Add phone login support and member import functionality

Features:
- Support login via phone number or email (LoginRequest)
- Add members:import-roster command for Excel roster import
- Merge survey emails with roster data

Code Quality (Phase 1-4):
- Add database locking for balance calculation
- Add self-approval checks for finance workflow
- Create service layer (FinanceDocumentApprovalService, PaymentVerificationService)
- Add HasAccountingEntries and HasApprovalWorkflow traits
- Create FormRequest classes for validation
- Add status-badge component
- Define authorization gates in AuthServiceProvider
- Add accounting config file

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/Http/Controllers/AdminMemberController.php

@@ -2,6 +2,8 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\StoreMemberRequest;
+use App\Http\Requests\UpdateMemberRequest;
 use App\Models\Member;
 use App\Support\AuditLogger;
 use Spatie\Permission\Models\Role;
@@ -88,22 +90,9 @@ class AdminMemberController extends Controller
         return view('admin.members.create');
     }
 
-    public function store(Request $request)
+    public function store(StoreMemberRequest $request)
     {
-        $validated = $request->validate([
-            'full_name' => ['required', 'string', 'max:255'],
-            'email' => ['required', 'email', 'max:255', 'unique:users,email'],
-            'national_id' => ['nullable', 'string', 'max:50'],
-            'phone' => ['nullable', 'string', 'max:50'],
-            'address_line_1' => ['nullable', 'string', 'max:255'],
-            'address_line_2' => ['nullable', 'string', 'max:255'],
-            'city' => ['nullable', 'string', 'max:120'],
-            'postal_code' => ['nullable', 'string', 'max:20'],
-            'emergency_contact_name' => ['nullable', 'string', 'max:255'],
-            'emergency_contact_phone' => ['nullable', 'string', 'max:50'],
-            'membership_started_at' => ['nullable', 'date'],
-            'membership_expires_at' => ['nullable', 'date', 'after_or_equal:membership_started_at'],
-        ]);
+        $validated = $request->validated();
 
         // Create user account
         $user = \App\Models\User::create([
@@ -137,23 +126,9 @@ class AdminMemberController extends Controller
         ]);
     }
 
-    public function update(Request $request, Member $member)
+    public function update(UpdateMemberRequest $request, Member $member)
     {
-        $validated = $request->validate([
-            'full_name' => ['required', 'string', 'max:255'],
-            'email' => ['required', 'email', 'max:255'],
-            'national_id' => ['nullable', 'string', 'max:50'],
-            'phone' => ['nullable', 'string', 'max:50'],
-            'address_line_1' => ['nullable', 'string', 'max:255'],
-            'address_line_2' => ['nullable', 'string', 'max:255'],
-            'city' => ['nullable', 'string', 'max:120'],
-            'postal_code' => ['nullable', 'string', 'max:20'],
-            'emergency_contact_name' => ['nullable', 'string', 'max:255'],
-            'emergency_contact_phone' => ['nullable', 'string', 'max:50'],
-            'membership_started_at' => ['nullable', 'date'],
-            'membership_expires_at' => ['nullable', 'date', 'after_or_equal:membership_started_at'],
-        ]);
-
+        $validated = $request->validated();
         $member->update($validated);
         AuditLogger::log('member.updated', $member, $validated);
 

app/Http/Controllers/FinanceDocumentController.php

@@ -2,8 +2,8 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\StoreFinanceDocumentRequest;
 use App\Mail\FinanceDocumentApprovedByAccountant;
-use App\Mail\FinanceDocumentApprovedByCashier;
 use App\Mail\FinanceDocumentFullyApproved;
 use App\Mail\FinanceDocumentRejected;
 use App\Mail\FinanceDocumentSubmitted;
@@ -12,6 +12,7 @@ use App\Models\Member;
 use App\Models\User;
 use App\Support\AuditLogger;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Mail;
 
 class FinanceDocumentController extends Controller
@@ -39,16 +40,16 @@ class FinanceDocumentController extends Controller
                 $query->whereNull('payment_order_created_at');
             } elseif ($stage === 'payment') {
                 $query->whereNotNull('payment_order_created_at')
-                      ->whereNull('payment_executed_at');
+                    ->whereNull('payment_executed_at');
             } elseif ($stage === 'recording') {
                 $query->whereNotNull('payment_executed_at')
-                      ->where(function($q) {
-                          $q->whereNull('cashier_ledger_entry_id')
+                    ->where(function ($q) {
+                        $q->whereNull('cashier_ledger_entry_id')
                             ->orWhereNull('accounting_transaction_id');
-                      });
+                    });
             } elseif ($stage === 'completed') {
                 $query->whereNotNull('cashier_ledger_entry_id')
-                      ->whereNotNull('accounting_transaction_id');
+                    ->whereNotNull('accounting_transaction_id');
             }
         }
 
@@ -68,15 +69,9 @@ class FinanceDocumentController extends Controller
         ]);
     }
 
-    public function store(Request $request)
+    public function store(StoreFinanceDocumentRequest $request)
     {
-        $validated = $request->validate([
-            'member_id' => ['nullable', 'exists:members,id'],
-            'title' => ['required', 'string', 'max:255'],
-            'amount' => ['required', 'numeric', 'min:0'],
-            'description' => ['nullable', 'string'],
-            'attachment' => ['nullable', 'file', 'max:10240'], // 10MB max
-        ]);
+        $validated = $request->validated();
 
         $attachmentPath = null;
         if ($request->hasFile('attachment')) {
@@ -114,7 +109,7 @@ class FinanceDocumentController extends Controller
 
         return redirect()
             ->route('admin.finance.index')
-            ->with('status', '報銷申請單已提交。金額級別：' . $document->getAmountTierText());
+            ->with('status', '報銷申請單已提交。金額級別：'.$document->getAmountTierText());
     }
 
     public function show(FinanceDocument $financeDocument)
@@ -275,6 +270,7 @@ class FinanceDocumentController extends Controller
             // 檢查是否雙重確認完成
             if ($financeDocument->isDisbursementComplete()) {
                 $financeDocument->update(['disbursement_status' => FinanceDocument::DISBURSEMENT_COMPLETED]);
+
                 return redirect()
                     ->route('admin.finance.show', $financeDocument)
                     ->with('status', '出帳確認完成。等待會計入帳。');
@@ -286,7 +282,7 @@ class FinanceDocumentController extends Controller
         }
 
         // 出納確認
-        if (($isCashier || $isAdmin) && $financeDocument->canCashierConfirmDisbursement()) {
+        if (($isCashier || $isAdmin) && $financeDocument->canCashierConfirmDisbursement($user)) {
             $financeDocument->update([
                 'cashier_confirmed_at' => now(),
                 'cashier_confirmed_by_id' => $user->id,
@@ -299,6 +295,7 @@ class FinanceDocumentController extends Controller
             // 檢查是否雙重確認完成
             if ($financeDocument->isDisbursementComplete()) {
                 $financeDocument->update(['disbursement_status' => FinanceDocument::DISBURSEMENT_COMPLETED]);
+
                 return redirect()
                     ->route('admin.finance.show', $financeDocument)
                     ->with('status', '出帳確認完成。等待會計入帳。');
@@ -322,26 +319,29 @@ class FinanceDocumentController extends Controller
         $isAccountant = $user->hasRole('finance_accountant');
         $isAdmin = $user->hasRole('admin');
 
-        if (!$financeDocument->canAccountantConfirmRecording()) {
+        if (! $financeDocument->canAccountantConfirmRecording()) {
             abort(403, '此文件尚未完成出帳確認，無法入帳。');
         }
 
-        if (!$isAccountant && !$isAdmin) {
+        if (! $isAccountant && ! $isAdmin) {
             abort(403, '只有會計可以確認入帳。');
         }
 
-        $financeDocument->update([
-            'accountant_recorded_at' => now(),
-            'accountant_recorded_by_id' => $user->id,
-            'recording_status' => FinanceDocument::RECORDING_COMPLETED,
-        ]);
+        // 使用交易確保資料完整性：如果會計分錄產生失敗，不應標記為已入帳
+        DB::transaction(function () use ($financeDocument, $user) {
+            $financeDocument->update([
+                'accountant_recorded_at' => now(),
+                'accountant_recorded_by_id' => $user->id,
+                'recording_status' => FinanceDocument::RECORDING_COMPLETED,
+            ]);
 
-        // 自動產生會計分錄
-        $financeDocument->autoGenerateAccountingEntries();
+            // 自動產生會計分錄
+            $financeDocument->autoGenerateAccountingEntries();
 
-        AuditLogger::log('finance_document.accountant_confirmed_recording', $financeDocument, [
-            'confirmed_by' => $user->name,
-        ]);
+            AuditLogger::log('finance_document.accountant_confirmed_recording', $financeDocument, [
+                'confirmed_by' => $user->name,
+            ]);
+        });
 
         return redirect()
             ->route('admin.finance.show', $financeDocument)
@@ -369,7 +369,7 @@ class FinanceDocumentController extends Controller
                      $user->hasRole('finance_chair') ||
                      $user->hasRole('finance_board_member');
 
-        if (!$canReject) {
+        if (! $canReject) {
             abort(403, '您無權駁回此文件。');
         }
 
@@ -396,13 +396,13 @@ class FinanceDocumentController extends Controller
 
     public function download(FinanceDocument $financeDocument)
     {
-        if (!$financeDocument->attachment_path) {
+        if (! $financeDocument->attachment_path) {
             abort(404, 'No attachment found.');
         }
 
-        $path = storage_path('app/' . $financeDocument->attachment_path);
+        $path = storage_path('app/'.$financeDocument->attachment_path);
 
-        if (!file_exists($path)) {
+        if (! file_exists($path)) {
             abort(404, 'Attachment file not found.');
         }
 

app/Http/Controllers/IssueController.php

@@ -2,6 +2,8 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\StoreIssueRequest;
+use App\Http\Requests\UpdateIssueRequest;
 use App\Models\Issue;
 use App\Models\IssueAttachment;
 use App\Models\IssueComment;
@@ -108,31 +110,9 @@ class IssueController extends Controller
         return view('admin.issues.create', compact('users', 'labels', 'members', 'openIssues'));
     }
 
-    public function store(Request $request)
+    public function store(StoreIssueRequest $request)
     {
-        $validated = $request->validate([
-            'title' => ['required', 'string', 'max:255'],
-            'description' => ['nullable', 'string'],
-            'issue_type' => ['required', Rule::in([
-                Issue::TYPE_WORK_ITEM,
-                Issue::TYPE_PROJECT_TASK,
-                Issue::TYPE_MAINTENANCE,
-                Issue::TYPE_MEMBER_REQUEST,
-            ])],
-            'priority' => ['required', Rule::in([
-                Issue::PRIORITY_LOW,
-                Issue::PRIORITY_MEDIUM,
-                Issue::PRIORITY_HIGH,
-                Issue::PRIORITY_URGENT,
-            ])],
-            'assigned_to_user_id' => ['nullable', 'exists:users,id'],
-            'member_id' => ['nullable', 'exists:members,id'],
-            'parent_issue_id' => ['nullable', 'exists:issues,id'],
-            'due_date' => ['nullable', 'date'],
-            'estimated_hours' => ['nullable', 'numeric', 'min:0'],
-            'labels' => ['nullable', 'array'],
-            'labels.*' => ['exists:issue_labels,id'],
-        ]);
+        $validated = $request->validated();
 
         $issue = DB::transaction(function () use ($validated, $request) {
             $issue = Issue::create([
@@ -209,37 +189,10 @@ class IssueController extends Controller
         return view('admin.issues.edit', compact('issue', 'users', 'labels', 'members', 'openIssues'));
     }
 
-    public function update(Request $request, Issue $issue)
+    public function update(UpdateIssueRequest $request, Issue $issue)
     {
-        if ($issue->isClosed() && !Auth::user()->hasRole('admin')) {
-            return redirect()->route('admin.issues.show', $issue)
-                ->with('error', __('Cannot edit closed issues.'));
-        }
-
-        $validated = $request->validate([
-            'title' => ['required', 'string', 'max:255'],
-            'description' => ['nullable', 'string'],
-            'issue_type' => ['required', Rule::in([
-                Issue::TYPE_WORK_ITEM,
-                Issue::TYPE_PROJECT_TASK,
-                Issue::TYPE_MAINTENANCE,
-                Issue::TYPE_MEMBER_REQUEST,
-            ])],
-            'priority' => ['required', Rule::in([
-                Issue::PRIORITY_LOW,
-                Issue::PRIORITY_MEDIUM,
-                Issue::PRIORITY_HIGH,
-                Issue::PRIORITY_URGENT,
-            ])],
-            'assigned_to_user_id' => ['nullable', 'exists:users,id'],
-            'reviewer_id' => ['nullable', 'exists:users,id'],
-            'member_id' => ['nullable', 'exists:members,id'],
-            'parent_issue_id' => ['nullable', 'exists:issues,id'],
-            'due_date' => ['nullable', 'date'],
-            'estimated_hours' => ['nullable', 'numeric', 'min:0'],
-            'labels' => ['nullable', 'array'],
-            'labels.*' => ['exists:issue_labels,id'],
-        ]);
+        // Authorization is handled by UpdateIssueRequest
+        $validated = $request->validated();
 
         $issue = DB::transaction(function () use ($issue, $validated) {
             $issue->update($validated);

app/Http/Requests/Auth/LoginRequest.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Requests\Auth;
 
+use App\Models\User;
 use Illuminate\Auth\Events\Lockout;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Support\Facades\Auth;
@@ -27,13 +28,15 @@ class LoginRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'email' => ['required', 'string', 'email'],
+            // Accept email or phone number
+            'email' => ['required', 'string'],
             'password' => ['required', 'string'],
         ];
     }
 
     /**
      * Attempt to authenticate the request's credentials.
+     * Supports login via email or phone number.
      *
      * @throws \Illuminate\Validation\ValidationException
      */
@@ -41,7 +44,14 @@ class LoginRequest extends FormRequest
     {
         $this->ensureIsNotRateLimited();
 
-        if (! Auth::attempt($this->only('email', 'password'), $this->boolean('remember'))) {
+        $loginInput = $this->input('email');
+        $password = $this->input('password');
+        $remember = $this->boolean('remember');
+
+        // Determine if input is email or phone
+        $credentials = $this->resolveCredentials($loginInput, $password);
+
+        if (! Auth::attempt($credentials, $remember)) {
             RateLimiter::hit($this->throttleKey());
 
             throw ValidationException::withMessages([
@@ -52,6 +62,41 @@ class LoginRequest extends FormRequest
         RateLimiter::clear($this->throttleKey());
     }
 
+    /**
+     * Resolve login credentials based on input type (email or phone).
+     */
+    protected function resolveCredentials(string $loginInput, string $password): array
+    {
+        // Check if input looks like an email
+        if (filter_var($loginInput, FILTER_VALIDATE_EMAIL)) {
+            return [
+                'email' => $loginInput,
+                'password' => $password,
+            ];
+        }
+
+        // Normalize phone number (remove dashes, spaces)
+        $phone = preg_replace('/[^0-9]/', '', $loginInput);
+
+        // Try to find user by phone number in member record
+        $user = User::whereHas('member', function ($query) use ($phone) {
+            $query->where('phone', 'like', "%{$phone}%");
+        })->first();
+
+        if ($user) {
+            return [
+                'email' => $user->email,
+                'password' => $password,
+            ];
+        }
+
+        // Fallback: treat as email (will fail auth but proper error message)
+        return [
+            'email' => $loginInput,
+            'password' => $password,
+        ];
+    }
+
     /**
      * Ensure the login request is not rate limited.
      *

app/Http/Requests/StoreFinanceDocumentRequest.php

@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreFinanceDocumentRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'member_id' => ['nullable', 'exists:members,id'],
+            'title' => ['required', 'string', 'max:255'],
+            'amount' => ['required', 'numeric', 'min:0'],
+            'description' => ['nullable', 'string'],
+            'attachment' => ['nullable', 'file', 'max:10240'], // 10MB max
+        ];
+    }
+
+    /**
+     * Get custom messages for validator errors.
+     *
+     * @return array<string, string>
+     */
+    public function messages(): array
+    {
+        return [
+            'title.required' => '請輸入標題',
+            'title.max' => '標題不得超過 255 字',
+            'amount.required' => '請輸入金額',
+            'amount.numeric' => '金額必須為數字',
+            'amount.min' => '金額不得為負數',
+            'attachment.max' => '附件大小不得超過 10MB',
+        ];
+    }
+}

app/Http/Requests/StoreIssueRequest.php

@@ -0,0 +1,64 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Models\Issue;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreIssueRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->user()->can('create_issues') || $this->user()->hasRole('admin');
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'title' => ['required', 'string', 'max:255'],
+            'description' => ['nullable', 'string'],
+            'issue_type' => ['required', Rule::in([
+                Issue::TYPE_WORK_ITEM,
+                Issue::TYPE_PROJECT_TASK,
+                Issue::TYPE_MAINTENANCE,
+                Issue::TYPE_MEMBER_REQUEST,
+            ])],
+            'priority' => ['required', Rule::in([
+                Issue::PRIORITY_LOW,
+                Issue::PRIORITY_MEDIUM,
+                Issue::PRIORITY_HIGH,
+                Issue::PRIORITY_URGENT,
+            ])],
+            'assigned_to_user_id' => ['nullable', 'exists:users,id'],
+            'member_id' => ['nullable', 'exists:members,id'],
+            'parent_issue_id' => ['nullable', 'exists:issues,id'],
+            'due_date' => ['nullable', 'date'],
+            'estimated_hours' => ['nullable', 'numeric', 'min:0'],
+            'labels' => ['nullable', 'array'],
+            'labels.*' => ['exists:issue_labels,id'],
+        ];
+    }
+
+    /**
+     * Get custom messages for validator errors.
+     */
+    public function messages(): array
+    {
+        return [
+            'title.required' => __('Title is required.'),
+            'issue_type.required' => __('Issue type is required.'),
+            'issue_type.in' => __('Invalid issue type.'),
+            'priority.required' => __('Priority is required.'),
+            'priority.in' => __('Invalid priority level.'),
+        ];
+    }
+}

app/Http/Requests/StoreMemberRequest.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreMemberRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->user()->can('create_members') || $this->user()->hasRole('admin');
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'full_name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'email', 'max:255', 'unique:users,email'],
+            'national_id' => ['nullable', 'string', 'max:50'],
+            'phone' => ['nullable', 'string', 'max:50'],
+            'address_line_1' => ['nullable', 'string', 'max:255'],
+            'address_line_2' => ['nullable', 'string', 'max:255'],
+            'city' => ['nullable', 'string', 'max:120'],
+            'postal_code' => ['nullable', 'string', 'max:20'],
+            'emergency_contact_name' => ['nullable', 'string', 'max:255'],
+            'emergency_contact_phone' => ['nullable', 'string', 'max:50'],
+            'membership_started_at' => ['nullable', 'date'],
+            'membership_expires_at' => ['nullable', 'date', 'after_or_equal:membership_started_at'],
+        ];
+    }
+
+    /**
+     * Get custom messages for validator errors.
+     */
+    public function messages(): array
+    {
+        return [
+            'full_name.required' => __('Full name is required.'),
+            'email.required' => __('Email is required.'),
+            'email.email' => __('Please enter a valid email address.'),
+            'email.unique' => __('This email is already registered.'),
+            'membership_expires_at.after_or_equal' => __('Expiry date must be after or equal to start date.'),
+        ];
+    }
+}

app/Http/Requests/UpdateIssueRequest.php

@@ -0,0 +1,78 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Models\Issue;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\Rule;
+
+class UpdateIssueRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        $issue = $this->route('issue');
+
+        // Admins can always edit
+        if ($this->user()->hasRole('admin')) {
+            return true;
+        }
+
+        // Cannot edit closed issues
+        if ($issue && $issue->isClosed()) {
+            return false;
+        }
+
+        return $this->user()->can('edit_issues');
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'title' => ['required', 'string', 'max:255'],
+            'description' => ['nullable', 'string'],
+            'issue_type' => ['required', Rule::in([
+                Issue::TYPE_WORK_ITEM,
+                Issue::TYPE_PROJECT_TASK,
+                Issue::TYPE_MAINTENANCE,
+                Issue::TYPE_MEMBER_REQUEST,
+            ])],
+            'priority' => ['required', Rule::in([
+                Issue::PRIORITY_LOW,
+                Issue::PRIORITY_MEDIUM,
+                Issue::PRIORITY_HIGH,
+                Issue::PRIORITY_URGENT,
+            ])],
+            'assigned_to_user_id' => ['nullable', 'exists:users,id'],
+            'reviewer_id' => ['nullable', 'exists:users,id'],
+            'member_id' => ['nullable', 'exists:members,id'],
+            'parent_issue_id' => ['nullable', 'exists:issues,id'],
+            'due_date' => ['nullable', 'date'],
+            'estimated_hours' => ['nullable', 'numeric', 'min:0'],
+            'labels' => ['nullable', 'array'],
+            'labels.*' => ['exists:issue_labels,id'],
+        ];
+    }
+
+    /**
+     * Get custom messages for validator errors.
+     */
+    public function messages(): array
+    {
+        return [
+            'title.required' => __('Title is required.'),
+            'issue_type.required' => __('Issue type is required.'),
+            'issue_type.in' => __('Invalid issue type.'),
+            'priority.required' => __('Priority is required.'),
+            'priority.in' => __('Invalid priority level.'),
+        ];
+    }
+}

app/Http/Requests/UpdateMemberRequest.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateMemberRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->user()->can('edit_members') || $this->user()->hasRole('admin');
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'full_name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'email', 'max:255'],
+            'national_id' => ['nullable', 'string', 'max:50'],
+            'phone' => ['nullable', 'string', 'max:50'],
+            'address_line_1' => ['nullable', 'string', 'max:255'],
+            'address_line_2' => ['nullable', 'string', 'max:255'],
+            'city' => ['nullable', 'string', 'max:120'],
+            'postal_code' => ['nullable', 'string', 'max:20'],
+            'emergency_contact_name' => ['nullable', 'string', 'max:255'],
+            'emergency_contact_phone' => ['nullable', 'string', 'max:50'],
+            'membership_started_at' => ['nullable', 'date'],
+            'membership_expires_at' => ['nullable', 'date', 'after_or_equal:membership_started_at'],
+        ];
+    }
+
+    /**
+     * Get custom messages for validator errors.
+     */
+    public function messages(): array
+    {
+        return [
+            'full_name.required' => __('Full name is required.'),
+            'email.required' => __('Email is required.'),
+            'email.email' => __('Please enter a valid email address.'),
+            'membership_expires_at.after_or_equal' => __('Expiry date must be after or equal to start date.'),
+        ];
+    }
+}