update api register

app/Http/Controllers/Access/RoleApplicationController.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Http\Controllers\Access;
+
+use App\Http\Controllers\ApiController;
+use App\Http\Requests\Access\ReviewRoleApplicationRequest;
+use App\Http\Requests\Access\StoreRoleApplicationRequest;
+use App\Models\RoleApplication;
+use App\Services\Access\RoleApplicationService;
+use Illuminate\Http\Request;
+
+class RoleApplicationController extends ApiController
+{
+    public function __construct(protected RoleApplicationService $service) {}
+
+    public function mine(Request $request)
+    {
+        return $this->success($this->service->mine($request->user()), 'Daftar pengajuan berhasil diambil');
+    }
+
+    public function store(StoreRoleApplicationRequest $request)
+    {
+        return $this->created($this->service->submit($request->validated(), $request->user()), 'Pengajuan berhasil dikirim');
+    }
+
+    public function reviewList(Request $request, string $type)
+    {
+        $filters = $request->validate(['search' => ['nullable', 'string', 'max:100'], 'status' => ['nullable', 'in:pending,approved,rejected'], 'per_page' => ['nullable', 'integer', 'min:1', 'max:100']]);
+
+        return $this->success($this->service->reviewList($type, $filters, $request->user(), $this->tenantId($request)), 'Daftar pengajuan berhasil diambil');
+    }
+
+    public function tenantMenuGroupOptions(Request $request)
+    {
+        return $this->success(
+            $this->service->tenantMenuGroupOptions($request->user()),
+            'Pilihan Group Menu tenant berhasil diambil'
+        );
+    }
+
+    public function staffMenuGroupOptions(Request $request)
+    {
+        return $this->success(
+            $this->service->staffMenuGroupOptions($request->user(), $this->tenantId($request)),
+            'Pilihan Group Menu staff berhasil diambil'
+        );
+    }
+
+    public function review(ReviewRoleApplicationRequest $request, RoleApplication $application)
+    {
+        return $this->updated($this->service->review($application, $request->validated(), $request->user(), $this->tenantId($request)), 'Pengajuan berhasil ditinjau');
+    }
+
+    public function linkCustomer(Request $request)
+    {
+        $data = $request->validate(['customer_id' => ['required', 'integer', 'exists:customers,id'], 'user_id' => ['required', 'integer', 'exists:users,id'], 'relationship' => ['nullable', 'in:owner,family,staff'], 'is_primary' => ['nullable', 'boolean']]);
+
+        return $this->created($this->service->linkCustomer($data, $request->user(), (int) $this->tenantId($request)), 'User berhasil dihubungkan dengan customer');
+    }
+
+    private function tenantId(Request $request): ?int
+    {
+        return $request->attributes->get('tenant_id');
+    }
+}

app/Http/Controllers/Menu/MenuController.php

@@ -13,14 +13,16 @@ class MenuController extends ApiController
     {
         $user = auth()->user();
         $tenantId = request()->attributes->get('tenant_id');
+        $tenantRole = $user?->tenantRole($tenantId);
 
         if (! $user) {
             return $this->error('Unauthenticated', 401);
         }
 
-        if ($user->isMasterAdmin()) {
+        if ($user->isMasterAdmin() || $user->is_platform_staff) {
             $menus = MenuList::query()
                 ->where('is_active', true)
+                ->when($user->is_platform_staff && ! $user->isMasterAdmin(), fn ($q) => $q->whereIn('slug', ['role-applications', 'role-applications-tenants']))
                 ->orderBy('sort_order')
                 ->orderBy('id')
                 ->get()
@@ -108,10 +110,22 @@ class MenuController extends ApiController
 
         $tree = $this->buildMenuTree($menus);
 
+        if (! $user->isMasterAdmin() && ! $user->is_platform_staff && ! in_array($tenantRole, ['staff', 'tenant_owner'], true)) {
+            $restrictedSlugs = ['voucher-hotspot-agents', 'voucher-hotspot-login-page'];
+            $tree = $this->removeRestrictedMenus($tree, $restrictedSlugs);
+        }
+        if (! $user->isMasterAdmin() && ! $user->is_platform_staff) {
+            $tree = $this->removeRestrictedMenus($tree, ['role-applications-tenants']);
+        }
+        if (! $user->isTenantOwner($tenantId)) {
+            $tree = $this->removeRestrictedMenus($tree, ['role-applications-staff']);
+        }
+
         return $this->success(
             [
                 'is_master' => (bool) $user->is_master,
                 'access_level' => $user->access_level->value,
+                'tenant_role' => $tenantRole,
                 'tenant_id' => $tenantId,
                 'menus' => $tree,
             ],
@@ -143,4 +157,16 @@ class MenuController extends ApiController
             })
             ->all();
     }
+
+    private function removeRestrictedMenus(array $menus, array $restrictedSlugs): array
+    {
+        return collect($menus)
+            ->reject(fn ($menu) => in_array($menu['slug'], $restrictedSlugs, true))
+            ->map(function ($menu) use ($restrictedSlugs) {
+                $menu['children'] = $this->removeRestrictedMenus($menu['children'] ?? [], $restrictedSlugs);
+
+                return $menu;
+            })
+            ->values()->all();
+    }
 }

app/Http/Controllers/Notification/NotificationController.php

@@ -9,7 +9,9 @@ use App\Http\Requests\Notification\StoreCustomerContactRequest;
 use App\Http\Requests\Notification\StoreNotificationBroadcastRequest;
 use App\Http\Requests\Notification\StoreNotificationChannelRequest;
 use App\Http\Requests\Notification\StoreNotificationTemplateRequest;
+use App\Http\Requests\Notification\StoreSystemNotificationRequest;
 use App\Http\Resources\Notification\NotificationDeliveryResource;
+use App\Http\Resources\Notification\SystemNotificationCampaignResource;
 use App\Models\Customer;
 use App\Models\CustomerContact;
 use App\Models\NotificationBroadcast;
@@ -17,11 +19,12 @@ use App\Models\NotificationChannel;
 use App\Models\NotificationEvent;
 use App\Models\NotificationTemplate;
 use App\Services\Notification\NotificationService;
+use App\Services\Notification\WhapiIdService;
 use Illuminate\Http\Request;
 
 class NotificationController extends ApiController
 {
-    public function __construct(protected NotificationService $service) {}
+    public function __construct(protected NotificationService $service, protected WhapiIdService $whapi) {}
 
     public function events()
     {
@@ -33,9 +36,42 @@ class NotificationController extends ApiController
         return $this->success($this->service->channels($this->channel($request), $request->user(), $this->tenantId($request)), 'Konfigurasi channel berhasil diambil');
     }
 
+    public function systemCampaigns(IndexNotificationRequest $request)
+    {
+        return $this->successPaginated(
+            $this->service->systemCampaigns($request->validated(), $request->user(), $this->tenantId($request)),
+            SystemNotificationCampaignResource::class,
+            'Riwayat notifikasi System berhasil diambil'
+        );
+    }
+
+    public function storeSystemCampaign(StoreSystemNotificationRequest $request)
+    {
+        return $this->created(
+            $this->service->createSystemCampaign($request->validated(), $request->user(), $this->tenantId($request)),
+            'Notifikasi System masuk antrean'
+        );
+    }
+
+    public function systemAudienceOptions(Request $request)
+    {
+        $data = $request->validate([
+            'tenant_id' => ['nullable', 'integer', 'exists:tenants,id'],
+            'search' => ['nullable', 'string', 'max:100'],
+        ]);
+
+        return $this->success(
+            $this->service->systemAudienceOptions(
+                $request->user(), $this->tenantId($request), $data['tenant_id'] ?? null, $data['search'] ?? null
+            ),
+            'Pilihan penerima notifikasi berhasil diambil'
+        );
+    }
+
     public function storeChannel(StoreNotificationChannelRequest $request)
     {
         abort_unless($request->validated('channel') === $this->channel($request), 422);
+        $this->authorizeChannelMutation($request);
 
         return $this->created($this->service->saveChannel($request->validated(), $request->user(), $this->tenantId($request)), 'Konfigurasi channel berhasil dibuat');
     }
@@ -44,6 +80,7 @@ class NotificationController extends ApiController
     {
         $this->authorizeTenant($request, $notificationChannel->tenant_id);
         abort_unless($notificationChannel->channel === $this->channel($request), 404);
+        $this->authorizeChannelMutation($request);
 
         return $this->updated($this->service->saveChannel($request->validated(), $request->user(), $this->tenantId($request), $notificationChannel), 'Konfigurasi channel berhasil diperbarui');
     }
@@ -52,10 +89,56 @@ class NotificationController extends ApiController
     {
         $this->authorizeTenant($request, $notificationChannel->tenant_id);
         abort_unless($notificationChannel->channel === $this->channel($request), 404);
+        $this->authorizeChannelMutation($request);
 
         return $this->success($this->service->testChannel($notificationChannel), 'Pengujian channel selesai');
     }
 
+    public function destroyChannel(Request $request, NotificationChannel $notificationChannel)
+    {
+        $this->authorizeTenant($request, $notificationChannel->tenant_id);
+        abort_unless($notificationChannel->channel === $this->channel($request), 404);
+        $this->authorizeChannelMutation($request);
+        $this->service->deleteChannel($notificationChannel);
+
+        return $this->deleted('Konfigurasi channel berhasil dinonaktifkan atau dihapus');
+    }
+
+    public function whapiState(Request $request, NotificationChannel $notificationChannel)
+    {
+        $this->authorizeWhapiAccess($request, $notificationChannel);
+
+        return $this->success($this->whapi->state($notificationChannel), 'Status perangkat WHAPI berhasil diambil');
+    }
+
+    public function whapiStart(Request $request, NotificationChannel $notificationChannel)
+    {
+        $this->authorizeWhapiAccess($request, $notificationChannel);
+
+        return $this->success($this->whapi->start($notificationChannel), 'Layanan WHAPI berhasil dijalankan');
+    }
+
+    public function whapiQr(Request $request, NotificationChannel $notificationChannel)
+    {
+        $this->authorizeWhapiAccess($request, $notificationChannel);
+
+        return $this->success($this->whapi->qr($notificationChannel), 'QR WHAPI berhasil diambil');
+    }
+
+    public function whapiTestMessage(Request $request, NotificationChannel $notificationChannel)
+    {
+        $this->authorizeWhapiAccess($request, $notificationChannel);
+        $data = $request->validate([
+            'phone' => ['required', 'string', 'max:25', 'regex:/^\+?[0-9][0-9\s\-()]{7,24}$/'],
+            'message' => ['required', 'string', 'max:4000'],
+        ]);
+
+        return $this->success(
+            $this->whapi->send($notificationChannel, $data['phone'], $data['message']),
+            'Pesan uji WHAPI berhasil dikirim'
+        );
+    }
+
     public function templates(Request $request)
     {
         return $this->success($this->service->templates($this->channel($request), $request->user(), $this->tenantId($request)), 'Daftar template berhasil diambil');
@@ -185,8 +268,24 @@ class NotificationController extends ApiController
         return $request->attributes->get('tenant_id');
     }
 
-    private function authorizeTenant(Request $request, int $tenantId): void
+    private function authorizeTenant(Request $request, ?int $tenantId): void
     {
-        abort_unless($request->user()->isMasterAdmin() || $tenantId === $this->tenantId($request), 403);
+        abort_unless($request->user()->isMasterAdmin()
+            || ($tenantId !== null && $tenantId === $this->tenantId($request)), 403);
+    }
+
+    private function authorizeChannelMutation(Request $request): void
+    {
+        if ($this->channel($request) === 'whatsapp_unofficial') {
+            abort_unless($request->user()->isMasterAdmin(), 403, 'WhatsApp Unofficial hanya dapat dikonfigurasi oleh Master Admin.');
+        }
+    }
+
+    private function authorizeWhapiAccess(Request $request, NotificationChannel $channel): void
+    {
+        abort_unless($channel->channel === 'whatsapp_unofficial' && $channel->provider === 'whapi_id', 404);
+        abort_unless($request->user()->isMasterAdmin()
+            || ((int) $channel->tenant_id === (int) $this->tenantId($request)
+                && $request->user()->isTenantOwner($this->tenantId($request))), 403);
     }
 }

app/Http/Controllers/Voucher/VoucherController.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace App\Http\Controllers\Voucher;
+
+use App\Http\Controllers\ApiController;
+use App\Http\Requests\Voucher\IndexVoucherRequest;
+use App\Http\Requests\Voucher\SaveVoucherLoginPageRequest;
+use App\Http\Requests\Voucher\StoreVoucherAgentRequest;
+use App\Http\Requests\Voucher\StoreVoucherSaleRequest;
+use App\Http\Resources\Voucher\VoucherAgentResource;
+use App\Http\Resources\Voucher\VoucherSaleResource;
+use App\Models\VoucherAgent;
+use App\Models\VoucherSale;
+use App\Services\Voucher\VoucherService;
+use Illuminate\Http\Request;
+
+class VoucherController extends ApiController
+{
+    public function __construct(protected VoucherService $service) {}
+
+    public function sales(IndexVoucherRequest $request)
+    {
+        return $this->successPaginated($this->service->sales($request->validated(), $request->user(), $this->tenantId($request)), VoucherSaleResource::class, 'Daftar penjualan voucher berhasil diambil');
+    }
+
+    public function storeSale(StoreVoucherSaleRequest $request)
+    {
+        return $this->created(new VoucherSaleResource($this->service->createSale($request->validated(), $request->user(), $this->tenantId($request))), 'Voucher berhasil dibuat');
+    }
+
+    public function showSale(Request $request, VoucherSale $sale)
+    {
+        return $this->success(new VoucherSaleResource($this->service->saleDetail($sale, $request->user(), $this->tenantId($request))), 'Detail voucher berhasil diambil');
+    }
+
+    public function agents(IndexVoucherRequest $request)
+    {
+        return $this->successPaginated($this->service->agents($request->validated(), $request->user(), $this->tenantId($request)), VoucherAgentResource::class, 'Daftar agen voucher berhasil diambil');
+    }
+
+    public function storeAgent(StoreVoucherAgentRequest $request)
+    {
+        return $this->created(new VoucherAgentResource($this->service->saveAgent($request->validated(), $request->user(), $this->tenantId($request))), 'Agen voucher berhasil dibuat');
+    }
+
+    public function updateAgent(StoreVoucherAgentRequest $request, VoucherAgent $agent)
+    {
+        return $this->updated(new VoucherAgentResource($this->service->saveAgent($request->validated(), $request->user(), $this->tenantId($request), $agent)), 'Agen voucher berhasil diperbarui');
+    }
+
+    public function destroyAgent(Request $request, VoucherAgent $agent)
+    {
+        $this->service->saveAgent([...$agent->toArray(), 'status' => 'inactive'], $request->user(), $this->tenantId($request), $agent);
+
+        return $this->deleted('Agen voucher berhasil dinonaktifkan');
+    }
+
+    public function options(Request $request)
+    {
+        return $this->success($this->service->options((string) $request->route('voucher_scope'), $request->user(), $this->tenantId($request)), 'Opsi voucher berhasil diambil');
+    }
+
+    public function loginPage(Request $request)
+    {
+        return $this->success($this->service->loginPage($request->user(), $this->tenantId($request)), 'Setting LoginPage berhasil diambil');
+    }
+
+    public function saveLoginPage(SaveVoucherLoginPageRequest $request)
+    {
+        return $this->updated($this->service->saveLoginPage($request->validated(), $request->user(), $this->tenantId($request)), 'Setting LoginPage berhasil disimpan');
+    }
+
+    private function tenantId(Request $request): ?int
+    {
+        return $request->attributes->get('tenant_id');
+    }
+}

app/Http/Middleware/EnsureAccessLevel.php

@@ -12,7 +12,10 @@ class EnsureAccessLevel
     {
         $user = $request->user();
 
-        if (! $user || (! $user->isMasterAdmin() && ! in_array($user->access_level->value, $levels, true))) {
+        $tenantId = $request->attributes->get('tenant_id');
+        $effectiveLevel = $tenantId ? $user?->tenantRole($tenantId) : $user?->access_level?->value;
+
+        if (! $user || (! $user->isMasterAdmin() && ! in_array($effectiveLevel, $levels, true))) {
             return response()->json([
                 'success' => false,
                 'code' => 403,

app/Http/Requests/Access/ReviewRoleApplicationRequest.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Http\Requests\Access;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class ReviewRoleApplicationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $application = $this->route('application');
+        $requiresMenuGroup = $this->input('decision') === 'approved'
+            && in_array($application?->application_type, ['tenant', 'staff'], true);
+
+        return [
+            'decision' => ['required', Rule::in(['approved', 'rejected'])], 'review_notes' => ['nullable', 'string', 'max:2000'],
+            'menu_group_id' => [
+                Rule::requiredIf($requiresMenuGroup),
+                'nullable',
+                'integer',
+                Rule::exists('menu_groups', 'id')->where('is_active', true),
+            ],
+            'payment_type' => ['nullable', Rule::in(['prepaid', 'postpaid'])],
+            'price_mode' => ['nullable', Rule::in(['discount', 'commission'])],
+            'discount_percent' => ['nullable', 'numeric', 'min:0', 'max:100'], 'commission_percent' => ['nullable', 'numeric', 'min:0', 'max:100'],
+            'credit_limit' => ['nullable', 'numeric', 'min:0'],
+        ];
+    }
+}

app/Http/Requests/Access/StoreRoleApplicationRequest.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Requests\Access;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreRoleApplicationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'application_type' => ['required', Rule::in(['tenant', 'agent', 'staff'])],
+            'tenant_id' => ['required_if:application_type,agent,staff', 'nullable', 'integer', 'exists:tenants,id'],
+            'tenant_name' => ['required_if:application_type,tenant', 'nullable', 'string', 'max:150'],
+            'tenant_code' => ['nullable', 'string', 'max:50'], 'phone' => ['nullable', 'string', 'max:30'],
+            'email' => ['nullable', 'email', 'max:150'], 'address' => ['nullable', 'string', 'max:2000'],
+            'reason' => ['required', 'string', 'max:2000'],
+        ];
+    }
+}

app/Http/Requests/Notification/IndexNotificationRequest.php

@@ -17,6 +17,7 @@ class IndexNotificationRequest extends FormRequest
             'search' => ['nullable', 'string', 'max:255'],
             'status' => ['nullable', 'string', 'max:30'],
             'unread' => ['nullable', 'boolean'],
+            'tenant_id' => ['nullable', 'integer', 'exists:tenants,id'],
             'page' => ['nullable', 'integer', 'min:1'],
             'per_page' => ['nullable', 'integer', 'min:1', 'max:100'],
         ];

app/Http/Requests/Notification/StoreSystemNotificationRequest.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Requests\Notification;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreSystemNotificationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'title' => ['required', 'string', 'max:255'],
+            'body' => ['required', 'string', 'max:10000'],
+            'action_url' => ['nullable', 'string', 'max:2000'],
+            'icon' => ['nullable', 'string', 'max:100'],
+            'target_scope' => ['required', Rule::in(['all_users', 'tenant', 'access_level', 'selected_users'])],
+            'tenant_id' => [Rule::requiredIf($this->input('target_scope') === 'tenant' && $this->user()?->isMasterAdmin()), 'nullable', 'integer', 'exists:tenants,id'],
+            'statuses' => ['nullable', 'array'],
+            'statuses.*' => ['string', Rule::in(['active', 'inactive', 'suspended'])],
+            'access_levels' => ['required_if:target_scope,access_level', 'nullable', 'array', 'min:1'],
+            'access_levels.*' => ['string', Rule::in(['customer', 'staff', 'tenant_owner', 'master_admin'])],
+            'user_ids' => ['required_if:target_scope,selected_users', 'nullable', 'array', 'min:1', 'max:1000'],
+            'user_ids.*' => ['integer', 'exists:users,id'],
+        ];
+    }
+}

app/Http/Requests/User/StoreUserRequest.php

@@ -22,6 +22,7 @@ class StoreUserRequest extends FormRequest
             'whatsapp_number' => ['nullable', 'string', 'max:20'],
             'password' => ['required', 'string', 'min:8'],
             'is_master' => ['nullable', 'boolean'],
+            'is_platform_staff' => ['nullable', 'boolean'],
             'access_level' => ['nullable', Rule::enum(UserAccessLevel::class)],
             'status' => ['required', Rule::in(['active', 'inactive', 'suspended'])],
 
@@ -56,6 +57,7 @@ class StoreUserRequest extends FormRequest
 
             'user_tenants' => ['nullable', 'array'],
             'user_tenants.*.tenant_id' => ['required_with:user_tenants', 'integer', 'exists:tenants,id'],
+            'user_tenants.*.role' => ['nullable', Rule::in(['customer', 'staff', 'tenant_owner'])],
             'user_tenants.*.is_default' => ['nullable', 'boolean'],
 
             'user_menu_groups' => ['nullable', 'array'],

app/Http/Requests/User/UpdateUserRequest.php

@@ -35,6 +35,7 @@ class UpdateUserRequest extends FormRequest
             'whatsapp_number' => ['nullable', 'string', 'max:20'],
             'password' => ['nullable', 'string', 'min:8'],
             'is_master' => ['nullable', 'boolean'],
+            'is_platform_staff' => ['nullable', 'boolean'],
             'access_level' => ['sometimes', 'required', Rule::enum(UserAccessLevel::class)],
             'status' => ['sometimes', 'required', Rule::in(['active', 'inactive', 'suspended'])],
 
@@ -69,6 +70,7 @@ class UpdateUserRequest extends FormRequest
 
             'user_tenants' => ['nullable', 'array'],
             'user_tenants.*.tenant_id' => ['required_with:user_tenants', 'integer', 'exists:tenants,id'],
+            'user_tenants.*.role' => ['nullable', Rule::in(['customer', 'staff', 'tenant_owner'])],
             'user_tenants.*.is_default' => ['nullable', 'boolean'],
 
             'user_menu_groups' => ['nullable', 'array'],

app/Http/Requests/Voucher/IndexVoucherRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Requests\Voucher;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class IndexVoucherRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'search' => ['nullable', 'string', 'max:100'], 'payment_status' => ['nullable', 'string', 'max:30'],
+            'per_page' => ['nullable', 'integer', 'min:1', 'max:100'], 'page' => ['nullable', 'integer', 'min:1'],
+        ];
+    }
+}

app/Http/Requests/Voucher/SaveVoucherLoginPageRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Requests\Voucher;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class SaveVoucherLoginPageRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'enabled' => ['required', 'boolean'], 'title' => ['required', 'string', 'max:150'],
+            'theme_color' => ['required', 'regex:/^#[0-9A-Fa-f]{6}$/'],
+            'allowed_package_profile_ids' => ['nullable', 'array'],
+            'allowed_package_profile_ids.*' => ['integer', 'exists:nas_package_profiles,id'],
+            'settings' => ['nullable', 'array'],
+        ];
+    }
+}

app/Http/Requests/Voucher/StoreVoucherAgentRequest.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Requests\Voucher;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreVoucherAgentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'tenant_id' => ['nullable', 'integer', 'exists:tenants,id'], 'user_id' => ['required', 'integer', 'exists:users,id'],
+            'agent_code' => ['nullable', 'string', 'max:50'], 'payment_type' => ['required', Rule::in(['prepaid', 'postpaid'])],
+            'price_mode' => ['required', Rule::in(['discount', 'commission'])],
+            'discount_percent' => ['required', 'numeric', 'min:0', 'max:100'],
+            'commission_percent' => ['required', 'numeric', 'min:0', 'max:100'],
+            'credit_limit' => ['required', 'numeric', 'min:0'], 'status' => ['required', Rule::in(['active', 'inactive', 'suspended'])],
+            'notes' => ['nullable', 'string', 'max:2000'],
+        ];
+    }
+}

app/Http/Requests/Voucher/StoreVoucherSaleRequest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Requests\Voucher;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreVoucherSaleRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'nas_package_profile_id' => ['required', 'integer', 'exists:nas_package_profiles,id'],
+            'nas_mikrotik_id' => ['nullable', 'integer', 'exists:nas_mikrotiks,id'],
+            'quantity' => ['required', 'integer', 'min:1', 'max:100'], 'notes' => ['nullable', 'string', 'max:2000'],
+        ];
+    }
+}

app/Http/Resources/Notification/SystemNotificationCampaignResource.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Resources\Notification;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class SystemNotificationCampaignResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id, 'uuid' => $this->uuid, 'tenant_id' => $this->tenant_id,
+            'title' => $this->title, 'body' => $this->body, 'action_url' => $this->action_url,
+            'icon' => $this->icon, 'audience' => $this->audience, 'status' => $this->status,
+            'estimated_recipients' => $this->estimated_recipients,
+            'processed_recipients' => $this->processed_recipients,
+            'tenant' => $this->whenLoaded('tenant'), 'creator' => $this->whenLoaded('creator'),
+            'completed_at' => $this->completed_at, 'created_at' => $this->created_at,
+        ];
+    }
+}

app/Http/Resources/User/UserResource.php

@@ -55,6 +55,7 @@ class UserResource extends JsonResource
                         'id' => $item->id,
                         'user_id' => $item->user_id,
                         'tenant_id' => $item->tenant_id,
+                        'role' => $item->role,
                         'is_default' => (bool) $item->is_default,
                         'created_at' => $item->created_at,
                         'updated_at' => $item->updated_at,

app/Http/Resources/Voucher/VoucherAgentResource.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Resources\Voucher;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class VoucherAgentResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id, 'uuid' => $this->uuid, 'tenant_id' => $this->tenant_id,
+            'user_id' => $this->user_id, 'user' => $this->whenLoaded('user'), 'agent_code' => $this->agent_code,
+            'payment_type' => $this->payment_type, 'price_mode' => $this->price_mode,
+            'discount_percent' => $this->discount_percent, 'commission_percent' => $this->commission_percent,
+            'credit_limit' => $this->credit_limit, 'outstanding_balance' => $this->outstanding_balance,
+            'status' => $this->status, 'notes' => $this->notes, 'created_at' => $this->created_at,
+        ];
+    }
+}

app/Http/Resources/Voucher/VoucherSaleResource.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Resources\Voucher;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class VoucherSaleResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id, 'uuid' => $this->uuid, 'sale_number' => $this->sale_number,
+            'agent' => $this->whenLoaded('agent'), 'package_profile' => $this->whenLoaded('packageProfile'),
+            'creator' => $this->whenLoaded('creator'), 'quantity' => $this->quantity, 'unit_price' => $this->unit_price,
+            'discount_amount' => $this->discount_amount, 'total_amount' => $this->total_amount,
+            'payment_status' => $this->payment_status, 'status' => $this->status, 'created_at' => $this->created_at,
+            'vouchers' => $this->whenLoaded('vouchers', fn () => $this->vouchers->map(fn ($voucher) => [
+                'id' => $voucher->id, 'uuid' => $voucher->uuid, 'username' => $voucher->username,
+                'password' => $voucher->access_password, 'status' => $voucher->status, 'sync_status' => $voucher->sync_status,
+                'mikrotik' => $voucher->mikrotik, 'valid_until' => $voucher->valid_until,
+            ])),
+        ];
+    }
+}