User Panel: Phase-8-Abschluss, Titelbild/Lizenzen/Zeitzonen und KI-Pruef-Pipeline

Phase 8 (Rest) + Umbauten vom 10./11.06.:
- Ein Titelbild pro PM (Cover 1280x580), SVG-Platzhalter-Set + Picker,
  PressReleaseCoverImage-Resolver
- Lizenz-/Rechteformular nach "Lizenztyp Bildupload" (7 Lizenztypen,
  Personen-/Sachrechte-Status, bedingte Pflichtfelder, Risikohinweise)
- Veroeffentlichungs-Box vereinfacht (Embargo aus der Form-UI entfernt),
  geplante Termine in Europe/Berlin (Speicherung UTC, DISPLAY_TIMEZONE)
- Quota-Stub (users.press_release_quota) + monatlicher Reset-Command
- Einreichungs-Modal einheitlich in Show/Create/Edit; Ghost-Buttons auf
  filled; PM-Editor-Layout responsive entkoppelt (.pr-editor-layout)

KI-Pruef-Pipeline (Phasen 1-5 des Entwicklungsplans):
- API-Haertung: status nicht mehr per API setzbar, eigene Submit-Route
  durch denselben Funnel (Blacklist, Quota, Status-Log)
- Klassifikation Rot/Gelb/Gruen asynchron (Queue classification,
  OpenAI-Treiber + deterministischer Fallback), ki_audits-Audit-Log
- Routing: Rot -> rejected + Mail, Gelb -> Review-Queue, Gruen ->
  Auto-Publish; Scheduler publiziert nur gruene faellige PMs
- Content-Score 0-100 -> Stufe (Standard/Geprueft/Hochwertig) inkl.
  Editor-Panel und Badges; Re-Klassifikation/-Score bei Aenderung
- Admin: KI-Badge + Filter, On-Demand-Pruefung mit Anbieter-Override

Suite: 442 passed, 4 skipped.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

app/Http/Controllers/Api/V1/PressReleaseController.php

@@ -2,12 +2,15 @@
 
 namespace App\Http\Controllers\Api\V1;
 
+use App\Enums\PressReleaseStatus;
 use App\Http\Controllers\Controller;
 use App\Http\Requests\Api\V1\StorePressReleaseRequest;
 use App\Http\Requests\Api\V1\UpdatePressReleaseRequest;
 use App\Http\Resources\PressReleaseResource;
 use App\Models\Company;
 use App\Models\PressRelease;
+use App\Services\PressRelease\BlacklistViolationException;
+use App\Services\PressRelease\PressReleaseService;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
@@ -46,7 +49,10 @@ class PressReleaseController extends Controller
                 $company->portal->value,
                 $validated['language'],
             ),
-            'status' => $validated['status'] ?? 'draft',
+            // Über die API angelegte PMs sind immer Entwürfe. Der Übergang nach
+            // `review` erfolgt ausschließlich über die explizite submit-Route,
+            // damit Blacklist-/Quota-/Log-Prüfung garantiert durchlaufen werden.
+            'status' => PressReleaseStatus::Draft->value,
         ]);
 
         return PressReleaseResource::make(
@@ -101,11 +107,51 @@ class PressReleaseController extends Controller
 
         $pressRelease->save();
 
+        // Inhaltliche Änderung einer bereits geprüften/bewerteten PM → neu prüfen.
+        if ($pressRelease->wasChanged(['title', 'text'])) {
+            $service = app(PressReleaseService::class);
+            $service->reclassifyIfClassified($pressRelease);
+            $service->rescoreIfScored($pressRelease);
+        }
+
         return PressReleaseResource::make(
             $pressRelease->load(['company:id,name,portal,legacy_portal,legacy_id', 'category.translations', 'images'])
         );
     }
 
+    /**
+     * Reicht eine PM zur Prüfung ein – der einzige API-Weg nach `review`.
+     *
+     * Kapselt denselben Funnel wie das Web-Formular: Blacklist-Hard-Filter,
+     * Statuswechsel, Status-Log und Quota werden über den
+     * `PressReleaseService` garantiert durchlaufen. `published` bleibt über die
+     * API unerreichbar.
+     */
+    public function submit(Request $request, int $pressRelease, PressReleaseService $service): PressReleaseResource|JsonResponse
+    {
+        abort_unless($request->user()->tokenCan('press-releases:write'), 403);
+        $pressRelease = $this->findOwnedPressRelease($pressRelease, $request);
+        abort_unless($pressRelease !== null, 403);
+
+        if (! in_array($pressRelease->status->value, ['draft', 'rejected'], true)) {
+            return response()->json([
+                'message' => 'Only draft or rejected press releases may be submitted for review.',
+            ], 409);
+        }
+
+        try {
+            $service->submitForReview($pressRelease);
+        } catch (BlacklistViolationException $exception) {
+            return response()->json([
+                'message' => $exception->getMessage(),
+            ], 422);
+        }
+
+        return PressReleaseResource::make(
+            $pressRelease->fresh()->load(['company:id,name,portal,legacy_portal,legacy_id', 'category.translations', 'images'])
+        );
+    }
+
     public function destroy(Request $request, int $pressRelease): JsonResponse|Response
     {
         abort_unless($request->user()->tokenCan('press-releases:write'), 403);

app/Http/Requests/Api/V1/StorePressReleaseRequest.php

@@ -2,10 +2,8 @@
 
 namespace App\Http\Requests\Api\V1;
 
-use App\Enums\PressReleaseStatus;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
-use Illuminate\Validation\Rule;
 
 class StorePressReleaseRequest extends FormRequest
 {
@@ -32,10 +30,6 @@ class StorePressReleaseRequest extends FormRequest
             'text' => ['required', 'string'],
             'backlink_url' => ['nullable', 'url', 'max:255'],
             'keywords' => ['nullable', 'string', 'max:255'],
-            'status' => ['nullable', Rule::in([
-                PressReleaseStatus::Draft->value,
-                PressReleaseStatus::Review->value,
-            ])],
             'teaser_begin' => ['nullable', 'integer', 'min:0'],
             'teaser_end' => ['nullable', 'integer', 'min:0'],
             'no_export' => ['nullable', 'boolean'],

app/Http/Requests/Api/V1/UpdatePressReleaseRequest.php

@@ -2,10 +2,8 @@
 
 namespace App\Http\Requests\Api\V1;
 
-use App\Enums\PressReleaseStatus;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
-use Illuminate\Validation\Rule;
 
 class UpdatePressReleaseRequest extends FormRequest
 {
@@ -32,10 +30,6 @@ class UpdatePressReleaseRequest extends FormRequest
             'text' => ['sometimes', 'required', 'string'],
             'backlink_url' => ['nullable', 'url', 'max:255'],
             'keywords' => ['nullable', 'string', 'max:255'],
-            'status' => ['sometimes', Rule::in([
-                PressReleaseStatus::Draft->value,
-                PressReleaseStatus::Review->value,
-            ])],
             'teaser_begin' => ['nullable', 'integer', 'min:0'],
             'teaser_end' => ['nullable', 'integer', 'min:0'],
             'no_export' => ['nullable', 'boolean'],