TenantAtlas/.github/agents/copilot-instructions.md
ahmido 3490fb9e2c feat: RBAC troubleshooting & tenant UI bugfix pack (spec 067) (#84)
Summary
Implements Spec 067 “RBAC Troubleshooting & Tenant UI Bugfix Pack v1” for the tenant admin plane (/admin) with strict RBAC UX semantics:

Non-member tenant scope ⇒ 404 (deny-as-not-found)
Member lacking capability ⇒ 403 server-side, while the UI stays visible-but-disabled with standardized tooltips
What changed
Tenant view header actions now use centralized UI enforcement (no “normal click → error page” for readonly members).
Archived tenants remain resolvable in tenant-scoped routes for entitled members; an “Archived” banner is shown.
Adds tenant-scoped diagnostics page (/admin/t/{tenant}/diagnostics) with safe repair actions (confirmation + authorization + audit log).
Adds/updates targeted Pest tests to lock the 404 vs 403 semantics and action UX.
Implementation notes
Livewire v4.0+ compliance: Uses Filament v5 + Livewire v4 conventions; widget Blade views render a single root element.
Provider registration: Laravel 11+ providers stay in providers.php (no changes required).
Global search: No global search behavior/resources changed in this PR.
Destructive actions:
Tenant archive/restore/force delete and diagnostics repairs execute via ->action(...) and include ->requiresConfirmation().
Server-side authorization is enforced (non-members 404, insufficient capability 403).
Assets: No new assets. No change to php artisan filament:assets expectations.
Tests
Ran:

vendor/bin/sail bin pint --dirty
vendor/bin/sail artisan test --compact (focused files for Spec 067)

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #84
2026-01-31 20:09:25 +00:00

1.6 KiB

TenantAtlas Development Guidelines

Auto-generated from all feature plans. Last updated: 2025-12-22

Active Technologies

  • PHP 8.4.15 + Laravel 12, Filament v4, Livewire v3 (feat/005-bulk-operations)

  • PostgreSQL (app), SQLite in-memory (tests) (feat/005-bulk-operations)

  • PostgreSQL (Sail locally) (feat/032-backup-scheduling-mvp)

  • PHP 8.4.x + Laravel 12, Filament v4, Livewire v3 (feat/042-inventory-dependencies-graph)

  • PostgreSQL (JSONB) (feat/042-inventory-dependencies-graph)

  • PHP 8.4.x (Laravel 12) + Laravel 12, Filament v4, Livewire v3 (feat/047-inventory-foundations-nodes)

  • PostgreSQL (JSONB for InventoryItem.meta_jsonb) (feat/047-inventory-foundations-nodes)

  • PostgreSQL (JSONB in operation_runs.context, operation_runs.summary_counts) (056-remove-legacy-bulkops)

  • PHP 8.4.15 (Laravel 12.47.0) + Filament v5.0.0, Livewire v4.0.1 (058-tenant-ui-polish)

  • PHP 8.4 (per repo guidelines) + Laravel 12, Filament v5, Livewire v4 (067-rbac-troubleshooting)

  • PostgreSQL (via Laravel Sail) (067-rbac-troubleshooting)

  • PHP 8.4.15 (feat/005-bulk-operations)

Project Structure

src/
tests/

Commands

Add commands for PHP 8.4.15

Code Style

PHP 8.4.15: Follow standard conventions

Recent Changes

  • 067-rbac-troubleshooting: Added PHP 8.4 (per repo guidelines) + Laravel 12, Filament v5, Livewire v4
  • 058-tenant-ui-polish: Added PHP 8.4.15 (Laravel 12.47.0) + Filament v5.0.0, Livewire v4.0.1
  • 058-tenant-ui-polish: Added [if applicable, e.g., PostgreSQL, CoreData, files or N/A]