Compare commits
1 Commits
311-worksp
...
dev
| Author | SHA1 | Date | |
|---|---|---|---|
| 55338a88c6 |
@ -1,295 +0,0 @@
|
|||||||
---
|
|
||||||
name: browsertest
|
|
||||||
description: Führe einen vollständigen Smoke-Browser-Test im Integrated Browser für das aktuelle Feature aus, inklusive Happy Path, zentraler Regressionen, Kontext-Prüfung und belastbarer Ergebniszusammenfassung.
|
|
||||||
license: MIT
|
|
||||||
metadata:
|
|
||||||
author: GitHub Copilot
|
|
||||||
---
|
|
||||||
|
|
||||||
# Browser Smoke Test
|
|
||||||
|
|
||||||
## What This Skill Does
|
|
||||||
|
|
||||||
Use this skill to validate the current feature end-to-end in the integrated browser.
|
|
||||||
|
|
||||||
This is a focused smoke test, not a full exploratory test session. The goal is to prove that the primary operator flow:
|
|
||||||
|
|
||||||
- loads in the correct auth, workspace, and tenant context
|
|
||||||
- exposes the expected controls and decision points
|
|
||||||
- completes the main happy path without blocking issues
|
|
||||||
- lands in the expected end state or canonical drilldown
|
|
||||||
- does not show obvious regressions such as broken navigation, missing data, or conflicting actions
|
|
||||||
|
|
||||||
The skill should produce a concrete pass or fail result with actionable evidence.
|
|
||||||
|
|
||||||
## When To Apply
|
|
||||||
|
|
||||||
Activate this skill when:
|
|
||||||
|
|
||||||
- the user asks to smoke test the current feature in the browser
|
|
||||||
- a new Filament page, dashboard signal, report, wizard, or detail flow was just added
|
|
||||||
- a UI regression fix needs confirmation in a real browser context
|
|
||||||
- the primary question is whether the feature works from an operator perspective
|
|
||||||
- you need a quick integration-level check without writing a full browser test suite first
|
|
||||||
|
|
||||||
## What Success Looks Like
|
|
||||||
|
|
||||||
A successful smoke test confirms all of the following:
|
|
||||||
|
|
||||||
- the target route opens successfully
|
|
||||||
- the visible context is correct
|
|
||||||
- the main flow is usable
|
|
||||||
- the expected result appears after interaction
|
|
||||||
- the route or drilldown destination is correct
|
|
||||||
- the surface does not obviously violate its intended interaction model
|
|
||||||
|
|
||||||
If the test cannot be completed, the output must clearly state whether the blocker is:
|
|
||||||
|
|
||||||
- authentication
|
|
||||||
- missing data or fixture state
|
|
||||||
- routing
|
|
||||||
- UI interaction failure
|
|
||||||
- server error
|
|
||||||
- an unclear expected behavior contract
|
|
||||||
|
|
||||||
Do not guess. If the route or state is blocked, report the blocker explicitly.
|
|
||||||
|
|
||||||
## Preconditions
|
|
||||||
|
|
||||||
Before running the browser smoke test, make sure you know:
|
|
||||||
|
|
||||||
- the canonical route or entry point for the feature
|
|
||||||
- the primary operator action or happy path
|
|
||||||
- the expected success state
|
|
||||||
- whether the feature depends on a specific tenant, workspace, or seeded record
|
|
||||||
|
|
||||||
When available, use the feature spec, quickstart, tasks, or current browser page as the source of truth.
|
|
||||||
|
|
||||||
## Standard Workflow
|
|
||||||
|
|
||||||
### 1. Define the smoke-test scope
|
|
||||||
|
|
||||||
Identify:
|
|
||||||
|
|
||||||
- the route to open
|
|
||||||
- the primary action to perform
|
|
||||||
- the expected end state
|
|
||||||
- one or two critical regressions that must not break
|
|
||||||
|
|
||||||
The smoke test should stay narrow. Prefer one complete happy path plus one critical boundary over broad exploratory clicking.
|
|
||||||
|
|
||||||
### 2. Establish the browser state
|
|
||||||
|
|
||||||
- Reuse the current browser page if it already matches the target feature.
|
|
||||||
- Otherwise open the canonical route.
|
|
||||||
- Confirm the current auth and scope context before interacting.
|
|
||||||
|
|
||||||
For this repo, that usually means checking whether the page is on:
|
|
||||||
|
|
||||||
- `/admin/...` for workspace-context surfaces
|
|
||||||
- `/admin/t/{tenant}/...` for tenant-context surfaces
|
|
||||||
|
|
||||||
### 3. Inspect before acting
|
|
||||||
|
|
||||||
- Use `read_page` before interacting so you understand the live controls, refs, headings, and route context.
|
|
||||||
- Prefer `read_page` over screenshots for actual interaction planning.
|
|
||||||
- Use screenshots only for visual evidence or when the user asks for them.
|
|
||||||
|
|
||||||
### 4. Execute the primary happy path
|
|
||||||
|
|
||||||
Run the smallest meaningful flow that proves the feature works.
|
|
||||||
|
|
||||||
Typical steps include:
|
|
||||||
|
|
||||||
- open the page
|
|
||||||
- verify heading or key summary text
|
|
||||||
- click the primary CTA or row
|
|
||||||
- fill the minimum required form fields
|
|
||||||
- confirm modal or dialog text when relevant
|
|
||||||
- submit or navigate
|
|
||||||
- verify the expected destination or changed state
|
|
||||||
|
|
||||||
After each meaningful action, re-read the page so the next step is based on current DOM state.
|
|
||||||
|
|
||||||
### 5. Validate the outcome
|
|
||||||
|
|
||||||
Check the exact result that matters for the feature.
|
|
||||||
|
|
||||||
Examples:
|
|
||||||
|
|
||||||
- a new row appears
|
|
||||||
- a status changes
|
|
||||||
- a success message appears
|
|
||||||
- a report filter changes the result set
|
|
||||||
- a row click lands on the canonical detail page
|
|
||||||
- a dashboard signal links to the correct report page
|
|
||||||
|
|
||||||
### 6. Check for obvious regressions
|
|
||||||
|
|
||||||
Even in a smoke test, verify a few core non-negotiables:
|
|
||||||
|
|
||||||
- the page is not blank or half-rendered
|
|
||||||
- the main action is present and usable
|
|
||||||
- the visible context is correct
|
|
||||||
- the drilldown destination is canonical
|
|
||||||
- no obviously duplicated primary actions exist
|
|
||||||
- no stuck modal, spinner, or blocked interaction remains onscreen
|
|
||||||
|
|
||||||
### 7. Capture evidence and summarize clearly
|
|
||||||
|
|
||||||
Your result should state:
|
|
||||||
|
|
||||||
- route tested
|
|
||||||
- context used
|
|
||||||
- steps executed
|
|
||||||
- pass or fail
|
|
||||||
- exact blocker or discrepancy if failed
|
|
||||||
|
|
||||||
Include a screenshot only when it adds value.
|
|
||||||
|
|
||||||
## Tool Usage Guidance
|
|
||||||
|
|
||||||
Use the browser tools in this order by default:
|
|
||||||
|
|
||||||
1. `read_page`
|
|
||||||
2. `click_element`
|
|
||||||
3. `type_in_page`
|
|
||||||
4. `handle_dialog` when needed
|
|
||||||
5. `navigate_page` or `open_browser_page` only when route changes are required
|
|
||||||
6. `run_playwright_code` only if the normal browser tools are insufficient
|
|
||||||
7. `screenshot_page` for evidence, not for primary navigation logic
|
|
||||||
|
|
||||||
## Repo-Specific Guidance For TenantPilot
|
|
||||||
|
|
||||||
### Workspace surfaces
|
|
||||||
|
|
||||||
For `/admin` pages and similar workspace-context surfaces:
|
|
||||||
|
|
||||||
- verify the page is reachable without forcing tenant-route assumptions
|
|
||||||
- confirm any summary signal or CTA lands on the canonical destination
|
|
||||||
- verify calm-state versus attention-state behavior when the feature defines both
|
|
||||||
|
|
||||||
### Tenant surfaces
|
|
||||||
|
|
||||||
For `/admin/t/{tenant}/...` pages:
|
|
||||||
|
|
||||||
- verify the tenant context is explicit and correct
|
|
||||||
- verify drilldowns stay in the intended tenant scope
|
|
||||||
- treat cross-tenant leakage or silent scope changes as failures
|
|
||||||
|
|
||||||
### Filament list or report surfaces
|
|
||||||
|
|
||||||
For Filament tables, reports, or registry-style pages:
|
|
||||||
|
|
||||||
- verify the heading and table shell render
|
|
||||||
- verify fixed filters or summary controls exist when the spec requires them
|
|
||||||
- verify row click or the primary inspect affordance behaves as designed
|
|
||||||
- verify empty-state messaging is specific rather than generic when the feature defines custom behavior
|
|
||||||
|
|
||||||
### Filament detail pages
|
|
||||||
|
|
||||||
For detail or view surfaces:
|
|
||||||
|
|
||||||
- verify the canonical record loads
|
|
||||||
- verify expected sections or summary content are present
|
|
||||||
- verify critical actions or drillbacks are usable
|
|
||||||
|
|
||||||
## Result Format
|
|
||||||
|
|
||||||
Use a compact result format like this:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Browser smoke result: PASS
|
|
||||||
Route: /admin/findings/hygiene
|
|
||||||
Context: workspace member with visible hygiene issues
|
|
||||||
Steps: opened report -> verified filters -> clicked finding row -> landed on canonical finding detail
|
|
||||||
Verified: report rendered, primary interaction worked, drilldown route was correct
|
|
||||||
```
|
|
||||||
|
|
||||||
If the test fails:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Browser smoke result: FAIL
|
|
||||||
Route: /admin/findings/hygiene
|
|
||||||
Context: authenticated workspace member
|
|
||||||
Failed step: clicking the summary CTA
|
|
||||||
Expected: navigate to /admin/findings/hygiene
|
|
||||||
Actual: remained on /admin with no route change
|
|
||||||
Blocker: CTA appears rendered but is not interactive
|
|
||||||
```
|
|
||||||
|
|
||||||
## Examples
|
|
||||||
|
|
||||||
### Example 1: Smoke test a new report page
|
|
||||||
|
|
||||||
Use this when the feature adds a new read-only report.
|
|
||||||
|
|
||||||
Steps:
|
|
||||||
|
|
||||||
- open the canonical report route
|
|
||||||
- verify the page heading and main controls
|
|
||||||
- confirm the table or defined empty state is visible
|
|
||||||
- click one row or primary inspect affordance
|
|
||||||
- verify navigation lands on the canonical detail route
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- report loads
|
|
||||||
- intended controls exist
|
|
||||||
- primary inspect path works
|
|
||||||
|
|
||||||
### Example 2: Smoke test a dashboard signal
|
|
||||||
|
|
||||||
Use this when the feature adds a summary signal on `/admin`.
|
|
||||||
|
|
||||||
Steps:
|
|
||||||
|
|
||||||
- open `/admin`
|
|
||||||
- find the signal
|
|
||||||
- verify the visible count or summary text
|
|
||||||
- click the CTA
|
|
||||||
- confirm navigation lands on the canonical downstream surface
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- signal is visible in the correct state
|
|
||||||
- CTA text is present
|
|
||||||
- CTA opens the correct route
|
|
||||||
|
|
||||||
### Example 3: Smoke test a tenant detail follow-up
|
|
||||||
|
|
||||||
Use this when a workspace-level surface should drill into a tenant-level detail page.
|
|
||||||
|
|
||||||
Steps:
|
|
||||||
|
|
||||||
- open the workspace-level surface
|
|
||||||
- trigger the drilldown
|
|
||||||
- verify the target route includes the correct tenant and record
|
|
||||||
- confirm the target page actually loads the expected detail content
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- drilldown route is canonical
|
|
||||||
- tenant context is correct
|
|
||||||
- destination content matches the selected record
|
|
||||||
|
|
||||||
## Common Pitfalls
|
|
||||||
|
|
||||||
- Clicking before reading the page state and refs
|
|
||||||
- Treating a blocked auth session as a feature failure
|
|
||||||
- Confusing workspace-context routes with tenant-context routes
|
|
||||||
- Reporting visual impressions without validating the actual interaction result
|
|
||||||
- Forgetting to re-read the page after a modal opens or a route changes
|
|
||||||
- Claiming success without verifying the final destination or changed state
|
|
||||||
|
|
||||||
## Non-Goals
|
|
||||||
|
|
||||||
This skill does not replace:
|
|
||||||
|
|
||||||
- full exploratory QA
|
|
||||||
- formal Pest browser coverage
|
|
||||||
- accessibility review
|
|
||||||
- visual regression approval
|
|
||||||
- backend correctness tests
|
|
||||||
|
|
||||||
It is a fast, real-browser confidence pass for the current feature.
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
name: giteaflow
|
|
||||||
description: Describe what this skill does and when to use it. Include keywords that help agents identify relevant tasks.
|
|
||||||
---
|
|
||||||
|
|
||||||
<!-- Tip: Use /create-skill in chat to generate content with agent assistance -->
|
|
||||||
|
|
||||||
comit all changes, push to remote, and create a pull request against platform-dev with gitea mcp
|
|
||||||
@ -1,167 +0,0 @@
|
|||||||
---
|
|
||||||
name: pest-testing
|
|
||||||
description: "Tests applications using the Pest 4 PHP framework. Activates when writing tests, creating unit or feature tests, adding assertions, testing Livewire components, browser testing, debugging test failures, working with datasets or mocking; or when the user mentions test, spec, TDD, expects, assertion, coverage, or needs to verify functionality works."
|
|
||||||
license: MIT
|
|
||||||
metadata:
|
|
||||||
author: laravel
|
|
||||||
---
|
|
||||||
|
|
||||||
# Pest Testing 4
|
|
||||||
|
|
||||||
## When to Apply
|
|
||||||
|
|
||||||
Activate this skill when:
|
|
||||||
|
|
||||||
- Creating new tests (unit, feature, or browser)
|
|
||||||
- Modifying existing tests
|
|
||||||
- Debugging test failures
|
|
||||||
- Working with browser testing or smoke testing
|
|
||||||
- Writing architecture tests or visual regression tests
|
|
||||||
|
|
||||||
## Documentation
|
|
||||||
|
|
||||||
Use `search-docs` for detailed Pest 4 patterns and documentation.
|
|
||||||
|
|
||||||
## Basic Usage
|
|
||||||
|
|
||||||
### Creating Tests
|
|
||||||
|
|
||||||
All tests must be written using Pest. Use `php artisan make:test --pest {name}`.
|
|
||||||
|
|
||||||
### Test Organization
|
|
||||||
|
|
||||||
- Unit/Feature tests: `tests/Feature` and `tests/Unit` directories.
|
|
||||||
- Browser tests: `tests/Browser/` directory.
|
|
||||||
- Do NOT remove tests without approval - these are core application code.
|
|
||||||
|
|
||||||
### Basic Test Structure
|
|
||||||
|
|
||||||
<!-- Basic Pest Test Example -->
|
|
||||||
```php
|
|
||||||
it('is true', function () {
|
|
||||||
expect(true)->toBeTrue();
|
|
||||||
});
|
|
||||||
```
|
|
||||||
|
|
||||||
### Running Tests
|
|
||||||
|
|
||||||
- Run minimal tests with filter before finalizing: `php artisan test --compact --filter=testName`.
|
|
||||||
- Run all tests: `php artisan test --compact`.
|
|
||||||
- Run file: `php artisan test --compact tests/Feature/ExampleTest.php`.
|
|
||||||
|
|
||||||
## Assertions
|
|
||||||
|
|
||||||
Use specific assertions (`assertSuccessful()`, `assertNotFound()`) instead of `assertStatus()`:
|
|
||||||
|
|
||||||
<!-- Pest Response Assertion -->
|
|
||||||
```php
|
|
||||||
it('returns all', function () {
|
|
||||||
$this->postJson('/api/docs', [])->assertSuccessful();
|
|
||||||
});
|
|
||||||
```
|
|
||||||
|
|
||||||
| Use | Instead of |
|
|
||||||
|-----|------------|
|
|
||||||
| `assertSuccessful()` | `assertStatus(200)` |
|
|
||||||
| `assertNotFound()` | `assertStatus(404)` |
|
|
||||||
| `assertForbidden()` | `assertStatus(403)` |
|
|
||||||
|
|
||||||
## Mocking
|
|
||||||
|
|
||||||
Import mock function before use: `use function Pest\Laravel\mock;`
|
|
||||||
|
|
||||||
## Datasets
|
|
||||||
|
|
||||||
Use datasets for repetitive tests (validation rules, etc.):
|
|
||||||
|
|
||||||
<!-- Pest Dataset Example -->
|
|
||||||
```php
|
|
||||||
it('has emails', function (string $email) {
|
|
||||||
expect($email)->not->toBeEmpty();
|
|
||||||
})->with([
|
|
||||||
'james' => 'james@laravel.com',
|
|
||||||
'taylor' => 'taylor@laravel.com',
|
|
||||||
]);
|
|
||||||
```
|
|
||||||
|
|
||||||
## Pest 4 Features
|
|
||||||
|
|
||||||
| Feature | Purpose |
|
|
||||||
|---------|---------|
|
|
||||||
| Browser Testing | Full integration tests in real browsers |
|
|
||||||
| Smoke Testing | Validate multiple pages quickly |
|
|
||||||
| Visual Regression | Compare screenshots for visual changes |
|
|
||||||
| Test Sharding | Parallel CI runs |
|
|
||||||
| Architecture Testing | Enforce code conventions |
|
|
||||||
|
|
||||||
### Browser Test Example
|
|
||||||
|
|
||||||
Browser tests run in real browsers for full integration testing:
|
|
||||||
|
|
||||||
- Browser tests live in `tests/Browser/`.
|
|
||||||
- Use Laravel features like `Event::fake()`, `assertAuthenticated()`, and model factories.
|
|
||||||
- Use `RefreshDatabase` for clean state per test.
|
|
||||||
- Interact with page: click, type, scroll, select, submit, drag-and-drop, touch gestures.
|
|
||||||
- Test on multiple browsers (Chrome, Firefox, Safari) if requested.
|
|
||||||
- Test on different devices/viewports (iPhone 14 Pro, tablets) if requested.
|
|
||||||
- Switch color schemes (light/dark mode) when appropriate.
|
|
||||||
- Take screenshots or pause tests for debugging.
|
|
||||||
|
|
||||||
<!-- Pest Browser Test Example -->
|
|
||||||
```php
|
|
||||||
it('may reset the password', function () {
|
|
||||||
Notification::fake();
|
|
||||||
|
|
||||||
$this->actingAs(User::factory()->create());
|
|
||||||
|
|
||||||
$page = visit('/sign-in');
|
|
||||||
|
|
||||||
$page->assertSee('Sign In')
|
|
||||||
->assertNoJavaScriptErrors()
|
|
||||||
->click('Forgot Password?')
|
|
||||||
->fill('email', 'nuno@laravel.com')
|
|
||||||
->click('Send Reset Link')
|
|
||||||
->assertSee('We have emailed your password reset link!');
|
|
||||||
|
|
||||||
Notification::assertSent(ResetPassword::class);
|
|
||||||
});
|
|
||||||
```
|
|
||||||
|
|
||||||
### Smoke Testing
|
|
||||||
|
|
||||||
Quickly validate multiple pages have no JavaScript errors:
|
|
||||||
|
|
||||||
<!-- Pest Smoke Testing Example -->
|
|
||||||
```php
|
|
||||||
$pages = visit(['/', '/about', '/contact']);
|
|
||||||
|
|
||||||
$pages->assertNoJavaScriptErrors()->assertNoConsoleLogs();
|
|
||||||
```
|
|
||||||
|
|
||||||
### Visual Regression Testing
|
|
||||||
|
|
||||||
Capture and compare screenshots to detect visual changes.
|
|
||||||
|
|
||||||
### Test Sharding
|
|
||||||
|
|
||||||
Split tests across parallel processes for faster CI runs.
|
|
||||||
|
|
||||||
### Architecture Testing
|
|
||||||
|
|
||||||
Pest 4 includes architecture testing (from Pest 3):
|
|
||||||
|
|
||||||
<!-- Architecture Test Example -->
|
|
||||||
```php
|
|
||||||
arch('controllers')
|
|
||||||
->expect('App\Http\Controllers')
|
|
||||||
->toExtendNothing()
|
|
||||||
->toHaveSuffix('Controller');
|
|
||||||
```
|
|
||||||
|
|
||||||
## Common Pitfalls
|
|
||||||
|
|
||||||
- Not importing `use function Pest\Laravel\mock;` before using mock
|
|
||||||
- Using `assertStatus(200)` instead of `assertSuccessful()`
|
|
||||||
- Forgetting datasets for repetitive validation tests
|
|
||||||
- Deleting tests without approval
|
|
||||||
- Forgetting `assertNoJavaScriptErrors()` in browser tests
|
|
||||||
@ -1,625 +0,0 @@
|
|||||||
|
|
||||||
|
|
||||||
---
|
|
||||||
name: platform-feature-finish
|
|
||||||
description: Commit, push, create a Gitea PR from a TenantPilot platform feature branch into platform-dev, and optionally refresh the platform-dev to dev integration PR by rebase.
|
|
||||||
---
|
|
||||||
|
|
||||||
# Skill: platform-feature-finish
|
|
||||||
|
|
||||||
## Purpose
|
|
||||||
|
|
||||||
Automate the TenantPilot platform feature completion workflow.
|
|
||||||
|
|
||||||
Trigger this skill when the user says something like:
|
|
||||||
|
|
||||||
- "alles committen pushen und PR gegen platform-dev"
|
|
||||||
- "feature fertig, bitte PR erstellen"
|
|
||||||
- "platform feature abschließen"
|
|
||||||
- "commit push PR mit Gitea MCP"
|
|
||||||
- "mach PR gegen platform-dev"
|
|
||||||
- "finish platform feature"
|
|
||||||
- "platform-dev nach dev vorbereiten"
|
|
||||||
- "platform-dev PR aktualisieren"
|
|
||||||
- "out-of-date mit dev beheben"
|
|
||||||
- "integration PR refresh"
|
|
||||||
- "platform-dev auf dev rebasen"
|
|
||||||
|
|
||||||
This skill handles:
|
|
||||||
|
|
||||||
1. Validate current Git branch
|
|
||||||
2. Commit all feature changes
|
|
||||||
3. Push current feature branch
|
|
||||||
4. Create a Gitea pull request into `platform-dev`
|
|
||||||
5. Refresh the `platform-dev` → `dev` integration PR when explicitly requested
|
|
||||||
6. Report the PR link and next integration step
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Branch Model
|
|
||||||
|
|
||||||
TenantPilot uses area branches:
|
|
||||||
|
|
||||||
```text
|
|
||||||
dev = shared integration branch
|
|
||||||
platform-dev = platform/application area integration branch
|
|
||||||
website-dev = website/marketing area integration branch
|
|
||||||
```
|
|
||||||
|
|
||||||
For platform features:
|
|
||||||
|
|
||||||
```text
|
|
||||||
platform-dev
|
|
||||||
↓
|
|
||||||
feature branch
|
|
||||||
↓
|
|
||||||
PR back to platform-dev
|
|
||||||
↓
|
|
||||||
platform-dev → dev integration PR
|
|
||||||
```
|
|
||||||
|
|
||||||
Rules:
|
|
||||||
|
|
||||||
- Platform feature branches MUST target `platform-dev`.
|
|
||||||
- Do NOT target `dev` directly unless the user explicitly asks.
|
|
||||||
- Do NOT use `website-dev` for platform features.
|
|
||||||
- `platform-dev` is the default PR base for TenantPilot platform/application work.
|
|
||||||
- `dev` is the shared integration branch.
|
|
||||||
|
|
||||||
### Solo Workflow Rule
|
|
||||||
|
|
||||||
The user works alone on `platform-dev`.
|
|
||||||
|
|
||||||
For refreshing the integration branch before opening or updating the PR `platform-dev` → `dev`, prefer rebase over merge.
|
|
||||||
|
|
||||||
Do not repeatedly merge `origin/dev` into `platform-dev` for refresh.
|
|
||||||
|
|
||||||
Avoid creating repeated merge commits like:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Merge remote-tracking branch 'origin/dev' into platform-dev
|
|
||||||
```
|
|
||||||
|
|
||||||
Use `--force-with-lease`, never plain `--force`.
|
|
||||||
|
|
||||||
If rebase conflicts occur, stop and report the conflict files.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Preconditions
|
|
||||||
|
|
||||||
Before committing:
|
|
||||||
|
|
||||||
1. Confirm repository root.
|
|
||||||
2. Confirm current branch is not protected.
|
|
||||||
|
|
||||||
Protected branches:
|
|
||||||
|
|
||||||
```text
|
|
||||||
dev
|
|
||||||
platform-dev
|
|
||||||
website-dev
|
|
||||||
main
|
|
||||||
master
|
|
||||||
```
|
|
||||||
|
|
||||||
If the current branch is protected, STOP and report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Ich bin auf einem geschützten Branch. Bitte zuerst einen Feature-Branch auschecken.
|
|
||||||
```
|
|
||||||
|
|
||||||
3. Confirm remote exists.
|
|
||||||
4. Confirm there are local changes, untracked files, or unpushed commits.
|
|
||||||
5. Confirm there are no unresolved conflicts.
|
|
||||||
|
|
||||||
Do not ask for confirmation unless:
|
|
||||||
|
|
||||||
- The current branch is protected.
|
|
||||||
- Git status indicates unresolved conflicts.
|
|
||||||
- There is no remote configured.
|
|
||||||
- `.env` or other local secret/config files would be committed.
|
|
||||||
- Commit fails.
|
|
||||||
- Push fails.
|
|
||||||
- Gitea MCP PR creation fails.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Required Tools
|
|
||||||
|
|
||||||
Use terminal for Git operations.
|
|
||||||
|
|
||||||
Use Gitea MCP for pull request creation.
|
|
||||||
|
|
||||||
Preferred Gitea MCP operation:
|
|
||||||
|
|
||||||
```text
|
|
||||||
create_pull_request
|
|
||||||
```
|
|
||||||
|
|
||||||
Required PR parameters:
|
|
||||||
|
|
||||||
```json
|
|
||||||
{
|
|
||||||
"owner": "ahmido",
|
|
||||||
"repo": "TenantAtlas",
|
|
||||||
"head": "<current-feature-branch>",
|
|
||||||
"base": "platform-dev",
|
|
||||||
"title": "<generated-title>",
|
|
||||||
"body": "<generated-body>"
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Workflow
|
|
||||||
|
|
||||||
### Step 1 — Inspect Git state
|
|
||||||
|
|
||||||
Run:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git rev-parse --show-toplevel
|
|
||||||
git rev-parse --abbrev-ref HEAD
|
|
||||||
git status --porcelain
|
|
||||||
git status -sb
|
|
||||||
git config --get remote.origin.url
|
|
||||||
git log --oneline --max-count=5
|
|
||||||
```
|
|
||||||
|
|
||||||
Determine:
|
|
||||||
|
|
||||||
- repository root
|
|
||||||
- current branch
|
|
||||||
- changed files
|
|
||||||
- untracked files
|
|
||||||
- remote URL
|
|
||||||
- whether there are unpushed commits
|
|
||||||
- whether unresolved conflicts exist
|
|
||||||
|
|
||||||
If the current branch is protected, stop.
|
|
||||||
|
|
||||||
If unresolved conflicts exist, stop.
|
|
||||||
|
|
||||||
If no remote exists, stop.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Step 2 — Check for local environment files
|
|
||||||
|
|
||||||
Before `git add -A`, check whether local environment/config files are modified or untracked:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git status --porcelain | grep -E '(^.. \.env$|^.. apps/platform/\.env$|^.. .*\.env$)' || true
|
|
||||||
```
|
|
||||||
|
|
||||||
If `.env` or another environment file is included, STOP and report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Achtung: Eine .env-/Environment-Datei ist geändert oder untracked. Ich committe das nicht automatisch. Bitte prüfen oder aus dem Commit entfernen.
|
|
||||||
```
|
|
||||||
|
|
||||||
Do not commit secrets or local runtime configuration.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Step 3 — Build commit message
|
|
||||||
|
|
||||||
Use the current branch name.
|
|
||||||
|
|
||||||
If branch starts with a spec number, for example:
|
|
||||||
|
|
||||||
```text
|
|
||||||
256-external-support-desk-handoff
|
|
||||||
```
|
|
||||||
|
|
||||||
Generate:
|
|
||||||
|
|
||||||
```text
|
|
||||||
feat(specs/256): external support desk handoff
|
|
||||||
```
|
|
||||||
|
|
||||||
If branch does not contain a spec number, generate:
|
|
||||||
|
|
||||||
```text
|
|
||||||
feat(platform): complete <branch-name>
|
|
||||||
```
|
|
||||||
|
|
||||||
Rules:
|
|
||||||
|
|
||||||
- Use lowercase subject.
|
|
||||||
- Use feature-style subject.
|
|
||||||
- Do not include `WIP`.
|
|
||||||
- Do not include `final`.
|
|
||||||
- Do not include overly generic `updates`.
|
|
||||||
|
|
||||||
Examples:
|
|
||||||
|
|
||||||
```text
|
|
||||||
feat(specs/256): external support desk handoff
|
|
||||||
feat(specs/252): platform localization v1
|
|
||||||
feat(platform): improve tenant review workspace
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Step 4 — Commit all changes
|
|
||||||
|
|
||||||
Run:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git add -A
|
|
||||||
git commit -m "<commit-message>"
|
|
||||||
```
|
|
||||||
|
|
||||||
If there are no local changes to commit, continue only if the branch has unpushed commits.
|
|
||||||
|
|
||||||
Check unpushed commits with:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git status -sb
|
|
||||||
git log --oneline origin/<current-branch>..HEAD
|
|
||||||
```
|
|
||||||
|
|
||||||
If there are no local changes and no unpushed commits, report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Es gibt keine lokalen Änderungen und keine unpushed commits. Ich erstelle keinen leeren Commit.
|
|
||||||
```
|
|
||||||
|
|
||||||
Then continue to PR creation only if the branch already exists remotely or can be pushed.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Step 5 — Push branch
|
|
||||||
|
|
||||||
Run:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git push --set-upstream origin <current-branch>
|
|
||||||
```
|
|
||||||
|
|
||||||
If the upstream already exists, this is acceptable.
|
|
||||||
|
|
||||||
Never force-push unless the user explicitly requests it.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Step 6 — Create PR into platform-dev via Gitea MCP
|
|
||||||
|
|
||||||
Use Gitea MCP to create a pull request:
|
|
||||||
|
|
||||||
```json
|
|
||||||
{
|
|
||||||
"owner": "ahmido",
|
|
||||||
"repo": "TenantAtlas",
|
|
||||||
"head": "<current-feature-branch>",
|
|
||||||
"base": "platform-dev",
|
|
||||||
"title": "<commit-message>",
|
|
||||||
"body": "Implements platform feature branch `<current-feature-branch>`.\n\nTarget branch: `platform-dev`.\n\nFollow-up integration path after merge:\n\n`platform-dev` → `dev`."
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
If a PR already exists for the same branch and base, do not create a duplicate.
|
|
||||||
|
|
||||||
Report the existing PR if available.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Optional Step — Check platform-dev to dev PR
|
|
||||||
|
|
||||||
After creating the feature PR, check whether an open integration PR exists:
|
|
||||||
|
|
||||||
```text
|
|
||||||
platform-dev → dev
|
|
||||||
```
|
|
||||||
|
|
||||||
If a Gitea MCP list/search pull request function is available, use it.
|
|
||||||
|
|
||||||
If one exists, report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Der Folge-PR `platform-dev` → `dev` existiert bereits: <url>
|
|
||||||
```
|
|
||||||
|
|
||||||
If none exists, report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Nach dem Merge dieses Feature-PRs sollte der Integrations-PR `platform-dev` → `dev` erstellt oder aktualisiert werden.
|
|
||||||
```
|
|
||||||
|
|
||||||
Do not automatically create the `platform-dev` → `dev` PR unless the user explicitly asks for it.
|
|
||||||
|
|
||||||
Reason: before the feature PR is merged into `platform-dev`, the integration PR may not include the new feature yet.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Integration Refresh Mode
|
|
||||||
|
|
||||||
Use this mode when the user explicitly says one of the following:
|
|
||||||
|
|
||||||
- "platform-dev nach dev vorbereiten"
|
|
||||||
- "platform-dev PR aktualisieren"
|
|
||||||
- "out-of-date mit dev beheben"
|
|
||||||
- "integration PR refresh"
|
|
||||||
- "platform-dev auf dev rebasen"
|
|
||||||
- "auch platform-dev nach dev"
|
|
||||||
- "und danach platform-dev nach dev"
|
|
||||||
- "full integration"
|
|
||||||
- "kompletten platform-dev zu dev PR machen"
|
|
||||||
- "folge-pr erstellen"
|
|
||||||
|
|
||||||
This mode prepares or updates the integration PR:
|
|
||||||
|
|
||||||
```text
|
|
||||||
platform-dev → dev
|
|
||||||
```
|
|
||||||
|
|
||||||
Because the user works alone on `platform-dev`, prefer rebase over merge.
|
|
||||||
|
|
||||||
### Integration Refresh Preconditions
|
|
||||||
|
|
||||||
Before running this mode:
|
|
||||||
|
|
||||||
1. Ensure the working tree is clean.
|
|
||||||
2. Ensure there are no unresolved conflicts.
|
|
||||||
3. Fetch remote branches.
|
|
||||||
4. Ensure `origin/platform-dev` exists.
|
|
||||||
5. Ensure `origin/dev` exists.
|
|
||||||
|
|
||||||
If the working tree is dirty, STOP and report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Der Working Tree ist nicht sauber. Bitte erst Änderungen committen, stashen oder verwerfen, bevor `platform-dev` auf `dev` rebased wird.
|
|
||||||
```
|
|
||||||
|
|
||||||
If unresolved conflicts exist, STOP and report the conflict files.
|
|
||||||
|
|
||||||
### Integration Refresh Workflow
|
|
||||||
|
|
||||||
Run:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git fetch origin
|
|
||||||
git checkout platform-dev
|
|
||||||
git reset --hard origin/platform-dev
|
|
||||||
git rebase origin/dev
|
|
||||||
git push --force-with-lease origin platform-dev
|
|
||||||
```
|
|
||||||
|
|
||||||
After pushing, verify that `origin/dev` is now an ancestor of `origin/platform-dev`:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git fetch origin
|
|
||||||
git merge-base --is-ancestor origin/dev origin/platform-dev \
|
|
||||||
&& echo "OK: platform-dev contains dev" \
|
|
||||||
|| echo "OUTDATED: platform-dev does not contain dev"
|
|
||||||
```
|
|
||||||
|
|
||||||
If the verification prints `OUTDATED`, stop and report it. Do not claim the PR is up-to-date.
|
|
||||||
|
|
||||||
Rules:
|
|
||||||
|
|
||||||
- Do not merge `origin/dev` into `platform-dev` for this refresh.
|
|
||||||
- Do not create repeated merge commits from `origin/dev` into `platform-dev`.
|
|
||||||
- Use `git push --force-with-lease origin platform-dev` after a successful rebase.
|
|
||||||
- Never use plain `git push --force`.
|
|
||||||
- If `git rebase origin/dev` reports conflicts, stop immediately.
|
|
||||||
- Do not continue to PR creation while a rebase is unresolved.
|
|
||||||
- Do not auto-merge the PR.
|
|
||||||
- Do not claim Gitea will remove the out-of-date warning unless the ancestor check succeeds.
|
|
||||||
|
|
||||||
If rebase conflicts occur, report:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Rebase-Konflikte erkannt. Ich habe gestoppt.
|
|
||||||
|
|
||||||
Konfliktdateien:
|
|
||||||
<files>
|
|
||||||
|
|
||||||
Bitte Konflikte lösen, dann `git rebase --continue` ausführen oder den Rebase mit `git rebase --abort` abbrechen.
|
|
||||||
```
|
|
||||||
|
|
||||||
### Create or Report Integration PR
|
|
||||||
|
|
||||||
After the rebase, push, and ancestor verification succeeded, use Gitea MCP to create or report the integration PR:
|
|
||||||
|
|
||||||
```json
|
|
||||||
{
|
|
||||||
"owner": "ahmido",
|
|
||||||
"repo": "TenantAtlas",
|
|
||||||
"head": "platform-dev",
|
|
||||||
"base": "dev",
|
|
||||||
"title": "chore(platform): merge platform-dev into dev",
|
|
||||||
"body": "Integrates latest TenantPilot platform changes from `platform-dev` into `dev`.\n\nThis PR was created by agent on user request; do not merge automatically."
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
If an open PR already exists for `platform-dev` → `dev`, do not create a duplicate. Report the existing PR.
|
|
||||||
|
|
||||||
### Integration Refresh Reporting Format
|
|
||||||
|
|
||||||
Final response for this mode must include:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Fertig.
|
|
||||||
|
|
||||||
- Branch aktualisiert: platform-dev
|
|
||||||
- Refresh-Methode: rebase auf origin/dev
|
|
||||||
- Ancestor-Check: origin/dev ist Ancestor von origin/platform-dev
|
|
||||||
- Push: --force-with-lease origin/platform-dev
|
|
||||||
- Integration PR: <url>
|
|
||||||
- Base: dev
|
|
||||||
- Hinweis: PR wurde nicht automatisch gemerged.
|
|
||||||
```
|
|
||||||
|
|
||||||
Do not claim tests passed unless they were actually executed.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Reporting Format
|
|
||||||
|
|
||||||
Final response must be concise and include:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Fertig.
|
|
||||||
|
|
||||||
- Branch: <branch>
|
|
||||||
- Commit: <commit-sha or "keine neuen Änderungen">
|
|
||||||
- Push: origin/<branch>
|
|
||||||
- PR: <url>
|
|
||||||
- Base: platform-dev
|
|
||||||
- Nächster Schritt: Nach Merge `platform-dev` → `dev` PR aktualisieren/erstellen
|
|
||||||
```
|
|
||||||
|
|
||||||
If tests were not run, say:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Tests wurden in diesem Skill nicht automatisch ausgeführt.
|
|
||||||
```
|
|
||||||
|
|
||||||
Do not claim tests passed unless the tool actually ran them.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Safety Rules
|
|
||||||
|
|
||||||
- Never commit directly to `dev`, `platform-dev`, `website-dev`, `main`, or `master`.
|
|
||||||
- Never force-push unless explicitly requested.
|
|
||||||
- For Integration Refresh Mode only, `git push --force-with-lease origin platform-dev` is allowed because the user works alone on `platform-dev`; never use plain `--force`.
|
|
||||||
- Never auto-merge PRs unless explicitly requested.
|
|
||||||
- Never target `dev` directly for platform feature PRs unless explicitly requested.
|
|
||||||
- Never delete branches unless explicitly requested.
|
|
||||||
- Never claim tests were run unless the tool actually ran them.
|
|
||||||
- Never commit `.env`, secrets, local tokens, local mock-server configuration, or temporary runtime-only changes.
|
|
||||||
- If migrations were created, mention that the target environment needs migration execution after deployment.
|
|
||||||
- If unresolved conflicts exist, stop.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Useful Commands
|
|
||||||
|
|
||||||
Inspect:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git rev-parse --show-toplevel
|
|
||||||
git rev-parse --abbrev-ref HEAD
|
|
||||||
git status --porcelain
|
|
||||||
git status -sb
|
|
||||||
git config --get remote.origin.url
|
|
||||||
```
|
|
||||||
|
|
||||||
Detect protected branch:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
branch="$(git rev-parse --abbrev-ref HEAD)"
|
|
||||||
case "$branch" in
|
|
||||||
dev|platform-dev|website-dev|main|master)
|
|
||||||
echo "PROTECTED_BRANCH:$branch"
|
|
||||||
exit 2
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
```
|
|
||||||
|
|
||||||
Detect unresolved conflicts:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git diff --name-only --diff-filter=U
|
|
||||||
```
|
|
||||||
|
|
||||||
Detect `.env` changes:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git status --porcelain | grep -E '(^.. \.env$|^.. apps/platform/\.env$|^.. .*\.env$)' || true
|
|
||||||
```
|
|
||||||
|
|
||||||
Commit:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git add -A
|
|
||||||
git commit -m "<message>"
|
|
||||||
```
|
|
||||||
|
|
||||||
Push:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git push --set-upstream origin "$(git rev-parse --abbrev-ref HEAD)"
|
|
||||||
```
|
|
||||||
|
|
||||||
Latest commit:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git rev-parse --short HEAD
|
|
||||||
git log -1 --pretty=%s
|
|
||||||
```
|
|
||||||
|
|
||||||
Integration refresh:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git fetch origin
|
|
||||||
git checkout platform-dev
|
|
||||||
git reset --hard origin/platform-dev
|
|
||||||
git rebase origin/dev
|
|
||||||
git push --force-with-lease origin platform-dev
|
|
||||||
```
|
|
||||||
|
|
||||||
Verify integration refresh:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git fetch origin
|
|
||||||
git merge-base --is-ancestor origin/dev origin/platform-dev \
|
|
||||||
&& echo "OK: platform-dev contains dev" \
|
|
||||||
|| echo "OUTDATED: platform-dev does not contain dev"
|
|
||||||
```
|
|
||||||
|
|
||||||
Check rebase conflicts:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
git diff --name-only --diff-filter=U
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Example User Request
|
|
||||||
|
|
||||||
User:
|
|
||||||
|
|
||||||
```text
|
|
||||||
alles committen pushen und pr gegen platform-dev mit gitea mcp
|
|
||||||
```
|
|
||||||
|
|
||||||
Assistant should:
|
|
||||||
|
|
||||||
1. Check current branch.
|
|
||||||
2. Stop if branch is protected.
|
|
||||||
3. Stop if `.env` or secrets would be committed.
|
|
||||||
4. Commit all changes.
|
|
||||||
5. Push current branch.
|
|
||||||
6. Create PR into `platform-dev` with Gitea MCP.
|
|
||||||
7. Report result.
|
|
||||||
|
|
||||||
Do not ask unnecessary follow-up questions.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Example Integration Refresh Request
|
|
||||||
|
|
||||||
User:
|
|
||||||
|
|
||||||
```text
|
|
||||||
platform-dev PR aktualisieren
|
|
||||||
```
|
|
||||||
|
|
||||||
Assistant should:
|
|
||||||
|
|
||||||
1. Ensure the working tree is clean.
|
|
||||||
2. Fetch origin.
|
|
||||||
3. Checkout `platform-dev`.
|
|
||||||
4. Reset local `platform-dev` to `origin/platform-dev`.
|
|
||||||
5. Rebase `platform-dev` onto `origin/dev`.
|
|
||||||
6. Push with `--force-with-lease`.
|
|
||||||
7. Verify `origin/dev` is an ancestor of `origin/platform-dev`.
|
|
||||||
8. Create or report the PR `platform-dev` → `dev`.
|
|
||||||
9. Report result.
|
|
||||||
|
|
||||||
Do not merge the PR automatically.
|
|
||||||
@ -1,447 +0,0 @@
|
|||||||
---
|
|
||||||
name: spec-kit-implementation-loop
|
|
||||||
description: Implement an existing TenantPilot/TenantAtlas Spec Kit feature, run tests, browser smoke checks where applicable, post-implementation analysis, fix all confirmed in-scope findings when safe and bounded, and repeat until no in-scope findings remain or a stop condition is reached.
|
|
||||||
---
|
|
||||||
|
|
||||||
# Skill: Spec Kit Implementation Loop
|
|
||||||
|
|
||||||
## Purpose
|
|
||||||
|
|
||||||
Use this skill to implement an already prepared TenantPilot/TenantAtlas Spec Kit feature and verify it with a bounded implementation loop.
|
|
||||||
|
|
||||||
This skill assumes `spec.md`, `plan.md`, and `tasks.md` already exist and have passed preparation readiness or have been explicitly accepted by the user.
|
|
||||||
|
|
||||||
The intended workflow is:
|
|
||||||
|
|
||||||
```text
|
|
||||||
active or explicitly named spec
|
|
||||||
→ inspect repo truth, constitution, spec, plan, tasks, and relevant code/tests
|
|
||||||
→ evaluate implementation gates
|
|
||||||
→ implement strictly task-by-task
|
|
||||||
→ run relevant tests/checks
|
|
||||||
→ run browser smoke test when UI/user-facing flows are affected
|
|
||||||
→ run strict post-implementation analysis
|
|
||||||
→ fix confirmed in-scope findings
|
|
||||||
→ repeat test + browser smoke + analysis + fix loop until clean or bounded stop condition is reached
|
|
||||||
→ final implementation report
|
|
||||||
```
|
|
||||||
|
|
||||||
## When to Use
|
|
||||||
|
|
||||||
Use this skill when the user asks to:
|
|
||||||
|
|
||||||
- implement an active or explicitly named Spec Kit feature
|
|
||||||
- run Spec Kit implement
|
|
||||||
- analyze after implementation
|
|
||||||
- fix implementation findings
|
|
||||||
- repeat implementation verification until no confirmed in-scope findings remain
|
|
||||||
- run tests and browser smoke checks after implementation
|
|
||||||
|
|
||||||
Typical user prompts:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Implementiere die aktive Spec und analysiere danach, ob alles passt.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Implementiere specs/243-product-usage-adoption-telemetry streng nach tasks.md.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Mach Spec Kit implement und danach analyse. Behebe alle Abweichungen und wiederhole bis sauber.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Implementiere die vorbereitete Spec. Danach Tests, Browser Smoke Test falls UI betroffen ist, Analyse und Fix-Loop bis keine In-Scope Findings mehr offen sind.
|
|
||||||
```
|
|
||||||
|
|
||||||
## Hard Rules
|
|
||||||
|
|
||||||
- Work strictly repo-based.
|
|
||||||
- Implement only the active or explicitly named Spec Kit feature.
|
|
||||||
- Do not choose a new candidate.
|
|
||||||
- Do not create a new spec.
|
|
||||||
- Do not expand scope beyond `spec.md`, `plan.md`, and `tasks.md`.
|
|
||||||
- Do not silently add roadmap features, adjacent UX rewrites, speculative architecture, or unrelated refactors.
|
|
||||||
- Follow the repository constitution and existing Spec Kit conventions.
|
|
||||||
- Preserve TenantPilot/TenantAtlas terminology.
|
|
||||||
- Prefer small, reviewable patches over broad rewrites.
|
|
||||||
- Treat repository truth as authoritative over assumptions.
|
|
||||||
- If repository truth conflicts with implementation scope, stop and report the conflict unless there is an obvious minimal correction inside active spec scope.
|
|
||||||
- Fix only confirmed findings from tests, static checks, browser smoke checks, or post-implementation analysis.
|
|
||||||
- Fix all confirmed in-scope findings, regardless of severity, when they are safe and bounded.
|
|
||||||
- Do not leave Medium/Low findings open silently. If they are not fixed, document exactly why.
|
|
||||||
- Never hide failing tests, weaken assertions, delete meaningful coverage, or mark tasks complete without implementation evidence.
|
|
||||||
- Do not run destructive commands.
|
|
||||||
- Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
|
||||||
- Do not perform database-destructive actions unless the repository test workflow explicitly requires isolated test database resets.
|
|
||||||
- Do not continue analysis/fix loops indefinitely.
|
|
||||||
- Do not move from implementation to final status unless the Test Gate, Browser Smoke Test Gate where applicable, and Post-Implementation Analysis Gate have been evaluated.
|
|
||||||
- Do not claim merge-readiness unless the Merge Readiness Gate passes.
|
|
||||||
|
|
||||||
## Required Inputs
|
|
||||||
|
|
||||||
The user should provide at least one of:
|
|
||||||
|
|
||||||
- explicit spec directory such as `specs/<number>-<slug>/`
|
|
||||||
- instruction to use the current active Spec Kit feature
|
|
||||||
- instruction to implement the prepared/current spec
|
|
||||||
|
|
||||||
If the active spec cannot be determined safely, inspect the repository Spec Kit context first. If it is still ambiguous, stop and ask for the specific spec directory.
|
|
||||||
|
|
||||||
## Required Repository Checks
|
|
||||||
|
|
||||||
Always check:
|
|
||||||
|
|
||||||
1. active Spec Kit context / current branch
|
|
||||||
2. git status
|
|
||||||
3. `.specify/memory/constitution.md`
|
|
||||||
4. the active spec directory
|
|
||||||
5. `spec.md`
|
|
||||||
6. `plan.md`
|
|
||||||
7. `tasks.md`
|
|
||||||
8. relevant templates or conventions under `.specify/templates/`
|
|
||||||
9. nearby existing specs with related terminology or scope
|
|
||||||
10. application code surfaces referenced by the active spec
|
|
||||||
11. existing tests related to the changed behavior
|
|
||||||
|
|
||||||
## Git and Branch Safety
|
|
||||||
|
|
||||||
Before making implementation changes:
|
|
||||||
|
|
||||||
1. Check the current branch.
|
|
||||||
2. Check whether the working tree is clean.
|
|
||||||
3. If there are unrelated uncommitted changes, stop and report them. Do not continue.
|
|
||||||
4. If the working tree only contains user-intended changes for this operation, continue cautiously.
|
|
||||||
5. Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
|
||||||
6. Do not overwrite unrelated work.
|
|
||||||
|
|
||||||
## Quality Gates
|
|
||||||
|
|
||||||
### Gate 1: Spec Readiness Gate
|
|
||||||
|
|
||||||
Required before implementation starts.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- `spec.md`, `plan.md`, and `tasks.md` exist.
|
|
||||||
- The spec has clear problem statement, user value, functional requirements, out-of-scope boundaries, acceptance criteria, assumptions, and risks.
|
|
||||||
- The plan identifies likely affected repo surfaces and does not contradict repository architecture.
|
|
||||||
- The tasks are small, ordered, verifiable, and include test/validation tasks.
|
|
||||||
- RBAC, workspace/tenant isolation, auditability, OperationRun semantics, evidence/result-truth, and UX requirements are addressed where relevant.
|
|
||||||
- No open question blocks safe implementation.
|
|
||||||
- The scope is small enough for a bounded implementation loop.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Stop before implementation.
|
|
||||||
- Report readiness gaps.
|
|
||||||
- Do not compensate for an unclear spec by inventing implementation scope.
|
|
||||||
|
|
||||||
### Gate 2: Implementation Scope Gate
|
|
||||||
|
|
||||||
Required before changing application code.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- The active spec directory is known.
|
|
||||||
- The implementation target is traceable to specific tasks in `tasks.md`.
|
|
||||||
- The affected files/surfaces are consistent with `plan.md` or clearly justified by repository truth.
|
|
||||||
- No required change would introduce unrelated product behavior.
|
|
||||||
- No required change conflicts with constitution, existing architecture, RBAC/isolation boundaries, or source-of-truth semantics.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Stop before code changes and report the conflict or ambiguity.
|
|
||||||
- Suggest a minimal spec/plan/tasks correction if the issue is in the artifacts rather than the codebase.
|
|
||||||
|
|
||||||
### Gate 3: Test Gate
|
|
||||||
|
|
||||||
Required after implementation and after each fix iteration.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- Targeted tests for changed behavior pass.
|
|
||||||
- Relevant existing tests pass or failures are proven unrelated and documented.
|
|
||||||
- Static analysis, linting, formatting, or type checks used by the repository pass when applicable.
|
|
||||||
- Security/governance-relevant changes have backend, policy, or domain coverage; UI-only verification is not enough.
|
|
||||||
- Regression coverage exists for each fixed Blocker or High finding where practical.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Fix in-scope failures before post-implementation analysis.
|
|
||||||
- If failures are unrelated or pre-existing, document evidence and continue only if they do not invalidate the active spec.
|
|
||||||
- Do not weaken tests to pass the gate.
|
|
||||||
|
|
||||||
### Gate 4: Browser Smoke Test Gate
|
|
||||||
|
|
||||||
Required before claiming implementation is ready for manual review/merge when the change affects Filament UI, Livewire interactions, navigation, forms, tables, actions, modals, dashboards, operation drilldowns, tenant/workspace context, or any user-facing flow.
|
|
||||||
|
|
||||||
Not required for backend-only, domain-only, enum-only, contract-only, or test-only changes unless those changes alter a user-facing flow.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- The relevant page or flow loads in a real browser or the repository's browser-testing harness.
|
|
||||||
- The primary action introduced or changed by the spec can be executed successfully.
|
|
||||||
- Expected UI states, labels, badges, actions, empty states, tables, forms, modals, and navigation are visible where relevant.
|
|
||||||
- Workspace/tenant context is preserved across the tested flow where relevant.
|
|
||||||
- RBAC/capability-dependent visibility behaves as expected where practical to verify.
|
|
||||||
- Livewire interactions complete without visible runtime errors.
|
|
||||||
- No relevant browser console errors occur.
|
|
||||||
- No failed network requests occur for the tested flow, except known unrelated development noise that is explicitly documented.
|
|
||||||
- OperationRun, audit, evidence, result, or support-diagnostic drilldowns work where relevant.
|
|
||||||
- The smoke-tested path is documented in the final response.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Fix in-scope browser, UX, Livewire, navigation, or runtime failures before claiming merge-readiness.
|
|
||||||
- If a browser issue is unrelated existing debt, document evidence and residual risk.
|
|
||||||
- Do not treat a passing browser smoke test as a substitute for backend, policy, domain, security, feature, or integration tests.
|
|
||||||
- Do not expand the smoke test into a full E2E suite unless the user explicitly asks for that.
|
|
||||||
|
|
||||||
### Gate 5: Post-Implementation Analysis Gate
|
|
||||||
|
|
||||||
Required after implementation and after each fix iteration.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- The implementation has been checked against `spec.md`, `plan.md`, `tasks.md`, and constitution.
|
|
||||||
- All completed tasks have implementation evidence.
|
|
||||||
- No confirmed in-scope findings remain.
|
|
||||||
- Medium/Low findings are fixed when they are inside active spec scope, clearly bounded, and safe.
|
|
||||||
- Medium/Low findings that remain open are explicitly documented with one of these reasons:
|
|
||||||
- out of scope
|
|
||||||
- requires separate spec
|
|
||||||
- risky refactor
|
|
||||||
- existing unrelated debt
|
|
||||||
- not reproducible
|
|
||||||
- blocked by unclear product/architecture decision
|
|
||||||
- No scope expansion was introduced during fixes.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Fix confirmed in-scope findings, regardless of severity, when the fix is safe and bounded.
|
|
||||||
- Stop instead of fixing when remediation would expand scope, contradict repo architecture, introduce risky refactors, or repeat the same failed fix twice.
|
|
||||||
|
|
||||||
### Gate 6: Merge Readiness Gate
|
|
||||||
|
|
||||||
Required before claiming the implementation is ready for manual review/merge.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- Spec Readiness Gate passed.
|
|
||||||
- Implementation Scope Gate passed.
|
|
||||||
- Test Gate passed.
|
|
||||||
- Browser Smoke Test Gate passed when applicable, or was explicitly marked not applicable with a reason.
|
|
||||||
- Post-Implementation Analysis Gate passed.
|
|
||||||
- `tasks.md` reflects actual completion status.
|
|
||||||
- No confirmed in-scope findings remain.
|
|
||||||
- All remaining findings are documented as out-of-scope, follow-up candidates, unrelated existing debt, or explicit residual risks.
|
|
||||||
- Final response includes changed files, tests/checks run, browser smoke result, iterations performed, residual risks, and follow-up candidates.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Do not claim merge-readiness.
|
|
||||||
- Report the failed gate, remaining risks, and the smallest recommended next action.
|
|
||||||
|
|
||||||
## Implementation Loop
|
|
||||||
|
|
||||||
Execute the loop in bounded phases:
|
|
||||||
|
|
||||||
1. Evaluate the Spec Readiness Gate.
|
|
||||||
2. Evaluate the Implementation Scope Gate before changing application code.
|
|
||||||
3. Implement the active Spec Kit feature scope task-by-task.
|
|
||||||
4. Run targeted tests and relevant static/dynamic checks.
|
|
||||||
5. Evaluate the Test Gate.
|
|
||||||
6. Run a Browser Smoke Test when the change affects UI/user-facing flows.
|
|
||||||
7. Evaluate the Browser Smoke Test Gate as passed, failed, or not applicable with a reason.
|
|
||||||
8. Run strict post-implementation analysis against spec, plan, tasks, constitution, changed code, changed tests, browser smoke results where applicable, and relevant existing patterns.
|
|
||||||
9. Evaluate the Post-Implementation Analysis Gate.
|
|
||||||
10. Identify confirmed findings by severity: Blocker, High, Medium, Low.
|
|
||||||
11. Fix all confirmed in-scope findings regardless of severity when safe and bounded.
|
|
||||||
12. Do not fix findings that require scope expansion, risky unrelated refactors, or architectural/product decisions outside the active spec; document them as follow-up/residual risks with reasons.
|
|
||||||
13. Re-run relevant tests and browser smoke checks where applicable after fixes.
|
|
||||||
14. Repeat test + browser smoke + analysis + fix loop until no confirmed in-scope findings remain or a stop condition is reached.
|
|
||||||
15. Evaluate the Merge Readiness Gate.
|
|
||||||
16. Report final implementation status, changed files, tests, browser smoke result, residual risks, failed/passed gates, and manual review prompt.
|
|
||||||
|
|
||||||
## Stop Conditions
|
|
||||||
|
|
||||||
Stop the implementation loop when any of the following is true:
|
|
||||||
|
|
||||||
- No confirmed in-scope findings remain.
|
|
||||||
- The same finding appears twice after attempted fixes.
|
|
||||||
- A required fix conflicts with the spec, plan, constitution, or repository architecture.
|
|
||||||
- A required fix would expand scope beyond the active spec.
|
|
||||||
- A required fix would require a risky unrelated refactor.
|
|
||||||
- A required fix depends on an unresolved product or architecture decision.
|
|
||||||
- Tests reveal an unrelated pre-existing failure that cannot be safely fixed inside the active spec.
|
|
||||||
- Browser smoke testing reveals an unrelated pre-existing UI/runtime failure that cannot be safely fixed inside the active spec.
|
|
||||||
- Three analysis/fix iterations have already been completed.
|
|
||||||
- The repository state is ambiguous enough that continuing would risk damaging architecture or data semantics.
|
|
||||||
|
|
||||||
When stopping before full cleanliness, report exactly why the loop stopped and what remains.
|
|
||||||
|
|
||||||
## Post-Implementation Analysis Prompt
|
|
||||||
|
|
||||||
Use this prompt internally after implementation and after each fix iteration:
|
|
||||||
|
|
||||||
```markdown
|
|
||||||
Du bist ein Senior Staff Software Engineer, Software Architect und Enterprise SaaS Reviewer.
|
|
||||||
|
|
||||||
Analysiere die Implementierung der aktiven Spec streng repo-basiert.
|
|
||||||
|
|
||||||
Ziel:
|
|
||||||
Prüfe, ob die Umsetzung vollständig, konsistent, getestet und constitution-konform ist.
|
|
||||||
|
|
||||||
Prüfe gegen:
|
|
||||||
- spec.md
|
|
||||||
- plan.md
|
|
||||||
- tasks.md
|
|
||||||
- .specify/memory/constitution.md
|
|
||||||
- geänderte Anwendungscodes
|
|
||||||
- geänderte Tests
|
|
||||||
- Browser-Smoke-Test-Ergebnis, falls UI/user-facing Flows betroffen sind
|
|
||||||
- bestehende Repository-Patterns
|
|
||||||
|
|
||||||
Wichtig:
|
|
||||||
- Keine Spekulation ohne Repo-Beleg.
|
|
||||||
- Keine Scope-Erweiterung.
|
|
||||||
- Keine neuen Produktideen als Pflicht-Fixes.
|
|
||||||
- Findings nach Blocker, High, Medium, Low gruppieren.
|
|
||||||
- Für jedes Finding konkrete Datei-/Code-Belege nennen.
|
|
||||||
- Für jedes Finding eine minimale Remediation nennen.
|
|
||||||
- Separat ausweisen, welche Findings innerhalb der aktiven Spec behoben werden müssen.
|
|
||||||
- Medium/Low Findings innerhalb der aktiven Spec ebenfalls zur Behebung markieren, wenn sie sicher und bounded sind.
|
|
||||||
- Bei UI-/Filament-/Livewire-Änderungen prüfen, ob ein Browser Smoke Test durchgeführt wurde und ob der getestete Operator-Flow wirklich funktioniert.
|
|
||||||
- Findings, die nicht behoben werden sollen, nur als Follow-up/Residual Risk ausweisen, wenn sie out of scope, risky refactor, unrelated existing debt, not reproducible oder durch eine offene Produkt-/Architekturentscheidung blockiert sind.
|
|
||||||
- Wenn keine bestätigten In-Scope Findings verbleiben, klare Implementierungsfreigabe geben.
|
|
||||||
```
|
|
||||||
|
|
||||||
## Task Completion Rules
|
|
||||||
|
|
||||||
- Keep `tasks.md` aligned with actual implementation status.
|
|
||||||
- Check off tasks only after the implementation and test evidence exists.
|
|
||||||
- If a task is obsolete because repository truth proves a different path, update the task note with the reason instead of silently deleting it.
|
|
||||||
- If a task cannot be completed inside scope, leave it unchecked and report why.
|
|
||||||
|
|
||||||
## Testing Rules
|
|
||||||
|
|
||||||
- Add or update tests for all changed business behavior.
|
|
||||||
- Include RBAC and workspace/tenant isolation tests where relevant.
|
|
||||||
- Include OperationRun, audit, evidence, or result-truth tests where relevant.
|
|
||||||
- Prefer regression tests for every fixed Blocker or High finding.
|
|
||||||
- Add regression tests for Medium/Low findings when the behavior is important and testable without excessive churn.
|
|
||||||
- Do not weaken tests to pass the suite.
|
|
||||||
- Do not treat a green UI path as sufficient without backend or policy coverage when the behavior is security- or governance-relevant.
|
|
||||||
|
|
||||||
## Browser Smoke Test Rules
|
|
||||||
|
|
||||||
Apply these rules when the active spec changes Filament UI, Livewire interactions, navigation, forms, tables, actions, modals, dashboards, operation drilldowns, tenant/workspace context, or any user-facing flow.
|
|
||||||
|
|
||||||
The browser smoke test should be narrow and focused. It is not a full E2E suite unless explicitly requested.
|
|
||||||
|
|
||||||
Minimum smoke path:
|
|
||||||
|
|
||||||
1. Open the relevant page or entry point.
|
|
||||||
2. Confirm the expected workspace/tenant context where relevant.
|
|
||||||
3. Confirm the changed or newly introduced UI element is visible.
|
|
||||||
4. Execute the primary action or interaction changed by the spec.
|
|
||||||
5. Confirm the expected result state, notification, redirect, table update, modal state, operation link, or drilldown.
|
|
||||||
6. Check for relevant console errors.
|
|
||||||
7. Check for failed network requests related to the tested flow.
|
|
||||||
8. Document the tested path in the final response.
|
|
||||||
|
|
||||||
For TenantPilot/TenantAtlas, pay special attention to:
|
|
||||||
|
|
||||||
- Filament actions and header actions
|
|
||||||
- Livewire polling, modals, validation, and actions
|
|
||||||
- workspace/tenant context preservation
|
|
||||||
- RBAC/capability-dependent action visibility
|
|
||||||
- OperationRun links and drilldown continuity
|
|
||||||
- audit/evidence/result/support-diagnostic drilldowns where relevant
|
|
||||||
- empty states, badges, labels, and decision guidance where relevant
|
|
||||||
|
|
||||||
Browser smoke testing is required for UI/user-facing changes and optional for backend-only changes.
|
|
||||||
|
|
||||||
Do not treat browser smoke success as proof that backend security, policies, domain logic, auditability, or workspace/tenant isolation are correct. Those still require automated tests or repo-based verification.
|
|
||||||
|
|
||||||
## Failure Handling
|
|
||||||
|
|
||||||
If an implementation step, test phase, browser smoke phase, or post-implementation analysis fails:
|
|
||||||
|
|
||||||
1. Stop at the relevant gate or stop condition.
|
|
||||||
2. Report the failing command or phase.
|
|
||||||
3. Summarize the error.
|
|
||||||
4. Do not attempt unrelated implementation as a workaround.
|
|
||||||
5. Suggest the smallest safe next action.
|
|
||||||
|
|
||||||
If the branch or working tree state is unsafe:
|
|
||||||
|
|
||||||
1. Stop before implementation changes.
|
|
||||||
2. Report the current branch and relevant uncommitted files.
|
|
||||||
3. Ask the user to commit, stash, or move to a clean worktree.
|
|
||||||
|
|
||||||
## Final Response Requirements
|
|
||||||
|
|
||||||
Respond with:
|
|
||||||
|
|
||||||
1. Active spec directory
|
|
||||||
2. Summary of implemented changes
|
|
||||||
3. Tests/checks run and their results
|
|
||||||
4. Browser smoke test result, tested path, or not-applicable reason
|
|
||||||
5. Quality gates passed/failed and number of analysis/fix iterations performed
|
|
||||||
6. Remaining in-scope findings, if any
|
|
||||||
7. Residual risks and follow-up candidates, if relevant
|
|
||||||
8. Files changed
|
|
||||||
9. Explicit statement whether the Merge Readiness Gate passed and whether the implementation is ready for manual review/merge
|
|
||||||
|
|
||||||
Keep the final response concise, but include enough detail for the user to continue immediately.
|
|
||||||
|
|
||||||
## Manual Review Prompt
|
|
||||||
|
|
||||||
Provide a ready-to-copy prompt like this, adapted to the active spec number and slug:
|
|
||||||
|
|
||||||
```markdown
|
|
||||||
Du bist ein Senior Staff Software Architect und Enterprise SaaS Reviewer.
|
|
||||||
|
|
||||||
Führe eine finale manuelle Review der implementierten Spec `<spec-number>-<slug>` streng repo-basiert durch.
|
|
||||||
|
|
||||||
Ziel:
|
|
||||||
Prüfe, ob die Implementierung nach dem Agenten-Loop wirklich merge-ready ist.
|
|
||||||
|
|
||||||
Wichtig:
|
|
||||||
- Keine Implementierung.
|
|
||||||
- Keine Codeänderungen.
|
|
||||||
- Keine Scope-Erweiterung.
|
|
||||||
- Prüfe gegen spec.md, plan.md, tasks.md und constitution.md.
|
|
||||||
- Prüfe die geänderten Dateien, Tests, Browser-Smoke-Test-Ergebnis, RBAC, Workspace-/Tenant-Isolation, Auditability, UX und OperationRun-Semantik, soweit relevant.
|
|
||||||
- Benenne nur konkrete Findings mit Repo-Beleg.
|
|
||||||
- Gib am Ende eine klare Entscheidung: Merge-ready, merge-ready with notes, oder not merge-ready.
|
|
||||||
```
|
|
||||||
|
|
||||||
## Example Invocation
|
|
||||||
|
|
||||||
User:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Nutze den Skill spec-kit-implementation-loop.
|
|
||||||
Implementiere die aktive Spec.
|
|
||||||
Danach Tests ausführen, Browser Smoke Test falls UI/user-facing betroffen ist, Post-Implementation Analyse durchführen und alle bestätigten In-Scope Findings unabhängig von Severity beheben, wenn safe und bounded.
|
|
||||||
Wiederhole test + browser smoke + analysis + fix bis keine In-Scope Findings mehr offen sind oder eine Stop Condition greift.
|
|
||||||
```
|
|
||||||
|
|
||||||
Expected behavior:
|
|
||||||
|
|
||||||
1. Inspect active Spec Kit context, constitution, spec, plan, tasks, relevant code, and relevant tests.
|
|
||||||
2. Evaluate the Spec Readiness Gate and Implementation Scope Gate.
|
|
||||||
3. Implement only the active spec scope.
|
|
||||||
4. Run targeted tests and relevant checks.
|
|
||||||
5. Evaluate the Test Gate.
|
|
||||||
6. Run and evaluate Browser Smoke Test when UI/user-facing flows are affected.
|
|
||||||
7. Run post-implementation analysis.
|
|
||||||
8. Fix all confirmed in-scope findings regardless of severity when safe and bounded.
|
|
||||||
9. Repeat test + browser smoke + analysis + fix loop up to the stop conditions.
|
|
||||||
10. Evaluate the Merge Readiness Gate.
|
|
||||||
11. Report final status, changed files, tests, browser smoke result, residual risks, gates, and manual review prompt.
|
|
||||||
```
|
|
||||||
@ -1,612 +0,0 @@
|
|||||||
---
|
|
||||||
name: spec-kit-next-best-prep
|
|
||||||
description: Select the next suitable TenantPilot/TenantAtlas spec candidate from roadmap/spec-candidates, run the repository's Spec Kit preparation flow, create or update spec.md/plan.md/tasks.md, run preparation analysis, fix preparation-artifact issues only, and stop before application implementation.
|
|
||||||
---
|
|
||||||
|
|
||||||
# Skill: Spec Kit Next-Best Preparation
|
|
||||||
|
|
||||||
## Purpose
|
|
||||||
|
|
||||||
Use this skill to prepare the next implementation-ready Spec Kit package for TenantPilot/TenantAtlas without implementing application code.
|
|
||||||
|
|
||||||
This skill supports preparation only:
|
|
||||||
|
|
||||||
1. Select or scope the next suitable feature from roadmap/spec-candidates.
|
|
||||||
2. Run the repository's real Spec Kit preparation workflow where available.
|
|
||||||
3. Create or update `spec.md`, `plan.md`, and `tasks.md`.
|
|
||||||
4. Run preparation `analyze` when supported.
|
|
||||||
5. Fix preparation-artifact issues only.
|
|
||||||
6. Evaluate preparation quality gates.
|
|
||||||
7. Stop before application implementation.
|
|
||||||
|
|
||||||
The intended workflow is:
|
|
||||||
|
|
||||||
```text
|
|
||||||
roadmap / spec-candidates / feature idea
|
|
||||||
→ inspect repo truth, constitution, roadmap, spec candidates, existing specs, and relevant code
|
|
||||||
→ select the next suitable candidate or scope the provided idea
|
|
||||||
→ run Spec Kit specify/plan/tasks/analyze where available
|
|
||||||
→ create or update spec.md + plan.md + tasks.md
|
|
||||||
→ fix preparation-artifact issues only
|
|
||||||
→ evaluate Candidate Selection Gate and Spec Readiness Gate
|
|
||||||
→ final preparation report
|
|
||||||
→ explicit implementation step later
|
|
||||||
```
|
|
||||||
|
|
||||||
## When to Use
|
|
||||||
|
|
||||||
Use this skill when the user asks to:
|
|
||||||
|
|
||||||
- select the next best spec candidate from `docs/product/spec-candidates.md` and roadmap sources
|
|
||||||
- turn a feature idea, roadmap item, or candidate into `spec.md`, `plan.md`, and `tasks.md`
|
|
||||||
- prepare Spec Kit artifacts in one pass
|
|
||||||
- run specify/plan/tasks/analyze without implementation
|
|
||||||
- fix preparation analysis issues in Spec Kit artifacts only
|
|
||||||
- prepare a feature package for a later implementation skill
|
|
||||||
|
|
||||||
Typical user prompts:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Nimm den nächsten sinnvollen Spec Candidate aus Roadmap/spec-candidates und mach spec, plan und tasks.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Mach daraus spec, plan und tasks in einem Rutsch, aber noch nicht implementieren.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Wähle aus roadmap.md und spec-candidates.md die nächste sinnvollste Spec und führe specify, plan, tasks und analyze aus.
|
|
||||||
```
|
|
||||||
|
|
||||||
```text
|
|
||||||
Behebe alle analyze-Issues in den Spec-Kit-Artefakten. Keine Application-Implementierung.
|
|
||||||
```
|
|
||||||
|
|
||||||
## Hard Rules
|
|
||||||
|
|
||||||
- Work strictly repo-based.
|
|
||||||
- This is a preparation-only skill.
|
|
||||||
- Do not implement application code.
|
|
||||||
- Do not modify production code.
|
|
||||||
- Do not modify migrations, models, services, jobs, Filament resources, Livewire components, policies, commands, routes, views, tests, or runtime behavior.
|
|
||||||
- Use the repository's actual Spec Kit workflow, scripts, templates, branch naming rules, and generated paths when available.
|
|
||||||
- Do not manually invent spec numbers, branch names, or spec paths if Spec Kit provides a script or command for that.
|
|
||||||
- Do not bypass Spec Kit branch mechanics.
|
|
||||||
- Create or update only Spec Kit preparation artifacts unless repository conventions require additional documentation artifacts.
|
|
||||||
- Do not expand scope beyond the selected feature, `spec.md`, `plan.md`, and `tasks.md`.
|
|
||||||
- Do not silently add roadmap features, adjacent UX rewrites, speculative architecture, or unrelated refactors.
|
|
||||||
- Follow the repository constitution and existing Spec Kit conventions.
|
|
||||||
- Preserve TenantPilot/TenantAtlas terminology.
|
|
||||||
- Prefer small, reviewable, implementation-ready specs over broad rewrites.
|
|
||||||
- Treat repository truth as authoritative over assumptions.
|
|
||||||
- If repository truth conflicts with the user-provided draft or candidate wording, keep repository truth and document the deviation.
|
|
||||||
- Fix only confirmed preparation-artifact findings from Spec Kit preparation analysis.
|
|
||||||
- Do not leave preparation findings open silently. If they are not fixed, document exactly why.
|
|
||||||
- Do not run destructive commands.
|
|
||||||
- Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
|
||||||
- Do not overwrite existing specs.
|
|
||||||
- Do not rewrite completed specs back into preparation state.
|
|
||||||
- Do not remove or normalize implementation history, close-out notes, validation results, completed task markers, smoke results, or post-implementation review language from completed specs.
|
|
||||||
- Treat completed-spec close-out and validation language as intentional repository history, not preparation drift.
|
|
||||||
- Do not move from preparation to an implementation step inside this skill.
|
|
||||||
|
|
||||||
## Required Inputs
|
|
||||||
|
|
||||||
The user should provide at least one of:
|
|
||||||
|
|
||||||
- feature title and short goal
|
|
||||||
- full spec candidate
|
|
||||||
- roadmap item
|
|
||||||
- rough problem statement
|
|
||||||
- UX or architecture improvement idea
|
|
||||||
- instruction to choose the next best candidate from roadmap/spec-candidates
|
|
||||||
|
|
||||||
If the input is incomplete, proceed with the smallest reasonable interpretation and document assumptions.
|
|
||||||
|
|
||||||
If no suitable candidate can be selected safely, stop and report why.
|
|
||||||
|
|
||||||
## Required Repository Checks
|
|
||||||
|
|
||||||
Always check:
|
|
||||||
|
|
||||||
1. `.specify/memory/constitution.md`
|
|
||||||
2. `.specify/templates/`
|
|
||||||
3. `.specify/scripts/`
|
|
||||||
4. existing Spec Kit command usage or repository instructions, if present
|
|
||||||
5. current branch and git status
|
|
||||||
6. `specs/`
|
|
||||||
7. `docs/product/spec-candidates.md`
|
|
||||||
8. relevant roadmap documents under `docs/product/`, especially `roadmap.md` if present
|
|
||||||
9. nearby existing specs with related terminology or scope
|
|
||||||
10. application code only as needed to avoid wrong naming, wrong architecture, duplicate concepts, impossible tasks, duplicated specs, or already-completed candidates
|
|
||||||
|
|
||||||
Do not edit application code.
|
|
||||||
|
|
||||||
## Completed-Spec Guardrail
|
|
||||||
|
|
||||||
Before selecting an existing spec package as a `next-best-prep` target, explicitly check whether the spec is already completed, implementation-closed, or validated.
|
|
||||||
|
|
||||||
A spec must be treated as completed if any of the following signals are present in `spec.md`, `plan.md`, `tasks.md`, `quickstart.md`, checklist artifacts, or related Spec Kit package files:
|
|
||||||
|
|
||||||
- `Implementation Close-Out`
|
|
||||||
- `Implementation completed on`
|
|
||||||
- `Implementation Validation Results`
|
|
||||||
- `Implemented and validated`
|
|
||||||
- `Review Outcome` or `Implementation Review Outcome`
|
|
||||||
- passed validation, smoke, browser, or guardrail results
|
|
||||||
- completed task checklist markers for the implementation tasks
|
|
||||||
- post-implementation review or close-out language
|
|
||||||
- a status marker indicating implemented, completed, closed, or validated
|
|
||||||
|
|
||||||
If a spec is completed:
|
|
||||||
|
|
||||||
- exclude it from `next-best-prep` candidate selection
|
|
||||||
- do not patch, normalize, rewrite, or convert it back to preparation-only state
|
|
||||||
- do not remove close-out sections, validation results, completed task markers, smoke results, or post-implementation review language
|
|
||||||
- treat those artifacts as historical implementation evidence
|
|
||||||
- only use the completed spec as context for dependency or roadmap reasoning
|
|
||||||
|
|
||||||
If all high-priority candidates are already specced, active, or completed, stop and report `no safe next prep target` instead of modifying existing completed specs.
|
|
||||||
|
|
||||||
## Git and Branch Safety
|
|
||||||
|
|
||||||
Before running any Spec Kit command:
|
|
||||||
|
|
||||||
1. Check the current branch.
|
|
||||||
2. Check whether the working tree is clean.
|
|
||||||
3. If there are unrelated uncommitted changes, stop and report them. Do not continue.
|
|
||||||
4. If the working tree only contains user-intended planning edits for this operation, continue cautiously.
|
|
||||||
5. Let Spec Kit create or switch to the correct feature branch when that is how the repository workflow works.
|
|
||||||
6. Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
|
||||||
7. Do not overwrite existing specs.
|
|
||||||
|
|
||||||
If the repo requires an explicit branch creation script for `specify`, use that script rather than manually creating the branch.
|
|
||||||
|
|
||||||
## Quality Gates
|
|
||||||
|
|
||||||
### Gate 1: Candidate Selection Gate
|
|
||||||
|
|
||||||
Required before creating a new spec from roadmap/spec-candidates.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- The selected candidate exists in roadmap/spec-candidate material or is directly provided by the user.
|
|
||||||
- The selected candidate is not already covered by an existing active or completed spec.
|
|
||||||
- The selected target is not a completed spec package with implementation close-out, validation results, completed tasks, smoke results, or post-implementation review history.
|
|
||||||
- The selected candidate aligns with current roadmap priorities or explicitly documented product direction.
|
|
||||||
- The candidate can be scoped as a small, reviewable, implementation-ready slice.
|
|
||||||
- Major adjacent concerns are listed as follow-up candidates instead of being hidden inside the primary scope.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- If no candidate satisfies the gate, stop and report the top candidates plus the reason none is ready.
|
|
||||||
- If the only plausible targets are completed specs, stop and report `no safe next prep target`; do not modify those completed specs.
|
|
||||||
- Do not invent a new roadmap direction to force progress.
|
|
||||||
|
|
||||||
### Gate 2: Spec Readiness Gate
|
|
||||||
|
|
||||||
Required before reporting that the package is ready for implementation.
|
|
||||||
|
|
||||||
Pass criteria:
|
|
||||||
|
|
||||||
- `spec.md`, `plan.md`, and `tasks.md` exist.
|
|
||||||
- The spec has clear problem statement, user value, functional requirements, out-of-scope boundaries, acceptance criteria, assumptions, and risks.
|
|
||||||
- The plan identifies likely affected repo surfaces and does not contradict repository architecture.
|
|
||||||
- The tasks are small, ordered, verifiable, and include test/validation tasks.
|
|
||||||
- RBAC, workspace/tenant isolation, auditability, OperationRun semantics, evidence/result-truth, and UX requirements are addressed where relevant.
|
|
||||||
- No open question blocks safe implementation.
|
|
||||||
- The scope is small enough for a bounded implementation loop in a later implementation skill.
|
|
||||||
- Required checklist artifacts exist when the constitution requires them.
|
|
||||||
|
|
||||||
Fail behavior:
|
|
||||||
|
|
||||||
- Fix preparation-artifact issues when they are safe and bounded.
|
|
||||||
- If readiness cannot be achieved without implementation or unresolved product decisions, stop and report the gap.
|
|
||||||
- Do not compensate for an unclear spec by inventing implementation scope.
|
|
||||||
|
|
||||||
## Candidate Selection Rules
|
|
||||||
|
|
||||||
When the user asks for the next best spec from roadmap/spec-candidates:
|
|
||||||
|
|
||||||
- Read `docs/product/spec-candidates.md`.
|
|
||||||
- Read relevant roadmap documents under `docs/product/`, especially `roadmap.md` if present.
|
|
||||||
- Check existing specs to avoid duplicates.
|
|
||||||
- Check existing specs for completed-spec signals before selecting an existing package as a refresh target.
|
|
||||||
- Exclude completed specs from next-best-prep selection, even if their artifacts contain close-out, validation, or completed-task language that would look like drift in a preparation-only package.
|
|
||||||
- Prefer candidates that align with current roadmap priorities, platform foundations, enterprise UX, RBAC/isolation, auditability, observability, and governance workflow maturity.
|
|
||||||
- Prefer candidates that unlock roadmap progress, reduce architectural drift, harden foundations, or remove known blockers.
|
|
||||||
- Prefer small, implementation-ready slices over broad platform rewrites.
|
|
||||||
- If multiple candidates are plausible, choose one primary candidate and document why it was selected.
|
|
||||||
- Add non-selected relevant candidates as follow-up spec candidates, not hidden scope.
|
|
||||||
- Do not invent a candidate if existing roadmap/spec-candidate material provides a suitable one.
|
|
||||||
- Do not pick a spec only because it is listed first.
|
|
||||||
- Evaluate the Candidate Selection Gate before creating the spec directory.
|
|
||||||
|
|
||||||
Evaluate candidates using these criteria:
|
|
||||||
|
|
||||||
1. **Roadmap Fit**: Does it support the current roadmap sequence or unlock the next roadmap layer?
|
|
||||||
2. **Foundation Value**: Does it strengthen reusable platform foundations such as RBAC, isolation, auditability, evidence, OperationRun observability, provider boundaries, vocabulary, baseline/control/finding semantics, or enterprise UX patterns?
|
|
||||||
3. **Dependency Unblocking**: Does it make future specs smaller, safer, or more consistent?
|
|
||||||
4. **Scope Size**: Can it be implemented as a narrow, testable slice?
|
|
||||||
5. **Repo Readiness**: Does the repo already have enough structure to implement the next slice safely?
|
|
||||||
6. **Risk Reduction**: Does it reduce current architectural or product risk?
|
|
||||||
7. **User/Product Value**: Does it produce visible operator value or make the platform more sellable without heavy scope?
|
|
||||||
8. **Completion Safety**: Is the target genuinely unprepared or incomplete, rather than an already completed spec whose historical close-out artifacts should be preserved?
|
|
||||||
|
|
||||||
## Required Selection Output Before Spec Kit Execution
|
|
||||||
|
|
||||||
Before running the Spec Kit flow, identify:
|
|
||||||
|
|
||||||
- selected candidate title
|
|
||||||
- source location in roadmap/spec-candidates
|
|
||||||
- why it was selected
|
|
||||||
- why close alternatives were deferred
|
|
||||||
- roadmap relationship
|
|
||||||
- completed-spec check result for related existing specs
|
|
||||||
- smallest viable implementation slice
|
|
||||||
- proposed concise feature description to feed into `specify`
|
|
||||||
|
|
||||||
The feature description must be product- and behavior-oriented. It should not be a low-level implementation plan.
|
|
||||||
|
|
||||||
## Spec Kit Preparation Flow
|
|
||||||
|
|
||||||
### Step 1: Determine the repository's Spec Kit command pattern
|
|
||||||
|
|
||||||
Inspect repository instructions and scripts to identify how this repo expects Spec Kit to be run.
|
|
||||||
|
|
||||||
Common locations to inspect:
|
|
||||||
|
|
||||||
```text
|
|
||||||
.specify/scripts/
|
|
||||||
.specify/templates/
|
|
||||||
.specify/memory/constitution.md
|
|
||||||
.github/prompts/
|
|
||||||
.github/skills/
|
|
||||||
README.md
|
|
||||||
specs/
|
|
||||||
```
|
|
||||||
|
|
||||||
Use the repo-specific mechanism if present.
|
|
||||||
|
|
||||||
### Step 2: Run `specify`
|
|
||||||
|
|
||||||
Run the repository's `specify` flow using the selected candidate and the smallest viable slice.
|
|
||||||
|
|
||||||
The `specify` input should include:
|
|
||||||
|
|
||||||
- selected candidate title
|
|
||||||
- problem statement
|
|
||||||
- operator/user value
|
|
||||||
- roadmap relationship
|
|
||||||
- out-of-scope boundaries
|
|
||||||
- key acceptance criteria
|
|
||||||
- important enterprise constraints
|
|
||||||
|
|
||||||
Let Spec Kit create the correct branch and spec location if that is the repo's configured behavior.
|
|
||||||
|
|
||||||
### Step 3: Run `plan`
|
|
||||||
|
|
||||||
Run the repository's `plan` flow for the generated spec.
|
|
||||||
|
|
||||||
The `plan` input should keep the scope tight and should require repo-based alignment with:
|
|
||||||
|
|
||||||
- constitution
|
|
||||||
- existing architecture
|
|
||||||
- workspace/tenant isolation
|
|
||||||
- RBAC
|
|
||||||
- OperationRun/observability where relevant
|
|
||||||
- evidence/snapshot/truth semantics where relevant
|
|
||||||
- Filament/Livewire conventions where relevant
|
|
||||||
- test strategy
|
|
||||||
|
|
||||||
### Step 4: Run `tasks`
|
|
||||||
|
|
||||||
Run the repository's `tasks` flow for the generated plan.
|
|
||||||
|
|
||||||
The generated tasks must be:
|
|
||||||
|
|
||||||
- ordered
|
|
||||||
- small
|
|
||||||
- testable
|
|
||||||
- grouped by phase
|
|
||||||
- limited to the selected scope
|
|
||||||
- suitable for later implementation or manual analysis before implementation
|
|
||||||
|
|
||||||
### Step 5: Run preparation `analyze`
|
|
||||||
|
|
||||||
Run the repository's `analyze` flow against the generated Spec Kit artifacts when the repository supports it.
|
|
||||||
|
|
||||||
Analyze must check:
|
|
||||||
|
|
||||||
- consistency between `spec.md`, `plan.md`, and `tasks.md`
|
|
||||||
- constitution alignment
|
|
||||||
- roadmap alignment
|
|
||||||
- whether the selected candidate was narrowed safely
|
|
||||||
- whether tasks are complete enough for implementation
|
|
||||||
- whether tasks accidentally require scope not described in the spec
|
|
||||||
- whether plan details conflict with repository architecture or terminology
|
|
||||||
- whether implementation risks are documented instead of silently ignored
|
|
||||||
|
|
||||||
Do not use analyze as a trigger to implement application code.
|
|
||||||
|
|
||||||
### Step 6: Fix preparation-artifact issues only
|
|
||||||
|
|
||||||
If preparation analyze finds issues, first confirm that the selected package is not completed. Then fix only Spec Kit preparation artifacts such as:
|
|
||||||
|
|
||||||
- `spec.md`
|
|
||||||
- `plan.md`
|
|
||||||
- `tasks.md`
|
|
||||||
- `checklists/requirements.md` or other generated Spec Kit metadata files, if the repository uses them
|
|
||||||
|
|
||||||
Allowed fixes include:
|
|
||||||
|
|
||||||
- clarify requirements
|
|
||||||
- tighten scope
|
|
||||||
- move out-of-scope work into follow-up candidates
|
|
||||||
- correct terminology
|
|
||||||
- add missing tasks
|
|
||||||
- remove tasks not backed by the spec
|
|
||||||
- align plan language with repository architecture
|
|
||||||
- add missing acceptance criteria or validation tasks
|
|
||||||
- add missing checklist artifacts required by the constitution
|
|
||||||
|
|
||||||
Forbidden fixes include:
|
|
||||||
|
|
||||||
- modifying application code
|
|
||||||
- creating migrations
|
|
||||||
- editing models, services, jobs, policies, Filament resources, Livewire components, tests, commands, routes, or views
|
|
||||||
- running implementation or test-fix loops
|
|
||||||
- changing runtime behavior
|
|
||||||
- removing implementation close-out history from completed specs
|
|
||||||
- converting completed specs back to preparation-only wording
|
|
||||||
- changing passed validation or smoke results into planned validation commands
|
|
||||||
- unchecking completed implementation tasks in a completed spec
|
|
||||||
|
|
||||||
### Step 7: Evaluate the Spec Readiness Gate
|
|
||||||
|
|
||||||
After preparation analyze has passed or preparation-artifact issues have been fixed, evaluate the Spec Readiness Gate.
|
|
||||||
|
|
||||||
Stop after this gate and do not implement.
|
|
||||||
|
|
||||||
## Spec Directory Rules
|
|
||||||
|
|
||||||
When creating a new spec directory, use the repository's Spec Kit-generated directory or path.
|
|
||||||
|
|
||||||
If the repository does not provide a command for spec setup, use the next valid spec number and a kebab-case slug:
|
|
||||||
|
|
||||||
```text
|
|
||||||
specs/<number>-<slug>/
|
|
||||||
```
|
|
||||||
|
|
||||||
The exact number must be derived from the current repository state and existing numbering conventions.
|
|
||||||
|
|
||||||
Create or update preparation artifacts inside the selected spec directory:
|
|
||||||
|
|
||||||
```text
|
|
||||||
specs/<number>-<slug>/spec.md
|
|
||||||
specs/<number>-<slug>/plan.md
|
|
||||||
specs/<number>-<slug>/tasks.md
|
|
||||||
```
|
|
||||||
|
|
||||||
If the repository templates require additional preparation files, create them only when this is consistent with existing Spec Kit conventions.
|
|
||||||
|
|
||||||
## `spec.md` Requirements
|
|
||||||
|
|
||||||
The spec must be product- and behavior-oriented. It should avoid premature implementation detail unless needed for correctness.
|
|
||||||
|
|
||||||
Include:
|
|
||||||
|
|
||||||
- Feature title
|
|
||||||
- Problem statement
|
|
||||||
- Business/product value
|
|
||||||
- Primary users/operators
|
|
||||||
- User stories
|
|
||||||
- Functional requirements
|
|
||||||
- Non-functional requirements
|
|
||||||
- UX requirements
|
|
||||||
- RBAC/security requirements
|
|
||||||
- Auditability/observability requirements
|
|
||||||
- Data/truth-source requirements where relevant
|
|
||||||
- Out of scope
|
|
||||||
- Acceptance criteria
|
|
||||||
- Success criteria
|
|
||||||
- Risks
|
|
||||||
- Assumptions
|
|
||||||
- Open questions
|
|
||||||
|
|
||||||
TenantPilot/TenantAtlas specs should preserve enterprise SaaS principles:
|
|
||||||
|
|
||||||
- workspace/tenant isolation
|
|
||||||
- capability-first RBAC
|
|
||||||
- auditability
|
|
||||||
- operation/result truth separation
|
|
||||||
- source-of-truth clarity
|
|
||||||
- calm enterprise operator UX
|
|
||||||
- progressive disclosure where useful
|
|
||||||
- no false positive calmness
|
|
||||||
|
|
||||||
## `plan.md` Requirements
|
|
||||||
|
|
||||||
The plan must be repo-aware and implementation-oriented, but it must not make code changes by itself.
|
|
||||||
|
|
||||||
Include:
|
|
||||||
|
|
||||||
- Technical approach
|
|
||||||
- Existing repository surfaces likely affected
|
|
||||||
- Domain/model implications
|
|
||||||
- UI/Filament implications
|
|
||||||
- Livewire implications where relevant
|
|
||||||
- OperationRun/monitoring implications where relevant
|
|
||||||
- RBAC/policy implications
|
|
||||||
- Audit/logging/evidence implications where relevant
|
|
||||||
- Data/migration implications where relevant
|
|
||||||
- Test strategy
|
|
||||||
- Rollout considerations
|
|
||||||
- Risk controls
|
|
||||||
- Implementation phases
|
|
||||||
|
|
||||||
The plan should clearly distinguish where relevant:
|
|
||||||
|
|
||||||
- execution truth
|
|
||||||
- artifact truth
|
|
||||||
- backup/snapshot truth
|
|
||||||
- recovery/evidence truth
|
|
||||||
- operator next action
|
|
||||||
|
|
||||||
## `tasks.md` Requirements
|
|
||||||
|
|
||||||
Tasks must be ordered, small, and verifiable.
|
|
||||||
|
|
||||||
Include:
|
|
||||||
|
|
||||||
- checkbox tasks
|
|
||||||
- phase grouping
|
|
||||||
- tests before or alongside implementation tasks where practical
|
|
||||||
- final validation tasks
|
|
||||||
- documentation/update tasks if needed
|
|
||||||
- explicit non-goals where useful
|
|
||||||
|
|
||||||
Avoid vague tasks such as:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Clean up code
|
|
||||||
Refactor UI
|
|
||||||
Improve performance
|
|
||||||
Make it enterprise-ready
|
|
||||||
```
|
|
||||||
|
|
||||||
Prefer concrete tasks such as:
|
|
||||||
|
|
||||||
```text
|
|
||||||
- [ ] Add a feature test covering workspace isolation for <specific behavior>.
|
|
||||||
- [ ] Update <specific Filament page/resource> to display <specific state>.
|
|
||||||
- [ ] Add policy coverage for <specific capability>.
|
|
||||||
```
|
|
||||||
|
|
||||||
If exact file names are not known yet, phrase tasks as repo-verification tasks first rather than inventing file paths.
|
|
||||||
|
|
||||||
## Preparation Scope Control
|
|
||||||
|
|
||||||
If the requested feature implies multiple independent concerns, create one primary spec for the smallest valuable slice and add a `Follow-up spec candidates` section.
|
|
||||||
|
|
||||||
Examples of follow-up candidates:
|
|
||||||
|
|
||||||
- assigned findings
|
|
||||||
- pending approvals
|
|
||||||
- personal work queue
|
|
||||||
- notification delivery settings
|
|
||||||
- evidence pack export hardening
|
|
||||||
- operation monitoring refinements
|
|
||||||
- autonomous governance decision surfaces
|
|
||||||
|
|
||||||
Do not force all follow-up candidates into the primary spec.
|
|
||||||
|
|
||||||
## Failure Handling
|
|
||||||
|
|
||||||
If a Spec Kit command or preparation analyze phase fails:
|
|
||||||
|
|
||||||
1. Stop at the relevant gate.
|
|
||||||
2. Report the failing command or phase.
|
|
||||||
3. Summarize the error.
|
|
||||||
4. Do not attempt implementation as a workaround.
|
|
||||||
5. Suggest the smallest safe next action.
|
|
||||||
|
|
||||||
If the branch or working tree state is unsafe:
|
|
||||||
|
|
||||||
1. Stop before running Spec Kit commands.
|
|
||||||
2. Report the current branch and relevant uncommitted files.
|
|
||||||
3. Ask the user to commit, stash, or move to a clean worktree.
|
|
||||||
|
|
||||||
If a completed spec is accidentally selected or modified:
|
|
||||||
|
|
||||||
1. Stop immediately.
|
|
||||||
2. Report that the selected spec is completed and therefore not a valid preparation target.
|
|
||||||
3. Revert only the changes made by this operation to that completed spec package, if they are isolated and safe to revert.
|
|
||||||
4. Run `git status --short` and report remaining changes.
|
|
||||||
5. Re-run candidate selection excluding completed specs.
|
|
||||||
6. If no safe unprepared candidate exists, report `no safe next prep target`.
|
|
||||||
|
|
||||||
## Final Response Requirements
|
|
||||||
|
|
||||||
Respond with:
|
|
||||||
|
|
||||||
1. Selected candidate and why it was chosen
|
|
||||||
2. Why close alternatives were deferred
|
|
||||||
3. Completed-spec guardrail result for related existing specs
|
|
||||||
4. Current branch after Spec Kit execution, if changed
|
|
||||||
5. Generated spec path
|
|
||||||
6. Files created or updated by Spec Kit
|
|
||||||
7. Preparation analyze result summary
|
|
||||||
8. Preparation-artifact fixes applied after analyze
|
|
||||||
9. Assumptions made
|
|
||||||
10. Open questions, if any
|
|
||||||
11. Candidate Selection Gate result
|
|
||||||
12. Spec Readiness Gate result
|
|
||||||
13. Recommended next implementation prompt
|
|
||||||
14. Explicit statement that no application implementation was performed
|
|
||||||
|
|
||||||
Keep the final response concise, but include enough detail for the user to continue immediately.
|
|
||||||
|
|
||||||
## Manual Review and Next-Step Prompts
|
|
||||||
|
|
||||||
Provide a ready-to-copy manual artifact review prompt like this, adapted to the generated spec branch/path:
|
|
||||||
|
|
||||||
```markdown
|
|
||||||
Du bist ein Senior Staff Software Architect und Enterprise SaaS Reviewer.
|
|
||||||
|
|
||||||
Analysiere die neu erstellte Spec `<spec-branch-or-spec-path>` streng repo-basiert.
|
|
||||||
|
|
||||||
Ziel:
|
|
||||||
Prüfe, ob `spec.md`, `plan.md` und `tasks.md` vollständig, konsistent, implementierbar und constitution-konform sind.
|
|
||||||
|
|
||||||
Wichtig:
|
|
||||||
- Keine Implementierung.
|
|
||||||
- Keine Codeänderungen.
|
|
||||||
- Keine Scope-Erweiterung.
|
|
||||||
- Prüfe nur gegen Repo-Wahrheit.
|
|
||||||
- Benenne konkrete Konflikte mit Dateien, Patterns, Datenflüssen oder bestehenden Specs.
|
|
||||||
- Schlage nur minimale Korrekturen an `spec.md`, `plan.md` und `tasks.md` vor.
|
|
||||||
- Wenn alles passt, gib eine klare Implementierungsfreigabe.
|
|
||||||
```
|
|
||||||
|
|
||||||
Also provide a ready-to-copy implementation prompt for the separate implementation skill after analyze has passed or preparation-artifact issues have been fixed:
|
|
||||||
|
|
||||||
```markdown
|
|
||||||
/spec-kit-implementation-loop
|
|
||||||
|
|
||||||
Implementiere die vorbereitete Spec `<spec-branch-or-spec-path>` streng anhand von `tasks.md`.
|
|
||||||
|
|
||||||
Danach Tests ausführen, Browser Smoke Test falls UI/user-facing betroffen ist, Post-Implementation Analyse durchführen und alle bestätigten In-Scope Findings unabhängig von Severity beheben, wenn safe und bounded.
|
|
||||||
|
|
||||||
Wiederhole test + browser smoke + analysis + fix bis keine In-Scope Findings mehr offen sind oder eine Stop Condition greift.
|
|
||||||
```
|
|
||||||
|
|
||||||
## Example Invocation
|
|
||||||
|
|
||||||
User:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Nutze den Skill spec-kit-next-best-prep.
|
|
||||||
Wähle aus roadmap.md und spec-candidates.md die nächste sinnvollste Spec.
|
|
||||||
Führe danach GitHub Spec Kit specify, plan, tasks und analyze in einem Rutsch aus.
|
|
||||||
Behebe alle analyze-Issues in den Spec-Kit-Artefakten.
|
|
||||||
Keine Application-Implementierung.
|
|
||||||
```
|
|
||||||
|
|
||||||
Expected behavior:
|
|
||||||
|
|
||||||
1. Inspect constitution, Spec Kit scripts/templates, specs, roadmap, and spec candidates.
|
|
||||||
2. Check branch and working tree safety.
|
|
||||||
3. Compare candidate suitability.
|
|
||||||
4. Select the next best candidate.
|
|
||||||
5. Exclude already completed specs from preparation or refresh targets, preserving their close-out and validation history.
|
|
||||||
6. Evaluate the Candidate Selection Gate.
|
|
||||||
7. Run the repository's real Spec Kit `specify` flow, letting it handle branch/spec setup.
|
|
||||||
8. Run the repository's real Spec Kit `plan` flow.
|
|
||||||
9. Run the repository's real Spec Kit `tasks` flow.
|
|
||||||
10. Run the repository's real Spec Kit preparation `analyze` flow.
|
|
||||||
11. Fix analyze issues only in Spec Kit preparation artifacts.
|
|
||||||
12. Evaluate the Spec Readiness Gate.
|
|
||||||
13. Stop before application implementation.
|
|
||||||
14. Return selection rationale, branch/path summary, artifact summary, analyze summary, fixes applied, gates, and next implementation prompt.
|
|
||||||
```
|
|
||||||
@ -1,129 +0,0 @@
|
|||||||
---
|
|
||||||
name: tailwindcss-development
|
|
||||||
description: "Styles applications using Tailwind CSS v4 utilities. Activates when adding styles, restyling components, working with gradients, spacing, layout, flex, grid, responsive design, dark mode, colors, typography, or borders; or when the user mentions CSS, styling, classes, Tailwind, restyle, hero section, cards, buttons, or any visual/UI changes."
|
|
||||||
license: MIT
|
|
||||||
metadata:
|
|
||||||
author: laravel
|
|
||||||
---
|
|
||||||
|
|
||||||
# Tailwind CSS Development
|
|
||||||
|
|
||||||
## When to Apply
|
|
||||||
|
|
||||||
Activate this skill when:
|
|
||||||
|
|
||||||
- Adding styles to components or pages
|
|
||||||
- Working with responsive design
|
|
||||||
- Implementing dark mode
|
|
||||||
- Extracting repeated patterns into components
|
|
||||||
- Debugging spacing or layout issues
|
|
||||||
|
|
||||||
## Documentation
|
|
||||||
|
|
||||||
Use `search-docs` for detailed Tailwind CSS v4 patterns and documentation.
|
|
||||||
|
|
||||||
## Basic Usage
|
|
||||||
|
|
||||||
- Use Tailwind CSS classes to style HTML. Check and follow existing Tailwind conventions in the project before introducing new patterns.
|
|
||||||
- Offer to extract repeated patterns into components that match the project's conventions (e.g., Blade, JSX, Vue).
|
|
||||||
- Consider class placement, order, priority, and defaults. Remove redundant classes, add classes to parent or child elements carefully to reduce repetition, and group elements logically.
|
|
||||||
|
|
||||||
## Tailwind CSS v4 Specifics
|
|
||||||
|
|
||||||
- Always use Tailwind CSS v4 and avoid deprecated utilities.
|
|
||||||
- `corePlugins` is not supported in Tailwind v4.
|
|
||||||
|
|
||||||
### CSS-First Configuration
|
|
||||||
|
|
||||||
In Tailwind v4, configuration is CSS-first using the `@theme` directive — no separate `tailwind.config.js` file is needed:
|
|
||||||
|
|
||||||
<!-- CSS-First Config -->
|
|
||||||
```css
|
|
||||||
@theme {
|
|
||||||
--color-brand: oklch(0.72 0.11 178);
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
### Import Syntax
|
|
||||||
|
|
||||||
In Tailwind v4, import Tailwind with a regular CSS `@import` statement instead of the `@tailwind` directives used in v3:
|
|
||||||
|
|
||||||
<!-- v4 Import Syntax -->
|
|
||||||
```diff
|
|
||||||
- @tailwind base;
|
|
||||||
- @tailwind components;
|
|
||||||
- @tailwind utilities;
|
|
||||||
+ @import "tailwindcss";
|
|
||||||
```
|
|
||||||
|
|
||||||
### Replaced Utilities
|
|
||||||
|
|
||||||
Tailwind v4 removed deprecated utilities. Use the replacements shown below. Opacity values remain numeric.
|
|
||||||
|
|
||||||
| Deprecated | Replacement |
|
|
||||||
|------------|-------------|
|
|
||||||
| bg-opacity-* | bg-black/* |
|
|
||||||
| text-opacity-* | text-black/* |
|
|
||||||
| border-opacity-* | border-black/* |
|
|
||||||
| divide-opacity-* | divide-black/* |
|
|
||||||
| ring-opacity-* | ring-black/* |
|
|
||||||
| placeholder-opacity-* | placeholder-black/* |
|
|
||||||
| flex-shrink-* | shrink-* |
|
|
||||||
| flex-grow-* | grow-* |
|
|
||||||
| overflow-ellipsis | text-ellipsis |
|
|
||||||
| decoration-slice | box-decoration-slice |
|
|
||||||
| decoration-clone | box-decoration-clone |
|
|
||||||
|
|
||||||
## Spacing
|
|
||||||
|
|
||||||
Use `gap` utilities instead of margins for spacing between siblings:
|
|
||||||
|
|
||||||
<!-- Gap Utilities -->
|
|
||||||
```html
|
|
||||||
<div class="flex gap-8">
|
|
||||||
<div>Item 1</div>
|
|
||||||
<div>Item 2</div>
|
|
||||||
</div>
|
|
||||||
```
|
|
||||||
|
|
||||||
## Dark Mode
|
|
||||||
|
|
||||||
If existing pages and components support dark mode, new pages and components must support it the same way, typically using the `dark:` variant:
|
|
||||||
|
|
||||||
<!-- Dark Mode -->
|
|
||||||
```html
|
|
||||||
<div class="bg-white dark:bg-gray-900 text-gray-900 dark:text-white">
|
|
||||||
Content adapts to color scheme
|
|
||||||
</div>
|
|
||||||
```
|
|
||||||
|
|
||||||
## Common Patterns
|
|
||||||
|
|
||||||
### Flexbox Layout
|
|
||||||
|
|
||||||
<!-- Flexbox Layout -->
|
|
||||||
```html
|
|
||||||
<div class="flex items-center justify-between gap-4">
|
|
||||||
<div>Left content</div>
|
|
||||||
<div>Right content</div>
|
|
||||||
</div>
|
|
||||||
```
|
|
||||||
|
|
||||||
### Grid Layout
|
|
||||||
|
|
||||||
<!-- Grid Layout -->
|
|
||||||
```html
|
|
||||||
<div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6">
|
|
||||||
<div>Card 1</div>
|
|
||||||
<div>Card 2</div>
|
|
||||||
<div>Card 3</div>
|
|
||||||
</div>
|
|
||||||
```
|
|
||||||
|
|
||||||
## Common Pitfalls
|
|
||||||
|
|
||||||
- Using deprecated v3 utilities (bg-opacity-*, flex-shrink-*, etc.)
|
|
||||||
- Using `@tailwind` directives instead of `@import "tailwindcss"`
|
|
||||||
- Trying to use `tailwind.config.js` instead of CSS `@theme` directive
|
|
||||||
- Using margins for spacing between siblings instead of gap utilities
|
|
||||||
- Forgetting to add dark mode variants when the project uses dark mode
|
|
||||||
@ -4,21 +4,11 @@
|
|||||||
},
|
},
|
||||||
"mcpServers": {
|
"mcpServers": {
|
||||||
"laravel-boost": {
|
"laravel-boost": {
|
||||||
"command": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/scripts/platform-sail",
|
"command": "vendor/bin/sail",
|
||||||
"args": [
|
"args": [
|
||||||
"artisan",
|
"artisan",
|
||||||
"boost:mcp"
|
"boost:mcp"
|
||||||
]
|
]
|
||||||
},
|
|
||||||
"kroki": {
|
|
||||||
"command": "node",
|
|
||||||
"args": [
|
|
||||||
"/Users/ahmeddarrazi/Documents/projects/kroki-mcp-server/dist/index.js"
|
|
||||||
],
|
|
||||||
"env": {
|
|
||||||
"KROKI_BASE_URL": "http://development-kroki-ccl69b-553648-194-164-192-109.traefik.me",
|
|
||||||
"KROKI_TIMEOUT_MS": "10000"
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
18
.github/agents/copilot-instructions.md
vendored
18
.github/agents/copilot-instructions.md
vendored
@ -266,18 +266,6 @@ ## Active Technologies
|
|||||||
- PostgreSQL via existing `workspace_settings` rows plus existing audit log records; no new table or billing/account model (251-commercial-entitlements-billing-state)
|
- PostgreSQL via existing `workspace_settings` rows plus existing audit log records; no new table or billing/account model (251-commercial-entitlements-billing-state)
|
||||||
- PHP 8.4 (Laravel 12) + Laravel 12 + Filament v5 + Livewire v4 + Pest; existing `UiEnforcement`, `OperationUxPresenter`, `OperationRunService`, `OperationCatalog`, `SystemOperationRunLinks`, `OperationRunLinks`, `AuditRecorder`, `WorkspaceAuditLogger`, and `PlatformCapabilities` (253-remove-findings-backfill-runtime-surfaces)
|
- PHP 8.4 (Laravel 12) + Laravel 12 + Filament v5 + Livewire v4 + Pest; existing `UiEnforcement`, `OperationUxPresenter`, `OperationRunService`, `OperationCatalog`, `SystemOperationRunLinks`, `OperationRunLinks`, `AuditRecorder`, `WorkspaceAuditLogger`, and `PlatformCapabilities` (253-remove-findings-backfill-runtime-surfaces)
|
||||||
- PostgreSQL existing `findings`, `operation_runs`, `audit_logs`, and related runtime tables only; no new persistence, migration, or data backfill is planned (253-remove-findings-backfill-runtime-surfaces)
|
- PostgreSQL existing `findings`, `operation_runs`, `audit_logs`, and related runtime tables only; no new persistence, migration, or data backfill is planned (253-remove-findings-backfill-runtime-surfaces)
|
||||||
- PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Pest v4, existing canonical-control, evidence, tenant-review, RBAC, localization, and audit seams (259-compliance-evidence-mapping)
|
|
||||||
- PostgreSQL via existing `tenant_reviews`, `tenant_review_sections`, `evidence_snapshots`, `evidence_snapshot_items`, `findings`, `finding_exceptions`, memberships, and `audit_logs`; no new persistence table planned (259-compliance-evidence-mapping)
|
|
||||||
- PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Pest v4, existing `TenantReviewComposer`, `TenantReviewSectionFactory`, `ComplianceEvidenceMappingV1`, `ReviewPackService`, `ArtifactTruthPresenter`, capability helpers, localization copy, and shared audit infrastructure (260-governance-service-packaging)
|
|
||||||
- PostgreSQL via existing `tenant_reviews`, `tenant_review_sections`, `review_packs`, `evidence_snapshots`, `evidence_snapshot_items`, `stored_reports`, `findings`, `finding_exceptions`, `finding_exception_decisions`, memberships, and `audit_logs`; no new persistence planned (260-governance-service-packaging)
|
|
||||||
- PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Tailwind v4, Pest v4, existing dashboard widgets, `TenantGovernanceAggregateResolver`, `RestoreSafetyResolver`, `BackupHealthDashboardSignal`, `OperationRunLinks`, `RequiredPermissionsLinks`, `TenantRequiredPermissionsViewModelBuilder`, tenant review/evidence/review-pack resources, shared badge rendering, and capability helpers (266-tenant-dashboard-productization-v1)
|
|
||||||
- PostgreSQL via existing tenant-owned findings, exceptions, operation runs, evidence snapshots, review packs, tenant reviews, backup or restore evidence records, memberships, and audit logs; no new persistence planned (266-tenant-dashboard-productization-v1)
|
|
||||||
- PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Laravel translator, existing `App\Services\Localization\LocaleResolver`, `App\Http\Controllers\LocalizationController`, current `localization.review.*` and locale feedback catalogs, `CustomerReviewWorkspace`, `TenantReviewResource`, `ViewTenantReview`, current review-pack and evidence resource paths, shared RBAC and audit helpers (275-customer-facing-localization-adoption)
|
|
||||||
- PostgreSQL via existing `users.preferred_locale`, existing workspace localization setting, existing `tenant_reviews`, `review_packs`, `evidence_snapshots`, memberships, and `audit_logs`; translation catalogs in `apps/platform/lang/en` and `apps/platform/lang/de`; no new persistence planned (275-customer-facing-localization-adoption)
|
|
||||||
- Markdown and YAML planning artifacts over PHP 8.4 / Laravel 12 source anchors + `spec.md`, `docs/product/spec-candidates.md`, `docs/product/roadmap.md`, `docs/ui/tenantpilot-enterprise-ui-standards.md`, nearby Specs `270`, `275`, and `277`, and repo-real source anchors such as `OperationUxPresenter`, `InventoryKpiHeader`, `RecoveryReadiness`, `BaselineSnapshotPresenter`, `ReviewPackService`, and `TenantDashboardSummaryBuilder` (278-cross-domain-indicator-audit)
|
|
||||||
- Repository files only; no database or runtime persistence changes (278-cross-domain-indicator-audit)
|
|
||||||
- PHP 8.4.15, Laravel 12.52 + Filament 5.2.1, Livewire 4.1.4, Pest 4.3.1, existing workspace and environment authorization/context helpers, existing Filament panel providers and page/resource action-surface contracts (280-workspace-tenancy-environment-routing)
|
|
||||||
- PostgreSQL, no new persistence or schema change in this slice (280-workspace-tenancy-environment-routing)
|
|
||||||
|
|
||||||
- PHP 8.4.15 (feat/005-bulk-operations)
|
- PHP 8.4.15 (feat/005-bulk-operations)
|
||||||
|
|
||||||
@ -312,9 +300,9 @@ ## Code Style
|
|||||||
PHP 8.4.15: Follow standard conventions
|
PHP 8.4.15: Follow standard conventions
|
||||||
|
|
||||||
## Recent Changes
|
## Recent Changes
|
||||||
- 280-workspace-tenancy-environment-routing: Added PHP 8.4.15, Laravel 12.52 + Filament 5.2.1, Livewire 4.1.4, Pest 4.3.1, existing workspace and environment authorization/context helpers, existing Filament panel providers and page/resource action-surface contracts
|
- 253-remove-findings-backfill-runtime-surfaces: Added PHP 8.4 (Laravel 12) + Laravel 12 + Filament v5 + Livewire v4 + Pest; existing `UiEnforcement`, `OperationUxPresenter`, `OperationRunService`, `OperationCatalog`, `SystemOperationRunLinks`, `OperationRunLinks`, `AuditRecorder`, `WorkspaceAuditLogger`, and `PlatformCapabilities`
|
||||||
- 278-cross-domain-indicator-audit: Added Markdown and YAML planning artifacts over PHP 8.4 / Laravel 12 source anchors + `spec.md`, `docs/product/spec-candidates.md`, `docs/product/roadmap.md`, `docs/ui/tenantpilot-enterprise-ui-standards.md`, nearby Specs `270`, `275`, and `277`, and repo-real source anchors such as `OperationUxPresenter`, `InventoryKpiHeader`, `RecoveryReadiness`, `BaselineSnapshotPresenter`, `ReviewPackService`, and `TenantDashboardSummaryBuilder`
|
- 251-commercial-entitlements-billing-state: Added PHP 8.4 (Laravel 12) + Filament v5 + Livewire v4, existing workspace settings stack (`SettingsRegistry`, `SettingsResolver`, `SettingsWriter`), `WorkspaceEntitlementResolver`, `ReviewPackService`, system directory detail page
|
||||||
- 275-customer-facing-localization-adoption: Added PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Laravel translator, existing `App\Services\Localization\LocaleResolver`, `App\Http\Controllers\LocalizationController`, current `localization.review.*` and locale feedback catalogs, `CustomerReviewWorkspace`, `TenantReviewResource`, `ViewTenantReview`, current review-pack and evidence resource paths, shared RBAC and audit helpers
|
- 249-customer-review-workspace: Added PHP 8.4, Laravel 12 + Filament v5, Livewire v4, Pest v4, existing review/evidence/review-pack/audit/RBAC support services
|
||||||
<!-- MANUAL ADDITIONS START -->
|
<!-- MANUAL ADDITIONS START -->
|
||||||
|
|
||||||
### Pre-production compatibility check
|
### Pre-production compatibility check
|
||||||
|
|||||||
2
.github/skills/giteaflow/SKILL.md
vendored
2
.github/skills/giteaflow/SKILL.md
vendored
@ -5,4 +5,4 @@
|
|||||||
|
|
||||||
<!-- Tip: Use /create-skill in chat to generate content with agent assistance -->
|
<!-- Tip: Use /create-skill in chat to generate content with agent assistance -->
|
||||||
|
|
||||||
comit all changes, push to remote, and create a pull request against platform-dev with gitea mcp
|
comit all changes, push to remote, and create a pull request against dev with gitea mcp
|
||||||
92
.github/skills/spec-kit-next-best-prep/SKILL.md
vendored
92
.github/skills/spec-kit-next-best-prep/SKILL.md
vendored
@ -85,9 +85,6 @@ ## Hard Rules
|
|||||||
- Do not run destructive commands.
|
- Do not run destructive commands.
|
||||||
- Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
- Do not force checkout, reset, stash, rebase, merge, or delete branches.
|
||||||
- Do not overwrite existing specs.
|
- Do not overwrite existing specs.
|
||||||
- Do not rewrite completed specs back into preparation state.
|
|
||||||
- Do not remove or normalize implementation history, close-out notes, validation results, completed task markers, smoke results, or post-implementation review language from completed specs.
|
|
||||||
- Treat completed-spec close-out and validation language as intentional repository history, not preparation drift.
|
|
||||||
- Do not move from preparation to an implementation step inside this skill.
|
- Do not move from preparation to an implementation step inside this skill.
|
||||||
|
|
||||||
## Required Inputs
|
## Required Inputs
|
||||||
@ -122,32 +119,6 @@ ## Required Repository Checks
|
|||||||
|
|
||||||
Do not edit application code.
|
Do not edit application code.
|
||||||
|
|
||||||
## Completed-Spec Guardrail
|
|
||||||
|
|
||||||
Before selecting an existing spec package as a `next-best-prep` target, explicitly check whether the spec is already completed, implementation-closed, or validated.
|
|
||||||
|
|
||||||
A spec must be treated as completed if any of the following signals are present in `spec.md`, `plan.md`, `tasks.md`, `quickstart.md`, checklist artifacts, or related Spec Kit package files:
|
|
||||||
|
|
||||||
- `Implementation Close-Out`
|
|
||||||
- `Implementation completed on`
|
|
||||||
- `Implementation Validation Results`
|
|
||||||
- `Implemented and validated`
|
|
||||||
- `Review Outcome` or `Implementation Review Outcome`
|
|
||||||
- passed validation, smoke, browser, or guardrail results
|
|
||||||
- completed task checklist markers for the implementation tasks
|
|
||||||
- post-implementation review or close-out language
|
|
||||||
- a status marker indicating implemented, completed, closed, or validated
|
|
||||||
|
|
||||||
If a spec is completed:
|
|
||||||
|
|
||||||
- exclude it from `next-best-prep` candidate selection
|
|
||||||
- do not patch, normalize, rewrite, or convert it back to preparation-only state
|
|
||||||
- do not remove close-out sections, validation results, completed task markers, smoke results, or post-implementation review language
|
|
||||||
- treat those artifacts as historical implementation evidence
|
|
||||||
- only use the completed spec as context for dependency or roadmap reasoning
|
|
||||||
|
|
||||||
If all high-priority candidates are already specced, active, or completed, stop and report `no safe next prep target` instead of modifying existing completed specs.
|
|
||||||
|
|
||||||
## Git and Branch Safety
|
## Git and Branch Safety
|
||||||
|
|
||||||
Before running any Spec Kit command:
|
Before running any Spec Kit command:
|
||||||
@ -172,7 +143,6 @@ ### Gate 1: Candidate Selection Gate
|
|||||||
|
|
||||||
- The selected candidate exists in roadmap/spec-candidate material or is directly provided by the user.
|
- The selected candidate exists in roadmap/spec-candidate material or is directly provided by the user.
|
||||||
- The selected candidate is not already covered by an existing active or completed spec.
|
- The selected candidate is not already covered by an existing active or completed spec.
|
||||||
- The selected target is not a completed spec package with implementation close-out, validation results, completed tasks, smoke results, or post-implementation review history.
|
|
||||||
- The selected candidate aligns with current roadmap priorities or explicitly documented product direction.
|
- The selected candidate aligns with current roadmap priorities or explicitly documented product direction.
|
||||||
- The candidate can be scoped as a small, reviewable, implementation-ready slice.
|
- The candidate can be scoped as a small, reviewable, implementation-ready slice.
|
||||||
- Major adjacent concerns are listed as follow-up candidates instead of being hidden inside the primary scope.
|
- Major adjacent concerns are listed as follow-up candidates instead of being hidden inside the primary scope.
|
||||||
@ -180,7 +150,6 @@ ### Gate 1: Candidate Selection Gate
|
|||||||
Fail behavior:
|
Fail behavior:
|
||||||
|
|
||||||
- If no candidate satisfies the gate, stop and report the top candidates plus the reason none is ready.
|
- If no candidate satisfies the gate, stop and report the top candidates plus the reason none is ready.
|
||||||
- If the only plausible targets are completed specs, stop and report `no safe next prep target`; do not modify those completed specs.
|
|
||||||
- Do not invent a new roadmap direction to force progress.
|
- Do not invent a new roadmap direction to force progress.
|
||||||
|
|
||||||
### Gate 2: Spec Readiness Gate
|
### Gate 2: Spec Readiness Gate
|
||||||
@ -211,8 +180,6 @@ ## Candidate Selection Rules
|
|||||||
- Read `docs/product/spec-candidates.md`.
|
- Read `docs/product/spec-candidates.md`.
|
||||||
- Read relevant roadmap documents under `docs/product/`, especially `roadmap.md` if present.
|
- Read relevant roadmap documents under `docs/product/`, especially `roadmap.md` if present.
|
||||||
- Check existing specs to avoid duplicates.
|
- Check existing specs to avoid duplicates.
|
||||||
- Check existing specs for completed-spec signals before selecting an existing package as a refresh target.
|
|
||||||
- Exclude completed specs from next-best-prep selection, even if their artifacts contain close-out, validation, or completed-task language that would look like drift in a preparation-only package.
|
|
||||||
- Prefer candidates that align with current roadmap priorities, platform foundations, enterprise UX, RBAC/isolation, auditability, observability, and governance workflow maturity.
|
- Prefer candidates that align with current roadmap priorities, platform foundations, enterprise UX, RBAC/isolation, auditability, observability, and governance workflow maturity.
|
||||||
- Prefer candidates that unlock roadmap progress, reduce architectural drift, harden foundations, or remove known blockers.
|
- Prefer candidates that unlock roadmap progress, reduce architectural drift, harden foundations, or remove known blockers.
|
||||||
- Prefer small, implementation-ready slices over broad platform rewrites.
|
- Prefer small, implementation-ready slices over broad platform rewrites.
|
||||||
@ -231,7 +198,6 @@ ## Candidate Selection Rules
|
|||||||
5. **Repo Readiness**: Does the repo already have enough structure to implement the next slice safely?
|
5. **Repo Readiness**: Does the repo already have enough structure to implement the next slice safely?
|
||||||
6. **Risk Reduction**: Does it reduce current architectural or product risk?
|
6. **Risk Reduction**: Does it reduce current architectural or product risk?
|
||||||
7. **User/Product Value**: Does it produce visible operator value or make the platform more sellable without heavy scope?
|
7. **User/Product Value**: Does it produce visible operator value or make the platform more sellable without heavy scope?
|
||||||
8. **Completion Safety**: Is the target genuinely unprepared or incomplete, rather than an already completed spec whose historical close-out artifacts should be preserved?
|
|
||||||
|
|
||||||
## Required Selection Output Before Spec Kit Execution
|
## Required Selection Output Before Spec Kit Execution
|
||||||
|
|
||||||
@ -242,7 +208,6 @@ ## Required Selection Output Before Spec Kit Execution
|
|||||||
- why it was selected
|
- why it was selected
|
||||||
- why close alternatives were deferred
|
- why close alternatives were deferred
|
||||||
- roadmap relationship
|
- roadmap relationship
|
||||||
- completed-spec check result for related existing specs
|
|
||||||
- smallest viable implementation slice
|
- smallest viable implementation slice
|
||||||
- proposed concise feature description to feed into `specify`
|
- proposed concise feature description to feed into `specify`
|
||||||
|
|
||||||
@ -331,7 +296,7 @@ ### Step 5: Run preparation `analyze`
|
|||||||
|
|
||||||
### Step 6: Fix preparation-artifact issues only
|
### Step 6: Fix preparation-artifact issues only
|
||||||
|
|
||||||
If preparation analyze finds issues, first confirm that the selected package is not completed. Then fix only Spec Kit preparation artifacts such as:
|
If preparation analyze finds issues, fix only Spec Kit preparation artifacts such as:
|
||||||
|
|
||||||
- `spec.md`
|
- `spec.md`
|
||||||
- `plan.md`
|
- `plan.md`
|
||||||
@ -357,10 +322,6 @@ ### Step 6: Fix preparation-artifact issues only
|
|||||||
- editing models, services, jobs, policies, Filament resources, Livewire components, tests, commands, routes, or views
|
- editing models, services, jobs, policies, Filament resources, Livewire components, tests, commands, routes, or views
|
||||||
- running implementation or test-fix loops
|
- running implementation or test-fix loops
|
||||||
- changing runtime behavior
|
- changing runtime behavior
|
||||||
- removing implementation close-out history from completed specs
|
|
||||||
- converting completed specs back to preparation-only wording
|
|
||||||
- changing passed validation or smoke results into planned validation commands
|
|
||||||
- unchecking completed implementation tasks in a completed spec
|
|
||||||
|
|
||||||
### Step 7: Evaluate the Spec Readiness Gate
|
### Step 7: Evaluate the Spec Readiness Gate
|
||||||
|
|
||||||
@ -517,33 +478,23 @@ ## Failure Handling
|
|||||||
2. Report the current branch and relevant uncommitted files.
|
2. Report the current branch and relevant uncommitted files.
|
||||||
3. Ask the user to commit, stash, or move to a clean worktree.
|
3. Ask the user to commit, stash, or move to a clean worktree.
|
||||||
|
|
||||||
If a completed spec is accidentally selected or modified:
|
|
||||||
|
|
||||||
1. Stop immediately.
|
|
||||||
2. Report that the selected spec is completed and therefore not a valid preparation target.
|
|
||||||
3. Revert only the changes made by this operation to that completed spec package, if they are isolated and safe to revert.
|
|
||||||
4. Run `git status --short` and report remaining changes.
|
|
||||||
5. Re-run candidate selection excluding completed specs.
|
|
||||||
6. If no safe unprepared candidate exists, report `no safe next prep target`.
|
|
||||||
|
|
||||||
## Final Response Requirements
|
## Final Response Requirements
|
||||||
|
|
||||||
Respond with:
|
Respond with:
|
||||||
|
|
||||||
1. Selected candidate and why it was chosen
|
1. Selected candidate and why it was chosen
|
||||||
2. Why close alternatives were deferred
|
2. Why close alternatives were deferred
|
||||||
3. Completed-spec guardrail result for related existing specs
|
3. Current branch after Spec Kit execution, if changed
|
||||||
4. Current branch after Spec Kit execution, if changed
|
4. Generated spec path
|
||||||
5. Generated spec path
|
5. Files created or updated by Spec Kit
|
||||||
6. Files created or updated by Spec Kit
|
6. Preparation analyze result summary
|
||||||
7. Preparation analyze result summary
|
7. Preparation-artifact fixes applied after analyze
|
||||||
8. Preparation-artifact fixes applied after analyze
|
8. Assumptions made
|
||||||
9. Assumptions made
|
9. Open questions, if any
|
||||||
10. Open questions, if any
|
10. Candidate Selection Gate result
|
||||||
11. Candidate Selection Gate result
|
11. Spec Readiness Gate result
|
||||||
12. Spec Readiness Gate result
|
12. Recommended next implementation prompt
|
||||||
13. Recommended next implementation prompt
|
13. Explicit statement that no application implementation was performed
|
||||||
14. Explicit statement that no application implementation was performed
|
|
||||||
|
|
||||||
Keep the final response concise, but include enough detail for the user to continue immediately.
|
Keep the final response concise, but include enough detail for the user to continue immediately.
|
||||||
|
|
||||||
@ -599,14 +550,13 @@ ## Example Invocation
|
|||||||
2. Check branch and working tree safety.
|
2. Check branch and working tree safety.
|
||||||
3. Compare candidate suitability.
|
3. Compare candidate suitability.
|
||||||
4. Select the next best candidate.
|
4. Select the next best candidate.
|
||||||
5. Exclude already completed specs from preparation or refresh targets, preserving their close-out and validation history.
|
5. Evaluate the Candidate Selection Gate.
|
||||||
6. Evaluate the Candidate Selection Gate.
|
6. Run the repository's real Spec Kit `specify` flow, letting it handle branch/spec setup.
|
||||||
7. Run the repository's real Spec Kit `specify` flow, letting it handle branch/spec setup.
|
7. Run the repository's real Spec Kit `plan` flow.
|
||||||
8. Run the repository's real Spec Kit `plan` flow.
|
8. Run the repository's real Spec Kit `tasks` flow.
|
||||||
9. Run the repository's real Spec Kit `tasks` flow.
|
9. Run the repository's real Spec Kit preparation `analyze` flow.
|
||||||
10. Run the repository's real Spec Kit preparation `analyze` flow.
|
10. Fix analyze issues only in Spec Kit preparation artifacts.
|
||||||
11. Fix analyze issues only in Spec Kit preparation artifacts.
|
11. Evaluate the Spec Readiness Gate.
|
||||||
12. Evaluate the Spec Readiness Gate.
|
12. Stop before application implementation.
|
||||||
13. Stop before application implementation.
|
13. Return selection rationale, branch/path summary, artifact summary, analyze summary, fixes applied, gates, and next implementation prompt.
|
||||||
14. Return selection rationale, branch/path summary, artifact summary, analyze summary, fixes applied, gates, and next implementation prompt.
|
|
||||||
```
|
```
|
||||||
@ -1,35 +1,34 @@
|
|||||||
<!--
|
<!--
|
||||||
Sync Impact Report
|
Sync Impact Report
|
||||||
|
|
||||||
- Version change: 2.12.0 -> 2.13.0
|
- Version change: 2.10.0 -> 2.11.0
|
||||||
- Modified principles:
|
- Modified principles:
|
||||||
- Expanded Filament Native First / No Ad-hoc Styling (UI-FIL-001)
|
- Expanded decision-first and operator-surface rules so operational,
|
||||||
so custom Filament UI must follow the canonical TenantPilot
|
governance, evidence, onboarding, review, and support-facing
|
||||||
enterprise UI standard, must not introduce ad-hoc styling for
|
detail/status surfaces separate decision content, operator
|
||||||
cards, buttons, hovers, badges, icons, progress bars, empty states,
|
diagnostics, and support/raw evidence
|
||||||
or interactive rows, and may only show interactive affordance when
|
- Expanded review and enforcement expectations so specs, plans,
|
||||||
a repo-real route/action and permitted capability exist
|
tasks, and checklists must make audience modes, raw/support
|
||||||
- Added sections: None
|
gating, one dominant next action, and duplicate-truth prevention
|
||||||
|
explicit
|
||||||
|
- Added sections:
|
||||||
|
- Audience-Aware Decision Surfaces & Disclosure Ladder
|
||||||
|
(DECIDE-AUD-001): requires customer-readable default paths,
|
||||||
|
operator diagnostics as progressive disclosure, support/raw
|
||||||
|
evidence gating, one dominant next action, and no duplicate truth
|
||||||
|
across equal-priority cards
|
||||||
- Removed sections: None
|
- Removed sections: None
|
||||||
- Templates requiring updates:
|
- Templates requiring updates:
|
||||||
- .specify/templates/spec-template.md: require canonical UI-standard
|
- .specify/templates/spec-template.md: add audience-aware disclosure
|
||||||
compliance, no ad-hoc custom styling, and repo-real affordance
|
section + constitution prompts ✅
|
||||||
disclosure ✅
|
- .specify/templates/plan-template.md: add audience/disclosure
|
||||||
- .specify/templates/plan-template.md: add UI-FIL-001 checks for the
|
planning prompts + constitution checks ✅
|
||||||
canonical UI standard and affordance honesty ✅
|
- .specify/templates/tasks-template.md: add decision/disclosure
|
||||||
- .specify/templates/tasks-template.md: add implementation tasks for
|
implementation + test tasks ✅
|
||||||
no ad-hoc styling and repo-real interactive affordances ✅
|
- .specify/templates/checklist-template.md: add disclosure, raw-gating,
|
||||||
- .specify/templates/checklist-template.md: add explicit custom UI
|
one-primary-action, and duplicate-truth review checks ✅
|
||||||
standard and affordance review check ✅
|
- docs/product/standards/README.md: refresh constitution index for
|
||||||
- docs/product/principles.md: align the high-level product rule with
|
the new audience-aware disclosure contract ✅
|
||||||
the canonical UI standard ✅
|
|
||||||
- docs/product/standards/filament-native-enterprise-ui.md: align the
|
|
||||||
compact standard with the canonical UI source ✅
|
|
||||||
- docs/product/standards/README.md: index the canonical UI-standard
|
|
||||||
document ✅
|
|
||||||
- docs/HANDOVER.md: refresh the Filament standards summary ✅
|
|
||||||
- docs/ui/tenantpilot-enterprise-ui-standards.md: fix the
|
|
||||||
constitution-reference path to the canonical file ✅
|
|
||||||
- Commands checked:
|
- Commands checked:
|
||||||
- N/A `.specify/templates/commands/*.md` directory is not present
|
- N/A `.specify/templates/commands/*.md` directory is not present
|
||||||
- Follow-up TODOs: None
|
- Follow-up TODOs: None
|
||||||
@ -1711,7 +1710,6 @@ ### Badge Semantics Are Centralized (BADGE-001)
|
|||||||
|
|
||||||
### Filament Native First / No Ad-hoc Styling (UI-FIL-001)
|
### Filament Native First / No Ad-hoc Styling (UI-FIL-001)
|
||||||
- Admin and operator-facing surfaces MUST use native Filament components, existing shared UI primitives, and centralized design patterns first.
|
- Admin and operator-facing surfaces MUST use native Filament components, existing shared UI primitives, and centralized design patterns first.
|
||||||
- TenantPilot custom Filament UI MUST follow `docs/ui/tenantpilot-enterprise-ui-standards.md`. When this constitution gives a shorter rule, that document remains the canonical detailed standard for custom Filament affordance, styling, hierarchy, and disclosure patterns.
|
|
||||||
- If Filament already provides the required semantic element, feature code MUST use the Filament-native component instead of a locally assembled replacement.
|
- If Filament already provides the required semantic element, feature code MUST use the Filament-native component instead of a locally assembled replacement.
|
||||||
- Preferred native elements include `x-filament::badge`, `x-filament::button`, `x-filament::icon`, and Filament Forms, Infolists, Tables, Sections, Tabs, Grids, and Actions.
|
- Preferred native elements include `x-filament::badge`, `x-filament::button`, `x-filament::icon`, and Filament Forms, Infolists, Tables, Sections, Tabs, Grids, and Actions.
|
||||||
- Local Blade/Tailwind cards are allowed only when they preserve dark
|
- Local Blade/Tailwind cards are allowed only when they preserve dark
|
||||||
@ -1719,39 +1717,6 @@ ### Filament Native First / No Ad-hoc Styling (UI-FIL-001)
|
|||||||
hierarchy, progressive disclosure, accessibility, and overall
|
hierarchy, progressive disclosure, accessibility, and overall
|
||||||
Filament visual language.
|
Filament visual language.
|
||||||
|
|
||||||
Enterprise consistency for custom surfaces
|
|
||||||
- TenantPilot custom Blade, Livewire widget, Filament page, and
|
|
||||||
productized dashboard/detail surfaces MUST preserve Filament-native
|
|
||||||
interaction semantics unless the governing spec records a bounded
|
|
||||||
product reason to diverge.
|
|
||||||
- Custom surfaces MUST NOT introduce independent button systems,
|
|
||||||
status color semantics, spacing systems, or card styles that
|
|
||||||
function as a parallel local design system.
|
|
||||||
- Feature specs and implementation MUST NOT introduce ad-hoc custom
|
|
||||||
styling for cards, buttons, hovers, badges, icons, progress bars,
|
|
||||||
empty states, or interactive rows.
|
|
||||||
- Each page, card cluster, or other focused action area MUST keep at
|
|
||||||
most one dominant primary action. Secondary actions MUST remain
|
|
||||||
neutral unless the action is destructive or the semantic state
|
|
||||||
change is itself the point of the action.
|
|
||||||
- Status, health, risk, readiness, and similar state cues MUST be
|
|
||||||
conveyed through BADGE-001 badges, labels, chips, and supporting
|
|
||||||
text rather than arbitrary button colors or per-card custom action
|
|
||||||
styling.
|
|
||||||
- Hover, pointer, focus, shadow, or similar interactive affordance MUST
|
|
||||||
appear only when a repo-real route/action exists and the current
|
|
||||||
actor has the permitted capability. Otherwise the surface MUST render
|
|
||||||
as static and non-interactive.
|
|
||||||
- Custom Blade/Tailwind composition MUST be used to arrange
|
|
||||||
product-specific layout, decision hierarchy, and progressive
|
|
||||||
disclosure, not to redefine semantic action, status, or container
|
|
||||||
primitives that Filament or shared project primitives already
|
|
||||||
standardize.
|
|
||||||
- Per-card custom action styling, status-colored non-status actions,
|
|
||||||
and oversized custom borders, shadows, or spacing that visually
|
|
||||||
detach a surface from the Filament panel are forbidden unless
|
|
||||||
UI-EX-001 records a bounded exception.
|
|
||||||
|
|
||||||
Native-by-default classification
|
Native-by-default classification
|
||||||
- `Native Surface` means the primary interaction contract is built from
|
- `Native Surface` means the primary interaction contract is built from
|
||||||
Filament-native components or approved shared primitives.
|
Filament-native components or approved shared primitives.
|
||||||
@ -1870,4 +1835,4 @@ ### Versioning Policy (SemVer)
|
|||||||
- **MINOR**: new principle/section or materially expanded guidance.
|
- **MINOR**: new principle/section or materially expanded guidance.
|
||||||
- **MAJOR**: removing/redefining principles in a backward-incompatible way.
|
- **MAJOR**: removing/redefining principles in a backward-incompatible way.
|
||||||
|
|
||||||
**Version**: 2.13.0 | **Ratified**: 2026-01-03 | **Last Amended**: 2026-05-03
|
**Version**: 2.11.0 | **Ratified**: 2026-01-03 | **Last Amended**: 2026-04-27
|
||||||
|
|||||||
@ -22,7 +22,6 @@ ## Applicability And Low-Impact Gate
|
|||||||
## Native, Shared-Family, And State Ownership
|
## Native, Shared-Family, And State Ownership
|
||||||
|
|
||||||
- [ ] CHK003 The surface remains native/shared-primitives first; fake-native controls, GET-form page-body interactions, and simple-overview replacements are not treated as harmless customization.
|
- [ ] CHK003 The surface remains native/shared-primitives first; fake-native controls, GET-form page-body interactions, and simple-overview replacements are not treated as harmless customization.
|
||||||
- [ ] CHK028 Custom Blade, Livewire widget, and dashboard/detail surfaces follow `docs/ui/tenantpilot-enterprise-ui-standards.md`: they do not invent an independent button, status-color, spacing, or card system, they do not add ad-hoc styling for cards/buttons/hovers/badges/icons/progress bars/empty states/interactive rows, status stays badge/label/supporting-text first, each focused area keeps one dominant primary action, and interactive affordance exists only when a repo-real route/action and permitted capability exist.
|
|
||||||
- [ ] CHK004 Any shared-detail or shared-family surface keeps one shared contract, and any host variation is either folded back into that contract or explicitly bounded as an exception.
|
- [ ] CHK004 Any shared-detail or shared-family surface keeps one shared contract, and any host variation is either folded back into that contract or explicitly bounded as an exception.
|
||||||
- [ ] CHK005 Shell, page, detail, and URL/query state owners are named once and do not collapse into one another.
|
- [ ] CHK005 Shell, page, detail, and URL/query state owners are named once and do not collapse into one another.
|
||||||
- [ ] CHK006 The likely next operator action and the primary inspect/open model stay coherent with the declared surface class.
|
- [ ] CHK006 The likely next operator action and the primary inspect/open model stay coherent with the declared surface class.
|
||||||
|
|||||||
@ -115,21 +115,10 @@ ## Constitution Check
|
|||||||
- Spec discipline / bloat check (SPEC-DISC-001, BLOAT-001): related semantic changes are grouped coherently, and any new enum, DTO/presenter, persisted entity, interface/registry/resolver, or taxonomy includes a proportionality review covering operator problem, insufficiency, narrowness, ownership cost, rejected alternative, and whether it is current-release truth
|
- Spec discipline / bloat check (SPEC-DISC-001, BLOAT-001): related semantic changes are grouped coherently, and any new enum, DTO/presenter, persisted entity, interface/registry/resolver, or taxonomy includes a proportionality review covering operator problem, insufficiency, narrowness, ownership cost, rejected alternative, and whether it is current-release truth
|
||||||
- Badge semantics (BADGE-001): status-like badges use `BadgeCatalog` / `BadgeRenderer`; no ad-hoc mappings; new values include tests
|
- Badge semantics (BADGE-001): status-like badges use `BadgeCatalog` / `BadgeRenderer`; no ad-hoc mappings; new values include tests
|
||||||
- Filament-native UI (UI-FIL-001): admin/operator surfaces use native Filament components or shared primitives first; no ad-hoc status UI, local semantic color/border decisions, or hand-built replacements when native/shared semantics exist; any exception is explicitly justified
|
- Filament-native UI (UI-FIL-001): admin/operator surfaces use native Filament components or shared primitives first; no ad-hoc status UI, local semantic color/border decisions, or hand-built replacements when native/shared semantics exist; any exception is explicitly justified
|
||||||
- Filament-native UI (UI-FIL-001): custom Filament UI follows `docs/ui/tenantpilot-enterprise-ui-standards.md`; no ad-hoc custom styling for cards, buttons, hovers, badges, icons, progress bars, empty states, or interactive rows
|
|
||||||
- Filament-native UI (UI-FIL-001): if local Blade/Tailwind cards are
|
- Filament-native UI (UI-FIL-001): if local Blade/Tailwind cards are
|
||||||
still necessary, they preserve dark mode correctness, spacing
|
still necessary, they preserve dark mode correctness, spacing
|
||||||
consistency, badge semantics, action hierarchy, progressive
|
consistency, badge semantics, action hierarchy, progressive
|
||||||
disclosure, accessibility, and Filament visual language
|
disclosure, accessibility, and Filament visual language
|
||||||
- Filament-native UI (UI-FIL-001): custom Blade/Widget/Page surfaces
|
|
||||||
keep Filament-native interaction semantics, preserve one dominant
|
|
||||||
primary action per focused area, express state through
|
|
||||||
BADGE-001-aligned badges/labels/supporting text instead of arbitrary
|
|
||||||
button colors, and do not create independent button/card/spacing
|
|
||||||
systems
|
|
||||||
- Filament-native UI (UI-FIL-001): hover, pointer, focus, shadow, or
|
|
||||||
similar interactive affordance appears only when a repo-real
|
|
||||||
route/action and permitted capability exist; non-interactive rows
|
|
||||||
stay visibly static
|
|
||||||
- UI/UX surface taxonomy (UI-CONST-001 / UI-SURF-001): every changed operator-facing surface is classified as exactly one allowed surface type; ad-hoc interaction models are forbidden
|
- UI/UX surface taxonomy (UI-CONST-001 / UI-SURF-001): every changed operator-facing surface is classified as exactly one allowed surface type; ad-hoc interaction models are forbidden
|
||||||
- Decision-first operating model (DECIDE-001): each changed
|
- Decision-first operating model (DECIDE-001): each changed
|
||||||
operator-facing surface is classified as Primary Decision,
|
operator-facing surface is classified as Primary Decision,
|
||||||
|
|||||||
@ -325,16 +325,10 @@ ## Requirements *(mandatory)*
|
|||||||
the spec MUST describe how badge semantics stay centralized (no ad-hoc mappings) and which tests cover any new/changed values.
|
the spec MUST describe how badge semantics stay centralized (no ad-hoc mappings) and which tests cover any new/changed values.
|
||||||
|
|
||||||
**Constitution alignment (UI-FIL-001):** If this feature adds or changes Filament or Blade UI for admin/operator surfaces, the spec MUST describe:
|
**Constitution alignment (UI-FIL-001):** If this feature adds or changes Filament or Blade UI for admin/operator surfaces, the spec MUST describe:
|
||||||
- how the affected surface follows `docs/ui/tenantpilot-enterprise-ui-standards.md`,
|
|
||||||
- which native Filament components or shared UI primitives are used,
|
- which native Filament components or shared UI primitives are used,
|
||||||
- whether any local replacement markup was avoided for badges, alerts, buttons, or status surfaces,
|
- whether any local replacement markup was avoided for badges, alerts, buttons, or status surfaces,
|
||||||
- how semantic emphasis is expressed through Filament props or central primitives rather than page-local color/border classes,
|
- how semantic emphasis is expressed through Filament props or central primitives rather than page-local color/border classes,
|
||||||
- how the feature avoids ad-hoc custom styling for cards, buttons, hovers, badges, icons, progress bars, empty states, and interactive rows,
|
- how any required local Blade/Tailwind cards still preserve dark mode correctness, spacing consistency, badge semantics, action hierarchy, progressive disclosure, accessibility, and Filament visual language,
|
||||||
- how any custom Blade, Livewire widget, page, or dashboard surface preserves Filament-native interaction semantics and avoids introducing an independent button, status-color, spacing, or card system,
|
|
||||||
- how each affected page or focused action area keeps at most one dominant primary action and keeps secondary actions neutral unless they are destructive or the semantic state change is the point of the action,
|
|
||||||
- how status is conveyed through BADGE-001 badges, labels, chips, or supporting text rather than arbitrary button colors or per-card custom action styling,
|
|
||||||
- how hover, pointer, focus, shadow, or similar interactive affordance is used only when a repo-real route/action and permitted capability exist, and how non-interactive rows remain visibly static,
|
|
||||||
- how any required local Blade/Tailwind cards still preserve dark mode correctness, spacing consistency, badge semantics, action hierarchy, progressive disclosure, accessibility, and Filament visual language, and are used to compose product-specific layout rather than a parallel local design system,
|
|
||||||
- and any exception where Filament or a shared primitive was insufficient, including why the exception is necessary and how it avoids introducing a new local status language.
|
- and any exception where Filament or a shared primitive was insufficient, including why the exception is necessary and how it avoids introducing a new local status language.
|
||||||
|
|
||||||
**Constitution alignment (UI-NAMING-001):** If this feature adds or changes operator-facing buttons, header actions, run titles,
|
**Constitution alignment (UI-NAMING-001):** If this feature adds or changes operator-facing buttons, header actions, run titles,
|
||||||
|
|||||||
@ -132,24 +132,8 @@ # Tasks: [FEATURE NAME]
|
|||||||
- preventing empty `ActionGroup` / `BulkActionGroup` placeholders,
|
- preventing empty `ActionGroup` / `BulkActionGroup` placeholders,
|
||||||
- adding confirmations for destructive actions (and typed confirmation where required by scale),
|
- adding confirmations for destructive actions (and typed confirmation where required by scale),
|
||||||
- adding `AuditLog` entries for relevant mutations,
|
- adding `AuditLog` entries for relevant mutations,
|
||||||
- following `docs/ui/tenantpilot-enterprise-ui-standards.md` for any
|
|
||||||
custom Filament UI surface,
|
|
||||||
- using native Filament components or shared UI primitives before any local Blade/Tailwind assembly for badges, alerts, buttons, and semantic status surfaces,
|
- using native Filament components or shared UI primitives before any local Blade/Tailwind assembly for badges, alerts, buttons, and semantic status surfaces,
|
||||||
- avoiding page-local semantic color, border, rounding, or highlight styling when Filament props or shared primitives can express the same state,
|
- avoiding page-local semantic color, border, rounding, or highlight styling when Filament props or shared primitives can express the same state,
|
||||||
- avoiding ad-hoc styling for cards, buttons, hovers, badges, icons,
|
|
||||||
progress bars, empty states, and interactive rows,
|
|
||||||
- keeping any custom Blade, Livewire widget, page, or
|
|
||||||
dashboard/detail surface Filament-native in semantics: no
|
|
||||||
independent button, status-color, card, or spacing system, one
|
|
||||||
dominant primary action per focused area, and secondary actions
|
|
||||||
neutral unless destructive or explicitly state-changing,
|
|
||||||
- expressing status, health, risk, readiness, and similar cues through
|
|
||||||
BADGE-001 badges, labels, chips, and supporting text rather than
|
|
||||||
arbitrary button colors or per-card custom action styling,
|
|
||||||
- using hover, pointer, focus, shadow, or similar interactive
|
|
||||||
affordance only when a repo-real route/action and permitted
|
|
||||||
capability exist, and rendering static rows without fake
|
|
||||||
interactivity otherwise,
|
|
||||||
- documenting any workflow-hub, wizard, utility/system, or other
|
- documenting any workflow-hub, wizard, utility/system, or other
|
||||||
special-type exception in the spec/PR and adding dedicated test
|
special-type exception in the spec/PR and adding dedicated test
|
||||||
coverage,
|
coverage,
|
||||||
|
|||||||
@ -378,14 +378,9 @@ ## AI Usage Note
|
|||||||
All AI agents must read:
|
All AI agents must read:
|
||||||
- `AGENTS.md`
|
- `AGENTS.md`
|
||||||
- `.specify/*`
|
- `.specify/*`
|
||||||
- `docs/ai-coding-rules.md`
|
|
||||||
- the relevant guideline file under `docs/*-guidelines.md`
|
|
||||||
|
|
||||||
before proposing or implementing changes.
|
before proposing or implementing changes.
|
||||||
|
|
||||||
For the current enterprise best-practice baseline and the proposed compact addendum
|
|
||||||
for this file, see `docs/stack-overview.md` and `docs/AGENTS-draft.md`.
|
|
||||||
|
|
||||||
## Reference Materials
|
## Reference Materials
|
||||||
- PowerShell scripts from IntuneManagement are stored under `/references/IntuneManagement-master`
|
- PowerShell scripts from IntuneManagement are stored under `/references/IntuneManagement-master`
|
||||||
for implementation guidance only.
|
for implementation guidance only.
|
||||||
|
|||||||
14
README.md
14
README.md
@ -31,8 +31,7 @@ ### Platform
|
|||||||
- Install PHP dependencies: `cd apps/platform && composer install`
|
- Install PHP dependencies: `cd apps/platform && composer install`
|
||||||
- Start Sail: `cd apps/platform && ./vendor/bin/sail up -d`
|
- Start Sail: `cd apps/platform && ./vendor/bin/sail up -d`
|
||||||
- Generate the app key: `cd apps/platform && ./vendor/bin/sail artisan key:generate`
|
- Generate the app key: `cd apps/platform && ./vendor/bin/sail artisan key:generate`
|
||||||
- Apply incremental migrations on an already cut-over local database: `cd apps/platform && ./vendor/bin/sail artisan migrate`
|
- Run migrations and seeders: `cd apps/platform && ./vendor/bin/sail artisan migrate --seed`
|
||||||
- Initialize or reset the local database: `cd apps/platform && ./vendor/bin/sail artisan migrate:fresh --seed`
|
|
||||||
- Run frontend watch/build inside Sail: `corepack pnpm dev:platform`, `cd apps/platform && ./vendor/bin/sail pnpm dev`, or `cd apps/platform && ./vendor/bin/sail pnpm build`
|
- Run frontend watch/build inside Sail: `corepack pnpm dev:platform`, `cd apps/platform && ./vendor/bin/sail pnpm dev`, or `cd apps/platform && ./vendor/bin/sail pnpm build`
|
||||||
- Run tests: `cd apps/platform && ./vendor/bin/sail artisan test --compact`
|
- Run tests: `cd apps/platform && ./vendor/bin/sail artisan test --compact`
|
||||||
|
|
||||||
@ -91,16 +90,6 @@ ### Workflow Expectation
|
|||||||
- Review treats wrong lane fit, hidden default cost, accidental heavy-family growth, or undocumented runtime drift as merge issues, not later cleanup.
|
- Review treats wrong lane fit, hidden default cost, accidental heavy-family growth, or undocumented runtime drift as merge issues, not later cleanup.
|
||||||
- Routine lane recalibration belongs inside the affecting feature spec or PR; open a dedicated follow-up spec only when recurring pain or structural lane changes justify it.
|
- Routine lane recalibration belongs inside the affecting feature spec or PR; open a dedicated follow-up spec only when recurring pain or structural lane changes justify it.
|
||||||
|
|
||||||
### Spec 288 Cutover Proof
|
|
||||||
|
|
||||||
- Spec `288` is an enforcement-only package. It owns the named no-legacy guards, the two named browser smokes, and contributor-facing quality-gate wording. It does not own runtime cutover repair, Package Execution work, or a full-suite stabilization pass.
|
|
||||||
- The pinned no-legacy heavy-governance proof is:
|
|
||||||
`export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && REPO_ROOT="$(git rev-parse --show-toplevel)" && (cd "$REPO_ROOT/apps/platform" && ./vendor/bin/sail artisan test --compact tests/Feature/Guards/Spec288NoLegacyRouteAndHelperGuardTest.php tests/Feature/Guards/Spec288ProviderCoreAndRoleAuthorityGuardTest.php tests/Feature/Guards/AdminWorkspaceRoutesGuardTest.php tests/Feature/Guards/ProviderBoundaryPlatformCoreGuardTest.php tests/Feature/ProviderConnections/LegacyRedirectTest.php tests/Feature/ManagedEnvironment/LegacyTenantCoreGuardTest.php tests/Feature/Spec080WorkspaceManagedTenantAdminMigrationTest.php tests/Feature/Rbac/ProviderConnectionWorkspaceFirstPolicyTest.php tests/Feature/Filament/ManagedEnvironmentAccessScopeManagementTest.php tests/Feature/Guards/BrowserLaneIsolationTest.php tests/Feature/Guards/CiLaneFailureClassificationContractTest.php tests/Feature/Guards/CiHeavyBrowserWorkflowContractTest.php tests/Unit/Auth/NoRoleStringChecksTest.php)`
|
|
||||||
- The pinned browser proof is:
|
|
||||||
`export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && REPO_ROOT="$(git rev-parse --show-toplevel)" && (cd "$REPO_ROOT/apps/platform" && ./vendor/bin/sail artisan test --compact tests/Browser/Spec281ProviderConnectionScopeSmokeTest.php tests/Browser/Spec285WorkspaceRbacEnvironmentAccessSmokeTest.php)`
|
|
||||||
- Keep the source-scan inventory narrow and explicit. The Spec `288` guard family is limited to the named route/helper and provider/role guard files; do not widen it with broad `tests/Feature/Guards` path allowlists or repo-wide tenant-panel helper bans.
|
|
||||||
- When `heavy-governance` or `browser` reports broader baseline fallout outside those named proofs, classify it in the lane output and follow up separately. Under Spec `288`, that broader fallout remains classification-only and does not by itself expand repair ownership.
|
|
||||||
|
|
||||||
### Authoring And Review Guardrails
|
### Authoring And Review Guardrails
|
||||||
|
|
||||||
- Start with the smallest honest surface: `Unit` for isolated logic, `Feature` for HTTP, Livewire, Filament, jobs, or non-browser integration, `heavy-governance` for intentionally expensive governance scans, and `Browser` only for end-to-end workflow coverage.
|
- Start with the smallest honest surface: `Unit` for isolated logic, `Feature` for HTTP, Livewire, Filament, jobs, or non-browser integration, `heavy-governance` for intentionally expensive governance scans, and `Browser` only for end-to-end workflow coverage.
|
||||||
@ -163,7 +152,6 @@ ### DB Reset and Seed Rules
|
|||||||
|
|
||||||
- Default lanes use SQLite `:memory:` with `RefreshDatabase` as the reset strategy.
|
- Default lanes use SQLite `:memory:` with `RefreshDatabase` as the reset strategy.
|
||||||
- The isolated PostgreSQL coverage remains the `Pgsql` suite and is reserved for schema or foreign-key assertions.
|
- The isolated PostgreSQL coverage remains the `Pgsql` suite and is reserved for schema or foreign-key assertions.
|
||||||
- Spec 279 managed-environment core cutover is destructive for old local databases. If a local database still contains legacy `tenants`, `tenant_user`, `tenant_memberships`, or `user_tenant_preferences` tables, reset it with `cd apps/platform && ./vendor/bin/sail artisan migrate:fresh --seed` instead of trying to preserve that schema.
|
|
||||||
- Keep seeds out of default lanes. Opt into seeded fixtures only inside the test that needs business-truth seed data.
|
- Keep seeds out of default lanes. Opt into seeded fixtures only inside the test that needs business-truth seed data.
|
||||||
- Schema-baseline or dump-based acceleration remains a follow-up investigation, not a default requirement for the current lane model.
|
- Schema-baseline or dump-based acceleration remains a follow-up investigation, not a default requirement for the current lane model.
|
||||||
|
|
||||||
|
|||||||
@ -6,7 +6,7 @@
|
|||||||
|
|
||||||
use App\Models\ProviderConnection;
|
use App\Models\ProviderConnection;
|
||||||
use App\Models\ProviderCredential;
|
use App\Models\ProviderCredential;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Services\Providers\ProviderConnectionClassificationResult;
|
use App\Services\Providers\ProviderConnectionClassificationResult;
|
||||||
use App\Services\Providers\ProviderConnectionClassifier;
|
use App\Services\Providers\ProviderConnectionClassifier;
|
||||||
@ -43,9 +43,9 @@ public function handle(ProviderConnectionClassifier $classifier): int
|
|||||||
}
|
}
|
||||||
|
|
||||||
$tenantCounts = (clone $query)
|
$tenantCounts = (clone $query)
|
||||||
->selectRaw('managed_environment_id, count(*) as aggregate')
|
->selectRaw('tenant_id, count(*) as aggregate')
|
||||||
->groupBy('managed_environment_id')
|
->groupBy('tenant_id')
|
||||||
->pluck('aggregate', 'managed_environment_id')
|
->pluck('aggregate', 'tenant_id')
|
||||||
->map(static fn (mixed $count): int => (int) $count)
|
->map(static fn (mixed $count): int => (int) $count)
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
@ -84,7 +84,7 @@ public function handle(ProviderConnectionClassifier $classifier): int
|
|||||||
|
|
||||||
$tenant = $connection->tenant;
|
$tenant = $connection->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
$this->warn(sprintf('Skipping provider connection #%d without tenant context.', (int) $connection->getKey()));
|
$this->warn(sprintf('Skipping provider connection #%d without tenant context.', (int) $connection->getKey()));
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
@ -123,11 +123,11 @@ private function query(): Builder
|
|||||||
$tenantOption = $this->option('tenant');
|
$tenantOption = $this->option('tenant');
|
||||||
|
|
||||||
if (is_string($tenantOption) && trim($tenantOption) !== '') {
|
if (is_string($tenantOption) && trim($tenantOption) !== '') {
|
||||||
$tenant = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->forTenant(trim($tenantOption))
|
->forTenant(trim($tenantOption))
|
||||||
->firstOrFail();
|
->firstOrFail();
|
||||||
|
|
||||||
$query->where('managed_environment_id', (int) $tenant->getKey());
|
$query->where('tenant_id', (int) $tenant->getKey());
|
||||||
}
|
}
|
||||||
|
|
||||||
$connectionOption = $this->option('connection');
|
$connectionOption = $this->option('connection');
|
||||||
@ -175,7 +175,7 @@ private function applyClassification(
|
|||||||
return $connection->fresh(['tenant', 'credential']);
|
return $connection->fresh(['tenant', 'credential']);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function auditStart(ManagedEnvironment $tenant, int $candidateCount): void
|
private function auditStart(Tenant $tenant, int $candidateCount): void
|
||||||
{
|
{
|
||||||
app(AuditLogger::class)->log(
|
app(AuditLogger::class)->log(
|
||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
@ -195,7 +195,7 @@ private function auditStart(ManagedEnvironment $tenant, int $candidateCount): vo
|
|||||||
}
|
}
|
||||||
|
|
||||||
private function auditApplied(
|
private function auditApplied(
|
||||||
ManagedEnvironment $tenant,
|
Tenant $tenant,
|
||||||
ProviderConnection $connection,
|
ProviderConnection $connection,
|
||||||
ProviderConnectionClassificationResult $result,
|
ProviderConnectionClassificationResult $result,
|
||||||
): void {
|
): void {
|
||||||
|
|||||||
@ -15,7 +15,7 @@ class OpsReconcileAdapterRuns extends Command
|
|||||||
*/
|
*/
|
||||||
protected $signature = 'ops:reconcile-adapter-runs
|
protected $signature = 'ops:reconcile-adapter-runs
|
||||||
{--type= : Adapter run type (e.g. restore.execute)}
|
{--type= : Adapter run type (e.g. restore.execute)}
|
||||||
{--tenant= : ManagedEnvironment ID}
|
{--tenant= : Tenant ID}
|
||||||
{--older-than=60 : Only consider runs older than N minutes}
|
{--older-than=60 : Only consider runs older than N minutes}
|
||||||
{--dry-run=true : Preview only (true/false)}
|
{--dry-run=true : Preview only (true/false)}
|
||||||
{--limit=50 : Max number of runs to inspect}';
|
{--limit=50 : Max number of runs to inspect}';
|
||||||
@ -56,7 +56,7 @@ public function handle()
|
|||||||
|
|
||||||
$result = $reconciler->reconcile([
|
$result = $reconciler->reconcile([
|
||||||
'type' => $type,
|
'type' => $type,
|
||||||
'managed_environment_id' => $tenantId,
|
'tenant_id' => $tenantId,
|
||||||
'older_than_minutes' => $olderThanMinutes,
|
'older_than_minutes' => $olderThanMinutes,
|
||||||
'limit' => $limit,
|
'limit' => $limit,
|
||||||
'dry_run' => $dryRun,
|
'dry_run' => $dryRun,
|
||||||
|
|||||||
@ -5,7 +5,7 @@
|
|||||||
namespace App\Console\Commands;
|
namespace App\Console\Commands;
|
||||||
|
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\OperationCatalog;
|
use App\Support\OperationCatalog;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
@ -51,7 +51,7 @@ public function handle(): int
|
|||||||
}
|
}
|
||||||
|
|
||||||
if ($tenantIds !== []) {
|
if ($tenantIds !== []) {
|
||||||
$query->whereIn('managed_environment_id', $tenantIds);
|
$query->whereIn('tenant_id', $tenantIds);
|
||||||
}
|
}
|
||||||
|
|
||||||
$candidates = $query->get();
|
$candidates = $query->get();
|
||||||
@ -66,12 +66,12 @@ public function handle(): int
|
|||||||
}
|
}
|
||||||
|
|
||||||
$this->table(
|
$this->table(
|
||||||
['Run', 'Type', 'ManagedEnvironment', 'Workspace', 'Legacy signal'],
|
['Run', 'Type', 'Tenant', 'Workspace', 'Legacy signal'],
|
||||||
$matched
|
$matched
|
||||||
->map(fn (OperationRun $run): array => [
|
->map(fn (OperationRun $run): array => [
|
||||||
'Run' => (string) $run->getKey(),
|
'Run' => (string) $run->getKey(),
|
||||||
'Type' => (string) $run->type,
|
'Type' => (string) $run->type,
|
||||||
'ManagedEnvironment' => $run->managed_environment_id !== null ? (string) $run->managed_environment_id : '—',
|
'Tenant' => $run->tenant_id !== null ? (string) $run->tenant_id : '—',
|
||||||
'Workspace' => $run->workspace_id !== null ? (string) $run->workspace_id : '—',
|
'Workspace' => $run->workspace_id !== null ? (string) $run->workspace_id : '—',
|
||||||
'Legacy signal' => $this->legacySignal($run),
|
'Legacy signal' => $this->legacySignal($run),
|
||||||
])
|
])
|
||||||
@ -145,9 +145,9 @@ private function resolveTenantIds(array $tenantIdentifiers): array
|
|||||||
$tenantIds = [];
|
$tenantIds = [];
|
||||||
|
|
||||||
foreach ($tenantIdentifiers as $identifier) {
|
foreach ($tenantIdentifiers as $identifier) {
|
||||||
$tenant = ManagedEnvironment::query()->forTenant($identifier)->first();
|
$tenant = Tenant::query()->forTenant($identifier)->first();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
$tenantIds[] = (int) $tenant->getKey();
|
$tenantIds[] = (int) $tenant->getKey();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
use App\Models\Policy;
|
use App\Models\Policy;
|
||||||
use App\Models\PolicyVersion;
|
use App\Models\PolicyVersion;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\Graph\GraphClientInterface;
|
use App\Services\Graph\GraphClientInterface;
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
|
|
||||||
@ -43,14 +43,14 @@ public function handle(): int
|
|||||||
->where('policy_type', 'enrollmentRestriction');
|
->where('policy_type', 'enrollmentRestriction');
|
||||||
|
|
||||||
if ($tenant) {
|
if ($tenant) {
|
||||||
$query->where('managed_environment_id', $tenant->id);
|
$query->where('tenant_id', $tenant->id);
|
||||||
}
|
}
|
||||||
|
|
||||||
$candidates = $query->get();
|
$candidates = $query->get();
|
||||||
|
|
||||||
$changedVersions = 0;
|
$changedVersions = 0;
|
||||||
$changedPolicies = 0;
|
$changedPolicies = 0;
|
||||||
$providerMissingPolicies = 0;
|
$ignoredPolicies = 0;
|
||||||
|
|
||||||
foreach ($candidates as $policy) {
|
foreach ($candidates as $policy) {
|
||||||
$latestVersion = $policy->versions()->latest('version_number')->first();
|
$latestVersion = $policy->versions()->latest('version_number')->first();
|
||||||
@ -69,9 +69,9 @@ public function handle(): int
|
|||||||
}
|
}
|
||||||
|
|
||||||
$this->line(sprintf(
|
$this->line(sprintf(
|
||||||
'ESP detected: policy=%s managed_environment_id=%s external_id=%s',
|
'ESP detected: policy=%s tenant_id=%s external_id=%s',
|
||||||
(string) $policy->getKey(),
|
(string) $policy->getKey(),
|
||||||
(string) $policy->managed_environment_id,
|
(string) $policy->tenant_id,
|
||||||
(string) $policy->external_id,
|
(string) $policy->external_id,
|
||||||
));
|
));
|
||||||
|
|
||||||
@ -80,21 +80,20 @@ public function handle(): int
|
|||||||
}
|
}
|
||||||
|
|
||||||
$existingTarget = Policy::query()
|
$existingTarget = Policy::query()
|
||||||
->where('managed_environment_id', $policy->managed_environment_id)
|
->where('tenant_id', $policy->tenant_id)
|
||||||
->where('external_id', $policy->external_id)
|
->where('external_id', $policy->external_id)
|
||||||
->where('policy_type', 'windowsEnrollmentStatusPage')
|
->where('policy_type', 'windowsEnrollmentStatusPage')
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if ($existingTarget) {
|
if ($existingTarget) {
|
||||||
$policy->forceFill(['missing_from_provider_at' => now()])->save();
|
$policy->forceFill(['ignored_at' => now()])->save();
|
||||||
$providerMissingPolicies++;
|
$ignoredPolicies++;
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$policy->forceFill([
|
$policy->forceFill([
|
||||||
'policy_type' => 'windowsEnrollmentStatusPage',
|
'policy_type' => 'windowsEnrollmentStatusPage',
|
||||||
'missing_from_provider_at' => null,
|
|
||||||
])->save();
|
])->save();
|
||||||
$changedPolicies++;
|
$changedPolicies++;
|
||||||
|
|
||||||
@ -107,7 +106,7 @@ public function handle(): int
|
|||||||
$this->info('Done.');
|
$this->info('Done.');
|
||||||
$this->info('PolicyVersions changed: '.$changedVersions);
|
$this->info('PolicyVersions changed: '.$changedVersions);
|
||||||
$this->info('Policies changed: '.$changedPolicies);
|
$this->info('Policies changed: '.$changedPolicies);
|
||||||
$this->info('Policies marked provider-missing: '.$providerMissingPolicies);
|
$this->info('Policies ignored: '.$ignoredPolicies);
|
||||||
$this->info('Mode: '.($dryRun ? 'dry-run' : 'write'));
|
$this->info('Mode: '.($dryRun ? 'dry-run' : 'write'));
|
||||||
|
|
||||||
return Command::SUCCESS;
|
return Command::SUCCESS;
|
||||||
@ -130,7 +129,7 @@ private function fetchSnapshotOrNull(Policy $policy): ?array
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenantIdentifier = $tenant->managed_environment_id ?? $tenant->external_id;
|
$tenantIdentifier = $tenant->tenant_id ?? $tenant->external_id;
|
||||||
|
|
||||||
$response = $this->graphClient->getPolicy('enrollmentRestriction', $policy->external_id, [
|
$response = $this->graphClient->getPolicy('enrollmentRestriction', $policy->external_id, [
|
||||||
'tenant' => $tenantIdentifier,
|
'tenant' => $tenantIdentifier,
|
||||||
@ -148,7 +147,7 @@ private function fetchSnapshotOrNull(Policy $policy): ?array
|
|||||||
return is_array($payload) ? $payload : null;
|
return is_array($payload) ? $payload : null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveTenantOrNull(): ?ManagedEnvironment
|
private function resolveTenantOrNull(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantOption = $this->option('tenant');
|
$tenantOption = $this->option('tenant');
|
||||||
|
|
||||||
@ -156,7 +155,7 @@ private function resolveTenantOrNull(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->forTenant($tenantOption)
|
->forTenant($tenantOption)
|
||||||
->firstOrFail();
|
->firstOrFail();
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,17 +4,15 @@
|
|||||||
|
|
||||||
namespace App\Console\Commands;
|
namespace App\Console\Commands;
|
||||||
|
|
||||||
use App\Filament\Resources\BackupSetResource;
|
|
||||||
use App\Models\BackupItem;
|
use App\Models\BackupItem;
|
||||||
use App\Models\BackupSet;
|
use App\Models\BackupSet;
|
||||||
use App\Models\Policy;
|
use App\Models\Policy;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\ManagedEnvironmentMembership;
|
use App\Models\TenantMembership;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\UserTenantPreference;
|
use App\Models\UserTenantPreference;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Models\WorkspaceMembership;
|
use App\Models\WorkspaceMembership;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
use Illuminate\Support\Facades\Hash;
|
use Illuminate\Support\Facades\Hash;
|
||||||
use Illuminate\Support\Facades\Schema;
|
use Illuminate\Support\Facades\Schema;
|
||||||
@ -44,7 +42,7 @@ public function handle(): int
|
|||||||
$workspaceConfig = is_array($fixture['workspace'] ?? null) ? $fixture['workspace'] : [];
|
$workspaceConfig = is_array($fixture['workspace'] ?? null) ? $fixture['workspace'] : [];
|
||||||
$userConfig = is_array($fixture['user'] ?? null) ? $fixture['user'] : [];
|
$userConfig = is_array($fixture['user'] ?? null) ? $fixture['user'] : [];
|
||||||
$scenarioConfig = is_array($fixture['blocked_drillthrough'] ?? null) ? $fixture['blocked_drillthrough'] : [];
|
$scenarioConfig = is_array($fixture['blocked_drillthrough'] ?? null) ? $fixture['blocked_drillthrough'] : [];
|
||||||
$tenantRouteKey = (string) ($scenarioConfig['managed_environment_id'] ?? $scenarioConfig['tenant_external_id'] ?? '18000000-0000-4000-8000-000000000180');
|
$tenantRouteKey = (string) ($scenarioConfig['tenant_id'] ?? $scenarioConfig['tenant_external_id'] ?? '18000000-0000-4000-8000-000000000180');
|
||||||
|
|
||||||
$workspace = Workspace::query()->updateOrCreate(
|
$workspace = Workspace::query()->updateOrCreate(
|
||||||
['slug' => (string) ($workspaceConfig['slug'] ?? 'spec-180-backup-health-smoke')],
|
['slug' => (string) ($workspaceConfig['slug'] ?? 'spec-180-backup-health-smoke')],
|
||||||
@ -62,13 +60,16 @@ public function handle(): int
|
|||||||
],
|
],
|
||||||
);
|
);
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::query()->updateOrCreate(
|
$tenant = Tenant::query()->updateOrCreate(
|
||||||
['slug' => $tenantRouteKey],
|
['external_id' => $tenantRouteKey],
|
||||||
[
|
[
|
||||||
'workspace_id' => (int) $workspace->getKey(),
|
'workspace_id' => (int) $workspace->getKey(),
|
||||||
'name' => (string) ($scenarioConfig['tenant_name'] ?? 'Spec 180 Blocked Backup ManagedEnvironment'),
|
'name' => (string) ($scenarioConfig['tenant_name'] ?? 'Spec 180 Blocked Backup Tenant'),
|
||||||
'lifecycle_status' => ManagedEnvironment::STATUS_ACTIVE,
|
'tenant_id' => $tenantRouteKey,
|
||||||
'kind' => 'dev',
|
'app_certificate_thumbprint' => null,
|
||||||
|
'app_notes' => null,
|
||||||
|
'status' => Tenant::STATUS_ACTIVE,
|
||||||
|
'environment' => 'dev',
|
||||||
'is_current' => false,
|
'is_current' => false,
|
||||||
'metadata' => ['fixture' => 'spec-180-browser-smoke'],
|
'metadata' => ['fixture' => 'spec-180-browser-smoke'],
|
||||||
'rbac_status' => 'ok',
|
'rbac_status' => 'ok',
|
||||||
@ -81,8 +82,8 @@ public function handle(): int
|
|||||||
['role' => 'owner'],
|
['role' => 'owner'],
|
||||||
);
|
);
|
||||||
|
|
||||||
ManagedEnvironmentMembership::query()->updateOrCreate(
|
TenantMembership::query()->updateOrCreate(
|
||||||
['managed_environment_id' => (int) $tenant->getKey(), 'user_id' => (int) $user->getKey()],
|
['tenant_id' => (int) $tenant->getKey(), 'user_id' => (int) $user->getKey()],
|
||||||
['role' => 'owner', 'source' => 'manual', 'source_ref' => 'spec-180-browser-smoke'],
|
['role' => 'owner', 'source' => 'manual', 'source_ref' => 'spec-180-browser-smoke'],
|
||||||
);
|
);
|
||||||
|
|
||||||
@ -90,16 +91,16 @@ public function handle(): int
|
|||||||
$user->forceFill(['last_workspace_id' => (int) $workspace->getKey()])->save();
|
$user->forceFill(['last_workspace_id' => (int) $workspace->getKey()])->save();
|
||||||
}
|
}
|
||||||
|
|
||||||
if (Schema::hasTable('user_managed_environment_preferences')) {
|
if (Schema::hasTable('user_tenant_preferences')) {
|
||||||
UserTenantPreference::query()->updateOrCreate(
|
UserTenantPreference::query()->updateOrCreate(
|
||||||
['user_id' => (int) $user->getKey(), 'managed_environment_id' => (int) $tenant->getKey()],
|
['user_id' => (int) $user->getKey(), 'tenant_id' => (int) $tenant->getKey()],
|
||||||
['last_used_at' => now()],
|
['last_used_at' => now()],
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
$policy = Policy::query()->updateOrCreate(
|
$policy = Policy::query()->updateOrCreate(
|
||||||
[
|
[
|
||||||
'managed_environment_id' => (int) $tenant->getKey(),
|
'tenant_id' => (int) $tenant->getKey(),
|
||||||
'external_id' => (string) ($scenarioConfig['policy_external_id'] ?? 'spec-180-rbac-stale-policy'),
|
'external_id' => (string) ($scenarioConfig['policy_external_id'] ?? 'spec-180-rbac-stale-policy'),
|
||||||
'policy_type' => (string) ($scenarioConfig['policy_type'] ?? 'settingsCatalogPolicy'),
|
'policy_type' => (string) ($scenarioConfig['policy_type'] ?? 'settingsCatalogPolicy'),
|
||||||
],
|
],
|
||||||
@ -112,7 +113,7 @@ public function handle(): int
|
|||||||
);
|
);
|
||||||
|
|
||||||
$backupSet = BackupSet::withTrashed()->firstOrNew([
|
$backupSet = BackupSet::withTrashed()->firstOrNew([
|
||||||
'managed_environment_id' => (int) $tenant->getKey(),
|
'tenant_id' => (int) $tenant->getKey(),
|
||||||
'name' => (string) ($scenarioConfig['backup_set_name'] ?? 'Spec 180 Blocked Stale Backup'),
|
'name' => (string) ($scenarioConfig['backup_set_name'] ?? 'Spec 180 Blocked Stale Backup'),
|
||||||
]);
|
]);
|
||||||
|
|
||||||
@ -136,7 +137,7 @@ public function handle(): int
|
|||||||
]);
|
]);
|
||||||
|
|
||||||
$backupItem->forceFill([
|
$backupItem->forceFill([
|
||||||
'managed_environment_id' => (int) $tenant->getKey(),
|
'tenant_id' => (int) $tenant->getKey(),
|
||||||
'policy_id' => (int) $policy->getKey(),
|
'policy_id' => (int) $policy->getKey(),
|
||||||
'platform' => 'windows',
|
'platform' => 'windows',
|
||||||
'captured_at' => $backupSet->completed_at,
|
'captured_at' => $backupSet->completed_at,
|
||||||
@ -172,11 +173,11 @@ public function handle(): int
|
|||||||
['Workspace', (string) $workspace->name],
|
['Workspace', (string) $workspace->name],
|
||||||
['User email', (string) $user->email],
|
['User email', (string) $user->email],
|
||||||
['User password', $password],
|
['User password', $password],
|
||||||
['ManagedEnvironment', (string) $tenant->name],
|
['Tenant', (string) $tenant->name],
|
||||||
['ManagedEnvironment external id', (string) $tenant->external_id],
|
['Tenant external id', (string) $tenant->external_id],
|
||||||
['Dashboard URL', ManagedEnvironmentLinks::viewUrl($tenant)],
|
['Dashboard URL', "/admin/t/{$tenant->external_id}"],
|
||||||
['Fixture login URL', route('admin.local.backup-health-browser-fixture-login', absolute: false)],
|
['Fixture login URL', route('admin.local.backup-health-browser-fixture-login', absolute: false)],
|
||||||
['Blocked route', BackupSetResource::getUrl(panel: 'admin', tenant: $tenant)],
|
['Blocked route', "/admin/t/{$tenant->external_id}/backup-sets"],
|
||||||
['Locally denied capability', 'tenant.view'],
|
['Locally denied capability', 'tenant.view'],
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Console\Commands;
|
namespace App\Console\Commands;
|
||||||
|
|
||||||
use App\Jobs\SyncPoliciesJob;
|
use App\Jobs\SyncPoliciesJob;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
|
|
||||||
class SyncPolicies extends Command
|
class SyncPolicies extends Command
|
||||||
@ -24,16 +24,16 @@ public function handle(): int
|
|||||||
return Command::SUCCESS;
|
return Command::SUCCESS;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveTenant(): ManagedEnvironment
|
private function resolveTenant(): Tenant
|
||||||
{
|
{
|
||||||
$tenantId = $this->option('tenant');
|
$tenantId = $this->option('tenant');
|
||||||
|
|
||||||
if ($tenantId) {
|
if ($tenantId) {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->forTenant($tenantId)
|
->forTenant($tenantId)
|
||||||
->firstOrFail();
|
->firstOrFail();
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::currentOrFail();
|
return Tenant::currentOrFail();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -258,21 +258,21 @@ private function collectTableStats(array $tables): array
|
|||||||
$missing = (int) DB::table($table)->whereNull('workspace_id')->count();
|
$missing = (int) DB::table($table)->whereNull('workspace_id')->count();
|
||||||
|
|
||||||
$unresolvableQuery = DB::table($table)
|
$unresolvableQuery = DB::table($table)
|
||||||
->leftJoin('managed_environments', 'managed_environments.id', '=', sprintf('%s.managed_environment_id', $table))
|
->leftJoin('tenants', 'tenants.id', '=', sprintf('%s.tenant_id', $table))
|
||||||
->whereNull(sprintf('%s.workspace_id', $table))
|
->whereNull(sprintf('%s.workspace_id', $table))
|
||||||
->where(function ($query): void {
|
->where(function ($query): void {
|
||||||
$query->whereNull('managed_environments.id')
|
$query->whereNull('tenants.id')
|
||||||
->orWhereNull('managed_environments.workspace_id');
|
->orWhereNull('tenants.workspace_id');
|
||||||
});
|
});
|
||||||
|
|
||||||
$unresolvable = (int) $unresolvableQuery->count();
|
$unresolvable = (int) $unresolvableQuery->count();
|
||||||
|
|
||||||
$sampleIds = DB::table($table)
|
$sampleIds = DB::table($table)
|
||||||
->leftJoin('managed_environments', 'managed_environments.id', '=', sprintf('%s.managed_environment_id', $table))
|
->leftJoin('tenants', 'tenants.id', '=', sprintf('%s.tenant_id', $table))
|
||||||
->whereNull(sprintf('%s.workspace_id', $table))
|
->whereNull(sprintf('%s.workspace_id', $table))
|
||||||
->where(function ($query): void {
|
->where(function ($query): void {
|
||||||
$query->whereNull('managed_environments.id')
|
$query->whereNull('tenants.id')
|
||||||
->orWhereNull('managed_environments.workspace_id');
|
->orWhereNull('tenants.workspace_id');
|
||||||
})
|
})
|
||||||
->orderBy(sprintf('%s.id', $table))
|
->orderBy(sprintf('%s.id', $table))
|
||||||
->limit(5)
|
->limit(5)
|
||||||
@ -302,11 +302,11 @@ private function collectWorkspaceWorkloads(array $tables, ?int $maxRows): array
|
|||||||
|
|
||||||
foreach ($tables as $table) {
|
foreach ($tables as $table) {
|
||||||
$rows = DB::table($table)
|
$rows = DB::table($table)
|
||||||
->join('managed_environments', 'managed_environments.id', '=', sprintf('%s.managed_environment_id', $table))
|
->join('tenants', 'tenants.id', '=', sprintf('%s.tenant_id', $table))
|
||||||
->whereNull(sprintf('%s.workspace_id', $table))
|
->whereNull(sprintf('%s.workspace_id', $table))
|
||||||
->whereNotNull('managed_environments.workspace_id')
|
->whereNotNull('tenants.workspace_id')
|
||||||
->selectRaw('managed_environments.workspace_id as workspace_id, COUNT(*) as row_count')
|
->selectRaw('tenants.workspace_id as workspace_id, COUNT(*) as row_count')
|
||||||
->groupBy('managed_environments.workspace_id')
|
->groupBy('tenants.workspace_id')
|
||||||
->get();
|
->get();
|
||||||
|
|
||||||
foreach ($rows as $row) {
|
foreach ($rows as $row) {
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
|
|
||||||
class TenantpilotDispatchBackupSchedules extends Command
|
class TenantpilotDispatchBackupSchedules extends Command
|
||||||
{
|
{
|
||||||
protected $signature = 'tenantpilot:schedules:dispatch {--tenant=* : Limit to managed_environment_id/external_id}';
|
protected $signature = 'tenantpilot:schedules:dispatch {--tenant=* : Limit to tenant_id/external_id}';
|
||||||
|
|
||||||
protected $description = 'Dispatch due backup schedules (idempotent per schedule minute-slot).';
|
protected $description = 'Dispatch due backup schedules (idempotent per schedule minute-slot).';
|
||||||
|
|
||||||
|
|||||||
@ -2,7 +2,7 @@
|
|||||||
|
|
||||||
namespace App\Console\Commands;
|
namespace App\Console\Commands;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\OperationRunService;
|
use App\Services\OperationRunService;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
use Carbon\CarbonImmutable;
|
use Carbon\CarbonImmutable;
|
||||||
@ -10,7 +10,7 @@
|
|||||||
|
|
||||||
class TenantpilotDispatchDirectoryGroupsSync extends Command
|
class TenantpilotDispatchDirectoryGroupsSync extends Command
|
||||||
{
|
{
|
||||||
protected $signature = 'tenantpilot:directory-groups:dispatch {--tenant=* : Limit to managed_environment_id/external_id}';
|
protected $signature = 'tenantpilot:directory-groups:dispatch {--tenant=* : Limit to tenant_id/external_id}';
|
||||||
|
|
||||||
protected $description = 'Dispatch scheduled directory group sync runs (idempotent per tenant minute-slot).';
|
protected $description = 'Dispatch scheduled directory group sync runs (idempotent per tenant minute-slot).';
|
||||||
|
|
||||||
@ -96,7 +96,7 @@ public function handle(): int
|
|||||||
*/
|
*/
|
||||||
private function resolveTenants(array $tenantIdentifiers): \Illuminate\Support\Collection
|
private function resolveTenants(array $tenantIdentifiers): \Illuminate\Support\Collection
|
||||||
{
|
{
|
||||||
$query = ManagedEnvironment::activeQuery();
|
$query = Tenant::activeQuery();
|
||||||
|
|
||||||
if ($tenantIdentifiers !== []) {
|
if ($tenantIdentifiers !== []) {
|
||||||
$query->where(function ($subQuery) use ($tenantIdentifiers) {
|
$query->where(function ($subQuery) use ($tenantIdentifiers) {
|
||||||
@ -107,7 +107,8 @@ private function resolveTenants(array $tenantIdentifiers): \Illuminate\Support\C
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$subQuery->orWhere('slug', $identifier);
|
$subQuery->orWhere('tenant_id', $identifier)
|
||||||
|
->orWhere('external_id', $identifier);
|
||||||
}
|
}
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|||||||
@ -10,7 +10,7 @@
|
|||||||
use App\Models\Policy;
|
use App\Models\Policy;
|
||||||
use App\Models\PolicyVersion;
|
use App\Models\PolicyVersion;
|
||||||
use App\Models\RestoreRun;
|
use App\Models\RestoreRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
use Illuminate\Support\Arr;
|
use Illuminate\Support\Arr;
|
||||||
@ -26,7 +26,7 @@ class TenantpilotPurgeNonPersistentData extends Command
|
|||||||
* @var string
|
* @var string
|
||||||
*/
|
*/
|
||||||
protected $signature = 'tenantpilot:purge-nonpersistent
|
protected $signature = 'tenantpilot:purge-nonpersistent
|
||||||
{tenant? : ManagedEnvironment id / managed_environment_id / external_id (defaults to current tenant)}
|
{tenant? : Tenant id / tenant_id / external_id (defaults to current tenant)}
|
||||||
{--all : Purge for all tenants}
|
{--all : Purge for all tenants}
|
||||||
{--force : Actually delete rows}';
|
{--force : Actually delete rows}';
|
||||||
|
|
||||||
@ -68,7 +68,7 @@ public function handle(): int
|
|||||||
$counts = $this->countsForTenant($tenant);
|
$counts = $this->countsForTenant($tenant);
|
||||||
|
|
||||||
$this->line('');
|
$this->line('');
|
||||||
$this->info("ManagedEnvironment: {$tenant->id} ({$tenant->name})");
|
$this->info("Tenant: {$tenant->id} ({$tenant->name})");
|
||||||
$this->table(
|
$this->table(
|
||||||
['Table', 'Rows'],
|
['Table', 'Rows'],
|
||||||
collect($counts)
|
collect($counts)
|
||||||
@ -83,31 +83,31 @@ public function handle(): int
|
|||||||
|
|
||||||
DB::transaction(function () use ($tenant): void {
|
DB::transaction(function () use ($tenant): void {
|
||||||
BackupSchedule::query()
|
BackupSchedule::query()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->delete();
|
->delete();
|
||||||
|
|
||||||
OperationRun::query()
|
OperationRun::query()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->delete();
|
->delete();
|
||||||
|
|
||||||
RestoreRun::withTrashed()
|
RestoreRun::withTrashed()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->forceDelete();
|
->forceDelete();
|
||||||
|
|
||||||
BackupItem::withTrashed()
|
BackupItem::withTrashed()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->forceDelete();
|
->forceDelete();
|
||||||
|
|
||||||
BackupSet::withTrashed()
|
BackupSet::withTrashed()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->forceDelete();
|
->forceDelete();
|
||||||
|
|
||||||
PolicyVersion::withTrashed()
|
PolicyVersion::withTrashed()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->forceDelete();
|
->forceDelete();
|
||||||
|
|
||||||
Policy::query()
|
Policy::query()
|
||||||
->where('managed_environment_id', $tenant->id)
|
->where('tenant_id', $tenant->id)
|
||||||
->delete();
|
->delete();
|
||||||
});
|
});
|
||||||
|
|
||||||
@ -122,19 +122,19 @@ public function handle(): int
|
|||||||
private function resolveTenants()
|
private function resolveTenants()
|
||||||
{
|
{
|
||||||
if ((bool) $this->option('all')) {
|
if ((bool) $this->option('all')) {
|
||||||
return ManagedEnvironment::query()->get();
|
return Tenant::query()->get();
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenantArg = $this->argument('tenant');
|
$tenantArg = $this->argument('tenant');
|
||||||
|
|
||||||
if ($tenantArg !== null && $tenantArg !== '') {
|
if ($tenantArg !== null && $tenantArg !== '') {
|
||||||
$tenant = ManagedEnvironment::query()->forTenant($tenantArg)->first();
|
$tenant = Tenant::query()->forTenant($tenantArg)->first();
|
||||||
|
|
||||||
return $tenant ? collect([$tenant]) : collect();
|
return $tenant ? collect([$tenant]) : collect();
|
||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
return collect([ManagedEnvironment::currentOrFail()]);
|
return collect([Tenant::currentOrFail()]);
|
||||||
} catch (RuntimeException) {
|
} catch (RuntimeException) {
|
||||||
return collect();
|
return collect();
|
||||||
}
|
}
|
||||||
@ -143,30 +143,30 @@ private function resolveTenants()
|
|||||||
/**
|
/**
|
||||||
* @return array<string,int>
|
* @return array<string,int>
|
||||||
*/
|
*/
|
||||||
private function countsForTenant(ManagedEnvironment $tenant): array
|
private function countsForTenant(Tenant $tenant): array
|
||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
'backup_schedules' => BackupSchedule::query()->where('managed_environment_id', $tenant->id)->count(),
|
'backup_schedules' => BackupSchedule::query()->where('tenant_id', $tenant->id)->count(),
|
||||||
'operation_runs' => OperationRun::query()->where('managed_environment_id', $tenant->id)->count(),
|
'operation_runs' => OperationRun::query()->where('tenant_id', $tenant->id)->count(),
|
||||||
'audit_logs_retained' => AuditLog::query()->where('managed_environment_id', $tenant->id)->count(),
|
'audit_logs_retained' => AuditLog::query()->where('tenant_id', $tenant->id)->count(),
|
||||||
'restore_runs' => RestoreRun::withTrashed()->where('managed_environment_id', $tenant->id)->count(),
|
'restore_runs' => RestoreRun::withTrashed()->where('tenant_id', $tenant->id)->count(),
|
||||||
'backup_items' => BackupItem::withTrashed()->where('managed_environment_id', $tenant->id)->count(),
|
'backup_items' => BackupItem::withTrashed()->where('tenant_id', $tenant->id)->count(),
|
||||||
'backup_sets' => BackupSet::withTrashed()->where('managed_environment_id', $tenant->id)->count(),
|
'backup_sets' => BackupSet::withTrashed()->where('tenant_id', $tenant->id)->count(),
|
||||||
'policy_versions' => PolicyVersion::withTrashed()->where('managed_environment_id', $tenant->id)->count(),
|
'policy_versions' => PolicyVersion::withTrashed()->where('tenant_id', $tenant->id)->count(),
|
||||||
'policies' => Policy::query()->where('managed_environment_id', $tenant->id)->count(),
|
'policies' => Policy::query()->where('tenant_id', $tenant->id)->count(),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param array<string, int> $counts
|
* @param array<string, int> $counts
|
||||||
*/
|
*/
|
||||||
private function recordPurgeOperationRun(ManagedEnvironment $tenant, array $counts): void
|
private function recordPurgeOperationRun(Tenant $tenant, array $counts): void
|
||||||
{
|
{
|
||||||
$deletedRows = Arr::except($counts, ['audit_logs_retained']);
|
$deletedRows = Arr::except($counts, ['audit_logs_retained']);
|
||||||
|
|
||||||
OperationRun::query()->create([
|
OperationRun::query()->create([
|
||||||
'workspace_id' => (int) $tenant->workspace_id,
|
'workspace_id' => (int) $tenant->workspace_id,
|
||||||
'managed_environment_id' => (int) $tenant->id,
|
'tenant_id' => (int) $tenant->id,
|
||||||
'user_id' => null,
|
'user_id' => null,
|
||||||
'initiator_name' => 'System',
|
'initiator_name' => 'System',
|
||||||
'type' => OperationRunType::BackupSchedulePurge->value,
|
'type' => OperationRunType::BackupSchedulePurge->value,
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
use App\Models\BackupSchedule;
|
use App\Models\BackupSchedule;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\OperationRunService;
|
use App\Services\OperationRunService;
|
||||||
use App\Services\Operations\OperationLifecycleReconciler;
|
use App\Services\Operations\OperationLifecycleReconciler;
|
||||||
use App\Support\OperationCatalog;
|
use App\Support\OperationCatalog;
|
||||||
@ -15,7 +15,7 @@
|
|||||||
class TenantpilotReconcileBackupScheduleOperationRuns extends Command
|
class TenantpilotReconcileBackupScheduleOperationRuns extends Command
|
||||||
{
|
{
|
||||||
protected $signature = 'tenantpilot:operation-runs:reconcile-backup-schedules
|
protected $signature = 'tenantpilot:operation-runs:reconcile-backup-schedules
|
||||||
{--tenant=* : Limit to managed_environment_id/external_id}
|
{--tenant=* : Limit to tenant_id/external_id}
|
||||||
{--older-than=5 : Only reconcile runs older than N minutes}
|
{--older-than=5 : Only reconcile runs older than N minutes}
|
||||||
{--dry-run : Do not write changes}';
|
{--dry-run : Do not write changes}';
|
||||||
|
|
||||||
@ -46,7 +46,7 @@ public function handle(
|
|||||||
return self::SUCCESS;
|
return self::SUCCESS;
|
||||||
}
|
}
|
||||||
|
|
||||||
$query->whereIn('managed_environment_id', $tenantIds);
|
$query->whereIn('tenant_id', $tenantIds);
|
||||||
}
|
}
|
||||||
|
|
||||||
$reconciled = 0;
|
$reconciled = 0;
|
||||||
@ -78,7 +78,7 @@ public function handle(
|
|||||||
|
|
||||||
$schedule = BackupSchedule::query()
|
$schedule = BackupSchedule::query()
|
||||||
->whereKey((int) $backupScheduleId)
|
->whereKey((int) $backupScheduleId)
|
||||||
->where('managed_environment_id', (int) $operationRun->managed_environment_id)
|
->where('tenant_id', (int) $operationRun->tenant_id)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if (! $schedule instanceof BackupSchedule) {
|
if (! $schedule instanceof BackupSchedule) {
|
||||||
@ -135,7 +135,7 @@ private function resolveTenantIds(array $tenantIdentifiers): array
|
|||||||
$tenantIds = [];
|
$tenantIds = [];
|
||||||
|
|
||||||
foreach ($tenantIdentifiers as $identifier) {
|
foreach ($tenantIdentifiers as $identifier) {
|
||||||
$tenant = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->forTenant($identifier)
|
->forTenant($identifier)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
namespace App\Console\Commands;
|
namespace App\Console\Commands;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\Operations\OperationLifecycleReconciler;
|
use App\Services\Operations\OperationLifecycleReconciler;
|
||||||
use App\Support\Operations\OperationLifecyclePolicy;
|
use App\Support\Operations\OperationLifecyclePolicy;
|
||||||
use Illuminate\Console\Command;
|
use Illuminate\Console\Command;
|
||||||
@ -13,7 +13,7 @@ class TenantpilotReconcileOperationRuns extends Command
|
|||||||
{
|
{
|
||||||
protected $signature = 'tenantpilot:operation-runs:reconcile
|
protected $signature = 'tenantpilot:operation-runs:reconcile
|
||||||
{--type=* : Limit reconciliation to one or more covered operation types}
|
{--type=* : Limit reconciliation to one or more covered operation types}
|
||||||
{--tenant=* : Limit reconciliation to managed_environment_id or tenant external_id}
|
{--tenant=* : Limit reconciliation to tenant_id or tenant external_id}
|
||||||
{--workspace=* : Limit reconciliation to workspace ids}
|
{--workspace=* : Limit reconciliation to workspace ids}
|
||||||
{--limit=100 : Maximum number of active runs to inspect}
|
{--limit=100 : Maximum number of active runs to inspect}
|
||||||
{--dry-run : Report the changes without writing them}';
|
{--dry-run : Report the changes without writing them}';
|
||||||
@ -93,9 +93,9 @@ private function resolveTenantIds(array $tenantIdentifiers): array
|
|||||||
$tenantIds = [];
|
$tenantIds = [];
|
||||||
|
|
||||||
foreach ($tenantIdentifiers as $identifier) {
|
foreach ($tenantIdentifiers as $identifier) {
|
||||||
$tenant = ManagedEnvironment::query()->forTenant($identifier)->first();
|
$tenant = Tenant::query()->forTenant($identifier)->first();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
$tenantIds[] = (int) $tenant->getKey();
|
$tenantIds[] = (int) $tenant->getKey();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -55,7 +55,7 @@ public function handle(PolicySnapshotService $snapshotService): int
|
|||||||
|
|
||||||
// Create PolicyVersion to save the snapshot
|
// Create PolicyVersion to save the snapshot
|
||||||
$policy->versions()->create([
|
$policy->versions()->create([
|
||||||
'managed_environment_id' => $policy->managed_environment_id,
|
'tenant_id' => $policy->tenant_id,
|
||||||
'version_number' => $policy->versions()->max('version_number') + 1,
|
'version_number' => $policy->versions()->max('version_number') + 1,
|
||||||
'policy_type' => $policy->policy_type,
|
'policy_type' => $policy->policy_type,
|
||||||
'platform' => $policy->platform,
|
'platform' => $policy->platform,
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Contracts\Hardening;
|
namespace App\Contracts\Hardening;
|
||||||
|
|
||||||
use App\Exceptions\Hardening\ProviderAccessHardeningRequired;
|
use App\Exceptions\Hardening\ProviderAccessHardeningRequired;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
|
|
||||||
interface WriteGateInterface
|
interface WriteGateInterface
|
||||||
{
|
{
|
||||||
@ -12,12 +12,12 @@ interface WriteGateInterface
|
|||||||
*
|
*
|
||||||
* @throws ProviderAccessHardeningRequired when the operation is blocked
|
* @throws ProviderAccessHardeningRequired when the operation is blocked
|
||||||
*/
|
*/
|
||||||
public function evaluate(ManagedEnvironment $tenant, string $operationType): void;
|
public function evaluate(Tenant $tenant, string $operationType): void;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Check whether the gate would block a write operation for the given tenant.
|
* Check whether the gate would block a write operation for the given tenant.
|
||||||
*
|
*
|
||||||
* Non-throwing variant for UI disabled-state checks.
|
* Non-throwing variant for UI disabled-state checks.
|
||||||
*/
|
*/
|
||||||
public function wouldBlock(ManagedEnvironment $tenant): bool;
|
public function wouldBlock(Tenant $tenant): bool;
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,16 +4,10 @@
|
|||||||
|
|
||||||
namespace App\Filament\Clusters\Inventory;
|
namespace App\Filament\Clusters\Inventory;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
|
||||||
use App\Models\Workspace;
|
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperateHub\OperateHubShell;
|
|
||||||
use BackedEnum;
|
use BackedEnum;
|
||||||
use Filament\Clusters\Cluster;
|
use Filament\Clusters\Cluster;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Filament\Pages\Enums\SubNavigationPosition;
|
use Filament\Pages\Enums\SubNavigationPosition;
|
||||||
use Filament\Panel;
|
|
||||||
use Illuminate\Database\Eloquent\Model;
|
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
|
|
||||||
class InventoryCluster extends Cluster
|
class InventoryCluster extends Cluster
|
||||||
@ -28,92 +22,10 @@ class InventoryCluster extends Cluster
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
}
|
|
||||||
|
|
||||||
public static function getSlug(?Panel $panel = null): string
|
|
||||||
{
|
|
||||||
$panelId = $panel?->getId() ?? Filament::getCurrentOrDefaultPanel()?->getId();
|
|
||||||
|
|
||||||
if ($panelId !== 'admin') {
|
|
||||||
return parent::getSlug($panel);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
return 'workspaces/{workspace}/environments/{environment}/inventory';
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
public static function getUrl(array $parameters = [], bool $isAbsolute = true, ?string $panel = null, ?Model $tenant = null): string
|
|
||||||
{
|
|
||||||
$panelId = $panel ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
|
||||||
|
|
||||||
if ($panelId !== 'admin') {
|
|
||||||
return parent::getUrl($parameters, $isAbsolute, $panelId, $tenant);
|
|
||||||
}
|
|
||||||
|
|
||||||
$resolvedTenant = static::resolveAdminUrlTenant($parameters, $tenant);
|
|
||||||
|
|
||||||
if (! $resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = static::resolveAdminUrlWorkspace($resolvedTenant, $parameters);
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace && ! is_string($workspace) && ! is_int($workspace)) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$parameters['environment'] ??= $resolvedTenant;
|
|
||||||
$parameters['workspace'] ??= $workspace;
|
|
||||||
unset($parameters['tenant']);
|
|
||||||
|
|
||||||
return parent::getUrl($parameters, $isAbsolute, $panelId, null);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
private static function resolveAdminUrlTenant(array $parameters, ?Model $tenant = null): ?ManagedEnvironment
|
|
||||||
{
|
|
||||||
$parameterTenant = $parameters['tenant'] ?? $parameters['environment'] ?? null;
|
|
||||||
|
|
||||||
if ($parameterTenant instanceof ManagedEnvironment) {
|
|
||||||
return $parameterTenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
|
||||||
return $tenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
$filamentTenant = Filament::getTenant();
|
|
||||||
|
|
||||||
if ($filamentTenant instanceof ManagedEnvironment) {
|
|
||||||
return $filamentTenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
return app(OperateHubShell::class)->tenantOwnedPanelContext(request());
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
private static function resolveAdminUrlWorkspace(ManagedEnvironment $tenant, array $parameters): Workspace|string|int|null
|
|
||||||
{
|
|
||||||
$workspace = $parameters['workspace'] ?? null;
|
|
||||||
|
|
||||||
if ($workspace instanceof Workspace || is_string($workspace) || is_int($workspace)) {
|
|
||||||
return $workspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenantWorkspace = $tenant->workspace;
|
|
||||||
|
|
||||||
if ($tenantWorkspace instanceof Workspace) {
|
|
||||||
return $tenantWorkspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $tenant->workspace()->first();
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
namespace App\Filament\Concerns;
|
namespace App\Filament\Concerns;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\WorkspaceIsolation\TenantOwnedQueryScope;
|
use App\Support\WorkspaceIsolation\TenantOwnedQueryScope;
|
||||||
use App\Support\WorkspaceIsolation\TenantOwnedRecordResolver;
|
use App\Support\WorkspaceIsolation\TenantOwnedRecordResolver;
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
use Illuminate\Database\Eloquent\Builder;
|
||||||
@ -23,7 +23,7 @@ protected static function tenantOwnedRelationshipName(): string
|
|||||||
: 'tenant';
|
: 'tenant';
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveTenantContextForTenantOwnedRecords(): ?ManagedEnvironment
|
protected static function resolveTenantContextForTenantOwnedRecords(): ?Tenant
|
||||||
{
|
{
|
||||||
if (method_exists(static::class, 'resolveTenantContextForCurrentPanel')) {
|
if (method_exists(static::class, 'resolveTenantContextForCurrentPanel')) {
|
||||||
return static::resolveTenantContextForCurrentPanel();
|
return static::resolveTenantContextForCurrentPanel();
|
||||||
@ -41,7 +41,7 @@ public static function getTenantOwnedEloquentQuery(): Builder
|
|||||||
return static::scopeTenantOwnedQuery(parent::getEloquentQuery());
|
return static::scopeTenantOwnedQuery(parent::getEloquentQuery());
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function scopeTenantOwnedQuery(Builder $query, ?ManagedEnvironment $tenant = null): Builder
|
protected static function scopeTenantOwnedQuery(Builder $query, ?Tenant $tenant = null): Builder
|
||||||
{
|
{
|
||||||
return app(TenantOwnedQueryScope::class)->apply(
|
return app(TenantOwnedQueryScope::class)->apply(
|
||||||
$query,
|
$query,
|
||||||
@ -50,7 +50,7 @@ protected static function scopeTenantOwnedQuery(Builder $query, ?ManagedEnvironm
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveTenantOwnedRecord(Model|int|string|null $record, ?Builder $query = null, ?ManagedEnvironment $tenant = null): ?Model
|
protected static function resolveTenantOwnedRecord(Model|int|string|null $record, ?Builder $query = null, ?Tenant $tenant = null): ?Model
|
||||||
{
|
{
|
||||||
$scopedQuery = static::scopeTenantOwnedQuery(
|
$scopedQuery = static::scopeTenantOwnedQuery(
|
||||||
$query ?? parent::getEloquentQuery(),
|
$query ?? parent::getEloquentQuery(),
|
||||||
@ -60,7 +60,7 @@ protected static function resolveTenantOwnedRecord(Model|int|string|null $record
|
|||||||
return app(TenantOwnedRecordResolver::class)->resolve($scopedQuery, $record);
|
return app(TenantOwnedRecordResolver::class)->resolve($scopedQuery, $record);
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveTenantOwnedRecordOrFail(Model|int|string|null $record, ?Builder $query = null, ?ManagedEnvironment $tenant = null): Model
|
protected static function resolveTenantOwnedRecordOrFail(Model|int|string|null $record, ?Builder $query = null, ?Tenant $tenant = null): Model
|
||||||
{
|
{
|
||||||
$scopedQuery = static::scopeTenantOwnedQuery(
|
$scopedQuery = static::scopeTenantOwnedQuery(
|
||||||
$query ?? parent::getEloquentQuery(),
|
$query ?? parent::getEloquentQuery(),
|
||||||
|
|||||||
@ -4,50 +4,50 @@
|
|||||||
|
|
||||||
namespace App\Filament\Concerns;
|
namespace App\Filament\Concerns;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\OperateHub\OperateHubShell;
|
use App\Support\OperateHub\OperateHubShell;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use RuntimeException;
|
use RuntimeException;
|
||||||
|
|
||||||
trait ResolvesPanelTenantContext
|
trait ResolvesPanelTenantContext
|
||||||
{
|
{
|
||||||
protected static function resolveTenantContextForCurrentPanel(): ?ManagedEnvironment
|
protected static function resolveTenantContextForCurrentPanel(): ?Tenant
|
||||||
{
|
{
|
||||||
$request = request();
|
$request = request();
|
||||||
|
|
||||||
if (static::currentPanelId($request) === 'admin') {
|
if (static::currentPanelId($request) === 'admin') {
|
||||||
$tenant = app(OperateHubShell::class)->tenantOwnedPanelContext(request());
|
$tenant = app(OperateHubShell::class)->tenantOwnedPanelContext(request());
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment ? $tenant : null;
|
return $tenant instanceof Tenant ? $tenant : null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::current();
|
$tenant = Tenant::current();
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment ? $tenant : null;
|
return $tenant instanceof Tenant ? $tenant : null;
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function panelTenantContext(): ?ManagedEnvironment
|
public static function panelTenantContext(): ?Tenant
|
||||||
{
|
{
|
||||||
return static::resolveTenantContextForCurrentPanel();
|
return static::resolveTenantContextForCurrentPanel();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function trustedPanelTenantContext(): ?ManagedEnvironment
|
public static function trustedPanelTenantContext(): ?Tenant
|
||||||
{
|
{
|
||||||
return static::panelTenantContext();
|
return static::panelTenantContext();
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveTenantContextForCurrentPanelOrFail(): ManagedEnvironment
|
protected static function resolveTenantContextForCurrentPanelOrFail(): Tenant
|
||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
throw new RuntimeException('No tenant context selected.');
|
throw new RuntimeException('No tenant context selected.');
|
||||||
}
|
}
|
||||||
|
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveTrustedPanelTenantContextOrFail(): ManagedEnvironment
|
protected static function resolveTrustedPanelTenantContextOrFail(): Tenant
|
||||||
{
|
{
|
||||||
return static::resolveTenantContextForCurrentPanelOrFail();
|
return static::resolveTenantContextForCurrentPanelOrFail();
|
||||||
}
|
}
|
||||||
@ -65,6 +65,10 @@ private static function currentPanelId(mixed $request): ?string
|
|||||||
: null;
|
: null;
|
||||||
|
|
||||||
if (is_string($routeName) && $routeName !== '') {
|
if (is_string($routeName) && $routeName !== '') {
|
||||||
|
if (str_contains($routeName, '.tenant.')) {
|
||||||
|
return 'tenant';
|
||||||
|
}
|
||||||
|
|
||||||
if (str_contains($routeName, '.admin.')) {
|
if (str_contains($routeName, '.admin.')) {
|
||||||
return 'admin';
|
return 'admin';
|
||||||
}
|
}
|
||||||
@ -74,6 +78,10 @@ private static function currentPanelId(mixed $request): ?string
|
|||||||
? '/'.ltrim((string) $request->path(), '/')
|
? '/'.ltrim((string) $request->path(), '/')
|
||||||
: null;
|
: null;
|
||||||
|
|
||||||
|
if (is_string($path) && str_starts_with($path, '/admin/t/')) {
|
||||||
|
return 'tenant';
|
||||||
|
}
|
||||||
|
|
||||||
if (is_string($path) && str_starts_with($path, '/admin/')) {
|
if (is_string($path) && str_starts_with($path, '/admin/')) {
|
||||||
return 'admin';
|
return 'admin';
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
namespace App\Filament\Concerns;
|
namespace App\Filament\Concerns;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\OperateHub\OperateHubShell;
|
use App\Support\OperateHub\OperateHubShell;
|
||||||
use App\Support\WorkspaceIsolation\TenantOwnedModelFamilies;
|
use App\Support\WorkspaceIsolation\TenantOwnedModelFamilies;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
@ -54,7 +54,7 @@ protected static function resolveGlobalSearchTenant(): ?Model
|
|||||||
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
$tenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$tenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment ? $tenant : null;
|
return $tenant instanceof Tenant ? $tenant : null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = Filament::getTenant();
|
$tenant = Filament::getTenant();
|
||||||
|
|||||||
@ -1,152 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
declare(strict_types=1);
|
|
||||||
|
|
||||||
namespace App\Filament\Concerns;
|
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
|
||||||
use App\Models\Workspace;
|
|
||||||
use Filament\Facades\Filament;
|
|
||||||
use Filament\Panel;
|
|
||||||
use Illuminate\Database\Eloquent\Model;
|
|
||||||
|
|
||||||
trait WorkspaceScopedTenantRoutes
|
|
||||||
{
|
|
||||||
public static function getSlug(?Panel $panel = null): string
|
|
||||||
{
|
|
||||||
return static::workspaceScopedSlug(parent::getSlug($panel), $panel);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<string, mixed> $parameters
|
|
||||||
*/
|
|
||||||
public static function getUrl(?string $name = null, array $parameters = [], bool $isAbsolute = true, ?string $panel = null, ?Model $tenant = null, bool $shouldGuessMissingParameters = false): string
|
|
||||||
{
|
|
||||||
$panelId = $panel ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
|
||||||
|
|
||||||
if ($panelId !== 'admin') {
|
|
||||||
return parent::getUrl($name, $parameters, $isAbsolute, $panelId, $tenant, $shouldGuessMissingParameters);
|
|
||||||
}
|
|
||||||
|
|
||||||
$resolvedTenant = static::resolveWorkspaceScopedTenant($parameters, $tenant);
|
|
||||||
|
|
||||||
if (! $resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = static::resolveWorkspaceScopedWorkspace($resolvedTenant, $parameters);
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace && ! is_string($workspace) && ! is_int($workspace)) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$parameters['environment'] ??= $resolvedTenant;
|
|
||||||
$parameters['workspace'] ??= $workspace;
|
|
||||||
unset($parameters['tenant']);
|
|
||||||
|
|
||||||
return parent::getUrl($name, $parameters, $isAbsolute, $panelId, null, $shouldGuessMissingParameters);
|
|
||||||
}
|
|
||||||
|
|
||||||
protected static function workspaceScopedSlug(string $slug, ?Panel $panel = null): string
|
|
||||||
{
|
|
||||||
if (! static::shouldUseWorkspaceScopedTenantRoutes($panel)) {
|
|
||||||
return $slug;
|
|
||||||
}
|
|
||||||
|
|
||||||
$prefix = 'workspaces/{workspace}/environments/{environment}/';
|
|
||||||
|
|
||||||
return str_starts_with($slug, $prefix)
|
|
||||||
? $slug
|
|
||||||
: $prefix.ltrim($slug, '/');
|
|
||||||
}
|
|
||||||
|
|
||||||
protected static function shouldUseWorkspaceScopedTenantRoutes(?Panel $panel = null): bool
|
|
||||||
{
|
|
||||||
$panelId = $panel?->getId() ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
|
||||||
|
|
||||||
return $panelId === 'admin';
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<string, mixed> $parameters
|
|
||||||
*/
|
|
||||||
protected static function resolveWorkspaceScopedTenant(array $parameters, ?Model $tenant = null): ?ManagedEnvironment
|
|
||||||
{
|
|
||||||
$parameterTenant = $parameters['tenant'] ?? $parameters['environment'] ?? null;
|
|
||||||
|
|
||||||
if ($parameterTenant instanceof ManagedEnvironment) {
|
|
||||||
return $parameterTenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
|
||||||
return $tenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
$record = $parameters['record'] ?? null;
|
|
||||||
|
|
||||||
if ($record instanceof Model) {
|
|
||||||
$relationshipName = static::workspaceScopedTenantRelationshipName();
|
|
||||||
|
|
||||||
if (method_exists($record, $relationshipName)) {
|
|
||||||
$recordTenant = $record->getRelationValue($relationshipName);
|
|
||||||
|
|
||||||
if (! $recordTenant instanceof ManagedEnvironment) {
|
|
||||||
$recordTenant = $record->{$relationshipName}()->first();
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($recordTenant instanceof ManagedEnvironment) {
|
|
||||||
return $recordTenant;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (method_exists(static::class, 'resolveTenantContextForCurrentPanel')) {
|
|
||||||
$resolvedTenant = static::resolveTenantContextForCurrentPanel();
|
|
||||||
|
|
||||||
if ($resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return $resolvedTenant;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (method_exists(static::class, 'panelTenantContext')) {
|
|
||||||
$resolvedTenant = static::panelTenantContext();
|
|
||||||
|
|
||||||
if ($resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return $resolvedTenant;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<string, mixed> $parameters
|
|
||||||
*/
|
|
||||||
protected static function resolveWorkspaceScopedWorkspace(ManagedEnvironment $tenant, array $parameters): Workspace|string|int|null
|
|
||||||
{
|
|
||||||
$workspace = $parameters['workspace'] ?? null;
|
|
||||||
|
|
||||||
if ($workspace instanceof Workspace || is_string($workspace) || is_int($workspace)) {
|
|
||||||
return $workspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenantWorkspace = $tenant->workspace;
|
|
||||||
|
|
||||||
if ($tenantWorkspace instanceof Workspace) {
|
|
||||||
return $tenantWorkspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $tenant->workspace()->first();
|
|
||||||
}
|
|
||||||
|
|
||||||
protected static function workspaceScopedTenantRelationshipName(): string
|
|
||||||
{
|
|
||||||
$relationshipName = property_exists(static::class, 'tenantOwnershipRelationshipName')
|
|
||||||
? static::$tenantOwnershipRelationshipName
|
|
||||||
: null;
|
|
||||||
|
|
||||||
return is_string($relationshipName) && $relationshipName !== ''
|
|
||||||
? $relationshipName
|
|
||||||
: 'tenant';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -9,7 +9,7 @@
|
|||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\BaselineProfile;
|
use App\Models\BaselineProfile;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Baselines\BaselineCompareService;
|
use App\Services\Baselines\BaselineCompareService;
|
||||||
@ -18,7 +18,6 @@
|
|||||||
use App\Support\Baselines\BaselineCompareEvidenceGapDetails;
|
use App\Support\Baselines\BaselineCompareEvidenceGapDetails;
|
||||||
use App\Support\Baselines\BaselineCompareStats;
|
use App\Support\Baselines\BaselineCompareStats;
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Baselines\TenantGovernanceAggregate;
|
use App\Support\Baselines\TenantGovernanceAggregate;
|
||||||
use App\Support\Baselines\TenantGovernanceAggregateResolver;
|
use App\Support\Baselines\TenantGovernanceAggregateResolver;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
@ -106,12 +105,6 @@ class BaselineCompareLanding extends Page
|
|||||||
|
|
||||||
protected string $view = 'filament.pages.baseline-compare-landing';
|
protected string $view = 'filament.pages.baseline-compare-landing';
|
||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
|
||||||
{
|
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
|
||||||
&& parent::shouldRegisterNavigation();
|
|
||||||
}
|
|
||||||
|
|
||||||
public ?string $state = null;
|
public ?string $state = null;
|
||||||
|
|
||||||
public ?string $message = null;
|
public ?string $message = null;
|
||||||
@ -192,7 +185,7 @@ public static function canAccess(): bool
|
|||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -224,7 +217,7 @@ public function refreshStats(): void
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$stats = BaselineCompareStats::forTenant($tenant);
|
$stats = BaselineCompareStats::forTenant($tenant);
|
||||||
$aggregate = $tenant instanceof ManagedEnvironment
|
$aggregate = $tenant instanceof Tenant
|
||||||
? $this->governanceAggregate($tenant, $stats)
|
? $this->governanceAggregate($tenant, $stats)
|
||||||
: null;
|
: null;
|
||||||
|
|
||||||
@ -449,7 +442,7 @@ private function compareNowAction(): Action
|
|||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
Notification::make()->title('Select a tenant to compare baselines')->danger()->send();
|
Notification::make()->title('Select a tenant to compare baselines')->danger()->send();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
@ -516,7 +509,7 @@ public function getFindingsUrl(): ?string
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -531,7 +524,7 @@ public function getRunUrl(): ?string
|
|||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -558,7 +551,7 @@ public function openCompareMatrixUrl(): ?string
|
|||||||
return $url.(str_contains($url, '?') ? '&' : '?').http_build_query($query);
|
return $url.(str_contains($url, '?') ? '&' : '?').http_build_query($query);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function governanceAggregate(ManagedEnvironment $tenant, BaselineCompareStats $stats): TenantGovernanceAggregate
|
private function governanceAggregate(Tenant $tenant, BaselineCompareStats $stats): TenantGovernanceAggregate
|
||||||
{
|
{
|
||||||
/** @var TenantGovernanceAggregateResolver $resolver */
|
/** @var TenantGovernanceAggregateResolver $resolver */
|
||||||
$resolver = app(TenantGovernanceAggregateResolver::class);
|
$resolver = app(TenantGovernanceAggregateResolver::class);
|
||||||
@ -582,7 +575,7 @@ private function resolveCompareMatrixProfile(): ?BaselineProfile
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\BaselineProfileResource;
|
use App\Filament\Resources\BaselineProfileResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\BaselineProfile;
|
use App\Models\BaselineProfile;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
@ -200,7 +200,7 @@ class BaselineCompareMatrix extends Page implements HasForms
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep bounded navigation plus confirmation-gated compare fan-out for visible assigned environments.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep bounded navigation plus confirmation-gated compare fan-out for visible assigned tenants.')
|
||||||
->exempt(ActionSurfaceSlot::InspectAffordance, 'The matrix intentionally forbids row click; only explicit tenant, subject, cell, and run drilldowns are rendered.')
|
->exempt(ActionSurfaceSlot::InspectAffordance, 'The matrix intentionally forbids row click; only explicit tenant, subject, cell, and run drilldowns are rendered.')
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The matrix does not use a row-level secondary-actions menu.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The matrix does not use a row-level secondary-actions menu.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The matrix has no bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The matrix has no bulk actions.')
|
||||||
@ -283,7 +283,7 @@ public function form(Schema $schema): Schema
|
|||||||
])
|
])
|
||||||
->schema([
|
->schema([
|
||||||
Select::make('draftTenantSort')
|
Select::make('draftTenantSort')
|
||||||
->label('ManagedEnvironment sort')
|
->label('Tenant sort')
|
||||||
->options(fn (): array => $this->matrixOptions('tenantSortOptions'))
|
->options(fn (): array => $this->matrixOptions('tenantSortOptions'))
|
||||||
->default('tenant_name')
|
->default('tenant_name')
|
||||||
->native(false)
|
->native(false)
|
||||||
@ -341,11 +341,11 @@ protected function getHeaderActions(): array
|
|||||||
$profile = $this->getRecord();
|
$profile = $this->getRecord();
|
||||||
|
|
||||||
$compareAssignedTenantsAction = Action::make('compareAssignedTenants')
|
$compareAssignedTenantsAction = Action::make('compareAssignedTenants')
|
||||||
->label('Compare assigned environments')
|
->label('Compare assigned tenants')
|
||||||
->icon('heroicon-o-play')
|
->icon('heroicon-o-play')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading('Compare assigned environments')
|
->modalHeading('Compare assigned tenants')
|
||||||
->modalDescription('Simulation only. This starts the normal environment-owned baseline compare path for the visible assigned set. No workspace umbrella run is created.')
|
->modalDescription('Simulation only. This starts the normal tenant-owned baseline compare path for the visible assigned set. No workspace umbrella run is created.')
|
||||||
->disabled(fn (): bool => $this->compareAssignedTenantsDisabledReason() !== null)
|
->disabled(fn (): bool => $this->compareAssignedTenantsDisabledReason() !== null)
|
||||||
->tooltip(fn (): ?string => $this->compareAssignedTenantsDisabledReason())
|
->tooltip(fn (): ?string => $this->compareAssignedTenantsDisabledReason())
|
||||||
->action(fn (): mixed => $this->compareAssignedTenants());
|
->action(fn (): mixed => $this->compareAssignedTenants());
|
||||||
@ -441,12 +441,13 @@ public function tenantCompareUrl(int $tenantId, ?string $subjectKey = null): ?st
|
|||||||
{
|
{
|
||||||
$tenant = $this->tenant($tenantId);
|
$tenant = $this->tenant($tenantId);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return BaselineCompareLanding::getUrl(
|
return BaselineCompareLanding::getUrl(
|
||||||
parameters: $this->navigationContext($tenant, $subjectKey)->toQuery(),
|
parameters: $this->navigationContext($tenant, $subjectKey)->toQuery(),
|
||||||
|
panel: 'tenant',
|
||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
@ -455,7 +456,7 @@ public function findingUrl(int $tenantId, int $findingId, ?string $subjectKey =
|
|||||||
{
|
{
|
||||||
$tenant = $this->tenant($tenantId);
|
$tenant = $this->tenant($tenantId);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -572,7 +573,7 @@ public function stagedFilterSummary(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
if ($this->draftTenantSort !== $this->tenantSort) {
|
if ($this->draftTenantSort !== $this->tenantSort) {
|
||||||
$summary['ManagedEnvironment sort'] = $this->draftTenantSort;
|
$summary['Tenant sort'] = $this->draftTenantSort;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($this->draftSubjectSort !== $this->subjectSort) {
|
if ($this->draftSubjectSort !== $this->subjectSort) {
|
||||||
@ -734,11 +735,11 @@ private function compareAssignedTenantsDisabledReason(): ?string
|
|||||||
$reference = is_array($this->matrix['reference'] ?? null) ? $this->matrix['reference'] : [];
|
$reference = is_array($this->matrix['reference'] ?? null) ? $this->matrix['reference'] : [];
|
||||||
|
|
||||||
if (($reference['referenceState'] ?? null) !== 'ready') {
|
if (($reference['referenceState'] ?? null) !== 'ready') {
|
||||||
return 'Capture a complete baseline snapshot before comparing assigned environments.';
|
return 'Capture a complete baseline snapshot before comparing assigned tenants.';
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) ($reference['visibleTenantCount'] ?? 0) === 0) {
|
if ((int) ($reference['visibleTenantCount'] ?? 0) === 0) {
|
||||||
return 'No visible assigned environments are available for compare.';
|
return 'No visible assigned tenants are available for compare.';
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->compareStartReasonMessage($this->compareAssignedTenantsReasonCode());
|
return $this->compareStartReasonMessage($this->compareAssignedTenantsReasonCode());
|
||||||
@ -768,10 +769,10 @@ private function compareAssignedTenantsReasonCode(): ?string
|
|||||||
private function compareStartReasonMessage(?string $reasonCode): ?string
|
private function compareStartReasonMessage(?string $reasonCode): ?string
|
||||||
{
|
{
|
||||||
return match ($reasonCode) {
|
return match ($reasonCode) {
|
||||||
BaselineReasonCodes::COMPARE_INVALID_SCOPE => 'The assigned baseline scope is invalid and must be reviewed before comparing assigned environments.',
|
BaselineReasonCodes::COMPARE_INVALID_SCOPE => 'The assigned baseline scope is invalid and must be reviewed before comparing assigned tenants.',
|
||||||
BaselineReasonCodes::COMPARE_UNSUPPORTED_SCOPE => 'The selected governed subjects are not supported by any compare strategy yet.',
|
BaselineReasonCodes::COMPARE_UNSUPPORTED_SCOPE => 'The selected governed subjects are not supported by any compare strategy yet.',
|
||||||
BaselineReasonCodes::COMPARE_MIXED_SCOPE => 'The selected governed subjects span multiple compare strategy families and must be narrowed before comparing assigned environments.',
|
BaselineReasonCodes::COMPARE_MIXED_SCOPE => 'The selected governed subjects span multiple compare strategy families and must be narrowed before comparing assigned tenants.',
|
||||||
'tenant_sync_required' => 'You need environment sync access for each visible environment before compare can start.',
|
'tenant_sync_required' => 'You need tenant sync access for each visible tenant before compare can start.',
|
||||||
default => null,
|
default => null,
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
@ -854,7 +855,7 @@ private function routeParameters(array $overrides = []): array
|
|||||||
], static fn (mixed $value): bool => $value !== null && $value !== [] && $value !== '');
|
], static fn (mixed $value): bool => $value !== null && $value !== [] && $value !== '');
|
||||||
}
|
}
|
||||||
|
|
||||||
private function navigationContext(?ManagedEnvironment $tenant = null, ?string $subjectKey = null): CanonicalNavigationContext
|
private function navigationContext(?Tenant $tenant = null, ?string $subjectKey = null): CanonicalNavigationContext
|
||||||
{
|
{
|
||||||
/** @var BaselineProfile $profile */
|
/** @var BaselineProfile $profile */
|
||||||
$profile = $this->getRecord();
|
$profile = $this->getRecord();
|
||||||
@ -869,9 +870,9 @@ private function navigationContext(?ManagedEnvironment $tenant = null, ?string $
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function tenant(int $tenantId): ?ManagedEnvironment
|
private function tenant(int $tenantId): ?Tenant
|
||||||
{
|
{
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->whereKey($tenantId)
|
->whereKey($tenantId)
|
||||||
->where('workspace_id', (int) $this->getRecord()->workspace_id)
|
->where('workspace_id', (int) $this->getRecord()->workspace_id)
|
||||||
->first();
|
->first();
|
||||||
|
|||||||
@ -4,11 +4,10 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages;
|
namespace App\Filament\Pages;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\UserTenantPreference;
|
use App\Models\UserTenantPreference;
|
||||||
use App\Services\Tenants\TenantOperabilityService;
|
use App\Services\Tenants\TenantOperabilityService;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Tenants\TenantInteractionLane;
|
use App\Support\Tenants\TenantInteractionLane;
|
||||||
use App\Support\Tenants\TenantLifecyclePresentation;
|
use App\Support\Tenants\TenantLifecyclePresentation;
|
||||||
use App\Support\Tenants\TenantOperabilityQuestion;
|
use App\Support\Tenants\TenantOperabilityQuestion;
|
||||||
@ -18,7 +17,7 @@
|
|||||||
use Illuminate\Database\Eloquent\Collection;
|
use Illuminate\Database\Eloquent\Collection;
|
||||||
use Illuminate\Support\Facades\Schema;
|
use Illuminate\Support\Facades\Schema;
|
||||||
|
|
||||||
class ChooseEnvironment extends Page
|
class ChooseTenant extends Page
|
||||||
{
|
{
|
||||||
protected static string $layout = 'filament-panels::components.layout.simple';
|
protected static string $layout = 'filament-panels::components.layout.simple';
|
||||||
|
|
||||||
@ -26,14 +25,11 @@ class ChooseEnvironment extends Page
|
|||||||
|
|
||||||
protected static bool $isDiscovered = false;
|
protected static bool $isDiscovered = false;
|
||||||
|
|
||||||
protected static ?string $slug = 'choose-environment';
|
protected static ?string $slug = 'choose-tenant';
|
||||||
|
|
||||||
protected string $view = 'filament.pages.choose-environment';
|
protected static ?string $title = 'Choose tenant';
|
||||||
|
|
||||||
public function getTitle(): string
|
protected string $view = 'filament.pages.choose-tenant';
|
||||||
{
|
|
||||||
return __('localization.shell.choose_environment');
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Disable the simple-layout topbar to prevent lazy-loaded
|
* Disable the simple-layout topbar to prevent lazy-loaded
|
||||||
@ -47,14 +43,14 @@ protected function getLayoutData(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return Collection<int, ManagedEnvironment>
|
* @return Collection<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function getTenants(): Collection
|
public function getTenants(): Collection
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
if (! $user instanceof User) {
|
||||||
return ManagedEnvironment::query()->whereRaw('1 = 0')->get();
|
return Tenant::query()->whereRaw('1 = 0')->get();
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenants = $user->getTenants(Filament::getCurrentOrDefaultPanel());
|
$tenants = $user->getTenants(Filament::getCurrentOrDefaultPanel());
|
||||||
@ -66,7 +62,7 @@ public function getTenants(): Collection
|
|||||||
return app(TenantOperabilityService::class)->filterSelectable(collect($tenants));
|
return app(TenantOperabilityService::class)->filterSelectable(collect($tenants));
|
||||||
}
|
}
|
||||||
|
|
||||||
public function selectEnvironment(int $tenantId): void
|
public function selectTenant(int $tenantId): void
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
@ -79,9 +75,9 @@ public function selectEnvironment(int $tenantId): void
|
|||||||
$tenant = null;
|
$tenant = null;
|
||||||
|
|
||||||
if ($workspaceId === null) {
|
if ($workspaceId === null) {
|
||||||
$tenant = ManagedEnvironment::query()->whereKey($tenantId)->first();
|
$tenant = Tenant::query()->whereKey($tenantId)->first();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
$workspace = $tenant->workspace;
|
$workspace = $tenant->workspace;
|
||||||
|
|
||||||
if ($workspace !== null && $user->canAccessTenant($tenant)) {
|
if ($workspace !== null && $user->canAccessTenant($tenant)) {
|
||||||
@ -97,14 +93,14 @@ public function selectEnvironment(int $tenantId): void
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || (int) $tenant->workspace_id !== $workspaceId) {
|
if (! $tenant instanceof Tenant || (int) $tenant->workspace_id !== $workspaceId) {
|
||||||
$tenant = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->where('workspace_id', $workspaceId)
|
->where('workspace_id', $workspaceId)
|
||||||
->whereKey($tenantId)
|
->whereKey($tenantId)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -130,15 +126,15 @@ public function selectEnvironment(int $tenantId): void
|
|||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->redirect(ManagedEnvironmentLinks::viewUrl($tenant));
|
$this->redirect(TenantDashboard::getUrl(panel: 'tenant', tenant: $tenant));
|
||||||
}
|
}
|
||||||
|
|
||||||
public function tenantLifecyclePresentation(ManagedEnvironment $tenant): TenantLifecyclePresentation
|
public function tenantLifecyclePresentation(Tenant $tenant): TenantLifecyclePresentation
|
||||||
{
|
{
|
||||||
return TenantLifecyclePresentation::fromTenant($tenant);
|
return TenantLifecyclePresentation::fromTenant($tenant);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function persistLastTenant(User $user, ManagedEnvironment $tenant): void
|
private function persistLastTenant(User $user, Tenant $tenant): void
|
||||||
{
|
{
|
||||||
if (Schema::hasColumn('users', 'last_tenant_id')) {
|
if (Schema::hasColumn('users', 'last_tenant_id')) {
|
||||||
$user->forceFill(['last_tenant_id' => $tenant->getKey()])->save();
|
$user->forceFill(['last_tenant_id' => $tenant->getKey()])->save();
|
||||||
@ -146,12 +142,12 @@ private function persistLastTenant(User $user, ManagedEnvironment $tenant): void
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! Schema::hasTable('user_managed_environment_preferences')) {
|
if (! Schema::hasTable('user_tenant_preferences')) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
UserTenantPreference::query()->updateOrCreate(
|
UserTenantPreference::query()->updateOrCreate(
|
||||||
['user_id' => $user->getKey(), 'managed_environment_id' => $tenant->getKey()],
|
['user_id' => $user->getKey(), 'tenant_id' => $tenant->getKey()],
|
||||||
['last_used_at' => now()]
|
['last_used_at' => now()]
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
@ -63,10 +63,8 @@ public function getWorkspaces(): Collection
|
|||||||
->where('user_id', $user->getKey());
|
->where('user_id', $user->getKey());
|
||||||
})
|
})
|
||||||
->whereNull('archived_at')
|
->whereNull('archived_at')
|
||||||
->whereNull('closed_at')
|
|
||||||
->withCount(['tenants' => function ($query): void {
|
->withCount(['tenants' => function ($query): void {
|
||||||
$query->where('lifecycle_status', 'active')
|
$query->where('status', 'active');
|
||||||
->whereNull('removed_from_workspace_at');
|
|
||||||
}])
|
}])
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->get();
|
->get();
|
||||||
@ -96,7 +94,7 @@ public function selectWorkspace(int $workspaceId): void
|
|||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $workspace->isSelectableAsContext()) {
|
if (! empty($workspace->archived_at)) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -4,51 +4,43 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages;
|
namespace App\Filament\Pages;
|
||||||
|
|
||||||
|
use App\Filament\Resources\TenantResource;
|
||||||
use App\Models\InventoryItem;
|
use App\Models\InventoryItem;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
use App\Services\PortfolioCompare\CrossEnvironmentPromotionExecutionService;
|
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\OperationalControls\OperationalControlBlockedException;
|
use App\Support\PortfolioCompare\CrossTenantComparePreviewBuilder;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\PortfolioCompare\CrossTenantCompareSelection;
|
||||||
use App\Support\OpsUx\OpsUxBrowserEvents;
|
use App\Support\PortfolioCompare\CrossTenantPromotionPreflight;
|
||||||
use App\Support\OpsUx\ProviderOperationStartResultPresenter;
|
|
||||||
use App\Support\PortfolioCompare\CrossEnvironmentComparePreviewBuilder;
|
|
||||||
use App\Support\PortfolioCompare\CrossEnvironmentCompareSelection;
|
|
||||||
use App\Support\PortfolioCompare\CrossEnvironmentPromotionPreflight;
|
|
||||||
use App\Support\Rbac\WorkspaceUiEnforcement;
|
use App\Support\Rbac\WorkspaceUiEnforcement;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
use App\Support\Workspaces\WorkspaceContext;
|
||||||
use BackedEnum;
|
use BackedEnum;
|
||||||
use DomainException;
|
|
||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Notifications\Notification;
|
|
||||||
use Filament\Forms\Components\Select;
|
use Filament\Forms\Components\Select;
|
||||||
use Filament\Forms\Concerns\InteractsWithForms;
|
use Filament\Forms\Concerns\InteractsWithForms;
|
||||||
use Filament\Forms\Contracts\HasForms;
|
use Filament\Forms\Contracts\HasForms;
|
||||||
use Filament\Pages\Page;
|
use Filament\Pages\Page;
|
||||||
use Filament\Schemas\Components\Grid;
|
use Filament\Schemas\Components\Grid;
|
||||||
use Filament\Schemas\Schema;
|
use Filament\Schemas\Schema;
|
||||||
use InvalidArgumentException;
|
|
||||||
use Illuminate\Support\Collection;
|
use Illuminate\Support\Collection;
|
||||||
use Illuminate\Support\Str;
|
use Illuminate\Support\Str;
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
|
|
||||||
class CrossEnvironmentComparePage extends Page implements HasForms
|
class CrossTenantComparePage extends Page implements HasForms
|
||||||
{
|
{
|
||||||
use InteractsWithForms;
|
use InteractsWithForms;
|
||||||
|
|
||||||
private const string SOURCE_ENVIRONMENT_QUERY_KEY = 'source_environment_id';
|
private const string SOURCE_TENANT_QUERY_KEY = 'source_tenant_id';
|
||||||
|
|
||||||
private const string TARGET_ENVIRONMENT_QUERY_KEY = 'target_environment_id';
|
private const string TARGET_TENANT_QUERY_KEY = 'target_tenant_id';
|
||||||
|
|
||||||
private const string POLICY_TYPE_QUERY_KEY = 'policy_type';
|
private const string POLICY_TYPE_QUERY_KEY = 'policy_type';
|
||||||
|
|
||||||
@ -60,15 +52,15 @@ class CrossEnvironmentComparePage extends Page implements HasForms
|
|||||||
|
|
||||||
protected static string|UnitEnum|null $navigationGroup = 'Governance';
|
protected static string|UnitEnum|null $navigationGroup = 'Governance';
|
||||||
|
|
||||||
protected static ?string $title = 'Cross-environment compare';
|
protected static ?string $title = 'Cross-Tenant Compare';
|
||||||
|
|
||||||
protected static ?string $slug = 'cross-environment-compare';
|
protected static ?string $slug = 'cross-tenant-compare';
|
||||||
|
|
||||||
protected string $view = 'filament.pages.cross-environment-compare';
|
protected string $view = 'filament.pages.cross-tenant-compare';
|
||||||
|
|
||||||
public ?string $sourceEnvironmentId = null;
|
public ?string $sourceTenantId = null;
|
||||||
|
|
||||||
public ?string $targetEnvironmentId = null;
|
public ?string $targetTenantId = null;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var list<string>
|
* @var list<string>
|
||||||
@ -95,12 +87,12 @@ class CrossEnvironmentComparePage extends Page implements HasForms
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions preserve return navigation, environment drill-downs, and one dominant promotion-preflight action.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions preserve return navigation, tenant drill-downs, and one dominant promotion-preflight action.')
|
||||||
->exempt(ActionSurfaceSlot::InspectAffordance, 'The compare page uses explicit selection controls instead of row-click inspection.')
|
->exempt(ActionSurfaceSlot::InspectAffordance, 'The compare page uses explicit selection controls instead of row-click inspection.')
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'Cross-environment compare renders focused subject summaries instead of row-level overflow actions.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'Cross-tenant compare renders focused subject summaries instead of row-level overflow actions.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The compare page has no bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The compare page has no bulk actions.')
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The compare page explains when a selection is incomplete or invalid before any preview exists.')
|
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The compare page explains when a selection is incomplete or invalid before any preview exists.')
|
||||||
->exempt(ActionSurfaceSlot::DetailHeader, 'Cross-environment compare is a workspace decision page, not a record detail header.');
|
->exempt(ActionSurfaceSlot::DetailHeader, 'Cross-tenant compare is a workspace decision page, not a record detail header.');
|
||||||
}
|
}
|
||||||
|
|
||||||
public function mount(): void
|
public function mount(): void
|
||||||
@ -124,24 +116,24 @@ public function form(Schema $schema): Schema
|
|||||||
'xl' => 3,
|
'xl' => 3,
|
||||||
])
|
])
|
||||||
->schema([
|
->schema([
|
||||||
Select::make('sourceEnvironmentId')
|
Select::make('sourceTenantId')
|
||||||
->label('Source environment')
|
->label('Source tenant')
|
||||||
->options(fn (): array => $this->environmentOptions())
|
->options(fn (): array => $this->tenantOptions())
|
||||||
->searchable()
|
->searchable()
|
||||||
->preload()
|
->preload()
|
||||||
->native(false)
|
->native(false)
|
||||||
->placeholder('Select a source environment')
|
->placeholder('Select a source tenant')
|
||||||
->extraFieldWrapperAttributes(['data-testid' => 'cross-environment-source'])
|
->extraFieldWrapperAttributes(['data-testid' => 'cross-tenant-source'])
|
||||||
->extraInputAttributes(['data-testid' => 'cross-environment-source']),
|
->extraInputAttributes(['data-testid' => 'cross-tenant-source']),
|
||||||
Select::make('targetEnvironmentId')
|
Select::make('targetTenantId')
|
||||||
->label('Target environment')
|
->label('Target tenant')
|
||||||
->options(fn (): array => $this->environmentOptions())
|
->options(fn (): array => $this->tenantOptions())
|
||||||
->searchable()
|
->searchable()
|
||||||
->preload()
|
->preload()
|
||||||
->native(false)
|
->native(false)
|
||||||
->placeholder('Select a target environment')
|
->placeholder('Select a target tenant')
|
||||||
->extraFieldWrapperAttributes(['data-testid' => 'cross-environment-target'])
|
->extraFieldWrapperAttributes(['data-testid' => 'cross-tenant-target'])
|
||||||
->extraInputAttributes(['data-testid' => 'cross-environment-target']),
|
->extraInputAttributes(['data-testid' => 'cross-tenant-target']),
|
||||||
Select::make('selectedPolicyTypes')
|
Select::make('selectedPolicyTypes')
|
||||||
->label('Governed subjects')
|
->label('Governed subjects')
|
||||||
->options(fn (): array => $this->policyTypeOptions())
|
->options(fn (): array => $this->policyTypeOptions())
|
||||||
@ -151,10 +143,10 @@ public function form(Schema $schema): Schema
|
|||||||
->native(false)
|
->native(false)
|
||||||
->placeholder('All governed subjects')
|
->placeholder('All governed subjects')
|
||||||
->helperText(fn (): ?string => $this->policyTypeOptions() === []
|
->helperText(fn (): ?string => $this->policyTypeOptions() === []
|
||||||
? 'Governed subject filters appear after authorized environment inventory exists in the active workspace.'
|
? 'Governed subject filters appear after authorized tenant inventory exists in the active workspace.'
|
||||||
: null)
|
: null)
|
||||||
->extraFieldWrapperAttributes(['data-testid' => 'cross-environment-policy-types'])
|
->extraFieldWrapperAttributes(['data-testid' => 'cross-tenant-policy-types'])
|
||||||
->extraInputAttributes(['data-testid' => 'cross-environment-policy-types']),
|
->extraInputAttributes(['data-testid' => 'cross-tenant-policy-types']),
|
||||||
]),
|
]),
|
||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
@ -176,31 +168,30 @@ protected function getHeaderActions(): array
|
|||||||
->url($navigationContext->backLinkUrl);
|
->url($navigationContext->backLinkUrl);
|
||||||
}
|
}
|
||||||
|
|
||||||
$sourceEnvironment = $this->selectedSourceEnvironment();
|
$sourceTenant = $this->selectedSourceTenant();
|
||||||
|
|
||||||
if ($sourceEnvironment instanceof ManagedEnvironment) {
|
if ($sourceTenant instanceof Tenant) {
|
||||||
$actions[] = Action::make('open_source_environment')
|
$actions[] = Action::make('open_source_tenant')
|
||||||
->label('Open source environment')
|
->label('Open source tenant')
|
||||||
->icon('heroicon-o-arrow-top-right-on-square')
|
->icon('heroicon-o-arrow-top-right-on-square')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url(ManagedEnvironmentLinks::viewUrl($sourceEnvironment));
|
->url(TenantResource::getUrl('view', ['record' => $sourceTenant], panel: 'admin'));
|
||||||
}
|
}
|
||||||
|
|
||||||
$targetEnvironment = $this->selectedTargetEnvironment();
|
$targetTenant = $this->selectedTargetTenant();
|
||||||
|
|
||||||
if ($targetEnvironment instanceof ManagedEnvironment) {
|
if ($targetTenant instanceof Tenant) {
|
||||||
$actions[] = Action::make('open_target_environment')
|
$actions[] = Action::make('open_target_tenant')
|
||||||
->label('Open target environment')
|
->label('Open target tenant')
|
||||||
->icon('heroicon-o-arrow-top-right-on-square')
|
->icon('heroicon-o-arrow-top-right-on-square')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url(ManagedEnvironmentLinks::viewUrl($targetEnvironment));
|
->url(TenantResource::getUrl('view', ['record' => $targetTenant], panel: 'admin'));
|
||||||
}
|
}
|
||||||
|
|
||||||
$preflightAction = Action::make('generatePromotionPreflight')
|
$preflightAction = Action::make('generatePromotionPreflight')
|
||||||
->label('Generate promotion preflight')
|
->label('Generate promotion preflight')
|
||||||
->icon('heroicon-o-sparkles')
|
->icon('heroicon-o-sparkles')
|
||||||
->color('primary')
|
->color('primary')
|
||||||
->visible(fn (): bool => ! is_array($this->preflight))
|
|
||||||
->disabled(fn (): bool => $this->preflightDisabledReason() !== null)
|
->disabled(fn (): bool => $this->preflightDisabledReason() !== null)
|
||||||
->tooltip(fn (): ?string => $this->preflightDisabledReason())
|
->tooltip(fn (): ?string => $this->preflightDisabledReason())
|
||||||
->action(fn (): mixed => $this->generatePromotionPreflight());
|
->action(fn (): mixed => $this->generatePromotionPreflight());
|
||||||
@ -210,7 +201,6 @@ protected function getHeaderActions(): array
|
|||||||
fn (): ?Workspace => $this->workspace(),
|
fn (): ?Workspace => $this->workspace(),
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::WORKSPACE_BASELINES_MANAGE)
|
->requireCapability(Capabilities::WORKSPACE_BASELINES_MANAGE)
|
||||||
->preserveVisibility()
|
|
||||||
->preserveDisabled()
|
->preserveDisabled()
|
||||||
->tooltip('You need workspace baseline manage access to generate a promotion preflight.')
|
->tooltip('You need workspace baseline manage access to generate a promotion preflight.')
|
||||||
->apply()
|
->apply()
|
||||||
@ -233,19 +223,6 @@ protected function getHeaderActions(): array
|
|||||||
|
|
||||||
$actions[] = $preflightAction;
|
$actions[] = $preflightAction;
|
||||||
|
|
||||||
$actions[] = Action::make('executePromotion')
|
|
||||||
->label('Execute promotion')
|
|
||||||
->icon('heroicon-o-play')
|
|
||||||
->color('warning')
|
|
||||||
->visible(fn (): bool => is_array($this->preflight))
|
|
||||||
->requiresConfirmation()
|
|
||||||
->modalHeading('Execute promotion')
|
|
||||||
->modalDescription(fn (): string => $this->executePromotionConfirmationDescription())
|
|
||||||
->modalSubmitActionLabel('Queue promotion')
|
|
||||||
->disabled(fn (): bool => $this->executePromotionDisabledReason() !== null)
|
|
||||||
->tooltip(fn (): ?string => $this->executePromotionDisabledReason())
|
|
||||||
->action(fn (): mixed => $this->executePromotion());
|
|
||||||
|
|
||||||
return $actions;
|
return $actions;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -254,15 +231,15 @@ public function applySelection(): void
|
|||||||
$this->selectionMessage = null;
|
$this->selectionMessage = null;
|
||||||
$this->preflight = null;
|
$this->preflight = null;
|
||||||
|
|
||||||
$this->sourceEnvironmentId = $this->normalizeEnvironmentIdentifier($this->sourceEnvironmentId);
|
$this->sourceTenantId = $this->normalizeTenantIdentifier($this->sourceTenantId);
|
||||||
$this->targetEnvironmentId = $this->normalizeEnvironmentIdentifier($this->targetEnvironmentId);
|
$this->targetTenantId = $this->normalizeTenantIdentifier($this->targetTenantId);
|
||||||
$this->selectedPolicyTypes = $this->normalizePolicyTypes($this->selectedPolicyTypes);
|
$this->selectedPolicyTypes = $this->normalizePolicyTypes($this->selectedPolicyTypes);
|
||||||
|
|
||||||
if ($this->sourceEnvironmentId !== null
|
if ($this->sourceTenantId !== null
|
||||||
&& $this->targetEnvironmentId !== null
|
&& $this->targetTenantId !== null
|
||||||
&& $this->sourceEnvironmentId === $this->targetEnvironmentId) {
|
&& $this->sourceTenantId === $this->targetTenantId) {
|
||||||
$this->selectionMessage = 'Choose two different environments.';
|
$this->selectionMessage = 'Choose two different tenants.';
|
||||||
$this->addError('targetEnvironmentId', $this->selectionMessage);
|
$this->addError('targetTenantId', $this->selectionMessage);
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -285,99 +262,31 @@ public function generatePromotionPreflight(): void
|
|||||||
|
|
||||||
$selection = $this->compareSelection();
|
$selection = $this->compareSelection();
|
||||||
|
|
||||||
if (! $selection instanceof CrossEnvironmentCompareSelection) {
|
if (! $selection instanceof CrossTenantCompareSelection) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->preflight = app(CrossEnvironmentPromotionPreflight::class)->build($this->preview);
|
$this->preflight = app(CrossTenantPromotionPreflight::class)->build($this->preview);
|
||||||
|
|
||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if ($workspace instanceof Workspace && $user instanceof User) {
|
if ($workspace instanceof Workspace && $user instanceof User) {
|
||||||
app(WorkspaceAuditLogger::class)->logCrossEnvironmentPromotionPreflightGenerated(
|
app(WorkspaceAuditLogger::class)->logCrossTenantPromotionPreflightGenerated(
|
||||||
workspace: $workspace,
|
workspace: $workspace,
|
||||||
sourceEnvironment: $selection->sourceEnvironment,
|
sourceTenant: $selection->sourceTenant,
|
||||||
targetEnvironment: $selection->targetEnvironment,
|
targetTenant: $selection->targetTenant,
|
||||||
preflight: $this->preflight,
|
preflight: $this->preflight,
|
||||||
actor: $user,
|
actor: $user,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
public function executePromotion(): void
|
|
||||||
{
|
|
||||||
$this->authorizePageAccess();
|
|
||||||
$this->authorizePromotionExecution();
|
|
||||||
|
|
||||||
if (! is_array($this->preview) || ! is_array($this->preflight)) {
|
|
||||||
Notification::make()
|
|
||||||
->title('Promotion execution unavailable')
|
|
||||||
->body('Generate a current promotion preflight before executing promotion.')
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$selection = $this->compareSelection();
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $selection instanceof CrossEnvironmentCompareSelection || ! $user instanceof User) {
|
|
||||||
Notification::make()
|
|
||||||
->title('Promotion execution unavailable')
|
|
||||||
->body('Refresh the compare selection before executing promotion.')
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
|
||||||
$result = app(CrossEnvironmentPromotionExecutionService::class)->start(
|
|
||||||
selection: $selection,
|
|
||||||
preview: $this->preview,
|
|
||||||
preflight: $this->preflight,
|
|
||||||
actor: $user,
|
|
||||||
);
|
|
||||||
} catch (OperationalControlBlockedException $exception) {
|
|
||||||
Notification::make()
|
|
||||||
->title($exception->title())
|
|
||||||
->body($exception->getMessage())
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
} catch (DomainException|InvalidArgumentException $exception) {
|
|
||||||
Notification::make()
|
|
||||||
->title('Promotion execution unavailable')
|
|
||||||
->body($exception->getMessage())
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$notification = app(ProviderOperationStartResultPresenter::class)->notification(
|
|
||||||
result: $result,
|
|
||||||
blockedTitle: 'Promotion execution blocked',
|
|
||||||
runUrl: OperationRunLinks::tenantlessView($result->run),
|
|
||||||
scopeBusyTitle: 'Promotion scope busy',
|
|
||||||
scopeBusyBody: 'Another promotion or restore operation is already active for this target scope. Open the active operation for progress and next steps.',
|
|
||||||
);
|
|
||||||
|
|
||||||
if (in_array($result->status, ['started', 'deduped', 'scope_busy'], true)) {
|
|
||||||
OpsUxBrowserEvents::dispatchRunEnqueued($this);
|
|
||||||
}
|
|
||||||
|
|
||||||
$notification->send();
|
|
||||||
}
|
|
||||||
|
|
||||||
public function clearSelectionUrl(): string
|
public function clearSelectionUrl(): string
|
||||||
{
|
{
|
||||||
return static::getUrl($this->routeParameters([
|
return static::getUrl($this->routeParameters([
|
||||||
self::SOURCE_ENVIRONMENT_QUERY_KEY => null,
|
self::SOURCE_TENANT_QUERY_KEY => null,
|
||||||
self::TARGET_ENVIRONMENT_QUERY_KEY => null,
|
self::TARGET_TENANT_QUERY_KEY => null,
|
||||||
self::POLICY_TYPE_QUERY_KEY => null,
|
self::POLICY_TYPE_QUERY_KEY => null,
|
||||||
]), panel: 'admin');
|
]), panel: 'admin');
|
||||||
}
|
}
|
||||||
@ -388,18 +297,18 @@ public function selectionUrl(): string
|
|||||||
}
|
}
|
||||||
|
|
||||||
public static function launchUrl(
|
public static function launchUrl(
|
||||||
?ManagedEnvironment $sourceEnvironment = null,
|
?Tenant $sourceTenant = null,
|
||||||
?ManagedEnvironment $targetEnvironment = null,
|
?Tenant $targetTenant = null,
|
||||||
?CanonicalNavigationContext $navigationContext = null,
|
?CanonicalNavigationContext $navigationContext = null,
|
||||||
): string {
|
): string {
|
||||||
$parameters = [];
|
$parameters = [];
|
||||||
|
|
||||||
if ($sourceEnvironment instanceof ManagedEnvironment) {
|
if ($sourceTenant instanceof Tenant) {
|
||||||
$parameters[self::SOURCE_ENVIRONMENT_QUERY_KEY] = (int) $sourceEnvironment->getKey();
|
$parameters[self::SOURCE_TENANT_QUERY_KEY] = (int) $sourceTenant->getKey();
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($targetEnvironment instanceof ManagedEnvironment) {
|
if ($targetTenant instanceof Tenant) {
|
||||||
$parameters[self::TARGET_ENVIRONMENT_QUERY_KEY] = (int) $targetEnvironment->getKey();
|
$parameters[self::TARGET_TENANT_QUERY_KEY] = (int) $targetTenant->getKey();
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($navigationContext instanceof CanonicalNavigationContext) {
|
if ($navigationContext instanceof CanonicalNavigationContext) {
|
||||||
@ -411,8 +320,8 @@ public static function launchUrl(
|
|||||||
|
|
||||||
public function hasActiveSelection(): bool
|
public function hasActiveSelection(): bool
|
||||||
{
|
{
|
||||||
return $this->sourceEnvironmentId !== null
|
return $this->sourceTenantId !== null
|
||||||
|| $this->targetEnvironmentId !== null
|
|| $this->targetTenantId !== null
|
||||||
|| $this->selectedPolicyTypes !== [];
|
|| $this->selectedPolicyTypes !== [];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -438,26 +347,26 @@ public function reasonLabel(string $reasonCode): string
|
|||||||
return Str::headline(str_replace('_', ' ', $reasonCode));
|
return Str::headline(str_replace('_', ' ', $reasonCode));
|
||||||
}
|
}
|
||||||
|
|
||||||
public function sourceEnvironmentUrl(): ?string
|
public function sourceTenantUrl(): ?string
|
||||||
{
|
{
|
||||||
$environment = $this->selectedSourceEnvironment();
|
$tenant = $this->selectedSourceTenant();
|
||||||
|
|
||||||
if (! $environment instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironmentLinks::viewUrl($environment);
|
return TenantResource::getUrl('view', ['record' => $tenant], panel: 'admin');
|
||||||
}
|
}
|
||||||
|
|
||||||
public function targetEnvironmentUrl(): ?string
|
public function targetTenantUrl(): ?string
|
||||||
{
|
{
|
||||||
$environment = $this->selectedTargetEnvironment();
|
$tenant = $this->selectedTargetTenant();
|
||||||
|
|
||||||
if (! $environment instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironmentLinks::viewUrl($environment);
|
return TenantResource::getUrl('view', ['record' => $tenant], panel: 'admin');
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -466,16 +375,16 @@ public function targetEnvironmentUrl(): ?string
|
|||||||
private function formState(): array
|
private function formState(): array
|
||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
'sourceEnvironmentId' => $this->sourceEnvironmentId,
|
'sourceTenantId' => $this->sourceTenantId,
|
||||||
'targetEnvironmentId' => $this->targetEnvironmentId,
|
'targetTenantId' => $this->targetTenantId,
|
||||||
'selectedPolicyTypes' => $this->selectedPolicyTypes,
|
'selectedPolicyTypes' => $this->selectedPolicyTypes,
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
private function hydrateSelectionFromRequest(): void
|
private function hydrateSelectionFromRequest(): void
|
||||||
{
|
{
|
||||||
$this->sourceEnvironmentId = $this->normalizeEnvironmentIdentifier(request()->query(self::SOURCE_ENVIRONMENT_QUERY_KEY));
|
$this->sourceTenantId = $this->normalizeTenantIdentifier(request()->query(self::SOURCE_TENANT_QUERY_KEY));
|
||||||
$this->targetEnvironmentId = $this->normalizeEnvironmentIdentifier(request()->query(self::TARGET_ENVIRONMENT_QUERY_KEY));
|
$this->targetTenantId = $this->normalizeTenantIdentifier(request()->query(self::TARGET_TENANT_QUERY_KEY));
|
||||||
$this->selectedPolicyTypes = $this->normalizePolicyTypes(request()->query(self::POLICY_TYPE_QUERY_KEY, []));
|
$this->selectedPolicyTypes = $this->normalizePolicyTypes(request()->query(self::POLICY_TYPE_QUERY_KEY, []));
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -487,11 +396,11 @@ private function refreshPreview(): void
|
|||||||
|
|
||||||
$selection = $this->compareSelection();
|
$selection = $this->compareSelection();
|
||||||
|
|
||||||
if (! $selection instanceof CrossEnvironmentCompareSelection) {
|
if (! $selection instanceof CrossTenantCompareSelection) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->preview = app(CrossEnvironmentComparePreviewBuilder::class)->build($selection);
|
$this->preview = app(CrossTenantComparePreviewBuilder::class)->build($selection);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function authorizePageAccess(): void
|
private function authorizePageAccess(): void
|
||||||
@ -544,71 +453,47 @@ private function authorizePreflightExecution(): void
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private function authorizePromotionExecution(): void
|
private function compareSelection(): ?CrossTenantCompareSelection
|
||||||
{
|
{
|
||||||
$this->authorizePreflightExecution();
|
$sourceTenant = $this->selectedSourceTenant();
|
||||||
|
$targetTenant = $this->selectedTargetTenant();
|
||||||
|
|
||||||
$user = auth()->user();
|
if (! $sourceTenant instanceof Tenant || ! $targetTenant instanceof Tenant) {
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
|
||||||
abort(403);
|
|
||||||
}
|
|
||||||
|
|
||||||
$targetEnvironment = $this->selectedTargetEnvironment();
|
|
||||||
|
|
||||||
if (! $targetEnvironment instanceof ManagedEnvironment) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
/** @var CapabilityResolver $resolver */
|
|
||||||
$resolver = app(CapabilityResolver::class);
|
|
||||||
|
|
||||||
if (! $resolver->can($user, $targetEnvironment, Capabilities::TENANT_MANAGE)) {
|
|
||||||
abort(403);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
private function compareSelection(): ?CrossEnvironmentCompareSelection
|
|
||||||
{
|
|
||||||
$sourceEnvironment = $this->selectedSourceEnvironment();
|
|
||||||
$targetEnvironment = $this->selectedTargetEnvironment();
|
|
||||||
|
|
||||||
if (! $sourceEnvironment instanceof ManagedEnvironment || ! $targetEnvironment instanceof ManagedEnvironment) {
|
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $sourceEnvironment->getKey() === (int) $targetEnvironment->getKey()) {
|
if ((int) $sourceTenant->getKey() === (int) $targetTenant->getKey()) {
|
||||||
$this->selectionMessage = 'Choose two different environments.';
|
$this->selectionMessage = 'Choose two different tenants.';
|
||||||
|
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return new CrossEnvironmentCompareSelection(
|
return new CrossTenantCompareSelection(
|
||||||
sourceEnvironment: $sourceEnvironment,
|
sourceTenant: $sourceTenant,
|
||||||
targetEnvironment: $targetEnvironment,
|
targetTenant: $targetTenant,
|
||||||
policyTypes: $this->selectedPolicyTypes,
|
policyTypes: $this->selectedPolicyTypes,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function selectedSourceEnvironment(): ?ManagedEnvironment
|
private function selectedSourceTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if ($this->sourceEnvironmentId === null) {
|
if ($this->sourceTenantId === null) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->resolveAuthorizedEnvironment($this->sourceEnvironmentId);
|
return $this->resolveAuthorizedTenant($this->sourceTenantId);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function selectedTargetEnvironment(): ?ManagedEnvironment
|
private function selectedTargetTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if ($this->targetEnvironmentId === null) {
|
if ($this->targetTenantId === null) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->resolveAuthorizedEnvironment($this->targetEnvironmentId);
|
return $this->resolveAuthorizedTenant($this->targetTenantId);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveAuthorizedEnvironment(string $environmentId): ManagedEnvironment
|
private function resolveAuthorizedTenant(string $tenantId): Tenant
|
||||||
{
|
{
|
||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
@ -617,29 +502,29 @@ private function resolveAuthorizedEnvironment(string $environmentId): ManagedEnv
|
|||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
$environment = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->where('workspace_id', (int) $workspace->getKey())
|
->where('workspace_id', (int) $workspace->getKey())
|
||||||
->whereKey((int) $environmentId)
|
->whereKey((int) $tenantId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if (! $environment instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var CapabilityResolver $resolver */
|
/** @var CapabilityResolver $resolver */
|
||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
|
|
||||||
if (! $user->canAccessTenant($environment) || ! $resolver->can($user, $environment, Capabilities::TENANT_VIEW)) {
|
if (! $user->canAccessTenant($tenant) || ! $resolver->can($user, $tenant, Capabilities::TENANT_VIEW)) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
return $environment;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<string, string>
|
* @return array<string, string>
|
||||||
*/
|
*/
|
||||||
private function environmentOptions(): array
|
private function tenantOptions(): array
|
||||||
{
|
{
|
||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
@ -651,17 +536,18 @@ private function environmentOptions(): array
|
|||||||
/** @var CapabilityResolver $resolver */
|
/** @var CapabilityResolver $resolver */
|
||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
|
|
||||||
$environments = $user->accessibleManagedEnvironmentsQuery((int) $workspace->getKey())
|
$tenants = $user->tenants()
|
||||||
->select('managed_environments.*')
|
->where('tenants.workspace_id', (int) $workspace->getKey())
|
||||||
->orderBy('managed_environments.name')
|
->select('tenants.*')
|
||||||
|
->orderBy('tenants.name')
|
||||||
->get();
|
->get();
|
||||||
|
|
||||||
$resolver->primeMemberships($user, $environments->modelKeys());
|
$resolver->primeMemberships($user, $tenants->modelKeys());
|
||||||
|
|
||||||
return $environments
|
return $tenants
|
||||||
->filter(fn (ManagedEnvironment $environment): bool => $resolver->can($user, $environment, Capabilities::TENANT_VIEW))
|
->filter(fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_VIEW))
|
||||||
->mapWithKeys(fn (ManagedEnvironment $environment): array => [
|
->mapWithKeys(fn (Tenant $tenant): array => [
|
||||||
(string) $environment->getKey() => (string) $environment->name,
|
(string) $tenant->getKey() => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
@ -671,14 +557,14 @@ private function environmentOptions(): array
|
|||||||
*/
|
*/
|
||||||
private function policyTypeOptions(): array
|
private function policyTypeOptions(): array
|
||||||
{
|
{
|
||||||
$environmentIds = array_map(static fn (string $environmentId): int => (int) $environmentId, array_keys($this->environmentOptions()));
|
$tenantIds = array_map(static fn (string $tenantId): int => (int) $tenantId, array_keys($this->tenantOptions()));
|
||||||
|
|
||||||
if ($environmentIds === []) {
|
if ($tenantIds === []) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return InventoryItem::query()
|
return InventoryItem::query()
|
||||||
->whereIn('managed_environment_id', $environmentIds)
|
->whereIn('tenant_id', $tenantIds)
|
||||||
->whereNotNull('policy_type')
|
->whereNotNull('policy_type')
|
||||||
->where('policy_type', '!=', '')
|
->where('policy_type', '!=', '')
|
||||||
->distinct()
|
->distinct()
|
||||||
@ -697,7 +583,7 @@ private function preflightDisabledReason(): ?string
|
|||||||
}
|
}
|
||||||
|
|
||||||
if (! is_array($this->preview)) {
|
if (! is_array($this->preview)) {
|
||||||
return 'Select an authorized source and target environment to generate a promotion preflight.';
|
return 'Select an authorized source and target tenant to generate a promotion preflight.';
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) data_get($this->preview, 'summary.total', 0) === 0) {
|
if ((int) data_get($this->preview, 'summary.total', 0) === 0) {
|
||||||
@ -707,77 +593,10 @@ private function preflightDisabledReason(): ?string
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function executePromotionDisabledReason(): ?string
|
|
||||||
{
|
|
||||||
if ($this->selectionMessage !== null) {
|
|
||||||
return $this->selectionMessage;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! is_array($this->preview)) {
|
|
||||||
return 'Run compare preview before executing promotion.';
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! is_array($this->preflight)) {
|
|
||||||
return 'Generate a current promotion preflight before executing promotion.';
|
|
||||||
}
|
|
||||||
|
|
||||||
if ((int) data_get($this->preflight, 'summary.ready', 0) <= 0) {
|
|
||||||
return 'Current promotion preflight has no ready governed subjects to execute.';
|
|
||||||
}
|
|
||||||
|
|
||||||
$user = auth()->user();
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if ($user instanceof User && $workspace instanceof Workspace) {
|
|
||||||
/** @var WorkspaceCapabilityResolver $workspaceResolver */
|
|
||||||
$workspaceResolver = app(WorkspaceCapabilityResolver::class);
|
|
||||||
|
|
||||||
if ($workspaceResolver->isMember($user, $workspace)
|
|
||||||
&& ! $workspaceResolver->can($user, $workspace, Capabilities::WORKSPACE_BASELINES_MANAGE)) {
|
|
||||||
return 'You need workspace baseline manage access to execute promotion.';
|
|
||||||
}
|
|
||||||
|
|
||||||
$targetEnvironment = $this->selectedTargetEnvironment();
|
|
||||||
|
|
||||||
if ($targetEnvironment instanceof ManagedEnvironment) {
|
|
||||||
/** @var CapabilityResolver $resolver */
|
|
||||||
$resolver = app(CapabilityResolver::class);
|
|
||||||
|
|
||||||
if (! $resolver->can($user, $targetEnvironment, Capabilities::TENANT_MANAGE)) {
|
|
||||||
return 'You need target environment manage access to execute promotion.';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function executePromotionConfirmationDescription(): string
|
|
||||||
{
|
|
||||||
$selection = $this->compareSelection();
|
|
||||||
$ready = (int) data_get($this->preflight, 'summary.ready', 0);
|
|
||||||
$blocked = (int) data_get($this->preflight, 'summary.blocked', 0);
|
|
||||||
$manualMappingRequired = (int) data_get($this->preflight, 'summary.manual_mapping_required', 0);
|
|
||||||
$excluded = $blocked + $manualMappingRequired;
|
|
||||||
|
|
||||||
$sourceEnvironmentName = $selection?->sourceEnvironment->name ?? 'Source environment';
|
|
||||||
$targetEnvironmentName = $selection?->targetEnvironment->name ?? 'Target environment';
|
|
||||||
|
|
||||||
return sprintf(
|
|
||||||
'Queue one promotion run from %s to %s for %d ready governed subject%s. %d subject%s remain excluded on the compare page.',
|
|
||||||
$sourceEnvironmentName,
|
|
||||||
$targetEnvironmentName,
|
|
||||||
$ready,
|
|
||||||
$ready === 1 ? '' : 's',
|
|
||||||
$excluded,
|
|
||||||
$excluded === 1 ? '' : 's',
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param mixed $value
|
* @param mixed $value
|
||||||
*/
|
*/
|
||||||
private function normalizeEnvironmentIdentifier(mixed $value): ?string
|
private function normalizeTenantIdentifier(mixed $value): ?string
|
||||||
{
|
{
|
||||||
if (! is_string($value) && ! is_int($value)) {
|
if (! is_string($value) && ! is_int($value)) {
|
||||||
return null;
|
return null;
|
||||||
@ -815,8 +634,8 @@ private function normalizePolicyTypes(mixed $value): array
|
|||||||
private function routeParameters(array $overrides = []): array
|
private function routeParameters(array $overrides = []): array
|
||||||
{
|
{
|
||||||
$parameters = [
|
$parameters = [
|
||||||
self::SOURCE_ENVIRONMENT_QUERY_KEY => $this->sourceEnvironmentId,
|
self::SOURCE_TENANT_QUERY_KEY => $this->sourceTenantId,
|
||||||
self::TARGET_ENVIRONMENT_QUERY_KEY => $this->targetEnvironmentId,
|
self::TARGET_TENANT_QUERY_KEY => $this->targetTenantId,
|
||||||
self::POLICY_TYPE_QUERY_KEY => $this->selectedPolicyTypes,
|
self::POLICY_TYPE_QUERY_KEY => $this->selectedPolicyTypes,
|
||||||
];
|
];
|
||||||
|
|
||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\Finding;
|
use App\Models\Finding;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
@ -54,7 +54,7 @@ class FindingsHygieneReport extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.findings.findings-hygiene-report';
|
protected string $view = 'filament.pages.findings.findings-hygiene-report';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $visibleTenants = null;
|
private ?array $visibleTenants = null;
|
||||||
|
|
||||||
@ -65,12 +65,12 @@ class FindingsHygieneReport extends Page implements HasTable
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly, ActionSurfaceType::ReadOnlyRegistryReport)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly, ActionSurfaceType::ReadOnlyRegistryReport)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header controls keep the hygiene scope fixed and expose only fixed reason views plus environment-prefilter recovery when needed.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header controls keep the hygiene scope fixed and expose only fixed reason views plus tenant-prefilter recovery when needed.')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The hygiene report stays read-only and exposes row click as the only inspect path.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The hygiene report stays read-only and exposes row click as the only inspect path.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The hygiene report does not expose bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The hygiene report does not expose bulk actions.')
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The empty state stays calm and only offers an environment-prefilter reset when the active environment filter hides otherwise visible issues.')
|
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The empty state stays calm and only offers a tenant-prefilter reset when the active tenant filter hides otherwise visible issues.')
|
||||||
->exempt(ActionSurfaceSlot::DetailHeader, 'Repair remains on the existing environment finding detail surface.');
|
->exempt(ActionSurfaceSlot::DetailHeader, 'Repair remains on the existing tenant finding detail surface.');
|
||||||
}
|
}
|
||||||
|
|
||||||
public function mount(): void
|
public function mount(): void
|
||||||
@ -93,7 +93,7 @@ protected function getHeaderActions(): array
|
|||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
Action::make('clear_tenant_filter')
|
Action::make('clear_tenant_filter')
|
||||||
->label('Clear environment filter')
|
->label('Clear tenant filter')
|
||||||
->icon('heroicon-o-x-mark')
|
->icon('heroicon-o-x-mark')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
||||||
@ -109,7 +109,7 @@ public function table(Table $table): Table
|
|||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment'),
|
->label('Tenant'),
|
||||||
TextColumn::make('subject_display_name')
|
TextColumn::make('subject_display_name')
|
||||||
->label('Finding')
|
->label('Finding')
|
||||||
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
||||||
@ -138,8 +138,8 @@ public function table(Table $table): Table
|
|||||||
->description(fn (Finding $record): ?string => FindingExceptionResource::relativeTimeDescription($this->hygieneService()->lastWorkflowActivityAt($record))),
|
->description(fn (Finding $record): ?string => FindingExceptionResource::relativeTimeDescription($this->hygieneService()->lastWorkflowActivityAt($record))),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
])
|
])
|
||||||
@ -183,10 +183,10 @@ public function availableFilters(): array
|
|||||||
],
|
],
|
||||||
[
|
[
|
||||||
'key' => 'tenant',
|
'key' => 'tenant',
|
||||||
'label' => 'ManagedEnvironment',
|
'label' => 'Tenant',
|
||||||
'fixed' => false,
|
'fixed' => false,
|
||||||
'options' => collect($this->visibleTenants())
|
'options' => collect($this->visibleTenants())
|
||||||
->map(fn (ManagedEnvironment $tenant): array => [
|
->map(fn (Tenant $tenant): array => [
|
||||||
'value' => (string) $tenant->getKey(),
|
'value' => (string) $tenant->getKey(),
|
||||||
'label' => (string) $tenant->name,
|
'label' => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
@ -259,11 +259,11 @@ public function emptyState(): array
|
|||||||
{
|
{
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
if ($this->tenantFilterAloneExcludesRows()) {
|
||||||
return [
|
return [
|
||||||
'title' => 'No hygiene issues match this environment scope',
|
'title' => 'No hygiene issues match this tenant scope',
|
||||||
'body' => 'Your current environment filter is hiding hygiene issues that are still visible elsewhere in this workspace.',
|
'body' => 'Your current tenant filter is hiding hygiene issues that are still visible elsewhere in this workspace.',
|
||||||
'icon' => 'heroicon-o-funnel',
|
'icon' => 'heroicon-o-funnel',
|
||||||
'action_name' => 'clear_tenant_filter_empty',
|
'action_name' => 'clear_tenant_filter_empty',
|
||||||
'action_label' => 'Clear environment filter',
|
'action_label' => 'Clear tenant filter',
|
||||||
'action_kind' => 'clear_tenant_filter',
|
'action_kind' => 'clear_tenant_filter',
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
@ -278,7 +278,7 @@ public function emptyState(): array
|
|||||||
|
|
||||||
return [
|
return [
|
||||||
'title' => 'No visible hygiene issues right now',
|
'title' => 'No visible hygiene issues right now',
|
||||||
'body' => 'Visible broken assignments and stale in-progress work are currently calm across the entitled environment scope.',
|
'body' => 'Visible broken assignments and stale in-progress work are currently calm across the entitled tenant scope.',
|
||||||
'icon' => 'heroicon-o-wrench-screwdriver',
|
'icon' => 'heroicon-o-wrench-screwdriver',
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
@ -290,12 +290,12 @@ public function updatedTableFilters(): void
|
|||||||
|
|
||||||
public function clearTenantFilter(): void
|
public function clearTenantFilter(): void
|
||||||
{
|
{
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
$this->resetTable();
|
$this->resetTable();
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function visibleTenants(): array
|
public function visibleTenants(): array
|
||||||
{
|
{
|
||||||
@ -394,7 +394,7 @@ private function filteredIssueQuery(bool $includeTenantFilter = true, ?string $r
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->visibleTenants())
|
return collect($this->visibleTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => (string) $tenant->name,
|
(string) $tenant->getKey() => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -413,8 +413,8 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -422,7 +422,7 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
|
|
||||||
private function normalizeTenantFilterState(): void
|
private function normalizeTenantFilterState(): void
|
||||||
{
|
{
|
||||||
$configuredTenantFilter = data_get($this->currentFiltersState(), 'managed_environment_id.value');
|
$configuredTenantFilter = data_get($this->currentFiltersState(), 'tenant_id.value');
|
||||||
|
|
||||||
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
||||||
return;
|
return;
|
||||||
@ -432,7 +432,7 @@ private function normalizeTenantFilterState(): void
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -450,7 +450,7 @@ private function currentFiltersState(): array
|
|||||||
|
|
||||||
private function currentTenantFilterId(): ?int
|
private function currentTenantFilterId(): ?int
|
||||||
{
|
{
|
||||||
$tenantFilter = data_get($this->currentFiltersState(), 'managed_environment_id.value');
|
$tenantFilter = data_get($this->currentFiltersState(), 'tenant_id.value');
|
||||||
|
|
||||||
if (! is_numeric($tenantFilter)) {
|
if (! is_numeric($tenantFilter)) {
|
||||||
return null;
|
return null;
|
||||||
@ -467,7 +467,7 @@ private function currentTenantFilterId(): ?int
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function filteredTenant(): ?ManagedEnvironment
|
private function filteredTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantId = $this->currentTenantFilterId();
|
$tenantId = $this->currentTenantFilterId();
|
||||||
|
|
||||||
@ -484,11 +484,11 @@ private function filteredTenant(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function activeVisibleTenant(): ?ManagedEnvironment
|
private function activeVisibleTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
if (! $activeTenant instanceof ManagedEnvironment) {
|
if (! $activeTenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -505,13 +505,13 @@ private function tenantPrefilterSource(): string
|
|||||||
{
|
{
|
||||||
$tenant = $this->filteredTenant();
|
$tenant = $this->filteredTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return 'none';
|
return 'none';
|
||||||
}
|
}
|
||||||
|
|
||||||
$activeTenant = $this->activeVisibleTenant();
|
$activeTenant = $this->activeVisibleTenant();
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment && $activeTenant->is($tenant)) {
|
if ($activeTenant instanceof Tenant && $activeTenant->is($tenant)) {
|
||||||
return 'active_tenant_context';
|
return 'active_tenant_context';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -528,7 +528,7 @@ private function assigneeContext(Finding $record): ?string
|
|||||||
return 'Soft-deleted user';
|
return 'Soft-deleted user';
|
||||||
}
|
}
|
||||||
|
|
||||||
return 'No current environment access';
|
return 'No current tenant membership';
|
||||||
}
|
}
|
||||||
|
|
||||||
private function tenantFilterAloneExcludesRows(): bool
|
private function tenantFilterAloneExcludesRows(): bool
|
||||||
@ -561,11 +561,11 @@ private function findingDetailUrl(Finding $record): string
|
|||||||
{
|
{
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return '#';
|
return '#';
|
||||||
}
|
}
|
||||||
|
|
||||||
$url = FindingResource::getUrl('view', ['record' => $record], tenant: $tenant);
|
$url = FindingResource::getUrl('view', ['record' => $record], panel: 'tenant', tenant: $tenant);
|
||||||
|
|
||||||
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
||||||
}
|
}
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\Finding;
|
use App\Models\Finding;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
@ -62,12 +62,12 @@ class FindingsIntakeQueue extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.findings.findings-intake-queue';
|
protected string $view = 'filament.pages.findings.findings-intake-queue';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $visibleTenants = null;
|
private ?array $visibleTenants = null;
|
||||||
|
|
||||||
@ -118,7 +118,7 @@ protected function getHeaderActions(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
$actions[] = Action::make('clear_tenant_filter')
|
$actions[] = Action::make('clear_tenant_filter')
|
||||||
->label('Clear environment filter')
|
->label('Clear tenant filter')
|
||||||
->icon('heroicon-o-x-mark')
|
->icon('heroicon-o-x-mark')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
||||||
@ -135,7 +135,7 @@ public function table(Table $table): Table
|
|||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment'),
|
->label('Tenant'),
|
||||||
TextColumn::make('subject_display_name')
|
TextColumn::make('subject_display_name')
|
||||||
->label('Finding')
|
->label('Finding')
|
||||||
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
||||||
@ -166,8 +166,8 @@ public function table(Table $table): Table
|
|||||||
->color(fn (Finding $record): string => $this->queueReasonColor($record)),
|
->color(fn (Finding $record): string => $this->queueReasonColor($record)),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
])
|
])
|
||||||
@ -251,18 +251,18 @@ public function emptyState(): array
|
|||||||
{
|
{
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
if ($this->tenantFilterAloneExcludesRows()) {
|
||||||
return [
|
return [
|
||||||
'title' => 'No intake findings match this environment scope',
|
'title' => 'No intake findings match this tenant scope',
|
||||||
'body' => 'Your current environment filter is hiding shared intake work that is still visible elsewhere in this workspace.',
|
'body' => 'Your current tenant filter is hiding shared intake work that is still visible elsewhere in this workspace.',
|
||||||
'icon' => 'heroicon-o-funnel',
|
'icon' => 'heroicon-o-funnel',
|
||||||
'action_name' => 'clear_tenant_filter_empty',
|
'action_name' => 'clear_tenant_filter_empty',
|
||||||
'action_label' => 'Clear environment filter',
|
'action_label' => 'Clear tenant filter',
|
||||||
'action_kind' => 'clear_tenant_filter',
|
'action_kind' => 'clear_tenant_filter',
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
return [
|
return [
|
||||||
'title' => 'Shared intake is clear',
|
'title' => 'Shared intake is clear',
|
||||||
'body' => 'No visible unassigned findings currently need first routing across your entitled environments. Open your personal queue if you want to continue with claimed work.',
|
'body' => 'No visible unassigned findings currently need first routing across your entitled tenants. Open your personal queue if you want to continue with claimed work.',
|
||||||
'icon' => 'heroicon-o-inbox-stack',
|
'icon' => 'heroicon-o-inbox-stack',
|
||||||
'action_name' => 'open_my_findings_empty',
|
'action_name' => 'open_my_findings_empty',
|
||||||
'action_label' => 'Open my findings',
|
'action_label' => 'Open my findings',
|
||||||
@ -278,12 +278,12 @@ public function updatedTableFilters(): void
|
|||||||
|
|
||||||
public function clearTenantFilter(): void
|
public function clearTenantFilter(): void
|
||||||
{
|
{
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
$this->resetTable();
|
$this->resetTable();
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function visibleTenants(): array
|
public function visibleTenants(): array
|
||||||
{
|
{
|
||||||
@ -301,12 +301,12 @@ public function visibleTenants(): array
|
|||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
$resolver->primeMemberships(
|
$resolver->primeMemberships(
|
||||||
$user,
|
$user,
|
||||||
array_map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(), $tenants),
|
array_map(static fn (Tenant $tenant): int => (int) $tenant->getKey(), $tenants),
|
||||||
);
|
);
|
||||||
|
|
||||||
return $this->visibleTenants = array_values(array_filter(
|
return $this->visibleTenants = array_values(array_filter(
|
||||||
$tenants,
|
$tenants,
|
||||||
fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
||||||
));
|
));
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -335,7 +335,7 @@ private function claimAction(): Action
|
|||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
throw new NotFoundHttpException;
|
throw new NotFoundHttpException;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -406,7 +406,7 @@ private function authorizePageAccess(): void
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function authorizedTenants(): array
|
private function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -421,10 +421,11 @@ private function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->authorizedTenants = $user->accessibleManagedEnvironmentsQuery((int) $workspace->getKey())
|
return $this->authorizedTenants = $user->tenants()
|
||||||
->where('managed_environments.lifecycle_status', 'active')
|
->where('tenants.workspace_id', (int) $workspace->getKey())
|
||||||
->orderBy('managed_environments.name')
|
->where('tenants.status', 'active')
|
||||||
->get(['managed_environments.id', 'managed_environments.name', 'managed_environments.slug', 'managed_environments.workspace_id'])
|
->orderBy('tenants.name')
|
||||||
|
->get(['tenants.id', 'tenants.name', 'tenants.external_id', 'tenants.workspace_id'])
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -447,7 +448,7 @@ private function queueBaseQuery(): Builder
|
|||||||
{
|
{
|
||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
$tenantIds = array_map(
|
$tenantIds = array_map(
|
||||||
static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(),
|
static fn (Tenant $tenant): int => (int) $tenant->getKey(),
|
||||||
$this->visibleTenants(),
|
$this->visibleTenants(),
|
||||||
);
|
);
|
||||||
|
|
||||||
@ -459,7 +460,7 @@ private function queueBaseQuery(): Builder
|
|||||||
->with(['tenant', 'ownerUser', 'assigneeUser'])
|
->with(['tenant', 'ownerUser', 'assigneeUser'])
|
||||||
->withSubjectDisplayName()
|
->withSubjectDisplayName()
|
||||||
->where('workspace_id', (int) $workspace->getKey())
|
->where('workspace_id', (int) $workspace->getKey())
|
||||||
->whereIn('managed_environment_id', $tenantIds === [] ? [-1] : $tenantIds)
|
->whereIn('tenant_id', $tenantIds === [] ? [-1] : $tenantIds)
|
||||||
->whereNull('assignee_user_id')
|
->whereNull('assignee_user_id')
|
||||||
->whereIn('status', Finding::openStatuses());
|
->whereIn('status', Finding::openStatuses());
|
||||||
}
|
}
|
||||||
@ -478,7 +479,7 @@ private function filteredQueueQuery(
|
|||||||
$resolvedQueueView = $queueView ?? $this->queueView;
|
$resolvedQueueView = $queueView ?? $this->queueView;
|
||||||
|
|
||||||
if ($includeTenantFilter && ($tenantId = $this->currentTenantFilterId()) !== null) {
|
if ($includeTenantFilter && ($tenantId = $this->currentTenantFilterId()) !== null) {
|
||||||
$query->where('managed_environment_id', $tenantId);
|
$query->where('tenant_id', $tenantId);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($resolvedQueueView === 'needs_triage') {
|
if ($resolvedQueueView === 'needs_triage') {
|
||||||
@ -513,7 +514,7 @@ private function filteredQueueQuery(
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->visibleTenants())
|
return collect($this->visibleTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => (string) $tenant->name,
|
(string) $tenant->getKey() => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -532,8 +533,8 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -541,7 +542,7 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
|
|
||||||
private function normalizeTenantFilterState(): void
|
private function normalizeTenantFilterState(): void
|
||||||
{
|
{
|
||||||
$configuredTenantFilter = data_get($this->currentQueueFiltersState(), 'managed_environment_id.value');
|
$configuredTenantFilter = data_get($this->currentQueueFiltersState(), 'tenant_id.value');
|
||||||
|
|
||||||
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
||||||
return;
|
return;
|
||||||
@ -551,7 +552,7 @@ private function normalizeTenantFilterState(): void
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -569,7 +570,7 @@ private function currentQueueFiltersState(): array
|
|||||||
|
|
||||||
private function currentTenantFilterId(): ?int
|
private function currentTenantFilterId(): ?int
|
||||||
{
|
{
|
||||||
$tenantFilter = data_get($this->currentQueueFiltersState(), 'managed_environment_id.value');
|
$tenantFilter = data_get($this->currentQueueFiltersState(), 'tenant_id.value');
|
||||||
|
|
||||||
if (! is_numeric($tenantFilter)) {
|
if (! is_numeric($tenantFilter)) {
|
||||||
return null;
|
return null;
|
||||||
@ -586,7 +587,7 @@ private function currentTenantFilterId(): ?int
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function filteredTenant(): ?ManagedEnvironment
|
private function filteredTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantId = $this->currentTenantFilterId();
|
$tenantId = $this->currentTenantFilterId();
|
||||||
|
|
||||||
@ -603,11 +604,11 @@ private function filteredTenant(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function activeVisibleTenant(): ?ManagedEnvironment
|
private function activeVisibleTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
if (! $activeTenant instanceof ManagedEnvironment) {
|
if (! $activeTenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -624,13 +625,13 @@ private function tenantPrefilterSource(): string
|
|||||||
{
|
{
|
||||||
$tenant = $this->filteredTenant();
|
$tenant = $this->filteredTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return 'none';
|
return 'none';
|
||||||
}
|
}
|
||||||
|
|
||||||
$activeTenant = $this->activeVisibleTenant();
|
$activeTenant = $this->activeVisibleTenant();
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment && $activeTenant->is($tenant)) {
|
if ($activeTenant instanceof Tenant && $activeTenant->is($tenant)) {
|
||||||
return 'active_tenant_context';
|
return 'active_tenant_context';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -689,11 +690,11 @@ private function findingDetailUrl(Finding $record): string
|
|||||||
{
|
{
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return '#';
|
return '#';
|
||||||
}
|
}
|
||||||
|
|
||||||
$url = FindingResource::getUrl('view', ['record' => $record], tenant: $tenant);
|
$url = FindingResource::getUrl('view', ['record' => $record], panel: 'tenant', tenant: $tenant);
|
||||||
|
|
||||||
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
||||||
}
|
}
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\Finding;
|
use App\Models\Finding;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
@ -58,12 +58,12 @@ class MyFindingsInbox extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.findings.my-findings-inbox';
|
protected string $view = 'filament.pages.findings.my-findings-inbox';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $visibleTenants = null;
|
private ?array $visibleTenants = null;
|
||||||
|
|
||||||
@ -72,7 +72,7 @@ class MyFindingsInbox extends Page implements HasTable
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly, ActionSurfaceType::ReadOnlyRegistryReport)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly, ActionSurfaceType::ReadOnlyRegistryReport)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep the assigned-to-me scope fixed and expose only an environment-prefilter clear action when needed.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep the assigned-to-me scope fixed and expose only a tenant-prefilter clear action when needed.')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The personal findings inbox exposes row click as the only inspect path and does not render a secondary More menu.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The personal findings inbox exposes row click as the only inspect path and does not render a secondary More menu.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The personal findings inbox does not expose bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The personal findings inbox does not expose bulk actions.')
|
||||||
@ -110,7 +110,7 @@ protected function getHeaderActions(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
$actions[] = Action::make('clear_tenant_filter')
|
$actions[] = Action::make('clear_tenant_filter')
|
||||||
->label('Clear environment filter')
|
->label('Clear tenant filter')
|
||||||
->icon('heroicon-o-x-mark')
|
->icon('heroicon-o-x-mark')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
->visible(fn (): bool => $this->currentTenantFilterId() !== null)
|
||||||
@ -127,7 +127,7 @@ public function table(Table $table): Table
|
|||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('Managed environment'),
|
->label('Tenant'),
|
||||||
TextColumn::make('subject_display_name')
|
TextColumn::make('subject_display_name')
|
||||||
->label('Finding')
|
->label('Finding')
|
||||||
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
->state(fn (Finding $record): string => $record->resolvedSubjectDisplayName() ?? 'Finding #'.$record->getKey())
|
||||||
@ -153,8 +153,8 @@ public function table(Table $table): Table
|
|||||||
->description(fn (Finding $record): ?string => FindingExceptionResource::relativeTimeDescription($record->due_at) ?? FindingResource::dueAttentionLabelFor($record)),
|
->description(fn (Finding $record): ?string => FindingExceptionResource::relativeTimeDescription($record->due_at) ?? FindingResource::dueAttentionLabelFor($record)),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('Managed environment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
Filter::make('overdue')
|
Filter::make('overdue')
|
||||||
@ -207,10 +207,10 @@ public function availableFilters(): array
|
|||||||
],
|
],
|
||||||
[
|
[
|
||||||
'key' => 'tenant',
|
'key' => 'tenant',
|
||||||
'label' => 'Managed environment',
|
'label' => 'Tenant',
|
||||||
'fixed' => false,
|
'fixed' => false,
|
||||||
'options' => collect($this->visibleTenants())
|
'options' => collect($this->visibleTenants())
|
||||||
->map(fn (ManagedEnvironment $tenant): array => [
|
->map(fn (Tenant $tenant): array => [
|
||||||
'value' => (string) $tenant->getKey(),
|
'value' => (string) $tenant->getKey(),
|
||||||
'label' => (string) $tenant->name,
|
'label' => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
@ -261,37 +261,37 @@ public function emptyState(): array
|
|||||||
{
|
{
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
if ($this->tenantFilterAloneExcludesRows()) {
|
||||||
return [
|
return [
|
||||||
'title' => 'No assigned findings match this environment scope',
|
'title' => 'No assigned findings match this tenant scope',
|
||||||
'body' => 'Your current environment filter is hiding assigned work that is still visible elsewhere in this workspace.',
|
'body' => 'Your current tenant filter is hiding assigned work that is still visible elsewhere in this workspace.',
|
||||||
'icon' => 'heroicon-o-funnel',
|
'icon' => 'heroicon-o-funnel',
|
||||||
'action_name' => 'clear_tenant_filter_empty',
|
'action_name' => 'clear_tenant_filter_empty',
|
||||||
'action_label' => 'Clear environment filter',
|
'action_label' => 'Clear tenant filter',
|
||||||
'action_kind' => 'clear_tenant_filter',
|
'action_kind' => 'clear_tenant_filter',
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
$activeTenant = $this->activeVisibleTenant();
|
$activeTenant = $this->activeVisibleTenant();
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment) {
|
if ($activeTenant instanceof Tenant) {
|
||||||
return [
|
return [
|
||||||
'title' => 'No visible assigned findings right now',
|
'title' => 'No visible assigned findings right now',
|
||||||
'body' => 'Nothing currently assigned to you needs attention in the visible environment scope. You can still open environment findings for broader context.',
|
'body' => 'Nothing currently assigned to you needs attention in the visible tenant scope. You can still open tenant findings for broader context.',
|
||||||
'icon' => 'heroicon-o-clipboard-document-check',
|
'icon' => 'heroicon-o-clipboard-document-check',
|
||||||
'action_name' => 'open_tenant_findings_empty',
|
'action_name' => 'open_tenant_findings_empty',
|
||||||
'action_label' => 'Open environment findings',
|
'action_label' => 'Open tenant findings',
|
||||||
'action_kind' => 'url',
|
'action_kind' => 'url',
|
||||||
'action_url' => FindingResource::getUrl('index', tenant: $activeTenant),
|
'action_url' => FindingResource::getUrl('index', panel: 'tenant', tenant: $activeTenant),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
return [
|
return [
|
||||||
'title' => 'No visible assigned findings right now',
|
'title' => 'No visible assigned findings right now',
|
||||||
'body' => 'Nothing currently assigned to you needs attention across the visible environment scope. Choose an environment to continue working elsewhere in the workspace.',
|
'body' => 'Nothing currently assigned to you needs attention across the visible tenant scope. Choose a tenant to continue working elsewhere in the workspace.',
|
||||||
'icon' => 'heroicon-o-clipboard-document-check',
|
'icon' => 'heroicon-o-clipboard-document-check',
|
||||||
'action_name' => 'choose_environment_empty',
|
'action_name' => 'choose_tenant_empty',
|
||||||
'action_label' => 'Choose an environment',
|
'action_label' => 'Choose a tenant',
|
||||||
'action_kind' => 'url',
|
'action_kind' => 'url',
|
||||||
'action_url' => route('filament.admin.pages.choose-environment'),
|
'action_url' => route('filament.admin.pages.choose-tenant'),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -302,12 +302,12 @@ public function updatedTableFilters(): void
|
|||||||
|
|
||||||
public function clearTenantFilter(): void
|
public function clearTenantFilter(): void
|
||||||
{
|
{
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
$this->resetTable();
|
$this->resetTable();
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function visibleTenants(): array
|
public function visibleTenants(): array
|
||||||
{
|
{
|
||||||
@ -325,12 +325,12 @@ public function visibleTenants(): array
|
|||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
$resolver->primeMemberships(
|
$resolver->primeMemberships(
|
||||||
$user,
|
$user,
|
||||||
array_map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(), $tenants),
|
array_map(static fn (Tenant $tenant): int => (int) $tenant->getKey(), $tenants),
|
||||||
);
|
);
|
||||||
|
|
||||||
return $this->visibleTenants = array_values(array_filter(
|
return $this->visibleTenants = array_values(array_filter(
|
||||||
$tenants,
|
$tenants,
|
||||||
fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
||||||
));
|
));
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -355,7 +355,7 @@ private function authorizePageAccess(): void
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function authorizedTenants(): array
|
private function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -370,10 +370,11 @@ private function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->authorizedTenants = $user->accessibleManagedEnvironmentsQuery((int) $workspace->getKey())
|
return $this->authorizedTenants = $user->tenants()
|
||||||
->where('managed_environments.lifecycle_status', 'active')
|
->where('tenants.workspace_id', (int) $workspace->getKey())
|
||||||
->orderBy('managed_environments.name')
|
->where('tenants.status', 'active')
|
||||||
->get(['managed_environments.id', 'managed_environments.name', 'managed_environments.slug', 'managed_environments.workspace_id'])
|
->orderBy('tenants.name')
|
||||||
|
->get(['tenants.id', 'tenants.name', 'tenants.external_id', 'tenants.workspace_id'])
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -397,7 +398,7 @@ private function queueBaseQuery(): Builder
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
$tenantIds = array_map(
|
$tenantIds = array_map(
|
||||||
static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(),
|
static fn (Tenant $tenant): int => (int) $tenant->getKey(),
|
||||||
$this->visibleTenants(),
|
$this->visibleTenants(),
|
||||||
);
|
);
|
||||||
|
|
||||||
@ -409,7 +410,7 @@ private function queueBaseQuery(): Builder
|
|||||||
->with(['tenant', 'ownerUser', 'assigneeUser'])
|
->with(['tenant', 'ownerUser', 'assigneeUser'])
|
||||||
->withSubjectDisplayName()
|
->withSubjectDisplayName()
|
||||||
->where('workspace_id', (int) $workspace->getKey())
|
->where('workspace_id', (int) $workspace->getKey())
|
||||||
->whereIn('managed_environment_id', $tenantIds === [] ? [-1] : $tenantIds)
|
->whereIn('tenant_id', $tenantIds === [] ? [-1] : $tenantIds)
|
||||||
->where('assignee_user_id', (int) $user->getKey())
|
->where('assignee_user_id', (int) $user->getKey())
|
||||||
->whereIn('status', Finding::openStatusesForQuery())
|
->whereIn('status', Finding::openStatusesForQuery())
|
||||||
->orderByRaw(
|
->orderByRaw(
|
||||||
@ -427,7 +428,7 @@ private function filteredQueueQuery(bool $includeTenantFilter = true): Builder
|
|||||||
$filters = $this->currentQueueFiltersState();
|
$filters = $this->currentQueueFiltersState();
|
||||||
|
|
||||||
if ($includeTenantFilter && ($tenantId = $this->currentTenantFilterIdFromFilters($filters)) !== null) {
|
if ($includeTenantFilter && ($tenantId = $this->currentTenantFilterIdFromFilters($filters)) !== null) {
|
||||||
$query->where('managed_environment_id', $tenantId);
|
$query->where('tenant_id', $tenantId);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($this->filterIsActive($filters, 'overdue')) {
|
if ($this->filterIsActive($filters, 'overdue')) {
|
||||||
@ -453,7 +454,7 @@ private function filteredQueueQuery(bool $includeTenantFilter = true): Builder
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->visibleTenants())
|
return collect($this->visibleTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => (string) $tenant->name,
|
(string) $tenant->getKey() => (string) $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -472,8 +473,8 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -481,7 +482,7 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
|
|
||||||
private function normalizeTenantFilterState(): void
|
private function normalizeTenantFilterState(): void
|
||||||
{
|
{
|
||||||
$configuredTenantFilter = data_get($this->currentQueueFiltersState(), 'managed_environment_id.value');
|
$configuredTenantFilter = data_get($this->currentQueueFiltersState(), 'tenant_id.value');
|
||||||
|
|
||||||
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
if ($configuredTenantFilter === null || $configuredTenantFilter === '') {
|
||||||
return;
|
return;
|
||||||
@ -491,7 +492,7 @@ private function normalizeTenantFilterState(): void
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -517,7 +518,7 @@ private function currentTenantFilterId(): ?int
|
|||||||
*/
|
*/
|
||||||
private function currentTenantFilterIdFromFilters(array $filters): ?int
|
private function currentTenantFilterIdFromFilters(array $filters): ?int
|
||||||
{
|
{
|
||||||
$tenantFilter = data_get($filters, 'managed_environment_id.value');
|
$tenantFilter = data_get($filters, 'tenant_id.value');
|
||||||
|
|
||||||
if (! is_numeric($tenantFilter)) {
|
if (! is_numeric($tenantFilter)) {
|
||||||
return null;
|
return null;
|
||||||
@ -542,7 +543,7 @@ private function filterIsActive(array $filters, string $name): bool
|
|||||||
return (bool) data_get($filters, "{$name}.isActive", false);
|
return (bool) data_get($filters, "{$name}.isActive", false);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function filteredTenant(): ?ManagedEnvironment
|
private function filteredTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantId = $this->currentTenantFilterId();
|
$tenantId = $this->currentTenantFilterId();
|
||||||
|
|
||||||
@ -559,11 +560,11 @@ private function filteredTenant(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function activeVisibleTenant(): ?ManagedEnvironment
|
private function activeVisibleTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
if (! $activeTenant instanceof ManagedEnvironment) {
|
if (! $activeTenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -580,13 +581,13 @@ private function tenantPrefilterSource(): string
|
|||||||
{
|
{
|
||||||
$tenant = $this->filteredTenant();
|
$tenant = $this->filteredTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return 'none';
|
return 'none';
|
||||||
}
|
}
|
||||||
|
|
||||||
$activeTenant = $this->activeVisibleTenant();
|
$activeTenant = $this->activeVisibleTenant();
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment && $activeTenant->is($tenant)) {
|
if ($activeTenant instanceof Tenant && $activeTenant->is($tenant)) {
|
||||||
return 'active_tenant_context';
|
return 'active_tenant_context';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -631,11 +632,11 @@ private function findingDetailUrl(Finding $record): string
|
|||||||
{
|
{
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return '#';
|
return '#';
|
||||||
}
|
}
|
||||||
|
|
||||||
$url = FindingResource::getUrl('view', ['record' => $record], tenant: $tenant);
|
$url = FindingResource::getUrl('view', ['record' => $record], panel: 'tenant', tenant: $tenant);
|
||||||
|
|
||||||
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
return $this->appendQuery($url, $this->navigationContext()->toQuery());
|
||||||
}
|
}
|
||||||
|
|||||||
@ -1,751 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
declare(strict_types=1);
|
|
||||||
|
|
||||||
namespace App\Filament\Pages\Governance;
|
|
||||||
|
|
||||||
use App\Filament\Resources\FindingExceptionResource;
|
|
||||||
use App\Models\FindingException;
|
|
||||||
use App\Models\ManagedEnvironment;
|
|
||||||
use App\Models\User;
|
|
||||||
use App\Models\Workspace;
|
|
||||||
use App\Services\Auth\CapabilityResolver;
|
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
|
||||||
use App\Support\Auth\Capabilities;
|
|
||||||
use App\Support\Badges\BadgeDomain;
|
|
||||||
use App\Support\Badges\BadgeRenderer;
|
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
|
||||||
use App\Support\GovernanceDecisions\GovernanceDecisionRegisterBuilder;
|
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceType;
|
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
|
||||||
use BackedEnum;
|
|
||||||
use Filament\Actions\Action;
|
|
||||||
use Filament\Facades\Filament;
|
|
||||||
use Filament\Pages\Page;
|
|
||||||
use Filament\Tables;
|
|
||||||
use Filament\Tables\Columns\TextColumn;
|
|
||||||
use Filament\Tables\Concerns\InteractsWithTable;
|
|
||||||
use Filament\Tables\Contracts\HasTable;
|
|
||||||
use Filament\Tables\Table;
|
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
|
||||||
use Illuminate\Support\Str;
|
|
||||||
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
|
|
||||||
use UnitEnum;
|
|
||||||
|
|
||||||
class DecisionRegister extends Page implements HasTable
|
|
||||||
{
|
|
||||||
use InteractsWithTable;
|
|
||||||
|
|
||||||
protected static bool $isDiscovered = false;
|
|
||||||
|
|
||||||
protected static string|BackedEnum|null $navigationIcon = 'heroicon-o-clipboard-document-check';
|
|
||||||
|
|
||||||
protected static string|UnitEnum|null $navigationGroup = 'Governance';
|
|
||||||
|
|
||||||
protected static ?string $navigationLabel = 'Decision register';
|
|
||||||
|
|
||||||
protected static ?int $navigationSort = 6;
|
|
||||||
|
|
||||||
protected static ?string $title = 'Decision register';
|
|
||||||
|
|
||||||
protected static ?string $slug = 'governance/decisions';
|
|
||||||
|
|
||||||
protected string $view = 'filament.pages.governance.decision-register';
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<int, ManagedEnvironment>|null
|
|
||||||
*/
|
|
||||||
private ?array $authorizedTenants = null;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<int, ManagedEnvironment>|null
|
|
||||||
*/
|
|
||||||
private ?array $visibleDecisionTenants = null;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<string, mixed>|null
|
|
||||||
*/
|
|
||||||
private ?array $registerPayload = null;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<string, mixed>|null
|
|
||||||
*/
|
|
||||||
private ?array $unfilteredRegisterPayload = null;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<int, array<string, mixed>>|null
|
|
||||||
*/
|
|
||||||
private ?array $rowPayloadByExceptionId = null;
|
|
||||||
|
|
||||||
private ?Workspace $workspace = null;
|
|
||||||
|
|
||||||
public ?int $tenantId = null;
|
|
||||||
|
|
||||||
public string $registerState = 'open';
|
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|
||||||
{
|
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly, ActionSurfaceType::ReadOnlyRegistryReport)
|
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header controls keep tenant and register-state scope visible without introducing a second mutation surface.')
|
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The decision register keeps one dominant row action and avoids a More menu in v1.')
|
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The decision register is read-only and intentionally omits bulk actions.')
|
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'Filtered empty states stay truthful and provide one path back to the broader register scope.')
|
|
||||||
->exempt(ActionSurfaceSlot::DetailHeader, 'The register owns no local detail surface; existing exception detail remains the action owner.');
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function canAccess(): bool
|
|
||||||
{
|
|
||||||
if (Filament::getCurrentPanel()?->getId() !== 'admin') {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = static::resolveWorkspaceFromRequest();
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$resolver = app(WorkspaceCapabilityResolver::class);
|
|
||||||
|
|
||||||
if (! $resolver->isMember($user, $workspace)) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (static::hasRequestedTenantPrefilter()) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
$visibleTenants = static::resolveVisibleDecisionTenantsFor($user, $workspace);
|
|
||||||
|
|
||||||
if ($visibleTenants === []) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (request()->query('register_state') === 'recently_closed') {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
$counts = app(GovernanceDecisionRegisterBuilder::class)->build(
|
|
||||||
workspace: $workspace,
|
|
||||||
visibleTenants: $visibleTenants,
|
|
||||||
registerState: 'open',
|
|
||||||
)['counts'] ?? [];
|
|
||||||
|
|
||||||
return (int) ($counts['open'] ?? 0) > 0
|
|
||||||
|| (int) ($counts['recently_closed'] ?? 0) > 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function mount(): void
|
|
||||||
{
|
|
||||||
$this->mountInteractsWithTable();
|
|
||||||
$this->authorizeWorkspaceMembership();
|
|
||||||
$this->applyRequestedTenantPrefilter();
|
|
||||||
$this->registerState = $this->resolveRequestedRegisterState();
|
|
||||||
$this->ensureRegisterIsVisible();
|
|
||||||
}
|
|
||||||
|
|
||||||
public function pageUrl(array $overrides = []): string
|
|
||||||
{
|
|
||||||
$selectedTenant = $this->selectedTenant();
|
|
||||||
$resolvedTenant = array_key_exists('tenant', $overrides)
|
|
||||||
? $overrides['tenant']
|
|
||||||
: ($selectedTenant?->getKey() !== null ? (string) $selectedTenant->getKey() : null);
|
|
||||||
$resolvedRegisterState = array_key_exists('register_state', $overrides)
|
|
||||||
? $overrides['register_state']
|
|
||||||
: $this->registerState;
|
|
||||||
|
|
||||||
return static::getUrl(
|
|
||||||
panel: 'admin',
|
|
||||||
parameters: array_filter([
|
|
||||||
'managed_environment_id' => is_string($resolvedTenant) && $resolvedTenant !== '' ? $resolvedTenant : null,
|
|
||||||
'register_state' => is_string($resolvedRegisterState) && $resolvedRegisterState !== 'open' ? $resolvedRegisterState : null,
|
|
||||||
], static fn (mixed $value): bool => $value !== null && $value !== ''),
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
public function appliedScope(): array
|
|
||||||
{
|
|
||||||
return [
|
|
||||||
'workspace_label' => $this->workspace()?->name,
|
|
||||||
'tenant_label' => $this->selectedTenant()?->name,
|
|
||||||
'register_state_label' => $this->registerStateLabel($this->registerState),
|
|
||||||
'visible_count' => $this->registerPayload()['counts'][$this->registerState] ?? 0,
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return list<array{key: string, label: string, count: int}>
|
|
||||||
*/
|
|
||||||
public function availableRegisterStates(): array
|
|
||||||
{
|
|
||||||
$counts = $this->registerPayload()['counts'] ?? ['open' => 0, 'recently_closed' => 0];
|
|
||||||
|
|
||||||
return [
|
|
||||||
[
|
|
||||||
'key' => 'open',
|
|
||||||
'label' => 'Open decisions',
|
|
||||||
'count' => (int) ($counts['open'] ?? 0),
|
|
||||||
],
|
|
||||||
[
|
|
||||||
'key' => 'recently_closed',
|
|
||||||
'label' => 'Recently closed',
|
|
||||||
'count' => (int) ($counts['recently_closed'] ?? 0),
|
|
||||||
],
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
public function hasTenantPrefilter(): bool
|
|
||||||
{
|
|
||||||
return $this->selectedTenant() instanceof ManagedEnvironment;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function isActiveRegisterState(string $registerState): bool
|
|
||||||
{
|
|
||||||
return $this->registerState === $registerState;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function emptyStateHeading(): string
|
|
||||||
{
|
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
|
||||||
return 'This environment filter is hiding other visible decision follow-through';
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->registerState === 'recently_closed') {
|
|
||||||
return 'No recently closed decisions match this filter right now.';
|
|
||||||
}
|
|
||||||
|
|
||||||
return 'No open decisions match this filter right now.';
|
|
||||||
}
|
|
||||||
|
|
||||||
public function emptyStateDescription(): string
|
|
||||||
{
|
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
|
||||||
return 'The current environment scope is calm, but other visible environments in this workspace still have open governance decisions.';
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->registerState === 'recently_closed') {
|
|
||||||
return 'Switch back to open decisions to continue the current follow-through lane, or widen the environment scope if you were filtering the register.';
|
|
||||||
}
|
|
||||||
|
|
||||||
return 'Try widening the environment scope or switch to recently closed decisions if you are checking what was just finished.';
|
|
||||||
}
|
|
||||||
|
|
||||||
public function emptyStateActionLabel(): ?string
|
|
||||||
{
|
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
|
||||||
return 'Clear environment filter';
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->registerState === 'recently_closed') {
|
|
||||||
return 'Open current decisions';
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function emptyStateActionUrl(): ?string
|
|
||||||
{
|
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
|
||||||
return $this->pageUrl(['tenant' => null]);
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->registerState === 'recently_closed') {
|
|
||||||
return $this->pageUrl(['register_state' => 'open']);
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function table(Table $table): Table
|
|
||||||
{
|
|
||||||
return $table
|
|
||||||
->query($this->tableQuery())
|
|
||||||
->defaultSort('review_due_at', 'asc')
|
|
||||||
->paginated(TablePaginationProfiles::resource())
|
|
||||||
->persistFiltersInSession()
|
|
||||||
->persistSearchInSession()
|
|
||||||
->persistSortInSession()
|
|
||||||
->recordUrl(fn (FindingException $record): ?string => $this->decisionUrl($record))
|
|
||||||
->columns([
|
|
||||||
TextColumn::make('tenant.name')
|
|
||||||
->label('ManagedEnvironment')
|
|
||||||
->searchable()
|
|
||||||
->sortable(),
|
|
||||||
TextColumn::make('status')
|
|
||||||
->badge()
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::FindingExceptionStatus))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::FindingExceptionStatus))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::FindingExceptionStatus))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::FindingExceptionStatus))
|
|
||||||
->sortable(),
|
|
||||||
TextColumn::make('current_validity_state')
|
|
||||||
->label('Impact')
|
|
||||||
->badge()
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::FindingRiskGovernanceValidity))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::FindingRiskGovernanceValidity))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::FindingRiskGovernanceValidity))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::FindingRiskGovernanceValidity)),
|
|
||||||
TextColumn::make('owner.name')
|
|
||||||
->label('Owner')
|
|
||||||
->placeholder('—')
|
|
||||||
->toggleable(),
|
|
||||||
TextColumn::make('review_due_at')
|
|
||||||
->label('Review due')
|
|
||||||
->dateTime()
|
|
||||||
->since()
|
|
||||||
->placeholder('—')
|
|
||||||
->tooltip(fn (FindingException $record): ?string => $record->review_due_at?->toDayDateTimeString())
|
|
||||||
->sortable(),
|
|
||||||
TextColumn::make('proof_availability')
|
|
||||||
->label('Proof')
|
|
||||||
->state(fn (FindingException $record): string => (string) ($this->rowPayload($record)['proof_label'] ?? 'No linked proof'))
|
|
||||||
->description(fn (FindingException $record): ?string => $this->proofUrl($record) !== null
|
|
||||||
? (string) ($this->rowPayload($record)['proof_url_label'] ?? 'View proof')
|
|
||||||
: null)
|
|
||||||
->url(fn (FindingException $record): ?string => $this->proofUrl($record))
|
|
||||||
->wrap(),
|
|
||||||
TextColumn::make('operation_run_link')
|
|
||||||
->label('Operation')
|
|
||||||
->state(fn (FindingException $record): string => (string) ($this->rowPayload($record)['operation_run_label'] ?? 'No operation linked'))
|
|
||||||
->url(fn (FindingException $record): ?string => $this->operationRunUrl($record))
|
|
||||||
->wrap(),
|
|
||||||
TextColumn::make('next_action_label')
|
|
||||||
->label('Next action')
|
|
||||||
->state(fn (FindingException $record): ?string => $this->rowPayload($record)['next_action_label'] ?? null)
|
|
||||||
->visible(fn (): bool => $this->registerState === 'open')
|
|
||||||
->wrap(),
|
|
||||||
TextColumn::make('closure_reason')
|
|
||||||
->label('Closure reason')
|
|
||||||
->state(fn (FindingException $record): ?string => $this->rowPayload($record)['closure_reason'] ?? null)
|
|
||||||
->placeholder('—')
|
|
||||||
->visible(fn (): bool => $this->registerState === 'recently_closed')
|
|
||||||
->wrap(),
|
|
||||||
])
|
|
||||||
->emptyStateHeading($this->emptyStateHeading())
|
|
||||||
->emptyStateDescription($this->emptyStateDescription())
|
|
||||||
->emptyStateActions($this->emptyStateActions());
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return list<Tables\Actions\Action>
|
|
||||||
*/
|
|
||||||
private function emptyStateActions(): array
|
|
||||||
{
|
|
||||||
$label = $this->emptyStateActionLabel();
|
|
||||||
$url = $this->emptyStateActionUrl();
|
|
||||||
|
|
||||||
if (! is_string($label) || ! is_string($url)) {
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
return [
|
|
||||||
Action::make('empty_state_scope_action')
|
|
||||||
->label($label)
|
|
||||||
->url($url),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return Builder<FindingException>
|
|
||||||
*/
|
|
||||||
private function tableQuery(): Builder
|
|
||||||
{
|
|
||||||
$tenantIds = array_values(array_map(
|
|
||||||
static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(),
|
|
||||||
$this->currentScopeTenants(),
|
|
||||||
));
|
|
||||||
|
|
||||||
$query = FindingException::query()
|
|
||||||
->where('workspace_id', (int) $this->workspace()?->getKey())
|
|
||||||
->whereIn('managed_environment_id', $tenantIds)
|
|
||||||
->with(['tenant', 'owner', 'currentDecision']);
|
|
||||||
|
|
||||||
if ($this->registerState === 'recently_closed') {
|
|
||||||
return $query
|
|
||||||
->whereIn('status', [
|
|
||||||
FindingException::STATUS_REJECTED,
|
|
||||||
FindingException::STATUS_REVOKED,
|
|
||||||
FindingException::STATUS_SUPERSEDED,
|
|
||||||
])
|
|
||||||
->whereHas('currentDecision', function (Builder $decisionQuery): void {
|
|
||||||
$decisionQuery->where('decided_at', '>=', now()->startOfDay()->subDays(30));
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
return $query
|
|
||||||
->whereNotIn('status', [
|
|
||||||
FindingException::STATUS_REJECTED,
|
|
||||||
FindingException::STATUS_REVOKED,
|
|
||||||
FindingException::STATUS_SUPERSEDED,
|
|
||||||
]);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function authorizeWorkspaceMembership(): void
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
|
||||||
abort(403);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
throw new NotFoundHttpException;
|
|
||||||
}
|
|
||||||
|
|
||||||
$resolver = app(WorkspaceCapabilityResolver::class);
|
|
||||||
|
|
||||||
if (! $resolver->isMember($user, $workspace)) {
|
|
||||||
throw new NotFoundHttpException;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
private function ensureRegisterIsVisible(): void
|
|
||||||
{
|
|
||||||
if ($this->visibleDecisionTenants() === []) {
|
|
||||||
abort(403);
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->tenantId !== null || $this->registerState !== 'open') {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$counts = $this->unfilteredRegisterPayload()['counts'] ?? [];
|
|
||||||
|
|
||||||
if ((int) ($counts['open'] ?? 0) > 0) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ((int) ($counts['recently_closed'] ?? 0) > 0) {
|
|
||||||
$this->redirect($this->pageUrl(['register_state' => 'recently_closed']), navigate: true);
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ((int) ($counts['open'] ?? 0) === 0) {
|
|
||||||
abort(403);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<int, ManagedEnvironment>
|
|
||||||
*/
|
|
||||||
private function authorizedTenants(): array
|
|
||||||
{
|
|
||||||
if ($this->authorizedTenants !== null) {
|
|
||||||
return $this->authorizedTenants;
|
|
||||||
}
|
|
||||||
|
|
||||||
$user = auth()->user();
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
|
||||||
return $this->authorizedTenants = [];
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->authorizedTenants = static::resolveAuthorizedTenantsFor($user, $workspace);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<int, ManagedEnvironment>
|
|
||||||
*/
|
|
||||||
private function visibleDecisionTenants(): array
|
|
||||||
{
|
|
||||||
if ($this->visibleDecisionTenants !== null) {
|
|
||||||
return $this->visibleDecisionTenants;
|
|
||||||
}
|
|
||||||
|
|
||||||
$user = auth()->user();
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
$tenants = $this->authorizedTenants();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $workspace instanceof Workspace || $tenants === []) {
|
|
||||||
return $this->visibleDecisionTenants = [];
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->visibleDecisionTenants = static::resolveVisibleDecisionTenantsFor($user, $workspace, $tenants);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function applyRequestedTenantPrefilter(): void
|
|
||||||
{
|
|
||||||
$requestedTenant = request()->query('managed_environment_id', request()->query('tenant'));
|
|
||||||
|
|
||||||
if (! is_string($requestedTenant) && ! is_numeric($requestedTenant)) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
foreach ($this->authorizedTenants() as $tenant) {
|
|
||||||
if ((string) $tenant->getKey() !== (string) $requestedTenant && (string) $tenant->external_id !== (string) $requestedTenant) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
$this->tenantId = (int) $tenant->getKey();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
throw new NotFoundHttpException;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function resolveRequestedRegisterState(): string
|
|
||||||
{
|
|
||||||
$registerState = request()->query('register_state');
|
|
||||||
|
|
||||||
if (! is_string($registerState)) {
|
|
||||||
return 'open';
|
|
||||||
}
|
|
||||||
|
|
||||||
return in_array($registerState, ['open', 'recently_closed'], true)
|
|
||||||
? $registerState
|
|
||||||
: 'open';
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function hasRequestedTenantPrefilter(): bool
|
|
||||||
{
|
|
||||||
$requestedTenant = request()->query('managed_environment_id', request()->query('tenant'));
|
|
||||||
|
|
||||||
return is_string($requestedTenant) || is_numeric($requestedTenant);
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function resolveWorkspaceFromRequest(): ?Workspace
|
|
||||||
{
|
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
|
||||||
|
|
||||||
if (! is_int($workspaceId)) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return Workspace::query()->whereKey($workspaceId)->first();
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<int, ManagedEnvironment>
|
|
||||||
*/
|
|
||||||
private static function resolveAuthorizedTenantsFor(User $user, Workspace $workspace): array
|
|
||||||
{
|
|
||||||
return $user->accessibleManagedEnvironmentsQuery((int) $workspace->getKey())
|
|
||||||
->where('managed_environments.lifecycle_status', 'active')
|
|
||||||
->orderBy('managed_environments.name')
|
|
||||||
->get(['managed_environments.id', 'managed_environments.name', 'managed_environments.slug', 'managed_environments.workspace_id'])
|
|
||||||
->all();
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<int, ManagedEnvironment>|null $authorizedTenants
|
|
||||||
* @return array<int, ManagedEnvironment>
|
|
||||||
*/
|
|
||||||
private static function resolveVisibleDecisionTenantsFor(User $user, Workspace $workspace, ?array $authorizedTenants = null): array
|
|
||||||
{
|
|
||||||
$tenants = $authorizedTenants ?? static::resolveAuthorizedTenantsFor($user, $workspace);
|
|
||||||
|
|
||||||
if ($tenants === []) {
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
$resolver = app(CapabilityResolver::class);
|
|
||||||
$resolver->primeMemberships(
|
|
||||||
$user,
|
|
||||||
array_map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(), $tenants),
|
|
||||||
);
|
|
||||||
|
|
||||||
return array_values(array_filter(
|
|
||||||
$tenants,
|
|
||||||
fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::FINDING_EXCEPTION_VIEW),
|
|
||||||
));
|
|
||||||
}
|
|
||||||
|
|
||||||
private function workspace(): ?Workspace
|
|
||||||
{
|
|
||||||
if ($this->workspace instanceof Workspace) {
|
|
||||||
return $this->workspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->workspace = static::resolveWorkspaceFromRequest();
|
|
||||||
}
|
|
||||||
|
|
||||||
private function selectedTenant(): ?ManagedEnvironment
|
|
||||||
{
|
|
||||||
if (! is_int($this->tenantId)) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
foreach ($this->visibleDecisionTenants() as $tenant) {
|
|
||||||
if ((int) $tenant->getKey() === $this->tenantId) {
|
|
||||||
return $tenant;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<int, ManagedEnvironment>
|
|
||||||
*/
|
|
||||||
private function currentScopeTenants(): array
|
|
||||||
{
|
|
||||||
$selectedTenant = $this->selectedTenant();
|
|
||||||
|
|
||||||
if ($selectedTenant instanceof ManagedEnvironment) {
|
|
||||||
return [$selectedTenant];
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->visibleDecisionTenants();
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>
|
|
||||||
*/
|
|
||||||
private function registerPayload(): array
|
|
||||||
{
|
|
||||||
if (is_array($this->registerPayload)) {
|
|
||||||
return $this->registerPayload;
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
return $this->registerPayload = [
|
|
||||||
'rows' => [],
|
|
||||||
'counts' => ['open' => 0, 'recently_closed' => 0],
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->registerPayload = app(GovernanceDecisionRegisterBuilder::class)->build(
|
|
||||||
workspace: $workspace,
|
|
||||||
visibleTenants: $this->currentScopeTenants(),
|
|
||||||
registerState: $this->registerState,
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>
|
|
||||||
*/
|
|
||||||
private function unfilteredRegisterPayload(): array
|
|
||||||
{
|
|
||||||
if (is_array($this->unfilteredRegisterPayload)) {
|
|
||||||
return $this->unfilteredRegisterPayload;
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
return $this->unfilteredRegisterPayload = [
|
|
||||||
'rows' => [],
|
|
||||||
'counts' => ['open' => 0, 'recently_closed' => 0],
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->unfilteredRegisterPayload = app(GovernanceDecisionRegisterBuilder::class)->build(
|
|
||||||
workspace: $workspace,
|
|
||||||
visibleTenants: $this->visibleDecisionTenants(),
|
|
||||||
registerState: 'open',
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>
|
|
||||||
*/
|
|
||||||
private function rowPayload(FindingException $record): array
|
|
||||||
{
|
|
||||||
if (! is_array($this->rowPayloadByExceptionId)) {
|
|
||||||
$this->rowPayloadByExceptionId = collect($this->registerPayload()['rows'] ?? [])
|
|
||||||
->keyBy('exception_id')
|
|
||||||
->all();
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->rowPayloadByExceptionId[(int) $record->getKey()] ?? [];
|
|
||||||
}
|
|
||||||
|
|
||||||
private function tenantFilterAloneExcludesRows(): bool
|
|
||||||
{
|
|
||||||
if (! is_int($this->tenantId) || $this->registerState !== 'open') {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (($this->registerPayload()['rows'] ?? []) !== []) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
return (int) ($this->unfilteredRegisterPayload()['counts']['open'] ?? 0) > 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function registerStateLabel(string $registerState): string
|
|
||||||
{
|
|
||||||
return match ($registerState) {
|
|
||||||
'recently_closed' => 'Recently closed',
|
|
||||||
default => 'Open decisions',
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
public function decisionUrl(FindingException $record): ?string
|
|
||||||
{
|
|
||||||
$tenant = $record->tenant;
|
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->appendQuery(
|
|
||||||
FindingExceptionResource::getUrl('view', ['record' => $record], tenant: $tenant),
|
|
||||||
$this->navigationContext()->toQuery(),
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function proofUrl(FindingException $record): ?string
|
|
||||||
{
|
|
||||||
$row = $this->rowPayload($record);
|
|
||||||
$proofState = $row['proof_state'] ?? null;
|
|
||||||
|
|
||||||
if ($proofState === 'linked_detail_section') {
|
|
||||||
return $this->decisionUrl($record);
|
|
||||||
}
|
|
||||||
|
|
||||||
$url = $row['proof_url'] ?? null;
|
|
||||||
|
|
||||||
return is_string($url) && $url !== '' ? $url : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function operationRunUrl(FindingException $record): ?string
|
|
||||||
{
|
|
||||||
$url = $this->rowPayload($record)['operation_run_url'] ?? null;
|
|
||||||
|
|
||||||
return is_string($url) && $url !== '' ? $url : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function navigationContext(): CanonicalNavigationContext
|
|
||||||
{
|
|
||||||
return CanonicalNavigationContext::forDecisionRegister(
|
|
||||||
canonicalRouteName: static::getRouteName(Filament::getPanel('admin')),
|
|
||||||
tenantId: $this->tenantId,
|
|
||||||
backLinkUrl: $this->pageUrl(),
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<string, mixed> $query
|
|
||||||
*/
|
|
||||||
private function appendQuery(string $url, array $query): string
|
|
||||||
{
|
|
||||||
$queryString = http_build_query($query);
|
|
||||||
|
|
||||||
if ($queryString === '') {
|
|
||||||
return $url;
|
|
||||||
}
|
|
||||||
|
|
||||||
$separator = str_contains($url, '?') ? '&' : '?';
|
|
||||||
|
|
||||||
return $url.$separator.$queryString;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -6,12 +6,12 @@
|
|||||||
|
|
||||||
use App\Filament\Pages\Findings\FindingsIntakeQueue;
|
use App\Filament\Pages\Findings\FindingsIntakeQueue;
|
||||||
use App\Filament\Pages\Findings\MyFindingsInbox;
|
use App\Filament\Pages\Findings\MyFindingsInbox;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
use App\Services\EnvironmentReviews\EnvironmentReviewRegisterService;
|
use App\Services\TenantReviews\TenantReviewRegisterService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\GovernanceInbox\GovernanceInboxSectionBuilder;
|
use App\Support\GovernanceInbox\GovernanceInboxSectionBuilder;
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
@ -47,17 +47,17 @@ class GovernanceInbox extends Page
|
|||||||
protected string $view = 'filament.pages.governance.governance-inbox';
|
protected string $view = 'filament.pages.governance.governance-inbox';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $visibleFindingTenants = null;
|
private ?array $visibleFindingTenants = null;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $reviewTenants = null;
|
private ?array $reviewTenants = null;
|
||||||
|
|
||||||
@ -113,7 +113,7 @@ public function appliedScope(): array
|
|||||||
return [
|
return [
|
||||||
'workspace_label' => $this->workspace()?->name,
|
'workspace_label' => $this->workspace()?->name,
|
||||||
'tenant_label' => $selectedTenant?->name,
|
'tenant_label' => $selectedTenant?->name,
|
||||||
'tenant_prefilter_source' => $selectedTenant instanceof ManagedEnvironment ? 'explicit_filter' : 'none',
|
'tenant_prefilter_source' => $selectedTenant instanceof Tenant ? 'explicit_filter' : 'none',
|
||||||
'family_key' => $this->family,
|
'family_key' => $this->family,
|
||||||
'family_label' => $this->family !== null
|
'family_label' => $this->family !== null
|
||||||
? ($availableFamilies->get($this->family)['label'] ?? Str::headline($this->family))
|
? ($availableFamilies->get($this->family)['label'] ?? Str::headline($this->family))
|
||||||
@ -145,9 +145,9 @@ public function calmEmptyState(): array
|
|||||||
{
|
{
|
||||||
if ($this->tenantFilterAloneExcludesRows()) {
|
if ($this->tenantFilterAloneExcludesRows()) {
|
||||||
return [
|
return [
|
||||||
'title' => 'This environment filter is hiding other visible attention',
|
'title' => 'This tenant filter is hiding other visible attention',
|
||||||
'body' => 'The current environment scope is calm, but other visible environments in this workspace still have governance attention.',
|
'body' => 'The current tenant scope is calm, but other visible tenants in this workspace still have governance attention.',
|
||||||
'action_label' => 'Clear environment filter',
|
'action_label' => 'Clear tenant filter',
|
||||||
'action_url' => $this->pageUrl(['tenant' => null]),
|
'action_url' => $this->pageUrl(['tenant' => null]),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
@ -162,7 +162,7 @@ public function calmEmptyState(): array
|
|||||||
|
|
||||||
public function hasTenantPrefilter(): bool
|
public function hasTenantPrefilter(): bool
|
||||||
{
|
{
|
||||||
return $this->selectedTenant() instanceof ManagedEnvironment;
|
return $this->selectedTenant() instanceof Tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
public function isActiveFamily(?string $familyKey): bool
|
public function isActiveFamily(?string $familyKey): bool
|
||||||
@ -183,7 +183,7 @@ public function pageUrl(array $overrides = []): string
|
|||||||
return static::getUrl(
|
return static::getUrl(
|
||||||
panel: 'admin',
|
panel: 'admin',
|
||||||
parameters: array_filter([
|
parameters: array_filter([
|
||||||
'managed_environment_id' => is_string($resolvedTenant) && $resolvedTenant !== '' ? $resolvedTenant : null,
|
'tenant_id' => is_string($resolvedTenant) && $resolvedTenant !== '' ? $resolvedTenant : null,
|
||||||
'family' => is_string($resolvedFamily) && $resolvedFamily !== '' ? $resolvedFamily : null,
|
'family' => is_string($resolvedFamily) && $resolvedFamily !== '' ? $resolvedFamily : null,
|
||||||
], static fn (mixed $value): bool => $value !== null && $value !== ''),
|
], static fn (mixed $value): bool => $value !== null && $value !== ''),
|
||||||
);
|
);
|
||||||
@ -290,7 +290,7 @@ private function hasVisibleFindingExceptionsFamily(): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function visibleFindingTenants(): array
|
private function visibleFindingTenants(): array
|
||||||
{
|
{
|
||||||
@ -308,17 +308,17 @@ private function visibleFindingTenants(): array
|
|||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
$resolver->primeMemberships(
|
$resolver->primeMemberships(
|
||||||
$user,
|
$user,
|
||||||
array_map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(), $tenants),
|
array_map(static fn (Tenant $tenant): int => (int) $tenant->getKey(), $tenants),
|
||||||
);
|
);
|
||||||
|
|
||||||
return $this->visibleFindingTenants = array_values(array_filter(
|
return $this->visibleFindingTenants = array_values(array_filter(
|
||||||
$tenants,
|
$tenants,
|
||||||
fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_FINDINGS_VIEW),
|
||||||
));
|
));
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function reviewTenants(): array
|
private function reviewTenants(): array
|
||||||
{
|
{
|
||||||
@ -333,7 +333,7 @@ private function reviewTenants(): array
|
|||||||
return $this->reviewTenants = [];
|
return $this->reviewTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
$service = app(EnvironmentReviewRegisterService::class);
|
$service = app(TenantReviewRegisterService::class);
|
||||||
|
|
||||||
if (! $service->canAccessWorkspace($user, $workspace)) {
|
if (! $service->canAccessWorkspace($user, $workspace)) {
|
||||||
return $this->reviewTenants = [];
|
return $this->reviewTenants = [];
|
||||||
@ -343,7 +343,7 @@ private function reviewTenants(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function authorizedTenants(): array
|
private function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -358,16 +358,17 @@ private function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->authorizedTenants = $user->accessibleManagedEnvironmentsQuery((int) $workspace->getKey())
|
return $this->authorizedTenants = $user->tenants()
|
||||||
->where('managed_environments.lifecycle_status', 'active')
|
->where('tenants.workspace_id', (int) $workspace->getKey())
|
||||||
->orderBy('managed_environments.name')
|
->where('tenants.status', 'active')
|
||||||
->get(['managed_environments.id', 'managed_environments.name', 'managed_environments.slug', 'managed_environments.workspace_id'])
|
->orderBy('tenants.name')
|
||||||
|
->get(['tenants.id', 'tenants.name', 'tenants.external_id', 'tenants.workspace_id'])
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
private function applyRequestedTenantPrefilter(): void
|
private function applyRequestedTenantPrefilter(): void
|
||||||
{
|
{
|
||||||
$requestedTenant = request()->query('managed_environment_id', request()->query('tenant'));
|
$requestedTenant = request()->query('tenant_id', request()->query('tenant'));
|
||||||
|
|
||||||
if (! is_string($requestedTenant) && ! is_numeric($requestedTenant)) {
|
if (! is_string($requestedTenant) && ! is_numeric($requestedTenant)) {
|
||||||
return;
|
return;
|
||||||
@ -489,7 +490,7 @@ private function unfilteredInboxPayload(): array
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function selectedTenant(): ?ManagedEnvironment
|
private function selectedTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if (! is_int($this->tenantId)) {
|
if (! is_int($this->tenantId)) {
|
||||||
return null;
|
return null;
|
||||||
|
|||||||
@ -9,9 +9,8 @@
|
|||||||
use App\Filament\Resources\InventoryItemResource;
|
use App\Filament\Resources\InventoryItemResource;
|
||||||
use App\Filament\Widgets\Inventory\InventoryKpiHeader;
|
use App\Filament\Widgets\Inventory\InventoryKpiHeader;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Badges\BadgeCatalog;
|
use App\Support\Badges\BadgeCatalog;
|
||||||
@ -21,7 +20,6 @@
|
|||||||
use App\Support\Badges\TagBadgeDomain;
|
use App\Support\Badges\TagBadgeDomain;
|
||||||
use App\Support\Inventory\TenantCoverageTruth;
|
use App\Support\Inventory\TenantCoverageTruth;
|
||||||
use App\Support\Inventory\TenantCoverageTruthResolver;
|
use App\Support\Inventory\TenantCoverageTruthResolver;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
@ -40,7 +38,6 @@
|
|||||||
use Filament\Tables\Filters\SelectFilter;
|
use Filament\Tables\Filters\SelectFilter;
|
||||||
use Filament\Tables\Table;
|
use Filament\Tables\Table;
|
||||||
use Illuminate\Pagination\LengthAwarePaginator;
|
use Illuminate\Pagination\LengthAwarePaginator;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
|
||||||
use Illuminate\Support\Collection;
|
use Illuminate\Support\Collection;
|
||||||
use Illuminate\Support\Str;
|
use Illuminate\Support\Str;
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
@ -80,38 +77,11 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
public static function getUrl(array $parameters = [], bool $isAbsolute = true, ?string $panel = null, ?Model $tenant = null): string
|
|
||||||
{
|
|
||||||
$panelId = $panel ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
|
||||||
|
|
||||||
if ($panelId !== 'admin') {
|
|
||||||
return parent::getUrl($parameters, $isAbsolute, $panelId, $tenant);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
$resolvedTenant = static::resolveAdminUrlTenant($parameters, $tenant);
|
return parent::shouldRegisterNavigation();
|
||||||
|
|
||||||
if (! $resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = static::resolveAdminUrlWorkspace($resolvedTenant, $parameters);
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace && ! is_string($workspace) && ! is_int($workspace)) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$parameters['environment'] ??= $resolvedTenant;
|
|
||||||
$parameters['workspace'] ??= $workspace;
|
|
||||||
unset($parameters['tenant']);
|
|
||||||
|
|
||||||
return parent::getUrl($parameters, $isAbsolute, $panelId, null);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canAccess(): bool
|
public static function canAccess(): bool
|
||||||
@ -119,7 +89,7 @@ public static function canAccess(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -539,7 +509,7 @@ public function basisRunSummary(): array
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $truth instanceof TenantCoverageTruth || ! $tenant instanceof ManagedEnvironment) {
|
if (! $truth instanceof TenantCoverageTruth || ! $tenant instanceof Tenant) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -553,7 +523,7 @@ public function basisRunSummary(): array
|
|||||||
'badgeColor' => null,
|
'badgeColor' => null,
|
||||||
'runUrl' => null,
|
'runUrl' => null,
|
||||||
'historyUrl' => null,
|
'historyUrl' => null,
|
||||||
'inventoryItemsUrl' => InventoryItemResource::getUrl('index', tenant: $tenant),
|
'inventoryItemsUrl' => InventoryItemResource::getUrl('index', panel: 'tenant', tenant: $tenant),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -569,7 +539,7 @@ public function basisRunSummary(): array
|
|||||||
'badgeColor' => $badge->color,
|
'badgeColor' => $badge->color,
|
||||||
'runUrl' => $canViewRun ? OperationRunLinks::view($truth->basisRun, $tenant) : null,
|
'runUrl' => $canViewRun ? OperationRunLinks::view($truth->basisRun, $tenant) : null,
|
||||||
'historyUrl' => $canViewRun ? $this->inventorySyncHistoryUrl($tenant) : null,
|
'historyUrl' => $canViewRun ? $this->inventorySyncHistoryUrl($tenant) : null,
|
||||||
'inventoryItemsUrl' => InventoryItemResource::getUrl('index', tenant: $tenant),
|
'inventoryItemsUrl' => InventoryItemResource::getUrl('index', panel: 'tenant', tenant: $tenant),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -581,7 +551,7 @@ protected function coverageTruth(): ?TenantCoverageTruth
|
|||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -590,46 +560,8 @@ protected function coverageTruth(): ?TenantCoverageTruth
|
|||||||
return $this->cachedCoverageTruth;
|
return $this->cachedCoverageTruth;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function inventorySyncHistoryUrl(ManagedEnvironment $tenant): string
|
private function inventorySyncHistoryUrl(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
return OperationRunLinks::index($tenant, operationType: OperationRunType::InventorySync->value);
|
return OperationRunLinks::index($tenant, operationType: OperationRunType::InventorySync->value);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
private static function resolveAdminUrlTenant(array $parameters, ?Model $tenant = null): ?ManagedEnvironment
|
|
||||||
{
|
|
||||||
$parameterTenant = $parameters['tenant'] ?? $parameters['environment'] ?? null;
|
|
||||||
|
|
||||||
if ($parameterTenant instanceof ManagedEnvironment) {
|
|
||||||
return $parameterTenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
|
||||||
return $tenant;
|
|
||||||
}
|
|
||||||
|
|
||||||
return static::resolveTenantContextForCurrentPanel();
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<mixed> $parameters
|
|
||||||
*/
|
|
||||||
private static function resolveAdminUrlWorkspace(ManagedEnvironment $tenant, array $parameters): Workspace|string|int|null
|
|
||||||
{
|
|
||||||
$workspace = $parameters['workspace'] ?? null;
|
|
||||||
|
|
||||||
if ($workspace instanceof Workspace || is_string($workspace) || is_int($workspace)) {
|
|
||||||
return $workspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenantWorkspace = $tenant->workspace;
|
|
||||||
|
|
||||||
if ($tenantWorkspace instanceof Workspace) {
|
|
||||||
return $tenantWorkspace;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $tenant->workspace()->first();
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -5,8 +5,7 @@
|
|||||||
namespace App\Filament\Pages\Monitoring;
|
namespace App\Filament\Pages\Monitoring;
|
||||||
|
|
||||||
use App\Models\AuditLog as AuditLogModel;
|
use App\Models\AuditLog as AuditLogModel;
|
||||||
use App\Models\SupportAccessGrant;
|
use App\Models\Tenant;
|
||||||
use App\Models\ManagedEnvironment;
|
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
@ -39,7 +38,6 @@
|
|||||||
use Filament\Tables\Table;
|
use Filament\Tables\Table;
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
use Illuminate\Database\Eloquent\Builder;
|
||||||
use Illuminate\Support\Str;
|
use Illuminate\Support\Str;
|
||||||
use Symfony\Component\HttpFoundation\StreamedResponse;
|
|
||||||
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
|
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
|
|
||||||
@ -62,17 +60,7 @@ class AuditLog extends Page implements HasTable
|
|||||||
'invalidFallback' => 'clear_selection_and_continue',
|
'invalidFallback' => 'clear_selection_and_continue',
|
||||||
],
|
],
|
||||||
[
|
[
|
||||||
'stateKey' => 'supportAccess',
|
'stateKey' => 'tenant_id',
|
||||||
'stateClass' => 'contextual_prefilter',
|
|
||||||
'carrier' => 'query_param',
|
|
||||||
'queryRole' => 'durable_restorable',
|
|
||||||
'shareable' => true,
|
|
||||||
'restorableOnRefresh' => true,
|
|
||||||
'tenantSensitive' => false,
|
|
||||||
'invalidFallback' => 'discard_and_continue',
|
|
||||||
],
|
|
||||||
[
|
|
||||||
'stateKey' => 'managed_environment_id',
|
|
||||||
'stateClass' => 'contextual_prefilter',
|
'stateClass' => 'contextual_prefilter',
|
||||||
'carrier' => 'session',
|
'carrier' => 'session',
|
||||||
'queryRole' => 'durable_restorable',
|
'queryRole' => 'durable_restorable',
|
||||||
@ -96,7 +84,7 @@ class AuditLog extends Page implements HasTable
|
|||||||
'precedenceOrder' => ['query', 'session', 'default'],
|
'precedenceOrder' => ['query', 'session', 'default'],
|
||||||
'appliesOnInitialMountOnly' => true,
|
'appliesOnInitialMountOnly' => true,
|
||||||
'activeStateBecomesAuthoritativeAfterMount' => true,
|
'activeStateBecomesAuthoritativeAfterMount' => true,
|
||||||
'clearsOnTenantSwitch' => ['managed_environment_id', 'action', 'actor_label', 'resource_type'],
|
'clearsOnTenantSwitch' => ['tenant_id', 'action', 'actor_label', 'resource_type'],
|
||||||
'invalidRequestedStateFallback' => 'clear_selection_and_continue',
|
'invalidRequestedStateFallback' => 'clear_selection_and_continue',
|
||||||
],
|
],
|
||||||
'inspectContract' => [
|
'inspectContract' => [
|
||||||
@ -107,14 +95,12 @@ class AuditLog extends Page implements HasTable
|
|||||||
'shareable' => true,
|
'shareable' => true,
|
||||||
'invalidSelectionFallback' => 'clear_selection_and_continue',
|
'invalidSelectionFallback' => 'clear_selection_and_continue',
|
||||||
],
|
],
|
||||||
'shareableStateKeys' => ['event', 'supportAccess'],
|
'shareableStateKeys' => ['event'],
|
||||||
'localOnlyStateKeys' => [],
|
'localOnlyStateKeys' => [],
|
||||||
];
|
];
|
||||||
|
|
||||||
public ?int $selectedAuditLogId = null;
|
public ?int $selectedAuditLogId = null;
|
||||||
|
|
||||||
public bool $supportAccessOnly = false;
|
|
||||||
|
|
||||||
protected static bool $isDiscovered = false;
|
protected static bool $isDiscovered = false;
|
||||||
|
|
||||||
protected static bool $shouldRegisterNavigation = false;
|
protected static bool $shouldRegisterNavigation = false;
|
||||||
@ -132,7 +118,7 @@ class AuditLog extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.monitoring.audit-log';
|
protected string $view = 'filament.pages.monitoring.audit-log';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
@ -161,7 +147,6 @@ public static function monitoringPageStateContract(): array
|
|||||||
public function mount(): void
|
public function mount(): void
|
||||||
{
|
{
|
||||||
$this->authorizePageAccess();
|
$this->authorizePageAccess();
|
||||||
$this->supportAccessOnly = request()->boolean('supportAccess');
|
|
||||||
$requestedEventId = is_numeric(request()->query('event')) ? (int) request()->query('event') : null;
|
$requestedEventId = is_numeric(request()->query('event')) ? (int) request()->query('event') : null;
|
||||||
|
|
||||||
app(CanonicalAdminTenantFilterState::class)->sync($this->getTableFiltersSessionKey(), request: request());
|
app(CanonicalAdminTenantFilterState::class)->sync($this->getTableFiltersSessionKey(), request: request());
|
||||||
@ -195,22 +180,6 @@ protected function getHeaderActions(): array
|
|||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
|
|
||||||
array_splice($actions, 1, 0, [
|
|
||||||
Action::make('support_access_history_filter')
|
|
||||||
->label($this->supportAccessOnly ? 'Show all audit events' : 'Support access history')
|
|
||||||
->icon($this->supportAccessOnly ? 'heroicon-o-list-bullet' : 'heroicon-o-lifebuoy')
|
|
||||||
->color('gray')
|
|
||||||
->url($this->auditLogUrl([
|
|
||||||
'supportAccess' => $this->supportAccessOnly ? null : true,
|
|
||||||
'event' => null,
|
|
||||||
])),
|
|
||||||
Action::make('export_support_access_history')
|
|
||||||
->label('Export support access history')
|
|
||||||
->icon('heroicon-o-arrow-down-tray')
|
|
||||||
->color('gray')
|
|
||||||
->action(fn (): StreamedResponse => $this->exportSupportAccessHistory()),
|
|
||||||
]);
|
|
||||||
|
|
||||||
$selectedAudit = $this->selectedAuditRecord();
|
$selectedAudit = $this->selectedAuditRecord();
|
||||||
$selectedAuditLink = $selectedAudit instanceof AuditLogModel
|
$selectedAuditLink = $selectedAudit instanceof AuditLogModel
|
||||||
? $this->auditTargetLink($selectedAudit)
|
? $this->auditTargetLink($selectedAudit)
|
||||||
@ -281,7 +250,7 @@ public function table(Table $table): Table
|
|||||||
->searchable()
|
->searchable()
|
||||||
->toggleable(),
|
->toggleable(),
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->formatStateUsing(fn (?string $state): string => $state ?: 'Workspace')
|
->formatStateUsing(fn (?string $state): string => $state ?: 'Workspace')
|
||||||
->toggleable(),
|
->toggleable(),
|
||||||
TextColumn::make('recorded_at')
|
TextColumn::make('recorded_at')
|
||||||
@ -290,8 +259,8 @@ public function table(Table $table): Table
|
|||||||
->sortable(),
|
->sortable(),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->default(fn (): ?string => $this->defaultTenantFilter())
|
->default(fn (): ?string => $this->defaultTenantFilter())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
@ -335,7 +304,7 @@ public function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function authorizedTenants(): array
|
public function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -351,9 +320,9 @@ public function authorizedTenants(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
$tenants = collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
$tenants = collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
||||||
->filter(static fn (ManagedEnvironment $tenant): bool => (int) $tenant->workspace_id === (int) $workspaceId)
|
->filter(static fn (Tenant $tenant): bool => (int) $tenant->workspace_id === (int) $workspaceId)
|
||||||
->filter(static fn (ManagedEnvironment $tenant): bool => $tenant->isActive())
|
->filter(static fn (Tenant $tenant): bool => $tenant->isActive())
|
||||||
->keyBy(fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey())
|
->keyBy(fn (Tenant $tenant): int => (int) $tenant->getKey())
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
return $this->authorizedTenants = $tenants;
|
return $this->authorizedTenants = $tenants;
|
||||||
@ -389,7 +358,7 @@ private function auditBaseQuery(): Builder
|
|||||||
{
|
{
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
$authorizedTenantIds = array_map(
|
$authorizedTenantIds = array_map(
|
||||||
static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(),
|
static fn (Tenant $tenant): int => (int) $tenant->getKey(),
|
||||||
$this->authorizedTenants(),
|
$this->authorizedTenants(),
|
||||||
);
|
);
|
||||||
|
|
||||||
@ -397,15 +366,12 @@ private function auditBaseQuery(): Builder
|
|||||||
->with(['tenant', 'workspace', 'operationRun'])
|
->with(['tenant', 'workspace', 'operationRun'])
|
||||||
->forWorkspace((int) $workspaceId)
|
->forWorkspace((int) $workspaceId)
|
||||||
->where(function (Builder $query) use ($authorizedTenantIds): void {
|
->where(function (Builder $query) use ($authorizedTenantIds): void {
|
||||||
$query->whereNull('managed_environment_id');
|
$query->whereNull('tenant_id');
|
||||||
|
|
||||||
if ($authorizedTenantIds !== []) {
|
if ($authorizedTenantIds !== []) {
|
||||||
$query->orWhereIn('managed_environment_id', $authorizedTenantIds);
|
$query->orWhereIn('tenant_id', $authorizedTenantIds);
|
||||||
}
|
}
|
||||||
})
|
})
|
||||||
->when($this->supportAccessOnly, function (Builder $query): void {
|
|
||||||
$query->whereIn('action', SupportAccessGrant::supportAccessAuditActions());
|
|
||||||
})
|
|
||||||
->latestFirst();
|
->latestFirst();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -467,7 +433,6 @@ private function auditLogUrl(array $overrides = []): string
|
|||||||
{
|
{
|
||||||
$parameters = array_merge(
|
$parameters = array_merge(
|
||||||
$this->navigationContext()?->toQuery() ?? [],
|
$this->navigationContext()?->toQuery() ?? [],
|
||||||
['supportAccess' => $this->supportAccessOnly ? true : null],
|
|
||||||
['event' => $this->selectedAuditLogId],
|
['event' => $this->selectedAuditLogId],
|
||||||
$overrides,
|
$overrides,
|
||||||
);
|
);
|
||||||
@ -543,18 +508,11 @@ private function currentTableSearchState(): string
|
|||||||
|
|
||||||
private function matchesSelectedAuditFilters(AuditLogModel $record): bool
|
private function matchesSelectedAuditFilters(AuditLogModel $record): bool
|
||||||
{
|
{
|
||||||
if (
|
|
||||||
$this->supportAccessOnly
|
|
||||||
&& ! in_array((string) $record->action, SupportAccessGrant::supportAccessAuditActions(), true)
|
|
||||||
) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$filters = $this->currentTableFiltersState();
|
$filters = $this->currentTableFiltersState();
|
||||||
|
|
||||||
$tenantFilter = data_get($filters, 'managed_environment_id.value');
|
$tenantFilter = data_get($filters, 'tenant_id.value');
|
||||||
|
|
||||||
if (is_numeric($tenantFilter) && (int) $record->managed_environment_id !== (int) $tenantFilter) {
|
if (is_numeric($tenantFilter) && (int) $record->tenant_id !== (int) $tenantFilter) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -608,7 +566,7 @@ private function matchesSelectedAuditSearch(AuditLogModel $record): bool
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->authorizedTenants())
|
return collect($this->authorizedTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -618,7 +576,7 @@ private function defaultTenantFilter(): ?string
|
|||||||
{
|
{
|
||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
if (! $activeTenant instanceof ManagedEnvironment) {
|
if (! $activeTenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -674,69 +632,4 @@ private function targetTypeFilterOptions(): array
|
|||||||
|
|
||||||
return FilterOptionCatalog::auditTargetTypes($values);
|
return FilterOptionCatalog::auditTargetTypes($values);
|
||||||
}
|
}
|
||||||
|
|
||||||
public function exportSupportAccessHistory(): StreamedResponse
|
|
||||||
{
|
|
||||||
$filename = 'support-access-history-'.now()->format('Ymd-His').'.csv';
|
|
||||||
|
|
||||||
return response()->streamDownload(function (): void {
|
|
||||||
$handle = fopen('php://output', 'w');
|
|
||||||
|
|
||||||
if ($handle === false) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
fputcsv($handle, [
|
|
||||||
'recorded_at',
|
|
||||||
'action',
|
|
||||||
'outcome',
|
|
||||||
'actor',
|
|
||||||
'target',
|
|
||||||
'scope',
|
|
||||||
'reason',
|
|
||||||
'grant_id',
|
|
||||||
]);
|
|
||||||
|
|
||||||
$this->supportAccessAuditQuery()
|
|
||||||
->reorder()
|
|
||||||
->orderBy('recorded_at')
|
|
||||||
->orderBy('id')
|
|
||||||
->cursor()
|
|
||||||
->each(function (AuditLogModel $record) use ($handle): void {
|
|
||||||
$metadata = is_array($record->metadata) ? $record->metadata : [];
|
|
||||||
|
|
||||||
fputcsv($handle, [
|
|
||||||
$this->csvCell((string) $record->recorded_at?->toISOString()),
|
|
||||||
$this->csvCell((string) $record->action),
|
|
||||||
$this->csvCell($record->normalizedOutcome()->value),
|
|
||||||
$this->csvCell($record->actorDisplayLabel()),
|
|
||||||
$this->csvCell($record->targetDisplayLabel() ?? ''),
|
|
||||||
$this->csvCell((string) ($metadata['scope'] ?? '')),
|
|
||||||
$this->csvCell((string) ($metadata['reason'] ?? '')),
|
|
||||||
$this->csvCell((string) ($metadata['support_access_grant_id'] ?? '')),
|
|
||||||
]);
|
|
||||||
});
|
|
||||||
|
|
||||||
fclose($handle);
|
|
||||||
}, $filename, [
|
|
||||||
'Content-Type' => 'text/csv; charset=UTF-8',
|
|
||||||
]);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function supportAccessAuditQuery(): Builder
|
|
||||||
{
|
|
||||||
return $this->auditBaseQuery()
|
|
||||||
->whereIn('action', SupportAccessGrant::supportAccessAuditActions());
|
|
||||||
}
|
|
||||||
|
|
||||||
private function csvCell(string $value): string
|
|
||||||
{
|
|
||||||
$trimmed = trim($value);
|
|
||||||
|
|
||||||
if ($trimmed !== '' && in_array($trimmed[0], ['=', '+', '-', '@'], true)) {
|
|
||||||
return "'".$trimmed;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $value;
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -6,12 +6,12 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\EvidenceSnapshotResource;
|
use App\Filament\Resources\EvidenceSnapshotResource;
|
||||||
use App\Models\EvidenceSnapshot;
|
use App\Models\EvidenceSnapshot;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\EnvironmentReview;
|
use App\Models\TenantReview;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Support\Badges\BadgeCatalog;
|
use App\Support\Badges\BadgeCatalog;
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\EnvironmentReviewStatus;
|
use App\Support\TenantReviewStatus;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
@ -46,7 +46,7 @@ class EvidenceOverview extends Page implements HasTable
|
|||||||
'surfaceType' => 'simple_monitoring',
|
'surfaceType' => 'simple_monitoring',
|
||||||
'stateFields' => [
|
'stateFields' => [
|
||||||
[
|
[
|
||||||
'stateKey' => 'managed_environment_id',
|
'stateKey' => 'tenant_id',
|
||||||
'stateClass' => 'contextual_prefilter',
|
'stateClass' => 'contextual_prefilter',
|
||||||
'carrier' => 'query_param',
|
'carrier' => 'query_param',
|
||||||
'queryRole' => 'durable_restorable',
|
'queryRole' => 'durable_restorable',
|
||||||
@ -90,7 +90,7 @@ class EvidenceOverview extends Page implements HasTable
|
|||||||
'precedenceOrder' => ['query', 'session', 'default'],
|
'precedenceOrder' => ['query', 'session', 'default'],
|
||||||
'appliesOnInitialMountOnly' => true,
|
'appliesOnInitialMountOnly' => true,
|
||||||
'activeStateBecomesAuthoritativeAfterMount' => true,
|
'activeStateBecomesAuthoritativeAfterMount' => true,
|
||||||
'clearsOnTenantSwitch' => ['managed_environment_id'],
|
'clearsOnTenantSwitch' => ['tenant_id'],
|
||||||
'invalidRequestedStateFallback' => 'discard_and_continue',
|
'invalidRequestedStateFallback' => 'discard_and_continue',
|
||||||
],
|
],
|
||||||
'inspectContract' => [
|
'inspectContract' => [
|
||||||
@ -101,7 +101,7 @@ class EvidenceOverview extends Page implements HasTable
|
|||||||
'shareable' => false,
|
'shareable' => false,
|
||||||
'invalidSelectionFallback' => 'discard_and_continue',
|
'invalidSelectionFallback' => 'discard_and_continue',
|
||||||
],
|
],
|
||||||
'shareableStateKeys' => ['managed_environment_id', 'search'],
|
'shareableStateKeys' => ['tenant_id', 'search'],
|
||||||
'localOnlyStateKeys' => [],
|
'localOnlyStateKeys' => [],
|
||||||
];
|
];
|
||||||
|
|
||||||
@ -123,7 +123,7 @@ class EvidenceOverview extends Page implements HasTable
|
|||||||
public array $rows = [];
|
public array $rows = [];
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $accessibleTenants = null;
|
private ?array $accessibleTenants = null;
|
||||||
|
|
||||||
@ -181,14 +181,14 @@ public function table(Table $table): Table
|
|||||||
return $this->paginateRows($rows, $page, $recordsPerPage);
|
return $this->paginateRows($rows, $page, $recordsPerPage);
|
||||||
})
|
})
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
])
|
])
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('tenant_name')
|
TextColumn::make('tenant_name')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->sortable(),
|
->sortable(),
|
||||||
TextColumn::make('artifact_truth_label')
|
TextColumn::make('artifact_truth_label')
|
||||||
->label('Outcome')
|
->label('Outcome')
|
||||||
@ -240,7 +240,7 @@ protected function getHeaderActions(): array
|
|||||||
public function clearOverviewFilters(): void
|
public function clearOverviewFilters(): void
|
||||||
{
|
{
|
||||||
$this->tableFilters = [
|
$this->tableFilters = [
|
||||||
'managed_environment_id' => ['value' => null],
|
'tenant_id' => ['value' => null],
|
||||||
];
|
];
|
||||||
$this->tableDeferredFilters = $this->tableFilters;
|
$this->tableDeferredFilters = $this->tableFilters;
|
||||||
$this->tableSearch = '';
|
$this->tableSearch = '';
|
||||||
@ -284,7 +284,7 @@ private function authorizeWorkspaceAccess(): void
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
private function accessibleTenants(): array
|
private function accessibleTenants(): array
|
||||||
{
|
{
|
||||||
@ -300,10 +300,11 @@ private function accessibleTenants(): array
|
|||||||
|
|
||||||
$workspaceId = $this->workspaceId();
|
$workspaceId = $this->workspaceId();
|
||||||
|
|
||||||
return $this->accessibleTenants = $user->accessibleManagedEnvironmentsQuery($workspaceId)
|
return $this->accessibleTenants = $user->tenants()
|
||||||
->orderBy('managed_environments.name')
|
->where('tenants.workspace_id', $workspaceId)
|
||||||
|
->orderBy('tenants.name')
|
||||||
->get()
|
->get()
|
||||||
->filter(fn (ManagedEnvironment $tenant): bool => (int) $tenant->workspace_id === $workspaceId && $user->can('evidence.view', $tenant))
|
->filter(fn (Tenant $tenant): bool => (int) $tenant->workspace_id === $workspaceId && $user->can('evidence.view', $tenant))
|
||||||
->values()
|
->values()
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
@ -314,7 +315,7 @@ private function accessibleTenants(): array
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->accessibleTenants())
|
return collect($this->accessibleTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->name,
|
(string) $tenant->getKey() => $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -327,11 +328,11 @@ private function tenantFilterOptions(): array
|
|||||||
private function rowsForState(array $filters = [], ?string $search = null): Collection
|
private function rowsForState(array $filters = [], ?string $search = null): Collection
|
||||||
{
|
{
|
||||||
$rows = $this->baseRows();
|
$rows = $this->baseRows();
|
||||||
$tenantFilter = $this->normalizeTenantFilter($filters['managed_environment_id']['value'] ?? data_get($this->tableFilters, 'managed_environment_id.value'));
|
$tenantFilter = $this->normalizeTenantFilter($filters['tenant_id']['value'] ?? data_get($this->tableFilters, 'tenant_id.value'));
|
||||||
$normalizedSearch = Str::lower(trim((string) ($search ?? $this->tableSearch)));
|
$normalizedSearch = Str::lower(trim((string) ($search ?? $this->tableSearch)));
|
||||||
|
|
||||||
if ($tenantFilter !== null) {
|
if ($tenantFilter !== null) {
|
||||||
$rows = $rows->where('managed_environment_id', $tenantFilter);
|
$rows = $rows->where('tenant_id', $tenantFilter);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($normalizedSearch === '') {
|
if ($normalizedSearch === '') {
|
||||||
@ -374,7 +375,7 @@ private function latestAccessibleSnapshots(): Collection
|
|||||||
}
|
}
|
||||||
|
|
||||||
$tenantIds = collect($this->accessibleTenants())
|
$tenantIds = collect($this->accessibleTenants())
|
||||||
->map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey())
|
->map(static fn (Tenant $tenant): int => (int) $tenant->getKey())
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
$query = EvidenceSnapshot::query()
|
$query = EvidenceSnapshot::query()
|
||||||
@ -386,10 +387,10 @@ private function latestAccessibleSnapshots(): Collection
|
|||||||
if ($tenantIds === []) {
|
if ($tenantIds === []) {
|
||||||
$query->whereRaw('1 = 0');
|
$query->whereRaw('1 = 0');
|
||||||
} else {
|
} else {
|
||||||
$query->whereIn('managed_environment_id', $tenantIds);
|
$query->whereIn('tenant_id', $tenantIds);
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->cachedSnapshots = $query->get()->unique('managed_environment_id')->values();
|
return $this->cachedSnapshots = $query->get()->unique('tenant_id')->values();
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -398,15 +399,15 @@ private function latestAccessibleSnapshots(): Collection
|
|||||||
*/
|
*/
|
||||||
private function currentReviewTenantIds(Collection $snapshots): array
|
private function currentReviewTenantIds(Collection $snapshots): array
|
||||||
{
|
{
|
||||||
return EnvironmentReview::query()
|
return TenantReview::query()
|
||||||
->where('workspace_id', $this->workspaceId())
|
->where('workspace_id', $this->workspaceId())
|
||||||
->whereIn('managed_environment_id', $snapshots->pluck('managed_environment_id')->map(static fn (mixed $tenantId): int => (int) $tenantId)->all())
|
->whereIn('tenant_id', $snapshots->pluck('tenant_id')->map(static fn (mixed $tenantId): int => (int) $tenantId)->all())
|
||||||
->whereIn('status', [
|
->whereIn('status', [
|
||||||
EnvironmentReviewStatus::Draft->value,
|
TenantReviewStatus::Draft->value,
|
||||||
EnvironmentReviewStatus::Ready->value,
|
TenantReviewStatus::Ready->value,
|
||||||
EnvironmentReviewStatus::Published->value,
|
TenantReviewStatus::Published->value,
|
||||||
])
|
])
|
||||||
->pluck('managed_environment_id')
|
->pluck('tenant_id')
|
||||||
->mapWithKeys(static fn (mixed $tenantId): array => [(int) $tenantId => true])
|
->mapWithKeys(static fn (mixed $tenantId): array => [(int) $tenantId => true])
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
@ -419,7 +420,7 @@ private function rowForSnapshot(EvidenceSnapshot $snapshot, array $currentReview
|
|||||||
{
|
{
|
||||||
$truth = $this->snapshotTruth($snapshot);
|
$truth = $this->snapshotTruth($snapshot);
|
||||||
$outcome = $this->snapshotOutcome($snapshot);
|
$outcome = $this->snapshotOutcome($snapshot);
|
||||||
$tenantId = (int) $snapshot->managed_environment_id;
|
$tenantId = (int) $snapshot->tenant_id;
|
||||||
$hasCurrentReview = $currentReviewTenantIds[$tenantId] ?? false;
|
$hasCurrentReview = $currentReviewTenantIds[$tenantId] ?? false;
|
||||||
$nextStep = ! $hasCurrentReview && $truth->contentState === 'trusted' && $truth->freshnessState === 'current'
|
$nextStep = ! $hasCurrentReview && $truth->contentState === 'trusted' && $truth->freshnessState === 'current'
|
||||||
? 'Create a current review from this evidence snapshot'
|
? 'Create a current review from this evidence snapshot'
|
||||||
@ -427,7 +428,7 @@ private function rowForSnapshot(EvidenceSnapshot $snapshot, array $currentReview
|
|||||||
|
|
||||||
return [
|
return [
|
||||||
'tenant_name' => $snapshot->tenant?->name ?? 'Unknown tenant',
|
'tenant_name' => $snapshot->tenant?->name ?? 'Unknown tenant',
|
||||||
'managed_environment_id' => $tenantId,
|
'tenant_id' => $tenantId,
|
||||||
'snapshot_id' => (int) $snapshot->getKey(),
|
'snapshot_id' => (int) $snapshot->getKey(),
|
||||||
'generated_at' => $snapshot->generated_at?->toDateTimeString(),
|
'generated_at' => $snapshot->generated_at?->toDateTimeString(),
|
||||||
'artifact_truth_label' => $outcome->primaryLabel,
|
'artifact_truth_label' => $outcome->primaryLabel,
|
||||||
@ -442,7 +443,7 @@ private function rowForSnapshot(EvidenceSnapshot $snapshot, array $currentReview
|
|||||||
],
|
],
|
||||||
'next_step' => $nextStep,
|
'next_step' => $nextStep,
|
||||||
'view_url' => $snapshot->tenant
|
'view_url' => $snapshot->tenant
|
||||||
? EvidenceSnapshotResource::getUrl('view', ['record' => $snapshot], tenant: $snapshot->tenant)
|
? EvidenceSnapshotResource::getUrl('view', ['record' => $snapshot], tenant: $snapshot->tenant, panel: 'tenant')
|
||||||
: null,
|
: null,
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
@ -494,18 +495,18 @@ private function seedTableStateFromQuery(): void
|
|||||||
$this->tableSearch = trim((string) request()->query('search', ''));
|
$this->tableSearch = trim((string) request()->query('search', ''));
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! array_key_exists('managed_environment_id', $query)) {
|
if (! array_key_exists('tenant_id', $query)) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenantFilter = $this->normalizeTenantFilter(request()->query('managed_environment_id'));
|
$tenantFilter = $this->normalizeTenantFilter(request()->query('tenant_id'));
|
||||||
|
|
||||||
if ($tenantFilter === null) {
|
if ($tenantFilter === null) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters = [
|
$this->tableFilters = [
|
||||||
'managed_environment_id' => ['value' => (string) $tenantFilter],
|
'tenant_id' => ['value' => (string) $tenantFilter],
|
||||||
];
|
];
|
||||||
$this->tableDeferredFilters = $this->tableFilters;
|
$this->tableDeferredFilters = $this->tableFilters;
|
||||||
}
|
}
|
||||||
@ -518,7 +519,7 @@ private function normalizeTenantFilter(mixed $value): ?int
|
|||||||
|
|
||||||
$requestedTenantId = (int) $value;
|
$requestedTenantId = (int) $value;
|
||||||
$allowedTenantIds = collect($this->accessibleTenants())
|
$allowedTenantIds = collect($this->accessibleTenants())
|
||||||
->map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey())
|
->map(static fn (Tenant $tenant): int => (int) $tenant->getKey())
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
return in_array($requestedTenantId, $allowedTenantIds, true)
|
return in_array($requestedTenantId, $allowedTenantIds, true)
|
||||||
@ -528,7 +529,7 @@ private function normalizeTenantFilter(mixed $value): ?int
|
|||||||
|
|
||||||
private function hasActiveOverviewFilters(): bool
|
private function hasActiveOverviewFilters(): bool
|
||||||
{
|
{
|
||||||
return filled(data_get($this->tableFilters, 'managed_environment_id.value'))
|
return filled(data_get($this->tableFilters, 'tenant_id.value'))
|
||||||
|| trim((string) $this->tableSearch) !== '';
|
|| trim((string) $this->tableSearch) !== '';
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
@ -101,7 +101,7 @@ class FindingExceptionsQueue extends Page implements HasTable
|
|||||||
'precedenceOrder' => ['query', 'session', 'default'],
|
'precedenceOrder' => ['query', 'session', 'default'],
|
||||||
'appliesOnInitialMountOnly' => true,
|
'appliesOnInitialMountOnly' => true,
|
||||||
'activeStateBecomesAuthoritativeAfterMount' => true,
|
'activeStateBecomesAuthoritativeAfterMount' => true,
|
||||||
'clearsOnTenantSwitch' => ['tenant', 'managed_environment_id', 'status', 'current_validity_state'],
|
'clearsOnTenantSwitch' => ['tenant', 'tenant_id', 'status', 'current_validity_state'],
|
||||||
'invalidRequestedStateFallback' => 'clear_selection_and_continue',
|
'invalidRequestedStateFallback' => 'clear_selection_and_continue',
|
||||||
],
|
],
|
||||||
'inspectContract' => [
|
'inspectContract' => [
|
||||||
@ -133,7 +133,7 @@ class FindingExceptionsQueue extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.monitoring.finding-exceptions-queue';
|
protected string $view = 'filament.pages.monitoring.finding-exceptions-queue';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
@ -147,7 +147,7 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep workspace approval scope visible and expose selected exception review actions.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions keep workspace approval scope visible and expose selected exception review actions.')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ViewAction->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ViewAction->value)
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'Exception decisions are reviewed one record at a time in v1 and do not expose bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'Exception decisions are reviewed one record at a time in v1 and do not expose bulk actions.')
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'Empty state explains when the approval queue is empty and keeps navigation back to environment findings available.')
|
->satisfy(ActionSurfaceSlot::ListEmptyState, 'Empty state explains when the approval queue is empty and keeps navigation back to tenant findings available.')
|
||||||
->satisfy(ActionSurfaceSlot::DetailHeader, 'Selected exception detail exposes approve, reject, and related-record navigation actions in the page header.');
|
->satisfy(ActionSurfaceSlot::DetailHeader, 'Selected exception detail exposes approve, reject, and related-record navigation actions in the page header.');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -224,7 +224,7 @@ protected function getHeaderActions(): array
|
|||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->hasActiveQueueFilters())
|
->visible(fn (): bool => $this->hasActiveQueueFilters())
|
||||||
->action(function (): void {
|
->action(function (): void {
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
$this->removeTableFilter('status');
|
$this->removeTableFilter('status');
|
||||||
$this->removeTableFilter('current_validity_state');
|
$this->removeTableFilter('current_validity_state');
|
||||||
$this->selectedFindingExceptionId = null;
|
$this->selectedFindingExceptionId = null;
|
||||||
@ -232,18 +232,18 @@ protected function getHeaderActions(): array
|
|||||||
});
|
});
|
||||||
|
|
||||||
$actions[] = Action::make('view_tenant_register')
|
$actions[] = Action::make('view_tenant_register')
|
||||||
->label('View environment findings')
|
->label('View tenant register')
|
||||||
->icon('heroicon-o-arrow-top-right-on-square')
|
->icon('heroicon-o-arrow-top-right-on-square')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->filteredTenant() instanceof ManagedEnvironment)
|
->visible(fn (): bool => $this->filteredTenant() instanceof Tenant)
|
||||||
->url(function (): ?string {
|
->url(function (): ?string {
|
||||||
$tenant = $this->filteredTenant();
|
$tenant = $this->filteredTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return FindingExceptionResource::getUrl('index', tenant: $tenant);
|
return FindingExceptionResource::getUrl('index', panel: 'tenant', tenant: $tenant);
|
||||||
});
|
});
|
||||||
|
|
||||||
$selectedContextActions = [
|
$selectedContextActions = [
|
||||||
@ -254,7 +254,7 @@ protected function getHeaderActions(): array
|
|||||||
->url(fn (): string => $this->queueUrl(['exception' => null])),
|
->url(fn (): string => $this->queueUrl(['exception' => null])),
|
||||||
|
|
||||||
Action::make('open_selected_exception')
|
Action::make('open_selected_exception')
|
||||||
->label('Open environment detail')
|
->label('Open tenant detail')
|
||||||
->icon('heroicon-o-arrow-top-right-on-square')
|
->icon('heroicon-o-arrow-top-right-on-square')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (): bool => $this->selectedFindingException() instanceof FindingException)
|
->visible(fn (): bool => $this->selectedFindingException() instanceof FindingException)
|
||||||
@ -383,7 +383,7 @@ public function table(Table $table): Table
|
|||||||
->icon(BadgeRenderer::icon(BadgeDomain::FindingRiskGovernanceValidity))
|
->icon(BadgeRenderer::icon(BadgeDomain::FindingRiskGovernanceValidity))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::FindingRiskGovernanceValidity)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::FindingRiskGovernanceValidity)),
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->searchable(),
|
->searchable(),
|
||||||
TextColumn::make('finding_summary')
|
TextColumn::make('finding_summary')
|
||||||
->label('Finding')
|
->label('Finding')
|
||||||
@ -416,8 +416,8 @@ public function table(Table $table): Table
|
|||||||
->sortable(),
|
->sortable(),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
SelectFilter::make('status')
|
SelectFilter::make('status')
|
||||||
@ -443,7 +443,7 @@ public function table(Table $table): Table
|
|||||||
->icon('heroicon-o-x-mark')
|
->icon('heroicon-o-x-mark')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->action(function (): void {
|
->action(function (): void {
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
$this->removeTableFilter('status');
|
$this->removeTableFilter('status');
|
||||||
$this->removeTableFilter('current_validity_state');
|
$this->removeTableFilter('current_validity_state');
|
||||||
$this->selectedFindingExceptionId = null;
|
$this->selectedFindingExceptionId = null;
|
||||||
@ -490,7 +490,7 @@ public function selectedExceptionUrl(): ?string
|
|||||||
}
|
}
|
||||||
|
|
||||||
return $this->appendQuery(
|
return $this->appendQuery(
|
||||||
FindingExceptionResource::getUrl('view', ['record' => $record], tenant: $record->tenant),
|
FindingExceptionResource::getUrl('view', ['record' => $record], panel: 'tenant', tenant: $record->tenant),
|
||||||
$this->navigationContext()?->toQuery() ?? [],
|
$this->navigationContext()?->toQuery() ?? [],
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
@ -504,7 +504,7 @@ public function selectedFindingUrl(): ?string
|
|||||||
}
|
}
|
||||||
|
|
||||||
return $this->appendQuery(
|
return $this->appendQuery(
|
||||||
FindingResource::getUrl('view', ['record' => $record->finding], tenant: $record->tenant),
|
FindingResource::getUrl('view', ['record' => $record->finding], panel: 'tenant', tenant: $record->tenant),
|
||||||
$this->navigationContext()?->toQuery() ?? [],
|
$this->navigationContext()?->toQuery() ?? [],
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
@ -515,7 +515,7 @@ public function clearSelectedException(): void
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function authorizedTenants(): array
|
public function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -535,12 +535,13 @@ public function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenants = $user->accessibleManagedEnvironmentsQuery($workspaceId)
|
$tenants = $user->tenants()
|
||||||
->orderBy('managed_environments.name')
|
->where('tenants.workspace_id', $workspaceId)
|
||||||
|
->orderBy('tenants.name')
|
||||||
->get();
|
->get();
|
||||||
|
|
||||||
return $this->authorizedTenants = $tenants
|
return $this->authorizedTenants = $tenants
|
||||||
->filter(fn (ManagedEnvironment $tenant): bool => (int) $tenant->workspace_id === $workspaceId)
|
->filter(fn (Tenant $tenant): bool => (int) $tenant->workspace_id === $workspaceId)
|
||||||
->values()
|
->values()
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
@ -549,7 +550,7 @@ private function queueBaseQuery(): Builder
|
|||||||
{
|
{
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
$tenantIds = array_values(array_map(
|
$tenantIds = array_values(array_map(
|
||||||
static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey(),
|
static fn (Tenant $tenant): int => (int) $tenant->getKey(),
|
||||||
$this->authorizedTenants(),
|
$this->authorizedTenants(),
|
||||||
));
|
));
|
||||||
|
|
||||||
@ -564,7 +565,7 @@ private function queueBaseQuery(): Builder
|
|||||||
'evidenceReferences',
|
'evidenceReferences',
|
||||||
])
|
])
|
||||||
->where('workspace_id', (int) $workspaceId)
|
->where('workspace_id', (int) $workspaceId)
|
||||||
->whereIn('managed_environment_id', $tenantIds === [] ? [-1] : $tenantIds);
|
->whereIn('tenant_id', $tenantIds === [] ? [-1] : $tenantIds);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -573,7 +574,7 @@ private function queueBaseQuery(): Builder
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return Collection::make($this->authorizedTenants())
|
return Collection::make($this->authorizedTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->name,
|
(string) $tenant->getKey() => $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -592,14 +593,14 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private function filteredTenant(): ?ManagedEnvironment
|
private function filteredTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantId = $this->currentTenantFilterId();
|
$tenantId = $this->currentTenantFilterId();
|
||||||
|
|
||||||
@ -740,9 +741,9 @@ private function matchesSelectedFindingExceptionFilters(FindingException $record
|
|||||||
{
|
{
|
||||||
$filters = $this->currentQueueFiltersState();
|
$filters = $this->currentQueueFiltersState();
|
||||||
|
|
||||||
$tenantFilter = data_get($filters, 'managed_environment_id.value');
|
$tenantFilter = data_get($filters, 'tenant_id.value');
|
||||||
|
|
||||||
if (is_numeric($tenantFilter) && (int) $record->managed_environment_id !== (int) $tenantFilter) {
|
if (is_numeric($tenantFilter) && (int) $record->tenant_id !== (int) $tenantFilter) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -7,13 +7,10 @@
|
|||||||
use App\Filament\Resources\OperationRunResource;
|
use App\Filament\Resources\OperationRunResource;
|
||||||
use App\Filament\Widgets\Operations\OperationsKpiHeader;
|
use App\Filament\Widgets\Operations\OperationsKpiHeader;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\Workspace;
|
|
||||||
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\OperateHub\OperateHubShell;
|
use App\Support\OperateHub\OperateHubShell;
|
||||||
use App\Support\OperationRunLinks;
|
|
||||||
use App\Support\OperationRunOutcome;
|
use App\Support\OperationRunOutcome;
|
||||||
use App\Support\OperationRunStatus;
|
use App\Support\OperationRunStatus;
|
||||||
use App\Support\Operations\OperationLifecyclePolicy;
|
use App\Support\Operations\OperationLifecyclePolicy;
|
||||||
@ -25,8 +22,6 @@
|
|||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceType;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceType;
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
use App\Support\Workspaces\WorkspaceContext;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
|
||||||
use BackedEnum;
|
use BackedEnum;
|
||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
@ -49,7 +44,7 @@ class Operations extends Page implements HasForms, HasTable
|
|||||||
'surfaceType' => 'simple_monitoring',
|
'surfaceType' => 'simple_monitoring',
|
||||||
'stateFields' => [
|
'stateFields' => [
|
||||||
[
|
[
|
||||||
'stateKey' => 'managed_environment_id',
|
'stateKey' => 'tenant_id',
|
||||||
'stateClass' => 'contextual_prefilter',
|
'stateClass' => 'contextual_prefilter',
|
||||||
'carrier' => 'query_param',
|
'carrier' => 'query_param',
|
||||||
'queryRole' => 'durable_restorable',
|
'queryRole' => 'durable_restorable',
|
||||||
@ -103,7 +98,7 @@ class Operations extends Page implements HasForms, HasTable
|
|||||||
'precedenceOrder' => ['query', 'session', 'default'],
|
'precedenceOrder' => ['query', 'session', 'default'],
|
||||||
'appliesOnInitialMountOnly' => true,
|
'appliesOnInitialMountOnly' => true,
|
||||||
'activeStateBecomesAuthoritativeAfterMount' => true,
|
'activeStateBecomesAuthoritativeAfterMount' => true,
|
||||||
'clearsOnTenantSwitch' => ['managed_environment_id', 'type', 'initiator_name'],
|
'clearsOnTenantSwitch' => ['tenant_id', 'type', 'initiator_name'],
|
||||||
'invalidRequestedStateFallback' => 'discard_and_continue',
|
'invalidRequestedStateFallback' => 'discard_and_continue',
|
||||||
],
|
],
|
||||||
'inspectContract' => [
|
'inspectContract' => [
|
||||||
@ -114,7 +109,7 @@ class Operations extends Page implements HasForms, HasTable
|
|||||||
'shareable' => false,
|
'shareable' => false,
|
||||||
'invalidSelectionFallback' => 'discard_and_continue',
|
'invalidSelectionFallback' => 'discard_and_continue',
|
||||||
],
|
],
|
||||||
'shareableStateKeys' => ['managed_environment_id', 'tenant_scope', 'problemClass', 'activeTab'],
|
'shareableStateKeys' => ['tenant_id', 'tenant_scope', 'problemClass', 'activeTab'],
|
||||||
'localOnlyStateKeys' => [],
|
'localOnlyStateKeys' => [],
|
||||||
];
|
];
|
||||||
|
|
||||||
@ -158,55 +153,8 @@ public static function monitoringPageStateContract(): array
|
|||||||
return self::MONITORING_PAGE_STATE_CONTRACT;
|
return self::MONITORING_PAGE_STATE_CONTRACT;
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canAccess(): bool
|
|
||||||
{
|
|
||||||
if (Filament::getCurrentPanel()?->getId() !== 'admin') {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
|
||||||
|
|
||||||
if (! is_int($workspaceId)) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = Workspace::query()->whereKey($workspaceId)->first();
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
public function mount(): void
|
public function mount(): void
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! is_int($workspaceId)) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
$workspace = Workspace::query()->whereKey($workspaceId)->first();
|
|
||||||
|
|
||||||
if (! $workspace instanceof Workspace) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
/** @var WorkspaceCapabilityResolver $resolver */
|
|
||||||
$resolver = app(WorkspaceCapabilityResolver::class);
|
|
||||||
|
|
||||||
if (! $resolver->isMember($user, $workspace)) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
$this->navigationContextPayload = is_array(request()->query('nav')) ? request()->query('nav') : null;
|
$this->navigationContextPayload = is_array(request()->query('nav')) ? request()->query('nav') : null;
|
||||||
|
|
||||||
$this->applyRequestedTenantScope();
|
$this->applyRequestedTenantScope();
|
||||||
@ -251,26 +199,26 @@ protected function getHeaderActions(): array
|
|||||||
->icon('heroicon-o-arrow-left')
|
->icon('heroicon-o-arrow-left')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url($navigationContext->backLinkUrl);
|
->url($navigationContext->backLinkUrl);
|
||||||
} elseif ($activeTenant instanceof ManagedEnvironment) {
|
} elseif ($activeTenant instanceof Tenant) {
|
||||||
$actions[] = Action::make('operate_hub_back_to_tenant_operations')
|
$actions[] = Action::make('operate_hub_back_to_tenant_operations')
|
||||||
->label('Back to '.$activeTenant->name)
|
->label('Back to '.$activeTenant->name)
|
||||||
->icon('heroicon-o-arrow-left')
|
->icon('heroicon-o-arrow-left')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url(ManagedEnvironmentLinks::viewUrl($activeTenant));
|
->url(\App\Filament\Pages\TenantDashboard::getUrl(panel: 'tenant', tenant: $activeTenant));
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment) {
|
if ($activeTenant instanceof Tenant) {
|
||||||
$actions[] = Action::make('operate_hub_show_all_tenants')
|
$actions[] = Action::make('operate_hub_show_all_tenants')
|
||||||
->label(__('localization.shell.show_all_environments'))
|
->label('Show all tenants')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->action(function (): void {
|
->action(function (): void {
|
||||||
Filament::setTenant(null, true);
|
Filament::setTenant(null, true);
|
||||||
|
|
||||||
app(WorkspaceContext::class)->clearLastTenantId(request());
|
app(WorkspaceContext::class)->clearLastTenantId(request());
|
||||||
|
|
||||||
$this->removeTableFilter('managed_environment_id');
|
$this->removeTableFilter('tenant_id');
|
||||||
|
|
||||||
$this->redirect(OperationRunLinks::index(allTenants: true));
|
$this->redirect('/admin/operations');
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -300,21 +248,21 @@ public function landingHierarchySummary(): array
|
|||||||
if ($navigationContext?->backLinkLabel !== null && $navigationContext->backLinkUrl !== null) {
|
if ($navigationContext?->backLinkLabel !== null && $navigationContext->backLinkUrl !== null) {
|
||||||
$returnLabel = $navigationContext->backLinkLabel;
|
$returnLabel = $navigationContext->backLinkLabel;
|
||||||
$returnBody = 'Return to the originating monitoring surface without competing with the current tab, filters, or row inspection flow.';
|
$returnBody = 'Return to the originating monitoring surface without competing with the current tab, filters, or row inspection flow.';
|
||||||
} elseif ($activeTenant instanceof ManagedEnvironment) {
|
} elseif ($activeTenant instanceof Tenant) {
|
||||||
$returnLabel = 'Back to '.$activeTenant->name;
|
$returnLabel = 'Back to '.$activeTenant->name;
|
||||||
$returnBody = 'Return to the tenant dashboard when you need tenant-specific context outside this workspace monitoring landing.';
|
$returnBody = 'Return to the tenant dashboard when you need tenant-specific context outside this workspace monitoring landing.';
|
||||||
}
|
}
|
||||||
|
|
||||||
return [
|
return [
|
||||||
'scope_label' => $operateHubShell->scopeLabel(request()),
|
'scope_label' => $operateHubShell->scopeLabel(request()),
|
||||||
'scope_body' => $activeTenant instanceof ManagedEnvironment
|
'scope_body' => $activeTenant instanceof Tenant
|
||||||
? 'The landing is currently narrowed to one environment inside the active workspace.'
|
? 'The landing is currently narrowed to one tenant inside the active workspace.'
|
||||||
: 'The landing is currently showing workspace-wide monitoring across all entitled environments.',
|
: 'The landing is currently showing workspace-wide monitoring across all entitled tenants.',
|
||||||
'return_label' => $returnLabel,
|
'return_label' => $returnLabel,
|
||||||
'return_body' => $returnBody,
|
'return_body' => $returnBody,
|
||||||
'scope_reset_label' => $activeTenant instanceof ManagedEnvironment ? __('localization.shell.show_all_environments') : null,
|
'scope_reset_label' => $activeTenant instanceof Tenant ? 'Show all tenants' : null,
|
||||||
'scope_reset_body' => $activeTenant instanceof ManagedEnvironment
|
'scope_reset_body' => $activeTenant instanceof Tenant
|
||||||
? 'Reset the landing back to workspace-wide monitoring when environment-specific context is no longer needed.'
|
? 'Reset the landing back to workspace-wide monitoring when tenant-specific context is no longer needed.'
|
||||||
: null,
|
: null,
|
||||||
'inspect_body' => 'Open a run from the table to enter the canonical monitoring detail viewer.',
|
'inspect_body' => 'Open a run from the table to enter the canonical monitoring detail viewer.',
|
||||||
];
|
];
|
||||||
@ -350,7 +298,6 @@ public function table(Table $table): Table
|
|||||||
->query(function (): Builder {
|
->query(function (): Builder {
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
$tenantFilter = $this->currentTenantFilterId();
|
$tenantFilter = $this->currentTenantFilterId();
|
||||||
$allowedTenantIds = $this->allowedTenantIdsForWorkspaceScope($workspaceId);
|
|
||||||
|
|
||||||
$query = OperationRun::query()
|
$query = OperationRun::query()
|
||||||
->with('user')
|
->with('user')
|
||||||
@ -363,21 +310,9 @@ public function table(Table $table): Table
|
|||||||
! $workspaceId,
|
! $workspaceId,
|
||||||
fn (Builder $query): Builder => $query->whereRaw('1 = 0'),
|
fn (Builder $query): Builder => $query->whereRaw('1 = 0'),
|
||||||
)
|
)
|
||||||
->when(
|
|
||||||
$workspaceId && $allowedTenantIds !== null,
|
|
||||||
function (Builder $query) use ($allowedTenantIds): Builder {
|
|
||||||
return $query->where(function (Builder $query) use ($allowedTenantIds): void {
|
|
||||||
$query->whereNull('managed_environment_id');
|
|
||||||
|
|
||||||
if ($allowedTenantIds !== []) {
|
|
||||||
$query->orWhereIn('managed_environment_id', $allowedTenantIds);
|
|
||||||
}
|
|
||||||
});
|
|
||||||
},
|
|
||||||
)
|
|
||||||
->when(
|
->when(
|
||||||
$tenantFilter !== null,
|
$tenantFilter !== null,
|
||||||
fn (Builder $query): Builder => $query->where('managed_environment_id', $tenantFilter),
|
fn (Builder $query): Builder => $query->where('tenant_id', $tenantFilter),
|
||||||
);
|
);
|
||||||
|
|
||||||
return $this->applyActiveTab($query);
|
return $this->applyActiveTab($query);
|
||||||
@ -453,37 +388,24 @@ private function scopedSummaryQuery(): ?Builder
|
|||||||
}
|
}
|
||||||
|
|
||||||
$tenantFilter = $this->currentTenantFilterId();
|
$tenantFilter = $this->currentTenantFilterId();
|
||||||
$allowedTenantIds = $this->allowedTenantIdsForWorkspaceScope($workspaceId);
|
|
||||||
|
|
||||||
return OperationRun::query()
|
return OperationRun::query()
|
||||||
->where('workspace_id', (int) $workspaceId)
|
->where('workspace_id', (int) $workspaceId)
|
||||||
->when(
|
|
||||||
$allowedTenantIds !== null,
|
|
||||||
function (Builder $query) use ($allowedTenantIds): Builder {
|
|
||||||
return $query->where(function (Builder $query) use ($allowedTenantIds): void {
|
|
||||||
$query->whereNull('managed_environment_id');
|
|
||||||
|
|
||||||
if ($allowedTenantIds !== []) {
|
|
||||||
$query->orWhereIn('managed_environment_id', $allowedTenantIds);
|
|
||||||
}
|
|
||||||
});
|
|
||||||
},
|
|
||||||
)
|
|
||||||
->when(
|
->when(
|
||||||
$tenantFilter !== null,
|
$tenantFilter !== null,
|
||||||
fn (Builder $query): Builder => $query->where('managed_environment_id', $tenantFilter),
|
fn (Builder $query): Builder => $query->where('tenant_id', $tenantFilter),
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function applyRequestedDashboardPrefilter(): void
|
private function applyRequestedDashboardPrefilter(): void
|
||||||
{
|
{
|
||||||
if (! $this->shouldForceWorkspaceWideTenantScope()) {
|
if (! $this->shouldForceWorkspaceWideTenantScope()) {
|
||||||
$requestedTenantId = $this->normalizeEntitledTenantFilter(request()->query('managed_environment_id'));
|
$requestedTenantId = $this->normalizeEntitledTenantFilter(request()->query('tenant_id'));
|
||||||
|
|
||||||
if ($requestedTenantId !== null) {
|
if ($requestedTenantId !== null) {
|
||||||
$tenantId = (string) $requestedTenantId;
|
$tenantId = (string) $requestedTenantId;
|
||||||
$this->tableFilters['managed_environment_id']['value'] = $tenantId;
|
$this->tableFilters['tenant_id']['value'] = $tenantId;
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = $tenantId;
|
$this->tableDeferredFilters['tenant_id']['value'] = $tenantId;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -510,11 +432,10 @@ private function shouldForceWorkspaceWideTenantScope(): bool
|
|||||||
private function operationsUrl(array $overrides = []): string
|
private function operationsUrl(array $overrides = []): string
|
||||||
{
|
{
|
||||||
$parameters = array_merge(
|
$parameters = array_merge(
|
||||||
['workspace' => app(WorkspaceContext::class)->currentWorkspace(request())],
|
|
||||||
$this->navigationContext()?->toQuery() ?? [],
|
$this->navigationContext()?->toQuery() ?? [],
|
||||||
[
|
[
|
||||||
'tenant_scope' => $this->shouldForceWorkspaceWideTenantScope() ? 'all' : null,
|
'tenant_scope' => $this->shouldForceWorkspaceWideTenantScope() ? 'all' : null,
|
||||||
'managed_environment_id' => $this->shouldForceWorkspaceWideTenantScope() ? null : $this->currentTenantFilterId(),
|
'tenant_id' => $this->shouldForceWorkspaceWideTenantScope() ? null : $this->currentTenantFilterId(),
|
||||||
'activeTab' => $this->activeTab !== 'all' ? $this->activeTab : null,
|
'activeTab' => $this->activeTab !== 'all' ? $this->activeTab : null,
|
||||||
'problemClass' => in_array($this->activeTab, self::problemClassTabs(), true) ? $this->activeTab : null,
|
'problemClass' => in_array($this->activeTab, self::problemClassTabs(), true) ? $this->activeTab : null,
|
||||||
],
|
],
|
||||||
@ -538,29 +459,6 @@ private function currentTenantFilterId(): ?int
|
|||||||
return $this->normalizeEntitledTenantFilter($tenantFilter);
|
return $this->normalizeEntitledTenantFilter($tenantFilter);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
|
||||||
* Null means inherited access to all environments in the workspace.
|
|
||||||
*
|
|
||||||
* @return list<int>|null
|
|
||||||
*/
|
|
||||||
private function allowedTenantIdsForWorkspaceScope(mixed $workspaceId): ?array
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! is_int($workspaceId)) {
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
$allowedIds = app(ManagedEnvironmentAccessScopeResolver::class)
|
|
||||||
->allowedManagedEnvironmentIdsForWorkspace($user, $workspaceId);
|
|
||||||
|
|
||||||
if ($allowedIds === null) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return array_values(array_unique(array_map('intval', $allowedIds)));
|
|
||||||
}
|
|
||||||
|
|
||||||
private function normalizeEntitledTenantFilter(mixed $value): ?int
|
private function normalizeEntitledTenantFilter(mixed $value): ?int
|
||||||
{
|
{
|
||||||
if (! is_numeric($value)) {
|
if (! is_numeric($value)) {
|
||||||
@ -587,9 +485,9 @@ private function authorizedTenantIds(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
||||||
->filter(static fn (ManagedEnvironment $tenant): bool => (int) $tenant->workspace_id === $workspaceId)
|
->filter(static fn (Tenant $tenant): bool => (int) $tenant->workspace_id === $workspaceId)
|
||||||
->filter(static fn (ManagedEnvironment $tenant): bool => $tenant->isActive())
|
->filter(static fn (Tenant $tenant): bool => $tenant->isActive())
|
||||||
->map(static fn (ManagedEnvironment $tenant): int => (int) $tenant->getKey())
|
->map(static fn (Tenant $tenant): int => (int) $tenant->getKey())
|
||||||
->values()
|
->values()
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|||||||
@ -93,6 +93,6 @@ public function createWorkspace(array $data): void
|
|||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
$this->redirect(ChooseEnvironment::getUrl());
|
$this->redirect(ChooseTenant::getUrl());
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\OperationRunResource;
|
use App\Filament\Resources\OperationRunResource;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\SupportRequest;
|
use App\Models\SupportRequest;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
@ -15,7 +15,6 @@
|
|||||||
use App\Services\Baselines\BaselineEvidenceCaptureResumeService;
|
use App\Services\Baselines\BaselineEvidenceCaptureResumeService;
|
||||||
use App\Services\Tenants\TenantOperabilityService;
|
use App\Services\Tenants\TenantOperabilityService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\OperateHub\OperateHubShell;
|
use App\Support\OperateHub\OperateHubShell;
|
||||||
@ -109,7 +108,7 @@ protected function getHeaderActions(): array
|
|||||||
$operateHubShell = app(OperateHubShell::class);
|
$operateHubShell = app(OperateHubShell::class);
|
||||||
$navigationContext = $this->navigationContext();
|
$navigationContext = $this->navigationContext();
|
||||||
$activeTenant = $operateHubShell->activeEntitledTenant(request());
|
$activeTenant = $operateHubShell->activeEntitledTenant(request());
|
||||||
$runTenantId = isset($this->run) ? (int) ($this->run->managed_environment_id ?? 0) : 0;
|
$runTenantId = isset($this->run) ? (int) ($this->run->tenant_id ?? 0) : 0;
|
||||||
|
|
||||||
$actions = [
|
$actions = [
|
||||||
Action::make('operate_hub_scope_run_detail')
|
Action::make('operate_hub_scope_run_detail')
|
||||||
@ -123,11 +122,11 @@ protected function getHeaderActions(): array
|
|||||||
->label($navigationContext->backLinkLabel)
|
->label($navigationContext->backLinkLabel)
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url($navigationContext->backLinkUrl);
|
->url($navigationContext->backLinkUrl);
|
||||||
} elseif ($activeTenant instanceof ManagedEnvironment && (int) $activeTenant->getKey() === $runTenantId) {
|
} elseif ($activeTenant instanceof Tenant && (int) $activeTenant->getKey() === $runTenantId) {
|
||||||
$actions[] = Action::make('operate_hub_back_to_tenant_run_detail')
|
$actions[] = Action::make('operate_hub_back_to_tenant_run_detail')
|
||||||
->label('← Back to '.$activeTenant->name)
|
->label('← Back to '.$activeTenant->name)
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->url(ManagedEnvironmentLinks::viewUrl($activeTenant));
|
->url(\App\Filament\Pages\TenantDashboard::getUrl(panel: 'tenant', tenant: $activeTenant));
|
||||||
} else {
|
} else {
|
||||||
$actions[] = Action::make('operate_hub_back_to_operations')
|
$actions[] = Action::make('operate_hub_back_to_operations')
|
||||||
->label('Back to Operations')
|
->label('Back to Operations')
|
||||||
@ -135,7 +134,7 @@ protected function getHeaderActions(): array
|
|||||||
->url(fn (): string => OperationRunLinks::index());
|
->url(fn (): string => OperationRunLinks::index());
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment) {
|
if ($activeTenant instanceof Tenant) {
|
||||||
$actions[] = Action::make('operate_hub_show_all_operations')
|
$actions[] = Action::make('operate_hub_show_all_operations')
|
||||||
->label('Show all operations')
|
->label('Show all operations')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
@ -202,7 +201,7 @@ public function monitoringDetailSummary(): array
|
|||||||
$operateHubShell = app(OperateHubShell::class);
|
$operateHubShell = app(OperateHubShell::class);
|
||||||
$navigationContext = $this->navigationContext();
|
$navigationContext = $this->navigationContext();
|
||||||
$activeTenant = $operateHubShell->activeEntitledTenant(request());
|
$activeTenant = $operateHubShell->activeEntitledTenant(request());
|
||||||
$runTenantId = isset($this->run) ? (int) ($this->run->managed_environment_id ?? 0) : 0;
|
$runTenantId = isset($this->run) ? (int) ($this->run->tenant_id ?? 0) : 0;
|
||||||
|
|
||||||
$navigationLabel = 'Back to Operations';
|
$navigationLabel = 'Back to Operations';
|
||||||
$navigationBody = 'Return to the operations landing when this review is complete.';
|
$navigationBody = 'Return to the operations landing when this review is complete.';
|
||||||
@ -210,7 +209,7 @@ public function monitoringDetailSummary(): array
|
|||||||
if ($navigationContext?->backLinkLabel !== null && $navigationContext->backLinkUrl !== null) {
|
if ($navigationContext?->backLinkLabel !== null && $navigationContext->backLinkUrl !== null) {
|
||||||
$navigationLabel = $navigationContext->backLinkLabel;
|
$navigationLabel = $navigationContext->backLinkLabel;
|
||||||
$navigationBody = 'Return to the originating surface while keeping refresh and follow-up work separate from navigation.';
|
$navigationBody = 'Return to the originating surface while keeping refresh and follow-up work separate from navigation.';
|
||||||
} elseif ($activeTenant instanceof ManagedEnvironment && (int) $activeTenant->getKey() === $runTenantId) {
|
} elseif ($activeTenant instanceof Tenant && (int) $activeTenant->getKey() === $runTenantId) {
|
||||||
$navigationLabel = 'Back to '.$activeTenant->name;
|
$navigationLabel = 'Back to '.$activeTenant->name;
|
||||||
$navigationBody = 'Return to the active tenant dashboard, then widen back to the workspace view only when you need broader monitoring context.';
|
$navigationBody = 'Return to the active tenant dashboard, then widen back to the workspace view only when you need broader monitoring context.';
|
||||||
}
|
}
|
||||||
@ -392,7 +391,7 @@ private function auditOperationSupportDiagnosticsOpen(): void
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function supportDiagnosticsTenant(): ?ManagedEnvironment
|
private function supportDiagnosticsTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if (! isset($this->run)) {
|
if (! isset($this->run)) {
|
||||||
return null;
|
return null;
|
||||||
@ -400,7 +399,7 @@ private function supportDiagnosticsTenant(): ?ManagedEnvironment
|
|||||||
|
|
||||||
$tenant = $this->run->tenant;
|
$tenant = $this->run->tenant;
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -418,12 +417,12 @@ private function resolveViewerActor(): User
|
|||||||
return $user;
|
return $user;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveRunTenantForCapability(string $capability): ManagedEnvironment
|
private function resolveRunTenantForCapability(string $capability): Tenant
|
||||||
{
|
{
|
||||||
$tenant = $this->supportDiagnosticsTenant();
|
$tenant = $this->supportDiagnosticsTenant();
|
||||||
$user = $this->resolveViewerActor();
|
$user = $this->resolveViewerActor();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -445,7 +444,7 @@ private function operationSupportRequestAttachmentSummary(): string
|
|||||||
$tenant = $this->supportDiagnosticsTenant();
|
$tenant = $this->supportDiagnosticsTenant();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return 'Only canonical redacted run context will be attached.';
|
return 'Only canonical redacted run context will be attached.';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -555,7 +554,7 @@ private function supportRequestNotificationBody(SupportRequest $supportRequest):
|
|||||||
/**
|
/**
|
||||||
* @param array<string, mixed> $bundle
|
* @param array<string, mixed> $bundle
|
||||||
*/
|
*/
|
||||||
private function recordSupportDiagnosticsOpened(ManagedEnvironment $tenant, array $bundle, User $user): void
|
private function recordSupportDiagnosticsOpened(Tenant $tenant, array $bundle, User $user): void
|
||||||
{
|
{
|
||||||
if (! isset($this->run)) {
|
if (! isset($this->run)) {
|
||||||
return;
|
return;
|
||||||
@ -730,39 +729,39 @@ public function canonicalContextBanner(): ?array
|
|||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
$runTenant = $this->run->tenant;
|
$runTenant = $this->run->tenant;
|
||||||
|
|
||||||
if (! $runTenant instanceof ManagedEnvironment) {
|
if (! $runTenant instanceof Tenant) {
|
||||||
return [
|
return [
|
||||||
'tone' => 'slate',
|
'tone' => 'slate',
|
||||||
'title' => 'Workspace-level operation',
|
'title' => 'Workspace-level operation',
|
||||||
'body' => $activeTenant instanceof ManagedEnvironment
|
'body' => $activeTenant instanceof Tenant
|
||||||
? 'This canonical workspace view is not tied to the current environment context ('.$activeTenant->name.').'
|
? 'This canonical workspace view is not tied to the current tenant context ('.$activeTenant->name.').'
|
||||||
: 'This canonical workspace view is not tied to any environment.',
|
: 'This canonical workspace view is not tied to any tenant.',
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
$messages = ['Operation environment: '.$runTenant->name.'.'];
|
$messages = ['Operation tenant: '.$runTenant->name.'.'];
|
||||||
$tone = 'sky';
|
$tone = 'sky';
|
||||||
$title = null;
|
$title = null;
|
||||||
|
|
||||||
if ($activeTenant instanceof ManagedEnvironment && ! $activeTenant->is($runTenant)) {
|
if ($activeTenant instanceof Tenant && ! $activeTenant->is($runTenant)) {
|
||||||
$title = 'Current environment context differs from this operation';
|
$title = 'Current tenant context differs from this operation';
|
||||||
array_unshift($messages, 'Current environment context: '.$activeTenant->name.'.');
|
array_unshift($messages, 'Current tenant context: '.$activeTenant->name.'.');
|
||||||
$messages[] = 'This canonical workspace view remains valid without switching environment context.';
|
$messages[] = 'This canonical workspace view remains valid without switching tenant context.';
|
||||||
}
|
}
|
||||||
|
|
||||||
$referencedTenant = ReferencedTenantLifecyclePresentation::forOperationRun($runTenant);
|
$referencedTenant = ReferencedTenantLifecyclePresentation::forOperationRun($runTenant);
|
||||||
|
|
||||||
if ($selectorAvailabilityMessage = $referencedTenant->selectorAvailabilityMessage()) {
|
if ($selectorAvailabilityMessage = $referencedTenant->selectorAvailabilityMessage()) {
|
||||||
$title ??= 'Operation environment is not available in the current environment selector';
|
$title ??= 'Operation tenant is not available in the current tenant selector';
|
||||||
$tone = 'amber';
|
$tone = 'amber';
|
||||||
$messages[] = $selectorAvailabilityMessage;
|
$messages[] = $selectorAvailabilityMessage;
|
||||||
|
|
||||||
if ($referencedTenant->contextNote !== null) {
|
if ($referencedTenant->contextNote !== null) {
|
||||||
$messages[] = $referencedTenant->contextNote;
|
$messages[] = $referencedTenant->contextNote;
|
||||||
}
|
}
|
||||||
} elseif (! $activeTenant instanceof ManagedEnvironment) {
|
} elseif (! $activeTenant instanceof Tenant) {
|
||||||
$title ??= 'Canonical workspace view';
|
$title ??= 'Canonical workspace view';
|
||||||
$messages[] = 'No environment context is currently selected.';
|
$messages[] = 'No tenant context is currently selected.';
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($title === null) {
|
if ($title === null) {
|
||||||
@ -926,7 +925,7 @@ private function canResumeCapture(): bool
|
|||||||
&& $resolver->can($user, $workspace, Capabilities::WORKSPACE_BASELINES_MANAGE);
|
&& $resolver->can($user, $workspace, Capabilities::WORKSPACE_BASELINES_MANAGE);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function relatedLinksTenant(): ?ManagedEnvironment
|
private function relatedLinksTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if (! isset($this->run)) {
|
if (! isset($this->run)) {
|
||||||
return null;
|
return null;
|
||||||
@ -935,7 +934,7 @@ private function relatedLinksTenant(): ?ManagedEnvironment
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$tenant = $this->run->tenant;
|
$tenant = $this->run->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -4,24 +4,23 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages\Reviews;
|
namespace App\Filament\Pages\Reviews;
|
||||||
|
|
||||||
use App\Filament\Resources\EnvironmentReviewResource;
|
use App\Filament\Resources\TenantReviewResource;
|
||||||
use App\Models\EvidenceSnapshot;
|
use App\Models\EvidenceSnapshot;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
|
use App\Models\Tenant;
|
||||||
use App\Models\ReviewPack;
|
use App\Models\ReviewPack;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\TenantReview;
|
||||||
use App\Models\EnvironmentReview;
|
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Services\EnvironmentReviews\EnvironmentReviewRegisterService;
|
use App\Services\ReviewPackService;
|
||||||
|
use App\Services\TenantReviews\TenantReviewRegisterService;
|
||||||
use App\Support\Audit\AuditActionId;
|
use App\Support\Audit\AuditActionId;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Findings\FindingOutcomeSemantics;
|
use App\Support\Findings\FindingOutcomeSemantics;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Governance\Controls\ComplianceEvidenceMappingV1;
|
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\ReviewPackStatus;
|
use App\Support\ReviewPackStatus;
|
||||||
use App\Support\EnvironmentReviewCompletenessState;
|
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
@ -73,11 +72,10 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::RunLog, ActionSurfaceType::ReadOnlyRegistryReport)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::RunLog, ActionSurfaceType::ReadOnlyRegistryReport)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions provide a single Clear filters action for the customer review workspace.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header actions provide a single Clear filters action for the customer review workspace.')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::PrimaryLinkColumn->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
||||||
->withPrimaryLinkColumnReason('Only the dedicated review-open column should navigate away; the rest of the row stays comparative workspace context.')
|
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The customer review workspace remains scan-first and does not expose bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The customer review workspace remains scan-first and does not expose bulk actions.')
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The empty state keeps exactly one Clear filters CTA when filters are active.')
|
->satisfy(ActionSurfaceSlot::ListEmptyState, 'The empty state keeps exactly one Clear filters CTA when filters are active.')
|
||||||
->exempt(ActionSurfaceSlot::DetailHeader, 'The dedicated open link column opens the latest published review detail instead of an inline canonical detail panel.');
|
->exempt(ActionSurfaceSlot::DetailHeader, 'Row navigation opens the latest published review detail instead of an inline canonical detail panel.');
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function getNavigationGroup(): string
|
public static function getNavigationGroup(): string
|
||||||
@ -95,7 +93,7 @@ public function getTitle(): string
|
|||||||
return __('localization.review.customer_review_workspace');
|
return __('localization.review.customer_review_workspace');
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function tenantPrefilterUrl(ManagedEnvironment $tenant): string
|
public static function tenantPrefilterUrl(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$tenantIdentifier = filled($tenant->external_id)
|
$tenantIdentifier = filled($tenant->external_id)
|
||||||
? (string) $tenant->external_id
|
? (string) $tenant->external_id
|
||||||
@ -107,7 +105,7 @@ public static function tenantPrefilterUrl(ManagedEnvironment $tenant): string
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
@ -154,44 +152,42 @@ public function table(Table $table): Table
|
|||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
->persistSearchInSession()
|
->persistSearchInSession()
|
||||||
->persistSortInSession()
|
->persistSortInSession()
|
||||||
->recordUrl(null)
|
->recordUrl(fn (Tenant $record): ?string => $this->latestReviewUrl($record))
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('name')->label(__('localization.review.tenant'))->searchable(),
|
TextColumn::make('name')->label(__('localization.review.tenant'))->searchable()->sortable(),
|
||||||
TextColumn::make('package_availability')
|
|
||||||
->label(__('localization.review.governance_package'))
|
|
||||||
->width('9rem')
|
|
||||||
->extraHeaderAttributes(['class' => 'whitespace-normal'])
|
|
||||||
->badge()
|
|
||||||
->getStateUsing(fn (ManagedEnvironment $record): string => $this->governancePackageAvailabilityLabel($record))
|
|
||||||
->color(fn (ManagedEnvironment $record): string => $this->governancePackageAvailabilityColor($record))
|
|
||||||
->tooltip(fn (ManagedEnvironment $record): string => $this->governancePackageAvailability($record)['description']),
|
|
||||||
TextColumn::make('latest_review')
|
TextColumn::make('latest_review')
|
||||||
->label(__('localization.review.status'))
|
->label(__('localization.review.latest_review'))
|
||||||
->width('9rem')
|
|
||||||
->badge()
|
->badge()
|
||||||
->getStateUsing(fn (ManagedEnvironment $record): string => $this->latestReviewStateLabel($record))
|
->getStateUsing(fn (Tenant $record): string => $this->latestReviewStateLabel($record))
|
||||||
->color(fn (ManagedEnvironment $record): string => $this->latestReviewStateColor($record)),
|
->color(fn (Tenant $record): string => $this->latestReviewStateColor($record))
|
||||||
TextColumn::make('evidence_proof_state')
|
->icon(fn (Tenant $record): ?string => $this->latestReviewStateIcon($record))
|
||||||
->label(__('localization.review.evidence_status'))
|
->iconColor(fn (Tenant $record): ?string => $this->latestReviewStateIconColor($record))
|
||||||
->width('8rem')
|
->description(fn (Tenant $record): ?string => $this->reviewOutcomeDescription($record))
|
||||||
->badge()
|
->wrap(),
|
||||||
->getStateUsing(fn (ManagedEnvironment $record): string => $this->evidenceStatusLabel($record))
|
TextColumn::make('finding_summary')
|
||||||
->color(fn (ManagedEnvironment $record): string => $this->evidenceStatusColor($record)),
|
->label(__('localization.review.key_findings'))
|
||||||
TextColumn::make('recommended_next_action')
|
->getStateUsing(fn (Tenant $record): string => $this->findingSummary($record))
|
||||||
->label(__('localization.review.next_step'))
|
->wrap(),
|
||||||
->width('10rem')
|
TextColumn::make('accepted_risk_summary')
|
||||||
->extraHeaderAttributes(['class' => 'whitespace-normal'])
|
->label(__('localization.review.accepted_risks'))
|
||||||
->getStateUsing(fn (ManagedEnvironment $record): string => $this->controlRecommendedNextAction($record))
|
->getStateUsing(fn (Tenant $record): string => $this->acceptedRiskSummary($record))
|
||||||
|
->wrap(),
|
||||||
|
TextColumn::make('evidence_proof_state')
|
||||||
|
->label(__('localization.review.evidence_proof'))
|
||||||
|
->getStateUsing(fn (Tenant $record): string => $this->evidenceProofAvailability($record))
|
||||||
|
->wrap(),
|
||||||
|
TextColumn::make('published_at')
|
||||||
|
->label(__('localization.review.published'))
|
||||||
|
->getStateUsing(fn (Tenant $record): ?string => $this->latestPublishedAt($record)?->toDateTimeString())
|
||||||
|
->dateTime()
|
||||||
|
->placeholder('—'),
|
||||||
|
TextColumn::make('review_pack_state')
|
||||||
|
->label(__('localization.review.review_pack'))
|
||||||
|
->getStateUsing(fn (Tenant $record): string => $this->reviewPackAvailability($record))
|
||||||
->wrap(),
|
->wrap(),
|
||||||
TextColumn::make('open_review')
|
|
||||||
->label(__('localization.review.open'))
|
|
||||||
->width('8rem')
|
|
||||||
->getStateUsing(fn (): string => __('localization.review.open_review'))
|
|
||||||
->url(fn (ManagedEnvironment $record): ?string => $this->latestReviewUrl($record))
|
|
||||||
->color('primary'),
|
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label(__('localization.review.tenant'))
|
->label(__('localization.review.tenant'))
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->default(fn (): ?string => $this->defaultTenantFilter())
|
->default(fn (): ?string => $this->defaultTenantFilter())
|
||||||
@ -204,12 +200,24 @@ public function table(Table $table): Table
|
|||||||
})
|
})
|
||||||
->searchable(),
|
->searchable(),
|
||||||
])
|
])
|
||||||
->actions([])
|
->actions([
|
||||||
|
Action::make('open_latest_review')
|
||||||
|
->label(__('localization.review.open_latest_review'))
|
||||||
|
->icon('heroicon-o-arrow-top-right-on-square')
|
||||||
|
->url(fn (Tenant $record): ?string => $this->latestReviewUrl($record))
|
||||||
|
->visible(fn (Tenant $record): bool => $this->latestPublishedReview($record) instanceof TenantReview),
|
||||||
|
Action::make('download_review_pack')
|
||||||
|
->label(__('localization.review.download_review_pack'))
|
||||||
|
->icon('heroicon-o-arrow-down-tray')
|
||||||
|
->url(fn (Tenant $record): ?string => $this->latestReviewPackDownloadUrl($record))
|
||||||
|
->openUrlInNewTab()
|
||||||
|
->visible(fn (Tenant $record): bool => is_string($this->latestReviewPackDownloadUrl($record))),
|
||||||
|
])
|
||||||
->bulkActions([])
|
->bulkActions([])
|
||||||
->emptyStateHeading(__('localization.review.no_released_customer_reviews'))
|
->emptyStateHeading(__('localization.review.no_entitled_tenants'))
|
||||||
->emptyStateDescription(fn (): string => $this->hasActiveFilters()
|
->emptyStateDescription(fn (): string => $this->hasActiveFilters()
|
||||||
? __('localization.review.clear_filters_description')
|
? __('localization.review.clear_filters_description')
|
||||||
: __('localization.review.no_released_customer_reviews_description'))
|
: __('localization.review.adjust_filters_description'))
|
||||||
->emptyStateActions([
|
->emptyStateActions([
|
||||||
Action::make('clear_filters_empty')
|
Action::make('clear_filters_empty')
|
||||||
->label(__('localization.review.clear_filters'))
|
->label(__('localization.review.clear_filters'))
|
||||||
@ -221,7 +229,7 @@ public function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function authorizedTenants(): array
|
public function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -236,7 +244,7 @@ public function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->authorizedTenants = app(EnvironmentReviewRegisterService::class)->authorizedTenants($user, $workspace);
|
return $this->authorizedTenants = app(TenantReviewRegisterService::class)->authorizedTenants($user, $workspace);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function authorizePageAccess(): void
|
private function authorizePageAccess(): void
|
||||||
@ -252,7 +260,7 @@ private function authorizePageAccess(): void
|
|||||||
throw new NotFoundHttpException;
|
throw new NotFoundHttpException;
|
||||||
}
|
}
|
||||||
|
|
||||||
$service = app(EnvironmentReviewRegisterService::class);
|
$service = app(TenantReviewRegisterService::class);
|
||||||
|
|
||||||
if (! $service->canAccessWorkspace($user, $workspace)) {
|
if (! $service->canAccessWorkspace($user, $workspace)) {
|
||||||
throw new NotFoundHttpException;
|
throw new NotFoundHttpException;
|
||||||
@ -280,8 +288,6 @@ private function auditWorkspaceOpen(): void
|
|||||||
'source_surface' => self::SOURCE_SURFACE,
|
'source_surface' => self::SOURCE_SURFACE,
|
||||||
'tenant_filter_id' => $this->currentTenantFilterId(),
|
'tenant_filter_id' => $this->currentTenantFilterId(),
|
||||||
'entitled_tenant_count' => count($this->authorizedTenants()),
|
'entitled_tenant_count' => count($this->authorizedTenants()),
|
||||||
'interpretation_version' => $this->currentTenantFilterInterpretationVersion(),
|
|
||||||
'interpretation_versions' => $this->visibleInterpretationVersions(),
|
|
||||||
],
|
],
|
||||||
],
|
],
|
||||||
actor: $user,
|
actor: $user,
|
||||||
@ -297,10 +303,10 @@ private function workspaceQuery(): Builder
|
|||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
|
|
||||||
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
||||||
return ManagedEnvironment::query()->whereRaw('1 = 0');
|
return Tenant::query()->whereRaw('1 = 0');
|
||||||
}
|
}
|
||||||
|
|
||||||
return app(EnvironmentReviewRegisterService::class)->customerWorkspaceTenantQuery($user, $workspace);
|
return app(TenantReviewRegisterService::class)->customerWorkspaceTenantQuery($user, $workspace);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -309,7 +315,7 @@ private function workspaceQuery(): Builder
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->authorizedTenants())
|
return collect($this->authorizedTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->name,
|
(string) $tenant->getKey() => $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -317,12 +323,16 @@ private function tenantFilterOptions(): array
|
|||||||
|
|
||||||
private function defaultTenantFilter(): ?string
|
private function defaultTenantFilter(): ?string
|
||||||
{
|
{
|
||||||
return null;
|
$tenantId = app(WorkspaceContext::class)->lastTenantId(request());
|
||||||
|
|
||||||
|
return is_int($tenantId) && array_key_exists($tenantId, $this->authorizedTenants())
|
||||||
|
? (string) $tenantId
|
||||||
|
: null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function applyRequestedTenantPrefilter(): void
|
private function applyRequestedTenantPrefilter(): void
|
||||||
{
|
{
|
||||||
$requestedTenant = request()->query('tenant', request()->query('managed_environment_id'));
|
$requestedTenant = request()->query('tenant', request()->query('tenant_id'));
|
||||||
|
|
||||||
if (! is_string($requestedTenant) && ! is_numeric($requestedTenant)) {
|
if (! is_string($requestedTenant) && ! is_numeric($requestedTenant)) {
|
||||||
return;
|
return;
|
||||||
@ -333,8 +343,8 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -349,15 +359,16 @@ private function hasActiveFilters(): bool
|
|||||||
|
|
||||||
private function clearWorkspaceFilters(): void
|
private function clearWorkspaceFilters(): void
|
||||||
{
|
{
|
||||||
|
app(WorkspaceContext::class)->clearLastTenantId(request());
|
||||||
$this->removeTableFilters();
|
$this->removeTableFilters();
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentTenantFilterId(): ?int
|
private function currentTenantFilterId(): ?int
|
||||||
{
|
{
|
||||||
$tenantFilter = data_get($this->tableFilters, 'managed_environment_id.value');
|
$tenantFilter = data_get($this->tableFilters, 'tenant_id.value');
|
||||||
|
|
||||||
if (! is_numeric($tenantFilter)) {
|
if (! is_numeric($tenantFilter)) {
|
||||||
$tenantFilter = data_get(session()->get($this->getTableFiltersSessionKey(), []), 'managed_environment_id.value');
|
$tenantFilter = data_get(session()->get($this->getTableFiltersSessionKey(), []), 'tenant_id.value');
|
||||||
}
|
}
|
||||||
|
|
||||||
return is_numeric($tenantFilter) ? (int) $tenantFilter : null;
|
return is_numeric($tenantFilter) ? (int) $tenantFilter : null;
|
||||||
@ -372,57 +383,85 @@ private function workspace(): ?Workspace
|
|||||||
: null;
|
: null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestPublishedReview(ManagedEnvironment $tenant): ?EnvironmentReview
|
private function latestPublishedReview(Tenant $tenant): ?TenantReview
|
||||||
{
|
{
|
||||||
$review = $tenant->environmentReviews->first();
|
$review = $tenant->tenantReviews->first();
|
||||||
|
|
||||||
return $review instanceof EnvironmentReview ? $review : null;
|
return $review instanceof TenantReview ? $review : null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestReviewUrl(ManagedEnvironment $tenant): ?string
|
private function latestReviewUrl(Tenant $tenant): ?string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
if (! $review instanceof TenantReview) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$query = array_filter(
|
return $this->appendQuery(
|
||||||
|
TenantReviewResource::tenantScopedUrl('view', ['record' => $review], $tenant, 'tenant'),
|
||||||
array_replace(
|
array_replace(
|
||||||
[self::DETAIL_CONTEXT_QUERY_KEY => 1],
|
[self::DETAIL_CONTEXT_QUERY_KEY => 1],
|
||||||
[
|
|
||||||
'source_surface' => self::SOURCE_SURFACE,
|
|
||||||
'tenant_filter_id' => $this->currentTenantFilterId(),
|
|
||||||
],
|
|
||||||
$this->navigationContext()?->toQuery() ?? [],
|
$this->navigationContext()?->toQuery() ?? [],
|
||||||
),
|
),
|
||||||
static fn (mixed $value): bool => $value !== null && $value !== '',
|
|
||||||
);
|
);
|
||||||
|
|
||||||
return $this->appendQuery(EnvironmentReviewResource::tenantScopedUrl('view', ['record' => $review], $tenant), $query);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestPublishedAt(ManagedEnvironment $tenant): ?\Illuminate\Support\Carbon
|
private function latestReviewPack(Tenant $tenant): ?ReviewPack
|
||||||
|
{
|
||||||
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
$pack = $review?->currentExportReviewPack;
|
||||||
|
|
||||||
|
return $pack instanceof ReviewPack ? $pack : null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private function latestReviewPackDownloadUrl(Tenant $tenant): ?string
|
||||||
|
{
|
||||||
|
$user = auth()->user();
|
||||||
|
$pack = $this->latestReviewPack($tenant);
|
||||||
|
|
||||||
|
if (! $user instanceof User || ! $pack instanceof ReviewPack) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (! $user->can(Capabilities::REVIEW_PACK_VIEW, $tenant)) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($pack->status !== ReviewPackStatus::Ready->value) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($pack->expires_at !== null && $pack->expires_at->isPast()) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
return app(ReviewPackService::class)->generateDownloadUrl($pack, [
|
||||||
|
'source_surface' => self::SOURCE_SURFACE,
|
||||||
|
]);
|
||||||
|
}
|
||||||
|
|
||||||
|
private function latestPublishedAt(Tenant $tenant): ?\Illuminate\Support\Carbon
|
||||||
{
|
{
|
||||||
return $this->latestPublishedReview($tenant)?->published_at;
|
return $this->latestPublishedReview($tenant)?->published_at;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewTruth(ManagedEnvironment $tenant): ?ArtifactTruthEnvelope
|
private function reviewTruth(Tenant $tenant): ?ArtifactTruthEnvelope
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
return $review instanceof EnvironmentReview
|
return $review instanceof TenantReview
|
||||||
? app(ArtifactTruthPresenter::class)->forEnvironmentReview($review)
|
? app(ArtifactTruthPresenter::class)->forTenantReview($review)
|
||||||
: null;
|
: null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcome(ManagedEnvironment $tenant): ?CompressedGovernanceOutcome
|
private function reviewOutcome(Tenant $tenant): ?CompressedGovernanceOutcome
|
||||||
{
|
{
|
||||||
$presenter = app(ArtifactTruthPresenter::class);
|
$presenter = app(ArtifactTruthPresenter::class);
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
$truth = $this->reviewTruth($tenant);
|
$truth = $this->reviewTruth($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview || ! $truth instanceof ArtifactTruthEnvelope) {
|
if (! $review instanceof TenantReview || ! $truth instanceof ArtifactTruthEnvelope) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -430,53 +469,31 @@ private function reviewOutcome(ManagedEnvironment $tenant): ?CompressedGovernanc
|
|||||||
?? $presenter->compressedOutcomeFromEnvelope($truth, SurfaceCompressionContext::reviewRegister());
|
?? $presenter->compressedOutcomeFromEnvelope($truth, SurfaceCompressionContext::reviewRegister());
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestReviewStateLabel(ManagedEnvironment $tenant): string
|
private function latestReviewStateLabel(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
return $this->reviewOutcome($tenant)?->primaryLabel ?? __('localization.review.no_published_review');
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return __('localization.review.no_published_review');
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->workspaceReviewNeedsAttention($tenant)
|
|
||||||
? __('localization.review.review_requires_attention')
|
|
||||||
: __('localization.review.ready_for_release');
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestReviewStateColor(ManagedEnvironment $tenant): string
|
private function latestReviewStateColor(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
return $this->reviewOutcome($tenant)?->primaryBadge->color ?? 'gray';
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return 'gray';
|
|
||||||
}
|
|
||||||
|
|
||||||
$packageState = $this->governancePackageAvailability($tenant)['state'];
|
|
||||||
|
|
||||||
if (! $this->workspaceReviewNeedsAttention($tenant)) {
|
|
||||||
return 'success';
|
|
||||||
}
|
|
||||||
|
|
||||||
return in_array($packageState, ['blocked', 'expired'], true)
|
|
||||||
? 'danger'
|
|
||||||
: 'warning';
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestReviewStateIcon(ManagedEnvironment $tenant): ?string
|
private function latestReviewStateIcon(Tenant $tenant): ?string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($tenant)?->primaryBadge->icon;
|
return $this->reviewOutcome($tenant)?->primaryBadge->icon;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function latestReviewStateIconColor(ManagedEnvironment $tenant): ?string
|
private function latestReviewStateIconColor(Tenant $tenant): ?string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($tenant)?->primaryBadge->iconColor;
|
return $this->reviewOutcome($tenant)?->primaryBadge->iconColor;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeDescription(ManagedEnvironment $tenant): ?string
|
private function reviewOutcomeDescription(Tenant $tenant): ?string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
if (! $review instanceof TenantReview) {
|
||||||
return __('localization.review.no_published_review_available');
|
return __('localization.review.no_published_review_available');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -497,347 +514,11 @@ private function reviewOutcomeDescription(ManagedEnvironment $tenant): ?string
|
|||||||
return trim($primaryReason.' '.__('localization.review.terminal_outcomes').': '.$findingOutcomeSummary.'.');
|
return trim($primaryReason.' '.__('localization.review.terminal_outcomes').': '.$findingOutcomeSummary.'.');
|
||||||
}
|
}
|
||||||
|
|
||||||
private function controlReadinessLabel(ManagedEnvironment $tenant): string
|
private function findingSummary(Tenant $tenant): string
|
||||||
{
|
|
||||||
$control = $this->primaryControlSummary($tenant);
|
|
||||||
|
|
||||||
if ($control === null) {
|
|
||||||
return __('localization.review.control_readiness_unmapped');
|
|
||||||
}
|
|
||||||
|
|
||||||
$label = $control['readiness_label'] ?? null;
|
|
||||||
|
|
||||||
return is_string($label) && trim($label) !== ''
|
|
||||||
? $label
|
|
||||||
: ComplianceEvidenceMappingV1::readinessLabel((string) ($control['readiness_bucket'] ?? 'review_recommended'));
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>
|
|
||||||
*/
|
|
||||||
private function governancePackageSummary(ManagedEnvironment $tenant): array
|
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
if (! $review instanceof TenantReview) {
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
$summary = is_array($review->summary) ? $review->summary : [];
|
|
||||||
$package = is_array($summary['governance_package'] ?? null) ? $summary['governance_package'] : [];
|
|
||||||
|
|
||||||
return $package;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array{state:string,label:string,description:string}
|
|
||||||
*/
|
|
||||||
private function governancePackageAvailability(ManagedEnvironment $tenant): array
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return [
|
|
||||||
'state' => 'unavailable',
|
|
||||||
'label' => __('localization.review.governance_package_unavailable'),
|
|
||||||
'description' => __('localization.review.no_published_review_available'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
$pack = $review->currentExportReviewPack;
|
|
||||||
$user = auth()->user();
|
|
||||||
$limitations = is_array($review->controlInterpretation()['limitations'] ?? null) ? $review->controlInterpretation()['limitations'] : [];
|
|
||||||
$isPartialReview = in_array((string) $review->completeness_state, [
|
|
||||||
EnvironmentReviewCompletenessState::Partial->value,
|
|
||||||
EnvironmentReviewCompletenessState::Stale->value,
|
|
||||||
], true) || $limitations !== [];
|
|
||||||
|
|
||||||
if (! $pack instanceof ReviewPack) {
|
|
||||||
return [
|
|
||||||
'state' => 'unavailable',
|
|
||||||
'label' => __('localization.review.governance_package_unavailable'),
|
|
||||||
'description' => __('localization.review.governance_package_unavailable_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $user->can(Capabilities::REVIEW_PACK_VIEW, $tenant)) {
|
|
||||||
return [
|
|
||||||
'state' => 'blocked',
|
|
||||||
'label' => __('localization.review.governance_package_blocked'),
|
|
||||||
'description' => __('localization.review.governance_package_blocked_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($pack->status === ReviewPackStatus::Expired->value || ($pack->expires_at !== null && $pack->expires_at->isPast())) {
|
|
||||||
return [
|
|
||||||
'state' => 'expired',
|
|
||||||
'label' => __('localization.review.governance_package_expired'),
|
|
||||||
'description' => __('localization.review.governance_package_expired_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($pack->status !== ReviewPackStatus::Ready->value) {
|
|
||||||
return [
|
|
||||||
'state' => 'unavailable',
|
|
||||||
'label' => __('localization.review.governance_package_unavailable'),
|
|
||||||
'description' => __('localization.review.governance_package_not_ready_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($isPartialReview) {
|
|
||||||
return [
|
|
||||||
'state' => 'partial',
|
|
||||||
'label' => __('localization.review.governance_package_partial'),
|
|
||||||
'description' => __('localization.review.governance_package_partial_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
return [
|
|
||||||
'state' => 'available',
|
|
||||||
'label' => __('localization.review.governance_package_available'),
|
|
||||||
'description' => __('localization.review.governance_package_available_description'),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
private function governancePackageAvailabilityLabel(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
return match ($this->governancePackageAvailability($tenant)['state']) {
|
|
||||||
'available' => __('localization.review.available'),
|
|
||||||
'partial' => __('localization.review.partial'),
|
|
||||||
'blocked' => __('localization.review.blocked'),
|
|
||||||
'expired' => __('localization.review.expired'),
|
|
||||||
default => __('localization.review.unavailable'),
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function governancePackageAvailabilityColor(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
return match ($this->governancePackageAvailability($tenant)['state']) {
|
|
||||||
'available' => 'success',
|
|
||||||
'partial' => 'warning',
|
|
||||||
'blocked', 'expired' => 'danger',
|
|
||||||
default => 'gray',
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function governancePackageTeaser(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$package = $this->governancePackageSummary($tenant);
|
|
||||||
|
|
||||||
$executiveSummary = $package['executive_summary'] ?? null;
|
|
||||||
|
|
||||||
if (is_string($executiveSummary) && trim($executiveSummary) !== '') {
|
|
||||||
return $executiveSummary;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->governancePackageAvailability($tenant)['description'];
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlReadinessColor(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
return match ((string) ($this->primaryControlSummary($tenant)['readiness_bucket'] ?? 'unmapped')) {
|
|
||||||
'follow_up_required' => 'warning',
|
|
||||||
'review_recommended' => 'info',
|
|
||||||
'evidence_on_record' => 'success',
|
|
||||||
default => 'gray',
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlReadinessDescription(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return __('localization.review.no_published_review_available');
|
|
||||||
}
|
|
||||||
|
|
||||||
$controls = $review->controlInterpretationControls();
|
|
||||||
|
|
||||||
if ($controls === []) {
|
|
||||||
return __('localization.review.control_readiness_unmapped_description');
|
|
||||||
}
|
|
||||||
|
|
||||||
$summary = collect($controls)
|
|
||||||
->take(2)
|
|
||||||
->map(function (array $control): string {
|
|
||||||
$name = is_string($control['control_name'] ?? null) ? $control['control_name'] : __('localization.review.control');
|
|
||||||
$label = is_string($control['readiness_label'] ?? null)
|
|
||||||
? $control['readiness_label']
|
|
||||||
: ComplianceEvidenceMappingV1::readinessLabel((string) ($control['readiness_bucket'] ?? 'review_recommended'));
|
|
||||||
|
|
||||||
return $name.': '.$label;
|
|
||||||
})
|
|
||||||
->implode(' · ');
|
|
||||||
|
|
||||||
$remaining = count($controls) - 2;
|
|
||||||
|
|
||||||
if ($remaining > 0) {
|
|
||||||
$summary .= ' · '.__('localization.review.additional_controls', ['count' => $remaining]);
|
|
||||||
}
|
|
||||||
|
|
||||||
$limitations = $this->controlLimitationSummary($review);
|
|
||||||
|
|
||||||
return trim($summary.($limitations !== null ? ' '.$limitations : ''));
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlEvidenceBasisSummary(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$control = $this->primaryControlSummary($tenant);
|
|
||||||
|
|
||||||
if ($control === null) {
|
|
||||||
return __('localization.review.control_evidence_unmapped');
|
|
||||||
}
|
|
||||||
|
|
||||||
$summary = $control['evidence_basis_summary'] ?? null;
|
|
||||||
|
|
||||||
return is_string($summary) && trim($summary) !== ''
|
|
||||||
? $summary
|
|
||||||
: __('localization.review.control_evidence_unavailable');
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlRecommendedNextAction(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
if ($this->primaryControlSummary($tenant) === null) {
|
|
||||||
return __('localization.review.workspace_next_step_control_mapping');
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->evidenceStatusState($tenant) !== 'available') {
|
|
||||||
return __('localization.review.workspace_next_step_evidence_review');
|
|
||||||
}
|
|
||||||
|
|
||||||
return match ($this->governancePackageAvailability($tenant)['state']) {
|
|
||||||
'available', 'partial' => __('localization.review.workspace_next_step_package_review'),
|
|
||||||
default => __('localization.review.workspace_next_step_review_open'),
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function workspaceReviewNeedsAttention(ManagedEnvironment $tenant): bool
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->primaryControlSummary($tenant) === null) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($this->evidenceStatusState($tenant) !== 'available') {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->governancePackageAvailability($tenant)['state'] !== 'available';
|
|
||||||
}
|
|
||||||
|
|
||||||
private function evidenceStatusState(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return 'pending';
|
|
||||||
}
|
|
||||||
|
|
||||||
$snapshot = $review->evidenceSnapshot;
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $snapshot instanceof EvidenceSnapshot) {
|
|
||||||
return 'pending';
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $user->can(Capabilities::EVIDENCE_VIEW, $tenant)) {
|
|
||||||
return 'restricted';
|
|
||||||
}
|
|
||||||
|
|
||||||
if ((string) $snapshot->status === 'expired' || ($snapshot->expires_at !== null && $snapshot->expires_at->isPast())) {
|
|
||||||
return 'expired';
|
|
||||||
}
|
|
||||||
|
|
||||||
return 'available';
|
|
||||||
}
|
|
||||||
|
|
||||||
private function evidenceStatusLabelForState(string $state): string
|
|
||||||
{
|
|
||||||
return match ($state) {
|
|
||||||
'available' => __('localization.review.available'),
|
|
||||||
'restricted' => __('localization.review.restricted'),
|
|
||||||
'expired' => __('localization.review.expired'),
|
|
||||||
default => __('localization.review.pending'),
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function evidenceStatusColorForState(string $state): string
|
|
||||||
{
|
|
||||||
return match ($state) {
|
|
||||||
'available' => 'success',
|
|
||||||
'restricted', 'expired' => 'danger',
|
|
||||||
default => 'gray',
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlRecommendedNextActionDescription(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$control = $this->primaryControlSummary($tenant);
|
|
||||||
|
|
||||||
if ($control === null) {
|
|
||||||
return __('localization.review.control_recommendation_unmapped');
|
|
||||||
}
|
|
||||||
|
|
||||||
$action = $control['recommended_next_action'] ?? null;
|
|
||||||
|
|
||||||
return is_string($action) && trim($action) !== ''
|
|
||||||
? $action
|
|
||||||
: __('localization.review.no_action_needed');
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>|null
|
|
||||||
*/
|
|
||||||
private function primaryControlSummary(ManagedEnvironment $tenant): ?array
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$controls = collect($review->controlInterpretationControls());
|
|
||||||
|
|
||||||
return $controls
|
|
||||||
->sortBy(static fn (array $control): int => match ((string) ($control['readiness_bucket'] ?? '')) {
|
|
||||||
'follow_up_required' => 0,
|
|
||||||
'review_recommended' => 1,
|
|
||||||
'evidence_on_record' => 2,
|
|
||||||
default => 3,
|
|
||||||
})
|
|
||||||
->first();
|
|
||||||
}
|
|
||||||
|
|
||||||
private function controlLimitationSummary(EnvironmentReview $review): ?string
|
|
||||||
{
|
|
||||||
$counts = $review->controlInterpretationLimitationCounts();
|
|
||||||
|
|
||||||
if ($counts === []) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$labels = collect($counts)
|
|
||||||
->filter(static fn (int $count): bool => $count > 0)
|
|
||||||
->keys()
|
|
||||||
->map(static fn (string $flag): string => ComplianceEvidenceMappingV1::limitationLabel($flag))
|
|
||||||
->values()
|
|
||||||
->all();
|
|
||||||
|
|
||||||
return $labels === []
|
|
||||||
? null
|
|
||||||
: __('localization.review.control_limitations_summary', ['limitations' => implode(', ', $labels)]);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function findingSummary(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
$review = $this->latestPublishedReview($tenant);
|
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
|
||||||
return __('localization.review.no_published_review_available');
|
return __('localization.review.no_published_review_available');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -860,11 +541,11 @@ private function findingSummary(ManagedEnvironment $tenant): string
|
|||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function acceptedRiskSummary(ManagedEnvironment $tenant): string
|
private function acceptedRiskSummary(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
if (! $review instanceof TenantReview) {
|
||||||
return __('localization.review.no_published_review_available');
|
return __('localization.review.no_published_review_available');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -888,11 +569,39 @@ private function acceptedRiskSummary(ManagedEnvironment $tenant): string
|
|||||||
: $countSummary.' '.$accountability;
|
: $countSummary.' '.$accountability;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function evidenceProofAvailability(ManagedEnvironment $tenant): string
|
private function reviewPackAvailability(Tenant $tenant): string
|
||||||
|
{
|
||||||
|
if (! $this->latestPublishedReview($tenant) instanceof TenantReview) {
|
||||||
|
return __('localization.review.no_published_review_available');
|
||||||
|
}
|
||||||
|
|
||||||
|
$pack = $this->latestReviewPack($tenant);
|
||||||
|
$user = auth()->user();
|
||||||
|
|
||||||
|
if (! $pack instanceof ReviewPack) {
|
||||||
|
return __('localization.review.no_current_review_pack');
|
||||||
|
}
|
||||||
|
|
||||||
|
if (! $user instanceof User || ! $user->can(Capabilities::REVIEW_PACK_VIEW, $tenant)) {
|
||||||
|
return __('localization.review.review_pack_access_unavailable');
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($pack->status !== ReviewPackStatus::Ready->value) {
|
||||||
|
return __('localization.review.review_pack_unavailable');
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($pack->expires_at !== null && $pack->expires_at->isPast()) {
|
||||||
|
return __('localization.review.review_pack_expired');
|
||||||
|
}
|
||||||
|
|
||||||
|
return __('localization.review.review_pack_available');
|
||||||
|
}
|
||||||
|
|
||||||
|
private function evidenceProofAvailability(Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$review = $this->latestPublishedReview($tenant);
|
$review = $this->latestPublishedReview($tenant);
|
||||||
|
|
||||||
if (! $review instanceof EnvironmentReview) {
|
if (! $review instanceof TenantReview) {
|
||||||
return __('localization.review.no_published_review_available');
|
return __('localization.review.no_published_review_available');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -914,66 +623,12 @@ private function evidenceProofAvailability(ManagedEnvironment $tenant): string
|
|||||||
return __('localization.review.evidence_proof_available');
|
return __('localization.review.evidence_proof_available');
|
||||||
}
|
}
|
||||||
|
|
||||||
private function evidenceStatusLabel(ManagedEnvironment $tenant): string
|
private function acceptedRiskAccountability(Tenant $tenant): ?string
|
||||||
{
|
|
||||||
return $this->evidenceStatusLabelForState($this->evidenceStatusState($tenant));
|
|
||||||
}
|
|
||||||
|
|
||||||
private function evidenceStatusColor(ManagedEnvironment $tenant): string
|
|
||||||
{
|
|
||||||
return $this->evidenceStatusColorForState($this->evidenceStatusState($tenant));
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return list<string>
|
|
||||||
*/
|
|
||||||
private function visibleInterpretationVersions(): array
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
$workspace = $this->workspace();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
return app(EnvironmentReviewRegisterService::class)
|
|
||||||
->latestPublishedQuery($user, $workspace)
|
|
||||||
->get()
|
|
||||||
->map(static fn (EnvironmentReview $review): ?string => $review->controlInterpretationVersion())
|
|
||||||
->filter()
|
|
||||||
->unique()
|
|
||||||
->values()
|
|
||||||
->all();
|
|
||||||
}
|
|
||||||
|
|
||||||
private function currentTenantFilterInterpretationVersion(): ?string
|
|
||||||
{
|
|
||||||
$tenantId = $this->currentTenantFilterId();
|
|
||||||
|
|
||||||
if ($tenantId === null) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenant = $this->authorizedTenants()[$tenantId] ?? null;
|
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $tenant->environmentReviews()->published()
|
|
||||||
->latest('published_at')
|
|
||||||
->latest('generated_at')
|
|
||||||
->latest('id')
|
|
||||||
->first()
|
|
||||||
?->controlInterpretationVersion();
|
|
||||||
}
|
|
||||||
|
|
||||||
private function acceptedRiskAccountability(ManagedEnvironment $tenant): ?string
|
|
||||||
{
|
{
|
||||||
$exception = FindingException::query()
|
$exception = FindingException::query()
|
||||||
->with(['owner', 'approver', 'currentDecision'])
|
->with(['owner', 'approver', 'currentDecision'])
|
||||||
->where('workspace_id', (int) $tenant->workspace_id)
|
->where('workspace_id', (int) $tenant->workspace_id)
|
||||||
->where('managed_environment_id', (int) $tenant->getKey())
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
->current()
|
->current()
|
||||||
->orderByRaw("case when current_validity_state in ('valid', 'expiring') then 0 else 1 end")
|
->orderByRaw("case when current_validity_state in ('valid', 'expiring') then 0 else 1 end")
|
||||||
->latest('approved_at')
|
->latest('approved_at')
|
||||||
|
|||||||
@ -4,13 +4,13 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages\Reviews;
|
namespace App\Filament\Pages\Reviews;
|
||||||
|
|
||||||
use App\Filament\Resources\EnvironmentReviewResource;
|
use App\Filament\Resources\TenantReviewResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\EnvironmentReview;
|
use App\Models\TenantReview;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\ReviewPackService;
|
use App\Services\ReviewPackService;
|
||||||
use App\Services\EnvironmentReviews\EnvironmentReviewRegisterService;
|
use App\Services\TenantReviews\TenantReviewRegisterService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Badges\BadgeCatalog;
|
use App\Support\Badges\BadgeCatalog;
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
@ -19,7 +19,7 @@
|
|||||||
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
||||||
use App\Support\Filament\FilterPresets;
|
use App\Support\Filament\FilterPresets;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\EnvironmentReviewCompletenessState;
|
use App\Support\TenantReviewCompletenessState;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
@ -61,7 +61,7 @@ class ReviewRegister extends Page implements HasTable
|
|||||||
protected string $view = 'filament.pages.reviews.review-register';
|
protected string $view = 'filament.pages.reviews.review-register';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, ManagedEnvironment>|null
|
* @var array<int, Tenant>|null
|
||||||
*/
|
*/
|
||||||
private ?array $authorizedTenants = null;
|
private ?array $authorizedTenants = null;
|
||||||
|
|
||||||
@ -112,15 +112,15 @@ public function table(Table $table): Table
|
|||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
->persistSearchInSession()
|
->persistSearchInSession()
|
||||||
->persistSortInSession()
|
->persistSortInSession()
|
||||||
->recordUrl(fn (EnvironmentReview $record): string => EnvironmentReviewResource::tenantScopedUrl('view', ['record' => $record], $record->tenant))
|
->recordUrl(fn (TenantReview $record): string => TenantReviewResource::tenantScopedUrl('view', ['record' => $record], $record->tenant, 'tenant'))
|
||||||
->columns([
|
->columns([
|
||||||
TextColumn::make('tenant.name')->label('ManagedEnvironment')->searchable(),
|
TextColumn::make('tenant.name')->label('Tenant')->searchable(),
|
||||||
TextColumn::make('status')
|
TextColumn::make('status')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::EnvironmentReviewStatus))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::TenantReviewStatus))
|
||||||
->color(BadgeRenderer::color(BadgeDomain::EnvironmentReviewStatus))
|
->color(BadgeRenderer::color(BadgeDomain::TenantReviewStatus))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::EnvironmentReviewStatus))
|
->icon(BadgeRenderer::icon(BadgeDomain::TenantReviewStatus))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::EnvironmentReviewStatus)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::TenantReviewStatus)),
|
||||||
TextColumn::make('outcome')
|
TextColumn::make('outcome')
|
||||||
->label('Outcome')
|
->label('Outcome')
|
||||||
->badge()
|
->badge()
|
||||||
@ -138,8 +138,8 @@ public function table(Table $table): Table
|
|||||||
->wrap(),
|
->wrap(),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->tenantFilterOptions())
|
->options(fn (): array => $this->tenantFilterOptions())
|
||||||
->default(fn (): ?string => $this->defaultTenantFilter())
|
->default(fn (): ?string => $this->defaultTenantFilter())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
@ -154,7 +154,7 @@ public function table(Table $table): Table
|
|||||||
]),
|
]),
|
||||||
SelectFilter::make('completeness_state')
|
SelectFilter::make('completeness_state')
|
||||||
->label('Completeness')
|
->label('Completeness')
|
||||||
->options(BadgeCatalog::options(BadgeDomain::EnvironmentReviewCompleteness, EnvironmentReviewCompletenessState::values())),
|
->options(BadgeCatalog::options(BadgeDomain::TenantReviewCompleteness, TenantReviewCompletenessState::values())),
|
||||||
SelectFilter::make('published_state')
|
SelectFilter::make('published_state')
|
||||||
->label('Published state')
|
->label('Published state')
|
||||||
->options([
|
->options([
|
||||||
@ -174,11 +174,11 @@ public function table(Table $table): Table
|
|||||||
Action::make('export_executive_pack')
|
Action::make('export_executive_pack')
|
||||||
->label('Export executive pack')
|
->label('Export executive pack')
|
||||||
->icon('heroicon-o-arrow-down-tray')
|
->icon('heroicon-o-arrow-down-tray')
|
||||||
->visible(fn (EnvironmentReview $record): bool => auth()->user() instanceof User
|
->visible(fn (TenantReview $record): bool => auth()->user() instanceof User
|
||||||
&& auth()->user()->can(Capabilities::ENVIRONMENT_REVIEW_MANAGE, $record->tenant)
|
&& auth()->user()->can(Capabilities::TENANT_REVIEW_MANAGE, $record->tenant)
|
||||||
&& in_array($record->status, ['ready', 'published'], true))
|
&& in_array($record->status, ['ready', 'published'], true))
|
||||||
->disabled(fn (EnvironmentReview $record): bool => (bool) (app(ReviewPackService::class)->reviewPackGenerationDecisionForTenant($record->tenant)['is_blocked'] ?? false))
|
->disabled(fn (TenantReview $record): bool => (bool) (app(ReviewPackService::class)->reviewPackGenerationDecisionForTenant($record->tenant)['is_blocked'] ?? false))
|
||||||
->tooltip(function (EnvironmentReview $record): ?string {
|
->tooltip(function (TenantReview $record): ?string {
|
||||||
$decision = app(ReviewPackService::class)->reviewPackGenerationDecisionForTenant($record->tenant);
|
$decision = app(ReviewPackService::class)->reviewPackGenerationDecisionForTenant($record->tenant);
|
||||||
|
|
||||||
if ((bool) ($decision['is_blocked'] ?? false)) {
|
if ((bool) ($decision['is_blocked'] ?? false)) {
|
||||||
@ -195,7 +195,7 @@ public function table(Table $table): Table
|
|||||||
|
|
||||||
return null;
|
return null;
|
||||||
})
|
})
|
||||||
->action(fn (EnvironmentReview $record): mixed => EnvironmentReviewResource::executeExport($record)),
|
->action(fn (TenantReview $record): mixed => TenantReviewResource::executeExport($record)),
|
||||||
])
|
])
|
||||||
->bulkActions([])
|
->bulkActions([])
|
||||||
->emptyStateHeading('No review records match this view')
|
->emptyStateHeading('No review records match this view')
|
||||||
@ -210,7 +210,7 @@ public function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, ManagedEnvironment>
|
* @return array<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function authorizedTenants(): array
|
public function authorizedTenants(): array
|
||||||
{
|
{
|
||||||
@ -225,7 +225,7 @@ public function authorizedTenants(): array
|
|||||||
return $this->authorizedTenants = [];
|
return $this->authorizedTenants = [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return $this->authorizedTenants = app(EnvironmentReviewRegisterService::class)->authorizedTenants($user, $workspace);
|
return $this->authorizedTenants = app(TenantReviewRegisterService::class)->authorizedTenants($user, $workspace);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function authorizePageAccess(): void
|
private function authorizePageAccess(): void
|
||||||
@ -241,7 +241,7 @@ private function authorizePageAccess(): void
|
|||||||
throw new NotFoundHttpException;
|
throw new NotFoundHttpException;
|
||||||
}
|
}
|
||||||
|
|
||||||
$service = app(EnvironmentReviewRegisterService::class);
|
$service = app(TenantReviewRegisterService::class);
|
||||||
|
|
||||||
if (! $service->canAccessWorkspace($user, $workspace)) {
|
if (! $service->canAccessWorkspace($user, $workspace)) {
|
||||||
throw new NotFoundHttpException;
|
throw new NotFoundHttpException;
|
||||||
@ -258,10 +258,10 @@ private function registerQuery(): Builder
|
|||||||
$workspace = $this->workspace();
|
$workspace = $this->workspace();
|
||||||
|
|
||||||
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
if (! $user instanceof User || ! $workspace instanceof Workspace) {
|
||||||
return EnvironmentReview::query()->whereRaw('1 = 0');
|
return TenantReview::query()->whereRaw('1 = 0');
|
||||||
}
|
}
|
||||||
|
|
||||||
return app(EnvironmentReviewRegisterService::class)->query($user, $workspace);
|
return app(TenantReviewRegisterService::class)->query($user, $workspace);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -270,7 +270,7 @@ private function registerQuery(): Builder
|
|||||||
private function tenantFilterOptions(): array
|
private function tenantFilterOptions(): array
|
||||||
{
|
{
|
||||||
return collect($this->authorizedTenants())
|
return collect($this->authorizedTenants())
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->name,
|
(string) $tenant->getKey() => $tenant->name,
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -278,7 +278,11 @@ private function tenantFilterOptions(): array
|
|||||||
|
|
||||||
private function defaultTenantFilter(): ?string
|
private function defaultTenantFilter(): ?string
|
||||||
{
|
{
|
||||||
return null;
|
$tenantId = app(WorkspaceContext::class)->lastTenantId(request());
|
||||||
|
|
||||||
|
return is_int($tenantId) && array_key_exists($tenantId, $this->authorizedTenants())
|
||||||
|
? (string) $tenantId
|
||||||
|
: null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function applyRequestedTenantPrefilter(): void
|
private function applyRequestedTenantPrefilter(): void
|
||||||
@ -294,8 +298,8 @@ private function applyRequestedTenantPrefilter(): void
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->tableFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
$this->tableDeferredFilters['managed_environment_id']['value'] = (string) $tenant->getKey();
|
$this->tableDeferredFilters['tenant_id']['value'] = (string) $tenant->getKey();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
@ -313,15 +317,16 @@ private function hasActiveFilters(): bool
|
|||||||
|
|
||||||
private function clearRegisterFilters(): void
|
private function clearRegisterFilters(): void
|
||||||
{
|
{
|
||||||
|
app(WorkspaceContext::class)->clearLastTenantId(request());
|
||||||
$this->removeTableFilters();
|
$this->removeTableFilters();
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentTenantFilterId(): ?int
|
private function currentTenantFilterId(): ?int
|
||||||
{
|
{
|
||||||
$tenantFilter = data_get($this->tableFilters, 'managed_environment_id.value');
|
$tenantFilter = data_get($this->tableFilters, 'tenant_id.value');
|
||||||
|
|
||||||
if (! is_numeric($tenantFilter)) {
|
if (! is_numeric($tenantFilter)) {
|
||||||
$tenantFilter = data_get(session()->get($this->getTableFiltersSessionKey(), []), 'managed_environment_id.value');
|
$tenantFilter = data_get(session()->get($this->getTableFiltersSessionKey(), []), 'tenant_id.value');
|
||||||
}
|
}
|
||||||
|
|
||||||
return is_numeric($tenantFilter) ? (int) $tenantFilter : null;
|
return is_numeric($tenantFilter) ? (int) $tenantFilter : null;
|
||||||
@ -336,36 +341,36 @@ private function workspace(): ?Workspace
|
|||||||
: null;
|
: null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewTruth(EnvironmentReview $record, bool $fresh = false): ArtifactTruthEnvelope
|
private function reviewTruth(TenantReview $record, bool $fresh = false): ArtifactTruthEnvelope
|
||||||
{
|
{
|
||||||
$presenter = app(ArtifactTruthPresenter::class);
|
$presenter = app(ArtifactTruthPresenter::class);
|
||||||
|
|
||||||
return $fresh
|
return $fresh
|
||||||
? $presenter->forEnvironmentReviewFresh($record)
|
? $presenter->forTenantReviewFresh($record)
|
||||||
: $presenter->forEnvironmentReview($record);
|
: $presenter->forTenantReview($record);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeLabel(EnvironmentReview $record): string
|
private function reviewOutcomeLabel(TenantReview $record): string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($record)->primaryLabel;
|
return $this->reviewOutcome($record)->primaryLabel;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeBadgeColor(EnvironmentReview $record): string
|
private function reviewOutcomeBadgeColor(TenantReview $record): string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($record)->primaryBadge->color;
|
return $this->reviewOutcome($record)->primaryBadge->color;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeBadgeIcon(EnvironmentReview $record): ?string
|
private function reviewOutcomeBadgeIcon(TenantReview $record): ?string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($record)->primaryBadge->icon;
|
return $this->reviewOutcome($record)->primaryBadge->icon;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeBadgeIconColor(EnvironmentReview $record): ?string
|
private function reviewOutcomeBadgeIconColor(TenantReview $record): ?string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($record)->primaryBadge->iconColor;
|
return $this->reviewOutcome($record)->primaryBadge->iconColor;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeDescription(EnvironmentReview $record): ?string
|
private function reviewOutcomeDescription(TenantReview $record): ?string
|
||||||
{
|
{
|
||||||
$primaryReason = $this->reviewOutcome($record)->primaryReason;
|
$primaryReason = $this->reviewOutcome($record)->primaryReason;
|
||||||
$findingOutcomeSummary = $this->findingOutcomeSummary($record);
|
$findingOutcomeSummary = $this->findingOutcomeSummary($record);
|
||||||
@ -377,12 +382,12 @@ private function reviewOutcomeDescription(EnvironmentReview $record): ?string
|
|||||||
return trim($primaryReason.' Terminal outcomes: '.$findingOutcomeSummary.'.');
|
return trim($primaryReason.' Terminal outcomes: '.$findingOutcomeSummary.'.');
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcomeNextStep(EnvironmentReview $record): string
|
private function reviewOutcomeNextStep(TenantReview $record): string
|
||||||
{
|
{
|
||||||
return $this->reviewOutcome($record)->nextActionText;
|
return $this->reviewOutcome($record)->nextActionText;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function reviewOutcome(EnvironmentReview $record, bool $fresh = false): CompressedGovernanceOutcome
|
private function reviewOutcome(TenantReview $record, bool $fresh = false): CompressedGovernanceOutcome
|
||||||
{
|
{
|
||||||
$presenter = app(ArtifactTruthPresenter::class);
|
$presenter = app(ArtifactTruthPresenter::class);
|
||||||
$truth = $fresh
|
$truth = $fresh
|
||||||
@ -396,7 +401,7 @@ private function reviewOutcome(EnvironmentReview $record, bool $fresh = false):
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function findingOutcomeSummary(EnvironmentReview $record): ?string
|
private function findingOutcomeSummary(TenantReview $record): ?string
|
||||||
{
|
{
|
||||||
$summary = is_array($record->summary) ? $record->summary : [];
|
$summary = is_array($record->summary) ? $record->summary : [];
|
||||||
$outcomeCounts = $summary['finding_outcomes'] ?? [];
|
$outcomeCounts = $summary['finding_outcomes'] ?? [];
|
||||||
|
|||||||
@ -4,23 +4,18 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages\Settings;
|
namespace App\Filament\Pages\Settings;
|
||||||
|
|
||||||
use App\Models\SupportAccessGrant;
|
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Models\WorkspaceSetting;
|
use App\Models\WorkspaceSetting;
|
||||||
use App\Services\Auth\SupportAccessGrantManager;
|
use App\Support\Ai\AiPolicyMode;
|
||||||
use App\Services\Auth\SupportAccessGrantResolver;
|
use App\Support\Ai\AiUseCaseCatalog;
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
use App\Services\Entitlements\WorkspaceCommercialLifecycleResolver;
|
|
||||||
use App\Services\Entitlements\WorkspaceEntitlementResolver;
|
use App\Services\Entitlements\WorkspaceEntitlementResolver;
|
||||||
use App\Services\Entitlements\WorkspacePlanProfileCatalog;
|
use App\Services\Entitlements\WorkspacePlanProfileCatalog;
|
||||||
use App\Services\Localization\LocaleResolver;
|
use App\Services\Localization\LocaleResolver;
|
||||||
use App\Services\Settings\SettingsResolver;
|
use App\Services\Settings\SettingsResolver;
|
||||||
use App\Services\Settings\SettingsWriter;
|
use App\Services\Settings\SettingsWriter;
|
||||||
use App\Support\Ai\AiPolicyMode;
|
|
||||||
use App\Support\Ai\AiUseCaseCatalog;
|
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Auth\WorkspaceRole;
|
|
||||||
use App\Support\Settings\SettingDefinition;
|
use App\Support\Settings\SettingDefinition;
|
||||||
use App\Support\Settings\SettingsRegistry;
|
use App\Support\Settings\SettingsRegistry;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
@ -146,11 +141,6 @@ class WorkspaceSettings extends Page
|
|||||||
*/
|
*/
|
||||||
public array $entitlementSummary = [];
|
public array $entitlementSummary = [];
|
||||||
|
|
||||||
/**
|
|
||||||
* @var array<string, mixed>
|
|
||||||
*/
|
|
||||||
public array $commercialLifecycleSummary = [];
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Per-domain "last modified" metadata: domain => {user_name, updated_at}.
|
* Per-domain "last modified" metadata: domain => {user_name, updated_at}.
|
||||||
*
|
*
|
||||||
@ -237,51 +227,6 @@ public function content(Schema $schema): Schema
|
|||||||
->helperText(fn (): string => $this->localeDefaultHelperText())
|
->helperText(fn (): string => $this->localeDefaultHelperText())
|
||||||
->hintAction($this->makeResetAction('localization_default_locale')),
|
->hintAction($this->makeResetAction('localization_default_locale')),
|
||||||
]),
|
]),
|
||||||
Section::make('Commercial posture')
|
|
||||||
->description('Read-only subscription-backed or fallback-backed commercial posture for this workspace.')
|
|
||||||
->columns(2)
|
|
||||||
->schema([
|
|
||||||
Placeholder::make('commercial_posture_source')
|
|
||||||
->label('Commercial source')
|
|
||||||
->content(fn (): string => $this->commercialPostureSourceText()),
|
|
||||||
Placeholder::make('commercial_posture_state')
|
|
||||||
->label('Commercial state')
|
|
||||||
->content(fn (): string => $this->commercialPostureStateText()),
|
|
||||||
Placeholder::make('commercial_posture_timing')
|
|
||||||
->label('Commercial timing')
|
|
||||||
->content(fn (): string => $this->commercialPostureTimingText()),
|
|
||||||
Placeholder::make('commercial_posture_reason')
|
|
||||||
->label('Explanation')
|
|
||||||
->content(fn (): string => $this->commercialPostureReasonText())
|
|
||||||
->columnSpanFull(),
|
|
||||||
]),
|
|
||||||
Section::make('Workspace lifecycle')
|
|
||||||
->description('Read-only workspace closure posture. Closed workspaces keep history visible but block new tenant and workspace mutations.')
|
|
||||||
->columns(2)
|
|
||||||
->schema([
|
|
||||||
Placeholder::make('workspace_closure_posture')
|
|
||||||
->label('Lifecycle')
|
|
||||||
->content(fn (): string => $this->workspace->isClosed() ? 'Closed' : 'Open'),
|
|
||||||
Placeholder::make('workspace_closed_at')
|
|
||||||
->label('Closed at')
|
|
||||||
->content(fn (): string => $this->workspace->closed_at?->toDayDateTimeString() ?? 'Not closed'),
|
|
||||||
Placeholder::make('workspace_closure_reason')
|
|
||||||
->label('Closure reason')
|
|
||||||
->content(fn (): string => $this->workspace->closureReason() ?? 'Not closed')
|
|
||||||
->columnSpanFull(),
|
|
||||||
]),
|
|
||||||
Section::make('Support access approval')
|
|
||||||
->description('Review current support-access posture and decide pending workspace recovery requests.')
|
|
||||||
->columns(2)
|
|
||||||
->afterHeader(fn (): array => $this->supportAccessApprovalActions())
|
|
||||||
->schema([
|
|
||||||
Placeholder::make('support_access_posture')
|
|
||||||
->label('Current support access')
|
|
||||||
->content(fn (): string => $this->supportAccessPostureText()),
|
|
||||||
Placeholder::make('support_access_pending_recovery')
|
|
||||||
->label('Pending recovery requests')
|
|
||||||
->content(fn (): string => $this->pendingSupportAccessRequestsText()),
|
|
||||||
]),
|
|
||||||
Section::make('Workspace entitlements')
|
Section::make('Workspace entitlements')
|
||||||
->description($this->sectionDescription('entitlements', 'Select a plan profile and optional first-slice overrides for onboarding activation and review pack generation.'))
|
->description($this->sectionDescription('entitlements', 'Select a plan profile and optional first-slice overrides for onboarding activation and review pack generation.'))
|
||||||
->columns(2)
|
->columns(2)
|
||||||
@ -708,7 +653,6 @@ private function loadFormState(): void
|
|||||||
$this->workspaceOverrides = $workspaceOverrides;
|
$this->workspaceOverrides = $workspaceOverrides;
|
||||||
$this->resolvedSettings = $resolvedSettings;
|
$this->resolvedSettings = $resolvedSettings;
|
||||||
$this->entitlementSummary = app(WorkspaceEntitlementResolver::class)->summary($this->workspace);
|
$this->entitlementSummary = app(WorkspaceEntitlementResolver::class)->summary($this->workspace);
|
||||||
$this->commercialLifecycleSummary = app(WorkspaceCommercialLifecycleResolver::class)->summary($this->workspace);
|
|
||||||
|
|
||||||
$this->loadDomainLastModified();
|
$this->loadDomainLastModified();
|
||||||
}
|
}
|
||||||
@ -753,125 +697,6 @@ private function loadDomainLastModified(): void
|
|||||||
$this->domainLastModified = $domainInfo;
|
$this->domainLastModified = $domainInfo;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<Action>
|
|
||||||
*/
|
|
||||||
private function supportAccessApprovalActions(): array
|
|
||||||
{
|
|
||||||
$grant = $this->currentPendingSupportAccessGrant();
|
|
||||||
|
|
||||||
if (! $grant instanceof SupportAccessGrant) {
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
return [
|
|
||||||
Action::make('approve_support_access')
|
|
||||||
->label('Approve recovery access')
|
|
||||||
->color('success')
|
|
||||||
->requiresConfirmation()
|
|
||||||
->modalHeading('Approve recovery support access')
|
|
||||||
->modalDescription('This activates a time-limited workspace recovery support grant. Owner repair will still require active break-glass mode.')
|
|
||||||
->visible(fn (): bool => $this->currentUserCanApproveSupportAccess())
|
|
||||||
->action(function (): void {
|
|
||||||
$this->approveSupportAccess();
|
|
||||||
}),
|
|
||||||
Action::make('deny_support_access')
|
|
||||||
->label('Deny request')
|
|
||||||
->color('danger')
|
|
||||||
->requiresConfirmation()
|
|
||||||
->modalHeading('Deny recovery support access')
|
|
||||||
->modalDescription('This denies the pending recovery support request and keeps owner repair blocked for this workspace.')
|
|
||||||
->visible(fn (): bool => $this->currentUserCanApproveSupportAccess())
|
|
||||||
->action(function (): void {
|
|
||||||
$this->denySupportAccess();
|
|
||||||
}),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
public function approveSupportAccess(): void
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
$grant = $this->currentPendingSupportAccessGrant();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $grant instanceof SupportAccessGrant) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
app(SupportAccessGrantManager::class)->approve($grant, $user);
|
|
||||||
$this->loadFormState();
|
|
||||||
|
|
||||||
Notification::make()
|
|
||||||
->title('Recovery access approved')
|
|
||||||
->success()
|
|
||||||
->send();
|
|
||||||
}
|
|
||||||
|
|
||||||
public function denySupportAccess(): void
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
$grant = $this->currentPendingSupportAccessGrant();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $grant instanceof SupportAccessGrant) {
|
|
||||||
abort(404);
|
|
||||||
}
|
|
||||||
|
|
||||||
app(SupportAccessGrantManager::class)->deny($grant, $user);
|
|
||||||
$this->loadFormState();
|
|
||||||
|
|
||||||
Notification::make()
|
|
||||||
->title('Recovery access denied')
|
|
||||||
->success()
|
|
||||||
->send();
|
|
||||||
}
|
|
||||||
|
|
||||||
private function supportAccessPostureText(): string
|
|
||||||
{
|
|
||||||
$summary = app(SupportAccessGrantResolver::class)->summaryFor($this->workspace);
|
|
||||||
|
|
||||||
if (($summary['grant_id'] ?? null) === null) {
|
|
||||||
return 'No active or pending support access is recorded for this workspace.';
|
|
||||||
}
|
|
||||||
|
|
||||||
$parts = [
|
|
||||||
(string) $summary['status_label'],
|
|
||||||
(string) $summary['scope_label'],
|
|
||||||
'requested by '.(string) $summary['requester_label'],
|
|
||||||
'TTL '.$summary['requested_ttl_label'],
|
|
||||||
];
|
|
||||||
|
|
||||||
if (is_string($summary['expires_label'] ?? null)) {
|
|
||||||
$parts[] = 'expires '.$summary['expires_label'];
|
|
||||||
}
|
|
||||||
|
|
||||||
return implode(' · ', array_filter($parts));
|
|
||||||
}
|
|
||||||
|
|
||||||
private function pendingSupportAccessRequestsText(): string
|
|
||||||
{
|
|
||||||
$requests = app(SupportAccessGrantResolver::class)->pendingRecoveryRequestsFor($this->workspace);
|
|
||||||
|
|
||||||
if ($requests->isEmpty()) {
|
|
||||||
return 'No workspace recovery request is waiting for owner approval.';
|
|
||||||
}
|
|
||||||
|
|
||||||
return $requests
|
|
||||||
->map(fn (SupportAccessGrant $grant): string => sprintf(
|
|
||||||
'#%d · %s · %s · %d minutes',
|
|
||||||
(int) $grant->getKey(),
|
|
||||||
$grant->requester?->name ?? $grant->requester?->email ?? 'Platform support',
|
|
||||||
(string) $grant->reason,
|
|
||||||
(int) $grant->ttl_minutes,
|
|
||||||
))
|
|
||||||
->implode("\n");
|
|
||||||
}
|
|
||||||
|
|
||||||
private function currentPendingSupportAccessGrant(): ?SupportAccessGrant
|
|
||||||
{
|
|
||||||
return app(SupportAccessGrantResolver::class)
|
|
||||||
->pendingRecoveryRequestsFor($this->workspace)
|
|
||||||
->first();
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Build a section description that appends "last modified" info when available.
|
* Build a section description that appends "last modified" info when available.
|
||||||
*/
|
*/
|
||||||
@ -1120,43 +945,6 @@ private function entitlementSourceLabel(array $decision): string
|
|||||||
return 'plan profile default';
|
return 'plan profile default';
|
||||||
}
|
}
|
||||||
|
|
||||||
private function commercialPostureSourceText(): string
|
|
||||||
{
|
|
||||||
return ($this->commercialLifecycleSummary['fallback_status'] ?? true) ? 'fallback-backed' : 'subscription-backed';
|
|
||||||
}
|
|
||||||
|
|
||||||
private function commercialPostureStateText(): string
|
|
||||||
{
|
|
||||||
return (string) ($this->commercialLifecycleSummary['subscription_state_label']
|
|
||||||
?? $this->commercialLifecycleSummary['state_label']
|
|
||||||
?? 'Active paid');
|
|
||||||
}
|
|
||||||
|
|
||||||
private function commercialPostureTimingText(): string
|
|
||||||
{
|
|
||||||
$label = $this->commercialLifecycleSummary['subscription_key_date_label'] ?? null;
|
|
||||||
$date = $this->commercialLifecycleSummary['subscription_key_date'] ?? null;
|
|
||||||
|
|
||||||
if (is_string($label) && $label !== '' && $date instanceof Carbon) {
|
|
||||||
return sprintf('%s: %s', $label, $date->toDayDateTimeString());
|
|
||||||
}
|
|
||||||
|
|
||||||
return 'No scheduled commercial date recorded.';
|
|
||||||
}
|
|
||||||
|
|
||||||
private function commercialPostureReasonText(): string
|
|
||||||
{
|
|
||||||
$reason = $this->commercialLifecycleSummary['rationale'] ?? null;
|
|
||||||
|
|
||||||
if (is_string($reason) && $reason !== '') {
|
|
||||||
return $reason;
|
|
||||||
}
|
|
||||||
|
|
||||||
return ($this->commercialLifecycleSummary['fallback_status'] ?? true)
|
|
||||||
? 'No current subscription record is stored. The workspace is using fallback lifecycle truth.'
|
|
||||||
: 'No explicit commercial explanation recorded.';
|
|
||||||
}
|
|
||||||
|
|
||||||
private function helperTextFor(string $field): string
|
private function helperTextFor(string $field): string
|
||||||
{
|
{
|
||||||
$resolved = $this->resolvedSettings[$field] ?? null;
|
$resolved = $this->resolvedSettings[$field] ?? null;
|
||||||
@ -1755,27 +1543,9 @@ private function currentUserCanManage(): bool
|
|||||||
$resolver = app(WorkspaceCapabilityResolver::class);
|
$resolver = app(WorkspaceCapabilityResolver::class);
|
||||||
|
|
||||||
return $resolver->isMember($user, $this->workspace)
|
return $resolver->isMember($user, $this->workspace)
|
||||||
&& ! $this->workspace->isClosed()
|
|
||||||
&& $resolver->can($user, $this->workspace, Capabilities::WORKSPACE_SETTINGS_MANAGE);
|
&& $resolver->can($user, $this->workspace, Capabilities::WORKSPACE_SETTINGS_MANAGE);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentUserCanApproveSupportAccess(): bool
|
|
||||||
{
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $user instanceof User || ! $this->workspace instanceof Workspace) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
/** @var WorkspaceCapabilityResolver $resolver */
|
|
||||||
$resolver = app(WorkspaceCapabilityResolver::class);
|
|
||||||
|
|
||||||
return $resolver->isMember($user, $this->workspace)
|
|
||||||
&& ! $this->workspace->isClosed()
|
|
||||||
&& $resolver->can($user, $this->workspace, Capabilities::WORKSPACE_SETTINGS_MANAGE)
|
|
||||||
&& $resolver->getRole($user, $this->workspace) === WorkspaceRole::Owner;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function authorizeWorkspaceView(User $user): void
|
private function authorizeWorkspaceView(User $user): void
|
||||||
{
|
{
|
||||||
/** @var WorkspaceCapabilityResolver $resolver */
|
/** @var WorkspaceCapabilityResolver $resolver */
|
||||||
@ -1802,11 +1572,5 @@ private function authorizeWorkspaceManage(User $user): void
|
|||||||
if (! $resolver->can($user, $this->workspace, Capabilities::WORKSPACE_SETTINGS_MANAGE)) {
|
if (! $resolver->can($user, $this->workspace, Capabilities::WORKSPACE_SETTINGS_MANAGE)) {
|
||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($this->workspace->isClosed()) {
|
|
||||||
throw ValidationException::withMessages([
|
|
||||||
'workspace' => 'This workspace is closed. Reopen it before changing workspace settings.',
|
|
||||||
]);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -2,11 +2,12 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages\Tenancy;
|
namespace App\Filament\Pages\Tenancy;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\WorkspaceMembership;
|
use App\Models\WorkspaceMembership;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Auth\ManagedEnvironmentMembershipManager;
|
use App\Services\Intune\AuditLogger;
|
||||||
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
use App\Support\Workspaces\WorkspaceContext;
|
||||||
use Filament\Forms;
|
use Filament\Forms;
|
||||||
use Filament\Pages\Tenancy\RegisterTenant as BaseRegisterTenant;
|
use Filament\Pages\Tenancy\RegisterTenant as BaseRegisterTenant;
|
||||||
@ -20,14 +21,6 @@ public static function getLabel(): string
|
|||||||
return 'Register tenant';
|
return 'Register tenant';
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
|
||||||
* @return class-string<Model>
|
|
||||||
*/
|
|
||||||
public function getModel(): string
|
|
||||||
{
|
|
||||||
return ManagedEnvironment::class;
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function canView(): bool
|
public static function canView(): bool
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
@ -50,6 +43,21 @@ public static function canView(): bool
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
$tenantIds = $user->tenants()->withTrashed()->pluck('tenants.id');
|
||||||
|
|
||||||
|
if ($tenantIds->isEmpty()) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/** @var CapabilityResolver $resolver */
|
||||||
|
$resolver = app(CapabilityResolver::class);
|
||||||
|
|
||||||
|
foreach (Tenant::query()->whereIn('id', $tenantIds)->cursor() as $tenant) {
|
||||||
|
if ($resolver->can($user, $tenant, Capabilities::TENANT_MANAGE)) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -69,8 +77,8 @@ public function form(Schema $schema): Schema
|
|||||||
])
|
])
|
||||||
->default('other')
|
->default('other')
|
||||||
->required(),
|
->required(),
|
||||||
Forms\Components\TextInput::make('managed_environment_id')
|
Forms\Components\TextInput::make('tenant_id')
|
||||||
->label('ManagedEnvironment ID (GUID)')
|
->label('Tenant ID (GUID)')
|
||||||
->required()
|
->required()
|
||||||
->maxLength(255)
|
->maxLength(255)
|
||||||
->unique(ignoreRecord: true),
|
->unique(ignoreRecord: true),
|
||||||
@ -96,22 +104,36 @@ protected function handleRegistration(array $data): Model
|
|||||||
$data['workspace_id'] = $workspaceId;
|
$data['workspace_id'] = $workspaceId;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::create($data);
|
$tenant = Tenant::create($data);
|
||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if ($user instanceof User && is_int($workspaceId)) {
|
if ($user instanceof User) {
|
||||||
$explicitScopes = app(ManagedEnvironmentAccessScopeResolver::class)
|
$user->tenants()->syncWithoutDetaching([
|
||||||
->allowedManagedEnvironmentIdsForWorkspace($user, $workspaceId);
|
$tenant->getKey() => [
|
||||||
|
'role' => 'owner',
|
||||||
|
'source' => 'manual',
|
||||||
|
'created_by_user_id' => $user->getKey(),
|
||||||
|
],
|
||||||
|
]);
|
||||||
|
|
||||||
if (is_array($explicitScopes)) {
|
app(AuditLogger::class)->log(
|
||||||
app(ManagedEnvironmentMembershipManager::class)->grantScope(
|
tenant: $tenant,
|
||||||
tenant: $tenant,
|
action: 'tenant_membership.bootstrap_assign',
|
||||||
actor: $user,
|
context: [
|
||||||
member: $user,
|
'metadata' => [
|
||||||
source: 'manual',
|
'user_id' => (int) $user->getKey(),
|
||||||
);
|
'role' => 'owner',
|
||||||
}
|
'source' => 'manual',
|
||||||
|
],
|
||||||
|
],
|
||||||
|
actorId: (int) $user->getKey(),
|
||||||
|
actorEmail: $user->email,
|
||||||
|
actorName: $user->name,
|
||||||
|
status: 'success',
|
||||||
|
resourceType: 'tenant',
|
||||||
|
resourceId: (string) $tenant->getKey(),
|
||||||
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
return $tenant;
|
return $tenant;
|
||||||
|
|||||||
@ -4,27 +4,26 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages;
|
namespace App\Filament\Pages;
|
||||||
|
|
||||||
use App\Filament\Pages\Governance\GovernanceInbox;
|
use App\Filament\Widgets\Tenant\TenantTriageArrivalContinuity;
|
||||||
use App\Filament\Widgets\ManagedEnvironment\ManagedEnvironmentTriageArrivalContinuity;
|
use App\Filament\Widgets\Dashboard\BaselineCompareNow;
|
||||||
use App\Filament\Widgets\Dashboard\EnvironmentDashboardContextChips;
|
use App\Filament\Widgets\Dashboard\DashboardKpis;
|
||||||
use App\Filament\Widgets\Dashboard\EnvironmentDashboardOverview;
|
use App\Filament\Widgets\Dashboard\NeedsAttention;
|
||||||
|
use App\Filament\Widgets\Dashboard\RecentDriftFindings;
|
||||||
|
use App\Filament\Widgets\Dashboard\RecentOperations;
|
||||||
|
use App\Filament\Widgets\Dashboard\RecoveryReadiness;
|
||||||
use App\Models\SupportRequest;
|
use App\Models\SupportRequest;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\ProductTelemetry\ProductTelemetryRecorder;
|
use App\Support\ProductTelemetry\ProductTelemetryRecorder;
|
||||||
use App\Support\ProductTelemetry\ProductUsageEventCatalog;
|
use App\Support\ProductTelemetry\ProductUsageEventCatalog;
|
||||||
use App\Support\Rbac\UiEnforcement;
|
use App\Support\Rbac\UiEnforcement;
|
||||||
use App\Support\SupportDiagnostics\SupportDiagnosticBundleBuilder;
|
use App\Support\SupportDiagnostics\SupportDiagnosticBundleBuilder;
|
||||||
use App\Support\SupportRequests\ExternalSupportDeskHandoffService;
|
use App\Support\SupportRequests\ExternalSupportDeskHandoffService;
|
||||||
use App\Support\SupportRequests\SupportRequestSubmissionService;
|
use App\Support\SupportRequests\SupportRequestSubmissionService;
|
||||||
use App\Support\EnvironmentDashboard\EnvironmentDashboardSummary;
|
|
||||||
use App\Support\EnvironmentDashboard\EnvironmentDashboardSummaryBuilder;
|
|
||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Actions\ActionGroup;
|
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Filament\Forms\Components\Placeholder;
|
use Filament\Forms\Components\Placeholder;
|
||||||
use Filament\Forms\Components\Select;
|
use Filament\Forms\Components\Select;
|
||||||
@ -33,57 +32,21 @@
|
|||||||
use Filament\Notifications\Notification;
|
use Filament\Notifications\Notification;
|
||||||
use Filament\Pages\Dashboard;
|
use Filament\Pages\Dashboard;
|
||||||
use Filament\Schemas\Components\Utilities\Get;
|
use Filament\Schemas\Components\Utilities\Get;
|
||||||
use Filament\Support\Enums\Width;
|
|
||||||
use Filament\Widgets\Widget;
|
use Filament\Widgets\Widget;
|
||||||
use Filament\Widgets\WidgetConfiguration;
|
use Filament\Widgets\WidgetConfiguration;
|
||||||
use Illuminate\Contracts\Support\Htmlable;
|
|
||||||
use Illuminate\Contracts\View\View;
|
use Illuminate\Contracts\View\View;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
use Illuminate\Support\HtmlString;
|
|
||||||
|
|
||||||
use App\Filament\Widgets\Dashboard\DashboardKpis;
|
class TenantDashboard extends Dashboard
|
||||||
|
|
||||||
class EnvironmentDashboard extends Dashboard
|
|
||||||
{
|
{
|
||||||
protected Width|string|null $maxContentWidth = Width::Full;
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var list<string>
|
* @var list<string>
|
||||||
*/
|
*/
|
||||||
public array $supportDiagnosticsAuditKeys = [];
|
public array $supportDiagnosticsAuditKeys = [];
|
||||||
|
|
||||||
private ?EnvironmentDashboardSummary $dashboardSummary = null;
|
public function getTitle(): string
|
||||||
|
|
||||||
public static function getNavigationLabel(): string
|
|
||||||
{
|
{
|
||||||
return __('localization.dashboard.environment_title');
|
return __('localization.dashboard.tenant_title');
|
||||||
}
|
|
||||||
|
|
||||||
public function getTitle(): string | Htmlable
|
|
||||||
{
|
|
||||||
$tenant = Filament::getTenant();
|
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
|
||||||
return __('localization.dashboard.environment_title');
|
|
||||||
}
|
|
||||||
|
|
||||||
$summary = $this->dashboardSummary();
|
|
||||||
|
|
||||||
if (! $summary instanceof EnvironmentDashboardSummary) {
|
|
||||||
return (string) $tenant->name;
|
|
||||||
}
|
|
||||||
|
|
||||||
return new HtmlString(sprintf(
|
|
||||||
'<span class="inline-flex flex-wrap items-center gap-3" data-testid="tenant-dashboard-heading"><span>%s</span><span data-testid="tenant-dashboard-posture-pill" class="%s">%s</span></span>',
|
|
||||||
e((string) $tenant->name),
|
|
||||||
e($this->posturePillClasses((string) ($summary->posture['tone'] ?? 'gray'))),
|
|
||||||
e((string) ($summary->posture['status'] ?? '')),
|
|
||||||
));
|
|
||||||
}
|
|
||||||
|
|
||||||
public function getSubheading(): string | Htmlable | null
|
|
||||||
{
|
|
||||||
return __('localization.dashboard.overview.page_subheading');
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -91,34 +54,7 @@ public function getSubheading(): string | Htmlable | null
|
|||||||
*/
|
*/
|
||||||
public static function getUrl(array $parameters = [], bool $isAbsolute = true, ?string $panel = null, ?Model $tenant = null, bool $shouldGuessMissingParameters = false): string
|
public static function getUrl(array $parameters = [], bool $isAbsolute = true, ?string $panel = null, ?Model $tenant = null, bool $shouldGuessMissingParameters = false): string
|
||||||
{
|
{
|
||||||
$resolvedTenant = $tenant instanceof ManagedEnvironment
|
return parent::getUrl($parameters, $isAbsolute, $panel ?? 'tenant', $tenant, $shouldGuessMissingParameters);
|
||||||
? $tenant
|
|
||||||
: (($parameters['tenant'] ?? $parameters['environment'] ?? null) instanceof ManagedEnvironment
|
|
||||||
? ($parameters['tenant'] ?? $parameters['environment'])
|
|
||||||
: null);
|
|
||||||
|
|
||||||
if (! $resolvedTenant instanceof ManagedEnvironment) {
|
|
||||||
return url('/admin');
|
|
||||||
}
|
|
||||||
|
|
||||||
$query = array_diff_key($parameters, array_flip(['tenant', 'environment', 'workspace']));
|
|
||||||
|
|
||||||
return ManagedEnvironmentLinks::viewUrl($resolvedTenant, $query);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<class-string<Widget> | WidgetConfiguration>
|
|
||||||
*/
|
|
||||||
protected function getHeaderWidgets(): array
|
|
||||||
{
|
|
||||||
return [
|
|
||||||
EnvironmentDashboardContextChips::class,
|
|
||||||
];
|
|
||||||
}
|
|
||||||
|
|
||||||
public function getHeaderWidgetsColumns(): int|array
|
|
||||||
{
|
|
||||||
return 1;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -127,15 +63,19 @@ public function getHeaderWidgetsColumns(): int|array
|
|||||||
public function getWidgets(): array
|
public function getWidgets(): array
|
||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
ManagedEnvironmentTriageArrivalContinuity::class,
|
TenantTriageArrivalContinuity::class,
|
||||||
|
RecoveryReadiness::class,
|
||||||
DashboardKpis::class,
|
DashboardKpis::class,
|
||||||
EnvironmentDashboardOverview::class,
|
NeedsAttention::class,
|
||||||
|
BaselineCompareNow::class,
|
||||||
|
RecentDriftFindings::class,
|
||||||
|
RecentOperations::class,
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
public function getColumns(): int|array
|
public function getColumns(): int|array
|
||||||
{
|
{
|
||||||
return ['default' => 1, 'xl' => 12];
|
return 2;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -143,193 +83,10 @@ public function getColumns(): int|array
|
|||||||
*/
|
*/
|
||||||
protected function getHeaderActions(): array
|
protected function getHeaderActions(): array
|
||||||
{
|
{
|
||||||
$actions = [];
|
return [
|
||||||
|
|
||||||
if ($primaryAction = $this->primaryFollowUpHeaderAction()) {
|
|
||||||
$actions[] = $primaryAction;
|
|
||||||
}
|
|
||||||
|
|
||||||
$moreActions = array_values(array_filter([
|
|
||||||
$this->secondaryHeaderAction(),
|
|
||||||
$this->requestSupportAction(),
|
$this->requestSupportAction(),
|
||||||
$this->openSupportDiagnosticsAction(),
|
$this->openSupportDiagnosticsAction(),
|
||||||
]));
|
];
|
||||||
|
|
||||||
if ($moreActions !== []) {
|
|
||||||
$actions[] = ActionGroup::make($moreActions)
|
|
||||||
->label(__('localization.dashboard.more_actions'))
|
|
||||||
->icon('heroicon-o-ellipsis-horizontal')
|
|
||||||
->color('gray');
|
|
||||||
}
|
|
||||||
|
|
||||||
return $actions;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function primaryFollowUpHeaderAction(): ?Action
|
|
||||||
{
|
|
||||||
$payload = $this->primaryFollowUpHeaderPayload();
|
|
||||||
|
|
||||||
if (! is_array($payload)) {
|
|
||||||
return $this->governanceInboxHeaderAction();
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->summaryHeaderAction(
|
|
||||||
name: 'primaryFollowUp',
|
|
||||||
payload: $payload,
|
|
||||||
color: 'primary',
|
|
||||||
icon: 'heroicon-o-bolt',
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
private function secondaryHeaderAction(): ?Action
|
|
||||||
{
|
|
||||||
$payload = $this->secondaryHeaderPayload();
|
|
||||||
|
|
||||||
if (! is_array($payload)) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $this->summaryHeaderAction(
|
|
||||||
name: 'reviewOutput',
|
|
||||||
payload: $payload,
|
|
||||||
color: 'gray',
|
|
||||||
icon: 'heroicon-o-document-duplicate',
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>|null
|
|
||||||
*/
|
|
||||||
private function primaryFollowUpHeaderPayload(): ?array
|
|
||||||
{
|
|
||||||
$summary = $this->dashboardSummary();
|
|
||||||
|
|
||||||
if (! $summary instanceof EnvironmentDashboardSummary) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$payload = $summary->recommendedActions[0] ?? null;
|
|
||||||
|
|
||||||
return is_array($payload) && filled($payload['actionLabel'] ?? null)
|
|
||||||
? $payload
|
|
||||||
: null;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>|null
|
|
||||||
*/
|
|
||||||
private function secondaryHeaderPayload(): ?array
|
|
||||||
{
|
|
||||||
$summary = $this->dashboardSummary();
|
|
||||||
|
|
||||||
if (! $summary instanceof EnvironmentDashboardSummary) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$primaryPayload = $this->primaryFollowUpHeaderPayload();
|
|
||||||
|
|
||||||
foreach ($summary->readinessCards as $payload) {
|
|
||||||
if (! is_array($payload) || ! filled($payload['actionLabel'] ?? null)) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (! in_array($payload['key'] ?? null, ['customer_safe_output', 'current_review'], true)) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (
|
|
||||||
is_array($primaryPayload)
|
|
||||||
&& ($payload['actionLabel'] ?? null) === ($primaryPayload['actionLabel'] ?? null)
|
|
||||||
&& ($payload['actionUrl'] ?? null) === ($primaryPayload['actionUrl'] ?? null)
|
|
||||||
) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
return $payload;
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function governanceInboxHeaderAction(): ?Action
|
|
||||||
{
|
|
||||||
$tenant = Filament::getTenant();
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User || ! $user->canAccessTenant($tenant)) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
return Action::make('primaryFollowUp')
|
|
||||||
->label(__('localization.dashboard.overview.action_open_governance_inbox'))
|
|
||||||
->icon('heroicon-o-inbox-stack')
|
|
||||||
->color('primary')
|
|
||||||
->url(GovernanceInbox::getUrl(panel: 'admin').'?'.http_build_query([
|
|
||||||
'managed_environment_id' => (int) $tenant->getKey(),
|
|
||||||
]));
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @param array<string, mixed> $payload
|
|
||||||
*/
|
|
||||||
private function summaryHeaderAction(string $name, array $payload, string $color, string $icon): ?Action
|
|
||||||
{
|
|
||||||
$label = $payload['actionLabel'] ?? null;
|
|
||||||
$url = $payload['actionUrl'] ?? null;
|
|
||||||
$helperText = $payload['helperText'] ?? null;
|
|
||||||
|
|
||||||
if (! is_string($label) || $label === '') {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ((! is_string($url) || $url === '') && (! is_string($helperText) || $helperText === '')) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$action = Action::make($name)
|
|
||||||
->label($label)
|
|
||||||
->icon($icon)
|
|
||||||
->color($color);
|
|
||||||
|
|
||||||
if (is_string($url) && $url !== '') {
|
|
||||||
$action->url($url);
|
|
||||||
} else {
|
|
||||||
$action->disabled();
|
|
||||||
}
|
|
||||||
|
|
||||||
if (is_string($helperText) && $helperText !== '') {
|
|
||||||
$action->tooltip($helperText);
|
|
||||||
}
|
|
||||||
|
|
||||||
return $action;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function dashboardSummary(): ?EnvironmentDashboardSummary
|
|
||||||
{
|
|
||||||
if ($this->dashboardSummary instanceof EnvironmentDashboardSummary) {
|
|
||||||
return $this->dashboardSummary;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenant = Filament::getTenant();
|
|
||||||
$user = auth()->user();
|
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
$this->dashboardSummary = app(EnvironmentDashboardSummaryBuilder::class)->build($tenant, $user);
|
|
||||||
|
|
||||||
return $this->dashboardSummary;
|
|
||||||
}
|
|
||||||
|
|
||||||
private function posturePillClasses(string $tone): string
|
|
||||||
{
|
|
||||||
return match ($tone) {
|
|
||||||
'success' => 'inline-flex items-center rounded-full border border-success-200 bg-success-50 px-3 py-1 text-sm font-medium text-success-700 shadow-sm dark:border-success-800 dark:bg-success-500/10 dark:text-success-300',
|
|
||||||
'danger' => 'inline-flex items-center rounded-full border border-danger-200 bg-danger-50 px-3 py-1 text-sm font-medium text-danger-700 shadow-sm dark:border-danger-800 dark:bg-danger-500/10 dark:text-danger-300',
|
|
||||||
'warning' => 'inline-flex items-center rounded-full border border-warning-200 bg-warning-50 px-3 py-1 text-sm font-medium text-warning-700 shadow-sm dark:border-warning-800 dark:bg-warning-500/10 dark:text-warning-300',
|
|
||||||
default => 'inline-flex items-center rounded-full border border-gray-200 bg-white px-3 py-1 text-sm font-medium text-gray-700 shadow-sm dark:border-white/10 dark:bg-white/5 dark:text-gray-300',
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public function authorizeTenantSupportRequest(): void
|
public function authorizeTenantSupportRequest(): void
|
||||||
@ -487,7 +244,7 @@ private function auditTenantSupportDiagnosticsOpen(): void
|
|||||||
/**
|
/**
|
||||||
* @param array<string, mixed> $bundle
|
* @param array<string, mixed> $bundle
|
||||||
*/
|
*/
|
||||||
private function recordSupportDiagnosticsOpened(ManagedEnvironment $tenant, array $bundle, User $user): void
|
private function recordSupportDiagnosticsOpened(Tenant $tenant, array $bundle, User $user): void
|
||||||
{
|
{
|
||||||
$auditKey = 'tenant:'.$tenant->getKey();
|
$auditKey = 'tenant:'.$tenant->getKey();
|
||||||
|
|
||||||
@ -528,12 +285,12 @@ private function resolveDashboardActor(): User
|
|||||||
return $user;
|
return $user;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveCurrentTenantForCapability(string $capability): ManagedEnvironment
|
private function resolveCurrentTenantForCapability(string $capability): Tenant
|
||||||
{
|
{
|
||||||
$user = $this->resolveDashboardActor();
|
$user = $this->resolveDashboardActor();
|
||||||
$tenant = Filament::getTenant();
|
$tenant = Filament::getTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -555,7 +312,7 @@ private function tenantSupportRequestAttachmentSummary(): string
|
|||||||
$tenant = Filament::getTenant();
|
$tenant = Filament::getTenant();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return 'Only canonical redacted tenant context will be attached.';
|
return 'Only canonical redacted tenant context will be attached.';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -5,9 +5,10 @@
|
|||||||
namespace App\Filament\Pages;
|
namespace App\Filament\Pages;
|
||||||
|
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
|
use App\Models\TenantMembership;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\ManagedEnvironmentDiagnosticsService;
|
use App\Services\Auth\TenantDiagnosticsService;
|
||||||
use App\Services\Auth\ManagedEnvironmentMembershipManager;
|
use App\Services\Auth\TenantMembershipManager;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Rbac\UiEnforcement;
|
use App\Support\Rbac\UiEnforcement;
|
||||||
use App\Support\Rbac\UiTooltips;
|
use App\Support\Rbac\UiTooltips;
|
||||||
@ -17,7 +18,7 @@
|
|||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Pages\Page;
|
use Filament\Pages\Page;
|
||||||
|
|
||||||
class EnvironmentDiagnostics extends Page
|
class TenantDiagnostics extends Page
|
||||||
{
|
{
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
|
|
||||||
@ -25,13 +26,13 @@ class EnvironmentDiagnostics extends Page
|
|||||||
|
|
||||||
protected static ?string $slug = 'diagnostics';
|
protected static ?string $slug = 'diagnostics';
|
||||||
|
|
||||||
protected string $view = 'filament.pages.environment-diagnostics';
|
protected string $view = 'filament.pages.tenant-diagnostics';
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
return ActionSurfaceDeclaration::forPage(ActionSurfaceProfile::ListOnlyReadOnly)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header exposes capability-gated tenant repair actions when inconsistent membership state is detected.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header exposes capability-gated tenant repair actions when inconsistent membership state is detected.')
|
||||||
->exempt(ActionSurfaceSlot::InspectAffordance, 'ManagedEnvironment diagnostics is already the singleton diagnostic surface for the active tenant.')
|
->exempt(ActionSurfaceSlot::InspectAffordance, 'Tenant diagnostics is already the singleton diagnostic surface for the active tenant.')
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The diagnostics page does not render row-level secondary actions.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'The diagnostics page does not render row-level secondary actions.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The diagnostics page does not expose bulk actions.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'The diagnostics page does not expose bulk actions.')
|
||||||
->exempt(ActionSurfaceSlot::ListEmptyState, 'Diagnostics content is always rendered instead of a list-style empty state.');
|
->exempt(ActionSurfaceSlot::ListEmptyState, 'Diagnostics content is always rendered instead of a list-style empty state.');
|
||||||
@ -44,14 +45,19 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
public function mount(): void
|
public function mount(): void
|
||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanelOrFail();
|
$tenant = static::resolveTenantContextForCurrentPanelOrFail();
|
||||||
$this->missingOwner = app(ManagedEnvironmentDiagnosticsService::class)->tenantHasNoOwners($tenant);
|
$tenantId = (int) $tenant->getKey();
|
||||||
|
|
||||||
|
$this->missingOwner = ! TenantMembership::query()
|
||||||
|
->where('tenant_id', $tenantId)
|
||||||
|
->where('role', 'owner')
|
||||||
|
->exists();
|
||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
if (! $user instanceof User) {
|
if (! $user instanceof User) {
|
||||||
abort(403, 'Not allowed');
|
abort(403, 'Not allowed');
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->hasDuplicateMembershipsForCurrentUser = app(ManagedEnvironmentDiagnosticsService::class)
|
$this->hasDuplicateMembershipsForCurrentUser = app(TenantDiagnosticsService::class)
|
||||||
->userHasDuplicateMemberships($tenant, $user);
|
->userHasDuplicateMemberships($tenant, $user);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -75,7 +81,7 @@ protected function getHeaderActions(): array
|
|||||||
|
|
||||||
UiEnforcement::forAction(
|
UiEnforcement::forAction(
|
||||||
Action::make('mergeDuplicateMemberships')
|
Action::make('mergeDuplicateMemberships')
|
||||||
->label('Merge duplicate access scopes')
|
->label('Merge duplicate memberships')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->action(fn () => $this->mergeDuplicateMemberships()),
|
->action(fn () => $this->mergeDuplicateMemberships()),
|
||||||
)
|
)
|
||||||
@ -96,7 +102,7 @@ public function bootstrapOwner(): void
|
|||||||
abort(403, 'Not allowed');
|
abort(403, 'Not allowed');
|
||||||
}
|
}
|
||||||
|
|
||||||
app(ManagedEnvironmentMembershipManager::class)->grantScope($tenant, $user, $user, sourceRef: 'diagnostic');
|
app(TenantMembershipManager::class)->bootstrapRecover($tenant, $user, $user);
|
||||||
|
|
||||||
$this->mount();
|
$this->mount();
|
||||||
}
|
}
|
||||||
@ -110,7 +116,7 @@ public function mergeDuplicateMemberships(): void
|
|||||||
abort(403, 'Not allowed');
|
abort(403, 'Not allowed');
|
||||||
}
|
}
|
||||||
|
|
||||||
app(ManagedEnvironmentDiagnosticsService::class)->mergeDuplicateMembershipsForUser($tenant, $user, $user);
|
app(TenantDiagnosticsService::class)->mergeDuplicateMembershipsForUser($tenant, $user, $user);
|
||||||
|
|
||||||
$this->mount();
|
$this->mount();
|
||||||
}
|
}
|
||||||
@ -4,14 +4,15 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages;
|
namespace App\Filament\Pages;
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Filament\Resources\ProviderConnectionResource;
|
||||||
|
use App\Filament\Resources\TenantResource;
|
||||||
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\WorkspaceMembership;
|
use App\Models\WorkspaceMembership;
|
||||||
use App\Services\Intune\ManagedEnvironmentRequiredPermissionsViewModelBuilder;
|
use App\Services\Intune\TenantRequiredPermissionsViewModelBuilder;
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
||||||
@ -29,7 +30,7 @@
|
|||||||
use Livewire\Attributes\Locked;
|
use Livewire\Attributes\Locked;
|
||||||
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
|
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
|
||||||
|
|
||||||
class EnvironmentRequiredPermissions extends Page implements HasTable
|
class TenantRequiredPermissions extends Page implements HasTable
|
||||||
{
|
{
|
||||||
use InteractsWithTable;
|
use InteractsWithTable;
|
||||||
|
|
||||||
@ -37,11 +38,11 @@ class EnvironmentRequiredPermissions extends Page implements HasTable
|
|||||||
|
|
||||||
protected static bool $shouldRegisterNavigation = false;
|
protected static bool $shouldRegisterNavigation = false;
|
||||||
|
|
||||||
protected static ?string $slug = 'workspaces/{workspace}/environments/{environment}/required-permissions';
|
protected static ?string $slug = 'tenants/{tenant}/required-permissions';
|
||||||
|
|
||||||
protected static ?string $title = 'Required permissions';
|
protected static ?string $title = 'Required permissions';
|
||||||
|
|
||||||
protected string $view = 'filament.pages.environment-required-permissions';
|
protected string $view = 'filament.pages.tenant-required-permissions';
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
@ -68,16 +69,16 @@ public static function canAccess(): bool
|
|||||||
return static::hasScopedTenantAccess(static::resolveScopedTenant());
|
return static::hasScopedTenantAccess(static::resolveScopedTenant());
|
||||||
}
|
}
|
||||||
|
|
||||||
public function currentTenant(): ?ManagedEnvironment
|
public function currentTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
return $this->trustedScopedTenant();
|
return $this->trustedScopedTenant();
|
||||||
}
|
}
|
||||||
|
|
||||||
public function mount(ManagedEnvironment|string|null $environment = null): void
|
public function mount(Tenant|string|null $tenant = null): void
|
||||||
{
|
{
|
||||||
$tenant = static::resolveScopedTenant($environment);
|
$tenant = static::resolveScopedTenant($tenant);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! static::hasScopedTenantAccess($tenant)) {
|
if (! $tenant instanceof Tenant || ! static::hasScopedTenantAccess($tenant)) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -151,10 +152,10 @@ public function table(Table $table): Table
|
|||||||
TextColumn::make('status')
|
TextColumn::make('status')
|
||||||
->label('Status')
|
->label('Status')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::ManagedEnvironmentPermissionStatus))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::TenantPermissionStatus))
|
||||||
->color(BadgeRenderer::color(BadgeDomain::ManagedEnvironmentPermissionStatus))
|
->color(BadgeRenderer::color(BadgeDomain::TenantPermissionStatus))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::ManagedEnvironmentPermissionStatus))
|
->icon(BadgeRenderer::icon(BadgeDomain::TenantPermissionStatus))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ManagedEnvironmentPermissionStatus))
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::TenantPermissionStatus))
|
||||||
->sortable(),
|
->sortable(),
|
||||||
TextColumn::make('features_label')
|
TextColumn::make('features_label')
|
||||||
->label('Features')
|
->label('Features')
|
||||||
@ -205,8 +206,8 @@ public function reRunVerificationUrl(): string
|
|||||||
{
|
{
|
||||||
$tenant = $this->trustedScopedTenant();
|
$tenant = $this->trustedScopedTenant();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return ManagedEnvironmentLinks::viewUrl($tenant);
|
return TenantResource::getUrl('view', ['record' => $tenant]);
|
||||||
}
|
}
|
||||||
|
|
||||||
return route('admin.onboarding');
|
return route('admin.onboarding');
|
||||||
@ -216,53 +217,53 @@ public function manageProviderConnectionUrl(): ?string
|
|||||||
{
|
{
|
||||||
$tenant = $this->trustedScopedTenant();
|
$tenant = $this->trustedScopedTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironmentLinks::providerConnectionsUrl($tenant);
|
return ProviderConnectionResource::getUrl('index', ['tenant' => $tenant], panel: 'admin');
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveScopedTenant(ManagedEnvironment|string|null $tenant = null): ?ManagedEnvironment
|
protected static function resolveScopedTenant(Tenant|string|null $tenant = null): ?Tenant
|
||||||
{
|
{
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (is_string($tenant) && $tenant !== '') {
|
if (is_string($tenant) && $tenant !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $tenant)
|
->where('external_id', $tenant)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
$routeTenant = request()->route('environment') ?? request()->route('tenant');
|
$routeTenant = request()->route('tenant');
|
||||||
|
|
||||||
if ($routeTenant instanceof ManagedEnvironment) {
|
if ($routeTenant instanceof Tenant) {
|
||||||
return $routeTenant;
|
return $routeTenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (is_string($routeTenant) && $routeTenant !== '') {
|
if (is_string($routeTenant) && $routeTenant !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $routeTenant)
|
->where('external_id', $routeTenant)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
$queryTenant = request()->query('tenant');
|
$queryTenant = request()->query('tenant');
|
||||||
|
|
||||||
if (is_string($queryTenant) && $queryTenant !== '') {
|
if (is_string($queryTenant) && $queryTenant !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $queryTenant)
|
->where('external_id', $queryTenant)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function hasScopedTenantAccess(?ManagedEnvironment $tenant): bool
|
private static function hasScopedTenantAccess(?Tenant $tenant): bool
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -284,7 +285,7 @@ private static function hasScopedTenantAccess(?ManagedEnvironment $tenant): bool
|
|||||||
return $user->canAccessTenant($tenant);
|
return $user->canAccessTenant($tenant);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function trustedScopedTenant(): ?ManagedEnvironment
|
private function trustedScopedTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
@ -302,7 +303,7 @@ private function trustedScopedTenant(): ?ManagedEnvironment
|
|||||||
|
|
||||||
$routeTenant = static::resolveScopedTenant();
|
$routeTenant = static::resolveScopedTenant();
|
||||||
|
|
||||||
if ($routeTenant instanceof ManagedEnvironment) {
|
if ($routeTenant instanceof Tenant) {
|
||||||
try {
|
try {
|
||||||
return $workspaceContext->ensureTenantAccessibleInCurrentWorkspace($routeTenant, $user, request());
|
return $workspaceContext->ensureTenantAccessibleInCurrentWorkspace($routeTenant, $user, request());
|
||||||
} catch (NotFoundHttpException) {
|
} catch (NotFoundHttpException) {
|
||||||
@ -314,9 +315,9 @@ private function trustedScopedTenant(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::query()->withTrashed()->whereKey($this->scopedTenantId)->first();
|
$tenant = Tenant::query()->withTrashed()->whereKey($this->scopedTenantId)->first();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -333,7 +334,7 @@ private function trustedScopedTenant(): ?ManagedEnvironment
|
|||||||
*/
|
*/
|
||||||
private function filterState(array $filters = [], ?string $search = null): array
|
private function filterState(array $filters = [], ?string $search = null): array
|
||||||
{
|
{
|
||||||
return ManagedEnvironmentRequiredPermissionsViewModelBuilder::normalizeFilterState([
|
return TenantRequiredPermissionsViewModelBuilder::normalizeFilterState([
|
||||||
'status' => $filters['status']['value'] ?? data_get($this->tableFilters, 'status.value'),
|
'status' => $filters['status']['value'] ?? data_get($this->tableFilters, 'status.value'),
|
||||||
'type' => $filters['type']['value'] ?? data_get($this->tableFilters, 'type.value'),
|
'type' => $filters['type']['value'] ?? data_get($this->tableFilters, 'type.value'),
|
||||||
'features' => $filters['features']['values'] ?? data_get($this->tableFilters, 'features.values', []),
|
'features' => $filters['features']['values'] ?? data_get($this->tableFilters, 'features.values', []),
|
||||||
@ -349,7 +350,7 @@ private function viewModelForState(array $state): array
|
|||||||
{
|
{
|
||||||
$tenant = $this->trustedScopedTenant();
|
$tenant = $this->trustedScopedTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -359,7 +360,7 @@ private function viewModelForState(array $state): array
|
|||||||
return $this->cachedViewModel;
|
return $this->cachedViewModel;
|
||||||
}
|
}
|
||||||
|
|
||||||
$builder = app(ManagedEnvironmentRequiredPermissionsViewModelBuilder::class);
|
$builder = app(TenantRequiredPermissionsViewModelBuilder::class);
|
||||||
|
|
||||||
$this->cachedViewModelStateKey = $stateKey ?: null;
|
$this->cachedViewModelStateKey = $stateKey ?: null;
|
||||||
$this->cachedViewModel = $builder->build($tenant, $state);
|
$this->cachedViewModel = $builder->build($tenant, $state);
|
||||||
@ -514,7 +515,7 @@ private function seedTableStateFromQuery(): void
|
|||||||
|
|
||||||
$queryFeatures = request()->query('features', []);
|
$queryFeatures = request()->query('features', []);
|
||||||
|
|
||||||
$state = ManagedEnvironmentRequiredPermissionsViewModelBuilder::normalizeFilterState([
|
$state = TenantRequiredPermissionsViewModelBuilder::normalizeFilterState([
|
||||||
'status' => request()->query('status', 'missing'),
|
'status' => request()->query('status', 'missing'),
|
||||||
'type' => request()->query('type', 'all'),
|
'type' => request()->query('type', 'all'),
|
||||||
'features' => is_array($queryFeatures) ? $queryFeatures : [],
|
'features' => is_array($queryFeatures) ? $queryFeatures : [],
|
||||||
File diff suppressed because it is too large
Load Diff
@ -4,20 +4,19 @@
|
|||||||
|
|
||||||
namespace App\Filament\Pages\Workspaces;
|
namespace App\Filament\Pages\Workspaces;
|
||||||
|
|
||||||
use App\Filament\Pages\ChooseEnvironment;
|
use App\Filament\Pages\ChooseTenant;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Filament\Resources\TenantResource;
|
||||||
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
|
||||||
use App\Services\Tenants\TenantOperabilityService;
|
use App\Services\Tenants\TenantOperabilityService;
|
||||||
use App\Support\Tenants\TenantInteractionLane;
|
use App\Support\Tenants\TenantInteractionLane;
|
||||||
use App\Support\Tenants\TenantOperabilityQuestion;
|
use App\Support\Tenants\TenantOperabilityQuestion;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
use App\Support\Workspaces\WorkspaceContext;
|
||||||
use Filament\Pages\Page;
|
use Filament\Pages\Page;
|
||||||
use Illuminate\Database\Eloquent\Collection;
|
use Illuminate\Database\Eloquent\Collection;
|
||||||
|
|
||||||
class ManagedEnvironmentsLanding extends Page
|
class ManagedTenantsLanding extends Page
|
||||||
{
|
{
|
||||||
protected static bool $shouldRegisterNavigation = false;
|
protected static bool $shouldRegisterNavigation = false;
|
||||||
|
|
||||||
@ -25,15 +24,12 @@ class ManagedEnvironmentsLanding extends Page
|
|||||||
|
|
||||||
protected static string $layout = 'filament-panels::components.layout.simple';
|
protected static string $layout = 'filament-panels::components.layout.simple';
|
||||||
|
|
||||||
protected string $view = 'filament.pages.workspaces.managed-environments-landing';
|
protected static ?string $title = 'Managed tenants';
|
||||||
|
|
||||||
|
protected string $view = 'filament.pages.workspaces.managed-tenants-landing';
|
||||||
|
|
||||||
public Workspace $workspace;
|
public Workspace $workspace;
|
||||||
|
|
||||||
public function getTitle(): string
|
|
||||||
{
|
|
||||||
return __('localization.shell.managed_environments_title');
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* The Filament simple layout renders the topbar by default, which includes
|
* The Filament simple layout renders the topbar by default, which includes
|
||||||
* lazy-loaded database notifications. On this workspace-scoped landing page,
|
* lazy-loaded database notifications. On this workspace-scoped landing page,
|
||||||
@ -52,33 +48,26 @@ public function mount(Workspace $workspace): void
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return Collection<int, ManagedEnvironment>
|
* @return Collection<int, Tenant>
|
||||||
*/
|
*/
|
||||||
public function getTenants(): Collection
|
public function getTenants(): Collection
|
||||||
{
|
{
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
if (! $user instanceof User) {
|
||||||
return ManagedEnvironment::query()->whereRaw('1 = 0')->get();
|
return Tenant::query()->whereRaw('1 = 0')->get();
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var CapabilityResolver $resolver */
|
$tenantIds = $user->tenantMemberships()
|
||||||
$resolver = app(CapabilityResolver::class);
|
->pluck('tenant_id');
|
||||||
|
|
||||||
$tenants = ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->withTrashed()
|
->withTrashed()
|
||||||
|
->whereIn('id', $tenantIds)
|
||||||
->where('workspace_id', $this->workspace->getKey())
|
->where('workspace_id', $this->workspace->getKey())
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->get();
|
->get()
|
||||||
|
->filter(function (Tenant $tenant) use ($user): bool {
|
||||||
$resolver->primeMemberships($user, $tenants->modelKeys());
|
|
||||||
|
|
||||||
return $tenants
|
|
||||||
->filter(function (ManagedEnvironment $tenant) use ($resolver, $user): bool {
|
|
||||||
if (! $resolver->isMember($user, $tenant)) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
return app(TenantOperabilityService::class)->outcomeFor(
|
return app(TenantOperabilityService::class)->outcomeFor(
|
||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
question: TenantOperabilityQuestion::AdministrativeDiscoverability,
|
question: TenantOperabilityQuestion::AdministrativeDiscoverability,
|
||||||
@ -90,9 +79,9 @@ public function getTenants(): Collection
|
|||||||
->values();
|
->values();
|
||||||
}
|
}
|
||||||
|
|
||||||
public function goToChooseEnvironment(): void
|
public function goToChooseTenant(): void
|
||||||
{
|
{
|
||||||
$this->redirect(route('admin.workspace.managed-environments.index', ['workspace' => $this->workspace]));
|
$this->redirect(ChooseTenant::getUrl());
|
||||||
}
|
}
|
||||||
|
|
||||||
public function openTenant(int $tenantId): void
|
public function openTenant(int $tenantId): void
|
||||||
@ -103,13 +92,13 @@ public function openTenant(int $tenantId): void
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->withTrashed()
|
->withTrashed()
|
||||||
->where('workspace_id', $this->workspace->getKey())
|
->where('workspace_id', $this->workspace->getKey())
|
||||||
->whereKey($tenantId)
|
->whereKey($tenantId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -117,8 +106,6 @@ public function openTenant(int $tenantId): void
|
|||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
$this->redirect(
|
$this->redirect(TenantResource::getUrl('view', ['record' => $tenant]));
|
||||||
ManagedEnvironmentLinks::viewUrl($tenant)
|
|
||||||
);
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -8,13 +8,13 @@
|
|||||||
use App\Filament\Resources\AlertDeliveryResource\Pages;
|
use App\Filament\Resources\AlertDeliveryResource\Pages;
|
||||||
use App\Models\AlertDelivery;
|
use App\Models\AlertDelivery;
|
||||||
use App\Models\AlertDestination;
|
use App\Models\AlertDestination;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\FilterOptionCatalog;
|
use App\Support\Filament\FilterOptionCatalog;
|
||||||
use App\Support\Filament\FilterPresets;
|
use App\Support\Filament\FilterPresets;
|
||||||
|
use App\Support\OperateHub\OperateHubShell;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
@ -114,8 +114,7 @@ public static function getEloquentQuery(): Builder
|
|||||||
{
|
{
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
$scopeResolver = app(ManagedEnvironmentAccessScopeResolver::class);
|
|
||||||
|
|
||||||
return parent::getEloquentQuery()
|
return parent::getEloquentQuery()
|
||||||
->with(['tenant', 'rule', 'destination'])
|
->with(['tenant', 'rule', 'destination'])
|
||||||
@ -133,24 +132,15 @@ public static function getEloquentQuery(): Builder
|
|||||||
)
|
)
|
||||||
->when(
|
->when(
|
||||||
$user instanceof User,
|
$user instanceof User,
|
||||||
fn (Builder $query): Builder => $query->where(function (Builder $q) use ($scopeResolver, $user, $workspaceId): void {
|
fn (Builder $query): Builder => $query->where(function (Builder $q) use ($user): void {
|
||||||
$q->whereNull('managed_environment_id')
|
$q->whereIn('tenant_id', $user->tenantMemberships()->select('tenant_id'))
|
||||||
->orWhere(function (Builder $scopedQuery) use ($scopeResolver, $user, $workspaceId): void {
|
->orWhereNull('tenant_id');
|
||||||
if (! is_int($workspaceId)) {
|
|
||||||
$scopedQuery->whereRaw('1 = 0');
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$scopeResolver->applyWorkspaceScopeToQuery(
|
|
||||||
query: $scopedQuery,
|
|
||||||
user: $user,
|
|
||||||
workspaceId: $workspaceId,
|
|
||||||
qualifiedEnvironmentColumn: 'alert_deliveries.managed_environment_id',
|
|
||||||
);
|
|
||||||
});
|
|
||||||
}),
|
}),
|
||||||
)
|
)
|
||||||
|
->when(
|
||||||
|
$activeTenant instanceof Tenant,
|
||||||
|
fn (Builder $query): Builder => $query->where('tenant_id', (int) $activeTenant->getKey()),
|
||||||
|
)
|
||||||
->latest('id');
|
->latest('id');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -179,7 +169,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->formatStateUsing(fn (?string $state): string => ucfirst((string) $state))
|
->formatStateUsing(fn (?string $state): string => ucfirst((string) $state))
|
||||||
->placeholder('—'),
|
->placeholder('—'),
|
||||||
TextEntry::make('tenant.name')
|
TextEntry::make('tenant.name')
|
||||||
->label('ManagedEnvironment'),
|
->label('Tenant'),
|
||||||
TextEntry::make('rule.name')
|
TextEntry::make('rule.name')
|
||||||
->label('Rule')
|
->label('Rule')
|
||||||
->placeholder('—'),
|
->placeholder('—'),
|
||||||
@ -240,7 +230,7 @@ public static function table(Table $table): Table
|
|||||||
->since()
|
->since()
|
||||||
->sortable(),
|
->sortable(),
|
||||||
TextColumn::make('tenant.name')
|
TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->searchable(),
|
->searchable(),
|
||||||
TextColumn::make('event_type')
|
TextColumn::make('event_type')
|
||||||
->label('Event')
|
->label('Event')
|
||||||
@ -267,9 +257,17 @@ public static function table(Table $table): Table
|
|||||||
->toggleable(isToggledHiddenByDefault: true),
|
->toggleable(isToggledHiddenByDefault: true),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('managed_environment_id')
|
SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(function (): array {
|
->options(function (): array {
|
||||||
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
|
if ($activeTenant instanceof Tenant) {
|
||||||
|
return [
|
||||||
|
(string) $activeTenant->getKey() => $activeTenant->getFilamentName(),
|
||||||
|
];
|
||||||
|
}
|
||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $user instanceof User) {
|
if (! $user instanceof User) {
|
||||||
@ -277,12 +275,26 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
})
|
})
|
||||||
->default(null)
|
->default(function (): ?string {
|
||||||
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
|
if (! $activeTenant instanceof Tenant) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
|
|
||||||
|
if ($workspaceId === null || (int) $activeTenant->workspace_id !== (int) $workspaceId) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
return (string) $activeTenant->getKey();
|
||||||
|
})
|
||||||
->searchable(),
|
->searchable(),
|
||||||
SelectFilter::make('status')
|
SelectFilter::make('status')
|
||||||
->options(FilterOptionCatalog::alertDeliveryStatuses()),
|
->options(FilterOptionCatalog::alertDeliveryStatuses()),
|
||||||
|
|||||||
@ -8,7 +8,7 @@
|
|||||||
use App\Filament\Resources\AlertRuleResource\Pages;
|
use App\Filament\Resources\AlertRuleResource\Pages;
|
||||||
use App\Models\AlertDestination;
|
use App\Models\AlertDestination;
|
||||||
use App\Models\AlertRule;
|
use App\Models\AlertRule;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Support\Audit\AuditActionId;
|
use App\Support\Audit\AuditActionId;
|
||||||
@ -434,9 +434,9 @@ private static function tenantOptions(): array
|
|||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('workspace_id', $workspaceId)
|
->where('workspace_id', $workspaceId)
|
||||||
->where('lifecycle_status', ManagedEnvironment::STATUS_ACTIVE)
|
->where('status', 'active')
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->pluck('name', 'id')
|
->pluck('name', 'id')
|
||||||
->all();
|
->all();
|
||||||
|
|||||||
@ -5,12 +5,11 @@
|
|||||||
use App\Exceptions\InvalidPolicyTypeException;
|
use App\Exceptions\InvalidPolicyTypeException;
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\BackupScheduleResource\Pages;
|
use App\Filament\Resources\BackupScheduleResource\Pages;
|
||||||
use App\Filament\Resources\BackupScheduleResource\RelationManagers\BackupScheduleOperationRunsRelationManager;
|
use App\Filament\Resources\BackupScheduleResource\RelationManagers\BackupScheduleOperationRunsRelationManager;
|
||||||
use App\Jobs\RunBackupScheduleJob;
|
use App\Jobs\RunBackupScheduleJob;
|
||||||
use App\Models\BackupSchedule;
|
use App\Models\BackupSchedule;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Rules\SupportedPolicyTypesRule;
|
use App\Rules\SupportedPolicyTypesRule;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
@ -24,7 +23,6 @@
|
|||||||
use App\Support\Badges\TagBadgeDomain;
|
use App\Support\Badges\TagBadgeDomain;
|
||||||
use App\Support\Badges\TagBadgeRenderer;
|
use App\Support\Badges\TagBadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\OperationRunOutcome;
|
use App\Support\OperationRunOutcome;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
@ -70,7 +68,6 @@ class BackupScheduleResource extends Resource
|
|||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = BackupSchedule::class;
|
protected static ?string $model = BackupSchedule::class;
|
||||||
|
|
||||||
@ -82,8 +79,11 @@ class BackupScheduleResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
@ -92,7 +92,7 @@ public static function canViewAny(): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -108,7 +108,7 @@ public static function canView(Model $record): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -120,7 +120,7 @@ public static function canView(Model $record): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
if ($record instanceof BackupSchedule) {
|
if ($record instanceof BackupSchedule) {
|
||||||
return (int) $record->managed_environment_id === (int) $tenant->getKey();
|
return (int) $record->tenant_id === (int) $tenant->getKey();
|
||||||
}
|
}
|
||||||
|
|
||||||
return true;
|
return true;
|
||||||
@ -132,7 +132,7 @@ public static function canCreate(): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -148,7 +148,7 @@ public static function canEdit(Model $record): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -164,7 +164,7 @@ public static function canDelete(Model $record): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -180,7 +180,7 @@ public static function canDeleteAny(): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -440,9 +440,9 @@ public static function table(Table $table): Table
|
|||||||
->action(function (BackupSchedule $record, HasTable $livewire): void {
|
->action(function (BackupSchedule $record, HasTable $livewire): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('No environment selected')
|
->title('No tenant selected')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -511,9 +511,9 @@ public static function table(Table $table): Table
|
|||||||
->action(function (BackupSchedule $record, HasTable $livewire): void {
|
->action(function (BackupSchedule $record, HasTable $livewire): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('No environment selected')
|
->title('No tenant selected')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -590,7 +590,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
$record->restore();
|
$record->restore();
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup_schedule.restored',
|
action: 'backup_schedule.restored',
|
||||||
@ -633,7 +633,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
$record->delete();
|
$record->delete();
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup_schedule.archived',
|
action: 'backup_schedule.archived',
|
||||||
@ -685,7 +685,7 @@ public static function table(Table $table): Table
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup_schedule.force_deleted',
|
action: 'backup_schedule.force_deleted',
|
||||||
@ -728,9 +728,9 @@ public static function table(Table $table): Table
|
|||||||
->action(function (Collection $records, HasTable $livewire): void {
|
->action(function (Collection $records, HasTable $livewire): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('No environment selected')
|
->title('No tenant selected')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -825,9 +825,9 @@ public static function table(Table $table): Table
|
|||||||
->action(function (Collection $records, HasTable $livewire): void {
|
->action(function (Collection $records, HasTable $livewire): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('No environment selected')
|
->title('No tenant selected')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -1062,7 +1062,7 @@ public static function ensurePolicyTypes(array $data): array
|
|||||||
|
|
||||||
public static function assignTenant(array $data): array
|
public static function assignTenant(array $data): array
|
||||||
{
|
{
|
||||||
$data['managed_environment_id'] = static::resolveTenantContextForCurrentPanelOrFail()->getKey();
|
$data['tenant_id'] = static::resolveTenantContextForCurrentPanelOrFail()->getKey();
|
||||||
|
|
||||||
return $data;
|
return $data;
|
||||||
}
|
}
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Filament\Resources\BackupScheduleResource\Pages;
|
namespace App\Filament\Resources\BackupScheduleResource\Pages;
|
||||||
|
|
||||||
use App\Filament\Resources\BackupScheduleResource;
|
use App\Filament\Resources\BackupScheduleResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\BackupHealth\TenantBackupHealthAssessment;
|
use App\Support\BackupHealth\TenantBackupHealthAssessment;
|
||||||
use App\Support\BackupHealth\TenantBackupHealthResolver;
|
use App\Support\BackupHealth\TenantBackupHealthResolver;
|
||||||
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
use App\Support\Filament\CanonicalAdminTenantFilterState;
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Filament\Resources\BackupScheduleResource\RelationManagers;
|
namespace App\Filament\Resources\BackupScheduleResource\RelationManagers;
|
||||||
|
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\OperationCatalog;
|
use App\Support\OperationCatalog;
|
||||||
@ -37,12 +37,12 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
public function table(Table $table): Table
|
public function table(Table $table): Table
|
||||||
{
|
{
|
||||||
return $table
|
return $table
|
||||||
->modifyQueryUsing(fn (Builder $query) => $query->where('managed_environment_id', ManagedEnvironment::currentOrFail()->getKey()))
|
->modifyQueryUsing(fn (Builder $query) => $query->where('tenant_id', Tenant::currentOrFail()->getKey()))
|
||||||
->defaultSort('created_at', 'desc')
|
->defaultSort('created_at', 'desc')
|
||||||
->paginated(\App\Support\Filament\TablePaginationProfiles::relationManager())
|
->paginated(\App\Support\Filament\TablePaginationProfiles::relationManager())
|
||||||
->recordUrl(function (OperationRun $record): string {
|
->recordUrl(function (OperationRun $record): string {
|
||||||
$record = $this->resolveOwnerScopedOperationRun($record);
|
$record = $this->resolveOwnerScopedOperationRun($record);
|
||||||
$tenant = ManagedEnvironment::currentOrFail();
|
$tenant = Tenant::currentOrFail();
|
||||||
|
|
||||||
return OperationRunLinks::view($record, $tenant);
|
return OperationRunLinks::view($record, $tenant);
|
||||||
})
|
})
|
||||||
@ -106,7 +106,7 @@ private function resolveOwnerScopedOperationRun(mixed $record): OperationRun
|
|||||||
|
|
||||||
$resolvedRecord = $this->getOwnerRecord()
|
$resolvedRecord = $this->getOwnerRecord()
|
||||||
->operationRuns()
|
->operationRuns()
|
||||||
->where('managed_environment_id', ManagedEnvironment::currentOrFail()->getKey())
|
->where('tenant_id', Tenant::currentOrFail()->getKey())
|
||||||
->whereKey($recordId)
|
->whereKey($recordId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
|
|||||||
@ -4,14 +4,13 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\BackupSetResource\Pages;
|
use App\Filament\Resources\BackupSetResource\Pages;
|
||||||
use App\Filament\Resources\BackupSetResource\RelationManagers\BackupItemsRelationManager;
|
use App\Filament\Resources\BackupSetResource\RelationManagers\BackupItemsRelationManager;
|
||||||
use App\Jobs\BulkBackupSetDeleteJob;
|
use App\Jobs\BulkBackupSetDeleteJob;
|
||||||
use App\Jobs\BulkBackupSetForceDeleteJob;
|
use App\Jobs\BulkBackupSetForceDeleteJob;
|
||||||
use App\Jobs\BulkBackupSetRestoreJob;
|
use App\Jobs\BulkBackupSetRestoreJob;
|
||||||
use App\Models\BackupSet;
|
use App\Models\BackupSet;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
@ -26,7 +25,6 @@
|
|||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
@ -64,7 +62,6 @@ class BackupSetResource extends Resource
|
|||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = BackupSet::class;
|
protected static ?string $model = BackupSet::class;
|
||||||
|
|
||||||
@ -76,8 +73,11 @@ class BackupSetResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
@ -96,7 +96,7 @@ public static function canViewAny(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -112,7 +112,7 @@ public static function canCreate(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -352,7 +352,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -369,7 +369,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'backup_set.delete',
|
type: 'backup_set.delete',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
||||||
@ -422,7 +422,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -439,7 +439,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'backup_set.restore',
|
type: 'backup_set.restore',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
||||||
@ -507,7 +507,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -524,7 +524,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'backup_set.force_delete',
|
type: 'backup_set.force_delete',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
||||||
@ -651,7 +651,7 @@ private static function primaryRelatedEntry(BackupSet $record): ?RelatedContextE
|
|||||||
*/
|
*/
|
||||||
public static function createBackupSet(array $data): BackupSet
|
public static function createBackupSet(array $data): BackupSet
|
||||||
{
|
{
|
||||||
/** @var ManagedEnvironment $tenant */
|
/** @var Tenant $tenant */
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
/** @var BackupService $service */
|
/** @var BackupService $service */
|
||||||
@ -846,7 +846,7 @@ private static function backupHealthContinuityAssessment(BackupSet $record): ?Te
|
|||||||
|
|
||||||
/** @var TenantBackupHealthResolver $resolver */
|
/** @var TenantBackupHealthResolver $resolver */
|
||||||
$resolver = app(TenantBackupHealthResolver::class);
|
$resolver = app(TenantBackupHealthResolver::class);
|
||||||
$assessment = $resolver->assess((int) $record->managed_environment_id);
|
$assessment = $resolver->assess((int) $record->tenant_id);
|
||||||
|
|
||||||
if ($assessment->latestRelevantBackupSetId !== (int) $record->getKey()) {
|
if ($assessment->latestRelevantBackupSetId !== (int) $record->getKey()) {
|
||||||
return null;
|
return null;
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Resources\BackupSetResource;
|
use App\Filament\Resources\BackupSetResource;
|
||||||
use App\Models\BackupSet;
|
use App\Models\BackupSet;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
@ -72,7 +72,7 @@ private function restoreAction(): Action
|
|||||||
$record->restore();
|
$record->restore();
|
||||||
$record->items()->withTrashed()->restore();
|
$record->items()->withTrashed()->restore();
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup.restored',
|
action: 'backup.restored',
|
||||||
@ -113,7 +113,7 @@ private function archiveAction(): Action
|
|||||||
|
|
||||||
$record->delete();
|
$record->delete();
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup.deleted',
|
action: 'backup.deleted',
|
||||||
@ -162,7 +162,7 @@ private function forceDeleteAction(): Action
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$auditLogger->log(
|
$auditLogger->log(
|
||||||
tenant: $record->tenant,
|
tenant: $record->tenant,
|
||||||
action: 'backup.force_deleted',
|
action: 'backup.force_deleted',
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Jobs\RemovePoliciesFromBackupSetJob;
|
use App\Jobs\RemovePoliciesFromBackupSetJob;
|
||||||
use App\Models\BackupItem;
|
use App\Models\BackupItem;
|
||||||
use App\Models\BackupSet;
|
use App\Models\BackupSet;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\OperationRunService;
|
use App\Services\OperationRunService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -122,12 +122,12 @@ public function table(Table $table): Table
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = $backupSet->tenant ?? ManagedEnvironment::current();
|
$tenant = $backupSet->tenant ?? Tenant::current();
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $tenant->getKey() !== (int) $backupSet->managed_environment_id) {
|
if ((int) $tenant->getKey() !== (int) $backupSet->tenant_id) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -201,12 +201,12 @@ public function table(Table $table): Table
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = $backupSet->tenant ?? ManagedEnvironment::current();
|
$tenant = $backupSet->tenant ?? Tenant::current();
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $tenant->getKey() !== (int) $backupSet->managed_environment_id) {
|
if ((int) $tenant->getKey() !== (int) $backupSet->tenant_id) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -477,7 +477,7 @@ private function backupItemInspectUrl(BackupItem $record): ?string
|
|||||||
|
|
||||||
$resolvedRecord = $backupSet->items()
|
$resolvedRecord = $backupSet->items()
|
||||||
->with(['policy', 'policyVersion', 'policyVersion.policy'])
|
->with(['policy', 'policyVersion', 'policyVersion.policy'])
|
||||||
->where('managed_environment_id', (int) $backupSet->managed_environment_id)
|
->where('tenant_id', (int) $backupSet->tenant_id)
|
||||||
->whereKey($resolvedId)
|
->whereKey($resolvedId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
@ -485,9 +485,9 @@ private function backupItemInspectUrl(BackupItem $record): ?string
|
|||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = $backupSet->tenant ?? ManagedEnvironment::current();
|
$tenant = $backupSet->tenant ?? Tenant::current();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -516,7 +516,7 @@ private function resolveOwnerScopedBackupItemId(BackupSet $backupSet, mixed $rec
|
|||||||
}
|
}
|
||||||
|
|
||||||
$resolvedId = $backupSet->items()
|
$resolvedId = $backupSet->items()
|
||||||
->where('managed_environment_id', (int) $backupSet->managed_environment_id)
|
->where('tenant_id', (int) $backupSet->tenant_id)
|
||||||
->whereKey($recordId)
|
->whereKey($recordId)
|
||||||
->value('id');
|
->value('id');
|
||||||
|
|
||||||
@ -545,7 +545,7 @@ private function resolveOwnerScopedBackupItemIdsFromKeys(BackupSet $backupSet, a
|
|||||||
}
|
}
|
||||||
|
|
||||||
$resolvedIds = $backupSet->items()
|
$resolvedIds = $backupSet->items()
|
||||||
->where('managed_environment_id', (int) $backupSet->managed_environment_id)
|
->where('tenant_id', (int) $backupSet->tenant_id)
|
||||||
->whereIn('id', $requestedIds)
|
->whereIn('id', $requestedIds)
|
||||||
->pluck('id')
|
->pluck('id')
|
||||||
->map(fn (mixed $value): int => (int) $value)
|
->map(fn (mixed $value): int => (int) $value)
|
||||||
|
|||||||
@ -10,7 +10,7 @@
|
|||||||
use App\Models\BaselineSnapshot;
|
use App\Models\BaselineSnapshot;
|
||||||
use App\Models\BaselineTenantAssignment;
|
use App\Models\BaselineTenantAssignment;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
@ -30,7 +30,6 @@
|
|||||||
use App\Support\Filament\FilterOptionCatalog;
|
use App\Support\Filament\FilterOptionCatalog;
|
||||||
use App\Support\Inventory\InventoryPolicyTypeMeta;
|
use App\Support\Inventory\InventoryPolicyTypeMeta;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\OperationCatalog;
|
use App\Support\OperationCatalog;
|
||||||
@ -97,8 +96,7 @@ public static function shouldRegisterNavigation(): bool
|
|||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
return parent::shouldRegisterNavigation();
|
||||||
&& parent::shouldRegisterNavigation();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
@ -467,7 +465,7 @@ public static function table(Table $table): Table
|
|||||||
->label('Version')
|
->label('Version')
|
||||||
->placeholder('—'),
|
->placeholder('—'),
|
||||||
TextColumn::make('tenant_assignments_count')
|
TextColumn::make('tenant_assignments_count')
|
||||||
->label('Assigned environments')
|
->label('Assigned tenants')
|
||||||
->counts('tenantAssignments'),
|
->counts('tenantAssignments'),
|
||||||
TextColumn::make('current_snapshot_truth')
|
TextColumn::make('current_snapshot_truth')
|
||||||
->label('Current snapshot')
|
->label('Current snapshot')
|
||||||
@ -970,7 +968,7 @@ private static function hasEligibleCompareTarget(BaselineProfile $profile): bool
|
|||||||
$tenantIds = BaselineTenantAssignment::query()
|
$tenantIds = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->where('baseline_profile_id', (int) $profile->getKey())
|
->where('baseline_profile_id', (int) $profile->getKey())
|
||||||
->pluck('managed_environment_id')
|
->pluck('tenant_id')
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
if ($tenantIds === []) {
|
if ($tenantIds === []) {
|
||||||
@ -979,11 +977,11 @@ private static function hasEligibleCompareTarget(BaselineProfile $profile): bool
|
|||||||
|
|
||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->whereIn('id', $tenantIds)
|
->whereIn('id', $tenantIds)
|
||||||
->get(['id'])
|
->get(['id'])
|
||||||
->contains(fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_SYNC));
|
->contains(fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_SYNC));
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\BaselineProfileResource;
|
use App\Filament\Resources\BaselineProfileResource;
|
||||||
use App\Models\BaselineProfile;
|
use App\Models\BaselineProfile;
|
||||||
use App\Models\BaselineTenantAssignment;
|
use App\Models\BaselineTenantAssignment;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
@ -64,8 +64,8 @@ private function captureAction(): Action
|
|||||||
: 'Capture baseline';
|
: 'Capture baseline';
|
||||||
|
|
||||||
$modalDescription = $captureMode === BaselineCaptureMode::FullContent
|
$modalDescription = $captureMode === BaselineCaptureMode::FullContent
|
||||||
? 'Select the source environment. This will capture content evidence on demand (redacted) and may take longer depending on scope.'
|
? 'Select the source tenant. This will capture content evidence on demand (redacted) and may take longer depending on scope.'
|
||||||
: 'Select the source environment whose current inventory will be captured as the baseline snapshot.';
|
: 'Select the source tenant whose current inventory will be captured as the baseline snapshot.';
|
||||||
|
|
||||||
$action = Action::make('capture')
|
$action = Action::make('capture')
|
||||||
->label($label)
|
->label($label)
|
||||||
@ -76,8 +76,8 @@ private function captureAction(): Action
|
|||||||
->modalHeading($label)
|
->modalHeading($label)
|
||||||
->modalDescription($modalDescription)
|
->modalDescription($modalDescription)
|
||||||
->form([
|
->form([
|
||||||
Select::make('source_environment_id')
|
Select::make('source_tenant_id')
|
||||||
->label('Source managed environment')
|
->label('Source Tenant')
|
||||||
->options(fn (): array => $this->getWorkspaceTenantOptions())
|
->options(fn (): array => $this->getWorkspaceTenantOptions())
|
||||||
->required()
|
->required()
|
||||||
->searchable(),
|
->searchable(),
|
||||||
@ -91,11 +91,11 @@ private function captureAction(): Action
|
|||||||
|
|
||||||
/** @var BaselineProfile $profile */
|
/** @var BaselineProfile $profile */
|
||||||
$profile = $this->getRecord();
|
$profile = $this->getRecord();
|
||||||
$sourceTenant = ManagedEnvironment::query()->find((int) $data['source_environment_id']);
|
$sourceTenant = Tenant::query()->find((int) $data['source_tenant_id']);
|
||||||
|
|
||||||
if (! $sourceTenant instanceof ManagedEnvironment) {
|
if (! $sourceTenant instanceof Tenant) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Source environment not found')
|
->title('Source tenant not found')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -175,8 +175,8 @@ private function compareNowAction(): Action
|
|||||||
: 'Compare now';
|
: 'Compare now';
|
||||||
|
|
||||||
$modalDescription = $captureMode === BaselineCaptureMode::FullContent
|
$modalDescription = $captureMode === BaselineCaptureMode::FullContent
|
||||||
? 'Select the target environment. This will refresh content evidence on demand (redacted) before comparing.'
|
? 'Select the target tenant. This will refresh content evidence on demand (redacted) before comparing.'
|
||||||
: 'Select the target environment to compare its current inventory against the effective current baseline snapshot.';
|
: 'Select the target tenant to compare its current inventory against the effective current baseline snapshot.';
|
||||||
|
|
||||||
return Action::make('compareNow')
|
return Action::make('compareNow')
|
||||||
->label($label)
|
->label($label)
|
||||||
@ -187,8 +187,8 @@ private function compareNowAction(): Action
|
|||||||
->modalHeading($label)
|
->modalHeading($label)
|
||||||
->modalDescription($modalDescription)
|
->modalDescription($modalDescription)
|
||||||
->form([
|
->form([
|
||||||
Select::make('target_environment_id')
|
Select::make('target_tenant_id')
|
||||||
->label('Target managed environment')
|
->label('Target Tenant')
|
||||||
->options(fn (): array => $this->getEligibleCompareTenantOptions())
|
->options(fn (): array => $this->getEligibleCompareTenantOptions())
|
||||||
->required()
|
->required()
|
||||||
->searchable(),
|
->searchable(),
|
||||||
@ -204,11 +204,11 @@ private function compareNowAction(): Action
|
|||||||
/** @var BaselineProfile $profile */
|
/** @var BaselineProfile $profile */
|
||||||
$profile = $this->getRecord();
|
$profile = $this->getRecord();
|
||||||
|
|
||||||
$targetTenant = ManagedEnvironment::query()->find((int) $data['target_environment_id']);
|
$targetTenant = Tenant::query()->find((int) $data['target_tenant_id']);
|
||||||
|
|
||||||
if (! $targetTenant instanceof ManagedEnvironment || (int) $targetTenant->workspace_id !== (int) $profile->workspace_id) {
|
if (! $targetTenant instanceof Tenant || (int) $targetTenant->workspace_id !== (int) $profile->workspace_id) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Target environment not found')
|
->title('Target tenant not found')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -217,13 +217,13 @@ private function compareNowAction(): Action
|
|||||||
|
|
||||||
$assignment = BaselineTenantAssignment::query()
|
$assignment = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->where('managed_environment_id', (int) $targetTenant->getKey())
|
->where('tenant_id', (int) $targetTenant->getKey())
|
||||||
->where('baseline_profile_id', (int) $profile->getKey())
|
->where('baseline_profile_id', (int) $profile->getKey())
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if (! $assignment instanceof BaselineTenantAssignment) {
|
if (! $assignment instanceof BaselineTenantAssignment) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('ManagedEnvironment not assigned')
|
->title('Tenant not assigned')
|
||||||
->body('This tenant is not assigned to this baseline profile.')
|
->body('This tenant is not assigned to this baseline profile.')
|
||||||
->warning()
|
->warning()
|
||||||
->send();
|
->send();
|
||||||
@ -311,11 +311,11 @@ private function compareNowAction(): Action
|
|||||||
private function compareAssignedTenantsAction(): Action
|
private function compareAssignedTenantsAction(): Action
|
||||||
{
|
{
|
||||||
$action = Action::make('compareAssignedTenants')
|
$action = Action::make('compareAssignedTenants')
|
||||||
->label('Compare assigned environments')
|
->label('Compare assigned tenants')
|
||||||
->icon('heroicon-o-play')
|
->icon('heroicon-o-play')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading('Compare assigned environments')
|
->modalHeading('Compare assigned tenants')
|
||||||
->modalDescription('Simulation only. This starts the normal environment-owned baseline compare path for the visible assigned set. No workspace umbrella run is created.')
|
->modalDescription('Simulation only. This starts the normal tenant-owned baseline compare path for the visible assigned set. No workspace umbrella run is created.')
|
||||||
->disabled(fn (): bool => $this->compareAssignedTenantsDisabledReason() !== null)
|
->disabled(fn (): bool => $this->compareAssignedTenantsDisabledReason() !== null)
|
||||||
->tooltip(fn (): ?string => $this->compareAssignedTenantsDisabledReason())
|
->tooltip(fn (): ?string => $this->compareAssignedTenantsDisabledReason())
|
||||||
->action(function (): void {
|
->action(function (): void {
|
||||||
@ -384,7 +384,7 @@ private function getWorkspaceTenantOptions(): array
|
|||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('workspace_id', $workspaceId)
|
->where('workspace_id', $workspaceId)
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->pluck('name', 'id')
|
->pluck('name', 'id')
|
||||||
@ -408,7 +408,7 @@ private function getEligibleCompareTenantOptions(): array
|
|||||||
$tenantIds = BaselineTenantAssignment::query()
|
$tenantIds = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->where('baseline_profile_id', (int) $profile->getKey())
|
->where('baseline_profile_id', (int) $profile->getKey())
|
||||||
->pluck('managed_environment_id')
|
->pluck('tenant_id')
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
if ($tenantIds === []) {
|
if ($tenantIds === []) {
|
||||||
@ -419,14 +419,14 @@ private function getEligibleCompareTenantOptions(): array
|
|||||||
|
|
||||||
$options = [];
|
$options = [];
|
||||||
|
|
||||||
$tenants = ManagedEnvironment::query()
|
$tenants = Tenant::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->whereIn('id', $tenantIds)
|
->whereIn('id', $tenantIds)
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->get(['id', 'name']);
|
->get(['id', 'name']);
|
||||||
|
|
||||||
foreach ($tenants as $tenant) {
|
foreach ($tenants as $tenant) {
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -489,11 +489,11 @@ private function compareAssignedTenantsDisabledReason(): ?string
|
|||||||
$profile = $this->getRecord();
|
$profile = $this->getRecord();
|
||||||
|
|
||||||
if (! $this->profileHasConsumableSnapshot()) {
|
if (! $this->profileHasConsumableSnapshot()) {
|
||||||
return 'Capture a complete baseline snapshot before comparing assigned environments.';
|
return 'Capture a complete baseline snapshot before comparing assigned tenants.';
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($this->visibleAssignedTenantCount($profile) === 0) {
|
if ($this->visibleAssignedTenantCount($profile) === 0) {
|
||||||
return 'No visible assigned environments are available for compare.';
|
return 'No visible assigned tenants are available for compare.';
|
||||||
}
|
}
|
||||||
|
|
||||||
return null;
|
return null;
|
||||||
@ -510,7 +510,7 @@ private function visibleAssignedTenantCount(BaselineProfile $profile): int
|
|||||||
$tenantIds = BaselineTenantAssignment::query()
|
$tenantIds = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->where('baseline_profile_id', (int) $profile->getKey())
|
->where('baseline_profile_id', (int) $profile->getKey())
|
||||||
->pluck('managed_environment_id')
|
->pluck('tenant_id')
|
||||||
->all();
|
->all();
|
||||||
|
|
||||||
if ($tenantIds === []) {
|
if ($tenantIds === []) {
|
||||||
@ -519,11 +519,11 @@ private function visibleAssignedTenantCount(BaselineProfile $profile): int
|
|||||||
|
|
||||||
$resolver = app(CapabilityResolver::class);
|
$resolver = app(CapabilityResolver::class);
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->whereIn('id', $tenantIds)
|
->whereIn('id', $tenantIds)
|
||||||
->get(['id'])
|
->get(['id'])
|
||||||
->filter(fn (ManagedEnvironment $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_VIEW))
|
->filter(fn (Tenant $tenant): bool => $resolver->can($user, $tenant, Capabilities::TENANT_VIEW))
|
||||||
->count();
|
->count();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -6,7 +6,7 @@
|
|||||||
|
|
||||||
use App\Models\BaselineProfile;
|
use App\Models\BaselineProfile;
|
||||||
use App\Models\BaselineTenantAssignment;
|
use App\Models\BaselineTenantAssignment;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
@ -27,7 +27,7 @@ class BaselineTenantAssignmentsRelationManager extends RelationManager
|
|||||||
{
|
{
|
||||||
protected static string $relationship = 'tenantAssignments';
|
protected static string $relationship = 'tenantAssignments';
|
||||||
|
|
||||||
protected static ?string $title = 'Environment assignments';
|
protected static ?string $title = 'Tenant assignments';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @var array<int, array{baseline_profile_id:int, baseline_profile_name:string}>|null
|
* @var array<int, array{baseline_profile_id:int, baseline_profile_name:string}>|null
|
||||||
@ -37,11 +37,11 @@ class BaselineTenantAssignmentsRelationManager extends RelationManager
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forRelationManager(ActionSurfaceProfile::RelationManager)
|
return ActionSurfaceDeclaration::forRelationManager(ActionSurfaceProfile::RelationManager)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header action: Assign environment (manage-gated).')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header action: Assign tenant (manage-gated).')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
||||||
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'v1 assignments have no row-level actions beyond delete.')
|
->exempt(ActionSurfaceSlot::ListRowMoreMenu, 'v1 assignments have no row-level actions beyond delete.')
|
||||||
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'No bulk mutations for assignments in v1.')
|
->exempt(ActionSurfaceSlot::ListBulkMoreGroup, 'No bulk mutations for assignments in v1.')
|
||||||
->satisfy(ActionSurfaceSlot::ListEmptyState, 'Empty state encourages assigning an environment.');
|
->satisfy(ActionSurfaceSlot::ListEmptyState, 'Empty state encourages assigning a tenant.');
|
||||||
}
|
}
|
||||||
|
|
||||||
public function table(Table $table): Table
|
public function table(Table $table): Table
|
||||||
@ -51,7 +51,7 @@ public function table(Table $table): Table
|
|||||||
->paginated(\App\Support\Filament\TablePaginationProfiles::relationManager())
|
->paginated(\App\Support\Filament\TablePaginationProfiles::relationManager())
|
||||||
->columns([
|
->columns([
|
||||||
Tables\Columns\TextColumn::make('tenant.name')
|
Tables\Columns\TextColumn::make('tenant.name')
|
||||||
->label('Managed environment')
|
->label('Tenant')
|
||||||
->searchable(),
|
->searchable(),
|
||||||
Tables\Columns\TextColumn::make('assignedByUser.name')
|
Tables\Columns\TextColumn::make('assignedByUser.name')
|
||||||
->label('Assigned by')
|
->label('Assigned by')
|
||||||
@ -68,8 +68,8 @@ public function table(Table $table): Table
|
|||||||
->actions([
|
->actions([
|
||||||
$this->removeAssignmentAction(),
|
$this->removeAssignmentAction(),
|
||||||
])
|
])
|
||||||
->emptyStateHeading('No environments assigned')
|
->emptyStateHeading('No tenants assigned')
|
||||||
->emptyStateDescription('Assign an environment to compare its state against this baseline profile.')
|
->emptyStateDescription('Assign a tenant to compare its state against this baseline profile.')
|
||||||
->emptyStateActions([
|
->emptyStateActions([
|
||||||
$this->assignTenantAction()->name('assignEmpty'),
|
$this->assignTenantAction()->name('assignEmpty'),
|
||||||
]);
|
]);
|
||||||
@ -78,12 +78,12 @@ public function table(Table $table): Table
|
|||||||
private function assignTenantAction(): Action
|
private function assignTenantAction(): Action
|
||||||
{
|
{
|
||||||
return Action::make('assign')
|
return Action::make('assign')
|
||||||
->label('Assign environment')
|
->label('Assign Tenant')
|
||||||
->icon('heroicon-o-plus')
|
->icon('heroicon-o-plus')
|
||||||
->visible(fn (): bool => $this->hasManageCapability())
|
->visible(fn (): bool => $this->hasManageCapability())
|
||||||
->form([
|
->form([
|
||||||
Select::make('managed_environment_id')
|
Select::make('tenant_id')
|
||||||
->label('Managed environment')
|
->label('Tenant')
|
||||||
->options(fn (): array => $this->getTenantOptions())
|
->options(fn (): array => $this->getTenantOptions())
|
||||||
->disableOptionWhen(fn (string $value): bool => array_key_exists((int) $value, $this->getTenantAssignmentSummaries()))
|
->disableOptionWhen(fn (string $value): bool => array_key_exists((int) $value, $this->getTenantAssignmentSummaries()))
|
||||||
->required()
|
->required()
|
||||||
@ -103,21 +103,21 @@ private function assignTenantAction(): Action
|
|||||||
|
|
||||||
/** @var BaselineProfile $profile */
|
/** @var BaselineProfile $profile */
|
||||||
$profile = $this->getOwnerRecord();
|
$profile = $this->getOwnerRecord();
|
||||||
$tenantId = (int) $data['managed_environment_id'];
|
$tenantId = (int) $data['tenant_id'];
|
||||||
|
|
||||||
$existing = BaselineTenantAssignment::query()
|
$existing = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', $profile->workspace_id)
|
->where('workspace_id', $profile->workspace_id)
|
||||||
->where('managed_environment_id', $tenantId)
|
->where('tenant_id', $tenantId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if ($existing instanceof BaselineTenantAssignment) {
|
if ($existing instanceof BaselineTenantAssignment) {
|
||||||
$assignedBaselineName = $this->getAssignedBaselineNameForTenant($tenantId);
|
$assignedBaselineName = $this->getAssignedBaselineNameForTenant($tenantId);
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Environment already assigned')
|
->title('Tenant already assigned')
|
||||||
->body($assignedBaselineName === null
|
->body($assignedBaselineName === null
|
||||||
? 'This environment already has a baseline assignment in this workspace.'
|
? 'This tenant already has a baseline assignment in this workspace.'
|
||||||
: "This environment is already assigned to baseline: {$assignedBaselineName}.")
|
: "This tenant is already assigned to baseline: {$assignedBaselineName}.")
|
||||||
->warning()
|
->warning()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -126,7 +126,7 @@ private function assignTenantAction(): Action
|
|||||||
|
|
||||||
$assignment = BaselineTenantAssignment::create([
|
$assignment = BaselineTenantAssignment::create([
|
||||||
'workspace_id' => (int) $profile->workspace_id,
|
'workspace_id' => (int) $profile->workspace_id,
|
||||||
'managed_environment_id' => $tenantId,
|
'tenant_id' => $tenantId,
|
||||||
'baseline_profile_id' => (int) $profile->getKey(),
|
'baseline_profile_id' => (int) $profile->getKey(),
|
||||||
'assigned_by_user_id' => (int) $user->getKey(),
|
'assigned_by_user_id' => (int) $user->getKey(),
|
||||||
]);
|
]);
|
||||||
@ -134,7 +134,7 @@ private function assignTenantAction(): Action
|
|||||||
$this->auditAssignment($profile, $assignment, $user, 'created');
|
$this->auditAssignment($profile, $assignment, $user, 'created');
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Environment assigned')
|
->title('Tenant assigned')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -150,8 +150,8 @@ private function removeAssignmentAction(): Action
|
|||||||
->color('danger')
|
->color('danger')
|
||||||
->visible(fn (): bool => $this->hasManageCapability())
|
->visible(fn (): bool => $this->hasManageCapability())
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading('Remove environment assignment')
|
->modalHeading('Remove tenant assignment')
|
||||||
->modalDescription('Are you sure you want to remove this environment assignment? This will not delete any existing findings.')
|
->modalDescription('Are you sure you want to remove this tenant assignment? This will not delete any existing findings.')
|
||||||
->action(function (BaselineTenantAssignment $record): void {
|
->action(function (BaselineTenantAssignment $record): void {
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
@ -190,11 +190,11 @@ private function getTenantOptions(): array
|
|||||||
|
|
||||||
$assignmentSummaries = $this->getTenantAssignmentSummaries();
|
$assignmentSummaries = $this->getTenantAssignmentSummaries();
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('workspace_id', $profile->workspace_id)
|
->where('workspace_id', $profile->workspace_id)
|
||||||
->orderBy('name')
|
->orderBy('name')
|
||||||
->get(['id', 'name'])
|
->get(['id', 'name'])
|
||||||
->mapWithKeys(function (ManagedEnvironment $tenant) use ($assignmentSummaries): array {
|
->mapWithKeys(function (Tenant $tenant) use ($assignmentSummaries): array {
|
||||||
$tenantId = (int) $tenant->getKey();
|
$tenantId = (int) $tenant->getKey();
|
||||||
$assignmentSummary = $assignmentSummaries[$tenantId] ?? null;
|
$assignmentSummary = $assignmentSummaries[$tenantId] ?? null;
|
||||||
|
|
||||||
@ -220,12 +220,12 @@ private function getTenantAssignmentSummaries(): array
|
|||||||
$this->tenantAssignmentSummaries = BaselineTenantAssignment::query()
|
$this->tenantAssignmentSummaries = BaselineTenantAssignment::query()
|
||||||
->where('workspace_id', (int) $profile->workspace_id)
|
->where('workspace_id', (int) $profile->workspace_id)
|
||||||
->with('baselineProfile:id,name')
|
->with('baselineProfile:id,name')
|
||||||
->get(['managed_environment_id', 'baseline_profile_id'])
|
->get(['tenant_id', 'baseline_profile_id'])
|
||||||
->mapWithKeys(function (BaselineTenantAssignment $assignment): array {
|
->mapWithKeys(function (BaselineTenantAssignment $assignment): array {
|
||||||
$baselineProfile = $assignment->baselineProfile;
|
$baselineProfile = $assignment->baselineProfile;
|
||||||
|
|
||||||
return [
|
return [
|
||||||
(int) $assignment->managed_environment_id => [
|
(int) $assignment->tenant_id => [
|
||||||
'baseline_profile_id' => (int) $assignment->baseline_profile_id,
|
'baseline_profile_id' => (int) $assignment->baseline_profile_id,
|
||||||
'baseline_profile_name' => $baselineProfile instanceof BaselineProfile
|
'baseline_profile_name' => $baselineProfile instanceof BaselineProfile
|
||||||
? (string) $baselineProfile->name
|
? (string) $baselineProfile->name
|
||||||
@ -242,7 +242,7 @@ private function getTenantAssignmentSummaries(): array
|
|||||||
* @param array{baseline_profile_id:int, baseline_profile_name:string}|null $assignmentSummary
|
* @param array{baseline_profile_id:int, baseline_profile_name:string}|null $assignmentSummary
|
||||||
*/
|
*/
|
||||||
private function formatTenantOptionLabel(
|
private function formatTenantOptionLabel(
|
||||||
ManagedEnvironment $tenant,
|
Tenant $tenant,
|
||||||
?array $assignmentSummary,
|
?array $assignmentSummary,
|
||||||
): string {
|
): string {
|
||||||
$tenantName = (string) $tenant->name;
|
$tenantName = (string) $tenant->name;
|
||||||
@ -282,7 +282,7 @@ private function auditAssignment(
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = ManagedEnvironment::query()->find($assignment->managed_environment_id);
|
$tenant = Tenant::query()->find($assignment->tenant_id);
|
||||||
|
|
||||||
$auditLogger = app(WorkspaceAuditLogger::class);
|
$auditLogger = app(WorkspaceAuditLogger::class);
|
||||||
|
|
||||||
@ -292,8 +292,8 @@ private function auditAssignment(
|
|||||||
context: [
|
context: [
|
||||||
'baseline_profile_id' => (int) $profile->getKey(),
|
'baseline_profile_id' => (int) $profile->getKey(),
|
||||||
'baseline_profile_name' => (string) $profile->name,
|
'baseline_profile_name' => (string) $profile->name,
|
||||||
'managed_environment_id' => (int) $assignment->managed_environment_id,
|
'tenant_id' => (int) $assignment->tenant_id,
|
||||||
'tenant_name' => $tenant instanceof ManagedEnvironment ? (string) $tenant->display_name : '—',
|
'tenant_name' => $tenant instanceof Tenant ? (string) $tenant->display_name : '—',
|
||||||
],
|
],
|
||||||
actor: $user,
|
actor: $user,
|
||||||
resourceType: 'baseline_profile',
|
resourceType: 'baseline_profile',
|
||||||
|
|||||||
@ -17,7 +17,6 @@
|
|||||||
use App\Support\Baselines\BaselineSnapshotLifecycleState;
|
use App\Support\Baselines\BaselineSnapshotLifecycleState;
|
||||||
use App\Support\Filament\FilterPresets;
|
use App\Support\Filament\FilterPresets;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
@ -68,8 +67,7 @@ public static function shouldRegisterNavigation(): bool
|
|||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
return parent::shouldRegisterNavigation();
|
||||||
&& parent::shouldRegisterNavigation();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
|
|||||||
@ -5,14 +5,12 @@
|
|||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\EntraGroupResource\Pages;
|
use App\Filament\Resources\EntraGroupResource\Pages;
|
||||||
use App\Models\EntraGroup;
|
use App\Models\EntraGroup;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
@ -39,7 +37,6 @@ class EntraGroupResource extends Resource
|
|||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use ScopesGlobalSearchToTenant;
|
use ScopesGlobalSearchToTenant;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static bool $isScopedToTenant = false;
|
protected static bool $isScopedToTenant = false;
|
||||||
|
|
||||||
@ -57,8 +54,11 @@ class EntraGroupResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
@ -187,7 +187,7 @@ public static function table(Table $table): Table
|
|||||||
->actions([])
|
->actions([])
|
||||||
->bulkActions([])
|
->bulkActions([])
|
||||||
->emptyStateHeading('No groups cached yet')
|
->emptyStateHeading('No groups cached yet')
|
||||||
->emptyStateDescription('No groups are available for this managed environment yet. Run or refresh the relevant directory inventory operation to make groups visible here.')
|
->emptyStateDescription('Sync groups for the current tenant to browse directory data here.')
|
||||||
->emptyStateIcon('heroicon-o-user-group');
|
->emptyStateIcon('heroicon-o-user-group');
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -204,7 +204,7 @@ public static function resolveScopedRecordOrFail(int|string $key): Model
|
|||||||
|
|
||||||
public static function getGlobalSearchResultUrl(Model $record): string
|
public static function getGlobalSearchResultUrl(Model $record): string
|
||||||
{
|
{
|
||||||
$tenant = $record instanceof EntraGroup && $record->tenant instanceof ManagedEnvironment
|
$tenant = $record instanceof EntraGroup && $record->tenant instanceof Tenant
|
||||||
? $record->tenant
|
? $record->tenant
|
||||||
: static::panelTenantContext();
|
: static::panelTenantContext();
|
||||||
|
|
||||||
@ -225,7 +225,7 @@ public static function getPages(): array
|
|||||||
public static function scopedUrl(
|
public static function scopedUrl(
|
||||||
string $page = 'index',
|
string $page = 'index',
|
||||||
array $parameters = [],
|
array $parameters = [],
|
||||||
?ManagedEnvironment $tenant = null,
|
?Tenant $tenant = null,
|
||||||
?string $panel = null,
|
?string $panel = null,
|
||||||
): string {
|
): string {
|
||||||
$panelId = $panel ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
$panelId = $panel ?? Filament::getCurrentOrDefaultPanel()?->getId() ?? 'admin';
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Filament\Resources\EntraGroupResource\Pages;
|
namespace App\Filament\Resources\EntraGroupResource\Pages;
|
||||||
|
|
||||||
use App\Filament\Resources\EntraGroupResource;
|
use App\Filament\Resources\EntraGroupResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Directory\EntraGroupSyncService;
|
use App\Services\Directory\EntraGroupSyncService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -30,7 +30,7 @@ public function mount(): void
|
|||||||
|
|
||||||
if (
|
if (
|
||||||
Filament::getCurrentPanel()?->getId() === 'admin'
|
Filament::getCurrentPanel()?->getId() === 'admin'
|
||||||
&& ! EntraGroupResource::panelTenantContext() instanceof ManagedEnvironment
|
&& ! EntraGroupResource::panelTenantContext() instanceof Tenant
|
||||||
) {
|
) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
@ -47,7 +47,7 @@ protected function getHeaderActions(): array
|
|||||||
->label('Operations')
|
->label('Operations')
|
||||||
->icon('heroicon-o-clock')
|
->icon('heroicon-o-clock')
|
||||||
->url(fn (): string => OperationRunLinks::index($tenant))
|
->url(fn (): string => OperationRunLinks::index($tenant))
|
||||||
->visible(fn (): bool => $tenant instanceof ManagedEnvironment),
|
->visible(fn (): bool => $tenant instanceof Tenant),
|
||||||
UiEnforcement::forAction(
|
UiEnforcement::forAction(
|
||||||
Action::make('sync_groups')
|
Action::make('sync_groups')
|
||||||
->label('Sync Groups')
|
->label('Sync Groups')
|
||||||
@ -57,7 +57,7 @@ protected function getHeaderActions(): array
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$tenant = EntraGroupResource::panelTenantContext();
|
$tenant = EntraGroupResource::panelTenantContext();
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\EntraGroupResource;
|
use App\Filament\Resources\EntraGroupResource;
|
||||||
use App\Models\EntraGroup;
|
use App\Models\EntraGroup;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Filament\Resources\Pages\ViewRecord;
|
use Filament\Resources\Pages\ViewRecord;
|
||||||
@ -27,16 +27,16 @@ protected function authorizeAccess(): void
|
|||||||
|
|
||||||
if (
|
if (
|
||||||
Filament::getCurrentPanel()?->getId() === 'admin'
|
Filament::getCurrentPanel()?->getId() === 'admin'
|
||||||
&& ! $tenant instanceof ManagedEnvironment
|
&& ! $tenant instanceof Tenant
|
||||||
) {
|
) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment || ! $record instanceof EntraGroup) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant || ! $record instanceof EntraGroup) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -1,20 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
declare(strict_types=1);
|
|
||||||
|
|
||||||
namespace App\Filament\Resources\EnvironmentReviewResource\Pages;
|
|
||||||
|
|
||||||
use App\Filament\Resources\EnvironmentReviewResource;
|
|
||||||
use Filament\Resources\Pages\ListRecords;
|
|
||||||
|
|
||||||
class ListEnvironmentReviews extends ListRecords
|
|
||||||
{
|
|
||||||
protected static string $resource = EnvironmentReviewResource::class;
|
|
||||||
|
|
||||||
protected function getHeaderActions(): array
|
|
||||||
{
|
|
||||||
return [
|
|
||||||
EnvironmentReviewResource::makeCreateReviewAction(),
|
|
||||||
];
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -6,13 +6,12 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Pages\Reviews\CustomerReviewWorkspace;
|
use App\Filament\Pages\Reviews\CustomerReviewWorkspace;
|
||||||
use App\Filament\Resources\EvidenceSnapshotResource\Pages;
|
use App\Filament\Resources\EvidenceSnapshotResource\Pages;
|
||||||
use App\Filament\Resources\ReviewPackResource;
|
use App\Filament\Resources\ReviewPackResource;
|
||||||
use App\Models\EvidenceSnapshot;
|
use App\Models\EvidenceSnapshot;
|
||||||
use App\Models\EvidenceSnapshotItem;
|
use App\Models\EvidenceSnapshotItem;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Evidence\EvidenceSnapshotService;
|
use App\Services\Evidence\EvidenceSnapshotService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -22,7 +21,6 @@
|
|||||||
use App\Support\Evidence\EvidenceCompletenessState;
|
use App\Support\Evidence\EvidenceCompletenessState;
|
||||||
use App\Support\Evidence\EvidenceSnapshotStatus;
|
use App\Support\Evidence\EvidenceSnapshotStatus;
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperationCatalog;
|
use App\Support\OperationCatalog;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\OperationRunOutcome;
|
use App\Support\OperationRunOutcome;
|
||||||
@ -66,7 +64,6 @@ class EvidenceSnapshotResource extends Resource
|
|||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = EvidenceSnapshot::class;
|
protected static ?string $model = EvidenceSnapshot::class;
|
||||||
|
|
||||||
@ -84,18 +81,12 @@ class EvidenceSnapshotResource extends Resource
|
|||||||
|
|
||||||
protected static ?int $navigationSort = 55;
|
protected static ?int $navigationSort = 55;
|
||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
|
||||||
{
|
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
|
||||||
&& parent::shouldRegisterNavigation();
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -111,7 +102,7 @@ public static function canView(Model $record): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -120,7 +111,7 @@ public static function canView(Model $record): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
return ! $record instanceof EvidenceSnapshot
|
return ! $record instanceof EvidenceSnapshot
|
||||||
|| ((int) $record->managed_environment_id === (int) $tenant->getKey() && (int) $record->workspace_id === (int) $tenant->workspace_id);
|
|| ((int) $record->tenant_id === (int) $tenant->getKey() && (int) $record->workspace_id === (int) $tenant->workspace_id);
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
@ -176,7 +167,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->color(BadgeRenderer::color(BadgeDomain::EvidenceCompleteness))
|
->color(BadgeRenderer::color(BadgeDomain::EvidenceCompleteness))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::EvidenceCompleteness))
|
->icon(BadgeRenderer::icon(BadgeDomain::EvidenceCompleteness))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::EvidenceCompleteness)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::EvidenceCompleteness)),
|
||||||
TextEntry::make('tenant.name')->label('ManagedEnvironment'),
|
TextEntry::make('tenant.name')->label('Tenant'),
|
||||||
TextEntry::make('generated_at')->dateTime()->placeholder('—'),
|
TextEntry::make('generated_at')->dateTime()->placeholder('—'),
|
||||||
TextEntry::make('expires_at')->dateTime()->placeholder('—'),
|
TextEntry::make('expires_at')->dateTime()->placeholder('—'),
|
||||||
TextEntry::make('operationRun.id')
|
TextEntry::make('operationRun.id')
|
||||||
@ -214,24 +205,6 @@ public static function infolist(Schema $schema): Schema
|
|||||||
RepeatableEntry::make('items')
|
RepeatableEntry::make('items')
|
||||||
->hiddenLabel()
|
->hiddenLabel()
|
||||||
->schema([
|
->schema([
|
||||||
TextEntry::make('artifact_source_family')
|
|
||||||
->label('Source family')
|
|
||||||
->badge()
|
|
||||||
->state(fn (EvidenceSnapshotItem $record): string => static::artifactDescriptorValue($record, 'source_family'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_kind')
|
|
||||||
->label('Source kind')
|
|
||||||
->state(fn (EvidenceSnapshotItem $record): string => static::artifactDescriptorValue($record, 'source_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_target')
|
|
||||||
->label('Source target')
|
|
||||||
->state(fn (EvidenceSnapshotItem $record): string => static::artifactDescriptorValue($record, 'source_target_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_control_key')
|
|
||||||
->label('Control')
|
|
||||||
->state(fn (EvidenceSnapshotItem $record): ?string => static::artifactDescriptorNullableValue($record, 'control_key'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state))
|
|
||||||
->placeholder('—'),
|
|
||||||
TextEntry::make('dimension_key')->label('Dimension')
|
TextEntry::make('dimension_key')->label('Dimension')
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
||||||
TextEntry::make('state')
|
TextEntry::make('state')
|
||||||
@ -240,7 +213,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->color(BadgeRenderer::color(BadgeDomain::EvidenceCompleteness))
|
->color(BadgeRenderer::color(BadgeDomain::EvidenceCompleteness))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::EvidenceCompleteness))
|
->icon(BadgeRenderer::icon(BadgeDomain::EvidenceCompleteness))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::EvidenceCompleteness)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::EvidenceCompleteness)),
|
||||||
TextEntry::make('source_kind')->label('Provider source detail')
|
TextEntry::make('source_kind')->label('Source')
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
||||||
TextEntry::make('freshness_at')->dateTime()->placeholder('—'),
|
TextEntry::make('freshness_at')->dateTime()->placeholder('—'),
|
||||||
ViewEntry::make('summary_payload_highlights')
|
ViewEntry::make('summary_payload_highlights')
|
||||||
@ -285,11 +258,13 @@ public static function relatedContextEntries(EvidenceSnapshot $record): array
|
|||||||
->latest('created_at')
|
->latest('created_at')
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if ($pack instanceof \App\Models\ReviewPack && $pack->tenant instanceof ManagedEnvironment) {
|
if ($pack instanceof \App\Models\ReviewPack && $pack->tenant instanceof Tenant) {
|
||||||
$packUrl = ReviewPackResource::getUrl('view', ['record' => $pack], tenant: $pack->tenant);
|
$packUrl = ReviewPackResource::getUrl('view', ['record' => $pack], tenant: $pack->tenant);
|
||||||
|
|
||||||
if (static::isCustomerWorkspaceFlow()) {
|
if (static::isCustomerWorkspaceFlow()) {
|
||||||
$packUrl = static::appendQuery($packUrl, static::customerWorkspaceContextQuery());
|
$packUrl = static::appendQuery($packUrl, [
|
||||||
|
'source_surface' => CustomerReviewWorkspace::SOURCE_SURFACE,
|
||||||
|
]);
|
||||||
}
|
}
|
||||||
|
|
||||||
$entries[] = RelatedContextEntry::available(
|
$entries[] = RelatedContextEntry::available(
|
||||||
@ -305,7 +280,7 @@ public static function relatedContextEntries(EvidenceSnapshot $record): array
|
|||||||
)->toArray();
|
)->toArray();
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment) {
|
if ($record->tenant instanceof Tenant) {
|
||||||
$entries[] = RelatedContextEntry::available(
|
$entries[] = RelatedContextEntry::available(
|
||||||
key: 'customer_review_workspace',
|
key: 'customer_review_workspace',
|
||||||
label: 'Customer workspace',
|
label: 'Customer workspace',
|
||||||
@ -327,19 +302,6 @@ public static function isCustomerWorkspaceFlow(): bool
|
|||||||
return request()->query('source_surface') === CustomerReviewWorkspace::SOURCE_SURFACE;
|
return request()->query('source_surface') === CustomerReviewWorkspace::SOURCE_SURFACE;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array<string, mixed>
|
|
||||||
*/
|
|
||||||
private static function customerWorkspaceContextQuery(): array
|
|
||||||
{
|
|
||||||
return array_filter([
|
|
||||||
'source_surface' => CustomerReviewWorkspace::SOURCE_SURFACE,
|
|
||||||
'review_id' => request()->query('review_id'),
|
|
||||||
'interpretation_version' => request()->query('interpretation_version'),
|
|
||||||
'tenant_filter_id' => request()->query('tenant_filter_id'),
|
|
||||||
], static fn (mixed $value): bool => $value !== null && $value !== '');
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param array<string, mixed> $query
|
* @param array<string, mixed> $query
|
||||||
*/
|
*/
|
||||||
@ -467,7 +429,7 @@ private static function dimensionSummaryPresentation(EvidenceSnapshotItem $item)
|
|||||||
{
|
{
|
||||||
$payload = is_array($item->summary_payload) ? $item->summary_payload : [];
|
$payload = is_array($item->summary_payload) ? $item->summary_payload : [];
|
||||||
|
|
||||||
$presentation = match ($item->dimension_key) {
|
return match ($item->dimension_key) {
|
||||||
'findings_summary' => static::findingsSummaryPresentation($payload),
|
'findings_summary' => static::findingsSummaryPresentation($payload),
|
||||||
'permission_posture' => static::permissionPosturePresentation($payload),
|
'permission_posture' => static::permissionPosturePresentation($payload),
|
||||||
'entra_admin_roles' => static::entraAdminRolesPresentation($payload),
|
'entra_admin_roles' => static::entraAdminRolesPresentation($payload),
|
||||||
@ -475,39 +437,6 @@ private static function dimensionSummaryPresentation(EvidenceSnapshotItem $item)
|
|||||||
'operations_summary' => static::operationsSummaryPresentation($payload),
|
'operations_summary' => static::operationsSummaryPresentation($payload),
|
||||||
default => static::genericSummaryPresentation($payload),
|
default => static::genericSummaryPresentation($payload),
|
||||||
};
|
};
|
||||||
|
|
||||||
$presentation['artifact_sources'] = [static::artifactSourceSummary($item)];
|
|
||||||
|
|
||||||
return $presentation;
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactDescriptorValue(EvidenceSnapshotItem $item, string $key): string
|
|
||||||
{
|
|
||||||
return (string) (static::artifactDescriptorNullableValue($item, $key) ?? 'unknown');
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactDescriptorNullableValue(EvidenceSnapshotItem $item, string $key): ?string
|
|
||||||
{
|
|
||||||
$descriptor = $item->artifactSourceDescriptor()->toArray();
|
|
||||||
$value = $descriptor[$key] ?? null;
|
|
||||||
|
|
||||||
return is_string($value) && trim($value) !== '' ? trim($value) : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @return array{source_family: string, source_kind: string, source_target_kind: string, control_key: ?string, detector_key: ?string}
|
|
||||||
*/
|
|
||||||
private static function artifactSourceSummary(EvidenceSnapshotItem $item): array
|
|
||||||
{
|
|
||||||
$descriptor = $item->artifactSourceDescriptor();
|
|
||||||
|
|
||||||
return [
|
|
||||||
'source_family' => $descriptor->sourceFamily,
|
|
||||||
'source_kind' => $descriptor->sourceKind,
|
|
||||||
'source_target_kind' => $descriptor->sourceTargetKind,
|
|
||||||
'control_key' => $descriptor->controlKey,
|
|
||||||
'detector_key' => $descriptor->detectorKey,
|
|
||||||
];
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -840,10 +769,10 @@ private static function stringifySummaryValue(mixed $value): string
|
|||||||
*/
|
*/
|
||||||
public static function executeGeneration(array $data): void
|
public static function executeGeneration(array $data): void
|
||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = Filament::getTenant();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
Notification::make()->danger()->title('Unable to create snapshot — missing context.')->send();
|
Notification::make()->danger()->title('Unable to create snapshot — missing context.')->send();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\EvidenceSnapshotResource;
|
use App\Filament\Resources\EvidenceSnapshotResource;
|
||||||
use App\Filament\Pages\Reviews\CustomerReviewWorkspace;
|
use App\Filament\Pages\Reviews\CustomerReviewWorkspace;
|
||||||
use App\Models\EvidenceSnapshot;
|
use App\Models\EvidenceSnapshot;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Audit\WorkspaceAuditLogger;
|
use App\Services\Audit\WorkspaceAuditLogger;
|
||||||
use App\Services\Evidence\EvidenceSnapshotService;
|
use App\Services\Evidence\EvidenceSnapshotService;
|
||||||
@ -122,7 +122,7 @@ private function auditCustomerWorkspaceProofOpen(): void
|
|||||||
|
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -133,9 +133,6 @@ private function auditCustomerWorkspaceProofOpen(): void
|
|||||||
'metadata' => [
|
'metadata' => [
|
||||||
'evidence_snapshot_id' => (int) $record->getKey(),
|
'evidence_snapshot_id' => (int) $record->getKey(),
|
||||||
'source_surface' => CustomerReviewWorkspace::SOURCE_SURFACE,
|
'source_surface' => CustomerReviewWorkspace::SOURCE_SURFACE,
|
||||||
'review_id' => request()->query('review_id'),
|
|
||||||
'tenant_filter_id' => request()->query('tenant_filter_id'),
|
|
||||||
'interpretation_version' => request()->query('interpretation_version'),
|
|
||||||
],
|
],
|
||||||
],
|
],
|
||||||
actor: $user,
|
actor: $user,
|
||||||
|
|||||||
@ -6,15 +6,13 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\FindingExceptionResource\Pages;
|
use App\Filament\Resources\FindingExceptionResource\Pages;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
use App\Models\FindingExceptionEvidenceReference;
|
use App\Models\FindingExceptionEvidenceReference;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\Workspace;
|
use App\Models\Workspace;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Services\Auth\WorkspaceCapabilityResolver;
|
use App\Services\Auth\WorkspaceCapabilityResolver;
|
||||||
use App\Services\Findings\FindingExceptionService;
|
use App\Services\Findings\FindingExceptionService;
|
||||||
use App\Services\Findings\FindingRiskGovernanceResolver;
|
use App\Services\Findings\FindingRiskGovernanceResolver;
|
||||||
@ -23,7 +21,6 @@
|
|||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\FilterOptionCatalog;
|
use App\Support\Filament\FilterOptionCatalog;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
@ -56,7 +53,6 @@ class FindingExceptionResource extends Resource
|
|||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = FindingException::class;
|
protected static ?string $model = FindingException::class;
|
||||||
|
|
||||||
@ -74,8 +70,11 @@ class FindingExceptionResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
@ -83,7 +82,7 @@ public static function canViewAny(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -99,7 +98,7 @@ public static function canView(Model $record): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -108,7 +107,7 @@ public static function canView(Model $record): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
return ! $record instanceof FindingException
|
return ! $record instanceof FindingException
|
||||||
|| ((int) $record->managed_environment_id === (int) $tenant->getKey() && (int) $record->workspace_id === (int) $tenant->workspace_id);
|
|| ((int) $record->tenant_id === (int) $tenant->getKey() && (int) $record->workspace_id === (int) $tenant->workspace_id);
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
@ -135,12 +134,12 @@ public static function exceptionStatsForCurrentTenant(): array
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return ['active' => 0, 'expiring' => 0, 'expired' => 0, 'pending' => 0, 'total' => 0];
|
return ['active' => 0, 'expiring' => 0, 'expired' => 0, 'pending' => 0, 'total' => 0];
|
||||||
}
|
}
|
||||||
|
|
||||||
$counts = FindingException::query()
|
$counts = FindingException::query()
|
||||||
->where('managed_environment_id', (int) $tenant->getKey())
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
->where('workspace_id', (int) $tenant->workspace_id)
|
->where('workspace_id', (int) $tenant->workspace_id)
|
||||||
->selectRaw('count(*) as total')
|
->selectRaw('count(*) as total')
|
||||||
->selectRaw("count(*) filter (where status = 'active') as active")
|
->selectRaw("count(*) filter (where status = 'active') as active")
|
||||||
@ -192,7 +191,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->color(fn (FindingException $record): string => static::governanceWarningColor($record))
|
->color(fn (FindingException $record): string => static::governanceWarningColor($record))
|
||||||
->columnSpanFull()
|
->columnSpanFull()
|
||||||
->visible(fn (FindingException $record): bool => static::governanceWarning($record) !== null),
|
->visible(fn (FindingException $record): bool => static::governanceWarning($record) !== null),
|
||||||
TextEntry::make('tenant.name')->label('ManagedEnvironment'),
|
TextEntry::make('tenant.name')->label('Tenant'),
|
||||||
TextEntry::make('finding_summary')
|
TextEntry::make('finding_summary')
|
||||||
->label('Finding')
|
->label('Finding')
|
||||||
->state(fn (FindingException $record): string => static::findingSummary($record)),
|
->state(fn (FindingException $record): string => static::findingSummary($record)),
|
||||||
@ -265,13 +264,13 @@ public static function relatedContextEntries(FindingException $record): array
|
|||||||
{
|
{
|
||||||
$entries = [];
|
$entries = [];
|
||||||
|
|
||||||
if ($record->finding && $record->tenant instanceof ManagedEnvironment) {
|
if ($record->finding && $record->tenant instanceof Tenant) {
|
||||||
$entries[] = RelatedContextEntry::available(
|
$entries[] = RelatedContextEntry::available(
|
||||||
key: 'finding',
|
key: 'finding',
|
||||||
label: 'Finding',
|
label: 'Finding',
|
||||||
value: static::findingSummary($record),
|
value: static::findingSummary($record),
|
||||||
secondaryValue: 'Return to the linked finding detail.',
|
secondaryValue: 'Return to the linked finding detail.',
|
||||||
targetUrl: FindingResource::getUrl('view', ['record' => $record->finding], tenant: $record->tenant),
|
targetUrl: FindingResource::getUrl('view', ['record' => $record->finding], panel: 'tenant', tenant: $record->tenant),
|
||||||
targetKind: 'direct_record',
|
targetKind: 'direct_record',
|
||||||
priority: 10,
|
priority: 10,
|
||||||
actionLabel: 'Open finding',
|
actionLabel: 'Open finding',
|
||||||
@ -279,7 +278,7 @@ public static function relatedContextEntries(FindingException $record): array
|
|||||||
)->toArray();
|
)->toArray();
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($record->tenant instanceof ManagedEnvironment && static::canAccessApprovalQueueForTenant($record->tenant)) {
|
if ($record->tenant instanceof Tenant && static::canAccessApprovalQueueForTenant($record->tenant)) {
|
||||||
$entries[] = RelatedContextEntry::available(
|
$entries[] = RelatedContextEntry::available(
|
||||||
key: 'approval_queue',
|
key: 'approval_queue',
|
||||||
label: 'Approval queue',
|
label: 'Approval queue',
|
||||||
@ -429,7 +428,7 @@ public static function table(Table $table): Table
|
|||||||
->action(function (FindingException $record, array $data, FindingExceptionService $service): void {
|
->action(function (FindingException $record, array $data, FindingExceptionService $service): void {
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $user instanceof User || ! $record->tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $record->tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -533,22 +532,16 @@ private static function tenantMemberOptions(): array
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var ManagedEnvironmentAccessScopeResolver $scopeResolver */
|
return \App\Models\TenantMembership::query()
|
||||||
$scopeResolver = app(ManagedEnvironmentAccessScopeResolver::class);
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
|
->join('users', 'users.id', '=', 'tenant_memberships.user_id')
|
||||||
return User::query()
|
->orderBy('users.name')
|
||||||
->whereHas('workspaceMemberships', fn (Builder $query): Builder => $query->where('workspace_id', (int) $tenant->workspace_id))
|
->pluck('users.name', 'users.id')
|
||||||
->orderBy('name')
|
->mapWithKeys(fn (string $name, int|string $id): array => [(int) $id => $name])
|
||||||
->orderBy('email')
|
|
||||||
->get(['id', 'name', 'email'])
|
|
||||||
->filter(fn (User $user): bool => $scopeResolver->canAccess($user, $tenant))
|
|
||||||
->mapWithKeys(fn (User $user): array => [
|
|
||||||
(int) $user->id => trim((string) ($user->name ?: $user->email)),
|
|
||||||
])
|
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -615,7 +608,7 @@ private static function canManageRecord(FindingException $record): bool
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
return $user instanceof User
|
return $user instanceof User
|
||||||
&& $record->tenant instanceof ManagedEnvironment
|
&& $record->tenant instanceof Tenant
|
||||||
&& $user->canAccessTenant($record->tenant)
|
&& $user->canAccessTenant($record->tenant)
|
||||||
&& $user->can(Capabilities::FINDING_EXCEPTION_MANAGE, $record->tenant);
|
&& $user->can(Capabilities::FINDING_EXCEPTION_MANAGE, $record->tenant);
|
||||||
}
|
}
|
||||||
@ -650,12 +643,12 @@ private static function governanceWarningColor(FindingException $record): string
|
|||||||
return 'danger';
|
return 'danger';
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canAccessApprovalQueueForTenant(?ManagedEnvironment $tenant = null): bool
|
public static function canAccessApprovalQueueForTenant(?Tenant $tenant = null): bool
|
||||||
{
|
{
|
||||||
$tenant ??= static::resolveTenantContextForCurrentPanel();
|
$tenant ??= static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -672,16 +665,16 @@ public static function canAccessApprovalQueueForTenant(?ManagedEnvironment $tena
|
|||||||
&& $resolver->can($user, $workspace, Capabilities::FINDING_EXCEPTION_APPROVE);
|
&& $resolver->can($user, $workspace, Capabilities::FINDING_EXCEPTION_APPROVE);
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function approvalQueueUrl(?ManagedEnvironment $tenant = null): ?string
|
public static function approvalQueueUrl(?Tenant $tenant = null): ?string
|
||||||
{
|
{
|
||||||
$tenant ??= static::resolveTenantContextForCurrentPanel();
|
$tenant ??= static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return route('admin.finding-exceptions.open-queue', [
|
return route('admin.finding-exceptions.open-queue', [
|
||||||
'environment' => (string) $tenant->external_id,
|
'tenant' => (string) $tenant->external_id,
|
||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -6,7 +6,7 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Filament\Widgets\ManagedEnvironment\FindingExceptionStatsOverview;
|
use App\Filament\Widgets\Tenant\FindingExceptionStatsOverview;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Resources\Pages\ListRecords;
|
use Filament\Resources\Pages\ListRecords;
|
||||||
|
|||||||
@ -6,12 +6,10 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\FindingExceptionResource;
|
use App\Filament\Resources\FindingExceptionResource;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Services\Findings\FindingExceptionService;
|
use App\Services\Findings\FindingExceptionService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
|
||||||
use App\Support\Ui\GovernanceActions\GovernanceActionCatalog;
|
use App\Support\Ui\GovernanceActions\GovernanceActionCatalog;
|
||||||
use Filament\Actions\Action;
|
use Filament\Actions\Action;
|
||||||
use Filament\Forms\Components\DateTimePicker;
|
use Filament\Forms\Components\DateTimePicker;
|
||||||
@ -21,7 +19,6 @@
|
|||||||
use Filament\Forms\Components\TextInput;
|
use Filament\Forms\Components\TextInput;
|
||||||
use Filament\Notifications\Notification;
|
use Filament\Notifications\Notification;
|
||||||
use Filament\Resources\Pages\ViewRecord;
|
use Filament\Resources\Pages\ViewRecord;
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
use InvalidArgumentException;
|
use InvalidArgumentException;
|
||||||
|
|
||||||
@ -39,18 +36,7 @@ protected function getHeaderActions(): array
|
|||||||
$renewRule = GovernanceActionCatalog::rule('renew_exception');
|
$renewRule = GovernanceActionCatalog::rule('renew_exception');
|
||||||
$revokeRule = GovernanceActionCatalog::rule('revoke_exception');
|
$revokeRule = GovernanceActionCatalog::rule('revoke_exception');
|
||||||
|
|
||||||
$actions = [];
|
return [
|
||||||
$navigationContext = $this->navigationContext();
|
|
||||||
|
|
||||||
if ($navigationContext?->backLinkLabel !== null && $navigationContext->backLinkUrl !== null) {
|
|
||||||
$actions[] = Action::make('return_to_decision_register')
|
|
||||||
->label($navigationContext->backLinkLabel)
|
|
||||||
->icon('heroicon-o-arrow-left')
|
|
||||||
->color('gray')
|
|
||||||
->url($navigationContext->backLinkUrl);
|
|
||||||
}
|
|
||||||
|
|
||||||
return array_merge($actions, [
|
|
||||||
Action::make('renew_exception')
|
Action::make('renew_exception')
|
||||||
->label($renewRule->canonicalLabel)
|
->label($renewRule->canonicalLabel)
|
||||||
->icon('heroicon-o-arrow-path')
|
->icon('heroicon-o-arrow-path')
|
||||||
@ -173,18 +159,7 @@ protected function getHeaderActions(): array
|
|||||||
|
|
||||||
$this->refreshFormData(['status', 'current_validity_state', 'revocation_reason', 'revoked_at']);
|
$this->refreshFormData(['status', 'current_validity_state', 'revocation_reason', 'revoked_at']);
|
||||||
}),
|
}),
|
||||||
]);
|
];
|
||||||
}
|
|
||||||
|
|
||||||
public function getSubheading(): ?string
|
|
||||||
{
|
|
||||||
$navigationContext = $this->navigationContext();
|
|
||||||
|
|
||||||
if ($navigationContext?->sourceSurface === 'governance.decision_register') {
|
|
||||||
return 'Opened from the workspace decision register. Use the back action to return to the same register scope.';
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -200,22 +175,16 @@ private function tenantMemberOptions(): array
|
|||||||
|
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var ManagedEnvironmentAccessScopeResolver $scopeResolver */
|
return \App\Models\TenantMembership::query()
|
||||||
$scopeResolver = app(ManagedEnvironmentAccessScopeResolver::class);
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
|
->join('users', 'users.id', '=', 'tenant_memberships.user_id')
|
||||||
return User::query()
|
->orderBy('users.name')
|
||||||
->whereHas('workspaceMemberships', fn (Builder $query): Builder => $query->where('workspace_id', (int) $tenant->workspace_id))
|
->pluck('users.name', 'users.id')
|
||||||
->orderBy('name')
|
->mapWithKeys(fn (string $name, int|string $id): array => [(int) $id => $name])
|
||||||
->orderBy('email')
|
|
||||||
->get(['id', 'name', 'email'])
|
|
||||||
->filter(fn (User $user): bool => $scopeResolver->canAccess($user, $tenant))
|
|
||||||
->mapWithKeys(fn (User $user): array => [
|
|
||||||
(int) $user->id => trim((string) ($user->name ?: $user->email)),
|
|
||||||
])
|
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -225,14 +194,9 @@ private function canManageRecord(): bool
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
return $record instanceof FindingException
|
return $record instanceof FindingException
|
||||||
&& $record->tenant instanceof ManagedEnvironment
|
&& $record->tenant instanceof Tenant
|
||||||
&& $user instanceof User
|
&& $user instanceof User
|
||||||
&& $user->canAccessTenant($record->tenant)
|
&& $user->canAccessTenant($record->tenant)
|
||||||
&& $user->can(Capabilities::FINDING_EXCEPTION_MANAGE, $record->tenant);
|
&& $user->can(Capabilities::FINDING_EXCEPTION_MANAGE, $record->tenant);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function navigationContext(): ?CanonicalNavigationContext
|
|
||||||
{
|
|
||||||
return CanonicalNavigationContext::fromRequest(request());
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,15 +4,14 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\FindingResource\Pages;
|
use App\Filament\Resources\FindingResource\Pages;
|
||||||
use App\Filament\Support\NormalizedDiffSurface;
|
use App\Filament\Support\NormalizedDiffSurface;
|
||||||
use App\Models\Finding;
|
use App\Models\Finding;
|
||||||
use App\Models\FindingException;
|
use App\Models\FindingException;
|
||||||
use App\Models\PolicyVersion;
|
use App\Models\PolicyVersion;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
|
use App\Models\TenantMembership;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Services\Drift\DriftFindingDiffBuilder;
|
use App\Services\Drift\DriftFindingDiffBuilder;
|
||||||
use App\Services\Findings\FindingExceptionService;
|
use App\Services\Findings\FindingExceptionService;
|
||||||
use App\Services\Findings\FindingRiskGovernanceResolver;
|
use App\Services\Findings\FindingRiskGovernanceResolver;
|
||||||
@ -26,7 +25,6 @@
|
|||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\CanonicalNavigationContext;
|
use App\Support\Navigation\CanonicalNavigationContext;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
@ -60,7 +58,6 @@
|
|||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
use Illuminate\Support\Arr;
|
use Illuminate\Support\Arr;
|
||||||
use Illuminate\Support\Collection;
|
use Illuminate\Support\Collection;
|
||||||
use Illuminate\Support\Str;
|
|
||||||
use InvalidArgumentException;
|
use InvalidArgumentException;
|
||||||
use Throwable;
|
use Throwable;
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
@ -69,7 +66,6 @@ class FindingResource extends Resource
|
|||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = Finding::class;
|
protected static ?string $model = Finding::class;
|
||||||
|
|
||||||
@ -81,8 +77,11 @@ class FindingResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function getNavigationLabel(): string
|
public static function getNavigationLabel(): string
|
||||||
@ -111,7 +110,7 @@ public static function canViewAny(): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -128,7 +127,7 @@ public static function canView(Model $record): bool
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -141,7 +140,7 @@ public static function canView(Model $record): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
if ($record instanceof Finding) {
|
if ($record instanceof Finding) {
|
||||||
return (int) $record->managed_environment_id === (int) $tenant->getKey()
|
return (int) $record->tenant_id === (int) $tenant->getKey()
|
||||||
&& (int) $record->workspace_id === (int) $tenant->workspace_id;
|
&& (int) $record->workspace_id === (int) $tenant->workspace_id;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -255,50 +254,9 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->columns(2)
|
->columns(2)
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
|
|
||||||
Section::make('Artifact source')
|
|
||||||
->schema([
|
|
||||||
TextEntry::make('artifact_source_family')
|
|
||||||
->label('Source family')
|
|
||||||
->badge()
|
|
||||||
->state(fn (Finding $record): string => static::artifactDescriptorValue($record, 'source_family'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_kind')
|
|
||||||
->label('Source kind')
|
|
||||||
->state(fn (Finding $record): string => static::artifactDescriptorValue($record, 'source_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_target')
|
|
||||||
->label('Source target')
|
|
||||||
->state(fn (Finding $record): string => static::artifactDescriptorValue($record, 'source_target_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_target_identifier')
|
|
||||||
->label('Target identifier')
|
|
||||||
->state(fn (Finding $record): ?string => static::artifactDescriptorNullableValue($record, 'source_target_identifier'))
|
|
||||||
->copyable()
|
|
||||||
->placeholder('—'),
|
|
||||||
TextEntry::make('artifact_detector_key')
|
|
||||||
->label('Detector')
|
|
||||||
->state(fn (Finding $record): ?string => static::artifactDescriptorNullableValue($record, 'detector_key'))
|
|
||||||
->placeholder('—'),
|
|
||||||
TextEntry::make('artifact_control_key')
|
|
||||||
->label('Control')
|
|
||||||
->state(fn (Finding $record): ?string => static::artifactDescriptorNullableValue($record, 'control_key'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state))
|
|
||||||
->placeholder('—'),
|
|
||||||
TextEntry::make('artifact_provider_key')
|
|
||||||
->label('Provider')
|
|
||||||
->state(fn (Finding $record): string => static::artifactDescriptorValue($record, 'provider_key'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_provider_object_type')
|
|
||||||
->label('Provider object type')
|
|
||||||
->state(fn (Finding $record): ?string => static::artifactProviderDetailValue($record, 'provider_object_type'))
|
|
||||||
->placeholder('—'),
|
|
||||||
])
|
|
||||||
->columns(2)
|
|
||||||
->columnSpanFull(),
|
|
||||||
|
|
||||||
Section::make('Finding')
|
Section::make('Finding')
|
||||||
->schema([
|
->schema([
|
||||||
TextEntry::make('finding_type')->badge()->label('Provider finding type'),
|
TextEntry::make('finding_type')->badge()->label('Type'),
|
||||||
TextEntry::make('drift_surface_label')
|
TextEntry::make('drift_surface_label')
|
||||||
->label('Drift surface')
|
->label('Drift surface')
|
||||||
->badge()
|
->badge()
|
||||||
@ -721,17 +679,17 @@ private static function driftDiffUnavailableMessage(Finding $record): string
|
|||||||
/**
|
/**
|
||||||
* @return array{0: ?PolicyVersion, 1: ?PolicyVersion}
|
* @return array{0: ?PolicyVersion, 1: ?PolicyVersion}
|
||||||
*/
|
*/
|
||||||
private static function resolveDriftDiffVersions(Finding $record, ManagedEnvironment $tenant): array
|
private static function resolveDriftDiffVersions(Finding $record, Tenant $tenant): array
|
||||||
{
|
{
|
||||||
$baselineId = Arr::get($record->evidence_jsonb ?? [], 'baseline.policy_version_id');
|
$baselineId = Arr::get($record->evidence_jsonb ?? [], 'baseline.policy_version_id');
|
||||||
$currentId = Arr::get($record->evidence_jsonb ?? [], 'current.policy_version_id');
|
$currentId = Arr::get($record->evidence_jsonb ?? [], 'current.policy_version_id');
|
||||||
|
|
||||||
$baselineVersion = is_numeric($baselineId)
|
$baselineVersion = is_numeric($baselineId)
|
||||||
? PolicyVersion::query()->where('managed_environment_id', $tenant->getKey())->find((int) $baselineId)
|
? PolicyVersion::query()->where('tenant_id', $tenant->getKey())->find((int) $baselineId)
|
||||||
: null;
|
: null;
|
||||||
|
|
||||||
$currentVersion = is_numeric($currentId)
|
$currentVersion = is_numeric($currentId)
|
||||||
? PolicyVersion::query()->where('managed_environment_id', $tenant->getKey())->find((int) $currentId)
|
? PolicyVersion::query()->where('tenant_id', $tenant->getKey())->find((int) $currentId)
|
||||||
: null;
|
: null;
|
||||||
|
|
||||||
return [$baselineVersion, $currentVersion];
|
return [$baselineVersion, $currentVersion];
|
||||||
@ -1016,7 +974,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1031,7 +989,7 @@ public static function table(Table $table): Table
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
$skippedCount++;
|
$skippedCount++;
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
@ -1099,7 +1057,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1118,7 +1076,7 @@ public static function table(Table $table): Table
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
$skippedCount++;
|
$skippedCount++;
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
@ -1191,7 +1149,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1208,7 +1166,7 @@ public static function table(Table $table): Table
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
$skippedCount++;
|
$skippedCount++;
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
@ -1270,7 +1228,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1287,7 +1245,7 @@ public static function table(Table $table): Table
|
|||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
$skippedCount++;
|
$skippedCount++;
|
||||||
|
|
||||||
continue;
|
continue;
|
||||||
@ -1411,35 +1369,14 @@ private static function findingRunNavigationContext(Finding $record): CanonicalN
|
|||||||
tenantId: $tenant?->getKey(),
|
tenantId: $tenant?->getKey(),
|
||||||
backLinkLabel: 'Back to finding',
|
backLinkLabel: 'Back to finding',
|
||||||
backLinkUrl: static::getUrl('view', ['record' => $record], tenant: $tenant),
|
backLinkUrl: static::getUrl('view', ['record' => $record], tenant: $tenant),
|
||||||
filterPayload: $tenant instanceof ManagedEnvironment ? [
|
filterPayload: $tenant instanceof Tenant ? [
|
||||||
'tableFilters' => [
|
'tableFilters' => [
|
||||||
'managed_environment_id' => ['value' => (string) $tenant->getKey()],
|
'tenant_id' => ['value' => (string) $tenant->getKey()],
|
||||||
],
|
],
|
||||||
] : [],
|
] : [],
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function artifactDescriptorValue(Finding $record, string $key): string
|
|
||||||
{
|
|
||||||
return (string) (static::artifactDescriptorNullableValue($record, $key) ?? 'unknown');
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactDescriptorNullableValue(Finding $record, string $key): ?string
|
|
||||||
{
|
|
||||||
$descriptor = $record->artifactSourceDescriptor()->toArray();
|
|
||||||
$value = $descriptor[$key] ?? null;
|
|
||||||
|
|
||||||
return is_string($value) && trim($value) !== '' ? trim($value) : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactProviderDetailValue(Finding $record, string $key): ?string
|
|
||||||
{
|
|
||||||
$detail = $record->artifactProviderDetail()->toArray();
|
|
||||||
$value = $detail[$key] ?? null;
|
|
||||||
|
|
||||||
return is_string($value) && trim($value) !== '' ? trim($value) : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function getPages(): array
|
public static function getPages(): array
|
||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
@ -1481,7 +1418,7 @@ public static function triageAction(): Actions\Action
|
|||||||
static::runWorkflowMutation(
|
static::runWorkflowMutation(
|
||||||
record: $record,
|
record: $record,
|
||||||
successTitle: 'Finding triaged',
|
successTitle: 'Finding triaged',
|
||||||
callback: fn (Finding $finding, ManagedEnvironment $tenant, User $user): Finding => $workflow->triage($finding, $tenant, $user),
|
callback: fn (Finding $finding, Tenant $tenant, User $user): Finding => $workflow->triage($finding, $tenant, $user),
|
||||||
);
|
);
|
||||||
})
|
})
|
||||||
)
|
)
|
||||||
@ -1505,7 +1442,7 @@ public static function startProgressAction(): Actions\Action
|
|||||||
static::runWorkflowMutation(
|
static::runWorkflowMutation(
|
||||||
record: $record,
|
record: $record,
|
||||||
successTitle: 'Finding moved to in progress',
|
successTitle: 'Finding moved to in progress',
|
||||||
callback: fn (Finding $finding, ManagedEnvironment $tenant, User $user): Finding => $workflow->startProgress($finding, $tenant, $user),
|
callback: fn (Finding $finding, Tenant $tenant, User $user): Finding => $workflow->startProgress($finding, $tenant, $user),
|
||||||
);
|
);
|
||||||
})
|
})
|
||||||
)
|
)
|
||||||
@ -1577,7 +1514,7 @@ public static function resolveAction(): Actions\Action
|
|||||||
static::runWorkflowMutation(
|
static::runWorkflowMutation(
|
||||||
record: $record,
|
record: $record,
|
||||||
successTitle: $rule->successTitle,
|
successTitle: $rule->successTitle,
|
||||||
callback: fn (Finding $finding, ManagedEnvironment $tenant, User $user): Finding => $workflow->resolve(
|
callback: fn (Finding $finding, Tenant $tenant, User $user): Finding => $workflow->resolve(
|
||||||
$finding,
|
$finding,
|
||||||
$tenant,
|
$tenant,
|
||||||
$user,
|
$user,
|
||||||
@ -1618,7 +1555,7 @@ public static function closeAction(): Actions\Action
|
|||||||
static::runWorkflowMutation(
|
static::runWorkflowMutation(
|
||||||
record: $record,
|
record: $record,
|
||||||
successTitle: $rule->successTitle,
|
successTitle: $rule->successTitle,
|
||||||
callback: fn (Finding $finding, ManagedEnvironment $tenant, User $user): Finding => $workflow->close(
|
callback: fn (Finding $finding, Tenant $tenant, User $user): Finding => $workflow->close(
|
||||||
$finding,
|
$finding,
|
||||||
$tenant,
|
$tenant,
|
||||||
$user,
|
$user,
|
||||||
@ -1823,7 +1760,7 @@ public static function reopenAction(): Actions\Action
|
|||||||
static::runWorkflowMutation(
|
static::runWorkflowMutation(
|
||||||
record: $record,
|
record: $record,
|
||||||
successTitle: $rule->successTitle,
|
successTitle: $rule->successTitle,
|
||||||
callback: fn (Finding $finding, ManagedEnvironment $tenant, User $user): Finding => $workflow->reopen(
|
callback: fn (Finding $finding, Tenant $tenant, User $user): Finding => $workflow->reopen(
|
||||||
$finding,
|
$finding,
|
||||||
$tenant,
|
$tenant,
|
||||||
$user,
|
$user,
|
||||||
@ -1839,7 +1776,7 @@ public static function reopenAction(): Actions\Action
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param callable(Finding, ManagedEnvironment, User): Finding $callback
|
* @param callable(Finding, Tenant, User): Finding $callback
|
||||||
*/
|
*/
|
||||||
private static function runWorkflowMutation(Finding $record, string $successTitle, callable $callback): void
|
private static function runWorkflowMutation(Finding $record, string $successTitle, callable $callback): void
|
||||||
{
|
{
|
||||||
@ -1848,11 +1785,11 @@ private static function runWorkflowMutation(Finding $record, string $successTitl
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Finding belongs to a different tenant')
|
->title('Finding belongs to a different tenant')
|
||||||
->danger()
|
->danger()
|
||||||
@ -1900,11 +1837,11 @@ private static function runResponsibilityMutation(Finding $record, array $data,
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ((int) $record->managed_environment_id !== (int) $tenant->getKey()) {
|
if ((int) $record->tenant_id !== (int) $tenant->getKey()) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Finding belongs to a different tenant')
|
->title('Finding belongs to a different tenant')
|
||||||
->danger()
|
->danger()
|
||||||
@ -1969,7 +1906,7 @@ private static function runExceptionRequestMutation(Finding $record, array $data
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -2005,7 +1942,7 @@ private static function runExceptionRenewalMutation(Finding $record, array $data
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -2041,7 +1978,7 @@ private static function runExceptionRevocationMutation(Finding $record, array $d
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -2137,7 +2074,7 @@ private static function resolveCurrentFindingExceptionOrFail(Finding $record): F
|
|||||||
return $exception;
|
return $exception;
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function findingExceptionViewUrl(\App\Models\FindingException $exception, ManagedEnvironment $tenant): string
|
private static function findingExceptionViewUrl(\App\Models\FindingException $exception, Tenant $tenant): string
|
||||||
{
|
{
|
||||||
$panelId = Filament::getCurrentPanel()?->getId();
|
$panelId = Filament::getCurrentPanel()?->getId();
|
||||||
|
|
||||||
@ -2145,7 +2082,7 @@ private static function findingExceptionViewUrl(\App\Models\FindingException $ex
|
|||||||
return FindingExceptionResource::getUrl('view', ['record' => $exception], panel: 'admin');
|
return FindingExceptionResource::getUrl('view', ['record' => $exception], panel: 'admin');
|
||||||
}
|
}
|
||||||
|
|
||||||
return FindingExceptionResource::getUrl('view', ['record' => $exception], tenant: $tenant);
|
return FindingExceptionResource::getUrl('view', ['record' => $exception], panel: 'tenant', tenant: $tenant);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -2451,22 +2388,16 @@ private static function tenantMemberOptions(): array
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var ManagedEnvironmentAccessScopeResolver $scopeResolver */
|
return TenantMembership::query()
|
||||||
$scopeResolver = app(ManagedEnvironmentAccessScopeResolver::class);
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
|
->join('users', 'users.id', '=', 'tenant_memberships.user_id')
|
||||||
return User::query()
|
->orderBy('users.name')
|
||||||
->whereHas('workspaceMemberships', fn (Builder $query): Builder => $query->where('workspace_id', (int) $tenant->workspace_id))
|
->pluck('users.name', 'users.id')
|
||||||
->orderBy('name')
|
->mapWithKeys(fn (string $name, int|string $id): array => [(int) $id => $name])
|
||||||
->orderBy('email')
|
|
||||||
->get(['id', 'name', 'email'])
|
|
||||||
->filter(fn (User $user): bool => $scopeResolver->canAccess($user, $tenant))
|
|
||||||
->mapWithKeys(fn (User $user): array => [
|
|
||||||
(int) $user->id => trim((string) ($user->name ?: $user->email)),
|
|
||||||
])
|
|
||||||
->all();
|
->all();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -2477,14 +2408,14 @@ public static function findingStatsForCurrentTenant(): array
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return ['open' => 0, 'overdue' => 0, 'high_severity' => 0, 'risk_accepted' => 0, 'total' => 0];
|
return ['open' => 0, 'overdue' => 0, 'high_severity' => 0, 'risk_accepted' => 0, 'total' => 0];
|
||||||
}
|
}
|
||||||
|
|
||||||
$now = now()->toDateTimeString();
|
$now = now()->toDateTimeString();
|
||||||
|
|
||||||
$counts = Finding::query()
|
$counts = Finding::query()
|
||||||
->where('managed_environment_id', (int) $tenant->getKey())
|
->where('tenant_id', (int) $tenant->getKey())
|
||||||
->selectRaw('count(*) as total')
|
->selectRaw('count(*) as total')
|
||||||
->selectRaw("sum(case when status in ('new', 'triaged', 'in_progress', 'reopened') then 1 else 0 end) as open")
|
->selectRaw("sum(case when status in ('new', 'triaged', 'in_progress', 'reopened') then 1 else 0 end) as open")
|
||||||
->selectRaw("sum(case when status in ('new', 'triaged', 'in_progress', 'reopened') and due_at is not null and due_at < ? then 1 else 0 end) as overdue", [$now])
|
->selectRaw("sum(case when status in ('new', 'triaged', 'in_progress', 'reopened') and due_at is not null and due_at < ? then 1 else 0 end) as overdue", [$now])
|
||||||
|
|||||||
@ -4,10 +4,10 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Resources\FindingResource;
|
use App\Filament\Resources\FindingResource;
|
||||||
use App\Filament\Widgets\ManagedEnvironment\BaselineCompareCoverageBanner;
|
use App\Filament\Widgets\Tenant\BaselineCompareCoverageBanner;
|
||||||
use App\Filament\Widgets\ManagedEnvironment\FindingStatsOverview;
|
use App\Filament\Widgets\Tenant\FindingStatsOverview;
|
||||||
use App\Models\Finding;
|
use App\Models\Finding;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Findings\FindingWorkflowService;
|
use App\Services\Findings\FindingWorkflowService;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -152,7 +152,7 @@ protected function getHeaderActions(): array
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -5,10 +5,9 @@
|
|||||||
use App\Filament\Clusters\Inventory\InventoryCluster;
|
use App\Filament\Clusters\Inventory\InventoryCluster;
|
||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\InventoryItemResource\Pages;
|
use App\Filament\Resources\InventoryItemResource\Pages;
|
||||||
use App\Models\InventoryItem;
|
use App\Models\InventoryItem;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -18,17 +17,14 @@
|
|||||||
use App\Support\Badges\TagBadgeRenderer;
|
use App\Support\Badges\TagBadgeRenderer;
|
||||||
use App\Support\Filament\FilterOptionCatalog;
|
use App\Support\Filament\FilterOptionCatalog;
|
||||||
use App\Support\Inventory\InventoryPolicyTypeMeta;
|
use App\Support\Inventory\InventoryPolicyTypeMeta;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
use App\Support\Ui\ActionSurface\ActionSurfaceDeclaration;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceInspectAffordance;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceProfile;
|
||||||
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
use App\Support\Ui\ActionSurface\Enums\ActionSurfaceSlot;
|
||||||
use BackedEnum;
|
use BackedEnum;
|
||||||
use Closure;
|
|
||||||
use Filament\Facades\Filament;
|
use Filament\Facades\Filament;
|
||||||
use Filament\Infolists\Components\TextEntry;
|
use Filament\Infolists\Components\TextEntry;
|
||||||
use Filament\Panel;
|
|
||||||
use Filament\Infolists\Components\ViewEntry;
|
use Filament\Infolists\Components\ViewEntry;
|
||||||
use Filament\Resources\Resource;
|
use Filament\Resources\Resource;
|
||||||
use Filament\Schemas\Components\Section;
|
use Filament\Schemas\Components\Section;
|
||||||
@ -37,15 +33,12 @@
|
|||||||
use Filament\Tables\Table;
|
use Filament\Tables\Table;
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
use Illuminate\Database\Eloquent\Builder;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
use Illuminate\Support\Str;
|
|
||||||
use Illuminate\Support\Facades\Route;
|
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
|
|
||||||
class InventoryItemResource extends Resource
|
class InventoryItemResource extends Resource
|
||||||
{
|
{
|
||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = InventoryItem::class;
|
protected static ?string $model = InventoryItem::class;
|
||||||
|
|
||||||
@ -61,40 +54,11 @@ class InventoryItemResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
}
|
|
||||||
|
|
||||||
public static function getRouteBaseName(?Panel $panel = null): string
|
|
||||||
{
|
|
||||||
$panel ??= Filament::getCurrentOrDefaultPanel();
|
|
||||||
|
|
||||||
if ($panel->getId() !== 'admin') {
|
|
||||||
return parent::getRouteBaseName($panel);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
return $panel->generateRouteName(
|
return parent::shouldRegisterNavigation();
|
||||||
(string) str(static::getSlug($panel))
|
|
||||||
->replace('/', '.')
|
|
||||||
->prepend('resources.'),
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function registerRoutes(Panel $panel, ?Closure $registerPageRoutes = null): void
|
|
||||||
{
|
|
||||||
if ($panel->getId() !== 'admin') {
|
|
||||||
parent::registerRoutes($panel, $registerPageRoutes);
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$registerPageRoutes ??= function () use ($panel): void {
|
|
||||||
foreach (static::getPages() as $name => $page) {
|
|
||||||
$page->registerRoute($panel)?->name($name);
|
|
||||||
}
|
|
||||||
};
|
|
||||||
|
|
||||||
Route::name('resources.')->group(fn () => static::routes($panel, $registerPageRoutes));
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
@ -112,7 +76,7 @@ public static function canViewAny(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -127,7 +91,7 @@ public static function canView(Model $record): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -142,7 +106,7 @@ public static function canView(Model $record): bool
|
|||||||
}
|
}
|
||||||
|
|
||||||
if ($record instanceof InventoryItem) {
|
if ($record instanceof InventoryItem) {
|
||||||
return (int) $record->managed_environment_id === (int) $tenant->getKey();
|
return (int) $record->tenant_id === (int) $tenant->getKey();
|
||||||
}
|
}
|
||||||
|
|
||||||
return true;
|
return true;
|
||||||
@ -157,47 +121,11 @@ public static function infolist(Schema $schema): Schema
|
|||||||
{
|
{
|
||||||
return $schema
|
return $schema
|
||||||
->schema([
|
->schema([
|
||||||
Section::make('Artifact source')
|
|
||||||
->schema([
|
|
||||||
TextEntry::make('artifact_source_family')
|
|
||||||
->label('Source family')
|
|
||||||
->badge()
|
|
||||||
->state(fn (InventoryItem $record): string => static::artifactDescriptorValue($record, 'source_family'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_kind')
|
|
||||||
->label('Source kind')
|
|
||||||
->state(fn (InventoryItem $record): string => static::artifactDescriptorValue($record, 'source_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_source_target')
|
|
||||||
->label('Source target')
|
|
||||||
->state(fn (InventoryItem $record): string => static::artifactDescriptorValue($record, 'source_target_kind'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('artifact_control_key')
|
|
||||||
->label('Control')
|
|
||||||
->state(fn (InventoryItem $record): ?string => static::artifactDescriptorNullableValue($record, 'control_key'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state))
|
|
||||||
->placeholder('—'),
|
|
||||||
])
|
|
||||||
->columns(2)
|
|
||||||
->columnSpanFull(),
|
|
||||||
|
|
||||||
Section::make('Inventory Item')
|
Section::make('Inventory Item')
|
||||||
->schema([
|
->schema([
|
||||||
TextEntry::make('display_name')->label('Name'),
|
TextEntry::make('display_name')->label('Name'),
|
||||||
TextEntry::make('canonical_type')
|
|
||||||
->label('Canonical type')
|
|
||||||
->badge()
|
|
||||||
->state(fn (InventoryItem $record): string => static::typeDescriptorValue($record, 'canonical_type'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
TextEntry::make('provider_display_type')
|
|
||||||
->label('Provider display type')
|
|
||||||
->state(fn (InventoryItem $record): string => static::typeDescriptorValue($record, 'provider_display_type')),
|
|
||||||
TextEntry::make('provider_object_type')
|
|
||||||
->label('Provider object type')
|
|
||||||
->state(fn (InventoryItem $record): string => static::typeDescriptorValue($record, 'provider_object_type'))
|
|
||||||
->copyable(),
|
|
||||||
TextEntry::make('policy_type')
|
TextEntry::make('policy_type')
|
||||||
->label('Legacy policy type')
|
->label('Type')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
||||||
@ -223,7 +151,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
|
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return OperationRunLinks::view((int) $record->last_seen_operation_run_id, $tenant);
|
return OperationRunLinks::view((int) $record->last_seen_operation_run_id, $tenant);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -291,20 +219,11 @@ public static function table(Table $table): Table
|
|||||||
->label('Name')
|
->label('Name')
|
||||||
->searchable()
|
->searchable()
|
||||||
->sortable(),
|
->sortable(),
|
||||||
Tables\Columns\TextColumn::make('canonical_type')
|
|
||||||
->label('Canonical type')
|
|
||||||
->badge()
|
|
||||||
->getStateUsing(fn (InventoryItem $record): string => static::typeDescriptorValue($record, 'canonical_type'))
|
|
||||||
->formatStateUsing(fn (string $state): string => Str::headline($state)),
|
|
||||||
Tables\Columns\TextColumn::make('provider_display_type')
|
|
||||||
->label('Provider display type')
|
|
||||||
->getStateUsing(fn (InventoryItem $record): string => static::typeDescriptorValue($record, 'provider_display_type')),
|
|
||||||
Tables\Columns\TextColumn::make('policy_type')
|
Tables\Columns\TextColumn::make('policy_type')
|
||||||
->label('Legacy policy type')
|
->label('Type')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType))
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
||||||
->toggleable(isToggledHiddenByDefault: true),
|
|
||||||
Tables\Columns\TextColumn::make('category')
|
Tables\Columns\TextColumn::make('category')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyCategory))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyCategory))
|
||||||
@ -433,27 +352,6 @@ private static function typeMeta(?string $type): array
|
|||||||
return InventoryPolicyTypeMeta::metaFor($type);
|
return InventoryPolicyTypeMeta::metaFor($type);
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function typeDescriptorValue(InventoryItem $record, string $key): string
|
|
||||||
{
|
|
||||||
$descriptor = $record->inventoryTypeDescriptor();
|
|
||||||
$value = $descriptor[$key] ?? null;
|
|
||||||
|
|
||||||
return is_string($value) && trim($value) !== '' ? trim($value) : 'unknown';
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactDescriptorValue(InventoryItem $record, string $key): string
|
|
||||||
{
|
|
||||||
return (string) (static::artifactDescriptorNullableValue($record, $key) ?? 'unknown');
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function artifactDescriptorNullableValue(InventoryItem $record, string $key): ?string
|
|
||||||
{
|
|
||||||
$descriptor = $record->artifactSourceDescriptor()->toArray();
|
|
||||||
$value = $descriptor[$key] ?? null;
|
|
||||||
|
|
||||||
return is_string($value) && trim($value) !== '' ? trim($value) : null;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @return array<int, array<string, mixed>>
|
* @return array<int, array<string, mixed>>
|
||||||
*/
|
*/
|
||||||
|
|||||||
@ -6,7 +6,7 @@
|
|||||||
use App\Filament\Resources\InventoryItemResource;
|
use App\Filament\Resources\InventoryItemResource;
|
||||||
use App\Filament\Widgets\Inventory\InventoryKpiHeader;
|
use App\Filament\Widgets\Inventory\InventoryKpiHeader;
|
||||||
use App\Jobs\RunInventorySyncJob;
|
use App\Jobs\RunInventorySyncJob;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Services\Inventory\InventorySyncService;
|
use App\Services\Inventory\InventorySyncService;
|
||||||
@ -28,7 +28,6 @@
|
|||||||
use Filament\Forms\Components\Toggle;
|
use Filament\Forms\Components\Toggle;
|
||||||
use Filament\Notifications\Notification;
|
use Filament\Notifications\Notification;
|
||||||
use Filament\Resources\Pages\ListRecords;
|
use Filament\Resources\Pages\ListRecords;
|
||||||
use Filament\Support\Enums\Width;
|
|
||||||
use Filament\Support\Enums\Size;
|
use Filament\Support\Enums\Size;
|
||||||
|
|
||||||
class ListInventoryItems extends ListRecords
|
class ListInventoryItems extends ListRecords
|
||||||
@ -37,8 +36,6 @@ class ListInventoryItems extends ListRecords
|
|||||||
|
|
||||||
protected static string $resource = InventoryItemResource::class;
|
protected static string $resource = InventoryItemResource::class;
|
||||||
|
|
||||||
protected Width|string|null $maxContentWidth = Width::Full;
|
|
||||||
|
|
||||||
public function mount(): void
|
public function mount(): void
|
||||||
{
|
{
|
||||||
app(CanonicalAdminTenantFilterState::class)->sync(
|
app(CanonicalAdminTenantFilterState::class)->sync(
|
||||||
@ -49,7 +46,7 @@ public function mount(): void
|
|||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
app(WorkspaceContext::class)->rememberTenantContext($tenant, request());
|
app(WorkspaceContext::class)->rememberTenantContext($tenant, request());
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -128,7 +125,7 @@ protected function getHeaderActions(): array
|
|||||||
->dehydrated()
|
->dehydrated()
|
||||||
->rules(['boolean'])
|
->rules(['boolean'])
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
Hidden::make('managed_environment_id')
|
Hidden::make('tenant_id')
|
||||||
->default(fn (): ?string => static::resolveTenantContextForCurrentPanel()?->getKey())
|
->default(fn (): ?string => static::resolveTenantContextForCurrentPanel()?->getKey())
|
||||||
->dehydrated(),
|
->dehydrated(),
|
||||||
])
|
])
|
||||||
@ -139,7 +136,7 @@ protected function getHeaderActions(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -149,11 +146,11 @@ protected function getHeaderActions(): array
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$requestedTenantId = $data['managed_environment_id'] ?? null;
|
$requestedTenantId = $data['tenant_id'] ?? null;
|
||||||
if ($requestedTenantId !== null && (int) $requestedTenantId !== (int) $tenant->getKey()) {
|
if ($requestedTenantId !== null && (int) $requestedTenantId !== (int) $tenant->getKey()) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title('Not allowed')
|
->title('Not allowed')
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Resources\InventoryItemResource;
|
use App\Filament\Resources\InventoryItemResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\Workspaces\WorkspaceContext;
|
use App\Support\Workspaces\WorkspaceContext;
|
||||||
use Filament\Resources\Pages\ViewRecord;
|
use Filament\Resources\Pages\ViewRecord;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
@ -19,7 +19,7 @@ public function mount(int|string $record): void
|
|||||||
{
|
{
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
app(WorkspaceContext::class)->rememberTenantContext($tenant, request());
|
app(WorkspaceContext::class)->rememberTenantContext($tenant, request());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -1,45 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
namespace App\Filament\Resources\ManagedEnvironmentResource\Pages;
|
|
||||||
|
|
||||||
use App\Models\ManagedEnvironment;
|
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use Filament\Actions\Action;
|
|
||||||
|
|
||||||
class ManageEnvironmentAccessScopes extends ViewManagedEnvironment
|
|
||||||
{
|
|
||||||
protected static ?string $title = 'Manage environment access scope';
|
|
||||||
|
|
||||||
public function mount(int|string|ManagedEnvironment $environment): void
|
|
||||||
{
|
|
||||||
parent::mount($environment instanceof ManagedEnvironment ? (string) $environment->getRouteKey() : $environment);
|
|
||||||
}
|
|
||||||
|
|
||||||
public function getSubheading(): ?string
|
|
||||||
{
|
|
||||||
return 'Workspace membership defines the role. Explicit environment scopes only narrow which workspace members can see this environment.';
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function getHeaderWidgets(): array
|
|
||||||
{
|
|
||||||
return [];
|
|
||||||
}
|
|
||||||
|
|
||||||
protected function getHeaderActions(): array
|
|
||||||
{
|
|
||||||
$actions = array_values(array_filter(
|
|
||||||
parent::getHeaderActions(),
|
|
||||||
static fn ($action): bool => ! ($action instanceof Action && $action->getName() === 'memberships'),
|
|
||||||
));
|
|
||||||
|
|
||||||
array_unshift(
|
|
||||||
$actions,
|
|
||||||
Action::make('back_to_overview')
|
|
||||||
->label('Back to environment overview')
|
|
||||||
->color('gray')
|
|
||||||
->url(fn (): string => ManagedEnvironmentLinks::viewUrl($this->getRecord())),
|
|
||||||
);
|
|
||||||
|
|
||||||
return $actions;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -6,7 +6,7 @@
|
|||||||
use App\Filament\Support\VerificationReportViewer;
|
use App\Filament\Support\VerificationReportViewer;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\RestoreRun;
|
use App\Models\RestoreRun;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Models\VerificationCheckAcknowledgement;
|
use App\Models\VerificationCheckAcknowledgement;
|
||||||
use App\Support\Badges\BadgeCatalog;
|
use App\Support\Badges\BadgeCatalog;
|
||||||
@ -175,8 +175,8 @@ public static function table(Table $table): Table
|
|||||||
->description(fn (OperationRun $record): ?string => static::surfaceGuidance($record)),
|
->description(fn (OperationRun $record): ?string => static::surfaceGuidance($record)),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
Tables\Filters\SelectFilter::make('managed_environment_id')
|
Tables\Filters\SelectFilter::make('tenant_id')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->options(function (): array {
|
->options(function (): array {
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
@ -185,7 +185,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
return collect($user->getTenants(Filament::getCurrentOrDefaultPanel()))
|
||||||
->mapWithKeys(static fn (ManagedEnvironment $tenant): array => [
|
->mapWithKeys(static fn (Tenant $tenant): array => [
|
||||||
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
(string) $tenant->getKey() => $tenant->getFilamentName(),
|
||||||
])
|
])
|
||||||
->all();
|
->all();
|
||||||
@ -193,7 +193,7 @@ public static function table(Table $table): Table
|
|||||||
->default(function (): ?string {
|
->default(function (): ?string {
|
||||||
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$activeTenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
if (! $activeTenant instanceof ManagedEnvironment) {
|
if (! $activeTenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -278,7 +278,7 @@ private static function enterpriseDetailPage(OperationRun $record): \App\Support
|
|||||||
$outcomeSpec = BadgeRenderer::spec(BadgeDomain::OperationRunOutcome, static::outcomeBadgeState($record));
|
$outcomeSpec = BadgeRenderer::spec(BadgeDomain::OperationRunOutcome, static::outcomeBadgeState($record));
|
||||||
$targetScope = static::targetScopeDisplay($record) ?? 'No target scope details were recorded for this operation.';
|
$targetScope = static::targetScopeDisplay($record) ?? 'No target scope details were recorded for this operation.';
|
||||||
$summaryLine = \App\Support\OpsUx\SummaryCountsNormalizer::renderSummaryLine(is_array($record->summary_counts) ? $record->summary_counts : []);
|
$summaryLine = \App\Support\OpsUx\SummaryCountsNormalizer::renderSummaryLine(is_array($record->summary_counts) ? $record->summary_counts : []);
|
||||||
$referencedTenantLifecycle = $record->tenant instanceof ManagedEnvironment
|
$referencedTenantLifecycle = $record->tenant instanceof Tenant
|
||||||
? ReferencedTenantLifecyclePresentation::forOperationRun($record->tenant)
|
? ReferencedTenantLifecyclePresentation::forOperationRun($record->tenant)
|
||||||
: null;
|
: null;
|
||||||
$artifactTruth = static::artifactTruthEnvelope($record);
|
$artifactTruth = static::artifactTruthEnvelope($record);
|
||||||
@ -520,7 +520,7 @@ private static function enterpriseDetailPage(OperationRun $record): \App\Support
|
|||||||
entries: [
|
entries: [
|
||||||
$factory->keyFact('Identity hash', $record->run_identity_hash, mono: true),
|
$factory->keyFact('Identity hash', $record->run_identity_hash, mono: true),
|
||||||
$factory->keyFact('Workspace scope', $record->workspace_id),
|
$factory->keyFact('Workspace scope', $record->workspace_id),
|
||||||
$factory->keyFact('ManagedEnvironment scope', $record->managed_environment_id),
|
$factory->keyFact('Tenant scope', $record->tenant_id),
|
||||||
],
|
],
|
||||||
description: 'Stored run context stays available for debugging without dominating the default reading path.',
|
description: 'Stored run context stays available for debugging without dominating the default reading path.',
|
||||||
view: 'filament.infolists.entries.snapshot-json',
|
view: 'filament.infolists.entries.snapshot-json',
|
||||||
@ -620,7 +620,7 @@ private static function supportingGroups(
|
|||||||
$lifecycleItems = array_values(array_filter([
|
$lifecycleItems = array_values(array_filter([
|
||||||
$referencedTenantLifecycle !== null
|
$referencedTenantLifecycle !== null
|
||||||
? $factory->keyFact(
|
? $factory->keyFact(
|
||||||
'ManagedEnvironment lifecycle',
|
'Tenant lifecycle',
|
||||||
$referencedTenantLifecycle->presentation->label,
|
$referencedTenantLifecycle->presentation->label,
|
||||||
badge: $factory->statusBadge(
|
badge: $factory->statusBadge(
|
||||||
$referencedTenantLifecycle->presentation->label,
|
$referencedTenantLifecycle->presentation->label,
|
||||||
@ -631,7 +631,7 @@ private static function supportingGroups(
|
|||||||
)
|
)
|
||||||
: null,
|
: null,
|
||||||
$referencedTenantLifecycle?->selectorAvailabilityMessage() !== null
|
$referencedTenantLifecycle?->selectorAvailabilityMessage() !== null
|
||||||
? $factory->keyFact('ManagedEnvironment selector context', $referencedTenantLifecycle->selectorAvailabilityMessage())
|
? $factory->keyFact('Tenant selector context', $referencedTenantLifecycle->selectorAvailabilityMessage())
|
||||||
: null,
|
: null,
|
||||||
$referencedTenantLifecycle?->contextNote !== null
|
$referencedTenantLifecycle?->contextNote !== null
|
||||||
? $factory->keyFact('Viewer context', $referencedTenantLifecycle->contextNote)
|
? $factory->keyFact('Viewer context', $referencedTenantLifecycle->contextNote)
|
||||||
@ -1266,13 +1266,13 @@ private static function verificationReportViewData(OperationRun $record): array
|
|||||||
if ($changeIndicator !== null) {
|
if ($changeIndicator !== null) {
|
||||||
$tenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
$tenant = app(OperateHubShell::class)->activeEntitledTenant(request());
|
||||||
|
|
||||||
$previousRunUrl = $tenant instanceof ManagedEnvironment
|
$previousRunUrl = $tenant instanceof Tenant
|
||||||
? OperationRunLinks::view($changeIndicator['previous_report_id'], $tenant)
|
? OperationRunLinks::view($changeIndicator['previous_report_id'], $tenant)
|
||||||
: OperationRunLinks::tenantlessView($changeIndicator['previous_report_id']);
|
: OperationRunLinks::tenantlessView($changeIndicator['previous_report_id']);
|
||||||
}
|
}
|
||||||
|
|
||||||
$acknowledgements = VerificationCheckAcknowledgement::query()
|
$acknowledgements = VerificationCheckAcknowledgement::query()
|
||||||
->where('managed_environment_id', (int) ($record->managed_environment_id ?? 0))
|
->where('tenant_id', (int) ($record->tenant_id ?? 0))
|
||||||
->where('workspace_id', (int) ($record->workspace_id ?? 0))
|
->where('workspace_id', (int) ($record->workspace_id ?? 0))
|
||||||
->where('operation_run_id', (int) $record->getKey())
|
->where('operation_run_id', (int) $record->getKey())
|
||||||
->with('acknowledgedByUser')
|
->with('acknowledgedByUser')
|
||||||
@ -1605,7 +1605,7 @@ public static function restoreContinuation(OperationRun $record): ?array
|
|||||||
$attention = app(RestoreSafetyResolver::class)->resultAttentionForRun($restoreRun);
|
$attention = app(RestoreSafetyResolver::class)->resultAttentionForRun($restoreRun);
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$canOpenRestore = $tenant instanceof ManagedEnvironment
|
$canOpenRestore = $tenant instanceof Tenant
|
||||||
&& $user instanceof User
|
&& $user instanceof User
|
||||||
&& app(\App\Services\Auth\CapabilityResolver::class)->isMember($user, $tenant);
|
&& app(\App\Services\Auth\CapabilityResolver::class)->isMember($user, $tenant);
|
||||||
|
|
||||||
@ -1618,7 +1618,7 @@ public static function restoreContinuation(OperationRun $record): ?array
|
|||||||
'follow_up_required' => $attention->followUpRequired,
|
'follow_up_required' => $attention->followUpRequired,
|
||||||
'badge_label' => \App\Support\Badges\BadgeRenderer::spec(\App\Support\Badges\BadgeDomain::RestoreResultStatus, $attention->state)->label,
|
'badge_label' => \App\Support\Badges\BadgeRenderer::spec(\App\Support\Badges\BadgeDomain::RestoreResultStatus, $attention->state)->label,
|
||||||
'link_url' => $canOpenRestore
|
'link_url' => $canOpenRestore
|
||||||
? RestoreRunResource::getUrl('view', ['record' => $restoreRun], tenant: $tenant)
|
? RestoreRunResource::getUrl('view', ['record' => $restoreRun], panel: 'tenant', tenant: $tenant)
|
||||||
: null,
|
: null,
|
||||||
'link_available' => $canOpenRestore,
|
'link_available' => $canOpenRestore,
|
||||||
];
|
];
|
||||||
@ -1657,21 +1657,6 @@ private static function targetScopeDisplay(OperationRun $record): ?string
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$scopeDisplayName = $targetScope['scope_display_name'] ?? null;
|
|
||||||
$scopeIdentifier = $targetScope['scope_identifier'] ?? null;
|
|
||||||
$scopeDisplayName = is_string($scopeDisplayName) ? trim($scopeDisplayName) : null;
|
|
||||||
$scopeIdentifier = is_string($scopeIdentifier) ? trim($scopeIdentifier) : null;
|
|
||||||
|
|
||||||
if ($scopeDisplayName !== null && $scopeDisplayName !== '') {
|
|
||||||
return $scopeIdentifier !== null && $scopeIdentifier !== '' && $scopeIdentifier !== $scopeDisplayName
|
|
||||||
? "{$scopeDisplayName} ({$scopeIdentifier})"
|
|
||||||
: $scopeDisplayName;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($scopeIdentifier !== null && $scopeIdentifier !== '') {
|
|
||||||
return $scopeIdentifier;
|
|
||||||
}
|
|
||||||
|
|
||||||
$entraTenantName = $targetScope['entra_tenant_name'] ?? null;
|
$entraTenantName = $targetScope['entra_tenant_name'] ?? null;
|
||||||
$entraTenantId = $targetScope['entra_tenant_id'] ?? null;
|
$entraTenantId = $targetScope['entra_tenant_id'] ?? null;
|
||||||
$directoryContextId = $targetScope['directory_context_id'] ?? null;
|
$directoryContextId = $targetScope['directory_context_id'] ?? null;
|
||||||
|
|||||||
@ -5,7 +5,6 @@
|
|||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\PolicyResource\Pages;
|
use App\Filament\Resources\PolicyResource\Pages;
|
||||||
use App\Filament\Resources\PolicyResource\RelationManagers\VersionsRelationManager;
|
use App\Filament\Resources\PolicyResource\RelationManagers\VersionsRelationManager;
|
||||||
use App\Filament\Support\NormalizedSettingsSurface;
|
use App\Filament\Support\NormalizedSettingsSurface;
|
||||||
@ -14,7 +13,7 @@
|
|||||||
use App\Jobs\BulkPolicyUnignoreJob;
|
use App\Jobs\BulkPolicyUnignoreJob;
|
||||||
use App\Jobs\SyncPoliciesJob;
|
use App\Jobs\SyncPoliciesJob;
|
||||||
use App\Models\Policy;
|
use App\Models\Policy;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Intune\PolicyNormalizer;
|
use App\Services\Intune\PolicyNormalizer;
|
||||||
@ -26,7 +25,6 @@
|
|||||||
use App\Support\Badges\TagBadgeDomain;
|
use App\Support\Badges\TagBadgeDomain;
|
||||||
use App\Support\Badges\TagBadgeRenderer;
|
use App\Support\Badges\TagBadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\OpsUx\OperationUxPresenter;
|
use App\Support\OpsUx\OperationUxPresenter;
|
||||||
use App\Support\OpsUx\OpsUxBrowserEvents;
|
use App\Support\OpsUx\OpsUxBrowserEvents;
|
||||||
@ -63,7 +61,6 @@ class PolicyResource extends Resource
|
|||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use ScopesGlobalSearchToTenant;
|
use ScopesGlobalSearchToTenant;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = Policy::class;
|
protected static ?string $model = Policy::class;
|
||||||
|
|
||||||
@ -75,20 +72,13 @@ class PolicyResource extends Resource
|
|||||||
|
|
||||||
protected static string|UnitEnum|null $navigationGroup = 'Inventory';
|
protected static string|UnitEnum|null $navigationGroup = 'Inventory';
|
||||||
|
|
||||||
public static function getModelLabel(): string
|
|
||||||
{
|
|
||||||
return static::text('common.policy');
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function getPluralModelLabel(): string
|
|
||||||
{
|
|
||||||
return static::text('common.policies');
|
|
||||||
}
|
|
||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
@ -96,7 +86,7 @@ public static function canViewAny(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -110,7 +100,7 @@ public static function canViewAny(): bool
|
|||||||
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
||||||
{
|
{
|
||||||
return ActionSurfaceDeclaration::forResource(ActionSurfaceProfile::CrudListAndView, ActionSurfaceType::CrudListFirstResource)
|
return ActionSurfaceDeclaration::forResource(ActionSurfaceProfile::CrudListAndView, ActionSurfaceType::CrudListFirstResource)
|
||||||
->satisfy(ActionSurfaceSlot::ListHeader, 'Header action: Sync policies.')
|
->satisfy(ActionSurfaceSlot::ListHeader, 'Header action: Sync from Intune.')
|
||||||
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
->satisfy(ActionSurfaceSlot::InspectAffordance, ActionSurfaceInspectAffordance::ClickableRow->value)
|
||||||
->satisfy(ActionSurfaceSlot::ListRowMoreMenu, 'Secondary row actions are grouped under "More" in helper-first, workflow-next, destructive-last order.')
|
->satisfy(ActionSurfaceSlot::ListRowMoreMenu, 'Secondary row actions are grouped under "More" in helper-first, workflow-next, destructive-last order.')
|
||||||
->satisfy(ActionSurfaceSlot::ListBulkMoreGroup, 'Bulk actions are grouped under "More" in helper-first, workflow-next, destructive-last order.')
|
->satisfy(ActionSurfaceSlot::ListBulkMoreGroup, 'Bulk actions are grouped under "More" in helper-first, workflow-next, destructive-last order.')
|
||||||
@ -122,17 +112,17 @@ public static function makeSyncAction(string $name = 'sync'): Actions\Action
|
|||||||
{
|
{
|
||||||
return UiEnforcement::forAction(
|
return UiEnforcement::forAction(
|
||||||
Actions\Action::make($name)
|
Actions\Action::make($name)
|
||||||
->label(static::text('resource.sync_action_primary'))
|
->label('Sync from Intune')
|
||||||
->icon('heroicon-o-arrow-path')
|
->icon('heroicon-o-arrow-path')
|
||||||
->color('primary')
|
->color('primary')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading(static::text('resource.sync_modal_heading'))
|
->modalHeading('Sync policies from Intune')
|
||||||
->modalDescription(static::text('resource.sync_modal_description').' '.static::text('common.source_microsoft_intune'))
|
->modalDescription('This queues a background sync operation for supported policy types in the current tenant.')
|
||||||
->action(function (Pages\ListPolicies $livewire): void {
|
->action(function (Pages\ListPolicies $livewire): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -160,7 +150,7 @@ public static function makeSyncAction(string $name = 'sync'): Actions\Action
|
|||||||
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -175,14 +165,14 @@ public static function makeSyncAction(string $name = 'sync'): Actions\Action
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
})
|
})
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_SYNC)
|
->requireCapability(Capabilities::TENANT_SYNC)
|
||||||
->tooltip(static::text('resource.sync_permission_tooltip'))
|
->tooltip('You do not have permission to sync policies.')
|
||||||
->apply();
|
->apply();
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -195,31 +185,16 @@ public static function infolist(Schema $schema): Schema
|
|||||||
{
|
{
|
||||||
return $schema
|
return $schema
|
||||||
->schema([
|
->schema([
|
||||||
Section::make(static::text('resource.details_section'))
|
Section::make('Policy Details')
|
||||||
->schema([
|
->schema([
|
||||||
TextEntry::make('display_name')->label(static::text('common.policy')),
|
TextEntry::make('display_name')->label('Policy'),
|
||||||
TextEntry::make('policy_type')->label(static::text('common.type')),
|
TextEntry::make('policy_type')->label('Type'),
|
||||||
TextEntry::make('platform')
|
TextEntry::make('platform'),
|
||||||
->label(static::text('common.platform'))
|
TextEntry::make('external_id')->label('External ID'),
|
||||||
->badge()
|
TextEntry::make('last_synced_at')->dateTime()->label('Last synced'),
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
TextEntry::make('created_at')->since(),
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform)),
|
|
||||||
TextEntry::make('visibility_state')
|
|
||||||
->label(static::text('common.visibility'))
|
|
||||||
->badge()
|
|
||||||
->state(fn (Policy $record): string => $record->visibilityState())
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->helperText(fn (Policy $record): ?string => $record->isProviderMissing()
|
|
||||||
? static::text('resource.visibility_source_unavailable_backup_items')
|
|
||||||
: null),
|
|
||||||
TextEntry::make('external_id')->label(static::text('common.external_id')),
|
|
||||||
TextEntry::make('last_synced_at')->dateTime()->label(static::text('common.last_synced')),
|
|
||||||
TextEntry::make('created_at')->since()->label(static::text('common.created')),
|
|
||||||
TextEntry::make('latest_snapshot_mode')
|
TextEntry::make('latest_snapshot_mode')
|
||||||
->label(static::text('common.snapshot'))
|
->label('Snapshot')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
||||||
->color(BadgeRenderer::color(BadgeDomain::PolicySnapshotMode))
|
->color(BadgeRenderer::color(BadgeDomain::PolicySnapshotMode))
|
||||||
@ -236,8 +211,8 @@ public static function infolist(Schema $schema): Schema
|
|||||||
$status = $meta['original_status'] ?? null;
|
$status = $meta['original_status'] ?? null;
|
||||||
|
|
||||||
return sprintf(
|
return sprintf(
|
||||||
static::text('resource.snapshot_metadata_only_helper'),
|
'Graph returned %s for this policy type. Only local metadata was saved; settings and restore are unavailable until Graph works again.',
|
||||||
$status ?? static::text('resource.graph_error_fallback')
|
$status ?? 'an error'
|
||||||
);
|
);
|
||||||
})
|
})
|
||||||
->visible(fn (Policy $record) => $record->versions()->exists()),
|
->visible(fn (Policy $record) => $record->versions()->exists()),
|
||||||
@ -250,7 +225,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->activeTab(1)
|
->activeTab(1)
|
||||||
->persistTabInQueryString()
|
->persistTabInQueryString()
|
||||||
->tabs([
|
->tabs([
|
||||||
Tab::make(static::text('resource.tab_general'))
|
Tab::make('General')
|
||||||
->id('general')
|
->id('general')
|
||||||
->schema([
|
->schema([
|
||||||
ViewEntry::make('policy_general')
|
ViewEntry::make('policy_general')
|
||||||
@ -261,7 +236,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
}),
|
}),
|
||||||
])
|
])
|
||||||
->visible(fn (Policy $record) => $record->versions()->exists()),
|
->visible(fn (Policy $record) => $record->versions()->exists()),
|
||||||
Tab::make(static::text('common.settings'))
|
Tab::make('Settings')
|
||||||
->id('settings')
|
->id('settings')
|
||||||
->schema([
|
->schema([
|
||||||
ViewEntry::make('settings')
|
ViewEntry::make('settings')
|
||||||
@ -273,12 +248,12 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->visible(fn (Policy $record) => $record->versions()->exists()),
|
->visible(fn (Policy $record) => $record->versions()->exists()),
|
||||||
|
|
||||||
TextEntry::make('no_settings_available')
|
TextEntry::make('no_settings_available')
|
||||||
->label(static::text('common.settings'))
|
->label('Settings')
|
||||||
->state(static::text('resource.settings_empty_state'))
|
->state('No policy snapshot available yet.')
|
||||||
->helperText(static::text('resource.settings_empty_state_helper'))
|
->helperText('This policy has been inventoried but no configuration snapshot has been captured yet.')
|
||||||
->visible(fn (Policy $record) => ! $record->versions()->exists()),
|
->visible(fn (Policy $record) => ! $record->versions()->exists()),
|
||||||
]),
|
]),
|
||||||
Tab::make(static::text('resource.tab_json'))
|
Tab::make('JSON')
|
||||||
->id('json')
|
->id('json')
|
||||||
->schema([
|
->schema([
|
||||||
ViewEntry::make('snapshot_json')
|
ViewEntry::make('snapshot_json')
|
||||||
@ -286,7 +261,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->state(fn (Policy $record) => static::latestSnapshot($record))
|
->state(fn (Policy $record) => static::latestSnapshot($record))
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
TextEntry::make('snapshot_size')
|
TextEntry::make('snapshot_size')
|
||||||
->label(static::text('resource.payload_size'))
|
->label('Payload Size')
|
||||||
->state(fn (Policy $record) => strlen(json_encode(static::latestSnapshot($record) ?: [])))
|
->state(fn (Policy $record) => strlen(json_encode(static::latestSnapshot($record) ?: [])))
|
||||||
->formatStateUsing(function ($state) {
|
->formatStateUsing(function ($state) {
|
||||||
if ($state > 512000) {
|
if ($state > 512000) {
|
||||||
@ -294,7 +269,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
<svg class="w-4 h-4" fill="currentColor" viewBox="0 0 20 20">
|
<svg class="w-4 h-4" fill="currentColor" viewBox="0 0 20 20">
|
||||||
<path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"/>
|
<path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"/>
|
||||||
</svg>
|
</svg>
|
||||||
'.static::text('resource.large_payload_warning', ['size' => number_format($state / 1024, 0)]).'
|
Large payload ('.number_format($state / 1024, 0).' KB) - May impact performance
|
||||||
</span>';
|
</span>';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -309,7 +284,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->visible(fn (Policy $record) => static::usesTabbedLayout($record)),
|
->visible(fn (Policy $record) => static::usesTabbedLayout($record)),
|
||||||
|
|
||||||
// Legacy layout (kept for fallback if tabs are disabled)
|
// Legacy layout (kept for fallback if tabs are disabled)
|
||||||
Section::make(static::text('common.settings'))
|
Section::make('Settings')
|
||||||
->schema([
|
->schema([
|
||||||
ViewEntry::make('settings')
|
ViewEntry::make('settings')
|
||||||
->label('')
|
->label('')
|
||||||
@ -323,7 +298,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
return ! static::usesTabbedLayout($record);
|
return ! static::usesTabbedLayout($record);
|
||||||
}),
|
}),
|
||||||
|
|
||||||
Section::make(static::text('resource.snapshot_json_section'))
|
Section::make('Policy Snapshot (JSON)')
|
||||||
->schema([
|
->schema([
|
||||||
ViewEntry::make('snapshot_json')
|
ViewEntry::make('snapshot_json')
|
||||||
->view('filament.infolists.entries.snapshot-json')
|
->view('filament.infolists.entries.snapshot-json')
|
||||||
@ -331,7 +306,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
|
|
||||||
TextEntry::make('snapshot_size')
|
TextEntry::make('snapshot_size')
|
||||||
->label(static::text('resource.payload_size'))
|
->label('Payload Size')
|
||||||
->state(fn (Policy $record) => strlen(json_encode(static::latestSnapshot($record) ?: [])))
|
->state(fn (Policy $record) => strlen(json_encode(static::latestSnapshot($record) ?: [])))
|
||||||
->formatStateUsing(function ($state) {
|
->formatStateUsing(function ($state) {
|
||||||
if ($state > 512000) {
|
if ($state > 512000) {
|
||||||
@ -339,7 +314,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
<svg class="w-4 h-4" fill="currentColor" viewBox="0 0 20 20">
|
<svg class="w-4 h-4" fill="currentColor" viewBox="0 0 20 20">
|
||||||
<path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"/>
|
<path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"/>
|
||||||
</svg>
|
</svg>
|
||||||
'.static::text('resource.large_payload_warning', ['size' => number_format($state / 1024, 0)]).'
|
Large payload ('.number_format($state / 1024, 0).' KB) - May impact performance
|
||||||
</span>';
|
</span>';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -361,6 +336,11 @@ public static function infolist(Schema $schema): Schema
|
|||||||
public static function table(Table $table): Table
|
public static function table(Table $table): Table
|
||||||
{
|
{
|
||||||
return $table
|
return $table
|
||||||
|
->modifyQueryUsing(function (Builder $query) {
|
||||||
|
// Quick-Workaround: Hide policies not synced in last 7 days
|
||||||
|
// Full solution in Feature 005: Policy Lifecycle Management (soft delete)
|
||||||
|
$query->where('last_synced_at', '>', now()->subDays(7));
|
||||||
|
})
|
||||||
->defaultSort('display_name')
|
->defaultSort('display_name')
|
||||||
->paginated(TablePaginationProfiles::resource())
|
->paginated(TablePaginationProfiles::resource())
|
||||||
->persistFiltersInSession()
|
->persistFiltersInSession()
|
||||||
@ -369,36 +349,24 @@ public static function table(Table $table): Table
|
|||||||
->recordUrl(fn (Policy $record): string => static::getUrl('view', ['record' => $record]))
|
->recordUrl(fn (Policy $record): string => static::getUrl('view', ['record' => $record]))
|
||||||
->columns([
|
->columns([
|
||||||
Tables\Columns\TextColumn::make('display_name')
|
Tables\Columns\TextColumn::make('display_name')
|
||||||
->label(static::text('common.policy'))
|
->label('Policy')
|
||||||
->searchable()
|
->searchable()
|
||||||
->sortable(),
|
->sortable(),
|
||||||
Tables\Columns\TextColumn::make('policy_type')
|
Tables\Columns\TextColumn::make('policy_type')
|
||||||
->label(static::text('common.type'))
|
->label('Type')
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType))
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType))
|
||||||
->icon(TagBadgeRenderer::icon(TagBadgeDomain::PolicyType))
|
->icon(TagBadgeRenderer::icon(TagBadgeDomain::PolicyType))
|
||||||
->iconColor(TagBadgeRenderer::iconColor(TagBadgeDomain::PolicyType)),
|
->iconColor(TagBadgeRenderer::iconColor(TagBadgeDomain::PolicyType)),
|
||||||
Tables\Columns\TextColumn::make('visibility_state')
|
|
||||||
->label(static::text('common.visibility'))
|
|
||||||
->badge()
|
|
||||||
->state(fn (Policy $record): string => $record->visibilityState())
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicyProviderPresence))
|
|
||||||
->description(fn (Policy $record): ?string => $record->isProviderMissing()
|
|
||||||
? static::text('resource.visibility_source_unavailable_description')
|
|
||||||
: null),
|
|
||||||
Tables\Columns\TextColumn::make('category')
|
Tables\Columns\TextColumn::make('category')
|
||||||
->label(static::text('common.category'))
|
->label('Category')
|
||||||
->badge()
|
->badge()
|
||||||
->state(fn (Policy $record) => static::typeMeta($record->policy_type)['category'] ?? null)
|
->state(fn (Policy $record) => static::typeMeta($record->policy_type)['category'] ?? null)
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyCategory))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyCategory))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyCategory))
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyCategory)),
|
||||||
->toggleable(isToggledHiddenByDefault: true),
|
|
||||||
Tables\Columns\TextColumn::make('restore_mode')
|
Tables\Columns\TextColumn::make('restore_mode')
|
||||||
->label(static::text('common.restore'))
|
->label('Restore')
|
||||||
->badge()
|
->badge()
|
||||||
->state(fn (Policy $record) => static::typeMeta($record->policy_type)['restore'] ?? 'enabled')
|
->state(fn (Policy $record) => static::typeMeta($record->policy_type)['restore'] ?? 'enabled')
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicyRestoreMode))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicyRestoreMode))
|
||||||
@ -406,22 +374,19 @@ public static function table(Table $table): Table
|
|||||||
->icon(BadgeRenderer::icon(BadgeDomain::PolicyRestoreMode))
|
->icon(BadgeRenderer::icon(BadgeDomain::PolicyRestoreMode))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicyRestoreMode)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicyRestoreMode)),
|
||||||
Tables\Columns\TextColumn::make('platform')
|
Tables\Columns\TextColumn::make('platform')
|
||||||
->label(static::text('common.platform'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform))
|
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform))
|
||||||
->sortable(),
|
->sortable(),
|
||||||
Tables\Columns\TextColumn::make('settings_status')
|
Tables\Columns\TextColumn::make('settings_status')
|
||||||
->label(static::text('common.settings'))
|
->label('Settings')
|
||||||
->badge()
|
->badge()
|
||||||
->state(function (Policy $record) {
|
->state(function (Policy $record) {
|
||||||
$latest = $record->versions->first();
|
$latest = $record->versions->first();
|
||||||
$snapshot = $latest?->snapshot ?? [];
|
$snapshot = $latest?->snapshot ?? [];
|
||||||
$hasSettings = is_array($snapshot) && ! empty($snapshot['settings']);
|
$hasSettings = is_array($snapshot) && ! empty($snapshot['settings']);
|
||||||
|
|
||||||
return $hasSettings
|
return $hasSettings ? 'Available' : 'Missing';
|
||||||
? static::text('resource.settings_available')
|
|
||||||
: static::text('resource.settings_missing');
|
|
||||||
})
|
})
|
||||||
->color(function (Policy $record) {
|
->color(function (Policy $record) {
|
||||||
$latest = $record->versions->first();
|
$latest = $record->versions->first();
|
||||||
@ -431,12 +396,12 @@ public static function table(Table $table): Table
|
|||||||
return $hasSettings ? 'success' : 'gray';
|
return $hasSettings ? 'success' : 'gray';
|
||||||
}),
|
}),
|
||||||
Tables\Columns\TextColumn::make('external_id')
|
Tables\Columns\TextColumn::make('external_id')
|
||||||
->label(static::text('common.external_id'))
|
->label('External ID')
|
||||||
->copyable()
|
->copyable()
|
||||||
->limit(32)
|
->limit(32)
|
||||||
->toggleable(isToggledHiddenByDefault: true),
|
->toggleable(isToggledHiddenByDefault: true),
|
||||||
Tables\Columns\TextColumn::make('last_synced_at')
|
Tables\Columns\TextColumn::make('last_synced_at')
|
||||||
->label(static::text('common.last_synced'))
|
->label('Last synced')
|
||||||
->dateTime()
|
->dateTime()
|
||||||
->sortable(),
|
->sortable(),
|
||||||
Tables\Columns\TextColumn::make('created_at')
|
Tables\Columns\TextColumn::make('created_at')
|
||||||
@ -446,35 +411,27 @@ public static function table(Table $table): Table
|
|||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
Tables\Filters\SelectFilter::make('visibility')
|
Tables\Filters\SelectFilter::make('visibility')
|
||||||
->label(static::text('common.visibility'))
|
->label('Visibility')
|
||||||
->options([
|
->options([
|
||||||
'active' => static::text('resource.filter_active'),
|
'active' => 'Active',
|
||||||
'ignored' => static::text('resource.filter_ignored'),
|
'ignored' => 'Ignored',
|
||||||
'provider_missing' => static::text('resource.filter_source_unavailable'),
|
|
||||||
'all' => static::text('resource.filter_all'),
|
|
||||||
])
|
])
|
||||||
->default('active')
|
->default('active')
|
||||||
->query(function (Builder $query, array $data) {
|
->query(function (Builder $query, array $data) {
|
||||||
$value = $data['value'] ?? null;
|
$value = $data['value'] ?? null;
|
||||||
|
|
||||||
if (blank($value) || $value === 'all') {
|
if (blank($value)) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($value === 'active') {
|
if ($value === 'active') {
|
||||||
$query->active();
|
$query->whereNull('ignored_at');
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($value === 'ignored') {
|
if ($value === 'ignored') {
|
||||||
$query->whereNotNull('ignored_at');
|
$query->whereNotNull('ignored_at');
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($value === 'provider_missing') {
|
|
||||||
$query->whereNotNull('missing_from_provider_at');
|
|
||||||
}
|
}
|
||||||
}),
|
}),
|
||||||
Tables\Filters\SelectFilter::make('policy_type')
|
Tables\Filters\SelectFilter::make('policy_type')
|
||||||
@ -518,22 +475,20 @@ public static function table(Table $table): Table
|
|||||||
ActionGroup::make([
|
ActionGroup::make([
|
||||||
UiEnforcement::forTableAction(
|
UiEnforcement::forTableAction(
|
||||||
Actions\Action::make('export')
|
Actions\Action::make('export')
|
||||||
->label(static::text('resource.export_to_backup'))
|
->label('Export to Backup')
|
||||||
->icon('heroicon-o-archive-box-arrow-down')
|
->icon('heroicon-o-archive-box-arrow-down')
|
||||||
->visible(fn (Policy $record): bool => $record->ignored_at === null)
|
->visible(fn (Policy $record): bool => $record->ignored_at === null)
|
||||||
->disabled(fn (Policy $record): bool => ! $record->isCurrentBackupEligible())
|
|
||||||
->tooltip(fn (Policy $record): ?string => $record->currentBackupBlockedReasonLabel())
|
|
||||||
->form([
|
->form([
|
||||||
Forms\Components\TextInput::make('backup_name')
|
Forms\Components\TextInput::make('backup_name')
|
||||||
->label(static::text('common.backup_name'))
|
->label('Backup Name')
|
||||||
->required()
|
->required()
|
||||||
->default(fn () => static::text('common.backup_name_default_prefix').' '.now()->toDateTimeString()),
|
->default(fn () => 'Backup '.now()->toDateTimeString()),
|
||||||
])
|
])
|
||||||
->action(function (Policy $record, array $data): void {
|
->action(function (Policy $record, array $data): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -541,16 +496,6 @@ public static function table(Table $table): Table
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $record->isCurrentBackupEligible()) {
|
|
||||||
Notification::make()
|
|
||||||
->title(static::text('resource.current_backup_unavailable'))
|
|
||||||
->body($record->currentBackupBlockedReasonLabel())
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$ids = [(int) $record->getKey()];
|
$ids = [(int) $record->getKey()];
|
||||||
|
|
||||||
/** @var BulkSelectionIdentity $selection */
|
/** @var BulkSelectionIdentity $selection */
|
||||||
@ -565,7 +510,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy.export',
|
type: 'policy.export',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $data): void {
|
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $data): void {
|
||||||
@ -588,7 +533,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -596,12 +541,11 @@ public static function table(Table $table): Table
|
|||||||
fn () => static::resolveTenantContextForCurrentPanel(),
|
fn () => static::resolveTenantContextForCurrentPanel(),
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->preserveDisabled()
|
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forTableAction(
|
UiEnforcement::forTableAction(
|
||||||
Actions\Action::make('sync')
|
Actions\Action::make('sync')
|
||||||
->label(static::text('resource.sync_action_secondary'))
|
->label('Sync')
|
||||||
->icon('heroicon-o-arrow-path')
|
->icon('heroicon-o-arrow-path')
|
||||||
->color('primary')
|
->color('primary')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -610,7 +554,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -635,7 +579,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -648,7 +592,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -660,7 +604,7 @@ public static function table(Table $table): Table
|
|||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forTableAction(
|
UiEnforcement::forTableAction(
|
||||||
Actions\Action::make('restore')
|
Actions\Action::make('restore')
|
||||||
->label(static::text('resource.restore_action'))
|
->label('Restore')
|
||||||
->icon('heroicon-o-arrow-uturn-left')
|
->icon('heroicon-o-arrow-uturn-left')
|
||||||
->color('success')
|
->color('success')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -669,19 +613,19 @@ public static function table(Table $table): Table
|
|||||||
$record->unignore();
|
$record->unignore();
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('resource.policy_restored'))
|
->title('Policy restored')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
}),
|
}),
|
||||||
fn () => static::resolveTenantContextForCurrentPanel(),
|
fn () => static::resolveTenantContextForCurrentPanel(),
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('resource.restore_permission_tooltip'))
|
->tooltip('You do not have permission to restore policies.')
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forTableAction(
|
UiEnforcement::forTableAction(
|
||||||
Actions\Action::make('ignore')
|
Actions\Action::make('ignore')
|
||||||
->label(static::text('resource.ignore_action'))
|
->label('Ignore')
|
||||||
->icon('heroicon-o-trash')
|
->icon('heroicon-o-trash')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -690,31 +634,31 @@ public static function table(Table $table): Table
|
|||||||
$record->ignore();
|
$record->ignore();
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('resource.policy_ignored'))
|
->title('Policy ignored')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
}),
|
}),
|
||||||
fn () => static::resolveTenantContextForCurrentPanel(),
|
fn () => static::resolveTenantContextForCurrentPanel(),
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('resource.ignore_permission_tooltip'))
|
->tooltip('You do not have permission to ignore policies.')
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->apply(),
|
->apply(),
|
||||||
])
|
])
|
||||||
->label(static::text('common.more'))
|
->label('More')
|
||||||
->icon('heroicon-o-ellipsis-vertical'),
|
->icon('heroicon-o-ellipsis-vertical'),
|
||||||
])
|
])
|
||||||
->bulkActions([
|
->bulkActions([
|
||||||
BulkActionGroup::make([
|
BulkActionGroup::make([
|
||||||
UiEnforcement::forBulkAction(
|
UiEnforcement::forBulkAction(
|
||||||
BulkAction::make('bulk_export')
|
BulkAction::make('bulk_export')
|
||||||
->label(static::text('resource.export_to_backup'))
|
->label('Export to Backup')
|
||||||
->icon('heroicon-o-archive-box-arrow-down')
|
->icon('heroicon-o-archive-box-arrow-down')
|
||||||
->form([
|
->form([
|
||||||
Forms\Components\TextInput::make('backup_name')
|
Forms\Components\TextInput::make('backup_name')
|
||||||
->label(static::text('common.backup_name'))
|
->label('Backup Name')
|
||||||
->required()
|
->required()
|
||||||
->default(fn () => static::text('common.backup_name_default_prefix').' '.now()->toDateTimeString()),
|
->default(fn () => 'Backup '.now()->toDateTimeString()),
|
||||||
])
|
])
|
||||||
->action(function (Collection $records, array $data): void {
|
->action(function (Collection $records, array $data): void {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
@ -722,7 +666,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -730,20 +674,6 @@ public static function table(Table $table): Table
|
|||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
$blocked = $records->first(
|
|
||||||
fn ($record): bool => $record instanceof Policy && ! $record->isCurrentBackupEligible()
|
|
||||||
);
|
|
||||||
|
|
||||||
if ($blocked instanceof Policy) {
|
|
||||||
Notification::make()
|
|
||||||
->title(static::text('resource.current_backup_unavailable'))
|
|
||||||
->body($blocked->currentBackupBlockedReasonLabel())
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
/** @var BulkSelectionIdentity $selection */
|
/** @var BulkSelectionIdentity $selection */
|
||||||
$selection = app(BulkSelectionIdentity::class);
|
$selection = app(BulkSelectionIdentity::class);
|
||||||
|
|
||||||
@ -756,7 +686,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy.export',
|
type: 'policy.export',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $data, $count): void {
|
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $data, $count): void {
|
||||||
@ -791,7 +721,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -802,7 +732,7 @@ public static function table(Table $table): Table
|
|||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forBulkAction(
|
UiEnforcement::forBulkAction(
|
||||||
BulkAction::make('bulk_sync')
|
BulkAction::make('bulk_sync')
|
||||||
->label(static::text('resource.sync_action_primary'))
|
->label('Sync Policies')
|
||||||
->icon('heroicon-o-arrow-path')
|
->icon('heroicon-o-arrow-path')
|
||||||
->color('primary')
|
->color('primary')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -816,7 +746,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -849,7 +779,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -862,7 +792,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -873,7 +803,7 @@ public static function table(Table $table): Table
|
|||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forBulkAction(
|
UiEnforcement::forBulkAction(
|
||||||
BulkAction::make('bulk_restore')
|
BulkAction::make('bulk_restore')
|
||||||
->label(static::text('resource.restore_bulk_action'))
|
->label('Restore Policies')
|
||||||
->icon('heroicon-o-arrow-uturn-left')
|
->icon('heroicon-o-arrow-uturn-left')
|
||||||
->color('success')
|
->color('success')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -889,7 +819,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -909,7 +839,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy.unignore',
|
type: 'policy.unignore',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $count): void {
|
dispatcher: function ($operationRun) use ($tenant, $user, $ids, $count): void {
|
||||||
@ -943,7 +873,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -954,7 +884,7 @@ public static function table(Table $table): Table
|
|||||||
->apply(),
|
->apply(),
|
||||||
UiEnforcement::forBulkAction(
|
UiEnforcement::forBulkAction(
|
||||||
BulkAction::make('bulk_delete')
|
BulkAction::make('bulk_delete')
|
||||||
->label(static::text('resource.ignore_bulk_action'))
|
->label('Ignore Policies')
|
||||||
->icon('heroicon-o-trash')
|
->icon('heroicon-o-trash')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -968,11 +898,11 @@ public static function table(Table $table): Table
|
|||||||
if ($records->count() >= 20) {
|
if ($records->count() >= 20) {
|
||||||
return [
|
return [
|
||||||
Forms\Components\TextInput::make('confirmation')
|
Forms\Components\TextInput::make('confirmation')
|
||||||
->label(static::text('common.type_delete_to_confirm'))
|
->label('Type DELETE to confirm')
|
||||||
->required()
|
->required()
|
||||||
->in(['DELETE'])
|
->in(['DELETE'])
|
||||||
->validationMessages([
|
->validationMessages([
|
||||||
'in' => static::text('common.type_delete_to_confirm_validation'),
|
'in' => 'Please type DELETE to confirm.',
|
||||||
]),
|
]),
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
@ -985,7 +915,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1001,7 +931,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy.delete',
|
type: 'policy.delete',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $user, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $user, $ids): void {
|
||||||
@ -1025,10 +955,10 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
if (! $opRun->wasRecentlyCreated && in_array($opRun->status, ['queued', 'running'], true)) {
|
if (! $opRun->wasRecentlyCreated && in_array($opRun->status, ['queued', 'running'], true)) {
|
||||||
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
OperationUxPresenter::alreadyQueuedToast((string) $opRun->type)
|
||||||
->body(static::text('resource.delete_queued_body', ['count' => $count]))
|
->body("Queued deletion for {$count} policies.")
|
||||||
->actions([
|
->actions([
|
||||||
\Filament\Actions\Action::make('view_run')
|
\Filament\Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url($runUrl),
|
->url($runUrl),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -1037,10 +967,10 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
OperationUxPresenter::queuedToast((string) $opRun->type)
|
OperationUxPresenter::queuedToast((string) $opRun->type)
|
||||||
->body(static::text('resource.delete_queued_body', ['count' => $count]))
|
->body("Queued deletion for {$count} policies.")
|
||||||
->actions([
|
->actions([
|
||||||
\Filament\Actions\Action::make('view_run')
|
\Filament\Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url($runUrl),
|
->url($runUrl),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -1049,10 +979,10 @@ public static function table(Table $table): Table
|
|||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->apply(),
|
->apply(),
|
||||||
])->label(static::text('common.more')),
|
])->label('More'),
|
||||||
])
|
])
|
||||||
->emptyStateHeading(static::text('resource.empty_state_heading'))
|
->emptyStateHeading('No policies synced yet')
|
||||||
->emptyStateDescription(static::text('resource.empty_state_description'))
|
->emptyStateDescription('Sync your first tenant to see Intune policies here.')
|
||||||
->emptyStateIcon('heroicon-o-arrow-path')
|
->emptyStateIcon('heroicon-o-arrow-path')
|
||||||
->emptyStateActions([
|
->emptyStateActions([
|
||||||
static::makeSyncAction(),
|
static::makeSyncAction(),
|
||||||
@ -1229,25 +1159,25 @@ private static function generalOverviewState(Policy $record): array
|
|||||||
|
|
||||||
$name = $snapshot['displayName'] ?? $snapshot['name'] ?? $record->display_name;
|
$name = $snapshot['displayName'] ?? $snapshot['name'] ?? $record->display_name;
|
||||||
if (is_string($name) && $name !== '') {
|
if (is_string($name) && $name !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_name'), 'value' => $name];
|
$entries[] = ['key' => 'Name', 'value' => $name];
|
||||||
}
|
}
|
||||||
|
|
||||||
$platforms = $snapshot['platforms'] ?? $snapshot['platform'] ?? $record->platform;
|
$platforms = $snapshot['platforms'] ?? $snapshot['platform'] ?? $record->platform;
|
||||||
if (is_string($platforms) && $platforms !== '') {
|
if (is_string($platforms) && $platforms !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_platforms'), 'value' => $platforms];
|
$entries[] = ['key' => 'Platforms', 'value' => $platforms];
|
||||||
} elseif (is_array($platforms) && $platforms !== []) {
|
} elseif (is_array($platforms) && $platforms !== []) {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_platforms'), 'value' => $platforms];
|
$entries[] = ['key' => 'Platforms', 'value' => $platforms];
|
||||||
}
|
}
|
||||||
|
|
||||||
$technologies = $snapshot['technologies'] ?? null;
|
$technologies = $snapshot['technologies'] ?? null;
|
||||||
if (is_string($technologies) && $technologies !== '') {
|
if (is_string($technologies) && $technologies !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_technologies'), 'value' => $technologies];
|
$entries[] = ['key' => 'Technologies', 'value' => $technologies];
|
||||||
} elseif (is_array($technologies) && $technologies !== []) {
|
} elseif (is_array($technologies) && $technologies !== []) {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_technologies'), 'value' => $technologies];
|
$entries[] = ['key' => 'Technologies', 'value' => $technologies];
|
||||||
}
|
}
|
||||||
|
|
||||||
if (array_key_exists('templateReference', $snapshot)) {
|
if (array_key_exists('templateReference', $snapshot)) {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_template_reference'), 'value' => $snapshot['templateReference']];
|
$entries[] = ['key' => 'Template Reference', 'value' => $snapshot['templateReference']];
|
||||||
}
|
}
|
||||||
|
|
||||||
$settingCount = $snapshot['settingCount']
|
$settingCount = $snapshot['settingCount']
|
||||||
@ -1255,29 +1185,29 @@ private static function generalOverviewState(Policy $record): array
|
|||||||
?? (isset($snapshot['settings']) && is_array($snapshot['settings']) ? count($snapshot['settings']) : null);
|
?? (isset($snapshot['settings']) && is_array($snapshot['settings']) ? count($snapshot['settings']) : null);
|
||||||
|
|
||||||
if (is_int($settingCount) || is_numeric($settingCount)) {
|
if (is_int($settingCount) || is_numeric($settingCount)) {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_setting_count'), 'value' => $settingCount];
|
$entries[] = ['key' => 'Setting Count', 'value' => $settingCount];
|
||||||
}
|
}
|
||||||
|
|
||||||
$version = $snapshot['version'] ?? null;
|
$version = $snapshot['version'] ?? null;
|
||||||
if (is_string($version) && $version !== '') {
|
if (is_string($version) && $version !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_version'), 'value' => $version];
|
$entries[] = ['key' => 'Version', 'value' => $version];
|
||||||
} elseif (is_numeric($version)) {
|
} elseif (is_numeric($version)) {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_version'), 'value' => $version];
|
$entries[] = ['key' => 'Version', 'value' => $version];
|
||||||
}
|
}
|
||||||
|
|
||||||
$lastModified = $snapshot['lastModifiedDateTime'] ?? null;
|
$lastModified = $snapshot['lastModifiedDateTime'] ?? null;
|
||||||
if (is_string($lastModified) && $lastModified !== '') {
|
if (is_string($lastModified) && $lastModified !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_last_modified'), 'value' => $lastModified];
|
$entries[] = ['key' => 'Last Modified', 'value' => $lastModified];
|
||||||
}
|
}
|
||||||
|
|
||||||
$createdAt = $snapshot['createdDateTime'] ?? null;
|
$createdAt = $snapshot['createdDateTime'] ?? null;
|
||||||
if (is_string($createdAt) && $createdAt !== '') {
|
if (is_string($createdAt) && $createdAt !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_created'), 'value' => $createdAt];
|
$entries[] = ['key' => 'Created', 'value' => $createdAt];
|
||||||
}
|
}
|
||||||
|
|
||||||
$description = $snapshot['description'] ?? null;
|
$description = $snapshot['description'] ?? null;
|
||||||
if (is_string($description) && $description !== '') {
|
if (is_string($description) && $description !== '') {
|
||||||
$entries[] = ['key' => static::text('resource.general_field_description'), 'value' => $description];
|
$entries[] = ['key' => 'Description', 'value' => $description];
|
||||||
}
|
}
|
||||||
|
|
||||||
return [
|
return [
|
||||||
@ -1302,9 +1232,4 @@ private static function settingsTabState(Policy $record): array
|
|||||||
|
|
||||||
return $normalized;
|
return $normalized;
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function text(string $key, array $replace = []): string
|
|
||||||
{
|
|
||||||
return __('localization.policy.'.$key, $replace);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -4,7 +4,6 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\PolicyResource;
|
use App\Filament\Resources\PolicyResource;
|
||||||
use App\Jobs\CapturePolicySnapshotJob;
|
use App\Jobs\CapturePolicySnapshotJob;
|
||||||
use App\Models\Policy;
|
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Services\OperationRunService;
|
use App\Services\OperationRunService;
|
||||||
use App\Services\Operations\BulkSelectionIdentity;
|
use App\Services\Operations\BulkSelectionIdentity;
|
||||||
@ -40,37 +39,23 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
{
|
{
|
||||||
$action = UiEnforcement::forAction(
|
$action = UiEnforcement::forAction(
|
||||||
Action::make('capture_snapshot')
|
Action::make('capture_snapshot')
|
||||||
->label($this->text('resource.capture_snapshot_action'))
|
->label('Capture snapshot')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading($this->text('resource.capture_snapshot_modal_heading'))
|
->modalHeading('Capture snapshot now')
|
||||||
->modalSubheading($this->text('resource.capture_snapshot_modal_subheading').' '.$this->text('common.source_microsoft_intune'))
|
->modalSubheading('This queues a background job that fetches the latest configuration from Microsoft Graph and stores a new policy version.')
|
||||||
->disabled(fn (): bool => $this->record instanceof Policy && $this->record->isProviderMissing())
|
|
||||||
->tooltip(fn (): ?string => $this->record instanceof Policy && $this->record->isProviderMissing()
|
|
||||||
? $this->record->currentBackupBlockedReasonLabel()
|
|
||||||
: null)
|
|
||||||
->form([
|
->form([
|
||||||
Forms\Components\Checkbox::make('include_assignments')
|
Forms\Components\Checkbox::make('include_assignments')
|
||||||
->label($this->text('resource.capture_snapshot_include_assignments'))
|
->label('Include assignments')
|
||||||
->default(true)
|
->default(true)
|
||||||
->helperText($this->text('resource.capture_snapshot_include_assignments_helper')),
|
->helperText('Captures assignment include/exclude targeting and filters.'),
|
||||||
Forms\Components\Checkbox::make('include_scope_tags')
|
Forms\Components\Checkbox::make('include_scope_tags')
|
||||||
->label($this->text('resource.capture_snapshot_include_scope_tags'))
|
->label('Include scope tags')
|
||||||
->default(true)
|
->default(true)
|
||||||
->helperText($this->text('resource.capture_snapshot_include_scope_tags_helper')),
|
->helperText('Captures policy scope tag IDs.'),
|
||||||
])
|
])
|
||||||
->action(function (array $data, AuditLogger $auditLogger) {
|
->action(function (array $data, AuditLogger $auditLogger) {
|
||||||
$policy = $this->record;
|
$policy = $this->record;
|
||||||
|
|
||||||
if ($policy instanceof Policy && $policy->isProviderMissing()) {
|
|
||||||
Notification::make()
|
|
||||||
->title($this->text('resource.capture_snapshot_unavailable_title'))
|
|
||||||
->body($policy->currentBackupBlockedReasonLabel())
|
|
||||||
->warning()
|
|
||||||
->send();
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
$tenant = $policy->tenant;
|
$tenant = $policy->tenant;
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
@ -97,7 +82,7 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy.capture_snapshot',
|
type: 'policy.capture_snapshot',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $policy, $user, $includeAssignments, $includeScopeTags): void {
|
dispatcher: function ($operationRun) use ($tenant, $policy, $user, $includeAssignments, $includeScopeTags): void {
|
||||||
@ -123,11 +108,11 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
|
|
||||||
if (! $opRun->wasRecentlyCreated) {
|
if (! $opRun->wasRecentlyCreated) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title($this->text('resource.capture_snapshot_in_progress_title'))
|
->title('Snapshot already in progress')
|
||||||
->body($this->text('resource.capture_snapshot_in_progress_body'))
|
->body('An active run already exists for this policy. Opening run details.')
|
||||||
->actions([
|
->actions([
|
||||||
\Filament\Actions\Action::make('view_run')
|
\Filament\Actions\Action::make('view_run')
|
||||||
->label($this->text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->info()
|
->info()
|
||||||
@ -160,7 +145,7 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
OperationUxPresenter::queuedToast('policy.capture_snapshot')
|
OperationUxPresenter::queuedToast('policy.capture_snapshot')
|
||||||
->actions([
|
->actions([
|
||||||
\Filament\Actions\Action::make('view_run')
|
\Filament\Actions\Action::make('view_run')
|
||||||
->label($this->text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -170,8 +155,7 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
->color('primary')
|
->color('primary')
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::TENANT_SYNC)
|
->requireCapability(Capabilities::TENANT_SYNC)
|
||||||
->tooltip($this->text('resource.capture_snapshot_permission_tooltip'))
|
->tooltip('You do not have permission to capture policy snapshots.')
|
||||||
->preserveDisabled()
|
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
if (! $action instanceof Action) {
|
if (! $action instanceof Action) {
|
||||||
@ -180,9 +164,4 @@ private function makeCaptureSnapshotAction(): Action
|
|||||||
|
|
||||||
return $action;
|
return $action;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function text(string $key, array $replace = []): string
|
|
||||||
{
|
|
||||||
return __('localization.policy.'.$key, $replace);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Filament\Resources\RestoreRunResource;
|
use App\Filament\Resources\RestoreRunResource;
|
||||||
use App\Models\Policy;
|
use App\Models\Policy;
|
||||||
use App\Models\PolicyVersion;
|
use App\Models\PolicyVersion;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Intune\RestoreService;
|
use App\Services\Intune\RestoreService;
|
||||||
@ -59,15 +59,15 @@ public static function actionSurfaceDeclaration(): ActionSurfaceDeclaration
|
|||||||
public function table(Table $table): Table
|
public function table(Table $table): Table
|
||||||
{
|
{
|
||||||
$restoreToIntune = Actions\Action::make('restore_to_intune')
|
$restoreToIntune = Actions\Action::make('restore_to_intune')
|
||||||
->label($this->text('relation.restore_to_microsoft_intune'))
|
->label('Restore to Intune')
|
||||||
->icon('heroicon-o-arrow-path-rounded-square')
|
->icon('heroicon-o-arrow-path-rounded-square')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading(fn (PolicyVersion $record): string => $this->text('relation.restore_heading', ['version' => $record->version_number]))
|
->modalHeading(fn (PolicyVersion $record): string => "Restore version {$record->version_number} to Intune?")
|
||||||
->modalSubheading($this->text('relation.restore_subheading'))
|
->modalSubheading('Creates a restore run using this policy version snapshot.')
|
||||||
->form([
|
->form([
|
||||||
Forms\Components\Toggle::make('is_dry_run')
|
Forms\Components\Toggle::make('is_dry_run')
|
||||||
->label($this->text('common.preview_only_dry_run'))
|
->label('Preview only (dry-run)')
|
||||||
->default(true),
|
->default(true),
|
||||||
])
|
])
|
||||||
->action(function (mixed $record, array $data, RestoreService $restoreService) {
|
->action(function (mixed $record, array $data, RestoreService $restoreService) {
|
||||||
@ -75,18 +75,18 @@ public function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title($this->text('relation.missing_context_title'))
|
->title('Missing tenant or user context.')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($record->managed_environment_id !== $tenant->id) {
|
if ($record->tenant_id !== $tenant->id) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title($this->text('versions.different_tenant_title'))
|
->title('Policy version belongs to a different tenant')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -103,7 +103,7 @@ public function table(Table $table): Table
|
|||||||
);
|
);
|
||||||
} catch (\Throwable $throwable) {
|
} catch (\Throwable $throwable) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title($this->text('relation.restore_run_failed_title'))
|
->title('Restore run failed to start')
|
||||||
->body($throwable->getMessage())
|
->body($throwable->getMessage())
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
@ -112,7 +112,7 @@ public function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title($this->text('relation.restore_run_started_title'))
|
->title('Restore run started')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -132,7 +132,7 @@ public function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -146,13 +146,13 @@ public function table(Table $table): Table
|
|||||||
})
|
})
|
||||||
->tooltip(function (PolicyVersion $record): ?string {
|
->tooltip(function (PolicyVersion $record): ?string {
|
||||||
if (($record->metadata['source'] ?? null) === 'metadata_only') {
|
if (($record->metadata['source'] ?? null) === 'metadata_only') {
|
||||||
return $this->text('versions.metadata_only_tooltip');
|
return 'Disabled for metadata-only snapshots (Graph did not provide policy settings).';
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -171,11 +171,10 @@ public function table(Table $table): Table
|
|||||||
|
|
||||||
return $table
|
return $table
|
||||||
->columns([
|
->columns([
|
||||||
Tables\Columns\TextColumn::make('version_number')->label($this->text('common.version'))->sortable(),
|
Tables\Columns\TextColumn::make('version_number')->sortable(),
|
||||||
Tables\Columns\TextColumn::make('captured_at')->label($this->text('common.captured'))->dateTime()->sortable(),
|
Tables\Columns\TextColumn::make('captured_at')->dateTime()->sortable(),
|
||||||
Tables\Columns\TextColumn::make('created_by')->label($this->text('common.actor')),
|
Tables\Columns\TextColumn::make('created_by')->label('Actor'),
|
||||||
Tables\Columns\TextColumn::make('policy_type')
|
Tables\Columns\TextColumn::make('policy_type')
|
||||||
->label($this->text('common.type'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType))
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType))
|
||||||
@ -190,8 +189,8 @@ public function table(Table $table): Table
|
|||||||
$restoreToIntune,
|
$restoreToIntune,
|
||||||
])
|
])
|
||||||
->bulkActions([])
|
->bulkActions([])
|
||||||
->emptyStateHeading($this->text('relation.no_versions_captured'))
|
->emptyStateHeading('No versions captured')
|
||||||
->emptyStateDescription($this->text('relation.no_versions_captured_description'));
|
->emptyStateDescription('Capture or sync this policy again to create version history entries.');
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveOwnerScopedVersionRecord(Policy $policy, mixed $record): PolicyVersion
|
private function resolveOwnerScopedVersionRecord(Policy $policy, mixed $record): PolicyVersion
|
||||||
@ -205,7 +204,7 @@ private function resolveOwnerScopedVersionRecord(Policy $policy, mixed $record):
|
|||||||
}
|
}
|
||||||
|
|
||||||
$resolvedRecord = $policy->versions()
|
$resolvedRecord = $policy->versions()
|
||||||
->where('managed_environment_id', (int) $policy->managed_environment_id)
|
->where('tenant_id', (int) $policy->tenant_id)
|
||||||
->whereKey($recordId)
|
->whereKey($recordId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
@ -215,9 +214,4 @@ private function resolveOwnerScopedVersionRecord(Policy $policy, mixed $record):
|
|||||||
|
|
||||||
return $resolvedRecord;
|
return $resolvedRecord;
|
||||||
}
|
}
|
||||||
|
|
||||||
private function text(string $key, array $replace = []): string
|
|
||||||
{
|
|
||||||
return __('localization.policy.'.$key, $replace);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|||||||
@ -5,7 +5,6 @@
|
|||||||
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
use App\Filament\Concerns\InteractsWithTenantOwnedRecords;
|
||||||
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
use App\Filament\Concerns\ResolvesPanelTenantContext;
|
||||||
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
use App\Filament\Concerns\ScopesGlobalSearchToTenant;
|
||||||
use App\Filament\Concerns\WorkspaceScopedTenantRoutes;
|
|
||||||
use App\Filament\Resources\PolicyVersionResource\Pages;
|
use App\Filament\Resources\PolicyVersionResource\Pages;
|
||||||
use App\Filament\Support\NormalizedDiffSurface;
|
use App\Filament\Support\NormalizedDiffSurface;
|
||||||
use App\Filament\Support\NormalizedSettingsSurface;
|
use App\Filament\Support\NormalizedSettingsSurface;
|
||||||
@ -15,7 +14,7 @@
|
|||||||
use App\Models\BackupItem;
|
use App\Models\BackupItem;
|
||||||
use App\Models\BackupSet;
|
use App\Models\BackupSet;
|
||||||
use App\Models\PolicyVersion;
|
use App\Models\PolicyVersion;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
@ -33,7 +32,6 @@
|
|||||||
use App\Support\Filament\FilterOptionCatalog;
|
use App\Support\Filament\FilterOptionCatalog;
|
||||||
use App\Support\Filament\FilterPresets;
|
use App\Support\Filament\FilterPresets;
|
||||||
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
use App\Support\Navigation\CrossResourceNavigationMatrix;
|
||||||
use App\Support\Navigation\NavigationScope;
|
|
||||||
use App\Support\Navigation\RelatedContextEntry;
|
use App\Support\Navigation\RelatedContextEntry;
|
||||||
use App\Support\Navigation\RelatedNavigationResolver;
|
use App\Support\Navigation\RelatedNavigationResolver;
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
@ -71,7 +69,6 @@ class PolicyVersionResource extends Resource
|
|||||||
use InteractsWithTenantOwnedRecords;
|
use InteractsWithTenantOwnedRecords;
|
||||||
use ResolvesPanelTenantContext;
|
use ResolvesPanelTenantContext;
|
||||||
use ScopesGlobalSearchToTenant;
|
use ScopesGlobalSearchToTenant;
|
||||||
use WorkspaceScopedTenantRoutes;
|
|
||||||
|
|
||||||
protected static ?string $model = PolicyVersion::class;
|
protected static ?string $model = PolicyVersion::class;
|
||||||
|
|
||||||
@ -85,8 +82,11 @@ class PolicyVersionResource extends Resource
|
|||||||
|
|
||||||
public static function shouldRegisterNavigation(): bool
|
public static function shouldRegisterNavigation(): bool
|
||||||
{
|
{
|
||||||
return NavigationScope::shouldRegisterEnvironmentNavigation()
|
if (Filament::getCurrentPanel()?->getId() === 'admin') {
|
||||||
&& parent::shouldRegisterNavigation();
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return parent::shouldRegisterNavigation();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function canViewAny(): bool
|
public static function canViewAny(): bool
|
||||||
@ -94,7 +94,7 @@ public static function canViewAny(): bool
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -121,25 +121,23 @@ public static function infolist(Schema $schema): Schema
|
|||||||
return $schema
|
return $schema
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\TextEntry::make('policy.display_name')
|
Infolists\Components\TextEntry::make('policy.display_name')
|
||||||
->label(static::text('common.policy'))
|
->label('Policy')
|
||||||
->state(fn (PolicyVersion $record): string => static::resolvedDisplayName($record)),
|
->state(fn (PolicyVersion $record): string => static::resolvedDisplayName($record)),
|
||||||
Infolists\Components\TextEntry::make('version_number')->label(static::text('common.version')),
|
Infolists\Components\TextEntry::make('version_number')->label('Version'),
|
||||||
Infolists\Components\TextEntry::make('policy_type')
|
Infolists\Components\TextEntry::make('policy_type')
|
||||||
->label(static::text('common.type'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
||||||
Infolists\Components\TextEntry::make('platform')
|
Infolists\Components\TextEntry::make('platform')
|
||||||
->label(static::text('common.platform'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform)),
|
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform)),
|
||||||
Infolists\Components\TextEntry::make('created_by')->label(static::text('common.actor')),
|
Infolists\Components\TextEntry::make('created_by')->label('Actor'),
|
||||||
Infolists\Components\TextEntry::make('captured_at')->dateTime()->label(static::text('common.captured')),
|
Infolists\Components\TextEntry::make('captured_at')->dateTime(),
|
||||||
Section::make(static::text('versions.backup_quality_section'))
|
Section::make('Backup quality')
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\TextEntry::make('quality_snapshot_mode')
|
Infolists\Components\TextEntry::make('quality_snapshot_mode')
|
||||||
->label(static::text('common.snapshot'))
|
->label('Snapshot')
|
||||||
->badge()
|
->badge()
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->snapshotMode)
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->snapshotMode)
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
||||||
@ -147,27 +145,27 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->icon(BadgeRenderer::icon(BadgeDomain::PolicySnapshotMode))
|
->icon(BadgeRenderer::icon(BadgeDomain::PolicySnapshotMode))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicySnapshotMode)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicySnapshotMode)),
|
||||||
Infolists\Components\TextEntry::make('quality_summary')
|
Infolists\Components\TextEntry::make('quality_summary')
|
||||||
->label(static::text('versions.backup_quality'))
|
->label('Backup quality')
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->compactSummary),
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->compactSummary),
|
||||||
Infolists\Components\TextEntry::make('quality_assignment_signal')
|
Infolists\Components\TextEntry::make('quality_assignment_signal')
|
||||||
->label(static::text('versions.assignment_quality'))
|
->label('Assignment quality')
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionAssignmentQualityLabel($record)),
|
->state(fn (PolicyVersion $record): string => static::policyVersionAssignmentQualityLabel($record)),
|
||||||
Infolists\Components\TextEntry::make('quality_next_action')
|
Infolists\Components\TextEntry::make('quality_next_action')
|
||||||
->label(static::text('versions.next_action'))
|
->label('Next action')
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->nextAction),
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->nextAction),
|
||||||
Infolists\Components\TextEntry::make('quality_integrity_warning')
|
Infolists\Components\TextEntry::make('quality_integrity_warning')
|
||||||
->label(static::text('versions.integrity_note'))
|
->label('Integrity note')
|
||||||
->state(fn (PolicyVersion $record): ?string => static::policyVersionQualitySummary($record)->integrityWarning)
|
->state(fn (PolicyVersion $record): ?string => static::policyVersionQualitySummary($record)->integrityWarning)
|
||||||
->visible(fn (PolicyVersion $record): bool => static::policyVersionQualitySummary($record)->hasIntegrityWarning())
|
->visible(fn (PolicyVersion $record): bool => static::policyVersionQualitySummary($record)->hasIntegrityWarning())
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
Infolists\Components\TextEntry::make('quality_boundary')
|
Infolists\Components\TextEntry::make('quality_boundary')
|
||||||
->label(static::text('versions.boundary'))
|
->label('Boundary')
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->positiveClaimBoundary)
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->positiveClaimBoundary)
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
])
|
])
|
||||||
->columns(2)
|
->columns(2)
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
Section::make(static::text('versions.related_context_section'))
|
Section::make('Related context')
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\ViewEntry::make('related_context')
|
Infolists\Components\ViewEntry::make('related_context')
|
||||||
->label('')
|
->label('')
|
||||||
@ -181,7 +179,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->persistTabInQueryString('tab')
|
->persistTabInQueryString('tab')
|
||||||
->columnSpanFull()
|
->columnSpanFull()
|
||||||
->tabs([
|
->tabs([
|
||||||
Tab::make(static::text('common.settings'))
|
Tab::make('Normalized settings')
|
||||||
->id('normalized-settings')
|
->id('normalized-settings')
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\ViewEntry::make('normalized_settings')
|
Infolists\Components\ViewEntry::make('normalized_settings')
|
||||||
@ -200,14 +198,14 @@ public static function infolist(Schema $schema): Schema
|
|||||||
return NormalizedSettingsSurface::build($normalized, 'policy_version');
|
return NormalizedSettingsSurface::build($normalized, 'policy_version');
|
||||||
}),
|
}),
|
||||||
]),
|
]),
|
||||||
Tab::make(static::text('resource.tab_json'))
|
Tab::make('Raw JSON')
|
||||||
->id('raw-json')
|
->id('raw-json')
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\ViewEntry::make('snapshot_pretty')
|
Infolists\Components\ViewEntry::make('snapshot_pretty')
|
||||||
->view('filament.infolists.entries.snapshot-json')
|
->view('filament.infolists.entries.snapshot-json')
|
||||||
->state(fn (PolicyVersion $record) => $record->snapshot ?? []),
|
->state(fn (PolicyVersion $record) => $record->snapshot ?? []),
|
||||||
]),
|
]),
|
||||||
Tab::make(static::text('versions.diff_tab'))
|
Tab::make('Diff')
|
||||||
->id('diff')
|
->id('diff')
|
||||||
->schema([
|
->schema([
|
||||||
Infolists\Components\ViewEntry::make('normalized_diff')
|
Infolists\Components\ViewEntry::make('normalized_diff')
|
||||||
@ -228,7 +226,7 @@ public static function infolist(Schema $schema): Schema
|
|||||||
return NormalizedDiffSurface::build($result, 'policy_version');
|
return NormalizedDiffSurface::build($result, 'policy_version');
|
||||||
}),
|
}),
|
||||||
Infolists\Components\ViewEntry::make('diff_json')
|
Infolists\Components\ViewEntry::make('diff_json')
|
||||||
->label(static::text('versions.raw_diff_advanced'))
|
->label('Raw diff (advanced)')
|
||||||
->view('filament.infolists.entries.snapshot-json')
|
->view('filament.infolists.entries.snapshot-json')
|
||||||
->state(function (PolicyVersion $record) {
|
->state(function (PolicyVersion $record) {
|
||||||
$previous = $record->previous();
|
$previous = $record->previous();
|
||||||
@ -277,11 +275,11 @@ public static function infolist(Schema $schema): Schema
|
|||||||
public static function table(Table $table): Table
|
public static function table(Table $table): Table
|
||||||
{
|
{
|
||||||
$bulkPruneVersions = BulkAction::make('bulk_prune_versions')
|
$bulkPruneVersions = BulkAction::make('bulk_prune_versions')
|
||||||
->label(static::text('versions.prune_versions'))
|
->label('Prune Versions')
|
||||||
->icon('heroicon-o-trash')
|
->icon('heroicon-o-trash')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalDescription(static::text('versions.prune_modal_description'))
|
->modalDescription('Only versions captured more than the specified retention window (in days) are eligible. Newer versions will be skipped.')
|
||||||
->hidden(function (HasTable $livewire): bool {
|
->hidden(function (HasTable $livewire): bool {
|
||||||
$trashedFilterState = $livewire->getTableFilterState(TrashedFilter::class) ?? [];
|
$trashedFilterState = $livewire->getTableFilterState(TrashedFilter::class) ?? [];
|
||||||
$value = $trashedFilterState['value'] ?? null;
|
$value = $trashedFilterState['value'] ?? null;
|
||||||
@ -293,8 +291,8 @@ public static function table(Table $table): Table
|
|||||||
->form(function (Collection $records) {
|
->form(function (Collection $records) {
|
||||||
$fields = [
|
$fields = [
|
||||||
Forms\Components\TextInput::make('retention_days')
|
Forms\Components\TextInput::make('retention_days')
|
||||||
->label(static::text('versions.retention_days'))
|
->label('Retention Days')
|
||||||
->helperText(static::text('versions.retention_days_helper'))
|
->helperText('Versions captured within the last N days will be skipped.')
|
||||||
->numeric()
|
->numeric()
|
||||||
->required()
|
->required()
|
||||||
->default(90)
|
->default(90)
|
||||||
@ -303,11 +301,11 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
if ($records->count() >= 20) {
|
if ($records->count() >= 20) {
|
||||||
$fields[] = Forms\Components\TextInput::make('confirmation')
|
$fields[] = Forms\Components\TextInput::make('confirmation')
|
||||||
->label(static::text('common.type_delete_to_confirm'))
|
->label('Type DELETE to confirm')
|
||||||
->required()
|
->required()
|
||||||
->in(['DELETE'])
|
->in(['DELETE'])
|
||||||
->validationMessages([
|
->validationMessages([
|
||||||
'in' => static::text('common.type_delete_to_confirm_validation'),
|
'in' => 'Please type DELETE to confirm.',
|
||||||
]);
|
]);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -321,7 +319,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
$retentionDays = (int) ($data['retention_days'] ?? 90);
|
$retentionDays = (int) ($data['retention_days'] ?? 90);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -342,7 +340,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy_version.prune',
|
type: 'policy_version.prune',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids, $retentionDays): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids, $retentionDays): void {
|
||||||
@ -365,7 +363,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast('policy_version.prune')
|
OperationUxPresenter::queuedToast('policy_version.prune')
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -374,11 +372,11 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
UiEnforcement::forBulkAction($bulkPruneVersions)
|
UiEnforcement::forBulkAction($bulkPruneVersions)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
$bulkRestoreVersions = BulkAction::make('bulk_restore_versions')
|
$bulkRestoreVersions = BulkAction::make('bulk_restore_versions')
|
||||||
->label(static::text('versions.restore_versions'))
|
->label('Restore Versions')
|
||||||
->icon('heroicon-o-arrow-uturn-left')
|
->icon('heroicon-o-arrow-uturn-left')
|
||||||
->color('success')
|
->color('success')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -390,15 +388,15 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
return ! $isOnlyTrashed;
|
return ! $isOnlyTrashed;
|
||||||
})
|
})
|
||||||
->modalHeading(fn (Collection $records) => static::text('versions.restore_versions_modal_heading', ['count' => $records->count()]))
|
->modalHeading(fn (Collection $records) => "Restore {$records->count()} policy versions?")
|
||||||
->modalDescription(static::text('versions.restore_versions_modal_description'))
|
->modalDescription('Archived versions will be restored back to the active list. Active versions will be skipped.')
|
||||||
->action(function (Collection $records) {
|
->action(function (Collection $records) {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -419,7 +417,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy_version.restore',
|
type: 'policy_version.restore',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
||||||
@ -440,7 +438,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast('policy_version.restore')
|
OperationUxPresenter::queuedToast('policy_version.restore')
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -449,11 +447,11 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
UiEnforcement::forBulkAction($bulkRestoreVersions)
|
UiEnforcement::forBulkAction($bulkRestoreVersions)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
$bulkForceDeleteVersions = BulkAction::make('bulk_force_delete_versions')
|
$bulkForceDeleteVersions = BulkAction::make('bulk_force_delete_versions')
|
||||||
->label(static::text('versions.force_delete_versions'))
|
->label('Force Delete Versions')
|
||||||
->icon('heroicon-o-trash')
|
->icon('heroicon-o-trash')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -465,15 +463,15 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
return ! $isOnlyTrashed;
|
return ! $isOnlyTrashed;
|
||||||
})
|
})
|
||||||
->modalHeading(fn (Collection $records) => static::text('versions.force_delete_versions_modal_heading', ['count' => $records->count()]))
|
->modalHeading(fn (Collection $records) => "Force delete {$records->count()} policy versions?")
|
||||||
->modalDescription(static::text('versions.force_delete_versions_modal_description'))
|
->modalDescription('This is permanent. Only archived versions will be permanently deleted; active versions will be skipped.')
|
||||||
->form([
|
->form([
|
||||||
Forms\Components\TextInput::make('confirmation')
|
Forms\Components\TextInput::make('confirmation')
|
||||||
->label(static::text('common.type_delete_to_confirm'))
|
->label('Type DELETE to confirm')
|
||||||
->required()
|
->required()
|
||||||
->in(['DELETE'])
|
->in(['DELETE'])
|
||||||
->validationMessages([
|
->validationMessages([
|
||||||
'in' => static::text('common.type_delete_to_confirm_validation'),
|
'in' => 'Please type DELETE to confirm.',
|
||||||
]),
|
]),
|
||||||
])
|
])
|
||||||
->action(function (Collection $records, array $data) {
|
->action(function (Collection $records, array $data) {
|
||||||
@ -482,7 +480,7 @@ public static function table(Table $table): Table
|
|||||||
$count = $records->count();
|
$count = $records->count();
|
||||||
$ids = $records->pluck('id')->toArray();
|
$ids = $records->pluck('id')->toArray();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -503,7 +501,7 @@ public static function table(Table $table): Table
|
|||||||
tenant: $tenant,
|
tenant: $tenant,
|
||||||
type: 'policy_version.force_delete',
|
type: 'policy_version.force_delete',
|
||||||
targetScope: [
|
targetScope: [
|
||||||
'entra_tenant_id' => (string) ($tenant->managed_environment_id ?? $tenant->external_id),
|
'entra_tenant_id' => (string) ($tenant->tenant_id ?? $tenant->external_id),
|
||||||
],
|
],
|
||||||
selectionIdentity: $selectionIdentity,
|
selectionIdentity: $selectionIdentity,
|
||||||
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
dispatcher: function ($operationRun) use ($tenant, $initiator, $ids): void {
|
||||||
@ -524,7 +522,7 @@ public static function table(Table $table): Table
|
|||||||
OperationUxPresenter::queuedToast('policy_version.force_delete')
|
OperationUxPresenter::queuedToast('policy_version.force_delete')
|
||||||
->actions([
|
->actions([
|
||||||
Actions\Action::make('view_run')
|
Actions\Action::make('view_run')
|
||||||
->label(static::text('common.open_operation'))
|
->label('Open operation')
|
||||||
->url(OperationRunLinks::view($opRun, $tenant)),
|
->url(OperationRunLinks::view($opRun, $tenant)),
|
||||||
])
|
])
|
||||||
->send();
|
->send();
|
||||||
@ -533,7 +531,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
UiEnforcement::forBulkAction($bulkForceDeleteVersions)
|
UiEnforcement::forBulkAction($bulkForceDeleteVersions)
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
return $table
|
return $table
|
||||||
@ -544,15 +542,13 @@ public static function table(Table $table): Table
|
|||||||
->persistSortInSession()
|
->persistSortInSession()
|
||||||
->columns([
|
->columns([
|
||||||
Tables\Columns\TextColumn::make('policy.display_name')
|
Tables\Columns\TextColumn::make('policy.display_name')
|
||||||
->label(static::text('common.policy'))
|
->label('Policy')
|
||||||
->sortable()
|
->sortable()
|
||||||
->searchable()
|
->searchable()
|
||||||
->getStateUsing(fn (PolicyVersion $record): string => static::resolvedDisplayName($record)),
|
->getStateUsing(fn (PolicyVersion $record): string => static::resolvedDisplayName($record)),
|
||||||
Tables\Columns\TextColumn::make('version_number')
|
Tables\Columns\TextColumn::make('version_number')->sortable(),
|
||||||
->label(static::text('common.version'))
|
|
||||||
->sortable(),
|
|
||||||
Tables\Columns\TextColumn::make('snapshot_mode')
|
Tables\Columns\TextColumn::make('snapshot_mode')
|
||||||
->label(static::text('common.snapshot'))
|
->label('Snapshot')
|
||||||
->badge()
|
->badge()
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->snapshotMode)
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->snapshotMode)
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
->formatStateUsing(BadgeRenderer::label(BadgeDomain::PolicySnapshotMode))
|
||||||
@ -560,33 +556,30 @@ public static function table(Table $table): Table
|
|||||||
->icon(BadgeRenderer::icon(BadgeDomain::PolicySnapshotMode))
|
->icon(BadgeRenderer::icon(BadgeDomain::PolicySnapshotMode))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicySnapshotMode)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::PolicySnapshotMode)),
|
||||||
Tables\Columns\TextColumn::make('backup_quality')
|
Tables\Columns\TextColumn::make('backup_quality')
|
||||||
->label(static::text('versions.backup_quality'))
|
->label('Backup quality')
|
||||||
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->compactSummary)
|
->state(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->compactSummary)
|
||||||
->description(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->nextAction)
|
->description(fn (PolicyVersion $record): string => static::policyVersionQualitySummary($record)->nextAction)
|
||||||
->wrap(),
|
->wrap(),
|
||||||
Tables\Columns\TextColumn::make('policy_type')
|
Tables\Columns\TextColumn::make('policy_type')
|
||||||
->label(static::text('common.type'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::PolicyType))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
->color(TagBadgeRenderer::color(TagBadgeDomain::PolicyType)),
|
||||||
Tables\Columns\TextColumn::make('platform')
|
Tables\Columns\TextColumn::make('platform')
|
||||||
->label(static::text('common.platform'))
|
|
||||||
->badge()
|
->badge()
|
||||||
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
->formatStateUsing(TagBadgeRenderer::label(TagBadgeDomain::Platform))
|
||||||
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform)),
|
->color(TagBadgeRenderer::color(TagBadgeDomain::Platform)),
|
||||||
Tables\Columns\TextColumn::make('created_by')->label(static::text('common.actor'))->toggleable(isToggledHiddenByDefault: true),
|
Tables\Columns\TextColumn::make('created_by')->label('Actor')->toggleable(isToggledHiddenByDefault: true),
|
||||||
Tables\Columns\TextColumn::make('captured_at')->label(static::text('common.captured'))->dateTime()->sortable(),
|
Tables\Columns\TextColumn::make('captured_at')->dateTime()->sortable(),
|
||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
Tables\Filters\SelectFilter::make('policy_type')
|
Tables\Filters\SelectFilter::make('policy_type')
|
||||||
->label(static::text('common.type'))
|
->label('Type')
|
||||||
->options(FilterOptionCatalog::policyTypes())
|
->options(FilterOptionCatalog::policyTypes())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
Tables\Filters\SelectFilter::make('platform')
|
Tables\Filters\SelectFilter::make('platform')
|
||||||
->label(static::text('common.platform'))
|
|
||||||
->options(FilterOptionCatalog::platforms())
|
->options(FilterOptionCatalog::platforms())
|
||||||
->searchable(),
|
->searchable(),
|
||||||
FilterPresets::dateRange('captured_at', static::text('common.captured'), 'captured_at'),
|
FilterPresets::dateRange('captured_at', 'Captured', 'captured_at'),
|
||||||
FilterPresets::archived(),
|
FilterPresets::archived(),
|
||||||
])
|
])
|
||||||
->recordUrl(static fn (PolicyVersion $record): ?string => static::canView($record)
|
->recordUrl(static fn (PolicyVersion $record): ?string => static::canView($record)
|
||||||
@ -597,17 +590,17 @@ public static function table(Table $table): Table
|
|||||||
Actions\ActionGroup::make([
|
Actions\ActionGroup::make([
|
||||||
(function (): Actions\Action {
|
(function (): Actions\Action {
|
||||||
$action = Actions\Action::make('restore_via_wizard')
|
$action = Actions\Action::make('restore_via_wizard')
|
||||||
->label(static::text('versions.restore_via_wizard'))
|
->label('Restore via Wizard')
|
||||||
->icon('heroicon-o-arrow-path-rounded-square')
|
->icon('heroicon-o-arrow-path-rounded-square')
|
||||||
->color('primary')
|
->color('primary')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
->modalHeading(fn (PolicyVersion $record): string => static::text('versions.restore_via_wizard_modal_heading', ['version' => $record->version_number]))
|
->modalHeading(fn (PolicyVersion $record): string => "Restore version {$record->version_number} via wizard?")
|
||||||
->modalSubheading(static::text('versions.restore_via_wizard_modal_subheading'))
|
->modalSubheading('Creates a 1-item backup set from this snapshot and opens the restore run wizard prefilled.')
|
||||||
->visible(function (): bool {
|
->visible(function (): bool {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -624,7 +617,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -641,7 +634,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -653,11 +646,11 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
if (! $resolver->can($user, $tenant, Capabilities::TENANT_MANAGE)) {
|
if (! $resolver->can($user, $tenant, Capabilities::TENANT_MANAGE)) {
|
||||||
return static::text('versions.restore_run_permission_tooltip');
|
return 'You do not have permission to create restore runs.';
|
||||||
}
|
}
|
||||||
|
|
||||||
if (static::policyVersionQualitySummary($record)->snapshotMode === 'metadata_only') {
|
if (static::policyVersionQualitySummary($record)->snapshotMode === 'metadata_only') {
|
||||||
return static::text('versions.metadata_only_tooltip');
|
return 'Disabled for metadata-only snapshots (Graph did not provide policy settings).';
|
||||||
}
|
}
|
||||||
|
|
||||||
return null;
|
return null;
|
||||||
@ -666,7 +659,7 @@ public static function table(Table $table): Table
|
|||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -683,17 +676,17 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
if (static::policyVersionQualitySummary($record)->snapshotMode === 'metadata_only') {
|
if (static::policyVersionQualitySummary($record)->snapshotMode === 'metadata_only') {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.restore_disabled_metadata_title'))
|
->title('Restore disabled for metadata-only snapshot')
|
||||||
->body(static::text('versions.restore_disabled_metadata_body'))
|
->body('This snapshot only contains metadata; Graph did not provide policy settings to restore.')
|
||||||
->warning()
|
->warning()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! $tenant || $record->managed_environment_id !== $tenant->id) {
|
if (! $tenant || $record->tenant_id !== $tenant->id) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.different_tenant_title'))
|
->title('Policy version belongs to a different tenant')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -704,7 +697,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
if (! $policy) {
|
if (! $policy) {
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.missing_policy_title'))
|
->title('Policy could not be found for this version')
|
||||||
->danger()
|
->danger()
|
||||||
->send();
|
->send();
|
||||||
|
|
||||||
@ -712,11 +705,12 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
$backupSet = BackupSet::create([
|
$backupSet = BackupSet::create([
|
||||||
'managed_environment_id' => $tenant->id,
|
'tenant_id' => $tenant->id,
|
||||||
'name' => static::text('versions.backup_set_name', [
|
'name' => sprintf(
|
||||||
'policy' => $policy->display_name,
|
'Policy Version Restore • %s • v%d',
|
||||||
'version' => $record->version_number,
|
$policy->display_name,
|
||||||
]),
|
$record->version_number
|
||||||
|
),
|
||||||
'created_by' => $user?->email,
|
'created_by' => $user?->email,
|
||||||
'status' => 'completed',
|
'status' => 'completed',
|
||||||
'item_count' => 1,
|
'item_count' => 1,
|
||||||
@ -770,7 +764,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
$backupItem = BackupItem::create([
|
$backupItem = BackupItem::create([
|
||||||
'managed_environment_id' => $tenant->id,
|
'tenant_id' => $tenant->id,
|
||||||
'backup_set_id' => $backupSet->id,
|
'backup_set_id' => $backupSet->id,
|
||||||
'policy_id' => $policy->id,
|
'policy_id' => $policy->id,
|
||||||
'policy_version_id' => $record->id,
|
'policy_version_id' => $record->id,
|
||||||
@ -794,7 +788,7 @@ public static function table(Table $table): Table
|
|||||||
})(),
|
})(),
|
||||||
(function (): Actions\Action {
|
(function (): Actions\Action {
|
||||||
$action = Actions\Action::make('archive')
|
$action = Actions\Action::make('archive')
|
||||||
->label(static::text('versions.archive'))
|
->label('Archive')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->icon('heroicon-o-archive-box-x-mark')
|
->icon('heroicon-o-archive-box-x-mark')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -803,7 +797,7 @@ public static function table(Table $table): Table
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant) {
|
||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -821,7 +815,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.archived_title'))
|
->title('Policy version archived')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
});
|
});
|
||||||
@ -829,14 +823,14 @@ public static function table(Table $table): Table
|
|||||||
UiEnforcement::forAction($action)
|
UiEnforcement::forAction($action)
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
return $action;
|
return $action;
|
||||||
})(),
|
})(),
|
||||||
(function (): Actions\Action {
|
(function (): Actions\Action {
|
||||||
$action = Actions\Action::make('forceDelete')
|
$action = Actions\Action::make('forceDelete')
|
||||||
->label(static::text('versions.force_delete'))
|
->label('Force delete')
|
||||||
->color('danger')
|
->color('danger')
|
||||||
->icon('heroicon-o-trash')
|
->icon('heroicon-o-trash')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -845,7 +839,7 @@ public static function table(Table $table): Table
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant) {
|
||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -863,7 +857,7 @@ public static function table(Table $table): Table
|
|||||||
$record->forceDelete();
|
$record->forceDelete();
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.force_deleted_title'))
|
->title('Policy version permanently deleted')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
});
|
});
|
||||||
@ -871,7 +865,7 @@ public static function table(Table $table): Table
|
|||||||
UiEnforcement::forAction($action)
|
UiEnforcement::forAction($action)
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
return $action;
|
return $action;
|
||||||
@ -879,7 +873,7 @@ public static function table(Table $table): Table
|
|||||||
|
|
||||||
(function (): Actions\Action {
|
(function (): Actions\Action {
|
||||||
$action = Actions\Action::make('restore')
|
$action = Actions\Action::make('restore')
|
||||||
->label(static::text('common.restore'))
|
->label('Restore')
|
||||||
->color('success')
|
->color('success')
|
||||||
->icon('heroicon-o-arrow-uturn-left')
|
->icon('heroicon-o-arrow-uturn-left')
|
||||||
->requiresConfirmation()
|
->requiresConfirmation()
|
||||||
@ -888,7 +882,7 @@ public static function table(Table $table): Table
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $user instanceof User || ! $tenant instanceof ManagedEnvironment) {
|
if (! $user instanceof User || ! $tenant instanceof Tenant) {
|
||||||
abort(403);
|
abort(403);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -906,7 +900,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
Notification::make()
|
Notification::make()
|
||||||
->title(static::text('versions.restored_title'))
|
->title('Policy version restored')
|
||||||
->success()
|
->success()
|
||||||
->send();
|
->send();
|
||||||
});
|
});
|
||||||
@ -914,13 +908,13 @@ public static function table(Table $table): Table
|
|||||||
UiEnforcement::forAction($action)
|
UiEnforcement::forAction($action)
|
||||||
->preserveVisibility()
|
->preserveVisibility()
|
||||||
->requireCapability(Capabilities::TENANT_MANAGE)
|
->requireCapability(Capabilities::TENANT_MANAGE)
|
||||||
->tooltip(static::text('versions.manage_permission_tooltip'))
|
->tooltip('You do not have permission to manage policy versions.')
|
||||||
->apply();
|
->apply();
|
||||||
|
|
||||||
return $action;
|
return $action;
|
||||||
})(),
|
})(),
|
||||||
])
|
])
|
||||||
->label(static::text('common.more'))
|
->label('More')
|
||||||
->icon('heroicon-o-ellipsis-vertical')
|
->icon('heroicon-o-ellipsis-vertical')
|
||||||
->color('gray'),
|
->color('gray'),
|
||||||
])
|
])
|
||||||
@ -929,14 +923,14 @@ public static function table(Table $table): Table
|
|||||||
$bulkPruneVersions,
|
$bulkPruneVersions,
|
||||||
$bulkRestoreVersions,
|
$bulkRestoreVersions,
|
||||||
$bulkForceDeleteVersions,
|
$bulkForceDeleteVersions,
|
||||||
])->label(static::text('common.more')),
|
])->label('More'),
|
||||||
])
|
])
|
||||||
->emptyStateHeading(static::text('versions.empty_state_heading'))
|
->emptyStateHeading('No policy versions')
|
||||||
->emptyStateDescription(static::text('versions.empty_state_description'))
|
->emptyStateDescription('Capture or sync policy snapshots to build a version history.')
|
||||||
->emptyStateIcon('heroicon-o-clock')
|
->emptyStateIcon('heroicon-o-clock')
|
||||||
->emptyStateActions([
|
->emptyStateActions([
|
||||||
Actions\Action::make('open_backup_sets')
|
Actions\Action::make('open_backup_sets')
|
||||||
->label(static::text('versions.open_backup_sets'))
|
->label('Open backup sets')
|
||||||
->url(fn (): string => BackupSetResource::getUrl('index', tenant: static::resolveTenantContextForCurrentPanel()))
|
->url(fn (): string => BackupSetResource::getUrl('index', tenant: static::resolveTenantContextForCurrentPanel()))
|
||||||
->color('gray'),
|
->color('gray'),
|
||||||
]);
|
]);
|
||||||
@ -1022,7 +1016,7 @@ public static function relatedContextEntries(PolicyVersion $record): array
|
|||||||
private static function primaryRelatedAction(): Actions\Action
|
private static function primaryRelatedAction(): Actions\Action
|
||||||
{
|
{
|
||||||
return Actions\Action::make('primary_drill_down')
|
return Actions\Action::make('primary_drill_down')
|
||||||
->label(fn (PolicyVersion $record): string => static::primaryRelatedEntry($record)?->actionLabel ?? static::text('versions.related_record_fallback'))
|
->label(fn (PolicyVersion $record): string => static::primaryRelatedEntry($record)?->actionLabel ?? 'Open related record')
|
||||||
->url(fn (PolicyVersion $record): ?string => static::primaryRelatedEntry($record)?->targetUrl)
|
->url(fn (PolicyVersion $record): ?string => static::primaryRelatedEntry($record)?->targetUrl)
|
||||||
->hidden(fn (PolicyVersion $record): bool => ! (static::primaryRelatedEntry($record)?->isAvailable() ?? false))
|
->hidden(fn (PolicyVersion $record): bool => ! (static::primaryRelatedEntry($record)?->isAvailable() ?? false))
|
||||||
->color('gray');
|
->color('gray');
|
||||||
@ -1038,10 +1032,10 @@ private static function policyVersionAssignmentQualityLabel(PolicyVersion $recor
|
|||||||
$summary = static::policyVersionQualitySummary($record);
|
$summary = static::policyVersionQualitySummary($record);
|
||||||
|
|
||||||
return match (true) {
|
return match (true) {
|
||||||
$summary->hasAssignmentIssues && $summary->hasOrphanedAssignments => static::text('versions.assignment_fetch_failed_orphaned'),
|
$summary->hasAssignmentIssues && $summary->hasOrphanedAssignments => 'Assignment fetch failed and orphaned targets were detected.',
|
||||||
$summary->hasAssignmentIssues => static::text('versions.assignment_fetch_failed'),
|
$summary->hasAssignmentIssues => 'Assignment fetch failed during capture.',
|
||||||
$summary->hasOrphanedAssignments => static::text('versions.assignment_orphaned'),
|
$summary->hasOrphanedAssignments => 'Orphaned assignment targets were detected.',
|
||||||
default => static::text('versions.assignment_no_issues'),
|
default => 'No assignment issues were detected from captured metadata.',
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1071,11 +1065,6 @@ private static function resolvedDisplayName(PolicyVersion $record): string
|
|||||||
return $displayName;
|
return $displayName;
|
||||||
}
|
}
|
||||||
|
|
||||||
return static::text('versions.fallback_display_name', ['version' => (int) $record->version_number]);
|
return sprintf('Version %d', (int) $record->version_number);
|
||||||
}
|
|
||||||
|
|
||||||
private static function text(string $key, array $replace = []): string
|
|
||||||
{
|
|
||||||
return __('localization.policy.'.$key, $replace);
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -8,10 +8,9 @@
|
|||||||
use App\Jobs\ProviderInventorySyncJob;
|
use App\Jobs\ProviderInventorySyncJob;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ProviderConnection;
|
use App\Models\ProviderConnection;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Auth\ManagedEnvironmentAccessScopeResolver;
|
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Services\Providers\ProviderConnectionMutationService;
|
use App\Services\Providers\ProviderConnectionMutationService;
|
||||||
use App\Services\Providers\ProviderOperationStartGate;
|
use App\Services\Providers\ProviderOperationStartGate;
|
||||||
@ -20,7 +19,6 @@
|
|||||||
use App\Support\Badges\BadgeDomain;
|
use App\Support\Badges\BadgeDomain;
|
||||||
use App\Support\Badges\BadgeRenderer;
|
use App\Support\Badges\BadgeRenderer;
|
||||||
use App\Support\Filament\TablePaginationProfiles;
|
use App\Support\Filament\TablePaginationProfiles;
|
||||||
use App\Support\ManagedEnvironmentLinks;
|
|
||||||
use App\Support\OperationRunLinks;
|
use App\Support\OperationRunLinks;
|
||||||
use App\Support\OperationRunType;
|
use App\Support\OperationRunType;
|
||||||
use App\Support\OpsUx\OperationUxPresenter;
|
use App\Support\OpsUx\OperationUxPresenter;
|
||||||
@ -53,6 +51,7 @@
|
|||||||
use Filament\Tables\Table;
|
use Filament\Tables\Table;
|
||||||
use Illuminate\Database\Eloquent\Builder;
|
use Illuminate\Database\Eloquent\Builder;
|
||||||
use Illuminate\Database\Eloquent\Model;
|
use Illuminate\Database\Eloquent\Model;
|
||||||
|
use Illuminate\Database\Query\JoinClause;
|
||||||
use Illuminate\Support\Str;
|
use Illuminate\Support\Str;
|
||||||
use InvalidArgumentException;
|
use InvalidArgumentException;
|
||||||
use UnitEnum;
|
use UnitEnum;
|
||||||
@ -100,7 +99,7 @@ public static function canCreate(): bool
|
|||||||
$tenant = static::resolveTenantForCreate();
|
$tenant = static::resolveTenantForCreate();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -116,7 +115,7 @@ protected static function hasTenantCapability(string $capability): bool
|
|||||||
$tenant = static::resolveScopedTenant();
|
$tenant = static::resolveScopedTenant();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -127,7 +126,7 @@ protected static function hasTenantCapability(string $capability): bool
|
|||||||
&& $resolver->can($user, $tenant, $capability);
|
&& $resolver->can($user, $tenant, $capability);
|
||||||
}
|
}
|
||||||
|
|
||||||
protected static function resolveScopedTenant(): ?ManagedEnvironment
|
protected static function resolveScopedTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantExternalId = static::resolveRequestedTenantExternalId();
|
$tenantExternalId = static::resolveRequestedTenantExternalId();
|
||||||
|
|
||||||
@ -137,19 +136,19 @@ protected static function resolveScopedTenant(): ?ManagedEnvironment
|
|||||||
|
|
||||||
$routeTenant = request()->route('tenant');
|
$routeTenant = request()->route('tenant');
|
||||||
|
|
||||||
if ($routeTenant instanceof ManagedEnvironment) {
|
if ($routeTenant instanceof Tenant) {
|
||||||
return $routeTenant;
|
return $routeTenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (is_string($routeTenant) && $routeTenant !== '') {
|
if (is_string($routeTenant) && $routeTenant !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $routeTenant)
|
->where('external_id', $routeTenant)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
$recordTenant = static::resolveTenantFromRouteRecord();
|
$recordTenant = static::resolveTenantFromRouteRecord();
|
||||||
|
|
||||||
if ($recordTenant instanceof ManagedEnvironment) {
|
if ($recordTenant instanceof Tenant) {
|
||||||
return $recordTenant;
|
return $recordTenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -162,16 +161,16 @@ protected static function resolveScopedTenant(): ?ManagedEnvironment
|
|||||||
return static::resolveTenantContextForCurrentPanel();
|
return static::resolveTenantContextForCurrentPanel();
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function resolveTenantForRecord(?ProviderConnection $record = null): ?ManagedEnvironment
|
public static function resolveTenantForRecord(?ProviderConnection $record = null): ?Tenant
|
||||||
{
|
{
|
||||||
if ($record instanceof ProviderConnection) {
|
if ($record instanceof ProviderConnection) {
|
||||||
$tenant = $record->tenant;
|
$tenant = $record->tenant;
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment && is_numeric($record->managed_environment_id)) {
|
if (! $tenant instanceof Tenant && is_numeric($record->tenant_id)) {
|
||||||
$tenant = ManagedEnvironment::query()->whereKey((int) $record->managed_environment_id)->first();
|
$tenant = Tenant::query()->whereKey((int) $record->tenant_id)->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -181,7 +180,7 @@ public static function resolveTenantForRecord(?ProviderConnection $record = null
|
|||||||
|
|
||||||
public static function resolveRequestedTenantExternalId(): ?string
|
public static function resolveRequestedTenantExternalId(): ?string
|
||||||
{
|
{
|
||||||
$queryTenant = request()->query('managed_environment_id');
|
$queryTenant = request()->query('tenant_id');
|
||||||
|
|
||||||
if (is_string($queryTenant) && $queryTenant !== '') {
|
if (is_string($queryTenant) && $queryTenant !== '') {
|
||||||
return $queryTenant;
|
return $queryTenant;
|
||||||
@ -196,26 +195,26 @@ public static function resolveContextTenantExternalId(): ?string
|
|||||||
$contextTenantId = app(WorkspaceContext::class)->lastTenantId(request());
|
$contextTenantId = app(WorkspaceContext::class)->lastTenantId(request());
|
||||||
|
|
||||||
if ($workspaceId !== null && $contextTenantId !== null) {
|
if ($workspaceId !== null && $contextTenantId !== null) {
|
||||||
$tenant = ManagedEnvironment::query()
|
$tenant = Tenant::query()
|
||||||
->whereKey($contextTenantId)
|
->whereKey($contextTenantId)
|
||||||
->where('workspace_id', (int) $workspaceId)
|
->where('workspace_id', (int) $workspaceId)
|
||||||
->first();
|
->first();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return (string) $tenant->external_id;
|
return (string) $tenant->external_id;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return (string) $tenant->external_id;
|
return (string) $tenant->external_id;
|
||||||
}
|
}
|
||||||
|
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
public static function resolveTenantForCreate(): ?ManagedEnvironment
|
public static function resolveTenantForCreate(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantExternalId = static::resolveRequestedTenantExternalId() ?? static::resolveContextTenantExternalId();
|
$tenantExternalId = static::resolveRequestedTenantExternalId() ?? static::resolveContextTenantExternalId();
|
||||||
|
|
||||||
@ -227,7 +226,7 @@ public static function resolveTenantForCreate(): ?ManagedEnvironment
|
|||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
$workspaceId = app(WorkspaceContext::class)->currentWorkspaceId(request());
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User || $workspaceId === null) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User || $workspaceId === null) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -278,28 +277,38 @@ private static function extractTenantExternalIdFromUrl(string $url): ?string
|
|||||||
if (is_string($query) && $query !== '') {
|
if (is_string($query) && $query !== '') {
|
||||||
parse_str($query, $queryParams);
|
parse_str($query, $queryParams);
|
||||||
|
|
||||||
$tenantExternalId = $queryParams['managed_environment_id'] ?? null;
|
$tenantExternalId = $queryParams['tenant_id'] ?? null;
|
||||||
|
|
||||||
if (is_string($tenantExternalId) && $tenantExternalId !== '') {
|
if (is_string($tenantExternalId) && $tenantExternalId !== '') {
|
||||||
return $tenantExternalId;
|
return $tenantExternalId;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return null;
|
$path = parse_url($url, PHP_URL_PATH);
|
||||||
|
|
||||||
|
if (! is_string($path) || $path === '') {
|
||||||
|
$path = $url;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (preg_match('~/(?:admin)/(?:tenants|t)/([0-9a-fA-F-]{36})(?:/|$)~', $path, $matches) !== 1) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
return (string) $matches[1];
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function resolveTenantByExternalId(?string $externalId): ?ManagedEnvironment
|
private static function resolveTenantByExternalId(?string $externalId): ?Tenant
|
||||||
{
|
{
|
||||||
if (! is_string($externalId) || $externalId === '') {
|
if (! is_string($externalId) || $externalId === '') {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $externalId)
|
->where('external_id', $externalId)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function resolveTenantFromRouteRecord(): ?ManagedEnvironment
|
private static function resolveTenantFromRouteRecord(): ?Tenant
|
||||||
{
|
{
|
||||||
$record = request()->route('record');
|
$record = request()->route('record');
|
||||||
|
|
||||||
@ -331,7 +340,7 @@ private static function applyMembershipScope(Builder $query): Builder
|
|||||||
if (! is_int($workspaceId)) {
|
if (! is_int($workspaceId)) {
|
||||||
$tenant = static::resolveTenantContextForCurrentPanel();
|
$tenant = static::resolveTenantContextForCurrentPanel();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
$workspaceId = (int) $tenant->workspace_id;
|
$workspaceId = (int) $tenant->workspace_id;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -340,16 +349,19 @@ private static function applyMembershipScope(Builder $query): Builder
|
|||||||
return $query->whereRaw('1 = 0');
|
return $query->whereRaw('1 = 0');
|
||||||
}
|
}
|
||||||
|
|
||||||
$query->where('provider_connections.workspace_id', $workspaceId);
|
return $query
|
||||||
|
->where('provider_connections.workspace_id', $workspaceId)
|
||||||
app(ManagedEnvironmentAccessScopeResolver::class)->applyWorkspaceScopeToQuery(
|
->whereExists(function ($membershipScope) use ($user, $workspaceId): void {
|
||||||
query: $query,
|
$membershipScope
|
||||||
user: $user,
|
->selectRaw('1')
|
||||||
workspaceId: $workspaceId,
|
->from('tenants as scoped_tenants')
|
||||||
qualifiedEnvironmentColumn: 'provider_connections.managed_environment_id',
|
->join('tenant_memberships as scoped_memberships', function (JoinClause $join) use ($user): void {
|
||||||
);
|
$join->on('scoped_memberships.tenant_id', '=', 'scoped_tenants.id')
|
||||||
|
->where('scoped_memberships.user_id', '=', (int) $user->getKey());
|
||||||
return $query;
|
})
|
||||||
|
->whereColumn('scoped_tenants.id', 'provider_connections.tenant_id')
|
||||||
|
->where('scoped_tenants.workspace_id', '=', $workspaceId);
|
||||||
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -364,21 +376,16 @@ private static function tenantFilterOptions(): array
|
|||||||
return [];
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
$query = ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->select(['managed_environments.slug', 'managed_environments.name', 'managed_environments.kind'])
|
->select(['tenants.external_id', 'tenants.name', 'tenants.environment'])
|
||||||
->where('managed_environments.workspace_id', $workspaceId);
|
->join('tenant_memberships as filter_memberships', function (JoinClause $join) use ($user): void {
|
||||||
|
$join->on('filter_memberships.tenant_id', '=', 'tenants.id')
|
||||||
app(ManagedEnvironmentAccessScopeResolver::class)->applyWorkspaceScopeToQuery(
|
->where('filter_memberships.user_id', '=', (int) $user->getKey());
|
||||||
query: $query,
|
})
|
||||||
user: $user,
|
->where('tenants.workspace_id', $workspaceId)
|
||||||
workspaceId: $workspaceId,
|
->orderBy('tenants.name')
|
||||||
qualifiedEnvironmentColumn: 'managed_environments.id',
|
|
||||||
);
|
|
||||||
|
|
||||||
return $query
|
|
||||||
->orderBy('managed_environments.name')
|
|
||||||
->get()
|
->get()
|
||||||
->mapWithKeys(function (ManagedEnvironment $tenant): array {
|
->mapWithKeys(function (Tenant $tenant): array {
|
||||||
$environment = strtoupper((string) ($tenant->environment ?? ''));
|
$environment = strtoupper((string) ($tenant->environment ?? ''));
|
||||||
$label = $environment !== '' ? "{$tenant->name} ({$environment})" : (string) $tenant->name;
|
$label = $environment !== '' ? "{$tenant->name} ({$environment})" : (string) $tenant->name;
|
||||||
|
|
||||||
@ -499,7 +506,7 @@ private static function targetScopeSummary(?ProviderConnection $record): string
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function providerContextSummary(?ProviderConnection $record): ?string
|
private static function providerIdentityContext(?ProviderConnection $record): ?string
|
||||||
{
|
{
|
||||||
if (! $record instanceof ProviderConnection) {
|
if (! $record instanceof ProviderConnection) {
|
||||||
return null;
|
return null;
|
||||||
@ -512,68 +519,6 @@ private static function providerContextSummary(?ProviderConnection $record): ?st
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private static function providerCapabilitySummary(?ProviderConnection $record): string
|
|
||||||
{
|
|
||||||
if (! $record instanceof ProviderConnection) {
|
|
||||||
return 'Provider capabilities are evaluated after this connection is saved.';
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
|
||||||
return ProviderConnectionSurfaceSummary::forConnection($record)->providerCapabilitySummary();
|
|
||||||
} catch (InvalidArgumentException) {
|
|
||||||
return 'Provider capability needs review';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function providerCapabilityStatus(?ProviderConnection $record): string
|
|
||||||
{
|
|
||||||
if (! $record instanceof ProviderConnection) {
|
|
||||||
return 'unknown';
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
|
||||||
$summary = ProviderConnectionSurfaceSummary::forConnection($record)->toArray();
|
|
||||||
$primary = is_array($summary['primary_provider_capability'] ?? null)
|
|
||||||
? $summary['primary_provider_capability']
|
|
||||||
: [];
|
|
||||||
|
|
||||||
return (string) ($primary['status'] ?? 'unknown');
|
|
||||||
} catch (InvalidArgumentException) {
|
|
||||||
return 'unknown';
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
private static function providerCapabilitiesLine(?ProviderConnection $record): string
|
|
||||||
{
|
|
||||||
if (! $record instanceof ProviderConnection) {
|
|
||||||
return 'Provider capabilities are evaluated after this connection is saved.';
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
|
||||||
$summary = ProviderConnectionSurfaceSummary::forConnection($record)->toArray();
|
|
||||||
$capabilities = is_array($summary['provider_capabilities'] ?? null)
|
|
||||||
? $summary['provider_capabilities']
|
|
||||||
: [];
|
|
||||||
} catch (InvalidArgumentException) {
|
|
||||||
$capabilities = [];
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($capabilities === []) {
|
|
||||||
return 'Provider capabilities not evaluated.';
|
|
||||||
}
|
|
||||||
|
|
||||||
return collect($capabilities)
|
|
||||||
->filter(fn (mixed $capability): bool => is_array($capability))
|
|
||||||
->map(function (array $capability): string {
|
|
||||||
$label = (string) ($capability['label'] ?? 'Provider capability');
|
|
||||||
$status = (string) ($capability['status'] ?? 'unknown');
|
|
||||||
$statusLabel = BadgeRenderer::spec(BadgeDomain::ProviderCapabilityStatus, $status)->label;
|
|
||||||
|
|
||||||
return "{$label}: {$statusLabel}";
|
|
||||||
})
|
|
||||||
->implode("\n");
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param array<string, mixed> $extra
|
* @param array<string, mixed> $extra
|
||||||
* @return array<string, mixed>
|
* @return array<string, mixed>
|
||||||
@ -594,10 +539,7 @@ public static function targetScopeAuditMetadata(ProviderConnection $record, arra
|
|||||||
'shared_label' => 'Target scope',
|
'shared_label' => 'Target scope',
|
||||||
'shared_help_text' => static::targetScopeHelpText(),
|
'shared_help_text' => static::targetScopeHelpText(),
|
||||||
],
|
],
|
||||||
'provider_context' => [
|
'provider_identity_context' => [],
|
||||||
'provider' => (string) $record->provider,
|
|
||||||
'details' => [],
|
|
||||||
],
|
|
||||||
], $extra);
|
], $extra);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -652,9 +594,6 @@ public static function form(Schema $schema): Schema
|
|||||||
Placeholder::make('verification_status_display')
|
Placeholder::make('verification_status_display')
|
||||||
->label('Verification')
|
->label('Verification')
|
||||||
->content(fn (?ProviderConnection $record): string => static::verificationStatusLabelFromState($record?->verification_status)),
|
->content(fn (?ProviderConnection $record): string => static::verificationStatusLabelFromState($record?->verification_status)),
|
||||||
Placeholder::make('provider_capability_display')
|
|
||||||
->label('Provider capability')
|
|
||||||
->content(fn (?ProviderConnection $record): string => static::providerCapabilitySummary($record)),
|
|
||||||
Placeholder::make('last_health_check_at_display')
|
Placeholder::make('last_health_check_at_display')
|
||||||
->label('Last check')
|
->label('Last check')
|
||||||
->content(fn (?ProviderConnection $record): string => $record?->last_health_check_at?->diffForHumans() ?? 'Never'),
|
->content(fn (?ProviderConnection $record): string => $record?->last_health_check_at?->diffForHumans() ?? 'Never'),
|
||||||
@ -731,24 +670,6 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->color(BadgeRenderer::color(BadgeDomain::ProviderVerificationStatus))
|
->color(BadgeRenderer::color(BadgeDomain::ProviderVerificationStatus))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::ProviderVerificationStatus))
|
->icon(BadgeRenderer::icon(BadgeDomain::ProviderVerificationStatus))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderVerificationStatus)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderVerificationStatus)),
|
||||||
Infolists\Components\TextEntry::make('provider_capability')
|
|
||||||
->label('Provider capability')
|
|
||||||
->state(fn (ProviderConnection $record): string => static::providerCapabilityStatus($record))
|
|
||||||
->badge()
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->helperText(fn (ProviderConnection $record): string => static::providerCapabilitySummary($record)),
|
|
||||||
Infolists\Components\TextEntry::make('provider_capability_summary')
|
|
||||||
->label('Capability summary')
|
|
||||||
->state(fn (ProviderConnection $record): string => static::providerCapabilitySummary($record))
|
|
||||||
->columnSpanFull(),
|
|
||||||
Infolists\Components\TextEntry::make('provider_capabilities')
|
|
||||||
->label('Capability detail')
|
|
||||||
->state(fn (ProviderConnection $record): string => static::providerCapabilitiesLine($record))
|
|
||||||
->listWithLineBreaks()
|
|
||||||
->columnSpanFull(),
|
|
||||||
Infolists\Components\TextEntry::make('last_health_check_at')
|
Infolists\Components\TextEntry::make('last_health_check_at')
|
||||||
->label('Last check')
|
->label('Last check')
|
||||||
->since(),
|
->since(),
|
||||||
@ -760,9 +681,9 @@ public static function infolist(Schema $schema): Schema
|
|||||||
->label('Migration review')
|
->label('Migration review')
|
||||||
->formatStateUsing(fn (ProviderConnection $record): string => static::migrationReviewLabel($record))
|
->formatStateUsing(fn (ProviderConnection $record): string => static::migrationReviewLabel($record))
|
||||||
->tooltip(fn (ProviderConnection $record): ?string => static::migrationReviewDescription($record)),
|
->tooltip(fn (ProviderConnection $record): ?string => static::migrationReviewDescription($record)),
|
||||||
Infolists\Components\TextEntry::make('provider_context')
|
Infolists\Components\TextEntry::make('provider_identity_context')
|
||||||
->label('Provider context')
|
->label('Provider identity details')
|
||||||
->state(fn (ProviderConnection $record): ?string => static::providerContextSummary($record))
|
->state(fn (ProviderConnection $record): ?string => static::providerIdentityContext($record))
|
||||||
->placeholder('n/a')
|
->placeholder('n/a')
|
||||||
->columnSpanFull(),
|
->columnSpanFull(),
|
||||||
Infolists\Components\TextEntry::make('last_error_reason_code')
|
Infolists\Components\TextEntry::make('last_error_reason_code')
|
||||||
@ -791,7 +712,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
return $query->whereHas('tenant', function (Builder $tenantQuery) use ($tenantExternalId): void {
|
return $query->whereHas('tenant', function (Builder $tenantQuery) use ($tenantExternalId): void {
|
||||||
$tenantQuery->where('slug', $tenantExternalId);
|
$tenantQuery->where('external_id', $tenantExternalId);
|
||||||
});
|
});
|
||||||
})
|
})
|
||||||
->defaultSort('display_name')
|
->defaultSort('display_name')
|
||||||
@ -802,7 +723,7 @@ public static function table(Table $table): Table
|
|||||||
->recordUrl(fn (ProviderConnection $record): string => static::getUrl('view', ['record' => $record]))
|
->recordUrl(fn (ProviderConnection $record): string => static::getUrl('view', ['record' => $record]))
|
||||||
->columns([
|
->columns([
|
||||||
Tables\Columns\TextColumn::make('tenant.name')
|
Tables\Columns\TextColumn::make('tenant.name')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->description(function (ProviderConnection $record): ?string {
|
->description(function (ProviderConnection $record): ?string {
|
||||||
$environment = $record->tenant?->environment;
|
$environment = $record->tenant?->environment;
|
||||||
|
|
||||||
@ -815,11 +736,11 @@ public static function table(Table $table): Table
|
|||||||
->url(function (ProviderConnection $record): ?string {
|
->url(function (ProviderConnection $record): ?string {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironmentLinks::viewUrl($tenant);
|
return TenantResource::getUrl('view', ['record' => $tenant], panel: 'admin');
|
||||||
}),
|
}),
|
||||||
Tables\Columns\TextColumn::make('display_name')->label('Name')->searchable()->sortable(),
|
Tables\Columns\TextColumn::make('display_name')->label('Name')->searchable()->sortable(),
|
||||||
Tables\Columns\TextColumn::make('provider')
|
Tables\Columns\TextColumn::make('provider')
|
||||||
@ -859,16 +780,6 @@ public static function table(Table $table): Table
|
|||||||
->color(BadgeRenderer::color(BadgeDomain::ProviderVerificationStatus))
|
->color(BadgeRenderer::color(BadgeDomain::ProviderVerificationStatus))
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::ProviderVerificationStatus))
|
->icon(BadgeRenderer::icon(BadgeDomain::ProviderVerificationStatus))
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderVerificationStatus)),
|
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderVerificationStatus)),
|
||||||
Tables\Columns\TextColumn::make('provider_capability')
|
|
||||||
->label('Provider capability')
|
|
||||||
->state(fn (ProviderConnection $record): string => static::providerCapabilityStatus($record))
|
|
||||||
->badge()
|
|
||||||
->formatStateUsing(BadgeRenderer::label(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->color(BadgeRenderer::color(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->icon(BadgeRenderer::icon(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->iconColor(BadgeRenderer::iconColor(BadgeDomain::ProviderCapabilityStatus))
|
|
||||||
->description(fn (ProviderConnection $record): string => static::providerCapabilitySummary($record))
|
|
||||||
->toggleable(),
|
|
||||||
Tables\Columns\TextColumn::make('migration_review_required')
|
Tables\Columns\TextColumn::make('migration_review_required')
|
||||||
->label('Migration review')
|
->label('Migration review')
|
||||||
->badge()
|
->badge()
|
||||||
@ -890,8 +801,8 @@ public static function table(Table $table): Table
|
|||||||
])
|
])
|
||||||
->filters([
|
->filters([
|
||||||
SelectFilter::make('tenant')
|
SelectFilter::make('tenant')
|
||||||
->label('ManagedEnvironment')
|
->label('Tenant')
|
||||||
->default(static::resolveRequestedTenantExternalId())
|
->default(static::resolveScopedTenant()?->external_id)
|
||||||
->options(static::tenantFilterOptions())
|
->options(static::tenantFilterOptions())
|
||||||
->query(function (Builder $query, array $data): Builder {
|
->query(function (Builder $query, array $data): Builder {
|
||||||
$value = $data['value'] ?? null;
|
$value = $data['value'] ?? null;
|
||||||
@ -901,7 +812,7 @@ public static function table(Table $table): Table
|
|||||||
}
|
}
|
||||||
|
|
||||||
return $query->whereHas('tenant', function (Builder $tenantQuery) use ($value): void {
|
return $query->whereHas('tenant', function (Builder $tenantQuery) use ($value): void {
|
||||||
$tenantQuery->where('slug', $value);
|
$tenantQuery->where('external_id', $value);
|
||||||
});
|
});
|
||||||
}),
|
}),
|
||||||
SelectFilter::make('provider')
|
SelectFilter::make('provider')
|
||||||
@ -1041,7 +952,7 @@ public static function makeInventorySyncAction(): Actions\Action
|
|||||||
gate: $gate,
|
gate: $gate,
|
||||||
operationType: OperationRunType::InventorySync->value,
|
operationType: OperationRunType::InventorySync->value,
|
||||||
blockedTitle: 'Inventory sync blocked',
|
blockedTitle: 'Inventory sync blocked',
|
||||||
dispatcher: function (ManagedEnvironment $tenant, User $user, ProviderConnection $connection, OperationRun $operationRun): void {
|
dispatcher: function (Tenant $tenant, User $user, ProviderConnection $connection, OperationRun $operationRun): void {
|
||||||
ProviderInventorySyncJob::dispatch(
|
ProviderInventorySyncJob::dispatch(
|
||||||
tenantId: (int) $tenant->getKey(),
|
tenantId: (int) $tenant->getKey(),
|
||||||
userId: (int) $user->getKey(),
|
userId: (int) $user->getKey(),
|
||||||
@ -1072,7 +983,7 @@ public static function makeComplianceSnapshotAction(): Actions\Action
|
|||||||
gate: $gate,
|
gate: $gate,
|
||||||
operationType: 'compliance.snapshot',
|
operationType: 'compliance.snapshot',
|
||||||
blockedTitle: 'Compliance snapshot blocked',
|
blockedTitle: 'Compliance snapshot blocked',
|
||||||
dispatcher: function (ManagedEnvironment $tenant, User $user, ProviderConnection $connection, OperationRun $operationRun): void {
|
dispatcher: function (Tenant $tenant, User $user, ProviderConnection $connection, OperationRun $operationRun): void {
|
||||||
ProviderComplianceSnapshotJob::dispatch(
|
ProviderComplianceSnapshotJob::dispatch(
|
||||||
tenantId: (int) $tenant->getKey(),
|
tenantId: (int) $tenant->getKey(),
|
||||||
userId: (int) $user->getKey(),
|
userId: (int) $user->getKey(),
|
||||||
@ -1101,7 +1012,7 @@ public static function makeSetDefaultAction(): Actions\Action
|
|||||||
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1159,7 +1070,7 @@ public static function makeEnableDedicatedOverrideAction(string $source, ?string
|
|||||||
->action(function (array $data, ProviderConnection $record, ProviderConnectionMutationService $mutations, AuditLogger $auditLogger) use ($source): void {
|
->action(function (array $data, ProviderConnection $record, ProviderConnectionMutationService $mutations, AuditLogger $auditLogger) use ($source): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1236,7 +1147,7 @@ public static function makeRotateDedicatedCredentialAction(?string $modalDescrip
|
|||||||
->action(function (array $data, ProviderConnection $record, ProviderConnectionMutationService $mutations): void {
|
->action(function (array $data, ProviderConnection $record, ProviderConnectionMutationService $mutations): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1274,7 +1185,7 @@ public static function makeDeleteDedicatedCredentialAction(?string $modalDescrip
|
|||||||
->action(function (ProviderConnection $record, ProviderConnectionMutationService $mutations): void {
|
->action(function (ProviderConnection $record, ProviderConnectionMutationService $mutations): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1307,7 +1218,7 @@ public static function makeRevertToPlatformAction(string $source, ?string $modal
|
|||||||
->action(function (ProviderConnection $record, ProviderConnectionMutationService $mutations, AuditLogger $auditLogger) use ($source): void {
|
->action(function (ProviderConnection $record, ProviderConnectionMutationService $mutations, AuditLogger $auditLogger) use ($source): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1364,7 +1275,7 @@ public static function makeEnableConnectionAction(): Actions\Action
|
|||||||
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1439,7 +1350,7 @@ public static function makeDisableConnectionAction(): Actions\Action
|
|||||||
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
->action(function (ProviderConnection $record, AuditLogger $auditLogger): void {
|
||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1487,7 +1398,7 @@ private static function recordAllowsProviderExecution(ProviderConnection $record
|
|||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment
|
return $tenant instanceof Tenant
|
||||||
&& $user instanceof User
|
&& $user instanceof User
|
||||||
&& $user->canAccessTenant($tenant)
|
&& $user->canAccessTenant($tenant)
|
||||||
&& (bool) $record->is_enabled;
|
&& (bool) $record->is_enabled;
|
||||||
@ -1498,7 +1409,7 @@ private static function handleCheckConnectionAction(ProviderConnection $record,
|
|||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1553,7 +1464,7 @@ private static function handleCheckConnectionAction(ProviderConnection $record,
|
|||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* @param callable(ManagedEnvironment, User, ProviderConnection, OperationRun): void $dispatcher
|
* @param callable(Tenant, User, ProviderConnection, OperationRun): void $dispatcher
|
||||||
*/
|
*/
|
||||||
private static function handleProviderOperationAction(
|
private static function handleProviderOperationAction(
|
||||||
ProviderConnection $record,
|
ProviderConnection $record,
|
||||||
@ -1566,7 +1477,7 @@ private static function handleProviderOperationAction(
|
|||||||
$tenant = static::resolveTenantForRecord($record);
|
$tenant = static::resolveTenantForRecord($record);
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1632,7 +1543,7 @@ public static function getPages(): array
|
|||||||
|
|
||||||
private static function normalizeTenantExternalId(mixed $tenant): ?string
|
private static function normalizeTenantExternalId(mixed $tenant): ?string
|
||||||
{
|
{
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return (string) $tenant->external_id;
|
return (string) $tenant->external_id;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1641,9 +1552,9 @@ private static function normalizeTenantExternalId(mixed $tenant): ?string
|
|||||||
}
|
}
|
||||||
|
|
||||||
if (is_numeric($tenant)) {
|
if (is_numeric($tenant)) {
|
||||||
$tenantModel = ManagedEnvironment::query()->whereKey((int) $tenant)->first();
|
$tenantModel = Tenant::query()->whereKey((int) $tenant)->first();
|
||||||
|
|
||||||
if ($tenantModel instanceof ManagedEnvironment) {
|
if ($tenantModel instanceof Tenant) {
|
||||||
return (string) $tenantModel->external_id;
|
return (string) $tenantModel->external_id;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -1664,7 +1575,7 @@ public static function getUrl(?string $name = null, array $parameters = [], bool
|
|||||||
unset($parameters['tenant']);
|
unset($parameters['tenant']);
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($tenantExternalId === null && $tenant instanceof ManagedEnvironment) {
|
if ($tenantExternalId === null && $tenant instanceof Tenant) {
|
||||||
$tenantExternalId = (string) $tenant->external_id;
|
$tenantExternalId = (string) $tenant->external_id;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -1680,8 +1591,8 @@ public static function getUrl(?string $name = null, array $parameters = [], bool
|
|||||||
$tenantExternalId = static::resolveScopedTenant()?->external_id;
|
$tenantExternalId = static::resolveScopedTenant()?->external_id;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (! array_key_exists('managed_environment_id', $parameters) && is_string($tenantExternalId) && $tenantExternalId !== '') {
|
if (! array_key_exists('tenant_id', $parameters) && is_string($tenantExternalId) && $tenantExternalId !== '') {
|
||||||
$parameters['managed_environment_id'] = $tenantExternalId;
|
$parameters['tenant_id'] = $tenantExternalId;
|
||||||
}
|
}
|
||||||
|
|
||||||
return parent::getUrl($name, $parameters, $isAbsolute, $panel, null, $shouldGuessMissingParameters);
|
return parent::getUrl($name, $parameters, $isAbsolute, $panel, null, $shouldGuessMissingParameters);
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Filament\Resources\ProviderConnectionResource\Pages;
|
namespace App\Filament\Resources\ProviderConnectionResource\Pages;
|
||||||
|
|
||||||
use App\Filament\Resources\ProviderConnectionResource;
|
use App\Filament\Resources\ProviderConnectionResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
use App\Support\Providers\ProviderConnectionType;
|
use App\Support\Providers\ProviderConnectionType;
|
||||||
@ -26,7 +26,7 @@ protected function mutateFormDataBeforeCreate(array $data): array
|
|||||||
{
|
{
|
||||||
$tenant = $this->currentTenant();
|
$tenant = $this->currentTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -49,7 +49,7 @@ protected function mutateFormDataBeforeCreate(array $data): array
|
|||||||
|
|
||||||
return [
|
return [
|
||||||
'workspace_id' => (int) $tenant->workspace_id,
|
'workspace_id' => (int) $tenant->workspace_id,
|
||||||
'managed_environment_id' => $tenant->getKey(),
|
'tenant_id' => $tenant->getKey(),
|
||||||
'provider' => 'microsoft',
|
'provider' => 'microsoft',
|
||||||
'entra_tenant_id' => $data['entra_tenant_id'],
|
'entra_tenant_id' => $data['entra_tenant_id'],
|
||||||
'display_name' => $data['display_name'],
|
'display_name' => $data['display_name'],
|
||||||
@ -73,7 +73,7 @@ protected function afterCreate(): void
|
|||||||
{
|
{
|
||||||
$tenant = $this->currentTenant();
|
$tenant = $this->currentTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -115,11 +115,11 @@ protected function afterCreate(): void
|
|||||||
->send();
|
->send();
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentTenant(): ?ManagedEnvironment
|
private function currentTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenant = ProviderConnectionResource::resolveTenantForCreate();
|
$tenant = ProviderConnectionResource::resolveTenantForCreate();
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -7,7 +7,7 @@
|
|||||||
use App\Jobs\ProviderInventorySyncJob;
|
use App\Jobs\ProviderInventorySyncJob;
|
||||||
use App\Models\OperationRun;
|
use App\Models\OperationRun;
|
||||||
use App\Models\ProviderConnection;
|
use App\Models\ProviderConnection;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Services\Intune\AuditLogger;
|
use App\Services\Intune\AuditLogger;
|
||||||
@ -48,13 +48,13 @@ public function mount($record): void
|
|||||||
? ProviderConnectionResource::resolveTenantForRecord($this->record)
|
? ProviderConnectionResource::resolveTenantForRecord($this->record)
|
||||||
: null;
|
: null;
|
||||||
|
|
||||||
if ($recordTenant instanceof ManagedEnvironment) {
|
if ($recordTenant instanceof Tenant) {
|
||||||
$this->scopedTenantExternalId = (string) $recordTenant->external_id;
|
$this->scopedTenantExternalId = (string) $recordTenant->external_id;
|
||||||
|
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenantIdFromQuery = request()->query('managed_environment_id');
|
$tenantIdFromQuery = request()->query('tenant_id');
|
||||||
|
|
||||||
if (is_string($tenantIdFromQuery) && $tenantIdFromQuery !== '') {
|
if (is_string($tenantIdFromQuery) && $tenantIdFromQuery !== '') {
|
||||||
$this->scopedTenantExternalId = $tenantIdFromQuery;
|
$this->scopedTenantExternalId = $tenantIdFromQuery;
|
||||||
@ -64,7 +64,7 @@ public function mount($record): void
|
|||||||
|
|
||||||
$tenant = request()->route('tenant');
|
$tenant = request()->route('tenant');
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
$this->scopedTenantExternalId = (string) $tenant->external_id;
|
$this->scopedTenantExternalId = (string) $tenant->external_id;
|
||||||
|
|
||||||
return;
|
return;
|
||||||
@ -107,7 +107,7 @@ protected function afterSave(): void
|
|||||||
? ($record->tenant ?? $this->currentTenant())
|
? ($record->tenant ?? $this->currentTenant())
|
||||||
: $this->currentTenant();
|
: $this->currentTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -182,21 +182,21 @@ protected function getHeaderActions(): array
|
|||||||
->label('View last check run')
|
->label('View last check run')
|
||||||
->icon('heroicon-o-eye')
|
->icon('heroicon-o-eye')
|
||||||
->color('gray')
|
->color('gray')
|
||||||
->visible(fn (ProviderConnection $record): bool => $tenant instanceof ManagedEnvironment
|
->visible(fn (ProviderConnection $record): bool => $tenant instanceof Tenant
|
||||||
&& OperationRun::query()
|
&& OperationRun::query()
|
||||||
->where('managed_environment_id', $tenant->getKey())
|
->where('tenant_id', $tenant->getKey())
|
||||||
->where('type', 'provider.connection.check')
|
->where('type', 'provider.connection.check')
|
||||||
->where('context->provider_connection_id', (int) $record->getKey())
|
->where('context->provider_connection_id', (int) $record->getKey())
|
||||||
->exists())
|
->exists())
|
||||||
->url(function (ProviderConnection $record): ?string {
|
->url(function (ProviderConnection $record): ?string {
|
||||||
$tenant = $this->currentTenant();
|
$tenant = $this->currentTenant();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
$run = OperationRun::query()
|
$run = OperationRun::query()
|
||||||
->where('managed_environment_id', $tenant->getKey())
|
->where('tenant_id', $tenant->getKey())
|
||||||
->where('type', 'provider.connection.check')
|
->where('type', 'provider.connection.check')
|
||||||
->where('context->provider_connection_id', (int) $record->getKey())
|
->where('context->provider_connection_id', (int) $record->getKey())
|
||||||
->orderByDesc('id')
|
->orderByDesc('id')
|
||||||
@ -246,7 +246,7 @@ protected function getFormActions(): array
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
return [
|
return [
|
||||||
$this->getCancelFormAction(),
|
$this->getCancelFormAction(),
|
||||||
];
|
];
|
||||||
@ -271,7 +271,7 @@ protected function handleRecordUpdate(Model $record, array $data): Model
|
|||||||
|
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment || ! $user instanceof User) {
|
if (! $tenant instanceof Tenant || ! $user instanceof User) {
|
||||||
abort(404);
|
abort(404);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -288,40 +288,40 @@ protected function handleRecordUpdate(Model $record, array $data): Model
|
|||||||
return parent::handleRecordUpdate($record, $data);
|
return parent::handleRecordUpdate($record, $data);
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentTenant(): ?ManagedEnvironment
|
private function currentTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if (isset($this->record) && $this->record instanceof ProviderConnection) {
|
if (isset($this->record) && $this->record instanceof ProviderConnection) {
|
||||||
$recordTenant = ProviderConnectionResource::resolveTenantForRecord($this->record);
|
$recordTenant = ProviderConnectionResource::resolveTenantForRecord($this->record);
|
||||||
|
|
||||||
if ($recordTenant instanceof ManagedEnvironment) {
|
if ($recordTenant instanceof Tenant) {
|
||||||
return $recordTenant;
|
return $recordTenant;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if (is_string($this->scopedTenantExternalId) && $this->scopedTenantExternalId !== '') {
|
if (is_string($this->scopedTenantExternalId) && $this->scopedTenantExternalId !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $this->scopedTenantExternalId)
|
->where('external_id', $this->scopedTenantExternalId)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenant = request()->route('tenant');
|
$tenant = request()->route('tenant');
|
||||||
|
|
||||||
if ($tenant instanceof ManagedEnvironment) {
|
if ($tenant instanceof Tenant) {
|
||||||
return $tenant;
|
return $tenant;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (is_string($tenant) && $tenant !== '') {
|
if (is_string($tenant) && $tenant !== '') {
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $tenant)
|
->where('external_id', $tenant)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
$tenantFromCreateResolution = ProviderConnectionResource::resolveTenantForCreate();
|
$tenantFromCreateResolution = ProviderConnectionResource::resolveTenantForCreate();
|
||||||
|
|
||||||
if ($tenantFromCreateResolution instanceof ManagedEnvironment) {
|
if ($tenantFromCreateResolution instanceof Tenant) {
|
||||||
return $tenantFromCreateResolution;
|
return $tenantFromCreateResolution;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::current();
|
return Tenant::current();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -3,7 +3,7 @@
|
|||||||
namespace App\Filament\Resources\ProviderConnectionResource\Pages;
|
namespace App\Filament\Resources\ProviderConnectionResource\Pages;
|
||||||
|
|
||||||
use App\Filament\Resources\ProviderConnectionResource;
|
use App\Filament\Resources\ProviderConnectionResource;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Models\User;
|
use App\Models\User;
|
||||||
use App\Services\Auth\CapabilityResolver;
|
use App\Services\Auth\CapabilityResolver;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
@ -48,7 +48,7 @@ protected function getHeaderActions(): array
|
|||||||
}
|
}
|
||||||
|
|
||||||
return ProviderConnectionResource::getUrl('create', [
|
return ProviderConnectionResource::getUrl('create', [
|
||||||
'managed_environment_id' => $tenantExternalId,
|
'tenant_id' => $tenantExternalId,
|
||||||
]);
|
]);
|
||||||
})
|
})
|
||||||
->visible(function () use ($resolver): bool {
|
->visible(function () use ($resolver): bool {
|
||||||
@ -59,7 +59,7 @@ protected function getHeaderActions(): array
|
|||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -73,7 +73,7 @@ protected function getHeaderActions(): array
|
|||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -90,7 +90,7 @@ protected function getHeaderActions(): array
|
|||||||
->tooltip(function () use ($resolver): ?string {
|
->tooltip(function () use ($resolver): ?string {
|
||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return 'Select a tenant to create provider connections.';
|
return 'Select a tenant to create provider connections.';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -114,7 +114,7 @@ protected function getHeaderActions(): array
|
|||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment
|
return $tenant instanceof Tenant
|
||||||
&& $user instanceof User
|
&& $user instanceof User
|
||||||
&& $resolver->isMember($user, $tenant);
|
&& $resolver->isMember($user, $tenant);
|
||||||
}),
|
}),
|
||||||
@ -136,14 +136,14 @@ private function makeEmptyStateCreateAction(): Actions\CreateAction
|
|||||||
}
|
}
|
||||||
|
|
||||||
return ProviderConnectionResource::getUrl('create', [
|
return ProviderConnectionResource::getUrl('create', [
|
||||||
'managed_environment_id' => $tenantExternalId,
|
'tenant_id' => $tenantExternalId,
|
||||||
]);
|
]);
|
||||||
})
|
})
|
||||||
->visible(function () use ($resolver): bool {
|
->visible(function () use ($resolver): bool {
|
||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -157,7 +157,7 @@ private function makeEmptyStateCreateAction(): Actions\CreateAction
|
|||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -174,7 +174,7 @@ private function makeEmptyStateCreateAction(): Actions\CreateAction
|
|||||||
->tooltip(function () use ($resolver): ?string {
|
->tooltip(function () use ($resolver): ?string {
|
||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
|
|
||||||
if (! $tenant instanceof ManagedEnvironment) {
|
if (! $tenant instanceof Tenant) {
|
||||||
return 'Select a tenant to create provider connections.';
|
return 'Select a tenant to create provider connections.';
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -198,7 +198,7 @@ private function makeEmptyStateCreateAction(): Actions\CreateAction
|
|||||||
$tenant = $this->resolveTenantForCreateAction();
|
$tenant = $this->resolveTenantForCreateAction();
|
||||||
$user = auth()->user();
|
$user = auth()->user();
|
||||||
|
|
||||||
return $tenant instanceof ManagedEnvironment
|
return $tenant instanceof Tenant
|
||||||
&& $user instanceof User
|
&& $user instanceof User
|
||||||
&& $resolver->isMember($user, $tenant);
|
&& $resolver->isMember($user, $tenant);
|
||||||
});
|
});
|
||||||
@ -222,7 +222,7 @@ private function resolveTenantExternalIdForCreateAction(): ?string
|
|||||||
return ProviderConnectionResource::resolveContextTenantExternalId();
|
return ProviderConnectionResource::resolveContextTenantExternalId();
|
||||||
}
|
}
|
||||||
|
|
||||||
private function resolveTenantForCreateAction(): ?ManagedEnvironment
|
private function resolveTenantForCreateAction(): ?Tenant
|
||||||
{
|
{
|
||||||
$tenantExternalId = $this->resolveTenantExternalIdForCreateAction();
|
$tenantExternalId = $this->resolveTenantExternalIdForCreateAction();
|
||||||
|
|
||||||
@ -230,8 +230,8 @@ private function resolveTenantForCreateAction(): ?ManagedEnvironment
|
|||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
|
|
||||||
return ManagedEnvironment::query()
|
return Tenant::query()
|
||||||
->where('slug', $tenantExternalId)
|
->where('external_id', $tenantExternalId)
|
||||||
->first();
|
->first();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
use App\Filament\Resources\ProviderConnectionResource;
|
use App\Filament\Resources\ProviderConnectionResource;
|
||||||
use App\Models\ProviderConnection;
|
use App\Models\ProviderConnection;
|
||||||
use App\Models\ManagedEnvironment;
|
use App\Models\Tenant;
|
||||||
use App\Support\Auth\Capabilities;
|
use App\Support\Auth\Capabilities;
|
||||||
use App\Support\Links\RequiredPermissionsLinks;
|
use App\Support\Links\RequiredPermissionsLinks;
|
||||||
use App\Support\Rbac\UiEnforcement;
|
use App\Support\Rbac\UiEnforcement;
|
||||||
@ -25,11 +25,11 @@ protected function getHeaderActions(): array
|
|||||||
->label('Grant admin consent')
|
->label('Grant admin consent')
|
||||||
->icon('heroicon-o-clipboard-document')
|
->icon('heroicon-o-clipboard-document')
|
||||||
->url(function () use ($tenant): ?string {
|
->url(function () use ($tenant): ?string {
|
||||||
return $tenant instanceof ManagedEnvironment
|
return $tenant instanceof Tenant
|
||||||
? RequiredPermissionsLinks::adminConsentPrimaryUrl($tenant)
|
? RequiredPermissionsLinks::adminConsentPrimaryUrl($tenant)
|
||||||
: null;
|
: null;
|
||||||
})
|
})
|
||||||
->visible(fn (): bool => $tenant instanceof ManagedEnvironment)
|
->visible(fn (): bool => $tenant instanceof Tenant)
|
||||||
->openUrlInNewTab()
|
->openUrlInNewTab()
|
||||||
)
|
)
|
||||||
->requireCapability(Capabilities::PROVIDER_MANAGE)
|
->requireCapability(Capabilities::PROVIDER_MANAGE)
|
||||||
@ -64,7 +64,7 @@ private function sharedConnectionActions(): array
|
|||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
|
||||||
private function currentTenant(): ?ManagedEnvironment
|
private function currentTenant(): ?Tenant
|
||||||
{
|
{
|
||||||
if (! $this->record instanceof ProviderConnection) {
|
if (! $this->record instanceof ProviderConnection) {
|
||||||
return null;
|
return null;
|
||||||
|
|||||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user