merge: phases 1–5 refactor, CI hardening, docs (coolify → main)

Phase 1: backend-compliance — partial service-layer extraction
Phase 2: ai-compliance-sdk — full hexagonal split; iace/ucca/training handlers
  and stores split into focused files; cmd/server/main.go → internal/app/
Phase 3: admin-compliance — types.ts, tom-generator loader, and major page
  components split; lib document generators extracted
Phase 4: dsms-gateway, consent-sdk, developer-portal, breakpilot-compliance-sdk
Phase 5 CI hardening:
  - loc-budget job now scans whole repo (blocking, no || true)
  - sbom-scan / grype blocking on high+ CVEs
  - ai-compliance-sdk/.golangci.yml: strict golangci-lint config
  - check-loc.sh: skip test_*.py and *.html; loc-exceptions.txt expanded
  - deleted stray routes.py.backup (2512 LOC)
Docs:
  - root README.md with CI badge, service table, quick start, CI pipeline table
  - CONTRIBUTING.md: setup, pre-commit checklist, guardrail marker reference
  - CLAUDE.md: First-Time Setup & Claude Code Onboarding section
  - all 7 service READMEs updated (stale phase refs, current architecture)
  - AGENTS.go/python/typescript.md enhanced with linting, DI, barrel re-export
  - .gitignore: dist/, .turbo/, pnpm-lock.yaml added

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

admin-compliance/app/sdk/iace/[projectId]/verification/page.tsx

@@ -2,27 +2,11 @@
 
 import React, { useState, useEffect } from 'react'
 import { useParams } from 'next/navigation'
+import type { VerificationItem, VerificationFormData } from './_components/verification-types'
 import { VerificationForm } from './_components/VerificationForm'
 import { CompleteModal } from './_components/CompleteModal'
 import { SuggestEvidenceModal } from './_components/SuggestEvidenceModal'
 import { VerificationTable } from './_components/VerificationTable'
-import type { VerificationFormData } from './_components/VerificationForm'
-
-interface VerificationItem {
-  id: string
-  title: string
-  description: string
-  method: string
-  status: 'pending' | 'in_progress' | 'completed' | 'failed'
-  result: string | null
-  linked_hazard_id: string | null
-  linked_hazard_name: string | null
-  linked_mitigation_id: string | null
-  linked_mitigation_name: string | null
-  completed_at: string | null
-  completed_by: string | null
-  created_at: string
-}
 
 export default function VerificationPage() {
   const params = useParams()
@@ -44,9 +28,9 @@ export default function VerificationPage() {
         fetch(`/api/sdk/v1/iace/projects/${projectId}/hazards`),
         fetch(`/api/sdk/v1/iace/projects/${projectId}/mitigations`),
       ])
-      if (verRes.ok) { const json = await verRes.json(); setItems(json.verifications || json || []) }
-      if (hazRes.ok) { const json = await hazRes.json(); setHazards((json.hazards || json || []).map((h: { id: string; name: string }) => ({ id: h.id, name: h.name }))) }
-      if (mitRes.ok) { const json = await mitRes.json(); setMitigations((json.mitigations || json || []).map((m: { id: string; title: string }) => ({ id: m.id, title: m.title }))) }
+      if (verRes.ok) { const j = await verRes.json(); setItems(j.verifications || j || []) }
+      if (hazRes.ok) { const j = await hazRes.json(); setHazards((j.hazards || j || []).map((h: { id: string; name: string }) => ({ id: h.id, name: h.name }))) }
+      if (mitRes.ok) { const j = await mitRes.json(); setMitigations((j.mitigations || j || []).map((m: { id: string; title: string }) => ({ id: m.id, title: m.title }))) }
     } catch (err) { console.error('Failed to fetch data:', err) }
     finally { setLoading(false) }
   }
@@ -87,41 +71,33 @@ export default function VerificationPage() {
     } catch (err) { console.error('Failed to delete verification:', err) }
   }
 
-  const completed = items.filter((i) => i.status === 'completed').length
-  const failed = items.filter((i) => i.status === 'failed').length
-  const pending = items.filter((i) => i.status === 'pending' || i.status === 'in_progress').length
+  const completed = items.filter(i => i.status === 'completed').length
+  const failed = items.filter(i => i.status === 'failed').length
+  const pending = items.filter(i => i.status === 'pending' || i.status === 'in_progress').length
 
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center h-64">
-        <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-purple-600" />
-      </div>
-    )
-  }
+  if (loading) return (
+    <div className="flex items-center justify-center h-64">
+      <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-purple-600" />
+    </div>
+  )
 
   return (
     <div className="space-y-6">
       <div className="flex items-center justify-between">
         <div>
           <h1 className="text-2xl font-bold text-gray-900 dark:text-white">Verifikationsplan</h1>
-          <p className="mt-1 text-sm text-gray-500 dark:text-gray-400">
-            Nachweisfuehrung fuer alle Schutzmassnahmen und Sicherheitsanforderungen.
-          </p>
+          <p className="mt-1 text-sm text-gray-500 dark:text-gray-400">Nachweisfuehrung fuer alle Schutzmassnahmen und Sicherheitsanforderungen.</p>
         </div>
         <div className="flex items-center gap-2">
           {mitigations.length > 0 && (
-            <button onClick={() => setShowSuggest(true)}
-              className="flex items-center gap-2 px-3 py-2 border border-green-300 text-green-700 rounded-lg hover:bg-green-50 transition-colors text-sm"
-            >
+            <button onClick={() => setShowSuggest(true)} className="flex items-center gap-2 px-3 py-2 border border-green-300 text-green-700 rounded-lg hover:bg-green-50 transition-colors text-sm">
               <svg className="w-4 h-4" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                 <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 3v2m6-2v2M9 19v2m6-2v2M5 9H3m2 6H3m18-6h-2m2 6h-2M7 19h10a2 2 0 002-2V7a2 2 0 00-2-2H7a2 2 0 00-2 2v10a2 2 0 002 2zM9 9h6v6H9V9z" />
               </svg>
               Nachweise vorschlagen
             </button>
           )}
-          <button onClick={() => setShowForm(true)}
-            className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
-          >
+          <button onClick={() => setShowForm(true)} className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors">
             <svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
               <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" />
             </svg>
@@ -151,45 +127,35 @@ export default function VerificationPage() {
         </div>
       )}
 
-      {showForm && (
-        <VerificationForm onSubmit={handleSubmit} onCancel={() => setShowForm(false)} hazards={hazards} mitigations={mitigations} />
-      )}
-
-      {completingItem && (
-        <CompleteModal item={completingItem} onSubmit={handleComplete} onClose={() => setCompletingItem(null)} />
-      )}
-
-      {showSuggest && (
-        <SuggestEvidenceModal mitigations={mitigations} projectId={projectId} onAddEvidence={handleAddSuggestedEvidence} onClose={() => setShowSuggest(false)} />
-      )}
+      {showForm && <VerificationForm onSubmit={handleSubmit} onCancel={() => setShowForm(false)} hazards={hazards} mitigations={mitigations} />}
+      {completingItem && <CompleteModal item={completingItem} onSubmit={handleComplete} onClose={() => setCompletingItem(null)} />}
+      {showSuggest && <SuggestEvidenceModal mitigations={mitigations} projectId={projectId} onAddEvidence={handleAddSuggestedEvidence} onClose={() => setShowSuggest(false)} />}
 
       {items.length > 0 ? (
         <VerificationTable items={items} onComplete={setCompletingItem} onDelete={handleDelete} />
-      ) : (
-        !showForm && (
-          <div className="bg-white dark:bg-gray-800 rounded-xl border border-gray-200 dark:border-gray-700 p-12 text-center">
-            <div className="w-16 h-16 mx-auto bg-purple-100 dark:bg-purple-900/30 rounded-full flex items-center justify-center mb-4">
-              <svg className="w-8 h-8 text-purple-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
-                <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
-              </svg>
-            </div>
-            <h3 className="text-lg font-semibold text-gray-900 dark:text-white">Kein Verifikationsplan vorhanden</h3>
-            <p className="mt-2 text-gray-500 max-w-md mx-auto">
-              Definieren Sie Verifikationsschritte fuer Ihre Schutzmassnahmen.
-              Jede Massnahme sollte durch mindestens eine Verifikation abgedeckt sein.
-            </p>
-            <div className="mt-6 flex items-center justify-center gap-3">
-              {mitigations.length > 0 && (
-                <button onClick={() => setShowSuggest(true)} className="px-6 py-3 border border-green-300 text-green-700 rounded-lg hover:bg-green-50 transition-colors">
-                  Nachweise vorschlagen
-                </button>
-              )}
-              <button onClick={() => setShowForm(true)} className="px-6 py-3 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors">
-                Erste Verifikation anlegen
-              </button>
-            </div>
+      ) : !showForm && (
+        <div className="bg-white dark:bg-gray-800 rounded-xl border border-gray-200 dark:border-gray-700 p-12 text-center">
+          <div className="w-16 h-16 mx-auto bg-purple-100 dark:bg-purple-900/30 rounded-full flex items-center justify-center mb-4">
+            <svg className="w-8 h-8 text-purple-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+              <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
+            </svg>
           </div>
-        )
+          <h3 className="text-lg font-semibold text-gray-900 dark:text-white">Kein Verifikationsplan vorhanden</h3>
+          <p className="mt-2 text-gray-500 max-w-md mx-auto">
+            Definieren Sie Verifikationsschritte fuer Ihre Schutzmassnahmen.
+            Jede Massnahme sollte durch mindestens eine Verifikation abgedeckt sein.
+          </p>
+          <div className="mt-6 flex items-center justify-center gap-3">
+            {mitigations.length > 0 && (
+              <button onClick={() => setShowSuggest(true)} className="px-6 py-3 border border-green-300 text-green-700 rounded-lg hover:bg-green-50 transition-colors">
+                Nachweise vorschlagen
+              </button>
+            )}
+            <button onClick={() => setShowForm(true)} className="px-6 py-3 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors">
+              Erste Verifikation anlegen
+            </button>
+          </div>
+        </div>
       )}
     </div>
   )