first&last

app/Http/Controllers/AttachmentController.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\ServiceRequest;
+use App\Models\RequestAttachment;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Gate;
+use Illuminate\Support\Facades\Storage;
+
+class AttachmentController extends Controller
+{
+    public function download(ServiceRequest $request, RequestAttachment $attachment): Response
+    {
+        abort_unless($attachment->request_id === $request->id, 404);
+
+        Gate::authorize('view', $request);
+
+        if (!Storage::disk('local')->exists($attachment->path)) {
+            abort(404, 'Файл не найден.');
+        }
+
+        return response()->download(
+            Storage::disk('local')->path($attachment->path),
+            $attachment->filename
+        );
+    }
+}

app/Http/Controllers/Auth/ForgotPasswordController.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+
+class ForgotPasswordController extends Controller
+{
+    public function create()
+    {
+        return view('auth.forgot-password');
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate(['email' => ['required', 'email']]);
+
+        $status = Password::sendResetLink($request->only('email'));
+
+        return $status === Password::RESET_LINK_SENT
+            ? back()->with('status', __($status))
+            : back()->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/ResetPasswordController.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+
+class ResetPasswordController extends Controller
+{
+    public function create(Request $request)
+    {
+        return view('auth.reset-password', ['request' => $request]);
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            'token' => ['required'],
+            'email' => ['required', 'email'],
+            'password' => ['required', 'confirmed', 'min:8'],
+        ]);
+
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function ($user) use ($request): void {
+                $user->forceFill([
+                    'password' => Hash::make($request->string('password')->toString()),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        return $status === Password::PASSWORD_RESET
+            ? redirect()->route('login')->with('status', __($status))
+            : back()->withErrors(['email' => [__($status)]]);
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Foundation\Validation\ValidatesRequests;
+use Illuminate\Routing\Controller as BaseController;
+
+class Controller extends BaseController
+{
+    use AuthorizesRequests, ValidatesRequests;
+}

app/Http/Kernel.php

@@ -0,0 +1,70 @@
+<?php
+
+namespace App\Http;
+
+use Illuminate\Foundation\Http\Kernel as HttpKernel;
+
+class Kernel extends HttpKernel
+{
+    /**
+     * The application's global HTTP middleware stack.
+     *
+     * These middleware are run during every request to your application.
+     *
+     * @var array<int, class-string|string>
+     */
+    protected $middleware = [
+        // \App\Http\Middleware\TrustHosts::class,
+        \App\Http\Middleware\TrustProxies::class,
+        \Illuminate\Http\Middleware\HandleCors::class,
+        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
+        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
+        \App\Http\Middleware\TrimStrings::class,
+        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
+    ];
+
+    /**
+     * The application's route middleware groups.
+     *
+     * @var array<string, array<int, class-string|string>>
+     */
+    protected $middlewareGroups = [
+        'web' => [
+            \App\Http\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
+            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
+            \App\Http\Middleware\VerifyCsrfToken::class,
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+
+        'api' => [
+            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
+            \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+    ];
+
+    /**
+     * The application's middleware aliases.
+     *
+     * Aliases may be used instead of class names to conveniently assign middleware to routes and groups.
+     *
+     * @var array<string, class-string|string>
+     */
+    protected $middlewareAliases = [
+        'active_user' => \App\Http\Middleware\EnsureUserIsActive::class,
+        'auth' => \App\Http\Middleware\Authenticate::class,
+        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+        'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
+        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
+        'can' => \Illuminate\Auth\Middleware\Authorize::class,
+        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
+        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
+        'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class,
+        'signed' => \App\Http\Middleware\ValidateSignature::class,
+        'role' => \App\Http\Middleware\RoleMiddleware::class,
+        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
+        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+    ];
+}

app/Http/Middleware/Authenticate.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Http\Request;
+
+class Authenticate extends Middleware
+{
+    /**
+     * Get the path the user should be redirected to when they are not authenticated.
+     */
+    protected function redirectTo(Request $request): ?string
+    {
+        return $request->expectsJson() ? null : route('login');
+    }
+}

app/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/EnsureUserIsActive.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsureUserIsActive
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $user = $request->user();
+
+        if ($user && !$user->is_active) {
+            auth()->logout();
+
+            return redirect()->route('login')->withErrors([
+                'email' => 'Ваш аккаунт отключен. Обратитесь к администратору.',
+            ]);
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Providers\RouteServiceProvider;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Symfony\Component\HttpFoundation\Response;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next, string ...$guards): Response
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/RoleMiddleware.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class RoleMiddleware
+{
+    public function handle(Request $request, Closure $next, string ...$roles): Response
+    {
+        $user = $request->user();
+
+        if (!$user) {
+            abort(401);
+        }
+
+        if (!in_array($user->role->value, $roles, true)) {
+            abort(403, 'Недостаточно прав для доступа к разделу.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

app/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array<int, string|null>
+     */
+    public function hosts(): array
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

app/Http/Middleware/TrustProxies.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array<int, string>|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers =
+        Request::HEADER_X_FORWARDED_FOR |
+        Request::HEADER_X_FORWARDED_HOST |
+        Request::HEADER_X_FORWARDED_PORT |
+        Request::HEADER_X_FORWARDED_PROTO |
+        Request::HEADER_X_FORWARDED_AWS_ELB;
+}

app/Http/Middleware/ValidateSignature.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Routing\Middleware\ValidateSignature as Middleware;
+
+class ValidateSignature extends Middleware
+{
+    /**
+     * The names of the query string parameters that should be ignored.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        // 'fbclid',
+        // 'utm_campaign',
+        // 'utm_content',
+        // 'utm_medium',
+        // 'utm_source',
+        // 'utm_term',
+    ];
+}

app/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
+
+class VerifyCsrfToken extends Middleware
+{
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Requests/Auth/LoginRequest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class LoginRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'email'],
+            'password' => ['required', 'string'],
+            'remember' => ['nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Requests/Directory/DepartmentRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class DepartmentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $department = $this->route('department');
+
+        return [
+            'name' => ['required', 'string', 'max:255', 'unique:departments,name'.($department ? ','.$department->id : '')],
+            'description' => ['nullable', 'string'],
+        ];
+    }
+}

app/Http/Requests/Directory/EquipmentCategoryRequest.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class EquipmentCategoryRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $category = $this->route('equipment_category');
+
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'slug' => ['required', 'string', 'max:255', Rule::unique('equipment_categories', 'slug')->ignore($category)],
+            'description' => ['nullable', 'string'],
+        ];
+    }
+}

app/Http/Requests/Directory/EquipmentRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class EquipmentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $equipment = $this->route('equipment');
+
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'serial_number' => ['required', 'string', Rule::unique('equipment', 'serial_number')->ignore($equipment)],
+            'inventory_number' => ['required', 'string', Rule::unique('equipment', 'inventory_number')->ignore($equipment)],
+            'category_id' => ['required', 'exists:equipment_categories,id'],
+            'client_id' => ['nullable', 'exists:users,id'],
+            'purchase_date' => ['nullable', 'date'],
+            'warranty_until' => ['nullable', 'date'],
+            'condition' => ['required', Rule::in(['good', 'fair', 'poor'])],
+            'notes' => ['nullable', 'string'],
+        ];
+    }
+}

app/Http/Requests/Directory/PriorityRequest.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class PriorityRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $priority = $this->route('priority');
+
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'color_hex' => ['required', 'regex:/^#[0-9A-Fa-f]{6}$/'],
+            'level' => ['required', 'integer', 'between:1,4', Rule::unique('priorities', 'level')->ignore($priority)],
+        ];
+    }
+}

app/Http/Requests/Directory/RequestTypeRequest.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class RequestTypeRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $type = $this->route('request_type');
+
+        return [
+            'name' => ['required', 'string', 'max:255', Rule::unique('request_types', 'name')->ignore($type)],
+            'description' => ['nullable', 'string'],
+            'sla_hours' => ['required', 'integer', 'min:1', 'max:720'],
+        ];
+    }
+}

app/Http/Requests/Directory/StatusRequest.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Requests\Directory;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StatusRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $status = $this->route('status');
+
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'color_hex' => ['required', 'regex:/^#[0-9A-Fa-f]{6}$/'],
+            'slug' => ['required', 'string', Rule::unique('statuses', 'slug')->ignore($status)],
+            'is_final' => ['nullable', 'boolean'],
+            'sort_order' => ['required', 'integer', 'min:1', 'max:100'],
+        ];
+    }
+}

app/Http/Requests/Profile/UpdateProfileRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Requests\Profile;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateProfileRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'email', Rule::unique('users', 'email')->ignore($this->user()?->id)],
+            'phone' => ['nullable', 'string', 'max:32'],
+            'password' => ['nullable', 'string', 'confirmed', 'min:8'],
+        ];
+    }
+}

app/Http/Requests/Request/RateServiceRequestRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Requests\Request;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class RateServiceRequestRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'client_rating' => ['required', 'integer', 'between:1,5'],
+            'client_comment' => ['nullable', 'string', 'max:2000'],
+        ];
+    }
+}

app/Http/Requests/Request/StoreCommentRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Requests\Request;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreCommentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'body' => ['required', 'string', 'max:5000'],
+            'is_internal' => ['nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Requests/Request/StoreServiceRequestRequest.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Http\Requests\Request;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreServiceRequestRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'title' => ['required', 'string', 'max:255'],
+            'description' => ['required', 'string'],
+            'type_id' => ['required', 'exists:request_types,id'],
+            'priority_id' => ['required', 'exists:priorities,id'],
+            'status_id' => ['nullable', 'exists:statuses,id'],
+            'client_id' => ['required', 'exists:users,id'],
+            'assigned_to' => ['nullable', 'exists:users,id'],
+            'equipment_id' => ['nullable', 'exists:equipment,id'],
+            'location' => ['nullable', 'string', 'max:255'],
+            'planned_at' => ['nullable', 'date'],
+            'deadline_at' => ['nullable', 'date'],
+            'resolution_notes' => ['nullable', 'string'],
+            'attachments' => ['nullable', 'array', 'max:5'],
+            'attachments.*' => ['file', 'max:10240'],
+        ];
+    }
+}

app/Http/Requests/Request/UpdateServiceRequestRequest.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Http\Requests\Request;
+
+class UpdateServiceRequestRequest extends StoreServiceRequestRequest
+{
+    public function rules(): array
+    {
+        $rules = parent::rules();
+        $rules['title'][0] = 'sometimes';
+
+        return $rules;
+    }
+}

app/Http/Requests/System/UpdateSettingsRequest.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Requests\System;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateSettingsRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'company_name' => ['required', 'string', 'max:255'],
+            'timezone' => ['required', 'timezone'],
+            'default_sla_hours' => ['required', 'integer', 'min:1', 'max:720'],
+            'maintenance_mode' => ['nullable', 'boolean'],
+            'notify_assigned' => ['nullable', 'boolean'],
+            'notify_status_changed' => ['nullable', 'boolean'],
+            'notify_comment_added' => ['nullable', 'boolean'],
+            'notify_overdue' => ['nullable', 'boolean'],
+            'notify_sla_warning' => ['nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Requests/User/StoreUserRequest.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Requests\User;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'email', 'max:255', 'unique:users,email'],
+            'password' => ['required', 'string', 'min:8', 'confirmed'],
+            'role' => ['required', Rule::in(['admin', 'manager', 'technician', 'client'])],
+            'department_id' => ['nullable', 'exists:departments,id'],
+            'phone' => ['nullable', 'string', 'max:32'],
+            'is_active' => ['nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Requests/User/UpdateUserRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Requests\User;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $user = $this->route('user');
+
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'email', 'max:255', Rule::unique('users', 'email')->ignore($user)],
+            'password' => ['nullable', 'string', 'min:8', 'confirmed'],
+            'role' => ['required', Rule::in(['admin', 'manager', 'technician', 'client'])],
+            'department_id' => ['nullable', 'exists:departments,id'],
+            'phone' => ['nullable', 'string', 'max:32'],
+            'is_active' => ['nullable', 'boolean'],
+        ];
+    }
+}

app/Http/Resources/ActivityLogResource.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class ActivityLogResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'user' => $this->user?->name,
+            'action' => $this->action,
+            'entity' => class_basename($this->model_type),
+            'model_id' => $this->model_id,
+            'description' => $this->description,
+            'ip_address' => $this->ip_address,
+            'created_at' => $this->created_at?->toDateTimeString(),
+        ];
+    }
+}

app/Http/Resources/ServiceRequestResource.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class ServiceRequestResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'ticket_number' => $this->ticket_number,
+            'title' => $this->title,
+            'description' => $this->description,
+            'type' => $this->type?->name,
+            'priority' => $this->priority?->name,
+            'priority_color' => $this->priority?->color_hex,
+            'status' => $this->status?->name,
+            'status_slug' => $this->status?->slug,
+            'status_color' => $this->status?->color_hex,
+            'client' => $this->client?->name,
+            'assignee' => $this->assignee?->name,
+            'deadline_at' => $this->deadline_at?->toDateTimeString(),
+            'created_at' => $this->created_at?->toDateTimeString(),
+            'updated_at' => $this->updated_at?->toDateTimeString(),
+        ];
+    }
+}

app/Http/Resources/UserResource.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class UserResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'name' => $this->name,
+            'email' => $this->email,
+            'role' => $this->role?->value,
+            'role_label' => $this->role?->label(),
+            'phone' => $this->phone,
+            'department' => $this->department?->name,
+            'is_active' => $this->is_active,
+            'last_login_at' => $this->last_login_at?->toDateTimeString(),
+            'created_at' => $this->created_at?->toDateTimeString(),
+        ];
+    }
+}