// Code generated by 'guts'. DO NOT EDIT.

// From codersdk/templates.go

/**

* ACLAvailable is a list of users and groups that can be added to a template

* ACL.

*/

export interface ACLAvailable {

readonly users: readonly ReducedUser[];

readonly groups: readonly Group[];

}

// From codersdk/aibridge.go

/**

* AIBridgeAgenticAction represents a tool call with associated

* thinking blocks and token usage from one or more interceptions.

*/

export interface AIBridgeAgenticAction {

readonly model: string;

readonly token_usage: AIBridgeSessionThreadsTokenUsage;

readonly thinking: readonly AIBridgeModelThought[];

readonly tool_calls: readonly AIBridgeToolCall[];

}

// From codersdk/deployment.go

export interface AIBridgeAnthropicConfig {

readonly base_url: string;

readonly key: string;

}

// From codersdk/deployment.go

export interface AIBridgeBedrockConfig {

readonly base_url: string;

readonly region: string;

readonly access_key: string;

readonly access_key_secret: string;

readonly model: string;

readonly small_fast_model: string;

}

// From codersdk/deployment.go

export interface AIBridgeConfig {

readonly enabled: boolean;

/**

* @deprecated Use Providers with indexed `CODER_AI_GATEWAY_PROVIDER_<N>_*` env vars instead.

*/

readonly openai: AIBridgeOpenAIConfig;

/**

* @deprecated Use Providers with indexed `CODER_AI_GATEWAY_PROVIDER_<N>_*` env vars instead.

*/

readonly anthropic: AIBridgeAnthropicConfig;

/**

* @deprecated Use Providers with indexed `CODER_AI_GATEWAY_PROVIDER_<N>_*` env vars instead.

*/

readonly bedrock: AIBridgeBedrockConfig;

/**

* Providers holds provider instances populated from `CODER_AI_GATEWAY_PROVIDER_<N>_<KEY>`

* env vars and/or the deprecated LegacyOpenAI/LegacyAnthropic/LegacyBedrock fields above.

*/

readonly providers?: readonly AIProviderConfig[];

/**

* @deprecated Injected MCP in AI Bridge is deprecated and will be removed in a future release.

*/

readonly inject_coder_mcp_tools: boolean;

readonly retention: number;

readonly max_concurrency: number;

readonly rate_limit: number;

readonly structured_logging: boolean;

readonly send_actor_headers: boolean;

readonly allow_byok: boolean;

/**

* Budget settings for AI Governance cost controls.

*/

readonly budget_policy?: string;

readonly budget_period?: string;

/**

* Circuit breaker protects against cascading failures from upstream AI

* provider overload (503, 529).

*/

readonly circuit_breaker_enabled: boolean;

readonly circuit_breaker_failure_threshold: number;

readonly circuit_breaker_interval: number;

readonly circuit_breaker_timeout: number;

readonly circuit_breaker_max_requests: number;

/**

* APIDumpDir is the base directory under which each provider's

* request/response dumps are written, in a subdirectory named after

* the provider. Empty disables dumping.

*/

readonly api_dump_dir: string;

}

// From codersdk/aibridge.go

export interface AIBridgeListSessionsResponse {

readonly count: number;

readonly sessions: readonly AIBridgeSession[];

}

// From codersdk/aibridge.go

/**

* AIBridgeModelThought represents a single thinking block from

* the model.

*/

export interface AIBridgeModelThought {

readonly text: string;

}

// From codersdk/deployment.go

export interface AIBridgeOpenAIConfig {

readonly base_url: string;

readonly key: string;

}

// From codersdk/deployment.go

export interface AIBridgeProxyConfig {

readonly enabled: boolean;

readonly listen_addr: string;

readonly target: string;

readonly tls_cert_file: string;

readonly tls_key_file: string;

readonly cert_file: string;

readonly key_file: string;

readonly domain_allowlist: string;

readonly upstream_proxy: string;

readonly upstream_proxy_ca: string;

readonly allowed_private_cidrs: string;

readonly api_dump_dir: string;

}

// From codersdk/aibridge.go

export interface AIBridgeSession {

readonly id: string;

readonly initiator: MinimalUser;

readonly providers: readonly string[];

readonly models: readonly string[];

readonly client: string | null;

// empty interface{} type, falling back to unknown

readonly metadata: Record<string, unknown>;

readonly started_at: string;

readonly ended_at?: string;

readonly threads: number;

readonly token_usage_summary: AIBridgeSessionTokenUsageSummary;

/**

* NetworkCalls summarizes the Agent Firewall network requests made during the

* session. A nil value means the session did not pass through Agent

* Firewall, so network call monitoring was not active, which the UI

* surfaces as "Disabled".

*/

readonly network_calls?: AIBridgeSessionNetworkCallSummary;

readonly last_prompt?: string;

readonly last_active_at: string;

}

// From codersdk/aibridge.go

/**

* AIBridgeSessionNetworkCallSummary aggregates the Agent Firewall network

* calls made during a session. Blocked counts calls denied by the firewall

* allow-list.

*/

export interface AIBridgeSessionNetworkCallSummary {

readonly total: number;

readonly blocked: number;

}

// From codersdk/aibridge.go

/**

* AIBridgeSessionNetworkDomain is one destination host contacted during a

* session, with the number of network calls made to it.

*/

export interface AIBridgeSessionNetworkDomain {

readonly domain: string;

readonly count: number;

}

// From codersdk/aibridge.go

/**

* AIBridgeSessionThreadsResponse is the response for GET

* /api/v2/ai-gateway/sessions/{session_id} which returns a single

* session with fully expanded threads.

*/

export interface AIBridgeSessionThreadsResponse {

readonly id: string;

readonly initiator: MinimalUser;

readonly providers: readonly string[];

readonly models: readonly string[];

readonly client?: string;

// empty interface{} type, falling back to unknown

readonly metadata: Record<string, unknown>;

readonly page_started_at?: string;

readonly page_ended_at?: string;

readonly started_at: string;

readonly ended_at?: string;

readonly token_usage_summary: AIBridgeSessionThreadsTokenUsage;

/**

* NetworkCalls summarizes the Agent Firewall network calls made during the

* session. A nil value means the session did not pass through Agent

* Firewall, so network call monitoring was not active, which the UI

* surfaces as "Disabled".

*/

readonly network_calls?: AIBridgeSessionNetworkCallSummary;

/**

* NetworkTopDomains lists the most contacted destination hosts, ordered by

* call count descending. NetworkDomainCount is the total number of distinct

* domains, used to render a "+N more" overflow beyond the listed domains.

*/

readonly network_top_domains?: readonly AIBridgeSessionNetworkDomain[];

readonly network_domain_count?: number;

/**

* NetworkCallLogs is the chronological list of individual network calls made

* during the session, holding the earliest calls up to a server-side cap.

* NetworkCalls remains authoritative for whole-session totals, so a shorter

* list than NetworkCalls.Total means the list was truncated. Empty when the

* session did not pass through Agent Firewall.

*/

readonly network_call_logs?: readonly AgentFirewallLog[];

readonly threads: readonly AIBridgeThread[];

}

// From codersdk/aibridge.go

/**

* AIBridgeSessionThreadsTokenUsage represents aggregated token usage

* with metadata containing provider-specific fields.

*/

export interface AIBridgeSessionThreadsTokenUsage {

readonly input_tokens: number;

readonly output_tokens: number;

readonly cache_read_input_tokens: number;

readonly cache_write_input_tokens: number;

// empty interface{} type, falling back to unknown

readonly metadata: Record<string, unknown>;

}

// From codersdk/aibridge.go

export interface AIBridgeSessionTokenUsageSummary {

readonly input_tokens: number;

readonly output_tokens: number;

readonly cache_read_input_tokens: number;

readonly cache_write_input_tokens: number;

}

// From codersdk/aibridge.go

/**

* AIBridgeThread represents a single thread within a session.

* A thread groups interceptions by their thread_root_id.

*/

export interface AIBridgeThread {

readonly id: string;

readonly prompt?: string;

readonly model: string;

readonly provider: string;

readonly credential_kind: string;

readonly credential_hint: string;

readonly started_at: string;

readonly ended_at?: string;

readonly token_usage: AIBridgeSessionThreadsTokenUsage;

readonly agentic_actions: readonly AIBridgeAgenticAction[];

/**

* ErrorType is the categorized terminal upstream error from the root

* interception, or nil when the interception succeeded. See the

* aibridge_interception_error_type enum for possible values.

*/

readonly error_type?: string;

/**

* ErrorMessage is the raw terminal upstream error message from the root

* interception. Nil when the interception succeeded.

*/

readonly error_message?: string;

/**

* AgentFirewallSessionID links this thread to an agent firewall

* confinement session. Nil when the request did not pass through

* the agent firewall.

*/

readonly agent_firewall_session_id?: string;

/**

* AgentFirewallSequenceNumber is the firewall sequence number from

* the root interception. Used to determine the position of this

* LLM request in the firewall event stream. Nil when the request

* did not pass through the agent firewall.

*/

readonly agent_firewall_sequence_number?: number;

}

// From codersdk/aibridge.go

/**

* AIBridgeToolCall represents a tool call recorded during an

* interception.

*/

export interface AIBridgeToolCall {

readonly id: string;

readonly interception_id: string;

readonly provider_response_id: string;

readonly server_url: string;

readonly tool: string;

readonly injected: boolean;

readonly input: string;

// empty interface{} type, falling back to unknown

readonly metadata: Record<string, unknown>;

readonly created_at: string;

}

// From codersdk/aibridge.go

/**

* AIBudgetLimit is an AI spend limit and the tier that produced it. Both

* fields are always populated together.

*/

export interface AIBudgetLimit {

readonly spend_limit_micros: number;

readonly limit_source: AIBudgetLimitSource;

}

// From codersdk/aibridge.go

export type AIBudgetLimitSource = "group" | "user_override";

export const AIBudgetLimitSources: AIBudgetLimitSource[] = [

"group",

"user_override",

];

// From codersdk/deployment.go

export type AIBudgetPeriod = "month";

export const AIBudgetPeriods: AIBudgetPeriod[] = ["month"];

export const AIBudgetPolicies: AIBudgetPolicy[] = ["highest"];

// From codersdk/deployment.go

export type AIBudgetPolicy = "highest";

// From codersdk/deployment.go

export interface AIConfig {

readonly bridge?: AIBridgeConfig;

readonly aibridge_proxy?: AIBridgeProxyConfig;

readonly chat?: ChatConfig;

}

// From codersdk/aigatewaykeys.go

/**

* AIGatewayKey is a shared secret used by a standalone AI Gateway

* to authenticate into coderd.

*/

export interface AIGatewayKey {

readonly id: string;

readonly name: string;

readonly key_prefix: string;

readonly created_at: string;

readonly last_heartbeat_at?: string;

}

// From codersdk/client.go

/**

* AIGatewayKeyHeader contains the authentication key for a standalone AI Gateway replica.

*/

export const AIGatewayKeyHeader = "X-Coder-AI-Governance-Gateway-Key";

// From codersdk/aimodelprices.go

/**

* AIModelPrice is a per-model token price used by AI Gateway to compute the

* cost of an interception.

*

* Prices are integer micro-units per million tokens, so 1000000 is $1.00 per

* million tokens. A nil price means the price is not known, which the cost

* calculation treats the same as zero. Distinguish that from an explicit 0,

* which declares the model free of charge.

*/

export interface AIModelPrice {

readonly provider: string;

readonly model: string;

readonly input_price: number | null;

readonly output_price: number | null;

readonly cache_read_price: number | null;

readonly cache_write_price: number | null;

readonly created_at: string;

readonly updated_at: string;

}

// From codersdk/aimodelprices.go

/**

* AIModelPriceUpsert is one model's prices in an upsert request. It carries

* only the writable fields of AIModelPrice.

*/

export interface AIModelPriceUpsert {

readonly provider: string;

readonly model: string;

readonly input_price: number | null;

readonly output_price: number | null;

readonly cache_read_price: number | null;

readonly cache_write_price: number | null;

}

// From codersdk/aiproviders.go

/**

* AIProvider represents an AI provider configuration row as returned

* by the API. Each APIKey entry carries the row's ID so callers can

* reference it in an UpdateAIProviderRequest; the plaintext value is

* never echoed back (see AIProviderKey.Masked). Secret fields on

* Settings are never included in responses.

*/

export interface AIProvider {

readonly id: string;

readonly type: AIProviderType;

readonly name: string;

readonly display_name: string;

readonly icon: string;

readonly enabled: boolean;

readonly base_url: string;

readonly api_keys: readonly AIProviderKey[];

readonly settings: AIProviderSettings;

readonly created_at: string;

readonly updated_at: string;

}

// From codersdk/aiproviders_bedrock.go

export type AIProviderBedrockProtocol = "invoke-model" | "mantle";

export const AIProviderBedrockProtocols: AIProviderBedrockProtocol[] = [

"invoke-model",

"mantle",

];

// From codersdk/aiproviders_bedrock.go

/**

* AIProviderBedrockSettings configures providers that authenticate

* against AWS Bedrock. AccessKey and AccessKeySecret are write-only:

* servers strip them from GET and list responses. Both secret fields

* use a pointer so a PATCH can distinguish "leave untouched" (omitted)

* from "explicitly clear" (empty string), e.g. when migrating to

* IAM role-based authentication.

*/

export interface AIProviderBedrockSettings {

/**

* Region is the AWS region used to construct the Bedrock endpoint

* URL when BaseURL is not set on the parent provider.

*/

readonly region?: string;

/**

* Model is the AWS Bedrock model identifier used for primary

* requests.

*/

readonly model?: string;

/**

* SmallFastModel is the AWS Bedrock model identifier used for

* background tasks (e.g. Claude Code's haiku-class model).

*/

readonly small_fast_model?: string;

/**

* AccessKey is the AWS access key ID used to authenticate against

* Bedrock. Write-only.

*/

readonly access_key?: string;

/**

* AccessKeySecret is the AWS secret access key paired with

* AccessKey. Write-only.

*/

readonly access_key_secret?: string;

/**

* RoleARN, when set, is the IAM role assumed via STS before calling

* Bedrock. The base identity (static keys or the AWS environment, e.g.

* IRSA / EKS Pod Identity / EC2 Instance Profile) signs the AssumeRole

* call, and the resulting temporary credentials sign Bedrock requests.

*/

readonly role_arn?: string;

/**

* ExternalID is the STS external ID sent on the AssumeRole call when

* RoleARN is set. The server generates and owns it: create and update

* reject any client-supplied value that differs from the stored one (an

* update may echo the stored value back).

*/

readonly external_id?: string;

/**

* Protocol selects the Bedrock wire protocol. An empty value resolves to

* AIProviderBedrockProtocolInvokeModel, so existing rows keep the legacy

* behavior.

*/

readonly protocol?: AIProviderBedrockProtocol;

}

// From codersdk/aiproviders_bedrock.go

/**

* AIProviderBedrockSettingsVersion is the current schema version of

* AIProviderBedrockSettings.

*/

export const AIProviderBedrockSettingsVersion = 1;

// From codersdk/deployment.go

/**

* AIProviderConfig represents a single AI provider instance,

* parsed from CODER_AI_GATEWAY_PROVIDER_<N>_<KEY> environment variables.

* CODER_AIBRIDGE_PROVIDER_<N>_<KEY> is also accepted as a deprecated alias.

* This follows the same indexed pattern as ExternalAuthConfig.

*/

export interface AIProviderConfig {

/**

* Type is the provider type. Valid values are: "openai",

* "anthropic", "azure", "bedrock", "google", "openai-compat",

* "openrouter", "vercel", "copilot".

*/

readonly type: string;

/**

* Name is the unique instance identifier used for routing.

* Defaults to Type if not provided.

*/

readonly name: string;

/**

* BaseURL is the base URL of the upstream provider API.

*/

readonly base_url: string;

readonly bedrock_region?: string;

readonly bedrock_model?: string;

readonly bedrock_small_fast_model?: string;

}

// From codersdk/aiproviders.go

/**

* AIProviderKey is a single API key registered on a provider. The

* plaintext is never returned; Masked is a one-way rendering safe for

* display (see aibridge utils MaskSecret). ID lets clients reference

* the row in an UpdateAIProviderRequest without re-sending plaintext.

*/

export interface AIProviderKey {

readonly id: string;

readonly masked: string;

readonly created_at: string;

}

// From codersdk/aiproviders.go

/**

* AIProviderKeyMutation describes the intended state of a single key

* in an UpdateAIProviderRequest. Exactly one of ID or APIKey must be

* set:

*

* - ID set, APIKey nil: keep this existing key (matched by ID).

* - ID nil, APIKey set: insert this new plaintext as a new key.

*

* Any existing key whose ID is absent from the request is deleted.

*/

export interface AIProviderKeyMutation {

readonly id?: string;

readonly api_key?: string;

}

// From codersdk/aiproviders.go

/**

* AIProviderSettings is the discriminated container for type-specific

* provider settings stored in ai_providers.settings. Providers that

* need no type-specific configuration (current OpenAI and standard

* Anthropic flows) leave every field nil; the wire form for those

* providers is JSON null.

*

* On the wire, settings serialize as a JSON object that always carries

* _type and _version discriminator keys alongside the type-specific

* fields. The custom (Un)MarshalJSON implementations on this type

* handle the routing automatically; callers should never marshal the

* concrete settings struct directly.

*/

export interface AIProviderSettings {}

// From codersdk/aiproviders_bedrock.go

/**

* AIProviderSettingsTypeBedrock is the _type discriminator value for

* AIProviderBedrockSettings.

*/

export const AIProviderSettingsTypeBedrock = "bedrock";

// From codersdk/chats.go

/**

* AIProviderSummary is provider metadata embedded in other API responses.

*/

export interface AIProviderSummary {

readonly id: string;

readonly type: AIProviderType;

readonly name: string;

readonly display_name: string;

readonly icon: string;

readonly enabled: boolean;

readonly deleted: boolean;

}

// From codersdk/aiproviders.go

export type AIProviderType =

| "anthropic"

| "azure"

| "bedrock"

| "copilot"

| "google"

| "openai"

| "openai-compat"

| "openrouter"

| "vercel";

export const AIProviderTypes: AIProviderType[] = [

"anthropic",

"azure",

"bedrock",

"copilot",

"google",

"openai",

"openai-compat",

"openrouter",

"vercel",

];

// From codersdk/aibridge.go

/**

* AISpendPeriodWindow is the [Start, End) window over which AI spend is

* aggregated.

*/

export interface AISpendPeriodWindow {

/**

* PeriodStart is the inclusive lower bound of the current budget

* period.

*/

readonly period_start: string;

/**

* PeriodEnd is the exclusive upper bound of the current budget

* period.

*/

readonly period_end: string;

}

// From codersdk/allowlist.go

/**

* APIAllowListTarget represents a single allow-list entry using the canonical

* string form "<resource_type>:<id>". The wildcard symbol "*" is treated as a

* permissive match for either side.

*/

export interface APIAllowListTarget {

readonly type: RBACResource;

readonly id: string;

}

// From codersdk/apikey.go

/**

* APIKey: do not ever return the HashedSecret

*/

export interface APIKey {

readonly id: string;

readonly user_id: string;

readonly last_used: string;

readonly expires_at: string;

readonly created_at: string;

readonly updated_at: string;

readonly login_type: LoginType;

readonly scope: APIKeyScope; // Deprecated: use Scopes instead.

readonly scopes: readonly APIKeyScope[];

readonly token_name: string;

readonly lifetime_seconds: number;

readonly allow_list: readonly APIAllowListTarget[];

}

// From codersdk/apikey.go

export type APIKeyScope =

| "ai_gateway_key:*"

| "ai_gateway_key:create"

| "ai_gateway_key:delete"

| "ai_gateway_key:read"

| "ai_gateway_key:update"

| "ai_model_price:*"

| "ai_model_price:read"

| "ai_model_price:update"

| "ai_provider:*"

| "ai_provider:create"

| "ai_provider:delete"

| "ai_provider:read"

| "ai_provider:update"

| "ai_seat:*"

| "ai_seat:create"

| "ai_seat:read"

| "aibridge_interception:*"

| "aibridge_interception:create"

| "aibridge_interception:read"

| "aibridge_interception:update"

| "all"

| "api_key:*"

| "api_key:create"

| "api_key:delete"

| "api_key:read"

| "api_key:update"

| "application_connect"

| "assign_org_role:*"

| "assign_org_role:assign"

| "assign_org_role:create"

| "assign_org_role:delete"

| "assign_org_role:read"

| "assign_org_role:unassign"

| "assign_org_role:update"

| "assign_role:*"

| "assign_role:assign"

| "assign_role:read"

| "assign_role:unassign"

| "audit_log:*"

| "audit_log:create"

| "audit_log:read"

| "boundary_log:*"

| "boundary_log:create"

| "boundary_log:delete"

| "boundary_log:read"

| "boundary_usage:*"

| "boundary_usage:delete"

| "boundary_usage:read"

| "boundary_usage:update"

| "chat:*"

| "chat:create"

| "chat:delete"

| "chat:read"

| "chat:share"

| "chat:update"

| "coder:all"

| "coder:apikeys.manage_self"

| "coder:application_connect"

| "coder:templates.author"

| "coder:templates.build"

| "coder:workspaces.access"

| "coder:workspaces.create"

| "coder:workspaces.delete"

| "coder:workspaces.operate"

| "connection_log:*"

| "connection_log:read"

| "connection_log:update"

| "crypto_key:*"

| "crypto_key:create"

| "crypto_key:delete"

| "crypto_key:read"

| "crypto_key:update"

| "debug_info:*"

| "debug_info:read"

| "deployment_config:*"

| "deployment_config:read"

| "deployment_config:update"

| "deployment_stats:*"

| "deployment_stats:read"

| "file:*"

| "file:create"

| "file:read"

| "group:*"

| "group:create"

| "group:delete"

| "group_member:*"

| "group_member:read"

| "group:read"

| "group:update"

| "idpsync_settings:*"

| "idpsync_settings:read"

| "idpsync_settings:update"

| "inbox_notification:*"

| "inbox_notification:create"

| "inbox_notification:read"

| "inbox_notification:update"

| "license:*"

| "license:create"

| "license:delete"

| "license:read"

| "notification_message:*"

| "notification_message:create"

| "notification_message:delete"

| "notification_message:read"

| "notification_message:update"

| "notification_preference:*"

| "notification_preference:read"

| "notification_preference:update"

| "notification_template:*"

| "notification_template:read"

| "notification_template:update"

| "oauth2_app:*"

| "oauth2_app_code_token:*"

| "oauth2_app_code_token:create"

| "oauth2_app_code_token:delete"

| "oauth2_app_code_token:read"

| "oauth2_app:create"

| "oauth2_app:delete"

| "oauth2_app:read"

| "oauth2_app_secret:*"

| "oauth2_app_secret:create"

| "oauth2_app_secret:delete"

| "oauth2_app_secret:read"

| "oauth2_app_secret:update"

| "oauth2_app:update"

| "organization:*"

| "organization:create"

| "organization:delete"

| "organization_member:*"

| "organization_member:create"

| "organization_member:delete"

| "organization_member:read"

| "organization_member:update"

| "organization:read"

| "organization:update"

| "prebuilt_workspace:*"

| "prebuilt_workspace:delete"

| "prebuilt_workspace:update"

| "provisioner_daemon:*"

| "provisioner_daemon:create"

| "provisioner_daemon:delete"

| "provisioner_daemon:read"

| "provisioner_daemon:update"

| "provisioner_jobs:*"

| "provisioner_jobs:create"

| "provisioner_jobs:read"

| "provisioner_jobs:update"

| "replicas:*"

| "replicas:read"

| "system:*"

| "system:create"

| "system:delete"

| "system:read"

| "system:update"

| "tailnet_coordinator:*"

| "tailnet_coordinator:create"

| "tailnet_coordinator:delete"

| "tailnet_coordinator:read"

| "tailnet_coordinator:update"

| "task:*"

| "task:create"

| "task:delete"

| "task:read"

| "task:update"

| "template:*"

| "template:create"

| "template:delete"

| "template:read"

| "template:update"

| "template:use"

| "template:view_insights"

| "usage_event:*"

| "usage_event:create"

| "usage_event:read"

| "usage_event:update"

| "user:*"

| "user:create"

| "user:delete"

| "user:read"

| "user:read_personal"

| "user_secret:*"

| "user_secret:create"

| "user_secret:delete"

| "user_secret:read"

| "user_secret:update"

| "user_skill:*"

| "user_skill:create"

| "user_skill:delete"

| "user_skill:read"

| "user_skill:update"

| "user:update"

| "user:update_personal"

| "webpush_subscription:*"

| "webpush_subscription:create"

| "webpush_subscription:delete"

| "webpush_subscription:read"

| "workspace_agent_devcontainers:*"

| "workspace_agent_devcontainers:create"

| "workspace_agent_resource_monitor:*"

| "workspace_agent_resource_monitor:create"

| "workspace_agent_resource_monitor:read"

| "workspace_agent_resource_monitor:update"

| "workspace:*"

| "workspace:application_connect"

| "workspace_build_orchestration:*"

| "workspace_build_orchestration:create"

| "workspace_build_orchestration:delete"

| "workspace_build_orchestration:read"

| "workspace_build_orchestration:update"

| "workspace:create"

| "workspace:create_agent"

| "workspace:delete"

| "workspace:delete_agent"

| "workspace_dormant:*"

| "workspace_dormant:application_connect"

| "workspace_dormant:create"

| "workspace_dormant:create_agent"

| "workspace_dormant:delete"

| "workspace_dormant:delete_agent"

| "workspace_dormant:read"

| "workspace_dormant:share"

| "workspace_dormant:ssh"

| "workspace_dormant:start"

| "workspace_dormant:stop"

| "workspace_dormant:update"

| "workspace_dormant:update_agent"

| "workspace_proxy:*"

| "workspace_proxy:create"

| "workspace_proxy:delete"

| "workspace_proxy:read"

| "workspace_proxy:update"

| "workspace:read"

| "workspace:share"

| "workspace:ssh"

| "workspace:start"

| "workspace:stop"

| "workspace:update"

| "workspace:update_agent";

export const APIKeyScopes: APIKeyScope[] = [

"ai_gateway_key:*",

"ai_gateway_key:create",

"ai_gateway_key:delete",

"ai_gateway_key:read",

"ai_gateway_key:update",

"ai_model_price:*",

"ai_model_price:read",

"ai_model_price:update",

"ai_provider:*",

"ai_provider:create",

"ai_provider:delete",

"ai_provider:read",

"ai_provider:update",

"ai_seat:*",

"ai_seat:create",

"ai_seat:read",

"aibridge_interception:*",

"aibridge_interception:create",

"aibridge_interception:read",

"aibridge_interception:update",

"all",

"api_key:*",

"api_key:create",

"api_key:delete",

"api_key:read",

"api_key:update",

"application_connect",

"assign_org_role:*",

"assign_org_role:assign",

"assign_org_role:create",

"assign_org_role:delete",

"assign_org_role:read",

"assign_org_role:unassign",

"assign_org_role:update",

"assign_role:*",

"assign_role:assign",

"assign_role:read",

"assign_role:unassign",

"audit_log:*",

"audit_log:create",

"audit_log:read",

"boundary_log:*",

"boundary_log:create",

"boundary_log:delete",

"boundary_log:read",

"boundary_usage:*",

"boundary_usage:delete",

"boundary_usage:read",

"boundary_usage:update",

"chat:*",

"chat:create",

"chat:delete",

"chat:read",

"chat:share",

"chat:update",

"coder:all",

"coder:apikeys.manage_self",

"coder:application_connect",

"coder:templates.author",

"coder:templates.build",

"coder:workspaces.access",

"coder:workspaces.create",

"coder:workspaces.delete",

"coder:workspaces.operate",

"connection_log:*",

"connection_log:read",

"connection_log:update",

"crypto_key:*",

"crypto_key:create",

"crypto_key:delete",

"crypto_key:read",

"crypto_key:update",

"debug_info:*",

"debug_info:read",

"deployment_config:*",

"deployment_config:read",

"deployment_config:update",

"deployment_stats:*",

"deployment_stats:read",

"file:*",

"file:create",

"file:read",

"group:*",

"group:create",

"group:delete",

"group_member:*",

"group_member:read",

"group:read",

"group:update",

"idpsync_settings:*",

"idpsync_settings:read",

"idpsync_settings:update",

"inbox_notification:*",

"inbox_notification:create",

"inbox_notification:read",

"inbox_notification:update",

"license:*",

"license:create",

"license:delete",

"license:read",

"notification_message:*",

"notification_message:create",

"notification_message:delete",

"notification_message:read",

"notification_message:update",

"notification_preference:*",

"notification_preference:read",

"notification_preference:update",

"notification_template:*",