generated

type AboutResponse struct {
	// Arch CPU architecture (GOARCH).
	Arch string `json:"arch"`

	// FrameAncestorsFallback True when frame-ancestors is in fallback ('*') mode — the host is bound to 0.0.0.0/[::] and public_url is not set, degrading T-04 defence. The SPA can show a warning banner when this is true.
	FrameAncestorsFallback bool `json:"frame_ancestors_fallback"`

	// GoVersion Go runtime version string.
	GoVersion string `json:"go_version"`

	// Os Operating system (GOOS).
	Os string `json:"os"`

	// Pid Gateway process ID.
	Pid int `json:"pid"`

	// PreviewListenerEnabled Whether the iframe preview listener is currently bound and serving requests. Absent on old gateway versions (treat as true when absent).
	PreviewListenerEnabled bool `json:"preview_listener_enabled"`

	// PreviewOrigin Fully-qualified HTTPS origin operators set via gateway.preview_origin (e.g. "https://preview.acme.com"). Absent when not configured; the SPA constructs the origin from preview_port in that case.
	PreviewOrigin *string `json:"preview_origin,omitempty"`

	// PreviewPort Port the preview listener is bound on (FR-009). Default is gateway.port + 1.
	PreviewPort int `json:"preview_port"`

	// Uptime Human-readable uptime string.
	Uptime string `json:"uptime"`

	// UptimeSeconds Process uptime in seconds.
	UptimeSeconds int `json:"uptime_seconds"`

	// Version Omnipus gateway version string.
	Version string `json:"version"`

	// WarmupTimeoutSeconds Dev-server warmup timeout from config.
	WarmupTimeoutSeconds int `json:"warmup_timeout_seconds"`
}

type ActivityEvent struct {
	// AgentId ID of the agent involved in the event (absent for system events).
	AgentId *string `json:"agent_id,omitempty"`

	// AgentName Display name of the agent involved (absent for system events).
	AgentName *string `json:"agent_name,omitempty"`

	// Id Opaque event identifier derived from the source entity. E.g. "session-<uuid>", "task-c-<id>", "task-u-<id>".
	Id string `json:"id"`

	// Summary Human-readable one-line summary of the event (e.g. session title, task title).
	Summary *string `json:"summary,omitempty"`

	// Timestamp RFC3339 UTC timestamp when the event occurred.
	Timestamp time.Time `json:"timestamp"`

	// Type Event category. "session_start" = new session began. "task_created" = a task was created. "task_updated" = a task completed or changed status.
	Type ActivityEventType `json:"type"`
}

type ActivityEventType string

type ActivityEventsResponse struct {
	// Events Activity events (reverse-chronological, max 50, last 24 hours).
	Events []struct {
		// AgentId ID of the agent involved in the event (absent for system events).
		AgentId *string `json:"agent_id,omitempty"`

		// AgentName Display name of the agent involved (absent for system events).
		AgentName *string `json:"agent_name,omitempty"`

		// Id Opaque event identifier derived from the source entity. E.g. "session-<uuid>", "task-c-<id>", "task-u-<id>".
		Id string `json:"id"`

		// Summary Human-readable one-line summary of the event (e.g. session title, task title).
		Summary *string `json:"summary,omitempty"`

		// Timestamp RFC3339 UTC timestamp when the event occurred.
		Timestamp time.Time `json:"timestamp"`

		// Type Event category. "session_start" = new session began. "task_created" = a task was created. "task_updated" = a task completed or changed status.
		Type ActivityEventsResponseEventsType `json:"type"`
	} `json:"events"`

	// Warning Present when a non-fatal error occurred while collecting events (e.g. a session store was unreadable). The response is still returned.
	Warning *string `json:"warning,omitempty"`
}

type ActivityEventsResponseEventsType string

type AddMcpServerJSONRequestBody = McpServerCreate

type Agent struct {
	// Color Hex color code for agent avatar display (e.g. "#D4AF37").
	Color *string `json:"color,omitempty"`

	// Default Whether this agent is the global default that handles inbound messages with no more-specific routing rule. At most one agent is default.
	Default *bool `json:"default,omitempty"`

	// Description Short description of the agent's purpose.
	Description *string `json:"description,omitempty"`

	// FallbackModels Ordered list of fallback model IDs tried when the primary model returns an error. Each entry may be a bare model name or "provider/model" format.
	FallbackModels *[]string `json:"fallback_models,omitempty"`

	// Heartbeat Contents of HEARTBEAT.md — periodic background instructions. Empty string when not set. Always present on detail responses (never null).
	Heartbeat string `json:"heartbeat"`

	// HeartbeatEnabled Whether the HEARTBEAT.md periodic instruction loop is active for this agent.
	HeartbeatEnabled bool `json:"heartbeat_enabled"`

	// HeartbeatInterval Interval in seconds between heartbeat passes.
	HeartbeatInterval int `json:"heartbeat_interval"`

	// Icon Phosphor icon name for agent avatar (e.g. "Robot", "Octopus").
	Icon *string `json:"icon,omitempty"`

	// Id Unique agent identifier. UUID for custom agents; well-known strings for core agents (e.g. "jim").
	Id string `json:"id"`

	// Instructions Body of AGENT.md (everything after the closing frontmatter delimiter) — additional runtime instructions. Empty string when not set. Always present on detail responses (never null).
	Instructions string `json:"instructions"`

	// Locked When true, name, description, soul, heartbeat, and instructions are immutable via the PUT /agents/{id} endpoint. Core agents are always locked.
	Locked bool `json:"locked"`

	// MaxToolIterations Maximum number of tool calls allowed per turn. Inherited from agents.defaults.max_tool_iterations when not overridden.
	MaxToolIterations int `json:"max_tool_iterations"`

	// Model Model name string used for LLM calls (resolved from defaults when not explicitly set on the agent). May be "provider/model" format for OpenRouter.
	Model *string `json:"model,omitempty"`

	// ModelParams LLM sampling parameters applied to an agent's requests. When absent, the provider defaults are used.
	ModelParams *struct {
		// MaxTokens Maximum tokens to generate per turn.
		MaxTokens *int `json:"max_tokens,omitempty"`

		// Temperature Sampling temperature (0.0 – 2.0). Lower = more deterministic.
		Temperature *float64 `json:"temperature,omitempty"`

		// TopP Nucleus sampling probability mass. 1.0 disables nucleus sampling.
		TopP *float64 `json:"top_p,omitempty"`
	} `json:"model_params,omitempty"`

	// Name Human-readable display name.
	Name string `json:"name"`

	// RateLimits Per-agent rate-limit overrides. When use_global_defaults is true the global policy applies and per-agent overrides are ignored.
	RateLimits *struct {
		// MaxCostPerDay Maximum USD cost per day for this agent. Absent = no per-agent cap.
		MaxCostPerDay *float64 `json:"max_cost_per_day,omitempty"`

		// MaxLlmCallsPerHour Maximum LLM API calls per hour for this agent. Absent = no per-agent cap.
		MaxLlmCallsPerHour *int `json:"max_llm_calls_per_hour,omitempty"`

		// MaxToolCallsPerMinute Maximum tool calls per minute for this agent. Absent = no per-agent cap.
		MaxToolCallsPerMinute *int `json:"max_tool_calls_per_minute,omitempty"`

		// UseGlobalDefaults When true, global rate limits are used and per-agent overrides are ignored.
		UseGlobalDefaults *bool `json:"use_global_defaults,omitempty"`
	} `json:"rate_limits,omitempty"`

	// SandboxProfile Kernel sandbox profile applied to this agent's tool calls. "workspace" = Landlock to workspace dir only. "workspace+net" = Landlock + network access. "host" = read-only host filesystem access. "off" = god-mode (requires --allow-god-mode at gateway boot).
	SandboxProfile *AgentSandboxProfile `json:"sandbox_profile,omitempty"`

	// ShellPolicy Per-agent shell command deny-pattern configuration.
	ShellPolicy *struct {
		// CustomDenyPatterns Additional Go regexp patterns to block in shell commands.
		CustomDenyPatterns *[]string `json:"custom_deny_patterns,omitempty"`

		// EnableDenyPatterns Enable pattern-based shell command blocking.
		EnableDenyPatterns *bool `json:"enable_deny_patterns,omitempty"`
	} `json:"shell_policy,omitempty"`

	// Skills List of skill IDs granted to this agent. Only skills in this list are available during this agent's runs. When no skills are granted the field is omitted entirely from the response (the backend does not emit an empty array). Absence of the field and an empty array are semantically identical (opt-in, default none).
	Skills *[]string `json:"skills,omitempty"`

	// Soul Contents of SOUL.md — the agent's system prompt. Empty string for locked core agents (prompt is compiled in, not exposed via API). Empty string for draft agents (no SOUL.md written yet). Always present (never null).
	Soul string `json:"soul"`

	// Stats Aggregate runtime statistics for an agent. Absent on the Agent object when no sessions have been run.
	Stats *struct {
		// LastActive RFC3339 timestamp of the last turn completed by this agent.
		LastActive *time.Time `json:"last_active,omitempty"`

		// TotalCost Lifetime USD cost across all sessions.
		TotalCost float64 `json:"total_cost"`

		// TotalSessions Lifetime count of sessions created for this agent.
		TotalSessions int `json:"total_sessions"`

		// TotalTokens Lifetime token count across all sessions.
		TotalTokens int `json:"total_tokens"`
	} `json:"stats,omitempty"`

	// Status Current runtime status. "active" = agent is processing a turn. "idle" = ready and waiting. "draft" = SOUL.md is empty (no prompt written yet). "error" is a frontend-added possibility not emitted by the backend today.
	Status AgentStatus `json:"status"`

	// SteeringMode Tool execution steering strategy. "one-at-a-time" = approve each tool call individually. Other values are provider-specific. Defaults to "one-at-a-time".
	SteeringMode string `json:"steering_mode"`

	// TimeoutSeconds Maximum seconds a single agent turn may run before being interrupted. Inherited from agents.defaults.timeout_seconds when not overridden per-agent.
	TimeoutSeconds int `json:"timeout_seconds"`

	// ToolFeedback When true, tool results are echoed back to the LLM as user messages (tool feedback loop enabled).
	ToolFeedback bool `json:"tool_feedback"`

	// ToolsCfg Per-agent tool configuration governing which builtin tools are accessible and which MCP servers are bound (config.AgentToolsCfg on the Go side, AgentToolsCfg interface in src/lib/api.ts).
	ToolsCfg *struct {
		// Builtin Controls builtin tool visibility for this agent.
		Builtin *struct {
			// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Custom agents are seeded with default_policy=allow and a system.*=deny entry to enforce the privilege rail.
			DefaultPolicy *AgentToolsCfgBuiltinDefaultPolicy `json:"default_policy,omitempty"`

			// Policies Per-tool policy overrides. Keys are tool names or glob patterns (e.g. "system.*", "workspace.shell"). Values are one of "allow", "ask", "deny".
			Policies *map[string]AgentToolsCfgBuiltinPolicies `json:"policies,omitempty"`
		} `json:"builtin,omitempty"`

		// Mcp MCP server bindings for this agent.
		Mcp *struct {
			// Servers List of MCP server bindings.
			Servers *[]struct {
				// Id MCP server identifier as registered in config.json.
				Id string `json:"id"`

				// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
				Tools *[]string `json:"tools,omitempty"`
			} `json:"servers,omitempty"`
		} `json:"mcp,omitempty"`
	} `json:"tools_cfg,omitempty"`

	// Type Agent classification. "core" = compiled-in identity locked agent. "custom" = user-defined agent. "system" = legacy operator-supplied entry (config.AgentTypeSystem survives in the API contract for backwards compatibility but SeedConfig does NOT create these — they only appear if config.json contains one).
	Type AgentType `json:"type"`

	// Warning Non-fatal advisory (e.g. config reload failed after create/update).
	Warning *string `json:"warning,omitempty"`
}

type AgentCreateRequest struct {
	// Color Hex color code for the agent avatar.
	Color *string `json:"color,omitempty"`

	// Description Short description of the agent's purpose.
	Description *string `json:"description,omitempty"`

	// FallbackModels Ordered list of fallback model IDs tried when the primary model returns an error. Each entry may be a bare model name or "provider/model" format.
	FallbackModels *[]string `json:"fallback_models,omitempty"`

	// Icon Phosphor icon name for the agent avatar.
	Icon *string `json:"icon,omitempty"`

	// Model Model name for LLM calls. When omitted, the global agents.defaults.model_name is used.
	Model *string `json:"model,omitempty"`

	// ModelParams LLM sampling parameters applied to this agent's requests.
	ModelParams *struct {
		// MaxTokens Maximum tokens to generate per turn.
		MaxTokens *int `json:"max_tokens,omitempty"`

		// Temperature Sampling temperature (0.0 – 2.0). Lower = more deterministic.
		Temperature *float64 `json:"temperature,omitempty"`

		// TopP Nucleus sampling probability mass. 1.0 disables nucleus sampling.
		TopP *float64 `json:"top_p,omitempty"`
	} `json:"model_params,omitempty"`

	// Name Display name for the new agent.
	Name string `json:"name"`

	// RateLimits Per-agent rate-limit overrides. When use_global_defaults is true the global policy applies.
	RateLimits *struct {
		// MaxCostPerDay Maximum USD cost per day for this agent. Absent = no per-agent cap.
		MaxCostPerDay *float64 `json:"max_cost_per_day,omitempty"`

		// MaxLlmCallsPerHour Maximum LLM API calls per hour for this agent. Absent = no per-agent cap.
		MaxLlmCallsPerHour *int `json:"max_llm_calls_per_hour,omitempty"`

		// MaxToolCallsPerMinute Maximum tool calls per minute for this agent. Absent = no per-agent cap.
		MaxToolCallsPerMinute *int `json:"max_tool_calls_per_minute,omitempty"`

		// UseGlobalDefaults When true, global rate limits are used and per-agent overrides are ignored.
		UseGlobalDefaults *bool `json:"use_global_defaults,omitempty"`
	} `json:"rate_limits,omitempty"`

	// Skills Initial list of skill IDs granted to this agent. An empty list (or absent field) means no skills are granted (opt-in, default none).
	Skills *[]string `json:"skills,omitempty"`

	// ToolsCfg Per-agent tool configuration governing which builtin tools are accessible and which MCP servers are bound (config.AgentToolsCfg on the Go side, AgentToolsCfg interface in src/lib/api.ts).
	ToolsCfg *struct {
		// Builtin Controls builtin tool visibility for this agent.
		Builtin *struct {
			// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Custom agents are seeded with default_policy=allow and a system.*=deny entry to enforce the privilege rail.
			DefaultPolicy *AgentCreateRequestToolsCfgBuiltinDefaultPolicy `json:"default_policy,omitempty"`

			// Policies Per-tool policy overrides. Keys are tool names or glob patterns (e.g. "system.*", "workspace.shell"). Values are one of "allow", "ask", "deny".
			Policies *map[string]AgentCreateRequestToolsCfgBuiltinPolicies `json:"policies,omitempty"`
		} `json:"builtin,omitempty"`

		// Mcp MCP server bindings for this agent.
		Mcp *struct {
			// Servers List of MCP server bindings.
			Servers *[]struct {
				// Id MCP server identifier as registered in config.json.
				Id string `json:"id"`

				// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
				Tools *[]string `json:"tools,omitempty"`
			} `json:"servers,omitempty"`
		} `json:"mcp,omitempty"`
	} `json:"tools_cfg,omitempty"`
}

type AgentCreateRequestToolsCfgBuiltinDefaultPolicy string

type AgentCreateRequestToolsCfgBuiltinPolicies string

type AgentModelParams struct {
	// MaxTokens Maximum tokens to generate per turn.
	MaxTokens *int `json:"max_tokens,omitempty"`

	// Temperature Sampling temperature (0.0 – 2.0). Lower = more deterministic.
	Temperature *float64 `json:"temperature,omitempty"`

	// TopP Nucleus sampling probability mass. 1.0 disables nucleus sampling.
	TopP *float64 `json:"top_p,omitempty"`
}

type AgentOwnerUpdateResponse struct {
	// AgentId The agent whose ownership was changed.
	AgentId string `json:"agent_id"`

	// OwnerUsername The username of the new owner.
	OwnerUsername string `json:"owner_username"`

	// Success True when ownership was successfully updated.
	Success bool `json:"success"`
}

type AgentOwnershipUpdateRequest struct {
	// OwnerUsername Username of the new owner. Empty string clears ownership (requires X-Confirm-Demote: 1 header to prevent accidents).
	OwnerUsername *string `json:"owner_username,omitempty"`
}

type AgentRateLimits struct {
	// MaxCostPerDay Maximum USD cost per day for this agent. Absent = no per-agent cap.
	MaxCostPerDay *float64 `json:"max_cost_per_day,omitempty"`

	// MaxLlmCallsPerHour Maximum LLM API calls per hour for this agent. Absent = no per-agent cap.
	MaxLlmCallsPerHour *int `json:"max_llm_calls_per_hour,omitempty"`

	// MaxToolCallsPerMinute Maximum tool calls per minute for this agent. Absent = no per-agent cap.
	MaxToolCallsPerMinute *int `json:"max_tool_calls_per_minute,omitempty"`

	// UseGlobalDefaults When true, global rate limits are used and per-agent overrides are ignored.
	UseGlobalDefaults *bool `json:"use_global_defaults,omitempty"`
}

type AgentSandboxProfile string

type AgentSession struct {
	// CreatedAt RFC3339 creation timestamp.
	CreatedAt time.Time `json:"created_at"`

	// Id Session identifier.
	Id string `json:"id"`

	// Title Session title.
	Title string `json:"title"`

	// UpdatedAt RFC3339 last-update timestamp.
	UpdatedAt time.Time `json:"updated_at"`
}

type AgentShellPolicy struct {
	// CustomDenyPatterns Additional Go regexp patterns to block in shell commands.
	CustomDenyPatterns *[]string `json:"custom_deny_patterns,omitempty"`

	// EnableDenyPatterns Enable pattern-based shell command blocking.
	EnableDenyPatterns *bool `json:"enable_deny_patterns,omitempty"`
}

type AgentStats struct {
	// LastActive RFC3339 timestamp of the last turn completed by this agent.
	LastActive *time.Time `json:"last_active,omitempty"`

	// TotalCost Lifetime USD cost across all sessions.
	TotalCost float64 `json:"total_cost"`

	// TotalSessions Lifetime count of sessions created for this agent.
	TotalSessions int `json:"total_sessions"`

	// TotalTokens Lifetime token count across all sessions.
	TotalTokens int `json:"total_tokens"`
}

type AgentStatus string

type AgentSwitchedFrame struct {
	AgentId   *string `json:"agent_id,omitempty"`
	Message   *string `json:"message,omitempty"`
	SessionId string  `json:"session_id"`
	Type      string  `json:"type"`
}

type AgentToolEntry struct {
	// ConfiguredPolicy The policy as written in the agent's config (before fence application).
	ConfiguredPolicy AgentToolEntryConfiguredPolicy `json:"configured_policy"`

	// EffectivePolicy The policy actually enforced at LLM-call time after fence and global policy overrides are applied.
	EffectivePolicy AgentToolEntryEffectivePolicy `json:"effective_policy"`

	// FenceApplied True when the tool requires admin approval (RequiresAdminAsk=true), the agent type is "custom", and the configured policy was "allow" but was downgraded to "ask" by the admin-ask fence (FR-061).
	FenceApplied bool `json:"fence_applied"`

	// Name Canonical tool name.
	Name string `json:"name"`

	// RequiresAdminAsk True when the tool's RequiresAdminAsk() returns true — the tool always needs an admin to approve its use.
	RequiresAdminAsk bool `json:"requires_admin_ask"`
}

type AgentToolEntryConfiguredPolicy string

type AgentToolEntryEffectivePolicy string

type AgentToolsCfg struct {
	// Builtin Controls builtin tool visibility for this agent.
	Builtin *struct {
		// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Custom agents are seeded with default_policy=allow and a system.*=deny entry to enforce the privilege rail.
		DefaultPolicy *AgentToolsCfgBuiltinDefaultPolicy `json:"default_policy,omitempty"`

		// Policies Per-tool policy overrides. Keys are tool names or glob patterns (e.g. "system.*", "workspace.shell"). Values are one of "allow", "ask", "deny".
		Policies *map[string]AgentToolsCfgBuiltinPolicies `json:"policies,omitempty"`
	} `json:"builtin,omitempty"`

	// Mcp MCP server bindings for this agent.
	Mcp *struct {
		// Servers List of MCP server bindings.
		Servers *[]struct {
			// Id MCP server identifier as registered in config.json.
			Id string `json:"id"`

			// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
			Tools *[]string `json:"tools,omitempty"`
		} `json:"servers,omitempty"`
	} `json:"mcp,omitempty"`
}

type AgentToolsCfgBuiltinDefaultPolicy string

type AgentToolsCfgBuiltinPolicies string

type AgentToolsResponse struct {
	// AgentType Agent classification: "core", "system", or "custom". Informs the UI whether policy editing is allowed.
	AgentType *AgentToolsResponseAgentType `json:"agent_type,omitempty"`

	// Config Per-agent tool configuration governing which builtin tools are accessible and which MCP servers are bound (config.AgentToolsCfg on the Go side, AgentToolsCfg interface in src/lib/api.ts).
	Config struct {
		// Builtin Controls builtin tool visibility for this agent.
		Builtin *struct {
			// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Custom agents are seeded with default_policy=allow and a system.*=deny entry to enforce the privilege rail.
			DefaultPolicy *AgentToolsResponseConfigBuiltinDefaultPolicy `json:"default_policy,omitempty"`

			// Policies Per-tool policy overrides. Keys are tool names or glob patterns (e.g. "system.*", "workspace.shell"). Values are one of "allow", "ask", "deny".
			Policies *map[string]AgentToolsResponseConfigBuiltinPolicies `json:"policies,omitempty"`
		} `json:"builtin,omitempty"`

		// Mcp MCP server bindings for this agent.
		Mcp *struct {
			// Servers List of MCP server bindings.
			Servers *[]struct {
				// Id MCP server identifier as registered in config.json.
				Id string `json:"id"`

				// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
				Tools *[]string `json:"tools,omitempty"`
			} `json:"servers,omitempty"`
		} `json:"mcp,omitempty"`
	} `json:"config"`

	// Tools Per-tool effective policy entries.
	Tools []struct {
		// ConfiguredPolicy The policy as written in the agent's config (before fence application).
		ConfiguredPolicy AgentToolsResponseToolsConfiguredPolicy `json:"configured_policy"`

		// EffectivePolicy The policy actually enforced at LLM-call time after fence and global policy overrides are applied.
		EffectivePolicy AgentToolsResponseToolsEffectivePolicy `json:"effective_policy"`

		// FenceApplied True when the tool requires admin approval (RequiresAdminAsk=true), the agent type is "custom", and the configured policy was "allow" but was downgraded to "ask" by the admin-ask fence (FR-061).
		FenceApplied bool `json:"fence_applied"`

		// Name Canonical tool name.
		Name string `json:"name"`

		// RequiresAdminAsk True when the tool's RequiresAdminAsk() returns true — the tool always needs an admin to approve its use.
		RequiresAdminAsk bool `json:"requires_admin_ask"`
	} `json:"tools"`
}

type AgentToolsResponseAgentType string

type AgentToolsResponseConfigBuiltinDefaultPolicy string

type AgentToolsResponseConfigBuiltinPolicies string

type AgentToolsResponseToolsConfiguredPolicy string

type AgentToolsResponseToolsEffectivePolicy string

type AgentToolsUpdateRequest struct {
	// Builtin Builtin tool policy configuration for this agent.
	Builtin *struct {
		// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Defaults to "allow" when omitted.
		DefaultPolicy *AgentToolsUpdateRequestBuiltinDefaultPolicy `json:"default_policy,omitempty"`

		// Mode Legacy format: "explicit" builds a deny-all policy with allow entries for each name in visible[]. "inherit" sets default_policy=allow. Ignored when default_policy is present.
		Mode *AgentToolsUpdateRequestBuiltinMode `json:"mode,omitempty"`

		// Policies Per-tool policy overrides. Keys are canonical tool names or glob patterns (e.g. "system.*"). Values are "allow", "ask", or "deny".
		Policies *map[string]AgentToolsUpdateRequestBuiltinPolicies `json:"policies,omitempty"`

		// Visible Legacy format: tool names to allow when mode="explicit". Ignored when default_policy is present.
		Visible *[]string `json:"visible,omitempty"`
	} `json:"builtin,omitempty"`

	// Mcp MCP server bindings for this agent.
	Mcp *struct {
		// Servers List of MCP server bindings.
		Servers *[]struct {
			// Id MCP server identifier as registered in config.json.
			Id string `json:"id"`

			// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
			Tools *[]string `json:"tools,omitempty"`
		} `json:"servers,omitempty"`
	} `json:"mcp,omitempty"`
}

type AgentToolsUpdateRequestBuiltinDefaultPolicy string

type AgentToolsUpdateRequestBuiltinMode string

type AgentToolsUpdateRequestBuiltinPolicies string

type AgentType string

type AgentUpdateRequest struct {
	// Color Hex color code for agent avatar display (e.g. "#D4AF37").
	Color *string `json:"color,omitempty"`

	// Default Whether this agent is the global default that handles inbound messages with no more-specific routing rule. At most one agent is default. Omitting this field leaves the flag unchanged.
	Default *bool `json:"default,omitempty"`

	// Description New description. Rejected on locked agents. Empty string removes it.
	Description *string `json:"description,omitempty"`

	// FallbackModels Ordered list of fallback model IDs tried when the primary model returns an error. Each entry may be a bare model name or "provider/model" format.
	FallbackModels *[]string `json:"fallback_models,omitempty"`

	// Heartbeat New HEARTBEAT.md content. Rejected on locked agents. Writing this triggers a config reload.
	Heartbeat *string `json:"heartbeat,omitempty"`

	// HeartbeatEnabled Enable/disable heartbeat loop. Allowed on all agents.
	HeartbeatEnabled *bool `json:"heartbeat_enabled,omitempty"`

	// HeartbeatInterval New heartbeat interval in seconds. Allowed on all agents.
	HeartbeatInterval *int `json:"heartbeat_interval,omitempty"`

	// Icon Phosphor icon name for agent avatar (e.g. "Robot", "Octopus").
	Icon *string `json:"icon,omitempty"`

	// Instructions New AGENT.md body (after frontmatter). Rejected on locked agents. Writing this triggers a config reload.
	Instructions *string `json:"instructions,omitempty"`

	// MaxToolIterations New maximum tool calls per turn. Allowed on all agents.
	MaxToolIterations *int `json:"max_tool_iterations,omitempty"`

	// Model New model name. Allowed on all agents.
	Model *string `json:"model,omitempty"`

	// ModelParams LLM sampling parameters applied to this agent's requests.
	ModelParams *struct {
		// MaxTokens Maximum tokens to generate per turn.
		MaxTokens *int `json:"max_tokens,omitempty"`

		// Temperature Sampling temperature (0.0 – 2.0). Lower = more deterministic.
		Temperature *float64 `json:"temperature,omitempty"`

		// TopP Nucleus sampling probability mass. 1.0 disables nucleus sampling.
		TopP *float64 `json:"top_p,omitempty"`
	} `json:"model_params,omitempty"`

	// Name New display name. Rejected on locked agents.
	Name *string `json:"name,omitempty"`

	// RateLimits Per-agent rate-limit overrides. When use_global_defaults is true the global policy applies.
	RateLimits *struct {
		// MaxCostPerDay Maximum USD cost per day for this agent. Absent = no per-agent cap.
		MaxCostPerDay *float64 `json:"max_cost_per_day,omitempty"`

		// MaxLlmCallsPerHour Maximum LLM API calls per hour for this agent. Absent = no per-agent cap.
		MaxLlmCallsPerHour *int `json:"max_llm_calls_per_hour,omitempty"`

		// MaxToolCallsPerMinute Maximum tool calls per minute for this agent. Absent = no per-agent cap.
		MaxToolCallsPerMinute *int `json:"max_tool_calls_per_minute,omitempty"`

		// UseGlobalDefaults When true, global rate limits are used and per-agent overrides are ignored.
		UseGlobalDefaults *bool `json:"use_global_defaults,omitempty"`
	} `json:"rate_limits,omitempty"`

	// SandboxProfile New sandbox profile. "off" requires --allow-god-mode at gateway boot (403 otherwise).
	SandboxProfile *AgentUpdateRequestSandboxProfile `json:"sandbox_profile,omitempty"`

	// ShellPolicy Per-agent shell command deny-pattern configuration.
	ShellPolicy *struct {
		// CustomDenyPatterns Must each be valid Go regexp patterns (400 on invalid regexp).
		CustomDenyPatterns *[]string `json:"custom_deny_patterns,omitempty"`
		EnableDenyPatterns *bool     `json:"enable_deny_patterns,omitempty"`
	} `json:"shell_policy,omitempty"`

	// Skills Replace the agent's skill list. Only the skill IDs in this list will be granted; omitting this field leaves the existing list unchanged. Send an empty array to remove all skills.
	Skills *[]string `json:"skills,omitempty"`

	// Soul New SOUL.md content (agent system prompt). Rejected on locked agents. Writing this triggers a config reload.
	Soul *string `json:"soul,omitempty"`

	// SteeringMode New steering mode. Allowed on all agents.
	SteeringMode *string `json:"steering_mode,omitempty"`

	// TimeoutSeconds New timeout in seconds per turn. Allowed on all agents.
	TimeoutSeconds *int `json:"timeout_seconds,omitempty"`

	// ToolFeedback Enable/disable tool feedback loop. Allowed on all agents.
	ToolFeedback *bool `json:"tool_feedback,omitempty"`

	// ToolsCfg Per-agent tool configuration governing which builtin tools are accessible and which MCP servers are bound (config.AgentToolsCfg on the Go side, AgentToolsCfg interface in src/lib/api.ts).
	ToolsCfg *struct {
		// Builtin Controls builtin tool visibility for this agent.
		Builtin *struct {
			// DefaultPolicy Fallback policy applied to any builtin tool not listed in policies. Custom agents are seeded with default_policy=allow and a system.*=deny entry to enforce the privilege rail.
			DefaultPolicy *AgentUpdateRequestToolsCfgBuiltinDefaultPolicy `json:"default_policy,omitempty"`

			// Policies Per-tool policy overrides. Keys are tool names or glob patterns (e.g. "system.*", "workspace.shell"). Values are one of "allow", "ask", "deny".
			Policies *map[string]AgentUpdateRequestToolsCfgBuiltinPolicies `json:"policies,omitempty"`
		} `json:"builtin,omitempty"`

		// Mcp MCP server bindings for this agent.
		Mcp *struct {
			// Servers List of MCP server bindings.
			Servers *[]struct {
				// Id MCP server identifier as registered in config.json.
				Id string `json:"id"`

				// Tools Specific tool names to expose from this server. When absent, all tools from the server are available.
				Tools *[]string `json:"tools,omitempty"`
			} `json:"servers,omitempty"`
		} `json:"mcp,omitempty"`
	} `json:"tools_cfg,omitempty"`
}

type AgentUpdateRequestSandboxProfile string

type AgentUpdateRequestToolsCfgBuiltinDefaultPolicy string

type AgentUpdateRequestToolsCfgBuiltinPolicies string

type AppState struct {
	// DevModeBypass True when gateway.dev_mode_bypass is enabled. Read-only — cannot be set via this endpoint. The SPA uses this to hide controls that are inoperative when bypass is active.
	DevModeBypass *bool `json:"dev_mode_bypass,omitempty"`

	// GodModeAvailable True when the sandbox mode is "off" (no kernel enforcement). Indicates the gateway is running without sandbox protection.
	GodModeAvailable *bool `json:"god_mode_available,omitempty"`

	// GodModeOptedIn True when the operator has explicitly opted into god mode (sandbox=off). Distinct from god_mode_available to allow UI differentiation.
	GodModeOptedIn *bool `json:"god_mode_opted_in,omitempty"`

	// LastDoctorRun RFC3339 timestamp of the last health-check run. Absent if never run.
	LastDoctorRun *time.Time `json:"last_doctor_run,omitempty"`

	// LastDoctorScore Score from the last health-check run (0–100, integer). Absent if never run.
	LastDoctorScore *int `json:"last_doctor_score,omitempty"`

	// OnboardingComplete Whether the first-run onboarding wizard has been completed.
	OnboardingComplete bool `json:"onboarding_complete"`
}

type AppStatePatchRequest struct {
	// OnboardingComplete Mark onboarding as complete. Must be true — false is rejected with 400.
	OnboardingComplete *bool `json:"onboarding_complete,omitempty"`
}

type AttachSessionFrame struct {
	SessionId string `json:"session_id"`
	// ISO 8601 timestamp of the most recent frame the SPA has already processed. Server replays only frames with timestamp > this value. Used to keep reconnect replay traffic O(missed window) instead of O(full session history).
	Since *string `json:"since,omitempty"`
	Type  string  `json:"type"`
}

type Attachment struct {
	// MimeType MIME type of the attachment.
	MimeType string `json:"mime_type"`

	// Path Relative path within the session workspace.
	Path string `json:"path"`

	// Size File size in bytes.
	Size int64 `json:"size"`

	// Type Attachment category. Aligned with MediaPart.type enum.
	Type AttachmentType `json:"type"`
}

type AttachmentType string

type AuditEntry struct {
	// AgentId ID of the agent that triggered the event. May be absent.
	AgentId *string `json:"agent_id,omitempty"`

	// Command Command string when the event is an exec event. May be absent.
	Command *string `json:"command,omitempty"`

	// Decision Outcome of the event evaluation. One of: allow, deny, error. May be absent for informational events.
	Decision *AuditEntryDecision `json:"decision,omitempty"`

	// Details Event-specific metadata. Structure varies by event type.
	Details *map[string]interface{} `json:"details,omitempty"`

	// Event Event type identifier. Well-known values: tool_call, exec, file_op, llm_call, policy_eval, rate_limit, ssrf, startup, shutdown. Custom values are permitted for extensibility — must match ^[a-z_]+$ (lowercase letters and underscores only).
	Event string `json:"event"`

	// Parameters Tool call parameters or other event-specific key-value pairs.
	Parameters *map[string]interface{} `json:"parameters,omitempty"`

	// PolicyRule Policy rule that produced this decision. May be absent.
	PolicyRule *string `json:"policy_rule,omitempty"`

	// SessionId Session ID associated with the event. May be absent.
	SessionId *string `json:"session_id,omitempty"`

	// Timestamp ISO 8601 UTC timestamp of when the event was recorded.
	Timestamp time.Time `json:"timestamp"`

	// Tool Tool name when the event is a tool call. May be absent.
	Tool *string `json:"tool,omitempty"`
}

type AuditEntryDecision string

type AuditLogToggle struct {
	// Enabled Whether audit logging is currently enabled.
	Enabled bool `json:"enabled"`
}

type AuditLogToggleRequest struct {
	// Enabled Whether audit logging should be enabled.
	Enabled bool `json:"enabled"`
}

type AuditLogUpdateResponse struct {
	// AppliedEnabled The audit log enabled state currently active (before restart takes effect). This is the old value — the new value will take effect after restart.
	AppliedEnabled bool `json:"applied_enabled"`

	// RequiresRestart Always true — changing the audit log enabled state requires a restart to swap file handles.
	RequiresRestart bool `json:"requires_restart"`

	// Saved True when the configuration was successfully persisted to disk.
	Saved bool `json:"saved"`
}

type AuthFrame struct {
	// Bearer token from /api/v1/auth/login. Format is "omnipus_" + 64 hex chars.
	Token string `json:"token"`
	Type  string `json:"type"`
}

type BackupCreateResponse struct {
	// CreatedAt RFC3339 timestamp when the backup was created.
	CreatedAt time.Time `json:"created_at"`

	// Path Absolute path to the backup file.
	Path string `json:"path"`

	// SizeBytes Size of the backup file in bytes.
	SizeBytes int64 `json:"size_bytes"`
}

type BackupEntry struct {
	// CreatedAt RFC3339 timestamp when the backup was created.
	CreatedAt time.Time `json:"created_at"`

	// Filename Backup archive filename (e.g. "omnipus-backup-2026-05-16.tar.gz").
	Filename string `json:"filename"`

	// SizeBytes Archive size in bytes.
	SizeBytes int64 `json:"size_bytes"`
}

type BearerToken = string

type CallMcpToolJSONRequestBody = McpToolCallRequest

type CancelFrame struct {
	SessionId string `json:"session_id"`
	Type      string `json:"type"`
}

type CancelStageFrame struct {
	SessionId string `json:"session_id"`
	Stage     string `json:"stage"`
	Type      string `json:"type"`
}

type ChangePasswordJSONRequestBody = ChangePasswordRequest

type ChangePasswordRequest struct {
	// CurrentPassword The user's current password for verification. Maximum 72 characters (bcrypt limit).
	CurrentPassword string `json:"current_password"`

	// NewPassword The new password. Minimum 8 characters, maximum 72 (bcrypt limit).
	NewPassword string `json:"new_password"`
}

type ChangeUserRoleJSONRequestBody = UserRoleChangeRequest

type ChannelConfigureRequest struct {
	// AppId Application ID (used by Slack, Discord).
	AppId *string `json:"app_id,omitempty"`

	// AppSecret Application secret / signing secret.
	AppSecret *string `json:"app_secret,omitempty"`

	// BotToken Alias for token used by some channels.
	BotToken *string `json:"bot_token,omitempty"`

	// Token Channel authentication token (e.g. Telegram bot token, Discord bot token).
	Token *string `json:"token,omitempty"`

	// WebhookSecret HMAC secret for verifying incoming webhook payloads.
	WebhookSecret        *string                `json:"webhook_secret,omitempty"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type ChannelEnabledResponse struct {
	// Enabled Whether the channel is now enabled.
	Enabled bool `json:"enabled"`

	// Id Stable identifier for a built-in channel.
	Id ChannelEnabledResponseId `json:"id"`
}

type ChannelEnabledResponseId string

type ChannelEntry struct {
	// Degraded True when the channel is enabled in config but failed to construct at runtime (e.g. native WhatsApp requested on a build without it, or an invalid credential). The channel is NOT serving despite enabled=true.
	Degraded *bool `json:"degraded,omitempty"`

	// DegradedReason Human-readable reason the channel is degraded. Present only when degraded is true.
	DegradedReason *string `json:"degraded_reason,omitempty"`

	// Description Short description of the channel.
	Description string `json:"description"`

	// Enabled Whether this channel is currently enabled.
	Enabled bool `json:"enabled"`

	// Id Stable identifier for a built-in channel.
	Id ChannelEntryId `json:"id"`

	// Name Human-readable channel name.
	Name string `json:"name"`

	// NativeAvailable WhatsApp only: whether the native (whatsmeow) transport is compiled into this binary. False on a lite build or an architecture where it is excluded. Omitted for channels to which it does not apply. When false, clients MUST NOT offer native mode (the QR pairing flow cannot work).
	NativeAvailable *bool `json:"native_available,omitempty"`

	// Transport Transport mechanism used by this channel.
	Transport ChannelEntryTransport `json:"transport"`
}

type ChannelEntryId string

type ChannelEntryTransport string

type ChannelId string

type ChannelRouting struct {
	// DefaultAgentId ID of the agent that handles this channel's inbound messages. Omitted or empty means fall back to the global default agent.
	DefaultAgentId *string `json:"default_agent_id,omitempty"`
}

type ChannelTestResponse struct {
	// Message Human-readable description of the test result.
	Message string `json:"message"`

	// Success True when all required credential fields are present.
	Success bool `json:"success"`
}

type ClearAllSessions200JSONResponseBodyStatus string

type CompleteOnboardingJSONRequestBody = OnboardingCompleteRequest

type ConfigureChannelJSONBody map[string]interface{}

type ConfigureChannelJSONRequestBody ConfigureChannelJSONBody

type CreateAgentJSONRequestBody = AgentCreateRequest

type CreateScheduleJSONRequestBody = ScheduleCreate

type CreateSessionJSONRequestBody = SessionCreateRequest

type CreateTaskJSONRequestBody = TaskCreateRequest

type CreateUserJSONRequestBody = UserCreateRequest

type CredentialSetRequest struct {
	// Key Credential key name.
	Key string `json:"key"`

	// Value Credential value (stored encrypted).
	Value string `json:"value"`
}

type DeleteCredential200JSONResponseBodyStatus string

type DevicePaired struct {
	// DeviceId Unique device identifier.
	DeviceId string `json:"device_id"`

	// DeviceName Human-readable device name.
	DeviceName string `json:"device_name"`

	// Fingerprint Cryptographic fingerprint of the device's public key.
	Fingerprint string `json:"fingerprint"`

	// LastSeenAt RFC3339 timestamp of the last authenticated request from this device.
	LastSeenAt time.Time `json:"last_seen_at"`

	// PairedAt RFC3339 timestamp when the device was paired.
	PairedAt time.Time `json:"paired_at"`

	// Status Whether this device's access is currently active or revoked.
	Status DevicePairedStatus `json:"status"`
}

type DevicePairedStatus string

type DevicePairingRequestFrame struct {
	DeviceId    string  `json:"device_id"`
	DeviceName  *string `json:"device_name,omitempty"`
	Fingerprint *string `json:"fingerprint,omitempty"`
	PairingCode *string `json:"pairing_code,omitempty"`
	SessionId   *string `json:"session_id,omitempty"`
	Type        string  `json:"type"`
}

type DevicePairingResponseFrame struct {
	Decision string `json:"decision"`
	DeviceId string `json:"device_id"`
	Type     string `json:"type"`
}

type DevicePending struct {
	// CreatedAt RFC3339 timestamp when the pairing request was created.
	CreatedAt time.Time `json:"created_at"`

	// DeviceId Unique device identifier.
	DeviceId string `json:"device_id"`

	// DeviceName Human-readable device name provided during pairing.
	DeviceName string `json:"device_name"`

	// ExpiresAt RFC3339 timestamp when the pairing request expires.
	ExpiresAt time.Time `json:"expires_at"`

	// Fingerprint Cryptographic fingerprint of the device's public key.
	Fingerprint string `json:"fingerprint"`

	// PairingCode Short human-readable pairing code displayed to the user.
	PairingCode string `json:"pairing_code"`
}

type DevicesResponse struct {
	// Paired Devices that have been successfully paired. Capped at 100.
	Paired []struct {
		// DeviceId Unique device identifier.
		DeviceId string `json:"device_id"`

		// DeviceName Human-readable device name.
		DeviceName string `json:"device_name"`

		// Fingerprint Cryptographic fingerprint of the device's public key.
		Fingerprint string `json:"fingerprint"`

		// LastSeenAt RFC3339 timestamp of the last authenticated request from this device.
		LastSeenAt time.Time `json:"last_seen_at"`

		// PairedAt RFC3339 timestamp when the device was paired.
		PairedAt time.Time `json:"paired_at"`

		// Status Whether this device's access is currently active or revoked.
		Status DevicesResponsePairedStatus `json:"status"`
	} `json:"paired"`

	// Pending Pairing requests awaiting approval. Capped at 100.
	Pending []struct {
		// CreatedAt RFC3339 timestamp when the pairing request was created.
		CreatedAt time.Time `json:"created_at"`

		// DeviceId Unique device identifier.
		DeviceId string `json:"device_id"`

		// DeviceName Human-readable device name provided during pairing.
		DeviceName string `json:"device_name"`

		// ExpiresAt RFC3339 timestamp when the pairing request expires.
		ExpiresAt time.Time `json:"expires_at"`

		// Fingerprint Cryptographic fingerprint of the device's public key.
		Fingerprint string `json:"fingerprint"`

		// PairingCode Short human-readable pairing code displayed to the user.
		PairingCode string `json:"pairing_code"`
	} `json:"pending"`
}

type DevicesResponsePairedStatus string

type DoctorIssue struct {
	// ActionLabel Display label for the action link.
	ActionLabel *string `json:"action_label,omitempty"`

	// ActionLink Optional URL or SPA route to navigate to for remediation.
	ActionLink *string `json:"action_link,omitempty"`

	// Description Full description of the issue and its impact.
	Description string `json:"description"`

	// Id Unique identifier for this issue type.
	Id string `json:"id"`

	// Recommendation Recommended remediation action.
	Recommendation string `json:"recommendation"`

	// Severity Issue severity level.
	Severity DoctorIssueSeverity `json:"severity"`

	// Title Short human-readable title for the issue.
	Title string `json:"title"`
}

type DoctorIssueSeverity string

type DoctorResult struct {
	// CheckedAt RFC3339 timestamp when this health check was run.
	CheckedAt time.Time `json:"checked_at"`

	// Issues List of health-check findings. Empty when score is 100. Capped at 100 to bound response size.
	Issues []struct {
		// ActionLabel Display label for the action link.
		ActionLabel *string `json:"action_label,omitempty"`

		// ActionLink Optional URL or SPA route to navigate to for remediation.
		ActionLink *string `json:"action_link,omitempty"`

		// Description Full description of the issue and its impact.
		Description string `json:"description"`

		// Id Unique identifier for this issue type.
		Id string `json:"id"`

		// Recommendation Recommended remediation action.
		Recommendation string `json:"recommendation"`

		// Severity Issue severity level.
		Severity DoctorResultIssuesSeverity `json:"severity"`

		// Title Short human-readable title for the issue.
		Title string `json:"title"`
	} `json:"issues"`

	// Score Overall health score (0 = critical issues; 100 = fully healthy).
	Score int `json:"score"`
}

type DoctorResultIssuesSeverity string

type DoneFrame struct {
	SessionId string     `json:"session_id"`
	Stats     *DoneStats `json:"stats,omitempty"`
	Type      string     `json:"type"`
}

type DoneStats struct {
	Cost                     *float64 `json:"cost,omitempty"`
	DuplicateToolCallIdCount *float64 `json:"duplicate_tool_call_id_count,omitempty"`
	DurationMs               *float64 `json:"duration_ms,omitempty"`
	FramesEmitted            *float64 `json:"frames_emitted,omitempty"`
	OrphanCount              *float64 `json:"orphan_count,omitempty"`
	ReplayError              *bool    `json:"replay_error,omitempty"`
	Tokens                   *float64 `json:"tokens,omitempty"`
	TokensDropped            *float64 `json:"tokens_dropped,omitempty"`
	TruncatedResultCount     *float64 `json:"truncated_result_count,omitempty"`
}

type ErrorFrame struct {
	Message   string  `json:"message"`
	SessionId *string `json:"session_id,omitempty"`
	Type      string  `json:"type"`
}

type ErrorResponse struct {
	// Code Machine-readable error code for programmatic branching (e.g. "csrf_missing", "rate_limited").
	Code *string `json:"code,omitempty"`

	// Details Optional structured details about the error.
	Details *map[string]interface{} `json:"details,omitempty"`

	// Error Human-readable error message.
	Error string `json:"error"`
}

type ExecAllowlist struct {
	// AllowedBinaries Ordered list of allowed binary name patterns evaluated on every exec call. Patterns are trimmed, deduplicated, and validated server-side. Empty array = block all exec calls.
	AllowedBinaries []string `json:"allowed_binaries"`

	// Approval Approval mode for exec calls. Reflects config.tools.exec.approval. Only present in GET responses.
	Approval *string `json:"approval,omitempty"`

	// RestartRequired True in PUT responses — the in-memory agent loop uses the previous allowlist until the gateway restarts (SEC-12).
	RestartRequired *bool `json:"restart_required,omitempty"`
}

type ExecApprovalExpiredFrame struct {
	Id        string  `json:"id"`
	Message   *string `json:"message,omitempty"`
	SessionId string  `json:"session_id"`
	Type      string  `json:"type"`
}

type ExecApprovalRequestFrame struct {
	// Tool name used as primary display string in the approval modal.
	Command       string  `json:"command"`
	Id            string  `json:"id"`
	MatchedPolicy *string `json:"matched_policy,omitempty"`
	// Human-readable approval request message.
	Message *string `json:"message,omitempty"`
	// Tool invocation arguments. May be absent for parameter-less tools.
	Params    map[string]any `json:"params,omitempty"`
	SessionId string         `json:"session_id"`
	// Structured tool name (same value as command).
	Tool       *string `json:"tool,omitempty"`
	Type       string  `json:"type"`
	WorkingDir *string `json:"working_dir,omitempty"`
}

type ExecApprovalResponseAckFrame struct {
	Id        *string `json:"id,omitempty"`
	SessionId *string `json:"session_id,omitempty"`
	Type      string  `json:"type"`
}

type ExecApprovalResponseFrame struct {
	Decision string `json:"decision"`
	Id       string `json:"id"`
	Type     string `json:"type"`
}

type ExecProxyStatus struct {
	// Address Bound address in "host:port" format. Present only when running is true. Backend handler enforces this invariant; OpenAPI 3.0.3 cannot express conditional required fields.
	Address *string `json:"address,omitempty"`

	// Enabled Whether the exec proxy is configured to run (cfg.Tools.Exec.EnableProxy).
	Enabled bool `json:"enabled"`

	// Running Whether the proxy listener is currently bound and running.
	Running bool `json:"running"`
}

type GatewayStatus struct {
	// AgentCount Total number of configured agents (core + custom), including the implicit system agent.
	AgentCount int `json:"agent_count"`

	// ChannelCount Number of enabled channels including the always-available webchat channel.
	ChannelCount int `json:"channel_count"`

	// DailyCost Aggregate USD cost accrued today across all agents. Zero when cost tracking is disabled.
	DailyCost float64 `json:"daily_cost"`

	// Online Always true when the gateway is reachable and the agent loop is running.
	Online bool `json:"online"`

	// Version Gateway binary version string (e.g. "0.1.0" or the git short-sha for dev builds).
	Version *string `json:"version,omitempty"`
}

type GlobalToolPolicies struct {
	// DefaultPolicy Default policy for any tool not listed in policies.
	DefaultPolicy GlobalToolPoliciesDefaultPolicy `json:"default_policy"`

	// Policies Per-tool policy overrides. Keys are canonical tool names; values are the policy to apply. Never null — empty object when no overrides are configured.
	Policies map[string]GlobalToolPoliciesPolicies `json:"policies"`
}

type GlobalToolPoliciesDefaultPolicy string

type GlobalToolPoliciesPolicies string

type HealthResponse struct {
	// Status Always "ok" when the gateway is healthy.
	Status HealthResponseStatus `json:"status"`
}

type HealthResponseStatus string

type InstallSkillJSONRequestBody = SkillInstallRequest

type ListSessions200JSONResponseBody struct {
	// contains filtered or unexported fields
}

type ListSessions200JSONResponseBody0 = []Session

type ListSessions200JSONResponseBody1 struct {
	// PartialErrors Opaque error tokens (agent ID + sanitized reason).
	PartialErrors []string  `json:"partial_errors"`
	Sessions      []Session `json:"sessions"`
}

type ListSessionsParams struct {
	// AgentId Filter by agent ID.
	AgentId *string `form:"agent_id,omitempty" json:"agent_id,omitempty"`

	// Type Filter by session type.
	Type *ListSessionsParamsType `form:"type,omitempty" json:"type,omitempty"`
}

type ListSessionsParamsType string

type ListTasksParams struct {
	// Status Filter tasks by status.
	Status *ListTasksParamsStatus `form:"status,omitempty" json:"status,omitempty"`
}

type ListTasksParamsStatus string

type LoginJSONRequestBody = LoginRequest

type LoginRequest struct {
	// Password The user's password. Maximum 72 characters (bcrypt limit).
	Password string `json:"password"`

	// Username The user's login name.
	Username string `json:"username"`
}

type LoginResponse struct {
	// Role RBAC role of the authenticated user.
	Role LoginResponseRole `json:"role"`

	// Token Canonical opaque bearer token format used by Omnipus. The prefix "omnipus_" (8 characters) followed by 64 lowercase hex characters (32 random bytes), giving a total length of 72 characters. Used in Authorization headers, WS AuthFrame, and rotate-token responses.
	Token string `json:"token"`

	// Username The authenticated user's login name.
	Username string `json:"username"`

	// Warning Non-fatal advisory message. Present on onboarding/complete when the credential store is locked and the API key was stored in plaintext.
	Warning *string `json:"warning,omitempty"`
}

type LoginResponseRole string

type MarshalErrorResult struct {
	MarshalError string `json:"_marshal_error"`
}

type McpServer struct {
	// Id Unique MCP server identifier.
	Id string `json:"id"`

	// Name Human-readable server name.
	Name string `json:"name"`

	// Status Current connection status of the MCP server.
	Status McpServerStatus `json:"status"`

	// ToolCount Number of tools exposed by this server.
	ToolCount int `json:"tool_count"`

	// Tools List of tool names exposed by this server. Absent when tool_count is 0 or when the server has not yet enumerated its tools.
	Tools *[]string `json:"tools,omitempty"`

	// Transport Transport mechanism used by this MCP server. "stdio" for local process-based servers, "sse" or "http" for remote HTTP-based servers.
	Transport McpServerTransport `json:"transport"`
}

type McpServerCreate struct {
	// Args Command-line arguments to pass to the server process. Only applicable for stdio transport.
	Args *[]string `json:"args,omitempty"`

	// Command Command to start the MCP server process. Required when transport is "stdio". Must be omitted or empty when transport is "sse" or "http".
	Command *string `json:"command,omitempty"`

	// Env Environment variable overrides passed to the MCP server process. Only applicable for stdio transport. Each key-value pair is injected into the server process environment at startup.
	Env *map[string]string `json:"env,omitempty"`

	// Name Human-readable server name.
	Name string `json:"name"`

	// Transport Transport mechanism to use for this MCP server. Use "stdio" for local process-based servers, "sse" or "http" for remote HTTP-based servers (both are handled identically by the gateway).
	Transport McpServerCreateTransport `json:"transport"`

	// Url Endpoint URL for remote MCP servers. Required when transport is "sse" or "http". Must be an https:// URL, or http:// for loopback addresses only (localhost, 127.x.x.x, or ::1). Any other http:// URL is rejected with 422 by both the SPA and the backend. Must be omitted when transport is "stdio".
	Url *string `json:"url,omitempty"`
}

type McpServerCreateTransport string

type McpServerStatus string

type McpServerToolsResponse struct {
	// Tools List of tool names exposed by the MCP server.
	Tools []string `json:"tools"`
}

type McpServerTransport string

type McpToolCallRequest struct {
	// Arguments Key-value arguments to pass to the tool. Shape is tool-specific.
	Arguments *map[string]interface{} `json:"arguments,omitempty"`

	// ServerId The MCP server ID to invoke the tool on.
	ServerId string `json:"server_id"`

	// ToolName The name of the tool to call on the MCP server.
	ToolName string `json:"tool_name"`
}

type McpToolCallResponse struct {
	// Error Error message if the tool call failed on the MCP server side. Only present when the call returned an error result.
	Error *string `json:"error,omitempty"`

	// Result The tool's return value. Shape is tool-specific; may be any JSON type.
	Result interface{} `json:"result"`
}

type McpToolsListResponse = []McpToolsListResponse_Item

type McpToolsListResponse_Item struct {
	// Args Arguments passed to the MCP server command.
	Args *[]string `json:"args,omitempty"`

	// Command The command used to start the MCP server.
	Command *string `json:"command,omitempty"`

	// Enabled Whether the MCP server is currently enabled.
	Enabled bool `json:"enabled"`

	// Id Unique MCP server identifier (same as the config key name).
	Id string `json:"id"`

	// Name Display name for the MCP server.
	Name                 string                 `json:"name"`
	AdditionalProperties map[string]interface{} `json:"-"`
}

type MeInfo struct {
	// Role RBAC role of the current authenticated user.
	Role MeInfoRole `json:"role"`
}

type MeInfoRole string

type MediaFrame struct {
	Parts     []MediaPart `json:"parts"`
	SessionId string      `json:"session_id"`
	Type      string      `json:"type"`
}

type MediaPart struct {
	Caption     *string `json:"caption,omitempty"`
	ContentType string  `json:"content_type"`
	Filename    string  `json:"filename"`
	Type        string  `json:"type"`
	Url         string  `json:"url"`
}

type Message struct {
	// AgentId ID of the agent that produced this entry (FR-002). Always present.
	AgentId string `json:"agent_id"`

	// Attachments File attachments associated with this message.
	Attachments *[]struct {
		// MimeType MIME type of the attachment.
		MimeType string `json:"mime_type"`

		// Path Relative path within the session workspace.
		Path string `json:"path"`

		// Size File size in bytes.
		Size int64 `json:"size"`

		// Type Attachment category. Aligned with MediaPart.type enum.
		Type MessageAttachmentsType `json:"type"`
	} `json:"attachments,omitempty"`

	// CancelMethod How the cancel was applied — present only on type="turn_canceled" entries (FR-15). "graceful" lets the in-flight tool finish; "hard" interrupts immediately.
	CancelMethod *MessageCancelMethod `json:"cancel_method,omitempty"`

	// CanceledByChannel Channel that originated the cancel request — present only on type="turn_canceled" entries (FR-15).
	CanceledByChannel *string `json:"canceled_by_channel,omitempty"`

	// CanceledByUser Username of the actor who triggered the cancel — present only on type="turn_canceled" entries (FR-15).
	CanceledByUser *string `json:"canceled_by_user,omitempty"`

	// Content Raw markdown/text content of the message.
	Content *string `json:"content,omitempty"`

	// Cost USD cost for this entry. Absent when zero.
	Cost *float64 `json:"cost,omitempty"`

	// DescendantsCanceled IDs of descendant turns that were canceled in cascade — present only on type="turn_canceled" entries (FR-6a).
	DescendantsCanceled *[]string `json:"descendants_canceled,omitempty"`

	// Id Unique message identifier.
	Id string `json:"id"`

	// MessagesCompacted Number of messages compacted (present only on compaction entries).
	MessagesCompacted *int `json:"messages_compacted,omitempty"`

	// Role Author role. Absent on compaction entries.
	Role *MessageRole `json:"role,omitempty"`

	// Status Completion status of this message turn.
	Status *MessageStatus `json:"status,omitempty"`

	// Summary Compaction summary text (present only on type=compaction entries).
	Summary *string `json:"summary,omitempty"`

	// Timestamp RFC3339 timestamp when this entry was recorded.
	Timestamp time.Time `json:"timestamp"`

	// Tokens Token count for this entry (input + output). Absent when zero.
	Tokens *int `json:"tokens,omitempty"`

	// ToolCalls Tool invocations made during this message turn.
	ToolCalls *[]struct {
		// DurationMs Elapsed time in milliseconds. Absent when still running.
		DurationMs *int64 `json:"duration_ms,omitempty"`

		// Id Unique tool call identifier (ToolCallID type on the Go side).
		Id string `json:"id"`

		// Parameters Input parameters passed to the tool.
		Parameters *map[string]interface{} `json:"parameters,omitempty"`

		// ParentToolCallId Parent tool call ID for nested subagent tool invocations.
		ParentToolCallId *string `json:"parent_tool_call_id,omitempty"`

		// Result Return value from the tool. Shape is tool-specific.
		Result *map[string]interface{} `json:"result,omitempty"`

		// Status Outcome of the tool call.
		Status MessageToolCallsStatus `json:"status"`

		// Tool Tool name as registered in the tool registry (e.g. "workspace.shell", "web_search").
		Tool string `json:"tool"`
	} `json:"tool_calls,omitempty"`

	// Truncated Set to true on the last assistant entry when a turn is canceled mid-stream (FR-14). Only present when true. The SPA renders an "(interrupted)" suffix on the bubble when this is set.
	Truncated *bool `json:"truncated,omitempty"`

	// TurnId Turn identifier — present only on type="turn_canceled" entries (FR-15). Identifies the turn that was canceled.
	TurnId *string `json:"turn_id,omitempty"`

	// Type Entry classification. Absent or empty means "message" (backwards compatible). "compaction" entries summarize pruned context; "system" entries are internal markers; "tool_call" entries record tool invocations; "turn_canceled" entries mark a turn that was canceled mid-stream (FR-15). The Go-side EntryType constant set is the source of truth (`pkg/session/daypartition.go`).
	Type *MessageType `json:"type,omitempty"`
}

type MessageAttachmentsType string

type MessageCancelMethod string

type MessageFrame struct {
	AgentId *string `json:"agent_id,omitempty"`
	Content string  `json:"content"`
	// Optional media:// refs for files the user attached to this message (e.g. images uploaded via POST /api/v1/upload). The server threads each ref into the LLM content array as a multimodal content block so the agent can see the attachment. Empty or omitted for text-only messages.
	Media     []string `json:"media,omitempty"`
	SessionId *string  `json:"session_id,omitempty"`
	Type      string   `json:"type"`
}

type MessageRole string

type MessageStatus string

type MessageToolCallsStatus string

type MessageType string

type N400BadRequest = ErrorResponse

type N401Unauthorized = ErrorResponse

type N403Forbidden = ErrorResponse

type N404NotFound = ErrorResponse

type N409Conflict = ErrorResponse

type N422UnprocessableEntity = ErrorResponse

type N429TooManyRequests = ErrorResponse

type N500InternalServerError = ErrorResponse

type N503ServiceUnavailable = ErrorResponse

type Notification struct {
	// AgentId The agent the notification concerns.
	AgentId *string `json:"agent_id,omitempty"`

	// Body Optional detail (e.g. the failure reason).
	Body        *string `json:"body,omitempty"`
	CreatedAtMs int64   `json:"created_at_ms"`
	Id          string  `json:"id"`

	// Read Per-user read state.
	Read bool `json:"read"`

	// ScheduleId Click-through target when the notification concerns a schedule.
	ScheduleId *string `json:"schedule_id,omitempty"`

	// SessionId Click-through target when the notification concerns a run's session.
	SessionId *string              `json:"session_id,omitempty"`
	Severity  NotificationSeverity `json:"severity"`
	Title     string               `json:"title"`

	// Type The event class. Extensible; consumers must tolerate unknown values.
	Type NotificationType `json:"type"`

	// UpdatedAtMs Set when a coalesced notification is updated (e.g. repeated schedule failure).
	UpdatedAtMs *int64 `json:"updated_at_ms,omitempty"`
}

type NotificationFrame struct {
	AgentId          *string `json:"agent_id,omitempty"`
	Body             *string `json:"body,omitempty"`
	CreatedAtMs      int     `json:"created_at_ms"`
	Id               string  `json:"id"`
	NotificationType string  `json:"notification_type"`
	Read             bool    `json:"read"`
	ScheduleId       *string `json:"schedule_id,omitempty"`
	SessionId        *string `json:"session_id,omitempty"`
	Severity         string  `json:"severity"`
	Title            string  `json:"title"`
	Type             string  `json:"type"`
}

type NotificationList struct {
	// Notifications Newest first.
	Notifications []struct {
		// AgentId The agent the notification concerns.
		AgentId *string `json:"agent_id,omitempty"`

		// Body Optional detail (e.g. the failure reason).
		Body        *string `json:"body,omitempty"`
		CreatedAtMs int64   `json:"created_at_ms"`
		Id          string  `json:"id"`

		// Read Per-user read state.
		Read bool `json:"read"`

		// ScheduleId Click-through target when the notification concerns a schedule.
		ScheduleId *string `json:"schedule_id,omitempty"`

		// SessionId Click-through target when the notification concerns a run's session.
		SessionId *string                               `json:"session_id,omitempty"`
		Severity  NotificationListNotificationsSeverity `json:"severity"`
		Title     string                                `json:"title"`

		// Type The event class. Extensible; consumers must tolerate unknown values.
		Type NotificationListNotificationsType `json:"type"`

		// UpdatedAtMs Set when a coalesced notification is updated (e.g. repeated schedule failure).
		UpdatedAtMs *int64 `json:"updated_at_ms,omitempty"`
	} `json:"notifications"`

	// UnreadCount Number of unread notifications for the badge.
	UnreadCount int `json:"unread_count"`
}

type NotificationListNotificationsSeverity string

type NotificationListNotificationsType string

type NotificationSeverity string

type NotificationType string

type OnboardingCompleteRequest struct {
	// Admin Initial admin account credentials.
	Admin struct {
		// Password Admin password. Minimum 8 characters.
		Password string `json:"password"`

		// Username Admin login name.
		Username string `json:"username"`
	} `json:"admin"`

	// Provider LLM provider configuration to persist.
	Provider struct {
		// ApiKey API key for the provider. Stored encrypted (AES-256-GCM) in credentials.json.
		ApiKey string `json:"api_key"`

		// Id Provider protocol identifier (e.g. "anthropic", "openai", "openrouter", "gemini"). Must be a known protocol; unknown values are rejected with 400.
		Id string `json:"id"`

		// Model Default model to use for this provider. When omitted, a sensible default is chosen per provider (e.g. "claude-sonnet-4-6" for anthropic, "gpt-4o" for openai).
		Model *string `json:"model,omitempty"`
	} `json:"provider"`
}

type OnboardingCompleteResponse struct {
	// Role RBAC role of the authenticated user.
	Role OnboardingCompleteResponseRole `json:"role"`

	// Token Canonical opaque bearer token format used by Omnipus. The prefix "omnipus_" (8 characters) followed by 64 lowercase hex characters (32 random bytes), giving a total length of 72 characters. Used in Authorization headers, WS AuthFrame, and rotate-token responses.
	Token string `json:"token"`

	// Username The authenticated user's login name.
	Username string `json:"username"`

	// Warning Non-fatal advisory message. Present on onboarding/complete when the credential store is locked and the API key was stored in plaintext.
	Warning *string `json:"warning,omitempty"`
}

type OnboardingCompleteResponseRole string

type OnboardingStatusResponse struct {
	// OnboardingComplete True when onboarding has been successfully marked as complete.
	OnboardingComplete bool `json:"onboarding_complete"`
}

type OperationResult struct {
	// Error Human-readable error message. Present only when success=false.
	Error *string `json:"error,omitempty"`

	// Success True when the operation succeeded.
	Success bool `json:"success"`
}

type PatchAgentOwnershipJSONRequestBody = AgentOwnershipUpdateRequest

type PatchAppStateJSONRequestBody = AppStatePatchRequest

type PendingRestartEntry struct {
	// AppliedValue Value currently applied to the running process (boot-time snapshot).
	AppliedValue interface{} `json:"applied_value"`

	// Key Dotted config key path (e.g. "sandbox.mode", "gateway.port"). Only RestartGatedKeys appear here — hot-reload keys never appear.
	Key string `json:"key"`

	// PersistedValue Value currently on disk (what will be applied after restart).
	PersistedValue interface{} `json:"persisted_value"`
}

type PingFrame struct {
	Type string `json:"type"`
}

type PongFrame struct {
	Type string `json:"type"`
}

type PostChatJSONRequestBody = SseChatRequest

type PostToolApprovalJSONRequestBody = ToolApprovalActionRequest

type ProbeProviderJSONRequestBody = ProbeProviderRequest

type ProbeProviderRequest struct {
	// ApiKey API key to test against the provider.
	ApiKey string `json:"api_key"`

	// Endpoint Optional override for the provider's API base URL. When omitted, the server uses the provider's well-known default endpoint.
	Endpoint *string `json:"endpoint,omitempty"`

	// Id Provider protocol identifier. Must be one of the recognized protocol names that Omnipus can connect to. Validated server-side against the known protocol registry (pkg/providers.IsKnownProtocol).
	Id ProbeProviderRequestId `json:"id"`
}

type ProbeProviderRequestId string

type ProbeProviderResponse struct {
	// Error Human-readable error from the upstream provider. Present only when success=false.
	Error *string `json:"error,omitempty"`

	// Models List of model IDs returned by the provider. Present only when success=true.
	Models *[]string `json:"models,omitempty"`

	// Success Whether the provider accepted the API key.
	Success bool `json:"success"`
}

type PromptGuardResponse struct {
	// Level Current prompt injection detection strictness level.
	Level PromptGuardResponseLevel `json:"level"`

	// RequiresRestart Always false — prompt guard is hot-reloaded.
	RequiresRestart bool `json:"requires_restart"`
}

type PromptGuardResponseLevel string

type PromptGuardUpdateRequest struct {
	// Level New prompt injection detection strictness level.
	Level PromptGuardUpdateRequestLevel `json:"level"`
}

type PromptGuardUpdateRequestLevel string

type PromptGuardUpdateResponse struct {
	// AppliedLevel The prompt guard level now active.
	AppliedLevel PromptGuardUpdateResponseAppliedLevel `json:"applied_level"`

	// RequiresRestart False when hot-reload succeeded. True when hot-reload failed (warning will be present).
	RequiresRestart bool `json:"requires_restart"`

	// Saved True when the configuration was successfully persisted to disk.
	Saved bool `json:"saved"`

	// Warning Present when hot-reload failed — config is saved but restart is required.
	Warning *string `json:"warning,omitempty"`
}

type PromptGuardUpdateResponseAppliedLevel string

type Provider struct {
	// DisplayName Branded display name for UI presentation (e.g. "OpenRouter", "Anthropic"). Falls back to name when absent.
	DisplayName *string `json:"display_name,omitempty"`

	// Error Fatal error message when status is "error". Absent for connected/disconnected providers.
	Error *string `json:"error,omitempty"`

	// HasApiKey True when the provider has a stored API key in credentials. The key itself is never returned. Absent on legacy entries that predate this field — treat as false when absent.
	HasApiKey *bool `json:"has_api_key,omitempty"`

	// Id Provider identifier (e.g. "anthropic", "openai", "openrouter").
	Id string `json:"id"`

	// Models Alphabetically sorted list of model IDs available from this provider, fetched from the upstream /models endpoint when an API key is present. Empty array when the upstream fetch fails or no key is configured.
	Models []string `json:"models"`

	// Name Human-readable provider name (may be the same as id for unknown providers).
	Name string `json:"name"`

	// Status "connected" when at least one API key is configured for this provider. "disconnected" when no key is available or on the fallback default entry. "error" when the provider is configured but the upstream returned a non-retryable error.
	Status ProviderStatus `json:"status"`

	// Warning Non-fatal advisory message (e.g. "could not fetch upstream model list: ..."). Absent when there are no warnings.
	Warning *string `json:"warning,omitempty"`
}

type ProviderStatus string

type ProviderUpdateRequest struct {
	// ApiKey API key for the provider. Stored encrypted (AES-256-GCM) in credentials.json. Required when adding a new provider; optional when updating an existing one (omit to leave the current key unchanged).
	ApiKey *string `json:"api_key,omitempty"`

	// Model Default model to use for this provider. Defaults to "default" when not specified on new providers.
	Model *string `json:"model,omitempty"`
}

type PutUserContextJSONRequestBody = UserContextRequest

type RateLimitConfig struct {
	// DailyCostCap Maximum allowed daily LLM cost in USD. 0 = unlimited. Only present in GET responses (mapped from daily_cost_cap_usd).
	DailyCostCap *float64 `json:"daily_cost_cap,omitempty"`

	// DailyCostCapUsd Maximum allowed daily LLM cost in USD. 0 = unlimited. Used in PUT request body.
	DailyCostCapUsd *float64 `json:"daily_cost_cap_usd,omitempty"`

	// DailyCostUsd Current cumulative LLM spending for today (UTC). Only present in GET responses.
	DailyCostUsd *float64 `json:"daily_cost_usd,omitempty"`

	// Enabled True when any rate limit cap is configured. Derived from whether any limit field is non-zero. Only present in GET responses.
	Enabled *bool `json:"enabled,omitempty"`

	// MaxAgentLlmCallsPerHour Maximum LLM API calls per agent per hour. 0 = unlimited.
	MaxAgentLlmCallsPerHour *int64 `json:"max_agent_llm_calls_per_hour,omitempty"`

	// MaxAgentToolCallsPerMinute Maximum tool calls per agent per minute. 0 = unlimited.
	MaxAgentToolCallsPerMinute *int64 `json:"max_agent_tool_calls_per_minute,omitempty"`
}

type RateLimitFrame struct {
	AgentId           *string `json:"agent_id,omitempty"`
	PolicyRule        string  `json:"policy_rule"`
	Resource          string  `json:"resource"`
	RetryAfterSeconds float64 `json:"retry_after_seconds"`
	Scope             string  `json:"scope"`
	SessionId         string  `json:"session_id"`
	Tool              *string `json:"tool,omitempty"`
	Type              string  `json:"type"`
}

type RateLimitsResponse struct {
	// DailyCostCap Configured daily cost cap in USD. 0 means unlimited.
	DailyCostCap float64 `json:"daily_cost_cap"`

	// DailyCostUsd Live daily LLM cost accumulated so far today.
	DailyCostUsd float64 `json:"daily_cost_usd"`
	Enabled      bool    `json:"enabled"`

	// MaxAgentLlmCallsPerHour Maximum LLM calls per hour across all agents. 0 means unlimited.
	MaxAgentLlmCallsPerHour int64 `json:"max_agent_llm_calls_per_hour"`

	// MaxAgentToolCallsPerMinute Maximum tool calls per minute across all agents. 0 means unlimited.
	MaxAgentToolCallsPerMinute int64 `json:"max_agent_tool_calls_per_minute"`
}

type RateLimitsUpdateRequest struct {
	// DailyCostCapUsd Daily cost cap in USD. 0 = unlimited.
	DailyCostCapUsd *float64 `json:"daily_cost_cap_usd,omitempty"`

	// MaxAgentLlmCallsPerHour Maximum LLM calls per hour. 0 = unlimited.
	MaxAgentLlmCallsPerHour *int64 `json:"max_agent_llm_calls_per_hour,omitempty"`

	// MaxAgentToolCallsPerMinute Maximum tool calls per minute. 0 = unlimited.
	MaxAgentToolCallsPerMinute *int64 `json:"max_agent_tool_calls_per_minute,omitempty"`
}

type RateLimitsUpdateResponse struct {
	// Applied The effective configuration after the update. Present only when hot-reload succeeded.
	Applied *struct {
		// DailyCostCapUsd Applied daily cost cap in USD.
		DailyCostCapUsd *float64 `json:"daily_cost_cap_usd,omitempty"`

		// MaxAgentLlmCallsPerHour Applied LLM calls per hour limit.
		MaxAgentLlmCallsPerHour *int64 `json:"max_agent_llm_calls_per_hour,omitempty"`

		// MaxAgentToolCallsPerMinute Applied tool calls per minute limit.
		MaxAgentToolCallsPerMinute *int64 `json:"max_agent_tool_calls_per_minute,omitempty"`
	} `json:"applied,omitempty"`

	// RequiresRestart Always false for rate limits — they are hot-reloaded. Set to true when hot-reload failed (warning will be present).
	RequiresRestart bool `json:"requires_restart"`

	// Saved True when the configuration was successfully persisted to disk.
	Saved bool `json:"saved"`

	// Warning Present when hot-reload failed — config is saved but restart is required.
	Warning *string `json:"warning,omitempty"`
}

type RegisterAdminJSONRequestBody = RegisterAdminRequest

type RegisterAdminRequest struct {
	// Password Password for the new admin account. Minimum 8 characters, maximum 72 (bcrypt limit).
	Password string `json:"password"`

	// Username Must start with an alphanumeric character and contain only letters, digits, dots, dashes, and underscores. Length 2-63 characters.
	Username string `json:"username"`
}

type RenameSessionJSONRequestBody = SessionRenameRequest

type ReplayMessageFrame struct {
	AgentId   *string `json:"agent_id,omitempty"`
	Content   string  `json:"content"`
	Id        *string `json:"id,omitempty"`
	Role      string  `json:"role"`
	SessionId string  `json:"session_id"`
	Timestamp *string `json:"timestamp,omitempty"`
	Type      string  `json:"type"`
}

type ReplayWarningFrame struct {
	Message   string              `json:"message"`
	SessionId string              `json:"session_id"`
	Stats     *ReplayWarningStats `json:"stats,omitempty"`
	Type      string              `json:"type"`
}

type ReplayWarningStats struct {
	DuplicateToolCallIdCount *int `json:"duplicate_tool_call_id_count,omitempty"`
}

type ResetUserPasswordJSONRequestBody = UserResetPasswordRequest

type RestoreBackup200JSONResponseBodyStatus string

type RestoreBackupJSONRequestBody = RestoreBackupRequest

type RestoreBackupRequest struct {
	// Filename Name of the backup file (without path). Must not contain path separators or traversal sequences. Must end with .tar.gz.
	Filename string `json:"filename"`
}

type RetentionConfig struct {
	// Disabled When true, retention sweeps are disabled and session logs are kept forever.
	Disabled *bool `json:"disabled,omitempty"`

	// SessionDays Number of days to retain session logs. 0 means use the system default (90 days). Only present when a custom retention period is set.
	SessionDays *int `json:"session_days,omitempty"`
}

type RetentionSweepResult struct {
	// Removed Number of session directories removed during the sweep.
	Removed int `json:"removed"`

	// SkippedReason Present when the sweep was skipped without removing anything. Currently only "disabled" (retention is configured as disabled).
	SkippedReason *string `json:"skipped_reason,omitempty"`
}