Implement compliance exports and retention overrides

routes/api.php

@@ -8,6 +8,7 @@ use App\Http\Controllers\Api\PackageController;
 use App\Http\Controllers\Api\SparkboothUploadController;
 use App\Http\Controllers\Api\Tenant\AdminPushSubscriptionController;
 use App\Http\Controllers\Api\Tenant\DashboardController;
+use App\Http\Controllers\Api\Tenant\DataExportController;
 use App\Http\Controllers\Api\Tenant\EmotionController;
 use App\Http\Controllers\Api\Tenant\EventAddonCatalogController;
 use App\Http\Controllers\Api\Tenant\EventAddonController;
@@ -293,6 +294,15 @@ Route::prefix('v1')->name('api.v1.')->group(function () {
                 ->name('tenant.settings.notifications.update');
         });
 
+        Route::middleware('tenant.admin')->group(function () {
+            Route::get('exports', [DataExportController::class, 'index'])
+                ->name('tenant.exports.index');
+            Route::post('exports', [DataExportController::class, 'store'])
+                ->name('tenant.exports.store');
+            Route::get('exports/{export}/download', [DataExportController::class, 'download'])
+                ->name('tenant.exports.download');
+        });
+
         Route::get('notifications/logs', [NotificationLogController::class, 'index'])
             ->middleware('tenant.admin')
             ->name('tenant.notifications.logs.index');

routes/web.php

@@ -14,6 +14,7 @@ use App\Http\Controllers\PaddleWebhookController;
 use App\Http\Controllers\ProfileAccountController;
 use App\Http\Controllers\ProfileController;
 use App\Http\Controllers\ProfileDataExportController;
+use App\Http\Controllers\SuperAdmin\DataExportController as SuperAdminDataExportController;
 use App\Http\Controllers\Tenant\EventPhotoArchiveController;
 use App\Http\Controllers\TenantAdminAuthController;
 use App\Http\Controllers\TenantAdminGoogleController;
@@ -314,6 +315,10 @@ Route::middleware('auth')->group(function () {
     Route::delete('/profile/account', [ProfileAccountController::class, 'destroy'])
         ->name('profile.account.destroy');
 });
+Route::middleware('auth:super_admin')->group(function () {
+    Route::get('/super-admin/data-exports/{export}/download', [SuperAdminDataExportController::class, 'download'])
+        ->name('superadmin.data-exports.download');
+});
 Route::prefix('event-admin')->group(function () {
     $renderAdmin = fn () => view('admin');
     $authAdmin = TenantAdminAuthController::class;