feat: add read-only System Info admin page with health checks and module inventory

New page at /admin/system-info with three tabs: - Overview: PHP version, SAPI, environment, 6 health checks (DB, schema, storage, RBAC baseline, admin role, scheduler heartbeat) - Modules: table of active modules with version, dependencies, permission count - Permissions: active/inactive counts and per-source breakdown Gated behind new system_info.view permission assigned to Admin role. No mutations — purely diagnostic/observability. Includes SystemHealthService, SystemInfoService, SystemHealthRepository with interface, DI registration, i18n keys (de+en), idempotent DB update script, and 17 new PHPUnit tests. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 15:08:02 +01:00
parent be8bf496cb
commit cf8c59d3f8
17 changed files with 1164 additions and 4 deletions
--- a/lib/Repository/System/SystemHealthRepository.php
+++ b/lib/Repository/System/SystemHealthRepository.php
@@ -0,0 +1,113 @@
+<?php
+
+namespace MintyPHP\Repository\System;
+
+use MintyPHP\DB;
+
+class SystemHealthRepository implements SystemHealthRepositoryInterface
+{
+    /**
+     * @return bool True if DB responds to SELECT 1.
+     */
+    public function checkDatabaseConnectivity(): bool
+    {
+        return (int) (DB::selectValue('select 1') ?? 0) === 1;
+    }
+
+    /**
+     * @return list<string> Table names present in the current schema.
+     */
+    public function listPresentTables(array $requiredTables): array
+    {
+        $rows = DB::select(
+            'select table_name from information_schema.tables where table_schema = database() and table_name in (???)',
+            $requiredTables
+        );
+
+        $present = [];
+        foreach ((array) $rows as $row) {
+            $table = (string) (($row['tables']['table_name'] ?? $row['table_name'] ?? ''));
+            if ($table !== '') {
+                $present[] = $table;
+            }
+        }
+
+        return array_values(array_unique($present));
+    }
+
+    /**
+     * @return array{last_heartbeat_at: string, last_result: string, last_error_code: string}|null
+     */
+    public function getSchedulerStatus(): ?array
+    {
+        $row = DB::selectOne('select last_heartbeat_at, last_result, last_error_code from scheduler_runtime_status where id = 1 limit 1');
+        $status = is_array($row) ? ($row['scheduler_runtime_status'] ?? $row) : null;
+        if (!is_array($status)) {
+            return null;
+        }
+
+        return [
+            'last_heartbeat_at' => trim((string) ($status['last_heartbeat_at'] ?? '')),
+            'last_result' => trim((string) ($status['last_result'] ?? 'unknown')),
+            'last_error_code' => trim((string) ($status['last_error_code'] ?? '')),
+        ];
+    }
+
+    /**
+     * @return list<string> Active permission keys matching the given list.
+     */
+    public function listActivePermissionKeys(array $keys): array
+    {
+        $rows = DB::select(
+            'select `key` from permissions where active = 1 and `key` in (???)',
+            $keys
+        );
+
+        $present = [];
+        foreach ((array) $rows as $row) {
+            $key = (string) (($row['permissions']['key'] ?? $row['key'] ?? ''));
+            if ($key !== '') {
+                $present[] = $key;
+            }
+        }
+
+        return array_values(array_unique($present));
+    }
+
+    public function countAdminUsers(): int
+    {
+        return (int) (DB::selectValue(
+            'select count(distinct ur.user_id) from user_roles ur join roles r on r.id = ur.role_id and r.active = 1 where r.description in (?, ?) or r.id = 1',
+            'Admin',
+            'Administrator'
+        ) ?? 0);
+    }
+
+    public function countActivePermissions(): int
+    {
+        return (int) (DB::selectValue('select count(*) from permissions where active = 1') ?? 0);
+    }
+
+    public function countInactivePermissions(): int
+    {
+        return (int) (DB::selectValue('select count(*) from permissions where active = 0') ?? 0);
+    }
+
+    /**
+     * @return list<string> All active permission keys.
+     */
+    public function listAllActivePermissionKeys(): array
+    {
+        $rows = DB::select('select `key` from permissions where active = 1 order by `key`');
+
+        $keys = [];
+        foreach ((array) $rows as $row) {
+            $key = (string) (($row['permissions']['key'] ?? $row['key'] ?? ''));
+            if ($key !== '') {
+                $keys[] = $key;
+            }
+        }
+
+        return $keys;
+    }
+}
--- a/lib/Repository/System/SystemHealthRepositoryInterface.php
+++ b/lib/Repository/System/SystemHealthRepositoryInterface.php
@@ -0,0 +1,36 @@
+<?php
+
+namespace MintyPHP\Repository\System;
+
+interface SystemHealthRepositoryInterface
+{
+    public function checkDatabaseConnectivity(): bool;
+
+    /**
+     * @param list<string> $requiredTables
+     * @return list<string>
+     */
+    public function listPresentTables(array $requiredTables): array;
+
+    /**
+     * @return array{last_heartbeat_at: string, last_result: string, last_error_code: string}|null
+     */
+    public function getSchedulerStatus(): ?array;
+
+    /**
+     * @param list<string> $keys
+     * @return list<string>
+     */
+    public function listActivePermissionKeys(array $keys): array;
+
+    public function countAdminUsers(): int;
+
+    public function countActivePermissions(): int;
+
+    public function countInactivePermissions(): int;
+
+    /**
+     * @return list<string>
+     */
+    public function listAllActivePermissionKeys(): array;
+}