Merge development into production [major]

.github/workflows/deploy-environment.yml

@@ -83,12 +83,13 @@ jobs:
         run: yarn install --frozen-lockfile --ignore-engines
 
       - name: Build assets
-        run: npm run production
+        run: yarn build
 
       - name: Create deployment package
         run: |
           rm -rf deployment-package || true
           TEMP_DIR=$(mktemp -d)
+          # Includes Vite's public/build
           rsync -av \
             --exclude=node_modules \
             --exclude=.git \
@@ -97,7 +98,7 @@ jobs:
             --exclude=storage/logs \
             --exclude=vendor \
             . "$TEMP_DIR/"
-          cp -r public/css public/js public/fonts public/images public/svg public/mix-manifest.json "$TEMP_DIR/public/" || true
+          test -f "$TEMP_DIR/public/build/manifest.json"
           mv "$TEMP_DIR" deployment-package
 
       - name: Upload deployment artifact

.gitignore

@@ -1,10 +1,10 @@
 /node_modules
+/public/build
+/public/hot
 /public/storage
 /public/css
 /public/fonts
-/public/images
 /public/js
-/public/mix-manifest.json
 /storage/*.key
 /vendor
 .env

app/Providers/AppServiceProvider.php

@@ -22,6 +22,7 @@
 
 use App\View\Composers\CourseComposer;
 use App\View\Composers\NoticesComposer;
+use Illuminate\Support\Facades\Gate;
 use Illuminate\Support\Facades\Schema;
 use Illuminate\Support\ServiceProvider;
 
@@ -44,6 +45,12 @@ public function boot(): void
     {
         Schema::defaultStringLength(191);
 
+        // Implicitly grant "Super Admin" role all permissions
+        // This works in the app by using gate-related functions like auth()->user->can() and @can()
+        Gate::before(function ($user, $ability) {
+            return $user->hasRole('Super Admin') ? true : null;
+        });
+
         \View::composer(
             'partials.notices', NoticesComposer::class
         );