tenant

type Config struct {
	// AllowedModels, when not empty, limits the tenant to these models. A
	// request is admitted when the model it asked for, or the model an
	// alias resolved it to, is listed. Names are case-sensitive and match
	// exactly; surrounding spaces are trimmed when the tenant is saved. An
	// alias with several targets is checked against the target picked for
	// that request, so list every target when it matters.
	AllowedModels []string `json:"allowed_models,omitempty"`
	// BlockedModels refuses a request when the model it asked for, or the
	// model an alias resolved it to, is listed. Blocks win over allows. An
	// alias with several targets is checked against the target picked for
	// that request, so list every target when it matters.
	BlockedModels []string `json:"blocked_models,omitempty"`
	// DefaultModel is the model a request gets when it names none. It is
	// filled before alias resolution, so it may be an alias.
	DefaultModel string `json:"default_model,omitempty"`
	// RoutingStrategy is stored for the dashboard; not enforced by the
	// gateway yet.
	RoutingStrategy string `json:"routing_strategy,omitempty"`
	// GuardrailPolicy is stored for the dashboard; not enforced by the
	// gateway yet.
	GuardrailPolicy string `json:"guardrail_policy,omitempty"`
	// CacheEnabled false turns the response cache off for this tenant, for
	// reading and for writing. Nil follows the gateway setting.
	CacheEnabled *bool             `json:"cache_enabled,omitempty"`
	Metadata     map[string]string `json:"metadata,omitempty"`
}

type CreateInput struct {
	Name     string            `json:"name"`
	Slug     string            `json:"slug"`
	Quota    *Quota            `json:"quota,omitempty"`
	Config   *Config           `json:"config,omitempty"`
	Metadata map[string]string `json:"metadata,omitempty"`
}

type Events interface {
	EmitTenantCreated(ctx context.Context, tenantID id.TenantID)
	EmitTenantDisabled(ctx context.Context, tenantID id.TenantID)
}

type InUseFunc func(ctx context.Context, tenantID string) (bool, error)

type ListOptions struct {
	Status string `json:"status,omitempty"`
	Search string `json:"search,omitempty"`
	Limit  int    `json:"limit,omitempty"`
	Cursor string `json:"cursor,omitempty"`
}

type ListResult struct {
	Items      []*Tenant `json:"items"`
	NextCursor string    `json:"next_cursor"`
}

type Option func(*service)

type Quota struct {
	RPM              int       `json:"rpm"`                // requests per minute
	TPM              int       `json:"tpm"`                // tokens per minute
	DailyRequests    int       `json:"daily_requests"`     // max requests per day (0 = unlimited)
	MonthlyBudgetUSD money.USD `json:"monthly_budget_usd"` // max spend per month, exact; zero means no budget
	MaxTokensPerReq  int       `json:"max_tokens_per_req"` // max tokens per single request

	// Streaming-specific limits. The gateway enforces them by default,
	// through the stream lifecycle stage reading the tenant's quota.
	MaxStreamDuration time.Duration `json:"max_stream_duration,omitempty"` // wall-clock cap per stream (0 = unlimited)
	MaxStreamTokens   int           `json:"max_stream_tokens,omitempty"`   // output-token cap per stream (0 = unlimited)
}

type Service interface {
	Create(ctx context.Context, input *CreateInput) (*Tenant, error)
	Get(ctx context.Context, id string) (*Tenant, error)
	GetBySlug(ctx context.Context, slug string) (*Tenant, error)
	Update(ctx context.Context, id string, input *UpdateInput) (*Tenant, error)
	Delete(ctx context.Context, id string) error
	List(ctx context.Context, opts *ListOptions) (*ListResult, error)
	UpdateQuota(ctx context.Context, id string, quota *Quota) error
	SetStatus(ctx context.Context, id string, status Status) error
}

type Status string

type Store interface {
	Insert(ctx context.Context, t *Tenant) error
	FindByID(ctx context.Context, id string) (*Tenant, error)
	FindBySlug(ctx context.Context, slug string) (*Tenant, error)
	Update(ctx context.Context, t *Tenant) error
	Delete(ctx context.Context, id string) error
	List(ctx context.Context, opts *ListOptions) (*ListResult, error)
}

type Tenant struct {
	ID        id.TenantID       `json:"id"`
	Name      string            `json:"name"`
	Slug      string            `json:"slug"` // URL-safe identifier
	Status    Status            `json:"status"`
	Quota     Quota             `json:"quota"`
	Config    Config            `json:"config"`
	Metadata  map[string]string `json:"metadata,omitempty"`
	CreatedAt time.Time         `json:"created_at"`
	UpdatedAt time.Time         `json:"updated_at"`
}

type UpdateInput struct {
	Name     *string           `json:"name,omitempty"`
	Quota    *Quota            `json:"quota,omitempty"`
	Config   *Config           `json:"config,omitempty"`
	Metadata map[string]string `json:"metadata,omitempty"`
}