Benjamin Admin
60b86be706
check-rebuild-needed.sh war seit Mai funktionsfähig nur fuer 3 von 10
Containern. Die anderen 7 Dockerfiles hatten kein ARG/ENV BUILD_SHA und
docker-compose.yml hat fuer KEINEN Service den Wert durchgereicht — daher
defaultete BUILD_SHA ueberall auf "unknown" und die Drift-Check war
zahnlos.
- ARG BUILD_SHA + ENV BUILD_SHA in 8 zusaetzlichen Dockerfiles
(ai-compliance-sdk, developer-portal, document-crawler, dsms-gateway,
compliance-tts-service, docs-src, docs-site, dsms-node)
- docker-compose.yml: BUILD_SHA: \${BUILD_SHA:-unknown} in jedem build:
Block (10 Services)
- .gitea/workflows/ci.yaml: neuer Job build-sha-integrity validiert dass
jedes Dockerfile ARG+ENV hat und jeder compose-build den Arg durchreicht.
Faellt bei jedem PR/Push gegen master, der einen neuen Service oder
Dockerfile ohne BUILD_SHA einfuehrt.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
dsms-gateway
Python/FastAPI gateway to the IPFS-backed document archival store. Upload, retrieve, verify, and archive legal documents with content-addressed immutability.
Port: 8082 (container: bp-compliance-dsms-gateway)
Stack: Python 3.11, FastAPI, IPFS (Kubo via dsms-node).
Architecture
Phase 4 refactor is complete. main.py is now a thin 41-LOC entry point:
dsms-gateway/
├── main.py # FastAPI app factory, 41 LOC
├── routers/
│ ├── documents.py # /documents, /legal-documents, /verify routes
│ └── node.py # /node routes
├── models.py # Pydantic models
├── dependencies.py # Shared FastAPI dependencies
└── config.py # Settings
See ../AGENTS.python.md.
Run locally
cd dsms-gateway
pip install -r requirements.txt
export IPFS_API_URL=http://localhost:5001
uvicorn main:app --reload --port 8082
Tests
pytest test_main.py -v
27/27 tests pass. Test coverage matches the current module structure.
Public API surface
GET /health
GET /api/v1/documents
POST /api/v1/documents
GET /api/v1/documents/{cid}
GET /api/v1/documents/{cid}/metadata
DELETE /api/v1/documents/{cid}
POST /api/v1/legal-documents/archive
GET /api/v1/verify/{cid}
GET /api/v1/node/info
Every path is a contract — updating requires synchronized updates in consumers.