## Summary - retire legacy `/admin/t` and active `/admin/tenants` product surfaces in favor of canonical workspace-scoped managed-environment routes - centralize runtime URL generation through `ManagedEnvironmentLinks` and update intended URL handling to reject legacy tenant paths - remove dormant tenant panel runtime, rename test helpers to the admin environment context, and add guard coverage for route/helper regressions ## Validation - targeted Feature guard, workspace, provider connection, required permissions, and Filament test lanes run under Sail - browser smoke coverage run for provider connection and workspace RBAC environment access flows - formatting and diff checks completed with Pint and `git diff --check` ## Notes - Filament remains on v5 with Livewire v4 - provider registration stays in `apps/platform/bootstrap/providers.php` - retired tenant resource global search is disabled and destructive action confirmation rules remain unchanged Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #352
2.6 KiB
2.6 KiB
Requirements Checklist: Managed Environment Canonical Route Cutover
Purpose: Preparation readiness checklist for Spec 297.
Created: 2026-05-12
Spec Readiness
- Problem statement names the active legacy surfaces.
- Goals distinguish product/route/UI/test truth from DB/model rename.
- Non-goals explicitly forbid compatibility layer, DB rename, broad localization, Package Execution, Guided Operations, Microsoft provider refactor, and broad RBAC refactor.
- Functional requirements cover TenantPanelProvider,
/admin/t,/admin/tenants, canonical managed-environment links, intended URLs, required permissions, provider connections, helper rename, copy cleanup, guards, and RBAC. - Acceptance criteria define route, link, helper, intended URL, provider/permission, RBAC, and validation outcomes.
- Final implementation output contract is included.
Constitution / Governance
- SPEC-GATE-001 candidate check is filled.
- Proportionality review is filled for the possible link helper and spec-local audit artifact.
- No new persisted truth is introduced.
- Workspace isolation and managed-environment entitlement are explicit.
- RBAC 404/403 semantics are explicit.
- Provider boundary handling distinguishes platform route truth from Microsoft tenant ID terminology.
- Test governance is explicit and bounded.
Filament / Laravel
- Filament v5 / Livewire v4 compliance is explicitly stated.
- Provider registration location is
apps/platform/bootstrap/providers.php. - Global search impact for retired resources is called out.
- Destructive-action confirmation and server authorization expectations are preserved.
- Asset strategy is unchanged unless implementation discovers otherwise.
- Testing plan names Filament/Page/Action/Guard proof surfaces.
Implementation Readiness
spec.mdexists.plan.mdexists.tasks.mdexists.research.mdexists.data-model.mdexists and says no persistence changes are planned.quickstart.mdexists.legacy-surface-audit.mdexists with initial prep findings and refresh requirements.- Logical route/link contract exists.
- Tasks are ordered, small, and verifiable.
Open Items For Implementation
- Refresh
legacy-surface-audit.mdafter branch/session setup. - Determine whether an existing managed-environment link helper can be extended.
- Determine the exact TenantResource retirement mechanism.
- Determine whether any old
/admin/tenants...URL has safe canonical resolution; default remains 404.