cmind/cluster/tenants/v1/internal_tenant_service.proto
Package: cmind.cluster.tenants.v1
Messages
GetContentCaptureRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
userId | string | 2 | user_id is the caller of the request the gateway is about to capture — this endpoint answers "is capture on for this specific caller," never "for the tenant." This service is unauthenticated (no principal of its own to derive it from), so the gateway supplies it explicitly. |
GetContentCaptureResponse
| Field | Type | Number | Description |
|---|---|---|---|
enabled | bool | 1 |
Services
InternalTenantService
InternalTenantService exposes cluster-internal, unauthenticated tenant reads consumed by other in-namespace services. The model gateway calls it on the /v1/responses hot path to learn whether the caller of that request has personally opted into content capture for the tenant. As with every internal_service, network policy (Istio AuthorizationPolicy) must restrict access.
GetContentCapture
POST /cmind.cluster.tenants.v1.InternalTenantService/GetContentCapture
Returns whether content capture is enabled for user_id's own requests in the tenant (off if unset — false for most users, who never opt in).
Request: GetContentCaptureRequest
Response: GetContentCaptureResponse