domain

type Account struct {
	ID   AccountID `json:"id"`
	Name string    `json:"name"`
}

type AccountID string

type AccountSummary struct {
	ReadyForUse bool

	// Health.
	Health    ServiceHealth
	Error     string
	ErrorAt   string
	Warning   string
	WarningAt string

	// Service counts.
	ServiceCount     int64
	ActiveServices   int64
	OkServices       int64
	ErrorServices    int64
	DisabledServices int64
	InactiveServices int64

	// Event counts.
	EventCount       int64
	AnalyzedCount    int64
	QuarantinedCount int64

	// Policy counts.
	PendingPolicyCount   int64
	ApprovedPolicyCount  int64
	DismissedPolicyCount int64

	// Service-level throughput (ground truth).
	TotalServiceVolumePerHour *float64
	TotalServiceCostPerHour   *float64

	// Log event throughput (discovered events). Nil when unmeasured.
	TotalCostPerHour       *float64
	TotalCostPerHourBytes  *float64
	TotalCostPerHourVolume *float64
	TotalVolumePerHour     *float64
	TotalBytesPerHour      *float64

	// Estimated savings from pending policies. Nil when unmeasured.
	EstimatedCostPerHour       *float64
	EstimatedCostPerHourBytes  *float64
	EstimatedCostPerHourVolume *float64
	EstimatedVolumePerHour     *float64
	EstimatedBytesPerHour      *float64

	// Observed impact from approved policies (before/after). Nil when unmeasured.
	ObservedCostBefore       *float64
	ObservedCostBeforeBytes  *float64
	ObservedCostBeforeVolume *float64
	ObservedCostAfter        *float64
	ObservedCostAfterBytes   *float64
	ObservedCostAfterVolume  *float64
	ObservedVolumeBefore     *float64
	ObservedVolumeAfter      *float64
	ObservedBytesBefore      *float64
	ObservedBytesAfter       *float64
}

type Block struct {
	Index      int         `json:"index"`
	Type       BlockType   `json:"type"`
	Text       *TextBlock  `json:"text,omitempty"`
	Thinking   *Thinking   `json:"thinking,omitempty"`
	ToolUse    *ToolUse    `json:"tool_use,omitempty"`
	ToolResult *ToolResult `json:"tool_result,omitempty"`
}

type BlockType string

type ComplianceAnalysisEnvelope struct {
	PIILeakage         *PIILeakageAnalysis         `json:"pii_leakage,omitempty"`
	SecretsLeakage     *SecretsLeakageAnalysis     `json:"secrets_leakage,omitempty"`
	PHILeakage         *PHILeakageAnalysis         `json:"phi_leakage,omitempty"`
	PaymentDataLeakage *PaymentDataLeakageAnalysis `json:"payment_data_leakage,omitempty"`
}

type ComplianceCategorySummary struct {
	Category       string  // One of the 4 compliance categories
	LeakingCount   int64   // Policies with observed sensitive data
	AtRiskCount    int64   // Policies without observed data (but flagged)
	FixedCount     int64   // Approved policies
	VolumePerHour  float64 // Total volume across all policies in this category
	ServiceCount   int     // Number of unique services affected
	UniqueServices []string
}

type CompliancePolicy struct {
	Category      string           // One of: pii_leakage, secrets_leakage, phi_leakage, payment_data_leakage
	LogEventName  string           // Log event name
	ServiceName   string           // Service name
	Fields        []SensitiveField // Parsed from analysis JSON
	VolumePerHour *float64         // Log event volume; nil when unmeasured
	AnyObserved   bool             // True if any field has observed sensitive data
}

type ContextEntity struct {
	EntityType string `json:"entity_type"` // "service", "log_event", "policy", etc.
	EntityID   string `json:"entity_id"`
}

type ContextSource string

type Conversation struct {
	ID          ConversationID `json:"id"`
	WorkspaceID WorkspaceID    `json:"workspace_id"`
	Title       string         `json:"title"`
	CreatedAt   time.Time      `json:"created_at"`
	UpdatedAt   time.Time      `json:"updated_at"`
}

type ConversationID string

type DatadogAccountID string

type DatadogRegion struct {
	Site DatadogSite
	Name string
	Desc string
}

type DatadogSite string

type Message struct {
	ID             MessageID      `json:"id"`
	ConversationID ConversationID `json:"conversation_id"`
	Role           Role           `json:"role"`
	Content        []Block        `json:"content"`
	Model          string         `json:"model,omitempty"`
	StopReason     string         `json:"stop_reason,omitempty"`
	CreatedAt      time.Time      `json:"created_at"`
}

type MessageID string

type Organization struct {
	ID                   OrganizationID       `json:"id"`
	Name                 string               `json:"name"`
	WorkosOrganizationID WorkosOrganizationID `json:"workos_organization_id,omitempty"`
}

type OrganizationID string

type PHILeakageAnalysis struct {
	Rationale string           `json:"rationale"`
	Fields    []SensitiveField `json:"fields"`
}

type PIILeakageAnalysis struct {
	Rationale string           `json:"rationale"`
	Fields    []SensitiveField `json:"fields"`
}

type PaymentDataLeakageAnalysis struct {
	Rationale string           `json:"rationale"`
	Fields    []SensitiveField `json:"fields"`
}

type PolicyCategoryStatus struct {
	Category       string
	PendingCount   int64
	ApprovedCount  int64
	DismissedCount int64

	// Estimated impact from pending policies.
	EstimatedVolumePerHour     *float64
	EstimatedBytesPerHour      *float64
	EstimatedCostPerHour       *float64
	EstimatedCostPerHourBytes  *float64
	EstimatedCostPerHourVolume *float64

	// Observed impact from approved policies (before/after).
	ObservedVolumeBefore     *float64
	ObservedVolumeAfter      *float64
	ObservedBytesBefore      *float64
	ObservedBytesAfter       *float64
	ObservedCostBefore       *float64
	ObservedCostBeforeBytes  *float64
	ObservedCostBeforeVolume *float64
	ObservedCostAfter        *float64
	ObservedCostAfterBytes   *float64
	ObservedCostAfterVolume  *float64

	// Volume discovery coverage.
	EventsWithVolumes int64 // Log events in this category that have volume data
	TotalEvents       int64 // Total log events in this category

	// How policies in this category reduce cost.
	ImpactType string // "volume" (drops events) or "attribute" (strips fields)
}

type PolicyLogStatus string

type Role string

type SecretsLeakageAnalysis struct {
	Rationale string           `json:"rationale"`
	Fields    []SensitiveField `json:"fields"`
}

type SensitiveField struct {
	Path     []string `json:"path"`     // Attribute path, e.g. ["attributes", "user", "email"]
	Types    []string `json:"types"`    // Types of sensitive data this field could contain
	Observed bool     `json:"observed"` // True if actual sensitive data was seen in log values
}

type ServiceHealth string

type ServiceID string

type ServiceStatus struct {
	Name   string
	Health ServiceHealth

	// Error / warning state.
	Error     string
	ErrorAt   string
	Warning   string
	WarningAt string

	// Event counts.
	LogEventCount            int64
	LogEventAnalyzedCount    int64
	LogEventQuarantinedCount int64

	// Policy counts.
	PolicyPendingCount   int64
	PolicyApprovedCount  int64
	PolicyDismissedCount int64

	// Service-level throughput (ground truth from service_log_volumes). Nil when unmeasured.
	ServiceVolumePerHour        *float64
	ServiceDebugVolumePerHour   *float64
	ServiceInfoVolumePerHour    *float64
	ServiceWarnVolumePerHour    *float64
	ServiceErrorVolumePerHour   *float64
	ServiceOtherVolumePerHour   *float64
	ServiceCostPerHourVolumeUSD *float64

	// Log event throughput (discovered events subset). Nil when unmeasured.
	LogEventVolumePerHour        *float64
	LogEventBytesPerHour         *float64
	LogEventCostPerHourUSD       *float64
	LogEventCostPerHourBytesUSD  *float64
	LogEventCostPerHourVolumeUSD *float64

	// Estimated savings from pending policies. Nil when unmeasured.
	EstimatedVolumeReductionPerHour     *float64
	EstimatedBytesReductionPerHour      *float64
	EstimatedCostReductionPerHourUSD    *float64
	EstimatedCostReductionPerHourBytes  *float64
	EstimatedCostReductionPerHourVolume *float64

	// Observed impact from approved policies (before/after). Nil when unmeasured.
	ObservedVolumePerHourBefore        *float64
	ObservedVolumePerHourAfter         *float64
	ObservedBytesPerHourBefore         *float64
	ObservedBytesPerHourAfter          *float64
	ObservedCostPerHourBeforeUSD       *float64
	ObservedCostPerHourBeforeBytesUSD  *float64
	ObservedCostPerHourBeforeVolumeUSD *float64
	ObservedCostPerHourAfterUSD        *float64
	ObservedCostPerHourAfterBytesUSD   *float64
	ObservedCostPerHourAfterVolumeUSD  *float64
}

type TextBlock struct {
	Content string `json:"content"`
}

type Thinking struct {
	Content string `json:"content"`
}

type ToolInputDelta struct {
	ToolUseID string `json:"tool_use_id"`
	Delta     string `json:"delta"`
}

type ToolResult struct {
	ToolUseID string         `json:"tool_use_id"`
	IsError   bool           `json:"is_error,omitempty"`
	Error     string         `json:"error,omitempty"`
	Content   map[string]any `json:"content,omitempty"`
}

type ToolUse struct {
	ID            string          `json:"id"`
	Name          string          `json:"name"`
	Input         json.RawMessage `json:"input"`
	InputComplete bool            `json:"-"` // True when input is fully received (after content_block_stop)
}

type WastePolicy struct {
	LogEventName               string
	ServiceName                string
	VolumePerHour              *float64 // Current throughput in events/hour; nil when unmeasured
	BytesPerHour               *float64 // Current throughput in bytes/hour; nil when unmeasured
	EstimatedCostPerHour       *float64 // Estimated cost reduction (total); nil when unmeasured
	EstimatedCostPerHourBytes  *float64 // Estimated cost reduction from bytes; nil when unmeasured
	EstimatedCostPerHourVolume *float64 // Estimated cost reduction from volume; nil when unmeasured
	EstimatedBytesPerHour      *float64 // Estimated bytes reduction; nil when unmeasured
	EstimatedVolumePerHour     *float64 // Estimated volume reduction; nil when unmeasured
}

type WorkosOrganizationID string

type Workspace struct {
	ID   WorkspaceID `json:"id"`
	Name string      `json:"name"`
}

type WorkspaceID string