types

type APIActivity struct {
	ID     uint
	UserID string
	Date   time.Time
}

type APIKey struct {
	APIKeyScopes `json:",inline"`

	ID           uint       `json:"id" gorm:"primaryKey;autoIncrement"`
	UserID       uint       `json:"userId" gorm:"index"`
	Name         string     `json:"name"`                  // User-provided name for the key
	Description  string     `json:"description,omitempty"` // Optional description
	HashedSecret string     `json:"-"`                     // bcrypt hash of the secret portion only
	CreatedAt    time.Time  `json:"createdAt"`
	LastUsedAt   *time.Time `json:"lastUsedAt,omitempty"`
	ExpiresAt    *time.Time `json:"expiresAt,omitempty"` // nil means no expiration
}

type APIKeyCreateResponse struct {
	APIKey
	Key string `json:"key"` // The full key, only shown once
}

type APIKeyScopes struct {
	CanAccessAPI                bool `json:"canAccessAPI" gorm:"default:false;not null"`
	CanAccessSkills             bool `json:"canAccessSkills" gorm:"default:false;not null"`
	CanAccessLLMProxy           bool `json:"canAccessLLMProxy" gorm:"default:false;not null"`
	CanAccessDeviceScans        bool `json:"canAccessDeviceScans" gorm:"default:false;not null"`
	CanAccessPublishedArtifacts bool `json:"canAccessPublishedArtifacts" gorm:"default:false;not null"`

	// MCPServerIDs contains Kubernetes resource names of MCPServers this key can access.
	// Supports all server types: single-user, multi-user, remote, and composite.
	// Use "*" as a wildcard to grant access to all servers the user can access.
	// This may be empty for skills-only API keys.
	MCPServerIDs []string `json:"mcpServerIds,omitempty" gorm:"serializer:json"`
}

type AuthToken struct {
	ID                    string    `json:"id" gorm:"index:idx_id_hashed_token"`
	UserID                uint      `json:"-" gorm:"index"`
	AuthProviderNamespace string    `json:"-" gorm:"index"`
	AuthProviderName      string    `json:"-" gorm:"index"`
	AuthProviderUserID    string    `json:"-"`
	HashedToken           string    `json:"-" gorm:"index:idx_id_hashed_token"`
	CreatedAt             time.Time `json:"createdAt"`
	ExpiresAt             time.Time `json:"expiresAt,omitzero"`
	NoExpiration          bool      `json:"noExpiration"`
}

type ClientStat struct {
	Name             string `gorm:"column:name"`
	DeviceCount      int64  `gorm:"column:device_count"`
	UserCount        int64  `gorm:"column:user_count"`
	ObservationCount int64  `gorm:"column:observation_count"`
}

type Credential struct {
	ID        uint              `json:"id" gorm:"primaryKey;autoIncrement"`
	CreatedAt time.Time         `json:"createdAt"`
	Context   string            `json:"context" gorm:"uniqueIndex:idx_credentials_context_name;not null"`
	Name      string            `json:"name" gorm:"uniqueIndex:idx_credentials_context_name;not null"`
	Secrets   map[string]string `json:"secrets" gorm:"serializer:json"`
	Encrypted bool              `json:"-"`
}

type Device struct {
	ID                 uint       `json:"id" gorm:"primaryKey;autoIncrement"`
	DeviceID           string     `json:"deviceID" gorm:"uniqueIndex;not null"`                                                   // client-computed, stable
	MDMConfigurationID uint       `json:"mdmConfigurationID" gorm:"index:idx_devices_configuration_enrolled,priority:1;not null"` // the configuration this device belongs to
	PublicKey          []byte     `json:"-"`                                                                                      // DER SubjectPublicKeyInfo (PKIX) of the identity key
	Hostname           string     `json:"hostname,omitempty"`
	OS                 string     `json:"os,omitempty"`
	OSVersion          string     `json:"osVersion,omitempty"`
	EnrolledAt         time.Time  `json:"enrolledAt" gorm:"index:idx_devices_configuration_enrolled,priority:2"`
	LastSeenAt         *time.Time `json:"lastSeenAt,omitempty"`
}

type DeviceEnrollmentKey struct {
	ID                 uint       `json:"id" gorm:"primaryKey;autoIncrement"`
	MDMConfigurationID uint       `json:"mdmConfigurationID" gorm:"index;not null"`
	Name               string     `json:"name,omitempty"` // optional, admin-provided
	HashedSecret       string     `json:"-"`              // bcrypt hash of the secret portion only
	CreatedBy          uint       `json:"createdBy"`
	CreatedAt          time.Time  `json:"createdAt"`
	LastUsedAt         *time.Time `json:"lastUsedAt,omitempty"`
	ExpiresAt          *time.Time `json:"expiresAt,omitempty"` // nil means no expiration
}

type DeviceEnrollmentKeyCreateResponse struct {
	DeviceEnrollmentKey
	EnrollmentCredential string `json:"enrollmentCredential"` // ode1-..., shown once
}

type DeviceScan struct {
	ID             uint      `json:"id" gorm:"primaryKey"`
	CreatedAt      time.Time `json:"createdAt" gorm:"index:idx_ds_user_time,priority:2;index:idx_ds_device_time,priority:2"`
	SubmittedBy    string    `json:"submittedBy" gorm:"index:idx_ds_user_time,priority:1"`
	DeviceID       string    `json:"deviceID" gorm:"index:idx_ds_device_time,priority:1"`
	Hostname       string    `json:"hostname"`
	Username       string    `json:"username"`
	OS             string    `json:"os"`
	Arch           string    `json:"arch"`
	ScannerVersion string    `json:"scannerVersion"`
	ScannedAt      time.Time `json:"scannedAt" gorm:"index"`

	MCPServers []DeviceScanMCPServer `json:"mcpServers,omitempty" gorm:"foreignKey:DeviceScanID;constraint:OnDelete:CASCADE"`
	Skills     []DeviceScanSkill     `json:"skills,omitempty"     gorm:"foreignKey:DeviceScanID;constraint:OnDelete:CASCADE"`
	Plugins    []DeviceScanPlugin    `json:"plugins,omitempty"    gorm:"foreignKey:DeviceScanID;constraint:OnDelete:CASCADE"`
	Files      []DeviceScanFile      `json:"files,omitempty"      gorm:"foreignKey:DeviceScanID;constraint:OnDelete:CASCADE"`
	Clients    []DeviceScanClient    `json:"clients,omitempty"    gorm:"foreignKey:DeviceScanID;constraint:OnDelete:CASCADE"`
}

type DeviceScanClient struct {
	ID            uint      `json:"id" gorm:"primaryKey"`
	DeviceScanID  uint      `json:"deviceScanID" gorm:"index;not null"`
	CreatedAt     time.Time `json:"createdAt" gorm:"index"`
	Name          string    `json:"name" gorm:"index"`
	Version       string    `json:"version"`
	BinaryPath    string    `json:"binaryPath"`
	InstallPath   string    `json:"installPath"`
	ConfigPath    string    `json:"configPath"`
	HasMCPServers bool      `json:"hasMCPServers"`
	HasSkills     bool      `json:"hasSkills"`
	HasPlugins    bool      `json:"hasPlugins"`
}

type DeviceScanFile struct {
	ID           uint      `json:"id" gorm:"primaryKey"`
	DeviceScanID uint      `json:"deviceScanID" gorm:"index;not null"`
	CreatedAt    time.Time `json:"createdAt" gorm:"index"`
	Path         string    `json:"path" gorm:"index"`
	SizeBytes    int64     `json:"sizeBytes"`
	Oversized    bool      `json:"oversized"`
	Content      string    `json:"content" gorm:"type:text"`
}

type DeviceScanMCPServer struct {
	ID           uint                        `json:"id" gorm:"primaryKey"`
	DeviceScanID uint                        `json:"deviceScanID" gorm:"index;not null"`
	CreatedAt    time.Time                   `json:"createdAt" gorm:"index"`
	Client       string                      `json:"client" gorm:"index"`
	Scope        string                      `json:"scope" gorm:"index"`
	ProjectPath  string                      `json:"projectPath" gorm:"index"`
	File         string                      `json:"file"`
	Name         string                      `json:"name" gorm:"index"`
	Transport    string                      `json:"transport" gorm:"index"`
	Command      string                      `json:"command"`
	Args         datatypes.JSONSlice[string] `json:"args"`
	URL          string                      `json:"url"`
	EnvKeys      datatypes.JSONSlice[string] `json:"envKeys"`
	HeaderKeys   datatypes.JSONSlice[string] `json:"headerKeys"`
	ConfigHash   string                      `json:"configHash" gorm:"index"`
}

type DeviceScanPlugin struct {
	ID            uint                        `json:"id" gorm:"primaryKey"`
	DeviceScanID  uint                        `json:"deviceScanID" gorm:"index;not null"`
	CreatedAt     time.Time                   `json:"createdAt" gorm:"index"`
	Client        string                      `json:"client" gorm:"index"`
	Scope         string                      `json:"scope" gorm:"index"`
	ProjectPath   string                      `json:"projectPath" gorm:"index"`
	ConfigPath    string                      `json:"configPath"`
	Name          string                      `json:"name" gorm:"index"`
	PluginType    string                      `json:"pluginType" gorm:"index"`
	Version       string                      `json:"version"`
	Description   string                      `json:"description"`
	Author        string                      `json:"author"`
	Enabled       bool                        `json:"enabled"`
	Marketplace   string                      `json:"marketplace"`
	Files         datatypes.JSONSlice[string] `json:"files"`
	HasMCPServers bool                        `json:"hasMCPServers"`
	HasSkills     bool                        `json:"hasSkills"`
	HasRules      bool                        `json:"hasRules"`
	HasCommands   bool                        `json:"hasCommands"`
	HasHooks      bool                        `json:"hasHooks"`
}

type DeviceScanSkill struct {
	ID           uint                        `json:"id" gorm:"primaryKey"`
	DeviceScanID uint                        `json:"deviceScanID" gorm:"index;not null"`
	CreatedAt    time.Time                   `json:"createdAt" gorm:"index"`
	Client       string                      `json:"client" gorm:"index"`
	Scope        string                      `json:"scope" gorm:"index"`
	ProjectPath  string                      `json:"projectPath" gorm:"index"`
	File         string                      `json:"file"`
	Name         string                      `json:"name" gorm:"index"`
	Description  string                      `json:"description"`
	HasScripts   bool                        `json:"hasScripts"`
	GitRemoteURL string                      `json:"gitRemoteURL" gorm:"index"`
	Files        datatypes.JSONSlice[string] `json:"files"`
}

type EnforcementDecisionLog struct {
	ID        uint      `json:"id" gorm:"primaryKey;autoIncrement"`
	CreatedAt time.Time `json:"createdAt" gorm:"index"`

	// Fields describing the device:
	MDMConfigurationID uint   `json:"mdmConfigurationID" gorm:"index"`
	DeviceID           string `json:"deviceID,omitempty" gorm:"index"`
	ClientIP           string `json:"clientIP,omitempty" gorm:"index"`

	// Fields describing the tool call:
	Agent      string `json:"agent,omitempty" gorm:"index"`
	Tool       string `json:"tool,omitempty" gorm:"index"`
	Kind       string `json:"kind,omitempty" gorm:"index"`
	ServerName string `json:"serverName,omitempty" gorm:"index"`
	ObotHosted bool   `json:"obotHosted,omitempty"`

	// Resolved server identity.
	ServerURL            string `json:"serverURL,omitempty"`
	ServerHostname       string `json:"serverHostname,omitempty"`
	ServerCommand        string `json:"serverCommand,omitempty"`
	ServerPackageSource  string `json:"serverPackageSource,omitempty"`
	ServerPackageName    string `json:"serverPackageName,omitempty"`
	ServerPackageVersion string `json:"serverPackageVersion,omitempty"`
	ServerConnector      string `json:"serverConnector,omitempty"`

	// Unresolved records that the device could not establish what the call
	// targeted, with UnresolvedReason naming the cause it reported. The row is
	// always a deny; these distinguish "we could not identify this" from "this
	// is identified and not allowlisted".
	Unresolved       bool   `json:"unresolved,omitempty"`
	UnresolvedReason string `json:"unresolvedReason,omitempty"`

	// Decision is the evaluator verdict: types.EnforcementDecisionAllow or
	// types.EnforcementDecisionDeny. Reason is the evaluator's human-readable
	// justification.
	Decision string `json:"decision" gorm:"index"`
	Reason   string `json:"reason,omitempty"`
}

type Group struct {
	// ID is the globally unique identifier for the group.
	// Each auth provider should use a different prefix for their groups to avoid collisions with other providers.
	ID string `json:"id" gorm:"primaryKey;unique"`

	// AuthProviderName is the name of the auth provider that the group belongs to.
	// This is used to identify the auth provider that the group belongs to.
	AuthProviderName string `json:"authProviderName" gorm:"primaryKey;index:idx_group_auth_provider"`

	// AuthProviderNamespace is the namespace of the auth provider that the group belongs to.
	// Note: This is pretty much always "default", but we're keeping it here for parity with the Identity type.
	AuthProviderNamespace string `json:"authProviderNamespace" gorm:"primaryKey;index:idx_group_auth_provider"`

	// Name is the display name of the group.
	Name string `json:"name"`

	// IconURL is the URL of the group's icon.
	IconURL *string `json:"iconURL"`
}

type GroupMemberships struct {
	// UserID is the ID of the user that is a member of the group.
	UserID uint `json:"userID" gorm:"primaryKey"`

	// GroupID is the globally unique identifier for the group.
	GroupID string `json:"groupID" gorm:"primaryKey"`

	// CreatedAt is when the group membership was created.
	CreatedAt time.Time `json:"createdAt" gorm:"autoCreateTime"`
}

type GroupRoleAssignment struct {
	// GroupName is the name of the auth provider group (used as primary key)
	GroupName string `json:"groupName" gorm:"primaryKey"`

	// CreatedAt is when the assignment was created
	CreatedAt time.Time `json:"createdAt" gorm:"autoCreateTime"`

	// UpdatedAt is when the assignment was last modified
	UpdatedAt time.Time `json:"updatedAt" gorm:"autoUpdateTime"`

	// Role is the role to assign to all members of the group
	Role types2.Role `json:"role" gorm:"not null"`

	// Description is an optional description of why this assignment exists
	Description string `json:"description"`
}

type Identity struct {
	AuthProviderName      string    `json:"authProviderName" gorm:"primaryKey;index:idx_user_auth_id"`
	AuthProviderNamespace string    `json:"authProviderNamespace" gorm:"primaryKey;index:idx_user_auth_id"`
	ProviderUsername      string    `json:"providerUsername"`
	ProviderUserID        string    `json:"providerUserID"`
	HashedProviderUserID  string    `json:"hashedProviderUserID" gorm:"primaryKey"`
	ProviderGroupLookupID string    `json:"providerGroupLookupID"`
	Email                 string    `json:"email"`
	HashedEmail           string    `json:"hashedEmail"`
	UserID                uint      `json:"userID" gorm:"index:idx_user_auth_id"`
	IconURL               string    `json:"iconURL"`
	IconLastChecked       time.Time `json:"iconLastChecked"`
	Encrypted             bool      `json:"encrypted"`

	// AuthProviderGroupsLastChecked is the last time the identity's auth provider groups were checked.
	AuthProviderGroupsLastChecked time.Time `json:"authProviderGroupsLastChecked"`

	// AuthProviderGroups is the set of auth provider groups that the identity is a member of.
	AuthProviderGroups []Group `json:"groups" gorm:"-"`
}

type Image struct {
	ID        string    `json:"id" gorm:"primaryKey;autoIncrement:false"`
	CreatedAt time.Time `json:"createdAt"`
	Data      []byte    `json:"-" gorm:"type:bytea;not null"`
	MIMEType  string    `json:"mimeType" gorm:"type:varchar(100);not null"`
}

type LLMAuditLog struct {
	ID                        string    `gorm:"primaryKey;type:text"`
	CreatedAt                 time.Time `` /* 526-byte string literal not displayed */
	Duration                  int64
	UserID                    string `gorm:"type:text;index:idx_llm_audit_user_created,priority:1"`
	ModelProvider             string `gorm:"type:text;index:idx_llm_audit_provider_created,priority:1"`
	ModelID                   string `gorm:"type:text"`
	TargetModel               string `gorm:"type:text;index:idx_llm_audit_target_model_created,priority:1"`
	ReasoningEffort           string `gorm:"type:text"`
	RequestPath               string `gorm:"type:text;index:idx_llm_audit_request_path_created,priority:1"`
	RequestMethod             string `gorm:"type:text"`
	RequestHeaders            json.RawMessage
	RequestBody               json.RawMessage
	PolicyModifiedRequestBody json.RawMessage
	MessagePolicyTriggered    bool `gorm:"not null;default:false;index:idx_llm_audit_message_policy_triggered_created,priority:1"`
	ResponseHeaders           json.RawMessage
	ResponseBody              json.RawMessage
	ResponseID                string `gorm:"type:text;index:idx_llm_audit_response_created,priority:1"`
	ResponseStatus            int    `gorm:"index:idx_llm_audit_response_status_created,priority:1"`
	Outcome                   string `gorm:"type:text;index:idx_llm_audit_outcome_created,priority:1"`
	Error                     string `gorm:"type:text"`
	InputTokens               int
	OutputTokens              int
	RequestID                 string `gorm:"type:text"`
	UserAgent                 string `gorm:"type:text;index:idx_llm_audit_user_agent_created,priority:1"`
	ClientSessionID           string `gorm:"type:text;index:idx_llm_audit_client_session_created,priority:1"`
	ClientIP                  string `gorm:"type:text"`
	Encrypted                 bool
}

type LocalAgentToolCallAuditLogFields struct {
	OccurredAt time.Time  `json:"occurredAt" gorm:"index"`
	StartedAt  *time.Time `json:"startedAt,omitempty" gorm:"index"`

	// ActorType and ActorID are stamped from authenticated request context. They are never copied
	// from the client-reported event.
	ActorType types2.AuditLogActorType `json:"actorType" gorm:"index"`
	ActorID   string                   `json:"actorID,omitempty" gorm:"index"`

	ActionName string `json:"actionName" gorm:"index"`
	ActionKind string `json:"actionKind,omitempty" gorm:"index"`

	TargetType       types2.AuditLogTargetType `json:"targetType" gorm:"index"`
	TargetName       string                    `json:"targetName" gorm:"index"`
	TargetParentType types2.AuditLogTargetType `json:"targetParentType,omitempty" gorm:"index"`
	TargetParentName string                    `json:"targetParentName,omitempty" gorm:"index"`

	OutcomeStatus types2.AuditLogOutcomeStatus `json:"outcomeStatus" gorm:"index"`
	OutcomeReason string                       `json:"outcomeReason,omitempty" gorm:"index"`
	OutcomeError  string                       `json:"outcomeError,omitempty" gorm:"column:local_agent_error"`
	DurationMs    int64                        `json:"durationMs,omitempty" gorm:"index"`

	// IdempotencyKey deduplicates repeated submissions of the same completed audit entry.
	IdempotencyKey string `json:"idempotencyKey" gorm:"uniqueIndex"`
	// ToolUseID is the tool-use identifier from the agent runtime, when available.
	ToolUseID string `json:"toolUseID,omitempty" gorm:"index"`
	SessionID string `json:"sessionID,omitempty" gorm:"index"`
	// TurnID identifies the conversation turn that produced this tool call.
	TurnID string `json:"turnID,omitempty" gorm:"index"`

	AgentProvider  types2.LocalAgentProvider `json:"agentProvider" gorm:"index"`
	AgentVersion   string                    `json:"agentVersion,omitempty" gorm:"index"`
	CLIName        string                    `json:"cliName,omitempty"`
	CLIVersion     string                    `json:"cliVersion" gorm:"index"`
	Model          string                    `json:"model,omitempty" gorm:"index"`
	ModelID        string                    `json:"modelID,omitempty" gorm:"index"`
	PermissionMode string                    `json:"permissionMode,omitempty" gorm:"index"`

	DeviceID           string `json:"deviceID,omitempty" gorm:"index"`
	DeviceDeploymentID uint   `json:"deviceDeploymentID,omitempty" gorm:"index"`
	Hostname           string `json:"hostname,omitempty"`
	OS                 string `json:"os,omitempty" gorm:"index"`
	Architecture       string `json:"architecture,omitempty" gorm:"index"`
	LocalUsername      string `json:"localUsername,omitempty"`

	CWD               string                      `json:"cwd,omitempty"`
	GitRoot           string                      `json:"gitRoot,omitempty"`
	GitRemotes        datatypes.JSONSlice[string] `json:"gitRemotes,omitempty"`
	GitBranch         string                      `json:"gitBranch,omitempty"`
	GitCommit         string                      `json:"gitCommit,omitempty" gorm:"index"`
	ReportedUserEmail string                      `json:"reportedUserEmail,omitempty"`

	// TranscriptPath is the local path to the agent transcript, if the client reported one.
	TranscriptPath string `json:"transcriptPath,omitempty"`

	RequestBody  json.RawMessage `json:"requestBody,omitempty" gorm:"column:local_agent_request_body"`
	ResponseBody json.RawMessage `json:"responseBody,omitempty" gorm:"column:local_agent_response_body"`
	// RawEvent preserves the original hook payload for debugging and future parsers.
	RawEvent json.RawMessage `json:"rawEvent,omitempty" gorm:"column:local_agent_raw_event"`
}

type LocalAuthSession struct {
	ID        string    `json:"-" gorm:"primaryKey"`
	CreatedAt time.Time `json:"createdAt"`
	ExpiresAt time.Time `json:"expiresAt" gorm:"index"`
	UserID    uint      `json:"userID" gorm:"index"`
}

type LocalAuthUser struct {
	ID           uint      `json:"id" gorm:"primaryKey"`
	CreatedAt    time.Time `json:"createdAt"`
	UpdatedAt    time.Time `json:"updatedAt"`
	Email        string    `json:"email"`
	HashedEmail  string    `json:"-" gorm:"uniqueIndex"`
	PasswordHash string    `json:"-"`
	Encrypted    bool      `json:"-"`
}

type MCPAuditLog struct {
	ID         uint                      `json:"id" gorm:"primaryKey"`
	CreatedAt  time.Time                 `json:"createdAt" gorm:"index"`
	SourceType types2.AuditLogSourceType `json:"sourceType" gorm:"index;default:mcp"`
	UserID     string                    `json:"userID" gorm:"index"`
	ClientIP   string                    `json:"clientIP" gorm:"index"`

	MCPFields                *MCPAuditLogFields                `json:"mcpFields,omitempty" gorm:"embedded"`
	LocalAgentToolCallFields *LocalAgentToolCallAuditLogFields `json:"localAgentToolCallFields,omitempty" gorm:"embedded"`
	Encrypted                bool                              `json:"encrypted"`
}

type MCPAuditLogFields struct {
	APIKey                    string                                `json:"apiKey,omitempty"`
	MCPID                     string                                `json:"mcpID" gorm:"index"`
	PowerUserWorkspaceID      string                                `json:"powerUserWorkspaceID,omitempty" gorm:"index"`
	MCPServerDisplayName      string                                `json:"mcpServerDisplayName" gorm:"index"`
	MCPServerCatalogEntryName string                                `json:"mcpServerCatalogEntryName" gorm:"index"`
	ClientName                string                                `json:"clientName" gorm:"index"`
	ClientVersion             string                                `json:"clientVersion" gorm:"index"`
	CallType                  string                                `json:"callType" gorm:"index"`
	CallIdentifier            string                                `json:"callIdentifier,omitempty" gorm:"index"`
	RequestMutated            bool                                  `json:"requestMutated"`
	RequestBody               json.RawMessage                       `json:"requestBody,omitempty"`
	MutatedRequestBody        json.RawMessage                       `json:"mutatedRequestBody,omitempty"`
	ResponseMutated           bool                                  `json:"responseMutated"`
	ResponseBody              json.RawMessage                       `json:"responseBody,omitempty"`
	OriginalResponseBody      json.RawMessage                       `json:"originalResponseBody,omitempty"`
	ResponseStatus            int                                   `json:"responseStatus" gorm:"index"`
	Error                     string                                `json:"error,omitempty"`
	ProcessingTimeMs          int64                                 `json:"processingTimeMs" gorm:"index"`
	SessionID                 string                                `json:"sessionID,omitempty" gorm:"index"`
	WebhookStatuses           datatypes.JSONSlice[MCPWebhookStatus] `json:"webhookStatuses,omitempty"`
	ResponseReceived          bool                                  `json:"responseReceived"`

	// Additional metadata
	RequestID       string          `json:"requestID,omitempty" gorm:"index"`
	UserAgent       string          `json:"userAgent,omitempty"`
	RequestHeaders  json.RawMessage `json:"requestHeaders,omitempty"`
	ResponseHeaders json.RawMessage `json:"responseHeaders,omitempty"`
}

type MCPOAuthPendingState struct {
	HashedState        string `gorm:"primaryKey"`
	State              string
	Verifier           string
	UserID             string `gorm:"index:idx_pending_user_mcp"`
	MCPID              string `gorm:"index:idx_pending_user_mcp"`
	URL                string
	OAuthAuthRequestID string
	ClientID           string
	ClientSecret       string
	AuthURL            string
	TokenURL           string
	AuthStyle          oauth2.AuthStyle
	RedirectURL        string
	Scopes             string
	Encrypted          bool
	CreatedAt          time.Time
}

type MCPOAuthToken struct {
	oauth2.Endpoint
	ClientID     string
	ClientSecret string
	RedirectURL  string
	Scopes       string

	MCPID              string `gorm:"primaryKey"`
	UserID             string `gorm:"primaryKey"`
	URL                string
	OAuthAuthRequestID string `gorm:"index"`
	AccessToken        string
	TokenType          string
	RefreshToken       string
	Expiry             time.Time
	ExpiresIn          int64

	Encrypted bool
}

type MCPPromptReadStats struct {
	PromptName string `json:"promptName"`
	ReadCount  int64  `json:"readCount"`
}

type MCPResourceReadStats struct {
	ResourceURI string `json:"resourceUri"`
	ReadCount   int64  `json:"readCount"`
}

type MCPServerDetail struct {
	MCPServerStat
	EnvKeys    []string
	HeaderKeys []string
}

type MCPServerOccurrence struct {
	DeviceScanID uint      `gorm:"column:device_scan_id"`
	DeviceID     string    `gorm:"column:device_id"`
	Client       string    `gorm:"column:client"`
	Scope        string    `gorm:"column:scope"`
	ScannedAt    time.Time `gorm:"column:scanned_at"`
	ID           uint      `gorm:"column:id"`
}

type MCPServerStat struct {
	ConfigHash       string                      `gorm:"column:config_hash"`
	Name             string                      `gorm:"column:name"`
	Transport        string                      `gorm:"column:transport"`
	Command          string                      `gorm:"column:command"`
	Args             datatypes.JSONSlice[string] `gorm:"-"`
	URL              string                      `gorm:"column:url"`
	DeviceCount      int64                       `gorm:"column:device_count"`
	UserCount        int64                       `gorm:"column:user_count"`
	ClientCount      int64                       `gorm:"column:client_count"`
	ObservationCount int64                       `gorm:"column:observation_count"`
}

type MCPToolCallStats struct {
	ToolName  string                 `json:"-"`
	CallCount int64                  `json:"callCount"`
	Items     []MCPToolCallStatsItem `json:"items"`
}

type MCPToolCallStatsItem struct {
	ToolName         string    `json:"toolName"`
	CreatedAt        time.Time `json:"createdAt"`
	UserID           string    `json:"userID"`
	ProcessingTimeMs int64     `json:"processingTimeMs"`
	ResponseStatus   int       `json:"responseStatus"`
	Error            string    `json:"error"`
}

type MCPUsageStatItem struct {
	MCPID                     string                 `json:"mcpID"`
	MCPServerDisplayName      string                 `json:"mcpServerDisplayName"`
	MCPServerCatalogEntryName string                 `json:"mcpServerCatalogEntryName"`
	ToolCalls                 []MCPToolCallStats     `json:"toolCalls,omitempty"`
	ResourceReads             []MCPResourceReadStats `json:"resourceReads,omitempty"`
	PromptReads               []MCPPromptReadStats   `json:"promptReads,omitempty"`
}

type MCPUsageStatsList struct {
	TotalCalls  int64              `json:"totalCalls"`
	UniqueUsers int64              `json:"uniqueUsers"`
	TimeStart   time.Time          `json:"timeStart"`
	TimeEnd     time.Time          `json:"timeEnd"`
	Items       []MCPUsageStatItem `json:"items"`
}

type MCPWebhookStatus struct {
	Type    string `json:"type,omitempty"`
	URL     string `json:"url,omitempty"`
	Method  string `json:"method,omitempty"`
	Name    string `json:"name,omitempty"`
	Tool    string `json:"tool,omitempty"`
	Status  string `json:"status,omitempty"`
	Message string `json:"message,omitempty"`
}

type MDMAssetBundle struct {
	Digest  string `json:"digest" gorm:"primaryKey;size:64"`
	Content []byte `json:"-" gorm:"not null"`
}

type MDMConfiguration struct {
	ID uint `json:"id" gorm:"primaryKey;autoIncrement"`

	// There may be no default before device management is configured, but there
	// can never be more than one. The backend assigns the first configuration as
	// the default; clients cannot change this field.
	IsDefault bool `json:"-" gorm:"not null;default:false;uniqueIndex:idx_mdm_configurations_default,where:is_default = true"`

	CreatedBy uint      `json:"createdBy"`
	CreatedAt time.Time `json:"createdAt"`

	// Name is a vestigial column retained so the pre-existing NOT NULL "name"
	// column keeps accepting inserts on databases created before the
	// configuration rework. It is not part of the public API and is stored
	// empty. The nullable "description" column from that same schema is left in
	// place; it is harmless and never read.
	Name string `json:"-" gorm:"not null"`

	// AssetDigest identifies the bundle against which Values were validated.
	// ObotSentryVersion is copied from that bundle's manifest when artifacts are
	// rendered, so the generated version is known without reopening the bundle.
	// Artifacts are loaded separately from their explicit table. ZIP bytes never
	// pass through the public configuration API.
	AssetDigest       string                     `json:"-" gorm:"size:64;index"`
	ObotSentryVersion string                     `json:"-" gorm:"size:64"`
	Values            string                     `json:"-" gorm:"type:text"`
	Artifacts         []MDMConfigurationArtifact `json:"-" gorm:"-"`

	EnforcementEnabled   bool                        `json:"enforcementEnabled,omitempty"`
	EnforcementAllowlist types2.EnforcementAllowlist `json:"-" gorm:"serializer:json"`
}

type MDMConfigurationArtifact struct {
	ID                 uint   `json:"id" gorm:"primaryKey;autoIncrement"`
	MDMConfigurationID uint   `json:"mdmConfigurationID" gorm:"not null;index;uniqueIndex:idx_mdm_configuration_artifact_slug,priority:1"`
	Slug               string `json:"slug" gorm:"not null;uniqueIndex:idx_mdm_configuration_artifact_slug,priority:2"`
	Platform           string `json:"platform"`
	OS                 string `json:"os"`
	Instructions       string `json:"instructions"`
	Digest             string `json:"digest" gorm:"size:64;not null"`
	Content            []byte `json:"-" gorm:"not null"`
}

type MDMConfigurationEnforcement struct {
	Enabled   bool
	Allowlist types2.EnforcementAllowlist
}

type MessagePolicyViolation struct {
	ID                   uint            `json:"id" gorm:"primaryKey"`
	CreatedAt            time.Time       `json:"createdAt" gorm:"index"`
	UserID               string          `json:"userID" gorm:"index"`
	PolicyID             string          `json:"policyID" gorm:"index"`
	PolicyName           string          `json:"policyName" gorm:"index"`
	PolicyDefinition     string          `json:"policyDefinition"`
	Direction            string          `json:"direction" gorm:"index"`
	ViolationExplanation string          `json:"violationExplanation"`
	BlockedContent       json.RawMessage `json:"blockedContent,omitempty"`
	ProjectID            string          `json:"projectID" gorm:"index"`
	ThreadID             string          `json:"threadID" gorm:"index"`
	Encrypted            bool            `json:"encrypted"`
}

type Migration struct {
	Name string `gorm:"primaryKey"`
}

type Property struct {
	CreatedAt time.Time `json:"createdAt"`
	UpdatedAt time.Time `json:"updatedAt"`
	Key       string    `json:"key" gorm:"primaryKey"`
	Value     string    `json:"value"`
	Encrypted bool      `json:"encrypted"`
}

type RemainingTokenUsage struct {
	InputTokens           int
	OutputTokens          int
	UnlimitedInputTokens  bool
	UnlimitedOutputTokens bool
}

type RunTokenActivity struct {
	ID        uint
	CreatedAt time.Time
	Name      string
	UserID    string
	Model     string

	Usage TokenUsage `gorm:"embedded"`
}

type ServiceAccountAPIKey struct {
	ID                 uint       `gorm:"primaryKey;autoIncrement"`
	ServiceAccountName string     `gorm:"index;not null"`
	HashedSecret       string     `json:"-"`
	Token              string     `gorm:"-" json:"-"`
	CreatedAt          time.Time  `json:"createdAt"`
	ValidAfter         time.Time  `json:"validAfter"`
	RetireAfter        *time.Time `json:"retireAfter,omitempty"`
}

type SkillDetail struct {
	SkillStat
	Description  string
	HasScripts   bool
	GitRemoteURL string
	Files        []string
}

type SkillOccurrence struct {
	DeviceScanID uint      `gorm:"column:device_scan_id"`
	DeviceID     string    `gorm:"column:device_id"`
	Client       string    `gorm:"column:client"`
	Scope        string    `gorm:"column:scope"`
	ProjectPath  string    `gorm:"column:project_path"`
	ScannedAt    time.Time `gorm:"column:scanned_at"`
	ID           uint      `gorm:"column:id"`
}

type SkillStat struct {
	Name             string `gorm:"column:name"`
	DeviceCount      int64  `gorm:"column:device_count"`
	UserCount        int64  `gorm:"column:user_count"`
	ObservationCount int64  `gorm:"column:observation_count"`
}

type TempSetupUser struct {
	ID                    uint        `json:"id" gorm:"primaryKey"`
	UserID                uint        `json:"userID" gorm:"index"`
	Username              string      `json:"username"`
	Email                 string      `json:"email"`
	Role                  types2.Role `json:"role"`
	IconURL               string      `json:"iconURL"`
	AuthProviderName      string      `json:"authProviderName"`
	AuthProviderNamespace string      `json:"authProviderNamespace"`
	CreatedAt             time.Time   `json:"createdAt"`
}

type TokenRequest struct {
	ID                    string `gorm:"primaryKey"`
	CreatedAt             time.Time
	UpdatedAt             time.Time
	State                 string `gorm:"index"`
	Nonce                 string
	Name                  string
	Description           string
	Scopes                APIKeyScopes `gorm:"embedded"`
	Token                 string
	NoExpiration          bool
	ExpiresAt             time.Time
	CompletionRedirectURL string
	Error                 string
	TokenRetrieved        bool
}

type TokenUsage struct {
	// InputTokens is the total input: CacheReadTokens + CacheWriteTokens + uncached input.
	InputTokens int
	// CacheReadTokens is the cache-hit input tokens; a subset of InputTokens.
	CacheReadTokens int
	// CacheWriteTokens is the cache-write input tokens (5m + 1h); a subset of InputTokens
	// (Anthropic only).
	CacheWriteTokens int
	// OutputTokens is the total output, including ThinkingTokens.
	OutputTokens int
	// ThinkingTokens is the thinking/reasoning output tokens; a subset of OutputTokens.
	ThinkingTokens int
	// TotalTokens is InputTokens + OutputTokens.
	TotalTokens int

	// InputSpend is the total USD on InputTokens (each bucket at its own rate):
	// CacheReadSpend + CacheWriteSpend + uncached-input spend. 0 when unpriced.
	InputSpend float64
	// CacheReadSpend is the USD on CacheReadTokens; a subset of InputSpend.
	CacheReadSpend float64
	// CacheWriteSpend is the USD on CacheWriteTokens; a subset of InputSpend.
	CacheWriteSpend float64
	// OutputSpend is the USD on OutputTokens.
	OutputSpend float64
	// TotalSpend is InputSpend + OutputSpend.
	TotalSpend float64
}

type User struct {
	ID             uint        `json:"id" gorm:"primaryKey"`
	CreatedAt      time.Time   `json:"createdAt"`
	DisplayName    string      `json:"displayName"`
	Username       string      `json:"username"`
	HashedUsername string      `json:"-" gorm:"unique"`
	Email          string      `json:"email"`
	HashedEmail    string      `json:"-"`
	VerifiedEmail  *bool       `json:"verifiedEmail,omitempty"`
	Role           types2.Role `json:"role"`
	IconURL        string      `json:"iconURL"`
	Timezone       string      `json:"timezone"`

	// LastActiveDay is the time of the last request made by this user, currently at the 24 hour granularity.
	LastActiveDay          time.Time `json:"lastActiveDay"`
	Internal               bool      `json:"internal" gorm:"default:false"`
	DailyInputTokensLimit  int       `json:"dailyInputTokensLimit"`
	DailyOutputTokensLimit int       `json:"dailyOutputTokensLimit"`
	Encrypted              bool      `json:"encrypted"`
	// Soft delete fields
	DeletedAt        *time.Time `json:"deletedAt,omitempty"`
	OriginalEmail    string     `json:"-"`
	OriginalUsername string     `json:"-"`
}

type UserQuery struct {
	Username       string
	Email          string
	Role           types2.Role
	IncludeDeleted bool
}