controllers

type ACPController struct {
	// contains filtered or unexported fields
}

type APITokenController struct {
	// contains filtered or unexported fields
}

type APITokenListResponse struct {
	Items []*APITokenMetadata `json:"items"`
}

type APITokenMetadata struct {
	ID          string   `json:"id"`
	Name        string   `json:"name"`
	Scope       string   `json:"scope"` // "personal" or "team"
	UserID      string   `json:"user_id"`
	TeamID      string   `json:"team_id,omitempty"`
	Permissions []string `json:"permissions"`
	TokenPrefix string   `json:"token_prefix"`
	ExpiresAt   *string  `json:"expires_at,omitempty"`
	CreatedBy   string   `json:"created_by"`
	CreatedAt   string   `json:"created_at"`
	UpdatedAt   string   `json:"updated_at"`
}

type AssetController struct {
	// contains filtered or unexported fields
}

type AssetResponse struct {
	ID  string `json:"id"`
	URL string `json:"url"`
}

type AuthController struct {
	// contains filtered or unexported fields
}

type AuthInfoController struct {
	// contains filtered or unexported fields
}

type AuthMiddleware struct {
	// contains filtered or unexported fields
}

type AuthServiceForPersonalAPIKey interface {
	LoadPersonalAPIKey(ctx context.Context, apiKey *entities.PersonalAPIKey) error
}

type AuthStatusResponse struct {
	Authenticated bool                 `json:"authenticated"`
	AuthType      string               `json:"auth_type,omitempty"`
	UserID        string               `json:"user_id,omitempty"`
	Role          string               `json:"role,omitempty"`
	Permissions   []string             `json:"permissions,omitempty"`
	GitHubUser    *auth.GitHubUserInfo `json:"github_user,omitempty"`
}

type AvailableManagerEntry struct {
	ID         string `json:"id"`
	Name       string `json:"name"`
	Default    bool   `json:"default,omitempty"` // true if this manager is used when no manager_id is specified
	Source     string `json:"source"`            // "user" or "team"
	SourceName string `json:"source_name"`       // user ID or team ID
}

type AvailableManagersResponse struct {
	Managers []AvailableManagerEntry `json:"managers"`
}

type BedrockSettingsRequest struct {
	Enabled         bool   `json:"enabled"`
	Model           string `json:"model,omitempty"`
	AccessKeyID     string `json:"access_key_id,omitempty"`
	SecretAccessKey string `json:"secret_access_key,omitempty"`
	RoleARN         string `json:"role_arn,omitempty"`
	Profile         string `json:"profile,omitempty"`
}

type BedrockSettingsResponse struct {
	Enabled         bool   `json:"enabled"`
	Model           string `json:"model,omitempty"`
	AccessKeyID     string `json:"access_key_id,omitempty"`
	SecretAccessKey string `json:"secret_access_key,omitempty"`
	RoleARN         string `json:"role_arn,omitempty"`
	Profile         string `json:"profile,omitempty"`
}

type CodexAuthConfigResponse struct {
	Configured bool `json:"configured"`
}

type CodexDeviceAuthController struct {
	// contains filtered or unexported fields
}

type CreateAPITokenRequest struct {
	Name        string   `json:"name"`
	Scope       string   `json:"scope"`             // "personal" (default) or "team"
	TeamID      string   `json:"team_id,omitempty"` // required when scope=="team"
	Permissions []string `json:"permissions,omitempty"`
	ExpiresAt   *string  `json:"expires_at,omitempty"` // RFC3339
}

type CreateAPITokenResponse struct {
	Token          APITokenMetadata `json:"token"`
	PlaintextToken string           `json:"plaintext_token"`
}

type CreateAPITokenUC interface {
	Execute(ctx context.Context, in *apitokenuc.CreateAPITokenInput) (*apitokenuc.CreateAPITokenOutput, error)
}

type CreateAssetRequest struct {
	HTML string `json:"html"`
}

type CreateFileRequest struct {
	Name        string `json:"name"`
	Path        string `json:"path"`
	Content     string `json:"content"`
	Permissions string `json:"permissions"`
}

type CreateMemoryRequest struct {
	Title   string            `json:"title"`
	Content string            `json:"content"`
	Scope   string            `json:"scope"`             // "user" or "team"
	TeamID  string            `json:"team_id,omitempty"` // required when scope=="team"
	Tags    map[string]string `json:"tags,omitempty"`
}

type CreateSandboxPolicyRequest struct {
	Name           string   `json:"name"`
	Description    string   `json:"description,omitempty"`
	AllowedDomains []string `json:"allowed_domains,omitempty"`
	DeniedDomains  []string `json:"denied_domains,omitempty"`
	CountMode      bool     `json:"count_mode,omitempty"`
	Scope          string   `json:"scope"`
	TeamID         string   `json:"team_id,omitempty"`
}

type CreateSessionProfileRequest struct {
	Name         string                      `json:"name"`
	Description  string                      `json:"description,omitempty"`
	Scope        entities.ResourceScope      `json:"scope,omitempty"`
	TeamID       string                      `json:"team_id,omitempty"`
	IsDefault    bool                        `json:"is_default,omitempty"`
	SelectorTags map[string]string           `json:"selector_tags,omitempty"`
	Config       SessionProfileConfigRequest `json:"config"`
}

type CreateSubscriptionRequest struct {
	Type     string            `json:"type"`
	Endpoint string            `json:"endpoint"`
	Keys     map[string]string `json:"keys,omitempty"`
}

type CreateTaskGroupRequest struct {
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
	Scope       string `json:"scope"`             // "user" or "team"
	TeamID      string `json:"team_id,omitempty"` // required when scope=="team"
}

type CreateTaskRequest struct {
	Title       string            `json:"title"`
	Description string            `json:"description,omitempty"`
	TaskType    string            `json:"task_type"`            // "user" or "agent"
	Scope       string            `json:"scope"`                // "user" or "team"
	TeamID      string            `json:"team_id,omitempty"`    // required when scope=="team"
	GroupID     string            `json:"group_id,omitempty"`   // optional
	SessionID   string            `json:"session_id,omitempty"` // optional, for agent tasks
	Links       []TaskLinkRequest `json:"links,omitempty"`
}

type CredentialsController struct {
	// contains filtered or unexported fields
}

type CredentialsFileInfo struct {
	Type    string `json:"type"`     // e.g. "codex_auth" or "claude_credentials"
	Path    string `json:"path"`     // absolute path inside the agent container
	HasData bool   `json:"has_data"` // whether content has been uploaded
}

type CredentialsResponse struct {
	Name      string                `json:"name"`
	HasData   bool                  `json:"has_data"` // true if any file has been uploaded
	Files     []CredentialsFileInfo `json:"files"`    // per-file-type status
	CreatedAt string                `json:"created_at"`
	UpdatedAt string                `json:"updated_at"`
}

type DeleteAPITokenUC interface {
	Execute(ctx context.Context, in *apitokenuc.DeleteAPITokenInput) error
}

type ESMHeartbeatRequest struct {
	PublicURL      string `json:"public_url,omitempty"`
	Version        string `json:"version,omitempty"`
	ActiveSessions int    `json:"active_sessions,omitempty"`
}

type ESMRegistrationRequest struct {
	ManagerID   string            `json:"manager_id,omitempty"`
	InstanceID  string            `json:"instance_id"`
	Name        string            `json:"name"`
	Scope       string            `json:"scope,omitempty"`
	TeamID      string            `json:"team_id,omitempty"`
	Labels      map[string]string `json:"labels,omitempty"`
	Default     bool              `json:"default,omitempty"`
	PublicURL   string            `json:"public_url,omitempty"`
	Version     string            `json:"version,omitempty"`
	RotateToken bool              `json:"rotate_token,omitempty"`
}

type ExternalSessionManagerRequest struct {
	ID         string            `json:"id,omitempty"`          // Auto-generated if empty
	InstanceID string            `json:"instance_id,omitempty"` // Stable native host installation ID
	Name       string            `json:"name"`                  // Human-readable name
	HMACSecret string            `json:"hmac_secret,omitempty"` // Connection token; auto-generated if empty, omit to keep existing
	Default    bool              `json:"default,omitempty"`     // Use as default manager when no manager_id is specified
	Labels     map[string]string `json:"labels,omitempty"`      // Matches allocator.* session tags
}

type ExternalSessionManagerResponse struct {
	ID                 string            `json:"id"`
	InstanceID         string            `json:"instance_id,omitempty"`
	Name               string            `json:"name"`
	HasConnectionToken bool              `json:"has_connection_token"`       // true if a connection token is configured
	ConnectionToken    string            `json:"connection_token,omitempty"` // returned only immediately after generation or rotation
	Default            bool              `json:"default,omitempty"`          // true if this manager is used when no manager_id is specified
	Labels             map[string]string `json:"labels,omitempty"`
	PublicURL          string            `json:"public_url,omitempty"`
	Version            string            `json:"version,omitempty"`
	ActiveSessions     int               `json:"active_sessions,omitempty"`
	LastHeartbeatAt    *time.Time        `json:"last_heartbeat_at,omitempty"`
}

type FileController struct {
	// contains filtered or unexported fields
}

type FileResponse struct {
	ID          string `json:"id"`
	Name        string `json:"name"`
	Path        string `json:"path"`
	Content     string `json:"content"`
	Permissions string `json:"permissions"`
	CreatedAt   string `json:"created_at"`
	UpdatedAt   string `json:"updated_at"`
}

type FrontendIntegration struct {
	ID                       string                     `json:"id"`
	Provider                 string                     `json:"provider"`
	Namespace                string                     `json:"namespace,omitempty"`
	CredentialID             string                     `json:"credential_id"`
	Name                     string                     `json:"name"`
	IconURL                  string                     `json:"icon_url,omitempty"`
	Description              string                     `json:"description,omitempty"`
	Released                 bool                       `json:"released"`
	Source                   string                     `json:"source,omitempty"`
	StartURL                 string                     `json:"start_url"`
	AuthorizationURLEndpoint string                     `json:"authorization_url_endpoint,omitempty"`
	Setup                    map[string]string          `json:"setup,omitempty"`
	Scopes                   []FrontendIntegrationScope `json:"scopes"`
	Connected                bool                       `json:"connected"`
}

type FrontendIntegrationScope struct {
	ID        string `json:"id"`
	Name      string `json:"name"`
	Desc      string `json:"desc,omitempty"`
	Group     string `json:"group,omitempty"`
	GroupName string `json:"group_name,omitempty"`
	GroupDesc string `json:"group_desc,omitempty"`
	Enabled   bool   `json:"enabled"`
}

type GetAPITokenUC interface {
	Execute(ctx context.Context, in *apitokenuc.GetAPITokenInput) (*apitokenuc.GetAPITokenOutput, error)
}

type GetOrCreatePersonalAPIKeyUseCase interface {
	Execute(ctx context.Context, userID entities.UserID) (*entities.PersonalAPIKey, error)
}

type GitHubLoginRequest struct {
	Token string `json:"token"`
}

type GitSyncConfigRequest struct {
	Enabled      bool   `json:"enabled"`
	RepoFullName string `json:"repo_full_name"`
	Branch       string `json:"branch,omitempty"`
	RootPath     string `json:"root_path,omitempty"`
	AutoPush     bool   `json:"auto_push"`
	GitHubToken  string `json:"github_token,omitempty"`
}

type GitSyncConfigResponse struct {
	Enabled        bool                      `json:"enabled"`
	RepoFullName   string                    `json:"repo_full_name,omitempty"`
	Branch         string                    `json:"branch,omitempty"`
	RootPath       string                    `json:"root_path,omitempty"`
	AutoPush       bool                      `json:"auto_push"`
	HasGitHubToken bool                      `json:"has_github_token"`
	Encryption     GitSyncEncryptionResponse `json:"encryption"`
}

type GitSyncEncryptionResponse struct {
	DEKVersion int  `json:"dek_version,omitempty"`
	DEKReady   bool `json:"dek_ready"`
}

type GoogleOAuthController struct {
	// contains filtered or unexported fields
}

type GoogleOAuthStatusResponse struct {
	Enabled          bool   `json:"enabled"`
	HealthOK         bool   `json:"health_ok"`
	HealthStatus     string `json:"health_status,omitempty"`
	ClientConfigured bool   `json:"client_configured"`
	Connected        bool   `json:"connected"`
	Credential       string `json:"credential,omitempty"`
	UserNamespace    string `json:"user_namespace,omitempty"`
	OAuthStartURL    string `json:"oauth_start_url,omitempty"`
	AuthorizationURL string `json:"authorization_url_endpoint,omitempty"`
	ProxyConfigured  bool   `json:"proxy_configured"`
}

type HealthController struct{}

type IntegrationAuthorizationURLRequest struct {
	RedirectURI string   `json:"redirect_uri"`
	ScopeIDs    []string `json:"scope_ids"`
	Scope       string   `json:"scope,omitempty"`
	State       string   `json:"state,omitempty"`
}

type IntegrationAuthorizationURLResponse struct {
	CredentialID     string `json:"credential_id"`
	AuthorizationURL string `json:"authorization_url"`
	AuthURL          string `json:"auth_url,omitempty"`
	RedirectURI      string `json:"redirect_uri,omitempty"`
	Scope            string `json:"scope,omitempty"`
}

type IntegrationRevokeResponse struct {
	Revoked      bool   `json:"revoked"`
	CredentialID string `json:"credential_id,omitempty"`
}

type IntegrationsResponse struct {
	Enabled      bool                  `json:"enabled"`
	HealthOK     bool                  `json:"health_ok"`
	HealthStatus string                `json:"health_status,omitempty"`
	Integrations []FrontendIntegration `json:"integrations"`
}

type ListAPITokenUC interface {
	Execute(ctx context.Context, in *apitokenuc.ListAPITokenInput) (*apitokenuc.ListAPITokenOutput, error)
}

type ListCredentialsResponse struct {
	Credentials []CredentialsResponse `json:"credentials"`
}

type ListFilesResponse struct {
	Files []FileResponse `json:"files"`
}

type LoginRequest struct {
	Type     string `json:"type"` // "password", "token", "api_key"
	Username string `json:"username,omitempty"`
	Password string `json:"password,omitempty"`
	Token    string `json:"token,omitempty"`
	APIKey   string `json:"api_key,omitempty"`
}

type MCPServerRequest struct {
	Type    string            `json:"type"`              // "stdio", "http", "sse"
	URL     string            `json:"url,omitempty"`     // for http/sse
	Command string            `json:"command,omitempty"` // for stdio
	Args    []string          `json:"args,omitempty"`    // for stdio
	Env     map[string]string `json:"env,omitempty"`     // environment variables
	Headers map[string]string `json:"headers,omitempty"` // for http/sse
}

type MCPServerResponse struct {
	Type       string   `json:"type"`
	URL        string   `json:"url,omitempty"`
	Command    string   `json:"command,omitempty"`
	Args       []string `json:"args,omitempty"`
	EnvKeys    []string `json:"env_keys,omitempty"`    // only keys, not values
	HeaderKeys []string `json:"header_keys,omitempty"` // only keys, not values
}

type MarketplaceRequest struct {
	URL string `json:"url"`
}

type MarketplaceResponse struct {
	URL string `json:"url"`
}

type MemoryController struct {
	// contains filtered or unexported fields
}

type MemoryListResponse struct {
	Memories []*MemoryResponse `json:"memories"`
	Total    int               `json:"total"`
}

type MemoryResponse struct {
	ID        string            `json:"id"`
	Title     string            `json:"title"`
	Content   string            `json:"content"`
	Scope     string            `json:"scope"`
	OwnerID   string            `json:"owner_id"`
	TeamID    string            `json:"team_id,omitempty"`
	Tags      map[string]string `json:"tags,omitempty"`
	CreatedAt string            `json:"created_at"`
	UpdatedAt string            `json:"updated_at"`
}

type NotificationController struct {
	// contains filtered or unexported fields
}

type NotificationHandlers struct {
	// contains filtered or unexported fields
}

type PersonalAPIKeyController struct {
	// contains filtered or unexported fields
}

type PollDeviceAuthResponse struct {
	// Status is one of "pending", "authorized", "denied".
	Status string `json:"status"`
}

type ProvisionerController struct {
	// contains filtered or unexported fields
}

type ProvisionerManager interface {
	ValidateProvisionerToken(token string) bool
	ConnectProvisioner(ctx context.Context, req services.ProvisionerConnectRequest) error
	ClaimProvisionRequest(ctx context.Context, sessionID, podName string) (*services.ProvisionRequest, bool, error)
	UpdateProvisionRequestStatus(ctx context.Context, sessionID, requestID string, req services.ProvisionRequestStatusUpdate) error
}

type ProxyMessageWatcher interface {
	SubscribeMessageEvents(sessionID string) (<-chan services.SessionMessageEvent, func())
}

type ProxyStatusWatcher interface {
	SubscribeStatusEvents() (<-chan services.SessionStatusEvent, func())
}

type ResourceTransferController struct {
	// contains filtered or unexported fields
}

type SandboxDomainsResponse struct {
	Allowed []string `json:"allowed"`
	Denied  []string `json:"denied"`
}

type SandboxPolicyController struct {
	// contains filtered or unexported fields
}

type SandboxPolicyDomainsResponse struct {
	Allowed   []string `json:"allowed"`
	Denied    []string `json:"denied"`
	Ignored   []string `json:"ignored"`
	UpdatedAt string   `json:"updated_at,omitempty"`
}

type SandboxPolicyListResponse struct {
	SandboxPolicies []*SandboxPolicyResponse `json:"sandbox_policies"`
	Total           int                      `json:"total"`
}

type SandboxPolicyResponse struct {
	ID             string   `json:"id"`
	Name           string   `json:"name"`
	Description    string   `json:"description,omitempty"`
	AllowedDomains []string `json:"allowed_domains,omitempty"`
	DeniedDomains  []string `json:"denied_domains,omitempty"`
	CountMode      bool     `json:"count_mode,omitempty"`
	Scope          string   `json:"scope"`
	OwnerID        string   `json:"owner_id"`
	TeamID         string   `json:"team_id,omitempty"`
	CreatedAt      string   `json:"created_at"`
	UpdatedAt      string   `json:"updated_at"`
}

type SendNotificationRequest struct {
	Title   string            `json:"title"`
	Body    string            `json:"body"`
	URL     *string           `json:"url,omitempty"`
	Tags    map[string]string `json:"tags,omitempty"`
	IconURL *string           `json:"icon_url,omitempty"`
}

type SessionController struct {
	// contains filtered or unexported fields
}

type SessionControllerOption func(*SessionController)

type SessionCreator interface {
	CreateSession(sessionID string, req entities.StartRequest, userID, userRole string, teams []string) (entities.Session, error)
	DeleteSessionByID(sessionID string) error
}

type SessionManagerProvider interface {
	GetSessionManager() repositories.SessionManager
}

type SessionProfileConfigRequest struct {
	Environment            map[string]string            `json:"environment,omitempty"`
	Tags                   map[string]string            `json:"tags,omitempty"`
	InitialMessageTemplate string                       `json:"initial_message_template,omitempty"`
	ReuseMessageTemplate   string                       `json:"reuse_message_template,omitempty"`
	Params                 *entities.SessionParams      `json:"params,omitempty"`
	ReuseSession           bool                         `json:"reuse_session,omitempty"`
	MemoryKey              map[string]string            `json:"memory_key,omitempty"`
	SandboxPolicyID        string                       `json:"sandbox_policy_id,omitempty"`
	SessionTTL             string                       `json:"session_ttl,omitempty"`
	UnsyncedFilePaths      []string                     `json:"unsynced_file_paths,omitempty"`
	MCPServers             map[string]*MCPServerRequest `json:"mcp_servers,omitempty"`
}

type SessionProfileConfigResponse struct {
	Environment            map[string]string            `json:"environment,omitempty"`
	Tags                   map[string]string            `json:"tags,omitempty"`
	InitialMessageTemplate string                       `json:"initial_message_template,omitempty"`
	ReuseMessageTemplate   string                       `json:"reuse_message_template,omitempty"`
	Params                 *entities.SessionParams      `json:"params,omitempty"`
	ReuseSession           bool                         `json:"reuse_session,omitempty"`
	MemoryKey              map[string]string            `json:"memory_key,omitempty"`
	SandboxPolicyID        string                       `json:"sandbox_policy_id,omitempty"`
	SessionTTL             string                       `json:"session_ttl,omitempty"`
	UnsyncedFilePaths      []string                     `json:"unsynced_file_paths,omitempty"`
	MCPServers             map[string]*MCPServerRequest `json:"mcp_servers,omitempty"`
}

type SessionProfileController struct {
	// contains filtered or unexported fields
}

type SessionProfileResponse struct {
	ID           string                       `json:"id"`
	Name         string                       `json:"name"`
	Description  string                       `json:"description,omitempty"`
	UserID       string                       `json:"user_id"`
	Scope        entities.ResourceScope       `json:"scope,omitempty"`
	TeamID       string                       `json:"team_id,omitempty"`
	IsDefault    bool                         `json:"is_default,omitempty"`
	SelectorTags map[string]string            `json:"selector_tags,omitempty"`
	Config       SessionProfileConfigResponse `json:"config"`
	CreatedAt    string                       `json:"created_at"`
	UpdatedAt    string                       `json:"updated_at"`
}

type SettingsController struct {
	// contains filtered or unexported fields
}

type SettingsResponse struct {
	Name                    string                           `json:"name"`
	Bedrock                 *BedrockSettingsResponse         `json:"bedrock,omitempty"`
	MCPServers              map[string]*MCPServerResponse    `json:"mcp_servers,omitempty"`
	Marketplaces            map[string]*MarketplaceResponse  `json:"marketplaces,omitempty"`
	HasClaudeCodeOAuthToken bool                             `json:"has_claude_code_oauth_token"`
	AuthMode                string                           `json:"auth_mode,omitempty"`
	EnabledPlugins          []string                         `json:"enabled_plugins,omitempty"`            // plugin@marketplace format
	EnvVarKeys              []string                         `json:"env_var_keys,omitempty"`               // only keys, not values
	PreferredTeamID         string                           `json:"preferred_team_id,omitempty"`          // "org/team-slug" format
	SlackUserID             string                           `json:"slack_user_id,omitempty"`              // Slack DM notification user ID
	NotificationChannels    []string                         `json:"notification_channels,omitempty"`      // Active notification channels
	ExternalSessionManagers []ExternalSessionManagerResponse `json:"external_session_managers,omitempty"`  // Registered external session managers
	GitSync                 *GitSyncConfigResponse           `json:"git_sync,omitempty"`                   // GitHub sync configuration (token redacted)
	DefaultSessionProfileID string                           `json:"default_session_profile_id,omitempty"` // Default session profile ID for this settings scope
	CreatedAt               string                           `json:"created_at"`
	UpdatedAt               string                           `json:"updated_at"`
}

type ShareController struct {
	// contains filtered or unexported fields
}

type StartDeviceAuthRequest struct {
	Scope  string `json:"scope,omitempty"`
	TeamID string `json:"team_id,omitempty"`
}

type StartDeviceAuthResponse struct {
	UserCode        string `json:"user_code"`
	VerificationURI string `json:"verification_uri"`
}

type TaskController struct {
	// contains filtered or unexported fields
}

type TaskGroupController struct {
	// contains filtered or unexported fields
}

type TaskGroupListResponse struct {
	TaskGroups []*TaskGroupResponse `json:"task_groups"`
	Total      int                  `json:"total"`
}

type TaskGroupResponse struct {
	ID          string `json:"id"`
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
	Scope       string `json:"scope"`
	OwnerID     string `json:"owner_id"`
	TeamID      string `json:"team_id,omitempty"`
	CreatedAt   string `json:"created_at"`
	UpdatedAt   string `json:"updated_at"`
}

type TaskLinkRequest struct {
	URL   string `json:"url"`
	Title string `json:"title,omitempty"`
}

type TaskLinkResponse struct {
	ID    string `json:"id"`
	URL   string `json:"url"`
	Title string `json:"title,omitempty"`
}

type TaskListResponse struct {
	Tasks []*TaskResponse `json:"tasks"`
	Total int             `json:"total"`
}

type TaskResponse struct {
	ID          string             `json:"id"`
	Title       string             `json:"title"`
	Description string             `json:"description,omitempty"`
	Status      string             `json:"status"`
	TaskType    string             `json:"task_type"`
	Scope       string             `json:"scope"`
	OwnerID     string             `json:"owner_id"`
	TeamID      string             `json:"team_id,omitempty"`
	GroupID     string             `json:"group_id,omitempty"`
	SessionID   string             `json:"session_id,omitempty"`
	Links       []TaskLinkResponse `json:"links"`
	CreatedAt   string             `json:"created_at"`
	UpdatedAt   string             `json:"updated_at"`
}

type TransferResourceRequest struct {
	ResourceType string `json:"resource_type"`
	ResourceID   string `json:"resource_id"`
	TargetScope  string `json:"target_scope"`
	TargetUserID string `json:"target_user_id,omitempty"`
	TargetTeamID string `json:"target_team_id,omitempty"`
	DryRun       bool   `json:"dry_run,omitempty"`
}

type UpdateFileRequest struct {
	Name        *string `json:"name"`
	Path        *string `json:"path"`
	Content     *string `json:"content"`
	Permissions *string `json:"permissions"`
}

type UpdateIgnoredDomainsRequest struct {
	Ignored []string `json:"ignored"`
}

type UpdateMemoryRequest struct {
	Title   *string `json:"title,omitempty"`
	Content *string `json:"content,omitempty"`
	// Tags, when present (even as {}), replaces ALL existing tags.
	// When the field is absent from the JSON body, existing tags are preserved.
	Tags *map[string]string `json:"tags,omitempty"`
}

type UpdateSandboxPolicyRequest struct {
	Name           *string   `json:"name,omitempty"`
	Description    *string   `json:"description,omitempty"`
	AllowedDomains *[]string `json:"allowed_domains,omitempty"`
	DeniedDomains  *[]string `json:"denied_domains,omitempty"`
	CountMode      *bool     `json:"count_mode,omitempty"`
}

type UpdateSessionProfileRequest struct {
	Name         *string                      `json:"name,omitempty"`
	Description  *string                      `json:"description,omitempty"`
	IsDefault    *bool                        `json:"is_default,omitempty"`
	SelectorTags map[string]string            `json:"selector_tags,omitempty"`
	Config       *SessionProfileConfigRequest `json:"config,omitempty"`
}

type UpdateSettingsRequest struct {
	Bedrock                 *BedrockSettingsRequest          `json:"bedrock"`
	MCPServers              map[string]*MCPServerRequest     `json:"mcp_servers,omitempty"`
	Marketplaces            map[string]*MarketplaceRequest   `json:"marketplaces,omitempty"`
	ClaudeCodeOAuthToken    *string                          `json:"claude_code_oauth_token,omitempty"`
	AuthMode                *string                          `json:"auth_mode,omitempty"`                  // "oauth" or "bedrock"
	EnabledPlugins          []string                         `json:"enabled_plugins,omitempty"`            // plugin@marketplace format
	EnvVars                 map[string]string                `json:"env_vars,omitempty"`                   // Custom environment variables
	PreferredTeamID         *string                          `json:"preferred_team_id,omitempty"`          // "org/team-slug" format; "" to clear
	SlackUserID             *string                          `json:"slack_user_id,omitempty"`              // Slack DM notification user ID
	NotificationChannels    *[]string                        `json:"notification_channels,omitempty"`      // Active notification channels (e.g. ["web", "slack"])
	ExternalSessionManagers *[]ExternalSessionManagerRequest `json:"external_session_managers,omitempty"`  // External session managers (External Session Manager registrations)
	GitSync                 *GitSyncConfigRequest            `json:"git_sync,omitempty"`                   // GitHub sync configuration
	DefaultSessionProfileID *string                          `json:"default_session_profile_id,omitempty"` // Default session profile ID for this settings scope
}

type UpdateTaskGroupRequest struct {
	Name        *string `json:"name,omitempty"`
	Description *string `json:"description,omitempty"`
}

type UpdateTaskRequest struct {
	Title       *string            `json:"title,omitempty"`
	Description *string            `json:"description,omitempty"`
	Status      *string            `json:"status,omitempty"`
	GroupID     *string            `json:"group_id,omitempty"`
	SessionID   *string            `json:"session_id,omitempty"`
	Links       *[]TaskLinkRequest `json:"links,omitempty"`
}

type UserController struct{}

type UserInfoResponse struct {
	Username string   `json:"username"`
	Teams    []string `json:"teams"`
	IsAdmin  bool     `json:"is_admin"`
}