Add tenant lifecycle view and limit controls

app/Filament/Resources/TenantResource.php

@@ -10,6 +10,7 @@ use App\Filament\Resources\TenantResource\Schemas\TenantInfolist;
 use App\Jobs\AnonymizeAccount;
 use App\Models\Tenant;
 use App\Notifications\InactiveTenantDeletionWarning;
+use App\Services\Tenant\TenantLifecycleLogger;
 use BackedEnum;
 use Carbon\Carbon;
 use Filament\Actions;
@@ -20,6 +21,8 @@ use Filament\Forms\Components\Select;
 use Filament\Forms\Components\TextInput;
 use Filament\Forms\Components\Toggle;
 use Filament\Notifications\Notification;
+use Filament\Pages\Enums\SubNavigationPosition;
+use Filament\Resources\Pages\Page;
 use Filament\Resources\Resource;
 use Filament\Schemas\Schema;
 use Filament\Tables;
@@ -38,6 +41,8 @@ class TenantResource extends Resource
 
     protected static UnitEnum|string|null $navigationGroup = null;
 
+    protected static ?SubNavigationPosition $subNavigationPosition = SubNavigationPosition::Top;
+
     public static function getNavigationGroup(): UnitEnum|string|null
     {
         return __('admin.nav.tenants');
@@ -105,6 +110,15 @@ class TenantResource extends Resource
         return TenantInfolist::configure($schema);
     }
 
+    public static function getRecordSubNavigation(Page $page): array
+    {
+        return $page->generateNavigationItems([
+            Pages\ViewTenant::class,
+            Pages\ViewTenantLifecycle::class,
+            Pages\EditTenant::class,
+        ]);
+    }
+
     public static function table(Table $table): Table
     {
 
@@ -220,6 +234,7 @@ class TenantResource extends Resource
         return [
             'index' => Pages\ListTenants::route('/'),
             'view' => Pages\ViewTenant::route('/{record}'),
+            'lifecycle' => Pages\ViewTenantLifecycle::route('/{record}/lifecycle'),
             'edit' => Pages\EditTenant::route('/{record}/edit'),
         ];
     }
@@ -245,7 +260,17 @@ class TenantResource extends Resource
                 ->color('success')
                 ->visible(fn (Tenant $record): bool => ! $record->is_active && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_active' => true])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_active' => true]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'activated',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('deactivate')
                 ->label(__('admin.tenants.actions.deactivate'))
                 ->icon('heroicon-o-no-symbol')
@@ -253,7 +278,17 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => (bool) $record->is_active && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_active' => false])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_active' => false]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deactivated',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('suspend')
                 ->label(__('admin.tenants.actions.suspend'))
                 ->icon('heroicon-o-pause-circle')
@@ -261,14 +296,34 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => ! $record->is_suspended && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('suspend', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_suspended' => true])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_suspended' => true]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'suspended',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('unsuspend')
                 ->label(__('admin.tenants.actions.unsuspend'))
                 ->icon('heroicon-o-play-circle')
                 ->color('success')
                 ->visible(fn (Tenant $record): bool => (bool) $record->is_suspended && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('suspend', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_suspended' => false])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_suspended' => false]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'unsuspended',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('schedule_deletion')
                 ->label(__('admin.tenants.actions.schedule_deletion'))
                 ->icon('heroicon-o-calendar-days')
@@ -309,6 +364,16 @@ class TenantResource extends Resource
                     }
 
                     $record->forceFill($update)->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deletion_scheduled',
+                        [
+                            'pending_deletion_at' => $plannedDeletion->toDateTimeString(),
+                            'send_warning' => (bool) ($data['send_warning'] ?? false),
+                        ],
+                        Filament::auth()->user()
+                    );
                 })
                 ->successNotificationTitle(__('admin.tenants.actions.schedule_deletion_success')),
             Actions\Action::make('cancel_deletion')
@@ -318,10 +383,21 @@ class TenantResource extends Resource
                 ->visible(fn (Tenant $record): bool => $record->pending_deletion_at !== null && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
                 ->action(function (Tenant $record): void {
+                    $previous = $record->pending_deletion_at?->toDateTimeString();
+
                     $record->forceFill([
                         'pending_deletion_at' => null,
                         'deletion_warning_sent_at' => null,
                     ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deletion_cancelled',
+                        [
+                            'pending_deletion_at' => $previous,
+                        ],
+                        Filament::auth()->user()
+                    );
                 })
                 ->successNotificationTitle(__('admin.tenants.actions.cancel_deletion_success')),
             Actions\Action::make('anonymize_now')
@@ -331,8 +407,160 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record) => AnonymizeAccount::dispatch(null, $record->id))
+                ->action(function (Tenant $record): void {
+                    AnonymizeAccount::dispatch(null, $record->id);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'anonymize_requested',
+                        actor: Filament::auth()->user()
+                    );
+                })
                 ->successNotificationTitle(__('admin.tenants.actions.anonymize_success')),
         ];
     }
+
+    /**
+     * @return array<int, Actions\Action>
+     */
+    public static function lifecycleManagementActions(): array
+    {
+        return [
+            Actions\Action::make('update_limits')
+                ->label(__('admin.tenants.actions.update_limits'))
+                ->icon('heroicon-o-adjustments-horizontal')
+                ->modalWidth('2xl')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    TextInput::make('max_photos_per_event')
+                        ->label(__('admin.tenants.fields.max_photos_per_event'))
+                        ->numeric()
+                        ->minValue(0)
+                        ->default(fn (Tenant $record) => $record->max_photos_per_event),
+                    TextInput::make('max_storage_mb')
+                        ->label(__('admin.tenants.fields.max_storage_mb'))
+                        ->numeric()
+                        ->minValue(0)
+                        ->default(fn (Tenant $record) => $record->max_storage_mb),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $before = [
+                        'max_photos_per_event' => $record->max_photos_per_event,
+                        'max_storage_mb' => $record->max_storage_mb,
+                    ];
+
+                    $record->forceFill([
+                        'max_photos_per_event' => $data['max_photos_per_event'],
+                        'max_storage_mb' => $data['max_storage_mb'],
+                    ])->save();
+
+                    $after = [
+                        'max_photos_per_event' => $record->max_photos_per_event,
+                        'max_storage_mb' => $record->max_storage_mb,
+                    ];
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'limits_updated',
+                        [
+                            'before' => $before,
+                            'after' => $after,
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('update_subscription_expires_at')
+                ->label(__('admin.tenants.actions.update_subscription_expires_at'))
+                ->icon('heroicon-o-calendar')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    Forms\Components\DateTimePicker::make('subscription_expires_at')
+                        ->label(__('admin.tenants.fields.subscription_expires_at'))
+                        ->default(fn (Tenant $record) => $record->subscription_expires_at),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $before = [
+                        'subscription_expires_at' => optional($record->subscription_expires_at)->toDateTimeString(),
+                    ];
+
+                    $record->forceFill([
+                        'subscription_expires_at' => $data['subscription_expires_at'],
+                    ])->save();
+
+                    $after = [
+                        'subscription_expires_at' => optional($record->subscription_expires_at)->toDateTimeString(),
+                    ];
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'subscription_expires_at_updated',
+                        [
+                            'before' => $before,
+                            'after' => $after,
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('set_grace_period')
+                ->label(__('admin.tenants.actions.set_grace_period'))
+                ->icon('heroicon-o-clock')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    Forms\Components\DateTimePicker::make('grace_period_ends_at')
+                        ->label(__('admin.tenants.fields.grace_period_ends_at'))
+                        ->required()
+                        ->minDate(now())
+                        ->default(fn (Tenant $record) => $record->grace_period_ends_at),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $record->forceFill([
+                        'grace_period_ends_at' => $data['grace_period_ends_at'],
+                    ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'grace_period_set',
+                        [
+                            'grace_period_ends_at' => optional($record->grace_period_ends_at)->toDateTimeString(),
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('clear_grace_period')
+                ->label(__('admin.tenants.actions.clear_grace_period'))
+                ->icon('heroicon-o-x-circle')
+                ->color('gray')
+                ->requiresConfirmation()
+                ->visible(fn (Tenant $record): bool => $record->grace_period_ends_at !== null)
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->action(function (Tenant $record): void {
+                    $previous = $record->grace_period_ends_at?->toDateTimeString();
+
+                    $record->forceFill([
+                        'grace_period_ends_at' => null,
+                    ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'grace_period_cleared',
+                        [
+                            'grace_period_ends_at' => $previous,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+        ];
+    }
 }

app/Filament/Resources/TenantResource/Pages/EditTenant.php

@@ -8,4 +8,9 @@ use Filament\Resources\Pages\EditRecord;
 class EditTenant extends EditRecord
 {
     protected static string $resource = TenantResource::class;
+
+    public static function getNavigationLabel(): string
+    {
+        return __('admin.tenants.pages.edit');
+    }
 }

app/Filament/Resources/TenantResource/Pages/ViewTenant.php

@@ -10,6 +10,16 @@ class ViewTenant extends ViewRecord
 {
     protected static string $resource = TenantResource::class;
 
+    public static function getNavigationLabel(): string
+    {
+        return __('admin.tenants.pages.overview');
+    }
+
+    public function getTitle(): string
+    {
+        return __('admin.tenants.pages.overview');
+    }
+
     protected function getHeaderActions(): array
     {
         return [

app/Filament/Resources/TenantResource/Pages/ViewTenantLifecycle.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Filament\Resources\TenantResource\Pages;
+
+use App\Filament\Resources\TenantResource;
+use App\Filament\Resources\TenantResource\Schemas\TenantLifecycleInfolist;
+use Filament\Actions;
+use Filament\Resources\Pages\ViewRecord;
+use Filament\Schemas\Schema;
+
+class ViewTenantLifecycle extends ViewRecord
+{
+    protected static string $resource = TenantResource::class;
+
+    public static function getNavigationLabel(): string
+    {
+        return __('admin.tenants.pages.lifecycle');
+    }
+
+    public function getTitle(): string
+    {
+        return __('admin.tenants.pages.lifecycle');
+    }
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            Actions\EditAction::make(),
+            Actions\ActionGroup::make(TenantResource::lifecycleActions())
+                ->label(__('admin.tenants.actions.lifecycle'))
+                ->icon('heroicon-o-shield-exclamation'),
+            Actions\ActionGroup::make(TenantResource::lifecycleManagementActions())
+                ->label(__('admin.tenants.actions.lifecycle_controls'))
+                ->icon('heroicon-o-adjustments-horizontal'),
+        ];
+    }
+
+    public function infolist(Schema $schema): Schema
+    {
+        return TenantLifecycleInfolist::configure($schema);
+    }
+}

app/Filament/Resources/TenantResource/Schemas/TenantInfolist.php

@@ -4,11 +4,9 @@ namespace App\Filament\Resources\TenantResource\Schemas;
 
 use App\Models\Tenant;
 use Filament\Infolists\Components\IconEntry;
-use Filament\Infolists\Components\RepeatableEntry;
 use Filament\Infolists\Components\TextEntry;
 use Filament\Schemas\Components\Section;
 use Filament\Schemas\Schema;
-use Illuminate\Support\Str;
 
 class TenantInfolist
 {
@@ -67,122 +65,6 @@ class TenantInfolist
                         ->dateTime()
                         ->placeholder('—'),
                 ]),
-            Section::make(__('admin.tenants.sections.timeline'))
-                ->schema([
-                    RepeatableEntry::make('lifecycle_timeline')
-                        ->label(__('admin.tenants.sections.timeline'))
-                        ->state(fn (Tenant $record) => static::buildTimeline($record))
-                        ->schema([
-                            TextEntry::make('title')
-                                ->label(__('admin.tenants.timeline.title'))
-                                ->columnSpanFull(),
-                            TextEntry::make('details')
-                                ->label(__('admin.tenants.timeline.details'))
-                                ->columnSpanFull()
-                                ->placeholder('—'),
-                            TextEntry::make('tone')
-                                ->label(__('admin.tenants.timeline.status'))
-                                ->badge()
-                                ->color(fn (?string $state) => $state ?? 'gray')
-                                ->formatStateUsing(fn (?string $state) => $state
-                                    ? __('admin.tenants.timeline.tone.'.$state)
-                                    : __('admin.tenants.timeline.tone.muted')),
-                            TextEntry::make('occurred_at')
-                                ->label(__('admin.tenants.timeline.occurred_at'))
-                                ->dateTime(),
-                        ])
-                        ->columns(2),
-                ]),
         ]);
     }
-
-    private static function buildTimeline(Tenant $tenant): array
-    {
-        $events = [
-            static::timelineEntry(
-                __('admin.tenants.timeline.created'),
-                __('admin.tenants.timeline.created_details'),
-                $tenant->created_at,
-                'success'
-            ),
-        ];
-
-        if ($tenant->last_activity_at) {
-            $events[] = static::timelineEntry(
-                __('admin.tenants.timeline.last_activity'),
-                __('admin.tenants.timeline.last_activity_details'),
-                $tenant->last_activity_at,
-                'info'
-            );
-        }
-
-        if ($tenant->deletion_warning_sent_at) {
-            $events[] = static::timelineEntry(
-                __('admin.tenants.timeline.deletion_warning'),
-                __('admin.tenants.timeline.deletion_warning_details'),
-                $tenant->deletion_warning_sent_at,
-                'warning'
-            );
-        }
-
-        if ($tenant->pending_deletion_at) {
-            $events[] = static::timelineEntry(
-                __('admin.tenants.timeline.deletion_scheduled'),
-                __('admin.tenants.timeline.deletion_scheduled_details'),
-                $tenant->pending_deletion_at,
-                'warning'
-            );
-        }
-
-        if ($tenant->anonymized_at) {
-            $events[] = static::timelineEntry(
-                __('admin.tenants.timeline.anonymized'),
-                __('admin.tenants.timeline.anonymized_details'),
-                $tenant->anonymized_at,
-                'danger'
-            );
-        }
-
-        $logs = $tenant->notificationLogs()
-            ->latest('sent_at')
-            ->limit(10)
-            ->get();
-
-        foreach ($logs as $log) {
-            $status = $log->status === 'failed' ? 'danger' : 'info';
-            $eventTitle = $log->status === 'failed'
-                ? __('admin.tenants.timeline.notification_failed')
-                : __('admin.tenants.timeline.notification_sent');
-
-            $details = collect([
-                Str::headline($log->type),
-                $log->channel ? Str::upper($log->channel) : null,
-                $log->recipient,
-                $log->failure_reason ? 'reason: '.$log->failure_reason : null,
-            ])->filter()->implode(' - ');
-
-            $events[] = static::timelineEntry(
-                $eventTitle,
-                $details,
-                $log->sent_at ?? $log->failed_at ?? $log->created_at,
-                $status
-            );
-        }
-
-        return collect($events)
-            ->filter(fn (array $event) => $event['occurred_at'] !== null)
-            ->sortByDesc('occurred_at')
-            ->values()
-            ->all();
-    }
-
-    private static function timelineEntry(string $title, ?string $details, $occurredAt, string $tone): array
-    {
-        return [
-            'title' => $title,
-            'details' => $details,
-            'occurred_at' => $occurredAt,
-            'tone' => $tone,
-        ];
-    }
 }

app/Filament/Resources/TenantResource/Schemas/TenantLifecycleInfolist.php

@@ -0,0 +1,391 @@
+<?php
+
+namespace App\Filament\Resources\TenantResource\Schemas;
+
+use App\Models\Tenant;
+use App\Models\TenantLifecycleEvent;
+use App\Services\Tenant\TenantUsageService;
+use Filament\Infolists\Components\IconEntry;
+use Filament\Infolists\Components\RepeatableEntry;
+use Filament\Infolists\Components\TextEntry;
+use Filament\Schemas\Components\Section;
+use Filament\Schemas\Schema;
+use Illuminate\Support\Str;
+
+class TenantLifecycleInfolist
+{
+    /**
+     * @var array<int, array<string, mixed>>
+     */
+    private static array $usageCache = [];
+
+    public static function configure(Schema $schema): Schema
+    {
+        return $schema->components([
+            Section::make(__('admin.tenants.sections.lifecycle'))
+                ->columns(3)
+                ->schema([
+                    TextEntry::make('access_status')
+                        ->label(__('admin.tenants.fields.access_status'))
+                        ->badge()
+                        ->color(fn (Tenant $record): string => static::accessStatusTone($record))
+                        ->state(fn (Tenant $record): string => static::accessStatusLabel($record)),
+                    IconEntry::make('is_active')
+                        ->label(__('admin.tenants.fields.is_active'))
+                        ->boolean(),
+                    IconEntry::make('is_suspended')
+                        ->label(__('admin.tenants.fields.is_suspended'))
+                        ->boolean(),
+                    TextEntry::make('subscription_expires_at')
+                        ->label(__('admin.tenants.fields.subscription_expires_at'))
+                        ->dateTime()
+                        ->placeholder('—'),
+                    TextEntry::make('grace_period_ends_at')
+                        ->label(__('admin.tenants.fields.grace_period_ends_at'))
+                        ->dateTime()
+                        ->placeholder('—'),
+                    TextEntry::make('pending_deletion_at')
+                        ->label(__('admin.tenants.fields.pending_deletion_at'))
+                        ->dateTime()
+                        ->placeholder('—'),
+                    TextEntry::make('deletion_warning_sent_at')
+                        ->label(__('admin.tenants.fields.deletion_warning_sent_at'))
+                        ->dateTime()
+                        ->placeholder('—'),
+                    TextEntry::make('anonymized_at')
+                        ->label(__('admin.tenants.fields.anonymized_at'))
+                        ->dateTime()
+                        ->placeholder('—'),
+                ]),
+            Section::make(__('admin.tenants.sections.limits'))
+                ->columns(3)
+                ->schema([
+                    TextEntry::make('max_photos_per_event')
+                        ->label(__('admin.tenants.fields.max_photos_per_event'))
+                        ->state(fn (Tenant $record): string => static::formatLimitValue($record->max_photos_per_event)),
+                    TextEntry::make('max_storage_mb')
+                        ->label(__('admin.tenants.fields.max_storage_mb'))
+                        ->state(fn (Tenant $record): string => static::formatLimitValue($record->max_storage_mb, 'MB')),
+                    TextEntry::make('storage_used_mb')
+                        ->label(__('admin.tenants.fields.storage_used_mb'))
+                        ->state(fn (Tenant $record): string => static::formatStorageValue($record)['used']),
+                    TextEntry::make('storage_remaining_mb')
+                        ->label(__('admin.tenants.fields.storage_remaining_mb'))
+                        ->state(fn (Tenant $record): string => static::formatStorageValue($record)['remaining']),
+                    TextEntry::make('storage_usage_percent')
+                        ->label(__('admin.tenants.fields.storage_usage_percent'))
+                        ->badge()
+                        ->color(fn (Tenant $record): string => static::storageUsageTone($record))
+                        ->state(fn (Tenant $record): string => static::formatStorageValue($record)['percentage']),
+                ]),
+            Section::make(__('admin.tenants.sections.timeline'))
+                ->schema([
+                    RepeatableEntry::make('lifecycle_timeline')
+                        ->label(__('admin.tenants.sections.timeline'))
+                        ->state(fn (Tenant $record) => static::buildTimeline($record))
+                        ->schema([
+                            TextEntry::make('title')
+                                ->label(__('admin.tenants.timeline.title'))
+                                ->columnSpanFull(),
+                            TextEntry::make('details')
+                                ->label(__('admin.tenants.timeline.details'))
+                                ->columnSpanFull()
+                                ->placeholder('—'),
+                            TextEntry::make('tone')
+                                ->label(__('admin.tenants.timeline.status'))
+                                ->badge()
+                                ->color(fn (?string $state) => $state ?? 'gray')
+                                ->formatStateUsing(fn (?string $state) => $state
+                                    ? __('admin.tenants.timeline.tone.'.$state)
+                                    : __('admin.tenants.timeline.tone.muted')),
+                            TextEntry::make('occurred_at')
+                                ->label(__('admin.tenants.timeline.occurred_at'))
+                                ->dateTime(),
+                        ])
+                        ->columns(2),
+                ]),
+        ]);
+    }
+
+    private static function accessStatusLabel(Tenant $tenant): string
+    {
+        if ($tenant->anonymized_at) {
+            return __('admin.tenants.status.anonymized');
+        }
+
+        if ($tenant->is_suspended) {
+            return __('admin.tenants.status.suspended');
+        }
+
+        if (! $tenant->is_active) {
+            return __('admin.tenants.status.inactive');
+        }
+
+        if ($tenant->subscription_expires_at && $tenant->subscription_expires_at->isPast()) {
+            return $tenant->isInGracePeriod()
+                ? __('admin.tenants.status.grace')
+                : __('admin.tenants.status.expired');
+        }
+
+        return __('admin.tenants.status.active');
+    }
+
+    private static function accessStatusTone(Tenant $tenant): string
+    {
+        if ($tenant->anonymized_at) {
+            return 'danger';
+        }
+
+        if ($tenant->is_suspended) {
+            return 'warning';
+        }
+
+        if (! $tenant->is_active) {
+            return 'danger';
+        }
+
+        if ($tenant->subscription_expires_at && $tenant->subscription_expires_at->isPast()) {
+            return $tenant->isInGracePeriod() ? 'warning' : 'danger';
+        }
+
+        return 'success';
+    }
+
+    private static function formatLimitValue(?int $value, ?string $suffix = null): string
+    {
+        if (! $value || $value <= 0) {
+            return __('admin.tenants.limits.unlimited');
+        }
+
+        return $suffix ? $value.' '.$suffix : (string) $value;
+    }
+
+    /**
+     * @return array{used: string, remaining: string, percentage: string}
+     */
+    private static function formatStorageValue(Tenant $tenant): array
+    {
+        $summary = static::storageSummary($tenant);
+
+        $used = $summary['used_mb'] !== null
+            ? $summary['used_mb'].' MB'
+            : '—';
+
+        $remaining = $summary['remaining_mb'] !== null
+            ? $summary['remaining_mb'].' MB'
+            : __('admin.tenants.limits.unlimited');
+
+        $percentage = $summary['percentage'] !== null
+            ? $summary['percentage'].'%'
+            : __('admin.tenants.limits.unlimited');
+
+        return [
+            'used' => $used,
+            'remaining' => $remaining,
+            'percentage' => $percentage,
+        ];
+    }
+
+    private static function storageUsageTone(Tenant $tenant): string
+    {
+        $summary = static::storageSummary($tenant);
+
+        if ($summary['percentage'] === null) {
+            return 'gray';
+        }
+
+        if ($summary['percentage'] >= 95) {
+            return 'danger';
+        }
+
+        if ($summary['percentage'] >= 80) {
+            return 'warning';
+        }
+
+        return 'success';
+    }
+
+    /**
+     * @return array<string, float|int|null>
+     */
+    private static function storageSummary(Tenant $tenant): array
+    {
+        if (isset(static::$usageCache[$tenant->getKey()])) {
+            return static::$usageCache[$tenant->getKey()];
+        }
+
+        $summary = app(TenantUsageService::class)->storageSummary($tenant);
+
+        static::$usageCache[$tenant->getKey()] = $summary;
+
+        return $summary;
+    }
+
+    private static function buildTimeline(Tenant $tenant): array
+    {
+        $events = [
+            static::timelineEntry(
+                __('admin.tenants.timeline.created'),
+                __('admin.tenants.timeline.created_details'),
+                $tenant->created_at,
+                'success'
+            ),
+        ];
+
+        if ($tenant->last_activity_at) {
+            $events[] = static::timelineEntry(
+                __('admin.tenants.timeline.last_activity'),
+                __('admin.tenants.timeline.last_activity_details'),
+                $tenant->last_activity_at,
+                'info'
+            );
+        }
+
+        if ($tenant->deletion_warning_sent_at) {
+            $events[] = static::timelineEntry(
+                __('admin.tenants.timeline.deletion_warning'),
+                __('admin.tenants.timeline.deletion_warning_details'),
+                $tenant->deletion_warning_sent_at,
+                'warning'
+            );
+        }
+
+        if ($tenant->pending_deletion_at) {
+            $events[] = static::timelineEntry(
+                __('admin.tenants.timeline.deletion_scheduled'),
+                __('admin.tenants.timeline.deletion_scheduled_details'),
+                $tenant->pending_deletion_at,
+                'warning'
+            );
+        }
+
+        if ($tenant->anonymized_at) {
+            $events[] = static::timelineEntry(
+                __('admin.tenants.timeline.anonymized'),
+                __('admin.tenants.timeline.anonymized_details'),
+                $tenant->anonymized_at,
+                'danger'
+            );
+        }
+
+        $lifecycleEvents = $tenant->lifecycleEvents()
+            ->with('actor')
+            ->latest('occurred_at')
+            ->limit(25)
+            ->get();
+
+        foreach ($lifecycleEvents as $event) {
+            $events[] = static::timelineEntry(
+                static::lifecycleTitle($event),
+                static::lifecycleDetails($event),
+                $event->occurred_at ?? $event->created_at,
+                static::lifecycleTone($event)
+            );
+        }
+
+        $logs = $tenant->notificationLogs()
+            ->latest('sent_at')
+            ->limit(10)
+            ->get();
+
+        foreach ($logs as $log) {
+            $status = $log->status === 'failed' ? 'danger' : 'info';
+            $eventTitle = $log->status === 'failed'
+                ? __('admin.tenants.timeline.notification_failed')
+                : __('admin.tenants.timeline.notification_sent');
+
+            $details = collect([
+                Str::headline($log->type),
+                $log->channel ? Str::upper($log->channel) : null,
+                $log->recipient,
+                $log->failure_reason ? 'reason: '.$log->failure_reason : null,
+            ])->filter()->implode(' - ');
+
+            $events[] = static::timelineEntry(
+                $eventTitle,
+                $details,
+                $log->sent_at ?? $log->failed_at ?? $log->created_at,
+                $status
+            );
+        }
+
+        return collect($events)
+            ->filter(fn (array $event) => $event['occurred_at'] !== null)
+            ->sortByDesc('occurred_at')
+            ->values()
+            ->all();
+    }
+
+    private static function lifecycleTitle(TenantLifecycleEvent $event): string
+    {
+        $key = 'admin.tenants.timeline.events.'.$event->type;
+
+        return __($key) !== $key ? __($key) : Str::headline($event->type);
+    }
+
+    private static function lifecycleTone(TenantLifecycleEvent $event): string
+    {
+        return match ($event->type) {
+            'activated' => 'success',
+            'unsuspended' => 'success',
+            'deactivated' => 'danger',
+            'suspended' => 'warning',
+            'anonymize_requested' => 'danger',
+            'deletion_scheduled' => 'warning',
+            'deletion_cancelled' => 'info',
+            'grace_period_set' => 'warning',
+            'grace_period_cleared' => 'info',
+            'limits_updated' => 'info',
+            'subscription_expires_at_updated' => 'info',
+            default => 'info',
+        };
+    }
+
+    private static function lifecycleDetails(TenantLifecycleEvent $event): ?string
+    {
+        $payload = is_array($event->payload) ? $event->payload : [];
+        $details = [];
+
+        if (! empty($payload['note'])) {
+            $details[] = (string) $payload['note'];
+        }
+
+        if (isset($payload['grace_period_ends_at'])) {
+            $details[] = __('admin.tenants.timeline.grace_period_until', [
+                'date' => (string) $payload['grace_period_ends_at'],
+            ]);
+        }
+
+        if (isset($payload['before'], $payload['after']) && is_array($payload['before']) && is_array($payload['after'])) {
+            foreach (['max_photos_per_event', 'max_storage_mb', 'subscription_expires_at'] as $field) {
+                if (! array_key_exists($field, $payload['before']) && ! array_key_exists($field, $payload['after'])) {
+                    continue;
+                }
+
+                $before = $payload['before'][$field] ?? '—';
+                $after = $payload['after'][$field] ?? '—';
+                $label = __('admin.tenants.fields.'.$field);
+
+                $details[] = $label.': '.$before.' -> '.$after;
+            }
+        }
+
+        if ($event->actor) {
+            $details[] = __('admin.tenants.timeline.by', [
+                'name' => $event->actor->getFilamentName(),
+            ]);
+        }
+
+        return empty($details) ? null : implode(' - ', $details);
+    }
+
+    private static function timelineEntry(string $title, ?string $details, $occurredAt, string $tone): array
+    {
+        return [
+            'title' => $title,
+            'details' => $details,
+            'occurred_at' => $occurredAt,
+            'tone' => $tone,
+        ];
+    }
+}