<?php
/**
 * Ledger row value object.
 *
 * @package AgentFirewall
 */

declare(strict_types=1);

namespace AgentFirewall\Model;

use DateTimeImmutable;

defined( 'ABSPATH' ) || exit;

/**
 * Immutable row from adaf_ledger (append-only audit trail, ADR-6).
 */
final class LedgerEntry {

	/**
	 * Constructor.
	 *
	 * @param int                       $id           Row id.
	 * @param DateTimeImmutable         $ts           Action timestamp (UTC).
	 * @param int                       $agent_id     Acting agent.
	 * @param int                       $wp_user_id   Linked WordPress user.
	 * @param string                    $source       ability|rest.
	 * @param string                    $action_cat   create|update|delete|read|... .
	 * @param string                    $entity_type  post|option|meta|term|... .
	 * @param int|null                  $entity_id    Target entity id when applicable.
	 * @param string|null               $ability_name Ability identifier when source=ability.
	 * @param string                    $status       allowed|denied|pending|undone.
	 * @param array<string, mixed>|null $input        Action input payload.
	 * @param array<string, mixed>|null $result       Execution result payload.
	 * @param string|null               $before_hash  SHA-256 of pre-action state.
	 * @param string|null               $chain_hash   Tamper-evidence chain hash (AF-1.3).
	 */
	public function __construct(
		public readonly int $id,
		public readonly DateTimeImmutable $ts,
		public readonly int $agent_id,
		public readonly int $wp_user_id,
		public readonly string $source,
		public readonly string $action_cat,
		public readonly string $entity_type,
		public readonly ?int $entity_id,
		public readonly ?string $ability_name,
		public readonly string $status,
		public readonly ?array $input,
		public readonly ?array $result,
		public readonly ?string $before_hash,
		public readonly ?string $chain_hash,
		public readonly ?int $policy_id = null,
		public readonly ?int $rule_index = null
	) {
	}
}