wocha

type APIError struct {
	Code        string
	Message     string
	StatusCode  int
	RequestID   string
	DocsURL     string
	Category    ErrorCategory
	FieldErrors map[string][]string
	RetryAfter  *int
}

type APIKey = ApiKey

type APIKeyCreateParams = CreateApiKeyRequest

type APIKeyCreateResponse = ApiKeyWithSecret

type APIKeyRotateResponse = RotateApiKeyResponse

type APIKeyUpdateParams = UpdateApiKeyRequest

type APIKeysService struct {
	// contains filtered or unexported fields
}

type AccessTokenClaims struct {
	Subject  string                 `json:"sub"`
	ClientID string                 `json:"client_id"`
	Scope    string                 `json:"scope"`
	Issuer   string                 `json:"iss"`
	Audience []string               `json:"aud"`
	Exp      int64                  `json:"exp"`
	Iat      int64                  `json:"iat"`
	Nbf      int64                  `json:"nbf"`
	OrgID    string                 `json:"org_id"`
	TenantID string                 `json:"tenant_id"`
	OrgIDs   []string               `json:"org_ids"`
	Ext      map[string]interface{} `json:"ext"`
}

type AccountMfaStatus struct {
	BackupCodesRemaining int      `json:"backup_codes_remaining"`
	Enabled              bool     `json:"enabled"`
	Methods              []string `json:"methods"`
}

type AccountMfaStatusResponse struct {
	Data AccountMfaStatus `json:"data"`
}

type AccountOrganisation struct {
	DisplayName *string `json:"display_name,omitempty"`
	ID          string  `json:"id"`
	JoinedAt    string  `json:"joined_at"`
	Role        string  `json:"role"`
	Slug        string  `json:"slug"`
}

type AccountOrganisationListResponse struct {
	Data []AccountOrganisation `json:"data"`
}

type AccountPasskey struct {
	CreatedAt   *string `json:"created_at,omitempty"`
	DisplayName string  `json:"display_name"`
	ID          string  `json:"id"`
	UpdatedAt   *string `json:"updated_at,omitempty"`
}

type AccountPasskeyListResponse struct {
	Data []AccountPasskey `json:"data"`
}

type AccountProfile struct {
	AvatarUrl   *string         `json:"avatar_url,omitempty"`
	CreatedAt   string          `json:"created_at"`
	DisplayName *string         `json:"display_name,omitempty"`
	Email       string          `json:"email"`
	ID          string          `json:"id"`
	Metadata    json.RawMessage `json:"metadata"`
	UpdatedAt   string          `json:"updated_at,omitempty"`
}

type AccountProfileResponse struct {
	Data AccountProfile `json:"data"`
}

type AccountSession struct {
	// User agent string
	Device     *string `json:"device,omitempty"`
	ExpiresAt  *string `json:"expires_at,omitempty"`
	ID         string  `json:"id"`
	IpAddress  *string `json:"ip_address,omitempty"`
	IsCurrent  bool    `json:"is_current"`
	LastActive *string `json:"last_active,omitempty"`
	Location   *string `json:"location,omitempty"`
}

type AccountSessionListResponse struct {
	Data []AccountSession `json:"data"`
}

type Action struct {
	// JavaScript source code
	Code           string          `json:"code"`
	CreatedAt      string          `json:"created_at"`
	Dependencies   []string        `json:"dependencies"`
	ID             string          `json:"id"`
	LastDeployedAt *string         `json:"last_deployed_at,omitempty"`
	LastExecution  json.RawMessage `json:"last_execution,omitempty"`
	Name           string          `json:"name"`
	// Execution order within the same trigger
	Order   int    `json:"order"`
	Runtime string `json:"runtime"`
	// Masked secret values
	Secrets   json.RawMessage `json:"secrets,omitempty"`
	Status    string          `json:"status"`
	TenantId  string          `json:"tenant_id"`
	TimeoutMs int             `json:"timeout_ms"`
	Trigger   string          `json:"trigger"`
	UpdatedAt string          `json:"updated_at"`
	Version   int             `json:"version,omitempty"`
}

type ActionCreateParams = CreateActionRequest

type ActionDeployment struct {
	ActionId   string `json:"action_id"`
	DeployedAt string `json:"deployed_at,omitempty"`
	Error      string `json:"error,omitempty"`
	ID         string `json:"id"`
	Status     string `json:"status"`
	Version    int    `json:"version"`
}

type ActionExecutionLog struct {
	ActionId     string          `json:"action_id"`
	CreatedAt    string          `json:"created_at"`
	DurationMs   int             `json:"duration_ms"`
	Error        *string         `json:"error,omitempty"`
	ID           string          `json:"id"`
	InputEvent   json.RawMessage `json:"input_event,omitempty"`
	IsTest       bool            `json:"is_test"`
	Logs         []string        `json:"logs"`
	OutputResult json.RawMessage `json:"output_result,omitempty"`
	Status       string          `json:"status"`
	Trigger      string          `json:"trigger"`
}

type ActionList struct {
	Data []Action `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type ActionLogList struct {
	Data []ActionExecutionLog `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type ActionTestResult struct {
	DurationMs int      `json:"duration_ms,omitempty"`
	Error      string   `json:"error,omitempty"`
	Logs       []string `json:"logs,omitempty"`
	// Action return value (alias of result)
	Output json.RawMessage `json:"output,omitempty"`
	// Action return value
	Result  json.RawMessage `json:"result,omitempty"`
	Success bool            `json:"success"`
}

type ActionTriggerDefinition struct {
	CanDeny     bool     `json:"can_deny"`
	CanModify   bool     `json:"can_modify"`
	Description string   `json:"description"`
	EventFields []string `json:"event_fields"`
	Label       string   `json:"label"`
	Trigger     string   `json:"trigger"`
}

type ActionTriggerList struct {
	Total    int                       `json:"total"`
	Triggers []ActionTriggerDefinition `json:"triggers"`
}

type ActionUpdateParams = UpdateActionRequest

type ActionsService struct {
	// contains filtered or unexported fields
}

type ActiveSession struct {
	Aal             string `json:"aal,omitempty"`
	Active          bool   `json:"active,omitempty"`
	AuthenticatedAt string `json:"authenticated_at,omitempty"`
	ExpiresAt       string `json:"expires_at,omitempty"`
	ID              string `json:"id,omitempty"`
	IdentityId      string `json:"identity_id,omitempty"`
	// Active organisation context from identity metadata
	OrgID string `json:"org_id,omitempty"`
}

type ActiveSessionList struct {
	Data []ActiveSession `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type AddOrgMemberRequest struct {
	IdentityId string `json:"identity_id"`
	Role       string `json:"role,omitempty"`
}

type ApiKey struct {
	CreatedAt string  `json:"created_at"`
	ExpiresAt *string `json:"expires_at,omitempty"`
	ID        string  `json:"id"`
	// Allowed source IP addresses (empty = unrestricted)
	IpAllowlist []string `json:"ip_allowlist"`
	// First 8 characters of the key for identification
	KeyPrefix           string   `json:"key_prefix"`
	LastUsedAt          *string  `json:"last_used_at,omitempty"`
	Name                string   `json:"name"`
	RotatedFrom         *string  `json:"rotated_from,omitempty"`
	RotationGraceEndsAt *string  `json:"rotation_grace_ends_at,omitempty"`
	Scopes              []string `json:"scopes"`
	Status              string   `json:"status"`
}

type ApiKeyList struct {
	Data []ApiKey `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type ApiKeyWithSecret struct {
	CreatedAt string  `json:"created_at"`
	ExpiresAt *string `json:"expires_at,omitempty"`
	ID        string  `json:"id"`
	// Allowed source IP addresses (empty = unrestricted)
	IpAllowlist []string `json:"ip_allowlist"`
	// Full API key secret (shown once at creation)
	Key string `json:"key"`
	// First 8 characters of the key for identification
	KeyPrefix           string   `json:"key_prefix"`
	LastUsedAt          *string  `json:"last_used_at,omitempty"`
	Name                string   `json:"name"`
	RotatedFrom         *string  `json:"rotated_from,omitempty"`
	RotationGraceEndsAt *string  `json:"rotation_grace_ends_at,omitempty"`
	Scopes              []string `json:"scopes"`
	Status              string   `json:"status"`
}

type Application struct {
	ClientId   string   `json:"client_id"`
	ClientName string   `json:"client_name"`
	ClientUri  string   `json:"client_uri,omitempty"`
	CreatedAt  string   `json:"created_at,omitempty"`
	GrantTypes []string `json:"grant_types"`
	// Same as client_id (normalised)
	ID                      string   `json:"id"`
	RedirectUris            []string `json:"redirect_uris"`
	ResponseTypes           []string `json:"response_types"`
	Scope                   string   `json:"scope"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method"`
}

type ApplicationCreateParams = CreateApplicationRequest

type ApplicationUpdateParams = UpdateApplicationRequest

type ApplicationsService struct {
	// contains filtered or unexported fields
}

type AuditLogEntry struct {
	ID         string          `json:"id"`
	EventType  string          `json:"event_type"`
	ActorType  string          `json:"actor_type,omitempty"`
	ActorID    string          `json:"actor_id,omitempty"`
	TargetType string          `json:"target_type,omitempty"`
	TargetID   string          `json:"target_id,omitempty"`
	Outcome    string          `json:"outcome"`
	Metadata   json.RawMessage `json:"metadata,omitempty"`
	CreatedAt  string          `json:"created_at"`
}

type AuthLogEntry struct {
	ID         string          `json:"id"`
	EventType  string          `json:"event_type"`
	IdentityID string          `json:"identity_id,omitempty"`
	IPAddress  string          `json:"ip_address,omitempty"`
	UserAgent  string          `json:"user_agent,omitempty"`
	Outcome    string          `json:"outcome"`
	Metadata   json.RawMessage `json:"metadata,omitempty"`
	CreatedAt  string          `json:"created_at"`
}

type AuthenticationError struct {
	*APIError
}

type BadRequestError struct {
	*APIError
}

type BillingService struct {
	// contains filtered or unexported fields
}

type BillingSummary struct {
	PlanTier string `json:"plan_tier"`
	Status   string `json:"status"`
	TenantId string `json:"tenant_id"`
	// "configured" when a Vellon customer ID is set; null otherwise
	VellonCustomerId *string `json:"vellon_customer_id,omitempty"`
	// "configured" when a Vellon subscription ID is set; null otherwise
	VellonSubscriptionId *string `json:"vellon_subscription_id,omitempty"`
}

type Branding struct {
	BackgroundColour string `json:"background_colour,omitempty"`
	CompanyName      string `json:"company_name,omitempty"`
	CustomCss        string `json:"custom_css,omitempty"`
	FaviconUrl       string `json:"favicon_url,omitempty"`
	FontFamily       string `json:"font_family,omitempty"`
	LogoUrl          string `json:"logo_url,omitempty"`
	PrimaryColour    string `json:"primary_colour,omitempty"`
}

type BrandingResponse struct {
	Branding Branding `json:"branding,omitempty"`
	TenantId string   `json:"tenant_id,omitempty"`
}

type BrandingService struct {
	// contains filtered or unexported fields
}

type Client struct {
	Users         *UsersService
	Sessions      *SessionsService
	Organisations *OrganisationsService
	Permissions   *PermissionsService
	Applications  *ApplicationsService
	Products      *ProductsService
	Webhooks      *WebhooksService
	Billing       *BillingService
	Branding      *BrandingService
	Logs          *LogsService
	Connections   *ConnectionsService
	Actions       *ActionsService
	APIKeys       *APIKeysService
	Environments  *EnvironmentsService
	Events        *EventsService
	FeatureFlags  *FeatureFlagsService
	TokenRules    *TokenRulesService
	// contains filtered or unexported fields
}

type ConfigurationFinding struct {
	Code string `json:"code"`
	// Console path or documentation URL to resolve the finding
	FixUrl   string `json:"fix_url"`
	Message  string `json:"message"`
	Severity string `json:"severity"`
}

type ConfigurationHealthResponse struct {
	AnalysedAt string                 `json:"analysed_at"`
	Findings   []ConfigurationFinding `json:"findings"`
	TenantId   string                 `json:"tenant_id"`
}

type ConfigureScimRequest struct {
	BearerToken string `json:"bearer_token,omitempty"`
	Enabled     bool   `json:"enabled,omitempty"`
	EndpointUrl string `json:"endpoint_url,omitempty"`
}

type ConfigureSocialProviderRequest struct {
	ClientId     string   `json:"client_id"`
	ClientSecret string   `json:"client_secret,omitempty"`
	Enabled      bool     `json:"enabled,omitempty"`
	Scopes       []string `json:"scopes,omitempty"`
}

type ConflictError struct {
	*APIError
}

type Connection struct {
	// Provider-specific configuration (secrets are redacted)
	Config      json.RawMessage `json:"config"`
	CreatedAt   string          `json:"created_at"`
	Domains     []string        `json:"domains"`
	ID          string          `json:"id"`
	Name        string          `json:"name"`
	Provider    string          `json:"provider"`
	ScimEnabled bool            `json:"scim_enabled"`
	Status      string          `json:"status"`
	TenantId    string          `json:"tenant_id"`
	Type        string          `json:"type"`
	UpdatedAt   string          `json:"updated_at"`
}

type ConnectionScimDetails struct {
	// SCIM bearer token (returned once on enable or rotate)
	BearerToken string `json:"bearer_token,omitempty"`
	Enabled     bool   `json:"enabled"`
	EndpointUrl string `json:"endpoint_url"`
	LastSyncAt  string `json:"last_sync_at,omitempty"`
	SyncGroups  bool   `json:"sync_groups"`
	SyncProfile bool   `json:"sync_profile"`
}

type ConnectionTestResult struct {
	Details json.RawMessage `json:"details,omitempty"`
	Message string          `json:"message"`
	Success bool            `json:"success"`
}

type ConnectionsService struct {
	// contains filtered or unexported fields
}

type CreateActionRequest struct {
	Code         string          `json:"code"`
	Dependencies []string        `json:"dependencies,omitempty"`
	Name         string          `json:"name"`
	Order        int             `json:"order,omitempty"`
	Runtime      string          `json:"runtime,omitempty"`
	Secrets      json.RawMessage `json:"secrets,omitempty"`
	TimeoutMs    int             `json:"timeout_ms,omitempty"`
	Trigger      string          `json:"trigger"`
}

type CreateApiKeyRequest struct {
	ExpiresAt   *string  `json:"expires_at,omitempty"`
	IpAllowlist []string `json:"ip_allowlist,omitempty"`
	Name        string   `json:"name"`
	Scopes      []string `json:"scopes,omitempty"`
}

type CreateApplicationRequest struct {
	ClientName              string   `json:"client_name"`
	GrantTypes              []string `json:"grant_types,omitempty"`
	RedirectUris            []string `json:"redirect_uris,omitempty"`
	ResponseTypes           []string `json:"response_types,omitempty"`
	Scope                   string   `json:"scope,omitempty"`
	TokenEndpointAuthMethod string   `json:"token_endpoint_auth_method,omitempty"`
}

type CreateConnectionRequest struct {
	Config   json.RawMessage `json:"config"`
	Domains  []string        `json:"domains,omitempty"`
	Name     string          `json:"name"`
	Provider string          `json:"provider"`
	Status   string          `json:"status,omitempty"`
	Type     string          `json:"type"`
}

type CreateEnterpriseConnectionRequest struct {
	// SAML signing certificate PEM
	Certificate  string `json:"certificate,omitempty"`
	ClientId     string `json:"client_id"`
	ClientSecret string `json:"client_secret,omitempty"`
	Enabled      bool   `json:"enabled,omitempty"`
	// SAML entity ID
	EntityId  string `json:"entity_id,omitempty"`
	IssuerUrl string `json:"issuer_url"`
	Label     string `json:"label"`
	// SAML metadata URL (when applicable)
	MetadataUrl string   `json:"metadata_url,omitempty"`
	OrgID       string   `json:"org_id,omitempty"`
	Scopes      []string `json:"scopes,omitempty"`
}

type CreateEnvironmentRequest struct {
	Config    EnvironmentConfig `json:"config,omitempty"`
	IsDefault bool              `json:"is_default,omitempty"`
	Name      string            `json:"name"`
	Slug      string            `json:"slug,omitempty"`
}

type CreateEventDestinationRequest struct {
	Active bool `json:"active,omitempty"`

	Config json.RawMessage      `json:"config"`
	Name   string               `json:"name"`
	Type   EventDestinationType `json:"type"`
}

type CreateFeatureFlagRequest struct {
	Code         string          `json:"code"`
	DefaultValue json.RawMessage `json:"default_value"`
	Description  string          `json:"description,omitempty"`
	Type         string          `json:"type"`
}

type CreateOrganisationRequest struct {
	DisplayName string          `json:"display_name"`
	Metadata    json.RawMessage `json:"metadata,omitempty"`
	ParentId    string          `json:"parent_id,omitempty"`
	Slug        string          `json:"slug"`
}

type CreateProductRequest struct {
	Description    string          `json:"description,omitempty"`
	DisplayName    string          `json:"display_name"`
	Metadata       json.RawMessage `json:"metadata,omitempty"`
	Namespace      string          `json:"namespace"`
	SchemaFragment string          `json:"schema_fragment,omitempty"`
	Scopes         []string        `json:"scopes,omitempty"`
	Slug           string          `json:"slug"`
}

type CreateTokenRuleRequest struct {
	Claims      []TokenRuleClaimMapping `json:"claims,omitempty"`
	Conditions  []TokenRuleCondition    `json:"conditions,omitempty"`
	Description string                  `json:"description,omitempty"`
	Name        string                  `json:"name"`
	Priority    int                     `json:"priority,omitempty"`
	Status      string                  `json:"status,omitempty"`
	Target      string                  `json:"target"`
}

type CreateUserRequest struct {
	Email         string          `json:"email"`
	MetadataAdmin json.RawMessage `json:"metadata_admin,omitempty"`
	Name          string          `json:"name,omitempty"`
	Password      string          `json:"password,omitempty"`
	// Additional Kratos identity traits
	Traits json.RawMessage `json:"traits,omitempty"`
}

type CreateWebhookRequest struct {
	Events      []string           `json:"events"`
	RetryPolicy WebhookRetryPolicy `json:"retry_policy,omitempty"`
	// Optional signing secret (auto-generated if omitted)
	Secret string `json:"secret,omitempty"`
	URL    string `json:"url"`
}

type CustomDomain struct {
	Domain string `json:"domain,omitempty"`
	Status string `json:"status"`
	// DNS TXT record value for domain verification
	VerificationRecord string `json:"verification_record,omitempty"`
	VerifiedAt         string `json:"verified_at,omitempty"`
}

type EmailTemplate struct {
	BodyHtml  string `json:"body_html"`
	BodyText  string `json:"body_text,omitempty"`
	Subject   string `json:"subject"`
	Type      string `json:"type"`
	UpdatedAt string `json:"updated_at,omitempty"`
}

type EnterpriseConnection struct {
	ClientId     string `json:"client_id"`
	DiscoveryUrl string `json:"discovery_url,omitempty"`
	Enabled      bool   `json:"enabled"`
	ID           string `json:"id"`
	IssuerUrl    string `json:"issuer_url"`
	Label        string `json:"label"`
	// Organisation scope when the connection is org-specific
	OrgID    string   `json:"org_id,omitempty"`
	Provider string   `json:"provider"`
	Scopes   []string `json:"scopes,omitempty"`
}

type EnterpriseConnectionCreateParams = CreateEnterpriseConnectionRequest

type Environment struct {
	Config    EnvironmentConfig `json:"config,omitempty"`
	CreatedAt string            `json:"created_at,omitempty"`
	ID        string            `json:"id,omitempty"`
	IsDefault bool              `json:"is_default,omitempty"`
	Name      string            `json:"name,omitempty"`
	Slug      string            `json:"slug,omitempty"`
	TenantId  string            `json:"tenant_id,omitempty"`
	UpdatedAt string            `json:"updated_at,omitempty"`
}

type EnvironmentConfig struct {
	AllowedRedirectOrigins []string `json:"allowed_redirect_origins,omitempty"`
	FeatureFlagsMode       string   `json:"feature_flags_mode,omitempty"`
	IssuerUrl              string   `json:"issuer_url,omitempty"`
	WebhookUrlPrefix       string   `json:"webhook_url_prefix,omitempty"`
}

type EnvironmentCreateParams = CreateEnvironmentRequest

type EnvironmentList struct {
	Data []Environment `json:"data,omitempty"`
}

type EnvironmentPromoteParams = PromoteEnvironmentRequest

type EnvironmentUpdateParams = UpdateEnvironmentRequest

type EnvironmentsService struct {
	// contains filtered or unexported fields
}

type ErrorCategory string

type ErrorResponse struct {
	// Link to error documentation
	DocsUrl string `json:"docs_url"`
	// Machine-readable error code
	Error string `json:"error"`
	// Human-readable error message
	Message string `json:"message"`
	// Unique request identifier for support
	RequestId string `json:"request_id"`
	// Seconds to wait before retrying (rate limit errors only)
	RetryAfter int `json:"retry_after,omitempty"`
}

type EvaluateFeatureFlagsResponse = FeatureFlagEvaluationResponse

type EvaluatedFeatureFlag struct {
	Code         string          `json:"code"`
	DefaultValue json.RawMessage `json:"default_value"`
	Overridden   bool            `json:"overridden"`
	Type         string          `json:"type"`
	Value        json.RawMessage `json:"value"`
}

type Event struct {
	CreatedAt string `json:"created_at"`
	// Monotonic ordering cursor (bigserial as string)
	Cursor string `json:"cursor"`
	// Event payload (same shape as webhook data)
	Data json.RawMessage `json:"data"`
	ID   string          `json:"id"`
	Type EventType       `json:"type"`
}

type EventDestination struct {
	Active    bool                 `json:"active"`
	Config    json.RawMessage      `json:"config"`
	CreatedAt string               `json:"created_at"`
	ID        string               `json:"id"`
	Name      string               `json:"name"`
	TenantId  string               `json:"tenant_id"`
	Type      EventDestinationType `json:"type"`
	UpdatedAt string               `json:"updated_at"`
}

type EventDestinationType string

type EventList struct {
	Data         []Event         `json:"data"`
	ListMetadata json.RawMessage `json:"list_metadata"`
}

type EventListMetadata struct {
	After string `json:"after"`
}

type EventListParams struct {
	After      string
	Limit      int
	EventTypes []string
	RangeStart string
	RangeEnd   string
}

type EventListResponse struct {
	Data         []PlatformEvent   `json:"data"`
	ListMetadata EventListMetadata `json:"list_metadata"`
}

type EventType string

type EventsService struct {
	// contains filtered or unexported fields
}

type ExpandRequest struct {
	Resource   ObjectRef `json:"resource"`
	Permission string    `json:"permission"`
}

type ExpandResponse struct {
	Tree any `json:"tree"`
}

type FeatureFlag struct {
	Code         string                `json:"code"`
	CreatedAt    string                `json:"created_at"`
	DefaultValue json.RawMessage       `json:"default_value"`
	Description  string                `json:"description,omitempty"`
	ID           string                `json:"id"`
	Overrides    []FeatureFlagOverride `json:"overrides,omitempty"`
	TenantId     string                `json:"tenant_id"`
	Type         string                `json:"type"`
	UpdatedAt    string                `json:"updated_at"`
}

type FeatureFlagCreateParams = CreateFeatureFlagRequest

type FeatureFlagEvaluateParams struct {
	UserID         string
	OrganisationID string
	EnvironmentID  string
}

type FeatureFlagEvaluationResponse struct {
	Context json.RawMessage        `json:"context"`
	Flags   []EvaluatedFeatureFlag `json:"flags"`
}

type FeatureFlagList struct {
	Data []FeatureFlag `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type FeatureFlagListParams struct {
	ListParams
	IncludeOverrides bool
}

type FeatureFlagOverride struct {
	CreatedAt string          `json:"created_at"`
	FlagId    string          `json:"flag_id"`
	ID        string          `json:"id"`
	Scope     string          `json:"scope"`
	ScopeId   string          `json:"scope_id"`
	Value     json.RawMessage `json:"value"`
}

type FeatureFlagOverrideParams = SetFeatureFlagOverrideRequest

type FeatureFlagUpdateParams = UpdateFeatureFlagRequest

type FeatureFlagsService struct {
	// contains filtered or unexported fields
}

type InternalOrgMetadataResponse struct {
	MfaEnforcement           string `json:"mfa_enforcement"`
	OrgID                    string `json:"org_id"`
	RequirePhoneVerification bool   `json:"require_phone_verification"`
	// Per-organisation security policy overrides (null fields inherit from tenant)
	SecurityPolicy        OrgSecurityPolicyOverrides `json:"security_policy"`
	SessionTimeoutMinutes int                        `json:"session_timeout_minutes,omitempty"`
}

type InternalSmsMfaChallengeRequest struct {
	// Optional application name for SMS template rendering
	AppName    string `json:"app_name,omitempty"`
	IdentityId string `json:"identity_id"`
	TenantId   string `json:"tenant_id"`
}

type InternalSmsMfaChallengeResponse struct {
	PhoneNumberMasked string `json:"phone_number_masked"`
	Status            string `json:"status"`
}

type InternalSmsMfaVerifyRequest struct {
	Code       string `json:"code"`
	IdentityId string `json:"identity_id"`
	TenantId   string `json:"tenant_id"`
}

type InternalSmsMfaVerifyResponse struct {
	Status string `json:"status"`
}

type JWTValidationError struct {
	Code    string
	Message string
	Cause   error
}

type JWTValidator struct {
	// contains filtered or unexported fields
}

type JWTValidatorConfig struct {
	// Issuer is the expected token issuer (e.g. "https://auth.example.com").
	// Also used to resolve the JWKS endpoint at {Issuer}/.well-known/jwks.json.
	Issuer string

	// Audience is the expected audience claim. If empty, audience is not checked.
	Audience string

	// JWKSUrl overrides the JWKS endpoint URL. If empty, derived from Issuer.
	JWKSUrl string

	// HTTPClient is an optional HTTP client for fetching JWKS. Defaults to
	// http.DefaultClient with a 10-second timeout.
	HTTPClient *http.Client

	// JWKSCacheTTL controls how long JWKS keys are cached. Defaults to 5 minutes.
	JWKSCacheTTL time.Duration

	// ClockSkew is the maximum allowed clock skew for exp/nbf checks.
	// Defaults to 30 seconds.
	ClockSkew time.Duration
}

type ListParams struct {
	// PageSize is the number of items per page (maps to page_size).
	PageSize int
	// PageToken is the cursor from a previous response (maps to page_token).
	PageToken string
}

type ListRelationshipsFilters struct {
	ResourceType string
	ResourceID   string
	Relation     string
}

type LogEntry map[string]json.RawMessage

type LogExportParams struct {
	LogFilter
	Format string
}

type LogFilter struct {
	ListParams
	Since string
	Until string
}

type LogList struct {
	Data          []LogEntry `json:"data"`
	HasMore       bool       `json:"has_more,omitempty"`
	NextPageToken *string    `json:"next_page_token,omitempty"`
}

type LogsService struct {
	// contains filtered or unexported fields
}

type LookupRequest struct {
	ResourceType string    `json:"resource_type"`
	Permission   string    `json:"permission"`
	Subject      ObjectRef `json:"subject"`
}

type LookupResponse struct {
	ResourceIDs []string `json:"resource_ids"`
}

type NotFoundError struct {
	*APIError
}

type ObjectRef struct {
	Type string `json:"type"`
	ID   string `json:"id"`
}

type ObjectReference struct {
	ID   string `json:"id"`
	Type string `json:"type"`
}

type Option func(*Client)

type OrgMember struct {
	CreatedAt  string          `json:"created_at,omitempty"`
	IdentityId string          `json:"identity_id,omitempty"`
	Metadata   json.RawMessage `json:"metadata,omitempty"`
	Role       string          `json:"role,omitempty"`
}

type OrgMemberAddParams = AddOrgMemberRequest

type OrgMemberAdded struct {
	IdentityId     string `json:"identity_id,omitempty"`
	OrganisationId string `json:"organisation_id,omitempty"`
	Role           string `json:"role,omitempty"`
}

type OrgMemberUpdateParams = UpdateOrgMemberRequest

type OrgSecurityPolicyOverrides struct {
	AllowedFactors            json.RawMessage `json:"allowedFactors,omitempty"`
	GracePeriodMs             *int            `json:"gracePeriodMs,omitempty"`
	MfaEnforcement            *string         `json:"mfaEnforcement,omitempty"`
	MfaPolicy                 *string         `json:"mfaPolicy,omitempty"`
	PasswordDisallowReuse     *int            `json:"passwordDisallowReuse,omitempty"`
	PasswordHibpCheck         *bool           `json:"passwordHibpCheck,omitempty"`
	PasswordMaxAgeDays        *int            `json:"passwordMaxAgeDays,omitempty"`
	PasswordMinLength         *int            `json:"passwordMinLength,omitempty"`
	PasswordRequireLowercase  *bool           `json:"passwordRequireLowercase,omitempty"`
	PasswordRequireNumber     *bool           `json:"passwordRequireNumber,omitempty"`
	PasswordRequireSymbol     *bool           `json:"passwordRequireSymbol,omitempty"`
	PasswordRequireUppercase  *bool           `json:"passwordRequireUppercase,omitempty"`
	PreferredFactor           *string         `json:"preferredFactor,omitempty"`
	SessionIdleTimeoutMinutes *int            `json:"sessionIdleTimeoutMinutes,omitempty"`
	SessionTimeoutMinutes     *int            `json:"sessionTimeoutMinutes,omitempty"`
	UnenrolledUserAction      *string         `json:"unenrolledUserAction,omitempty"`
}

type Organisation struct {
	CreatedAt   string          `json:"created_at"`
	DisplayName string          `json:"display_name"`
	ID          string          `json:"id"`
	Metadata    json.RawMessage `json:"metadata,omitempty"`
	ParentId    *string         `json:"parent_id,omitempty"`
	Slug        string          `json:"slug"`
	UpdatedAt   string          `json:"updated_at,omitempty"`
}

type OrganisationCreateParams = CreateOrganisationRequest

type OrganisationSecurityPolicyResponse struct {
	// Per-field inheritance indicators (true = using tenant default)
	Inherited                 json.RawMessage `json:"_inherited"`
	AllowedFactors            []string        `json:"allowedFactors"`
	GracePeriodMs             int             `json:"gracePeriodMs"`
	MfaEnforcement            string          `json:"mfaEnforcement"`
	MfaPolicy                 string          `json:"mfaPolicy"`
	OrgID                     string          `json:"org_id"`
	PasswordDisallowReuse     int             `json:"passwordDisallowReuse,omitempty"`
	PasswordHibpCheck         bool            `json:"passwordHibpCheck"`
	PasswordMaxAgeDays        int             `json:"passwordMaxAgeDays,omitempty"`
	PasswordMinLength         int             `json:"passwordMinLength"`
	PasswordRequireLowercase  bool            `json:"passwordRequireLowercase"`
	PasswordRequireNumber     bool            `json:"passwordRequireNumber"`
	PasswordRequireSymbol     bool            `json:"passwordRequireSymbol"`
	PasswordRequireUppercase  bool            `json:"passwordRequireUppercase"`
	PreferredFactor           string          `json:"preferredFactor,omitempty"`
	RequirePhoneVerification  bool            `json:"requirePhoneVerification,omitempty"`
	SessionIdleTimeoutMinutes int             `json:"sessionIdleTimeoutMinutes,omitempty"`
	SessionTimeoutMinutes     int             `json:"sessionTimeoutMinutes,omitempty"`
	TenantId                  string          `json:"tenant_id"`
	UnenrolledUserAction      string          `json:"unenrolledUserAction"`
}

type OrganisationTreeNode struct {
	Children    []OrganisationTreeNode `json:"children"`
	DisplayName string                 `json:"display_name"`
	ID          string                 `json:"id"`
	ParentId    *string                `json:"parent_id,omitempty"`
	Slug        string                 `json:"slug"`
}

type OrganisationTreeResponse struct {
	// Ancestor organisation IDs from root to parent
	Ancestors []string             `json:"ancestors"`
	OrgId     string               `json:"orgId"`
	Tree      OrganisationTreeNode `json:"tree"`
}

type OrganisationUpdateParams = UpdateOrganisationRequest

type OrganisationsService struct {
	// contains filtered or unexported fields
}

type PaginatedList struct {
	Data json.RawMessage `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type PaginatedResponse[T any] struct {
	Data          []T    `json:"data"`
	Total         *int   `json:"total,omitempty"`
	NextPageToken string `json:"next_page_token,omitempty"`
	HasMore       bool   `json:"has_more"`
}

type PasswordPolicy struct {
	// Disallow reuse of the last N passwords (0 = disabled)
	DisallowReuse int  `json:"disallowReuse,omitempty"`
	HibpCheck     bool `json:"hibpCheck"`
	// Force password rotation after this many days (0 = no expiry)
	MaxAgeDays       int  `json:"maxAgeDays,omitempty"`
	MinLength        int  `json:"minLength"`
	RequireLowercase bool `json:"requireLowercase"`
	RequireNumber    bool `json:"requireNumber"`
	RequireSymbol    bool `json:"requireSymbol"`
	RequireUppercase bool `json:"requireUppercase"`
}

type PasswordPolicyResponse struct {
	// Disallow reuse of the last N passwords (0 = disabled)
	DisallowReuse int  `json:"disallowReuse,omitempty"`
	HibpCheck     bool `json:"hibpCheck"`
	// Force password rotation after this many days (0 = no expiry)
	MaxAgeDays       int    `json:"maxAgeDays,omitempty"`
	MinLength        int    `json:"minLength"`
	RequireLowercase bool   `json:"requireLowercase"`
	RequireNumber    bool   `json:"requireNumber"`
	RequireSymbol    bool   `json:"requireSymbol"`
	RequireUppercase bool   `json:"requireUppercase"`
	TenantId         string `json:"tenant_id"`
}

type PermissionCheckParams struct {
	UserID       string
	Permission   string
	ResourceType string
	ResourceID   string
	Context      json.RawMessage `json:"context,omitempty"`
}

type PermissionCheckRequest struct {
	Context    json.RawMessage `json:"context,omitempty"`
	Permission string          `json:"permission"`
	Resource   ObjectReference `json:"resource"`
	Subject    ObjectReference `json:"subject"`
}

type PermissionCheckResponse struct {
	Allowed        bool   `json:"allowed"`
	Permissionship string `json:"permissionship,omitempty"`
	ResolvedAt     string `json:"resolved_at,omitempty"`
}

type PermissionError struct {
	*APIError
}

type PermissionExpandRequest struct {
	Permission string          `json:"permission"`
	Resource   ObjectReference `json:"resource"`
}

type PermissionExpandResponse struct {
	// SpiceDB permission expansion tree
	Tree json.RawMessage `json:"tree,omitempty"`
}

type PermissionLookupRequest struct {
	Permission string `json:"permission"`
	// SpiceDB resource object type to search
	ResourceType string          `json:"resource_type"`
	Subject      ObjectReference `json:"subject"`
}

type PermissionLookupResponse struct {
	ResourceIds []string `json:"resource_ids"`
}

type PermissionSchemaResponse struct {
	// SpiceDB schema definition text
	Schema string `json:"schema"`
}

type PermissionsService struct {
	// contains filtered or unexported fields
}

type PhoneRemoved struct {
	Status string `json:"status"`
}

type PhoneRemovedResponse struct {
	Data PhoneRemoved `json:"data"`
}

type PhoneVerificationPending struct {
	PhoneNumberMasked string `json:"phone_number_masked"`
	Status            string `json:"status"`
}

type PhoneVerificationPendingResponse struct {
	Data PhoneVerificationPending `json:"data"`
}

type PhoneVerificationStartRequest struct {
	// E.164 phone number (e.g. +447911123456)
	PhoneNumber string `json:"phone_number"`
}

type PhoneVerified struct {
	PhoneNumber string `json:"phone_number"`
	Status      string `json:"status"`
}

type PhoneVerifiedResponse struct {
	Data PhoneVerified `json:"data"`
}

type PhoneVerifyRequest struct {
	// 6-digit SMS verification code
	Code string `json:"code"`
}

type PlatformEvent = Event

type PortalSession struct {
	URL string `json:"url"`
}

type Product struct {
	CreatedAt   string          `json:"created_at"`
	Description *string         `json:"description,omitempty"`
	DisplayName string          `json:"display_name"`
	ID          string          `json:"id"`
	Metadata    json.RawMessage `json:"metadata"`
	// SpiceDB namespace for this product
	Namespace     string  `json:"namespace"`
	OwnerTenantId *string `json:"owner_tenant_id,omitempty"`
	// SpiceDB schema fragment for this product
	SchemaFragment *string  `json:"schema_fragment,omitempty"`
	Scopes         []string `json:"scopes"`
	Slug           string   `json:"slug"`
	Status         string   `json:"status"`
	UpdatedAt      string   `json:"updated_at"`
}

type ProductCreateParams = CreateProductRequest

type ProductListParams struct {
	Status        string
	OwnerTenantID string
}

type ProductListResponse struct {
	Products []Product `json:"products"`
	Total    int       `json:"total"`
}

type ProductResponse struct {
	Product Product `json:"product"`
}

type ProductScopeEntry struct {
	ProductName string `json:"product_name"`
	ProductSlug string `json:"product_slug"`
	Scope       string `json:"scope"`
}

type ProductScopesResponse struct {
	Scopes []ProductScopeEntry `json:"scopes"`
	Total  int                 `json:"total"`
}

type ProductUpdateParams = UpdateProductRequest

type ProductsService struct {
	// contains filtered or unexported fields
}

type PromoteEnvironmentDryRunResponse struct {
	DryRun         bool              `json:"dry_run,omitempty"`
	PromotedConfig EnvironmentConfig `json:"promoted_config,omitempty"`
	Source         Environment       `json:"source,omitempty"`
	Target         Environment       `json:"target,omitempty"`
}

type PromoteEnvironmentRequest struct {
	DryRun              bool   `json:"dry_run,omitempty"`
	SourceEnvironmentId string `json:"source_environment_id,omitempty"`
	SourceSlug          string `json:"source_slug,omitempty"`
}

type QuotaLimit struct {
	// Whether additional usage is permitted
	Allowed bool `json:"allowed,omitempty"`
	// Current usage in the billing period
	Current int `json:"current,omitempty"`
	// Plan limit (-1 = unlimited)
	Limit int `json:"limit,omitempty"`
}

type RateLimit struct {
	Limit     int
	Remaining int
	Reset     int64
}

type RateLimitError struct {
	*APIError
}

type RecoveryLinkResponse struct {
	ExpiresAt    string `json:"expires_at,omitempty"`
	RecoveryLink string `json:"recovery_link,omitempty"`
}

type Relationship struct {
	Resource ObjectRef `json:"resource"`
	Relation string    `json:"relation"`
	Subject  ObjectRef `json:"subject"`
}

type RotateApiKeyRequest struct {
	// Seconds the previous key remains valid after rotation
	RotationGracePeriod int `json:"rotation_grace_period,omitempty"`
}

type RotateApiKeyResponse struct {
	// New API key secret
	Key         string `json:"key"`
	NewKey      ApiKey `json:"new_key"`
	PreviousKey ApiKey `json:"previous_key"`
	RotatedAt   string `json:"rotated_at"`
}

type RotateSecretResponse struct {
	ClientId     string `json:"client_id"`
	ClientSecret string `json:"client_secret"`
	RotatedAt    string `json:"rotated_at"`
}

type ScimConfig struct {
	// Bearer token for SCIM endpoint authentication
	BearerToken string `json:"bearer_token,omitempty"`
	Enabled     bool   `json:"enabled"`
	EndpointUrl string `json:"endpoint_url,omitempty"`
	LastSyncAt  string `json:"last_sync_at,omitempty"`
}

type SdkTelemetryBatchRequest struct {
	Events []SdkTelemetryEvent `json:"events"`
}

type SdkTelemetryBatchResponse struct {
	// Number of telemetry events stored
	Accepted int `json:"accepted"`
}

type SdkTelemetryEvent struct {
	AuthMethod  string          `json:"auth_method,omitempty"`
	Framework   string          `json:"framework"`
	Metrics     json.RawMessage `json:"metrics"`
	NodeVersion string          `json:"node_version,omitempty"`
	ReportedAt  string          `json:"reported_at,omitempty"`
	Runtime     string          `json:"runtime,omitempty"`
	SdkVersion  string          `json:"sdk_version"`
}

type ServerError struct {
	*APIError
}

type Session struct {
	Aal             string `json:"aal,omitempty"`
	Active          bool   `json:"active,omitempty"`
	AuthenticatedAt string `json:"authenticated_at,omitempty"`
	ExpiresAt       string `json:"expires_at,omitempty"`
	ID              string `json:"id,omitempty"`
	IdentityId      string `json:"identity_id,omitempty"`
}

type SessionsService struct {
	// contains filtered or unexported fields
}

type SetFeatureFlagOverrideRequest struct {
	Scope   string          `json:"scope"`
	ScopeId string          `json:"scope_id"`
	Value   json.RawMessage `json:"value"`
}

type SmsMfaEnrollmentPending struct {
	PhoneNumberMasked string `json:"phone_number_masked"`
	Status            string `json:"status"`
}

type SmsMfaEnrollmentPendingResponse struct {
	Data SmsMfaEnrollmentPending `json:"data"`
}

type SmsMfaVerifyRequest struct {
	// 6-digit SMS verification code
	Code string `json:"code"`
}

type SocialProvider struct {
	ClientId string   `json:"client_id,omitempty"`
	Enabled  bool     `json:"enabled"`
	Label    string   `json:"label"`
	Provider string   `json:"provider"`
	Scopes   []string `json:"scopes,omitempty"`
}

type SocialProviderConfig = ConfigureSocialProviderRequest

type Subscription struct {
	BillingConfigured bool    `json:"billing_configured,omitempty"`
	CreatedAt         string  `json:"created_at,omitempty"`
	CustomDomain      *string `json:"custom_domain,omitempty"`
	PlanTier          string  `json:"plan_tier,omitempty"`
	Region            string  `json:"region,omitempty"`
	Status            string  `json:"status,omitempty"`
	TenantId          string  `json:"tenant_id,omitempty"`
}

type Theme = Branding

type TokenRule struct {
	Claims      []TokenRuleClaimMapping `json:"claims"`
	Conditions  []TokenRuleCondition    `json:"conditions"`
	CreatedAt   string                  `json:"created_at"`
	Description string                  `json:"description,omitempty"`
	ID          string                  `json:"id"`
	Name        string                  `json:"name"`
	Priority    int                     `json:"priority"`
	Status      string                  `json:"status"`
	Target      string                  `json:"target"`
	TenantId    string                  `json:"tenant_id"`
	UpdatedAt   string                  `json:"updated_at"`
}

type TokenRuleClaimMapping struct {
	ClaimName string          `json:"claim_name"`
	Source    json.RawMessage `json:"source"`
}

type TokenRuleCondition struct {
	// Dot-notation field path (e.g. `user.email`, `organisation.id`)
	Field    string          `json:"field"`
	Operator string          `json:"operator"`
	Value    json.RawMessage `json:"value"`
}

type TokenRuleCreateParams = CreateTokenRuleRequest

type TokenRuleList struct {
	Data []TokenRule `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type TokenRuleTestContext struct {
	Connection   json.RawMessage `json:"connection,omitempty"`
	Organisation json.RawMessage `json:"organisation,omitempty"`
	User         json.RawMessage `json:"user,omitempty"`
}

type TokenRuleTestResult struct {
	Claims  json.RawMessage `json:"claims"`
	Errors  []string        `json:"errors"`
	Matched bool            `json:"matched"`
}

type TokenRuleUpdateParams = UpdateTokenRuleRequest

type TokenRulesService struct {
	// contains filtered or unexported fields
}

type TotpEnrollment struct {
	BackupCodes []string `json:"backup_codes"`
	// otpauth:// URI for QR code generation
	QrUri string `json:"qr_uri"`
	// Base32-encoded TOTP secret
	Secret string `json:"secret"`
}

type TotpEnrollmentResponse struct {
	Data TotpEnrollment `json:"data"`
}

type TotpVerifyRequest struct {
	// 6-digit TOTP code from the authenticator app
	Code string `json:"code"`
}

type TriggerActionOrderResponse struct {
	Actions []Action `json:"actions"`
	Trigger string   `json:"trigger"`
	Updated int      `json:"updated"`
}

type UpdateAccountProfileRequest struct {
	AvatarUrl   *string `json:"avatar_url,omitempty"`
	DisplayName string  `json:"display_name,omitempty"`
	// User-editable metadata keys (locale, timezone, bio, phone, preferences)
	Metadata json.RawMessage `json:"metadata,omitempty"`
}

type UpdateActionRequest struct {
	Code         string          `json:"code,omitempty"`
	Dependencies []string        `json:"dependencies,omitempty"`
	Name         string          `json:"name,omitempty"`
	Order        int             `json:"order,omitempty"`
	Runtime      string          `json:"runtime,omitempty"`
	Secrets      json.RawMessage `json:"secrets,omitempty"`
	Status       string          `json:"status,omitempty"`
	TimeoutMs    int             `json:"timeout_ms,omitempty"`
	Trigger      string          `json:"trigger,omitempty"`
}

type UpdateApiKeyRequest struct {
	IpAllowlist []string `json:"ip_allowlist,omitempty"`
	Name        string   `json:"name,omitempty"`
	Scopes      []string `json:"scopes,omitempty"`
}

type UpdateApplicationRequest struct {
	ClientName    string   `json:"client_name,omitempty"`
	GrantTypes    []string `json:"grant_types,omitempty"`
	RedirectUris  []string `json:"redirect_uris,omitempty"`
	ResponseTypes []string `json:"response_types,omitempty"`
	Scope         string   `json:"scope,omitempty"`
}

type UpdateBrandingRequest struct {
	BackgroundColour string `json:"background_colour,omitempty"`
	CompanyName      string `json:"company_name,omitempty"`
	CustomCss        string `json:"custom_css,omitempty"`
	FaviconUrl       string `json:"favicon_url,omitempty"`
	FontFamily       string `json:"font_family,omitempty"`
	LogoUrl          string `json:"logo_url,omitempty"`
	PrimaryColour    string `json:"primary_colour,omitempty"`
}

type UpdateConnectionRequest struct {
	Config  json.RawMessage `json:"config,omitempty"`
	Domains []string        `json:"domains,omitempty"`
	Name    string          `json:"name,omitempty"`
	Status  string          `json:"status,omitempty"`
}

type UpdateEmailTemplateRequest struct {
	BodyHtml string `json:"body_html,omitempty"`
	BodyText string `json:"body_text,omitempty"`
	Subject  string `json:"subject,omitempty"`
}

type UpdateEnvironmentRequest struct {
	Config    EnvironmentConfig `json:"config,omitempty"`
	IsDefault bool              `json:"is_default,omitempty"`
	Name      string            `json:"name,omitempty"`
	Slug      string            `json:"slug,omitempty"`
}

type UpdateFeatureFlagRequest struct {
	DefaultValue json.RawMessage `json:"default_value,omitempty"`
	Description  *string         `json:"description,omitempty"`
	Type         string          `json:"type,omitempty"`
}

type UpdateOrgMemberRequest struct {
	Role string `json:"role"`
}

type UpdateOrganisationRequest struct {
	DisplayName string          `json:"display_name,omitempty"`
	Metadata    json.RawMessage `json:"metadata,omitempty"`
}

type UpdateOrganisationSecurityPolicyRequest struct {
	AllowedFactors            json.RawMessage `json:"allowedFactors,omitempty"`
	GracePeriodMs             *int            `json:"gracePeriodMs,omitempty"`
	MfaEnforcement            *string         `json:"mfaEnforcement,omitempty"`
	MfaPolicy                 *string         `json:"mfaPolicy,omitempty"`
	PasswordDisallowReuse     *int            `json:"passwordDisallowReuse,omitempty"`
	PasswordHibpCheck         *bool           `json:"passwordHibpCheck,omitempty"`
	PasswordMaxAgeDays        *int            `json:"passwordMaxAgeDays,omitempty"`
	PasswordMinLength         *int            `json:"passwordMinLength,omitempty"`
	PasswordRequireLowercase  *bool           `json:"passwordRequireLowercase,omitempty"`
	PasswordRequireNumber     *bool           `json:"passwordRequireNumber,omitempty"`
	PasswordRequireSymbol     *bool           `json:"passwordRequireSymbol,omitempty"`
	PasswordRequireUppercase  *bool           `json:"passwordRequireUppercase,omitempty"`
	PreferredFactor           *string         `json:"preferredFactor,omitempty"`
	SessionIdleTimeoutMinutes *int            `json:"sessionIdleTimeoutMinutes,omitempty"`
	SessionTimeoutMinutes     *int            `json:"sessionTimeoutMinutes,omitempty"`
	UnenrolledUserAction      *string         `json:"unenrolledUserAction,omitempty"`
}

type UpdatePasswordPolicyRequest struct {
	DisallowReuse    *int `json:"disallowReuse,omitempty"`
	HibpCheck        bool `json:"hibpCheck,omitempty"`
	MaxAgeDays       *int `json:"maxAgeDays,omitempty"`
	MinLength        int  `json:"minLength,omitempty"`
	RequireLowercase bool `json:"requireLowercase,omitempty"`
	RequireNumber    bool `json:"requireNumber,omitempty"`
	RequireSymbol    bool `json:"requireSymbol,omitempty"`
	RequireUppercase bool `json:"requireUppercase,omitempty"`
}

type UpdatePermissionSchemaRequest struct {
	// Complete SpiceDB schema definition text
	Schema string `json:"schema"`
}

type UpdateProductRequest struct {
	Description    string          `json:"description,omitempty"`
	DisplayName    string          `json:"display_name,omitempty"`
	Metadata       json.RawMessage `json:"metadata,omitempty"`
	SchemaFragment string          `json:"schema_fragment,omitempty"`
	Scopes         []string        `json:"scopes,omitempty"`
	Status         string          `json:"status,omitempty"`
}

type UpdateTokenRuleRequest struct {
	Claims      []TokenRuleClaimMapping `json:"claims,omitempty"`
	Conditions  []TokenRuleCondition    `json:"conditions,omitempty"`
	Description *string                 `json:"description,omitempty"`
	Name        string                  `json:"name,omitempty"`
	Priority    int                     `json:"priority,omitempty"`
	Status      string                  `json:"status,omitempty"`
	Target      string                  `json:"target,omitempty"`
}

type UpdateUserRequest struct {
	MetadataAdmin json.RawMessage `json:"metadata_admin,omitempty"`
	Traits        json.RawMessage `json:"traits,omitempty"`
}

type UpdateWebhookRequest struct {
	Active      bool               `json:"active,omitempty"`
	Events      []string           `json:"events,omitempty"`
	RetryPolicy WebhookRetryPolicy `json:"retry_policy,omitempty"`
	URL         string             `json:"url,omitempty"`
}

type UsageMetrics = UsageResponse

type UsageResponse struct {
	PlanTier string          `json:"plan_tier,omitempty"`
	Quotas   json.RawMessage `json:"quotas,omitempty"`
	TenantId string          `json:"tenant_id,omitempty"`
}

type User struct {
	CreatedAt      string          `json:"created_at,omitempty"`
	Email          string          `json:"email,omitempty"`
	ID             string          `json:"id"`
	MetadataPublic json.RawMessage `json:"metadata_public"`
	Name           string          `json:"name,omitempty"`
	OrgID          string          `json:"org_id,omitempty"`
	State          string          `json:"state"`
	UpdatedAt      string          `json:"updated_at,omitempty"`
}

type UserCreateParams = CreateUserRequest

type UserList struct {
	Data []User `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type UserListParams = ListParams

type UserUpdateParams = UpdateUserRequest

type UsersService struct {
	// contains filtered or unexported fields
}

type ValidationError struct {
	*APIError
}

type Webhook struct {
	Active      bool               `json:"active"`
	CreatedAt   string             `json:"created_at,omitempty"`
	Events      []string           `json:"events"`
	ID          string             `json:"id"`
	RetryPolicy WebhookRetryPolicy `json:"retry_policy,omitempty"`
	UpdatedAt   string             `json:"updated_at,omitempty"`
	URL         string             `json:"url"`
}

type WebhookCreateParams = CreateWebhookRequest

type WebhookDelivery struct {
	Attempt     int    `json:"attempt"`
	DeliveredAt string `json:"delivered_at,omitempty"`
	DurationMs  int    `json:"duration_ms,omitempty"`
	EventType   string `json:"event_type"`
	ID          string `json:"id"`
	MaxAttempts int    `json:"max_attempts"`
	NextRetryAt string `json:"next_retry_at,omitempty"`
	// Response body from the delivery endpoint (when captured)
	ResponseBody string `json:"response_body,omitempty"`
	Status       string `json:"status"`
	// HTTP status code from the delivery endpoint
	StatusCode int    `json:"status_code,omitempty"`
	WebhookId  string `json:"webhook_id"`
}

type WebhookDeliveryList struct {
	Data []WebhookDelivery `json:"data"`
	// Whether additional pages exist
	HasMore bool `json:"has_more"`
	// Cursor for the next page
	NextPageToken *string `json:"next_page_token,omitempty"`
	// Total count across all pages (when available)
	Total int `json:"total,omitempty"`
}

type WebhookReplayResponse struct {
	OriginalDeliveryId string `json:"original_delivery_id"`
	Replayed           bool   `json:"replayed"`
	// HTTP status code from the subscriber endpoint
	Status  int  `json:"status,omitempty"`
	Success bool `json:"success"`
}

type WebhookRetryPolicy struct {
	// Initial retry backoff interval in seconds
	InitialIntervalSeconds int `json:"initial_interval_seconds,omitempty"`
	// Maximum delivery attempts before dead-lettering
	MaxAttempts int `json:"max_attempts,omitempty"`
	// Maximum retry backoff interval in seconds (24 hours)
	MaxIntervalSeconds int `json:"max_interval_seconds,omitempty"`
	// Exponential backoff multiplier
	Multiplier float64 `json:"multiplier,omitempty"`
}

type WebhookSubscription = Webhook

type WebhookTestParams = WebhookTestRequest

type WebhookTestRequest struct {
	// Event type to simulate
	EventType string `json:"event_type"`
	// Optional custom event data (defaults to sample payload)
	Payload json.RawMessage `json:"payload,omitempty"`
	// Signing secret (defaults to subscriber secret when subscriber_id is set)
	Secret string `json:"secret,omitempty"`
	// Optional webhook subscriber — URL and secret are inferred when omitted
	SubscriberId string `json:"subscriber_id,omitempty"`
	// Target endpoint URL (defaults to subscriber URL when subscriber_id is set)
	URL string `json:"url,omitempty"`
}

type WebhookTestResponse struct {
	Body       string          `json:"body"`
	Error      string          `json:"error,omitempty"`
	Event      json.RawMessage `json:"event,omitempty"`
	Headers    json.RawMessage `json:"headers"`
	LatencyMs  int             `json:"latency_ms"`
	StatusCode int             `json:"status_code"`
	Success    bool            `json:"success"`
}

type WebhookUpdateParams = UpdateWebhookRequest

type WebhooksService struct {
	// contains filtered or unexported fields
}

type WriteRelationshipRequest struct {
	Relation string          `json:"relation"`
	Resource ObjectReference `json:"resource"`
	Subject  ObjectReference `json:"subject"`
}