TenantAtlas/app/Support
ahmido cc93329672 feat: canonical tenant context resolution (#164)
## Summary
- introduce a canonical admin tenant filter-state helper and route all in-scope workspace-admin tenant resolution through `OperateHubShell::activeEntitledTenant()`
- align operations monitoring, operation-run deep links, Entra group admin list/view/search behavior, and shared context-bar rendering with the documented scope contract
- add the Spec 135 design artifacts, architecture note, focused guardrail coverage, and non-regression tests for filter persistence, direct-record access, and global search safety

## Validation
- `vendor/bin/sail bin pint --dirty --format agent`
- `vendor/bin/sail artisan test --compact tests/Feature/Monitoring/OperationsKpiHeaderTenantContextTest.php tests/Feature/Monitoring/OperationsTenantScopeTest.php tests/Feature/Monitoring/OperationsCanonicalUrlsTest.php tests/Feature/Spec085/OperationsIndexHeaderTest.php tests/Feature/Spec085/RunDetailBackAffordanceTest.php tests/Feature/Filament/OperationRunListFiltersTest.php tests/Feature/Filament/EntraGroupAdminScopeTest.php tests/Feature/Filament/EntraGroupGlobalSearchScopeTest.php tests/Feature/DirectoryGroups/BrowseGroupsTest.php tests/Feature/Filament/EntraGroupEnterpriseDetailPageTest.php tests/Feature/Filament/PolicyVersionResolvedReferenceLinksTest.php tests/Feature/Filament/EntraGroupResolvedReferencePresentationTest.php tests/Feature/Guards/AdminTenantResolverGuardTest.php tests/Feature/OpsUx/OperateHubShellTest.php tests/Feature/Filament/Alerts/AlertsKpiHeaderTest.php tests/Feature/Alerts/AlertDeliveryDeepLinkFiltersTest.php`
- `vendor/bin/sail artisan test --compact tests/Feature/Filament/TableStatePersistenceTest.php tests/Feature/Filament/TenantScopingTest.php tests/Feature/Filament/Alerts/AlertDeliveryViewerTest.php tests/Unit/Support/References/CapabilityAwareReferenceResolverTest.php`

## Notes
- Filament v5 remains on Livewire v4.0+ compliant surfaces only.
- No provider registration changes were needed; Laravel 12 provider registration remains in `bootstrap/providers.php`.
- Entra group global search remains enabled and is now scoped to the canonical admin tenant contract.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #164
2026-03-11 21:24:28 +00:00
..
Alerts feat(alerts): test message + last test status + deep links (#122) 2026-02-18 23:12:38 +00:00
Audit feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Auth Spec 119: Drift cutover to Baseline Compare (golden master) (#144) 2026-03-06 14:30:49 +00:00
Badges feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Baselines feat: add Intune RBAC baseline compare support (#156) 2026-03-09 18:49:20 +00:00
Concerns feat(alerts): test message + last test status + deep links (#122) 2026-02-18 23:12:38 +00:00
Enums feat/042-inventory-dependencies-graph (#50) 2026-01-10 12:50:08 +00:00
Filament feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
Inventory feat: add Intune RBAC baseline compare support (#156) 2026-03-09 18:49:20 +00:00
Links feat(spec-080): workspace-managed tenant administration migration (#97) 2026-02-07 19:45:13 +00:00
Middleware Spec 129: add workspace admin home overview (#157) 2026-03-09 21:53:25 +00:00
Navigation feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
OperateHub feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
Operations feat(alerts): Monitoring cluster + v1 resources (spec 099) (#121) 2026-02-18 15:20:43 +00:00
OpsUx Spec 123: operations auto-refresh pass (#149) 2026-03-08 11:11:26 +00:00
Providers feat: add Intune RBAC inventory and backup support (#155) 2026-03-09 10:40:51 +00:00
Rbac Spec 116: Baseline drift engine v1 (meta fidelity + coverage guard) (#141) 2026-03-02 22:02:58 +00:00
References feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
Settings feat(115): baseline operability + alerts (#140) 2026-03-01 02:26:47 +00:00
System feat(114): system console control tower (merged) (#139) 2026-02-28 00:15:31 +00:00
SystemConsole feat(114): system console control tower (merged) (#139) 2026-02-28 00:15:31 +00:00
Ui feat: lay audit log foundation (#163) 2026-03-11 09:39:37 +00:00
Verification feat: add Intune RBAC inventory and backup support (#155) 2026-03-09 10:40:51 +00:00
WorkspaceIsolation SCOPE-001: DB-level workspace isolation via workspace_id (#112) 2026-02-14 22:34:02 +00:00
Workspaces Spec 129: add workspace admin home overview (#157) 2026-03-09 21:53:25 +00:00
OperationCatalog.php Spec 119: Drift cutover to Baseline Compare (golden master) (#144) 2026-03-06 14:30:49 +00:00
OperationRunLinks.php feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
OperationRunOutcome.php Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
OperationRunStatus.php 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
OperationRunType.php Spec 119: Drift cutover to Baseline Compare (golden master) (#144) 2026-03-06 14:30:49 +00:00
RbacReason.php Intune RBAC: graceful unsupported-account handling, health-check fixes, tests and docs updates 2025-12-13 01:25:06 +01:00
RedactionIntegrity.php Spec 120: harden secret redaction integrity (#146) 2026-03-07 16:43:01 +00:00
RestoreRunIdempotency.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
RestoreRunStatus.php feat/011-restore-run-wizard (#17) 2025-12-31 19:14:59 +00:00
ReviewPackStatus.php Fix Review Pack generation UX + notifications (#133) 2026-02-23 19:42:52 +00:00
TenantRole.php 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00