used for delegated
	// calls from in-process callers (e.g., chatd) that have already
	// established the user's identity out-of-band and have only the API key
	// ID, not the secret. When set, the server validates only that the key
	// exists, has not expired, and belongs to a non-deleted non-system user.
	// Mutually exclusive with key.
	KeyId string `protobuf:"bytes,2,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"`
	// contains filtered or unexported fields
}

type IsAuthorizedResponse struct {
	OwnerId  string `protobuf:"bytes,1,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
	ApiKeyId string `protobuf:"bytes,2,opt,name=api_key_id,json=apiKeyId,proto3" json:"api_key_id,omitempty"`
	Username string `protobuf:"bytes,3,opt,name=username,proto3" json:"username,omitempty"`
	// contains filtered or unexported fields
}

type IsBudgetExceededRequest struct {
	UserId string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"` // UUID
	// contains filtered or unexported fields
}

type IsBudgetExceededResponse struct {

	// exceeded is true when the user's aggregated spend has reached the
	// effective limit. False when no budget is configured for the user OR
	// they are within their limit.
	Exceeded bool `protobuf:"varint,1,opt,name=exceeded,proto3" json:"exceeded,omitempty"`
	// spend_limit_micros is the effective spend limit in micro-units.
	// Unset when no budget is configured for the user (unlimited).
	// 0 when a group is explicitly configured with a 0 limit (blocked).
	SpendLimitMicros *int64 `protobuf:"varint,2,opt,name=spend_limit_micros,json=spendLimitMicros,proto3,oneof" json:"spend_limit_micros,omitempty"`
	// contains filtered or unexported fields
}

type MCPServerConfig struct {
	Id             string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"` // Maps to the ID of the External Auth; this ID is unique.
	Url            string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	ToolAllowRegex string `protobuf:"bytes,3,opt,name=tool_allow_regex,json=toolAllowRegex,proto3" json:"tool_allow_regex,omitempty"`
	ToolDenyRegex  string `protobuf:"bytes,4,opt,name=tool_deny_regex,json=toolDenyRegex,proto3" json:"tool_deny_regex,omitempty"`
	// contains filtered or unexported fields
}

type RecordInterceptionEndedRequest struct {
	Id             string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"` // UUID.
	EndedAt        *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=ended_at,json=endedAt,proto3" json:"ended_at,omitempty"`
	CredentialHint string                 `protobuf:"bytes,3,opt,name=credential_hint,json=credentialHint,proto3" json:"credential_hint,omitempty"`
	// error_type is the categorised terminal upstream error, absent when the
	// interception succeeded. Matches the aibridge_interception_error_type enum.
	ErrorType *string `protobuf:"bytes,4,opt,name=error_type,json=errorType,proto3,oneof" json:"error_type,omitempty"`
	// error_message is the raw terminal upstream error message, absent when the
	// interception succeeded.
	ErrorMessage *string `protobuf:"bytes,5,opt,name=error_message,json=errorMessage,proto3,oneof" json:"error_message,omitempty"`
	// contains filtered or unexported fields
}

type RecordInterceptionEndedResponse struct {
	// contains filtered or unexported fields
}

type RecordInterceptionRequest struct {
	Id                    string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`                                      // UUID.
	InitiatorId           string                 `protobuf:"bytes,2,opt,name=initiator_id,json=initiatorId,proto3" json:"initiator_id,omitempty"` // UUID.
	Provider              string                 `protobuf:"bytes,3,opt,name=provider,proto3" json:"provider,omitempty"`
	Model                 string                 `protobuf:"bytes,4,opt,name=model,proto3" json:"model,omitempty"`
	Metadata              map[string]*anypb.Any  `` /* 157-byte string literal not displayed */
	StartedAt             *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=started_at,json=startedAt,proto3" json:"started_at,omitempty"`
	ApiKeyId              string                 `protobuf:"bytes,7,opt,name=api_key_id,json=apiKeyId,proto3" json:"api_key_id,omitempty"`
	Client                string                 `protobuf:"bytes,8,opt,name=client,proto3" json:"client,omitempty"`
	UserAgent             string                 `protobuf:"bytes,9,opt,name=user_agent,json=userAgent,proto3" json:"user_agent,omitempty"`
	CorrelatingToolCallId *string                `` /* 135-byte string literal not displayed */
	ClientSessionId       *string                `protobuf:"bytes,11,opt,name=client_session_id,json=clientSessionId,proto3,oneof" json:"client_session_id,omitempty"`
	ProviderName          string                 `protobuf:"bytes,12,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	CredentialKind        string                 `protobuf:"bytes,13,opt,name=credential_kind,json=credentialKind,proto3" json:"credential_kind,omitempty"`
	CredentialHint        string                 `protobuf:"bytes,14,opt,name=credential_hint,json=credentialHint,proto3" json:"credential_hint,omitempty"`
	// Agent Firewall session UUID linking this interception to an Agent Firewall
	// session. Populated only when the request passed through an Agent Firewall proxy.
	AgentFirewallSessionId *string `` /* 138-byte string literal not displayed */
	// Monotonically increasing sequence number assigned by Agent Firewall,
	// used to order network requests relative to Agent Firewall audit events.
	// Absent when the request did not pass through Agent Firewall.
	AgentFirewallSequenceNumber *int32 `` /* 154-byte string literal not displayed */
	// contains filtered or unexported fields
}

type RecordInterceptionResponse struct {
	// contains filtered or unexported fields
}

type RecordModelThoughtRequest struct {
	InterceptionId string                 `protobuf:"bytes,1,opt,name=interception_id,json=interceptionId,proto3" json:"interception_id,omitempty"` // UUID.
	Content        string                 `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"`
	Metadata       map[string]*anypb.Any  `` /* 157-byte string literal not displayed */
	CreatedAt      *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type RecordModelThoughtResponse struct {
	// contains filtered or unexported fields
}

type RecordPromptUsageRequest struct {
	InterceptionId string                 `protobuf:"bytes,1,opt,name=interception_id,json=interceptionId,proto3" json:"interception_id,omitempty"` // UUID.
	MsgId          string                 `protobuf:"bytes,2,opt,name=msg_id,json=msgId,proto3" json:"msg_id,omitempty"`                            // ID provided by provider.
	Prompt         string                 `protobuf:"bytes,3,opt,name=prompt,proto3" json:"prompt,omitempty"`
	Metadata       map[string]*anypb.Any  `` /* 157-byte string literal not displayed */
	CreatedAt      *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type RecordPromptUsageResponse struct {
	// contains filtered or unexported fields
}

type RecordTokenUsageRequest struct {
	InterceptionId        string                 `protobuf:"bytes,1,opt,name=interception_id,json=interceptionId,proto3" json:"interception_id,omitempty"` // UUID.
	MsgId                 string                 `protobuf:"bytes,2,opt,name=msg_id,json=msgId,proto3" json:"msg_id,omitempty"`                            // ID provided by provider.
	InputTokens           int64                  `protobuf:"varint,3,opt,name=input_tokens,json=inputTokens,proto3" json:"input_tokens,omitempty"`
	OutputTokens          int64                  `protobuf:"varint,4,opt,name=output_tokens,json=outputTokens,proto3" json:"output_tokens,omitempty"`
	Metadata              map[string]*anypb.Any  `` /* 157-byte string literal not displayed */
	CreatedAt             *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	CacheReadInputTokens  int64                  `` /* 126-byte string literal not displayed */
	CacheWriteInputTokens int64                  `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

type RecordTokenUsageResponse struct {
	// contains filtered or unexported fields
}

type RecordToolUsageRequest struct {
	InterceptionId  string                 `protobuf:"bytes,1,opt,name=interception_id,json=interceptionId,proto3" json:"interception_id,omitempty"` // UUID.
	MsgId           string                 `protobuf:"bytes,2,opt,name=msg_id,json=msgId,proto3" json:"msg_id,omitempty"`                            // ID provided by provider.
	ServerUrl       *string                `protobuf:"bytes,3,opt,name=server_url,json=serverUrl,proto3,oneof" json:"server_url,omitempty"`          // The URL of the MCP server.
	Tool            string                 `protobuf:"bytes,4,opt,name=tool,proto3" json:"tool,omitempty"`
	Input           string                 `protobuf:"bytes,5,opt,name=input,proto3" json:"input,omitempty"`
	Injected        bool                   `protobuf:"varint,6,opt,name=injected,proto3" json:"injected,omitempty"`
	InvocationError *string                `protobuf:"bytes,7,opt,name=invocation_error,json=invocationError,proto3,oneof" json:"invocation_error,omitempty"` // Only injected tools are invoked.
	Metadata        map[string]*anypb.Any  ``                                                                                                                 /* 157-byte string literal not displayed */
	CreatedAt       *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	ToolCallId      string                 `protobuf:"bytes,10,opt,name=tool_call_id,json=toolCallId,proto3" json:"tool_call_id,omitempty"` // The ID of the tool call provided by the AI provider.
	// Specific to the OpenAI Responses API: the unique id of the output item that
	// carried the tool call, distinct from tool_call_id (the call_id correlation
	// key). Empty for chat completions and Anthropic messages.
	ItemId string `protobuf:"bytes,11,opt,name=item_id,json=itemId,proto3" json:"item_id,omitempty"`
	// contains filtered or unexported fields
}

type RecordToolUsageResponse struct {
	// contains filtered or unexported fields
}

type WatchAIProvidersRequest struct {
	// contains filtered or unexported fields
}

type WatchAIProvidersResponse struct {
	// contains filtered or unexported fields
}