feat: complete Epic 1 — team management & permission system

- Story 1.1: Permission enum, config, AuthorizesPermissions & HasWorkspaceScope traits, member→worker migration
- Story 1.2: Team page with member list, invitation system with queued email
- Story 1.3: Role assignment (Manager/Worker) and member removal with activity logging
- Story 1.4: Owner-only permission toggle matrix for Managers (manage team, view logs, configure portal)
- Story 1.5: Role-based access enforcement — Workers see only assigned declarations/clients, sidebar scoping
- Story 1.6: Workspace switcher dropdown for multi-workspace users with session-based switching
- 83 new/modified files, 182 tests passing with zero regressions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

resources/js/pages/declarations/Index.vue

@@ -37,9 +37,12 @@ type Props = {
     declarations: PaginatedData<Declaration>;
     createUrl: string;
     workspaceName: string;
+    canCreate: boolean;
+    canEdit: boolean;
+    canDelete: boolean;
 };
 
-defineProps<Props>();
+const props = defineProps<Props>();
 
 function destroy(declaration: Declaration) {
     if (
@@ -86,7 +89,7 @@ const statusLabels: Record<string, string> = {
                     title="Déclarations"
                     :description="`Gérer les déclarations du workspace « ${workspaceName} »`"
                 />
-                <Button as-child>
+                <Button v-if="props.canCreate" as-child>
                     <Link :href="createUrl">Nouvelle déclaration</Link>
                 </Button>
             </div>
@@ -175,6 +178,7 @@ const statusLabels: Record<string, string> = {
                                         >
                                     </Button>
                                     <Button
+                                        v-if="props.canEdit"
                                         variant="outline"
                                         size="sm"
                                         as-child
@@ -184,6 +188,7 @@ const statusLabels: Record<string, string> = {
                                         >
                                     </Button>
                                     <Button
+                                        v-if="props.canDelete"
                                         variant="destructive"
                                         size="sm"
                                         @click="destroy(declaration)"
@@ -204,7 +209,7 @@ const statusLabels: Record<string, string> = {
                                         <p>
                                             Aucune déclaration pour le moment.
                                         </p>
-                                        <Button as-child>
+                                        <Button v-if="props.canCreate" as-child>
                                             <Link :href="createUrl"
                                                 >Créer votre première
                                                 déclaration</Link

resources/js/pages/declarations/Show.vue

@@ -79,6 +79,8 @@ type Props = {
     workspaceUsers: WorkspaceUser[];
     mentionStoreUrl: string;
     canMention: boolean;
+    canEdit: boolean;
+    canDelete: boolean;
 };
 
 const props = defineProps<Props>();
@@ -344,7 +346,7 @@ const declarationTimelineItems = computed(() => {
                         typeLabels[declaration.type] ?? declaration.type
                     "
                 />
-                <Button variant="outline" as-child>
+                <Button v-if="props.canEdit" variant="outline" as-child>
                     <Link :href="editUrl">Modifier la déclaration</Link>
                 </Button>
             </div>