662327e8b4
CI / nodejs-build (push) Successful in 2m47s
CI / branch-name (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / detect-changes (push) Successful in 10s
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / validate-canonical-controls (push) Successful in 16s
CI / loc-budget (push) Failing after 17s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-python-backend (push) Successful in 42s
CI / test-python-document-crawler (push) Has been skipped
CI / test-go (push) Has been skipped
CI / iace-gt-coverage (push) Has been skipped
CI / test-python-dsms-gateway (push) Has been skipped
Massiv-Update auf Basis BMW-Test-Iterationen (v1→v9): Core Compliance-Check - Sonnet check_type Klassifikation: text/process/review fuer alle 1874 MCs in compliance.doc_check_controls (script + Sidecar /data/mc_classification.db). rag_document_checker filtert auf check_type='text' fuer doc_check. Plus fits_doc_type-Audit (v2) + ui_only-Audit fuer DSA/E-Commerce-MCs in falscher doc_type-Schublade. - scope_requires-Filter: biometric/ai_decision/child_targeting MCs werden per business_profile gefiltert (FRT skipped fuer BMW etc.). - Embedding-Match (BGE-M3) als Phase-3 nach Regex-Match: Per-doc_type-Threshold-Override (impressum 0.50, dse/cookie 0.60), Short-Field-Rescue (15-Wort-Chunks) fuer Pflichtfelder im Impressum. Title+check_question als Embedding-Input fuer mehr Kontext. - Cookie-Text-Routing: consent-tester gibt cmp_cookie_text aus dem CMP-Reconstruct zurueck, Backend bevorzugt das gegen DOM-Extraction wenn richer (BMW 1824 vs 600 Worte). Vendor-Redundanz + EU-Alternativen + Cost-Saving - vendor_redundancy.analyze() — funktionale Kategorisierung der CMP-Vendors, Detektion von Mehrfach-Anbietern pro Kategorie, EU-Alternative-Lookup (Matomo, IONOS, HERE, Friendly Captcha, Smart AdServer, ...). - vendor_cost_estimator: Tier-Inferenz aus Cookie-Footprint (Cookie-Anzahl + Premium-Feature-Cookies + Third-Party-Quote → starter/professional/ enterprise/premier). - Self-Service-Werbung (Google/Meta/Pinterest/...) = 0 Lizenz-Kosten (nur Media-Spend, separat). DSP-Plattformen behalten enge Range. - Tier-aware Saving-Range: bei Enterprise/Premier nutzen wir den oberen 40-100%-Band der Listpreise, nicht starter→premier. - Multi-Function-Tools (Matomo Pro, SAP CX, IONOS Cloud, Userlike, Smart AdServer, HERE Maps, Vimeo Pro, LamaPoll) — ein Tool ersetzt mehrere Kategorien gleichzeitig. Cookie-Wissens-DB + Funktionale Klassifikation - cookie_knowledge_db: 50 kuratierte Top-Cookies (Google/Meta/Adobe/MS/...) mit vendor, exact_purpose, data_collected, IAB-TCF-IDs, reid_risk, schrems_ii_status, EuGH-Urteile, EU-Alternative. - cookie_function_classifier: pro Cookie funktionale Rolle (tracking_id, ad_pixel, session_id, ab_test, csrf, ...) + blocking_impact. Country-Inferenz aus Rechtsform - cookie_link_validator: Country-Field wird aus Vendor-Name abgeleitet (A/S=DK, GmbH=DE, Inc=US, B.V.=NL, ...) plus Vendor-Lookup-Table. Reduziert false-positive no_country-Flags bei eindeutig-EU-Vendors (Adform DK, Pinterest IE). Action-Recipes + Doc-Anchor-Locator - finding_action_recipes: pro Finding-Typ (no_cookies_listed, no_country, broken_opt_out, "Auftragsverarbeiter erwaehnen", "Art. 22 Profiling", ...) eine strukturierte Anweisung mit what/why/fix_text/where/example. Zum 1:1-Einfuegen in Kunden-Dokumente. - doc_anchor_locator: Embedding-basiert (BGE-M3 cosine) — sucht den passenden Absatz im existierenden Kundendokument fuer jeden Finding. Per-Run Thread-Local-Cache. Fallback: keyword-Match. - Email-Rendering integriert Recipe + Anchor pro Doc-Pruefungs-Fail + Vendor-Flag-Liste mit aufklappbarer Action-Liste. - Score-Erklaerung pro Vendor-Zeile (3/5-Untertitel + Tooltip). Migration-Pipeline (Compliance-Check -> Customer Banner/Documents) - migration_to_banner.py: Vendor-Liste -> CookieBannerConfig mit 4 Kategorien + Review-Flags. - migration_to_document.py: Vendor-Liste -> Cookie-Policy + VVT-Register + Privacy-Policy-Pre-Fills. - agent_migration_routes: 3 Preview-Endpoints (banner-preview, document-preview, summary). Persistierung der cmp_vendors in /data/compliance_audits.db check_payloads-Tabelle. Borlabs-Parity Cookie-Banner-Features - Consent-Historie im Banner: window.bpShowConsentHistory() + localStorage. - Content-Blocker: cookie-banner-content-blocker.ts — YouTube/Maps/Video Placeholder bis Einwilligung. - Google Consent Mode v2 erweitert: wait_for_update + region=EEA/CH/GB. - Consent-Log Export (CSV/JSON) per einwilligungen_export_routes. Bug-Fixes - canonical_control_routes: _jsonish-Helper fuer string-typed jsonb, similar-controls-Endpoint mit _has_embedding_col()-Cache (kein 500 mehr). - Control-Library Frontend: defensive .map-Coercer in 2 Detail-Views. - Embedding-Service-Batching (32er Batches statt 165 in einem Call). - KeyError 'control_id' in MC-Result-Aggregation (defensive .get). - Master-Controls-Klick-Through von /sdk/master-controls auf /sdk/control-library?control=<id> mit URL-Param-Auto-Open. - Dockerfile: /data pre-chowned auf appuser (Audit-DB-Schreibrecht). - Cookie-Text-Routing-Bug (cmp_reconstructed > DOM-extraction). - doc_type-aware MC-Filter (statt all-text-MCs). - Master-Contract-Dedup (60 BMW-Internal-Eintraege = 1 Adobe-Vertrag). - A3-v2-Audit hat 24 UI-Sprache-MCs als 'process' reklassifiziert. Tests - test_migration_mappers.py (9 Tests) - test_migration_endpoints.py (4 Tests) Skripte (one-shot) - classify_mc_check_type.py (v1) + _v2 (PK=control_id,doc_type) - audit_mc_doctype_fit.py (v1 fits) + _v2 (ui_only + scope_requires) BMW-Run-Bilanz v1 (broken) -> v9 (alle Fixes): DSE 7,5% -> 81-83% Impressum 4% -> 100% (6 echte MCs alle erfuellt) Cookie 0% -> 79-83% (CMP-Text-Routing + Embedding) Plus: 10 Konsolidierungs-Kategorien, geschaetzte Saving 200k-3M / Jahr Plus: Action-Recipes + Doc-Anchors fuer jeden Fail Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
312 lines
14 KiB
TypeScript
312 lines
14 KiB
TypeScript
'use client'
|
|
|
|
import {
|
|
Shield, ArrowLeft, ExternalLink, CheckCircle2, Lock,
|
|
FileText, BookOpen, Scale, Pencil, Trash2, Eye, Clock,
|
|
} from 'lucide-react'
|
|
import type { CanonicalControl } from '../_types'
|
|
import { EFFORT_LABELS } from '../_types'
|
|
import { SeverityBadge, StateBadge, LicenseRuleBadge } from './Badges'
|
|
|
|
// Defensive coercers: backend has rows where evidence/requirements/test_procedure/open_anchors
|
|
// are JSON-encoded strings instead of arrays. .map() on a string throws — coerce here.
|
|
function asArray<T = unknown>(v: unknown): T[] {
|
|
if (Array.isArray(v)) return v as T[]
|
|
if (typeof v === 'string' && v.trim().startsWith('[')) {
|
|
try { const p = JSON.parse(v); return Array.isArray(p) ? p : [] } catch { return [] }
|
|
}
|
|
return []
|
|
}
|
|
function asStringArray(v: unknown): string[] {
|
|
return asArray(v).map(x => typeof x === 'string' ? x : JSON.stringify(x))
|
|
}
|
|
type EvidenceItem = string | { type?: string; description?: string }
|
|
function asEvidenceArray(v: unknown): EvidenceItem[] {
|
|
return asArray<EvidenceItem>(v)
|
|
}
|
|
|
|
export function ControlDetailView({
|
|
ctrl,
|
|
onBack,
|
|
onEdit,
|
|
onDelete,
|
|
onReview,
|
|
}: {
|
|
ctrl: CanonicalControl
|
|
onBack: () => void
|
|
onEdit: () => void
|
|
onDelete: (controlId: string) => void
|
|
onReview: (controlId: string, action: string) => void
|
|
}) {
|
|
return (
|
|
<div className="max-w-4xl mx-auto p-6">
|
|
<div className="flex items-center justify-between mb-6">
|
|
<button onClick={onBack} className="flex items-center gap-1 text-sm text-gray-500 hover:text-gray-700">
|
|
<ArrowLeft className="w-4 h-4" /> Zurueck zur Uebersicht
|
|
</button>
|
|
<div className="flex items-center gap-2">
|
|
<button onClick={onEdit} className="flex items-center gap-1 px-3 py-1.5 text-sm text-purple-600 border border-purple-300 rounded-lg hover:bg-purple-50">
|
|
<Pencil className="w-3.5 h-3.5" /> Bearbeiten
|
|
</button>
|
|
<button onClick={() => onDelete(ctrl.control_id)} className="flex items-center gap-1 px-3 py-1.5 text-sm text-red-600 border border-red-300 rounded-lg hover:bg-red-50">
|
|
<Trash2 className="w-3.5 h-3.5" /> Loeschen
|
|
</button>
|
|
</div>
|
|
</div>
|
|
|
|
{/* Header */}
|
|
<div className="flex items-start gap-4 mb-6">
|
|
<div className="flex-shrink-0 w-12 h-12 bg-purple-100 rounded-lg flex items-center justify-center">
|
|
<Shield className="w-6 h-6 text-purple-600" />
|
|
</div>
|
|
<div className="flex-1">
|
|
<div className="flex items-center gap-2 mb-1">
|
|
<span className="text-sm font-mono text-purple-600">{ctrl.control_id}</span>
|
|
<SeverityBadge severity={ctrl.severity} />
|
|
<StateBadge state={ctrl.release_state} />
|
|
</div>
|
|
<h1 className="text-xl font-bold text-gray-900">{ctrl.title}</h1>
|
|
<div className="flex items-center gap-4 mt-2 text-xs text-gray-500">
|
|
{ctrl.risk_score !== null && <span>Risiko-Score: {ctrl.risk_score}/10</span>}
|
|
{ctrl.implementation_effort && <span>Aufwand: {EFFORT_LABELS[ctrl.implementation_effort] || ctrl.implementation_effort}</span>}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{/* Objective & Rationale */}
|
|
<div className="space-y-6">
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Ziel</h3>
|
|
<p className="text-sm text-gray-700 bg-gray-50 rounded-lg p-4">{ctrl.objective}</p>
|
|
</section>
|
|
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Begruendung</h3>
|
|
<p className="text-sm text-gray-700 bg-gray-50 rounded-lg p-4">{ctrl.rationale}</p>
|
|
</section>
|
|
|
|
{/* Scope */}
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Geltungsbereich</h3>
|
|
<div className="grid grid-cols-3 gap-4">
|
|
{asStringArray(ctrl.scope?.platforms).length > 0 && (
|
|
<div>
|
|
<p className="text-xs font-medium text-gray-500 mb-1">Plattformen</p>
|
|
<div className="flex flex-wrap gap-1">
|
|
{asStringArray(ctrl.scope?.platforms).map(p => (
|
|
<span key={p} className="px-2 py-0.5 bg-blue-50 text-blue-700 rounded text-xs">{p}</span>
|
|
))}
|
|
</div>
|
|
</div>
|
|
)}
|
|
{asStringArray(ctrl.scope?.components).length > 0 && (
|
|
<div>
|
|
<p className="text-xs font-medium text-gray-500 mb-1">Komponenten</p>
|
|
<div className="flex flex-wrap gap-1">
|
|
{asStringArray(ctrl.scope?.components).map(c => (
|
|
<span key={c} className="px-2 py-0.5 bg-purple-50 text-purple-700 rounded text-xs">{c}</span>
|
|
))}
|
|
</div>
|
|
</div>
|
|
)}
|
|
{asStringArray(ctrl.scope?.data_classes).length > 0 && (
|
|
<div>
|
|
<p className="text-xs font-medium text-gray-500 mb-1">Datenklassen</p>
|
|
<div className="flex flex-wrap gap-1">
|
|
{asStringArray(ctrl.scope?.data_classes).map(d => (
|
|
<span key={d} className="px-2 py-0.5 bg-amber-50 text-amber-700 rounded text-xs">{d}</span>
|
|
))}
|
|
</div>
|
|
</div>
|
|
)}
|
|
</div>
|
|
</section>
|
|
|
|
{/* Requirements */}
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Anforderungen</h3>
|
|
<ol className="space-y-2">
|
|
{asStringArray(ctrl.requirements).map((req, i) => (
|
|
<li key={i} className="flex items-start gap-2 text-sm text-gray-700">
|
|
<span className="flex-shrink-0 w-5 h-5 bg-purple-100 text-purple-700 rounded-full flex items-center justify-center text-xs font-medium mt-0.5">{i + 1}</span>
|
|
{req}
|
|
</li>
|
|
))}
|
|
</ol>
|
|
</section>
|
|
|
|
{/* Test Procedure */}
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Pruefverfahren</h3>
|
|
<ol className="space-y-2">
|
|
{asStringArray(ctrl.test_procedure).map((step, i) => (
|
|
<li key={i} className="flex items-start gap-2 text-sm text-gray-700">
|
|
<CheckCircle2 className="w-4 h-4 text-green-500 flex-shrink-0 mt-0.5" />
|
|
{step}
|
|
</li>
|
|
))}
|
|
</ol>
|
|
</section>
|
|
|
|
{/* Evidence */}
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Nachweisanforderungen</h3>
|
|
<div className="space-y-2">
|
|
{asEvidenceArray(ctrl.evidence).map((ev, i) => (
|
|
<div key={i} className="flex items-start gap-2 p-3 bg-gray-50 rounded-lg">
|
|
<FileText className="w-4 h-4 text-gray-400 flex-shrink-0 mt-0.5" />
|
|
<div>
|
|
{typeof ev === 'string' ? (
|
|
<p className="text-sm text-gray-700">{ev}</p>
|
|
) : (
|
|
<>
|
|
{ev.type && <span className="text-xs font-medium text-gray-500 uppercase">{ev.type}</span>}
|
|
<p className="text-sm text-gray-700">{ev.description ?? JSON.stringify(ev)}</p>
|
|
</>
|
|
)}
|
|
</div>
|
|
</div>
|
|
))}
|
|
</div>
|
|
</section>
|
|
|
|
{/* Open Anchors — THE KEY SECTION */}
|
|
<section className="bg-green-50 border border-green-200 rounded-lg p-4">
|
|
<div className="flex items-center gap-2 mb-3">
|
|
<BookOpen className="w-4 h-4 text-green-700" />
|
|
<h3 className="text-sm font-semibold text-green-900">Open-Source-Referenzen</h3>
|
|
<span className="text-xs text-green-600">({asArray(ctrl.open_anchors).length} Quellen)</span>
|
|
</div>
|
|
<p className="text-xs text-green-700 mb-3">
|
|
Dieses Control basiert auf frei verfuegbarem Wissen. Alle Referenzen sind offen und oeffentlich zugaenglich.
|
|
</p>
|
|
<div className="space-y-2">
|
|
{asArray<{ framework?: string; ref?: string; url?: string }>(ctrl.open_anchors).map((anchor, i) => (
|
|
<div key={i} className="flex items-start gap-3 p-2 bg-white rounded border border-green-100">
|
|
<Scale className="w-4 h-4 text-green-600 flex-shrink-0 mt-0.5" />
|
|
<div className="flex-1 min-w-0">
|
|
<span className="text-xs font-semibold text-green-800">{anchor.framework}</span>
|
|
<p className="text-sm text-gray-700">{anchor.ref}</p>
|
|
</div>
|
|
<a
|
|
href={anchor.url}
|
|
target="_blank"
|
|
rel="noopener noreferrer"
|
|
className="flex items-center gap-1 text-xs text-green-600 hover:text-green-800 flex-shrink-0"
|
|
>
|
|
<ExternalLink className="w-3 h-3" />
|
|
Quelle
|
|
</a>
|
|
</div>
|
|
))}
|
|
</div>
|
|
</section>
|
|
|
|
{/* Tags */}
|
|
{asStringArray(ctrl.tags).length > 0 && (
|
|
<section>
|
|
<h3 className="text-sm font-semibold text-gray-900 mb-2">Tags</h3>
|
|
<div className="flex flex-wrap gap-1.5">
|
|
{asStringArray(ctrl.tags).map(tag => (
|
|
<span key={tag} className="px-2 py-1 bg-gray-100 text-gray-600 rounded text-xs">{tag}</span>
|
|
))}
|
|
</div>
|
|
</section>
|
|
)}
|
|
|
|
{/* License & Citation Info */}
|
|
{ctrl.license_rule && (
|
|
<section className="bg-blue-50 border border-blue-200 rounded-lg p-4">
|
|
<div className="flex items-center gap-2 mb-2">
|
|
<Scale className="w-4 h-4 text-blue-700" />
|
|
<h3 className="text-sm font-semibold text-blue-900">Lizenzinformationen</h3>
|
|
<LicenseRuleBadge rule={ctrl.license_rule} />
|
|
</div>
|
|
{ctrl.source_citation && (
|
|
<div className="text-xs text-blue-800 space-y-1">
|
|
<p><span className="font-medium">Quelle:</span> {ctrl.source_citation.source}</p>
|
|
{ctrl.source_citation.license && <p><span className="font-medium">Lizenz:</span> {ctrl.source_citation.license}</p>}
|
|
{ctrl.source_citation.license_notice && <p><span className="font-medium">Hinweis:</span> {ctrl.source_citation.license_notice}</p>}
|
|
{ctrl.source_citation.url && (
|
|
<a href={ctrl.source_citation.url} target="_blank" rel="noopener noreferrer" className="flex items-center gap-1 text-blue-600 hover:text-blue-800">
|
|
<ExternalLink className="w-3 h-3" /> Originalquelle
|
|
</a>
|
|
)}
|
|
</div>
|
|
)}
|
|
{ctrl.source_original_text && (
|
|
<details className="mt-2">
|
|
<summary className="text-xs text-blue-600 cursor-pointer hover:text-blue-800">Originaltext anzeigen</summary>
|
|
<p className="mt-1 text-xs text-gray-700 bg-white rounded p-2 border border-blue-100 max-h-40 overflow-y-auto">{ctrl.source_original_text}</p>
|
|
</details>
|
|
)}
|
|
{ctrl.license_rule === 3 && (
|
|
<p className="text-xs text-amber-700 mt-2 flex items-center gap-1">
|
|
<Lock className="w-3 h-3" />
|
|
Eigenstaendig formuliert — keine Originalquelle gespeichert
|
|
</p>
|
|
)}
|
|
</section>
|
|
)}
|
|
|
|
{/* Generation Metadata (internal) */}
|
|
{ctrl.generation_metadata && (
|
|
<section className="bg-gray-50 border border-gray-200 rounded-lg p-4">
|
|
<div className="flex items-center gap-2 mb-2">
|
|
<Clock className="w-4 h-4 text-gray-500" />
|
|
<h3 className="text-sm font-semibold text-gray-700">Generierungsdetails (intern)</h3>
|
|
</div>
|
|
<div className="text-xs text-gray-600 space-y-1">
|
|
<p>Pfad: {String(ctrl.generation_metadata.processing_path || '-')}</p>
|
|
{ctrl.generation_metadata.similarity_status && (
|
|
<p className="text-red-600">Similarity: {String(ctrl.generation_metadata.similarity_status)}</p>
|
|
)}
|
|
{Array.isArray(ctrl.generation_metadata.similar_controls) && (
|
|
<div>
|
|
<p className="font-medium">Aehnliche Controls:</p>
|
|
{(ctrl.generation_metadata.similar_controls as Array<Record<string, unknown>>).map((s, i) => (
|
|
<p key={i} className="ml-2">{String(s.control_id)} — {String(s.title)} ({String(s.similarity)})</p>
|
|
))}
|
|
</div>
|
|
)}
|
|
</div>
|
|
</section>
|
|
)}
|
|
|
|
{/* Review Actions */}
|
|
{['needs_review', 'too_close', 'duplicate'].includes(ctrl.release_state) && (
|
|
<section className="bg-yellow-50 border border-yellow-200 rounded-lg p-4">
|
|
<div className="flex items-center gap-2 mb-3">
|
|
<Eye className="w-4 h-4 text-yellow-700" />
|
|
<h3 className="text-sm font-semibold text-yellow-900">Review erforderlich</h3>
|
|
</div>
|
|
<div className="flex items-center gap-2">
|
|
<button
|
|
onClick={() => onReview(ctrl.control_id, 'approve')}
|
|
className="px-3 py-1.5 text-sm text-white bg-green-600 rounded-lg hover:bg-green-700"
|
|
>
|
|
<CheckCircle2 className="w-3.5 h-3.5 inline mr-1" />
|
|
Akzeptieren
|
|
</button>
|
|
<button
|
|
onClick={() => onReview(ctrl.control_id, 'reject')}
|
|
className="px-3 py-1.5 text-sm text-white bg-red-600 rounded-lg hover:bg-red-700"
|
|
>
|
|
<Trash2 className="w-3.5 h-3.5 inline mr-1" />
|
|
Ablehnen
|
|
</button>
|
|
<button
|
|
onClick={onEdit}
|
|
className="px-3 py-1.5 text-sm text-gray-600 border border-gray-300 rounded-lg hover:bg-gray-50"
|
|
>
|
|
<Pencil className="w-3.5 h-3.5 inline mr-1" />
|
|
Ueberarbeiten
|
|
</button>
|
|
</div>
|
|
</section>
|
|
)}
|
|
</div>
|
|
</div>
|
|
)
|
|
}
|