[pull] main from thedevdojo:main - #8

Fix docs link to blade directives

…ire dir

Remove old unused controllers left from Wave v2

Adding fix so that way volt components get added to the default livew…

feat: allow refresh of expired tokens

Shift automatically applies the Laravel coding style - which uses the PSR-12 coding style as a base with some minor additions.

You may customize the code style applied by configuring [Pint](https://laravel.com/docs/pint), [PHP CS Fixer](https://github.com/FriendsOfPHP/PHP-CS-Fixer), or [PHP CodeSniffer](https://github.com/squizlabs/PHP_CodeSniffer) for your project root.

For more information on customizing the code style applied by Shift, [watch this short video](https://laravelshift.com/videos/shift-code-style).

Laravel 8 adopts the tuple syntax for controller actions. Since the old options array is incompatible with this syntax, Shift converted them to use modern, fluent methods.

Laravel Slimmer

PHP 5.5.9 adds the new static `class` property which provides the fully qualified class name. This is preferred over using strings for class names since the `class` property references are checked by PHP.

…wave

refactor: move ActivityLog from App\Models to Wave namespace

….5.6

build(deps): bump tar from 7.5.3 to 7.5.6

feat: add wave:stats command with MRR, subscription, and user analytic

- Remove redundant $fillable and $hidden arrays from App\Models\User
  (identical to parent Wave\User class)
- Remove ~115 lines of commented-out legacy role/permission code from
  wave/src/User.php (replaced by Spatie HasRoles trait)

…icates

fix: Remove duplicate User model definitions and legacy commented code

- Remove unused profile_fields from config/wave.php (config/profile.php is used)
- Increase min_password_length from 5 to 8 for modern security standards
- Delete redundant config/settings.php and consolidate Stripe config into wave.php
- Update payment-form.blade.php to use wave.stripe.publishable_key

…word-security

fix: Consolidate config files and strengthen password requirements

…ces (#350)

* refactor(activity): improve ActivityLog structure and PHP best practices

- Move CleanOldActivityLogs command from app/ to wave/src/Console/Commands/
- Add ActivityLoggerInterface contract for swappable implementations
- Create proper Job class (CreateActivityLog) instead of closure dispatch
- Add HasMany return type to User::activityLogs()
- Add PHPDoc @Property annotations for IDE support
- Fix return type to use ?static for interface compatibility

* simplify: remove ActivityLoggerInterface contract

The interface adds unnecessary complexity for the current use case.

* style: fix linting issues via pint

* refactor: move ProcessScheduledAccountDeletions to wave package

- Move command from app/ to wave/src/Console/Commands/
- Use config('wave.user_model') instead of hardcoded App\Models\User
- Add return type hint

- Test ApiKey model creation, relationships, and casts
- Test unique key constraint enforcement
- Test User::createApiKey() method
- Test User::apiKeys() relationship ordering
- Test cascade delete when user deleted
- Test API token endpoint validation
- Test API settings page authentication and rendering
- Test multi-user API key isolation

21 tests covering the complete API key functionality.

- ChangelogTest: 9 tests covering model, relationships, and read endpoint
- PageTest: 10 tests covering model, relationships, and controller
- NotificationControllerTest: 8 tests covering delete endpoint and relationships

27 tests total, 52 assertions.

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.6...v7.5.7)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump livewire/livewire minimum version from ^3.5 to ^3.6.4 to patch CVE-2025-54068, a critical RCE vulnerability (CVSS 9.2)

* feat: Add plan-based feature limits (quotas)

Implement usage quotas tied to plans for countable features like API keys.

- Add limits JSON column to plans table
- Add HasPlanFeatures trait with featureLimit(), featureUsage(), canUseFeature()
- Add config/limits.php for feature model mappings and defaults
- Add KeyValue field in PlanResource admin for managing limits
- Support unlimited (-1/null), disabled (0), and numeric limits
- Admin bypass by default (configurable)
- In-memory cache for usage counts within request
- 21 comprehensive tests

* feat: Add percentage helper, soft limit warnings, and Blade directives

- Add featureUsagePercent() for progress bar UIs
- Add featureNearLimit() with configurable threshold (default 80%)
- Add Blade directives: @canUseFeature, @featureNearLimit, @featureLimitReached
- Add 7 new tests (28 total)

* perf: Add in-memory plan caching to reduce DB queries

If there are many pages of activities in the activity log, the pagination links expand beyond the limits of its container. Limit the number of links on each side of the pagination indicator with `onEachSide(1)` specified and the alignment is restored.

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.7 to 7.5.9.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.7...v7.5.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Use Filament default filesystem disk setting instead of 'public' hardcoded one.

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.9 to 7.5.11.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.9...v7.5.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [rollup](https://github.com/rollup/rollup) from 4.40.1 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.40.1...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add the ability to choose the currency symbol

* Update wave/database/migrations/2025_10_14_143501_add_currency_column.php

* Plan currency with 3 characters max

* List 4 currency symbols when editing a plan

Bumps [axios](https://github.com/axios/axios) from 1.9.0 to 1.15.2.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.9.0...v1.15.2)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Removed postinstall script from package.json

Make sure the marketing pages reflect light mode so elements appear correctly (primarily logo)

Check if page is marketing page and and remove 'dark' class from document element if so.