Commit Graph
200 Commits
Author SHA1 Message Date
patrickandClaude Sonnet 5 78ab9a1300 docs/shl: Tote Kanban-Verweise entfernt, Modul-Href-Dopplung aufgeloest
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Fable-Review auf Code-Dopplung/interne Links (siehe Analyse). P0-Funde:

- Dangling Prosa-Verweise auf die per PR #367 geloeschten *-kanban/-Ordner
  in SKALIERUNGSKONZEPT.md, STORAGE-KONZEPT.md, MIGRATIONSKONZEPT.md,
  SICHERHEITSKONZEPT.md (7x "siehe X-kanban/README.md"), PRODUKTARCHITEKTUR.md
  um Hinweis ergaenzt, dass Boards jetzt in main-Historie/Gitea-PRs liegen.
- dms/internal/searchsync/searchsync_test.go:19: falscher Pfad im Kommentar
  ("internal/bulkedit"/"internal/jobqueue" statt "dms/internal/...").
- web/shl/components/ModuleNavShell.tsx: resolveHrefClientOnly war inhaltlich
  identisch zu resolveModuleHref in web/portal/app/ModuleGrid.tsx (zwei
  unabhaengig gepflegte Kopien derselben Hostname-Ersetzung). Als
  resolveModuleHref aus shl exportiert, ModuleGrid.tsx nutzt jetzt die
  gemeinsame Funktion, Test-Import entsprechend umgestellt.
- web/portal/lib/modules.test.ts: KNOWN_REAL_PERMISSIONS-Whitelist hatte
  kennzahlen.read (migrations/0019_kennzahlen_policy_rule.up.sql, real
  existierend seit ANA-02/PR #362) nie nachgetragen, Test lief seitdem
  unbemerkt im Fehler. Ergaenzt.

go test/vitest: web/portal (15/15) und web/shl (61/61) gruen auf Testhost 131.
Verbleibender P0-Punkt (14 Web-Apps ohne ModuleNavShell) braucht
Produktentscheidung -- mehrere Registry-Keys (ai/mail/workflow/connect)
sind bereits durch eine jeweils ANDERE App belegt als die ohne Navigation
(z.B. mail-search hat "mail", mail-postfach nicht), daher keine mechanische
Zuordnung moeglich ohne zu raten.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 13:09:53 +02:00
patrickandClaude Sonnet 5 4e61badac5 Merge PR #306: UX-02: E-Mail-Detailansicht & Thread-Darstellung (Mail, stackt auf PR #298 UX-01)
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Mail-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
Groesster bisheriger Konflikt dieser Merge-Runde (4 Dateien, davon 2
add/add: MessageDetail.tsx/test.tsx existierten bereits als UX-04-
Platzhalter, UX-02 ersetzt sie durch die echte Implementierung mit
Thread-Gruppierung/Anhang-Download):

- mail/internal/mailapi/mailapi.go + openapi.yaml: beide Branches
  implementierten unabhaengig denselben Anhangslisten-Endpunkt
  (UX-03/UX-02), Kommentare zusammengefuehrt, keine Logikaenderung.
- mail/internal/mailapi/mailapi_test.go: dadurch doppelte Tests +
  doppelte realPDFBytes/realPNGBytes-Konstante automerged, die
  schwaechere Kopie entfernt (reichere Variante mit Size-Pruefung behalten).
- components/MessageDetail.tsx/test.tsx: UX-04-Platzhalter durch
  UX-02s vollstaendige Implementierung ersetzt (neue Props:
  messageId/messages/onSelectMessage/onClose statt message/onBack).
- components/MessageList.tsx/test.tsx: UX-02s natives <button>-Pattern
  (Tastaturaktivierbarkeit ohne eigene Keydown-Logik) uebernommen,
  Prop onSelect -> onSelectMessage umbenannt, Tests entsprechend
  angepasst (user-event fuer echte Enter-Taste-Simulation).
- app/page.tsx: UX-04s responsives Layout (Drawer/mobileView) als
  Grundlage behalten, UX-02s Detail-Wiring (messageId-State,
  MessageDetail-Props) eingebaut.
- lib/messages.ts: mail.detail.*-Schluessel fehlten auf Englisch,
  nachuebersetzt statt nur dupliziert.
- app/page.test.tsx: fetchMessageDetail/fetchAttachments mussten in
  allen Tests ein aufgeloestes Promise liefern (MessageDetail ruft sie
  jetzt immer bei Auswahl auf), nicht nur als Export existieren.

go build/vet sauber, go test ./internal/mailapi/...: alle gruen bis auf
den bereits vor diesem Merge auf main bestehenden Testfehler
(anhang_download_erfolg, siehe PR #298). npx vitest run: 82/82 Tests
gruen (web/mail-postfach), beides auf Testhost 131 verifiziert.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:50:22 +02:00
patrickandClaude Sonnet 5 479c99cbf1 Merge PR #304: QA-08: Barrierefreiheits-Audit (Mail, stackt auf PR #298 UX-01)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
Konflikt in MessageList.test.tsx: beide Seiten fuegten Tests am
Dateiende an (UX-04 onSelect/Klick/Tastatur-Navigation, QA-08
tabIndex-Fix fuer den scrollbaren Listbox-Container), additiv
zusammengefuehrt.

npx vitest run: 59/59 Tests gruen (web/mail-postfach), auf Testhost 131 verifiziert.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:43:55 +02:00
patrickandClaude Sonnet 5 1815cb500f Merge PR #303: UX-04: Responsive Layout & mobile Navigation (Mail, stackt auf PR #298 UX-01)
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Konfliktaufloesung:
- app/layout.tsx: additive Imports (ThemeToggle + responsive.css)
- app/page.tsx: UX-04s responsive Mobile-Layout (Drawer/Dialog) als
  Basis uebernommen, UX-06s LanguageSwitcher + formatNumber(locale)
  hineingefuehrt
- lib/messages.ts: beide Schluesselsaetze zusammengefuehrt, fehlende
  englische Uebersetzungen fuer UX-04s neue Schluessel (folderToggle,
  detailHeading, ...) ergaenzt
- app/i18n.test.tsx: 'Ordner' kommt durch UX-04s Mobile-Bar jetzt
  doppelt im DOM vor (Button + Ueberschrift), Test auf getAllByText
  umgestellt statt auf Eindeutigkeit zu bestehen

npx vitest run: 56/56 Tests gruen (web/mail-postfach), auf Testhost 131 verifiziert.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:43:06 +02:00
patrickandClaude Sonnet 5 500a05c3b9 Merge PR #300: UX-05: Dunkles Erscheinungsbild & Theming (Mail, stackt auf PR #298 UX-01)
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Konflikt in web/mail-postfach/app/layout.tsx: UX-06 (dynamisches
initialLocale) und UX-05 (ThemeToggle im Provider-Baum) aenderten
denselben JSX-Block unabhaengig voneinander. Beide Aenderungen
kombiniert, kein Verhaltensverlust auf beiden Seiten.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:40:37 +02:00
patrickandClaude Sonnet 5 a415c46bea Merge PR #299: UX-06: Mehrsprachigkeit Deutsch/Englisch (Mail, stackt auf PR #298 UX-01)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Keine Konflikte mehr nach Merge von #298 (war nur dagegen gestackt).
Reine Next.js/i18n-Aenderung (web/mail-postfach), kein Go-Code betroffen.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:40:15 +02:00
patrickandClaude Sonnet 5 b05d223543 Merge PR #298: UX-01: Postfach- & Ordneransicht (Mail)
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Mail-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Konfliktaufloesung:
- mail/internal/mailapi/mailapi_test.go: beide Seiten fuegten neue Tests
  an derselben Stelle an (HEAD: UX-03 Magic-Byte-Contenttype-Tests,
  eingehend: UX-01 Postfach-/Ordner-Tests), rein additiv zusammengefuehrt
- mail/internal/retentionclient/retentionclient.go: zwei unabhaengige
  Register-Implementierungen durch den Merge entstanden (totes
  PascalCase-Schema aus HEAD vs. aktiv genutztes snake_case-Schema),
  tote Variante + zugehoerige Tests entfernt
- mail/internal/mailapi/contract_test.go + mailapi_test.go: SearchClient-
  Interface erweitert (SearchWithFilters/ListByMailbox/Facets), beide
  Test-Fakes um diese Methoden ergaenzt

go build/vet sauber, Tests in internal/mailapi und internal/retentionclient
gruen (ein Testfehler in TestContract_DocumentedEndpointsMatchActualBehavior/
anhang_download_erfolg bereits auf main vor diesem Merge vorhanden, nicht
Teil dieser Aenderung).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 12:39:55 +02:00
patrickandClaude Sonnet 5 0370e0e88f SHL-01 P1: Modul-Registry-Duplikation aufgeloest
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
web/portal/config/modules.json war inhaltlich identisch zu MODULE_REGISTRY
in web/shl/components/ModuleNavShell.tsx, separat gepflegt. MODULE_REGISTRY
ist jetzt die einzige Quelle (description/permission als optionale Felder
ergaenzt), web/portal/lib/modules.ts importiert von @nexarch/shl statt der
JSON-Kopie. modules.json geloescht.

Nebenbefund beim Build-Test: @nexarch/shl wurde fuer web/portal per Symlink
statt Kopie installiert, Turbopack konnte den Import dadurch nicht aufloesen
("Module not found"). Fix: npm install --install-links erzwingt eine echte
Kopie wie bei den anderen Modulen.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 03:17:59 +02:00
patrickandClaude Sonnet 5 4a36f07fee SHL-01/UX-01: Table/Form-Styles, fehlende ModuleNavShell-Einbindung, Hydration-Fix
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
P0-Fund aus Fable5-Review: shl-table/shl-field* hatten keine CSS-Regeln
(baseComponentStyles in tokens.ts ergaenzt, ueber Shell.tsx eingebunden).
dms-browser und portal hatten ModuleNavShell trotz Registry-Eintrag nicht
eingebunden, jetzt nachgezogen. Hartcodierte Hex-Farben in status-page/
tenant-admin/lic-admin/audit-log durch Tokens ersetzt (dangerSubtle neu).

ModuleNavShell.resolveHref las window.location.hostname beim ersten
Render -> SSR/Client-Mismatch (Hydration-Fehler in React 19). Fix: Href
bleibt beim ersten Render unveraendert, Hostname-Tausch erst in
useEffect nach dem Mount. Verschachteltes <main> in portal/app/page.tsx
entfernt (Shell.tsx rendert bereits eins).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 02:50:44 +02:00
patrick 9b8f9c1220 Merge PR #352: QA-09: Barrierefreiheits-Audit (AI)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
2026-10-19 02:24:55 +02:00
patrick 7b9e6b94ce Merge PR #318: API-01 (Connect): Connect-Konfigurationsoberflaeche (Connectoren einrichten)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
2026-10-19 02:19:47 +02:00
patrick de564bd0b1 Merge PR #317: QA-03 (Connect): Pruefgate ERP/DATEV/M365
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
2026-10-19 02:19:37 +02:00
patrick 1b437c062d Merge PR #297: UX-03: Anhang-Vorschau (Mail)
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
2026-10-19 02:16:35 +02:00
patrick 5992bb1219 Merge PR #219: TSK-04: Aufgaben-Oberflaeche
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
2026-10-19 02:14:32 +02:00
patrickandClaude Sonnet 5 3a7d2d4696 ANA-02: Kennzahlen-Dashboard ins Portal einbinden, globale Navigation nachziehen
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
ModuleNavShell/MODULE_REGISTRY existierte bisher nur live auf Host 204,
nie committet - alle 12 Module (ai-extraction-review, ai-summaries,
connect-status, datev-export, dms-upload, mail-search, rbac-admin,
routing-rules, tenant-admin, workflow-approvals, workflow-cases) jetzt
mit ModuleNavShell verdrahtet, inklusive Export-Fix in web/shl/index.ts.

Kennzahlen-Dashboard (ANA-02) neu in Registry/Navigation aufgenommen,
RBAC-Recht kennzahlen.read per Migration an tenant_admin vergeben
(analog 0018_module_policy_rules).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-19 00:11:57 +02:00
patrickandClaude Sonnet 5 adab4cbfac VOR-05: Kontrastbefund aus QA-08 behoben (dunkles Farbschema)
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Akteneintrag in CaseOverview.tsx setzte keine explizite Textfarbe,
wodurch im dunklen Farbschema der native Button-Standard (schwarzer
Text auf dunklem Hintergrund) durchschlug: Kontrast 1,11:1 statt
geforderter 4,5:1 (axe-core color-contrast, serious, 6 Knoten).

Fix: color: var(--shl-color-text-primary) auf dem Button, wie bereits
bei anderen Elementen der Oberflaeche ueblich. axe-core bestaetigt 0
Verstoesse hell/dunkel nach dem Fix (siehe workflow-kanban QA-08,
workflow/docs/QA-08-PRUEFPROTOKOLL.md). Regressionstest ergaenzt.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-17 11:02:48 +00:00
rootandClaude Sonnet 5 a986fd2bfc QA-09: barrierefreiheits-audit
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
AI-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-17 09:56:10 +00:00
patrickandClaude Sonnet 5 1ee268f25f API-01: Connect-Konfigurationsoberflaeche (Connectoren einrichten)
Neue Oberflaeche web/connect-setup (Next.js/React, @nexarch/shl):
Connector-Typ waehlen, Zugangsdaten hinterlegen (API-Key/OAuth2),
Feld-Mapping je Verbindung bearbeiten — vollstaendig ohne
Konfigurationsdatei. Zugangsdaten werden nie im Klartext angezeigt,
nur als feste Maske plus letzte 4 Zeichen.

connect/cmd/setup-a11y-fixture + web/a11y-audit/connect-setup-run.sh
fuehren einen echten Browserlauf (Chrome/puppeteer-core) gegen den
echten Dienst und eine echte Postgres-Wegwerf-DB durch: Formular
tatsaechlich ausgefuellt und abgesendet, Maskierung im DOM geprueft,
Mapping-Aenderung nach Neuladen bestaetigt. axe: 0 Befunde in hell/dunkel.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 13:25:59 +00:00
patrickandClaude Sonnet 5 7208365a33 QA-03: Testkorpus real in ERP-/M365-/DATEV-Connectoren verankert
Je Drittsystemtyp (ERP, Microsoft Graph, DATEV) ein echter Testlauf gegen
den bereits in QA-01 gebauten, fest hinterlegten Referenzkorpus statt nur
gegen ad-hoc erfundene Mock-Antworten. Zusaetzlich ein beim Nachvollzug
der DAT-03-Oberflaeche real gefundener Testfehler (doppelte React-Instanz
durch die file:../shl-Abhaengigkeit) mit dem im Repo bereits etablierten
Fix (Resolve-Alias, siehe web/dms2-import) behoben.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 13:18:10 +00:00
Claude Sonnet 5andClaude Sonnet 5 deed1b1af8 UX-02: e-mail-detailansicht-thread-darstellung
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Mail-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Detailansicht fuer web/mail-postfach (UX-01-App erweitert, nicht neu
gebaut): Header (Von/Betreff/Ordner/Datum/Nachricht-ID), Nachrichtentext,
Anhangsliste mit Download (Dateiname nicht verfuegbar -- System
persistiert keinen Originalnamen, daher Anhang N + aus dem
Content-Type geratene Endung). Thread-Gruppierung ueber normalisierten
Betreff (keine In-Reply-To/References-Header im System), Navigation
zwischen Thread-Nachrichten als reiner Komponentenzustand derselben
Seite (kein Routenwechsel -- Ordner-/Suchkontext bleibt dadurch
strukturell erhalten, Akzeptanzkriterium 3).

UX-03 (eigener offener Branch, eigenes Frontend web/mail-search) wird
NICHT wiederverwendet -- getrennte Apps ohne Komponentenfreigabe, siehe
UX-02-PRUEFPROTOKOLL.md fuer die Abgrenzung und die Begruendung der
Backend-Erweiterung.

Tests: lib/threading, lib/threadNavigation, lib/attachmentNaming,
components/MessageDetail (Komponententest je Akzeptanzkriterium),
__tests__/a11y (jest-axe, Pruefung 3), e2e/ux02 gegen die echte
mailpostfach-fixture (Pruefungen 1+2, Mandantentrennung). Bestehender
e2e/ux01-Satz bleibt unveraendert gruen.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:18:57 +00:00
patrickandClaude Sonnet 5 b1809a3520 QA-08: barrierefreiheits-audit
Audit-Infrastruktur fuer web/mail-postfach nach dem Muster von
web/a11y-audit (mail-search-run.sh/connect-status-run.sh): neue
Testfixture mit echtem mailapi.Server + Platzhalter fuer den
Core-Modul-Token-Endpunkt (kein echter NEXARCH-Core auf dem
Testhost), Runner-Skript, echter Tastaturfluss im Browser nach dem
keyboard-flow-check.mjs-Muster aus UX-08.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:18:05 +00:00
patrickandClaude Sonnet 5 c4bb5457b7 QA-08: barrierefreiheits-audit
Zwei echte a11y-Befunde aus dem Audit von web/mail-postfach behoben:
Ordnerbaum-Treeitems waren per Tastatur erreichbar, aber ohne
onKeyDown-Handler nicht per Enter/Leertaste aktivierbar; die
scrollbare Nachrichtenliste hatte keinen tabIndex (axe:
scrollable-region-focusable, serious).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:17:56 +00:00
rootandClaude Sonnet 5 67b5bd296c UX-04: responsive-layout-mobile-navigation
Automatisierte Pruefung: Vitest-Tests fuer die neue Drawer-/Detail-
Zustandslogik (page.test.tsx, MessageList.test.tsx, MessageDetail.test.tsx)
sowie responsive-layout-check.mjs - echter Puppeteer/Chrome-Lauf mit
Viewport-Resize (375/768/1440px) und Touch-Taps gegen die gebaute App,
gleicher Puppeteer-Bestand wie web/mail-search/keyboard-flow-check.mjs.
43/43 Vitest-Tests gruen, 15/15 Pruefungen im Browserlauf.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:17:52 +00:00
rootandClaude Sonnet 5 1a529cb579 UX-04: responsive-layout-mobile-navigation
Responsives Drei-Spalten-Layout (Ordner/Nachrichten/Detail) fuer
web/mail-postfach: CSS-Breakpoint bei 768px (SHL-Token), mobil wird die
Ordnerliste zu einem Dialog-Drawer und Nachrichtenliste/Detail teilen
sich eine Ansicht per data-mobile-active-Zustand statt fester inline
Breiten, die auf schmalen Viewports horizontal abgeschnitten haetten.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:17:45 +00:00
patrickandClaude Sonnet 5 398f4b038b UX-05: dunkles-erscheinungsbild-theming
Automatisierte Tests fuer alle drei Akzeptanzkriterien:
- lib/contrast.test.ts: echte WCAG-2.1-AA-Kontrastberechnung (>=4.5:1)
  fuer die tatsaechlich verwendete Text/Hintergrund-Kombination in
  beiden Erscheinungsbildern.
- components/ThemeToggle.test.tsx: manuelle Umschaltung sowie
  Persistenz ueber ein simuliertes Neuladen der Seite (kompletter
  Unmount + frischer ThemeProvider), auch gegen eine abweichende
  Systempraeferenz.
- app/theme-visual-sample.test.tsx: Postfach-Kernansicht rendert
  vollstaendig in beiden Modi, Theme-Variablen korrekt gesetzt, und
  automatischer Regressionsschutz gegen lokale Hex-Farben ausserhalb
  von var(...)-Fallbacks (genau der vorherige Fehler in MessageList).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:11:13 +00:00
patrickandClaude Sonnet 5 d39941db1d UX-05: dunkles-erscheinungsbild-theming
Manuelle Umschaltflaeche (ThemeToggle) ergaenzt und im Root-Layout
eingehaengt - Akzeptanzkriterium 2 (manuell ueberschreibbar). Bisher
gab es in web/mail-postfach keinen sichtbaren Weg, useTheme().toggle
aus @nexarch/shl auszuloesen, da diese App (wie dms-browser/pdf-viewer/
mail-search) keine Shell-Navigation mit eingebauter Umschaltflaeche
nutzt. Kein neues Theming, nur Anschluss an das zentrale System.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:11:05 +00:00
patrickandClaude Sonnet 5 3e35197ba5 UX-05: dunkles-erscheinungsbild-theming
Fix: Trennlinie unter dem Spaltenkopf in MessageList.tsx setzte eine
fest codierte Hex-Farbe (#ccc) statt der zentralen SHL-Theme-Variable
--shl-color-border - einzige Stelle in web/mail-postfach, die am
zentralen Theming-System vorbeibaute.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:10:58 +00:00
patrickandClaude Sonnet 5 d54fb0be14 UX-06: mehrsprachigkeit-deutsch-englisch
Automatisierte Tests fuer alle drei Akzeptanzkriterien: keine rohen
i18n-Schluessel im gerenderten Output (de/en), Sprachumschaltung ohne
Neuladen, Datums-/Zahlenformat folgt der Sprache.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:07:18 +00:00
patrickandClaude Sonnet 5 0087bf2f50 UX-06: mehrsprachigkeit-deutsch-englisch
Sprachumschalter-Komponente (LanguageSwitcher) ergaenzt, in
PostfachPage eingebunden; Nachrichtenzahl nutzt jetzt
formatNumber(locale) statt reiner String-Konvertierung
(Akzeptanzkriterium 3, Zahlenformat).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:07:13 +00:00
patrickandClaude Sonnet 5 f35163e369 UX-06: mehrsprachigkeit-deutsch-englisch
Englische Übersetzungen fuer alle von UX-01 vorbereiteten
mail-postfach-Schluessel ergaenzt (registerMessages(\"en\", ...) in
lib/messages.ts), plus neue Schluessel fuer den Sprachumschalter.
layout.tsx liest initialLocale/html-lang jetzt aus
NEXT_PUBLIC_DEFAULT_LOCALE (gleiches Muster wie web/dms-browser).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 07:07:08 +00:00
patrickandClaude Sonnet 5 9b1661d6ff UX-01: postfach-ordneransicht
Postfach- und Ordneransicht fuer archivierte Mails (Next.js/React/TS,
@nexarch/shl). Ordnerbaum (aus der flachen Postfachliste der Mail-API
clientseitig aufgebaut), virtualisierte Nachrichtenliste mit Sortierung
nach Datum/Absender/Betreff, Grundsuche. Aufbau nach etabliertem Muster
(web/mail-search fuer die App-Struktur, web/dms-browser fuer Ordnerbaum/
virtualisierte Liste), bewusst schlicht gehalten (Mailpit/MailHog als
Vorbild, nicht die Komplexitaet eines nativen Mailprogramms).

Automatisierte Tests je Akzeptanzkriterium, inkl. eines echten
Backend-Integrationstests (e2e/ux01.e2e.test.ts) gegen den echten
mailapi.Server (mail/cmd/mailpostfach-fixture) mit zwei Mandanten und
einem gleichnamigen Ordner — keine Mandanten-Isolationslogik wird
gemockt.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 06:54:40 +00:00
patrickandClaude Sonnet 5 f63fcb8a2d UX-03: anhang-vorschau
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Mail-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Frontend (web/mail-search): Anhang-Vorschau fuer PDF (Canvas-Rendering
via pdfjs-dist, gleiches Muster wie DOC-05s web/pdf-viewer/PdfViewer.tsx
-- kein aequivalentes PdfCanvasPreview im Repo gefunden, daher PdfViewer
als Vorlage uebernommen statt neu erfunden) und Bilder (<img> auf einem
authentifiziert geladenen Blob). Die Vorschauart haengt ausschliesslich
vom serverseitig per Magic-Bytes bestimmten contentType ab, nie von
einem Dateinamen (den es an der Schnittstelle gar nicht gibt); nicht
unterstuetzte Typen werden nur als Hinweistext angezeigt, nie
eingebettet. Kein iframe/<object>/dangerouslySetInnerHTML -- durch
automatisierten Sicherheitsreview-Test abgesichert. Neue lib/http.ts
(authentifizierter Zugriff ueber @nexarch/shl, identisch zu
web/pdf-viewer/lib/http.ts) und lib/attachments.ts (Anhangsliste/
-inhalt der Mail-API). Pruefprotokoll in mail/docs/UX-03-PRUEFPROTOKOLL.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-16 06:51:29 +00:00
rootandClaude Sonnet 5 c09093b572 fix(portal): Modul-Kachel-Links dynamisch statt hartkodiertem localhost auflösen
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-14 13:17:00 +00:00
patrickandClaude Sonnet 5 16e88d2ee4 SEM-06: semantische-such-/chat-oberflaeche
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
AI-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Kleinstmoegliche HTTP-Bindung docchatapi fuer den bestehenden docchat-Service
ergaenzt (analog summaryapi/semanticsearchapi), da SEM-05 nur die Bibliothek
lieferte. Neue Next.js-Oberflaeche web/ai-search-chat mit Suche und Chat als
Reiter auf einer Seite, Quellenverweise inkl. Zitat-Aufloesung, Verlauf im
Elternzustand ueberdauert Reiterwechsel.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-28 01:28:29 +00:00
patrickandClaude Sonnet 5 9160135bdd RTE-05: ki gestützte routing vorschläge kopplung ai wfs 02
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-28 01:36:38 +02:00
patrickandClaude Sonnet 5 6c590fc89f SHL-03: zentrale core steuerungsseite
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-28 00:43:37 +02:00
patrickandClaude Sonnet 5 56ab1a2d6d TSK-04: aufgaben oberflaeche
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Neue additive status-Spalte (open/in_progress/done) auf tasks,
status.go (SetStatus/ByStatus/GetStatus/ListAll) haelt completed_at
synchron fuer TSK-03s escalation.Store. Neuer HTTP-Layer taskapi
(GET /tasks, PATCH /tasks/{id}/status), Tenant-Kontext-Durchsetzung
wie backchannelapi (VOR-06). Neue Next.js-Oberflaeche
web/workflow-tasks (Liste + Kanban, Drag&Drop + Tastaturbedienung).
tasks-a11y-fixture fuer den echten Browser-Test, kein Produktions-
binary vorhanden das geaendert werden musste.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 23:26:56 +02:00
patrickandClaude Sonnet 5 925f8d6214 SHL-02: Portal-Katalog um restliche Module erweitert (echte Rechte)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Bisher nur 6 von ueber 20 web/-Apps im Katalog, zwei bestehende
Eintraege (mail, workflow) nutzten erfundene Rechte-Schluessel, die
nirgends real existierten. Nach RBAC-12 (PR #213, echte Rechte fuer
Mail/Workflow/AI/Connect/Core-Admin) jetzt korrigiert und um sechs
weitere Module ergaenzt, jeweils mit einem real existierenden
policy_rules-Schluessel.

Bewusst ausgelassen (kein passendes reales Recht vorhanden, nicht
erfunden): account, audit-log, compliance-reports, dms2-import,
kennzahlen-dashboard, lic-admin, notifications, retention-admin,
status-page (dms2-import: passt inhaltlich weder zu dms.* noch zu
connect.datev.*, braucht einen eigenen Rechte-Schluessel; die
restlichen haben aktuell keine granulare Leseberechtigung in
policy_rules).

Neuer Test (lib/modules.test.ts) prueft jeden Katalog-Eintrag gegen
die Liste real existierender Rechte-Schluessel, damit kein erfundener
Wert mehr durchrutscht.

Wichtige Einschraenkung (aus RBAC-12 uebernommen, weiterhin offen):
echte Durchsetzung ist bisher nur fuer mail.message.read und
connect.status.read verdrahtet. Fuer workflow.*/ai.*/core.tenant.*
existiert der Rechte-Eintrag, aber noch keine scharfe Durchsetzung im
jeweiligen Modul -- die entsprechenden Portal-Kacheln sind technisch
fuer jeden mit irgendeinem gueltigen Recht sichtbar, nicht nur fuer
den, der das spezifische Recht hat, bis das nachgezogen ist.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 16:39:01 +02:00
root 0c5665b2c8 Merge remote-tracking branch 'origin/feature/dms2-02-02-import-assistent-fuer-drittsystem-exporte' 2026-09-26 14:04:47 +00:00
patrickandClaude Sonnet 5 380858ca34 DMS2-02: 02 import assistent fuer drittsystem exporte
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
Import-Assistent fuer paperless-ngx-Exporte (dieses Projekts primaeres
Referenzsystem): Parser, Feld-Mapping-Vorschlag ueber ENG-04s
fieldmapping.Store, Umwandlung in DMS2-01-Bundles, Import-Lauf mit
Erfolgs-/Fehleranzahl. Mapping-Vorschau-Oberflaeche (Next.js/shl).

Echte Funde dabei behoben: fieldmapping.FieldDef hatte keine JSON-Tags
(serialisierte als NexarchField/Required statt nexarch_field/required,
API-Antwort damit fuer das Frontend unbrauchbar); die neuen BFF-Routen
lieferten ohne cache:no-store eine veraltete Antwort aus Next.js'
Fetch-Cache aus.

4/4 Akzeptanzkriterien erfuellt, alle 4 Prüfungen real durchgefuehrt
inkl. echtem Chrome/Puppeteer-Ende-zu-Ende-Test (Mapping im Browser
geaendert, Import mit geaenderter Zuordnung erfolgreich ausgefuehrt).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 15:57:22 +02:00
root 2fbc5e387c Merge branch 'feature/shl-02-zentrales-portal-navigation-ueber-alle-module' of https://gitea.perlbach24.de/scripte/nexarch 2026-09-26 13:12:06 +00:00
root 1dbcfcb88f Merge branch 'feature/int-19-mobile-erfassung-mobilfreundliche-weboberflaeche' of https://gitea.perlbach24.de/scripte/nexarch 2026-09-26 13:12:05 +00:00
root d04afd5ffc Merge branch 'feature/dat-03-03-datev-export-oberflaeche-protokoll' of https://gitea.perlbach24.de/scripte/nexarch 2026-09-26 13:12:05 +00:00
rootandClaude Sonnet 5 1e8c6cc6d9 SHL-02: zentrales portal navigation ueber alle module
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 12:31:12 +00:00
rootandClaude Sonnet 5 0097c8cf2b INT-19: mobile erfassung mobilfreundliche weboberflaeche
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 12:06:19 +00:00
rootandClaude Sonnet 5 a465bb6dab DAT-03: 03 datev export oberflaeche protokoll
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
Backend: additive List()/ListForTenant()-Methoden fuer DAT-01/DAT-02
(kein Aenderungen an bestehendem Code), neues Paket datevapi (POST/GET
/datev/exports), gleiches Auth-Muster wie statusapi (API-02).
Frontend: web/datev-export (Next.js/React/TS + @nexarch/shl) mit
Formular (Zeitraum-Auswahl) und Protokolltabelle, fehlgeschlagene
Uebertragung farblich/textlich klar erkennbar.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 11:40:20 +00:00
root 567e90500a Merge RTE-03 into main 2026-09-26 11:26:02 +00:00
patrickandClaude Sonnet 5 76b736a3df RTE-03: routing regel editor oberflaeche
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 12:51:10 +02:00
patrickandClaude Sonnet 5 dda51e6796 EXT-04: package-lock.json fuer web/ai-extraction-review
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 12:48:15 +02:00
patrickandClaude Sonnet 5 0b0ebc1da1 EXT-04: extraktions-korrektur-oberflaeche (Frontend)
web/ai-extraction-review (Next.js/React/TS, @nexarch/shl): zeigt
extrahierte Rechnungsfelder mit Konfidenz, erlaubt Korrektur pro Feld
ohne Seiteneffekt auf die uebrigen Felder, Bestaetigung/Abbruch ohne
automatische Uebernahme. Echte Uebernahme in DMS-/Mail-Metadaten ist
nicht Bestandteil dieser Kachel.

6/6 Vitest, tsc sauber, next build erfolgreich, echter pa11y
WCAG2AA-Check gegen laufenden Produktionsbuild ohne Befunde.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 12:48:03 +02:00