feat(dashboard): add Roles CRUD with permission-based menu filtering

- Roles CRUD: List/Create/Update/Delete actions, controller, requests
- Roles Vue pages: Index, Create, Edit (Options API, DashboardLayout)
- SidebarNav: filter menu items by user permissions via Inertia shared data
- HandleInertiaRequests: share permissions and roles arrays to frontend
- HttpKernel: register dashboard.permission middleware alias
- SidebarNavItem: add shield-check icon mapping

app/Containers/Dashboard/Actions/Roles/CreateRoleAction.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class CreateRoleAction
+{
+    public function run(array $data): Role
+    {
+        $role = Role::create(['name' => $data['name']]);
+
+        if (!empty($data['permissions'])) {
+            $role->syncPermissions($data['permissions']);
+        }
+
+        return $role;
+    }
+}

app/Containers/Dashboard/Actions/Roles/DeleteRoleAction.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class DeleteRoleAction
+{
+    public function run(Role $role): void
+    {
+        $role->delete();
+    }
+}

app/Containers/Dashboard/Actions/Roles/ListRolesAction.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class ListRolesAction
+{
+    public function run(): array
+    {
+        $roles = Role::with('permissions')->orderBy('name')->get();
+
+        return [
+            'roles' => $roles,
+        ];
+    }
+}

app/Containers/Dashboard/Actions/Roles/UpdateRoleAction.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Containers\Dashboard\Actions\Roles;
+
+use Spatie\Permission\Models\Role;
+
+class UpdateRoleAction
+{
+    public function run(Role $role, array $data): Role
+    {
+        $role->update(['name' => $data['name']]);
+
+        $role->syncPermissions($data['permissions'] ?? []);
+
+        return $role;
+    }
+}

app/Containers/Dashboard/UI/WEB/Controllers/RolesController.php

@@ -0,0 +1,98 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Controllers;
+
+use App\Containers\Dashboard\Actions\Roles\CreateRoleAction;
+use App\Containers\Dashboard\Actions\Roles\DeleteRoleAction;
+use App\Containers\Dashboard\Actions\Roles\ListRolesAction;
+use App\Containers\Dashboard\Actions\Roles\UpdateRoleAction;
+use App\Containers\Dashboard\UI\WEB\Requests\StoreRoleRequest;
+use App\Containers\Dashboard\UI\WEB\Requests\UpdateRoleRequest;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Inertia\Inertia;
+use Inertia\Response;
+use Spatie\Permission\Models\Permission;
+use Spatie\Permission\Models\Role;
+
+class RolesController extends Controller
+{
+    public function __construct(
+        private readonly ListRolesAction $listRolesAction,
+        private readonly CreateRoleAction $createRoleAction,
+        private readonly UpdateRoleAction $updateRoleAction,
+        private readonly DeleteRoleAction $deleteRoleAction,
+    ) {}
+
+    public function index(): Response
+    {
+        $data = $this->listRolesAction->run();
+
+        return Inertia::render('Dashboard/Roles/Index', $data);
+    }
+
+    public function create(): Response
+    {
+        $permissions = Permission::orderBy('name')->get(['id', 'name']);
+
+        return Inertia::render('Dashboard/Roles/Create', [
+            'permissions' => $permissions,
+        ]);
+    }
+
+    public function store(StoreRoleRequest $request): RedirectResponse
+    {
+        try {
+            $this->createRoleAction->run($request->validated());
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно создана!');
+        } catch (\Exception $e) {
+            return back()
+                ->withInput()
+                ->with('error', 'Ошибка при создании роли: ' . $e->getMessage());
+        }
+    }
+
+    public function edit(Role $role): Response
+    {
+        $role->load('permissions');
+        $permissions = Permission::orderBy('name')->get(['id', 'name']);
+
+        return Inertia::render('Dashboard/Roles/Edit', [
+            'role' => [
+                'id' => $role->id,
+                'name' => $role->name,
+                'permissions' => $role->permissions->pluck('name')->toArray(),
+            ],
+            'permissions' => $permissions,
+        ]);
+    }
+
+    public function update(UpdateRoleRequest $request, Role $role): RedirectResponse
+    {
+        try {
+            $this->updateRoleAction->run($role, $request->validated());
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно обновлена!');
+        } catch (\Exception $e) {
+            return back()
+                ->withInput()
+                ->with('error', 'Ошибка при обновлении роли: ' . $e->getMessage());
+        }
+    }
+
+    public function destroy(Role $role): RedirectResponse
+    {
+        try {
+            $this->deleteRoleAction->run($role);
+
+            return redirect()->route('dashboard.roles.index')
+                ->with('success', 'Роль успешно удалена!');
+        } catch (\Exception $e) {
+            return back()
+                ->with('error', 'Ошибка при удалении роли: ' . $e->getMessage());
+        }
+    }
+}

app/Containers/Dashboard/UI/WEB/Requests/StoreRoleRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreRoleRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255', 'unique:roles,name'],
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => ['string', 'exists:permissions,name'],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'name.required' => 'Название роли обязательно для заполнения',
+            'name.unique' => 'Роль с таким названием уже существует',
+        ];
+    }
+}

app/Containers/Dashboard/UI/WEB/Requests/UpdateRoleRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Containers\Dashboard\UI\WEB\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateRoleRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255', Rule::unique('roles', 'name')->ignore($this->route('role'))],
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => ['string', 'exists:permissions,name'],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'name.required' => 'Название роли обязательно для заполнения',
+            'name.unique' => 'Роль с таким названием уже существует',
+        ];
+    }
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -33,6 +33,8 @@ class HandleInertiaRequests extends Middleware
             ],
             'auth' => [
                 'user' => $request->user() ? $request->user()->only('id', 'name', 'email', 'created_at') : null,
+                'permissions' => $request->user()?->getAllPermissions()->pluck('name')->toArray() ?? [],
+                'roles' => $request->user()?->getRoleNames()->toArray() ?? [],
             ],
             'ziggy' => function() {
                 return array_merge((new Ziggy())->toArray(), [

app/Ship/Kernels/HttpKernel.php

@@ -91,5 +91,6 @@ class HttpKernel extends LaravelHttpKernel
         'limit.post' => LimitPost::class,
         'form.time.period' => FormTimePeriodMiddleware::class,
         'vikon.refresh' => \App\Http\Middleware\VikonTokenRefresh::class,
+        'dashboard.permission' => \App\Ship\Middleware\CheckDashboardPermission::class,
     ];
 }

app/Ship/Middleware/HandleInertiaRequests.php

@@ -34,6 +34,8 @@ class HandleInertiaRequests extends Middleware
             ],
             'auth' => [
                 'user' => $request->user() ? $request->user()->only('id', 'name', 'email', 'created_at') : null,
+                'permissions' => $request->user()?->getAllPermissions()->pluck('name')->toArray() ?? [],
+                'roles' => $request->user()?->getRoleNames()->toArray() ?? [],
             ],
             'ziggy' => fn () => [
                 ...(new Ziggy)->toArray(),