ahmido
cd811cff4f
## Summary - replace broad substring-based masking with a shared exact/path-based secret classifier and workspace-scoped fingerprint hashing - persist protected snapshot metadata on `policy_versions` and keep secret-only changes visible in compare, drift, restore, review, verification, and ops surfaces - add Spec 120 artifacts, audit documentation, and focused Pest regression coverage for snapshot, audit, verification, review-pack, and notification behavior ## Validation - `vendor/bin/sail artisan test --compact tests/Feature/Intune/PolicySnapshotRedactionTest.php tests/Feature/Intune/PolicySnapshotFingerprintIsolationTest.php tests/Feature/ReviewPack/ReviewPackRedactionIntegrityTest.php tests/Feature/OpsUx/OperationRunNotificationRedactionTest.php tests/Feature/Verification/VerificationReportViewerDbOnlyTest.php` - `vendor/bin/sail bin pint --dirty --format agent` ## Spec / checklist status | Checklist | Total | Completed | Incomplete | Status | |-----------|-------|-----------|------------|--------| | requirements.md | 16 | 16 | 0 | ✓ PASS | - `tasks.md`: T001-T032 complete - `tasks.md`: T033 manual quickstart validation is still open and noted for follow-up ## Filament / platform notes - Livewire v4 compliance is unchanged - no panel provider changes; `bootstrap/providers.php` remains the registration location - no new globally searchable resources were introduced, so global search requirements are unchanged - no new destructive Filament actions were added - no new Filament assets were added; no `filament:assets` deployment change is required ## Testing coverage touched - snapshot persistence and fingerprint isolation - compare/drift protected-change evidence - audit, verification, review-pack, ops-failure, and notification sanitization - viewer/read-only Filament presentation updates Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #146
152 lines
5.5 KiB
PHP
152 lines
5.5 KiB
PHP
@php
|
|
$run = $run ?? null;
|
|
$run = $run instanceof \App\Models\OperationRun ? $run : null;
|
|
|
|
$runData = $runData ?? null;
|
|
$runData = is_array($runData) ? $runData : null;
|
|
|
|
$runUrl = $runUrl ?? null;
|
|
$runUrl = is_string($runUrl) && trim($runUrl) !== '' ? trim($runUrl) : null;
|
|
|
|
$report = $report ?? null;
|
|
$report = is_array($report) ? $report : null;
|
|
|
|
$isInProgress = (bool) ($isInProgress ?? false);
|
|
$canStart = (bool) ($canStart ?? false);
|
|
|
|
$startTooltip = $startTooltip ?? null;
|
|
$startTooltip = is_string($startTooltip) && trim($startTooltip) !== '' ? trim($startTooltip) : null;
|
|
@endphp
|
|
|
|
<x-filament::section
|
|
heading="Verification report"
|
|
description="Latest verification state for this tenant (DB-only rendering)."
|
|
>
|
|
<div class="space-y-4">
|
|
@if ($run === null)
|
|
<div class="rounded-lg border border-gray-200 bg-white p-4 text-sm text-gray-600 shadow-sm dark:border-gray-800 dark:bg-gray-900 dark:text-gray-300">
|
|
No verification run has been started yet.
|
|
</div>
|
|
|
|
<div class="flex items-center gap-2">
|
|
@if ($canStart)
|
|
<x-filament::button
|
|
color="primary"
|
|
size="sm"
|
|
wire:click="startVerification"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
@else
|
|
<div class="flex flex-col gap-1">
|
|
<x-filament::button
|
|
color="gray"
|
|
size="sm"
|
|
disabled
|
|
:title="$startTooltip"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
|
|
@if ($startTooltip)
|
|
<div class="text-xs text-gray-500 dark:text-gray-400">
|
|
{{ $startTooltip }}
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@elseif ($isInProgress)
|
|
<div class="rounded-lg border border-gray-200 bg-white p-4 text-sm text-gray-600 shadow-sm dark:border-gray-800 dark:bg-gray-900 dark:text-gray-300">
|
|
Verification is currently in progress. This section reads only stored run state and does not call external services.
|
|
</div>
|
|
|
|
<div class="flex flex-wrap items-center gap-2">
|
|
@if ($runUrl)
|
|
<x-filament::button
|
|
tag="a"
|
|
:href="$runUrl"
|
|
color="gray"
|
|
size="sm"
|
|
>
|
|
View run
|
|
</x-filament::button>
|
|
@endif
|
|
|
|
@if ($canStart)
|
|
<x-filament::button
|
|
color="primary"
|
|
size="sm"
|
|
wire:click="startVerification"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
@else
|
|
<div class="flex flex-col gap-1">
|
|
<x-filament::button
|
|
color="gray"
|
|
size="sm"
|
|
disabled
|
|
:title="$startTooltip"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
|
|
@if ($startTooltip)
|
|
<div class="text-xs text-gray-500 dark:text-gray-400">
|
|
{{ $startTooltip }}
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@else
|
|
@include('filament.components.verification-report-viewer', [
|
|
'run' => $runData,
|
|
'report' => $report,
|
|
'redactionNotes' => $redactionNotes ?? [],
|
|
])
|
|
|
|
<div class="flex flex-wrap items-center gap-2">
|
|
@if ($runUrl)
|
|
<x-filament::button
|
|
tag="a"
|
|
:href="$runUrl"
|
|
color="gray"
|
|
size="sm"
|
|
>
|
|
View run
|
|
</x-filament::button>
|
|
@endif
|
|
|
|
@if ($canStart)
|
|
<x-filament::button
|
|
color="primary"
|
|
size="sm"
|
|
wire:click="startVerification"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
@else
|
|
<div class="flex flex-col gap-1">
|
|
<x-filament::button
|
|
color="gray"
|
|
size="sm"
|
|
disabled
|
|
:title="$startTooltip"
|
|
>
|
|
Start verification
|
|
</x-filament::button>
|
|
|
|
@if ($startTooltip)
|
|
<div class="text-xs text-gray-500 dark:text-gray-400">
|
|
{{ $startTooltip }}
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@endif
|
|
</div>
|
|
@endif
|
|
</div>
|
|
</x-filament::section>
|