"""Tests for Document Generation (Phase 5). Verifies: - Template generators produce correct output from context - DSFA template includes AI risk section - VVT generates one entry per processing system - TOM includes regulatory-specific measures - Loeschfristen maps standard periods - Obligation includes DSGVO + AI Act + NIS2 when flags set """ import pytest from compliance.api.document_templates.dsfa_template import generate_dsfa_draft from compliance.api.document_templates.vvt_template import generate_vvt_drafts from compliance.api.document_templates.loeschfristen_template import generate_loeschfristen_drafts from compliance.api.document_templates.tom_template import generate_tom_drafts from compliance.api.document_templates.obligation_template import generate_obligation_drafts def _make_ctx(**overrides): """Build a realistic template context.""" base = { "company_name": "Acme GmbH", "legal_form": "GmbH", "industry": "IT", "dpo_name": "Max Datenschutz", "dpo_email": "dpo@acme.de", "supervisory_authority": "LfDI BW", "review_cycle_months": 12, "subject_to_nis2": False, "subject_to_ai_act": False, "subject_to_iso27001": False, "uses_ai": False, "has_ai_systems": False, "processing_systems": [], "ai_systems": [], "ai_use_cases": [], "repos": [], "document_sources": [], "technical_contacts": [], } base.update(overrides) return base # ============================================================================= # DSFA Template # ============================================================================= class TestDSFATemplate: def test_basic_draft(self): ctx = _make_ctx() draft = generate_dsfa_draft(ctx) assert "DSFA" in draft["title"] assert draft["status"] == "draft" assert draft["involves_ai"] is False assert draft["risk_level"] == "medium" def test_ai_draft_is_high_risk(self): ctx = _make_ctx( has_ai_systems=True, ai_systems=[{"name": "Chatbot", "purpose": "Support", "risk_category": "limited", "has_human_oversight": True}], subject_to_ai_act=True, ) draft = generate_dsfa_draft(ctx) assert draft["involves_ai"] is True assert draft["risk_level"] == "high" assert len(draft["ai_systems_summary"]) == 1 def test_includes_dpo(self): ctx = _make_ctx(dpo_name="Dr. Privacy") draft = generate_dsfa_draft(ctx) assert draft["dpo_name"] == "Dr. Privacy" assert "Dr. Privacy" in draft["sections"]["section_1"]["content"] # ============================================================================= # VVT Template # ============================================================================= class TestVVTTemplate: def test_generates_per_system(self): ctx = _make_ctx(processing_systems=[ {"name": "SAP HR", "vendor": "SAP", "hosting": "cloud", "personal_data_categories": ["Mitarbeiter"]}, {"name": "Salesforce", "vendor": "Salesforce", "hosting": "us-cloud", "personal_data_categories": ["Kunden"]}, ]) drafts = generate_vvt_drafts(ctx) assert len(drafts) == 2 assert drafts[0]["vvt_id"] == "VVT-AUTO-001" assert "SAP HR" in drafts[0]["name"] def test_us_cloud_adds_third_country(self): ctx = _make_ctx(processing_systems=[ {"name": "AWS", "vendor": "Amazon", "hosting": "us-cloud", "personal_data_categories": []}, ]) drafts = generate_vvt_drafts(ctx) assert len(drafts[0]["third_country_transfers"]) > 0 def test_no_systems_no_drafts(self): ctx = _make_ctx(processing_systems=[]) drafts = generate_vvt_drafts(ctx) assert len(drafts) == 0 # ============================================================================= # TOM Template # ============================================================================= class TestTOMTemplate: def test_base_toms(self): ctx = _make_ctx() drafts = generate_tom_drafts(ctx) assert len(drafts) == 8 # Base TOMs only categories = {d["category"] for d in drafts} assert "Zutrittskontrolle" in categories assert "Zugangskontrolle" in categories def test_nis2_adds_cybersecurity(self): ctx = _make_ctx(subject_to_nis2=True) drafts = generate_tom_drafts(ctx) assert len(drafts) > 8 categories = {d["category"] for d in drafts} assert "Cybersicherheit" in categories def test_ai_act_adds_ki_compliance(self): ctx = _make_ctx(subject_to_ai_act=True) drafts = generate_tom_drafts(ctx) categories = {d["category"] for d in drafts} assert "KI-Compliance" in categories def test_iso27001_adds_isms(self): ctx = _make_ctx(subject_to_iso27001=True) drafts = generate_tom_drafts(ctx) categories = {d["category"] for d in drafts} assert "ISMS" in categories def test_all_flags_combined(self): ctx = _make_ctx(subject_to_nis2=True, subject_to_ai_act=True, subject_to_iso27001=True) drafts = generate_tom_drafts(ctx) # 8 base + 3 NIS2 + 3 ISO + 3 AI = 17 assert len(drafts) == 17 # ============================================================================= # Loeschfristen Template # ============================================================================= class TestLoeschfristenTemplate: def test_generates_per_category(self): ctx = _make_ctx(processing_systems=[ {"name": "HR", "personal_data_categories": ["Bankdaten", "Steuer-ID"]}, {"name": "CRM", "personal_data_categories": ["Kundendaten"]}, ]) drafts = generate_loeschfristen_drafts(ctx) assert len(drafts) == 3 categories = {d["data_category"] for d in drafts} assert "Bankdaten" in categories assert "Steuer-ID" in categories assert "Kundendaten" in categories def test_standard_periods_applied(self): ctx = _make_ctx(processing_systems=[ {"name": "Payroll", "personal_data_categories": ["Bankdaten"]}, ]) drafts = generate_loeschfristen_drafts(ctx) bankdaten = [d for d in drafts if d["data_category"] == "Bankdaten"][0] assert "10 Jahre" in bankdaten["retention_period"] assert "HGB" in bankdaten["legal_basis"] def test_unknown_category_defaults(self): ctx = _make_ctx(processing_systems=[ {"name": "Custom", "personal_data_categories": ["Spezialdaten"]}, ]) drafts = generate_loeschfristen_drafts(ctx) assert drafts[0]["retention_period"] == "Noch festzulegen" def test_deduplicates_categories(self): ctx = _make_ctx(processing_systems=[ {"name": "A", "personal_data_categories": ["Bankdaten"]}, {"name": "B", "personal_data_categories": ["Bankdaten"]}, ]) drafts = generate_loeschfristen_drafts(ctx) assert len(drafts) == 1 # Deduplicated # ============================================================================= # Obligation Template # ============================================================================= class TestObligationTemplate: def test_base_dsgvo(self): ctx = _make_ctx() drafts = generate_obligation_drafts(ctx) assert len(drafts) == 8 # Base DSGVO titles = {d["title"] for d in drafts} assert "Verzeichnis der Verarbeitungstätigkeiten führen" in titles def test_ai_act_obligations(self): ctx = _make_ctx(subject_to_ai_act=True) drafts = generate_obligation_drafts(ctx) assert len(drafts) > 8 regs = {d["regulation"] for d in drafts} assert "EU AI Act" in regs def test_nis2_obligations(self): ctx = _make_ctx(subject_to_nis2=True) drafts = generate_obligation_drafts(ctx) regs = {d["regulation"] for d in drafts} assert "NIS2" in regs def test_all_flags(self): ctx = _make_ctx(subject_to_nis2=True, subject_to_ai_act=True) drafts = generate_obligation_drafts(ctx) # 8 DSGVO + 3 AI + 2 NIS2 = 13 assert len(drafts) == 13 # ============================================================================= # Route Registration # ============================================================================= class TestGenerationRouteRegistration: def test_routes_registered(self): from compliance.api import router paths = [r.path for r in router.routes] assert any("generation" in p for p in paths) def test_preview_and_apply(self): from compliance.api.generation_routes import router paths = [r.path for r in router.routes] assert any("preview" in p for p in paths) assert any("apply" in p for p in paths)