feat(api-docs): API-Exposure-Klassifikation — Intern vs. Oeffentlich

Alle ~640 Endpoints nach Netzwerk-Exposition klassifiziert: public (5 Module, ~30 EP),
partner/Integration (6 Module, ~25 EP), internal (25+ Module, ~550 EP), admin/Wartung (4 EP).
Badges, Filter und Stats in API-Docs + Developer Portal.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/lib/sdk/api-docs/endpoints.ts

@@ -10,6 +10,7 @@ export const apiModules: ApiModule[] = [
     name: 'Compliance Framework — Regulierungen, Anforderungen & Controls',
     service: 'python',
     basePath: '/api/compliance',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/regulations', description: 'Alle Regulierungen auflisten', service: 'python' },
       { method: 'GET', path: '/regulations/{code}', description: 'Regulierung nach Code laden', service: 'python' },
@@ -29,10 +30,10 @@ export const apiModules: ApiModule[] = [
       { method: 'GET', path: '/export/{export_id}', description: 'Export-Status abfragen', service: 'python' },
       { method: 'GET', path: '/export/{export_id}/download', description: 'Export-Datei herunterladen', service: 'python' },
       { method: 'GET', path: '/exports', description: 'Alle Exports auflisten', service: 'python' },
-      { method: 'POST', path: '/init-tables', description: 'Datenbanktabellen initialisieren', service: 'python' },
-      { method: 'POST', path: '/create-indexes', description: 'Datenbank-Indizes erstellen', service: 'python' },
-      { method: 'POST', path: '/seed-risks', description: 'Risikodaten einspielen', service: 'python' },
-      { method: 'POST', path: '/seed', description: 'Systemdaten einspielen', service: 'python' },
+      { method: 'POST', path: '/init-tables', description: 'Datenbanktabellen initialisieren', service: 'python', exposure: 'admin' },
+      { method: 'POST', path: '/create-indexes', description: 'Datenbank-Indizes erstellen', service: 'python', exposure: 'admin' },
+      { method: 'POST', path: '/seed-risks', description: 'Risikodaten einspielen', service: 'python', exposure: 'admin' },
+      { method: 'POST', path: '/seed', description: 'Systemdaten einspielen', service: 'python', exposure: 'admin' },
     ],
   },
 
@@ -41,6 +42,7 @@ export const apiModules: ApiModule[] = [
     name: 'Audit — Sitzungen & Checklisten',
     service: 'python',
     basePath: '/api/compliance/audit',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/sessions', description: 'Audit-Sitzung erstellen', service: 'python' },
       { method: 'GET', path: '/sessions', description: 'Alle Audit-Sitzungen auflisten', service: 'python' },
@@ -61,6 +63,7 @@ export const apiModules: ApiModule[] = [
     name: 'AI Act — KI-Systeme & Risikobewertung',
     service: 'python',
     basePath: '/api/compliance/ai',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/systems', description: 'KI-Systeme auflisten', service: 'python' },
       { method: 'POST', path: '/systems', description: 'KI-System erstellen', service: 'python' },
@@ -76,12 +79,13 @@ export const apiModules: ApiModule[] = [
     name: 'Cookie-Banner & Consent Management',
     service: 'python',
     basePath: '/api/compliance/consent',
+    exposure: 'internal',
     endpoints: [
-      { method: 'POST', path: '/consent', description: 'Einwilligung erfassen', service: 'python' },
+      { method: 'POST', path: '/consent', description: 'Einwilligung erfassen', service: 'python', exposure: 'public' },
       { method: 'GET', path: '/consent', description: 'Einwilligungen auflisten', service: 'python' },
       { method: 'DELETE', path: '/consent/{consent_id}', description: 'Einwilligung loeschen', service: 'python' },
       { method: 'GET', path: '/consent/export', description: 'Einwilligungsdaten exportieren', service: 'python' },
-      { method: 'GET', path: '/config/{site_id}', description: 'Seitenkonfiguration laden', service: 'python' },
+      { method: 'GET', path: '/config/{site_id}', description: 'Seitenkonfiguration laden', service: 'python', exposure: 'public' },
       { method: 'GET', path: '/admin/sites', description: 'Alle Seiten auflisten', service: 'python' },
       { method: 'POST', path: '/admin/sites', description: 'Seite erstellen', service: 'python' },
       { method: 'PUT', path: '/admin/sites/{site_id}', description: 'Seite aktualisieren', service: 'python' },
@@ -101,6 +105,7 @@ export const apiModules: ApiModule[] = [
     name: 'Change Requests — Aenderungsantraege',
     service: 'python',
     basePath: '/api/compliance/change-requests',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/stats', description: 'CR-Statistiken laden', service: 'python' },
       { method: 'GET', path: '/{cr_id}', description: 'Einzelnen CR laden', service: 'python' },
@@ -116,6 +121,7 @@ export const apiModules: ApiModule[] = [
     name: 'Stammdaten — Unternehmensprofil',
     service: 'python',
     basePath: '/api/v1/company-profile',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Unternehmensprofil laden', service: 'python' },
       { method: 'POST', path: '/', description: 'Profil erstellen/aktualisieren', service: 'python' },
@@ -130,6 +136,7 @@ export const apiModules: ApiModule[] = [
     name: 'Compliance Scope — Geltungsbereich',
     service: 'python',
     basePath: '/api/v1/compliance-scope',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Compliance-Scope laden', service: 'python' },
       { method: 'POST', path: '/', description: 'Compliance-Scope erstellen/aktualisieren', service: 'python' },
@@ -141,6 +148,7 @@ export const apiModules: ApiModule[] = [
     name: 'Einwilligungsvorlagen — Consent Templates',
     service: 'python',
     basePath: '/api/compliance/consent-templates',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/consent-templates', description: 'Vorlagen auflisten', service: 'python' },
       { method: 'POST', path: '/consent-templates', description: 'Vorlage erstellen', service: 'python' },
@@ -156,6 +164,7 @@ export const apiModules: ApiModule[] = [
     name: 'Dashboard — Compliance-Uebersicht & Reports',
     service: 'python',
     basePath: '/api/compliance/dashboard',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/dashboard', description: 'Haupt-Dashboard laden', service: 'python' },
       { method: 'GET', path: '/score', description: 'Compliance-Score berechnen', service: 'python' },
@@ -171,6 +180,7 @@ export const apiModules: ApiModule[] = [
     name: 'DSFA — Datenschutz-Folgenabschaetzung',
     service: 'python',
     basePath: '/api/compliance/dsfa',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'DSFAs auflisten', service: 'python' },
       { method: 'POST', path: '/', description: 'DSFA erstellen', service: 'python' },
@@ -195,6 +205,7 @@ export const apiModules: ApiModule[] = [
     name: 'DSR — Betroffenenrechte (Admin)',
     service: 'python',
     basePath: '/api/compliance/dsr',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/', description: 'DSR erstellen', service: 'python' },
       { method: 'GET', path: '/', description: 'DSRs auflisten', service: 'python' },
@@ -229,6 +240,7 @@ export const apiModules: ApiModule[] = [
     name: 'Einwilligungen — DSGVO-Einwilligungsverwaltung',
     service: 'python',
     basePath: '/api/compliance/einwilligungen',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/catalog', description: 'Einwilligungskatalog laden', service: 'python' },
       { method: 'PUT', path: '/catalog', description: 'Katalog aktualisieren', service: 'python' },
@@ -249,6 +261,7 @@ export const apiModules: ApiModule[] = [
     name: 'E-Mail-Vorlagen — Template-Verwaltung',
     service: 'python',
     basePath: '/api/compliance/email-templates',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/types', description: 'Vorlagentypen laden', service: 'python' },
       { method: 'GET', path: '/stats', description: 'E-Mail-Statistiken laden', service: 'python' },
@@ -279,6 +292,7 @@ export const apiModules: ApiModule[] = [
     name: 'Eskalationen — Eskalationsmanagement',
     service: 'python',
     basePath: '/api/compliance/escalations',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Eskalationen auflisten', service: 'python' },
       { method: 'POST', path: '/', description: 'Eskalation erstellen', service: 'python' },
@@ -295,13 +309,14 @@ export const apiModules: ApiModule[] = [
     name: 'Nachweise — Evidence Management',
     service: 'python',
     basePath: '/api/compliance/evidence',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/evidence', description: 'Nachweise auflisten', service: 'python' },
       { method: 'POST', path: '/evidence', description: 'Nachweis erstellen', service: 'python' },
       { method: 'DELETE', path: '/evidence/{evidence_id}', description: 'Nachweis loeschen', service: 'python' },
       { method: 'POST', path: '/evidence/upload', description: 'Nachweis-Datei hochladen', service: 'python' },
-      { method: 'POST', path: '/evidence/collect', description: 'CI-Nachweis sammeln', service: 'python' },
-      { method: 'GET', path: '/evidence/ci-status', description: 'CI-Nachweis-Status laden', service: 'python' },
+      { method: 'POST', path: '/evidence/collect', description: 'CI-Nachweis sammeln', service: 'python', exposure: 'partner' },
+      { method: 'GET', path: '/evidence/ci-status', description: 'CI-Nachweis-Status laden', service: 'python', exposure: 'partner' },
     ],
   },
 
@@ -310,6 +325,7 @@ export const apiModules: ApiModule[] = [
     name: 'Extraktion — Anforderungen aus RAG',
     service: 'python',
     basePath: '/api/compliance',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/extract-requirements-from-rag', description: 'Anforderungen aus RAG-Korpus extrahieren', service: 'python' },
     ],
@@ -320,6 +336,7 @@ export const apiModules: ApiModule[] = [
     name: 'Dokumentengenerierung — Automatische Erstellung',
     service: 'python',
     basePath: '/api/compliance/generation',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/preview/{doc_type}', description: 'Generierungs-Vorschau laden', service: 'python' },
       { method: 'POST', path: '/apply/{doc_type}', description: 'Dokument generieren und anwenden', service: 'python' },
@@ -331,6 +348,7 @@ export const apiModules: ApiModule[] = [
     name: 'Dokument-Import & Gap-Analyse',
     service: 'python',
     basePath: '/api/import',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/analyze', description: 'Dokument analysieren', service: 'python' },
       { method: 'GET', path: '/gap-analysis/{document_id}', description: 'Gap-Analyse laden', service: 'python' },
@@ -344,6 +362,7 @@ export const apiModules: ApiModule[] = [
     name: 'Datenschutz-Vorfaelle — Incident Management',
     service: 'python',
     basePath: '/api/compliance/incidents',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/', description: 'Vorfall erstellen', service: 'python' },
       { method: 'GET', path: '/', description: 'Vorfaelle auflisten', service: 'python' },
@@ -368,6 +387,7 @@ export const apiModules: ApiModule[] = [
     name: 'ISMS — ISO 27001 Managementsystem',
     service: 'python',
     basePath: '/api/compliance/isms',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/scope', description: 'ISMS-Scope laden', service: 'python' },
       { method: 'POST', path: '/scope', description: 'ISMS-Scope erstellen', service: 'python' },
@@ -416,6 +436,7 @@ export const apiModules: ApiModule[] = [
     name: 'Rechtliche Dokumente — Verwaltung & Versionen',
     service: 'python',
     basePath: '/api/compliance/legal-documents',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/documents', description: 'Dokumente auflisten', service: 'python' },
       { method: 'POST', path: '/documents', description: 'Dokument erstellen', service: 'python' },
@@ -431,8 +452,8 @@ export const apiModules: ApiModule[] = [
       { method: 'POST', path: '/versions/{version_id}/reject', description: 'Version ablehnen', service: 'python' },
       { method: 'POST', path: '/versions/{version_id}/publish', description: 'Version veroeffentlichen', service: 'python' },
       { method: 'GET', path: '/versions/{version_id}/approval-history', description: 'Genehmigungshistorie laden', service: 'python' },
-      { method: 'GET', path: '/public', description: 'Oeffentliche Dokumente laden', service: 'python' },
-      { method: 'GET', path: '/public/{document_type}/latest', description: 'Aktuellstes Dokument laden', service: 'python' },
+      { method: 'GET', path: '/public', description: 'Oeffentliche Dokumente laden', service: 'python', exposure: 'public' },
+      { method: 'GET', path: '/public/{document_type}/latest', description: 'Aktuellstes Dokument laden', service: 'python', exposure: 'public' },
       { method: 'POST', path: '/consents', description: 'Einwilligung erfassen', service: 'python' },
       { method: 'GET', path: '/consents/my', description: 'Eigene Einwilligungen laden', service: 'python' },
       { method: 'GET', path: '/consents/check/{document_type}', description: 'Einwilligungsstatus pruefen', service: 'python' },
@@ -451,6 +472,7 @@ export const apiModules: ApiModule[] = [
     name: 'Dokumentvorlagen — DSGVO-Generatoren',
     service: 'python',
     basePath: '/api/compliance/legal-templates',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Vorlagen auflisten', service: 'python' },
       { method: 'GET', path: '/status', description: 'Vorlagenstatus laden', service: 'python' },
@@ -467,6 +489,7 @@ export const apiModules: ApiModule[] = [
     name: 'Loeschfristen — Aufbewahrung & Loeschung',
     service: 'python',
     basePath: '/api/compliance/loeschfristen',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Loeschrichtlinien auflisten', service: 'python' },
       { method: 'POST', path: '/', description: 'Richtlinie erstellen', service: 'python' },
@@ -485,11 +508,12 @@ export const apiModules: ApiModule[] = [
     name: 'Module — Compliance-Modul-Verwaltung',
     service: 'python',
     basePath: '/api/compliance/modules',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/modules', description: 'Module auflisten', service: 'python' },
       { method: 'GET', path: '/modules/overview', description: 'Modul-Uebersicht laden', service: 'python' },
       { method: 'GET', path: '/modules/{module_id}', description: 'Modul laden', service: 'python' },
-      { method: 'POST', path: '/modules/seed', description: 'Module einspielen', service: 'python' },
+      { method: 'POST', path: '/modules/seed', description: 'Module einspielen', service: 'python', exposure: 'admin' },
       { method: 'POST', path: '/modules/{module_id}/activate', description: 'Modul aktivieren', service: 'python' },
       { method: 'POST', path: '/modules/{module_id}/deactivate', description: 'Modul deaktivieren', service: 'python' },
       { method: 'POST', path: '/modules/{module_id}/regulations', description: 'Regulierungs-Zuordnung hinzufuegen', service: 'python' },
@@ -501,6 +525,7 @@ export const apiModules: ApiModule[] = [
     name: 'Notfallplan — Kontakte, Szenarien & Uebungen',
     service: 'python',
     basePath: '/api/compliance/notfallplan',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/contacts', description: 'Notfallkontakte laden', service: 'python' },
       { method: 'POST', path: '/contacts', description: 'Kontakt erstellen', service: 'python' },
@@ -533,6 +558,7 @@ export const apiModules: ApiModule[] = [
     name: 'Pflichten — Compliance-Obligations',
     service: 'python',
     basePath: '/api/compliance/obligations',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Pflichten auflisten', service: 'python' },
       { method: 'POST', path: '/', description: 'Pflicht erstellen', service: 'python' },
@@ -551,6 +577,7 @@ export const apiModules: ApiModule[] = [
     name: 'Quality — KI-Qualitaetsmetriken & Tests',
     service: 'python',
     basePath: '/api/compliance/quality',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/stats', description: 'Qualitaets-Statistiken laden', service: 'python' },
       { method: 'GET', path: '/metrics', description: 'Metriken auflisten', service: 'python' },
@@ -569,6 +596,7 @@ export const apiModules: ApiModule[] = [
     name: 'Risikomanagement — Bewertung & Matrix',
     service: 'python',
     basePath: '/api/compliance/risks',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/risks', description: 'Risiken auflisten', service: 'python' },
       { method: 'POST', path: '/risks', description: 'Risiko erstellen', service: 'python' },
@@ -583,8 +611,9 @@ export const apiModules: ApiModule[] = [
     name: 'Screening — Abhaengigkeiten-Pruefung',
     service: 'python',
     basePath: '/api/compliance/screening',
+    exposure: 'internal',
     endpoints: [
-      { method: 'POST', path: '/scan', description: 'Abhaengigkeiten scannen', service: 'python' },
+      { method: 'POST', path: '/scan', description: 'Abhaengigkeiten scannen', service: 'python', exposure: 'partner' },
       { method: 'GET', path: '/{screening_id}', description: 'Screening-Ergebnis laden', service: 'python' },
       { method: 'GET', path: '/', description: 'Screenings auflisten', service: 'python' },
     ],
@@ -595,6 +624,7 @@ export const apiModules: ApiModule[] = [
     name: 'Scraper — Rechtsquellen-Aktualisierung',
     service: 'python',
     basePath: '/api/compliance/scraper',
+    exposure: 'partner',
     endpoints: [
       { method: 'GET', path: '/scraper/status', description: 'Scraper-Status laden', service: 'python' },
       { method: 'GET', path: '/scraper/sources', description: 'Quellen auflisten', service: 'python' },
@@ -611,6 +641,7 @@ export const apiModules: ApiModule[] = [
     name: 'Security Backlog — Sicherheitsmassnahmen',
     service: 'python',
     basePath: '/api/compliance/security-backlog',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Backlog-Eintraege auflisten', service: 'python' },
       { method: 'POST', path: '/', description: 'Eintrag erstellen', service: 'python' },
@@ -625,6 +656,7 @@ export const apiModules: ApiModule[] = [
     name: 'Source Policy — Datenquellen & PII-Regeln',
     service: 'python',
     basePath: '/api/compliance/source-policy',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/sources', description: 'Datenquellen auflisten', service: 'python' },
       { method: 'POST', path: '/sources', description: 'Quelle erstellen', service: 'python' },
@@ -649,6 +681,7 @@ export const apiModules: ApiModule[] = [
     name: 'TOM — Technisch-Organisatorische Massnahmen',
     service: 'python',
     basePath: '/api/compliance/tom',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/state', description: 'TOM-Zustand laden', service: 'python' },
       { method: 'POST', path: '/state', description: 'TOM-Zustand speichern', service: 'python' },
@@ -669,6 +702,7 @@ export const apiModules: ApiModule[] = [
     name: 'Vendor Compliance — Auftragsverarbeitung',
     service: 'python',
     basePath: '/api/compliance/vendors',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/vendors/stats', description: 'Anbieter-Statistiken laden', service: 'python' },
       { method: 'GET', path: '/vendors', description: 'Anbieter auflisten', service: 'python' },
@@ -703,6 +737,7 @@ export const apiModules: ApiModule[] = [
     name: 'VVT — Verarbeitungsverzeichnis (Art. 30 DSGVO)',
     service: 'python',
     basePath: '/api/compliance/vvt',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/organization', description: 'Organisationskopf laden', service: 'python' },
       { method: 'PUT', path: '/organization', description: 'Organisationskopf speichern', service: 'python' },
@@ -724,6 +759,7 @@ export const apiModules: ApiModule[] = [
     name: 'Consent API — Nutzer-Einwilligungen',
     service: 'python',
     basePath: '/api/consents',
+    exposure: 'public',
     endpoints: [
       { method: 'GET', path: '/token/demo', description: 'Demo-Token laden', service: 'python' },
       { method: 'GET', path: '/check/{document_type}', description: 'Einwilligungsstatus pruefen', service: 'python' },
@@ -744,6 +780,7 @@ export const apiModules: ApiModule[] = [
     name: 'Consent Admin — Dokumenten- & Versionsverwaltung',
     service: 'python',
     basePath: '/api/admin/consents',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/documents', description: 'Dokumente auflisten', service: 'python' },
       { method: 'POST', path: '/documents', description: 'Dokument erstellen', service: 'python' },
@@ -777,6 +814,7 @@ export const apiModules: ApiModule[] = [
     name: 'DSR API — Nutzer-Betroffenenrechte',
     service: 'python',
     basePath: '/api/dsr',
+    exposure: 'public',
     endpoints: [
       { method: 'POST', path: '/', description: 'Antrag stellen', service: 'python' },
       { method: 'GET', path: '/', description: 'Eigene Antraege laden', service: 'python' },
@@ -790,6 +828,7 @@ export const apiModules: ApiModule[] = [
     name: 'DSR Admin — Antrags-Verwaltung',
     service: 'python',
     basePath: '/api/admin/dsr',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/', description: 'Alle Antraege laden', service: 'python' },
       { method: 'GET', path: '/stats', description: 'DSR-Statistiken laden', service: 'python' },
@@ -817,6 +856,7 @@ export const apiModules: ApiModule[] = [
     name: 'GDPR / Datenschutz — Nutzerdaten & Export',
     service: 'python',
     basePath: '/api/gdpr',
+    exposure: 'public',
     endpoints: [
       { method: 'POST', path: '/export-pdf', description: 'Nutzerdaten als PDF exportieren', service: 'python' },
       { method: 'GET', path: '/export-html', description: 'Nutzerdaten als HTML exportieren', service: 'python' },
@@ -835,8 +875,9 @@ export const apiModules: ApiModule[] = [
     name: 'Health — System-Status',
     service: 'go',
     basePath: '/sdk/v1',
+    exposure: 'admin',
     endpoints: [
-      { method: 'GET', path: '/health', description: 'API Health-Check', service: 'go' },
+      { method: 'GET', path: '/health', description: 'API Health-Check', service: 'go', exposure: 'admin' },
     ],
   },
 
@@ -845,6 +886,7 @@ export const apiModules: ApiModule[] = [
     name: 'RBAC — Tenant, Rollen & Berechtigungen',
     service: 'go',
     basePath: '/sdk/v1',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/tenants', description: 'Alle Tenants auflisten', service: 'go' },
       { method: 'GET', path: '/tenants/:id', description: 'Tenant laden', service: 'go' },
@@ -871,6 +913,7 @@ export const apiModules: ApiModule[] = [
     name: 'LLM — KI-Textverarbeitung & Policies',
     service: 'go',
     basePath: '/sdk/v1/llm',
+    exposure: 'partner',
     endpoints: [
       { method: 'GET', path: '/policies', description: 'LLM-Policies auflisten', service: 'go' },
       { method: 'GET', path: '/policies/:id', description: 'Policy laden', service: 'go' },
@@ -891,6 +934,7 @@ export const apiModules: ApiModule[] = [
     name: 'Audit (Go) — LLM-Audit & Compliance-Reports',
     service: 'go',
     basePath: '/sdk/v1/audit',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/llm', description: 'LLM-Audit-Logs laden', service: 'go' },
       { method: 'GET', path: '/general', description: 'Allgemeine Audit-Logs laden', service: 'go' },
@@ -909,6 +953,7 @@ export const apiModules: ApiModule[] = [
     name: 'UCCA — Use-Case Compliance Advisor',
     service: 'go',
     basePath: '/sdk/v1/ucca',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/assess', description: 'Compliance-Bewertung durchfuehren', service: 'go' },
       { method: 'GET', path: '/assessments', description: 'Bewertungen auflisten', service: 'go' },
@@ -951,6 +996,7 @@ export const apiModules: ApiModule[] = [
     name: 'RAG — Legal Corpus & Vektorsuche',
     service: 'go',
     basePath: '/sdk/v1/rag',
+    exposure: 'partner',
     endpoints: [
       { method: 'POST', path: '/search', description: 'Rechtskorpus durchsuchen', service: 'go' },
       { method: 'GET', path: '/regulations', description: 'Regulierungen auflisten', service: 'go' },
@@ -964,6 +1010,7 @@ export const apiModules: ApiModule[] = [
     name: 'Roadmaps — Compliance-Implementierungsplaene',
     service: 'go',
     basePath: '/sdk/v1/roadmaps',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/', description: 'Roadmap erstellen', service: 'go' },
       { method: 'GET', path: '/', description: 'Roadmaps auflisten', service: 'go' },
@@ -984,6 +1031,7 @@ export const apiModules: ApiModule[] = [
     name: 'Roadmap Items — Einzelne Massnahmen',
     service: 'go',
     basePath: '/sdk/v1/roadmap-items',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/:id', description: 'Item laden', service: 'go' },
       { method: 'PUT', path: '/:id', description: 'Item aktualisieren', service: 'go' },
@@ -997,6 +1045,7 @@ export const apiModules: ApiModule[] = [
     name: 'Workshops — Kollaborative Compliance-Workshops',
     service: 'go',
     basePath: '/sdk/v1/workshops',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/', description: 'Workshop erstellen', service: 'go' },
       { method: 'GET', path: '/', description: 'Workshops auflisten', service: 'go' },
@@ -1027,6 +1076,7 @@ export const apiModules: ApiModule[] = [
     name: 'Portfolios — KI-Use-Case-Portfolio',
     service: 'go',
     basePath: '/sdk/v1/portfolios',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/', description: 'Portfolio erstellen', service: 'go' },
       { method: 'GET', path: '/', description: 'Portfolios auflisten', service: 'go' },
@@ -1053,6 +1103,7 @@ export const apiModules: ApiModule[] = [
     name: 'Academy — E-Learning & Zertifikate',
     service: 'go',
     basePath: '/sdk/v1/academy',
+    exposure: 'internal',
     endpoints: [
       { method: 'POST', path: '/courses', description: 'Kurs erstellen', service: 'go' },
       { method: 'GET', path: '/courses', description: 'Kurse auflisten', service: 'go' },
@@ -1080,6 +1131,7 @@ export const apiModules: ApiModule[] = [
     name: 'Training — Schulungsmodule & Content-Pipeline',
     service: 'go',
     basePath: '/sdk/v1/training',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/modules', description: 'Schulungsmodule auflisten', service: 'go' },
       { method: 'GET', path: '/modules/:id', description: 'Modul laden', service: 'go' },
@@ -1115,7 +1167,7 @@ export const apiModules: ApiModule[] = [
       { method: 'POST', path: '/escalation/check', description: 'Eskalation pruefen', service: 'go' },
       { method: 'GET', path: '/audit-log', description: 'Schulungs-Audit-Log laden', service: 'go' },
       { method: 'GET', path: '/stats', description: 'Schulungs-Statistiken laden', service: 'go' },
-      { method: 'GET', path: '/certificates/:id/verify', description: 'Zertifikat verifizieren', service: 'go' },
+      { method: 'GET', path: '/certificates/:id/verify', description: 'Zertifikat verifizieren', service: 'go', exposure: 'partner' },
     ],
   },
 
@@ -1124,10 +1176,11 @@ export const apiModules: ApiModule[] = [
     name: 'Whistleblower — Hinweisgebersystem (HinSchG)',
     service: 'go',
     basePath: '/sdk/v1/whistleblower',
+    exposure: 'internal',
     endpoints: [
-      { method: 'POST', path: '/reports/submit', description: 'Anonymen Hinweis einreichen', service: 'go' },
-      { method: 'GET', path: '/reports/access/:accessKey', description: 'Hinweis per Zugangscode laden', service: 'go' },
-      { method: 'POST', path: '/reports/access/:accessKey/messages', description: 'Nachricht senden (anonym)', service: 'go' },
+      { method: 'POST', path: '/reports/submit', description: 'Anonymen Hinweis einreichen', service: 'go', exposure: 'public' },
+      { method: 'GET', path: '/reports/access/:accessKey', description: 'Hinweis per Zugangscode laden', service: 'go', exposure: 'public' },
+      { method: 'POST', path: '/reports/access/:accessKey/messages', description: 'Nachricht senden (anonym)', service: 'go', exposure: 'public' },
       { method: 'GET', path: '/reports', description: 'Alle Hinweise auflisten', service: 'go' },
       { method: 'GET', path: '/reports/:id', description: 'Hinweis laden', service: 'go' },
       { method: 'PUT', path: '/reports/:id', description: 'Hinweis aktualisieren', service: 'go' },
@@ -1147,6 +1200,7 @@ export const apiModules: ApiModule[] = [
     name: 'IACE — Industrial AI / CE-Compliance Engine',
     service: 'go',
     basePath: '/sdk/v1/iace',
+    exposure: 'internal',
     endpoints: [
       { method: 'GET', path: '/hazard-library', description: 'Gefahrenbibliothek laden', service: 'go' },
       { method: 'GET', path: '/controls-library', description: 'Controls-Bibliothek laden', service: 'go' },

admin-compliance/lib/sdk/api-docs/types.ts

@@ -1,11 +1,13 @@
 export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH'
 export type BackendService = 'python' | 'go'
+export type ApiExposure = 'public' | 'partner' | 'internal' | 'admin'
 
 export interface ApiEndpoint {
   method: HttpMethod
   path: string
   description: string
   service: BackendService
+  exposure?: ApiExposure
 }
 
 export interface ApiModule {
@@ -13,5 +15,6 @@ export interface ApiModule {
   name: string
   service: BackendService
   basePath: string
+  exposure: ApiExposure
   endpoints: ApiEndpoint[]
 }