""" Banner Runner — maps scan results to the L1/L2 check hierarchy. Takes the raw ScanResponse dict and produces a structured_checks list compatible with ChecklistView (same format as document checks). """ from checks.banner_checks import BANNER_CHECKLIST def map_scan_to_checks(scan_result: dict) -> dict: """Map a /scan response to the L1/L2 banner check hierarchy. Returns dict with: - structured_checks: list of CheckItem dicts - completeness_pct: L1 pass rate (0-100) - correctness_pct: L2 pass rate (0-100) """ # Collect all violation codes from every source violation_codes = _collect_violation_codes(scan_result) # Collect pass codes — some checks produce boolean signals, not violations pass_codes = _collect_pass_codes(scan_result) # Build structured checks checks: list[dict] = [] l1_checks: list[dict] = [] l2_checks: list[dict] = [] for defn in BANNER_CHECKLIST: key = defn["check_key"] level = defn["level"] parent = defn.get("parent") # Determine pass/fail is_violation_key = key in violation_codes is_pass_key = key in pass_codes # For checks whose check_key appears in violations → failed # For checks whose check_key appears only in passes → passed # For checks where neither → assume passed (not tested = no finding) if is_violation_key: passed = False matched_text = violation_codes[key] elif is_pass_key: passed = True matched_text = pass_codes.get(key, "") else: # Key not found in violations or explicit passes. # If the scan ran (banner detected) → assume passed. # If banner not detected → only banner_detected fails. passed = scan_result.get("banner_detected", False) or key == "banner_detected" if key == "banner_detected": passed = scan_result.get("banner_detected", False) matched_text = "" # L2 checks are skipped if their parent L1 failed skipped = False if level == 2 and parent: parent_check = next( (c for c in checks if c["id"] == parent), None ) if parent_check and not parent_check["passed"]: skipped = True item = { "id": defn["id"], "label": defn["label"], "passed": passed and not skipped, "severity": defn["severity"], "level": level, "parent": parent, "skipped": skipped, "hint": defn.get("hint", ""), "matched_text": matched_text if passed else "", } checks.append(item) if level == 1: l1_checks.append(item) elif level == 2: l2_checks.append(item) # Compute percentages l1_total = len(l1_checks) l1_passed = sum(1 for c in l1_checks if c["passed"]) completeness_pct = round(l1_passed / l1_total * 100) if l1_total else 0 l2_active = [c for c in l2_checks if not c["skipped"]] l2_passed = sum(1 for c in l2_active if c["passed"]) correctness_pct = round(l2_passed / len(l2_active) * 100) if l2_active else 0 return { "structured_checks": checks, "completeness_pct": completeness_pct, "correctness_pct": correctness_pct, } def _collect_violation_codes(scan: dict) -> dict[str, str]: """Collect check_key → violation text from all sources.""" codes: dict[str, str] = {} # Banner text violations banner_checks = scan.get("banner_checks", {}) for v in banner_checks.get("violations", []): code = v.get("code", "") if code: codes[code] = v.get("text", "")[:120] # Phase A violations (before consent) phase_a = scan.get("phases", {}).get("before_consent", {}) for v in phase_a.get("violations", []): code = v.get("code", "") if code: codes[code] = v.get("text", "")[:120] # Phase B violations (after reject) phase_b = scan.get("phases", {}).get("after_reject", {}) for v in phase_b.get("violations", []): code = v.get("code", "") if code: codes[code] = v.get("text", "")[:120] # Tracking services in phase A → tracking_before_consent tracking_a = phase_a.get("tracking_services", []) if tracking_a and "tracking_before_consent" not in codes: codes["tracking_before_consent"] = ", ".join(tracking_a[:5]) # Cookies before consent → cookies_before_consent cookies_a = phase_a.get("cookies", []) tracking_cookies = [c for c in cookies_a if _is_tracking_cookie(c)] if tracking_cookies and "cookies_before_consent" not in codes: codes["cookies_before_consent"] = ", ".join(tracking_cookies[:5]) # New tracking after reject → tracking_after_reject new_tracking_b = phase_b.get("new_tracking", []) if new_tracking_b and "tracking_after_reject" not in codes: codes["tracking_after_reject"] = ", ".join(new_tracking_b[:5]) return codes def _collect_pass_codes(scan: dict) -> dict[str, str]: """Collect explicit pass signals from scan results.""" passes: dict[str, str] = {} # Banner detected if scan.get("banner_detected"): passes["banner_detected"] = scan.get("banner_provider", "detected") # Provider named provider = scan.get("banner_provider", "") if provider: passes["banner_provider_named"] = provider # Impressum link bc = scan.get("banner_checks", {}) if bc.get("has_impressum_link"): passes["impressum_link"] = "Impressum-Link gefunden" if bc.get("has_dse_link"): passes["dse_link"] = "DSE-Link gefunden" return passes _TRACKING_COOKIE_PREFIXES = ( "_ga", "_gid", "_fbp", "_fbc", "IDE", "_gcl", "fr", "_pin", "_tt_", "li_sugr", "_hj", "mp_", "ajs_", "_clck", "_clsk", ) def _is_tracking_cookie(name: str) -> bool: """Check if a cookie name is a known tracking cookie.""" return any(name.startswith(p) for p in _TRACKING_COOKIE_PREFIXES)