export interface ApiClientSummary {
  id: string;
  client_key: string;
  name: string;
  client_id_url: string;
  client_uri: string;
  redirect_uris: string[];
  scopes: string;
  client_type: string;
  allowed_origins: string[] | null;
  rate_limit_capacity: number | null;
  rate_limit_refill_rate: number | null;
  is_active: boolean;
  created_by: string;
  created_at: string;
  updated_at: string;
  parent_client_id: string | null;
  owner_did: string | null;
}

export interface CreateApiClientResponse {
  id: string;
  client_key: string;
  client_secret?: string;
  name: string;
  client_id_url: string;
  client_type: string;
}

export interface ApiClientAuthKey {
  kid: string;
  jwks_uri: string;
}

export interface ApiClientAuthProbe {
  confidential: boolean;
  reason: string;
  checked_at: string;
}

export interface KeyRotationResult {
  kid: string;
  orphaned_sessions: number;
}

export interface ApiClientAuthKeyListEntry {
  kid: string;
  status: "current" | "retiring" | "revoked";
  created_at: string;
  session_count: number;
}

export interface ApiClientAuthKeysResponse {
  keys: ApiClientAuthKeyListEntry[];
  jwks_uri: string;
}

export interface RevokeApiClientAuthKeyResult {
  kid: string;
  sessions_destroyed: number;
}

export interface RevokeAllApiClientAuthKeysResult {
  revoked: number;
  sessions_destroyed: number;
}

export interface InstanceOauthKey {
  kid: string;
  status: "current" | "retiring" | "revoked";
  created_at: string;
  session_count: number;
}

export interface InstanceOauthKeysResponse {
  keys: InstanceOauthKey[];
}

export interface RevokeInstanceKeyResult {
  kid: string;
  sessions_destroyed: number;
}