feat(v5): authorize creates, deep-link selection, list apps in v4

Restrict V5 application and resource-connection creation to team admins.
Resolve project, environment, and application from query params and keep
session selection in sync. Surface V5 apps on the v4 resource index and
count them for project/environment emptiness. Create the flux data dir
on install and upgrade.

app/Http/Controllers/V5/ApplicationController.php

@@ -51,6 +51,7 @@ class ApplicationController extends Controller
     public function store(Request $request): JsonResponse
     {
         $currentTeam = $this->currentTeamOrFail($request);
+        $this->authorize('create', [V5Application::class, $currentTeam]);
         $projects = $this->projects($currentTeam);
         [$selectedProject, $selectedEnvironment] = $this->selectedProjectAndEnvironment($request, $projects);
 

app/Http/Controllers/V5/Concerns/ResolvesProjectSelection.php

@@ -34,8 +34,8 @@ trait ResolvesProjectSelection
      */
     protected function selectedProjectAndEnvironment(Request $request, array $projects): array
     {
-        $selectedProjectUuid = $request->session()->get(self::SELECTED_PROJECT_SESSION_KEY);
-        $selectedEnvironmentUuid = $request->session()->get(self::SELECTED_ENVIRONMENT_SESSION_KEY);
+        $selectedProjectUuid = $request->query('project', $request->session()->get(self::SELECTED_PROJECT_SESSION_KEY));
+        $selectedEnvironmentUuid = $request->query('environment', $request->session()->get(self::SELECTED_ENVIRONMENT_SESSION_KEY));
         $selectedProject = null;
 
         foreach ($projects as $project) {
@@ -59,6 +59,13 @@ trait ResolvesProjectSelection
 
         $selectedEnvironment ??= $selectedProject['environments'][0] ?? null;
 
+        if ($request->query->has('project') || $request->query->has('environment')) {
+            $request->session()->put([
+                self::SELECTED_PROJECT_SESSION_KEY => $selectedProject['uuid'] ?? null,
+                self::SELECTED_ENVIRONMENT_SESSION_KEY => $selectedEnvironment['uuid'] ?? null,
+            ]);
+        }
+
         return [$selectedProject, $selectedEnvironment];
     }
 

app/Http/Controllers/V5/DashboardController.php

@@ -33,17 +33,23 @@ class DashboardController extends Controller
         $currentTeam = $request->attributes->get('v5.currentTeam');
         $projects = $this->projects($currentTeam);
         [$selectedProject, $selectedEnvironment] = $this->selectedProjectAndEnvironment($request, $projects);
+        $applications = $this->applications($currentTeam, $selectedProject, $selectedEnvironment);
+        $requestedApplicationUuid = $request->query('application');
+        $selectedApplicationUuid = collect($applications)->contains(
+            fn (array $application): bool => $application['id'] === $requestedApplicationUuid
+        ) ? $requestedApplicationUuid : null;
 
         return Inertia::render('Dashboard', [
             'currentTeam' => $this->serializeCurrentTeam($currentTeam),
             'flux' => $fluxHealth->check(),
-            'applications' => $this->applications($currentTeam, $selectedProject, $selectedEnvironment),
+            'applications' => $applications,
             'caddyIngresses' => $this->caddyIngresses($currentTeam),
             'resourceConnections' => $this->resourceConnections($currentTeam, $selectedProject, $selectedEnvironment),
             'nginxServers' => $this->nginxServers($currentTeam),
             'projects' => $projects,
             'selectedProjectUuid' => $selectedProject['uuid'] ?? null,
             'selectedEnvironmentUuid' => $selectedEnvironment['uuid'] ?? null,
+            'selectedApplicationUuid' => $selectedApplicationUuid,
         ]);
     }
 

app/Http/Controllers/V5/ResourceConnectionController.php

@@ -35,6 +35,7 @@ class ResourceConnectionController extends Controller
     public function store(Request $request): JsonResponse
     {
         $currentTeam = $this->currentTeamOrFail($request);
+        $this->authorize('create', [ResourceConnection::class, $currentTeam]);
         $projects = $this->projects($currentTeam);
         [$selectedProject, $selectedEnvironment] = $this->selectedProjectAndEnvironment($request, $projects);
 

app/Livewire/Project/Resource/Index.php

@@ -4,6 +4,7 @@ namespace App\Livewire\Project\Resource;
 
 use App\Models\Environment;
 use App\Models\Project;
+use App\Models\V5\Application as V5Application;
 use Illuminate\Support\Collection;
 use Livewire\Component;
 
@@ -61,6 +62,7 @@ class Index extends Component
             ->select('id', 'uuid', 'name', 'project_id')
             ->with([
                 'applications:id,uuid,name,environment_id',
+                'v5Applications:id,uuid,name,environment_id,status',
                 'services:id,uuid,name,environment_id',
                 'postgresqls:id,uuid,name,environment_id',
                 'redis:id,uuid,name,environment_id',
@@ -103,6 +105,23 @@ class Index extends Component
 
             return $application;
         });
+        $this->applications = $this->applications
+            ->merge(V5Application::query()
+                ->where('team_id', currentTeam()->id)
+                ->where('project_id', $this->project->id)
+                ->where('environment_id', $this->environment->id)
+                ->with('server:id,name')
+                ->get()
+                ->map(function (V5Application $application) use ($projectUuid, $environmentUuid) {
+                    $application->hrefLink = route('v5.dashboard', [
+                        'project' => $projectUuid,
+                        'environment' => $environmentUuid,
+                        'application' => $application->uuid,
+                    ]);
+
+                    return $application;
+                }))
+            ->sortBy('name');
 
         // Load all database resources in a single query per type
         $databaseTypes = [
@@ -180,16 +199,19 @@ class Index extends Component
             'uuid' => $item->uuid,
             'name' => $item->name,
             'fqdn' => $item->fqdn ?? null,
-            'description' => $item->description ?? null,
+            'description' => $item instanceof V5Application ? 'Managed by Coolify V5' : ($item->description ?? null),
             'status' => $item->status ?? '',
+            'version' => $item instanceof V5Application ? 'v5' : 'v4',
             'server_status' => $item->server_status ?? null,
             'hrefLink' => $item->hrefLink ?? '',
             'destination' => [
                 'server' => [
-                    'name' => $item->destination?->server?->name ?? 'Unknown',
+                    'name' => $item instanceof V5Application
+                        ? ($item->server?->name ?? 'Unknown')
+                        : ($item->destination?->server?->name ?? 'Unknown'),
                 ],
             ],
-            'tags' => $item->tags->map(fn ($tag) => [
+            'tags' => ($item instanceof V5Application ? collect() : $item->tags)->map(fn ($tag) => [
                 'id' => $tag->id,
                 'name' => $tag->name,
             ])->values()->toArray(),

app/Models/Environment.php

@@ -2,6 +2,8 @@
 
 namespace App\Models;
 
+use App\Models\V5\Application as V5Application;
+use App\Models\V5\ResourceConnection as V5ResourceConnection;
 use App\Traits\ClearsGlobalSearchCache;
 use App\Traits\HasSafeStringAttribute;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -54,7 +56,9 @@ class Environment extends BaseModel
 
     public function isEmpty()
     {
-        return $this->applications()->count() == 0 &&
+        return ! V5Application::query()->where('environment_id', $this->id)->exists() &&
+            ! V5ResourceConnection::query()->where('environment_id', $this->id)->exists() &&
+            $this->applications()->count() == 0 &&
             $this->redis()->count() == 0 &&
             $this->postgresqls()->count() == 0 &&
             $this->mysqls()->count() == 0 &&
@@ -76,6 +80,11 @@ class Environment extends BaseModel
         return $this->hasMany(Application::class);
     }
 
+    public function v5Applications()
+    {
+        return $this->hasMany(V5Application::class);
+    }
+
     public function postgresqls()
     {
         return $this->hasMany(StandalonePostgresql::class);

app/Models/Project.php

@@ -2,6 +2,8 @@
 
 namespace App\Models;
 
+use App\Models\V5\Application as V5Application;
+use App\Models\V5\ResourceConnection as V5ResourceConnection;
 use App\Traits\ClearsGlobalSearchCache;
 use App\Traits\HasSafeStringAttribute;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -144,7 +146,9 @@ class Project extends BaseModel
 
     public function isEmpty()
     {
-        return $this->applications()->count() == 0 &&
+        return ! V5Application::query()->where('project_id', $this->id)->exists() &&
+            ! V5ResourceConnection::query()->where('project_id', $this->id)->exists() &&
+            $this->applications()->count() == 0 &&
             $this->redis()->count() == 0 &&
             $this->postgresqls()->count() == 0 &&
             $this->mysqls()->count() == 0 &&

app/Policies/V5/ApplicationPolicy.php

@@ -9,6 +9,13 @@ use Illuminate\Auth\Access\Response;
 
 class ApplicationPolicy
 {
+    public function create(User $user, Team $team): Response
+    {
+        return $user->isAdminOfTeam($team->id)
+            ? Response::allow()
+            : Response::deny('You do not have permission to manage applications in this team.');
+    }
+
     /**
      * Determine whether the user can view the application within the current team.
      *

app/Policies/V5/ResourceConnectionPolicy.php

@@ -9,6 +9,13 @@ use Illuminate\Auth\Access\Response;
 
 class ResourceConnectionPolicy
 {
+    public function create(User $user, Team $team): Response
+    {
+        return $user->isAdminOfTeam($team->id)
+            ? Response::allow()
+            : Response::deny('You do not have permission to manage resource connections in this team.');
+    }
+
     /**
      * Determine whether the user can update the connection within the current team.
      */