## Summary
- add the shared trusted-state model and resolver helpers for first-slice Livewire and Filament surfaces
- harden managed tenant onboarding, tenant required permissions, and system runbooks against forged or stale public state
- add focused Pest guard and regression coverage plus the complete spec 152 artifact set
## Validation
- `vendor/bin/sail artisan test --compact`
- manual smoke validated on `/admin/onboarding/{onboardingDraft}`
- manual smoke validated on `/admin/tenants/{tenant}/required-permissions`
- manual smoke validated on `/system/ops/runbooks`
## Notes
- Livewire v4.0+ / Filament v5 stack unchanged
- no new panels, routes, assets, or global-search changes
- provider registration remains in `bootstrap/providers.php`
Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #182
23 lines
481 B
PHP
23 lines
481 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support\Livewire\TrustedState;
|
|
|
|
enum TrustedStateClass: string
|
|
{
|
|
case Presentation = 'presentation';
|
|
case LockedIdentity = 'locked_identity';
|
|
case ServerDerivedAuthority = 'server_derived_authority';
|
|
|
|
public function allowsClientMutation(): bool
|
|
{
|
|
return $this === self::Presentation;
|
|
}
|
|
|
|
public function requiresServerRevalidation(): bool
|
|
{
|
|
return $this !== self::Presentation;
|
|
}
|
|
}
|