Add Admin CRUD

app/Eloquent/BackupQueryBuilder.php

@@ -3,9 +3,10 @@
 namespace App\Eloquent;
 
 use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\Model;
 
 /**
- * @template TModel of \Illuminate\Database\Eloquent\Model
+ * @template TModel of Model
  *
  * @extends Builder<TModel>
  */

app/Filament/Admin/Pages/Settings.php

@@ -6,6 +6,7 @@
 use App\Extensions\Avatar\AvatarService;
 use App\Extensions\Captcha\CaptchaService;
 use App\Extensions\OAuth\OAuthService;
+use App\Facades\Activity;
 use App\Models\Backup;
 use App\Notifications\MailTested;
 use App\Traits\EnvironmentWriterTrait;
@@ -46,6 +47,7 @@
 use Illuminate\Support\Facades\Artisan;
 use Illuminate\Support\Facades\Notification as MailNotification;
 use Illuminate\Support\Str;
+use Livewire\Attributes\Locked;
 
 /**
  * @property Schema $form
@@ -75,9 +77,14 @@ class Settings extends Page implements HasSchemas
     /** @var array<mixed>|null */
     public ?array $data = [];
 
+    /** @var array<mixed> Snapshot of normalized form state captured on mount, used to detect which settings changed before saving. */
+    #[Locked]
+    public array $initialSettings = [];
+
     public function mount(): void
     {
         $this->form->fill();
+        $this->initialSettings = $this->sanitizeSettingsData($this->form->getState());
     }
 
     public function boot(OAuthService $oauthService, AvatarService $avatarService, CaptchaService $captchaService, IconFactory $iconFactory): void
@@ -865,8 +872,8 @@ protected function getFormStatePath(): ?string
     public function save(): void
     {
         try {
-            $data = $this->form->getState();
-            unset($data['ConsoleFonts']);
+            $data = $this->sanitizeSettingsData($this->form->getState());
+            $changedSettings = $this->getChangedSettings($this->initialSettings, $data);
 
             $data = array_map(function ($value) {
                 // Convert bools to a string, so they are correctly written to the .env file
@@ -886,6 +893,14 @@ public function save(): void
 
             Artisan::call('queue:restart');
 
+            if (!empty($changedSettings)) {
+                Activity::event('admin:settings.update')
+                    ->actor(user())
+                    ->property('count', count($changedSettings))
+                    ->property('settings', implode(', ', $changedSettings))
+                    ->log();
+            }
+
             $this->redirect($this->getUrl());
 
             Notification::make()
@@ -901,6 +916,63 @@ public function save(): void
         }
     }
 
+    /**
+     * @param  array<mixed>  $data
+     * @return array<mixed>
+     */
+    private function sanitizeSettingsData(array $data): array
+    {
+        unset($data['ConsoleFonts']);
+
+        return $data;
+    }
+
+    /**
+     * @param  array<mixed>  $before
+     * @param  array<mixed>  $after
+     * @return string[]
+     */
+    private function getChangedSettings(array $before, array $after): array
+    {
+        $changed = [];
+
+        foreach (array_unique(array_merge(array_keys($before), array_keys($after))) as $key) {
+            $old = $before[$key] ?? null;
+            $new = $after[$key] ?? null;
+
+            if ($this->normalizeSettingValue($old) !== $this->normalizeSettingValue($new)) {
+                $changed[] = $key;
+            }
+        }
+
+        sort($changed);
+
+        return $changed;
+    }
+
+    /**
+     * Converts a setting value to a normalized string for diffing.
+     * Handles enums, booleans, arrays (JSON-encoded), and scalar values.
+     */
+    private function normalizeSettingValue(mixed $value): string
+    {
+        if ($value instanceof BackedEnum) {
+            return (string) $value->value;
+        }
+
+        if (is_bool($value)) {
+            return $value ? 'true' : 'false';
+        }
+
+        if (is_array($value)) {
+            $json = json_encode($value);
+
+            return $json === false ? '' : $json;
+        }
+
+        return (string) ($value ?? '');
+    }
+
     /** @return array<Action|ActionGroup> */
     protected function getDefaultHeaderActions(): array
     {

app/Filament/Admin/Resources/ActivityLogs/ActivityLogResource.php

@@ -0,0 +1,85 @@
+<?php
+
+namespace App\Filament\Admin\Resources\ActivityLogs;
+
+use App\Enums\TablerIcon;
+use App\Filament\Admin\Resources\ActivityLogs\Pages\ListActivityLogs;
+use App\Models\ActivityLog;
+use App\Traits\Filament\CanCustomizePages;
+use BackedEnum;
+use Filament\Resources\Pages\PageRegistration;
+use Filament\Resources\Resource;
+use Illuminate\Database\Eloquent\Model;
+
+class ActivityLogResource extends Resource
+{
+    use CanCustomizePages;
+
+    protected static ?string $model = ActivityLog::class;
+
+    protected static string|BackedEnum|null $navigationIcon = TablerIcon::ShieldSearch;
+
+    protected static ?int $navigationSort = 10;
+
+    public static function getNavigationLabel(): string
+    {
+        return trans('admin/log.navigation.admin_audit_log');
+    }
+
+    public static function getModelLabel(): string
+    {
+        return trans('admin/log.model_label');
+    }
+
+    public static function getPluralModelLabel(): string
+    {
+        return trans('admin/log.model_label_plural');
+    }
+
+    public static function getNavigationGroup(): ?string
+    {
+        return trans('admin/dashboard.advanced');
+    }
+
+    public static function canCreate(): bool
+    {
+        return false;
+    }
+
+    public static function canEdit(Model $record): bool
+    {
+        return false;
+    }
+
+    public static function canDelete(Model $record): bool
+    {
+        return false;
+    }
+
+    public static function canView(Model $record): bool
+    {
+        return false;
+    }
+
+    public static function canViewAny(): bool
+    {
+        $user = user();
+        if (!$user) {
+            return false;
+        }
+
+        if ($user->isRootAdmin()) {
+            return true;
+        }
+
+        return $user->can('view adminAuditLog') || $user->can('view panelLog');
+    }
+
+    /** @return array<string, PageRegistration> */
+    public static function getDefaultPages(): array
+    {
+        return [
+            'index' => ListActivityLogs::route('/'),
+        ];
+    }
+}

app/Filament/Admin/Resources/ActivityLogs/Pages/ListActivityLogs.php

@@ -0,0 +1,84 @@
+<?php
+
+namespace App\Filament\Admin\Resources\ActivityLogs\Pages;
+
+use App\Enums\TablerIcon;
+use App\Filament\Admin\Resources\ActivityLogs\ActivityLogResource;
+use App\Filament\Components\Tables\Columns\DateTimeColumn;
+use App\Models\ActivityLog;
+use App\Models\User;
+use Filament\Resources\Pages\ListRecords;
+use Filament\Tables\Columns\TextColumn;
+use Filament\Tables\Filters\SelectFilter;
+use Filament\Tables\Table;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Support\HtmlString;
+
+class ListActivityLogs extends ListRecords
+{
+    protected static string $resource = ActivityLogResource::class;
+
+    public function getHeading(): string
+    {
+        return trans('admin/log.navigation.admin_audit_log');
+    }
+
+    public function table(Table $table): Table
+    {
+        return $table
+            ->query(
+                ActivityLog::query()
+                    ->where('event', 'like', 'admin:%')
+                    ->with(['actor'])
+                    ->latest('timestamp')
+            )
+            ->columns([
+                TextColumn::make('actor.username')
+                    ->label(trans('admin/log.table.actor'))
+                    ->state(function (ActivityLog $log): string {
+                        if ($log->actor instanceof User) {
+                            return $log->actor->username;
+                        }
+
+                        return trans('admin/log.table.system');
+                    })
+                    ->searchable(query: function (Builder $query, string $search): Builder {
+                        $escapedSearch = addcslashes($search, '%_\\\\');
+
+                        return $query->whereHas('actor', fn (Builder $q) => $q->where('username', 'like', "%{$escapedSearch}%"));
+                    }),
+                TextColumn::make('event')
+                    ->label(trans('admin/log.table.event'))
+                    ->badge()
+                    ->searchable(),
+                TextColumn::make('description')
+                    ->label(trans('admin/log.table.description'))
+                    ->html()
+                    ->state(fn (ActivityLog $log) => new HtmlString($log->getLabel()))
+                    ->grow(),
+                TextColumn::make('ip')
+                    ->label(trans('admin/log.table.ip'))
+                    ->visibleFrom('lg')
+                    ->visible(fn () => user()?->can('seeIps activityLog')),
+                DateTimeColumn::make('timestamp')
+                    ->label(trans('admin/log.table.timestamp'))
+                    ->sortable()
+                    ->since(),
+            ])
+            ->defaultSort('timestamp', 'desc')
+            ->searchable()
+            ->filters([
+                SelectFilter::make('event')
+                    ->label(trans('admin/log.table.event'))
+                    ->options(fn () => ActivityLog::query()
+                        ->where('event', 'like', 'admin:%')
+                        ->distinct()
+                        ->pluck('event')
+                        ->mapWithKeys(fn (string $event) => [$event => $event])
+                        ->toArray())
+                    ->searchable(),
+            ])
+            ->emptyStateHeading(trans('admin/log.empty_audit_log'))
+            ->emptyStateIcon(TablerIcon::ShieldSearch);
+    }
+}

app/Filament/Admin/Resources/Users/UserResource.php

@@ -489,6 +489,34 @@ function (User $user, string $token) {
                                 ->state(fn (ActivityLog $log) => new HtmlString($log->htmlable())),
                         ]),
                 ]),
+            Tab::make('admin_log')
+                ->visible(function (?User $user): bool {
+                    if (!$user) {
+                        return false;
+                    }
+
+                    $viewer = user();
+
+                    return $viewer?->isRootAdmin() || $viewer?->can('view adminAuditLog');
+                })
+                ->disabledOn('create')
+                ->label(trans('admin/user.tabs.admin_log'))
+                ->icon(TablerIcon::ShieldSearch)
+                ->schema([
+                    Repeater::make('adminLog')
+                        ->hiddenLabel()
+                        ->inlineLabel(false)
+                        ->deletable(false)
+                        ->addable(false)
+                        ->relationship('adminLog', function (Builder $query) {
+                            $query->orderBy('timestamp', 'desc');
+                        })
+                        ->schema([
+                            TextEntry::make('log')
+                                ->hiddenLabel()
+                                ->state(fn (ActivityLog $log) => new HtmlString($log->htmlable())),
+                        ]),
+                ]),
         ];
     }
 

app/Models/ActivityLog.php

@@ -228,7 +228,7 @@ public function wrapProperties(): array
         });
 
         $keys = $properties->keys()->filter(fn ($key) => Str::endsWith($key, '_count'))->values();
-        if ($keys->containsOneItem()) {
+        if ($keys->hasSole()) {
             $properties = $properties->merge(['count' => $properties->get($keys[0])])->except([$keys[0]]);
         }
 

app/Models/Egg.php

@@ -6,6 +6,7 @@
 use App\Exceptions\Service\Egg\HasChildrenException;
 use App\Exceptions\Service\HasActiveServersException;
 use App\Models\Traits\HasIcon;
+use App\Traits\HasAdminActivityLogging;
 use App\Traits\HasValidation;
 use Illuminate\Database\Eloquent\Collection;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -93,6 +94,7 @@
  */
 class Egg extends Model implements Validatable
 {
+    use HasAdminActivityLogging;
     use HasFactory;
     use HasIcon;
     use HasValidation;

app/Models/Node.php

@@ -5,6 +5,7 @@
 use App\Contracts\Validatable;
 use App\Exceptions\Service\HasActiveServersException;
 use App\Repositories\Daemon\DaemonSystemRepository;
+use App\Traits\HasAdminActivityLogging;
 use App\Traits\HasValidation;
 use Exception;
 use Illuminate\Database\Eloquent\Collection;
@@ -95,6 +96,7 @@
  */
 class Node extends Model implements Validatable
 {
+    use HasAdminActivityLogging;
     use HasFactory;
     use HasValidation;
     use Notifiable;