customer()?->seats()->where('uuid', $uuid)->first(); // Mirrors the button's own visibility: the row never offers "revoke" // for the owner seat, so a stale or forged uuid gets 404 here too. abort_if($seat === null || $seat->role === 'owner', 404); $this->uuid = $uuid; $this->name = (string) ($seat->name ?: $seat->email); } public function confirm(): void { $this->dispatch('seat-revoke-confirmed', uuid: $this->uuid); $this->closeModal(); } public function render() { return view('livewire.confirm-revoke-seat'); } }