core/src/Privacy/Filament/Extensions/CustomerErasureActionsExtension.php

<?php

namespace Modules\Core\Privacy\Filament\Extensions;

use Filament\Actions\Action;
use Filament\Forms\Components\Checkbox;
use Filament\Notifications\Notification;
use Lunar\Admin\Support\Extending\BaseExtension;
use Lunar\Models\Customer;
use Modules\Core\Auth\Models\Staff;
use Modules\Core\Privacy\Services\PrivacyService;

/**
 * Adds "Request erasure" / "Request export" header actions to the Customer
 * resource's edit/view page — the panel entry point for a staff member handling
 * "a customer emailed asking to be forgotten/for their data" without needing
 * tinker/code access. Registered centrally in CorePlugin, layered alongside
 * whatever CustomerResourceExtension a consuming app registers for its own
 * form/table/relations — LunarPanel::extensions() merges per resource (see
 * docs/modules.md "Layering Module and App Configuration"), and this extension
 * deliberately only implements headerActions(), so it never conflicts with an
 * app's own extension for the same resource.
 */
class CustomerErasureActionsExtension extends BaseExtension
{
    public function headerActions(array $actions): array
    {
        return [
            ...$actions,
            Action::make('requestErasure')
                ->label('Request Erasure')
                ->icon('heroicon-o-shield-exclamation')
                ->color('danger')
                ->requiresConfirmation()
                ->modalDescription('Opens a cancellable grace-period erasure request for this Customer account. No linked User\'s login is affected.')
                ->schema([
                    Checkbox::make('immediate')
                        ->label('Erase immediately (skip the 30-day grace period)')
                        ->helperText('Staff-only, for a formal legal request or regulator inquiry that genuinely requires urgency — not a routine deletion. Runs synchronously, cannot be cancelled once submitted.')
                        ->default(false),
                ])
                ->action(function (Customer $record, array $data) {
                    $privacyService = app(PrivacyService::class);

                    if ($data['immediate']) {
                        $privacyService->requestImmediateErasureForCustomer($record, $this->currentStaff());

                        Notification::make()
                            ->title('Customer erased')
                            ->body('Erasure ran immediately — see the Erasure Requests list for the outcome.')
                            ->success()
                            ->send();

                        return;
                    }

                    $privacyService->requestErasureForCustomer($record, $this->currentStaff());

                    Notification::make()
                        ->title('Erasure requested')
                        ->body('The grace period starts now — see the Erasure Requests list.')
                        ->success()
                        ->send();
                }),
            Action::make('requestExport')
                ->label('Request Export')
                ->icon('heroicon-o-arrow-down-tray')
                ->requiresConfirmation()
                ->action(function (Customer $record) {
                    app(PrivacyService::class)->requestExportForCustomer($record);

                    Notification::make()
                        ->title('Export requested')
                        ->body('Generating in the background — see the Export Requests list once it completes.')
                        ->success()
                        ->send();
                }),
        ];
    }

    private function currentStaff(): Staff
    {
        return auth('staff')->user();
    }
}