Add tenant lifecycle view and limit controls

app/Filament/Resources/TenantResource.php

@@ -10,6 +10,7 @@ use App\Filament\Resources\TenantResource\Schemas\TenantInfolist;
 use App\Jobs\AnonymizeAccount;
 use App\Models\Tenant;
 use App\Notifications\InactiveTenantDeletionWarning;
+use App\Services\Tenant\TenantLifecycleLogger;
 use BackedEnum;
 use Carbon\Carbon;
 use Filament\Actions;
@@ -20,6 +21,8 @@ use Filament\Forms\Components\Select;
 use Filament\Forms\Components\TextInput;
 use Filament\Forms\Components\Toggle;
 use Filament\Notifications\Notification;
+use Filament\Pages\Enums\SubNavigationPosition;
+use Filament\Resources\Pages\Page;
 use Filament\Resources\Resource;
 use Filament\Schemas\Schema;
 use Filament\Tables;
@@ -38,6 +41,8 @@ class TenantResource extends Resource
 
     protected static UnitEnum|string|null $navigationGroup = null;
 
+    protected static ?SubNavigationPosition $subNavigationPosition = SubNavigationPosition::Top;
+
     public static function getNavigationGroup(): UnitEnum|string|null
     {
         return __('admin.nav.tenants');
@@ -105,6 +110,15 @@ class TenantResource extends Resource
         return TenantInfolist::configure($schema);
     }
 
+    public static function getRecordSubNavigation(Page $page): array
+    {
+        return $page->generateNavigationItems([
+            Pages\ViewTenant::class,
+            Pages\ViewTenantLifecycle::class,
+            Pages\EditTenant::class,
+        ]);
+    }
+
     public static function table(Table $table): Table
     {
 
@@ -220,6 +234,7 @@ class TenantResource extends Resource
         return [
             'index' => Pages\ListTenants::route('/'),
             'view' => Pages\ViewTenant::route('/{record}'),
+            'lifecycle' => Pages\ViewTenantLifecycle::route('/{record}/lifecycle'),
             'edit' => Pages\EditTenant::route('/{record}/edit'),
         ];
     }
@@ -245,7 +260,17 @@ class TenantResource extends Resource
                 ->color('success')
                 ->visible(fn (Tenant $record): bool => ! $record->is_active && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_active' => true])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_active' => true]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'activated',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('deactivate')
                 ->label(__('admin.tenants.actions.deactivate'))
                 ->icon('heroicon-o-no-symbol')
@@ -253,7 +278,17 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => (bool) $record->is_active && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_active' => false])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_active' => false]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deactivated',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('suspend')
                 ->label(__('admin.tenants.actions.suspend'))
                 ->icon('heroicon-o-pause-circle')
@@ -261,14 +296,34 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => ! $record->is_suspended && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('suspend', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_suspended' => true])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_suspended' => true]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'suspended',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('unsuspend')
                 ->label(__('admin.tenants.actions.unsuspend'))
                 ->icon('heroicon-o-play-circle')
                 ->color('success')
                 ->visible(fn (Tenant $record): bool => (bool) $record->is_suspended && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('suspend', $record) ?? false)
-                ->action(fn (Tenant $record): bool => $record->update(['is_suspended' => false])),
+                ->action(function (Tenant $record): bool {
+                    $updated = $record->update(['is_suspended' => false]);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'unsuspended',
+                        actor: Filament::auth()->user()
+                    );
+
+                    return $updated;
+                }),
             Actions\Action::make('schedule_deletion')
                 ->label(__('admin.tenants.actions.schedule_deletion'))
                 ->icon('heroicon-o-calendar-days')
@@ -309,6 +364,16 @@ class TenantResource extends Resource
                     }
 
                     $record->forceFill($update)->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deletion_scheduled',
+                        [
+                            'pending_deletion_at' => $plannedDeletion->toDateTimeString(),
+                            'send_warning' => (bool) ($data['send_warning'] ?? false),
+                        ],
+                        Filament::auth()->user()
+                    );
                 })
                 ->successNotificationTitle(__('admin.tenants.actions.schedule_deletion_success')),
             Actions\Action::make('cancel_deletion')
@@ -318,10 +383,21 @@ class TenantResource extends Resource
                 ->visible(fn (Tenant $record): bool => $record->pending_deletion_at !== null && ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
                 ->action(function (Tenant $record): void {
+                    $previous = $record->pending_deletion_at?->toDateTimeString();
+
                     $record->forceFill([
                         'pending_deletion_at' => null,
                         'deletion_warning_sent_at' => null,
                     ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'deletion_cancelled',
+                        [
+                            'pending_deletion_at' => $previous,
+                        ],
+                        Filament::auth()->user()
+                    );
                 })
                 ->successNotificationTitle(__('admin.tenants.actions.cancel_deletion_success')),
             Actions\Action::make('anonymize_now')
@@ -331,8 +407,160 @@ class TenantResource extends Resource
                 ->requiresConfirmation()
                 ->visible(fn (Tenant $record): bool => ! $record->anonymized_at)
                 ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
-                ->action(fn (Tenant $record) => AnonymizeAccount::dispatch(null, $record->id))
+                ->action(function (Tenant $record): void {
+                    AnonymizeAccount::dispatch(null, $record->id);
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'anonymize_requested',
+                        actor: Filament::auth()->user()
+                    );
+                })
                 ->successNotificationTitle(__('admin.tenants.actions.anonymize_success')),
         ];
     }
+
+    /**
+     * @return array<int, Actions\Action>
+     */
+    public static function lifecycleManagementActions(): array
+    {
+        return [
+            Actions\Action::make('update_limits')
+                ->label(__('admin.tenants.actions.update_limits'))
+                ->icon('heroicon-o-adjustments-horizontal')
+                ->modalWidth('2xl')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    TextInput::make('max_photos_per_event')
+                        ->label(__('admin.tenants.fields.max_photos_per_event'))
+                        ->numeric()
+                        ->minValue(0)
+                        ->default(fn (Tenant $record) => $record->max_photos_per_event),
+                    TextInput::make('max_storage_mb')
+                        ->label(__('admin.tenants.fields.max_storage_mb'))
+                        ->numeric()
+                        ->minValue(0)
+                        ->default(fn (Tenant $record) => $record->max_storage_mb),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $before = [
+                        'max_photos_per_event' => $record->max_photos_per_event,
+                        'max_storage_mb' => $record->max_storage_mb,
+                    ];
+
+                    $record->forceFill([
+                        'max_photos_per_event' => $data['max_photos_per_event'],
+                        'max_storage_mb' => $data['max_storage_mb'],
+                    ])->save();
+
+                    $after = [
+                        'max_photos_per_event' => $record->max_photos_per_event,
+                        'max_storage_mb' => $record->max_storage_mb,
+                    ];
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'limits_updated',
+                        [
+                            'before' => $before,
+                            'after' => $after,
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('update_subscription_expires_at')
+                ->label(__('admin.tenants.actions.update_subscription_expires_at'))
+                ->icon('heroicon-o-calendar')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    Forms\Components\DateTimePicker::make('subscription_expires_at')
+                        ->label(__('admin.tenants.fields.subscription_expires_at'))
+                        ->default(fn (Tenant $record) => $record->subscription_expires_at),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $before = [
+                        'subscription_expires_at' => optional($record->subscription_expires_at)->toDateTimeString(),
+                    ];
+
+                    $record->forceFill([
+                        'subscription_expires_at' => $data['subscription_expires_at'],
+                    ])->save();
+
+                    $after = [
+                        'subscription_expires_at' => optional($record->subscription_expires_at)->toDateTimeString(),
+                    ];
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'subscription_expires_at_updated',
+                        [
+                            'before' => $before,
+                            'after' => $after,
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('set_grace_period')
+                ->label(__('admin.tenants.actions.set_grace_period'))
+                ->icon('heroicon-o-clock')
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->form([
+                    Forms\Components\DateTimePicker::make('grace_period_ends_at')
+                        ->label(__('admin.tenants.fields.grace_period_ends_at'))
+                        ->required()
+                        ->minDate(now())
+                        ->default(fn (Tenant $record) => $record->grace_period_ends_at),
+                    Forms\Components\Textarea::make('note')
+                        ->label(__('admin.tenants.actions.note'))
+                        ->rows(3),
+                ])
+                ->action(function (Tenant $record, array $data): void {
+                    $record->forceFill([
+                        'grace_period_ends_at' => $data['grace_period_ends_at'],
+                    ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'grace_period_set',
+                        [
+                            'grace_period_ends_at' => optional($record->grace_period_ends_at)->toDateTimeString(),
+                            'note' => $data['note'] ?? null,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+            Actions\Action::make('clear_grace_period')
+                ->label(__('admin.tenants.actions.clear_grace_period'))
+                ->icon('heroicon-o-x-circle')
+                ->color('gray')
+                ->requiresConfirmation()
+                ->visible(fn (Tenant $record): bool => $record->grace_period_ends_at !== null)
+                ->authorize(fn (Tenant $record): bool => Filament::auth()->user()?->can('update', $record) ?? false)
+                ->action(function (Tenant $record): void {
+                    $previous = $record->grace_period_ends_at?->toDateTimeString();
+
+                    $record->forceFill([
+                        'grace_period_ends_at' => null,
+                    ])->save();
+
+                    app(TenantLifecycleLogger::class)->record(
+                        $record,
+                        'grace_period_cleared',
+                        [
+                            'grace_period_ends_at' => $previous,
+                        ],
+                        Filament::auth()->user()
+                    );
+                }),
+        ];
+    }
 }