system

const (
	SystemThreadPrefix            = "st1"
	ThreadPrefix                  = "t1"
	ThreadAuthorizationPrefix     = "ta1"
	RunPrefix                     = "r1"
	ModelPrefix                   = "m1"
	AliasPrefix                   = "al1"
	DefaultModelAliasPrefix       = "dma1"
	DeviceEnrollmentPrefix        = "ode1"
	ProjectPrefix                 = "p1"
	UserDeletePrefix              = "ud1"
	UserRoleChangePrefix          = "urc1"
	UserGroupChangePrefix         = "ugc1"
	GroupRoleChangePrefix         = "grc1"
	MCPServerPrefix               = "ms1"
	MCPTunnelPrefix               = "mt1"
	MCPNetworkPolicyPrefix        = "mnp1"
	MCPServerInstancePrefix       = "msi1"
	ImagePullSecretPrefix         = "ips1"
	GitCredentialPrefix           = "gc1"
	CatalogPrefix                 = "mcat1"
	SystemCatalogPrefix           = "smcat1"
	SkillRepositoryPrefix         = "skr1"
	SkillPrefix                   = "sk1"
	SkillAccessRulePrefix         = "sar1"
	OAuthClientPrefix             = "oc1"
	OAuthAuthRequestPrefix        = "oar1"
	AccessControlRulePrefix       = "acr1"
	MCPWebhookValidationPrefix    = "mwv1"
	PowerUserWorkspacePrefix      = "puw1"
	AuditLogExportPrefix          = "ael1"
	ScheduledAuditLogExportPrefix = "sael1"
	SystemMCPServerPrefix         = "sms1"
	ModelAccessPolicyPrefix       = "map1"
	MessagePolicyPrefix           = "mp1"
	NanobotAgentPrefix            = "nba1"
	PublishedArtifactPrefix       = "pa1"
	OktaGroupMigrationPrefix      = "ogm1"

	ObotMCPServerName = SystemMCPServerPrefix + "obot-mcp-server"
)

const (
	// MCPOAuthCredentialContextPrefix is the credential context prefix for MCP OAuth credentials
	MCPOAuthCredentialContextPrefix = "mcp-oauth"
	OAuthClientIDMetadataPath       = "/oauth/client-metadata.json"
)

const (
	OpenAIModelProvider              = "openai-model-provider"
	AnthropicModelProvider           = "anthropic-model-provider"
	GenericResponsesModelProvider    = "generic-responses-model-provider"
	AmazonBedrockModelProvider       = "amazon-bedrock-model-provider"
	AmazonBedrockAPIKeyModelProvider = "amazon-bedrock-api-key-model-provider"
	AzureModelProvider               = "azure-model-provider"
	AzureEntraModelProvider          = "azure-entra-model-provider"

	// LocalAuthProvider is the built-in username/password auth provider, implemented in
	// pkg/localauth. It runs in-process instead of as a daemon from the provider registry.
	LocalAuthProvider = "local-auth-provider"

	// BootstrapName is the reserved name used for the bootstrap user and auth provider.
	BootstrapName = "bootstrap"

	OpenAIAPIKeyEnvVar    = "OPENAI_API_KEY"
	AnthropicAPIKeyEnvVar = "ANTHROPIC_API_KEY"

	DefaultNamespace       = "default"
	DefaultCatalog         = "default"
	DefaultSkillRepository = "default"
	DefaultModelInfoSource = "default"
	DefaultMDMAssetSource  = "default"
	DefaultRoleSettingName = "user-default-role-setting"
	K8sSettingsName        = "k8s-settings"
	AppPreferencesName     = "app-preferences"
	AppNotificationName    = "app-notification"

	ModelProviderCredential = "sys.model.provider.credential"

	GenericModelProviderCredentialContext = "model-provider"
	GenericAuthProviderCredentialContext  = "auth-provider"

	MCPWebhookValidationCredentialContext = "mcp-webhook-context"

	JWKCredentialContext = "jwk"
)