feat: L'Ami Fiduciaire V1.0.0 — full codebase with Story 0.1 complete

Initial commit of the L'Ami Fiduciaire SaaS platform built on Laravel 12,
Vue 3, Inertia.js 2, and Tailwind CSS 4.

Story 0.1 (rename folders to declarations in database) is implemented and
code-reviewed: migration, rollback, and 6 Pest tests all passing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/Http/Middleware/EnsureUserHasWorkspace.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsureUserHasWorkspace
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $workspaceId = $request->session()->get('current_workspace_id');
+
+        if (! $workspaceId) {
+            return redirect()->route('dashboard')
+                ->with('error', __('Please select a workspace first.'));
+        }
+
+        $user = $request->user();
+        $hasAccess = $user->workspaces()->where('workspaces.id', $workspaceId)->exists();
+
+        if (! $hasAccess) {
+            $request->session()->forget('current_workspace_id');
+
+            return redirect()->route('dashboard')
+                ->with('error', __('You do not have access to this workspace.'));
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/EnsureUserIsAdmin.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Enums\UserGroup;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsureUserIsAdmin
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $user = $request->user();
+
+        if (! $user || (! $user->group->is(UserGroup::Admin) && ! $user->group->is(UserGroup::Superadmin))) {
+            abort(403);
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/HandleAppearance.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\View;
+use Symfony\Component\HttpFoundation\Response;
+
+class HandleAppearance
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  Closure(Request): (Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        View::share('appearance', $request->cookie('appearance') ?? 'system');
+
+        return $next($request);
+    }
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -0,0 +1,101 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Cache;
+use Inertia\Inertia;
+use Inertia\Middleware;
+
+class HandleInertiaRequests extends Middleware
+{
+    /**
+     * The root template that's loaded on the first page visit.
+     *
+     * @see https://inertiajs.com/server-side-setup#root-template
+     *
+     * @var string
+     */
+    protected $rootView = 'app';
+
+    /**
+     * Determines the current asset version.
+     *
+     * @see https://inertiajs.com/asset-versioning
+     */
+    public function version(Request $request): ?string
+    {
+        return parent::version($request);
+    }
+
+    /**
+     * Define the props that are shared by default.
+     *
+     * @see https://inertiajs.com/shared-data
+     *
+     * @return array<string, mixed>
+     */
+    public function share(Request $request): array
+    {
+        $user = $request->user();
+
+        $workspaces = $user
+            ? $user->workspaces()
+                ->orderBy('name')
+                ->get(['workspaces.id', 'workspaces.name', 'workspaces.slug'])
+                ->map(fn ($w) => [
+                    'id' => $w->id,
+                    'name' => $w->name,
+                    'slug' => $w->slug,
+                ])
+                ->values()
+                ->all()
+            : [];
+
+        $currentWorkspaceId = $request->session()->get('current_workspace_id');
+        $currentWorkspace = collect($workspaces)->firstWhere('id', $currentWorkspaceId)
+            ?? ($workspaces[0] ?? null);
+
+        if (! $currentWorkspaceId && count($workspaces) > 0) {
+            $request->session()->put('current_workspace_id', $currentWorkspace['id']);
+        }
+
+        return [
+            ...parent::share($request),
+            'flash' => $request->session()->get('flash'),
+            'name' => config('app.name'),
+            'auth' => [
+                'user' => $user,
+                'workspaces' => $workspaces,
+                'currentWorkspace' => $currentWorkspace,
+            ],
+            'sidebarOpen' => ! $request->hasCookie('sidebar_state') || $request->cookie('sidebar_state') === 'true',
+            'userNotifications' => [
+                'unread_count' => $user ? Cache::remember(
+                    "user:{$user->id}:unread_notifications",
+                    60,
+                    fn () => $user->unreadNotifications()->count()
+                ) : 0,
+                'readUrl' => fn () => $user ? route('notifications.read', ['id' => '__ID__']) : null,
+                'readAllUrl' => fn () => $user ? route('notifications.readAll') : null,
+                'items' => Inertia::defer(function () use ($user) {
+                    if (! $user) {
+                        return [];
+                    }
+
+                    try {
+                        return $user->notifications()->latest()->take(10)->get()->map(fn ($n) => [
+                            'id' => $n->id,
+                            'type' => class_basename($n->type),
+                            'data' => $n->data,
+                            'read_at' => $n->read_at?->toISOString(),
+                            'created_at' => $n->created_at->diffForHumans(),
+                        ])->all();
+                    } catch (\Throwable) {
+                        return [];
+                    }
+                }),
+            ],
+        ];
+    }
+}

app/Http/Middleware/ValidateFolderInvitation.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\FolderInvitation;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class ValidateFolderInvitation
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        $token = $request->route('token');
+
+        $invitation = FolderInvitation::query()
+            ->where('token', $token)
+            ->with(['folder.client', 'folder.assignee', 'folder.creator'])
+            ->first();
+
+        if (! $invitation || ! $invitation->isValid()) {
+            abort(404, 'Lien invalide ou expiré.');
+        }
+
+        $request->attributes->set('folder_invitation', $invitation);
+
+        return $next($request);
+    }
+}