chore: initial Laravel 13 project setup for eCert MBIP

- Laravel 13.9 + PHP 8.5 + MySQL
- Bootstrap 5.3 + jQuery 3.7 + Chart.js (replacing Alpine/Tailwind)
- Packages: intervention/image, dompdf, simple-qrcode, league/csv, laravel/breeze, laravel/boost
- 17 database migrations: users, programs, qr_codes, participants, attendances, certificates, questionnaires, email_logs, audit_logs
- 13 Eloquent models with full relationships
- Admin layout (Bootstrap 5 sidebar) + public layout (mobile-first)
- Rate limiters: checkin (60/min), certificate (30/min)
- Admin seeder: admin@mbip.gov.my
- Storage directories + symlink configured

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/settings.local.json

@@ -0,0 +1,24 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(php --version)",
+      "Bash(composer --version)",
+      "Bash(git remote *)",
+      "Bash(git log *)",
+      "Bash(mysql --version)",
+      "Bash(php -m)",
+      "Bash(npm --version)",
+      "Bash(php -r \"echo PHP_MAXPATHLEN; echo PHP_EOL;\")",
+      "Bash(php -r \"phpinfo\\(\\);\")",
+      "Bash(composer show *)",
+      "Bash(php -r ' *)",
+      "Bash(composer create-project *)",
+      "Bash(Read \"C:\\\\Users\\\\User\\\\AppData\\\\Local\\\\Temp\\\\claude\\\\c--Users-User-Aplikasi-ecert\\\\7bc63a13-c59c-44a9-9ce4-2ee353b9449f\\\\tasks\\\\bvciphcmh.output\")",
+      "Bash(php artisan *)",
+      "Bash(composer require *)",
+      "Bash(python -c \"import sys,json; d=json.load\\(sys.stdin\\); print\\('Description:', d.get\\('description',''\\)\\); print\\('Keywords:', d.get\\('keywords',[]\\)\\); print\\('Require:', list\\(d.get\\('require',{}\\).keys\\(\\)\\)\\)\")",
+      "Bash(npm install *)",
+      "Bash(npm run *)"
+    ]
+  }
+}

.editorconfig

@@ -0,0 +1,18 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 4
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[{compose,docker-compose}.{yml,yaml}]
+indent_size = 4

.env.example

@@ -0,0 +1,65 @@
+APP_NAME=Laravel
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_URL=http://localhost
+
+APP_LOCALE=en
+APP_FALLBACK_LOCALE=en
+APP_FAKER_LOCALE=en_US
+
+APP_MAINTENANCE_DRIVER=file
+# APP_MAINTENANCE_STORE=database
+
+# PHP_CLI_SERVER_WORKERS=4
+
+BCRYPT_ROUNDS=12
+
+LOG_CHANNEL=stack
+LOG_STACK=single
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+DB_CONNECTION=sqlite
+# DB_HOST=127.0.0.1
+# DB_PORT=3306
+# DB_DATABASE=laravel
+# DB_USERNAME=root
+# DB_PASSWORD=
+
+SESSION_DRIVER=database
+SESSION_LIFETIME=120
+SESSION_ENCRYPT=false
+SESSION_PATH=/
+SESSION_DOMAIN=null
+
+BROADCAST_CONNECTION=log
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=database
+
+CACHE_STORE=database
+# CACHE_PREFIX=
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_CLIENT=phpredis
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=log
+MAIL_SCHEME=null
+MAIL_HOST=127.0.0.1
+MAIL_PORT=2525
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+VITE_APP_NAME="${APP_NAME}"

.gitattributes

@@ -0,0 +1,11 @@
+* text=auto eol=lf
+
+*.blade.php diff=html
+*.css diff=css
+*.html diff=html
+*.md diff=markdown
+*.php diff=php
+
+/.github export-ignore
+CHANGELOG.md export-ignore
+.styleci.yml export-ignore

.gitignore

@@ -0,0 +1,32 @@
+*.log
+.DS_Store
+.env
+.env.backup
+.env.production
+.phpactor.json
+.phpunit.result.cache
+/.codex
+/.cursor/
+/.idea
+/.nova
+/.phpunit.cache
+/.vscode
+/.zed
+/auth.json
+/node_modules
+/public/build
+/public/fonts-manifest.dev.json
+/public/hot
+/public/storage
+/storage/*.key
+/storage/pail
+/vendor
+_ide_helper.php
+Homestead.json
+Homestead.yaml
+Thumbs.db
+
+# Application-specific storage (private files)
+/storage/app/private/certificates/
+/storage/app/private/imports/
+/storage/app/public/qrcodes/

.npmrc

@@ -0,0 +1,2 @@
+ignore-scripts=true
+audit=true

README.md

@@ -0,0 +1,58 @@
+<p align="center"><a href="https://laravel.com" target="_blank"><img src="https://raw.githubusercontent.com/laravel/art/master/logo-lockup/5%20SVG/2%20CMYK/1%20Full%20Color/laravel-logolockup-cmyk-red.svg" width="400" alt="Laravel Logo"></a></p>
+
+<p align="center">
+<a href="https://github.com/laravel/framework/actions"><img src="https://github.com/laravel/framework/workflows/tests/badge.svg" alt="Build Status"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/dt/laravel/framework" alt="Total Downloads"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/v/laravel/framework" alt="Latest Stable Version"></a>
+<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/l/laravel/framework" alt="License"></a>
+</p>
+
+## About Laravel
+
+Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as:
+
+- [Simple, fast routing engine](https://laravel.com/docs/routing).
+- [Powerful dependency injection container](https://laravel.com/docs/container).
+- Multiple back-ends for [session](https://laravel.com/docs/session) and [cache](https://laravel.com/docs/cache) storage.
+- Expressive, intuitive [database ORM](https://laravel.com/docs/eloquent).
+- Database agnostic [schema migrations](https://laravel.com/docs/migrations).
+- [Robust background job processing](https://laravel.com/docs/queues).
+- [Real-time event broadcasting](https://laravel.com/docs/broadcasting).
+
+Laravel is accessible, powerful, and provides tools required for large, robust applications.
+
+## Learning Laravel
+
+Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework.
+
+In addition, [Laracasts](https://laracasts.com) contains thousands of video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library.
+
+You can also watch bite-sized lessons with real-world projects on [Laravel Learn](https://laravel.com/learn), where you will be guided through building a Laravel application from scratch while learning PHP fundamentals.
+
+## Agentic Development
+
+Laravel's predictable structure and conventions make it ideal for AI coding agents like Claude Code, Cursor, and GitHub Copilot. Install [Laravel Boost](https://laravel.com/docs/ai) to supercharge your AI workflow:
+
+```bash
+composer require laravel/boost --dev
+
+php artisan boost:install
+```
+
+Boost provides your agent 15+ tools and skills that help agents build Laravel applications while following best practices.
+
+## Contributing
+
+Thank you for considering contributing to the Laravel framework! The contribution guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions).
+
+## Code of Conduct
+
+In order to ensure that the Laravel community is welcoming to all, please review and abide by the [Code of Conduct](https://laravel.com/docs/contributions#code-of-conduct).
+
+## Security Vulnerabilities
+
+If you discover a security vulnerability within Laravel, please send an e-mail to Taylor Otwell via [taylor@laravel.com](mailto:taylor@laravel.com). All security vulnerabilities will be promptly addressed.
+
+## License
+
+The Laravel framework is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).

app/Http/Controllers/Admin/CertificateController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class CertificateController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/CertificateTemplateController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class CertificateTemplateController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/DashboardController.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Attendance;
+use App\Models\Certificate;
+use App\Models\EmailLog;
+use App\Models\Participant;
+use App\Models\Program;
+use App\Models\QuestionnaireResponse;
+
+class DashboardController extends Controller
+{
+    public function index()
+    {
+        $stats = [
+            'total_programs'      => Program::count(),
+            'active_programs'     => Program::where('status', 'published')->count(),
+            'total_participants'  => Participant::count(),
+            'total_attendances'   => Attendance::count(),
+            'total_certificates'  => Certificate::count(),
+            'generated_certs'     => Certificate::whereIn('status', ['generated', 'emailed', 'downloaded'])->count(),
+            'downloaded_certs'    => Certificate::where('status', 'downloaded')->count(),
+            'total_responses'     => QuestionnaireResponse::count(),
+            'pending_emails'      => EmailLog::where('status', 'pending')->count(),
+        ];
+
+        $recentPrograms = Program::with('creator')
+            ->latest()
+            ->limit(5)
+            ->get();
+
+        return view('admin.dashboard', compact('stats', 'recentPrograms'));
+    }
+}

app/Http/Controllers/Admin/ParticipantController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class ParticipantController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/ProgramController.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class ProgramController extends Controller
+{
+    /**
+     * Display a listing of the resource.
+     */
+    public function index()
+    {
+        //
+    }
+
+    /**
+     * Show the form for creating a new resource.
+     */
+    public function create()
+    {
+        //
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     */
+    public function store(Request $request)
+    {
+        //
+    }
+
+    /**
+     * Display the specified resource.
+     */
+    public function show(string $id)
+    {
+        //
+    }
+
+    /**
+     * Show the form for editing the specified resource.
+     */
+    public function edit(string $id)
+    {
+        //
+    }
+
+    /**
+     * Update the specified resource in storage.
+     */
+    public function update(Request $request, string $id)
+    {
+        //
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     */
+    public function destroy(string $id)
+    {
+        //
+    }
+}

app/Http/Controllers/Admin/ProgramQuestionnaireController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class ProgramQuestionnaireController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/QrCodeController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class QrCodeController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/QuestionController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class QuestionController extends Controller
+{
+    //
+}

app/Http/Controllers/Admin/QuestionnaireSetController.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class QuestionnaireSetController extends Controller
+{
+    /**
+     * Display a listing of the resource.
+     */
+    public function index()
+    {
+        //
+    }
+
+    /**
+     * Show the form for creating a new resource.
+     */
+    public function create()
+    {
+        //
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     */
+    public function store(Request $request)
+    {
+        //
+    }
+
+    /**
+     * Display the specified resource.
+     */
+    public function show(string $id)
+    {
+        //
+    }
+
+    /**
+     * Show the form for editing the specified resource.
+     */
+    public function edit(string $id)
+    {
+        //
+    }
+
+    /**
+     * Update the specified resource in storage.
+     */
+    public function update(Request $request, string $id)
+    {
+        //
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     */
+    public function destroy(string $id)
+    {
+        //
+    }
+}

app/Http/Controllers/Admin/StatisticsController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class StatisticsController extends Controller
+{
+    //
+}

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Auth\LoginRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\View\View;
+
+class AuthenticatedSessionController extends Controller
+{
+    /**
+     * Display the login view.
+     */
+    public function create(): View
+    {
+        return view('auth.login');
+    }
+
+    /**
+     * Handle an incoming authentication request.
+     */
+    public function store(LoginRequest $request): RedirectResponse
+    {
+        $request->authenticate();
+
+        $request->session()->regenerate();
+
+        return redirect()->intended(route('admin.dashboard', absolute: false));
+    }
+
+    /**
+     * Destroy an authenticated session.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        Auth::guard('web')->logout();
+
+        $request->session()->invalidate();
+
+        $request->session()->regenerateToken();
+
+        return redirect('/');
+    }
+}

app/Http/Controllers/Auth/ConfirmablePasswordController.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\ValidationException;
+use Illuminate\View\View;
+
+class ConfirmablePasswordController extends Controller
+{
+    /**
+     * Show the confirm password view.
+     */
+    public function show(): View
+    {
+        return view('auth.confirm-password');
+    }
+
+    /**
+     * Confirm the user's password.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! Auth::guard('web')->validate([
+            'email' => $request->user()->email,
+            'password' => $request->password,
+        ])) {
+            throw ValidationException::withMessages([
+                'password' => __('auth.password'),
+            ]);
+        }
+
+        $request->session()->put('auth.password_confirmed_at', time());
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/EmailVerificationNotificationController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+
+class EmailVerificationNotificationController extends Controller
+{
+    /**
+     * Send a new email verification notification.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false));
+        }
+
+        $request->user()->sendEmailVerificationNotification();
+
+        return back()->with('status', 'verification-link-sent');
+    }
+}

app/Http/Controllers/Auth/EmailVerificationPromptController.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\View\View;
+
+class EmailVerificationPromptController extends Controller
+{
+    /**
+     * Display the email verification prompt.
+     */
+    public function __invoke(Request $request): RedirectResponse|View
+    {
+        return $request->user()->hasVerifiedEmail()
+                    ? redirect()->intended(route('dashboard', absolute: false))
+                    : view('auth.verify-email');
+    }
+}

app/Http/Controllers/Auth/NewPasswordController.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Illuminate\View\View;
+
+class NewPasswordController extends Controller
+{
+    /**
+     * Display the password reset view.
+     */
+    public function create(Request $request): View
+    {
+        return view('auth.reset-password', ['request' => $request]);
+    }
+
+    /**
+     * Handle an incoming new password request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'token' => ['required'],
+            'email' => ['required', 'email'],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        // Here we will attempt to reset the user's password. If it is successful we
+        // will update the password on an actual user model and persist it to the
+        // database. Otherwise we will parse the error and return the response.
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function (User $user) use ($request) {
+                $user->forceFill([
+                    'password' => Hash::make($request->password),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        // If the password was successfully reset, we will redirect the user back to
+        // the application's home authenticated view. If there is an error we can
+        // redirect them back to where they came from with their error message.
+        return $status == Password::PASSWORD_RESET
+                    ? redirect()->route('login')->with('status', __($status))
+                    : back()->withInput($request->only('email'))
+                        ->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/PasswordController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules\Password;
+
+class PasswordController extends Controller
+{
+    /**
+     * Update the user's password.
+     */
+    public function update(Request $request): RedirectResponse
+    {
+        $validated = $request->validateWithBag('updatePassword', [
+            'current_password' => ['required', 'current_password'],
+            'password' => ['required', Password::defaults(), 'confirmed'],
+        ]);
+
+        $request->user()->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        return back()->with('status', 'password-updated');
+    }
+}

app/Http/Controllers/Auth/PasswordResetLinkController.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Validation\ValidationException;
+use Illuminate\View\View;
+
+class PasswordResetLinkController extends Controller
+{
+    /**
+     * Display the password reset link request view.
+     */
+    public function create(): View
+    {
+        return view('auth.forgot-password');
+    }
+
+    /**
+     * Handle an incoming password reset link request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'email' => ['required', 'email'],
+        ]);
+
+        // We will send the password reset link to this user. Once we have attempted
+        // to send the link, we will examine the response then see the message we
+        // need to show to the user. Finally, we'll send out a proper response.
+        $status = Password::sendResetLink(
+            $request->only('email')
+        );
+
+        return $status == Password::RESET_LINK_SENT
+                    ? back()->with('status', __($status))
+                    : back()->withInput($request->only('email'))
+                        ->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Illuminate\View\View;
+
+class RegisteredUserController extends Controller
+{
+    /**
+     * Display the registration view.
+     */
+    public function create(): View
+    {
+        return view('auth.register');
+    }
+
+    /**
+     * Handle an incoming registration request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'string', 'lowercase', 'email', 'max:255', 'unique:'.User::class],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        event(new Registered($user));
+
+        Auth::login($user);
+
+        return redirect(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+
+class VerifyEmailController extends Controller
+{
+    /**
+     * Mark the authenticated user's email address as verified.
+     */
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+        }
+
+        if ($request->user()->markEmailAsVerified()) {
+            event(new Verified($request->user()));
+        }
+
+        return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Controllers/ProfileController.php

@@ -0,0 +1,60 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\ProfileUpdateRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Redirect;
+use Illuminate\View\View;
+
+class ProfileController extends Controller
+{
+    /**
+     * Display the user's profile form.
+     */
+    public function edit(Request $request): View
+    {
+        return view('profile.edit', [
+            'user' => $request->user(),
+        ]);
+    }
+
+    /**
+     * Update the user's profile information.
+     */
+    public function update(ProfileUpdateRequest $request): RedirectResponse
+    {
+        $request->user()->fill($request->validated());
+
+        if ($request->user()->isDirty('email')) {
+            $request->user()->email_verified_at = null;
+        }
+
+        $request->user()->save();
+
+        return Redirect::route('profile.edit')->with('status', 'profile-updated');
+    }
+
+    /**
+     * Delete the user's account.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        $request->validateWithBag('userDeletion', [
+            'password' => ['required', 'current_password'],
+        ]);
+
+        $user = $request->user();
+
+        Auth::logout();
+
+        $user->delete();
+
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return Redirect::to('/');
+    }
+}

app/Http/Controllers/Public/AttendanceCheckController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Public;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class AttendanceCheckController extends Controller
+{
+    //
+}

app/Http/Controllers/Public/CertificateController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Public;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class CertificateController extends Controller
+{
+    //
+}

app/Http/Controllers/Public/CheckinController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Public;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class CheckinController extends Controller
+{
+    //
+}

app/Http/Controllers/Public/QuestionnaireController.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Http\Controllers\Public;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class QuestionnaireController extends Controller
+{
+    //
+}

app/Http/Requests/Auth/LoginRequest.php

@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Auth\Events\Lockout;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+
+class LoginRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email'],
+            'password' => ['required', 'string'],
+        ];
+    }
+
+    /**
+     * Attempt to authenticate the request's credentials.
+     *
+     * @throws ValidationException
+     */
+    public function authenticate(): void
+    {
+        $this->ensureIsNotRateLimited();
+
+        if (! Auth::attempt($this->only('email', 'password'), $this->boolean('remember'))) {
+            RateLimiter::hit($this->throttleKey());
+
+            throw ValidationException::withMessages([
+                'email' => trans('auth.failed'),
+            ]);
+        }
+
+        RateLimiter::clear($this->throttleKey());
+    }
+
+    /**
+     * Ensure the login request is not rate limited.
+     *
+     * @throws ValidationException
+     */
+    public function ensureIsNotRateLimited(): void
+    {
+        if (! RateLimiter::tooManyAttempts($this->throttleKey(), 5)) {
+            return;
+        }
+
+        event(new Lockout($this));
+
+        $seconds = RateLimiter::availableIn($this->throttleKey());
+
+        throw ValidationException::withMessages([
+            'email' => trans('auth.throttle', [
+                'seconds' => $seconds,
+                'minutes' => ceil($seconds / 60),
+            ]),
+        ]);
+    }
+
+    /**
+     * Get the rate limiting throttle key for the request.
+     */
+    public function throttleKey(): string
+    {
+        return Str::transliterate(Str::lower($this->string('email')).'|'.$this->ip());
+    }
+}

app/Http/Requests/ProfileUpdateRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Models\User;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class ProfileUpdateRequest extends FormRequest
+{
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => [
+                'required',
+                'string',
+                'lowercase',
+                'email',
+                'max:255',
+                Rule::unique(User::class)->ignore($this->user()->id),
+            ],
+        ];
+    }
+}

app/Models/Attendance.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Attendance extends Model
+{
+    protected $fillable = [
+        'program_id', 'participant_id', 'program_participant_id',
+        'attendance_source', 'attendance_session',
+        'checked_in_at', 'checked_in_ip', 'user_agent', 'notes',
+    ];
+
+    protected function casts(): array
+    {
+        return ['checked_in_at' => 'datetime'];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function participant()
+    {
+        return $this->belongsTo(Participant::class);
+    }
+
+    public function programParticipant()
+    {
+        return $this->belongsTo(ProgramParticipant::class);
+    }
+}

app/Models/AuditLog.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class AuditLog extends Model
+{
+    protected $fillable = [
+        'user_id', 'action', 'auditable_type', 'auditable_id',
+        'old_values', 'new_values', 'ip_address', 'user_agent',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'old_values' => 'array',
+            'new_values' => 'array',
+        ];
+    }
+
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    public function auditable()
+    {
+        return $this->morphTo();
+    }
+}

app/Models/Certificate.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Str;
+
+class Certificate extends Model
+{
+    protected $fillable = [
+        'uuid', 'program_id', 'participant_id', 'certificate_template_id',
+        'certificate_no', 'file_path', 'token', 'status', 'error_message',
+        'generated_at', 'emailed_at', 'downloaded_at', 'download_count',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'generated_at'   => 'datetime',
+            'emailed_at'     => 'datetime',
+            'downloaded_at'  => 'datetime',
+            'download_count' => 'integer',
+        ];
+    }
+
+    protected static function boot(): void
+    {
+        parent::boot();
+        static::creating(function ($model) {
+            $model->uuid  ??= (string) Str::uuid();
+            $model->token ??= Str::random(48);
+        });
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function participant()
+    {
+        return $this->belongsTo(Participant::class);
+    }
+
+    public function template()
+    {
+        return $this->belongsTo(CertificateTemplate::class, 'certificate_template_id');
+    }
+
+    public function emailLogs()
+    {
+        return $this->hasMany(EmailLog::class);
+    }
+
+    public function isGenerated(): bool
+    {
+        return $this->status === 'generated' || $this->status === 'emailed' || $this->status === 'downloaded';
+    }
+
+    public function recordDownload(): void
+    {
+        $this->increment('download_count');
+        if (! $this->downloaded_at) {
+            $this->update(['downloaded_at' => now(), 'status' => 'downloaded']);
+        }
+    }
+}

app/Models/CertificateTemplate.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class CertificateTemplate extends Model
+{
+    protected $fillable = [
+        'program_id', 'original_filename', 'image_path', 'config_json', 'is_active', 'uploaded_by',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'config_json' => 'array',
+            'is_active'   => 'boolean',
+        ];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function uploader()
+    {
+        return $this->belongsTo(User::class, 'uploaded_by');
+    }
+
+    public function certificates()
+    {
+        return $this->hasMany(Certificate::class);
+    }
+
+    public function getFieldConfig(string $field): ?array
+    {
+        return $this->config_json['fields'][$field] ?? null;
+    }
+}

app/Models/EmailLog.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class EmailLog extends Model
+{
+    protected $fillable = [
+        'program_id', 'participant_id', 'certificate_id',
+        'recipient_email', 'subject', 'email_type', 'status', 'error_message', 'sent_at',
+    ];
+
+    protected function casts(): array
+    {
+        return ['sent_at' => 'datetime'];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function participant()
+    {
+        return $this->belongsTo(Participant::class);
+    }
+
+    public function certificate()
+    {
+        return $this->belongsTo(Certificate::class);
+    }
+}

app/Models/Participant.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Support\Str;
+
+class Participant extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        'uuid', 'name', 'no_kp', 'email', 'phone', 'agency', 'participant_type',
+    ];
+
+    protected static function boot(): void
+    {
+        parent::boot();
+        static::creating(fn($model) => $model->uuid ??= (string) Str::uuid());
+    }
+
+    public function programs()
+    {
+        return $this->belongsToMany(Program::class, 'program_participants')
+                    ->withPivot(['registration_source', 'is_pre_registered', 'pre_registered_session', 'status', 'registered_at'])
+                    ->withTimestamps();
+    }
+
+    public function programParticipants()
+    {
+        return $this->hasMany(ProgramParticipant::class);
+    }
+
+    public function attendances()
+    {
+        return $this->hasMany(Attendance::class);
+    }
+
+    public function certificates()
+    {
+        return $this->hasMany(Certificate::class);
+    }
+
+    public function questionnaireResponses()
+    {
+        return $this->hasMany(QuestionnaireResponse::class);
+    }
+
+    public function attendanceForProgram(int $programId): ?Attendance
+    {
+        return $this->attendances()->where('program_id', $programId)->first();
+    }
+
+    public function hasAnsweredQuestionnaire(int $programId, int $questionnaireSetId): bool
+    {
+        return $this->questionnaireResponses()
+                    ->where('program_id', $programId)
+                    ->where('questionnaire_set_id', $questionnaireSetId)
+                    ->exists();
+    }
+}

app/Models/Program.php

@@ -0,0 +1,122 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Support\Str;
+
+class Program extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        'uuid', 'title', 'description', 'organizer', 'location',
+        'start_date', 'end_date',
+        'checkin_start_at', 'checkin_end_at',
+        'ecert_download_start_at', 'ecert_download_end_at',
+        'status', 'allow_walk_in',
+        'default_staff_session', 'default_external_session',
+        'created_by',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'start_date'              => 'date',
+            'end_date'                => 'date',
+            'checkin_start_at'        => 'datetime',
+            'checkin_end_at'          => 'datetime',
+            'ecert_download_start_at' => 'datetime',
+            'ecert_download_end_at'   => 'datetime',
+            'allow_walk_in'           => 'boolean',
+        ];
+    }
+
+    protected static function boot(): void
+    {
+        parent::boot();
+        static::creating(fn($model) => $model->uuid ??= (string) Str::uuid());
+    }
+
+    public function getRouteKeyName(): string
+    {
+        return 'uuid';
+    }
+
+    public function creator()
+    {
+        return $this->belongsTo(User::class, 'created_by');
+    }
+
+    public function qrCode()
+    {
+        return $this->hasOne(ProgramQrCode::class)->where('is_active', true)->latestOfMany();
+    }
+
+    public function qrCodes()
+    {
+        return $this->hasMany(ProgramQrCode::class);
+    }
+
+    public function participants()
+    {
+        return $this->belongsToMany(Participant::class, 'program_participants')
+                    ->withPivot(['registration_source', 'is_pre_registered', 'pre_registered_session', 'status', 'registered_at'])
+                    ->withTimestamps();
+    }
+
+    public function programParticipants()
+    {
+        return $this->hasMany(ProgramParticipant::class);
+    }
+
+    public function attendances()
+    {
+        return $this->hasMany(Attendance::class);
+    }
+
+    public function certificateTemplate()
+    {
+        return $this->hasOne(CertificateTemplate::class)->where('is_active', true)->latestOfMany();
+    }
+
+    public function certificateTemplates()
+    {
+        return $this->hasMany(CertificateTemplate::class);
+    }
+
+    public function certificates()
+    {
+        return $this->hasMany(Certificate::class);
+    }
+
+    public function questionnaire()
+    {
+        return $this->hasOne(ProgramQuestionnaire::class);
+    }
+
+    public function questionnaireSets()
+    {
+        return $this->belongsToMany(QuestionnaireSet::class, 'program_questionnaires')
+                    ->withPivot(['is_confirmed', 'confirmed_at', 'confirmed_by'])
+                    ->withTimestamps();
+    }
+
+    public function isCheckinOpen(): bool
+    {
+        $now = now();
+        return $this->status === 'published'
+            && $this->checkin_start_at
+            && $now->between($this->checkin_start_at, $this->checkin_end_at ?? $now->addYear());
+    }
+
+    public function isDownloadOpen(): bool
+    {
+        $now = now();
+        return $this->status === 'published'
+            && $this->ecert_download_start_at
+            && $now->gte($this->ecert_download_start_at)
+            && (! $this->ecert_download_end_at || $now->lte($this->ecert_download_end_at));
+    }
+}

app/Models/ProgramParticipant.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class ProgramParticipant extends Model
+{
+    protected $fillable = [
+        'program_id', 'participant_id',
+        'registration_source', 'is_pre_registered', 'pre_registered_session',
+        'status', 'registered_at',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'is_pre_registered' => 'boolean',
+            'registered_at'     => 'datetime',
+        ];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function participant()
+    {
+        return $this->belongsTo(Participant::class);
+    }
+
+    public function attendance()
+    {
+        return $this->hasOne(Attendance::class);
+    }
+}

app/Models/ProgramQrCode.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Str;
+
+class ProgramQrCode extends Model
+{
+    protected $fillable = ['program_id', 'token', 'qr_image_path', 'is_active'];
+
+    protected function casts(): array
+    {
+        return ['is_active' => 'boolean'];
+    }
+
+    protected static function boot(): void
+    {
+        parent::boot();
+        static::creating(fn($model) => $model->token ??= Str::random(48));
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+}

app/Models/ProgramQuestionnaire.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class ProgramQuestionnaire extends Model
+{
+    protected $fillable = [
+        'program_id', 'questionnaire_set_id', 'is_confirmed', 'confirmed_at', 'confirmed_by',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'is_confirmed' => 'boolean',
+            'confirmed_at' => 'datetime',
+        ];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function questionnaireSet()
+    {
+        return $this->belongsTo(QuestionnaireSet::class);
+    }
+
+    public function confirmedBy()
+    {
+        return $this->belongsTo(User::class, 'confirmed_by');
+    }
+}

app/Models/QuestionnaireAnswer.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class QuestionnaireAnswer extends Model
+{
+    protected $fillable = [
+        'questionnaire_response_id', 'questionnaire_question_id', 'answer_value',
+    ];
+
+    protected function casts(): array
+    {
+        return ['answer_value' => 'array'];
+    }
+
+    public function response()
+    {
+        return $this->belongsTo(QuestionnaireResponse::class, 'questionnaire_response_id');
+    }
+
+    public function question()
+    {
+        return $this->belongsTo(QuestionnaireQuestion::class, 'questionnaire_question_id');
+    }
+}

app/Models/QuestionnaireQuestion.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class QuestionnaireQuestion extends Model
+{
+    protected $fillable = [
+        'questionnaire_set_id', 'question_text', 'question_type',
+        'options_json', 'is_required', 'sort_order',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'options_json' => 'array',
+            'is_required'  => 'boolean',
+            'sort_order'   => 'integer',
+        ];
+    }
+
+    public function questionnaireSet()
+    {
+        return $this->belongsTo(QuestionnaireSet::class);
+    }
+
+    public function answers()
+    {
+        return $this->hasMany(QuestionnaireAnswer::class);
+    }
+}

app/Models/QuestionnaireResponse.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class QuestionnaireResponse extends Model
+{
+    protected $fillable = [
+        'program_id', 'participant_id', 'questionnaire_set_id',
+        'submitted_at', 'ip_address', 'user_agent',
+    ];
+
+    protected function casts(): array
+    {
+        return ['submitted_at' => 'datetime'];
+    }
+
+    public function program()
+    {
+        return $this->belongsTo(Program::class);
+    }
+
+    public function participant()
+    {
+        return $this->belongsTo(Participant::class);
+    }
+
+    public function questionnaireSet()
+    {
+        return $this->belongsTo(QuestionnaireSet::class);
+    }
+
+    public function answers()
+    {
+        return $this->hasMany(QuestionnaireAnswer::class);
+    }
+}

app/Models/QuestionnaireSet.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class QuestionnaireSet extends Model
+{
+    use HasFactory;
+
+    protected $fillable = ['title', 'description', 'status', 'created_by'];
+
+    public function creator()
+    {
+        return $this->belongsTo(User::class, 'created_by');
+    }
+
+    public function questions()
+    {
+        return $this->hasMany(QuestionnaireQuestion::class)->orderBy('sort_order');
+    }
+
+    public function programs()
+    {
+        return $this->belongsToMany(Program::class, 'program_questionnaires')
+                    ->withPivot(['is_confirmed', 'confirmed_at', 'confirmed_by'])
+                    ->withTimestamps();
+    }
+
+    public function programQuestionnaires()
+    {
+        return $this->hasMany(ProgramQuestionnaire::class);
+    }
+
+    public function responses()
+    {
+        return $this->hasMany(QuestionnaireResponse::class);
+    }
+}

app/Models/User.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Models;
+
+use Database\Factories\UserFactory;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+
+class User extends Authenticatable
+{
+    /** @use HasFactory<UserFactory> */
+    use HasFactory, Notifiable;
+
+    protected $fillable = ['name', 'email', 'password', 'is_admin'];
+    protected $hidden   = ['password', 'remember_token'];
+
+    protected function casts(): array
+    {
+        return [
+            'email_verified_at' => 'datetime',
+            'password'          => 'hashed',
+            'is_admin'          => 'boolean',
+        ];
+    }
+
+    public function programs()
+    {
+        return $this->hasMany(Program::class, 'created_by');
+    }
+
+    public function auditLogs()
+    {
+        return $this->hasMany(AuditLog::class);
+    }
+}

app/Providers/AppServiceProvider.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Facades\URL;
+use Illuminate\Support\ServiceProvider;
+
+class AppServiceProvider extends ServiceProvider
+{
+    public function register(): void {}
+
+    public function boot(): void
+    {
+        // Rate limiters for public routes
+        RateLimiter::for('checkin', fn(Request $request) =>
+            Limit::perMinute(60)->by($request->ip())
+        );
+
+        RateLimiter::for('certificate', fn(Request $request) =>
+            Limit::perMinute(30)->by($request->ip())
+        );
+
+        // Force HTTPS in production
+        if (app()->environment('production')) {
+            URL::forceScheme('https');
+        }
+    }
+}

app/View/Components/AppLayout.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\View\Components;
+
+use Illuminate\View\Component;
+use Illuminate\View\View;
+
+class AppLayout extends Component
+{
+    /**
+     * Get the view / contents that represents the component.
+     */
+    public function render(): View
+    {
+        return view('layouts.app');
+    }
+}

app/View/Components/GuestLayout.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\View\Components;
+
+use Illuminate\View\Component;
+use Illuminate\View\View;
+
+class GuestLayout extends Component
+{
+    /**
+     * Get the view / contents that represents the component.
+     */
+    public function render(): View
+    {
+        return view('layouts.guest');
+    }
+}

artisan

@@ -0,0 +1,18 @@
+#!/usr/bin/env php
+<?php
+
+use Illuminate\Foundation\Application;
+use Symfony\Component\Console\Input\ArgvInput;
+
+define('LARAVEL_START', microtime(true));
+
+// Register the Composer autoloader...
+require __DIR__.'/vendor/autoload.php';
+
+// Bootstrap Laravel and handle the command...
+/** @var Application $app */
+$app = require_once __DIR__.'/bootstrap/app.php';
+
+$status = $app->handleCommand(new ArgvInput);
+
+exit($status);

bootstrap/app.php

@@ -0,0 +1,18 @@
+<?php
+
+use Illuminate\Foundation\Application;
+use Illuminate\Foundation\Configuration\Exceptions;
+use Illuminate\Foundation\Configuration\Middleware;
+
+return Application::configure(basePath: dirname(__DIR__))
+    ->withRouting(
+        web: __DIR__.'/../routes/web.php',
+        commands: __DIR__.'/../routes/console.php',
+        health: '/up',
+    )
+    ->withMiddleware(function (Middleware $middleware): void {
+        //
+    })
+    ->withExceptions(function (Exceptions $exceptions): void {
+        //
+    })->create();

bootstrap/cache/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

bootstrap/providers.php

@@ -0,0 +1,7 @@
+<?php
+
+use App\Providers\AppServiceProvider;
+
+return [
+    AppServiceProvider::class,
+];

composer.json

@@ -0,0 +1,92 @@
+{
+    "$schema": "https://getcomposer.org/schema.json",
+    "name": "laravel/laravel",
+    "type": "project",
+    "description": "The skeleton application for the Laravel framework.",
+    "keywords": ["laravel", "framework"],
+    "license": "MIT",
+    "require": {
+        "php": "^8.3",
+        "barryvdh/laravel-dompdf": "^3.1",
+        "intervention/image": "^4.1",
+        "laravel/framework": "^13.8",
+        "laravel/tinker": "^3.0",
+        "league/csv": "^9.28",
+        "simplesoftwareio/simple-qrcode": "^4.2"
+    },
+    "require-dev": {
+        "fakerphp/faker": "^1.23",
+        "laravel/boost": "^2.4",
+        "laravel/breeze": "^2.4",
+        "laravel/pail": "^1.2.5",
+        "laravel/pao": "^1.0.6",
+        "laravel/pint": "^1.27",
+        "mockery/mockery": "^1.6",
+        "nunomaduro/collision": "^8.6",
+        "phpunit/phpunit": "^12.5.12"
+    },
+    "autoload": {
+        "psr-4": {
+            "App\\": "app/",
+            "Database\\Factories\\": "database/factories/",
+            "Database\\Seeders\\": "database/seeders/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "Tests\\": "tests/"
+        }
+    },
+    "scripts": {
+        "setup": [
+            "composer install",
+            "@php -r \"file_exists('.env') || copy('.env.example', '.env');\"",
+            "@php artisan key:generate",
+            "@php artisan migrate --force",
+            "npm install --ignore-scripts",
+            "npm run build"
+        ],
+        "dev": [
+            "Composer\\Config::disableProcessTimeout",
+            "npx concurrently -c \"#93c5fd,#c4b5fd,#fb7185,#fdba74\" \"php artisan serve\" \"php artisan queue:listen --tries=1 --timeout=0\" \"php artisan pail --timeout=0\" \"npm run dev\" --names=server,queue,logs,vite --kill-others"
+        ],
+        "test": [
+            "@php artisan config:clear --ansi @no_additional_args",
+            "@php artisan test"
+        ],
+        "post-autoload-dump": [
+            "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+            "@php artisan package:discover --ansi"
+        ],
+        "post-update-cmd": [
+            "@php artisan vendor:publish --tag=laravel-assets --ansi --force"
+        ],
+        "post-root-package-install": [
+            "@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
+        ],
+        "post-create-project-cmd": [
+            "@php artisan key:generate --ansi",
+            "@php -r \"file_exists('database/database.sqlite') || touch('database/database.sqlite');\"",
+            "@php artisan migrate --graceful --ansi"
+        ],
+        "pre-package-uninstall": [
+            "Illuminate\\Foundation\\ComposerScripts::prePackageUninstall"
+        ]
+    },
+    "extra": {
+        "laravel": {
+            "dont-discover": []
+        }
+    },
+    "config": {
+        "optimize-autoloader": true,
+        "preferred-install": "dist",
+        "sort-packages": true,
+        "allow-plugins": {
+            "pestphp/pest-plugin": true,
+            "php-http/discovery": true
+        }
+    },
+    "minimum-stability": "stable",
+    "prefer-stable": true
+}

config/app.php

@@ -0,0 +1,126 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Name
+    |--------------------------------------------------------------------------
+    |
+    | This value is the name of your application, which will be used when the
+    | framework needs to place the application's name in a notification or
+    | other UI elements where an application name needs to be displayed.
+    |
+    */
+
+    'name' => env('APP_NAME', 'Laravel'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Environment
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the "environment" your application is currently
+    | running in. This may determine how you prefer to configure various
+    | services the application utilizes. Set this in your ".env" file.
+    |
+    */
+
+    'env' => env('APP_ENV', 'production'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Debug Mode
+    |--------------------------------------------------------------------------
+    |
+    | When your application is in debug mode, detailed error messages with
+    | stack traces will be shown on every error that occurs within your
+    | application. If disabled, a simple generic error page is shown.
+    |
+    */
+
+    'debug' => (bool) env('APP_DEBUG', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application URL
+    |--------------------------------------------------------------------------
+    |
+    | This URL is used by the console to properly generate URLs when using
+    | the Artisan command line tool. You should set this to the root of
+    | the application so that it's available within Artisan commands.
+    |
+    */
+
+    'url' => env('APP_URL', 'http://localhost'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Timezone
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the default timezone for your application, which
+    | will be used by the PHP date and date-time functions. The timezone
+    | is set to "UTC" by default as it is suitable for most use cases.
+    |
+    */
+
+    'timezone' => 'UTC',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Application Locale Configuration
+    |--------------------------------------------------------------------------
+    |
+    | The application locale determines the default locale that will be used
+    | by Laravel's translation / localization methods. This option can be
+    | set to any locale for which you plan to have translation strings.
+    |
+    */
+
+    'locale' => env('APP_LOCALE', 'en'),
+
+    'fallback_locale' => env('APP_FALLBACK_LOCALE', 'en'),
+
+    'faker_locale' => env('APP_FAKER_LOCALE', 'en_US'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Encryption Key
+    |--------------------------------------------------------------------------
+    |
+    | This key is utilized by Laravel's encryption services and should be set
+    | to a random, 32 character string to ensure that all encrypted values
+    | are secure. You should do this prior to deploying the application.
+    |
+    */
+
+    'cipher' => 'AES-256-CBC',
+
+    'key' => env('APP_KEY'),
+
+    'previous_keys' => [
+        ...array_filter(
+            explode(',', (string) env('APP_PREVIOUS_KEYS', ''))
+        ),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Maintenance Mode Driver
+    |--------------------------------------------------------------------------
+    |
+    | These configuration options determine the driver used to determine and
+    | manage Laravel's "maintenance mode" status. The "cache" driver will
+    | allow maintenance mode to be controlled across multiple machines.
+    |
+    | Supported drivers: "file", "cache"
+    |
+    */
+
+    'maintenance' => [
+        'driver' => env('APP_MAINTENANCE_DRIVER', 'file'),
+        'store' => env('APP_MAINTENANCE_STORE', 'database'),
+    ],
+
+];

config/auth.php

@@ -0,0 +1,117 @@
+<?php
+
+use App\Models\User;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Defaults
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default authentication "guard" and password
+    | reset "broker" for your application. You may change these values
+    | as required, but they're a perfect start for most applications.
+    |
+    */
+
+    'defaults' => [
+        'guard' => env('AUTH_GUARD', 'web'),
+        'passwords' => env('AUTH_PASSWORD_BROKER', 'users'),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Guards
+    |--------------------------------------------------------------------------
+    |
+    | Next, you may define every authentication guard for your application.
+    | Of course, a great default configuration has been defined for you
+    | which utilizes session storage plus the Eloquent user provider.
+    |
+    | All authentication guards have a user provider, which defines how the
+    | users are actually retrieved out of your database or other storage
+    | system used by the application. Typically, Eloquent is utilized.
+    |
+    | Supported: "session"
+    |
+    */
+
+    'guards' => [
+        'web' => [
+            'driver' => 'session',
+            'provider' => 'users',
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | User Providers
+    |--------------------------------------------------------------------------
+    |
+    | All authentication guards have a user provider, which defines how the
+    | users are actually retrieved out of your database or other storage
+    | system used by the application. Typically, Eloquent is utilized.
+    |
+    | If you have multiple user tables or models you may configure multiple
+    | providers to represent the model / table. These providers may then
+    | be assigned to any extra authentication guards you have defined.
+    |
+    | Supported: "database", "eloquent"
+    |
+    */
+
+    'providers' => [
+        'users' => [
+            'driver' => 'eloquent',
+            'model' => env('AUTH_MODEL', User::class),
+        ],
+
+        // 'users' => [
+        //     'driver' => 'database',
+        //     'table' => 'users',
+        // ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Resetting Passwords
+    |--------------------------------------------------------------------------
+    |
+    | These configuration options specify the behavior of Laravel's password
+    | reset functionality, including the table utilized for token storage
+    | and the user provider that is invoked to actually retrieve users.
+    |
+    | The expiry time is the number of minutes that each reset token will be
+    | considered valid. This security feature keeps tokens short-lived so
+    | they have less time to be guessed. You may change this as needed.
+    |
+    | The throttle setting is the number of seconds a user must wait before
+    | generating more password reset tokens. This prevents the user from
+    | quickly generating a very large amount of password reset tokens.
+    |
+    */
+
+    'passwords' => [
+        'users' => [
+            'provider' => 'users',
+            'table' => env('AUTH_PASSWORD_RESET_TOKEN_TABLE', 'password_reset_tokens'),
+            'expire' => 60,
+            'throttle' => 60,
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Password Confirmation Timeout
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define the number of seconds before a password confirmation
+    | window expires and users are asked to re-enter their password via the
+    | confirmation screen. By default, the timeout lasts for three hours.
+    |
+    */
+
+    'password_timeout' => env('AUTH_PASSWORD_TIMEOUT', 10800),
+
+];

config/cache.php

@@ -0,0 +1,130 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default cache store that will be used by the
+    | framework. This connection is utilized if another isn't explicitly
+    | specified when running a cache operation inside the application.
+    |
+    */
+
+    'default' => env('CACHE_STORE', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Stores
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define all of the cache "stores" for your application as
+    | well as their drivers. You may even define multiple stores for the
+    | same cache driver to group types of items stored in your caches.
+    |
+    | Supported drivers: "array", "database", "file", "memcached",
+    |                    "redis", "dynamodb", "octane",
+    |                    "failover", "null"
+    |
+    */
+
+    'stores' => [
+
+        'array' => [
+            'driver' => 'array',
+            'serialize' => false,
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'connection' => env('DB_CACHE_CONNECTION'),
+            'table' => env('DB_CACHE_TABLE', 'cache'),
+            'lock_connection' => env('DB_CACHE_LOCK_CONNECTION'),
+            'lock_table' => env('DB_CACHE_LOCK_TABLE'),
+        ],
+
+        'file' => [
+            'driver' => 'file',
+            'path' => storage_path('framework/cache/data'),
+            'lock_path' => storage_path('framework/cache/data'),
+        ],
+
+        'memcached' => [
+            'driver' => 'memcached',
+            'persistent_id' => env('MEMCACHED_PERSISTENT_ID'),
+            'sasl' => [
+                env('MEMCACHED_USERNAME'),
+                env('MEMCACHED_PASSWORD'),
+            ],
+            'options' => [
+                // Memcached::OPT_CONNECT_TIMEOUT => 2000,
+            ],
+            'servers' => [
+                [
+                    'host' => env('MEMCACHED_HOST', '127.0.0.1'),
+                    'port' => env('MEMCACHED_PORT', 11211),
+                    'weight' => 100,
+                ],
+            ],
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => env('REDIS_CACHE_CONNECTION', 'cache'),
+            'lock_connection' => env('REDIS_CACHE_LOCK_CONNECTION', 'default'),
+        ],
+
+        'dynamodb' => [
+            'driver' => 'dynamodb',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'table' => env('DYNAMODB_CACHE_TABLE', 'cache'),
+            'endpoint' => env('DYNAMODB_ENDPOINT'),
+        ],
+
+        'octane' => [
+            'driver' => 'octane',
+        ],
+
+        'failover' => [
+            'driver' => 'failover',
+            'stores' => [
+                'database',
+                'array',
+            ],
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Key Prefix
+    |--------------------------------------------------------------------------
+    |
+    | When utilizing the APC, database, memcached, Redis, and DynamoDB cache
+    | stores, there might be other applications using the same cache. For
+    | that reason, you may prefix every cache key to avoid collisions.
+    |
+    */
+
+    'prefix' => env('CACHE_PREFIX', Str::slug((string) env('APP_NAME', 'laravel')).'-cache-'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Serializable Classes
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the classes that can be unserialized from cache
+    | storage. By default, no PHP classes will be unserialized from your
+    | cache to prevent gadget chain attacks if your APP_KEY is leaked.
+    |
+    */
+
+    'serializable_classes' => false,
+
+];

config/database.php

@@ -0,0 +1,184 @@
+<?php
+
+use Illuminate\Support\Str;
+use Pdo\Mysql;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Database Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which of the database connections below you wish
+    | to use as your default connection for database operations. This is
+    | the connection which will be utilized unless another connection
+    | is explicitly specified when you execute a query / statement.
+    |
+    */
+
+    'default' => env('DB_CONNECTION', 'sqlite'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Database Connections
+    |--------------------------------------------------------------------------
+    |
+    | Below are all of the database connections defined for your application.
+    | An example configuration is provided for each database system which
+    | is supported by Laravel. You're free to add / remove connections.
+    |
+    */
+
+    'connections' => [
+
+        'sqlite' => [
+            'driver' => 'sqlite',
+            'url' => env('DB_URL'),
+            'database' => env('DB_DATABASE', database_path('database.sqlite')),
+            'prefix' => '',
+            'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true),
+            'busy_timeout' => null,
+            'journal_mode' => null,
+            'synchronous' => null,
+            'transaction_mode' => 'DEFERRED',
+        ],
+
+        'mysql' => [
+            'driver' => 'mysql',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '3306'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'unix_socket' => env('DB_SOCKET', ''),
+            'charset' => env('DB_CHARSET', 'utf8mb4'),
+            'collation' => env('DB_COLLATION', 'utf8mb4_unicode_ci'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'strict' => true,
+            'engine' => null,
+            'options' => extension_loaded('pdo_mysql') ? array_filter([
+                Mysql::ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+            ]) : [],
+        ],
+
+        'mariadb' => [
+            'driver' => 'mariadb',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '3306'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'unix_socket' => env('DB_SOCKET', ''),
+            'charset' => env('DB_CHARSET', 'utf8mb4'),
+            'collation' => env('DB_COLLATION', 'utf8mb4_unicode_ci'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'strict' => true,
+            'engine' => null,
+            'options' => extension_loaded('pdo_mysql') ? array_filter([
+                Mysql::ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+            ]) : [],
+        ],
+
+        'pgsql' => [
+            'driver' => 'pgsql',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '5432'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => env('DB_CHARSET', 'utf8'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'search_path' => 'public',
+            'sslmode' => env('DB_SSLMODE', 'prefer'),
+        ],
+
+        'sqlsrv' => [
+            'driver' => 'sqlsrv',
+            'url' => env('DB_URL'),
+            'host' => env('DB_HOST', 'localhost'),
+            'port' => env('DB_PORT', '1433'),
+            'database' => env('DB_DATABASE', 'laravel'),
+            'username' => env('DB_USERNAME', 'root'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => env('DB_CHARSET', 'utf8'),
+            'prefix' => '',
+            'prefix_indexes' => true,
+            // 'encrypt' => env('DB_ENCRYPT', 'yes'),
+            // 'trust_server_certificate' => env('DB_TRUST_SERVER_CERTIFICATE', 'false'),
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Migration Repository Table
+    |--------------------------------------------------------------------------
+    |
+    | This table keeps track of all the migrations that have already run for
+    | your application. Using this information, we can determine which of
+    | the migrations on disk haven't actually been run on the database.
+    |
+    */
+
+    'migrations' => [
+        'table' => 'migrations',
+        'update_date_on_publish' => true,
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Redis Databases
+    |--------------------------------------------------------------------------
+    |
+    | Redis is an open source, fast, and advanced key-value store that also
+    | provides a richer body of commands than a typical key-value system
+    | such as Memcached. You may define your connection settings here.
+    |
+    */
+
+    'redis' => [
+
+        'client' => env('REDIS_CLIENT', 'phpredis'),
+
+        'options' => [
+            'cluster' => env('REDIS_CLUSTER', 'redis'),
+            'prefix' => env('REDIS_PREFIX', Str::slug((string) env('APP_NAME', 'laravel')).'-database-'),
+            'persistent' => env('REDIS_PERSISTENT', false),
+        ],
+
+        'default' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_DB', '0'),
+            'max_retries' => env('REDIS_MAX_RETRIES', 3),
+            'backoff_algorithm' => env('REDIS_BACKOFF_ALGORITHM', 'decorrelated_jitter'),
+            'backoff_base' => env('REDIS_BACKOFF_BASE', 100),
+            'backoff_cap' => env('REDIS_BACKOFF_CAP', 1000),
+        ],
+
+        'cache' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_CACHE_DB', '1'),
+            'max_retries' => env('REDIS_MAX_RETRIES', 3),
+            'backoff_algorithm' => env('REDIS_BACKOFF_ALGORITHM', 'decorrelated_jitter'),
+            'backoff_base' => env('REDIS_BACKOFF_BASE', 100),
+            'backoff_cap' => env('REDIS_BACKOFF_CAP', 1000),
+        ],
+
+    ],
+
+];

config/filesystems.php

@@ -0,0 +1,80 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Filesystem Disk
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the default filesystem disk that should be used
+    | by the framework. The "local" disk, as well as a variety of cloud
+    | based disks are available to your application for file storage.
+    |
+    */
+
+    'default' => env('FILESYSTEM_DISK', 'local'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Filesystem Disks
+    |--------------------------------------------------------------------------
+    |
+    | Below you may configure as many filesystem disks as necessary, and you
+    | may even configure multiple disks for the same driver. Examples for
+    | most supported storage drivers are configured here for reference.
+    |
+    | Supported drivers: "local", "ftp", "sftp", "s3"
+    |
+    */
+
+    'disks' => [
+
+        'local' => [
+            'driver' => 'local',
+            'root' => storage_path('app/private'),
+            'serve' => true,
+            'throw' => false,
+            'report' => false,
+        ],
+
+        'public' => [
+            'driver' => 'local',
+            'root' => storage_path('app/public'),
+            'url' => rtrim(env('APP_URL', 'http://localhost'), '/').'/storage',
+            'visibility' => 'public',
+            'throw' => false,
+            'report' => false,
+        ],
+
+        's3' => [
+            'driver' => 's3',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION'),
+            'bucket' => env('AWS_BUCKET'),
+            'url' => env('AWS_URL'),
+            'endpoint' => env('AWS_ENDPOINT'),
+            'use_path_style_endpoint' => env('AWS_USE_PATH_STYLE_ENDPOINT', false),
+            'throw' => false,
+            'report' => false,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Symbolic Links
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the symbolic links that will be created when the
+    | `storage:link` Artisan command is executed. The array keys should be
+    | the locations of the links and the values should be their targets.
+    |
+    */
+
+    'links' => [
+        public_path('storage') => storage_path('app/public'),
+    ],
+
+];

config/logging.php

@@ -0,0 +1,132 @@
+<?php
+
+use Monolog\Handler\NullHandler;
+use Monolog\Handler\StreamHandler;
+use Monolog\Handler\SyslogUdpHandler;
+use Monolog\Processor\PsrLogMessageProcessor;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default log channel that is utilized to write
+    | messages to your logs. The value provided here should match one of
+    | the channels present in the list of "channels" configured below.
+    |
+    */
+
+    'default' => env('LOG_CHANNEL', 'stack'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Deprecations Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the log channel that should be used to log warnings
+    | regarding deprecated PHP and library features. This allows you to get
+    | your application ready for upcoming major versions of dependencies.
+    |
+    */
+
+    'deprecations' => [
+        'channel' => env('LOG_DEPRECATIONS_CHANNEL', 'null'),
+        'trace' => env('LOG_DEPRECATIONS_TRACE', false),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Log Channels
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the log channels for your application. Laravel
+    | utilizes the Monolog PHP logging library, which includes a variety
+    | of powerful log handlers and formatters that you're free to use.
+    |
+    | Available drivers: "single", "daily", "slack", "syslog",
+    |                    "errorlog", "monolog", "custom", "stack"
+    |
+    */
+
+    'channels' => [
+
+        'stack' => [
+            'driver' => 'stack',
+            'channels' => explode(',', (string) env('LOG_STACK', 'single')),
+            'ignore_exceptions' => false,
+        ],
+
+        'single' => [
+            'driver' => 'single',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'daily' => [
+            'driver' => 'daily',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'days' => env('LOG_DAILY_DAYS', 14),
+            'replace_placeholders' => true,
+        ],
+
+        'slack' => [
+            'driver' => 'slack',
+            'url' => env('LOG_SLACK_WEBHOOK_URL'),
+            'username' => env('LOG_SLACK_USERNAME', env('APP_NAME', 'Laravel')),
+            'emoji' => env('LOG_SLACK_EMOJI', ':boom:'),
+            'level' => env('LOG_LEVEL', 'critical'),
+            'replace_placeholders' => true,
+        ],
+
+        'papertrail' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => env('LOG_PAPERTRAIL_HANDLER', SyslogUdpHandler::class),
+            'handler_with' => [
+                'host' => env('PAPERTRAIL_URL'),
+                'port' => env('PAPERTRAIL_PORT'),
+                'connectionString' => 'tls://'.env('PAPERTRAIL_URL').':'.env('PAPERTRAIL_PORT'),
+            ],
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'stderr' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => StreamHandler::class,
+            'handler_with' => [
+                'stream' => 'php://stderr',
+            ],
+            'formatter' => env('LOG_STDERR_FORMATTER'),
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'syslog' => [
+            'driver' => 'syslog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'facility' => env('LOG_SYSLOG_FACILITY', LOG_USER),
+            'replace_placeholders' => true,
+        ],
+
+        'errorlog' => [
+            'driver' => 'errorlog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'null' => [
+            'driver' => 'monolog',
+            'handler' => NullHandler::class,
+        ],
+
+        'emergency' => [
+            'path' => storage_path('logs/laravel.log'),
+        ],
+
+    ],
+
+];

config/mail.php

@@ -0,0 +1,118 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Mailer
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default mailer that is used to send all email
+    | messages unless another mailer is explicitly specified when sending
+    | the message. All additional mailers can be configured within the
+    | "mailers" array. Examples of each type of mailer are provided.
+    |
+    */
+
+    'default' => env('MAIL_MAILER', 'log'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Mailer Configurations
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure all of the mailers used by your application plus
+    | their respective settings. Several examples have been configured for
+    | you and you are free to add your own as your application requires.
+    |
+    | Laravel supports a variety of mail "transport" drivers that can be used
+    | when delivering an email. You may specify which one you're using for
+    | your mailers below. You may also add additional mailers if needed.
+    |
+    | Supported: "smtp", "sendmail", "mailgun", "ses", "ses-v2",
+    |            "postmark", "resend", "log", "array",
+    |            "failover", "roundrobin"
+    |
+    */
+
+    'mailers' => [
+
+        'smtp' => [
+            'transport' => 'smtp',
+            'scheme' => env('MAIL_SCHEME'),
+            'url' => env('MAIL_URL'),
+            'host' => env('MAIL_HOST', '127.0.0.1'),
+            'port' => env('MAIL_PORT', 2525),
+            'username' => env('MAIL_USERNAME'),
+            'password' => env('MAIL_PASSWORD'),
+            'timeout' => null,
+            'local_domain' => env('MAIL_EHLO_DOMAIN', parse_url((string) env('APP_URL', 'http://localhost'), PHP_URL_HOST)),
+        ],
+
+        'ses' => [
+            'transport' => 'ses',
+        ],
+
+        'postmark' => [
+            'transport' => 'postmark',
+            // 'message_stream_id' => env('POSTMARK_MESSAGE_STREAM_ID'),
+            // 'client' => [
+            //     'timeout' => 5,
+            // ],
+        ],
+
+        'resend' => [
+            'transport' => 'resend',
+        ],
+
+        'sendmail' => [
+            'transport' => 'sendmail',
+            'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -bs -i'),
+        ],
+
+        'log' => [
+            'transport' => 'log',
+            'channel' => env('MAIL_LOG_CHANNEL'),
+        ],
+
+        'array' => [
+            'transport' => 'array',
+        ],
+
+        'failover' => [
+            'transport' => 'failover',
+            'mailers' => [
+                'smtp',
+                'log',
+            ],
+            'retry_after' => 60,
+        ],
+
+        'roundrobin' => [
+            'transport' => 'roundrobin',
+            'mailers' => [
+                'ses',
+                'postmark',
+            ],
+            'retry_after' => 60,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Global "From" Address
+    |--------------------------------------------------------------------------
+    |
+    | You may wish for all emails sent by your application to be sent from
+    | the same address. Here you may specify a name and address that is
+    | used globally for all emails that are sent by your application.
+    |
+    */
+
+    'from' => [
+        'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'),
+        'name' => env('MAIL_FROM_NAME', env('APP_NAME', 'Laravel')),
+    ],
+
+];

config/queue.php

@@ -0,0 +1,129 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Queue Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Laravel's queue supports a variety of backends via a single, unified
+    | API, giving you convenient access to each backend using identical
+    | syntax for each. The default queue connection is defined below.
+    |
+    */
+
+    'default' => env('QUEUE_CONNECTION', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Queue Connections
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the connection options for every queue backend
+    | used by your application. An example configuration is provided for
+    | each backend supported by Laravel. You're also free to add more.
+    |
+    | Drivers: "sync", "database", "beanstalkd", "sqs", "redis",
+    |          "deferred", "background", "failover", "null"
+    |
+    */
+
+    'connections' => [
+
+        'sync' => [
+            'driver' => 'sync',
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'connection' => env('DB_QUEUE_CONNECTION'),
+            'table' => env('DB_QUEUE_TABLE', 'jobs'),
+            'queue' => env('DB_QUEUE', 'default'),
+            'retry_after' => (int) env('DB_QUEUE_RETRY_AFTER', 90),
+            'after_commit' => false,
+        ],
+
+        'beanstalkd' => [
+            'driver' => 'beanstalkd',
+            'host' => env('BEANSTALKD_QUEUE_HOST', 'localhost'),
+            'queue' => env('BEANSTALKD_QUEUE', 'default'),
+            'retry_after' => (int) env('BEANSTALKD_QUEUE_RETRY_AFTER', 90),
+            'block_for' => 0,
+            'after_commit' => false,
+        ],
+
+        'sqs' => [
+            'driver' => 'sqs',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'prefix' => env('SQS_PREFIX', 'https://sqs.us-east-1.amazonaws.com/your-account-id'),
+            'queue' => env('SQS_QUEUE', 'default'),
+            'suffix' => env('SQS_SUFFIX'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'after_commit' => false,
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => env('REDIS_QUEUE_CONNECTION', 'default'),
+            'queue' => env('REDIS_QUEUE', 'default'),
+            'retry_after' => (int) env('REDIS_QUEUE_RETRY_AFTER', 90),
+            'block_for' => null,
+            'after_commit' => false,
+        ],
+
+        'deferred' => [
+            'driver' => 'deferred',
+        ],
+
+        'background' => [
+            'driver' => 'background',
+        ],
+
+        'failover' => [
+            'driver' => 'failover',
+            'connections' => [
+                'database',
+                'deferred',
+            ],
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Job Batching
+    |--------------------------------------------------------------------------
+    |
+    | The following options configure the database and table that store job
+    | batching information. These options can be updated to any database
+    | connection and table which has been defined by your application.
+    |
+    */
+
+    'batching' => [
+        'database' => env('DB_CONNECTION', 'sqlite'),
+        'table' => 'job_batches',
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Failed Queue Jobs
+    |--------------------------------------------------------------------------
+    |
+    | These options configure the behavior of failed queue job logging so you
+    | can control how and where failed jobs are stored. Laravel ships with
+    | support for storing failed jobs in a simple file or in a database.
+    |
+    | Supported drivers: "database-uuids", "dynamodb", "file", "null"
+    |
+    */
+
+    'failed' => [
+        'driver' => env('QUEUE_FAILED_DRIVER', 'database-uuids'),
+        'database' => env('DB_CONNECTION', 'sqlite'),
+        'table' => 'failed_jobs',
+    ],
+
+];

config/services.php

@@ -0,0 +1,38 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Third Party Services
+    |--------------------------------------------------------------------------
+    |
+    | This file is for storing the credentials for third party services such
+    | as Mailgun, Postmark, AWS and more. This file provides the de facto
+    | location for this type of information, allowing packages to have
+    | a conventional file to locate the various service credentials.
+    |
+    */
+
+    'postmark' => [
+        'key' => env('POSTMARK_API_KEY'),
+    ],
+
+    'resend' => [
+        'key' => env('RESEND_API_KEY'),
+    ],
+
+    'ses' => [
+        'key' => env('AWS_ACCESS_KEY_ID'),
+        'secret' => env('AWS_SECRET_ACCESS_KEY'),
+        'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+    ],
+
+    'slack' => [
+        'notifications' => [
+            'bot_user_oauth_token' => env('SLACK_BOT_USER_OAUTH_TOKEN'),
+            'channel' => env('SLACK_BOT_USER_DEFAULT_CHANNEL'),
+        ],
+    ],
+
+];

config/session.php

@@ -0,0 +1,233 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Session Driver
+    |--------------------------------------------------------------------------
+    |
+    | This option determines the default session driver that is utilized for
+    | incoming requests. Laravel supports a variety of storage options to
+    | persist session data. Database storage is a great default choice.
+    |
+    | Supported: "file", "cookie", "database", "memcached",
+    |            "redis", "dynamodb", "array"
+    |
+    */
+
+    'driver' => env('SESSION_DRIVER', 'database'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Lifetime
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the number of minutes that you wish the session
+    | to be allowed to remain idle before it expires. If you want them
+    | to expire immediately when the browser is closed then you may
+    | indicate that via the expire_on_close configuration option.
+    |
+    */
+
+    'lifetime' => (int) env('SESSION_LIFETIME', 120),
+
+    'expire_on_close' => env('SESSION_EXPIRE_ON_CLOSE', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Encryption
+    |--------------------------------------------------------------------------
+    |
+    | This option allows you to easily specify that all of your session data
+    | should be encrypted before it's stored. All encryption is performed
+    | automatically by Laravel and you may use the session like normal.
+    |
+    */
+
+    'encrypt' => env('SESSION_ENCRYPT', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session File Location
+    |--------------------------------------------------------------------------
+    |
+    | When utilizing the "file" session driver, the session files are placed
+    | on disk. The default storage location is defined here; however, you
+    | are free to provide another location where they should be stored.
+    |
+    */
+
+    'files' => storage_path('framework/sessions'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Connection
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" or "redis" session drivers, you may specify a
+    | connection that should be used to manage these sessions. This should
+    | correspond to a connection in your database configuration options.
+    |
+    */
+
+    'connection' => env('SESSION_CONNECTION'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Table
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" session driver, you may specify the table to
+    | be used to store sessions. Of course, a sensible default is defined
+    | for you; however, you're welcome to change this to another table.
+    |
+    */
+
+    'table' => env('SESSION_TABLE', 'sessions'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | When using one of the framework's cache driven session backends, you may
+    | define the cache store which should be used to store the session data
+    | between requests. This must match one of your defined cache stores.
+    |
+    | Affects: "dynamodb", "memcached", "redis"
+    |
+    */
+
+    'store' => env('SESSION_STORE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Sweeping Lottery
+    |--------------------------------------------------------------------------
+    |
+    | Some session drivers must manually sweep their storage location to get
+    | rid of old sessions from storage. Here are the chances that it will
+    | happen on a given request. By default, the odds are 2 out of 100.
+    |
+    */
+
+    'lottery' => [2, 100],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may change the name of the session cookie that is created by
+    | the framework. Typically, you should not need to change this value
+    | since doing so does not grant a meaningful security improvement.
+    |
+    */
+
+    'cookie' => env(
+        'SESSION_COOKIE',
+        Str::slug((string) env('APP_NAME', 'laravel')).'-session'
+    ),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Path
+    |--------------------------------------------------------------------------
+    |
+    | The session cookie path determines the path for which the cookie will
+    | be regarded as available. Typically, this will be the root path of
+    | your application, but you're free to change this when necessary.
+    |
+    */
+
+    'path' => env('SESSION_PATH', '/'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Domain
+    |--------------------------------------------------------------------------
+    |
+    | This value determines the domain and subdomains the session cookie is
+    | available to. By default, the cookie will be available to the root
+    | domain without subdomains. Typically, this shouldn't be changed.
+    |
+    */
+
+    'domain' => env('SESSION_DOMAIN'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTPS Only Cookies
+    |--------------------------------------------------------------------------
+    |
+    | By setting this option to true, session cookies will only be sent back
+    | to the server if the browser has a HTTPS connection. This will keep
+    | the cookie from being sent to you when it can't be done securely.
+    |
+    */
+
+    'secure' => env('SESSION_SECURE_COOKIE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTP Access Only
+    |--------------------------------------------------------------------------
+    |
+    | Setting this value to true will prevent JavaScript from accessing the
+    | value of the cookie and the cookie will only be accessible through
+    | the HTTP protocol. It's unlikely you should disable this option.
+    |
+    */
+
+    'http_only' => env('SESSION_HTTP_ONLY', true),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Same-Site Cookies
+    |--------------------------------------------------------------------------
+    |
+    | This option determines how your cookies behave when cross-site requests
+    | take place, and can be used to mitigate CSRF attacks. By default, we
+    | will set this value to "lax" to permit secure cross-site requests.
+    |
+    | See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value
+    |
+    | Supported: "lax", "strict", "none", null
+    |
+    */
+
+    'same_site' => env('SESSION_SAME_SITE', 'lax'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Partitioned Cookies
+    |--------------------------------------------------------------------------
+    |
+    | Setting this value to true will tie the cookie to the top-level site for
+    | a cross-site context. Partitioned cookies are accepted by the browser
+    | when flagged "secure" and the Same-Site attribute is set to "none".
+    |
+    */
+
+    'partitioned' => env('SESSION_PARTITIONED_COOKIE', false),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Serialization
+    |--------------------------------------------------------------------------
+    |
+    | This value controls the serialization strategy for session data, which
+    | is JSON by default. Setting this to "php" allows the storage of PHP
+    | objects in the session but can make an application vulnerable to
+    | "gadget chain" serialization attacks if the APP_KEY is leaked.
+    |
+    | Supported: "json", "php"
+    |
+    */
+
+    'serialization' => 'json',
+
+];

database/.gitignore

@@ -0,0 +1 @@
+*.sqlite*

database/factories/UserFactory.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace Database\Factories;
+
+use App\Models\User;
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+
+/**
+ * @extends Factory<User>
+ */
+class UserFactory extends Factory
+{
+    /**
+     * The current password being used by the factory.
+     */
+    protected static ?string $password;
+
+    /**
+     * Define the model's default state.
+     *
+     * @return array<string, mixed>
+     */
+    public function definition(): array
+    {
+        return [
+            'name' => fake()->name(),
+            'email' => fake()->unique()->safeEmail(),
+            'email_verified_at' => now(),
+            'password' => static::$password ??= Hash::make('password'),
+            'remember_token' => Str::random(10),
+        ];
+    }
+
+    /**
+     * Indicate that the model's email address should be unverified.
+     */
+    public function unverified(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'email_verified_at' => null,
+        ]);
+    }
+}

database/migrations/0001_01_01_000000_create_users_table.php

@@ -0,0 +1,50 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('users', function (Blueprint $table) {
+            $table->id();
+            $table->string('name');
+            $table->string('email')->unique();
+            $table->timestamp('email_verified_at')->nullable();
+            $table->string('password');
+            $table->boolean('is_admin')->default(true);
+            $table->rememberToken();
+            $table->timestamps();
+        });
+
+        Schema::create('password_reset_tokens', function (Blueprint $table) {
+            $table->string('email')->primary();
+            $table->string('token');
+            $table->timestamp('created_at')->nullable();
+        });
+
+        Schema::create('sessions', function (Blueprint $table) {
+            $table->string('id')->primary();
+            $table->foreignId('user_id')->nullable()->index();
+            $table->string('ip_address', 45)->nullable();
+            $table->text('user_agent')->nullable();
+            $table->longText('payload');
+            $table->integer('last_activity')->index();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('users');
+        Schema::dropIfExists('password_reset_tokens');
+        Schema::dropIfExists('sessions');
+    }
+};

database/migrations/0001_01_01_000001_create_cache_table.php

@@ -0,0 +1,35 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('cache', function (Blueprint $table) {
+            $table->string('key')->primary();
+            $table->mediumText('value');
+            $table->bigInteger('expiration')->index();
+        });
+
+        Schema::create('cache_locks', function (Blueprint $table) {
+            $table->string('key')->primary();
+            $table->string('owner');
+            $table->bigInteger('expiration')->index();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('cache');
+        Schema::dropIfExists('cache_locks');
+    }
+};

database/migrations/0001_01_01_000002_create_jobs_table.php

@@ -0,0 +1,59 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('jobs', function (Blueprint $table) {
+            $table->id();
+            $table->string('queue')->index();
+            $table->longText('payload');
+            $table->unsignedSmallInteger('attempts');
+            $table->unsignedInteger('reserved_at')->nullable();
+            $table->unsignedInteger('available_at');
+            $table->unsignedInteger('created_at');
+        });
+
+        Schema::create('job_batches', function (Blueprint $table) {
+            $table->string('id')->primary();
+            $table->string('name');
+            $table->integer('total_jobs');
+            $table->integer('pending_jobs');
+            $table->integer('failed_jobs');
+            $table->longText('failed_job_ids');
+            $table->mediumText('options')->nullable();
+            $table->integer('cancelled_at')->nullable();
+            $table->integer('created_at');
+            $table->integer('finished_at')->nullable();
+        });
+
+        Schema::create('failed_jobs', function (Blueprint $table) {
+            $table->id();
+            $table->string('uuid')->unique();
+            $table->string('connection');
+            $table->string('queue');
+            $table->longText('payload');
+            $table->longText('exception');
+            $table->timestamp('failed_at')->useCurrent();
+
+            $table->index(['connection', 'queue', 'failed_at']);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('jobs');
+        Schema::dropIfExists('job_batches');
+        Schema::dropIfExists('failed_jobs');
+    }
+};

database/migrations/2026_05_16_000001_create_programs_table.php

@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('programs', function (Blueprint $table) {
+            $table->id();
+            $table->uuid('uuid')->unique();
+            $table->string('title');
+            $table->text('description')->nullable();
+            $table->string('organizer');
+            $table->string('location', 500);
+            $table->date('start_date');
+            $table->date('end_date');
+            $table->dateTime('checkin_start_at')->nullable();
+            $table->dateTime('checkin_end_at')->nullable();
+            $table->dateTime('ecert_download_start_at')->nullable();
+            $table->dateTime('ecert_download_end_at')->nullable();
+            $table->enum('status', ['draft', 'published', 'closed'])->default('draft');
+            $table->boolean('allow_walk_in')->default(true);
+            $table->enum('default_staff_session', ['pagi', 'petang', 'full_day'])->nullable();
+            $table->enum('default_external_session', ['pagi', 'petang', 'full_day'])->nullable();
+            $table->foreignId('created_by')->constrained('users')->cascadeOnDelete();
+            $table->timestamps();
+
+            $table->index('status');
+            $table->index('uuid');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('programs');
+    }
+};

database/migrations/2026_05_16_000002_create_program_qr_codes_table.php

@@ -0,0 +1,28 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('program_qr_codes', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->string('token', 64)->unique();
+            $table->string('qr_image_path', 500)->nullable();
+            $table->boolean('is_active')->default(true);
+            $table->timestamps();
+
+            $table->index('token');
+            $table->index('program_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('program_qr_codes');
+    }
+};

database/migrations/2026_05_16_000003_create_participants_table.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('participants', function (Blueprint $table) {
+            $table->id();
+            $table->uuid('uuid')->unique();
+            $table->string('name');
+            $table->string('no_kp', 20)->unique();
+            $table->string('email', 255)->nullable();
+            $table->string('phone', 20)->nullable();
+            $table->string('agency', 255)->nullable();
+            $table->enum('participant_type', ['staff', 'external'])->default('external');
+            $table->timestamps();
+
+            $table->index('no_kp');
+            $table->index('email');
+            $table->index('uuid');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('participants');
+    }
+};

database/migrations/2026_05_16_000004_create_program_participants_table.php

@@ -0,0 +1,33 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('program_participants', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->foreignId('participant_id')->constrained('participants')->cascadeOnDelete();
+            $table->enum('registration_source', ['pre_registered', 'walk_in', 'admin_manual', 'import'])->default('admin_manual');
+            $table->boolean('is_pre_registered')->default(false);
+            $table->enum('pre_registered_session', ['pagi', 'petang', 'full_day'])->nullable();
+            $table->enum('status', ['registered', 'checked_in', 'cancelled'])->default('registered');
+            $table->timestamp('registered_at')->nullable();
+            $table->timestamps();
+
+            $table->unique(['program_id', 'participant_id']);
+            $table->index('program_id');
+            $table->index('participant_id');
+            $table->index('status');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('program_participants');
+    }
+};

database/migrations/2026_05_16_000005_create_attendances_table.php

@@ -0,0 +1,36 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('attendances', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->foreignId('participant_id')->constrained('participants')->cascadeOnDelete();
+            $table->foreignId('program_participant_id')->nullable()->constrained('program_participants')->nullOnDelete();
+            $table->enum('attendance_source', ['pre_registered_staff', 'walk_in_external', 'admin_manual']);
+            $table->enum('attendance_session', ['pagi', 'petang', 'full_day']);
+            $table->timestamp('checked_in_at');
+            $table->string('checked_in_ip', 45)->nullable();
+            $table->string('user_agent', 500)->nullable();
+            $table->string('notes', 500)->nullable();
+            $table->timestamps();
+
+            $table->unique(['program_id', 'participant_id']);
+            $table->index('program_id');
+            $table->index('participant_id');
+            $table->index('attendance_source');
+            $table->index('attendance_session');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('attendances');
+    }
+};

database/migrations/2026_05_16_000006_create_certificate_templates_table.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('certificate_templates', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->string('original_filename', 255);
+            $table->string('image_path', 500);
+            $table->json('config_json')->nullable();
+            $table->boolean('is_active')->default(true);
+            $table->foreignId('uploaded_by')->constrained('users');
+            $table->timestamps();
+
+            $table->index('program_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('certificate_templates');
+    }
+};

database/migrations/2026_05_16_000007_create_questionnaire_sets_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('questionnaire_sets', function (Blueprint $table) {
+            $table->id();
+            $table->string('title', 255);
+            $table->text('description')->nullable();
+            $table->enum('status', ['draft', 'published', 'archived'])->default('draft');
+            $table->foreignId('created_by')->constrained('users');
+            $table->timestamps();
+
+            $table->index('status');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('questionnaire_sets');
+    }
+};

database/migrations/2026_05_16_000008_create_questionnaire_questions_table.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('questionnaire_questions', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('questionnaire_set_id')->constrained('questionnaire_sets')->cascadeOnDelete();
+            $table->text('question_text');
+            $table->enum('question_type', ['rating', 'single_choice', 'multiple_choice', 'short_text', 'long_text']);
+            $table->json('options_json')->nullable();
+            $table->boolean('is_required')->default(true);
+            $table->unsignedInteger('sort_order')->default(0);
+            $table->timestamps();
+
+            $table->index(['questionnaire_set_id', 'sort_order']);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('questionnaire_questions');
+    }
+};

database/migrations/2026_05_16_000009_create_program_questionnaires_table.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('program_questionnaires', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->foreignId('questionnaire_set_id')->constrained('questionnaire_sets');
+            $table->boolean('is_confirmed')->default(false);
+            $table->timestamp('confirmed_at')->nullable();
+            $table->foreignId('confirmed_by')->nullable()->constrained('users')->nullOnDelete();
+            $table->timestamps();
+
+            $table->unique(['program_id', 'questionnaire_set_id']);
+            $table->index('program_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('program_questionnaires');
+    }
+};

database/migrations/2026_05_16_000010_create_certificates_table.php

@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('certificates', function (Blueprint $table) {
+            $table->id();
+            $table->uuid('uuid')->unique();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->foreignId('participant_id')->constrained('participants')->cascadeOnDelete();
+            $table->foreignId('certificate_template_id')->nullable()->constrained('certificate_templates')->nullOnDelete();
+            $table->string('certificate_no', 100)->unique()->nullable();
+            $table->string('file_path', 500)->nullable();
+            $table->string('token', 64)->unique();
+            $table->enum('status', ['pending', 'generating', 'generated', 'emailed', 'failed'])->default('pending');
+            $table->text('error_message')->nullable();
+            $table->timestamp('generated_at')->nullable();
+            $table->timestamp('emailed_at')->nullable();
+            $table->timestamp('downloaded_at')->nullable();
+            $table->unsignedInteger('download_count')->default(0);
+            $table->timestamps();
+
+            $table->unique(['program_id', 'participant_id']);
+            $table->index('token');
+            $table->index('status');
+            $table->index('program_id');
+            $table->index('participant_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('certificates');
+    }
+};

database/migrations/2026_05_16_000011_create_questionnaire_responses_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('questionnaire_responses', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->constrained('programs')->cascadeOnDelete();
+            $table->foreignId('participant_id')->constrained('participants')->cascadeOnDelete();
+            $table->foreignId('questionnaire_set_id')->constrained('questionnaire_sets');
+            $table->timestamp('submitted_at');
+            $table->string('ip_address', 45)->nullable();
+            $table->string('user_agent', 500)->nullable();
+            $table->timestamps();
+
+            $table->unique(['program_id', 'participant_id', 'questionnaire_set_id'], 'unique_program_participant_questionnaire');
+            $table->index('program_id');
+            $table->index('participant_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('questionnaire_responses');
+    }
+};

database/migrations/2026_05_16_000012_create_questionnaire_answers_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('questionnaire_answers', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('questionnaire_response_id')->constrained('questionnaire_responses')->cascadeOnDelete();
+            $table->foreignId('questionnaire_question_id')->constrained('questionnaire_questions')->cascadeOnDelete();
+            $table->json('answer_value')->nullable();
+            $table->timestamps();
+
+            $table->index('questionnaire_response_id');
+            $table->index('questionnaire_question_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('questionnaire_answers');
+    }
+};

database/migrations/2026_05_16_000013_create_email_logs_table.php

@@ -0,0 +1,34 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('email_logs', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('program_id')->nullable()->constrained('programs')->nullOnDelete();
+            $table->foreignId('participant_id')->nullable()->constrained('participants')->nullOnDelete();
+            $table->foreignId('certificate_id')->nullable()->constrained('certificates')->nullOnDelete();
+            $table->string('recipient_email', 255);
+            $table->string('subject', 500);
+            $table->enum('email_type', ['certificate_ready', 'reminder', 'test'])->default('certificate_ready');
+            $table->enum('status', ['pending', 'sent', 'failed'])->default('pending');
+            $table->text('error_message')->nullable();
+            $table->timestamp('sent_at')->nullable();
+            $table->timestamps();
+
+            $table->index('status');
+            $table->index('program_id');
+            $table->index('participant_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('email_logs');
+    }
+};

database/migrations/2026_05_16_000014_create_audit_logs_table.php

@@ -0,0 +1,33 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('audit_logs', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('user_id')->nullable()->constrained('users')->nullOnDelete();
+            $table->string('action', 100);
+            $table->string('auditable_type', 255)->nullable();
+            $table->unsignedBigInteger('auditable_id')->nullable();
+            $table->json('old_values')->nullable();
+            $table->json('new_values')->nullable();
+            $table->string('ip_address', 45)->nullable();
+            $table->string('user_agent', 500)->nullable();
+            $table->timestamps();
+
+            $table->index('user_id');
+            $table->index('action');
+            $table->index(['auditable_type', 'auditable_id']);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('audit_logs');
+    }
+};

database/seeders/AdminSeeder.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace Database\Seeders;
+
+use App\Models\User;
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\Hash;
+
+class AdminSeeder extends Seeder
+{
+    public function run(): void
+    {
+        User::firstOrCreate(
+            ['email' => 'admin@mbip.gov.my'],
+            [
+                'name'     => 'Admin eCert MBIP',
+                'password' => Hash::make('Admin@MBIP2025!'),
+                'is_admin' => true,
+            ]
+        );
+
+        $this->command->info('Admin account created: admin@mbip.gov.my / Admin@MBIP2025!');
+    }
+}

database/seeders/DatabaseSeeder.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace Database\Seeders;
+
+use App\Models\User;
+use Illuminate\Database\Console\Seeds\WithoutModelEvents;
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\Hash;
+
+class DatabaseSeeder extends Seeder
+{
+    use WithoutModelEvents;
+
+    public function run(): void
+    {
+        $this->call(AdminSeeder::class);
+    }
+}

docs/architecture.md

@@ -0,0 +1,201 @@
+# eCert MBIP — System Architecture
+
+## Overview
+
+Sistem pengurusan sijil digital (eCert) untuk program-program yang dianjurkan oleh MBIP (Majlis Bandaraya Ipoh Perak). Sistem membolehkan admin urus program, kehadiran peserta, soalselidik, dan penjanaan sijil digital secara automatik.
+
+---
+
+## Technology Stack
+
+| Komponen | Pilihan | Versi |
+|----------|---------|-------|
+| Backend Framework | Laravel | 12.x (latest stable) |
+| PHP | PHP | 8.5.x |
+| Database | MySQL | 8.x |
+| Frontend CSS | Bootstrap | 5.3 |
+| Frontend JS | jQuery | 3.7 |
+| Template Engine | Blade | (built-in) |
+| Asset Pipeline | Vite | (built-in Laravel) |
+| Queue Driver | Database (→ Redis production) | — |
+| Storage | Laravel Storage (local disk) | — |
+
+---
+
+## Composer Packages (Cadangan)
+
+### Core / Wajib
+
+| Package | Tujuan | Sebab Pilih |
+|---------|--------|-------------|
+| `intervention/image:^3.0` | Image manipulation untuk generate sijil | GD sudah ada, sokongan penuh Malay font TTF |
+| `barryvdh/laravel-dompdf:^3.0` | Generate PDF sijil dari HTML | Standard Laravel, senang maintain |
+| `simplesoftwareio/simple-qrcode:^4.0` | Generate QR Code PNG | Wrapper BaconQRCode, Laravel-friendly |
+| `league/csv:^9.0` | Import CSV peserta | Ringan, tanpa dependency besar, handle UTF-8 BOM |
+| `laravel/breeze:^2.0` | Admin auth scaffolding | Minimal, Blade stack, senang customise |
+
+### Optional (Cadang Fasa Lanjut)
+
+| Package | Tujuan | Bila Perlukan |
+|---------|--------|---------------|
+| `maatwebsite/excel:^3.1` | Import Excel (.xlsx) | Jika perlu format Excel (bukan CSV) |
+| `spatie/laravel-activitylog:^4.0` | Audit log | Jika audit trail perlu lebih structured |
+
+### Kenapa Tidak Pakai
+
+- **Imagick**: Tidak ada sebagai PHP extension dalam environment ini — guna GD sahaja.
+- **Laravel Sanctum/Passport**: Tidak perlu — public peserta akses via token, bukan API JWT.
+- **Livewire/Vue/React**: Tidak dalam requirement — kekal Blade + jQuery.
+- **Spatie Media Library**: Over-engineered untuk keperluan ini — guna Laravel Storage terus.
+
+---
+
+## Laravel Boost — Perlu Penjelasan
+
+> **NOTA**: "Laravel Boost" tidak jelas merujuk kepada package mana. Kemungkinan:
+> 1. **Laravel Breeze** — Auth scaffolding (cadangan saya untuk admin auth)
+> 2. **Package dalaman** — Jika ada package khusus MBIP/organisasi
+> 3. **Laravel Octane** — Performance boost (tidak diperlukan untuk sistem ini)
+>
+> **Sila sahkan** apa yang dimaksudkan dengan "Laravel Boost" sebelum Fasa 1 dimulakan.
+
+---
+
+## Application Architecture
+
+```
+eCert MBIP
+├── Admin Module (authenticated, /admin/*)
+│   ├── Program Management
+│   ├── QR Code Management
+│   ├── Participant Management (pre-register + import)
+│   ├── Certificate Template Management
+│   ├── Questionnaire Management
+│   └── Statistics & Reports
+│
+├── Public Module (token-based, /p/* dan /certificate/*)
+│   ├── QR Scan → Check-in Page
+│   ├── Staff Check-in Flow
+│   ├── Walk-in Registration Flow
+│   ├── Questionnaire Page
+│   └── Certificate Download
+│
+└── Background Jobs (Queue)
+    ├── GenerateCertificateJob
+    ├── SendCertificateEmailJob
+    └── BlastCertificateLinkJob
+```
+
+---
+
+## Key Design Decisions
+
+### 1. Token-Based Public Access
+- Peserta awam tidak login.
+- Semua akses public guna `token` atau Laravel Signed URL.
+- QR code bawa ke `/p/{qr_token}` — token UUID 64 char, bukan ID.
+- Certificate download guna `/certificate/{cert_token}` — UUID unik per sijil.
+- Questionnaire link guna `participant.uuid` dalam signed URL.
+
+### 2. Participant Identity
+- `no_kp` adalah pengecam unik peserta dalam sistem.
+- Jika peserta hadir program berbeza, rekod `participants` dikongsi (cari by `no_kp`).
+- Satu peserta boleh ada banyak `program_participants` dan `attendances`.
+
+### 3. Certificate Generation Strategy
+- **On-demand**: Sijil dijana semasa peserta minta download buat pertama kali.
+- Flow: Soalselidik selesai → dispatch `GenerateCertificateJob` → simpan PNG → wrap PDF.
+- Jika `certificate.file_path` sudah ada, terus serve — tidak jana semula.
+- Gagal generate: simpan `status = failed`, log error ringkas.
+
+### 4. Queue Strategy
+- Development: `QUEUE_CONNECTION=database` (simpan dalam `jobs` table).
+- Production: cadang `QUEUE_CONNECTION=redis` (perlu Redis server).
+- Queue worker perlu jalan sebagai service (Supervisor di Linux / Task Scheduler di Windows).
+
+### 5. File Storage
+- Semua fail dalam `storage/app/private/` — tidak boleh akses direct.
+- Download melalui controller dengan `Storage::download()`.
+- QR code images dalam `storage/app/public/qrcodes/` (boleh akses via symlink).
+- Certificate template dalam `storage/app/private/templates/`.
+- Generated certificates dalam `storage/app/private/certificates/{program_uuid}/`.
+
+### 6. Font untuk Certificate
+- Guna `.ttf` font file dalam `storage/app/fonts/` atau `resources/fonts/`.
+- Cadang bundel **Noto Sans** (Google Fonts, open source, sokong Malay charset).
+- Font size perlu auto-scale berdasarkan panjang nama peserta.
+
+### 7. Admin Auth
+- Standard Laravel auth (email + password).
+- Guna Laravel Breeze (Blade stack) untuk scaffolding.
+- Semua `/admin/*` route dilindungi middleware `auth`.
+- Satu role sahaja buat masa ini: `admin` (users table dengan is_admin flag atau role enum).
+
+---
+
+## Security Architecture
+
+```
+Request Layer:
+  - Rate limiting: /p/* (60/min), /certificate/* (30/min), /admin/* (unlimited)
+  - CSRF protection: semua POST form
+  - Input validation: FormRequest classes
+
+Auth Layer:
+  - Admin: session-based Laravel auth
+  - Public: token validation + signed URL verification
+
+Data Layer:
+  - no_kp: TIDAK dalam URL — guna UUID/token sahaja
+  - Sensitive files: dalam storage/app/private (tidak boleh direct access)
+  - Database: prepared statements (Eloquent ORM)
+
+Audit Layer:
+  - audit_logs table: admin actions (create/update program, upload template, dll)
+  - email_logs table: semua email attempt
+  - certificates table: track generated_at, emailed_at, downloaded_at
+```
+
+---
+
+## Directory Structure (Cadangan)
+
+```
+app/
+├── Http/
+│   ├── Controllers/
+│   │   ├── Admin/           ← semua admin controller
+│   │   └── Public/          ← semua public controller
+│   ├── Requests/            ← FormRequest validation
+│   └── Middleware/
+├── Models/
+├── Jobs/
+│   ├── GenerateCertificateJob.php
+│   └── SendCertificateEmailJob.php
+├── Mail/
+│   └── CertificateReadyMail.php
+├── Services/
+│   ├── CertificateService.php   ← image manipulation logic
+│   ├── QrCodeService.php
+│   └── AttendanceService.php
+└── Imports/
+    └── ParticipantImport.php    ← CSV import logic
+
+resources/
+├── views/
+│   ├── admin/               ← semua admin views
+│   ├── public/              ← public check-in, questionnaire, download
+│   ├── emails/              ← email templates
+│   └── layouts/
+│       ├── admin.blade.php
+│       └── public.blade.php
+├── fonts/                   ← TTF fonts untuk certificate
+└── js/ + css/
+
+storage/app/
+├── public/qrcodes/          ← QR code images (accessible via symlink)
+├── private/
+│   ├── templates/           ← certificate template images
+│   ├── certificates/        ← generated certificates
+│   └── imports/             ← temporary CSV uploads
+```

docs/database-design.md

@@ -0,0 +1,404 @@
+# eCert MBIP — Database Design (Final)
+
+## Entity Relationship Summary
+
+```
+users                    ← admin accounts only
+programs                 ← program data
+  ├── program_qr_codes   ← QR token per program
+  ├── program_participants ← enrollment (pre-reg + walk-in)
+  ├── attendances        ← actual check-in records
+  ├── certificate_templates ← uploaded template image + config
+  ├── certificates       ← generated certificates per participant
+  └── program_questionnaires ← link program ke questionnaire set
+
+participants             ← master data peserta (no_kp unique)
+  ├── program_participants
+  ├── attendances
+  ├── certificates
+  └── questionnaire_responses
+
+questionnaire_sets       ← reusable question sets
+  ├── questionnaire_questions
+  ├── program_questionnaires
+  └── questionnaire_responses
+      └── questionnaire_answers
+
+email_logs               ← semua email attempt
+audit_logs               ← admin action tracking
+```
+
+---
+
+## Table Definitions
+
+### 1. `users`
+Laravel default. Tambah kolum berikut:
+```
+is_admin     boolean  default true   ← semua user = admin buat masa ini
+```
+
+---
+
+### 2. `programs`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| uuid | char(36) UNIQUE | public identifier, pakai dalam URL |
+| title | varchar(255) | nama program |
+| description | text nullable | deskripsi program |
+| organizer | varchar(255) | penganjur |
+| location | varchar(500) | lokasi program |
+| start_date | date | tarikh mula |
+| end_date | date | tarikh tamat |
+| checkin_start_at | datetime nullable | mula boleh check-in |
+| checkin_end_at | datetime nullable | tamat check-in |
+| ecert_download_start_at | datetime nullable | mula boleh download sijil |
+| ecert_download_end_at | datetime nullable | tamat download sijil |
+| status | enum(draft,published,closed) | default: draft |
+| allow_walk_in | boolean | default: true |
+| default_staff_session | enum(pagi,petang,full_day) nullable | sesi default untuk staff |
+| default_external_session | enum(pagi,petang,full_day) nullable | sesi default untuk orang luar |
+| created_by | bigint FK users.id | — |
+| timestamps | — | created_at, updated_at |
+
+Index: `status`, `uuid`
+
+---
+
+### 3. `program_qr_codes`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| token | varchar(64) UNIQUE | random token, bukan UUID biasa |
+| qr_image_path | varchar(500) nullable | path dalam storage |
+| is_active | boolean | default: true |
+| timestamps | — | — |
+
+Index: `token`, `program_id`
+
+---
+
+### 4. `participants`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| uuid | char(36) UNIQUE | public identifier |
+| name | varchar(255) | nama penuh |
+| no_kp | varchar(20) UNIQUE | no kad pengenalan (tanpa sempang) |
+| email | varchar(255) nullable | emel |
+| phone | varchar(20) nullable | no telefon |
+| agency | varchar(255) nullable | jabatan / agensi |
+| participant_type | enum(staff,external) | default: external |
+| timestamps | — | — |
+
+Index: `no_kp`, `email`, `uuid`
+
+> **Nota PDPA**: `no_kp` disimpan dalam DB tetapi TIDAK dipaparkan dalam URL. Akses public guna `uuid` atau `certificate.token`.
+
+---
+
+### 5. `program_participants`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| participant_id | bigint FK | — |
+| registration_source | enum(pre_registered,walk_in,admin_manual,import) | — |
+| is_pre_registered | boolean | default: false |
+| pre_registered_session | enum(pagi,petang,full_day) nullable | sesi yang ditetapkan semasa pre-reg |
+| status | enum(registered,checked_in,cancelled) | default: registered |
+| registered_at | timestamp nullable | — |
+| timestamps | — | — |
+
+Unique: `(program_id, participant_id)`
+Index: `program_id`, `participant_id`, `status`
+
+---
+
+### 6. `attendances`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| participant_id | bigint FK | — |
+| program_participant_id | bigint FK nullable | link ke enrollment |
+| attendance_source | enum(pre_registered_staff,walk_in_external,admin_manual) | — |
+| attendance_session | enum(pagi,petang,full_day) | sesi hadir |
+| checked_in_at | timestamp | masa check-in |
+| checked_in_ip | varchar(45) nullable | IP address |
+| user_agent | varchar(500) nullable | browser/device |
+| notes | varchar(500) nullable | nota tambahan |
+| timestamps | — | — |
+
+Unique: `(program_id, participant_id)`
+Index: `program_id`, `participant_id`, `attendance_source`, `attendance_session`
+
+---
+
+### 7. `certificate_templates`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| original_filename | varchar(255) | nama fail asal |
+| image_path | varchar(500) | path dalam storage |
+| config_json | json | koordinat dan style teks |
+| is_active | boolean | default: true |
+| uploaded_by | bigint FK users.id | — |
+| timestamps | — | — |
+
+**Contoh `config_json`:**
+```json
+{
+  "fields": {
+    "name": {
+      "x": 1240,
+      "y": 850,
+      "font_size": 72,
+      "font_size_min": 36,
+      "font_family": "NotoSans-Bold",
+      "color": "#1a1a1a",
+      "align": "center",
+      "max_width": 1600
+    },
+    "no_kp": {
+      "x": 1240,
+      "y": 960,
+      "font_size": 48,
+      "font_size_min": 36,
+      "font_family": "NotoSans-Regular",
+      "color": "#333333",
+      "align": "center",
+      "max_width": 1200
+    },
+    "program_title": {
+      "x": 1240,
+      "y": 620,
+      "font_size": 52,
+      "font_size_min": 28,
+      "font_family": "NotoSans-Bold",
+      "color": "#1a1a1a",
+      "align": "center",
+      "max_width": 1800,
+      "enabled": false
+    },
+    "program_date": {
+      "x": 1240,
+      "y": 700,
+      "font_size": 36,
+      "font_family": "NotoSans-Regular",
+      "color": "#555555",
+      "align": "center",
+      "enabled": false
+    }
+  },
+  "canvas_dpi": 150
+}
+```
+
+---
+
+### 8. `certificates`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| uuid | char(36) UNIQUE | — |
+| program_id | bigint FK | — |
+| participant_id | bigint FK | — |
+| certificate_template_id | bigint FK | — |
+| certificate_no | varchar(100) UNIQUE nullable | no sijil rasmi (auto-generate) |
+| file_path | varchar(500) nullable | path PDF dalam storage |
+| token | varchar(64) UNIQUE | token untuk download link |
+| status | enum(pending,generating,generated,emailed,failed) | default: pending |
+| error_message | text nullable | jika gagal |
+| generated_at | timestamp nullable | — |
+| emailed_at | timestamp nullable | — |
+| downloaded_at | timestamp nullable | tarikh pertama download |
+| download_count | int | default: 0 |
+| timestamps | — | — |
+
+Unique: `(program_id, participant_id)`
+Index: `token`, `status`, `program_id`, `participant_id`
+
+**Format `certificate_no`**: `MBIP/{YEAR}/{PROGRAM_ID}/{SEQUENCE}` — contoh: `MBIP/2025/001/0042`
+
+---
+
+### 9. `questionnaire_sets`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| title | varchar(255) | tajuk set |
+| description | text nullable | — |
+| status | enum(draft,published,archived) | default: draft |
+| created_by | bigint FK users.id | — |
+| timestamps | — | — |
+
+---
+
+### 10. `questionnaire_questions`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| questionnaire_set_id | bigint FK | — |
+| question_text | text | teks soalan |
+| question_type | enum(rating,single_choice,multiple_choice,short_text,long_text) | — |
+| options_json | json nullable | untuk single/multiple choice dan rating |
+| is_required | boolean | default: true |
+| sort_order | int | default: 0 |
+| timestamps | — | — |
+
+**Contoh `options_json`:**
+```json
+// single_choice / multiple_choice:
+{ "options": ["Sangat Berpuas Hati", "Berpuas Hati", "Sederhana", "Tidak Berpuas Hati"] }
+
+// rating:
+{ "min": 1, "max": 5, "labels": { "1": "Sangat Lemah", "5": "Cemerlang" } }
+```
+
+---
+
+### 11. `program_questionnaires`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| questionnaire_set_id | bigint FK | — |
+| is_confirmed | boolean | default: false |
+| confirmed_at | timestamp nullable | — |
+| confirmed_by | bigint FK users.id nullable | — |
+| timestamps | — | — |
+
+Unique: `(program_id, questionnaire_set_id)`
+
+---
+
+### 12. `questionnaire_responses`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK | — |
+| participant_id | bigint FK | — |
+| questionnaire_set_id | bigint FK | — |
+| submitted_at | timestamp | — |
+| ip_address | varchar(45) nullable | — |
+| user_agent | varchar(500) nullable | — |
+| timestamps | — | — |
+
+Unique: `(program_id, participant_id, questionnaire_set_id)`
+Index: `program_id`, `participant_id`
+
+---
+
+### 13. `questionnaire_answers`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| questionnaire_response_id | bigint FK | — |
+| questionnaire_question_id | bigint FK | — |
+| answer_value | json nullable | nilai jawapan (flexibel untuk semua jenis) |
+| timestamps | — | — |
+
+**Contoh `answer_value`:**
+```json
+// rating:       { "value": 4 }
+// single:       { "value": "Berpuas Hati" }
+// multiple:     { "value": ["A", "B"] }
+// short_text:   { "value": "Teks ringkas" }
+// long_text:    { "value": "Teks panjang..." }
+```
+
+---
+
+### 14. `email_logs`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| program_id | bigint FK nullable | — |
+| participant_id | bigint FK nullable | — |
+| certificate_id | bigint FK nullable | — |
+| recipient_email | varchar(255) | alamat emel penerima |
+| subject | varchar(500) | subjek emel |
+| email_type | enum(certificate_ready,reminder,test) | jenis emel |
+| status | enum(pending,sent,failed) | default: pending |
+| error_message | text nullable | ralat SMTP/queue |
+| sent_at | timestamp nullable | — |
+| timestamps | — | — |
+
+Index: `status`, `program_id`, `participant_id`
+
+---
+
+### 15. `audit_logs`
+
+| Kolum | Type | Keterangan |
+|-------|------|-----------|
+| id | bigint PK | — |
+| user_id | bigint FK nullable | admin yang buat action |
+| action | varchar(100) | nama action: program.created, template.uploaded, dll |
+| auditable_type | varchar(255) nullable | model class |
+| auditable_id | bigint nullable | ID rekod berkaitan |
+| old_values | json nullable | nilai sebelum (REDACT data sensitif) |
+| new_values | json nullable | nilai selepas (REDACT data sensitif) |
+| ip_address | varchar(45) nullable | — |
+| user_agent | varchar(500) nullable | — |
+| timestamps | — | — |
+
+Index: `user_id`, `action`, `auditable_type + auditable_id`
+
+**Actions yang perlu diaudit:**
+- `program.created`, `program.updated`, `program.deleted`
+- `template.uploaded`, `template.updated`
+- `questionnaire.confirmed`, `questionnaire.attached`
+- `certificate.generated`, `certificate.downloaded`
+- `participant.imported`, `participant.added`
+
+---
+
+## Migration Order (Dependency-safe)
+
+```
+1.  users                      (no dependency)
+2.  programs                   (FK: users)
+3.  program_qr_codes           (FK: programs)
+4.  participants               (no dependency)
+5.  program_participants       (FK: programs, participants)
+6.  attendances                (FK: programs, participants, program_participants)
+7.  certificate_templates      (FK: programs, users)
+8.  questionnaire_sets         (FK: users)
+9.  questionnaire_questions    (FK: questionnaire_sets)
+10. program_questionnaires     (FK: programs, questionnaire_sets, users)
+11. certificates               (FK: programs, participants, certificate_templates)
+12. questionnaire_responses    (FK: programs, participants, questionnaire_sets)
+13. questionnaire_answers      (FK: questionnaire_responses, questionnaire_questions)
+14. email_logs                 (FK: programs, participants, certificates)
+15. audit_logs                 (FK: users)
+```
+
+---
+
+## Data Integrity Rules
+
+1. `participants.no_kp` — UNIQUE global (satu orang = satu rekod).
+2. `attendances (program_id, participant_id)` — UNIQUE (tidak boleh check-in dua kali program sama).
+3. `certificates (program_id, participant_id)` — UNIQUE (satu sijil per peserta per program).
+4. `questionnaire_responses (program_id, participant_id, questionnaire_set_id)` — UNIQUE.
+5. `program_participants (program_id, participant_id)` — UNIQUE.
+6. Jika program `status = closed` atau `published`, rekod tidak boleh padam (soft delete sahaja jika perlu).
+7. `no_kp` dalam participants tidak dipaparkan dalam URL atau log — pakai `uuid` atau `token`.

docs/execution-plan.md

@@ -0,0 +1,434 @@
+# eCert MBIP — Execution Plan (Phased)
+
+## Pre-requisites (Sebelum Fasa 1)
+
+- [ ] Sahkan "Laravel Boost" — package apa yang dimaksudkan
+- [ ] Sahkan MySQL server credentials (host, port, db name, user, password)
+- [ ] Sahkan SMTP settings untuk email
+- [ ] Sahkan storage path boleh write
+- [ ] Sahkan Git SSH key berfungsi ke git.mbip.my
+
+---
+
+## Fasa 1: Foundation & Authentication
+**Anggaran: 1-2 jam**
+
+### Tasks
+- [ ] Install Laravel 12 via `composer create-project`
+- [ ] Setup `.env` (DB, queue, mail, app URL)
+- [ ] Install Laravel Breeze (Blade stack)
+- [ ] Install Composer packages (intervention/image, simple-qrcode, dompdf, league/csv)
+- [ ] Buat semua 15 migrations
+- [ ] Buat admin layout Blade (sidebar, navbar) dengan Bootstrap 5
+- [ ] Buat public layout Blade (mobile-first) dengan Bootstrap 5
+- [ ] Setup Queue (database driver → create `jobs` table)
+- [ ] Setup Storage symlink
+- [ ] Buat Seeder: admin user
+- [ ] Commit: `chore: initial Laravel project setup`
+- [ ] Commit: `feat: admin authentication and layout`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/DashboardController.php
+resources/views/layouts/admin.blade.php
+resources/views/layouts/public.blade.php
+resources/views/admin/dashboard.blade.php
+database/migrations/* (15 migration files)
+database/seeders/AdminSeeder.php
+```
+
+### Commands Selepas Fasa 1
+```bash
+php artisan migrate
+php artisan db:seed --class=AdminSeeder
+php artisan storage:link
+php artisan queue:table && php artisan migrate
+```
+
+### Manual Test
+- [ ] Login admin berjaya
+- [ ] Dashboard papar (walaupun kosong)
+- [ ] Logout berjaya
+
+---
+
+## Fasa 2: Program Management
+**Anggaran: 2-3 jam**
+
+### Tasks
+- [ ] `ProgramController` — CRUD penuh
+- [ ] `StoreProgramRequest` + `UpdateProgramRequest` — validation
+- [ ] Program index view (table + badge status)
+- [ ] Program create/edit form
+- [ ] Program show view (tab: details, participants, qr, template, questionnaire, stats)
+- [ ] Status management (draft → published → closed)
+- [ ] Protect delete jika ada kehadiran
+- [ ] Commit: `feat: program management`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/ProgramController.php
+app/Http/Requests/Admin/StoreProgramRequest.php
+app/Http/Requests/Admin/UpdateProgramRequest.php
+app/Models/Program.php
+resources/views/admin/programs/*
+```
+
+### Manual Test
+- [ ] Tambah program
+- [ ] Edit program
+- [ ] Tukar status
+- [ ] Cuba padam program yang ada kehadiran (mesti gagal)
+
+---
+
+## Fasa 3: QR Code Generation
+**Anggaran: 1-2 jam**
+
+### Tasks
+- [ ] `QrCodeController` — generate, show, download
+- [ ] `QrCodeService` — generate token, buat QR image, simpan storage
+- [ ] QR code preview dalam admin
+- [ ] Download QR sebagai PNG
+- [ ] Commit: `feat: qr code generation`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/QrCodeController.php
+app/Services/QrCodeService.php
+app/Models/ProgramQrCode.php
+resources/views/admin/programs/qr.blade.php
+```
+
+### Manual Test
+- [ ] Generate QR code untuk program
+- [ ] QR code papar dalam admin
+- [ ] Download QR sebagai PNG berjaya
+- [ ] Scan QR code → bawa ke /p/{token} (walaupun page belum siap)
+
+---
+
+## Fasa 4: Participant Management & CSV Import
+**Anggaran: 2-3 jam**
+
+### Tasks
+- [ ] `ParticipantController` — add manual, import, list, export
+- [ ] `ParticipantImport` service — parse CSV, validate, bulk insert
+- [ ] Import summary: berjaya, duplicate, gagal
+- [ ] Export CSV senarai peserta
+- [ ] Commit: `feat: participant management`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/ParticipantController.php
+app/Services/ParticipantImportService.php
+app/Models/Participant.php
+app/Models/ProgramParticipant.php
+resources/views/admin/programs/participants/*
+```
+
+### CSV Template Headers
+```
+name,no_kp,email,phone,agency
+```
+
+### Manual Test
+- [ ] Tambah peserta manual
+- [ ] Import CSV (normal)
+- [ ] Import CSV dengan duplicate (summary papar betul)
+- [ ] Import CSV dengan row kosong/invalid
+- [ ] Export CSV peserta
+
+---
+
+## Fasa 5: Public Check-in Flow
+**Anggaran: 3-4 jam**
+
+### Tasks
+- [ ] `CheckinController` — show, staffCheckin, externalRegister
+- [ ] `AttendanceService` — rekod kehadiran, cegah duplicate
+- [ ] Public check-in page (mobile-first, Bootstrap 5)
+- [ ] Staff check-in form + validation
+- [ ] Walk-in registration form + validation
+- [ ] Status page selepas check-in
+- [ ] Rate limiting pada routes
+- [ ] Commit: `feat: participant registration and attendance`
+
+### Files Utama
+```
+app/Http/Controllers/Public/CheckinController.php
+app/Services/AttendanceService.php
+resources/views/public/checkin/*
+```
+
+### Manual Test
+- [ ] Scan QR → buka page check-in
+- [ ] Staff check-in dengan no_kp betul
+- [ ] Staff check-in dengan no_kp salah
+- [ ] Staff check-in yang sudah hadir (mesej duplicate)
+- [ ] Walk-in daftar baru
+- [ ] Walk-in dengan no_kp sama → error duplicate
+- [ ] Test rate limit (cuba submit banyak kali)
+
+---
+
+## Fasa 6: Questionnaire Management
+**Anggaran: 3-4 jam**
+
+### Tasks
+- [ ] `QuestionnaireSetController` — CRUD
+- [ ] `QuestionController` — CRUD, reorder
+- [ ] `ProgramQuestionnaireController` — attach, confirm, detach
+- [ ] Public questionnaire form (semua jenis soalan)
+- [ ] Submit response + answers
+- [ ] Semak sudah jawab (cegah double submit)
+- [ ] Commit: `feat: questionnaire management`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/QuestionnaireSetController.php
+app/Http/Controllers/Admin/QuestionController.php
+app/Http/Controllers/Admin/ProgramQuestionnaireController.php
+app/Http/Controllers/Public/QuestionnaireController.php
+app/Models/QuestionnaireSet.php
+app/Models/QuestionnaireQuestion.php
+app/Models/QuestionnaireResponse.php
+app/Models/QuestionnaireAnswer.php
+resources/views/admin/questionnaires/*
+resources/views/public/questionnaire/*
+```
+
+### Manual Test
+- [ ] Cipta questionnaire set
+- [ ] Tambah pelbagai jenis soalan
+- [ ] Attach questionnaire ke program
+- [ ] Confirm questionnaire
+- [ ] Peserta boleh akses questionnaire (selepas check-in)
+- [ ] Submit soalselidik berjaya
+- [ ] Cuba submit semula → error (sudah jawab)
+
+---
+
+## Fasa 7: Certificate Template & Generation
+**Anggaran: 4-5 jam**
+
+### Tasks
+- [ ] `CertificateTemplateController` — upload, config, preview, test generate
+- [ ] `CertificateService` — image overlay (Intervention Image), PDF wrap (DOMPDF)
+- [ ] Font auto-scale berdasarkan panjang nama
+- [ ] Preview template dalam admin
+- [ ] Test generate dengan nama sample
+- [ ] `GenerateCertificateJob` — queue job
+- [ ] `AttendanceCheckController` — public semak kehadiran
+- [ ] `CertificateController` — public, show, download gate
+- [ ] Certificate gate: soalselidik dijawab + masa download aktif
+- [ ] Rekod downloaded_at dan download_count
+- [ ] Commit: `feat: certificate template upload`
+- [ ] Commit: `feat: certificate generation and download`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/CertificateTemplateController.php
+app/Http/Controllers/Public/CertificateController.php
+app/Http/Controllers/Public/AttendanceCheckController.php
+app/Services/CertificateService.php
+app/Jobs/GenerateCertificateJob.php
+app/Models/Certificate.php
+app/Models/CertificateTemplate.php
+resources/views/admin/programs/template/*
+resources/views/public/certificate/*
+resources/fonts/                 ← bundel NotoSans TTF
+```
+
+### Manual Test
+- [ ] Upload template imej
+- [ ] Set koordinat nama + no_kp
+- [ ] Preview template
+- [ ] Test generate → papar hasil
+- [ ] Peserta scan QR (masa download) → semak kehadiran
+- [ ] Peserta download sijil (selepas soalselidik)
+- [ ] Peserta cuba download sebelum jawab soalselidik → redirect
+
+---
+
+## Fasa 8: Email & Queue
+**Anggaran: 2-3 jam**
+
+### Tasks
+- [ ] `CertificateReadyMail` — Mailable class
+- [ ] Email template Blade (HTML + text)
+- [ ] `SendCertificateEmailJob` — queue job
+- [ ] `BlastCertificateLinkJob` — mass email untuk semua peserta hadir
+- [ ] Admin trigger: "Email semua peserta" button
+- [ ] `email_logs` rekod semua attempt
+- [ ] Commit: `feat: email certificate link`
+
+### Files Utama
+```
+app/Mail/CertificateReadyMail.php
+app/Jobs/SendCertificateEmailJob.php
+app/Jobs/BlastCertificateLinkJob.php
+resources/views/emails/certificate-ready.blade.php
+resources/views/emails/certificate-ready.text.blade.php
+```
+
+### Manual Test
+- [ ] Trigger email untuk satu peserta
+- [ ] Email diterima dengan link betul
+- [ ] Link dalam email bawa ke certificate page
+- [ ] `email_logs` rekod status sent
+- [ ] Test email SMTP failure → status failed dalam email_logs
+
+---
+
+## Fasa 9: Statistics Dashboard
+**Anggaran: 2-3 jam**
+
+### Tasks
+- [ ] `StatisticsController` — dashboard + per-program
+- [ ] Dashboard cards (counts)
+- [ ] Per-program breakdown (attendance by type, session, soalselidik)
+- [ ] Chart.js integration (rating chart, attendance trend)
+- [ ] Export CSV statistik
+- [ ] Commit: `feat: admin statistics dashboard`
+
+### Files Utama
+```
+app/Http/Controllers/Admin/StatisticsController.php
+app/Http/Controllers/Admin/DashboardController.php (update)
+resources/views/admin/dashboard.blade.php (update)
+resources/views/admin/programs/statistics.blade.php
+```
+
+### Manual Test
+- [ ] Dashboard papar kiraan betul
+- [ ] Per-program statistik betul
+- [ ] Chart.js render tanpa error
+- [ ] Export CSV berjaya
+
+---
+
+## Fasa 10: Security Hardening & Audit Log
+**Anggaran: 1-2 jam**
+
+### Tasks
+- [ ] `AuditLogService` — log admin actions
+- [ ] Hook audit log ke key events
+- [ ] Review semua route ada proper validation
+- [ ] Semak file upload hanya benarkan jpg/png
+- [ ] Semak no_kp tidak expose dalam URL
+- [ ] Rate limiting final review
+- [ ] Commit: `feat: audit logging and security hardening`
+
+---
+
+## Fasa 11: Testing
+**Anggaran: 3-4 jam**
+
+### Tasks
+- [ ] Setup Pest
+- [ ] Admin can create program
+- [ ] QR token valid opens check-in page
+- [ ] Staff pre-registered can check-in
+- [ ] External participant can register and check-in
+- [ ] Duplicate no_kp for same program rejected
+- [ ] Participant cannot download certificate before questionnaire
+- [ ] Participant can download certificate after questionnaire
+- [ ] Admin can view basic statistics
+- [ ] Commit: `test: core attendance and certificate flow`
+
+---
+
+## Environment Variables Checklist
+
+```env
+APP_NAME="eCert MBIP"
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_URL=http://localhost
+
+DB_CONNECTION=mysql
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_DATABASE=ecert_mbip
+DB_USERNAME=root
+DB_PASSWORD=
+
+QUEUE_CONNECTION=database
+
+MAIL_MAILER=smtp
+MAIL_HOST=
+MAIL_PORT=587
+MAIL_USERNAME=
+MAIL_PASSWORD=
+MAIL_ENCRYPTION=tls
+MAIL_FROM_ADDRESS=noreply@mbip.gov.my
+MAIL_FROM_NAME="eCert MBIP"
+
+FILESYSTEM_DISK=local
+
+SESSION_DRIVER=database
+SESSION_LIFETIME=120
+```
+
+---
+
+## Git Commit Sequence
+
+```bash
+# Fasa 1
+git commit -m "chore: initial Laravel project setup"
+git commit -m "feat: admin authentication and layout"
+
+# Fasa 2
+git commit -m "feat: program management"
+
+# Fasa 3
+git commit -m "feat: qr code generation"
+
+# Fasa 4
+git commit -m "feat: participant management and csv import"
+
+# Fasa 5
+git commit -m "feat: public check-in flow and attendance"
+
+# Fasa 6
+git commit -m "feat: questionnaire management"
+
+# Fasa 7
+git commit -m "feat: certificate template upload"
+git commit -m "feat: certificate generation and download"
+
+# Fasa 8
+git commit -m "feat: email certificate link"
+
+# Fasa 9
+git commit -m "feat: admin statistics dashboard"
+
+# Fasa 10
+git commit -m "feat: audit logging and security hardening"
+
+# Fasa 11
+git commit -m "test: core attendance and certificate flow"
+
+# Production push (HANYA apabila diarahkan)
+# git push -u origin master
+```
+
+---
+
+## Risiko Teknikal
+
+| # | Risiko | Kemungkinan | Impak | Mitigasi |
+|---|--------|-------------|-------|----------|
+| 1 | GD font rendering — perlu TTF, tidak ada jika lupa bundel | Sederhana | Tinggi | Bundel Noto Sans TTF dalam `resources/fonts/`, test awal |
+| 2 | Queue worker tidak berjalan di Windows production | Tinggi | Tinggi | Guna Task Scheduler Windows atau switch ke Linux server |
+| 3 | CSV import gagal handle UTF-8 BOM (Excel export) | Tinggi | Sederhana | Detect dan strip BOM dalam import service |
+| 4 | SMTP kerajaan — TLS/SSL config berbeza | Sederhana | Tinggi | Test awal dengan real SMTP, fallback ke log driver |
+| 5 | Concurrent check-in race condition | Rendah | Sederhana | DB unique constraint + try-catch pada insert |
+| 6 | PDF certificate kualiti rendah jika gambar template kecil | Sederhana | Sederhana | Minta admin upload template minimum 1240px lebar |
+| 7 | "Laravel Boost" tidak jelas | — | Rendah | Perlu penjelasan sebelum install |
+| 8 | Session tidak persistent untuk public (no login) | — | Sederhana | Guna certificate token + signed URL, bukan session |
+| 9 | Storage permissions pada Windows production | Sederhana | Tinggi | Pastikan `storage/` dan `bootstrap/cache/` writable |
+| 10 | PDPA — no_kp exposure dalam log/debug | Rendah | Tinggi | Disable query log production, redact no_kp dalam audit_logs |

docs/route-plan.md

@@ -0,0 +1,268 @@
+# eCert MBIP — Route Plan
+
+## Admin Routes (Authenticated)
+
+```
+Prefix: /admin
+Middleware: auth, verified (optional)
+```
+
+### Auth
+```
+GET    /login                                    → Auth\AuthenticatedSessionController@create
+POST   /login                                    → Auth\AuthenticatedSessionController@store
+POST   /logout                                   → Auth\AuthenticatedSessionController@destroy
+```
+
+### Dashboard
+```
+GET    /admin/dashboard                          → Admin\DashboardController@index
+```
+
+### Programs
+```
+GET    /admin/programs                           → Admin\ProgramController@index
+GET    /admin/programs/create                    → Admin\ProgramController@create
+POST   /admin/programs                           → Admin\ProgramController@store
+GET    /admin/programs/{program:uuid}            → Admin\ProgramController@show
+GET    /admin/programs/{program:uuid}/edit       → Admin\ProgramController@edit
+PUT    /admin/programs/{program:uuid}            → Admin\ProgramController@update
+DELETE /admin/programs/{program:uuid}            → Admin\ProgramController@destroy
+POST   /admin/programs/{program:uuid}/publish    → Admin\ProgramController@publish
+POST   /admin/programs/{program:uuid}/close      → Admin\ProgramController@close
+```
+
+### QR Code
+```
+GET    /admin/programs/{program:uuid}/qr             → Admin\QrCodeController@show
+POST   /admin/programs/{program:uuid}/qr/generate    → Admin\QrCodeController@generate
+GET    /admin/programs/{program:uuid}/qr/download    → Admin\QrCodeController@download
+POST   /admin/programs/{program:uuid}/qr/deactivate  → Admin\QrCodeController@deactivate
+```
+
+### Participants (Pre-registered)
+```
+GET    /admin/programs/{program:uuid}/participants        → Admin\ParticipantController@index
+GET    /admin/programs/{program:uuid}/participants/create → Admin\ParticipantController@create
+POST   /admin/programs/{program:uuid}/participants        → Admin\ParticipantController@store
+DELETE /admin/programs/{program:uuid}/participants/{pp}   → Admin\ParticipantController@destroy
+GET    /admin/programs/{program:uuid}/participants/import → Admin\ParticipantController@importForm
+POST   /admin/programs/{program:uuid}/participants/import → Admin\ParticipantController@import
+GET    /admin/programs/{program:uuid}/participants/export → Admin\ParticipantController@export
+```
+
+### Certificate Template
+```
+GET    /admin/programs/{program:uuid}/template           → Admin\CertificateTemplateController@show
+POST   /admin/programs/{program:uuid}/template           → Admin\CertificateTemplateController@store
+PUT    /admin/programs/{program:uuid}/template/config    → Admin\CertificateTemplateController@updateConfig
+DELETE /admin/programs/{program:uuid}/template           → Admin\CertificateTemplateController@destroy
+GET    /admin/programs/{program:uuid}/template/preview   → Admin\CertificateTemplateController@preview
+POST   /admin/programs/{program:uuid}/template/test      → Admin\CertificateTemplateController@testGenerate
+```
+
+### Questionnaire (Attachment to Program)
+```
+GET    /admin/programs/{program:uuid}/questionnaire         → Admin\ProgramQuestionnaireController@show
+POST   /admin/programs/{program:uuid}/questionnaire/attach  → Admin\ProgramQuestionnaireController@attach
+POST   /admin/programs/{program:uuid}/questionnaire/confirm → Admin\ProgramQuestionnaireController@confirm
+DELETE /admin/programs/{program:uuid}/questionnaire/detach  → Admin\ProgramQuestionnaireController@detach
+```
+
+### Statistics
+```
+GET    /admin/programs/{program:uuid}/statistics         → Admin\StatisticsController@show
+GET    /admin/programs/{program:uuid}/statistics/export  → Admin\StatisticsController@export
+```
+
+### Questionnaire Sets (Reusable)
+```
+GET    /admin/questionnaires                             → Admin\QuestionnaireSetController@index
+GET    /admin/questionnaires/create                      → Admin\QuestionnaireSetController@create
+POST   /admin/questionnaires                             → Admin\QuestionnaireSetController@store
+GET    /admin/questionnaires/{set}                       → Admin\QuestionnaireSetController@show
+GET    /admin/questionnaires/{set}/edit                  → Admin\QuestionnaireSetController@edit
+PUT    /admin/questionnaires/{set}                       → Admin\QuestionnaireSetController@update
+DELETE /admin/questionnaires/{set}                       → Admin\QuestionnaireSetController@destroy
+POST   /admin/questionnaires/{set}/publish               → Admin\QuestionnaireSetController@publish
+POST   /admin/questionnaires/{set}/archive               → Admin\QuestionnaireSetController@archive
+```
+
+### Questionnaire Questions
+```
+POST   /admin/questionnaires/{set}/questions             → Admin\QuestionController@store
+PUT    /admin/questions/{question}                       → Admin\QuestionController@update
+DELETE /admin/questions/{question}                       → Admin\QuestionController@destroy
+POST   /admin/questions/reorder                          → Admin\QuestionController@reorder
+```
+
+### Certificate Generation (Admin Trigger)
+```
+POST   /admin/programs/{program:uuid}/certificates/generate-all  → Admin\CertificateController@generateAll
+POST   /admin/programs/{program:uuid}/certificates/email-all     → Admin\CertificateController@emailAll
+GET    /admin/programs/{program:uuid}/certificates               → Admin\CertificateController@index
+```
+
+---
+
+## Public Routes (Token-based, No Auth)
+
+```
+Prefix: none
+Middleware: throttle:60,1 (check-in), throttle:30,1 (download)
+```
+
+### Check-in Flow
+```
+GET    /p/{qr_token}                        → Public\CheckinController@show
+                                              ↑ Papar: nama program, status, pilihan jenis peserta
+                                              ↑ Redirect ke questionnaire/download jika masa download aktif
+
+POST   /p/{qr_token}/staff                  → Public\CheckinController@staffCheckin
+                                              ↑ Input: no_kp, email
+                                              ↑ Semak pre-registered, rekod attendance
+
+POST   /p/{qr_token}/external               → Public\CheckinController@externalRegister
+                                              ↑ Input: name, no_kp, email, phone, agency
+                                              ↑ Daftar + rekod attendance
+```
+
+### Questionnaire (Public)
+```
+GET    /p/{qr_token}/questionnaire/{participant_uuid}
+                                            → Public\QuestionnaireController@show
+                                              ↑ Semak: attendance exists, questionnaire published, belum jawab
+
+POST   /p/{qr_token}/questionnaire/{participant_uuid}
+                                            → Public\QuestionnaireController@submit
+                                              ↑ Simpan responses, redirect ke certificate page
+```
+
+### Semakan Kehadiran (via QR masa download)
+```
+GET    /p/{qr_token}/semak                  → Public\AttendanceCheckController@show
+                                              ↑ Papar form: masukkan no_kp untuk semak
+
+POST   /p/{qr_token}/semak                  → Public\AttendanceCheckController@check
+                                              ↑ Semak kehadiran, papar status sijil
+```
+
+### Certificate Download
+```
+GET    /certificate/{cert_token}            → Public\CertificateController@show
+                                              ↑ Semak: token valid, masa download aktif, soalselidik dijawab
+                                              ↑ Jika semua OK: papar download button / auto-download
+
+POST   /certificate/{cert_token}/download   → Public\CertificateController@download
+                                              ↑ Generate if not exists, serve file, increment download_count
+```
+
+---
+
+## Route Logic / Decision Tree
+
+### GET /p/{qr_token}
+```
+QR token valid?
+  NO  → 404
+  YES →
+    Program published?
+      NO  → Papar: "Program belum dibuka"
+      YES →
+        Masa download aktif (ecert_download_start_at <= now)?
+          YES → Redirect ke /p/{qr_token}/semak
+          NO  →
+            Masa check-in aktif (checkin_start_at <= now <= checkin_end_at)?
+              YES → Papar check-in form
+              NO  → Papar: "Check-in belum dibuka" atau "Check-in sudah ditutup"
+```
+
+### POST /p/{qr_token}/staff
+```
+no_kp + email valid format?
+  NO  → Validation error
+  YES →
+    Jumpa dalam program_participants (pre_registered)?
+      NO  → "Tidak dijumpai dalam senarai" + pilihan daftar luar
+      YES →
+        Sudah check-in (attendances exists)?
+          YES → "Anda sudah check-in" + papar masa check-in
+          NO  →
+            Rekod attendance
+            Papar: "Check-in berjaya! Sijil akan dihantar ke emel selepas program."
+```
+
+### GET /certificate/{cert_token}
+```
+Token valid (dalam certificates table)?
+  NO  → 404
+  YES →
+    Masa download aktif?
+      NO  → Papar: "Sijil belum boleh dimuat turun. Mula dari: {datetime}"
+      YES →
+        Soalselidik diperlukan dan belum dijawab?
+          YES → Redirect ke /p/{qr_token}/questionnaire/{participant_uuid}
+          NO  →
+            Sijil sudah generated?
+              NO  → Dispatch GenerateCertificateJob, papar: "Sijil sedang disediakan..."
+              YES → Papar download page / auto-download PDF
+```
+
+---
+
+## Named Routes
+
+```php
+// Admin
+'admin.dashboard'
+'admin.programs.index'
+'admin.programs.create'
+'admin.programs.show'
+'admin.programs.edit'
+'admin.programs.qr.show'
+'admin.programs.qr.generate'
+'admin.programs.qr.download'
+'admin.programs.participants.index'
+'admin.programs.participants.import'
+'admin.programs.template.show'
+'admin.programs.questionnaire.show'
+'admin.programs.statistics.show'
+'admin.questionnaires.index'
+'admin.questions.store'
+
+// Public
+'public.checkin.show'          → /p/{qr_token}
+'public.checkin.staff'         → POST /p/{qr_token}/staff
+'public.checkin.external'      → POST /p/{qr_token}/external
+'public.questionnaire.show'    → /p/{qr_token}/questionnaire/{uuid}
+'public.questionnaire.submit'  → POST /p/{qr_token}/questionnaire/{uuid}
+'public.semak.show'            → /p/{qr_token}/semak
+'public.semak.check'           → POST /p/{qr_token}/semak
+'public.certificate.show'      → /certificate/{cert_token}
+'public.certificate.download'  → POST /certificate/{cert_token}/download
+```
+
+---
+
+## Middleware Stack
+
+```php
+// web.php
+Route::middleware('auth')->prefix('admin')->name('admin.')->group(function () {
+    // semua admin routes
+});
+
+Route::middleware(['throttle:checkin'])->prefix('p')->name('public.')->group(function () {
+    // check-in routes
+});
+
+Route::middleware(['throttle:certificate'])->prefix('certificate')->name('public.certificate.')->group(function () {
+    // download routes
+});
+```
+
+Rate limiter dalam `AppServiceProvider`:
+```php
+RateLimiter::for('checkin', fn($req) => Limit::perMinute(60)->by($req->ip()));
+RateLimiter::for('certificate', fn($req) => Limit::perMinute(30)->by($req->ip()));
+```

package.json

@@ -0,0 +1,20 @@
+{
+    "$schema": "https://www.schemastore.org/package.json",
+    "private": true,
+    "type": "module",
+    "scripts": {
+        "build": "vite build",
+        "dev": "vite"
+    },
+    "devDependencies": {
+        "concurrently": "^9.0.1",
+        "laravel-vite-plugin": "^3.1",
+        "vite": "^8.0.0"
+    },
+    "dependencies": {
+        "bootstrap": "^5.3.3",
+        "chart.js": "^4.4.0",
+        "jquery": "^3.7.1",
+        "@popperjs/core": "^2.11.8"
+    }
+}

phpunit.xml

@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="vendor/autoload.php"
+         colors="true"
+>
+    <testsuites>
+        <testsuite name="Unit">
+            <directory>tests/Unit</directory>
+        </testsuite>
+        <testsuite name="Feature">
+            <directory>tests/Feature</directory>
+        </testsuite>
+    </testsuites>
+    <source>
+        <include>
+            <directory>app</directory>
+        </include>
+    </source>
+    <php>
+        <env name="APP_ENV" value="testing"/>
+        <env name="APP_MAINTENANCE_DRIVER" value="file"/>
+        <env name="BCRYPT_ROUNDS" value="4"/>
+        <env name="BROADCAST_CONNECTION" value="null"/>
+        <env name="CACHE_STORE" value="array"/>
+        <env name="DB_CONNECTION" value="sqlite"/>
+        <env name="DB_DATABASE" value=":memory:"/>
+        <env name="DB_URL" value=""/>
+        <env name="MAIL_MAILER" value="array"/>
+        <env name="QUEUE_CONNECTION" value="sync"/>
+        <env name="SESSION_DRIVER" value="array"/>
+        <env name="PULSE_ENABLED" value="false"/>
+        <env name="TELESCOPE_ENABLED" value="false"/>
+        <env name="NIGHTWATCH_ENABLED" value="false"/>
+    </php>
+</phpunit>

public/.htaccess

@@ -0,0 +1,25 @@
+<IfModule mod_rewrite.c>
+    <IfModule mod_negotiation.c>
+        Options -MultiViews -Indexes
+    </IfModule>
+
+    RewriteEngine On
+
+    # Handle Authorization Header
+    RewriteCond %{HTTP:Authorization} .
+    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+    # Handle X-XSRF-Token Header
+    RewriteCond %{HTTP:x-xsrf-token} .
+    RewriteRule .* - [E=HTTP_X_XSRF_TOKEN:%{HTTP:X-XSRF-Token}]
+
+    # Redirect Trailing Slashes If Not A Folder...
+    RewriteCond %{REQUEST_FILENAME} !-d
+    RewriteCond %{REQUEST_URI} (.+)/$
+    RewriteRule ^ %1 [L,R=301]
+
+    # Send Requests To Front Controller...
+    RewriteCond %{REQUEST_FILENAME} !-d
+    RewriteCond %{REQUEST_FILENAME} !-f
+    RewriteRule ^ index.php [L]
+</IfModule>

public/index.php

@@ -0,0 +1,20 @@
+<?php
+
+use Illuminate\Foundation\Application;
+use Illuminate\Http\Request;
+
+define('LARAVEL_START', microtime(true));
+
+// Determine if the application is in maintenance mode...
+if (file_exists($maintenance = __DIR__.'/../storage/framework/maintenance.php')) {
+    require $maintenance;
+}
+
+// Register the Composer autoloader...
+require __DIR__.'/../vendor/autoload.php';
+
+// Bootstrap Laravel and handle the request...
+/** @var Application $app */
+$app = require_once __DIR__.'/../bootstrap/app.php';
+
+$app->handleRequest(Request::capture());

public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: