Files
patrickandClaude Sonnet 5.5 ff5113f0b2
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m2s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 5s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 5s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 23s
CI / Web (dms-browser) (push) Failing after 1m32s
CI / Web (pdf-viewer) (push) Failing after 1m6s
CI / Web (shl) (push) Failing after 14s
Supply-Chain-Scan (Go) / govulncheck (push) Failing after 50s
AI-Pflichttest-Gate / pflichttest-gate (pull_request) Failing after 44s
CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m7s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 6s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 5s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 24s
CI / Web (dms-browser) (pull_request) Failing after 1m31s
CI / Web (pdf-viewer) (pull_request) Failing after 1m2s
CI / Web (shl) (pull_request) Failing after 11s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 10m32s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 51s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 2m1s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Failing after 7m19s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 13m10s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Failing after 3s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Failing after 2s
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
ai: auditclient, httpclient, loadtest, svcauth, tenantregistryclient aus common v0.1.0
Das Pflichttest-Gate von ai verweist nicht mehr auf das geloeschte
svcauth-Paket (common hat ein eigenes Gate).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-27 23:32:34 +01:00

113 lines
3.6 KiB
Go

// Package extractapi ist die HTTP-Bindung fuer Rechnungsdaten-Extraktion
// (EXT-02) samt Plausibilitaetspruefung und Confidence-Score (EXT-03),
// damit eine Oberflaeche (EXT-04) Vorschlaege samt Konfidenz anzeigen kann,
// bevor der Nutzer sie bestaetigt oder korrigiert. Aufrufer ist das
// anfragende Modul (DMS/Mail) bzw. dessen eigene Backend-for-Frontend-Route,
// nicht der Endnutzer direkt — Service-Token-Pflicht wie summaryapi/
// semanticsearchapi, fail closed. Die eigentliche Uebernahme in die
// Metadaten des aufrufenden Moduls ist nicht Bestandteil dieses Pakets
// (EXT-04 "Nicht Bestandteil").
package extractapi
import (
"encoding/json"
"net/http"
"gitea.perlbach24.de/scripte/nexarch/ai/internal/extractvalidate"
"gitea.perlbach24.de/scripte/nexarch/ai/internal/invoiceextract"
"gitea.perlbach24.de/scripte/nexarch/common/svcauth"
)
type Server struct {
extractor *invoiceextract.Extractor
rules extractvalidate.RuleSet
serviceToken string
}
func NewServer(extractor *invoiceextract.Extractor, rules extractvalidate.RuleSet, serviceToken string) *Server {
return &Server{extractor: extractor, rules: rules, serviceToken: serviceToken}
}
func (s *Server) RegisterRoutes(mux *http.ServeMux) {
mux.HandleFunc("POST /invoices/extract", s.requireAuth(s.handleInvoiceExtract))
}
func (s *Server) requireAuth(next http.HandlerFunc) http.HandlerFunc {
return func(w http.ResponseWriter, r *http.Request) {
got := r.Header.Get("X-Service-Token")
if !svcauth.Equal(got, s.serviceToken) {
writeError(w, http.StatusUnauthorized, "service-token fehlt oder ist ungueltig")
return
}
next(w, r)
}
}
type invoiceExtractRequest struct {
Text string `json:"text"`
}
type fieldSuggestion struct {
Value string `json:"value"`
Present bool `json:"present"`
Confidence float64 `json:"confidence"`
Plausible bool `json:"plausible"`
Reasons []string `json:"reasons,omitempty"`
}
type invoiceExtractResponse struct {
Fields map[string]fieldSuggestion `json:"fields"`
OverallScore float64 `json:"overall_score"`
Valid bool `json:"valid"`
RejectReason string `json:"reject_reason,omitempty"`
}
func (s *Server) handleInvoiceExtract(w http.ResponseWriter, r *http.Request) {
var req invoiceExtractRequest
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
writeError(w, http.StatusBadRequest, "ungueltiger anfrage-koerper")
return
}
if req.Text == "" {
writeError(w, http.StatusBadRequest, "leerer dokumenttext")
return
}
result, err := s.extractor.Extract(r.Context(), req.Text)
if err != nil {
writeError(w, http.StatusInternalServerError, "extraktion fehlgeschlagen")
return
}
validation := extractvalidate.Validate(result.Fields, s.rules)
fields := make(map[string]fieldSuggestion, len(result.Fields.Fields))
for name, fr := range result.Fields.Fields {
fv := validation.Fields[name]
fields[name] = fieldSuggestion{
Value: fr.Value,
Present: fr.Present,
Confidence: fv.Confidence,
Plausible: fv.Plausible,
Reasons: fv.Reasons,
}
}
writeJSON(w, http.StatusOK, invoiceExtractResponse{
Fields: fields,
OverallScore: validation.OverallScore,
Valid: result.Valid,
RejectReason: result.RejectReason,
})
}
func writeJSON(w http.ResponseWriter, status int, v any) {
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(status)
_ = json.NewEncoder(w).Encode(v)
}
func writeError(w http.ResponseWriter, status int, message string) {
writeJSON(w, status, map[string]string{"error": message})
}