change queue time and set CloseSessionsJob

.claude/settings.local.json

@@ -26,7 +26,12 @@
       "mcp__playwright__browser_console_messages",
       "mcp__playwright__browser_navigate_back",
       "mcp__playwright__browser_run_code",
-      "mcp__playwright__browser_wait_for"
+      "mcp__playwright__browser_wait_for",
+      "WebFetch(domain:www.bakertilly.nl)",
+      "mcp__playwright__browser_type",
+      "mcp__playwright__browser_hover",
+      "mcp__playwright__browser_evaluate",
+      "mcp__playwright__browser_press_key"
     ]
   }
 }

.env.example

@@ -1,8 +1,8 @@
-APP_NAME=Laravel
+APP_NAME="Go No Go"
 APP_ENV=local
 APP_KEY=
 APP_DEBUG=true
-APP_URL=http://localhost
+APP_URL=http://go-no-go.test
 
 APP_LOCALE=en
 APP_FALLBACK_LOCALE=en
@@ -20,12 +20,12 @@ LOG_STACK=single
 LOG_DEPRECATIONS_CHANNEL=null
 LOG_LEVEL=debug
 
-DB_CONNECTION=sqlite
+DB_CONNECTION=mysql
-# DB_HOST=127.0.0.1
+DB_HOST=127.0.0.1
-# DB_PORT=3306
+DB_PORT=3306
-# DB_DATABASE=laravel
+DB_DATABASE=go-no-go
-# DB_USERNAME=root
+DB_USERNAME=root
-# DB_PASSWORD=
+DB_PASSWORD=
 
 SESSION_DRIVER=database
 SESSION_LIFETIME=120
@@ -63,3 +63,9 @@ AWS_BUCKET=
 AWS_USE_PATH_STYLE_ENDPOINT=false
 
 VITE_APP_NAME="${APP_NAME}"
+
+AZURE_CLIENT_ID=
+AZURE_CLIENT_SECRET=
+AZURE_REDIRECT_URI=/auth/callback
+AZURE_TENANT_ID=common
+NOVA_LICENSE_KEY=

app/Console/Commands/DevMenuCommand.php

@@ -0,0 +1,86 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Console\Commands;
+
+use Illuminate\Console\Command;
+use Symfony\Component\Process\Process;
+
+final class DevMenuCommand extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'menu';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Developer tools menu';
+
+    public function handle(): int
+    {
+        if (! in_array(app()->environment(), ['local', 'testing'])) {
+            $this->error('This command can only be run in local or testing environments.');
+
+            return Command::FAILURE;
+        }
+
+        $this->info('');
+        $this->info('  ╔═══════════════════════════════╗');
+        $this->info('  ║     Go No Go — Dev Tools      ║');
+        $this->info('  ╚═══════════════════════════════╝');
+        $this->info('');
+
+        $choice = $this->choice('Select an action', [
+            0 => 'Exit',
+            1 => 'Fresh migrate, seed & build',
+        ]);
+
+        if ($choice === 'Exit') {
+            $this->info('Bye!');
+
+            return Command::SUCCESS;
+        }
+
+        if ($choice === 'Fresh migrate, seed & build') {
+            $this->freshMigrateAndBuild();
+        }
+
+        return Command::SUCCESS;
+    }
+
+    /**
+     * Runs migrate:fresh with seeding, then runs npm build.
+     *
+     * Displays output from both processes and confirms success or failure.
+     */
+    private function freshMigrateAndBuild(): void
+    {
+        $this->info('');
+        $this->comment('Running migrate:fresh --seed...');
+        $this->call('migrate:fresh', ['--seed' => true]);
+
+        $this->info('');
+        $this->comment('Running npm run build...');
+
+        $process = new Process(['npm', 'run', 'build']);
+        $process->setWorkingDirectory(base_path());
+        $process->setTimeout(120);
+        $process->run(function (string $type, string $output): void {
+            $this->output->write($output);
+        });
+
+        if ($process->isSuccessful()) {
+            $this->info('');
+            $this->info('Environment rebuilt successfully.');
+        } else {
+            $this->error('Build failed.');
+        }
+    }
+}

app/Http/Controllers/Auth/SocialiteController.php

@@ -5,9 +5,12 @@
 namespace App\Http\Controllers\Auth;
 
 use App\Http\Controllers\Controller;
+use App\Models\Role;
 use App\Models\User;
+use App\Services\ActivityLogger;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Arr;
 use Laravel\Socialite\Facades\Socialite;
 
 final class SocialiteController extends Controller
@@ -27,16 +30,27 @@ public function callback(): RedirectResponse
     {
         $azureUser = Socialite::driver('azure')->user();
 
-        $user = User::query()->firstOrCreate(
+        $user = User::query()->updateOrCreate(
             ['email' => $azureUser->getEmail()],
             [
                 'name' => $azureUser->getName(),
-                'password' => null,
+                'azure_id' => $azureUser->getId(),
+                'photo' => $azureUser->getAvatar(),
+                'job_title' => Arr::get($azureUser->user, 'jobTitle'),
+                'department' => Arr::get($azureUser->user, 'department'),
+                'company_name' => Arr::get($azureUser->user, 'companyName'),
+                'phone' => Arr::get($azureUser->user, 'mobilePhone', Arr::get($azureUser->user, 'businessPhones.0')),
             ]
         );
 
+        if ($user->role_id === null) {
+            $user->update(['role_id' => Role::where('name', 'user')->first()->id]);
+        }
+
         auth()->login($user);
 
+        ActivityLogger::log('login', $user->id, metadata: ['email' => $user->email, 'firm_name' => Arr::get($azureUser->user, 'companyName')]);
+
         return redirect('/');
     }
 
@@ -45,6 +59,8 @@ public function callback(): RedirectResponse
      */
     public function logout(Request $request): RedirectResponse
     {
+        ActivityLogger::log('logout', auth()->id());
+
         auth()->logout();
 
         $request->session()->invalidate();

app/Http/Controllers/ScreeningController.php

@@ -7,8 +7,10 @@
 use App\Http\Requests\Screening\UpdateScreeningRequest;
 use App\Models\Category;
 use App\Models\Screening;
+use App\Services\ActivityLogger;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Arr;
 use Inertia\Inertia;
 use Inertia\Response;
 
@@ -23,6 +25,8 @@ public function store(Request $request): RedirectResponse
             'user_id' => auth()->id(),
         ]);
 
+        ActivityLogger::log('screening_started', auth()->id());
+
         return redirect()->route('screening.show', $screening);
     }
 
@@ -44,8 +48,10 @@ public function update(UpdateScreeningRequest $request, Screening $screening): R
     {
         $validated = $request->validated();
 
-        $this->saveAnswers($screening, $validated['answers']);
+        $this->saveAnswers($screening, Arr::get($validated, 'answers'));
-        $this->calculateAndUpdateScore($screening, $validated['answers']);
+        $this->calculateAndUpdateScore($screening, Arr::get($validated, 'answers'));
+
+        ActivityLogger::log('screening_completed', auth()->id(), metadata: ['score' => $screening->score, 'passed' => $screening->passed]);
 
         return redirect()->route('screening.result', $screening);
     }

app/Http/Controllers/SessionController.php

@@ -6,11 +6,16 @@
 
 use App\Http\Requests\Session\UpdateSessionRequest;
 use App\Models\Session;
+use App\Services\ActivityLogger;
 use App\Services\ScoringService;
+use Barryvdh\DomPDF\Facade\Pdf;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Illuminate\Support\Arr;
+use Illuminate\Validation\ValidationException;
 use Inertia\Inertia;
-use Inertia\Response;
+use Inertia\Response as InertiaResponse;
 
 final class SessionController extends Controller
 {
@@ -26,15 +31,17 @@ public function store(Request $request): RedirectResponse
             'status' => 'in_progress',
         ]);
 
+        ActivityLogger::log('session_started', auth()->id(), sessionId: $session->id, categoryId: (int) $request->input('category_id'), metadata: ['category_id' => $request->input('category_id')]);
+
         return redirect()->route('sessions.show', $session);
     }
 
     /**
      * Display the session questionnaire with category, question groups, questions, and existing answers.
      */
-    public function show(Session $session): Response
+    public function show(Session $session): InertiaResponse
     {
-        $session->load('category');
+        $session->load('category', 'user');
 
         $questionGroups = $session->category
             ->questionGroups()
@@ -42,16 +49,14 @@ public function show(Session $session): Response
             ->orderBy('sort_order')
             ->get();
 
-        $answers = $session->answers()->get()->keyBy('question_id');
+        ActivityLogger::log('step_viewed', auth()->id(), sessionId: $session->id, categoryId: $session->category_id, metadata: ['question_group_id' => $questionGroups->first()?->id]);
 
-        $scoringService = new ScoringService;
+        $answers = $session->answers()->get()->keyBy('question_id');
-        $score = $scoringService->calculateScore($session);
 
         return Inertia::render('Session/Show', [
             'session' => $session,
             'questionGroups' => $questionGroups,
             'answers' => $answers,
-            'score' => $score,
         ]);
     }
 
@@ -60,18 +65,16 @@ public function show(Session $session): Response
      */
     public function update(UpdateSessionRequest $request, Session $session): RedirectResponse
     {
+        sleep(3);
+
         $validated = $request->validated();
 
-        if (isset($validated['basic_info'])) {
+        if (Arr::has($validated, 'answers')) {
-            $session->update(['basic_info' => $validated['basic_info']]);
+            $this->saveAnswers($session, Arr::get($validated, 'answers'));
         }
 
-        if (isset($validated['answers'])) {
+        if (Arr::has($validated, 'additional_comments')) {
-            $this->saveAnswers($session, $validated['answers']);
+            $session->update(['additional_comments' => Arr::get($validated, 'additional_comments')]);
-        }
-
-        if (isset($validated['additional_comments'])) {
-            $session->update(['additional_comments' => $validated['additional_comments']]);
         }
 
         if ($request->boolean('complete')) {
@@ -90,10 +93,15 @@ private function saveAnswers(Session $session, array $answers): void
             $session->answers()->updateOrCreate(
                 ['question_id' => (int) $questionId],
                 [
-                    'value' => $answer['value'] ?? null,
+                    'value' => Arr::get($answer, 'value'),
-                    'text_value' => $answer['text_value'] ?? null,
+                    'text_value' => Arr::get($answer, 'text_value'),
                 ]
             );
+
+            ActivityLogger::log('answer_saved', auth()->id(), sessionId: $session->id, categoryId: $session->category_id, metadata: [
+                'question_id' => (int) $questionId,
+                'value' => Arr::get($answer, 'value'),
+            ]);
         }
     }
 
@@ -102,6 +110,8 @@ private function saveAnswers(Session $session, array $answers): void
      */
     private function completeSession(Session $session): RedirectResponse
     {
+        $this->validateSessionCompletion($session);
+
         $scoringService = new ScoringService;
         $score = $scoringService->calculateScore($session);
         $result = $scoringService->determineResult($score);
@@ -113,13 +123,85 @@ private function completeSession(Session $session): RedirectResponse
             'completed_at' => now(),
         ]);
 
+        ActivityLogger::log('session_completed', auth()->id(), sessionId: $session->id, categoryId: $session->category_id, metadata: ['category_id' => $session->category_id, 'score' => $score, 'result' => $result]);
+
         return redirect()->route('sessions.result', $session);
     }
 
+    /**
+     * Validate that all required fields are answered before session completion.
+     */
+    private function validateSessionCompletion(Session $session): void
+    {
+        $session->load(['category.questionGroups.questions', 'answers']);
+
+        $errors = [];
+
+        foreach ($session->category->questionGroups as $questionGroup) {
+            foreach ($questionGroup->questions as $question) {
+                $answer = $session->answers->firstWhere('question_id', $question->id);
+
+                $this->validateRadioAnswer($question, $answer, $errors);
+                $this->validateDetailsAnswer($question, $answer, $errors);
+            }
+        }
+
+        if (Arr::exists($errors, 0)) {
+            throw ValidationException::withMessages([
+                'complete' => $errors,
+            ]);
+        }
+    }
+
+    /**
+     * Validate that radio button questions have an answer selected.
+     */
+    private function validateRadioAnswer($question, $answer, array &$errors): void
+    {
+        $hasRadioButtons = $question->has_yes || $question->has_no || $question->has_na;
+
+        if ($hasRadioButtons && (! $answer || $answer->value === null)) {
+            $errors[] = "Question '{$question->text}' requires an answer.";
+        }
+    }
+
+    /**
+     * Validate that questions with required details have text values provided.
+     */
+    private function validateDetailsAnswer($question, $answer, array &$errors): void
+    {
+        $details = $question->details;
+        $hasRadioButtons = $question->has_yes || $question->has_no || $question->has_na;
+
+        if ($details === 'required') {
+            if (! $answer || empty(trim(Arr::get($answer->toArray(), 'text_value', '')))) {
+                $errors[] = "Question '{$question->text}' requires details to be provided.";
+            }
+        }
+
+        if ($details === 'req_on_yes' && $answer && $answer->value === 'yes') {
+            if (empty(trim(Arr::get($answer->toArray(), 'text_value', '')))) {
+                $errors[] = "Question '{$question->text}' requires details when answered 'Yes'.";
+            }
+        }
+
+        if ($details === 'req_on_no' && $answer && $answer->value === 'no') {
+            if (empty(trim(Arr::get($answer->toArray(), 'text_value', '')))) {
+                $errors[] = "Question '{$question->text}' requires details when answered 'No'.";
+            }
+        }
+
+        if (! $hasRadioButtons && $details !== null && $details !== '' && $details !== 'optional') {
+            if (! $answer || empty(trim(Arr::get($answer->toArray(), 'text_value', '')))) {
+                $errors[] = "Question '{$question->text}' requires a text response.";
+            }
+        }
+    }
+
     /**
      * Display the final session result.
      */
-    public function result(Session $session): Response
+    public function result(Session $session): InertiaResponse
     {
         $session->load('category');
 
@@ -130,4 +212,30 @@ public function result(Session $session): Response
             'categoryName' => $session->category->name,
         ]);
     }
+
+    /**
+     * Generate and download a PDF export of the completed session result.
+     */
+    public function pdf(Session $session): Response
+    {
+        abort_unless($session->user_id === auth()->id(), 403);
+        abort_unless($session->status === 'completed', 403);
+
+        $session->load(['user', 'category', 'answers.question']);
+
+        $questionGroups = $session->category
+            ->questionGroups()
+            ->with(['questions' => fn ($q) => $q->orderBy('sort_order')])
+            ->orderBy('sort_order')
+            ->get();
+
+        ActivityLogger::log('session_pdf_downloaded', $session->user_id, sessionId: $session->id, categoryId: $session->category_id);
+
+        $pdf = Pdf::loadView('pdf.session-result', [
+            'session' => $session,
+            'questionGroups' => $questionGroups,
+        ]);
+
+        return $pdf->download("go-no-go-{$session->id}.pdf");
+    }
 }

app/Http/Middleware/HandleInertiaRequests.php

@@ -6,7 +6,9 @@
 
 use Illuminate\Http\Request;
 use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Gate;
 use Inertia\Middleware;
+use Laravel\Nova\Nova;
 
 final class HandleInertiaRequests extends Middleware
 {
@@ -32,6 +34,7 @@ public function share(Request $request): array
             ...parent::share($request),
             'auth' => [
                 'user' => $this->getAuthenticatedUser(),
+                'logo_href' => $this->getLogoHref(),
             ],
             'flash' => [
                 'success' => fn () => Arr::get($request->session()->all(), 'success'),
@@ -55,6 +58,22 @@ private function getAuthenticatedUser(): ?array
             'id' => $user->id,
             'name' => $user->name,
             'email' => $user->email,
+            'job_title' => $user->job_title,
+            'company_name' => $user->company_name,
         ];
     }
+
+    /**
+     * Determine logo href based on user Nova access.
+     */
+    private function getLogoHref(): string
+    {
+        $user = auth()->user();
+
+        if ($user !== null && Gate::allows('viewNova', $user)) {
+            return Nova::path();
+        }
+
+        return '/';
+    }
 }

app/Http/Requests/Screening/UpdateScreeningRequest.php

@@ -13,7 +13,7 @@ final class UpdateScreeningRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        return true;
+        return $this->route('screening')->user_id === auth()->id();
     }
 
     /**

app/Http/Requests/Session/UpdateSessionRequest.php

@@ -13,7 +13,7 @@ final class UpdateSessionRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        return true;
+        return $this->route('session')->user_id === auth()->id();
     }
 
     /**
@@ -22,11 +22,6 @@ public function authorize(): bool
     public function rules(): array
     {
         return [
-            'basic_info' => ['sometimes', 'required', 'array'],
-            'basic_info.client_name' => ['required_with:basic_info', 'string', 'max:255'],
-            'basic_info.client_contact' => ['required_with:basic_info', 'string', 'max:255'],
-            'basic_info.lead_firm_name' => ['required_with:basic_info', 'string', 'max:255'],
-            'basic_info.lead_firm_contact' => ['required_with:basic_info', 'string', 'max:255'],
             'answers' => ['sometimes', 'array'],
             'answers.*.value' => ['nullable', 'string', 'in:yes,no,not_applicable'],
             'answers.*.text_value' => ['nullable', 'string', 'max:10000'],
@@ -41,20 +36,6 @@ public function rules(): array
     public function messages(): array
     {
         return [
-            'basic_info.required' => 'Basic information is required.',
-            'basic_info.array' => 'Basic information must be a valid data structure.',
-            'basic_info.client_name.required_with' => 'The client name is required.',
-            'basic_info.client_name.string' => 'The client name must be text.',
-            'basic_info.client_name.max' => 'The client name cannot exceed 255 characters.',
-            'basic_info.client_contact.required_with' => 'The client contact is required.',
-            'basic_info.client_contact.string' => 'The client contact must be text.',
-            'basic_info.client_contact.max' => 'The client contact cannot exceed 255 characters.',
-            'basic_info.lead_firm_name.required_with' => 'The lead firm name is required.',
-            'basic_info.lead_firm_name.string' => 'The lead firm name must be text.',
-            'basic_info.lead_firm_name.max' => 'The lead firm name cannot exceed 255 characters.',
-            'basic_info.lead_firm_contact.required_with' => 'The lead firm contact is required.',
-            'basic_info.lead_firm_contact.string' => 'The lead firm contact must be text.',
-            'basic_info.lead_firm_contact.max' => 'The lead firm contact cannot exceed 255 characters.',
             'answers.array' => 'Answers must be a valid data structure.',
             'answers.*.value.in' => 'Answer value must be yes, no, or not_applicable.',
             'answers.*.text_value.string' => 'Answer text must be text.',

app/Jobs/CloseSessionsJob.php

@@ -0,0 +1,40 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Jobs;
+
+use App\Models\Session;
+use App\Services\ActivityLogger;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Queue\Queueable;
+
+final class CloseSessionsJob implements ShouldQueue
+{
+    use Queueable;
+
+    /**
+     * Find all in-progress sessions idle for more than 12 hours and mark them as
+     * 'unfinished' status, logging each closure individually via ActivityLogger.
+     */
+    public function handle(): void
+    {
+        Session::query()
+            ->where('status', 'in_progress')
+            ->where('created_at', '<', now()->subHours(12))
+            ->each(function (Session $session): void {
+                $session->update([
+                    'status' => 'unfinished',
+                    'completed_at' => now(),
+                ]);
+
+                ActivityLogger::log(
+                    'session_auto_closed',
+                    $session->user_id,
+                    sessionId: $session->id,
+                    categoryId: $session->category_id,
+                    metadata: ['reason' => 'idle_12h'],
+                );
+            });
+    }
+}

app/Jobs/LogAppVersionJob.php

@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Jobs;
+
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Queue\Queueable;
+use Illuminate\Support\Facades\Log;
+
+final class LogAppVersionJob implements ShouldQueue
+{
+    use Queueable;
+
+    /**
+     * Log the application version.
+     */
+    public function handle(): void
+    {
+        $version = config('app.version', 'unknown');
+
+        Log::info("Application version: {$version}");
+    }
+}

app/Models/Answer.php

@@ -4,11 +4,14 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
 final class Answer extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */

app/Models/Category.php

@@ -4,11 +4,14 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
 final class Category extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */

app/Models/Log.php

@@ -4,11 +4,14 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
 final class Log extends Model
 {
+    use HasFactory;
+
     /**
      * Disable the updated_at timestamp for append-only logs.
      */

app/Models/Question.php

@@ -4,11 +4,15 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
 
 final class Question extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */
@@ -45,4 +49,12 @@ public function questionGroup(): BelongsTo
     {
         return $this->belongsTo(QuestionGroup::class);
     }
+
+    /**
+     * Get all answers for this question.
+     */
+    public function answers(): HasMany
+    {
+        return $this->hasMany(Answer::class);
+    }
 }

app/Models/QuestionGroup.php

@@ -4,12 +4,15 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
 final class QuestionGroup extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */

app/Models/Role.php

@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+final class Role extends Model
+{
+    protected $fillable = [
+        'name',
+    ];
+
+    /**
+     * Get all users with this role.
+     */
+    public function users(): HasMany
+    {
+        return $this->hasMany(User::class);
+    }
+}

app/Models/Screening.php

@@ -4,12 +4,15 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
 final class Screening extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */

app/Models/ScreeningAnswer.php

@@ -4,11 +4,14 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
 final class ScreeningAnswer extends Model
 {
+    use HasFactory;
+
     /**
      * Fillable attributes for mass assignment.
      */

app/Models/Session.php

@@ -4,12 +4,15 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
 final class Session extends Model
 {
+    use HasFactory;
+
     protected $table = 'questionnaire_sessions';
 
     /**
@@ -22,7 +25,6 @@ final class Session extends Model
         'status',
         'score',
         'result',
-        'basic_info',
         'additional_comments',
         'completed_at',
     ];
@@ -37,7 +39,6 @@ protected function casts(): array
             'category_id' => 'integer',
             'screening_id' => 'integer',
             'score' => 'integer',
-            'basic_info' => 'array',
             'completed_at' => 'datetime',
         ];
     }

app/Models/User.php

@@ -5,6 +5,7 @@
 namespace App\Models;
 
 use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
@@ -23,6 +24,13 @@ final class User extends Authenticatable
         'name',
         'email',
         'password',
+        'azure_id',
+        'photo',
+        'job_title',
+        'department',
+        'company_name',
+        'phone',
+        'role_id',
     ];
 
     /**
@@ -33,6 +41,7 @@ final class User extends Authenticatable
     protected $hidden = [
         'password',
         'remember_token',
+        'azure_id',
     ];
 
     /**
@@ -45,9 +54,18 @@ protected function casts(): array
         return [
             'email_verified_at' => 'datetime',
             'password' => 'hashed',
+            'role_id' => 'integer',
         ];
     }
 
+    /**
+     * Get the role assigned to this user.
+     */
+    public function role(): BelongsTo
+    {
+        return $this->belongsTo(Role::class);
+    }
+
     /**
      * Get all sessions for this user.
      */

app/Nova/Actions/DownloadExcel.php

@@ -0,0 +1,73 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova\Actions;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Arr;
+use Maatwebsite\LaravelNovaExcel\Actions\DownloadExcel as BaseDownloadExcel;
+
+// Fixes Nova 5 incompatibility where field names are PendingTranslation objects instead of strings.
+final class DownloadExcel extends BaseDownloadExcel
+{
+    protected $onlyIndexFields = false;
+    /**
+     * @param  Model|mixed  $row
+     */
+    public function map($row): array
+    {
+        $only   = array_map('strval', $this->getOnly());
+        $except = $this->getExcept();
+
+        if ($row instanceof Model) {
+            if (!$this->onlyIndexFields && $except === null && (!is_array($only) || count($only) === 0)) {
+                $except = $row->getHidden();
+            }
+
+            $row->setHidden([]);
+            $row = $this->replaceFieldValuesWhenOnResource($row, $only);
+        }
+
+        if (is_array($only) && count($only) > 0) {
+            $row = Arr::only($row, $only);
+        }
+
+        if (is_array($except) && count($except) > 0) {
+            $row = Arr::except($row, $except);
+        }
+
+        return $row;
+    }
+
+    protected function replaceFieldValuesWhenOnResource(Model $model, array $only = []): array
+    {
+        $resource = $this->resolveResource($model);
+        $fields   = $this->resourceFields($resource);
+
+        $row = [];
+        foreach ($fields as $field) {
+            if (!$this->isExportableField($field)) {
+                continue;
+            }
+
+            if (\in_array($field->attribute, $only, true)) {
+                $row[$field->attribute] = $field->value;
+            } elseif (\in_array((string) $field->name, $only, true)) {
+                $row[(string) $field->name] = $field->value;
+            }
+        }
+
+        foreach (array_diff($only, array_keys($row)) as $attribute) {
+            if ($model->{$attribute}) {
+                $row[$attribute] = $model->{$attribute};
+            } else {
+                $row[$attribute] = '';
+            }
+        }
+
+        $row = array_merge(array_flip($only), $row);
+
+        return $row;
+    }
+}

app/Nova/AnswerResource.php

@@ -0,0 +1,158 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Fields\Textarea;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use App\Nova\Actions\DownloadExcel;
+
+final class AnswerResource extends Resource
+{
+
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Answer>
+     */
+    public static string $model = \App\Models\Answer::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'id';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'value'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = false;
+
+    /**
+     * The relationships that should be eager loaded on index queries.
+     *
+     * @var array
+     */
+    public static $with = ['session', 'question'];
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Answers';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Answer';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            BelongsTo::make('Session', 'session', SessionResource::class)
+                ->sortable()
+                ->filterable()
+                ->readonly()
+                ->help('The questionnaire session this answer belongs to.'),
+
+            BelongsTo::make('Question', 'question', QuestionResource::class)
+                ->sortable()
+                ->filterable()
+                ->readonly()
+                ->help('The question that was answered.'),
+
+            Text::make('Value')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->readonly()
+                ->help('The selected answer: "yes", "no", or "not_applicable". Empty for open text questions.'),
+
+            Textarea::make('Text Value')
+                ->alwaysShow()
+                ->readonly()
+                ->help('Any written details or free text the user provided for this question.'),
+
+            DateTime::make('Created At')
+                ->exceptOnForms()
+                ->sortable()
+                ->filterable()
+                ->help('When this answer was first saved.'),
+
+            DateTime::make('Updated At')
+                ->exceptOnForms()
+                ->sortable()
+                ->filterable()
+                ->help('When this answer was last changed.'),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/CategoryResource.php

@@ -0,0 +1,132 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Number;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use App\Nova\Actions\DownloadExcel;
+
+final class CategoryResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Category>
+     */
+    public static string $model = \App\Models\Category::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'name';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'name'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Categories';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Category';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            Text::make('Name')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->help('The name of this assessment category, such as Audit, Tax, or Legal.')
+                ->rules('required', 'max:255'),
+
+            Number::make('Sort Order')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->help('Controls the display order of categories. Lower numbers appear first.')
+                ->rules('required', 'integer'),
+
+            HasMany::make('Question Groups', 'questionGroups', QuestionGroupResource::class),
+
+            HasMany::make('Sessions', 'sessions', SessionResource::class),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/Dashboards/Main.php

@@ -1,11 +1,16 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Nova\Dashboards;
 
-use Laravel\Nova\Cards\Help;
+use App\Nova\Metrics\ScreeningsTrend;
+use App\Nova\Metrics\SessionsTrend;
+use App\Nova\Metrics\TotalScreenings;
+use App\Nova\Metrics\TotalSessions;
 use Laravel\Nova\Dashboards\Main as Dashboard;
 
-class Main extends Dashboard
+final class Main extends Dashboard
 {
     /**
      * Get the cards for the dashboard.
@@ -15,7 +20,10 @@ class Main extends Dashboard
     public function cards(): array
     {
         return [
-            new Help,
+            new TotalSessions,
+            new TotalScreenings,
+            new SessionsTrend,
+            new ScreeningsTrend,
         ];
     }
 }

app/Nova/LogResource.php

@@ -0,0 +1,167 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\Code;
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use App\Nova\Actions\DownloadExcel;
+
+final class LogResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Log>
+     */
+    public static string $model = \App\Models\Log::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'action';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'action'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * The group associated with the resource.
+     *
+     * @var string
+     */
+    public static $group = 'Analytics';
+
+    /**
+     * The relationships that should be eager loaded on index queries.
+     *
+     * @var array
+     */
+    public static $with = ['user', 'session', 'category'];
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Logs';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Log';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            BelongsTo::make('User', 'user', User::class)
+                ->nullable()
+                ->sortable()
+                ->filterable()
+                ->rules('nullable')
+                ->help('The user who performed this action. May be empty for system events.'),
+
+            BelongsTo::make('Session', 'session', SessionResource::class)
+                ->nullable()
+                ->sortable()
+                ->filterable()
+                ->rules('nullable')
+                ->help('The questionnaire session related to this action, if any.'),
+
+            BelongsTo::make('Category', 'category', CategoryResource::class)
+                ->nullable()
+                ->sortable()
+                ->filterable()
+                ->rules('nullable')
+                ->help('The assessment category related to this action, if any.'),
+
+            Text::make('Action')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('required', 'max:255')
+                ->help('What happened, e.g. "login", "session_started", "answer_saved", "screening_completed".'),
+
+            Code::make('Metadata')
+                ->json()
+                ->rules('nullable')
+                ->help('Additional details about this action in a structured format.'),
+
+            DateTime::make('Created At')
+                ->exceptOnForms()
+                ->sortable()
+                ->filterable()
+                ->help('When this action occurred.'),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/Metrics/ScreeningsTrend.php

@@ -0,0 +1,33 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova\Metrics;
+
+use App\Models\Screening;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use Laravel\Nova\Metrics\Trend;
+
+final class ScreeningsTrend extends Trend
+{
+    public ?int $cacheFor = null;
+
+    public function calculate(NovaRequest $request): mixed
+    {
+        return $this->countByDays($request, Screening::class);
+    }
+
+    public function name(): string
+    {
+        return 'Screenings';
+    }
+
+    public function ranges(): array
+    {
+        return [
+            30 => '30 Days',
+            60 => '60 Days',
+            90 => '90 Days',
+        ];
+    }
+}

app/Nova/Metrics/SessionsTrend.php

@@ -0,0 +1,33 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova\Metrics;
+
+use App\Models\Session;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use Laravel\Nova\Metrics\Trend;
+
+final class SessionsTrend extends Trend
+{
+    public function calculate(NovaRequest $request): mixed
+    {
+        return $this->countByDays($request, Session::class);
+    }
+
+    public function name(): string
+    {
+        return 'Sessions';
+    }
+
+    public function ranges(): array
+    {
+        return [
+            30 => '30 Days',
+            60 => '60 Days',
+            90 => '90 Days',
+        ];
+    }
+
+    public $cacheFor = null;
+}

app/Nova/Metrics/TotalScreenings.php

@@ -0,0 +1,47 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova\Metrics;
+
+use App\Models\Screening;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use Laravel\Nova\Metrics\Value;
+
+final class TotalScreenings extends Value
+{
+    /**
+     * Calculate the value of the metric.
+     */
+    public function calculate(NovaRequest $request): mixed
+    {
+        return $this->count($request, Screening::class);
+    }
+
+    /**
+     * Get the displayable name of the metric.
+     */
+    public function name(): string
+    {
+        return 'Total Screenings';
+    }
+
+    /**
+     * Get the ranges available for the metric.
+     */
+    public function ranges(): array
+    {
+        return [
+            30 => '30 Days',
+            60 => '60 Days',
+            365 => '365 Days',
+            'TODAY' => 'Today',
+            'ALL' => 'All Time',
+        ];
+    }
+
+    /**
+     * Determine the amount of time the results should be cached.
+     */
+    public $cacheFor = null;
+}

app/Nova/Metrics/TotalSessions.php

@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova\Metrics;
+
+use App\Models\Session;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use Laravel\Nova\Metrics\Value;
+
+final class TotalSessions extends Value
+{
+    public function calculate(NovaRequest $request): mixed
+    {
+        return $this->count($request, Session::class);
+    }
+
+    public function name(): string
+    {
+        return 'Total Sessions';
+    }
+
+    public function ranges(): array
+    {
+        return [
+            30 => '30 Days',
+            60 => '60 Days',
+            365 => '365 Days',
+            'TODAY' => 'Today',
+            'ALL' => 'All Time',
+        ];
+    }
+
+    public $cacheFor = null;
+}

app/Nova/QuestionGroupResource.php

@@ -0,0 +1,146 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Number;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Fields\Textarea;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use App\Nova\Actions\DownloadExcel;
+
+final class QuestionGroupResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\QuestionGroup>
+     */
+    public static string $model = \App\Models\QuestionGroup::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'name';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'name'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Question Groups';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Question Group';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            BelongsTo::make('Category', 'category', CategoryResource::class)
+                ->sortable()
+                ->filterable()
+                ->rules('required')
+                ->help('The assessment category this group of questions belongs to, such as Audit or Tax.'),
+
+            Text::make('Name')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('required', 'max:255')
+                ->help('The title of this question group, shown as a section heading in the questionnaire.'),
+
+            Number::make('Sort Order')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('required', 'integer')
+                ->help('Controls the display order within the category. Lower numbers appear first.'),
+
+            Textarea::make('Description')
+                ->rules('nullable')
+                ->help('An optional description shown to users at the top of this question group.'),
+
+            Textarea::make('Scoring Instructions')
+                ->rules('nullable')
+                ->help('Optional instructions shown to users explaining how this section is scored, e.g. "If you answer yes, you will score 1 point."'),
+
+            HasMany::make('Questions', 'questions', QuestionResource::class),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/QuestionResource.php

@@ -0,0 +1,180 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use App\Nova\Actions\DownloadExcel;
+use Illuminate\Support\Str;
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\Boolean;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Number;
+use Laravel\Nova\Fields\Select;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Fields\Textarea;
+use Laravel\Nova\Http\Requests\NovaRequest;
+
+final class QuestionResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Question>
+     */
+    public static string $model = \App\Models\Question::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'text';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'text'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * The group associated with the resource.
+     *
+     * @var string
+     */
+    public static $group = 'Questionnaire';
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Questions';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Question';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            Text::make('Question', 'text')
+                ->displayUsing(fn ($value) => Str::limit($value, 40))
+                ->onlyOnIndex()
+                ->sortable(),
+
+            BelongsTo::make('Question Group', 'questionGroup', QuestionGroupResource::class)
+                ->sortable()
+                ->filterable()
+                ->help('The group this question belongs to. Questions are shown together by group in the questionnaire.'),
+
+            Textarea::make('Text')
+                ->rules('required')
+                ->updateRules('required')
+                ->help('The full question text shown to the user in the questionnaire.'),
+
+            Boolean::make('Has Yes')
+                ->sortable()
+                ->filterable()
+                ->help('When enabled, a "Yes" answer option is shown for this question.'),
+
+            Boolean::make('Has No')
+                ->sortable()
+                ->filterable()
+                ->help('When enabled, a "No" answer option is shown for this question.'),
+
+            Boolean::make('Has NA', 'has_na')
+                ->sortable()
+                ->filterable()
+                ->help('When enabled, a "Not Applicable" answer option is shown for this question.'),
+
+            Select::make('Details')
+                ->options([
+                    'optional' => 'Optional',
+                    'required' => 'Required',
+                    'req_on_yes' => 'Required on Yes',
+                    'req_on_no' => 'Required on No',
+                ])
+                ->displayUsingLabels()
+                ->nullable()
+                ->sortable()
+                ->filterable()
+                ->help('Controls when the user is asked for additional details. "Required" always asks, "Optional" lets the user choose, "Required on Yes/No" only asks when that answer is selected.'),
+
+            Number::make('Sort Order')
+                ->sortable()
+                ->filterable()
+                ->help('Controls the display order within the question group. Lower numbers appear first.'),
+
+            Boolean::make('Is Scored')
+                ->sortable()
+                ->filterable()
+                ->help('When enabled, this question counts toward the total score. A "Yes" answer scores 1 point.'),
+
+            HasMany::make('Answers', 'answers', AnswerResource::class),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/Resource.php

@@ -9,6 +9,17 @@
 
 abstract class Resource extends NovaResource
 {
+    public static function perPageOptions()
+    {
+        return [50, 100, 150];
+    }
+
+    public static function perPageViaRelationshipOptions()
+    {
+        return [10, 25, 50];
+    }
+
+
     /**
      * Build an "index" query for the given resource.
      */

app/Nova/RoleResource.php

@@ -0,0 +1,75 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Http\Requests\NovaRequest;
+
+final class RoleResource extends Resource
+{
+    public static string $model = \App\Models\Role::class;
+
+    public static $title = 'name';
+
+    public static $search = ['id', 'name'];
+
+    public static $displayInNavigation = false;
+
+    public static function label(): string
+    {
+        return 'Roles';
+    }
+
+    public static function singularLabel(): string
+    {
+        return 'Role';
+    }
+
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            Text::make('Name')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('required', 'max:255'),
+
+            DateTime::make('Created At')
+                ->exceptOnForms()
+                ->sortable(),
+
+            DateTime::make('Updated At')
+                ->exceptOnForms()
+                ->sortable(),
+
+            HasMany::make('Users', 'users', User::class),
+        ];
+    }
+
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    public function actions(NovaRequest $request): array
+    {
+        return [];
+    }
+}

app/Nova/ScreeningResource.php

@@ -0,0 +1,156 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\Boolean;
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Number;
+use Laravel\Nova\Http\Requests\NovaRequest;
+use App\Nova\Actions\DownloadExcel;
+
+final class ScreeningResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Screening>
+     */
+    public static string $model = \App\Models\Screening::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'id';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * The group associated with the resource.
+     *
+     * @var string
+     */
+    public static $group = 'Questionnaire';
+
+    /**
+     * The relationships that should be eager loaded on index queries.
+     *
+     * @var array
+     */
+    public static $with = ['user'];
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Screenings';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Screening';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            BelongsTo::make('User', 'user', User::class)
+                ->sortable()
+                ->filterable()
+                ->rules('required')
+                ->help('The person who completed this pre-screening.'),
+
+            Number::make('Score')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('required', 'integer')
+                ->help('The number of "Yes" answers out of 10 pre-screening questions.'),
+
+            Boolean::make('Passed')
+                ->sortable()
+                ->filterable()
+                ->rules('required', 'boolean')
+                ->help('Whether the user scored 5 or more points and was allowed to continue to the full questionnaire.'),
+
+            DateTime::make('Created At')
+                ->exceptOnForms()
+                ->sortable()
+                ->filterable()
+                ->help('When this pre-screening was started.'),
+
+            HasMany::make('Sessions', 'sessions', SessionResource::class),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/SessionResource.php

@@ -0,0 +1,193 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use App\Nova\Actions\DownloadExcel;
+use Laravel\Nova\Fields\BelongsTo;
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\HasMany;
+use Laravel\Nova\Fields\ID;
+use Laravel\Nova\Fields\Number;
+use Laravel\Nova\Fields\Select;
+use Laravel\Nova\Fields\Textarea;
+use Laravel\Nova\Http\Requests\NovaRequest;
+
+final class SessionResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Session>
+     */
+    public static string $model = \App\Models\Session::class;
+
+    /**
+     * The single value that should be used to represent the resource when being displayed.
+     *
+     * @var string
+     */
+    public static $title = 'id';
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['id', 'status', 'result'];
+
+    /**
+     * Indicates if the resource should be displayed in the sidebar.
+     *
+     * @var bool
+     */
+    public static $displayInNavigation = true;
+
+    /**
+     * The group associated with the resource.
+     *
+     * @var string
+     */
+    public static $group = 'Questionnaire';
+
+    /**
+     * The relationships that should be eager loaded on index queries.
+     *
+     * @var array
+     */
+    public static $with = ['user', 'category', 'screening'];
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Sessions';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Session';
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return [
+            ID::make()->sortable(),
+
+            BelongsTo::make('User', 'user', User::class)
+                ->sortable()
+                ->filterable()
+                ->rules('required')
+                ->help('The person who started this questionnaire session.'),
+
+            BelongsTo::make('Category', 'category', CategoryResource::class)
+                ->sortable()
+                ->filterable()
+                ->rules('required')
+                ->help('The assessment category for this session, such as Audit or Tax.'),
+
+            BelongsTo::make('Screening', 'screening', ScreeningResource::class)
+                ->nullable()
+                ->sortable()
+                ->filterable()
+                ->rules('nullable')
+                ->help('The pre-screening that was completed before starting this session.'),
+
+            Select::make('Status')
+                ->options([
+                    'in_progress' => 'In Progress',
+                    'completed' => 'Completed',
+                    'unfinished' => 'Unfinished',
+                    'abandoned' => 'Abandoned',
+                ])
+                ->displayUsingLabels()
+                ->sortable()
+                ->filterable()
+                ->help('The current state of this session. "In Progress" means the user has not yet submitted, "Completed" means submitted, "Unfinished" means the session was auto-closed after inactivity, "Abandoned" means the user left without finishing.'),
+
+            Number::make('Score')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->rules('nullable', 'integer')
+                ->help('The total score from all scored questions. Only "Yes" answers count as points.'),
+
+            Select::make('Result')
+                ->options([
+                    'go' => 'Go',
+                    'no_go' => 'No Go',
+                    'consult_leadership' => 'Consult Leadership',
+                ])
+                ->displayUsingLabels()
+                ->sortable()
+                ->filterable()
+                ->help('The final outcome based on the score. "Go" (10+ points) means pursue the opportunity, "Consult Leadership" (5-9 points) means seek advice, "No Go" (1-4 points) means do not pursue.'),
+
+            Textarea::make('Additional Comments')
+                ->rules('nullable')
+                ->help('Any extra notes the user added at the end of the questionnaire.'),
+
+            DateTime::make('Completed At')
+                ->sortable()
+                ->filterable()
+                ->rules('nullable')
+                ->help('The date and time when the user submitted this session.'),
+
+            HasMany::make('Answers', 'answers', AnswerResource::class),
+
+            HasMany::make('Logs', 'logs', LogResource::class),
+        ];
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [
+            new DownloadExcel,
+        ];
+    }
+}

app/Nova/User.php

@@ -1,15 +1,18 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Nova;
 
 use Illuminate\Http\Request;
 use Laravel\Nova\Auth\PasswordValidationRules;
+use Laravel\Nova\Fields\BelongsTo;
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Password;
 use Laravel\Nova\Fields\Text;
 use Laravel\Nova\Http\Requests\NovaRequest;
 
-class User extends Resource
+final class User extends Resource
 {
     use PasswordValidationRules;
 
@@ -33,7 +36,7 @@ class User extends Resource
      * @var array
      */
     public static $search = [
-        'id', 'name', 'email',
+        'id', 'name', 'email', 'department', 'job_title',
     ];
 
     /**
@@ -46,20 +49,55 @@ public function fields(NovaRequest $request): array
         return [
             ID::make()->sortable(),
 
+            BelongsTo::make('Role', 'role', RoleResource::class)
+                ->sortable()
+                ->filterable()
+                ->help('The user\'s role, which controls what they can access in the admin panel.'),
+
             Text::make('Name')
                 ->sortable()
-                ->rules('required', 'max:255'),
+                ->rules('required', 'max:255')
+                ->help('The user\'s full name, imported from Azure AD when they first log in.'),
 
             Text::make('Email')
                 ->sortable()
                 ->rules('required', 'email', 'max:254')
                 ->creationRules('unique:users,email')
-                ->updateRules('unique:users,email,{{resourceId}}'),
+                ->updateRules('unique:users,email,{{resourceId}}')
+                ->help('The user\'s email address, used to identify them when logging in via Azure AD.'),
+
+            Text::make('Azure ID', 'azure_id')
+                ->onlyOnDetail()
+                ->copyable()
+                ->help('A unique identifier from Azure AD. Set automatically when the user logs in.'),
+
+            Text::make('Photo', 'photo')
+                ->onlyOnDetail()
+                ->copyable()
+                ->help('A link to the user\'s profile photo from Azure AD.'),
+
+            Text::make('Job Title', 'job_title')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->help('The user\'s job title, imported from Azure AD.'),
+
+            Text::make('Department')
+                ->sortable()
+                ->filterable()
+                ->copyable()
+                ->help('The department the user belongs to, imported from Azure AD.'),
+
+            Text::make('Phone')
+                ->sortable()
+                ->copyable()
+                ->help('The user\'s phone number, imported from Azure AD.'),
 
             Password::make('Password')
                 ->onlyOnForms()
                 ->creationRules($this->passwordRules())
-                ->updateRules($this->optionalPasswordRules()),
+                ->updateRules($this->optionalPasswordRules())
+                ->help('Only needed for admin panel access. Regular users log in via Azure AD and do not need a password.'),
         ];
     }
 

app/Policies/AnswerPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Answer;
+use App\Models\User;
+
+final class AnswerPolicy
+{
+    /**
+     * Determine whether the user can view any answers.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the answer.
+     */
+    public function view(User $user, Answer $answer): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create answers.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the answer.
+     */
+    public function update(User $user, Answer $answer): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the answer.
+     */
+    public function delete(User $user, Answer $answer): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the answer.
+     */
+    public function restore(User $user, Answer $answer): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the answer.
+     */
+    public function forceDelete(User $user, Answer $answer): bool
+    {
+        return false;
+    }
+}

app/Policies/CategoryPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Category;
+use App\Models\User;
+
+final class CategoryPolicy
+{
+    /**
+     * Determine whether the user can view any categories.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the category.
+     */
+    public function view(User $user, Category $category): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create categories.
+     */
+    public function create(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can update the category.
+     */
+    public function update(User $user, Category $category): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can delete the category.
+     */
+    public function delete(User $user, Category $category): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the category.
+     */
+    public function restore(User $user, Category $category): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the category.
+     */
+    public function forceDelete(User $user, Category $category): bool
+    {
+        return false;
+    }
+}

app/Policies/LogPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Log;
+use App\Models\User;
+
+final class LogPolicy
+{
+    /**
+     * Determine whether the user can view any logs.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the log.
+     */
+    public function view(User $user, Log $log): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create logs.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the log.
+     */
+    public function update(User $user, Log $log): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the log.
+     */
+    public function delete(User $user, Log $log): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the log.
+     */
+    public function restore(User $user, Log $log): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the log.
+     */
+    public function forceDelete(User $user, Log $log): bool
+    {
+        return false;
+    }
+}

app/Policies/QuestionGroupPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\QuestionGroup;
+use App\Models\User;
+
+final class QuestionGroupPolicy
+{
+    /**
+     * Determine whether the user can view any question groups.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the question group.
+     */
+    public function view(User $user, QuestionGroup $questionGroup): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create question groups.
+     */
+    public function create(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can update the question group.
+     */
+    public function update(User $user, QuestionGroup $questionGroup): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can delete the question group.
+     */
+    public function delete(User $user, QuestionGroup $questionGroup): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the question group.
+     */
+    public function restore(User $user, QuestionGroup $questionGroup): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the question group.
+     */
+    public function forceDelete(User $user, QuestionGroup $questionGroup): bool
+    {
+        return false;
+    }
+}

app/Policies/QuestionPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Question;
+use App\Models\User;
+
+final class QuestionPolicy
+{
+    /**
+     * Determine whether the user can view any questions.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the question.
+     */
+    public function view(User $user, Question $question): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create questions.
+     */
+    public function create(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can update the question.
+     */
+    public function update(User $user, Question $question): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can delete the question.
+     */
+    public function delete(User $user, Question $question): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the question.
+     */
+    public function restore(User $user, Question $question): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the question.
+     */
+    public function forceDelete(User $user, Question $question): bool
+    {
+        return false;
+    }
+}

app/Policies/ScreeningPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Screening;
+use App\Models\User;
+
+final class ScreeningPolicy
+{
+    /**
+     * Determine whether the user can view any screenings.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the screening.
+     */
+    public function view(User $user, Screening $screening): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create screenings.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the screening.
+     */
+    public function update(User $user, Screening $screening): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the screening.
+     */
+    public function delete(User $user, Screening $screening): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the screening.
+     */
+    public function restore(User $user, Screening $screening): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the screening.
+     */
+    public function forceDelete(User $user, Screening $screening): bool
+    {
+        return false;
+    }
+}

app/Policies/SessionPolicy.php

@@ -0,0 +1,67 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Session;
+use App\Models\User;
+
+final class SessionPolicy
+{
+    /**
+     * Determine whether the user can view any sessions.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the session.
+     */
+    public function view(User $user, Session $session): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create sessions.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the session.
+     */
+    public function update(User $user, Session $session): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the session.
+     */
+    public function delete(User $user, Session $session): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the session.
+     */
+    public function restore(User $user, Session $session): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the session.
+     */
+    public function forceDelete(User $user, Session $session): bool
+    {
+        return false;
+    }
+}

app/Providers/AppServiceProvider.php

@@ -1,10 +1,15 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Providers;
 
+use Illuminate\Support\Facades\Event;
 use Illuminate\Support\ServiceProvider;
+use SocialiteProviders\Azure\AzureExtendSocialite;
+use SocialiteProviders\Manager\SocialiteWasCalled;
 
-class AppServiceProvider extends ServiceProvider
+final class AppServiceProvider extends ServiceProvider
 {
     /**
      * Register any application services.
@@ -16,9 +21,10 @@ public function register(): void
 
     /**
      * Bootstrap any application services.
+     * Registers the Microsoft Azure Socialite provider for SSO authentication.
      */
     public function boot(): void
     {
-        //
+        Event::listen(SocialiteWasCalled::class, AzureExtendSocialite::class.'@handle');
     }
 }

app/Providers/NovaServiceProvider.php

@@ -3,8 +3,18 @@
 namespace App\Providers;
 
 use App\Models\User;
+use App\Nova\CategoryResource;
+use App\Nova\Dashboards\Main;
+use App\Nova\LogResource;
+use App\Nova\QuestionGroupResource;
+use App\Nova\QuestionResource;
+use App\Nova\ScreeningResource;
+use App\Nova\SessionResource;
+use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Gate;
 use Laravel\Fortify\Features;
+use Laravel\Nova\Menu\MenuItem;
+use Laravel\Nova\Menu\MenuSection;
 use Laravel\Nova\Nova;
 use Laravel\Nova\NovaApplicationServiceProvider;
 
@@ -17,7 +27,27 @@ public function boot(): void
     {
         parent::boot();
 
-        //
+        Nova::mainMenu(function (Request $request) {
+            return [
+                MenuSection::dashboard(Main::class)->icon('home'),
+
+                MenuSection::make('Questionnaire', [
+                    MenuItem::resource(QuestionResource::class),
+                    MenuItem::resource(QuestionGroupResource::class),
+                    MenuItem::resource(CategoryResource::class),
+                    MenuItem::resource(SessionResource::class),
+                    MenuItem::resource(ScreeningResource::class),
+                ])->icon('clipboard-document-list')->collapsible(),
+
+                MenuSection::make('Logs', [
+                    MenuItem::resource(LogResource::class),
+                ])->icon('chart-bar')->collapsible(),
+
+                MenuSection::make('Users', [
+                    MenuItem::resource(\App\Nova\User::class),
+                ])->icon('users')->collapsible(),
+            ];
+        });
     }
 
     /**
@@ -40,7 +70,7 @@ protected function fortify(): void
     protected function routes(): void
     {
         Nova::routes()
-            ->withAuthenticationRoutes(default: true)
+            ->withAuthenticationRoutes(default: false)
             ->withPasswordResetRoutes()
             ->withEmailVerificationRoutes()
             ->register();
@@ -54,9 +84,7 @@ protected function routes(): void
     protected function gate(): void
     {
         Gate::define('viewNova', function (User $user) {
-            return in_array($user->email, [
+            return $user->role?->name === 'admin';
-                'jonathan@blijnder.nl',
-            ]);
         });
     }
 

app/Services/ActivityLogger.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Services;
+
+use App\Models\Log;
+
+final class ActivityLogger
+{
+    /**
+     * Log an activity to the database.
+     */
+    public static function log(
+        string $action,
+        ?int $userId = null,
+        ?int $sessionId = null,
+        ?int $categoryId = null,
+        ?array $metadata = null,
+    ): void {
+        Log::create([
+            'user_id' => $userId,
+            'session_id' => $sessionId,
+            'category_id' => $categoryId,
+            'action' => $action,
+            'metadata' => $metadata,
+        ]);
+    }
+}

bootstrap/app.php

@@ -12,6 +12,9 @@
         commands: __DIR__.'/../routes/console.php',
         health: '/up',
     )
+    ->withSchedule(function (\Illuminate\Console\Scheduling\Schedule $schedule): void {
+        $schedule->job(\App\Jobs\CloseSessionsJob::class)->hourly();
+    })
     ->withMiddleware(function (Middleware $middleware): void {
         $middleware->web(append: [
             \App\Http\Middleware\HandleInertiaRequests::class,
@@ -22,5 +25,19 @@
         ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
-        //
+        $exceptions->respond(function (\Symfony\Component\HttpFoundation\Response $response, \Throwable $exception, \Illuminate\Http\Request $request) {
+            if (! app()->environment('local') && in_array($response->getStatusCode(), [403, 404, 500, 503])) {
+                return \Inertia\Inertia::render('ErrorPage', ['status' => $response->getStatusCode()])
+                    ->toResponse($request)
+                    ->setStatusCode($response->getStatusCode());
+            }
+
+            if ($response->getStatusCode() === 419) {
+                return back()->with([
+                    'message' => 'The page expired, please try again.',
+                ]);
+            }
+
+            return $response;
+        });
     })->create();

composer.json

@@ -6,12 +6,15 @@
     "keywords": ["laravel", "framework"],
     "license": "MIT",
     "require": {
-        "php": "^8.2",
+        "php": "^8.4",
+        "barryvdh/laravel-dompdf": "^3.1",
         "inertiajs/inertia-laravel": "^2.0",
         "laravel/framework": "^12.0",
         "laravel/nova": "^5.0",
         "laravel/socialite": "^5.24",
-        "laravel/tinker": "^2.10.1"
+        "laravel/tinker": "^2.10.1",
+        "maatwebsite/laravel-nova-excel": "^1.3",
+        "socialiteproviders/microsoft-azure": "^5.2"
     },
     "require-dev": {
         "fakerphp/faker": "^1.23",

config/app.php

@@ -15,6 +15,8 @@
 
     'name' => env('APP_NAME', 'Laravel'),
 
+    'version' => '1.0.0',
+
     /*
     |--------------------------------------------------------------------------
     | Application Environment

config/fortify.php

@@ -0,0 +1,159 @@
+<?php
+
+use Laravel\Fortify\Features;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Fortify Guard
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which authentication guard Fortify will use while
+    | authenticating users. This value should correspond with one of your
+    | guards that is already present in your "auth" configuration file.
+    |
+    */
+
+    'guard' => 'web',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Fortify Password Broker
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which password broker Fortify can use when a user
+    | is resetting their password. This configured value should match one
+    | of your password brokers setup in your "auth" configuration file.
+    |
+    */
+
+    'passwords' => 'users',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Username / Email
+    |--------------------------------------------------------------------------
+    |
+    | This value defines which model attribute should be considered as your
+    | application's "username" field. Typically, this might be the email
+    | address of the users but you are free to change this value here.
+    |
+    | Out of the box, Fortify expects forgot password and reset password
+    | requests to have a field named 'email'. If the application uses
+    | another name for the field you may define it below as needed.
+    |
+    */
+
+    'username' => 'email',
+
+    'email' => 'email',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Lowercase Usernames
+    |--------------------------------------------------------------------------
+    |
+    | This value defines whether usernames should be lowercased before saving
+    | them in the database, as some database system string fields are case
+    | sensitive. You may disable this for your application if necessary.
+    |
+    */
+
+    'lowercase_usernames' => true,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Home Path
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the path where users will get redirected during
+    | authentication or password reset when the operations are successful
+    | and the user is authenticated. You are free to change this value.
+    |
+    */
+
+    'home' => '/home',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Fortify Routes Prefix / Subdomain
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which prefix Fortify will assign to all the routes
+    | that it registers with the application. If necessary, you may change
+    | subdomain under which all of the Fortify routes will be available.
+    |
+    */
+
+    'prefix' => '',
+
+    'domain' => null,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Fortify Routes Middleware
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which middleware Fortify will assign to the routes
+    | that it registers with the application. If necessary, you may change
+    | these middleware but typically this provided default is preferred.
+    |
+    */
+
+    'middleware' => ['web'],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Rate Limiting
+    |--------------------------------------------------------------------------
+    |
+    | By default, Fortify will throttle logins to five requests per minute for
+    | every email and IP address combination. However, if you would like to
+    | specify a custom rate limiter to call then you may specify it here.
+    |
+    */
+
+    'limiters' => [
+        'login' => 'login',
+        'two-factor' => 'two-factor',
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Register View Routes
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify if the routes returning views should be disabled as
+    | you may not need them when building your own application. This may be
+    | especially true if you're writing a custom single-page application.
+    |
+    */
+
+    'views' => false,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Features
+    |--------------------------------------------------------------------------
+    |
+    | Some of the Fortify features are optional. You may disable the features
+    | by removing them from this array. You're free to only remove some of
+    | these features or you can even remove all of these if you need to.
+    |
+    */
+
+    'features' => [
+        Features::registration(),
+        Features::resetPasswords(),
+        // Features::emailVerification(),
+        Features::updateProfileInformation(),
+        Features::updatePasswords(),
+        Features::twoFactorAuthentication([
+            'confirm' => true,
+            'confirmPassword' => true,
+            // 'window' => 0,
+        ]),
+    ],
+
+];

cypress.config.js

@@ -0,0 +1,12 @@
+import { defineConfig } from 'cypress'
+
+export default defineConfig({
+  e2e: {
+    baseUrl: 'https://go-no-go.test',
+    supportFile: 'cypress/support/e2e.js',
+    specPattern: 'cypress/e2e/**/*.cy.{js,jsx}',
+    viewportWidth: 1280,
+    viewportHeight: 720,
+    defaultCommandTimeout: 10000,
+  },
+})

cypress/e2e/questionnaire-flow.cy.js

@@ -0,0 +1,43 @@
+describe('Questionnaire Flow', () => {
+  beforeEach(() => {
+    cy.resetDatabase()
+    cy.login()
+  })
+
+  it('completes the full questionnaire flow from landing to result', () => {
+    // 1. Landing page — click Continue
+    cy.get('[data-cy="start-screening"]').click()
+
+    // 2. Screening — answer all 10 questions with Yes
+    for (let i = 1; i <= 10; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="yes"]').check({ force: true })
+      })
+    }
+    cy.get('[data-cy="submit-screening"]').click()
+
+    // 3. Screening result — should pass with 10/10
+    cy.get('[data-cy="result-passed"]').should('exist')
+    cy.get('[data-cy="screening-score"]').should('contain', '10')
+
+    // 4. Select first category (Audit)
+    cy.get('[data-cy="category-select"]').within(() => {
+      cy.contains('button', 'Start').first().click()
+    })
+
+    // 5. Session/Show — should see questionnaire
+    cy.url().should('include', '/sessions/')
+    cy.contains('Questionnaire').should('be.visible')
+
+    // 6. Complete session
+    cy.get('[data-cy="complete-session"]').click()
+
+    // 7. Session result page
+    cy.url().should('include', '/result')
+    cy.get('[data-cy="session-result"]').should('exist')
+
+    // 8. Click Again to go back
+    cy.get('[data-cy="start-new"]').click()
+    cy.url().should('eq', Cypress.config('baseUrl') + '/')
+  })
+})

cypress/e2e/result-page.cy.js

@@ -0,0 +1,54 @@
+describe('Result Page', () => {
+  beforeEach(() => {
+    cy.resetDatabase()
+    cy.login()
+  })
+
+  function passScreeningAndStartSession() {
+    cy.get('[data-cy="start-screening"]').click()
+
+    for (let i = 1; i <= 10; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="yes"]').check({ force: true })
+      })
+    }
+    cy.get('[data-cy="submit-screening"]').click()
+
+    cy.get('[data-cy="category-select"]').within(() => {
+      cy.contains('button', 'Start').first().click()
+    })
+
+    cy.url().should('include', '/sessions/')
+  }
+
+  it('shows session result after completion', () => {
+    passScreeningAndStartSession()
+
+    // Just complete without answering specific questions
+    cy.get('[data-cy="complete-session"]').click()
+
+    cy.url().should('include', '/result')
+    cy.get('[data-cy="session-result"]').should('exist')
+  })
+
+  it('shows the result badge with correct result type', () => {
+    passScreeningAndStartSession()
+
+    cy.get('[data-cy="complete-session"]').click()
+
+    cy.url().should('include', '/result')
+    // Should show one of the result types
+    cy.get('[data-cy="session-result"]').should('exist')
+    cy.get('[data-cy^="result-"]').should('exist')
+  })
+
+  it('can start over from result page', () => {
+    passScreeningAndStartSession()
+
+    cy.get('[data-cy="complete-session"]').click()
+    cy.url().should('include', '/result')
+
+    cy.get('[data-cy="start-new"]').click()
+    cy.url().should('eq', Cypress.config('baseUrl') + '/')
+  })
+})

cypress/e2e/scoring-display.cy.js

@@ -0,0 +1,69 @@
+describe('Scoring Display', () => {
+  beforeEach(() => {
+    cy.resetDatabase()
+    cy.login()
+  })
+
+  it('shows No Go result when fewer than 5 yes answers', () => {
+    cy.get('[data-cy="start-screening"]').click()
+
+    // Answer 4 yes, 6 no
+    for (let i = 1; i <= 4; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="yes"]').check({ force: true })
+      })
+    }
+    for (let i = 5; i <= 10; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="no"]').check({ force: true })
+      })
+    }
+    cy.get('[data-cy="submit-screening"]').click()
+
+    // Should fail
+    cy.get('[data-cy="result-failed"]').should('exist')
+    cy.get('[data-cy="screening-score"]').should('contain', '4')
+    cy.get('[data-cy="category-select"]').should('not.exist')
+  })
+
+  it('passes at boundary with exactly 5 yes answers', () => {
+    cy.get('[data-cy="start-screening"]').click()
+
+    // Answer 5 yes, 5 no
+    for (let i = 1; i <= 5; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="yes"]').check({ force: true })
+      })
+    }
+    for (let i = 6; i <= 10; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="no"]').check({ force: true })
+      })
+    }
+    cy.get('[data-cy="submit-screening"]').click()
+
+    // Should pass
+    cy.get('[data-cy="result-passed"]').should('exist')
+    cy.get('[data-cy="screening-score"]').should('contain', '5')
+    cy.get('[data-cy="category-select"]').should('exist')
+  })
+
+  it('displays the score correctly', () => {
+    cy.get('[data-cy="start-screening"]').click()
+
+    // Answer 7 yes, 3 no
+    for (let i = 1; i <= 7; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="yes"]').check({ force: true })
+      })
+    }
+    for (let i = 8; i <= 10; i++) {
+      cy.get(`[data-cy="screening-answer-${i}"]`).within(() => {
+        cy.get('[data-cy="no"]').check({ force: true })
+      })
+    }
+    cy.get('[data-cy="submit-screening"]').click()
+
+    cy.get('[data-cy="screening-score"]').should('contain', '7')
+  })
+})

cypress/support/commands.js

@@ -0,0 +1,8 @@
+Cypress.Commands.add('login', () => {
+  cy.visit('/login-jonathan')
+  cy.url().should('include', '/')
+})
+
+Cypress.Commands.add('resetDatabase', () => {
+  cy.exec('herd php artisan migrate:fresh --seed --force', { timeout: 30000 })
+})

cypress/support/e2e.js

@@ -0,0 +1 @@
+import './commands'

database/factories/AnswerFactory.php

@@ -0,0 +1,33 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Answer;
+use App\Models\Question;
+use App\Models\Session;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Answer test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Answer>
+ */
+final class AnswerFactory extends Factory
+{
+    protected $model = Answer::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'session_id' => Session::factory(),
+            'question_id' => Question::factory(),
+            'value' => fake()->randomElement(['yes', 'no', 'not_applicable']),
+            'text_value' => null,
+        ];
+    }
+}

database/factories/CategoryFactory.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Category;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Category test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Category>
+ */
+final class CategoryFactory extends Factory
+{
+    protected $model = Category::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'name' => fake()->unique()->words(2, true),
+            'sort_order' => fake()->numberBetween(0, 10),
+        ];
+    }
+}

database/factories/LogFactory.php

@@ -0,0 +1,38 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Log;
+use App\Models\User;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Log test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Log>
+ */
+final class LogFactory extends Factory
+{
+    protected $model = Log::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'user_id' => User::factory(),
+            'action' => fake()->randomElement([
+                'login',
+                'logout',
+                'session_started',
+                'session_completed',
+                'screening_started',
+                'screening_completed',
+            ]),
+            'metadata' => null,
+        ];
+    }
+}

database/factories/QuestionFactory.php

@@ -0,0 +1,60 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Question;
+use App\Models\QuestionGroup;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Question test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Question>
+ */
+final class QuestionFactory extends Factory
+{
+    protected $model = Question::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'question_group_id' => QuestionGroup::factory(),
+            'text' => fake()->sentence(),
+            'has_yes' => true,
+            'has_no' => true,
+            'has_na' => true,
+            'details' => null,
+            'sort_order' => fake()->numberBetween(0, 10),
+            'is_scored' => true,
+        ];
+    }
+
+    /**
+     * Indicate that the question is not scored.
+     */
+    public function nonScored(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'is_scored' => false,
+        ]);
+    }
+
+    /**
+     * Indicate that the question is text-only (no yes/no/na options).
+     */
+    public function textOnly(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'has_yes' => false,
+            'has_no' => false,
+            'has_na' => false,
+            'is_scored' => false,
+            'details' => 'required',
+        ]);
+    }
+}

database/factories/QuestionGroupFactory.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Category;
+use App\Models\QuestionGroup;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating QuestionGroup test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\QuestionGroup>
+ */
+final class QuestionGroupFactory extends Factory
+{
+    protected $model = QuestionGroup::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'category_id' => Category::factory(),
+            'name' => fake()->words(3, true),
+            'sort_order' => fake()->numberBetween(0, 10),
+        ];
+    }
+}

database/factories/ScreeningAnswerFactory.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Screening;
+use App\Models\ScreeningAnswer;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating ScreeningAnswer test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\ScreeningAnswer>
+ */
+final class ScreeningAnswerFactory extends Factory
+{
+    protected $model = ScreeningAnswer::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'screening_id' => Screening::factory(),
+            'question_number' => fake()->numberBetween(1, 10),
+            'value' => fake()->randomElement(['yes', 'no']),
+        ];
+    }
+}

database/factories/ScreeningFactory.php

@@ -0,0 +1,53 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Screening;
+use App\Models\User;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Screening test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Screening>
+ */
+final class ScreeningFactory extends Factory
+{
+    protected $model = Screening::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'user_id' => User::factory(),
+            'score' => null,
+            'passed' => null,
+        ];
+    }
+
+    /**
+     * Indicate that the screening passed.
+     */
+    public function passed(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'score' => 10,
+            'passed' => true,
+        ]);
+    }
+
+    /**
+     * Indicate that the screening failed.
+     */
+    public function failed(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'score' => 3,
+            'passed' => false,
+        ]);
+    }
+}

database/factories/SessionFactory.php

@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Factories;
+
+use App\Models\Category;
+use App\Models\Session;
+use App\Models\User;
+use Illuminate\Database\Eloquent\Factories\Factory;
+
+/**
+ * Factory for generating Session test data.
+ *
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\Session>
+ */
+final class SessionFactory extends Factory
+{
+    protected $model = Session::class;
+
+    /**
+     * Define the model's default state.
+     */
+    public function definition(): array
+    {
+        return [
+            'user_id' => User::factory(),
+            'category_id' => Category::factory(),
+            'screening_id' => null,
+            'status' => 'in_progress',
+            'score' => null,
+            'result' => null,
+            'additional_comments' => null,
+            'completed_at' => null,
+        ];
+    }
+
+    /**
+     * Indicate that the session is completed.
+     */
+    public function completed(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'status' => 'completed',
+            'score' => 8,
+            'result' => 'consult_leadership',
+            'completed_at' => now(),
+        ]);
+    }
+}

database/factories/UserFactory.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Database\Factories;
 
 use Illuminate\Database\Eloquent\Factories\Factory;
@@ -9,7 +11,7 @@
 /**
  * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\User>
  */
-class UserFactory extends Factory
+final class UserFactory extends Factory
 {
     /**
      * The current password being used by the factory.
@@ -27,8 +29,10 @@ public function definition(): array
             'name' => fake()->name(),
             'email' => fake()->unique()->safeEmail(),
             'email_verified_at' => now(),
-            'password' => static::$password ??= Hash::make('password'),
+            'password' => self::$password ??= Hash::make('password'),
             'remember_token' => Str::random(10),
+            'job_title' => fake()->jobTitle(),
+            'company_name' => fake()->company(),
         ];
     }
 

database/migrations/0000_00_00_000000_create_roles_table.php

@@ -0,0 +1,32 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('roles', function (Blueprint $table) {
+            $table->id();
+            $table->string('name')->unique();
+            $table->timestamps();
+        });
+
+        $now = now();
+
+        DB::table('roles')->insert([
+            ['name' => 'user', 'created_at' => $now, 'updated_at' => $now],
+            ['name' => 'admin', 'created_at' => $now, 'updated_at' => $now],
+        ]);
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('roles');
+    }
+};

database/migrations/0001_01_01_000000_create_users_table.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 use Illuminate\Database\Migrations\Migration;
 use Illuminate\Database\Schema\Blueprint;
 use Illuminate\Support\Facades\Schema;
@@ -13,10 +15,17 @@ public function up(): void
     {
         Schema::create('users', function (Blueprint $table) {
             $table->id();
+            $table->foreignId('role_id')->default(1)->constrained();
             $table->string('name');
             $table->string('email')->unique();
+            $table->string('azure_id')->nullable()->unique();
+            $table->string('photo')->nullable();
+            $table->string('job_title')->nullable();
+            $table->string('department')->nullable();
+            $table->string('company_name')->nullable();
+            $table->string('phone')->nullable();
             $table->timestamp('email_verified_at')->nullable();
-            $table->string('password');
+            $table->string('password')->nullable();
             $table->rememberToken();
             $table->timestamps();
         });

database/migrations/2026_02_03_083000_create_sessions_table.php

@@ -21,7 +21,6 @@ public function up(): void
             $table->string('status', 50)->default('in_progress');
             $table->integer('score')->nullable();
             $table->string('result', 50)->nullable();
-            $table->json('basic_info')->nullable();
             $table->text('additional_comments')->nullable();
             $table->timestamp('completed_at')->nullable();
             $table->timestamps();

database/seeders/JonathanSeeder.php

@@ -1,22 +1,30 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Database\Seeders;
 
+use App\Models\Role;
 use App\Models\User;
 use Illuminate\Database\Seeder;
 
-class JonathanSeeder extends Seeder
+final class JonathanSeeder extends Seeder
 {
     /**
-     * Seed the application's database.
+     * Seed the application's database with admin user Jonathan.
      */
     public function run(): void
     {
+        $adminRole = Role::where('name', 'admin')->first();
+
         User::factory()->create([
             'name' => 'Jonathan',
-            'email' => 'jonathan@blijnder.nl',
+            'email' => 'jonathan.van.rij@agerion.nl',
             'password' => bcrypt('secret'),
             'email_verified_at' => now(),
+            'role_id' => $adminRole->id,
+            'job_title' => 'Senior Developer',
+            'company_name' => 'Baker Tilly',
         ]);
     }
 }

database/seeders/TestCategorySeeder.php

@@ -0,0 +1,52 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Database\Seeders;
+
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\DB;
+
+final class TestCategorySeeder extends Seeder
+{
+    /**
+     * Seed a minimal test category with one question group and five scored questions for quick testing.
+     */
+    public function run(): void
+    {
+        $categoryId = DB::table('categories')->insertGetId([
+            'name' => 'Test',
+            'sort_order' => 99,
+            'created_at' => now(),
+            'updated_at' => now(),
+        ]);
+
+        $groupId = DB::table('question_groups')->insertGetId([
+            'category_id' => $categoryId,
+            'name' => 'Test Group',
+            'sort_order' => 1,
+            'description' => null,
+            'scoring_instructions' => null,
+            'created_at' => now(),
+            'updated_at' => now(),
+        ]);
+
+        $questions = [];
+        for ($i = 1; $i <= 5; $i++) {
+            $questions[] = [
+                'question_group_id' => $groupId,
+                'text' => "Test question {$i}",
+                'has_yes' => true,
+                'has_no' => true,
+                'has_na' => true,
+                'details' => 'optional',
+                'sort_order' => $i,
+                'is_scored' => true,
+                'created_at' => now(),
+                'updated_at' => now(),
+            ];
+        }
+
+        DB::table('questions')->insert($questions);
+    }
+}

docs/implementation-plan.md

@@ -366,7 +366,7 @@ ## Step 10: Scoring and Result
 
 ## Step 11: Activity Logging
 
-[ ] **Add append-only activity logging for analytics.**
+[x] **Add append-only activity logging for analytics.**
 
 Create a logging service (or helper) that writes to the `logs` table. Integrate log writes into all relevant actions: `login`, `logout`, `screening_started`, `screening_completed`, `session_started`, `session_completed`, `session_abandoned`, `answer_saved`, `step_viewed`. Each log includes `user_id`, `session_id`, `category_id`, `action`, and `metadata` JSON as defined in `docs/technical-requirements.md` section 5 (logs table). The Log model should have no `updated_at` and should prevent updates/deletes.
 
@@ -403,7 +403,7 @@ ## Step 11: Activity Logging
 
 ## Step 12: Nova Resources and Policies
 
-[ ] **Create all Nova resources, policies, and Excel export actions.**
+[x] **Create all Nova resources, policies, and Excel export actions.**
 
 Create Nova resources: `CategoryResource`, `QuestionGroupResource`, `QuestionResource`, `ScreeningResource`, `SessionResource`, `AnswerResource`, `LogResource`. Create corresponding policies enforcing the permission matrix from `docs/technical-requirements.md` section 9 (most are read-only; only Question.text is editable). Apply field behaviors: all fields filterable, sortable, and copyable where applicable. Set menu visibility (only Question, Screening, Session, Log appear in sidebar). Install `maatwebsite/laravel-nova-excel` and add `DownloadExcel` action to every resource.
 

docs/index.md

@@ -13,7 +13,7 @@ ### Root Level
 
 ### Frontend
 
-- `docs/theming-templating-vue.md` - Design tokens, Tailwind config, layout, shared Vue components, icon and scoring color standards
+- `docs/theming-templating-vue.md` - Design tokens, Tailwind config, layout, shared Vue components, RadioButtonGroup pill buttons, icon and scoring color standards
 
 ### Agents
 

docs/theming-templating-vue.md

@@ -9,6 +9,7 @@ ### Color Palette
 | Token       | Hex       | RGB              | Tailwind Class  | Usage                                      |
 |-------------|-----------|------------------|-----------------|---------------------------------------------|
 | Primary     | `#d1ec51` | 209, 236, 81    | `bg-primary`, `text-primary`    | Buttons (default), accents, highlights       |
+| Primary Dark | `#b5d136` | 181, 209, 54   | `bg-primary-dark`, `text-primary-dark` | Selected/hover state for pill buttons, ~15% darker primary |
 | Secondary   | `#00b7b3` | 0, 183, 179     | `bg-secondary`, `text-secondary` | Button hover states, secondary accents       |
 | Background  | `#2b303a` | 43, 48, 58      | `bg-surface`    | Page background, card backgrounds            |
 | Text        | `#ffffff` | 255, 255, 255   | `text-white`    | Primary body text on dark background         |
@@ -96,6 +97,23 @@ ### QuestionCard
 - `has_na` -- show N/A button
 - `details` -- show a text input for additional notes
 
+### RadioButtonGroup
+
+Pill-shaped button group that replaces native radio buttons. Options appear as connected segments with rounded outer edges.
+
+| Prop         | Type                          | Default | Description                    |
+|--------------|-------------------------------|---------|--------------------------------|
+| `modelValue` | `String \| null`              | `null`  | Selected value (v-model)       |
+| `options`    | `Array<{value, label}>`       | required | Options to render              |
+| `name`       | `String`                      | required | HTML radio group name          |
+| `disabled`   | `Boolean`                     | `false` | Disables all options           |
+
+Default state: `bg-primary` with `text-gray-900`.
+Selected & hover state: `bg-primary-dark`.
+Keyboard focus: visible ring using `ring-primary-dark`.
+
+Used in `QuestionCard` (3-option: Yes/No/N/A) and `Screening/Show` (2-option: Yes/No).
+
 ## Icons
 
 Heroicons is the only icon library. No other icon packages.

package.json

@@ -4,12 +4,16 @@
     "type": "module",
     "scripts": {
         "build": "vite build",
-        "dev": "vite"
+        "dev": "vite",
+        "cy:open": "cypress open",
+        "cy:run": "cypress run",
+        "test:e2e": "cypress run"
     },
     "devDependencies": {
         "@tailwindcss/vite": "^4.0.0",
         "axios": "^1.11.0",
         "concurrently": "^9.0.1",
+        "cypress": "^15.9.0",
         "laravel-vite-plugin": "^2.0.0",
         "tailwindcss": "^4.0.0",
         "vite": "^7.0.7"

public/images/baker-tilly-logo.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" viewBox="0 0 598.24 157.147"><path fill="#fff" d="m540.007 130.878.429-11.135c-.612.136-2.959.512-4.54.512-5.277 0-6.71-3.427-6.71-8.124V47.525l-14.238 6.437v60.506c0 8.59 4.265 17.17 16.596 17.17 4.89 0 7.835-.64 8.463-.76zm-32.05 0 .431-11.135c-.613.136-2.961.512-4.541.512-5.278 0-6.708-3.427-6.708-8.124V47.525l-14.24 6.437v60.506c0 8.59 4.266 17.17 16.596 17.17 4.89 0 7.836-.64 8.462-.76zm-55.201-.182V72.293h14.24v58.403Zm7.01-65.621c-4.577 0-8.037-1.786-8.037-8.259 0-5.916 3.126-8.373 8.036-8.373 5.023 0 8.262 1.898 8.262 8.261 0 6.139-3.015 8.37-8.262 8.37zm85.802 92.072c.515 0 3.365-.479 4.115-.595 14.004-2.146 24.264-8.333 29.914-25.426 3.847-11.636 18.65-58.798 18.65-58.798H583.14l-13.602 45.95h-2.42l-11.6-45.95h-14.771l15.804 58.398h9.095s-.356 1.162-.624 2.08c-1.898 6.502-10.256 11.635-21.355 13.222zm-160.67-26.455v-46.13c1.743-.58 5.835-1.278 10.715-1.278 2.558 0 7.32.192 9.414.424V71.435c-1.628-.464-6.03-.602-10.098-.602-10.228 0-19.22 2.585-24.27 4.838v55.021zm-37.193-35.301v-1.663c0-7.702-4.205-11.507-12.726-11.507-9.178 0-13.098 5.15-13.331 13.17zm-7.781 25.233c8.76 0 14.27-2.173 16.973-3.003l1.368 10.425c-2.272 1.047-9.72 4.154-19.37 4.154-21.154 0-31.502-10.843-31.502-31.762 0-21.16 9.868-29.722 27.982-29.722 19.749 0 25.825 10.926 25.825 29.406 0 1.975-.136 4.439-.252 5.22h-39.53c0 10.546 6.615 15.282 18.506 15.282zm-71.09 10.068v-26.69h4.45l19.527 26.69H308.7l-24.19-33.935 22.014-24.43h-15.632l-18.11 20.493h-3.949V47.27l-14.24 7.021v76.401zm161.566.949c6.196 0 9.647-.96 10.315-1.132l.656-11.275c-.539.21-4 1.057-6.03 1.057-7.156 0-9.384-5.085-9.384-11.826V84.632h17.224V72.328h-17.224V60.16l-14.237 6.478v45.51c0 13.384 6.988 19.492 18.68 19.492zm-201.83-25.923c-2.797-.445-8.417-1.17-12.705-1.17-10.1 0-11.762 4.683-11.762 8.329 0 5.358 3.496 7.792 12.166 7.792 5.662 0 10.208-.725 12.302-1.308zm-11.92 26.426c-18.713 0-25.755-6.154-25.755-18.89 0-12.995 6.856-18.8 23.926-18.8 5.962 0 12.404 1.009 13.75 1.196v-4.355c0-4.676-2.312-8.775-14.996-8.775-9.628 0-15.943 2.68-17.891 3.441l-1.1-10.856c2.568-1.012 10.775-4.389 23.048-4.389 18.453 0 25.168 7.87 25.168 23.022v34.197c-3.368 1.381-13.792 4.209-26.15 4.209zm-64.002-11.486c12.516 0 17.323-7.969 17.323-19.163 0-10.854-4.62-19.004-17.323-19.004-3.487 0-8.423 1.157-10.61 1.851v34.466c2.187.724 6.79 1.85 10.61 1.85zm-24.891-66.367 14.282-6.453v25.64c2.645-.93 7.526-2.762 15.661-2.762 17.643 0 26.21 9.396 26.21 30.78 0 25.057-9.837 30.704-32.44 30.704-10.809 0-19.595-1.986-23.713-3.7V54.29M70.175 2.867C66.105.857 59.805-.005 53.728-.005 26.208-.005 0 15.509 0 41.638c0 9.23 2.93 19.098 8.046 27.938 5.783 9.996 13.802 19.135 23.375 25.63 7.264 4.93 15.678 8.369 24.37 8.369 7.24 0 12.101-1.985 13.785-3.373a29.48 29.48 0 0 1-4.642.374c-23.7 0-39.964-20.123-45.153-35.15-1.914-5.543-3.917-12.547-3.917-19.345 0-27.818 24.451-43.092 50.117-43.092 1.362 0 2.733.044 4.11.14.106.007.174-.058.174-.132 0-.046-.029-.096-.09-.13zM74.4 44.778c-12.017 0-21.314 9.18-21.314 20.034 0 11.05 8.553 21.348 21.757 21.348 2.83 0 6.057-.837 8.88-1.944.489-.19 1.104-.421 1.515-.751.336-.272.647-.925.864-1.314 3.324-5.98 7.116-18.8 7.686-26.373.058-.776-.159-1.057-.62-1.684-3.12-4.223-9.192-9.316-18.768-9.316zm19.854.357c0 1.022-.022 3.224-.047 4.229-4.477-7.88-13.181-12.93-22.187-12.93-14.098 0-25.948 11.805-25.948 27.038 0 14.977 11.6 26.371 26.204 26.371 3.701 0 7.72-.849 10.63-2.323-1.457 2.135-2.47 3.453-3.96 5.112-.795.884-1.904 2.09-3.03 2.505-1.285.472-3.977 1.547-8.776 1.547-15.31 0-26.698-11.367-31.823-19.025-5.11-7.637-9.524-17.874-9.524-28.825 0-20.996 18.443-32.429 37.425-32.429 21.743 0 31.036 16.588 31.036 28.73"/></svg>

resources/css/app.css

@@ -11,6 +11,7 @@ @theme {
         'Segoe UI Symbol', 'Noto Color Emoji';
 
     --color-primary: #d1ec51;
+    --color-primary-dark: #b5d136;
     --color-secondary: #00b7b3;
     --color-surface: #2b303a;
 }