# archivmail — Dateiindex

> Vollständiger Überblick aller Dateien und ihrer Funktion. Stand: 2026-03-31.

---

## Konfigurationsdateien (Root)

- `go.mod` — Go-Moduldefinition (pgx, imap, smtp, jwt, ldap, crypto, yaml)
- `go.sum` — Go-Dependency-Lockfile
- `package.json` — Next.js/Node.js Projektdefinition (React, Tailwind, shadcn/ui)
- `package-lock.json` — npm-Lockfile
- `tsconfig.json` — TypeScript-Konfiguration
- `components.json` — shadcn/ui Konfiguration (Alias-Pfade, Style)
- `docker-compose.yml` — Docker-Komposedatei für lokale Entwicklung
- `config.test.yml` — Test-Konfiguration
- `CLAUDE.md` — Projektdokumentation für Claude (Architektur, Konventionen)
- `CODEBASE.md` — Dieser Dateiindex
- `DEVLOG.md` — Entwicklungslog
- `.eslintrc.json` — ESLint-Konfiguration

---

## cmd/ — Go-Einstiegspunkte

### cmd/archivmail/
- `main.go` — HTTP-API-Server: initialisiert Storage, Index, Auth, SMTP-Daemon, IMAP-Server, Audit, Mailer, Tenants, Labels, TokenStore
- `cmd_import.go` — `archivmail import`: EML/MBOX-Import mit --file/--dir/--recursive/--dry-run
- `cmd_export.go` — `archivmail export`: Export als EML/MBOX mit Filtern
- `cmd_import_piler.go` — `archivmail import-piler`: Import aus piler-Archiven
- `cmd_migrate_tenants.go` — `archivmail migrate-tenants`: E-Mails zu Mandanten-Index migrieren
- `version.go` — AppVersion + Modul-Versionen

### cmd/archivmail-export/
- `main.go` — Standalone-Export-Tool (alle Mails → EML-Verzeichnis)

### cmd/archivmail-import/
- `main.go` — Standalone-Import-Tool (EML-Batch mit Indexierung)

---

## internal/ — Interne Go-Pakete

### internal/api/
- `server.go` — Server-Struct, alle Routen, Middleware (auth, tenant, requireRole)
- `auth_handlers.go` — Login, Logout, Passwort-Änderung, TOTP-Init/Verify
- `onboarding_handlers.go` — Signup, Email-Verifikation, Forgot-Password, Reset-Password (PROJ-28)
- `invite_handlers.go` — Einladungslinks erstellen + prüfen (PROJ-28)
- `totp_handlers.go` — TOTP-Enrollment und Verification
- `search_handlers.go` — GET /api/search: Fulltext-Suche mit Paginierung
- `mail_handlers.go` — GET /api/mails/{id}: Mail-Abruf, Attachments, Raw
- `admin_handlers.go` — User-CRUD, Audit-Log, Health, Version
- `quota_handlers.go` — Tenant-Quota GET/SET, Usage-Abfrage (PROJ-29)
- `retention_handlers.go` — Retention-Policy, Purge (PROJ-34)
- `import_handlers.go` — Batch-Mail-Upload mit Progress-Tracking (Job-ID)
- `export.go` — Export-Endpoint (EML/ZIP)
- `dashboard_handlers.go` — System-Statistiken: Storage, Mails, Uptime, Aktivität
- `cert_handlers.go` — TLS-Zertifikat-Verwaltung
- `imap_settings_handlers.go` — IMAP-Modus-Konfiguration pro Tenant
- `label_handlers.go` — Label-CRUD + Auto-Rules
- `ldap_sync.go` — LDAP-Benutzer-Synchronisation
- `ldap_tenants.go` — Per-Tenant-LDAP-Endpoints (PROJ-23)
- `profile_handlers.go` — GET/PATCH /api/profile
- `version_handlers.go` — GET /api/version
- `upload.go` — Upload-Job-Management

### internal/auth/
- `auth.go` — JWT-Issuing, bcrypt-Passwort-Hashing, LDAP-Fallback, Tenant-Kontext
- `totp.go` — TOTP (RFC 6238), QR-Code-Generierung

### internal/audit/
- `audit.go` — Audit-Logger: DB + Flat-File, alle sicherheitsrelevanten Ereignisse

### internal/storage/
- `storage.go` — AES-256-GCM-Dateispeicher + PostgreSQL-Metadaten, SHA-256-Dedup
- `quota.go` — CheckQuota() mit 60s-Cache, ErrQuotaExceeded (PROJ-29)
- `storage_stats.go` — MailActivityStats(), StorageEstimateStats()

### internal/index/
- `index.go` — Indexer-Interface + Factory (Xapian, Stub)
- `xapian.go` — Xapian-CGO-Wrapper (Volltext-Index)
- `xapian_stub.go` — Stub für Builds ohne Xapian
- `worker.go` — Async Index-Worker (Queue)
- `tenant_manager.go` — TenantIndexManager (Pro-Tenant-Indizes)
- `tenant_worker.go` — Tenant-aware Index-Worker

### internal/imap/
- `store.go` — IMAP-Account-Store (verschlüsselte Credentials)
- `client.go` — IMAP-Client (Verbindung, Fetch)
- `importer.go` — IMAP-Importer (Sync → Storage)
- `scheduler.go` — Periodischer IMAP-Sync

### internal/imapserver/
- `server.go` — IMAP4-Archive-Server (Read-Only, PROJ-26)

### internal/pop3/
- `store.go` — POP3-Account-Store
- `client.go` — POP3-Client
- `importer.go` — POP3-Importer

### internal/smtpd/
- `smtpd.go` — SMTP-Daemon: eingehende Mails → Storage + Index, Tenant-Routing

### internal/ldapauth/
- `client.go` — LDAP-Authentifizierung gegen AD/OpenLDAP

### internal/ldapconfig/
- `store.go` — Globale LDAP-Konfiguration (verschlüsselt)
- `tenant_store.go` — Per-Tenant-LDAP-Konfiguration (PROJ-23)

### internal/mailer/
- `mailer.go` — SMTP-Out-Client via net/smtp (TLS + STARTTLS), kein externer Dependency
- `templates.go` — HTML+Text-Templates: Verify, Reset, Invite, AlreadyRegistered

### internal/userstore/
- `userstore.go` — User-CRUD: Create, CreateInactive, Activate, GetByEmail, SetPassword, VerifyPassword, Update, Delete, List

### internal/tenantstore/
- `store.go` — Tenant-CRUD + Domains, IMAP-Modus, Retention-Days, Logo
- `quota.go` — SetQuota(), GetQuota(), GetUsage() (PROJ-29)

### internal/labelstore/
- `store.go` — Label-CRUD + Auto-Rules (From/To/Subject-basiert)

### internal/tokenstore/
- `store.go` — auth_tokens: Create (32-Byte random, SHA-256), Use (einmalig), Peek, Cleanup (PROJ-28)

---

## pkg/ — Öffentliche Pakete

### pkg/mailparser/
- `parser.go` — RFC 5822 Parser: From, To, CC, Subject, Body (Text+HTML), Attachments
- `mbox.go` — MBOX-Splitter

---

## config/
- `config.go` — YAML-Konfiguration: ServerConfig (fqdn), APIConfig, StorageConfig, DatabaseConfig, SMTPConfig, SMTPOutConfig, IndexConfig, AuditConfig, IMAPServerConfig

---

## src/app/ — Next.js Seiten (App Router)

- `layout.tsx` — Root-Layout: Navbar, Theme-Provider, Toaster
- `page.tsx` — Login: Username/Passwort, Links zu Signup + Forgot-Password
- `signup/page.tsx` — Self-Service Registrierung (+ Invite-Token-Support)
- `verify/page.tsx` — Email-Verifikation via Token
- `forgot-password/page.tsx` — Passwort-Reset-Anfrage
- `reset-password/page.tsx` — Neues Passwort setzen via Token
- `search/page.tsx` — Fulltext-Suche mit Filtern, Pagination, Labels
- `mail/[id]/page.tsx` — Mail-Detail: Headers, Body, Attachments
- `settings/page.tsx` — Profil, Passwort, TOTP, Labels, IMAP/POP3
- `imap/page.tsx` — IMAP-Account-Konfiguration
- `pop3/page.tsx` — POP3-Account-Konfiguration
- `admin/page.tsx` — Admin-Dashboard (Multi-Tab)
- `admin/upload/page.tsx` — Batch-Mail-Import mit Progress

---

## src/components/

### src/components/ui/ (shadcn/ui Primitive)
`button`, `input`, `card`, `dialog`, `alert`, `alert-dialog`, `toast`, `toaster`, `sonner`, `select`, `checkbox`, `radio-group`, `switch`, `tabs`, `accordion`, `table`, `form`, `label`, `textarea`, `dropdown-menu`, `popover`, `tooltip`, `breadcrumb`, `pagination`, `badge`, `separator`, `scroll-area`, `skeleton`, `command`, `sheet`, `sidebar`, `navigation-menu`, `avatar`, `progress`, `collapsible`

### src/components/ (Business-Komponenten)
- `navbar.tsx` — Top-Navigation mit Logo, User-Menu, Theme-Toggle
- `UserNav.tsx` — User-Dropdown (Profil, Settings, Logout)
- `theme-toggle.tsx` — Light/Dark-Mode Toggle
- `theme-provider.tsx` — next-themes Provider
- `LabelList.tsx` — Label-Navigation
- `LabelPicker.tsx` — Label-Picker Dropdown
- `page-skeleton.tsx` — Loading-Skeleton

### src/components/admin/
- `ModulesTab.tsx` — Feature-Module-Übersicht
- `UserDialogs.tsx` — Create/Edit/Delete User Dialogs
- `TenantLDAPDialog.tsx` — LDAP-Konfiguration für Mandant

### src/components/admin/tabs/
- `DashboardTab.tsx` — System-Stats, Uptime, Mail-Aktivität, Storage-Prognose
- `UsersTab.tsx` — User-CRUD mit Rollen
- `TenantsTab.tsx` — Mandanten-CRUD + Domains
- `LDAPTab.tsx` — Globale LDAP-Konfiguration
- `TenantLDAPTab.tsx` — Per-Tenant-LDAP
- `LabelsTab.tsx` — Label + Auto-Rules Verwaltung
- `AuditTab.tsx` — Audit-Log Viewer
- `RetentionTab.tsx` — GoBD-Retention pro Tenant (PROJ-34)
- `QuotaTab.tsx` — Storage-Quota pro Tenant mit Usage-Balken (PROJ-29)
- `SecurityTab.tsx` — Security-Audit + Fixes
- `CertTab.tsx` — TLS-Zertifikat-Verwaltung
- `IMAPSettingsTab.tsx` — IMAP-Modus-Einstellung
- `ImportTab.tsx` — Batch-Import-Tool
- `ServicesTab.tsx` — Service-Status (SMTP, IMAP, POP3)

---

## src/lib/

### src/lib/api/
- `index.ts` — Re-Export aller API-Funktionen (Kompatibilität)
- `core.ts` — HTTP-Client mit Credentials, Error-Handling
- `users.ts` — User-API: getUsers, createUser, updateUser, deleteUser, TOTP
- `mail.ts` — Mail-API: searchEmails, getMail, downloadAttachment, IMAP/POP3
- `system.ts` — System-API: getHealth, getStats, getServices, getAuditLog, Labels, Certs
- `tenants.ts` — Tenant-API: CRUD, Domains, Logo, LDAP, Quota (PROJ-29)
- `ldap.ts` — LDAP-API: getLDAPConfig, saveLDAPConfig, testLDAP, syncLDAP

### src/lib/
- `auth-cache.ts` — Client-side Auth-Cache (localStorage, TTL)
- `utils.ts` — classname merging, Datums-Formatierung

---

## src/hooks/
- `useAuth.ts` — Aktueller User + login/logout
- `useLDAPConfig.ts` — Globale LDAP-Konfiguration
- `useTenantLDAPConfig.ts` — Per-Tenant-LDAP
- `useTenantUsers.ts` — Benutzer eines Mandanten
- `use-toast.ts` — Toast-Benachrichtigungen
- `use-mobile.tsx` — Responsive-Breakpoint (768px)

---

## features/ — Feature-Spezifikationen

| ID | Datei | Thema |
|----|-------|-------|
| PROJ-1 | `PROJ-1-authentifizierung-und-rollen.md` | JWT-Auth, RBAC |
| PROJ-2 | `PROJ-2-import-eml-mbox.md` | EML/MBOX-Import |
| PROJ-3 | `PROJ-3-import-imap.md` | IMAP-Sync |
| PROJ-4 | `PROJ-4-import-smtp.md` | SMTP-Daemon |
| PROJ-5 | `PROJ-5-speicherung-und-indexierung.md` | AES-256-GCM Storage, Xapian |
| PROJ-6 | `PROJ-6-volltext-suche.md` | Volltext-Suche |
| PROJ-7 | `PROJ-7-email-ansicht.md` | Mail-Viewer |
| PROJ-8 | `PROJ-8-imap-auto-sync.md` | IMAP-Scheduler |
| PROJ-9 | `PROJ-9-ordner-und-labels.md` | Labels + Auto-Rules |
| PROJ-10 | `PROJ-10-admin-bereich.md` | Admin-Panel |
| PROJ-11 | `PROJ-11-audit-log.md` | Audit-Logging |
| PROJ-12 | `PROJ-12-export.md` | EML/MBOX-Export |
| PROJ-13 | `PROJ-13-rest-api-crm.md` | REST-API für CRM |
| PROJ-14 | `PROJ-14-import-pop3.md` | POP3-Import |
| PROJ-15 | `PROJ-15-cli-import-export.md` | CLI-Tools |
| PROJ-16 | `PROJ-16-ldap-active-directory.md` | LDAP/AD-Integration |
| PROJ-17 | `PROJ-17-system-dashboard.md` | System-Dashboard |
| PROJ-18 | `PROJ-18-integritaetspruefung.md` | SHA-256-Integrity-Check |
| PROJ-19 | `PROJ-19-import-piler.md` | piler-Migration |
| PROJ-20 | `PROJ-20-nutzer-loeschung.md` | GoBD-konforme Löschung |
| PROJ-21 | `PROJ-21-multi-tenancy.md` | Multi-Tenancy |
| PROJ-22 | `PROJ-22-ldap-webgui.md` | LDAP-Web-GUI |
| PROJ-23 | `PROJ-23-tenant-ldap-pro-mandant.md` | Per-Tenant-LDAP |
| PROJ-24 | `PROJ-24-totp-zwei-faktor.md` | TOTP-2FA |
| PROJ-25 | `PROJ-25-user-profil-einstellungen.md` | User-Profil |
| PROJ-26 | `PROJ-26-imap-server-schnittstelle.md` | IMAP-Archive-Server |
| PROJ-27 | `PROJ-27-container-ready.md` | Docker-Support |
| PROJ-28 | `PROJ-28-self-service-onboarding.md` | Signup, Verify, Password-Reset |
| PROJ-29 | `PROJ-29-tenant-quotas.md` | Tenant-Quotas |
| PROJ-30 | `PROJ-30-bleve-migration.md` | Xapian → Manticore |
| PROJ-31 | `PROJ-31-billing-subscriptions.md` | Billing (geplant) |
| PROJ-32 | `PROJ-32-message-id-dedup.md` | Message-ID-Dedup |
| PROJ-33 | `PROJ-33-imap-modus-shared-personal.md` | IMAP Shared/Personal |
| PROJ-34 | `PROJ-34-retention-policy.md` | GoBD-Retention |