## Summary
Implements and polishes the Platform Ops Runbooks feature (Spec 113) — the operator control plane for safe backfills and data repair from `/system`.
## Changes
### UX Polish (Phase 7 — US4)
- **Filament-native components**: Rewrote `runbooks.blade.php` and `view-run.blade.php` using `<x-filament::section>` instead of raw Tailwind div cards. Cards now render correctly with Filament's built-in borders, shadows and dark mode.
- **System panel theme**: Created `resources/css/filament/system/theme.css` and registered `->viteTheme()` on `SystemPanelProvider`. The system panel previously had no theme CSS registered — Tailwind utility classes weren't compiled for its views, causing the warning icon SVG to expand to full container size.
- **Live scope selector**: Added `->live()` to the scope `Radio` field so "Single tenant" immediately reveals the tenant search dropdown without requiring a Submit first.
### Core Feature (Phases 1–6, previously shipped)
- `/system/ops/runbooks` — runbook catalog, preflight, run with typed confirmation + reason
- `/system/ops/runs` — run history table with status/outcome badges
- `/system/ops/runs/{id}` — run detail view with summary counts, failures, collapsible context
- `FindingsLifecycleBackfillRunbookService` — preflight + execution logic
- AllowedTenantUniverse — scopes tenant picker to non-platform tenants only
- RBAC: `platform.ops.view`, `platform.runbooks.view`, `platform.runbooks.run`, `platform.runbooks.findings.lifecycle_backfill`
- Rate-limited `/system/login` (10/min per IP+username)
- Distinct session cookie for `/system` isolation
## Test Coverage
- 16 tests / 141 assertions — all passing
- Covers: page access, RBAC, preflight, run dispatch, scope selector, run detail, run list
## Checklist
- [x] Filament v5 / Livewire v4 compliant
- [x] Provider registered in `bootstrap/providers.php`
- [x] Destructive actions require confirmation (`->requiresConfirmation()`)
- [x] System panel theme registered (`viteTheme`)
- [x] Pint clean
- [x] Tests pass
Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #137
121 lines
3.2 KiB
PHP
121 lines
3.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Console\Commands;
|
|
|
|
use App\Models\Tenant;
|
|
use App\Services\Runbooks\FindingsLifecycleBackfillRunbookService;
|
|
use App\Services\Runbooks\FindingsLifecycleBackfillScope;
|
|
use Illuminate\Console\Command;
|
|
use Illuminate\Validation\ValidationException;
|
|
|
|
class TenantpilotBackfillFindingLifecycle extends Command
|
|
{
|
|
protected $signature = 'tenantpilot:findings:backfill-lifecycle
|
|
{--tenant=* : Limit to tenant_id/external_id}';
|
|
|
|
protected $description = 'Queue tenant-scoped findings lifecycle backfill jobs idempotently.';
|
|
|
|
public function handle(FindingsLifecycleBackfillRunbookService $runbookService): int
|
|
{
|
|
$tenantIdentifiers = array_values(array_filter((array) $this->option('tenant')));
|
|
|
|
if ($tenantIdentifiers === []) {
|
|
$this->error('Provide one or more tenants via --tenant={id|external_id}.');
|
|
|
|
return self::FAILURE;
|
|
}
|
|
|
|
$tenants = $this->resolveTenants($tenantIdentifiers);
|
|
|
|
if ($tenants->isEmpty()) {
|
|
$this->info('No tenants matched the provided identifiers.');
|
|
|
|
return self::SUCCESS;
|
|
}
|
|
|
|
$queued = 0;
|
|
$skipped = 0;
|
|
$nothingToDo = 0;
|
|
|
|
foreach ($tenants as $tenant) {
|
|
if (! $tenant instanceof Tenant) {
|
|
continue;
|
|
}
|
|
|
|
try {
|
|
$run = $runbookService->start(
|
|
scope: FindingsLifecycleBackfillScope::singleTenant((int) $tenant->getKey()),
|
|
initiator: null,
|
|
reason: null,
|
|
source: 'cli',
|
|
);
|
|
} catch (ValidationException $e) {
|
|
$errors = $e->errors();
|
|
|
|
if (isset($errors['preflight.affected_count'])) {
|
|
$nothingToDo++;
|
|
|
|
continue;
|
|
}
|
|
|
|
$this->error(sprintf(
|
|
'Backfill blocked for tenant %d: %s',
|
|
(int) $tenant->getKey(),
|
|
$e->getMessage(),
|
|
));
|
|
|
|
return self::FAILURE;
|
|
}
|
|
|
|
if (! $run->wasRecentlyCreated) {
|
|
$skipped++;
|
|
|
|
continue;
|
|
}
|
|
|
|
$queued++;
|
|
}
|
|
|
|
$this->info(sprintf(
|
|
'Queued %d backfill run(s), skipped %d duplicate run(s), nothing to do %d.',
|
|
$queued,
|
|
$skipped,
|
|
$nothingToDo,
|
|
));
|
|
|
|
return self::SUCCESS;
|
|
}
|
|
|
|
/**
|
|
* @param array<int, string> $tenantIdentifiers
|
|
* @return \Illuminate\Support\Collection<int, Tenant>
|
|
*/
|
|
private function resolveTenants(array $tenantIdentifiers)
|
|
{
|
|
$tenantIds = [];
|
|
|
|
foreach ($tenantIdentifiers as $identifier) {
|
|
$tenant = Tenant::query()
|
|
->forTenant($identifier)
|
|
->first();
|
|
|
|
if ($tenant instanceof Tenant) {
|
|
$tenantIds[] = (int) $tenant->getKey();
|
|
}
|
|
}
|
|
|
|
$tenantIds = array_values(array_unique($tenantIds));
|
|
|
|
if ($tenantIds === []) {
|
|
return collect();
|
|
}
|
|
|
|
return Tenant::query()
|
|
->whereIn('id', $tenantIds)
|
|
->orderBy('id')
|
|
->get();
|
|
}
|
|
}
|