<?php

namespace App\Mail;

use App\Enums\SecurityChange;
use App\Models\User;
use Illuminate\Bus\Queueable;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Mail\Mailable;
use Illuminate\Mail\Mailables\Content;
use Illuminate\Mail\Mailables\Envelope;
use Illuminate\Mail\Mailables\Headers;
use Illuminate\Queue\SerializesModels;

/**
 * Hinweis an die (bisherige) Kontoadresse nach einer sicherheitsrelevanten
 * Änderung (Sicherheitsaudit 07.10.2026, S-06). Enthält bewusst keinen Link
 * mit Anmeldewirkung und keine Codes — nur Art und Zeitpunkt der Änderung.
 */
class SecurityChangeNotice extends Mailable implements ShouldQueue
{
    use Queueable, SerializesModels;

    public function __construct(
        public User $user,
        public SecurityChange $change,
        public string $occurredAt,
        public ?string $newEmail = null,
    ) {}

    public function headers(): Headers
    {
        return new Headers(text: [(string) config('bounces.reference_header', 'X-Pk-Ref') => 'user:'.$this->user->id]);
    }

    public function envelope(): Envelope
    {
        return new Envelope(
            subject: 'Sicherheitshinweis zu Ihrem pressekonto'
        );
    }

    public function content(): Content
    {
        return new Content(
            view: 'emails.auth.security-change-notice'
        );
    }

    public function attachments(): array
    {
        return [];
    }
}