- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts
- Seeded a ready-to-use demo tenant (user, tenant, active package, purchase)
- Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits
- Removed the public “Register” links from the marketing header
- hardened join event logic and improved error handling in the guest pwa.

app/Services/Checkout/CheckoutAssignmentService.php

@@ -112,6 +112,9 @@ class CheckoutAssignmentService
     protected function ensureTenant(User $user, CheckoutSession $session): ?Tenant
     {
         if ($user->tenant) {
+            if (! $user->tenant_id) {
+                $user->forceFill(['tenant_id' => $user->tenant->getKey()])->save();
+            }
             return $user->tenant;
         }
 
@@ -130,6 +133,10 @@ class CheckoutAssignmentService
             ],
         ]);
 
+        if ($user->tenant_id !== $tenant->id) {
+            $user->forceFill(['tenant_id' => $tenant->id])->save();
+        }
+
         event(new Registered($user));
 
         return $tenant;

app/Services/EventJoinTokenService.php

@@ -58,22 +58,29 @@ class EventJoinTokenService
         $joinToken->increment('usage_count');
     }
 
-    public function findActiveToken(string $token): ?EventJoinToken
+    public function findToken(string $token, bool $includeInactive = false): ?EventJoinToken
     {
         return EventJoinToken::query()
             ->where('token', $token)
-            ->whereNull('revoked_at')
-            ->where(function ($query) {
-                $query->whereNull('expires_at')
-                    ->orWhere('expires_at', '>', now());
-            })
-            ->where(function ($query) {
-                $query->whereNull('usage_limit')
-                    ->orWhereColumn('usage_limit', '>', 'usage_count');
+            ->when(! $includeInactive, function ($query) {
+                $query->whereNull('revoked_at')
+                    ->where(function ($query) {
+                        $query->whereNull('expires_at')
+                            ->orWhere('expires_at', '>', now());
+                    })
+                    ->where(function ($query) {
+                        $query->whereNull('usage_limit')
+                            ->orWhereColumn('usage_limit', '>', 'usage_count');
+                    });
             })
             ->first();
     }
 
+    public function findActiveToken(string $token): ?EventJoinToken
+    {
+        return $this->findToken($token);
+    }
+
     protected function generateUniqueToken(int $length = 48): string
     {
         do {