## Summary - add the Spec 194 governance action catalog, friction classes, reason policies, and regression guards - align exception, review, evidence, finding, tenant, provider connection, and system run actions to the shared semantics model - add focused feature, RBAC, audit, unit, and browser coverage, including the tenant detail triage header consistency update ## Verification - ran the focused Spec 194 verification pack from the quickstart and task plan - ran targeted tenant triage coverage after the detail-header update - ran `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` ## Filament Notes - Filament v5 / Livewire v4 compliance preserved - provider registration remains in `apps/platform/bootstrap/providers.php` - globally searchable resources were not changed - destructive actions remain confirmation-gated and server-authorized - no new Filament assets were introduced; the existing `cd apps/platform && php artisan filament:assets` deploy step stays unchanged Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #229
94 lines
3.6 KiB
PHP
94 lines
3.6 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Filament\Resources\EvidenceSnapshotResource\Pages;
|
|
|
|
use App\Filament\Resources\EvidenceSnapshotResource;
|
|
use App\Models\User;
|
|
use App\Services\Evidence\EvidenceSnapshotService;
|
|
use App\Support\Auth\Capabilities;
|
|
use App\Support\Rbac\UiEnforcement;
|
|
use App\Support\Ui\GovernanceActions\GovernanceActionCatalog;
|
|
use Filament\Actions;
|
|
use Filament\Forms\Components\Textarea;
|
|
use Filament\Notifications\Notification;
|
|
use Filament\Resources\Pages\ViewRecord;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
|
|
class ViewEvidenceSnapshot extends ViewRecord
|
|
{
|
|
protected static string $resource = EvidenceSnapshotResource::class;
|
|
|
|
protected function resolveRecord(int|string $key): Model
|
|
{
|
|
return EvidenceSnapshotResource::resolveScopedRecordOrFail($key);
|
|
}
|
|
|
|
protected function getHeaderActions(): array
|
|
{
|
|
$refreshRule = GovernanceActionCatalog::rule('refresh_evidence');
|
|
$expireRule = GovernanceActionCatalog::rule('expire_snapshot');
|
|
|
|
return [
|
|
UiEnforcement::forAction(
|
|
Actions\Action::make('refresh_evidence')
|
|
->label($refreshRule->canonicalLabel)
|
|
->icon('heroicon-o-arrow-path')
|
|
->color('primary')
|
|
->requiresConfirmation()
|
|
->modalHeading($refreshRule->modalHeading)
|
|
->modalDescription($refreshRule->modalDescription)
|
|
->action(function () use ($refreshRule): void {
|
|
$user = auth()->user();
|
|
|
|
if (! $user instanceof User) {
|
|
abort(403);
|
|
}
|
|
|
|
app(EvidenceSnapshotService::class)->refresh($this->record, $user);
|
|
|
|
Notification::make()->success()->title($refreshRule->successTitle)->send();
|
|
}),
|
|
)
|
|
->requireCapability(Capabilities::EVIDENCE_MANAGE)
|
|
->apply(),
|
|
UiEnforcement::forAction(
|
|
Actions\Action::make('expire_snapshot')
|
|
->label($expireRule->canonicalLabel)
|
|
->icon('heroicon-o-x-circle')
|
|
->color('danger')
|
|
->hidden(fn (): bool => ! EvidenceSnapshotResource::canExpireRecord($this->record))
|
|
->requiresConfirmation()
|
|
->modalHeading($expireRule->modalHeading)
|
|
->modalDescription($expireRule->modalDescription)
|
|
->form([
|
|
Textarea::make('expiration_reason')
|
|
->label('Expiry reason')
|
|
->rows(4)
|
|
->required()
|
|
->maxLength(2000),
|
|
])
|
|
->action(function (array $data) use ($expireRule): void {
|
|
$user = auth()->user();
|
|
|
|
if (! $user instanceof User) {
|
|
abort(403);
|
|
}
|
|
|
|
app(EvidenceSnapshotService::class)->expire(
|
|
$this->record,
|
|
$user,
|
|
(string) ($data['expiration_reason'] ?? ''),
|
|
);
|
|
$this->refreshFormData(['status', 'expires_at']);
|
|
|
|
Notification::make()->success()->title($expireRule->successTitle)->send();
|
|
}),
|
|
)
|
|
->requireCapability(Capabilities::EVIDENCE_MANAGE)
|
|
->apply(),
|
|
];
|
|
}
|
|
}
|