move into sonardesk

integration/PHASE5.md

@@ -0,0 +1,25 @@
+# Phase 5 — Administration authorization correction
+
+This is a **delta package** against Phase 4, not a full project.
+
+## What changed
+- Updated the SonarDesk admin Gate to accept an explicitly granted Spatie `manage-sonardesk-licensing` permission (web guard) as well as the existing approved administrator roles.
+- Added Pest authorization smoke tests for anonymous users, unprivileged verified users, and the explicit permission grant.
+- Did not change any licensing API, checkout, webhook, or customer records.
+
+## Install
+1. Back up `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php`.
+2. Copy the included `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php` over the existing file.
+3. Copy the included test into `tests/Feature/` if desired.
+4. Run `composer dump-autoload && php artisan optimize:clear && php artisan permission:cache-reset`.
+5. Run `php artisan route:list --path=administration/sonardesk -v`.
+6. Run `php artisan test --filter=SonarDeskAdminAuthorizationTest` against a **disposable test database**. Do not run destructive test migrations against live customer data.
+
+## Next implementation milestones
+- Phase 6: audited commerce checkout, webhook idempotency, customer identity mapping and data import.
+- Phase 7: downloads, releases, appcast, system requirements, and ABSDev Stylist frontend.
+- Phase 8: complete route parity, automated regression tests, staging deployment and cutover.
+
+## Limitations
+- The tests have not been run against your local ABSDev database.
+- No production-readiness claim is made; commerce/customer migration is still pending.