filegrc 0.16.14 → 0.16.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "filegrc",
-  "version": "0.16.14",
+  "version": "0.16.15",
   "description": "Zero-dependency Git-native GRC engine",
   "license": "MIT",
   "repository": {

package/src/collection-scope.js

@@ -167,7 +167,9 @@ function scopedProgramPeople(loaded, program = {}) {
   const systemIds = new Set(program.systemIds || []);
   const controlIds = new Set(program.controlIds || []);
   const policyIds = new Set(loaded.resources
-    .filter(({ type, status, programRole }) => type === "policy" && status !== "retired" && programRole !== "reference")
+    .filter(({ type, status, programRole }) => (
+      type === "policy" && !["superseded", "retired"].includes(status) && programRole !== "reference"
+    ))
     .map(({ id }) => id));
   const components = programComponents(loaded, program);
   const componentIds = new Set(components.map(({ id }) => id));
@@ -177,13 +179,13 @@ function scopedProgramPeople(loaded, program = {}) {
   ]);
   const sources = loaded.resources.filter((record) => (
     ["workspace", "program", "appointment", "team"].includes(record.type)
-    || record.type === "system" && systemIds.has(record.id)
+    || record.type === "system" && systemIds.has(record.id) && record.status !== "retired"
     || record.type === "component" && componentIds.has(record.id)
-    || record.type === "vendor" && vendorIds.has(record.id)
-    || record.type === "control" && controlIds.has(record.id)
+    || record.type === "vendor" && vendorIds.has(record.id) && !["deprecated", "terminated"].includes(record.status)
+    || record.type === "control" && controlIds.has(record.id) && record.status !== "retired"
     || record.type === "policy" && policyIds.has(record.id)
-    || record.type === "document" && record.workflowScope !== "engagement"
-    || record.type === "obligation" && (
+    || record.type === "document" && record.workflowScope !== "engagement" && !["superseded", "retired"].includes(record.status)
+    || record.type === "obligation" && record.status !== "retired" && (
       (record.controlIds || []).some((id) => controlIds.has(id))
       || (record.policyIds || []).some((id) => policyIds.has(id))
     )

package/src/program-readiness.js

@@ -1239,7 +1239,7 @@ function requiredGovernedDocuments(scope, records, byId, model) {
   const selectedControlIds = new Set(scope.controls.map(({ id }) => id));
   const linkedDocumentIds = new Set(requiredPolicies(scope, byId).flatMap((policy) => policy.relatedDocumentIds || []));
   const obligationDocumentIds = new Set(records
-    .filter((record) => record.type === "obligation")
+    .filter((record) => record.type === "obligation" && record.status !== "retired")
     .flatMap((record) => [
       ...(record.scopeResourceIds || []),
       ...(record.templateResourceId ? [record.templateResourceId] : [])

package/src/state.js

@@ -344,7 +344,10 @@ async function createAppStateUnlocked(input, options) {
 function assessApplicabilityReviewStatuses(loaded, program) {
   const decisions = new Map((program.requirementApplicability || []).map((review) => [review.requirementId, review]));
   return Object.fromEntries(loaded.resources
-    .filter(({ type }) => ["requirement", "control", "commitment", "complementary-control"].includes(type))
+    .filter(({ type, status }) => (
+      ["requirement", "control", "commitment", "complementary-control"].includes(type)
+      && !["retired", "superseded"].includes(status)
+    ))
     .map((record) => {
       const review = record.type === "requirement" && modelSupports(loaded.model, "program-scope")
         ? decisions.get(record.id)

package/src/web.js

@@ -1897,11 +1897,13 @@ function derivedStagePageState(stage, destination) {
       : { complete: false, label: "Review scope" };
   }
   if (stage.id === "audit" && destination.type === "document" && destination.href.includes("documentScope=audit")) {
-    if (!resourcesOfType("document").some(({ record }) => auditSpecificDocument(record))) {
+    if (!resourcesOfType("document").some(({ record }) => (
+      auditSpecificDocument(record) && !["retired", "superseded"].includes(record.status)
+    ))) {
       return { complete: false, countsTowardProgress: false, label: "Only if needed" };
     }
   }
-  if (destination.type && resourcesOfType(destination.type).length === 0) {
+  if (destination.type && !resourcesOfType(destination.type).some(({ record }) => !["retired", "superseded"].includes(record.status))) {
     return { complete: false, countsTowardProgress: false, label: "Only if needed" };
   }
   return { complete: true, label: "Ready" };
@@ -2792,6 +2794,7 @@ function openNextAuditCycleDialog(prior) {
 }
 
 function controlApplicabilityPending(record) {
+  if (["retired", "superseded"].includes(record.status)) return false;
   if (state.applicabilityReviewStatuses?.[record.id]) {
     return state.applicabilityReviewStatuses[record.id] !== "current";
   }
@@ -2802,6 +2805,7 @@ function controlApplicabilityPending(record) {
 }
 
 function applicabilityPending(record) {
+  if (["retired", "superseded"].includes(record.status)) return false;
   if (state.applicabilityReviewStatuses?.[record.id]) {
     return state.applicabilityReviewStatuses[record.id] !== "current";
   }

package/src/workflow.js

@@ -393,6 +393,7 @@ function recordFinalizationFindings(loaded, program) {
   const findings = [];
   for (const record of loaded.resources) {
     if (["workspace", "renderer-settings"].includes(record.type)) continue;
+    if (["retired", "superseded"].includes(record.status)) continue;
     const incomplete = recordIncompleteReason(record, loaded, program);
     if (incomplete) {
       findings.push(finalizationFinding(record, incomplete, loaded.model));
@@ -815,6 +816,9 @@ async function assessPeriodHealth(loaded, options) {
     .map(({ id }) => id));
   for (const record of loaded.resources) {
     if (record.type === "policy" && ["required", "alternative"].includes(record.programRole)) {
+      const historical = ["retired", "superseded"].includes(record.status);
+      const changedOn = record.statusTransition?.changedOn;
+      if (historical && changedOn && changedOn <= coverage.start) continue;
       if (record.status !== "active" || !record.effectiveOn || record.effectiveOn > coverage.start) {
         findings.push(periodGap(record, "policy", record.effectiveOn, coverage));
       }