TenantAtlas/app/Support/Livewire/TrustedState/TrustedStateClass.php
ahmido 5ec62cd117 feat: harden livewire trusted state boundaries (#182)
## Summary
- add the shared trusted-state model and resolver helpers for first-slice Livewire and Filament surfaces
- harden managed tenant onboarding, tenant required permissions, and system runbooks against forged or stale public state
- add focused Pest guard and regression coverage plus the complete spec 152 artifact set

## Validation
- `vendor/bin/sail artisan test --compact`
- manual smoke validated on `/admin/onboarding/{onboardingDraft}`
- manual smoke validated on `/admin/tenants/{tenant}/required-permissions`
- manual smoke validated on `/system/ops/runbooks`

## Notes
- Livewire v4.0+ / Filament v5 stack unchanged
- no new panels, routes, assets, or global-search changes
- provider registration remains in `bootstrap/providers.php`

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #182
2026-03-18 23:01:14 +00:00

23 lines
481 B
PHP

<?php
declare(strict_types=1);
namespace App\Support\Livewire\TrustedState;
enum TrustedStateClass: string
{
case Presentation = 'presentation';
case LockedIdentity = 'locked_identity';
case ServerDerivedAuthority = 'server_derived_authority';
public function allowsClientMutation(): bool
{
return $this === self::Presentation;
}
public function requiresServerRevalidation(): bool
{
return $this !== self::Presentation;
}
}