## Summary - add explicit workspace closure and tenant removal lifecycle truth with a bounded `WorkspaceLifecycleService` - surface closure and removal posture across admin/system pages, chooser recovery, and canonical historical viewers - block new review-pack and operation starts for closed workspaces or removed tenants while preserving memberships, audit, and history - add focused Pest coverage plus the Spec 292 artifacts for the implemented slice ## Testing - `export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/System/Directory/ViewWorkspaceClosureTest.php tests/Feature/System/Ops/ClosedWorkspaceHistoricalAccessTest.php tests/Feature/Filament/Resources/Workspaces/WorkspaceClosureStatusTest.php tests/Feature/Filament/Resources/TenantResource/TenantWorkspaceRemovalTest.php tests/Feature/Filament/Pages/WorkspaceContextClosureRecoveryTest.php` - `export PATH="/bin:/usr/bin:/usr/local/bin:$PATH" && cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` - manual integrated-browser smoke for admin tenant remove/restore plus chooser recovery and system workspace close/reopen Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #337
149 lines
7.2 KiB
PHP
149 lines
7.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support\Tenants;
|
|
|
|
use App\Support\Governance\PlatformVocabularyGlossary;
|
|
use App\Support\ReasonTranslation\NextStepOption;
|
|
use App\Support\ReasonTranslation\PlatformReasonFamily;
|
|
use App\Support\ReasonTranslation\ReasonOwnershipDescriptor;
|
|
use App\Support\ReasonTranslation\ReasonResolutionEnvelope;
|
|
|
|
enum TenantOperabilityReasonCode: string
|
|
{
|
|
case WorkspaceMismatch = 'workspace_mismatch';
|
|
case TenantNotEntitled = 'tenant_not_entitled';
|
|
case MissingCapability = 'missing_capability';
|
|
case WrongLane = 'wrong_lane';
|
|
case SelectorIneligibleLifecycle = 'selector_ineligible_lifecycle';
|
|
case TenantNotArchived = 'tenant_not_archived';
|
|
case TenantAlreadyArchived = 'tenant_already_archived';
|
|
case OnboardingNotResumable = 'onboarding_not_resumable';
|
|
case CanonicalViewFollowupOnly = 'canonical_view_followup_only';
|
|
case RememberedContextStale = 'remembered_context_stale';
|
|
case WorkspaceClosed = 'workspace_closed';
|
|
case TenantRemovedFromWorkspace = 'tenant_removed_from_workspace';
|
|
|
|
public function operatorLabel(): string
|
|
{
|
|
return match ($this) {
|
|
self::WorkspaceMismatch => 'Workspace context changed',
|
|
self::TenantNotEntitled => 'ManagedEnvironment access removed',
|
|
self::MissingCapability => 'Permission required',
|
|
self::WrongLane => 'Available from a different surface',
|
|
self::SelectorIneligibleLifecycle => 'ManagedEnvironment unavailable in the current lifecycle',
|
|
self::TenantNotArchived => 'ManagedEnvironment is not archived',
|
|
self::TenantAlreadyArchived => 'ManagedEnvironment already archived',
|
|
self::OnboardingNotResumable => 'Onboarding cannot be resumed',
|
|
self::CanonicalViewFollowupOnly => 'Follow-up requires tenant context',
|
|
self::RememberedContextStale => 'Saved tenant context is stale',
|
|
self::WorkspaceClosed => 'Workspace is closed',
|
|
self::TenantRemovedFromWorkspace => 'ManagedEnvironment removed from workspace',
|
|
};
|
|
}
|
|
|
|
public function shortExplanation(): string
|
|
{
|
|
return match ($this) {
|
|
self::WorkspaceMismatch => 'The current workspace scope no longer matches this tenant interaction.',
|
|
self::TenantNotEntitled => 'The current actor is no longer entitled to this tenant.',
|
|
self::MissingCapability => 'The current actor is missing the capability required for this tenant action.',
|
|
self::WrongLane => 'This question can only be completed from a different tenant interaction lane.',
|
|
self::SelectorIneligibleLifecycle => 'This tenant lifecycle is not selectable from the current surface.',
|
|
self::TenantNotArchived => 'This action requires an archived tenant, but the tenant is still active or onboarding.',
|
|
self::TenantAlreadyArchived => 'The tenant is already archived, so there is nothing else to do for this action.',
|
|
self::OnboardingNotResumable => 'This onboarding session can no longer be resumed from the current lifecycle state.',
|
|
self::CanonicalViewFollowupOnly => 'This canonical workspace view is informational only and cannot complete tenant follow-up directly.',
|
|
self::RememberedContextStale => 'The remembered tenant context is no longer valid for the current tenant selector state.',
|
|
self::WorkspaceClosed => 'This workspace is closed and cannot be used for active tenant context or new tenant operations until it is reopened.',
|
|
self::TenantRemovedFromWorkspace => 'This tenant was removed from the workspace and cannot be selected or used for new tenant operations until it is restored.',
|
|
};
|
|
}
|
|
|
|
public function actionability(): string
|
|
{
|
|
return match ($this) {
|
|
self::TenantAlreadyArchived => 'non_actionable',
|
|
self::SelectorIneligibleLifecycle, self::TenantNotArchived, self::OnboardingNotResumable, self::CanonicalViewFollowupOnly, self::RememberedContextStale, self::WorkspaceClosed, self::TenantRemovedFromWorkspace => 'prerequisite_missing',
|
|
default => 'permanent_configuration',
|
|
};
|
|
}
|
|
|
|
public function ownerLayer(): string
|
|
{
|
|
return PlatformVocabularyGlossary::OWNER_PLATFORM_CORE;
|
|
}
|
|
|
|
public function ownerNamespace(): string
|
|
{
|
|
return 'tenant_operability';
|
|
}
|
|
|
|
public function platformReasonFamily(): PlatformReasonFamily
|
|
{
|
|
return PlatformReasonFamily::Availability;
|
|
}
|
|
|
|
public function boundaryClassification(): string
|
|
{
|
|
return PlatformVocabularyGlossary::BOUNDARY_PLATFORM_CORE;
|
|
}
|
|
|
|
/**
|
|
* @return array<int, NextStepOption>
|
|
*/
|
|
public function nextSteps(): array
|
|
{
|
|
return match ($this) {
|
|
self::TenantAlreadyArchived => [],
|
|
self::MissingCapability => [
|
|
NextStepOption::instruction('Ask a tenant Owner to grant the required capability.', scope: 'tenant'),
|
|
],
|
|
self::TenantNotEntitled, self::WorkspaceMismatch => [
|
|
NextStepOption::instruction('Return to an entitled tenant context before retrying.', scope: 'workspace'),
|
|
],
|
|
self::WrongLane, self::CanonicalViewFollowupOnly => [
|
|
NextStepOption::instruction('Open the tenant-specific management surface for follow-up.', scope: 'tenant'),
|
|
],
|
|
self::SelectorIneligibleLifecycle, self::RememberedContextStale => [
|
|
NextStepOption::instruction('Refresh the tenant selector and choose an eligible tenant context.', scope: 'tenant'),
|
|
],
|
|
self::TenantRemovedFromWorkspace => [
|
|
NextStepOption::instruction('Restore the tenant to the workspace before using it as active context.', scope: 'workspace'),
|
|
],
|
|
self::WorkspaceClosed => [
|
|
NextStepOption::instruction('Reopen the workspace before using active tenant context or starting new tenant operations.', scope: 'workspace'),
|
|
],
|
|
self::TenantNotArchived => [
|
|
NextStepOption::instruction('Archive the tenant before retrying this action.', scope: 'tenant'),
|
|
],
|
|
self::OnboardingNotResumable => [
|
|
NextStepOption::instruction('Review the onboarding record and start a new onboarding flow if needed.', scope: 'tenant'),
|
|
],
|
|
};
|
|
}
|
|
|
|
/**
|
|
* @param array<string, mixed> $context
|
|
*/
|
|
public function toReasonResolutionEnvelope(string $surface = 'detail', array $context = []): ReasonResolutionEnvelope
|
|
{
|
|
return new ReasonResolutionEnvelope(
|
|
internalCode: $this->value,
|
|
operatorLabel: $this->operatorLabel(),
|
|
shortExplanation: $this->shortExplanation(),
|
|
actionability: $this->actionability(),
|
|
nextSteps: $this->nextSteps(),
|
|
showNoActionNeeded: $this->actionability() === 'non_actionable',
|
|
diagnosticCodeLabel: $this->value,
|
|
reasonOwnership: new ReasonOwnershipDescriptor(
|
|
ownerLayer: $this->ownerLayer(),
|
|
ownerNamespace: $this->ownerNamespace(),
|
|
reasonCode: $this->value,
|
|
platformReasonFamily: $this->platformReasonFamily(),
|
|
),
|
|
);
|
|
}
|
|
}
|