## Summary - retire the remaining tenant-scoped provider-connection legacy routes and update canonical verification and link behavior - complete the provider target-scope fallback cleanup so neutral shared scope data falls back to the managed environment when the raw connection tenant identifier is blank - stop mirroring workspace roles into managed-environment scope persistence and cut the targeted admin-panel test helpers over to the post-cutover context path - add and update the Spec 287 artifact package and targeted regression coverage for route retirement, provider-core neutralization, workspace-first RBAC, and helper cutover ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/ProviderConnections/LegacyRedirectTest.php tests/Feature/ProviderConnections/TenantlessListRouteTest.php tests/Feature/ProviderConnections/TenantlessListScopingTest.php tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/ProviderConnectionWorkspaceFirstPolicyTest.php tests/Feature/Reviews/CustomerReviewWorkspaceLaunchLinksTest.php tests/Feature/Rbac/TriageReviewStateAuthorizationTest.php` - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Spec281ProviderConnectionScopeSmokeTest.php tests/Browser/Spec285WorkspaceRbacEnvironmentAccessSmokeTest.php` - `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` ## Notes - Filament remains on Livewire v4 and provider registration stays unchanged in `apps/platform/bootstrap/providers.php`. - No new asset registration or deployment-step changes are included in this slice. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #346
3.6 KiB
3.6 KiB
Requirements Checklist: Cutover Prerequisite Completion
Scope and problem framing
- The package describes the real repo problem as unfinished runtime and test-harness prerequisites, not as missing quality gates.
- The package keeps scope limited to the five named prerequisite areas.
- The package explicitly moves quality gates and no-legacy enforcement to Spec
288. - The package explicitly excludes full-suite baselines, package execution, guided operations, UI copy cleanup, and provider capability expansion.
Repo-truth anchoring
- The package names the surviving provider-connection legacy route family in
apps/platform/routes/web.php. - The package pins the in-slice provider-connection launch-point inventory in
apps/platform/app/Providers/Filament/AdminPanelProvider.php,apps/platform/app/Filament/Resources/TenantResource.php,apps/platform/app/Filament/Pages/TenantRequiredPermissions.php,apps/platform/app/Support/OperationRunLinks.php,apps/platform/app/Support/Providers/ProviderReasonTranslator.php, andapps/platform/app/Support/Verification/VerificationLinkBehavior.php. - The package anchors provider target-scope completion to the real shared provider-core seams from the
281workstream. - The package anchors environment-scope cleanup to role-bearing
ManagedEnvironmentMembershippersistence drift on the existing auth seams. - The package anchors helper cutover to
apps/platform/tests/Pest.php,apps/platform/tests/Feature/Reviews/CustomerReviewWorkspaceLaunchLinksTest.php, andapps/platform/tests/Feature/Rbac/TriageReviewStateAuthorizationTest.php.
Completion inventory and boundedness
- The same completion categories appear across
spec.md,plan.md,data-model.md, andquickstart.md. - The package defines canonical replacements instead of adding compatibility aliases or a guard inventory.
- The package keeps provider-owned Microsoft detail nested and bounded instead of pretending it disappears entirely.
- The package forbids introducing a new guard subsystem or full-suite wrapper here.
Validation and workflow
- Planned proof stays bounded to targeted feature tests, targeted browser validation, and formatting.
- The same validation commands appear in
spec.md,plan.md,tasks.md, andquickstart.md. - The task package explicitly re-verifies Filament/Livewire/provider-registration invariants and the no-asset-registration / no-deployment-step boundary.
- The package keeps review outcome, workflow outcome, and test-governance outcome aligned.
- The package uses
RuntimePrerequisiterather thanGuardrailas the close-out intent.
Adjacent-spec control
- Spec
288is named as the explicit follow-up package for quality gates and no-legacy enforcement. - The package does not silently absorb UI copy cleanup from Spec
286. - The package does not silently absorb provider capability expansion from Spec
283. - The package does not silently absorb package execution or guided operations work.
Notes
- Reviewed against
.specify/memory/constitution.md, current repo route, provider-core, auth, and test-support seams, and adjacent Specs280,281,285, and286on 2026-05-10. - This artifact package is implementation-ready and no longer uses the earlier blocked-by-prerequisites posture.
Outcome
- Review outcome class:
acceptable-special-case - Workflow outcome:
keep - Test-governance outcome:
keep - Readiness note: implementation is ready as a bounded prerequisite-completion slice; no-legacy enforcement is deferred to Spec
288