<?php

namespace App\Actions;

use App\Models\User;
use App\Services\AuditLogService;

class DeactivateUserAction
{
    public function __construct(private readonly AuditLogService $audit) {}

    public function execute(User $user, ?string $justification = null): void
    {
        $user->update(['is_active' => false]);

        // Invalidate all sessions for this user
        \DB::table('sessions')->where('user_id', $user->id)->delete();

        $this->audit->log('user_deactivated', [
            'subject_type'   => User::class,
            'subject_id'     => $user->id,
            'target_user_id' => $user->id,
            'old_values'     => ['is_active' => true],
            'new_values'     => ['is_active' => false],
            'justification'  => $justification,
        ]);
    }
}