## Summary
- centralize tenant operability into a lane-aware, actor-aware policy boundary
- align selector eligibility, administrative discoverability, remembered context, tenant-bound routes, and canonical run viewers
- add focused Pest coverage plus Spec 148 artifacts and final polish task completion
## Validation
- `vendor/bin/sail artisan test --compact tests/Unit/Tenants/TenantOperabilityServiceTest.php tests/Unit/Tenants/TenantOperabilityOutcomeTest.php tests/Feature/Workspaces/ChooseTenantPageTest.php tests/Feature/Workspaces/SelectTenantControllerTest.php tests/Feature/TenantRBAC/ArchivedTenantRouteAccessTest.php tests/Feature/TenantRBAC/TenantRouteDenyAsNotFoundTest.php tests/Feature/Operations/TenantlessOperationRunViewerTest.php tests/Feature/OpsUx/OperateHubShellTest.php tests/Feature/Rbac/TenantLifecycleActionVisibilityTest.php tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php tests/Feature/Rbac/TenantResourceAuthorizationTest.php tests/Feature/Filament/ManagedTenantsLandingLifecycleTest.php tests/Feature/Filament/TenantGlobalSearchLifecycleScopeTest.php tests/Feature/Onboarding/OnboardingDraftLifecycleTest.php tests/Feature/Onboarding/OnboardingDraftAuthorizationTest.php`
- `vendor/bin/sail bin pint --dirty --format agent`
- manual browser smoke checks on `/admin/choose-tenant`, `/admin/tenants`, `/admin/onboarding`, `/admin/onboarding/{draft}`, and `/admin/operations/{run}`
## Filament / platform notes
- Livewire v4 compliance preserved
- panel provider registration unchanged in `bootstrap/providers.php`
- Tenant resource global search remains backed by existing view/edit pages and is now separated from active-only selector eligibility
- destructive actions remain action closures with confirmation and authorization enforcement
- no asset pipeline changes and no new `filament:assets` deployment requirement
Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #177
90 lines
2.7 KiB
PHP
90 lines
2.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support\Tenants;
|
|
|
|
final readonly class TenantOperabilityOutcome
|
|
{
|
|
/**
|
|
* @param array<string, mixed> $metadata
|
|
*/
|
|
public function __construct(
|
|
public TenantOperabilityQuestion $question,
|
|
public bool $allowed,
|
|
public TenantLifecycle $lifecycle,
|
|
public TenantInteractionLane $lane,
|
|
public ?TenantOperabilityReasonCode $reasonCode = null,
|
|
public ?string $requiredCapability = null,
|
|
public bool $discoverable = false,
|
|
public ?string $informationalMessageKey = null,
|
|
public array $metadata = [],
|
|
) {}
|
|
|
|
/**
|
|
* @param array<string, mixed> $metadata
|
|
*/
|
|
public static function allow(
|
|
TenantOperabilityQuestion $question,
|
|
TenantLifecycle $lifecycle,
|
|
TenantInteractionLane $lane,
|
|
bool $discoverable = true,
|
|
?string $requiredCapability = null,
|
|
?string $informationalMessageKey = null,
|
|
array $metadata = [],
|
|
): self {
|
|
return new self(
|
|
question: $question,
|
|
allowed: true,
|
|
lifecycle: $lifecycle,
|
|
lane: $lane,
|
|
reasonCode: null,
|
|
requiredCapability: $requiredCapability,
|
|
discoverable: $discoverable,
|
|
informationalMessageKey: $informationalMessageKey,
|
|
metadata: $metadata,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @param array<string, mixed> $metadata
|
|
*/
|
|
public static function deny(
|
|
TenantOperabilityQuestion $question,
|
|
TenantLifecycle $lifecycle,
|
|
TenantInteractionLane $lane,
|
|
TenantOperabilityReasonCode $reasonCode,
|
|
bool $discoverable = false,
|
|
?string $requiredCapability = null,
|
|
?string $informationalMessageKey = null,
|
|
array $metadata = [],
|
|
): self {
|
|
return new self(
|
|
question: $question,
|
|
allowed: false,
|
|
lifecycle: $lifecycle,
|
|
lane: $lane,
|
|
reasonCode: $reasonCode,
|
|
requiredCapability: $requiredCapability,
|
|
discoverable: $discoverable,
|
|
informationalMessageKey: $informationalMessageKey,
|
|
metadata: $metadata,
|
|
);
|
|
}
|
|
|
|
public function isDeniedForCapability(): bool
|
|
{
|
|
return $this->reasonCode === TenantOperabilityReasonCode::MissingCapability;
|
|
}
|
|
|
|
public function isDeniedForLifecycle(): bool
|
|
{
|
|
return in_array($this->reasonCode, [
|
|
TenantOperabilityReasonCode::SelectorIneligibleLifecycle,
|
|
TenantOperabilityReasonCode::TenantNotArchived,
|
|
TenantOperabilityReasonCode::TenantAlreadyArchived,
|
|
TenantOperabilityReasonCode::OnboardingNotResumable,
|
|
], true);
|
|
}
|
|
}
|