namespace EntitlementDAL.DTOs;

// MENTITLEMENTCLIENTUSER — external CLIENT_ADMIN/CLIENT_USER login identity. Client-scoped: a
// client user belongs to exactly one MCLIENT (no DXP-style party/tenant-link many-to-many).
public class ClientUserDTO
{
    public int       ClientUserId     { get; set; }
    public int       ClientId         { get; set; }
    public string    Email            { get; set; } = string.Empty;
    public string    FullName         { get; set; } = string.Empty;
    public string    PasswordHash     { get; set; } = string.Empty;   // PBKDF2-SHA256 — never plaintext
    public byte      Role             { get; set; }                  // 0=CLIENT_ADMIN 1=CLIENT_USER
    public short     FailedLoginCount { get; set; }
    public DateTime? LastLoginOn      { get; set; }

    // audit tail
    public short    Version      { get; set; }
    public byte     Status       { get; set; } = 1;   // 1=Active 2=Locked 3=Deleted
    public int      SortOrder    { get; set; }
    public int      CreatedById  { get; set; }
    public DateTime CreatedOn    { get; set; }
    public int      ModifiedById { get; set; }
    public DateTime ModifiedOn   { get; set; }
    public byte     SourceType   { get; set; }
    public int      TenantId     { get; set; } = -1;
}