菜单
The PulseDesk multi-tenancy pattern — BelongsToOrganization trait, global scope, SetTenantContext middleware, and the cross-tenant 404. Apply to every tenant-owned model. This is the security-gated criterion.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | tenant-scope |
| description | The PulseDesk multi-tenancy pattern — BelongsToOrganization trait, global scope, SetTenantContext middleware, and the cross-tenant 404. Apply to every tenant-owned model. This is the security-gated criterion. |
Get this right on EVERY tenant model — it's the security-gated criterion.
app/Models/Concerns/BelongsToOrganization.php: a trait that
(a) adds a global scope filtering where('organization_id', <auth user's org>),
(b) on creating, sets organization_id from the auth user if unset.use BelongsToOrganization; on Ticket, Comment, Tag, SlaPolicy, ActivityLog.SetTenantContext (after Sanctum auth) binds the current org for the request lifecycle.assertStatus(404). (see pest-feature-test)organization_id from the request body / query / header. Session only.Turn a feature or sprint goal into an ordered backlog of small, testable issues with dependencies. Hermes uses this to write sprints/sprint-0N.md.
Hermes's format for handing ONE scoped, testable issue to OpenClaw in
The non-negotiable architecture rules Hermes enforces when assigning and reviewing work — Laravel layering, tenancy, auth, and the human-merge gate.
Post GitHub Actions CI results to the
Define PulseDesk's domain entities and relationships before assigning model work, so the data model stays coherent. Source of truth is ARCHITECTURE.md.
Recipe for a new Eloquent model in PulseDesk — model + migration + factory + seeder + tenant trait. Use when introducing a domain entity.