rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add compliance registries

Browse Source 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-08-18 14:57:53 +02:00
parent cb8dc0340e
commit 0262bd1c3d
30 changed files with 7967 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

145
pkg/server/api/console/v1/schema.graphql
View File

@@ -167,6 +167,22 @@ enum NonconformityRegistryStatus
)
}
enum ComplianceRegistryStatus
@goModel(model: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryStatus") {
OPEN
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryStatusOpen"
)
IN_PROGRESS
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryStatusInProgress"
)
CLOSED
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryStatusClosed"
)
}
# Order Field Enums
enum UserOrderField
@goModel(model: "github.com/getprobo/probo/pkg/coredata.UserOrderField") {
@@ -624,6 +640,30 @@ enum NonconformityRegistryOrderField
)
}
enum ComplianceRegistryOrderField
@goModel(model: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderField") {
CREATED_AT
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderFieldCreatedAt"
)
REFERENCE_ID
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderFieldReferenceId"
)
LAST_REVIEW_DATE
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderFieldLastReviewDate"
)
DUE_DATE
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderFieldDueDate"
)
STATUS
@goEnum(
value: "github.com/getprobo/probo/pkg/coredata.ComplianceRegistryOrderFieldStatus"
)
}
enum TrustCenterAccessOrderField
@goModel(model: "github.com/getprobo/probo/pkg/coredata.TrustCenterAccessOrderField") {
CREATED_AT
@@ -721,6 +761,14 @@ input NonconformityRegistryOrder
field: NonconformityRegistryOrderField!
}
input ComplianceRegistryOrder
@goModel(
model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.ComplianceRegistryOrderBy"
) {
direction: OrderDirection!
field: ComplianceRegistryOrderField!
}
input TrustCenterAccessOrder
@goModel(
model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.TrustCenterAccessOrderBy"
@@ -944,6 +992,14 @@ type Organization implements Node {
orderBy: NonconformityRegistryOrder
): NonconformityRegistryConnection! @goField(forceResolver: true)
complianceRegistries(
first: Int
after: CursorKey
last: Int
before: CursorKey
orderBy: ComplianceRegistryOrder
): ComplianceRegistryConnection! @goField(forceResolver: true)
trustCenter: TrustCenter @goField(forceResolver: true)
createdAt: Datetime!
@@ -1353,6 +1409,24 @@ type NonconformityRegistry implements Node {
updatedAt: Datetime!
}
type ComplianceRegistry implements Node {
id: ID!
organization: Organization! @goField(forceResolver: true)
referenceId: String!
area: String
source: String
audit: Audit! @goField(forceResolver: true)
requirement: String
actionsToBeImplemented: String
regulator: String
owner: People! @goField(forceResolver: true)
lastReviewDate: Datetime
dueDate: Datetime
status: ComplianceRegistryStatus!
createdAt: Datetime!
updatedAt: Datetime!
}
type Report implements Node {
id: ID!
objectKey: String!
@@ -1650,6 +1724,20 @@ type NonconformityRegistryEdge {
node: NonconformityRegistry!
}
type ComplianceRegistryConnection
@goModel(
model: "github.com/getprobo/probo/pkg/server/api/console/v1/types.ComplianceRegistryConnection"
) {
totalCount: Int! @goField(forceResolver: true)
edges: [ComplianceRegistryEdge!]!
pageInfo: PageInfo!
}
type ComplianceRegistryEdge {
cursor: CursorKey!
node: ComplianceRegistry!
}
# Root Types
type Query {
node(id: ID!): Node!
@@ -1880,6 +1968,17 @@ type Mutation {
deleteNonconformityRegistry(
input: DeleteNonconformityRegistryInput!
): DeleteNonconformityRegistryPayload!
# Compliance Registry mutations
createComplianceRegistry(
input: CreateComplianceRegistryInput!
): CreateComplianceRegistryPayload!
updateComplianceRegistry(
input: UpdateComplianceRegistryInput!
): UpdateComplianceRegistryPayload!
deleteComplianceRegistry(
input: DeleteComplianceRegistryInput!
): DeleteComplianceRegistryPayload!
}
# Input Types
@@ -2374,6 +2473,40 @@ input DeleteNonconformityRegistryInput {
nonconformityRegistryId: ID!
}
input CreateComplianceRegistryInput {
organizationId: ID!
referenceId: String!
area: String
source: String
auditId: ID!
requirement: String
actionsToBeImplemented: String
regulator: String
ownerId: ID!
lastReviewDate: Datetime
dueDate: Datetime
status: ComplianceRegistryStatus!
}
input UpdateComplianceRegistryInput {
id: ID!
referenceId: String
area: String
source: String
auditId: ID
requirement: String
actionsToBeImplemented: String
regulator: String
ownerId: ID
lastReviewDate: Datetime
dueDate: Datetime
status: ComplianceRegistryStatus
}
input DeleteComplianceRegistryInput {
complianceRegistryId: ID!
}
# Payload Types
type CreateOrganizationPayload {
organizationEdge: OrganizationEdge!
@@ -3055,3 +3188,15 @@ type UpdateNonconformityRegistryPayload {
type DeleteNonconformityRegistryPayload {
deletedNonconformityRegistryId: ID!
}
type CreateComplianceRegistryPayload {
complianceRegistryEdge: ComplianceRegistryEdge!
}
type UpdateComplianceRegistryPayload {
complianceRegistry: ComplianceRegistry!
}
type DeleteComplianceRegistryPayload {
deletedComplianceRegistryId: ID!
}

3012
pkg/server/api/console/v1/schema/schema.go
View File

File diff suppressed because it is too large Load Diff

77
pkg/server/api/console/v1/types/compliance_registry.go Normal file
View File

@@ -0,0 +1,77 @@
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
package types
import (
"github.com/getprobo/probo/pkg/coredata"
"github.com/getprobo/probo/pkg/gid"
"github.com/getprobo/probo/pkg/page"
)
type (
ComplianceRegistryOrderBy OrderBy[coredata.ComplianceRegistryOrderField]
ComplianceRegistryConnection struct {
TotalCount int
Edges []*ComplianceRegistryEdge
PageInfo PageInfo
Resolver any
ParentID gid.GID
}
)
func NewComplianceRegistryConnection(
p *page.Page[*coredata.ComplianceRegistry, coredata.ComplianceRegistryOrderField],
parentType any,
parentID gid.GID,
) *ComplianceRegistryConnection {
edges := make([]*ComplianceRegistryEdge, len(p.Data))
for i, registry := range p.Data {
edges[i] = NewComplianceRegistryEdge(registry, p.Cursor.OrderBy.Field)
}
return &ComplianceRegistryConnection{
Edges: edges,
PageInfo: *NewPageInfo(p),
Resolver: parentType,
ParentID: parentID,
}
}
func NewComplianceRegistry(cr *coredata.ComplianceRegistry) *ComplianceRegistry {
return &ComplianceRegistry{
ID: cr.ID,
ReferenceID: cr.ReferenceID,
Area: cr.Area,
Source: cr.Source,
Requirement: cr.Requirement,
ActionsToBeImplemented: cr.ActionsToBeImplemented,
Regulator: cr.Regulator,
LastReviewDate: cr.LastReviewDate,
DueDate: cr.DueDate,
Status: cr.Status,
CreatedAt: cr.CreatedAt,
UpdatedAt: cr.UpdatedAt,
}
}
func NewComplianceRegistryEdge(cr *coredata.ComplianceRegistry, orderField coredata.ComplianceRegistryOrderField) *ComplianceRegistryEdge {
return &ComplianceRegistryEdge{
Node: NewComplianceRegistry(cr),
Cursor: cr.CursorKey(orderField),
}
}

73
pkg/server/api/console/v1/types/types.go
View File

@@ -107,6 +107,32 @@ type CancelSignatureRequestPayload struct {
DeletedDocumentVersionSignatureID gid.GID `json:"deletedDocumentVersionSignatureId"`
}
type ComplianceRegistry struct {
ID gid.GID `json:"id"`
Organization *Organization `json:"organization"`
ReferenceID string `json:"referenceId"`
Area *string `json:"area,omitempty"`
Source *string `json:"source,omitempty"`
Audit *Audit `json:"audit"`
Requirement *string `json:"requirement,omitempty"`
ActionsToBeImplemented *string `json:"actionsToBeImplemented,omitempty"`
Regulator *string `json:"regulator,omitempty"`
Owner *People `json:"owner"`
LastReviewDate *time.Time `json:"lastReviewDate,omitempty"`
DueDate *time.Time `json:"dueDate,omitempty"`
Status coredata.ComplianceRegistryStatus `json:"status"`
CreatedAt time.Time `json:"createdAt"`
UpdatedAt time.Time `json:"updatedAt"`
}
func (ComplianceRegistry) IsNode() {}
func (this ComplianceRegistry) GetID() gid.GID { return this.ID }
type ComplianceRegistryEdge struct {
Cursor page.CursorKey `json:"cursor"`
Node *ComplianceRegistry `json:"node"`
}
type ConfirmEmailInput struct {
Token string `json:"token"`
}
@@ -196,6 +222,25 @@ type CreateAuditPayload struct {
AuditEdge *AuditEdge `json:"auditEdge"`
}
type CreateComplianceRegistryInput struct {
OrganizationID gid.GID `json:"organizationId"`
ReferenceID string `json:"referenceId"`
Area *string `json:"area,omitempty"`
Source *string `json:"source,omitempty"`
AuditID gid.GID `json:"auditId"`
Requirement *string `json:"requirement,omitempty"`
ActionsToBeImplemented *string `json:"actionsToBeImplemented,omitempty"`
Regulator *string `json:"regulator,omitempty"`
OwnerID gid.GID `json:"ownerId"`
LastReviewDate *time.Time `json:"lastReviewDate,omitempty"`
DueDate *time.Time `json:"dueDate,omitempty"`
Status coredata.ComplianceRegistryStatus `json:"status"`
}
type CreateComplianceRegistryPayload struct {
ComplianceRegistryEdge *ComplianceRegistryEdge `json:"complianceRegistryEdge"`
}
type CreateControlAuditMappingInput struct {
ControlID gid.GID `json:"controlId"`
AuditID gid.GID `json:"auditId"`
@@ -503,6 +548,14 @@ type DeleteAuditReportPayload struct {
Audit *Audit `json:"audit"`
}
type DeleteComplianceRegistryInput struct {
ComplianceRegistryID gid.GID `json:"complianceRegistryId"`
}
type DeleteComplianceRegistryPayload struct {
DeletedComplianceRegistryID gid.GID `json:"deletedComplianceRegistryId"`
}
type DeleteControlAuditMappingInput struct {
ControlID gid.GID `json:"controlId"`
AuditID gid.GID `json:"auditId"`
@@ -964,6 +1017,7 @@ type Organization struct {
Data *DatumConnection `json:"data"`
Audits *AuditConnection `json:"audits"`
NonconformityRegistries *NonconformityRegistryConnection `json:"nonconformityRegistries"`
ComplianceRegistries *ComplianceRegistryConnection `json:"complianceRegistries"`
TrustCenter *TrustCenter `json:"trustCenter,omitempty"`
CreatedAt time.Time `json:"createdAt"`
UpdatedAt time.Time `json:"updatedAt"`
@@ -1233,6 +1287,25 @@ type UpdateAuditPayload struct {
Audit *Audit `json:"audit"`
}
type UpdateComplianceRegistryInput struct {
ID gid.GID `json:"id"`
ReferenceID *string `json:"referenceId,omitempty"`
Area *string `json:"area,omitempty"`
Source *string `json:"source,omitempty"`
AuditID *gid.GID `json:"auditId,omitempty"`
Requirement *string `json:"requirement,omitempty"`
ActionsToBeImplemented *string `json:"actionsToBeImplemented,omitempty"`
Regulator *string `json:"regulator,omitempty"`
OwnerID *gid.GID `json:"ownerId,omitempty"`
LastReviewDate *time.Time `json:"lastReviewDate,omitempty"`
DueDate *time.Time `json:"dueDate,omitempty"`
Status *coredata.ComplianceRegistryStatus `json:"status,omitempty"`
}
type UpdateComplianceRegistryPayload struct {
ComplianceRegistry *ComplianceRegistry `json:"complianceRegistry"`
}
type UpdateControlInput struct {
ID gid.GID `json:"id"`
SectionTitle *string `json:"sectionTitle,omitempty"`

182
pkg/server/api/console/v1/v1_resolver.go
View File

@@ -220,6 +220,73 @@ func (r *auditConnectionResolver) TotalCount(ctx context.Context, obj *types.Aud
return count, nil
}
// Organization is the resolver for the organization field.
func (r *complianceRegistryResolver) Organization(ctx context.Context, obj *types.ComplianceRegistry) (*types.Organization, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
registry, err := prb.ComplianceRegistries.Get(ctx, obj.ID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry: %w", err))
}
organization, err := prb.Organizations.Get(ctx, registry.OrganizationID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry organization: %w", err))
}
return types.NewOrganization(organization), nil
}
// Audit is the resolver for the audit field.
func (r *complianceRegistryResolver) Audit(ctx context.Context, obj *types.ComplianceRegistry) (*types.Audit, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
registry, err := prb.ComplianceRegistries.Get(ctx, obj.ID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry: %w", err))
}
audit, err := prb.Audits.Get(ctx, registry.AuditID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry audit: %w", err))
}
return types.NewAudit(audit), nil
}
// Owner is the resolver for the owner field.
func (r *complianceRegistryResolver) Owner(ctx context.Context, obj *types.ComplianceRegistry) (*types.People, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
registry, err := prb.ComplianceRegistries.Get(ctx, obj.ID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry: %w", err))
}
people, err := prb.Peoples.Get(ctx, registry.OwnerID)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry owner: %w", err))
}
return types.NewPeople(people), nil
}
// TotalCount is the resolver for the totalCount field.
func (r *complianceRegistryConnectionResolver) TotalCount(ctx context.Context, obj *types.ComplianceRegistryConnection) (int, error) {
prb := r.ProboService(ctx, obj.ParentID.TenantID())
switch obj.Resolver.(type) {
case *organizationResolver:
count, err := prb.ComplianceRegistries.CountByOrganizationID(ctx, obj.ParentID)
if err != nil {
panic(fmt.Errorf("cannot count compliance registries: %w", err))
}
return count, nil
}
panic(fmt.Errorf("unsupported resolver: %T", obj.Resolver))
}
// Framework is the resolver for the framework field.
func (r *controlResolver) Framework(ctx context.Context, obj *types.Control) (*types.Framework, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
@@ -2783,6 +2850,78 @@ func (r *mutationResolver) DeleteNonconformityRegistry(ctx context.Context, inpu
}, nil
}
// CreateComplianceRegistry is the resolver for the createComplianceRegistry field.
func (r *mutationResolver) CreateComplianceRegistry(ctx context.Context, input types.CreateComplianceRegistryInput) (*types.CreateComplianceRegistryPayload, error) {
prb := r.ProboService(ctx, input.OrganizationID.TenantID())
req := probo.CreateComplianceRegistryRequest{
OrganizationID: input.OrganizationID,
ReferenceID: input.ReferenceID,
Area: input.Area,
Source: input.Source,
AuditID: input.AuditID,
Requirement: input.Requirement,
ActionsToBeImplemented: input.ActionsToBeImplemented,
Regulator: input.Regulator,
OwnerID: input.OwnerID,
LastReviewDate: input.LastReviewDate,
DueDate: input.DueDate,
Status: &input.Status,
}
registry, err := prb.ComplianceRegistries.Create(ctx, &req)
if err != nil {
panic(fmt.Errorf("cannot create compliance registry: %w", err))
}
return &types.CreateComplianceRegistryPayload{
ComplianceRegistryEdge: types.NewComplianceRegistryEdge(registry, coredata.ComplianceRegistryOrderFieldCreatedAt),
}, nil
}
// UpdateComplianceRegistry is the resolver for the updateComplianceRegistry field.
func (r *mutationResolver) UpdateComplianceRegistry(ctx context.Context, input types.UpdateComplianceRegistryInput) (*types.UpdateComplianceRegistryPayload, error) {
prb := r.ProboService(ctx, input.ID.TenantID())
req := probo.UpdateComplianceRegistryRequest{
ID: input.ID,
ReferenceID: input.ReferenceID,
Area: &input.Area,
Source: &input.Source,
AuditID: input.AuditID,
Requirement: &input.Requirement,
ActionsToBeImplemented: &input.ActionsToBeImplemented,
Regulator: &input.Regulator,
OwnerID: input.OwnerID,
LastReviewDate: &input.LastReviewDate,
DueDate: &input.DueDate,
Status: input.Status,
}
registry, err := prb.ComplianceRegistries.Update(ctx, &req)
if err != nil {
panic(fmt.Errorf("cannot update compliance registry: %w", err))
}
return &types.UpdateComplianceRegistryPayload{
ComplianceRegistry: types.NewComplianceRegistry(registry),
}, nil
}
// DeleteComplianceRegistry is the resolver for the deleteComplianceRegistry field.
func (r *mutationResolver) DeleteComplianceRegistry(ctx context.Context, input types.DeleteComplianceRegistryInput) (*types.DeleteComplianceRegistryPayload, error) {
prb := r.ProboService(ctx, input.ComplianceRegistryID.TenantID())
err := prb.ComplianceRegistries.Delete(ctx, input.ComplianceRegistryID)
if err != nil {
panic(fmt.Errorf("cannot delete compliance registry: %w", err))
}
return &types.DeleteComplianceRegistryPayload{
DeletedComplianceRegistryID: input.ComplianceRegistryID,
}, nil
}
// Organization is the resolver for the organization field.
func (r *nonconformityRegistryResolver) Organization(ctx context.Context, obj *types.NonconformityRegistry) (*types.Organization, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
@@ -3230,6 +3369,31 @@ func (r *organizationResolver) NonconformityRegistries(ctx context.Context, obj
return types.NewNonconformityRegistryConnection(page, r, obj.ID), nil
}
// ComplianceRegistries is the resolver for the complianceRegistries field.
func (r *organizationResolver) ComplianceRegistries(ctx context.Context, obj *types.Organization, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.ComplianceRegistryOrderBy) (*types.ComplianceRegistryConnection, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
pageOrderBy := page.OrderBy[coredata.ComplianceRegistryOrderField]{
Field: coredata.ComplianceRegistryOrderFieldCreatedAt,
Direction: page.OrderDirectionDesc,
}
if orderBy != nil {
pageOrderBy = page.OrderBy[coredata.ComplianceRegistryOrderField]{
Field: orderBy.Field,
Direction: orderBy.Direction,
}
}
cursor := types.NewCursor(first, after, last, before, pageOrderBy)
page, err := prb.ComplianceRegistries.ListForOrganizationID(ctx, obj.ID, cursor)
if err != nil {
panic(fmt.Errorf("cannot list organization compliance registries: %w", err))
}
return types.NewComplianceRegistryConnection(page, r, obj.ID), nil
}
// TrustCenter is the resolver for the trustCenter field.
func (r *organizationResolver) TrustCenter(ctx context.Context, obj *types.Organization) (*types.TrustCenter, error) {
prb := r.ProboService(ctx, obj.ID.TenantID())
@@ -3379,6 +3543,12 @@ func (r *queryResolver) Node(ctx context.Context, id gid.GID) (types.Node, error
panic(fmt.Errorf("cannot get nonconformity registry: %w", err))
}
return types.NewNonconformityRegistry(nonconformityRegistry), nil
case coredata.ComplianceRegistryEntityType:
complianceRegistry, err := prb.ComplianceRegistries.Get(ctx, id)
if err != nil {
panic(fmt.Errorf("cannot get compliance registry: %w", err))
}
return types.NewComplianceRegistry(complianceRegistry), nil
case coredata.ReportEntityType:
report, err := prb.Reports.Get(ctx, id)
if err != nil {
@@ -4077,6 +4247,16 @@ func (r *Resolver) AuditConnection() schema.AuditConnectionResolver {
return &auditConnectionResolver{r}
}
// ComplianceRegistry returns schema.ComplianceRegistryResolver implementation.
func (r *Resolver) ComplianceRegistry() schema.ComplianceRegistryResolver {
return &complianceRegistryResolver{r}
}
// ComplianceRegistryConnection returns schema.ComplianceRegistryConnectionResolver implementation.
func (r *Resolver) ComplianceRegistryConnection() schema.ComplianceRegistryConnectionResolver {
return &complianceRegistryConnectionResolver{r}
}
// Control returns schema.ControlResolver implementation.
func (r *Resolver) Control() schema.ControlResolver { return &controlResolver{r} }
@@ -4218,6 +4398,8 @@ type assetResolver struct{ *Resolver }
type assetConnectionResolver struct{ *Resolver }
type auditResolver struct{ *Resolver }
type auditConnectionResolver struct{ *Resolver }
type complianceRegistryResolver struct{ *Resolver }
type complianceRegistryConnectionResolver struct{ *Resolver }
type controlResolver struct{ *Resolver }
type controlConnectionResolver struct{ *Resolver }
type datumResolver struct{ *Resolver }