customer

type AccessChange struct {
	// Org is the tenant acted on.
	Org string `json:"org"`
	// Suspended is the state applied: true for suspend, false for reactivate.
	Suspended bool `json:"suspended"`
	// Affected lists the usernames that were updated.
	Affected []string `json:"affected"`
	// Failed lists the usernames that were NOT updated. Non-empty means the org is in
	// a mixed state and the action should be retried.
	Failed []string `json:"failed"`
}

type AccessOut struct {
	Status string        `json:"status"`
	Msg    string        `json:"msg"`
	Data   *AccessChange `json:"data"`
}

type CustomerDetailData struct {
	Org          string         `json:"org"`
	Display      string         `json:"display"`
	OwnerEmail   string         `json:"ownerEmail"`
	Plan         string         `json:"plan"`
	Status       string         `json:"status"`
	Created      string         `json:"created"`
	BalanceCents int64          `json:"balanceCents"`
	SpendCents   int64          `json:"spendCents"`
	MRRCents     int64          `json:"mrrCents"`
	APIKeys      int            `json:"apiKeys"`
	Users        []CustomerUser `json:"users"`
	Transactions []CustomerTxn  `json:"transactions"`
}

type CustomerDetailOut struct {
	Status string              `json:"status"`
	Msg    string              `json:"msg"`
	Data   *CustomerDetailData `json:"data"`
}

type CustomerRow struct {
	Org          string `json:"org"`
	Display      string `json:"display"`
	OwnerEmail   string `json:"ownerEmail"`
	Plan         string `json:"plan"`
	Status       string `json:"status"` // "active" | "suspended"
	Users        int    `json:"users"`
	BalanceCents int64  `json:"balanceCents"`
	SpendCents   int64  `json:"spendCents"`
	MRRCents     int64  `json:"mrrCents"`
	Created      string `json:"created"`
	LastActive   string `json:"lastActive"`
}

type CustomerTxn struct {
	ID       string `json:"id"`
	Type     string `json:"type"` // "deposit" (credit) | "withdraw" (usage)
	Cents    int64  `json:"cents"`
	Currency string `json:"currency"`
	Notes    string `json:"notes,omitempty"`
	Time     string `json:"time"`
}

type CustomerUser struct {
	Name       string `json:"name"`
	Email      string `json:"email"`
	IsAdmin    bool   `json:"isAdmin"`
	Forbidden  bool   `json:"forbidden"`
	HasAPIKey  bool   `json:"hasApiKey"`
	LastSignin string `json:"lastSignin"`
	Created    string `json:"created"`
}

type CustomersOut struct {
	Status string        `json:"status"`
	Msg    string        `json:"msg"`
	Data   []CustomerRow `json:"data"`
	Total  *int          `json:"total,omitempty"`
}

type GrantIn struct {
	// Org is the tenant to credit. Required.
	Org string `json:"org"`
	// User optionally names a MEMBER to credit, by bare IAM username. Empty credits
	// the org. Which of the two the money actually lands on is decided by
	// account.Payer, not here: a pooled org keeps one balance whatever is named.
	User string `json:"user"`
	// AmountCents is the credit, in whole cents. Must be positive and within the
	// per-grant cap.
	AmountCents int64 `json:"amountCents"`
	// Currency is the ISO code, lower-cased. Empty means usd.
	Currency string `json:"currency"`
	// Reason is the operator's justification, recorded on the audit row.
	Reason string `json:"reason"`
	// Source is the money bucket: "trial" (default) for a non-cash comp that is never
	// refundable, or "prepaid" for real money. Anything unknown falls back to trial.
	Source string `json:"source"`
}

type GrantRow struct {
	Org           string `json:"org"`
	AmountCents   int64  `json:"amountCents"`
	Currency      string `json:"currency"`
	Source        string `json:"source"` // "trial" | "prepaid"
	Reason        string `json:"reason,omitempty"`
	Actor         string `json:"actor"` // staff email (or sub) who issued it
	CreatedAt     string `json:"createdAt"`
	TransactionID string `json:"transactionId,omitempty"`
	Result        string `json:"result"` // success | error
}

type GrantsIn struct {
	// Org filters by the ACTOR's org (the staff org that issued the grant), which is
	// rarely what a reader wants — the target org is a row field, not a filter.
	Org string `json:"org"`
	// Result filters by outcome: "success" or "error". Empty returns both, which is
	// the point of this view — a refused grant is as interesting as a granted one.
	Result string `json:"result"`
	// Limit caps the rows returned. Default 200.
	Limit string `json:"limit"`
}

type GrantsOut struct {
	Status string     `json:"status"`
	Msg    string     `json:"msg"`
	Data   []GrantRow `json:"data"`
	Total  *int       `json:"total,omitempty"`
}

type OrgIn struct {
	// Org is the tenant slug from the path.
	Org string `json:"org"`
}