Logos were being written to the default filesystem disk, which
resolves to storage/app/private and isn't web-servable, so the
frontend couldn't load the image. Store logos on the public disk
(storage/app/public, symlinked to public/storage) instead, and
resolve logoUrl() against that disk explicitly.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015HaT8a5ZWh45JkjTLPWeaP
EvCompanyResource returned the raw disk-relative path stored by
Filament's FileUpload (e.g. "logos/xxx.png"), not something API
consumers can render directly.
- EvCompany::logoUrl() builds an absolute URL from the configured
filesystem disk, guarding against a disk (e.g. s3) that already
returns an absolute URL so it isn't double-prefixed.
- EvCompanyResource now exposes that as 'logo' instead of the raw path.
- T6.1: named rate limiters (api-read/api-write/api-auth/api-webhooks),
applied per module route group with tighter limits on booking/payment
writes and the KBZ webhook than read-only catalog/routing endpoints.
- T6.2: install spatie/laravel-activitylog; LogsActivity on Booking/
Payment/Refund status transitions and catalog/pricing admin CRUD
(EvCompany, Destination, DepartureTimeSlot, EvRoute, RoutePricing).
New IdentityPlugin with a read-only AuditLogResource gated by
view_audit_log.
- T6.3: JSON error envelope for api/* in bootstrap/app.php (401/403/404/
405/429/500 fallback), plus PaymentGatewayException (422 declined /
502 unavailable).
- T6.4: feature tests proving the FastAPI agent token gets 403 on
refund/cancel-not-owned and 405 (no write handler) on catalog/routing
writes.
- T6.5: install gboquizosanchez/filament-log-viewer with a custom
Filament admin theme (required for its views' Tailwind classes to
compile), LOG_CHANNEL/FILAMENT_LOG_VIEWER_DRIVER=daily, registered
under Operations in the sidebar.
252 tests passing.
Implements Phase 3 in full: EvRoute model with company/destination relations
and a from/to-must-differ guard; the ev_route_time_slots pivot; RoutePricing
with a per-route is_blocked flag (every route auto-manages exactly one price
row per vehicle option via a fixed-row Filament repeater on both create and
edit); PricingService::quote() with a shared VehicleOption enum; RoutingPlugin
with the EvRouteResource admin UI (activation gated on non-blocked options
being priced); the /api/v1/routes read API (list/show/pricing/time-slots,
AI-agent-friendly nested shape); and Redis-tag-based response caching
invalidated via EvRoute/RoutePricing observers.
Adds the shared DepartureTimeSlot catalog entity with its Filament
resource, and public GET /api/v1/companies + /api/v1/destinations
endpoints (auth:sanctum + throttled) for the mini app/mobile/agent
clients to consume.
Registers CatalogPlugin with the admin panel so catalog Filament
resources auto-discover, and adds the EvCompany model/migration/
factory plus its Filament resource (auto-generated slug on create).
Nyan Lin Paing