<?php

declare(strict_types=1);

namespace Sentinelo\Webhook\Events;

class SecurityScanCompleteEvent
{
    /**
     * Build the security.scan_complete payload sent to the SaaS backend.
     *
     * Must include the full check details + vulnerabilities — the backend
     * stores them verbatim (SecurityScan::internalChecks / vulnerabilities)
     * and recomputes the combined multi-layer score from them.
     */
    public static function toPayload(array $scan): array
    {
        return [
            'scan_id'               => $scan['id'] ?? null,
            'type'                  => $scan['type'] ?? 'full',
            'score'                 => $scan['score'] ?? 0,
            'grade'                 => $scan['grade'] ?? null,
            'checks_passed'         => $scan['checks_passed'] ?? 0,
            'checks_warned'         => $scan['checks_warned'] ?? 0,
            'checks_failed'         => $scan['checks_failed'] ?? 0,
            'checks_skipped'        => $scan['checks_skipped'] ?? 0,
            'critical_issues'       => $scan['critical_issues'] ?? 0,
            'high_issues'           => $scan['high_issues'] ?? 0,
            'medium_issues'         => $scan['medium_issues'] ?? 0,
            'low_issues'            => $scan['low_issues'] ?? 0,
            'vulnerabilities_count' => $scan['vulnerabilities_count'] ?? 0,
            'details'               => $scan['details'] ?? [],
            'vulnerabilities'       => $scan['vulnerabilities'] ?? [],
            'started_at'            => $scan['started_at'] ?? null,
            'completed_at'          => $scan['completed_at'] ?? null,
            'duration_seconds'      => $scan['duration_seconds'] ?? null,
        ];
    }
}