models

type AWSDBRoleSpec struct {
	AccountArn    string           `json:"account_arn"`
	AccountUserID string           `json:"account_user_id"`
	Region        string           `json:"region"`
	DBArn         string           `json:"db_arn"`
	DBName        string           `json:"db_name"`
	DBEngine      string           `json:"db_engine"`
	Tags          []map[string]any `json:"db_tags"`
}

type AccessRequestRule struct {
	ID    uuid.UUID `gorm:"type:uuid;default:gen_random_uuid();primaryKey"`
	OrgID uuid.UUID `gorm:"column:org_id;index:idx_access_request_rules_org_name,unique"`

	Name        string  `gorm:"column:name;index:idx_access_request_rules_org_name,unique"`
	Description *string `gorm:"column:description"`
	AccessType  string  `gorm:"column:access_type"`

	ConnectionNames        pq.StringArray `gorm:"column:connection_names;type:text[]"`
	ApprovalRequiredGroups pq.StringArray `gorm:"column:approval_required_groups;type:text[]"`
	AllGroupsMustApprove   bool           `gorm:"column:all_groups_must_approve;default:false"`
	ReviewersGroups        pq.StringArray `gorm:"column:reviewers_groups;type:text[]"`
	ForceApprovalGroups    pq.StringArray `gorm:"column:force_approval_groups;type:text[]"`

	AccessMaxDuration *int `gorm:"column:access_max_duration"`
	MinApprovals      *int `gorm:"column:min_approvals"`

	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime"`
	UpdatedAt time.Time `gorm:"column:updated_at;autoUpdateTime"`
}

type AccessRequestRulesFilterOption struct {
	Page     int
	PageSize int
}

type Agent struct {
	OrgID     string            `gorm:"column:org_id"`
	ID        string            `gorm:"column:id"`
	Name      string            `gorm:"column:name"`
	Mode      string            `gorm:"column:mode"`
	Key       string            `gorm:"column:key"`
	KeyHash   string            `gorm:"column:key_hash"`
	Status    string            `gorm:"column:status"`
	Metadata  map[string]string `gorm:"column:metadata;serializer:json"`
	UpdatedAt *string           `gorm:"column:updated_at"`
}

type AgentStatusType string

type Audit struct {
	OrgID     string         `gorm:"column:org_id"`
	Event     string         `gorm:"column:event"`
	Metadata  map[string]any `gorm:"column:metadata;serializer:json"`
	CreatedBy string         `gorm:"column:created_by"`
}

type Blob struct {
	ID         string          `gorm:"column:id"`
	OrgID      string          `gorm:"column:org_id"`
	BlobStream json.RawMessage `gorm:"column:blob_stream"`
	Type       string          `gorm:"column:type"`
	BlobFormat *string         `gorm:"column:format"`
}

type BlobInputType string

type CmdbType struct {
	JiraObjectType     string `json:"jira_object_type"`
	JiraObjectSchemaId string `json:"jira_object_schema_id"`
	JiraField          string `json:"jira_field"`
	Required           bool   `json:"required"`
	Description        string `json:"description"`
	Value              string `json:"value"`
}

type Connection struct {
	OrgID               string         `gorm:"column:org_id"`
	ID                  string         `gorm:"column:id"`
	ResourceName        string         `gorm:"column:resource_name"`
	AgentID             sql.NullString `gorm:"column:agent_id"`
	Name                string         `gorm:"column:name"`
	Command             pq.StringArray `gorm:"column:command;type:text[]"`
	Type                string         `gorm:"column:type"`
	SubType             sql.NullString `gorm:"column:subtype"`
	Status              string         `gorm:"column:status"`
	ManagedBy           sql.NullString `gorm:"column:managed_by"`
	Tags                pq.StringArray `gorm:"column:_tags;type:text[]"`
	AccessModeRunbooks  string         `gorm:"column:access_mode_runbooks"`
	AccessModeExec      string         `gorm:"column:access_mode_exec"`
	AccessModeConnect   string         `gorm:"column:access_mode_connect"`
	AccessSchema        string         `gorm:"column:access_schema"`
	JiraIssueTemplateID sql.NullString `gorm:"column:jira_issue_template_id"`

	// Access control
	ForceApproveGroups pq.StringArray `gorm:"column:force_approve_groups;type:text[]"`
	AccessMaxDuration  *int           `gorm:"column:access_max_duration"`
	MinReviewApprovals *int           `gorm:"column:min_review_approvals"`

	// Read Only fields
	RedactEnabled             bool              `gorm:"column:redact_enabled;->"`
	Reviewers                 pq.StringArray    `gorm:"column:reviewers;type:text[];->"`
	RedactTypes               pq.StringArray    `gorm:"column:redact_types;type:text[];->"`
	AgentMode                 string            `gorm:"column:agent_mode;->"`
	AgentName                 string            `gorm:"column:agent_name;->"`
	JiraTransitionNameOnClose sql.NullString    `gorm:"column:issue_transition_name_on_close;->"`
	Envs                      map[string]string `gorm:"column:envs;serializer:json;->"`
	GuardRailRules            pq.StringArray    `gorm:"column:guardrail_rules;type:text[];->"`
	ConnectionTags            map[string]string `gorm:"column:connection_tags;serializer:json;->"`
}

type ConnectionCredentials struct {
	ID             string    `gorm:"column:id"`
	OrgID          string    `gorm:"column:org_id"`
	UserSubject    string    `gorm:"column:user_subject"`
	ConnectionName string    `gorm:"column:connection_name"`
	ConnectionType string    `gorm:"column:connection_type"`
	SecretKeyHash  string    `gorm:"column:secret_key_hash"`
	CreatedAt      time.Time `gorm:"column:created_at"`
	ExpireAt       time.Time `gorm:"column:expire_at"`
}

type ConnectionFilterOption struct {
	Name          string
	Type          string
	SubType       string
	ManagedBy     string
	AgentID       string
	Tags          []string
	TagSelector   string
	Search        string
	ConnectionIDs []string
	ResourceName  string
}

type ConnectionGuardRailRules struct {
	OrgID string `gorm:"column:org_id"`
	ID    string `gorm:"column:id"`
	Name  string `gorm:"column:name"`

	// Read Only Fields
	GuardRailInputRules  []byte `gorm:"column:guardrail_input_rules;->"`
	GuardRailOutputRules []byte `gorm:"column:guardrail_output_rules;->"`
}

type ConnectionJiraIssueTemplateTypes struct {
	OrgID string `gorm:"column:org_id"`
	ID    string `gorm:"column:id"`
	Name  string `gorm:"column:name"`

	// Read Only Fields
	IssueTemplatesMappingTypes []byte `gorm:"column:mapping_types;->"`
	IssueTemplatesPromptTypes  []byte `gorm:"column:prompt_types;->"`
}

type ConnectionPaginationOption struct {
	ConnectionFilterOption
	Page     int
	PageSize int
}

type ConnectionTag struct {
	ID        string    `gorm:"column:id"`
	OrgID     string    `gorm:"column:org_id"`
	Key       string    `gorm:"column:key"`
	Value     string    `gorm:"column:value"`
	CreatedAt time.Time `gorm:"column:created_at"`
	UpdatedAt time.Time `gorm:"column:updated_at"`
}

type Context struct {
	OrgID              string          `gorm:"column:org_id"`
	OrgName            string          `gorm:"column:org_name"`
	OrgLicenseData     json.RawMessage `gorm:"column:org_license_data"`
	UserID             string          `gorm:"column:user_id"`
	UserSubject        string          `gorm:"column:user_subject"`
	UserEmail          string          `gorm:"column:user_email"`
	UserName           string          `gorm:"column:user_name"`
	UserStatus         string          `gorm:"column:user_status"`
	UserSlackID        string          `gorm:"column:user_slack_id"`
	UserPicture        string          `gorm:"column:user_picture"`
	UserHashedPassword *string         `gorm:"column:user_hashed_password"`
	UserGroups         pq.StringArray  `gorm:"column:user_groups;type:text[]"`
}

type CustomEntityTypesEntry struct {
	Name     string   `json:"name"`
	Regex    string   `json:"regex"`
	DenyList []string `json:"deny_list"`
	Score    float64  `json:"score"`
}

type CustomEntityTypesList []CustomEntityTypesEntry

type DBRole struct {
	OrgID         string         `gorm:"column:org_id"`
	ID            string         `gorm:"column:id"`
	CreatedAt     time.Time      `gorm:"column:created_at"`
	CompletedAt   *time.Time     `gorm:"column:completed_at"`
	StatusMap     map[string]any `gorm:"column:status;serializer:json"`
	HookStatusMap map[string]any `gorm:"column:hook_status;serializer:json"`
	SpecMap       map[string]any `gorm:"column:spec;serializer:json"` // Don't export it, having a lowercase it will serialize properly?

	Status     *DBRoleStatus  `gorm:"-"`
	HookStatus *HookStatus    `gorm:"-"`
	Spec       *AWSDBRoleSpec `gorm:"-"`
}

type DBRoleStatus struct {
	Phase   string               `json:"phase"`
	Message string               `json:"message"`
	Result  []DBRoleStatusResult `json:"result"`
}

type DBRoleStatusResult struct {
	UserRole        string                            `json:"user_role"`
	CredentialsInfo DBRoleStatusResultCredentialsInfo `json:"credentials_info"`
	Status          string                            `json:"phase"`
	Message         string                            `json:"message"`
	CompletedAt     time.Time                         `json:"completed_at"`
}

type DBRoleStatusResultCredentialsInfo struct {
	SecretsManagerProvider string   `json:"secrets_manager_provider"`
	SecretID               string   `json:"secret_id"`
	SecretKeys             []string `json:"secret_keys"`
}

type DataMaskingRule struct {
	ID                   string                   `gorm:"column:id"`
	OrgID                string                   `gorm:"column:org_id"`
	Name                 string                   `gorm:"column:name"`
	Description          string                   `gorm:"column:description"`
	SupportedEntityTypes SupportedEntityTypesList `gorm:"column:supported_entity_types;serializer:json"`
	CustomEntityTypes    CustomEntityTypesList    `gorm:"column:custom_entity_types;serializer:json"`
	ScoreThreshold       *float64                 `gorm:"column:score_threshold"`
	ConnectionIDs        pq.StringArray           `gorm:"column:connection_ids;type:text[];->"`
	UpdatedAt            time.Time                `gorm:"column:updated_at"`
}

type DataMaskingRuleConnection struct {
	ID           string `gorm:"column:id"`
	OrgID        string `gorm:"column:org_id"`
	RuleID       string `gorm:"column:rule_id"`
	ConnectionID string `gorm:"column:connection_id"`
	Status       string `gorm:"column:status"`
}

type EnvVar struct {
	OrgID     string            `gorm:"column:org_id"`
	ID        string            `gorm:"column:id"`
	Envs      map[string]string `gorm:"column:envs;serializer:json"`
	UpdatedAt time.Time         `gorm:"column:updated_at"`
}

type EnvVars struct {
	ID    string            `gorm:"column:id"`
	OrgID string            `gorm:"column:org_id"`
	Envs  map[string]string `gorm:"column:envs;serializer:json"`
}

type ErrNotFoundGuardRailRules struct {
	// contains filtered or unexported fields
}

type GuardRailConnection struct {
	ID           string    `gorm:"column:id"`
	OrgID        string    `gorm:"column:org_id"`
	RuleID       string    `gorm:"column:rule_id"`
	ConnectionID string    `gorm:"column:connection_id"`
	CreatedAt    time.Time `gorm:"column:created_at"`
}

type GuardRailRules struct {
	OrgID         string         `gorm:"column:org_id"`
	ID            string         `gorm:"column:id"`
	Name          string         `gorm:"column:name"`
	Description   string         `gorm:"column:description"`
	Input         map[string]any `gorm:"column:input;serializer:json"`
	Output        map[string]any `gorm:"column:output;serializer:json"`
	CreatedAt     time.Time      `gorm:"column:created_at"`
	UpdatedAt     time.Time      `gorm:"column:updated_at"`
	ConnectionIDs []string       `gorm:"-"` // Not stored in DB, populated from join query
}

type HookStatus struct {
	ExitCode         int    `json:"exit_code"`
	OutputBase64     string `json:"output"`
	ExecutionTimeSec int    `json:"execution_time_sec"`
}

type HttpProxyServerConfig struct {
	ListenAddress string `json:"listen_address"`
}

type JiraIntegration struct {
	ID        string                `json:"id"`
	OrgID     string                `json:"org_id"`
	URL       string                `json:"url"`
	User      string                `json:"user"`
	APIToken  string                `json:"api_token"`
	Status    JiraIntegrationStatus `json:"status"`
	CreatedAt time.Time             `json:"created_at"`
	UpdatedAt time.Time             `json:"updated_at"`
}

type JiraIntegrationStatus string

type JiraIssueTemplate struct {
	OrgID                      string         `gorm:"column:org_id"`
	ID                         string         `gorm:"column:id"`
	JiraIntegrationID          string         `gorm:"column:jira_integration_id"`
	Name                       string         `gorm:"column:name"`
	Description                string         `gorm:"column:description"`
	ProjectKey                 string         `gorm:"column:project_key"`
	RequestTypeID              string         `gorm:"column:request_type_id"`
	IssueTransitionNameOnClose string         `gorm:"column:issue_transition_name_on_close"`
	MappingTypes               map[string]any `gorm:"column:mapping_types;serializer:json"`
	PromptTypes                map[string]any `gorm:"column:prompt_types;serializer:json"`
	CmdbTypes                  map[string]any `gorm:"column:cmdb_types;serializer:json"`
	ConnectionIDs              pq.StringArray `gorm:"column:connection_ids;type:text[];->"`
	CreatedAt                  time.Time      `gorm:"column:created_at"`
	UpdatedAt                  time.Time      `gorm:"column:updated_at"`
}

type Login struct {
	ID        string    `gorm:"column:id"`
	Redirect  string    `gorm:"column:redirect"`
	Outcome   string    `gorm:"column:outcome"`
	SlackID   string    `gorm:"column:slack_id"`
	UpdatedAt time.Time `gorm:"column:updated_at"`
}

type MappingType struct {
	Description string `json:"description"`
	Type        string `json:"type"`
	Value       string `json:"value"`
	JiraField   string `json:"jira_field"`
}

type Organization struct {
	ID          string          `gorm:"column:id"`
	Name        string          `gorm:"column:name"`
	CreatedAt   time.Time       `gorm:"column:created_at"`
	LicenseData json.RawMessage `gorm:"column:license_data"`
	TotalUsers  int64           `gorm:"column:total_users;->"`
}

type Plugin struct {
	ID          string              `gorm:"column:id"`
	OrgID       string              `gorm:"column:org_id"`
	Name        string              `gorm:"column:name"`
	Connections []*PluginConnection `gorm:"column:plugin_connections;serializer:json;->"`
	EnvVars     map[string]string   `gorm:"column:envvars;serializer:json;->"`
}

type PluginConnection struct {
	ID             string         `gorm:"column:id" json:"id"`
	OrgID          string         `gorm:"column:org_id" json:"org_id"`
	PluginID       string         `gorm:"column:plugin_id" json:"plugin_id"`
	ConnectionID   string         `gorm:"column:connection_id" json:"connection_id"`
	ConnectionName string         `gorm:"column:connection_name;->" json:"connection_name"`
	Enabled        bool           `gorm:"column:enabled" json:"enabled"`
	Config         pq.StringArray `gorm:"column:config;type:text[]" json:"config"`
	CreatedAt      time.Time      `gorm:"column:created_at" json:"created_at"`
	UpdatedAt      time.Time      `gorm:"column:updated_at" json:"updated_at"`
}

type PostgresServerConfig struct {
	ListenAddress string `json:"listen_address"`
}

type PromptType struct {
	Description string `json:"description"`
	Label       string `json:"label"`
	Required    bool   `json:"required"`
	JiraField   string `json:"jira_field"`
	FieldType   string `json:"field_type"`
}

type ProxyManagerState struct {
	ID                       string                 `gorm:"column:id"`
	OrgID                    string                 `gorm:"column:org_id"`
	Status                   ProxyManagerStatusType `gorm:"column:status"`
	RequestConnectionName    string                 `gorm:"column:connection"`
	RequestPort              string                 `gorm:"column:port"`
	RequestAccessDurationSec int                    `gorm:"column:access_duration"`
	ClientMetadata           map[string]string      `gorm:"column:metadata;serializer:json"`
	ConnectedAt              time.Time              `gorm:"connected_at"`
}

type ProxyManagerStatusType string

type RDPServerConfig struct {
	ListenAddress string `json:"listen_address"`
}

type ResourceFilterOption struct {
	Page     int
	PageSize int
	Search   string
	Name     string
	SubType  string
}

type Resources struct {
	ID        string         `gorm:"column:id"`
	OrgID     string         `gorm:"column:org_id"`
	Name      string         `gorm:"column:name"`
	Type      string         `gorm:"column:type"`
	SubType   sql.NullString `gorm:"column:subtype"`
	AgentID   sql.NullString `gorm:"column:agent_id"`
	CreatedAt time.Time      `gorm:"column:created_at"`
	UpdatedAt time.Time      `gorm:"column:updated_at"`

	// read-only fields from related tables
	Envs map[string]string `gorm:"column:envs;serializer:json;->"`
}

type Review struct {
	ID                string            `gorm:"column:id"`
	OrgID             string            `gorm:"column:org_id"`
	SessionID         string            `gorm:"column:session_id"`
	Type              ReviewType        `gorm:"column:type"`
	Status            ReviewStatusType  `gorm:"column:status"`
	ConnectionName    string            `gorm:"column:connection_name"`
	ConnectionID      sql.NullString    `gorm:"column:connection_id"`
	BlobInputID       sql.NullString    `gorm:"column:blob_input_id"`
	InputEnvVars      map[string]string `gorm:"column:input_env_vars;serializer:json"`
	InputClientArgs   pq.StringArray    `gorm:"column:input_client_args;type:text[]"`
	AccessDurationSec int64             `gorm:"column:access_duration_sec"`
	OwnerID           string            `gorm:"column:owner_id"`
	OwnerEmail        string            `gorm:"column:owner_email"`
	OwnerName         *string           `gorm:"column:owner_name"`
	OwnerSlackID      *string           `gorm:"column:owner_slack_id"`

	ReviewGroups          []ReviewGroups `gorm:"column:review_groups;serializer:json;->"`
	AccessRequestRuleName *string        `gorm:"column:access_request_rule_name"`
	ForceApprovalGroups   pq.StringArray `gorm:"column:force_approval_groups;type:text[]"`
	MinApprovals          *int           `gorm:"column:min_approvals"`

	CreatedAt  time.Time         `gorm:"column:created_at"`
	RevokedAt  *time.Time        `gorm:"column:revoked_at"`
	TimeWindow *ReviewTimeWindow `gorm:"column:time_window;serializer:json;"`
}

type ReviewGroups struct {
	ID           string           `json:"id"`
	OrgID        string           `json:"org_id"`
	ReviewID     string           `json:"review_id"`
	GroupName    string           `json:"group_name"`
	Status       ReviewStatusType `json:"status"`
	OwnerID      *string          `json:"owner_id"`
	OwnerEmail   *string          `json:"owner_email"`
	OwnerName    *string          `json:"owner_name"`
	OwnerSlackID *string          `json:"owner_slack_id"`
	ReviewedAt   *time.Time       `json:"reviewed_at"`
	ForcedReview bool             `json:"forced_review"`
}

type ReviewJit struct {
	ID                string     `gorm:"column:id"`
	OrgID             string     `gorm:"column:org_id"`
	SessionID         string     `gorm:"column:session_id"`
	Type              string     `gorm:"column:type"`
	AccessDurationSec int64      `gorm:"column:access_duration_sec"`
	OwnerEmail        string     `gorm:"column:owner_email"`
	CreatedAt         time.Time  `gorm:"column:created_at"`
	RevokedAt         *time.Time `gorm:"column:revoked_at"`
}

type ReviewStatusType string

type ReviewTimeWindow struct {
	Type          string            `json:"type"`
	Configuration map[string]string `json:"configuration"`
}

type ReviewType string

type RunbookRepositoryConfig struct {
	GitUrl        string `json:"git_url"`
	GitUser       string `json:"git_user"`
	GitPassword   string `json:"git_password"`
	SSHKey        string `json:"ssh_key"`
	SSHUser       string `json:"ssh_user"`
	SSHKeyPass    string `json:"ssh_key_pass"`
	SSHKnownHosts string `json:"ssh_known_hosts"`
	GitHookTTL    int    `json:"git_hook_config_ttl"`
	GitBranch     string `json:"git_branch"`
}

type RunbookRuleFile struct {
	Repository string `json:"repository"`
	Name       string `json:"name"`
}

type RunbookRuleFiles []RunbookRuleFile

type RunbookRules struct {
	ID          string           `gorm:"column:id"`
	OrgID       string           `gorm:"column:org_id"`
	Name        string           `gorm:"column:name"`
	Description sql.NullString   `gorm:"column:description"`
	UserGroups  pq.StringArray   `gorm:"column:user_groups;type:text[]"`
	Connections pq.StringArray   `gorm:"column:connections;type:text[]"`
	Runbooks    RunbookRuleFiles `gorm:"column:runbooks;type:jsonb;serializer:json"`
	CreatedAt   time.Time        `gorm:"column:created_at"`
	UpdatedAt   time.Time        `gorm:"column:updated_at"`
}

type Runbooks struct {
	ID                string                             `gorm:"column:id"`
	OrgID             string                             `gorm:"column:org_id"`
	RepositoryConfigs map[string]RunbookRepositoryConfig `gorm:"column:repository_configs;serializer:json"`
	CreatedAt         time.Time                          `gorm:"column:created_at"`
	UpdatedAt         time.Time                          `gorm:"column:updated_at"`
}

type SSHServerConfig struct {
	ListenAddress string `json:"listen_address"`
	HostsKey      string `json:"hosts_key"`
}

type ServerAuthConfig struct {
	OrgID                 string                `gorm:"column:org_id"`
	AuthMethod            *string               `gorm:"column:auth_method"`
	OidcConfig            *ServerAuthOidcConfig `gorm:"column:oidc_config;serializer:json"`
	SamlConfig            *ServerAuthSamlConfig `gorm:"column:saml_config;serializer:json"`
	ProviderName          *string               `gorm:"column:provider_name"`
	ApiKey                *string               `gorm:"column:api_key"`
	RolloutApiKey         *string               `gorm:"column:rollout_api_key"`
	WebappUsersManagement *string               `gorm:"column:webapp_users_management"`
	AdminRoleName         *string               `gorm:"column:admin_role_name"`
	AuditorRoleName       *string               `gorm:"column:auditor_role_name"`
	ProductAnalytics      *string               `gorm:"column:product_analytics;->"`
	GrpcServerURL         *string               `gorm:"column:grpc_server_url;->"`
	SharedSigningKey      *string               `gorm:"column:shared_signing_key;->"`
	UpdatedAt             time.Time             `gorm:"column:updated_at"`
}

type ServerAuthOidcConfig struct {
	IssuerURL    string         `json:"issuer_url"`
	ClientID     string         `json:"client_id"`
	ClientSecret string         `json:"client_secret"`
	Scopes       pq.StringArray `json:"scopes"`
	Audience     string         `json:"audience"`
	GroupsClaim  string         `json:"groups_claim"`
}

type ServerAuthSamlConfig struct {
	IdpMetadataURL string `json:"idp_metadata_url"`
	GroupsClaim    string `json:"groups_claim"`
}

type ServerMiscConfig struct {
	ProductAnalytics      *string                `gorm:"column:product_analytics"`
	GrpcServerURL         *string                `gorm:"column:grpc_server_url"`
	PostgresServerConfig  *PostgresServerConfig  `gorm:"column:postgres_server_config;serializer:json"`
	SSHServerConfig       *SSHServerConfig       `gorm:"column:ssh_server_config;serializer:json"`
	RDPServerConfig       *RDPServerConfig       `gorm:"column:rdp_server_config;serializer:json"`
	HttpProxyServerConfig *HttpProxyServerConfig `gorm:"column:http_proxy_server_config;serializer:json"`
}

type ServiceAccount struct {
	ID        string         `gorm:"column:id"`
	OrgID     string         `gorm:"column:org_id"`
	Subject   string         `gorm:"column:subject"`
	Name      string         `gorm:"column:name"`
	Groups    pq.StringArray `gorm:"column:groups;type:text[];->"`
	Status    string         `gorm:"column:status"`
	CreatedAt time.Time      `gorm:"column:created_at"`
	UpdatedAt time.Time      `gorm:"column:updated_at"`
}

type Session struct {
	ID                   string            `gorm:"column:id"`
	OrgID                string            `gorm:"column:org_id"`
	Connection           string            `gorm:"column:connection"`
	ResourceName         string            `gorm:"column:resource_name;->"`
	ConnectionType       string            `gorm:"column:connection_type"`
	ConnectionSubtype    string            `gorm:"column:connection_subtype"`
	ConnectionTags       map[string]string `gorm:"column:connection_tags;serializer:json"`
	Verb                 string            `gorm:"column:verb"`
	Labels               map[string]string `gorm:"column:labels;serializer:json"`
	Metadata             map[string]any    `gorm:"column:metadata;serializer:json"`
	IntegrationsMetadata map[string]any    `gorm:"column:integrations_metadata;serializer:json"`
	Metrics              map[string]any    `gorm:"column:metrics;serializer:json"`
	BlobInputID          sql.NullString    `gorm:"column:blob_input_id"`
	BlobInput            BlobInputType     `gorm:"-"`
	BlobInputSize        int64             `gorm:"column:blob_input_size;->"`
	BlobStream           *Blob             `gorm:"-"`
	BlobStreamSize       int64             `gorm:"column:blob_stream_size;->"`
	UserID               string            `gorm:"column:user_id"`
	UserName             string            `gorm:"column:user_name"`
	UserEmail            string            `gorm:"column:user_email"`
	Status               string            `gorm:"column:status"`
	ExitCode             *int              `gorm:"column:exit_code"`
	Review               *SessionReview    `gorm:"column:review;->"`
	SessionBatchID       *string           `gorm:"column:session_batch_id"`

	CreatedAt  time.Time  `gorm:"column:created_at"`
	EndSession *time.Time `gorm:"column:ended_at"`
}

type SessionDone struct {
	ID         string
	OrgID      string
	Metrics    map[string]any
	BlobStream json.RawMessage
	BlobFormat *string
	ExitCode   *int
	Status     string
	EndSession *time.Time
}

type SessionList struct {
	Total       int64
	HasNextPage bool
	Items       []Session
}

type SessionMetrics struct {
	ID        string `gorm:"column:id;->"`
	OrgID     string `gorm:"column:org_id"`
	SessionID string `gorm:"column:session_id"`

	InfoType      string `gorm:"column:info_type"`
	CountMasked   int64  `gorm:"column:count_masked"`
	CountAnalyzed int64  `gorm:"column:count_analyzed"`

	ConnectionType    string         `gorm:"column:connection_type"`
	ConnectionSubtype sql.NullString `gorm:"column:connection_subtype"`

	SessionCreatedAt time.Time  `gorm:"column:session_created_at"`
	SessionEndedAt   *time.Time `gorm:"column:session_ended_at"`
}

type SessionMetricsAggregatedResult struct {
	TotalSessions         int64    `gorm:"column:total_sessions"`
	UniqueInfoTypes       int64    `gorm:"column:unique_info_types"`
	TotalMasked           int64    `gorm:"column:total_masked"`
	TotalAnalyzed         int64    `gorm:"column:total_analyzed"`
	SessionsWithMasking   int64    `gorm:"column:sessions_with_masking"`
	AvgSessionDurationSec *float64 `gorm:"column:avg_session_duration_sec"`
}

type SessionMetricsFilter struct {
	// Resource filters
	ConnectionTypes    []string `form:"connection_type"`
	ConnectionSubtypes []string `form:"connection_subtype"`
	ConnectionNames    []string `form:"connection_name"`

	// Data type filters (Presidio entity types)
	InfoTypes []string `form:"info_type"`

	// Masked/unmasked differentiation
	OnlyMasked   bool `form:"only_masked"`
	OnlyUnmasked bool `form:"only_unmasked"`

	// Date filters
	StartDate *time.Time `form:"start_date" time_format:"2006-01-02"`
	EndDate   *time.Time `form:"end_date" time_format:"2006-01-02"`

	// Session filters
	SessionIDs          []string   `form:"session_id"`
	SessionStartDate    *time.Time `form:"session_start_date" time_format:"2006-01-02"`
	SessionEndDate      *time.Time `form:"session_end_date" time_format:"2006-01-02"`
	MinDurationSec      *int       `form:"min_duration_sec"`
	MaxDurationSec      *int       `form:"max_duration_sec"`
	IncludeOpenSessions bool       `form:"include_open_sessions"`

	// Logic operator (AND/OR)
	LogicOperator string `form:"logic_operator"` // "and" or "or", default "and"

	// Pagination
	Page  int `form:"page"`
	Limit int `form:"limit"`
}

type SessionMetricsQueryResult struct {
	SessionID          string     `gorm:"column:session_id"`
	OrgID              string     `gorm:"column:org_id"`
	ConnectionType     string     `gorm:"column:connection_type"`
	ConnectionSubtype  *string    `gorm:"column:connection_subtype"`
	ConnectionName     string     `gorm:"column:connection_name"`
	InfoType           string     `gorm:"column:info_type"`
	CountMasked        int64      `gorm:"column:count_masked"`
	CountAnalyzed      int64      `gorm:"column:count_analyzed"`
	IsMasked           bool       `gorm:"column:is_masked"`
	SessionCreatedAt   time.Time  `gorm:"column:session_created_at"`
	SessionEndedAt     *time.Time `gorm:"column:session_ended_at"`
	SessionDurationSec *int       `gorm:"column:session_duration_sec"`
}

type SessionOption struct {
	User                string
	ConnectionType      string
	ConnectionName      string
	ReviewStatus        string
	ReviewApproverEmail *string
	BatchID             *string
	JiraIssueKey        []string
	StartDate           sql.NullString
	EndDate             sql.NullString
	Offset              int
	Limit               int
}

type SessionReport struct {
	Items                 []SessionReportItem `gorm:"column:items"`
	TotalRedactCount      int64               `gorm:"column:total_redact_count"`
	TotalTransformedBytes int64               `gorm:"column:total_transformed_bytes"`
}

type SessionReportItem struct {
	ResourceName     string `gorm:"column:resource"`
	InfoType         string `gorm:"column:info_type"`
	RedactTotal      int64  `gorm:"column:redact_total"`
	TransformedBytes int64  `gorm:"column:transformed_bytes"`
}

type SessionReview struct {
	ID                    string            `json:"id"`
	SessionID             string            `json:"session_id"`
	Type                  string            `json:"type"`
	Status                string            `json:"status"`
	CreatedAt             time.Time         `json:"created_at"`
	RevokedAt             *time.Time        `json:"revoked_at"`
	AccessDurationSec     int64             `json:"access_duration_sec"`
	ReviewGroups          []ReviewGroups    `json:"review_groups" gorm:"review_groups;serializer:json"`
	TimeWindow            *ReviewTimeWindow `json:"time_window" gorm:"time_window;serializer:json;"`
	AccessRequestRuleName *string           `json:"access_request_rule_name"`
	ForceApprovalGroups   pq.StringArray    `json:"force_approval_groups" gorm:"force_approval_groups;serializer:json;"`
	MinApprovals          *int              `json:"min_approvals"`
}

type SupportedEntityTypesEntry struct {
	Name        string   `json:"name"`
	EntityTypes []string `json:"entity_types"`
}

type SupportedEntityTypesList []SupportedEntityTypesEntry

type User struct {
	ID             string `gorm:"column:id"`
	OrgID          string `gorm:"column:org_id"`
	Subject        string `gorm:"column:subject"`
	Name           string `gorm:"column:name"`
	Picture        string `gorm:"column:picture"`
	Email          string `gorm:"column:email"`
	Verified       bool   `gorm:"column:verified"`
	Status         string `gorm:"column:status"`
	SlackID        string `gorm:"column:slack_id"`
	HashedPassword string `gorm:"column:hashed_password"`
}

type UserContext interface {
	GetUserID() string
	GetOrgID() string
	IsAdmin() bool
	GetUserGroups() []string
}

type UserGroup struct {
	OrgID            string
	UserID           string
	ServiceAccountId sql.NullString
	Name             string
}

type UserToken struct {
	UserID string `gorm:"column:user_id"`
	Token  string `gorm:"column:token"`
}

type UserV2 struct {
	ID             string         `gorm:"column:id"`
	OrgID          string         `gorm:"column:org_id"`
	Subject        string         `gorm:"column:subject"`
	Email          string         `gorm:"column:email"`
	Name           string         `gorm:"column:name"`
	Verified       bool           `gorm:"column:verified"`
	Status         string         `gorm:"column:status"`
	Groups         pq.StringArray `gorm:"column:groups;type:text[];->"`
	SlackID        *string        `gorm:"column:slack_id"`
	Picture        *string        `gorm:"column:picture"`
	HashedPassword *string        `gorm:"column:hashed_password"`
}