Development: Add compliance checker UI and popover

openapi/openapi.yaml

@@ -88,6 +88,10 @@ paths:
         in: query
         required: true
         schema: {type: string}
+      - name: userLanguage
+        in: query
+        required: false
+        schema: {type: string, default: en}
       requestBody:
         content:
           application/json:
@@ -2806,6 +2810,7 @@ components:
           enum: [CRITICAL_AGG, TRANSPARENCY, GENDER_INCLUSIVE, GENDER_EXCLUSIVE]
         explanation: {type: string}
         id: {type: string}
+        language: {type: string}
         text: {type: string}
     ConflictDataDTO:
       type: object

src/main/java/de/tum/cit/aet/ai/dto/ComplianceIssue.java

@@ -28,4 +28,6 @@ public class ComplianceIssue {
 
     @Enumerated(EnumType.STRING)
     private ComplianceAction action;
+
+    private String language;
 }

src/main/java/de/tum/cit/aet/ai/service/AiService.java

@@ -17,10 +17,7 @@
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.time.Duration;
-import java.util.ArrayList;
-import java.util.List;
-import java.util.Set;
-import java.util.UUID;
+import java.util.*;
 import javax.imageio.ImageIO;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.pdfbox.Loader;
@@ -222,13 +219,14 @@ public ExtractedApplicationDataDTO extractAndPersistPdfData(String applicationId
      *
      * @param jobFormDTO The data transfer object containing the current state of the job posting.
      * @param lang The language identifier (de/en) currently active in the editor.
+     * @param userLang controls the language of explanation texts in the returned issues.
      * @return A list of compliance issues containing the combined legal and linguistic findings.
      */
-    public List<ComplianceIssue> analyzeCurrentJobDescription(JobFormDTO jobFormDTO, String lang) {
+    public List<ComplianceIssue> analyzeCurrentJobDescription(JobFormDTO jobFormDTO, String lang, String userLang) {
         String raw = "de".equals(lang) ? jobFormDTO.jobDescriptionDE() : jobFormDTO.jobDescriptionEN();
         String input = raw != null ? Jsoup.parse(raw).text() : "";
         GenderBiasAnalysisResponse genderAnalysis = genderBiasAnalysisService.analyzeText(input, lang);
-        return analyzeJobDescription(jobFormDTO.title(), jobFormDTO.jobId(), input, lang, genderAnalysis, null);
+        return analyzeJobDescription(jobFormDTO.title(), jobFormDTO.jobId(), input, lang, userLang, genderAnalysis, null);
     }
 
     /**
@@ -245,6 +243,7 @@ public List<ComplianceIssue> analyzeCurrentJobDescription(JobFormDTO jobFormDTO,
      * @param jobId Unique identifier for the job.
      * @param text Extracted raw text of the job description.
      * @param lang the analysis language, expected to be `de` or `en`
+     * @param userLang controls the language of explanation texts in the returned issues.
      * @param analysis Result of the primary linguistic gender analysis.
      * @param translatedAnalysis Second analysis of the translated counterpart.
      * @return A list containing all identified compliance issues.
@@ -255,6 +254,7 @@ public List<ComplianceIssue> analyzeJobDescription(
         UUID jobId,
         String text,
         String lang,
+        String userLang,
         GenderBiasAnalysisResponse analysis,
         GenderBiasAnalysisResponse translatedAnalysis
     ) {
@@ -266,11 +266,13 @@ public List<ComplianceIssue> analyzeJobDescription(
                     u
                         .text(complianceResource)
                         .param("descriptionLanguage", lang)
+                        .param("userLang", userLang)
                         .param("jobDescription", text)
                         .param("title", title != null ? title : "")
                 )
                 .call()
                 .entity(new ParameterizedTypeReference<>() {});
+            complianceIssues.forEach(issue -> issue.setLanguage(lang));
         } catch (Exception e) {
             throw new InternalServerException("Compliance analysis parsing failed", e);
         }

src/main/java/de/tum/cit/aet/ai/web/AiResource.java

@@ -89,16 +89,18 @@ public ResponseEntity<ExtractedApplicationDataDTO> extractPdfData(
      *
      * @param jobForm the job form data used as the basis for the analysis
      * @param descriptionLanguage the language of the job description, `de` or `en`
+     * @param userLanguage        the language in which issue explanations should be returned
      * @return a ResponseEntity containing detected compliance findings
      */
 
     @ProfessorOrEmployeeOrAdmin
     @PostMapping(value = "analyze-job-description", produces = MediaType.APPLICATION_JSON_VALUE)
     public ResponseEntity<List<ComplianceIssue>> analyzeJobDescriptionForCompliance(
         @RequestBody JobFormDTO jobForm,
-        @RequestParam("lang") String descriptionLanguage
+        @RequestParam("lang") String descriptionLanguage,
+        @RequestParam(defaultValue = "en") String userLanguage
     ) {
         log.info("POST /api/ai/analyzeJobDescription - Request received (toLang={})", descriptionLanguage);
-        return ResponseEntity.ok(aiService.analyzeCurrentJobDescription(jobForm, descriptionLanguage));
+        return ResponseEntity.ok(aiService.analyzeCurrentJobDescription(jobForm, descriptionLanguage, userLanguage));
     }
 }

src/main/resources/config/liquibase/changelog/00000000000033_add_ai_compliance_to_jobs.xml

@@ -21,6 +21,7 @@
       <column name="article" type="varchar(255)"/>
       <column name="explanation" type="text"/>
       <column name="action" type="varchar(50)"/>
+      <column name="language" type="varchar(5)"/>
     </createTable>
   </changeSet>
 

src/main/resources/prompts/AnalyzeComplianceText.st

@@ -3,35 +3,33 @@ You are the TUMApply ComplianceReader, an AI legal and compliance assistant for
 TASK:
 Analyze the provided job posting text for legal risks and missing information based on German and EU law.
 The input description language is: {descriptionLanguage}.
+The explanation must be written in: {userLang}.
 You must analyze meaning, not just keywords.
 
 RULES:
 1) CATEGORY CRITICAL_AGG:
   1.
   - Detect discrimination by protected characteristics under section 1 AGG.
   - Detect exclusion based on disability, age, origin, or gender.
-  - Detect requests for unnecessary personal data or sharing with third parties without consent under Art. 5 DSGVO.
-  - JOB TITLE CHECK: If title "{title}" is not gender-neutral with "(m/f/d)" or "(m/w/d)", flag it.
-  2.
-  - Scan for violations of Data Minimization (Art. 5 DSGVO).
-  - This includes requests for unnecessary personal data (e.g., photos, ID copies, criminal records, marital status, religion) or explicit sharing of applicant data with third parties without consent.
-  - Action: Instruct to completely REMOVE the sentence.
+  - JOB TITLE CHECK: Evaluate the "Job Title" provided in the input. If "{title}" is not gender-neutral including "(m/f/d)" or "(m/w/d)", flag it.
 
 2) CATEGORY TRANSPARENCY:
 - Detect missing transparency when applicant data is processed or shared by external parties.
 - This includes mentions of external consultants, partners, systems, or entities involved in recruitment, such as headhunters, assessment centers, ATS providers, or cooperative arrangements with universities or consortia.
+- NOT triggered by: what data is requested from the applicant.
+- Action: Suggest a message that clarifies whether applicant data is shared with external recipients (Art. 13 DSGVO)
 
 INPUT TEXT:
+{title}
 {jobDescription}
 
 OUTPUT:
-- Return ONLY a valid JSON array.
-- No markdown.
-- No prose.
-- One object per issue.
+- Return ONLY a valid JSON array. No markdown. No prose.
+- One object per issue. NEVER merge issues! Each violation gets its own object
 - Object fields must be exactly:
   id, text, category, article, explanation, action
 - category must be exactly CRITICAL_AGG or TRANSPARENCY.
 - action must be exactly REPLACE or ADD or REMOVE.
-- text must be an exact snippet from input text (plain text, no HTML tags).
+- text: MAXIMUM 2-4 WORDS. Extract exact snippet from input text that uniquely identifies the violation (plain text, no HTML tags).
+- explanation must be a single SHORT sentence stating the legal violation directly. Sound like a formal legal notice.
 - If no issues exist, return exactly [].

src/main/resources/prompts/TranslateText.st

@@ -8,7 +8,7 @@ INPUT TEXT (HTML):
 OUTPUT CONSTRAINTS - CRITICAL:
 1. Fidelity: You must preserve the exact formatting of the original text, including line breaks, bullet points, and paragraphs.
 2. Style: Provide a natural, grammatically correct translation that mirrors the professional tone of the source. Prioritize functional equivalence over literal word-for-word translation.
-3. Integrity: Use gender-inclusive language appropriate for Higher Education (e.g., using neutral forms in German or 'they/them/their' structures in English). Avoid words with forbidden stems: [{nonInclusiveWords}]. Rather use alternatives from: [{inclusiveWords}].
+3. Integrity: Use language appropriate for Higher Education (e.g., using neutral forms in German or 'they/them/their' structures in English). Translate ALL content literally and completely. Your task is translation only.
 4. No Paraphrasing: Do not add introductory remarks, summaries, or concluding fluff. Return only the translated text.
 5. Terminology: Ensure legal requirements (e.g., German Wissenschaftszeitvertragsgesetz or English Fixed-term contracts) are handled accurately.
 6. Technical Terms: Keep all industry-standard terminology (e.g., "Java", "Scrum", "Stakeholder", "Python", "fMRI", "TV-L E13", "PyTorch", etc.) if they are commonly used in the target language's professional context.

src/main/webapp/app/generated/api/ai-resource-api.ts

@@ -30,12 +30,16 @@ export class AiResourceApi {
      * 
      * @param lang 
      * @param jobFormDTO 
+     * @param userLanguage 
      */
-    analyzeJobDescriptionForCompliance(lang: string, jobFormDTO: JobFormDTO): Observable<Array<ComplianceIssue>> {
+    analyzeJobDescriptionForCompliance(lang: string, jobFormDTO: JobFormDTO, userLanguage?: string): Observable<Array<ComplianceIssue>> {
         const queryParams = new URLSearchParams();
         if (lang !== undefined && lang !== null) {
             queryParams.set('lang', String(lang));
         }
+        if (userLanguage !== undefined && userLanguage !== null) {
+            queryParams.set('userLanguage', String(userLanguage));
+        }
         const queryString = queryParams.toString();
         const url = `${this.basePath}/api/ai/analyze-job-description${queryString ? `?${queryString}` : ''}`;
         return this.http.post<Array<ComplianceIssue>>(url, jobFormDTO);

src/main/webapp/app/generated/model/compliance-issue.ts

@@ -15,6 +15,7 @@ export interface ComplianceIssue {
     readonly category?: ComplianceIssueCategoryEnum;
     readonly explanation?: string;
     readonly id?: string;
+    readonly language?: string;
     readonly text?: string;
 }
 

src/main/webapp/app/job/job-creation-form/job-creation-form.component.html

@@ -57,6 +57,7 @@ <h1 jhiTranslate="{{ pageTitle() }}"></h1>
                       [required]="true"
                       [model]="basicInfoForm.get('title')?.value"
                       [control]="basicInfoForm.get('title') ?? undefined"
+                      [complianceError]="titleComplianceError() ?? undefined"
                     />
                   </div>
                 </div>
@@ -179,7 +180,9 @@ <h1 jhiTranslate="{{ pageTitle() }}"></h1>
                   [shouldTranslate]="true"
                   [showGenderDecoderButton]="true"
                   height="20rem"
+                  (highlightHovered)="onHighlightHovered($event)"
                 />
+                <jhi-compliance-popover [issue]="activePopoverIssue()" [x]="popoverX()" [y]="popoverY()" />
               </div>
             </div>
           </div>
@@ -204,7 +207,10 @@ <h1 jhiTranslate="{{ pageTitle() }}"></h1>
             [isGenerating]="isGeneratingDraft()"
             [isAnalyzing]="isScoreProcessing()"
             [isRewriteMode]="rewriteButtonSignal()"
+            [currentLang]="currentDescriptionLanguage()"
+            [complianceIssues]="complianceIssues()"
             (generate)="generateJobApplicationDraft()"
+            (filterComplianceCat)="onComplianceFilterChange($event)"
           />
         </aside>
       }