api

type AccountAuditInput struct {
	ID     string `path:"id" format:"uuid" doc:"Account id"`
	Limit  int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max entries per page"`
	Cursor string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type AccountAuditOutput struct {
	Body struct {
		Entries    []AuditEntryBody `json:"entries"`
		NextCursor *string          `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type AccountBalanceBody struct {
	AccountID string `json:"account_id"`
	Name      string `json:"name"`
	Type      string `json:"type" doc:"One of: asset, liability, equity, income, expense"`
	Currency  string `json:"currency"`
	IsSystem  bool   `` /* 159-byte string literal not displayed */
	Balance   int64  `json:"balance" doc:"Signed derived balance in minor units"`
	// RolledUpBalance is Balance summed over this account and every
	// descendant in its hierarchy (ADR-023). It is additive display only:
	// the balance proof (the currency net/imbalance fields above) is
	// computed from own balances alone, since a rollup double-counts a
	// parent and its descendants by design.
	RolledUpBalance int64 `json:"rolled_up_balance" doc:"Balance including all descendants, in minor units"`
}

type AccountBody struct {
	ID       string `json:"id" doc:"Account id (UUID)"`
	Name     string `json:"name"`
	Type     string `json:"type" doc:"One of: asset, liability, equity, income, expense"`
	Currency string `json:"currency" doc:"ISO 4217 code, e.g. USD"`
	// Status is the account's lifecycle gate (Task 5.5, audit A1.5): active,
	// frozen, or closed. See POST /v1/accounts/{id}/status to change it.
	Status string `json:"status" doc:"One of: active, frozen, closed"`
	// MinBalance is the optional floor enforced on this account's derived
	// balance, in minor units (Task 5.5, audit A1.5). null means no floor.
	MinBalance *int64 `json:"min_balance,omitempty" doc:"Optional minimum balance floor, in minor units. Omitted when unset."`
	// PartyReference and PartyType are optional linkage metadata for an
	// external KYC/party system (Task 6.1, audit A9.1). Both are omitted
	// when unset; this package does not validate them beyond a length cap,
	// the actual party/KYC system is external.
	PartyReference *string `` /* 134-byte string literal not displayed */
	PartyType      *string `json:"party_type,omitempty" doc:"Optional free-text party classification, e.g. individual or business. Omitted when unset."`
	// ParentID is this account's parent in the hierarchy (ADR-023), null for a root.
	ParentID *string `json:"parent_id" nullable:"true" doc:"Parent account id, null for a root"`
}

type AccountOutput struct {
	Body AccountBody
}

type AccountTreeNode struct {
	AccountBody
	Depth           int   `json:"depth"`
	OwnBalance      int64 `json:"own_balance" doc:"This account's own balance, in minor units"`
	RolledUpBalance int64 `json:"rolled_up_balance" doc:"Balance including all descendants, in minor units"`
}

type AccountTreeOutput struct {
	Body struct {
		Accounts []AccountTreeNode `json:"accounts"`
	}
}

type AccountsOutput struct {
	Body struct {
		Accounts []AccountBody `json:"accounts"`
	}
}

type ApprovePendingOutput struct {
	Body TransactionBody
}

type AuditAnchorBody struct {
	ChainSeq  int64     `json:"chain_seq"`
	RowHash   string    `json:"row_hash"`
	CreatedAt time.Time `json:"created_at"`
}

type AuditEntryBody struct {
	ID            string    `json:"id"`
	Action        string    `json:"action"`
	TransactionID string    `json:"transaction_id"`
	Actor         string    `json:"actor"`
	Before        any       `json:"before,omitempty"`
	After         any       `json:"after"`
	CreatedAt     time.Time `json:"created_at"`
}

type AuditHeadBody struct {
	ChainSeq int64  `json:"chain_seq"`
	RowHash  string `json:"row_hash"`
}

type AuditListOutput struct {
	Body struct {
		Entries []AuditEntryBody `json:"entries"`
	}
}

type AuditLogInput struct {
	Limit  int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max entries per page"`
	Cursor string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type AuditLogOutput struct {
	Body struct {
		Entries    []AuditEntryBody `json:"entries"`
		NextCursor *string          `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type BalanceOutput struct {
	Body struct {
		AccountID string `json:"account_id"`
		Amount    int64  `json:"amount" doc:"Signed balance in minor units (e.g. cents)"`
		Currency  string `json:"currency"`
	}
}

type ConvertInput struct {
	// See CreateTransactionInput's IdempotencyKey field for why this is not
	// required:"true": a missing header should fail our explicit 400 check
	// below with a clear message, not huma's generic 422.
	IdempotencyKey string `` /* 405-byte string literal not displayed */
	Body           struct {
		FromAccount  string `json:"from_account" format:"uuid" doc:"Account to debit, in its own currency"`
		ToAccount    string `json:"to_account" format:"uuid" doc:"Account to credit; its currency is the conversion's destination currency"`
		SourceAmount int64  `json:"source_amount" doc:"Amount to convert, in minor units of the from account's currency; must be positive"`
	}
}

type ConvertOutput struct {
	Status   int
	Replayed bool `header:"Idempotent-Replayed"`
	Body     ConvertResponseBody
}

type ConvertResponseBody struct {
	Transaction TransactionBody `json:"transaction"`
	FX          FXDetailBody    `json:"fx"`
	Pending     *PendingBody    `` /* 180-byte string literal not displayed */
}

type CreateAccountInput struct {
	Body struct {
		Name       string `json:"name" minLength:"1" maxLength:"200" doc:"Human-readable account name"`
		Type       string `json:"type" enum:"asset,liability,equity,income,expense" doc:"Fundamental account class"`
		Currency   string `` /* 134-byte string literal not displayed */
		MinBalance *int64 `json:"min_balance,omitempty" doc:"Optional minimum balance floor, in minor units. Omit for no floor."`
		// PartyReference and PartyType (Task 6.1, audit A9.1) are optional
		// linkage metadata for an external KYC/party system: an id and a
		// free-text classification (e.g. "individual", "business"). Neither
		// is validated beyond a length cap; the party/KYC system itself is
		// external and out of scope for this service.
		PartyReference *string `` /* 153-byte string literal not displayed */
		PartyType      *string `json:"party_type,omitempty" maxLength:"256" doc:"Optional free-text party classification, e.g. individual or business."`
		// ParentID (ADR-023) optionally nests the new account under an
		// existing one at creation time. The parent must be the same tenant
		// and currency; an unknown parent or a hierarchy violation is
		// rejected with 422 (see toHumaErr).
		ParentID *string `json:"parent_id,omitempty" format:"uuid" doc:"Optional parent account id. The parent must be the same tenant and currency."`
	}
}

type CreateFXRateInput struct {
	Body struct {
		TenantID  string `json:"tenant_id,omitempty" doc:"Tenant to scope this rate to. Omit or empty for the global default."`
		Base      string `json:"base" pattern:"^[A-Z]{3}$" doc:"Base currency, 3 uppercase letters"`
		Quote     string `json:"quote" pattern:"^[A-Z]{3}$" doc:"Quote currency, 3 uppercase letters"`
		MidRateE8 int64  `json:"mid_rate_e8" minimum:"1" doc:"Mid rate, quote units per base unit, scaled by 1e8"`
		SpreadBps *int32 `` /* 145-byte string literal not displayed */
	}
}

type CreateTenantInput struct {
	Body struct {
		Name string `json:"name" minLength:"1" maxLength:"200" doc:"Human-readable tenant name"`
	}
}

type CreateTransactionInput struct {
	// The schema field is left optional (not required:"true") so a missing
	// header fails our explicit 400 check below with a clear message,
	// rather than huma's generic schema-validation 422.
	IdempotencyKey string `` /* 407-byte string literal not displayed */
	Body           struct {
		Currency string         `json:"currency" pattern:"^[A-Z]{3}$" doc:"ISO 4217 code shared by every posting"`
		Postings []PostingInput `json:"postings" minItems:"2" maxItems:"100" doc:"Two or more legs that must sum to zero"`
		// Reference is an optional external id for reconciliation (Task 4.3,
		// audit A1.3), for example an upstream payment processor's charge id
		// or a bank statement line. Must be unique for this tenant when
		// supplied: reusing one already in use returns 409 Conflict.
		Reference *string `` /* 155-byte string literal not displayed */
		// EffectiveAt is an optional value date (Task 4.3, audit A1.3),
		// distinct from when the row is actually written. Omitted, it
		// defaults to the post time.
		EffectiveAt *time.Time `` /* 143-byte string literal not displayed */
	}
}

type CreateTransactionOutput struct {
	Status   int
	Replayed bool `header:"Idempotent-Replayed"`
	Body     struct {
		TransactionBody
		Pending *PendingBody `` /* 226-byte string literal not displayed */
	}
}

type CreateWebhookSubscriptionInput struct {
	Body struct {
		TenantID   string   `json:"tenant_id" format:"uuid" doc:"Tenant this subscription belongs to"`
		URL        string   `json:"url" doc:"Callback URL; must be an absolute http or https URL"`
		EventTypes []string `` /* 149-byte string literal not displayed */
	}
}

type CreateWebhookSubscriptionOutput struct {
	Body IssuedWebhookSubscriptionBody
}

type CurrencyBalanceBody struct {
	Currency  string `json:"currency"`
	Net       int64  `` /* 136-byte string literal not displayed */
	Imbalance bool   `json:"imbalance" doc:"true if net is nonzero, which should never happen"`
}

type Deps struct {
	Accounts     *ledger.AccountService
	Transactions *ledger.TransactionService
	Audit        *ledger.AuditService
	// Admin backs the /v1/admin operations (Task 2.2b): onboarding a tenant
	// and issuing/rotating/revoking its api keys. Every /v1/admin/ path
	// already requires domain.ScopeAdmin via auth.HumaMiddleware
	// (RequiredHTTPScope), so the operations themselves add no further auth.
	Admin *admin.Service
	// Reports backs GET /v1/reports/trial-balance (Task 6.3, audit A9.2).
	Reports *ledger.ReportService
	// Disputes backs the /v1/disputes operations (Task 6.3, audit A9.2): a
	// dispute/chargeback data model built on the reversal primitive.
	Disputes *ledger.DisputeService
	// Approvals backs the /v1/pending operations (Task 9, ADR-025): listing,
	// reading, approving, rejecting, and cancelling a held (over-threshold)
	// transaction. Optional like the other services; a zero Deps leaves it
	// nil, and the approve/reject/cancel/list/get operations are still
	// registered (they are always part of the spec), but call a nil
	// *ledger.ApprovalService if ever invoked without one configured, the same
	// tradeoff every other optional Deps field already makes.
	Approvals *ledger.ApprovalService
	// FX backs the /v1/admin/fx operations (ADR-020): live rate and markup
	// config. Optional like the other services; a zero Deps leaves it nil.
	FX *fx.AdminService
	// DemoMode, when true, makes create-tenant prefill the new tenant with the
	// demo's starter FX rates and 1 percent markup (fx.PrefillDemoRates). It is
	// demo-only convenience; a zero Deps (production) leaves it false and no
	// prefill happens.
	DemoMode bool
	Auth     *auth.Resolver
	// RateLimiter, if set, is registered immediately after the auth middleware
	// (see New). It is optional: a zero Deps (spec generation, and tests that
	// only exercise unauthenticated routes) leaves it nil and no rate-limit
	// middleware is registered at all, rather than one that always fails open.
	RateLimiter *auth.Limiter
	// NegativeThrottle, if set, is passed straight through to
	// auth.HumaMiddleware (Task 5.2, audit A2.5/A6.4): it caps failed-auth
	// attempts per client IP BEFORE the resolver's database lookup runs, so a
	// garbage-API-key flood cannot exhaust the connection pool. Optional for
	// the same reason RateLimiter is: a nil value skips the gate entirely
	// rather than failing closed.
	NegativeThrottle *auth.NegativeThrottle
	// Revision is the running binary's build revision (git short SHA; "dev"
	// outside a real build), surfaced additively on GET /healthz (Task
	// 5.6a). A zero value (spec generation, and tests that never care) just
	// serializes as an empty string; it never affects the "ok" status the
	// deploy health check depends on.
	Revision string
}

type DisputeBody struct {
	ID                      string     `json:"id"`
	TransactionID           string     `json:"transaction_id"`
	Status                  string     `json:"status" doc:"One of: open, resolved_reversed, resolved_rejected"`
	Reason                  string     `json:"reason"`
	ResolutionTransactionID *string    `` /* 134-byte string literal not displayed */
	CreatedAt               time.Time  `json:"created_at"`
	ResolvedAt              *time.Time `json:"resolved_at,omitempty" doc:"When the dispute was resolved. Unset while status is open."`
}

type DisputeOutput struct {
	Body DisputeBody
}

type EmptyOutput struct{}

type FXDetailBody struct {
	SourceAmount    int64     `json:"source_amount" doc:"Amount converted, in minor units of the source account's currency"`
	ConvertedAmount int64     `json:"converted_amount" doc:"Amount credited, in minor units of the destination account's currency"`
	MidRateE8       int64     `json:"mid_rate_e8" doc:"Mid rate (destination units per source unit), scaled by 1e8, before the spread"`
	AppliedE8       int64     `json:"applied_e8" doc:"Informational, spread-adjusted rate actually reflected in converted_amount"`
	SpreadBps       int32     `json:"spread_bps" doc:"Spread widened against the customer, in basis points"`
	RateSource      string    `json:"rate_source" doc:"Where the mid rate came from"`
	EffectiveAt     time.Time `json:"effective_at" doc:"When the applied fx_rates row went live"`
	RateID          int64     `json:"rate_id" doc:"The fx_rates row id the mid rate and spread were read from"`
}

type FXMarkupBody struct {
	DefaultSpreadBps *int32    `` /* 137-byte string literal not displayed */
	EffectiveAt      time.Time `json:"effective_at"`
}

type FXRateBody struct {
	TenantID           string    `json:"tenant_id" doc:"Tenant id, empty for the global default"`
	Base               string    `json:"base"`
	Quote              string    `json:"quote"`
	MidRateE8          int64     `json:"mid_rate_e8"`
	SpreadBps          *int32    `json:"spread_bps" doc:"Per-pair override, null when the row uses the markup default"`
	EffectiveSpreadBps int32     `json:"effective_spread_bps" doc:"Spread a conversion would actually apply: override, else default, else 0"`
	Source             string    `json:"source"`
	EffectiveAt        time.Time `json:"effective_at"`
}

type FXRateOutput struct{ Body FXRateBody }

type GetFXMarkupInput struct {
	TenantID string `query:"tenant_id" doc:"Tenant whose override to return alongside the global default. Omit for global only."`
}

type GetFXMarkupOutput struct {
	Body struct {
		Global nullableFXMarkupBody `json:"global"`
		Tenant nullableFXMarkupBody `json:"tenant"`
	}
}

type HealthOutput struct {
	Body struct {
		Status   string `json:"status" example:"ok" doc:"Liveness status, \"ok\" while the service is serving"`
		Revision string `` /* 134-byte string literal not displayed */
	}
}

type IssueKeyInput struct {
	Body struct {
		TenantID  string     `json:"tenant_id" format:"uuid" doc:"Tenant this key acts as"`
		Name      string     `json:"name" minLength:"1" maxLength:"200" doc:"Human-readable label for this key"`
		Scopes    []string   `json:"scopes" minItems:"1" doc:"One or more of: read, post, admin"`
		ExpiresAt *time.Time `json:"expires_at,omitempty" doc:"Optional expiry. Omit for a key that never expires."`
	}
}

type IssueKeyOutput struct {
	Body IssuedKeyBody
}

type IssuedKeyBody struct {
	ID        string     `json:"id"`
	TenantID  string     `json:"tenant_id"`
	Name      string     `json:"name"`
	Scopes    []string   `json:"scopes"`
	ExpiresAt *time.Time `json:"expires_at" doc:"Null if the key never expires"`
	Plaintext string     `` /* 145-byte string literal not displayed */
}

type IssuedWebhookSubscriptionBody struct {
	ID         string   `json:"id"`
	TenantID   string   `json:"tenant_id"`
	URL        string   `json:"url"`
	EventTypes []string `json:"event_types"`
	Secret     string   `` /* 198-byte string literal not displayed */
}

type KeyBody struct {
	ID         string     `json:"id" doc:"Key id (UUID)"`
	TenantID   string     `json:"tenant_id"`
	Name       string     `json:"name"`
	Scopes     []string   `json:"scopes"`
	ExpiresAt  *time.Time `json:"expires_at" doc:"Null if the key never expires"`
	LastUsedAt *time.Time `json:"last_used_at" doc:"Null if the key has never been used"`
	RevokedAt  *time.Time `json:"revoked_at" doc:"Null if the key is still live"`
	CreatedAt  time.Time  `json:"created_at"`
}

type ListAccountsInput struct {
	Limit int `query:"limit" default:"100" minimum:"1" maximum:"500" doc:"Max accounts to return"`
}

type ListDisputesInput struct {
	Status string `query:"status" doc:"Optional filter: one of open, resolved_reversed, resolved_rejected. Omitted returns every status."`
	Limit  int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max disputes per page"`
	Cursor string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type ListDisputesOutput struct {
	Body struct {
		Disputes   []DisputeBody `json:"disputes"`
		NextCursor *string       `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type ListFXRatesInput struct {
	TenantID string `query:"tenant_id" doc:"Tenant whose overrides to include alongside the global defaults. Omit for globals only."`
}

type ListFXRatesOutput struct {
	Body struct {
		Rates []FXRateBody `json:"rates"`
	}
}

type ListKeysInput struct {
	TenantID string `query:"tenant_id" format:"uuid" required:"true" doc:"Tenant to list keys for"`
}

type ListKeysOutput struct {
	Body struct {
		Keys []KeyBody `json:"keys"`
	}
}

type ListTenantsOutput struct {
	Body struct {
		Tenants []TenantBody `json:"tenants"`
	}
}

type ListWebhookSubscriptionsInput struct {
	TenantID string `query:"tenant_id" format:"uuid" required:"true" doc:"Tenant to list webhook subscriptions for"`
}

type ListWebhookSubscriptionsOutput struct {
	Body struct {
		Subscriptions []WebhookSubscriptionBody `json:"subscriptions"`
	}
}

type OpenDisputeInput struct {
	Body struct {
		TransactionID string `json:"transaction_id" format:"uuid" doc:"The transaction being disputed; must belong to the caller's tenant"`
		Reason        string `json:"reason" minLength:"1" maxLength:"256" doc:"Free-text reason for the dispute"`
	}
}

type PendingBody struct {
	ID   string `json:"id"`
	Kind string `json:"kind" doc:"Which write path this pending will replay on approval: post, convert, or reverse"`
	// Status is the pending's own lifecycle state, not to be confused with
	// the output struct's Status field elsewhere in this package (which sets
	// the HTTP response code): this is a JSON body field.
	Status            string     `json:"status" doc:"One of: pending, approved, rejected, cancelled, expired"`
	ThresholdCurrency string     `json:"threshold_currency" doc:"The currency whose configured threshold this transaction exceeded"`
	ThresholdAmount   int64      `json:"threshold_amount" doc:"The configured threshold amount, in minor units, this transaction exceeded"`
	CreatedBy         string     `json:"created_by"`
	CreatedAt         time.Time  `json:"created_at"`
	DecidedBy         *string    `json:"decided_by,omitempty" doc:"Set once a decision (approve, reject, cancel, or the TTL sweep) has been made"`
	DecidedAt         *time.Time `json:"decided_at,omitempty"`
	Reason            *string    `json:"reason,omitempty" doc:"Set when status is rejected"`
	TransactionID     *string    `json:"transaction_id,omitempty" doc:"Set when status is approved: the transaction the approval posted"`
}

type PendingListInput struct {
	Status string `query:"status" doc:"Optional filter: one of pending, approved, rejected, cancelled, expired. Omitted returns every status."`
	Limit  int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max pending transactions per page"`
	Cursor string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type PendingListOutput struct {
	Body struct {
		Pending    []PendingBody `json:"pending"`
		NextCursor *string       `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type PendingOutput struct {
	Body PendingBody
}

type PostingBody struct {
	AccountID   string `json:"account_id"`
	Amount      int64  `json:"amount"`
	Currency    string `json:"currency"`
	Description string `json:"description"`
}

type PostingInput struct {
	AccountID   string `json:"account_id" format:"uuid" doc:"Account this leg posts to"`
	Amount      int64  `json:"amount" doc:"Signed amount in minor units: positive debit, negative credit"`
	Description string `json:"description,omitempty" maxLength:"256" doc:"Optional narration for this line"`
}

type RejectPendingInput struct {
	ID   string `path:"id" format:"uuid" doc:"Pending transaction id"`
	Body struct {
		Reason *string `json:"reason,omitempty" maxLength:"256" doc:"Optional free-text reason recorded on the pending"`
	}
}

type ResolveDisputeInput struct {
	ID   string `path:"id" format:"uuid" doc:"Dispute id"`
	Body struct {
		Action string `json:"action" enum:"reverse,reject" doc:"reverse: post a real reversal of the disputed transaction. reject: no money moves."`
	}
}

type ReverseTransactionOutput struct {
	Status          int
	AlreadyReversed bool `header:"Already-Reversed"`
	Body            struct {
		TransactionBody
		Pending *PendingBody `` /* 186-byte string literal not displayed */
	}
}

type SetAccountParentInput struct {
	ID   string `path:"id" format:"uuid" doc:"Account id"`
	Body struct {
		ParentID *string `json:"parent_id,omitempty" format:"uuid" doc:"New parent account id. Omit or send null to clear (make it a root)."`
	}
}

type SetAccountStatusInput struct {
	ID   string `path:"id" format:"uuid" doc:"Account id"`
	Body struct {
		Status string `json:"status" enum:"active,frozen,closed" doc:"New account status"`
	}
}

type SetFXMarkupInput struct {
	Body struct {
		TenantID string `json:"tenant_id,omitempty" doc:"Tenant to scope this default to. Omit or empty for the global default."`
		// DefaultSpreadBps is optional: omit it, or send it explicitly as
		// null, to append a CLEARED row. For a tenant scope, a cleared row
		// means the tenant drops its own override and follows the global
		// default again; for the global scope it means no markup at all.
		DefaultSpreadBps *int32 `` /* 234-byte string literal not displayed */
	}
}

type SetFXMarkupOutput struct{ Body FXMarkupBody }

type SetTenantPolicyInput struct {
	ID   string `path:"id" format:"uuid" doc:"Tenant id"`
	Body struct {
		MaxTransactionAmount int64    `` /* 148-byte string literal not displayed */
		DailyVolumeLimit     int64    `` /* 150-byte string literal not displayed */
		AllowedCurrencies    []string `` /* 129-byte string literal not displayed */
	}
}

type SetTenantStatusInput struct {
	ID   string `path:"id" format:"uuid" doc:"Tenant id"`
	Body struct {
		Status string `json:"status" enum:"active,suspended,closed" doc:"New tenant status"`
	}
}

type ShredTenantPIIInput struct {
	ID   string `path:"id" format:"uuid" doc:"Tenant id"`
	Body struct {
		Confirm bool `` /* 209-byte string literal not displayed */
	}
}

type StatementEntryBody struct {
	ID             string    `json:"id" doc:"Posting id"`
	TransactionID  string    `json:"transaction_id"`
	Amount         int64     `json:"amount" doc:"Signed posting amount in minor units"`
	RunningBalance int64     `json:"running_balance" doc:"Account balance as of this posting, in minor units"`
	Description    string    `json:"description"`
	CreatedAt      time.Time `json:"created_at"`
}

type StatementExportInput struct {
	ID     string `path:"id" format:"uuid" doc:"Account id"`
	From   string `query:"from" doc:"RFC3339 timestamp. Only postings created at or after this time."`
	To     string `query:"to" doc:"RFC3339 timestamp. Only postings created strictly before this time."`
	Format string `` /* 142-byte string literal not displayed */
}

type StatementExportOutput struct {
	ContentType        string `header:"Content-Type"`
	ContentDisposition string `header:"Content-Disposition" doc:"Set to attachment for csv; unset for json"`
	Truncated          bool   `` /* 160-byte string literal not displayed */
	Body               []byte
}

type StatementInput struct {
	ID     string `path:"id" format:"uuid" doc:"Account id"`
	Limit  int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max entries per page"`
	Cursor string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type StatementOutput struct {
	Body struct {
		AccountID  string               `json:"account_id"`
		Currency   string               `json:"currency"`
		Entries    []StatementEntryBody `json:"entries"`
		NextCursor *string              `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type TenantBody struct {
	ID     string `json:"id" doc:"Tenant id (UUID)"`
	Name   string `json:"name"`
	Status string `json:"status" doc:"One of: active, suspended, closed"`
}

type TenantOutput struct {
	Body TenantBody
}

type TransactionBody struct {
	ID       string        `json:"id"`
	Postings []PostingBody `json:"postings"`
	// ReversesTransactionID is set only when this transaction is itself a
	// reversal (Task 4.2, audit A1.2): the id of the transaction it reverses.
	// Omitted for an ordinary post or convert.
	ReversesTransactionID *string `` /* 130-byte string literal not displayed */
	// Reference is the caller's optional external id for reconciliation
	// (Task 4.3, audit A1.3), unique per tenant when present. Omitted when
	// the transaction was posted without one.
	Reference *string `json:"reference,omitempty" doc:"Optional client-supplied external reference, unique per tenant"`
	// EffectiveAt is the value date (Task 4.3, audit A1.3): when the
	// transaction is considered to have happened economically. Always
	// present in a response, even when the caller supplied none: it then
	// falls back to when the transaction was actually posted.
	EffectiveAt time.Time `json:"effective_at" doc:"Value date; defaults to when the transaction was posted if not supplied"`
}

type TransactionExportInput struct {
	From          string `query:"from" doc:"RFC3339 timestamp. Only transactions created at or after this time."`
	To            string `query:"to" doc:"RFC3339 timestamp. Only transactions created strictly before this time."`
	EffectiveFrom string `` /* 162-byte string literal not displayed */
	EffectiveTo   string `` /* 164-byte string literal not displayed */
	Reference     string `query:"reference" doc:"Exact match on the transaction's reference."`
	Format        string `` /* 181-byte string literal not displayed */
}

type TransactionExportOutput struct {
	ContentType        string `header:"Content-Type"`
	ContentDisposition string `header:"Content-Disposition" doc:"Set to attachment for csv; unset for json"`
	Truncated          bool   `` /* 151-byte string literal not displayed */
	Body               []byte
}

type TransactionListInput struct {
	From          string `query:"from" doc:"RFC3339 timestamp. Only transactions created at or after this time."`
	To            string `query:"to" doc:"RFC3339 timestamp. Only transactions created strictly before this time."`
	EffectiveFrom string `` /* 162-byte string literal not displayed */
	EffectiveTo   string `` /* 164-byte string literal not displayed */
	Reference     string `query:"reference" doc:"Exact match on the transaction's reference."`
	Limit         int    `query:"limit" default:"50" minimum:"1" maximum:"200" doc:"Max transactions per page"`
	Cursor        string `query:"cursor" doc:"Opaque cursor from a previous page's next_cursor"`
}

type TransactionListOutput struct {
	Body struct {
		Transactions []TransactionBody `json:"transactions"`
		NextCursor   *string           `json:"next_cursor" doc:"Cursor for the next page, or null if this is the last page"`
	}
}

type TransactionOutput struct {
	Body TransactionBody
}

type TrialBalanceOutput struct {
	Body struct {
		Currencies []CurrencyBalanceBody `json:"currencies"`
		Accounts   []AccountBalanceBody  `json:"accounts"`
	}
}

type VerifyAuditInput struct {
	Fast bool `` /* 375-byte string literal not displayed */
}

type VerifyAuditOutput struct {
	Body struct {
		Valid        bool             `json:"valid"`
		Checked      int              `json:"checked"`
		FirstBreakID *string          `json:"first_break_id" doc:"Id of the first audit row that failed to verify, or null if the chain is intact"`
		Pending      int              `` /* 147-byte string literal not displayed */
		Head         *AuditHeadBody   `json:"head" doc:"The tenant's current chain head (chain_seq + row_hash), or null for an empty chain"`
		Anchor       *AuditAnchorBody `json:"anchor" doc:"The tenant's most recently recorded off-box anchor, or null if none has been recorded yet"`
	}
}

type WebhookSubscriptionBody struct {
	ID         string    `json:"id" doc:"Subscription id (UUID)"`
	TenantID   string    `json:"tenant_id"`
	URL        string    `json:"url"`
	EventTypes []string  `json:"event_types" doc:"Actions this subscription receives; empty means every action"`
	Active     bool      `json:"active"`
	CreatedAt  time.Time `json:"created_at"`
}