first

app/Actions/DeactivateUserAction.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Actions;
+
+use App\Models\User;
+use App\Services\AuditLogService;
+
+class DeactivateUserAction
+{
+    public function __construct(private readonly AuditLogService $audit) {}
+
+    public function execute(User $user, ?string $justification = null): void
+    {
+        $user->update(['is_active' => false]);
+
+        // Invalidate all sessions for this user
+        \DB::table('sessions')->where('user_id', $user->id)->delete();
+
+        $this->audit->log('user_deactivated', [
+            'subject_type'   => User::class,
+            'subject_id'     => $user->id,
+            'target_user_id' => $user->id,
+            'old_values'     => ['is_active' => true],
+            'new_values'     => ['is_active' => false],
+            'justification'  => $justification,
+        ]);
+    }
+}