adasd

system/apps/README.md

@@ -17,6 +17,7 @@ Typische Bestandteile einer System-App:
 
 Aktuelle Beispiele:
 
+- `admin-apps`
 - `user-management`
 - `user-self-management`
 - `cron-management`

system/apps/admin-apps/assets/app.css

@@ -0,0 +1,221 @@
+#admin-apps-app {
+    color: #102033;
+}
+
+#admin-apps-app,
+#admin-apps-app * {
+    box-sizing: border-box;
+}
+
+#admin-apps-app.is-loading {
+    opacity: 0.72;
+    pointer-events: none;
+}
+
+#admin-apps-app .aa-shell,
+#admin-apps-app .aa-frame,
+#admin-apps-app .aa-main,
+#admin-apps-app .aa-panel {
+    min-height: 100%;
+}
+
+#admin-apps-app .aa-brand,
+#admin-apps-app .aa-copy,
+#admin-apps-app .aa-meta,
+#admin-apps-app .aa-table-copy,
+#admin-apps-app .aa-message,
+#admin-apps-app .aa-side-metric span,
+#admin-apps-app .aa-field span,
+#admin-apps-app .aa-inline-card p {
+    color: #4a6079;
+}
+
+#admin-apps-app .aa-kicker {
+    letter-spacing: 0.12em;
+    text-transform: uppercase;
+    font-size: 0.72rem;
+    color: #6d84a0;
+    margin: 0 0 0.45rem;
+}
+
+#admin-apps-app .aa-sidebar {
+    background: linear-gradient(180deg, rgba(10, 32, 58, 0.96), rgba(21, 52, 90, 0.92));
+    color: #f3f7fb;
+}
+
+#admin-apps-app .aa-sidebar .aa-copy,
+#admin-apps-app .aa-sidebar .aa-meta,
+#admin-apps-app .aa-sidebar .aa-side-metric span,
+#admin-apps-app .aa-sidebar .aa-kicker {
+    color: rgba(232, 241, 250, 0.78);
+}
+
+#admin-apps-app .aa-sidebar .aa-card {
+    background: rgba(255, 255, 255, 0.08);
+    border: 1px solid rgba(255, 255, 255, 0.08);
+}
+
+#admin-apps-app .aa-nav-button.is-active {
+    background: rgba(255, 255, 255, 0.16);
+    border-color: rgba(255, 255, 255, 0.18);
+}
+
+#admin-apps-app .aa-grid {
+    display: grid;
+    gap: 1rem;
+}
+
+#admin-apps-app .aa-grid--stats,
+#admin-apps-app .aa-grid--diag {
+    grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
+    margin-bottom: 1rem;
+}
+
+#admin-apps-app .aa-stat-card,
+#admin-apps-app .aa-diag-card {
+    display: grid;
+    gap: 0.35rem;
+}
+
+#admin-apps-app .aa-stat-card strong,
+#admin-apps-app .aa-diag-card strong,
+#admin-apps-app .aa-side-metric strong {
+    font-size: 1.35rem;
+    color: #102033;
+}
+
+#admin-apps-app .aa-side-title,
+#admin-apps-app .aa-section-title {
+    font-size: 1rem;
+    margin: 0;
+}
+
+#admin-apps-app .aa-side-metric,
+#admin-apps-app .aa-field,
+#admin-apps-app .aa-inline-card {
+    display: grid;
+    gap: 0.35rem;
+}
+
+#admin-apps-app .aa-form {
+    display: grid;
+    gap: 1rem;
+}
+
+#admin-apps-app .aa-form-grid {
+    display: grid;
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+    gap: 1rem;
+}
+
+#admin-apps-app .aa-field--full {
+    grid-column: 1 / -1;
+}
+
+#admin-apps-app .aa-field input,
+#admin-apps-app .aa-field textarea,
+#admin-apps-app .aa-field select {
+    width: 100%;
+    border: 1px solid #c9d4e0;
+    border-radius: 12px;
+    padding: 0.8rem 0.95rem;
+    background: #f8fbfd;
+    color: #102033;
+    font: inherit;
+}
+
+#admin-apps-app .aa-field textarea {
+    resize: vertical;
+    min-height: 8rem;
+}
+
+#admin-apps-app .aa-section-head,
+#admin-apps-app .aa-actions {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 1rem;
+}
+
+#admin-apps-app .aa-primary {
+    background: #153d68;
+    color: #f7fbff;
+}
+
+#admin-apps-app .aa-table-wrap {
+    overflow: auto;
+}
+
+#admin-apps-app .aa-table {
+    width: 100%;
+    border-collapse: collapse;
+    min-width: 760px;
+}
+
+#admin-apps-app .aa-table th,
+#admin-apps-app .aa-table td {
+    text-align: left;
+    vertical-align: top;
+    padding: 0.85rem 0.75rem;
+    border-bottom: 1px solid #dde6ee;
+}
+
+#admin-apps-app .aa-table th {
+    font-size: 0.78rem;
+    letter-spacing: 0.08em;
+    text-transform: uppercase;
+    color: #6d84a0;
+}
+
+#admin-apps-app .aa-table code,
+#admin-apps-app .aa-inline-card code {
+    display: inline-block;
+    font-size: 0.86rem;
+    background: #eef4f8;
+    color: #153d68;
+    border-radius: 10px;
+    padding: 0.18rem 0.45rem;
+    word-break: break-all;
+}
+
+#admin-apps-app .aa-flag-list {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 0.35rem;
+}
+
+#admin-apps-app .aa-inline-card {
+    align-self: end;
+    background: #f4f8fb;
+}
+
+#admin-apps-app .aa-message {
+    border-radius: 14px;
+    padding: 0.9rem 1rem;
+    background: #eef4f8;
+}
+
+#admin-apps-app .aa-message.is-success {
+    background: #e7f6ec;
+    color: #1e6a3c;
+}
+
+#admin-apps-app .aa-message.is-error {
+    background: #fdecec;
+    color: #9b263a;
+}
+
+#admin-apps-app .aa-list {
+    margin: 0.65rem 0 0;
+    padding-left: 1.1rem;
+}
+
+@media (max-width: 960px) {
+    #admin-apps-app .aa-form-grid {
+        grid-template-columns: 1fr;
+    }
+
+    #admin-apps-app .aa-table {
+        min-width: 640px;
+    }
+}

system/apps/admin-apps/assets/app.js

@@ -0,0 +1,120 @@
+(() => {
+    const normalizeUrl = (url) => {
+        const next = new URL(url, window.location.origin);
+        next.searchParams.set('partial', '1');
+        return next.toString();
+    };
+
+    const renderError = (host, message) => {
+        host.innerHTML = `
+            <div class="window-app-shell aa-shell">
+                <div class="window-app-frame aa-frame">
+                    <main class="window-app-main aa-main">
+                        <div class="window-app-panel aa-panel">
+                            <section class="window-app-card aa-card">
+                                <p class="aa-message is-error">${String(message || 'Admin Apps konnte nicht geladen werden.')}</p>
+                            </section>
+                        </div>
+                    </main>
+                </div>
+            </div>
+        `;
+    };
+
+    const bindInteractions = (host, loadRoute) => {
+        host.querySelectorAll('a[href]').forEach((link) => {
+            if (link.dataset.aaBound === '1') {
+                return;
+            }
+
+            const href = String(link.getAttribute('href') || '');
+            if (!href.startsWith('/admin/apps/')) {
+                return;
+            }
+
+            link.dataset.aaBound = '1';
+            link.addEventListener('click', (event) => {
+                event.preventDefault();
+                loadRoute(href);
+            });
+        });
+
+        host.querySelectorAll('form[action]').forEach((form) => {
+            if (form.dataset.aaBound === '1') {
+                return;
+            }
+
+            const action = String(form.getAttribute('action') || '');
+            if (!action.startsWith('/admin/apps/')) {
+                return;
+            }
+
+            form.dataset.aaBound = '1';
+            form.addEventListener('submit', async (event) => {
+                event.preventDefault();
+
+                try {
+                    host.classList.add('is-loading');
+                    const response = await fetch(normalizeUrl(action), {
+                        method: 'POST',
+                        credentials: 'same-origin',
+                        body: new FormData(form),
+                    });
+
+                    const html = await response.text();
+                    if (!response.ok) {
+                        throw new Error(`HTTP ${response.status}`);
+                    }
+
+                    host.innerHTML = html;
+                    bindInteractions(host, loadRoute);
+                } catch (error) {
+                    renderError(host, error?.message || 'Admin Apps konnte nicht gespeichert werden.');
+                } finally {
+                    host.classList.remove('is-loading');
+                }
+            });
+        });
+    };
+
+    window.initAdminAppsApp = function initAdminAppsApp(host, options = {}) {
+        if (!(host instanceof Element)) {
+            return;
+        }
+
+        if (host.dataset.aaAppBound === '1') {
+            return;
+        }
+
+        host.dataset.aaAppBound = '1';
+
+        const entryRoute = String(options.entryRoute || '/admin/apps/');
+        const loadRoute = async (route) => {
+            try {
+                host.classList.add('is-loading');
+                const response = await fetch(normalizeUrl(route), {
+                    credentials: 'same-origin',
+                    headers: { Accept: 'text/html' },
+                });
+                const html = await response.text();
+                if (!response.ok) {
+                    throw new Error(`HTTP ${response.status}`);
+                }
+
+                host.innerHTML = html;
+                bindInteractions(host, loadRoute);
+            } catch (error) {
+                renderError(host, error?.message || 'Admin Apps konnte nicht geladen werden.');
+            } finally {
+                host.classList.remove('is-loading');
+            }
+        };
+
+        if (options.standalone) {
+            bindInteractions(host, loadRoute);
+            return;
+        }
+
+        loadRoute(entryRoute);
+    };
+})();

system/apps/admin-apps/page.php

@@ -0,0 +1,416 @@
+<?php
+
+declare(strict_types=1);
+
+require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
+
+use App\AdminAppsService;
+use ModulesCore\ModuleHttp;
+
+if (session_status() !== PHP_SESSION_ACTIVE) {
+    session_start();
+}
+
+$projectRoot = dirname(__DIR__, 3);
+ModuleHttp::requireDesktopAccess($projectRoot);
+
+$currentUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
+$currentGroups = array_map(
+    static fn (string $group): string => strtolower(trim($group, '/')),
+    array_values(array_map('strval', (array) ($currentUser['groups'] ?? [])))
+);
+$isPartial = !empty($_GET['partial']);
+
+if (!in_array('administrators', $currentGroups, true)) {
+    http_response_code(403);
+    $forbidden = '<div class="window-app-shell aa-shell"><div class="window-app-frame aa-frame"><main class="window-app-main aa-main"><div class="window-app-panel aa-panel"><section class="window-app-card aa-card"><p class="aa-message is-error">Kein Zugriff auf Admin Apps.</p></section></div></main></div></div>';
+    if ($isPartial) {
+        echo $forbidden;
+        return;
+    }
+
+    ?><!DOCTYPE html>
+    <html lang="de">
+    <head>
+        <meta charset="utf-8">
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+        <title>Admin Apps</title>
+        <link rel="stylesheet" href="/assets/desktop/desktop.css">
+        <link rel="stylesheet" href="/system-app-assets/index.php?app=admin-apps&path=assets/app.css">
+    </head>
+    <body><?= $forbidden ?></body>
+    </html><?php
+    return;
+}
+
+$csrfToken = (string) ($_SESSION['admin_apps_token'] ?? '');
+if ($csrfToken === '') {
+    $csrfToken = bin2hex(random_bytes(16));
+    $_SESSION['admin_apps_token'] = $csrfToken;
+}
+
+$service = new AdminAppsService($projectRoot);
+$messages = [];
+$errors = [];
+$section = trim((string) ($_GET['section'] ?? $_POST['active_section'] ?? 'overview'));
+$allowedSections = ['overview', 'widgets', 'integrations'];
+if (!in_array($section, $allowedSections, true)) {
+    $section = 'overview';
+}
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    $postedToken = (string) ($_POST['csrf_token'] ?? '');
+    if ($postedToken === '' || !hash_equals($csrfToken, $postedToken)) {
+        $errors[] = 'Die Formularpruefung ist fehlgeschlagen.';
+    } else {
+        $action = (string) ($_POST['action'] ?? '');
+
+        try {
+            if ($action === 'save-gitea') {
+                $service->saveGiteaConfig([
+                    'base_url' => (string) ($_POST['base_url'] ?? ''),
+                    'token' => (string) ($_POST['token'] ?? ''),
+                    'owner' => (string) ($_POST['owner'] ?? ''),
+                    'repositories' => (string) ($_POST['repositories'] ?? ''),
+                    'poll_idle_seconds' => (string) ($_POST['poll_idle_seconds'] ?? ''),
+                    'poll_running_seconds' => (string) ($_POST['poll_running_seconds'] ?? ''),
+                    'visibility' => (string) ($_POST['visibility'] ?? ''),
+                ]);
+                $messages[] = 'Gitea-Deploy-Status-Konfiguration gespeichert.';
+                $section = 'integrations';
+            }
+        } catch (\Throwable $exception) {
+            $errors[] = $exception->getMessage();
+        }
+    }
+}
+
+$bootstrap = $service->bootstrap(true);
+$apps = is_array($bootstrap['apps'] ?? null) ? $bootstrap['apps'] : [];
+$widgets = is_array($bootstrap['widgets'] ?? null) ? $bootstrap['widgets'] : [];
+$stats = is_array($bootstrap['stats'] ?? null) ? $bootstrap['stats'] : [];
+$meta = is_array($bootstrap['meta'] ?? null) ? $bootstrap['meta'] : [];
+$gitea = is_array($bootstrap['gitea'] ?? null) ? $bootstrap['gitea'] : [];
+$giteaConfig = is_array($gitea['config'] ?? null) ? $gitea['config'] : [];
+$giteaDiagnostics = is_array($gitea['diagnostics'] ?? null) ? $gitea['diagnostics'] : [];
+
+$h = static fn (?string $value): string => htmlspecialchars($value ?? '', ENT_QUOTES);
+$sectionUrl = static fn (string $targetSection): string => '/admin/apps/?section=' . rawurlencode($targetSection);
+$sectionMeta = [
+    'overview' => [
+        'label' => 'Apps',
+        'title' => 'App-Bestand und Scope',
+        'description' => 'Installierbare Fach-Apps, Systemtools und Core-Eintraege der Desktop-Shell im aktuellen Registry-Stand.',
+        'nav' => 'Registry und Freigaben pruefen.',
+    ],
+    'widgets' => [
+        'label' => 'Widgets',
+        'title' => 'Widget-Bereich und Quellen',
+        'description' => 'Widget-Inventar aus globaler Registry und Modul-Manifesten mit Quellen, Launch-App und Sichtbarkeit.',
+        'nav' => 'Widget-Quellen und Startpunkte pruefen.',
+    ],
+    'integrations' => [
+        'label' => 'Integrationen',
+        'title' => 'Gitea-Deploy-Status',
+        'description' => 'Erste echte Admin-Einstellung fuer das Deploy-Status-Addon inklusive Environment-Datei und Tray-Sichtbarkeit.',
+        'nav' => 'Addon-Konfiguration bearbeiten.',
+    ],
+];
+
+ob_start();
+?>
+<div id="admin-apps-app" class="window-app-shell aa-shell">
+    <div class="window-app-frame aa-frame">
+        <aside class="window-app-sidebar aa-sidebar">
+            <div class="window-app-brand aa-brand">
+                <p class="window-app-kicker aa-kicker">Administration</p>
+                <h1>Admin Apps</h1>
+                <p class="window-app-copy aa-copy">Zentrale Verwaltungs-App fuer Desktop-Apps, Widgets und erste Integrations-Einstellungen.</p>
+            </div>
+
+            <div class="window-app-nav-list aa-nav-list">
+                <?php foreach ($sectionMeta as $sectionId => $metaItem): ?>
+                    <a class="window-app-nav-button aa-nav-button<?= $section === $sectionId ? ' is-active' : '' ?>" href="<?= $h($sectionUrl($sectionId)) ?>">
+                        <strong><?= $h($metaItem['label']) ?></strong>
+                        <span class="window-app-meta aa-meta"><?= $h($metaItem['nav']) ?></span>
+                    </a>
+                <?php endforeach; ?>
+            </div>
+
+            <section class="window-app-card aa-card">
+                <strong class="aa-side-title">Schnellstatus</strong>
+                <div class="aa-side-metric">
+                    <span>Environment</span>
+                    <strong><?= $h((string) ($meta['environment'] ?? 'local')) ?></strong>
+                </div>
+                <div class="aa-side-metric">
+                    <span>Apps gesamt</span>
+                    <strong><?= (int) ($stats['apps_total'] ?? 0) ?></strong>
+                </div>
+                <div class="aa-side-metric">
+                    <span>Widgets</span>
+                    <strong><?= (int) ($stats['widgets_total'] ?? 0) ?></strong>
+                </div>
+                <div class="aa-side-metric">
+                    <span>Admin-only</span>
+                    <strong><?= (int) ($stats['admin_only_apps'] ?? 0) ?></strong>
+                </div>
+            </section>
+        </aside>
+
+        <main class="window-app-main aa-main">
+            <div class="window-app-panel aa-panel">
+                <section class="window-app-hero aa-hero">
+                    <div>
+                        <p class="window-app-kicker aa-kicker">Admin Registry</p>
+                        <h2 class="window-app-title"><?= $h($sectionMeta[$section]['title']) ?></h2>
+                        <p class="window-app-copy aa-copy"><?= $h($sectionMeta[$section]['description']) ?></p>
+                    </div>
+                    <div class="window-app-pill-row aa-pill-row">
+                        <span class="window-app-pill">Administrators only</span>
+                        <span class="window-app-pill">Desktop Auth</span>
+                        <span class="window-app-pill">Section: <?= $h($sectionMeta[$section]['label']) ?></span>
+                    </div>
+                </section>
+
+                <?php if ($messages !== []): ?>
+                    <section class="window-app-card aa-card">
+                        <div class="aa-message is-success">
+                            <strong>Ergebnis</strong>
+                            <ul class="aa-list">
+                                <?php foreach ($messages as $message): ?>
+                                    <li><?= $h($message) ?></li>
+                                <?php endforeach; ?>
+                            </ul>
+                        </div>
+                    </section>
+                <?php endif; ?>
+
+                <?php if ($errors !== []): ?>
+                    <section class="window-app-card aa-card">
+                        <div class="aa-message is-error">
+                            <strong>Bitte pruefen</strong>
+                            <ul class="aa-list">
+                                <?php foreach ($errors as $error): ?>
+                                    <li><?= $h($error) ?></li>
+                                <?php endforeach; ?>
+                            </ul>
+                        </div>
+                    </section>
+                <?php endif; ?>
+
+                <?php if ($section === 'overview'): ?>
+                    <section class="aa-grid aa-grid--stats">
+                        <article class="window-app-card aa-card aa-stat-card">
+                            <span>Installierbare Apps</span>
+                            <strong><?= (int) ($stats['installable_apps'] ?? 0) ?></strong>
+                        </article>
+                        <article class="window-app-card aa-card aa-stat-card">
+                            <span>Systemtools</span>
+                            <strong><?= (int) ($stats['system_tools'] ?? 0) ?></strong>
+                        </article>
+                        <article class="window-app-card aa-card aa-stat-card">
+                            <span>Core-Apps</span>
+                            <strong><?= (int) (($stats['apps_total'] ?? 0) - ($stats['installable_apps'] ?? 0) - ($stats['system_tools'] ?? 0)) ?></strong>
+                        </article>
+                    </section>
+
+                    <section class="window-app-card aa-card">
+                        <div class="aa-section-head">
+                            <div>
+                                <p class="window-app-kicker aa-kicker">Registry</p>
+                                <h3 class="aa-section-title">Desktop-Apps</h3>
+                            </div>
+                        </div>
+
+                        <div class="aa-table-wrap">
+                            <table class="aa-table">
+                                <thead>
+                                <tr>
+                                    <th>Titel</th>
+                                    <th>Scope</th>
+                                    <th>Typ</th>
+                                    <th>Route</th>
+                                    <th>Flags</th>
+                                </tr>
+                                </thead>
+                                <tbody>
+                                <?php foreach ($apps as $app): ?>
+                                    <tr>
+                                        <td>
+                                            <strong><?= $h((string) ($app['title'] ?? '')) ?></strong>
+                                            <div class="aa-table-copy"><?= $h((string) ($app['summary'] ?? '')) ?></div>
+                                        </td>
+                                        <td><?= $h((string) ($app['app_scope'] ?? '')) ?></td>
+                                        <td><?= $h(!empty($app['installable']) ? 'Custom App' : 'System') ?></td>
+                                        <td><code><?= $h((string) ($app['entry_route'] ?? '')) ?></code></td>
+                                        <td>
+                                            <div class="aa-flag-list">
+                                                <?php if (!empty($app['show_on_desktop'])): ?><span class="window-app-pill">Desktop</span><?php endif; ?>
+                                                <?php if (!empty($app['supports_widget'])): ?><span class="window-app-pill">Widget</span><?php endif; ?>
+                                                <?php if (!empty($app['supports_tray'])): ?><span class="window-app-pill">Tray</span><?php endif; ?>
+                                                <?php if (!empty($app['enabled_by_default'])): ?><span class="window-app-pill">Default</span><?php endif; ?>
+                                                <?php if (!empty($app['admin_only'])): ?><span class="window-app-pill">Admin only</span><?php endif; ?>
+                                            </div>
+                                        </td>
+                                    </tr>
+                                <?php endforeach; ?>
+                                </tbody>
+                            </table>
+                        </div>
+                    </section>
+                <?php endif; ?>
+
+                <?php if ($section === 'widgets'): ?>
+                    <section class="window-app-card aa-card">
+                        <div class="aa-section-head">
+                            <div>
+                                <p class="window-app-kicker aa-kicker">Widget Registry</p>
+                                <h3 class="aa-section-title">Alle Widgets</h3>
+                                <p class="aa-copy">Globale Widgets und modulbasierte Widgets werden hier gemeinsam sichtbar. Modul-Widgets kommen bevorzugt aus `module.json`.</p>
+                            </div>
+                        </div>
+
+                        <div class="aa-table-wrap">
+                            <table class="aa-table">
+                                <thead>
+                                <tr>
+                                    <th>Widget</th>
+                                    <th>Zone</th>
+                                    <th>Quelle</th>
+                                    <th>Launch-App</th>
+                                    <th>Status-API</th>
+                                </tr>
+                                </thead>
+                                <tbody>
+                                <?php foreach ($widgets as $widget): ?>
+                                    <tr>
+                                        <td>
+                                            <strong><?= $h((string) ($widget['title'] ?? '')) ?></strong>
+                                            <div class="aa-table-copy"><?= $h((string) ($widget['summary'] ?? '')) ?></div>
+                                        </td>
+                                        <td><?= $h((string) ($widget['zone'] ?? 'sidebar')) ?></td>
+                                        <td>
+                                            <code><?= $h((string) (($widget['source_app_id'] ?? '') !== '' ? $widget['source_app_id'] : 'global')) ?></code>
+                                            <?php if (($widget['source_module_id'] ?? '') !== ''): ?>
+                                                <div class="aa-table-copy">Modul: <?= $h((string) $widget['source_module_id']) ?></div>
+                                            <?php endif; ?>
+                                        </td>
+                                        <td><code><?= $h((string) ($widget['launch_app_id'] ?? '')) ?></code></td>
+                                        <td><code><?= $h((string) ($widget['status_api'] ?? '')) ?></code></td>
+                                    </tr>
+                                <?php endforeach; ?>
+                                </tbody>
+                            </table>
+                        </div>
+                    </section>
+                <?php endif; ?>
+
+                <?php if ($section === 'integrations'): ?>
+                    <section class="window-app-card aa-card">
+                        <div class="aa-section-head">
+                            <div>
+                                <p class="window-app-kicker aa-kicker">Addon</p>
+                                <h3 class="aa-section-title">Gitea-Deploy-Status</h3>
+                                <p class="aa-copy">Die Werte werden in der aktuellen Environment-Datei gespeichert und beim Deploy in das gemischte `config/`-Verzeichnis uebernommen.</p>
+                            </div>
+                        </div>
+
+                        <form class="aa-form aa-form--gitea" method="post" action="/admin/apps/">
+                            <input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
+                            <input type="hidden" name="action" value="save-gitea">
+                            <input type="hidden" name="active_section" value="integrations">
+
+                            <div class="aa-form-grid">
+                                <label class="aa-field">
+                                    <span>Gitea API Base URL</span>
+                                    <input type="text" name="base_url" value="<?= $h((string) ($giteaConfig['base_url'] ?? '')) ?>" placeholder="https://gitea.example.tld/api/v1">
+                                </label>
+                                <label class="aa-field">
+                                    <span>Owner oder Organisation</span>
+                                    <input type="text" name="owner" value="<?= $h((string) ($giteaConfig['owner'] ?? '')) ?>" placeholder="private">
+                                </label>
+                                <label class="aa-field">
+                                    <span>Idle Polling (Sek.)</span>
+                                    <input type="number" min="1" name="poll_idle_seconds" value="<?= $h((string) ($giteaConfig['poll_idle_seconds'] ?? '5')) ?>">
+                                </label>
+                                <label class="aa-field">
+                                    <span>Running Polling (Sek.)</span>
+                                    <input type="number" min="1" name="poll_running_seconds" value="<?= $h((string) ($giteaConfig['poll_running_seconds'] ?? '3')) ?>">
+                                </label>
+                                <label class="aa-field aa-field--full">
+                                    <span>Token</span>
+                                    <input type="password" name="token" value="<?= $h((string) ($giteaConfig['token'] ?? '')) ?>" placeholder="Persoenlicher API-Token">
+                                </label>
+                                <label class="aa-field aa-field--full">
+                                    <span>Repositories</span>
+                                    <textarea name="repositories" rows="5" placeholder="owner/repo&#10;owner/zweites-repo"><?= $h(implode("\n", array_values(array_map('strval', (array) ($giteaConfig['repositories'] ?? []))))) ?></textarea>
+                                </label>
+                                <label class="aa-field">
+                                    <span>Tray-Sichtbarkeit</span>
+                                    <select name="visibility">
+                                        <?php foreach (['admins' => 'Nur Admins', 'all' => 'Alle Benutzer', 'disabled' => 'Deaktiviert'] as $value => $label): ?>
+                                            <option value="<?= $h($value) ?>"<?= (string) ($giteaConfig['visibility'] ?? 'admins') === $value ? ' selected' : '' ?>><?= $h($label) ?></option>
+                                        <?php endforeach; ?>
+                                    </select>
+                                </label>
+                                <div class="window-app-card aa-card aa-inline-card">
+                                    <strong>Aktuelle Datei</strong>
+                                    <code><?= $h((string) ($meta['gitea_config_path'] ?? '')) ?></code>
+                                    <p>Der Tray ist fuer den aktuellen Benutzer <?= !empty($gitea['tray_visible_for_current_user']) ? 'sichtbar' : 'nicht sichtbar' ?>.</p>
+                                </div>
+                            </div>
+
+                            <div class="aa-actions">
+                                <button class="window-app-nav-button aa-primary" type="submit">Gitea-Einstellungen speichern</button>
+                            </div>
+                        </form>
+                    </section>
+
+                    <section class="aa-grid aa-grid--diag">
+                        <article class="window-app-card aa-card aa-diag-card">
+                            <span>Konfiguriert</span>
+                            <strong><?= !empty($giteaDiagnostics['configured']) ? 'Ja' : 'Nein' ?></strong>
+                        </article>
+                        <article class="window-app-card aa-card aa-diag-card">
+                            <span>Token vorhanden</span>
+                            <strong><?= !empty($giteaDiagnostics['token_present']) ? 'Ja' : 'Nein' ?></strong>
+                        </article>
+                        <article class="window-app-card aa-card aa-diag-card">
+                            <span>Repos konfiguriert</span>
+                            <strong><?= count((array) ($giteaDiagnostics['repositories_configured'] ?? [])) ?></strong>
+                        </article>
+                        <article class="window-app-card aa-card aa-diag-card">
+                            <span>Visibility</span>
+                            <strong><?= $h((string) ($giteaDiagnostics['visibility'] ?? 'admins')) ?></strong>
+                        </article>
+                    </section>
+                <?php endif; ?>
+            </div>
+        </main>
+    </div>
+</div>
+<?php
+$content = ob_get_clean();
+
+if ($isPartial) {
+    echo $content;
+    return;
+}
+?><!DOCTYPE html>
+<html lang="de">
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>Admin Apps</title>
+    <link rel="stylesheet" href="/assets/desktop/desktop.css">
+    <link rel="stylesheet" href="/system-app-assets/index.php?app=admin-apps&path=assets/app.css">
+</head>
+<body style="margin:0;background:#d7dde5;">
+<?= $content ?>
+<script src="/system-app-assets/index.php?app=admin-apps&path=assets/app.js"></script>
+<script>
+    window.initAdminAppsApp?.(document.getElementById('admin-apps-app'), { standalone: true });
+</script>
+</body>
+</html>