Aufträge: Router-Gerüste und Einbindung in server/index.js und Team-Router

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/index.js

@@ -21,6 +21,8 @@ import shopRoutes from './routes/shop.js'
 import shopWebhookRoutes from './routes/shopWebhook.js'
 import { shopSeiteRouter } from './routes/shopSeite.js'
 import zeitenRoutes from './routes/zeiten.js'
+import publicAuftragRoutes from './routes/auftrag.js'
+import kundeAuftraegeRoutes from './routes/auftraegeKunde.js'
 import takeoverCreditRoutes from './routes/takeoverCredits.js'
 import { purgeExpiredUploads } from './services/takeoverCredits.js'
 import { purgePendingChatUploads } from './services/chatAttachments.js'
@@ -48,6 +50,8 @@ import publicZeitenRoutes from './routes/publicZeiten.js'
 import adminAnalyseRoutes from './routes/admin/analyse.js'
 import { legalRouter } from './services/legalDocs.js'
 import adminFinanzenRoutes from './routes/admin/finanzen.js'
+import adminProjektkontenRoutes from './routes/admin/projektkonten.js'
+import adminAuftraegeRoutes from './routes/admin/auftraege.js'
 import teamRoutes from './routes/team/index.js'
 import legacyAdminRedirect from './routes/legacyAdminRedirect.js'
 import { corsMiddleware } from './middleware/cors.js'
@@ -94,6 +98,9 @@ app.use('/api/termine', termineRoutes)
 app.use('/api/shop/stripe-webhook', shopWebhookRoutes)
 app.use('/api/shop', shopRoutes)
 app.use('/api/zeiten', zeitenRoutes)
+// Auftragsbestaetigung: oeffentliche Bestaetigung per Token (ohne Sitzung) und die Auftraege des angemeldeten Kunden
+app.use('/api/auftrag', publicAuftragRoutes)
+app.use('/api/auftraege', kundeAuftraegeRoutes)
 app.use('/api/team', teamRoutes)
 app.use('/api/admin/gitea', adminGiteaRoutes)
 app.use('/api/admin/website-projects', adminPreviewRoutes)
@@ -103,6 +110,9 @@ app.use('/api/admin/customers', adminCustomersRoutes)
 app.use('/api/admin/employees', adminEmployeesRoutes)
 app.use('/api/admin/invoice-clients', adminInvoiceClientsRoutes)
 app.use('/api/admin/analyse', adminAnalyseRoutes)
+// Projektkonten und Auftraege (Admin): vor dem Finanzen-Router, dessen requireAppwriteStaff sonst jede Anfrage darunter zuerst prueft
+app.use('/api/admin/finanzen/projektkonten', adminProjektkontenRoutes)
+app.use('/api/admin/finanzen/auftraege', adminAuftraegeRoutes)
 app.use('/api/admin/finanzen', adminFinanzenRoutes)
 app.use('/webhook', giteaWebhookRoutes)
 // Push-Zeitmail: Zeit eines Git-Pushes per Link aus der Mail eintragen (ohne Login, signierter Token)