ahmido
0a1ecf99c9
Applied diagnostic surface contract rules to Audit Log inspect modal and Support Diagnostics action context, consolidating raw diagnostic data into safe modals according to Spec 374. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #445
34 KiB
34 KiB
Route Inventory
Source basis: ./vendor/bin/sail artisan route:list --json, Laravel Boost route listing, Filament provider/page/resource discovery, navigation support files, and the Spec 323 browser pass.
Rows are route/page audit rows, not target mockups. Dynamic record routes are listed as route families when the same page class and design decision apply to multiple records.
| ID | Route / URL | Source | Page Name | Area | Scope | Reachability | Auth/RBAC Notes | Primary Archetype | Secondary Archetype | Design Depth | Repo Truth | Screenshot | Page Report | Notes |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| UI-001 | /admin -> /admin/workspaces/{workspace}/overview |
route + WorkspaceOverview |
Workspace Overview | App shell | workspace | reachable | workspace member | Overview / Dashboard | Workspace / Tenant Context | Strategic Surface | repo-verified | desktop | report | Redirected from /admin; first workspace-level landing page. |
| UI-002 | /admin/workspaces/{workspace}/overview |
route + page class | Workspace Overview direct | App shell | workspace | reachable | workspace member | Overview / Dashboard | Workspace / Tenant Context | Strategic Surface | repo-verified | desktop | report | Same surface as UI-001, route-owned workspace shell. |
| UI-003 | /admin/choose-workspace |
Filament page | Choose Workspace | App shell | workspace chooser | reachable | authenticated user | Workspace / Tenant Context | Auth / Access | Domain Pattern Surface | repo-verified | - | - | Workspace context entry point; should remain low-friction and explicit. |
| UI-004 | /admin/choose-environment |
Filament page | Choose Environment | App shell | workspace + environment selector | reachable | workspace member | Workspace / Tenant Context | Auth / Access | Domain Pattern Surface | repo-verified | - | - | Explicit environment-context entry point. |
| UI-005 | /admin/no-access |
Filament page | No Access | Auth/access | admin plane | reachable as guard output | authenticated user | Auth / Access | Utility / Internal | Design-System Cleanup Surface | repo-verified | - | - | Customer-safe denial copy should be checked in later copy pass. |
| UI-006 | /admin/login |
Filament auth page | Admin Login | Auth/access | admin plane | reachable when logged out | guest/admin guard | Auth / Access | Utility / Internal | Design-System Cleanup Surface | repo-verified | - | - | Uses custom Login page. |
| UI-007 | /admin/workspaces |
Workspace resource | Manage Workspaces | Settings / admin | workspace | reachable | workspace membership management capability | Settings / Admin | Workspace / Tenant Context | Strategic Surface | repo-verified | - | - | Membership-management surface, high trust/RBAC importance. |
| UI-008 | /admin/workspaces/create |
Workspace resource | Create Workspace | Settings / admin | workspace | route exists | create capability | Settings / Admin | Commercial / Entitlements | Domain Pattern Surface | repo-verified | - | - | Requires form review for entitlement and owner language. |
| UI-009 | /admin/workspaces/{record} and /edit |
Workspace resource | Workspace Detail / Edit | Settings / admin | workspace | route exists | workspace view/edit capability | Settings / Admin | Workspace / Tenant Context | Domain Pattern Surface | repo-verified | - | - | Dynamic record routes need seeded workspace context for visual review. |
| UI-010 | /admin/workspaces/{workspace}/environments |
route + ManagedEnvironmentsLanding |
Managed Environments | Workspace / environment | workspace | route exists | workspace member | Workspace / Tenant Context | Provider / Integration | Strategic Surface | repo-verified | - | report | Portfolio entry point for environments; runtime updated to robust selection layout. |
| UI-011 | /admin/workspaces/{workspace}/environments/{environment} |
route + EnvironmentDashboard |
Environment Dashboard | Workspace / environment | environment-bound | reachable | workspace + environment entitlement | Overview / Dashboard | Workspace / Tenant Context | Strategic Surface | repo-verified | desktop | report | Core environment product surface. |
| UI-012 | /admin/workspaces/{workspace}/environments/{environment}/diagnostics |
route + page | Environment Repair Diagnostics | Support | environment-bound | route exists | environment entitlement | Support / Diagnostics | Provider / Integration | Domain Pattern Surface | repo-verified | desktop planned; prior Spec 373 proof | report | Repair diagnostics must remain secondary and limited to supported access or membership repair cases; its read-only support modal is a handoff, while Environment Dashboard remains the official quick diagnostics entrypoint. |
| UI-013 | /admin/workspaces/{workspace}/environments/{environment}/access-scopes |
resource page | Environment Access Scopes | Settings / admin | environment-bound | route exists | owner/manager capability expected | Settings / Admin | Auth / Access | Strategic Surface | repo-verified | - | - | RBAC-sensitive environment access surface. |
| UI-014 | /admin/onboarding |
route + wizard | Environment Onboarding | Provider / onboarding | workspace | route exists | workspace capability | Provider / Integration | Workspace / Tenant Context | Strategic Surface | repo-verified | - | - | Large wizard; individual target treatment likely needed. |
| UI-015 | /admin/onboarding/{onboardingDraft} |
route + wizard | Onboarding Draft | Provider / onboarding | workspace | route exists | scoped draft resolver | Provider / Integration | Workspace / Tenant Context | Domain Pattern Surface | repo-verified | - | - | Dynamic workflow state requires seeded draft to review. |
| UI-016 | /admin/workspaces/{workspace}/operations |
route + Operations |
Operations | Monitoring | workspace | reachable | workspace member | Operations / Monitoring | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Canonical OperationRun hub. |
| UI-017 | /admin/workspaces/{workspace}/operations/{run} |
route + viewer | Operation Detail | Monitoring | workspace record | route exists | workspace + run entitlement | Operations / Monitoring | Evidence / Audit | Strategic Surface | repo-verified | - | - | Dynamic record route; requires run fixture for full review. |
| UI-018 | /admin/alerts |
cluster route | Alerts | Monitoring | workspace hub | reachable, redirects/lands on alert deliveries | workspace member | Operations / Monitoring | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Browser landed on Alert Deliveries for cluster subnavigation. |
| UI-019 | /admin/alerts/alert-deliveries |
resource | Alert Deliveries | Monitoring | workspace hub | reachable | workspace member | Operations / Monitoring | Evidence / Audit | Domain Pattern Surface | repo-verified | desktop | report | Table-backed alert signal surface. |
| UI-020 | /admin/alerts/alert-deliveries/{record} |
resource | Alert Delivery Detail | Monitoring | workspace record | route exists | workspace entitlement | Operations / Monitoring | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Dynamic record detail requires delivery fixture. |
| UI-021 | /admin/alerts/alert-rules |
resource | Alert Rules | Monitoring | workspace config | route exists | workspace alert config capability | Settings / Admin | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Configuration surface, not environment-owned. |
| UI-022 | /admin/alerts/alert-rules/create and /edit |
resource | Alert Rule Create/Edit | Monitoring | workspace config | route exists | config capability | Settings / Admin | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Mutating config form; dangerous-action review in later pattern pass. |
| UI-023 | /admin/alerts/alert-destinations |
resource | Alert Destinations | Monitoring | workspace config | route exists | destination capability | Settings / Admin | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Alert target management. |
| UI-024 | /admin/alerts/alert-destinations/create, /view, /edit |
resource | Alert Destination Detail/Edit | Monitoring | workspace config | route exists | destination capability | Settings / Admin | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Includes enable/disable/delete semantics; review high-impact actions later. |
| UI-025 | /admin/audit-log |
route + page | Audit Log | Evidence / audit | workspace hub | reachable | workspace member | Evidence / Audit | Operations / Monitoring | Strategic Surface | repo-verified | desktop | report | Core auditability surface. |
| UI-026 | /admin/finding-exceptions/queue |
page | Finding Exceptions Queue | Governance | workspace hub | reachable | workspace member | Exceptions / Accepted Risk | Findings / Inbox | Strategic Surface | repo-verified | desktop | report | Accepted-risk decision surface. |
| UI-027 | /admin/finding-exceptions/open-queue/{environment} |
route/controller | Exception Queue Deep Link | Governance | environment filter link | route exists | environment entitlement | Exceptions / Accepted Risk | Utility / Internal | Domain Pattern Surface | repo-verified | - | - | Navigation helper into queue; not a standalone product page. |
| UI-028 | /admin/governance/inbox |
page | Governance Inbox | Governance | workspace hub | reachable | workspace member | Findings / Inbox | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Strategic operator work surface. |
| UI-029 | /admin/governance/decisions |
page | Decision Register | Governance | workspace hub | reachable | capability-gated access | Evidence / Audit | Findings / Inbox | Strategic Surface | repo-verified | desktop | report | Decision and proof-link surface. |
| UI-030 | /admin/findings/my-work |
page | My Findings | Findings | workspace analysis | route exists | workspace member | Findings / Inbox | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Workspace-owned analysis surface with optional environment filtering. |
| UI-031 | /admin/findings/intake |
page | Findings Intake | Findings | workspace analysis | route exists | workspace member | Findings / Inbox | Operations / Monitoring | Domain Pattern Surface | repo-verified | - | - | Intake queue pattern. |
| UI-032 | /admin/findings/hygiene |
page | Findings Hygiene | Findings | workspace analysis | route exists | workspace member | Findings / Inbox | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Hygiene report pattern. |
| UI-033 | /admin/workspaces/{workspace}/environments/{environment}/findings |
resource | Environment Findings | Findings | environment-bound | route exists | environment entitlement | Findings / Inbox | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Environment list page. |
| UI-034 | /admin/workspaces/{workspace}/environments/{environment}/findings/{record} |
resource | Finding Detail | Findings | environment record | route exists | environment + record entitlement | Findings / Inbox | Evidence / Audit | Strategic Surface | repo-verified | - | - | Core triage detail route; needs individual review. |
| UI-035 | /admin/workspaces/{workspace}/environments/{environment}/finding-exceptions |
resource | Environment Exceptions | Governance | environment-bound | route exists | environment entitlement | Exceptions / Accepted Risk | Findings / Inbox | Domain Pattern Surface | repo-verified | - | - | Environment-specific exception list. |
| UI-036 | /admin/workspaces/{workspace}/environments/{environment}/finding-exceptions/{record} |
resource | Exception Detail | Governance | environment record | reachable | environment + record entitlement | Exceptions / Accepted Risk | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Accepted-risk lifecycle detail re-validated for incomplete-governance and calm-ready owner states. |
| UI-037 | /admin/reviews |
page | Review Register | Reviews | workspace hub | reachable | workspace member | Reviews | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Review planning and proof surface. |
| UI-038 | /admin/reviews/workspace |
page | Customer Review Workspace | Customer review | workspace hub | reachable | workspace member | Customer Workspace | Reviews | Strategic Surface | browser-verified | desktop | report | Spec 372 keeps the decision/evidence-first workspace and removes operation proof from the default customer evidence path. |
| UI-039 | /admin/workspaces/{workspace}/environments/{environment}/environment-reviews |
resource | Environment Reviews | Reviews | environment-bound | route exists | environment entitlement | Reviews | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Environment-scoped review list. |
| UI-040 | /admin/workspaces/{workspace}/environments/{environment}/environment-reviews/{record} |
resource | Environment Review Detail | Reviews | environment record | reachable | environment + record entitlement | Reviews | Evidence / Audit | Strategic Surface | browser-verified | desktop | report | Spec 372 verifies outcome/guidance/evidence before technical details. |
| UI-041 | /admin/workspaces/{workspace}/environments/{environment}/review-packs |
resource | Review Packs | Reviews | environment-bound | route exists | environment entitlement | Reviews | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Export artifact list. |
| UI-042 | /admin/workspaces/{workspace}/environments/{environment}/review-packs/{record} |
resource | Review Pack Detail | Reviews | environment record | reachable | environment + record entitlement | Reviews | Evidence / Audit | Strategic Surface | browser-verified | desktop | report | Spec 372 verifies readiness/contents/evidence before technical pack metadata. |
| UI-043 | /admin/review-packs/{reviewPack}/download |
controller | Review Pack Download | Reviews | workspace/environment artifact | route exists | download authorization expected | Reviews | Evidence / Audit | Design-System Cleanup Surface | repo-verified | - | - | Action endpoint, not page; include in coverage due customer artifact impact. |
| UI-099 | /admin/review-packs/{reviewPack}/report |
controller | Rendered Review Report | Reviews | workspace/environment artifact | route exists | signed review-pack view access plus current-export / ready / not-expired authority | Reviews | Evidence / Audit | Strategic Surface | repo-verified | desktop | report | Spec 366 adds management-first cover, text co-branding, KPI strip, profile-aware hierarchy, and print/mobile-ish browser evidence while keeping the route read-only and current-pack-only. |
| UI-044 | /admin/evidence/overview |
route + page | Evidence Overview | Evidence / audit | workspace hub | route exists | workspace member | Evidence / Audit | Reviews | Strategic Surface | repo-verified | - | - | Workspace-wide evidence landing. |
| UI-045 | /admin/workspaces/{workspace}/environments/{environment}/evidence |
resource | Evidence Snapshots | Evidence / audit | environment-bound | route exists | environment entitlement | Evidence / Audit | Reviews | Domain Pattern Surface | repo-verified | - | - | Environment evidence list. |
| UI-046 | /admin/workspaces/{workspace}/environments/{environment}/evidence/{record} |
resource | Evidence Snapshot Detail | Evidence / audit | environment record | reachable | environment + record entitlement | Evidence / Audit | Support / Diagnostics | Strategic Surface | browser-verified | desktop | report | Spec 372 reaches the detail route and keeps operation/source diagnostics progressively disclosed. |
| UI-047 | /admin/workspaces/{workspace}/environments/{environment}/stored-reports |
resource | Stored Reports | Evidence / audit | environment-bound | route exists | environment entitlement | Evidence / Audit | Reviews | Domain Pattern Surface | repo-verified | - | - | Report artifact list. |
| UI-048 | /admin/workspaces/{workspace}/environments/{environment}/stored-reports/{record} |
resource | Stored Report Detail | Evidence / audit | environment record | reachable | environment + record entitlement | Evidence / Audit | Reviews | Strategic Surface | browser-verified | desktop | report | Spec 372 verifies report scope/readiness before technical report metadata and raw payload. |
| UI-049 | /admin/workspaces/{workspace}/environments/{environment}/backup-schedules |
resource | Backup Schedules | Backup / restore | environment-bound | route exists | environment entitlement + backup capability | Backup / Restore | Operations / Monitoring | Strategic Surface | repo-verified | - | - | Schedule run/retry actions are high impact. |
| UI-050 | /admin/workspaces/{workspace}/environments/{environment}/backup-schedules/create and /edit |
resource | Backup Schedule Create/Edit | Backup / restore | environment-bound | route exists | backup schedule capability | Backup / Restore | Settings / Admin | Domain Pattern Surface | repo-verified | - | - | Form state and confirmation copy need later review. |
| UI-051 | /admin/workspaces/{workspace}/environments/{environment}/backup-sets |
resource | Backup Sets | Backup / restore | environment-bound | reachable | environment entitlement + backup capability | Backup / Restore | Evidence / Audit | Strategic Surface | browser-verified | desktop | report | Spec 371 verifies seeded Backup Sets list/detail with restore-point decision, included items, and secondary technical detail. |
| UI-052 | /admin/workspaces/{workspace}/environments/{environment}/backup-sets/create and /view |
resource | Backup Set Create/View | Backup / restore | environment record/workflow | route exists | backup capability | Backup / Restore | Evidence / Audit | Strategic Surface | repo-verified | - | - | Backup creation plus partial/failure restore-point states still need separate seeded workflow coverage. |
| UI-053 | /admin/workspaces/{workspace}/environments/{environment}/restore-runs |
resource | Restore Runs | Backup / restore | environment-bound | browser blocked by capability in fixture | environment entitlement + restore capability | Backup / Restore | Operations / Monitoring | Strategic Surface | repo-verified | blocked | report | Route exists; local fixture returned Forbidden. |
| UI-054 | /admin/workspaces/{workspace}/environments/{environment}/restore-runs/create and /view |
resource | Restore Run Create/View | Backup / restore | environment record/workflow | route exists | restore capability | Backup / Restore | Operations / Monitoring | Strategic Surface | repo-verified | - | - | Destructive/high-impact workflow; individual target spec required. |
| UI-055 | /admin/baseline-profiles |
resource | Baseline Profiles | Governance | workspace analysis | reachable | workspace member | Drift / Diff | Settings / Admin | Strategic Surface | repo-verified | desktop | report | Workspace-owned baseline library. |
| UI-056 | /admin/baseline-profiles/create |
resource | Create Baseline Profile | Governance | workspace analysis | route exists | baseline capability | Drift / Diff | Settings / Admin | Domain Pattern Surface | repo-verified | - | - | Workspace-owned form. |
| UI-057 | /admin/baseline-profiles/{record} and /edit |
resource | Baseline Profile Detail/Edit | Governance | workspace record | route exists | baseline capability | Drift / Diff | Evidence / Audit | Strategic Surface | repo-verified | - | - | Capture/compare actions need dangerous-action audit. |
| UI-058 | /admin/baseline-profiles/{record}/compare-matrix |
page | Baseline Compare Matrix | Governance | workspace analysis | route exists | baseline capability | Drift / Diff | Evidence / Audit | Strategic Surface | repo-verified | - | - | Matrix/product hierarchy review needed. |
| UI-059 | /admin/baseline-snapshots |
resource | Baseline Snapshots | Evidence / audit | workspace analysis | route exists | workspace member | Evidence / Audit | Drift / Diff | Domain Pattern Surface | repo-verified | - | - | Workspace-owned evidence library. |
| UI-060 | /admin/baseline-snapshots/{record} |
resource | Baseline Snapshot Detail | Evidence / audit | workspace record | route exists | workspace + record entitlement | Evidence / Audit | Drift / Diff | Domain Pattern Surface | repo-verified | - | - | Snapshot detail may expose raw payloads; review later. |
| UI-061 | /admin/workspaces/{workspace}/environments/{environment}/baseline-compare |
page | Baseline Compare | Governance | environment-bound | browser blocked/404 in fixture | workspace + environment entitlement and baseline state | Drift / Diff | Operations / Monitoring | Strategic Surface | repo-verified | blocked | report | Route exists in route list; smoke fixture could not render it. |
| UI-062 | /admin/workspaces/{workspace}/environments/{environment}/inventory |
cluster | Inventory Cluster | Inventory | environment-bound | route exists | environment entitlement | Inventory | Workspace / Tenant Context | Domain Pattern Surface | repo-verified | - | - | Cluster landing/navigation surface. |
| UI-063 | /admin/workspaces/{workspace}/environments/{environment}/inventory/inventory-coverage |
page | Inventory Coverage | Inventory | environment-bound | route exists | environment entitlement | Inventory | Evidence / Audit | Strategic Surface | repo-verified | - | - | Coverage truth page; strategic because it gates evidence confidence. |
| UI-064 | /admin/workspaces/{workspace}/environments/{environment}/inventory-items |
resource | Inventory Items | Inventory | environment-bound | route exists | environment entitlement | Inventory | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Core observed-state list. |
| UI-065 | /admin/workspaces/{workspace}/environments/{environment}/inventory-items/{record} |
resource | Inventory Item Detail | Inventory | environment record | route exists | environment + record entitlement | Inventory | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Detail report should distinguish raw provider payload from decision content. |
| UI-066 | /admin/workspaces/{workspace}/environments/{environment}/policies |
resource | Policies | Inventory | environment-bound | route exists | environment entitlement | Inventory | Drift / Diff | Domain Pattern Surface | repo-verified | - | - | Intune policy inventory list. |
| UI-067 | /admin/workspaces/{workspace}/environments/{environment}/policies/{record} |
resource | Policy Detail | Inventory | environment record | route exists | environment + record entitlement | Inventory | Drift / Diff | Domain Pattern Surface | repo-verified | - | - | Policy detail includes versions/settings. |
| UI-068 | /admin/workspaces/{workspace}/environments/{environment}/policy-versions |
resource | Policy Versions | Inventory | environment-bound | route exists | environment entitlement | Drift / Diff | Evidence / Audit | Domain Pattern Surface | repo-verified | - | - | Immutable policy version list. |
| UI-069 | /admin/workspaces/{workspace}/environments/{environment}/policy-versions/{record} |
resource | Policy Version Detail | Inventory | environment record | route exists | environment + record entitlement | Drift / Diff | Evidence / Audit | Strategic Surface | repo-verified | - | - | Snapshot/diff detail, high evidence value. |
| UI-070 | /admin/workspaces/{workspace}/environments/{environment}/entra-groups |
resource | Entra Groups | Directory | environment-bound | route exists | environment entitlement | Inventory | Provider / Integration | Domain Pattern Surface | repo-verified | - | - | Provider-bound directory cache list. |
| UI-071 | /admin/workspaces/{workspace}/environments/{environment}/entra-groups/{record} |
resource | Entra Group Detail | Directory | environment record | route exists | environment + record entitlement | Inventory | Provider / Integration | Design-System Cleanup Surface | repo-verified | - | - | Detail page likely pattern-covered. |
| UI-072 | /admin/provider-connections |
resource | Provider Connections | Provider / integration | workspace hub | reachable | workspace provider capability | Provider / Integration | Settings / Admin | Strategic Surface | repo-verified | desktop | report | Critical integration and credential surface. |
| UI-073 | /admin/provider-connections/create |
resource | Create Provider Connection | Provider / integration | workspace | route exists | provider manage capability | Provider / Integration | Settings / Admin | Strategic Surface | repo-verified | - | - | Credential/consent flow; individual review needed. |
| UI-074 | /admin/provider-connections/{record} and /edit |
resource | Provider Connection Detail/Edit | Provider / integration | workspace record | route exists | provider capability | Provider / Integration | Support / Diagnostics | Strategic Surface | repo-verified | - | - | Health/permission details must avoid raw-first UX. |
| UI-075 | /admin/settings/workspace |
page | Workspace Settings | Settings / admin | workspace hub | route exists | workspace settings view/manage capability | Settings / Admin | Commercial / Entitlements | Domain Pattern Surface | repo-verified | - | - | Workspace settings and lifecycle copy. |
| UI-076 | /admin/cross-environment-compare |
page | Cross Environment Compare | Governance | workspace analysis | route exists | workspace member + environment access | Drift / Diff | Workspace / Tenant Context | Strategic Surface | repo-verified | - | - | Portfolio comparison/promotion workflow. |
| UI-077 | /admin/workspaces/{workspace}/environments/{environment}/required-permissions |
page | Required Permissions | Provider / integration | environment-bound | route exists | environment entitlement | Provider / Integration | Support / Diagnostics | Domain Pattern Surface | repo-verified | desktop | report | Permission explanation and readiness-handoff surface. |
| UI-078 | /admin/consent/start and /admin/consent/callback |
controller/view | Admin Consent Flow | Provider / integration | workspace/onboarding | route exists | auth/onboarding state | Provider / Integration | Auth / Access | Domain Pattern Surface | repo-verified | - | - | External Microsoft consent handshake; not a normal product page. |
| UI-079 | /admin/rbac/start and /admin/rbac/callback |
controller | RBAC Delegated Auth Flow | Auth/access | workspace/onboarding | route exists | auth/RBAC state | Auth / Access | Provider / Integration | Domain Pattern Surface | repo-verified | - | - | External auth handshake. |
| UI-080 | BreakGlassRecovery page class |
file discovery | Break-glass Recovery | Support | admin/internal | hidden/unregistered in provider list | privileged use only | Support / Diagnostics | Utility / Internal | Manual Review Required | plausible-existing | - | - | File exists; no confirmed route in current route list. |
| UI-081 | /localization/context, /localization/override, /users/me/locale-preference |
controllers | Localization Utility | Utility | user/session | route exists | authenticated for preference | Utility / Internal | Settings / Admin | Design-System Cleanup Surface | repo-verified | - | - | API/utility endpoints, not product pages. |
| UI-082 | / |
route/view | Welcome | Public | public | reachable | none | Auth / Access | Utility / Internal | Design-System Cleanup Surface | repo-verified | - | - | Public Laravel welcome-style route; not admin product surface. |
| UI-083 | /auth/entra/redirect and /callback |
controller | Entra Login Flow | Auth/access | auth | route exists | external auth | Auth / Access | Provider / Integration | Domain Pattern Surface | repo-verified | - | - | External auth flow. |
| UI-084 | /admin/local/smoke-login, /admin/local/backup-health-browser-fixture-login |
local routes | Local Smoke Login | Utility | local/testing | reachable in local | local/testing only | Utility / Internal | Auth / Access | Internal / Deprecated / Hidden | repo-verified | - | - | Browser fixture utility; not product UI. |
| UI-085 | /system |
System panel | System Dashboard | Platform/system | platform | route exists | platform guard + capability | Overview / Dashboard | Support / Diagnostics | Strategic Surface | repo-verified | - | - | Platform control tower landing. |
| UI-086 | /system/login |
System auth page | System Login | Platform/system | platform | route exists | platform guard | Auth / Access | Utility / Internal | Design-System Cleanup Surface | repo-verified | - | - | Separate platform guard/session. |
| UI-087 | /system/directory/tenants |
System page | System Tenant Directory | Platform/system | platform | route exists | platform capability | Settings / Admin | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Platform directory; terminology must stay provider-bound. |
| UI-088 | /system/directory/tenants/{tenant} |
System page | System Tenant Detail | Platform/system | platform record | route exists | platform capability | Settings / Admin | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Dynamic platform detail route. |
| UI-089 | /system/directory/workspaces |
System page | System Workspace Directory | Platform/system | platform | route exists | platform capability | Settings / Admin | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Platform workspace directory. |
| UI-090 | /system/directory/workspaces/{workspace} |
System page | System Workspace Detail | Platform/system | platform record | route exists | platform capability | Settings / Admin | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Dynamic platform detail route. |
| UI-091 | /system/ops/controls |
System page | Operational Controls | Platform/system | platform | route exists | platform capability | Support / Diagnostics | Operations / Monitoring | Strategic Surface | repo-verified | - | - | High-impact platform controls. |
| UI-092 | /system/ops/failures |
System page | Failed Operations | Platform/system | platform | route exists | platform capability | Operations / Monitoring | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Platform failure triage. |
| UI-093 | /system/ops/runbooks |
System page | Runbooks | Platform/system | platform | route exists | platform capability | Support / Diagnostics | Utility / Internal | Domain Pattern Surface | repo-verified | - | - | Internal runbook surface. |
| UI-094 | /system/ops/runs |
System page | System Operations | Platform/system | platform | route exists | platform capability | Operations / Monitoring | Support / Diagnostics | Strategic Surface | repo-verified | - | - | Platform-wide operation monitor. |
| UI-095 | /system/ops/runs/{run} |
System page | System Operation Detail | Platform/system | platform record | route exists | platform capability | Operations / Monitoring | Evidence / Audit | Strategic Surface | repo-verified | - | - | Platform run detail with controls. |
| UI-096 | /system/ops/stuck |
System page | Stuck Operations | Platform/system | platform | route exists | platform capability | Operations / Monitoring | Support / Diagnostics | Domain Pattern Surface | repo-verified | - | - | Platform stalled-run triage. |
| UI-097 | /system/repair-workspace-owners |
System page | Repair Workspace Owners | Platform/system | platform | route exists | platform capability | Support / Diagnostics | Auth / Access | Strategic Surface | repo-verified | - | - | Break-glass repair surface; high-impact. |
| UI-098 | /system/security/access-logs |
System page | Access Logs | Platform/system | platform | route exists | platform capability | Evidence / Audit | Support / Diagnostics | Strategic Surface | repo-verified | - | - | Platform access audit surface. |
