TenantAtlas/app
ahmido 90bfe1516e feat(spec-090): action surface contract compliance (#108)
Implements Spec 090 (Action Surface Contract Compliance & RBAC Hardening).

Highlights:
- Adds/updates action surface declarations and shrinks baseline exemptions.
- Standardizes Filament action grouping/order and empty-state CTAs.
- Enforces RBAC UX semantics (non-member -> 404, member w/o capability -> disabled + tooltip, server-side 403).
- Adds audit logging for successful side-effect actions.
- Fixes Provider Connections list context so header create + row actions resolve tenant correctly.

Tests (focused):
- vendor/bin/sail artisan test --compact tests/Feature/090/
- vendor/bin/sail artisan test --compact tests/Feature/Guards/ActionSurfaceContractTest.php
- vendor/bin/sail bin pint --dirty

Livewire/Filament:
- Filament v5 + Livewire v4 compliant.
- No panel provider registration changes (Laravel 11+ registration remains in bootstrap/providers.php).

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #108
2026-02-13 01:30:22 +00:00
..
Console/Commands feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Exceptions feat/032-backup-scheduling-mvp (#34) 2026-01-05 04:22:13 +00:00
Filament feat(spec-090): action surface contract compliance (#108) 2026-02-13 01:30:22 +00:00
Http feat(spec-089): provider connections tenantless UI (#107) 2026-02-12 16:35:13 +00:00
Jobs feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Listeners 085-tenant-operate-hub (#103) 2026-02-11 13:02:03 +00:00
Livewire feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Models feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Notifications feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Observers Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
Policies feat(spec-089): provider connections tenantless UI (#107) 2026-02-12 16:35:13 +00:00
Providers feat(spec-089): provider connections tenantless UI (#107) 2026-02-12 16:35:13 +00:00
Rules feat/049-backup-restore-job-orchestration (#56) 2026-01-11 15:59:06 +00:00
Services feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
Support feat(spec-090): action surface contract compliance (#108) 2026-02-13 01:30:22 +00:00