feat(cmp): vendor-agnostic consent data model — 13 new fields

Extend banner consent records with consent_method, banner_version,
banner_config_hash, geo, page_url, referrer, device info, session_id
and consent_scope for full Art. 7 DSGVO proof with any tracking vendor.

Migration 107, backward-compatible (all fields nullable).
Admin detail modal shows tracking context, device info and technical data.
Fix pre-existing str|None → Optional[str] for Python 3.9 compat.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend-compliance/compliance/services/_banner_serializers.py

@@ -24,8 +24,22 @@ def consent_to_dict(c: BannerConsentDB) -> dict[str, Any]:
         "categories": c.categories or [],
         "vendors": c.vendors or [],
         "ip_hash": c.ip_hash,
+        "user_agent": c.user_agent,
         "consent_string": c.consent_string,
         "linked_email": c.linked_email,
+        "consent_method": c.consent_method,
+        "banner_version": c.banner_version,
+        "banner_config_hash": c.banner_config_hash,
+        "geo_country": c.geo_country,
+        "geo_region": c.geo_region,
+        "consent_scope": c.consent_scope,
+        "page_url": c.page_url,
+        "referrer": c.referrer,
+        "device_type": c.device_type,
+        "browser": c.browser,
+        "os": c.os,
+        "screen_resolution": c.screen_resolution,
+        "session_id": c.session_id,
         "expires_at": c.expires_at.isoformat() if c.expires_at else None,
         "created_at": c.created_at.isoformat() if c.created_at else None,
         "updated_at": c.updated_at.isoformat() if c.updated_at else None,

backend-compliance/compliance/services/banner_consent_service.py

@@ -73,6 +73,9 @@ class BannerConsentService:
         ip_hash: Optional[str] = None,
         banner_config_hash: Optional[str] = None,
         consent_version: Optional[int] = None,
+        *,
+        consent_method: Optional[str] = None,
+        page_url: Optional[str] = None,
     ) -> None:
         entry = BannerConsentAuditLogDB(
             tenant_id=tenant_id,
@@ -84,6 +87,8 @@ class BannerConsentService:
             ip_hash=ip_hash,
             banner_config_hash=banner_config_hash,
             consent_version=consent_version,
+            consent_method=consent_method,
+            page_url=page_url,
         )
         self.db.add(entry)
 
@@ -143,6 +148,16 @@ class BannerConsentService:
         ip_address: Optional[str],
         user_agent: Optional[str],
         consent_string: Optional[str],
+        *,
+        consent_method: Optional[str] = None,
+        page_url: Optional[str] = None,
+        referrer: Optional[str] = None,
+        device_type: Optional[str] = None,
+        browser: Optional[str] = None,
+        os: Optional[str] = None,
+        screen_resolution: Optional[str] = None,
+        session_id: Optional[str] = None,
+        consent_scope: Optional[str] = None,
     ) -> dict[str, Any]:
         """Upsert a device consent row for (tenant, site, device_fingerprint).
 
@@ -158,6 +173,21 @@ class BannerConsentService:
         expires_at = now + timedelta(days=retention)
         config_hash, config_ver = self._compute_config_hash(tid, site_id)
 
+        # Vendor-agnostische Zusatzfelder
+        extra = {
+            "consent_method": consent_method,
+            "banner_version": config_ver,
+            "banner_config_hash": config_hash,
+            "page_url": page_url,
+            "referrer": referrer,
+            "device_type": device_type,
+            "browser": browser,
+            "os": os,
+            "screen_resolution": screen_resolution,
+            "session_id": session_id,
+            "consent_scope": consent_scope or "domain",
+        }
+
         existing = (
             self.db.query(BannerConsentDB)
             .filter(
@@ -176,10 +206,13 @@ class BannerConsentService:
             existing.consent_string = consent_string
             existing.expires_at = expires_at
             existing.updated_at = now
+            for key, val in extra.items():
+                setattr(existing, key, val)
             self.db.flush()
             self._log(
                 tid, existing.id, "consent_updated", site_id, device_fingerprint,
                 categories, ip_hash, config_hash, config_ver,
+                consent_method=consent_method, page_url=page_url,
             )
             self.db.commit()
             self.db.refresh(existing)
@@ -195,12 +228,14 @@ class BannerConsentService:
             user_agent=user_agent,
             consent_string=consent_string,
             expires_at=expires_at,
+            **extra,
         )
         self.db.add(consent)
         self.db.flush()
         self._log(
             tid, consent.id, "consent_given", site_id, device_fingerprint,
             categories, ip_hash, config_hash, config_ver,
+            consent_method=consent_method, page_url=page_url,
         )
         self.db.commit()
         self.db.refresh(consent)
@@ -371,7 +406,7 @@ class BannerConsentService:
         }
 
     def list_consents(
-        self, tenant_id: str, site_id: str | None = None,
+        self, tenant_id: str, site_id: Optional[str] = None,
         limit: int = 50, offset: int = 0,
     ) -> dict[str, Any]:
         """List paginated banner consents with parsed categories."""
@@ -406,6 +441,19 @@ class BannerConsentService:
                 "user_agent": c.user_agent,
                 "linked_email": c.linked_email,
                 "consent_string": c.consent_string,
+                "consent_method": c.consent_method,
+                "banner_version": c.banner_version,
+                "banner_config_hash": c.banner_config_hash,
+                "geo_country": c.geo_country,
+                "geo_region": c.geo_region,
+                "consent_scope": c.consent_scope,
+                "page_url": c.page_url,
+                "referrer": c.referrer,
+                "device_type": c.device_type,
+                "browser": c.browser,
+                "os": c.os,
+                "screen_resolution": c.screen_resolution,
+                "session_id": c.session_id,
                 "expires_at": c.expires_at.isoformat() if c.expires_at else None,
                 "created_at": c.created_at.isoformat() if c.created_at else None,
                 "updated_at": c.updated_at.isoformat() if c.updated_at else None,