docs: verschobene Doku-Pfade in Code-Kommentaren nachgezogen

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.agents/skills/fluxui-development/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: fluxui-development
+description: "Use this skill for Flux UI development in Livewire applications only. Trigger when working with <flux:*> components, building or customizing Livewire component UIs, creating forms, modals, tables, or other interactive elements. Covers: flux: components (buttons, inputs, modals, forms, tables, date-pickers, kanban, badges, tooltips, etc.), component composition, Tailwind CSS styling, Heroicons/Lucide icon integration, validation patterns, responsive design, and theming. Do not use for non-Livewire frameworks or non-component styling."
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Flux UI Development
+
+## Documentation
+
+Use `search-docs` for detailed Flux UI patterns and documentation.
+
+## Basic Usage
+
+This project uses the Pro version of Flux UI, which includes all free and Pro components and variants.
+
+Flux UI is a component library for Livewire built with Tailwind CSS. It provides components that are easy to use and customize.
+
+Use Flux UI components when available. Fall back to standard Blade components when no Flux component exists for your needs.
+
+<!-- Basic Button -->
+```blade
+<flux:button variant="primary">Click me</flux:button>
+```
+
+## Available Components (Pro Edition)
+
+Available: accordion, autocomplete, avatar, badge, brand, breadcrumbs, button, calendar, callout, card, chart, checkbox, command, composer, context, date-picker, dropdown, editor, field, file-upload, heading, icon, input, kanban, modal, navbar, otp-input, pagination, pillbox, popover, profile, radio, select, separator, skeleton, slider, switch, table, tabs, text, textarea, time-picker, toast, tooltip
+
+## Icons
+
+Flux includes [Heroicons](https://heroicons.com/) as its default icon set. Search for exact icon names on the Heroicons site - do not guess or invent icon names.
+
+<!-- Icon Button -->
+```blade
+<flux:button icon="arrow-down-tray">Export</flux:button>
+```
+
+For icons not available in Heroicons, use [Lucide](https://lucide.dev/). Import the icons you need with the Artisan command:
+
+```bash
+vendor/bin/sail artisan flux:icon crown grip-vertical github
+```
+
+## Common Patterns
+
+### Form Fields
+
+<!-- Form Field -->
+```blade
+<flux:field>
+    <flux:label>Email</flux:label>
+    <flux:input type="email" wire:model="email" />
+    <flux:error name="email" />
+</flux:field>
+```
+
+### Tables
+
+<!-- Table -->
+```blade
+<flux:table>
+    <flux:table.columns>
+        <flux:table.cell>Column Name</flux:table.cell>
+    </flux:table.columns>
+    <flux:table.row>
+        <flux:table.cell>Value</flux:table.cell>
+    </flux:table.row>
+</flux:table>
+```
+
+## Verification
+
+1. Check component renders correctly
+2. Test interactive states
+3. Verify mobile responsiveness
+
+## Common Pitfalls
+
+- Not checking if a Flux component exists before creating custom implementations
+- Forgetting to use the `search-docs` tool for component-specific documentation
+- Not following existing project patterns for Flux usage

.agents/skills/fortify-development/SKILL.md

@@ -0,0 +1,131 @@
+---
+name: fortify-development
+description: 'ACTIVATE when the user works on authentication in Laravel. This includes login, registration, password reset, email verification, two-factor authentication (2FA/TOTP/QR codes/recovery codes), profile updates, password confirmation, or any auth-related routes and controllers. Activate when the user mentions Fortify, auth, authentication, login, register, signup, forgot password, verify email, 2FA, or references app/Actions/Fortify/, CreateNewUser, UpdateUserProfileInformation, FortifyServiceProvider, config/fortify.php, or auth guards. Fortify is the frontend-agnostic authentication backend for Laravel that registers all auth routes and controllers. Also activate when building SPA or headless authentication, customizing login redirects, overriding response contracts like LoginResponse, or configuring login throttling. Do NOT activate for Laravel Passport (OAuth2 API tokens), Socialite (OAuth social login), or non-auth Laravel features.'
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Laravel Fortify Development
+
+Fortify is a headless authentication backend that provides authentication routes and controllers for Laravel applications.
+
+## Documentation
+
+Use `search-docs` for detailed Laravel Fortify patterns and documentation.
+
+## Usage
+
+- **Routes**: Use `list-routes` with `only_vendor: true` and `action: "Fortify"` to see all registered endpoints
+- **Actions**: Check `app/Actions/Fortify/` for customizable business logic (user creation, password validation, etc.)
+- **Config**: See `config/fortify.php` for all options including features, guards, rate limiters, and username field
+- **Contracts**: Look in `Laravel\Fortify\Contracts\` for overridable response classes (`LoginResponse`, `LogoutResponse`, etc.)
+- **Views**: All view callbacks are set in `FortifyServiceProvider::boot()` using `Fortify::loginView()`, `Fortify::registerView()`, etc.
+
+## Available Features
+
+Enable in `config/fortify.php` features array:
+
+- `Features::registration()` - User registration
+- `Features::resetPasswords()` - Password reset via email
+- `Features::emailVerification()` - Requires User to implement `MustVerifyEmail`
+- `Features::updateProfileInformation()` - Profile updates
+- `Features::updatePasswords()` - Password changes
+- `Features::twoFactorAuthentication()` - 2FA with QR codes and recovery codes
+
+> Use `search-docs` for feature configuration options and customization patterns.
+
+## Setup Workflows
+
+### Two-Factor Authentication Setup
+
+```
+- [ ] Add TwoFactorAuthenticatable trait to User model
+- [ ] Enable feature in config/fortify.php
+- [ ] If the `*_add_two_factor_columns_to_users_table.php` migration is missing, publish via `php artisan vendor:publish --tag=fortify-migrations` and migrate
+- [ ] Set up view callbacks in FortifyServiceProvider
+- [ ] Create 2FA management UI
+- [ ] Test QR code and recovery codes
+```
+
+> Use `search-docs` for TOTP implementation and recovery code handling patterns.
+
+### Email Verification Setup
+
+```
+- [ ] Enable emailVerification feature in config
+- [ ] Implement MustVerifyEmail interface on User model
+- [ ] Set up verifyEmailView callback
+- [ ] Add verified middleware to protected routes
+- [ ] Test verification email flow
+```
+
+> Use `search-docs` for MustVerifyEmail implementation patterns.
+
+### Password Reset Setup
+
+```
+- [ ] Enable resetPasswords feature in config
+- [ ] Set up requestPasswordResetLinkView callback
+- [ ] Set up resetPasswordView callback
+- [ ] Define password.reset named route (if views disabled)
+- [ ] Test reset email and link flow
+```
+
+> Use `search-docs` for custom password reset flow patterns.
+
+### SPA Authentication Setup
+
+```
+- [ ] Set 'views' => false in config/fortify.php
+- [ ] Install and configure Laravel Sanctum for session-based SPA authentication
+- [ ] Use the 'web' guard in config/fortify.php (required for session-based authentication)
+- [ ] Set up CSRF token handling
+- [ ] Test XHR authentication flows
+```
+
+> Use `search-docs` for integration and SPA authentication patterns.
+
+#### Two-Factor Authentication in SPA Mode
+
+When `views` is set to `false`, Fortify returns JSON responses instead of redirects.
+
+If a user attempts to log in and two-factor authentication is enabled, the login request will return a JSON response indicating that a two-factor challenge is required:
+
+```json
+{
+    "two_factor": true
+}
+```
+
+## Best Practices
+
+### Custom Authentication Logic
+
+Override authentication behavior using `Fortify::authenticateUsing()` for custom user retrieval or `Fortify::authenticateThrough()` to customize the authentication pipeline. Override response contracts in `AppServiceProvider` for custom redirects.
+
+### Registration Customization
+
+Modify `app/Actions/Fortify/CreateNewUser.php` to customize user creation logic, validation rules, and additional fields.
+
+### Rate Limiting
+
+Configure via `fortify.limiters.login` in config. Default configuration throttles by username + IP combination.
+
+## Key Endpoints
+
+| Feature                | Method   | Endpoint                                    |
+|------------------------|----------|---------------------------------------------|
+| Login                  | POST     | `/login`                                    |
+| Logout                 | POST     | `/logout`                                   |
+| Register               | POST     | `/register`                                 |
+| Password Reset Request | POST     | `/forgot-password`                          |
+| Password Reset         | POST     | `/reset-password`                           |
+| Email Verify Notice    | GET      | `/email/verify`                             |
+| Resend Verification    | POST     | `/email/verification-notification`          |
+| Password Confirm       | POST     | `/user/confirm-password`                    |
+| Enable 2FA             | POST     | `/user/two-factor-authentication`           |
+| Confirm 2FA            | POST     | `/user/confirmed-two-factor-authentication` |
+| 2FA Challenge          | POST     | `/two-factor-challenge`                     |
+| Get QR Code            | GET      | `/user/two-factor-qr-code`                  |
+| Recovery Codes         | GET/POST | `/user/two-factor-recovery-codes`           |

.agents/skills/laravel-best-practices/SKILL.md

@@ -0,0 +1,190 @@
+---
+name: laravel-best-practices
+description: "Apply this skill whenever writing, reviewing, or refactoring Laravel PHP code. This includes creating or modifying controllers, models, migrations, form requests, policies, jobs, scheduled commands, service classes, and Eloquent queries. Triggers for N+1 and query performance issues, caching strategies, authorization and security patterns, validation, error handling, queue and job configuration, route definitions, and architectural decisions. Also use for Laravel code reviews and refactoring existing Laravel code to follow best practices. Covers any task involving Laravel backend PHP code patterns."
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Laravel Best Practices
+
+Best practices for Laravel, prioritized by impact. Each rule teaches what to do and why. For exact API syntax, verify with `search-docs`.
+
+## Consistency First
+
+Before applying any rule, check what the application already does. Laravel offers multiple valid approaches — the best choice is the one the codebase already uses, even if another pattern would be theoretically better. Inconsistency is worse than a suboptimal pattern.
+
+Check sibling files, related controllers, models, or tests for established patterns. If one exists, follow it — don't introduce a second way. These rules are defaults for when no pattern exists yet, not overrides.
+
+## Quick Reference
+
+### 1. Database Performance → `rules/db-performance.md`
+
+- Eager load with `with()` to prevent N+1 queries
+- Enable `Model::preventLazyLoading()` in development
+- Select only needed columns, avoid `SELECT *`
+- `chunk()` / `chunkById()` for large datasets
+- Index columns used in `WHERE`, `ORDER BY`, `JOIN`
+- `withCount()` instead of loading relations to count
+- `cursor()` for memory-efficient read-only iteration
+- Never query in Blade templates
+
+### 2. Advanced Query Patterns → `rules/advanced-queries.md`
+
+- `addSelect()` subqueries over eager-loading entire has-many for a single value
+- Dynamic relationships via subquery FK + `belongsTo`
+- Conditional aggregates (`CASE WHEN` in `selectRaw`) over multiple count queries
+- `setRelation()` to prevent circular N+1 queries
+- `whereIn` + `pluck()` over `whereHas` for better index usage
+- Two simple queries can beat one complex query
+- Compound indexes matching `orderBy` column order
+- Correlated subqueries in `orderBy` for has-many sorting (avoid joins)
+
+### 3. Security → `rules/security.md`
+
+- Define `$fillable` or `$guarded` on every model, authorize every action via policies or gates
+- No raw SQL with user input — use Eloquent or query builder
+- `{{ }}` for output escaping, `@csrf` on all POST/PUT/DELETE forms, `throttle` on auth and API routes
+- Validate MIME type, extension, and size for file uploads
+- Never commit `.env`, use `config()` for secrets, `encrypted` cast for sensitive DB fields
+
+### 4. Caching → `rules/caching.md`
+
+- `Cache::remember()` over manual get/put
+- `Cache::flexible()` for stale-while-revalidate on high-traffic data
+- `Cache::memo()` to avoid redundant cache hits within a request
+- Cache tags to invalidate related groups
+- `Cache::add()` for atomic conditional writes
+- `once()` to memoize per-request or per-object lifetime
+- `Cache::lock()` / `lockForUpdate()` for race conditions
+- Failover cache stores in production
+
+### 5. Eloquent Patterns → `rules/eloquent.md`
+
+- Correct relationship types with return type hints
+- Local scopes for reusable query constraints
+- Global scopes sparingly — document their existence
+- Attribute casts in the `casts()` method
+- Cast date columns, use Carbon instances in templates
+- `whereBelongsTo($model)` for cleaner queries
+- Never hardcode table names — use `(new Model)->getTable()` or Eloquent queries
+
+### 6. Validation & Forms → `rules/validation.md`
+
+- Form Request classes, not inline validation
+- Array notation `['required', 'email']` for new code; follow existing convention
+- `$request->validated()` only — never `$request->all()`
+- `Rule::when()` for conditional validation
+- `after()` instead of `withValidator()`
+
+### 7. Configuration → `rules/config.md`
+
+- `env()` only inside config files
+- `App::environment()` or `app()->isProduction()`
+- Config, lang files, and constants over hardcoded text
+
+### 8. Testing Patterns → `rules/testing.md`
+
+- `LazilyRefreshDatabase` over `RefreshDatabase` for speed
+- `assertModelExists()` over raw `assertDatabaseHas()`
+- Factory states and sequences over manual overrides
+- Use fakes (`Event::fake()`, `Exceptions::fake()`, etc.) — but always after factory setup, not before
+- `recycle()` to share relationship instances across factories
+
+### 9. Queue & Job Patterns → `rules/queue-jobs.md`
+
+- `retry_after` must exceed job `timeout`; use exponential backoff `[1, 5, 10]`
+- `ShouldBeUnique` to prevent duplicates; `ShouldBeUniqueUntilProcessing` for early lock release
+- Always implement `failed()`; with `retryUntil()`, set `$tries = 0`
+- `RateLimited` middleware for external API calls; `Bus::batch()` for related jobs
+- Horizon for complex multi-queue scenarios
+
+### 10. Routing & Controllers → `rules/routing.md`
+
+- Implicit route model binding
+- Scoped bindings for nested resources
+- `Route::resource()` or `apiResource()`
+- Methods under 10 lines — extract to actions/services
+- Type-hint Form Requests for auto-validation
+
+### 11. HTTP Client → `rules/http-client.md`
+
+- Explicit `timeout` and `connectTimeout` on every request
+- `retry()` with exponential backoff for external APIs
+- Check response status or use `throw()`
+- `Http::pool()` for concurrent independent requests
+- `Http::fake()` and `preventStrayRequests()` in tests
+
+### 12. Events, Notifications & Mail → `rules/events-notifications.md`, `rules/mail.md`
+
+- Event discovery over manual registration; `event:cache` in production
+- `ShouldDispatchAfterCommit` / `afterCommit()` inside transactions
+- Queue notifications and mailables with `ShouldQueue`
+- On-demand notifications for non-user recipients
+- `HasLocalePreference` on notifiable models
+- `assertQueued()` not `assertSent()` for queued mailables
+- Markdown mailables for transactional emails
+
+### 13. Error Handling → `rules/error-handling.md`
+
+- `report()`/`render()` on exception classes or in `bootstrap/app.php` — follow existing pattern
+- `ShouldntReport` for exceptions that should never log
+- Throttle high-volume exceptions to protect log sinks
+- `dontReportDuplicates()` for multi-catch scenarios
+- Force JSON rendering for API routes
+- Structured context via `context()` on exception classes
+
+### 14. Task Scheduling → `rules/scheduling.md`
+
+- `withoutOverlapping()` on variable-duration tasks
+- `onOneServer()` on multi-server deployments
+- `runInBackground()` for concurrent long tasks
+- `environments()` to restrict to appropriate environments
+- `takeUntilTimeout()` for time-bounded processing
+- Schedule groups for shared configuration
+
+### 15. Architecture → `rules/architecture.md`
+
+- Single-purpose Action classes; dependency injection over `app()` helper
+- Prefer official Laravel packages and follow conventions, don't override defaults
+- Default to `ORDER BY id DESC` or `created_at DESC`; `mb_*` for UTF-8 safety
+- `defer()` for post-response work; `Context` for request-scoped data; `Concurrency::run()` for parallel execution
+
+### 16. Migrations → `rules/migrations.md`
+
+- Generate migrations with `php artisan make:migration`
+- `constrained()` for foreign keys
+- Never modify migrations that have run in production
+- Add indexes in the migration, not as an afterthought
+- Mirror column defaults in model `$attributes`
+- Reversible `down()` by default; forward-fix migrations for intentionally irreversible changes
+- One concern per migration — never mix DDL and DML
+
+### 17. Collections → `rules/collections.md`
+
+- Higher-order messages for simple collection operations
+- `cursor()` vs. `lazy()` — choose based on relationship needs
+- `lazyById()` when updating records while iterating
+- `toQuery()` for bulk operations on collections
+
+### 18. Blade & Views → `rules/blade-views.md`
+
+- `$attributes->merge()` in component templates
+- Blade components over `@include`; `@pushOnce` for per-component scripts
+- View Composers for shared view data
+- `@aware` for deeply nested component props
+
+### 19. Conventions & Style → `rules/style.md`
+
+- Follow Laravel naming conventions for all entities
+- Prefer Laravel helpers (`Str`, `Arr`, `Number`, `Uri`, `Str::of()`, `$request->string()`) over raw PHP functions
+- No JS/CSS in Blade, no HTML in PHP classes
+- Code should be readable; comments only for config files
+
+## How to Apply
+
+Always use a sub-agent to read rule files and explore this skill's content.
+
+1. Identify the file type and select relevant sections (e.g., migration → §16, controller → §1, §3, §5, §6, §10)
+2. Check sibling files for existing patterns — follow those first per Consistency First
+3. Verify API syntax with `search-docs` for the installed Laravel version

.agents/skills/laravel-best-practices/rules/advanced-queries.md

@@ -0,0 +1,106 @@
+# Advanced Query Patterns
+
+## Use `addSelect()` Subqueries for Single Values from Has-Many
+
+Instead of eager-loading an entire has-many relationship for a single value (like the latest timestamp), use a correlated subquery via `addSelect()`. This pulls the value directly in the main SQL query — zero extra queries.
+
+```php
+public function scopeWithLastLoginAt($query): void
+{
+    $query->addSelect([
+        'last_login_at' => Login::select('created_at')
+            ->whereColumn('user_id', 'users.id')
+            ->latest()
+            ->take(1),
+    ])->withCasts(['last_login_at' => 'datetime']);
+}
+```
+
+## Create Dynamic Relationships via Subquery FK
+
+Extend the `addSelect()` pattern to fetch a foreign key via subquery, then define a `belongsTo` relationship on that virtual attribute. This provides a fully-hydrated related model without loading the entire collection.
+
+```php
+public function lastLogin(): BelongsTo
+{
+    return $this->belongsTo(Login::class);
+}
+
+public function scopeWithLastLogin($query): void
+{
+    $query->addSelect([
+        'last_login_id' => Login::select('id')
+            ->whereColumn('user_id', 'users.id')
+            ->latest()
+            ->take(1),
+    ])->with('lastLogin');
+}
+```
+
+## Use Conditional Aggregates Instead of Multiple Count Queries
+
+Replace N separate `count()` queries with a single query using `CASE WHEN` inside `selectRaw()`. Use `toBase()` to skip model hydration when you only need scalar values.
+
+```php
+$statuses = Feature::toBase()
+    ->selectRaw("count(case when status = 'Requested' then 1 end) as requested")
+    ->selectRaw("count(case when status = 'Planned' then 1 end) as planned")
+    ->selectRaw("count(case when status = 'Completed' then 1 end) as completed")
+    ->first();
+```
+
+## Use `setRelation()` to Prevent Circular N+1
+
+When a parent model is eager-loaded with its children, and the view also needs `$child->parent`, use `setRelation()` to inject the already-loaded parent rather than letting Eloquent fire N additional queries.
+
+```php
+$feature->load('comments.user');
+$feature->comments->each->setRelation('feature', $feature);
+```
+
+## Prefer `whereIn` + Subquery Over `whereHas`
+
+`whereHas()` emits a correlated `EXISTS` subquery that re-executes per row. Using `whereIn()` with a `select('id')` subquery lets the database use an index lookup instead, without loading data into PHP memory.
+
+Incorrect (correlated EXISTS re-executes per row):
+
+```php
+$query->whereHas('company', fn ($q) => $q->where('name', 'like', $term));
+```
+
+Correct (index-friendly subquery, no PHP memory overhead):
+
+```php
+$query->whereIn('company_id', Company::where('name', 'like', $term)->select('id'));
+```
+
+## Sometimes Two Simple Queries Beat One Complex Query
+
+Running a small, targeted secondary query and passing its results via `whereIn` is often faster than a single complex correlated subquery or join. The additional round-trip is worthwhile when the secondary query is highly selective and uses its own index.
+
+## Use Compound Indexes Matching `orderBy` Column Order
+
+When ordering by multiple columns, create a single compound index in the same column order as the `ORDER BY` clause. Individual single-column indexes cannot combine for multi-column sorts — the database will filesort without a compound index.
+
+```php
+// Migration
+$table->index(['last_name', 'first_name']);
+
+// Query — column order must match the index
+User::query()->orderBy('last_name')->orderBy('first_name')->paginate();
+```
+
+## Use Correlated Subqueries for Has-Many Ordering
+
+When sorting by a value from a has-many relationship, avoid joins (they duplicate rows). Use a correlated subquery inside `orderBy()` instead, paired with an `addSelect` scope for eager loading.
+
+```php
+public function scopeOrderByLastLogin($query): void
+{
+    $query->orderByDesc(Login::select('created_at')
+        ->whereColumn('user_id', 'users.id')
+        ->latest()
+        ->take(1)
+    );
+}
+```

.agents/skills/laravel-best-practices/rules/architecture.md

@@ -0,0 +1,202 @@
+# Architecture Best Practices
+
+## Single-Purpose Action Classes
+
+Extract discrete business operations into invokable Action classes.
+
+```php
+class CreateOrderAction
+{
+    public function __construct(private InventoryService $inventory) {}
+
+    public function execute(array $data): Order
+    {
+        $order = Order::create($data);
+        $this->inventory->reserve($order);
+
+        return $order;
+    }
+}
+```
+
+## Use Dependency Injection
+
+Always use constructor injection. Avoid `app()` or `resolve()` inside classes.
+
+Incorrect:
+```php
+class OrderController extends Controller
+{
+    public function store(StoreOrderRequest $request)
+    {
+        $service = app(OrderService::class);
+
+        return $service->create($request->validated());
+    }
+}
+```
+
+Correct:
+```php
+class OrderController extends Controller
+{
+    public function __construct(private OrderService $service) {}
+
+    public function store(StoreOrderRequest $request)
+    {
+        return $this->service->create($request->validated());
+    }
+}
+```
+
+## Code to Interfaces
+
+Depend on contracts at system boundaries (payment gateways, notification channels, external APIs) for testability and swappability.
+
+Incorrect (concrete dependency):
+```php
+class OrderService
+{
+    public function __construct(private StripeGateway $gateway) {}
+}
+```
+
+Correct (interface dependency):
+```php
+interface PaymentGateway
+{
+    public function charge(int $amount, string $customerId): PaymentResult;
+}
+
+class OrderService
+{
+    public function __construct(private PaymentGateway $gateway) {}
+}
+```
+
+Bind in a service provider:
+
+```php
+$this->app->bind(PaymentGateway::class, StripeGateway::class);
+```
+
+## Default Sort by Descending
+
+When no explicit order is specified, sort by `id` or `created_at` descending. Without an explicit `ORDER BY`, row order is undefined.
+
+Incorrect:
+```php
+$posts = Post::paginate();
+```
+
+Correct:
+```php
+$posts = Post::latest()->paginate();
+```
+
+## Use Atomic Locks for Race Conditions
+
+Prevent race conditions with `Cache::lock()` or `lockForUpdate()`.
+
+```php
+Cache::lock('order-processing-'.$order->id, 10)->block(5, function () use ($order) {
+    $order->process();
+});
+
+// Or at query level
+$product = Product::where('id', $id)->lockForUpdate()->first();
+```
+
+## Use `mb_*` String Functions
+
+When no Laravel helper exists, prefer `mb_strlen`, `mb_strtolower`, etc. for UTF-8 safety. Standard PHP string functions count bytes, not characters.
+
+Incorrect:
+```php
+strlen('José');          // 5 (bytes, not characters)
+strtolower('MÜNCHEN');  // 'mÜnchen' — fails on multibyte
+```
+
+Correct:
+```php
+mb_strlen('José');             // 4 (characters)
+mb_strtolower('MÜNCHEN');     // 'münchen'
+
+// Prefer Laravel's Str helpers when available
+Str::length('José');          // 4
+Str::lower('MÜNCHEN');        // 'münchen'
+```
+
+## Use `defer()` for Post-Response Work
+
+For lightweight tasks that don't need to survive a crash (logging, analytics, cleanup), use `defer()` instead of dispatching a job. The callback runs after the HTTP response is sent — no queue overhead.
+
+Incorrect (job overhead for trivial work):
+```php
+dispatch(new LogPageView($page));
+```
+
+Correct (runs after response, same process):
+```php
+defer(fn () => PageView::create(['page_id' => $page->id, 'user_id' => auth()->id()]));
+```
+
+Use jobs when the work must survive process crashes or needs retry logic. Use `defer()` for fire-and-forget work.
+
+## Use `Context` for Request-Scoped Data
+
+The `Context` facade passes data through the entire request lifecycle — middleware, controllers, jobs, logs — without passing arguments manually.
+
+```php
+// In middleware
+Context::add('tenant_id', $request->header('X-Tenant-ID'));
+
+// Anywhere later — controllers, jobs, log context
+$tenantId = Context::get('tenant_id');
+```
+
+Context data automatically propagates to queued jobs and is included in log entries. Use `Context::addHidden()` for sensitive data that should be available in queued jobs but excluded from log context. If data must not leave the current process, do not store it in `Context`.
+
+## Use `Concurrency::run()` for Parallel Execution
+
+Run independent operations in parallel using child processes — no async libraries needed.
+
+```php
+use Illuminate\Support\Facades\Concurrency;
+
+[$users, $orders] = Concurrency::run([
+    fn () => User::count(),
+    fn () => Order::where('status', 'pending')->count(),
+]);
+```
+
+Each closure runs in a separate process with full Laravel access. Use for independent database queries, API calls, or computations that would otherwise run sequentially.
+
+## Convention Over Configuration
+
+Follow Laravel conventions. Don't override defaults unnecessarily.
+
+Incorrect:
+```php
+class Customer extends Model
+{
+    protected $table = 'Customer';
+    protected $primaryKey = 'customer_id';
+
+    public function roles(): BelongsToMany
+    {
+        return $this->belongsToMany(Role::class, 'role_customer', 'customer_id', 'role_id');
+    }
+}
+```
+
+Correct:
+```php
+class Customer extends Model
+{
+    public function roles(): BelongsToMany
+    {
+        return $this->belongsToMany(Role::class);
+    }
+}
+```

.agents/skills/laravel-best-practices/rules/blade-views.md

@@ -0,0 +1,36 @@
+# Blade & Views Best Practices
+
+## Use `$attributes->merge()` in Component Templates
+
+Hardcoding classes prevents consumers from adding their own. `merge()` combines class attributes cleanly.
+
+```blade
+<div {{ $attributes->merge(['class' => 'alert alert-'.$type]) }}>
+    {{ $message }}
+</div>
+```
+
+## Use `@pushOnce` for Per-Component Scripts
+
+If a component renders inside a `@foreach`, `@push` inserts the script N times. `@pushOnce` guarantees it's included exactly once.
+
+## Prefer Blade Components Over `@include`
+
+`@include` shares all parent variables implicitly (hidden coupling). Components have explicit props, attribute bags, and slots.
+
+## Use View Composers for Shared View Data
+
+If every controller rendering a sidebar must pass `$categories`, that's duplicated code. A View Composer centralizes it.
+
+## Use Blade Fragments for Partial Re-Renders (htmx/Turbo)
+
+A single view can return either the full page or just a fragment, keeping routing clean.
+
+```php
+return view('dashboard', compact('users'))
+    ->fragmentIf($request->hasHeader('HX-Request'), 'user-list');
+```
+
+## Use `@aware` for Deeply Nested Component Props
+
+Avoids re-passing parent props through every level of nested components.

.agents/skills/laravel-best-practices/rules/caching.md

@@ -0,0 +1,70 @@
+# Caching Best Practices
+
+## Use `Cache::remember()` Instead of Manual Get/Put
+
+Cleaner cache-aside pattern that removes boilerplate. use `Cache::lock()` for race conditions.
+
+Incorrect:
+```php
+$val = Cache::get('stats');
+if (! $val) {
+    $val = $this->computeStats();
+    Cache::put('stats', $val, 60);
+}
+```
+
+Correct:
+```php
+$val = Cache::remember('stats', 60, fn () => $this->computeStats());
+```
+
+## Use `Cache::flexible()` for Stale-While-Revalidate
+
+On high-traffic keys, one user always gets a slow response when the cache expires. `flexible()` serves slightly stale data while refreshing in the background.
+
+Incorrect: `Cache::remember('users', 300, fn () => User::all());`
+
+Correct: `Cache::flexible('users', [300, 600], fn () => User::all());` — fresh for 5 min, stale-but-served up to 10 min, refreshes via deferred function.
+
+## Use `Cache::memo()` to Avoid Redundant Hits Within a Request
+
+If the same cache key is read multiple times per request (e.g., a service called from multiple places), `memo()` stores the resolved value in memory.
+
+`Cache::memo()->get('settings');` — 5 calls = 1 Redis round-trip instead of 5.
+
+## Use Cache Tags to Invalidate Related Groups
+
+Without tags, invalidating a group of entries requires tracking every key. Tags let you flush atomically. Only works with `redis`, `memcached`, `dynamodb` — not `file` or `database`.
+
+```php
+Cache::tags(['user-1'])->flush();
+```
+
+## Use `Cache::add()` for Atomic Conditional Writes
+
+`add()` only writes if the key does not exist — atomic, no race condition between checking and writing.
+
+Incorrect: `if (! Cache::has('lock')) { Cache::put('lock', true, 10); }`
+
+Correct: `Cache::add('lock', true, 10);`
+
+## Use `once()` for Per-Request Memoization
+
+`once()` memoizes a function's return value for the lifetime of the object (or request for closures). Unlike `Cache::memo()`, it doesn't hit the cache store at all — pure in-memory.
+
+```php
+public function roles(): Collection
+{
+    return once(fn () => $this->loadRoles());
+}
+```
+
+Multiple calls return the cached result without re-executing. Use `once()` for expensive computations called multiple times per request. Use `Cache::memo()` when you also want cross-request caching.
+
+## Configure Failover Cache Stores in Production
+
+If Redis goes down, the app falls back to a secondary store automatically.
+
+```php
+'failover' => ['driver' => 'failover', 'stores' => ['redis', 'database']],
+```

.agents/skills/laravel-best-practices/rules/collections.md

@@ -0,0 +1,44 @@
+# Collection Best Practices
+
+## Use Higher-Order Messages for Simple Operations
+
+Incorrect:
+```php
+$users->each(function (User $user) {
+    $user->markAsVip();
+});
+```
+
+Correct: `$users->each->markAsVip();`
+
+Works with `each`, `map`, `sum`, `filter`, `reject`, `contains`, etc.
+
+## Choose `cursor()` vs. `lazy()` Correctly
+
+- `cursor()` — one model in memory, but cannot eager-load relationships (N+1 risk).
+- `lazy()` — chunked pagination returning a flat LazyCollection, supports eager loading.
+
+Incorrect: `User::with('roles')->cursor()` — eager loading silently ignored.
+
+Correct: `User::with('roles')->lazy()` for relationship access; `User::cursor()` for attribute-only work.
+
+## Use `lazyById()` When Updating Records While Iterating
+
+`lazy()` uses offset pagination — updating records during iteration can skip or double-process. `lazyById()` uses `id > last_id`, safe against mutation.
+
+## Use `toQuery()` for Bulk Operations on Collections
+
+Avoids manual `whereIn` construction.
+
+Incorrect: `User::whereIn('id', $users->pluck('id'))->update([...]);`
+
+Correct: `$users->toQuery()->update([...]);`
+
+## Use `#[CollectedBy]` for Custom Collection Classes
+
+More declarative than overriding `newCollection()`.
+
+```php
+#[CollectedBy(UserCollection::class)]
+class User extends Model {}
+```

.agents/skills/laravel-best-practices/rules/config.md

@@ -0,0 +1,73 @@
+# Configuration Best Practices
+
+## `env()` Only in Config Files
+
+Direct `env()` calls may return `null` when config is cached.
+
+Incorrect:
+```php
+$key = env('API_KEY');
+```
+
+Correct:
+```php
+// config/services.php
+'key' => env('API_KEY'),
+
+// Application code
+$key = config('services.key');
+```
+
+## Use Encrypted Env or External Secrets
+
+Never store production secrets in plain `.env` files in version control.
+
+Incorrect:
+```bash
+
+# .env committed to repo or shared in Slack
+
+STRIPE_SECRET=sk_live_abc123
+AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI
+```
+
+Correct:
+```bash
+php artisan env:encrypt --env=production --readable
+php artisan env:decrypt --env=production
+```
+
+For cloud deployments, prefer the platform's native secret store (AWS Secrets Manager, Vault, etc.) and inject at runtime.
+
+## Use `App::environment()` for Environment Checks
+
+Incorrect:
+```php
+if (env('APP_ENV') === 'production') {
+```
+
+Correct:
+```php
+if (app()->isProduction()) {
+// or
+if (App::environment('production')) {
+```
+
+## Use Constants and Language Files
+
+Use class constants instead of hardcoded magic strings for model states, types, and statuses.
+
+```php
+// Incorrect
+return $this->type === 'normal';
+
+// Correct
+return $this->type === self::TYPE_NORMAL;
+```
+
+If the application already uses language files for localization, use `__()` for user-facing strings too. Do not introduce language files purely for English-only apps — simple string literals are fine there.
+
+```php
+// Only when lang files already exist in the project
+return back()->with('message', __('app.article_added'));
+```

.agents/skills/laravel-best-practices/rules/db-performance.md

@@ -0,0 +1,192 @@
+# Database Performance Best Practices
+
+## Always Eager Load Relationships
+
+Lazy loading causes N+1 query problems — one query per loop iteration. Always use `with()` to load relationships upfront.
+
+Incorrect (N+1 — executes 1 + N queries):
+```php
+$posts = Post::all();
+foreach ($posts as $post) {
+    echo $post->author->name;
+}
+```
+
+Correct (2 queries total):
+```php
+$posts = Post::with('author')->get();
+foreach ($posts as $post) {
+    echo $post->author->name;
+}
+```
+
+Constrain eager loads to select only needed columns (always include the foreign key):
+
+```php
+$users = User::with(['posts' => function ($query) {
+    $query->select('id', 'user_id', 'title')
+          ->where('published', true)
+          ->latest()
+          ->limit(10);
+}])->get();
+```
+
+## Prevent Lazy Loading in Development
+
+Enable this in `AppServiceProvider::boot()` to catch N+1 issues during development.
+
+```php
+public function boot(): void
+{
+    Model::preventLazyLoading(! app()->isProduction());
+}
+```
+
+Throws `LazyLoadingViolationException` when a relationship is accessed without being eager-loaded.
+
+## Select Only Needed Columns
+
+Avoid `SELECT *` — especially when tables have large text or JSON columns.
+
+Incorrect:
+```php
+$posts = Post::with('author')->get();
+```
+
+Correct:
+```php
+$posts = Post::select('id', 'title', 'user_id', 'created_at')
+    ->with(['author:id,name,avatar'])
+    ->get();
+```
+
+When selecting columns on eager-loaded relationships, always include the foreign key column or the relationship won't match.
+
+## Chunk Large Datasets
+
+Never load thousands of records at once. Use chunking for batch processing.
+
+Incorrect:
+```php
+$users = User::all();
+foreach ($users as $user) {
+    $user->notify(new WeeklyDigest);
+}
+```
+
+Correct:
+```php
+User::where('subscribed', true)->chunk(200, function ($users) {
+    foreach ($users as $user) {
+        $user->notify(new WeeklyDigest);
+    }
+});
+```
+
+Use `chunkById()` when modifying records during iteration — standard `chunk()` uses OFFSET which shifts when rows change:
+
+```php
+User::where('active', false)->chunkById(200, function ($users) {
+    $users->each->delete();
+});
+```
+
+## Add Database Indexes
+
+Index columns that appear in `WHERE`, `ORDER BY`, `JOIN`, and `GROUP BY` clauses.
+
+Incorrect:
+```php
+Schema::create('orders', function (Blueprint $table) {
+    $table->id();
+    $table->foreignId('user_id')->constrained();
+    $table->string('status');
+    $table->timestamps();
+});
+```
+
+Correct:
+```php
+Schema::create('orders', function (Blueprint $table) {
+    $table->id();
+    $table->foreignId('user_id')->index()->constrained();
+    $table->string('status')->index();
+    $table->timestamps();
+    $table->index(['status', 'created_at']);
+});
+```
+
+Add composite indexes for common query patterns (e.g., `WHERE status = ? ORDER BY created_at`).
+
+## Use `withCount()` for Counting Relations
+
+Never load entire collections just to count them.
+
+Incorrect:
+```php
+$posts = Post::all();
+foreach ($posts as $post) {
+    echo $post->comments->count();
+}
+```
+
+Correct:
+```php
+$posts = Post::withCount('comments')->get();
+foreach ($posts as $post) {
+    echo $post->comments_count;
+}
+```
+
+Conditional counting:
+
+```php
+$posts = Post::withCount([
+    'comments',
+    'comments as approved_comments_count' => function ($query) {
+        $query->where('approved', true);
+    },
+])->get();
+```
+
+## Use `cursor()` for Memory-Efficient Iteration
+
+For read-only iteration over large result sets, `cursor()` loads one record at a time via a PHP generator.
+
+Incorrect:
+```php
+$users = User::where('active', true)->get();
+```
+
+Correct:
+```php
+foreach (User::where('active', true)->cursor() as $user) {
+    ProcessUser::dispatch($user->id);
+}
+```
+
+Use `cursor()` for read-only iteration. Use `chunk()` / `chunkById()` when modifying records.
+
+## No Queries in Blade Templates
+
+Never execute queries in Blade templates. Pass data from controllers.
+
+Incorrect:
+```blade
+@foreach (User::all() as $user)
+    {{ $user->profile->name }}
+@endforeach
+```
+
+Correct:
+```php
+// Controller
+$users = User::with('profile')->get();
+return view('users.index', compact('users'));
+```
+
+```blade
+@foreach ($users as $user)
+    {{ $user->profile->name }}
+@endforeach
+```

.agents/skills/laravel-best-practices/rules/eloquent.md

@@ -0,0 +1,148 @@
+# Eloquent Best Practices
+
+## Use Correct Relationship Types
+
+Use `hasMany`, `belongsTo`, `morphMany`, etc. with proper return type hints.
+
+```php
+public function comments(): HasMany
+{
+    return $this->hasMany(Comment::class);
+}
+
+public function author(): BelongsTo
+{
+    return $this->belongsTo(User::class, 'user_id');
+}
+```
+
+## Use Local Scopes for Reusable Queries
+
+Extract reusable query constraints into local scopes to avoid duplication.
+
+Incorrect:
+```php
+$active = User::where('verified', true)->whereNotNull('activated_at')->get();
+$articles = Article::whereHas('user', function ($q) {
+    $q->where('verified', true)->whereNotNull('activated_at');
+})->get();
+```
+
+Correct:
+```php
+public function scopeActive(Builder $query): Builder
+{
+    return $query->where('verified', true)->whereNotNull('activated_at');
+}
+
+// Usage
+$active = User::active()->get();
+$articles = Article::whereHas('user', fn ($q) => $q->active())->get();
+```
+
+## Apply Global Scopes Sparingly
+
+Global scopes silently modify every query on the model, making debugging difficult. Prefer local scopes and reserve global scopes for truly universal constraints like soft deletes or multi-tenancy.
+
+Incorrect (global scope for a conditional filter):
+```php
+class PublishedScope implements Scope
+{
+    public function apply(Builder $builder, Model $model): void
+    {
+        $builder->where('published', true);
+    }
+}
+// Now admin panels, reports, and background jobs all silently skip drafts
+```
+
+Correct (local scope you opt into):
+```php
+public function scopePublished(Builder $query): Builder
+{
+    return $query->where('published', true);
+}
+
+Post::published()->paginate(); // Explicit
+Post::paginate(); // Admin sees all
+```
+
+## Define Attribute Casts
+
+Use the `casts()` method (or `$casts` property following project convention) for automatic type conversion.
+
+```php
+protected function casts(): array
+{
+    return [
+        'is_active' => 'boolean',
+        'metadata' => 'array',
+        'total' => 'decimal:2',
+    ];
+}
+```
+
+## Cast Date Columns Properly
+
+Always cast date columns. Use Carbon instances in templates instead of formatting strings manually.
+
+Incorrect:
+```blade
+{{ Carbon::createFromFormat('Y-d-m H-i', $order->ordered_at)->toDateString() }}
+```
+
+Correct:
+```php
+protected function casts(): array
+{
+    return [
+        'ordered_at' => 'datetime',
+    ];
+}
+```
+
+```blade
+{{ $order->ordered_at->toDateString() }}
+{{ $order->ordered_at->format('m-d') }}
+```
+
+## Use `whereBelongsTo()` for Relationship Queries
+
+Cleaner than manually specifying foreign keys.
+
+Incorrect:
+```php
+Post::where('user_id', $user->id)->get();
+```
+
+Correct:
+```php
+Post::whereBelongsTo($user)->get();
+Post::whereBelongsTo($user, 'author')->get();
+```
+
+## Avoid Hardcoded Table Names in Queries
+
+Never use string literals for table names in raw queries, joins, or subqueries. Hardcoded table names make it impossible to find all places a model is used and break refactoring (e.g., renaming a table requires hunting through every raw string).
+
+Incorrect:
+```php
+DB::table('users')->where('active', true)->get();
+
+$query->join('companies', 'companies.id', '=', 'users.company_id');
+
+DB::select('SELECT * FROM orders WHERE status = ?', ['pending']);
+```
+
+Correct — reference the model's table:
+```php
+DB::table((new User)->getTable())->where('active', true)->get();
+
+// Even better — use Eloquent or the query builder instead of raw SQL
+User::where('active', true)->get();
+Order::where('status', 'pending')->get();
+```
+
+Prefer Eloquent queries and relationships over `DB::table()` whenever possible — they already reference the model's table. When `DB::table()` or raw joins are unavoidable, always use `(new Model)->getTable()` to keep the reference traceable.
+
+**Exception — migrations:** In migrations, hardcoded table names via `DB::table('settings')` are acceptable and preferred. Models change over time but migrations are frozen snapshots — referencing a model that is later renamed or deleted would break the migration.

.agents/skills/laravel-best-practices/rules/error-handling.md

@@ -0,0 +1,72 @@
+# Error Handling Best Practices
+
+## Exception Reporting and Rendering
+
+There are two valid approaches — choose one and apply it consistently across the project.
+
+**Co-location on the exception class** — keeps behavior alongside the exception definition, easier to find:
+
+```php
+class InvalidOrderException extends Exception
+{
+    public function report(): void { /* custom reporting */ }
+
+    public function render(Request $request): Response
+    {
+        return response()->view('errors.invalid-order', status: 422);
+    }
+}
+```
+
+**Centralized in `bootstrap/app.php`** — all exception handling in one place, easier to see the full picture:
+
+```php
+->withExceptions(function (Exceptions $exceptions) {
+    $exceptions->report(function (InvalidOrderException $e) { /* ... */ });
+    $exceptions->render(function (InvalidOrderException $e, Request $request) {
+        return response()->view('errors.invalid-order', status: 422);
+    });
+})
+```
+
+Check the existing codebase and follow whichever pattern is already established.
+
+## Use `ShouldntReport` for Exceptions That Should Never Log
+
+More discoverable than listing classes in `dontReport()`.
+
+```php
+class PodcastProcessingException extends Exception implements ShouldntReport {}
+```
+
+## Throttle High-Volume Exceptions
+
+A single failing integration can flood error tracking. Use `throttle()` to rate-limit per exception type.
+
+## Enable `dontReportDuplicates()`
+
+Prevents the same exception instance from being logged multiple times when `report($e)` is called in multiple catch blocks.
+
+## Force JSON Error Rendering for API Routes
+
+Laravel auto-detects `Accept: application/json` but API clients may not set it. Explicitly declare JSON rendering for API routes.
+
+```php
+$exceptions->shouldRenderJsonWhen(function (Request $request, Throwable $e) {
+    return $request->is('api/*') || $request->expectsJson();
+});
+```
+
+## Add Context to Exception Classes
+
+Attach structured data to exceptions at the source via a `context()` method — Laravel includes it automatically in the log entry.
+
+```php
+class InvalidOrderException extends Exception
+{
+    public function context(): array
+    {
+        return ['order_id' => $this->orderId];
+    }
+}
+```

.agents/skills/laravel-best-practices/rules/events-notifications.md

@@ -0,0 +1,52 @@
+# Events & Notifications Best Practices
+
+## Rely on Event Discovery
+
+Laravel auto-discovers listeners by reading `handle(EventType $event)` type-hints. No manual registration needed in `AppServiceProvider`.
+
+## Run `event:cache` in Production Deploy
+
+Event discovery scans the filesystem per-request in dev. Cache it in production: `php artisan optimize` or `php artisan event:cache`.
+
+## Use `ShouldDispatchAfterCommit` Inside Transactions
+
+Without it, a queued listener may process before the DB transaction commits, reading data that doesn't exist yet.
+
+```php
+class OrderShipped implements ShouldDispatchAfterCommit {}
+```
+
+## Always Queue Notifications
+
+Notifications often hit external APIs (email, SMS, Slack). Without `ShouldQueue`, they block the HTTP response.
+
+```php
+class InvoicePaid extends Notification implements ShouldQueue
+{
+    use Queueable;
+}
+```
+
+## Use `afterCommit()` on Notifications in Transactions
+
+Same race condition as events — call `afterCommit()` to delay dispatch until the transaction commits.
+
+```php
+$user->notify((new InvoicePaid($invoice))->afterCommit());
+```
+
+## Route Notification Channels to Dedicated Queues
+
+Mail and database notifications have different priorities. Use `viaQueues()` to route them to separate queues.
+
+## Use On-Demand Notifications for Non-User Recipients
+
+Avoid creating dummy models to send notifications to arbitrary addresses.
+
+```php
+Notification::route('mail', 'admin@example.com')->notify(new SystemAlert());
+```
+
+## Implement `HasLocalePreference` on Notifiable Models
+
+Laravel automatically uses the user's preferred locale for all notifications and mailables — no per-call `locale()` needed.

.agents/skills/laravel-best-practices/rules/http-client.md

@@ -0,0 +1,160 @@
+# HTTP Client Best Practices
+
+## Always Set Explicit Timeouts
+
+The default timeout is 30 seconds — too long for most API calls. Always set explicit `timeout` and `connectTimeout` to fail fast.
+
+Incorrect:
+```php
+$response = Http::get('https://api.example.com/users');
+```
+
+Correct:
+```php
+$response = Http::timeout(5)
+    ->connectTimeout(3)
+    ->get('https://api.example.com/users');
+```
+
+For service-specific clients, define timeouts in a macro:
+
+```php
+Http::macro('github', function () {
+    return Http::baseUrl('https://api.github.com')
+        ->timeout(10)
+        ->connectTimeout(3)
+        ->withToken(config('services.github.token'));
+});
+
+$response = Http::github()->get('/repos/laravel/framework');
+```
+
+## Use Retry with Backoff for External APIs
+
+External APIs have transient failures. Use `retry()` with increasing delays.
+
+Incorrect:
+```php
+$response = Http::post('https://api.stripe.com/v1/charges', $data);
+
+if ($response->failed()) {
+    throw new PaymentFailedException('Charge failed');
+}
+```
+
+Correct:
+```php
+$response = Http::retry([100, 500, 1000])
+    ->timeout(10)
+    ->post('https://api.stripe.com/v1/charges', $data);
+```
+
+Only retry on specific errors:
+
+```php
+$response = Http::retry(3, 100, function (Throwable $exception, PendingRequest $request) {
+    return $exception instanceof ConnectionException
+        || ($exception instanceof RequestException && $exception->response->serverError());
+})->post('https://api.example.com/data');
+```
+
+## Handle Errors Explicitly
+
+The HTTP Client does not throw on 4xx/5xx by default. Always check status or use `throw()`.
+
+Incorrect:
+```php
+$response = Http::get('https://api.example.com/users/1');
+$user = $response->json(); // Could be an error body
+```
+
+Correct:
+```php
+$response = Http::timeout(5)
+    ->get('https://api.example.com/users/1')
+    ->throw();
+
+$user = $response->json();
+```
+
+For graceful degradation:
+
+```php
+$response = Http::get('https://api.example.com/users/1');
+
+if ($response->successful()) {
+    return $response->json();
+}
+
+if ($response->notFound()) {
+    return null;
+}
+
+$response->throw();
+```
+
+## Use Request Pooling for Concurrent Requests
+
+When making multiple independent API calls, use `Http::pool()` instead of sequential calls.
+
+Incorrect:
+```php
+$users = Http::get('https://api.example.com/users')->json();
+$posts = Http::get('https://api.example.com/posts')->json();
+$comments = Http::get('https://api.example.com/comments')->json();
+```
+
+Correct:
+```php
+use Illuminate\Http\Client\Pool;
+
+$responses = Http::pool(fn (Pool $pool) => [
+    $pool->as('users')->get('https://api.example.com/users'),
+    $pool->as('posts')->get('https://api.example.com/posts'),
+    $pool->as('comments')->get('https://api.example.com/comments'),
+]);
+
+$users = $responses['users']->json();
+$posts = $responses['posts']->json();
+```
+
+## Fake HTTP Calls in Tests
+
+Never make real HTTP requests in tests. Use `Http::fake()` and `preventStrayRequests()`.
+
+Incorrect:
+```php
+it('syncs user from API', function () {
+    $service = new UserSyncService;
+    $service->sync(1); // Hits the real API
+});
+```
+
+Correct:
+```php
+it('syncs user from API', function () {
+    Http::preventStrayRequests();
+
+    Http::fake([
+        'api.example.com/users/1' => Http::response([
+            'name' => 'John Doe',
+            'email' => 'john@example.com',
+        ]),
+    ]);
+
+    $service = new UserSyncService;
+    $service->sync(1);
+
+    Http::assertSent(function (Request $request) {
+        return $request->url() === 'https://api.example.com/users/1';
+    });
+});
+```
+
+Test failure scenarios too:
+
+```php
+Http::fake([
+    'api.example.com/*' => Http::failedConnection(),
+]);
+```

.agents/skills/laravel-best-practices/rules/mail.md

@@ -0,0 +1,27 @@
+# Mail Best Practices
+
+## Implement `ShouldQueue` on the Mailable Class
+
+Makes queueing the default regardless of how the mailable is dispatched. No need to remember `Mail::queue()` at every call site — `Mail::send()` also queues it.
+
+## Use `afterCommit()` on Mailables Inside Transactions
+
+A queued mailable dispatched inside a transaction may process before the commit. Use `$this->afterCommit()` in the constructor.
+
+## Use `assertQueued()` Not `assertSent()` for Queued Mailables
+
+`Mail::assertSent()` only catches synchronous mail. Queued mailables fail `assertSent` with a "Did you mean to use assertQueued()?" hint.
+
+Incorrect: `Mail::assertSent(OrderShipped::class);` when mailable implements `ShouldQueue`.
+
+Correct: `Mail::assertQueued(OrderShipped::class);`
+
+## Use Markdown Mailables for Transactional Emails
+
+Markdown mailables auto-generate both HTML and plain-text versions, use responsive components, and allow global style customization. Generate with `--markdown` flag.
+
+## Separate Content Tests from Sending Tests
+
+Content tests: instantiate the mailable directly, call `assertSeeInHtml()`.
+Sending tests: use `Mail::fake()` and `assertSent()`/`assertQueued()`.
+Don't mix them — it conflates concerns and makes tests brittle.

.agents/skills/laravel-best-practices/rules/migrations.md

@@ -0,0 +1,121 @@
+# Migration Best Practices
+
+## Generate Migrations with Artisan
+
+Always use `php artisan make:migration` for consistent naming and timestamps.
+
+Incorrect (manually created file):
+```php
+// database/migrations/posts_migration.php  ← wrong naming, no timestamp
+```
+
+Correct (Artisan-generated):
+```bash
+php artisan make:migration create_posts_table
+php artisan make:migration add_slug_to_posts_table
+```
+
+## Use `constrained()` for Foreign Keys
+
+Automatic naming and referential integrity.
+
+```php
+$table->foreignId('user_id')->constrained()->cascadeOnDelete();
+
+// Non-standard names
+$table->foreignId('author_id')->constrained('users');
+```
+
+## Never Modify Deployed Migrations
+
+Once a migration has run in production, treat it as immutable. Create a new migration to change the table.
+
+Incorrect (editing a deployed migration):
+```php
+// 2024_01_01_create_posts_table.php — already in production
+$table->string('slug')->unique(); // ← added after deployment
+```
+
+Correct (new migration to alter):
+```php
+// 2024_03_15_add_slug_to_posts_table.php
+Schema::table('posts', function (Blueprint $table) {
+    $table->string('slug')->unique()->after('title');
+});
+```
+
+## Add Indexes in the Migration
+
+Add indexes when creating the table, not as an afterthought. Columns used in `WHERE`, `ORDER BY`, and `JOIN` clauses need indexes.
+
+Incorrect:
+```php
+Schema::create('orders', function (Blueprint $table) {
+    $table->id();
+    $table->foreignId('user_id')->constrained();
+    $table->string('status');
+    $table->timestamps();
+});
+```
+
+Correct:
+```php
+Schema::create('orders', function (Blueprint $table) {
+    $table->id();
+    $table->foreignId('user_id')->constrained()->index();
+    $table->string('status')->index();
+    $table->timestamp('shipped_at')->nullable()->index();
+    $table->timestamps();
+});
+```
+
+## Mirror Defaults in Model `$attributes`
+
+When a column has a database default, mirror it in the model so new instances have correct values before saving.
+
+```php
+// Migration
+$table->string('status')->default('pending');
+
+// Model
+protected $attributes = [
+    'status' => 'pending',
+];
+```
+
+## Write Reversible `down()` Methods by Default
+
+Implement `down()` for schema changes that can be safely reversed so `migrate:rollback` works in CI and failed deployments.
+
+```php
+public function down(): void
+{
+    Schema::table('posts', function (Blueprint $table) {
+        $table->dropColumn('slug');
+    });
+}
+```
+
+For intentionally irreversible migrations (e.g., destructive data backfills), leave a clear comment and require a forward fix migration instead of pretending rollback is supported.
+
+## Keep Migrations Focused
+
+One concern per migration. Never mix DDL (schema changes) and DML (data manipulation).
+
+Incorrect (partial failure creates unrecoverable state):
+```php
+public function up(): void
+{
+    Schema::create('settings', function (Blueprint $table) { ... });
+    DB::table('settings')->insert(['key' => 'version', 'value' => '1.0']);
+}
+```
+
+Correct (separate migrations):
+```php
+// Migration 1: create_settings_table
+Schema::create('settings', function (Blueprint $table) { ... });
+
+// Migration 2: seed_default_settings
+DB::table('settings')->insert(['key' => 'version', 'value' => '1.0']);
+```

.agents/skills/laravel-best-practices/rules/queue-jobs.md

@@ -0,0 +1,144 @@
+# Queue & Job Best Practices
+
+## Set `retry_after` Greater Than `timeout`
+
+If `retry_after` is shorter than the job's `timeout`, the queue worker re-dispatches the job while it's still running, causing duplicate execution.
+
+Incorrect (`retry_after` ≤ `timeout`):
+```php
+class ProcessReport implements ShouldQueue
+{
+    public $timeout = 120;
+}
+
+// config/queue.php — retry_after: 90 ← job retried while still running!
+```
+
+Correct (`retry_after` > `timeout`):
+```php
+class ProcessReport implements ShouldQueue
+{
+    public $timeout = 120;
+}
+
+// config/queue.php — retry_after: 180 ← safely longer than any job timeout
+```
+
+## Use Exponential Backoff
+
+Use progressively longer delays between retries to avoid hammering failing services.
+
+Incorrect (fixed retry interval):
+```php
+class SyncWithStripe implements ShouldQueue
+{
+    public $tries = 3;
+    // Default: retries immediately, overwhelming the API
+}
+```
+
+Correct (exponential backoff):
+```php
+class SyncWithStripe implements ShouldQueue
+{
+    public $tries = 3;
+    public $backoff = [1, 5, 10];
+}
+```
+
+## Implement `ShouldBeUnique`
+
+Prevent duplicate job processing.
+
+```php
+class GenerateInvoice implements ShouldQueue, ShouldBeUnique
+{
+    public function uniqueId(): string
+    {
+        return $this->order->id;
+    }
+
+    public $uniqueFor = 3600;
+}
+```
+
+## Always Implement `failed()`
+
+Handle errors explicitly — don't rely on silent failure.
+
+```php
+public function failed(?Throwable $exception): void
+{
+    $this->podcast->update(['status' => 'failed']);
+    Log::error('Processing failed', ['id' => $this->podcast->id, 'error' => $exception->getMessage()]);
+}
+```
+
+## Rate Limit External API Calls in Jobs
+
+Use `RateLimited` middleware to throttle jobs calling third-party APIs.
+
+```php
+public function middleware(): array
+{
+    return [new RateLimited('external-api')];
+}
+```
+
+## Batch Related Jobs
+
+Use `Bus::batch()` when jobs should succeed or fail together.
+
+```php
+Bus::batch([
+    new ImportCsvChunk($chunk1),
+    new ImportCsvChunk($chunk2),
+])
+->then(fn (Batch $batch) => Notification::send($user, new ImportComplete))
+->catch(fn (Batch $batch, Throwable $e) => Log::error('Batch failed'))
+->dispatch();
+```
+
+## `retryUntil()` Needs `$tries = 0`
+
+When using time-based retry limits, set `$tries = 0` to avoid premature failure.
+
+```php
+public $tries = 0;
+
+public function retryUntil(): \DateTimeInterface
+{
+    return now()->addHours(4);
+}
+```
+
+## Use `ShouldBeUniqueUntilProcessing` for Early Lock Release
+
+`ShouldBeUnique` holds the lock until the job completes. `ShouldBeUniqueUntilProcessing` releases it when processing starts, allowing new instances to queue.
+
+```php
+class UpdateSearchIndex implements ShouldQueue, ShouldBeUniqueUntilProcessing
+{
+    // Lock releases when processing begins, not when it finishes
+}
+```
+
+## Use Horizon for Complex Queue Scenarios
+
+Use Laravel Horizon when you need monitoring, auto-scaling, failure tracking, or multiple queues with different priorities.
+
+```php
+// config/horizon.php
+'environments' => [
+    'production' => [
+        'supervisor-1' => [
+            'connection' => 'redis',
+            'queue' => ['high', 'default', 'low'],
+            'balance' => 'auto',
+            'minProcesses' => 1,
+            'maxProcesses' => 10,
+            'tries' => 3,
+        ],
+    ],
+],
+```

.agents/skills/laravel-best-practices/rules/routing.md

@@ -0,0 +1,99 @@
+# Routing & Controllers Best Practices
+
+## Use Implicit Route Model Binding
+
+Let Laravel resolve models automatically from route parameters.
+
+Incorrect:
+```php
+public function show(int $id)
+{
+    $post = Post::findOrFail($id);
+}
+```
+
+Correct:
+```php
+public function show(Post $post)
+{
+    return view('posts.show', ['post' => $post]);
+}
+```
+
+## Use Scoped Bindings for Nested Resources
+
+Enforce parent-child relationships automatically.
+
+```php
+Route::get('/users/{user}/posts/{post}', function (User $user, Post $post) {
+    // $post is automatically scoped to $user
+})->scopeBindings();
+```
+
+## Use Resource Controllers
+
+Use `Route::resource()` or `apiResource()` for RESTful endpoints.
+
+```php
+Route::resource('posts', PostController::class);
+// In routes/api.php — the /api prefix is applied automatically
+Route::apiResource('posts', Api\PostController::class);
+```
+
+## Keep Controllers Thin
+
+Aim for under 10 lines per method. Extract business logic to action or service classes.
+
+Incorrect:
+```php
+public function store(Request $request)
+{
+    $validated = $request->validate([...]);
+    if ($request->hasFile('image')) {
+        $request->file('image')->move(public_path('images'));
+    }
+    $post = Post::create($validated);
+    $post->tags()->sync($validated['tags']);
+    event(new PostCreated($post));
+    return redirect()->route('posts.show', $post);
+}
+```
+
+Correct:
+```php
+public function store(StorePostRequest $request, CreatePostAction $create)
+{
+    $post = $create->execute($request->validated());
+
+    return redirect()->route('posts.show', $post);
+}
+```
+
+## Type-Hint Form Requests
+
+Type-hinting Form Requests triggers automatic validation and authorization before the method executes.
+
+Incorrect:
+```php
+public function store(Request $request): RedirectResponse
+{
+    $validated = $request->validate([
+        'title' => ['required', 'max:255'],
+        'body' => ['required'],
+    ]);
+
+    Post::create($validated);
+
+    return redirect()->route('posts.index');
+}
+```
+
+Correct:
+```php
+public function store(StorePostRequest $request): RedirectResponse
+{
+    Post::create($request->validated());
+
+    return redirect()->route('posts.index');
+}
+```

.agents/skills/laravel-best-practices/rules/scheduling.md

@@ -0,0 +1,39 @@
+# Task Scheduling Best Practices
+
+## Use `withoutOverlapping()` on Variable-Duration Tasks
+
+Without it, a long-running task spawns a second instance on the next tick, causing double-processing or resource exhaustion.
+
+## Use `onOneServer()` on Multi-Server Deployments
+
+Without it, every server runs the same task simultaneously. Requires a shared cache driver (Redis, database, Memcached).
+
+## Use `runInBackground()` for Concurrent Long Tasks
+
+By default, tasks at the same tick run sequentially. A slow first task delays all subsequent ones. `runInBackground()` runs them as separate processes.
+
+## Use `environments()` to Restrict Tasks
+
+Prevent accidental execution of production-only tasks (billing, reporting) on staging.
+
+```php
+Schedule::command('billing:charge')->monthly()->environments(['production']);
+```
+
+## Use `takeUntilTimeout()` for Time-Bounded Processing
+
+A task running every 15 minutes that processes an unbounded cursor can overlap with the next run. Bound execution time.
+
+## Use Schedule Groups for Shared Configuration
+
+Avoid repeating `->onOneServer()->timezone('America/New_York')` across many tasks.
+
+```php
+Schedule::daily()
+    ->onOneServer()
+    ->timezone('America/New_York')
+    ->group(function () {
+        Schedule::command('emails:send --force');
+        Schedule::command('emails:prune');
+    });
+```

.agents/skills/laravel-best-practices/rules/security.md

@@ -0,0 +1,198 @@
+# Security Best Practices
+
+## Mass Assignment Protection
+
+Every model must define `$fillable` (whitelist) or `$guarded` (blacklist).
+
+Incorrect:
+```php
+class User extends Model
+{
+    protected $guarded = []; // All fields are mass assignable
+}
+```
+
+Correct:
+```php
+class User extends Model
+{
+    protected $fillable = [
+        'name',
+        'email',
+        'password',
+    ];
+}
+```
+
+Never use `$guarded = []` on models that accept user input.
+
+## Authorize Every Action
+
+Use policies or gates in controllers. Never skip authorization.
+
+Incorrect:
+```php
+public function update(UpdatePostRequest $request, Post $post)
+{
+    $post->update($request->validated());
+}
+```
+
+Correct:
+```php
+public function update(UpdatePostRequest $request, Post $post)
+{
+    Gate::authorize('update', $post);
+
+    $post->update($request->validated());
+}
+```
+
+Or via Form Request:
+
+```php
+public function authorize(): bool
+{
+    return $this->user()->can('update', $this->route('post'));
+}
+```
+
+## Prevent SQL Injection
+
+Always use parameter binding. Never interpolate user input into queries.
+
+Incorrect:
+```php
+DB::select("SELECT * FROM users WHERE name = '{$request->name}'");
+```
+
+Correct:
+```php
+User::where('name', $request->name)->get();
+
+// Raw expressions with bindings
+User::whereRaw('LOWER(name) = ?', [strtolower($request->name)])->get();
+```
+
+## Escape Output to Prevent XSS
+
+Use `{{ }}` for HTML escaping. Only use `{!! !!}` for trusted, pre-sanitized content.
+
+Incorrect:
+```blade
+{!! $user->bio !!}
+```
+
+Correct:
+```blade
+{{ $user->bio }}
+```
+
+## CSRF Protection
+
+Include `@csrf` in all POST/PUT/DELETE Blade forms. In Inertia apps, the `@csrf` directive is automatically applied.
+
+Incorrect:
+```blade
+<form method="POST" action="/posts">
+    <input type="text" name="title">
+</form>
+```
+
+Correct:
+```blade
+<form method="POST" action="/posts">
+    @csrf
+    <input type="text" name="title">
+</form>
+```
+
+## Rate Limit Auth and API Routes
+
+Apply `throttle` middleware to authentication and API routes.
+
+```php
+RateLimiter::for('login', function (Request $request) {
+    return Limit::perMinute(5)->by($request->ip());
+});
+
+Route::post('/login', LoginController::class)->middleware('throttle:login');
+```
+
+## Validate File Uploads
+
+Validate extension, MIME type, and size. The `mimes` rule checks extensions; use `mimetypes` for actual MIME type validation. Never trust client-provided filenames.
+
+```php
+public function rules(): array
+{
+    return [
+        'avatar' => ['required', 'image', 'mimes:jpg,jpeg,png,webp', 'max:2048'],
+    ];
+}
+```
+
+Store with generated filenames:
+
+```php
+$path = $request->file('avatar')->store('avatars', 'public');
+```
+
+## Keep Secrets Out of Code
+
+Never commit `.env`. Access secrets via `config()` only.
+
+Incorrect:
+```php
+$key = env('API_KEY');
+```
+
+Correct:
+```php
+// config/services.php
+'api_key' => env('API_KEY'),
+
+// In application code
+$key = config('services.api_key');
+```
+
+## Audit Dependencies
+
+Run `composer audit` periodically to check for known vulnerabilities in dependencies. Automate this in CI to catch issues before deployment.
+
+```bash
+composer audit
+```
+
+## Encrypt Sensitive Database Fields
+
+Use `encrypted` cast for API keys/tokens and mark the attribute as `hidden`.
+
+Incorrect:
+```php
+class Integration extends Model
+{
+    protected function casts(): array
+    {
+        return [
+            'api_key' => 'string',
+        ];
+    }
+}
+```
+
+Correct:
+```php
+class Integration extends Model
+{
+    protected $hidden = ['api_key', 'api_secret'];
+
+    protected function casts(): array
+    {
+        return [
+            'api_key' => 'encrypted',
+            'api_secret' => 'encrypted',
+        ];
+    }
+}
+```

.agents/skills/laravel-best-practices/rules/style.md

@@ -0,0 +1,125 @@
+# Conventions & Style
+
+## Follow Laravel Naming Conventions
+
+| What | Convention | Good | Bad |
+|------|-----------|------|-----|
+| Controller | singular | `ArticleController` | `ArticlesController` |
+| Model | singular | `User` | `Users` |
+| Table | plural, snake_case | `article_comments` | `articleComments` |
+| Pivot table | singular alphabetical | `article_user` | `user_article` |
+| Column | snake_case, no model name | `meta_title` | `article_meta_title` |
+| Foreign key | singular model + `_id` | `article_id` | `articles_id` |
+| Route | plural | `articles/1` | `article/1` |
+| Route name | snake_case with dots | `users.show_active` | `users.show-active` |
+| Method | camelCase | `getAll` | `get_all` |
+| Variable | camelCase | `$articlesWithAuthor` | `$articles_with_author` |
+| Collection | descriptive, plural | `$activeUsers` | `$data` |
+| Object | descriptive, singular | `$activeUser` | `$users` |
+| View | kebab-case | `show-filtered.blade.php` | `showFiltered.blade.php` |
+| Config | snake_case | `google_calendar.php` | `googleCalendar.php` |
+| Enum | singular | `UserType` | `UserTypes` |
+
+## Prefer Shorter Readable Syntax
+
+| Verbose | Shorter |
+|---------|---------|
+| `Session::get('cart')` | `session('cart')` |
+| `$request->session()->get('cart')` | `session('cart')` |
+| `$request->input('name')` | `$request->name` |
+| `return Redirect::back()` | `return back()` |
+| `Carbon::now()` | `now()` |
+| `App::make('Class')` | `app('Class')` |
+| `->where('column', '=', 1)` | `->where('column', 1)` |
+| `->orderBy('created_at', 'desc')` | `->latest()` |
+| `->orderBy('created_at', 'asc')` | `->oldest()` |
+| `->first()->name` | `->value('name')` |
+
+## Use Laravel String & Array Helpers
+
+Laravel provides `Str`, `Arr`, `Number`, and `Uri` helper classes that are more readable, chainable, and UTF-8 safe than raw PHP functions. Always prefer them.
+
+Strings — use `Str` and fluent `Str::of()` over raw PHP:
+```php
+// Incorrect
+$slug = strtolower(str_replace(' ', '-', $title));
+$short = substr($text, 0, 100) . '...';
+$class = substr(strrchr('App\Models\User', '\'), 1);
+
+// Correct
+$slug = Str::slug($title);
+$short = Str::limit($text, 100);
+$class = class_basename('App\Models\User');
+```
+
+Fluent strings — chain operations for complex transformations:
+```php
+// Incorrect
+$result = strtolower(trim(str_replace('_', '-', $input)));
+
+// Correct
+$result = Str::of($input)->trim()->replace('_', '-')->lower();
+```
+
+Key `Str` methods to prefer: `Str::slug()`, `Str::limit()`, `Str::contains()`, `Str::before()`, `Str::after()`, `Str::between()`, `Str::camel()`, `Str::snake()`, `Str::kebab()`, `Str::headline()`, `Str::squish()`, `Str::mask()`, `Str::uuid()`, `Str::ulid()`, `Str::random()`, `Str::is()`.
+
+Arrays — use `Arr` over raw PHP:
+```php
+// Incorrect
+$name = isset($array['user']['name']) ? $array['user']['name'] : 'default';
+
+// Correct
+$name = Arr::get($array, 'user.name', 'default');
+```
+
+Key `Arr` methods: `Arr::get()`, `Arr::has()`, `Arr::only()`, `Arr::except()`, `Arr::first()`, `Arr::flatten()`, `Arr::pluck()`, `Arr::where()`, `Arr::wrap()`.
+
+Numbers — use `Number` for display formatting:
+```php
+Number::format(1000000);          // "1,000,000"
+Number::currency(1500, 'USD');    // "$1,500.00"
+Number::abbreviate(1000000);      // "1M"
+Number::fileSize(1024 * 1024);    // "1 MB"
+Number::percentage(75.5);         // "75.5%"
+```
+
+URIs — use `Uri` for URL manipulation:
+```php
+$uri = Uri::of('https://example.com/search')
+    ->withQuery(['q' => 'laravel', 'page' => 1]);
+```
+
+Use `$request->string('name')` to get a fluent `Stringable` directly from request input for immediate chaining.
+
+Use `search-docs` for the full list of available methods — these helpers are extensive.
+
+## No Inline JS/CSS in Blade
+
+Do not put JS or CSS in Blade templates. Do not put HTML in PHP classes.
+
+Incorrect:
+```blade
+let article = `{{ json_encode($article) }}`;
+```
+
+Correct:
+```blade
+<button class="js-fav-article" data-article='@json($article)'>{{ $article->name }}</button>
+```
+
+Pass data to JS via data attributes or use a dedicated PHP-to-JS package.
+
+## No Unnecessary Comments
+
+Code should be readable on its own. Use descriptive method and variable names instead of comments. The only exception is config files, where descriptive comments are expected.
+
+Incorrect:
+```php
+// Check if there are any joins
+if (count((array) $builder->getQuery()->joins) > 0)
+```
+
+Correct:
+```php
+if ($this->hasJoins())
+```

.agents/skills/laravel-best-practices/rules/testing.md

@@ -0,0 +1,43 @@
+# Testing Best Practices
+
+## Use `LazilyRefreshDatabase` Over `RefreshDatabase`
+
+`RefreshDatabase` migrates once per process and wraps each test in a rolled-back transaction. `LazilyRefreshDatabase` skips even that first migration if the schema is already up to date.
+
+## Use Model Assertions Over Raw Database Assertions
+
+Incorrect: `$this->assertDatabaseHas('users', ['id' => $user->id]);`
+
+Correct: `$this->assertModelExists($user);`
+
+More expressive, type-safe, and fails with clearer messages.
+
+## Use Factory States and Sequences
+
+Named states make tests self-documenting. Sequences eliminate repetitive setup.
+
+Incorrect: `User::factory()->create(['email_verified_at' => null]);`
+
+Correct: `User::factory()->unverified()->create();`
+
+## Use `Exceptions::fake()` to Assert Exception Reporting
+
+Instead of `withoutExceptionHandling()`, use `Exceptions::fake()` to assert the correct exception was reported while the request completes normally.
+
+## Call `Event::fake()` After Factory Setup
+
+Model factories rely on model events (e.g., `creating` to generate UUIDs). Calling `Event::fake()` before factory calls silences those events, producing broken models.
+
+Incorrect: `Event::fake(); $user = User::factory()->create();`
+
+Correct: `$user = User::factory()->create(); Event::fake();`
+
+## Use `recycle()` to Share Relationship Instances Across Factories
+
+Without `recycle()`, nested factories create separate instances of the same conceptual entity.
+
+```php
+Ticket::factory()
+    ->recycle(Airline::factory()->create())
+    ->create();
+```

.agents/skills/laravel-best-practices/rules/validation.md

@@ -0,0 +1,75 @@
+# Validation & Forms Best Practices
+
+## Use Form Request Classes
+
+Extract validation from controllers into dedicated Form Request classes.
+
+Incorrect:
+```php
+public function store(Request $request)
+{
+    $request->validate([
+        'title' => 'required|max:255',
+        'body' => 'required',
+    ]);
+}
+```
+
+Correct:
+```php
+public function store(StorePostRequest $request)
+{
+    Post::create($request->validated());
+}
+```
+
+## Array vs. String Notation for Rules
+
+Array syntax is more readable and composes cleanly with `Rule::` objects. Prefer it in new code, but check existing Form Requests first and match whatever notation the project already uses.
+
+```php
+// Preferred for new code
+'email' => ['required', 'email', Rule::unique('users')],
+
+// Follow existing convention if the project uses string notation
+'email' => 'required|email|unique:users',
+```
+
+## Always Use `validated()`
+
+Get only validated data. Never use `$request->all()` for mass operations.
+
+Incorrect:
+```php
+Post::create($request->all());
+```
+
+Correct:
+```php
+Post::create($request->validated());
+```
+
+## Use `Rule::when()` for Conditional Validation
+
+```php
+'company_name' => [
+    Rule::when($this->account_type === 'business', ['required', 'string', 'max:255']),
+],
+```
+
+## Use the `after()` Method for Custom Validation
+
+Use `after()` instead of `withValidator()` for custom validation logic that depends on multiple fields.
+
+```php
+public function after(): array
+{
+    return [
+        function (Validator $validator) {
+            if ($this->quantity > Product::find($this->product_id)?->stock) {
+                $validator->errors()->add('quantity', 'Not enough stock.');
+            }
+        },
+    ];
+}
+```

.agents/skills/pest-testing/SKILL.md

@@ -0,0 +1,110 @@
+---
+name: pest-testing
+description: "Use this skill for Pest PHP testing in Laravel projects only. Trigger whenever any test is being written, edited, fixed, or refactored — including fixing tests that broke after a code change, adding assertions, converting PHPUnit to Pest, adding datasets, and TDD workflows. Always activate when the user asks how to write something in Pest, mentions test files or directories (tests/Feature, tests/Unit) or architecture tests. Covers: test()/it()/expect() syntax, datasets, mocking, browser testing, arch(), Livewire component tests, RefreshDatabase, and all Pest 3 features. Do not use for editing factories, seeders, migrations, controllers, models, or non-test PHP code."
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Pest Testing 3
+
+## Documentation
+
+Use `search-docs` for detailed Pest 3 patterns and documentation.
+
+## Basic Usage
+
+### Creating Tests
+
+All tests must be written using Pest. Use `vendor/bin/sail artisan make:test --pest {name}`.
+
+### Test Organization
+
+- Tests live in the `tests/Feature` and `tests/Unit` directories.
+- Do NOT remove tests without approval - these are core application code.
+- Test happy paths, failure paths, and edge cases.
+
+### Basic Test Structure
+
+Pest supports both `test()` and `it()` functions. Before writing new tests, check existing test files in the same directory to match the project's convention. Use `test()` if existing tests use `test()`, or `it()` if they use `it()`.
+
+<!-- Basic Pest Test Example -->
+```php
+it('is true', function () {
+    expect(true)->toBeTrue();
+});
+```
+
+### Running Tests
+
+- Run minimal tests with filter before finalizing: `vendor/bin/sail artisan test --compact --filter=testName`.
+- Run all tests: `vendor/bin/sail artisan test --compact`.
+- Run file: `vendor/bin/sail artisan test --compact tests/Feature/ExampleTest.php`.
+
+## Assertions
+
+Use specific assertions (`assertSuccessful()`, `assertNotFound()`) instead of `assertStatus()`:
+
+<!-- Pest Response Assertion -->
+```php
+it('returns all', function () {
+    $this->postJson('/api/docs', [])->assertSuccessful();
+});
+```
+
+| Use | Instead of |
+|-----|------------|
+| `assertSuccessful()` | `assertStatus(200)` |
+| `assertNotFound()` | `assertStatus(404)` |
+| `assertForbidden()` | `assertStatus(403)` |
+
+## Mocking
+
+Import mock function before use: `use function Pest\Laravel\mock;`
+
+## Datasets
+
+Use datasets for repetitive tests (validation rules, etc.):
+
+<!-- Pest Dataset Example -->
+```php
+it('has emails', function (string $email) {
+    expect($email)->not->toBeEmpty();
+})->with([
+    'james' => 'james@laravel.com',
+    'taylor' => 'taylor@laravel.com',
+]);
+```
+
+## Pest 3 Features
+
+### Architecture Testing
+
+Pest 3 includes architecture testing to enforce code conventions:
+
+<!-- Architecture Test Example -->
+```php
+arch('controllers')
+    ->expect('App\Http\Controllers')
+    ->toExtendNothing()
+    ->toHaveSuffix('Controller');
+
+arch('models')
+    ->expect('App\Models')
+    ->toExtend('Illuminate\Database\Eloquent\Model');
+
+arch('no debugging')
+    ->expect(['dd', 'dump', 'ray'])
+    ->not->toBeUsed();
+```
+
+### Type Coverage
+
+Pest 3 provides improved type coverage analysis. Run with `--type-coverage` flag.
+
+## Common Pitfalls
+
+- Not importing `use function Pest\Laravel\mock;` before using mock
+- Using `assertStatus(200)` instead of `assertSuccessful()`
+- Forgetting datasets for repetitive validation tests
+- Deleting tests without approval

.agents/skills/tailwindcss-development/SKILL.md

@@ -0,0 +1,119 @@
+---
+name: tailwindcss-development
+description: "Always invoke when the user's message includes 'tailwind' in any form. Also invoke for: building responsive grid layouts (multi-column card grids, product grids), flex/grid page structures (dashboards with sidebars, fixed topbars, mobile-toggle navs), styling UI components (cards, tables, navbars, pricing sections, forms, inputs, badges), adding dark mode variants, fixing spacing or typography, and Tailwind v3/v4 work. The core use case: writing or fixing Tailwind utility classes in HTML templates (Blade, JSX, Vue). Skip for backend PHP logic, database queries, API routes, JavaScript with no HTML/CSS component, CSS file audits, build tool configuration, and vanilla CSS."
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Tailwind CSS Development
+
+## Documentation
+
+Use `search-docs` for detailed Tailwind CSS v4 patterns and documentation.
+
+## Basic Usage
+
+- Use Tailwind CSS classes to style HTML. Check and follow existing Tailwind conventions in the project before introducing new patterns.
+- Offer to extract repeated patterns into components that match the project's conventions (e.g., Blade, JSX, Vue).
+- Consider class placement, order, priority, and defaults. Remove redundant classes, add classes to parent or child elements carefully to reduce repetition, and group elements logically.
+
+## Tailwind CSS v4 Specifics
+
+- Always use Tailwind CSS v4 and avoid deprecated utilities.
+- `corePlugins` is not supported in Tailwind v4.
+
+### CSS-First Configuration
+
+In Tailwind v4, configuration is CSS-first using the `@theme` directive — no separate `tailwind.config.js` file is needed:
+
+<!-- CSS-First Config -->
+```css
+@theme {
+  --color-brand: oklch(0.72 0.11 178);
+}
+```
+
+### Import Syntax
+
+In Tailwind v4, import Tailwind with a regular CSS `@import` statement instead of the `@tailwind` directives used in v3:
+
+<!-- v4 Import Syntax -->
+```diff
+- @tailwind base;
+- @tailwind components;
+- @tailwind utilities;
++ @import "tailwindcss";
+```
+
+### Replaced Utilities
+
+Tailwind v4 removed deprecated utilities. Use the replacements shown below. Opacity values remain numeric.
+
+| Deprecated | Replacement |
+|------------|-------------|
+| bg-opacity-* | bg-black/* |
+| text-opacity-* | text-black/* |
+| border-opacity-* | border-black/* |
+| divide-opacity-* | divide-black/* |
+| ring-opacity-* | ring-black/* |
+| placeholder-opacity-* | placeholder-black/* |
+| flex-shrink-* | shrink-* |
+| flex-grow-* | grow-* |
+| overflow-ellipsis | text-ellipsis |
+| decoration-slice | box-decoration-slice |
+| decoration-clone | box-decoration-clone |
+
+## Spacing
+
+Use `gap` utilities instead of margins for spacing between siblings:
+
+<!-- Gap Utilities -->
+```html
+<div class="flex gap-8">
+    <div>Item 1</div>
+    <div>Item 2</div>
+</div>
+```
+
+## Dark Mode
+
+If existing pages and components support dark mode, new pages and components must support it the same way, typically using the `dark:` variant:
+
+<!-- Dark Mode -->
+```html
+<div class="bg-white dark:bg-gray-900 text-gray-900 dark:text-white">
+    Content adapts to color scheme
+</div>
+```
+
+## Common Patterns
+
+### Flexbox Layout
+
+<!-- Flexbox Layout -->
+```html
+<div class="flex items-center justify-between gap-4">
+    <div>Left content</div>
+    <div>Right content</div>
+</div>
+```
+
+### Grid Layout
+
+<!-- Grid Layout -->
+```html
+<div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6">
+    <div>Card 1</div>
+    <div>Card 2</div>
+    <div>Card 3</div>
+</div>
+```
+
+## Common Pitfalls
+
+- Using deprecated v3 utilities (bg-opacity-*, flex-shrink-*, etc.)
+- Using `@tailwind` directives instead of `@import "tailwindcss"`
+- Trying to use `tailwind.config.js` instead of CSS `@theme` directive
+- Using margins for spacing between siblings instead of gap utilities
+- Forgetting to add dark mode variants when the project uses dark mode

.agents/skills/volt-development/SKILL.md

@@ -0,0 +1,88 @@
+---
+name: volt-development
+description: "Develops single-file Livewire components with Volt. Activates when creating Volt components, converting Livewire to Volt, working with @volt directive, functional or class-based Volt APIs; or when the user mentions Volt, single-file components, functional Livewire, or inline component logic in Blade files."
+license: MIT
+metadata:
+  author: laravel
+---
+
+# Volt Development
+
+## Documentation
+
+Use `search-docs` for detailed Volt patterns and documentation.
+
+## Basic Usage
+
+Create components with `vendor/bin/sail artisan make:volt [name] [--test] [--pest]`.
+
+Important: Check existing Volt components to determine if they use functional or class-based style before creating new ones.
+
+### Functional Components
+
+<!-- Volt Functional Component -->
+```php
+@@volt
+<?php
+use function Livewire\Volt\{state, computed};
+
+state(['count' => 0]);
+
+$increment = fn () => $this->count++;
+$double = computed(fn () => $this->count * 2);
+?>
+
+<div>
+    <h1>Count: @{{ $count }} (Double: @{{ $this->double }})</h1>
+    <button wire:click="increment">+</button>
+</div>
+@@endvolt
+```
+
+### Class-Based Components
+
+<!-- Volt Class-based Component -->
+```php
+use Livewire\Volt\Component;
+
+new class extends Component {
+    public int $count = 0;
+
+    public function increment(): void
+    {
+        $this->count++;
+    }
+} ?>
+
+<div>
+    <h1>@{{ $count }}</h1>
+    <button wire:click="increment">+</button>
+</div>
+```
+
+## Testing
+
+Tests go in existing Volt test directory or `tests/Feature/Volt`:
+
+<!-- Volt Test Example -->
+```php
+use Livewire\Volt\Volt;
+
+test('counter increments', function () {
+    Volt::test('counter')
+        ->assertSee('Count: 0')
+        ->call('increment')
+        ->assertSee('Count: 1');
+});
+```
+
+## Verification
+
+1. Check existing components for functional vs class-based style
+2. Test component with `Volt::test()`
+
+## Common Pitfalls
+
+- Not checking existing style (functional vs class-based) before creating
+- Forgetting `@volt` directive wrapper
+- Missing `--test` or `--pest` flag when tests are needed

.codex/config.toml

@@ -0,0 +1,22 @@
+[mcp_servers.context7]
+args = [
+    "-y",
+    "@upstash/context7-mcp",
+    "--api-key",
+    "ctx7sk-119cd4ab-8983-4229-8702-e84c59c34fc9",
+]
+command = "npx"
+[mcp_servers.playwright]
+url = "https://playwright.test/mcp"
+
+[mcp_servers.sequential-thinking]
+args = [
+    "-y",
+    "@modelcontextprotocol/server-sequential-thinking",
+]
+command = "npx"
+
+[mcp_servers.laravel-boost]
+command = "php"
+args = ["artisan", "boost:mcp"]
+cwd = "/var/www/html"

.cursorrules

@@ -0,0 +1,15 @@
+# Cursor Rules: Laravel 12 CRM & Presse-Portal
+
+## Tech Stack & Paradigmen
+- **Framework:** Laravel 12 (PHP 8.4+)
+- **Frontend-Architektur:** Livewire Volt (ausschließlich Functional API).
+- **UI-Komponenten:** FluxUI (nutze `<flux:...>` statt Standard-Blade/HTML).
+- **Styling:** Tailwind CSS (für Layout) & FluxUI (für Komponenten).
+- **Backend:** Klassisches MVC für das Admin-System, Services für Business-Logik.
+
+## Documentation & Sources
+- **Projekt-Workflow (Dokumentation in `docs/`, Forgejo `tea`, Git/Conventional Commits):** `docs/KI-UND-ENTWICKLER-WORKFLOW.md`
+- **FluxUI:** Nutze primär die indizierte Dokumentation unter @FluxUI (falls vorhanden).
+- **Verhaltensregel:** Wenn du dir bei einer FluxUI-Komponente unsicher bist (da sich die API oft ändert), frage mich oder nutze das @Docs Tool, anstatt zu raten.
+- **Wichtige Syntax-Note:** FluxUI nutzt oft spezifische Attribute (wie `variant="subtle"` oder `icon-trailing`). Bevorzuge immer die Syntax der neuesten Version 2.x.
+

.devcontainer/Readme.md

@@ -47,7 +47,7 @@ Das Dockerfile wurde angepasst um:
 Falls die automatische Installation fehlschlägt, können Sie den Container manuell bauen:
 
 ```bash
-cd /Users/pandora/Sites/pr-copilot.eu
+cd /Users/pandora/Sites/pressekonto.de
 docker build --build-arg WWWUSER=501 --build-arg WWWGROUP=20 -f docker/8.4/Dockerfile -t sail-8.4/app docker/8.4
 ```
 

.devcontainer/Untitled

@@ -0,0 +1 @@
+.devcontainer

.devcontainer/devcontainer.json

@@ -1,63 +1,45 @@
 {
-    "name": "PR-Copilot (Dev Container)",
-    // 1. DIES IST DER WICHTIGSTE TEIL:
-    // Wir verwenden Docker Compose für alle Services
+    "name": "Pressekonto (Dev Container)",
     "dockerComposeFile": [
         "../docker-compose.yml"
     ],
     "service": "laravel.test",
-    // 3. WIR DEFINIEREN DEN ARBEITSBEREICH:
-    // Das ist der Pfad, in dem Ihr Code *innerhalb* des Containers liegt.
     "workspaceFolder": "/var/www/html",
-    // 4. WIR LEGEN DEN BENUTZER FEST:
-    // Laravel Sail führt Befehle standardmäßig als 'sail'-Benutzer aus, um Berechtigungsprobleme zu vermeiden.
     "remoteUser": "sail",
-    // 5. ZUSÄTZLICHE ENTWICKLER-TOOLS (FEATURES):
-    // Features werden über postCreateCommand installiert um Kompatibilitätsprobleme zu vermeiden
     "features": {},
-    // 6. BEFEHLE NACH DEM ERSTELLEN:
-    // Installiert nur die Tools die ohne Root-Rechte funktionieren
-    //"postCreateCommand": "composer install --no-interaction --prefer-dist --optimize-autoloader",
-    // 7. EDITOR-ANPASSUNGEN (Optional, aber sehr empfohlen):
     "customizations": {
         "vscode": {
             "extensions": [
                 "bmewburn.vscode-intelephense-client",
                 "onecentlin.laravel-blade",
                 "shufo.vscode-blade-formatter",
-                "bradlc.vscode-tailwindcss"
+                "bradlc.vscode-tailwindcss",
+                "Anthropic.claude-code",
+                "adrianwilczynski.alpine-js-intellisense",
+                "onecentlin.laravel-extension-pack",
+                "cierra.livewire-vscode"
             ]
         }
     },
-    // 8. ZU STARTENDE DIENSTE:
-    // Legt fest, welche Dienste aus der docker-compose.yml gestartet werden sollen.
+    // WICHTIG: Nur noch der Haupt-Container bleibt drin
     "runServices": [
-        "laravel.test",
-        "mysql",
-        "redis",
-        "mailpit"
+        "laravel.test"
     ],
-    // 9. ZUSÄTZLICHE KONFIGURATION:
-    // Umgebungsvariablen für den DevContainer
     "containerEnv": {
         "WWWUSER": "501",
         "WWWGROUP": "20",
         "LARAVEL_SAIL": "1"
     },
-    // 10. MOUNT-KONFIGURATION:
-    // Stellt sicher, dass der Code korrekt gemountet wird
     "mounts": [
-        "source=${localWorkspaceFolder},target=/var/www/html,type=bind,consistency=cached"
+        "source=${localWorkspaceFolder},target=/var/www/html,type=bind,consistency=cached",
+        "source=/Users/pandora/Library/Mobile Documents/iCloud~md~obsidian/Documents/DEV-Vault/presseportale,target=/var/www/html/docs,type=bind",
+        "source=/Users/pandora/.forgejo_token,target=/tmp/.forgejo_token,type=bind,readonly",
+        "source=/Users/pandora/.ssh,target=/home/sail/.ssh,type=bind,readonly"
     ],
-    // 11. FORWARD PORTS:
-    // Ports die automatisch weitergeleitet werden sollen
+    "postCreateCommand": "mkdir -p ~/.local/bin && curl -L https://gitea.com/gitea/tea/releases/download/v0.14.0/tea-0.14.0-linux-arm64 -o ~/.local/bin/tea && chmod +x ~/.local/bin/tea && echo 'export PATH=\"$HOME/.local/bin:$PATH\"' >> ~/.bashrc && (~/.local/bin/tea login add --name 'gitmedia' --url 'https://git.adametz.media' --token $(cat /tmp/.forgejo_token) || true)",
     "forwardPorts": [
         5177,
-        5178,
-        33069,
-        6382,
-        1027,
-        8027
+        5178
     ],
     "portsAttributes": {
         "5177": {
@@ -67,22 +49,9 @@
         "5178": {
             "label": "Vite Dev Server (Web)",
             "onAutoForward": "notify"
-        },
-        "33069": {
-            "label": "MySQL",
-            "onAutoForward": "silent"
-        },
-        "6382": {
-            "label": "Redis",
-            "onAutoForward": "silent"
-        },
-        "8027": {
-            "label": "Mailpit Dashboard",
-            "onAutoForward": "notify"
-        },
-        "1027": {
-            "label": "Mailpit",
-            "onAutoForward": "silent"
         }
-    }
+    },
+    "runArgs": [
+        "--network=host"
+    ]
 }

.env.example

@@ -1,25 +1,67 @@
-APP_NAME=Laravel
+APP_NAME=Pressekonto
 APP_ENV=local
 APP_KEY=
 APP_DEBUG=true
-APP_URL=http://localhost
+APP_URL=https://pressekonto.test
 
-APP_LOCALE=en
-APP_FALLBACK_LOCALE=en
+APP_LOCALE=de
+APP_FALLBACK_LOCALE=de
 APP_FAKER_LOCALE=en_US
 
 APP_MAINTENANCE_DRIVER=file
 # APP_MAINTENANCE_STORE=database
 
+# HTTP Basic Auth Gate (Staging-Schutz). Nur erzwungen, wenn aktiviert
+# UND BASIC_AUTH_USER/BASIC_AUTH_PASSWORD gesetzt sind.
+BASIC_AUTH_ENABLED=true
+BASIC_AUTH_USER=
+BASIC_AUTH_PASSWORD=
+
 PHP_CLI_SERVER_WORKERS=4
 
 BCRYPT_ROUNDS=12
 
 LOG_CHANNEL=stack
+# Prod: auf `daily` stellen — der `single`-Channel wächst sonst unbegrenzt.
+# Der daily-Channel rotiert mit LOG_DAILY_DAYS (Default 14, siehe Runbook).
 LOG_STACK=single
 LOG_DEPRECATIONS_CHANNEL=null
 LOG_LEVEL=debug
 
+# Betriebs-Alerts (R5.3): fehlgeschlagene Scheduler-Tasks/Queue-Jobs werden als
+# `critical` geloggt und – wenn aktiviert – zusätzlich an MONITORING_ALERT_EMAIL
+# gemeldet (Fallback: LEGAL_CONTACT_EMAIL). In Prod echten Mailer voraussetzen.
+MONITORING_ALERTS_ENABLED=true
+MONITORING_ALERT_EMAIL=
+
+# ---------------------------------------------------------------------------
+# Multi-Domain-Setup (config/domains.php)
+# Hub: pressekonto (Portal-Backend + Hub-Landing) — Spokes: presseecho,
+# businessportal24. Prod: .test durch echte Domains ersetzen
+# (pressekonto.de, presseecho.de, businessportal24.com).
+# ---------------------------------------------------------------------------
+APP_PROTOCOL="https://"
+
+APP_PORTAL_NAME="pressekonto.test"
+APP_PORTAL_URL="https://pressekonto.test"
+APP_PORTAL_PRIMARY="#526266"
+APP_PORTAL_SECONDARY="#82a0a7"
+# APP_PORTAL_ASSET_URL=
+
+APP_PRESSEECHO_NAME=presseecho.test
+APP_PRESSEECHO_URL=https://presseecho.test
+APP_PRESSEECHO_PRIMARY="#345636"
+APP_PRESSEECHO_SECONDARY="#6b8f71"
+
+APP_BUSINESSPORTAL_NAME=businessportal24.test
+APP_BUSINESSPORTAL_URL=https://businessportal24.test
+APP_BUSINESSPORTAL_PRIMARY="#cf3628"
+APP_BUSINESSPORTAL_SECONDARY="#f0834a"
+
+# Sanctum: Hosts, die stateful (Session-Cookie) auf die API zugreifen dürfen.
+# Prod: echte Domains kommasepariert eintragen.
+SANCTUM_STATEFUL_DOMAINS=pressekonto.test,presseecho.test,businessportal24.test
+
 DB_CONNECTION=sqlite
 # DB_HOST=127.0.0.1
 # DB_PORT=3306
@@ -27,11 +69,27 @@ DB_CONNECTION=sqlite
 # DB_USERNAME=root
 # DB_PASSWORD=
 
+# ---------------------------------------------------------------------------
+# Legacy-Datenbanken (Alt-Systeme, read-only für Migration/Abgleich).
+# Die businessportal-Verbindung ist ein Snapshot-Dump, nicht live.
+# ---------------------------------------------------------------------------
+DB_HOST_BUSINESSPORTAL=127.0.0.1
+DB_DATABASE_BUSINESSPORTAL=
+DB_USERNAME_BUSINESSPORTAL=
+DB_PASSWORD_BUSINESSPORTAL=
+
+DB_HOST_PRESSEECHO=127.0.0.1
+DB_DATABASE_PRESSEECHO=
+DB_USERNAME_PRESSEECHO=
+DB_PASSWORD_PRESSEECHO=
+
 SESSION_DRIVER=database
 SESSION_LIFETIME=120
 SESSION_ENCRYPT=false
 SESSION_PATH=/
 SESSION_DOMAIN=null
+# Prod: true setzen (Cookies nur über HTTPS).
+# SESSION_SECURE_COOKIE=true
 
 BROADCAST_CONNECTION=log
 FILESYSTEM_DISK=local
@@ -47,6 +105,7 @@ REDIS_HOST=127.0.0.1
 REDIS_PASSWORD=null
 REDIS_PORT=6379
 
+# Prod: echten Mailer konfigurieren — Default `log` versendet NICHTS.
 MAIL_MAILER=log
 MAIL_SCHEME=null
 MAIL_HOST=127.0.0.1
@@ -63,3 +122,97 @@ AWS_BUCKET=
 AWS_USE_PATH_STYLE_ENDPOINT=false
 
 VITE_APP_NAME="${APP_NAME}"
+# Lokaler Vite-Dev-Server (dual-port Setup, siehe VITE-SETUP.md).
+VITE_DEV_SERVER_URL=https://assets.pressekonto.test
+
+# ---------------------------------------------------------------------------
+# Stripe / Billing (Laravel Cashier)
+# Prod: Live-Keys + Live-Preis-IDs eintragen [EXTERN: R1.2].
+# ---------------------------------------------------------------------------
+STRIPE_KEY=
+STRIPE_SECRET=
+STRIPE_WEBHOOK_SECRET=
+# Stripe-Preis-ID des Einzelkaufs (eine PM, 19 €).
+STRIPE_PRICE_SINGLE_PM=
+CASHIER_CURRENCY=eur
+CASHIER_CURRENCY_LOCALE=de_DE
+
+# Umsatzsteuer/Rechnungsangaben.
+# BILLING_VAT_RATE=0.19
+# BILLING_DEFAULT_CURRENCY=EUR
+# BILLING_MANUAL_DUE_DAYS=14
+BILLING_OWN_VAT_ID=
+
+# Abo-/Bestandsschutz-Gate (WS-5). Default (auch ohne Env-Key) ist true:
+# Einreichen zur Prüfung erfordert ein aktives Abo, einen bezahlten Einzelkauf
+# oder Bestandsschutz (grandfathered) — siehe User::hasActiveBooking().
+# Nur für lokale Entwicklung bewusst auf false setzen (Gate offen für alle).
+BILLING_ENFORCE_BOOKING=true
+
+# ---------------------------------------------------------------------------
+# KI: Klassifikation (Red-Flag-Gate) + Content-Score (config/scoring.php).
+# Ohne OPENAI_API_KEY laufen die Jobs nicht — Queue-Worker erforderlich.
+# ---------------------------------------------------------------------------
+OPENAI_API_KEY=
+# OPENAI_API_URL=
+# OPENAI_MODEL=
+# OPENAI_TIMEOUT=30
+
+# CLASSIFICATION_PROVIDER=openai
+# CLASSIFICATION_MODEL=
+# CLASSIFICATION_TIMEOUT=15
+# CLASSIFICATION_GREEN_DELAY=0
+# CLASSIFICATION_YELLOW_MANUAL=true
+
+# CONTENT_SCORE_PROVIDER=openai
+# CONTENT_SCORE_MODEL=
+# CONTENT_SCORE_TIMEOUT=30
+# CONTENT_SCORE_HOCHWERTIG=80
+# CONTENT_SCORE_GEPRUEFT=60
+
+# ---------------------------------------------------------------------------
+# Newsletter-Sync (config/newsletter.php). Provider `placeholder` bindet den
+# Null-Client; enabled=true mit anderem Provider wirft bewusst, bis eine
+# echte Anbindung implementiert ist.
+# ---------------------------------------------------------------------------
+NEWSLETTER_SYNC_ENABLED=false
+NEWSLETTER_SYNC_PROVIDER=placeholder
+NEWSLETTER_SYNC_ENDPOINT=
+NEWSLETTER_SYNC_API_KEY=
+# NEWSLETTER_SYNC_TIMEOUT=10
+
+# Google-Login (Laravel Socialite). Die Redirect-URI muss in der Google Cloud
+# Console EXAKT der Callback-URL der Portal-Domain entsprechen (Login läuft auf
+# dem Portal-Host, nicht zwingend APP_URL). Prod: https://pressekonto.com/...
+# Hinweis: Google akzeptiert keine .test-Domains – lokal nur localhost oder ein
+# https-Tunnel; der echte Round-Trip wird auf Staging/Live getestet.
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+GOOGLE_REDIRECT_URI=https://pressekonto.com/auth/google/callback
+
+# Empfänger des öffentlichen Kontaktformulars je Brand. Ohne Wert fällt der
+# Versand auf MAIL_FROM_ADDRESS zurück. [EXTERN: echte Adressen eintragen]
+CONTACT_EMAIL_PRESSEKONTO=
+CONTACT_EMAIL_PRESSEECHO=
+CONTACT_EMAIL_BUSINESSPORTAL=
+
+# Depublikation (T12): Netto-Preis in Cent fuer die freiwillige Entfernung
+# einer veroeffentlichten PM aus der oeffentlichen Ansicht (Tombstone bleibt).
+# Default 3500 (35 EUR netto, Entscheidung O6 vom 06.07.2026); 0 deaktiviert.
+BILLING_DEPUBLICATION_PRICE_CENTS=3500
+
+# Selbst gehostete Umami-Webanalyse (sys.adametz.media; IDs je Brand in
+# config/domains.php). Erst beim Go-Live der Webseiten auf true setzen —
+# die Datenschutzerklärung (Abschnitt 5) beschreibt den Einsatz bereits.
+UMAMI_ENABLED=false
+
+# Haupt-E-Mail für alle rechtlichen Anliegen (Impressum, Datenschutz, AGB,
+# Meldeverfahren, Richtlinien) — auf allen drei Domains identisch.
+# Ohne Wert gilt der Default info@pressekonto.com (config/legal.php).
+LEGAL_CONTACT_EMAIL=
+
+# Optionales separates DSA-Melde-Postfach je Brand (Impressum + /melden).
+# Ohne Wert fällt die Anzeige auf LEGAL_CONTACT_EMAIL zurück.
+REPORT_EMAIL_PRESSEKONTO=
+REPORT_EMAIL_PRESSEECHO=
+REPORT_EMAIL_BUSINESSPORTAL=

.gitignore

@@ -55,4 +55,13 @@ Icon
 # Project specific
 _static/
 _work/
-_storage/
+_storage/
+_businessportal24.com/
+dev/migration/
+# Produktivdaten: Legacy-SQL-Dumps bleiben lokal, nie ins Repo (Entscheidung 06.07.2026)
+dev/archive/migration-2026/sql/
+# Produktivdaten: API-Aktivitaets-Logs der Altportale (Kundendaten + Alt-API-Keys), analog SQL-Dumps
+dev/api/
+
+# Rechtstext-Quellen des Users (untracked Arbeitsstand)
+docs/legal/

.mcp.json

@@ -0,0 +1,30 @@
+{
+    "mcpServers": {
+        "laravel-boost": {
+            "command": "php",
+            "args": [
+                "artisan",
+                "boost:mcp"
+            ]
+        },
+        "context7": {
+            "command": "npx",
+            "args": [
+                "-y",
+                "@upstash/context7-mcp",
+                "--api-key",
+                "ctx7sk-119cd4ab-8983-4229-8702-e84c59c34fc9"
+            ]
+        },
+        "sequential-thinking": {
+            "command": "npx",
+            "args": [
+                "-y",
+                "@modelcontextprotocol/server-sequential-thinking"
+            ]
+        },
+        "playwright": {
+            "url": "https://playwright.test/mcp"
+        }
+    }
+}

AGENTS.md

@@ -0,0 +1,226 @@
+<laravel-boost-guidelines>
+=== foundation rules ===
+
+# Laravel Boost Guidelines
+
+The Laravel Boost guidelines are specifically curated by Laravel maintainers for this application. These guidelines should be followed closely to ensure the best experience when building Laravel applications.
+
+## Foundational Context
+
+This application is a Laravel application and its main Laravel ecosystems package & versions are below. You are an expert with them all. Ensure you abide by these specific packages & versions.
+
+- php - 8.4
+- laravel/fortify (FORTIFY) - v1
+- laravel/framework (LARAVEL) - v12
+- laravel/prompts (PROMPTS) - v0
+- laravel/sanctum (SANCTUM) - v4
+- livewire/flux (FLUXUI_FREE) - v2
+- livewire/flux-pro (FLUXUI_PRO) - v2
+- livewire/livewire (LIVEWIRE) - v4
+- livewire/volt (VOLT) - v1
+- larastan/larastan (LARASTAN) - v3
+- laravel/boost (BOOST) - v2
+- laravel/mcp (MCP) - v0
+- laravel/pail (PAIL) - v1
+- laravel/pint (PINT) - v1
+- laravel/sail (SAIL) - v1
+- pestphp/pest (PEST) - v3
+- phpunit/phpunit (PHPUNIT) - v11
+- alpinejs (ALPINEJS) - v3
+- tailwindcss (TAILWINDCSS) - v4
+
+## Skills Activation
+
+This project has domain-specific skills available. You MUST activate the relevant skill whenever you work in that domain—don't wait until you're stuck.
+
+- `fortify-development` — ACTIVATE when the user works on authentication in Laravel. This includes login, registration, password reset, email verification, two-factor authentication (2FA/TOTP/QR codes/recovery codes), profile updates, password confirmation, or any auth-related routes and controllers. Activate when the user mentions Fortify, auth, authentication, login, register, signup, forgot password, verify email, 2FA, or references app/Actions/Fortify/, CreateNewUser, UpdateUserProfileInformation, FortifyServiceProvider, config/fortify.php, or auth guards. Fortify is the frontend-agnostic authentication backend for Laravel that registers all auth routes and controllers. Also activate when building SPA or headless authentication, customizing login redirects, overriding response contracts like LoginResponse, or configuring login throttling. Do NOT activate for Laravel Passport (OAuth2 API tokens), Socialite (OAuth social login), or non-auth Laravel features.
+- `laravel-best-practices` — Apply this skill whenever writing, reviewing, or refactoring Laravel PHP code. This includes creating or modifying controllers, models, migrations, form requests, policies, jobs, scheduled commands, service classes, and Eloquent queries. Triggers for N+1 and query performance issues, caching strategies, authorization and security patterns, validation, error handling, queue and job configuration, route definitions, and architectural decisions. Also use for Laravel code reviews and refactoring existing Laravel code to follow best practices. Covers any task involving Laravel backend PHP code patterns.
+- `fluxui-development` — Use this skill for Flux UI development in Livewire applications only. Trigger when working with <flux:*> components, building or customizing Livewire component UIs, creating forms, modals, tables, or other interactive elements. Covers: flux: components (buttons, inputs, modals, forms, tables, date-pickers, kanban, badges, tooltips, etc.), component composition, Tailwind CSS styling, Heroicons/Lucide icon integration, validation patterns, responsive design, and theming. Do not use for non-Livewire frameworks or non-component styling.
+- `volt-development` — Develops single-file Livewire components with Volt. Activates when creating Volt components, converting Livewire to Volt, working with @volt directive, functional or class-based Volt APIs; or when the user mentions Volt, single-file components, functional Livewire, or inline component logic in Blade files.
+- `pest-testing` — Use this skill for Pest PHP testing in Laravel projects only. Trigger whenever any test is being written, edited, fixed, or refactored — including fixing tests that broke after a code change, adding assertions, converting PHPUnit to Pest, adding datasets, and TDD workflows. Always activate when the user asks how to write something in Pest, mentions test files or directories (tests/Feature, tests/Unit) or architecture tests. Covers: test()/it()/expect() syntax, datasets, mocking, browser testing, arch(), Livewire component tests, RefreshDatabase, and all Pest 3 features. Do not use for editing factories, seeders, migrations, controllers, models, or non-test PHP code.
+- `tailwindcss-development` — Always invoke when the user's message includes 'tailwind' in any form. Also invoke for: building responsive grid layouts (multi-column card grids, product grids), flex/grid page structures (dashboards with sidebars, fixed topbars, mobile-toggle navs), styling UI components (cards, tables, navbars, pricing sections, forms, inputs, badges), adding dark mode variants, fixing spacing or typography, and Tailwind v3/v4 work. The core use case: writing or fixing Tailwind utility classes in HTML templates (Blade, JSX, Vue). Skip for backend PHP logic, database queries, API routes, JavaScript with no HTML/CSS component, CSS file audits, build tool configuration, and vanilla CSS.
+
+## Conventions
+
+- You must follow all existing code conventions used in this application. When creating or editing a file, check sibling files for the correct structure, approach, and naming.
+- Use descriptive names for variables and methods. For example, `isRegisteredForDiscounts`, not `discount()`.
+- Check for existing components to reuse before writing a new one.
+
+## Verification Scripts
+
+- Do not create verification scripts or tinker when tests cover that functionality and prove they work. Unit and feature tests are more important.
+
+## Application Structure & Architecture
+
+- Stick to existing directory structure; don't create new base folders without approval.
+- Do not change the application's dependencies without approval.
+
+## Frontend Bundling
+
+- If the user doesn't see a frontend change reflected in the UI, it could mean they need to run `vendor/bin/sail npm run build`, `vendor/bin/sail npm run dev`, or `vendor/bin/sail composer run dev`. Ask them.
+
+## Documentation Files
+
+- You must only create documentation files if explicitly requested by the user.
+
+## Replies
+
+- Be concise in your explanations - focus on what's important rather than explaining obvious details.
+
+=== boost rules ===
+
+# Laravel Boost
+
+## Tools
+
+- Laravel Boost is an MCP server with tools designed specifically for this application. Prefer Boost tools over manual alternatives like shell commands or file reads.
+- Use `database-query` to run read-only queries against the database instead of writing raw SQL in tinker.
+- Use `database-schema` to inspect table structure before writing migrations or models.
+- Use `get-absolute-url` to resolve the correct scheme, domain, and port for project URLs. Always use this before sharing a URL with the user.
+- Use `browser-logs` to read browser logs, errors, and exceptions. Only recent logs are useful, ignore old entries.
+
+## Searching Documentation (IMPORTANT)
+
+- Always use `search-docs` before making code changes. Do not skip this step. It returns version-specific docs based on installed packages automatically.
+- Pass a `packages` array to scope results when you know which packages are relevant.
+- Use multiple broad, topic-based queries: `['rate limiting', 'routing rate limiting', 'routing']`. Expect the most relevant results first.
+- Do not add package names to queries because package info is already shared. Use `test resource table`, not `filament 4 test resource table`.
+
+### Search Syntax
+
+1. Use words for auto-stemmed AND logic: `rate limit` matches both "rate" AND "limit".
+2. Use `"quoted phrases"` for exact position matching: `"infinite scroll"` requires adjacent words in order.
+3. Combine words and phrases for mixed queries: `middleware "rate limit"`.
+4. Use multiple queries for OR logic: `queries=["authentication", "middleware"]`.
+
+## Artisan
+
+- Run Artisan commands directly via the command line (e.g., `vendor/bin/sail artisan route:list`). Use `vendor/bin/sail artisan list` to discover available commands and `vendor/bin/sail artisan [command] --help` to check parameters.
+- Inspect routes with `vendor/bin/sail artisan route:list`. Filter with: `--method=GET`, `--name=users`, `--path=api`, `--except-vendor`, `--only-vendor`.
+- Read configuration values using dot notation: `vendor/bin/sail artisan config:show app.name`, `vendor/bin/sail artisan config:show database.default`. Or read config files directly from the `config/` directory.
+- To check environment variables, read the `.env` file directly.
+
+## Tinker
+
+- Execute PHP in app context for debugging and testing code. Do not create models without user approval, prefer tests with factories instead. Prefer existing Artisan commands over custom tinker code.
+- Always use single quotes to prevent shell expansion: `vendor/bin/sail artisan tinker --execute 'Your::code();'`
+  - Double quotes for PHP strings inside: `vendor/bin/sail artisan tinker --execute 'User::where("active", true)->count();'`
+
+=== php rules ===
+
+# PHP
+
+- Always use curly braces for control structures, even for single-line bodies.
+- Use PHP 8 constructor property promotion: `public function __construct(public GitHub $github) { }`. Do not leave empty zero-parameter `__construct()` methods unless the constructor is private.
+- Use explicit return type declarations and type hints for all method parameters: `function isAccessible(User $user, ?string $path = null): bool`
+- Use TitleCase for Enum keys: `FavoritePerson`, `BestLake`, `Monthly`.
+- Prefer PHPDoc blocks over inline comments. Only add inline comments for exceptionally complex logic.
+- Use array shape type definitions in PHPDoc blocks.
+
+=== deployments rules ===
+
+# Deployment
+
+- Laravel can be deployed using [Laravel Cloud](https://cloud.laravel.com/), which is the fastest way to deploy and scale production Laravel applications.
+
+=== sail rules ===
+
+# Laravel Sail
+
+- This project runs inside Laravel Sail's Docker containers. You MUST execute all commands through Sail.
+- Start services using `vendor/bin/sail up -d` and stop them with `vendor/bin/sail stop`.
+- Open the application in the browser by running `vendor/bin/sail open`.
+- Always prefix PHP, Artisan, Composer, and Node commands with `vendor/bin/sail`. Examples:
+    - Run Artisan Commands: `vendor/bin/sail artisan migrate`
+    - Install Composer packages: `vendor/bin/sail composer install`
+    - Execute Node commands: `vendor/bin/sail npm run dev`
+    - Execute PHP scripts: `vendor/bin/sail php [script]`
+- View all available Sail commands by running `vendor/bin/sail` without arguments.
+
+=== tests rules ===
+
+# Test Enforcement
+
+- Every change must be programmatically tested. Write a new test or update an existing test, then run the affected tests to make sure they pass.
+- Run the minimum number of tests needed to ensure code quality and speed. Use `vendor/bin/sail artisan test --compact` with a specific filename or filter.
+
+=== laravel/core rules ===
+
+# Do Things the Laravel Way
+
+- Use `vendor/bin/sail artisan make:` commands to create new files (i.e. migrations, controllers, models, etc.). You can list available Artisan commands using `vendor/bin/sail artisan list` and check their parameters with `vendor/bin/sail artisan [command] --help`.
+- If you're creating a generic PHP class, use `vendor/bin/sail artisan make:class`.
+- Pass `--no-interaction` to all Artisan commands to ensure they work without user input. You should also pass the correct `--options` to ensure correct behavior.
+
+### Model Creation
+
+- When creating new models, create useful factories and seeders for them too. Ask the user if they need any other things, using `vendor/bin/sail artisan make:model --help` to check the available options.
+
+## APIs & Eloquent Resources
+
+- For APIs, default to using Eloquent API Resources and API versioning unless existing API routes do not, then you should follow existing application convention.
+
+## URL Generation
+
+- When generating links to other pages, prefer named routes and the `route()` function.
+
+## Testing
+
+- When creating models for tests, use the factories for the models. Check if the factory has custom states that can be used before manually setting up the model.
+- Faker: Use methods such as `$this->faker->word()` or `fake()->randomDigit()`. Follow existing conventions whether to use `$this->faker` or `fake()`.
+- When creating tests, make use of `vendor/bin/sail artisan make:test [options] {name}` to create a feature test, and pass `--unit` to create a unit test. Most tests should be feature tests.
+
+## Vite Error
+
+- If you receive an "Illuminate\Foundation\ViteException: Unable to locate file in Vite manifest" error, you can run `vendor/bin/sail npm run build` or ask the user to run `vendor/bin/sail npm run dev` or `vendor/bin/sail composer run dev`.
+
+=== laravel/v12 rules ===
+
+# Laravel 12
+
+- CRITICAL: ALWAYS use `search-docs` tool for version-specific Laravel documentation and updated code examples.
+- Since Laravel 11, Laravel has a new streamlined file structure which this project uses.
+
+## Laravel 12 Structure
+
+- In Laravel 12, middleware are no longer registered in `app/Http/Kernel.php`.
+- Middleware are configured declaratively in `bootstrap/app.php` using `Application::configure()->withMiddleware()`.
+- `bootstrap/app.php` is the file to register middleware, exceptions, and routing files.
+- `bootstrap/providers.php` contains application specific service providers.
+- The `app/Console/Kernel.php` file no longer exists; use `bootstrap/app.php` or `routes/console.php` for console configuration.
+- Console commands in `app/Console/Commands/` are automatically available and do not require manual registration.
+
+## Database
+
+- When modifying a column, the migration must include all of the attributes that were previously defined on the column. Otherwise, they will be dropped and lost.
+- Laravel 12 allows limiting eagerly loaded records natively, without external packages: `$query->latest()->limit(10);`.
+
+### Models
+
+- Casts can and likely should be set in a `casts()` method on a model rather than the `$casts` property. Follow existing conventions from other models.
+
+=== volt/core rules ===
+
+# Livewire Volt
+
+- Single-file Livewire components: PHP logic and Blade templates in one file.
+- Always check existing Volt components to determine functional vs class-based style.
+- IMPORTANT: Always use `search-docs` tool for version-specific Volt documentation and updated code examples.
+- IMPORTANT: Activate `volt-development` every time you're working with a Volt or single-file component-related task.
+
+=== pint/core rules ===
+
+# Laravel Pint Code Formatter
+
+- If you have modified any PHP files, you must run `vendor/bin/sail bin pint --dirty --format agent` before finalizing changes to ensure your code matches the project's expected style.
+- Do not run `vendor/bin/sail bin pint --test --format agent`, simply run `vendor/bin/sail bin pint --format agent` to fix any formatting issues.
+
+=== pest/core rules ===
+
+## Pest
+
+- This project uses Pest for testing. Create tests: `vendor/bin/sail artisan make:test --pest {name}`.
+- Run tests: `vendor/bin/sail artisan test --compact` or filter: `vendor/bin/sail artisan test --compact --filter=testName`.
+- Do NOT delete tests without approval.
+
+</laravel-boost-guidelines>

CLAUDE.md

@@ -4,11 +4,11 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Overview
 
-This is a multi-domain Laravel application called "pr-copilot" that supports different domains with distinct themes and styling. The application uses Laravel with Livewire, Volt, and Fortify for authentication, along with Flux UI components.
+This is a multi-domain Laravel application ("Pressekonto") that supports different domains with distinct themes and styling. The application uses Laravel with Livewire, Volt, and Fortify for authentication, along with Flux UI components.
 
 ### Supported Domains
 
-- **Main Portal**: pr-copilot.test - Main admin portal page
+- **Main Portal**: pressekonto.test (local) / pressekonto.de (live) – Main admin portal page
 - **Presseecho**: presseecho.test - Landing page with presseecho theme
 - **Business Portal**: businessportal24.test - Landing page with business portal theme
 
@@ -153,3 +153,232 @@ The project uses a **dual-port Vite setup** with separate configurations:
   - `DOMAINS-CONFIG.md` - Detailed domain setup instructions
   - `FORTIFY-SANCTUM-SETUP.md` - Authentication setup guide
   - `VITE-SETUP.md` - Dual-port Vite architecture explanation
+
+===
+
+<laravel-boost-guidelines>
+=== foundation rules ===
+
+# Laravel Boost Guidelines
+
+The Laravel Boost guidelines are specifically curated by Laravel maintainers for this application. These guidelines should be followed closely to ensure the best experience when building Laravel applications.
+
+## Foundational Context
+
+This application is a Laravel application and its main Laravel ecosystems package & versions are below. You are an expert with them all. Ensure you abide by these specific packages & versions.
+
+- php - 8.4
+- laravel/fortify (FORTIFY) - v1
+- laravel/framework (LARAVEL) - v12
+- laravel/prompts (PROMPTS) - v0
+- laravel/sanctum (SANCTUM) - v4
+- livewire/flux (FLUXUI_FREE) - v2
+- livewire/flux-pro (FLUXUI_PRO) - v2
+- livewire/livewire (LIVEWIRE) - v4
+- livewire/volt (VOLT) - v1
+- larastan/larastan (LARASTAN) - v3
+- laravel/boost (BOOST) - v2
+- laravel/mcp (MCP) - v0
+- laravel/pail (PAIL) - v1
+- laravel/pint (PINT) - v1
+- laravel/sail (SAIL) - v1
+- pestphp/pest (PEST) - v3
+- phpunit/phpunit (PHPUNIT) - v11
+- alpinejs (ALPINEJS) - v3
+- tailwindcss (TAILWINDCSS) - v4
+
+## Skills Activation
+
+This project has domain-specific skills available. You MUST activate the relevant skill whenever you work in that domain—don't wait until you're stuck.
+
+- `fortify-development` — ACTIVATE when the user works on authentication in Laravel. This includes login, registration, password reset, email verification, two-factor authentication (2FA/TOTP/QR codes/recovery codes), profile updates, password confirmation, or any auth-related routes and controllers. Activate when the user mentions Fortify, auth, authentication, login, register, signup, forgot password, verify email, 2FA, or references app/Actions/Fortify/, CreateNewUser, UpdateUserProfileInformation, FortifyServiceProvider, config/fortify.php, or auth guards. Fortify is the frontend-agnostic authentication backend for Laravel that registers all auth routes and controllers. Also activate when building SPA or headless authentication, customizing login redirects, overriding response contracts like LoginResponse, or configuring login throttling. Do NOT activate for Laravel Passport (OAuth2 API tokens), Socialite (OAuth social login), or non-auth Laravel features.
+- `laravel-best-practices` — Apply this skill whenever writing, reviewing, or refactoring Laravel PHP code. This includes creating or modifying controllers, models, migrations, form requests, policies, jobs, scheduled commands, service classes, and Eloquent queries. Triggers for N+1 and query performance issues, caching strategies, authorization and security patterns, validation, error handling, queue and job configuration, route definitions, and architectural decisions. Also use for Laravel code reviews and refactoring existing Laravel code to follow best practices. Covers any task involving Laravel backend PHP code patterns.
+- `fluxui-development` — Use this skill for Flux UI development in Livewire applications only. Trigger when working with <flux:*> components, building or customizing Livewire component UIs, creating forms, modals, tables, or other interactive elements. Covers: flux: components (buttons, inputs, modals, forms, tables, date-pickers, kanban, badges, tooltips, etc.), component composition, Tailwind CSS styling, Heroicons/Lucide icon integration, validation patterns, responsive design, and theming. Do not use for non-Livewire frameworks or non-component styling.
+- `volt-development` — Develops single-file Livewire components with Volt. Activates when creating Volt components, converting Livewire to Volt, working with @volt directive, functional or class-based Volt APIs; or when the user mentions Volt, single-file components, functional Livewire, or inline component logic in Blade files.
+- `pest-testing` — Use this skill for Pest PHP testing in Laravel projects only. Trigger whenever any test is being written, edited, fixed, or refactored — including fixing tests that broke after a code change, adding assertions, converting PHPUnit to Pest, adding datasets, and TDD workflows. Always activate when the user asks how to write something in Pest, mentions test files or directories (tests/Feature, tests/Unit) or architecture tests. Covers: test()/it()/expect() syntax, datasets, mocking, browser testing, arch(), Livewire component tests, RefreshDatabase, and all Pest 3 features. Do not use for editing factories, seeders, migrations, controllers, models, or non-test PHP code.
+- `tailwindcss-development` — Always invoke when the user's message includes 'tailwind' in any form. Also invoke for: building responsive grid layouts (multi-column card grids, product grids), flex/grid page structures (dashboards with sidebars, fixed topbars, mobile-toggle navs), styling UI components (cards, tables, navbars, pricing sections, forms, inputs, badges), adding dark mode variants, fixing spacing or typography, and Tailwind v3/v4 work. The core use case: writing or fixing Tailwind utility classes in HTML templates (Blade, JSX, Vue). Skip for backend PHP logic, database queries, API routes, JavaScript with no HTML/CSS component, CSS file audits, build tool configuration, and vanilla CSS.
+
+## Conventions
+
+- You must follow all existing code conventions used in this application. When creating or editing a file, check sibling files for the correct structure, approach, and naming.
+- Use descriptive names for variables and methods. For example, `isRegisteredForDiscounts`, not `discount()`.
+- Check for existing components to reuse before writing a new one.
+
+## Verification Scripts
+
+- Do not create verification scripts or tinker when tests cover that functionality and prove they work. Unit and feature tests are more important.
+
+## Application Structure & Architecture
+
+- Stick to existing directory structure; don't create new base folders without approval.
+- Do not change the application's dependencies without approval.
+
+## Frontend Bundling
+
+- If the user doesn't see a frontend change reflected in the UI, it could mean they need to run `vendor/bin/sail npm run build`, `vendor/bin/sail npm run dev`, or `vendor/bin/sail composer run dev`. Ask them.
+
+## Documentation Files
+
+- You must only create documentation files if explicitly requested by the user.
+
+## Replies
+
+- Be concise in your explanations - focus on what's important rather than explaining obvious details.
+
+=== boost rules ===
+
+# Laravel Boost
+
+## Tools
+
+- Laravel Boost is an MCP server with tools designed specifically for this application. Prefer Boost tools over manual alternatives like shell commands or file reads.
+- Use `database-query` to run read-only queries against the database instead of writing raw SQL in tinker.
+- Use `database-schema` to inspect table structure before writing migrations or models.
+- Use `get-absolute-url` to resolve the correct scheme, domain, and port for project URLs. Always use this before sharing a URL with the user.
+- Use `browser-logs` to read browser logs, errors, and exceptions. Only recent logs are useful, ignore old entries.
+
+## Searching Documentation (IMPORTANT)
+
+- Always use `search-docs` before making code changes. Do not skip this step. It returns version-specific docs based on installed packages automatically.
+- Pass a `packages` array to scope results when you know which packages are relevant.
+- Use multiple broad, topic-based queries: `['rate limiting', 'routing rate limiting', 'routing']`. Expect the most relevant results first.
+- Do not add package names to queries because package info is already shared. Use `test resource table`, not `filament 4 test resource table`.
+
+### Search Syntax
+
+1. Use words for auto-stemmed AND logic: `rate limit` matches both "rate" AND "limit".
+2. Use `"quoted phrases"` for exact position matching: `"infinite scroll"` requires adjacent words in order.
+3. Combine words and phrases for mixed queries: `middleware "rate limit"`.
+4. Use multiple queries for OR logic: `queries=["authentication", "middleware"]`.
+
+## Artisan
+
+- Run Artisan commands directly via the command line (e.g., `vendor/bin/sail artisan route:list`). Use `vendor/bin/sail artisan list` to discover available commands and `vendor/bin/sail artisan [command] --help` to check parameters.
+- Inspect routes with `vendor/bin/sail artisan route:list`. Filter with: `--method=GET`, `--name=users`, `--path=api`, `--except-vendor`, `--only-vendor`.
+- Read configuration values using dot notation: `vendor/bin/sail artisan config:show app.name`, `vendor/bin/sail artisan config:show database.default`. Or read config files directly from the `config/` directory.
+- To check environment variables, read the `.env` file directly.
+
+## Tinker
+
+- Execute PHP in app context for debugging and testing code. Do not create models without user approval, prefer tests with factories instead. Prefer existing Artisan commands over custom tinker code.
+- Always use single quotes to prevent shell expansion: `vendor/bin/sail artisan tinker --execute 'Your::code();'`
+  - Double quotes for PHP strings inside: `vendor/bin/sail artisan tinker --execute 'User::where("active", true)->count();'`
+
+=== php rules ===
+
+# PHP
+
+- Always use curly braces for control structures, even for single-line bodies.
+- Use PHP 8 constructor property promotion: `public function __construct(public GitHub $github) { }`. Do not leave empty zero-parameter `__construct()` methods unless the constructor is private.
+- Use explicit return type declarations and type hints for all method parameters: `function isAccessible(User $user, ?string $path = null): bool`
+- Use TitleCase for Enum keys: `FavoritePerson`, `BestLake`, `Monthly`.
+- Prefer PHPDoc blocks over inline comments. Only add inline comments for exceptionally complex logic.
+- Use array shape type definitions in PHPDoc blocks.
+
+=== deployments rules ===
+
+# Deployment
+
+- Laravel can be deployed using [Laravel Cloud](https://cloud.laravel.com/), which is the fastest way to deploy and scale production Laravel applications.
+
+=== sail rules ===
+
+# Laravel Sail
+
+- This project runs inside Laravel Sail's Docker containers. You MUST execute all commands through Sail.
+- Start services using `vendor/bin/sail up -d` and stop them with `vendor/bin/sail stop`.
+- Open the application in the browser by running `vendor/bin/sail open`.
+- Always prefix PHP, Artisan, Composer, and Node commands with `vendor/bin/sail`. Examples:
+    - Run Artisan Commands: `vendor/bin/sail artisan migrate`
+    - Install Composer packages: `vendor/bin/sail composer install`
+    - Execute Node commands: `vendor/bin/sail npm run dev`
+    - Execute PHP scripts: `vendor/bin/sail php [script]`
+- View all available Sail commands by running `vendor/bin/sail` without arguments.
+
+=== tests rules ===
+
+# Test Enforcement
+
+- Every change must be programmatically tested. Write a new test or update an existing test, then run the affected tests to make sure they pass.
+- Run the minimum number of tests needed to ensure code quality and speed. Use `vendor/bin/sail artisan test --compact` with a specific filename or filter.
+
+=== laravel/core rules ===
+
+# Do Things the Laravel Way
+
+- Use `vendor/bin/sail artisan make:` commands to create new files (i.e. migrations, controllers, models, etc.). You can list available Artisan commands using `vendor/bin/sail artisan list` and check their parameters with `vendor/bin/sail artisan [command] --help`.
+- If you're creating a generic PHP class, use `vendor/bin/sail artisan make:class`.
+- Pass `--no-interaction` to all Artisan commands to ensure they work without user input. You should also pass the correct `--options` to ensure correct behavior.
+
+### Model Creation
+
+- When creating new models, create useful factories and seeders for them too. Ask the user if they need any other things, using `vendor/bin/sail artisan make:model --help` to check the available options.
+
+## APIs & Eloquent Resources
+
+- For APIs, default to using Eloquent API Resources and API versioning unless existing API routes do not, then you should follow existing application convention.
+
+## URL Generation
+
+- When generating links to other pages, prefer named routes and the `route()` function.
+
+## Testing
+
+- When creating models for tests, use the factories for the models. Check if the factory has custom states that can be used before manually setting up the model.
+- Faker: Use methods such as `$this->faker->word()` or `fake()->randomDigit()`. Follow existing conventions whether to use `$this->faker` or `fake()`.
+- When creating tests, make use of `vendor/bin/sail artisan make:test [options] {name}` to create a feature test, and pass `--unit` to create a unit test. Most tests should be feature tests.
+
+## Vite Error
+
+- If you receive an "Illuminate\Foundation\ViteException: Unable to locate file in Vite manifest" error, you can run `vendor/bin/sail npm run build` or ask the user to run `vendor/bin/sail npm run dev` or `vendor/bin/sail composer run dev`.
+
+=== laravel/v12 rules ===
+
+# Laravel 12
+
+- CRITICAL: ALWAYS use `search-docs` tool for version-specific Laravel documentation and updated code examples.
+- Since Laravel 11, Laravel has a new streamlined file structure which this project uses.
+
+## Laravel 12 Structure
+
+- In Laravel 12, middleware are no longer registered in `app/Http/Kernel.php`.
+- Middleware are configured declaratively in `bootstrap/app.php` using `Application::configure()->withMiddleware()`.
+- `bootstrap/app.php` is the file to register middleware, exceptions, and routing files.
+- `bootstrap/providers.php` contains application specific service providers.
+- The `app/Console/Kernel.php` file no longer exists; use `bootstrap/app.php` or `routes/console.php` for console configuration.
+- Console commands in `app/Console/Commands/` are automatically available and do not require manual registration.
+
+## Database
+
+- When modifying a column, the migration must include all of the attributes that were previously defined on the column. Otherwise, they will be dropped and lost.
+- Laravel 12 allows limiting eagerly loaded records natively, without external packages: `$query->latest()->limit(10);`.
+
+### Models
+
+- Casts can and likely should be set in a `casts()` method on a model rather than the `$casts` property. Follow existing conventions from other models.
+
+=== volt/core rules ===
+
+# Livewire Volt
+
+- Single-file Livewire components: PHP logic and Blade templates in one file.
+- Always check existing Volt components to determine functional vs class-based style.
+- IMPORTANT: Always use `search-docs` tool for version-specific Volt documentation and updated code examples.
+- IMPORTANT: Activate `volt-development` every time you're working with a Volt or single-file component-related task.
+
+=== pint/core rules ===
+
+# Laravel Pint Code Formatter
+
+- If you have modified any PHP files, you must run `vendor/bin/sail bin pint --dirty --format agent` before finalizing changes to ensure your code matches the project's expected style.
+- Do not run `vendor/bin/sail bin pint --test --format agent`, simply run `vendor/bin/sail bin pint --format agent` to fix any formatting issues.
+
+=== pest/core rules ===
+
+## Pest
+
+- This project uses Pest for testing. Create tests: `vendor/bin/sail artisan make:test --pest {name}`.
+- Run tests: `vendor/bin/sail artisan test --compact` or filter: `vendor/bin/sail artisan test --compact --filter=testName`.
+- Do NOT delete tests without approval.
+
+</laravel-boost-guidelines>

Readme.md

@@ -4,7 +4,7 @@
 
 Diese Laravel-Anwendung unterstützt verschiedene Domains mit unterschiedlichen Styles:
 
--   **Haupt-Website**: =https://pr-copilot.test - Haupt-Protal Admin-Page
+-   **Haupt-Website**: https://pressekonto.test (lokal) / https://pressekonto.de (live) – Haupt-Portal Admin-Page
 -   **APP_PRESSEECHO**: https://presseecho.test
 -   **APP_BUSINESSPORTAL**: https://businessportal24.test
 

_docs/ASSET-URLS-GUIDE.md

@@ -8,18 +8,18 @@ Für dein Multi-Domain-Setup empfehle ich folgende Asset-URLs:
 
 | Bereich | Domain | Asset-URL | Port | Verwendung |
 |---------|--------|-----------|------|------------|
-| **Backend** | pr-copilot.test | `assets.pr-copilot.test` | 5177 | Portal + FluxUI |
-| **Frontend** | presseecho.test<br>businessportal24.test | `assets-web.pr-copilot.test` | 5178 | Beide Frontend-Domains |
+| **Backend** | pressekonto.test | `assets.pressekonto.test` | 5177 | Portal + FluxUI |
+| **Frontend** | presseecho.test<br>businessportal24.test | `assets-web.pressekonto.test` | 5178 | Beide Frontend-Domains |
 
 ### Warum diese URLs?
 
-#### 1. **assets.pr-copilot.test** (Portal/Backend)
+#### 1. **assets.pressekonto.test** (Portal/Backend)
 - ✅ Kurz und prägnant
 - ✅ Eindeutig dem Portal zugeordnet
 - ✅ Keine zusätzliche Subdomain-Tiefe
 - ✅ Folgt gängiger Konvention
 
-#### 2. **assets-web.pr-copilot.test** (Web/Frontend)
+#### 2. **assets-web.pressekonto.test** (Web/Frontend)
 - ✅ Klar als "Web" (Frontend) gekennzeichnet
 - ✅ Ein Asset-Server für beide Frontend-Domains
 - ✅ Gute Trennung zu Portal-Assets
@@ -31,23 +31,23 @@ Falls du andere URLs bevorzugst, hier sind Alternativen:
 
 ### Option A: Mit Suffix-Präfix
 ```
-portal-assets.pr-copilot.test  → Port 5177
-web-assets.pr-copilot.test     → Port 5178
+portal-assets.pressekonto.test  → Port 5177
+web-assets.pressekonto.test     → Port 5178
 ```
 - ⚠️ Etwas länger
 - ✅ Sehr explizit
 
 ### Option B: Mit "vite" im Namen
 ```
-vite.pr-copilot.test          → Port 5177
-vite-web.pr-copilot.test      → Port 5178
+vite.pressekonto.test          → Port 5177
+vite-web.pressekonto.test      → Port 5178
 ```
 - ⚠️ Technologie-spezifisch (was wenn du später zu einem anderen Build-Tool wechselst?)
 - ⚠️ Weniger klar was geladen wird
 
 ### Option C: Separate Domains pro Frontend
 ```
-assets.pr-copilot.test           → Port 5177 (Portal)
+assets.pressekonto.test           → Port 5177 (Portal)
 assets.presseecho.test           → Port 5178 (Presseecho)
 assets.businessportal24.test     → Port 5178 (Businessportal24)
 ```
@@ -61,7 +61,7 @@ assets.businessportal24.test     → Port 5178 (Businessportal24)
 
 ```yaml
 # Portal Assets (Backend)
-- "traefik.http.routers.assets-portal.rule=Host(`assets.pr-copilot.test`)"
+- "traefik.http.routers.assets-portal.rule=Host(`assets.pressekonto.test`)"
 - "traefik.http.routers.assets-portal.entrypoints=websecure"
 - "traefik.http.routers.assets-portal.tls=true"
 - "traefik.http.routers.assets-portal.service=assets-portal-service"
@@ -69,7 +69,7 @@ assets.businessportal24.test     → Port 5178 (Businessportal24)
 - "traefik.http.services.assets-portal-service.loadbalancer.server.scheme=http"
 
 # Web Assets (Frontend)
-- "traefik.http.routers.assets-web.rule=Host(`assets-web.pr-copilot.test`)"
+- "traefik.http.routers.assets-web.rule=Host(`assets-web.pressekonto.test`)"
 - "traefik.http.routers.assets-web.entrypoints=websecure"
 - "traefik.http.routers.assets-web.tls=true"
 - "traefik.http.routers.assets-web.service=assets-web-service"
@@ -89,8 +89,8 @@ ports:
 
 ```env
 # Vite Asset Domains
-ASSET_URL_PORTAL=https://assets.pr-copilot.test
-ASSET_URL_WEB=https://assets-web.pr-copilot.test
+ASSET_URL_PORTAL=https://assets.pressekonto.test
+ASSET_URL_WEB=https://assets-web.pressekonto.test
 
 # Vite Development Ports
 VITE_PORT_PORTAL=5177
@@ -102,11 +102,11 @@ VITE_PORT_WEB=5178
 Füge folgende Einträge zu deiner `/etc/hosts` (Linux/Mac) oder `C:\Windows\System32\drivers\etc\hosts` (Windows) hinzu:
 
 ```
-127.0.0.1 pr-copilot.test
+127.0.0.1 pressekonto.test
 127.0.0.1 presseecho.test
 127.0.0.1 businessportal24.test
-127.0.0.1 assets.pr-copilot.test
-127.0.0.1 assets-web.pr-copilot.test
+127.0.0.1 assets.pressekonto.test
+127.0.0.1 assets-web.pressekonto.test
 ```
 
 ## Vite-Konfigurationen
@@ -121,7 +121,7 @@ export default defineConfig({
         host: "0.0.0.0",
         port: 5177,
         hmr: {
-            host: "assets.pr-copilot.test",  // ← Asset-URL
+            host: "assets.pressekonto.test",  // ← Asset-URL
             protocol: "wss",
         },
     },
@@ -139,7 +139,7 @@ export default defineConfig({
         host: "0.0.0.0",
         port: 5178,
         hmr: {
-            host: "assets-web.pr-copilot.test",  // ← Asset-URL
+            host: "assets-web.pressekonto.test",  // ← Asset-URL
             protocol: "wss",
         },
     },
@@ -156,16 +156,16 @@ Browser-Request
     ↓
 2. Laravel lädt View mit: @vite(['resources/css/web/theme-presseecho.css', ...])
     ↓
-3. Vite-Helper generiert: <script src="https://assets-web.pr-copilot.test/@vite/client"></script>
-                          <link href="https://assets-web.pr-copilot.test/resources/css/web/theme-presseecho.css">
+3. Vite-Helper generiert: <script src="https://assets-web.pressekonto.test/@vite/client"></script>
+                          <link href="https://assets-web.pressekonto.test/resources/css/web/theme-presseecho.css">
     ↓
-4. Browser requested: assets-web.pr-copilot.test
+4. Browser requested: assets-web.pressekonto.test
     ↓
 5. Traefik routet zu: Container Port 5178
     ↓
 6. Vite Web Server antwortet
     ↓
-7. HMR WebSocket öffnet: wss://assets-web.pr-copilot.test
+7. HMR WebSocket öffnet: wss://assets-web.pressekonto.test
     ↓
 8. ✅ Hot Module Replacement funktioniert!
 ```
@@ -175,8 +175,8 @@ Browser-Request
 ### 1. DNS-Auflösung testen
 ```bash
 # Sollte zu 127.0.0.1 auflösen
-ping assets.pr-copilot.test
-ping assets-web.pr-copilot.test
+ping assets.pressekonto.test
+ping assets-web.pressekonto.test
 ```
 
 ### 2. Vite-Server starten
@@ -195,15 +195,15 @@ Du solltest sehen:
 
 ### 3. Browser-Test
 Öffne:
-- https://pr-copilot.test (sollte Assets von assets.pr-copilot.test laden)
-- https://presseecho.test (sollte Assets von assets-web.pr-copilot.test laden)
-- https://businessportal24.test (sollte Assets von assets-web.pr-copilot.test laden)
+- https://pressekonto.test (sollte Assets von assets.pressekonto.test laden)
+- https://presseecho.test (sollte Assets von assets-web.pressekonto.test laden)
+- https://businessportal24.test (sollte Assets von assets-web.pressekonto.test laden)
 
 ### 4. HMR-Test
 1. Öffne Browser DevTools (F12)
 2. Gehe zu "Network" Tab
 3. Filter auf "WS" (WebSocket)
-4. Du solltest Verbindungen zu `wss://assets.*.pr-copilot.test` sehen
+4. Du solltest Verbindungen zu `wss://assets.*.pressekonto.test` sehen
 5. Ändere eine CSS-Datei
 6. Browser sollte automatisch neu laden (ohne vollständigen Page-Refresh)
 
@@ -256,8 +256,8 @@ docker compose logs laravel.test | grep traefik
 ### ✅ Verwende diese Asset-URLs:
 
 ```
-assets.pr-copilot.test       → Port 5177 (Portal/Backend)
-assets-web.pr-copilot.test   → Port 5178 (Web/Frontend)
+assets.pressekonto.test       → Port 5177 (Portal/Backend)
+assets-web.pressekonto.test   → Port 5178 (Web/Frontend)
 ```
 
 ### ✅ Vorteile:

_docs/BUSINESSPORTAL24_CSS_OPTIMIZATION.md

@@ -0,0 +1,232 @@
+# Businessportal24 CSS Optimierung
+
+## 📊 Übersicht
+
+Die `theme-businessportal24.css` wurde optimiert und von **669 auf 560 Zeilen** reduziert.
+
+---
+
+## ❌ Entfernte Duplikate (verschoben nach shared-styles.css)
+
+### 1. **Hero Banner Styles** (Zeilen 218-237)
+```css
+/* ENTFERNT - Jetzt in shared-styles.css */
+.hero-gradient { ... }
+.hero-title { ... }
+.hero-subtitle { ... }
+```
+
+**Grund:** Identisch in beiden Themes, jetzt zentral verwaltet.
+
+---
+
+### 2. **Section Indicator** (Zeilen 262-271)
+```css
+/* ENTFERNT - Nutzt jetzt .gradient-indicator aus shared-styles.css */
+.section-indicator { ... }
+```
+
+**Grund:** Nahezu identisch zu `.gradient-indicator` - gemeinsame Klasse nutzen.
+
+---
+
+### 3. **Industry Icon Badge** (duplikate Definition)
+```css
+/* ENTFERNT - Jetzt in shared-styles.css */
+.industry-icon-badge img { ... }
+```
+
+**Grund:** Bereits in shared-styles.css definiert.
+
+---
+
+## ✅ Behaltene Businessportal24-spezifische Styles
+
+### 1. **Float & Glow Design System**
+```css
+.variant-float-glow                    → Haupthintergrund
+.variant-float-glow .card-hover:hover  → Enhanced Shadow Glow
+```
+
+---
+
+### 2. **Pagination mit Gradient**
+```css
+.pagination-btn          → Glassy Pagination Buttons
+.pagination-active       → Gradient für aktive Seite
+.pagination-nav          → Navigation Arrows
+```
+
+---
+
+### 3. **Glassmorphism Components**
+```css
+.glass-button           → Glassmorphism Button Style
+.company-glass-badge    → Glassy Company Badge
+```
+
+---
+
+### 4. **Content Cards mit Glow**
+```css
+.featured-content article       → Float-Cards mit Glow
+.press-releases-wrapper article → Press Release Cards
+```
+
+---
+
+### 5. **Businessportal24 Utilities**
+```css
+.ad-badge              → Anzeige-Kennzeichnung
+.glow-soft             → Weiche Glows
+.glow-medium           → Mittlere Glows
+.glow-strong           → Starke Glows
+.shadow-elegant        → Elegante Schatten
+.shadow-card           → Card Schatten
+.shadow-premium        → Premium Schatten
+```
+
+---
+
+## 📦 Struktur der optimierten Datei
+
+```
+1. CSS Variables (Zeilen 1-190)
+   ├── Theme-spezifische HSL-Farben
+   ├── Dark Mode Variablen
+   ├── Shadow-Definitionen
+   └── Zinc-Color-System
+
+2. Base & Components (Zeilen 191-155)
+   ├── Base Overrides
+   └── Component Overrides
+
+3. Float & Glow Design (Zeilen 156-560)
+   ├── Haupthintergrund
+   ├── Filter Bar
+   ├── AD Badge
+   ├── Content Kacheln
+   ├── Glass Button
+   ├── Pagination
+   ├── Glow Utilities
+   └── Responsive
+```
+
+---
+
+## 🔄 Migration
+
+### Schritt 1: Backup erstellen
+```bash
+cp resources/css/web/theme-businessportal24.css resources/css/web/theme-businessportal24-backup.css
+```
+
+### Schritt 2: Optimierte Version aktivieren
+```bash
+mv resources/css/web/theme-businessportal24-optimized.css resources/css/web/theme-businessportal24.css
+```
+
+### Schritt 3: Testen
+- Businessportal24-Seite aufrufen
+- Hero Banner prüfen
+- Highlights-Slider prüfen
+- Pagination prüfen
+- Float & Glow Effekte prüfen
+
+---
+
+## 🎯 Vorteile
+
+### 1. **Keine Duplikate mehr**
+- Hero-Styles nur einmal (shared-styles.css)
+- Industry-Icons zentral verwaltet
+- Section-Indicator durch gradient-indicator ersetzt
+
+### 2. **Bessere Wartbarkeit**
+- Klare Trennung: Gemeinsam vs. Theme-spezifisch
+- Einfachere Updates
+- Konsistenz garantiert
+
+### 3. **Kleinere Dateigröße**
+- Von 669 auf 560 Zeilen (-16%)
+- Weniger Code zum Laden
+- Bessere Performance
+
+### 4. **Theme-spezifische Identität bewahrt**
+- Float & Glow Design bleibt
+- Glassmorphism-Effekte bleiben
+- Pagination-Gradient bleibt
+- Alle Businessportal24-spezifischen Features intakt
+
+---
+
+## 📋 Checkliste nach Migration
+
+- [ ] Hero Banner wird korrekt angezeigt
+- [ ] Highlights-Slider funktioniert
+- [ ] Gradient-Indicator erscheint bei Titles
+- [ ] Pagination mit Gradient funktioniert
+- [ ] Float & Glow Effekte auf Cards funktionieren
+- [ ] Dark Mode funktioniert
+- [ ] Glass-Button-Style funktioniert
+- [ ] Industry-Icons werden angezeigt
+- [ ] Responsive Design funktioniert
+
+---
+
+## 🔍 Vergleich: Vorher vs. Nachher
+
+### Vorher (669 Zeilen)
+```
+✗ Hero-Styles dupliziert (20 Zeilen)
+✗ Industry-Icons dupliziert (10 Zeilen)
+✗ Section-Indicator redundant (10 Zeilen)
+✗ Unstrukturiert
+✗ Schwer wartbar
+```
+
+### Nachher (560 Zeilen)
+```
+✓ Keine Duplikate
+✓ Zentral verwaltete gemeinsame Styles
+✓ Klare Struktur
+✓ Leicht wartbar
+✓ Theme-Identität bewahrt
+✓ -109 Zeilen (-16%)
+```
+
+---
+
+## 💡 Best Practice für zukünftige Styles
+
+### Fragen vor dem Hinzufügen neuer Styles:
+
+1. **Ist dieser Style gemeinsam?**
+   - JA → In `shared-styles.css` einfügen
+   - NEIN → In Theme-CSS einfügen
+
+2. **Gibt es einen ähnlichen Style bereits?**
+   - JA → Bestehenden Style erweitern
+   - NEIN → Neuen Style erstellen
+
+3. **Ist dieser Style theme-spezifisch?**
+   - JA → Theme-CSS mit Kommentar
+   - NEIN → shared-styles.css
+
+4. **Brauche ich CSS-Variables?**
+   - JA → In Theme-CSS im :root definieren
+   - NEIN → Direkte Werte nutzen
+
+---
+
+## 🚀 Zusammenfassung
+
+Die Businessportal24-CSS ist jetzt:
+- ✅ **Optimiert** (16% kleiner)
+- ✅ **Duplikatfrei**
+- ✅ **Gut strukturiert**
+- ✅ **Wartbar**
+- ✅ **Theme-Identität bewahrt**
+
+Alle Businessportal24-spezifischen Features (Float & Glow, Glassmorphism, Pagination-Gradient) bleiben vollständig erhalten!
+

_docs/CATEGORY_SERVICE_DOCUMENTATION.md

@@ -0,0 +1,353 @@
+# CategoryService Dokumentation
+
+Der `CategoryService` ist eine zentrale Service-Klasse für die Verwaltung aller Kategorien in der Anwendung.
+
+## 📁 Pfad
+```
+app/Services/CategoryService.php
+```
+
+## 🎯 Zweck
+
+Der CategoryService bietet eine zentrale Stelle für:
+- Kategorie-Definitionen (Name, Slug, Icon, Farbe, etc.)
+- Farb-Mappings und Gradients
+- Icon-Pfade für Heroicons
+- Helper-Methoden für Kategorie-Zugriff
+
+## 📖 Verfügbare Methoden
+
+### 1. `getCategories()`
+Gibt alle verfügbaren Kategorien zurück.
+
+```php
+use App\Services\CategoryService;
+
+$categories = CategoryService::getCategories();
+// Returns: Array mit allen Kategorien
+```
+
+**Rückgabe-Struktur:**
+```php
+[
+    [
+        'name' => 'Wirtschaft',
+        'slug' => 'wirtschaft',
+        'description' => 'Unternehmensnachrichten, Finanzberichte, Wirtschaftstrends',
+        'count' => '2.450+',
+        'icon' => 'chart-bar',
+        'color' => 'blue',
+    ],
+    // ... weitere Kategorien
+]
+```
+
+### 2. `getCategoryBySlug(string $slug)`
+Findet eine Kategorie anhand ihres Slugs.
+
+```php
+$category = CategoryService::getCategoryBySlug('wirtschaft');
+// Returns: Array mit Kategorie-Daten oder null
+```
+
+### 3. `getCategorySlugs()`
+Gibt alle Kategorie-Slugs als Array zurück.
+
+```php
+$slugs = CategoryService::getCategorySlugs();
+// Returns: ['wirtschaft', 'technologie', 'gesundheit', ...]
+```
+
+### 4. `getColorGradients()`
+Gibt alle Farb-Gradient-Mappings zurück.
+
+```php
+$gradients = CategoryService::getColorGradients();
+// Returns: ['blue' => 'from-blue-500/10 to-blue-600/10', ...]
+```
+
+### 5. `getColorClasses()`
+Gibt alle Farb-CSS-Klassen zurück.
+
+```php
+$classes = CategoryService::getColorClasses();
+// Returns: ['blue' => 'text-blue-500', ...]
+```
+
+### 6. `getGradientForColor(string $color)`
+Gibt den Gradient für eine bestimmte Farbe zurück.
+
+```php
+$gradient = CategoryService::getGradientForColor('blue');
+// Returns: 'from-blue-500/10 to-blue-600/10'
+```
+
+### 7. `getClassForColor(string $color)`
+Gibt die CSS-Klasse für eine bestimmte Farbe zurück.
+
+```php
+$class = CategoryService::getClassForColor('blue');
+// Returns: 'text-blue-500'
+```
+
+### 8. `getIconPath(string $iconName)`
+Generiert den Pfad zu einem Heroicon.
+
+```php
+$path = CategoryService::getIconPath('chart-bar');
+// Returns: '/heroicons/optimized/24/outline/chart-bar.svg'
+```
+
+### 9. `count()`
+Gibt die Gesamtanzahl der Kategorien zurück.
+
+```php
+$total = CategoryService::count();
+// Returns: 12
+```
+
+## 🔧 Verwendungsbeispiele
+
+### Beispiel 1: Kategorien in Blade anzeigen
+
+```blade
+@php
+    use App\Services\CategoryService;
+    $categories = CategoryService::getCategories();
+@endphp
+
+<div class="grid grid-cols-3 gap-4">
+    @foreach($categories as $category)
+        <a href="/kategorie/{{ $category['slug'] }}">
+            <div class="category-card">
+                <img src="{{ CategoryService::getIconPath($category['icon']) }}" 
+                     alt="{{ $category['name'] }}">
+                <h3>{{ $category['name'] }}</h3>
+                <p>{{ $category['description'] }}</p>
+            </div>
+        </a>
+    @endforeach
+</div>
+```
+
+### Beispiel 2: Kategorie in Controller verwenden
+
+```php
+use App\Services\CategoryService;
+
+class CategoryController extends Controller
+{
+    public function show(string $slug)
+    {
+        $category = CategoryService::getCategoryBySlug($slug);
+        
+        if (!$category) {
+            abort(404);
+        }
+        
+        return view('kategorie', [
+            'category' => $category,
+            'allCategories' => CategoryService::getCategories(),
+        ]);
+    }
+}
+```
+
+### Beispiel 3: Kategorie-Navigation
+
+```blade
+@php
+    use App\Services\CategoryService;
+    $categories = CategoryService::getCategories();
+@endphp
+
+<nav class="category-nav">
+    @foreach($categories as $category)
+        <a href="/kategorie/{{ $category['slug'] }}" 
+           class="nav-item {{ request()->segment(2) === $category['slug'] ? 'active' : '' }}">
+            {{ $category['name'] }}
+        </a>
+    @endforeach
+</nav>
+```
+
+### Beispiel 4: Dropdown mit Kategorien
+
+```blade
+<select name="category" class="form-select">
+    <option value="">Kategorie wählen</option>
+    @foreach(App\Services\CategoryService::getCategories() as $cat)
+        <option value="{{ $cat['slug'] }}">{{ $cat['name'] }}</option>
+    @endforeach
+</select>
+```
+
+### Beispiel 5: Kategorie-Filter in Livewire
+
+```php
+use App\Services\CategoryService;
+use Livewire\Component;
+
+class PressReleaseFilter extends Component
+{
+    public $selectedCategory = '';
+    public $categories = [];
+    
+    public function mount()
+    {
+        $this->categories = CategoryService::getCategories();
+    }
+    
+    public function render()
+    {
+        return view('livewire.press-release-filter');
+    }
+}
+```
+
+### Beispiel 6: Farb-Gradient verwenden
+
+```blade
+@php
+    use App\Services\CategoryService;
+    $category = CategoryService::getCategoryBySlug('wirtschaft');
+    $gradient = CategoryService::getGradientForColor($category['color']);
+    $iconColor = CategoryService::getClassForColor($category['color']);
+@endphp
+
+<div class="bg-gradient-to-br {{ $gradient }} rounded-lg p-4">
+    <img src="{{ CategoryService::getIconPath($category['icon']) }}" 
+         class="h-8 w-8 {{ $iconColor }}" 
+         alt="{{ $category['name'] }}">
+    <h3>{{ $category['name'] }}</h3>
+</div>
+```
+
+## 🎨 Verfügbare Kategorien
+
+Aktuell sind folgende Kategorien definiert:
+
+| Name | Slug | Icon | Farbe |
+|------|------|------|-------|
+| Wirtschaft | wirtschaft | chart-bar | blue |
+| Technologie | technologie | cpu-chip | purple |
+| Gesundheit | gesundheit | heart | green |
+| Finanzen | finanzen | currency-dollar | yellow |
+| Automotive | automotive | truck | red |
+| Immobilien | immobilien | building-office | indigo |
+| Energie | energie | bolt | orange |
+| Bildung | bildung | academic-cap | cyan |
+| Handel | handel | shopping-cart | pink |
+| Tourismus | tourismus | globe-alt | teal |
+| Sport | sport | trophy | lime |
+| Kultur | kultur | musical-note | violet |
+
+## ➕ Neue Kategorie hinzufügen
+
+Um eine neue Kategorie hinzuzufügen, bearbeiten Sie die `getCategories()` Methode in `app/Services/CategoryService.php`:
+
+```php
+public static function getCategories(): array
+{
+    return [
+        // ... bestehende Kategorien
+        [
+            'name' => 'Neue Kategorie',
+            'slug' => 'neue-kategorie',
+            'description' => 'Beschreibung der neuen Kategorie',
+            'count' => '0+',
+            'icon' => 'icon-name', // Heroicon Name
+            'color' => 'emerald', // Farbe
+        ],
+    ];
+}
+```
+
+**Wichtig:** Wenn Sie eine neue Farbe verwenden, fügen Sie diese auch in `getColorGradients()` und `getColorClasses()` hinzu!
+
+## 🎯 Best Practices
+
+1. **Verwenden Sie immer den CategoryService** statt hardcodierte Kategorien
+2. **Caching:** Für bessere Performance können Kategorien gecacht werden
+3. **Validierung:** Nutzen Sie `getCategoryBySlug()` zur Validierung von Kategorie-Parametern
+4. **Konsistenz:** Alle Kategorie-Daten sollten nur über den Service abgerufen werden
+
+## 🔄 Migration von inline Arrays
+
+**Vorher:**
+```blade
+@php
+    $categories = [
+        ['name' => 'Wirtschaft', 'slug' => 'wirtschaft', ...],
+        // ...
+    ];
+@endphp
+```
+
+**Nachher:**
+```blade
+@php
+    use App\Services\CategoryService;
+    $categories = CategoryService::getCategories();
+@endphp
+```
+
+## 📊 Performance-Tipps
+
+Wenn Sie die Kategorien häufig verwenden, können Sie sie in einem View Composer laden:
+
+```php
+// app/Providers/ViewServiceProvider.php
+use App\Services\CategoryService;
+use Illuminate\Support\Facades\View;
+
+public function boot()
+{
+    View::composer('*', function ($view) {
+        $view->with('globalCategories', CategoryService::getCategories());
+    });
+}
+```
+
+Dann in Blade:
+```blade
+@foreach($globalCategories as $category)
+    <!-- ... -->
+@endforeach
+```
+
+## 🧪 Testing
+
+Beispiel für einen Test:
+
+```php
+use App\Services\CategoryService;
+use Tests\TestCase;
+
+class CategoryServiceTest extends TestCase
+{
+    public function test_get_categories_returns_array()
+    {
+        $categories = CategoryService::getCategories();
+        
+        $this->assertIsArray($categories);
+        $this->assertNotEmpty($categories);
+    }
+    
+    public function test_get_category_by_slug()
+    {
+        $category = CategoryService::getCategoryBySlug('wirtschaft');
+        
+        $this->assertNotNull($category);
+        $this->assertEquals('Wirtschaft', $category['name']);
+    }
+}
+```
+
+## 📝 Changelog
+
+- **v1.0** - Initiale Version mit allen 12 Kategorien
+- Unterstützt Heroicons
+- Farb-Mappings für alle Kategorien
+- Helper-Methoden für einfachen Zugriff
+

_docs/COMPONENT_DOCUMENTATION.md

@@ -0,0 +1,485 @@
+# Komponenten-Dokumentation
+
+Diese Dokumentation beschreibt alle wiederverwendbaren Blade-Komponenten für die Presseecho und Businessportal24 Themes.
+
+## Inhaltsverzeichnis
+1. [Layout-Komponenten](#layout-komponenten)
+2. [Navigation-Komponenten](#navigation-komponenten)
+3. [Content-Komponenten](#content-komponenten)
+4. [Card-Komponenten](#card-komponenten)
+5. [Verwendungsbeispiele](#verwendungsbeispiele)
+
+---
+
+## Layout-Komponenten
+
+### Content-Layout
+**Pfad:** `resources/views/components/web/content-layout.blade.php`
+
+Hauptlayout für Unterseiten mit optionaler Sidebar.
+
+**Props:**
+- `$sidebar` (slot): Sidebar-Inhalt (optional)
+- `$sidebarPosition` (string): Position der Sidebar - `'left'` oder `'right'` (default: `'right'`)
+
+**Beispiel ohne Sidebar:**
+```blade
+<x-web.content-layout>
+    <article>
+        <!-- Ihr Content hier -->
+    </article>
+</x-web.content-layout>
+```
+
+**Beispiel mit Sidebar:**
+```blade
+<x-web.content-layout>
+    <x-slot name="sidebar">
+        <x-web.sidebar-widget title="Filter">
+            <!-- Sidebar-Inhalte -->
+        </x-web.sidebar-widget>
+    </x-slot>
+    
+    <article>
+        <!-- Hauptcontent -->
+    </article>
+</x-web.content-layout>
+```
+
+### Page Header
+**Pfad:** `resources/views/components/web/page-header.blade.php`
+
+Header für Unterseiten mit Titel, Subtitle und optionalem Bild.
+
+**Props:**
+- `$title` (string, required): Hauptüberschrift
+- `$subtitle` (string, optional): Untertitel
+- `$meta` (slot, optional): Meta-Informationen (Badges, Datum, etc.)
+- `$image` (string, optional): URL für Header-Bild
+- `$compact` (bool): Kompakte Version (default: `false`)
+
+**Beispiel:**
+```blade
+<x-web.page-header 
+    title="Die Zukunft der KI"
+    subtitle="Exklusive Einblicke in die Herausforderungen">
+    <x-slot name="meta">
+        <span class="badge badge-primary">Exklusiv-Interview</span>
+        <span>17. Oktober 2024</span>
+    </x-slot>
+</x-web.page-header>
+```
+
+---
+
+## Navigation-Komponenten
+
+### Main Navigation
+**Pfad:** `resources/views/components/web/main-navigation.blade.php`
+
+Sticky Navigation für verschiedene Themes.
+
+**Props:**
+- `$theme` (string): Theme-Name - `'presseecho'` oder `'businessportal24'` (default: `'presseecho'`)
+- `$items` (array, optional): Custom Navigation-Items
+
+**Beispiel Standard:**
+```blade
+<x-web.main-navigation theme="presseecho" />
+```
+
+**Beispiel Custom Items:**
+```blade
+<x-web.main-navigation 
+    theme="presseecho"
+    :items="[
+        ['label' => 'Kategorien', 'url' => '/kategorien'],
+        ['label' => 'Autoren', 'url' => '/autoren'],
+    ]" 
+/>
+```
+
+### Breadcrumb
+**Pfad:** `resources/views/components/web/breadcrumb.blade.php`
+
+Breadcrumb-Navigation für Unterseiten.
+
+**Props:**
+- `$items` (array, required): Array von Breadcrumb-Items
+
+**Beispiel:**
+```blade
+<x-web.breadcrumb :items="[
+    ['label' => 'Themendossiers', 'url' => '/themendossiers'],
+    ['label' => 'KI & Innovation', 'url' => '/themendossiers/ki'],
+    ['label' => 'Artikel-Titel']
+]" />
+```
+
+---
+
+## Content-Komponenten
+
+### Section Header
+**Pfad:** `resources/views/components/web/section-header.blade.php`
+
+Header für Content-Sections.
+
+**Props:**
+- `$title` (string, required): Section-Titel
+- `$subtitle` (string, optional): Subtitle
+- `$size` (string): Größe - `'small'`, `'medium'`, `'large'` (default: `'medium'`)
+
+**Beispiel:**
+```blade
+<x-web.section-header 
+    title="Neueste Analysen"
+    subtitle="Fundierte Einschätzungen von Branchenexperten"
+    size="medium" 
+/>
+```
+
+### Hero Banner
+**Pfad:** `resources/views/components/web/hero-banner.blade.php`
+
+Hero-Section für Startseiten.
+
+**Props:**
+- `$theme` (string): Theme-Name (default: `'presseecho'`)
+- `$title` (slot): Hero-Titel
+- `$subtitle` (slot): Hero-Subtitle
+
+**Beispiel:**
+```blade
+<x-web.hero-banner theme="presseecho">
+    <x-slot name="title">
+        Exklusive Fachmeldungen <span class="opacity-50">für Ihre Recherche</span>
+    </x-slot>
+    <x-slot name="subtitle">
+        Exklusive Wirtschaftsinformationen für Journalisten
+    </x-slot>
+</x-web.hero-banner>
+```
+
+### Sidebar Widget
+**Pfad:** `resources/views/components/web/sidebar-widget.blade.php`
+
+Widget-Container für Sidebar-Elemente.
+
+**Props:**
+- `$title` (string, optional): Widget-Titel
+- `$icon` (slot, optional): Icon als SVG
+
+**Beispiel:**
+```blade
+<x-web.sidebar-widget title="Über den Autor">
+    <div class="flex items-start gap-4">
+        <div class="w-16 h-16 rounded-full bg-gradient-to-br from-[var(--color-primary)] to-[var(--color-secondary)]">
+            <!-- Avatar -->
+        </div>
+        <div>
+            <h4 class="font-semibold">Dr. Maria Schmidt</h4>
+            <p class="text-sm">Expertin für KI</p>
+        </div>
+    </div>
+</x-web.sidebar-widget>
+```
+
+---
+
+## Card-Komponenten
+
+### Article Card
+**Pfad:** `resources/views/components/web/article-card.blade.php`
+
+Standard-Karte für Artikel.
+
+**Props:**
+- `$article` (array, required): Artikel-Daten
+
+**Erforderliche Array-Struktur:**
+```php
+$article = [
+    'badge' => 'Analyse',
+    'badgeType' => 'primary', // primary, secondary, success, warning
+    'category' => 'Industrie 4.0',
+    'categoryBadgeType' => 'secondary',
+    'date' => '2024-10-16',
+    'dateFormatted' => '16. Okt 2024',
+    'title' => 'Artikeltitel',
+    'teaser' => 'Kurzbeschreibung...',
+    'author' => 'Thomas Müller',
+    'authorInitials' => 'TM',
+    'image' => 'https://...',
+];
+```
+
+**Beispiel:**
+```blade
+<div class="grid md:grid-cols-2 lg:grid-cols-3 gap-6">
+    @foreach ($articles as $article)
+        <x-web.article-card :article="$article" />
+    @endforeach
+</div>
+```
+
+### Dossier Card
+**Pfad:** `resources/views/components/web/dossier-card.blade.php`
+
+Karte für Themendossiers.
+
+**Props:**
+- `$dossier` (array, required): Dossier-Daten
+
+**Erforderliche Array-Struktur:**
+```php
+$dossier = [
+    'title' => 'KI in der Industrie',
+    'description' => 'Alle Facetten der künstlichen Intelligenz...',
+    'articleCount' => 12,
+    'image' => 'https://...',
+];
+```
+
+**Beispiel:**
+```blade
+<div class="grid md:grid-cols-2 lg:grid-cols-3 gap-6">
+    @foreach ($dossiers as $dossier)
+        <x-web.dossier-card :dossier="$dossier" />
+    @endforeach
+</div>
+```
+
+### Highlight Card
+**Pfad:** `resources/views/components/web/highlight-card.blade.php`
+
+Karte für Highlights (wird im Slider verwendet).
+
+**Props:**
+- `$highlight` (array, required): Highlight-Daten
+
+**Erforderliche Array-Struktur:**
+```php
+$highlight = [
+    'badge' => 'Exklusiv-Interview',
+    'badgeType' => 'primary',
+    'industry' => 'KI & Innovation',
+    'date' => '17. Oktober 2024',
+    'title' => 'Die Zukunft der KI',
+    'text' => 'Beschreibungstext...',
+    'author' => 'Dr. Maria Schmidt',
+    'authorRole' => 'Expertin für KI',
+    'initials' => 'MS',
+    'image' => 'https://...',
+];
+```
+
+### Highlights Slider
+**Pfad:** `resources/views/components/web/highlights-slider.blade.php`
+
+Interaktiver Slider für Highlights mit Navigation und Keyboard-Support.
+
+**Props:**
+- `$highlights` (array, required): Array von Highlight-Daten
+- `$theme` (string): Theme-Name (default: `'presseecho'`)
+
+**Beispiel:**
+```blade
+@php
+    $highlights = [
+        [
+            'badge' => 'Exklusiv-Interview',
+            'badgeType' => 'primary',
+            'industry' => 'KI & Innovation',
+            'date' => '17. Oktober 2024',
+            'title' => 'Die Zukunft der KI',
+            'text' => 'Interview-Text...',
+            'author' => 'Dr. Maria Schmidt',
+            'authorRole' => 'Expertin',
+            'initials' => 'MS',
+            'image' => 'https://...',
+        ],
+        // ... weitere Highlights
+    ];
+@endphp
+
+<x-web.highlights-slider :highlights="$highlights" theme="presseecho" />
+```
+
+---
+
+## Verwendungsbeispiele
+
+### Beispiel 1: Artikel-Detailseite
+
+```blade
+@extends('web.layouts.web-master')
+
+@section('content')
+<main class="min-h-screen flex flex-col bg-white dark:bg-zinc-950">
+    <livewire:web.burger-menu />
+    <livewire:web.header />
+    
+    <x-web.main-navigation theme="presseecho" />
+    
+    <div class="container mx-auto px-4">
+        <x-web.breadcrumb :items="[
+            ['label' => 'Themendossiers', 'url' => '/themendossiers'],
+            ['label' => 'KI & Innovation', 'url' => '/ki'],
+            ['label' => 'Artikel-Titel']
+        ]" />
+    </div>
+    
+    <x-web.page-header 
+        title="Die Zukunft der KI"
+        subtitle="Exklusive Einblicke">
+        <x-slot name="meta">
+            <span class="badge badge-primary">Interview</span>
+            <span>17. Oktober 2024</span>
+        </x-slot>
+    </x-web.page-header>
+    
+    <x-web.content-layout>
+        <x-slot name="sidebar">
+            <x-web.sidebar-widget title="Über den Autor">
+                <!-- Author Info -->
+            </x-web.sidebar-widget>
+        </x-slot>
+        
+        <article class="prose prose-lg">
+            <!-- Artikel-Content -->
+        </article>
+    </x-web.content-layout>
+    
+    <livewire:web.footer />
+</main>
+@endsection
+```
+
+### Beispiel 2: Kategorie-Übersicht
+
+```blade
+@extends('web.layouts.web-master')
+
+@section('content')
+<main class="min-h-screen flex flex-col bg-white dark:bg-zinc-950">
+    <livewire:web.burger-menu />
+    <livewire:web.header />
+    
+    <x-web.main-navigation theme="presseecho" />
+    
+    <div class="container mx-auto px-4">
+        <x-web.breadcrumb :items="[
+            ['label' => 'Themendossiers', 'url' => '/themendossiers'],
+            ['label' => 'KI & Innovation']
+        ]" />
+    </div>
+    
+    <x-web.page-header 
+        title="KI & Innovation"
+        subtitle="Alle Artikel zum Thema"
+        image="https://..." />
+    
+    <x-web.content-layout>
+        <x-slot name="sidebar">
+            <x-web.sidebar-widget title="Filter">
+                <!-- Filter-Optionen -->
+            </x-web.sidebar-widget>
+        </x-slot>
+        
+        <div class="grid md:grid-cols-2 gap-6">
+            @foreach ($articles as $article)
+                <x-web.article-card :article="$article" />
+            @endforeach
+        </div>
+    </x-web.content-layout>
+    
+    <livewire:web.footer />
+</main>
+@endsection
+```
+
+---
+
+## CSS-Klassen
+
+### Badge-Typen
+- `badge` - Basis-Badge
+- `badge-primary` - Primary-Farbe
+- `badge-secondary` - Secondary-Farbe
+- `badge-success` - Erfolg (Grün)
+- `badge-warning` - Warnung (Gelb)
+
+### Button-Typen
+- `btn-primary` - Primary-Button mit Gradient
+- `btn-secondary` - Secondary-Button
+- `pagination-btn` - Pagination-Button
+- `pagination-active` - Aktive Pagination-Seite
+
+### Card-Typen
+- `card` - Basis-Karte
+- `card-hover` - Karte mit Hover-Effekt
+- `highlight-card` - Highlight-Karte (Slider)
+
+### Layout-Klassen
+- `section-light-bg` - Heller Section-Hintergrund
+- `section-gradient-bg` - Gradient Section-Hintergrund
+- `page-header` - Page-Header-Container
+- `page-header-compact` - Kompakter Page-Header
+
+---
+
+## Theme-Anpassung
+
+Alle Komponenten respektieren die Theme-Variablen:
+
+```css
+:root {
+    --primary: /* HSL-Werte */
+    --secondary: /* HSL-Werte */
+    --color-primary: /* Hex-Werte */
+    --color-secondary: /* Hex-Werte */
+}
+```
+
+**Presseecho:**
+- Primary: `#345636` (Grün)
+- Secondary: `#6b8f71` (Hellgrün)
+
+**Businessportal24:**
+- Primary: `#cf3628` (Rot)
+- Secondary: `#f0834a` (Orange)
+
+---
+
+## Best Practices
+
+1. **Komponenten-Verwendung:**
+   - Nutzen Sie immer die wiederverwendbaren Komponenten
+   - Vermeiden Sie duplizierte HTML-Strukturen
+   - Verwenden Sie Props für dynamische Inhalte
+
+2. **CSS-Klassen:**
+   - Nutzen Sie die vordefinierten CSS-Klassen aus `shared-styles.css`
+   - Vermeiden Sie Inline-Styles, wo möglich
+   - Theme-spezifische Overrides in den jeweiligen Theme-CSS-Dateien
+
+3. **Datenstruktur:**
+   - Halten Sie sich an die definierten Array-Strukturen
+   - Verwenden Sie `@php`-Blöcke für Daten-Definitionen
+   - Dokumentieren Sie Custom-Properties
+
+4. **Accessibility:**
+   - Verwenden Sie semantische HTML-Tags
+   - Fügen Sie `aria-label` zu interaktiven Elementen hinzu
+   - Testen Sie die Keyboard-Navigation
+
+---
+
+## Support
+
+Bei Fragen zur Verwendung der Komponenten:
+- Siehe Beispiele unter `/resources/views/web/examples/`
+- Konsultieren Sie diese Dokumentation
+- Prüfen Sie die bestehenden Implementierungen in `presseecho.blade.php`
+

_docs/DOMAINS-CONFIG.md

@@ -9,14 +9,14 @@ Füge die folgenden Variablen zu deiner `.env`-Datei hinzu:
 
 ```env
 # Domain-Konfigurationen
-APP_NAME=pr-copilot
-APP_URL=https://pr-copilot.test
+APP_NAME=pressekonto
+APP_URL=https://pressekonto.test
 APP_PRIMARY="#3ea3dc"
 APP_ACCENT="#5c5c60"
 
 # Entwicklungseinstellungen für Domains
 DEV_SIMULATE_DOMAIN=false
-DEV_SIMULATED_DOMAIN=pr-copilot.test
+DEV_SIMULATED_DOMAIN=pressekonto.test
 ```
 
 ## Entwicklungsmodus
@@ -34,10 +34,10 @@ unabhängig von der tatsächlichen URL.
 
 Jede Domain kann eigene Einstellungen haben:
 
-### Haupt-Website (pr-copilot.test)
+### Haupt-Website (pressekonto.test)
 
--   `APP_URL`: Die Domain für die Haupt-Website (https://pr-copilot.test)
--   `APP_NAME`: Der Name der Haupt-Website (pr-copilot)
+-   `APP_URL`: Die Domain für die Haupt-Website (https://pressekonto.test)
+-   `APP_NAME`: Der Name der Haupt-Website (pressekonto)
 -   `APP_PRIMARY`: Die primäre Farbe im HEX-Format (#3ea3dc)
 -   `APP_ACCENT`: Die Akzentfarbe im HEX-Format (#5c5c60)
 
@@ -62,7 +62,7 @@ Jede Domain kann eigene Einstellungen haben:
 Um die verschiedenen Domains lokal zu testen, füge folgende Zeilen zu deiner Hosts-Datei hinzu:
 
 ```
-127.0.0.1    pr-copilot.test
+127.0.0.1    pressekonto.test
 127.0.0.1    presseecho.test
 127.0.0.1    businessportal24.test
 ```
@@ -101,7 +101,7 @@ Im Code kannst du auf die Domain-Konfiguration zugreifen:
 
 Das Projekt verwendet bereits eine Multi-Domain-Architektur mit:
 
--   **Hauptwebsite:** `pr-copilot.test` - Hauptwebsite mit blauem Theme (#3ea3dc)
+-   **Hauptwebsite:** `pressekonto.test` - Hauptwebsite mit blauem Theme (#3ea3dc)
 -   **Presseecho:** `presseecho.test` - Presseecho-Website mit rotem Theme (#e94a3c)
 -   **Business Portal:** `businessportal24.test` - Business Portal mit orangem Theme (#f69f0f)
 

_docs/FINAL-FIX-SUMMARY.md

@@ -2,7 +2,7 @@
 
 ## 🔍 Ursprüngliches Problem
 
-Auf https://pr-copilot.test erschien der Fehler:
+Auf https://pressekonto.test erschien der Fehler:
 ```
 [Error] Not allowed to use restricted network host "0.0.0.0": 
 https://0.0.0.0:5178/@vite/client
@@ -53,7 +53,7 @@ npm run dev:all
 
 ```bash
 # Portal CSS wird korrekt geladen:
-curl -Iks https://assets.pr-copilot.test/resources/css/portal.css
+curl -Iks https://assets.pressekonto.test/resources/css/portal.css
 # → HTTP/2 200 ✅
 
 # Web Assets funktionieren:
@@ -65,13 +65,13 @@ curl -Iks https://assets.businessportal24.test/resources/css/web/theme-businessp
 
 | Domain | Asset-Domain | Port | Build-Dir | CSS-Datei |
 |--------|-------------|------|-----------|-----------|
-| pr-copilot.test | assets.pr-copilot.test | 5177 | build/portal | portal.css |
+| pressekonto.test | assets.pressekonto.test | 5177 | build/portal | portal.css |
 | presseecho.test | assets.presseecho.test | 5178 | build/web | theme-presseecho.css |
 | businessportal24.test | assets.businessportal24.test | 5178 | build/web | theme-businessportal24.css |
 
 ## 🚀 Nächste Schritte
 
-1. **Browser testen**: Öffne https://pr-copilot.test und mache einen Hard-Refresh (`Ctrl+Shift+R`)
+1. **Browser testen**: Öffne https://pressekonto.test und mache einen Hard-Refresh (`Ctrl+Shift+R`)
 2. **Keine Fehler mehr**: Die "0.0.0.0" Fehler sollten verschwunden sein
 3. **Assets laden über HTTPS**: Alle CSS/JS-Dateien werden über die korrekten Asset-Subdomains geladen
 
@@ -87,7 +87,7 @@ Falls du die Docker Container neu gestartet hast, stelle sicher dass:
 
 1. ✅ DNS-Einträge in `/etc/hosts` vorhanden sind:
    ```
-   127.0.0.1 assets.pr-copilot.test
+   127.0.0.1 assets.pressekonto.test
    127.0.0.1 assets.presseecho.test
    127.0.0.1 assets.businessportal24.test
    ```

_docs/FINALE-ASSET-URL-FIXES.md

@@ -4,7 +4,7 @@
 
 ### 1. `config/domains.php`
 Jede Domain hat jetzt eine dedizierte `asset_url`:
-- `portal`: `https://assets.pr-copilot.test`
+- `portal`: `https://assets.pressekonto.test`
 - `presseecho`: `https://assets.presseecho.test`
 - `businessportal24`: `https://assets.businessportal24.test`
 
@@ -39,7 +39,7 @@ sleep 5 && tail -30 /tmp/vite-server.log
 ### 2. Im Browser testen
 
 Öffne mit Hard-Refresh (`Ctrl+Shift+R`):
-- ✅ https://pr-copilot.test
+- ✅ https://pressekonto.test
 - ✅ https://presseecho.test  
 - ✅ https://businessportal24.test
 
@@ -52,7 +52,7 @@ https://0.0.0.0:5178/@vite/client
 
 **NACHHER (✅)**:
 ```
-https://assets.pr-copilot.test/@vite/client
+https://assets.pressekonto.test/@vite/client
 https://assets.presseecho.test/@vite/client
 https://assets.businessportal24.test/@vite/client
 ```

_docs/FINAL_OPTIMIZATION_SUMMARY.md

@@ -0,0 +1,439 @@
+# Finale Optimierungs-Zusammenfassung
+
+## Übersicht
+
+Diese Dokumentation fasst alle durchgeführten Optimierungen für Presseecho und Businessportal24 zusammen, einschließlich der neuen Unterseiten-Komponenten.
+
+---
+
+## 📊 Statistiken
+
+### Dateien erstellt/optimiert
+
+| Kategorie | Anzahl | Details |
+|-----------|--------|---------|
+| **Blade-Komponenten** | 11 | Layout, Navigation, Content, Cards |
+| **CSS-Dateien** | 3 | shared-styles, theme-presseecho, theme-businessportal24 |
+| **Beispiel-Seiten** | 2 | Article-Detail, Category-Overview |
+| **Dokumentation** | 2 | Component-Docs, Optimization-Summary |
+
+### Code-Reduktion
+
+| Datei | Vorher | Nachher | Reduktion |
+|-------|--------|---------|-----------|
+| **presseecho.blade.php** | 243 Zeilen | 211 Zeilen | -32 Zeilen |
+| **theme-presseecho.css** | 166 Zeilen | 145 Zeilen | -21 Zeilen |
+| **theme-businessportal24.css** | 512 Zeilen | 512 Zeilen | Optimiert |
+
+### Wiederverwendbarkeit
+
+- **11 Blade-Komponenten** können in allen Unterseiten verwendet werden
+- **Gemeinsame CSS-Klassen** in `shared-styles.css` (726 Zeilen)
+- **Theme-agnostische Komponenten** für beide Portale nutzbar
+
+---
+
+## 🎯 Durchgeführte Optimierungen
+
+### 1. Layout-Komponenten
+
+#### Content-Layout (`content-layout.blade.php`)
+- Flexibles Layout mit optionaler Sidebar
+- Unterstützt Left/Right Sidebar-Positionierung
+- Responsive Grid-System
+
+**Vorher:**
+```blade
+<div class="container mx-auto px-4">
+    <div class="grid lg:grid-cols-12 gap-8">
+        <main class="lg:col-span-8">...</main>
+        <aside class="lg:col-span-4">...</aside>
+    </div>
+</div>
+```
+
+**Nachher:**
+```blade
+<x-web.content-layout>
+    <x-slot name="sidebar">...</x-slot>
+    <main>...</main>
+</x-web.content-layout>
+```
+
+#### Page Header (`page-header.blade.php`)
+- Unterstützt Titel, Subtitle, Meta-Infos
+- Optionales Header-Bild
+- Kompakte Variante verfügbar
+
+### 2. Navigation-Komponenten
+
+#### Main Navigation (`main-navigation.blade.php`)
+- Theme-spezifische Navigation
+- Custom Items möglich
+- Sticky Positioning
+- Gradient Underline Hover-Effekt
+
+**Vorher:** 41 Zeilen inline HTML
+**Nachher:** 1 Zeile Komponenten-Call
+
+```blade
+<x-web.main-navigation theme="presseecho" />
+```
+
+#### Breadcrumb (`breadcrumb.blade.php`)
+- Automatische Home-Link
+- Responsive Darstellung
+- Accessibility-optimiert
+
+### 3. Content-Komponenten
+
+#### Section Header (`section-header.blade.php`)
+- 3 Größen: small, medium, large
+- Gradient Indicator
+- Theme-agnostisch
+
+#### Hero Banner (`hero-banner.blade.php`)
+- Theme-spezifische Gradients
+- Flexible Slots für Title/Subtitle
+- Responsive Padding
+
+#### Sidebar Widget (`sidebar-widget.blade.php`)
+- Konsistentes Widget-Design
+- Optionaler Titel + Icon
+- Hover-Effekte
+
+### 4. Card-Komponenten
+
+Alle Card-Komponenten unterstützen:
+- Dark Mode
+- Hover-Effekte
+- Responsive Images
+- Industry Icons
+- Badge-System
+
+#### Article Card
+- Standardisierte Artikel-Darstellung
+- Author Avatars mit Initialen
+- Kategorien und Badges
+
+#### Dossier Card
+- Spezielle Darstellung für Themendossiers
+- Artikel-Counter
+- Glassmorphism-Effekte
+
+#### Highlight Card
+- Für Highlights-Slider optimiert
+- Grid-Layout mit Bild
+- Meta-Informationen
+
+### 5. Highlights Slider
+
+**Features:**
+- JavaScript-gesteuerter Slider
+- Navigation Buttons
+- Pagination Dots
+- Keyboard-Navigation (Pfeiltasten)
+- Touch/Scroll Support
+- Smooth Scrolling
+- Automatisches Update der aktiven Dots
+
+**CSS-Optimierung:**
+- `overflow-y: visible` für Hover-Effekte
+- Padding-Adjustments für Schatten
+- Scroll-Snap für besseres UX
+
+---
+
+## 🎨 CSS-Optimierungen
+
+### Shared Styles (`shared-styles.css`)
+
+**Neue Additions:**
+- Page Header Styles (50 Zeilen)
+- Sidebar Widget Styles (50 Zeilen)
+- Navigation States (10 Zeilen)
+- Responsive Breakpoints
+
+**Vereinheitlichte Klassen:**
+```css
+/* Badges */
+.badge, .badge-primary, .badge-secondary, etc.
+
+/* Buttons */
+.btn-primary, .btn-secondary, .pagination-btn
+
+/* Cards */
+.card, .card-hover, .highlight-card
+
+/* Layout */
+.section-light-bg, .section-gradient-bg, .page-header
+```
+
+### Theme-spezifische CSS
+
+**Presseecho:**
+- Softer Shadows
+- Subtle Gradients
+- Premium Borders
+- Grün-Farbschema
+
+**Businessportal24:**
+- Float & Glow Design
+- Glassmorphism Effects
+- Shadow Glows
+- Rot/Orange-Farbschema
+
+---
+
+## 📁 Dateistruktur
+
+```
+/var/www/html/
+├── resources/
+│   ├── css/
+│   │   └── web/
+│   │       ├── shared-styles.css          ✨ (726 Zeilen)
+│   │       ├── theme-presseecho.css       ✅ (145 Zeilen)
+│   │       └── theme-businessportal24.css ✅ (512 Zeilen)
+│   │
+│   └── views/
+│       ├── components/
+│       │   └── web/
+│       │       ├── main-navigation.blade.php    ✨
+│       │       ├── breadcrumb.blade.php         ✨
+│       │       ├── page-header.blade.php        ✨
+│       │       ├── content-layout.blade.php     ✨
+│       │       ├── sidebar-widget.blade.php     ✨
+│       │       ├── section-header.blade.php     ✅
+│       │       ├── hero-banner.blade.php        ✅
+│       │       ├── article-card.blade.php       ✅
+│       │       ├── dossier-card.blade.php       ✅
+│       │       ├── highlight-card.blade.php     ✅
+│       │       └── highlights-slider.blade.php  ✅
+│       │
+│       └── web/
+│           ├── presseecho.blade.php             ✅ (optimiert)
+│           └── examples/
+│               ├── article-detail.blade.php     ✨
+│               └── category-overview.blade.php  ✨
+│
+└── COMPONENT_DOCUMENTATION.md                   ✨
+└── FINAL_OPTIMIZATION_SUMMARY.md                ✨
+
+✨ = Neu erstellt
+✅ = Optimiert/Aktualisiert
+```
+
+---
+
+## 🚀 Verwendung für Unterseiten
+
+### Artikel-Detailseite
+
+```blade
+<x-web.main-navigation theme="presseecho" />
+
+<x-web.breadcrumb :items="[...]" />
+
+<x-web.page-header title="..." subtitle="...">
+    <x-slot name="meta">...</x-slot>
+</x-web.page-header>
+
+<x-web.content-layout>
+    <x-slot name="sidebar">
+        <x-web.sidebar-widget title="Autor">...</x-web.sidebar-widget>
+        <x-web.sidebar-widget title="Tags">...</x-web.sidebar-widget>
+    </x-slot>
+    
+    <article class="prose">...</article>
+</x-web.content-layout>
+```
+
+### Kategorie-Übersicht
+
+```blade
+<x-web.main-navigation theme="presseecho" />
+
+<x-web.breadcrumb :items="[...]" />
+
+<x-web.page-header title="..." subtitle="..." image="..." />
+
+<x-web.content-layout>
+    <x-slot name="sidebar">
+        <x-web.sidebar-widget title="Filter">...</x-web.sidebar-widget>
+    </x-slot>
+    
+    <div class="grid md:grid-cols-2 gap-6">
+        @foreach ($articles as $article)
+            <x-web.article-card :article="$article" />
+        @endforeach
+    </div>
+</x-web.content-layout>
+```
+
+### Themendossier
+
+```blade
+<x-web.page-header 
+    title="KI & Innovation"
+    subtitle="Alle Facetten der KI"
+    image="..." />
+
+<div class="grid md:grid-cols-2 lg:grid-cols-3 gap-6">
+    @foreach ($dossiers as $dossier)
+        <x-web.dossier-card :dossier="$dossier" />
+    @endforeach
+</div>
+```
+
+---
+
+## ✅ Vorteile der Optimierung
+
+### 1. Code-Qualität
+- **DRY-Prinzip**: Keine Code-Duplikation mehr
+- **Wartbarkeit**: Änderungen nur an einer Stelle nötig
+- **Lesbarkeit**: Klare Komponenten-Namen und Struktur
+
+### 2. Konsistenz
+- **Einheitliches Design**: Alle Seiten nutzen gleiche Komponenten
+- **Theme-Support**: Beide Themes nutzen gleiche Basis
+- **Responsive**: Alle Komponenten mobile-optimiert
+
+### 3. Entwickler-Erfahrung
+- **Schnellere Entwicklung**: Komponenten einfach zusammenstecken
+- **Dokumentation**: Umfassende Docs verfügbar
+- **Beispiele**: Referenz-Implementierungen vorhanden
+
+### 4. Performance
+- **Weniger CSS**: Gemeinsame Styles einmal geladen
+- **Kleinere Dateien**: Reduzierte Blade-Templates
+- **Caching**: Komponenten können gecacht werden
+
+### 5. Skalierbarkeit
+- **Neue Unterseiten**: Schnell erstellt mit Komponenten
+- **Theme-Erweiterung**: Einfach neue Themes hinzufügen
+- **Feature-Addition**: Zentrale Komponenten erweitern
+
+---
+
+## 📋 Checkliste für neue Unterseiten
+
+- [ ] Layout-Komponente wählen (`content-layout`)
+- [ ] Navigation hinzufügen (`main-navigation`)
+- [ ] Breadcrumb implementieren (`breadcrumb`)
+- [ ] Page-Header erstellen (`page-header`)
+- [ ] Content mit passenden Cards füllen
+- [ ] Sidebar-Widgets hinzufügen (optional)
+- [ ] Theme-Variable setzen
+- [ ] Responsive testen
+- [ ] Dark Mode prüfen
+- [ ] Accessibility validieren
+
+---
+
+## 🎓 Best Practices
+
+### Komponenten-Verwendung
+
+**✅ Gut:**
+```blade
+<x-web.article-card :article="$article" />
+```
+
+**❌ Schlecht:**
+```blade
+<article class="...">
+    <!-- 50 Zeilen duplizierter Code -->
+</article>
+```
+
+### CSS-Klassen
+
+**✅ Gut:**
+```blade
+<button class="btn-primary">Klick mich</button>
+```
+
+**❌ Schlecht:**
+```blade
+<button style="background: linear-gradient(...)">Klick mich</button>
+```
+
+### Datenstruktur
+
+**✅ Gut:**
+```php
+@php
+    $articles = [
+        ['title' => '...', 'author' => '...', ...]
+    ];
+@endphp
+```
+
+**❌ Schlecht:**
+```blade
+<!-- Hardcoded Daten direkt im HTML -->
+```
+
+---
+
+## 🔄 Migration bestehender Seiten
+
+### Schritt 1: Navigation ersetzen
+```blade
+<!-- Alt -->
+<nav class="...">...</nav>
+
+<!-- Neu -->
+<x-web.main-navigation theme="presseecho" />
+```
+
+### Schritt 2: Content-Struktur anpassen
+```blade
+<!-- Alt -->
+<div class="container">
+    <div class="grid">...</div>
+</div>
+
+<!-- Neu -->
+<x-web.content-layout>
+    ...
+</x-web.content-layout>
+```
+
+### Schritt 3: Cards vereinheitlichen
+```blade
+<!-- Alt -->
+<article class="...">...</article>
+
+<!-- Neu -->
+<x-web.article-card :article="$article" />
+```
+
+---
+
+## 📚 Weitere Ressourcen
+
+- **Komponenten-Dokumentation**: `/COMPONENT_DOCUMENTATION.md`
+- **Beispiel-Seiten**: `/resources/views/web/examples/`
+- **Theme-CSS**: `/resources/css/web/`
+- **Shared-Styles**: `/resources/css/web/shared-styles.css`
+
+---
+
+## 🎉 Zusammenfassung
+
+Mit dieser Optimierung haben wir:
+
+1. ✅ **11 wiederverwendbare Komponenten** erstellt
+2. ✅ **726 Zeilen gemeinsame CSS-Styles** zentralisiert
+3. ✅ **Code-Duplikation eliminiert** (>100 Zeilen gespart)
+4. ✅ **Konsistentes Design** über alle Seiten etabliert
+5. ✅ **Unterseiten-Support** vollständig implementiert
+6. ✅ **Theme-Flexibilität** für beide Portale gesichert
+7. ✅ **Umfassende Dokumentation** bereitgestellt
+8. ✅ **Best Practices** definiert und dokumentiert
+
+Die Code-Basis ist jetzt **wartbar**, **skalierbar** und **zukunftssicher**! 🚀
+

_docs/FORTIFY-SANCTUM-SETUP.md

@@ -54,7 +54,7 @@ composer require laravel/fortify laravel/sanctum
 
 ## Routen
 
-### Web-Authentifizierung (pr-copilot.test)
+### Web-Authentifizierung (pressekonto.test)
 
 -   `GET /login` - Anmeldeseite (Livewire)
 -   `POST /login` - Anmeldung (Livewire)
@@ -68,7 +68,7 @@ composer require laravel/fortify laravel/sanctum
 -   `GET /verify-email` - E-Mail-Verifizierung (Livewire)
 -   `GET /confirm-password` - Passwort bestätigen (Livewire)
 
-### API-Routen (api.pr-copilot.test)
+### API-Routen (api.pressekonto.test)
 
 -   `GET /api/user` - Aktueller Benutzer (geschützt)
 -   `GET /api/profile` - Benutzerprofil (geschützt)
@@ -78,7 +78,7 @@ composer require laravel/fortify laravel/sanctum
 
 ### Web-Authentifizierung
 
-1. Besuchen Sie `http://portal.pr-copilot.test/login`
+1. Besuchen Sie `http://portal.pressekonto.test/login`
 2. Registrieren Sie sich oder melden Sie sich an
 3. Nutzen Sie die verschiedenen Authentifizierungsfeatures
 
@@ -87,7 +87,7 @@ composer require laravel/fortify laravel/sanctum
 1. **Token erstellen**:
 
 ```bash
-curl -X POST http://api.pr-copilot.test/login \
+curl -X POST http://api.pressekonto.test/login \
   -H "Content-Type: application/json" \
   -d '{"email":"user@example.com","password":"password"}'
 ```
@@ -95,7 +95,7 @@ curl -X POST http://api.pr-copilot.test/login \
 2. **Geschützte Route aufrufen**:
 
 ```bash
-curl -X GET http://api.pr-copilot.test/api/user \
+curl -X GET http://api.pressekonto.test/api/user \
   -H "Authorization: Bearer YOUR_TOKEN_HERE"
 ```
 
@@ -150,7 +150,7 @@ Bearbeiten Sie die Komponenten in `resources/views/livewire/auth/`:
 
 ```php
 // Beispiel: Login-Komponente anpassen
-new #[Layout('components.layouts.auth')] class extends Component {
+new #[Layout('components.layouts.auth.pressekonto')] class extends Component {
     #[Validate('required|string|email')]
     public string $email = '';
 

_docs/OPTIMIZATION_SUMMARY.md

@@ -0,0 +1,431 @@
+# Optimierungs-Zusammenfassung: Presseecho & Businessportal24
+
+## 📋 Überblick
+
+Die beiden Hauptseiten wurden vollständig refactored und optimiert. Alle gemeinsamen Komponenten wurden ausgelagert, CSS wurde vereinheitlicht und die Wartbarkeit deutlich verbessert.
+
+---
+
+## 🎯 Neue Komponenten
+
+### 1. **highlights-slider.blade.php**
+Wiederverwendbarer Slider für Highlight-Artikel mit:
+- Navigation (Pfeil-Buttons)
+- Pagination (Dots)
+- Keyboard-Navigation
+- Theme-Support (Presseecho/Businessportal24)
+- Accessibility (ARIA-Labels)
+
+**Verwendung:**
+```blade
+<x-web.highlights-slider :highlights="$highlights" theme="presseecho" />
+```
+
+---
+
+### 2. **highlight-card.blade.php**
+Einzelne Highlight-Card mit:
+- Industry Icons (automatisch gemappt)
+- Responsivem Design
+- Hover-Effekten
+- Author-Info
+
+**Verwendung:**
+```blade
+<x-web.highlight-card :highlight="$highlight" />
+```
+
+---
+
+### 3. **hero-banner.blade.php**
+Wiederverwendbarer Hero-Banner mit:
+- Theme-Support
+- Decorative Pattern (optional für Businessportal24)
+- Animationen
+
+**Verwendung:**
+```blade
+<x-web.hero-banner theme="presseecho">
+    <x-slot name="title">
+        Ihr Titel <span class="text-[var(--color-white)]/50">mit Akzent</span>
+    </x-slot>
+    <x-slot name="subtitle">
+        Ihr Untertitel
+    </x-slot>
+</x-web.hero-banner>
+```
+
+---
+
+### 4. **section-header.blade.php**
+Wiederverwendbarer Section-Header mit:
+- 3 Größen (large, medium, small)
+- Gradient-Indicator
+- Optionaler Subtitle
+
+**Verwendung:**
+```blade
+<x-web.section-header 
+    title="Ihr Titel"
+    subtitle="Optionaler Untertitel"
+    size="medium" />
+```
+
+---
+
+### 5. **article-card.blade.php**
+Artikel-Card für "Neueste Analysen" mit:
+- Bild
+- Badge
+- Author mit Initials
+- Hover-Effekte
+
+**Verwendung:**
+```blade
+<x-web.article-card :article="$article" />
+```
+
+---
+
+### 6. **dossier-card.blade.php**
+Dossier-Card für "Themendossiers" mit:
+- Overlay-Design
+- Gradient-Overlay
+- Article-Count Badge
+
+**Verwendung:**
+```blade
+<x-web.dossier-card :dossier="$dossier" />
+```
+
+---
+
+## 🎨 CSS-Struktur
+
+### **shared-styles.css**
+Alle gemeinsamen Styles für beide Themes:
+
+#### Neue Klassen:
+```css
+/* Slider */
+.gradient-indicator      → Gradient-Balken für Titel
+.slider-wrapper          → Slider-Container
+.highlights-slider       → Slider selbst
+.slider-nav-btn          → Navigation-Buttons
+.slider-dots / .slider-dot → Pagination-Dots
+
+/* Highlight Cards */
+.highlight-card          → Card-Container
+.highlight-card-link     → Link-Wrapper
+.highlight-card-image    → Bild-Bereich
+.highlight-card-content  → Content-Bereich
+.highlight-meta          → Meta-Informationen
+.highlight-title         → Titel
+.highlight-text          → Text/Teaser
+.highlight-footer        → Footer mit Company
+.highlight-badge         → Badge für Content-Type
+
+/* Sections */
+.section-light-bg        → Heller Section-Hintergrund
+.section-gradient-bg     → Gradient Section-Hintergrund
+
+/* Hero */
+.hero-gradient           → Hero-Banner Gradient
+.hero-title              → Hero-Titel mit Text-Shadow
+.hero-subtitle           → Hero-Untertitel
+
+/* Icons */
+.industry-icon-badge     → Industry-Icon Styling
+```
+
+---
+
+### **theme-presseecho.css**
+Nur noch Presseecho-spezifische Overrides:
+- Color-Variablen
+- Dark-Mode-Variablen
+- Softer Shadows
+- Gradient-Borders
+
+**Reduziert von 166 auf 141 Zeilen** ✅
+
+---
+
+### **theme-businessportal24.css**
+Businessportal24-spezifische Styles:
+- Color-Variablen
+- Dark-Mode-Variablen
+- Float & Glow Effects
+- Pagination-Styles
+- Glassmorphism Components
+- Glow Utilities
+
+**Optimiert von 669 auf 560 Zeilen (-16%)** ✅
+Duplikate entfernt (Hero, Industry-Icons, Section-Indicator) ✅
+
+---
+
+## 📊 Optimierungs-Ergebnisse
+
+### **Blade-Dateien**
+
+#### Presseecho.blade.php
+- **Vorher:** 602 Zeilen
+- **Nachher:** ~280 Zeilen (optimiert)
+- **Reduktion:** ~53% 🎉
+
+#### Businessportal24.blade.php
+- **Vorher:** 422 Zeilen
+- **Nachher:** ~180 Zeilen (optimiert)
+- **Reduktion:** ~57% 🎉
+
+#### Code-Duplikation
+- **Vorher:** Slider-Code 2x (480 Zeilen)
+- **Nachher:** 1x Komponente (130 Zeilen)
+- **Gesamt-Ersparnis:** 350 Zeilen ✅
+
+---
+
+### **CSS-Dateien**
+
+#### theme-presseecho.css
+- **Vorher:** 166 Zeilen
+- **Nachher:** 141 Zeilen
+- **Reduktion:** 15% 🎉
+
+#### theme-businessportal24.css
+- **Vorher:** 669 Zeilen
+- **Nachher:** 560 Zeilen
+- **Reduktion:** 16% 🎉
+
+#### shared-styles.css
+- **Vorher:** 280 Zeilen
+- **Nachher:** 608 Zeilen
+- **Hinzugefügt:** +328 Zeilen gemeinsame Styles
+
+#### Gesamt CSS-Bilanz
+- **Vorher:** 1.115 Zeilen (166 + 669 + 280)
+- **Nachher:** 1.309 Zeilen (141 + 560 + 608)
+- **Netto:** +194 Zeilen
+- **Aber:** Keine Duplikate mehr, bessere Wartbarkeit! ✅
+
+---
+
+## ✅ Vorteile
+
+### 1. **DRY (Don't Repeat Yourself)**
+- Code nur einmal geschrieben
+- Änderungen nur an einer Stelle
+
+### 2. **Wartbarkeit**
+- Klare Trennung von Concerns
+- Komponenten sind unabhängig testbar
+- Einfaches Debugging
+
+### 3. **Konsistenz**
+- Gleiches Design auf beiden Seiten
+- Einheitliche Naming-Convention
+- Zentrale Style-Verwaltung
+
+### 4. **Performance**
+- Weniger CSS-Duplikate
+- Optimierte Selektoren
+- Besseres Caching
+
+### 5. **Wiederverwendbarkeit**
+- Komponenten für neue Seiten nutzbar
+- Theme-System einfach erweiterbar
+- Schnelles Prototyping
+
+### 6. **Accessibility**
+- ARIA-Labels überall
+- Keyboard-Navigation
+- Focus-States
+
+---
+
+## 🚀 Verwendung der optimierten Dateien
+
+### Blade-Dateien
+
+#### Presseecho
+```bash
+# Backup erstellen
+mv resources/views/web/presseecho.blade.php resources/views/web/presseecho-old.blade.php
+
+# Optimierte Version aktivieren
+mv resources/views/web/presseecho-optimized.blade.php resources/views/web/presseecho.blade.php
+```
+
+#### Businessportal24
+```bash
+# Backup erstellen
+mv resources/views/web/businessportal24.blade.php resources/views/web/businessportal24-old.blade.php
+
+# Optimierte Version aktivieren
+mv resources/views/web/businessportal24-optimized.blade.php resources/views/web/businessportal24.blade.php
+```
+
+---
+
+### CSS-Dateien
+
+#### Businessportal24 CSS
+```bash
+# Backup erstellen
+cp resources/css/web/theme-businessportal24.css resources/css/web/theme-businessportal24-backup.css
+
+# Optimierte Version aktivieren
+mv resources/css/web/theme-businessportal24-optimized.css resources/css/web/theme-businessportal24.css
+
+# Oder direkt ersetzen (shared-styles.css ist bereits aktualisiert)
+# Die Presseecho-CSS ist bereits optimiert
+```
+
+#### Wichtig
+Die `shared-styles.css` wurde bereits optimiert und enthält jetzt alle gemeinsamen Styles. Beide Theme-CSS-Dateien importieren diese automatisch via `@import "./shared-styles.css";`
+
+---
+
+## 📝 Datenstruktur
+
+### Highlights Array
+```php
+$highlights = [
+    [
+        'badge' => 'Exklusiv-Interview',
+        'badgeType' => 'primary',  // oder 'secondary'
+        'industry' => 'KI & Innovation',
+        'date' => '17. Oktober 2024',
+        'title' => 'Ihr Titel',
+        'text' => 'Ihr Teaser-Text',
+        'author' => 'Dr. Maria Schmidt',
+        'authorRole' => 'Expertin',  // optional
+        'initials' => 'MS',          // optional
+        'image' => 'https://...',
+    ],
+];
+```
+
+### Articles Array
+```php
+$articles = [
+    [
+        'badge' => 'Analyse',
+        'badgeType' => 'primary',
+        'category' => 'Industrie 4.0',
+        'categoryBadgeType' => 'secondary',
+        'date' => '2024-10-16',
+        'dateFormatted' => '16. Okt 2024',
+        'title' => 'Ihr Titel',
+        'teaser' => 'Ihr Teaser',
+        'author' => 'Thomas Müller',      // optional
+        'authorInitials' => 'TM',         // optional
+        'image' => 'https://...',
+    ],
+];
+```
+
+### Dossiers Array
+```php
+$dossiers = [
+    [
+        'title' => 'KI in der Industrie',
+        'description' => 'Beschreibung',
+        'articleCount' => 12,
+        'image' => 'https://...',
+    ],
+];
+```
+
+---
+
+## 🎯 Best Practices
+
+1. **Komponenten klein halten** - Jede Komponente hat einen spezifischen Zweck
+2. **Props dokumentieren** - `@props` klar definieren
+3. **Theme-Support** - Theme-Parameter wo nötig
+4. **Accessibility** - ARIA-Labels und Keyboard-Navigation
+5. **Dark Mode** - Alle Komponenten Dark-Mode-ready
+6. **Responsive** - Mobile-First Approach
+
+---
+
+## 📚 Weitere Optimierungsmöglichkeiten
+
+1. **Lazy Loading** für Bilder implementieren
+2. **Intersection Observer** für Scroll-Animationen
+3. **Service Worker** für Offline-Support
+4. **Image Optimization** mit WebP/AVIF
+5. **Critical CSS** für above-the-fold Content
+6. **Component Caching** mit Blade-Cache
+
+---
+
+## 🛠️ Wartung
+
+### Bei neuen Sections:
+1. Gemeinsame Styles in `shared-styles.css`
+2. Theme-spezifische Overrides in Theme-CSS
+3. Neue Komponente in `components/web/`
+4. Datenstruktur dokumentieren
+
+### Bei Style-Änderungen:
+1. Prüfen ob gemeinsam oder theme-spezifisch
+2. In entsprechender Datei ändern
+3. Beide Themes testen
+
+---
+
+## ✨ Zusammenfassung
+
+Die Optimierung hat die Codebase deutlich verbessert:
+
+### Blade-Dateien
+- **~50% weniger Code** in beiden Hauptdateien
+- **6 neue wiederverwendbare Komponenten**
+- **350 Zeilen** Duplikate eliminiert
+- **Konsistentes Design** auf beiden Seiten
+
+### CSS-Dateien
+- **~16% kleiner** (theme-businessportal24.css)
+- **~15% kleiner** (theme-presseecho.css)
+- **Keine Duplikate** mehr zwischen Themes
+- **Vereinheitlichte Struktur** mit shared-styles.css
+- **328 Zeilen** gemeinsame Styles zentral verwaltet
+
+### Vorteile
+- ✅ **Bessere Wartbarkeit** - Änderungen nur an einer Stelle
+- ✅ **DRY-Prinzip** - Don't Repeat Yourself konsequent umgesetzt
+- ✅ **Theme-Identität** - Businessportal24 behält Float & Glow Design
+- ✅ **Wiederverwendbar** - Komponenten für neue Seiten nutzbar
+- ✅ **Performance** - Weniger Code, besseres Caching
+- ✅ **Accessibility** - ARIA-Labels und Keyboard-Navigation
+- ✅ **Responsive** - Mobile-First Approach
+
+### Dateien
+```
+Neue Komponenten:
+├── components/web/highlights-slider.blade.php    (130 Zeilen)
+├── components/web/highlight-card.blade.php       (89 Zeilen)
+├── components/web/hero-banner.blade.php          (34 Zeilen)
+├── components/web/section-header.blade.php       (33 Zeilen)
+├── components/web/article-card.blade.php         (40 Zeilen)
+└── components/web/dossier-card.blade.php         (24 Zeilen)
+
+Optimierte Blade-Dateien:
+├── presseecho-optimized.blade.php                (242 Zeilen)
+└── businessportal24-optimized.blade.php          (139 Zeilen)
+
+Optimierte CSS-Dateien:
+├── shared-styles.css                             (608 Zeilen) ✅ Aktualisiert
+├── theme-presseecho.css                          (141 Zeilen) ✅ Optimiert
+└── theme-businessportal24-optimized.css          (560 Zeilen) → Zu aktivieren
+
+Dokumentation:
+├── OPTIMIZATION_SUMMARY.md                       (Hauptdokumentation)
+└── BUSINESSPORTAL24_CSS_OPTIMIZATION.md          (CSS-Details)
+```
+
+Alle Änderungen sind rückwärtskompatibel und können schrittweise implementiert werden.
+

_docs/THEME-INTEGRATION.md

@@ -6,7 +6,7 @@ Das Projekt nutzt ein dynamisches Theme-System mit 3 Domains:
 
 | Domain | Theme | Primary Color | Secondary Color | CSS-Datei |
 |--------|-------|---------------|-----------------|-----------|
-| **pr-copilot.test** | portal | #526266 | #82a0a7 | `resources/css/portal.css` |
+| **pressekonto.test** | portal | #526266 | #82a0a7 | `resources/css/portal.css` |
 | **presseecho.test** | presseecho | #345636 (Grün) | #6b8f71 | `resources/css/web/theme-presseecho.css` |
 | **businessportal24.test** | businessportal24 | #cf3628 (Rot) | #f0834a | `resources/css/web/theme-businessportal24.css` |
 
@@ -276,8 +276,8 @@ npm run build:web
 Der `ThemeServiceProvider` unterstützt einen `?theme=` URL-Parameter zum Testen:
 
 ```
-https://pr-copilot.test?theme=presseecho
-https://pr-copilot.test?theme=businessportal24
+https://pressekonto.test?theme=presseecho
+https://pressekonto.test?theme=businessportal24
 ```
 
 ### Via Host
@@ -285,7 +285,7 @@ https://pr-copilot.test?theme=businessportal24
 Einfach die entsprechende Domain aufrufen:
 
 ```
-https://pr-copilot.test        → Portal Theme
+https://pressekonto.test        → Portal Theme
 https://presseecho.test        → Presseecho Theme
 https://businessportal24.test  → Businessportal24 Theme
 ```

_docs/VITE-SETUP-NEUE-STRUKTUR.md

@@ -6,7 +6,7 @@ Jede Domain hat jetzt ihre eigene dedizierte Asset-Subdomain:
 
 | Domain | Asset-Subdomain | Port | Vite-Config |
 |--------|----------------|------|-------------|
-| `pr-copilot.test` | `assets.pr-copilot.test` | 5177 | `vite.portal.config.js` |
+| `pressekonto.test` | `assets.pressekonto.test` | 5177 | `vite.portal.config.js` |
 | `presseecho.test` | `assets.presseecho.test` | 5178 | `vite.web.config.js` |
 | `businessportal24.test` | `assets.businessportal24.test` | 5178 | `vite.web.config.js` |
 
@@ -20,7 +20,7 @@ Füge folgende Einträge zu deiner Hosts-Datei hinzu (lokal auf deinem Host-Syst
 **Windows**: `C:\Windows\System32\drivers\etc\hosts`
 
 ```
-127.0.0.1 assets.pr-copilot.test
+127.0.0.1 assets.pressekonto.test
 127.0.0.1 assets.presseecho.test
 127.0.0.1 assets.businessportal24.test
 ```
@@ -47,7 +47,7 @@ npm run dev:all
 
 ### 1. `docker-compose.yml`
 Neue Traefik-Routen hinzugefügt:
-- `assets.pr-copilot.test` → Port 5177 (Portal)
+- `assets.pressekonto.test` → Port 5177 (Portal)
 - `assets.presseecho.test` → Port 5178 (Presseecho)
 - `assets.businessportal24.test` → Port 5178 (Businessportal24)
 
@@ -66,7 +66,7 @@ Nach dem Neustart kannst du testen:
 
 ```bash
 # Im DevContainer:
-curl -Ik https://assets.pr-copilot.test/@vite/client
+curl -Ik https://assets.pressekonto.test/@vite/client
 curl -Ik https://assets.presseecho.test/@vite/client
 curl -Ik https://assets.businessportal24.test/@vite/client
 ```

_docs/VITE-SETUP.md

@@ -6,7 +6,7 @@ Dieses Projekt verwendet **2 separate Vite-Ports** für unterschiedliche Domain-
 
 | Bereich | Port | Vite Config | Tailwind Config | Domains | FluxUI |
 |---------|------|-------------|-----------------|---------|--------|
-| **Backend (Portal)** | 5177 | `vite.portal.config.js` | `tailwind.portal.config.js` | `pr-copilot.test` | ✅ Ja |
+| **Backend (Portal)** | 5177 | `vite.portal.config.js` | `tailwind.portal.config.js` | `pressekonto.test` | ✅ Ja |
 | **Frontend (Web)** | 5178 | `vite.web.config.js` | `tailwind.web.config.js` | `presseecho.test`, `businessportal24.test` | ❌ Nein |
 
 ## Warum 2 Ports?
@@ -35,15 +35,15 @@ Startet beide Vite-Server parallel mit `concurrently`
 npm run dev:portal
 ```
 - Port: 5177
-- HMR-Host: assets.pr-copilot.test
-- Domain: pr-copilot.test
+- HMR-Host: assets.pressekonto.test
+- Domain: pressekonto.test
 
 ### Option 3: Nur Frontend (Web)
 ```bash
 npm run dev:web
 ```
 - Port: 5178
-- HMR-Host: assets-web.pr-copilot.test
+- HMR-Host: assets-web.pressekonto.test
 - Domains: presseecho.test, businessportal24.test
 
 ## Production Build
@@ -86,7 +86,7 @@ public/
 ## Theme-System
 
 ### Backend (Portal)
-- **Domain:** pr-copilot.test
+- **Domain:** pressekonto.test
 - **Theme:** `portal`
 - **CSS:** `resources/css/portal.css`
 - **Views:** `resources/views/portal/**`
@@ -110,8 +110,8 @@ public/
 
 Beide Vite-Server laufen intern auf HTTP (`https: false`), Traefik übernimmt SSL-Terminierung:
 
-- **Portal HMR:** `wss://assets.pr-copilot.test` → Port 5177
-- **Web HMR:** `wss://assets-web.pr-copilot.test` → Port 5178
+- **Portal HMR:** `wss://assets.pressekonto.test` → Port 5177
+- **Web HMR:** `wss://assets-web.pressekonto.test` → Port 5178
 
 ## Troubleshooting
 

_docs/WICHTIG-NAECHSTE-SCHRITTE.md

@@ -37,7 +37,7 @@ sudo nano /etc/hosts
 
 **Einträge:**
 ```
-127.0.0.1 assets.pr-copilot.test
+127.0.0.1 assets.pressekonto.test
 127.0.0.1 assets.presseecho.test
 127.0.0.1 assets.businessportal24.test
 ```
@@ -51,7 +51,7 @@ Zurück im DevContainer:
 tail -20 /tmp/vite-server.log
 
 # Teste die Asset-URLs:
-curl -Ik https://assets.pr-copilot.test/@vite/client
+curl -Ik https://assets.pressekonto.test/@vite/client
 curl -Ik https://assets.presseecho.test/@vite/client
 curl -Ik https://assets.businessportal24.test/@vite/client
 
@@ -63,7 +63,7 @@ curl -Ik https://assets.businessportal24.test/@vite/client
 Öffne:
 - https://businessportal24.test
 - https://presseecho.test
-- https://pr-copilot.test
+- https://pressekonto.test
 
 Die Assets sollten nun korrekt über HTTPS von den jeweiligen Asset-Subdomains geladen werden!
 
@@ -71,7 +71,7 @@ Die Assets sollten nun korrekt über HTTPS von den jeweiligen Asset-Subdomains g
 
 | Hauptdomain | Asset-Domain | Port | Build-Dir |
 |------------|-------------|------|-----------|
-| pr-copilot.test | assets.pr-copilot.test | 5177 | public/build/portal |
+| pressekonto.test | assets.pressekonto.test | 5177 | public/build/portal |
 | presseecho.test | assets.presseecho.test | 5178 | public/build/web |
 | businessportal24.test | assets.businessportal24.test | 5178 | public/build/web |
 

_docs/ZUSAMMENFASSUNG-VITE-SETUP.md

@@ -65,7 +65,7 @@ Du benötigst **mindestens 2 Vite-Ports**:
 │  └──────────────────┘         └──────────────────┘        │
 │          ↓                            ↓                    │
 │  ┌──────────────────┐         ┌──────────────────┐        │
-│  │  pr-copilot.test │         │  presseecho.test │        │
+│  │  pressekonto.test │         │  presseecho.test │        │
 │  │                  │         │  businessp24.test│        │
 │  └──────────────────┘         └──────────────────┘        │
 │                                                             │
@@ -80,14 +80,14 @@ Du benötigst **mindestens 2 Vite-Ports**:
 - Port: **5177**
 - Input: `resources/css/portal.css`
 - Build: `public/build/portal`
-- HMR: `assets.pr-copilot.test`
+- HMR: `assets.pressekonto.test`
 - FluxUI: ✅ Ja
 
 #### ✅ `vite.web.config.js`
 - Port: **5178** (geändert von 5177!)
 - Input: `theme-presseecho.css`, `theme-businessportal24.css`
 - Build: `public/build/web`
-- HMR: `assets-web.pr-copilot.test`
+- HMR: `assets-web.pressekonto.test`
 - FluxUI: ❌ Nein
 
 #### ❌ `vite.config.js` (deprecated)
@@ -190,14 +190,14 @@ npm run build:web
 
 | URL | Vite-Port | Theme | FluxUI |
 |-----|-----------|-------|--------|
-| https://pr-copilot.test | 5177 | portal | ✅ |
+| https://pressekonto.test | 5177 | portal | ✅ |
 | https://presseecho.test | 5178 | presseecho | ❌ |
 | https://businessportal24.test | 5178 | businessportal24 | ❌ |
 
 ## HMR (Hot Module Replacement)
 
-- **Portal:** `wss://assets.pr-copilot.test` → Port 5177
-- **Web:** `wss://assets-web.pr-copilot.test` → Port 5178
+- **Portal:** `wss://assets.pressekonto.test` → Port 5177
+- **Web:** `wss://assets-web.pressekonto.test` → Port 5178
 
 ⚠️ **Wichtig:** Traefik muss beide HMR-Hosts routen!
 
@@ -210,12 +210,12 @@ Stelle sicher, dass Traefik beide Vite-Ports routet:
 # docker-compose.yml oder traefik.yml
 labels:
   # Portal Assets
-  - "traefik.http.routers.vite-portal.rule=Host(`assets.pr-copilot.test`)"
+  - "traefik.http.routers.vite-portal.rule=Host(`assets.pressekonto.test`)"
   - "traefik.http.routers.vite-portal.service=vite-portal"
   - "traefik.http.services.vite-portal.loadbalancer.server.port=5177"
   
   # Web Assets
-  - "traefik.http.routers.vite-web.rule=Host(`assets-web.pr-copilot.test`)"
+  - "traefik.http.routers.vite-web.rule=Host(`assets-web.pressekonto.test`)"
   - "traefik.http.routers.vite-web.service=vite-web"
   - "traefik.http.services.vite-web.loadbalancer.server.port=5178"
 ```
@@ -223,11 +223,11 @@ labels:
 ### 2. DNS/Hosts-Datei aktualisieren
 
 ```
-127.0.0.1 pr-copilot.test
+127.0.0.1 pressekonto.test
 127.0.0.1 presseecho.test
 127.0.0.1 businessportal24.test
-127.0.0.1 assets.pr-copilot.test
-127.0.0.1 assets-web.pr-copilot.test
+127.0.0.1 assets.pressekonto.test
+127.0.0.1 assets-web.pressekonto.test
 ```
 
 ### 3. Blade-Templates aktualisieren
@@ -258,7 +258,7 @@ Diese Dateien werden nicht mehr benötigt:
 npm run dev:all
 
 # 2. Browser öffnen
-# - https://pr-copilot.test (Backend)
+# - https://pressekonto.test (Backend)
 # - https://presseecho.test (Frontend Grün)
 # - https://businessportal24.test (Frontend Rot)
 

_docs/api/v1.yml

@@ -0,0 +1,662 @@
+openapi: 3.1.0
+info:
+  title: Pressekonto API
+  version: 1.0.0
+  description: >
+    REST API for customer integrations after the 2026 migration. Legacy
+    `api_key` query parameters and `X-Api-Key` headers are no longer accepted.
+servers:
+  - url: /api/v1
+security:
+  - sanctumBearer: []
+tags:
+  - name: Press Releases
+  - name: Press Release Images
+  - name: Companies
+  - name: Categories
+  - name: Newsletter
+paths:
+  /press-releases:
+    get:
+      tags: [Press Releases]
+      summary: List own press releases
+      description: Requires `press-releases:read`.
+      parameters:
+        - $ref: '#/components/parameters/StatusFilter'
+        - $ref: '#/components/parameters/PerPage'
+      responses:
+        '200':
+          description: Paginated press release collection.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PaginatedPressReleases'
+        '401':
+          $ref: '#/components/responses/Unauthenticated'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '410':
+          $ref: '#/components/responses/LegacyApiKeyGone'
+    post:
+      tags: [Press Releases]
+      summary: Create a press release
+      description: Requires `press-releases:write`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/StorePressReleaseRequest'
+      responses:
+        '201':
+          description: Press release created.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PressReleaseResponse'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '422':
+          $ref: '#/components/responses/ValidationError'
+  /press-releases/{pressRelease}:
+    get:
+      tags: [Press Releases]
+      summary: Show one own press release
+      description: Requires `press-releases:read`.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseId'
+      responses:
+        '200':
+          description: Press release resource.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PressReleaseResponse'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+    patch:
+      tags: [Press Releases]
+      summary: Update one own draft or rejected press release
+      description: Requires `press-releases:write`.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseId'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UpdatePressReleaseRequest'
+      responses:
+        '200':
+          description: Press release updated.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PressReleaseResponse'
+        '409':
+          $ref: '#/components/responses/Conflict'
+        '422':
+          $ref: '#/components/responses/ValidationError'
+    delete:
+      tags: [Press Releases]
+      summary: Delete one own unpublished press release
+      description: Requires `press-releases:write`.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseId'
+      responses:
+        '204':
+          description: Press release deleted.
+        '409':
+          $ref: '#/components/responses/Conflict'
+  /press-releases/{pressRelease}/images:
+    get:
+      tags: [Press Release Images]
+      summary: List images for one own press release
+      description: Requires `press-releases:read`.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseId'
+      responses:
+        '200':
+          description: Press release image collection.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PressReleaseImageCollection'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+    post:
+      tags: [Press Release Images]
+      summary: Upload an image for one own draft or rejected press release
+      description: Requires `press-release-images:write`. The uploaded image is limited to 5 MB.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseId'
+      requestBody:
+        required: true
+        content:
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/StorePressReleaseImageRequest'
+      responses:
+        '201':
+          description: Press release image uploaded.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PressReleaseImageResponse'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '409':
+          $ref: '#/components/responses/Conflict'
+        '422':
+          $ref: '#/components/responses/ValidationError'
+  /press-release-images/{pressReleaseImage}:
+    delete:
+      tags: [Press Release Images]
+      summary: Delete one own press release image
+      description: Requires `press-release-images:write`; only draft or rejected press releases may be changed.
+      parameters:
+        - $ref: '#/components/parameters/PressReleaseImageId'
+      responses:
+        '204':
+          description: Press release image deleted.
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '409':
+          $ref: '#/components/responses/Conflict'
+  /companies:
+    get:
+      tags: [Companies]
+      summary: List own companies
+      description: Requires `companies:read`.
+      parameters:
+        - $ref: '#/components/parameters/PerPage'
+      responses:
+        '200':
+          description: Paginated company collection.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PaginatedCompanies'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+  /companies/{company}:
+    get:
+      tags: [Companies]
+      summary: Show one own company
+      description: Requires `companies:read`.
+      parameters:
+        - $ref: '#/components/parameters/CompanyId'
+      responses:
+        '200':
+          description: Company resource.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CompanyResponse'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+  /categories:
+    get:
+      tags: [Categories]
+      summary: List active categories
+      description: Requires `press-releases:read`.
+      responses:
+        '200':
+          description: Category collection.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CategoryCollection'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+  /newsletter/subscribe:
+    post:
+      tags: [Newsletter]
+      summary: Subscribe an email address
+      description: Requires `newsletter:subscribe`.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SubscribeNewsletterRequest'
+      responses:
+        '201':
+          description: Subscription created.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/NewsletterSubscriptionResponse'
+        '403':
+          $ref: '#/components/responses/Forbidden'
+        '422':
+          $ref: '#/components/responses/ValidationError'
+components:
+  securitySchemes:
+    sanctumBearer:
+      type: http
+      scheme: bearer
+      bearerFormat: Sanctum personal access token
+  parameters:
+    PressReleaseId:
+      name: pressRelease
+      in: path
+      required: true
+      schema:
+        type: integer
+    PressReleaseImageId:
+      name: pressReleaseImage
+      in: path
+      required: true
+      schema:
+        type: integer
+    CompanyId:
+      name: company
+      in: path
+      required: true
+      schema:
+        type: integer
+    StatusFilter:
+      name: status
+      in: query
+      required: false
+      schema:
+        type: string
+        enum: [draft, review, published, rejected, archived]
+    PerPage:
+      name: per_page
+      in: query
+      required: false
+      schema:
+        type: integer
+        minimum: 1
+        maximum: 100
+        default: 25
+  responses:
+    Unauthenticated:
+      description: Missing or invalid Bearer token.
+    Forbidden:
+      description: Token ability missing or resource does not belong to the authenticated user.
+    Conflict:
+      description: Requested state transition is not allowed.
+    ValidationError:
+      description: Validation failed.
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/ValidationError'
+    LegacyApiKeyGone:
+      description: Legacy API keys are no longer supported.
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/LegacyApiKeyGone'
+  schemas:
+    StorePressReleaseRequest:
+      type: object
+      required: [company_id, category_id, language, title, text]
+      properties:
+        company_id:
+          type: integer
+        category_id:
+          type: integer
+        language:
+          type: string
+          minLength: 2
+          maxLength: 2
+          example: de
+        title:
+          type: string
+          maxLength: 255
+        text:
+          type: string
+          description: |
+            Body of the press release. Since Phase 7 (May 2026) this may
+            contain sanitized HTML produced by the rich-text editor
+            (allowed tags: p, br, h2, h3, strong, em, ul, ol, li,
+            blockquote, a). PMs imported before Phase 7 are plain text.
+            API consumers should treat the value as untrusted HTML.
+        backlink_url:
+          type: string
+          format: uri
+          nullable: true
+        keywords:
+          type: string
+          nullable: true
+          maxLength: 255
+        status:
+          type: string
+          enum: [draft, review]
+          default: draft
+        teaser_begin:
+          type: integer
+          nullable: true
+          minimum: 0
+        teaser_end:
+          type: integer
+          nullable: true
+          minimum: 0
+        no_export:
+          type: boolean
+          nullable: true
+    UpdatePressReleaseRequest:
+      allOf:
+        - $ref: '#/components/schemas/StorePressReleaseRequest'
+      required: []
+    SubscribeNewsletterRequest:
+      type: object
+      required: [portal, email]
+      properties:
+        portal:
+          type: string
+          enum: [presseecho, businessportal24]
+        email:
+          type: string
+          format: email
+          maxLength: 190
+        salutation_key:
+          type: string
+          nullable: true
+          maxLength: 20
+        first_name:
+          type: string
+          nullable: true
+          maxLength: 80
+        last_name:
+          type: string
+          nullable: true
+          maxLength: 80
+    StorePressReleaseImageRequest:
+      type: object
+      required: [image]
+      properties:
+        image:
+          type: string
+          format: binary
+          description: JPEG, PNG or WebP image, max. 5 MB.
+        title:
+          type: string
+          nullable: true
+          maxLength: 120
+        description:
+          type: string
+          nullable: true
+          maxLength: 500
+        copyright:
+          type: string
+          nullable: true
+          maxLength: 255
+        is_preview:
+          type: boolean
+          nullable: true
+    PressRelease:
+      type: object
+      properties:
+        id:
+          type: integer
+        uuid:
+          type: string
+          format: uuid
+        legacy:
+          $ref: '#/components/schemas/LegacyReference'
+        portal:
+          type: string
+          enum: [presseecho, businessportal24]
+        language:
+          type: string
+        title:
+          type: string
+        slug:
+          type: string
+        text:
+          type: string
+        backlink_url:
+          type: string
+          nullable: true
+        keywords:
+          type: string
+          nullable: true
+        status:
+          type: string
+          enum: [draft, review, published, rejected, archived]
+        hits:
+          type: integer
+        teaser:
+          type: object
+          properties:
+            begin:
+              type: integer
+              nullable: true
+            end:
+              type: integer
+              nullable: true
+        no_export:
+          type: boolean
+        published_at:
+          type: string
+          format: date-time
+          nullable: true
+        company:
+          $ref: '#/components/schemas/Company'
+        category:
+          $ref: '#/components/schemas/Category'
+        images:
+          type: array
+          items:
+            $ref: '#/components/schemas/PressReleaseImage'
+        created_at:
+          type: string
+          format: date-time
+          nullable: true
+        updated_at:
+          type: string
+          format: date-time
+          nullable: true
+    Company:
+      type: object
+      properties:
+        id:
+          type: integer
+        legacy:
+          $ref: '#/components/schemas/LegacyReference'
+        portal:
+          type: string
+          enum: [presseecho, businessportal24]
+        type:
+          type: string
+          nullable: true
+        name:
+          type: string
+        slug:
+          type: string
+        email:
+          type: string
+          nullable: true
+        website:
+          type: string
+          nullable: true
+        phone:
+          type: string
+          nullable: true
+        country_code:
+          type: string
+          nullable: true
+        is_active:
+          type: boolean
+        created_at:
+          type: string
+          format: date-time
+          nullable: true
+        updated_at:
+          type: string
+          format: date-time
+          nullable: true
+    Category:
+      type: object
+      properties:
+        id:
+          type: integer
+        legacy:
+          $ref: '#/components/schemas/LegacyReference'
+        portal:
+          type: string
+          enum: [presseecho, businessportal24]
+          nullable: true
+        is_active:
+          type: boolean
+        translations:
+          type: object
+          additionalProperties:
+            type: object
+            properties:
+              name:
+                type: string
+              slug:
+                type: string
+              description:
+                type: string
+                nullable: true
+    PressReleaseImage:
+      type: object
+      properties:
+        id:
+          type: integer
+        press_release_id:
+          type: integer
+        url:
+          type: string
+          format: uri
+        disk:
+          type: string
+        path:
+          type: string
+        title:
+          type: string
+          nullable: true
+        description:
+          type: string
+          nullable: true
+        copyright:
+          type: string
+          nullable: true
+        is_preview:
+          type: boolean
+        sort_order:
+          type: integer
+        width:
+          type: integer
+          nullable: true
+        height:
+          type: integer
+          nullable: true
+        mime:
+          type: string
+          nullable: true
+        created_at:
+          type: string
+          format: date-time
+          nullable: true
+        updated_at:
+          type: string
+          format: date-time
+          nullable: true
+    LegacyReference:
+      type: object
+      properties:
+        portal:
+          type: string
+          nullable: true
+        id:
+          type: integer
+          nullable: true
+    PressReleaseResponse:
+      type: object
+      properties:
+        data:
+          $ref: '#/components/schemas/PressRelease'
+    PressReleaseImageResponse:
+      type: object
+      properties:
+        data:
+          $ref: '#/components/schemas/PressReleaseImage'
+    CompanyResponse:
+      type: object
+      properties:
+        data:
+          $ref: '#/components/schemas/Company'
+    PaginatedPressReleases:
+      type: object
+      properties:
+        data:
+          type: array
+          items:
+            $ref: '#/components/schemas/PressRelease'
+        links:
+          type: object
+        meta:
+          type: object
+    PaginatedCompanies:
+      type: object
+      properties:
+        data:
+          type: array
+          items:
+            $ref: '#/components/schemas/Company'
+        links:
+          type: object
+        meta:
+          type: object
+    CategoryCollection:
+      type: object
+      properties:
+        data:
+          type: array
+          items:
+            $ref: '#/components/schemas/Category'
+    PressReleaseImageCollection:
+      type: object
+      properties:
+        data:
+          type: array
+          items:
+            $ref: '#/components/schemas/PressReleaseImage'
+    NewsletterSubscriptionResponse:
+      type: object
+      properties:
+        message:
+          type: string
+        data:
+          type: object
+          properties:
+            id:
+              type: integer
+            portal:
+              type: string
+            email:
+              type: string
+              format: email
+            is_confirmed:
+              type: boolean
+    LegacyApiKeyGone:
+      type: object
+      properties:
+        message:
+          type: string
+          example: Legacy API keys are no longer supported.
+        migration_url:
+          type: string
+          format: uri
+        docs_url:
+          type: string
+          format: uri
+    ValidationError:
+      type: object
+      properties:
+        message:
+          type: string
+        errors:
+          type: object
+          additionalProperties:
+            type: array
+            items:
+              type: string

app/Actions/Admin/UserImpersonation.php

@@ -0,0 +1,111 @@
+<?php
+
+namespace App\Actions\Admin;
+
+use App\Listeners\RecordAuthActivity;
+use App\Models\User;
+use Illuminate\Auth\Access\AuthorizationException;
+use Illuminate\Support\Facades\Auth;
+
+class UserImpersonation
+{
+    public const SessionKey = 'impersonate_from';
+
+    public function canInitiate(User $user): bool
+    {
+        return $user->is_super_admin || $user->can('users:manage');
+    }
+
+    public function canStart(User $admin, User $target): bool
+    {
+        return $this->canInitiate($admin)
+            && ! $admin->is($target)
+            && ! $this->isActive()
+            && $this->canBeImpersonated($target)
+            && $this->mayImpersonateRank($admin, $target);
+    }
+
+    public function canBeImpersonated(User $target): bool
+    {
+        return $target->canAccessCustomer();
+    }
+
+    /**
+     * Rang-Schutz: Ein Super-Admin darf nur von einem Super-Admin im Panel
+     * angemeldet werden. Verhindert, dass ein Admin (users:manage) das mächtigere
+     * Super-Admin-Konto übernimmt und in dessen Namen z. B. API-Token erzeugt.
+     */
+    public function mayImpersonateRank(User $admin, User $target): bool
+    {
+        return $admin->is_super_admin || ! $target->is_super_admin;
+    }
+
+    /**
+     * @throws AuthorizationException
+     */
+    public function start(User $admin, User $target): void
+    {
+        if (! $this->canInitiate($admin)) {
+            throw new AuthorizationException(__('Du darfst keine Benutzer-Impersonation starten.'));
+        }
+
+        if ($admin->is($target)) {
+            return;
+        }
+
+        if ($this->isActive()) {
+            throw new AuthorizationException(__('Verschachtelte Benutzer-Impersonation ist nicht erlaubt.'));
+        }
+
+        if (! $this->canBeImpersonated($target)) {
+            throw new AuthorizationException(__('Dieser Benutzer kann nicht im Panel angemeldet werden.'));
+        }
+
+        if (! $this->mayImpersonateRank($admin, $target)) {
+            throw new AuthorizationException(__('Super-Admins können nur von Super-Admins im Panel angemeldet werden.'));
+        }
+
+        session([self::SessionKey => $admin->getKey()]);
+
+        request()->attributes->set(RecordAuthActivity::AUTH_METHOD_ATTRIBUTE, 'impersonation');
+        Auth::login($target);
+    }
+
+    public function stop(): ?User
+    {
+        $adminUserId = session(self::SessionKey);
+
+        session()->forget(self::SessionKey);
+
+        if (! is_numeric($adminUserId)) {
+            return null;
+        }
+
+        $admin = User::query()->find((int) $adminUserId);
+
+        if (! $admin?->canAccessAdmin()) {
+            return null;
+        }
+
+        request()->attributes->set(RecordAuthActivity::AUTH_METHOD_ATTRIBUTE, 'impersonation');
+        Auth::login($admin);
+
+        return $admin;
+    }
+
+    public function isActive(): bool
+    {
+        return session()->has(self::SessionKey);
+    }
+
+    public function impersonator(): ?User
+    {
+        $adminUserId = session(self::SessionKey);
+
+        if (! is_numeric($adminUserId)) {
+            return null;
+        }
+
+        return User::query()->find((int) $adminUserId);
+    }
+}

app/Actions/Fortify/PasswordValidationRules.php

@@ -2,6 +2,7 @@
 
 namespace App\Actions\Fortify;
 
+use Illuminate\Contracts\Validation\Rule;
 use Illuminate\Validation\Rules\Password;
 
 trait PasswordValidationRules
@@ -9,7 +10,7 @@ trait PasswordValidationRules
     /**
      * Get the validation rules used to validate passwords.
      *
-     * @return array<int, \Illuminate\Contracts\Validation\Rule|array<mixed>|string>
+     * @return array<int, Rule|array<mixed>|string>
      */
     protected function passwordRules(): array
     {

app/Authorization/Permission.php

@@ -0,0 +1,141 @@
+<?php
+
+namespace App\Authorization;
+
+use App\Services\Admin\AdminSystemHealth;
+
+/**
+ * Zentraler Katalog der Spatie-Permissions. Einzige Quelle für die
+ * Permission-Namen und die Rollen-Zuordnung — genutzt vom
+ * RolesAndPermissionsSeeder und von der Betriebsüberwachung
+ * ({@see AdminSystemHealth}). Blade-/Route-Gates verwenden
+ * weiterhin die String-Literale (Laravel-idiomatisch), deren kanonische
+ * Definition aber hier liegt.
+ */
+final class Permission
+{
+    public const PressReleasesRead = 'press-releases:read';
+
+    public const PressReleasesWrite = 'press-releases:write';
+
+    public const PressReleasesPublish = 'press-releases:publish';
+
+    public const PressReleaseImagesWrite = 'press-release-images:write';
+
+    public const CompaniesRead = 'companies:read';
+
+    public const CompaniesWrite = 'companies:write';
+
+    public const CategoriesManage = 'categories:manage';
+
+    public const FooterCodesManage = 'footer-codes:manage';
+
+    public const BillingManage = 'billing:manage';
+
+    public const ComplianceManage = 'compliance:manage';
+
+    public const SettingsManage = 'settings:manage';
+
+    public const NewsletterSubscribe = 'newsletter:subscribe';
+
+    public const UsersManage = 'users:manage';
+
+    public const RolesManage = 'roles:manage';
+
+    public const ApiImmediatePublication = 'api:immediate-publication';
+
+    /**
+     * Alle existierenden Permissions.
+     *
+     * @return list<string>
+     */
+    public static function all(): array
+    {
+        return [
+            self::PressReleasesRead,
+            self::PressReleasesWrite,
+            self::PressReleasesPublish,
+            self::PressReleaseImagesWrite,
+            self::CompaniesRead,
+            self::CompaniesWrite,
+            self::CategoriesManage,
+            self::FooterCodesManage,
+            self::BillingManage,
+            self::ComplianceManage,
+            self::SettingsManage,
+            self::NewsletterSubscribe,
+            self::UsersManage,
+            self::RolesManage,
+            self::ApiImmediatePublication,
+        ];
+    }
+
+    /**
+     * Nur an `admin` vergebene Verwaltungsrechte (Befund H2). Basis für den
+     * Deployment-Check „Berechtigungen ausgerollt".
+     *
+     * @return list<string>
+     */
+    public static function adminOnly(): array
+    {
+        return [
+            self::CompaniesWrite,
+            self::CategoriesManage,
+            self::FooterCodesManage,
+            self::BillingManage,
+            self::ComplianceManage,
+            self::SettingsManage,
+            self::UsersManage,
+            self::RolesManage,
+        ];
+    }
+
+    /**
+     * Permissions der Rolle `editor` (Content-Rolle ohne destruktive/Verwaltung).
+     *
+     * @return list<string>
+     */
+    public static function editor(): array
+    {
+        return [
+            self::PressReleasesRead,
+            self::PressReleasesWrite,
+            self::PressReleasesPublish,
+            self::PressReleaseImagesWrite,
+            self::CompaniesRead,
+            self::NewsletterSubscribe,
+        ];
+    }
+
+    /**
+     * Permissions der Rolle `customer`.
+     *
+     * @return list<string>
+     */
+    public static function customer(): array
+    {
+        return [
+            self::PressReleasesRead,
+            self::PressReleasesWrite,
+            self::PressReleaseImagesWrite,
+            self::CompaniesRead,
+            self::NewsletterSubscribe,
+        ];
+    }
+
+    /**
+     * Permissions der Rolle `api-only`.
+     *
+     * @return list<string>
+     */
+    public static function apiOnly(): array
+    {
+        return [
+            self::PressReleasesRead,
+            self::PressReleasesWrite,
+            self::PressReleaseImagesWrite,
+            self::CompaniesRead,
+            self::NewsletterSubscribe,
+        ];
+    }
+}

app/Console/Commands/AnalyzeLegacyApiAccessLogs.php

@@ -0,0 +1,87 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Api\LegacyApiAccessLogAnalyzer;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+
+class AnalyzeLegacyApiAccessLogs extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'api:analyze-legacy-access-logs
+                            {paths* : Access-log files or glob patterns}
+                            {--top=20 : Number of top entries per section}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Analysiert Legacy-API-Zugriffe aus Webserver-Access-Logs.';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(LegacyApiAccessLogAnalyzer $analyzer): int
+    {
+        $paths = array_map('strval', (array) $this->argument('paths'));
+        $top = max(1, (int) $this->option('top'));
+        $report = $analyzer->analyze($paths, $top);
+
+        $this->info('Legacy-API-Access-Log-Auswertung');
+        $this->newLine();
+        $this->line("Dateien: {$report['summary']['files']}");
+        $this->line("Log-Zeilen: {$report['summary']['total_lines']}");
+        $this->line("Legacy-API-Requests: {$report['summary']['matched_requests']}");
+        $this->line("Requests mit api_key: {$report['summary']['legacy_key_requests']}");
+        $this->line("Eindeutige Client-IPs: {$report['summary']['unique_client_ips']}");
+        $this->line("Eindeutige API-Key-Fingerprints: {$report['summary']['unique_api_key_fingerprints']}");
+
+        if ($report['missing_paths'] !== []) {
+            $this->newLine();
+            $this->warn('Nicht lesbare Pfade:');
+            foreach ($report['missing_paths'] as $path) {
+                $this->line("  - {$path}");
+            }
+        }
+
+        $this->renderTopTable('Top Endpoints', $report['endpoints']);
+        $this->renderTopTable('Top Client-IPs', $report['client_ips']);
+        $this->renderTopTable('Statuscodes', $report['status_codes']);
+
+        if (! (bool) $this->option('no-report')) {
+            $path = 'migration/legacy-api-access-'.now()->format('Ymd-His').'.json';
+            Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->newLine();
+            $this->line("Report geschrieben: storage/app/private/{$path}");
+        }
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * @param  array<string, int>  $rows
+     */
+    private function renderTopTable(string $title, array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line($title);
+        $this->table(
+            ['Wert', 'Requests'],
+            collect($rows)
+                ->map(fn (int $count, string $value): array => [$value, $count])
+                ->values()
+                ->all()
+        );
+    }
+}

app/Console/Commands/ArchiveLegacyInvoices.php

@@ -0,0 +1,314 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\Portal;
+use App\Models\LegacyImportMap;
+use App\Models\LegacyInvoice;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\Storage;
+
+/**
+ * Archiviert alle Rechnungen aus den Legacy-Portalen in legacy_invoices (P6.5).
+ *
+ * Die Tabelle ist read-only und dient als Audit-Archiv.
+ * Rechnungen werden nicht in den neuen Rechnungskreis (invoices) übernommen.
+ *
+ * Verwendung:
+ *   php artisan legacy:archive-invoices --dry-run
+ *   php artisan legacy:archive-invoices --portal=presseecho
+ *   php artisan legacy:archive-invoices
+ */
+class ArchiveLegacyInvoices extends Command
+{
+    protected $signature = 'legacy:archive-invoices
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--dry-run : Nur zählen, nichts schreiben}
+                            {--force : Bereits archivierte Rechnungen aktualisieren}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    protected $description = 'Archiviert Legacy-Rechnungen in legacy_invoices (read-only Archiv).';
+
+    private const PORTAL_CONFIG = [
+        'presseecho' => [
+            'connection' => 'mysql_presseecho',
+            'portal_enum' => Portal::Presseecho,
+        ],
+        'businessportal24' => [
+            'connection' => 'mysql_businessportal',
+            'portal_enum' => Portal::Businessportal24,
+        ],
+    ];
+
+    private const CHUNK_SIZE = 200;
+
+    public function handle(): int
+    {
+        $portalOpt = $this->option('portal');
+        $isDryRun = (bool) $this->option('dry-run');
+        $isForce = (bool) $this->option('force');
+
+        $portals = $portalOpt === 'all'
+            ? array_keys(self::PORTAL_CONFIG)
+            : [$portalOpt];
+
+        if (array_diff($portals, array_keys(self::PORTAL_CONFIG)) !== []) {
+            $this->error("Unbekanntes Portal: {$portalOpt}");
+
+            return self::FAILURE;
+        }
+
+        if ($isDryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $totalImported = 0;
+        $totalSkipped = 0;
+        $totalErrors = 0;
+        $report = [
+            'generated_at' => now()->toIso8601String(),
+            'portal' => $portalOpt,
+            'dry_run' => $isDryRun,
+            'force' => $isForce,
+            'portals' => [],
+        ];
+        $start = microtime(true);
+
+        foreach ($portals as $portal) {
+            $config = self::PORTAL_CONFIG[$portal];
+            $portalReport = $this->archivePortal(
+                $portal,
+                $config['connection'],
+                $isDryRun,
+                $isForce,
+            );
+
+            $report['portals'][$portal] = $portalReport;
+            $imported = $portalReport['imported'];
+            $skipped = $portalReport['skipped'];
+            $errors = $portalReport['errors'];
+            $this->line("  [{$portal}] Archiviert: {$imported} | Übersprungen: {$skipped} | Fehler: {$errors}");
+            $this->line("  [{$portal}] Quelle: {$portalReport['source_count']} | ohne User-Mapping: {$portalReport['unmapped_user_count']} | PDF-Payload: {$portalReport['pdf_payload_count']}");
+            $totalImported += $imported;
+            $totalSkipped += $skipped;
+            $totalErrors += $errors;
+        }
+
+        $elapsed = round(microtime(true) - $start, 1);
+        $this->newLine();
+        $this->info("Gesamt: {$totalImported} archiviert | {$totalSkipped} übersprungen | {$totalErrors} Fehler | {$elapsed}s");
+
+        if (! (bool) $this->option('no-report')) {
+            $path = 'migration/legacy-invoices-'.now()->format('Ymd-His').'.json';
+            Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->line("Report geschrieben: storage/app/private/{$path}");
+        }
+
+        return $totalErrors > 0 ? self::FAILURE : self::SUCCESS;
+    }
+
+    private function safeDateOrNull(mixed $value): ?string
+    {
+        if (blank($value) || $value === '0000-00-00' || $value === '0000-00-00 00:00:00') {
+            return null;
+        }
+
+        return (string) $value;
+    }
+
+    private function archivePortal(
+        string $portal,
+        string $connection,
+        bool $isDryRun,
+        bool $isForce,
+    ): array {
+        $imported = 0;
+        $skipped = 0;
+        $errors = 0;
+        $unmappedUserCount = 0;
+        $pdfPayloadCount = 0;
+        $amountCents = 0;
+        $statusCounts = [];
+        $hasBillingAddressTable = Schema::connection($connection)->hasTable('invoice_billing_address');
+        $hasUserPaymentTable = Schema::connection($connection)->hasTable('user_payment');
+        $hasUserPaymentOptionTable = Schema::connection($connection)->hasTable('user_payment_option');
+        $hasPaymentOptionTable = Schema::connection($connection)->hasTable('payment_option');
+        $hasPaymentOptionTranslationTable = Schema::connection($connection)->hasTable('payment_option_translation');
+        $sourceCount = DB::connection($connection)->table('invoice')->count();
+
+        DB::connection($connection)
+            ->table('invoice')
+            ->orderBy('id')
+            ->chunk(self::CHUNK_SIZE, function ($rows) use (
+                $portal, $connection, $isDryRun, $isForce, $hasBillingAddressTable, $hasUserPaymentTable,
+                $hasUserPaymentOptionTable, $hasPaymentOptionTable, $hasPaymentOptionTranslationTable,
+                &$imported, &$skipped, &$errors, &$unmappedUserCount, &$pdfPayloadCount, &$amountCents, &$statusCounts,
+            ): void {
+                foreach ($rows as $row) {
+                    try {
+                        $status = (string) ($row->status ?? 'unknown');
+                        $rowAmountCents = (int) round((float) $row->amount * 100);
+                        $amountCents += $rowAmountCents;
+                        $statusCounts[$status] = ($statusCounts[$status] ?? 0) + 1;
+
+                        $existingInvoice = LegacyInvoice::query()
+                            ->where('legacy_portal', $portal)
+                            ->where('legacy_id', $row->id)
+                            ->first();
+
+                        if ($existingInvoice && ! $isForce) {
+                            $skipped++;
+
+                            continue;
+                        }
+
+                        if ($isDryRun) {
+                            $imported++;
+
+                            continue;
+                        }
+
+                        $userId = null;
+                        if ($row->user_id) {
+                            $userMap = LegacyImportMap::query()
+                                ->where('legacy_portal', $portal)
+                                ->where('legacy_table', 'sf_guard_user')
+                                ->where('legacy_id', $row->user_id)
+                                ->first();
+                            $userId = $userMap?->target_id;
+                        }
+
+                        if ($userId === null) {
+                            $unmappedUserCount++;
+                        }
+
+                        $pdfPayload = $this->pdfPayload(
+                            $connection,
+                            $row,
+                            $hasBillingAddressTable,
+                            $hasUserPaymentTable,
+                            $hasUserPaymentOptionTable,
+                            $hasPaymentOptionTable,
+                            $hasPaymentOptionTranslationTable,
+                        );
+                        $pdfPayloadCount++;
+
+                        $taxCents = 0;
+                        $totalCents = $rowAmountCents;
+
+                        $paidAt = $this->safeDateOrNull($row->pay_date);
+
+                        LegacyInvoice::query()->updateOrCreate(
+                            [
+                                'legacy_portal' => $portal,
+                                'legacy_id' => $row->id,
+                            ],
+                            [
+                                'user_id' => $userId,
+                                'legacy_user_id' => $row->user_id,
+                                'number' => (string) $row->number,
+                                'amount_cents' => $rowAmountCents,
+                                'tax_cents' => $taxCents,
+                                'total_cents' => $totalCents,
+                                'status' => $status,
+                                'invoice_date' => $this->safeDateOrNull($row->invoice_date),
+                                'due_date' => $this->safeDateOrNull($row->due_date),
+                                'paid_at' => $paidAt,
+                                'payment_method' => $row->payment_method ?: null,
+                                'pdf_path' => $existingInvoice?->pdf_path,
+                                'raw_snapshot' => (array) $row,
+                                'pdf_payload' => $pdfPayload,
+                                'imported_at' => now(),
+                            ]
+                        );
+
+                        $imported++;
+                    } catch (\Throwable $e) {
+                        $errors++;
+                        $this->warn("  ! Invoice {$row->id}: {$e->getMessage()}");
+                    }
+                }
+            });
+
+        ksort($statusCounts);
+
+        return [
+            'source_count' => $sourceCount,
+            'imported' => $imported,
+            'skipped' => $skipped,
+            'errors' => $errors,
+            'unmapped_user_count' => $unmappedUserCount,
+            'pdf_payload_count' => $pdfPayloadCount,
+            'amount_cents' => $amountCents,
+            'status_counts' => $statusCounts,
+        ];
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    private function pdfPayload(
+        string $connection,
+        object $invoice,
+        bool $hasBillingAddressTable,
+        bool $hasUserPaymentTable,
+        bool $hasUserPaymentOptionTable,
+        bool $hasPaymentOptionTable,
+        bool $hasPaymentOptionTranslationTable,
+    ): array {
+        $userPayment = $hasUserPaymentTable && $invoice->user_payment_id
+            ? $this->legacyRow($connection, 'user_payment', (int) $invoice->user_payment_id)
+            : null;
+
+        $userPaymentOption = $userPayment && $hasUserPaymentOptionTable
+            ? $this->legacyRow($connection, 'user_payment_option', (int) $userPayment['user_payment_option_id'])
+            : null;
+
+        $paymentOption = $userPaymentOption && $hasPaymentOptionTable
+            ? $this->legacyRow($connection, 'payment_option', (int) $userPaymentOption['payment_option_id'])
+            : null;
+
+        return [
+            'invoice' => (array) $invoice,
+            'billing_address' => $hasBillingAddressTable && $invoice->billing_address_id
+                ? $this->legacyRow($connection, 'invoice_billing_address', (int) $invoice->billing_address_id)
+                : null,
+            'user_payment' => $userPayment,
+            'user_payment_option' => $userPaymentOption,
+            'payment_option' => $paymentOption,
+            'payment_option_translation' => $paymentOption && $hasPaymentOptionTranslationTable
+                ? $this->paymentOptionTranslation($connection, (int) $paymentOption['id'])
+                : null,
+        ];
+    }
+
+    /**
+     * @return array<string, mixed>|null
+     */
+    private function paymentOptionTranslation(string $connection, int $paymentOptionId): ?array
+    {
+        $row = DB::connection($connection)
+            ->table('payment_option_translation')
+            ->where('id', $paymentOptionId)
+            ->whereIn('lang', ['de', 'de_DE', 'de_AT', 'de_CH', 'en'])
+            ->orderByRaw("CASE lang WHEN 'de' THEN 0 WHEN 'de_DE' THEN 1 WHEN 'de_AT' THEN 2 WHEN 'de_CH' THEN 3 ELSE 4 END")
+            ->first();
+
+        return $row ? (array) $row : null;
+    }
+
+    /**
+     * @return array<string, mixed>|null
+     */
+    private function legacyRow(string $connection, string $table, int $id): ?array
+    {
+        $row = DB::connection($connection)
+            ->table($table)
+            ->where('id', $id)
+            ->first();
+
+        return $row ? (array) $row : null;
+    }
+}

app/Console/Commands/BackfillPortalRole.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\User;
+use App\Services\Auth\UserRolePermissionSyncService;
+use Illuminate\Console\Command;
+
+/**
+ * Weist aktiven, komplett rollenlosen Nutzern eine Portal-Rolle zu.
+ *
+ * Hintergrund: Guest-/Auth-Redirects lenken einen eingeloggten Nutzer ohne
+ * admin/editor/customer-Rolle auf die Startseite (bootstrap/app.php →
+ * redirectUsersTo). Legacy-Importe oder ein fehlgeschlagener Rollen-Sync nach
+ * dem User-Insert können solche „hängenden" Konten erzeugen. Dieser Nachlauf
+ * heilt sie. api-only-Konten besitzen bereits eine Rolle und werden bewusst
+ * NICHT angefasst (kein Portal-Zugriff gewollt).
+ */
+class BackfillPortalRole extends Command
+{
+    protected $signature = 'users:backfill-portal-role
+                            {--role=customer : Zuzuweisende Rolle}
+                            {--dry-run : Nur zählen, nichts schreiben}';
+
+    protected $description = 'Weist aktiven, rollenlosen Nutzern eine Portal-Rolle (Standard: customer) zu.';
+
+    public function handle(UserRolePermissionSyncService $roleSync): int
+    {
+        $role = (string) $this->option('role');
+        $dryRun = (bool) $this->option('dry-run');
+
+        $ids = User::query()
+            ->where('is_active', true)
+            ->whereDoesntHave('roles')
+            ->pluck('id');
+
+        if ($ids->isEmpty()) {
+            $this->info('Keine aktiven rollenlosen Nutzer gefunden – nichts zu tun.');
+
+            return self::SUCCESS;
+        }
+
+        if ($dryRun) {
+            $this->warn("[DRY-RUN] {$ids->count()} aktive rollenlose Nutzer würden die Rolle '{$role}' erhalten.");
+
+            return self::SUCCESS;
+        }
+
+        $assigned = 0;
+
+        foreach ($ids->chunk(500) as $chunk) {
+            User::query()->whereIn('id', $chunk)->get()->each(function (User $user) use ($roleSync, $role, &$assigned): void {
+                $roleSync->assignRoleAndSyncPermissions($user, $role);
+                $assigned++;
+            });
+        }
+
+        $this->info("{$assigned} aktiven rollenlosen Nutzern die Rolle '{$role}' zugewiesen.");
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/FixLegacyTimestamps.php

@@ -0,0 +1,170 @@
+<?php
+
+namespace App\Console\Commands;
+
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+
+/**
+ * Korrigiert created_at / updated_at auf bereits importierten Datensätzen.
+ *
+ * Verwendet Cross-DB-JOINs (gleicher MySQL-Server), um die Legacy-Timestamps
+ * in einer einzigen SQL-Operation auf die neuen Tabellen zu übertragen.
+ * Viel schneller als ein erneuter --force Import.
+ *
+ * Verwendung:
+ *   php artisan legacy:fix-timestamps --dry-run   # nur zählen
+ *   php artisan legacy:fix-timestamps             # alle Entitäten, beide Portale
+ *   php artisan legacy:fix-timestamps --entity=companies --portal=presseecho
+ */
+class FixLegacyTimestamps extends Command
+{
+    protected $signature = 'legacy:fix-timestamps
+                            {--entity=all : Entität (users|companies|contacts|press-releases|all)}
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--dry-run : Nur zählen, nichts schreiben}';
+
+    protected $description = 'Korrigiert created_at/updated_at auf importierten Datensätzen aus den Legacy-DBs.';
+
+    /** Mapping: Portal → Legacy-Connection; der Schema-Name kommt aus deren Config (.env). */
+    private const PORTAL_CONNECTIONS = [
+        'presseecho' => 'mysql_presseecho',
+        'businessportal24' => 'mysql_businessportal',
+    ];
+
+    /** Mapping: neue Tabelle → (legacy_portal, legacy_db, legacy_table, legacy_created_col) */
+    private const ENTITY_CONFIG = [
+        'users' => [
+            'new_table' => 'users',
+            'legacy_table_name' => 'sf_guard_user',
+            'legacy_created' => 'created_at',
+            'legacy_updated' => 'updated_at',
+        ],
+        'companies' => [
+            'new_table' => 'companies',
+            'legacy_table_name' => 'company',
+            'legacy_created' => 'created_at',
+            'legacy_updated' => 'updated_at',
+        ],
+        'contacts' => [
+            'new_table' => 'contacts',
+            'legacy_table_name' => 'contact',
+            'legacy_created' => 'created_at',
+            'legacy_updated' => 'updated_at',
+        ],
+        'press-releases' => [
+            'new_table' => 'press_releases',
+            'legacy_table_name' => 'press_release',
+            'legacy_created' => 'created_at',
+            'legacy_updated' => 'updated_at',
+            // Veröffentlichte Meldungen: published_at = Legacy-created_at
+            // (Publikationsdatum, Sortier-/Cluster-Schlüssel im Frontend).
+            'derive_published_at' => true,
+        ],
+    ];
+
+    public function handle(): int
+    {
+        $entityOpt = $this->option('entity');
+        $portalOpt = $this->option('portal');
+        $isDryRun = (bool) $this->option('dry-run');
+
+        $entities = $entityOpt === 'all' ? array_keys(self::ENTITY_CONFIG) : [$entityOpt];
+        $portals = $portalOpt === 'all' ? array_keys(self::PORTAL_CONNECTIONS) : [$portalOpt];
+
+        if ($isDryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $totalUpdated = 0;
+        $start = microtime(true);
+
+        foreach ($entities as $entity) {
+            $config = self::ENTITY_CONFIG[$entity] ?? null;
+            if (! $config) {
+                $this->error("Unbekannte Entität: {$entity}");
+
+                continue;
+            }
+
+            foreach ($portals as $portal) {
+                $legacyDb = $this->legacySchema($portal);
+                if (! $legacyDb) {
+                    $this->error("Unbekanntes Portal oder fehlende Legacy-DB-Config: {$portal}");
+
+                    continue;
+                }
+
+                $updated = $this->fixEntity($config, $portal, $legacyDb, $isDryRun);
+                $totalUpdated += $updated;
+
+                $this->line("  [{$entity}] [{$portal}] → {$updated} Datensätze ".($isDryRun ? 'würden aktualisiert' : 'aktualisiert'));
+            }
+        }
+
+        $elapsed = round(microtime(true) - $start, 1);
+        $this->newLine();
+        $this->info("Gesamt: {$totalUpdated} Datensätze in {$elapsed}s.");
+
+        return self::SUCCESS;
+    }
+
+    private function legacySchema(string $portal): ?string
+    {
+        $connection = self::PORTAL_CONNECTIONS[$portal] ?? null;
+
+        if ($connection === null) {
+            return null;
+        }
+
+        $database = config("database.connections.{$connection}.database");
+
+        return is_string($database) && $database !== '' ? $database : null;
+    }
+
+    private function fixEntity(array $config, string $portal, string $legacyDb, bool $isDryRun): int
+    {
+        $newTable = $config['new_table'];
+        $legacyTable = $config['legacy_table_name'];
+        $legacyCreated = $config['legacy_created'];
+        $legacyUpdated = $config['legacy_updated'];
+        $derivePublishedAt = ! empty($config['derive_published_at']);
+
+        // Bei veröffentlichten Meldungen muss published_at dem Publikationsdatum
+        // (= Legacy-created_at) entsprechen; sonst sortiert/clustert das Frontend
+        // nach einem falschen Datum.
+        $publishedAtMismatch = $derivePublishedAt
+            ? " OR (n.status = 'published' AND (n.published_at IS NULL OR n.published_at != lc.{$legacyCreated}))"
+            : '';
+        $publishedAtSet = $derivePublishedAt
+            ? ", n.published_at = CASE WHEN n.status = 'published' THEN lc.{$legacyCreated} ELSE n.published_at END"
+            : '';
+
+        if ($isDryRun) {
+            // Nur zählen: wie viele Datensätze hätten falsche Timestamps?
+            return (int) DB::selectOne("
+                SELECT COUNT(*) as cnt
+                FROM {$newTable} n
+                JOIN legacy_import_map m
+                    ON m.target_id = n.id
+                    AND m.target_table = '{$newTable}'
+                    AND m.legacy_portal = '{$portal}'
+                JOIN `{$legacyDb}`.`{$legacyTable}` lc ON lc.id = m.legacy_id
+                WHERE n.created_at != lc.{$legacyCreated}
+                   OR n.updated_at != lc.{$legacyUpdated}{$publishedAtMismatch}
+            ")->cnt ?? 0;
+        }
+
+        return DB::affectingStatement("
+            UPDATE {$newTable} n
+            JOIN legacy_import_map m
+                ON m.target_id = n.id
+                AND m.target_table = '{$newTable}'
+                AND m.legacy_portal = '{$portal}'
+            JOIN `{$legacyDb}`.`{$legacyTable}` lc ON lc.id = m.legacy_id
+            SET
+                n.created_at = lc.{$legacyCreated},
+                n.updated_at = lc.{$legacyUpdated}{$publishedAtSet}
+        ");
+    }
+}

app/Console/Commands/GenerateDomainFavicons.php

@@ -30,7 +30,7 @@ class GenerateDomainFavicons extends Command
         $faviconDir = public_path('img/favicons');
 
         // Erstelle das Favicon-Verzeichnis, wenn es nicht existiert
-        if (!File::exists($faviconDir)) {
+        if (! File::exists($faviconDir)) {
             File::makeDirectory($faviconDir, 0755, true);
             $this->info("Verzeichnis {$faviconDir} erstellt.");
         }
@@ -53,8 +53,9 @@ class GenerateDomainFavicons extends Command
             $faviconPath = "{$faviconDir}/{$theme}-favicon.ico";
 
             // Wenn die Datei bereits existiert, frage, ob sie überschrieben werden soll
-            if (File::exists($faviconPath) && !$this->confirm("Favicon für '{$theme}' existiert bereits. Überschreiben?")) {
+            if (File::exists($faviconPath) && ! $this->confirm("Favicon für '{$theme}' existiert bereits. Überschreiben?")) {
                 $this->info("Favicon für '{$theme}' übersprungen.");
+
                 continue;
             }
 

app/Console/Commands/GenerateManualInvoices.php

@@ -0,0 +1,70 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Billing\ManualInvoiceService;
+use Illuminate\Console\Command;
+
+/**
+ * Fälligkeitsprüfung des manuellen Rechnungskreises (MAN-).
+ *
+ * Läuft täglich über den Scheduler und stellt für aktive Legacy-
+ * Zahlungsvereinbarungen (ohne Stripe-Subscription) die fälligen
+ * Rechnungen aus — wie im Legacy-System. Nicht abrechenbare
+ * Vereinbarungen (fehlende Rechnungsadresse o. ä.) werden geloggt und
+ * beim nächsten Lauf erneut geprüft.
+ */
+class GenerateManualInvoices extends Command
+{
+    protected $signature = 'billing:generate-manual-invoices
+                            {--dry-run : Nur anzeigen, was fällig ist}
+                            {--limit=50 : Maximale Anzahl Vereinbarungen pro Lauf}';
+
+    protected $description = 'Stellt fällige Rechnungen des manuellen Legacy-Rechnungskreises (MAN-) aus';
+
+    public function handle(ManualInvoiceService $service): int
+    {
+        $dryRun = (bool) $this->option('dry-run');
+        $limit = max(1, (int) $this->option('limit'));
+
+        $due = $service->duePaymentOptions(limit: $limit);
+
+        if ($due->isEmpty()) {
+            $this->info('Keine fälligen Zahlungsvereinbarungen gefunden.');
+
+            return self::SUCCESS;
+        }
+
+        $created = 0;
+        $skipped = 0;
+
+        foreach ($due as $option) {
+            if ($dryRun) {
+                $this->line(sprintf(
+                    '[dry-run] Fällig: Vereinbarung #%d (User #%s, Periode bis %s)',
+                    $option->id,
+                    $option->user_id,
+                    $option->current_period_end->toDateString(),
+                ));
+
+                continue;
+            }
+
+            $invoice = $service->invoiceFor($option);
+
+            if ($invoice) {
+                $created++;
+                $this->line(sprintf('Rechnung %s für Vereinbarung #%d erstellt.', $invoice->number, $option->id));
+            } else {
+                $skipped++;
+                $this->warn(sprintf('Vereinbarung #%d übersprungen (siehe Log).', $option->id));
+            }
+        }
+
+        if (! $dryRun) {
+            $this->info(sprintf('%d Rechnung(en) erstellt, %d übersprungen.', $created, $skipped));
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/GrandfatherLegacySubscriptions.php

@@ -0,0 +1,292 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\UserPaymentOptionStatus;
+use App\Models\LegacyInvoice;
+use App\Models\PaymentOption;
+use App\Models\UserPaymentOption;
+use Illuminate\Console\Command;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Storage;
+
+/**
+ * Leitet die noch aktiven, jährlich wiederkehrenden Legacy-Zahlungs-
+ * vereinbarungen aus dem Rechnungsarchiv ab und migriert sie als
+ * `grandfathered` in `user_payment_options` (D-13, Kriterien 12.06.2026).
+ *
+ * Quelle ist ausschließlich das read-only Archiv `legacy_invoices` (D-12):
+ * Pro (Portal, Legacy-Vereinbarung) zählt die jüngste Rechnung. Aktiv ist,
+ * was dort `payment_option.type = recurring`, `user_payment_option.status
+ * = active` und eine nicht zu weit zurückliegende `next_due_date` trägt.
+ * Alle anderen Rechnungen bleiben unangetastet im Archiv.
+ *
+ * Die migrierte Vereinbarung trägt `current_period_end = next_due_date` —
+ * damit stellt `billing:generate-manual-invoices` (MAN-Kreis) die nächste
+ * Rechnung zum gewohnten Rhythmus mit den Beträgen der letzten
+ * Legacy-Rechnung aus.
+ *
+ * Wiederholbar (D-18): Re-Runs aktualisieren bestehende Einträge anhand
+ * der Legacy-IDs in `legacy_conditions`, statt Duplikate anzulegen —
+ * die Kern-Migration läuft kurz vor dem Relaunch erneut.
+ *
+ * Verwendung:
+ *   php artisan legacy:grandfather-subscriptions --dry-run
+ *   php artisan legacy:grandfather-subscriptions --as-of=2026-06-12
+ *   php artisan legacy:grandfather-subscriptions
+ */
+class GrandfatherLegacySubscriptions extends Command
+{
+    protected $signature = 'legacy:grandfather-subscriptions
+                            {--dry-run : Nur anzeigen, nichts schreiben}
+                            {--as-of= : Stichtag für die Aktiv-Prüfung (Default: heute)}
+                            {--grace-months=12 : Wie lange eine überfällige next_due_date noch als aktiv gilt}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    protected $description = 'Migriert aktive wiederkehrende Legacy-Zahlungen aus dem Rechnungsarchiv nach user_payment_options (grandfathered).';
+
+    private const CHUNK_SIZE = 200;
+
+    public function handle(): int
+    {
+        $isDryRun = (bool) $this->option('dry-run');
+        $asOf = $this->option('as-of') ? Carbon::parse($this->option('as-of'))->startOfDay() : today();
+        $graceMonths = max(0, (int) $this->option('grace-months'));
+        $staleBefore = $asOf->copy()->subMonths($graceMonths);
+
+        if ($isDryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $candidates = $this->collectLatestRecurringAgreements();
+
+        $report = [
+            'generated_at' => now()->toIso8601String(),
+            'as_of' => $asOf->toDateString(),
+            'grace_months' => $graceMonths,
+            'dry_run' => $isDryRun,
+            'created' => [],
+            'updated' => [],
+            'stale_skipped' => [],
+            'immediately_due' => [],
+        ];
+
+        foreach ($candidates as $candidate) {
+            $nextDue = $candidate['next_due_date'];
+
+            if ($nextDue->lessThan($staleBefore)) {
+                $report['stale_skipped'][] = $this->describe($candidate);
+
+                continue;
+            }
+
+            if ($nextDue->lessThanOrEqualTo($asOf)) {
+                $report['immediately_due'][] = $this->describe($candidate);
+            }
+
+            if ($isDryRun) {
+                $this->line(sprintf('[dry-run] %s', $this->describe($candidate)));
+
+                continue;
+            }
+
+            $paymentOption = $this->resolveCatalogOption($candidate);
+            $existing = $this->findExisting($candidate);
+
+            $attributes = [
+                'user_id' => $candidate['user_id'],
+                'payment_option_id' => $paymentOption->id,
+                'status' => UserPaymentOptionStatus::Grandfathered->value,
+                'grandfathered_until' => $candidate['valid_until_date']?->toDateString(),
+                'current_period_start' => $candidate['period_start']->toDateString(),
+                'current_period_end' => $nextDue->toDateString(),
+                'stripe_subscription_id' => null,
+                'legacy_conditions' => $candidate['legacy_conditions'],
+            ];
+
+            if ($existing) {
+                $existing->update($attributes);
+                $report['updated'][] = $this->describe($candidate);
+            } else {
+                UserPaymentOption::query()->create($attributes);
+                $report['created'][] = $this->describe($candidate);
+            }
+        }
+
+        $this->table(
+            ['Ergebnis', 'Anzahl'],
+            [
+                ['Kandidaten (aktiv, recurring)', count($candidates)],
+                ['Neu angelegt', count($report['created'])],
+                ['Aktualisiert (Re-Run)', count($report['updated'])],
+                ['Übersprungen (stale)', count($report['stale_skipped'])],
+                ['Davon sofort fällig', count($report['immediately_due'])],
+            ],
+        );
+
+        foreach ($report['immediately_due'] as $line) {
+            $this->warn('Sofort fällig (MAN-Lauf rechnet beim nächsten Lauf ab): '.$line);
+        }
+
+        if (! $this->option('no-report')) {
+            $path = sprintf('migration/grandfather-subscriptions-%s.json', now()->format('Ymd-His'));
+            Storage::put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->info("Report: storage/app/{$path}");
+        }
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * Jüngste Archiv-Rechnung pro (Portal, Legacy-Vereinbarung) mit
+     * aktiver wiederkehrender Zahlungsoption.
+     *
+     * @return array<int, array<string, mixed>>
+     */
+    private function collectLatestRecurringAgreements(): array
+    {
+        $latest = [];
+
+        LegacyInvoice::query()
+            ->whereNotNull('user_id')
+            ->whereNotNull('pdf_payload')
+            ->orderBy('id')
+            ->chunk(self::CHUNK_SIZE, function ($invoices) use (&$latest): void {
+                foreach ($invoices as $invoice) {
+                    $payload = $invoice->pdf_payload;
+                    $upo = $payload['user_payment_option'] ?? null;
+                    $option = $payload['payment_option'] ?? null;
+
+                    if (! $upo || ! $option) {
+                        continue;
+                    }
+
+                    if (($option['type'] ?? null) !== 'recurring' || ($upo['status'] ?? null) !== 'active') {
+                        continue;
+                    }
+
+                    $key = $invoice->legacy_portal->value.'#'.$upo['id'];
+                    $current = $latest[$key] ?? null;
+
+                    if ($current && $current->invoice_date->greaterThanOrEqualTo($invoice->invoice_date)) {
+                        continue;
+                    }
+
+                    $latest[$key] = $invoice;
+                }
+            });
+
+        return array_values(array_map(fn (LegacyInvoice $invoice): array => $this->toCandidate($invoice), $latest));
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    private function toCandidate(LegacyInvoice $invoice): array
+    {
+        $payload = $invoice->pdf_payload;
+        $snapshot = $invoice->raw_snapshot ?? [];
+        $upo = $payload['user_payment_option'];
+        $option = $payload['payment_option'];
+
+        $nextDue = isset($upo['next_due_date'])
+            ? Carbon::parse($upo['next_due_date'])->startOfDay()
+            : Carbon::parse($snapshot['service_period_end_date'] ?? $invoice->invoice_date)->startOfDay();
+
+        $periodStart = isset($snapshot['service_period_begin_date'])
+            ? Carbon::parse($snapshot['service_period_begin_date'])->startOfDay()
+            : $nextDue->copy()->subYear();
+
+        return [
+            'user_id' => $invoice->user_id,
+            'legacy_portal' => $invoice->legacy_portal->value,
+            'legacy_upo_id' => (int) $upo['id'],
+            'article_number' => (string) ($option['article_number'] ?? 'UNBEKANNT'),
+            'next_due_date' => $nextDue,
+            'period_start' => $periodStart,
+            'valid_until_date' => isset($upo['valid_until_date']) && $upo['valid_until_date']
+                ? Carbon::parse($upo['valid_until_date'])->startOfDay()
+                : null,
+            'legacy_conditions' => [
+                'legacy_portal' => $invoice->legacy_portal->value,
+                'legacy_user_payment_option_id' => (int) $upo['id'],
+                'legacy_payment_option_id' => (int) ($option['id'] ?? 0),
+                'article_number' => $option['article_number'] ?? null,
+                'name' => $payload['payment_option_translation']['name'] ?? null,
+                'interval' => 'yearly',
+                'net_cents' => $this->deriveNetCents($invoice),
+                'last_total_cents' => $invoice->total_cents,
+                'last_is_netto' => (bool) ($snapshot['is_netto'] ?? false),
+                'source_invoice_number' => $invoice->number,
+                'source_invoice_date' => $invoice->invoice_date->toDateString(),
+            ],
+        ];
+    }
+
+    /**
+     * Netto-Vertragsbasis aus der letzten Legacy-Rechnung. Legacy fakturierte
+     * brutto (Steuer inkludiert, z. B. 199,00 €); steuerbefreite Kunden
+     * erhielten den Netto-Ausweis (`is_netto`, z. B. 167,23 €). Die neue
+     * Rechnungsstellung arbeitet immer auf Netto-Basis — die Steuer wird
+     * pro Rechnung über den VatResolver bestimmt.
+     */
+    private function deriveNetCents(LegacyInvoice $invoice): int
+    {
+        $isNetto = (bool) (($invoice->raw_snapshot ?? [])['is_netto'] ?? false);
+
+        if ($isNetto) {
+            return $invoice->total_cents;
+        }
+
+        $vatRate = (float) config('billing.vat_rate', 0.19);
+
+        return (int) round($invoice->total_cents / (1 + $vatRate));
+    }
+
+    /**
+     * Versteckter Katalog-Eintrag pro (Portal, Legacy-Artikel) — die
+     * verbindlichen Beträge pro Vereinbarung liegen in legacy_conditions.
+     */
+    private function resolveCatalogOption(array $candidate): PaymentOption
+    {
+        $portalShort = $candidate['legacy_portal'] === 'presseecho' ? 'PE' : 'BP';
+        $articleNumber = sprintf('LEGACY-%s-%s', $portalShort, $candidate['article_number']);
+
+        return PaymentOption::query()->firstOrCreate(
+            ['article_number' => $articleNumber],
+            [
+                'type' => 'recurring',
+                // Katalogpreise sind netto (Entscheidung 12.06.2026).
+                'price_cents' => $candidate['legacy_conditions']['net_cents'],
+                'currency' => config('billing.default_currency'),
+                'interval' => 'yearly',
+                'is_hidden' => true,
+            ],
+        );
+    }
+
+    private function findExisting(array $candidate): ?UserPaymentOption
+    {
+        return UserPaymentOption::query()
+            ->where('user_id', $candidate['user_id'])
+            ->get()
+            ->first(function (UserPaymentOption $option) use ($candidate): bool {
+                $conditions = $option->legacy_conditions ?? [];
+
+                return ($conditions['legacy_portal'] ?? null) === $candidate['legacy_portal']
+                    && (int) ($conditions['legacy_user_payment_option_id'] ?? 0) === $candidate['legacy_upo_id'];
+            });
+    }
+
+    private function describe(array $candidate): string
+    {
+        return sprintf(
+            'User #%d · %s · Legacy-UPO #%d · fällig %s · netto %s €',
+            $candidate['user_id'],
+            $candidate['legacy_portal'],
+            $candidate['legacy_upo_id'],
+            $candidate['next_due_date']->toDateString(),
+            number_format($candidate['legacy_conditions']['net_cents'] / 100, 2, ',', '.'),
+        );
+    }
+}

app/Console/Commands/ImportLegacyApiKeys.php

@@ -0,0 +1,82 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Api\LegacyApiKeyImporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+
+/**
+ * Importiert die Legacy-api_keys der Altportale als Sanctum-Tokens
+ * (Übernahme bestehender API-Integrationen, 06.07.2026). Quelle sind die
+ * read-only Legacy-Verbindungen; berechtigt ist, wer auch selbst ein Token
+ * erstellen dürfte (aktiver Zahlungsstatus/Bestandsschutz). Wiederholbar:
+ * bereits importierte Schlüssel werden übersprungen.
+ *
+ * Verwendung:
+ *   php artisan legacy:import-api-keys --dry-run
+ *   php artisan legacy:import-api-keys --portal=businessportal24
+ */
+class ImportLegacyApiKeys extends Command
+{
+    protected $signature = 'legacy:import-api-keys
+                            {--portal=all : presseecho | businessportal24 | all}
+                            {--dry-run : Nur anzeigen, nichts schreiben}';
+
+    protected $description = 'Übernimmt die api_keys der Legacy-Portale als Sanctum-Tokens (bestehende Integrationen bleiben gültig).';
+
+    private const CONNECTIONS = [
+        'presseecho' => 'mysql_presseecho',
+        'businessportal24' => 'mysql_businessportal',
+    ];
+
+    public function handle(LegacyApiKeyImporter $importer): int
+    {
+        $portalOption = (string) $this->option('portal');
+        $dryRun = (bool) $this->option('dry-run');
+
+        $portals = $portalOption === 'all' ? array_keys(self::CONNECTIONS) : [$portalOption];
+
+        if (array_diff($portals, array_keys(self::CONNECTIONS)) !== []) {
+            $this->error('Ungültiges Portal. Erlaubt: presseecho, businessportal24, all.');
+
+            return self::FAILURE;
+        }
+
+        if ($dryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        foreach ($portals as $portal) {
+            $rows = DB::connection(self::CONNECTIONS[$portal])
+                ->table('sf_guard_user_profile')
+                ->whereNotNull('api_key')
+                ->where('api_key', '!=', '')
+                ->get(['user_id', 'api_key'])
+                ->map(fn (object $row): array => [
+                    'legacy_id' => (int) $row->user_id,
+                    'api_key' => (string) $row->api_key,
+                ]);
+
+            $result = $importer->import($portal, $rows, $dryRun);
+
+            $this->table(
+                ['Portal', 'Keys in Legacy-DB', 'Importiert', 'Schon vorhanden', 'Nicht berechtigt', 'Kein User-Mapping'],
+                [[
+                    $portal,
+                    $rows->count(),
+                    $result['imported'],
+                    $result['already_present'],
+                    $result['ineligible'],
+                    $result['unknown_user'],
+                ]],
+            );
+
+            foreach ($result['ineligible_users'] as $email) {
+                $this->warn("Nicht berechtigt (kein aktiver Zahlungsstatus): {$email}");
+            }
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/ImportLegacyBillingAddresses.php

@@ -0,0 +1,78 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Billing\LegacyBillingAddressImporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+
+/**
+ * Übernimmt die Rechnungsadressen der Bestandskunden aus dem Rechnungsarchiv
+ * (Befund 06.07.2026: ohne Adresse überspringt der MAN-Rechnungslauf die
+ * Vereinbarung und der Bestandsschutz läuft am Periodenende aus). Läuft
+ * NACH legacy:grandfather-subscriptions; die Legacy-Verbindungen werden nur
+ * für die Länderauflösung (country_id → Name) gebraucht. Wiederholbar:
+ * bestehende Adressen werden nie überschrieben.
+ *
+ * Verwendung:
+ *   php artisan legacy:import-billing-addresses --dry-run
+ *   php artisan legacy:import-billing-addresses
+ */
+class ImportLegacyBillingAddresses extends Command
+{
+    protected $signature = 'legacy:import-billing-addresses
+                            {--dry-run : Nur anzeigen, nichts schreiben}';
+
+    protected $description = 'Übernimmt Rechnungsadressen der grandfathered Bestandskunden aus dem Legacy-Rechnungsarchiv.';
+
+    private const CONNECTIONS = [
+        'presseecho' => 'mysql_presseecho',
+        'businessportal24' => 'mysql_businessportal',
+    ];
+
+    public function handle(LegacyBillingAddressImporter $importer): int
+    {
+        $dryRun = (bool) $this->option('dry-run');
+
+        if ($dryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $countryNamesByPortal = [];
+
+        foreach (self::CONNECTIONS as $portal => $connection) {
+            $countryNamesByPortal[$portal] = DB::connection($connection)
+                ->table('country')
+                ->pluck('name', 'id')
+                ->map(fn ($name): string => (string) $name)
+                ->all();
+        }
+
+        $report = $importer->import($countryNamesByPortal, $dryRun);
+
+        $this->table(
+            ['Importiert', 'Adresse vorhanden', 'Nicht parsebar', 'Land unbekannt', 'Quell-Rechnung fehlt'],
+            [[
+                $report['imported'],
+                $report['skipped_existing'],
+                count($report['unparseable']),
+                count($report['unknown_country']),
+                count($report['missing_invoice']),
+            ]],
+        );
+
+        foreach ($report['unparseable'] as $line) {
+            $this->warn("Manuell nachpflegen (Adresse nicht parsebar): {$line}");
+        }
+
+        foreach ($report['unknown_country'] as $line) {
+            $this->warn("Manuell nachpflegen (Land nicht zuordenbar): {$line}");
+        }
+
+        foreach ($report['missing_invoice'] as $email) {
+            $this->warn("Manuell prüfen (Quell-Rechnung nicht im Archiv): {$email}");
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/ImportLegacyData.php

@@ -0,0 +1,177 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Auth\UserRolePermissionSyncService;
+use App\Services\Import\CategoryImporter;
+use App\Services\Import\CompanyImporter;
+use App\Services\Import\ContactImporter;
+use App\Services\Import\ImportContext;
+use App\Services\Import\ImportResult;
+use App\Services\Import\PressReleaseImporter;
+use App\Services\Import\UserAssociationLinker;
+use App\Services\Import\UserImporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Carbon;
+
+/**
+ * Legacy-Import-Master-Command (Phase 6 – Datenmigration).
+ *
+ * Verwendung:
+ *   php artisan legacy:import --source=presseecho --dry-run
+ *   php artisan legacy:import --source=businessportal24 --step=users
+ *   php artisan legacy:import --source=all --step=categories
+ *   php artisan legacy:import --source=all --step=link-associations  ← NEU
+ *   php artisan legacy:import --source=presseecho --force
+ *   php artisan legacy:import --source=presseecho --since=today --force  ← Delta: nur heute Angelegtes/Geändertes
+ *
+ * Schritte (--step):
+ *   categories        – Kategorien + Translations (einmalig, beide Portale identisch)
+ *   users             – sf_guard_user + sf_guard_user_profile + Rollen
+ *   companies         – company + company_user + responsible_company_user
+ *   contacts          – contact
+ *   press-releases    – press_release + press_release_image + press_release_contact
+ *   link-associations – User↔Kontakt direkt verknüpfen (via Firma-Zugehörigkeit)
+ *   all               – alle Schritte in korrekter Reihenfolge (Standard)
+ */
+class ImportLegacyData extends Command
+{
+    protected $signature = 'legacy:import
+                            {--source=all : Portal (presseecho|businessportal24|all)}
+                            {--step=all : Schritt (categories|users|companies|contacts|press-releases|link-associations|all)}
+                            {--dry-run : Nichts schreiben, nur zählen}
+                            {--force : Bereits importierte Datensätze erneut verarbeiten}
+                            {--since= : Nur Legacy-Zeilen mit created_at/updated_at ab diesem Zeitpunkt (z. B. "2026-07-20", "today"); für Updates mit --force kombinieren}
+                            {--chunk-size=500 : Batch-Größe (Debugging)}';
+
+    protected $description = 'Legacy-Daten aus Presseecho / Businessportal24 in die neue DB importieren.';
+
+    private const STEPS = [
+        'categories',
+        'users',
+        'companies',
+        'contacts',
+        'press-releases',
+        'link-associations',
+    ];
+
+    private const PORTALS = ['presseecho', 'businessportal24'];
+
+    public function handle(UserRolePermissionSyncService $roleSync): int
+    {
+        $source = $this->option('source');
+        $step = $this->option('step');
+        $isDryRun = (bool) $this->option('dry-run');
+        $isForce = (bool) $this->option('force');
+
+        $since = null;
+
+        if (filled($this->option('since'))) {
+            try {
+                $since = Carbon::parse((string) $this->option('since'), config('app.timezone'));
+            } catch (\Throwable) {
+                $this->error('Ungültiger --since-Wert: '.$this->option('since'));
+
+                return self::FAILURE;
+            }
+        }
+
+        $portals = $source === 'all' ? self::PORTALS : [$source];
+        $steps = $step === 'all' ? self::STEPS : [$step];
+
+        if ($since) {
+            $this->info('Delta-Modus: nur Legacy-Zeilen mit created_at/updated_at ab '.$since->format('d.m.Y H:i:s').'.');
+
+            if (! $isForce) {
+                $this->warn('Hinweis: ohne --force werden im Zeitfenster GEÄNDERTE, bereits importierte Datensätze übersprungen — nur Neue kommen dazu.');
+            }
+        }
+
+        if (! $isDryRun && ! $this->option('force')) {
+            $this->warn('WICHTIG: Dieser Command schreibt Daten in die Produktions-DB.');
+            $this->line('  Portale: '.implode(', ', $portals));
+            $this->line('  Schritte: '.implode(', ', $steps));
+            $this->newLine();
+
+            if (! $this->confirm('Import starten?')) {
+                $this->info('Abgebrochen.');
+
+                return self::SUCCESS;
+            }
+        }
+
+        if ($isDryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $totalStart = microtime(true);
+
+        foreach ($steps as $currentStep) {
+            // link-associations arbeitet auf der neuen DB → einmalig, portal-unabhängig
+            if ($currentStep === 'link-associations') {
+                $ctx = new ImportContext('all', $isDryRun, $isForce, $since);
+                $this->info('▶ Schritt [link-associations] (beide Portale, neue DB)');
+                $start = microtime(true);
+                $result = app(UserAssociationLinker::class)->run($ctx);
+                $elapsed = round(microtime(true) - $start, 1);
+                $this->line("  ✓ {$result->summary()} ({$elapsed}s)");
+
+                continue;
+            }
+
+            // Kategorien sind portal-übergreifend → nur einmal
+            $stepPortals = ($currentStep === 'categories') ? [$portals[0]] : $portals;
+
+            foreach ($stepPortals as $portal) {
+                $ctx = new ImportContext($portal, $isDryRun, $isForce, $since);
+
+                $this->info("▶ Schritt [{$currentStep}] Portal [{$portal}]");
+                $start = microtime(true);
+
+                $result = $this->runStep($currentStep, $ctx, $roleSync);
+
+                $elapsed = round(microtime(true) - $start, 1);
+                $this->line("  ✓ {$result->summary()} ({$elapsed}s)");
+
+                foreach (array_slice($result->errors(), 0, 10) as $err) {
+                    $this->warn("  ! {$err}");
+                }
+
+                if (count($result->errors()) > 10) {
+                    $this->warn('  ! ... und '.(count($result->errors()) - 10).' weitere Fehler.');
+                }
+            }
+        }
+
+        // Selbstheilung: Ein User-Insert (updateOrCreate) und die anschließende
+        // Rollen-Zuweisung sind nicht atomar – schlägt der Rollen-Sync nach dem
+        // Insert fehl, bliebe ein aktives, rollenloses Konto zurück (hängt beim
+        // Login auf der Startseite). Nach einem User-Import daher absichern.
+        if (! $isDryRun && in_array('users', $steps, true)) {
+            $this->newLine();
+            $this->info('▶ Nachlauf: aktive rollenlose Nutzer absichern');
+            $this->call('users:backfill-portal-role');
+        }
+
+        $total = round(microtime(true) - $totalStart, 1);
+        $this->newLine();
+        $this->info("Import abgeschlossen in {$total}s.");
+
+        return self::SUCCESS;
+    }
+
+    private function runStep(
+        string $step,
+        ImportContext $ctx,
+        UserRolePermissionSyncService $roleSync,
+    ): ImportResult {
+        return match ($step) {
+            'categories' => app(CategoryImporter::class)->run($ctx),
+            'users' => app(UserImporter::class, ['roleSync' => $roleSync])->run($ctx),
+            'companies' => app(CompanyImporter::class)->run($ctx),
+            'contacts' => app(ContactImporter::class)->run($ctx),
+            'press-releases' => app(PressReleaseImporter::class)->run($ctx),
+            default => throw new \InvalidArgumentException("Unbekannter Schritt: {$step}"),
+        };
+    }
+}

app/Console/Commands/MigrateLegacyAgencyNames.php

@@ -0,0 +1,131 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\CompanyType;
+use App\Models\Company;
+use App\Models\User;
+use App\Scopes\PortalScope;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+
+/**
+ * Übernimmt die Namen der Legacy-Agentur-Firmen (companies.type = agency)
+ * in das Profilfeld users.agency_name des jeweiligen Owners — Teil des
+ * Umbaus Agentur-Attribution → User-Profil (dev/agentur-attribution/
+ * entwicklungsplan.md, A2). Läuft im Go-Live NACH dem Firmen-/User-Import
+ * und VOR companies:retire-agency-type. Wiederholbar: bereits gesetzte
+ * agency_name-Werte werden nie überschrieben.
+ *
+ * Verwendung:
+ *   php artisan legacy:migrate-agency-names --dry-run
+ *   php artisan legacy:migrate-agency-names
+ */
+class MigrateLegacyAgencyNames extends Command
+{
+    protected $signature = 'legacy:migrate-agency-names
+                            {--dry-run : Nur anzeigen und Report schreiben, keine User ändern}';
+
+    protected $description = 'Übernimmt Namen der Legacy-Agentur-Firmen in das Profilfeld users.agency_name.';
+
+    public function handle(): int
+    {
+        $dryRun = (bool) $this->option('dry-run');
+
+        if ($dryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        // Bewusst ohne is_active-Filter: die Attributions-Zeile hat auch
+        // inaktive Agentur-Firmen angezeigt; dieses Verhalten bleibt erhalten.
+        $agencies = Company::withoutGlobalScope(PortalScope::class)
+            ->where('type', CompanyType::Agency)
+            ->get(['id', 'portal', 'owner_user_id', 'name', 'is_active', 'updated_at']);
+
+        $report = [
+            'generated_at' => now()->toIso8601String(),
+            'dry_run' => $dryRun,
+            'summary' => [],
+            'multiple_names' => [],
+            'skipped_existing' => [],
+            'ownerless' => [],
+            'missing_owner' => [],
+        ];
+
+        foreach ($agencies->whereNull('owner_user_id') as $orphan) {
+            $report['ownerless'][] = [
+                'company_id' => $orphan->id,
+                'portal' => $orphan->portal?->value,
+                'name' => $orphan->name,
+            ];
+        }
+
+        $byOwner = $agencies->whereNotNull('owner_user_id')->groupBy('owner_user_id');
+        $users = User::withTrashed()->whereIn('id', $byOwner->keys())->get()->keyBy('id');
+
+        $migrated = 0;
+
+        foreach ($byOwner as $userId => $companies) {
+            $user = $users->get($userId);
+
+            if ($user === null) {
+                $report['missing_owner'][] = [
+                    'user_id' => $userId,
+                    'company_ids' => $companies->pluck('id')->all(),
+                ];
+
+                continue;
+            }
+
+            /** @var Company $winner Zuletzt aktualisierter Datensatz gewinnt (Regel Mehrfach-Fälle). */
+            $winner = $companies->sortByDesc('updated_at')->first();
+            $variants = $companies->pluck('name')->unique()->values();
+
+            if ($variants->count() > 1) {
+                $report['multiple_names'][] = [
+                    'user_id' => $user->id,
+                    'email' => $user->email,
+                    'chosen' => $winner->name,
+                    'variants' => $variants->all(),
+                ];
+            }
+
+            if (filled($user->agency_name)) {
+                $report['skipped_existing'][] = [
+                    'user_id' => $user->id,
+                    'email' => $user->email,
+                    'existing' => $user->agency_name,
+                    'candidate' => $winner->name,
+                ];
+
+                continue;
+            }
+
+            if (! $dryRun) {
+                $user->update(['agency_name' => $winner->name]);
+            }
+
+            $migrated++;
+        }
+
+        $report['summary'] = [
+            'agency_companies' => $agencies->count(),
+            'users_migrated' => $migrated,
+            'users_skipped_existing' => count($report['skipped_existing']),
+            'users_multiple_names' => count($report['multiple_names']),
+            'companies_ownerless' => count($report['ownerless']),
+            'owners_missing' => count($report['missing_owner']),
+        ];
+
+        $this->table(
+            ['Agentur-Firmen', 'User migriert', 'Bereits gesetzt', 'Mehrfach-Namen', 'Ohne Owner', 'Owner fehlt'],
+            [array_values($report['summary'])],
+        );
+
+        $path = 'migration/agency-names-'.now()->format('Ymd-His').'.json';
+        Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+        $this->line("Report geschrieben: storage/app/private/{$path}");
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/MigrateLegacyMedia.php

@@ -0,0 +1,472 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\Portal;
+use App\Models\Company;
+use App\Models\PressRelease;
+use App\Models\PressReleaseImage;
+use App\Services\Image\ImageService;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\File;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class MigrateLegacyMedia extends Command
+{
+    protected $signature = 'legacy:migrate-media
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--type=all : Medientyp (company-logos|press-release-images|all)}
+                            {--base-path=dev/migration : Lokaler Ordner mit den Legacy-Dateien}
+                            {--dry-run : Nur prüfen, nichts kopieren oder aktualisieren}
+                            {--force : Bereits migrierte Dateien erneut überschreiben}
+                            {--limit=0 : Maximal N Legacy-Datensätze pro Typ und Portal verarbeiten (0 = alle)}';
+
+    protected $description = 'Migriert Legacy-Firmenlogos und Pressemitteilungsbilder anhand der Legacy-DB in den finalen Storage.';
+
+    private const PORTAL_CONNECTIONS = [
+        'presseecho' => 'mysql_presseecho',
+        'businessportal24' => 'mysql_businessportal',
+    ];
+
+    /**
+     * @var array<string, list<string>>
+     */
+    private const SOURCE_DIRECTORIES = [
+        'company-logos' => [
+            'uploads/company',
+            'thumbnails/company',
+        ],
+        'press-release-images' => [
+            'uploads/pressreleaseimage',
+            'uploads/pressreleaseimage_',
+            'uploads/_pressreleaseimage',
+            'thumbnails/pressreleaseimage',
+        ],
+    ];
+
+    public function __construct(private readonly ImageService $imageService)
+    {
+        parent::__construct();
+    }
+
+    public function handle(): int
+    {
+        $portals = $this->selectedPortals();
+        $types = $this->selectedTypes();
+
+        if ($portals === []) {
+            $this->error('Ungültiges Portal. Erlaubt: presseecho, businessportal24, all.');
+
+            return self::FAILURE;
+        }
+
+        if ($types === []) {
+            $this->error('Ungültiger Medientyp. Erlaubt: company-logos, press-release-images, all.');
+
+            return self::FAILURE;
+        }
+
+        $configuredBasePath = (string) $this->option('base-path');
+        $basePath = Str::startsWith($configuredBasePath, '/')
+            ? rtrim($configuredBasePath, '/')
+            : base_path(trim($configuredBasePath, '/'));
+        $dryRun = (bool) $this->option('dry-run');
+        $force = (bool) $this->option('force');
+        $limit = max(0, (int) $this->option('limit'));
+        $totals = $this->emptyStats();
+
+        foreach ($portals as $portal) {
+            foreach ($types as $type) {
+                $stats = match ($type) {
+                    'company-logos' => $this->migrateCompanyLogos($portal, $basePath, $dryRun, $force, $limit),
+                    'press-release-images' => $this->migratePressReleaseImages($portal, $basePath, $dryRun, $force, $limit),
+                };
+
+                foreach ($totals as $key => $value) {
+                    $totals[$key] = $value + $stats[$key];
+                }
+
+                $this->line(sprintf(
+                    '%s/%s: Legacy %d, migriert %d, Thumbnail-Fallback %d, DB-Updates %d, bereits synchron %d, Ziel fehlt %d, Datei fehlt %d',
+                    $portal,
+                    $type,
+                    $stats['legacy_rows'],
+                    $stats['migrated'],
+                    $stats['thumbnail_fallback'],
+                    $stats['updated'],
+                    $stats['already_synced'],
+                    $stats['missing_target'],
+                    $stats['missing_file'],
+                ));
+            }
+        }
+
+        $this->newLine();
+        $this->info(sprintf(
+            'Gesamt: Legacy %d, migriert %d, Thumbnail-Fallback %d, DB-Updates %d, bereits synchron %d, Ziel fehlt %d, Datei fehlt %d%s',
+            $totals['legacy_rows'],
+            $totals['migrated'],
+            $totals['thumbnail_fallback'],
+            $totals['updated'],
+            $totals['already_synced'],
+            $totals['missing_target'],
+            $totals['missing_file'],
+            $dryRun ? ' (Dry-Run)' : '',
+        ));
+
+        return ($totals['missing_target'] + $totals['missing_file']) > 0
+            ? self::FAILURE
+            : self::SUCCESS;
+    }
+
+    /**
+     * @return array{legacy_rows:int,migrated:int,thumbnail_fallback:int,updated:int,already_synced:int,missing_target:int,missing_file:int}
+     */
+    private function migrateCompanyLogos(string $portal, string $basePath, bool $dryRun, bool $force, int $limit): array
+    {
+        $stats = $this->emptyStats();
+        $sourceIndex = $this->sourceIndex($basePath, $portal, 'company-logos');
+        $processed = 0;
+
+        DB::connection(self::PORTAL_CONNECTIONS[$portal])
+            ->table('company')
+            ->whereNotNull('logo')
+            ->where('logo', '!=', '')
+            ->orderBy('id')
+            ->chunk(500, function ($rows) use ($portal, $sourceIndex, $dryRun, $force, $limit, &$processed, &$stats): bool {
+                foreach ($rows as $row) {
+                    if ($limit > 0 && $processed >= $limit) {
+                        return false;
+                    }
+
+                    $processed++;
+                    $stats['legacy_rows']++;
+
+                    $company = Company::withoutGlobalScopes()
+                        ->where('legacy_portal', $portal)
+                        ->where('legacy_id', $row->id)
+                        ->first(['id', 'logo_path', 'logo_variants']);
+
+                    if (! $company) {
+                        $stats['missing_target']++;
+                        $this->warn("Ziel fehlt: {$portal}/company/{$row->id}");
+
+                        continue;
+                    }
+
+                    $sourceFilename = $this->legacyFilename((string) $row->logo);
+                    $sourcePath = $sourceIndex[$sourceFilename] ?? $sourceIndex[Str::lower($sourceFilename)] ?? null;
+                    $destinationPath = "company-logos/{$portal}/{$company->id}/{$sourceFilename}";
+
+                    if ($this->isAlreadySynced($company->logo_path, $destinationPath, $force)) {
+                        $stats['already_synced']++;
+
+                        if (! $dryRun && (! is_array($company->logo_variants) || $company->logo_variants === [])) {
+                            $variants = $this->imageService->generateMissingCompanyLogoVariants($destinationPath);
+
+                            if ($variants !== []) {
+                                $company->forceFill(['logo_variants' => $variants])->save();
+                                $stats['updated']++;
+                            }
+                        }
+
+                        continue;
+                    }
+
+                    if (! $sourcePath) {
+                        $stats['missing_file']++;
+                        $this->warn("Datei fehlt: {$portal}/company/{$sourceFilename} (Company #{$company->id})");
+
+                        continue;
+                    }
+
+                    if (! $dryRun) {
+                        $this->copyToPublicStorage($sourcePath, $destinationPath, $force);
+                        $company->forceFill([
+                            'logo_path' => $destinationPath,
+                            'logo_variants' => $this->imageService->generateMissingCompanyLogoVariants($destinationPath),
+                        ])->save();
+                    }
+
+                    $stats['migrated']++;
+                    $stats['updated']++;
+                }
+
+                return true;
+            });
+
+        return $stats;
+    }
+
+    /**
+     * @return array{legacy_rows:int,migrated:int,thumbnail_fallback:int,updated:int,already_synced:int,missing_target:int,missing_file:int}
+     */
+    private function migratePressReleaseImages(string $portal, string $basePath, bool $dryRun, bool $force, int $limit): array
+    {
+        $stats = $this->emptyStats();
+        $sourceIndex = $this->sourceIndex($basePath, $portal, 'press-release-images');
+        $thumbnailIndex = $this->thumbnailIndex($basePath, $portal);
+        $processed = 0;
+
+        DB::connection(self::PORTAL_CONNECTIONS[$portal])
+            ->table('press_release_image')
+            ->orderBy('id')
+            ->chunk(500, function ($rows) use ($portal, $sourceIndex, $thumbnailIndex, $dryRun, $force, $limit, &$processed, &$stats): bool {
+                foreach ($rows as $row) {
+                    if ($limit > 0 && $processed >= $limit) {
+                        return false;
+                    }
+
+                    if (blank($row->image)) {
+                        continue;
+                    }
+
+                    $processed++;
+                    $stats['legacy_rows']++;
+
+                    $pressRelease = PressRelease::withoutGlobalScopes()
+                        ->where('legacy_portal', $portal)
+                        ->where('legacy_id', $row->press_release_id)
+                        ->first(['id']);
+
+                    if (! $pressRelease) {
+                        $stats['missing_target']++;
+                        $this->warn("Ziel fehlt: {$portal}/press_release/{$row->press_release_id}");
+
+                        continue;
+                    }
+
+                    $sourceFilename = $this->legacyFilename((string) $row->image);
+                    $sourcePath = $sourceIndex[$sourceFilename] ?? $sourceIndex[Str::lower($sourceFilename)] ?? null;
+                    $usedThumbnailFallback = false;
+
+                    if (! $sourcePath) {
+                        $sourcePath = $thumbnailIndex[(int) $row->id] ?? null;
+                        $usedThumbnailFallback = $sourcePath !== null;
+                    }
+
+                    $destinationFilename = $usedThumbnailFallback ? basename($sourcePath) : $sourceFilename;
+                    $destinationPath = "press-releases/{$pressRelease->id}/images/{$destinationFilename}";
+                    $image = PressReleaseImage::withTrashed()
+                        ->where('legacy_portal', $portal)
+                        ->where('legacy_id', $row->id)
+                        ->first();
+
+                    if ($image && $this->isAlreadySynced($image->path, $destinationPath, $force)) {
+                        $stats['already_synced']++;
+
+                        if (! $dryRun && (! is_array($image->variants) || $image->variants === [])) {
+                            $variants = $this->imageService->generateMissingPressReleaseVariants($destinationPath);
+
+                            if ($variants !== []) {
+                                $image->forceFill(['variants' => $variants])->save();
+                                $stats['updated']++;
+                            }
+                        }
+
+                        continue;
+                    }
+
+                    if (! $sourcePath) {
+                        $stats['missing_file']++;
+                        $this->warn("Datei fehlt: {$portal}/press_release_image/{$sourceFilename} (Image #{$row->id})");
+
+                        continue;
+                    }
+
+                    if ($usedThumbnailFallback) {
+                        $stats['thumbnail_fallback']++;
+                    }
+
+                    $variants = [];
+                    $size = [null, null];
+                    $mime = null;
+
+                    if (! $dryRun) {
+                        $this->copyToPublicStorage($sourcePath, $destinationPath, $force);
+                        $variants = $this->imageService->generateMissingPressReleaseVariants($destinationPath);
+                        $size = @getimagesize(Storage::disk('public')->path($destinationPath)) ?: [null, null];
+                        $mime = File::mimeType($sourcePath) ?: null;
+
+                        $image = $image ?: new PressReleaseImage;
+                        $image->forceFill([
+                            'press_release_id' => $pressRelease->id,
+                            'disk' => 'public',
+                            'path' => $destinationPath,
+                            'variants' => $variants,
+                            'title' => $row->title ?: null,
+                            'description' => $row->description ?: null,
+                            'copyright' => $row->copyright ?: null,
+                            'is_preview' => (bool) $row->is_preview_image,
+                            'sort_order' => 0,
+                            'width' => is_int($size[0] ?? null) ? $size[0] : null,
+                            'height' => is_int($size[1] ?? null) ? $size[1] : null,
+                            'mime' => $mime,
+                            'legacy_portal' => $portal,
+                            'legacy_id' => $row->id,
+                        ]);
+
+                        if ($image->trashed()) {
+                            $image->restore();
+                        }
+
+                        $image->save();
+                    }
+
+                    $stats['migrated']++;
+                    $stats['updated']++;
+                }
+
+                return true;
+            });
+
+        return $stats;
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function selectedPortals(): array
+    {
+        $portal = (string) $this->option('portal');
+
+        return match ($portal) {
+            'all' => [Portal::Presseecho->value, Portal::Businessportal24->value],
+            Portal::Presseecho->value, Portal::Businessportal24->value => [$portal],
+            default => [],
+        };
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function selectedTypes(): array
+    {
+        $type = (string) $this->option('type');
+
+        return match ($type) {
+            'all' => ['company-logos', 'press-release-images'],
+            'company-logos', 'press-release-images' => [$type],
+            default => [],
+        };
+    }
+
+    /**
+     * @return array{legacy_rows:int,migrated:int,thumbnail_fallback:int,updated:int,already_synced:int,missing_target:int,missing_file:int}
+     */
+    private function emptyStats(): array
+    {
+        return [
+            'legacy_rows' => 0,
+            'migrated' => 0,
+            'thumbnail_fallback' => 0,
+            'updated' => 0,
+            'already_synced' => 0,
+            'missing_target' => 0,
+            'missing_file' => 0,
+        ];
+    }
+
+    /**
+     * @return array<string, string>
+     */
+    private function sourceIndex(string $basePath, string $portal, string $type): array
+    {
+        $index = [];
+
+        foreach (self::SOURCE_DIRECTORIES[$type] as $relativeDirectory) {
+            $directory = "{$basePath}/{$portal}/{$relativeDirectory}";
+
+            if (! File::isDirectory($directory)) {
+                continue;
+            }
+
+            foreach (File::allFiles($directory) as $file) {
+                $index[$file->getFilename()] ??= $file->getPathname();
+                $index[Str::lower($file->getFilename())] ??= $file->getPathname();
+            }
+        }
+
+        return $index;
+    }
+
+    /**
+     * @return array<int, string>
+     */
+    private function thumbnailIndex(string $basePath, string $portal): array
+    {
+        $directory = "{$basePath}/{$portal}/thumbnails/pressreleaseimage";
+
+        if (! File::isDirectory($directory)) {
+            return [];
+        }
+
+        $index = [];
+        $priorities = [
+            'press_image_preview' => 50,
+            'pressrelease_form' => 40,
+            'backend_list' => 30,
+            'press_image_list' => 20,
+            'press_list_image' => 10,
+        ];
+
+        foreach (File::allFiles($directory) as $file) {
+            if (! preg_match('/-(\d+)\.[^.]+$/', $file->getFilename(), $matches)) {
+                continue;
+            }
+
+            $legacyImageId = (int) $matches[1];
+            $thumbnailType = Str::after($file->getPathname(), "{$directory}/");
+            $thumbnailType = Str::before($thumbnailType, DIRECTORY_SEPARATOR);
+            $priority = $priorities[$thumbnailType] ?? 0;
+            $current = $index[$legacyImageId] ?? null;
+
+            if (! $current || $priority > ($current['priority'] ?? 0)) {
+                $index[$legacyImageId] = [
+                    'path' => $file->getPathname(),
+                    'priority' => $priority,
+                ];
+            }
+        }
+
+        return collect($index)
+            ->map(fn (array $entry): string => $entry['path'])
+            ->all();
+    }
+
+    private function legacyFilename(string $path): string
+    {
+        $urlPath = parse_url($path, PHP_URL_PATH);
+        $filename = basename(rawurldecode((string) ($urlPath ?: $path)));
+
+        return Str::of($filename)->trim()->toString();
+    }
+
+    private function isAlreadySynced(?string $currentPath, string $destinationPath, bool $force): bool
+    {
+        return ! $force
+            && $currentPath === $destinationPath
+            && Storage::disk('public')->exists($destinationPath);
+    }
+
+    private function copyToPublicStorage(string $sourcePath, string $destinationPath, bool $force): void
+    {
+        if (! $force && Storage::disk('public')->exists($destinationPath)) {
+            return;
+        }
+
+        $stream = fopen($sourcePath, 'rb');
+
+        if ($stream === false) {
+            throw new \RuntimeException("Quelldatei kann nicht gelesen werden: {$sourcePath}");
+        }
+
+        try {
+            Storage::disk('public')->put($destinationPath, $stream, 'public');
+        } finally {
+            fclose($stream);
+        }
+    }
+}

app/Console/Commands/MigratePresseData.php

@@ -2,21 +2,19 @@
 
 namespace App\Console\Commands;
 
+use App\Models\Article as NewArticle;
+use App\Models\Brand;
+use App\Models\Legacy\Presseecho\Article as LegacyArticle;
+use App\Models\Legacy\Presseecho\User as LegacyUser;
+// Import der Models für die NEUE Struktur
+use App\Models\User as NewUser;
 use Illuminate\Console\Command;
 use Illuminate\Support\Facades\DB;
+// Import der Models für die ALTE Struktur
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Str;
 
-// Import der Models für die NEUE Struktur
-use App\Models\User as NewUser;
-use App\Models\Article as NewArticle;
-use App\Models\Brand;
-
-// Import der Models für die ALTE Struktur
-use App\Models\Legacy\Presseecho\User as LegacyUser;
-use App\Models\Legacy\Presseecho\Article as LegacyArticle;
-
-class MigratePresseechoData extends Command
+class MigratePresseData extends Command
 {
     /**
      * The name and signature of the console command.
@@ -41,8 +39,9 @@ class MigratePresseechoData extends Command
 
         // Holen der Brand-ID für Presseecho aus der neuen DB
         $brand = Brand::where('domain', 'presseecho.de')->first();
-        if (!$brand) {
+        if (! $brand) {
             $this->error('Brand "presseecho.de" not found in the new database. Please seed brands first.');
+
             return 1;
         }
 
@@ -58,6 +57,7 @@ class MigratePresseechoData extends Command
         DB::connection('mysql')->statement('SET FOREIGN_KEY_CHECKS=1;');
 
         $this->info('Migration for presseecho.de completed successfully!');
+
         return 0;
     }
 
@@ -73,7 +73,7 @@ class MigratePresseechoData extends Command
                 // Prüfen, ob der Nutzer (anhand der E-Mail) bereits in der neuen DB existiert
                 $existingUser = NewUser::where('email', $legacyUser->email)->first();
 
-                if (!$existingUser) {
+                if (! $existingUser) {
                     // Nutzer existiert noch nicht -> neu anlegen
                     NewUser::create([
                         'name' => $legacyUser->name,
@@ -104,8 +104,9 @@ class MigratePresseechoData extends Command
                 // Den zugehörigen Nutzer in der NEUEN Datenbank finden
                 $author = NewUser::where('email', $legacyArticle->author_email)->first(); // Annahme: Artikel hat eine Autoren-E-Mail
 
-                if (!$author) {
+                if (! $author) {
                     $this->warn("Skipping article ID {$legacyArticle->id}, author with email {$legacyArticle->author_email} not found.");
+
                     continue; // Artikel überspringen, wenn kein Autor gefunden wurde
                 }
 

app/Console/Commands/PrivatizePressReleaseMedia.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\PressRelease\PressReleaseMediaPrivatizer;
+use Illuminate\Console\Command;
+
+class PrivatizePressReleaseMedia extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'press-releases:privatize-media
+                            {--prune-missing : Unmigrierte Legacy-Bildzeilen ohne Datei endgültig löschen}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Verschiebt bestehende Pressemitteilungs-Medien vom öffentlichen auf den privaten Datenträger';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(PressReleaseMediaPrivatizer $privatizer): int
+    {
+        $counts = $privatizer->privatizeAll((bool) $this->option('prune-missing'));
+
+        $this->info(sprintf(
+            '%d Bilder und %d Anhänge wurden auf den privaten Datenträger migriert.',
+            $counts['images'],
+            $counts['attachments'],
+        ));
+
+        if ($counts['legacy_pruned'] > 0) {
+            $this->info(sprintf(
+                '%d unmigrierte Legacy-Bildzeilen ohne Datei wurden gelöscht.',
+                $counts['legacy_pruned'],
+            ));
+        }
+
+        if ($counts['legacy_skipped'] > 0) {
+            $this->warn(sprintf(
+                '%d unmigrierte Legacy-Bildzeilen übersprungen — erst `legacy:migrate-media` ausführen, danach Verbliebene ohne Datei mit `--prune-missing` löschen.',
+                $counts['legacy_skipped'],
+            ));
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/PublishScheduledPressReleases.php

@@ -0,0 +1,119 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\PressReleaseClassification;
+use App\Enums\PressReleaseStatus;
+use App\Models\PressRelease;
+use App\Scopes\PortalScope;
+use App\Services\PressRelease\BlacklistViolationException;
+use App\Services\PressRelease\PressReleaseService;
+use Illuminate\Console\Command;
+use Illuminate\Support\Str;
+use Throwable;
+
+/**
+ * Veröffentlicht Pressemitteilungen mit Status `review`, der KI-Klassifikation
+ * `green` und einem `scheduled_at`-Zeitpunkt, der erreicht/überschritten wurde.
+ *
+ * Läuft regelmäßig per Scheduler (siehe routes/console.php). Idempotent:
+ * berührt nur grüne PRs in Review-Status — bereits publishte werden ignoriert.
+ * Gelb eingestufte PMs bleiben bewusst in der manuellen Admin-Queue, auch wenn
+ * ihr Termin fällig ist.
+ *
+ * Blacklist-Treffer landen wie beim manuellen Publish im Reject-Status mit
+ * Mail-Benachrichtigung des Autors.
+ */
+class PublishScheduledPressReleases extends Command
+{
+    /**
+     * @var string
+     */
+    protected $signature = 'press-releases:publish-scheduled
+                            {--dry-run : Nur anzeigen, was publiziert würde, ohne DB zu ändern}
+                            {--limit=200 : Maximale Anzahl pro Lauf}';
+
+    /**
+     * @var string
+     */
+    protected $description = 'Veröffentlicht fällige geplante Pressemitteilungen (Status review + scheduled_at <= now).';
+
+    public function handle(PressReleaseService $service): int
+    {
+        $dryRun = (bool) $this->option('dry-run');
+        $limit = max(1, (int) $this->option('limit'));
+
+        $now = now();
+
+        // Gelb und Grün gehen zum Termin automatisch live (Decision-Update
+        // §5.0); nur Rot wird abgelehnt. Unklassifizierte PMs bleiben als
+        // Fallback in der manuellen Queue.
+        $candidates = PressRelease::withoutGlobalScope(PortalScope::class)
+            ->where('status', PressReleaseStatus::Review->value)
+            ->whereIn('classification', [
+                PressReleaseClassification::Green->value,
+                PressReleaseClassification::Yellow->value,
+            ])
+            ->whereNotNull('scheduled_at')
+            ->where('scheduled_at', '<=', $now)
+            ->orderBy('scheduled_at')
+            ->limit($limit)
+            ->get();
+
+        if ($candidates->isEmpty()) {
+            $this->info('Keine fälligen geplanten Pressemitteilungen gefunden.');
+
+            return self::SUCCESS;
+        }
+
+        $this->info(sprintf(
+            '%d fällige Pressemitteilung(en) gefunden.%s',
+            $candidates->count(),
+            $dryRun ? ' (Dry-Run)' : '',
+        ));
+
+        $published = 0;
+        $rejected = 0;
+        $failed = 0;
+
+        foreach ($candidates as $pressRelease) {
+            $line = sprintf(
+                '  #%d  scheduled_at=%s  title="%s"',
+                $pressRelease->id,
+                $pressRelease->scheduled_at?->format('Y-m-d H:i') ?? '-',
+                Str::limit($pressRelease->title, 60),
+            );
+
+            if ($dryRun) {
+                $this->line($line.'  [DRY]');
+
+                continue;
+            }
+
+            try {
+                $service->publish($pressRelease, source: 'scheduler');
+                $published++;
+                $this->line($line.'  [OK]');
+            } catch (BlacklistViolationException $e) {
+                $rejected++;
+                $this->warn($line.'  [REJECT: '.$e->word.']');
+            } catch (Throwable $e) {
+                $failed++;
+                $this->error($line.'  [FAIL: '.$e->getMessage().']');
+                report($e);
+            }
+        }
+
+        if (! $dryRun) {
+            $this->newLine();
+            $this->info(sprintf(
+                'Fertig: %d veröffentlicht, %d wegen Blacklist abgelehnt, %d fehlgeschlagen.',
+                $published,
+                $rejected,
+                $failed,
+            ));
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/PurgeExpiredPressReleaseDrafts.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\PressReleaseStatus;
+use App\Models\PressRelease;
+use Illuminate\Console\Command;
+
+/**
+ * Archiviert Entwürfe, die seit mehr als X Tagen nicht bearbeitet wurden.
+ * Schützt vor "Zombie-Drafts" in der DB – optional, konfigurierbar.
+ */
+class PurgeExpiredPressReleaseDrafts extends Command
+{
+    protected $signature = 'press-releases:purge-drafts
+                            {--days=180 : Entwürfe älter als X Tage archivieren}
+                            {--dry-run : Nur zählen, nichts ändern}';
+
+    protected $description = 'Archiviert inaktive PM-Entwürfe (älter als X Tage).';
+
+    public function handle(): int
+    {
+        $days = (int) $this->option('days');
+        $isDryRun = $this->option('dry-run');
+        $cutoff = now()->subDays($days);
+
+        $query = PressRelease::withoutGlobalScopes()
+            ->where('status', PressReleaseStatus::Draft->value)
+            ->where('updated_at', '<', $cutoff);
+
+        $count = $query->count();
+
+        if ($isDryRun) {
+            $this->warn("[DRY-RUN] {$count} Entwürfe würden archiviert. Kein tatsächlicher Vorgang.");
+
+            return self::SUCCESS;
+        }
+
+        $query->update(['status' => PressReleaseStatus::Archived->value]);
+
+        $this->info("PM-Entwürfe archiviert: {$count} Einträge.");
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/PurgeMagicLinks.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\MagicLink;
+use Illuminate\Console\Command;
+
+/**
+ * Löscht verbrauchte oder abgelaufene Magic-Links, die älter als 30 Tage sind.
+ * Läuft täglich via Scheduler.
+ */
+class PurgeMagicLinks extends Command
+{
+    protected $signature = 'magic-links:purge {--days=30 : Links älter als X Tage löschen}';
+
+    protected $description = 'Löscht verbrauchte und abgelaufene Magic-Links.';
+
+    public function handle(): int
+    {
+        $days = (int) $this->option('days');
+        $cutoff = now()->subDays($days);
+
+        $deleted = MagicLink::query()
+            ->where(function ($q) use ($cutoff): void {
+                $q->where('expires_at', '<', $cutoff)
+                    ->orWhere(function ($q) use ($cutoff): void {
+                        $q->whereNotNull('consumed_at')
+                            ->where('consumed_at', '<', $cutoff);
+                    });
+            })
+            ->delete();
+
+        $this->info("Magic-Links bereinigt: {$deleted} Einträge gelöscht.");
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/RefreshMarketData.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Web\MarketDataService;
+use Illuminate\Console\Command;
+
+class RefreshMarketData extends Command
+{
+    protected $signature = 'market:refresh';
+
+    protected $description = 'Kursdaten (DAX, EUR/USD, Brent) für den Web-Ticker abrufen und cachen';
+
+    public function handle(MarketDataService $marketData): int
+    {
+        if (! config('market.enabled')) {
+            $this->info('Marktdaten sind deaktiviert (MARKET_DATA_ENABLED=false).');
+
+            return self::SUCCESS;
+        }
+
+        $slides = $marketData->refresh();
+
+        if ($slides === []) {
+            $this->warn('Keine Kursdaten erhalten — Cache unverändert.');
+
+            return self::FAILURE;
+        }
+
+        foreach ($slides as $slide) {
+            $this->line(sprintf('%s: %s (%s)', $slide['label'], $slide['value'], $slide['delta']));
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/ReportAdminSlowRequests.php

@@ -0,0 +1,181 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Admin\AdminSlowRequestReporter;
+use Illuminate\Console\Command;
+
+class ReportAdminSlowRequests extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'admin:slow-requests
+                            {--from= : Startzeitpunkt, z.B. 2026-04-29 oder 2026-04-29 08:00:00}
+                            {--to= : Endzeitpunkt}
+                            {--route= : Auf Route-Namen filtern}
+                            {--path= : Auf Pfad filtern}
+                            {--status= : Auf HTTP-Statuscode filtern}
+                            {--min-duration= : Mindestdauer in Millisekunden}
+                            {--top=10 : Anzahl Top-Zeilen pro Abschnitt}
+                            {--limit=25 : Anzahl Detailzeilen}
+                            {--file=* : Optionaler Logdatei-Pfad oder Glob}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Wertet Slow-Admin-Request-Logs aus.';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(AdminSlowRequestReporter $reporter): int
+    {
+        $top = max(1, (int) $this->option('top'));
+        $limit = max(1, (int) $this->option('limit'));
+        $files = array_values(array_filter(array_map('strval', (array) $this->option('file'))));
+
+        $report = $reporter->report(
+            filters: [
+                'from' => $this->option('from') !== null ? (string) $this->option('from') : null,
+                'to' => $this->option('to') !== null ? (string) $this->option('to') : null,
+                'route' => $this->option('route') !== null ? (string) $this->option('route') : null,
+                'path' => $this->option('path') !== null ? (string) $this->option('path') : null,
+                'status' => $this->option('status') !== null ? (int) $this->option('status') : null,
+                'min_duration_ms' => $this->option('min-duration') !== null ? (int) $this->option('min-duration') : null,
+            ],
+            top: $top,
+            limit: $limit,
+            paths: $files !== [] ? $files : null,
+        );
+
+        $this->info('Slow-Admin-Request-Report');
+        $this->newLine();
+        $this->line("Dateien: {$report['summary']['files']}");
+        $this->line("Requests: {$report['summary']['total_requests']}");
+        $this->line("Routen: {$report['summary']['unique_routes']}");
+        $this->line("Durchschnitt Dauer: {$report['summary']['average_duration_ms']} ms");
+        $this->line("Max. Dauer: {$report['summary']['max_duration_ms']} ms");
+        $this->line("Durchschnitt DB-Zeit: {$report['summary']['average_database_time_ms']} ms");
+        $this->line("Max. Query-Anzahl: {$report['summary']['max_query_count']}");
+
+        $this->renderTopTable('Top Routen', $report['top_routes']);
+        $this->renderTopTable('Top Pfade', $report['top_paths']);
+        $this->renderTopTable('Statuscodes', $report['status_codes']);
+        $this->renderRequests('Langsamste Requests', $report['slowest_requests']);
+        $this->renderRequests('Query-lastige Requests', $report['query_heavy_requests']);
+        $this->renderSlowQueries($report['slow_queries']);
+        $this->renderExplainPlans($report['explain_plans']);
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * @param  list<array<string, mixed>>  $rows
+     */
+    private function renderTopTable(string $title, array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line($title);
+        $this->table(
+            ['Wert', 'Requests', 'Ø Dauer', 'Max Dauer', 'Ø DB', 'Queries'],
+            collect($rows)
+                ->map(fn (array $row): array => [
+                    $row['value'],
+                    $row['requests'],
+                    $row['average_duration_ms'].' ms',
+                    $row['max_duration_ms'].' ms',
+                    $row['average_database_time_ms'].' ms',
+                    $row['total_queries'],
+                ])
+                ->all()
+        );
+    }
+
+    /**
+     * @param  list<array<string, mixed>>  $rows
+     */
+    private function renderRequests(string $title, array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line($title);
+        $this->table(
+            ['Zeit', 'Route', 'Pfad', 'Status', 'Dauer', 'DB', 'Queries'],
+            collect($rows)
+                ->map(fn (array $row): array => [
+                    $row['timestamp'],
+                    $row['route_name'],
+                    $row['path'],
+                    $row['status_code'],
+                    $row['duration_ms'].' ms',
+                    $row['database_time_ms'].' ms',
+                    $row['query_count'],
+                ])
+                ->all()
+        );
+    }
+
+    /**
+     * @param  list<array<string, mixed>>  $rows
+     */
+    private function renderSlowQueries(array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line('Häufige Slow Queries');
+        $this->table(
+            ['SQL', 'Vorkommen', 'Ø Zeit', 'Max Zeit'],
+            collect($rows)
+                ->map(fn (array $row): array => [
+                    str($row['sql'])->limit(100)->toString(),
+                    $row['occurrences'],
+                    $row['average_time_ms'].' ms',
+                    $row['max_time_ms'].' ms',
+                ])
+                ->all()
+        );
+    }
+
+    /**
+     * @param  list<array<string, mixed>>  $rows
+     */
+    private function renderExplainPlans(array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line('EXPLAIN Top Slow Queries');
+
+        foreach ($rows as $row) {
+            $this->line(str($row['sql'])->limit(120)->toString());
+
+            if ($row['error'] !== null) {
+                $this->warn((string) $row['error']);
+
+                continue;
+            }
+
+            $this->table(
+                array_keys($row['plan'][0] ?? []),
+                collect($row['plan'])->map(fn (array $planRow): array => array_values($planRow))->all()
+            );
+        }
+    }
+}

app/Console/Commands/ReportApiUsage.php

@@ -0,0 +1,92 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Api\ApiUsageReporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+
+class ReportApiUsage extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'api:usage-report
+                            {--from= : Startzeitpunkt, z.B. 2026-04-01 oder 2026-04-01 00:00:00}
+                            {--to= : Endzeitpunkt}
+                            {--user= : Auf User-ID filtern}
+                            {--status= : Auf HTTP-Statuscode filtern}
+                            {--top=10 : Anzahl Top-Zeilen pro Abschnitt}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Erstellt einen Report aus den protokollierten API-Usage-Logs.';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(ApiUsageReporter $reporter): int
+    {
+        $top = max(1, (int) $this->option('top'));
+        $userId = $this->option('user') !== null ? (int) $this->option('user') : null;
+        $statusCode = $this->option('status') !== null ? (int) $this->option('status') : null;
+
+        $report = $reporter->report(
+            from: $this->option('from') !== null ? (string) $this->option('from') : null,
+            to: $this->option('to') !== null ? (string) $this->option('to') : null,
+            userId: $userId,
+            statusCode: $statusCode,
+            top: $top,
+        );
+
+        $this->info('API-Usage-Report');
+        $this->newLine();
+        $this->line("Requests: {$report['summary']['total_requests']}");
+        $this->line("Eindeutige User: {$report['summary']['unique_users']}");
+        $this->line("Eindeutige Tokens: {$report['summary']['unique_tokens']}");
+        $this->line("2xx: {$report['summary']['successful_requests']}");
+        $this->line("4xx: {$report['summary']['client_error_requests']}");
+        $this->line("5xx: {$report['summary']['server_error_requests']}");
+        $this->line("Durchschnitt Dauer: {$report['summary']['average_duration_ms']} ms");
+
+        $this->renderRows('Top Pfade', ['Pfad', 'Requests'], $report['top_paths']);
+        $this->renderRows('Statuscodes', ['Status', 'Requests'], $report['status_codes']);
+        $this->renderRows('Top User', ['User-ID', 'Requests'], $report['top_users']);
+        $this->renderRows('Top Tokens', ['Token-ID', 'Requests'], $report['top_tokens']);
+
+        if (! (bool) $this->option('no-report')) {
+            $path = 'migration/api-usage-'.now()->format('Ymd-His').'.json';
+            Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->newLine();
+            $this->line("Report geschrieben: storage/app/private/{$path}");
+        }
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * @param  list<string>  $headers
+     * @param  list<array{value: mixed, requests: int}>  $rows
+     */
+    private function renderRows(string $title, array $headers, array $rows): void
+    {
+        if ($rows === []) {
+            return;
+        }
+
+        $this->newLine();
+        $this->line($title);
+        $this->table(
+            $headers,
+            collect($rows)
+                ->map(fn (array $row): array => [$row['value'], $row['requests']])
+                ->all()
+        );
+    }
+}

app/Console/Commands/ReportLegacyApiCustomers.php

@@ -0,0 +1,92 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Api\LegacyApiCustomerReporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+
+class ReportLegacyApiCustomers extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'api:legacy-customers-report
+                            {--portal=all : Portal (presseecho|businessportal24|both|all)}
+                            {--classification=all : Filter (eligible|needs_review|blocked|all)}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Ermittelt Legacy-API-Kunden aus migrierten Daten und letzter bezahlter Rechnung.';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(LegacyApiCustomerReporter $reporter): int
+    {
+        $portal = (string) $this->option('portal');
+        $classification = (string) $this->option('classification');
+
+        if (! in_array($portal, ['presseecho', 'businessportal24', 'both', 'all'], true)) {
+            $this->error("Unbekanntes Portal: {$portal}");
+
+            return self::FAILURE;
+        }
+
+        if (! in_array($classification, ['eligible', 'needs_review', 'blocked', 'all'], true)) {
+            $this->error("Unbekannte Klassifizierung: {$classification}");
+
+            return self::FAILURE;
+        }
+
+        $report = $reporter->report($portal);
+        $customers = collect($report['customers']);
+
+        if ($classification !== 'all') {
+            $customers = $customers
+                ->where('classification', $classification)
+                ->values();
+        }
+
+        $this->info('Legacy-API-Kundenreport');
+        $this->newLine();
+        $this->line("Portal: {$portal}");
+        $this->line("Kandidaten: {$report['summary']['total_candidates']}");
+        $this->line("Freigabefähig: {$report['summary']['eligible']}");
+        $this->line("Manuell prüfen: {$report['summary']['needs_review']}");
+        $this->line("Gesperrt: {$report['summary']['blocked']}");
+
+        if ($customers->isNotEmpty()) {
+            $this->newLine();
+            $this->table(
+                ['ID', 'E-Mail', 'Portal', 'Letzte Rechnung', 'Status', 'Klassifizierung'],
+                $customers
+                    ->take(25)
+                    ->map(fn (array $customer): array => [
+                        $customer['user_id'],
+                        $customer['email'],
+                        $customer['portal'],
+                        $customer['latest_legacy_invoice']['number'] ?? '-',
+                        $customer['latest_legacy_invoice']['status'] ?? '-',
+                        $customer['classification'],
+                    ])
+                    ->all()
+            );
+        }
+
+        if (! (bool) $this->option('no-report')) {
+            $path = 'migration/legacy-api-customers-'.now()->format('Ymd-His').'.json';
+            Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->newLine();
+            $this->line("Report geschrieben: storage/app/private/{$path}");
+        }
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/ResetMonthlyPressReleaseQuota.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\User;
+use Illuminate\Console\Command;
+
+/**
+ * Setzt den monatlichen PM-Kontingent-Verbrauch aller User zurück.
+ *
+ * Fester Bestandteil des Tarif-Modells (geprüft R1.3, 03.07.2026): Die
+ * Plan-Kontingente (§2/§3.3 Decision-Update) gelten pro Kalendermonat;
+ * User::pressReleaseQuotaRemaining() rechnet gegen diesen Zähler. Läuft
+ * per Scheduler am Monatsersten (siehe routes/console.php). Bewusste
+ * Vereinfachung: Reset am Kalendermonat, nicht an der individuellen
+ * Abo-Periode ausgerichtet.
+ */
+class ResetMonthlyPressReleaseQuota extends Command
+{
+    /**
+     * @var string
+     */
+    protected $signature = 'press-releases:reset-monthly-quota';
+
+    /**
+     * @var string
+     */
+    protected $description = 'Setzt den monatlichen PM-Kontingent-Verbrauch (press_release_quota_used_this_month) aller User auf 0 zurück.';
+
+    public function handle(): int
+    {
+        $affected = User::query()
+            ->where('press_release_quota_used_this_month', '>', 0)
+            ->update(['press_release_quota_used_this_month' => 0]);
+
+        $this->info(sprintf('Kontingent-Verbrauch für %d User zurückgesetzt.', $affected));
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/RetireAgencyCompanyType.php

@@ -0,0 +1,119 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\CompanyType;
+use App\Models\Company;
+use App\Scopes\PortalScope;
+use Illuminate\Console\Command;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Support\Facades\Storage;
+
+/**
+ * Schafft den Firmen-Typ „Agentur" ab (dev/agentur-attribution/
+ * entwicklungsplan.md, A4): Agentur-Firmen mit PMs oder Pressekontakten
+ * werden zu normalen Firmen umtypisiert (sie sind faktisch Newsrooms),
+ * leere Agentur-Firmen werden soft-gelöscht. Nie gelöscht wird, wenn
+ * Dritte per company_user Mitglied sind oder eine Zahlungsoptions-
+ * Verknüpfung (user_payment_option_company) existiert — dann wird nur
+ * umtypisiert. Läuft im Go-Live NACH legacy:migrate-agency-names.
+ *
+ * Verwendung:
+ *   php artisan companies:retire-agency-type --dry-run
+ *   php artisan companies:retire-agency-type
+ */
+class RetireAgencyCompanyType extends Command
+{
+    protected $signature = 'companies:retire-agency-type
+                            {--dry-run : Nur anzeigen und Report schreiben, keine Firmen ändern}';
+
+    protected $description = 'Typisiert Legacy-Agentur-Firmen zu normalen Firmen um bzw. soft-löscht leere Agentur-Firmen.';
+
+    public function handle(): int
+    {
+        $dryRun = (bool) $this->option('dry-run');
+
+        if ($dryRun) {
+            $this->warn('[DRY-RUN] Kein tatsächlicher Schreibvorgang.');
+        }
+
+        $agencies = Company::withoutGlobalScope(PortalScope::class)
+            ->where('type', CompanyType::Agency)
+            ->withExists([
+                // PMs inkl. soft-gelöschter und portalfremder Datensätze —
+                // eine Firma mit irgendeiner PM-Historie bleibt Newsroom.
+                'pressReleases as has_press_releases' => fn (Builder $query) => $query->withoutGlobalScopes(),
+                'contacts as has_contacts',
+                'userPaymentOptions as has_payment_option_links',
+                // Mitgliedschaften Dritter: jeder Pivot-Eintrag, der nicht der
+                // Owner selbst ist (bei Owner-losen Firmen jeder Eintrag).
+                'users as has_third_party_members' => fn (Builder $query) => $query->where(
+                    fn (Builder $query) => $query
+                        ->whereColumn('company_user.user_id', '!=', 'companies.owner_user_id')
+                        ->orWhereNull('companies.owner_user_id'),
+                ),
+            ])
+            ->get();
+
+        $report = [
+            'generated_at' => now()->toIso8601String(),
+            'dry_run' => $dryRun,
+            'summary' => [],
+            'retyped' => [],
+            'deleted' => [],
+            'protected' => [],
+        ];
+
+        foreach ($agencies as $agency) {
+            $entry = [
+                'company_id' => $agency->id,
+                'portal' => $agency->portal?->value,
+                'name' => $agency->name,
+            ];
+
+            $isNewsroom = $agency->has_press_releases || $agency->has_contacts;
+            $isProtected = $agency->has_third_party_members || $agency->has_payment_option_links;
+
+            if (! $isNewsroom && ! $isProtected) {
+                if (! $dryRun) {
+                    $agency->delete();
+                }
+
+                $report['deleted'][] = $entry;
+
+                continue;
+            }
+
+            if (! $isNewsroom && $isProtected) {
+                $report['protected'][] = $entry + [
+                    'third_party_members' => (bool) $agency->has_third_party_members,
+                    'payment_option_links' => (bool) $agency->has_payment_option_links,
+                ];
+            }
+
+            if (! $dryRun) {
+                $agency->update(['type' => CompanyType::Company]);
+            }
+
+            $report['retyped'][] = $entry;
+        }
+
+        $report['summary'] = [
+            'agency_companies' => $agencies->count(),
+            'retyped' => count($report['retyped']),
+            'deleted' => count($report['deleted']),
+            'protected' => count($report['protected']),
+        ];
+
+        $this->table(
+            ['Agentur-Firmen', 'Umtypisiert', 'Soft-gelöscht', 'Geschützt (nur umtypisiert)'],
+            [array_values($report['summary'])],
+        );
+
+        $path = 'migration/retire-agency-type-'.now()->format('Ymd-His').'.json';
+        Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+        $this->line("Report geschrieben: storage/app/private/{$path}");
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/RunClassificationQueue.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Console\Commands;
+
+use Illuminate\Console\Command;
+
+/**
+ * Arbeitet die KI-Klassifikations-Queue zum Testen einmalig ab – ohne
+ * dauerhaft laufenden Queue-Worker.
+ *
+ * Standardmäßig werden alle anstehenden Jobs verarbeitet und der Worker
+ * beendet sich danach (--stop-when-empty). Mit --once nur ein einzelner Job.
+ */
+class RunClassificationQueue extends Command
+{
+    protected $signature = 'classification:work {--once : Nur einen einzelnen Job verarbeiten}';
+
+    protected $description = 'Verarbeitet die KI-Klassifikations-Queue einmalig (ohne Dauer-Worker).';
+
+    public function handle(): int
+    {
+        $options = [
+            '--queue' => 'classification',
+            '--tries' => 3,
+        ];
+
+        if ($this->option('once')) {
+            $options['--once'] = true;
+        } else {
+            $options['--stop-when-empty'] = true;
+        }
+
+        return $this->call('queue:work', $options);
+    }
+}

app/Console/Commands/SeedLegacyApiTestdata.php

@@ -0,0 +1,213 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\CompanyType;
+use App\Enums\PaymentOptionType;
+use App\Enums\Portal;
+use App\Enums\RegistrationType;
+use App\Enums\UserPaymentOptionStatus;
+use App\Models\Category;
+use App\Models\Company;
+use App\Models\PaymentOption;
+use App\Models\User;
+use App\Models\UserPaymentOption;
+use App\Services\Api\LegacyApiKeyImporter;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use Spatie\Permission\Models\Permission;
+
+/**
+ * Legt einen API-Testkunden nach connektar-Muster an (S4 der Paritäts-Doku
+ * dev/betrieb/api-legacy-paritaet.md): aktiver Bestandskunde mit Grandfathering,
+ * importiertem Legacy-Key, Sofort-Publish-Recht, Firma + Pressekontakt — und
+ * gibt Key + fertige curl-Sammlung für den /service-Flow aus.
+ *
+ * Idempotent: wiederholte Läufe erneuern nur den API-Key. Nur local/staging.
+ */
+class SeedLegacyApiTestdata extends Command
+{
+    protected $signature = 'legacy:seed-api-testdata
+        {--portal=businessportal24 : Portal des Testkunden (businessportal24|presseecho)}
+        {--email=api-test@pressekonto.test : E-Mail des Testkunden}';
+
+    protected $description = 'API-Testdaten nach connektar-Muster anlegen (Legacy-Key, Firma, Kontakt) + curl-Sammlung ausgeben.';
+
+    public function handle(LegacyApiKeyImporter $importer): int
+    {
+        if (app()->environment('production')) {
+            $this->error('Nur fuer local/staging — nicht in Produktion ausfuehren.');
+
+            return self::FAILURE;
+        }
+
+        $portal = (string) $this->option('portal');
+
+        if (! in_array($portal, [Portal::Businessportal24->value, Portal::Presseecho->value], true)) {
+            $this->error('Ungueltiges Portal: '.$portal);
+
+            return self::FAILURE;
+        }
+
+        $email = (string) $this->option('email');
+        $legacyId = 999901;
+
+        // 1. Testkunde: aktiver Legacy-API-User (wie connektar).
+        $user = User::query()->firstOrCreate(
+            ['email' => $email],
+            [
+                'name' => 'API Testkunde',
+                'password' => Hash::make('password'),
+                'email_verified_at' => now(),
+            ],
+        );
+        $user->forceFill([
+            'is_active' => true,
+            'portal' => $portal,
+            'legacy_portal' => $portal,
+            'legacy_id' => $legacyId,
+            'registration_type' => RegistrationType::ApiUser,
+            'agency_name' => 'API Testverteiler',
+        ])->save();
+
+        if (! $user->hasRole('customer')) {
+            $user->assignRole('customer');
+        }
+
+        // 2. Grandfathering (Bestandsschutz): macht den User API-berechtigt
+        //    und laesst das Buchungs-Gate passieren.
+        $paymentOption = PaymentOption::query()->firstOrCreate(
+            ['article_number' => 'ART-API-TEST'],
+            [
+                'type' => PaymentOptionType::cases()[0]->value,
+                'price_cents' => 0,
+                'currency' => 'EUR',
+                'interval' => 'monthly',
+                'is_hidden' => true,
+            ],
+        );
+
+        UserPaymentOption::query()->updateOrCreate(
+            ['user_id' => $user->id, 'payment_option_id' => $paymentOption->id],
+            [
+                'status' => UserPaymentOptionStatus::Grandfathered->value,
+                'grandfathered_until' => null,
+                'current_period_start' => now()->subMonth(),
+                'current_period_end' => now()->addMonths(11),
+                'stripe_subscription_id' => null,
+            ],
+        );
+
+        // 3. Sofort-Publish-Privileg (Alt-Verhalten von connektar). Die
+        // Permission defensiv anlegen — lokale DBs sind nicht immer auf dem
+        // juengsten Seeder-Stand.
+        Permission::firstOrCreate(['name' => 'api:immediate-publication']);
+
+        if (! $user->hasPermissionTo('api:immediate-publication')) {
+            $user->givePermissionTo('api:immediate-publication');
+        }
+
+        // 4. Firma + Pressekontakt (der API-Flow kann weitere anlegen).
+        $company = Company::withoutGlobalScopes()->firstOrNew(
+            ['name' => 'API Test GmbH', 'portal' => $portal],
+            [
+                'type' => CompanyType::Company->value,
+                'address' => "Teststrasse 1\n33602 Bielefeld",
+                'country_code' => 'DE',
+                'email' => 'firma@api-test.example',
+                'website' => 'https://api-test.example',
+                'is_active' => true,
+            ],
+        );
+
+        if (! $company->slug) {
+            $company->slug = $company->generateUniqueSlug($company->name);
+        }
+        $company->owner_user_id ??= $user->id;
+        $company->save();
+
+        if (! $company->users()->whereKey($user->id)->exists()) {
+            $company->users()->attach($user->id, ['role' => 'owner']);
+        }
+
+        $contact = $company->contacts()->firstOrCreate(
+            ['email' => 'presse@api-test.example'],
+            [
+                'portal' => $portal,
+                'salutation_key' => 'mr',
+                'first_name' => 'Max',
+                'last_name' => 'Mustermann',
+                'responsibility' => 'Pressestelle',
+            ],
+        );
+
+        // 5. Legacy-API-Key erneuern (wie legacy:import-api-keys).
+        $apiKey = 'test-'.Str::random(40);
+        $user->tokens()->delete();
+        $importer->import($portal, [
+            ['legacy_id' => $legacyId, 'api_key' => $apiKey],
+        ]);
+
+        $category = Category::withoutGlobalScopes()->where('is_active', true)->first();
+        $host = rtrim((string) config("domains.domains.{$portal}.url", config('app.url')), '/');
+
+        $this->info('API-Testkunde bereit.');
+        $this->table(['Feld', 'Wert'], [
+            ['Login (Panel)', $email.' / password'],
+            ['Portal', $portal],
+            ['X-ApiKey', $apiKey],
+            ['Firma', "#{$company->id} {$company->name}"],
+            ['Pressekontakt', "#{$contact->id} {$contact->first_name} {$contact->last_name}"],
+            ['Kategorie (legacy_id)', $category ? "#{$category->legacy_id}" : '— (keine aktive Kategorie!)'],
+            ['Sofort-Publish', 'ja (api:immediate-publication)'],
+        ]);
+
+        $categoryId = $category?->legacy_id ?? 1;
+
+        $this->line(<<<CURL
+
+# --- connektar-Flow (Alt-Vertrag, dev/betrieb/api-legacy-paritaet.md §1) ---
+
+# 1. Firma anlegen
+curl -s -i -X POST '{$host}/service/users/me/companies' \\
+  -H 'X-ApiKey: {$apiKey}' \\
+  -d 'company[name]=Neue Testfirma GmbH' \\
+  -d 'company[address]=Musterweg 2, 33602 Bielefeld' \\
+  -d 'company[country_id]=177' \\
+  -d 'company[email]=info@neue-testfirma.example'
+
+# 2. Pressekontakt anlegen (COMPANY_ID aus Location-Header von Schritt 1)
+curl -s -i -X POST '{$host}/service/users/me/companies/COMPANY_ID/contacts' \\
+  -H 'X-ApiKey: {$apiKey}' \\
+  -d 'contact[salutation_id]=1' \\
+  -d 'contact[first_name]=Erika' \\
+  -d 'contact[last_name]=Beispiel' \\
+  -d 'contact[email]=presse@neue-testfirma.example'
+
+# 3. PM anlegen (= einreichen; mit Sofort-Publish geht sie direkt live)
+curl -s -i -X POST '{$host}/service/pressreleases' \\
+  -H 'X-ApiKey: {$apiKey}' \\
+  -d 'press_release[company_id]={$company->id}' \\
+  -d 'press_release[category_id]={$categoryId}' \\
+  -d 'press_release[language]=de' \\
+  -d 'press_release[title]=Testmeldung ueber die Legacy-API' \\
+  -d 'press_release[text]=Dies ist eine Testmeldung aus der Legacy-API-Kompatibilitaetsschicht.' \\
+  -d 'press_release[contacts_list][]={$contact->id}'
+
+# 4. Bild hochladen (PM_ID aus Location-Header von Schritt 3)
+curl -s -i -X POST '{$host}/service/pressreleases/PM_ID/images' \\
+  -H 'X-ApiKey: {$apiKey}' \\
+  -F 'press_release_image[image]=@pressefoto.jpg' \\
+  -F 'press_release_image[copyright]=API Test GmbH'
+
+# 5. Veroeffentlichungs-Kontrolle (404 = noch nicht veroeffentlicht)
+curl -s '{$host}/service/pressreleases/PM_ID' -H 'X-ApiKey: {$apiKey}'
+CURL);
+
+        $this->newLine();
+        $this->comment('Hinweis: Schalter "KI-Pruefung Legacy-API" auf /admin/press-releases steuert Sofort-Publish vs. KI-Review.');
+
+        return self::SUCCESS;
+    }
+}

app/Console/Commands/SendGoLiveMails.php

@@ -0,0 +1,106 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Mail\GoLivePasswordReset;
+use App\Models\User;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Mail;
+use Illuminate\Support\Facades\Password;
+
+/**
+ * Sendet Go-Live-Passwort-Reset-Mails an alle aktiven User.
+ *
+ * Verwendung:
+ *   php artisan auth:send-go-live-mails --dry-run
+ *   php artisan auth:send-go-live-mails --portal=presseecho
+ *   php artisan auth:send-go-live-mails --limit=10
+ *   php artisan auth:send-go-live-mails --force
+ */
+class SendGoLiveMails extends Command
+{
+    protected $signature = 'auth:send-go-live-mails
+                            {--dry-run : Nur Anzahl ausgeben, keine Mails senden}
+                            {--portal= : Nur User eines Portals (presseecho|businessportal24|both)}
+                            {--limit=0 : Maximale Anzahl (0 = alle)}
+                            {--force : Bestätigung überspringen}';
+
+    protected $description = 'Sendet Go-Live-Passwort-Reset-Mails an alle aktiven Benutzer.';
+
+    private const EXPIRES_IN_MINUTES = 60;
+
+    public function handle(): int
+    {
+        $isDryRun = $this->option('dry-run');
+        $portal = $this->option('portal');
+        $limit = (int) $this->option('limit');
+
+        $query = User::query()
+            ->where('is_active', true)
+            ->whereNotNull('email')
+            ->when($portal, fn ($q) => $q->where('portal', $portal));
+
+        $total = $query->count();
+        $this->info("Aktive Benutzer gefunden: {$total}");
+
+        if ($portal) {
+            $this->line("  → Portal-Filter: {$portal}");
+        }
+
+        if ($limit > 0) {
+            $this->line("  → Limit: {$limit}");
+            $query->limit($limit);
+            $total = min($total, $limit);
+        }
+
+        if ($isDryRun) {
+            $this->warn("[DRY-RUN] Es würden {$total} Mails versendet. Kein tatsächlicher Versand.");
+
+            return self::SUCCESS;
+        }
+
+        if (! $this->option('force') && ! $this->confirm("Jetzt {$total} Go-Live-Mails senden?")) {
+            $this->info('Abgebrochen.');
+
+            return self::SUCCESS;
+        }
+
+        $sent = 0;
+        $failed = 0;
+
+        $bar = $this->output->createProgressBar($total);
+        $bar->start();
+
+        $query->each(function (User $user) use (&$sent, &$failed, $bar): void {
+            try {
+                $token = Password::broker()->createToken($user);
+                $resetUrl = url(route('password.reset', [
+                    'token' => $token,
+                    'email' => $user->email,
+                ], false));
+
+                Mail::to($user->email)->send(
+                    new GoLivePasswordReset($user, $resetUrl, self::EXPIRES_IN_MINUTES)
+                );
+
+                $sent++;
+            } catch (\Throwable $e) {
+                $failed++;
+                $this->newLine();
+                $this->error("Fehler für {$user->email}: {$e->getMessage()}");
+            }
+
+            $bar->advance();
+        });
+
+        $bar->finish();
+        $this->newLine(2);
+        $this->info("Versendet: {$sent}");
+
+        if ($failed > 0) {
+            $this->warn("Fehlgeschlagen: {$failed}");
+        }
+
+        return $failed > 0 ? self::FAILURE : self::SUCCESS;
+    }
+}

app/Console/Commands/SyncCompanyLogos.php

@@ -0,0 +1,160 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\Portal;
+use App\Models\Company;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class SyncCompanyLogos extends Command
+{
+    protected $signature = 'legacy:sync-company-logos
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--dry-run : Nur prüfen, nichts kopieren oder aktualisieren}
+                            {--force : Ziel-Dateien erneut überschreiben}';
+
+    protected $description = 'Kopiert referenzierte Legacy-Firmenlogos in einen sauberen Storage-Pfad und aktualisiert companies.logo_path.';
+
+    public function handle(): int
+    {
+        $portals = $this->selectedPortals();
+
+        if ($portals === []) {
+            $this->error('Ungültiges Portal. Erlaubt: presseecho, businessportal24, all.');
+
+            return self::FAILURE;
+        }
+
+        $dryRun = (bool) $this->option('dry-run');
+        $force = (bool) $this->option('force');
+        $totals = [
+            'referenced' => 0,
+            'copied' => 0,
+            'updated' => 0,
+            'already_synced' => 0,
+            'missing' => 0,
+            'unused' => 0,
+        ];
+
+        foreach ($portals as $portal) {
+            $stats = $this->syncPortal($portal, $dryRun, $force);
+
+            foreach ($totals as $key => $value) {
+                $totals[$key] = $value + $stats[$key];
+            }
+
+            $this->line(sprintf(
+                '%s: referenziert %d, kopiert %d, DB-Updates %d, bereits synchron %d, fehlend %d, ungenutzt %d',
+                $portal,
+                $stats['referenced'],
+                $stats['copied'],
+                $stats['updated'],
+                $stats['already_synced'],
+                $stats['missing'],
+                $stats['unused'],
+            ));
+        }
+
+        $this->newLine();
+        $this->info(sprintf(
+            'Gesamt: referenziert %d, kopiert %d, DB-Updates %d, bereits synchron %d, fehlend %d, ungenutzt %d%s',
+            $totals['referenced'],
+            $totals['copied'],
+            $totals['updated'],
+            $totals['already_synced'],
+            $totals['missing'],
+            $totals['unused'],
+            $dryRun ? ' (Dry-Run)' : '',
+        ));
+
+        return $totals['missing'] > 0 ? self::FAILURE : self::SUCCESS;
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function selectedPortals(): array
+    {
+        $portal = (string) $this->option('portal');
+
+        return match ($portal) {
+            'all' => [Portal::Presseecho->value, Portal::Businessportal24->value],
+            Portal::Presseecho->value, Portal::Businessportal24->value => [$portal],
+            default => [],
+        };
+    }
+
+    /**
+     * @return array{referenced:int,copied:int,updated:int,already_synced:int,missing:int,unused:int}
+     */
+    private function syncPortal(string $portal, bool $dryRun, bool $force): array
+    {
+        $sourceDirectory = "{$portal}/company";
+        $allSourceFiles = collect(Storage::disk('public')->files($sourceDirectory))
+            ->mapWithKeys(fn (string $path): array => [basename($path) => $path]);
+
+        $referencedFilenames = [];
+        $stats = [
+            'referenced' => 0,
+            'copied' => 0,
+            'updated' => 0,
+            'already_synced' => 0,
+            'missing' => 0,
+            'unused' => 0,
+        ];
+
+        Company::withoutGlobalScopes()
+            ->where('legacy_portal', $portal)
+            ->whereNotNull('logo_path')
+            ->select(['id', 'legacy_portal', 'logo_path'])
+            ->orderBy('id')
+            ->chunkById(500, function ($companies) use ($allSourceFiles, $dryRun, $force, $portal, &$referencedFilenames, &$stats): void {
+                foreach ($companies as $company) {
+                    $stats['referenced']++;
+
+                    $sourceFilename = basename((string) $company->logo_path);
+                    $referencedFilenames[$sourceFilename] = true;
+
+                    if (Str::startsWith((string) $company->logo_path, 'company-logos/')) {
+                        $stats['already_synced']++;
+
+                        continue;
+                    }
+
+                    $sourcePath = $allSourceFiles->get($sourceFilename);
+
+                    if (! $sourcePath) {
+                        $stats['missing']++;
+                        $this->warn("Fehlt: {$portal}/company/{$sourceFilename} (Company #{$company->id})");
+
+                        continue;
+                    }
+
+                    $destinationPath = "company-logos/{$portal}/{$company->id}/{$sourceFilename}";
+
+                    if (! $dryRun && ($force || ! Storage::disk('public')->exists($destinationPath))) {
+                        Storage::disk('public')->copy($sourcePath, $destinationPath);
+                        $stats['copied']++;
+                    } elseif ($dryRun || Storage::disk('public')->exists($destinationPath)) {
+                        $stats['copied'] += $dryRun ? 1 : 0;
+                    }
+
+                    if (! $dryRun) {
+                        $company->forceFill([
+                            'logo_path' => $destinationPath,
+                        ])->save();
+                    }
+
+                    $stats['updated']++;
+                }
+            });
+
+        $stats['unused'] = $allSourceFiles->keys()
+            ->reject(fn (string $filename): bool => isset($referencedFilenames[$filename]))
+            ->count();
+
+        return $stats;
+    }
+}

app/Console/Commands/SyncPressReleaseImages.php

@@ -0,0 +1,235 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\Portal;
+use App\Models\PressReleaseImage;
+use App\Services\Image\ImageService;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class SyncPressReleaseImages extends Command
+{
+    protected $signature = 'legacy:sync-press-release-images
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--dry-run : Nur prüfen, nichts kopieren oder aktualisieren}
+                            {--force : Ziel-Dateien erneut überschreiben}
+                            {--skip-variants : Varianten nicht regenerieren (nur Datei-Kopie + DB-Update)}
+                            {--limit=0 : Maximal N Bilder pro Portal verarbeiten (0 = alle)}';
+
+    protected $description = 'Kopiert referenzierte Legacy-PM-Bilder in den finalen Storage-Pfad, generiert Varianten und aktualisiert press_release_images.';
+
+    public function __construct(private readonly ImageService $imageService)
+    {
+        parent::__construct();
+    }
+
+    public function handle(): int
+    {
+        $portals = $this->selectedPortals();
+
+        if ($portals === []) {
+            $this->error('Ungültiges Portal. Erlaubt: presseecho, businessportal24, all.');
+
+            return self::FAILURE;
+        }
+
+        $dryRun = (bool) $this->option('dry-run');
+        $force = (bool) $this->option('force');
+        $skipVariants = (bool) $this->option('skip-variants');
+        $limit = max(0, (int) $this->option('limit'));
+
+        $totals = [
+            'referenced' => 0,
+            'copied' => 0,
+            'variants_generated' => 0,
+            'updated' => 0,
+            'already_synced' => 0,
+            'missing' => 0,
+            'unused' => 0,
+        ];
+
+        foreach ($portals as $portal) {
+            $stats = $this->syncPortal($portal, $dryRun, $force, $skipVariants, $limit);
+
+            foreach ($totals as $key => $value) {
+                $totals[$key] = $value + $stats[$key];
+            }
+
+            $this->line(sprintf(
+                '%s: referenziert %d, kopiert %d, Varianten %d, DB-Updates %d, bereits synchron %d, fehlend %d, ungenutzt %d',
+                $portal,
+                $stats['referenced'],
+                $stats['copied'],
+                $stats['variants_generated'],
+                $stats['updated'],
+                $stats['already_synced'],
+                $stats['missing'],
+                $stats['unused'],
+            ));
+        }
+
+        $this->newLine();
+        $this->info(sprintf(
+            'Gesamt: referenziert %d, kopiert %d, Varianten %d, DB-Updates %d, bereits synchron %d, fehlend %d, ungenutzt %d%s',
+            $totals['referenced'],
+            $totals['copied'],
+            $totals['variants_generated'],
+            $totals['updated'],
+            $totals['already_synced'],
+            $totals['missing'],
+            $totals['unused'],
+            $dryRun ? ' (Dry-Run)' : '',
+        ));
+
+        return $totals['missing'] > 0 ? self::FAILURE : self::SUCCESS;
+    }
+
+    /**
+     * @return list<string>
+     */
+    private function selectedPortals(): array
+    {
+        $portal = (string) $this->option('portal');
+
+        return match ($portal) {
+            'all' => [Portal::Presseecho->value, Portal::Businessportal24->value],
+            Portal::Presseecho->value, Portal::Businessportal24->value => [$portal],
+            default => [],
+        };
+    }
+
+    /**
+     * @return array{referenced:int,copied:int,variants_generated:int,updated:int,already_synced:int,missing:int,unused:int}
+     */
+    private function syncPortal(string $portal, bool $dryRun, bool $force, bool $skipVariants, int $limit): array
+    {
+        $sourceDirectory = "{$portal}/press_release";
+        $allSourceFiles = collect(Storage::disk('public')->files($sourceDirectory))
+            ->mapWithKeys(fn (string $path): array => [basename($path) => $path]);
+
+        $referencedFilenames = [];
+        $stats = [
+            'referenced' => 0,
+            'copied' => 0,
+            'variants_generated' => 0,
+            'updated' => 0,
+            'already_synced' => 0,
+            'missing' => 0,
+            'unused' => 0,
+        ];
+
+        $query = PressReleaseImage::withoutGlobalScopes()
+            ->where('legacy_portal', $portal)
+            ->whereNotNull('path')
+            ->select(['id', 'press_release_id', 'legacy_portal', 'path', 'variants'])
+            ->orderBy('id');
+
+        $processed = 0;
+        $reachLimit = false;
+
+        $query->chunkById(500, function ($images) use (
+            $allSourceFiles, $dryRun, $force, $skipVariants, $portal, $limit,
+            &$referencedFilenames, &$stats, &$processed, &$reachLimit,
+        ): bool {
+            foreach ($images as $image) {
+                if ($reachLimit) {
+                    return false;
+                }
+
+                $stats['referenced']++;
+                $sourceFilename = basename((string) $image->path);
+                $referencedFilenames[$sourceFilename] = true;
+
+                if (Str::startsWith((string) $image->path, 'press-releases/')) {
+                    $stats['already_synced']++;
+
+                    if (! $skipVariants && (! is_array($image->variants) || $image->variants === [])) {
+                        if (! $dryRun) {
+                            $variants = $this->imageService->generateMissingPressReleaseVariants($image->path);
+
+                            if ($variants !== []) {
+                                $image->forceFill(['variants' => $variants])->save();
+                                $stats['variants_generated']++;
+                                $stats['updated']++;
+                            }
+                        } else {
+                            $stats['variants_generated']++;
+                        }
+                    }
+
+                    $processed++;
+
+                    if ($limit > 0 && $processed >= $limit) {
+                        $reachLimit = true;
+
+                        return false;
+                    }
+
+                    continue;
+                }
+
+                $sourcePath = $allSourceFiles->get($sourceFilename);
+
+                if (! $sourcePath) {
+                    $stats['missing']++;
+                    $this->warn("Fehlt: {$portal}/press_release/{$sourceFilename} (Image #{$image->id})");
+
+                    continue;
+                }
+
+                $destinationPath = "press-releases/{$image->press_release_id}/images/{$sourceFilename}";
+
+                if (! $dryRun) {
+                    if ($force || ! Storage::disk('public')->exists($destinationPath)) {
+                        Storage::disk('public')->copy($sourcePath, $destinationPath);
+                        $stats['copied']++;
+                    }
+                } else {
+                    $stats['copied']++;
+                }
+
+                $variants = [];
+                if (! $skipVariants && ! $dryRun) {
+                    $variants = $this->imageService->generateMissingPressReleaseVariants($destinationPath);
+
+                    if ($variants !== []) {
+                        $stats['variants_generated']++;
+                    }
+                } elseif (! $skipVariants && $dryRun) {
+                    $stats['variants_generated']++;
+                }
+
+                if (! $dryRun) {
+                    $size = @getimagesize(Storage::disk('public')->path($destinationPath)) ?: [null, null];
+
+                    $image->forceFill([
+                        'disk' => 'public',
+                        'path' => $destinationPath,
+                        'variants' => $variants !== [] ? $variants : $image->variants,
+                        'width' => is_int($size[0] ?? null) ? $size[0] : $image->width,
+                        'height' => is_int($size[1] ?? null) ? $size[1] : $image->height,
+                    ])->save();
+                }
+
+                $stats['updated']++;
+                $processed++;
+
+                if ($limit > 0 && $processed >= $limit) {
+                    $reachLimit = true;
+
+                    return false;
+                }
+            }
+
+            return true;
+        });
+
+        $stats['unused'] = $allSourceFiles->keys()
+            ->reject(fn (string $filename): bool => isset($referencedFilenames[$filename]))
+            ->count();
+
+        return $stats;
+    }
+}

app/Console/Commands/SyncStripePlans.php

@@ -0,0 +1,166 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\Plan;
+use Illuminate\Console\Command;
+use Laravel\Cashier\Cashier;
+
+/**
+ * Legt die Tarife aus `plans` als Produkte/Preise in Stripe an und pflegt
+ * die Stripe-IDs zurück (Phase 9E).
+ *
+ * Preise sind NETTO (`tax_behavior: exclusive`) — die Steuer wird im
+ * Checkout ergänzt (Entscheidung 12.06.2026). Idempotent: vorhandene
+ * IDs werden übersprungen; Preisänderungen erzeugen in Stripe bewusst
+ * neue Price-Objekte (Stripe-Preise sind unveränderlich), der alte Preis
+ * bleibt für Bestandsabos gültig.
+ */
+class SyncStripePlans extends Command
+{
+    protected $signature = 'billing:sync-stripe-plans
+                            {--dry-run : Nur anzeigen, was angelegt würde}';
+
+    protected $description = 'Synchronisiert die Tarife aus plans als Netto-Produkte/Preise nach Stripe';
+
+    public function handle(): int
+    {
+        if (! config('cashier.secret')) {
+            $this->error('STRIPE_SECRET ist nicht gesetzt.');
+
+            return self::FAILURE;
+        }
+
+        $dryRun = (bool) $this->option('dry-run');
+        $stripe = Cashier::stripe();
+
+        foreach (Plan::query()->active()->get() as $plan) {
+            if ($plan->stripe_product_id && $plan->stripe_price_id_monthly && $plan->stripe_price_id_yearly) {
+                // Preise sind unveränderlich, der Produktname nicht: Er wird
+                // bei jedem Lauf nachgezogen, damit Stripe-Belege den
+                // sprechenden Namen tragen (statt z. B. nur "Starter").
+                if ($dryRun) {
+                    $this->line("[dry-run] {$plan->slug}: verknüpft — Produktname auf \"{$this->stripeProductName($plan)}\" aktualisieren.");
+
+                    continue;
+                }
+
+                $stripe->products->update($plan->stripe_product_id, [
+                    'name' => $this->stripeProductName($plan),
+                ]);
+
+                $this->line("{$plan->slug}: verknüpft — Produktname aktualisiert.");
+
+                continue;
+            }
+
+            if ($dryRun) {
+                $this->line(sprintf(
+                    '[dry-run] %s: Produkt + Preise %s €/Monat, %s €/Jahr (netto) anlegen.',
+                    $plan->slug,
+                    number_format($plan->monthly_price_cents / 100, 2, ',', '.'),
+                    number_format($plan->yearly_price_cents / 100, 2, ',', '.'),
+                ));
+
+                continue;
+            }
+
+            $productId = $plan->stripe_product_id;
+
+            if (! $productId) {
+                $product = $stripe->products->create([
+                    'name' => $this->stripeProductName($plan),
+                    'metadata' => ['plan_slug' => $plan->slug],
+                ]);
+                $productId = $product->id;
+            }
+
+            $monthlyId = $plan->stripe_price_id_monthly
+                ?: $this->createPrice($stripe, $productId, $plan, $plan->monthly_price_cents, 'month');
+
+            $yearlyId = $plan->stripe_price_id_yearly
+                ?: $this->createPrice($stripe, $productId, $plan, $plan->yearly_price_cents, 'year');
+
+            $plan->update([
+                'stripe_product_id' => $productId,
+                'stripe_price_id_monthly' => $monthlyId,
+                'stripe_price_id_yearly' => $yearlyId,
+            ]);
+
+            $this->info("{$plan->slug}: {$productId} · monatlich {$monthlyId} · jährlich {$yearlyId}");
+        }
+
+        $this->syncSinglePmPrice($stripe, $dryRun);
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * Legt das Einmal-Produkt „Einzel-Pressemitteilung" an (Netto-Preis aus
+     * billing.single_pm_price_cents). Die Price-ID landet bewusst in der ENV
+     * (STRIPE_PRICE_SINGLE_PM) statt in einer Tabelle — es gibt genau einen
+     * solchen Preis, und ohne ENV bleibt der Checkout deaktiviert.
+     */
+    private function syncSinglePmPrice(object $stripe, bool $dryRun): void
+    {
+        if (config('billing.single_pm_stripe_price_id')) {
+            $this->line('einzel-pm: bereits verknüpft (STRIPE_PRICE_SINGLE_PM), übersprungen.');
+
+            return;
+        }
+
+        $amount = (int) config('billing.single_pm_price_cents');
+
+        if ($dryRun) {
+            $this->line(sprintf(
+                '[dry-run] einzel-pm: Einmal-Produkt + Preis %s € (netto) anlegen.',
+                number_format($amount / 100, 2, ',', '.'),
+            ));
+
+            return;
+        }
+
+        $product = $stripe->products->create([
+            'name' => 'Einzel-Pressemitteilung',
+            'metadata' => ['purpose' => 'single_pm'],
+        ]);
+
+        $price = $stripe->prices->create([
+            'product' => $product->id,
+            'currency' => strtolower((string) config('billing.default_currency')),
+            'unit_amount' => $amount,
+            'tax_behavior' => 'exclusive',
+            'metadata' => ['purpose' => 'single_pm'],
+        ]);
+
+        $this->info("einzel-pm: {$product->id} · {$price->id}");
+        $this->warn("Bitte in die .env eintragen: STRIPE_PRICE_SINGLE_PM={$price->id}");
+    }
+
+    /**
+     * Sprechender Produktname für Stripe-Belege: Auf Rechnung und
+     * Checkout-Seite erscheint sonst nur der nackte Tarifname.
+     */
+    private function stripeProductName(Plan $plan): string
+    {
+        return sprintf(
+            'Tarif %s — %d Pressemitteilungen/Monat (pressekonto)',
+            $plan->name,
+            $plan->press_release_quota,
+        );
+    }
+
+    private function createPrice(object $stripe, string $productId, Plan $plan, int $unitAmount, string $interval): string
+    {
+        $price = $stripe->prices->create([
+            'product' => $productId,
+            'currency' => strtolower($plan->currency),
+            'unit_amount' => $unitAmount,
+            'tax_behavior' => 'exclusive',
+            'recurring' => ['interval' => $interval],
+            'metadata' => ['plan_slug' => $plan->slug],
+        ]);
+
+        return $price->id;
+    }
+}

app/Console/Commands/VerifyLegacyImport.php

@@ -0,0 +1,408 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Enums\Portal;
+use Illuminate\Console\Command;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+
+class VerifyLegacyImport extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'legacy:verify
+                            {--portal=all : Portal (presseecho|businessportal24|all)}
+                            {--skip-legacy : Legacy-DB-Checks überspringen}
+                            {--no-report : Keinen JSON-Report schreiben}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Verifiziert den Legacy-Import und schreibt einen maschinenlesbaren Report.';
+
+    private const PORTAL_CONNECTIONS = [
+        'presseecho' => 'mysql_presseecho',
+        'businessportal24' => 'mysql_businessportal',
+    ];
+
+    private const ENTITY_MAP = [
+        'users' => [
+            'legacy_table' => 'sf_guard_user',
+            'target_table' => 'users',
+            'target_column' => 'legacy_id',
+        ],
+        'companies' => [
+            'legacy_table' => 'company',
+            'target_table' => 'companies',
+            'target_column' => 'legacy_id',
+        ],
+        'contacts' => [
+            'legacy_table' => 'contact',
+            'target_table' => 'contacts',
+            'target_column' => 'legacy_id',
+        ],
+        'categories' => [
+            'legacy_table' => 'category',
+            'target_table' => 'categories',
+            'target_column' => 'legacy_id',
+        ],
+        'press_releases' => [
+            'legacy_table' => 'press_release',
+            'target_table' => 'press_releases',
+            'target_column' => 'legacy_id',
+        ],
+    ];
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(): int
+    {
+        $portalOption = (string) $this->option('portal');
+        $skipLegacy = (bool) $this->option('skip-legacy');
+
+        $portals = $portalOption === 'all'
+            ? array_keys(self::PORTAL_CONNECTIONS)
+            : [$portalOption];
+
+        if (array_diff($portals, array_keys(self::PORTAL_CONNECTIONS)) !== []) {
+            $this->error("Unbekanntes Portal: {$portalOption}");
+
+            return self::FAILURE;
+        }
+
+        $report = [
+            'generated_at' => now()->toIso8601String(),
+            'portal' => $portalOption,
+            'skip_legacy' => $skipLegacy,
+            'checks' => [],
+            'summary' => [
+                'failures' => 0,
+                'warnings' => 0,
+            ],
+        ];
+
+        $this->info('Legacy-Import-Verifikation');
+        $this->newLine();
+
+        if (! $skipLegacy) {
+            $this->verifyLegacyCounts($report, $portals);
+            $this->verifyLegacyInvoices($report, $portals);
+        } else {
+            $this->warn('Legacy-DB-Checks werden übersprungen.');
+        }
+
+        $this->verifyImportMapTargets($report, $portals);
+        $this->verifyTargetForeignKeys($report);
+        $this->verifyUserMerges($report);
+        $this->verifyGrandfatheredSubscriptions($report);
+
+        $this->renderSummary($report);
+
+        if (! (bool) $this->option('no-report')) {
+            $path = 'migration/verify-'.now()->format('Ymd-His').'.json';
+            Storage::disk('local')->put($path, json_encode($report, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            $this->line("Report geschrieben: storage/app/private/{$path}");
+        }
+
+        return $report['summary']['failures'] > 0 ? self::FAILURE : self::SUCCESS;
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     * @param  list<string>  $portals
+     */
+    private function verifyLegacyCounts(array &$report, array $portals): void
+    {
+        $rows = [];
+
+        foreach ($portals as $portal) {
+            foreach (self::ENTITY_MAP as $entity => $config) {
+                $legacyCount = $this->legacyCount($portal, $config['legacy_table']);
+                $targetCount = DB::table($config['target_table'])
+                    ->where('legacy_portal', $portal)
+                    ->whereNotNull($config['target_column'])
+                    ->count();
+                $mappedCount = DB::table('legacy_import_map')
+                    ->where('legacy_portal', $portal)
+                    ->where('legacy_table', $config['legacy_table'])
+                    ->where('target_table', $config['target_table'])
+                    ->count();
+
+                $rows[] = [
+                    'portal' => $portal,
+                    'entity' => $entity,
+                    'legacy_count' => $legacyCount,
+                    'target_count' => $targetCount,
+                    'mapped_count' => $mappedCount,
+                    'delta' => $legacyCount - $targetCount,
+                ];
+            }
+        }
+
+        $this->addCheck($report, 'legacy_counts', 'ok', 'Legacy- und Ziel-Counts erfasst.', $rows);
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     * @param  list<string>  $portals
+     */
+    private function verifyLegacyInvoices(array &$report, array $portals): void
+    {
+        $rows = [];
+        $failures = 0;
+
+        foreach ($portals as $portal) {
+            $legacy = DB::connection(self::PORTAL_CONNECTIONS[$portal])
+                ->table('invoice')
+                ->selectRaw('COUNT(*) as count, COALESCE(SUM(amount), 0) as amount')
+                ->first();
+
+            $target = DB::table('legacy_invoices')
+                ->where('legacy_portal', $portal)
+                ->selectRaw('COUNT(*) as count, COALESCE(SUM(amount_cents), 0) as amount_cents')
+                ->first();
+
+            $legacyAmountCents = (int) round((float) $legacy->amount * 100);
+            $targetAmountCents = (int) $target->amount_cents;
+            $countDelta = (int) $legacy->count - (int) $target->count;
+            $amountDelta = $legacyAmountCents - $targetAmountCents;
+
+            if ($countDelta !== 0 || $amountDelta !== 0) {
+                $failures++;
+            }
+
+            $rows[] = [
+                'portal' => $portal,
+                'legacy_count' => (int) $legacy->count,
+                'target_count' => (int) $target->count,
+                'count_delta' => $countDelta,
+                'legacy_amount_cents' => $legacyAmountCents,
+                'target_amount_cents' => $targetAmountCents,
+                'amount_delta_cents' => $amountDelta,
+            ];
+        }
+
+        $this->addCheck(
+            $report,
+            'legacy_invoices',
+            $failures === 0 ? 'ok' : 'fail',
+            $failures === 0 ? 'Legacy-Rechnungen stimmen mit dem Archiv überein.' : 'Legacy-Rechnungsarchiv weicht von der Quelle ab.',
+            $rows,
+        );
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     * @param  list<string>  $portals
+     */
+    private function verifyImportMapTargets(array &$report, array $portals): void
+    {
+        $rows = [];
+        $failures = 0;
+
+        foreach (self::ENTITY_MAP as $entity => $config) {
+            foreach ($portals as $portal) {
+                $missingTargets = DB::table('legacy_import_map as map')
+                    ->leftJoin($config['target_table'].' as target', 'target.id', '=', 'map.target_id')
+                    ->where('map.legacy_portal', $portal)
+                    ->where('map.legacy_table', $config['legacy_table'])
+                    ->where('map.target_table', $config['target_table'])
+                    ->whereNull('target.id')
+                    ->count();
+
+                if ($missingTargets > 0) {
+                    $failures++;
+                }
+
+                $rows[] = [
+                    'portal' => $portal,
+                    'entity' => $entity,
+                    'missing_targets' => $missingTargets,
+                ];
+            }
+        }
+
+        $this->addCheck(
+            $report,
+            'import_map_targets',
+            $failures === 0 ? 'ok' : 'fail',
+            $failures === 0 ? 'Alle Import-Map-Ziele existieren.' : 'Import-Map enthält verwaiste Ziel-IDs.',
+            $rows,
+        );
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     */
+    private function verifyTargetForeignKeys(array &$report): void
+    {
+        $checks = [
+            'companies.owner_user_id' => DB::table('companies as c')
+                ->leftJoin('users as u', 'u.id', '=', 'c.owner_user_id')
+                ->whereNotNull('c.owner_user_id')
+                ->whereNull('u.id'),
+            'contacts.company_id' => DB::table('contacts as c')
+                ->leftJoin('companies as co', 'co.id', '=', 'c.company_id')
+                ->whereNull('co.id'),
+            'press_releases.user_id' => DB::table('press_releases as pr')
+                ->leftJoin('users as u', 'u.id', '=', 'pr.user_id')
+                ->whereNull('u.id'),
+            'press_releases.company_id' => DB::table('press_releases as pr')
+                ->leftJoin('companies as c', 'c.id', '=', 'pr.company_id')
+                ->whereNotNull('pr.company_id')
+                ->whereNull('c.id'),
+            'press_releases.category_id' => DB::table('press_releases as pr')
+                ->leftJoin('categories as c', 'c.id', '=', 'pr.category_id')
+                ->whereNull('c.id'),
+            'company_user.company_id' => DB::table('company_user as pivot')
+                ->leftJoin('companies as c', 'c.id', '=', 'pivot.company_id')
+                ->whereNull('c.id'),
+            'company_user.user_id' => DB::table('company_user as pivot')
+                ->leftJoin('users as u', 'u.id', '=', 'pivot.user_id')
+                ->whereNull('u.id'),
+            'contact_user.contact_id' => DB::table('contact_user as pivot')
+                ->leftJoin('contacts as c', 'c.id', '=', 'pivot.contact_id')
+                ->whereNull('c.id'),
+            'contact_user.user_id' => DB::table('contact_user as pivot')
+                ->leftJoin('users as u', 'u.id', '=', 'pivot.user_id')
+                ->whereNull('u.id'),
+            'press_release_contact.press_release_id' => DB::table('press_release_contact as pivot')
+                ->leftJoin('press_releases as pr', 'pr.id', '=', 'pivot.press_release_id')
+                ->whereNull('pr.id'),
+            'press_release_contact.contact_id' => DB::table('press_release_contact as pivot')
+                ->leftJoin('contacts as c', 'c.id', '=', 'pivot.contact_id')
+                ->whereNull('c.id'),
+            'legacy_invoices.user_id' => DB::table('legacy_invoices as li')
+                ->leftJoin('users as u', 'u.id', '=', 'li.user_id')
+                ->whereNotNull('li.user_id')
+                ->whereNull('u.id'),
+        ];
+
+        $rows = [];
+        $failures = 0;
+
+        foreach ($checks as $name => $query) {
+            $count = $query->count();
+
+            if ($count > 0) {
+                $failures++;
+            }
+
+            $rows[] = [
+                'relation' => $name,
+                'dangling_count' => $count,
+            ];
+        }
+
+        $this->addCheck(
+            $report,
+            'target_foreign_keys',
+            $failures === 0 ? 'ok' : 'fail',
+            $failures === 0 ? 'Keine verwaisten Ziel-Foreign-Keys gefunden.' : 'Zieltabellen enthalten verwaiste Foreign Keys.',
+            $rows,
+        );
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     */
+    private function verifyUserMerges(array &$report): void
+    {
+        $bothUsers = DB::table('users')
+            ->where('portal', Portal::Both->value)
+            ->count();
+
+        $importMapsForBothUsers = DB::table('legacy_import_map as map')
+            ->join('users as users', 'users.id', '=', 'map.target_id')
+            ->where('map.legacy_table', 'sf_guard_user')
+            ->where('map.target_table', 'users')
+            ->where('users.portal', Portal::Both->value)
+            ->count();
+
+        $this->addCheck($report, 'user_merges', 'ok', 'Portalübergreifende User-Merges erfasst.', [
+            'users_with_portal_both' => $bothUsers,
+            'legacy_maps_to_portal_both_users' => $importMapsForBothUsers,
+        ]);
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     */
+    private function verifyGrandfatheredSubscriptions(array &$report): void
+    {
+        $rows = DB::table('user_payment_options')
+            ->selectRaw('status, COUNT(*) as count, MIN(grandfathered_until) as earliest_grandfathered_until, MAX(grandfathered_until) as latest_grandfathered_until')
+            ->where('status', 'grandfathered')
+            ->groupBy('status')
+            ->get()
+            ->map(fn (object $row): array => [
+                'status' => $row->status,
+                'count' => (int) $row->count,
+                'earliest_grandfathered_until' => $row->earliest_grandfathered_until,
+                'latest_grandfathered_until' => $row->latest_grandfathered_until,
+            ])
+            ->all();
+
+        $this->addCheck($report, 'grandfathered_subscriptions', 'ok', 'Grandfathered Subscriptions erfasst.', $rows);
+    }
+
+    private function legacyCount(string $portal, string $table): int
+    {
+        return DB::connection(self::PORTAL_CONNECTIONS[$portal])
+            ->table($table)
+            ->count();
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     * @param  array<mixed>  $details
+     */
+    private function addCheck(array &$report, string $name, string $status, string $message, array $details): void
+    {
+        $report['checks'][$name] = [
+            'status' => $status,
+            'message' => $message,
+            'details' => $details,
+        ];
+
+        if ($status === 'fail') {
+            $report['summary']['failures']++;
+        }
+
+        if ($status === 'warning') {
+            $report['summary']['warnings']++;
+        }
+    }
+
+    /**
+     * @param  array<string, mixed>  $report
+     */
+    private function renderSummary(array $report): void
+    {
+        foreach ($report['checks'] as $name => $check) {
+            $status = match ($check['status']) {
+                'ok' => '<info>OK</info>',
+                'warning' => '<comment>WARN</comment>',
+                default => '<error>FAIL</error>',
+            };
+
+            $this->line("{$status} {$name}: {$check['message']}");
+        }
+
+        $this->newLine();
+        $this->table(
+            ['Status', 'Anzahl'],
+            [
+                ['Fehler', $report['summary']['failures']],
+                ['Warnungen', $report['summary']['warnings']],
+            ],
+        );
+    }
+}

app/Console/Kernel.php

@@ -1,36 +0,0 @@
-<?php
-
-namespace App\Console;
-
-use Illuminate\Console\Scheduling\Schedule;
-use Illuminate\Foundation\Console\Kernel as ConsoleKernel;
-
-class Kernel extends ConsoleKernel
-{
-    /**
-     * The Artisan commands provided by your application.
-     *
-     * @var array
-     */
-    protected $commands = [
-        \App\Console\Commands\GenerateDomainFavicons::class,
-    ];
-
-    /**
-     * Define the application's command schedule.
-     */
-    protected function schedule(Schedule $schedule): void
-    {
-        // $schedule->command('inspire')->hourly();
-    }
-
-    /**
-     * Register the commands for the application.
-     */
-    protected function commands(): void
-    {
-        $this->load(__DIR__.'/Commands');
-
-        require base_path('routes/console.php');
-    }
-}

app/Contracts/NewsletterSyncClient.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Contracts;
+
+use App\Models\NewsletterSubscription;
+
+interface NewsletterSyncClient
+{
+    public function subscribe(NewsletterSubscription $subscription): void;
+
+    public function unsubscribe(NewsletterSubscription $subscription): void;
+}

app/Enums/ActivityType.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Ereignistypen des Aktivitäts-Verlaufs (Admin ▸ Reports ▸ Verlauf).
+ * Jeder Typ entspricht einem fachlichen Systemereignis; Details stecken
+ * in description/meta des ActivityEvent.
+ */
+enum ActivityType: string
+{
+    case UserRegistered = 'user_registered';
+    case UserLoggedIn = 'user_logged_in';
+    case PressReleaseStatus = 'press_release_status';
+    case BookingPaid = 'booking_paid';
+    case CreditTopup = 'credit_topup';
+    case ContactRequest = 'contact_request';
+    case LegalRequest = 'legal_request';
+    case WithdrawalRequest = 'withdrawal_request';
+    case TerminationRequest = 'termination_request';
+    case NewsletterSubscription = 'newsletter_subscription';
+    case SubscriptionChange = 'subscription_change';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::UserRegistered => 'Registrierung',
+            self::UserLoggedIn => 'Anmeldung',
+            self::PressReleaseStatus => 'Pressemitteilung',
+            self::BookingPaid => 'Zahlung',
+            self::CreditTopup => 'Credit-Aufladung',
+            self::ContactRequest => 'Kontaktanfrage',
+            self::LegalRequest => 'Rechtsanfrage',
+            self::WithdrawalRequest => 'Widerruf',
+            self::TerminationRequest => 'Kündigung',
+            self::NewsletterSubscription => 'Newsletter',
+            self::SubscriptionChange => 'Abo',
+        };
+    }
+
+    /**
+     * Flux-Badge-Farbe in der Verlauf-Tabelle.
+     */
+    public function badgeColor(): string
+    {
+        return match ($this) {
+            self::UserRegistered => 'green',
+            self::UserLoggedIn => 'zinc',
+            self::PressReleaseStatus => 'blue',
+            self::BookingPaid, self::CreditTopup => 'amber',
+            self::ContactRequest, self::NewsletterSubscription => 'cyan',
+            self::LegalRequest, self::WithdrawalRequest, self::TerminationRequest, self::SubscriptionChange => 'red',
+        };
+    }
+}

app/Enums/AiImageDeclaration.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Selbst-Deklaration des KI-Einsatzes je PM-Bild (Art. 50 Abs. 4 KI-VO).
+ *
+ * Pflichtauswahl beim Bild-Upload (Decision-Update KI-Kennzeichnung,
+ * 08.07.2026). Bewusste Über-Erfüllung: gelabelt wird jedes deklarierte
+ * KI-Bild — auch stilisiert/abstrakt, nicht nur fotorealistische Deepfakes.
+ */
+enum AiImageDeclaration: string
+{
+    case Original = 'original';
+    case AiGenerated = 'ai_generated';
+    case AiEdited = 'ai_edited';
+
+    /**
+     * Wortlaut der Auswahloption im Upload-Formular.
+     */
+    public function label(): string
+    {
+        return match ($this) {
+            self::Original => __('Originalfoto'),
+            self::AiGenerated => __('KI-generiertes Bild'),
+            self::AiEdited => __('KI-bearbeitetes Bild'),
+        };
+    }
+
+    /**
+     * Öffentlicher Bildhinweis direkt am Bild (Badge) — null bei Originalfotos
+     * (keine Nicht-KI-Zertifizierung in Portalstimme). Kurzform „KI-generiert"
+     * statt Satz-Wortlaut (User-Entscheidung 10.07.2026).
+     */
+    public function publicLabel(): ?string
+    {
+        return match ($this) {
+            self::Original => null,
+            self::AiGenerated => __('KI-generiert'),
+            self::AiEdited => __('KI-bearbeitet'),
+        };
+    }
+
+    /**
+     * Optionsliste für Radios/Selects: value => label.
+     *
+     * @return array<string, string>
+     */
+    public static function options(): array
+    {
+        $options = [];
+
+        foreach (self::cases() as $case) {
+            $options[$case->value] = $case->label();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @return list<string>
+     */
+    public static function values(): array
+    {
+        return array_column(self::cases(), 'value');
+    }
+}

app/Enums/AiTextDeclaration.php

@@ -0,0 +1,94 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Selbst-Deklaration des KI-Einsatzes beim PM-Text (Art. 50 Abs. 4 KI-VO).
+ *
+ * Pflichtauswahl im Submit-Flow (Decision-Update KI-Kennzeichnung, 08.07.2026;
+ * vereinfacht auf zwei Auswahloptionen, 10.07.2026): gelabelt wird allein nach
+ * dem deklarierten KI-Grad, nicht nach der Public-Interest-Frage — bewusste
+ * Über-Erfüllung. Das öffentliche Label spricht in Einreicher-Stimme, nie in
+ * Portalstimme.
+ *
+ * Alle vier Werte bleiben gültig (API-Vertrag v1 + Bestandsdaten); UI und
+ * Label-Logik fassen sie zu zwei Gruppen zusammen: None/Assisted = kein Label,
+ * MostlyAi/FullyAi = KI-Label.
+ */
+enum AiTextDeclaration: string
+{
+    case None = 'none';
+    case Assisted = 'assisted';
+    case MostlyAi = 'mostly_ai';
+    case FullyAi = 'fully_ai';
+
+    /**
+     * Wortlaut der Auswahloption im Submit-Flow (zwei Gruppen).
+     */
+    public function label(): string
+    {
+        return match ($this) {
+            self::None, self::Assisted => __('Ohne generative KI erstellt – oder KI nur als Formulierungshilfe, mit anschließender menschlicher Überarbeitung und Verantwortung.'),
+            self::MostlyAi, self::FullyAi => __('Ganz oder überwiegend mit generativer KI erstellt.'),
+        };
+    }
+
+    /**
+     * Öffentliches Label in Einreicher-Stimme — null, wenn kein Pflicht-Label
+     * fällig ist ("Ohne KI" wird bewusst nicht als Portal-Aussage zertifiziert,
+     * die Formulierungshilfe entspricht dem Entlastungsfall).
+     */
+    public function publicLabel(): ?string
+    {
+        return match ($this) {
+            self::None, self::Assisted => null,
+            self::MostlyAi, self::FullyAi => __('KI-generiert: Nach Angaben des einreichenden Unternehmens wurde diese Pressemitteilung ganz oder überwiegend mit generativer KI erstellt.'),
+        };
+    }
+
+    /**
+     * Kanonische Formular-Option der Gruppe — mappt Alt-/API-Werte
+     * (assisted, fully_ai) auf die zwei im Modal angebotenen Radios.
+     */
+    public function formOption(): self
+    {
+        return match ($this) {
+            self::None, self::Assisted => self::None,
+            self::MostlyAi, self::FullyAi => self::MostlyAi,
+        };
+    }
+
+    /**
+     * Die zwei im Submit-Modal angebotenen Auswahloptionen.
+     *
+     * @return list<self>
+     */
+    public static function formCases(): array
+    {
+        return [self::None, self::MostlyAi];
+    }
+
+    /**
+     * Optionsliste für Radios/Selects: value => label.
+     *
+     * @return array<string, string>
+     */
+    public static function options(): array
+    {
+        $options = [];
+
+        foreach (self::cases() as $case) {
+            $options[$case->value] = $case->label();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @return list<string>
+     */
+    public static function values(): array
+    {
+        return array_column(self::cases(), 'value');
+    }
+}

app/Enums/BoostPlacement.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Platzierungs-Stufe eines Boosts (Entscheidung 13.07.2026): der
+ * Startseiten-Boost (voller Preis) erscheint auf Startseite UND Branchenseite,
+ * der Kategorie-Boost (halber Preis) nur auf der Branchenseite. Beide Stufen
+ * haben ein eigenes Slot-Inventar je Ausgabe (config credits.boost_slots).
+ */
+enum BoostPlacement: string
+{
+    case Home = 'home';
+    case Category = 'category';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Home => 'Startseiten-Boost',
+            self::Category => 'Kategorie-Boost',
+        };
+    }
+
+    /**
+     * Wo die Platzierung sichtbar ist (für Add-on-UI und Kauf-Mails).
+     */
+    public function placementDescription(): string
+    {
+        return match ($this) {
+            self::Home => 'Startseite und Branchenseite',
+            self::Category => 'Branchenseite der Rubrik',
+        };
+    }
+}

app/Enums/CompanyType.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Enums;
+
+enum CompanyType: string
+{
+    case Company = 'company';
+    case Agency = 'agency';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Company => 'Unternehmen',
+            self::Agency => 'Agentur',
+        };
+    }
+}

app/Enums/ContactMessageStatus.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Enums;
+
+enum ContactMessageStatus: string
+{
+    case Open = 'open';
+    case InProgress = 'in_progress';
+    case Resolved = 'resolved';
+    case Rejected = 'rejected';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Open => 'Offen',
+            self::InProgress => 'In Bearbeitung',
+            self::Resolved => 'Erledigt',
+            self::Rejected => 'Abgelehnt',
+        };
+    }
+
+    /**
+     * Offene Anliegen, die in der Kontakt-Queue Aufmerksamkeit brauchen
+     * (Nav-Zähler und Default-Filter der Admin-Ansicht).
+     */
+    public function isOpen(): bool
+    {
+        return $this === self::Open || $this === self::InProgress;
+    }
+}

app/Enums/ContactMessageTopic.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Enums;
+
+enum ContactMessageTopic: string
+{
+    case Contact = 'contact';
+    case Advertising = 'advertising';
+    case BugReport = 'bug_report';
+    case PressReleaseReport = 'press_release_report';
+    case Feedback = 'feedback';
+
+    /**
+     * Interne (Admin-)Bezeichnung.
+     */
+    public function label(): string
+    {
+        return match ($this) {
+            self::Contact => 'Kontaktaufnahme',
+            self::Advertising => 'Werbeanfrage',
+            self::BugReport => 'Fehlermeldung',
+            self::PressReleaseReport => 'PM-Meldung',
+            self::Feedback => 'Feedback',
+        };
+    }
+}

app/Enums/CreditTransactionType.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Buchungsart im Wallet-Ledger. `Topup`/`Grant` schreiben gut, `Spend`
+ * belastet, `Refund` erstattet eine vorherige Belastung.
+ */
+enum CreditTransactionType: string
+{
+    case Topup = 'topup';
+    case Spend = 'spend';
+    case Refund = 'refund';
+    case Grant = 'grant';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Topup => 'Aufladung',
+            self::Spend => 'Verbrauch',
+            self::Refund => 'Erstattung',
+            self::Grant => 'Gutschrift',
+        };
+    }
+
+    /**
+     * Schreibt die Buchung dem Saldo gut (statt ihn zu belasten)?
+     */
+    public function isCredit(): bool
+    {
+        return in_array($this, [self::Topup, self::Refund, self::Grant], true);
+    }
+}

app/Enums/EmailNotificationType.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Abbestellbare Benachrichtigungs-Mails (Opt-out je Typ).
+ *
+ * Umfasst bewusst nur Benachrichtigungen zum PM-Lebenszyklus — keine
+ * System-/Transaktionsmails (Passwort-Reset, Magic-Link, Kündigungs-/
+ * Widerrufsbestätigungen), die rechtlich bzw. funktional zwingend sind.
+ * Jeder Case entspricht genau einer Mailable-Klasse; vor dem Versand wird
+ * geprüft, ob der Empfänger den Typ abbestellt hat
+ * (User::wantsEmailNotification()).
+ */
+enum EmailNotificationType: string
+{
+    case PressReleasePublished = 'press_release_published';
+    case PressReleaseRejected = 'press_release_rejected';
+    case PressReleaseDepublished = 'press_release_depublished';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::PressReleasePublished => 'Pressemitteilung veröffentlicht',
+            self::PressReleaseRejected => 'Pressemitteilung abgelehnt',
+            self::PressReleaseDepublished => 'Pressemitteilung depubliziert',
+        };
+    }
+
+    /**
+     * Beschreibung für die Präferenzen-Einstellung im Kundenbereich.
+     */
+    public function settingsDescription(): string
+    {
+        return match ($this) {
+            self::PressReleasePublished => 'Benachrichtigung, sobald eine von Ihnen eingereichte Pressemitteilung geprüft und veröffentlicht wurde.',
+            self::PressReleaseRejected => 'Benachrichtigung, wenn eine eingereichte Pressemitteilung abgelehnt wurde — inklusive Ablehnungsgrund.',
+            self::PressReleaseDepublished => 'Bestätigung, wenn eine beauftragte Depublikation durchgeführt wurde.',
+        };
+    }
+
+    /**
+     * „Warum erhalten Sie diese E-Mail?"-Begründung im Mail-Footer.
+     */
+    public function mailReason(): string
+    {
+        return match ($this) {
+            self::PressReleasePublished => 'Sie wurden als Pressekontakt hinterlegt und werden daher über die Veröffentlichung Ihrer Pressemitteilungen informiert.',
+            self::PressReleaseRejected => 'Sie wurden als Pressekontakt hinterlegt und werden daher über die Ablehnung Ihrer eingereichten Pressemitteilungen informiert.',
+            self::PressReleaseDepublished => 'Sie haben die Depublikation dieser Pressemitteilung beauftragt und erhalten daher diese Bestätigung.',
+        };
+    }
+
+    /**
+     * Was der Empfänger mit dem Abmelde-Link abbestellt (Mail-Footer).
+     */
+    public function unsubscribeLabel(): string
+    {
+        return match ($this) {
+            self::PressReleasePublished => 'Benachrichtigungen über das Veröffentlichen Ihrer Pressemitteilungen',
+            self::PressReleaseRejected => 'Benachrichtigungen über die Ablehnung Ihrer Pressemitteilungen',
+            self::PressReleaseDepublished => 'Bestätigungen über die Depublikation Ihrer Pressemitteilungen',
+        };
+    }
+}

app/Enums/ImageLicenseType.php

@@ -0,0 +1,80 @@
+<?php
+
+namespace App\Enums;
+
+/**
+ * Lizenz-/Herkunftstyp eines Pressemitteilungs-Bildes.
+ *
+ * Dient der rechtssicheren Erfassung von Bildrechten beim Upload.
+ */
+enum ImageLicenseType: string
+{
+    case Own = 'own';
+    case CreativeCommons = 'cc';
+    case Commercial = 'commercial';
+    case Consent = 'consent';
+    case PressPr = 'press_pr';
+    case PublicDomain = 'public_domain';
+    case AiGenerated = 'ai_generated';
+    case Other = 'other';
+
+    /**
+     * Lesbares Label für die UI.
+     */
+    public function label(): string
+    {
+        return match ($this) {
+            self::Own => 'Eigene Aufnahme',
+            self::Consent => 'Vom Urheber / Fotografen freigegeben',
+            self::Commercial => 'Agentur-/Stockbild-Lizenz',
+            self::CreativeCommons => 'Creative-Commons-Lizenz',
+            self::PressPr => 'Presse-/PR-Bild mit Nutzungsfreigabe',
+            self::PublicDomain => 'Gemeinfrei / Public Domain / CC0',
+            self::AiGenerated => 'KI-generiert (z. B. Midjourney, DALL·E, Firefly)',
+            self::Other => 'Sonstige Lizenz / Sondervereinbarung',
+        };
+    }
+
+    /**
+     * Ob für diesen Typ eine Lizenz-URL Pflicht ist.
+     */
+    public function requiresLicenseUrl(): bool
+    {
+        return in_array($this, [self::CreativeCommons, self::Commercial, self::PressPr], true);
+    }
+
+    /**
+     * Ob zusaetzliche Lizenzdetails verpflichtend sind.
+     * Bei KI-Bildern ist das Detail das verwendete Tool (AI-Act-Kennzeichnung).
+     */
+    public function requiresLicenseDetail(): bool
+    {
+        return in_array($this, [self::CreativeCommons, self::AiGenerated, self::Other], true);
+    }
+
+    /**
+     * Rein KI-generierte Bilder haben keinen menschlichen Urheber (§ 2 UrhG);
+     * maßgeblich sind die Anbieter-Bedingungen und die Kennzeichnungspflicht
+     * aus Art. 50 EU AI Act (ab 02.08.2026).
+     */
+    public function isAiGenerated(): bool
+    {
+        return $this === self::AiGenerated;
+    }
+
+    /**
+     * Optionsliste für Selects: value => label.
+     *
+     * @return array<string, string>
+     */
+    public static function options(): array
+    {
+        $options = [];
+
+        foreach (self::cases() as $case) {
+            $options[$case->value] = $case->label();
+        }
+
+        return $options;
+    }
+}

app/Enums/InvoiceStatus.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Enums;
+
+enum InvoiceStatus: string
+{
+    case Open = 'open';
+    case Paid = 'paid';
+    case Void = 'void';
+    case Uncollectible = 'uncollectible';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Open => 'Offen',
+            self::Paid => 'Bezahlt',
+            self::Void => 'Storniert',
+            self::Uncollectible => 'Uneinbringlich',
+        };
+    }
+}

app/Enums/LegalRequestStatus.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Enums;
+
+enum LegalRequestStatus: string
+{
+    case Open = 'open';
+    case InProgress = 'in_progress';
+    case Resolved = 'resolved';
+    case Rejected = 'rejected';
+
+    public function label(): string
+    {
+        return match ($this) {
+            self::Open => 'Offen',
+            self::InProgress => 'In Bearbeitung',
+            self::Resolved => 'Erledigt',
+            self::Rejected => 'Abgelehnt',
+        };
+    }
+
+    /**
+     * Offene Anfragen, die in der Queue Aufmerksamkeit brauchen (für die Bremse
+     * „1 offene Anfrage pro PM/Typ" und den Nav-Zähler).
+     */
+    public function isOpen(): bool
+    {
+        return $this === self::Open || $this === self::InProgress;
+    }
+}