coder/coderd/database/querier.go

// Code generated by sqlc. DO NOT EDIT.
// versions:
//   sqlc v1.31.1

package database

import (
	"context"
	"time"

	"github.com/google/uuid"
)

type sqlcQuerier interface {
	// Set the lease to expire according to the provided timeout.  If there is
	// already a lease, an exception is raised.
	AcquireExternalAuthLinkRefreshLease(ctx context.Context, arg AcquireExternalAuthLinkRefreshLeaseParams) (ExternalAuthLink, error)
	// Blocks until the lock is acquired.
	//
	// This must be called from within a transaction. The lock will be automatically
	// released when the transaction ends.
	AcquireLock(ctx context.Context, pgAdvisoryXactLock int64) error
	// Acquires the lease for a given count of notification messages, to enable concurrent dequeuing and subsequent sending.
	// Only rows that aren't already leased (or ones which are leased but have exceeded their lease period) are returned.
	//
	// A "lease" here refers to a notifier taking ownership of a notification_messages row. A lease survives for the duration
	// of CODER_NOTIFICATIONS_LEASE_PERIOD. Once a message is delivered, its status is updated and the lease expires (set to NULL).
	// If a message exceeds its lease, that implies the notifier did not shutdown cleanly, or the table update failed somehow,
	// and the row will then be eligible to be dequeued by another notifier.
	//
	// SKIP LOCKED is used to jump over locked rows. This prevents multiple notifiers from acquiring the same messages.
	// See: https://www.postgresql.org/docs/9.5/sql-select.html#SQL-FOR-UPDATE-SHARE
	//
	AcquireNotificationMessages(ctx context.Context, arg AcquireNotificationMessagesParams) ([]AcquireNotificationMessagesRow, error)
	// Acquires the lock for a single job that isn't started, completed,
	// canceled, and that matches an array of provisioner types.
	//
	// SKIP LOCKED is used to jump over locked rows. This prevents
	// multiple provisioners from acquiring the same jobs. See:
	// https://www.postgresql.org/docs/9.5/sql-select.html#SQL-FOR-UPDATE-SHARE
	AcquireProvisionerJob(ctx context.Context, arg AcquireProvisionerJobParams) (ProvisionerJob, error)
	AcquireStaleChatDiffStatuses(ctx context.Context, limitVal int32) ([]AcquireStaleChatDiffStatusesRow, error)
	// Bumps the workspace deadline by the template's configured "activity_bump"
	// duration (default 1h). If the workspace bump will cross an autostart
	// threshold, then the bump is autostart + TTL. This is the deadline behavior if
	// the workspace was to autostart from a stopped state.
	//
	// Max deadline is respected, and the deadline will never be bumped past it.
	// The deadline will never decrease.
	// We only bump if the template has an activity bump duration set.
	// We only bump if the raw interval is positive and non-zero.
	// We only bump if workspace shutdown is manual.
	// We only bump when 5% of the deadline has elapsed.
	ActivityBumpWorkspace(ctx context.Context, arg ActivityBumpWorkspaceParams) error
	// AllUserIDs returns all UserIDs regardless of user status or deletion.
	AllUserIDs(ctx context.Context, includeSystem bool) ([]uuid.UUID, error)
	ArchiveChatByID(ctx context.Context, id uuid.UUID) ([]Chat, error)
	// Archiving templates is a soft delete action, so is reversible.
	// Archiving prevents the version from being used and discovered
	// by listing.
	// Only unused template versions will be archived, which are any versions not
	// referenced by the latest build of a workspace.
	ArchiveUnusedTemplateVersions(ctx context.Context, arg ArchiveUnusedTemplateVersionsParams) ([]uuid.UUID, error)
	// Archives inactive root chats (pinned and already-archived chats skipped),
	// cascading to children via root_chat_id. Limits apply to roots, not total
	// rows. The Go caller passes @archive_cutoff as UTC midnight so that all
	// chats sharing the same last-activity date are archived together.
	// Used by dbpurge.
	// created_at ASC flows through to dbpurge's digest truncation; see
	// buildDigestData in dbpurge.go for the tradeoff rationale.
	AutoArchiveInactiveChats(ctx context.Context, arg AutoArchiveInactiveChatsParams) ([]AutoArchiveInactiveChatsRow, error)
	// Backfills chat_messages.search_tsv for pending rows, newest first.
	// The WHERE clause must match the predicate of
	// idx_chat_messages_search_tsv_pending exactly so the partial index
	// serves this query.
	// NULL means "pending", empty tsvector means "backfilled, no text".
	BackfillChatMessagesSearchTsv(ctx context.Context, batchSize int32) (int64, error)
	BackoffChatDiffStatus(ctx context.Context, arg BackoffChatDiffStatusParams) error
	// Deletes heartbeat rows for the supplied (chat_id, runner_id) pairs.
	BatchDeleteChatHeartbeats(ctx context.Context, arg BatchDeleteChatHeartbeatsParams) (int64, error)
	BatchUpdateWorkspaceAgentMetadata(ctx context.Context, arg BatchUpdateWorkspaceAgentMetadataParams) error
	BatchUpdateWorkspaceLastUsedAt(ctx context.Context, arg BatchUpdateWorkspaceLastUsedAtParams) error
	BatchUpdateWorkspaceNextStartAt(ctx context.Context, arg BatchUpdateWorkspaceNextStartAtParams) error
	BatchUpsertConnectionLogs(ctx context.Context, arg BatchUpsertConnectionLogsParams) error
	BulkMarkNotificationMessagesFailed(ctx context.Context, arg BulkMarkNotificationMessagesFailedParams) (int64, error)
	BulkMarkNotificationMessagesSent(ctx context.Context, arg BulkMarkNotificationMessagesSentParams) (int64, error)
	// Calculates the telemetry summary for a given provider, model, and client
	// combination for telemetry reporting.
	CalculateAIBridgeInterceptionsTelemetrySummary(ctx context.Context, arg CalculateAIBridgeInterceptionsTelemetrySummaryParams) (CalculateAIBridgeInterceptionsTelemetrySummaryRow, error)
	ClaimPrebuiltWorkspace(ctx context.Context, arg ClaimPrebuiltWorkspaceParams) (ClaimPrebuiltWorkspaceRow, error)
	CleanTailnetCoordinators(ctx context.Context) error
	CleanTailnetLostPeers(ctx context.Context) error
	CleanTailnetTunnels(ctx context.Context) error
	CleanupDeletedMCPServerIDsFromChats(ctx context.Context) error
	ClearChatDiffStatusPR(ctx context.Context, arg ClearChatDiffStatusPRParams) error
	CountAIBridgeSessions(ctx context.Context, arg CountAIBridgeSessionsParams) (int64, error)
	CountAuditLogs(ctx context.Context, arg CountAuditLogsParams) (int64, error)
	// Excluding the candidate keeps ownership takeover capacity-neutral.
	CountChatCapacityActiveByPool(ctx context.Context, arg CountChatCapacityActiveByPoolParams) (CountChatCapacityActiveByPoolRow, error)
	// Every runnable status needs capacity admission before a worker can own
	// the chat, so interrupting and requires_action chats without a fresh lease
	// also wait for a slot.
	CountChatCapacityQueuedByPool(ctx context.Context, staleSeconds int32) (CountChatCapacityQueuedByPoolRow, error)
	CountChatProjectMemoriesByProjectID(ctx context.Context, projectID uuid.UUID) (int64, error)
	CountChatProjectsByOwnerID(ctx context.Context, ownerID uuid.UUID) (int64, error)
	// Cheap queue-length check used by ChatMachine.Update when deciding
	// whether the chat is in a "1" sub-state.
	CountChatQueuedMessages(ctx context.Context, chatID uuid.UUID) (int64, error)
	CountConnectionLogs(ctx context.Context, arg CountConnectionLogsParams) (int64, error)
	// CountInProgressPrebuilds returns the number of in-progress prebuilds, grouped by preset ID and transition.
	// Prebuild considered in-progress if it's in the "pending", "starting", "stopping", or "deleting" state.
	CountInProgressPrebuilds(ctx context.Context) ([]CountInProgressPrebuildsRow, error)
	// Groups OIDC user links by their issuer prefix (the part before "||" in
	// linked_id) and returns a count for each. Empty linked_ids are reported
	// with an empty issuer_prefix. Used for analysis before resetting
	// mismatched links.
	CountOIDCLinkedIDsByIssuer(ctx context.Context) ([]CountOIDCLinkedIDsByIssuerRow, error)
	// CountPendingNonActivePrebuilds returns the number of pending prebuilds for non-active template versions
	CountPendingNonActivePrebuilds(ctx context.Context) ([]CountPendingNonActivePrebuildsRow, error)
	CountUnreadInboxNotificationsByUserID(ctx context.Context, userID uuid.UUID) (int64, error)
	CreateUserSecret(ctx context.Context, arg CreateUserSecretParams) (UserSecret, error)
	CustomRoles(ctx context.Context, arg CustomRolesParams) ([]CustomRole, error)
	DeleteAIGatewayKey(ctx context.Context, id uuid.UUID) (DeleteAIGatewayKeyRow, error)
	DeleteAIProviderByID(ctx context.Context, id uuid.UUID) error
	DeleteAIProviderKey(ctx context.Context, id uuid.UUID) error
	DeleteAPIKeyByID(ctx context.Context, id string) error
	// Returns sql.ErrNoRows when the delete removed nothing, so a caller can make
	// this the arbiter of single use. A prior read cannot arbitrate: its result is
	// stale the moment it returns.
	//
	// Concurrent deletes are arbitrated at READ COMMITTED, the default isolation
	// level: the second transaction waits for the first, then removes nothing.
	// SERIALIZABLE would abort and retry it instead.
	DeleteAPIKeyByIDReturningRow(ctx context.Context, id string) (APIKey, error)
	DeleteAPIKeysByUserID(ctx context.Context, userID uuid.UUID) error
	// Deletes all heartbeat rows for the chat. Used during ownership
	// transitions that abandon a lease.
	DeleteAllChatHeartbeats(ctx context.Context, chatID uuid.UUID) error
	DeleteAllChatQueuedMessages(ctx context.Context, chatID uuid.UUID) error
	DeleteAllChatQueuedMessagesReturningCount(ctx context.Context, chatID uuid.UUID) (int64, error)
	DeleteAllTailnetTunnels(ctx context.Context, arg DeleteAllTailnetTunnelsParams) ([]DeleteAllTailnetTunnelsRow, error)
	// Deletes all existing webpush subscriptions.
	// This should be called when the VAPID keypair is regenerated, as the old
	// keypair will no longer be valid and all existing subscriptions will need to
	// be recreated.
	DeleteAllWebpushSubscriptions(ctx context.Context) error
	DeleteApplicationConnectAPIKeysByUserID(ctx context.Context, userID uuid.UUID) error
	// Clears a chat's pinned context resources. Used as the first half of a
	// clear-then-copy re-pin, and on its own when the chat's current agent
	// has no snapshot.
	DeleteChatContextResourcesByChatID(ctx context.Context, chatID uuid.UUID) error
	// Deletes debug runs (and their cascaded steps) whose message IDs
	// exceed the cutoff. The started_before bound prevents retried
	// cleanup from deleting runs created by a replacement turn that
	// raced ahead of the retry window.
	DeleteChatDebugDataAfterMessageID(ctx context.Context, arg DeleteChatDebugDataAfterMessageIDParams) (int64, error)
	// The started_before bound prevents retried cleanup from deleting
	// runs created by a replacement turn that races ahead of the retry
	// window (for example, after an unarchive races with a pending
	// archive-cleanup retry).
	DeleteChatDebugDataByChatID(ctx context.Context, arg DeleteChatDebugDataByChatIDParams) (int64, error)
	DeleteChatMCPServersByChatIDExcludingSlugs(ctx context.Context, arg DeleteChatMCPServersByChatIDExcludingSlugsParams) error
	DeleteChatModelConfigByID(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
	DeleteChatOrganizationModelOverride(ctx context.Context, arg DeleteChatOrganizationModelOverrideParams) error
	DeleteChatProjectByID(ctx context.Context, id uuid.UUID) error
	DeleteChatProjectInstructionsByProjectID(ctx context.Context, projectID uuid.UUID) error
	DeleteChatProjectMemoryByID(ctx context.Context, id uuid.UUID) error
	DeleteChatProjectMemoryByName(ctx context.Context, arg DeleteChatProjectMemoryByNameParams) (ChatProjectMemory, error)
	DeleteChatQueuedMessage(ctx context.Context, arg DeleteChatQueuedMessageParams) error
	// Deletes a queued message, scoped to the parent chat. Returns the
	// number of affected rows so callers can detect missing rows without
	// a follow-up read.
	DeleteChatQueuedMessageReturningCount(ctx context.Context, arg DeleteChatQueuedMessageReturningCountParams) (int64, error)
	DeleteCryptoKey(ctx context.Context, arg DeleteCryptoKeyParams) (CryptoKey, error)
	DeleteCustomRole(ctx context.Context, arg DeleteCustomRoleParams) error
	DeleteExpiredAPIKeys(ctx context.Context, arg DeleteExpiredAPIKeysParams) (int64, error)
	DeleteExternalAuthLink(ctx context.Context, arg DeleteExternalAuthLinkParams) error
	DeleteGroupAIBudget(ctx context.Context, groupID uuid.UUID) (GroupAIBudget, error)
	DeleteGroupByID(ctx context.Context, id uuid.UUID) error
	DeleteGroupMemberFromGroup(ctx context.Context, arg DeleteGroupMemberFromGroupParams) error
	DeleteLicense(ctx context.Context, id int32) (int32, error)
	DeleteMCPServerConfigByID(ctx context.Context, id uuid.UUID) error
	DeleteMCPServerUserToken(ctx context.Context, arg DeleteMCPServerUserTokenParams) error
	DeleteMCPServerUserTokensByConfigID(ctx context.Context, mcpServerConfigID uuid.UUID) error
	DeleteOAuth2ProviderAppByClientID(ctx context.Context, id uuid.UUID) error
	DeleteOAuth2ProviderAppByID(ctx context.Context, id uuid.UUID) error
	// Returns sql.ErrNoRows when the delete removed nothing, so a caller can make
	// this the arbiter of single use. A prior read cannot arbitrate: its result is
	// stale the moment it returns.
	//
	// Concurrent deletes are arbitrated at READ COMMITTED, the default isolation
	// level: the second transaction waits for the first, then removes nothing.
	// SERIALIZABLE would abort and retry it instead.
	DeleteOAuth2ProviderAppCodeByID(ctx context.Context, id uuid.UUID) (OAuth2ProviderAppCode, error)
	DeleteOAuth2ProviderAppCodesByAppAndUserID(ctx context.Context, arg DeleteOAuth2ProviderAppCodesByAppAndUserIDParams) error
	DeleteOAuth2ProviderAppSecretByID(ctx context.Context, id uuid.UUID) error
	// Filters directly on app_id rather than joining through app_secret_id,
	// since app_secret_id is NULL for public (secretless) clients and would
	// silently exclude their tokens from this delete.
	DeleteOAuth2ProviderAppTokensByAppAndUserID(ctx context.Context, arg DeleteOAuth2ProviderAppTokensByAppAndUserIDParams) error
	// Cumulative count.
	DeleteOldAIBridgeRecords(ctx context.Context, beforeTime time.Time) (int64, error)
	DeleteOldAuditLogConnectionEvents(ctx context.Context, arg DeleteOldAuditLogConnectionEventsParams) error
	// Deletes old audit logs based on retention policy, excluding deprecated
	// connection events (connect, disconnect, open, close) which are handled
	// separately by DeleteOldAuditLogConnectionEvents.
	DeleteOldAuditLogs(ctx context.Context, arg DeleteOldAuditLogsParams) (int64, error)
	// Deletes boundary logs older than the given time, bounded by a row limit
	// to avoid long-running transactions.
	DeleteOldBoundaryLogs(ctx context.Context, arg DeleteOldBoundaryLogsParams) (int64, error)
	// Deletes boundary sessions that have aged past retention and no longer
	// have any associated logs.
	DeleteOldBoundarySessions(ctx context.Context, arg DeleteOldBoundarySessionsParams) (int64, error)
	// updated_at is the retention clock, so the window starts after the run
	// stops being written to.
	// Intentionally no finished_at IS NOT NULL guard: abandoned in-flight rows
	// older than the cutoff are also purged.
	DeleteOldChatDebugRuns(ctx context.Context, arg DeleteOldChatDebugRunsParams) (int64, error)
	// Deletes chats that have been archived for longer than the given
	// threshold. Active (non-archived) chats are never deleted.
	// All chat-scoped child tables are removed via ON DELETE CASCADE.
	// Parent/root references on child chats are SET NULL.
	DeleteOldChats(ctx context.Context, arg DeleteOldChatsParams) (int64, error)
	DeleteOldConnectionLogs(ctx context.Context, arg DeleteOldConnectionLogsParams) (int64, error)
	// Delete all notification messages which have not been updated for over a week.
	DeleteOldNotificationMessages(ctx context.Context) error
	// Delete provisioner daemons that have been created at least a week ago
	// and have not connected to coderd since a week.
	// A provisioner daemon with "zeroed" last_seen_at column indicates possible
	// connectivity issues (no provisioner daemon activity since registration).
	DeleteOldProvisionerDaemons(ctx context.Context) error
	// Deletes old telemetry locks from the telemetry_locks table.
	DeleteOldTelemetryLocks(ctx context.Context, periodEndingAtBefore time.Time) error
	// If an agent hasn't connected within the retention period, we purge its logs.
	// Exception: if the logs are related to the latest build, we keep those around.
	// Logs can take up a lot of space, so it's important we clean up frequently.
	DeleteOldWorkspaceAgentLogs(ctx context.Context, threshold time.Time) (int64, error)
	DeleteOldWorkspaceAgentStats(ctx context.Context) error
	DeleteOldWorkspaceBuildOrchestrations(ctx context.Context, arg DeleteOldWorkspaceBuildOrchestrationsParams) (int64, error)
	DeleteOrganizationMember(ctx context.Context, arg DeleteOrganizationMemberParams) error
	DeleteOrganizationSkillByOrganizationIDAndName(ctx context.Context, arg DeleteOrganizationSkillByOrganizationIDAndNameParams) (Skill, error)
	DeleteProvisionerKey(ctx context.Context, id uuid.UUID) error
	DeleteReplicasUpdatedBefore(ctx context.Context, updatedAt time.Time) error
	DeleteRuntimeConfig(ctx context.Context, key string) error
	DeleteStaleChatHeartbeats(ctx context.Context, staleSeconds int32) (int64, error)
	// Deletes any resources for the agent whose source is not in the
	// supplied active set. Atomic alongside the snapshot upsert so the
	// stored snapshot and resource rows always agree.
	DeleteStaleWorkspaceAgentContextResources(ctx context.Context, arg DeleteStaleWorkspaceAgentContextResourcesParams) error
	DeleteTailnetPeer(ctx context.Context, arg DeleteTailnetPeerParams) (DeleteTailnetPeerRow, error)
	DeleteTailnetTunnel(ctx context.Context, arg DeleteTailnetTunnelParams) (DeleteTailnetTunnelRow, error)
	DeleteUnlinkedChatFilesByIDs(ctx context.Context, arg DeleteUnlinkedChatFilesByIDsParams) (int64, error)
	DeleteUserAIBudgetOverride(ctx context.Context, userID uuid.UUID) (UserAIBudgetOverride, error)
	DeleteUserAIProviderKey(ctx context.Context, arg DeleteUserAIProviderKeyParams) error
	DeleteUserAIProviderKeysByProviderID(ctx context.Context, aiProviderID uuid.UUID) error
	DeleteUserChatCompactionThreshold(ctx context.Context, arg DeleteUserChatCompactionThresholdParams) error
	DeleteUserSecretByUserIDAndName(ctx context.Context, arg DeleteUserSecretByUserIDAndNameParams) (UserSecret, error)
	DeleteUserSkillByUserIDAndName(ctx context.Context, arg DeleteUserSkillByUserIDAndNameParams) (Skill, error)
	DeleteWebpushSubscriptionByUserIDAndEndpoint(ctx context.Context, arg DeleteWebpushSubscriptionByUserIDAndEndpointParams) error
	DeleteWebpushSubscriptions(ctx context.Context, ids []uuid.UUID) error
	DeleteWorkspaceACLByID(ctx context.Context, id uuid.UUID) error
	DeleteWorkspaceACLsByOrganization(ctx context.Context, arg DeleteWorkspaceACLsByOrganizationParams) error
	DeleteWorkspaceAgentPortShare(ctx context.Context, arg DeleteWorkspaceAgentPortShareParams) error
	DeleteWorkspaceAgentPortSharesByTemplate(ctx context.Context, templateID uuid.UUID) error
	// Soft-deletes a single sub-agent (a child agent such as a devcontainer
	// agent). Called from the DeleteSubAgent RPC when a sub-agent is torn
	// down, which can happen mid-build without a full workspace rebuild.
	//
	// Agent context rows are hard-deleted for the same reason as in
	// SoftDeletePriorWorkspaceAgents: they only describe live agents, the
	// rebuild-time soft-delete queries skip already-deleted agents, and
	// agents are never hard-deleted, so the rows would otherwise orphan
	// forever.
	DeleteWorkspaceSubAgentByID(ctx context.Context, id uuid.UUID) error
	// Disable foreign keys and triggers for all tables.
	// Deprecated: disable foreign keys was created to aid in migrating off
	// of the test-only in-memory database. Do not use this in new code.
	DisableForeignKeysAndTriggers(ctx context.Context) error
	EnqueueNotificationMessage(ctx context.Context, arg EnqueueNotificationMessageParams) error
	// Firstly, collect api_keys owned by the prebuilds user that correlate
	// to workspaces no longer owned by the prebuilds user.
	// Next, collect api_keys that belong to the prebuilds user but have no token name.
	// These were most likely created via 'coder login' as the prebuilds user.
	ExpirePrebuildsAPIKeys(ctx context.Context, now time.Time) error
	// Returns per-user, per-group, per-model, per-provider aggregated AI spend for
	// @organization_id over the [period_start, period_end) window. Spend is
	// attributed through the token usage's effective group, and rows are bucketed
	// by the token usage created_at, matching how ai_user_daily_spend is derived.
	ExportOrganizationAISpend(ctx context.Context, arg ExportOrganizationAISpendParams) ([]ExportOrganizationAISpendRow, error)
	FavoriteWorkspace(ctx context.Context, id uuid.UUID) error
	FetchMemoryResourceMonitorsByAgentID(ctx context.Context, agentID uuid.UUID) (WorkspaceAgentMemoryResourceMonitor, error)
	FetchMemoryResourceMonitorsUpdatedAfter(ctx context.Context, updatedAt time.Time) ([]WorkspaceAgentMemoryResourceMonitor, error)
	// This is used to build up the notification_message's JSON payload.
	FetchNewMessageMetadata(ctx context.Context, arg FetchNewMessageMetadataParams) (FetchNewMessageMetadataRow, error)
	FetchVolumesResourceMonitorsByAgentID(ctx context.Context, agentID uuid.UUID) ([]WorkspaceAgentVolumeResourceMonitor, error)
	FetchVolumesResourceMonitorsUpdatedAfter(ctx context.Context, updatedAt time.Time) ([]WorkspaceAgentVolumeResourceMonitor, error)
	// Marks orphaned in-progress rows as interrupted so they do not stay
	// in a non-terminal state forever. The NOT IN list must match the
	// terminal statuses defined by ChatDebugStatus in codersdk/chats.go.
	//
	// The steps CTE also catches steps whose parent run was just finalized
	// (via run_id IN), because PostgreSQL data-modifying CTEs share the
	// same snapshot and cannot see each other's row updates. Without this,
	// a step with a recent updated_at would survive its run's finalization
	// and remain in 'in_progress' state permanently.
	//
	// @now is the caller's clock timestamp so that mock-clock tests stay
	// consistent with the @updated_before cutoff.
	FinalizeStaleChatDebugRows(ctx context.Context, arg FinalizeStaleChatDebugRowsParams) (FinalizeStaleChatDebugRowsRow, error)
	// FindMatchingPresetID finds a preset ID that is the largest exact subset of the provided parameters.
	// It returns the preset ID if a match is found, or NULL if no match is found.
	// The query finds presets where all preset parameters are present in the provided parameters,
	// and returns the preset with the most parameters (largest subset).
	FindMatchingPresetID(ctx context.Context, arg FindMatchingPresetIDParams) (uuid.UUID, error)
	// AI Gateway cost for one chat tree: the root chat plus every subagent
	// beneath it. The spawning chat's ID is recorded as the interception session
	// ID (see chatprovider.CoderHeaders), so a subagent's requests are attributed
	// to its parent rather than the root, and only whole trees can be summed. The
	// owner check guards against session-id collisions. Usage without an
	// effective group never reaches ai_user_daily_spend.
	GetAIBridgeChatCost(ctx context.Context, rootChatID uuid.UUID) (GetAIBridgeChatCostRow, error)
	GetAIBridgeInterceptionByID(ctx context.Context, id uuid.UUID) (AIBridgeInterception, error)
	// Look up the parent interception and the root of the thread by finding
	// which interception recorded a tool usage with the given tool call ID.
	// COALESCE ensures that if the parent has no thread_root_id (i.e. it IS
	// the root), we return its own ID as the root.
	GetAIBridgeInterceptionLineageByToolCallID(ctx context.Context, toolCallID string) (GetAIBridgeInterceptionLineageByToolCallIDRow, error)
	GetAIBridgeInterceptions(ctx context.Context) ([]AIBridgeInterception, error)
	// Returns the most contacted destination hosts for an AI session, ordered by
	// call count descending and limited to the top @limit_ rows. total_domains is
	// the number of distinct domains across the whole session, used to render a
	// "+N more" overflow beyond the returned rows. Only HTTP egress is considered;
	// dns/git/fs boundary logs do not carry a domain in the same shape.
	//
	// Windowing mirrors the network_calls aggregation in ListAIBridgeSessions:
	// each interception's boundary logs fall in the open interval (this seq, next
	// interception's seq) within the same firewall session. The exclusive lower
	// bound drops the interception's own LLM-provider call. next_seq considers all
	// interceptions in the firewall session so windows never bleed across AI
	// sessions that share one firewall session, and falls back to the maximum
	// sequence_number for the last interception so the window stays an
	// index-satisfiable range.
	GetAIBridgeSessionTopDomains(ctx context.Context, arg GetAIBridgeSessionTopDomainsParams) ([]GetAIBridgeSessionTopDomainsRow, error)
	GetAIBridgeTokenUsagesByInterceptionID(ctx context.Context, interceptionID uuid.UUID) ([]AIBridgeTokenUsage, error)
	GetAIBridgeToolUsagesByInterceptionID(ctx context.Context, interceptionID uuid.UUID) ([]AIBridgeToolUsage, error)
	GetAIBridgeUserPromptsByInterceptionID(ctx context.Context, interceptionID uuid.UUID) ([]AIBridgeUserPrompt, error)
	// Authenticates a standalone AI Gateway replica by its hashed key secret,
	// returning the matched key. The lookup is an exact match on a unique index,
	// so a returned row is itself proof the secret is valid.
	GetAIGatewayKeyByHashedSecret(ctx context.Context, hashedSecret []byte) (AIGatewayKey, error)
	// Returns the price in effect for the requested model, falling back to the
	// model reported by the provider when the requested model has no price.
	// Rows are ordered by model first, then by source, so the lookup order is:
	//   1. Custom price for the requested model.
	//   2. Price book price for the requested model.
	//   3. Custom price for the provider-reported model.
	//   4. Price book price for the provider-reported model.
	GetAIModelPriceByProviderModel(ctx context.Context, arg GetAIModelPriceByProviderModelParams) (AIModelPrice, error)
	// Returns the price in effect for each model, preferring a custom price over
	// the price book. Filtering by source narrows the rows considered first, so a
	// model carrying both prices reports the one from the named source.
	// The source 'all' reports every row instead. It joins the DISTINCT ON key, so
	// each source forms its own group and nothing collapses. Every other source
	// contributes the same constant, leaving the key as (provider, model).
	GetAIModelPrices(ctx context.Context, arg GetAIModelPricesParams) ([]AIModelPrice, error)
	GetAIProviderByID(ctx context.Context, id uuid.UUID) (AIProvider, error)
	// Lock the provider row until the model-config write completes. The
	// transaction alone does not stop a concurrent soft-delete or disable
	// between validation and writing the model config reference.
	GetAIProviderByIDForReferenceLock(ctx context.Context, id uuid.UUID) (AIProvider, error)
	GetAIProviderByName(ctx context.Context, name string) (AIProvider, error)
	// Returns the display metadata AI Gateway session viewers need to filter
	// interceptions by provider_name. Soft-deleted and disabled rows are
	// included because interceptions keep referencing them. When a name has
	// been reused, the live row wins so current metadata is shown.
	GetAIProviderFilterOptions(ctx context.Context) ([]GetAIProviderFilterOptionsRow, error)
	GetAIProviderKeyByID(ctx context.Context, id uuid.UUID) (AIProviderKey, error)
	// Returns the provider IDs that have at least one provider-scoped key.
	GetAIProviderKeyPresence(ctx context.Context, providerIds []uuid.UUID) ([]uuid.UUID, error)
	// Returns AI provider key rows. By default, only rows whose parent
	// provider is live (deleted = FALSE) are returned, so the API list
	// handler can fetch every visible provider's keys in a single query.
	// The dbcrypt key rotation utility passes include_deleted=TRUE to
	// re-encrypt rows that belong to soft-deleted providers as well.
	GetAIProviderKeys(ctx context.Context, includeDeleted bool) ([]AIProviderKey, error)
	// Returns all keys for a provider, ordered by created_at ASC so the
	// oldest key is returned first. AI Bridge currently uses the oldest
	// key per provider; multiple keys are stored to support future
	// failover and rotation flows.
	GetAIProviderKeysByProviderID(ctx context.Context, providerID uuid.UUID) ([]AIProviderKey, error)
	// Returns all keys for the requested providers, ordered by provider then created_at ASC
	// so callers can select the oldest non-empty key per provider without issuing N queries.
	GetAIProviderKeysByProviderIDs(ctx context.Context, providerIds []uuid.UUID) ([]AIProviderKey, error)
	// Returns AI provider rows. Soft-deleted and disabled rows are excluded
	// unless include_deleted or include_disabled is set.
	GetAIProviders(ctx context.Context, arg GetAIProvidersParams) ([]AIProvider, error)
	GetAPIKeyByID(ctx context.Context, id string) (APIKey, error)
	// there is no unique constraint on empty token names
	GetAPIKeyByName(ctx context.Context, arg GetAPIKeyByNameParams) (APIKey, error)
	GetAPIKeysByLoginType(ctx context.Context, arg GetAPIKeysByLoginTypeParams) ([]APIKey, error)
	GetAPIKeysByUserID(ctx context.Context, arg GetAPIKeysByUserIDParams) ([]APIKey, error)
	GetAPIKeysLastUsedAfter(ctx context.Context, lastUsed time.Time) ([]APIKey, error)
	GetActiveAISeatCount(ctx context.Context) (int64, error)
	GetActiveChatsByAgentID(ctx context.Context, agentID uuid.UUID) ([]Chat, error)
	GetActivePresetPrebuildSchedules(ctx context.Context) ([]TemplateVersionPresetPrebuildSchedule, error)
	GetActiveUserCount(ctx context.Context, includeSystem bool) (int64, error)
	// Returns the authorization roles (site and org-scoped, including implied
	// member roles and organization default roles) and the group memberships
	// for every active, non-deleted user who is neither a system user nor a
	// service account, matching the GetActiveUserCount population.
	// Must stay semantically in sync with GetAuthorizationUserRoles;
	// TestGetActiveUsersAuthorizationRolesParity enforces this.
	GetActiveUsersAuthorizationRoles(ctx context.Context) ([]GetActiveUsersAuthorizationRolesRow, error)
	GetActiveWorkspaceBuildsByTemplateID(ctx context.Context, templateID uuid.UUID) ([]WorkspaceBuild, error)
	// For PG Coordinator HTMLDebug
	GetAllTailnetCoordinators(ctx context.Context) ([]TailnetCoordinator, error)
	GetAllTailnetPeers(ctx context.Context) ([]TailnetPeer, error)
	GetAllTailnetTunnels(ctx context.Context) ([]TailnetTunnel, error)
	// Atomic read+delete prevents replicas that flush between a separate read and
	// reset from having their data deleted before the next snapshot. Uses a common
	// table expression with DELETE...RETURNING so the rows we sum are exactly the
	// rows we delete. Stale rows are excluded from the sum but still deleted.
	GetAndResetBoundaryUsageSummary(ctx context.Context, maxStalenessMs int64) (GetAndResetBoundaryUsageSummaryRow, error)
	GetAnnouncementBanners(ctx context.Context) (string, error)
	GetApplicationName(ctx context.Context) (string, error)
	// GetAuditLogsBefore retrieves `row_limit` number of audit logs before the provided
	// ID.
	GetAuditLogsOffset(ctx context.Context, arg GetAuditLogsOffsetParams) ([]GetAuditLogsOffsetRow, error)
	// GetAuthenticatedWorkspaceAgentAndBuildByAuthToken returns an authenticated
	// workspace agent and its associated build. During normal operation, this is
	// the latest build. During shutdown, this may be the previous START build while
	// the STOP build is executing, allowing shutdown scripts to authenticate (see
	// issue #19467).
	GetAuthenticatedWorkspaceAgentAndBuildByAuthToken(ctx context.Context, authToken uuid.UUID) (GetAuthenticatedWorkspaceAgentAndBuildByAuthTokenRow, error)
	// This function returns roles for authorization purposes. Implied member roles
	// are included.
	// Must stay semantically in sync with GetActiveUsersAuthorizationRoles
	// (implied member roles, org default roles, groups);
	// TestGetActiveUsersAuthorizationRolesParity enforces this.
	GetAuthorizationUserRoles(ctx context.Context, userID uuid.UUID) (GetAuthorizationUserRolesRow, error)
	// Rechecks one root chat against the GetAutoArchiveInactiveChatCandidates
	// filters. Auto-archive calls it inside the archive transaction after the
	// family rows are locked, so activity that landed after the unlocked
	// candidate read is observed. Returns no rows when the chat no longer
	// qualifies. Keep the filters in sync with
	// GetAutoArchiveInactiveChatCandidates.
	GetAutoArchiveInactiveChatCandidateByID(ctx context.Context, arg GetAutoArchiveInactiveChatCandidateByIDParams) (GetAutoArchiveInactiveChatCandidateByIDRow, error)
	// Returns read-only root chat candidates for state-machine-backed
	// auto-archive. Activity is computed across the root family. The query
	// limits roots, not total family members.
	GetAutoArchiveInactiveChatCandidates(ctx context.Context, arg GetAutoArchiveInactiveChatCandidatesParams) ([]GetAutoArchiveInactiveChatCandidatesRow, error)
	GetBoundaryLogByID(ctx context.Context, id uuid.UUID) (BoundaryLog, error)
	GetBoundarySessionByID(ctx context.Context, id uuid.UUID) (GetBoundarySessionByIDRow, error)
	GetChatACLByID(ctx context.Context, id uuid.UUID) (GetChatACLByIDRow, error)
	// GetChatAdvisorConfig returns the deployment-wide runtime configuration
	// for the experimental chat advisor as a JSON blob. Callers unmarshal the
	// result into codersdk.AdvisorConfig. Returns '{}' when unset so zero
	// values apply by default.
	GetChatAdvisorConfig(ctx context.Context) (string, error)
	// Auto-archive window in days. 0 disables.
	GetChatAutoArchiveDays(ctx context.Context, defaultAutoArchiveDays int32) (int32, error)
	GetChatByID(ctx context.Context, id uuid.UUID) (Chat, error)
	GetChatByIDForShare(ctx context.Context, id uuid.UUID) (Chat, error)
	GetChatByIDForUpdate(ctx context.Context, id uuid.UUID) (Chat, error)
	GetChatComputerUseProvider(ctx context.Context) (string, error)
	// GetChatDebugLoggingAllowUsers returns the runtime admin setting that
	// allows users to opt into chat debug logging when the deployment does
	// not already force debug logging on globally.
	GetChatDebugLoggingAllowUsers(ctx context.Context) (bool, error)
	// Chat debug run retention window in days. 0 disables.
	GetChatDebugRetentionDays(ctx context.Context, defaultDebugRetentionDays int32) (int32, error)
	GetChatDebugRunByID(ctx context.Context, id uuid.UUID) (ChatDebugRun, error)
	// Returns the most recent debug runs for a chat, ordered newest-first.
	// Callers must supply an explicit limit to avoid unbounded result sets.
	GetChatDebugRunsByChatID(ctx context.Context, arg GetChatDebugRunsByChatIDParams) ([]ChatDebugRun, error)
	GetChatDebugStepsByRunID(ctx context.Context, runID uuid.UUID) ([]ChatDebugStep, error)
	GetChatDesktopEnabled(ctx context.Context) (bool, error)
	// Returns aggregate PR counts across all agent chats for telemetry.
	// Deduplicates by PR URL so forked chats referencing the same pull
	// request are counted once (using the most recently refreshed state).
	// Total is derived from the three recognized state buckets and
	// always equals open + merged + closed; other non-NULL states are
	// intentionally excluded from these aggregates.
	GetChatDiffStatusSummary(ctx context.Context) (GetChatDiffStatusSummaryRow, error)
	GetChatDiffStatusesByChatID(ctx context.Context, chatID uuid.UUID) ([]ChatDiffStatus, error)
	GetChatDiffStatusesByChatIDs(ctx context.Context, chatIds []uuid.UUID) ([]ChatDiffStatus, error)
	// Returns the chat IDs of every chat in a family (root + all children)
	// in deterministic order. The id parameter must be the root id; the
	// query does not walk up from a child.
	GetChatFamilyIDsByRootID(ctx context.Context, id uuid.UUID) ([]uuid.UUID, error)
	GetChatFileByID(ctx context.Context, id uuid.UUID) (ChatFile, error)
	// GetChatFileDataPrefixesByIDs returns a bounded prefix of each
	// file's content, keeping full blobs out of server memory. Owner and
	// organization columns support row-level authorization.
	GetChatFileDataPrefixesByIDs(ctx context.Context, arg GetChatFileDataPrefixesByIDsParams) ([]GetChatFileDataPrefixesByIDsRow, error)
	// GetChatFileMetadataByChatID returns lightweight file metadata for
	// all files linked to a chat. The data column is excluded to avoid
	// loading file content.
	GetChatFileMetadataByChatID(ctx context.Context, chatID uuid.UUID) ([]GetChatFileMetadataByChatIDRow, error)
	GetChatFilesByIDs(ctx context.Context, ids []uuid.UUID) ([]ChatFile, error)
	GetChatGatewayAPIKey(ctx context.Context, arg GetChatGatewayAPIKeyParams) (APIKey, error)
	GetChatHeartbeat(ctx context.Context, arg GetChatHeartbeatParams) (ChatHeartbeat, error)
	// GetChatIncludeDefaultSystemPrompt preserves the legacy default
	// for deployments created before the explicit include-default toggle.
	// When the toggle is unset, a non-empty custom prompt implies false;
	// otherwise the setting defaults to true.
	GetChatIncludeDefaultSystemPrompt(ctx context.Context) (bool, error)
	GetChatMCPServersByChatID(ctx context.Context, chatID uuid.UUID) ([]ChatMCPServer, error)
	GetChatMCPServersByChatOwnerID(ctx context.Context, ownerID uuid.UUID) ([]ChatMCPServer, error)
	GetChatMessageByID(ctx context.Context, id int64) (ChatMessage, error)
	// Aggregates message-level metrics per chat for messages created
	// after the given timestamp. Uses message created_at so that
	// ongoing activity in long-running chats is captured each window.
	GetChatMessageSummariesPerChat(ctx context.Context, createdAfter time.Time) ([]GetChatMessageSummariesPerChatRow, error)
	// Ordered by id to match the @after_id cursor. created_at is the transaction
	// start time, so it can disagree with append order when a transaction takes the
	// chat row lock later than one that started after it.
	GetChatMessagesByChatID(ctx context.Context, arg GetChatMessagesByChatIDParams) ([]ChatMessage, error)
	GetChatMessagesByChatIDAscPaginated(ctx context.Context, arg GetChatMessagesByChatIDAscPaginatedParams) ([]ChatMessage, error)
	GetChatMessagesByChatIDDescPaginated(ctx context.Context, arg GetChatMessagesByChatIDDescPaginatedParams) ([]ChatMessage, error)
	// Stream deltas and reset snapshots must use the same message order.
	GetChatMessagesByRevisionForStream(ctx context.Context, arg GetChatMessagesByRevisionForStreamParams) ([]ChatMessage, error)
	// The compaction boundary and final ordering must use the same key so tool
	// results remain after their assistant calls.
	GetChatMessagesForPromptByChatID(ctx context.Context, chatID uuid.UUID) ([]ChatMessage, error)
	GetChatModelConfigByID(ctx context.Context, id uuid.UUID) (ChatModelConfig, error)
	GetChatModelConfigs(ctx context.Context, organizationID uuid.UUID) ([]ChatModelConfig, error)
	// All live configs in one organization, unfiltered. Consumed ONLY by
	// ensureDefaultChatModelConfig's default-election read inside the write
	// transaction; authorization is the caller's update-in-org check that every
	// path reaching the election already requires. No @authorize_filter.
	GetChatModelConfigsByOrganization(ctx context.Context, organizationID uuid.UUID) ([]ChatModelConfig, error)
	// deleted = false guarantees ai_provider_id is non-null, so INNER JOIN is safe.
	GetChatModelConfigsForTelemetry(ctx context.Context) ([]GetChatModelConfigsForTelemetryRow, error)
	GetChatOrganizationModelOverride(ctx context.Context, arg GetChatOrganizationModelOverrideParams) (ChatOrganizationModelOverride, error)
	GetChatOrganizationModelOverrides(ctx context.Context, organizationID uuid.UUID) ([]ChatOrganizationModelOverride, error)
	// Returns every non-deleted organization's override for one context together
	// with the resolved model and provider, for bulk consumers such as telemetry.
	// model_available mirrors GetEnabledChatModelConfigByID: it is false when the
	// referenced config or its provider is disabled or deleted.
	GetChatOrganizationModelOverridesByContext(ctx context.Context, argContext string) ([]GetChatOrganizationModelOverridesByContextRow, error)
	GetChatOrganizationSystemPrompt(ctx context.Context, organizationID uuid.UUID) (ChatOrganizationSystemPrompt, error)
	// GetChatPersonalModelOverridesEnabled returns whether users may configure
	// personal chat model overrides. It defaults to false when unset.
	GetChatPersonalModelOverridesEnabled(ctx context.Context) (bool, error)
	GetChatPlanModeInstructions(ctx context.Context) (string, error)
	GetChatProjectByID(ctx context.Context, id uuid.UUID) (ChatProject, error)
	// Users are soft deleted, so ON DELETE SET NULL never clears updated_by.
	// Excluding deleted users here reports their edits as anonymous.
	GetChatProjectInstructionsByProjectID(ctx context.Context, projectID uuid.UUID) (GetChatProjectInstructionsByProjectIDRow, error)
	GetChatProjectMemoriesByProjectID(ctx context.Context, projectID uuid.UUID) ([]GetChatProjectMemoriesByProjectIDRow, error)
	GetChatProjectMemoryByID(ctx context.Context, id uuid.UUID) (GetChatProjectMemoryByIDRow, error)
	GetChatProjectMemoryByName(ctx context.Context, arg GetChatProjectMemoryByNameParams) (GetChatProjectMemoryByNameRow, error)
	GetChatProjectsByOwnerID(ctx context.Context, ownerID uuid.UUID) ([]ChatProject, error)
	// Pool fullness distinguishes capacity waits from worker pickup delays.
	GetChatQueuedForCapacity(ctx context.Context, arg GetChatQueuedForCapacityParams) (bool, error)
	GetChatQueuedMessageByID(ctx context.Context, arg GetChatQueuedMessageByIDParams) (ChatQueuedMessage, error)
	// Returns the queue head (lowest position, then lowest id).
	GetChatQueuedMessageHead(ctx context.Context, chatID uuid.UUID) (ChatQueuedMessage, error)
	// Returns the queue in promotion order (position ASC, id ASC), the same
	// order chatstate uses to pick the head. Clients read the queue through
	// this query, so it must not order by created_at: promoting a message
	// changes only its position, and concurrent senders can commit with
	// created_at and position in opposite orders.
	GetChatQueuedMessages(ctx context.Context, chatID uuid.UUID) ([]ChatQueuedMessage, error)
	// Returns queued messages in state-machine order (position ASC, id ASC).
	GetChatQueuedMessagesByPosition(ctx context.Context, chatID uuid.UUID) ([]ChatQueuedMessage, error)
	// Returns the chat retention period in days. Chats archived longer
	// than this and orphaned chat files older than this are purged by
	// dbpurge. Returns 30 (days) when no value has been configured.
	// A value of 0 disables chat purging entirely.
	GetChatRetentionDays(ctx context.Context) (int32, error)
	// GetChatSiteConfigValue returns raw text and row presence for an audited chat site configuration.
	GetChatSiteConfigValue(ctx context.Context, configKey string) (GetChatSiteConfigValueRow, error)
	GetChatStreamSyncRows(ctx context.Context, ids []uuid.UUID) ([]GetChatStreamSyncRowsRow, error)
	GetChatSystemPrompt(ctx context.Context) (string, error)
	// GetChatSystemPromptConfig returns both chat system prompt settings in a
	// single read to avoid torn reads between separate site-config lookups.
	// The include-default fallback preserves the legacy behavior where a
	// non-empty custom prompt implied opting out before the explicit toggle
	// existed.
	GetChatSystemPromptConfig(ctx context.Context) (GetChatSystemPromptConfigRow, error)
	GetChatTurnStartID(ctx context.Context, arg GetChatTurnStartIDParams) (int64, error)
	GetChatUserModelOverride(ctx context.Context, arg GetChatUserModelOverrideParams) (ChatUserModelOverride, error)
	GetChatUserModelOverrides(ctx context.Context, arg GetChatUserModelOverridesParams) ([]ChatUserModelOverride, error)
	// Returns the concatenated text of each user-visible user prompt in a
	// chat, newest first. Used by the composer to populate the up/down
	// arrow prompt-history cycle. Non-text parts (tool calls, files,
	// attachments, ...) are excluded; messages whose text payload is
	// entirely whitespace are dropped so cycling never lands on a blank
	// entry. The jsonb_typeof guard skips legacy V0 rows whose content is
	// a scalar JSON string (predates migration 000434) so the lateral
	// jsonb_array_elements never raises "cannot extract elements from a
	// scalar". Backed by idx_chat_messages_user_prompts.
	GetChatUserPromptsByChatID(ctx context.Context, arg GetChatUserPromptsByChatIDParams) ([]GetChatUserPromptsByChatIDRow, error)
	// Returns a bounded, pool-interleaved set of chats that workers may acquire.
	// Within each pool, interrupting chats finish active work first, and
	// requires-action chats follow so their runner can enforce the action deadline
	// before new generations start. Pools are interleaved by that per-pool rank, so
	// a saturated pool's refused high-priority rows cannot crowd the other pool's
	// candidates out of the limit.
	GetChatWorkerAcquisitionCandidates(ctx context.Context, arg GetChatWorkerAcquisitionCandidatesParams) ([]GetChatWorkerAcquisitionCandidatesRow, error)
	// Returns the global TTL for chat workspaces as a Go duration string.
	// Returns "0s" (disabled) when no value has been configured.
	GetChatWorkspaceTTL(ctx context.Context) (string, error)
	GetChats(ctx context.Context, arg GetChatsParams) ([]GetChatsRow, error)
	GetChatsByChatFileID(ctx context.Context, fileID uuid.UUID) ([]Chat, error)
	GetChatsByIDsForRunnerSync(ctx context.Context, ids []uuid.UUID) ([]Chat, error)
	GetChatsByWorkspaceIDs(ctx context.Context, ids []uuid.UUID) ([]Chat, error)
	// Retrieves chats updated after the given timestamp for telemetry
	// snapshot collection. Uses updated_at so that long-running chats
	// still appear in each snapshot window while they are active.
	GetChatsUpdatedAfter(ctx context.Context, updatedAfter time.Time) ([]GetChatsUpdatedAfterRow, error)
	// Fetches child chats of the given parents, optionally filtered by
	// archive state (NULL = all, true/false = match). The archive
	// invariant (parent archived implies child archived) is enforced
	// at write time, not here.
	GetChildChatsByParentIDs(ctx context.Context, arg GetChildChatsByParentIDsParams) ([]GetChildChatsByParentIDsRow, error)
	GetCodernautsEnabled(ctx context.Context) (bool, error)
	GetConnectionLogsOffset(ctx context.Context, arg GetConnectionLogsOffsetParams) ([]GetConnectionLogsOffsetRow, error)
	GetCryptoKeyByFeatureAndSequence(ctx context.Context, arg GetCryptoKeyByFeatureAndSequenceParams) (CryptoKey, error)
	GetCryptoKeys(ctx context.Context) ([]CryptoKey, error)
	GetCryptoKeysByFeature(ctx context.Context, feature CryptoKeyFeature) ([]CryptoKey, error)
	GetDBCryptKeys(ctx context.Context) ([]DBCryptKey, error)
	GetDERPMeshKey(ctx context.Context) (string, error)
	// Returns the current database timestamp. Used so transitions that
	// record deadlines or heartbeats rely on a clock that is consistent
	// with the database rather than the caller's local clock.
	GetDatabaseNow(ctx context.Context) (time.Time, error)
	GetDefaultChatModelConfig(ctx context.Context, organizationID uuid.UUID) (ChatModelConfig, error)
	GetDefaultOrganization(ctx context.Context) (Organization, error)
	GetDefaultProxyConfig(ctx context.Context) (GetDefaultProxyConfigRow, error)
	// Returns the last deleted assistant message and the deleted rows after it.
	// Every visibility is included: a model-only row can hold a tool call's result.
	GetDeletedChatMessagesFromLastAssistant(ctx context.Context, arg GetDeletedChatMessagesFromLastAssistantParams) ([]ChatMessage, error)
	GetDeploymentID(ctx context.Context) (string, error)
	// The session count sum runs in its own subquery: decomposing session_counts
	// in the FROM clause would emit one row per app name and multiply the byte and
	// latency aggregates below. Summing per app name and folding the names into
	// families in Go keeps a session reported under a new name counted.
	GetDeploymentWorkspaceAgentStats(ctx context.Context, createdAt time.Time) (GetDeploymentWorkspaceAgentStatsRow, error)
	GetDeploymentWorkspaceAgentUsageStats(ctx context.Context, createdAt time.Time) (GetDeploymentWorkspaceAgentUsageStatsRow, error)
	GetDeploymentWorkspaceStats(ctx context.Context) (GetDeploymentWorkspaceStatsRow, error)
	GetEligibleProvisionerDaemonsByProvisionerJobIDs(ctx context.Context, provisionerJobIds []uuid.UUID) ([]GetEligibleProvisionerDaemonsByProvisionerJobIDsRow, error)
	// Providers can be disabled independently of their model configs.
	// Check both to ensure the selected config is actually usable.
	GetEnabledChatModelConfigByID(ctx context.Context, id uuid.UUID) (ChatModelConfig, error)
	GetEnabledChatModelConfigsByOrganization(ctx context.Context, organizationID uuid.UUID) ([]GetEnabledChatModelConfigsByOrganizationRow, error)
	GetEnabledMCPServerConfigsByOrganization(ctx context.Context, organizationID uuid.UUID) ([]MCPServerConfig, error)
	GetEnabledMCPServerConfigsByOrganizationAndIDs(ctx context.Context, arg GetEnabledMCPServerConfigsByOrganizationAndIDsParams) ([]MCPServerConfig, error)
	GetExperimentRule(ctx context.Context, experiment string) (string, error)
	// GetExperimentRules returns every stored runtime experiment rule, keyed by
	// the experiment name. starts_with is used instead of LIKE because '_' is a
	// LIKE wildcard.
	GetExperimentRules(ctx context.Context) ([]GetExperimentRulesRow, error)
	// GetExternalAgentTokensByTemplateID returns the auth tokens for all
	// non-deleted external agents on the latest build of every running workspace
	// of the given template. "Running" means the latest build has
	// transition=start and job_status=succeeded (matches the workspace-status
	// definition used by coderd/database/queries/workspaces.sql).
	// An owner_id of '00000000-0000-0000-0000-000000000000' (uuid.Nil) means
	// "all owners"; any other value restricts results to workspaces owned by
	// that user.
	GetExternalAgentTokensByTemplateID(ctx context.Context, arg GetExternalAgentTokensByTemplateIDParams) ([]GetExternalAgentTokensByTemplateIDRow, error)
	GetExternalAuthLink(ctx context.Context, arg GetExternalAuthLinkParams) (ExternalAuthLink, error)
	GetExternalAuthLinksByUserID(ctx context.Context, userID uuid.UUID) ([]ExternalAuthLink, error)
	GetFailedWorkspaceBuildsByTemplateID(ctx context.Context, arg GetFailedWorkspaceBuildsByTemplateIDParams) ([]GetFailedWorkspaceBuildsByTemplateIDRow, error)
	GetFileByHashAndCreator(ctx context.Context, arg GetFileByHashAndCreatorParams) (File, error)
	GetFileByID(ctx context.Context, id uuid.UUID) (File, error)
	// Get all templates that use a file.
	GetFileTemplates(ctx context.Context, fileID uuid.UUID) ([]GetFileTemplatesRow, error)
	// Fetches inbox notifications for a user filtered by templates and targets
	// param user_id: The user ID
	// param templates: The template IDs to filter by - the template_id = ANY(@templates::UUID[]) condition checks if the template_id is in the @templates array
	// param targets: The target IDs to filter by - the targets @> COALESCE(@targets, ARRAY[]::UUID[]) condition checks if the targets array (from the DB) contains all the elements in the @targets array
	// param read_status: The read status to filter by - can be any of 'ALL', 'UNREAD', 'READ'
	// param created_at_opt: The created_at timestamp to filter by. This parameter is usd for pagination - it fetches notifications created before the specified timestamp if it is not the zero value
	// param limit_opt: The limit of notifications to fetch. If the limit is not specified, it defaults to 25
	GetFilteredInboxNotificationsByUserID(ctx context.Context, arg GetFilteredInboxNotificationsByUserIDParams) ([]InboxNotification, error)
	GetForcedMCPServerConfigsByOrganization(ctx context.Context, organizationID uuid.UUID) ([]MCPServerConfig, error)
	GetGitSSHKey(ctx context.Context, userID uuid.UUID) (GitSSHKey, error)
	GetGroupAIBudget(ctx context.Context, groupID uuid.UUID) (GroupAIBudget, error)
	GetGroupByID(ctx context.Context, id uuid.UUID) (Group, error)
	GetGroupByOrgAndName(ctx context.Context, arg GetGroupByOrgAndNameParams) (Group, error)
	GetGroupMembers(ctx context.Context, includeSystem bool) ([]GroupMember, error)
	// Returns each user's AI spend attributed to the queried group, on or after
	// period_start until NOW. Only current members of the queried group are
	// returned. effective_spend_limit_micros and effective_limit_source describe
	// the user's effective budget when its group belongs to the queried group's
	// organization. The effective group falls back to the Everyone group, and
	// effective_group_id is null only when that group belongs to a different
	// organization than the queried group.
	// The period_start parameter is normalized to its UTC calendar day.
	// TODO(AIGOV-527): unify effective group resolution in a single place.
	// Spend is aggregated for the queried group, not the user's effective group.
	GetGroupMembersAISpend(ctx context.Context, arg GetGroupMembersAISpendParams) ([]GetGroupMembersAISpendRow, error)
	GetGroupMembersByGroupID(ctx context.Context, arg GetGroupMembersByGroupIDParams) ([]GroupMember, error)
	GetGroupMembersByGroupIDPaginated(ctx context.Context, arg GetGroupMembersByGroupIDPaginatedParams) ([]GetGroupMembersByGroupIDPaginatedRow, error)
	// Returns the total count of members in a group. Shows the total
	// count even if the caller does not have read access to ResourceGroupMember.
	// They only need ResourceGroup read access.
	GetGroupMembersCountByGroupID(ctx context.Context, arg GetGroupMembersCountByGroupIDParams) (int64, error)
	// Returns the total member count for each of the given group IDs in a
	// single query. Used to avoid N+1 lookups when listing many groups. Like
	// GetGroupMembersCountByGroupID, the count is returned even when the
	// caller does not have read access to individual group members.
	GetGroupMembersCountByGroupIDs(ctx context.Context, arg GetGroupMembersCountByGroupIDsParams) ([]GetGroupMembersCountByGroupIDsRow, error)
	// A limit of 0 means "no limit".
	GetGroups(ctx context.Context, arg GetGroupsParams) ([]GetGroupsRow, error)
	GetGroupsByOrganizationIDPaginated(ctx context.Context, arg GetGroupsByOrganizationIDPaginatedParams) ([]GetGroupsByOrganizationIDPaginatedRow, error)
	GetHealthSettings(ctx context.Context) (string, error)
	// Returns the highest group AI budget across the groups the user belongs to,
	// breaking ties by the earliest organization membership. Implements the
	// "highest" budget policy. group_members_expanded is a UNION of group_members
	// and organization_members, so the implicit "Everyone" group
	// (group_id == organization_id) is included. Returns no rows when the user has
	// no budgeted groups. Callers should treat sql.ErrNoRows as "no group budget".
	GetHighestGroupAIBudgetByUser(ctx context.Context, userID uuid.UUID) (GetHighestGroupAIBudgetByUserRow, error)
	GetInboxNotificationByID(ctx context.Context, id uuid.UUID) (InboxNotification, error)
	// Fetches inbox notifications for a user filtered by templates and targets
	// param user_id: The user ID
	// param read_status: The read status to filter by - can be any of 'ALL', 'UNREAD', 'READ'
	// param created_at_opt: The created_at timestamp to filter by. This parameter is usd for pagination - it fetches notifications created before the specified timestamp if it is not the zero value
	// param limit_opt: The limit of notifications to fetch. If the limit is not specified, it defaults to 25
	GetInboxNotificationsByUserID(ctx context.Context, arg GetInboxNotificationsByUserIDParams) ([]InboxNotification, error)
	// The returned id becomes both an AfterID cursor and last_read_message_id, so
	// "last" must use id order.
	GetLastChatMessageByRole(ctx context.Context, arg GetLastChatMessageByRoleParams) (ChatMessage, error)
	GetLastUpdateCheck(ctx context.Context) (string, error)
	GetLatestCryptoKeyByFeature(ctx context.Context, feature CryptoKeyFeature) (CryptoKey, error)
	GetLatestWorkspaceAgentContextSnapshot(ctx context.Context, workspaceAgentID uuid.UUID) (WorkspaceAgentContextSnapshot, error)
	GetLatestWorkspaceAppStatusByAppID(ctx context.Context, appID uuid.UUID) (WorkspaceAppStatus, error)
	// id DESC is a stability tiebreaker, not an insertion-order signal: back-to-back
	// inserts can share a created_at on platforms with coarse time.Now() resolution,
	// and id is a random UUID, so this only guarantees a deterministic pick, not the
	// later row. Callers must not depend on sub-microsecond recency here.
	GetLatestWorkspaceAppStatusesByWorkspaceIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceAppStatus, error)
	GetLatestWorkspaceBuildByWorkspaceID(ctx context.Context, workspaceID uuid.UUID) (WorkspaceBuild, error)
	GetLatestWorkspaceBuildWithStatusByWorkspaceID(ctx context.Context, workspaceID uuid.UUID) (GetLatestWorkspaceBuildWithStatusByWorkspaceIDRow, error)
	GetLatestWorkspaceBuildsByWorkspaceIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceBuild, error)
	GetLicenseByID(ctx context.Context, id int32) (License, error)
	GetLicenses(ctx context.Context) ([]License, error)
	GetLogoURL(ctx context.Context) (string, error)
	GetMCPServerConfigByID(ctx context.Context, id uuid.UUID) (MCPServerConfig, error)
	GetMCPServerConfigByIDForUpdate(ctx context.Context, id uuid.UUID) (MCPServerConfig, error)
	GetMCPServerConfigByOrganizationAndSlug(ctx context.Context, arg GetMCPServerConfigByOrganizationAndSlugParams) (MCPServerConfig, error)
	GetMCPServerConfigsByOrganization(ctx context.Context, organizationID uuid.UUID) ([]MCPServerConfig, error)
	GetMCPServerUserToken(ctx context.Context, arg GetMCPServerUserTokenParams) (MCPServerUserToken, error)
	GetMCPServerUserTokenByID(ctx context.Context, id uuid.UUID) (MCPServerUserToken, error)
	GetMCPServerUserTokensByUserID(ctx context.Context, userID uuid.UUID) ([]MCPServerUserToken, error)
	// Must be called from within a transaction. The row lock is released
	// when the transaction ends.
	GetNextPendingWorkspaceBuildOrchestrationForUpdate(ctx context.Context) (WorkspaceBuildOrchestration, error)
	GetNotificationMessagesByStatus(ctx context.Context, arg GetNotificationMessagesByStatusParams) ([]NotificationMessage, error)
	// Fetch the notification report generator log indicating recent activity.
	GetNotificationReportGeneratorLogByTemplate(ctx context.Context, templateID uuid.UUID) (NotificationReportGeneratorLog, error)
	GetNotificationTemplateByID(ctx context.Context, id uuid.UUID) (NotificationTemplate, error)
	GetNotificationTemplatesByKind(ctx context.Context, kind NotificationTemplateKind) ([]NotificationTemplate, error)
	GetNotificationsSettings(ctx context.Context) (string, error)
	GetOAuth2DCREnabled(ctx context.Context) (bool, error)
	GetOAuth2GithubDefaultEligible(ctx context.Context) (bool, error)
	// RFC 7591/7592 Dynamic Client Registration queries
	GetOAuth2ProviderAppByClientID(ctx context.Context, id uuid.UUID) (OAuth2ProviderApp, error)
	GetOAuth2ProviderAppByID(ctx context.Context, id uuid.UUID) (OAuth2ProviderApp, error)
	GetOAuth2ProviderAppByIDForUpdate(ctx context.Context, id uuid.UUID) (OAuth2ProviderApp, error)
	GetOAuth2ProviderAppCodeByID(ctx context.Context, id uuid.UUID) (OAuth2ProviderAppCode, error)
	GetOAuth2ProviderAppCodeByPrefix(ctx context.Context, secretPrefix []byte) (OAuth2ProviderAppCode, error)
	GetOAuth2ProviderAppSecretByID(ctx context.Context, id uuid.UUID) (OAuth2ProviderAppSecret, error)
	GetOAuth2ProviderAppSecretByPrefix(ctx context.Context, secretPrefix []byte) (OAuth2ProviderAppSecret, error)
	GetOAuth2ProviderAppSecretsByAppID(ctx context.Context, appID uuid.UUID) ([]OAuth2ProviderAppSecret, error)
	GetOAuth2ProviderAppTokenByAPIKeyID(ctx context.Context, apiKeyID string) (OAuth2ProviderAppToken, error)
	GetOAuth2ProviderAppTokenByPrefix(ctx context.Context, hashPrefix []byte) (OAuth2ProviderAppToken, error)
	GetOAuth2ProviderApps(ctx context.Context) ([]OAuth2ProviderApp, error)
	// Joins directly on oauth2_provider_app_tokens.app_id rather than through
	// app_secret_id, since app_secret_id is NULL for public (secretless) clients
	// and would silently exclude their tokens from this listing.
	GetOAuth2ProviderAppsByUserID(ctx context.Context, userID uuid.UUID) ([]GetOAuth2ProviderAppsByUserIDRow, error)
	// Locks candidate rows against foreign-key inserts for the transaction.
	GetOldUnlinkedChatFileIDs(ctx context.Context, arg GetOldUnlinkedChatFileIDsParams) ([]uuid.UUID, error)
	GetOrganizationByID(ctx context.Context, id uuid.UUID) (Organization, error)
	GetOrganizationByName(ctx context.Context, arg GetOrganizationByNameParams) (Organization, error)
	// Returns AI spend limits and aggregate spend for groups in @group_ids that
	// belong to @organization_id, on or after period_start until NOW.
	// spend_limit_micros is the per-member limit, null when the group has no budget.
	// total_spend_limit_micros is the combined budget of the members attributed to
	// the group, with each member's override replacing their share. System users
	// are excluded. It is null when the group has no budget.
	// The period_start parameter is normalized to its UTC calendar day.
	// TODO(AIGOV-527): unify effective group resolution in a single place.
	GetOrganizationGroupsAISpend(ctx context.Context, arg GetOrganizationGroupsAISpendParams) ([]GetOrganizationGroupsAISpendRow, error)
	GetOrganizationIDsByMemberIDs(ctx context.Context, ids []uuid.UUID) ([]GetOrganizationIDsByMemberIDsRow, error)
	GetOrganizationResourceCountByID(ctx context.Context, organizationID uuid.UUID) (GetOrganizationResourceCountByIDRow, error)
	GetOrganizationSkillByIDForUpdate(ctx context.Context, id uuid.UUID) (Skill, error)
	GetOrganizationSkillByOrganizationIDAndName(ctx context.Context, arg GetOrganizationSkillByOrganizationIDAndNameParams) (Skill, error)
	GetOrganizations(ctx context.Context, arg GetOrganizationsParams) ([]Organization, error)
	GetOrganizationsByUserID(ctx context.Context, arg GetOrganizationsByUserIDParams) ([]Organization, error)
	// GetOrganizationsWithPrebuildStatus returns organizations with prebuilds configured and their
	// membership status for the prebuilds system user (org membership, group existence, group membership).
	GetOrganizationsWithPrebuildStatus(ctx context.Context, arg GetOrganizationsWithPrebuildStatusParams) ([]GetOrganizationsWithPrebuildStatusRow, error)
	// Returns, per effective group, the number of users at or over their spend
	// limit since period_start. Only non-system users with an enforceable limit
	// (override or budgeted group) count, and the unlimited Everyone fallback does not.
	// TODO(AIGOV-527): unify effective group resolution in a single place.
	GetOverBudgetUsersPerGroup(ctx context.Context, periodStart time.Time) ([]GetOverBudgetUsersPerGroupRow, error)
	GetParameterSchemasByJobID(ctx context.Context, jobID uuid.UUID) ([]ParameterSchema, error)
	GetPrebuildMetrics(ctx context.Context) ([]GetPrebuildMetricsRow, error)
	GetPrebuildsSettings(ctx context.Context) (string, error)
	GetPresetByID(ctx context.Context, presetID uuid.UUID) (GetPresetByIDRow, error)
	GetPresetByWorkspaceBuildID(ctx context.Context, workspaceBuildID uuid.UUID) (TemplateVersionPreset, error)
	GetPresetParametersByPresetID(ctx context.Context, presetID uuid.UUID) ([]TemplateVersionPresetParameter, error)
	GetPresetParametersByTemplateVersionID(ctx context.Context, templateVersionID uuid.UUID) ([]TemplateVersionPresetParameter, error)
	// GetPresetsAtFailureLimit groups workspace builds by preset ID.
	// Each preset is associated with exactly one template version ID.
	// For each preset, the query checks the last hard_limit builds.
	// If all of them failed, the preset is considered to have hit the hard failure limit.
	// The query returns a list of preset IDs that have reached this failure threshold.
	// Only active template versions with configured presets are considered.
	// For each preset, check the last hard_limit builds.
	// If all of them failed, the preset is considered to have hit the hard failure limit.
	GetPresetsAtFailureLimit(ctx context.Context, hardLimit int64) ([]GetPresetsAtFailureLimitRow, error)
	// GetPresetsBackoff groups workspace builds by preset ID.
	// Each preset is associated with exactly one template version ID.
	// For each group, the query checks up to N of the most recent jobs that occurred within the
	// lookback period, where N equals the number of desired instances for the corresponding preset.
	// If at least one of the job within a group has failed, we should backoff on the corresponding preset ID.
	// Query returns a list of preset IDs for which we should backoff.
	// Only active template versions with configured presets are considered.
	// We also return the number of failed workspace builds that occurred during the lookback period.
	//
	// NOTE:
	// - To **decide whether to back off**, we look at up to the N most recent builds (within the defined lookback period).
	// - To **calculate the number of failed builds**, we consider all builds within the defined lookback period.
	//
	// The number of failed builds is used downstream to determine the backoff duration.
	GetPresetsBackoff(ctx context.Context, lookback time.Time) ([]GetPresetsBackoffRow, error)
	GetPresetsByTemplateVersionID(ctx context.Context, templateVersionID uuid.UUID) ([]TemplateVersionPreset, error)
	GetPreviousTemplateVersion(ctx context.Context, arg GetPreviousTemplateVersionParams) (TemplateVersion, error)
	GetProvisionerDaemons(ctx context.Context) ([]ProvisionerDaemon, error)
	GetProvisionerDaemonsByOrganization(ctx context.Context, arg GetProvisionerDaemonsByOrganizationParams) ([]ProvisionerDaemon, error)
	// Current job information.
	// Previous job information.
	GetProvisionerDaemonsWithStatusByOrganization(ctx context.Context, arg GetProvisionerDaemonsWithStatusByOrganizationParams) ([]GetProvisionerDaemonsWithStatusByOrganizationRow, error)
	GetProvisionerJobByID(ctx context.Context, id uuid.UUID) (ProvisionerJob, error)
	// Gets a single provisioner job by ID for update.
	// This is used to securely reap jobs that have been hung/pending for a long time.
	GetProvisionerJobByIDForUpdate(ctx context.Context, id uuid.UUID) (ProvisionerJob, error)
	// Gets a provisioner job by ID with exclusive lock.
	// Blocks until the row is available for update.
	GetProvisionerJobByIDWithLock(ctx context.Context, id uuid.UUID) (ProvisionerJob, error)
	GetProvisionerJobTimingsByJobID(ctx context.Context, jobID uuid.UUID) ([]ProvisionerJobTiming, error)
	// Fetches provisioner jobs by their IDs without computing queue position or
	// queue size. Callers that do not need the queue position should prefer this
	// over GetProvisionerJobsByIDsWithQueuePosition, whose window functions over
	// pending jobs and provisioner daemons are comparatively expensive.
	GetProvisionerJobsByIDs(ctx context.Context, ids []uuid.UUID) ([]ProvisionerJob, error)
	GetProvisionerJobsByIDsWithQueuePosition(ctx context.Context, arg GetProvisionerJobsByIDsWithQueuePositionParams) ([]GetProvisionerJobsByIDsWithQueuePositionRow, error)
	GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisioner(ctx context.Context, arg GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisionerParams) ([]GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisionerRow, error)
	GetProvisionerJobsCreatedAfter(ctx context.Context, createdAt time.Time) ([]ProvisionerJob, error)
	// To avoid repeatedly attempting to reap the same jobs, we randomly order and limit to @max_jobs.
	GetProvisionerJobsToBeReaped(ctx context.Context, arg GetProvisionerJobsToBeReapedParams) ([]ProvisionerJob, error)
	GetProvisionerKeyByHashedSecret(ctx context.Context, hashedSecret []byte) (ProvisionerKey, error)
	GetProvisionerKeyByID(ctx context.Context, id uuid.UUID) (ProvisionerKey, error)
	GetProvisionerKeyByName(ctx context.Context, arg GetProvisionerKeyByNameParams) (ProvisionerKey, error)
	GetProvisionerLogsAfterID(ctx context.Context, arg GetProvisionerLogsAfterIDParams) ([]ProvisionerJobLog, error)
	GetQuotaAllowanceForUser(ctx context.Context, arg GetQuotaAllowanceForUserParams) (int64, error)
	GetQuotaConsumedForUser(ctx context.Context, arg GetQuotaConsumedForUserParams) (int64, error)
	// Count regular workspaces: only those whose first successful 'start' build
	// was not initiated by the prebuild system user.
	GetRegularWorkspaceCreateMetrics(ctx context.Context) ([]GetRegularWorkspaceCreateMetricsRow, error)
	GetReplicaByID(ctx context.Context, id uuid.UUID) (Replica, error)
	GetReplicasUpdatedAfter(ctx context.Context, updatedAt time.Time) ([]Replica, error)
	GetRunningPrebuiltWorkspaces(ctx context.Context) ([]GetRunningPrebuiltWorkspacesRow, error)
	GetRuntimeConfig(ctx context.Context, key string) (string, error)
	// Find chats that appear stuck and need recovery:
	//   1. Running chats whose heartbeat has expired (worker crash).
	//   2. requires_action chats past the timeout threshold (client
	//      disappeared).
	//   3. Waiting chats with a non-empty queue and stale updated_at
	//      (deferred-promote stranding when the worker dies before its
	//      post-cancel cleanup runs).
	GetStaleChats(ctx context.Context, staleThreshold time.Time) ([]Chat, error)
	GetTailnetPeers(ctx context.Context, id uuid.UUID) ([]TailnetPeer, error)
	GetTailnetTunnelPeerBindingsBatch(ctx context.Context, ids []uuid.UUID) ([]GetTailnetTunnelPeerBindingsBatchRow, error)
	GetTailnetTunnelPeerIDsBatch(ctx context.Context, ids []uuid.UUID) ([]GetTailnetTunnelPeerIDsBatchRow, error)
	GetTelemetryItem(ctx context.Context, key string) (TelemetryItem, error)
	GetTelemetryItems(ctx context.Context) ([]TelemetryItem, error)
	// GetTemplateAppInsights returns the aggregate usage of each app in a given
	// timeframe. The result can be filtered on template_ids, meaning only user data
	// from workspaces based on those templates will be included.
	GetTemplateAppInsights(ctx context.Context, arg GetTemplateAppInsightsParams) ([]GetTemplateAppInsightsRow, error)
	// GetTemplateAppInsightsByTemplate is used for Prometheus metrics. Keep
	// in sync with GetTemplateAppInsights and UpsertTemplateUsageStats.
	GetTemplateAppInsightsByTemplate(ctx context.Context, arg GetTemplateAppInsightsByTemplateParams) ([]GetTemplateAppInsightsByTemplateRow, error)
	GetTemplateAverageBuildTime(ctx context.Context, templateID uuid.NullUUID) (GetTemplateAverageBuildTimeRow, error)
	GetTemplateByID(ctx context.Context, id uuid.UUID) (Template, error)
	GetTemplateByOrganizationAndName(ctx context.Context, arg GetTemplateByOrganizationAndNameParams) (Template, error)
	// GetTemplateInsights returns the aggregate user-produced usage of all
	// workspaces in a given timeframe. The template IDs, active users, and
	// usage_seconds all reflect any usage in the template, including apps.
	//
	// Session usage comes out per app name; callers group the names into families.
	//
	// When combining data from multiple templates, we must make a guess at
	// how the user behaved for the 30 minute interval. In this case we make
	// the assumption that if the user used two workspaces for 15 minutes,
	// they did so sequentially, thus we sum the usage up to a maximum of
	// 30 minutes with LEAST(SUM(n), 30).
	GetTemplateInsights(ctx context.Context, arg GetTemplateInsightsParams) (GetTemplateInsightsRow, error)
	// GetTemplateInsightsByInterval returns all intervals between start and end
	// time, if end time is a partial interval, it will be included in the results and
	// that interval will be shorter than a full one. If there is no data for a selected
	// interval/template, it will be included in the results with 0 active users.
	GetTemplateInsightsByInterval(ctx context.Context, arg GetTemplateInsightsByIntervalParams) ([]GetTemplateInsightsByIntervalRow, error)
	// GetTemplateInsightsByTemplate is used for Prometheus metrics. Keep
	// in sync with GetTemplateInsights and UpsertTemplateUsageStats.
	//
	// Session usage is reported per app family. It reads the raw agent stats
	// because the rollup stores minutes per app, which can't show whether two
	// apps of one family were open in the same minute. @app_families maps each
	// app name to its family; names missing from the map count as unknown.
	GetTemplateInsightsByTemplate(ctx context.Context, arg GetTemplateInsightsByTemplateParams) ([]GetTemplateInsightsByTemplateRow, error)
	// GetTemplateParameterInsights does for each template in a given timeframe,
	// look for the latest workspace build (for every workspace) that has been
	// created in the timeframe and return the aggregate usage counts of parameter
	// values.
	GetTemplateParameterInsights(ctx context.Context, arg GetTemplateParameterInsightsParams) ([]GetTemplateParameterInsightsRow, error)
	// GetTemplatePresetsWithPrebuilds retrieves template versions with configured presets and prebuilds.
	// It also returns the number of desired instances for each preset.
	// If template_id is specified, only template versions associated with that template will be returned.
	GetTemplatePresetsWithPrebuilds(ctx context.Context, templateID uuid.NullUUID) ([]GetTemplatePresetsWithPrebuildsRow, error)
	// GetTemplateRankingSignalsByOwnerID returns raw template-ranking signals for
	// one owner: in-window active and recently-deleted workspace counts, the last
	// in-window usage, and distinct active developers per template. The affinity
	// score is computed in Go (see listtemplates.go) so the ranking policy and
	// its confidence thresholds live in one place.
	GetTemplateRankingSignalsByOwnerID(ctx context.Context, arg GetTemplateRankingSignalsByOwnerIDParams) ([]GetTemplateRankingSignalsByOwnerIDRow, error)
	GetTemplateUsageStats(ctx context.Context, arg GetTemplateUsageStatsParams) ([]TemplateUsageStat, error)
	GetTemplateVersionByID(ctx context.Context, id uuid.UUID) (TemplateVersion, error)
	GetTemplateVersionByJobID(ctx context.Context, jobID uuid.UUID) (TemplateVersion, error)
	GetTemplateVersionByTemplateIDAndName(ctx context.Context, arg GetTemplateVersionByTemplateIDAndNameParams) (TemplateVersion, error)
	GetTemplateVersionParameters(ctx context.Context, templateVersionID uuid.UUID) ([]TemplateVersionParameter, error)
	GetTemplateVersionTerraformValues(ctx context.Context, templateVersionID uuid.UUID) (TemplateVersionTerraformValue, error)
	GetTemplateVersionVariables(ctx context.Context, templateVersionID uuid.UUID) ([]TemplateVersionVariable, error)
	GetTemplateVersionWorkspaceTags(ctx context.Context, templateVersionID uuid.UUID) ([]TemplateVersionWorkspaceTag, error)
	GetTemplateVersionsByIDs(ctx context.Context, ids []uuid.UUID) ([]TemplateVersion, error)
	GetTemplateVersionsByTemplateID(ctx context.Context, arg GetTemplateVersionsByTemplateIDParams) ([]TemplateVersion, error)
	GetTemplateVersionsCreatedAfter(ctx context.Context, createdAt time.Time) ([]TemplateVersion, error)
	GetTemplates(ctx context.Context) ([]Template, error)
	GetTemplatesWithFilter(ctx context.Context, arg GetTemplatesWithFilterParams) ([]Template, error)
	// Computes hb_agent_runtime_v1 usage event payloads. Deliberately includes
	// soft-deleted messages and messages from all chats.
	GetTotalChatMessageRuntimeMsInRange(ctx context.Context, arg GetTotalChatMessageRuntimeMsInRangeParams) (int64, error)
	// Gets the total number of managed agents created between two dates. Uses the
	// aggregate table to avoid large scans or a complex index on the usage_events
	// table.
	//
	// This has the trade off that we can't count accurately between two exact
	// timestamps. The provided timestamps will be converted to UTC and truncated to
	// the events that happened on and between the two dates. Both dates are
	// inclusive.
	GetTotalUsageDCManagedAgentsV1(ctx context.Context, arg GetTotalUsageDCManagedAgentsV1Params) (int64, error)
	// Gets the total Coder Agent runtime in milliseconds between two timestamps.
	// The start bound is inclusive and the end bound is exclusive.
	//
	// Unlike GetTotalUsageDCManagedAgentsV1 this reads usage_events directly
	// rather than the usage_events_daily rollup: hb_agent_runtime_v1 is exactly
	// one row per hourly bucket deployment-wide, with created_at at the bucket
	// start, enforced by the unique partial index
	// idx_usage_events_agent_runtime (which also keeps SUM from counting a
	// bucket twice and serves this query). The result is bucket-granular: a
	// bucket counts entirely against the period containing its start. See
	// enterprise/coderd/usage/generator.go for what a bucket holds. If a
	// usage_events retention policy ever lands, this must move to the daily
	// rollup and accept day-granularity bounds.
	GetTotalUsageHBAgentRuntimeV1(ctx context.Context, arg GetTotalUsageHBAgentRuntimeV1Params) (int64, error)
	GetUnexpiredLicenses(ctx context.Context) ([]License, error)
	// Returns the models used since the given time that hold no price, most used
	// first. openai-compat providers cannot be priced, so their models are excluded.
	GetUnpricedAIModelsSince(ctx context.Context, arg GetUnpricedAIModelsSinceParams) ([]GetUnpricedAIModelsSinceRow, error)
	// Counts unpublished usage events in the last 60 days:
	//   pending: created within the last 30 days (still eligible to publish)
	//   expired: created 30-60 days ago (too old to publish; Tallyman would reject)
	// Events older than 60 days are ignored so this query stays bounded and the
	// expired gauge can recover to zero.
	GetUsageEventsStats(ctx context.Context, now time.Time) (GetUsageEventsStatsRow, error)
	GetUserAIBudgetOverride(ctx context.Context, userID uuid.UUID) (UserAIBudgetOverride, error)
	GetUserAIProviderKeyByProviderID(ctx context.Context, arg GetUserAIProviderKeyByProviderIDParams) (UserAIProviderKey, error)
	// GetUserAIProviderKeys is used by dbcrypt key rotation. Request paths should use
	// user-scoped lookups instead of this bulk accessor.
	GetUserAIProviderKeys(ctx context.Context) ([]UserAIProviderKey, error)
	GetUserAIProviderKeysByUserID(ctx context.Context, userID uuid.UUID) ([]UserAIProviderKey, error)
	// Returns user IDs from the provided list that are consuming an AI seat.
	// Filters to active, non-deleted, non-system users to match the canonical
	// seat count query (GetActiveAISeatCount).
	GetUserAISeatStates(ctx context.Context, userIds []uuid.UUID) ([]uuid.UUID, error)
	// Total spend for (user_id, effective_group_id) on or after period_start until NOW.
	// The period_start parameter is normalized to its UTC calendar day.
	GetUserAISpendSince(ctx context.Context, arg GetUserAISpendSinceParams) (GetUserAISpendSinceRow, error)
	// GetUserActivityInsights returns the ranking with top active users.
	// The result can be filtered on template_ids, meaning only user data
	// from workspaces based on those templates will be included.
	// Note: The usage_seconds and usage_seconds_cumulative differ only when
	// requesting deployment-wide (or multiple template) data. Cumulative
	// produces a bloated value if a user has used multiple templates
	// simultaneously.
	GetUserActivityInsights(ctx context.Context, arg GetUserActivityInsightsParams) ([]GetUserActivityInsightsRow, error)
	GetUserAgentChatSendShortcut(ctx context.Context, userID uuid.UUID) (string, error)
	GetUserAppearanceSettings(ctx context.Context, userID uuid.UUID) (GetUserAppearanceSettingsRow, error)
	GetUserByEmailOrUsername(ctx context.Context, arg GetUserByEmailOrUsernameParams) (User, error)
	GetUserByID(ctx context.Context, id uuid.UUID) (User, error)
	GetUserChatCompactionThreshold(ctx context.Context, arg GetUserChatCompactionThresholdParams) (string, error)
	GetUserChatCustomPrompt(ctx context.Context, userID uuid.UUID) (string, error)
	GetUserChatDebugLoggingEnabled(ctx context.Context, userID uuid.UUID) (bool, error)
	GetUserCodeDiffDisplayMode(ctx context.Context, userID uuid.UUID) (string, error)
	GetUserCollapseAssistantSteps(ctx context.Context, userID uuid.UUID) (bool, error)
	GetUserCount(ctx context.Context, includeSystem bool) (int64, error)
	// Returns the "Everyone" group (id == organization_id) to attribute a user's
	// spend to when no override or budgeted group applies. Prefers the default org,
	// then the earliest organization membership. Returns no rows when the user has
	// no organization membership.
	GetUserEveryoneFallbackGroup(ctx context.Context, userID uuid.UUID) (uuid.UUID, error)
	GetUserForChatSyntheticAPIKeyByID(ctx context.Context, id uuid.UUID) (User, error)
	// GetUserLatencyInsights returns the median and 95th percentile connection
	// latency that users have experienced. The result can be filtered on
	// template_ids, meaning only user data from workspaces based on those templates
	// will be included.
	GetUserLatencyInsights(ctx context.Context, arg GetUserLatencyInsightsParams) ([]GetUserLatencyInsightsRow, error)
	GetUserLinkByLinkedID(ctx context.Context, linkedID string) (UserLink, error)
	GetUserLinkByUserIDLoginType(ctx context.Context, arg GetUserLinkByUserIDLoginTypeParams) (UserLink, error)
	GetUserLinksByUserID(ctx context.Context, userID uuid.UUID) ([]UserLink, error)
	GetUserNotificationPreferences(ctx context.Context, userID uuid.UUID) ([]NotificationPreference, error)
	GetUserSecretByID(ctx context.Context, id uuid.UUID) (UserSecret, error)
	GetUserSecretByUserIDAndName(ctx context.Context, arg GetUserSecretByUserIDAndNameParams) (UserSecret, error)
	GetUserSecretByUserIDAndNameForUpdate(ctx context.Context, arg GetUserSecretByUserIDAndNameForUpdateParams) (UserSecret, error)
	// Returns deployment-wide aggregates for the telemetry snapshot.
	//
	// The denominator for both user-level counts and the per-user
	// distribution is active non-system users. Specifically:
	//
	//   * deleted = false: Coder soft-deletes by flipping users.deleted
	//     rather than removing rows. The delete_deleted_user_resources()
	//     trigger now removes their user_secrets, but soft-deleted users
	//     are still excluded here so they don't dilute the percentile
	//     distribution as zero-secret entries.
	//   * status = 'active': dormant users (no recent activity) and
	//     suspended users (explicitly disabled) cannot use secrets, so
	//     they shouldn't dilute the percentile distribution as
	//     zero-secret entries.
	//   * is_system = false: internal subjects like the prebuilds user
	//     never use secrets in the normal flow.
	//
	// Status transitions move users in and out of this denominator, so a
	// snapshot's UsersWithSecrets can drop without any secret being
	// deleted.
	//
	// The percentile distribution is computed across all active non-system
	// users, including those with zero secrets, so the percentiles reflect
	// deployment-wide adoption rather than only the power-user subset.
	// percentile_disc returns an actual integer count from the underlying
	// values rather than interpolating between rows.
	GetUserSecretsTelemetrySummary(ctx context.Context) (GetUserSecretsTelemetrySummaryRow, error)
	GetUserShellToolDisplayMode(ctx context.Context, userID uuid.UUID) (string, error)
	GetUserSkillByUserIDAndName(ctx context.Context, arg GetUserSkillByUserIDAndNameParams) (Skill, error)
	// GetUserStatusCounts returns the count of users in each status over time.
	// The time range is inclusively defined by the start_time and end_time parameters.
	GetUserStatusCounts(ctx context.Context, arg GetUserStatusCountsParams) ([]GetUserStatusCountsRow, error)
	GetUserThinkingDisplayMode(ctx context.Context, userID uuid.UUID) (string, error)
	// This will never return deleted users.
	GetUsers(ctx context.Context, arg GetUsersParams) ([]GetUsersRow, error)
	// This shouldn't check for deleted, because it's frequently used
	// to look up references to actions. eg. a user could build a workspace
	// for another user, then be deleted... we still want them to appear!
	GetUsersByIDs(ctx context.Context, ids []uuid.UUID) ([]User, error)
	GetWebpushSubscriptionsByUserID(ctx context.Context, userID uuid.UUID) ([]WebpushSubscription, error)
	GetWebpushVAPIDKeys(ctx context.Context) (GetWebpushVAPIDKeysRow, error)
	GetWorkspaceACLByID(ctx context.Context, id uuid.UUID) (GetWorkspaceACLByIDRow, error)
	GetWorkspaceAgentAndWorkspaceByID(ctx context.Context, id uuid.UUID) (GetWorkspaceAgentAndWorkspaceByIDRow, error)
	GetWorkspaceAgentByID(ctx context.Context, id uuid.UUID) (WorkspaceAgent, error)
	GetWorkspaceAgentDevcontainersByAgentID(ctx context.Context, workspaceAgentID uuid.UUID) ([]WorkspaceAgentDevcontainer, error)
	GetWorkspaceAgentLifecycleStateByID(ctx context.Context, id uuid.UUID) (GetWorkspaceAgentLifecycleStateByIDRow, error)
	GetWorkspaceAgentLogSourcesByAgentIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceAgentLogSource, error)
	GetWorkspaceAgentLogsAfter(ctx context.Context, arg GetWorkspaceAgentLogsAfterParams) ([]WorkspaceAgentLog, error)
	GetWorkspaceAgentMetadata(ctx context.Context, arg GetWorkspaceAgentMetadataParams) ([]WorkspaceAgentMetadatum, error)
	GetWorkspaceAgentPortShare(ctx context.Context, arg GetWorkspaceAgentPortShareParams) (WorkspaceAgentPortShare, error)
	GetWorkspaceAgentScriptTimingsByBuildID(ctx context.Context, id uuid.UUID) ([]GetWorkspaceAgentScriptTimingsByBuildIDRow, error)
	GetWorkspaceAgentScriptsByAgentIDs(ctx context.Context, ids []uuid.UUID) ([]GetWorkspaceAgentScriptsByAgentIDsRow, error)
	GetWorkspaceAgentStats(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentStatsRow, error)
	GetWorkspaceAgentStatsAndLabels(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentStatsAndLabelsRow, error)
	GetWorkspaceAgentUsageStats(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentUsageStatsRow, error)
	GetWorkspaceAgentUsageStatsAndLabels(ctx context.Context, createdAt time.Time) ([]GetWorkspaceAgentUsageStatsAndLabelsRow, error)
	GetWorkspaceAgentsByInstanceID(ctx context.Context, authInstanceID string) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsByParentID(ctx context.Context, parentID uuid.UUID) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsByResourceIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsByWorkspaceAndBuildNumber(ctx context.Context, arg GetWorkspaceAgentsByWorkspaceAndBuildNumberParams) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsForMetrics(ctx context.Context) ([]GetWorkspaceAgentsForMetricsRow, error)
	GetWorkspaceAgentsInLatestBuildByWorkspaceID(ctx context.Context, workspaceID uuid.UUID) ([]WorkspaceAgent, error)
	GetWorkspaceAgentsInLatestBuildByWorkspaceIDs(ctx context.Context, workspaceIds []uuid.UUID) ([]GetWorkspaceAgentsInLatestBuildByWorkspaceIDsRow, error)
	GetWorkspaceAppByAgentIDAndSlug(ctx context.Context, arg GetWorkspaceAppByAgentIDAndSlugParams) (WorkspaceApp, error)
	GetWorkspaceAppStatusesByAppIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceAppStatus, error)
	GetWorkspaceAppsByAgentID(ctx context.Context, agentID uuid.UUID) ([]WorkspaceApp, error)
	GetWorkspaceAppsByAgentIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceApp, error)
	GetWorkspaceAppsCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceApp, error)
	GetWorkspaceBuildAgentsByInstanceID(ctx context.Context, authInstanceID string) ([]GetWorkspaceBuildAgentsByInstanceIDRow, error)
	GetWorkspaceBuildByID(ctx context.Context, id uuid.UUID) (WorkspaceBuild, error)
	GetWorkspaceBuildByJobID(ctx context.Context, jobID uuid.UUID) (WorkspaceBuild, error)
	GetWorkspaceBuildByWorkspaceIDAndBuildNumber(ctx context.Context, arg GetWorkspaceBuildByWorkspaceIDAndBuildNumberParams) (WorkspaceBuild, error)
	// Returns build metadata for e2e workspace build duration metrics.
	// Also checks if all agents are ready and returns the worst status.
	GetWorkspaceBuildMetricsByResourceID(ctx context.Context, id uuid.UUID) (GetWorkspaceBuildMetricsByResourceIDRow, error)
	GetWorkspaceBuildParameters(ctx context.Context, workspaceBuildID uuid.UUID) ([]WorkspaceBuildParameter, error)
	// Fetches the provisioner state of a workspace build, joined through to the
	// template so that dbauthz can enforce policy.ActionUpdate on the template.
	// Provisioner state contains sensitive Terraform state and should only be
	// accessible to template administrators.
	GetWorkspaceBuildProvisionerStateByID(ctx context.Context, workspaceBuildID uuid.UUID) (GetWorkspaceBuildProvisionerStateByIDRow, error)
	GetWorkspaceBuildStatsByTemplates(ctx context.Context, since time.Time) ([]GetWorkspaceBuildStatsByTemplatesRow, error)
	GetWorkspaceBuildsByWorkspaceID(ctx context.Context, arg GetWorkspaceBuildsByWorkspaceIDParams) ([]WorkspaceBuild, error)
	GetWorkspaceBuildsCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceBuild, error)
	GetWorkspaceByAgentID(ctx context.Context, agentID uuid.UUID) (Workspace, error)
	GetWorkspaceByID(ctx context.Context, id uuid.UUID) (Workspace, error)
	GetWorkspaceByOwnerIDAndName(ctx context.Context, arg GetWorkspaceByOwnerIDAndNameParams) (Workspace, error)
	GetWorkspaceByResourceID(ctx context.Context, resourceID uuid.UUID) (Workspace, error)
	GetWorkspaceByWorkspaceAppID(ctx context.Context, workspaceAppID uuid.UUID) (Workspace, error)
	GetWorkspaceModulesByJobID(ctx context.Context, jobID uuid.UUID) ([]WorkspaceModule, error)
	GetWorkspaceModulesCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceModule, error)
	GetWorkspaceProxies(ctx context.Context) ([]WorkspaceProxy, error)
	// Finds a workspace proxy that has an access URL or app hostname that matches
	// the provided hostname. This is to check if a hostname matches any workspace
	// proxy.
	//
	// The hostname must be sanitized to only contain [a-zA-Z0-9.-] before calling
	// this query. The scheme, port and path should be stripped.
	//
	GetWorkspaceProxyByHostname(ctx context.Context, arg GetWorkspaceProxyByHostnameParams) (WorkspaceProxy, error)
	GetWorkspaceProxyByID(ctx context.Context, id uuid.UUID) (WorkspaceProxy, error)
	GetWorkspaceProxyByName(ctx context.Context, name string) (WorkspaceProxy, error)
	GetWorkspaceResourceByID(ctx context.Context, id uuid.UUID) (WorkspaceResource, error)
	GetWorkspaceResourceMetadataByResourceIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceResourceMetadatum, error)
	GetWorkspaceResourceMetadataCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceResourceMetadatum, error)
	GetWorkspaceResourcesByJobID(ctx context.Context, jobID uuid.UUID) ([]WorkspaceResource, error)
	GetWorkspaceResourcesByJobIDs(ctx context.Context, ids []uuid.UUID) ([]WorkspaceResource, error)
	GetWorkspaceResourcesCreatedAfter(ctx context.Context, createdAt time.Time) ([]WorkspaceResource, error)
	GetWorkspaceUniqueOwnerCountByTemplateIDs(ctx context.Context, templateIds []uuid.UUID) ([]GetWorkspaceUniqueOwnerCountByTemplateIDsRow, error)
	// build_params is used to filter by build parameters if present.
	// It has to be a CTE because the set returning function 'unnest' cannot
	// be used in a WHERE clause.
	GetWorkspaces(ctx context.Context, arg GetWorkspacesParams) ([]GetWorkspacesRow, error)
	GetWorkspacesAndAgentsByOwnerID(ctx context.Context, ownerID uuid.UUID) ([]GetWorkspacesAndAgentsByOwnerIDRow, error)
	GetWorkspacesByTemplateID(ctx context.Context, templateID uuid.UUID) ([]WorkspaceTable, error)
	// Returns workspaces the lifecycle executor must act on this tick. An
	// "action" is a state transition (autostart/autostop/dormancy/delete), a
	// dormancy mark (which has no build transition), or a one-time autostop
	// reminder notification (which only stamps a marker, no transition).
	GetWorkspacesEligibleForLifecycleAction(ctx context.Context, now time.Time) ([]GetWorkspacesEligibleForLifecycleActionRow, error)
	GetWorkspacesForWorkspaceMetrics(ctx context.Context) ([]GetWorkspacesForWorkspaceMetricsRow, error)
	// Reports whether the given file is referenced as cached module files by any
	// template version in the given organization. Used to authorize provisioner
	// module-file downloads so a daemon cannot read another organization's cached
	// Terraform module source.
	HasTemplateVersionsUsingCachedModuleFileInOrg(ctx context.Context, arg HasTemplateVersionsUsingCachedModuleFileInOrgParams) (bool, error)
	// Stamps the pinned hash and error on every not-yet-hydrated chat for
	// an agent (context_aggregate_hash IS NULL) and copies the agent's
	// current context resources onto those chats in the same statement, so
	// a chat's pinned hash and pinned bodies are always written together.
	// Runs as a side effect of an agent push and of chat-create hydration,
	// so chats created before the agent was ready pick up the snapshot
	// without a dirty marker. The ON CONFLICT upsert is defensive: a
	// not-yet-hydrated chat has no pinned rows, so it normally inserts.
	// Does not bump chats.updated_at; the resource upsert's ON CONFLICT branch
	// sets chat_context_resources.updated_at on the rows it rewrites.
	// Returns the hydrated chat IDs so callers can notify watchers of every
	// chat the statement pinned.
	HydrateAgentChatsContext(ctx context.Context, arg HydrateAgentChatsContextParams) ([]uuid.UUID, error)
	// Increments generation_attempt and returns the resulting value.
	IncrementChatGenerationAttempt(ctx context.Context, id uuid.UUID) (int64, error)
	// Adds cost_micros to the spend for (user_id, effective_group_id, day).
	// The day parameter is normalized to its UTC calendar day before storage.
	IncrementUserAIDailySpend(ctx context.Context, arg IncrementUserAIDailySpendParams) (AIUserDailySpend, error)
	InsertAIBridgeInterception(ctx context.Context, arg InsertAIBridgeInterceptionParams) (AIBridgeInterception, error)
	InsertAIBridgeModelThought(ctx context.Context, arg InsertAIBridgeModelThoughtParams) (AIBridgeModelThought, error)
	InsertAIBridgeTokenUsage(ctx context.Context, arg InsertAIBridgeTokenUsageParams) (AIBridgeTokenUsage, error)
	InsertAIBridgeToolUsage(ctx context.Context, arg InsertAIBridgeToolUsageParams) (AIBridgeToolUsage, error)
	InsertAIBridgeUserPrompt(ctx context.Context, arg InsertAIBridgeUserPromptParams) (AIBridgeUserPrompt, error)
	InsertAIGatewayKey(ctx context.Context, arg InsertAIGatewayKeyParams) (InsertAIGatewayKeyRow, error)
	InsertAIProvider(ctx context.Context, arg InsertAIProviderParams) (AIProvider, error)
	InsertAIProviderKey(ctx context.Context, arg InsertAIProviderKeyParams) (AIProviderKey, error)
	InsertAPIKey(ctx context.Context, arg InsertAPIKeyParams) (APIKey, error)
	// Copies an agent's current context resources onto a single chat. Pair
	// with DeleteChatContextResourcesByChatID (clear-then-copy, in a
	// transaction) to re-pin a chat to its agent's latest snapshot from the
	// refresh endpoint and on agent rebinding.
	InsertAgentContextResourcesIntoChat(ctx context.Context, arg InsertAgentContextResourcesIntoChatParams) error
	// We use the organization_id as the id
	// for simplicity since all users is
	// every member of the org.
	InsertAllUsersGroup(ctx context.Context, organizationID uuid.UUID) (Group, error)
	InsertAuditLog(ctx context.Context, arg InsertAuditLogParams) (AuditLog, error)
	InsertBoundaryLogs(ctx context.Context, arg InsertBoundaryLogsParams) ([]BoundaryLog, error)
	InsertBoundarySession(ctx context.Context, arg InsertBoundarySessionParams) (BoundarySession, error)
	InsertChat(ctx context.Context, arg InsertChatParams) (Chat, error)
	// updated_at is the retention clock used by DeleteOldChatDebugRuns.
	// Set it on every write to keep retention semantics correct.
	InsertChatDebugRun(ctx context.Context, arg InsertChatDebugRunParams) (ChatDebugRun, error)
	// The CTE atomically locks the parent run via UPDATE, bumps its
	// updated_at (eliminating a separate TouchChatDebugRunUpdatedAt
	// call), and enforces the finalization guard: if the run is already
	// finished, the UPDATE returns zero rows, the INSERT gets no source
	// rows, and sql.ErrNoRows is returned. The UPDATE also serializes
	// with concurrent FinalizeStale under READ COMMITTED isolation.
	InsertChatDebugStep(ctx context.Context, arg InsertChatDebugStepParams) (ChatDebugStep, error)
	InsertChatFile(ctx context.Context, arg InsertChatFileParams) (InsertChatFileRow, error)
	// Returns the inserted rows in input array order. Ids are allocated before the
	// insert and the k-th smallest is assigned to input index k, so callers may
	// index the result positionally.
	InsertChatMessages(ctx context.Context, arg InsertChatMessagesParams) ([]InsertChatMessagesRow, error)
	InsertChatModelConfig(ctx context.Context, arg InsertChatModelConfigParams) (ChatModelConfig, error)
	InsertChatProject(ctx context.Context, arg InsertChatProjectParams) (ChatProject, error)
	InsertChatProjectMemory(ctx context.Context, arg InsertChatProjectMemoryParams) (ChatProjectMemory, error)
	// Legacy queue insertion path. When no caller-supplied creator exists,
	// preserve the created_by invariant by attributing the queued row to the
	// chat owner.
	InsertChatQueuedMessage(ctx context.Context, arg InsertChatQueuedMessageParams) (ChatQueuedMessage, error)
	// Inserts a queued message that carries a position (from the default
	// sequence) and an explicit created_by reference. Use this when the
	// queued-message creator differs from the chat owner.
	InsertChatQueuedMessageWithCreator(ctx context.Context, arg InsertChatQueuedMessageWithCreatorParams) (ChatQueuedMessage, error)
	InsertCryptoKey(ctx context.Context, arg InsertCryptoKeyParams) (CryptoKey, error)
	InsertCustomRole(ctx context.Context, arg InsertCustomRoleParams) (CustomRole, error)
	InsertDBCryptKey(ctx context.Context, arg InsertDBCryptKeyParams) error
	InsertDERPMeshKey(ctx context.Context, value string) error
	InsertDeploymentID(ctx context.Context, value string) error
	InsertExternalAuthLink(ctx context.Context, arg InsertExternalAuthLinkParams) (ExternalAuthLink, error)
	InsertFile(ctx context.Context, arg InsertFileParams) (File, error)
	InsertGitSSHKey(ctx context.Context, arg InsertGitSSHKeyParams) (GitSSHKey, error)
	InsertGroup(ctx context.Context, arg InsertGroupParams) (Group, error)
	InsertGroupMember(ctx context.Context, arg InsertGroupMemberParams) error
	InsertInboxNotification(ctx context.Context, arg InsertInboxNotificationParams) (InboxNotification, error)
	InsertLicense(ctx context.Context, arg InsertLicenseParams) (License, error)
	InsertMCPServerConfig(ctx context.Context, arg InsertMCPServerConfigParams) (MCPServerConfig, error)
	InsertMemoryResourceMonitor(ctx context.Context, arg InsertMemoryResourceMonitorParams) (WorkspaceAgentMemoryResourceMonitor, error)
	// Inserts any group by name that does not exist. All new groups are given
	// a random uuid, are inserted into the same organization. They have the default
	// values for avatar, display name, and quota allowance (all zero values).
	// If the name conflicts, do nothing.
	InsertMissingGroups(ctx context.Context, arg InsertMissingGroupsParams) ([]Group, error)
	InsertOAuth2ProviderApp(ctx context.Context, arg InsertOAuth2ProviderAppParams) (OAuth2ProviderApp, error)
	InsertOAuth2ProviderAppCode(ctx context.Context, arg InsertOAuth2ProviderAppCodeParams) (OAuth2ProviderAppCode, error)
	InsertOAuth2ProviderAppSecret(ctx context.Context, arg InsertOAuth2ProviderAppSecretParams) (OAuth2ProviderAppSecret, error)
	InsertOAuth2ProviderAppToken(ctx context.Context, arg InsertOAuth2ProviderAppTokenParams) (OAuth2ProviderAppToken, error)
	InsertOrganization(ctx context.Context, arg InsertOrganizationParams) (Organization, error)
	InsertOrganizationMember(ctx context.Context, arg InsertOrganizationMemberParams) (OrganizationMember, error)
	InsertOrganizationSkill(ctx context.Context, arg InsertOrganizationSkillParams) (Skill, error)
	InsertPreset(ctx context.Context, arg InsertPresetParams) (TemplateVersionPreset, error)
	InsertPresetParameters(ctx context.Context, arg InsertPresetParametersParams) ([]TemplateVersionPresetParameter, error)
	InsertPresetPrebuildSchedule(ctx context.Context, arg InsertPresetPrebuildScheduleParams) (TemplateVersionPresetPrebuildSchedule, error)
	InsertProvisionerJob(ctx context.Context, arg InsertProvisionerJobParams) (ProvisionerJob, error)
	InsertProvisionerJobLogs(ctx context.Context, arg InsertProvisionerJobLogsParams) ([]ProvisionerJobLog, error)
	InsertProvisionerJobTimings(ctx context.Context, arg InsertProvisionerJobTimingsParams) ([]ProvisionerJobTiming, error)
	InsertProvisionerKey(ctx context.Context, arg InsertProvisionerKeyParams) (ProvisionerKey, error)
	InsertReplica(ctx context.Context, arg InsertReplicaParams) (Replica, error)
	InsertTelemetryItemIfNotExists(ctx context.Context, arg InsertTelemetryItemIfNotExistsParams) error
	// Inserts a new lock row into the telemetry_locks table. Replicas should call
	// this function prior to attempting to generate or publish a heartbeat event to
	// the telemetry service.
	// If the query returns a duplicate primary key error, the replica should not
	// attempt to generate or publish the event to the telemetry service.
	InsertTelemetryLock(ctx context.Context, arg InsertTelemetryLockParams) error
	InsertTemplate(ctx context.Context, arg InsertTemplateParams) error
	InsertTemplateVersion(ctx context.Context, arg InsertTemplateVersionParams) error
	InsertTemplateVersionParameter(ctx context.Context, arg InsertTemplateVersionParameterParams) (TemplateVersionParameter, error)
	InsertTemplateVersionTerraformValuesByJobID(ctx context.Context, arg InsertTemplateVersionTerraformValuesByJobIDParams) error
	InsertTemplateVersionVariable(ctx context.Context, arg InsertTemplateVersionVariableParams) (TemplateVersionVariable, error)
	InsertTemplateVersionWorkspaceTag(ctx context.Context, arg InsertTemplateVersionWorkspaceTagParams) (TemplateVersionWorkspaceTag, error)
	// Duplicate events are ignored intentionally to allow for multiple replicas to
	// publish heartbeat events.
	InsertUsageEvent(ctx context.Context, arg InsertUsageEventParams) error
	InsertUser(ctx context.Context, arg InsertUserParams) (User, error)
	// InsertUserGroupsByID adds a user to all provided groups, if they exist.
	// If there is a conflict, the user is already a member
	InsertUserGroupsByID(ctx context.Context, arg InsertUserGroupsByIDParams) ([]uuid.UUID, error)
	InsertUserLink(ctx context.Context, arg InsertUserLinkParams) (UserLink, error)
	InsertUserSkill(ctx context.Context, arg InsertUserSkillParams) (Skill, error)
	InsertVolumeResourceMonitor(ctx context.Context, arg InsertVolumeResourceMonitorParams) (WorkspaceAgentVolumeResourceMonitor, error)
	// Inserts or updates a webpush subscription. The (user_id, endpoint) pair
	// is unique; re-subscribing the same endpoint replaces the keys instead of
	// inserting a duplicate row. This is the recovery path after a PWA reinstall
	// on iOS, where the browser may keep the same endpoint with rotated keys.
	InsertWebpushSubscription(ctx context.Context, arg InsertWebpushSubscriptionParams) (WebpushSubscription, error)
	InsertWorkspace(ctx context.Context, arg InsertWorkspaceParams) (WorkspaceTable, error)
	InsertWorkspaceAgent(ctx context.Context, arg InsertWorkspaceAgentParams) (WorkspaceAgent, error)
	InsertWorkspaceAgentDevcontainers(ctx context.Context, arg InsertWorkspaceAgentDevcontainersParams) ([]WorkspaceAgentDevcontainer, error)
	InsertWorkspaceAgentLogSources(ctx context.Context, arg InsertWorkspaceAgentLogSourcesParams) ([]WorkspaceAgentLogSource, error)
	InsertWorkspaceAgentLogs(ctx context.Context, arg InsertWorkspaceAgentLogsParams) ([]WorkspaceAgentLog, error)
	InsertWorkspaceAgentMetadata(ctx context.Context, arg InsertWorkspaceAgentMetadataParams) error
	InsertWorkspaceAgentScriptTimings(ctx context.Context, arg InsertWorkspaceAgentScriptTimingsParams) (WorkspaceAgentScriptTiming, error)
	InsertWorkspaceAgentScripts(ctx context.Context, arg InsertWorkspaceAgentScriptsParams) ([]WorkspaceAgentScript, error)
	InsertWorkspaceAgentStats(ctx context.Context, arg InsertWorkspaceAgentStatsParams) error
	InsertWorkspaceAppStats(ctx context.Context, arg InsertWorkspaceAppStatsParams) error
	InsertWorkspaceAppStatus(ctx context.Context, arg InsertWorkspaceAppStatusParams) (WorkspaceAppStatus, error)
	InsertWorkspaceBuild(ctx context.Context, arg InsertWorkspaceBuildParams) error
	InsertWorkspaceBuildOrchestration(ctx context.Context, arg InsertWorkspaceBuildOrchestrationParams) (WorkspaceBuildOrchestration, error)
	InsertWorkspaceBuildParameters(ctx context.Context, arg InsertWorkspaceBuildParametersParams) error
	InsertWorkspaceModule(ctx context.Context, arg InsertWorkspaceModuleParams) (WorkspaceModule, error)
	InsertWorkspaceProxy(ctx context.Context, arg InsertWorkspaceProxyParams) (WorkspaceProxy, error)
	InsertWorkspaceResource(ctx context.Context, arg InsertWorkspaceResourceParams) (WorkspaceResource, error)
	InsertWorkspaceResourceMetadata(ctx context.Context, arg InsertWorkspaceResourceMetadataParams) ([]WorkspaceResourceMetadatum, error)
	// Returns true when there is no heartbeat row for (chat_id, runner_id)
	// or the existing row is older than @stale_seconds seconds by database
	// time. chatstate calls this in a single query so the staleness check
	// is atomic and does not depend on the caller's local clock.
	IsChatHeartbeatStale(ctx context.Context, arg IsChatHeartbeatStaleParams) (bool, error)
	// LinkChatFilesAfterLock requires the chat row lock. When the batch would
	// exceed the cap, the oldest files on the chat are deleted to make room; the
	// cascade removes their links. A file links to at most one chat, so no other
	// chat can lose a file here. The batch is rejected only when the batch itself
	// exceeds the cap.
	LinkChatFilesAfterLock(ctx context.Context, arg LinkChatFilesAfterLockParams) (int32, error)
	ListAIBridgeClients(ctx context.Context, arg ListAIBridgeClientsParams) ([]string, error)
	// Finds all unique AI Bridge interception telemetry summaries combinations
	// (provider, model, client) in the given timeframe for telemetry reporting.
	ListAIBridgeInterceptionsTelemetrySummaries(ctx context.Context, arg ListAIBridgeInterceptionsTelemetrySummariesParams) ([]ListAIBridgeInterceptionsTelemetrySummariesRow, error)
	ListAIBridgeModelThoughtsByInterceptionIDs(ctx context.Context, interceptionIds []uuid.UUID) ([]AIBridgeModelThought, error)
	ListAIBridgeModels(ctx context.Context, arg ListAIBridgeModelsParams) ([]string, error)
	// Returns the individual Agent Firewall network calls made during an AI
	// session, ordered chronologically. All protocols are included, unlike
	// GetAIBridgeSessionTopDomains which considers only HTTP egress, so the list
	// covers the same events the network_calls summary in ListAIBridgeSessions
	// counts. The list is capped at @limit_ rows, so its length equals the summary
	// total only for sessions at or below the cap. The summary stays authoritative
	// for whole-session totals.
	//
	// Windowing mirrors that summary and GetAIBridgeSessionTopDomains: each
	// interception's boundary logs fall in the open interval (this seq, next
	// interception's seq) within the same firewall session. The exclusive lower
	// bound drops the interception's own LLM-provider call. next_seq considers all
	// interceptions in the firewall session so windows never bleed across AI
	// sessions that share one firewall session, and falls back to the maximum
	// sequence_number for the last interception so the window stays an
	// index-satisfiable range.
	// created_at leads because a session can span several firewall sessions, whose
	// sequence numbers are independent streams. id breaks remaining ties so the row
	// that lands on the limit boundary is stable across identical requests.
	ListAIBridgeSessionNetworkCalls(ctx context.Context, arg ListAIBridgeSessionNetworkCallsParams) ([]BoundaryLog, error)
	// Returns all interceptions belonging to paginated threads within a session.
	// Threads are paginated by (started_at, thread_id) cursor. A limit of 0
	// returns every thread in the session.
	ListAIBridgeSessionThreads(ctx context.Context, arg ListAIBridgeSessionThreadsParams) ([]ListAIBridgeSessionThreadsRow, error)
	// Returns paginated sessions with aggregated metadata, token counts, and
	// the most recent user prompt. A "session" is a logical grouping of
	// interceptions that share the same session_id (set by the client).
	//
	// Pagination-first strategy: identify the page of sessions cheaply via a
	// single GROUP BY scan, then do expensive lateral joins (tokens, prompts,
	// first-interception metadata) only for the ~page-size result set.
	// The last interception in a session has no next row, so next_seq uses
	// the largest sequence_number instead of NULL. The lookup stays a plain
	// range, so the (session_id, sequence_number) index answers it alone.
	// With NULL and an OR check, the index cannot bound the range: each
	// interception reads every log to the end of the session and throws
	// most of them away.
	ListAIBridgeSessions(ctx context.Context, arg ListAIBridgeSessionsParams) ([]ListAIBridgeSessionsRow, error)
	ListAIBridgeTokenUsagesByInterceptionIDs(ctx context.Context, interceptionIds []uuid.UUID) ([]AIBridgeTokenUsage, error)
	ListAIBridgeToolUsagesByInterceptionIDs(ctx context.Context, interceptionIds []uuid.UUID) ([]AIBridgeToolUsage, error)
	ListAIBridgeUserPromptsByInterceptionIDs(ctx context.Context, interceptionIds []uuid.UUID) ([]AIBridgeUserPrompt, error)
	ListAIGatewayKeys(ctx context.Context) ([]ListAIGatewayKeysRow, error)
	// Lists boundary logs for a session, sorted by sequence number ascending.
	// Supports an inclusive lower bound (seq_after) and an exclusive upper bound
	// (seq_before) for fetching events between two known interceptions.
	ListBoundaryLogsBySessionID(ctx context.Context, arg ListBoundaryLogsBySessionIDParams) ([]BoundaryLog, error)
	// Lists a chat's pinned context resources, ordered deterministically by
	// source.
	ListChatContextResourcesByChatID(ctx context.Context, chatID uuid.UUID) ([]ChatContextResource, error)
	// Returns one page of per-user AI spend for @organization_id over the
	// [period_start, period_end) window, most expensive first, together with the
	// providers, clients, and models each user spent through and the count and
	// totals over every matching user. It must keep the same joins and predicates as
	// ExportOrganizationAISpend so both report the same token usage.
	ListOrganizationAISpendUsers(ctx context.Context, arg ListOrganizationAISpendUsersParams) ([]ListOrganizationAISpendUsersRow, error)
	ListOrganizationSkillMetadataByOrganizationID(ctx context.Context, organizationID uuid.UUID) ([]ListOrganizationSkillMetadataByOrganizationIDRow, error)
	ListProvisionerKeysByOrganization(ctx context.Context, organizationID uuid.UUID) ([]ProvisionerKey, error)
	ListProvisionerKeysByOrganizationExcludeReserved(ctx context.Context, organizationID uuid.UUID) ([]ProvisionerKey, error)
	// Used by the usage generator to find missing heartbeat buckets.
	ListUsageEventCreatedAtsByTypeSince(ctx context.Context, arg ListUsageEventCreatedAtsByTypeSinceParams) ([]time.Time, error)
	ListUserChatCompactionThresholds(ctx context.Context, userID uuid.UUID) ([]UserConfig, error)
	// Returns metadata only (no value or value_key_id) for the
	// REST API list and get endpoints.
	ListUserSecrets(ctx context.Context, userID uuid.UUID) ([]ListUserSecretsRow, error)
	// Returns all columns including the secret value. Used by the
	// provisioner (build-time injection) and the agent manifest
	// (runtime injection).
	ListUserSecretsWithValues(ctx context.Context, userID uuid.UUID) ([]UserSecret, error)
	ListUserSkillMetadataByUserID(ctx context.Context, userID uuid.UUID) ([]ListUserSkillMetadataByUserIDRow, error)
	ListWorkspaceAgentContextResources(ctx context.Context, workspaceAgentID uuid.UUID) ([]WorkspaceAgentContextResource, error)
	ListWorkspaceAgentPortShares(ctx context.Context, workspaceID uuid.UUID) ([]WorkspaceAgentPortShare, error)
	// Locks the chat row with FOR UPDATE and atomically increments its
	// snapshot_version, returning the post-bump chat. This is the single
	// entry point ChatMachine.Update uses to acquire the row lock and
	// allocate a new snapshot version in one round trip.
	LockChatAndBumpSnapshotVersion(ctx context.Context, id uuid.UUID) (Chat, error)
	LockChatByID(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
	// Locks the provisioner key row with FOR KEY SHARE for the remainder of the
	// current transaction. FOR KEY SHARE conflicts with DELETE, so while the lock
	// is held the key cannot be deleted, and a committed deletion is observed as
	// no rows by later calls.
	LockProvisionerKeyByIDForShare(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
	MarkAllInboxNotificationsAsRead(ctx context.Context, arg MarkAllInboxNotificationsAsReadParams) error
	// Flips active, already-hydrated chats for an agent to dirty when the
	// agent's latest snapshot hash differs from the chat's pinned hash. The
	// pinned hash is intentionally left untouched; the refresh endpoint
	// re-pins it. Returns the chats that transitioned so the caller can
	// emit watch events after the transaction commits.
	MarkChatsContextDirtyByAgent(ctx context.Context, arg MarkChatsContextDirtyByAgentParams) ([]MarkChatsContextDirtyByAgentRow, error)
	// Records a permanent refresh failure (e.g. revoked grant) and clears
	// the dead token material so it is never attached to a request again.
	// The updated_at predicate provides optimistic concurrency: if another
	// request refreshed or replaced the token since it was read, this
	// update matches zero rows and returns sql.ErrNoRows.
	MarkMCPServerUserTokenRefreshFailure(ctx context.Context, arg MarkMCPServerUserTokenRefreshFailureParams) (MCPServerUserToken, error)
	OIDCClaimFieldValues(ctx context.Context, arg OIDCClaimFieldValuesParams) ([]string, error)
	// OIDCClaimFields returns a list of distinct keys in the the merged_claims fields.
	// This query is used to generate the list of available sync fields for idp sync settings.
	OIDCClaimFields(ctx context.Context, organizationID uuid.UUID) ([]string, error)
	// Arguments are optional with uuid.Nil to ignore.
	//  - Use just 'organization_id' to get all members of an org
	//  - Use just 'user_id' to get all orgs a user is a member of
	//  - Use both to get a specific org member row
	OrganizationMembers(ctx context.Context, arg OrganizationMembersParams) ([]OrganizationMembersRow, error)
	PaginatedOrganizationMembers(ctx context.Context, arg PaginatedOrganizationMembersParams) ([]PaginatedOrganizationMembersRow, error)
	// Under READ COMMITTED, concurrent pin operations for the same
	// owner may momentarily produce duplicate pin_order values because
	// each CTE snapshot does not see the other's writes. The next
	// pin/unpin/reorder operation's ROW_NUMBER() self-heals the
	// sequence, so this is acceptable.
	PinChatByID(ctx context.Context, id uuid.UUID) error
	PopNextQueuedMessage(ctx context.Context, chatID uuid.UUID) (ChatQueuedMessage, error)
	ReduceWorkspaceAgentShareLevelToAuthenticatedByTemplate(ctx context.Context, templateID uuid.UUID) error
	RegisterWorkspaceProxy(ctx context.Context, arg RegisterWorkspaceProxyParams) (WorkspaceProxy, error)
	ReindexStaleChatMessagesSearchTsv(ctx context.Context, batchSize int32) (int64, error)
	// The lease is only removed if it is the current lease.
	ReleaseExternalAuthLinkRefreshLease(ctx context.Context, arg ReleaseExternalAuthLinkRefreshLeaseParams) error
	RemoveUserFromGroups(ctx context.Context, arg RemoveUserFromGroupsParams) ([]uuid.UUID, error)
	// Renews (chat_id, runner_id) leases that are still fresh and still own
	// their chat, and returns the renewed pairs. A stale lease is never
	// revived because capacity admission may already have given its slot to
	// another chat; its runner must stop instead. Callers hold the capacity
	// admission lock, and statement_timestamp() is read after that lock is
	// granted, so a lease that a committed admission counted as stale cannot
	// be renewed afterwards.
	RenewChatHeartbeats(ctx context.Context, arg RenewChatHeartbeatsParams) ([]RenewChatHeartbeatsRow, error)
	// Mutates only created_at on the target row; ids are unchanged so
	// consumers can keep tracking queued messages by id.
	ReorderChatQueuedMessageToFront(ctx context.Context, arg ReorderChatQueuedMessageToFrontParams) (int64, error)
	// Sets the target queued message's position to one less than the
	// current minimum position for that chat, moving it to the head.
	ReorderChatQueuedMessageToHead(ctx context.Context, arg ReorderChatQueuedMessageToHeadParams) (int64, error)
	RevokeDBCryptKey(ctx context.Context, activeKeyDigest string) error
	// Note that this selects from the CTE, not the original table. The CTE is named
	// the same as the original table to trick sqlc into reusing the existing struct
	// for the table.
	// The CTE and the reorder is required because UPDATE doesn't guarantee order.
	SelectUsageEventsForPublishing(ctx context.Context, now time.Time) ([]UsageEvent, error)
	// Pins a single chat to the supplied context snapshot hash and error
	// and clears any dirty marker. Used by chat-create hydration and the
	// refresh endpoint. Does not bump updated_at: context pinning is
	// background state and must not reorder chat lists.
	SetChatContextSnapshot(ctx context.Context, arg SetChatContextSnapshotParams) error
	// Bounds how long later lock waits in the current transaction may block.
	// A wait longer than lock_timeout_ms fails with lock_not_available
	// instead of blocking. The setting reverts when the transaction ends.
	SetTransactionLockTimeout(ctx context.Context, lockTimeoutMs int64) error
	SoftDeleteChatMessageByID(ctx context.Context, id int64) error
	SoftDeleteChatMessagesAfterID(ctx context.Context, arg SoftDeleteChatMessagesAfterIDParams) error
	SoftDeleteContextFileMessages(ctx context.Context, chatID uuid.UUID) error
	// Marks agents from all prior builds of this workspace as deleted,
	// preserving only agents belonging to @current_build_id. Called from
	// provisionerdserver when a workspace build completes, after the new
	// build's agents have been inserted, so running agents are not
	// deleted while a build is still queued or provisioning.
	//
	// Agent context rows (workspace_agent_context_snapshots and
	// workspace_agent_context_resources) only describe live agents, and
	// agents are never un-deleted, so they are hard-deleted here instead
	// of accumulating alongside the soft-deleted agent rows.
	SoftDeletePriorWorkspaceAgents(ctx context.Context, arg SoftDeletePriorWorkspaceAgentsParams) error
	// Marks every non-deleted agent belonging to the given workspace as
	// deleted. Called alongside UpdateWorkspaceDeletedByID when a workspace
	// itself is soft-deleted, so the agent instance-identity auth path
	// (which filters on workspace_agents.deleted) doesn't keep seeing
	// orphaned rows.
	//
	// Agent context rows are hard-deleted for the same reason as in
	// SoftDeletePriorWorkspaceAgents.
	SoftDeleteWorkspaceAgentsByWorkspaceID(ctx context.Context, workspaceID uuid.UUID) error
	// MCP resources bypass context drift and are live-synced on each push.
	// Changed chats are locked in ID order so concurrent clear-then-copy re-pins
	// cannot interleave with the replacement.
	SyncAgentChatsContextMCPResources(ctx context.Context, agentID uuid.UUID) ([]uuid.UUID, error)
	// Overrides updated_at on the parent run without touching any
	// other column. Used by tests that need to stamp a run with a
	// specific timestamp after the InsertChatDebugStep CTE has
	// already bumped it to NOW(), so stale-row finalization paths
	// can be exercised deterministically. The chatdebug service
	// itself does not call this: heartbeats go through
	// TouchChatDebugStepAndRun, and step creation updates the parent
	// run via the InsertChatDebugStep CTE.
	TouchChatDebugRunUpdatedAt(ctx context.Context, arg TouchChatDebugRunUpdatedAtParams) error
	// Atomically bumps updated_at on both the step and its parent run
	// in a single statement. This prevents FinalizeStale from
	// interleaving between the two touches and finalizing a run whose
	// step heartbeat was just written.
	//
	// The step UPDATE joins through touched_run (via FROM) and reads
	// its RETURNING rows. Per the PostgreSQL WITH semantics, RETURNING
	// is the only way to communicate values between a data-modifying
	// CTE and the main query, and consuming those rows forces the run
	// UPDATE to complete before the step UPDATE. That matches the
	// lock order used by FinalizeStaleChatDebugRows and avoids a
	// deadlock between concurrent heartbeats and stale sweeps. The
	// join also constrains the step update to the specified run so a
	// mismatched (run_id, step_id) pair cannot silently refresh an
	// unrelated step.
	TouchChatDebugStepAndRun(ctx context.Context, arg TouchChatDebugStepAndRunParams) error
	// Non blocking lock. Returns true if the lock was acquired, false otherwise.
	//
	// This must be called from within a transaction. The lock will be automatically
	// released when the transaction ends.
	TryAcquireLock(ctx context.Context, pgTryAdvisoryXactLock int64) (bool, error)
	UnarchiveChatByID(ctx context.Context, id uuid.UUID) ([]Chat, error)
	// This will always work regardless of the current state of the template version.
	UnarchiveTemplateVersion(ctx context.Context, arg UnarchiveTemplateVersionParams) error
	UnfavoriteWorkspace(ctx context.Context, id uuid.UUID) error
	// Resets linked_id to '' for OIDC links where the linked_id is non-empty
	// and does not begin with the expected issuer prefix. This allows users to
	// re-authenticate under a new OIDC provider.
	UnlinkOIDCUsersByIssuerMismatch(ctx context.Context, expectedPrefix string) (int64, error)
	UnpinChatByID(ctx context.Context, id uuid.UUID) error
	UnsetDefaultChatModelConfigs(ctx context.Context, organizationID uuid.UUID) error
	UpdateAIBridgeInterceptionEnded(ctx context.Context, arg UpdateAIBridgeInterceptionEndedParams) (AIBridgeInterception, error)
	// Records heartbeat liveness for an active Gateway DRPC session. The database sets the
	// timestamp so it stays consistent regardless of clock drift between API
	// replicas.
	UpdateAIGatewayKeyLastHeartbeatAt(ctx context.Context, id uuid.UUID) (int64, error)
	UpdateAIProvider(ctx context.Context, arg UpdateAIProviderParams) (AIProvider, error)
	UpdateAPIKeyByID(ctx context.Context, arg UpdateAPIKeyByIDParams) error
	UpdateChatACLByID(ctx context.Context, arg UpdateChatACLByIDParams) error
	UpdateChatBuildAgentBinding(ctx context.Context, arg UpdateChatBuildAgentBindingParams) (Chat, error)
	// Uses COALESCE so that passing NULL from Go means "keep the
	// existing value." This is intentional: debug rows follow a
	// write-once-finalize pattern where fields are set at creation
	// or finalization and never cleared back to NULL. The @now
	// parameter keeps updated_at under the caller's clock.
	// updated_at is also the retention clock used by DeleteOldChatDebugRuns.
	//
	// finished_at is enforced as write-once at the SQL level: once
	// populated it cannot be overwritten by a later call. Callers
	// that issue a summary or status refresh after the run has
	// already finalized therefore cannot corrupt the original
	// completion timestamp, which keeps duration and ordering
	// calculations stable regardless of how many times the row is
	// updated.
	UpdateChatDebugRun(ctx context.Context, arg UpdateChatDebugRunParams) (ChatDebugRun, error)
	// Uses COALESCE so that passing NULL from Go means "keep the
	// existing value." This is intentional: debug rows follow a
	// write-once-finalize pattern where fields are set at creation
	// or finalization and never cleared back to NULL. The @now
	// parameter keeps updated_at under the caller's clock, matching
	// the injectable quartz.Clock used by FinalizeStale sweeps.
	UpdateChatDebugStep(ctx context.Context, arg UpdateChatDebugStepParams) (ChatDebugStep, error)
	UpdateChatDiffStatusReferenceURL(ctx context.Context, arg UpdateChatDiffStatusReferenceURLParams) error
	// Atomically updates the execution-state-managed fields on a chat:
	// status, archived, last_error, ownership identifiers, the
	// requires-action deadline, and the manual compaction request marker.
	// Callers compose this with transition mutations inside a single
	// ChatMachine.Update transaction.
	//
	// grant_history_epoch gives a turn that inserts no history the same
	// fresh retry budget and message part episode keys a history change
	// would grant, mirroring the chat_messages trigger postcondition.
	//
	// retry_state is a pending retry of a running turn, so it is cleared
	// whenever the chat leaves running. Otherwise an interrupted or failed
	// chat would keep announcing a retry that will never happen.
	UpdateChatExecutionState(ctx context.Context, arg UpdateChatExecutionStateParams) (Chat, error)
	// Bumps the heartbeat timestamp for the given set of chat IDs,
	// provided they are still running and owned by the specified
	// worker. Returns the IDs that were actually updated so the
	// caller can detect stolen or completed chats via set-difference.
	UpdateChatHeartbeats(ctx context.Context, arg UpdateChatHeartbeatsParams) ([]uuid.UUID, error)
	UpdateChatLabelsByID(ctx context.Context, arg UpdateChatLabelsByIDParams) (Chat, error)
	UpdateChatLastModelConfigByID(ctx context.Context, arg UpdateChatLastModelConfigByIDParams) (Chat, error)
	// Updates the last read message ID for a chat. This is used to track
	// which messages the owner has seen, enabling unread indicators. A NULL
	// value clears the cursor, marking every message unread again.
	UpdateChatLastReadMessageID(ctx context.Context, arg UpdateChatLastReadMessageIDParams) error
	// Updates the cached last completed turn summary for sidebar display.
	// Empty or whitespace-only summaries are stored as NULL here so direct
	// query callers cannot accidentally persist blank sidebar text.
	// This intentionally preserves updated_at. The staleness guard uses
	// history_version so worker lifecycle transitions that do not change the
	// active message history cannot reject final turn summary writes.
	// Two summary workers using the same freshness marker are last-write-wins.
	UpdateChatLastTurnSummary(ctx context.Context, arg UpdateChatLastTurnSummaryParams) (int64, error)
	UpdateChatMCPServerIDs(ctx context.Context, arg UpdateChatMCPServerIDsParams) (Chat, error)
	UpdateChatModelConfig(ctx context.Context, arg UpdateChatModelConfigParams) (ChatModelConfig, error)
	UpdateChatModelConfigACLByID(ctx context.Context, arg UpdateChatModelConfigACLByIDParams) (ChatModelConfig, error)
	UpdateChatPinOrder(ctx context.Context, arg UpdateChatPinOrderParams) error
	UpdateChatPlanModeByID(ctx context.Context, arg UpdateChatPlanModeByIDParams) (Chat, error)
	UpdateChatProjectByID(ctx context.Context, arg UpdateChatProjectByIDParams) (ChatProject, error)
	// Stores the client-visible retry payload. retry_state_version is
	// assigned by trigger from the current snapshot_version.
	UpdateChatRetryState(ctx context.Context, arg UpdateChatRetryStateParams) (Chat, error)
	UpdateChatStatus(ctx context.Context, arg UpdateChatStatusParams) (Chat, error)
	// The history_version fence lets background summary writes ignore worker-only
	// updates while losing to newer message history.
	UpdateChatSummary(ctx context.Context, arg UpdateChatSummaryParams) (int64, error)
	// Writes only when @title_source ranks at or above the current source.
	// chat_title_source declares its values in rank order.
	UpdateChatTitleByID(ctx context.Context, arg UpdateChatTitleByIDParams) (Chat, error)
	UpdateChatWorkspaceBinding(ctx context.Context, arg UpdateChatWorkspaceBindingParams) (Chat, error)
	UpdateCryptoKeyDeletesAt(ctx context.Context, arg UpdateCryptoKeyDeletesAtParams) (CryptoKey, error)
	UpdateCustomRole(ctx context.Context, arg UpdateCustomRoleParams) (CustomRole, error)
	// Updates only the encrypted columns (api_key, api_key_key_id) and
	// the updated_at timestamp on a row. Used by the dbcrypt key
	// rotation utility to re-encrypt or decrypt rows in place.
	UpdateEncryptedAIProviderKey(ctx context.Context, arg UpdateEncryptedAIProviderKeyParams) (AIProviderKey, error)
	// Updates only the encrypted columns (settings, settings_key_id) and
	// the updated_at timestamp on a row, regardless of its deleted flag.
	// Used by the dbcrypt key rotation utility to re-encrypt or decrypt
	// rows in place.
	UpdateEncryptedAIProviderSettings(ctx context.Context, arg UpdateEncryptedAIProviderSettingsParams) (AIProvider, error)
	UpdateEncryptedChatMCPServerHeaders(ctx context.Context, arg UpdateEncryptedChatMCPServerHeadersParams) error
	UpdateEncryptedUserAIProviderKey(ctx context.Context, arg UpdateEncryptedUserAIProviderKeyParams) (UserAIProviderKey, error)
	// If a refresh lease is provided, the row is only updated if the lease matches.
	UpdateExternalAuthLink(ctx context.Context, arg UpdateExternalAuthLinkParams) (ExternalAuthLink, error)
	UpdateGitSSHKey(ctx context.Context, arg UpdateGitSSHKeyParams) (GitSSHKey, error)
	UpdateGroupByID(ctx context.Context, arg UpdateGroupByIDParams) (Group, error)
	UpdateInactiveUsersToDormant(ctx context.Context, arg UpdateInactiveUsersToDormantParams) ([]UpdateInactiveUsersToDormantRow, error)
	UpdateInboxNotificationReadStatus(ctx context.Context, arg UpdateInboxNotificationReadStatusParams) error
	UpdateMCPServerConfig(ctx context.Context, arg UpdateMCPServerConfigParams) (MCPServerConfig, error)
	UpdateMCPServerConfigACLByID(ctx context.Context, arg UpdateMCPServerConfigACLByIDParams) error
	// Refresh persistence must not recreate a token deleted by disconnect.
	// The optimistic lock also prevents stale refreshes from replacing newer tokens.
	UpdateMCPServerUserTokenFromRefresh(ctx context.Context, arg UpdateMCPServerUserTokenFromRefreshParams) (MCPServerUserToken, error)
	UpdateMemberRoles(ctx context.Context, arg UpdateMemberRolesParams) (OrganizationMember, error)
	UpdateMemoryResourceMonitor(ctx context.Context, arg UpdateMemoryResourceMonitorParams) error
	UpdateNotificationTemplateMethodByID(ctx context.Context, arg UpdateNotificationTemplateMethodByIDParams) (NotificationTemplate, error)
	UpdateOAuth2ProviderAppByClientID(ctx context.Context, arg UpdateOAuth2ProviderAppByClientIDParams) (OAuth2ProviderApp, error)
	UpdateOAuth2ProviderAppByID(ctx context.Context, arg UpdateOAuth2ProviderAppByIDParams) (OAuth2ProviderApp, error)
	UpdateOrganization(ctx context.Context, arg UpdateOrganizationParams) (Organization, error)
	UpdateOrganizationDeletedByID(ctx context.Context, arg UpdateOrganizationDeletedByIDParams) error
	UpdateOrganizationSkillByOrganizationIDAndName(ctx context.Context, arg UpdateOrganizationSkillByOrganizationIDAndNameParams) (Skill, error)
	UpdateOrganizationWorkspaceSharingSettings(ctx context.Context, arg UpdateOrganizationWorkspaceSharingSettingsParams) (Organization, error)
	// Cancels all pending provisioner jobs for prebuilt workspaces on a specific preset from an
	// inactive template version.
	// This is an optimization to clean up stale pending jobs.
	UpdatePrebuildProvisionerJobWithCancel(ctx context.Context, arg UpdatePrebuildProvisionerJobWithCancelParams) ([]UpdatePrebuildProvisionerJobWithCancelRow, error)
	UpdatePresetPrebuildStatus(ctx context.Context, arg UpdatePresetPrebuildStatusParams) error
	UpdatePresetsLastInvalidatedAt(ctx context.Context, arg UpdatePresetsLastInvalidatedAtParams) ([]UpdatePresetsLastInvalidatedAtRow, error)
	UpdateProvisionerDaemonLastSeenAt(ctx context.Context, arg UpdateProvisionerDaemonLastSeenAtParams) error
	UpdateProvisionerJobByID(ctx context.Context, arg UpdateProvisionerJobByIDParams) error
	UpdateProvisionerJobLogsLength(ctx context.Context, arg UpdateProvisionerJobLogsLengthParams) error
	UpdateProvisionerJobLogsOverflowed(ctx context.Context, arg UpdateProvisionerJobLogsOverflowedParams) error
	UpdateProvisionerJobWithCancelByID(ctx context.Context, arg UpdateProvisionerJobWithCancelByIDParams) error
	UpdateProvisionerJobWithCompleteByID(ctx context.Context, arg UpdateProvisionerJobWithCompleteByIDParams) error
	UpdateProvisionerJobWithCompleteWithStartedAtByID(ctx context.Context, arg UpdateProvisionerJobWithCompleteWithStartedAtByIDParams) error
	UpdateReplica(ctx context.Context, arg UpdateReplicaParams) (Replica, error)
	UpdateTailnetPeerStatusByCoordinator(ctx context.Context, arg UpdateTailnetPeerStatusByCoordinatorParams) ([]uuid.UUID, error)
	UpdateTemplateACLByID(ctx context.Context, arg UpdateTemplateACLByIDParams) error
	UpdateTemplateAccessControlByID(ctx context.Context, arg UpdateTemplateAccessControlByIDParams) error
	UpdateTemplateActiveVersionByID(ctx context.Context, arg UpdateTemplateActiveVersionByIDParams) error
	UpdateTemplateDeletedByID(ctx context.Context, arg UpdateTemplateDeletedByIDParams) error
	UpdateTemplateMetaByID(ctx context.Context, arg UpdateTemplateMetaByIDParams) error
	UpdateTemplateScheduleByID(ctx context.Context, arg UpdateTemplateScheduleByIDParams) error
	UpdateTemplateVersionByID(ctx context.Context, arg UpdateTemplateVersionByIDParams) error
	UpdateTemplateVersionDescriptionByJobID(ctx context.Context, arg UpdateTemplateVersionDescriptionByJobIDParams) error
	UpdateTemplateVersionExternalAuthProvidersByJobID(ctx context.Context, arg UpdateTemplateVersionExternalAuthProvidersByJobIDParams) error
	UpdateTemplateVersionFlagsByJobID(ctx context.Context, arg UpdateTemplateVersionFlagsByJobIDParams) error
	UpdateTemplateWorkspacesLastUsedAt(ctx context.Context, arg UpdateTemplateWorkspacesLastUsedAtParams) error
	UpdateUsageEventsPostPublish(ctx context.Context, arg UpdateUsageEventsPostPublishParams) error
	UpdateUserAIProviderKey(ctx context.Context, arg UpdateUserAIProviderKeyParams) (UserAIProviderKey, error)
	UpdateUserAgentChatSendShortcut(ctx context.Context, arg UpdateUserAgentChatSendShortcutParams) (string, error)
	UpdateUserChatCompactionThreshold(ctx context.Context, arg UpdateUserChatCompactionThresholdParams) (UserConfig, error)
	UpdateUserChatCustomPrompt(ctx context.Context, arg UpdateUserChatCustomPromptParams) (UserConfig, error)
	UpdateUserCodeDiffDisplayMode(ctx context.Context, arg UpdateUserCodeDiffDisplayModeParams) (string, error)
	UpdateUserCollapseAssistantSteps(ctx context.Context, arg UpdateUserCollapseAssistantStepsParams) (bool, error)
	UpdateUserDeletedByID(ctx context.Context, id uuid.UUID) error
	UpdateUserEmail(ctx context.Context, arg UpdateUserEmailParams) (User, error)
	UpdateUserGithubComUserID(ctx context.Context, arg UpdateUserGithubComUserIDParams) error
	UpdateUserHashedOneTimePasscode(ctx context.Context, arg UpdateUserHashedOneTimePasscodeParams) error
	UpdateUserHashedPassword(ctx context.Context, arg UpdateUserHashedPasswordParams) error
	UpdateUserLastSeenAt(ctx context.Context, arg UpdateUserLastSeenAtParams) (User, error)
	UpdateUserLink(ctx context.Context, arg UpdateUserLinkParams) (UserLink, error)
	// Backfills linked_id for legacy user_links that were created before
	// linked_id tracking was added. Only updates when linked_id is empty
	// to avoid overwriting a valid binding.
	UpdateUserLinkedID(ctx context.Context, arg UpdateUserLinkedIDParams) (UserLink, error)
	UpdateUserLoginType(ctx context.Context, arg UpdateUserLoginTypeParams) (User, error)
	UpdateUserNotificationPreferences(ctx context.Context, arg UpdateUserNotificationPreferencesParams) (int64, error)
	UpdateUserProfile(ctx context.Context, arg UpdateUserProfileParams) (User, error)
	UpdateUserQuietHoursSchedule(ctx context.Context, arg UpdateUserQuietHoursScheduleParams) (User, error)
	UpdateUserRoles(ctx context.Context, arg UpdateUserRolesParams) (User, error)
	UpdateUserSecretByUserIDAndName(ctx context.Context, arg UpdateUserSecretByUserIDAndNameParams) (UserSecret, error)
	UpdateUserShellToolDisplayMode(ctx context.Context, arg UpdateUserShellToolDisplayModeParams) (string, error)
	UpdateUserSkillByUserIDAndName(ctx context.Context, arg UpdateUserSkillByUserIDAndNameParams) (Skill, error)
	UpdateUserStatus(ctx context.Context, arg UpdateUserStatusParams) (User, error)
	UpdateUserTerminalFont(ctx context.Context, arg UpdateUserTerminalFontParams) (UserConfig, error)
	UpdateUserThemeDark(ctx context.Context, arg UpdateUserThemeDarkParams) (UserConfig, error)
	UpdateUserThemeLight(ctx context.Context, arg UpdateUserThemeLightParams) (UserConfig, error)
	UpdateUserThemeMode(ctx context.Context, arg UpdateUserThemeModeParams) (UserConfig, error)
	UpdateUserThemePreference(ctx context.Context, arg UpdateUserThemePreferenceParams) (UserConfig, error)
	UpdateUserThinkingDisplayMode(ctx context.Context, arg UpdateUserThinkingDisplayModeParams) (string, error)
	UpdateVolumeResourceMonitor(ctx context.Context, arg UpdateVolumeResourceMonitorParams) error
	UpdateWorkspace(ctx context.Context, arg UpdateWorkspaceParams) (WorkspaceTable, error)
	UpdateWorkspaceACLByID(ctx context.Context, arg UpdateWorkspaceACLByIDParams) error
	UpdateWorkspaceAgentConnectionByID(ctx context.Context, arg UpdateWorkspaceAgentConnectionByIDParams) error
	UpdateWorkspaceAgentDirectoryByID(ctx context.Context, arg UpdateWorkspaceAgentDirectoryByIDParams) error
	UpdateWorkspaceAgentDisplayAppsByID(ctx context.Context, arg UpdateWorkspaceAgentDisplayAppsByIDParams) error
	UpdateWorkspaceAgentLifecycleStateByID(ctx context.Context, arg UpdateWorkspaceAgentLifecycleStateByIDParams) error
	UpdateWorkspaceAgentLogOverflowByID(ctx context.Context, arg UpdateWorkspaceAgentLogOverflowByIDParams) error
	UpdateWorkspaceAgentMetadata(ctx context.Context, arg UpdateWorkspaceAgentMetadataParams) error
	UpdateWorkspaceAgentStartupByID(ctx context.Context, arg UpdateWorkspaceAgentStartupByIDParams) error
	UpdateWorkspaceAppHealthByID(ctx context.Context, arg UpdateWorkspaceAppHealthByIDParams) error
	UpdateWorkspaceAutomaticUpdates(ctx context.Context, arg UpdateWorkspaceAutomaticUpdatesParams) error
	UpdateWorkspaceAutostart(ctx context.Context, arg UpdateWorkspaceAutostartParams) error
	UpdateWorkspaceBuildCostByID(ctx context.Context, arg UpdateWorkspaceBuildCostByIDParams) error
	UpdateWorkspaceBuildDeadlineByID(ctx context.Context, arg UpdateWorkspaceBuildDeadlineByIDParams) error
	UpdateWorkspaceBuildFlagsByID(ctx context.Context, arg UpdateWorkspaceBuildFlagsByIDParams) error
	// Stamps the deadline value that an autostop reminder was last sent for. Once
	// this equals the build's deadline the reminder is considered handled and the
	// lifecycle executor will not send another for this deadline, which makes the
	// reminder idempotent and HA-safe. It re-arms automatically when the deadline
	// changes (e.g. an activity bump).
	UpdateWorkspaceBuildNotifiedAutostopDeadline(ctx context.Context, arg UpdateWorkspaceBuildNotifiedAutostopDeadlineParams) error
	UpdateWorkspaceBuildOrchestrationCanceledByID(ctx context.Context, arg UpdateWorkspaceBuildOrchestrationCanceledByIDParams) (WorkspaceBuildOrchestration, error)
	UpdateWorkspaceBuildOrchestrationCompletedByID(ctx context.Context, arg UpdateWorkspaceBuildOrchestrationCompletedByIDParams) (WorkspaceBuildOrchestration, error)
	UpdateWorkspaceBuildOrchestrationFailedByID(ctx context.Context, arg UpdateWorkspaceBuildOrchestrationFailedByIDParams) (WorkspaceBuildOrchestration, error)
	UpdateWorkspaceBuildOrchestrationRetryByID(ctx context.Context, arg UpdateWorkspaceBuildOrchestrationRetryByIDParams) (WorkspaceBuildOrchestration, error)
	UpdateWorkspaceBuildProvisionerStateByID(ctx context.Context, arg UpdateWorkspaceBuildProvisionerStateByIDParams) error
	UpdateWorkspaceDeletedByID(ctx context.Context, arg UpdateWorkspaceDeletedByIDParams) error
	UpdateWorkspaceDormantDeletingAt(ctx context.Context, arg UpdateWorkspaceDormantDeletingAtParams) (WorkspaceTable, error)
	UpdateWorkspaceLastUsedAt(ctx context.Context, arg UpdateWorkspaceLastUsedAtParams) error
	UpdateWorkspaceNextStartAt(ctx context.Context, arg UpdateWorkspaceNextStartAtParams) error
	// This allows editing the properties of a workspace proxy.
	UpdateWorkspaceProxy(ctx context.Context, arg UpdateWorkspaceProxyParams) (WorkspaceProxy, error)
	UpdateWorkspaceProxyDeleted(ctx context.Context, arg UpdateWorkspaceProxyDeletedParams) error
	UpdateWorkspaceTTL(ctx context.Context, arg UpdateWorkspaceTTLParams) error
	UpdateWorkspacesDormantDeletingAtByTemplateID(ctx context.Context, arg UpdateWorkspacesDormantDeletingAtByTemplateIDParams) ([]WorkspaceTable, error)
	UpdateWorkspacesTTLByTemplateID(ctx context.Context, arg UpdateWorkspacesTTLByTemplateIDParams) error
	// Upsert a batch of model prices from a JSON array, all recorded under the
	// given source. Each element must have provider, model, and the four price
	// fields, and null prices are written as SQL NULL.
	// Each source keeps its own row, so the price book and a custom price never
	// overwrite each other. A conflicting row is only rewritten when a price
	// differs, so updated_at records when a price last changed. Prices are
	// nullable and a NULL on either side counts as a difference.
	UpsertAIModelPrices(ctx context.Context, arg UpsertAIModelPricesParams) error
	// Returns true if a new rows was inserted, false otherwise.
	UpsertAISeatState(ctx context.Context, arg UpsertAISeatStateParams) (bool, error)
	UpsertAnnouncementBanners(ctx context.Context, value string) error
	UpsertApplicationName(ctx context.Context, value string) error
	// Upserts boundary usage statistics for a replica. On INSERT (new period), uses
	// delta values for unique counts (only data since last flush). On UPDATE, uses
	// cumulative values for unique counts (accurate period totals). Request counts
	// are always deltas, accumulated in DB. Returns true if insert, false if update.
	UpsertBoundaryUsageStats(ctx context.Context, arg UpsertBoundaryUsageStatsParams) (bool, error)
	// UpsertChatAdvisorConfig stores the deployment-wide runtime configuration
	// for the experimental chat advisor. Callers marshal codersdk.AdvisorConfig
	// to JSON before invoking this query.
	UpsertChatAdvisorConfig(ctx context.Context, value string) error
	UpsertChatAutoArchiveDays(ctx context.Context, autoArchiveDays int32) error
	UpsertChatComputerUseProvider(ctx context.Context, provider string) error
	// UpsertChatDebugLoggingAllowUsers updates the runtime admin setting that
	// allows users to opt into chat debug logging.
	UpsertChatDebugLoggingAllowUsers(ctx context.Context, allowUsers bool) error
	UpsertChatDebugRetentionDays(ctx context.Context, debugRetentionDays int32) error
	UpsertChatDesktopEnabled(ctx context.Context, enableDesktop bool) error
	UpsertChatDiffStatus(ctx context.Context, arg UpsertChatDiffStatusParams) (ChatDiffStatus, error)
	UpsertChatDiffStatusReference(ctx context.Context, arg UpsertChatDiffStatusReferenceParams) (ChatDiffStatus, error)
	// Upserts a heartbeat row for the (chat_id, runner_id) lease. Uses
	// database time so callers do not depend on a local clock.
	UpsertChatHeartbeat(ctx context.Context, arg UpsertChatHeartbeatParams) error
	UpsertChatIncludeDefaultSystemPrompt(ctx context.Context, includeDefaultSystemPrompt bool) error
	UpsertChatMCPServer(ctx context.Context, arg UpsertChatMCPServerParams) (ChatMCPServer, error)
	UpsertChatOrganizationModelOverride(ctx context.Context, arg UpsertChatOrganizationModelOverrideParams) error
	UpsertChatOrganizationSystemPrompt(ctx context.Context, arg UpsertChatOrganizationSystemPromptParams) (ChatOrganizationSystemPrompt, error)
	// UpsertChatPersonalModelOverridesEnabled updates whether users may configure
	// personal chat model overrides.
	UpsertChatPersonalModelOverridesEnabled(ctx context.Context, enabled bool) error
	UpsertChatPlanModeInstructions(ctx context.Context, value string) error
	// The organization comes from the project row, so the stored scope always
	// matches the project's organization.
	UpsertChatProjectInstructions(ctx context.Context, arg UpsertChatProjectInstructionsParams) (ChatProjectInstruction, error)
	UpsertChatRetentionDays(ctx context.Context, retentionDays int32) error
	UpsertChatSystemPrompt(ctx context.Context, value string) error
	UpsertChatUserModelOverride(ctx context.Context, arg UpsertChatUserModelOverrideParams) error
	UpsertChatWorkspaceTTL(ctx context.Context, workspaceTtl string) error
	UpsertCodernautsEnabled(ctx context.Context, enabled bool) error
	// The default proxy is implied and not actually stored in the database.
	// So we need to store it's configuration here for display purposes.
	// The functional values are immutable and controlled implicitly.
	UpsertDefaultProxy(ctx context.Context, arg UpsertDefaultProxyParams) error
	UpsertExperimentRule(ctx context.Context, arg UpsertExperimentRuleParams) error
	UpsertGroupAIBudget(ctx context.Context, arg UpsertGroupAIBudgetParams) (GroupAIBudget, error)
	UpsertHealthSettings(ctx context.Context, value string) error
	UpsertLastUpdateCheck(ctx context.Context, value string) error
	UpsertLogoURL(ctx context.Context, value string) error
	UpsertMCPServerUserToken(ctx context.Context, arg UpsertMCPServerUserTokenParams) (MCPServerUserToken, error)
	// Insert or update notification report generator logs with recent activity.
	UpsertNotificationReportGeneratorLog(ctx context.Context, arg UpsertNotificationReportGeneratorLogParams) error
	UpsertNotificationsSettings(ctx context.Context, value string) error
	UpsertOAuth2DCREnabled(ctx context.Context, enabled bool) error
	UpsertOAuth2GithubDefaultEligible(ctx context.Context, eligible bool) error
	UpsertPrebuildsSettings(ctx context.Context, value string) error
	UpsertProvisionerDaemon(ctx context.Context, arg UpsertProvisionerDaemonParams) (ProvisionerDaemon, error)
	UpsertRuntimeConfig(ctx context.Context, arg UpsertRuntimeConfigParams) error
	UpsertTailnetCoordinator(ctx context.Context, id uuid.UUID) (TailnetCoordinator, error)
	UpsertTailnetPeer(ctx context.Context, arg UpsertTailnetPeerParams) (TailnetPeer, error)
	UpsertTailnetTunnel(ctx context.Context, arg UpsertTailnetTunnelParams) (TailnetTunnel, error)
	UpsertTelemetryItem(ctx context.Context, arg UpsertTelemetryItemParams) error
	// This query aggregates the workspace_agent_stats and workspace_app_stats data
	// into a single table for efficient storage and querying. Half-hour buckets are
	// used to store the data, and the minutes are summed for each user and template
	// combination. The result is stored in the template_usage_stats table.
	//
	// Session usage is stored per app name in the child table, so the main row
	// carries no session columns at all. Every recomputed bucket rewrites its own
	// child rows: app names that disappeared are deleted, the rest are upserted.
	// The keys come from the computed set rather than from the main upsert,
	// because the no-op guard below suppresses main rows whose columns did not
	// change while their session usage still has to be corrected.
	UpsertTemplateUsageStats(ctx context.Context) error
	UpsertUserAIBudgetOverride(ctx context.Context, arg UpsertUserAIBudgetOverrideParams) (UserAIBudgetOverride, error)
	// UpsertUserAIProviderKey preserves the original id and created_at when the
	// user/provider pair already exists. On conflict, callers provide id and
	// created_at for the insert path only.
	UpsertUserAIProviderKey(ctx context.Context, arg UpsertUserAIProviderKeyParams) (UserAIProviderKey, error)
	UpsertUserChatDebugLoggingEnabled(ctx context.Context, arg UpsertUserChatDebugLoggingEnabledParams) error
	UpsertWebpushVAPIDKeys(ctx context.Context, arg UpsertWebpushVAPIDKeysParams) error
	UpsertWorkspaceAgentContextResource(ctx context.Context, arg UpsertWorkspaceAgentContextResourceParams) (WorkspaceAgentContextResource, error)
	UpsertWorkspaceAgentContextSnapshot(ctx context.Context, arg UpsertWorkspaceAgentContextSnapshotParams) (WorkspaceAgentContextSnapshot, error)
	UpsertWorkspaceAgentPortShare(ctx context.Context, arg UpsertWorkspaceAgentPortShareParams) (WorkspaceAgentPortShare, error)
	UpsertWorkspaceApp(ctx context.Context, arg UpsertWorkspaceAppParams) (WorkspaceApp, error)
	//
	// The returned boolean, new_or_stale, can be used to deduce if a new session
	// was started. This means that a new row was inserted (no previous session) or
	// the updated_at is older than stale interval.
	UpsertWorkspaceAppAuditSession(ctx context.Context, arg UpsertWorkspaceAppAuditSessionParams) (bool, error)
	UsageEventExistsByID(ctx context.Context, id string) (bool, error)
	ValidateGroupIDs(ctx context.Context, groupIds []uuid.UUID) (ValidateGroupIDsRow, error)
	ValidateUserIDs(ctx context.Context, userIds []uuid.UUID) (ValidateUserIDsRow, error)
}

var _ sqlcQuerier = (*sqlQuerier)(nil)