@tantainnovative/ndpr-toolkit 1.0.3 → 1.0.5

package/src/hooks/useConsent.ts

@@ -1,11 +1,13 @@
-'use client';
+"use client";
 
-import { useState, useEffect } from 'react';
-import { ConsentRecord } from '@/types';
-import consentService from '@/lib/consentService';
+import { useState, useEffect } from "react";
+import { ConsentRecord } from "@/types";
+import consentService from "@/lib/consentService";
 
 export function useConsent() {
-  const [consentRecord, setConsentRecord] = useState<ConsentRecord | null>(null);
+  const [consentRecord, setConsentRecord] = useState<ConsentRecord | null>(
+    null,
+  );
   const [isLoading, setIsLoading] = useState(true);
   const [showBanner, setShowBanner] = useState(false);
 
@@ -14,7 +16,7 @@ export function useConsent() {
     const storedConsent = consentService.getCurrentConsent();
     setConsentRecord(storedConsent);
     setIsLoading(false);
-    
+
     // If no consent is stored, show the banner
     if (!storedConsent) {
       setShowBanner(true);
@@ -29,11 +31,15 @@ export function useConsent() {
   };
 
   const updateConsent = (
-    consents: Record<string, boolean>, 
+    consents: Record<string, boolean>,
     changeReason?: string,
-    userId?: string
+    userId?: string,
   ) => {
-    const updatedRecord = consentService.updateConsent(consents, changeReason, userId);
+    const updatedRecord = consentService.updateConsent(
+      consents,
+      changeReason,
+      userId,
+    );
     setConsentRecord(updatedRecord);
     return updatedRecord;
   };
@@ -59,6 +65,6 @@ export function useConsent() {
     updateConsent,
     hasConsent,
     openPreferences,
-    closePreferences
+    closePreferences,
   };
 }

package/src/lib/consentService.ts

@@ -1,14 +1,14 @@
-'use client';
+"use client";
 
-import { ConsentRecord, ConsentHistoryEntry } from '@/types';
-import { v4 as uuidv4 } from 'uuid';
-import { storage } from './storage';
+import { ConsentRecord, ConsentHistoryEntry } from "@/types";
+import { v4 as uuidv4 } from "uuid";
+import { storage } from "./storage";
 
 // In a real implementation, this would connect to a database
 // For demo purposes, we're using localStorage
 
-const CONSENT_STORAGE_KEY = 'ndpr_consent_records';
-const CONSENT_HISTORY_KEY = 'ndpr_consent_history';
+const CONSENT_STORAGE_KEY = "ndpr_consent_records";
+const CONSENT_HISTORY_KEY = "ndpr_consent_history";
 
 // Helper function to get consent history
 const getConsentHistoryHelper = (): ConsentHistoryEntry[] => {
@@ -17,37 +17,42 @@ const getConsentHistoryHelper = (): ConsentHistoryEntry[] => {
 
 export const consentService = {
   // Save a new consent record
-  saveConsent: (consents: Record<string, boolean>, userId?: string): ConsentRecord => {
+  saveConsent: (
+    consents: Record<string, boolean>,
+    userId?: string,
+  ): ConsentRecord => {
     const consentRecord: ConsentRecord = {
       id: uuidv4(),
       userId,
       consents,
       timestamp: new Date(),
-      ipAddress: 'Collected server-side in real implementation',
-      userAgent: typeof window !== 'undefined' ? window.navigator.userAgent : 'Unknown',
-      version: '1.0',
+      ipAddress: "Collected server-side in real implementation",
+      userAgent:
+        typeof window !== "undefined" ? window.navigator.userAgent : "Unknown",
+      version: "1.0",
     };
 
     // Store in localStorage for demo
     // Save as current consent
     if (!storage.setItem(CONSENT_STORAGE_KEY, consentRecord)) {
-      throw new Error('Failed to save consent record');
+      throw new Error("Failed to save consent record");
     }
-    
+
     // Add to history
     const historyEntry: ConsentHistoryEntry = {
       timestamp: new Date(),
       consents,
-      action: 'granted',
-      ipAddress: 'Collected server-side in real implementation',
-      userAgent: typeof window !== 'undefined' ? window.navigator.userAgent : 'Unknown',
-      version: '1.0',
+      action: "granted",
+      ipAddress: "Collected server-side in real implementation",
+      userAgent:
+        typeof window !== "undefined" ? window.navigator.userAgent : "Unknown",
+      version: "1.0",
     };
-    
+
     const history = getConsentHistoryHelper();
     history.push(historyEntry);
     if (!storage.setItem(CONSENT_HISTORY_KEY, history)) {
-      throw new Error('Failed to save consent history');
+      throw new Error("Failed to save consent history");
     }
 
     return consentRecord;
@@ -65,55 +70,57 @@ export const consentService = {
 
   // Update consent with change reason
   updateConsent: (
-    consents: Record<string, boolean>, 
+    consents: Record<string, boolean>,
     changeReason?: string,
-    userId?: string
+    userId?: string,
   ): ConsentRecord => {
     // Get the previous consent to determine the action
     const previousConsent = consentService.getCurrentConsent();
-    
+
     // Create the new consent record
     const consentRecord: ConsentRecord = {
       id: uuidv4(),
       userId,
       consents,
       timestamp: new Date(),
-      ipAddress: 'Collected server-side in real implementation',
-      userAgent: typeof window !== 'undefined' ? window.navigator.userAgent : 'Unknown',
-      version: '1.0',
+      ipAddress: "Collected server-side in real implementation",
+      userAgent:
+        typeof window !== "undefined" ? window.navigator.userAgent : "Unknown",
+      version: "1.0",
     };
 
     // Store in localStorage for demo
     // Save as current consent
     if (!storage.setItem(CONSENT_STORAGE_KEY, consentRecord)) {
-      throw new Error('Failed to save consent record');
+      throw new Error("Failed to save consent record");
     }
-    
+
     // Determine the action type
-    let action: 'granted' | 'revoked' | 'updated' = 'updated';
+    let action: "granted" | "revoked" | "updated" = "updated";
     if (!previousConsent) {
-      action = 'granted';
+      action = "granted";
     } else {
-      const allRevoked = Object.values(consents).every(v => !v);
+      const allRevoked = Object.values(consents).every((v) => !v);
       if (allRevoked) {
-        action = 'revoked';
+        action = "revoked";
       }
     }
-    
+
     // Add to history
     const historyEntry: ConsentHistoryEntry = {
       timestamp: new Date(),
       consents,
       action,
-      ipAddress: 'Collected server-side in real implementation',
-      userAgent: typeof window !== 'undefined' ? window.navigator.userAgent : 'Unknown',
-      version: '1.0',
+      ipAddress: "Collected server-side in real implementation",
+      userAgent:
+        typeof window !== "undefined" ? window.navigator.userAgent : "Unknown",
+      version: "1.0",
     };
-    
+
     const history = getConsentHistoryHelper();
     history.push(historyEntry);
     if (!storage.setItem(CONSENT_HISTORY_KEY, history)) {
-      throw new Error('Failed to save consent history');
+      throw new Error("Failed to save consent history");
     }
 
     return consentRecord;
@@ -131,7 +138,7 @@ export const consentService = {
     const current = consentService.getCurrentConsent();
     if (!current) return false;
     return current.consents[type] === true;
-  }
+  },
 };
 
 export default consentService;

package/src/lib/dpiaQuestions.ts

@@ -1,148 +1,188 @@
-import { RiskAssessmentQuestion } from '@/types';
+import { RiskAssessmentQuestion } from "@/types";
 
 export const dpiaQuestions: RiskAssessmentQuestion[] = [
   {
-    id: 'data-collection-1',
-    text: 'Does your project involve collecting personal data directly from individuals?',
-    type: 'radio',
+    id: "data-collection-1",
+    text: "Does your project involve collecting personal data directly from individuals?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No personal data is collected' },
-      { value: "2", label: 'Limited personal data is collected with clear consent' },
-      { value: "3", label: 'Significant personal data is collected with consent' },
-      { value: "4", label: 'Extensive personal data is collected' }
-    ]
+      { value: "1", label: "No personal data is collected" },
+      {
+        value: "2",
+        label: "Limited personal data is collected with clear consent",
+      },
+      {
+        value: "3",
+        label: "Significant personal data is collected with consent",
+      },
+      { value: "4", label: "Extensive personal data is collected" },
+    ],
   },
   {
-    id: 'data-collection-2',
-    text: 'Does your project involve collecting sensitive personal data (e.g., health, biometric, religious beliefs)?',
-    type: 'radio',
+    id: "data-collection-2",
+    text: "Does your project involve collecting sensitive personal data (e.g., health, biometric, religious beliefs)?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No sensitive data is collected' },
-      { value: "2", label: 'Limited sensitive data with explicit consent' },
-      { value: "3", label: 'Significant sensitive data with explicit consent' },
-      { value: "4", label: 'Extensive sensitive data collection' }
-    ]
+      { value: "1", label: "No sensitive data is collected" },
+      { value: "2", label: "Limited sensitive data with explicit consent" },
+      { value: "3", label: "Significant sensitive data with explicit consent" },
+      { value: "4", label: "Extensive sensitive data collection" },
+    ],
   },
   {
-    id: 'data-collection-3',
-    text: 'Does your project collect data from children or vulnerable individuals?',
-    type: 'radio',
+    id: "data-collection-3",
+    text: "Does your project collect data from children or vulnerable individuals?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No data from children or vulnerable individuals' },
-      { value: "2", label: 'Limited data with parental/guardian consent' },
-      { value: "3", label: 'Significant data with enhanced safeguards' },
-      { value: "4", label: 'Extensive data from vulnerable groups' }
-    ]
+      { value: "1", label: "No data from children or vulnerable individuals" },
+      { value: "2", label: "Limited data with parental/guardian consent" },
+      { value: "3", label: "Significant data with enhanced safeguards" },
+      { value: "4", label: "Extensive data from vulnerable groups" },
+    ],
   },
   {
-    id: 'data-processing-1',
-    text: 'Does your project involve automated decision-making or profiling?',
-    type: 'radio',
+    id: "data-processing-1",
+    text: "Does your project involve automated decision-making or profiling?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No automated decision-making' },
-      { value: "2", label: 'Limited automation with human oversight' },
-      { value: "3", label: 'Significant automation with opt-out options' },
-      { value: "4", label: 'Extensive automated decisions affecting individuals' }
-    ]
+      { value: "1", label: "No automated decision-making" },
+      { value: "2", label: "Limited automation with human oversight" },
+      { value: "3", label: "Significant automation with opt-out options" },
+      {
+        value: "4",
+        label: "Extensive automated decisions affecting individuals",
+      },
+    ],
   },
   {
-    id: 'data-processing-2',
-    text: 'Does your project involve processing data for purposes beyond what was initially collected for?',
-    type: 'radio',
+    id: "data-processing-2",
+    text: "Does your project involve processing data for purposes beyond what was initially collected for?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'Processing only for original purpose' },
-      { value: "2", label: 'Limited secondary processing with notice' },
-      { value: "3", label: 'Significant secondary processing with consent' },
-      { value: "4", label: 'Extensive repurposing of data' }
-    ]
+      { value: "1", label: "Processing only for original purpose" },
+      { value: "2", label: "Limited secondary processing with notice" },
+      { value: "3", label: "Significant secondary processing with consent" },
+      { value: "4", label: "Extensive repurposing of data" },
+    ],
   },
   {
-    id: 'data-processing-3',
-    text: 'Does your project combine data from multiple sources?',
-    type: 'radio',
+    id: "data-processing-3",
+    text: "Does your project combine data from multiple sources?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No data combination' },
-      { value: "2", label: 'Limited combination from controlled sources' },
-      { value: "3", label: 'Significant combination with transparency' },
-      { value: "4", label: 'Extensive data aggregation from various sources' }
-    ]
+      { value: "1", label: "No data combination" },
+      { value: "2", label: "Limited combination from controlled sources" },
+      { value: "3", label: "Significant combination with transparency" },
+      { value: "4", label: "Extensive data aggregation from various sources" },
+    ],
   },
   {
-    id: 'data-sharing-1',
-    text: 'Does your project involve sharing personal data with third parties?',
-    type: 'radio',
+    id: "data-sharing-1",
+    text: "Does your project involve sharing personal data with third parties?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No third-party sharing' },
-      { value: "2", label: 'Limited sharing with contractual safeguards' },
-      { value: "3", label: 'Significant sharing with data processing agreements' },
-      { value: "4", label: 'Extensive sharing with multiple third parties' }
-    ]
+      { value: "1", label: "No third-party sharing" },
+      { value: "2", label: "Limited sharing with contractual safeguards" },
+      {
+        value: "3",
+        label: "Significant sharing with data processing agreements",
+      },
+      { value: "4", label: "Extensive sharing with multiple third parties" },
+    ],
   },
   {
-    id: 'data-sharing-2',
-    text: 'Does your project involve transferring data outside Nigeria?',
-    type: 'radio',
+    id: "data-sharing-2",
+    text: "Does your project involve transferring data outside Nigeria?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'No international transfers' },
-      { value: "2", label: 'Limited transfers to countries with adequate protection' },
-      { value: "3", label: 'Significant transfers with standard contractual clauses' },
-      { value: "4", label: 'Extensive transfers to countries without adequate protection' }
-    ]
+      { value: "1", label: "No international transfers" },
+      {
+        value: "2",
+        label: "Limited transfers to countries with adequate protection",
+      },
+      {
+        value: "3",
+        label: "Significant transfers with standard contractual clauses",
+      },
+      {
+        value: "4",
+        label: "Extensive transfers to countries without adequate protection",
+      },
+    ],
   },
   {
-    id: 'security-1',
-    text: 'What level of security measures does your project implement?',
-    type: 'radio',
+    id: "security-1",
+    text: "What level of security measures does your project implement?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'Comprehensive security with encryption, access controls, and regular audits' },
-      { value: "2", label: 'Strong security measures with some monitoring' },
-      { value: "3", label: 'Basic security measures meeting minimum requirements' },
-      { value: "4", label: 'Limited security measures' }
-    ]
+      {
+        value: "1",
+        label:
+          "Comprehensive security with encryption, access controls, and regular audits",
+      },
+      { value: "2", label: "Strong security measures with some monitoring" },
+      {
+        value: "3",
+        label: "Basic security measures meeting minimum requirements",
+      },
+      { value: "4", label: "Limited security measures" },
+    ],
   },
   {
-    id: 'security-2',
-    text: 'Does your project have a data breach response plan?',
-    type: 'radio',
+    id: "security-2",
+    text: "Does your project have a data breach response plan?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'Comprehensive breach plan with regular testing' },
-      { value: "2", label: 'Documented breach plan with assigned responsibilities' },
-      { value: "3", label: 'Basic breach notification procedure' },
-      { value: "4", label: 'No formal breach response plan' }
-    ]
+      { value: "1", label: "Comprehensive breach plan with regular testing" },
+      {
+        value: "2",
+        label: "Documented breach plan with assigned responsibilities",
+      },
+      { value: "3", label: "Basic breach notification procedure" },
+      { value: "4", label: "No formal breach response plan" },
+    ],
   },
   {
-    id: 'data-subject-rights-1',
-    text: 'How does your project facilitate data subject rights (access, rectification, erasure, etc.)?',
-    type: 'radio',
+    id: "data-subject-rights-1",
+    text: "How does your project facilitate data subject rights (access, rectification, erasure, etc.)?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'Automated self-service portal for all rights' },
-      { value: "2", label: 'Documented procedures with reasonable response times' },
-      { value: "3", label: 'Basic manual process for handling requests' },
-      { value: "4", label: 'Limited or no formal process for rights requests' }
-    ]
+      { value: "1", label: "Automated self-service portal for all rights" },
+      {
+        value: "2",
+        label: "Documented procedures with reasonable response times",
+      },
+      { value: "3", label: "Basic manual process for handling requests" },
+      { value: "4", label: "Limited or no formal process for rights requests" },
+    ],
   },
   {
-    id: 'data-subject-rights-2',
-    text: 'Does your project provide clear privacy information to data subjects?',
-    type: 'radio',
+    id: "data-subject-rights-2",
+    text: "Does your project provide clear privacy information to data subjects?",
+    type: "radio",
     required: true,
     options: [
-      { value: "1", label: 'Comprehensive, layered privacy notices in plain language' },
-      { value: "2", label: 'Clear privacy policy with all required information' },
-      { value: "3", label: 'Basic privacy notice covering essential elements' },
-      { value: "4", label: 'Minimal or complex privacy information' }
-    ]
-  }
-];
+      {
+        value: "1",
+        label: "Comprehensive, layered privacy notices in plain language",
+      },
+      {
+        value: "2",
+        label: "Clear privacy policy with all required information",
+      },
+      { value: "3", label: "Basic privacy notice covering essential elements" },
+      { value: "4", label: "Minimal or complex privacy information" },
+    ],
+  },
+];

package/src/lib/requestService.ts

@@ -1,10 +1,10 @@
-'use client';
+"use client";
 
-import { DataSubjectRequest, RequestStatus } from '@/types';
-import { v4 as uuidv4 } from 'uuid';
-import { storage } from './storage';
+import { DataSubjectRequest, RequestStatus } from "@/types";
+import { v4 as uuidv4 } from "uuid";
+import { storage } from "./storage";
 
-const REQUEST_STORAGE_KEY = 'ndpr_requests';
+const REQUEST_STORAGE_KEY = "ndpr_requests";
 
 const getStoredRequests = (): DataSubjectRequest[] => {
   return storage.getItem<DataSubjectRequest[]>(REQUEST_STORAGE_KEY, []) || [];
@@ -12,16 +12,15 @@ const getStoredRequests = (): DataSubjectRequest[] => {
 
 export const requestService = {
   createRequest: (
-    requestType: DataSubjectRequest['type'],
+    requestType: DataSubjectRequest["type"],
     requesterName: string,
     requesterEmail: string,
     details: string,
-    consent: boolean
   ): DataSubjectRequest => {
     const request: DataSubjectRequest = {
       id: uuidv4(),
       type: requestType,
-      status: 'pending',
+      status: "pending",
       createdAt: Date.now(),
       updatedAt: Date.now(),
       subject: {
@@ -34,33 +33,38 @@ export const requestService = {
     const requests = getStoredRequests();
     requests.push(request);
     const saved = storage.setItem(REQUEST_STORAGE_KEY, requests);
-    
+
     if (!saved) {
-      throw new Error('Failed to save request. Storage may be full or unavailable.');
+      throw new Error(
+        "Failed to save request. Storage may be full or unavailable.",
+      );
     }
 
     return request;
   },
 
-  updateStatus: (id: string, status: RequestStatus): DataSubjectRequest | null => {
+  updateStatus: (
+    id: string,
+    status: RequestStatus,
+  ): DataSubjectRequest | null => {
     const requests = getStoredRequests();
-    const idx = requests.findIndex(r => r.id === id);
+    const idx = requests.findIndex((r) => r.id === id);
     if (idx === -1) return null;
-    
+
     requests[idx].status = status;
     requests[idx].updatedAt = Date.now();
-    
+
     const saved = storage.setItem(REQUEST_STORAGE_KEY, requests);
     if (!saved) {
-      throw new Error('Failed to update request status.');
+      throw new Error("Failed to update request status.");
     }
-    
+
     return requests[idx];
   },
 
   getRequest: (id: string): DataSubjectRequest | null => {
     const requests = getStoredRequests();
-    return requests.find(r => r.id === id) || null;
+    return requests.find((r) => r.id === id) || null;
   },
 
   getAllRequests: (): DataSubjectRequest[] => {

package/src/types/index.ts

@@ -1,12 +1,12 @@
 // Re-export all types from the package
 // This ensures consistency between the main app and the package
-export * from '@tantainnovative/ndpr-toolkit';
-import type { DSRStatus, DSRType } from '@tantainnovative/ndpr-toolkit';
+export * from "@tantainnovative/ndpr-toolkit";
+import type { DSRStatus, DSRType } from "@tantainnovative/ndpr-toolkit";
 
 // Additional app-specific types that extend the package types
 export interface AppConfig {
   apiUrl?: string;
-  environment: 'development' | 'staging' | 'production';
+  environment: "development" | "staging" | "production";
   features: {
     consent: boolean;
     dsr: boolean;
@@ -38,14 +38,19 @@ export type {
   OrganizationInfo,
   DPIAQuestion as RiskAssessmentQuestion,
   DPIASection,
-  DPIAResult
-} from '@tantainnovative/ndpr-toolkit';
+  DPIAResult,
+} from "@tantainnovative/ndpr-toolkit";
 
 // Define ConsentType locally since it's not exported from the package
-export type ConsentType = 'necessary' | 'functional' | 'analytics' | 'marketing' | 'preferences';
+export type ConsentType =
+  | "necessary"
+  | "functional"
+  | "analytics"
+  | "marketing"
+  | "preferences";
 
 // Define BreachSeverity type
-export type BreachSeverity = 'low' | 'medium' | 'high' | 'critical';
+export type BreachSeverity = "low" | "medium" | "high" | "critical";
 
 // Define missing types that are not exported from the package
 export interface ConsentRecord {
@@ -61,7 +66,7 @@ export interface ConsentRecord {
 export interface ConsentHistoryEntry {
   timestamp: Date;
   consents: Record<string, boolean>;
-  action: 'granted' | 'revoked' | 'updated';
+  action: "granted" | "revoked" | "updated";
   ipAddress?: string;
   userAgent?: string;
   version: string;

package/.claude/settings.local.json

@@ -1,20 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(find:*)",
-      "Bash(grep:*)",
-      "Bash(git push:*)",
-      "Bash(npm run lint)",
-      "Bash(pnpm lint:*)",
-      "Bash(pnpm install:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "Bash(pnpm add:*)",
-      "Bash(pnpm build:*)",
-      "Bash(sed:*)",
-      "Bash(cat:*)",
-      "Bash(npm:*)"
-    ],
-    "deny": []
-  }
-}