fix(ucca): Route-Konflikt :id vs :assessmentId — TOM-Controls Pfad geaendert

GET /obligations/:id/tom-controls → GET /obligations/tom-controls/for-obligation/:obligationId
Gin erlaubt keine unterschiedlichen Param-Namen auf demselben Pfad-Level.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-compliance/components/sdk/obligations/TOMControlPanel.tsx

@@ -50,7 +50,7 @@ export default function TOMControlPanel({ obligationId, onClose }: TOMControlPan
       setLoading(true)
       setError(null)
       try {
-        const res = await fetch(`${UCCA_API}/${obligationId}/tom-controls`)
+        const res = await fetch(`${UCCA_API}/tom-controls/for-obligation/${obligationId}`)
         if (!res.ok) throw new Error(`HTTP ${res.status}`)
         const data = await res.json()
         setControls(data.controls || [])

ai-compliance-sdk/internal/api/handlers/obligations_handlers.go

@@ -99,7 +99,7 @@ func (h *ObligationsHandlers) RegisterRoutes(r *gin.RouterGroup) {
 		obligations.POST("/assess-from-scope", h.AssessFromScope)
 
 		// v2: TOM Control endpoints
-		obligations.GET("/:id/tom-controls", h.GetTOMControlsForObligation)
+		obligations.GET("/tom-controls/for-obligation/:obligationId", h.GetTOMControlsForObligation)
 		obligations.POST("/gap-analysis", h.GapAnalysis)
 		obligations.GET("/tom-controls/:controlId/obligations", h.GetObligationsForControl)
 	}
@@ -508,7 +508,7 @@ func (h *ObligationsHandlers) AssessFromScope(c *gin.Context) {
 // GetTOMControlsForObligation returns TOM controls linked to an obligation
 // GET /sdk/v1/ucca/obligations/:id/tom-controls
 func (h *ObligationsHandlers) GetTOMControlsForObligation(c *gin.Context) {
-	obligationID := c.Param("id")
+	obligationID := c.Param("obligationId")
 
 	if h.tomMapper == nil {
 		c.JSON(http.StatusNotImplemented, gin.H{"error": "TOM mapping not available"})