662327e8b4
CI / nodejs-build (push) Successful in 2m47s
CI / branch-name (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / detect-changes (push) Successful in 10s
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / validate-canonical-controls (push) Successful in 16s
CI / loc-budget (push) Failing after 17s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-python-backend (push) Successful in 42s
CI / test-python-document-crawler (push) Has been skipped
CI / test-go (push) Has been skipped
CI / iace-gt-coverage (push) Has been skipped
CI / test-python-dsms-gateway (push) Has been skipped
Massiv-Update auf Basis BMW-Test-Iterationen (v1→v9): Core Compliance-Check - Sonnet check_type Klassifikation: text/process/review fuer alle 1874 MCs in compliance.doc_check_controls (script + Sidecar /data/mc_classification.db). rag_document_checker filtert auf check_type='text' fuer doc_check. Plus fits_doc_type-Audit (v2) + ui_only-Audit fuer DSA/E-Commerce-MCs in falscher doc_type-Schublade. - scope_requires-Filter: biometric/ai_decision/child_targeting MCs werden per business_profile gefiltert (FRT skipped fuer BMW etc.). - Embedding-Match (BGE-M3) als Phase-3 nach Regex-Match: Per-doc_type-Threshold-Override (impressum 0.50, dse/cookie 0.60), Short-Field-Rescue (15-Wort-Chunks) fuer Pflichtfelder im Impressum. Title+check_question als Embedding-Input fuer mehr Kontext. - Cookie-Text-Routing: consent-tester gibt cmp_cookie_text aus dem CMP-Reconstruct zurueck, Backend bevorzugt das gegen DOM-Extraction wenn richer (BMW 1824 vs 600 Worte). Vendor-Redundanz + EU-Alternativen + Cost-Saving - vendor_redundancy.analyze() — funktionale Kategorisierung der CMP-Vendors, Detektion von Mehrfach-Anbietern pro Kategorie, EU-Alternative-Lookup (Matomo, IONOS, HERE, Friendly Captcha, Smart AdServer, ...). - vendor_cost_estimator: Tier-Inferenz aus Cookie-Footprint (Cookie-Anzahl + Premium-Feature-Cookies + Third-Party-Quote → starter/professional/ enterprise/premier). - Self-Service-Werbung (Google/Meta/Pinterest/...) = 0 Lizenz-Kosten (nur Media-Spend, separat). DSP-Plattformen behalten enge Range. - Tier-aware Saving-Range: bei Enterprise/Premier nutzen wir den oberen 40-100%-Band der Listpreise, nicht starter→premier. - Multi-Function-Tools (Matomo Pro, SAP CX, IONOS Cloud, Userlike, Smart AdServer, HERE Maps, Vimeo Pro, LamaPoll) — ein Tool ersetzt mehrere Kategorien gleichzeitig. Cookie-Wissens-DB + Funktionale Klassifikation - cookie_knowledge_db: 50 kuratierte Top-Cookies (Google/Meta/Adobe/MS/...) mit vendor, exact_purpose, data_collected, IAB-TCF-IDs, reid_risk, schrems_ii_status, EuGH-Urteile, EU-Alternative. - cookie_function_classifier: pro Cookie funktionale Rolle (tracking_id, ad_pixel, session_id, ab_test, csrf, ...) + blocking_impact. Country-Inferenz aus Rechtsform - cookie_link_validator: Country-Field wird aus Vendor-Name abgeleitet (A/S=DK, GmbH=DE, Inc=US, B.V.=NL, ...) plus Vendor-Lookup-Table. Reduziert false-positive no_country-Flags bei eindeutig-EU-Vendors (Adform DK, Pinterest IE). Action-Recipes + Doc-Anchor-Locator - finding_action_recipes: pro Finding-Typ (no_cookies_listed, no_country, broken_opt_out, "Auftragsverarbeiter erwaehnen", "Art. 22 Profiling", ...) eine strukturierte Anweisung mit what/why/fix_text/where/example. Zum 1:1-Einfuegen in Kunden-Dokumente. - doc_anchor_locator: Embedding-basiert (BGE-M3 cosine) — sucht den passenden Absatz im existierenden Kundendokument fuer jeden Finding. Per-Run Thread-Local-Cache. Fallback: keyword-Match. - Email-Rendering integriert Recipe + Anchor pro Doc-Pruefungs-Fail + Vendor-Flag-Liste mit aufklappbarer Action-Liste. - Score-Erklaerung pro Vendor-Zeile (3/5-Untertitel + Tooltip). Migration-Pipeline (Compliance-Check -> Customer Banner/Documents) - migration_to_banner.py: Vendor-Liste -> CookieBannerConfig mit 4 Kategorien + Review-Flags. - migration_to_document.py: Vendor-Liste -> Cookie-Policy + VVT-Register + Privacy-Policy-Pre-Fills. - agent_migration_routes: 3 Preview-Endpoints (banner-preview, document-preview, summary). Persistierung der cmp_vendors in /data/compliance_audits.db check_payloads-Tabelle. Borlabs-Parity Cookie-Banner-Features - Consent-Historie im Banner: window.bpShowConsentHistory() + localStorage. - Content-Blocker: cookie-banner-content-blocker.ts — YouTube/Maps/Video Placeholder bis Einwilligung. - Google Consent Mode v2 erweitert: wait_for_update + region=EEA/CH/GB. - Consent-Log Export (CSV/JSON) per einwilligungen_export_routes. Bug-Fixes - canonical_control_routes: _jsonish-Helper fuer string-typed jsonb, similar-controls-Endpoint mit _has_embedding_col()-Cache (kein 500 mehr). - Control-Library Frontend: defensive .map-Coercer in 2 Detail-Views. - Embedding-Service-Batching (32er Batches statt 165 in einem Call). - KeyError 'control_id' in MC-Result-Aggregation (defensive .get). - Master-Controls-Klick-Through von /sdk/master-controls auf /sdk/control-library?control=<id> mit URL-Param-Auto-Open. - Dockerfile: /data pre-chowned auf appuser (Audit-DB-Schreibrecht). - Cookie-Text-Routing-Bug (cmp_reconstructed > DOM-extraction). - doc_type-aware MC-Filter (statt all-text-MCs). - Master-Contract-Dedup (60 BMW-Internal-Eintraege = 1 Adobe-Vertrag). - A3-v2-Audit hat 24 UI-Sprache-MCs als 'process' reklassifiziert. Tests - test_migration_mappers.py (9 Tests) - test_migration_endpoints.py (4 Tests) Skripte (one-shot) - classify_mc_check_type.py (v1) + _v2 (PK=control_id,doc_type) - audit_mc_doctype_fit.py (v1 fits) + _v2 (ui_only + scope_requires) BMW-Run-Bilanz v1 (broken) -> v9 (alle Fixes): DSE 7,5% -> 81-83% Impressum 4% -> 100% (6 echte MCs alle erfuellt) Cookie 0% -> 79-83% (CMP-Text-Routing + Embedding) Plus: 10 Konsolidierungs-Kategorien, geschaetzte Saving 200k-3M / Jahr Plus: Action-Recipes + Doc-Anchors fuer jeden Fail Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
177 lines
6.4 KiB
TypeScript
177 lines
6.4 KiB
TypeScript
'use client'
|
|
|
|
import { useState } from 'react'
|
|
import { StepHeader, STEP_EXPLANATIONS } from '@/components/sdk/StepHeader'
|
|
import { History, Globe, User } from 'lucide-react'
|
|
|
|
import { ConsentRecord } from './_types'
|
|
import { useConsents } from './_hooks/useConsents'
|
|
import { EinwilligungenNavTabs } from './_components/EinwilligungenNavTabs'
|
|
import { StatsGrid } from './_components/StatsGrid'
|
|
import { SearchAndFilter } from './_components/SearchAndFilter'
|
|
import { RecordsTable } from './_components/RecordsTable'
|
|
import { Pagination } from './_components/Pagination'
|
|
import { ConsentDetailModal } from './_components/ConsentDetailModal'
|
|
import BannerConsentsTab from './_components/BannerConsentsTab'
|
|
|
|
type ConsentTab = 'visitors' | 'users'
|
|
|
|
export default function EinwilligungenPage() {
|
|
const [activeTab, setActiveTab] = useState<ConsentTab>('visitors')
|
|
|
|
const {
|
|
records,
|
|
currentPage,
|
|
setCurrentPage,
|
|
totalRecords,
|
|
globalStats,
|
|
handleRevoke,
|
|
} = useConsents()
|
|
|
|
const [filter, setFilter] = useState<string>('all')
|
|
const [searchQuery, setSearchQuery] = useState('')
|
|
const [selectedRecord, setSelectedRecord] = useState<ConsentRecord | null>(null)
|
|
|
|
const filteredRecords = records.filter(record => {
|
|
const matchesFilter = filter === 'all' || record.consentType === filter || record.status === filter
|
|
const matchesSearch = searchQuery === '' ||
|
|
record.email.toLowerCase().includes(searchQuery.toLowerCase()) ||
|
|
record.identifier.toLowerCase().includes(searchQuery.toLowerCase())
|
|
return matchesFilter && matchesSearch
|
|
})
|
|
|
|
const versionUpdates = records.reduce(
|
|
(acc, r) => acc + r.history.filter(h => h.action === 'version_update').length,
|
|
0,
|
|
)
|
|
|
|
const stepInfo = STEP_EXPLANATIONS['einwilligungen']
|
|
|
|
return (
|
|
<div className="space-y-6">
|
|
{/* Step Header */}
|
|
<StepHeader
|
|
stepId="einwilligungen"
|
|
title={stepInfo.title}
|
|
description={stepInfo.description}
|
|
explanation={stepInfo.explanation}
|
|
tips={stepInfo.tips}
|
|
>
|
|
<ConsentExportButton />
|
|
</StepHeader>
|
|
|
|
{/* Navigation Tabs */}
|
|
<EinwilligungenNavTabs />
|
|
|
|
{/* Consent Type Tabs: Website-Besucher / Login-Nutzer */}
|
|
<div className="flex gap-1 p-1 bg-gray-100 rounded-xl w-fit">
|
|
<button
|
|
onClick={() => setActiveTab('visitors')}
|
|
className={`flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-colors ${
|
|
activeTab === 'visitors'
|
|
? 'bg-white text-purple-700 shadow-sm'
|
|
: 'text-gray-500 hover:text-gray-700'
|
|
}`}
|
|
>
|
|
<Globe className="w-4 h-4" />
|
|
Website-Besucher
|
|
</button>
|
|
<button
|
|
onClick={() => setActiveTab('users')}
|
|
className={`flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-colors ${
|
|
activeTab === 'users'
|
|
? 'bg-white text-purple-700 shadow-sm'
|
|
: 'text-gray-500 hover:text-gray-700'
|
|
}`}
|
|
>
|
|
<User className="w-4 h-4" />
|
|
Login-Nutzer
|
|
</button>
|
|
</div>
|
|
|
|
{/* Tab Content */}
|
|
{activeTab === 'visitors' ? (
|
|
<BannerConsentsTab />
|
|
) : (
|
|
<>
|
|
{/* Stats */}
|
|
<StatsGrid
|
|
total={globalStats.total}
|
|
active={globalStats.active}
|
|
revoked={globalStats.revoked}
|
|
versionUpdates={versionUpdates}
|
|
/>
|
|
|
|
{/* Info Banner */}
|
|
<div className="bg-gradient-to-r from-purple-50 to-indigo-50 rounded-xl border border-purple-200 p-4 flex items-start gap-3">
|
|
<History className="w-5 h-5 text-purple-600 mt-0.5" />
|
|
<div>
|
|
<div className="font-medium text-purple-900">Consent-Historie aktiviert</div>
|
|
<div className="text-sm text-purple-700">
|
|
Alle Änderungen an Einwilligungen werden protokolliert, inkl. Zustimmungen zu neuen Versionen von AGB, DSI und anderen Dokumenten.
|
|
Klicken Sie auf "Details" um die vollständige Historie eines Nutzers einzusehen.
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{/* Search and Filter */}
|
|
<SearchAndFilter
|
|
searchQuery={searchQuery}
|
|
onSearchChange={setSearchQuery}
|
|
filter={filter}
|
|
onFilterChange={setFilter}
|
|
/>
|
|
|
|
{/* Records Table */}
|
|
<RecordsTable records={filteredRecords} onShowDetails={setSelectedRecord} />
|
|
|
|
{/* Pagination */}
|
|
<Pagination
|
|
currentPage={currentPage}
|
|
totalRecords={totalRecords}
|
|
onPageChange={setCurrentPage}
|
|
/>
|
|
|
|
{/* Detail Modal */}
|
|
{selectedRecord && (
|
|
<ConsentDetailModal
|
|
record={selectedRecord}
|
|
onClose={() => setSelectedRecord(null)}
|
|
onRevoke={handleRevoke}
|
|
/>
|
|
)}
|
|
</>
|
|
)}
|
|
</div>
|
|
)
|
|
}
|
|
|
|
// Export-Dropdown im Step-Header. Streamt CSV/JSON direkt aus dem
|
|
// Backend via /api/sdk/v1/einwilligungen/export-Proxy.
|
|
function ConsentExportButton() {
|
|
return (
|
|
<div className="relative group">
|
|
<button className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors">
|
|
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
|
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4" />
|
|
</svg>
|
|
Export
|
|
</button>
|
|
<div className="absolute right-0 top-full mt-1 w-60 bg-white border border-gray-200 rounded-lg shadow-lg invisible group-hover:visible opacity-0 group-hover:opacity-100 transition-all z-10">
|
|
<a href="/api/sdk/v1/einwilligungen/export?format=csv&kind=consents" download
|
|
className="block px-4 py-2 text-sm text-gray-700 hover:bg-purple-50 first:rounded-t-lg">
|
|
Einwilligungen als CSV
|
|
</a>
|
|
<a href="/api/sdk/v1/einwilligungen/export?format=json&kind=consents" download
|
|
className="block px-4 py-2 text-sm text-gray-700 hover:bg-purple-50">
|
|
Einwilligungen als JSON
|
|
</a>
|
|
<a href="/api/sdk/v1/einwilligungen/export?format=csv&kind=history" download
|
|
className="block px-4 py-2 text-sm text-gray-700 hover:bg-purple-50 last:rounded-b-lg border-t border-gray-100">
|
|
Aenderungs-Historie als CSV
|
|
</a>
|
|
</div>
|
|
</div>
|
|
)
|
|
}
|