D8a — Package version: track dev-master (v4 is unreleased)
Architecture decision record, relocated verbatim from the retired single-file
docs/tenancy/decision log. Status, thematic clusters, and how to record a new ADR: the decision log index.
stancl/tenancy has no v4 tag on Packagist — latest stable is v3.10.0, and the RLS
feature set we need (PostgresRLSBootstrapper, TableRLSManager, tenants:rls) does not
exist in v3.10.0 (confirmed 404 at that tag). The official v4 docs instruct
composer require stancl/tenancy:dev-master. So:
- We require
stancl/tenancy:dev-master. The exact commit is pinned incomposer.lockfor reproducible builds; it only moves on a deliberatecomposer update. - We keep
prefer-stable: trueso every other dependency resolves to a stable tag; only tenancy itself is dev. (minimum-stabilityraised todevonly if Composer requires it, withprefer-stable: trueretained.) - Action item: pin/upgrade to a stable v4 tag as soon as one is published.
- Because dev-master is a moving target, all package APIs (class names, the
tenants:rlscommand name, config keys) are verified againstvendor/stancl/tenancy/after install, not assumed from the skill.