pidgr_proto/pidgr/v1/

pidgr.v1.rs

// @generated
// This file is @generated by prost-build.
// ─── Messages ───────────────────────────────────────────────────────────────

/// A pre-generated access code for early access gating.
/// Codes are single-use: once redeemed during organization creation, they cannot be reused.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AccessCode {
    /// Unique identifier for the access code.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// The access code value (e.g. "PIDGR-A3BF7K2N").
    /// Format: PIDGR- followed by 8 alphanumeric characters (excludes 0, O, 1, I for readability).
    #[prost(string, tag="2")]
    pub code: ::prost::alloc::string::String,
    /// Optional human-friendly label for tracking (e.g. "Batch Feb 2026", "Demo for Acme").
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="3")]
    pub label: ::prost::alloc::string::String,
    /// When the code was generated.
    #[prost(message, optional, tag="4")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// When the code was redeemed. Empty if not yet redeemed.
    #[prost(message, optional, tag="5")]
    pub redeemed_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Email of the user who redeemed the code. Empty if not yet redeemed.
    #[prost(string, tag="6")]
    pub redeemed_by: ::prost::alloc::string::String,
    /// When the code was revoked. Empty if not revoked.
    #[prost(message, optional, tag="7")]
    pub revoked_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to generate one or more access codes.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GenerateAccessCodesRequest {
    /// Number of codes to generate. Required, must be between 1 and 100.
    #[prost(int32, tag="1")]
    pub count: i32,
    /// Optional label applied to all generated codes.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub label: ::prost::alloc::string::String,
}
/// Response containing the newly generated access codes.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GenerateAccessCodesResponse {
    /// The generated access codes.
    #[prost(message, repeated, tag="1")]
    pub access_codes: ::prost::alloc::vec::Vec<AccessCode>,
}
/// Request to list all access codes.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListAccessCodesRequest {
}
/// Response containing all access codes.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListAccessCodesResponse {
    /// All access codes (active, redeemed, and revoked).
    #[prost(message, repeated, tag="1")]
    pub access_codes: ::prost::alloc::vec::Vec<AccessCode>,
}
/// Request to revoke an access code.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeAccessCodeRequest {
    /// ID of the access code to revoke. Required.
    #[prost(string, tag="1")]
    pub access_code_id: ::prost::alloc::string::String,
}
/// Response after revoking an access code.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeAccessCodeResponse {
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Request to submit a user action on a delivered message.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SubmitActionRequest {
    /// ID of the delivery the user is acting on.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub delivery_id: ::prost::alloc::string::String,
    /// ID of the action being performed (matches MessageAction.id).
    /// Constraints: Max length 100 characters.
    #[prost(string, tag="2")]
    pub action_id: ::prost::alloc::string::String,
    /// Optional action-specific payload (e.g. poll response data). Empty for ACK.
    /// Constraints: Max size 10000 bytes.
    #[prost(bytes="vec", tag="3")]
    pub payload: ::prost::alloc::vec::Vec<u8>,
}
/// Response after submitting an action.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SubmitActionResponse {
    /// Whether the action was successfully recorded and forwarded to the workflow.
    #[prost(bool, tag="1")]
    pub success: bool,
}
/// A named role within an organization with a set of permissions.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Role {
    /// Unique identifier for the role.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// URL-safe slug (unique within the organization, e.g. "admin", "manager").
    #[prost(string, tag="2")]
    pub slug: ::prost::alloc::string::String,
    /// Human-readable display name.
    #[prost(string, tag="3")]
    pub name: ::prost::alloc::string::String,
    /// Whether this role was seeded by the system on organization creation.
    #[prost(bool, tag="4")]
    pub is_default: bool,
    /// Permissions granted to users with this role.
    #[prost(enumeration="Permission", repeated, tag="5")]
    pub permissions: ::prost::alloc::vec::Vec<i32>,
    /// Whether this role is system-managed and immutable (e.g. super_admin).
    #[prost(bool, tag="6")]
    pub is_system: bool,
}
// ─── Pagination ─────────────────────────────────────────────────────────────

/// Cursor-based pagination parameters for list requests.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Pagination {
    /// Maximum number of items to return per page.
    #[prost(int32, tag="1")]
    pub page_size: i32,
    /// Opaque token from a previous response to fetch the next page.
    #[prost(string, tag="2")]
    pub page_token: ::prost::alloc::string::String,
}
/// Pagination metadata returned alongside list responses.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct PaginationMeta {
    /// Token to pass in the next request to get the following page. Empty if no more pages.
    #[prost(string, tag="1")]
    pub next_page_token: ::prost::alloc::string::String,
    /// Total number of items matching the query (across all pages).
    #[prost(int32, tag="2")]
    pub total_count: i32,
}
// ─── Message & Action Model ─────────────────────────────────────────────────

/// An action button attached to a message that a recipient can interact with.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct MessageAction {
    /// Unique identifier for this action within the message.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// The type of action (e.g. ACK).
    #[prost(enumeration="ActionType", tag="2")]
    pub r#type: i32,
    /// Display label shown to the recipient (e.g. "Got it").
    /// Constraints: Max length 50 characters.
    #[prost(string, tag="3")]
    pub label: ::prost::alloc::string::String,
}
/// Canonical message type used across rendering, inbox, and delivery.
/// Represents the fully rendered content delivered to a recipient.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Message {
    /// SHA-256 hash of the rendered content, used as a content-addressable ID.
    #[prost(string, tag="1")]
    pub content_id: ::prost::alloc::string::String,
    /// ID of the campaign this message belongs to.
    #[prost(string, tag="2")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Display name of the sender (e.g. organization or campaign name).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="3")]
    pub sender_name: ::prost::alloc::string::String,
    /// Short one-line summary shown in notification banners.
    /// Constraints: Max length 500 characters.
    #[prost(string, tag="4")]
    pub summary: ::prost::alloc::string::String,
    /// Preview text shown in inbox list views.
    /// Constraints: Max length 500 characters.
    #[prost(string, tag="5")]
    pub preview: ::prost::alloc::string::String,
    /// Full message body content.
    /// Constraints: Max length 100000 characters.
    #[prost(string, tag="6")]
    pub body: ::prost::alloc::string::String,
    /// Whether this message requires immediate attention from the recipient.
    #[prost(bool, tag="7")]
    pub critical: bool,
    /// Actions available to the recipient (e.g. acknowledge button).
    #[prost(message, repeated, tag="8")]
    pub actions: ::prost::alloc::vec::Vec<MessageAction>,
    /// Timestamp when the message was created.
    #[prost(message, optional, tag="9")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// User-facing title of the message (resolved from campaign or template).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="10")]
    pub title: ::prost::alloc::string::String,
}
// ─── Workflow Definition Model ──────────────────────────────────────────────

/// A data-driven workflow represented as a directed acyclic graph (DAG) of steps.
/// Defines the automation logic for a campaign's lifecycle.
/// Backend MUST validate the graph is a DAG (no cycles) before execution.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct WorkflowDefinition {
    /// Ordered list of steps in the workflow DAG.
    /// Constraints: Max 100 steps. Backend MUST validate the graph is a DAG (no cycles).
    #[prost(message, repeated, tag="1")]
    pub steps: ::prost::alloc::vec::Vec<WorkflowStep>,
}
/// A single step in a workflow DAG with typed configuration and transitions.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct WorkflowStep {
    /// Unique identifier for this step within the workflow.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// The type of operation this step performs.
    #[prost(enumeration="StepType", tag="2")]
    pub r#type: i32,
    /// Map of outcome labels to the next step ID (e.g. "completed" -> "step_3").
    /// Constraints: Max 10 transitions per step.
    #[prost(map="string, string", tag="7")]
    pub transitions: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
    /// Step-specific configuration — exactly one must be set, matching the type.
    #[prost(oneof="workflow_step::Config", tags="3, 4, 5, 6")]
    pub config: ::core::option::Option<workflow_step::Config>,
}
/// Nested message and enum types in `WorkflowStep`.
pub mod workflow_step {
    /// Step-specific configuration — exactly one must be set, matching the type.
    #[derive(Clone, PartialEq, ::prost::Oneof)]
    pub enum Config {
        /// Configuration for SEND_NOTIFICATION steps.
        #[prost(message, tag="3")]
        SendNotification(super::SendNotificationConfig),
        /// Configuration for DEADLINE_CHECK steps.
        #[prost(message, tag="4")]
        DeadlineCheck(super::DeadlineCheckConfig),
        /// Configuration for SEND_REMINDER steps.
        #[prost(message, tag="5")]
        SendReminder(super::SendReminderConfig),
        /// Configuration for CALL_WEBHOOK steps.
        #[prost(message, tag="6")]
        CallWebhook(super::CallWebhookConfig),
    }
}
/// Configuration for a step that sends the initial push notification.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct SendNotificationConfig {
    /// Notification delivery type (e.g. "push").
    /// Constraints: Accepted values: "push". Max length 50 characters.
    #[prost(string, tag="1")]
    pub r#type: ::prost::alloc::string::String,
    /// ID of the template to use for this step's notification.
    /// Empty falls back to campaign-level template_id.
    /// Constraints: Max length 36 characters (UUID).
    #[prost(string, tag="2")]
    pub template_id: ::prost::alloc::string::String,
    /// Pinned template version for this step.
    /// 0 falls back to campaign-level template_version.
    #[prost(int32, tag="3")]
    pub template_version: i32,
    /// Display label for the action button (e.g. "Acknowledge", "Got it").
    /// Constraints: Max length 50 characters.
    #[prost(string, tag="4")]
    pub action_label: ::prost::alloc::string::String,
    /// Action type for this step's message button.
    #[prost(enumeration="ActionType", tag="5")]
    pub action_type: i32,
    /// Values for custom-sourced template variables specific to this step.
    /// Constraints: Max 100 entries. Key max length 100 characters, value max length 10000 characters.
    #[prost(map="string, string", tag="6")]
    pub custom_variables: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// Configuration for a deadline-based timer step that sleeps for a configured
/// delay before proceeding. Acknowledgments happen independently at the delivery
/// level and are evaluated by subsequent steps (e.g. SEND_REMINDER).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeadlineCheckConfig {
    /// Duration string for the deadline delay (e.g. "120h", "72h").
    /// Constraints: Valid range 1m to 8760h (1 year).
    #[prost(string, tag="1")]
    pub delay: ::prost::alloc::string::String,
}
/// Configuration for a step that sends a one-time reminder to non-responsive recipients.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SendReminderConfig {
    /// Reminder delivery type (e.g. "push").
    /// Constraints: Accepted values: "push". Max length 50 characters.
    #[prost(string, tag="1")]
    pub r#type: ::prost::alloc::string::String,
}
/// Configuration for a step that calls an external webhook.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CallWebhookConfig {
    /// Human-readable name for this webhook (for logging/display).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// URL to POST campaign context to.
    /// Constraints: Max length 2048 characters.
    /// Security: HTTPS required in production. Backend MUST reject private,
    /// loopback, and link-local addresses to prevent SSRF attacks.
    #[prost(string, tag="2")]
    pub url: ::prost::alloc::string::String,
    /// Additional HTTP headers to include in the webhook request.
    /// Constraints: Max 20 entries. Key max length 200 characters, value max length 2000 characters.
    #[prost(map="string, string", tag="3")]
    pub headers: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
// ─── Status Enums ───────────────────────────────────────────────────────────

/// Lifecycle status of a campaign.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum CampaignStatus {
    /// Default value; not a valid status.
    Unspecified = 0,
    /// Campaign has been created but not yet started.
    Created = 1,
    /// Campaign is actively delivering messages and processing actions.
    Running = 2,
    /// All recipients have been processed; campaign is finished.
    Completed = 3,
    /// Campaign terminated due to an unrecoverable error.
    Failed = 4,
    /// Campaign was manually cancelled before completion.
    Cancelled = 5,
}
impl CampaignStatus {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "CAMPAIGN_STATUS_UNSPECIFIED",
            Self::Created => "CAMPAIGN_STATUS_CREATED",
            Self::Running => "CAMPAIGN_STATUS_RUNNING",
            Self::Completed => "CAMPAIGN_STATUS_COMPLETED",
            Self::Failed => "CAMPAIGN_STATUS_FAILED",
            Self::Cancelled => "CAMPAIGN_STATUS_CANCELLED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "CAMPAIGN_STATUS_UNSPECIFIED" => Some(Self::Unspecified),
            "CAMPAIGN_STATUS_CREATED" => Some(Self::Created),
            "CAMPAIGN_STATUS_RUNNING" => Some(Self::Running),
            "CAMPAIGN_STATUS_COMPLETED" => Some(Self::Completed),
            "CAMPAIGN_STATUS_FAILED" => Some(Self::Failed),
            "CAMPAIGN_STATUS_CANCELLED" => Some(Self::Cancelled),
            _ => None,
        }
    }
}
/// Delivery status for a single message sent to a recipient.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum DeliveryStatus {
    /// Default value; not a valid status.
    Unspecified = 0,
    /// Message is queued but has not been sent yet.
    Pending = 1,
    /// Push notification was sent to the delivery provider.
    Sent = 2,
    /// Message was confirmed delivered to the device.
    Delivered = 3,
    /// Recipient completed the required action (e.g. acknowledged).
    Acknowledged = 4,
    /// Recipient did not act before the deadline.
    Missed = 5,
    /// Recipient has no registered device; delivery was skipped.
    NoDevice = 6,
    /// Delivery failed due to a provider or system error.
    Failed = 7,
}
impl DeliveryStatus {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "DELIVERY_STATUS_UNSPECIFIED",
            Self::Pending => "DELIVERY_STATUS_PENDING",
            Self::Sent => "DELIVERY_STATUS_SENT",
            Self::Delivered => "DELIVERY_STATUS_DELIVERED",
            Self::Acknowledged => "DELIVERY_STATUS_ACKNOWLEDGED",
            Self::Missed => "DELIVERY_STATUS_MISSED",
            Self::NoDevice => "DELIVERY_STATUS_NO_DEVICE",
            Self::Failed => "DELIVERY_STATUS_FAILED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "DELIVERY_STATUS_UNSPECIFIED" => Some(Self::Unspecified),
            "DELIVERY_STATUS_PENDING" => Some(Self::Pending),
            "DELIVERY_STATUS_SENT" => Some(Self::Sent),
            "DELIVERY_STATUS_DELIVERED" => Some(Self::Delivered),
            "DELIVERY_STATUS_ACKNOWLEDGED" => Some(Self::Acknowledged),
            "DELIVERY_STATUS_MISSED" => Some(Self::Missed),
            "DELIVERY_STATUS_NO_DEVICE" => Some(Self::NoDevice),
            "DELIVERY_STATUS_FAILED" => Some(Self::Failed),
            _ => None,
        }
    }
}
/// Mobile platform for device registration.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum Platform {
    /// Default value; not a valid platform.
    Unspecified = 0,
    /// Apple iOS.
    Ios = 1,
    /// Google Android.
    Android = 2,
}
impl Platform {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "PLATFORM_UNSPECIFIED",
            Self::Ios => "PLATFORM_IOS",
            Self::Android => "PLATFORM_ANDROID",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "PLATFORM_UNSPECIFIED" => Some(Self::Unspecified),
            "PLATFORM_IOS" => Some(Self::Ios),
            "PLATFORM_ANDROID" => Some(Self::Android),
            _ => None,
        }
    }
}
/// Granular permission for authorization checks.
/// Stored in the database as enum names (e.g. "PERMISSION_ORG_READ").
/// New values MUST be appended with the next sequential number; existing values
/// MUST NOT be renumbered or removed (enforced by buf breaking).
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum Permission {
    /// Default value; not a valid permission.
    Unspecified = 0,
    /// View organization settings.
    OrgRead = 1,
    /// Modify organization settings.
    OrgWrite = 2,
    /// View organization members.
    MembersRead = 3,
    /// Invite new users to the organization.
    MembersInvite = 4,
    /// Change user roles, deactivate users.
    MembersManage = 5,
    /// View campaigns and deliveries.
    CampaignsRead = 6,
    /// Create and edit campaigns.
    CampaignsWrite = 7,
    /// Start campaign execution.
    CampaignsStart = 8,
    /// View templates.
    TemplatesRead = 9,
    /// Create and edit templates.
    TemplatesWrite = 10,
    /// View inbox messages and deliveries.
    InboxRead = 11,
    /// Submit actions on deliveries.
    InboxAct = 12,
    /// View all groups in the organization.
    GroupsAllRead = 13,
    /// Create, edit, delete groups the caller created, manage own group membership.
    GroupsWrite = 14,
    /// Create, edit, delete any group in the organization, manage any group membership.
    GroupsAllWrite = 15,
    /// View all teams (organizational units) in the organization.
    TeamsAllRead = 16,
    /// Create, edit, delete teams the caller created, manage own team membership.
    TeamsWrite = 17,
    /// Create, edit, delete any team in the organization, manage any team membership.
    TeamsAllWrite = 18,
    /// View privacy requests (exports, deletions) for the organization.
    PrivacyRead = 19,
    /// Schedule deletions, export user data, restrict processing.
    PrivacyWrite = 20,
    /// View audit trail events for the organization.
    AuditRead = 21,
}
impl Permission {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "PERMISSION_UNSPECIFIED",
            Self::OrgRead => "PERMISSION_ORG_READ",
            Self::OrgWrite => "PERMISSION_ORG_WRITE",
            Self::MembersRead => "PERMISSION_MEMBERS_READ",
            Self::MembersInvite => "PERMISSION_MEMBERS_INVITE",
            Self::MembersManage => "PERMISSION_MEMBERS_MANAGE",
            Self::CampaignsRead => "PERMISSION_CAMPAIGNS_READ",
            Self::CampaignsWrite => "PERMISSION_CAMPAIGNS_WRITE",
            Self::CampaignsStart => "PERMISSION_CAMPAIGNS_START",
            Self::TemplatesRead => "PERMISSION_TEMPLATES_READ",
            Self::TemplatesWrite => "PERMISSION_TEMPLATES_WRITE",
            Self::InboxRead => "PERMISSION_INBOX_READ",
            Self::InboxAct => "PERMISSION_INBOX_ACT",
            Self::GroupsAllRead => "PERMISSION_GROUPS_ALL_READ",
            Self::GroupsWrite => "PERMISSION_GROUPS_WRITE",
            Self::GroupsAllWrite => "PERMISSION_GROUPS_ALL_WRITE",
            Self::TeamsAllRead => "PERMISSION_TEAMS_ALL_READ",
            Self::TeamsWrite => "PERMISSION_TEAMS_WRITE",
            Self::TeamsAllWrite => "PERMISSION_TEAMS_ALL_WRITE",
            Self::PrivacyRead => "PERMISSION_PRIVACY_READ",
            Self::PrivacyWrite => "PERMISSION_PRIVACY_WRITE",
            Self::AuditRead => "PERMISSION_AUDIT_READ",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "PERMISSION_UNSPECIFIED" => Some(Self::Unspecified),
            "PERMISSION_ORG_READ" => Some(Self::OrgRead),
            "PERMISSION_ORG_WRITE" => Some(Self::OrgWrite),
            "PERMISSION_MEMBERS_READ" => Some(Self::MembersRead),
            "PERMISSION_MEMBERS_INVITE" => Some(Self::MembersInvite),
            "PERMISSION_MEMBERS_MANAGE" => Some(Self::MembersManage),
            "PERMISSION_CAMPAIGNS_READ" => Some(Self::CampaignsRead),
            "PERMISSION_CAMPAIGNS_WRITE" => Some(Self::CampaignsWrite),
            "PERMISSION_CAMPAIGNS_START" => Some(Self::CampaignsStart),
            "PERMISSION_TEMPLATES_READ" => Some(Self::TemplatesRead),
            "PERMISSION_TEMPLATES_WRITE" => Some(Self::TemplatesWrite),
            "PERMISSION_INBOX_READ" => Some(Self::InboxRead),
            "PERMISSION_INBOX_ACT" => Some(Self::InboxAct),
            "PERMISSION_GROUPS_ALL_READ" => Some(Self::GroupsAllRead),
            "PERMISSION_GROUPS_WRITE" => Some(Self::GroupsWrite),
            "PERMISSION_GROUPS_ALL_WRITE" => Some(Self::GroupsAllWrite),
            "PERMISSION_TEAMS_ALL_READ" => Some(Self::TeamsAllRead),
            "PERMISSION_TEAMS_WRITE" => Some(Self::TeamsWrite),
            "PERMISSION_TEAMS_ALL_WRITE" => Some(Self::TeamsAllWrite),
            "PERMISSION_PRIVACY_READ" => Some(Self::PrivacyRead),
            "PERMISSION_PRIVACY_WRITE" => Some(Self::PrivacyWrite),
            "PERMISSION_AUDIT_READ" => Some(Self::AuditRead),
            _ => None,
        }
    }
}
/// Type of action a recipient can perform on a message.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum ActionType {
    /// Default value; not a valid action type.
    Unspecified = 0,
    /// Simple acknowledgment — recipient confirms they received the message.
    Ack = 1,
}
impl ActionType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "ACTION_TYPE_UNSPECIFIED",
            Self::Ack => "ACTION_TYPE_ACK",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "ACTION_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "ACTION_TYPE_ACK" => Some(Self::Ack),
            _ => None,
        }
    }
}
/// Type of step within a workflow definition DAG.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum StepType {
    /// Default value; not a valid step type.
    Unspecified = 0,
    /// Send the initial push notification to all recipients.
    SendNotification = 1,
    /// Sleep for a configurable deadline, then proceed to the next step.
    DeadlineCheck = 2,
    /// Send a follow-up reminder to recipients who have not acted.
    SendReminder = 3,
    /// Call an external webhook with campaign context.
    CallWebhook = 4,
    /// Mark unacknowledged deliveries (SENT/DELIVERED) as MISSED. No config required.
    MarkMissed = 5,
}
impl StepType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "STEP_TYPE_UNSPECIFIED",
            Self::SendNotification => "STEP_TYPE_SEND_NOTIFICATION",
            Self::DeadlineCheck => "STEP_TYPE_DEADLINE_CHECK",
            Self::SendReminder => "STEP_TYPE_SEND_REMINDER",
            Self::CallWebhook => "STEP_TYPE_CALL_WEBHOOK",
            Self::MarkMissed => "STEP_TYPE_MARK_MISSED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "STEP_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "STEP_TYPE_SEND_NOTIFICATION" => Some(Self::SendNotification),
            "STEP_TYPE_DEADLINE_CHECK" => Some(Self::DeadlineCheck),
            "STEP_TYPE_SEND_REMINDER" => Some(Self::SendReminder),
            "STEP_TYPE_CALL_WEBHOOK" => Some(Self::CallWebhook),
            "STEP_TYPE_MARK_MISSED" => Some(Self::MarkMissed),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A scoped API key for programmatic access (MCP agents, service integrations).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ApiKey {
    /// Unique identifier.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Human-friendly label (e.g. "MCP Production", "CI Pipeline").
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Displayable prefix of the key (e.g. "pidgr_k_abc12345").
    /// Used for identification — the full key is only returned on creation.
    #[prost(string, tag="3")]
    pub key_prefix: ::prost::alloc::string::String,
    /// Permissions granted to this key.
    #[prost(enumeration="Permission", repeated, tag="4")]
    pub permissions: ::prost::alloc::vec::Vec<i32>,
    /// When the key was created.
    #[prost(message, optional, tag="5")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Last time the key was used to authenticate a request. Empty if never used.
    #[prost(message, optional, tag="6")]
    pub last_used_at: ::core::option::Option<::prost_types::Timestamp>,
    /// When the key expires. Empty means no expiration.
    #[prost(message, optional, tag="7")]
    pub expires_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to create a new API key.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateApiKeyRequest {
    /// Human-friendly label. Required, max 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Permissions to grant. Required, at least one.
    /// PERMISSION_UNSPECIFIED values are rejected.
    #[prost(enumeration="Permission", repeated, tag="2")]
    pub permissions: ::prost::alloc::vec::Vec<i32>,
    /// Optional expiration time. If omitted, the key does not expire.
    #[prost(message, optional, tag="3")]
    pub expires_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Response after creating an API key.
/// IMPORTANT: The full key is only returned here — it cannot be retrieved later.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateApiKeyResponse {
    /// The created API key metadata.
    #[prost(message, optional, tag="1")]
    pub api_key: ::core::option::Option<ApiKey>,
    /// The full secret key value (e.g. "pidgr_k_abc12345...").
    /// Store this securely — it is not retrievable after this response.
    #[prost(string, tag="2")]
    pub key: ::prost::alloc::string::String,
}
/// Request to list all API keys in the caller's organization.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListApiKeysRequest {
}
/// Response containing the organization's API keys.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListApiKeysResponse {
    /// All active (non-revoked) API keys. Full key values are not included.
    #[prost(message, repeated, tag="1")]
    pub api_keys: ::prost::alloc::vec::Vec<ApiKey>,
}
/// Request to revoke an API key.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeApiKeyRequest {
    /// ID of the API key to revoke. Required.
    #[prost(string, tag="1")]
    pub api_key_id: ::prost::alloc::string::String,
}
/// Response after revoking an API key.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeApiKeyResponse {
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Request to export all personal data associated with a user.
/// Auth: Requires JWT. Callable by the user themselves or an org admin.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ExportUserDataRequest {
    /// Internal user ID whose data is being exported.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response containing the export status and download location.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ExportUserDataResponse {
    /// Current status of the export request.
    #[prost(enumeration="PrivacyRequestStatus", tag="1")]
    pub status: i32,
    /// Pre-signed S3 URL to download the exported data (ZIP format).
    /// Only populated when status is COMPLETED.
    #[prost(string, tag="2")]
    pub result_url: ::prost::alloc::string::String,
    /// Unique identifier for this export request.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="3")]
    pub export_id: ::prost::alloc::string::String,
}
/// Request to delete or anonymize all personal data associated with a user.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteUserDataRequest {
    /// Internal user ID whose data is being deleted.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// When true, PII is replaced with placeholders instead of hard-deleted.
    /// This preserves audit trail integrity while removing personal data.
    #[prost(bool, tag="2")]
    pub anonymize: bool,
}
/// Response confirming the deletion request.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteUserDataResponse {
    /// Current status of the deletion request.
    #[prost(enumeration="PrivacyRequestStatus", tag="1")]
    pub status: i32,
    /// Timestamp when deletion was completed (or scheduled).
    /// Only populated when status is COMPLETED.
    #[prost(message, optional, tag="2")]
    pub deleted_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Unique identifier for this deletion request.
    #[prost(string, tag="3")]
    pub request_id: ::prost::alloc::string::String,
}
/// Request to list privacy requests for the organization.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListPrivacyRequestsRequest {
    /// Maximum number of results per page.
    /// Constraints: 1–100, default 25.
    #[prost(int32, tag="1")]
    pub page_size: i32,
    /// Continuation token from a previous response.
    #[prost(string, tag="2")]
    pub page_token: ::prost::alloc::string::String,
    /// Filter by request type (export, delete, rectify, restrict). Empty = all.
    #[prost(string, tag="3")]
    pub request_type: ::prost::alloc::string::String,
    /// Filter by status. UNSPECIFIED = all.
    #[prost(enumeration="PrivacyRequestStatus", tag="4")]
    pub status: i32,
}
/// Response containing privacy requests.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListPrivacyRequestsResponse {
    /// The privacy requests matching the filters.
    #[prost(message, repeated, tag="1")]
    pub requests: ::prost::alloc::vec::Vec<PrivacyRequest>,
    /// Token for the next page. Empty if no more results.
    #[prost(string, tag="2")]
    pub next_page_token: ::prost::alloc::string::String,
}
/// A privacy request record.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct PrivacyRequest {
    /// Unique identifier.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// The user this request applies to.
    #[prost(string, tag="2")]
    pub user_id: ::prost::alloc::string::String,
    /// Email of the target user.
    #[prost(string, tag="3")]
    pub user_email: ::prost::alloc::string::String,
    /// Type of request (export, delete, rectify, restrict).
    #[prost(string, tag="4")]
    pub request_type: ::prost::alloc::string::String,
    /// Current status.
    #[prost(enumeration="PrivacyRequestStatus", tag="5")]
    pub status: i32,
    /// Whether to anonymize (true) or hard-delete (false). Only for delete requests.
    #[prost(bool, tag="6")]
    pub anonymize: bool,
    /// Email of the admin who initiated this request.
    #[prost(string, tag="7")]
    pub requested_by_email: ::prost::alloc::string::String,
    /// When the request was created.
    #[prost(message, optional, tag="8")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// When the request was completed (if applicable).
    #[prost(message, optional, tag="9")]
    pub completed_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Additional metadata (JSON).
    #[prost(map="string, string", tag="10")]
    pub metadata: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// Request to cancel a pending deletion.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CancelDeletionRequest {
    /// The privacy request ID to cancel.
    #[prost(string, tag="1")]
    pub request_id: ::prost::alloc::string::String,
    /// Admin must type the target user's email to confirm.
    #[prost(string, tag="2")]
    pub confirmation_email: ::prost::alloc::string::String,
}
/// Response confirming the cancellation.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CancelDeletionResponse {
    /// Updated status (should be FAILED with reason cancelled).
    #[prost(enumeration="PrivacyRequestStatus", tag="1")]
    pub status: i32,
}
/// Request to skip the grace period and delete immediately.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ImmediateDeleteRequest {
    /// The privacy request ID to expedite.
    #[prost(string, tag="1")]
    pub request_id: ::prost::alloc::string::String,
    /// Admin must type the target user's email to confirm.
    #[prost(string, tag="2")]
    pub confirmation_email: ::prost::alloc::string::String,
}
/// Response confirming the immediate deletion was triggered.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ImmediateDeleteResponse {
    /// Updated status (should be PROCESSING).
    #[prost(enumeration="PrivacyRequestStatus", tag="1")]
    pub status: i32,
}
/// Request to correct personal data for a user.
/// Auth: Requires JWT. Callable by the user themselves or an org admin.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct RectifyUserDataRequest {
    /// Internal user ID whose data is being corrected.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// Map of field names to corrected values.
    /// Corrections are propagated to all stored locations.
    /// Constraints: Max 50 corrections per request.
    #[prost(map="string, string", tag="2")]
    pub corrections: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// Response listing which fields were successfully corrected.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RectifyUserDataResponse {
    /// Names of fields that were rectified.
    #[prost(string, repeated, tag="1")]
    pub rectified_fields: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Request to restrict or unrestrict processing for a user.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RestrictProcessingRequest {
    /// Internal user ID whose processing is being restricted.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// When true, processing is restricted. When false, restriction is lifted.
    #[prost(bool, tag="2")]
    pub restricted: bool,
}
/// Response confirming the processing restriction status.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RestrictProcessingResponse {
    /// Current restriction status.
    #[prost(bool, tag="1")]
    pub restricted: bool,
    /// Timestamp when the restriction was applied or removed.
    #[prost(message, optional, tag="2")]
    pub restricted_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to confirm whether personal data exists for a user.
/// LGPD-specific: confirmação de existência (Art. 18, I).
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetDataExistenceConfirmationRequest {
    /// Internal user ID to check.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response confirming data existence and listing data categories.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetDataExistenceConfirmationResponse {
    /// Whether any personal data exists for this user.
    #[prost(bool, tag="1")]
    pub exists: bool,
    /// Categories of data stored (e.g., "profile", "deliveries", "analytics").
    #[prost(string, repeated, tag="2")]
    pub data_categories: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Request to list the calling user's own privacy requests.
/// Auth: Requires JWT. No admin permission required — returns only the caller's requests.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListMyPrivacyRequestsRequest {
    /// Maximum number of results per page.
    /// Constraints: 1–100, default 25.
    #[prost(int32, tag="1")]
    pub page_size: i32,
    /// Continuation token from a previous response.
    #[prost(string, tag="2")]
    pub page_token: ::prost::alloc::string::String,
    /// Filter by request type (export, rectify). Empty = all.
    #[prost(string, tag="3")]
    pub request_type: ::prost::alloc::string::String,
    /// Filter by status. UNSPECIFIED = all.
    #[prost(enumeration="PrivacyRequestStatus", tag="4")]
    pub status: i32,
}
/// Response containing the calling user's privacy requests.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListMyPrivacyRequestsResponse {
    /// The privacy requests belonging to the calling user.
    #[prost(message, repeated, tag="1")]
    pub requests: ::prost::alloc::vec::Vec<PrivacyRequest>,
    /// Token for the next page. Empty if no more results.
    #[prost(string, tag="2")]
    pub next_page_token: ::prost::alloc::string::String,
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Status of a privacy request (export, delete, rectify, restrict).
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum PrivacyRequestStatus {
    /// Default value; should not be used explicitly.
    Unspecified = 0,
    /// Request has been created but not yet started.
    Pending = 1,
    /// Request is currently being processed.
    Processing = 2,
    /// Request completed successfully.
    Completed = 3,
    /// Request failed during processing.
    Failed = 4,
}
impl PrivacyRequestStatus {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "PRIVACY_REQUEST_STATUS_UNSPECIFIED",
            Self::Pending => "PRIVACY_REQUEST_STATUS_PENDING",
            Self::Processing => "PRIVACY_REQUEST_STATUS_PROCESSING",
            Self::Completed => "PRIVACY_REQUEST_STATUS_COMPLETED",
            Self::Failed => "PRIVACY_REQUEST_STATUS_FAILED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "PRIVACY_REQUEST_STATUS_UNSPECIFIED" => Some(Self::Unspecified),
            "PRIVACY_REQUEST_STATUS_PENDING" => Some(Self::Pending),
            "PRIVACY_REQUEST_STATUS_PROCESSING" => Some(Self::Processing),
            "PRIVACY_REQUEST_STATUS_COMPLETED" => Some(Self::Completed),
            "PRIVACY_REQUEST_STATUS_FAILED" => Some(Self::Failed),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// An immutable audit event capturing a significant platform action.
/// Audit events are append-only — they cannot be updated or deleted.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AuditEvent {
    /// Unique identifier for this audit event.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Organization in which the event occurred.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="2")]
    pub org_id: ::prost::alloc::string::String,
    /// User who performed the action. Empty for system-initiated events.
    /// Constraints: UUID format (36 characters) when present.
    #[prost(string, tag="3")]
    pub actor_id: ::prost::alloc::string::String,
    /// Type of action that was performed.
    #[prost(enumeration="AuditEventType", tag="4")]
    pub event_type: i32,
    /// Type of entity affected (e.g., "campaign", "user", "template").
    /// Constraints: Max length 50 characters.
    #[prost(string, tag="5")]
    pub entity_type: ::prost::alloc::string::String,
    /// Identifier of the entity affected.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="6")]
    pub entity_id: ::prost::alloc::string::String,
    /// Additional context about the event (e.g., old/new values for changes).
    /// Constraints: Max 20 key-value pairs, keys max 50 chars, values max 500 chars.
    #[prost(map="string, string", tag="7")]
    pub metadata: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
    /// Timestamp when the event was recorded.
    #[prost(message, optional, tag="10")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to list audit events with optional filters.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListAuditEventsRequest {
    /// Pagination token from a previous response.
    #[prost(string, tag="1")]
    pub page_token: ::prost::alloc::string::String,
    /// Maximum number of events to return.
    /// Constraints: Min 1, max 100. Default 50.
    #[prost(int32, tag="2")]
    pub page_size: i32,
    /// Optional filter: only return events of this type.
    #[prost(enumeration="AuditEventType", tag="3")]
    pub event_type: i32,
    /// Optional filter: only return events by this actor.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="4")]
    pub actor_id: ::prost::alloc::string::String,
    /// Optional filter: events after this timestamp (inclusive).
    #[prost(message, optional, tag="5")]
    pub start_time: ::core::option::Option<::prost_types::Timestamp>,
    /// Optional filter: events before this timestamp (exclusive).
    #[prost(message, optional, tag="6")]
    pub end_time: ::core::option::Option<::prost_types::Timestamp>,
}
/// Response containing a paginated list of audit events.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListAuditEventsResponse {
    /// Audit events matching the request filters.
    #[prost(message, repeated, tag="1")]
    pub events: ::prost::alloc::vec::Vec<AuditEvent>,
    /// Token for fetching the next page. Empty when no more events.
    #[prost(string, tag="2")]
    pub next_page_token: ::prost::alloc::string::String,
}
/// Request to export the audit trail to S3 in a specified format.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ExportAuditTrailRequest {
    /// Export format.
    #[prost(enumeration="AuditExportFormat", tag="1")]
    pub format: i32,
    /// Optional: export events after this timestamp.
    #[prost(message, optional, tag="2")]
    pub start_time: ::core::option::Option<::prost_types::Timestamp>,
    /// Optional: export events before this timestamp.
    #[prost(message, optional, tag="3")]
    pub end_time: ::core::option::Option<::prost_types::Timestamp>,
}
/// Response containing the export download URL.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ExportAuditTrailResponse {
    /// Pre-signed S3 URL to download the exported audit trail.
    /// Only populated when status is COMPLETED.
    #[prost(string, tag="1")]
    pub export_url: ::prost::alloc::string::String,
    /// Current status of the export request.
    #[prost(enumeration="PrivacyRequestStatus", tag="2")]
    pub status: i32,
}
/// A persistent record of an audit trail export request.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AuditExport {
    /// Unique identifier.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Export format (csv, json).
    #[prost(string, tag="2")]
    pub format: ::prost::alloc::string::String,
    /// Current status.
    #[prost(enumeration="PrivacyRequestStatus", tag="3")]
    pub status: i32,
    /// Pre-signed download URL. Only populated when status is COMPLETED.
    #[prost(string, tag="4")]
    pub result_url: ::prost::alloc::string::String,
    /// Error message if the export failed.
    #[prost(string, tag="5")]
    pub error_message: ::prost::alloc::string::String,
    /// Email of the admin who requested the export.
    #[prost(string, tag="6")]
    pub requested_by_email: ::prost::alloc::string::String,
    /// When the export was requested.
    #[prost(message, optional, tag="7")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// When the export completed (if applicable).
    #[prost(message, optional, tag="8")]
    pub completed_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to list audit export history.
/// Auth: Requires JWT. Admin only.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListAuditExportsRequest {
}
/// Response containing the list of audit exports.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListAuditExportsResponse {
    /// Audit export records, newest first.
    #[prost(message, repeated, tag="1")]
    pub exports: ::prost::alloc::vec::Vec<AuditExport>,
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Type of auditable platform action.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum AuditEventType {
    /// Default value; should not be used explicitly.
    Unspecified = 0,
    /// ── Campaign lifecycle ───────────────────────────────────────────────────
    /// A campaign was created.
    CampaignCreated = 1,
    /// A message was sent to a recipient.
    MessageSent = 2,
    /// A message was opened by a recipient.
    MessageOpened = 3,
    /// A recipient acknowledged a campaign.
    AckRegistered = 4,
    /// An escalation was triggered by the workflow.
    EscalationExecuted = 5,
    /// A campaign was started.
    CampaignStarted = 12,
    /// A campaign was cancelled.
    CampaignCancelled = 13,
    /// A campaign was updated.
    CampaignUpdated = 14,
    /// ── User lifecycle ───────────────────────────────────────────────────────
    /// A user was invited to the organization.
    UserInvited = 6,
    /// A user was deactivated.
    UserDeactivated = 7,
    /// A user was reactivated.
    UserReactivated = 15,
    /// A user's role was changed (assigned to a different role).
    RoleChanged = 10,
    /// A user's invite was revoked.
    InviteRevoked = 16,
    /// A user's profile was updated.
    ProfileUpdated = 17,
    /// A user's settings were updated.
    SettingsUpdated = 18,
    /// A user enrolled a passkey.
    PasskeyEnrolled = 19,
    /// ── GDPR / Privacy ──────────────────────────────────────────────────────
    /// A data export was requested (GDPR Art. 15).
    DataExportRequested = 8,
    /// A data deletion was requested (GDPR Art. 17).
    DataDeletionRequested = 9,
    /// User data was rectified (GDPR Art. 16).
    DataRectified = 20,
    /// Data processing was restricted (GDPR Art. 18).
    ProcessingRestricted = 21,
    /// A scheduled deletion was cancelled.
    DeletionCancelled = 22,
    /// An immediate deletion was executed.
    DeletionImmediate = 23,
    /// ── Organization / SSO ───────────────────────────────────────────────────
    /// An SSO provider was configured.
    SsoConfigured = 11,
    /// An SSO provider was created.
    SsoProviderCreated = 24,
    /// An SSO provider was deleted.
    SsoProviderDeleted = 25,
    /// Organization settings were updated.
    OrgUpdated = 26,
    /// ── Roles ────────────────────────────────────────────────────────────────
    /// A role was created.
    RoleCreated = 27,
    /// A role's name or permissions were updated.
    RoleUpdated = 28,
    /// A role was deleted.
    RoleDeleted = 29,
    /// ── Templates ────────────────────────────────────────────────────────────
    /// A template was created.
    TemplateCreated = 30,
    /// A template was updated.
    TemplateUpdated = 31,
    /// ── API Keys ─────────────────────────────────────────────────────────────
    /// An API key was created.
    ApiKeyCreated = 32,
    /// An API key was revoked.
    ApiKeyRevoked = 33,
    /// ── Invite Links ─────────────────────────────────────────────────────────
    /// An invite link was created.
    InviteLinkCreated = 34,
    /// An invite link was revoked.
    InviteLinkRevoked = 35,
    /// ── Groups ───────────────────────────────────────────────────────────────
    /// A group was created.
    GroupCreated = 36,
    /// A group was updated.
    GroupUpdated = 37,
    /// A group was deleted.
    GroupDeleted = 38,
    /// Members were added to a group.
    GroupMembersAdded = 39,
    /// Members were removed from a group.
    GroupMembersRemoved = 40,
    /// ── Teams ────────────────────────────────────────────────────────────────
    /// A team was created.
    TeamCreated = 41,
    /// A team was updated.
    TeamUpdated = 42,
    /// A team was deleted.
    TeamDeleted = 43,
    /// Members were added to a team.
    TeamMembersAdded = 44,
    /// Members were removed from a team.
    TeamMembersRemoved = 45,
}
impl AuditEventType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "AUDIT_EVENT_TYPE_UNSPECIFIED",
            Self::CampaignCreated => "AUDIT_EVENT_TYPE_CAMPAIGN_CREATED",
            Self::MessageSent => "AUDIT_EVENT_TYPE_MESSAGE_SENT",
            Self::MessageOpened => "AUDIT_EVENT_TYPE_MESSAGE_OPENED",
            Self::AckRegistered => "AUDIT_EVENT_TYPE_ACK_REGISTERED",
            Self::EscalationExecuted => "AUDIT_EVENT_TYPE_ESCALATION_EXECUTED",
            Self::CampaignStarted => "AUDIT_EVENT_TYPE_CAMPAIGN_STARTED",
            Self::CampaignCancelled => "AUDIT_EVENT_TYPE_CAMPAIGN_CANCELLED",
            Self::CampaignUpdated => "AUDIT_EVENT_TYPE_CAMPAIGN_UPDATED",
            Self::UserInvited => "AUDIT_EVENT_TYPE_USER_INVITED",
            Self::UserDeactivated => "AUDIT_EVENT_TYPE_USER_DEACTIVATED",
            Self::UserReactivated => "AUDIT_EVENT_TYPE_USER_REACTIVATED",
            Self::RoleChanged => "AUDIT_EVENT_TYPE_ROLE_CHANGED",
            Self::InviteRevoked => "AUDIT_EVENT_TYPE_INVITE_REVOKED",
            Self::ProfileUpdated => "AUDIT_EVENT_TYPE_PROFILE_UPDATED",
            Self::SettingsUpdated => "AUDIT_EVENT_TYPE_SETTINGS_UPDATED",
            Self::PasskeyEnrolled => "AUDIT_EVENT_TYPE_PASSKEY_ENROLLED",
            Self::DataExportRequested => "AUDIT_EVENT_TYPE_DATA_EXPORT_REQUESTED",
            Self::DataDeletionRequested => "AUDIT_EVENT_TYPE_DATA_DELETION_REQUESTED",
            Self::DataRectified => "AUDIT_EVENT_TYPE_DATA_RECTIFIED",
            Self::ProcessingRestricted => "AUDIT_EVENT_TYPE_PROCESSING_RESTRICTED",
            Self::DeletionCancelled => "AUDIT_EVENT_TYPE_DELETION_CANCELLED",
            Self::DeletionImmediate => "AUDIT_EVENT_TYPE_DELETION_IMMEDIATE",
            Self::SsoConfigured => "AUDIT_EVENT_TYPE_SSO_CONFIGURED",
            Self::SsoProviderCreated => "AUDIT_EVENT_TYPE_SSO_PROVIDER_CREATED",
            Self::SsoProviderDeleted => "AUDIT_EVENT_TYPE_SSO_PROVIDER_DELETED",
            Self::OrgUpdated => "AUDIT_EVENT_TYPE_ORG_UPDATED",
            Self::RoleCreated => "AUDIT_EVENT_TYPE_ROLE_CREATED",
            Self::RoleUpdated => "AUDIT_EVENT_TYPE_ROLE_UPDATED",
            Self::RoleDeleted => "AUDIT_EVENT_TYPE_ROLE_DELETED",
            Self::TemplateCreated => "AUDIT_EVENT_TYPE_TEMPLATE_CREATED",
            Self::TemplateUpdated => "AUDIT_EVENT_TYPE_TEMPLATE_UPDATED",
            Self::ApiKeyCreated => "AUDIT_EVENT_TYPE_API_KEY_CREATED",
            Self::ApiKeyRevoked => "AUDIT_EVENT_TYPE_API_KEY_REVOKED",
            Self::InviteLinkCreated => "AUDIT_EVENT_TYPE_INVITE_LINK_CREATED",
            Self::InviteLinkRevoked => "AUDIT_EVENT_TYPE_INVITE_LINK_REVOKED",
            Self::GroupCreated => "AUDIT_EVENT_TYPE_GROUP_CREATED",
            Self::GroupUpdated => "AUDIT_EVENT_TYPE_GROUP_UPDATED",
            Self::GroupDeleted => "AUDIT_EVENT_TYPE_GROUP_DELETED",
            Self::GroupMembersAdded => "AUDIT_EVENT_TYPE_GROUP_MEMBERS_ADDED",
            Self::GroupMembersRemoved => "AUDIT_EVENT_TYPE_GROUP_MEMBERS_REMOVED",
            Self::TeamCreated => "AUDIT_EVENT_TYPE_TEAM_CREATED",
            Self::TeamUpdated => "AUDIT_EVENT_TYPE_TEAM_UPDATED",
            Self::TeamDeleted => "AUDIT_EVENT_TYPE_TEAM_DELETED",
            Self::TeamMembersAdded => "AUDIT_EVENT_TYPE_TEAM_MEMBERS_ADDED",
            Self::TeamMembersRemoved => "AUDIT_EVENT_TYPE_TEAM_MEMBERS_REMOVED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "AUDIT_EVENT_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "AUDIT_EVENT_TYPE_CAMPAIGN_CREATED" => Some(Self::CampaignCreated),
            "AUDIT_EVENT_TYPE_MESSAGE_SENT" => Some(Self::MessageSent),
            "AUDIT_EVENT_TYPE_MESSAGE_OPENED" => Some(Self::MessageOpened),
            "AUDIT_EVENT_TYPE_ACK_REGISTERED" => Some(Self::AckRegistered),
            "AUDIT_EVENT_TYPE_ESCALATION_EXECUTED" => Some(Self::EscalationExecuted),
            "AUDIT_EVENT_TYPE_CAMPAIGN_STARTED" => Some(Self::CampaignStarted),
            "AUDIT_EVENT_TYPE_CAMPAIGN_CANCELLED" => Some(Self::CampaignCancelled),
            "AUDIT_EVENT_TYPE_CAMPAIGN_UPDATED" => Some(Self::CampaignUpdated),
            "AUDIT_EVENT_TYPE_USER_INVITED" => Some(Self::UserInvited),
            "AUDIT_EVENT_TYPE_USER_DEACTIVATED" => Some(Self::UserDeactivated),
            "AUDIT_EVENT_TYPE_USER_REACTIVATED" => Some(Self::UserReactivated),
            "AUDIT_EVENT_TYPE_ROLE_CHANGED" => Some(Self::RoleChanged),
            "AUDIT_EVENT_TYPE_INVITE_REVOKED" => Some(Self::InviteRevoked),
            "AUDIT_EVENT_TYPE_PROFILE_UPDATED" => Some(Self::ProfileUpdated),
            "AUDIT_EVENT_TYPE_SETTINGS_UPDATED" => Some(Self::SettingsUpdated),
            "AUDIT_EVENT_TYPE_PASSKEY_ENROLLED" => Some(Self::PasskeyEnrolled),
            "AUDIT_EVENT_TYPE_DATA_EXPORT_REQUESTED" => Some(Self::DataExportRequested),
            "AUDIT_EVENT_TYPE_DATA_DELETION_REQUESTED" => Some(Self::DataDeletionRequested),
            "AUDIT_EVENT_TYPE_DATA_RECTIFIED" => Some(Self::DataRectified),
            "AUDIT_EVENT_TYPE_PROCESSING_RESTRICTED" => Some(Self::ProcessingRestricted),
            "AUDIT_EVENT_TYPE_DELETION_CANCELLED" => Some(Self::DeletionCancelled),
            "AUDIT_EVENT_TYPE_DELETION_IMMEDIATE" => Some(Self::DeletionImmediate),
            "AUDIT_EVENT_TYPE_SSO_CONFIGURED" => Some(Self::SsoConfigured),
            "AUDIT_EVENT_TYPE_SSO_PROVIDER_CREATED" => Some(Self::SsoProviderCreated),
            "AUDIT_EVENT_TYPE_SSO_PROVIDER_DELETED" => Some(Self::SsoProviderDeleted),
            "AUDIT_EVENT_TYPE_ORG_UPDATED" => Some(Self::OrgUpdated),
            "AUDIT_EVENT_TYPE_ROLE_CREATED" => Some(Self::RoleCreated),
            "AUDIT_EVENT_TYPE_ROLE_UPDATED" => Some(Self::RoleUpdated),
            "AUDIT_EVENT_TYPE_ROLE_DELETED" => Some(Self::RoleDeleted),
            "AUDIT_EVENT_TYPE_TEMPLATE_CREATED" => Some(Self::TemplateCreated),
            "AUDIT_EVENT_TYPE_TEMPLATE_UPDATED" => Some(Self::TemplateUpdated),
            "AUDIT_EVENT_TYPE_API_KEY_CREATED" => Some(Self::ApiKeyCreated),
            "AUDIT_EVENT_TYPE_API_KEY_REVOKED" => Some(Self::ApiKeyRevoked),
            "AUDIT_EVENT_TYPE_INVITE_LINK_CREATED" => Some(Self::InviteLinkCreated),
            "AUDIT_EVENT_TYPE_INVITE_LINK_REVOKED" => Some(Self::InviteLinkRevoked),
            "AUDIT_EVENT_TYPE_GROUP_CREATED" => Some(Self::GroupCreated),
            "AUDIT_EVENT_TYPE_GROUP_UPDATED" => Some(Self::GroupUpdated),
            "AUDIT_EVENT_TYPE_GROUP_DELETED" => Some(Self::GroupDeleted),
            "AUDIT_EVENT_TYPE_GROUP_MEMBERS_ADDED" => Some(Self::GroupMembersAdded),
            "AUDIT_EVENT_TYPE_GROUP_MEMBERS_REMOVED" => Some(Self::GroupMembersRemoved),
            "AUDIT_EVENT_TYPE_TEAM_CREATED" => Some(Self::TeamCreated),
            "AUDIT_EVENT_TYPE_TEAM_UPDATED" => Some(Self::TeamUpdated),
            "AUDIT_EVENT_TYPE_TEAM_DELETED" => Some(Self::TeamDeleted),
            "AUDIT_EVENT_TYPE_TEAM_MEMBERS_ADDED" => Some(Self::TeamMembersAdded),
            "AUDIT_EVENT_TYPE_TEAM_MEMBERS_REMOVED" => Some(Self::TeamMembersRemoved),
            _ => None,
        }
    }
}
/// Format for audit trail export.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum AuditExportFormat {
    /// Default value; should not be used explicitly.
    Unspecified = 0,
    /// Comma-separated values.
    Csv = 1,
    /// JSON lines format.
    Json = 2,
    /// Apache Parquet columnar format.
    Parquet = 3,
}
impl AuditExportFormat {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "AUDIT_EXPORT_FORMAT_UNSPECIFIED",
            Self::Csv => "AUDIT_EXPORT_FORMAT_CSV",
            Self::Json => "AUDIT_EXPORT_FORMAT_JSON",
            Self::Parquet => "AUDIT_EXPORT_FORMAT_PARQUET",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "AUDIT_EXPORT_FORMAT_UNSPECIFIED" => Some(Self::Unspecified),
            "AUDIT_EXPORT_FORMAT_CSV" => Some(Self::Csv),
            "AUDIT_EXPORT_FORMAT_JSON" => Some(Self::Json),
            "AUDIT_EXPORT_FORMAT_PARQUET" => Some(Self::Parquet),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A campaign that delivers structured messages to a set of recipients
/// and tracks their engagement through a workflow.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Campaign {
    /// Unique identifier for the campaign.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Human-readable campaign name.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// ID of the template used to render messages.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="3")]
    pub template_id: ::prost::alloc::string::String,
    /// Pinned version of the template used for this campaign.
    #[prost(int32, tag="4")]
    pub template_version: i32,
    /// Object storage reference to the audience snapshot taken at campaign creation.
    #[prost(string, tag="5")]
    pub audience_snapshot_ref: ::prost::alloc::string::String,
    /// Current lifecycle status of the campaign.
    #[prost(enumeration="CampaignStatus", tag="6")]
    pub status: i32,
    /// Workflow DAG that drives the campaign's automation logic.
    #[prost(message, optional, tag="7")]
    pub workflow: ::core::option::Option<WorkflowDefinition>,
    /// Total number of recipients in the audience snapshot.
    #[prost(int32, tag="8")]
    pub total_recipients: i32,
    /// Number of recipients who completed the required action.
    #[prost(int32, tag="9")]
    pub action_completed_count: i32,
    /// Number of recipients who did not act before the deadline.
    #[prost(int32, tag="10")]
    pub missed_count: i32,
    /// Timestamp when the campaign was created.
    #[prost(message, optional, tag="11")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the campaign was started (workflow execution began).
    #[prost(message, optional, tag="12")]
    pub started_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the campaign finished (completed, failed, or cancelled).
    #[prost(message, optional, tag="13")]
    pub completed_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Display name of the sender shown to recipients (e.g. "HR Team").
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="14")]
    pub sender_name: ::prost::alloc::string::String,
    /// Optional user-facing title override. If set, takes precedence over the template title.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="15")]
    pub title: ::prost::alloc::string::String,
    /// Whether this campaign's notifications break through Do Not Disturb / Focus mode.
    #[prost(bool, tag="16")]
    pub critical: bool,
}
/// A single audience member with optional per-user template variables.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct AudienceMember {
    /// User ID (UUID).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// Template variable values for this user (e.g. {"name": "Alice"}).
    #[prost(map="string, string", tag="2")]
    pub variables: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// Request to create a new campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateCampaignRequest {
    /// Human-readable campaign name (admin-facing label).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// ID of the template to use for rendering messages.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="2")]
    pub template_id: ::prost::alloc::string::String,
    /// Version of the template to pin for this campaign.
    #[prost(int32, tag="3")]
    pub template_version: i32,
    /// List of user IDs that form the campaign audience.
    /// Constraints: Max 100000 items.
    #[prost(string, repeated, tag="4")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
    /// Workflow DAG defining the campaign's automation steps.
    #[prost(message, optional, tag="5")]
    pub workflow: ::core::option::Option<WorkflowDefinition>,
    /// Display name of the sender shown to recipients (e.g. "HR Team").
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="6")]
    pub sender_name: ::prost::alloc::string::String,
    /// Optional user-facing title override. If empty, the template title is used.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="7")]
    pub title: ::prost::alloc::string::String,
    /// Rich audience with per-user template variables.
    /// When set, takes precedence over user_ids.
    /// Constraints: Max 100000 items.
    #[prost(message, repeated, tag="8")]
    pub audience: ::prost::alloc::vec::Vec<AudienceMember>,
    /// Whether to include users with processing_restricted=true in the audience.
    /// Default false: restricted users are excluded. Set true only with Art. 18(2) legal basis.
    #[prost(bool, tag="9")]
    pub include_restricted: bool,
    /// Whether this campaign's notifications break through Do Not Disturb / Focus mode.
    #[prost(bool, tag="10")]
    pub critical: bool,
}
/// Response after creating a campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateCampaignResponse {
    /// The newly created campaign.
    #[prost(message, optional, tag="1")]
    pub campaign: ::core::option::Option<Campaign>,
}
/// Request to start a campaign's workflow execution.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct StartCampaignRequest {
    /// ID of the campaign to start.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
}
/// Response after starting a campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct StartCampaignResponse {
    /// The campaign with updated status.
    #[prost(message, optional, tag="1")]
    pub campaign: ::core::option::Option<Campaign>,
}
/// Request to retrieve a single campaign by ID.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetCampaignRequest {
    /// ID of the campaign to retrieve.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
}
/// Response containing the requested campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetCampaignResponse {
    /// The requested campaign.
    #[prost(message, optional, tag="1")]
    pub campaign: ::core::option::Option<Campaign>,
}
/// Request to list campaigns with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListCampaignsRequest {
    /// Pagination parameters.
    #[prost(message, optional, tag="1")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of campaigns.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListCampaignsResponse {
    /// List of campaigns in this page.
    #[prost(message, repeated, tag="1")]
    pub campaigns: ::prost::alloc::vec::Vec<Campaign>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// Request to cancel a running campaign.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CancelCampaignRequest {
    /// ID of the campaign to cancel.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
}
/// Response after cancelling a campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CancelCampaignResponse {
    /// The campaign with updated status (CANCELLED).
    #[prost(message, optional, tag="1")]
    pub campaign: ::core::option::Option<Campaign>,
}
/// Request to update a draft campaign (status must be CREATED).
/// Only non-empty/non-zero fields are updated; omitted fields remain unchanged.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateCampaignRequest {
    /// ID of the campaign to update.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Updated campaign name. Empty string means no change.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Updated sender display name. Empty string means no change.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="3")]
    pub sender_name: ::prost::alloc::string::String,
    /// Updated title override. Empty string means no change.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="4")]
    pub title: ::prost::alloc::string::String,
    /// Updated template ID. Empty string means no change.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="5")]
    pub template_id: ::prost::alloc::string::String,
    /// Updated template version. Zero means no change.
    #[prost(int32, tag="6")]
    pub template_version: i32,
    /// Updated workflow DAG. Null/omitted means no change.
    #[prost(message, optional, tag="7")]
    pub workflow: ::core::option::Option<WorkflowDefinition>,
}
/// Response after updating a campaign.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateCampaignResponse {
    /// The campaign with updated fields.
    #[prost(message, optional, tag="1")]
    pub campaign: ::core::option::Option<Campaign>,
}
/// A single delivery record tracking message delivery to one recipient.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Delivery {
    /// Unique identifier for this delivery.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// ID of the recipient user.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="2")]
    pub user_id: ::prost::alloc::string::String,
    /// ID of the campaign this delivery belongs to.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="3")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Current delivery status.
    #[prost(enumeration="DeliveryStatus", tag="4")]
    pub status: i32,
    /// Timestamp when the message was delivered to the device.
    #[prost(message, optional, tag="5")]
    pub delivered_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the recipient read the message.
    #[prost(message, optional, tag="6")]
    pub read_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the recipient performed the required action.
    #[prost(message, optional, tag="7")]
    pub acted_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Email address of the recipient, populated from the users table on read.
    #[prost(string, tag="8")]
    pub recipient_email: ::prost::alloc::string::String,
}
/// Request to list deliveries for a campaign with optional status filtering.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListDeliveriesRequest {
    /// ID of the campaign to list deliveries for.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Optional filter by delivery status. UNSPECIFIED returns all.
    #[prost(enumeration="DeliveryStatus", tag="2")]
    pub status_filter: i32,
    /// Pagination parameters.
    #[prost(message, optional, tag="3")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of delivery records.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListDeliveriesResponse {
    /// List of deliveries in this page.
    #[prost(message, repeated, tag="1")]
    pub deliveries: ::prost::alloc::vec::Vec<Delivery>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A registered device that can receive push notifications.
/// INTERNAL: This message is for server-side use only. Use DeviceSummary for API responses.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Device {
    /// Unique identifier for this device.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub device_id: ::prost::alloc::string::String,
    /// ID of the user who owns this device.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="2")]
    pub user_id: ::prost::alloc::string::String,
    /// Mobile platform (iOS or Android).
    #[prost(enumeration="Platform", tag="3")]
    pub platform: i32,
    /// Push token used to send notifications to this device.
    #[prost(string, tag="4")]
    pub push_token: ::prost::alloc::string::String,
    /// Whether the device is currently active and eligible for push delivery.
    #[prost(bool, tag="5")]
    pub active: bool,
    /// Timestamp of the last activity from this device.
    #[prost(message, optional, tag="6")]
    pub last_seen: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the device was first registered.
    #[prost(message, optional, tag="7")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// A device summary safe for API responses — excludes sensitive push_token.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeviceSummary {
    /// Unique identifier for this device.
    #[prost(string, tag="1")]
    pub device_id: ::prost::alloc::string::String,
    /// ID of the user who owns this device.
    #[prost(string, tag="2")]
    pub user_id: ::prost::alloc::string::String,
    /// Mobile platform (iOS or Android).
    #[prost(enumeration="Platform", tag="3")]
    pub platform: i32,
    /// Whether the device is currently active and eligible for push delivery.
    #[prost(bool, tag="4")]
    pub active: bool,
    /// Timestamp of the last activity from this device.
    #[prost(message, optional, tag="5")]
    pub last_seen: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the device was first registered.
    #[prost(message, optional, tag="6")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to register a device for push notifications.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RegisterRequest {
    /// Client-generated unique device identifier.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub device_id: ::prost::alloc::string::String,
    /// Mobile platform of the device.
    #[prost(enumeration="Platform", tag="2")]
    pub platform: i32,
    /// Push token obtained from the push notification provider on the client.
    /// Constraints: Max length 4096 characters.
    #[prost(string, tag="3")]
    pub push_token: ::prost::alloc::string::String,
}
/// Response after registering a device.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RegisterResponse {
    /// The registered device summary (excludes push_token).
    #[prost(message, optional, tag="1")]
    pub device: ::core::option::Option<DeviceSummary>,
}
/// Request to deactivate a device, stopping push notifications.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeactivateRequest {
    /// ID of the device to deactivate.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub device_id: ::prost::alloc::string::String,
}
/// Response after deactivating a device.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeactivateResponse {
    /// Whether the device was successfully deactivated.
    #[prost(bool, tag="1")]
    pub success: bool,
}
/// Request to list all devices for the authenticated user.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListDevicesRequest {
}
/// Response containing all devices for the user.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListDevicesResponse {
    /// List of devices registered to the authenticated user.
    #[prost(message, repeated, tag="1")]
    pub devices: ::prost::alloc::vec::Vec<DeviceSummary>,
}
/// Request to list devices for a specific member (admin use).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListMemberDevicesRequest {
    /// ID of the user whose devices to list.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response containing all devices for the specified member.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListMemberDevicesResponse {
    /// List of devices registered to the specified user.
    #[prost(message, repeated, tag="1")]
    pub devices: ::prost::alloc::vec::Vec<DeviceSummary>,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// User-configurable platform settings that apply across all clients.
/// All fields use their UNSPECIFIED/zero value to mean "no change" in updates.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UserSettings {
    /// Preferred color scheme for the UI.
    #[prost(enumeration="ThemePreference", tag="1")]
    pub theme_preference: i32,
    /// User's preferred language for the UI and push notifications.
    /// Empty string means "use organization default" or "auto-detect".
    /// Valid values: en, es, pt-BR, zh, ja.
    #[prost(string, tag="2")]
    pub preferred_locale: ::prost::alloc::string::String,
}
/// Structured profile attributes for a user within an organization.
/// Populated through admin invitation, mobile onboarding, or SSO attribute sync.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UserProfile {
    /// User's given name.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub first_name: ::prost::alloc::string::String,
    /// User's family name.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub last_name: ::prost::alloc::string::String,
    /// Department or team within the organization.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="3")]
    pub department: ::prost::alloc::string::String,
    /// Job title.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="4")]
    pub title: ::prost::alloc::string::String,
    /// Phone number.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="5")]
    pub phone: ::prost::alloc::string::String,
    /// Office or geographic location.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="6")]
    pub location: ::prost::alloc::string::String,
    /// Organization-specific employee identifier.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="7")]
    pub employee_id: ::prost::alloc::string::String,
    /// Display name of the user's direct manager.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="8")]
    pub manager_name: ::prost::alloc::string::String,
    /// Employment start date in ISO 8601 format (YYYY-MM-DD).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="9")]
    pub start_date: ::prost::alloc::string::String,
    /// Organization-defined custom attributes for fields not covered by the fixed schema.
    /// Constraints: Max 50 entries. Key max length 100 characters, value max length 1000 characters.
    #[prost(map="string, string", tag="10")]
    pub custom_attributes: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// A user within an organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct User {
    /// Unique identifier for the user (internal platform UUID, not identity provider subject ID).
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// User's email address.
    /// Constraints: Max length 254 characters (RFC 5321).
    #[prost(string, tag="2")]
    pub email: ::prost::alloc::string::String,
    /// User's display name.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="3")]
    pub name: ::prost::alloc::string::String,
    /// Current account status.
    #[prost(enumeration="UserStatus", tag="5")]
    pub status: i32,
    /// Timestamp when the user was created.
    #[prost(message, optional, tag="6")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// The user's role with its permission set.
    #[prost(message, optional, tag="7")]
    pub role: ::core::option::Option<Role>,
    /// ID of the user's role (for assignment operations).
    #[prost(string, tag="8")]
    pub role_id: ::prost::alloc::string::String,
    /// Structured profile attributes (department, title, etc.).
    /// May be empty if the user has not completed their profile.
    #[prost(message, optional, tag="9")]
    pub profile: ::core::option::Option<UserProfile>,
    /// Whether data processing is restricted for this user (GDPR Art. 18).
    /// When true, the user is excluded from campaign audiences by default.
    #[prost(bool, tag="10")]
    pub processing_restricted: bool,
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Lifecycle status of a user account.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum UserStatus {
    /// Default value; not a valid status.
    Unspecified = 0,
    /// User has been invited but has not completed onboarding.
    Invited = 1,
    /// User is active and can receive messages.
    Active = 2,
    /// User has been deactivated and will not receive messages.
    Deactivated = 3,
}
impl UserStatus {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "USER_STATUS_UNSPECIFIED",
            Self::Invited => "USER_STATUS_INVITED",
            Self::Active => "USER_STATUS_ACTIVE",
            Self::Deactivated => "USER_STATUS_DEACTIVATED",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "USER_STATUS_UNSPECIFIED" => Some(Self::Unspecified),
            "USER_STATUS_INVITED" => Some(Self::Invited),
            "USER_STATUS_ACTIVE" => Some(Self::Active),
            "USER_STATUS_DEACTIVATED" => Some(Self::Deactivated),
            _ => None,
        }
    }
}
/// User's preferred color scheme.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum ThemePreference {
    /// Default value; treated as SYSTEM when reading, "no change" when updating.
    Unspecified = 0,
    /// Always use light mode regardless of system setting.
    Light = 1,
    /// Always use dark mode regardless of system setting.
    Dark = 2,
    /// Follow the operating system or browser preference.
    System = 3,
}
impl ThemePreference {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "THEME_PREFERENCE_UNSPECIFIED",
            Self::Light => "THEME_PREFERENCE_LIGHT",
            Self::Dark => "THEME_PREFERENCE_DARK",
            Self::System => "THEME_PREFERENCE_SYSTEM",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "THEME_PREFERENCE_UNSPECIFIED" => Some(Self::Unspecified),
            "THEME_PREFERENCE_LIGHT" => Some(Self::Light),
            "THEME_PREFERENCE_DARK" => Some(Self::Dark),
            "THEME_PREFERENCE_SYSTEM" => Some(Self::System),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A named collection of users within an organization, used for campaign
/// audience targeting (recipient groups).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Group {
    /// Unique identifier for the group.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Human-readable display name (unique within the organization).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Optional description of the group's purpose.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="3")]
    pub description: ::prost::alloc::string::String,
    /// Number of users currently in the group.
    #[prost(int32, tag="4")]
    pub member_count: i32,
    /// Timestamp when the group was created.
    #[prost(message, optional, tag="5")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the group was last updated.
    #[prost(message, optional, tag="6")]
    pub updated_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Whether this is the organization's default group (cannot be deleted or renamed).
    #[prost(bool, tag="7")]
    pub is_default: bool,
    /// ID of the user who created this group. Empty for system-seeded defaults.
    #[prost(string, tag="8")]
    pub created_by: ::prost::alloc::string::String,
}
/// Request to create a new group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateGroupRequest {
    /// Display name for the group. Required.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Optional description.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="2")]
    pub description: ::prost::alloc::string::String,
}
/// Response after creating a group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateGroupResponse {
    /// The newly created group.
    #[prost(message, optional, tag="1")]
    pub group: ::core::option::Option<Group>,
}
/// Request to retrieve a group by ID.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetGroupRequest {
    /// ID of the group to retrieve. Required.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
}
/// Response containing the requested group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetGroupResponse {
    /// The requested group.
    #[prost(message, optional, tag="1")]
    pub group: ::core::option::Option<Group>,
}
/// Request to list groups in the organization with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListGroupsRequest {
    /// Pagination parameters.
    #[prost(message, optional, tag="1")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of groups.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListGroupsResponse {
    /// Groups in this page.
    #[prost(message, repeated, tag="1")]
    pub groups: ::prost::alloc::vec::Vec<Group>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// Request to update a group's name and/or description.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateGroupRequest {
    /// ID of the group to update. Required.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
    /// New display name. If empty, the name is not changed.
    /// Default groups cannot be renamed.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// New description. If empty, the description is not changed.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="3")]
    pub description: ::prost::alloc::string::String,
}
/// Response after updating a group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateGroupResponse {
    /// The updated group.
    #[prost(message, optional, tag="1")]
    pub group: ::core::option::Option<Group>,
}
/// Request to delete a group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteGroupRequest {
    /// ID of the group to delete. Required.
    /// Default groups cannot be deleted.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
}
/// Response after deleting a group.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteGroupResponse {
}
/// Request to add users to a group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AddGroupMembersRequest {
    /// ID of the group to add members to. Required.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
    /// IDs of users to add. Must belong to the same organization.
    /// Adding an existing member is a no-op (idempotent).
    /// Constraints: Max 100 user IDs per request.
    #[prost(string, repeated, tag="2")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Response after adding group members.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AddGroupMembersResponse {
    /// The group with updated member_count.
    #[prost(message, optional, tag="1")]
    pub group: ::core::option::Option<Group>,
}
/// Request to remove users from a group.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RemoveGroupMembersRequest {
    /// ID of the group to remove members from. Required.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
    /// IDs of users to remove. Removing a non-member is a no-op (idempotent).
    /// Constraints: Max 100 user IDs per request.
    #[prost(string, repeated, tag="2")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Response after removing group members.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RemoveGroupMembersResponse {
    /// The group with updated member_count.
    #[prost(message, optional, tag="1")]
    pub group: ::core::option::Option<Group>,
}
/// Request to list members of a group with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListGroupMembersRequest {
    /// ID of the group whose members to list. Required.
    #[prost(string, tag="1")]
    pub group_id: ::prost::alloc::string::String,
    /// Pagination parameters.
    #[prost(message, optional, tag="2")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of group members.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListGroupMembersResponse {
    /// Users in this page.
    #[prost(message, repeated, tag="1")]
    pub users: ::prost::alloc::vec::Vec<User>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// A group membership entry for batch lookups.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UserGroupMembership {
    /// ID of the user.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// Groups the user belongs to.
    #[prost(message, repeated, tag="2")]
    pub groups: ::prost::alloc::vec::Vec<Group>,
}
/// Request to get group memberships for a batch of users.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetUserGroupMembershipsRequest {
    /// IDs of users to look up. Required.
    /// Constraints: Max 200 user IDs per request.
    #[prost(string, repeated, tag="1")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Response containing group memberships for the requested users.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetUserGroupMembershipsResponse {
    /// Group memberships per user. Only users with at least one group are included.
    #[prost(message, repeated, tag="1")]
    pub memberships: ::prost::alloc::vec::Vec<UserGroupMembership>,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A single touch event captured from the mobile app.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct TouchEvent {
    /// Screen name from React Navigation route.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub screen_name: ::prost::alloc::string::String,
    /// Horizontal coordinate as a percentage of screen width (0.0–1.0).
    /// Constraints: Range 0.0 to 1.0 inclusive.
    #[prost(float, tag="2")]
    pub x_pct: f32,
    /// Vertical coordinate as a percentage of screen height (0.0–1.0).
    /// Constraints: Range 0.0 to 1.0 inclusive.
    #[prost(float, tag="3")]
    pub y_pct: f32,
    /// Type of touch event.
    #[prost(enumeration="TouchEventType", tag="4")]
    pub event_type: i32,
    /// Screen width in device pixels at the time of capture.
    #[prost(int32, tag="5")]
    pub screen_width: i32,
    /// Screen height in device pixels at the time of capture.
    #[prost(int32, tag="6")]
    pub screen_height: i32,
    /// Client-side timestamp when the touch occurred.
    #[prost(message, optional, tag="7")]
    pub client_timestamp: ::core::option::Option<::prost_types::Timestamp>,
    /// Campaign ID if the touch occurred during a campaign message view.
    /// Empty string for organic (non-campaign) navigation.
    #[prost(string, tag="8")]
    pub campaign_id: ::prost::alloc::string::String,
}
/// Request to ingest a batch of touch events from the mobile app.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct IngestTouchEventsRequest {
    /// Batch of touch events to ingest.
    /// Constraints: Max 100 events per batch.
    #[prost(message, repeated, tag="1")]
    pub events: ::prost::alloc::vec::Vec<TouchEvent>,
}
/// Response after ingesting touch events.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct IngestTouchEventsResponse {
    /// Number of events successfully ingested.
    #[prost(int32, tag="1")]
    pub ingested_count: i32,
}
/// A single aggregated data point in a heatmap grid cell.
#[derive(Clone, Copy, PartialEq, ::prost::Message)]
pub struct HeatmapDataPoint {
    /// Grid cell horizontal center as a percentage (0.0–1.0).
    #[prost(float, tag="1")]
    pub x_pct: f32,
    /// Grid cell vertical center as a percentage (0.0–1.0).
    #[prost(float, tag="2")]
    pub y_pct: f32,
    /// Aggregated value for this cell (count, median, or z-score depending on mode).
    #[prost(float, tag="3")]
    pub value: f32,
}
/// Request to query aggregated heatmap data for a screen.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct QueryHeatmapDataRequest {
    /// Screen name to query.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub screen_name: ::prost::alloc::string::String,
    /// Start of the time range filter (inclusive).
    #[prost(message, optional, tag="2")]
    pub date_from: ::core::option::Option<::prost_types::Timestamp>,
    /// End of the time range filter (inclusive).
    #[prost(message, optional, tag="3")]
    pub date_to: ::core::option::Option<::prost_types::Timestamp>,
    /// Optional: filter by campaign ID.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="4")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Grid resolution for coordinate rounding. Default: 0.02 (50×50 grid).
    /// Constraints: Range 0.005 to 0.1.
    #[prost(float, tag="6")]
    pub grid_resolution: f32,
    /// Aggregation mode (TOTAL or MEDIAN).
    #[prost(enumeration="HeatmapMode", tag="7")]
    pub mode: i32,
    /// Optional: filter by event types. Empty list means all types.
    #[prost(enumeration="TouchEventType", repeated, tag="8")]
    pub event_types: ::prost::alloc::vec::Vec<i32>,
}
/// Response containing aggregated heatmap data.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct QueryHeatmapDataResponse {
    /// Aggregated data points for heatmap rendering.
    #[prost(message, repeated, tag="1")]
    pub data_points: ::prost::alloc::vec::Vec<HeatmapDataPoint>,
    /// URL to a mobile-captured screenshot for this screen, if available.
    /// Empty string when no screenshot exists.
    #[prost(string, tag="3")]
    pub screenshot_url: ::prost::alloc::string::String,
    /// Whether per-cohort bucket breakdowns are available (k >= 5).
    #[prost(bool, tag="4")]
    pub cohort_enabled: bool,
}
/// Request to upload a screenshot captured from the mobile app.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UploadScreenshotRequest {
    /// Screen name matching React Navigation route (e.g. "MessageDetail::<campaign_uuid>").
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub screen_name: ::prost::alloc::string::String,
    /// App version that captured the screenshot (e.g. "1.15.0").
    #[prost(string, tag="2")]
    pub app_version: ::prost::alloc::string::String,
    /// PNG image data.
    /// Constraints: Max 512KB.
    #[prost(bytes="vec", tag="3")]
    pub image_data: ::prost::alloc::vec::Vec<u8>,
}
/// Response after uploading a screenshot.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UploadScreenshotResponse {
    /// S3 URL where the screenshot was stored.
    #[prost(string, tag="1")]
    pub url: ::prost::alloc::string::String,
}
/// A screen screenshot stored as a static asset.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ScreenScreenshot {
    /// Screen name matching React Navigation route.
    #[prost(string, tag="1")]
    pub screen_name: ::prost::alloc::string::String,
    /// S3 URL to the screenshot image.
    #[prost(string, tag="2")]
    pub url: ::prost::alloc::string::String,
    /// App version this screenshot corresponds to.
    #[prost(string, tag="3")]
    pub app_version: ::prost::alloc::string::String,
}
/// Request to list available screen screenshots.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListScreenshotsRequest {
}
/// Response containing available screen screenshots.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListScreenshotsResponse {
    /// Available screen screenshots with their URLs and versions.
    #[prost(message, repeated, tag="1")]
    pub screenshots: ::prost::alloc::vec::Vec<ScreenScreenshot>,
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Type of touch event captured on the mobile app.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum TouchEventType {
    /// Default value; not a valid event type.
    Unspecified = 0,
    /// A single tap on the screen.
    Tap = 1,
    /// A long press (held for 500ms+).
    LongPress = 2,
    /// A periodic scroll position sample (viewport midpoint every 2s).
    Scroll = 3,
    /// The user tapped an action button (e.g. "Acknowledge").
    ActionClick = 4,
}
impl TouchEventType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "TOUCH_EVENT_TYPE_UNSPECIFIED",
            Self::Tap => "TOUCH_EVENT_TYPE_TAP",
            Self::LongPress => "TOUCH_EVENT_TYPE_LONG_PRESS",
            Self::Scroll => "TOUCH_EVENT_TYPE_SCROLL",
            Self::ActionClick => "TOUCH_EVENT_TYPE_ACTION_CLICK",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "TOUCH_EVENT_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "TOUCH_EVENT_TYPE_TAP" => Some(Self::Tap),
            "TOUCH_EVENT_TYPE_LONG_PRESS" => Some(Self::LongPress),
            "TOUCH_EVENT_TYPE_SCROLL" => Some(Self::Scroll),
            "TOUCH_EVENT_TYPE_ACTION_CLICK" => Some(Self::ActionClick),
            _ => None,
        }
    }
}
/// Aggregation mode for heatmap data queries.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum HeatmapMode {
    /// Default value; not a valid mode.
    Unspecified = 0,
    /// Sum of all cohort buckets' touches per grid cell (default).
    Total = 1,
    /// Median touch count per grid cell across cohort buckets.
    Median = 2,
}
impl HeatmapMode {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "HEATMAP_MODE_UNSPECIFIED",
            Self::Total => "HEATMAP_MODE_TOTAL",
            Self::Median => "HEATMAP_MODE_MEDIAN",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "HEATMAP_MODE_UNSPECIFIED" => Some(Self::Unspecified),
            "HEATMAP_MODE_TOTAL" => Some(Self::Total),
            "HEATMAP_MODE_MEDIAN" => Some(Self::Median),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A single entry in a user's inbox, combining a message with its delivery state.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct InboxEntry {
    /// ID of the delivery record for this inbox entry.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub delivery_id: ::prost::alloc::string::String,
    /// The fully rendered message content.
    #[prost(message, optional, tag="2")]
    pub message: ::core::option::Option<Message>,
    /// Current delivery status (e.g. DELIVERED, ACKNOWLEDGED).
    #[prost(enumeration="DeliveryStatus", tag="3")]
    pub status: i32,
    /// Whether the user has read this message.
    #[prost(bool, tag="4")]
    pub read: bool,
    /// Timestamp when the message was received in the inbox.
    #[prost(message, optional, tag="5")]
    pub received_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to sync inbox entries since a given timestamp.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SyncRequest {
    /// Fetch entries newer than this timestamp. Omit for initial sync.
    #[prost(message, optional, tag="1")]
    pub since: ::core::option::Option<::prost_types::Timestamp>,
    /// Maximum number of entries to return.
    /// Constraints: Valid range 1 to 200.
    #[prost(int32, tag="2")]
    pub limit: i32,
}
/// Response containing synced inbox entries.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct SyncResponse {
    /// Inbox entries newer than the requested timestamp.
    #[prost(message, repeated, tag="1")]
    pub entries: ::prost::alloc::vec::Vec<InboxEntry>,
    /// Cursor timestamp to use for the next sync call.
    #[prost(message, optional, tag="2")]
    pub next_since: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to mark a message as read.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct MarkReadRequest {
    /// ID of the delivery to mark as read.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub delivery_id: ::prost::alloc::string::String,
}
/// Response after marking a message as read.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct MarkReadResponse {
    /// Whether the read status was successfully updated.
    #[prost(bool, tag="1")]
    pub success: bool,
}
/// Request to retrieve a single message by delivery ID.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetMessageRequest {
    /// ID of the delivery to retrieve.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub delivery_id: ::prost::alloc::string::String,
}
/// Response containing the requested inbox entry.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetMessageResponse {
    /// The inbox entry for the requested delivery.
    #[prost(message, optional, tag="1")]
    pub entry: ::core::option::Option<InboxEntry>,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A shareable invite link that allows users to self-join an organization.
/// Links carry a role assignment and optional usage/expiry constraints.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct InviteLink {
    /// Unique identifier for the invite link.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Cryptographically random base64url-encoded token (43 characters).
    #[prost(string, tag="2")]
    pub token: ::prost::alloc::string::String,
    /// ID of the role assigned to users who redeem this link.
    #[prost(string, tag="3")]
    pub role_id: ::prost::alloc::string::String,
    /// Maximum number of times this link can be redeemed.
    /// 0 means unlimited.
    #[prost(int32, tag="4")]
    pub max_uses: i32,
    /// Number of times this link has been redeemed.
    #[prost(int32, tag="5")]
    pub use_count: i32,
    /// When the link expires. Empty if no expiry.
    #[prost(message, optional, tag="6")]
    pub expires_at: ::core::option::Option<::prost_types::Timestamp>,
    /// When the link was revoked. Empty if not revoked.
    #[prost(message, optional, tag="7")]
    pub revoked_at: ::core::option::Option<::prost_types::Timestamp>,
    /// ID of the admin who created the link.
    #[prost(string, tag="8")]
    pub created_by: ::prost::alloc::string::String,
    /// When the link was created.
    #[prost(message, optional, tag="9")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
}
/// Request to create a new invite link for the organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateInviteLinkRequest {
    /// ID of the role to assign. Defaults to the organization's employee role if empty.
    #[prost(string, tag="1")]
    pub role_id: ::prost::alloc::string::String,
    /// Maximum number of redemptions. 0 means unlimited.
    #[prost(int32, tag="2")]
    pub max_uses: i32,
    /// Number of hours until the link expires. 0 means no expiry.
    /// Constraints: Valid range 0 to 8760 (1 year).
    #[prost(int32, tag="3")]
    pub expires_in_hours: i32,
}
/// Response after creating an invite link.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateInviteLinkResponse {
    /// The newly created invite link.
    #[prost(message, optional, tag="1")]
    pub invite_link: ::core::option::Option<InviteLink>,
    /// Full URL for sharing (e.g. "<https://app.pidgr.com/join?token=<TOKEN>">).
    #[prost(string, tag="2")]
    pub url: ::prost::alloc::string::String,
}
/// Request to list all invite links for the organization.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListInviteLinksRequest {
}
/// Response containing all invite links for the organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListInviteLinksResponse {
    /// All invite links (active, expired, maxed-out, and revoked), ordered by creation date descending.
    #[prost(message, repeated, tag="1")]
    pub invite_links: ::prost::alloc::vec::Vec<InviteLink>,
}
/// Request to revoke an invite link.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeInviteLinkRequest {
    /// ID of the invite link to revoke. Required.
    #[prost(string, tag="1")]
    pub invite_link_id: ::prost::alloc::string::String,
}
/// Response after revoking an invite link.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeInviteLinkResponse {
}
/// Request to redeem an invite link (authenticated — email extracted from JWT).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RedeemInviteLinkRequest {
    /// The invite link token from the URL query parameter.
    #[prost(string, tag="1")]
    pub token: ::prost::alloc::string::String,
}
/// Response after redeeming an invite link.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RedeemInviteLinkResponse {
    /// Name of the organization the user was added to.
    #[prost(string, tag="1")]
    pub organization_name: ::prost::alloc::string::String,
}
/// Request to validate an invite link and provision a user account if needed (unauthenticated).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ValidateInviteLinkRequest {
    /// The invite link token from the URL query parameter.
    #[prost(string, tag="1")]
    pub token: ::prost::alloc::string::String,
    /// Email address of the user joining the organization.
    /// Constraints: Max length 254 characters (RFC 5321).
    #[prost(string, tag="2")]
    pub email: ::prost::alloc::string::String,
}
/// Response after validating an invite link.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ValidateInviteLinkResponse {
    /// Name of the organization the invite link belongs to.
    #[prost(string, tag="1")]
    pub organization_name: ::prost::alloc::string::String,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Request to invite a new user to the organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct InviteUserRequest {
    /// Email address to send the invitation to.
    /// Constraints: Max length 254 characters (RFC 5321).
    #[prost(string, tag="1")]
    pub email: ::prost::alloc::string::String,
    /// Display name for the invited user.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// ID of the role to assign. Defaults to the organization's employee role if empty.
    #[prost(string, tag="4")]
    pub role_id: ::prost::alloc::string::String,
    /// Optional profile attributes to pre-fill at invitation time.
    #[prost(message, optional, tag="5")]
    pub profile: ::core::option::Option<UserProfile>,
}
/// Response after inviting a user.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct InviteUserResponse {
    /// The newly created user (status: INVITED).
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to retrieve a user by ID.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetUserRequest {
    /// ID of the user to retrieve.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response containing the requested user.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetUserResponse {
    /// The requested user.
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to list users in the organization with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListUsersRequest {
    /// Pagination parameters.
    #[prost(message, optional, tag="1")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of users.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListUsersResponse {
    /// List of users in this page.
    #[prost(message, repeated, tag="1")]
    pub users: ::prost::alloc::vec::Vec<User>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// Request to change a user's role within the organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateUserRoleRequest {
    /// ID of the user whose role to update.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// ID of the new role to assign.
    #[prost(string, tag="2")]
    pub role_id: ::prost::alloc::string::String,
}
/// Response after updating a user's role.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateUserRoleResponse {
    /// The updated user with the new role.
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to deactivate a user within the organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeactivateUserRequest {
    /// ID of the user to deactivate.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response after deactivating a user.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct DeactivateUserResponse {
    /// The deactivated user (status: DEACTIVATED).
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to reactivate a deactivated user.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ReactivateUserRequest {
    /// ID of the user to reactivate.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response after reactivating a user.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ReactivateUserResponse {
    /// The reactivated user (status: INVITED).
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to revoke an invitation for a user who has not yet registered.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeInviteRequest {
    /// ID of the invited user to remove.
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
}
/// Response after revoking an invitation. Empty on success.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RevokeInviteResponse {
}
/// Request to update a user's profile attributes.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateUserProfileRequest {
    /// ID of the user whose profile to update.
    /// Empty or matching the caller's own ID allows self-update without PERMISSION_MEMBERS_MANAGE.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// Profile attributes to set. All provided fields overwrite existing values.
    #[prost(message, optional, tag="2")]
    pub profile: ::core::option::Option<UserProfile>,
}
/// Response after updating a user's profile.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateUserProfileResponse {
    /// The updated user with the new profile.
    #[prost(message, optional, tag="1")]
    pub user: ::core::option::Option<User>,
}
/// Request to retrieve the caller's platform settings.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetUserSettingsRequest {
}
/// Response containing the caller's platform settings.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetUserSettingsResponse {
    /// Current settings. Fields at their default value indicate the platform default.
    #[prost(message, optional, tag="1")]
    pub settings: ::core::option::Option<UserSettings>,
}
/// Request to update the caller's platform settings.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateUserSettingsRequest {
    /// Settings to update. Only fields with non-default (non-UNSPECIFIED) values
    /// are applied; default-valued fields are left unchanged.
    #[prost(message, optional, tag="1")]
    pub settings: ::core::option::Option<UserSettings>,
}
/// Response after updating the caller's platform settings.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateUserSettingsResponse {
    /// The full settings after the update.
    #[prost(message, optional, tag="1")]
    pub settings: ::core::option::Option<UserSettings>,
}
/// Request to invite multiple users to the organization in a single call.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct BulkInviteUsersRequest {
    /// Email addresses to invite.
    /// Constraints: Min 1, max 100 emails. Duplicates are deduplicated before processing.
    #[prost(string, repeated, tag="1")]
    pub emails: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
    /// ID of the role to assign. Defaults to the organization's employee role if empty.
    #[prost(string, tag="2")]
    pub role_id: ::prost::alloc::string::String,
}
/// Per-email result within a bulk invite operation.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct BulkInviteResult {
    /// The email address that was processed.
    #[prost(string, tag="1")]
    pub email: ::prost::alloc::string::String,
    /// Whether the invitation succeeded.
    #[prost(bool, tag="2")]
    pub success: bool,
    /// Error message if the invitation failed (e.g. "user already exists").
    /// Empty on success.
    #[prost(string, tag="3")]
    pub error: ::prost::alloc::string::String,
    /// The created user. Only set on success.
    #[prost(message, optional, tag="4")]
    pub user: ::core::option::Option<User>,
}
/// Response after bulk inviting users.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct BulkInviteUsersResponse {
    /// Per-email results in the same order as the deduplicated input.
    #[prost(message, repeated, tag="1")]
    pub results: ::prost::alloc::vec::Vec<BulkInviteResult>,
    /// Number of users successfully invited.
    #[prost(int32, tag="2")]
    pub invited_count: i32,
    /// Number of emails that failed.
    #[prost(int32, tag="3")]
    pub failed_count: i32,
}
/// Request to confirm passkey enrollment after client-side WebAuthn registration.
/// The server verifies that the caller has at least one registered WebAuthn
/// credential before setting the enrollment attribute.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ConfirmPasskeyEnrollmentRequest {
}
/// Response after confirming passkey enrollment.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ConfirmPasskeyEnrollmentResponse {
    /// Whether enrollment was confirmed and the user attribute was updated.
    #[prost(bool, tag="1")]
    pub confirmed: bool,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Maps an identity provider claim to a user profile field.
/// Used for automatic profile population when users authenticate via SSO/SAML.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SsoAttributeMapping {
    /// Claim name from the identity provider (e.g. "urn:oid:2.5.4.11", "given_name").
    /// Constraints: Max length 500 characters.
    #[prost(string, tag="1")]
    pub idp_claim: ::prost::alloc::string::String,
    /// Target UserProfile field name (e.g. "department", "first_name").
    /// For custom attributes, use "custom:" prefix (e.g. "custom:cost_center").
    /// Constraints: Max length 100 characters.
    #[prost(string, tag="2")]
    pub profile_field: ::prost::alloc::string::String,
}
/// An organization (tenant) in the Pidgr platform.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Organization {
    /// Unique identifier for the organization.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Organization display name.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Default workflow used when campaigns don't specify one.
    #[prost(message, optional, tag="3")]
    pub default_workflow: ::core::option::Option<WorkflowDefinition>,
    /// Timestamp when the organization was created.
    #[prost(message, optional, tag="4")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Industry vertical.
    #[prost(enumeration="Industry", tag="5")]
    pub industry: i32,
    /// Employee headcount range.
    #[prost(enumeration="CompanySize", tag="6")]
    pub company_size: i32,
    /// SSO identity provider claim-to-profile mappings.
    /// Empty when the organization does not use SSO.
    #[prost(message, repeated, tag="7")]
    pub sso_attribute_mappings: ::prost::alloc::vec::Vec<SsoAttributeMapping>,
    /// Default language for new users in this organization.
    /// Empty means no org default (users auto-detect from device/browser).
    /// Valid values: en, es, pt-BR, zh, ja.
    #[prost(string, tag="8")]
    pub default_locale: ::prost::alloc::string::String,
}
/// Request to create a new organization with an admin user.
/// Supports API key auth (service-to-service) and JWT auth (self-service onboarding).
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateOrganizationRequest {
    /// Name for the new organization.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Email address for the initial admin user.
    /// Only used with API key auth; ignored with JWT auth (email derived from identity provider subject).
    #[prost(string, tag="2")]
    pub admin_email: ::prost::alloc::string::String,
    /// Industry vertical for the organization.
    #[prost(enumeration="Industry", tag="3")]
    pub industry: i32,
    /// Employee headcount range.
    #[prost(enumeration="CompanySize", tag="4")]
    pub company_size: i32,
    /// Access code required during early access (JWT auth only). Ignored with API key auth.
    /// Format: PIDGR-XXXXXXXX (8 alphanumeric characters).
    #[prost(string, tag="5")]
    pub access_code: ::prost::alloc::string::String,
}
/// Response after creating an organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateOrganizationResponse {
    /// The newly created organization.
    #[prost(message, optional, tag="1")]
    pub organization: ::core::option::Option<Organization>,
    /// The admin user created for the organization.
    #[prost(message, optional, tag="2")]
    pub admin_user: ::core::option::Option<User>,
}
/// Request to retrieve the organization for the authenticated user.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetOrganizationRequest {
}
/// Response containing the organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetOrganizationResponse {
    /// The organization the authenticated user belongs to.
    #[prost(message, optional, tag="1")]
    pub organization: ::core::option::Option<Organization>,
}
/// Request to update organization settings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateOrganizationRequest {
    /// New organization name. Empty string leaves unchanged.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// New default workflow definition. Null leaves unchanged.
    #[prost(message, optional, tag="2")]
    pub default_workflow: ::core::option::Option<WorkflowDefinition>,
    /// New industry vertical. UNSPECIFIED leaves unchanged.
    #[prost(enumeration="Industry", tag="3")]
    pub industry: i32,
    /// New employee headcount range. UNSPECIFIED leaves unchanged.
    #[prost(enumeration="CompanySize", tag="4")]
    pub company_size: i32,
    /// New default language for new users. Empty string leaves unchanged.
    /// Valid values: en, es, pt-BR, zh, ja.
    #[prost(string, tag="5")]
    pub default_locale: ::prost::alloc::string::String,
}
/// Response after updating the organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateOrganizationResponse {
    /// The updated organization.
    #[prost(message, optional, tag="1")]
    pub organization: ::core::option::Option<Organization>,
}
/// Request to replace all SSO attribute mappings for the organization.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateSsoAttributeMappingsRequest {
    /// Complete list of SSO mappings (replaces all existing mappings).
    #[prost(message, repeated, tag="1")]
    pub sso_attribute_mappings: ::prost::alloc::vec::Vec<SsoAttributeMapping>,
}
/// Response after updating SSO attribute mappings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateSsoAttributeMappingsResponse {
    /// The updated organization with the new SSO mappings.
    #[prost(message, optional, tag="1")]
    pub organization: ::core::option::Option<Organization>,
}
/// Request to rotate the analytics salt and optionally increase the bucket count.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RotateAnalyticsSaltRequest {
    /// New bucket count. Must be >= current bucket count. 0 means keep current.
    #[prost(int32, tag="1")]
    pub new_bucket_count: i32,
}
/// Response after rotating the analytics salt.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RotateAnalyticsSaltResponse {
    /// The new bucket count after rotation.
    #[prost(int32, tag="1")]
    pub bucket_count: i32,
}
/// Request to update the analytics epsilon (differential privacy parameter).
#[derive(Clone, Copy, PartialEq, ::prost::Message)]
pub struct UpdateAnalyticsEpsilonRequest {
    /// New epsilon value. Must be in range \[0.5, 5.0\].
    #[prost(float, tag="1")]
    pub epsilon: f32,
}
/// Response after updating the analytics epsilon.
#[derive(Clone, Copy, PartialEq, ::prost::Message)]
pub struct UpdateAnalyticsEpsilonResponse {
    /// The new epsilon value.
    #[prost(float, tag="1")]
    pub epsilon: f32,
}
// ─── Enums ───────────────────────────────────────────────────────────────────

/// Industry vertical for an organization.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum Industry {
    Unspecified = 0,
    Technology = 1,
    Finance = 2,
    Healthcare = 3,
    Education = 4,
    Retail = 5,
    Manufacturing = 6,
    Media = 7,
    Other = 8,
}
impl Industry {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "INDUSTRY_UNSPECIFIED",
            Self::Technology => "INDUSTRY_TECHNOLOGY",
            Self::Finance => "INDUSTRY_FINANCE",
            Self::Healthcare => "INDUSTRY_HEALTHCARE",
            Self::Education => "INDUSTRY_EDUCATION",
            Self::Retail => "INDUSTRY_RETAIL",
            Self::Manufacturing => "INDUSTRY_MANUFACTURING",
            Self::Media => "INDUSTRY_MEDIA",
            Self::Other => "INDUSTRY_OTHER",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "INDUSTRY_UNSPECIFIED" => Some(Self::Unspecified),
            "INDUSTRY_TECHNOLOGY" => Some(Self::Technology),
            "INDUSTRY_FINANCE" => Some(Self::Finance),
            "INDUSTRY_HEALTHCARE" => Some(Self::Healthcare),
            "INDUSTRY_EDUCATION" => Some(Self::Education),
            "INDUSTRY_RETAIL" => Some(Self::Retail),
            "INDUSTRY_MANUFACTURING" => Some(Self::Manufacturing),
            "INDUSTRY_MEDIA" => Some(Self::Media),
            "INDUSTRY_OTHER" => Some(Self::Other),
            _ => None,
        }
    }
}
/// Employee headcount range for an organization.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum CompanySize {
    Unspecified = 0,
    CompanySize1200 = 1,
    CompanySize200500 = 2,
    CompanySize5001000 = 3,
    CompanySize10005000 = 4,
    CompanySize5000Plus = 5,
}
impl CompanySize {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "COMPANY_SIZE_UNSPECIFIED",
            Self::CompanySize1200 => "COMPANY_SIZE_1_200",
            Self::CompanySize200500 => "COMPANY_SIZE_200_500",
            Self::CompanySize5001000 => "COMPANY_SIZE_500_1000",
            Self::CompanySize10005000 => "COMPANY_SIZE_1000_5000",
            Self::CompanySize5000Plus => "COMPANY_SIZE_5000_PLUS",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "COMPANY_SIZE_UNSPECIFIED" => Some(Self::Unspecified),
            "COMPANY_SIZE_1_200" => Some(Self::CompanySize1200),
            "COMPANY_SIZE_200_500" => Some(Self::CompanySize200500),
            "COMPANY_SIZE_500_1000" => Some(Self::CompanySize5001000),
            "COMPANY_SIZE_1000_5000" => Some(Self::CompanySize10005000),
            "COMPANY_SIZE_5000_PLUS" => Some(Self::CompanySize5000Plus),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Per-user rendering context containing variable substitutions.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UserRenderContext {
    /// ID of the user being rendered for.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// Variable name-value pairs to substitute into the template.
    /// Constraints: Max 100 entries. Key max length 100 characters, value max length 10000 characters.
    #[prost(map="string, string", tag="2")]
    pub variables: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>,
}
/// Request to render a template for a batch of users.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct RenderBatchRequest {
    /// ID of the template to render.
    #[prost(string, tag="1")]
    pub template_id: ::prost::alloc::string::String,
    /// Version of the template to render.
    #[prost(int32, tag="2")]
    pub version: i32,
    /// Per-user rendering contexts with variable substitutions.
    /// Constraints: Max 10000 users per batch.
    #[prost(message, repeated, tag="3")]
    pub users: ::prost::alloc::vec::Vec<UserRenderContext>,
}
/// Streamed response for each user's rendered message.
/// One response is emitted per user in the batch.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct RenderBatchResponse {
    /// ID of the user this result is for.
    #[prost(string, tag="1")]
    pub user_id: ::prost::alloc::string::String,
    /// The rendered message (set on success).
    #[prost(message, optional, tag="2")]
    pub message: ::core::option::Option<Message>,
    /// Error message if rendering failed for this user (empty on success).
    #[prost(string, tag="3")]
    pub error: ::prost::alloc::string::String,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A session recording summary from the analytics provider.
/// Anonymous: no user identifiers are included.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct SessionRecording {
    /// Recording ID from the analytics provider.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Timestamp when the recording started.
    #[prost(message, optional, tag="2")]
    pub start_time: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the recording ended.
    #[prost(message, optional, tag="3")]
    pub end_time: ::core::option::Option<::prost_types::Timestamp>,
    /// Duration of the recording in seconds.
    #[prost(int32, tag="4")]
    pub duration_seconds: i32,
    /// Activity score (0.0–1.0).
    #[prost(float, tag="5")]
    pub activity_score: f32,
}
/// Request to list session recordings.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListSessionRecordingsRequest {
    /// Optional: filter recordings by campaign ID (mapped to analytics property filter).
    /// Constraints: UUID format (36 characters).
    #[prost(string, tag="1")]
    pub campaign_id: ::prost::alloc::string::String,
    /// Optional: start of the time range filter (inclusive).
    #[prost(message, optional, tag="2")]
    pub date_from: ::core::option::Option<::prost_types::Timestamp>,
    /// Optional: end of the time range filter (inclusive).
    #[prost(message, optional, tag="3")]
    pub date_to: ::core::option::Option<::prost_types::Timestamp>,
    /// Pagination parameters.
    #[prost(message, optional, tag="4")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of session recordings.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListSessionRecordingsResponse {
    /// List of session recordings in this page.
    #[prost(message, repeated, tag="1")]
    pub recordings: ::prost::alloc::vec::Vec<SessionRecording>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// Request to fetch rrweb snapshot events for a recording.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetSessionSnapshotsRequest {
    /// Recording ID from the analytics provider.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub recording_id: ::prost::alloc::string::String,
}
/// Response containing rrweb snapshot events.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetSessionSnapshotsResponse {
    /// JSON-encoded array of rrweb eventWithTime objects.
    /// Clients parse this JSON to feed into rrweb-player.
    #[prost(string, tag="1")]
    pub snapshot_data: ::prost::alloc::string::String,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Request to list all roles in the caller's organization.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListRolesRequest {
}
/// Response containing the organization's roles.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListRolesResponse {
    /// All roles in the organization, including their permission sets.
    #[prost(message, repeated, tag="1")]
    pub roles: ::prost::alloc::vec::Vec<Role>,
}
/// Request to create a new role in the caller's organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateRoleRequest {
    /// Display name for the role (e.g. "Team Lead"). Required.
    /// A slug is auto-generated from the name.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Initial permission set for the role.
    /// PERMISSION_UNSPECIFIED values are rejected.
    #[prost(enumeration="Permission", repeated, tag="2")]
    pub permissions: ::prost::alloc::vec::Vec<i32>,
}
/// Response after creating a role.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateRoleResponse {
    /// The newly created role with its generated slug and permission set.
    #[prost(message, optional, tag="1")]
    pub role: ::core::option::Option<Role>,
}
/// Request to update a role's name and/or permissions.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateRoleRequest {
    /// ID of the role to update. Required.
    #[prost(string, tag="1")]
    pub role_id: ::prost::alloc::string::String,
    /// New display name. If empty, the name is not changed.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// New permission set (replaces existing permissions entirely).
    /// If empty, permissions are not changed.
    /// PERMISSION_UNSPECIFIED values are rejected.
    #[prost(enumeration="Permission", repeated, tag="3")]
    pub permissions: ::prost::alloc::vec::Vec<i32>,
}
/// Response after updating a role.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateRoleResponse {
    /// The updated role.
    #[prost(message, optional, tag="1")]
    pub role: ::core::option::Option<Role>,
}
/// Request to delete a role.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteRoleRequest {
    /// ID of the role to delete. Required.
    #[prost(string, tag="1")]
    pub role_id: ::prost::alloc::string::String,
}
/// Response after deleting a role.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteRoleResponse {
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// Custom SAML attribute name overrides for identity providers that use
/// non-standard attribute names. When provided, these override the
/// auto-detected values from the metadata URL host.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SamlAttributeNames {
    /// SAML attribute name for the user's email address.
    #[prost(string, tag="1")]
    pub email: ::prost::alloc::string::String,
    /// SAML attribute name for the user's first name.
    #[prost(string, tag="2")]
    pub given_name: ::prost::alloc::string::String,
    /// SAML attribute name for the user's last name.
    #[prost(string, tag="3")]
    pub family_name: ::prost::alloc::string::String,
}
/// An SSO identity provider configured for an organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct SsoProvider {
    /// Unique identifier for the provider.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Email domain that triggers this SSO provider (e.g. "acme.com").
    /// Constraints: Max length 253 characters (RFC 1035).
    #[prost(string, tag="2")]
    pub domain: ::prost::alloc::string::String,
    /// Type of identity provider.
    #[prost(enumeration="SsoProviderType", tag="3")]
    pub r#type: i32,
    /// SAML metadata URL or OIDC discovery URL.
    /// Constraints: Max length 2048 characters. HTTPS required.
    #[prost(string, tag="4")]
    pub metadata_url: ::prost::alloc::string::String,
    /// Name of the identity provider (used for signInWithRedirect).
    /// Set by the API when the IdP is created.
    #[prost(string, tag="5")]
    pub idp_provider_name: ::prost::alloc::string::String,
    /// Timestamp when the provider was created.
    #[prost(message, optional, tag="6")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the provider was last updated.
    #[prost(message, optional, tag="7")]
    pub updated_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Optional custom SAML attribute name overrides.
    #[prost(message, optional, tag="8")]
    pub attribute_mapping: ::core::option::Option<SamlAttributeNames>,
}
/// Request to check if an email domain has SSO configured.
/// This RPC is pre-authentication — no JWT required.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CheckSsoByDomainRequest {
    /// Email address to check. The domain part is extracted.
    /// Constraints: Max length 254 characters (RFC 5321).
    #[prost(string, tag="1")]
    pub email: ::prost::alloc::string::String,
}
/// Response for SSO domain check.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CheckSsoByDomainResponse {
    /// Whether SSO is enabled for the email's domain.
    #[prost(bool, tag="1")]
    pub sso_enabled: bool,
    /// Identity provider name for signInWithRedirect.
    /// Empty if sso_enabled is false.
    #[prost(string, tag="2")]
    pub provider_name: ::prost::alloc::string::String,
}
/// Request to create an SSO provider for the organization.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateSsoProviderRequest {
    /// Email domain to associate (e.g. "acme.com").
    /// Constraints: Max length 253 characters (RFC 1035).
    #[prost(string, tag="1")]
    pub domain: ::prost::alloc::string::String,
    /// Type of identity provider.
    #[prost(enumeration="SsoProviderType", tag="2")]
    pub r#type: i32,
    /// SAML metadata URL or OIDC discovery URL.
    /// Constraints: Max length 2048 characters. HTTPS required.
    #[prost(string, tag="3")]
    pub metadata_url: ::prost::alloc::string::String,
    /// Optional custom SAML attribute name overrides.
    /// When omitted, attribute names are auto-detected from the metadata URL.
    #[prost(message, optional, tag="4")]
    pub attribute_mapping: ::core::option::Option<SamlAttributeNames>,
}
/// Response after creating an SSO provider.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateSsoProviderResponse {
    /// The newly created SSO provider.
    #[prost(message, optional, tag="1")]
    pub provider: ::core::option::Option<SsoProvider>,
}
/// Request to get the SSO provider for the organization.
/// Returns the provider if one is configured, or empty if not.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetSsoProviderRequest {
}
/// Response containing the organization's SSO provider.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetSsoProviderResponse {
    /// The organization's SSO provider, or null if not configured.
    #[prost(message, optional, tag="1")]
    pub provider: ::core::option::Option<SsoProvider>,
}
/// Request to delete the organization's SSO provider.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteSsoProviderRequest {
    /// ID of the provider to delete.
    #[prost(string, tag="1")]
    pub provider_id: ::prost::alloc::string::String,
}
/// Response after deleting an SSO provider.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteSsoProviderResponse {
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Type of SSO identity provider.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum SsoProviderType {
    /// Default value; not a valid type.
    Unspecified = 0,
    /// SAML 2.0 identity provider (e.g. Okta, Azure AD).
    Saml = 1,
    /// OpenID Connect identity provider (e.g. Google Workspace, Auth0).
    Oidc = 2,
}
impl SsoProviderType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "SSO_PROVIDER_TYPE_UNSPECIFIED",
            Self::Saml => "SSO_PROVIDER_TYPE_SAML",
            Self::Oidc => "SSO_PROVIDER_TYPE_OIDC",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "SSO_PROVIDER_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "SSO_PROVIDER_TYPE_SAML" => Some(Self::Saml),
            "SSO_PROVIDER_TYPE_OIDC" => Some(Self::Oidc),
            _ => None,
        }
    }
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// An organizational unit within an organization (e.g. department, division).
/// Teams represent the organizational structure and can serve as sender identity
/// in campaigns.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct Team {
    /// Unique identifier for the team.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Human-readable display name (unique within the organization).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Optional description of the team's purpose.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="3")]
    pub description: ::prost::alloc::string::String,
    /// Number of users currently in the team.
    #[prost(int32, tag="4")]
    pub member_count: i32,
    /// Timestamp when the team was created.
    #[prost(message, optional, tag="5")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp when the team was last updated.
    #[prost(message, optional, tag="6")]
    pub updated_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Whether this is the organization's default team (cannot be deleted or renamed).
    #[prost(bool, tag="7")]
    pub is_default: bool,
    /// ID of the user who created this team. Empty for system-seeded defaults.
    #[prost(string, tag="8")]
    pub created_by: ::prost::alloc::string::String,
}
/// Request to create a new team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateTeamRequest {
    /// Display name for the team. Required.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Optional description.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="2")]
    pub description: ::prost::alloc::string::String,
}
/// Response after creating a team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct CreateTeamResponse {
    /// The newly created team.
    #[prost(message, optional, tag="1")]
    pub team: ::core::option::Option<Team>,
}
/// Request to retrieve a team by ID.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetTeamRequest {
    /// ID of the team to retrieve. Required.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
}
/// Response containing the requested team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetTeamResponse {
    /// The requested team.
    #[prost(message, optional, tag="1")]
    pub team: ::core::option::Option<Team>,
}
/// Request to list teams in the organization with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListTeamsRequest {
    /// Pagination parameters.
    #[prost(message, optional, tag="1")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of teams.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListTeamsResponse {
    /// Teams in this page.
    #[prost(message, repeated, tag="1")]
    pub teams: ::prost::alloc::vec::Vec<Team>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
/// Request to update a team's name and/or description.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateTeamRequest {
    /// ID of the team to update. Required.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
    /// New display name. If empty, the name is not changed.
    /// Default teams cannot be renamed.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// New description. If empty, the description is not changed.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="3")]
    pub description: ::prost::alloc::string::String,
}
/// Response after updating a team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct UpdateTeamResponse {
    /// The updated team.
    #[prost(message, optional, tag="1")]
    pub team: ::core::option::Option<Team>,
}
/// Request to delete a team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteTeamRequest {
    /// ID of the team to delete. Required.
    /// Default teams cannot be deleted.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
}
/// Response after deleting a team.
#[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
pub struct DeleteTeamResponse {
}
/// Request to add users to a team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AddTeamMembersRequest {
    /// ID of the team to add members to. Required.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
    /// IDs of users to add. Must belong to the same organization.
    /// Adding an existing member is a no-op (idempotent).
    /// Constraints: Max 100 user IDs per request.
    #[prost(string, repeated, tag="2")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Response after adding team members.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct AddTeamMembersResponse {
    /// The team with updated member_count.
    #[prost(message, optional, tag="1")]
    pub team: ::core::option::Option<Team>,
}
/// Request to remove users from a team.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RemoveTeamMembersRequest {
    /// ID of the team to remove members from. Required.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
    /// IDs of users to remove. Removing a non-member is a no-op (idempotent).
    /// Constraints: Max 100 user IDs per request.
    #[prost(string, repeated, tag="2")]
    pub user_ids: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
}
/// Response after removing team members.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct RemoveTeamMembersResponse {
    /// The team with updated member_count.
    #[prost(message, optional, tag="1")]
    pub team: ::core::option::Option<Team>,
}
/// Request to list members of a team with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListTeamMembersRequest {
    /// ID of the team whose members to list. Required.
    #[prost(string, tag="1")]
    pub team_id: ::prost::alloc::string::String,
    /// Pagination parameters.
    #[prost(message, optional, tag="2")]
    pub pagination: ::core::option::Option<Pagination>,
}
/// Response containing a page of team members.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListTeamMembersResponse {
    /// Users in this page.
    #[prost(message, repeated, tag="1")]
    pub users: ::prost::alloc::vec::Vec<User>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
// ─── Messages ───────────────────────────────────────────────────────────────

/// A variable placeholder within a template that gets substituted during rendering.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct TemplateVariable {
    /// Variable name used in the template body (e.g. "employee_name").
    /// Constraints: Max length 100 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Human-readable description of what this variable represents.
    /// Constraints: Max length 500 characters.
    #[prost(string, tag="2")]
    pub description: ::prost::alloc::string::String,
    /// Whether this variable must be provided during rendering.
    #[prost(bool, tag="3")]
    pub required: bool,
    /// Where this variable's value comes from (profile attribute or campaign config).
    #[prost(enumeration="TemplateVariableSource", tag="4")]
    pub source: i32,
    /// Fallback value used when the source does not provide a value.
    /// Constraints: Max length 1000 characters.
    #[prost(string, tag="5")]
    pub default_value: ::prost::alloc::string::String,
    /// When true, this variable's rendered value is masked in session replay
    /// and heatmap screenshots. Org admin controls per variable.
    #[prost(bool, tag="6")]
    pub pii: bool,
}
/// A versioned message template with variable placeholders.
/// Templates are append-only — updates create new versions.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct Template {
    /// Unique identifier for the template.
    #[prost(string, tag="1")]
    pub id: ::prost::alloc::string::String,
    /// Human-readable template name (admin-facing label).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="2")]
    pub name: ::prost::alloc::string::String,
    /// Template body with {{variable}} placeholders for substitution.
    /// Constraints: Max length 50000 characters.
    #[prost(string, tag="3")]
    pub body: ::prost::alloc::string::String,
    /// Variables that can be substituted into the template body.
    #[prost(message, repeated, tag="4")]
    pub variables: ::prost::alloc::vec::Vec<TemplateVariable>,
    /// Version number (auto-incremented on each update).
    #[prost(int32, tag="5")]
    pub version: i32,
    /// Timestamp when this version was created.
    #[prost(message, optional, tag="6")]
    pub created_at: ::core::option::Option<::prost_types::Timestamp>,
    /// Timestamp of the most recent update (same as created_at for the latest version).
    #[prost(message, optional, tag="7")]
    pub updated_at: ::core::option::Option<::prost_types::Timestamp>,
    /// User-facing title shown as the message subject to recipients.
    /// Serves as the default title; campaigns can override it.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="8")]
    pub title: ::prost::alloc::string::String,
    /// Content format of this template (markdown, rich, HTML).
    /// UNSPECIFIED is treated as MARKDOWN for backward compatibility.
    #[prost(enumeration="TemplateType", tag="9")]
    pub r#type: i32,
}
/// Request to create a new template.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateTemplateRequest {
    /// Human-readable template name (admin-facing label).
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="1")]
    pub name: ::prost::alloc::string::String,
    /// Template body with {{variable}} placeholders.
    /// Constraints: Max length 50000 characters.
    #[prost(string, tag="2")]
    pub body: ::prost::alloc::string::String,
    /// Variables available for substitution in the body.
    #[prost(message, repeated, tag="3")]
    pub variables: ::prost::alloc::vec::Vec<TemplateVariable>,
    /// User-facing title shown as the message subject to recipients.
    /// Constraints: Max length 200 characters.
    #[prost(string, tag="4")]
    pub title: ::prost::alloc::string::String,
    /// Content format of the template. Defaults to MARKDOWN if unspecified.
    #[prost(enumeration="TemplateType", tag="5")]
    pub r#type: i32,
}
/// Response after creating a template.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct CreateTemplateResponse {
    /// The newly created template (version 1).
    #[prost(message, optional, tag="1")]
    pub template: ::core::option::Option<Template>,
}
/// Request to update a template, creating a new version.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateTemplateRequest {
    /// ID of the template to update.
    #[prost(string, tag="1")]
    pub template_id: ::prost::alloc::string::String,
    /// New template body with {{variable}} placeholders.
    /// Constraints: Max length 50000 characters.
    #[prost(string, tag="2")]
    pub body: ::prost::alloc::string::String,
    /// Updated variables for substitution.
    #[prost(message, repeated, tag="3")]
    pub variables: ::prost::alloc::vec::Vec<TemplateVariable>,
}
/// Response after updating a template.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct UpdateTemplateResponse {
    /// The updated template with incremented version number.
    #[prost(message, optional, tag="1")]
    pub template: ::core::option::Option<Template>,
}
/// Request to retrieve a specific template version.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct GetTemplateRequest {
    /// ID of the template to retrieve.
    #[prost(string, tag="1")]
    pub template_id: ::prost::alloc::string::String,
    /// Version to retrieve. 0 returns the latest version.
    #[prost(int32, tag="2")]
    pub version: i32,
}
/// Response containing the requested template.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct GetTemplateResponse {
    /// The requested template.
    #[prost(message, optional, tag="1")]
    pub template: ::core::option::Option<Template>,
}
/// Request to list templates with pagination.
#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
pub struct ListTemplatesRequest {
    /// Pagination parameters.
    #[prost(message, optional, tag="1")]
    pub pagination: ::core::option::Option<Pagination>,
    /// Filter by template type. UNSPECIFIED returns all templates.
    #[prost(enumeration="TemplateType", tag="2")]
    pub r#type: i32,
}
/// Response containing a page of templates.
#[derive(Clone, PartialEq, ::prost::Message)]
pub struct ListTemplatesResponse {
    /// List of templates in this page (latest version of each).
    #[prost(message, repeated, tag="1")]
    pub templates: ::prost::alloc::vec::Vec<Template>,
    /// Pagination metadata for fetching subsequent pages.
    #[prost(message, optional, tag="2")]
    pub pagination_meta: ::core::option::Option<PaginationMeta>,
}
// ─── Enums ──────────────────────────────────────────────────────────────────

/// Content format of a template, determining which editor and renderer to use.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum TemplateType {
    /// Default value; treated as MARKDOWN for backward compatibility.
    Unspecified = 0,
    /// Markdown with {{variable}} placeholders.
    Markdown = 1,
    /// Rich text format (reserved for future use).
    Rich = 2,
    /// Raw HTML format (reserved for future use).
    Html = 3,
}
impl TemplateType {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "TEMPLATE_TYPE_UNSPECIFIED",
            Self::Markdown => "TEMPLATE_TYPE_MARKDOWN",
            Self::Rich => "TEMPLATE_TYPE_RICH",
            Self::Html => "TEMPLATE_TYPE_HTML",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "TEMPLATE_TYPE_UNSPECIFIED" => Some(Self::Unspecified),
            "TEMPLATE_TYPE_MARKDOWN" => Some(Self::Markdown),
            "TEMPLATE_TYPE_RICH" => Some(Self::Rich),
            "TEMPLATE_TYPE_HTML" => Some(Self::Html),
            _ => None,
        }
    }
}
/// Source from which a template variable's value is resolved at render time.
#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
#[repr(i32)]
pub enum TemplateVariableSource {
    /// Default value; treated as CUSTOM for backward compatibility.
    Unspecified = 0,
    /// Auto-resolved from the target user's profile attributes.
    Profile = 1,
    /// Provided manually in the campaign or workflow step configuration.
    Custom = 2,
}
impl TemplateVariableSource {
    /// String value of the enum field names used in the ProtoBuf definition.
    ///
    /// The values are not transformed in any way and thus are considered stable
    /// (if the ProtoBuf definition does not change) and safe for programmatic use.
    pub fn as_str_name(&self) -> &'static str {
        match self {
            Self::Unspecified => "TEMPLATE_VARIABLE_SOURCE_UNSPECIFIED",
            Self::Profile => "TEMPLATE_VARIABLE_SOURCE_PROFILE",
            Self::Custom => "TEMPLATE_VARIABLE_SOURCE_CUSTOM",
        }
    }
    /// Creates an enum from field names used in the ProtoBuf definition.
    pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
        match value {
            "TEMPLATE_VARIABLE_SOURCE_UNSPECIFIED" => Some(Self::Unspecified),
            "TEMPLATE_VARIABLE_SOURCE_PROFILE" => Some(Self::Profile),
            "TEMPLATE_VARIABLE_SOURCE_CUSTOM" => Some(Self::Custom),
            _ => None,
        }
    }
}
include!("pidgr.v1.tonic.rs");
// @@protoc_insertion_point(module)