Fixed permission management

Reviewed-on: #9

.ai/conventions.md

@@ -0,0 +1,81 @@
+# Projektkonventionen
+
+## Architektur: Actions (Request-Command-Response)
+
+Jede fachliche Operation wird in eine eigene Action ausgelagert, die aus drei Klassen besteht.
+Pfad: `app/Domains/{Domain}/Actions/{ActionName}/`
+
+### Struktur
+{ActionName}Request.php → Eingabedaten (Konstruktor oder Factory-Methoden) {ActionName}Command.php → Logik, ruft execute(): {ActionName}Response auf {ActionName}Response.php → Rückgabedaten (public Properties)
+
+
+### Regeln
+- Der Controller enthält **keine** fachliche Logik – nur Absicherung, Action-Aufruf und HTTP-Response
+- Commands sind nicht statisch und werden immer instanziiert
+- Hat ein Request mehrere Varianten, werden **Factory-Methoden** (`forX()`) statt mehrerer Konstruktoren verwendet
+- Aufrufreihenfolge im Controller: `new Request → new Command(request) → command->execute() → Response verwenden`
+
+---
+
+## Controller
+
+- Alle Controller erben von `App\Scopes\CommonController`
+- `CommonController` stellt folgende Repositories bereit (keine eigene Instanziierung nötig):
+    - `$this->eventParticipants` → `EventParticipantRepository`
+    - `$this->events` → `EventRepository`
+    - `$this->invoices` → `InvoiceRepository`
+    - `$this->costUnits` → `CostUnitRepository`
+    - `$this->users` → `UserRepository`
+    - `$this->tenant` → aktueller `Tenant`
+
+- Die Controller besitzen ausschließlich eine __invoke() - Funktion
+- Für die Speichern-Actions werden separate Controller-Klassen erstellt (z. B. `StoreEventParticipantController`)
+---
+
+## Repositories
+
+- Datenbankzugriffe gehören **immer** ins Repository, nie direkt in Controller oder Actions
+- Sicherheitschecks (z. B. „gehört diese Teilnahme dem eingeloggten User?") werden als eigene Repository-Methoden gekapselt
+- Tenant-Filter: `app('tenant')->slug`
+- Eingeloggter User: `auth()->user()`
+
+---
+
+## Models / Ressourcen
+
+- Models erben von `App\Scopes\InstancedModel` (mit globalem `SiteScope`)
+- `$model->toResource()->toArray($request)` liefert das aufbereitete Array über die zugehörige Resource-Klasse
+- Resource-Klassen liegen in `app/Resources/{ModelName}Resource.php`
+
+---
+
+## Tenant
+
+- Der aktuelle Tenant ist per `app('tenant')` verfügbar (gesetzt durch `IdentifyTenant`-Middleware)
+- Tenant-Slug: `app('tenant')->slug`
+- Jede tenant-spezifische DB-Abfrage filtert auf `['tenant' => app('tenant')->slug]`
+
+---
+
+## Routing
+
+- API-Routen liegen in `app/Domains/{Domain}/Routes/api.php`
+- Alle Routen sind in `IdentifyTenant::class`-Middleware gewrappt
+- Authentifizierte Routen zusätzlich in `['auth']`-Middleware
+
+---
+
+## Mails
+
+- Mails erben von `Illuminate\Mail\Mailable`
+- Attachments werden über `Attachment::fromData(fn () => $content, $filename)->withMime(...)` angehängt
+- Werden Daten sowohl in `content()` als auch in `attachments()` benötigt, wird eine **private Hilfsmethode mit Lazy-Caching** verwendet (einmaliges Berechnen, Ergebnis in private Property speichern)
+- Blade-Templates referenzieren Mail-Attachments per `cid:`-Link: `<a href="cid:{{ $filename }}">...</a>`
+
+## Actions
+ - Die Actions sind in `app/Domains/{Domain}/Actions/{ActionName}/`-Verzeichnissen organisiert
+ - Jede Action besitzt einen Request, einen Command und einen Response 
+ - Der Request besitzt auschließlich einen Konstruktor, der die notwendigen Parameter annimmt
+ - Die Response-Klasse enthält ausschließlich die notwendigen Daten für die Antwort
+ - Die Action-Klasse enthält die Logik für die Verarbeitung der Anfrage und die Generierung der Antwort
+ - Die Logik wird in einer execute() - Funktion innerhalb des Commands impplementiert. Private Funktionen, für ausgelagerte Prozesse sind zulässig, wenn der Code damit lesbarer wird.

.dockerignore

@@ -0,0 +1,5 @@
+.ai
+.junie
+.git
+storage
+tests

.junie/AGENTS.md

@@ -0,0 +1,12 @@
+# Project Guidelines
+    
+This is a placeholder of the project guidelines for Junie.
+Replace this text with any project-level instructions for Junie, e.g.:
+
+* What is the project structure
+* Whether Junie should run tests to check the correctness of the proposed solution
+* How does Junie run tests (once it requires any non-standard approach)
+* Whether Junie should build the project before submitting the result
+* Any code-style related instructions
+
+As an option you can ask Junie to create these guidelines for you.

app/Casts/AmountCast.php

@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Casts;
+
+use App\ValueObjects\Amount;
+use Illuminate\Contracts\Database\Eloquent\CastsAttributes;
+use Illuminate\Database\Eloquent\Model;
+
+class AmountCast implements CastsAttributes
+{
+    public function get(Model $model, string $key, mixed $value, array $attributes): ?Amount
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        return new Amount((float) $value, 'Euro');
+    }
+
+    public function set(Model $model, string $key, mixed $value, array $attributes): ?float
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        if ($value instanceof Amount) {
+            return $value->getAmount();
+        }
+
+        return (float) $value;
+    }
+}

app/Domains/Admin/Actions/CreateTenant/CreateTenantAction.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+use App\Models\Tenant;
+
+class CreateTenantAction
+{
+    public function __construct(private CreateTenantRequest $request)
+    {
+    }
+
+    public function execute(): CreateTenantResponse
+    {
+        $response = new CreateTenantResponse();
+
+        $tenant = Tenant::create([
+            'name' => $this->request->name,
+            'slug' => $this->request->slug,
+            'url' => $this->request->url,
+            'email' => '',
+            'email_finance' => '',
+            'account_name' => '',
+            'account_iban' => '',
+            'account_bic' => '',
+            'city' => '',
+            'postcode' => '',
+            'is_active_local_group' => true,
+            'has_active_instance' => true,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Stamm wurde angelegt.';
+        $response->slug = $tenant->slug;
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/CreateTenant/CreateTenantRequest.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+class CreateTenantRequest
+{
+    public function __construct(
+        public string $name,
+        public string $slug,
+        public string $url,
+    ) {
+    }
+}

app/Domains/Admin/Actions/CreateTenant/CreateTenantResponse.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+class CreateTenantResponse
+{
+    public bool $success = false;
+    public string $message = '';
+    public ?string $slug = null;
+}

app/Domains/Admin/Actions/ToggleUserActive/ToggleUserActiveAction.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+class ToggleUserActiveAction
+{
+    public function __construct(private ToggleUserActiveRequest $request)
+    {
+    }
+
+    public function execute(): ToggleUserActiveResponse
+    {
+        $response = new ToggleUserActiveResponse();
+
+        if ($this->request->currentUserId === $this->request->user->id) {
+            $response->message = 'Du kannst dich nicht selbst deaktivieren.';
+            return $response;
+        }
+
+        $this->request->user->update(['active' => !$this->request->user->active]);
+
+        $status = $this->request->user->active ? 'aktiviert' : 'deaktiviert';
+
+        $response->success = true;
+        $response->message = 'Benutzer*in wurde ' . $status . '.';
+        $response->active = $this->request->user->active;
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/ToggleUserActive/ToggleUserActiveRequest.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+use App\Models\User;
+
+class ToggleUserActiveRequest
+{
+    public function __construct(
+        public User $user,
+        public int $currentUserId,
+    ) {
+    }
+}

app/Domains/Admin/Actions/ToggleUserActive/ToggleUserActiveResponse.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+class ToggleUserActiveResponse
+{
+    public bool $success = false;
+    public string $message = '';
+    public ?bool $active = null;
+}

app/Domains/Admin/Actions/UpdateTenantContact/UpdateTenantContactAction.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+class UpdateTenantContactAction
+{
+    public function __construct(private UpdateTenantContactRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantContactResponse
+    {
+        $response = new UpdateTenantContactResponse();
+
+        $this->request->tenant->update([
+            'email' => $this->request->email,
+            'email_finance' => $this->request->emailFinance,
+            'postcode' => $this->request->postcode,
+            'city' => $this->request->city,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Kontaktdaten wurden gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateTenantContact/UpdateTenantContactRequest.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+use App\Models\Tenant;
+
+class UpdateTenantContactRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $email,
+        public string $emailFinance,
+        public string $postcode,
+        public string $city,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateTenantContact/UpdateTenantContactResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+class UpdateTenantContactResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Actions/UpdateTenantGdpr/UpdateTenantGdprAction.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+class UpdateTenantGdprAction
+{
+    public function __construct(private UpdateTenantGdprRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantGdprResponse
+    {
+        $response = new UpdateTenantGdprResponse();
+
+        $this->request->tenant->update([
+            'gdpr_text' => $this->request->gdprText,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Datenschutzerklärung wurde gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateTenantGdpr/UpdateTenantGdprRequest.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+use App\Models\Tenant;
+
+class UpdateTenantGdprRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $gdprText,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateTenantGdpr/UpdateTenantGdprResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+class UpdateTenantGdprResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Actions/UpdateTenantGeneral/UpdateTenantGeneralAction.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+class UpdateTenantGeneralAction
+{
+    public function __construct(private UpdateTenantGeneralRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantGeneralResponse
+    {
+        $response = new UpdateTenantGeneralResponse();
+
+        $this->request->tenant->update([
+            'name' => $this->request->name,
+            'slug' => $this->request->slug,
+            'url' => $this->request->url,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Allgemeine Daten wurden gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateTenantGeneral/UpdateTenantGeneralRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+use App\Models\Tenant;
+
+class UpdateTenantGeneralRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $name,
+        public string $slug,
+        public string $url,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateTenantGeneral/UpdateTenantGeneralResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+class UpdateTenantGeneralResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Actions/UpdateTenantImpress/UpdateTenantImpressAction.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+class UpdateTenantImpressAction
+{
+    public function __construct(private UpdateTenantImpressRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantImpressResponse
+    {
+        $response = new UpdateTenantImpressResponse();
+
+        $this->request->tenant->update([
+            'impress_text' => $this->request->impressText,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Impressum wurde gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateTenantImpress/UpdateTenantImpressRequest.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+use App\Models\Tenant;
+
+class UpdateTenantImpressRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $impressText,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateTenantImpress/UpdateTenantImpressResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+class UpdateTenantImpressResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Actions/UpdateTenantPayment/UpdateTenantPaymentAction.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+class UpdateTenantPaymentAction
+{
+    public function __construct(private UpdateTenantPaymentRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantPaymentResponse
+    {
+        $response = new UpdateTenantPaymentResponse();
+
+        $this->request->tenant->update([
+            'account_iban' => $this->request->accountIban,
+            'account_bic' => $this->request->accountBic,
+            'account_name' => $this->request->accountName,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Bezahldaten wurden gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateTenantPayment/UpdateTenantPaymentRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+use App\Models\Tenant;
+
+class UpdateTenantPaymentRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $accountIban,
+        public string $accountBic,
+        public string $accountName,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateTenantPayment/UpdateTenantPaymentResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+class UpdateTenantPaymentResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Actions/UpdateUser/UpdateUserAction.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+class UpdateUserAction
+{
+    public function __construct(private UpdateUserRequest $request)
+    {
+    }
+
+    public function execute(): UpdateUserResponse
+    {
+        $response = new UpdateUserResponse();
+
+        $allowedFields = [
+            'firstname', 'lastname', 'nickname', 'email', 'phone', 'birthday',
+            'membership_id', 'address_1', 'address_2', 'postcode', 'city',
+            'eating_habits', 'swimming_permission', 'first_aid_permission',
+            'bank_account_owner', 'bank_account_iban',
+            'medications', 'allergies', 'intolerances',
+            'user_role_local_group',
+        ];
+
+        if ($this->request->isLvTenant) {
+            $allowedFields[] = 'local_group';
+            if (!$this->request->isOwnUser) {
+                $allowedFields[] = 'user_role_main';
+            }
+        }
+
+        $data = array_intersect_key($this->request->data, array_flip($allowedFields));
+        $this->request->user->update($data);
+
+        $response->success = true;
+        $response->message = 'Benutzerdaten wurden gespeichert.';
+
+        return $response;
+    }
+}

app/Domains/Admin/Actions/UpdateUser/UpdateUserRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+use App\Models\User;
+
+class UpdateUserRequest
+{
+    public function __construct(
+        public User $user,
+        public array $data,
+        public bool $isOwnUser,
+        public bool $isLvTenant,
+    ) {
+    }
+}

app/Domains/Admin/Actions/UpdateUser/UpdateUserResponse.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+class UpdateUserResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}

app/Domains/Admin/Controllers/AdminDashboardController.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class AdminDashboardController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/Dashboard', []);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantContactGetController.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantContactGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'email' => $tenant->email,
+            'email_finance' => $tenant->email_finance,
+            'postcode' => $tenant->postcode,
+            'city' => $tenant->city,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/contact',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantContactUpdateController.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactAction;
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantContactUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantContactAction(new UpdateTenantContactRequest(
+            tenant: $tenant,
+            email: $request->input('email'),
+            emailFinance: $request->input('email_finance'),
+            postcode: $request->input('postcode'),
+            city: $request->input('city'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantGdprGetController.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantGdprGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'gdpr_text' => $tenant->gdpr_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/gdpr',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantGdprUpdateController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprAction;
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantGdprUpdateController extends CommonController
+{
+
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantGdprAction(new UpdateTenantGdprRequest(
+            tenant: $tenant,
+            gdprText: $request->input('gdpr_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantImpressGetController.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantImpressGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'impress_text' => $tenant->impress_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/impress',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantImpressUpdateController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressAction;
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantImpressUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantImpressAction(new UpdateTenantImpressRequest(
+            tenant: $tenant,
+            impressText: $request->input('impress_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantPaymentGetController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantPaymentGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'account_iban' => $tenant->account_iban,
+            'account_bic' => $tenant->account_bic,
+            'account_name' => $tenant->account_name,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/payment',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/ManagedTenantPaymentUpdateController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentAction;
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantPaymentUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantPaymentAction(new UpdateTenantPaymentRequest(
+            tenant: $tenant,
+            accountIban: $request->input('account_iban'),
+            accountBic: $request->input('account_bic'),
+            accountName: $request->input('account_name'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantContactGetController.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantContactGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'email' => $this->tenant->email,
+            'email_finance' => $this->tenant->email_finance,
+            'postcode' => $this->tenant->postcode,
+            'city' => $this->tenant->city,
+            'saveEndpoint' => '/api/v1/admin/tenant/contact',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantContactUpdateController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactAction;
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantContactUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantContactAction(new UpdateTenantContactRequest(
+            tenant: $this->tenant,
+            email: $request->input('email'),
+            emailFinance: $request->input('email_finance'),
+            postcode: $request->input('postcode'),
+            city: $request->input('city'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantCreateController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\CreateTenant\CreateTenantAction;
+use App\Domains\Admin\Actions\CreateTenant\CreateTenantRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantCreateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new CreateTenantAction(new CreateTenantRequest(
+            name: $request->input('name'),
+            slug: $request->input('slug'),
+            url: $request->input('url'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+            'slug' => $response->slug,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantEditPageController.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantEditPageController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): Response
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $inertiaProvider = new InertiaProvider('Admin/TenantEdit', [
+            'tenant' => [
+                'name' => $tenant->name,
+                'slug' => $tenant->slug,
+                'url' => $tenant->url,
+                'is_active_local_group' => $tenant->is_active_local_group,
+            ],
+        ]);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Admin/Controllers/TenantGdprGetController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGdprGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'gdpr_text' => $this->tenant->gdpr_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenant/gdpr',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantGdprUpdateController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprAction;
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGdprUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantGdprAction(new UpdateTenantGdprRequest(
+            tenant: $this->tenant,
+            gdprText: $request->input('gdpr_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantGeneralGetController.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGeneralGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'name' => $tenant->name,
+            'slug' => $tenant->slug,
+            'url' => $tenant->url,
+            'is_active_local_group' => $tenant->is_active_local_group,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/general',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantGeneralUpdateController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGeneral\UpdateTenantGeneralAction;
+use App\Domains\Admin\Actions\UpdateTenantGeneral\UpdateTenantGeneralRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGeneralUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantGeneralAction(new UpdateTenantGeneralRequest(
+            tenant: $tenant,
+            name: $request->input('name'),
+            slug: $request->input('slug'),
+            url: $request->input('url'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantImpressGetController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantImpressGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'impress_text' => $this->tenant->impress_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenant/impress',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantImpressUpdateController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressAction;
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantImpressUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantImpressAction(new UpdateTenantImpressRequest(
+            tenant: $this->tenant,
+            impressText: $request->input('impress_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantListApiController.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantListApiController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $tenants = $this->adminTenants->getActiveTenants();
+
+        $mapped = $tenants->map(function ($tenant) {
+            return [
+                'name' => $tenant->name,
+                'slug' => $tenant->slug,
+                'url' => $tenant->url,
+                'is_active_local_group' => $tenant->is_active_local_group,
+            ];
+        });
+
+        return response()->json(['tenants' => $mapped]);
+    }
+}

app/Domains/Admin/Controllers/TenantListPageController.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantListPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/TenantList', []);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Admin/Controllers/TenantPageController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/TenantData', [
+            'tenant' => [
+                'name' => $this->tenant->name,
+                'slug' => $this->tenant->slug,
+                'url' => $this->tenant->url,
+                'is_active_local_group' => $this->tenant->is_active_local_group,
+            ],
+        ]);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Admin/Controllers/TenantPaymentGetController.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantPaymentGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'account_iban' => $this->tenant->account_iban,
+            'account_bic' => $this->tenant->account_bic,
+            'account_name' => $this->tenant->account_name,
+            'saveEndpoint' => '/api/v1/admin/tenant/payment',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/TenantPaymentUpdateController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentAction;
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantPaymentUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantPaymentAction(new UpdateTenantPaymentRequest(
+            tenant: $this->tenant,
+            accountIban: $request->input('account_iban'),
+            accountBic: $request->input('account_bic'),
+            accountName: $request->input('account_name'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/UserDetailGetController.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Enumerations\UserRole;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserDetailGetController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $userData = $user->toArray();
+        unset($userData['password'], $userData['remember_token'], $userData['activation_token'], $userData['activation_token_expires_at']);
+
+        $tenantNames = $this->adminTenants->getTenantNames();
+        $userData['nicename'] = $user->getNicename();
+        $userData['fullname'] = $user->getFullName();
+        $userData['local_group_name'] = $tenantNames[$user->local_group] ?? $user->local_group;
+
+        return response()->json([
+            'user' => $userData,
+            'isOwnUser' => auth()->id() === $user->id,
+            'isLvTenant' => $this->tenant->slug === 'lv',
+            'userRoles' => UserRole::all()->map(fn($role) => ['slug' => $role->slug, 'name' => $role->name]),
+            'localGroups' => $this->adminTenants->getActiveLocalGroups()->map(fn($t) => ['slug' => $t->slug, 'name' => $t->name]),
+        ]);
+    }
+}

app/Domains/Admin/Controllers/UserListApiController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserListApiController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $tenantNames = $this->adminTenants->getTenantNames();
+        $users = $this->adminUsers->getListForTenant($this->tenant->slug);
+
+        $mapped = $users->map(function ($user) use ($tenantNames) {
+            return [
+                'id' => $user->id,
+                'firstname' => $user->firstname,
+                'lastname' => $user->lastname,
+                'nickname' => $user->nickname,
+                'local_group' => $user->local_group,
+                'local_group_name' => $tenantNames[$user->local_group] ?? $user->local_group,
+                'active' => $user->active,
+            ];
+        });
+
+        return response()->json(['users' => $mapped]);
+    }
+}

app/Domains/Admin/Controllers/UserListPageController.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class UserListPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/UserList', [
+            'isLvTenant' => $this->tenant->slug === 'lv',
+        ]);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Admin/Controllers/UserResetPasswordController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\UserManagement\Actions\GenerateActivationToken\GenerateActivationTokenCommand;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserResetPasswordController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        if (!$user->email) {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Benutzer*in hat keine E-Mail-Adresse hinterlegt.',
+            ]);
+        }
+
+        $command = new GenerateActivationTokenCommand($user);
+        $command->execute();
+
+        return response()->json([
+            'status' => 'success',
+            'message' => 'Passwort-Reset-Mail wurde gesendet.',
+        ]);
+    }
+}

app/Domains/Admin/Controllers/UserToggleActiveController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\ToggleUserActive\ToggleUserActiveAction;
+use App\Domains\Admin\Actions\ToggleUserActive\ToggleUserActiveRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserToggleActiveController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $action = new ToggleUserActiveAction(new ToggleUserActiveRequest(
+            user: $user,
+            currentUserId: auth()->id(),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+            'active' => $response->active,
+        ]);
+    }
+}

app/Domains/Admin/Controllers/UserUpdateController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateUser\UpdateUserAction;
+use App\Domains\Admin\Actions\UpdateUser\UpdateUserRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserUpdateController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $action = new UpdateUserAction(new UpdateUserRequest(
+            user: $user,
+            data: $request->all(),
+            isOwnUser: auth()->id() === $user->id,
+            isLvTenant: $this->tenant->slug === 'lv',
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}

app/Domains/Admin/Repositories/AdminTenantRepository.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Repositories;
+
+use App\Models\Tenant;
+use Illuminate\Database\Eloquent\Collection;
+use Illuminate\Support\Collection as SupportCollection;
+
+class AdminTenantRepository
+{
+    public function findBySlug(string $slug): Tenant
+    {
+        return Tenant::where('slug', $slug)->firstOrFail();
+    }
+
+    public function getActiveTenants(): Collection
+    {
+        return Tenant::where('has_active_instance', true)->get();
+    }
+
+    public function getTenantNames(): SupportCollection
+    {
+        return Tenant::pluck('name', 'slug');
+    }
+
+    public function getActiveLocalGroups(): Collection
+    {
+        return Tenant::where('is_active_local_group', true)->get();
+    }
+}

app/Domains/Admin/Repositories/AdminUserRepository.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Domains\Admin\Repositories;
+
+use App\Models\User;
+use Illuminate\Database\Eloquent\Collection;
+
+class AdminUserRepository
+{
+    public function findById(int $id): User
+    {
+        return User::findOrFail($id);
+    }
+
+    public function getListForTenant(string $tenantSlug): Collection
+    {
+        $query = User::query();
+
+        if ($tenantSlug !== 'lv') {
+            $query->where('local_group', $tenantSlug);
+        }
+
+        return $query->orderBy('lastname')->orderBy('firstname')->get();
+    }
+}

app/Domains/Admin/Routes/api.php

@@ -0,0 +1,71 @@
+<?php
+
+use App\Domains\Admin\Controllers\UserDetailGetController;
+use App\Domains\Admin\Controllers\UserListApiController;
+use App\Domains\Admin\Controllers\UserResetPasswordController;
+use App\Domains\Admin\Controllers\UserToggleActiveController;
+use App\Domains\Admin\Controllers\UserUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantContactGetController;
+use App\Domains\Admin\Controllers\ManagedTenantContactUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantGdprGetController;
+use App\Domains\Admin\Controllers\ManagedTenantGdprUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantImpressGetController;
+use App\Domains\Admin\Controllers\ManagedTenantImpressUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantPaymentGetController;
+use App\Domains\Admin\Controllers\ManagedTenantPaymentUpdateController;
+use App\Domains\Admin\Controllers\TenantContactGetController;
+use App\Domains\Admin\Controllers\TenantContactUpdateController;
+use App\Domains\Admin\Controllers\TenantCreateController;
+use App\Domains\Admin\Controllers\TenantGdprGetController;
+use App\Domains\Admin\Controllers\TenantGdprUpdateController;
+use App\Domains\Admin\Controllers\TenantGeneralGetController;
+use App\Domains\Admin\Controllers\TenantGeneralUpdateController;
+use App\Domains\Admin\Controllers\TenantImpressGetController;
+use App\Domains\Admin\Controllers\TenantImpressUpdateController;
+use App\Domains\Admin\Controllers\TenantListApiController;
+use App\Domains\Admin\Controllers\TenantPaymentGetController;
+use App\Domains\Admin\Controllers\TenantPaymentUpdateController;
+use App\Middleware\AdminRoleMiddleware;
+use App\Middleware\IdentifyTenant;
+use App\Middleware\LvOnlyMiddleware;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware([IdentifyTenant::class, 'auth', AdminRoleMiddleware::class])->group(function () {
+    Route::prefix('api/v1/admin/tenant')->group(function () {
+        Route::get('/contact', TenantContactGetController::class);
+        Route::post('/contact', TenantContactUpdateController::class);
+        Route::get('/payment', TenantPaymentGetController::class);
+        Route::post('/payment', TenantPaymentUpdateController::class);
+        Route::get('/impress', TenantImpressGetController::class);
+        Route::post('/impress', TenantImpressUpdateController::class);
+        Route::get('/gdpr', TenantGdprGetController::class);
+        Route::post('/gdpr', TenantGdprUpdateController::class);
+    });
+
+    Route::prefix('api/v1/admin/users')->group(function () {
+        Route::get('/list', UserListApiController::class);
+        Route::get('/{id}', UserDetailGetController::class);
+        Route::post('/{id}', UserUpdateController::class);
+        Route::post('/{id}/toggle-active', UserToggleActiveController::class);
+        Route::post('/{id}/reset-password', UserResetPasswordController::class);
+    });
+
+    Route::middleware(LvOnlyMiddleware::class)->group(function () {
+        Route::prefix('api/v1/admin/tenants')->group(function () {
+            Route::get('/list', TenantListApiController::class);
+            Route::post('/create', TenantCreateController::class);
+            Route::prefix('/{slug}')->group(function () {
+                Route::get('/general', TenantGeneralGetController::class);
+                Route::post('/general', TenantGeneralUpdateController::class);
+                Route::get('/contact', ManagedTenantContactGetController::class);
+                Route::post('/contact', ManagedTenantContactUpdateController::class);
+                Route::get('/payment', ManagedTenantPaymentGetController::class);
+                Route::post('/payment', ManagedTenantPaymentUpdateController::class);
+                Route::get('/impress', ManagedTenantImpressGetController::class);
+                Route::post('/impress', ManagedTenantImpressUpdateController::class);
+                Route::get('/gdpr', ManagedTenantGdprGetController::class);
+                Route::post('/gdpr', ManagedTenantGdprUpdateController::class);
+            });
+        });
+    });
+});

app/Domains/Admin/Routes/web.php

@@ -0,0 +1,24 @@
+<?php
+
+use App\Domains\Admin\Controllers\AdminDashboardController;
+use App\Domains\Admin\Controllers\TenantEditPageController;
+use App\Domains\Admin\Controllers\TenantListPageController;
+use App\Domains\Admin\Controllers\TenantPageController;
+use App\Domains\Admin\Controllers\UserListPageController;
+use App\Middleware\AdminRoleMiddleware;
+use App\Middleware\IdentifyTenant;
+use App\Middleware\LvOnlyMiddleware;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware([IdentifyTenant::class, 'auth', AdminRoleMiddleware::class])->group(function () {
+    Route::prefix('admin')->group(function () {
+        Route::get('/', AdminDashboardController::class);
+        Route::get('/tenant', TenantPageController::class);
+        Route::get('/users', UserListPageController::class);
+
+        Route::middleware(LvOnlyMiddleware::class)->group(function () {
+            Route::get('/tenants', TenantListPageController::class);
+            Route::get('/tenants/{slug}', TenantEditPageController::class);
+        });
+    });
+});

app/Domains/Admin/Views/Dashboard.vue

@@ -0,0 +1,15 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+</script>
+
+<template>
+    <AdminAppLayout title="Administration">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <h2>Administration</h2>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+</style>

app/Domains/Admin/Views/Partials/TenantContact.vue

@@ -0,0 +1,146 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    email: props.data.email ?? '',
+    email_finance: props.data.email_finance ?? '',
+    postcode: props.data.postcode ?? '',
+    city: props.data.city ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/contact'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>Email:</th><td>{{ form.email }}</td></tr>
+            <tr><th>Email Schatzmeister*in:</th><td>{{ form.email_finance }}</td></tr>
+            <tr><th>Postleitzahl:</th><td>{{ form.postcode }}</td></tr>
+            <tr><th>Ort:</th><td>{{ form.city }}</td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>Email:</th>
+                <td><input type="email" v-model="form.email" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Email Schatzmeister*in:</th>
+                <td><input type="email" v-model="form.email_finance" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Postleitzahl:</th>
+                <td><input type="text" v-model="form.postcode" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Ort:</th>
+                <td><input type="text" v-model="form.city" class="form-input" /></td>
+            </tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>

app/Domains/Admin/Views/Partials/TenantGdpr.vue

@@ -0,0 +1,87 @@
+<script setup>
+import { ref } from 'vue';
+import TextEditor from "../../../../Views/Components/TextEditor.vue";
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+import gdprTemplate from "../../../../../resources/templates/gdpr-template.html?raw";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const content = ref(props.data.gdpr_text ?? '')
+
+function autoGenerate() {
+    if (content.value && content.value.trim() !== '') {
+        toast.error('Der Editor ist nicht leer. Bitte leere den Inhalt zuerst, um die Vorlage zu verwenden.')
+        return
+    }
+
+    const today = new Date().toLocaleDateString('de-DE', { day: '2-digit', month: '2-digit', year: 'numeric' })
+    content.value = gdprTemplate.replace('[Datum]', today)
+}
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/gdpr'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: { gdpr_text: content.value },
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div>
+        <TextEditor v-model="content" />
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-generate" @click="autoGenerate">Auto-generieren</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+
+.btn-save, .btn-generate {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-generate {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-generate:hover {
+    background-color: #163a7a;
+}
+</style>

app/Domains/Admin/Views/Partials/TenantGeneral.vue

@@ -0,0 +1,157 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    name: props.data.name ?? '',
+    slug: props.data.slug ?? '',
+    url: props.data.url ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenants/' + props.data.slug + '/general'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>Name:</th><td>{{ form.name }}</td></tr>
+            <tr><th>Slug:</th><td>{{ form.slug }}</td></tr>
+            <tr><th>URL:</th><td>{{ form.url }}</td></tr>
+            <tr><th>Status:</th><td>
+                <span class="badge-active">Aktiv</span>
+            </td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>Name:</th>
+                <td><input type="text" v-model="form.name" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Slug:</th>
+                <td><input type="text" v-model="form.slug" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>URL:</th>
+                <td><input type="text" v-model="form.url" class="form-input" /></td>
+            </tr>
+            <tr><th>Status:</th><td>
+                <span class="badge-active">Aktiv</span>
+            </td></tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>

app/Domains/Admin/Views/Partials/TenantImpress.vue

@@ -0,0 +1,56 @@
+<script setup>
+import { ref } from 'vue';
+import TextEditor from "../../../../Views/Components/TextEditor.vue";
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const content = ref(props.data.impress_text ?? '')
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/impress'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: { impress_text: content.value },
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div>
+        <TextEditor v-model="content" />
+        <button class="btn-save" @click="save">Speichern</button>
+    </div>
+</template>
+
+<style scoped>
+.btn-save {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+</style>

app/Domains/Admin/Views/Partials/TenantPayment.vue

@@ -0,0 +1,140 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    account_iban: props.data.account_iban ?? '',
+    account_bic: props.data.account_bic ?? '',
+    account_name: props.data.account_name ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/payment'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>IBAN:</th><td>{{ form.account_iban }}</td></tr>
+            <tr><th>BIC:</th><td>{{ form.account_bic }}</td></tr>
+            <tr><th>Name Kontoinhaber:</th><td>{{ form.account_name }}</td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>IBAN:</th>
+                <td><input type="text" v-model="form.account_iban" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>BIC:</th>
+                <td><input type="text" v-model="form.account_bic" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Name Kontoinhaber:</th>
+                <td><input type="text" v-model="form.account_name" class="form-input" /></td>
+            </tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>

app/Domains/Admin/Views/Partials/UserDetail.vue

@@ -0,0 +1,331 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: Object,
+})
+
+const emit = defineEmits(['updated', 'closed'])
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const user = props.data.user
+const isOwnUser = props.data.isOwnUser
+const isLvTenant = props.data.isLvTenant
+const userRoles = props.data.userRoles
+const localGroups = props.data.localGroups
+
+const form = ref({
+    firstname: user.firstname ?? '',
+    lastname: user.lastname ?? '',
+    nickname: user.nickname ?? '',
+    email: user.email ?? '',
+    phone: user.phone ?? '',
+    birthday: user.birthday ?? '',
+    membership_id: user.membership_id ?? '',
+    address_1: user.address_1 ?? '',
+    address_2: user.address_2 ?? '',
+    postcode: user.postcode ?? '',
+    city: user.city ?? '',
+    medications: user.medications ?? '',
+    allergies: user.allergies ?? '',
+    intolerances: user.intolerances ?? '',
+    bank_account_owner: user.bank_account_owner ?? '',
+    bank_account_iban: user.bank_account_iban ?? '',
+    user_role_local_group: user.user_role_local_group ?? '',
+    user_role_main: user.user_role_main ?? '',
+    local_group: user.local_group ?? '',
+})
+
+async function save() {
+    const response = await request('/api/v1/admin/users/' + user.id, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+        emit('updated')
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+
+async function toggleActive() {
+    const response = await request('/api/v1/admin/users/' + user.id + '/toggle-active', {
+        method: 'POST',
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        emit('updated')
+    } else {
+        toast.error(response?.message ?? 'Fehler')
+    }
+}
+
+async function resetPassword() {
+    const response = await request('/api/v1/admin/users/' + user.id + '/reset-password', {
+        method: 'POST',
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler')
+    }
+}
+
+function getRoleName(slug) {
+    const role = userRoles.find(r => r.slug === slug)
+    return role ? role.name : slug
+}
+
+function getGroupName(slug) {
+    const group = localGroups.find(g => g.slug === slug)
+    return group ? group.name : slug
+}
+</script>
+
+<template>
+    <div>
+        <div class="detail-header">
+            <h3>{{ user.firstname }} {{ user.lastname }}</h3>
+            <div class="detail-actions">
+                <button v-if="!editing" class="btn-edit" @click="editing = true">Bearbeiten</button>
+                <button class="btn-reset" @click="resetPassword">Passwort zurücksetzen</button>
+                <button v-if="!isOwnUser" :class="user.active ? 'btn-deactivate' : 'btn-activate'" @click="toggleActive">
+                    {{ user.active ? 'Deaktivieren' : 'Aktivieren' }}
+                </button>
+                <button class="btn-close" @click="emit('closed')">Schließen</button>
+            </div>
+        </div>
+
+        <div v-if="!editing">
+            <table class="data-table">
+                <tr><th>Anmeldename:</th><td>{{ user.username }}</td></tr>
+                <tr><th>Vorname:</th><td>{{ form.firstname }}</td></tr>
+                <tr><th>Nachname:</th><td>{{ form.lastname }}</td></tr>
+                <tr><th>Nickname:</th><td>{{ form.nickname }}</td></tr>
+                <tr><th>E-Mail:</th><td>{{ form.email }}</td></tr>
+                <tr><th>Telefon:</th><td>{{ form.phone }}</td></tr>
+                <tr><th>Geburtstag:</th><td>{{ form.birthday }}</td></tr>
+                <tr><th>Mitgliedsnummer:</th><td>{{ form.membership_id }}</td></tr>
+                <tr><th>Adresse 1:</th><td>{{ form.address_1 }}</td></tr>
+                <tr><th>Adresse 2:</th><td>{{ form.address_2 }}</td></tr>
+                <tr><th>PLZ:</th><td>{{ form.postcode }}</td></tr>
+                <tr><th>Ort:</th><td>{{ form.city }}</td></tr>
+                <tr><th>Medikamente:</th><td>{{ form.medications }}</td></tr>
+                <tr><th>Allergien:</th><td>{{ form.allergies }}</td></tr>
+                <tr><th>Unverträglichkeiten:</th><td>{{ form.intolerances }}</td></tr>
+                <tr><th>Kontoinhaber:</th><td>{{ form.bank_account_owner }}</td></tr>
+                <tr><th>IBAN:</th><td>{{ form.bank_account_iban }}</td></tr>
+                <tr><th>Stamm:</th><td>{{ getGroupName(form.local_group) }}</td></tr>
+                <tr><th>Rolle (Stamm):</th><td>{{ getRoleName(form.user_role_local_group) }}</td></tr>
+                <tr><th>Rolle (LV):</th><td>{{ getRoleName(form.user_role_main) }}</td></tr>
+                <tr><th>Status:</th><td>
+                    <span :class="user.active ? 'badge-active' : 'badge-inactive'">
+                        {{ user.active ? 'Aktiv' : 'Inaktiv' }}
+                    </span>
+                </td></tr>
+            </table>
+        </div>
+
+        <div v-else>
+            <table class="data-table">
+                <tr><th>Anmeldename:</th><td>{{ user.username }}</td></tr>
+                <tr><th>Vorname:</th><td><input type="text" v-model="form.firstname" class="form-input" /></td></tr>
+                <tr><th>Nachname:</th><td><input type="text" v-model="form.lastname" class="form-input" /></td></tr>
+                <tr><th>Nickname:</th><td><input type="text" v-model="form.nickname" class="form-input" /></td></tr>
+                <tr><th>E-Mail:</th><td><input type="email" v-model="form.email" class="form-input" /></td></tr>
+                <tr><th>Telefon:</th><td><input type="text" v-model="form.phone" class="form-input" /></td></tr>
+                <tr><th>Geburtstag:</th><td><input type="date" v-model="form.birthday" class="form-input" /></td></tr>
+                <tr><th>Mitgliedsnummer:</th><td><input type="text" v-model="form.membership_id" class="form-input" /></td></tr>
+                <tr><th>Adresse 1:</th><td><input type="text" v-model="form.address_1" class="form-input" /></td></tr>
+                <tr><th>Adresse 2:</th><td><input type="text" v-model="form.address_2" class="form-input" /></td></tr>
+                <tr><th>PLZ:</th><td><input type="text" v-model="form.postcode" class="form-input" /></td></tr>
+                <tr><th>Ort:</th><td><input type="text" v-model="form.city" class="form-input" /></td></tr>
+                <tr><th>Medikamente:</th><td><input type="text" v-model="form.medications" class="form-input" /></td></tr>
+                <tr><th>Allergien:</th><td><input type="text" v-model="form.allergies" class="form-input" /></td></tr>
+                <tr><th>Unverträglichkeiten:</th><td><input type="text" v-model="form.intolerances" class="form-input" /></td></tr>
+                <tr><th>Kontoinhaber:</th><td><input type="text" v-model="form.bank_account_owner" class="form-input" /></td></tr>
+                <tr><th>IBAN:</th><td><input type="text" v-model="form.bank_account_iban" class="form-input" /></td></tr>
+                <tr><th>Stamm:</th><td>
+                    <select v-if="isLvTenant" v-model="form.local_group" class="form-input">
+                        <option v-for="group in localGroups" :key="group.slug" :value="group.slug">{{ group.name }}</option>
+                    </select>
+                    <span v-else>{{ getGroupName(form.local_group) }}</span>
+                </td></tr>
+                <tr><th>Rolle (Stamm):</th><td>
+                    <select v-model="form.user_role_local_group" class="form-input">
+                        <option v-for="role in userRoles" :key="role.slug" :value="role.slug">{{ role.name }}</option>
+                    </select>
+                </td></tr>
+                <tr><th>Rolle (LV):</th><td>
+                    <select v-if="isLvTenant && !isOwnUser" v-model="form.user_role_main" class="form-input">
+                        <option v-for="role in userRoles" :key="role.slug" :value="role.slug">{{ role.name }}</option>
+                    </select>
+                    <span v-else>{{ getRoleName(form.user_role_main) }}</span>
+                </td></tr>
+            </table>
+            <div class="btn-group">
+                <button class="btn-save" @click="save">Speichern</button>
+                <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+            </div>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.detail-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 15px;
+    flex-wrap: wrap;
+    gap: 10px;
+}
+
+.detail-header h3 {
+    margin: 0;
+    color: #1f2937;
+}
+
+.detail-actions {
+    display: flex;
+    gap: 8px;
+    flex-wrap: wrap;
+}
+
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 6px 12px;
+    width: 180px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+    font-size: 0.9rem;
+}
+
+.data-table td {
+    padding: 6px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 5px 8px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.9rem;
+    box-sizing: border-box;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+
+.btn-edit, .btn-save, .btn-cancel, .btn-reset, .btn-deactivate, .btn-activate, .btn-close {
+    padding: 6px 16px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.85rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-reset {
+    background-color: #f59e0b;
+    color: #ffffff;
+}
+
+.btn-reset:hover {
+    background-color: #d97706;
+}
+
+.btn-deactivate {
+    background-color: #ef4444;
+    color: #ffffff;
+}
+
+.btn-deactivate:hover {
+    background-color: #dc2626;
+}
+
+.btn-activate {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-activate:hover {
+    background-color: #15803d;
+}
+
+.btn-close {
+    background-color: #6b7280;
+    color: #ffffff;
+}
+
+.btn-close:hover {
+    background-color: #4b5563;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+</style>

app/Domains/Admin/Views/TenantData.vue

@@ -0,0 +1,109 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import TabbedPage from "../../../Views/Components/TabbedPage.vue";
+import TenantContact from "./Partials/TenantContact.vue";
+import TenantPayment from "./Partials/TenantPayment.vue";
+import TenantImpress from "./Partials/TenantImpress.vue";
+import TenantGdpr from "./Partials/TenantGdpr.vue";
+
+const props = defineProps({
+    tenant: Object,
+})
+
+const tabs = [
+    {
+        title: 'Kontaktdaten',
+        component: TenantContact,
+        endpoint: '/api/v1/admin/tenant/contact',
+    },
+    {
+        title: 'Bezahldaten',
+        component: TenantPayment,
+        endpoint: '/api/v1/admin/tenant/payment',
+    },
+    {
+        title: 'Impressum',
+        component: TenantImpress,
+        endpoint: '/api/v1/admin/tenant/impress',
+    },
+    {
+        title: 'Datenschutzerklärung',
+        component: TenantGdpr,
+        endpoint: '/api/v1/admin/tenant/gdpr',
+    },
+]
+</script>
+
+<template>
+    <AdminAppLayout :title="props.tenant.slug === 'lv' ? 'LV-Daten' : 'Stammesdaten'">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="tenant-header">
+                <tr><th>Name</th><td>{{ props.tenant.name }}</td></tr>
+                <tr><th>Slug</th><td>{{ props.tenant.slug }}</td></tr>
+                <tr><th>mareike-URL:</th><td>{{ props.tenant.url }}</td></tr>
+                <tr><th>Status</th><td>
+                    <span :class="props.tenant.is_active_local_group ? 'badge-active' : 'badge-inactive'">
+                        {{ props.tenant.is_active_local_group ? 'Aktiv' : 'Inaktiv' }}
+                    </span>
+                </td></tr>
+            </table>
+
+            <div style="margin-top: 30px;">
+                <tabbed-page :tabs="tabs" />
+            </div>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.tenant-header {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.tenant-header th {
+    text-align: left;
+    padding: 10px 16px;
+    width: 200px;
+    color: #374151;
+    font-weight: bold;
+    background-color: #f9fafb;
+    border-bottom: 1px solid #d1d5db;
+}
+
+.tenant-header td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #d1d5db;
+}
+
+.tenant-header tr:last-child th,
+.tenant-header tr:last-child td {
+    border-bottom: none;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+</style>

app/Domains/Admin/Views/TenantEdit.vue

@@ -0,0 +1,52 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import TabbedPage from "../../../Views/Components/TabbedPage.vue";
+import TenantGeneral from "./Partials/TenantGeneral.vue";
+import TenantContact from "./Partials/TenantContact.vue";
+import TenantPayment from "./Partials/TenantPayment.vue";
+import TenantImpress from "./Partials/TenantImpress.vue";
+import TenantGdpr from "./Partials/TenantGdpr.vue";
+
+const props = defineProps({
+    tenant: Object,
+})
+
+const slug = props.tenant.slug
+
+const tabs = [
+    {
+        title: 'Allgemeines',
+        component: TenantGeneral,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/general',
+    },
+    {
+        title: 'Kontaktdaten',
+        component: TenantContact,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/contact',
+    },
+    {
+        title: 'Bezahldaten',
+        component: TenantPayment,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/payment',
+    },
+    {
+        title: 'Impressum',
+        component: TenantImpress,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/impress',
+    },
+    {
+        title: 'Datenschutzerklärung',
+        component: TenantGdpr,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/gdpr',
+    },
+]
+</script>
+
+<template>
+    <AdminAppLayout :title="props.tenant.name">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <tabbed-page :tabs="tabs" />
+        </shadowed-box>
+    </AdminAppLayout>
+</template>

app/Domains/Admin/Views/TenantList.vue

@@ -0,0 +1,248 @@
+<script setup>
+import { ref, onMounted } from 'vue';
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const { request } = useAjax()
+
+function openTenant(slug) {
+    window.location.href = '/admin/tenants/' + slug
+}
+
+const tenants = ref([])
+const showCreate = ref(false)
+const createForm = ref({
+    name: '',
+    slug: '',
+    url: '',
+})
+
+onMounted(async () => {
+    await loadTenants()
+})
+
+async function loadTenants() {
+    const response = await fetch('/api/v1/admin/tenants/list', {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    const data = await response.json()
+    tenants.value = data.tenants
+}
+
+async function createTenant() {
+    const response = await request('/api/v1/admin/tenants/create', {
+        method: 'POST',
+        body: createForm.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        showCreate.value = false
+        createForm.value = { name: '', slug: '', url: '' }
+        await loadTenants()
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Anlegen')
+    }
+}
+</script>
+
+<template>
+    <AdminAppLayout title="Stämme">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="tenant-table">
+                <thead>
+                    <tr>
+                        <th>Name</th>
+                        <th>Slug</th>
+                        <th>URL</th>
+                        <th>Status</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <tr v-for="tenant in tenants" :key="tenant.slug" class="tenant-row" @click="openTenant(tenant.slug)">
+                        <td>{{ tenant.name }}</td>
+                        <td>{{ tenant.slug }}</td>
+                        <td>{{ tenant.url }}</td>
+                        <td>
+                            <span :class="tenant.is_active_local_group ? 'badge-active' : 'badge-inactive'">
+                                {{ tenant.is_active_local_group ? 'Aktiv' : 'Inaktiv' }}
+                            </span>
+                        </td>
+                    </tr>
+                </tbody>
+            </table>
+
+            <div style="margin-top: 20px;">
+                <button v-if="!showCreate" class="btn-create" @click="showCreate = true">Neuen Stamm anlegen</button>
+
+                <div v-if="showCreate" class="create-form">
+                    <h3>Neuen Stamm anlegen</h3>
+                    <table class="form-table">
+                        <tr>
+                            <th>Name</th>
+                            <td><input type="text" v-model="createForm.name" class="form-input" /></td>
+                        </tr>
+                        <tr>
+                            <th>Slug</th>
+                            <td><input type="text" v-model="createForm.slug" class="form-input" /></td>
+                        </tr>
+                        <tr>
+                            <th>URL</th>
+                            <td><input type="text" v-model="createForm.url" class="form-input" /></td>
+                        </tr>
+                    </table>
+                    <div class="btn-group">
+                        <button class="btn-save" @click="createTenant">Anlegen</button>
+                        <button class="btn-cancel" @click="showCreate = false">Abbrechen</button>
+                    </div>
+                </div>
+            </div>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.tenant-table {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.tenant-table thead th {
+    text-align: left;
+    padding: 10px 16px;
+    background-color: #f9fafb;
+    color: #374151;
+    font-weight: bold;
+    border-bottom: 2px solid #d1d5db;
+}
+
+.tenant-table tbody td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.tenant-row {
+    cursor: pointer;
+}
+
+.tenant-row:hover {
+    background-color: #f3f4f6;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+
+.create-form {
+    margin-top: 15px;
+    padding: 20px;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    background-color: #f9fafb;
+}
+
+.create-form h3 {
+    margin: 0 0 15px 0;
+    color: #374151;
+}
+
+.form-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.form-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 100px;
+    color: #374151;
+}
+
+.form-table td {
+    padding: 8px 12px;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-create {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-create:hover {
+    background-color: #163a7a;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+
+.btn-save, .btn-cancel {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+</style>

app/Domains/Admin/Views/UserList.vue

@@ -0,0 +1,167 @@
+<script setup>
+import { ref, onMounted } from 'vue';
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import FullScreenModal from "../../../Views/Components/FullScreenModal.vue";
+import UserDetail from "./Partials/UserDetail.vue";
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+
+const { request } = useAjax()
+
+const props = defineProps({
+    isLvTenant: Boolean,
+})
+
+const users = ref([])
+const selectedUserId = ref(null)
+const userDetail = ref(null)
+
+onMounted(async () => {
+    await loadUsers()
+})
+
+async function loadUsers() {
+    const response = await fetch('/api/v1/admin/users/list', {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    const data = await response.json()
+    users.value = data.users
+}
+
+async function selectUser(userId) {
+    if (selectedUserId.value === userId) {
+        selectedUserId.value = null
+        userDetail.value = null
+        return
+    }
+
+    selectedUserId.value = userId
+    const response = await fetch('/api/v1/admin/users/' + userId, {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    userDetail.value = await response.json()
+}
+
+function onUserUpdated() {
+    loadUsers()
+    if (selectedUserId.value) {
+        selectUser(selectedUserId.value)
+    }
+}
+
+function onDetailClosed() {
+    selectedUserId.value = null
+    userDetail.value = null
+    loadUsers()
+}
+</script>
+
+<template>
+    <AdminAppLayout title="Benutzer*innen">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="user-table">
+                <thead>
+                    <tr>
+                        <th>Nachname</th>
+                        <th>Vorname</th>
+                        <th>Pfadiname</th>
+                        <th v-if="props.isLvTenant">Stamm</th>
+                        <th>Status</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <tr v-for="user in users"
+                        :key="user.id"
+                        :class="['user-row', { 'user-row-selected': selectedUserId === user.id }]"
+                        @click="selectUser(user.id)">
+                        <td>{{ user.lastname }}</td>
+                        <td>{{ user.firstname }}</td>
+                        <td>{{ user.nickname }}</td>
+                        <td v-if="props.isLvTenant">{{ user.local_group_name }}</td>
+                        <td>
+                            <span :class="user.active ? 'badge-active' : 'badge-inactive'">
+                                {{ user.active ? 'Aktiv' : 'Inaktiv' }}
+                            </span>
+                        </td>
+                    </tr>
+                </tbody>
+            </table>
+
+        </shadowed-box>
+
+        <FullScreenModal :show="userDetail !== null" @close="onDetailClosed">
+            <UserDetail
+                v-if="userDetail"
+                :data="userDetail"
+                @updated="onUserUpdated"
+                @closed="onDetailClosed"
+            />
+        </FullScreenModal>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.user-table {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.user-table thead th {
+    text-align: left;
+    padding: 10px 16px;
+    background-color: #f9fafb;
+    color: #374151;
+    font-weight: bold;
+    border-bottom: 2px solid #d1d5db;
+}
+
+.user-table tbody td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.user-row {
+    cursor: pointer;
+}
+
+.user-row:hover {
+    background-color: #f3f4f6;
+}
+
+.user-row-selected {
+    background-color: #eff6ff;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+</style>

app/Domains/Budget/Actions/CreateEstimate/CreateEstimateAction.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Domains\Budget\Actions\CreateEstimate;
+
+use App\Models\CostUnitEstimate;
+
+class CreateEstimateAction {
+    private CreateEstimateResponse $response;
+
+   public function __construct(private CreateEstimateRequest $request) {
+    }
+
+    public function execute(): CreateEstimateResponse {
+        $this->response = new CreateEstimateResponse();
+
+        $amount = [];
+        switch ($this->request->amountType) {
+            case 'flat':
+                $amount['flat_amount'] = $this->request->amount;
+                break;
+            case 'per_person':
+                $amount['amount_by_user'] = $this->request->amount;
+                break;
+        }
+
+        if ($this->request->estimateId === 0) {
+            $estimate = CostUnitEstimate::create(array_merge([
+                'tenant' => app('tenant')->slug,
+                'cost_unit_id' => $this->request->costUnit->id,
+                'type' => $this->request->estimateType,
+                'description' => $this->request->description,
+            ], $amount));
+        } else {
+            $estimate = CostUnitEstimate::find($this->request->estimateId);
+            $estimate->update(array_merge([
+                'tenant' => app('tenant')->slug,
+                'cost_unit_id' => $this->request->costUnit->id,
+                'type' => $this->request->estimateType,
+                'description' => $this->request->description,
+            ], $amount));
+        }
+
+        if ($estimate !== null) {
+            $this->response->estimateId = $estimate->id;
+            $this->response->success = true;
+        }
+
+        return $this->response;
+    }
+}

app/Domains/Budget/Actions/CreateEstimate/CreateEstimateRequest.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Domains\Budget\Actions\CreateEstimate;
+
+use App\Enumerations\InvoiceType;
+use App\Models\CostUnit;
+use App\ValueObjects\Amount;
+
+class CreateEstimateRequest {
+    function __construct(
+        public string $amountType,
+        public string $description,
+        public Amount $amount,
+        public string $estimateType,
+        public CostUnit $costUnit,
+        public int $estimateId,
+    ) {
+    }
+}

app/Domains/Budget/Actions/CreateEstimate/CreateEstimateResponse.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Domains\Budget\Actions\CreateEstimate;
+
+class CreateEstimateResponse {
+    public bool $success;
+    public ?int $estimateId;
+
+    public function __construct() {
+        $this->success = false;
+        $this->estimateId = null;
+    }
+}

app/Domains/Budget/Actions/DeleteEstimate/DeleteEstimateAction.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Budget\Actions\DeleteEstimate;
+
+class DeleteEstimateAction {
+    public function __construct(private DeleteEstimateRequest $request) {
+
+    }
+
+    public function execute() : DeleteEstimateResponse {
+        $response = new DeleteEstimateResponse();
+        $this->request->estimate->delete();
+        $response->success = true;
+        return $response;
+    }
+}

app/Domains/Budget/Actions/DeleteEstimate/DeleteEstimateRequest.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Domains\Budget\Actions\DeleteEstimate;
+
+use App\Models\CostUnitEstimate;
+
+class DeleteEstimateRequest {
+    public function __construct(public CostUnitEstimate $estimate)
+    {
+
+    }
+}

app/Domains/Budget/Actions/DeleteEstimate/DeleteEstimateResponse.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Domains\Budget\Actions\DeleteEstimate;
+
+class DeleteEstimateResponse {
+    public bool $success;
+
+    public function __construct()
+    {
+        $this->success = false;
+    }
+}

app/Domains/Budget/Controllers/DeleteController.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Domains\Budget\Controllers;
+
+use App\Domains\Budget\Actions\CreateEstimate\CreateEstimateAction;
+use App\Domains\Budget\Actions\CreateEstimate\CreateEstimateRequest;
+use App\Domains\Budget\Actions\DeleteEstimate\DeleteEstimateAction;
+use App\Domains\Budget\Actions\DeleteEstimate\DeleteEstimateRequest;
+use App\Domains\CostUnit\Actions\CreateCostUnit\CreateCostUnitRequest;
+use App\Scopes\CommonController;
+use App\ValueObjects\Amount;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class DeleteController extends CommonController
+{
+    public function __invoke(int $costUnitId, int $estimateId, Request $request) : JsonResponse {
+        $estimate = $this->estimates->getById($estimateId);
+
+        if ($estimate === null) {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Estimate not found'
+            ], 404);
+        }
+
+        $deleteEstimateResponse =
+            new DeleteEstimateAction(request: new DeleteEstimateRequest($estimate)
+        )->execute();
+
+        if ($deleteEstimateResponse->success) {
+            return response()->json([
+                'status' => 'success',
+                'message' => 'Der Eintrag wurde erfolgreich gelöscht.'
+            ]);
+        } else {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Beim Löschen des Eintrags ist ein Fehler aufgetreten.'
+            ]);
+        }
+    }
+}

app/Domains/Budget/Controllers/ListController.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Budget\Controllers;
+
+use App\Enumerations\InvoiceType;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ListController extends CommonController
+{
+    public function __invoke(int $costUnitId, string $estimateType, Request $request) : JsonResponse {
+        $costUnit = $this->costUnits->getById($costUnitId);
+        $estimates = $this->estimates->getEstimates($costUnit, $estimateType);
+
+        return response()->json([
+            'status' => 'success',
+            'costUnitId' => $costUnitId,
+            'title' => InvoiceType::where('slug', $estimateType)->first()->name,
+            'estimateType' => $estimateType,
+            'estimates' => $estimates,
+            'totalAmountString' => $this->estimates->getTotalAmount($costUnit, $estimateType)->toString(),
+        ]);
+    }
+
+}

app/Domains/Budget/Controllers/MainController.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Domains\Budget\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class MainController extends CommonController
+{
+    public function __invoke(int $costUnitId, Request $request) : Response
+    {
+        $inertiaProvider = new InertiaProvider('Budget/List', [
+            'cost_unit_id' => $costUnitId
+        ]);
+        return $inertiaProvider->render();
+    }
+}

app/Domains/Budget/Controllers/SaveController.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Domains\Budget\Controllers;
+
+use App\Domains\Budget\Actions\CreateEstimate\CreateEstimateAction;
+use App\Domains\Budget\Actions\CreateEstimate\CreateEstimateRequest;
+use App\Domains\CostUnit\Actions\CreateCostUnit\CreateCostUnitRequest;
+use App\Scopes\CommonController;
+use App\ValueObjects\Amount;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class SaveController extends CommonController
+{
+    public function __invoke(int $costUnitId, Request $request) : JsonResponse {
+        $costUnit = $this->costUnits->getById($costUnitId);
+
+        if ($costUnit === null) {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Cost unit not found'
+            ], 404);
+        }
+
+        $createCostUniResponse =
+            new CreateEstimateAction(request: new CreateEstimateRequest(
+            description: $request->input('description'),
+            amount: Amount::fromString($request->input('amount')),
+            amountType: $request->input('amount_type'),
+            estimateType: $request->input('estimateType'),
+            costUnit: $costUnit,
+            estimateId: $request->input('estimateId'),
+        ))->execute();
+
+        if ($createCostUniResponse->success) {
+            return response()->json([
+                'status' => 'success',
+                'message' => 'Der Eintrag wurde erfolgreich angelegt.'
+            ]);
+        } else {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Beim Anlegen des Eintrags ist ein Fehler aufgetreten.'
+            ]);
+        }
+    }
+}

app/Domains/Budget/Routes/api.php

@@ -0,0 +1,21 @@
+<?php
+
+use App\Domains\Budget\Controllers\DeleteController;
+use App\Domains\Budget\Controllers\SaveController;
+use App\Domains\Budget\Controllers\ListController;
+use App\Middleware\IdentifyTenant;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('api/v1')->group(function () {
+    Route::middleware(IdentifyTenant::class)->group(function () {
+        Route::prefix('budget')->group(function () {
+            Route::middleware(['auth'])->group(function () {
+                Route::prefix('/{costUnitId}')->group(function () {
+                    Route::get('/list/{estimateType}', ListController::class);
+                    Route::get('{estimateId}/delete', DeleteController::class);
+                    Route::post('/save-estimate', SaveController::class);
+                });
+            });
+        });
+    });
+});

app/Domains/Budget/Routes/web.php

@@ -0,0 +1,20 @@
+<?php
+
+use App\Domains\Budget\Controllers\MainController;
+use App\Middleware\IdentifyTenant;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware(IdentifyTenant::class)->group(function () {
+    Route::prefix('budget')->group(function () {
+        Route::middleware(['auth'])->group(function () {
+            Route::prefix('/{costUnitId}')->group(function() {
+                Route::get('/', MainController::class);
+            });
+        });
+    });
+});
+
+
+
+
+

app/Domains/Budget/Views/AddOrUpdateEstimate.vue

@@ -0,0 +1,100 @@
+<script setup>
+import Modal from "../../../Views/Components/Modal.vue";
+import {reactive, ref} from "vue";
+import AmountInput from "../../../Views/Components/AmountInput.vue";
+import {toast} from "vue3-toastify";
+import {useAjax} from "../../../../resources/js/components/ajaxHandler.js";
+
+const { request } = useAjax()
+
+const props = defineProps({
+    showAddEstimate: Boolean,
+    type: String,
+    title: String,
+    costUnitId: Number,
+    amount: Number,
+    amount_type: String,
+    estimateId: Number,
+    description: String,
+})
+
+console.log(props)
+
+const form = reactive({
+    amount_type: props.amount_type,
+    amount: props.amount,
+    description: props.description,
+
+})
+
+async function save() {
+    const data = await request('/api/v1/budget/' + props.costUnitId + '/save-estimate', {
+        method: "POST",
+        body: {
+            estimateId: props.estimateId,
+            amount_type: form.amount_type,
+            amount: form.amount,
+            description: form.description,
+            estimateType: props.type,
+        }
+    });
+
+    if (data.status === 'success') {
+        toast.success(data.message);
+    } else {
+        toast.error(data.message);
+    }
+
+    emit('closeAddEstimate')
+}
+
+const emit = defineEmits(['closeAddEstimate'])
+
+
+</script>
+
+<template>
+    <Modal
+        :show="showAddEstimate"
+        @close="emit('closeAddEstimate')"
+        title="Ausgabenschätzung hinzufügen"
+        width="600px"
+    >
+    <table>
+        <tr>
+            <th>Kostenstelle</th>
+            <td>{{title}}</td>
+        </tr>
+        <tr>
+            <th>Verwendungszweck</th>
+            <td><input type="text" v-model="form.description" style="width: 250px;" /></td>
+        </tr>
+        <tr>
+            <th>Betrag</th>
+            <td><AmountInput v-model="form.amount" style="width: 100px;" /> Euro</td>
+        </tr>
+
+        <tr>
+            <th>Kostentyp</th>
+            <td style="vertical-align: top;">
+                <input type="radio" v-model="form.amount_type" value="flat"
+                 id="amount_type_flat" />
+                <label for="amount_type_flat">Pauschal</label><br />
+
+                <input type="radio" v-model="form.amount_type" value="per_person" id="amount_type_per_person" />
+                <label for="amount_type_per_person">Pro Person</label><br />
+            </td>
+        </tr>
+        <tr>
+            <td colspan="2">
+                <input type="button" value="Speichern" class="button" @click="save" />
+            </td>
+        </tr>
+
+    </table>
+    </Modal>
+</template>
+
+<style scoped>
+
+</style>

app/Domains/Budget/Views/List.vue

@@ -0,0 +1,93 @@
+<script setup>
+import {reactive, inject, onMounted} from 'vue';
+import AppLayout from '../../../../resources/js/layouts/AppLayout.vue';
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import TabbedPage from "../../../Views/Components/TabbedPage.vue";
+import {toast} from "vue3-toastify";
+
+import ListBudgets from "./ListBudgetTypes.vue";
+
+const props = defineProps({
+    message: String,
+
+    data: {
+        type: [Array, Object],
+        default: () => []
+    },
+    cost_unit_id: {
+        type: Number,
+        default: 0
+    },
+})
+
+// Prüfen, ob ein ?id= Parameter in der URL übergeben wurde
+const urlParams = new URLSearchParams(window.location.search)
+const initialCostUnitId = props.cost_unit_id
+
+const tabs = [
+    {
+        title: 'Verpflegung',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/catering",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Unterkunft',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/accommodation",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Programm',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/program",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Logistik',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/logistic",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Technik',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/technical",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Reisekosten',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/travelling",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Verwaltung',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/management",
+        deep_jump_id: initialCostUnitId,
+    },
+    {
+        title: 'Sonstiges',
+        component: ListBudgets,
+        endpoint: "/api/v1/budget/" + props.cost_unit_id + "/list/other",
+        deep_jump_id: initialCostUnitId,
+    },
+]
+
+onMounted(() => {
+    if (undefined !== props.message) {
+        toast.success(props.message)
+    }
+})
+</script>
+
+<template>
+    <AppLayout title="Veranstaltungsbudget">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <tabbed-page :tabs="tabs" :initial-tab-id="initialCostUnitId" />
+
+        </shadowed-box>
+    </AppLayout>
+</template>

app/Domains/Budget/Views/ListBudgetTypes.vue

@@ -0,0 +1,121 @@
+<script setup>
+import {createApp, ref} from 'vue'
+import LoadingModal from "../../../Views/Components/LoadingModal.vue";
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+import {toast} from "vue3-toastify";
+import AddOrUpdateEstimate from "./AddOrUpdateEstimate.vue";
+
+const props = defineProps({
+  data: {
+    type: [Array, Object],
+    default: () => []
+  },
+})
+
+const localData = ref(props.data)
+
+const showAddEstimate = ref(false)
+const estimateId = ref(null)
+const description = ref(null)
+const amount = ref(null)
+const amountType = ref(null)
+
+const { data, loading, error, request, download } = useAjax()
+
+async function reload() {
+    const url = "/api/v1/budget/" + props.data.costUnitId + "/list/" + props.data.estimateType
+    try {
+        const response = await fetch(url, { method: 'GET' })
+        if (!response.ok) throw new Error('Fehler beim Laden')
+
+        const result = await response.json()
+        localData.value = result
+    } catch (err) {
+        console.error('Error fetching estimates:', err)
+    }
+}
+
+async function openAddEstimate() {
+    estimateId.value = 0
+    amount.value = 0.00
+    amountType.value = 'flat'
+    description.value = ''
+    showAddEstimate.value = true
+}
+
+async function openEditEstimate(localEstimateId, localDescription, localAmount, localAmountType, localEstimateType) {
+    estimateId.value = localEstimateId
+    description.value = localDescription
+    amount.value = localAmount
+    amountType.value = localAmountType
+    console.log(localEstimateId, localDescription, localAmount, localAmountType, localEstimateType)
+    console.log(estimateId.value, description.value, amount.value, amountType.value, localEstimateType)
+    showAddEstimate.value = true
+}
+
+async function deleteEstimate(currentEstimateId) {
+    const data = await request('/api/v1/budget/' + props.data.costUnitId + '/' + currentEstimateId + '/delete', {
+        method: "GET",
+    });
+
+    if (data.status === 'success') {
+        toast.success(data.message);
+        reload()
+    } else {
+        toast.error(data.message);
+    }
+}
+
+</script>
+
+<template>
+    <div v-if="localData.estimates && localData.estimates.length > 0">
+        <h2>{{ props.data.title }}</h2>
+        <h3>Gesamtkosten: {{ localData.totalAmountString }}</h3>
+        <span v-for="estimate in localData.estimates">
+            <table style="width: 100%;">
+                  <tr><th style="width: 200px;">
+                      {{ estimate.title }}
+                  </th>
+                  <td>{{ estimate.singleAmountString }}</td>
+                </tr>
+                <tr>
+                    <td></td>
+                    <td style="padding-bottom: 30px">
+                        <label class="link" style="font-size: 10pt; margin-right: 20px;" @click="openEditEstimate(estimate.id, estimate.title, estimate.amountValue, estimate.amountType, props.data.estimateType)">Bearbeiten</label>
+                        <label class="link" style="font-size: 10pt; margin-right: 20px; color: #ff0000;" @click="deleteEstimate(estimate.id)">Löschen</label>
+                    </td>
+                </tr>
+            </table>
+        </span>
+    </div>
+
+
+  <div v-else>
+      <strong style="width: 100%; text-align: center; display: block; margin-top: 20px;">
+        Noch keine geschätzten Ausgaben vorhanden
+      </strong>
+  </div>
+    <label class="link" @click="openAddEstimate()">
+        Hinzufügen
+    </label>
+    <LoadingModal :show="showLoading" />
+    <AddOrUpdateEstimate
+        :amount="amount"
+        :amount_type="amountType"
+        :description="description"
+        :estimateId="estimateId"
+        :costUnitId="props.data.costUnitId"
+        :title="props.data.title"
+        :type="props.data.estimateType"
+        :showAddEstimate="showAddEstimate"
+
+        v-if="showAddEstimate"
+        @closeAddEstimate="showAddEstimate = false; reload()" />
+</template>
+
+<style scoped>
+ .costunit-list {
+   width: 96% !important;
+ }
+</style>

app/Domains/CostUnit/Actions/CreateCostUnit/CreateCostUnitCommand.php

@@ -22,8 +22,13 @@ class CreateCostUnitCommand {
             'mail_on_new' => $this->request->mailOnNew,
             'allow_new' => true,
             'archived' => false,
-
         ]);
+
+        if (null !== $costUnit) {
+            $response->costUnit = $costUnit;
+            $response->success = true;
+        }
+
         return $response;
     }
 }

app/Domains/CostUnit/Actions/CreateCostUnit/CreateCostUnitResponse.php

@@ -2,6 +2,14 @@
 
 namespace App\Domains\CostUnit\Actions\CreateCostUnit;
 
-class CreateCostUnitResponse {
+use App\Models\CostUnit;
 
+class CreateCostUnitResponse {
+    public bool $success;
+    public ?CostUnit $costUnit;
+
+    public function __construct() {
+        $this->success = false;
+        $this->costUnit = null;
+    }
 }

app/Domains/CostUnit/Controllers/ExportController.php

@@ -0,0 +1,106 @@
+<?php
+
+namespace App\Domains\CostUnit\Controllers;
+
+use App\Domains\Invoice\Actions\ChangeStatus\ChangeStatusCommand;
+use App\Domains\Invoice\Actions\ChangeStatus\ChangeStatusRequest;
+use App\Domains\Invoice\Actions\CreateInvoiceReceipt\CreateInvoiceReceiptCommand;
+use App\Domains\Invoice\Actions\CreateInvoiceReceipt\CreateInvoiceReceiptRequest;
+use App\Enumerations\InvoiceStatus;
+use App\Models\SepaPaymentElement;
+use App\Models\Tenant;
+use App\Providers\FileWriteProvider;
+use App\Providers\InvoiceCsvFileProvider;
+use App\Providers\WebDavProvider;
+use App\Providers\ZipArchiveFileProvider;
+use App\Scopes\CommonController;
+use Illuminate\Support\Facades\Storage;
+
+class ExportController extends CommonController {
+    public function __invoke(int $costUnitId) {
+        $costUnit = $this->costUnits->getById($costUnitId);
+
+        $invoicesForExport = $this->invoices->getByStatus($costUnit, InvoiceStatus::INVOICE_STATUS_APPROVED, false);
+
+        $webdavProvider = new WebDavProvider(WebDavProvider::INVOICE_PREFIX . $this->tenant->url . '/' . $costUnit->name);
+
+        $this->createSepaPaymentElements($invoicesForExport, $costUnit);
+        $csvData = $this->csvData($invoicesForExport);
+
+        $filePrefix = Tenant::getTempDirectory();
+
+        $csvFileWriteProvider = new FileWriteProvider($filePrefix . 'abrechnungen-' . date('Y-m-d_H-i') . '.csv', $csvData);
+        $csvFileWriteProvider->writeToFile();
+
+        if ($this->tenant->upload_exports) {
+            $webdavProvider->uploadFile($csvFileWriteProvider->fileName);
+        }
+
+        $downloadZipArchiveFiles = [
+            $csvFileWriteProvider->fileName
+        ];
+
+        foreach ($invoicesForExport as $invoice) {
+            $changeStatusRequest = new ChangeStatusRequest($invoice, InvoiceStatus::INVOICE_STATUS_EXPORTED);
+            $changeStatusCommand = new ChangeStatusCommand($changeStatusRequest);
+            $changeStatusCommand->execute();
+
+            if ($this->tenant->download_exports) {
+                $createInvoiceReceiptRequest = new CreateInvoiceReceiptRequest($invoice);
+                $createInvoiceReceiptCommand = new CreateInvoiceReceiptCommand($createInvoiceReceiptRequest);
+                $response = $createInvoiceReceiptCommand->execute();
+
+                $downloadZipArchiveFiles[] = $response->fileName;
+            }
+        }
+
+        if ($this->tenant->download_exports) {
+            $zipFile = Tenant::getTempDirectory() . 'Abrechnungen-' . $costUnit->name . '.zip';
+            $zipFileProvider = new ZipArchiveFileProvider($zipFile);
+            foreach ($downloadZipArchiveFiles as $file) {
+                $zipFileProvider->addFile($file);
+            }
+
+            $zipFileProvider->create();
+            foreach ($downloadZipArchiveFiles as $file) {
+                Storage::delete($file);
+            }
+
+            Storage::delete($csvFileWriteProvider->fileName);
+
+            return response()->download(
+                storage_path('app/private/' . $zipFile),
+                basename($zipFile),
+                ['Content-Type' => 'application/zip']
+            );
+        }
+
+        Storage::delete($csvFileWriteProvider->fileName);
+        return response()->json([
+            'message' => 'Die Abrechnungen wurden exportiert.' . PHP_EOL . 'Die SEPA-Überweisungsdatei kann über den Tab "Globale Aktionen" in der Kostenstellenübersicht erzeugt werden.' . PHP_EOL . PHP_EOL . 'Die Belege werden asynchron auf dem Webdav-Server hinterlegt.' . PHP_EOL . 'Sollten diese in 15 Minuten nicht vollständig sein, kontaktiere den Administrator.'
+        ]);
+
+    }
+
+    private function createSepaPaymentElements(array $invoices, $costUnit): void
+    {
+        foreach ($invoices as $invoice) {
+            if ($invoice->contact_bank_owner !== null && $invoice->contact_bank_iban !== '' && !$invoice->donation) {
+                SepaPaymentElement::create([
+                    'tenant' => $this->tenant->slug,
+                    'invoice_id' => $invoice->id,
+                    'cost_unit_id' => $costUnit->id,
+                    'amount' => $invoice->amount,
+                    'recipient_name' => $invoice->contact_bank_owner,
+                    'recipient_iban' => $invoice->contact_bank_iban,
+                    'payment_purpose' => $invoice->payment_purpose ?? 'Auslagenerstattung Rechnungsnummer ' . $invoice->invoice_number,
+                ]);
+            }
+        }
+    }
+
+    public function csvData(array $invoices) : string {
+        $csvDateProvider = new InvoiceCsvFileProvider($invoices);
+        return $csvDateProvider->createCsvFileContent();
+    }
+}

app/Domains/CostUnit/Controllers/GlobalSepaExportController.php

@@ -0,0 +1,82 @@
+<?php
+
+namespace App\Domains\CostUnit\Controllers;
+
+use App\Enumerations\UserRole;
+use App\Models\SepaPaymentElement;
+use App\Models\Tenant;
+use App\Providers\AuthCheckProvider;
+use App\Providers\FileWriteProvider;
+use App\Providers\PainFileProvider;
+use App\Scopes\CommonController;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+
+class GlobalSepaExportController extends CommonController {
+
+    private function checkAuthorization(): void
+    {
+        $authCheck = new AuthCheckProvider();
+        $role = $authCheck->getUserRole();
+        if (!in_array($role, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER], true)) {
+            abort(403);
+        }
+    }
+
+    public function getGlobalActions()
+    {
+        $this->checkAuthorization();
+
+        $pendingElements = SepaPaymentElement::where('exported', false)->get();
+        $pendingCount = $pendingElements->count();
+        $pendingAmount = number_format($pendingElements->sum('amount'), 2, ',', '.');
+
+        return response()->json([
+            'pending_count' => $pendingCount,
+            'pending_amount' => $pendingAmount,
+        ]);
+    }
+
+    public function exportSepaFile()
+    {
+        $this->checkAuthorization();
+
+        return DB::transaction(function () {
+            $elements = SepaPaymentElement::where('exported', false)->lockForUpdate()->get();
+
+            if ($elements->isEmpty()) {
+                return response()->json([
+                    'message' => 'Es gibt keine ausstehenden SEPA-Überweisungen.'
+                ], 404);
+            }
+
+            $painFileProvider = new PainFileProvider(
+                $this->tenant->account_iban,
+                $this->tenant->account_name,
+                $this->tenant->account_bic,
+                $elements->all()
+            );
+
+            $painContent = $painFileProvider->createPainFileContent();
+
+            $filePrefix = Tenant::getTempDirectory();
+            $fileName = $filePrefix . 'sepa-pain-' . date('Y-m-d_H-i') . '.xml';
+
+            $fileWriteProvider = new FileWriteProvider($fileName, $painContent);
+            $fileWriteProvider->writeToFile();
+
+            $elements->each(function (SepaPaymentElement $element) {
+                $element->update([
+                    'exported' => true,
+                    'exported_at' => now(),
+                ]);
+            });
+
+            $filePath = storage_path('app/private/' . $fileName);
+
+            return response()->download($filePath, basename($fileName), [
+                'Content-Type' => 'application/xml',
+            ])->deleteFileAfterSend(true);
+        });
+    }
+}

app/Domains/CostUnit/Controllers/OpenController.php

@@ -8,8 +8,11 @@ use Illuminate\Http\JsonResponse;
 
 class OpenController extends CommonController {
     public function __invoke(int $costUnitId) {
+        $costUnit = $this->costUnits->getById($costUnitId);
+
+
         $inertiaProvider = new InertiaProvider('CostUnit/Open', [
-            'costUnitId' => $costUnitId
+            'costUnit' => $costUnit
         ]);
         return $inertiaProvider->render();
     }

app/Domains/CostUnit/Routes/api.php

@@ -3,6 +3,8 @@ use App\Domains\CostUnit\Controllers\ChangeStateController;
 use App\Domains\CostUnit\Controllers\CreateController;
 use App\Domains\CostUnit\Controllers\DistanceAllowanceController;
 use App\Domains\CostUnit\Controllers\EditController;
+use App\Domains\CostUnit\Controllers\ExportController;
+use App\Domains\CostUnit\Controllers\GlobalSepaExportController;
 use App\Domains\CostUnit\Controllers\ListController;
 use App\Domains\CostUnit\Controllers\OpenController;
 use App\Domains\CostUnit\Controllers\TreasurersEditController;
@@ -37,10 +39,14 @@ Route::prefix('api/v1')
                         Route::get('/treasurers', TreasurersEditController::class);
                         Route::post('/treasurers', [TreasurersEditController::class, 'update']);
 
+                        Route::get('/export-payouts', ExportController::class);
                     });
 
 
 
+                    Route::get('/global-actions', [GlobalSepaExportController::class, 'getGlobalActions']);
+                    Route::get('/export-sepa-file', [GlobalSepaExportController::class, 'exportSepaFile']);
+
                     Route::prefix('open')->group(function () {
                         Route::get('/current-events', [ListController::class, 'listCurrentEvents']);
                         Route::get('/current-running-jobs', [ListController::class, 'listCurrentRunningJobs']);

app/Domains/CostUnit/Views/List.vue

@@ -7,6 +7,7 @@ import TabbedPage from "../../../Views/Components/TabbedPage.vue";
 import {toast} from "vue3-toastify";
 
 import ListCostUnits from "./Partials/ListCostUnits.vue";
+import GlobalActions from "./Partials/GlobalActions.vue";
 
 const props = defineProps({
     message: String,
@@ -63,6 +64,13 @@ const tabs = [
         deep_jump_id: initialCostUnitId,
         deep_jump_id_sub: initialInvoiceId,
     },
+    {
+        title: 'Globale Aktionen',
+        component: GlobalActions,
+        endpoint: "/api/v1/cost-unit/global-actions",
+        deep_jump_id: 0,
+        deep_jump_id_sub: 0,
+    },
 ]
 
 onMounted(() => {

app/Domains/CostUnit/Views/Open.vue

@@ -8,11 +8,11 @@
     import ListInvoices from "./Partials/ListInvoices.vue";
 
     const props = defineProps({
-        costUnitId: Number
+        costUnit: Object
     })
 
     const urlParams = new URLSearchParams(window.location.search)
-    const initialCostUnitId = props.cost_unit_id
+    const initialCostUnitId = props.costUnit.id
     const initialInvoiceId = props.invoice_id
 
 
@@ -22,7 +22,7 @@
         {
             title: 'Neue Abrechnungen',
             component: ListInvoices,
-            endpoint: "/api/v1/cost-unit/" + props.costUnitId + "/invoice-list/new",
+            endpoint: "/api/v1/cost-unit/" + props.costUnit.id + "/invoice-list/new",
             deep_jump_id: initialCostUnitId,
             deep_jump_id_sub: initialInvoiceId,
 
@@ -30,21 +30,21 @@
         {
             title: 'Nichtexportierte Abrechnungen',
             component: ListInvoices,
-            endpoint: "/api/v1/cost-unit/" + props.costUnitId + "/invoice-list/approved",
+            endpoint: "/api/v1/cost-unit/" + props.costUnit.id + "/invoice-list/approved",
             deep_jump_id: initialCostUnitId,
             deep_jump_id_sub: initialInvoiceId,
         },
         {
             title: 'Exportierte Abrechnungen',
             component: ListInvoices,
-            endpoint: "/api/v1/cost-unit/" + props.costUnitId + "/invoice-list/exported",
+            endpoint: "/api/v1/cost-unit/" + props.costUnit.id + "/invoice-list/exported",
             deep_jump_id: initialCostUnitId,
             deep_jump_id_sub: initialInvoiceId,
         },
         {
             title: 'Abgelehnte Abrechnungen',
             component: ListInvoices,
-            endpoint: "/api/v1/cost-unit/" + props.costUnitId + "/invoice-list/denied",
+            endpoint: "/api/v1/cost-unit/" + props.costUnit.id + "/invoice-list/denied",
             deep_jump_id: initialCostUnitId,
             deep_jump_id_sub: initialInvoiceId,
         },
@@ -58,7 +58,7 @@
 </script>
 
 <template>
-    <AppLayout title="Abrechnungen">
+    <AppLayout :title="'Abrechnungen ' + props.costUnit.name">
         <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
             <tabbed-page :tabs="tabs" :initial-tab-id="initialCostUnitId" :initial-sub-tab-id="initialInvoiceId" />
 

app/Domains/CostUnit/Views/Partials/GlobalActions.vue

@@ -0,0 +1,112 @@
+<script setup>
+import {ref} from 'vue'
+import LoadingModal from "../../../../Views/Components/LoadingModal.vue";
+import {toast} from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: [Array, Object],
+        default: () => ({})
+    },
+    deep_jump_id: {
+        type: Number,
+        default: 0
+    },
+    deep_jump_id_sub: {
+        type: Number,
+        default: 0
+    }
+})
+
+const showLoading = ref(false)
+
+async function exportSepaFile() {
+    showLoading.value = true;
+
+    try {
+        const response = await fetch('/api/v1/cost-unit/export-sepa-file', {
+            headers: {"Content-Type": "application/json"},
+        });
+
+        if (!response.ok) {
+            if (response.status === 404) {
+                const data = await response.json();
+                toast.info(data.message);
+            } else {
+                throw new Error('Fehler beim Erzeugen der SEPA-Datei');
+            }
+            showLoading.value = false;
+            return;
+        }
+
+        const blob = await response.blob();
+        const downloadUrl = window.URL.createObjectURL(blob);
+        const a = document.createElement("a");
+        a.style.display = "none";
+        a.href = downloadUrl;
+        a.download = "sepa-pain-" + new Date().toISOString().slice(0, 10) + ".xml";
+
+        document.body.appendChild(a);
+        a.click();
+
+        setTimeout(() => {
+            window.URL.revokeObjectURL(downloadUrl);
+            document.body.removeChild(a);
+        }, 100);
+
+        toast.success('SEPA-Datei wurde erfolgreich erzeugt.');
+        showLoading.value = false;
+
+    } catch (err) {
+        showLoading.value = false;
+        toast.error('Beim Erzeugen der SEPA-Datei ist ein Fehler aufgetreten.');
+    }
+}
+</script>
+
+<template>
+    <div>
+        <h2>Globale Aktionen</h2>
+
+        <div style="margin: 20px 0;">
+            <p v-if="props.data.pending_count > 0">
+                Es gibt <strong>{{ props.data.pending_count }}</strong> ausstehende SEPA-Überweisungen
+                (Gesamtbetrag: <strong>{{ props.data.pending_amount }} Euro</strong>).
+            </p>
+            <p v-else>
+                Keine ausstehenden SEPA-Überweisungen vorhanden.
+            </p>
+        </div>
+
+        <button
+            class="action-button"
+            :disabled="!props.data.pending_count || props.data.pending_count === 0"
+            @click="exportSepaFile"
+        >
+            Erzeuge SEPA-File
+        </button>
+
+        <loading-modal v-if="showLoading" />
+    </div>
+</template>
+
+<style scoped>
+.action-button {
+    padding: 10px 20px;
+    background-color: #0073aa;
+    color: white;
+    border: none;
+    border-radius: 4px;
+    cursor: pointer;
+    font-size: 1rem;
+}
+
+.action-button:hover:not(:disabled) {
+    background-color: #005a87;
+}
+
+.action-button:disabled {
+    background-color: #ccc;
+    cursor: not-allowed;
+}
+</style>

app/Domains/CostUnit/Views/Partials/ListCostUnits.vue

@@ -1,19 +1,11 @@
 <script setup>
 import {createApp, ref} from 'vue'
-/*import {
-  _mareike_download_as_zip,
-
-  _mareike_use_webdav
-} from "../../../assets/javascripts/library";*/
-//import LoadingModal from "../../../assets/components/LoadingModal.vue";
-//import Invoices from '../invoices/index.vue'
+import LoadingModal from "../../../../Views/Components/LoadingModal.vue";
 import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
 import CostUnitDetails from "./CostUnitDetails.vue";
 import {toast} from "vue3-toastify";
 import Treasurers from "./Treasurers.vue";
 
-//import CostUnitDetails from "./CostUnitDetails.vue";
-
 const props = defineProps({
   data: {
     type: [Array, Object],
@@ -42,13 +34,8 @@ const show_cost_unit = ref(false)
 const showTreasurers = ref(false)
 const costUnit = ref(null)
 
-
 const { data, loading, error, request, download } = useAjax()
 
-if (props.deep_jump_id > 0) {
-//  open_invoice_list(props.deep_jump_id, 'new', props.deep_jump_id_sub)
-}
-
 async function costUnitDetails(costUnitId) {
     const data = await request('/api/v1/cost-unit/' + costUnitId + '/details', {
         method: "GET",
@@ -114,41 +101,45 @@ async function changeCostUnitState(costUnitId, endPoint) {
 }
 
 
-async function export_payouts(cost_unit_id) {
+async function exportPayouts(costUnitId) {
     showLoading.value = true;
 
+
+    const response = await fetch('/api/v1/core/retrieve-global-data');
+    const data = await response.json();
+    const exportUrl = '/api/v1/cost-unit/' +  costUnitId + '/export-payouts';
+
     try {
-    if (_mareike_download_as_zip()) {
-      const response = await fetch("/wp-json/mareike/costunits/export-payouts", {
-        method: "POST",
+        if (data.tenant.download_exports) {
+            const response = await fetch(exportUrl, {
                 headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          mareike_nonce: _mareike_nonce(),
-          costunit: cost_unit_id,
-        }),
             });
 
             if (!response.ok) throw new Error('Fehler beim Export (ZIP)');
+
             const blob = await response.blob();
             const downloadUrl = window.URL.createObjectURL(blob);
             const a = document.createElement("a");
+            a.style.display = "none";
             a.href = downloadUrl;
-      a.download = `payouts-${cost_unit_id}.zip`;
+            a.download = "Abrechnungen-Sippenstunden.zip";
+
             document.body.appendChild(a);
             a.click();
-      a.remove();
+
+            setTimeout(() => {
                 window.URL.revokeObjectURL(downloadUrl);
+                document.body.removeChild(a);
+            }, 100);
         } else {
-      await request("/wp-json/mareike/costunits/export-payouts", {
-        method: "POST",
-        body: {
-          mareike_nonce: _mareike_nonce(),
-          costunit: cost_unit_id,
-        }
+          const response = await request(exportUrl, {
+            method: "GET",
           });
+
+        toast.success(response.message);
         }
         showLoading.value = false;
-      toast.success('Die Abrechnungen wurden exportiert.');
+
       } catch (err) {
         showLoading.value = false;
           toast.error('Beim Export der Abrechnungen ist ein Fehler aufgetreten.');
@@ -176,7 +167,7 @@ async function export_payouts(cost_unit_id) {
                       <input v-if="!costUnit.archived" type="button" value="Abrechnungen bearbeiten" @click="loadInvoices(costUnit.id)" />
                       <input v-else type="button" value="Abrechnungen einsehen" />
                       <br />
-                      <input v-if="!costUnit.archived" type="button" value="Genehmigte Abrechnungen exportieren" style="margin-top: 10px;" />
+                      <input v-if="!costUnit.archived" type="button" @click="exportPayouts(costUnit.id)" value="Genehmigte Abrechnungen exportieren" style="margin-top: 10px;" />
                   </td>
                 </tr>
 
@@ -217,17 +208,10 @@ async function export_payouts(cost_unit_id) {
         <Treasurers :data="costUnit" :showTreasurers="showTreasurers" v-if="showTreasurers" @closeTreasurers="showTreasurers = false" />
     </div>
 
-
-
-
-
-
    <div v-else-if="showInvoiceList">
     <invoices :data="invoices" :load_invoice_id="props.deep_jump_id_sub" :cost_unit_id="current_cost_unit" />
 
 
-      <LoadingModal :show="showLoading" v-if="_mareike_use_webdav()" message="Die PDF-Dateien werden asynchron erzeugt, diese sollten in 10 Minuten auf dem Webdav-Server liegen', 'mareike')" />
-      <LoadingModal :show="showLoading" v-else message='Die Abrechnungen werden exportiert, bitte warten.' />
   </div>
 
   <div v-else>
@@ -236,7 +220,7 @@ async function export_payouts(cost_unit_id) {
       </strong>
   </div>
 
-
+    <LoadingModal :show="showLoading" />
 </template>
 
 <style scoped>

app/Domains/CostUnit/Views/Partials/ListInvoices.vue

@@ -3,6 +3,7 @@
     import InvoiceDetails from "../../../Invoice/Views/Partials/invoiceDetails/InvoiceDetails.vue";
     import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
     import {ref} from "vue";
+    import {toast} from "vue3-toastify";
 
     const props = defineProps({
         data: Object
@@ -12,7 +13,6 @@
     const invoice = ref(null)
     const show_invoice = ref(false)
     const localData = ref(props.data)
-
     async function openInvoiceDetails(invoiceId) {
         const url = '/api/v1/invoice/details/' + invoiceId
 
@@ -40,6 +40,50 @@
         }
     }
 
+    async function exportPayouts() {
+        toast.info('Der Export wird nun gestartet. Bitte verlasse diese Seite nicht, bis der Export abgeschlossen ist.')
+
+        const response = await fetch('/api/v1/core/retrieve-global-data');
+        const data = await response.json();
+        const exportUrl = '/api/v1/cost-unit/' +  props.data.costUnit.id  + '/export-payouts';
+
+        try {
+            if (data.tenant.download_exports) {
+                const response = await fetch(exportUrl, {
+                    headers: { "Content-Type": "application/json" },
+                });
+
+                if (!response.ok) throw new Error('Fehler beim Export (ZIP)');
+
+                const blob = await response.blob();
+                const downloadUrl = window.URL.createObjectURL(blob);
+                const a = document.createElement("a");
+                a.style.display = "none";
+                a.href = downloadUrl;
+                a.download = "Abrechnungen-Sippenstunden.zip";
+
+                document.body.appendChild(a);
+                a.click();
+
+                setTimeout(() => {
+                    window.URL.revokeObjectURL(downloadUrl);
+                    document.body.removeChild(a);
+                }, 100);
+            } else {
+                const response = await request(exportUrl, {
+                    method: "GET",
+                });
+
+                toast.success(response.message);
+            }
+
+            reload()
+
+        } catch (err) {
+            toast.error('Beim Export der Abrechnungen ist ein Fehler aufgetreten.');
+        }
+    }
+
 </script>
 
 <template>
@@ -56,7 +100,7 @@
             </td>
             <td style="width: 150px;">
                 <Icon v-if="invoice.donation" name="hand-holding-dollar" style="color: #ffffff; background-color: green" />
-                <Icon v-if="invoice.alreadyPaid" name="comments-dollar" style="color: #ffffff; background-color: green" />
+                <Icon v-if="invoice.externalPayment" name="comments-dollar" style="color: #ffffff; background-color: green" />
             </td>
             <td>
                 {{invoice.contactName}}<br />
@@ -68,6 +112,13 @@
                 <input type="button" value="Abrechnung Anzeigen" @click="openInvoiceDetails(invoice.id)" />
             </td>
         </tr>
+
+        <tr v-if="props.data.endpoint === 'approved'">
+            <td colspan="5"></td>
+            <td>
+                <a style="font-size: 10pt;" class="link" @click="exportPayouts()">Genehmigte Abrechnungen exportieren</a>
+            </td>
+        </tr>
     </table>
     <p v-else>Es sind keine Abrechnungen in dieser Kategorie vorhanden.</p>