Implementiere Kundenportal mit zentraler Appwrite-Anbindung.

Express-Server für Appwrite-Auth, Session, Projekt-Dashboard und Gitea-Webhook; statisches Frontend und Schema-Dokumentation für woms-database. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-22 23:38:38 +02:00
commit f31727aeb4
23 changed files with 2056 additions and 0 deletions
--- a/.env.example
+++ b/.env.example
@@ -0,0 +1,21 @@
+PORT=3000
+SESSION_SECRET=change-me-to-a-random-string-at-least-32-chars
+SESSION_COOKIE_NAME=webklar_portal_session
+
+APPWRITE_ENDPOINT=https://ticket.webklar.com/v1
+APPWRITE_PROJECT_ID=6a1058610003c5a13a05
+APPWRITE_DATABASE_ID=woms-database
+APPWRITE_API_KEY=
+
+APPWRITE_COLLECTION_CUSTOMERS=customers
+APPWRITE_COLLECTION_CUSTOMER_PORTAL_ACCESS=customerPortalAccess
+APPWRITE_COLLECTION_WEBSITE_PROJECTS=websiteProjects
+APPWRITE_COLLECTION_PORTAL_FEATURES=portalFeatures
+
+GITEA_WEBHOOK_TOKEN=
+GITEA_BASE_URL=https://git.webklar.com
+GITEA_API_TOKEN=
+
+PREVIEW_DEPLOY_ROOT=/var/www/previews
+PREVIEW_BASE_HOST=project.webklar.com
+ALLOWED_CUSTOMER_STATUSES=active
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,5 @@
+node_modules/
+.env
+.DS_Store
+preview-data/
+*.log
--- a/APPWRITE_SCHEMA.md
+++ b/APPWRITE_SCHEMA.md
@@ -0,0 +1,79 @@
+# Appwrite Schema – Kundenportal (woms-database)
+
+Endpoint: `https://ticket.webklar.com/v1`  
+Project ID: `6a1058610003c5a13a05`  
+Database ID: `woms-database`
+
+Alle Collections: **Read/Create/Update/Delete** nur für API-Key-Rolle (Server) und Admin-Team. Kein `Any`-Read auf Kundendaten.
+
+---
+
+## customers (erweitern)
+
+Bestehende Felder beibehalten. Zusätzlich:
+
+| Attribut | Typ | Required | Index |
+|----------|-----|----------|-------|
+| companyName | string (255) | nein | |
+| portalAccessEnabled | boolean | nein | |
+| appwriteUserId | string (64) | nein | unique |
+| customerStatus | string (50) | nein | |
+| notes | string (5000) | nein | |
+| createdAt | datetime | nein | |
+| updatedAt | datetime | nein | |
+
+---
+
+## customerPortalAccess (neu)
+
+Collection ID: `customerPortalAccess`
+
+| Attribut | Typ | Required | Index |
+|----------|-----|----------|-------|
+| customerId | string (64) | ja | |
+| enabled | boolean | ja | |
+| passwordSet | boolean | nein | |
+| appwriteUserId | string (64) | nein | |
+| lastLoginAt | datetime | nein | |
+
+Index: `customerId`, `appwriteUserId`
+
+---
+
+## websiteProjects (neu)
+
+Collection ID: `websiteProjects`
+
+| Attribut | Typ | Required | Index |
+|----------|-----|----------|-------|
+| customerId | string (64) | ja | ja |
+| ticketId | string (64) | nein | |
+| projectName | string (255) | ja | |
+| templateName | string (255) | nein | |
+| giteaRepoUrl | string (512) | nein | |
+| giteaRepoName | string (255) | nein | |
+| repoFullName | string (255) | nein | unique |
+| subdomain | string (128) | nein | unique |
+| previewUrl | string (512) | nein | |
+| liveDomain | string (255) | nein | |
+| status | string (50) | nein | |
+| provisioningStatus | string (50) | nein | |
+| createdAt | datetime | nein | |
+| updatedAt | datetime | nein | |
+
+---
+
+## portalFeatures (neu)
+
+Collection ID: `portalFeatures`
+
+| Attribut | Typ | Required | Index |
+|----------|-----|----------|-------|
+| customerId | string (64) | ja | ja |
+| projectId | string (64) | nein | |
+| featureKey | string (128) | ja | |
+| enabled | boolean | ja | |
+| unlockedByPurchase | boolean | nein | |
+| purchaseStatus | string (50) | nein | |
+
+Index: `customerId`, `projectId`
--- a/README.md
+++ b/README.md
@@ -0,0 +1,70 @@
+# Webklar Kundenbereich
+
+Kundenportal für Website-Projekte. Liest ausschließlich aus der **zentralen Appwrite-Datenbank des Ticketsystems** (`woms-database` auf `ticket.webklar.com`).
+
+- **Keine** Kundenanlage im Portal
+- **Keine** Admin-Funktionen
+- Login über **Appwrite Auth** (ein User pro Kunde, verknüpft über `customers.appwriteUserId`)
+
+Verwaltung (Kunden, Passwörter, Projekte, Freischaltung): **Ticketsystem**.
+
+## Struktur
+
+```
+server/     Express-API, Appwrite, Gitea-Webhook
+public/     Login & Dashboard (statisch)
+```
+
+## Schnellstart
+
+```bash
+cp .env.example .env
+# SESSION_SECRET (min. 32 Zeichen) und APPWRITE_API_KEY setzen
+npm install
+npm run dev
+```
+
+Öffnen: http://localhost:3000
+
+## API
+
+| Methode | Pfad | Beschreibung |
+|---------|------|----------------|
+| POST | `/api/auth/login` | Appwrite Login + Portal-Prüfungen |
+| POST | `/api/auth/logout` | Session beenden |
+| GET | `/api/auth/me` | Aktueller Kunde |
+| GET | `/api/projects` | Eigene `websiteProjects` |
+| GET | `/api/features` | Eigene `portalFeatures` (enabled) |
+| POST | `/webhook/gitea?token=…` | Gitea Push → Deploy + DB-Update |
+
+## Appwrite
+
+Schema und Collection-Anlage: siehe [APPWRITE_SCHEMA.md](./APPWRITE_SCHEMA.md).
+
+```
+Endpoint:  https://ticket.webklar.com/v1
+Project:   6a1058610003c5a13a05
+Database:  woms-database
+```
+
+## Gitea / Preview
+
+- Template: https://git.webklar.com/knso/webklar-preview-template.git
+- Webhook-URL: `https://project.webklar.com/webhook/gitea`
+- Secret: `GITEA_WEBHOOK_TOKEN` in `.env`
+- Vorschau: `https://<subdomain>.project.webklar.com`
+
+`customerId` wird **im Ticketsystem** am `websiteProjects`-Eintrag gesetzt, nicht im Webhook.
+
+## Deployment
+
+```bash
+npm start
+# Reverse Proxy (nginx) → Port 3000
+# PREVIEW_DEPLOY_ROOT für statische Vorschau-Dateien
+```
+
+## Repositories
+
+- Portal: https://git.webklar.com/knso/Webklar-Kundenbereich.git
+- Template: https://git.webklar.com/knso/webklar-preview-template.git
--- a/package-lock.json
+++ b/package-lock.json
@@ -0,0 +1,873 @@
+{
+  "name": "webklar-kundenbereich",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "webklar-kundenbereich",
+      "version": "1.0.0",
+      "dependencies": {
+        "cookie-parser": "^1.4.7",
+        "dotenv": "^16.4.7",
+        "express": "^4.21.2",
+        "node-appwrite": "^14.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
+    "node_modules/body-parser": {
+      "version": "1.20.5",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz",
+      "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.15.1",
+        "raw-body": "~2.5.3",
+        "type-is": "~1.6.18",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "5.2.1"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-parser": {
+      "version": "1.4.7",
+      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.7.tgz",
+      "integrity": "sha512-nGUvgXnotP3BsjiLX2ypbQnWoGUPIIfHQNZkkC668ntrzGWEZVW70HDEB1qnNGMicPje6EttlIgzo51YSwNQGw==",
+      "license": "MIT",
+      "dependencies": {
+        "cookie": "0.7.2",
+        "cookie-signature": "1.0.6"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
+      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express": {
+      "version": "4.22.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.8",
+        "array-flatten": "1.1.1",
+        "body-parser": "~1.20.5",
+        "content-disposition": "~0.5.4",
+        "content-type": "~1.0.4",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
+        "merge-descriptors": "1.0.3",
+        "methods": "~1.1.2",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "path-to-regexp": "~0.1.12",
+        "proxy-addr": "~2.0.7",
+        "qs": "~6.15.1",
+        "range-parser": "~1.2.1",
+        "safe-buffer": "5.2.1",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
+        "setprototypeof": "1.2.0",
+        "statuses": "~2.0.1",
+        "type-is": "~1.6.18",
+        "utils-merge": "1.0.1",
+        "vary": "~1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/finalhandler": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "statuses": "~2.0.2",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
+      "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.4.24",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/merge-descriptors": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/node-appwrite": {
+      "version": "14.2.0",
+      "resolved": "https://registry.npmjs.org/node-appwrite/-/node-appwrite-14.2.0.tgz",
+      "integrity": "sha512-sPPA+JzdBJRS+lM6azX85y3/6iyKQYlHcXCbjMuWLROh6IiU9EfXRW3XSUTa5HDoBrlo8ve+AnVA6BIjQfUs1g==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "node-fetch-native-with-agent": "1.7.2"
+      }
+    },
+    "node_modules/node-fetch-native-with-agent": {
+      "version": "1.7.2",
+      "resolved": "https://registry.npmjs.org/node-fetch-native-with-agent/-/node-fetch-native-with-agent-1.7.2.tgz",
+      "integrity": "sha512-5MaOOCuJEvcckoz7/tjdx1M6OusOY6Xc5f459IaruGStWnKzlI1qpNgaAwmn4LmFYcsSlj+jBMk84wmmRxfk5g==",
+      "license": "MIT"
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "license": "MIT"
+    },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.2",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
+      "integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/send": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
+        "mime": "1.6.0",
+        "ms": "2.1.3",
+        "on-finished": "~2.4.1",
+        "range-parser": "~1.2.1",
+        "statuses": "~2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/send/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/serve-static": {
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "parseurl": "~1.3.3",
+        "send": "~0.19.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.3",
+        "side-channel-list": "^1.0.0",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/type-is": {
+      "version": "1.6.18",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "media-typer": "0.3.0",
+        "mime-types": "~2.1.24"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/utils-merge": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    }
+  }
+}
--- a/package.json
+++ b/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "webklar-kundenbereich",
+  "version": "1.0.0",
+  "description": "Webklar Kundenportal – zentrale Ticketsystem-Appwrite-DB",
+  "type": "module",
+  "main": "server/index.js",
+  "scripts": {
+    "start": "node server/index.js",
+    "dev": "node --watch server/index.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "cookie-parser": "^1.4.7",
+    "dotenv": "^16.4.7",
+    "express": "^4.21.2",
+    "node-appwrite": "^14.1.0"
+  }
+}
--- a/project.webklar.com/_downloads.html
+++ b/project.webklar.com/_downloads.html
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+<html>
+	<head>
+		<meta charset="UTF-8">
+        <title> Downloads </title>
+    </head>
+    <body>
+        <h1> Downloads </h1>
+        <ul>
+            <li><a id="https://project.webklar.com/login" href="login.html"> Anmelden <20> Webklar Kundenbereich </a></li>
+        </ul>
+    </body>
+</html>
--- a/project.webklar.com/forgot-password.html
+++ b/project.webklar.com/forgot-password.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Passwort vergessen <20> Webklar Kundenbereich</title>
+  <link rel="stylesheet" href="style.css">
+</head>
+<body>
+  <header><h1>Webklar Kundenbereich</h1></header>
+  <main><p class="card">Bitte wenden Sie sich an Webklar oder nutzen Sie die Appwrite-Passwort-Wiederherstellung unter
+       <a href="https://appwrite.webklar.com/console">Appwrite Console</a>.</p>
+       <p><a href="login.html">Zur<EFBFBD>ck zum Login</a></p></main>
+</body>
+</html>
--- a/project.webklar.com/login.html
+++ b/project.webklar.com/login.html
@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Anmelden <20> Webklar Kundenbereich</title>
+  <link rel="stylesheet" href="style.css">
+</head>
+<body>
+  <header><h1>Webklar Kundenbereich</h1></header>
+  <main>
+      <form method="post" action="login.html" class="card">
+        
+        <label>E-Mail <input type="email" name="email" required></label>
+        <label>Passwort <input type="password" name="password" required></label>
+        <button type="submit">Anmelden</button>
+      </form>
+      <p><a href="forgot-password.html">Passwort vergessen</a></p></main>
+</body>
+</html>
--- a/project.webklar.com/style.css
+++ b/project.webklar.com/style.css
@@ -0,0 +1,57 @@
+:root {
+  --bg: #0f1419;
+  --card: #1a2332;
+  --text: #e7ecf3;
+  --accent: #3b82f6;
+  --muted: #94a3b8;
+}
+
+* { box-sizing: border-box; }
+body {
+  font-family: system-ui, -apple-system, sans-serif;
+  background: var(--bg);
+  color: var(--text);
+  margin: 0;
+  line-height: 1.5;
+}
+header {
+  padding: 1rem 2rem;
+  border-bottom: 1px solid #2d3a4f;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+header h1 { margin: 0; font-size: 1.25rem; }
+nav a { color: var(--accent); margin-left: 1rem; text-decoration: none; }
+main { max-width: 900px; margin: 2rem auto; padding: 0 1.5rem; }
+.card, .project-card {
+  background: var(--card);
+  border-radius: 8px;
+  padding: 1.25rem;
+  margin-bottom: 1rem;
+}
+label { display: block; margin-bottom: 0.75rem; }
+input, textarea, select {
+  width: 100%;
+  padding: 0.5rem;
+  margin-top: 0.25rem;
+  border-radius: 4px;
+  border: 1px solid #334155;
+  background: #0f172a;
+  color: var(--text);
+}
+button, .btn {
+  background: var(--accent);
+  color: #fff;
+  border: none;
+  padding: 0.5rem 1rem;
+  border-radius: 4px;
+  cursor: pointer;
+  text-decoration: none;
+  display: inline-block;
+}
+.error { color: #f87171; }
+.projects { list-style: none; padding: 0; }
+table { width: 100%; border-collapse: collapse; }
+td, th { padding: 0.5rem; border-bottom: 1px solid #334155; text-align: left; }
+form.inline { display: flex; gap: 0.5rem; align-items: center; flex-wrap: wrap; }
--- a/public/app.js
+++ b/public/app.js
@@ -0,0 +1,142 @@
+async function api(path, options = {}) {
+  const response = await fetch(path, {
+    credentials: 'same-origin',
+    headers: { 'Content-Type': 'application/json', ...(options.headers || {}) },
+    ...options,
+  })
+  const data = await response.json().catch(() => ({}))
+  if (!response.ok) {
+    throw new Error(data.error || `Fehler ${response.status}`)
+  }
+  return data
+}
+
+function showError(el, message) {
+  if (!el) return
+  el.textContent = message
+  el.classList.remove('hidden')
+}
+
+function hideError(el) {
+  if (el) el.classList.add('hidden')
+}
+
+function featuresForProject(features, projectId) {
+  return features.filter((f) => !f.projectId || f.projectId === projectId)
+}
+
+function renderProjectCard(project, features) {
+  const li = document.createElement('li')
+  li.className = 'project-card'
+  const projectFeatures = featuresForProject(features, project.id)
+  const featureHtml = projectFeatures.length
+    ? `<div class="feature-tags">${projectFeatures.map((f) => `<span class="feature-tag">${escapeHtml(f.featureKey)}</span>`).join('')}</div>`
+    : '<p class="muted">Keine zusätzlichen Features freigeschaltet.</p>'
+
+  li.innerHTML = `
+    <h2>${escapeHtml(project.projectName || project.subdomain || 'Projekt')}</h2>
+    <dl>
+      <dt>Subdomain</dt><dd>${escapeHtml(project.subdomain || '–')}</dd>
+      <dt>Vorschau</dt><dd>${project.previewUrl ? `<a href="${escapeAttr(project.previewUrl)}" target="_blank" rel="noopener">${escapeHtml(project.previewUrl)}</a>` : '–'}</dd>
+      <dt>Live-Domain</dt><dd>${project.liveDomain ? escapeHtml(project.liveDomain) : '–'}</dd>
+      <dt>Status</dt><dd>${escapeHtml(project.status || '–')}</dd>
+      <dt>Bereitstellung</dt><dd>${escapeHtml(project.provisioningStatus || '–')}</dd>
+    </dl>
+    ${featureHtml}
+  `
+  return li
+}
+
+function escapeHtml(str) {
+  return String(str)
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+}
+
+function escapeAttr(str) {
+  return escapeHtml(str).replace(/'/g, '&#39;')
+}
+
+async function initLoginPage() {
+  const form = document.getElementById('login-form')
+  const errorEl = document.getElementById('login-error')
+  const btn = document.getElementById('login-btn')
+
+  try {
+    const me = await api('/api/auth/me')
+    if (me.customer) {
+      window.location.href = '/dashboard.html'
+      return
+    }
+  } catch {
+    /* not logged in */
+  }
+
+  form?.addEventListener('submit', async (e) => {
+    e.preventDefault()
+    errorEl.classList.add('hidden')
+    btn.disabled = true
+    try {
+      await api('/api/auth/login', {
+        method: 'POST',
+        body: JSON.stringify({
+          email: document.getElementById('email').value,
+          password: document.getElementById('password').value,
+        }),
+      })
+      window.location.href = '/dashboard.html'
+    } catch (err) {
+      showError(errorEl, err.message)
+    } finally {
+      btn.disabled = false
+    }
+  })
+}
+
+async function initDashboardPage() {
+  const meta = document.getElementById('customer-meta')
+  const list = document.getElementById('projects')
+  const loading = document.getElementById('loading')
+  const empty = document.getElementById('empty')
+  const loadError = document.getElementById('load-error')
+  const logoutBtn = document.getElementById('logout-btn')
+
+  logoutBtn?.addEventListener('click', async () => {
+    await api('/api/auth/logout', { method: 'POST' })
+    window.location.href = '/login.html'
+  })
+
+  try {
+    const [{ customer }, { projects }, { features }] = await Promise.all([
+      api('/api/auth/me'),
+      api('/api/projects'),
+      api('/api/features'),
+    ])
+
+    meta.textContent = customer.name ? `${customer.name} (${customer.email})` : customer.email
+    loading.classList.add('hidden')
+
+    if (!projects.length) {
+      empty.classList.remove('hidden')
+      return
+    }
+
+    list.classList.remove('hidden')
+    list.innerHTML = ''
+    for (const project of projects) {
+      list.appendChild(renderProjectCard(project, features))
+    }
+  } catch (err) {
+    loading.classList.add('hidden')
+    if (err.message.includes('401') || err.message.includes('Nicht angemeldet')) {
+      window.location.href = '/login.html'
+      return
+    }
+    showError(loadError, err.message)
+  }
+}
+
+window.initLoginPage = initLoginPage
+window.initDashboardPage = initDashboardPage
--- a/public/dashboard.html
+++ b/public/dashboard.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Meine Projekte – Webklar Kundenbereich</title>
+  <link rel="stylesheet" href="/style.css">
+</head>
+<body>
+  <header>
+    <h1>Meine Website-Projekte</h1>
+    <div>
+      <span class="meta" id="customer-meta"></span>
+      <button type="button" class="link-btn" id="logout-btn">Abmelden</button>
+    </div>
+  </header>
+  <main>
+    <p id="load-error" class="error hidden"></p>
+    <p id="loading" class="muted">Projekte werden geladen…</p>
+    <ul id="projects" class="projects hidden"></ul>
+    <p id="empty" class="card hidden">Noch keine Website-Projekte zugewiesen.</p>
+  </main>
+  <script src="/app.js"></script>
+  <script>
+    initDashboardPage();
+  </script>
+</body>
+</html>
--- a/public/login.html
+++ b/public/login.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Anmelden – Webklar Kundenbereich</title>
+  <link rel="stylesheet" href="/style.css">
+</head>
+<body>
+  <header><h1>Webklar Kundenbereich</h1></header>
+  <main>
+    <form id="login-form" class="card">
+      <label>E-Mail
+        <input type="email" name="email" id="email" required autocomplete="username">
+      </label>
+      <label>Passwort
+        <input type="password" name="password" id="password" required autocomplete="current-password">
+      </label>
+      <p id="login-error" class="error hidden"></p>
+      <button type="submit" id="login-btn">Anmelden</button>
+    </form>
+    <p class="muted">Zugangsdaten erhältst du von Webklar. Passwortänderungen erfolgen über das Ticketsystem.</p>
+  </main>
+  <script src="/app.js"></script>
+  <script>
+    initLoginPage();
+  </script>
+</body>
+</html>
--- a/public/style.css
+++ b/public/style.css
@@ -0,0 +1,79 @@
+:root {
+  --bg: #0f1419;
+  --card: #1a2332;
+  --text: #e7ecf3;
+  --accent: #3b82f6;
+  --muted: #94a3b8;
+}
+
+* { box-sizing: border-box; }
+body {
+  font-family: system-ui, -apple-system, sans-serif;
+  background: var(--bg);
+  color: var(--text);
+  margin: 0;
+  line-height: 1.5;
+}
+header {
+  padding: 1rem 2rem;
+  border-bottom: 1px solid #2d3a4f;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 0.75rem;
+}
+header h1 { margin: 0; font-size: 1.25rem; }
+header .meta { color: var(--muted); font-size: 0.9rem; }
+nav a, .link-btn {
+  color: var(--accent);
+  margin-left: 1rem;
+  text-decoration: none;
+  background: none;
+  border: none;
+  cursor: pointer;
+  font-size: inherit;
+}
+main { max-width: 900px; margin: 2rem auto; padding: 0 1.5rem; }
+.card, .project-card {
+  background: var(--card);
+  border-radius: 8px;
+  padding: 1.25rem;
+  margin-bottom: 1rem;
+}
+label { display: block; margin-bottom: 0.75rem; }
+input, textarea, select {
+  width: 100%;
+  padding: 0.5rem;
+  margin-top: 0.25rem;
+  border-radius: 4px;
+  border: 1px solid #334155;
+  background: #0f172a;
+  color: var(--text);
+}
+button, .btn {
+  background: var(--accent);
+  color: #fff;
+  border: none;
+  padding: 0.5rem 1rem;
+  border-radius: 4px;
+  cursor: pointer;
+  text-decoration: none;
+  display: inline-block;
+}
+button:disabled { opacity: 0.6; cursor: not-allowed; }
+.error { color: #f87171; margin-top: 0.5rem; }
+.muted { color: var(--muted); font-size: 0.9rem; }
+.projects { list-style: none; padding: 0; }
+.project-card h2 { margin: 0 0 0.5rem; font-size: 1.1rem; }
+.project-card dl { margin: 0; display: grid; grid-template-columns: 8rem 1fr; gap: 0.25rem 1rem; }
+.project-card dt { color: var(--muted); }
+.feature-tags { display: flex; flex-wrap: wrap; gap: 0.35rem; margin-top: 0.75rem; }
+.feature-tag {
+  background: #0f172a;
+  border: 1px solid #334155;
+  border-radius: 4px;
+  padding: 0.15rem 0.5rem;
+  font-size: 0.8rem;
+}
+.hidden { display: none; }
--- a/server/config.js
+++ b/server/config.js
@@ -0,0 +1,45 @@
+import 'dotenv/config'
+
+export const config = {
+  port: Number(process.env.PORT) || 3000,
+  sessionSecret: process.env.SESSION_SECRET || '',
+  cookieName: process.env.SESSION_COOKIE_NAME || 'webklar_portal_session',
+  allowedCustomerStatuses: (process.env.ALLOWED_CUSTOMER_STATUSES || 'active')
+    .split(',')
+    .map((s) => s.trim())
+    .filter(Boolean),
+
+  appwrite: {
+    endpoint: process.env.APPWRITE_ENDPOINT || 'https://ticket.webklar.com/v1',
+    projectId: process.env.APPWRITE_PROJECT_ID || '6a1058610003c5a13a05',
+    databaseId: process.env.APPWRITE_DATABASE_ID || 'woms-database',
+    apiKey: process.env.APPWRITE_API_KEY || '',
+  },
+
+  collections: {
+    customers: process.env.APPWRITE_COLLECTION_CUSTOMERS || 'customers',
+    customerPortalAccess: process.env.APPWRITE_COLLECTION_CUSTOMER_PORTAL_ACCESS || 'customerPortalAccess',
+    websiteProjects: process.env.APPWRITE_COLLECTION_WEBSITE_PROJECTS || 'websiteProjects',
+    portalFeatures: process.env.APPWRITE_COLLECTION_PORTAL_FEATURES || 'portalFeatures',
+  },
+
+  gitea: {
+    webhookToken: process.env.GITEA_WEBHOOK_TOKEN || '',
+    baseUrl: process.env.GITEA_BASE_URL || 'https://git.webklar.com',
+    apiToken: process.env.GITEA_API_TOKEN || '',
+  },
+
+  preview: {
+    baseHost: process.env.PREVIEW_BASE_HOST || 'project.webklar.com',
+    deployRoot: process.env.PREVIEW_DEPLOY_ROOT || '',
+  },
+}
+
+export function assertServerConfig() {
+  if (!config.sessionSecret || config.sessionSecret.length < 32) {
+    console.warn('[config] SESSION_SECRET fehlt oder ist zu kurz (min. 32 Zeichen).')
+  }
+  if (!config.appwrite.apiKey) {
+    console.warn('[config] APPWRITE_API_KEY fehlt – DB-Zugriff und Webhook schlagen fehl.')
+  }
+}
--- a/server/index.js
+++ b/server/index.js
@@ -0,0 +1,45 @@
+import express from 'express'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { config, assertServerConfig } from './config.js'
+import { sessionMiddleware } from './middleware/session.js'
+import authRoutes from './routes/auth.js'
+import projectsRoutes from './routes/projects.js'
+import featuresRoutes from './routes/features.js'
+import giteaWebhookRoutes from './routes/webhook/gitea.js'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const publicDir = path.join(__dirname, '..', 'public')
+
+assertServerConfig()
+
+const app = express()
+app.use(sessionMiddleware())
+app.use(express.json({ limit: '2mb' }))
+
+app.use('/api/auth', authRoutes)
+app.use('/api/projects', projectsRoutes)
+app.use('/api/features', featuresRoutes)
+app.use('/webhook', giteaWebhookRoutes)
+
+app.get('/api/health', (_req, res) => {
+  res.json({ ok: true, service: 'webklar-kundenbereich' })
+})
+
+app.use(express.static(publicDir))
+
+app.get('/dashboard.html', (req, res, next) => {
+  const raw = req.signedCookies?.[config.cookieName]
+  if (!raw) {
+    return res.redirect('/login.html')
+  }
+  next()
+})
+
+app.get('/', (_req, res) => {
+  res.redirect('/login.html')
+})
+
+app.listen(config.port, () => {
+  console.log(`Webklar Kundenbereich läuft auf Port ${config.port}`)
+})
--- a/server/middleware/session.js
+++ b/server/middleware/session.js
@@ -0,0 +1,49 @@
+import cookieParser from 'cookie-parser'
+import { config } from '../config.js'
+
+const SESSION_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000
+
+export function sessionMiddleware() {
+  return cookieParser(config.sessionSecret)
+}
+
+export function setPortalSession(res, data) {
+  res.cookie(config.cookieName, JSON.stringify(data), {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    maxAge: SESSION_MAX_AGE_MS,
+    signed: true,
+  })
+}
+
+export function clearPortalSession(res) {
+  res.clearCookie(config.cookieName, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    signed: true,
+  })
+}
+
+export function requireSession(req, res, next) {
+  const raw = req.signedCookies?.[config.cookieName]
+  if (!raw) {
+    return res.status(401).json({ error: 'Nicht angemeldet' })
+  }
+
+  try {
+    const session = JSON.parse(raw)
+    if (!session.customerId || !session.appwriteUserId) {
+      return res.status(401).json({ error: 'Ungültige Session' })
+    }
+    req.session = session
+    next()
+  } catch {
+    return res.status(401).json({ error: 'Ungültige Session' })
+  }
+}
+
+export function getSessionCustomerId(req) {
+  return req.session?.customerId
+}
--- a/server/routes/auth.js
+++ b/server/routes/auth.js
@@ -0,0 +1,112 @@
+import { Router } from 'express'
+import { config } from '../config.js'
+import {
+  getCustomerByAppwriteUserId,
+  getPortalAccessByCustomerId,
+  updateDocument,
+} from '../services/appwriteAdmin.js'
+import { loginWithAppwrite } from '../services/appwriteClient.js'
+import {
+  clearPortalSession,
+  requireSession,
+  setPortalSession,
+} from '../middleware/session.js'
+
+const router = Router()
+
+function sanitizeCustomer(customer) {
+  return {
+    id: customer.$id,
+    code: customer.code || '',
+    name: customer.name || '',
+    companyName: customer.companyName || '',
+    email: customer.email || '',
+    phone: customer.phone || '',
+    location: customer.location || '',
+    customerStatus: customer.customerStatus || '',
+    portalAccessEnabled: Boolean(customer.portalAccessEnabled),
+  }
+}
+
+async function validatePortalAccess(appwriteUserId) {
+  const customer = await getCustomerByAppwriteUserId(appwriteUserId)
+  if (!customer) {
+    const error = new Error('Kein Kundenkonto für diesen Login gefunden.')
+    error.status = 403
+    throw error
+  }
+
+  if (!customer.portalAccessEnabled) {
+    const error = new Error('Portalzugang ist nicht freigeschaltet.')
+    error.status = 403
+    throw error
+  }
+
+  const portalAccess = await getPortalAccessByCustomerId(customer.$id)
+  if (!portalAccess || !portalAccess.enabled) {
+    const error = new Error('Portalzugang ist deaktiviert.')
+    error.status = 403
+    throw error
+  }
+
+  const status = (customer.customerStatus || '').toLowerCase()
+  if (!config.allowedCustomerStatuses.includes(status)) {
+    const error = new Error('Kundenkonto ist nicht aktiv.')
+    error.status = 403
+    throw error
+  }
+
+  return { customer, portalAccess }
+}
+
+router.post('/login', async (req, res) => {
+  const { email, password } = req.body || {}
+  if (!email || !password) {
+    return res.status(400).json({ error: 'E-Mail und Passwort erforderlich' })
+  }
+
+  try {
+    const user = await loginWithAppwrite(email.trim(), password)
+    const { customer, portalAccess } = await validatePortalAccess(user.$id)
+
+    setPortalSession(res, {
+      customerId: customer.$id,
+      appwriteUserId: user.$id,
+      name: customer.name || user.name || '',
+      email: customer.email || user.email || email,
+    })
+
+    try {
+      await updateDocument(config.collections.customerPortalAccess, portalAccess.$id, {
+        lastLoginAt: new Date().toISOString(),
+      })
+    } catch (err) {
+      console.warn('[auth] lastLoginAt update failed:', err.message)
+    }
+
+    return res.json({ success: true, customer: sanitizeCustomer(customer) })
+  } catch (err) {
+    const status = err.status || 500
+    return res.status(status).json({ error: err.message || 'Anmeldung fehlgeschlagen' })
+  }
+})
+
+router.post('/logout', (_req, res) => {
+  clearPortalSession(res)
+  res.json({ success: true })
+})
+
+router.get('/me', requireSession, async (req, res) => {
+  try {
+    const customer = await getCustomerByAppwriteUserId(req.session.appwriteUserId)
+    if (!customer) {
+      clearPortalSession(res)
+      return res.status(403).json({ error: 'Kundenkonto nicht gefunden' })
+    }
+    return res.json({ customer: sanitizeCustomer(customer) })
+  } catch (err) {
+    return res.status(500).json({ error: err.message || 'Fehler beim Laden' })
+  }
+})
+
+export default router
--- a/server/routes/features.js
+++ b/server/routes/features.js
@@ -0,0 +1,36 @@
+import { Router } from 'express'
+import { Query } from 'node-appwrite'
+import { config } from '../config.js'
+import { listDocuments } from '../services/appwriteAdmin.js'
+import { getSessionCustomerId, requireSession } from '../middleware/session.js'
+
+const router = Router()
+
+router.get('/', requireSession, async (req, res) => {
+  const customerId = getSessionCustomerId(req)
+  if (!customerId) {
+    return res.status(401).json({ error: 'Nicht angemeldet' })
+  }
+
+  try {
+    const features = await listDocuments(config.collections.portalFeatures, [
+      Query.equal('customerId', customerId),
+      Query.equal('enabled', true),
+    ])
+
+    const sanitized = features.map((f) => ({
+      id: f.$id,
+      projectId: f.projectId || '',
+      featureKey: f.featureKey || '',
+      enabled: Boolean(f.enabled),
+      unlockedByPurchase: Boolean(f.unlockedByPurchase),
+      purchaseStatus: f.purchaseStatus || '',
+    }))
+
+    return res.json({ features: sanitized })
+  } catch (err) {
+    return res.status(500).json({ error: err.message || 'Features konnten nicht geladen werden' })
+  }
+})
+
+export default router
--- a/server/routes/projects.js
+++ b/server/routes/projects.js
@@ -0,0 +1,40 @@
+import { Router } from 'express'
+import { Query } from 'node-appwrite'
+import { config } from '../config.js'
+import { listDocuments } from '../services/appwriteAdmin.js'
+import { getSessionCustomerId, requireSession } from '../middleware/session.js'
+
+const router = Router()
+
+router.get('/', requireSession, async (req, res) => {
+  const customerId = getSessionCustomerId(req)
+  if (!customerId) {
+    return res.status(401).json({ error: 'Nicht angemeldet' })
+  }
+
+  try {
+    const projects = await listDocuments(config.collections.websiteProjects, [
+      Query.equal('customerId', customerId),
+      Query.orderDesc('$createdAt'),
+    ])
+
+    const sanitized = projects.map((p) => ({
+      id: p.$id,
+      projectName: p.projectName || '',
+      subdomain: p.subdomain || '',
+      previewUrl: p.previewUrl || '',
+      liveDomain: p.liveDomain || '',
+      status: p.status || '',
+      provisioningStatus: p.provisioningStatus || '',
+      templateName: p.templateName || '',
+      giteaRepoUrl: p.giteaRepoUrl || '',
+      repoFullName: p.repoFullName || '',
+    }))
+
+    return res.json({ projects: sanitized })
+  } catch (err) {
+    return res.status(500).json({ error: err.message || 'Projekte konnten nicht geladen werden' })
+  }
+})
+
+export default router
--- a/server/routes/webhook/gitea.js
+++ b/server/routes/webhook/gitea.js
@@ -0,0 +1,166 @@
+import { Router } from 'express'
+import { execFile } from 'node:child_process'
+import { promisify } from 'node:util'
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { config } from '../../config.js'
+import { upsertWebsiteProjectByRepo } from '../../services/appwriteAdmin.js'
+
+const execFileAsync = promisify(execFile)
+const router = Router()
+
+function verifyWebhookToken(req) {
+  const token = config.gitea.webhookToken
+  if (!token) return false
+  const queryToken = req.query.token
+  const headerToken = req.get('X-Gitea-Token') || req.get('X-Gogs-Signature')
+  return queryToken === token || headerToken === token
+}
+
+async function fetchPreviewConfig(repoFullName, branch) {
+  const [owner, repo] = repoFullName.split('/')
+  if (!owner || !repo || !config.gitea.apiToken) {
+    return null
+  }
+
+  const url = `${config.gitea.baseUrl}/api/v1/repos/${owner}/${repo}/contents/.webklar-preview.json?ref=${encodeURIComponent(branch)}`
+  const response = await fetch(url, {
+    headers: { Authorization: `token ${config.gitea.apiToken}` },
+  })
+
+  if (!response.ok) return null
+
+  const data = await response.json()
+  const content = Buffer.from(data.content || '', 'base64').toString('utf8')
+  return JSON.parse(content)
+}
+
+function defaultPreviewConfig(repoFullName) {
+  const repoName = repoFullName.split('/').pop() || 'preview'
+  return {
+    enabled: true,
+    type: 'static',
+    branch: 'main',
+    displayName: repoName,
+    subdomain: repoName,
+  }
+}
+
+async function cloneRepo(cloneUrl, targetDir, branch) {
+  await fs.rm(targetDir, { recursive: true, force: true })
+  await fs.mkdir(targetDir, { recursive: true })
+  await execFileAsync('git', [
+    'clone',
+    '--depth',
+    '1',
+    '--branch',
+    branch,
+    cloneUrl,
+    targetDir,
+  ])
+}
+
+async function deployStatic(sourceDir, targetDir, indexSubdir = '') {
+  const webroot = indexSubdir ? path.join(sourceDir, indexSubdir) : sourceDir
+  await fs.rm(targetDir, { recursive: true, force: true })
+  await fs.mkdir(targetDir, { recursive: true })
+  await execFileAsync('cp', ['-R', `${webroot}/.`, targetDir])
+}
+
+async function deployNodeBuild(sourceDir, targetDir) {
+  await execFileAsync('npm', ['ci'], { cwd: sourceDir })
+  await execFileAsync('npm', ['run', 'build'], { cwd: sourceDir })
+  const distDir = path.join(sourceDir, 'dist')
+  await deployStatic(distDir, targetDir)
+}
+
+async function runDeploy(repoFullName, branch, previewConfig) {
+  if (!config.preview.deployRoot) {
+    return { deployed: false, reason: 'PREVIEW_DEPLOY_ROOT nicht gesetzt' }
+  }
+
+  const subdomain = previewConfig.subdomain || repoFullName.split('/').pop()
+  const cloneUrl = `${config.gitea.baseUrl}/${repoFullName}.git`
+  const workDir = path.join(process.cwd(), 'preview-data', repoFullName.replace(/\//g, '_'))
+  const targetDir = path.join(config.preview.deployRoot, subdomain)
+
+  await cloneRepo(cloneUrl, workDir, branch)
+
+  if (previewConfig.type === 'node_build') {
+    await deployNodeBuild(workDir, targetDir)
+  } else {
+    await deployStatic(workDir, targetDir, previewConfig.index || '')
+  }
+
+  return { deployed: true, subdomain, targetDir }
+}
+
+router.post('/gitea', async (req, res) => {
+  if (!verifyWebhookToken(req)) {
+    return res.status(401).json({ error: 'Unauthorized' })
+  }
+
+  const payload = req.body || {}
+  const ref = payload.ref || ''
+  const repo = payload.repository || {}
+  const repoFullName = repo.full_name || ''
+
+  if (!repoFullName) {
+    return res.status(400).json({ error: 'repository.full_name fehlt' })
+  }
+
+  const branch = ref.replace('refs/heads/', '') || 'main'
+
+  try {
+    let previewConfig = await fetchPreviewConfig(repoFullName, branch)
+    if (!previewConfig) {
+      previewConfig = defaultPreviewConfig(repoFullName)
+    }
+
+    if (!previewConfig.enabled) {
+      return res.json({ ok: true, skipped: true, reason: 'preview disabled' })
+    }
+
+    const configBranch = previewConfig.branch || 'main'
+    if (branch !== configBranch) {
+      return res.json({ ok: true, skipped: true, reason: `branch ${branch} != ${configBranch}` })
+    }
+
+    const subdomain = previewConfig.subdomain || repoFullName.split('/').pop()
+    const previewUrl = `https://${subdomain}.${config.preview.baseHost}`
+
+    let deployResult = { deployed: false }
+    try {
+      deployResult = await runDeploy(repoFullName, branch, previewConfig)
+    } catch (deployErr) {
+      console.error('[webhook] deploy failed:', deployErr.message)
+      deployResult = { deployed: false, error: deployErr.message }
+    }
+
+    const project = await upsertWebsiteProjectByRepo(repoFullName, {
+      projectName: previewConfig.displayName || subdomain,
+      templateName: previewConfig.templateName || 'webklar-preview-template',
+      giteaRepoUrl: repo.html_url || `${config.gitea.baseUrl}/${repoFullName}`,
+      giteaRepoName: repo.name || subdomain,
+      repoFullName,
+      subdomain,
+      previewUrl,
+      status: deployResult.deployed ? 'deployed' : 'pending',
+      provisioningStatus: deployResult.deployed ? 'ready' : 'deploy_failed',
+    })
+
+    return res.json({
+      ok: true,
+      repoFullName,
+      subdomain,
+      previewUrl,
+      deploy: deployResult,
+      projectId: project.$id,
+    })
+  } catch (err) {
+    console.error('[webhook]', err)
+    return res.status(500).json({ error: err.message || 'Webhook-Verarbeitung fehlgeschlagen' })
+  }
+})
+
+export default router
--- a/server/services/appwriteAdmin.js
+++ b/server/services/appwriteAdmin.js
@@ -0,0 +1,88 @@
+import { Client, Account, Databases, ID, Query } from 'node-appwrite'
+import { config } from '../config.js'
+
+export function createAdminClient() {
+  const client = new Client()
+    .setEndpoint(config.appwrite.endpoint)
+    .setProject(config.appwrite.projectId)
+    .setKey(config.appwrite.apiKey)
+
+  return {
+    client,
+    databases: new Databases(client),
+  }
+}
+
+export function createUserClient() {
+  const client = new Client()
+    .setEndpoint(config.appwrite.endpoint)
+    .setProject(config.appwrite.projectId)
+
+  return {
+    client,
+    account: new Account(client),
+  }
+}
+
+export async function listDocuments(collectionId, queries = []) {
+  const { databases } = createAdminClient()
+  const response = await databases.listDocuments(
+    config.appwrite.databaseId,
+    collectionId,
+    queries
+  )
+  return response.documents
+}
+
+export async function getCustomerByAppwriteUserId(appwriteUserId) {
+  const docs = await listDocuments(config.collections.customers, [
+    Query.equal('appwriteUserId', appwriteUserId),
+    Query.limit(1),
+  ])
+  return docs[0] || null
+}
+
+export async function getPortalAccessByCustomerId(customerId) {
+  const docs = await listDocuments(config.collections.customerPortalAccess, [
+    Query.equal('customerId', customerId),
+    Query.limit(1),
+  ])
+  return docs[0] || null
+}
+
+export async function updateDocument(collectionId, documentId, data) {
+  const { databases } = createAdminClient()
+  return databases.updateDocument(
+    config.appwrite.databaseId,
+    collectionId,
+    documentId,
+    data
+  )
+}
+
+export async function upsertWebsiteProjectByRepo(repoFullName, data) {
+  const { databases } = createAdminClient()
+  const existing = await listDocuments(config.collections.websiteProjects, [
+    Query.equal('repoFullName', repoFullName),
+    Query.limit(1),
+  ])
+
+  const now = new Date().toISOString()
+  const payload = { ...data, updatedAt: now }
+
+  if (existing[0]) {
+    return databases.updateDocument(
+      config.appwrite.databaseId,
+      config.collections.websiteProjects,
+      existing[0].$id,
+      payload
+    )
+  }
+
+  return databases.createDocument(
+    config.appwrite.databaseId,
+    config.collections.websiteProjects,
+    ID.unique(),
+    { ...payload, createdAt: now }
+  )
+}
--- a/server/services/appwriteClient.js
+++ b/server/services/appwriteClient.js
@@ -0,0 +1,24 @@
+import { createUserClient } from './appwriteAdmin.js'
+
+export async function loginWithAppwrite(email, password) {
+  const { client, account } = createUserClient()
+
+  try {
+  await account.createEmailPasswordSession(email, password)
+  } catch (err) {
+    const message = err?.message || 'Anmeldung fehlgeschlagen'
+    const error = new Error(message)
+    error.status = 401
+    throw error
+  }
+
+  const user = await account.get()
+
+  try {
+    await account.deleteSession('current')
+  } catch {
+    // Portal nutzt eigene Session; Appwrite-Session wird nicht persistiert
+  }
+
+  return user
+}