Benjamin Admin
216c7b8eca
CI / detect-changes (push) Successful in 8s
CI / branch-name (push) Has been skipped
CI / build-sha-integrity (push) Failing after 4s
CI / validate-canonical-controls (push) Successful in 10s
CI / loc-budget (push) Successful in 14s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / nodejs-build (push) Successful in 2m21s
CI / test-go (push) Failing after 37s
CI / iace-gt-coverage (push) Successful in 23s
CI / test-python-backend (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / test-python-document-crawler (push) Has been skipped
CI / test-python-dsms-gateway (push) Successful in 17s
Punkt 1 — UI-CID-Badge nach erfolgreichem Tech-File-Export:
- archiveTechFile setzt X-DSMS-CID / X-DSMS-Filename / X-DSMS-Size response
headers + Access-Control-Expose-Headers, sobald DSMS-Archive durchlief
- Split iace_handler_techfile.go (war ueber 500 LOC) → archiveTechFile lebt
jetzt in iace_handler_techfile_archive.go, setDSMSResponseHeaders als
pure Helper mit 3 unit tests
- Next.js IACE-Proxy forwarded die X-DSMS-* Header und erkennt jetzt auch
XLSX/DOCX/MD als Binary-Response (vorher nur PDF/ZIP/octet-stream)
- ExportCIDBadge.tsx zeigt CID, Filename, Groesse + Kopieren-Button +
"Verlauf anzeigen" (oeffnet CIDHistoryModal)
Punkt 2 — Bulk-Diff Report V1 → V_latest:
- Neuer Endpoint GET /api/v1/documents/{cid}/bulk-diff im dsms-gateway:
laeuft parent_cid-Kette ab, berechnet chronologische Step-Diffs,
aggregiert Totals (added/removed lines, metadata_fields_changed,
binary_steps). Edge-Cases: einzelne Version, binaere Steps, abgebrochene
Kette
- BulkDiffPanel.tsx zeigt 4-Stat-Header + Step-Tabelle
- CIDHistoryModal bekommt Toggle-Button "Bulk-Diff V1 → V_latest anzeigen"
neben dem Versions-Counter; damit auch vom IACE-Export-Badge erreichbar
Tests: 3 neue Go-Tests, 4 neue pytest-Tests, alle gruen
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
66 lines
2.1 KiB
Go
66 lines
2.1 KiB
Go
package handlers
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/breakpilot/ai-compliance-sdk/internal/dsms"
|
|
"github.com/breakpilot/ai-compliance-sdk/internal/iace"
|
|
"github.com/breakpilot/ai-compliance-sdk/internal/rbac"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
// archiveTechFile stores a tech-file export to DSMS (best-effort, non-blocking)
|
|
// AND records the resulting CID in the IACE audit trail so the export is
|
|
// traceable. The "new_values" JSON carries the CID + filename so the audit
|
|
// timeline can later resolve the CID against the DSMS gateway for verify.
|
|
//
|
|
// Side-effect: when the archive succeeds, X-DSMS-CID / X-DSMS-Filename /
|
|
// X-DSMS-Size response headers are attached so the frontend can render an
|
|
// inline CID-badge directly in the export-success path (no separate audit
|
|
// query needed). Headers are written before c.Data() and survive the binary
|
|
// blob response.
|
|
func (h *IACEHandler) archiveTechFile(c *gin.Context, data []byte, filename string, projectID uuid.UUID) {
|
|
result := dsms.Archive(data, filename, "ce_techfile", projectID.String(), "1")
|
|
if result == nil || result.CID == "" {
|
|
return
|
|
}
|
|
|
|
setDSMSResponseHeaders(c, result.CID, filename, result.Size)
|
|
|
|
if h.store == nil {
|
|
return
|
|
}
|
|
payload := map[string]string{
|
|
"cid": result.CID,
|
|
"filename": filename,
|
|
"size": fmt.Sprintf("%d", result.Size),
|
|
}
|
|
newValues, _ := json.Marshal(payload)
|
|
userID := rbac.GetUserID(c)
|
|
_ = h.store.AddAuditEntry(
|
|
c.Request.Context(),
|
|
projectID,
|
|
"tech_file_export",
|
|
projectID,
|
|
iace.AuditActionCreate,
|
|
userID.String(),
|
|
nil,
|
|
newValues,
|
|
)
|
|
}
|
|
|
|
// setDSMSResponseHeaders attaches the X-DSMS-* headers so the frontend can
|
|
// surface the archived CID inline (export-success badge) without re-querying
|
|
// the audit trail. Pure helper — no store, no side effects beyond headers.
|
|
func setDSMSResponseHeaders(c *gin.Context, cid, filename string, size int) {
|
|
if cid == "" {
|
|
return
|
|
}
|
|
c.Header("X-DSMS-CID", cid)
|
|
c.Header("X-DSMS-Filename", filename)
|
|
c.Header("X-DSMS-Size", fmt.Sprintf("%d", size))
|
|
c.Header("Access-Control-Expose-Headers", "X-DSMS-CID, X-DSMS-Filename, X-DSMS-Size")
|
|
}
|