Benjamin Admin
bb183b0e75
CI / detect-changes (push) Successful in 12s
CI / branch-name (push) Has been skipped
CI / test-python-backend (push) Successful in 33s
CI / test-python-document-crawler (push) Successful in 23s
CI / test-python-dsms-gateway (push) Successful in 19s
CI / guardrail-integrity (push) Has been skipped
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / build-sha-integrity (push) Failing after 7s
CI / validate-canonical-controls (push) Successful in 16s
CI / loc-budget (push) Failing after 18s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / nodejs-build (push) Successful in 2m27s
CI / test-go (push) Failing after 46s
CI / iace-gt-coverage (push) Successful in 25s
Introduces the sustainable backend replacement for the hardcoded inline rules in
admin-compliance/app/sdk/document-generator/templateRecommendations.ts.
What's in this commit (Phase 1.1 - 1.5 of the rustling-yawning-boot plan):
- Migration 147: 4 new tables
- compliance_template_rules (rule shell, document_type, current_version_id)
- compliance_template_rule_versions (lifecycle, JSONB conditions,
source_citation, change_summary, approval timestamps)
- compliance_template_rule_approvals (audit trail)
- compliance_tenant_rule_overrides (per-tenant classification overrides)
Plus partial unique index for "only one is_live=1 version per rule".
- SQLAlchemy models: TemplateRuleDB, TemplateRuleVersionDB,
TemplateRuleApprovalDB, TenantRuleOverrideDB (compliance/db/).
- Pydantic schemas (compliance/schemas/template_rule.py): full request/response
set including RecommendationRequest/Result with reasons and override tracking.
- TemplateRuleService (compliance/services/): CRUD + Lifecycle transitions
(submit_for_review/approve/publish/reject) following legal_document_service.py
pattern with _transition() helper and approval audit trail. Plus tenant
override upsert.
- RecommendationService: condition evaluator (eq, neq, in, not_in, gte/lte/gt/lt,
exists, truthy) over JSONB conditions, override application, reason generation
for human-readable explanations in workspace UI.
- 18 FastAPI routes in compliance/api/template_rule_routes.py covering rule CRUD,
version lifecycle, override management and POST /recommend evaluation endpoint.
- Seed data: 33 initial rules ported from templateRecommendations.ts in
compliance/data/template_rule_seed_data.py, written as published versions
on first seed run. Idempotent via rule_key.
Phase 1.6 (pytest suite) and Phase 2 (editorial UI in admin-compliance) follow
in separate commits.
[migration-approved]
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
89 lines
2.3 KiB
Python
89 lines
2.3 KiB
Python
"""API routes for Compliance module."""
|
|
|
|
import logging
|
|
|
|
from .routes import router
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
_failed_routers: dict[str, str] = {}
|
|
|
|
|
|
def _safe_import_router(module_name: str, attr: str = "router"):
|
|
"""Import a router module safely — log error but don't crash the whole app."""
|
|
try:
|
|
mod = __import__(f"compliance.api.{module_name}", fromlist=[attr])
|
|
return getattr(mod, attr)
|
|
except Exception as e:
|
|
logger.error("Failed to import %s: %s", module_name, e)
|
|
_failed_routers[module_name] = str(e)
|
|
return None
|
|
|
|
|
|
# Import all sub-routers (safe — failure of one doesn't block others)
|
|
_ROUTER_MODULES = [
|
|
"audit_routes",
|
|
"ai_routes",
|
|
"evidence_routes",
|
|
"risk_routes",
|
|
"dashboard_routes",
|
|
"scraper_routes",
|
|
"module_routes",
|
|
"isms_routes",
|
|
"vvt_routes",
|
|
"legal_document_routes",
|
|
"einwilligungen_routes",
|
|
"einwilligungen_export_routes",
|
|
"escalation_routes",
|
|
"consent_template_routes",
|
|
"notfallplan_routes",
|
|
"obligation_routes",
|
|
"security_backlog_routes",
|
|
"quality_routes",
|
|
"loeschfristen_routes",
|
|
"legal_template_routes",
|
|
"compliance_scope_routes",
|
|
"dsfa_routes",
|
|
"dsr_routes",
|
|
"email_template_routes",
|
|
"banner_routes",
|
|
"extraction_routes",
|
|
"tom_routes",
|
|
"vendor_compliance_routes",
|
|
"incident_routes",
|
|
"change_request_routes",
|
|
"generation_routes",
|
|
"project_routes",
|
|
"wiki_routes",
|
|
"canonical_control_routes",
|
|
"control_generator_routes",
|
|
"crosswalk_routes",
|
|
"process_task_routes",
|
|
"evidence_check_routes",
|
|
"vvt_library_routes",
|
|
"tom_mapping_routes",
|
|
"llm_audit_routes",
|
|
"assertion_routes",
|
|
"org_role_routes",
|
|
"document_review_routes",
|
|
"banner_analytics_routes",
|
|
"banner_ab_routes",
|
|
"compliance_report_routes",
|
|
"whistleblower_routes",
|
|
"tcf_routes",
|
|
"founding_wizard_routes",
|
|
"licenses_routes",
|
|
"template_rule_routes",
|
|
]
|
|
|
|
_loaded_count = 0
|
|
for _mod_name in _ROUTER_MODULES:
|
|
_sub_router = _safe_import_router(_mod_name)
|
|
if _sub_router is not None:
|
|
router.include_router(_sub_router)
|
|
_loaded_count += 1
|
|
|
|
logger.info("Loaded %d/%d compliance sub-routers", _loaded_count, len(_ROUTER_MODULES))
|
|
|
|
__all__ = ["router"]
|