TenantAtlas/app
ahmido cc93329672 feat: canonical tenant context resolution (#164)
## Summary
- introduce a canonical admin tenant filter-state helper and route all in-scope workspace-admin tenant resolution through `OperateHubShell::activeEntitledTenant()`
- align operations monitoring, operation-run deep links, Entra group admin list/view/search behavior, and shared context-bar rendering with the documented scope contract
- add the Spec 135 design artifacts, architecture note, focused guardrail coverage, and non-regression tests for filter persistence, direct-record access, and global search safety

## Validation
- `vendor/bin/sail bin pint --dirty --format agent`
- `vendor/bin/sail artisan test --compact tests/Feature/Monitoring/OperationsKpiHeaderTenantContextTest.php tests/Feature/Monitoring/OperationsTenantScopeTest.php tests/Feature/Monitoring/OperationsCanonicalUrlsTest.php tests/Feature/Spec085/OperationsIndexHeaderTest.php tests/Feature/Spec085/RunDetailBackAffordanceTest.php tests/Feature/Filament/OperationRunListFiltersTest.php tests/Feature/Filament/EntraGroupAdminScopeTest.php tests/Feature/Filament/EntraGroupGlobalSearchScopeTest.php tests/Feature/DirectoryGroups/BrowseGroupsTest.php tests/Feature/Filament/EntraGroupEnterpriseDetailPageTest.php tests/Feature/Filament/PolicyVersionResolvedReferenceLinksTest.php tests/Feature/Filament/EntraGroupResolvedReferencePresentationTest.php tests/Feature/Guards/AdminTenantResolverGuardTest.php tests/Feature/OpsUx/OperateHubShellTest.php tests/Feature/Filament/Alerts/AlertsKpiHeaderTest.php tests/Feature/Alerts/AlertDeliveryDeepLinkFiltersTest.php`
- `vendor/bin/sail artisan test --compact tests/Feature/Filament/TableStatePersistenceTest.php tests/Feature/Filament/TenantScopingTest.php tests/Feature/Filament/Alerts/AlertDeliveryViewerTest.php tests/Unit/Support/References/CapabilityAwareReferenceResolverTest.php`

## Notes
- Filament v5 remains on Livewire v4.0+ compliant surfaces only.
- No provider registration changes were needed; Laravel 12 provider registration remains in `bootstrap/providers.php`.
- Entra group global search remains enabled and is now scoped to the canonical admin tenant contract.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #164
2026-03-11 21:24:28 +00:00
..
Console/Commands feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Contracts/Hardening feat: provider access hardening (RBAC write gate) (#132) 2026-02-23 00:49:37 +00:00
Exceptions feat: provider access hardening (RBAC write gate) (#132) 2026-02-23 00:49:37 +00:00
Filament feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
Http Spec 129: add workspace admin home overview (#157) 2026-03-09 21:53:25 +00:00
Jobs feat: add Intune RBAC baseline compare support (#156) 2026-03-09 18:49:20 +00:00
Listeners 085-tenant-operate-hub (#103) 2026-02-11 13:02:03 +00:00
Livewire feat: add resolved reference presentation layer (#161) 2026-03-10 18:52:52 +00:00
Models feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Notifications feat(113): Platform Ops Runbooks — UX Polish (Filament-native, system theme, live scope) (#137) 2026-02-27 01:11:25 +00:00
Observers Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
Policies feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
Providers feat: add resolved reference presentation layer (#161) 2026-03-10 18:52:52 +00:00
Rules feat/049-backup-restore-job-orchestration (#56) 2026-01-11 15:59:06 +00:00
Services feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Support feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00