- Wired the checkout wizard for Google “comfort login”: added Socialite controller + dependency, new Google env

hooks in config/services.php/.env.example, and updated wizard steps/controllers to store session payloads,
attach packages, and surface localized success/error states.
- Retooled payment handling for both Stripe and PayPal, adding richer status management in CheckoutController/
PayPalController, fallback flows in the wizard’s PaymentStep.tsx, and fresh feature tests for intent
creation, webhooks, and the wizard CTA.
- Introduced a consent-aware Matomo analytics stack: new consent context, cookie-banner UI, useAnalytics/
useCtaExperiment hooks, and MatomoTracker component, then instrumented marketing pages (Home, Packages,
Checkout) with localized copy and experiment tracking.
- Polished package presentation across marketing UIs by centralizing formatting in PresentsPackages, surfacing
localized description tables/placeholders, tuning badges/layouts, and syncing guest/marketing translations.
- Expanded docs & reference material (docs/prp/*, TODOs, public gallery overview) and added a Playwright smoke
test for the hero CTA while reconciling outstanding checklist items.

app/Providers/AppServiceProvider.php

@@ -53,6 +53,25 @@ class AppServiceProvider extends ServiceProvider
         });
 
         Inertia::share('locale', fn () => app()->getLocale());
+        Inertia::share('analytics', static function () {
+            $config = config('services.matomo');
+
+            if (!($config['enabled'] ?? false)) {
+                return [
+                    'matomo' => [
+                        'enabled' => false,
+                    ],
+                ];
+            }
+
+            return [
+                'matomo' => [
+                    'enabled' => true,
+                    'url' => rtrim((string) ($config['url'] ?? ''), '/'),
+                    'siteId' => (string) ($config['site_id'] ?? ''),
+                ],
+            ];
+        });
 
         if (config('storage-monitor.queue_failure_alerts')) {
             Queue::failing(function (JobFailed $event) {

app/Providers/AuthServiceProvider.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Providers;
+
+use App\Models\OAuthClient;
+use App\Models\PurchaseHistory;
+use App\Models\Tenant;
+use App\Models\User;
+use App\Policies\OAuthClientPolicy;
+use App\Policies\PurchaseHistoryPolicy;
+use App\Policies\TenantPolicy;
+use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+use Illuminate\Support\Facades\Gate;
+
+class AuthServiceProvider extends ServiceProvider
+{
+    /**
+     * The policy mappings for the application.
+     *
+     * @var array<class-string, class-string>
+     */
+    protected $policies = [
+        Tenant::class => TenantPolicy::class,
+        PurchaseHistory::class => PurchaseHistoryPolicy::class,
+        OAuthClient::class => OAuthClientPolicy::class,
+    ];
+
+    /**
+     * Register any authentication / authorization services.
+     */
+    public function boot(): void
+    {
+        $this->registerPolicies();
+
+        Gate::before(function (User $user): ?bool {
+            return $user->role === 'super_admin' ? true : null;
+        });
+    }
+}
+

app/Providers/Filament/SuperAdminPanelProvider.php

@@ -18,8 +18,11 @@ use Illuminate\Routing\Middleware\SubstituteBindings;
 use Illuminate\Session\Middleware\AuthenticateSession;
 use Illuminate\Session\Middleware\StartSession;
 use Illuminate\View\Middleware\ShareErrorsFromSession;
+use App\Filament\Widgets\CreditAlertsWidget;
 use App\Filament\Widgets\PlatformStatsWidget;
+use App\Filament\Widgets\RevenueTrendWidget;
 use App\Filament\Widgets\TopTenantsByUploads;
+use App\Filament\Widgets\TopTenantsByRevenue;
 use App\Filament\Blog\Resources\PostResource;
 use App\Filament\Blog\Resources\CategoryResource;
 use App\Filament\Blog\Resources\AuthorResource;
@@ -50,7 +53,10 @@ class SuperAdminPanelProvider extends PanelProvider
             ->widgets([
                 Widgets\AccountWidget::class,
                 Widgets\FilamentInfoWidget::class,
+                CreditAlertsWidget::class,
+                RevenueTrendWidget::class,
                 PlatformStatsWidget::class,
+                TopTenantsByRevenue::class,
                 TopTenantsByUploads::class,
                 \App\Filament\Widgets\StorageCapacityWidget::class,
             ])