TenantAtlas/app/Services/Runbooks/RunbookReason.php
ahmido 200498fa8e feat(113): Platform Ops Runbooks — UX Polish (Filament-native, system theme, live scope) (#137)
## Summary

Implements and polishes the Platform Ops Runbooks feature (Spec 113) — the operator control plane for safe backfills and data repair from `/system`.

## Changes

### UX Polish (Phase 7 — US4)
- **Filament-native components**: Rewrote `runbooks.blade.php` and `view-run.blade.php` using `<x-filament::section>` instead of raw Tailwind div cards. Cards now render correctly with Filament's built-in borders, shadows and dark mode.
- **System panel theme**: Created `resources/css/filament/system/theme.css` and registered `->viteTheme()` on `SystemPanelProvider`. The system panel previously had no theme CSS registered — Tailwind utility classes weren't compiled for its views, causing the warning icon SVG to expand to full container size.
- **Live scope selector**: Added `->live()` to the scope `Radio` field so "Single tenant" immediately reveals the tenant search dropdown without requiring a Submit first.

### Core Feature (Phases 1–6, previously shipped)
- `/system/ops/runbooks` — runbook catalog, preflight, run with typed confirmation + reason
- `/system/ops/runs` — run history table with status/outcome badges
- `/system/ops/runs/{id}` — run detail view with summary counts, failures, collapsible context
- `FindingsLifecycleBackfillRunbookService` — preflight + execution logic
- AllowedTenantUniverse — scopes tenant picker to non-platform tenants only
- RBAC: `platform.ops.view`, `platform.runbooks.view`, `platform.runbooks.run`, `platform.runbooks.findings.lifecycle_backfill`
- Rate-limited `/system/login` (10/min per IP+username)
- Distinct session cookie for `/system` isolation

## Test Coverage
- 16 tests / 141 assertions — all passing
- Covers: page access, RBAC, preflight, run dispatch, scope selector, run detail, run list

## Checklist
- [x] Filament v5 / Livewire v4 compliant
- [x] Provider registered in `bootstrap/providers.php`
- [x] Destructive actions require confirmation (`->requiresConfirmation()`)
- [x] System panel theme registered (`viteTheme`)
- [x] Pint clean
- [x] Tests pass

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #137
2026-02-27 01:11:25 +00:00

104 lines
2.5 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Services\Runbooks;
use Illuminate\Validation\ValidationException;
final readonly class RunbookReason
{
public const string CODE_DATA_REPAIR = 'DATA_REPAIR';
public const string CODE_INCIDENT = 'INCIDENT';
public const string CODE_SUPPORT = 'SUPPORT';
public const string CODE_SECURITY = 'SECURITY';
public function __construct(
public string $reasonCode,
public string $reasonText,
) {
$reasonCode = trim($this->reasonCode);
$reasonText = trim($this->reasonText);
if (! in_array($reasonCode, self::codes(), true)) {
throw ValidationException::withMessages([
'reason.reason_code' => 'Select a valid reason code.',
]);
}
if ($reasonText === '') {
throw ValidationException::withMessages([
'reason.reason_text' => 'Provide a reason.',
]);
}
if (mb_strlen($reasonText) > 500) {
throw ValidationException::withMessages([
'reason.reason_text' => 'Reason must be 500 characters or fewer.',
]);
}
}
/**
* @param array<string, mixed>|null $data
*/
public static function fromNullableArray(?array $data): ?self
{
if (! is_array($data)) {
return null;
}
$reasonCode = trim((string) ($data['reason_code'] ?? ''));
$reasonText = trim((string) ($data['reason_text'] ?? ''));
if ($reasonCode === '' && $reasonText === '') {
return null;
}
return new self(
reasonCode: $reasonCode,
reasonText: $reasonText,
);
}
/**
* @return array<int, string>
*/
public static function codes(): array
{
return [
self::CODE_DATA_REPAIR,
self::CODE_INCIDENT,
self::CODE_SUPPORT,
self::CODE_SECURITY,
];
}
/**
* @return array<string, string>
*/
public static function options(): array
{
return [
self::CODE_DATA_REPAIR => 'Data repair',
self::CODE_INCIDENT => 'Incident',
self::CODE_SUPPORT => 'Support',
self::CODE_SECURITY => 'Security',
];
}
/**
* @return array{reason_code: string, reason_text: string}
*/
public function toArray(): array
{
return [
'reason_code' => trim($this->reasonCode),
'reason_text' => trim($this->reasonText),
];
}
}