@transitrix/diagrams 1.8.6 → 1.8.8

package/src/compliance/__tests__/example.test.ts

@@ -1,57 +0,0 @@
-// Conformance — single-law tree + single-product view on the acme_corp worked
-// examples (mirrored under tests/fixtures/notation-corpus/requirement, tests/fixtures/notation-corpus/assertion). Pins the
-// #84 Phase 3 acceptance.
-
-import { describe, it, expect } from 'vitest';
-import { readdirSync, readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-import yaml from 'js-yaml';
-import { buildComplianceIndex } from '../reverse-index.js';
-import { buildLawTree, buildProductView } from '../views.js';
-import type { IndexAssertion, IndexRequirement } from '../types.js';
-
-const examples = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../../../../../tests/fixtures/notation-corpus');
-function loadAll(dir: string): Record<string, unknown>[] {
-  const full = path.join(examples, dir);
-  return readdirSync(full).filter(f => f.endsWith('.yaml')).map(f => yaml.load(readFileSync(path.join(full, f), 'utf-8')) as Record<string, unknown>);
-}
-
-const requirements: IndexRequirement[] = loadAll('requirement').map(r => ({
-  id: String(r.id), name: String(r.name),
-  severity: r.severity as string | undefined,
-  derived_from: Array.isArray(r.derived_from) ? (r.derived_from as string[]) : undefined,
-}));
-const assertions: IndexAssertion[] = loadAll('assertion').map(a => ({
-  id: String(a.id), about: String(a.about), subject: String(a.subject),
-  status: a.status as IndexAssertion['status'],
-  evidenceCount: Array.isArray(a.evidence) ? a.evidence.length : 0,
-}));
-const index = buildComplianceIndex({ requirements, assertions });
-
-describe('single-law tree — LAW-PERSONAL-DATA-2017-1', () => {
-  const tree = buildLawTree('LAW-PERSONAL-DATA-2017-1', index);
-  it('derives the data-erasure requirement with its three assertions', () => {
-    expect(tree.requirements.map(r => r.requirement.id)).toEqual(['REQUIREMENT-DATA-ERASURE-1']);
-    const node = tree.requirements[0];
-    expect(node.assertions.map(a => a.id)).toEqual([
-      'ASSERTION-CRM-DATA-ERASURE-1',
-      'ASSERTION-MOBILE-DATA-ERASURE-1',
-      'ASSERTION-ONBOARD-DATA-ERASURE-1',
-    ]);
-    expect(node.assertions.map(a => a.status).sort()).toEqual(['compliant', 'partial', 'under_review']);
-  });
-  it('the internal-only audit-log requirement is not under any law', () => {
-    expect(index.requirementsByLaw.has('LAW-PERSONAL-DATA-2017-1')).toBe(true);
-    expect(tree.requirements.some(r => r.requirement.id === 'REQUIREMENT-AUDIT-LOG-RETENTION-1')).toBe(false);
-  });
-});
-
-describe('single-product view — PRODUCT-MOBILE-1', () => {
-  it('shows the data-erasure requirement as compliant', () => {
-    const view = buildProductView('PRODUCT-MOBILE-1', index);
-    expect(view.requirements.map(r => r.requirement.id)).toEqual(['REQUIREMENT-DATA-ERASURE-1']);
-    expect(view.requirements[0].assertion.status).toBe('compliant');
-    expect(view.requirements[0].requirement.name).toBe('Personal-data erasure on request within 30 days');
-  });
-});

package/src/compliance/__tests__/gap-report.test.ts

@@ -1,129 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { readdirSync, readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import path from 'node:path';
-import yaml from 'js-yaml';
-import { buildComplianceIndex } from '../reverse-index.js';
-import { buildGapReport } from '../gap-report.js';
-import type { ComplianceIndexInput, IndexAssertion, IndexRequirement } from '../types.js';
-
-const input: ComplianceIndexInput = {
-  requirements: [
-    { id: 'REQUIREMENT-A-1', name: 'A', severity: 'high' },   // has assertions
-    { id: 'REQUIREMENT-B-1', name: 'B', severity: 'low' },    // orphan
-    { id: 'REQUIREMENT-C-1', name: 'C', severity: 'medium' }, // orphan
-    { id: 'REQUIREMENT-D-1', name: 'D' },                     // orphan, no severity
-  ],
-  assertions: [
-    { id: 'ASSERTION-1', about: 'REQUIREMENT-A-1', subject: 'PRODUCT-1', status: 'compliant', evidenceCount: 0 }, // 007
-    { id: 'ASSERTION-2', about: 'REQUIREMENT-A-1', subject: 'PRODUCT-2', status: 'under_review', evidenceCount: 0 }, // NOT 007
-    { id: 'ASSERTION-3', about: 'REQUIREMENT-A-1', subject: 'PRODUCT-3', status: 'partial', evidenceCount: 2, next_review_at: '2025-01-01' }, // stale
-  ],
-};
-
-describe('buildGapReport', () => {
-  const index = buildComplianceIndex(input);
-  const report = buildGapReport(index, { today: '2026-06-02' });
-
-  it('lists requirements without assertions, severity-sorted (high→medium→low→none)', () => {
-    expect(report.requirementsWithoutAssertions.map(r => r.id)).toEqual([
-      'REQUIREMENT-C-1', // medium
-      'REQUIREMENT-B-1', // low
-      'REQUIREMENT-D-1', // none
-    ]);
-  });
-
-  it('flags only compliant/partial assertions with empty evidence (ASSERT-007)', () => {
-    expect(report.assertionsWithoutEvidence.map(a => a.id)).toEqual(['ASSERTION-1']);
-    // under_review with empty evidence is legitimate — not flagged.
-    expect(report.assertionsWithoutEvidence.map(a => a.id)).not.toContain('ASSERTION-2');
-  });
-
-  it('flags assertions whose next_review_at is past today (ASSERT-008)', () => {
-    expect(report.staleAssertions.map(a => a.id)).toEqual(['ASSERTION-3']);
-  });
-
-  it('produces no stale list when today is not supplied (clock-free)', () => {
-    expect(buildGapReport(index, {}).staleAssertions).toEqual([]);
-  });
-});
-
-// ── Conformance on the acme_corp worked examples ────────────────────────────
-
-const examples = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../../../../../tests/fixtures/notation-corpus');
-function loadAll(dir: string): Record<string, unknown>[] {
-  const full = path.join(examples, dir);
-  return readdirSync(full).filter(f => f.endsWith('.yaml')).map(f => yaml.load(readFileSync(path.join(full, f), 'utf-8')) as Record<string, unknown>);
-}
-
-describe('gap report — acme_corp worked examples', () => {
-  const requirements: IndexRequirement[] = loadAll('requirement').map(r => ({
-    id: String(r.id), name: String(r.name), severity: r.severity as string | undefined,
-    derived_from: Array.isArray(r.derived_from) ? (r.derived_from as string[]) : undefined,
-  }));
-  const assertions: IndexAssertion[] = loadAll('assertion').map(a => ({
-    id: String(a.id), about: String(a.about), subject: String(a.subject),
-    status: a.status as IndexAssertion['status'],
-    next_review_at: a.next_review_at as string | undefined,
-    evidenceCount: Array.isArray(a.evidence) ? a.evidence.length : 0,
-  }));
-  const report = buildGapReport(buildComplianceIndex({ requirements, assertions }), { today: '2026-06-02' });
-
-  it('surfaces the internal audit-log requirement as an un-asserted gap', () => {
-    expect(report.requirementsWithoutAssertions.map(r => r.id)).toEqual(['REQUIREMENT-AUDIT-LOG-RETENTION-1']);
-  });
-
-  it('does not flag the under_review empty-evidence assertion under ASSERT-007', () => {
-    expect(report.assertionsWithoutEvidence).toEqual([]);
-  });
-
-  it('has no stale assertions (all acme reviews are in the future)', () => {
-    expect(report.staleAssertions).toEqual([]);
-  });
-});
-
-describe('CV-5 -- pastDeadlineRequirements', () => {
-  it('lists requirements with past deadline and no compliant assertion', () => {
-    const indexLocal = buildComplianceIndex({
-      requirements: [
-        { id: 'REQ-PD-1', name: 'Past deadline, no assertion', deadline: '2020-01-01' },
-        { id: 'REQ-PD-2', name: 'Past deadline, non-compliant assertion', deadline: '2020-01-01' },
-        { id: 'REQ-PD-3', name: 'Past deadline, compliant assertion', deadline: '2020-01-01' },
-        { id: 'REQ-FU-1', name: 'Future deadline', deadline: '2099-01-01' },
-        { id: 'REQ-ND-1', name: 'No deadline' },
-      ],
-      assertions: [
-        { id: 'ASS-2', about: 'REQ-PD-2', subject: 'S', status: 'non_compliant' },
-        { id: 'ASS-3', about: 'REQ-PD-3', subject: 'S', status: 'compliant' },
-      ],
-    });
-    const r = buildGapReport(indexLocal, { today: '2026-06-09' });
-    // REQ-PD-1 and REQ-PD-2 are past-deadline without full compliance
-    expect(r.pastDeadlineRequirements.map(x => x.id)).toEqual(['REQ-PD-1', 'REQ-PD-2']);
-    // REQ-PD-3 has a compliant assertion -> excluded
-    expect(r.pastDeadlineRequirements.map(x => x.id)).not.toContain('REQ-PD-3');
-    // Future or no deadline -> excluded
-    expect(r.pastDeadlineRequirements.map(x => x.id)).not.toContain('REQ-FU-1');
-    expect(r.pastDeadlineRequirements.map(x => x.id)).not.toContain('REQ-ND-1');
-  });
-
-  it('is empty when no today is supplied (clock-free)', () => {
-    const idx2 = buildComplianceIndex({
-      requirements: [{ id: 'REQ-PD-1', name: 'Past', deadline: '2020-01-01' }],
-      assertions: [],
-    });
-    expect(buildGapReport(idx2, {}).pastDeadlineRequirements).toEqual([]);
-  });
-
-  it('sorts oldest deadline first', () => {
-    const idx3 = buildComplianceIndex({
-      requirements: [
-        { id: 'REQ-A', name: 'A', deadline: '2022-06-01' },
-        { id: 'REQ-B', name: 'B', deadline: '2019-01-01' },
-      ],
-      assertions: [],
-    });
-    const r3 = buildGapReport(idx3, { today: '2026-06-09' });
-    expect(r3.pastDeadlineRequirements.map(x => x.id)).toEqual(['REQ-B', 'REQ-A']);
-  });
-});

package/src/compliance/__tests__/html.test.ts

@@ -1,142 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { renderComplianceHtml } from '../html.js';
-import { emptyCanon, ingestComplianceDoc, type ComplianceCanon } from '../classify.js';
-
-function synthetic(): ComplianceCanon {
-  const canon = emptyCanon();
-  ingestComplianceDoc(canon, { notation: 'product', id: 'PRODUCT-M-1', name: 'Mobile App' });
-  ingestComplianceDoc(canon, { notation: 'requirement', id: 'REQUIREMENT-ERASURE-1', name: 'Erasure', severity: 'high', derived_from: ['LAW-X-1'] });
-  ingestComplianceDoc(canon, { notation: 'requirement', id: 'REQUIREMENT-LOG-1', name: 'Logs', severity: 'low' });
-  ingestComplianceDoc(canon, {
-    notation: 'assertion',
-    id: 'ASSERTION-1',
-    about: 'REQUIREMENT-ERASURE-1',
-    subject: 'PRODUCT-M-1',
-    status: 'compliant',
-    evidence: [{ kind: 'note', text: 'x' }],
-    next_review_at: '2026-09-01',
-  });
-  ingestComplianceDoc(canon, { id: 'LAW-X-1', name: 'Privacy Law', zone: 'codex', type: 'LAW' });
-  return canon;
-}
-
-describe('renderComplianceHtml — document shell', () => {
-  it('produces a complete HTML document with branded header and stamp', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'matrix' }, { today: '2026-06-03' });
-    expect(html.startsWith('<!doctype html>')).toBe(true);
-    expect(html).toContain('<title>Compliance Matrix</title>');
-    expect(html).toContain('<div class="cmp-eyebrow">Transitrix · Compliance</div>');
-    expect(html).toContain('<h1>Compliance Matrix</h1>');
-    expect(html).toContain('Generated 2026-06-03');
-    expect(html).toContain('@page');
-    expect(html).toContain('size: A4 portrait');
-  });
-
-  it('escapes HTML in product and requirement names', () => {
-    const canon = emptyCanon();
-    ingestComplianceDoc(canon, { notation: 'product', id: 'PRODUCT-X-1', name: '<Mobile> & "Web"' });
-    ingestComplianceDoc(canon, { notation: 'requirement', id: 'REQUIREMENT-X-1', name: 'A & B' });
-    const html = renderComplianceHtml(canon, { mode: 'matrix' });
-    expect(html).not.toMatch(/<Mobile>/);
-    expect(html).toContain('&lt;Mobile&gt; &amp; &quot;Web&quot;');
-    expect(html).toContain('A &amp; B');
-  });
-});
-
-describe('renderComplianceHtml — matrix', () => {
-  it('renders a table with status badges and gap cells', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'matrix' });
-    expect(html).toContain('<table class="cmp-matrix">');
-    expect(html).toContain('<th>Erasure</th>');
-    expect(html).toContain('<th>Logs</th>');
-    expect(html).toContain('<span class="cmp-badge cmp-compliant">Compliant</span>');
-    expect(html).toMatch(/cmp-cell-gap/);
-    expect(html).toContain('1 products × 2 requirements');
-  });
-
-  it('shows an empty-state message when nothing was scanned', () => {
-    const html = renderComplianceHtml(emptyCanon(), { mode: 'matrix' });
-    expect(html).toContain('No products or requirements found');
-  });
-});
-
-describe('renderComplianceHtml — law', () => {
-  it('renders the law name, requirement block, and assertion bullet with badge', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'law', id: 'LAW-X-1' });
-    expect(html).toContain('<h1>Compliance — Privacy Law</h1>');
-    expect(html).toContain('class="cmp-req-name">Erasure');
-    expect(html).toContain('class="cmp-req-id">REQUIREMENT-ERASURE-1');
-    expect(html).toContain('cmp-sev cmp-sev-high');
-    expect(html).toContain('cmp-badge cmp-compliant');
-    expect(html).toContain('review by 2026-09-01');
-  });
-
-  it('handles an unknown law id with an empty-state message', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'law', id: 'LAW-NONE' });
-    expect(html).toContain('<h1>Compliance — LAW-NONE</h1>');
-    expect(html).toContain('No requirements derive from');
-  });
-});
-
-describe('renderComplianceHtml — product', () => {
-  it('renders the product table of asserted requirements', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'product', id: 'PRODUCT-M-1' });
-    expect(html).toContain('<h1>Compliance — Mobile App</h1>');
-    expect(html).toContain('<th>Requirement</th>');
-    expect(html).toContain('<th>Status</th>');
-    expect(html).toContain('cmp-badge cmp-compliant');
-    expect(html).toContain('2026-09-01');
-  });
-});
-
-describe('renderComplianceHtml — gap', () => {
-  it('lists the un-asserted requirement and shows ✓ none for clean sections', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'gap' }, { today: '2026-06-02' });
-    expect(html).toContain('Requirements without assertions');
-    expect(html).toContain('REQUIREMENT-LOG-1');
-    expect(html).toContain('severity low');
-    expect(html).toContain('Assertions without evidence — ASSERT-007');
-    expect(html).toContain('Stale assertions — ASSERT-008');
-    expect(html).toContain('class="cmp-ok">✓ none');
-  });
-
-  it('counts gaps in the summary line', () => {
-    const html = renderComplianceHtml(synthetic(), { mode: 'gap' });
-    expect(html).toMatch(/1 gap\(s\)/);
-  });
-});
-
-// ── CV-6: renderImpactMatrixHtml ─────────────────────────────────────────────
-
-import { renderImpactMatrixHtml } from '../html.js';
-import { buildImpactMatrix } from '../impact.js';
-
-describe('renderImpactMatrixHtml (CV-6)', () => {
-  it('returns a complete HTML document with matrix title and table', () => {
-    const canon = emptyCanon();
-    ingestComplianceDoc(canon, { notation: 'product', id: 'PROD-1', name: 'Product One' });
-    ingestComplianceDoc(canon, { notation: 'requirement', id: 'REQ-1', name: 'Req One', severity: 'high' });
-    ingestComplianceDoc(canon, { notation: 'assertion', id: 'ASS-1', about: 'REQ-1', subject: 'PROD-1', status: 'compliant' });
-    const matrix = buildImpactMatrix(
-      { products: canon.products, requirements: canon.requirements, assertions: canon.assertions, codex: canon.codex, subjects: canon.subjects },
-      { id: 'VIEW-1', name: 'My View', subjects: { products: ['PROD-1'] }, obligations: {} },
-    );
-    const html = renderImpactMatrixHtml(matrix, { today: '2026-06-09' });
-    expect(html).toContain('<table>');
-    expect(html).toContain('My View');
-    expect(html).toContain('VIEW-1');
-    expect(html).toContain('OK');
-  });
-
-  it('renders gap cells with no_obligation_label text', () => {
-    const canon = emptyCanon();
-    ingestComplianceDoc(canon, { notation: 'product', id: 'PROD-1', name: 'P1' });
-    ingestComplianceDoc(canon, { notation: 'requirement', id: 'REQ-1', name: 'R1' });
-    const matrix = buildImpactMatrix(
-      { products: canon.products, requirements: canon.requirements, assertions: canon.assertions, codex: canon.codex, subjects: canon.subjects },
-      { id: 'V2', name: 'V2', subjects: { products: ['PROD-1'] }, obligations: {} },
-    );
-    const html = renderImpactMatrixHtml(matrix);
-    expect(html).toContain('No mapped obligation');
-  });
-});