2 Commits

Author	SHA1	Message	Date
ahmido	417df4f9aa	feat: central tenant operability policy (#177) ... ## Summary - centralize tenant operability into a lane-aware, actor-aware policy boundary - align selector eligibility, administrative discoverability, remembered context, tenant-bound routes, and canonical run viewers - add focused Pest coverage plus Spec 148 artifacts and final polish task completion ## Validation - `vendor/bin/sail artisan test --compact tests/Unit/Tenants/TenantOperabilityServiceTest.php tests/Unit/Tenants/TenantOperabilityOutcomeTest.php tests/Feature/Workspaces/ChooseTenantPageTest.php tests/Feature/Workspaces/SelectTenantControllerTest.php tests/Feature/TenantRBAC/ArchivedTenantRouteAccessTest.php tests/Feature/TenantRBAC/TenantRouteDenyAsNotFoundTest.php tests/Feature/Operations/TenantlessOperationRunViewerTest.php tests/Feature/OpsUx/OperateHubShellTest.php tests/Feature/Rbac/TenantLifecycleActionVisibilityTest.php tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php tests/Feature/Rbac/TenantResourceAuthorizationTest.php tests/Feature/Filament/ManagedTenantsLandingLifecycleTest.php tests/Feature/Filament/TenantGlobalSearchLifecycleScopeTest.php tests/Feature/Onboarding/OnboardingDraftLifecycleTest.php tests/Feature/Onboarding/OnboardingDraftAuthorizationTest.php` - `vendor/bin/sail bin pint --dirty --format agent` - manual browser smoke checks on `/admin/choose-tenant`, `/admin/tenants`, `/admin/onboarding`, `/admin/onboarding/{draft}`, and `/admin/operations/{run}` ## Filament / platform notes - Livewire v4 compliance preserved - panel provider registration unchanged in `bootstrap/providers.php` - Tenant resource global search remains backed by existing view/edit pages and is now separated from active-only selector eligibility - destructive actions remain action closures with confirmation and authorization enforcement - no asset pipeline changes and no new `filament:assets` deployment requirement Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #177	2026-03-17 11:48:55 +00:00
ahmido	73a879d061	feat: implement spec 147 tenant context enforcement (#176) ... ## Summary - implement Spec 147 for workspace-first tenant selector and remembered tenant context enforcement - harden canonical and tenant-bound route behavior so selected tenant mismatch stays informational - fix drift finding subject fallback for workspace-safe RBAC identifiers and centralize finding subject resolution ## Testing - vendor/bin/sail artisan test --compact tests/Feature/Filament/FindingViewRbacEvidenceTest.php tests/Feature/Findings/FindingsListDefaultsTest.php - vendor/bin/sail bin pint --dirty --format agent ## Notes - branch pushed at de0679cd8b - includes the spec artifacts under specs/147-tenant-selector-remembered-context-enforcement/ Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #176	2026-03-16 22:52:58 +00:00