boerse

modules/boersenchecker/assets/boersenchecker.css

@@ -0,0 +1,135 @@
+.bc-hero {
+  background:
+    radial-gradient(circle at top right, rgba(71, 169, 255, 0.22), transparent 32%),
+    radial-gradient(circle at bottom left, rgba(81, 214, 141, 0.18), transparent 28%),
+    linear-gradient(145deg, rgba(255,255,255,0.04), rgba(255,255,255,0.01));
+}
+
+.bc-toolbar,
+.bc-card-grid {
+  display: grid;
+  gap: 14px;
+}
+
+.bc-toolbar {
+  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
+}
+
+.bc-card-grid {
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+}
+
+.bc-stat {
+  padding: 16px;
+  border-radius: 18px;
+  background: linear-gradient(180deg, rgba(255,255,255,0.06), rgba(255,255,255,0.02));
+  border: 1px solid rgba(255,255,255,0.08);
+}
+
+.bc-stat-value {
+  margin-top: 6px;
+  font-size: 1.35rem;
+  font-weight: 700;
+}
+
+.bc-surface {
+  padding: 18px;
+  border-radius: 22px;
+  background: linear-gradient(180deg, rgba(255,255,255,0.05), rgba(255,255,255,0.02));
+  border: 1px solid rgba(255,255,255,0.08);
+}
+
+.bc-chart-shell {
+  position: relative;
+  min-height: 360px;
+  overflow: hidden;
+}
+
+.bc-chart-svg {
+  width: 100%;
+  height: 340px;
+  display: block;
+}
+
+.bc-chart-path {
+  fill: none;
+  stroke: #5eead4;
+  stroke-width: 3;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+  filter: drop-shadow(0 12px 24px rgba(94, 234, 212, 0.25));
+}
+
+.bc-chart-area {
+  fill: url(#bc-chart-fill);
+}
+
+.bc-chart-grid line {
+  stroke: rgba(255,255,255,0.08);
+  stroke-dasharray: 4 6;
+}
+
+.bc-range-list,
+.bc-inline-actions {
+  display: flex;
+  gap: 10px;
+  flex-wrap: wrap;
+}
+
+.bc-range-button {
+  border: 1px solid rgba(255,255,255,0.12);
+  background: rgba(255,255,255,0.04);
+  color: var(--text);
+  padding: 8px 12px;
+  border-radius: 999px;
+  cursor: pointer;
+  transition: transform .18s ease, background .18s ease, border-color .18s ease;
+}
+
+.bc-range-button:hover,
+.bc-range-button[aria-pressed="true"] {
+  transform: translateY(-1px);
+  background: rgba(94, 234, 212, 0.12);
+  border-color: rgba(94, 234, 212, 0.45);
+}
+
+.bc-panel-fade {
+  animation: bcPanelFade .35s ease;
+}
+
+@keyframes bcPanelFade {
+  from { opacity: 0; transform: translateY(8px) scale(.99); }
+  to { opacity: 1; transform: translateY(0) scale(1); }
+}
+
+.bc-position-list {
+  display: grid;
+  gap: 12px;
+}
+
+.bc-position-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1.6fr) repeat(3, minmax(100px, .8fr));
+  gap: 12px;
+  align-items: center;
+  padding: 14px 16px;
+  border-radius: 16px;
+  background: rgba(255,255,255,0.03);
+  border: 1px solid rgba(255,255,255,0.06);
+}
+
+.bc-pill-soft {
+  display: inline-flex;
+  align-items: center;
+  padding: 6px 10px;
+  border-radius: 999px;
+  background: rgba(255,255,255,0.06);
+  color: var(--muted);
+  font-size: .85rem;
+}
+
+@media (max-width: 900px) {
+  .bc-position-row {
+    grid-template-columns: 1fr;
+  }
+}

modules/boersenchecker/assets/boersenchecker.js

@@ -0,0 +1,146 @@
+(function () {
+  const app = document.querySelector('[data-bc-home]');
+  if (!app) return;
+
+  const chartShell = app.querySelector('[data-bc-chart]');
+  const instrumentSelect = app.querySelector('[data-bc-instrument]');
+  const instrumentNameNode = app.querySelector('[data-bc-instrument-name]');
+  const instrumentMetaNode = app.querySelector('[data-bc-instrument-meta]');
+  const rangeButtons = Array.from(app.querySelectorAll('[data-range]'));
+  const statusNode = app.querySelector('[data-bc-chart-status]');
+  const summaryNode = app.querySelector('[data-bc-chart-summary]');
+  const endpoint = app.getAttribute('data-chart-endpoint') || '';
+  const instrumentsScript = app.querySelector('[data-bc-instruments-json]');
+  const instrumentMap = new Map();
+  if (instrumentsScript?.textContent) {
+    try {
+      const items = JSON.parse(instrumentsScript.textContent);
+      if (Array.isArray(items)) {
+        items.forEach((item) => instrumentMap.set(String(item.instrument_id), item));
+      }
+    } catch (_error) {}
+  }
+  let activeRange = '1m';
+  let currentPayload = null;
+
+  function pointsForRange(payload, range) {
+    if (!payload) return [];
+    const daily = payload.daily || [];
+    const weekly = payload.weekly || [];
+    const monthly = payload.monthly || [];
+    switch (range) {
+      case '1d': return daily.slice(-2);
+      case '5d': return daily.slice(-5);
+      case '1m': return daily.slice(-22);
+      case '3m': return daily.slice(-66);
+      case '6m': return weekly.slice(-26);
+      case '1y': return weekly.slice(-52);
+      case '5y': return monthly.slice(-60);
+      default: return daily.slice(-22);
+    }
+  }
+
+  function renderChart(points) {
+    if (!chartShell) return;
+    chartShell.classList.remove('bc-panel-fade');
+    void chartShell.offsetWidth;
+    chartShell.classList.add('bc-panel-fade');
+
+    if (!points || points.length === 0) {
+      chartShell.innerHTML = '<div class="muted">Keine Chartdaten verfuegbar.</div>';
+      return;
+    }
+
+    const values = points.map((point) => Number(point.close || 0));
+    const min = Math.min(...values);
+    const max = Math.max(...values);
+    const width = 920;
+    const height = 340;
+    const paddingX = 24;
+    const paddingY = 28;
+    const usableWidth = width - paddingX * 2;
+    const usableHeight = height - paddingY * 2;
+    const spread = max - min || 1;
+
+    const coords = points.map((point, index) => {
+      const x = paddingX + (usableWidth * index / Math.max(points.length - 1, 1));
+      const y = paddingY + usableHeight - ((Number(point.close || 0) - min) / spread) * usableHeight;
+      return { x, y };
+    });
+
+    const path = coords.map((coord, index) => `${index === 0 ? 'M' : 'L'}${coord.x.toFixed(2)},${coord.y.toFixed(2)}`).join(' ');
+    const area = `${path} L${coords[coords.length - 1].x.toFixed(2)},${height - paddingY} L${coords[0].x.toFixed(2)},${height - paddingY} Z`;
+    const grid = [0, 1, 2, 3].map((step) => {
+      const y = paddingY + (usableHeight * step / 3);
+      return `<line x1="${paddingX}" y1="${y}" x2="${width - paddingX}" y2="${y}"></line>`;
+    }).join('');
+
+    chartShell.innerHTML = `
+      <svg class="bc-chart-svg" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none">
+        <defs>
+          <linearGradient id="bc-chart-fill" x1="0" y1="0" x2="0" y2="1">
+            <stop offset="0%" stop-color="rgba(94,234,212,0.32)"></stop>
+            <stop offset="100%" stop-color="rgba(94,234,212,0.02)"></stop>
+          </linearGradient>
+        </defs>
+        <g class="bc-chart-grid">${grid}</g>
+        <path class="bc-chart-area" d="${area}"></path>
+        <path class="bc-chart-path" d="${path}"></path>
+      </svg>
+    `;
+
+    const first = values[0];
+    const last = values[values.length - 1];
+    const delta = last - first;
+    const percent = first !== 0 ? (delta / first) * 100 : 0;
+    if (summaryNode) {
+      summaryNode.textContent = `${last.toFixed(2)} | ${delta >= 0 ? '+' : ''}${delta.toFixed(2)} (${percent.toFixed(2)}%)`;
+    }
+  }
+
+  async function loadChart() {
+    const instrumentId = instrumentSelect ? instrumentSelect.value : '';
+    if (!instrumentId || !endpoint) {
+      if (statusNode) statusNode.textContent = 'Keine Aktie fuer den Chart ausgewaehlt.';
+      if (summaryNode) summaryNode.textContent = '-';
+      if (chartShell) chartShell.innerHTML = '<div class="muted">Keine Chartdaten verfuegbar.</div>';
+      return;
+    }
+    if (statusNode) statusNode.textContent = 'Chartdaten werden geladen...';
+    try {
+      const response = await fetch(`${endpoint}${endpoint.includes('?') ? '&' : '?'}instrument_id=${encodeURIComponent(instrumentId)}`, { headers: { Accept: 'application/json' } });
+      const payload = await response.json();
+      if (!payload.ok) {
+        throw new Error(payload.message || 'Chartdaten konnten nicht geladen werden.');
+      }
+      currentPayload = payload;
+      renderChart(pointsForRange(payload, activeRange));
+      if (statusNode) statusNode.textContent = `Quelle: Alpha Vantage | Symbol ${payload.symbol || ''}`;
+    } catch (error) {
+      currentPayload = null;
+      chartShell.innerHTML = `<div class="muted">${error.message}</div>`;
+      if (statusNode) statusNode.textContent = 'Fehler beim Laden der Chartdaten.';
+    }
+  }
+
+  rangeButtons.forEach((button) => {
+    button.addEventListener('click', () => {
+      activeRange = button.getAttribute('data-range') || '1m';
+      rangeButtons.forEach((item) => item.setAttribute('aria-pressed', item === button ? 'true' : 'false'));
+      renderChart(pointsForRange(currentPayload, activeRange));
+    });
+  });
+
+  if (instrumentSelect) {
+    instrumentSelect.addEventListener('change', () => {
+      const meta = instrumentMap.get(String(instrumentSelect.value));
+      if (meta) {
+        if (instrumentNameNode) instrumentNameNode.textContent = meta.instrument_name || 'Keine Aktie ausgewaehlt';
+        if (instrumentMetaNode) instrumentMetaNode.textContent = `${meta.symbol || ''} · ${meta.isin || '-'}`;
+      }
+      loadChart();
+    });
+  }
+
+  loadChart();
+})();

modules/boersenchecker/bootstrap.php

@@ -536,3 +536,148 @@ $mm->registerFunction($moduleName, 'alpha_vantage_search_symbols', static functi
         'results' => $results,
     ];
 });
+
+$mm->registerFunction($moduleName, 'alpha_vantage_fetch_chart_series', static function (string $symbol): array {
+    $settings = modules()->settings('boersenchecker');
+    $apiKey = trim((string) ($settings['alpha_vantage_api_key'] ?? ''));
+    $timeout = (int) ($settings['alpha_vantage_timeout_sec'] ?? 12);
+    $timeout = $timeout > 0 ? $timeout : 12;
+    $symbol = strtoupper(trim($symbol));
+
+    if ($symbol === '') {
+        return ['ok' => false, 'message' => 'Kein Symbol angegeben.'];
+    }
+    if ($apiKey === '') {
+        return ['ok' => false, 'message' => 'Alpha-Vantage-API-Key fehlt.'];
+    }
+
+    $cacheDir = sys_get_temp_dir() . '/boersenchecker-alpha-vantage';
+    if (!is_dir($cacheDir)) {
+        @mkdir($cacheDir, 0775, true);
+    }
+
+    $fetchPayload = static function (string $functionName, int $ttl) use ($symbol, $apiKey, $timeout, $cacheDir): array {
+        $cacheKey = md5($functionName . '|' . $symbol . '|' . $apiKey);
+        $cachePath = $cacheDir . '/' . $cacheKey . '.json';
+        if (is_file($cachePath) && (time() - filemtime($cachePath)) < $ttl) {
+            $cached = file_get_contents($cachePath);
+            $decoded = is_string($cached) ? json_decode($cached, true) : null;
+            if (is_array($decoded)) {
+                return $decoded;
+            }
+        }
+
+        $url = 'https://www.alphavantage.co/query?' . http_build_query([
+            'function' => $functionName,
+            'symbol' => $symbol,
+            'apikey' => $apiKey,
+            'outputsize' => 'compact',
+        ]);
+
+        $responseBody = null;
+        if (function_exists('curl_init')) {
+            $ch = curl_init($url);
+            if ($ch !== false) {
+                curl_setopt_array($ch, [
+                    CURLOPT_RETURNTRANSFER => true,
+                    CURLOPT_FOLLOWLOCATION => true,
+                    CURLOPT_TIMEOUT => $timeout,
+                    CURLOPT_CONNECTTIMEOUT => min(5, $timeout),
+                    CURLOPT_HTTPHEADER => ['Accept: application/json'],
+                ]);
+                $responseBody = curl_exec($ch);
+                curl_close($ch);
+            }
+        }
+
+        if (!is_string($responseBody) || $responseBody === '') {
+            $context = stream_context_create([
+                'http' => [
+                    'method' => 'GET',
+                    'timeout' => $timeout,
+                    'header' => "Accept: application/json\r\n",
+                ],
+            ]);
+            $responseBody = @file_get_contents($url, false, $context);
+        }
+
+        $decoded = is_string($responseBody) ? json_decode($responseBody, true) : null;
+        if (is_array($decoded) && $decoded !== []) {
+            @file_put_contents($cachePath, json_encode($decoded, JSON_UNESCAPED_UNICODE));
+            return $decoded;
+        }
+
+        return [];
+    };
+
+    $normalizeSeries = static function (array $payload, array $keys): array {
+        foreach ($keys as $key) {
+            $series = $payload[$key] ?? null;
+            if (!is_array($series)) {
+                continue;
+            }
+
+            $points = [];
+            foreach ($series as $date => $row) {
+                if (!is_array($row)) {
+                    continue;
+                }
+                $close = $row['4. close'] ?? $row['5. adjusted close'] ?? null;
+                if (!is_numeric($close)) {
+                    $close = $row['5. adjusted close'] ?? $row['4. close'] ?? null;
+                }
+                if (!is_numeric($close)) {
+                    continue;
+                }
+                $points[] = [
+                    'date' => (string) $date,
+                    'close' => (float) $close,
+                ];
+            }
+
+            usort($points, static fn (array $left, array $right): int => strcmp((string) $left['date'], (string) $right['date']));
+            return $points;
+        }
+
+        return [];
+    };
+
+    $dailyPayload = $fetchPayload('TIME_SERIES_DAILY_ADJUSTED', 6 * 3600);
+    if (($dailyPayload['Information'] ?? null) || ($dailyPayload['Error Message'] ?? null)) {
+        $dailyPayload = $fetchPayload('TIME_SERIES_DAILY', 6 * 3600);
+    }
+    $weeklyPayload = $fetchPayload('TIME_SERIES_WEEKLY_ADJUSTED', 12 * 3600);
+    if (($weeklyPayload['Information'] ?? null) || ($weeklyPayload['Error Message'] ?? null)) {
+        $weeklyPayload = $fetchPayload('TIME_SERIES_WEEKLY', 12 * 3600);
+    }
+    $monthlyPayload = $fetchPayload('TIME_SERIES_MONTHLY_ADJUSTED', 24 * 3600);
+    if (($monthlyPayload['Information'] ?? null) || ($monthlyPayload['Error Message'] ?? null)) {
+        $monthlyPayload = $fetchPayload('TIME_SERIES_MONTHLY', 24 * 3600);
+    }
+
+    if (!empty($dailyPayload['Note']) || !empty($weeklyPayload['Note']) || !empty($monthlyPayload['Note'])) {
+        return [
+            'ok' => false,
+            'message' => 'Alpha Vantage Limit erreicht. Bitte spaeter erneut versuchen.',
+        ];
+    }
+
+    $daily = $normalizeSeries($dailyPayload, ['Time Series (Daily)']);
+    $weekly = $normalizeSeries($weeklyPayload, ['Weekly Adjusted Time Series', 'Weekly Time Series']);
+    $monthly = $normalizeSeries($monthlyPayload, ['Monthly Adjusted Time Series', 'Monthly Time Series']);
+
+    if ($daily === [] && $weekly === [] && $monthly === []) {
+        return [
+            'ok' => false,
+            'message' => 'Keine Zeitreihendaten fuer ' . $symbol . ' verfuegbar.',
+        ];
+    }
+
+    return [
+        'ok' => true,
+        'symbol' => $symbol,
+        'daily' => $daily,
+        'weekly' => $weekly,
+        'monthly' => $monthly,
+    ];
+});

modules/boersenchecker/module.json

@@ -4,14 +4,18 @@
   "description": "Depotverwaltung fuer Aktien, Kaufdaten, Kursverlauf und Waehrungsumrechnung.",
   "enabled_by_default": false,
   "menu": [
-    { "label": "Uebersicht", "href": "/module/boersenchecker" }
+    { "label": "Startseite", "href": "/module/boersenchecker" },
+    { "label": "Depotverwaltung", "href": "/module/boersenchecker/depotverwaltung" },
+    { "label": "Aktienverwaltung", "href": "/module/boersenchecker/aktienverwaltung" }
   ],
   "sidebar": {
     "enabled": true,
     "collapsible": true,
     "default": "collapsed",
     "items": [
-      { "label": "Uebersicht", "href": "/module/boersenchecker" }
+      { "label": "Startseite", "href": "/module/boersenchecker" },
+      { "label": "Depotverwaltung", "href": "/module/boersenchecker/depotverwaltung" },
+      { "label": "Aktienverwaltung", "href": "/module/boersenchecker/aktienverwaltung" }
     ]
   },
   "setup": {

modules/boersenchecker/pages/aktienverwaltung.php

@@ -0,0 +1,13 @@
+<?php
+declare(strict_types=1);
+
+require_auth();
+
+$assets = app()->assets();
+if ($assets) {
+    $assets->addStyle('/module/boersenchecker/asset?file=boersenchecker.css');
+    $assets->addScript('/module/boersenchecker/asset?file=boersenchecker.js', 'footer', true);
+}
+
+$page = new \Modules\Boersenchecker\Support\InstrumentPage();
+module_tpl('boersenchecker', 'instruments', $page->handle());

modules/boersenchecker/pages/asset.php

@@ -0,0 +1,30 @@
+<?php
+$file = (string)($_GET['file'] ?? '');
+$base = realpath(__DIR__ . '/../assets');
+$map = [
+    'boersenchecker.css' => $base . '/boersenchecker.css',
+    'boersenchecker.js' => $base . '/boersenchecker.js',
+];
+
+if (!isset($map[$file])) {
+    http_response_code(404);
+    exit('Not found');
+}
+
+$path = $map[$file];
+if (!$base || !is_file($path) || !str_starts_with($path, $base)) {
+    http_response_code(404);
+    exit('Not found');
+}
+
+$ext = pathinfo($path, PATHINFO_EXTENSION);
+if ($ext === 'css') {
+    header('Content-Type: text/css; charset=utf-8');
+} elseif ($ext === 'js') {
+    header('Content-Type: application/javascript; charset=utf-8');
+} else {
+    header('Content-Type: application/octet-stream');
+}
+
+readfile($path);
+exit;

modules/boersenchecker/pages/chart_data.php

@@ -0,0 +1,53 @@
+<?php
+declare(strict_types=1);
+
+require_auth();
+
+$user = auth_user() ?? [];
+$isAdmin = auth_is_admin();
+$ownerSub = trim((string) ($user['sub'] ?? 'local'));
+$requestedOwner = trim((string) ($_GET['owner_sub'] ?? ''));
+if ($isAdmin && $requestedOwner !== '') {
+    $ownerSub = $requestedOwner;
+}
+
+$instrumentId = (int) ($_GET['instrument_id'] ?? 0);
+if ($instrumentId <= 0) {
+    header('Content-Type: application/json; charset=utf-8');
+    echo json_encode(['ok' => false, 'message' => 'instrument_id fehlt.'], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+$pdo = module_fn('boersenchecker', 'pdo');
+module_fn('boersenchecker', 'ensure_schema');
+$instrumentTable = module_fn('boersenchecker', 'table', 'instruments');
+$positionTable = module_fn('boersenchecker', 'table', 'positions');
+
+$stmt = $pdo->prepare(
+    'SELECT i.id, i.name, i.symbol
+     FROM ' . $instrumentTable . ' i
+     INNER JOIN ' . $positionTable . ' p ON p.instrument_id = i.id
+     WHERE i.id = :id AND p.owner_sub = :owner_sub
+     LIMIT 1'
+);
+$stmt->execute([
+    'id' => $instrumentId,
+    'owner_sub' => $ownerSub,
+]);
+$instrument = $stmt->fetch(PDO::FETCH_ASSOC);
+
+header('Content-Type: application/json; charset=utf-8');
+if (!is_array($instrument)) {
+    echo json_encode(['ok' => false, 'message' => 'Aktie nicht verfuegbar.'], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+$symbol = trim((string) ($instrument['symbol'] ?? ''));
+if ($symbol === '') {
+    echo json_encode(['ok' => false, 'message' => 'Fuer diese Aktie ist kein Symbol hinterlegt.'], JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+$result = module_fn('boersenchecker', 'alpha_vantage_fetch_chart_series', $symbol);
+echo json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+exit;

modules/boersenchecker/pages/depotverwaltung.php

@@ -0,0 +1,13 @@
+<?php
+declare(strict_types=1);
+
+require_auth();
+
+$assets = app()->assets();
+if ($assets) {
+    $assets->addStyle('/module/boersenchecker/asset?file=boersenchecker.css');
+    $assets->addScript('/module/boersenchecker/asset?file=boersenchecker.js', 'footer', true);
+}
+
+$page = new \Modules\Boersenchecker\Support\DashboardPage();
+module_tpl('boersenchecker', 'dashboard', $page->handle());

modules/boersenchecker/pages/index.php

@@ -3,5 +3,11 @@ declare(strict_types=1);
 
 require_auth();
 
-$page = new \Modules\Boersenchecker\Support\DashboardPage();
+$assets = app()->assets();
-module_tpl('boersenchecker', 'dashboard', $page->handle());
+if ($assets) {
+    $assets->addStyle('/module/boersenchecker/asset?file=boersenchecker.css');
+    $assets->addScript('/module/boersenchecker/asset?file=boersenchecker.js', 'footer', true);
+}
+
+$page = new \Modules\Boersenchecker\Support\HomePage();
+module_tpl('boersenchecker', 'home', $page->handle());

modules/boersenchecker/partials/dashboard.php

@@ -1,3 +1,4 @@
+<?php $ownerQuery = $isAdmin ? '?owner_sub=' . urlencode((string) $ownerSub) : ''; ?>
 <div class="card">
   <div class="pill">Boersenchecker</div>
   <h1 style="margin-top:.75rem;">Depotverwaltung</h1>
@@ -16,11 +17,31 @@
     </div>
   <?php endif; ?>
 
+  <?php if ($isAdmin): ?>
+    <div class="card" style="margin-top:1rem; background:var(--panel-2);">
+      <strong>Benutzer-Scope</strong>
+      <form method="get" style="margin-top:.75rem; display:flex; gap:10px; flex-wrap:wrap; align-items:end;">
+        <label class="setup-field muted" style="margin:0; min-width:260px;">
+          <span>Depots von Benutzer</span>
+          <select name="owner_sub">
+            <?php foreach ($availableOwners as $owner): ?>
+              <option value="<?= e((string) $owner['sub']) ?>" <?= (string) $ownerSub === (string) $owner['sub'] ? 'selected' : '' ?>>
+                <?= e((string) $owner['label']) ?>
+              </option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+        <button class="cta-button" type="submit">Anzeigen</button>
+      </form>
+    </div>
+  <?php endif; ?>
+
   <div class="grid" style="margin-top:1rem;">
     <div class="card" style="background:var(--panel-2);">
       <strong><?= $editPortfolio ? 'Depot bearbeiten' : 'Neues Depot' ?></strong>
       <form method="post" style="margin-top:.75rem; display:grid; gap:10px;">
         <input type="hidden" name="action" value="save_portfolio">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
         <input type="hidden" name="portfolio_id" value="<?= e((string) ($editPortfolio['id'] ?? '0')) ?>">
         <label class="setup-field muted">
           <span>Depotname</span>
@@ -37,7 +58,7 @@
         <div style="display:flex; gap:10px; flex-wrap:wrap;">
           <button class="cta-button" type="submit">Depot speichern</button>
           <?php if ($editPortfolio): ?>
-            <a class="nav-link" href="/module/boersenchecker">Abbrechen</a>
+            <a class="nav-link" href="/module/boersenchecker/depotverwaltung<?= e($ownerQuery) ?>">Abbrechen</a>
           <?php endif; ?>
         </div>
       </form>
@@ -55,10 +76,12 @@
       <div style="display:flex; gap:10px; flex-wrap:wrap; margin-top:1rem;">
         <form method="post">
           <input type="hidden" name="action" value="refresh_fx">
+          <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
           <button class="cta-button" type="submit">FX-Daten aktualisieren</button>
         </form>
         <form method="post">
           <input type="hidden" name="action" value="refresh_alpha_vantage_all">
+          <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
           <button class="nav-link" type="submit">Alle API-Kurse abrufen</button>
         </form>
       </div>
@@ -81,6 +104,7 @@
     <?php else: ?>
       <form method="post" style="margin-top:.75rem; display:grid; gap:10px;">
         <input type="hidden" name="action" value="save_position">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
         <input type="hidden" name="position_id" value="<?= e((string) ($editPosition['id'] ?? '0')) ?>">
         <input type="hidden" name="instrument_id" value="<?= e((string) ($editPosition['instrument_id'] ?? '0')) ?>">
         <label class="setup-field muted">
@@ -149,7 +173,7 @@
         <div style="display:flex; gap:10px; flex-wrap:wrap;">
           <button class="cta-button" type="submit">Position speichern</button>
           <?php if ($editPosition): ?>
-            <a class="nav-link" href="/module/boersenchecker">Abbrechen</a>
+            <a class="nav-link" href="/module/boersenchecker/depotverwaltung<?= e($ownerQuery) ?>">Abbrechen</a>
           <?php endif; ?>
         </div>
       </form>
@@ -163,6 +187,7 @@
     </p>
     <form method="post" style="margin-top:.75rem; display:flex; gap:10px; flex-wrap:wrap; align-items:end;">
       <input type="hidden" name="action" value="search_symbol">
+      <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
       <label class="setup-field muted" style="margin:0; min-width:260px; flex:1;">
         <span>Suchbegriff</span>
         <input type="text" name="search_keywords" value="<?= e($symbolSearchKeywords) ?>" placeholder="z.B. Mercedes, AAPL, Allianz" required>
@@ -194,7 +219,7 @@
                 <td style="padding:8px;"><?= e((string) ($result['currency'] ?? '')) ?></td>
                 <td style="padding:8px;"><?= e((string) ($result['match_score'] ?? '')) ?></td>
                 <td style="padding:8px;">
-                  <a class="nav-link" href="/module/boersenchecker?symbol_candidate=<?= urlencode((string) ($result['symbol'] ?? '')) ?>&instrument_name_candidate=<?= urlencode((string) ($result['name'] ?? '')) ?>&market_candidate=<?= urlencode((string) ($result['region'] ?? '')) ?>&quote_currency_candidate=<?= urlencode((string) ($result['currency'] ?? '')) ?>">
+                  <a class="nav-link" href="/module/boersenchecker/depotverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&symbol_candidate=<?= urlencode((string) ($result['symbol'] ?? '')) ?>&instrument_name_candidate=<?= urlencode((string) ($result['name'] ?? '')) ?>&market_candidate=<?= urlencode((string) ($result['region'] ?? '')) ?>&quote_currency_candidate=<?= urlencode((string) ($result['currency'] ?? '')) ?>">
                     In Formular uebernehmen
                   </a>
                 </td>
@@ -213,6 +238,7 @@
     <?php else: ?>
       <form method="post" style="margin-top:.75rem; display:grid; gap:10px;">
         <input type="hidden" name="action" value="save_quote">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
         <div class="grid" style="grid-template-columns:repeat(auto-fit, minmax(180px, 1fr)); gap:10px;">
           <label class="setup-field muted">
             <span>Aktie</span>
@@ -267,9 +293,10 @@
               <div class="muted"><?= e((string) $portfolio['base_currency']) ?> · <?= e((string) $stats['positions']) ?> Position(en)</div>
             </div>
             <div style="display:flex; gap:10px; flex-wrap:wrap;">
-              <a class="nav-link" href="/module/boersenchecker?edit_portfolio=<?= e((string) $portfolioId) ?>">Bearbeiten</a>
+              <a class="nav-link" href="/module/boersenchecker/depotverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&edit_portfolio=<?= e((string) $portfolioId) ?>">Bearbeiten</a>
               <form method="post" onsubmit="return confirm('Depot wirklich loeschen?')">
                 <input type="hidden" name="action" value="delete_portfolio">
+                <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
                 <input type="hidden" name="portfolio_id" value="<?= e((string) $portfolioId) ?>">
                 <button class="nav-link" type="submit">Loeschen</button>
               </form>
@@ -360,15 +387,17 @@
                 </td>
                 <td style="padding:8px;">
                   <div style="display:flex; gap:8px; flex-wrap:wrap;">
-                    <a class="nav-link" href="/module/boersenchecker?edit_position=<?= e((string) $position['id']) ?>">Bearbeiten</a>
+                    <a class="nav-link" href="/module/boersenchecker/depotverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&edit_position=<?= e((string) $position['id']) ?>">Bearbeiten</a>
-                    <a class="nav-link" href="/module/boersenchecker?instrument_id=<?= e((string) $position['instrument_id']) ?>">Kurs erfassen</a>
+                    <a class="nav-link" href="/module/boersenchecker/depotverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&instrument_id=<?= e((string) $position['instrument_id']) ?>">Kurs erfassen</a>
                     <form method="post">
                       <input type="hidden" name="action" value="refresh_alpha_vantage_position">
+                      <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
                       <input type="hidden" name="position_id" value="<?= e((string) $position['id']) ?>">
                       <button class="nav-link" type="submit">API-Kurs</button>
                     </form>
                     <form method="post" onsubmit="return confirm('Position wirklich loeschen?')">
                       <input type="hidden" name="action" value="delete_position">
+                      <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
                       <input type="hidden" name="position_id" value="<?= e((string) $position['id']) ?>">
                       <button class="nav-link" type="submit">Loeschen</button>
                     </form>
@@ -397,7 +426,7 @@
                 <?= e((string) ($instrument['symbol'] ?: '-')) ?> · <?= e((string) ($instrument['isin'] ?: '-')) ?>
               </div>
             </div>
-            <a class="nav-link" href="/module/boersenchecker?instrument_id=<?= e((string) $instrumentId) ?>">Neuen Kurs erfassen</a>
+            <a class="nav-link" href="/module/boersenchecker/depotverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&instrument_id=<?= e((string) $instrumentId) ?>">Neuen Kurs erfassen</a>
           </div>
           <?php if ($history === []): ?>
             <div class="muted" style="margin-top:.75rem;">Noch keine historischen Kurse vorhanden.</div>
@@ -421,6 +450,7 @@
                       <td style="padding:8px;">
                         <form method="post" onsubmit="return confirm('Kurseintrag wirklich loeschen?')">
                           <input type="hidden" name="action" value="delete_quote">
+                          <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
                           <input type="hidden" name="quote_id" value="<?= e((string) $quote['id']) ?>">
                           <button class="nav-link" type="submit">Loeschen</button>
                         </form>

modules/boersenchecker/partials/home.php

@@ -0,0 +1,147 @@
+<div class="card bc-hero" data-bc-home data-chart-endpoint="<?= e($chartEndpoint) ?>">
+  <script type="application/json" data-bc-instruments-json><?= json_encode(array_map(static function (array $position): array {
+      return [
+          'instrument_id' => (int) ($position['instrument_id'] ?? 0),
+          'instrument_name' => (string) ($position['instrument_name'] ?? ''),
+          'symbol' => (string) ($position['symbol'] ?? ''),
+          'isin' => (string) ($position['isin'] ?? ''),
+      ];
+  }, $positions), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?></script>
+  <div class="pill">Boersenchecker</div>
+  <h1 style="margin-top:.75rem;">Startseite</h1>
+  <p class="muted">Depotauswahl, Aktienauswahl und animierte Kurscharts auf Basis von Schlusskursen.</p>
+
+  <?php if ($error): ?>
+    <div class="card" style="margin-top:1rem; border-color:#ffb4a8; background:#fff5f3; color:#7a2114;"><?= e($error) ?></div>
+  <?php elseif ($notice): ?>
+    <div class="card" style="margin-top:1rem; border-color:var(--accent-2);"><?= e($notice) ?></div>
+  <?php endif; ?>
+
+  <div class="bc-toolbar" style="margin-top:1rem;">
+    <?php if ($isAdmin): ?>
+      <form class="bc-surface" method="get">
+        <strong>Benutzer</strong>
+        <label class="setup-field muted" style="margin-top:.75rem;">
+          <span>Scope</span>
+          <select name="owner_sub">
+            <?php foreach ($availableOwners as $owner): ?>
+              <option value="<?= e((string) $owner['sub']) ?>" <?= (string) $ownerSub === (string) $owner['sub'] ? 'selected' : '' ?>><?= e((string) $owner['label']) ?></option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+        <button class="cta-button" type="submit">Anzeigen</button>
+      </form>
+    <?php endif; ?>
+
+    <form class="bc-surface" method="get">
+      <?php if ($isAdmin): ?><input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>"><?php endif; ?>
+      <strong>Depot</strong>
+      <?php if ($portfolios === []): ?>
+        <div class="muted" style="margin-top:.75rem;">Keine Depots vorhanden.</div>
+      <?php else: ?>
+        <label class="setup-field muted" style="margin-top:.75rem;">
+          <span>Auswahl</span>
+          <select name="portfolio_id" onchange="this.form.submit()">
+            <?php foreach ($portfolios as $portfolio): ?>
+              <option value="<?= e((string) $portfolio['id']) ?>" <?= (string) $selectedPortfolioId === (string) $portfolio['id'] ? 'selected' : '' ?>>
+                <?= e((string) $portfolio['name']) ?>
+              </option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+      <?php endif; ?>
+    </form>
+
+    <form class="bc-surface" method="get">
+      <?php if ($isAdmin): ?><input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>"><?php endif; ?>
+      <input type="hidden" name="portfolio_id" value="<?= e((string) $selectedPortfolioId) ?>">
+      <strong>Aktie</strong>
+      <?php if ($positions === []): ?>
+        <div class="muted" style="margin-top:.75rem;">Keine Aktien im ausgewaehlten Depot.</div>
+      <?php else: ?>
+        <label class="setup-field muted" style="margin-top:.75rem;">
+          <span>Auswahl</span>
+          <select name="instrument_id" data-bc-instrument>
+            <?php foreach ($positions as $position): ?>
+              <option value="<?= e((string) $position['instrument_id']) ?>" <?= (string) $selectedInstrumentId === (string) $position['instrument_id'] ? 'selected' : '' ?>>
+                <?= e((string) $position['instrument_name']) ?><?= !empty($position['symbol']) ? ' (' . e((string) $position['symbol']) . ')' : '' ?>
+              </option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+      <?php endif; ?>
+    </form>
+
+    <form class="bc-surface" method="post">
+      <input type="hidden" name="action" value="refresh_current_quotes_home">
+      <input type="hidden" name="portfolio_id" value="<?= e((string) $selectedPortfolioId) ?>">
+      <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+      <strong>Aktuelle Kurse</strong>
+      <p class="muted" style="margin:.75rem 0 1rem;">Abruf der aktuellen Kurse fuer das gewaehlte Depot.</p>
+      <button class="cta-button" type="submit" <?= $selectedPortfolioId > 0 ? '' : 'disabled' ?>>Aktuelle Kurse abrufen</button>
+    </form>
+  </div>
+
+  <div class="bc-card-grid" style="margin-top:1rem;">
+    <?php foreach (array_slice($positions, 0, 4) as $position): ?>
+      <div class="bc-stat">
+        <div class="muted"><?= e((string) $position['instrument_name']) ?></div>
+        <div class="bc-stat-value"><?= $position['latest_price'] !== null ? e(number_format((float) $position['latest_price'], 2, ',', '.')) . ' ' . e((string) $position['latest_currency']) : 'n/a' ?></div>
+        <div class="muted" style="margin-top:6px;"><?= e((string) ($position['latest_quoted_at'] ?: 'kein Kurs')) ?></div>
+      </div>
+    <?php endforeach; ?>
+  </div>
+
+  <div class="bc-surface" style="margin-top:1rem;">
+    <div style="display:flex; justify-content:space-between; gap:12px; flex-wrap:wrap; align-items:center;">
+      <div>
+        <strong data-bc-instrument-name><?= e((string) ($selectedInstrument['instrument_name'] ?? 'Keine Aktie ausgewaehlt')) ?></strong>
+        <?php if ($selectedInstrument): ?>
+          <div class="muted" data-bc-instrument-meta><?= e((string) ($selectedInstrument['symbol'] ?? '')) ?> · <?= e((string) ($selectedInstrument['isin'] ?? '-')) ?></div>
+        <?php endif; ?>
+      </div>
+      <div class="bc-range-list">
+        <button type="button" class="bc-range-button" data-range="1d" aria-pressed="false">Tag</button>
+        <button type="button" class="bc-range-button" data-range="5d" aria-pressed="false">5 Tage</button>
+        <button type="button" class="bc-range-button" data-range="1m" aria-pressed="true">Monat</button>
+        <button type="button" class="bc-range-button" data-range="3m" aria-pressed="false">3 Monate</button>
+        <button type="button" class="bc-range-button" data-range="6m" aria-pressed="false">6 Monate</button>
+        <button type="button" class="bc-range-button" data-range="1y" aria-pressed="false">Jahr</button>
+        <button type="button" class="bc-range-button" data-range="5y" aria-pressed="false">5 Jahre</button>
+      </div>
+    </div>
+    <div class="muted" data-bc-chart-status style="margin-top:.75rem;">Chartdaten werden geladen...</div>
+    <div class="bc-stat-value" data-bc-chart-summary style="margin-top:.35rem;">-</div>
+    <div class="bc-chart-shell" data-bc-chart style="margin-top:1rem;"></div>
+  </div>
+
+  <div class="bc-surface" style="margin-top:1rem;">
+    <strong>Aktien im Depot</strong>
+    <?php if ($positions === []): ?>
+      <div class="muted" style="margin-top:.75rem;">Keine Aktien im ausgewaehlten Depot.</div>
+    <?php else: ?>
+      <div class="bc-position-list" style="margin-top:1rem;">
+        <?php foreach ($positions as $position): ?>
+          <div class="bc-position-row">
+            <div>
+              <strong><?= e((string) $position['instrument_name']) ?></strong>
+              <div class="muted"><?= e((string) ($position['symbol'] ?? '')) ?> · <?= e((string) ($position['isin'] ?? '-')) ?></div>
+            </div>
+            <div>
+              <div class="muted">Stueckzahl</div>
+              <div><?= e(number_format((float) $position['quantity'], 6, ',', '.')) ?></div>
+            </div>
+            <div>
+              <div class="muted">Kaufpreis</div>
+              <div><?= e(number_format((float) $position['purchase_price'], 2, ',', '.')) ?> <?= e((string) $position['purchase_currency']) ?></div>
+            </div>
+            <div>
+              <div class="muted">Letzter Kurs</div>
+              <div><?= $position['latest_price'] !== null ? e(number_format((float) $position['latest_price'], 2, ',', '.')) . ' ' . e((string) $position['latest_currency']) : 'n/a' ?></div>
+            </div>
+          </div>
+        <?php endforeach; ?>
+      </div>
+    <?php endif; ?>
+  </div>
+</div>

modules/boersenchecker/partials/instruments.php

@@ -0,0 +1,161 @@
+<?php $ownerQuery = $isAdmin ? '?owner_sub=' . urlencode((string) $ownerSub) : ''; ?>
+<div class="card">
+  <div class="pill">Boersenchecker</div>
+  <h1 style="margin-top:.75rem;">Aktienverwaltung</h1>
+  <p class="muted">Aktien aller Depots des ausgewaehlten Benutzers bearbeiten und manuelle Kurse pflegen.</p>
+
+  <?php if ($error): ?>
+    <div class="card" style="margin-top:1rem; border-color:#ffb4a8; background:#fff5f3; color:#7a2114;"><?= e($error) ?></div>
+  <?php elseif ($notice): ?>
+    <div class="card" style="margin-top:1rem; border-color:var(--accent-2);"><?= e($notice) ?></div>
+  <?php endif; ?>
+
+  <?php if ($isAdmin): ?>
+    <div class="card" style="margin-top:1rem; background:var(--panel-2);">
+      <strong>Benutzer-Scope</strong>
+      <form method="get" style="margin-top:.75rem; display:flex; gap:10px; flex-wrap:wrap; align-items:end;">
+        <label class="setup-field muted" style="margin:0; min-width:260px;">
+          <span>Benutzer</span>
+          <select name="owner_sub">
+            <?php foreach ($availableOwners as $owner): ?>
+              <option value="<?= e((string) $owner['sub']) ?>" <?= (string) $ownerSub === (string) $owner['sub'] ? 'selected' : '' ?>><?= e((string) $owner['label']) ?></option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+        <button class="cta-button" type="submit">Anzeigen</button>
+      </form>
+    </div>
+  <?php endif; ?>
+
+  <div class="grid" style="margin-top:1rem;">
+    <div class="card" style="background:var(--panel-2);">
+      <strong>Aktie waehlen</strong>
+      <form method="get" style="margin-top:.75rem;">
+        <?php if ($isAdmin): ?><input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>"><?php endif; ?>
+        <label class="setup-field muted">
+          <span>Aktien aller Depots</span>
+          <select name="instrument_id" onchange="this.form.submit()">
+            <?php foreach ($instruments as $instrument): ?>
+              <option value="<?= e((string) $instrument['id']) ?>" <?= (string) $selectedInstrumentId === (string) $instrument['id'] ? 'selected' : '' ?>>
+                <?= e((string) $instrument['name']) ?><?= !empty($instrument['symbol']) ? ' (' . e((string) $instrument['symbol']) . ')' : '' ?>
+              </option>
+            <?php endforeach; ?>
+          </select>
+        </label>
+      </form>
+    </div>
+
+    <div class="card" style="background:var(--panel-2);">
+      <strong>Symbolsuche</strong>
+      <form method="post" style="margin-top:.75rem; display:flex; gap:10px; flex-wrap:wrap; align-items:end;">
+        <input type="hidden" name="action" value="search_symbol">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+        <input type="hidden" name="instrument_id" value="<?= e((string) $selectedInstrumentId) ?>">
+        <label class="setup-field muted" style="margin:0; min-width:260px; flex:1;">
+          <span>Suchbegriff</span>
+          <input type="text" name="search_keywords" value="<?= e($searchKeywords) ?>" placeholder="z.B. Apple, AAPL, Allianz" required>
+        </label>
+        <button class="cta-button" type="submit">Suchen</button>
+      </form>
+      <?php if ($searchResults !== []): ?>
+        <div style="overflow:auto; margin-top:1rem;">
+          <table style="width:100%; border-collapse:collapse;">
+            <tbody>
+              <?php foreach ($searchResults as $result): ?>
+                <tr style="border-bottom:1px solid var(--border);">
+                  <td style="padding:8px;"><strong><?= e((string) ($result['symbol'] ?? '')) ?></strong></td>
+                  <td style="padding:8px;"><?= e((string) ($result['name'] ?? '')) ?></td>
+                  <td style="padding:8px;"><?= e((string) ($result['region'] ?? '')) ?></td>
+                  <td style="padding:8px;"><?= e((string) ($result['currency'] ?? '')) ?></td>
+                  <td style="padding:8px;">
+                    <a class="nav-link" href="/module/boersenchecker/aktienverwaltung?owner_sub=<?= urlencode((string) $ownerSub) ?>&instrument_id=<?= e((string) $selectedInstrumentId) ?>&symbol_candidate=<?= urlencode((string) ($result['symbol'] ?? '')) ?>&instrument_name_candidate=<?= urlencode((string) ($result['name'] ?? '')) ?>&market_candidate=<?= urlencode((string) ($result['region'] ?? '')) ?>&quote_currency_candidate=<?= urlencode((string) ($result['currency'] ?? '')) ?>">
+                      Uebernehmen
+                    </a>
+                  </td>
+                </tr>
+              <?php endforeach; ?>
+            </tbody>
+          </table>
+        </div>
+      <?php endif; ?>
+    </div>
+  </div>
+
+  <div class="card" style="margin-top:1rem; background:var(--panel-2);">
+    <strong>Aktie bearbeiten</strong>
+    <?php if (!$selectedInstrument || empty($selectedInstrument['id'])): ?>
+      <div class="muted" style="margin-top:.75rem;">Keine Aktie vorhanden.</div>
+    <?php else: ?>
+      <form method="post" style="margin-top:.75rem; display:grid; gap:10px;">
+        <input type="hidden" name="action" value="save_instrument">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+        <input type="hidden" name="instrument_id" value="<?= e((string) ($selectedInstrument['id'] ?? 0)) ?>">
+        <div class="grid" style="grid-template-columns:repeat(auto-fit, minmax(180px, 1fr)); gap:10px;">
+          <label class="setup-field muted"><span>Name</span><input type="text" name="instrument_name" value="<?= e((string) (($selectedInstrument['name'] ?? '') ?: ($_GET['instrument_name_candidate'] ?? ''))) ?>" required></label>
+          <label class="setup-field muted"><span>Symbol</span><input type="text" name="symbol" value="<?= e((string) (($selectedInstrument['symbol'] ?? '') ?: ($_GET['symbol_candidate'] ?? ''))) ?>"></label>
+          <label class="setup-field muted"><span>ISIN</span><input type="text" name="isin" value="<?= e((string) ($selectedInstrument['isin'] ?? '')) ?>"></label>
+          <label class="setup-field muted"><span>WKN</span><input type="text" name="wkn" value="<?= e((string) ($selectedInstrument['wkn'] ?? '')) ?>"></label>
+          <label class="setup-field muted"><span>Markt</span><input type="text" name="market" value="<?= e((string) (($selectedInstrument['market'] ?? '') ?: ($_GET['market_candidate'] ?? ''))) ?>"></label>
+          <label class="setup-field muted"><span>Kurswaehrung</span><input type="text" name="quote_currency" value="<?= e((string) (($selectedInstrument['quote_currency'] ?? $defaultReportCurrency) ?: ($_GET['quote_currency_candidate'] ?? $defaultReportCurrency))) ?>"></label>
+        </div>
+        <button class="cta-button" type="submit">Aktie speichern</button>
+      </form>
+      <form method="post" style="margin-top:.75rem;">
+        <input type="hidden" name="action" value="refresh_alpha_vantage_instrument">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+        <input type="hidden" name="instrument_id" value="<?= e((string) ($selectedInstrument['id'] ?? 0)) ?>">
+        <button class="nav-link" type="submit">Aktuellen API-Kurs abrufen</button>
+      </form>
+    <?php endif; ?>
+  </div>
+
+  <div class="card" style="margin-top:1rem; background:var(--panel-2);">
+    <strong>Manuellen Kurs eingeben</strong>
+    <?php if (!$selectedInstrument || empty($selectedInstrument['id'])): ?>
+      <div class="muted" style="margin-top:.75rem;">Keine Aktie vorhanden.</div>
+    <?php else: ?>
+      <form method="post" style="margin-top:.75rem; display:grid; gap:10px;">
+        <input type="hidden" name="action" value="save_quote">
+        <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+        <input type="hidden" name="instrument_id" value="<?= e((string) ($selectedInstrument['id'] ?? 0)) ?>">
+        <div class="grid" style="grid-template-columns:repeat(auto-fit, minmax(180px, 1fr)); gap:10px;">
+          <label class="setup-field muted"><span>Kurs</span><input type="number" name="quote_price" min="0" step="0.00000001" required></label>
+          <label class="setup-field muted"><span>Waehrung</span><input type="text" name="quote_currency" value="<?= e((string) ($selectedInstrument['quote_currency'] ?? $defaultReportCurrency)) ?>" required></label>
+          <label class="setup-field muted"><span>Zeitpunkt</span><input type="datetime-local" name="quoted_at" value="<?= e(date('Y-m-d\TH:i')) ?>" required></label>
+          <label class="setup-field muted"><span>Quelle</span><input type="text" name="quote_source" value="manual"></label>
+        </div>
+        <button class="cta-button" type="submit">Kurs speichern</button>
+      </form>
+    <?php endif; ?>
+  </div>
+
+  <div class="card" style="margin-top:1rem;">
+    <strong>Kursverlauf</strong>
+    <?php if ($quotes === []): ?>
+      <div class="muted" style="margin-top:.75rem;">Keine Kursdaten vorhanden.</div>
+    <?php else: ?>
+      <div style="overflow:auto; margin-top:.75rem;">
+        <table style="width:100%; border-collapse:collapse;">
+          <tbody>
+            <?php foreach ($quotes as $quote): ?>
+              <tr style="border-bottom:1px solid var(--border);">
+                <td style="padding:8px;"><?= e((string) $quote['quoted_at']) ?></td>
+                <td style="padding:8px;"><?= e(number_format((float) $quote['price'], 4, ',', '.')) ?> <?= e((string) $quote['currency']) ?></td>
+                <td style="padding:8px;"><?= e((string) $quote['source']) ?></td>
+                <td style="padding:8px;">
+                  <form method="post" onsubmit="return confirm('Kurseintrag wirklich loeschen?')">
+                    <input type="hidden" name="action" value="delete_quote">
+                    <input type="hidden" name="owner_sub" value="<?= e((string) $ownerSub) ?>">
+                    <input type="hidden" name="instrument_id" value="<?= e((string) $selectedInstrumentId) ?>">
+                    <input type="hidden" name="quote_id" value="<?= e((string) $quote['id']) ?>">
+                    <button class="nav-link" type="submit">Loeschen</button>
+                  </form>
+                </td>
+              </tr>
+            <?php endforeach; ?>
+          </tbody>
+        </table>
+      </div>
+    <?php endif; ?>
+  </div>
+</div>

modules/boersenchecker/src/Support/DashboardPage.php

@@ -10,6 +10,7 @@ final class DashboardPage
 {
     private PDO $pdo;
     private array $user;
+    private bool $isAdmin;
     private string $ownerSub;
     private array $moduleSettings;
     private string $defaultReportCurrency;
@@ -21,8 +22,10 @@ final class DashboardPage
     private string $instrumentTable;
     private string $positionTable;
     private string $quoteTable;
+    private InstrumentRegistry $instrumentRegistry;
     private string $symbolSearchKeywords = '';
     private array $symbolSearchResults = [];
+    private array $availableOwners = [];
 
     public function __construct()
     {
@@ -30,7 +33,15 @@ final class DashboardPage
         \module_fn('boersenchecker', 'ensure_schema');
 
         $this->user = \auth_user() ?? [];
+        $this->isAdmin = \auth_is_admin();
         $this->ownerSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $this->availableOwners = $this->buildAvailableOwners();
+        if ($this->isAdmin) {
+            $requestedOwner = trim((string) ($_GET['owner_sub'] ?? $_POST['owner_sub'] ?? ''));
+            if ($requestedOwner !== '' && isset($this->availableOwners[$requestedOwner])) {
+                $this->ownerSub = $requestedOwner;
+            }
+        }
         $this->moduleSettings = \modules()->settings('boersenchecker');
         $this->defaultReportCurrency = $this->normalizeCurrency((string) ($this->moduleSettings['report_currency'] ?? 'EUR'));
         $this->fxMaxAgeHours = (float) ($this->moduleSettings['fx_max_age_hours'] ?? 6);
@@ -51,6 +62,12 @@ final class DashboardPage
         $this->instrumentTable = $table('instruments');
         $this->positionTable = $table('positions');
         $this->quoteTable = $table('quotes');
+        $this->instrumentRegistry = new InstrumentRegistry(
+            $this->pdo,
+            $this->instrumentTable,
+            $this->positionTable,
+            $this->quoteTable,
+        );
     }
 
     public function handle(): array
@@ -78,6 +95,9 @@ final class DashboardPage
         return [
             'notice' => $notice,
             'error' => $error,
+            'isAdmin' => $this->isAdmin,
+            'ownerSub' => $this->ownerSub,
+            'availableOwners' => array_values($this->availableOwners),
             'defaultReportCurrency' => $this->defaultReportCurrency,
             'fxMaxAgeHours' => $this->fxMaxAgeHours,
             'alphaMinIntervalMinutes' => $this->alphaMinIntervalMinutes,
@@ -696,81 +716,7 @@ final class DashboardPage
 
     private function upsertInstrument(array $payload): int
     {
-        $instrumentId = (int) ($payload['id'] ?? 0);
+        return $this->instrumentRegistry->save($payload);
-        $driver = strtolower((string) $this->pdo->getAttribute(PDO::ATTR_DRIVER_NAME));
-        $data = [
-            'isin' => trim((string) ($payload['isin'] ?? '')) ?: null,
-            'wkn' => trim((string) ($payload['wkn'] ?? '')) ?: null,
-            'symbol' => trim((string) ($payload['symbol'] ?? '')) ?: null,
-            'name' => trim((string) ($payload['name'] ?? '')),
-            'quote_currency' => $this->normalizeCurrency((string) ($payload['quote_currency'] ?? 'EUR')),
-            'market' => trim((string) ($payload['market'] ?? '')) ?: null,
-        ];
-
-        if ($data['name'] === '') {
-            throw new RuntimeException('Bitte mindestens einen Aktiennamen angeben.');
-        }
-
-        if ($instrumentId <= 0) {
-            $instrumentId = $this->findInstrumentId($payload) ?? 0;
-        }
-
-        if ($instrumentId > 0) {
-            $stmt = $this->pdo->prepare(
-                'UPDATE ' . $this->instrumentTable . '
-                 SET isin = :isin, wkn = :wkn, symbol = :symbol, name = :name, quote_currency = :quote_currency, market = :market, updated_at = CURRENT_TIMESTAMP
-                 WHERE id = :id'
-            );
-            $stmt->execute($data + ['id' => $instrumentId]);
-            return $instrumentId;
-        }
-
-        if ($driver === 'pgsql') {
-            $stmt = $this->pdo->prepare(
-                'INSERT INTO ' . $this->instrumentTable . ' (isin, wkn, symbol, name, quote_currency, market)
-                 VALUES (:isin, :wkn, :symbol, :name, :quote_currency, :market)
-                 RETURNING id'
-            );
-            $stmt->execute($data);
-            return (int) $stmt->fetchColumn();
-        }
-
-        $stmt = $this->pdo->prepare(
-            'INSERT INTO ' . $this->instrumentTable . ' (isin, wkn, symbol, name, quote_currency, market)
-             VALUES (:isin, :wkn, :symbol, :name, :quote_currency, :market)'
-        );
-        $stmt->execute($data);
-        return (int) $this->pdo->lastInsertId();
-    }
-
-    private function findInstrumentId(array $payload): ?int
-    {
-        $isin = trim((string) ($payload['isin'] ?? ''));
-        $symbol = trim((string) ($payload['symbol'] ?? ''));
-        $name = trim((string) ($payload['name'] ?? ''));
-
-        if ($isin !== '') {
-            $stmt = $this->pdo->prepare('SELECT id FROM ' . $this->instrumentTable . ' WHERE isin = :isin LIMIT 1');
-            $stmt->execute(['isin' => $isin]);
-            $id = $stmt->fetchColumn();
-            if ($id !== false) {
-                return (int) $id;
-            }
-        }
-
-        if ($symbol !== '' && $name !== '') {
-            $stmt = $this->pdo->prepare('SELECT id FROM ' . $this->instrumentTable . ' WHERE symbol = :symbol AND name = :name LIMIT 1');
-            $stmt->execute([
-                'symbol' => $symbol,
-                'name' => $name,
-            ]);
-            $id = $stmt->fetchColumn();
-            if ($id !== false) {
-                return (int) $id;
-            }
-        }
-
-        return null;
     }
 
     private function storeQuote(int $instrumentId, float $price, string $currency, string $quotedAt, string $source): void
@@ -838,4 +784,33 @@ final class DashboardPage
 
         return number_format($value, $scale, ',', '.');
     }
+
+    private function buildAvailableOwners(): array
+    {
+        $owners = [];
+        $currentSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $owners[$currentSub] = [
+            'sub' => $currentSub,
+            'label' => trim((string) ($this->user['name'] ?? $this->user['email'] ?? $currentSub)) ?: $currentSub,
+        ];
+
+        if (!$this->isAdmin) {
+            return $owners;
+        }
+
+        foreach (\modules()->knownAuthUsers() as $knownUser) {
+            $sub = trim((string) ($knownUser['sub'] ?? ''));
+            if ($sub === '') {
+                continue;
+            }
+            $label = trim((string) ($knownUser['name'] ?? $knownUser['email'] ?? $knownUser['username'] ?? $sub));
+            $owners[$sub] = [
+                'sub' => $sub,
+                'label' => $label !== '' ? $label : $sub,
+            ];
+        }
+
+        uasort($owners, static fn (array $left, array $right): int => strcmp((string) $left['label'], (string) $right['label']));
+        return $owners;
+    }
 }

modules/boersenchecker/src/Support/HomePage.php

@@ -0,0 +1,252 @@
+<?php
+declare(strict_types=1);
+
+namespace Modules\Boersenchecker\Support;
+
+use PDO;
+use RuntimeException;
+
+final class HomePage
+{
+    private PDO $pdo;
+    private array $user;
+    private bool $isAdmin;
+    private string $ownerSub;
+    private array $availableOwners = [];
+    private string $portfolioTable;
+    private string $instrumentTable;
+    private string $positionTable;
+    private string $quoteTable;
+    private string $defaultReportCurrency;
+    private int $alphaMinIntervalMinutes;
+
+    public function __construct()
+    {
+        $this->pdo = \module_fn('boersenchecker', 'pdo');
+        \module_fn('boersenchecker', 'ensure_schema');
+        $this->user = \auth_user() ?? [];
+        $this->isAdmin = \auth_is_admin();
+        $this->ownerSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $this->availableOwners = $this->buildAvailableOwners();
+        if ($this->isAdmin) {
+            $requestedOwner = trim((string) ($_GET['owner_sub'] ?? $_POST['owner_sub'] ?? ''));
+            if ($requestedOwner !== '' && isset($this->availableOwners[$requestedOwner])) {
+                $this->ownerSub = $requestedOwner;
+            }
+        }
+
+        $settings = \modules()->settings('boersenchecker');
+        $this->defaultReportCurrency = strtoupper(trim((string) ($settings['report_currency'] ?? 'EUR'))) ?: 'EUR';
+        $this->alphaMinIntervalMinutes = (int) ($settings['alpha_vantage_min_interval_minutes'] ?? 60);
+        if ($this->alphaMinIntervalMinutes <= 0) {
+            $this->alphaMinIntervalMinutes = 60;
+        }
+
+        $table = static fn (string $name): string => \module_fn('boersenchecker', 'table', $name);
+        $this->portfolioTable = $table('portfolios');
+        $this->instrumentTable = $table('instruments');
+        $this->positionTable = $table('positions');
+        $this->quoteTable = $table('quotes');
+    }
+
+    public function handle(): array
+    {
+        $notice = null;
+        $error = null;
+        if ($_SERVER['REQUEST_METHOD'] === 'POST' && (string) ($_POST['action'] ?? '') === 'refresh_current_quotes_home') {
+            try {
+                $notice = $this->refreshCurrentQuotesForPortfolio((int) ($_POST['portfolio_id'] ?? 0));
+            } catch (\Throwable $e) {
+                $error = $e->getMessage();
+            }
+        }
+
+        $portfolios = $this->fetchPortfolios();
+        $selectedPortfolioId = (int) ($_GET['portfolio_id'] ?? ($_POST['portfolio_id'] ?? 0));
+        if ($selectedPortfolioId <= 0 && $portfolios !== []) {
+            $selectedPortfolioId = (int) $portfolios[0]['id'];
+        }
+
+        $positions = $selectedPortfolioId > 0 ? $this->fetchPortfolioPositions($selectedPortfolioId) : [];
+        $selectedInstrumentId = (int) ($_GET['instrument_id'] ?? 0);
+        if ($selectedInstrumentId <= 0 && $positions !== []) {
+            $selectedInstrumentId = (int) $positions[0]['instrument_id'];
+        }
+
+        $latestQuotes = $this->fetchLatestQuotes(array_values(array_unique(array_map(static fn (array $row): int => (int) $row['instrument_id'], $positions))));
+        foreach ($positions as &$position) {
+            $latestQuote = $latestQuotes[(int) $position['instrument_id']] ?? null;
+            $position['latest_price'] = is_array($latestQuote) && is_numeric($latestQuote['price'] ?? null) ? (float) $latestQuote['price'] : null;
+            $position['latest_currency'] = is_array($latestQuote) ? (string) ($latestQuote['currency'] ?? '') : '';
+            $position['latest_quoted_at'] = is_array($latestQuote) ? (string) ($latestQuote['quoted_at'] ?? '') : '';
+        }
+        unset($position);
+
+        $selectedInstrument = null;
+        foreach ($positions as $position) {
+            if ((int) $position['instrument_id'] === $selectedInstrumentId) {
+                $selectedInstrument = $position;
+                break;
+            }
+        }
+
+        return [
+            'notice' => $notice,
+            'error' => $error,
+            'isAdmin' => $this->isAdmin,
+            'ownerSub' => $this->ownerSub,
+            'availableOwners' => array_values($this->availableOwners),
+            'portfolios' => $portfolios,
+            'selectedPortfolioId' => $selectedPortfolioId,
+            'positions' => $positions,
+            'selectedInstrumentId' => $selectedInstrumentId,
+            'selectedInstrument' => $selectedInstrument,
+            'chartEndpoint' => '/module/boersenchecker/chart_data?owner_sub=' . urlencode($this->ownerSub),
+        ];
+    }
+
+    private function refreshCurrentQuotesForPortfolio(int $portfolioId): string
+    {
+        if ($portfolioId <= 0) {
+            throw new RuntimeException('Bitte zuerst ein Depot auswaehlen.');
+        }
+
+        $stmt = $this->pdo->prepare(
+            'SELECT DISTINCT i.id, i.name, i.symbol, i.quote_currency
+             FROM ' . $this->positionTable . ' p
+             INNER JOIN ' . $this->instrumentTable . ' i ON i.id = p.instrument_id
+             WHERE p.owner_sub = :owner_sub AND p.portfolio_id = :portfolio_id'
+        );
+        $stmt->execute([
+            'owner_sub' => $this->ownerSub,
+            'portfolio_id' => $portfolioId,
+        ]);
+        $rows = $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
+        if ($rows === []) {
+            throw new RuntimeException('In diesem Depot sind keine Aktien vorhanden.');
+        }
+
+        $updated = 0;
+        $reused = 0;
+        foreach ($rows as $row) {
+            $instrumentId = (int) ($row['id'] ?? 0);
+            $symbol = strtoupper(trim((string) ($row['symbol'] ?? '')));
+            if ($instrumentId <= 0 || $symbol === '') {
+                continue;
+            }
+
+            $latest = $this->latestApiQuoteForInstrument($instrumentId);
+            $latestTimestamp = is_array($latest) ? strtotime((string) ($latest['quoted_at'] ?? '')) : false;
+            if ($latestTimestamp !== false && (time() - $latestTimestamp) < ($this->alphaMinIntervalMinutes * 60)) {
+                $reused++;
+                continue;
+            }
+
+            $apiResult = \module_fn('boersenchecker', 'alpha_vantage_fetch_quote', $symbol);
+            if (empty($apiResult['ok'])) {
+                continue;
+            }
+
+            $stmtInsert = $this->pdo->prepare(
+                'INSERT INTO ' . $this->quoteTable . ' (instrument_id, price, currency, quoted_at, source)
+                 VALUES (:instrument_id, :price, :currency, :quoted_at, :source)'
+            );
+            $stmtInsert->execute([
+                'instrument_id' => $instrumentId,
+                'price' => (float) $apiResult['price'],
+                'currency' => strtoupper(trim((string) ($row['quote_currency'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency,
+                'quoted_at' => (string) $apiResult['fetched_at'],
+                'source' => (string) $apiResult['source'],
+            ]);
+            $updated++;
+        }
+
+        return 'Aktuelle Kurse: ' . $updated . ' aktualisiert, ' . $reused . ' wiederverwendet.';
+    }
+
+    private function fetchPortfolios(): array
+    {
+        $stmt = $this->pdo->prepare('SELECT * FROM ' . $this->portfolioTable . ' WHERE owner_sub = :owner_sub ORDER BY name ASC');
+        $stmt->execute(['owner_sub' => $this->ownerSub]);
+        return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
+    }
+
+    private function fetchPortfolioPositions(int $portfolioId): array
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT p.*, i.name AS instrument_name, i.symbol, i.isin, i.wkn, i.quote_currency, i.market
+             FROM ' . $this->positionTable . ' p
+             INNER JOIN ' . $this->instrumentTable . ' i ON i.id = p.instrument_id
+             WHERE p.owner_sub = :owner_sub AND p.portfolio_id = :portfolio_id
+             ORDER BY i.name ASC'
+        );
+        $stmt->execute([
+            'owner_sub' => $this->ownerSub,
+            'portfolio_id' => $portfolioId,
+        ]);
+        return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
+    }
+
+    private function fetchLatestQuotes(array $instrumentIds): array
+    {
+        $result = [];
+        if ($instrumentIds === []) {
+            return $result;
+        }
+        $placeholders = implode(',', array_fill(0, count($instrumentIds), '?'));
+        $stmt = $this->pdo->prepare(
+            'SELECT *
+             FROM ' . $this->quoteTable . '
+             WHERE instrument_id IN (' . $placeholders . ')
+             ORDER BY quoted_at DESC, created_at DESC, id DESC'
+        );
+        $stmt->execute($instrumentIds);
+        foreach ($stmt->fetchAll(PDO::FETCH_ASSOC) ?: [] as $row) {
+            $instrumentId = (int) $row['instrument_id'];
+            if (!isset($result[$instrumentId])) {
+                $result[$instrumentId] = $row;
+            }
+        }
+        return $result;
+    }
+
+    private function latestApiQuoteForInstrument(int $instrumentId): ?array
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT *
+             FROM ' . $this->quoteTable . '
+             WHERE instrument_id = :instrument_id AND source LIKE :source
+             ORDER BY quoted_at DESC, created_at DESC, id DESC
+             LIMIT 1'
+        );
+        $stmt->execute([
+            'instrument_id' => $instrumentId,
+            'source' => 'alpha_vantage:%',
+        ]);
+        $row = $stmt->fetch(PDO::FETCH_ASSOC);
+        return is_array($row) ? $row : null;
+    }
+
+    private function buildAvailableOwners(): array
+    {
+        $owners = [];
+        $currentSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $owners[$currentSub] = [
+            'sub' => $currentSub,
+            'label' => trim((string) ($this->user['name'] ?? $this->user['email'] ?? $currentSub)) ?: $currentSub,
+        ];
+        if (!$this->isAdmin) {
+            return $owners;
+        }
+        foreach (\modules()->knownAuthUsers() as $knownUser) {
+            $sub = trim((string) ($knownUser['sub'] ?? ''));
+            if ($sub === '') {
+                continue;
+            }
+            $label = trim((string) ($knownUser['name'] ?? $knownUser['email'] ?? $knownUser['username'] ?? $sub));
+            $owners[$sub] = ['sub' => $sub, 'label' => $label !== '' ? $label : $sub];
+        }
+        uasort($owners, static fn (array $left, array $right): int => strcmp((string) $left['label'], (string) $right['label']));
+        return $owners;
+    }
+}

modules/boersenchecker/src/Support/InstrumentPage.php

@@ -0,0 +1,311 @@
+<?php
+declare(strict_types=1);
+
+namespace Modules\Boersenchecker\Support;
+
+use PDO;
+use RuntimeException;
+
+final class InstrumentPage
+{
+    private PDO $pdo;
+    private array $user;
+    private bool $isAdmin;
+    private string $ownerSub;
+    private array $availableOwners = [];
+    private string $instrumentTable;
+    private string $positionTable;
+    private string $quoteTable;
+    private string $defaultReportCurrency;
+    private string $searchKeywords = '';
+    private array $searchResults = [];
+    private int $selectedInstrumentOverrideId = 0;
+    private InstrumentRegistry $instrumentRegistry;
+
+    public function __construct()
+    {
+        $this->pdo = \module_fn('boersenchecker', 'pdo');
+        \module_fn('boersenchecker', 'ensure_schema');
+        $this->user = \auth_user() ?? [];
+        $this->isAdmin = \auth_is_admin();
+        $this->ownerSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $this->availableOwners = $this->buildAvailableOwners();
+        if ($this->isAdmin) {
+            $requestedOwner = trim((string) ($_GET['owner_sub'] ?? $_POST['owner_sub'] ?? ''));
+            if ($requestedOwner !== '' && isset($this->availableOwners[$requestedOwner])) {
+                $this->ownerSub = $requestedOwner;
+            }
+        }
+
+        $settings = \modules()->settings('boersenchecker');
+        $this->defaultReportCurrency = strtoupper(trim((string) ($settings['report_currency'] ?? 'EUR'))) ?: 'EUR';
+        $table = static fn (string $name): string => \module_fn('boersenchecker', 'table', $name);
+        $this->instrumentTable = $table('instruments');
+        $this->positionTable = $table('positions');
+        $this->quoteTable = $table('quotes');
+        $this->instrumentRegistry = new InstrumentRegistry(
+            $this->pdo,
+            $this->instrumentTable,
+            $this->positionTable,
+            $this->quoteTable,
+        );
+    }
+
+    public function handle(): array
+    {
+        $notice = null;
+        $error = null;
+        if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+            try {
+                $notice = $this->handlePost();
+            } catch (\Throwable $e) {
+                $error = $e->getMessage();
+            }
+        }
+
+        $instruments = $this->fetchInstruments();
+        $selectedInstrumentId = $this->selectedInstrumentOverrideId > 0
+            ? $this->selectedInstrumentOverrideId
+            : (int) ($_GET['instrument_id'] ?? ($_POST['instrument_id'] ?? 0));
+        if ($selectedInstrumentId <= 0 && $instruments !== []) {
+            $selectedInstrumentId = (int) $instruments[0]['id'];
+        }
+
+        $selectedInstrument = null;
+        foreach ($instruments as $instrument) {
+            if ((int) $instrument['id'] === $selectedInstrumentId) {
+                $selectedInstrument = $instrument;
+                break;
+            }
+        }
+
+        $quotes = $selectedInstrumentId > 0 ? $this->fetchQuotes($selectedInstrumentId) : [];
+
+        $candidateName = trim((string) ($_GET['instrument_name_candidate'] ?? ''));
+        $candidateSymbol = trim((string) ($_GET['symbol_candidate'] ?? ''));
+        $candidateMarket = trim((string) ($_GET['market_candidate'] ?? ''));
+        $candidateCurrency = strtoupper(trim((string) ($_GET['quote_currency_candidate'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency;
+        if ($selectedInstrument === null && ($candidateName !== '' || $candidateSymbol !== '' || $candidateMarket !== '')) {
+            $selectedInstrument = [
+                'id' => 0,
+                'name' => $candidateName,
+                'symbol' => $candidateSymbol,
+                'market' => $candidateMarket,
+                'quote_currency' => $candidateCurrency,
+                'isin' => '',
+                'wkn' => '',
+            ];
+        }
+
+        return [
+            'notice' => $notice,
+            'error' => $error,
+            'isAdmin' => $this->isAdmin,
+            'ownerSub' => $this->ownerSub,
+            'availableOwners' => array_values($this->availableOwners),
+            'instruments' => $instruments,
+            'selectedInstrument' => $selectedInstrument,
+            'selectedInstrumentId' => $selectedInstrumentId,
+            'quotes' => $quotes,
+            'searchKeywords' => $this->searchKeywords,
+            'searchResults' => $this->searchResults,
+            'defaultReportCurrency' => $this->defaultReportCurrency,
+        ];
+    }
+
+    private function handlePost(): string
+    {
+        $action = trim((string) ($_POST['action'] ?? ''));
+        return match ($action) {
+            'save_instrument' => $this->saveInstrument(),
+            'save_quote' => $this->saveQuote(),
+            'delete_quote' => $this->deleteQuote(),
+            'refresh_alpha_vantage_instrument' => $this->refreshInstrumentQuote(),
+            'search_symbol' => $this->searchSymbol(),
+            default => '',
+        };
+    }
+
+    private function fetchInstruments(): array
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT DISTINCT i.*
+             FROM ' . $this->instrumentTable . ' i
+             INNER JOIN ' . $this->positionTable . ' p ON p.instrument_id = i.id
+             WHERE p.owner_sub = :owner_sub
+             ORDER BY i.name ASC'
+        );
+        $stmt->execute(['owner_sub' => $this->ownerSub]);
+        return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
+    }
+
+    private function fetchQuotes(int $instrumentId): array
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT *
+             FROM ' . $this->quoteTable . '
+             WHERE instrument_id = :instrument_id
+             ORDER BY quoted_at DESC, created_at DESC, id DESC
+             LIMIT 30'
+        );
+        $stmt->execute(['instrument_id' => $instrumentId]);
+        return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
+    }
+
+    private function saveInstrument(): string
+    {
+        $instrumentId = (int) ($_POST['instrument_id'] ?? 0);
+        if ($instrumentId <= 0) {
+            throw new RuntimeException('Bitte eine Aktie auswaehlen.');
+        }
+        $this->assertInstrumentAccessible($instrumentId);
+
+        $resolvedId = $this->instrumentRegistry->save([
+            'id' => $instrumentId,
+            'name' => $_POST['instrument_name'] ?? '',
+            'symbol' => $_POST['symbol'] ?? '',
+            'isin' => $_POST['isin'] ?? '',
+            'wkn' => $_POST['wkn'] ?? '',
+            'market' => $_POST['market'] ?? '',
+            'quote_currency' => $_POST['quote_currency'] ?? $this->defaultReportCurrency,
+        ]);
+        $this->selectedInstrumentOverrideId = $resolvedId;
+
+        return $resolvedId === $instrumentId
+            ? 'Aktie aktualisiert.'
+            : 'Aktie aktualisiert und mit bestehendem Systemeintrag zusammengefuehrt.';
+    }
+
+    private function saveQuote(): string
+    {
+        $instrumentId = (int) ($_POST['instrument_id'] ?? 0);
+        $price = (float) ($_POST['quote_price'] ?? 0);
+        if ($instrumentId <= 0 || $price <= 0) {
+            throw new RuntimeException('Bitte Aktie und Kurs angeben.');
+        }
+        $this->assertInstrumentAccessible($instrumentId);
+
+        $stmt = $this->pdo->prepare(
+            'INSERT INTO ' . $this->quoteTable . ' (instrument_id, price, currency, quoted_at, source)
+             VALUES (:instrument_id, :price, :currency, :quoted_at, :source)'
+        );
+        $stmt->execute([
+            'instrument_id' => $instrumentId,
+            'price' => $price,
+            'currency' => strtoupper(trim((string) ($_POST['quote_currency'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency,
+            'quoted_at' => date('Y-m-d H:i:s', strtotime((string) ($_POST['quoted_at'] ?? 'now')) ?: time()),
+            'source' => trim((string) ($_POST['quote_source'] ?? 'manual')) ?: 'manual',
+        ]);
+        return 'Kurs gespeichert.';
+    }
+
+    private function deleteQuote(): string
+    {
+        $quoteId = (int) ($_POST['quote_id'] ?? 0);
+        if ($quoteId <= 0) {
+            throw new RuntimeException('Bitte einen Kurseintrag auswaehlen.');
+        }
+
+        $stmt = $this->pdo->prepare(
+            'SELECT q.instrument_id
+             FROM ' . $this->quoteTable . ' q
+             WHERE q.id = :id
+             LIMIT 1'
+        );
+        $stmt->execute(['id' => $quoteId]);
+        $instrumentId = (int) $stmt->fetchColumn();
+        $this->assertInstrumentAccessible($instrumentId);
+
+        $stmt = $this->pdo->prepare('DELETE FROM ' . $this->quoteTable . ' WHERE id = :id');
+        $stmt->execute(['id' => $quoteId]);
+        return 'Kurs geloescht.';
+    }
+
+    private function refreshInstrumentQuote(): string
+    {
+        $instrumentId = (int) ($_POST['instrument_id'] ?? 0);
+        $instrument = $this->assertInstrumentAccessible($instrumentId);
+        $symbol = trim((string) ($instrument['symbol'] ?? ''));
+        if ($symbol === '') {
+            throw new RuntimeException('Fuer diese Aktie ist kein Symbol hinterlegt.');
+        }
+
+        $apiResult = \module_fn('boersenchecker', 'alpha_vantage_fetch_quote', $symbol);
+        if (empty($apiResult['ok'])) {
+            throw new RuntimeException((string) ($apiResult['message'] ?? 'API-Abruf fehlgeschlagen.'));
+        }
+
+        $stmtInsert = $this->pdo->prepare(
+            'INSERT INTO ' . $this->quoteTable . ' (instrument_id, price, currency, quoted_at, source)
+             VALUES (:instrument_id, :price, :currency, :quoted_at, :source)'
+        );
+        $stmtInsert->execute([
+            'instrument_id' => $instrumentId,
+            'price' => (float) $apiResult['price'],
+            'currency' => strtoupper(trim((string) ($instrument['quote_currency'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency,
+            'quoted_at' => (string) $apiResult['fetched_at'],
+            'source' => (string) $apiResult['source'],
+        ]);
+
+        return 'API-Kurs gespeichert.';
+    }
+
+    private function searchSymbol(): string
+    {
+        $this->searchKeywords = trim((string) ($_POST['search_keywords'] ?? ''));
+        $result = \module_fn('boersenchecker', 'alpha_vantage_search_symbols', $this->searchKeywords);
+        $this->searchResults = is_array($result['results'] ?? null) ? $result['results'] : [];
+        if (empty($result['ok'])) {
+            throw new RuntimeException((string) ($result['message'] ?? 'Symbolsuche fehlgeschlagen.'));
+        }
+        return (string) ($result['message'] ?? 'Suche abgeschlossen.');
+    }
+
+    private function buildAvailableOwners(): array
+    {
+        $owners = [];
+        $currentSub = trim((string) ($this->user['sub'] ?? 'local'));
+        $owners[$currentSub] = [
+            'sub' => $currentSub,
+            'label' => trim((string) ($this->user['name'] ?? $this->user['email'] ?? $currentSub)) ?: $currentSub,
+        ];
+        if (!$this->isAdmin) {
+            return $owners;
+        }
+        foreach (\modules()->knownAuthUsers() as $knownUser) {
+            $sub = trim((string) ($knownUser['sub'] ?? ''));
+            if ($sub === '') {
+                continue;
+            }
+            $label = trim((string) ($knownUser['name'] ?? $knownUser['email'] ?? $knownUser['username'] ?? $sub));
+            $owners[$sub] = ['sub' => $sub, 'label' => $label !== '' ? $label : $sub];
+        }
+        uasort($owners, static fn (array $left, array $right): int => strcmp((string) $left['label'], (string) $right['label']));
+        return $owners;
+    }
+
+    private function assertInstrumentAccessible(int $instrumentId): array
+    {
+        if ($instrumentId <= 0) {
+            throw new RuntimeException('Aktie nicht gefunden.');
+        }
+
+        $stmt = $this->pdo->prepare(
+            'SELECT DISTINCT i.*
+             FROM ' . $this->instrumentTable . ' i
+             INNER JOIN ' . $this->positionTable . ' p ON p.instrument_id = i.id
+             WHERE i.id = :id AND p.owner_sub = :owner_sub
+             LIMIT 1'
+        );
+        $stmt->execute([
+            'id' => $instrumentId,
+            'owner_sub' => $this->ownerSub,
+        ]);
+        $instrument = $stmt->fetch(PDO::FETCH_ASSOC);
+        if (!is_array($instrument)) {
+            throw new RuntimeException('Aktie ist in diesem Benutzer-Scope nicht verfuegbar.');
+        }
+
+        return $instrument;
+    }
+}

modules/boersenchecker/src/Support/InstrumentRegistry.php

@@ -0,0 +1,190 @@
+<?php
+declare(strict_types=1);
+
+namespace Modules\Boersenchecker\Support;
+
+use PDO;
+use RuntimeException;
+
+final class InstrumentRegistry
+{
+    public function __construct(
+        private PDO $pdo,
+        private string $instrumentTable,
+        private string $positionTable,
+        private string $quoteTable,
+    ) {
+    }
+
+    public function save(array $payload): int
+    {
+        $currentId = (int) ($payload['id'] ?? 0);
+        $data = $this->normalizePayload($payload);
+        $matchingId = $this->findMatchingInstrumentId($data, $currentId);
+
+        if ($currentId > 0 && $matchingId > 0 && $matchingId !== $currentId) {
+            return $this->mergeIntoExistingInstrument($currentId, $matchingId, $data);
+        }
+
+        if ($currentId > 0) {
+            $this->updateInstrument($currentId, $data);
+            return $currentId;
+        }
+
+        if ($matchingId > 0) {
+            $this->updateInstrument($matchingId, $data);
+            return $matchingId;
+        }
+
+        return $this->insertInstrument($data);
+    }
+
+    public function findMatchingInstrumentId(array $payload, int $excludeId = 0): ?int
+    {
+        $data = $this->normalizePayload($payload);
+        $conditions = [];
+        $excludeSql = $excludeId > 0 ? ' AND id <> :exclude_id' : '';
+
+        if ($data['isin'] !== null) {
+            $conditions[] = [
+                'sql' => 'SELECT id FROM ' . $this->instrumentTable . ' WHERE isin = :isin' . $excludeSql . ' LIMIT 1',
+                'params' => ['isin' => $data['isin']],
+            ];
+        }
+
+        if ($data['symbol'] !== null && $data['market'] !== null) {
+            $conditions[] = [
+                'sql' => 'SELECT id FROM ' . $this->instrumentTable . ' WHERE symbol = :symbol AND market = :market' . $excludeSql . ' LIMIT 1',
+                'params' => ['symbol' => $data['symbol'], 'market' => $data['market']],
+            ];
+        }
+
+        if ($data['symbol'] !== null && $data['name'] !== '') {
+            $conditions[] = [
+                'sql' => 'SELECT id FROM ' . $this->instrumentTable . ' WHERE symbol = :symbol AND name = :name' . $excludeSql . ' LIMIT 1',
+                'params' => ['symbol' => $data['symbol'], 'name' => $data['name']],
+            ];
+        }
+
+        foreach ($conditions as $condition) {
+            $params = $condition['params'];
+            if ($excludeId > 0) {
+                $params['exclude_id'] = $excludeId;
+            }
+
+            $stmt = $this->pdo->prepare($condition['sql']);
+            $stmt->execute($params);
+            $id = $stmt->fetchColumn();
+            if ($id !== false) {
+                return (int) $id;
+            }
+        }
+
+        return null;
+    }
+
+    private function normalizePayload(array $payload): array
+    {
+        $data = [
+            'isin' => $this->normalizeUpper($payload['isin'] ?? null),
+            'wkn' => $this->normalizeUpper($payload['wkn'] ?? null),
+            'symbol' => $this->normalizeUpper($payload['symbol'] ?? null),
+            'name' => trim((string) ($payload['name'] ?? '')),
+            'quote_currency' => $this->normalizeUpper($payload['quote_currency'] ?? 'EUR', 'EUR'),
+            'market' => trim((string) ($payload['market'] ?? '')) ?: null,
+        ];
+
+        if ($data['name'] === '') {
+            throw new RuntimeException('Bitte mindestens einen Aktiennamen angeben.');
+        }
+
+        return $data;
+    }
+
+    private function normalizeUpper(mixed $value, string $fallback = ''): ?string
+    {
+        $normalized = strtoupper(trim((string) $value));
+        if ($normalized !== '') {
+            return $normalized;
+        }
+
+        return $fallback !== '' ? $fallback : null;
+    }
+
+    private function updateInstrument(int $instrumentId, array $data): void
+    {
+        $stmt = $this->pdo->prepare(
+            'UPDATE ' . $this->instrumentTable . '
+             SET isin = :isin,
+                 wkn = :wkn,
+                 symbol = :symbol,
+                 name = :name,
+                 quote_currency = :quote_currency,
+                 market = :market,
+                 updated_at = CURRENT_TIMESTAMP
+             WHERE id = :id'
+        );
+        $stmt->execute($data + ['id' => $instrumentId]);
+    }
+
+    private function insertInstrument(array $data): int
+    {
+        $driver = strtolower((string) $this->pdo->getAttribute(PDO::ATTR_DRIVER_NAME));
+        if ($driver === 'pgsql') {
+            $stmt = $this->pdo->prepare(
+                'INSERT INTO ' . $this->instrumentTable . ' (isin, wkn, symbol, name, quote_currency, market)
+                 VALUES (:isin, :wkn, :symbol, :name, :quote_currency, :market)
+                 RETURNING id'
+            );
+            $stmt->execute($data);
+            return (int) $stmt->fetchColumn();
+        }
+
+        $stmt = $this->pdo->prepare(
+            'INSERT INTO ' . $this->instrumentTable . ' (isin, wkn, symbol, name, quote_currency, market)
+             VALUES (:isin, :wkn, :symbol, :name, :quote_currency, :market)'
+        );
+        $stmt->execute($data);
+        return (int) $this->pdo->lastInsertId();
+    }
+
+    private function mergeIntoExistingInstrument(int $sourceId, int $targetId, array $data): int
+    {
+        $this->pdo->beginTransaction();
+        try {
+            $this->updateInstrument($targetId, $data);
+
+            $stmt = $this->pdo->prepare(
+                'UPDATE ' . $this->positionTable . '
+                 SET instrument_id = :target_id, updated_at = CURRENT_TIMESTAMP
+                 WHERE instrument_id = :source_id'
+            );
+            $stmt->execute([
+                'target_id' => $targetId,
+                'source_id' => $sourceId,
+            ]);
+
+            $stmt = $this->pdo->prepare(
+                'UPDATE ' . $this->quoteTable . '
+                 SET instrument_id = :target_id
+                 WHERE instrument_id = :source_id'
+            );
+            $stmt->execute([
+                'target_id' => $targetId,
+                'source_id' => $sourceId,
+            ]);
+
+            $stmt = $this->pdo->prepare('DELETE FROM ' . $this->instrumentTable . ' WHERE id = :id');
+            $stmt->execute(['id' => $sourceId]);
+
+            $this->pdo->commit();
+        } catch (\Throwable $e) {
+            if ($this->pdo->inTransaction()) {
+                $this->pdo->rollBack();
+            }
+            throw $e;
+        }
+
+        return $targetId;
+    }
+}