TenantAtlas/apps/platform/app/Support/Tenants/TenantOperabilityReasonCode.php
ahmido 210508db9d feat: implement workspace and tenant closure lifecycle (#337)
## Summary
- add explicit workspace closure and tenant removal lifecycle truth with a bounded `WorkspaceLifecycleService`
- surface closure and removal posture across admin/system pages, chooser recovery, and canonical historical viewers
- block new review-pack and operation starts for closed workspaces or removed tenants while preserving memberships, audit, and history
- add focused Pest coverage plus the Spec 292 artifacts for the implemented slice

## Testing
- `export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/System/Directory/ViewWorkspaceClosureTest.php tests/Feature/System/Ops/ClosedWorkspaceHistoricalAccessTest.php tests/Feature/Filament/Resources/Workspaces/WorkspaceClosureStatusTest.php tests/Feature/Filament/Resources/TenantResource/TenantWorkspaceRemovalTest.php tests/Feature/Filament/Pages/WorkspaceContextClosureRecoveryTest.php`
- `export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`
- manual integrated-browser smoke for admin tenant remove/restore plus chooser recovery and system workspace close/reopen

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #337
2026-05-07 13:12:17 +00:00

149 lines
7.2 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Support\Tenants;
use App\Support\Governance\PlatformVocabularyGlossary;
use App\Support\ReasonTranslation\NextStepOption;
use App\Support\ReasonTranslation\PlatformReasonFamily;
use App\Support\ReasonTranslation\ReasonOwnershipDescriptor;
use App\Support\ReasonTranslation\ReasonResolutionEnvelope;
enum TenantOperabilityReasonCode: string
{
case WorkspaceMismatch = 'workspace_mismatch';
case TenantNotEntitled = 'tenant_not_entitled';
case MissingCapability = 'missing_capability';
case WrongLane = 'wrong_lane';
case SelectorIneligibleLifecycle = 'selector_ineligible_lifecycle';
case TenantNotArchived = 'tenant_not_archived';
case TenantAlreadyArchived = 'tenant_already_archived';
case OnboardingNotResumable = 'onboarding_not_resumable';
case CanonicalViewFollowupOnly = 'canonical_view_followup_only';
case RememberedContextStale = 'remembered_context_stale';
case WorkspaceClosed = 'workspace_closed';
case TenantRemovedFromWorkspace = 'tenant_removed_from_workspace';
public function operatorLabel(): string
{
return match ($this) {
self::WorkspaceMismatch => 'Workspace context changed',
self::TenantNotEntitled => 'ManagedEnvironment access removed',
self::MissingCapability => 'Permission required',
self::WrongLane => 'Available from a different surface',
self::SelectorIneligibleLifecycle => 'ManagedEnvironment unavailable in the current lifecycle',
self::TenantNotArchived => 'ManagedEnvironment is not archived',
self::TenantAlreadyArchived => 'ManagedEnvironment already archived',
self::OnboardingNotResumable => 'Onboarding cannot be resumed',
self::CanonicalViewFollowupOnly => 'Follow-up requires tenant context',
self::RememberedContextStale => 'Saved tenant context is stale',
self::WorkspaceClosed => 'Workspace is closed',
self::TenantRemovedFromWorkspace => 'ManagedEnvironment removed from workspace',
};
}
public function shortExplanation(): string
{
return match ($this) {
self::WorkspaceMismatch => 'The current workspace scope no longer matches this tenant interaction.',
self::TenantNotEntitled => 'The current actor is no longer entitled to this tenant.',
self::MissingCapability => 'The current actor is missing the capability required for this tenant action.',
self::WrongLane => 'This question can only be completed from a different tenant interaction lane.',
self::SelectorIneligibleLifecycle => 'This tenant lifecycle is not selectable from the current surface.',
self::TenantNotArchived => 'This action requires an archived tenant, but the tenant is still active or onboarding.',
self::TenantAlreadyArchived => 'The tenant is already archived, so there is nothing else to do for this action.',
self::OnboardingNotResumable => 'This onboarding session can no longer be resumed from the current lifecycle state.',
self::CanonicalViewFollowupOnly => 'This canonical workspace view is informational only and cannot complete tenant follow-up directly.',
self::RememberedContextStale => 'The remembered tenant context is no longer valid for the current tenant selector state.',
self::WorkspaceClosed => 'This workspace is closed and cannot be used for active tenant context or new tenant operations until it is reopened.',
self::TenantRemovedFromWorkspace => 'This tenant was removed from the workspace and cannot be selected or used for new tenant operations until it is restored.',
};
}
public function actionability(): string
{
return match ($this) {
self::TenantAlreadyArchived => 'non_actionable',
self::SelectorIneligibleLifecycle, self::TenantNotArchived, self::OnboardingNotResumable, self::CanonicalViewFollowupOnly, self::RememberedContextStale, self::WorkspaceClosed, self::TenantRemovedFromWorkspace => 'prerequisite_missing',
default => 'permanent_configuration',
};
}
public function ownerLayer(): string
{
return PlatformVocabularyGlossary::OWNER_PLATFORM_CORE;
}
public function ownerNamespace(): string
{
return 'tenant_operability';
}
public function platformReasonFamily(): PlatformReasonFamily
{
return PlatformReasonFamily::Availability;
}
public function boundaryClassification(): string
{
return PlatformVocabularyGlossary::BOUNDARY_PLATFORM_CORE;
}
/**
* @return array<int, NextStepOption>
*/
public function nextSteps(): array
{
return match ($this) {
self::TenantAlreadyArchived => [],
self::MissingCapability => [
NextStepOption::instruction('Ask a tenant Owner to grant the required capability.', scope: 'tenant'),
],
self::TenantNotEntitled, self::WorkspaceMismatch => [
NextStepOption::instruction('Return to an entitled tenant context before retrying.', scope: 'workspace'),
],
self::WrongLane, self::CanonicalViewFollowupOnly => [
NextStepOption::instruction('Open the tenant-specific management surface for follow-up.', scope: 'tenant'),
],
self::SelectorIneligibleLifecycle, self::RememberedContextStale => [
NextStepOption::instruction('Refresh the tenant selector and choose an eligible tenant context.', scope: 'tenant'),
],
self::TenantRemovedFromWorkspace => [
NextStepOption::instruction('Restore the tenant to the workspace before using it as active context.', scope: 'workspace'),
],
self::WorkspaceClosed => [
NextStepOption::instruction('Reopen the workspace before using active tenant context or starting new tenant operations.', scope: 'workspace'),
],
self::TenantNotArchived => [
NextStepOption::instruction('Archive the tenant before retrying this action.', scope: 'tenant'),
],
self::OnboardingNotResumable => [
NextStepOption::instruction('Review the onboarding record and start a new onboarding flow if needed.', scope: 'tenant'),
],
};
}
/**
* @param array<string, mixed> $context
*/
public function toReasonResolutionEnvelope(string $surface = 'detail', array $context = []): ReasonResolutionEnvelope
{
return new ReasonResolutionEnvelope(
internalCode: $this->value,
operatorLabel: $this->operatorLabel(),
shortExplanation: $this->shortExplanation(),
actionability: $this->actionability(),
nextSteps: $this->nextSteps(),
showNoActionNeeded: $this->actionability() === 'non_actionable',
diagnosticCodeLabel: $this->value,
reasonOwnership: new ReasonOwnershipDescriptor(
ownerLayer: $this->ownerLayer(),
ownerNamespace: $this->ownerNamespace(),
reasonCode: $this->value,
platformReasonFamily: $this->platformReasonFamily(),
),
);
}
}