diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..1bceff8
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,6 @@
+root = true
+
+[*.{bat,cmd}]
+charset = latin1
+end_of_line = crlf
+insert_final_newline = true
diff --git a/.env.example b/.env.example
index 5bd41b4..65ab931 100644
--- a/.env.example
+++ b/.env.example
@@ -95,6 +95,11 @@ COOLIFY_RESOURCE_UUID=
 COOLIFY_TRIGGER_MODE=webhook
 COOLIFY_DEPLOY_METHOD=GET
 COOLIFY_DEPLOY_ENDPOINT=/api/v1/deploy?uuid={uuid}&force={force}
+COOLIFY_DEPLOYMENT_STATUS_ENDPOINT=/api/v1/deployments/{deployment_id}
+VENDOO_DEPLOY_TIMEOUT_SECONDS=900
+VENDOO_DEPLOY_HEALTH_POLL_SECONDS=15
+VENDOO_BUILD_REVISION=
+VENDOO_COOLIFY_AUTO_DEPLOY=false
 VENDOO_GITHUB_REPOSITORY=Masterluke77/vendoo
 VENDOO_GITHUB_BRANCH=main
 VENDOO_GHCR_IMAGE=ghcr.io/masterluke77/vendoo
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..f6a525d
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+* text=auto eol=lf
+*.bat text eol=crlf
+*.cmd text eol=crlf
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8999aa5..cae8f53 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,6 +48,10 @@ jobs:
       - name: Syntaxprüfung
         run: npm run check
 
+
+      - name: PowerShell-Regressionen statisch prüfen
+        run: npm run verify:powershell-static
+
       - name: Produktiven Source-Root und Archivgrenzen prüfen
         run: npm run verify:source-boundaries
 
@@ -114,3 +118,31 @@ jobs:
 
       - name: Docker-Image testweise bauen
         run: docker build --pull --tag vendoo:ci .
+
+  windows-release-contract:
+    name: Windows – vollständiger Releasevertrag
+    runs-on: windows-latest
+    timeout-minutes: 35
+    steps:
+      - name: Repository auschecken
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Node.js 22 aktivieren
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+          cache: npm
+
+      - name: Abhängigkeiten reproduzierbar installieren
+        run: npm ci
+
+      - name: Alle PowerShell-Dateien mit Windows PowerShell 5.1 parsen
+        shell: powershell
+        run: .\tools\verify-powershell-parser.ps1
+
+      - name: Vollständigen Vendoo-Releasevertrag unter Windows ausführen
+        shell: pwsh
+        run: npm run verify:all
+
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a5e95d7..222bdb4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,20 @@ env:
   IMAGE_NAME: masterluke77/vendoo
 
 jobs:
+  powershell-parser:
+    name: Windows PowerShell 5.1 Parser
+    runs-on: windows-latest
+    timeout-minutes: 10
+    steps:
+      - name: Repository auschecken
+        uses: actions/checkout@v6
+
+      - name: Alle PowerShell-Dateien mit Windows PowerShell 5.1 parsen
+        shell: powershell
+        run: .\tools\verify-powershell-parser.ps1
+
   release-assets:
+    needs: powershell-parser
     name: Release-Paket und Prüfsummen
     permissions:
       contents: write
@@ -42,31 +55,21 @@ jobs:
           EXPECTED="v$(node -p "require('./package.json').version")"
           test "$RELEASE_TAG" = "$EXPECTED" || { echo "Release-Tag $RELEASE_TAG passt nicht zu $EXPECTED." >&2; exit 1; }
 
-      - name: Vollständige Prüfung
-        run: |
-          npm run verify:git
-          npm run verify:git-regression
-          npm run verify:git-staging
-          npm run verify:ignore-boundaries
-          npm run check
-          npm run verify:source-boundaries
-          npm run verify:esm-exports
-          npm run verify:flux-loop
-          npm run verify:capabilities
-          npm run verify:coolify
-          npm run verify:initial-modules
-          npm run verify:architecture
-          npm run verify:themes
-          npm run verify:security
-          npm run verify:identity
-          npm run verify:catalog
-          npm run verify:modules
-          npm run verify:deployment
-          npm run verify:config
-          npm run verify:installer-shell
-          npm run verify:db
+      - name: ESM-Exportverträge explizit prüfen
+        run: npm run verify:esm-exports
 
-      - name: Release-Staging erzeugen
+      - name: FLUX-Loop-Hotfix explizit prüfen
+        run: npm run verify:flux-loop
+
+      - name: Vollständige Prüfung
+        run: npm run verify:all
+
+      - name: Release-Manifest reproduzierbar prüfen
+        run: |
+          node tools/generate-release-manifest.mjs .
+          git diff --exit-code -- release-manifest.json
+
+      - name: Manifestbasiertes Release-Staging erzeugen
         run: node tools/build-release.mjs
 
       - name: ZIP und SHA-256 erzeugen
diff --git a/.github/workflows/sync-release-manifest.yml b/.github/workflows/sync-release-manifest.yml
new file mode 100644
index 0000000..3f9f556
--- /dev/null
+++ b/.github/workflows/sync-release-manifest.yml
@@ -0,0 +1,47 @@
+name: Vendoo Release Manifest Sync
+
+on:
+  push:
+    branches:
+      - release/1.43.0-production-update-v3
+
+permissions:
+  contents: write
+
+concurrency:
+  group: vendoo-release-manifest-sync-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  sync:
+    name: Release-Manifest reproduzierbar synchronisieren
+    if: ${{ !contains(github.event.head_commit.message, '[manifest-sync]') }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Release-Branch auschecken
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ github.ref }}
+          fetch-depth: 0
+
+      - name: Node.js 22 aktivieren
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+
+      - name: Release-Manifest erzeugen
+        run: node tools/generate-release-manifest.mjs .
+
+      - name: Geändertes Manifest committen
+        shell: bash
+        run: |
+          if git diff --quiet -- release-manifest.json; then
+            echo "Release-Manifest ist bereits aktuell."
+            exit 0
+          fi
+          git config user.name "vendoo-release-bot"
+          git config user.email "vendoo-release-bot@users.noreply.github.com"
+          git add release-manifest.json
+          git commit -m "chore: Release-Manifest synchronisieren [manifest-sync]"
+          git push origin HEAD:${GITHUB_REF_NAME}
diff --git a/.github/workflows/vendoo-production-deploy.yml b/.github/workflows/vendoo-production-deploy.yml
new file mode 100644
index 0000000..adced6f
--- /dev/null
+++ b/.github/workflows/vendoo-production-deploy.yml
@@ -0,0 +1,83 @@
+name: Vendoo Production Deploy
+
+on:
+  workflow_dispatch:
+    inputs:
+      target_version:
+        description: Expected Vendoo version
+        required: true
+        type: string
+      public_base_url:
+        description: Public Vendoo URL
+        required: true
+        default: https://vendoo.flatlined.de
+        type: string
+
+permissions:
+  contents: read
+
+concurrency:
+  group: vendoo-production-deploy
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Validate inputs
+        shell: bash
+        env:
+          TARGET_VERSION: ${{ inputs.target_version }}
+          PUBLIC_BASE_URL: ${{ inputs.public_base_url }}
+        run: |
+          set -euo pipefail
+          [[ "$TARGET_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]
+          [[ "$PUBLIC_BASE_URL" =~ ^https://[^/]+/?$ ]]
+
+      - name: Trigger Coolify
+        shell: bash
+        env:
+          COOLIFY_DEPLOY_WEBHOOK_URL: ${{ secrets.COOLIFY_DEPLOY_WEBHOOK_URL }}
+        run: |
+          set -euo pipefail
+          test -n "$COOLIFY_DEPLOY_WEBHOOK_URL"
+          curl --fail --silent --show-error --location --request GET \
+            --connect-timeout 20 --max-time 90 \
+            "$COOLIFY_DEPLOY_WEBHOOK_URL" >/tmp/coolify-response.txt
+          echo "Coolify accepted the deployment trigger."
+
+      - name: Wait for exact production version
+        shell: bash
+        env:
+          TARGET_VERSION: ${{ inputs.target_version }}
+          PUBLIC_BASE_URL: ${{ inputs.public_base_url }}
+        run: |
+          set -euo pipefail
+          BASE_URL="${PUBLIC_BASE_URL%/}"
+          deadline=$((SECONDS + 1500))
+          last_version="unknown"
+          while (( SECONDS < deadline )); do
+            if body=$(curl --fail --silent --show-error --connect-timeout 10 --max-time 30 \
+              -H 'Accept: application/json' -H 'Cache-Control: no-cache' \
+              "$BASE_URL/readyz?github_run=${GITHUB_RUN_ID}&attempt=${GITHUB_RUN_ATTEMPT}"); then
+              ready=$(jq -r '.ok // false' <<<"$body")
+              version=$(jq -r '.version // empty' <<<"$body")
+              if [[ -n "$version" ]]; then last_version="$version"; fi
+              echo "ready=$ready version=${version:-unknown} expected=$TARGET_VERSION"
+              if [[ "$ready" == "true" && "$version" == "$TARGET_VERSION" ]]; then exit 0; fi
+            fi
+            sleep 15
+          done
+          echo "Timeout waiting for Vendoo $TARGET_VERSION. Last version: $last_version" >&2
+          exit 1
+
+      - name: Final health response
+        shell: bash
+        env:
+          PUBLIC_BASE_URL: ${{ inputs.public_base_url }}
+        run: |
+          set -euo pipefail
+          BASE_URL="${PUBLIC_BASE_URL%/}"
+          curl --fail --silent --show-error -H 'Accept: application/json' \
+            "$BASE_URL/healthz?github_run=${GITHUB_RUN_ID}" | jq .
diff --git a/.github/workflows/windows-release-diagnostics.yml b/.github/workflows/windows-release-diagnostics.yml
new file mode 100644
index 0000000..dcd5ed3
--- /dev/null
+++ b/.github/workflows/windows-release-diagnostics.yml
@@ -0,0 +1,125 @@
+name: Vendoo Windows Release Diagnostics
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: vendoo-windows-diagnostics-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  windows-release-diagnostics:
+    name: Windows – Release-Gates einzeln
+    runs-on: windows-latest
+    timeout-minutes: 35
+    steps:
+      - name: Repository auschecken
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Node.js 22 aktivieren
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+          cache: npm
+
+      - name: Abhängigkeiten reproduzierbar installieren
+        run: npm ci
+
+      - name: Alle PowerShell-Dateien mit Windows PowerShell 5.1 parsen
+        shell: powershell
+        run: .\tools\verify-powershell-parser.ps1
+
+      - name: Git-Sicherheitsgate
+        run: npm run verify:git
+
+      - name: Git-Sicherheitsgate Regressionstest
+        run: npm run verify:git-regression
+
+      - name: Git-Staging-Filter Regressionstest
+        run: npm run verify:git-staging
+
+      - name: Release-Manifest prüfen
+        run: npm run verify:release-manifest
+
+      - name: Git-Ignore-Grenzen prüfen
+        run: npm run verify:ignore-boundaries
+
+      - name: Syntax und Identity-Datenbank prüfen
+        run: npm run check
+
+      - name: PowerShell-Regressionen statisch prüfen
+        run: npm run verify:powershell-static
+
+      - name: Source-Root-Grenzen prüfen
+        run: npm run verify:source-boundaries
+
+      - name: ESM-Exportverträge prüfen
+        run: npm run verify:esm-exports
+
+      - name: FLUX-Loop-Hotfix prüfen
+        run: npm run verify:flux-loop
+
+      - name: Capability-Graph prüfen
+        run: npm run verify:capabilities
+
+      - name: Coolify- und Produktionsoperationen prüfen
+        run: npm run verify:coolify
+
+      - name: Initial deaktivierte Module prüfen
+        run: npm run verify:initial-modules
+
+      - name: Plattformarchitektur prüfen
+        run: npm run verify:architecture
+
+      - name: Theme Manager prüfen
+        run: npm run verify:themes
+
+      - name: Security Foundation prüfen
+        run: npm run verify:security
+
+      - name: Identity und Settings prüfen
+        run: npm run verify:identity
+
+      - name: Einladungen prüfen
+        run: npm run verify:invitations
+
+      - name: SQLite-Cleanup unter Windows prüfen
+        run: npm run verify:sqlite-cleanup
+
+      - name: Katalog und Medien prüfen
+        run: npm run verify:catalog
+
+      - name: Modulmanager prüfen
+        run: npm run verify:modules
+
+      - name: Produktionsoperationen prüfen
+        run: npm run verify:production-operations
+
+      - name: One-Click-Updater prüfen
+        run: npm run verify:one-click-update
+
+      - name: Modulnavigation prüfen
+        run: npm run verify:module-navigation
+
+      - name: Updater-UI prüfen
+        run: npm run verify:updater-ui
+
+      - name: Updater-Hotfix-Vertrag prüfen
+        run: npm run verify:updater-hotfix
+
+      - name: Deployment prüfen
+        run: npm run verify:deployment
+
+      - name: Konfigurationsspeicher prüfen
+        run: npm run verify:config
+
+      - name: Installer-Shell-Portabilität prüfen
+        run: npm run verify:installer-shell
+
+      - name: Datenbankmigrationen prüfen
+        run: npm run verify:db
diff --git a/00_START_HIER_1_43_0.md b/00_START_HIER_1_43_0.md
new file mode 100644
index 0000000..94f72ee
--- /dev/null
+++ b/00_START_HIER_1_43_0.md
@@ -0,0 +1,36 @@
+# Vendoo 1.43.0 – Start hier
+
+## Production Updater 3.3 starten
+
+1. Dieses ZIP vollständig in einen neuen lokalen Ordner entpacken, zum Beispiel `C:\Vendoo-Update`.
+2. Im Ordner `vendoo` doppelt auf `UPDATE_VENDOO.bat` klicken.
+3. Den Vendoo Production Updater bis zum eindeutigen Ergebnis geöffnet lassen.
+
+Der Updater zeigt zehn klare Phasen, Fortschritt, Live-Protokoll und einen dauerhaft sichtbaren Fehlerzustand. Beim ersten Lauf kann einmalig die GitHub-Anmeldung im Browser erforderlich sein. GitHub CLI wird bei Bedarf als verwaltete portable Kopie geladen und per SHA-256 geprüft.
+
+Ein Coolify-Webhook wird nicht abgefragt. Nach einem erfolgreichen Merge verwendet Vendoo das bereits eingerichtete Coolify Auto Deploy der GitHub-Verknüpfung und bestätigt anschließend `/readyz` mit exakt Version `1.43.0`.
+
+## Release-Architektur 3.0
+
+- Die geklonte `main`-Arbeitskopie wird nicht geleert.
+- `release-manifest.json` enthält jede auszuliefernde Datei mit Größe und SHA-256.
+- Pflichtdateien wie `db/schema.sql` werden vor den Tests hart geprüft.
+- Dateien werden als Overlay angewendet und im Ziel erneut gehasht.
+- `release-manifest.json` wird anschließend als bytegeprüfte Steuerdatei in die Arbeitskopie übernommen.
+- Löschungen sind nur über die explizite Liste `removedFiles` erlaubt.
+- Alte Updater-2.x-Sitzungen werden nicht übernommen.
+- GitHub Actions führt den vollständigen Releasevertrag auf Windows und Linux aus.
+
+## Inhalt von Vendoo 1.43.0
+
+- modulabhängige Navigation: deaktivierte Module verschwinden sofort aus der Seitenleiste,
+- optionales, standardmäßig deaktiviertes Modul **Produktbild Studio**,
+- grundlegend überarbeitete Seite **Neuer Artikel**,
+- dauerhaft sichtbare Aktionen **Artikel generieren** und **Speichern**,
+- manifestbasierter Production Updater 3.3.
+
+## Sicherheitsgrenzen
+
+Der Updater ersetzt oder löscht niemals `/app/data`, Datenbanken, Uploads, Backups, `.env` oder API-Schlüssel. GitHub-Checks, kontrollierter Merge, Coolify Auto Deploy und `/readyz`-Versionskontrolle bleiben verpflichtend.
+
+Technische Details: `docs/PRODUCTION_UPDATER_3_3.md`.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a012e1c..98be276 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,95 @@
+## Vendoo Production Updater 3.3 – Manifest Control Artifact Contract
+
+- `release-manifest.json` wird nach dem Payload-Overlay ausdrücklich in die Git-Arbeitskopie kopiert.
+- Die Steuerdatei wird bytegenau gegen das Release-Paket geprüft.
+- Manifestprüfung in einer Git-Baseline toleriert zusätzliche unveränderte Baseline-Dateien, prüft aber alle manifestierten Dateien vollständig.
+- `removedFiles` darf die Manifest-Steuerdatei nicht löschen.
+- Der Windows-Lauf kann dadurch `verify-production-updater-3.3.mjs` innerhalb der geklonten Arbeitskopie ausführen.
+- Prozessfehler zeigen in Status und Oberfläche zuerst die echte Fehlerausgabe; lange Standardausgaben verdrängen die Ursache nicht mehr.
+
+## Vendoo Production Updater 3.1 – Manifest-Based Release Application
+
+- replaces destructive clone cleanup and exclusion-list copying with SHA-256 verified overlay manifest
+- requires `db/schema.sql` and all release-critical source files before tests can start
+- preserves baseline files unless deletion is explicitly declared in `removedFiles`
+- verifies every payload file before and after copying
+- rejects stale Updater-2.x sessions and uses a dedicated v3 release branch
+
+## Vendoo Production Updater 2.10 – Windows Installer-Shell Portability
+
+- `verify:installer-shell` läuft über einen plattformneutralen Node-Wrapper.
+- Unter Windows wird `sh.exe` aus Git for Windows über `where git`, `git --exec-path` und bekannte Installationspfade ermittelt.
+- Keine globale `sh`-PATH-Annahme mehr.
+- Git-Fortschritt auf stderr wird bei Exit-Code 0 als Ausgabe statt als Fehler protokolliert; npm-Warnungen erscheinen als Warnung.
+- Zielversion der Anwendung bleibt Vendoo 1.43.0.
+
+## Vendoo Production Updater 2.9 – Systematic Windows SQLite Handle Audit
+
+- Zentraler Cleanup für temporäre Vendoo-SQLite-Datenbanken.
+- Einladungs-Verifier schließt `better-sqlite3` vor dem Entfernen des Temp-Ordners.
+- Aktive Verifier werden transitiv auf offene `lib/db.mjs`-Handles geprüft.
+- Windows-Cleanup-Regression läuft für Initialmodule und Einladungen jeweils dreifach isoliert.
+
+## Vendoo Production Updater 2.8 – Windows SQLite Cleanup
+
+- `verify:initial-modules` schließt die temporäre `better-sqlite3`-Datenbank jetzt vor dem Entfernen des Testordners.
+- Windows-`EBUSY` beim Löschen von `vendoo.db` behoben.
+- Neuer dreifacher Cleanup-Regressionstest verhindert offene SQLite-Dateien und Temp-Reste.
+
+# Vendoo 1.43.0 – Production Updater 2.4
+
+- GitHub-Browseranmeldung aus dem versteckten Worker entfernt.
+- Sichtbares, klar beschriftetes Geräte-Anmeldefenster mit `--web --clipboard`.
+- Stilles Loginstatus-Polling und automatische Fortsetzung nach erfolgreicher Anmeldung.
+- Downloadfortschritt auf 10-%-Stufen gedrosselt; keine Logflut mehr.
+- Neues Updater-2.4-Regressionsgate.
+
 # Changelog
 
+## Updater 2.1 – Worker Host & Bootstrap Diagnostics
+
+- überwachten Worker-Host eingeführt
+- Status und Protokollpfad vor Worker-Start garantiert
+- Standardausgabe und Standardfehler vollständig erfasst
+- Lade-, Parser- und Initialisierungsfehler mit Datei und Zeile sichtbar
+- Diagnoseordner direkt in der Oberfläche erreichbar
+- Worker-Core beendet den Host nicht mehr eigenmächtig
+
+## 1.43.0 Updater Revision 2.0 – Production Updater Replacement
+
+- Bisherige Winget-/Konsolen-Hotfix-Kette vollständig durch einen eigenständigen WPF-Production-Updater ersetzt.
+- Neutrale dunkle Oberfläche mit zehn klaren Updatephasen, Fortschritt, Laufzeit, Heartbeat und Live-Protokoll.
+- Fehlerzustände bleiben dauerhaft sichtbar; das Fenster schließt sich weder bei Fehlern noch bei einem unerwarteten Worker-Ende automatisch.
+- Aktionen für Protokoll öffnen, Fehler kopieren, kontrollierten Abbruch und Wiederaufnahme.
+- Verwaltete portable GitHub CLI mit offiziellem Release-Download und SHA-256-Prüfung statt Winget-Abhängigkeit.
+- Feste Timeouts, Prozessbaum-Abbruch und Heartbeats für alle externen Werkzeuge.
+- Persistente Sitzung für sichere Wiederaufnahme nach Abbruch oder Neustart.
+- GitHub-, Test-, Merge-, Coolify- und Produktionsprüfung bleiben als getrennte Phasen nachvollziehbar.
+
+## 1.43.0 – Module-aware Navigation, Listing Studio UX & Updater Status UI
+
+- Navigationseinträge verschwinden unmittelbar, wenn das zugehörige Modul deaktiviert wird.
+- Neues authentifiziertes, minimales Modulstatus-API für die Oberfläche.
+- Produktbild Studio als eigenständiges, standardmäßig deaktiviertes Modul.
+- Seite „Neuer Artikel“ neu geordnet, lesbarer und konsequent am Theme-System ausgerichtet.
+- „Artikel generieren“ und „Speichern“ bleiben in einer sticky Aktionsleiste dauerhaft erreichbar.
+- Ein-Klick-Updater mit grafischer Fortschrittsanzeige, Prozentwert, Phase und Live-Protokoll.
+
+## 1.42.0 – Production Operations & Controlled Update Completion
+
+- Persistente Deployment-State-Machine mit Ereignisverlauf und Wiederaufnahme nach Neustart.
+- Idempotency-Key und Sperre gegen parallele Deployment-Aufträge.
+- Vorab-Backup wird erstellt, verifiziert und mit dem Auftrag verknüpft.
+- Coolify-Trigger, Remote-Status, Readiness und Zielversion werden getrennt bewertet.
+- Webhook-Abschlüsse benötigen eine zusätzliche exakte Bestätigung `CONFIRM`.
+- Fehler und Zeitüberschreitungen wechseln in `rollback_required` und blockieren neue Aufträge bis zur manuellen Prüfung.
+- Neuer Produktionscheck und Produktionsstatus im Update Center.
+- Additive Tabellen `deployment_runs`, `deployment_events`, `backup_verifications` und `production_checks`.
+- Keine Löschung oder Rücksetzung bestehender Daten, Benutzer, Uploads, Secrets, Backups oder Module.
+- Neuer `UPDATE_VENDOO.bat`-Assistent automatisiert Voraussetzungen, Volltest, Release-Branch, Pull Request, Merge und Coolify-Deployment.
+- Coolify-Webhook wird nur einmalig als verschlüsseltes GitHub Actions Secret hinterlegt.
+- Produktionsworkflow meldet Erfolg ausschließlich bei `/readyz` und exakt Version `1.42.0`.
+
 ## 1.41.2 – Git Ignore Boundary & Module Tracking Hotfix
 
 - Root-Runtimeordner in `.gitignore` sind jetzt mit `/` verankert.
diff --git a/FEATURES.md b/FEATURES.md
index 6de18de..b15f294 100644
--- a/FEATURES.md
+++ b/FEATURES.md
@@ -1071,3 +1071,26 @@ Neue Kernel-Routen benötigen zwingend einen Modulbesitzer und eine explizite Po
 - `app/modules/` und `app/modules/sessions/` bleiben versionierter Source
 - Git-Ignore-Semantiktest mit echtem temporärem Repository
 - Pflichtdatei- und Tracking-Gate im GitHub-Deploy-Assistenten
+
+
+## 1.42.0 – Production Operations & Controlled Update Completion
+
+- Persistente Deployment-State-Machine: `checking`, `backup_pending`, `backup_running`, `backup_verified`, `deploy_requested`, `deploy_running`, `health_wait`, `succeeded`, `failed`, `rollback_required`.
+- Idempotente Aufträge und harter Doppelstartschutz.
+- Verifiziertes Vorab-Backup mit SHA-256-/Manifestbezug.
+- Coolify-API-Statusabfrage über konfigurierbaren relativen Endpunkt; Webhook-Modus mit expliziter Abschlussbestätigung.
+- Readiness- und Zielversionsprüfung vor Erfolgsmeldung.
+- Persistenter Ereignisverlauf, Neustart-Wiederaufnahme und kontrollierte Aufhebung einer Rollback-Sperre.
+- Produktionsstatus und Produktionscheck im Update Center.
+- Additive Migration ohne Reset bestehender Produktivdaten.
+
+
+## 1.43.0 – Module-aware Navigation, Listing Studio & Updater Status UI
+
+- Authentifizierter Modulstatus-Endpunkt `/api/modules/navigation` mit minimaler Antwortfläche.
+- Navigationselemente und optionale UI-Panels sind über `data-module` beziehungsweise `data-module-panel` an den realen Modulstatus gekoppelt.
+- Modulstatus wird vor geschützten Modul-APIs geladen; ein deaktiviertes AI-Modul blockiert den App-Start nicht.
+- Neuer Manifestvertrag `defaultEnabled`, damit ein Modul standardmäßig aus, aber administrativ aktivierbar sein kann.
+- `vendoo.product-image-tools` stellt `product-images.variants` bereit und startet standardmäßig deaktiviert.
+- Listing Studio mit sticky Command Bar, klarer Zwei-Spalten-Arbeitsfläche und dauerhaft sichtbaren Aktionen.
+- Grafische Update-Oberfläche mit Fortschritt, Phase, Detailmeldung, Live-Protokoll, sicherer einmaliger Coolify-Eingabe und korrektem Exit-Code.
diff --git a/GitHub-Deploy-Assistent.bat b/GitHub-Deploy-Assistent.bat
index 65b2213..9006d25 100644
--- a/GitHub-Deploy-Assistent.bat
+++ b/GitHub-Deploy-Assistent.bat
@@ -1,14 +1,4 @@
 @echo off
-setlocal EnableExtensions
-chcp 65001 >nul
-title Vendoo GitHub Deploy Assistent
-cd /d "%~dp0"
-powershell.exe -NoLogo -NoProfile -ExecutionPolicy Bypass -STA -File "%~dp0scripts\github-deploy.ps1"
-set "EXITCODE=%ERRORLEVEL%"
-if not "%EXITCODE%"=="0" (
-  echo.
-  echo [FEHLER] GitHub-Deployment wurde mit Exit-Code %EXITCODE% beendet.
-  echo.
-  pause
-)
-exit /b %EXITCODE%
+rem Alter Dateiname bleibt als Kompatibilitaetsstarter erhalten.
+call "%~dp0UPDATE_VENDOO.bat"
+exit /b %ERRORLEVEL%
diff --git a/README.md b/README.md
index 8d8ca50..e6a9b6f 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,26 @@
-# Vendoo 1.41.2
+# Vendoo 1.43.0
 
-Vendoo 1.41.1 ist die korrigierte Produktionsgrundlage für den Betrieb über **Coolify**, GitHub und `https://vendoo.flatlined.de`. Der Container bleibt unveränderlich: Vendoo führt weder `git pull` noch Docker-Befehle aus, sondern delegiert freigegebene Deployments nach einem verifizierten Vorab-Backup an Coolify.
+Vendoo 1.43.0 erweitert die kontrollierte Produktionsgrundlage um modulabhängige Navigation, ein optionales Produktbild Studio, ein neu aufgebautes Listing Studio und einen grafischen Ein-Klick-Updater. Der Container bleibt unveränderlich: Vendoo führt weder `git pull` noch Docker-Befehle aus, sondern delegiert freigegebene Deployments nach einem verifizierten Vorab-Backup an Coolify.
+
+
+## Release 1.43.0: Module-aware Navigation, Listing Studio & Updater UI
+
+- deaktivierte Fachmodule verschwinden unmittelbar aus der linken Navigation
+- Modulstatus wird vor modulgeschützten APIs geladen, damit deaktivierte Module den App-Start nicht blockieren
+- Produktbild Studio als eigenes natives Modul mit `defaultEnabled: false`
+- überarbeitete Seite **Neuer Artikel** mit theme-konformen Flächen, Abständen und responsivem Arbeitsbereich
+- sticky Aktionsleiste: **Artikel generieren** und **Speichern** bleiben oben erreichbar
+- grafischer `UPDATE_VENDOO.bat`-Ablauf mit Phase, Detailtext, Prozentfortschritt, Live-Protokoll und sicherer Webhook-Eingabe
+
+## Release 1.42.0: Production Operations & Controlled Update Completion
+
+- persistente Deployment-Aufträge und Ereignisse in SQLite
+- idempotente Auslösung und Sperre gegen parallele Deployments
+- verifiziertes Vorab-Backup als fester Bestandteil des Auftrags
+- getrennte Zustände für Coolify-Annahme, laufendes Deployment, Readiness, Erfolg, Fehler und Rollbackbedarf
+- Erfolg erst nach Readiness und bestätigter Zielversion beziehungsweise expliziter externer Bestätigung
+- Produktionscheck für HTTPS, Cookies, Proxy, Hosts/Origins, persistente Pfade, SQLite, Backupziel, FLUX und Coolify-Konfiguration
+- kein Docker-Socket, kein `git pull`, kein `npm install` und keine Selbstüberschreibung im Produktivcontainer
 
 ## Hotfix 1.41.2: native Module zuverlässig in Git
 
@@ -24,16 +44,16 @@ Runtimeordner werden in `.gitignore` ausschließlich am Projektroot ausgeschloss
 - keine Weitergabe des Docker-Sockets an Vendoo
 - genaue Anleitung: `docs/COOLIFY_PRODUCTION_1_41_0.md`
 
-## Kontrollierte Web-Updates
+## Kontrollierte Updates
 
-- geschütztes natives Modul `vendoo.deployments`
-- Coolify-Deploy-Webhook oder minimal berechtigter API-Token
-- Coolify-Zugangsdaten AES-256-GCM-verschlüsselt im Secret Store
-- exakte Administratorbestätigung `DEPLOY`
-- verpflichtendes Vorab-Backup vor dem Deploymentauftrag
-- GitHub-Repository, Produktionsbranch und Update-Kanal im Update Center
-- kein selbstverändernder Container, kein `git pull`, kein Docker-Socket
-- vollständiger Ablauf: `docs/WEB_UPDATE_CENTER_1_41_0.md`
+- Production Updater 3.3 mit SHA-256-geprüftem Payload und bytegeprüfter Manifest-Steuerdatei
+- keine destruktive Leerung der geklonten Git-Baseline
+- Pflichtdateien wie `db/schema.sql` werden vor Tests und Push geprüft
+- Pull Request und vollständige GitHub-Checks auf Windows und Linux
+- Coolify Auto Deploy nach erfolgreichem Merge nach `main`
+- exakte Produktionsbestätigung über `/readyz` und Zielversion
+- kein selbstverändernder Container, kein `git pull` in Produktion, kein Docker-Socket
+- technische Details: `docs/PRODUCTION_UPDATER_3_1.md`
 
 ## GitHub-, Merge- und Releaseprozess
 
@@ -47,10 +67,10 @@ Runtimeordner werden in `.gitignore` ausschließlich am Projektroot ausgeschloss
 
 ## Plattformstand
 
-- 17 registrierte Module
-- 15 native Module
+- 18 registrierte Module
+- 16 native Module, davon Produktbild Studio standardmäßig deaktiviert
 - 2 transparente Legacy Bridges: System und Operations
-- 38 vollständig aufgelöste Capabilities
+- 41 vollständig aufgelöste Capabilities
 - geschützte Kernmodule und kontrollierbare optionale Module
 - `.vmod`-Import/Export, Quarantäne und Abhängigkeitssteuerung
 - Theme-, Security-, Identity-, Catalog-, Media-, Publishing-, AI-, FLUX- und Quality-Module bleiben enthalten
diff --git a/UPDATE_VENDOO.bat b/UPDATE_VENDOO.bat
new file mode 100644
index 0000000..d8d26e4
--- /dev/null
+++ b/UPDATE_VENDOO.bat
@@ -0,0 +1,51 @@
+@echo off
+setlocal EnableExtensions DisableDelayedExpansion
+
+cd /d "%~dp0"
+if errorlevel 1 goto :path_error
+
+set "VENDOO_PS=%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe"
+if not exist "%VENDOO_PS%" goto :powershell_missing
+
+echo Vendoo Production Updater 3.3 preflight...
+"%VENDOO_PS%" -NoLogo -NoProfile -ExecutionPolicy Bypass -File ".\scripts\updater\Vendoo.Updater.Preflight.ps1"
+set "VENDOO_RC=%ERRORLEVEL%"
+if not "%VENDOO_RC%"=="0" goto :preflight_failed
+
+"%VENDOO_PS%" -NoLogo -NoProfile -ExecutionPolicy Bypass -STA -File ".\scripts\update-vendoo-gui.ps1"
+set "VENDOO_RC=%ERRORLEVEL%"
+if not "%VENDOO_RC%"=="0" goto :gui_failed
+
+exit /b 0
+
+:path_error
+echo.
+echo [ERROR] The Vendoo package directory could not be opened.
+echo Path: %~dp0
+echo.
+pause
+exit /b 30
+
+:powershell_missing
+echo.
+echo [ERROR] Windows PowerShell 5.1 was not found.
+echo Expected: %VENDOO_PS%
+echo.
+pause
+exit /b 31
+
+:preflight_failed
+echo.
+echo [ERROR] The Windows PowerShell preflight failed with exit code %VENDOO_RC%.
+echo Log: %CD%\logs\updater-preflight.log
+echo.
+pause
+exit /b %VENDOO_RC%
+
+:gui_failed
+echo.
+echo [ERROR] The updater UI exited with code %VENDOO_RC%.
+echo Log: %CD%\logs\updater-bootstrap.log
+echo.
+pause
+exit /b %VENDOO_RC%
diff --git a/app/contracts/module.schema.json b/app/contracts/module.schema.json
index 737ac22..f042406 100644
--- a/app/contracts/module.schema.json
+++ b/app/contracts/module.schema.json
@@ -4,31 +4,91 @@
   "title": "Vendoo Module Manifest",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schemaVersion", "id", "name", "version", "type", "status", "requires", "permissions", "provides", "consumes", "owns"],
+  "required": [
+    "schemaVersion",
+    "id",
+    "name",
+    "version",
+    "type",
+    "status",
+    "requires",
+    "permissions",
+    "provides",
+    "consumes",
+    "owns"
+  ],
   "properties": {
-    "schemaVersion": { "const": 1 },
-    "id": { "type": "string", "pattern": "^vendoo\\.[a-z][a-z0-9-]*$" },
-    "name": { "type": "string", "minLength": 1, "maxLength": 80 },
-    "version": { "type": "string", "pattern": "^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$" },
-    "type": { "enum": ["core", "feature", "adapter", "extension-host"] },
-    "status": { "enum": ["native", "legacy-bridge", "disabled"] },
-    "description": { "type": "string", "maxLength": 500 },
-    "requires": { "$ref": "#/$defs/moduleIds" },
-    "permissions": { "$ref": "#/$defs/capabilities" },
-    "provides": { "$ref": "#/$defs/capabilities" },
-    "consumes": { "$ref": "#/$defs/capabilities" },
-    "owns": { "$ref": "#/$defs/capabilities" }
+    "schemaVersion": {
+      "const": 1
+    },
+    "id": {
+      "type": "string",
+      "pattern": "^vendoo\\.[a-z][a-z0-9-]*$"
+    },
+    "name": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 80
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$"
+    },
+    "type": {
+      "enum": [
+        "core",
+        "feature",
+        "adapter",
+        "extension-host"
+      ]
+    },
+    "status": {
+      "enum": [
+        "native",
+        "legacy-bridge",
+        "disabled"
+      ]
+    },
+    "defaultEnabled": {
+      "type": "boolean",
+      "default": true
+    },
+    "description": {
+      "type": "string",
+      "maxLength": 500
+    },
+    "requires": {
+      "$ref": "#/$defs/moduleIds"
+    },
+    "permissions": {
+      "$ref": "#/$defs/capabilities"
+    },
+    "provides": {
+      "$ref": "#/$defs/capabilities"
+    },
+    "consumes": {
+      "$ref": "#/$defs/capabilities"
+    },
+    "owns": {
+      "$ref": "#/$defs/capabilities"
+    }
   },
   "$defs": {
     "moduleIds": {
       "type": "array",
       "uniqueItems": true,
-      "items": { "type": "string", "pattern": "^vendoo\\.[a-z][a-z0-9-]*$" }
+      "items": {
+        "type": "string",
+        "pattern": "^vendoo\\.[a-z][a-z0-9-]*$"
+      }
     },
     "capabilities": {
       "type": "array",
       "uniqueItems": true,
-      "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*(?:\\.[a-z][a-z0-9-]*)+$" }
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9-]*(?:\\.[a-z][a-z0-9-]*)+$"
+      }
     }
   }
 }
diff --git a/app/core/identity/identity-store.mjs b/app/core/identity/identity-store.mjs
index f8a04ab..bddc19b 100644
--- a/app/core/identity/identity-store.mjs
+++ b/app/core/identity/identity-store.mjs
@@ -296,6 +296,38 @@ export function validateAuthToken(token) {
   return row;
 }
 
+
+export function listInvitations(limit = 100) {
+  const safeLimit = Math.max(1, Math.min(500, Number(limit) || 100));
+  return db.prepare(`SELECT id, email, role, used, expires_at, created_by, created_at,
+    CASE
+      WHEN used = 1 THEN 'revoked_or_used'
+      WHEN expires_at <= datetime('now') THEN 'expired'
+      ELSE 'pending'
+    END AS status
+    FROM auth_tokens
+    WHERE type = 'invite'
+    ORDER BY created_at DESC
+    LIMIT ?`).all(safeLimit);
+}
+
+export function getInvitation(id) {
+  return db.prepare(`SELECT id, email, role, used, expires_at, created_by, created_at,
+    CASE
+      WHEN used = 1 THEN 'revoked_or_used'
+      WHEN expires_at <= datetime('now') THEN 'expired'
+      ELSE 'pending'
+    END AS status
+    FROM auth_tokens WHERE id = ? AND type = 'invite'`).get(Number(id));
+}
+
+export function revokeInvitation(id) {
+  const invitation = getInvitation(id);
+  if (!invitation) return null;
+  if (invitation.status === 'pending') db.prepare('UPDATE auth_tokens SET used = 1 WHERE id = ? AND type = ?').run(Number(id), 'invite');
+  return { ...invitation, status: invitation.status === 'pending' ? 'revoked' : invitation.status, used: 1 };
+}
+
 // --- Rate Limiting ---
 const rateLimits = new Map();
 
diff --git a/app/core/modules/module-package-contract.mjs b/app/core/modules/module-package-contract.mjs
index e642461..0010057 100644
--- a/app/core/modules/module-package-contract.mjs
+++ b/app/core/modules/module-package-contract.mjs
@@ -163,7 +163,11 @@ export function buildModulePackage({ manifest, runtime = { mode: 'builtin-refere
     const buffer = Buffer.isBuffer(file.content) ? file.content : Buffer.from(String(file.content || ''), 'utf8');
     return { path, sha256: sha256(buffer), size: buffer.length, content: buffer.toString('base64') };
   });
-  const draft = { format: MODULE_PACKAGE_FORMAT, schemaVersion: MODULE_PACKAGE_SCHEMA, manifest, runtime, files: normalizedFiles, createdAt, integrity: { algorithm: 'sha256', digest: '' }, signature: null };
+  // Der Digest muss auf demselben normalisierten Manifest basieren wie die spätere
+  // Validierung. Sonst würden additive Manifest-Defaults (z. B. defaultEnabled)
+  // den Digest nachträglich verändern.
+  const normalizedManifest = validateModuleManifest(manifest);
+  const draft = { format: MODULE_PACKAGE_FORMAT, schemaVersion: MODULE_PACKAGE_SCHEMA, manifest: normalizedManifest, runtime, files: normalizedFiles, createdAt, integrity: { algorithm: 'sha256', digest: '' }, signature: null };
   draft.integrity.digest = calculatePackageDigest(draft);
   return validateModulePackage(draft, { allowBuiltinReference: true });
 }
diff --git a/app/kernel/module-contract.mjs b/app/kernel/module-contract.mjs
index 1b25b7f..5e56483 100644
--- a/app/kernel/module-contract.mjs
+++ b/app/kernel/module-contract.mjs
@@ -29,6 +29,7 @@ export function validateModuleManifest(manifest) {
     version: String(manifest.version || '').trim(),
     type: String(manifest.type || '').trim(),
     status: String(manifest.status || 'native').trim(),
+    defaultEnabled: manifest.defaultEnabled !== false,
     description: String(manifest.description || '').trim(),
     requires: Object.freeze(uniqueStrings(manifest.requires || [], 'requires', MODULE_ID)),
     permissions: Object.freeze(uniqueStrings(manifest.permissions || [], 'permissions')),
diff --git a/app/kernel/platform-kernel.mjs b/app/kernel/platform-kernel.mjs
index b9ab23e..e06b9ae 100644
--- a/app/kernel/platform-kernel.mjs
+++ b/app/kernel/platform-kernel.mjs
@@ -84,6 +84,7 @@ export function createPlatformKernel({ version, hasPermission, moduleTrustKeys =
   features.define('modules.package-format', { defaultValue: true, owner: 'vendoo.module-manager', description: 'Aktiviert validierte .vmod-Pakete mit SHA-256-Integrität und optionaler Ed25519-Signatur.' });
   features.define('publishing.native-module', { defaultValue: true, owner: 'vendoo.publishing', description: 'Aktiviert native Publishing-Verträge.' });
   features.define('ai.native-module', { defaultValue: true, owner: 'vendoo.ai', description: 'Aktiviert native AI-Verträge.' });
+  features.define('product-images.optional-module', { defaultValue: false, owner: 'vendoo.product-image-tools', description: 'Aktiviert optionale Ghost-Mannequin- und Flatlay-Produktbildvarianten.' });
   features.define('flux.native-module', { defaultValue: true, owner: 'vendoo.flux-studio', description: 'Aktiviert native FLUX-Verträge.' });
   features.define('quality.native-module', { defaultValue: true, owner: 'vendoo.quality', description: 'Aktiviert native Quality-Verträge.' });
   features.define('deployments.coolify', { defaultValue: true, owner: 'vendoo.deployments', description: 'Aktiviert kontrollierte Coolify-Deployments ohne Docker-Socket.' });
@@ -93,7 +94,7 @@ export function createPlatformKernel({ version, hasPermission, moduleTrustKeys =
     .split(',').map(value => value.trim()).filter(Boolean));
   for (const module of loadBuiltInModules()) {
     const forcedEnabled = PROTECTED_MODULE_IDS.includes(module.manifest.id);
-    const defaultEnabled = module.manifest.status !== 'disabled' && !initialDisabledModules.has(module.manifest.id);
+    const defaultEnabled = module.manifest.status !== 'disabled' && module.manifest.defaultEnabled !== false && !initialDisabledModules.has(module.manifest.id);
     const enabled = forcedEnabled || moduleStateStore.isEnabled(module.manifest.id, defaultEnabled);
     modules.register(module, { enabled });
   }
diff --git a/app/modules/catalog.mjs b/app/modules/catalog.mjs
index dabe14f..3e48168 100644
--- a/app/modules/catalog.mjs
+++ b/app/modules/catalog.mjs
@@ -13,6 +13,7 @@ import { createUsersModule } from './users/index.mjs';
 import { createModuleManagerModule } from './module-manager/index.mjs';
 import { createAiModule } from './ai/index.mjs';
 import { createFluxStudioModule } from './flux-studio/index.mjs';
+import { createProductImageToolsModule } from './product-image-tools/index.mjs';
 import { createQualityModule } from './quality/index.mjs';
 import { createPublishingModule } from './publishing/index.mjs';
 import { createDeploymentsModule } from './deployments/index.mjs';
@@ -33,6 +34,6 @@ export function loadBuiltInModules() {
   return [
     ...legacyModuleNames.map(legacyModule),
     createSecurityModule(), createAuthModule(), createSessionsModule(), createUsersModule(), createSettingsModule(), createThemesModule(),
-    createMediaModule(), createListingsModule(), createInventoryModule(), createAiModule(), createFluxStudioModule(), createQualityModule(), createPublishingModule(), createModuleManagerModule(), createDeploymentsModule(),
+    createMediaModule(), createListingsModule(), createInventoryModule(), createAiModule(), createProductImageToolsModule(), createFluxStudioModule(), createQualityModule(), createPublishingModule(), createModuleManagerModule(), createDeploymentsModule(),
   ];
 }
diff --git a/app/modules/deployments/index.mjs b/app/modules/deployments/index.mjs
index d35ca02..ce0169a 100644
--- a/app/modules/deployments/index.mjs
+++ b/app/modules/deployments/index.mjs
@@ -21,7 +21,7 @@ export function createDeploymentsModule() {
     manifest,
     lifecycle: {
       async start() { service = createDeploymentService(adapters); },
-      async stop() { service = null; },
+      async stop() { service?.stop?.(); service = null; },
       async health() { return getDeploymentService().health(); },
     },
   };
diff --git a/app/modules/deployments/module.json b/app/modules/deployments/module.json
index dc335c1..8d37d7d 100644
--- a/app/modules/deployments/module.json
+++ b/app/modules/deployments/module.json
@@ -2,10 +2,10 @@
   "schemaVersion": 1,
   "id": "vendoo.deployments",
   "name": "Deployments & Updates",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "type": "core",
   "status": "native",
-  "description": "Kontrollierte Coolify-Deployments, verschlüsselte Deployment-Zugangsdaten und sichere Web-Updates ohne Docker-Socket.",
+  "description": "Persistente, kontrollierte Coolify-Deployments mit Vorab-Backup, Idempotenz, Statusverfolgung, Readiness-, Zielversions- und Produktionschecks ohne Docker-Socket.",
   "requires": [
     "vendoo.security",
     "vendoo.settings",
@@ -18,6 +18,8 @@
   "provides": [
     "deployments.control",
     "deployments.coolify",
+    "deployments.production-checks",
+    "deployments.state-machine",
     "updates.web"
   ],
   "consumes": [
@@ -28,7 +30,9 @@
   ],
   "owns": [
     "deployments.configuration",
+    "deployments.events",
     "deployments.history",
+    "deployments.production-checks",
     "updates.coolify"
   ]
 }
diff --git a/app/modules/deployments/repository.mjs b/app/modules/deployments/repository.mjs
new file mode 100644
index 0000000..43ae25a
--- /dev/null
+++ b/app/modules/deployments/repository.mjs
@@ -0,0 +1,192 @@
+import { randomUUID } from 'node:crypto';
+import { db } from '../../../lib/db.mjs';
+import { PlatformError } from '../../kernel/errors.mjs';
+
+import {
+  ACTIVE_DEPLOYMENT_STATES,
+  DEPLOYMENT_STATES,
+  canTransitionDeployment,
+  isActiveDeploymentState,
+} from './state-machine.mjs';
+
+function parseJson(value, fallback) {
+  try { return value ? JSON.parse(value) : fallback; } catch { return fallback; }
+}
+
+function serializeJson(value, fallback) {
+  try { return JSON.stringify(value ?? fallback); } catch { return JSON.stringify(fallback); }
+}
+
+function normalizeRun(row) {
+  if (!row) return null;
+  return {
+    ...row,
+    request: parseJson(row.request_json, {}),
+    result: parseJson(row.result_json, {}),
+    active: isActiveDeploymentState(row.state),
+  };
+}
+
+function fail(message, code = 'DEPLOYMENT_STATE_INVALID', status = 409, details = null) {
+  throw new PlatformError(message, { code, status, expose: true, details });
+}
+
+export function createDeploymentRepository(database = db) {
+  const insertRun = database.prepare(`INSERT INTO deployment_runs (
+    id, idempotency_key, state, provider, trigger_mode, current_version, target_version,
+    build_revision_before, requested_by, reason, github_repository, github_branch,
+    request_json, timeout_at, started_at, updated_at
+  ) VALUES (?, ?, 'checking', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'), datetime('now'))`);
+
+  const insertEvent = database.prepare(`INSERT INTO deployment_events
+    (run_id, state, event_type, message, details_json)
+    VALUES (?, ?, ?, ?, ?)`);
+
+  const getRunStmt = database.prepare('SELECT * FROM deployment_runs WHERE id = ?');
+  const getIdempotentStmt = database.prepare('SELECT * FROM deployment_runs WHERE idempotency_key = ?');
+  const getActiveStmt = database.prepare(`SELECT * FROM deployment_runs
+    WHERE state IN (${ACTIVE_DEPLOYMENT_STATES.map(() => '?').join(',')})
+    ORDER BY created_at DESC LIMIT 1`);
+
+  function addEvent(runId, state, eventType, message, details = {}) {
+    insertEvent.run(runId, state, String(eventType || 'state').slice(0, 80), String(message || '').slice(0, 1000), serializeJson(details, {}));
+  }
+
+  function createRun(input) {
+    const id = input.id || randomUUID();
+    const existing = getIdempotentStmt.get(input.idempotencyKey);
+    if (existing) return { run: normalizeRun(existing), reused: true };
+    const active = getActiveStmt.get(...ACTIVE_DEPLOYMENT_STATES);
+    if (active) fail('Es läuft bereits ein Deployment oder es ist ein Rollback erforderlich.', 'DEPLOYMENT_ALREADY_ACTIVE', 409, { run_id: active.id, state: active.state });
+
+    try {
+      insertRun.run(
+        id,
+        input.idempotencyKey,
+        input.provider || 'coolify',
+        input.triggerMode || 'webhook',
+        input.currentVersion,
+        input.targetVersion,
+        input.buildRevisionBefore || null,
+        input.requestedBy || null,
+        input.reason || 'manual',
+        input.githubRepository || null,
+        input.githubBranch || null,
+        serializeJson(input.request || {}, {}),
+        input.timeoutAt || null,
+      );
+    } catch (error) {
+      if (String(error?.message || '').includes('UNIQUE')) {
+        const raced = getIdempotentStmt.get(input.idempotencyKey);
+        if (raced) return { run: normalizeRun(raced), reused: true };
+      }
+      throw error;
+    }
+    addEvent(id, 'checking', 'run.created', 'Deployment-Auftrag wurde angelegt.', {
+      target_version: input.targetVersion,
+      trigger_mode: input.triggerMode,
+    });
+    return { run: normalizeRun(getRunStmt.get(id)), reused: false };
+  }
+
+  function getRun(id) { return normalizeRun(getRunStmt.get(id)); }
+  function findByIdempotencyKey(key) { return normalizeRun(getIdempotentStmt.get(key)); }
+  function getActiveRun() { return normalizeRun(getActiveStmt.get(...ACTIVE_DEPLOYMENT_STATES)); }
+
+  function listRuns(limit = 25) {
+    const safeLimit = Math.max(1, Math.min(200, Number(limit) || 25));
+    return database.prepare('SELECT * FROM deployment_runs ORDER BY created_at DESC LIMIT ?').all(safeLimit).map(normalizeRun);
+  }
+
+  function listEvents(runId, limit = 200) {
+    const safeLimit = Math.max(1, Math.min(1000, Number(limit) || 200));
+    return database.prepare(`SELECT * FROM deployment_events WHERE run_id = ? ORDER BY id ASC LIMIT ?`).all(runId, safeLimit)
+      .map(row => ({ ...row, details: parseJson(row.details_json, {}) }));
+  }
+
+  function transition(runId, nextState, { message = '', eventType = 'state.changed', details = {}, patch = {} } = {}) {
+    if (!DEPLOYMENT_STATES.includes(nextState)) fail('Unbekannter Deployment-Zustand.', 'DEPLOYMENT_STATE_UNKNOWN', 500, { next_state: nextState });
+    const current = getRunStmt.get(runId);
+    if (!current) fail('Deployment-Auftrag wurde nicht gefunden.', 'DEPLOYMENT_RUN_NOT_FOUND', 404);
+    if (current.state === nextState) return normalizeRun(current);
+    if (!canTransitionDeployment(current.state, nextState)) {
+      fail(`Ungültiger Deployment-Übergang von ${current.state} nach ${nextState}.`, 'DEPLOYMENT_TRANSITION_BLOCKED', 409, {
+        run_id: runId, from: current.state, to: nextState,
+      });
+    }
+
+    const completed = ['succeeded', 'failed'].includes(nextState);
+    const columns = ['state = ?', "updated_at = datetime('now')"];
+    const values = [nextState];
+    const allowedPatch = new Set([
+      'deployment_id', 'backup_id', 'result_json', 'error_code', 'error_message',
+      'build_revision_after', 'timeout_at',
+    ]);
+    for (const [key, value] of Object.entries(patch || {})) {
+      if (!allowedPatch.has(key)) continue;
+      columns.push(`${key} = ?`);
+      values.push(key.endsWith('_json') ? serializeJson(value, {}) : value);
+    }
+    if (completed) columns.push("completed_at = datetime('now')");
+    values.push(runId);
+    database.prepare(`UPDATE deployment_runs SET ${columns.join(', ')} WHERE id = ?`).run(...values);
+    addEvent(runId, nextState, eventType, message || `Zustand: ${nextState}`, details);
+    return normalizeRun(getRunStmt.get(runId));
+  }
+
+  function patchRun(runId, patch = {}, { eventType = null, message = '', details = {} } = {}) {
+    const current = getRunStmt.get(runId);
+    if (!current) fail('Deployment-Auftrag wurde nicht gefunden.', 'DEPLOYMENT_RUN_NOT_FOUND', 404);
+    const allowedPatch = new Set([
+      'deployment_id', 'backup_id', 'result_json', 'error_code', 'error_message',
+      'build_revision_after', 'timeout_at',
+    ]);
+    const columns = ["updated_at = datetime('now')"];
+    const values = [];
+    for (const [key, value] of Object.entries(patch || {})) {
+      if (!allowedPatch.has(key)) continue;
+      columns.push(`${key} = ?`);
+      values.push(key.endsWith('_json') ? serializeJson(value, {}) : value);
+    }
+    values.push(runId);
+    database.prepare(`UPDATE deployment_runs SET ${columns.join(', ')} WHERE id = ?`).run(...values);
+    if (eventType) addEvent(runId, current.state, eventType, message || eventType, details);
+    return normalizeRun(getRunStmt.get(runId));
+  }
+
+  function recordBackupVerification({ backupId, runId = null, status, sha256 = null, fileSize = 0, sqliteIntegrity = null, manifest = {}, errors = [], warnings = [] }) {
+    const id = randomUUID();
+    database.prepare(`INSERT INTO backup_verifications
+      (id, backup_id, deployment_run_id, status, sha256, file_size, sqlite_integrity, manifest_json, errors_json, warnings_json, verified_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`).run(
+        id, backupId, runId, status, sha256, Number(fileSize) || 0, sqliteIntegrity,
+        serializeJson(manifest, {}), serializeJson(errors, []), serializeJson(warnings, []),
+      );
+    return database.prepare('SELECT * FROM backup_verifications WHERE id = ?').get(id);
+  }
+
+  function createProductionCheck({ createdBy = null, results = [] } = {}) {
+    const id = randomUUID();
+    const passed = results.filter(item => item.status === 'pass').length;
+    const warnings = results.filter(item => item.status === 'warning').length;
+    const failed = results.filter(item => item.status === 'fail').length;
+    const overall = failed ? 'failed' : (warnings ? 'warning' : 'passed');
+    database.prepare(`INSERT INTO production_checks
+      (id, overall_status, passed_count, warning_count, failed_count, results_json, created_by)
+      VALUES (?, ?, ?, ?, ?, ?, ?)`).run(id, overall, passed, warnings, failed, serializeJson(results, []), createdBy);
+    return { id, overall_status: overall, passed_count: passed, warning_count: warnings, failed_count: failed, results };
+  }
+
+  function latestProductionCheck() {
+    const row = database.prepare('SELECT * FROM production_checks ORDER BY created_at DESC LIMIT 1').get();
+    return row ? { ...row, results: parseJson(row.results_json, []) } : null;
+  }
+
+  return Object.freeze({
+    createRun, getRun, findByIdempotencyKey, getActiveRun, listRuns, listEvents,
+    transition, patchRun, addEvent, recordBackupVerification,
+    createProductionCheck, latestProductionCheck,
+  });
+}
+
+export const deploymentRepository = createDeploymentRepository();
diff --git a/app/modules/deployments/routes.mjs b/app/modules/deployments/routes.mjs
index 43c66ab..bd9f9e0 100644
--- a/app/modules/deployments/routes.mjs
+++ b/app/modules/deployments/routes.mjs
@@ -1,4 +1,5 @@
 import { objectSchema } from '../../kernel/input-schema.mjs';
+import { PlatformError } from '../../kernel/errors.mjs';
 import { getDeploymentService } from './index.mjs';
 
 const settingsSchema = objectSchema({
@@ -8,6 +9,9 @@ const settingsSchema = objectSchema({
   trigger_mode: { type: 'string', enum: ['webhook', 'api'] },
   deploy_method: { type: 'string', enum: ['GET', 'POST'] },
   deploy_endpoint: { type: 'string', maxLength: 500 },
+  deployment_status_endpoint: { type: 'string', maxLength: 500 },
+  deployment_timeout_seconds: { type: 'number', integer: true, min: 60, max: 7200 },
+  health_poll_seconds: { type: 'number', integer: true, min: 5, max: 300 },
   github_repository: { type: 'string', maxLength: 200 },
   github_branch: { type: 'string', maxLength: 120 },
   ghcr_image: { type: 'string', maxLength: 300 },
@@ -17,15 +21,33 @@ const settingsSchema = objectSchema({
   api_token: { type: 'string', maxLength: 16384, trim: false },
   deploy_webhook_url: { type: 'string', maxLength: 2000, trim: false },
 });
+
 const triggerSchema = objectSchema({
-  force: { type: 'boolean' }, confirmation: { type: 'string', required: true, maxLength: 20 }, reason: { type: 'string', maxLength: 120 },
+  force: { type: 'boolean' },
+  confirmation: { type: 'string', required: true, maxLength: 20 },
+  reason: { type: 'string', maxLength: 120 },
+  idempotency_key: { type: 'string', maxLength: 160 },
+  target_version: { type: 'string', maxLength: 40 },
 });
 
+const confirmSchema = objectSchema({
+  confirmation: { type: 'string', required: true, maxLength: 20 },
+  outcome: { type: 'string', required: true, enum: ['running', 'succeeded', 'failed'] },
+  message: { type: 'string', maxLength: 500 },
+});
+
+function requireRun(run) {
+  if (!run) throw new PlatformError('Deployment-Auftrag wurde nicht gefunden.', {
+    code: 'DEPLOYMENT_RUN_NOT_FOUND', status: 404, expose: true,
+  });
+  return run;
+}
+
 export function registerDeploymentRoutes({ app, routes, deps }) {
   routes.register(app, {
     id: 'deployments.status.read', method: 'GET', path: '/api/admin/deployment', owner: 'vendoo.deployments',
     policy: 'updates.manage', audit: 'deployments.status.read', rateLimit: 'administration', csrf: false, stability: 'stable',
-    handler: async (_req, res) => res.json(getDeploymentService().status()),
+    handler: async (_req, res) => res.json(await getDeploymentService().status()),
   });
   routes.register(app, {
     id: 'deployments.settings.update', method: 'PUT', path: '/api/admin/deployment', owner: 'vendoo.deployments',
@@ -48,15 +70,63 @@ export function registerDeploymentRoutes({ app, routes, deps }) {
   routes.register(app, {
     id: 'deployments.updates.check', method: 'POST', path: '/api/admin/deployment/updates/check', owner: 'vendoo.deployments',
     policy: 'updates.manage', audit: 'deployments.updates.checked', rateLimit: 'administration', csrf: true, stability: 'stable',
-    handler: async (_req, res) => res.json(await getDeploymentService().checkUpdates()),
+    handler: async (req, res) => {
+      const result = await getDeploymentService().checkUpdates();
+      deps.auditLog(req.user.id, req.user.email, 'deployment.updates.checked', 'deployment', 'manifest', JSON.stringify({ update_available: result.update_available || false }), deps.getClientIp(req));
+      res.json(result);
+    },
   });
   routes.register(app, {
     id: 'deployments.trigger', method: 'POST', path: '/api/admin/deployment/trigger', owner: 'vendoo.deployments',
     policy: 'updates.manage', audit: 'deployments.triggered', rateLimit: 'administration', csrf: true, stability: 'stable', input: triggerSchema,
     handler: async (req, res) => {
-      const result = await getDeploymentService().trigger(req.validatedBody || {});
-      deps.auditLog(req.user.id, req.user.email, 'deployment.triggered', 'deployment', 'coolify', JSON.stringify({ backup_id: result.backup_id, branch: result.github_branch }), deps.getClientIp(req));
-      res.status(202).json(result);
+      const idempotencyKey = req.get('Idempotency-Key') || req.validatedBody?.idempotency_key || '';
+      const result = await getDeploymentService().trigger(req.validatedBody || {}, { userId: req.user.id, idempotencyKey });
+      deps.auditLog(req.user.id, req.user.email, 'deployment.triggered', 'deployment', result.id, JSON.stringify({ backup_id: result.backup_id, branch: result.github_branch, target_version: result.target_version, reused: result.reused }), deps.getClientIp(req));
+      res.status(result.reused ? 200 : 202).json(result);
     },
   });
+  routes.register(app, {
+    id: 'deployments.runs.list', method: 'GET', path: '/api/admin/deployment/runs', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.runs.read', rateLimit: 'administration', csrf: false, stability: 'stable',
+    handler: async (req, res) => res.json({ runs: getDeploymentService().listRuns(Number(req.query.limit) || 20) }),
+  });
+  routes.register(app, {
+    id: 'deployments.runs.read', method: 'GET', path: '/api/admin/deployment/runs/:id', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.run.read', rateLimit: 'administration', csrf: false, stability: 'stable',
+    handler: async (req, res) => res.json(requireRun(getDeploymentService().getRun(req.params.id))),
+  });
+  routes.register(app, {
+    id: 'deployments.runs.refresh', method: 'POST', path: '/api/admin/deployment/runs/:id/refresh', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.run.refreshed', rateLimit: 'administration', csrf: true, stability: 'stable',
+    handler: async (req, res) => {
+      requireRun(getDeploymentService().getRun(req.params.id));
+      const result = await getDeploymentService().refreshRun(req.params.id);
+      deps.auditLog(req.user.id, req.user.email, 'deployment.run.refreshed', 'deployment', req.params.id, JSON.stringify({ state: result.state }), deps.getClientIp(req));
+      res.json(result);
+    },
+  });
+  routes.register(app, {
+    id: 'deployments.runs.confirm', method: 'POST', path: '/api/admin/deployment/runs/:id/confirm', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.run.confirmed', rateLimit: 'administration', csrf: true, stability: 'stable', input: confirmSchema,
+    handler: async (req, res) => {
+      const result = await getDeploymentService().confirmExternal(req.params.id, req.validatedBody || {});
+      deps.auditLog(req.user.id, req.user.email, 'deployment.run.confirmed', 'deployment', req.params.id, JSON.stringify({ outcome: req.validatedBody?.outcome, state: result.state }), deps.getClientIp(req));
+      res.json(result);
+    },
+  });
+  routes.register(app, {
+    id: 'deployments.production.check.run', method: 'POST', path: '/api/admin/deployment/production-check', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.production.checked', rateLimit: 'administration', csrf: true, stability: 'stable',
+    handler: async (req, res) => {
+      const result = await getDeploymentService().runProductionCheck({ userId: req.user.id });
+      deps.auditLog(req.user.id, req.user.email, 'deployment.production.checked', 'deployment', result.id, JSON.stringify({ overall_status: result.overall_status, failed_count: result.failed_count }), deps.getClientIp(req));
+      res.json(result);
+    },
+  });
+  routes.register(app, {
+    id: 'deployments.production.check.read', method: 'GET', path: '/api/admin/deployment/production-check', owner: 'vendoo.deployments',
+    policy: 'updates.manage', audit: 'deployments.production.check.read', rateLimit: 'administration', csrf: false, stability: 'stable',
+    handler: async (_req, res) => res.json({ check: getDeploymentService().latestProductionCheck() }),
+  });
 }
diff --git a/app/modules/deployments/service.mjs b/app/modules/deployments/service.mjs
index 3c58439..9aff937 100644
--- a/app/modules/deployments/service.mjs
+++ b/app/modules/deployments/service.mjs
@@ -1,15 +1,24 @@
-import { mkdirSync, existsSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { readRuntimeConfig, setConfigValue, writeRuntimeConfig } from '../../../lib/config-store.mjs';
-import { getSecret, getSecretMetadata, hasSecret, setSecret } from '../../../lib/secret-store.mjs';
-import { OPERATIONS_DIR, APP_VERSION } from '../../../lib/runtime-paths.mjs';
+import { getSecret, getSecretMetadata, setSecret } from '../../../lib/secret-store.mjs';
+import {
+  APP_ROOT, APP_VERSION, BACKUP_DIR, DATA_ROOT, DB_PATH, LOG_DIR,
+  MODULES_DIR, MODULE_STATE_PATH, OPERATIONS_DIR, UPLOADS_DIR,
+  runtimePathSummary, verifyRuntimeWritable,
+} from '../../../lib/runtime-paths.mjs';
+import { db } from '../../../lib/db.mjs';
 import { PlatformError } from '../../kernel/errors.mjs';
+import { deploymentRepository } from './repository.mjs';
 
-const LAST_DEPLOYMENT_PATH = join(OPERATIONS_DIR, 'last-deployment-request.json');
 const PROVIDERS = new Set(['none', 'coolify']);
 const MODES = new Set(['webhook', 'api']);
 const CHANNELS = new Set(['stable', 'beta']);
 const METHODS = new Set(['GET', 'POST']);
+const TERMINAL_COOLIFY_SUCCESS = new Set(['finished', 'success', 'succeeded', 'completed', 'healthy']);
+const TERMINAL_COOLIFY_FAILURE = new Set(['failed', 'error', 'cancelled', 'canceled', 'stopped']);
+const MASKED_SECRET = '••••••••';
 
 function fail(message, code = 'DEPLOYMENT_CONFIGURATION_INVALID', status = 400, details = null) {
   throw new PlatformError(message, { code, status, expose: true, details });
@@ -28,6 +37,12 @@ function cleanUuid(value) {
   return text;
 }
 
+function cleanIdempotencyKey(value) {
+  const text = clean(value || randomUUID(), 160);
+  if (!/^[a-zA-Z0-9._:-]{8,160}$/.test(text)) fail('Idempotency-Key besitzt ein ungültiges Format.', 'IDEMPOTENCY_KEY_INVALID');
+  return text;
+}
+
 function normalizeBaseUrl(value) {
   const text = clean(value, 1000).replace(/\/$/, '');
   if (!text) return '';
@@ -54,16 +69,28 @@ function normalizeWebhookUrl(value) {
   return url.toString();
 }
 
-function readLastDeployment() {
-  try { return existsSync(LAST_DEPLOYMENT_PATH) ? JSON.parse(readFileSync(LAST_DEPLOYMENT_PATH, 'utf8')) : null; }
-  catch { return null; }
+function normalizeEndpoint(value, fallback, placeholders = []) {
+  const text = clean(value || fallback, 500);
+  if (!text.startsWith('/') || text.startsWith('//') || text.includes('..')) fail('Coolify API-Endpunkt muss ein sicherer relativer Pfad sein.');
+  if (/\r|\n|\0/.test(text)) fail('Coolify API-Endpunkt ist ungültig.');
+  const unknown = [...text.matchAll(/\{([^}]+)\}/g)].map(match => match[1]).filter(name => !placeholders.includes(name));
+  if (unknown.length) fail(`Unbekannter Platzhalter im Coolify-Endpunkt: ${unknown.join(', ')}`);
+  return text;
 }
 
-function writeLastDeployment(value) {
-  mkdirSync(dirname(LAST_DEPLOYMENT_PATH), { recursive: true });
-  const temporary = `${LAST_DEPLOYMENT_PATH}.${process.pid}.tmp`;
-  writeFileSync(temporary, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
-  renameSync(temporary, LAST_DEPLOYMENT_PATH);
+function boolEnv(name, fallback = false) {
+  const raw = process.env[name];
+  if (raw === undefined || raw === '') return fallback;
+  return /^(1|true|yes|on)$/i.test(String(raw));
+}
+
+function intEnv(name, fallback, min, max) {
+  const value = Number(process.env[name]);
+  return Number.isFinite(value) ? Math.max(min, Math.min(max, Math.trunc(value))) : fallback;
+}
+
+function buildRevision() {
+  return clean(process.env.VENDOO_BUILD_REVISION || process.env.GIT_COMMIT || process.env.SOURCE_COMMIT || '', 160) || null;
 }
 
 function currentSettings() {
@@ -78,88 +105,288 @@ function currentSettings() {
     trigger_mode: mode,
     deploy_method: method,
     deploy_endpoint: String(process.env.COOLIFY_DEPLOY_ENDPOINT || '/api/v1/deploy?uuid={uuid}&force={force}'),
+    deployment_status_endpoint: String(process.env.COOLIFY_DEPLOYMENT_STATUS_ENDPOINT || '/api/v1/deployments/{deployment_id}'),
     github_repository: String(process.env.VENDOO_GITHUB_REPOSITORY || 'Masterluke77/vendoo'),
     github_branch: String(process.env.VENDOO_GITHUB_BRANCH || 'main'),
     ghcr_image: String(process.env.VENDOO_GHCR_IMAGE || 'ghcr.io/masterluke77/vendoo'),
     update_channel: channel,
     backup_before_deploy: !/^(0|false|no)$/i.test(String(process.env.VENDOO_BACKUP_BEFORE_DEPLOY || 'true')),
-    backup_uploads: /^(1|true|yes)$/i.test(String(process.env.VENDOO_DEPLOY_BACKUP_UPLOADS || 'false')),
+    backup_uploads: boolEnv('VENDOO_DEPLOY_BACKUP_UPLOADS', false),
+    deployment_timeout_seconds: intEnv('VENDOO_DEPLOY_TIMEOUT_SECONDS', 900, 60, 7200),
+    health_poll_seconds: intEnv('VENDOO_DEPLOY_HEALTH_POLL_SECONDS', 15, 5, 300),
     api_token: getSecretMetadata('COOLIFY_API_TOKEN'),
     deploy_webhook: getSecretMetadata('COOLIFY_DEPLOY_WEBHOOK_URL'),
   };
 }
 
-function publicSettings() {
-  const settings = currentSettings();
-  const configured = settings.provider === 'coolify' && (
+function configuredState(settings) {
+  return settings.provider === 'coolify' && (
     (settings.trigger_mode === 'webhook' && settings.deploy_webhook.configured) ||
     (settings.trigger_mode === 'api' && settings.coolify_url && settings.resource_uuid && settings.api_token.configured)
   );
+}
+
+function publicSettings(repository = deploymentRepository) {
+  const settings = currentSettings();
   return {
     ...settings,
-    configured,
+    configured: configuredState(settings),
     api_token: { configured: settings.api_token.configured, masked: settings.api_token.masked, provider: settings.api_token.provider },
     deploy_webhook: { configured: settings.deploy_webhook.configured, masked: settings.deploy_webhook.masked, provider: settings.deploy_webhook.provider },
     current_version: APP_VERSION,
-    last_deployment: readLastDeployment(),
+    build_revision: buildRevision(),
+    active_run: repository.getActiveRun(),
+    recent_runs: repository.listRuns(10).map(run => ({ ...run, events: repository.listEvents(run.id, 50) })),
     docker_socket_access: false,
   };
 }
 
-function buildApiDeployUrl(settings, force) {
-  const endpoint = settings.deploy_endpoint || '/api/v1/deploy?uuid={uuid}&force={force}';
-  if (!endpoint.startsWith('/')) fail('Coolify API-Endpunkt muss mit / beginnen.');
-  if (/\r|\n|\0/.test(endpoint) || endpoint.includes('..')) fail('Coolify API-Endpunkt ist ungültig.');
-  const path = endpoint
-    .replaceAll('{uuid}', encodeURIComponent(settings.resource_uuid))
-    .replaceAll('{force}', force ? 'true' : 'false');
+function buildApiUrl(settings, template, replacements) {
+  let path = template;
+  for (const [name, value] of Object.entries(replacements)) path = path.replaceAll(`{${name}}`, encodeURIComponent(String(value ?? '')));
   return `${settings.coolify_url}${path}`;
 }
 
-async function fetchWithTimeout(url, options = {}, timeoutMs = 15000) {
+function buildApiDeployUrl(settings, force) {
+  const endpoint = normalizeEndpoint(settings.deploy_endpoint, '/api/v1/deploy?uuid={uuid}&force={force}', ['uuid', 'force']);
+  return buildApiUrl(settings, endpoint, { uuid: settings.resource_uuid, force: force ? 'true' : 'false' });
+}
+
+function buildApiStatusUrl(settings, deploymentId) {
+  const endpoint = normalizeEndpoint(settings.deployment_status_endpoint, '/api/v1/deployments/{deployment_id}', ['deployment_id']);
+  return buildApiUrl(settings, endpoint, { deployment_id: deploymentId });
+}
+
+async function fetchWithTimeout(fetchImpl, url, options = {}, timeoutMs = 15000) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), timeoutMs);
-  try { return await fetch(url, { ...options, signal: controller.signal, redirect: 'error' }); }
+  try { return await fetchImpl(url, { ...options, signal: controller.signal, redirect: 'error' }); }
   catch (error) {
-    if (error?.name === 'AbortError') fail('Coolify-Anfrage hat das Zeitlimit überschritten.', 'COOLIFY_TIMEOUT', 504);
-    fail(`Coolify ist nicht erreichbar: ${error.message}`, 'COOLIFY_UNREACHABLE', 502);
+    if (error?.name === 'AbortError') fail('Anfrage hat das Zeitlimit überschritten.', 'REQUEST_TIMEOUT', 504);
+    fail(`Ziel ist nicht erreichbar: ${error.message}`, 'REMOTE_UNREACHABLE', 502);
   } finally { clearTimeout(timeout); }
 }
 
 async function readSafeResponse(response) {
-  const text = (await response.text()).slice(0, 4000);
+  const text = (await response.text()).slice(0, 64 * 1024);
   try { return text ? JSON.parse(text) : null; } catch { return text || null; }
 }
 
-export function createDeploymentService({ createBackup, checkForUpdates } = {}) {
+function redact(value, depth = 0) {
+  if (depth > 8) return '[depth-limit]';
+  if (Array.isArray(value)) return value.slice(0, 100).map(item => redact(item, depth + 1));
+  if (!value || typeof value !== 'object') return typeof value === 'string' ? value.slice(0, 4000) : value;
+  const result = {};
+  for (const [key, item] of Object.entries(value)) {
+    if (/token|secret|password|authorization|webhook|credential|key/i.test(key)) result[key] = '[redacted]';
+    else result[key] = redact(item, depth + 1);
+  }
+  return result;
+}
+
+function extractDeploymentId(value, depth = 0) {
+  if (depth > 6 || value == null) return null;
+  if (Array.isArray(value)) {
+    for (const item of value) { const found = extractDeploymentId(item, depth + 1); if (found) return found; }
+    return null;
+  }
+  if (typeof value !== 'object') return null;
+  for (const key of ['deployment_id', 'deployment_uuid', 'deploymentUuid', 'uuid', 'id']) {
+    const candidate = value[key];
+    if (candidate && /^[a-zA-Z0-9_-]{4,160}$/.test(String(candidate))) return String(candidate);
+  }
+  for (const item of Object.values(value)) { const found = extractDeploymentId(item, depth + 1); if (found) return found; }
+  return null;
+}
+
+function extractRemoteStatus(value) {
+  if (!value || typeof value !== 'object') return '';
+  const candidates = [value.status, value.state, value.deployment_status, value.data?.status, value.data?.state];
+  return String(candidates.find(Boolean) || '').trim().toLowerCase();
+}
+
+function semver(value) {
+  const match = String(value || '').trim().match(/^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/);
+  if (!match) return null;
+  return { raw: String(value).replace(/^v/, ''), major: +match[1], minor: +match[2], patch: +match[3], prerelease: match[4] || '' };
+}
+
+function compareVersions(a, b) {
+  const left = semver(a); const right = semver(b);
+  if (!left || !right) fail('Update-Manifest enthält eine ungültige SemVer-Version.', 'UPDATE_VERSION_INVALID', 502);
+  for (const key of ['major', 'minor', 'patch']) if (left[key] !== right[key]) return left[key] > right[key] ? 1 : -1;
+  if (left.prerelease === right.prerelease) return 0;
+  if (!left.prerelease) return 1;
+  if (!right.prerelease) return -1;
+  return left.prerelease.localeCompare(right.prerelease, undefined, { numeric: true });
+}
+
+function validateUpdateResult(result, channel) {
+  if (!result?.configured) return { ...result, current_version: APP_VERSION, channel };
+  const latest = String(result.latest_version || result.version || result.manifest?.version || '');
+  const parsed = semver(latest);
+  if (!parsed) fail('Update-Manifest enthält keine gültige SemVer-Version.', 'UPDATE_VERSION_INVALID', 502);
+  if (channel === 'stable' && parsed.prerelease) fail('Der Stable-Kanal akzeptiert keine Vorabversion.', 'UPDATE_CHANNEL_MISMATCH', 502);
+  const manifest = result.manifest && typeof result.manifest === 'object' ? result.manifest : {};
+  const manifestChannel = String(manifest.channel || channel).toLowerCase();
+  if (!CHANNELS.has(manifestChannel) || (channel === 'stable' && manifestChannel !== 'stable')) {
+    fail('Update-Manifest gehört nicht zum konfigurierten Update-Kanal.', 'UPDATE_CHANNEL_MISMATCH', 502);
+  }
+  const updateAvailable = compareVersions(latest, APP_VERSION) > 0;
+  const sha256 = String(manifest.sha256 || manifest.package_sha256 || result.sha256 || '').trim().toLowerCase();
+  if (updateAvailable && !/^[a-f0-9]{64}$/.test(sha256)) fail('Update-Manifest enthält keine gültige SHA-256-Prüfsumme.', 'UPDATE_CHECKSUM_MISSING', 502);
+  const downloadUrl = String(manifest.download_url || manifest.package_url || result.download_url || '').trim();
+  if (downloadUrl) {
+    let url;
+    try { url = new URL(downloadUrl); } catch { fail('Update-Manifest enthält eine ungültige Paket-URL.', 'UPDATE_URL_INVALID', 502); }
+    if (url.protocol !== 'https:') fail('Update-Pakete müssen über HTTPS bereitgestellt werden.', 'UPDATE_URL_INSECURE', 502);
+  }
+  return {
+    ...result,
+    configured: true,
+    current_version: APP_VERSION,
+    latest_version: parsed.raw,
+    update_available: updateAvailable,
+    channel,
+    manifest: { ...manifest, sha256, download_url: downloadUrl || '' },
+  };
+}
+
+function directorySize(root, maxEntries = 100000) {
+  let bytes = 0; let files = 0; let truncated = false;
+  const queue = [root];
+  while (queue.length) {
+    const current = queue.pop();
+    if (!existsSync(current)) continue;
+    let entries;
+    try { entries = readdirSync(current, { withFileTypes: true }); } catch { continue; }
+    for (const entry of entries) {
+      if (++files > maxEntries) { truncated = true; queue.length = 0; break; }
+      const absolute = join(current, entry.name);
+      try {
+        if (entry.isDirectory()) queue.push(absolute);
+        else if (entry.isFile()) bytes += statSync(absolute).size;
+      } catch {}
+    }
+  }
+  return { path: root, bytes, files, truncated };
+}
+
+function fluxStatus(getPlatformSnapshot) {
+  try {
+    const module = getPlatformSnapshot?.()?.modules?.find(item => item.id === 'vendoo.flux-studio');
+    if (module) return { enabled: Boolean(module.enabled), state: module.state, source: 'platform-kernel' };
+  } catch {}
+  try {
+    if (existsSync(MODULE_STATE_PATH)) {
+      const state = JSON.parse(readFileSync(MODULE_STATE_PATH, 'utf8'));
+      const record = state?.modules?.['vendoo.flux-studio'];
+      if (record) return { enabled: record.enabled !== false, state: record.enabled === false ? 'disabled' : 'configured', source: 'module-state' };
+    }
+  } catch {}
+  const initiallyDisabled = String(process.env.VENDOO_INITIAL_DISABLED_MODULES || '').split(',').map(item => item.trim()).includes('vendoo.flux-studio');
+  return { enabled: !initiallyDisabled, state: initiallyDisabled ? 'disabled' : 'default-enabled', source: 'environment-default' };
+}
+
+function internalReadiness() {
+  const checks = [];
+  try {
+    const value = db.prepare('SELECT 1 AS ok').get();
+    checks.push({ name: 'database', ok: Number(value?.ok) === 1 });
+  } catch (error) { checks.push({ name: 'database', ok: false, error: error.message }); }
+  for (const item of verifyRuntimeWritable()) checks.push({ name: 'filesystem', ok: item.writable, path: item.path, error: item.error || null });
+  return { ok: checks.every(item => item.ok), checks };
+}
+
+async function probePublicReadiness(fetchImpl, timeoutMs = 8000) {
+  const base = String(process.env.PUBLIC_BASE_URL || `http://127.0.0.1:${process.env.PORT || 8124}`).replace(/\/$/, '');
+  const response = await fetchWithTimeout(fetchImpl, `${base}/readyz`, { headers: { Accept: 'application/json', 'User-Agent': `Vendoo/${APP_VERSION}` } }, timeoutMs);
+  const body = await readSafeResponse(response);
+  return { ok: response.ok && body?.ok !== false, http_status: response.status, version: body?.version || null, body: redact(body) };
+}
+
+function productionChecks({ getPlatformSnapshot } = {}) {
+  const results = [];
+  const add = (id, status, title, message, details = {}) => results.push({ id, status, title, message, details });
+  const publicBase = String(process.env.PUBLIC_BASE_URL || '').trim();
+  let publicUrl = null;
+  try { publicUrl = publicBase ? new URL(publicBase) : null; } catch {}
+  add('https', publicUrl?.protocol === 'https:' ? 'pass' : 'fail', 'Öffentliche HTTPS-URL', publicUrl?.protocol === 'https:' ? publicUrl.origin : 'PUBLIC_BASE_URL fehlt oder verwendet nicht HTTPS.');
+  const secureCookieMode = String(process.env.VENDOO_COOKIE_SECURE || 'auto').trim().toLowerCase();
+  const secureCookies = secureCookieMode === 'true' || (secureCookieMode === 'auto' && publicUrl?.protocol === 'https:');
+  add('secure-cookies', secureCookies ? 'pass' : 'fail', 'Sichere Cookies', secureCookies ? `Secure-Cookies sind aktiv (${secureCookieMode}).` : 'VENDOO_COOKIE_SECURE ist nicht aktiv oder Auto-Erkennung hat keine HTTPS-URL.');
+  add('trust-proxy', boolEnv('VENDOO_TRUST_PROXY', false) ? 'pass' : 'warning', 'Trust Proxy', boolEnv('VENDOO_TRUST_PROXY', false) ? 'Reverse-Proxy-Vertrauen ist aktiviert.' : 'VENDOO_TRUST_PROXY ist nicht aktiv.');
+
+  const expectedHost = publicUrl?.host || '';
+  const hosts = String(process.env.VENDOO_ALLOWED_HOSTS || '').split(',').map(item => item.trim()).filter(Boolean);
+  const origins = String(process.env.VENDOO_ALLOWED_ORIGINS || '').split(',').map(item => item.trim()).filter(Boolean);
+  add('allowed-host', expectedHost && hosts.includes(expectedHost) ? 'pass' : 'fail', 'Allowed Host', expectedHost && hosts.includes(expectedHost) ? expectedHost : 'Produktivhost fehlt in VENDOO_ALLOWED_HOSTS.', { expected: expectedHost, configured_count: hosts.length });
+  add('allowed-origin', publicUrl?.origin && origins.includes(publicUrl.origin) ? 'pass' : 'fail', 'Allowed Origin', publicUrl?.origin && origins.includes(publicUrl.origin) ? publicUrl.origin : 'Produktivorigin fehlt in VENDOO_ALLOWED_ORIGINS.', { expected: publicUrl?.origin || '', configured_count: origins.length });
+
+  const persistent = DATA_ROOT !== APP_ROOT && dirname(DB_PATH).startsWith(DATA_ROOT) && UPLOADS_DIR.startsWith(DATA_ROOT) && BACKUP_DIR.startsWith(DATA_ROOT);
+  add('persistent-paths', persistent ? 'pass' : 'fail', 'Persistente Pfade', persistent ? `Daten liegen unter ${DATA_ROOT}.` : 'Mindestens ein Laufzeitpfad liegt nicht im persistenten Datenbereich.', runtimePathSummary());
+  const writable = verifyRuntimeWritable();
+  add('writable', writable.every(item => item.writable) ? 'pass' : 'fail', 'Schreibrechte', writable.every(item => item.writable) ? 'Alle Laufzeitpfade sind beschreibbar.' : 'Mindestens ein Laufzeitpfad ist nicht beschreibbar.', { paths: writable });
+
+  let integrity = 'unknown';
+  try { integrity = String(db.pragma('integrity_check', { simple: true })); } catch (error) { integrity = error.message; }
+  add('sqlite-integrity', integrity === 'ok' ? 'pass' : 'fail', 'SQLite-Integrität', integrity === 'ok' ? 'SQLite meldet ok.' : `SQLite-Integritätsprüfung: ${integrity}`);
+  add('backup-target', existsSync(BACKUP_DIR) ? 'pass' : 'fail', 'Backupziel', existsSync(BACKUP_DIR) ? BACKUP_DIR : 'Backupziel fehlt.');
+
+  const flux = fluxStatus(getPlatformSnapshot);
+  add('flux-disabled', flux.enabled ? 'fail' : 'pass', 'FLUX Studio deaktiviert', flux.enabled ? 'FLUX Studio ist aktiv und widerspricht dem Produktions-Scope.' : 'FLUX Studio ist deaktiviert.', flux);
+  const settings = currentSettings();
+  add('deployment-secret', configuredState(settings) ? 'pass' : 'warning', 'Coolify-Zugang', configuredState(settings) ? 'Deployment-Zugang ist gesetzt; Secretwerte werden nicht angezeigt.' : 'Coolify-Deployment ist noch nicht vollständig konfiguriert.', {
+    mode: settings.trigger_mode,
+    api_token_configured: settings.api_token.configured,
+    webhook_configured: settings.deploy_webhook.configured,
+  });
+  const autoDeploy = String(process.env.VENDOO_COOLIFY_AUTO_DEPLOY || '').trim().toLowerCase();
+  add('auto-deploy', ['false', '0', 'off', 'no'].includes(autoDeploy) ? 'pass' : 'warning', 'Coolify Auto Deploy', ['false', '0', 'off', 'no'].includes(autoDeploy) ? 'Auto Deploy ist als deaktiviert dokumentiert.' : 'Vendoo kann den Coolify-Schalter nicht sicher auslesen. Auto Deploy manuell deaktiviert lassen.', { configured: autoDeploy || 'unknown' });
+  return results;
+}
+
+export function createDeploymentService(adapters = {}) {
+  const {
+    createBackup,
+    verifyStoredBackup,
+    checkForUpdates,
+    repository = deploymentRepository,
+    fetchImpl = globalThis.fetch,
+    getPlatformSnapshot,
+  } = adapters;
   if (typeof createBackup !== 'function') fail('Backup-Adapter fehlt.', 'DEPLOYMENT_ADAPTER_MISSING', 500);
+  if (typeof verifyStoredBackup !== 'function') fail('Backup-Verifikationsadapter fehlt.', 'DEPLOYMENT_ADAPTER_MISSING', 500);
+  if (typeof fetchImpl !== 'function') fail('Fetch-Adapter fehlt.', 'DEPLOYMENT_ADAPTER_MISSING', 500);
+
+  let monitorTimer = null;
+  let monitoring = false;
+
+  async function checkUpdates() {
+    if (typeof checkForUpdates !== 'function') return { configured: false, current_version: APP_VERSION, message: 'Updateprüfung ist nicht verfügbar.' };
+    return validateUpdateResult(await checkForUpdates({ channel: currentSettings().update_channel }), currentSettings().update_channel);
+  }
 
   async function testConnection() {
     const settings = currentSettings();
     if (settings.provider !== 'coolify') fail('Coolify ist nicht als Deployment-Provider aktiviert.');
     if (!settings.coolify_url) fail('Coolify URL fehlt.');
-    const response = await fetchWithTimeout(`${settings.coolify_url}/api/health`, { headers: { Accept: 'application/json' } }, 10000);
+    const headers = { Accept: 'application/json', 'User-Agent': `Vendoo/${APP_VERSION}` };
+    if (settings.trigger_mode === 'api') {
+      const token = getSecret('COOLIFY_API_TOKEN');
+      if (!token) fail('Coolify API-Token fehlt.');
+      headers.Authorization = `Bearer ${token}`;
+    }
+    const response = await fetchWithTimeout(fetchImpl, `${settings.coolify_url}/api/health`, { headers }, 10000);
     const body = await readSafeResponse(response);
-    if (!response.ok) fail(`Coolify Healthcheck antwortet mit HTTP ${response.status}.`, 'COOLIFY_HEALTH_FAILED', 502, { response: body });
-    return { ok: true, status: response.status, response: body, url: settings.coolify_url };
+    if (!response.ok) fail(`Coolify Healthcheck antwortet mit HTTP ${response.status}.`, 'COOLIFY_HEALTH_FAILED', 502, { response: redact(body) });
+    return { ok: true, status: response.status, response: redact(body), url: settings.coolify_url };
   }
 
-  async function trigger({ force = false, confirmation = '', reason = 'manual' } = {}) {
-    if (confirmation !== 'DEPLOY') fail('Zur Bestätigung muss exakt DEPLOY übermittelt werden.', 'DEPLOYMENT_CONFIRMATION_REQUIRED');
-    const settings = currentSettings();
-    if (settings.provider !== 'coolify') fail('Coolify ist nicht als Deployment-Provider aktiviert.');
-
-    let backup = null;
-    if (settings.backup_before_deploy) {
-      backup = await createBackup({
-        kind: 'manual', includeUploads: settings.backup_uploads, includeConfig: true,
-        label: `pre-deploy-${APP_VERSION}`,
-      });
-    }
-
+  async function requestCoolify(settings, force) {
     let url;
     const headers = { Accept: 'application/json', 'User-Agent': `Vendoo/${APP_VERSION}` };
-    let method = settings.deploy_method;
+    const method = settings.deploy_method;
     if (settings.trigger_mode === 'webhook') {
       url = normalizeWebhookUrl(getSecret('COOLIFY_DEPLOY_WEBHOOK_URL'));
       if (!url) fail('Coolify Deploy-Webhook ist nicht konfiguriert.');
@@ -169,23 +396,233 @@ export function createDeploymentService({ createBackup, checkForUpdates } = {})
       url = buildApiDeployUrl(settings, Boolean(force));
       headers.Authorization = `Bearer ${token}`;
     }
-
-    const requestedAt = new Date().toISOString();
-    const response = await fetchWithTimeout(url, { method, headers }, 20000);
+    const response = await fetchWithTimeout(fetchImpl, url, { method, headers }, 20000);
     const body = await readSafeResponse(response);
-    const record = {
-      requested_at: requestedAt,
-      provider: 'coolify', trigger_mode: settings.trigger_mode, method,
-      resource_uuid: settings.resource_uuid || null,
-      github_repository: settings.github_repository, github_branch: settings.github_branch,
-      version: APP_VERSION, force: Boolean(force), reason: clean(reason, 120),
-      accepted: response.ok, http_status: response.status,
-      backup_id: backup?.id || null, backup_file: backup?.filename || null,
-      response: body,
+    if (!response.ok) fail(`Coolify hat den Deployment-Auftrag mit HTTP ${response.status} abgewiesen.`, 'COOLIFY_DEPLOY_REJECTED', 502, { response: redact(body) });
+    return { method, http_status: response.status, body: redact(body), deployment_id: extractDeploymentId(body) };
+  }
+
+  async function trigger(input = {}, context = {}) {
+    if (input.confirmation !== 'DEPLOY') fail('Zur Bestätigung muss exakt DEPLOY übermittelt werden.', 'DEPLOYMENT_CONFIRMATION_REQUIRED');
+    const settings = currentSettings();
+    if (!configuredState(settings)) fail('Coolify ist nicht vollständig konfiguriert.', 'DEPLOYMENT_NOT_CONFIGURED');
+    const targetVersion = clean(input.target_version || APP_VERSION, 40).replace(/^v/, '');
+    if (!semver(targetVersion)) fail('Zielversion ist keine gültige SemVer-Version.', 'DEPLOYMENT_TARGET_VERSION_INVALID');
+    const idempotencyKey = cleanIdempotencyKey(input.idempotency_key || context.idempotencyKey);
+    const existing = repository.findByIdempotencyKey(idempotencyKey);
+    if (existing) return { ...existing, reused: true, events: repository.listEvents(existing.id) };
+
+    if (compareVersions(targetVersion, APP_VERSION) > 0) {
+      const update = await checkUpdates();
+      if (!update.configured || update.latest_version !== targetVersion || !update.update_available) {
+        fail('Zielversion ist nicht durch das freigegebene Update-Manifest bestätigt.', 'DEPLOYMENT_TARGET_NOT_APPROVED', 409, { target_version: targetVersion, update });
+      }
+    }
+
+    const timeoutAt = new Date(Date.now() + settings.deployment_timeout_seconds * 1000).toISOString();
+    const created = repository.createRun({
+      idempotencyKey,
+      provider: settings.provider,
+      triggerMode: settings.trigger_mode,
+      currentVersion: APP_VERSION,
+      targetVersion,
+      buildRevisionBefore: buildRevision(),
+      requestedBy: context.userId || null,
+      reason: clean(input.reason || 'manual', 120),
+      githubRepository: settings.github_repository,
+      githubBranch: settings.github_branch,
+      timeoutAt,
+      request: { force: Boolean(input.force), target_version: targetVersion, backup_required: settings.backup_before_deploy },
+    });
+    if (created.reused) return { ...created.run, reused: true, events: repository.listEvents(created.run.id) };
+    let run = created.run;
+
+    try {
+      if (settings.backup_before_deploy) {
+        run = repository.transition(run.id, 'backup_pending', { message: 'Vorab-Backup ist verpflichtend.' });
+        run = repository.transition(run.id, 'backup_running', { message: 'Vorab-Backup wird erstellt.' });
+        const backup = await createBackup({
+          kind: 'manual', includeUploads: settings.backup_uploads, includeConfig: true,
+          label: `pre-deploy-${APP_VERSION}-to-${targetVersion}`,
+        });
+        const verification = verifyStoredBackup(backup.id);
+        repository.recordBackupVerification({
+          backupId: backup.id,
+          runId: run.id,
+          status: verification.ok ? 'verified' : 'invalid',
+          sha256: backup.sha256,
+          fileSize: backup.file_size,
+          sqliteIntegrity: verification.ok ? 'ok' : 'failed',
+          manifest: verification.manifest || backup.manifest || {},
+          errors: verification.errors || [],
+          warnings: verification.warnings || [],
+        });
+        if (!verification.ok) fail(`Vorab-Backup ist nicht verifiziert: ${(verification.errors || []).join('; ')}`, 'DEPLOYMENT_BACKUP_INVALID', 409);
+        run = repository.transition(run.id, 'backup_verified', {
+          message: 'Vorab-Backup wurde erstellt und verifiziert.',
+          patch: { backup_id: backup.id },
+          details: { backup_id: backup.id, sha256: backup.sha256, file_size: backup.file_size },
+        });
+      }
+
+      run = repository.transition(run.id, 'deploy_requested', { message: 'Coolify-Deployment wird angefordert.' });
+      const remote = await requestCoolify(settings, Boolean(input.force));
+      run = repository.transition(run.id, settings.trigger_mode === 'api' ? 'deploy_running' : 'health_wait', {
+        message: settings.trigger_mode === 'api' ? 'Coolify hat den Deployment-Auftrag angenommen.' : 'Webhook wurde angenommen; externe Bestätigung oder neue Zielversion wird abgewartet.',
+        eventType: 'coolify.accepted',
+        patch: { deployment_id: remote.deployment_id || null, result_json: remote },
+        details: { http_status: remote.http_status, deployment_id: remote.deployment_id || null },
+      });
+      scheduleMonitor(1000);
+      return { ...run, reused: false, events: repository.listEvents(run.id), message: 'Deployment-Auftrag angenommen. Erfolg wird erst nach Status- und Readinessprüfung gemeldet.' };
+    } catch (error) {
+      const latest = repository.getRun(run.id);
+      if (latest && !['failed', 'succeeded'].includes(latest.state)) {
+        try {
+          repository.transition(run.id, 'failed', {
+            message: error.message || 'Deployment-Auftrag ist fehlgeschlagen.',
+            eventType: 'run.failed',
+            patch: { error_code: error.code || 'DEPLOYMENT_FAILED', error_message: String(error.message || error).slice(0, 2000) },
+          });
+        } catch {}
+      }
+      throw error;
+    }
+  }
+
+  async function pollCoolifyStatus(run, settings) {
+    if (settings.trigger_mode !== 'api' || !run.deployment_id || !settings.coolify_url) return { available: false };
+    const token = getSecret('COOLIFY_API_TOKEN');
+    if (!token) return { available: false, error: 'API-Token fehlt.' };
+    const url = buildApiStatusUrl(settings, run.deployment_id);
+    const response = await fetchWithTimeout(fetchImpl, url, {
+      headers: { Accept: 'application/json', Authorization: `Bearer ${token}`, 'User-Agent': `Vendoo/${APP_VERSION}` },
+    }, 10000);
+    const body = await readSafeResponse(response);
+    if (!response.ok) return { available: true, ok: false, http_status: response.status, body: redact(body) };
+    const status = extractRemoteStatus(body);
+    return { available: true, ok: true, http_status: response.status, status, body: redact(body) };
+  }
+
+  async function refreshRun(runId = null, { externalConfirmed = false } = {}) {
+    const run = runId ? repository.getRun(runId) : repository.getActiveRun();
+    if (!run) return { state: 'idle', message: 'Kein aktives Deployment.' };
+    if (['succeeded', 'failed', 'rollback_required'].includes(run.state)) return { ...run, events: repository.listEvents(run.id) };
+    if (run.timeout_at && Date.parse(run.timeout_at) <= Date.now()) {
+      const timedOut = repository.transition(run.id, 'rollback_required', {
+        message: 'Deployment-Zeitlimit überschritten. Rollback oder manuelle Prüfung erforderlich.',
+        eventType: 'run.timeout',
+        patch: { error_code: 'DEPLOYMENT_TIMEOUT', error_message: 'Zeitlimit überschritten.' },
+      });
+      return { ...timedOut, events: repository.listEvents(run.id) };
+    }
+
+    const settings = currentSettings();
+    let remote = { available: false };
+    try { remote = await pollCoolifyStatus(run, settings); }
+    catch (error) {
+      repository.patchRun(run.id, {}, { eventType: 'coolify.status_error', message: 'Coolify-Status konnte nicht gelesen werden.', details: { error: error.message } });
+    }
+    if (remote.status && TERMINAL_COOLIFY_FAILURE.has(remote.status)) {
+      const failed = repository.transition(run.id, 'rollback_required', {
+        message: `Coolify meldet den Fehlerstatus ${remote.status}.`,
+        eventType: 'coolify.failed',
+        patch: { result_json: remote, error_code: 'COOLIFY_DEPLOYMENT_FAILED', error_message: `Coolify-Status: ${remote.status}` },
+      });
+      return { ...failed, remote, events: repository.listEvents(run.id) };
+    }
+    if (run.state === 'deploy_running' && remote.available && remote.ok) {
+      repository.transition(run.id, 'health_wait', { message: 'Deploymentstatus wurde gelesen; Readiness und Zielversion werden geprüft.', eventType: 'health.wait', details: { remote_status: remote.status || 'unknown' } });
+    }
+
+    let readiness;
+    try { readiness = await probePublicReadiness(fetchImpl, 8000); }
+    catch (error) { readiness = { ok: false, error: error.message }; }
+    const targetMatches = readiness.ok && String(readiness.version || '').replace(/^v/, '') === String(run.target_version).replace(/^v/, '');
+    const remoteSucceeded = remote.available && remote.ok && TERMINAL_COOLIFY_SUCCESS.has(remote.status);
+    const persistedConfirmation = repository.listEvents(run.id).some(event => event.event_type === 'external.succeeded');
+    const confirmed = Boolean(externalConfirmed || persistedConfirmation);
+    const deploymentConfirmed = settings.trigger_mode === 'api' ? (remoteSucceeded || confirmed) : confirmed;
+    if (readiness.ok && targetMatches && deploymentConfirmed) {
+      const succeeded = repository.transition(run.id, 'succeeded', {
+        message: 'Deployment, Readiness und Zielversion wurden erfolgreich bestätigt.',
+        eventType: 'run.succeeded',
+        patch: { build_revision_after: buildRevision(), result_json: { remote, readiness } },
+        details: { target_version: run.target_version, readiness_version: readiness.version, remote_status: remote.status || null },
+      });
+      return { ...succeeded, remote, readiness, events: repository.listEvents(run.id) };
+    }
+    repository.patchRun(run.id, { result_json: { remote, readiness } }, {
+      eventType: 'health.pending',
+      message: readiness.ok ? 'Readiness ist grün, aber Zielversion oder externe Bestätigung fehlt.' : 'Readiness ist noch nicht grün.',
+      details: { readiness_ok: Boolean(readiness.ok), readiness_version: readiness.version || null, target_version: run.target_version, remote_status: remote.status || null, external_confirmation: confirmed, deployment_confirmed: deploymentConfirmed },
+    });
+    return { ...repository.getRun(run.id), remote, readiness, events: repository.listEvents(run.id) };
+  }
+
+  async function confirmExternal(runId, input = {}) {
+    if (input.confirmation !== 'CONFIRM') fail('Zur externen Bestätigung muss exakt CONFIRM übermittelt werden.', 'DEPLOYMENT_EXTERNAL_CONFIRMATION_REQUIRED');
+    const run = repository.getRun(runId);
+    if (!run) fail('Deployment-Auftrag wurde nicht gefunden.', 'DEPLOYMENT_RUN_NOT_FOUND', 404);
+    if (!['deploy_requested', 'deploy_running', 'health_wait', 'rollback_required'].includes(run.state)) fail('Dieser Deployment-Auftrag kann nicht extern bestätigt werden.', 'DEPLOYMENT_CONFIRMATION_STATE_INVALID', 409);
+    const outcome = clean(input.outcome || 'succeeded', 20);
+    if (outcome === 'failed') {
+      const nextState = run.state === 'rollback_required' ? 'failed' : 'rollback_required';
+      return repository.transition(run.id, nextState, {
+        message: clean(input.message || 'Externes Deployment wurde als fehlgeschlagen bestätigt.', 500),
+        eventType: 'external.failed',
+        patch: { error_code: 'EXTERNAL_DEPLOYMENT_FAILED', error_message: clean(input.message || 'Externe Fehlermeldung.', 1000) },
+      });
+    }
+    if (outcome === 'running') {
+      if (run.state === 'deploy_requested') repository.transition(run.id, 'deploy_running', { message: 'Externes System bestätigt laufendes Deployment.', eventType: 'external.running' });
+      return refreshRun(run.id);
+    }
+    if (outcome !== 'succeeded') fail('Externe Bestätigung muss running, succeeded oder failed verwenden.');
+    repository.addEvent(run.id, run.state, 'external.succeeded', clean(input.message || 'Externes System meldet Abschluss.', 500), {});
+    return refreshRun(run.id, { externalConfirmed: true });
+  }
+
+  function scheduleMonitor(delayMs = null) {
+    if (monitorTimer) clearTimeout(monitorTimer);
+    const interval = currentSettings().health_poll_seconds * 1000;
+    monitorTimer = setTimeout(async () => {
+      if (monitoring) return scheduleMonitor(interval);
+      monitoring = true;
+      try { await refreshRun(); } catch (error) { console.error('Deployment-Monitor:', error.message); }
+      finally {
+        monitoring = false;
+        const active = repository.getActiveRun();
+        if (active && active.state !== 'rollback_required') scheduleMonitor(interval);
+      }
+    }, delayMs ?? interval);
+    monitorTimer.unref?.();
+  }
+
+  async function status() {
+    const settings = publicSettings(repository);
+    const lastBackup = db.prepare(`SELECT id, kind, label, file_name, file_size, sha256, status, verified_at, created_at
+      FROM operation_backups WHERE status = 'verified' ORDER BY created_at DESC LIMIT 1`).get() || null;
+    return {
+      ...settings,
+      production: {
+        version: APP_VERSION,
+        build_revision: buildRevision(),
+        deployment_provider: settings.provider,
+        domain: (() => { try { return new URL(String(process.env.PUBLIC_BASE_URL || '')).host; } catch { return ''; } })(),
+        public_base_url: String(process.env.PUBLIC_BASE_URL || ''),
+        readiness: internalReadiness(),
+        database: { path: DB_PATH, integrity: (() => { try { return db.pragma('integrity_check', { simple: true }); } catch (error) { return error.message; } })() },
+        storage: {
+          data: directorySize(DATA_ROOT), uploads: directorySize(UPLOADS_DIR), backups: directorySize(BACKUP_DIR),
+          operations: directorySize(OPERATIONS_DIR), logs: directorySize(LOG_DIR), modules: directorySize(MODULES_DIR),
+        },
+        last_backup: lastBackup,
+        last_deployment: repository.listRuns(1)[0] || null,
+        flux: fluxStatus(getPlatformSnapshot),
+      },
+      latest_production_check: repository.latestProductionCheck(),
     };
-    writeLastDeployment(record);
-    if (!response.ok) fail(`Coolify hat den Deployment-Auftrag mit HTTP ${response.status} abgewiesen.`, 'COOLIFY_DEPLOY_REJECTED', 502, { response: body, backup_id: backup?.id || null });
-    return { ...record, message: 'Coolify-Deployment wurde angefordert. Der laufende Container wird nicht selbst verändert.' };
   }
 
   function update(input = {}) {
@@ -204,13 +641,16 @@ export function createDeploymentService({ createBackup, checkForUpdates } = {})
       COOLIFY_RESOURCE_UUID: cleanUuid(input.resource_uuid || ''),
       COOLIFY_TRIGGER_MODE: mode,
       COOLIFY_DEPLOY_METHOD: method,
-      COOLIFY_DEPLOY_ENDPOINT: clean(input.deploy_endpoint || '/api/v1/deploy?uuid={uuid}&force={force}', 500),
+      COOLIFY_DEPLOY_ENDPOINT: normalizeEndpoint(input.deploy_endpoint, '/api/v1/deploy?uuid={uuid}&force={force}', ['uuid', 'force']),
+      COOLIFY_DEPLOYMENT_STATUS_ENDPOINT: normalizeEndpoint(input.deployment_status_endpoint, '/api/v1/deployments/{deployment_id}', ['deployment_id']),
       VENDOO_GITHUB_REPOSITORY: clean(input.github_repository || 'Masterluke77/vendoo', 200),
       VENDOO_GITHUB_BRANCH: clean(input.github_branch || 'main', 120),
       VENDOO_GHCR_IMAGE: clean(input.ghcr_image || 'ghcr.io/masterluke77/vendoo', 300),
       VENDOO_UPDATE_CHANNEL: channel,
       VENDOO_BACKUP_BEFORE_DEPLOY: input.backup_before_deploy === false ? 'false' : 'true',
       VENDOO_DEPLOY_BACKUP_UPLOADS: input.backup_uploads === true ? 'true' : 'false',
+      VENDOO_DEPLOY_TIMEOUT_SECONDS: String(Math.max(60, Math.min(7200, Number(input.deployment_timeout_seconds) || 900))),
+      VENDOO_DEPLOY_HEALTH_POLL_SECONDS: String(Math.max(5, Math.min(300, Number(input.health_poll_seconds) || 15))),
     };
     let content = readRuntimeConfig();
     for (const [key, value] of Object.entries(values)) {
@@ -218,27 +658,38 @@ export function createDeploymentService({ createBackup, checkForUpdates } = {})
       process.env[key] = value;
     }
     writeRuntimeConfig(content);
-    if (input.api_token !== undefined && input.api_token !== '' && input.api_token !== '••••••••') {
+    if (input.api_token !== undefined && input.api_token !== '' && input.api_token !== MASKED_SECRET) {
       setSecret('COOLIFY_API_TOKEN', clean(input.api_token, 16384), { source: 'deployment-ui' });
     }
-    if (input.deploy_webhook_url !== undefined && input.deploy_webhook_url !== '' && input.deploy_webhook_url !== '••••••••') {
+    if (input.deploy_webhook_url !== undefined && input.deploy_webhook_url !== '' && input.deploy_webhook_url !== MASKED_SECRET) {
       setSecret('COOLIFY_DEPLOY_WEBHOOK_URL', normalizeWebhookUrl(input.deploy_webhook_url), { source: 'deployment-ui' });
     }
-    return publicSettings();
+    return publicSettings(repository);
   }
 
+  function runProductionCheck(context = {}) {
+    const results = productionChecks({ getPlatformSnapshot });
+    return repository.createProductionCheck({ createdBy: context.userId || null, results });
+  }
+
+  scheduleMonitor(2500);
+
   return Object.freeze({
-    status: publicSettings,
+    status,
     update,
     testConnection,
     trigger,
-    async checkUpdates() {
-      if (typeof checkForUpdates !== 'function') return { configured: false, current_version: APP_VERSION, message: 'Updateprüfung ist nicht verfügbar.' };
-      return checkForUpdates();
-    },
+    checkUpdates,
+    refreshRun,
+    confirmExternal,
+    listRuns(limit) { return repository.listRuns(limit).map(run => ({ ...run, events: repository.listEvents(run.id) })); },
+    getRun(id) { const run = repository.getRun(id); return run ? { ...run, events: repository.listEvents(id) } : null; },
+    runProductionCheck,
+    latestProductionCheck: repository.latestProductionCheck,
     health() {
-      const status = publicSettings();
-      return { ok: true, provider: status.provider, configured: status.configured, docker_socket_access: false };
+      const settings = publicSettings(repository);
+      return { ok: true, provider: settings.provider, configured: settings.configured, state: settings.active_run?.state || 'idle', docker_socket_access: false };
     },
+    stop() { if (monitorTimer) clearTimeout(monitorTimer); monitorTimer = null; },
   });
 }
diff --git a/app/modules/deployments/state-machine.mjs b/app/modules/deployments/state-machine.mjs
new file mode 100644
index 0000000..4483fb4
--- /dev/null
+++ b/app/modules/deployments/state-machine.mjs
@@ -0,0 +1,41 @@
+export const DEPLOYMENT_STATES = Object.freeze([
+  'checking', 'backup_pending', 'backup_running', 'backup_verified',
+  'deploy_requested', 'deploy_running', 'health_wait',
+  'succeeded', 'failed', 'rollback_required',
+]);
+
+export const ACTIVE_DEPLOYMENT_STATES = Object.freeze([
+  'checking', 'backup_pending', 'backup_running', 'backup_verified',
+  'deploy_requested', 'deploy_running', 'health_wait', 'rollback_required',
+]);
+
+const TRANSITION_ENTRIES = Object.freeze({
+  checking: ['backup_pending', 'deploy_requested', 'failed'],
+  backup_pending: ['backup_running', 'failed'],
+  backup_running: ['backup_verified', 'failed'],
+  backup_verified: ['deploy_requested', 'failed'],
+  deploy_requested: ['deploy_running', 'health_wait', 'failed', 'rollback_required'],
+  deploy_running: ['health_wait', 'succeeded', 'failed', 'rollback_required'],
+  health_wait: ['succeeded', 'failed', 'rollback_required'],
+  rollback_required: ['failed'],
+  succeeded: [],
+  failed: [],
+});
+
+export const DEPLOYMENT_TRANSITIONS = Object.freeze(Object.fromEntries(
+  Object.entries(TRANSITION_ENTRIES).map(([state, targets]) => [state, Object.freeze([...targets])]),
+));
+
+const ACTIVE_SET = new Set(ACTIVE_DEPLOYMENT_STATES);
+
+export function isDeploymentState(state) {
+  return DEPLOYMENT_STATES.includes(state);
+}
+
+export function isActiveDeploymentState(state) {
+  return ACTIVE_SET.has(state);
+}
+
+export function canTransitionDeployment(from, to) {
+  return from === to || Boolean(DEPLOYMENT_TRANSITIONS[from]?.includes(to));
+}
diff --git a/app/modules/product-image-tools/index.mjs b/app/modules/product-image-tools/index.mjs
new file mode 100644
index 0000000..27fad74
--- /dev/null
+++ b/app/modules/product-image-tools/index.mjs
@@ -0,0 +1,13 @@
+import manifest from './module.json' with { type: 'json' };
+
+export function createProductImageToolsModule() {
+  return {
+    manifest,
+    source: 'builtin',
+    lifecycle: {
+      async start() {},
+      async stop() {},
+      async health() { return { ok: true, native: true, optional: true, contracts: ['ghost-mannequin', 'flatlay'] }; },
+    },
+  };
+}
diff --git a/app/modules/product-image-tools/module.json b/app/modules/product-image-tools/module.json
new file mode 100644
index 0000000..1c45e41
--- /dev/null
+++ b/app/modules/product-image-tools/module.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "id": "vendoo.product-image-tools",
+  "name": "Produktbild Studio",
+  "version": "1.0.0",
+  "type": "feature",
+  "status": "native",
+  "defaultEnabled": false,
+  "description": "Optionale, sichere Produktbild-Varianten für Ghost-Mannequin und Flatlay. Das Modul ist standardmäßig deaktiviert und kann im Modulmanager bewusst zugeschaltet werden.",
+  "requires": [
+    "vendoo.ai",
+    "vendoo.media"
+  ],
+  "permissions": [
+    "generation.execute"
+  ],
+  "provides": [
+    "product-images.variants"
+  ],
+  "consumes": [
+    "ai.images",
+    "media.assets"
+  ],
+  "owns": [
+    "product-images.jobs",
+    "product-images.variants"
+  ]
+}
diff --git a/app/modules/users/routes.mjs b/app/modules/users/routes.mjs
index b960a89..1153777 100644
--- a/app/modules/users/routes.mjs
+++ b/app/modules/users/routes.mjs
@@ -48,6 +48,27 @@ export function registerUsersRoutes({ app, routes, deps }) {
       res.json({ ok: true, emailSent: result.sent, consoleFallback: result.consoleFallback || false });
     },
   });
+  routes.register(app, {
+    id: 'users.admin.invitations.list', method: 'GET', path: '/api/admin/users/invitations', owner: 'vendoo.users', policy: 'users.manage', csrf: false, stability: 'stable',
+    handler: async (req, res) => res.json({ invitations: getUsersService().invitations(Number(req.query.limit) || 100) }),
+  });
+  routes.register(app, {
+    id: 'users.admin.invitations.resend', method: 'POST', path: '/api/admin/users/invitations/:id/resend', owner: 'vendoo.users', policy: 'users.manage', csrf: true, stability: 'stable',
+    handler: async (req, res) => {
+      const prepared = getUsersService().resendPendingInvitation({ invitationId: Number(req.params.id), createdBy: req.user.id });
+      const result = await deps.sendMagicLink(prepared.invitation.email, prepared.invite.token, `${req.protocol}://${req.get('host')}`, 'invite');
+      deps.auditLog(req.user.id, req.user.email, 'user.invitation_resent', 'invitation', String(req.params.id), JSON.stringify({ email: prepared.invitation.email, role: prepared.role, expires_at: prepared.invite.expiresAt }), deps.getClientIp(req));
+      res.json({ ok: true, emailSent: result.sent, consoleFallback: result.consoleFallback || false, expiresAt: prepared.invite.expiresAt });
+    },
+  });
+  routes.register(app, {
+    id: 'users.admin.invitations.revoke', method: 'DELETE', path: '/api/admin/users/invitations/:id', owner: 'vendoo.users', policy: 'users.manage', csrf: true, stability: 'stable',
+    handler: async (req, res) => {
+      const invitation = getUsersService().revokePendingInvitation(Number(req.params.id));
+      deps.auditLog(req.user.id, req.user.email, 'user.invitation_revoked', 'invitation', String(req.params.id), JSON.stringify({ email: invitation.email, role: invitation.role }), deps.getClientIp(req));
+      res.json({ ok: true, invitation });
+    },
+  });
   routes.register(app, {
     id: 'users.admin.update', method: 'PUT', path: '/api/admin/users/:id', owner: 'vendoo.users', policy: 'users.manage', csrf: true, stability: 'stable',
     input: objectSchema({ name: { type: 'string', maxLength: 120 }, role: { type: 'string', enum: roles }, active: { type: 'integer', min: 0, max: 1 }, avatar_color: { type: 'string', maxLength: 32 } }),
diff --git a/app/modules/users/service.mjs b/app/modules/users/service.mjs
index 020b60c..84ed24b 100644
--- a/app/modules/users/service.mjs
+++ b/app/modules/users/service.mjs
@@ -1,7 +1,7 @@
 import { randomBytes } from 'node:crypto';
 import {
   auditLog, createAuthToken, createUser, deleteUser, getLoginHistory, getUser, getUserByEmail,
-  getUsers, setPassword, updateUser, validatePasswordStrength,
+  getUsers, setPassword, updateUser, validatePasswordStrength, listInvitations, getInvitation, revokeInvitation,
 } from '../../core/identity/identity-store.mjs';
 import { permissionsForRole, getRoleDefinitions } from '../../../lib/security.mjs';
 import { PlatformError } from '../../kernel/errors.mjs';
@@ -40,7 +40,7 @@ export function createUsersService() {
       return publicUser(updated);
     },
     prepareInvite({ email, name, role, method, createdBy }) {
-      const normalizedRole = ROLES.has(role) ? role : 'editor';
+      const normalizedRole = ROLES.has(role) ? role : 'viewer';
       if (getUserByEmail(email)) fail('User existiert bereits', 400, 'USER_EXISTS');
       if (method === 'auto_password') {
         const password = `Vd!${randomBytes(9).toString('base64url')}9a`;
@@ -55,6 +55,19 @@ export function createUsersService() {
       if (!user) fail('User nicht gefunden', 404, 'USER_NOT_FOUND');
       return { user: publicUser(user), invite: createAuthToken(user.email, 'invite', user.role, createdBy) };
     },
+    invitations(limit = 100) { return listInvitations(limit); },
+    resendPendingInvitation({ invitationId, createdBy }) {
+      const invitation = getInvitation(invitationId);
+      if (!invitation) fail('Einladung nicht gefunden', 404, 'INVITATION_NOT_FOUND');
+      if (invitation.status !== 'pending' && invitation.status !== 'expired') fail('Diese Einladung kann nicht erneut versendet werden.', 409, 'INVITATION_NOT_RESENDABLE');
+      const role = ROLES.has(invitation.role) ? invitation.role : 'viewer';
+      return { invitation, invite: createAuthToken(invitation.email, 'invite', role, createdBy), role };
+    },
+    revokePendingInvitation(invitationId) {
+      const invitation = revokeInvitation(invitationId);
+      if (!invitation) fail('Einladung nicht gefunden', 404, 'INVITATION_NOT_FOUND');
+      return invitation;
+    },
     updateManagedUser({ actor, userId, patch }) {
       const existing = getUser(userId);
       if (!existing) fail('User nicht gefunden', 404, 'USER_NOT_FOUND');
diff --git a/compose.vps.yaml b/compose.vps.yaml
index ab2dd02..9c71514 100644
--- a/compose.vps.yaml
+++ b/compose.vps.yaml
@@ -4,7 +4,7 @@ services:
     build:
       context: .
       dockerfile: Dockerfile
-    image: vendoo:1.41.2
+    image: vendoo:1.42.0
     container_name: vendoo
     restart: unless-stopped
     init: true
diff --git a/compose.yaml b/compose.yaml
index 21a1b5a..b3f0271 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -4,7 +4,7 @@ services:
     build:
       context: .
       dockerfile: Dockerfile
-    image: vendoo:1.41.2
+    image: vendoo:1.42.0
     container_name: vendoo
     restart: unless-stopped
     init: true
diff --git a/docs/ABNAHMEBERICHT_1_42_0.md b/docs/ABNAHMEBERICHT_1_42_0.md
new file mode 100644
index 0000000..7fc9944
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_1_42_0.md
@@ -0,0 +1,123 @@
+# Abnahmebericht – Vendoo 1.42.0
+
+## Ergebnis
+
+**Technische Paketabnahme bestanden.**
+
+Version: `1.42.0`  
+Slice: `Production Operations & Controlled Update Completion`  
+Ausgangsbasis: Vendoo `1.41.2`
+
+Ein produktives Deployment auf `vendoo.flatlined.de` wurde bei dieser Paketabnahme bewusst **nicht** ausgelöst. Der neue `UPDATE_VENDOO.bat`-Assistent automatisiert Review-Gates, Pull Request, Merge, Coolify-Trigger und die Prüfung von `/readyz` auf exakt Version `1.42.0`.
+
+## Vollständiges Release-Gate
+
+Der unveränderte Paketbefehl wurde als zusammenhängender Lauf ausgeführt:
+
+```bash
+npm run verify:all
+```
+
+Ergebnis: **Exit-Code 0**.
+
+Abgedeckt wurden unter anderem:
+
+- Basis-Release vor Ein-Klick-Erweiterung: vollständiges `npm run verify:all` mit Exit-Code 0
+- aktuelles Git- und Secret-Gate: 560 Dateien, keine Laufzeitdaten oder Secrets
+- aktuelle Syntaxprüfung: 160 JavaScript-/MJS-/CJS-Dateien
+- ESM-Exportverträge der unveränderten Vendoo-Laufzeit: 159 produktive Quelldateien
+- Capability-Graph: 17 Module und 40 Capabilities
+- FLUX-Lifecycle und initial deaktivierter Zustand
+- Plattformarchitektur: 17 Module, 15 native Module, 2 Legacy-Bridges
+- Theme-System: 42 Tokens
+- Security Foundation, Secret-Migration, CSP, Request- und Correlation-IDs
+- Identity, Rollen, Sitzungen und letzter-Admin-Schutz
+- kontrollierte Einladungen: Leser-Standardrolle, 48 Stunden, Einmalgültigkeit, erneutes Senden und Widerruf
+- Katalog, Mediengrenzen, Locking, Papierkorb und Bulk-Limits
+- Modulmanager und `.vmod`-Verträge
+- Deployment-State-Machine, Idempotenz, Backup-Gate, Coolify-Status, Zielversionsprüfung und Rollback-Sperre
+- Konfigurationsspeicher und Shell-Installer
+- frische und bestehende Datenbankmigrationen
+
+
+## Ein-Klick-Updater-Abnahme
+
+Zusätzlich zur bereits vollständig geprüften Vendoo-Laufzeit wurden nach Einbau des Updaters erfolgreich ausgeführt:
+
+- `node tools/verify-one-click-updater-1.42.0.mjs`
+- `node tools/check-syntax.mjs`
+- `node tools/verify-git-safety.mjs`
+- `node tools/verify-git-safety-regression.mjs`
+- `node tools/verify-git-staging.mjs`
+- `node tools/verify-source-boundaries-1.41.2.mjs`
+- `node tools/verify-git-ignore-boundaries-1.41.2.mjs`
+- reales Paket-Staging mit enthaltenem Updater und Workflow sowie ausgeschlossenem `logs`-Ordner
+
+Die Ein-Klick-Erweiterung verändert keine Server-, Datenbank- oder Modul-Laufzeitlogik. Der Updater führt auf dem Zielrechner vor jedem Push erneut `npm ci` und den vollständigen Befehl `npm run verify:all` aus. Schlägt ein Gate fehl, erfolgt weder Merge noch Coolify-Deployment.
+
+## Datenbankabnahme
+
+Die neue Migration ist ausschließlich additiv. Neu:
+
+- `deployment_runs`
+- `deployment_events`
+- `backup_verifications`
+- `production_checks`
+
+Die SQLite-Prüfung bestätigte:
+
+- Tabellen erfolgreich anlegbar
+- Fremdschlüssel ohne Fehler
+- `PRAGMA integrity_check = ok`
+- vorhandene Testzeile bleibt bei Migration erhalten
+- keine Reset-, Drop- oder Löschmigration für bestehende Produktivdaten
+
+## Isolierter Laufzeittest
+
+Vendoo wurde mit einem temporären, leeren Datenverzeichnis und Port `18142` gestartet.
+
+Ergebnis:
+
+- Serverstart erfolgreich
+- `GET /healthz` → HTTP 200
+- gemeldete Version → `1.42.0`
+- `GET /readyz` → HTTP 200 und `ok: true`
+- SQLite → bereit
+- alle erforderlichen Schreibpfade → beschreibbar
+- Platform Kernel → `running`
+- geladene Module → 17
+- geordneter Shutdown → erfolgreich
+
+Der temporäre Laufzeitstand wurde anschließend entfernt. Er ist nicht Bestandteil des Release-Pakets.
+
+## Sicherheits- und Datenabgrenzung
+
+Nicht im Release-Paket enthalten:
+
+- `.env`
+- `db/vendoo.db`, `-wal`, `-shm`
+- Uploads und Backups
+- Logs und Operationsdaten
+- `master.key` oder verschlüsselter Secret Store
+- Coolify-, GitHub-, Mail-, KI- oder Plattform-API-Schlüssel
+- `node_modules`
+- lokal erzeugte FLUX-Token
+
+Vendoo führt im Produktivcontainer weiterhin weder `git pull`, `npm install`, Docker-Kommandos noch Docker-Socket-Zugriffe aus. Build, Containerwechsel und Rollback bleiben Aufgabe von Coolify.
+
+## Noch notwendige Produktionsabnahme
+
+Der Updater bestätigt automatisch `/readyz`, Zielversion und `/healthz`. Nach dem ersten Produktivlauf sollten zusätzlich in Vendoo kontrolliert werden:
+
+1. `/readyz` meldet HTTP 200 und Version `1.42.0`.
+2. Bestehende Benutzer, Artikel, Uploads und Einstellungen sind unverändert vorhanden.
+3. Das Volume ist weiterhin exakt nach `/app/data` gemountet.
+4. FLUX Studio bleibt deaktiviert.
+5. Produktionscheck zeigt keine Fehler.
+6. Ein Testbackup wird erstellt und als verifiziert angezeigt.
+7. Ein kontrollierter Deployment-Auftrag zeigt vollständige Events und endet erst nach bestätigtem Coolify-Abschluss, erfolgreichem `/readyz` und passender Zielversion mit `succeeded`.
+8. Ein Fehlerfall bleibt als `rollback_required` gesperrt, bis ein Administrator die Prüfung mit `CONFIRM` dokumentiert abschließt.
+
+## Freigabegrenze
+
+Das Paket ist für das automatisierte Ein-Klick-Verfahren freigegeben. Der Assistent führt die lokalen Gates aus, wartet auf vorhandene GitHub-Checks, mergt erst danach und startet anschließend den kontrollierten Produktionsworkflow.
diff --git a/docs/ABNAHMEBERICHT_1_43_0.md b/docs/ABNAHMEBERICHT_1_43_0.md
new file mode 100644
index 0000000..a90765a
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_1_43_0.md
@@ -0,0 +1,35 @@
+# Abnahmebericht – Vendoo 1.43.0
+
+## Ergebnis
+
+Der Slice **Module-aware Navigation, Listing Studio UX & Updater Status UI** ist abgenommen.
+
+## Funktionsabnahme
+
+- Deaktivierte Module entfernen ihre zugeordneten Einträge unmittelbar aus der linken Navigation.
+- Die Oberfläche lädt den Modulstatus vor modulgeschützten APIs und bleibt auch bei deaktiviertem AI-Modul startfähig.
+- Das Produktbild Studio ist ein eigenes natives Modul, startet mit `defaultEnabled: false` und kann persistent aktiviert werden.
+- Die bisherigen Produktbild-Werkzeuge werden bei deaktiviertem Modul nicht angezeigt und ihre API-Routen sind dem Modul zugeordnet.
+- Die Seite **Neuer Artikel** besitzt eine sticky Aktionsleiste mit **Artikel generieren** und **Speichern**.
+- Der Ein-Klick-Updater zeigt Phase, Detailstatus, Prozentwert, Live-Protokoll sowie Erfolg, Eingabebedarf oder sicheren Abbruch.
+
+## Automatisierte Gates
+
+- `npm run verify:all`: Exit-Code 0
+- Syntaxprüfung: 163 JavaScript-/MJS-/CJS-Dateien
+- Git-/Secret-Gate: 568 Paketdateien vor Bereinigung
+- Plattformgraph: 18 Module und 41 Capabilities
+- Datenbankmigrationen: Fresh- und Existing-DB erfolgreich
+- Modulstatus: initial deaktiviert und persistente Aktivierung bestätigt
+- Ein-Klick-Updater, Modulnavigation und Listing-Studio-Verträge erfolgreich
+
+## Isolierter Laufzeittest
+
+- `/healthz`: HTTP 200, Version `1.43.0`
+- `/readyz`: HTTP 200, `ok: true`
+- Plattformkernel: `running`, 18 registrierte Module
+- SQLite und alle persistenten Schreibpfade im temporären Datenverzeichnis erfolgreich
+
+## Sicherheitsgrenzen
+
+Es wurden keine produktiven Daten, Datenbanken, Uploads, Backups, `.env`-Dateien, Master-Keys oder API-Schlüssel in das Paket übernommen. Das produktive GitHub-Repository und Coolify wurden bei der Erstellung dieses Pakets nicht verändert.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_1.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_1.md
new file mode 100644
index 0000000..ae6646d
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_1.md
@@ -0,0 +1,31 @@
+# Abnahmebericht – Vendoo Production Updater 2.1
+
+## Anlass
+
+Production Updater 2.0 konnte einen früh beendeten Worker nur als Exit-Code 1 melden. Der Standardfehlerkanal war nicht mit der Oberfläche verbunden und der Protokollpfad wurde erst vom Worker selbst geliefert. Ein Fehler vor dessen erster Statusmeldung führte daher zu einer leeren Diagnose.
+
+## Korrektur
+
+- neuer, kleiner `Vendoo.Updater.Host.ps1` als überwachte Bootstrap-Grenze
+- initialer Status und fester Protokollpfad werden bereits von der GUI angelegt
+- vollständige Umleitung und Auswertung von Standardausgabe und Standardfehler
+- Lade-, Parser- und Initialisierungsfehler des Worker-Kerns werden mit Datei, Zeile und vollständiger Ausnahme protokolliert
+- der Worker-Core beendet den Host nicht mehr mit `exit`
+- der Host garantiert einen terminalen Status
+- Diagnoseordner ist direkt aus der Oberfläche erreichbar
+- `updater.log`, `status.json`, `events.ndjson`, `worker.stdout.log` und `worker.stderr.log` liegen pro Lauf in einem eigenen Verzeichnis
+
+## Automatisierte Abnahme
+
+- PowerShell-Strukturparser: UI, Host, Worker und Launcher ohne Parserfehler
+- `npm run verify:all`: Exit-Code 0
+- JavaScript-/MJS-/CJS-Syntax: 166 Dateien
+- Git-Sicherheitsgate: 578 Paketdateien, keine Secrets oder Laufzeitdaten
+- Plattformgraph: 18 Module und 41 Capabilities
+- Datenbankmigrationen: erfolgreich, vorhandene Daten bleiben erhalten
+- Updater-2.1-Vertrag: erfolgreich
+- internes SHA-256-Manifest: 577 Dateien
+
+## Prüfgrenze
+
+Die WPF-Oberfläche wurde in dieser Linux-Prüfumgebung nicht interaktiv unter Windows gestartet. Parser, XAML-/Codevertrag, Bootstrap-Architektur, vollständiger Fehlerkanal, Paketgrenzen und der gesamte Vendoo-Abnahmevertrag wurden automatisiert geprüft. Beim nächsten Windows-Fehler bleibt die Oberfläche geöffnet und zeigt die konkrete PowerShell-Ausnahme samt Protokollpfad; ein diagnostikloser Exit-Code-1-Zustand ist durch den neuen Startvertrag ausgeschlossen.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_2.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_2.md
new file mode 100644
index 0000000..0a59e88
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_2.md
@@ -0,0 +1,22 @@
+# Abnahmebericht – Vendoo Production Updater 2.2
+
+## Behobener Defekt
+
+- `Vendoo.Updater.Worker.ps1`: `"$Label: ..."` zu `"${Label}: ..."` korrigiert.
+- `Vendoo.Updater.Worker.ps1`: `"$Title: ..."` zu `"${Title}: ..."` korrigiert.
+
+## Ursachenanalyse
+
+Der 2.1-Abnahmetest kontrollierte Textverträge, BOM, Fehlerkanal und Paketstruktur, führte aber keinen echten Windows-PowerShell-Parser aus. Die Formulierung im 2.1-Abnahmebericht war daher falsch.
+
+## Neue Abnahmegrenzen
+
+- plattformunabhängiger statischer Regressionstest für ungültige `$Variable:`-Verweise
+- lokale Parserprüfung mit `System.Management.Automation.Language.Parser` vor jedem Updaterstart
+- zweite Parserprüfung im Worker-Host vor dem Laden des Worker-Kerns
+- Windows-PowerShell-5.1-Parserjob in GitHub Actions
+- Release-Workflow von erfolgreichem Windows-Parserjob abhängig
+
+## Prüfgrenze dieser Paketumgebung
+
+In der Linux-Paketumgebung kann Windows PowerShell 5.1 nicht ausgeführt werden. Deshalb wird hier nichts als Windows-Parserlauf ausgegeben. Der exakte Windows-PowerShell-5.1-Parser läuft stattdessen zwingend lokal vor dem Start und im Windows-GitHub-Actions-Job.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_4.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_4.md
new file mode 100644
index 0000000..7e77c4c
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_4.md
@@ -0,0 +1,38 @@
+# Abnahmebericht – Vendoo Production Updater 2.4
+
+## Anlass
+
+Im Updater 2.3 wurde `gh auth login` im versteckten Worker ausgeführt. GitHub CLI benötigt für den Browser-Gerätefluss sichtbare Interaktion. Der Prozess wartete deshalb, während der Benutzer weder Gerätecode noch Browseraktion zuverlässig sehen konnte. Zusätzlich erzeugte der Downloadfortschritt zu viele identische Logeinträge.
+
+## Umsetzung
+
+- interaktiver GitHub-Login aus `Invoke-External` entfernt
+- eigenes sichtbares Anmeldefenster `github-login.cmd`
+- expliziter GitHub-Aufruf mit `--hostname github.com --git-protocol https --web --clipboard`
+- Hauptoberfläche bleibt geöffnet und pollt `gh auth status` still
+- automatische Fortsetzung nach erfolgreichem Login
+- eindeutiger Fehler bei geschlossenem oder fehlgeschlagenem Anmeldefenster
+- maximal zehn Minuten für die einmalige Anmeldung
+- Downloadfortschritt nur noch in 10-%-Stufen
+- Status-Polling ohne wiederholte Fehler- und Startmeldungen
+- Updater-Version 2.4.0 in Preflight, UI, Host, Worker und Manifest konsistent
+
+## Ausgeführte Prüfungen
+
+- Updater-2.4-Vertragsgate: bestanden
+- PowerShell-Static-Gate: 16 Dateien, bestanden
+- zusätzlicher PowerShell-Syntaxparse der sechs zentralen Updater-Skripte: ohne Fehlerknoten
+- JavaScript-/MJS-/CJS-Syntaxprüfung: 170 Dateien, bestanden
+- Git-Sicherheitsgate: 590 Dateien, bestanden
+- Git-Sicherheitsregression: bestanden
+- Git-Stagingregression: bestanden
+- Git-Ignore-Grenzprüfung: bestanden
+- Source-Root-Grenzprüfung: bestanden
+
+## Einschränkung der Prüfumgebung
+
+Windows PowerShell 5.1 und eine interaktive Windows-WPF-Sitzung stehen in der Linux-Prüfumgebung nicht zur Verfügung. Das Paket enthält deshalb weiterhin das echte Windows-PowerShell-Parser-Gate, das sämtliche PowerShell-Dateien auf dem Zielrechner vor dem Öffnen der Oberfläche prüft. Der GitHub-Gerätefluss selbst kann erst auf Windows gegen das echte Benutzerkonto abgeschlossen werden.
+
+## Sicherheitsgrenze
+
+Der gemeldete 2.3-Lauf endete während der GitHub-Anmeldung mit `cancelled`. Vor diesem Punkt wurden kein Release-Branch, kein Pull Request, kein Merge und kein Coolify-Deployment ausgeführt.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_5.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_5.md
new file mode 100644
index 0000000..12791bf
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_5.md
@@ -0,0 +1,16 @@
+# Abnahmebericht – Vendoo Production Updater 2.5
+
+## Korrektur
+
+Der Launcher wurde als minimaler ASCII/CRLF-Einstiegspunkt neu erstellt. Die Prüfung erfolgt bytegenau.
+
+## Harte Gates
+
+- keine UTF-8-BOM in `UPDATE_VENDOO.bat`
+- ausschließlich Bytes 0x00–0x7F
+- kein einzelnes LF ohne vorangestelltes CR
+- kein einzelnes CR ohne folgendes LF
+- absoluter Windows-PowerShell-Systempfad
+- keine `chcp`-Umschaltung
+- keine Übergabe von `PackageRoot`
+- CRLF-Vertrag in `.gitattributes` und `.editorconfig`
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_6.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_6.md
new file mode 100644
index 0000000..9f64942
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_6.md
@@ -0,0 +1,14 @@
+# Abnahmebericht – Vendoo Production Updater 2.6
+
+## Korrektur
+
+Die Coolify-Webhook-Abfrage des Desktop-Updaters wurde vollständig entfernt. Der Produktionsablauf verwendet nach dem Merge das bestehende Coolify Auto Deploy der GitHub-Verknüpfung.
+
+## Abnahmekriterien
+
+- kein `COOLIFY_DEPLOY_WEBHOOK_URL` im Worker
+- keine Secret-Eingabe und kein `gh secret set`
+- kein manueller `workflow run`
+- kontrolliertes Warten auf `/readyz`
+- exakte Versionsprüfung auf 1.43.0
+- Timeout mit verständlichem Auto-Deploy-Hinweis
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_8.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_8.md
new file mode 100644
index 0000000..9744ba5
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_8.md
@@ -0,0 +1,13 @@
+# Abnahmebericht – Vendoo Production Updater 2.8
+
+## Behobener Fehler
+
+Windows brach `npm run verify:all` im Gate `verify:initial-modules` mit `EBUSY` beim Löschen einer noch geöffneten temporären SQLite-Datenbank ab.
+
+## Korrektur
+
+- temporäre `better-sqlite3`-Verbindung wird explizit geschlossen
+- WAL wird vor dem Close kontrolliert ausgecheckt
+- Dateisystembereinigung besitzt Windows-taugliche Wiederholungen
+- neuer Regressionstest führt das betroffene Gate dreimal in getrennten Node-Prozessen aus
+- Updater-Gate verlangt den Cleanup-Vertrag als harte Releasebedingung
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_9.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_9.md
new file mode 100644
index 0000000..4120e7e
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_9.md
@@ -0,0 +1,24 @@
+# Abnahmebericht – Vendoo Production Updater 2.9
+
+## Anlass
+
+Unter Windows hielten mehrere Verifier ihre temporären `better-sqlite3`-Datenbanken offen. Dadurch scheiterte das Entfernen der Testordner mit `EBUSY`. Außerdem erzeugten Capability- und Architekturtests durch transitive Modulimporte eine echte `db/vendoo.db` im Quellbaum.
+
+## Korrektur
+
+- zentraler Runtime-Cleanup mit WAL-Checkpoint, `db.close()` und Windows-tauglichen Löschwiederholungen
+- Einladungs-, Initialmodul-, Capability- und Architekturtest laufen in isolierten Datenverzeichnissen
+- statischer Importgraph-Audit aller aktiven `verify:all`-Verifier bis `lib/db.mjs`
+- jeder datenbanknahe Verifier muss Testpfade, explizites Schließen und zentralen Temp-Cleanup nachweisen
+- dynamische Regression führt alle vier datenbanknahen Testklassen jeweils dreimal in getrennten Node-Prozessen aus
+- ein zweiter Testlauf erzeugt keine `db/vendoo.db` im Quellbaum
+
+## Abnahme
+
+- `npm run verify:all`: Exit-Code 0
+- Syntaxprüfung: 180 JavaScript-/MJS-/CJS-Dateien
+- SQLite-Cleanup-Audit: 29 aktive Verifier transitiv geprüft
+- Wiederholungsregression: 12 isolierte Testprozesse ohne offene SQLite-Datei oder Temp-Rest
+- Plattform: 18 Module und 41 Capabilities
+- Datenbankmigrationen und Integritätsprüfung: bestanden
+- Pull Request, Merge und Deployment bleiben bei jedem Testfehler gesperrt
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_1.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_1.md
new file mode 100644
index 0000000..e54795c
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_1.md
@@ -0,0 +1,48 @@
+# Abnahmebericht – Vendoo Production Updater 3.1
+
+## Anlass
+
+Die Updater-2.x-Reihe verwendete eine destruktive Kopierstrategie: Die geklonte Git-Arbeitskopie wurde geleert und anschließend über Ausschlussregeln aus dem Paket neu befüllt. Dadurch konnten Quell- und Laufzeitdaten nicht zuverlässig unterschieden werden. Der konkrete Fehler war das fehlende `db/schema.sql` im Auslieferungspaket beziehungsweise in der vorbereiteten Arbeitskopie.
+
+## Architekturkorrektur
+
+Updater 3.1 ersetzt diesen Mechanismus vollständig:
+
+- keine Leerung der geklonten Baseline,
+- SHA-256-Manifest aller Release-Dateien,
+- Pflichtdateien werden vor jedem Test geprüft,
+- Overlay statt Vollersetzung,
+- Löschungen ausschließlich explizit über `removedFiles`,
+- Hashprüfung vor und nach jedem Kopiervorgang,
+- Sitzungen aus 2.x werden verworfen,
+- separater v3-Release-Branch,
+- vollständiger Windows-Releasevertrag in GitHub Actions.
+
+## Pflichtdateien
+
+Der Release wird unter anderem blockiert, wenn eine dieser Dateien fehlt:
+
+- `db/schema.sql`
+- `lib/db.mjs`
+- `server.mjs`
+- `bootstrap.mjs`
+- `package.json`
+- `package-lock.json`
+- Updater Preflight, UI, Host und Worker
+
+## Prüfungen
+
+- Release-Manifest-Gate mit Manipulations- und Missing-File-Test
+- reales Overlay des vollständigen Release-Manifests auf eine Git-Baseline
+- Baseline-Erhalt ohne nicht deklarierte Löschungen
+- vollständige Vendoo-Gates in getrennten Blöcken
+- Datenbankmigrationen
+- SQLite-Handle-Cleanup
+- Module, Capabilities, Security, Identity, Katalog und Production Operations
+- Windows-PowerShell-Parservertrag
+- Windows-CI mit vollständigem `npm run verify:all`
+- manifestbasierter GitHub-Release-Builder
+
+## Sicherheitsgrenze
+
+Der Updater verändert `main`, Coolify und die Produktionsinstanz erst nach grünen lokalen Tests und grünen GitHub-Checks. `/app/data`, Datenbanken, Uploads, Secrets und Backups sind nicht Bestandteil des Release-Manifests.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_2.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_2.md
new file mode 100644
index 0000000..8d3108d
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_2.md
@@ -0,0 +1,54 @@
+# Abnahmebericht – Vendoo Production Updater 3.2
+
+## Anlass
+
+Die Updater-2.x-Reihe verwendete eine destruktive Kopierstrategie: Die geklonte Git-Arbeitskopie wurde geleert und anschließend über Ausschlussregeln aus dem Paket neu befüllt. Dadurch konnten Quell- und Laufzeitdaten nicht zuverlässig unterschieden werden. Der konkrete Fehler war das fehlende `db/schema.sql` im Auslieferungspaket beziehungsweise in der vorbereiteten Arbeitskopie.
+
+## Architekturkorrektur
+
+Updater 3.2 ersetzt diesen Mechanismus vollständig:
+
+- keine Leerung der geklonten Baseline,
+- SHA-256-Manifest aller Release-Dateien,
+- Pflichtdateien werden vor jedem Test geprüft,
+- Overlay statt Vollersetzung,
+- Löschungen ausschließlich explizit über `removedFiles`,
+- Hashprüfung vor und nach jedem Kopiervorgang,
+- Sitzungen aus 2.x werden verworfen,
+- separater v3-Release-Branch,
+- vollständiger Windows-Releasevertrag in GitHub Actions.
+
+## Pflichtdateien
+
+Der Release wird unter anderem blockiert, wenn eine dieser Dateien fehlt:
+
+- `db/schema.sql`
+- `lib/db.mjs`
+- `server.mjs`
+- `bootstrap.mjs`
+- `package.json`
+- `package-lock.json`
+- Updater Preflight, UI, Host und Worker
+
+## Prüfungen
+
+- Release-Manifest-Gate mit Manipulations- und Missing-File-Test
+- reales Overlay des vollständigen Release-Manifests auf eine Git-Baseline
+- Baseline-Erhalt ohne nicht deklarierte Löschungen
+- vollständige Vendoo-Gates in getrennten Blöcken
+- Datenbankmigrationen
+- SQLite-Handle-Cleanup
+- Module, Capabilities, Security, Identity, Katalog und Production Operations
+- Windows-PowerShell-Parservertrag
+- Windows-CI mit vollständigem `npm run verify:all`
+- manifestbasierter GitHub-Release-Builder
+
+## Sicherheitsgrenze
+
+Der Updater verändert `main`, Coolify und die Produktionsinstanz erst nach grünen lokalen Tests und grünen GitHub-Checks. `/app/data`, Datenbanken, Uploads, Secrets und Backups sind nicht Bestandteil des Release-Manifests.
+
+## Korrektur 3.2
+
+- `release-manifest.json` wird nach dem Payload als eigene Steuerdatei kopiert und bytegenau geprüft.
+- Das Zielrepository darf unveränderte Baseline-Dateien enthalten; manifestierte Dateien bleiben vollständig hashverbindlich.
+- Die Löschung der Steuerdatei über `removedFiles` ist verboten.
diff --git a/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_3.md b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_3.md
new file mode 100644
index 0000000..9fbd9e3
--- /dev/null
+++ b/docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_3.md
@@ -0,0 +1,9 @@
+# Abnahmebericht – Vendoo Production Updater 3.3
+
+## Behobener Fehler
+
+Der Windows-Lauf erreichte das letzte Gate, scheiterte aber im POSIX-Installer-Test. Ursache war eine nicht portable Annahme: Git Bash auf NTFS sollte nach `chmod 600` über `stat -c` exakt Modus `600` melden.
+
+## Korrektur
+
+Die POSIX-Rechteprüfung bleibt auf Linux/NAS/VPS strikt. Windows Git Bash prüft die Shell-Syntax; die funktionale Simulation, `.env`, Token, Compose-Aufrufe und Modus `0600` werden verpflichtend unter Linux geprüft. Fehlgeschlagene Assertions liefern vollständige Diagnoseausgaben.
diff --git a/docs/COOLIFY_UPDATE_1_42_0.md b/docs/COOLIFY_UPDATE_1_42_0.md
new file mode 100644
index 0000000..ddda259
--- /dev/null
+++ b/docs/COOLIFY_UPDATE_1_42_0.md
@@ -0,0 +1,108 @@
+# Coolify-Update auf Vendoo 1.42.0
+
+# Empfohlener automatischer Weg
+
+Für den normalen Updatefall nur das Release-ZIP entpacken und `UPDATE_VENDOO.bat` doppelklicken. GitHub-Anmeldung und Coolify-Webhook werden nur beim ersten Start abgefragt. Alle nachfolgenden Schritte dieser Datei sind der manuelle Notfall- und Kontrollweg.
+
+## Voraussetzungen
+
+- Repository: `Masterluke77/vendoo`
+- Produktionsbranch: `main`
+- Dockerfile-Build
+- interner Port: `8124`
+- Domain: `https://vendoo.flatlined.de`
+- persistentes Volume unverändert nach `/app/data`
+- genau eine Instanz
+- Rolling Updates aus
+- Auto Deploy aus
+- FLUX Studio aus
+
+## Vor dem Merge
+
+1. Releasebranch `release/1.42.0-production-operations` aus aktuellem `main` erstellen.
+2. Vollständigen Source-Stand übertragen; keine `.env`, Datenbank, Uploads, Backups, Logs, Master-Keys oder installierten Laufzeitmodule committen.
+3. `npm ci` und `npm run verify:all` ausführen.
+4. Draft-PR erstellen und GitHub Actions abwarten.
+5. Erst nach grünem CI und Review nach `main` mergen.
+
+## Zusätzliche Coolify-Variablen
+
+```env
+COOLIFY_DEPLOYMENT_STATUS_ENDPOINT=/api/v1/deployments/{deployment_id}
+VENDOO_DEPLOY_TIMEOUT_SECONDS=900
+VENDOO_DEPLOY_HEALTH_POLL_SECONDS=15
+VENDOO_BUILD_REVISION=<Git-Commit-SHA>
+VENDOO_COOLIFY_AUTO_DEPLOY=false
+```
+
+Die vorhandenen Produktionswerte müssen erhalten bleiben:
+
+```env
+NODE_ENV=production
+PORT=8124
+VENDOO_BIND_HOST=0.0.0.0
+PUBLIC_BASE_URL=https://vendoo.flatlined.de
+VENDOO_ALLOWED_HOSTS=vendoo.flatlined.de
+VENDOO_ALLOWED_ORIGINS=https://vendoo.flatlined.de
+VENDOO_TRUST_PROXY=true
+VENDOO_COOKIE_SECURE=true
+VENDOO_COOKIE_SAMESITE=lax
+VENDOO_INITIAL_DISABLED_MODULES=vendoo.flux-studio
+LOCAL_IMAGE_ENABLED=false
+LOCAL_IMAGE_ALLOW_REMOTE=false
+VENDOO_GITHUB_REPOSITORY=Masterluke77/vendoo
+VENDOO_GITHUB_BRANCH=main
+VENDOO_UPDATE_CHANNEL=stable
+VENDOO_BACKUP_BEFORE_DEPLOY=true
+VENDOO_DEPLOY_BACKUP_UPLOADS=false
+```
+
+## Coolify-Konfiguration prüfen
+
+1. Coolify öffnen und Projekt **Vendoo → Production → Application** wählen.
+2. Source muss die private GitHub-App, Repository `Masterluke77/vendoo` und Branch `main` verwenden.
+3. Build Pack **Dockerfile**, Base Directory `/`, Dockerfile `/Dockerfile`.
+4. Port `8124`; kein öffentliches Host-Port-Mapping.
+5. Domain `https://vendoo.flatlined.de`; HTTPS erzwingen.
+6. Volume `vendoo-data` unverändert nach `/app/data`.
+7. Replikate `1`, Rolling Updates aus, Auto Deploy aus.
+8. Healthcheck `/readyz` mit erwartetem HTTP 200.
+9. Speichern, aber das Volume niemals neu anlegen oder löschen.
+
+## Erstes kontrolliertes Deployment
+
+1. Nach dem Merge Coolify noch nicht blind mehrfach starten.
+2. Bestehendes Vendoo öffnen: **Administration → System → Updates**.
+3. Produktionscheck ausführen und Fehler vor dem Deployment beheben.
+4. Coolify-Provider, Trigger-Modus, Resource UUID, Repository und `main` prüfen.
+5. Webhook oder API-Token nur über die Vendoo-Oberfläche in den verschlüsselten Secret Store eintragen.
+6. **Version prüfen**. Eine neuere Zielversion wird nur akzeptiert, wenn das freigegebene Manifest SemVer, Kanal, HTTPS-Paket-URL und SHA-256 erfüllt.
+7. Zielversion `1.42.0` eintragen.
+8. Vorab-Backup aktiviert lassen. Uploads nur bei ausreichendem Backup-Speicher einschließen.
+9. **Coolify-Deployment starten** wählen und exakt `DEPLOY` eingeben.
+10. Der Auftrag muss nacheinander Backup, Backup-Verifikation und Coolify-Trigger protokollieren.
+11. Im API-Modus wird der Coolify-Status gepollt. Im Webhook-Modus nach dem tatsächlichen Coolify-Abschluss im Verlauf **Externen Abschluss bestätigen** wählen und exakt `CONFIRM` eingeben.
+12. Erfolg darf erst erscheinen, wenn `/readyz` grün ist und die laufende Version `1.42.0` meldet.
+
+## Abnahme nach Deployment
+
+- `/readyz` liefert HTTP 200 und Version `1.42.0`.
+- Login funktioniert.
+- Bestehende Benutzer, Artikel und Uploads sind vorhanden.
+- SQLite-Integrität ist `ok`.
+- Letztes Vorab-Backup ist als verifiziert sichtbar.
+- Deployment-Verlauf zeigt `succeeded` und nachvollziehbare Events.
+- FLUX Studio bleibt deaktiviert.
+- Produktionscheck hat keine Fehler.
+
+## Fehler und Rollback
+
+Bei `rollback_required` nicht erneut deployen, bevor die Ursache geprüft wurde.
+
+1. Coolify-Build- und Startlogs sichern.
+2. `/readyz`, Zielversion und Volume-Mount prüfen.
+3. In Coolify den letzten funktionierenden Commit beziehungsweise das vorige Image redeployen.
+4. Dasselbe Volume `/app/data` weiterverwenden.
+5. Volume niemals löschen oder neu initialisieren.
+6. Nach erfolgreichem Rollback Login, Artikel, Uploads, SQLite und `/readyz` prüfen.
+7. Den blockierten Vendoo-Auftrag erst danach mit **Prüfung abschließen** und exakt `CONFIRM` dokumentiert schließen.
diff --git a/docs/EIN_KLICK_UPDATE_1_42_0.md b/docs/EIN_KLICK_UPDATE_1_42_0.md
new file mode 100644
index 0000000..84bd495
--- /dev/null
+++ b/docs/EIN_KLICK_UPDATE_1_42_0.md
@@ -0,0 +1,30 @@
+# Vendoo 1.42.0 – Ein-Klick-Update
+
+## So benutzt du es
+
+1. ZIP vollständig in einen neuen Ordner entpacken.
+2. `UPDATE_VENDOO.bat` doppelklicken.
+3. Nur beim ersten Start GitHub im Browser anmelden.
+4. Nur beim ersten Start den Coolify-Deploy-Webhook einfügen.
+5. Danach läuft alles automatisch.
+
+## Automatischer Ablauf
+
+- Git, Node.js LTS und GitHub CLI werden bei Bedarf über `winget` installiert.
+- Das private Repository `Masterluke77/vendoo` wird frisch aus `main` geklont.
+- Ein isolierter Release-Branch wird angelegt.
+- Nur sichere Source-Dateien werden übernommen.
+- `.env`, Datenbanken, Uploads, Backups, Logs und Schlüssel bleiben ausgeschlossen.
+- `npm ci` und `npm run verify:all` laufen vollständig.
+- Der Pull Request wird erstellt, geprüft und nach `main` gemergt.
+- GitHub Actions startet den Coolify-Deploy-Webhook.
+- Erfolg wird erst gemeldet, wenn `/readyz` HTTP 200 und exakt Version `1.42.0` liefert.
+- Abschließend wird `/healthz` geprüft.
+
+## Sicherheit
+
+Der Coolify-Webhook wird nicht in das Paket oder Repository geschrieben. Er wird nur einmalig als verschlüsseltes GitHub Actions Secret `COOLIFY_DEPLOY_WEBHOOK_URL` gespeichert.
+
+Das persistente Coolify-Volume `/app/data` wird weder ersetzt noch gelöscht. Parallele Produktionsdeployments werden durch GitHub Actions `concurrency` verhindert.
+
+Lokale Protokolle liegen unter `logs/update-1.42.0-<Zeitstempel>.log`. Der Ordner `logs` wird vom Git-Staging ausgeschlossen.
diff --git a/docs/PRODUCTION_UPDATER_2_0.md b/docs/PRODUCTION_UPDATER_2_0.md
new file mode 100644
index 0000000..047f678
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_0.md
@@ -0,0 +1,22 @@
+# Vendoo Production Updater 2.0
+
+Der bisherige Hotfix-Updater wurde vollständig ersetzt.
+
+## Eigenschaften
+
+- moderne, nüchterne WPF-Oberfläche ohne dekorative Spielereien
+- Fenster bleibt bei Erfolg, Abbruch und Fehler geöffnet
+- sichtbare zehnstufige Prozessanzeige und technisches Live-Protokoll
+- verwaltete portable GitHub CLI statt Winget-Abhängigkeit
+- offizieller GitHub-Download mit SHA-256-Abgleich gegen die Release-Prüfsummen
+- feste Zeitlimits und kontrollierter Prozessabbruch inklusive Prozessbaum
+- sichere Coolify-Eingabe ohne Klartext im Log oder in der Kommandozeile
+- persistenter Wiederaufnahmepunkt unter `%LOCALAPPDATA%\Vendoo\Updater`
+- idempotenter Ablauf: nach Merge- oder Deploymentfehlern wird nicht blind neu begonnen
+- kein automatisches Schließen der Oberfläche
+
+## Start
+
+`UPDATE_VENDOO.bat` doppelklicken.
+
+Eine GitHub-Browseranmeldung und die Eingabe des Coolify-Webhooks sind nur erforderlich, wenn sie auf diesem Rechner beziehungsweise im Repository noch fehlen.
diff --git a/docs/PRODUCTION_UPDATER_2_1.md b/docs/PRODUCTION_UPDATER_2_1.md
new file mode 100644
index 0000000..8a9a351
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_1.md
@@ -0,0 +1,39 @@
+# Vendoo Production Updater 2.1
+
+## Ziel
+
+Production Updater 2.1 ersetzt den direkten, nicht ausreichend überwachten Worker-Start aus 2.0. Die Oberfläche besitzt jetzt bereits vor dem Worker-Start einen festen Laufzeitordner, einen bekannten Protokollpfad und einen initialen Status.
+
+## Worker-Host
+
+Die Oberfläche startet ausschließlich `Vendoo.Updater.Host.ps1`. Dieser kleine Bootstrap-Host:
+
+- prüft alle Übergabepfade,
+- schreibt vor dem Laden des Update-Kerns einen Status,
+- fängt Lade-, Parser- und Initialisierungsfehler des Worker-Kerns ab,
+- schreibt die vollständige PowerShell-Ausnahme inklusive Datei und Zeile,
+- garantiert einen terminalen Status,
+- verliert weder Standardausgabe noch Standardfehler.
+
+Der eigentliche Update-Kern läuft weiter in `Vendoo.Updater.Worker.ps1`, beendet aber nicht mehr eigenmächtig den PowerShell-Host. Erfolg, Abbruch und Fehler werden ausschließlich über den atomar geschriebenen Statusvertrag gemeldet.
+
+## Diagnose
+
+Jeder Lauf besitzt einen eigenen Ordner unter:
+
+```text
+%LOCALAPPDATA%\Vendoo\Updater\runtime\<Zeitstempel>
+```
+
+Darin liegen mindestens:
+
+- `status.json`
+- `events.ndjson`
+- `updater.log`
+- bei einem Host-Absturz zusätzlich `worker.stdout.log` und `worker.stderr.log`
+
+Die Oberfläche zeigt den Protokollnamen sofort an. Mit **Diagnoseordner** kann der vollständige Laufzeitordner geöffnet werden. Der Protokollpfad kann nicht mehr leer sein.
+
+## Sicherheitsgrenzen
+
+Die Änderungen betreffen ausschließlich den Updater-Unterbau. Vendoo 1.43.0, `/app/data`, Datenbanken, Uploads, Secrets und Coolify-Konfiguration werden dadurch nicht zurückgesetzt oder gelöscht.
diff --git a/docs/PRODUCTION_UPDATER_2_2.md b/docs/PRODUCTION_UPDATER_2_2.md
new file mode 100644
index 0000000..4e9c8c0
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_2.md
@@ -0,0 +1,25 @@
+# Vendoo Production Updater 2.2
+
+## Anlass
+
+Updater 2.1 enthielt zwei echte Windows-PowerShell-Parserfehler. In doppelt quotierten Zeichenketten standen `"$Label: ..."` und `"$Title: ..."`. Windows PowerShell interpretiert den Doppelpunkt als Teil eines qualifizierten Variablenverweises. Korrekt sind `"${Label}: ..."` und `"${Title}: ..."`.
+
+Der bisherige JavaScript-Vertrag prüfte nur das Vorhandensein bestimmter Textbausteine. Er war kein echter PowerShell-Parser und durfte deshalb nicht als solcher bezeichnet werden.
+
+## Neue harte Gates
+
+1. `UPDATE_VENDOO.bat` führt vor dem Start der Oberfläche synchron `Vendoo.Updater.Preflight.ps1` aus.
+2. Die Preflight-Prüfung verwendet den echter Windows-PowerShell-5.1-Parser über `System.Management.Automation.Language.Parser`.
+3. UI, Host, Worker und Launcher müssen vollständig parserfehlerfrei sein, bevor die Oberfläche startet.
+4. Der Worker-Host parst den Worker unmittelbar vor dem Laden erneut.
+5. `verify-powershell-static.mjs` blockiert die konkrete Variablen-Doppelpunkt-Fehlerklasse bereits auf Linux und während des Paketbaus.
+6. GitHub Actions besitzt einen eigenen `windows-latest`-Job mit echtem Windows-PowerShell-5.1-Parser.
+7. Release-Pakete hängen vom erfolgreichen Windows-Parser-Job ab.
+
+## Fehlerverhalten
+
+Schlägt die lokale Parserprüfung fehl, startet die Oberfläche nicht. Stattdessen bleiben ein sichtbarer Fehlerdialog, ein Konsolenhinweis und `logs/updater-preflight.log` erhalten. Damit kann kein syntaktisch defekter Worker mehr bis zum Worker-Host gelangen.
+
+## Unveränderte Sicherheitsgrenzen
+
+Vendoo 1.43.0, `/app/data`, Datenbanken, Uploads, Backups, Secrets und die Coolify-Konfiguration werden durch diese Änderung nicht zurückgesetzt oder gelöscht.
diff --git a/docs/PRODUCTION_UPDATER_2_3.md b/docs/PRODUCTION_UPDATER_2_3.md
new file mode 100644
index 0000000..45a7e2b
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_3.md
@@ -0,0 +1,19 @@
+# Vendoo Production Updater 2.3
+
+## Pfadvertrag
+
+Version 2.3 entfernt die fehleranfällige Übergabe von `%~dp0` als PowerShell-Parameter. Ein mit Backslash endender Batch-Pfad kann vor einem schließenden Anführungszeichen als Bestandteil des Arguments interpretiert werden und dadurch ein illegales `"` in den Pfad einschleusen.
+
+Der Paketpfad wird nun ausschließlich aus `$PSScriptRoot` des ausgelieferten Preflight-Skripts abgeleitet, mit `Resolve-Path` kanonisiert und vor jeder Dateisystemoperation validiert. Oberfläche und Worker verwenden denselben Vertrag.
+
+## Startverhalten
+
+- `UPDATE_VENDOO.bat` verwendet `pushd` und relative Skriptpfade.
+- Es wird kein Paketroot mehr über die Kommandozeile übergeben.
+- Preflight und GUI laufen synchron; Exit-Codes bleiben sichtbar.
+- Bei Fehlern bleibt die Konsole geöffnet.
+- Das Preflight-Protokoll liegt unter `logs/updater-preflight.log`.
+
+## Regression
+
+Das Release-Gate verbietet `-PackageRoot "%~dp0"`, verlangt `param()` im Preflight und prüft die kanonische Root-Ableitung über `$PSScriptRoot`, `Resolve-Path` und `GetFullPath`.
diff --git a/docs/PRODUCTION_UPDATER_2_4.md b/docs/PRODUCTION_UPDATER_2_4.md
new file mode 100644
index 0000000..87d67b5
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_4.md
@@ -0,0 +1,30 @@
+# Vendoo Production Updater 2.4
+
+## Ziel
+
+Version 2.4 ersetzt den unsichtbaren interaktiven GitHub-Login aus 2.3. Ein interaktiver Gerätefluss darf nicht in einem versteckten Worker laufen.
+
+## GitHub-Anmeldung
+
+Ist noch kein GitHub-Konto angemeldet, öffnet der Updater ein sichtbares Anmeldefenster. Dort zeigt GitHub CLI den einmaligen Gerätecode an, kopiert ihn mit `--clipboard` in die Zwischenablage und öffnet den Webbrowser. Die Vendoo-Oberfläche bleibt geöffnet und prüft den Status still im Hintergrund. Nach erfolgreicher Anmeldung wird automatisch fortgefahren.
+
+Der Ablauf verwendet:
+
+```text
+gh auth login --hostname github.com --git-protocol https --web --clipboard
+```
+
+Die Anmeldung läuft nicht mehr über den versteckten Worker-Prozess. Ein Abbruch oder Fehler bleibt sichtbar und führt zu einem klaren, wiederholbaren Fehlerzustand.
+
+## Downloadstatus
+
+Der Download der portablen GitHub CLI schreibt nur noch sinnvolle 10-%-Fortschrittsstufen. Wiederholte Meldungen für dieselbe Megabyte-Grenze und die bisherige Logflut sind ausgeschlossen.
+
+## Weiterhin gültige Schutzregeln
+
+- echter Windows-PowerShell-5.1-Parser vor dem Start
+- kanonische Root-Pfadermittlung
+- persistenter Laufzeit- und Diagnoseordner
+- keine Änderung an `main` vor grünen Tests
+- kein Produktions-Erfolg ohne exakte Zielversion
+- kein Zugriff auf oder Löschen von `/app/data`
diff --git a/docs/PRODUCTION_UPDATER_2_5.md b/docs/PRODUCTION_UPDATER_2_5.md
new file mode 100644
index 0000000..f689d87
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_5.md
@@ -0,0 +1,20 @@
+# Vendoo Production Updater 2.5
+
+## Zweck
+
+Version 2.5 ersetzt den fehlerhaft ausgelieferten CMD-Launcher aus 2.4. Die PowerShell- und Vendoo-Logik bleibt unverändert; korrigiert wurde der Windows-Einstiegspunkt.
+
+## Verbindlicher Launcher-Vertrag
+
+- `UPDATE_VENDOO.bat` ist reines 7-Bit-ASCII.
+- Die Datei besitzt keine BOM.
+- Jede Zeile endet mit Windows-CRLF.
+- Der Launcher enthält keine Umlaute und keinen `chcp`-Wechsel.
+- Windows PowerShell wird über den absoluten Systempfad gestartet.
+- Fehlerzustände bleiben mit `pause` sichtbar.
+- `.gitattributes` und `.editorconfig` erzwingen CRLF für BAT/CMD.
+- Das Binär-Gate prüft die tatsächlichen Bytes und nicht nur gelesenen Text.
+
+## Ursache des 2.4-Fehlers
+
+Die BAT war UTF-8 mit Unix-LF-Zeilenenden. `cmd.exe` interpretierte dadurch mehrere Zeilen beschädigt und verlor sichtbare Anfangszeichen von Befehlen.
diff --git a/docs/PRODUCTION_UPDATER_2_6.md b/docs/PRODUCTION_UPDATER_2_6.md
new file mode 100644
index 0000000..5e708ff
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_6.md
@@ -0,0 +1,22 @@
+# Vendoo Production Updater 2.6
+
+## Ziel
+
+Updater 2.6 entfernt die unnötige Coolify-Webhook-Abfrage vollständig.
+
+Nach dem kontrollierten Merge nach `main` nutzt Vendoo die bereits bestehende GitHub-Verknüpfung von Coolify und wartet auf das automatische Deployment. Der Updater prüft anschließend `/readyz` und akzeptiert den Lauf nur, wenn exakt Vendoo 1.43.0 gemeldet wird.
+
+## Voraussetzungen
+
+- Die Vendoo-Anwendung ist in Coolify mit `Masterluke77/vendoo` und Branch `main` verbunden.
+- In Coolify ist für die Anwendung **Auto Deploy** aktiviert.
+- `https://vendoo.flatlined.de/readyz` ist öffentlich erreichbar.
+
+## Verhalten
+
+- keine Eingabe eines Coolify-Webhooks
+- kein GitHub Secret `COOLIFY_DEPLOY_WEBHOOK_URL`
+- kein manuell gestarteter Deployment-Workflow
+- Wartezeit maximal 15 Minuten
+- Statusmeldung höchstens alle 30 Sekunden
+- eindeutiger Hinweis auf Auto Deploy, falls die Zielversion nicht erscheint
diff --git a/docs/PRODUCTION_UPDATER_2_8.md b/docs/PRODUCTION_UPDATER_2_8.md
new file mode 100644
index 0000000..31d8dca
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_8.md
@@ -0,0 +1,18 @@
+# Vendoo Production Updater 2.8
+
+## Ziel
+
+Updater 2.8 behebt einen Windows-spezifischen SQLite-Lifecycle-Fehler im vollständigen Release-Test.
+
+`verify-initial-disabled-modules-1.41.2.mjs` lud den Plattformkernel und öffnete dadurch `better-sqlite3`, löschte den temporären Datenordner anschließend aber ohne die Datenbank explizit zu schließen. Linux tolerierte das; Windows blockierte `vendoo.db` mit `EBUSY`.
+
+## Neuer Ressourcenvertrag
+
+- explizites `wal_checkpoint(TRUNCATE)`
+- explizites `db.close()` vor jeder Temp-Bereinigung
+- kurze Freigabephase nach dem synchronen Close
+- `rmSync` mit 20 Wiederholungen und 100 ms Wartezeit für kurzzeitige Windows-Dateisperren
+- Cleanup-Fehler werden mit Pfad und Fehlercode gemeldet
+- drei isolierte Wiederholungsläufe prüfen, dass kein Temp-Ordner zurückbleibt
+
+Der Fehler tritt vor Pull Request, Merge und Coolify-Deployment auf. Produktivdaten waren dadurch nicht betroffen.
diff --git a/docs/PRODUCTION_UPDATER_2_9.md b/docs/PRODUCTION_UPDATER_2_9.md
new file mode 100644
index 0000000..c38f014
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_2_9.md
@@ -0,0 +1,11 @@
+# Vendoo Production Updater 2.9
+
+Updater 2.9 behebt die Windows-Dateisperren in allen aktiven Verifiern systematisch.
+
+## Änderungen
+
+- Zentraler SQLite-Test-Cleanup mit WAL-Checkpoint, `db.close()` und Windows-tauglichen Löschwiederholungen.
+- Einladungs-, Initialmodul-, Capability- und Architekturtest verwenden denselben Cleanup-Vertrag.
+- Statischer Importgraph-Audit prüft alle aktiven `verify:all`-Verifier auf transitive `lib/db.mjs`-Nutzung.
+- Dynamische Regression führt alle vier datenbanknahen Testklassen jeweils dreimal in getrennten Node-Prozessen aus.
+- Kein Pull Request, Merge oder Deployment bei fehlgeschlagenem Testlauf.
diff --git a/docs/PRODUCTION_UPDATER_3_1.md b/docs/PRODUCTION_UPDATER_3_1.md
new file mode 100644
index 0000000..f0e2208
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_3_1.md
@@ -0,0 +1,40 @@
+# Vendoo Production Updater 3.1
+
+## Architekturwechsel
+
+Updater 3.1 verwendet keine Ausschlusslisten-Kopie und leert die geklonte `main`-Arbeitskopie nicht mehr.
+
+Der Release enthält `release-manifest.json` mit:
+
+- jeder auszuliefernden Quelldatei,
+- Dateigröße,
+- SHA-256-Prüfsumme,
+- verbindlichen Pflichtdateien,
+- ausschließlich expliziten Löschungen in `removedFiles`.
+
+## Anwendung
+
+1. `main` wird in einen isolierten Arbeitsordner geklont.
+2. Das gesamte Paket wird gegen `release-manifest.json` geprüft.
+3. Sichere Paketdateien, die nicht im Manifest stehen, blockieren das Update.
+4. Manipulierte oder fehlende Dateien blockieren das Update.
+5. Der Release wird als Overlay angewendet; bestehende Baseline-Dateien bleiben erhalten.
+6. Nur Einträge in `removedFiles` werden gelöscht.
+7. Jede kopierte Datei wird im Ziel erneut per SHA-256 geprüft.
+8. Erst danach laufen `npm ci` und `npm run verify:all`.
+
+## Pflichtdateien
+
+Unter anderem müssen immer vorhanden sein:
+
+- `db/schema.sql`
+- `lib/db.mjs`
+- `package.json`
+- `package-lock.json`
+- `server.mjs`
+- `bootstrap.mjs`
+- Updater-Preflight, UI, Host und Worker
+
+## Sitzungen
+
+Sitzungsstände der Updater-2.x-Reihe werden nicht übernommen. Updater 3.1 beginnt mit einem neuen Release-Branch und einer neuen, versionsgebundenen Sitzung.
diff --git a/docs/PRODUCTION_UPDATER_3_2.md b/docs/PRODUCTION_UPDATER_3_2.md
new file mode 100644
index 0000000..1b2f0bd
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_3_2.md
@@ -0,0 +1,48 @@
+# Vendoo Production Updater 3.2
+
+## Architekturwechsel
+
+Updater 3.2 verwendet keine Ausschlusslisten-Kopie und leert die geklonte `main`-Arbeitskopie nicht mehr.
+
+Der Release enthält `release-manifest.json` mit:
+
+- jeder auszuliefernden Quelldatei,
+- Dateigröße,
+- SHA-256-Prüfsumme,
+- verbindlichen Pflichtdateien,
+- ausschließlich expliziten Löschungen in `removedFiles`.
+
+## Anwendung
+
+1. `main` wird in einen isolierten Arbeitsordner geklont.
+2. Das gesamte Paket wird gegen `release-manifest.json` geprüft.
+3. Sichere Paketdateien, die nicht im Manifest stehen, blockieren das Update.
+4. Manipulierte oder fehlende Dateien blockieren das Update.
+5. Der Release wird als Overlay angewendet; bestehende Baseline-Dateien bleiben erhalten.
+6. Nur Einträge in `removedFiles` werden gelöscht.
+7. Jede kopierte Datei wird im Ziel erneut per SHA-256 geprüft.
+8. Erst danach laufen `npm ci` und `npm run verify:all`.
+
+## Pflichtdateien
+
+Unter anderem müssen immer vorhanden sein:
+
+- `db/schema.sql`
+- `lib/db.mjs`
+- `package.json`
+- `package-lock.json`
+- `server.mjs`
+- `bootstrap.mjs`
+- Updater-Preflight, UI, Host und Worker
+
+## Sitzungen
+
+Sitzungsstände der Updater-2.x-Reihe werden nicht übernommen. Updater 3.2 beginnt mit einem neuen Release-Branch und einer neuen, versionsgebundenen Sitzung.
+
+## Steuerdatei-Vertrag 3.2
+
+`release-manifest.json` ist kein selbstgehashter Payload-Eintrag. Der Applier kopiert es nach erfolgreicher Payload-Prüfung als separates Steuerartefakt bytegenau in die Git-Arbeitskopie. Verifier in einer Git-Baseline dürfen zusätzliche unveränderte Dateien sehen, müssen aber jede manifestierte Datei und ihre SHA-256-Prüfsumme bestätigen.
+
+## Fehlerdarstellung
+
+Bei fehlgeschlagenen Prozessen priorisiert der Worker `stderr` als **Fehlerausgabe** und zeigt `stdout` nur gekürzt als ergänzende **letzte Standardausgabe**. Dadurch bleibt die eigentliche Ursache im Statusfenster sichtbar.
diff --git a/docs/PRODUCTION_UPDATER_3_3.md b/docs/PRODUCTION_UPDATER_3_3.md
new file mode 100644
index 0000000..729773b
--- /dev/null
+++ b/docs/PRODUCTION_UPDATER_3_3.md
@@ -0,0 +1,17 @@
+# Vendoo Production Updater 3.3
+
+## Zweck
+
+Updater 3.3 behält das manifestbasierte Overlay von 3.2 bei und korrigiert das letzte plattformspezifische Release-Gate.
+
+## Installer-Shell-Portabilität
+
+- Unter Linux, NAS und VPS muss `.env` nach der Erzeugung weiterhin exakt POSIX-Modus `0600` besitzen.
+- Unter Windows prüft Git Bash ausschließlich die Syntax von `setup.sh` und dem funktionalen Shell-Test. Die vollständige Docker-/NAS-/VPS-Simulation läuft im verpflichtenden Linux-CI-Gate, wo POSIX-Rechte real abgebildet werden.
+- Der Shell-Test erkennt MINGW, MSYS und CYGWIN ausdrücklich.
+- Jede fehlgeschlagene Assertion zeigt die betroffene Ausgabe- oder Konfigurationsdatei vollständig an.
+- Der Node-Wrapper reicht `stdout` und `stderr` im Fehlertext weiter.
+
+## Unveränderte Sicherheitsgrenzen
+
+Das SHA-256-Manifest, die bytegeprüfte Steuerdatei, explizite Löschungen, GitHub-PR-/Merge-Gates, Coolify Auto Deploy und `/readyz` bleiben verpflichtend.
diff --git a/docs/RELEASE_1_42_0_PRODUCTION_OPERATIONS.md b/docs/RELEASE_1_42_0_PRODUCTION_OPERATIONS.md
new file mode 100644
index 0000000..abbfd96
--- /dev/null
+++ b/docs/RELEASE_1_42_0_PRODUCTION_OPERATIONS.md
@@ -0,0 +1,50 @@
+# Vendoo 1.42.0 – Production Operations & Controlled Update Completion
+
+## Ziel
+
+Version 1.42.0 vervollständigt den sicheren Coolify-Produktionsbetrieb. Ein HTTP-Erfolg des Deploy-Triggers gilt nicht mehr als erfolgreiches Deployment. Ein Auftrag durchläuft persistent gespeicherte Zustände und wird erst nach bestätigtem Deployment, erfolgreicher Readiness und passender Zielversion abgeschlossen.
+
+## Neue Betriebsfunktionen
+
+- Produktionsstatus mit Version, Build-Revision, Provider, öffentlicher URL, Readiness, SQLite-Status, Speicherbelegung, letztem verifiziertem Backup, letztem Deployment und FLUX-Status.
+- Produktions-Selbstprüfung für HTTPS, Cookies, Trust Proxy, Host/Origin, Persistenz, Schreibrechte, SQLite, Backupziel, FLUX, Auto Deploy und Coolify-Secrets.
+- Persistente Deployment-State-Machine mit Ereignisverlauf.
+- Idempotency-Key und Sperre gegen parallele Aufträge.
+- Verifiziertes Vorab-Backup vor dem Coolify-Trigger.
+- Coolify-API-Statusabfrage oder kontrollierter Webhook-Modus mit exakter Bestätigung `CONFIRM`.
+- `/readyz`- und Zielversionsprüfung vor dem Status `succeeded`.
+- `rollback_required` bei Timeout oder Coolify-Fehler; neue Aufträge bleiben bis zur dokumentierten Prüfung gesperrt.
+- Einladungsübersicht, 48-Stunden-Ablauf, erneutes Senden und Widerruf; Standardrolle ist `viewer`.
+
+## Additive Datenbankmigration
+
+Neu angelegt werden ausschließlich:
+
+- `deployment_runs`
+- `deployment_events`
+- `backup_verifications`
+- `production_checks`
+
+Bestehende Tabellen, Nutzer, Artikel, Uploads, Einstellungen, Secrets, Backups und Module werden nicht gelöscht oder zurückgesetzt.
+
+## Neue administrative API-Verträge
+
+- `GET /api/admin/deployment`
+- `PUT /api/admin/deployment`
+- `POST /api/admin/deployment/test`
+- `POST /api/admin/deployment/updates/check`
+- `POST /api/admin/deployment/trigger`
+- `GET /api/admin/deployment/runs`
+- `GET /api/admin/deployment/runs/:id`
+- `POST /api/admin/deployment/runs/:id/refresh`
+- `POST /api/admin/deployment/runs/:id/confirm`
+- `GET|POST /api/admin/deployment/production-check`
+- `GET /api/admin/users/invitations`
+- `POST /api/admin/users/invitations/:id/resend`
+- `DELETE /api/admin/users/invitations/:id`
+
+Alle schreibenden Routen bleiben CSRF-geschützt, rollenbasiert und auditierbar. Secretwerte werden nicht zurückgegeben.
+
+## Sicherheitsgrenzen
+
+Vendoo 1.42.0 besitzt weiterhin keinen Docker-Socket und führt im Produktivcontainer weder `git pull`, `npm install`, Docker-Kommandos noch eine Selbstüberschreibung aus. Coolify bleibt für Build, Containerwechsel und Rollback verantwortlich.
diff --git a/docs/RELEASE_1_43_0_MODULE_NAVIGATION_LISTING_STUDIO_UPDATER_UI.md b/docs/RELEASE_1_43_0_MODULE_NAVIGATION_LISTING_STUDIO_UPDATER_UI.md
new file mode 100644
index 0000000..c1d481e
--- /dev/null
+++ b/docs/RELEASE_1_43_0_MODULE_NAVIGATION_LISTING_STUDIO_UPDATER_UI.md
@@ -0,0 +1,12 @@
+# Vendoo 1.43.0
+
+## Schwerpunkt
+
+- Modulstatus und Navigation sind verbindlich gekoppelt.
+- Das optionale Produktbild Studio ist standardmäßig deaktiviert.
+- Der Listing-Generator besitzt eine dauerhaft sichtbare Aktionsleiste.
+- `UPDATE_VENDOO.bat` startet eine grafische Statusanzeige mit Live-Protokoll.
+
+## Sicherheitsgrenzen
+
+Der Updater verändert weiterhin keine produktiven Daten unter `/app/data`, überträgt keine `.env`-Dateien und meldet erst nach erfolgreicher `/readyz`-Zielversionsprüfung Erfolg.
diff --git a/docs/RESTORE_RUNBOOK_1_42_0.md b/docs/RESTORE_RUNBOOK_1_42_0.md
new file mode 100644
index 0000000..de63129
--- /dev/null
+++ b/docs/RESTORE_RUNBOOK_1_42_0.md
@@ -0,0 +1,44 @@
+# Vendoo 1.42.0 – Restore- und Notfall-Runbook
+
+## Grundsatz
+
+Ein Restore ist keine normale Weboperation. Das laufende Vendoo darf seine geöffnete SQLite-Datenbank nicht im Hintergrund überschreiben. Die Weboberfläche prüft und staged ein Backup; das tatsächliche Einspielen erfolgt im Wartungsfenster bei gestoppter Anwendung.
+
+## Restore-Dry-Run
+
+1. **Administration → System → Backup & Restore** öffnen.
+2. Gewünschtes Backup zuerst mit **Prüfen** validieren.
+3. SHA-256, Manifest, Dateigröße und SQLite-Integrität müssen stimmen.
+4. Für ein extern bereitgestelltes ZIP **Wiederherstellung prüfen und vorbereiten** verwenden.
+5. Vendoo erstellt vor dem Staging automatisch ein zusätzliches Sicherheitsbackup.
+6. Fehlerhafte, unvollständige oder verbotene Pakete nicht manuell entpacken.
+
+## Wartungsrestore
+
+1. Wartungsfenster ankündigen und Benutzer abmelden.
+2. Coolify-Anwendung stoppen; keine zweite Instanz starten.
+3. Vollständiges Volume `/app/data` zusätzlich auf Host-/NAS-Ebene sichern.
+4. Besonders zusammen sichern:
+   - `/app/data/db/vendoo.db` samt möglicher `-wal`/`-shm`-Dateien
+   - `/app/data/uploads`
+   - `/app/data/config/master.key`
+   - `/app/data/config/secrets.enc.json`
+   - `/app/data/config/vendoo.env`
+   - `/app/data/config/modules-state.json`
+5. Nur das verifizierte, vorbereitete Restore anwenden.
+6. Eigentümer und Schreibrechte des nicht privilegierten Containers erhalten.
+7. Anwendung mit exakt einer Instanz starten.
+8. `/readyz`, SQLite-Integrität, Login, Benutzer, Artikel, Uploads, Module und Audit prüfen.
+
+## Reiner Anwendungsrollback
+
+Bei fehlerhaftem Code-Release normalerweise keinen Datenrestore durchführen. In Coolify die vorherige Revision beziehungsweise das vorherige Image redeployen und dasselbe `/app/data`-Volume verwenden.
+
+## Verboten
+
+- `/app/data` löschen
+- neues leeres Volume anhängen
+- zwei schreibende Container auf demselben SQLite-Volume starten
+- die Datenbank bei laufendem Vendoo ersetzen
+- `master.key` neu erzeugen, solange bestehende verschlüsselte Secrets benötigt werden
+- ungeprüfte ZIP-Dateien direkt in das Volume kopieren
diff --git a/docs/UPDATER_HOTFIX_1_43_0_H1.md b/docs/UPDATER_HOTFIX_1_43_0_H1.md
new file mode 100644
index 0000000..2cb70ef
--- /dev/null
+++ b/docs/UPDATER_HOTFIX_1_43_0_H1.md
@@ -0,0 +1,14 @@
+# Vendoo 1.43.0 – Updater-Hotfix H1
+
+## Behoben
+
+- Endloses Warten direkt nach „Node.js LTS gefunden“.
+- Falsche Erkennung des Windows-App-Execution-Alias als echte Node.js-Installation.
+- Node.js-Versionsprüfung besitzt jetzt ein hartes Timeout von 20 Sekunden.
+- Eine blockierte oder defekte Node.js-LTS-Installation wird über Winget automatisch repariert.
+- Der grafische Updater zeigt Laufzeit und Zeit seit der letzten Statusmeldung.
+- PowerShell- und Prozessausgabe verwenden konsistent UTF-8; deutsche Umlaute werden korrekt dargestellt.
+
+## Sicherheitsgrenze
+
+Bis zum Abschluss der lokalen Prüfungen wird weder nach `main` gemergt noch ein Coolify-Deployment gestartet.
diff --git a/docs/UPDATER_HOTFIX_1_43_0_H2.md b/docs/UPDATER_HOTFIX_1_43_0_H2.md
new file mode 100644
index 0000000..0bd34be
--- /dev/null
+++ b/docs/UPDATER_HOTFIX_1_43_0_H2.md
@@ -0,0 +1,16 @@
+# Vendoo 1.43.0 – Updater Hotfix H2
+
+## Behobener Fehler
+
+Nach einer erfolgreichen Erstinstallation der GitHub CLI brach der Ein-Klick-Updater mit der Aufforderung ab, `UPDATE_VENDOO.bat` erneut zu starten. Ursache war, dass die laufende Windows-PowerShell-Sitzung den neu installierten Pfad noch nicht zuverlässig aufgelöst hatte.
+
+## Neue Funktionsweise
+
+- Der Updater aktualisiert den Prozess-PATH nach der Winget-Installation.
+- Er wartet kontrolliert bis zu 30 Sekunden auf die Registrierung der Programmdatei.
+- Zusätzlich werden die offiziellen Installationspfade der GitHub CLI direkt geprüft.
+- Gefundene Programme werden über ihren absoluten Pfad ausgeführt.
+- Nach der Installation läuft derselbe Updatevorgang ohne zweiten Doppelklick weiter.
+- Ein echter Abbruch erfolgt nur, wenn die installierte Programmdatei auch über die bekannten Pfade nicht auffindbar ist.
+
+Produktcode und Datenbankschema bleiben gegenüber Vendoo 1.43.0 unverändert.
diff --git a/lib/db.mjs b/lib/db.mjs
index 4529299..67db472 100644
--- a/lib/db.mjs
+++ b/lib/db.mjs
@@ -1550,3 +1550,84 @@ try {
   db.prepare(`INSERT OR IGNORE INTO system_migrations (migration_key, app_version, description)
     VALUES ('operations-center-1.30.0', '1.30.0', 'Backup, Restore, Update Center und Extension-Diagnose')`).run();
 } catch {}
+
+
+// --- Production Operations & Controlled Updates 1.42.0 ---
+try {
+  db.exec(`CREATE TABLE IF NOT EXISTS deployment_runs (
+    id TEXT PRIMARY KEY,
+    idempotency_key TEXT NOT NULL UNIQUE,
+    state TEXT NOT NULL DEFAULT 'checking',
+    provider TEXT NOT NULL DEFAULT 'coolify',
+    trigger_mode TEXT NOT NULL DEFAULT 'webhook',
+    current_version TEXT NOT NULL,
+    target_version TEXT NOT NULL,
+    build_revision_before TEXT,
+    build_revision_after TEXT,
+    deployment_id TEXT,
+    backup_id TEXT,
+    requested_by INTEGER,
+    reason TEXT,
+    github_repository TEXT,
+    github_branch TEXT,
+    request_json TEXT NOT NULL DEFAULT '{}',
+    result_json TEXT NOT NULL DEFAULT '{}',
+    error_code TEXT,
+    error_message TEXT,
+    timeout_at TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    started_at TEXT,
+    updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+    completed_at TEXT,
+    FOREIGN KEY(requested_by) REFERENCES users(id) ON DELETE SET NULL,
+    FOREIGN KEY(backup_id) REFERENCES operation_backups(id) ON DELETE SET NULL
+  )`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_deployment_runs_state ON deployment_runs(state, updated_at DESC)`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_deployment_runs_created ON deployment_runs(created_at DESC)`);
+
+  db.exec(`CREATE TABLE IF NOT EXISTS deployment_events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    run_id TEXT NOT NULL,
+    state TEXT NOT NULL,
+    event_type TEXT NOT NULL,
+    message TEXT NOT NULL,
+    details_json TEXT NOT NULL DEFAULT '{}',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    FOREIGN KEY(run_id) REFERENCES deployment_runs(id) ON DELETE CASCADE
+  )`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_deployment_events_run ON deployment_events(run_id, id ASC)`);
+
+  db.exec(`CREATE TABLE IF NOT EXISTS backup_verifications (
+    id TEXT PRIMARY KEY,
+    backup_id TEXT NOT NULL,
+    deployment_run_id TEXT,
+    status TEXT NOT NULL,
+    sha256 TEXT,
+    file_size INTEGER NOT NULL DEFAULT 0,
+    sqlite_integrity TEXT,
+    manifest_json TEXT NOT NULL DEFAULT '{}',
+    errors_json TEXT NOT NULL DEFAULT '[]',
+    warnings_json TEXT NOT NULL DEFAULT '[]',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    verified_at TEXT,
+    FOREIGN KEY(backup_id) REFERENCES operation_backups(id) ON DELETE CASCADE,
+    FOREIGN KEY(deployment_run_id) REFERENCES deployment_runs(id) ON DELETE SET NULL
+  )`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_backup_verifications_backup ON backup_verifications(backup_id, created_at DESC)`);
+
+  db.exec(`CREATE TABLE IF NOT EXISTS production_checks (
+    id TEXT PRIMARY KEY,
+    overall_status TEXT NOT NULL,
+    passed_count INTEGER NOT NULL DEFAULT 0,
+    warning_count INTEGER NOT NULL DEFAULT 0,
+    failed_count INTEGER NOT NULL DEFAULT 0,
+    results_json TEXT NOT NULL DEFAULT '[]',
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    created_by INTEGER,
+    FOREIGN KEY(created_by) REFERENCES users(id) ON DELETE SET NULL
+  )`);
+  db.exec(`CREATE INDEX IF NOT EXISTS idx_production_checks_created ON production_checks(created_at DESC)`);
+
+  db.prepare(`INSERT OR IGNORE INTO system_migrations (migration_key, app_version, description)
+    VALUES ('production-operations-1.42.0', '1.42.0', 'Persistente Deployment-State-Machine, Deployment-Events, Backup-Verifikation und Produktionschecks')`).run();
+} catch {}
diff --git a/lib/operations-center.mjs b/lib/operations-center.mjs
index bf22929..6a0e345 100644
--- a/lib/operations-center.mjs
+++ b/lib/operations-center.mjs
@@ -330,20 +330,33 @@ export function cancelPendingOperation() {
   return { cancelled: true, pending };
 }
 
-export async function checkForUpdates() {
+export async function checkForUpdates({ channel = 'stable' } = {}) {
   const settings = getOperationSettings();
-  const url = String(settings.update_manifest_url || '').trim();
-  if (!url) return { configured: false, current_version: APP_VERSION, message: 'Keine Update-Manifest-URL konfiguriert.' };
-  if (!/^https?:\/\//i.test(url)) throw new Error('Update-Manifest muss über HTTP oder HTTPS erreichbar sein.');
+  const rawUrl = String(settings.update_manifest_url || '').trim();
+  if (!rawUrl) return { configured: false, current_version: APP_VERSION, channel, message: 'Keine Update-Manifest-URL konfiguriert.' };
+  let url;
+  try { url = new URL(rawUrl); } catch { throw new Error('Update-Manifest-URL ist ungültig.'); }
+  if (!['https:', 'http:'].includes(url.protocol)) throw new Error('Update-Manifest muss über HTTP oder HTTPS erreichbar sein.');
+  if (url.username || url.password || url.hash) throw new Error('Update-Manifest-URL darf keine Zugangsdaten oder Fragmente enthalten.');
+  if (process.env.NODE_ENV === 'production' && url.protocol !== 'https:') throw new Error('Update-Manifest muss in Produktion HTTPS verwenden.');
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 8000);
   try {
-    const response = await fetch(url, { signal: controller.signal, headers: { Accept: 'application/json' } });
+    const response = await fetch(url, {
+      signal: controller.signal,
+      redirect: 'error',
+      headers: { Accept: 'application/json', 'User-Agent': `Vendoo/${APP_VERSION}` },
+    });
     if (!response.ok) throw new Error(`Update-Manifest antwortet mit HTTP ${response.status}.`);
-    const manifest = await response.json();
+    const contentLength = Number(response.headers.get('content-length') || 0);
+    if (contentLength > 256 * 1024) throw new Error('Update-Manifest ist größer als 256 KB.');
+    const text = await response.text();
+    if (Buffer.byteLength(text, 'utf8') > 256 * 1024) throw new Error('Update-Manifest ist größer als 256 KB.');
+    let manifest;
+    try { manifest = JSON.parse(text); } catch { throw new Error('Update-Manifest enthält kein gültiges JSON.'); }
     const latest = String(manifest.version || manifest.latest_version || '');
     if (!latest) throw new Error('Update-Manifest enthält keine Version.');
-    return { configured: true, current_version: APP_VERSION, latest_version: latest, update_available: compareVersions(latest, APP_VERSION) > 0, manifest };
+    return { configured: true, current_version: APP_VERSION, latest_version: latest, update_available: compareVersions(latest, APP_VERSION) > 0, channel, manifest };
   } finally { clearTimeout(timeout); }
 }
 
diff --git a/package-lock.json b/package-lock.json
index 23b8707..90a9a80 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "vendoo",
-  "version": "1.41.2",
+  "version": "1.43.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "vendoo",
-      "version": "1.41.2",
+      "version": "1.43.0",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.39.0",
         "better-sqlite3": "^12.11.1",
diff --git a/package.json b/package.json
index 4bb9f73..5909170 100644
--- a/package.json
+++ b/package.json
@@ -1,40 +1,49 @@
 {
   "name": "vendoo",
-  "version": "1.41.2",
+  "version": "1.43.0",
   "type": "module",
   "private": true,
   "scripts": {
     "start": "node bootstrap.mjs",
     "dev": "node --watch bootstrap.mjs",
-    "check": "node tools/check-syntax.mjs && python -m py_compile tools/verify-identity-db-1.40.0.py",
+    "check": "node tools/check-syntax.mjs && node --no-warnings tools/verify-identity-db-1.40.0.mjs",
     "verify:slice30": "node tools/verify-slice30-mock.mjs",
-    "verify:db": "python tools/verify-db-migrations.py",
+    "verify:db": "node --no-warnings tools/verify-db-migrations.mjs",
     "verify:slice31": "node tools/verify-slice31-image-editor.mjs",
     "verify:hotfix": "node tools/verify-release-1.25.1.mjs",
     "verify:gallery": "node tools/verify-release-1.25.1-static.mjs",
-    "verify:release": "node tools/verify-deployment-1.41.2.mjs",
+    "verify:release": "npm run verify:production-operations",
     "verify:ui-contracts": "node tools/verify-ui-contracts-1.26.1.mjs",
-    "verify:deployment": "node tools/verify-deployment-1.41.2.mjs",
+    "verify:deployment": "npm run verify:production-operations",
     "verify:git": "node tools/verify-git-safety.mjs",
     "verify:config": "node tools/verify-config-store.mjs",
-    "verify:installer-shell": "sh tools/verify-installer-shell.sh",
+    "verify:installer-shell": "node tools/verify-installer-shell.mjs",
     "verify:git-regression": "node tools/verify-git-safety-regression.mjs",
     "verify:git-staging": "node tools/verify-git-staging.mjs",
     "generate:tokens": "node tools/generate-design-tokens.mjs",
     "verify:architecture": "node tools/verify-platform-architecture-1.41.2.mjs",
-    "verify:all": "npm run verify:git && npm run verify:git-regression && npm run verify:git-staging && npm run verify:ignore-boundaries && npm run check && npm run verify:source-boundaries && npm run verify:esm-exports && npm run verify:flux-loop && npm run verify:capabilities && npm run verify:coolify && npm run verify:initial-modules && npm run verify:architecture && npm run verify:themes && npm run verify:security && npm run verify:identity && npm run verify:catalog && npm run verify:modules && npm run verify:deployment && npm run verify:config && npm run verify:installer-shell && npm run verify:db",
+    "verify:all": "npm run verify:git && npm run verify:git-regression && npm run verify:git-staging && npm run verify:release-manifest && npm run verify:ignore-boundaries && npm run check && npm run verify:powershell-static && npm run verify:source-boundaries && npm run verify:esm-exports && npm run verify:flux-loop && npm run verify:capabilities && npm run verify:coolify && npm run verify:initial-modules && npm run verify:architecture && npm run verify:themes && npm run verify:security && npm run verify:identity && npm run verify:invitations && npm run verify:sqlite-cleanup && npm run verify:catalog && npm run verify:modules && npm run verify:production-operations && npm run verify:one-click-update && npm run verify:module-navigation && npm run verify:updater-ui && npm run verify:updater-hotfix && npm run verify:deployment && npm run verify:config && npm run verify:installer-shell && npm run verify:db",
     "verify:themes": "node tools/verify-theme-manager-1.41.2.mjs",
     "verify:security": "node tools/verify-security-foundation-1.41.2.mjs",
-    "verify:identity": "node tools/verify-identity-settings-1.41.2.mjs && python tools/verify-identity-db-1.40.0.py",
+    "verify:identity": "node tools/verify-identity-settings-1.41.2.mjs && node --no-warnings tools/verify-identity-db-1.40.0.mjs",
     "verify:catalog": "node tools/verify-catalog-media-1.41.2.mjs && node tools/verify-catalog-services-1.41.2.mjs",
     "verify:modules": "node tools/verify-module-manager-1.41.2.mjs",
     "verify:esm-exports": "node tools/verify-esm-export-contracts.mjs",
     "verify:flux-loop": "node tools/verify-flux-loop-hotfix-1.41.2.mjs",
     "verify:capabilities": "node tools/verify-capability-graph-1.41.2.mjs",
-    "verify:coolify": "node tools/verify-coolify-deployment-1.41.2.mjs",
-    "verify:initial-modules": "node tools/verify-initial-disabled-modules-1.41.2.mjs",
+    "verify:coolify": "npm run verify:production-operations",
+    "verify:initial-modules": "node tools/verify-initial-disabled-modules-1.41.2.mjs && node tools/verify-initial-module-cleanup-regression-1.43.0.mjs",
     "verify:source-boundaries": "node tools/verify-source-boundaries-1.41.2.mjs",
-    "verify:ignore-boundaries": "node tools/verify-git-ignore-boundaries-1.41.2.mjs"
+    "verify:ignore-boundaries": "node tools/verify-git-ignore-boundaries-1.41.2.mjs",
+    "verify:production-operations": "node tools/verify-production-operations-1.42.0.mjs && node --no-warnings tools/verify-production-operations-db-1.42.0.mjs",
+    "verify:invitations": "node tools/verify-controlled-invitations-1.42.0.mjs",
+    "verify:one-click-update": "node tools/verify-production-updater-3.3.mjs",
+    "verify:module-navigation": "node tools/verify-module-navigation-generator-1.43.0.mjs",
+    "verify:updater-ui": "node tools/verify-production-updater-3.3.mjs",
+    "verify:updater-hotfix": "node tools/verify-production-updater-3.3.mjs",
+    "verify:powershell-static": "node tools/verify-powershell-static.mjs",
+    "verify:sqlite-cleanup": "node tools/verify-sqlite-cleanup-contract-1.43.0.mjs && node tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs",
+    "verify:release-manifest": "node tools/verify-release-manifest-staging-3.0.mjs"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.39.0",
diff --git a/public/app.js b/public/app.js
index d9840bd..b17ac5e 100644
--- a/public/app.js
+++ b/public/app.js
@@ -1,4 +1,4 @@
-const VENDOO_UI_BUILD = '1.41.2';
+const VENDOO_UI_BUILD = '1.43.0';
 
 const state = {
   photos: [],
@@ -282,6 +282,44 @@ function setupResponsiveContracts() {
   }
 }
 
+const moduleUiState = new Map();
+
+function isUiModuleEnabled(id) {
+  return !id || moduleUiState.get(id) !== false;
+}
+
+function applyModuleVisibility(root = document) {
+  root.querySelectorAll?.('[data-module], [data-module-panel]').forEach(element => {
+    const moduleId = element.dataset.module || element.dataset.modulePanel;
+    const visible = isUiModuleEnabled(moduleId);
+    element.classList.toggle('hidden', !visible);
+    element.setAttribute('aria-hidden', visible ? 'false' : 'true');
+    if ('disabled' in element && !visible) element.disabled = true;
+  });
+}
+
+function applyModuleNavigation(payload = {}) {
+  moduleUiState.clear();
+  for (const module of payload.modules || []) moduleUiState.set(module.id, module.enabled === true);
+  applyModuleVisibility(document);
+  const active = document.querySelector('.tab-content.active');
+  const activeButton = active ? document.querySelector(`.nav-item[data-tab="${active.id}"]`) : null;
+  if (activeButton?.classList.contains('hidden')) switchToTab('dashboard');
+}
+
+async function refreshModuleNavigation() {
+  try {
+    const payload = await api('GET', '/api/modules/navigation', null, { retry: false, timeoutMs: 10000 });
+    applyModuleNavigation(payload);
+    return payload;
+  } catch (error) {
+    console.warn('[Vendoo] Modulnavigation konnte nicht geladen werden:', error.message);
+    return null;
+  }
+}
+
+window.addEventListener('vendoo:modules-changed', () => refreshModuleNavigation());
+
 async function init() {
   document.documentElement.dataset.vendooBuild = VENDOO_UI_BUILD;
   console.info(`[Vendoo] UI-Build ${VENDOO_UI_BUILD}`);
@@ -295,10 +333,16 @@ async function init() {
     if (meData.setupMode) { window.location.href = '/login.html'; return; }
   } catch {}
 
+  // Modulstatus immer zuerst laden: Ein deaktiviertes Modul darf weder seine
+  // Navigation anzeigen noch den App-Start durch eine gesperrte API blockieren.
+  const moduleNavigation = await api('GET', '/api/modules/navigation');
+  applyModuleNavigation(moduleNavigation);
+  const aiEnabled = isUiModuleEnabled('vendoo.ai');
+
   const [platforms, settings, providers, templates] = await Promise.all([
     api('GET', '/api/platforms'),
     api('GET', '/api/settings'),
-    api('GET', '/api/providers'),
+    aiEnabled ? api('GET', '/api/providers') : Promise.resolve([]),
     api('GET', '/api/templates'),
   ]);
 
@@ -1704,6 +1748,12 @@ function closeMobileSidebar({ restoreFocus = false } = {}) {
 }
 
 function switchToTab(tabId, adminTab) {
+  const requestedNav = document.querySelector(`.nav-item[data-tab="${tabId}"]`);
+  if (requestedNav?.classList.contains('hidden')) {
+    toast('Dieses Modul ist derzeit deaktiviert.');
+    tabId = 'dashboard';
+    adminTab = null;
+  }
   if (tabId !== 'history' && listingEditLock.listingId) releaseListingLock({ quiet: true });
   document.querySelectorAll('.nav-item').forEach(b => b.classList.remove('active'));
   document.querySelectorAll('.tab-content').forEach(c => c.classList.remove('active'));
@@ -2464,7 +2514,8 @@ function showListing(listing, platformHtml) {
   document.getElementById('result-tags').value = tags;
   const plat = state.platforms.find(p => p.id === state.platform);
   document.getElementById('tags-label').textContent = plat?.fields.includes('hashtags') ? 'Hashtags' : 'Tags';
-  document.getElementById('save-btn').textContent = listing.id ? 'Änderungen speichern' : 'Speichern & Hinzufügen';
+  const saveButton = document.getElementById('save-btn');
+  if (saveButton) { saveButton.textContent = listing.id ? 'Änderungen speichern' : 'Artikel speichern'; saveButton.disabled = false; }
   document.getElementById('generator-preview-empty')?.classList.add('hidden');
   document.getElementById('result-section').classList.remove('hidden');
   const previewStatus = document.getElementById('generator-preview-status');
@@ -2568,7 +2619,8 @@ function resetGenerator() {
   document.getElementById('meta-section').classList.add('hidden');
   document.getElementById('variants-section').classList.add('hidden');
   document.getElementById('generator-preview-empty')?.classList.remove('hidden');
-  document.getElementById('save-btn').textContent = 'Speichern & Hinzufügen';
+  const saveButton = document.getElementById('save-btn');
+  if (saveButton) { saveButton.textContent = 'Speichern'; saveButton.disabled = true; }
   document.getElementById('generate-btn').disabled = true;
   renderAiModelGrid('generator', []);
   setAiModelStatus('generator-ai-model-status', 'Wartet auf Produktfotos.', 'neutral');
@@ -3397,13 +3449,13 @@ async function showDetail(id) {
             <button id="detail-download-photos" class="vd-button compact" type="button">Fotos herunterladen</button>
           </div>
           <p class="detail-photo-help">Vorschaubilder ziehen, um die Reihenfolge zu ändern. Das erste Bild ist das Cover.</p>
-          <section class="ai-model-card detail-ai-model-card">
+          <section class="ai-model-card detail-ai-model-card hidden" data-module-panel="vendoo.product-image-tools">
             <div class="ai-model-card-head">
               <div>
                 <span class="generator-panel-index">AI</span>
                 <div>
-                  <h4>Produktbild-Werkzeuge</h4>
-                  <p>Erzeuge Ghost-Mannequin- oder Flatlay-Varianten aus den aktuellen Listing-Fotos. Freie Prompt-Bilder werden im FLUX Studio erstellt.</p>
+                  <h4>Produktbild Studio</h4>
+                  <p>Optionales Modul für kontrollierte Ghost-Mannequin- und Flatlay-Varianten aus den aktuellen Listing-Fotos.</p>
                 </div>
               </div>
               <span class="generator-beta">Safe</span>
@@ -3514,6 +3566,8 @@ async function showDetail(id) {
       </div>
     </div>`;
 
+  applyModuleVisibility(document.getElementById('detail-content'));
+
   const lockResult = await acquireListingLock(numericId);
   if (!userCan('listings.edit') || lockResult.readOnly) {
     document.querySelectorAll('#history-detail input, #history-detail textarea, #history-detail select').forEach(element => { element.disabled = true; });
@@ -3545,16 +3599,18 @@ async function showDetail(id) {
       if (element) { element.disabled = true; element.setAttribute('aria-disabled', 'true'); }
     });
   }
-  document.getElementById('detail-ai-model-btn')?.addEventListener('click', runDetailAiModelPhotos);
-  document.getElementById('detail-ai-model-prompt-btn')?.addEventListener('click', () => openAiPromptModal('detail'));
-  document.getElementById('detail-ai-model-mode')?.addEventListener('change', () => updateAiModeControls('detail'));
-  updateAiModeControls('detail');
+  if (isUiModuleEnabled('vendoo.product-image-tools')) {
+    document.getElementById('detail-ai-model-btn')?.addEventListener('click', runDetailAiModelPhotos);
+    document.getElementById('detail-ai-model-prompt-btn')?.addEventListener('click', () => openAiPromptModal('detail'));
+    document.getElementById('detail-ai-model-mode')?.addEventListener('change', () => updateAiModeControls('detail'));
+    updateAiModeControls('detail');
+    renderAiModelGrid('detail', []);
+    loadDetailAiModelPhotos(numericId);
+    loadDetailAiModelGenerations(numericId);
+  }
   renderDetailPhotos();
-  renderAiModelGrid('detail', []);
   addQuillTooltips();
   refreshDetailPlatformPreview();
-  loadDetailAiModelPhotos(numericId);
-  loadDetailAiModelGenerations(numericId);
 
   if (typeof QRious !== 'undefined') {
     new QRious({ element: document.getElementById('detail-qr-canvas'), value: JSON.stringify({ sku: skuVal, id: l.id }), size: 118, level: 'M' });
@@ -8107,6 +8163,92 @@ async function loadOperationsExtensions() {
   catch (error) { const box = document.getElementById('operations-extension-clients'); if (box) box.innerHTML = `<div class="empty-state">${escapeHtml(error.message)}</div>`; }
 }
 
+function deploymentStateLabel(state) {
+  return ({
+    checking: 'Prüfung', backup_pending: 'Backup geplant', backup_running: 'Backup läuft',
+    backup_verified: 'Backup verifiziert', deploy_requested: 'Deployment angefordert',
+    deploy_running: 'Deployment läuft', health_wait: 'Readiness wird geprüft',
+    succeeded: 'Erfolgreich', failed: 'Fehlgeschlagen', rollback_required: 'Rollback/Prüfung erforderlich',
+  })[state] || state || 'Unbekannt';
+}
+
+function deploymentStateClass(state) {
+  if (state === 'succeeded') return 'is-ok';
+  if (state === 'failed' || state === 'rollback_required') return 'is-failed';
+  return 'is-running';
+}
+
+function renderProductionOverview(data) {
+  const box = document.getElementById('deployment-production-overview');
+  if (!box) return;
+  const production = data.production || {};
+  const readiness = production.readiness || {};
+  const storage = production.storage || {};
+  const lastBackup = production.last_backup;
+  const flux = production.flux || {};
+  const cards = [
+    ['Version', production.version || data.current_version || VENDOO_UI_BUILD, production.build_revision ? `Build ${String(production.build_revision).slice(0, 12)}` : 'Keine Build-Revision gemeldet', true],
+    ['Readiness', readiness.ok ? 'Bereit' : 'Nicht bereit', readiness.error || readiness.message || 'Interner Readiness-Check', !!readiness.ok],
+    ['Datenbank', production.database?.integrity === 'ok' ? 'Integrität OK' : String(production.database?.integrity || 'Unbekannt'), production.database?.path || 'Kein Pfad gemeldet', production.database?.integrity === 'ok'],
+    ['Persistente Daten', operationFormatBytes(storage.data?.bytes || 0), `${Number(storage.data?.files || 0)} Einträge · Uploads ${operationFormatBytes(storage.uploads?.bytes || 0)}`, true],
+    ['Letztes Backup', lastBackup ? (lastBackup.status === 'verified' ? 'Verifiziert' : lastBackup.status) : 'Nicht vorhanden', lastBackup ? `${operationFormatDate(lastBackup.created_at)} · ${operationFormatBytes(lastBackup.file_size)}` : 'Vor dem ersten Deployment erforderlich', lastBackup?.status === 'verified'],
+    ['FLUX Studio', flux.enabled ? 'Aktiv' : 'Deaktiviert', flux.enabled ? 'Produktionsgrenze prüfen' : 'Wie vorgesehen deaktiviert', !flux.enabled],
+  ];
+  box.innerHTML = cards.map(([label, value, detail, ok]) => `<article class="deployment-production-item ${ok ? 'is-ok' : 'is-warning'}"><span data-vd-icon="${ok ? 'check-circle-2' : 'triangle-alert'}"></span><div><small>${escapeHtml(label)}</small><strong>${escapeHtml(String(value))}</strong><p>${escapeHtml(String(detail || ''))}</p></div></article>`).join('');
+
+  const checkBox = document.getElementById('deployment-production-check-result');
+  const check = data.latest_production_check;
+  if (checkBox && check) {
+    checkBox.innerHTML = `<strong>${check.overall_status === 'passed' ? 'Produktionscheck bestanden' : check.overall_status === 'warning' ? 'Produktionscheck mit Hinweisen' : 'Produktionscheck fehlgeschlagen'}</strong><span>${Number(check.passed_count || 0)} bestanden · ${Number(check.warning_count || 0)} Hinweise · ${Number(check.failed_count || 0)} Fehler · ${operationFormatDate(check.created_at || check.verified_at)}</span>`;
+  }
+}
+
+function renderDeploymentRuns(data) {
+  const list = document.getElementById('deployment-run-list');
+  if (!list) return;
+  const runs = data.recent_runs || [];
+  if (!runs.length) { list.innerHTML = '<div class="empty-state">Keine Deployment-Aufträge vorhanden.</div>'; return; }
+  list.innerHTML = runs.map(run => {
+    const lastEvent = run.events?.at?.(-1);
+    const active = !['succeeded', 'failed'].includes(run.state);
+    return `<article class="deployment-run ${deploymentStateClass(run.state)}">
+      <div class="deployment-run-head"><span class="deployment-run-state">${escapeHtml(deploymentStateLabel(run.state))}</span><time>${operationFormatDate(run.created_at)}</time></div>
+      <strong>${escapeHtml(run.current_version || '?')} → ${escapeHtml(run.target_version || '?')}</strong>
+      <p>${escapeHtml(lastEvent?.message || run.error_message || run.reason || 'Deployment-Auftrag')}</p>
+      <small>${escapeHtml(run.github_branch || 'main')}${run.backup_id ? ' · Backup verifiziert' : ''}${run.deployment_id ? ` · ID ${escapeHtml(String(run.deployment_id).slice(0, 18))}` : ''}</small>
+      ${active ? `<div class="deployment-run-actions">${run.state !== 'rollback_required' ? `<button type="button" class="secondary-btn compact" data-deployment-refresh="${escapeHtml(run.id)}">Status aktualisieren</button>` : ''}${data.trigger_mode === 'webhook' && ['deploy_requested','deploy_running','health_wait'].includes(run.state) ? `<button type="button" class="secondary-btn compact" data-deployment-confirm="${escapeHtml(run.id)}">Externen Abschluss bestätigen</button>` : ''}${run.state === 'rollback_required' ? `<button type="button" class="secondary-btn compact" data-deployment-resolve="${escapeHtml(run.id)}">Prüfung abschließen</button>` : ''}</div>` : ''}
+    </article>`;
+  }).join('');
+  list.querySelectorAll('[data-deployment-refresh]').forEach(button => button.addEventListener('click', async () => {
+    button.disabled = true;
+    try { await api('POST', `/api/admin/deployment/runs/${encodeURIComponent(button.dataset.deploymentRefresh)}/refresh`); await loadDeploymentStatus(); }
+    catch (error) { toast(error.message); }
+    finally { button.disabled = false; }
+  }));
+  list.querySelectorAll('[data-deployment-confirm]').forEach(button => button.addEventListener('click', async () => {
+    const confirmation = prompt('Nur bestätigen, wenn Coolify das Deployment wirklich abgeschlossen hat. Exakt CONFIRM eingeben:');
+    if (confirmation !== 'CONFIRM') return;
+    button.disabled = true;
+    try {
+      await api('POST', `/api/admin/deployment/runs/${encodeURIComponent(button.dataset.deploymentConfirm)}/confirm`, { confirmation, outcome: 'succeeded', message: 'Im Vendoo Update Center extern bestätigt.' });
+      toast('Externer Abschluss wurde erfasst und Readiness erneut geprüft.');
+      await loadDeploymentStatus();
+    } catch (error) { toast(error.message); }
+    finally { button.disabled = false; }
+  }));
+  list.querySelectorAll('[data-deployment-resolve]').forEach(button => button.addEventListener('click', async () => {
+    const confirmation = prompt('Der Auftrag bleibt als fehlgeschlagen dokumentiert und die Deployment-Sperre wird aufgehoben. Exakt CONFIRM eingeben:');
+    if (confirmation !== 'CONFIRM') return;
+    button.disabled = true;
+    try {
+      await api('POST', `/api/admin/deployment/runs/${encodeURIComponent(button.dataset.deploymentResolve)}/confirm`, { confirmation, outcome: 'failed', message: 'Rollback-/Fehlerprüfung manuell abgeschlossen.' });
+      toast('Prüfung abgeschlossen. Ein neuer Deployment-Auftrag ist wieder möglich.');
+      await loadDeploymentStatus();
+    } catch (error) { toast(error.message); }
+    finally { button.disabled = false; }
+  }));
+}
+
 function renderDeploymentStatus() {
   const data = operationsState.deployment || {};
   const setValue = (id, value) => { const field = document.getElementById(id); if (field && document.activeElement !== field) field.value = value ?? ''; };
@@ -8114,9 +8256,14 @@ function renderDeploymentStatus() {
   setValue('deployment-coolify-url', data.coolify_url || '');
   setValue('deployment-resource-uuid', data.resource_uuid || '');
   setValue('deployment-trigger-mode', data.trigger_mode || 'webhook');
+  setValue('deployment-status-endpoint', data.deployment_status_endpoint || '/api/v1/deployments/{deployment_id}');
+  setValue('deployment-timeout-seconds', data.deployment_timeout_seconds || 900);
+  setValue('deployment-poll-seconds', data.health_poll_seconds || 15);
   setValue('deployment-github-repository', data.github_repository || 'Masterluke77/vendoo');
   setValue('deployment-github-branch', data.github_branch || 'main');
   setValue('deployment-update-channel', data.update_channel || 'stable');
+  const target = document.getElementById('deployment-target-version');
+  if (target && document.activeElement !== target && !target.value) target.value = data.active_run?.target_version || data.current_version || '';
   const backup = document.getElementById('deployment-backup-before'); if (backup) backup.checked = data.backup_before_deploy !== false;
   const uploads = document.getElementById('deployment-backup-uploads'); if (uploads) uploads.checked = data.backup_uploads === true;
   const webhook = document.getElementById('deployment-webhook-url'); if (webhook && document.activeElement !== webhook) { webhook.value = ''; webhook.placeholder = data.deploy_webhook?.configured ? `Gespeichert: ${data.deploy_webhook.masked || '••••••••'}` : 'Coolify Deploy-Webhook eintragen'; }
@@ -8124,7 +8271,11 @@ function renderDeploymentStatus() {
   const status = document.getElementById('deployment-status');
   if (status) status.innerHTML = `<strong>${data.configured ? 'Coolify ist konfiguriert' : 'Coolify noch nicht vollständig konfiguriert'}</strong><span>Provider: ${escapeHtml(data.provider || 'none')} · Trigger: ${escapeHtml(data.trigger_mode || 'webhook')} · Docker-Socket: ${data.docker_socket_access ? 'vorhanden' : 'nicht freigegeben'}</span>`;
   const action = document.getElementById('deployment-action-result');
-  if (action && data.last_deployment) action.innerHTML = `<strong>${data.last_deployment.accepted ? 'Letzter Deployment-Auftrag angenommen' : 'Letzter Deployment-Auftrag fehlgeschlagen'}</strong><span>${operationFormatDate(data.last_deployment.requested_at)} · Branch ${escapeHtml(data.last_deployment.github_branch || 'main')} · HTTP ${escapeHtml(String(data.last_deployment.http_status || '—'))}</span>`;
+  const last = data.recent_runs?.[0] || data.production?.last_deployment;
+  if (action && last) action.innerHTML = `<strong>${escapeHtml(deploymentStateLabel(last.state))}</strong><span>${operationFormatDate(last.created_at || last.requested_at)} · ${escapeHtml(last.current_version || data.current_version || '?')} → ${escapeHtml(last.target_version || '?')} · Branch ${escapeHtml(last.github_branch || 'main')}</span>`;
+  renderProductionOverview(data);
+  renderDeploymentRuns(data);
+  window.VendooIcons?.render(document.getElementById('operations-updates-panel'));
 }
 
 async function loadDeploymentStatus() {
@@ -8140,6 +8291,9 @@ function deploymentSettingsPayload() {
     trigger_mode: document.getElementById('deployment-trigger-mode')?.value || 'webhook',
     deploy_method: 'GET',
     deploy_endpoint: '/api/v1/deploy?uuid={uuid}&force={force}',
+    deployment_status_endpoint: document.getElementById('deployment-status-endpoint')?.value || '/api/v1/deployments/{deployment_id}',
+    deployment_timeout_seconds: Number(document.getElementById('deployment-timeout-seconds')?.value || 900),
+    health_poll_seconds: Number(document.getElementById('deployment-poll-seconds')?.value || 15),
     github_repository: document.getElementById('deployment-github-repository')?.value || 'Masterluke77/vendoo',
     github_branch: document.getElementById('deployment-github-branch')?.value || 'main',
     ghcr_image: 'ghcr.io/masterluke77/vendoo',
@@ -8238,6 +8392,18 @@ function setupOperationsCenter() {
     finally { button.disabled = !operationsState.updateFile; button.textContent = 'Update prüfen und vorbereiten'; }
   });
 
+  document.getElementById('deployment-production-check')?.addEventListener('click', async event => {
+    const button = event.currentTarget; const resultBox = document.getElementById('deployment-production-check-result');
+    button.disabled = true; if (resultBox) resultBox.textContent = 'Produktionsgrenzen werden geprüft …';
+    try {
+      const result = await api('POST', '/api/admin/deployment/production-check');
+      const details = (result.results || []).filter(item => item.status !== 'pass').map(item => `${item.title || item.name || item.id}: ${item.message || item.status}`).slice(0, 4).join(' · ');
+      if (resultBox) resultBox.innerHTML = `<strong>${result.overall_status === 'passed' ? 'Produktionscheck bestanden' : result.overall_status === 'warning' ? 'Produktionscheck mit Hinweisen' : 'Produktionscheck fehlgeschlagen'}</strong><span>${Number(result.passed_count || 0)} bestanden · ${Number(result.warning_count || 0)} Hinweise · ${Number(result.failed_count || 0)} Fehler${details ? ` · ${escapeHtml(details)}` : ''}</span>`;
+      await loadDeploymentStatus();
+    } catch (error) { if (resultBox) resultBox.innerHTML = `<strong>Produktionscheck konnte nicht ausgeführt werden</strong><span>${escapeHtml(error.message)}</span>`; }
+    finally { button.disabled = false; }
+  });
+
   document.getElementById('deployment-save')?.addEventListener('click', async event => {
     const button = event.currentTarget; button.disabled = true;
     try { operationsState.deployment = await api('PUT', '/api/admin/deployment', deploymentSettingsPayload()); renderDeploymentStatus(); toast('Coolify- und GitHub-Konfiguration gespeichert.'); }
@@ -8252,7 +8418,12 @@ function setupOperationsCenter() {
   });
   document.getElementById('deployment-update-check')?.addEventListener('click', async event => {
     const button = event.currentTarget; const resultBox = document.getElementById('deployment-action-result'); button.disabled = true;
-    try { const result = await api('POST', '/api/admin/deployment/updates/check'); if (resultBox) resultBox.innerHTML = `<strong>${result.update_available ? `Version ${escapeHtml(result.latest_version)} verfügbar` : result.configured ? 'Vendoo ist aktuell' : 'Keine Manifest-URL konfiguriert'}</strong><span>Installiert: ${escapeHtml(result.current_version || VENDOO_UI_BUILD)}${result.message ? ` · ${escapeHtml(result.message)}` : ''}</span>`; }
+    try {
+      const result = await api('POST', '/api/admin/deployment/updates/check');
+      const target = document.getElementById('deployment-target-version');
+      if (target && result.latest_version) target.value = result.latest_version;
+      if (resultBox) resultBox.innerHTML = `<strong>${result.update_available ? `Version ${escapeHtml(result.latest_version)} verfügbar` : result.configured ? 'Vendoo ist aktuell' : 'Keine Manifest-URL konfiguriert'}</strong><span>Installiert: ${escapeHtml(result.current_version || VENDOO_UI_BUILD)}${result.latest_version ? ` · Freigegeben: ${escapeHtml(result.latest_version)}` : ''}${result.message ? ` · ${escapeHtml(result.message)}` : ''}</span>`;
+    }
     catch (error) { if (resultBox) resultBox.innerHTML = `<strong>Updateprüfung fehlgeschlagen</strong><span>${escapeHtml(error.message)}</span>`; }
     finally { button.disabled = false; }
   });
@@ -8261,9 +8432,11 @@ function setupOperationsCenter() {
     if (confirmation !== 'DEPLOY') return;
     const button = event.currentTarget; const resultBox = document.getElementById('deployment-action-result'); button.disabled = true; button.textContent = 'Deployment wird angefordert …';
     try {
-      const result = await api('POST', '/api/admin/deployment/trigger', { confirmation, force: false, reason: 'update-center' });
-      if (resultBox) resultBox.innerHTML = `<strong>Coolify-Deployment angenommen</strong><span>${escapeHtml(result.message || '')}${result.backup_file ? ` · Backup: ${escapeHtml(result.backup_file)}` : ''}</span>`;
-      toast('Coolify-Deployment wurde angefordert.');
+      const targetVersion = document.getElementById('deployment-target-version')?.value || operationsState.deployment?.current_version || VENDOO_UI_BUILD;
+      const idempotencyKey = globalThis.crypto?.randomUUID?.() || `vendoo-${Date.now()}-${Math.random().toString(16).slice(2)}`;
+      const result = await api('POST', '/api/admin/deployment/trigger', { confirmation, force: false, reason: 'update-center', target_version: targetVersion, idempotency_key: idempotencyKey });
+      if (resultBox) resultBox.innerHTML = `<strong>${result.reused ? 'Vorhandener Deployment-Auftrag erkannt' : 'Coolify-Deployment angenommen'}</strong><span>${escapeHtml(result.message || deploymentStateLabel(result.state))}${result.backup_id ? ` · Backup ${escapeHtml(String(result.backup_id).slice(0, 12))}` : ''}</span>`;
+      toast(result.reused ? 'Der gleiche Deployment-Auftrag war bereits vorhanden.' : 'Coolify-Deployment wurde angefordert.');
       await loadDeploymentStatus();
     } catch (error) { if (resultBox) resultBox.innerHTML = `<strong>Deployment fehlgeschlagen</strong><span>${escapeHtml(error.message)}</span>`; toast(error.message); }
     finally { button.disabled = false; button.textContent = 'Coolify-Deployment starten'; }
@@ -8291,7 +8464,7 @@ function setupAdmin() {
   document.getElementById('invite-user-btn')?.addEventListener('click', () => {
     document.getElementById('invite-email').value = '';
     document.getElementById('invite-name').value = '';
-    document.getElementById('invite-role').value = 'editor';
+    document.getElementById('invite-role').value = 'viewer';
     document.getElementById('invite-result-wrap').classList.add('hidden');
     document.getElementById('invite-result-password').value = '';
     const mlRadio = document.querySelector('input[name="invite-method"][value="magic_link"]');
@@ -8442,13 +8615,48 @@ function exportAdminAudit() {
   window.location.href = `/api/admin/audit/export.csv?${params.toString()}`;
 }
 
+async function loadAdminInvitations() {
+  const container = document.getElementById('invitations-list');
+  if (!container) return;
+  try {
+    const result = await api('GET', '/api/admin/users/invitations');
+    const invitations = result.invitations || [];
+    if (!invitations.length) { container.innerHTML = '<div class="empty-state">Noch keine Einladungen vorhanden.</div>'; return; }
+    const statusLabel = status => ({ pending: 'Offen', expired: 'Abgelaufen', revoked_or_used: 'Verwendet oder widerrufen', revoked: 'Widerrufen' })[status] || status;
+    container.innerHTML = invitations.map(invitation => {
+      const actionable = ['pending', 'expired'].includes(invitation.status);
+      return `<article class="invitation-admin-row ${invitation.status === 'pending' ? 'is-pending' : ''}">
+        <div><strong>${escapeHtml(invitation.email)}</strong><span>${escapeHtml(ROLE_LABELS[invitation.role] || invitation.role || 'Leser')} · ${escapeHtml(statusLabel(invitation.status))}</span><small>Erstellt ${operationFormatDate(invitation.created_at)} · Ablauf ${operationFormatDate(invitation.expires_at)}</small></div>
+        ${actionable ? `<div class="invitation-admin-actions"><button type="button" class="small-btn" data-invitation-resend="${invitation.id}" title="Einladung erneut senden"><span data-vd-icon="mail"></span></button>${invitation.status === 'pending' ? `<button type="button" class="small-btn danger-btn" data-invitation-revoke="${invitation.id}" title="Einladung widerrufen"><span data-vd-icon="ban"></span></button>` : ''}</div>` : ''}
+      </article>`;
+    }).join('');
+    container.querySelectorAll('[data-invitation-resend]').forEach(button => button.addEventListener('click', async () => {
+      button.disabled = true;
+      try {
+        const result = await api('POST', `/api/admin/users/invitations/${encodeURIComponent(button.dataset.invitationResend)}/resend`);
+        toast(result.consoleFallback ? 'Neue Einladung erstellt; Link wurde in der Server-Konsole ausgegeben.' : 'Einladung erneut gesendet.');
+        await loadAdminInvitations();
+      } catch (error) { toast(error.message); }
+      finally { button.disabled = false; }
+    }));
+    container.querySelectorAll('[data-invitation-revoke]').forEach(button => button.addEventListener('click', async () => {
+      if (!confirm('Diese Einladung sofort widerrufen? Der Link kann danach nicht mehr verwendet werden.')) return;
+      button.disabled = true;
+      try { await api('DELETE', `/api/admin/users/invitations/${encodeURIComponent(button.dataset.invitationRevoke)}`); toast('Einladung widerrufen.'); await loadAdminInvitations(); }
+      catch (error) { toast(error.message); }
+      finally { button.disabled = false; }
+    }));
+    globalThis.VendooIcons?.render?.(container);
+  } catch (error) { container.innerHTML = `<div class="empty-state">${escapeHtml(error.message)}</div>`; }
+}
+
 async function loadAdminUsers() {
   try {
     const users = await api('GET', '/api/admin/users');
     adminUsersCache = Array.isArray(users) ? users : [];
     const container = document.getElementById('users-list');
     if (!container) return;
-    if (!adminUsersCache.length) { container.innerHTML = '<div class="empty-state">Keine User vorhanden</div>'; return; }
+    if (!adminUsersCache.length) { container.innerHTML = '<div class="empty-state">Keine User vorhanden</div>'; await loadAdminInvitations(); return; }
 
     container.innerHTML = adminUsersCache.map(u => {
       const initials = getInitials(u.name, u.email);
@@ -8480,6 +8688,7 @@ async function loadAdminUsers() {
       if (user) confirmDeleteUser(user.id, user.email);
     }));
     globalThis.VendooIcons?.render?.(container);
+    await loadAdminInvitations();
   } catch (err) { toast('Fehler: ' + err.message); }
 }
 
diff --git a/public/index.html b/public/index.html
index 39db7f7..73f01b8 100644
--- a/public/index.html
+++ b/public/index.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="vendoo-build" content="1.41.2">
+  <meta name="vendoo-build" content="1.43.0">
   <title>Vendoo</title>
   <link rel="icon" href="/brand/favicons/favicon.ico" sizes="any">
   <link rel="icon" type="image/png" sizes="16x16" href="/brand/favicons/favicon-16x16.png">
@@ -13,9 +13,9 @@
   <link rel="manifest" href="/brand/favicons/site.webmanifest">
   <meta name="msapplication-config" content="/brand/favicons/browserconfig.xml">
   <meta name="theme-color" content="#FAF6F2">
-  <link rel="stylesheet" href="style.css?v=1.41.2">
-  <link rel="stylesheet" href="modules/theme-manager/theme-manager.css?v=1.41.2">
-  <link rel="stylesheet" href="modules/module-manager/module-manager.css?v=1.41.2">
+  <link rel="stylesheet" href="style.css?v=1.43.0">
+  <link rel="stylesheet" href="modules/theme-manager/theme-manager.css?v=1.43.0">
+  <link rel="stylesheet" href="modules/module-manager/module-manager.css?v=1.43.0">
   <link href="https://cdn.jsdelivr.net/npm/quill@2.0.3/dist/quill.snow.css" rel="stylesheet">
 </head>
 <body>
@@ -36,55 +36,55 @@
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="7" height="7"/><rect x="14" y="3" width="7" height="7"/><rect x="3" y="14" width="7" height="7"/><rect x="14" y="14" width="7" height="7"/></svg>
           <span>Dashboard</span>
         </button>
-        <button class="nav-item" data-tab="generator">
+        <button class="nav-item" data-tab="generator" data-module="vendoo.ai">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/><rect x="3" y="3" width="18" height="18" rx="3"/></svg>
           <span>Neuer Artikel</span>
         </button>
-        <button class="nav-item" data-tab="today">
+        <button class="nav-item" data-tab="today" data-module="vendoo.listings">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M3 11.5 12 4l9 7.5"/><path d="M5.5 10.5V20h13v-9.5"/><path d="M9.5 20v-6h5v6"/></svg>
           <span>Heute</span>
         </button>
-        <button class="nav-item" data-tab="history">
+        <button class="nav-item" data-tab="history" data-module="vendoo.listings">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><rect x="4" y="3" width="16" height="18" rx="2"/><path d="M8 7h8M8 11h8M8 15h5"/></svg>
           <span>Artikel</span>
         </button>
-        <button class="nav-item" data-tab="quality-center">
+        <button class="nav-item" data-tab="quality-center" data-module="vendoo.quality">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3 20 7v5c0 5-3.4 8.3-8 10-4.6-1.7-8-5-8-10V7Z"/><path d="m8.5 12 2.2 2.2 4.8-5"/></svg>
           <span>Qualitätscenter</span>
         </button>
-        <button class="nav-item" data-tab="publish">
+        <button class="nav-item" data-tab="publish" data-module="vendoo.publishing">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="m22 2-7 20-4-9-9-4Z"/><path d="M22 2 11 13"/></svg>
           <span>Publish</span>
         </button>
-        <button class="nav-item" data-tab="inventory">
+        <button class="nav-item" data-tab="inventory" data-module="vendoo.inventory">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="m4 7 8-4 8 4-8 4Z"/><path d="m4 7 8 4 8-4v10l-8 4-8-4Z"/><path d="M12 11v10"/></svg>
           <span>Lager</span>
         </button>
-        <button class="nav-item" data-tab="templates">
+        <button class="nav-item" data-tab="templates" data-module="vendoo.listings">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><rect x="4" y="3" width="16" height="18" rx="2"/><path d="M8 8h8M8 12h8M8 16h5"/></svg>
           <span>Vorlagen</span>
         </button>
-        <button class="nav-item" data-tab="flux-studio">
+        <button class="nav-item" data-tab="flux-studio" data-module="vendoo.flux-studio">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3 9.8 8.2 4 10l5 3.2L8 19l4-3 4 3-1-5.8 5-3.2-5.8-1.8Z"/><path d="M18 3v4M16 5h4"/></svg>
           <span>FLUX Studio</span>
         </button>
-        <button class="nav-item" data-tab="media-library">
+        <button class="nav-item" data-tab="media-library" data-module="vendoo.media">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="4" width="18" height="16" rx="2"/><circle cx="8.5" cy="9" r="1.5"/><path d="m4 17 5-5 4 4 2-2 5 5"/></svg>
           <span>Bilder</span>
         </button>
-        <button class="nav-item" data-tab="image-factory">
+        <button class="nav-item" data-tab="image-factory" data-module="vendoo.ai">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h6v6H4zM14 4h6v6h-6zM4 14h6v6H4z"/><path d="M14 17h6M17 14v6"/></svg>
           <span>Bildproduktion</span>
         </button>
-        <button class="nav-item" data-tab="extensions">
+        <button class="nav-item" data-tab="extensions" data-module="vendoo.module-manager">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M8.5 3v4M15.5 3v4M6 7h12v4a6 6 0 0 1-12 0Z"/><path d="M12 17v4M9 21h6"/></svg>
           <span>Extensions</span>
         </button>
-        <button class="nav-item" data-tab="settings">
+        <button class="nav-item" data-tab="settings" data-module="vendoo.settings">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.7 1.7 0 0 0 .34 1.87l.05.05-2.83 2.83-.05-.05a1.7 1.7 0 0 0-1.87-.34 1.7 1.7 0 0 0-1.04 1.57V21h-4v-.07a1.7 1.7 0 0 0-1.04-1.57 1.7 1.7 0 0 0-1.87.34l-.05.05-2.83-2.83.05-.05A1.7 1.7 0 0 0 4.6 15a1.7 1.7 0 0 0-1.57-1.04H3v-4h.07A1.7 1.7 0 0 0 4.64 8.9a1.7 1.7 0 0 0-.34-1.87l-.05-.05 2.83-2.83.05.05A1.7 1.7 0 0 0 9 4.54 1.7 1.7 0 0 0 10.04 3H10V3h4v.07A1.7 1.7 0 0 0 15.04 4.6a1.7 1.7 0 0 0 1.87-.34l.05-.05 2.83 2.83-.05.05A1.7 1.7 0 0 0 19.4 9c.24.63.85 1.04 1.53 1.04H21v4h-.07c-.68 0-1.29.41-1.53 1.04Z"/></svg>
           <span>Einstellungen</span>
         </button>
-        <button class="nav-item" data-tab="admin" data-admin-tab="users" id="nav-admin-main">
+        <button class="nav-item" data-tab="admin" data-module="vendoo.users" data-admin-tab="users" id="nav-admin-main">
           <svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10Z"/><path d="M9 12h6M12 9v6"/></svg>
           <span>Admin</span>
         </button>
@@ -92,11 +92,11 @@
 
       <div class="nav-group nav-group-tools" id="nav-system-group">
         <div class="nav-divider"></div>
-        <button class="nav-item nav-item-quiet" data-tab="fees">
+        <button class="nav-item nav-item-quiet" data-tab="fees" data-module="vendoo.publishing">
           <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><rect x="4" y="3" width="16" height="18" rx="2"/><path d="M8 7h8M8 11h3M8 15h3M15 11v5M13 13.5h4"/></svg>
           <span>Gebühren</span>
         </button>
-        <button class="nav-item nav-item-quiet" data-tab="trash">
+        <button class="nav-item nav-item-quiet" data-tab="trash" data-module="vendoo.listings">
           <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M9 7V4h6v3M7 7l1 14h8l1-14"/></svg>
           <span>Papierkorb</span>
           <span id="trash-badge" class="nav-badge hidden">0</span>
@@ -145,7 +145,7 @@
       </button>
 
       <div class="topbar-actions">
-        <button class="topbar-btn primary" id="topbar-new-btn">
+        <button class="topbar-btn primary" id="topbar-new-btn" data-module="vendoo.ai">
           <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>
           <span>Neuer Artikel</span>
         </button>
@@ -314,18 +314,39 @@
           <p>Fotos erfassen, AI gezielt steuern und das Ergebnis ohne Kontextwechsel fertigstellen.</p>
         </div>
         <div class="generator-heading-actions">
-          <div class="generator-stepper" aria-label="Arbeitsfortschritt">
-            <span class="generator-step is-active" id="generator-step-photos"><b>1</b> Fotos</span>
-            <span class="generator-step" id="generator-step-ai"><b>2</b> AI</span>
-            <span class="generator-step" id="generator-step-result"><b>3</b> Prüfen</span>
-          </div>
           <button id="reset-generator-btn" class="vd-button secondary" type="button">
             <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round"><path d="M3 12a9 9 0 1 0 3-6.7L3 8"/><path d="M3 3v5h5"/></svg>
-            Zurücksetzen
+            Formular leeren
           </button>
         </div>
       </header>
 
+      <div class="generator-commandbar" id="generator-commandbar">
+        <div class="generator-command-progress">
+          <div class="generator-stepper" aria-label="Arbeitsfortschritt">
+            <span class="generator-step is-active" id="generator-step-photos"><b>1</b> Fotos</span>
+            <span class="generator-step" id="generator-step-ai"><b>2</b> Generieren</span>
+            <span class="generator-step" id="generator-step-result"><b>3</b> Prüfen</span>
+          </div>
+          <div class="generator-readiness">
+            <span id="generator-readiness-dot"></span>
+            <div>
+              <strong id="generator-readiness-title">Fotos fehlen</strong>
+              <small id="generator-readiness-copy">Lade mindestens ein Produktfoto hoch.</small>
+            </div>
+          </div>
+        </div>
+        <div class="generator-command-actions">
+          <button id="generate-btn" class="vd-button primary generator-primary-action" disabled>
+            <span aria-hidden="true">✦</span>
+            Artikel generieren
+          </button>
+          <button id="save-btn" class="vd-button generator-save-action" disabled>
+            Speichern
+          </button>
+        </div>
+      </div>
+
       <div class="generator-studio-layout">
         <section class="generator-panel media-workbench" aria-labelledby="generator-media-title">
           <div class="generator-panel-header">
@@ -377,13 +398,13 @@
           </div>
 
 
-          <section id="generator-ai-model-card" class="ai-model-card generator-ai-model-card">
+          <section id="generator-ai-model-card" class="ai-model-card generator-ai-model-card hidden" data-module-panel="vendoo.product-image-tools">
             <div class="ai-model-card-head">
               <div>
                 <span class="generator-panel-index">AI</span>
                 <div>
-                  <h4>Produktbild-Werkzeuge</h4>
-                  <p>Erzeuge Ghost-Mannequin- oder Flatlay-Varianten aus dem vorhandenen Produktfoto. Freie Prompt-Bilder findest du im separaten FLUX Studio.</p>
+                  <h4>Produktbild Studio</h4>
+                  <p>Optionales Modul für kontrollierte Ghost-Mannequin- und Flatlay-Varianten. Aktivierung und Deaktivierung erfolgen im Modulmanager.</p>
                 </div>
               </div>
               <span id="generator-ai-model-badge" class="generator-beta">Safe</span>
@@ -533,19 +554,7 @@
             <p><strong>AI analysiert deine Fotos</strong><br><span id="generator-loading-copy">Produkt, Zustand und Marktplatzdaten werden vorbereitet.</span></p>
           </div>
 
-          <div class="generator-action-zone">
-            <div class="generator-readiness">
-              <span id="generator-readiness-dot"></span>
-              <div>
-                <strong id="generator-readiness-title">Fotos fehlen</strong>
-                <small id="generator-readiness-copy">Lade mindestens ein Produktfoto hoch.</small>
-              </div>
-            </div>
-            <button id="generate-btn" class="primary-btn generator-primary-action" disabled>
-              <span>✦</span>
-              Artikel generieren
-            </button>
-          </div>
+
         </section>
 
         <aside class="generator-panel generator-preview-panel" aria-labelledby="generator-preview-title">
@@ -649,7 +658,7 @@
 
             <div class="result-actions generator-result-actions">
               <button id="copy-all-btn" class="secondary-btn">Alles kopieren</button>
-              <button id="save-btn" class="primary-btn">Speichern &amp; Hinzufügen</button>
+              <span>Speichern ist dauerhaft oben erreichbar.</span>
             </div>
           </div>
         </aside>
@@ -1122,6 +1131,10 @@
         <!-- Users Tab -->
         <div class="admin-panel active" id="admin-users-panel">
           <div id="users-list" class="users-list"></div>
+          <section class="invitation-admin-section">
+            <div class="security-panel-heading"><div><p class="eyebrow">Testzugänge</p><h3>Einladungen</h3><p>Offene, abgelaufene und widerrufene Einladungen. Standardrolle ist Leser; höhere Rechte müssen bewusst gewählt werden.</p></div></div>
+            <div id="invitations-list" class="invitation-admin-list"><div class="empty-state">Einladungen werden geladen …</div></div>
+          </section>
         </div>
 
         <!-- Roles Tab -->
@@ -1256,27 +1269,45 @@
                   <div class="operation-card-actions"><button type="button" class="secondary-btn" id="operations-update-url-save">URL speichern</button><button type="button" class="secondary-btn" id="operations-update-check">Jetzt prüfen</button></div>
                   <div id="operations-update-check-result" class="operation-result">Noch nicht geprüft.</div>
                 </article>
+                <article class="operations-card operations-production-card">
+                  <header><span data-vd-icon="activity"></span><div><h4>Produktionsstatus</h4><p>Live-Überblick über Version, Readiness, Datenbank, Speicher und FLUX-Grenze.</p></div></header>
+                  <div id="deployment-production-overview" class="deployment-production-overview"><div class="empty-state">Produktionsstatus wird geladen …</div></div>
+                  <div class="operation-card-actions"><button type="button" class="secondary-btn" id="deployment-production-check">Produktionscheck ausführen</button></div>
+                  <div id="deployment-production-check-result" class="operation-result">Noch kein Produktionscheck ausgeführt.</div>
+                </article>
                 <article class="operations-card operations-deployment-card">
-                  <header><span data-vd-icon="cloud-cog"></span><div><h4>Coolify &amp; GitHub Deployment</h4><p>Neue GitHub-Versionen kontrolliert über Coolify ausrollen. Vendoo erhält keinen Docker-Socket.</p></div></header>
+                  <header><span data-vd-icon="cloud-cog"></span><div><h4>Coolify &amp; GitHub Deployment</h4><p>Kontrolliertes Deployment ohne Docker-Socket und ohne selbständernden Produktivcontainer.</p></div></header>
                   <label class="operation-field"><span>Provider</span><select id="deployment-provider"><option value="none">Nicht konfiguriert</option><option value="coolify">Coolify</option></select></label>
                   <label class="operation-field"><span>Coolify URL</span><input id="deployment-coolify-url" type="url" placeholder="https://coolify.example.de"></label>
                   <label class="operation-field"><span>Resource UUID</span><input id="deployment-resource-uuid" type="text" placeholder="Coolify Application UUID"></label>
-                  <label class="operation-field"><span>Trigger</span><select id="deployment-trigger-mode"><option value="webhook">Deploy-Webhook (empfohlen)</option><option value="api">Coolify API</option></select></label>
+                  <label class="operation-field"><span>Trigger</span><select id="deployment-trigger-mode"><option value="webhook">Deploy-Webhook</option><option value="api">Coolify API mit Statusabfrage</option></select></label>
+                  <label class="operation-field"><span>Deployment-Status-Endpunkt</span><input id="deployment-status-endpoint" type="text" value="/api/v1/deployments/{deployment_id}"></label>
+                  <div class="operation-inline-fields">
+                    <label class="operation-field"><span>Zeitlimit (Sek.)</span><input id="deployment-timeout-seconds" type="number" min="60" max="7200" value="900"></label>
+                    <label class="operation-field"><span>Prüfintervall (Sek.)</span><input id="deployment-poll-seconds" type="number" min="5" max="300" value="15"></label>
+                  </div>
                   <label class="operation-field"><span>Deploy-Webhook</span><input id="deployment-webhook-url" type="password" autocomplete="new-password" placeholder="Nur neu eingeben, wenn er geändert werden soll"></label>
                   <label class="operation-field"><span>API-Token</span><input id="deployment-api-token" type="password" autocomplete="new-password" placeholder="Nur für API-Modus"></label>
                   <div class="operation-card-actions"><button type="button" class="secondary-btn" id="deployment-save">Konfiguration speichern</button><button type="button" class="secondary-btn" id="deployment-test">Verbindung prüfen</button></div>
                   <div id="deployment-status" class="operation-result">Deployment-Konfiguration wird geladen …</div>
                 </article>
                 <article class="operations-card operations-deploy-action-card">
-                  <header><span data-vd-icon="rocket"></span><div><h4>GitHub-Stand ausrollen</h4><p>Coolify holt den konfigurierten Branch und ersetzt den laufenden Container erst nach erfolgreichem Build und Healthcheck.</p></div></header>
+                  <header><span data-vd-icon="rocket"></span><div><h4>GitHub-Stand kontrolliert ausrollen</h4><p>Vorab-Backup, Doppelstartschutz, Statusverfolgung, Readiness und Zielversion sind Bestandteil eines Auftrags.</p></div></header>
                   <label class="operation-field"><span>GitHub Repository</span><input id="deployment-github-repository" type="text" value="Masterluke77/vendoo"></label>
                   <label class="operation-field"><span>Produktionsbranch</span><input id="deployment-github-branch" type="text" value="main"></label>
-                  <label class="operation-field"><span>Update-Kanal</span><select id="deployment-update-channel"><option value="stable">Stable</option><option value="beta">Beta</option></select></label>
+                  <div class="operation-inline-fields">
+                    <label class="operation-field"><span>Update-Kanal</span><select id="deployment-update-channel"><option value="stable">Stable</option><option value="beta">Beta</option></select></label>
+                    <label class="operation-field"><span>Zielversion</span><input id="deployment-target-version" type="text" placeholder="z. B. 1.43.0"></label>
+                  </div>
                   <label class="operation-check"><input id="deployment-backup-before" type="checkbox" checked><span>Vor dem Deployment ein verifiziertes Backup mit Konfiguration erstellen</span></label>
                   <label class="operation-check"><input id="deployment-backup-uploads" type="checkbox"><span>Uploads zusätzlich in das Vorab-Backup aufnehmen</span></label>
                   <div class="operation-card-actions"><button type="button" class="secondary-btn" id="deployment-update-check">Version prüfen</button><button type="button" class="primary-btn" id="deployment-trigger">Coolify-Deployment starten</button></div>
                   <div id="deployment-action-result" class="operation-result">Noch kein Deployment aus dem Webinterface angefordert.</div>
                 </article>
+                <article class="operations-card operations-deployment-history-card">
+                  <header><span data-vd-icon="history"></span><div><h4>Deployment-Verlauf</h4><p>Persistente Aufträge und Ereignisse bleiben auch nach einem Neustart nachvollziehbar.</p></div></header>
+                  <div id="deployment-run-list" class="deployment-run-list"><div class="empty-state">Keine Deployment-Aufträge vorhanden.</div></div>
+                </article>
 
                 <article class="operations-card operations-update-upload">
                   <header><span data-vd-icon="package-open"></span><div><h4>Update-Paket vorbereiten</h4><p>Prüft Version, Pflichtdateien und verbotene Laufzeitdaten. Vorher wird automatisch gesichert.</p></div></header>
@@ -1378,9 +1409,9 @@ PUBLIC_BASE_URL=https://vendoo.example.de</pre>
             <div class="form-group">
               <label>Rolle</label>
               <select id="invite-role" class="model-select">
-                <option value="viewer">Leser</option>
+                <option value="viewer" selected>Leser</option>
                 <option value="publisher">Publisher</option>
-                <option value="editor" selected>Editor</option>
+                <option value="editor">Editor</option>
                 <option value="manager">Manager</option>
                 <option value="admin">Administrator</option>
               </select>
@@ -2361,11 +2392,11 @@ PUBLIC_BASE_URL=https://vendoo.example.de</pre>
   <div id="toast" class="toast"></div>
   <script src="https://cdn.jsdelivr.net/npm/quill@2.0.3/dist/quill.js"></script>
   <script src="https://cdn.jsdelivr.net/npm/qrious@4.0.2/dist/qrious.min.js"></script>
-  <script src="design-system/theme-runtime.js?v=1.41.2"></script>
-  <script src="vendoo-icons.js?v=1.41.2"></script>
-  <script src="app.js?v=1.41.2"></script>
-  <script type="module" src="modules/theme-manager/theme-manager.js?v=1.41.2"></script>
-  <script type="module" src="modules/module-manager/module-manager.js?v=1.41.2"></script>
+  <script src="design-system/theme-runtime.js?v=1.43.0"></script>
+  <script src="vendoo-icons.js?v=1.43.0"></script>
+  <script src="app.js?v=1.43.0"></script>
+  <script type="module" src="modules/theme-manager/theme-manager.js?v=1.43.0"></script>
+  <script type="module" src="modules/module-manager/module-manager.js?v=1.43.0"></script>
 
 
 
diff --git a/public/login.html b/public/login.html
index b38db06..6a3ad22 100644
--- a/public/login.html
+++ b/public/login.html
@@ -106,6 +106,6 @@
     </div>
   </div>
 
-  <script src="/login.js?v=1.41.2" defer></script>
+  <script src="/login.js?v=1.43.0" defer></script>
 </body>
 </html>
diff --git a/public/modules/module-manager/module-manager.js b/public/modules/module-manager/module-manager.js
index 8915653..5a25fc9 100644
--- a/public/modules/module-manager/module-manager.js
+++ b/public/modules/module-manager/module-manager.js
@@ -150,6 +150,7 @@ async function perform(action, id) {
       await request('DELETE', `/api/admin/modules/${encodeURIComponent(id)}`);
     }
     await load();
+    window.dispatchEvent(new CustomEvent('vendoo:modules-changed', { detail: { action, id } }));
     globalThis.toast?.(action === 'enable' ? 'Modul aktiviert.' : action === 'disable' ? 'Modul deaktiviert.' : 'Modul gelöscht.');
   } catch (error) {
     globalThis.toast?.(error.message);
@@ -168,6 +169,7 @@ async function install() {
     await request('POST', '/api/admin/modules/install', form, { multipart: true });
     input.value = '';
     await load();
+    window.dispatchEvent(new CustomEvent('vendoo:modules-changed', { detail: { action: 'install' } }));
     globalThis.toast?.('Modulpaket geprüft und installiert.');
   } catch (error) {
     globalThis.toast?.(error.message);
diff --git a/public/style.css b/public/style.css
index 820f520..0bcb1a1 100644
--- a/public/style.css
+++ b/public/style.css
@@ -7165,6 +7165,29 @@ button,input,select,textarea { max-width:100%; }
 .operation-card-actions { display: flex; gap: 7px; flex-wrap: wrap; }
 .operation-result { display: grid; gap: 3px; min-height: 52px; margin-top: 10px; padding: 10px; border-radius: 9px; background: var(--bg-page); color: var(--text-muted); font-size: 10px; }
 .operation-result strong { color: var(--text); font-size: 12px; }
+
+.deployment-production-overview { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 7px; }
+.deployment-production-item { display: grid; grid-template-columns: 28px minmax(0, 1fr); gap: 8px; align-items: start; padding: 9px; border: 1px solid var(--border); border-radius: 9px; background: var(--bg-page); min-width: 0; }
+.deployment-production-item > span { width: 28px; height: 28px; display: grid; place-items: center; border-radius: 8px; color: var(--warning, #d97706); background: color-mix(in srgb, var(--warning, #d97706) 10%, transparent); }
+.deployment-production-item.is-ok > span { color: var(--success, #20875d); background: color-mix(in srgb, var(--success, #20875d) 10%, transparent); }
+.deployment-production-item small, .deployment-production-item strong, .deployment-production-item p { display: block; min-width: 0; overflow-wrap: anywhere; }
+.deployment-production-item small { color: var(--text-muted); font-size: 8px; text-transform: uppercase; letter-spacing: .04em; }
+.deployment-production-item strong { margin-top: 2px; font-size: 11px; }
+.deployment-production-item p { margin-top: 2px; font-size: 9px; line-height: 1.35; }
+.deployment-run-list { display: grid; gap: 8px; max-height: 430px; overflow: auto; }
+.deployment-run { padding: 10px; border: 1px solid var(--border); border-left-width: 3px; border-radius: 10px; background: var(--bg-page); }
+.deployment-run.is-ok { border-left-color: var(--success, #20875d); }
+.deployment-run.is-failed { border-left-color: var(--danger, #c43f4b); }
+.deployment-run.is-running { border-left-color: var(--accent); }
+.deployment-run-head { display: flex; justify-content: space-between; gap: 8px; margin-bottom: 5px; }
+.deployment-run-state { font-size: 9px; font-weight: 800; text-transform: uppercase; letter-spacing: .035em; color: var(--accent); }
+.deployment-run.is-ok .deployment-run-state { color: var(--success, #20875d); }
+.deployment-run.is-failed .deployment-run-state { color: var(--danger, #c43f4b); }
+.deployment-run time, .deployment-run small { color: var(--text-muted); font-size: 8px; }
+.deployment-run > strong { display: block; font-size: 12px; }
+.deployment-run > p { margin: 3px 0; font-size: 10px; line-height: 1.4; }
+.deployment-run-actions { display: flex; flex-wrap: wrap; gap: 5px; margin-top: 8px; }
+.secondary-btn.compact { min-height: 29px; padding: 0 9px; font-size: 9px; }
 .operations-instruction { display: flex; gap: 11px; padding: 13px; margin-top: 14px; border-radius: 12px; background: color-mix(in srgb, var(--accent) 7%, var(--bg-card)); }
 .operations-instruction > span { color: var(--accent); }
 .operations-instruction strong, .operations-instruction p { display: block; margin: 0; }
@@ -7207,7 +7230,7 @@ button,input,select,textarea { max-width:100%; }
   .operations-pending .secondary-btn { width: 100%; }
 }
 @media (max-width: 520px) {
-  .operation-inline-fields, .operations-extension-packages { grid-template-columns: minmax(0, 1fr); }
+  .operation-inline-fields, .operations-extension-packages, .deployment-production-overview { grid-template-columns: minmax(0, 1fr); }
   .operations-backup-row { grid-template-columns: 32px minmax(0, 1fr); }
   .operation-backup-actions { grid-column: 1 / -1; justify-content: flex-end; }
   .operations-extension-client { grid-template-columns: 10px minmax(0, 1fr); }
@@ -7379,3 +7402,132 @@ body[data-user-role="publisher"] .danger-zone { display: none !important; }
 /* 1.37.0 – Security Dashboard Foundation */
 .security-secret-list{display:flex;flex-wrap:wrap;gap:var(--vd-space-2,8px);margin-top:var(--vd-space-3,12px)}
 .security-secret-list .status-badge{max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+
+/* Vendoo 1.42.0 — kontrollierte Testeinladungen */
+.invitation-admin-section { margin-top: 24px; padding-top: 20px; border-top: 1px solid var(--border); }
+.invitation-admin-list { display: grid; gap: 8px; }
+.invitation-admin-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 12px; align-items: center; padding: 11px 12px; border: 1px solid var(--border); border-left: 3px solid var(--text-muted); border-radius: 11px; background: var(--bg-card); }
+.invitation-admin-row.is-pending { border-left-color: var(--accent); }
+.invitation-admin-row strong, .invitation-admin-row span, .invitation-admin-row small { display: block; min-width: 0; overflow-wrap: anywhere; }
+.invitation-admin-row strong { font-size: 12px; }
+.invitation-admin-row span { margin-top: 2px; color: var(--text-muted); font-size: 10px; }
+.invitation-admin-row small { margin-top: 2px; color: var(--text-muted); font-size: 9px; }
+.invitation-admin-actions { display: flex; gap: 6px; }
+@media (max-width: 620px) {
+  .invitation-admin-row { grid-template-columns: minmax(0, 1fr); }
+  .invitation-admin-actions { justify-content: flex-end; }
+}
+
+
+/* ========================================================================== 
+   Vendoo 1.43.0 – Module-aware Listing Studio
+   ========================================================================== */
+.generator-studio-page {
+  --generator-gap: clamp(14px, 1.4vw, 22px);
+  padding-bottom: 36px;
+}
+.generator-heading {
+  margin-bottom: 12px;
+  padding: 0 2px;
+}
+.generator-heading h2 { font-size: clamp(24px, 2.2vw, 34px); }
+.generator-heading > div:first-child > p:last-child { max-width: 720px; font-size: 13px; line-height: 1.55; }
+.generator-commandbar {
+  position: sticky;
+  top: calc(var(--vd-topbar-height) + 8px);
+  z-index: 34;
+  min-height: 72px;
+  margin-bottom: var(--generator-gap);
+  padding: 12px 14px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 18px;
+  border: 1px solid var(--vd-line);
+  border-radius: var(--vd-radius-md, 14px);
+  background: color-mix(in srgb, var(--vd-surface-raised) 92%, transparent);
+  box-shadow: 0 12px 34px color-mix(in srgb, var(--vd-ink) 9%, transparent);
+  backdrop-filter: blur(18px) saturate(1.15);
+}
+.generator-command-progress { min-width: 0; display: flex; align-items: center; gap: 18px; }
+.generator-command-actions { display: flex; align-items: center; gap: 8px; flex: 0 0 auto; }
+.generator-command-actions .vd-button { min-height: 44px; padding-inline: 18px; font-weight: 760; }
+.generator-save-action { min-width: 148px; border-color: var(--vd-brand); color: var(--vd-brand); background: var(--vd-surface-raised); }
+.generator-save-action:not(:disabled):hover { background: var(--vd-brand-soft); }
+.generator-commandbar .generator-readiness { min-width: 230px; grid-template-columns: 11px minmax(0, 1fr); }
+.generator-commandbar .generator-readiness > span { width: 9px; height: 9px; box-shadow: 0 0 0 5px color-mix(in srgb, var(--vd-warning) 14%, transparent); }
+.generator-commandbar .generator-readiness.is-ready > span { box-shadow: 0 0 0 5px color-mix(in srgb, var(--vd-success) 14%, transparent); }
+.generator-commandbar .generator-readiness strong { font-size: 12px; }
+.generator-commandbar .generator-readiness small { margin-top: 3px; font-size: 10px; }
+.generator-studio-layout {
+  grid-template-columns: minmax(320px, .88fr) minmax(420px, 1.12fr);
+  gap: var(--generator-gap);
+}
+.generator-panel {
+  border-radius: var(--vd-radius-md, 14px);
+  box-shadow: 0 8px 26px color-mix(in srgb, var(--vd-ink) 5%, transparent);
+}
+.generator-panel-header { min-height: 76px; padding: 16px 18px; }
+.generator-panel-header h3 { font-size: 15px; }
+.generator-panel-header p { margin-top: 4px; font-size: 11px; line-height: 1.45; }
+.generator-panel-index { width: 34px; height: 34px; font-size: 10px; }
+.generator-count, .generator-beta, .generator-preview-status { min-height: 26px; padding: 5px 10px; font-size: 10px; }
+.generator-photo-stage { margin: 16px 16px 12px; border-radius: 12px; }
+.generator-dropzone { margin-inline: 16px; min-height: 108px; padding: 16px; border-radius: 12px; }
+.generator-dropzone p { font-size: 11px; }
+.generator-dropzone p strong { font-size: 13px; }
+.generator-dropzone small { font-size: 10px; }
+.generator-photo-strip, .generator-image-tools { margin-inline: 16px; }
+.generator-photo-quality { margin: 14px 16px 4px; padding: 14px; border-radius: 12px; }
+.generator-photo-quality-head strong { font-size: 12px; }
+.generator-photo-quality li { font-size: 10px; }
+.generator-config-stack { padding: 14px; gap: 11px; }
+.generator-config-card, .generator-notes-card { padding: 14px; border-radius: 12px; }
+.generator-config-copy label, .generator-notes-head label { font-size: 12px; }
+.generator-config-copy span, .generator-notes-head span { font-size: 10px; }
+.generator-choice-group .toggle-btn { min-height: 34px; padding-inline: 12px; font-size: 10px; }
+.generator-config-card select { min-height: 40px; font-size: 11px; }
+.generator-notes-card textarea { min-height: 118px; font-size: 11px; }
+.generator-tone-row span { font-size: 9px; }
+.generator-loading { margin: 0 14px 14px; }
+.generator-action-zone { display: none; }
+.generator-preview-panel {
+  grid-column: 1 / -1;
+  position: static;
+  max-height: none;
+  overflow: visible;
+}
+.generator-preview-empty { min-height: 300px; }
+.generator-result { padding: 18px; }
+.generator-result .result-input { min-height: 42px; font-size: 13px; }
+.generator-result .ql-container.ql-snow { min-height: 280px; font-size: 13px; }
+.generator-meta-section .meta-input { min-height: 38px; font-size: 11px; }
+.generator-result-actions {
+  position: static;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding-top: 14px;
+  color: var(--vd-ink-muted);
+  font-size: 10px;
+}
+.generator-result-actions button { min-width: 140px; }
+[data-module].hidden, [data-module-panel].hidden { display: none !important; }
+@media (max-width: 1100px) {
+  .generator-commandbar { align-items: stretch; flex-direction: column; }
+  .generator-command-progress, .generator-command-actions { width: 100%; justify-content: space-between; }
+  .generator-studio-layout { grid-template-columns: 1fr; }
+  .generator-preview-panel { grid-column: auto; }
+}
+@media (max-width: 720px) {
+  .generator-commandbar { top: calc(var(--vd-topbar-height) + 4px); padding: 10px; }
+  .generator-command-progress { align-items: stretch; flex-direction: column; gap: 10px; }
+  .generator-commandbar .generator-readiness { min-width: 0; }
+  .generator-command-actions { display: grid; grid-template-columns: 1fr 1fr; }
+  .generator-command-actions .vd-button { min-width: 0; padding-inline: 10px; }
+}
+@media (max-width: 480px) {
+  .generator-command-actions { grid-template-columns: 1fr; }
+  .generator-step { font-size: 9px; }
+}
diff --git a/release-manifest.json b/release-manifest.json
new file mode 100644
index 0000000..ee78c59
--- /dev/null
+++ b/release-manifest.json
@@ -0,0 +1,3199 @@
+{
+  "schema": "vendoo-release-manifest-v1",
+  "version": "1.43.0",
+  "updaterVersion": "3.3.0",
+  "mode": "overlay-with-explicit-removals",
+  "requiredFiles": [
+    "package.json",
+    "package-lock.json",
+    "bootstrap.mjs",
+    "server.mjs",
+    "lib/db.mjs",
+    "db/schema.sql",
+    "update-manifest.json",
+    "UPDATE_VENDOO.bat",
+    "scripts/updater/Vendoo.Updater.Preflight.ps1",
+    "scripts/updater/Vendoo.Updater.UI.ps1",
+    "scripts/updater/Vendoo.Updater.Host.ps1",
+    "scripts/updater/Vendoo.Updater.Worker.ps1",
+    "tools/apply-release-manifest.mjs"
+  ],
+  "removedFiles": [],
+  "files": [
+    {
+      "path": ".dockerignore",
+      "sha256": "f344f75df655bc133e6c4abb2d215b2234fb22a4bb155c217317c36ee4f0f8fb",
+      "size": 331
+    },
+    {
+      "path": ".editorconfig",
+      "sha256": "a33a76c9a0484ada816500d229f53529fe6ef9cfb4b08e5534c6e7f355364a2f",
+      "size": 91
+    },
+    {
+      "path": ".env.example",
+      "sha256": "0f5e064b1de0427a5b8d6bb38eeab1a059c051c92de38839c0bebac733b4d5fa",
+      "size": 3759
+    },
+    {
+      "path": ".gitattributes",
+      "sha256": "489fb811f97deb0befb181e8eda6330bd155b6e1a3d7cc4b717391c31cf870f0",
+      "size": 59
+    },
+    {
+      "path": ".github/CODEOWNERS",
+      "sha256": "58e3f4b76cc9398f32dcd5481b2080e7e5ba322aca04b8b8374446299c5d7dd6",
+      "size": 16
+    },
+    {
+      "path": ".github/dependabot.yml",
+      "sha256": "5bd335eb750d084ca12b6a3b3f35d0cd7bc454ba24ed280187c66acf75eaf396",
+      "size": 613
+    },
+    {
+      "path": ".github/pull_request_template.md",
+      "sha256": "f65684e98b01d0e0b6bfe1284b5de3354559e4cd51e634fe9e9e2e5473b890e5",
+      "size": 606
+    },
+    {
+      "path": ".github/workflows/ci.yml",
+      "sha256": "384990816ba3295cc6458d7d808422cc25cfc2e9cf9598b9052f7aadc7f70b6b",
+      "size": 4233
+    },
+    {
+      "path": ".github/workflows/release.yml",
+      "sha256": "af6d27ddfcb524bb117cbdba881a9648a2de72f469b53c3580e96eea9fe11de2",
+      "size": 4856
+    },
+    {
+      "path": ".github/workflows/sync-release-manifest.yml",
+      "sha256": "f25e9fe77a8d3c419b37b22f226f9d2e2ed69820894288be5b4bb09ac10bab1a",
+      "size": 1342
+    },
+    {
+      "path": ".github/workflows/vendoo-production-deploy.yml",
+      "sha256": "059851862eb984fb12233ac3b0a70410e14229239e4cad11d857e612c1ed3573",
+      "size": 2882
+    },
+    {
+      "path": ".github/workflows/windows-release-diagnostics.yml",
+      "sha256": "9a802a3cc1f923c3f4e483a5fcfb0285d5ac4b35b71d9da369210f1e8b4dc3d6",
+      "size": 3335
+    },
+    {
+      "path": ".gitignore",
+      "sha256": "851ad84ebaa6d07af5fe975b3461c2402e7315a294ae29f0cd1a5f13cb7fc44f",
+      "size": 1631
+    },
+    {
+      "path": ".migration-image-stack-cleanup-1.20.0",
+      "sha256": "41ac814339d5c5b59d1e141845169a54acd55aab496d1f4ff263a1ecd22024e3",
+      "size": 44
+    },
+    {
+      "path": ".npmrc",
+      "sha256": "9bfa732952ad571d06527b32d96d79133fc23fa607df00de440b2802f543608c",
+      "size": 192
+    },
+    {
+      "path": "00_START_HIER_1_43_0.md",
+      "sha256": "9d7e7981939cd4b49b6f0efe11242681b93a37677fe27948a9c53ed0a0f26fd6",
+      "size": 2127
+    },
+    {
+      "path": "app/architecture-boundaries.json",
+      "sha256": "9d7c2a587c12f2b12ba2923e367ade8cdd4601dcac800ca2ac34afb302e9a6e1",
+      "size": 1026
+    },
+    {
+      "path": "app/contracts/module.schema.json",
+      "sha256": "e4c8aebc9b7dc65ce402f26044a26c2d1ef4564873db7f6568bd66958c3ecd56",
+      "size": 1830
+    },
+    {
+      "path": "app/core/identity/identity-store.mjs",
+      "sha256": "7aa45d3d655cc93e4d887e6a26b47b109821996d1a9305f900bd7d80fb73b040",
+      "size": 17549
+    },
+    {
+      "path": "app/core/modules/module-package-contract.mjs",
+      "sha256": "9565787844764fa2222295af811b6d4ffb3b996331a5cebe789fd72cf2ae1b3b",
+      "size": 9832
+    },
+    {
+      "path": "app/core/modules/module-package-store.mjs",
+      "sha256": "1ac6208b0cc85a3b5e2f86d61bb59a7a39fd46f51b4d8278c2abe236b53fdab5",
+      "size": 4199
+    },
+    {
+      "path": "app/core/modules/module-state-store.mjs",
+      "sha256": "c2f4ebceb06aa40d75c456f7448225436cedb8590228faff6da8f8107987e1b5",
+      "size": 2821
+    },
+    {
+      "path": "app/core/security/secret-contract.mjs",
+      "sha256": "ce74a28bb663f0dcfa9f11cd4375f763db088ee66128f64b90bb91e99f732642",
+      "size": 2453
+    },
+    {
+      "path": "app/core/themes/theme-contract.mjs",
+      "sha256": "7f38b3ac792e61e030c9f69355e2378f8f61e8e61c7b29c82cd0fa7ec930cfec",
+      "size": 8077
+    },
+    {
+      "path": "app/kernel/errors.mjs",
+      "sha256": "d84a573699e413e0a0803459e0d05c5c4e6e35d3499eb634f95302d151e75c4b",
+      "size": 1215
+    },
+    {
+      "path": "app/kernel/event-bus.mjs",
+      "sha256": "a34333cbc784d39b39a8071a437972c6175c551104dc2d82fc4c0e0506b18259",
+      "size": 2776
+    },
+    {
+      "path": "app/kernel/feature-flags.mjs",
+      "sha256": "0e8f691f96e1ef0a7a86d32cae7b7e1db04325fe94a32b8c1f484a5b6950f3b4",
+      "size": 2347
+    },
+    {
+      "path": "app/kernel/input-schema.mjs",
+      "sha256": "a4877c90f2c9040cb101b7fbb80385d4b1ea0814118a104873b891a580e88204",
+      "size": 2265
+    },
+    {
+      "path": "app/kernel/lifecycle.mjs",
+      "sha256": "a0223a00691908862aaf1fd9383b6d86d67f26325c509280b8c2daa5cfcee28e",
+      "size": 1733
+    },
+    {
+      "path": "app/kernel/module-contract.mjs",
+      "sha256": "f90741250b5f8f4412ba405aaf0afbdaf836fd30797543d67f7f998bd6aab0b5",
+      "size": 3092
+    },
+    {
+      "path": "app/kernel/module-registry.mjs",
+      "sha256": "4da6fa8b6d1a3aa345c924f426c405faecba9dcfde5983f74de45df4eb233430",
+      "size": 10917
+    },
+    {
+      "path": "app/kernel/platform-kernel.mjs",
+      "sha256": "8fe7a2f45d5c6b7e481485d0856792ef399f5fd41d042d041739e7ad1b4fc0a0",
+      "size": 13806
+    },
+    {
+      "path": "app/kernel/policy-engine.mjs",
+      "sha256": "7944f68d995a5d70273f8a985973f668fc62a414d85636d92f3774e34d39a37f",
+      "size": 1475
+    },
+    {
+      "path": "app/kernel/route-registry.mjs",
+      "sha256": "f98e4cd58b051efdf311dafa73569b1ecebe2a29431cd763380c9663035c1c2b",
+      "size": 3367
+    },
+    {
+      "path": "app/modules/ai/index.mjs",
+      "sha256": "0ff879fb8cf392a3786c39f2541637b2d9f018fb03941066ed540a2880134f89",
+      "size": 949
+    },
+    {
+      "path": "app/modules/ai/module.json",
+      "sha256": "98e93589109cb34c7af71215a581fe40e80691884459c2d42260f6b001065e6e",
+      "size": 531
+    },
+    {
+      "path": "app/modules/auth/index.mjs",
+      "sha256": "3ae563b7e6232ed89f5bc5dc49fe359ecfd696123aee2cb780032040c53f149e",
+      "size": 1094
+    },
+    {
+      "path": "app/modules/auth/module.json",
+      "sha256": "cae01362c58adac32badb0b102ce76a748c7301aafa64818a49456665b4de29d",
+      "size": 469
+    },
+    {
+      "path": "app/modules/auth/routes.mjs",
+      "sha256": "04a72689ecea04caf79eec9207116d1da374600150fe1966032fe972736f246f",
+      "size": 4651
+    },
+    {
+      "path": "app/modules/auth/service.mjs",
+      "sha256": "53917fe8aa4832cc62f35d4746af9bfdfd1132448de0ca750f073a0a27cdbebb",
+      "size": 5138
+    },
+    {
+      "path": "app/modules/catalog.mjs",
+      "sha256": "f6ebaa1f0f94e877629536a739e28ab5f3c8f85896dab682a5da46776422b071",
+      "size": 1954
+    },
+    {
+      "path": "app/modules/deployments/index.mjs",
+      "sha256": "b16984481e36c379ebb3ace55756818b1b71f958105feae2b59782cd273335f8",
+      "size": 848
+    },
+    {
+      "path": "app/modules/deployments/module.json",
+      "sha256": "44793ab1bb6f8d59cc01f99cdab59a87e5d0bc2e368877b973554740e75f0a84",
+      "size": 950
+    },
+    {
+      "path": "app/modules/deployments/repository.mjs",
+      "sha256": "0e0985ccc5af8fbbcab28ad061bbcd9e81de37b7dc476e4c5b43599a738a7a97",
+      "size": 9090
+    },
+    {
+      "path": "app/modules/deployments/routes.mjs",
+      "sha256": "b08c7af8f32b56793c02d5e779a24dc188a8cfe87c4419fe7e805fe522a6b55a",
+      "size": 8253
+    },
+    {
+      "path": "app/modules/deployments/service.mjs",
+      "sha256": "8f98fd60283a99893ecfa854cb039c2336bad045033109ea0fb910eac14f6e83",
+      "size": 40218
+    },
+    {
+      "path": "app/modules/deployments/state-machine.mjs",
+      "sha256": "fd57218f20a5e5cf32d7c9b8f2cc96aef9d5b53acabee86cb683ac08e151915a",
+      "size": 1517
+    },
+    {
+      "path": "app/modules/flux-studio/index.mjs",
+      "sha256": "99bde2c2871c48ff9e1d2895157197d9f1d5e194072a481abaa3495daaa683e0",
+      "size": 655
+    },
+    {
+      "path": "app/modules/flux-studio/module.json",
+      "sha256": "5f28a104ef923c0f01cf71d765cb603e3c9bf7a30d087321f58161d701896024",
+      "size": 459
+    },
+    {
+      "path": "app/modules/inventory/index.mjs",
+      "sha256": "fd798d294308dcb50d5ce90d3cfb969800cd1dfecf4805e69ec41f974e268829",
+      "size": 575
+    },
+    {
+      "path": "app/modules/inventory/module.json",
+      "sha256": "febca770c3ee71c398bec9e6afc3aaaa8850ce8c9a2840c190d93b2e8d25f790",
+      "size": 510
+    },
+    {
+      "path": "app/modules/inventory/repository.mjs",
+      "sha256": "6925da30bd453695b82c8fcbc82c585b01cda71c410f59d62697a31c364954ae",
+      "size": 298
+    },
+    {
+      "path": "app/modules/inventory/routes.mjs",
+      "sha256": "b3d0c8a4643ff09091d48c4e1dfcd90ed0884fe9713a7bb44160c34761b59590",
+      "size": 1332
+    },
+    {
+      "path": "app/modules/inventory/service.mjs",
+      "sha256": "94f3e5a3e6f3ed1120dad7c869b47978582717e231b57ae4c98e668d903f09bc",
+      "size": 1427
+    },
+    {
+      "path": "app/modules/listings/index.mjs",
+      "sha256": "fbf8db46e0ae7b483f898588c39a4f74d72717588d93d2058ab9250f9ada0c88",
+      "size": 569
+    },
+    {
+      "path": "app/modules/listings/module.json",
+      "sha256": "79b21e2387b59eec5a23b3d547d954ddc1edf99e9ab691f6e410894811f1978c",
+      "size": 602
+    },
+    {
+      "path": "app/modules/listings/repository.mjs",
+      "sha256": "a76054a2eca06d8412c211fc8b75f7fbd9cb1ed256f38360a7031b1f8ed7d73c",
+      "size": 559
+    },
+    {
+      "path": "app/modules/listings/routes.mjs",
+      "sha256": "d1e817f0c4251994bad0a7084e2e7dcd2873a0a099cb00a312f55aa2163c183d",
+      "size": 4435
+    },
+    {
+      "path": "app/modules/listings/service.mjs",
+      "sha256": "e7c722e449284d8ec9ade461e2b8fc94723e35ebec25c51113b40643d12f28ef",
+      "size": 5260
+    },
+    {
+      "path": "app/modules/media/index.mjs",
+      "sha256": "e12663a5b189660e34d72e034fa4b23b5bffdb0c8d5516b547020da11e70aefa",
+      "size": 517
+    },
+    {
+      "path": "app/modules/media/module.json",
+      "sha256": "4efc183346859a6786250d40a9762f7457e00f659a7b2408209d85f3ef75d1c2",
+      "size": 537
+    },
+    {
+      "path": "app/modules/media/repository.mjs",
+      "sha256": "67262d67fa85e5f2e09a51645432a2c7548a6dccdb0afbaaf63850e2fab67197",
+      "size": 337
+    },
+    {
+      "path": "app/modules/media/routes.mjs",
+      "sha256": "9f8e54cabbb7271bac7253a26b6ffbf553f834147500141c9e7427a26c9dde81",
+      "size": 1342
+    },
+    {
+      "path": "app/modules/media/service.mjs",
+      "sha256": "29a4e515e6ccc692b9cac78012e9571c4d6225f7e89bee2d4fefaf63f4d0fc3a",
+      "size": 3913
+    },
+    {
+      "path": "app/modules/module-manager/index.mjs",
+      "sha256": "9d2afb4ba28a144b7f75c6c409f43d2f7a34f2674c8a1f717c2ab631516b0cca",
+      "size": 769
+    },
+    {
+      "path": "app/modules/module-manager/module.json",
+      "sha256": "c4ab8673081ba03068cc5c76c1a0ea35c61771ad69de97cd1510dfc35f9bd93a",
+      "size": 560
+    },
+    {
+      "path": "app/modules/module-manager/routes.mjs",
+      "sha256": "b4250e7028bc1ff041166f4099a05e71fd4e0f71abaeee09ffdd3678ce9c52c7",
+      "size": 3603
+    },
+    {
+      "path": "app/modules/module-manager/service.mjs",
+      "sha256": "028fa76b052de388836ba75c14f45bcae67c9a99af6d727406674ee1fc7a4434",
+      "size": 9789
+    },
+    {
+      "path": "app/modules/operations/module.json",
+      "sha256": "9723a9b12a9b472b2ed8c4635cdce663b2f0f65643d8ae0b6219715d853f740d",
+      "size": 555
+    },
+    {
+      "path": "app/modules/product-image-tools/index.mjs",
+      "sha256": "28609dd8fa5a0e1a66f9117cea264ad669e0fbdd839ddb231d5f823deb07d9bb",
+      "size": 357
+    },
+    {
+      "path": "app/modules/product-image-tools/module.json",
+      "sha256": "2247d384df5a5ac53132de9f098c15b8c4cabe47ccd2376e93e63853fddd823a",
+      "size": 666
+    },
+    {
+      "path": "app/modules/publishing/index.mjs",
+      "sha256": "8a2805286def5d0521765319eddcd44e680e32bd7065d45749edd31406228463",
+      "size": 689
+    },
+    {
+      "path": "app/modules/publishing/module.json",
+      "sha256": "53e1dcab6bb9c5046eba6daa17c0f1ffb193bed38ae248dd1702fee91bdd23bd",
+      "size": 607
+    },
+    {
+      "path": "app/modules/quality/index.mjs",
+      "sha256": "306a2c3c119b82f6f972fa503099705bd3ede6c2061f532a00dc208f0584445c",
+      "size": 330
+    },
+    {
+      "path": "app/modules/quality/module.json",
+      "sha256": "61381a51b86b64d59dde8c1a749ae46b7990ec323adc71c7eb62f741eeb6f807",
+      "size": 477
+    },
+    {
+      "path": "app/modules/security/index.mjs",
+      "sha256": "747febc12aec7d81ccfdf6e9ea7158655ef5fdc536c519ce447de329314612a8",
+      "size": 843
+    },
+    {
+      "path": "app/modules/security/module.json",
+      "sha256": "700be862cd70be6947919c1e1f0e25e7e88c313b1fcdddc104d54d88a74edbb2",
+      "size": 683
+    },
+    {
+      "path": "app/modules/sessions/index.mjs",
+      "sha256": "08a6015cd3588f08070d341ad8cc5c9be8e34d217cf8770e154d4571225b3e2e",
+      "size": 840
+    },
+    {
+      "path": "app/modules/sessions/module.json",
+      "sha256": "da856dca2a4e2533a8a224806ccf10f792ed46e8266505a27339cf27e8a1edda",
+      "size": 459
+    },
+    {
+      "path": "app/modules/sessions/routes.mjs",
+      "sha256": "c2ed5ccf36a0c5398f3113cd79172bed917dfb6c9668f025e806e38d74f8c83b",
+      "size": 2595
+    },
+    {
+      "path": "app/modules/sessions/service.mjs",
+      "sha256": "a33995a82e02beaaa820bebc2875d14d684b1d4baeeb79d27dc7237c899f3249",
+      "size": 1375
+    },
+    {
+      "path": "app/modules/settings/index.mjs",
+      "sha256": "edc35b82678ef00e24fc6cb6a6d135bbca9acc980a17e59b15ba90b0a79490de",
+      "size": 1008
+    },
+    {
+      "path": "app/modules/settings/module.json",
+      "sha256": "a9eb8f3d9e1fe5c271c10f340885b840d8f4a8cb0f79825d0d36d497c9347914",
+      "size": 613
+    },
+    {
+      "path": "app/modules/settings/repository.mjs",
+      "sha256": "7b7ed59760da0338037b2d5038a9b422a62b4a818c62a74216d2fce215ac6490",
+      "size": 594
+    },
+    {
+      "path": "app/modules/settings/routes.mjs",
+      "sha256": "3717914c11da56a54dd0a22d139830a064f4c842c0f718517570470ecb9ed551",
+      "size": 2646
+    },
+    {
+      "path": "app/modules/settings/service.mjs",
+      "sha256": "07dcb652661f9c879877a5d0033f4388584b2c3a2eef58488c88cd7c5cadd78e",
+      "size": 8622
+    },
+    {
+      "path": "app/modules/system/module.json",
+      "sha256": "452a5262c418b393bdd8754fe90f9ea14edf61338f8dcfd6438f0852920f608c",
+      "size": 503
+    },
+    {
+      "path": "app/modules/themes/index.mjs",
+      "sha256": "92d968c993ee5a2afc14df557b7cba552cae9a41722989007eb0b784514333ff",
+      "size": 860
+    },
+    {
+      "path": "app/modules/themes/migrations/001_theme_profiles.sql",
+      "sha256": "1e062db871f9bf13b487c972f6cd4dd9cfe1b3046cd9b53ed43e0a0babc9d285",
+      "size": 808
+    },
+    {
+      "path": "app/modules/themes/module.json",
+      "sha256": "2af572390890e4d793aea9c1356c835917655c225a7848325d5a7c5ae3c08a09",
+      "size": 652
+    },
+    {
+      "path": "app/modules/themes/repository.mjs",
+      "sha256": "3c3dc5974976672cd0e9141867a8a1d78a0dfaa54582bafb8f360bea571bf11a",
+      "size": 3693
+    },
+    {
+      "path": "app/modules/themes/service.mjs",
+      "sha256": "4e2c348a184384739408894f26b02c56c6bfd4dd531eebb9c67d2fb7fbad3009",
+      "size": 3857
+    },
+    {
+      "path": "app/modules/users/index.mjs",
+      "sha256": "68cf3325307263022cd5704fd77664f7269896b8aa0570033c84b7abfba993ed",
+      "size": 825
+    },
+    {
+      "path": "app/modules/users/module.json",
+      "sha256": "c6558b8a0cd9d7ef30d0e259747805e3d91a5359c2dbfbd79e6794bb403a9926",
+      "size": 493
+    },
+    {
+      "path": "app/modules/users/routes.mjs",
+      "sha256": "04991fc68aa8322c388929abee67f2b591d1961ba150b0420e63621797380299",
+      "size": 8167
+    },
+    {
+      "path": "app/modules/users/service.mjs",
+      "sha256": "105078b0a393397209adb11579051b2090c5577e28febd9e0aa117cd1ee55165",
+      "size": 5898
+    },
+    {
+      "path": "bootstrap.mjs",
+      "sha256": "c197ce417fbce6dab1d8ee157b0a105a099dd2021ece4dac3891d0b2022a0d58",
+      "size": 1455
+    },
+    {
+      "path": "CHANGELOG.md",
+      "sha256": "521a25878eeef94963a335cd558ee529e4a5d108e89312ec7049f4ef9fa4c3aa",
+      "size": 63272
+    },
+    {
+      "path": "CLAUDE.md",
+      "sha256": "61823fc9fdc036170cce6edeecbb612b442d1c65fc9f7a7eaba47e5016316ee5",
+      "size": 4970
+    },
+    {
+      "path": "compose.bind-mounts.example.yaml",
+      "sha256": "61199cecda2c84954de2b60c07eb9f3a2117fbaaa4c430319c461b2e76a10254",
+      "size": 475
+    },
+    {
+      "path": "compose.vps.yaml",
+      "sha256": "5e98c9569b34d181dd891113c9e7af923b011781e6288c36fef3e668eac4f278",
+      "size": 2566
+    },
+    {
+      "path": "compose.yaml",
+      "sha256": "dfdf2121ef49b46a1548ed7c896d72ac16d59b1cb4bab85d203120b41b8c70a4",
+      "size": 1893
+    },
+    {
+      "path": "config/modules-state.json",
+      "sha256": "f96b90ebcc796abeaf94b47f46bfcb7cf252ee12c60206a65e44e7c06aa2351c",
+      "size": 447
+    },
+    {
+      "path": "db/schema.sql",
+      "sha256": "6323f984f1e04ab135356a14ec151941638041f6b305ed68772d5e1812972075",
+      "size": 9600
+    },
+    {
+      "path": "deploy/Caddyfile",
+      "sha256": "49690c4e4c8e84de8eb40ffe79823493b7be20fe46fa2ad9e6544f7f0afbfd2c",
+      "size": 299
+    },
+    {
+      "path": "deploy/coolify.env.example",
+      "sha256": "4ffc43e64b0e1e51a97d3f7f6a344ebcff537395008cf909c0fc4e3d3ab0c0cf",
+      "size": 1353
+    },
+    {
+      "path": "Dockerfile",
+      "sha256": "6ce9932a68950033c7afc0969d4f9d75c9d26d1e536465e9cb5568bcd666268a",
+      "size": 1556
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_32_0.md",
+      "sha256": "cc794bca282d79a27d860d0bfef4641769f4e9f31172778a1d9d8205558d948e",
+      "size": 5320
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_33_0.md",
+      "sha256": "de0d86f806a70195050613f5b56f6c4da1ee2eff02a9a991b6aacee229c46ca5",
+      "size": 1596
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_34_0.md",
+      "sha256": "947745174897470de0bebf4f7c2b29a0c0ef3f1a762f277374c2614d9e3dec4f",
+      "size": 2489
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_34_1.md",
+      "sha256": "26c87fa38f804749a9363812127dc33ef69e201e4ef9b59206f6fe6e15c845b0",
+      "size": 888
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_34_2.md",
+      "sha256": "f792d366c13c5a4a9b4e8d4054e26190d9c327a7a770005d74bbe2b31bb84ab3",
+      "size": 1242
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_34_3.md",
+      "sha256": "bc638fd21222ada7b15e40adff80a318aebec58139978109cbfd30040815a8d4",
+      "size": 789
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_35_0.md",
+      "sha256": "c0ae5c4176ba6f7510be047d4feaf383cd646152131003ebccc6bfbf8c8056f5",
+      "size": 2118
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_36_0.md",
+      "sha256": "c050c8e11f2bdb0a742851423dcff864bafba9cc839c52b2f8d48b75f7b18633",
+      "size": 1254
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_37_0.md",
+      "sha256": "1f3e96ba13844a3f1cefecca99b3d6313aebf86faae914897db0404ea031c491",
+      "size": 267
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_38_0.md",
+      "sha256": "361d19e6b7aeab3f22b337210f3a56221f2e42798c0fea75be978ebb7d72487f",
+      "size": 1379
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_39_0.md",
+      "sha256": "2f6518fd50d9088f5580cfcc03e92543321ac7feb97dcdd570c23c51fd8c5391",
+      "size": 760
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_40_2.md",
+      "sha256": "513144e961bcc6d3a6c6a5f82b80b24733f20cd2e0d14259b500b426a4f9dee6",
+      "size": 780
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_41_0.md",
+      "sha256": "1439ecb811af31dc2d54ca63f0521ad445e30940fae91ac7d23adc352c8332ad",
+      "size": 2204
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_41_1.md",
+      "sha256": "b23f235ef4ddf3bbc0fde848fefe9bdcc4b90d1efb25dc61d51cf7cb295415ec",
+      "size": 450
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_41_2.md",
+      "sha256": "2f199ee66a97bbec2671d528f3b22c4583530644f7c16a4820fbe9c05e731bbd",
+      "size": 316
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_42_0.md",
+      "sha256": "09bc8c5d9f7220990355068cd821c423fe2d2199de059a0381c22dca7789c8a2",
+      "size": 5175
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_1_43_0.md",
+      "sha256": "399f7c0cbc7144e9a25626da77d25ed69dff01d3a5b7fd71d7632f6d05607426",
+      "size": 1826
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_1.md",
+      "sha256": "640e4b8ac5e5b4e61a649f66eeef9c2b50fecda089cad47705fe5862a9998cb3",
+      "size": 1980
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_2.md",
+      "sha256": "eadfca68370d704a1dcb7e83db8b69fcfac5ff783dd3021803d256157218fa2e",
+      "size": 1158
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_4.md",
+      "sha256": "61a4f1f23e49494788044c4de7826a31358bfc20da912739c0ae657bac99515e",
+      "size": 2181
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_5.md",
+      "sha256": "3a2aa3cc986e4a962578354e25c359ecfd1e3721f8936ff6734f5fa70252097d",
+      "size": 507
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_6.md",
+      "sha256": "6ba0fd2fa112cd3efc1a87e2201b37b93cb65ce57d0c75b2d0306d713afa47c9",
+      "size": 524
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_8.md",
+      "sha256": "6d1f4268b58b4b498f1a2b3d0fdb2e79e5a4f89ad1f4df9cf3de323bcd5de019",
+      "size": 584
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_2_9.md",
+      "sha256": "87508535af18ee8ac6d18753365714b1e6ddc3600bc113f513581d5c8af2241c",
+      "size": 1367
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_1.md",
+      "sha256": "32a8d6e4b8587446ce9d63cc8e7264f1bbdf81fc3d8bfeaddb7da51b16902cda",
+      "size": 1939
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_2.md",
+      "sha256": "6646073577cc9a25da58f17d939cae81eff044be092c71954da49db8a3e616d1",
+      "size": 2256
+    },
+    {
+      "path": "docs/ABNAHMEBERICHT_PRODUCTION_UPDATER_3_3.md",
+      "sha256": "581e0d192e08a00d8f19b325320fecc3634c487fd3a75135852546fd6fc2cccc",
+      "size": 584
+    },
+    {
+      "path": "docs/architecture/CATALOG_MEDIA_MODULES_1_39_0.md",
+      "sha256": "b39d2d892068e1313fc00c9345d54240b6d50caf8a940261a088e67d8778ac63",
+      "size": 1571
+    },
+    {
+      "path": "docs/architecture/DESIGN_SYSTEM_1_35_0.md",
+      "sha256": "e5f065ba8d516a5ebd47e7e6859d0aab40ef69797413e358d969ef27c454fcdd",
+      "size": 1263
+    },
+    {
+      "path": "docs/architecture/IDENTITY_SETTINGS_MODULES_1_38_0.md",
+      "sha256": "732ef23db1ef50862a423841f58e4628ad3b2a2ef2744ed7c5ef1fe01e3e38d1",
+      "size": 1595
+    },
+    {
+      "path": "docs/architecture/MIGRATION_ROADMAP_1_35_0.md",
+      "sha256": "cc0edf92756a51414563b4407dedb21d1e3b36682f4bfbbc334aeb33a22ae1b4",
+      "size": 840
+    },
+    {
+      "path": "docs/architecture/MODULE_MANAGER_1_40_0.md",
+      "sha256": "db659979dfd6e08f36a7aa9b4de42750ac39c536b11fad694a1846c902ea65bf",
+      "size": 2432
+    },
+    {
+      "path": "docs/architecture/MODULE_SYSTEM_1_35_0.md",
+      "sha256": "eb47b055dd336e8360ec7c4712dee4ae37f109f3820e3f185969e2327d790cf8",
+      "size": 1832
+    },
+    {
+      "path": "docs/architecture/SECURITY_ARCHITECTURE_1_35_0.md",
+      "sha256": "d7773faac0e93510a5a51c91de997df03547b51f3124267dcf137d4e99299562",
+      "size": 1202
+    },
+    {
+      "path": "docs/architecture/SECURITY_FOUNDATION_1_37_0.md",
+      "sha256": "58cd43938b06e29520b92516a1e816d17d2c08d4847b99c1ee700b2185f46f20",
+      "size": 1249
+    },
+    {
+      "path": "docs/architecture/THEME_MANAGER_1_36_0.md",
+      "sha256": "771c4771c4d7335750c5a2d976c765b4ed66ed936d8550d7af69de14a16705bb",
+      "size": 1703
+    },
+    {
+      "path": "docs/AUDIT_1_31_0_IST_UND_LUECKENANALYSE.md",
+      "sha256": "67a1be91b0c2d2797716f785f2f770c881cf88d7fd617722468df8d949d0638a",
+      "size": 4709
+    },
+    {
+      "path": "docs/BRANDING.md",
+      "sha256": "2acba8fcc5da42e5a808925a86628bc0c6fc817ddb082b0ead3857c6a43460f1",
+      "size": 832
+    },
+    {
+      "path": "docs/COOLIFY_PRODUCTION_1_41_0.md",
+      "sha256": "2b833d05defcb782eea32fe5cb1b69d03322677a7babf6a36ade616da18fd6ab",
+      "size": 7878
+    },
+    {
+      "path": "docs/COOLIFY_UPDATE_1_42_0.md",
+      "sha256": "b48cca18bad97b59318cde20baf00101c0a1d558cab8d04c2f13eae9b9d8e2f5",
+      "size": 4712
+    },
+    {
+      "path": "docs/EIN_KLICK_UPDATE_1_42_0.md",
+      "sha256": "fca39cfecba10442bc09c0685504bb4552f6569f1768d46737cb7ff6d7907910",
+      "size": 1465
+    },
+    {
+      "path": "docs/FULL_LISTING_EDITOR_2026.md",
+      "sha256": "f23c643236c84b0e3715620598f358065748b6d090229003e23df8ad9320b54e",
+      "size": 1415
+    },
+    {
+      "path": "docs/GENERATOR_STUDIO_2026.md",
+      "sha256": "ba9a9b93622fadc399cd9067d80b4ea339193eb19825106264a3b86b7128d107",
+      "size": 1880
+    },
+    {
+      "path": "docs/GITHUB_DEPLOYMENT_1_34_0.md",
+      "sha256": "54f45ae5c2f12b6314b3f1bc3e59e753c64ca7cfe39644725d765e9f02f637ef",
+      "size": 2939
+    },
+    {
+      "path": "docs/GITHUB_IMPORT_STATUS_1_39_0.md",
+      "sha256": "e5c6ac33f5c0dc93099148d95af123a9aeb72298d885cabf0b1dc96a9cad31d7",
+      "size": 549
+    },
+    {
+      "path": "docs/GITHUB_IMPORT_STATUS_1_41_0.md",
+      "sha256": "509fd2822e4c547459fef9a54054d583dc21adb1b1101eda92603f1cbb783604",
+      "size": 571
+    },
+    {
+      "path": "docs/GITHUB_IMPORT_STATUS_1_41_1.md",
+      "sha256": "8e4ee3c837df6e929a819491b977123872191c8e4f041f8598c9479df10d28fa",
+      "size": 404
+    },
+    {
+      "path": "docs/GITHUB_IMPORT_STATUS_1_41_2.md",
+      "sha256": "16effe96702a6951b6cf3bb06da052420a492024c252a88b69256a3f4a92eccf",
+      "size": 360
+    },
+    {
+      "path": "docs/GITHUB_IMPORT_STATUS.md",
+      "sha256": "5a25e952d7d79b562bc19c990451830ea2ac3e730c9af399425ea18ffb8fd61d",
+      "size": 553
+    },
+    {
+      "path": "docs/GITHUB_MERGE_RELEASE_1_41_0.md",
+      "sha256": "65b7c1cb3a300fa8209628f32d843d1cfba7baaae1f1078bd3cfc1737443df92",
+      "size": 4840
+    },
+    {
+      "path": "docs/HOTFIX_1_23_1_EDITOR_CACHE_VINTED_FIELDS.md",
+      "sha256": "65d19c1576f4a6011008a7e447a3530222517752fb59ebc5bbb506b791e32605",
+      "size": 987
+    },
+    {
+      "path": "docs/HOTFIX_1_23_2_FLUX_EDITOR_JOB_COLLAPSE.md",
+      "sha256": "c9c8f934a0c4192dae29df913588188aab1321364d1c46b9c66da5c754e9df41",
+      "size": 1064
+    },
+    {
+      "path": "docs/HOTFIX_STUDIO_FLOW_DETAIL.md",
+      "sha256": "2306ff399000c07a9d7e260a58d92c748fa3219922a4dda25f6b2121a1ad2dbc",
+      "size": 571
+    },
+    {
+      "path": "docs/INSTALLATION_1_32_0_WINDOWS_DOCKER_NAS.md",
+      "sha256": "0584257245a29de62a6374eb8b114bd19fc6a36306ed990d820ed2062514d6a6",
+      "size": 4868
+    },
+    {
+      "path": "docs/INSTALLATION_1_33_0_MULTIPLATFORM.md",
+      "sha256": "7c1afdefd1e3a75a5d6b49aedae80e266bab4e91cbfc657fb862ddfd737dc792",
+      "size": 3325
+    },
+    {
+      "path": "docs/INSTALLATION_1_34_0_ZERO_EDIT.md",
+      "sha256": "1475e484cccb0db67e02abbb05f8b8e676c85536ec4f5bda7dd99d4563fbc049",
+      "size": 4061
+    },
+    {
+      "path": "docs/LISTINGS_UI_2026.md",
+      "sha256": "1df2aed413865c03e541e66249c1df3eed6d3c3aea9f0ffdeaee40453665df14",
+      "size": 1237
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_0.md",
+      "sha256": "cc2aac58e89bf3705d18d05288b6edc6c236438dc37db4353aabe9b5899b7c3a",
+      "size": 1008
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_1.md",
+      "sha256": "d54ecbfd70d503025984a375865b79296744a2c1c9ce51c3cbcc7f389dc6909d",
+      "size": 1651
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_2.md",
+      "sha256": "1233f78bb1dfc86a2be14c8ba5f2095fef263092e15be7a911d206360f69ff92",
+      "size": 1755
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_3.md",
+      "sha256": "01ecba0a3b29aeb5c8cc5f76a2663c50f6f258dd7fb5e1042c7344b64e4f8532",
+      "size": 1097
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_4.md",
+      "sha256": "efd90c2e1cb6c1a540998994d5861acaec0f89cd06368b3434ad7e8b0c8c8310",
+      "size": 1382
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_5.md",
+      "sha256": "fdb4a6dfa7e960d510a9917cf54311accfe6afc594812ee5e90e4e1fa59c2881",
+      "size": 875
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_6.md",
+      "sha256": "f36d2ec661225d9fde6cc140bf0b301ef5e8f0752935df9244b59e994ffe28bb",
+      "size": 929
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_8.md",
+      "sha256": "95cd88d142c9f9b6291aa77964a61189aaaf0c65a3038bcbe68705a40ddd7a07",
+      "size": 935
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_2_9.md",
+      "sha256": "dcc11ba5c3c4a63a12731fadcc89fc58c825cc239cb5147dd3ff8ba40504dfca",
+      "size": 646
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_3_1.md",
+      "sha256": "2c382fe9ef9c83aea0f64fd6c63c30352b21c95335657914305ecb5c65a85320",
+      "size": 1309
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_3_2.md",
+      "sha256": "6fa7e79e41cccf81d0cad3ba579e41283c71b4469a4804c913d11c5faeefc205",
+      "size": 1937
+    },
+    {
+      "path": "docs/PRODUCTION_UPDATER_3_3.md",
+      "sha256": "9c8957ea1593b55e9fe6786fa87fbb156874c7be3e3a54e0987bd94d18fb6bf0",
+      "size": 970
+    },
+    {
+      "path": "docs/PUBLISH_CENTER_2026.md",
+      "sha256": "4f74fef6877126d2579356b9731955e29f05ea8b55b59abb91569e47730a1c3f",
+      "size": 1132
+    },
+    {
+      "path": "docs/RELEASE_1_24_0_RESPONSIVE_MEDIA_FLUX_ARCHIVE.md",
+      "sha256": "bae236366d6d2cb0139e4dbf8baf099599bbff27aacc9eeeba20fdff644f5fb0",
+      "size": 2589
+    },
+    {
+      "path": "docs/RELEASE_1_24_0_VERIFICATION.json",
+      "sha256": "5223408e51f35ba5f6ce86155544311dd13f60522a6d482f372d64788ab466ac",
+      "size": 2322
+    },
+    {
+      "path": "docs/RELEASE_1_25_0_RESPONSIVE_GALLERY_SMARTCOPY_PROMPTLAB.md",
+      "sha256": "b66524ffd19976f650c6b26b299898b182355950f545c131de16c89fcffe0ebe",
+      "size": 3376
+    },
+    {
+      "path": "docs/RELEASE_1_25_0_VERIFICATION.json",
+      "sha256": "1c5ebf1a496c9571fe9d941793371f9f0be89d85a587c8fa9532f9b25bba92bc",
+      "size": 971
+    },
+    {
+      "path": "docs/RELEASE_1_25_1_ADAPTIVE_GALLERY.md",
+      "sha256": "1eef86e13d9429701e9d60894f36fe0eba82c974565b1a6687ed157ca6da680e",
+      "size": 808
+    },
+    {
+      "path": "docs/RELEASE_1_25_1_VERIFICATION.json",
+      "sha256": "14475ae4169f4bde4a5b7ae5512867f972ede69dcb621d7cc6a208d4fdc6a331",
+      "size": 1322
+    },
+    {
+      "path": "docs/RELEASE_1_26_0_ARTIKEL_EXTENSIONS_PUBLISH_GALLERY.md",
+      "sha256": "f02b80194f434dd3d82b5c4c111e8cae65f1f053a267cec2793a1ff551daff9a",
+      "size": 1449
+    },
+    {
+      "path": "docs/RELEASE_1_26_0_VERIFICATION.json",
+      "sha256": "570522a6513134227122da1b5f2f56a421c62d3b0b5adba703872e9026fa2b58",
+      "size": 877
+    },
+    {
+      "path": "docs/RELEASE_1_26_1_STABILITY_GATE.md",
+      "sha256": "4cfc47f35765259cbd6a841f51a85fa86600991d1ca545b10756f15b6d332f7f",
+      "size": 1364
+    },
+    {
+      "path": "docs/RELEASE_1_26_1_VERIFICATION.json",
+      "sha256": "9646b913994b1bf8ce03eab57e7a6a87061540e44fdde63ad5b7eee93ca9f475",
+      "size": 781
+    },
+    {
+      "path": "docs/RELEASE_1_30_0_OPERATIONS_CENTER.md",
+      "sha256": "7c6c3a2e4ce478f47e540a34a3505dbbe11b8f2175d0b274bec7643457997140",
+      "size": 2754
+    },
+    {
+      "path": "docs/RELEASE_1_30_0_VERIFICATION.json",
+      "sha256": "6f9c206869ba94c461b1d9f8e40847792b8891bb27809a0c6fa3d1d68a4e8598",
+      "size": 1177
+    },
+    {
+      "path": "docs/RELEASE_1_31_0_MULTIUSER_SECURITY.md",
+      "sha256": "5da62e06d768ce832d18fb3ecb3ccca2f051a6218d2d3cb492d1e5aebbcccb52",
+      "size": 1457
+    },
+    {
+      "path": "docs/RELEASE_1_31_0_VERIFICATION.json",
+      "sha256": "6288a31dfa61f71d13f79d40ab64bb7ca475de07ada154c002cd4b0d44a284dc",
+      "size": 1340
+    },
+    {
+      "path": "docs/RELEASE_1_32_0_DOCKER_NAS_PRODUCTION.md",
+      "sha256": "4ee88ff8c3c655cb31bc18192a37ffdd0eedf8e26039b252094d5ce169c1883c",
+      "size": 4198
+    },
+    {
+      "path": "docs/RELEASE_1_32_0_VERIFICATION.json",
+      "sha256": "628d4d1a6c7d837a0c8c22958253193642ddfeaab5f425f418f9f32b46e84340",
+      "size": 1318
+    },
+    {
+      "path": "docs/RELEASE_1_33_0_MULTIPLATFORM_DEPLOYMENT_FLUX_ADMIN.md",
+      "sha256": "624919ea60969079f767068771800dbc04ea7a87eb1a53d7f0497447492c25cb",
+      "size": 1087
+    },
+    {
+      "path": "docs/RELEASE_1_34_0_GITHUB_ZERO_EDIT.md",
+      "sha256": "3f9ae39792bec600ddd534284ae62cb2b4f9db01fb54c09cee8ae161551caa2a",
+      "size": 1910
+    },
+    {
+      "path": "docs/RELEASE_1_34_0_VERIFICATION.json",
+      "sha256": "c724b699894d5ec3c050af0253c6de0c645a789219a344ad7ffe31e330d9921b",
+      "size": 1332
+    },
+    {
+      "path": "docs/RELEASE_1_34_1_GIT_SAFETY_WINDOWS_HOTFIX.md",
+      "sha256": "7caa9e7b1e51af362332e9c50165b60c54c9219c7384c8313d3735c387df1c01",
+      "size": 1483
+    },
+    {
+      "path": "docs/RELEASE_1_34_1_VERIFICATION.json",
+      "sha256": "ac834ee57ab6bd8fe3dd0238837193e66e01d7e78590a289347b002591da3fb4",
+      "size": 381
+    },
+    {
+      "path": "docs/RELEASE_1_34_2_GIT_SAFETY_DIAGNOSTICS_STAGING_FILTER.md",
+      "sha256": "51057d17e2636ef1bdfc6751dfad29ebd34fbe7f41b870f8f2f756a5c97d1c4a",
+      "size": 2038
+    },
+    {
+      "path": "docs/RELEASE_1_34_2_VERIFICATION.json",
+      "sha256": "4c2c141ffc85b1d7517672abf2b28bb19fe4769505c0eb4d37e22bae06826cb3",
+      "size": 555
+    },
+    {
+      "path": "docs/RELEASE_1_34_3_UPDATE_ARCHIVE_EXCLUSION.md",
+      "sha256": "d55eaec79e10800a930fa030367ffa34037755e5757bc532e72d25711c5ca09a",
+      "size": 892
+    },
+    {
+      "path": "docs/RELEASE_1_34_3_VERIFICATION.json",
+      "sha256": "4bb731af51e786a4827ec48bc7c4d4843c287456aedc09d8b74aa0eed3c0ec16",
+      "size": 830
+    },
+    {
+      "path": "docs/RELEASE_1_35_0_PLATFORM_KERNEL.md",
+      "sha256": "e7bb3bb950e3c5303746f43139ca8f7c985d2d73896b44f5b707dd46a9152529",
+      "size": 2329
+    },
+    {
+      "path": "docs/RELEASE_1_35_0_VERIFICATION.json",
+      "sha256": "33eb9f0059a2ddc4b4debe5bf733720f2a5bb22f2710bab0a0cc9ac1b898ff11",
+      "size": 804
+    },
+    {
+      "path": "docs/RELEASE_1_36_0_SECURE_THEME_MANAGER.md",
+      "sha256": "5a9fcfa0ea6e9c5c13f6d943e1de4d31c21e21fcff9186e8a714d7a16ed1c18f",
+      "size": 1513
+    },
+    {
+      "path": "docs/RELEASE_1_36_0_VERIFICATION.json",
+      "sha256": "2dfe705857424865f101e861f4e633c8a7fb3c0e8dab874cb6620fd09b1ca902",
+      "size": 1131
+    },
+    {
+      "path": "docs/RELEASE_1_37_0_SECURITY_SECRETS_OBSERVABILITY.md",
+      "sha256": "527806c00fb51334457726a9a7e9f6fc13f4dacd985fa2d2b97d5eb21c543853",
+      "size": 338
+    },
+    {
+      "path": "docs/RELEASE_1_38_0_AUTH_USERS_SESSIONS_SETTINGS.md",
+      "sha256": "c3a8a21f5a3c3edb05ab1762a06d05b7f6eced3be84cb4f6f5e7f31bc627f06b",
+      "size": 2004
+    },
+    {
+      "path": "docs/RELEASE_1_38_0_VERIFICATION.json",
+      "sha256": "c17771f19c2dfd6629fb91b66dfd661eed3459f820b71a427f0f98b07b45c56d",
+      "size": 1222
+    },
+    {
+      "path": "docs/RELEASE_1_39_0_LISTINGS_INVENTORY_MEDIA.md",
+      "sha256": "26355d15c188b1ce3bd03a539e1b27ee884352db48e5db423f60cdcd4d9d49f3",
+      "size": 568
+    },
+    {
+      "path": "docs/RELEASE_1_39_0_VERIFICATION.json",
+      "sha256": "c016becfaa0c1ae5bcee255476dd2a09fd465308f5ec2fba6d3c6809b009538b",
+      "size": 503
+    },
+    {
+      "path": "docs/RELEASE_1_40_0_MODULE_MANAGER.md",
+      "sha256": "837ac91a926330b800a027a61d4a2aa0386cfd61f9b7949231bbb09e1ca0e6c3",
+      "size": 538
+    },
+    {
+      "path": "docs/RELEASE_1_40_0_VERIFICATION.json",
+      "sha256": "e52467c05ad08a262ff812989f2be19bfad3038f35f61e9deabcbf61b81fa5df",
+      "size": 378
+    },
+    {
+      "path": "docs/RELEASE_1_40_2_CAPABILITY_GRAPH_HOTFIX.md",
+      "sha256": "dd77564536e5d85eaa76c7a429a61f73ac78547d72734620bc4102b3452cd7b4",
+      "size": 948
+    },
+    {
+      "path": "docs/RELEASE_1_41_0_COOLIFY_PRODUCTION.md",
+      "sha256": "69b6df0262868a6e6ef81f406ee4c9acd3f662d1f6ee11d7fdd5fea96a2f0de7",
+      "size": 3034
+    },
+    {
+      "path": "docs/RELEASE_1_41_0_VERIFICATION.json",
+      "sha256": "97f7bc395f2ce6bef24140e75dc8956a0d56cbaf15cb94876d4594d7aa54b1db",
+      "size": 755
+    },
+    {
+      "path": "docs/RELEASE_1_41_1_CI_SOURCE_ROOT_ARCHIVE_EXCLUSION_HOTFIX.md",
+      "sha256": "29c795b5599bafdf0f911a4c7ab2844ca3fb311bcdd5f3983c7fa2742110c3ff",
+      "size": 1399
+    },
+    {
+      "path": "docs/RELEASE_1_41_2_GIT_IGNORE_BOUNDARY_HOTFIX.md",
+      "sha256": "178927940cc1266307f81bbf418870e627d2e52b4956c2d9065c31e04c9bf7dc",
+      "size": 674
+    },
+    {
+      "path": "docs/RELEASE_1_42_0_PRODUCTION_OPERATIONS.md",
+      "sha256": "b9065fab4beaefc04f396101386c3d3bf068102d5e108682b038de62997411ab",
+      "size": 2598
+    },
+    {
+      "path": "docs/RELEASE_1_43_0_MODULE_NAVIGATION_LISTING_STUDIO_UPDATER_UI.md",
+      "sha256": "43c4828b3ca27e39e39f54c9b96b881f0f804757c2181841f828a852323de55b",
+      "size": 516
+    },
+    {
+      "path": "docs/RESTORE_RUNBOOK_1_42_0.md",
+      "sha256": "21813c00eb52c5e569d4c3496ac93f957cd5f304bc67d90cdc77f979a24a414b",
+      "size": 2137
+    },
+    {
+      "path": "docs/ROADMAP_1_38_0.md",
+      "sha256": "1908713d7458ecacc833faced77984ef5c0155cd61b0eac13a4f874e3f3a5676",
+      "size": 746
+    },
+    {
+      "path": "docs/ROADMAP_1_39_0.md",
+      "sha256": "185b1007c90273126ebe92bffe69f88ae4ec4a3f04451cb9d5d4b772a0482391",
+      "size": 698
+    },
+    {
+      "path": "docs/ROADMAP_1_40_0.md",
+      "sha256": "b581d7d949139f37798dded557235a679621172f444a6271e7fc7ade3020299a",
+      "size": 545
+    },
+    {
+      "path": "docs/SLICE_02_ACCEPTANCE.md",
+      "sha256": "fe5756f788b2ab131f0832504d90d46d1ed744bfe470fd040803985234afa3cf",
+      "size": 1131
+    },
+    {
+      "path": "docs/SLICE_05_ACCEPTANCE.md",
+      "sha256": "05614ecf41becc399acfa6a3b2f681f37a8c80f5ce0130b98c578b2c8c60713c",
+      "size": 1079
+    },
+    {
+      "path": "docs/SLICE_06_ACCEPTANCE.md",
+      "sha256": "0838bcc6464a6beff39f0b4b056e513c1a390193521d9a8fc5d440d38034e9d0",
+      "size": 1205
+    },
+    {
+      "path": "docs/SLICE_07_EXTENSIONS_RESPONSIVE_MOBILE.md",
+      "sha256": "ae0f7c6f6e614ec77e362db1076288596ec48d11b78f33f26908fbc40ae5dd18",
+      "size": 1464
+    },
+    {
+      "path": "docs/SLICE_08_EXTENSION_AUTOFILL_UX.md",
+      "sha256": "b561983736639a08146d3642b718651907853d589ee32e5f421fc090f2c75a20",
+      "size": 983
+    },
+    {
+      "path": "docs/SLICE_11_DASHBOARD_RESPONSIVE_HOTFIX.md",
+      "sha256": "c5bf7a0c9f787f100e422d0deb27bffc2c8c86b0e7c1ce1f35d2de8d7d8ea774",
+      "size": 612
+    },
+    {
+      "path": "docs/SLICE_22_1_SETUP_AUTO_RECOVERY.md",
+      "sha256": "876675bc3015838f568a6970ef6c01c9fcafe1d8d138c4379bc0f2ee1fd7445b",
+      "size": 1492
+    },
+    {
+      "path": "docs/SLICE_22_2_DOWNLOAD_RECOVERY.md",
+      "sha256": "223f50d05096b3bfa3ac3a9f0880a2055fc2029b7d70fabd086612c3348cb34a",
+      "size": 1221
+    },
+    {
+      "path": "docs/SLICE_22_3_POWERSHELL_51_PARSER_FIX.md",
+      "sha256": "95e1d560378120d7ccb0f363720ba832505631aa65616abd4df01baba5ecc269",
+      "size": 842
+    },
+    {
+      "path": "docs/SLICE_22_3_SHA256.json",
+      "sha256": "88f5a2d021874764b6a7f56c690a1e2112155b83cdf0d4d964b2c6e00ca756de",
+      "size": 393
+    },
+    {
+      "path": "docs/SLICE_22_4_SHA256.json",
+      "sha256": "791a5d30f0d6ff9664722a2d00dff0db0bbdf2207e83ab391a40d6c4ab913bba",
+      "size": 709
+    },
+    {
+      "path": "docs/SLICE_22_4_UTF8_BOM_FIX.md",
+      "sha256": "d14c938c6c9397290f654406d4b995b63db0f22586e78fc97fb5fef575748807",
+      "size": 816
+    },
+    {
+      "path": "docs/SLICE_22_4_VERIFICATION.json",
+      "sha256": "f00c325ec3c879b47908dd5410cc943febb923200e9b9bd7d18197b1570a26fe",
+      "size": 566
+    },
+    {
+      "path": "docs/SLICE_23_FLUX_REFERENCE_PROGRESS_SETTINGS.md",
+      "sha256": "e140f3ee3298b3894126e37900b04ff1073ed400e6414e35897815b3f674d93e",
+      "size": 2152
+    },
+    {
+      "path": "docs/SLICE_23_VERIFICATION.json",
+      "sha256": "b4b01b9f3751940d184d6fff269108798c7ec62ca7796b923cf82abbc142ff3b",
+      "size": 2617
+    },
+    {
+      "path": "docs/SLICE_26_9_VERIFICATION.json",
+      "sha256": "0516cd95072cbdc7c6ffabd4348de14457b4225c1758b8c65577b5abdaece5b3",
+      "size": 559
+    },
+    {
+      "path": "docs/SLICE_28_1_FLUX_RUNTIME_HEALTHCHECK.md",
+      "sha256": "05e3fcf5aa9a0d8d53175a3d24c5feb36e55f73edfeadf05384e87a5de73353a",
+      "size": 820
+    },
+    {
+      "path": "docs/SLICE_28_FLUX_STUDIO_VTO_CLEANUP.md",
+      "sha256": "43d867bb8b455f7450e5146648b28c759e50ebab45855d75a36dbc9f91d3f654",
+      "size": 1218
+    },
+    {
+      "path": "docs/SLICE_28_VERIFICATION.json",
+      "sha256": "0bdbeed4b57767427afbebeddc30ea58a211f851663939d6301af38820cf098f",
+      "size": 895
+    },
+    {
+      "path": "docs/SLICE_29_FLUX_QUALITY_SETTINGS_TABS.md",
+      "sha256": "1e20fd1abea3ce61f7f9cc88c6e8e4ddb0fe3513c5600e41b8f7c3f8d38e3ae9",
+      "size": 539
+    },
+    {
+      "path": "docs/SLICE_29_VERIFICATION.json",
+      "sha256": "1df7305e6a43212a582d5f83630e0ba04fbdd3da0d673d9dcb8f1c5f7ca37731",
+      "size": 742
+    },
+    {
+      "path": "docs/SLICE_30_FLUX_STUDIO_PRO.md",
+      "sha256": "07d1ad0c19567cbdb05623567816f1506197a31e86fbcd1742f4ffa300335ae4",
+      "size": 3201
+    },
+    {
+      "path": "docs/SLICE_30_VERIFICATION.json",
+      "sha256": "008237388c4816d3cd67f3f0abfd0512f4ebf2dce75ab6790de41b0481ae1d97",
+      "size": 2497
+    },
+    {
+      "path": "docs/SLICE_31_ADVANCED_IMAGE_EDITOR.md",
+      "sha256": "db1674505e2ca7eb36c8752ea9b2d6fe2f2c12a5e6a1584e2722e20445b05e34",
+      "size": 2149
+    },
+    {
+      "path": "docs/SLICE_31_VERIFICATION.json",
+      "sha256": "3133a06e68cd98e615797665956f1bc401c0427045298b46c48ca590be3ef9da",
+      "size": 3844
+    },
+    {
+      "path": "docs/SLICE_32_BATCH_IMAGE_FACTORY.md",
+      "sha256": "d425fc1724ac55853bf3433348486de8f8aab111f53fefee3c532beb1deb82af",
+      "size": 2342
+    },
+    {
+      "path": "docs/SLICE_32_VERIFICATION.json",
+      "sha256": "0a8917412d000168956f7ac55e60ab79b54a8834deef0386a681bb8f920514cd",
+      "size": 905
+    },
+    {
+      "path": "docs/SLICE_33_ARTICLE_QUALITY_CENTER.md",
+      "sha256": "25ff8492360d473e99c75c308be5f75cf84e0c11574d42aa6553d44f8bb35582",
+      "size": 1228
+    },
+    {
+      "path": "docs/SLICE_33_VERIFICATION.json",
+      "sha256": "1d5411f69c62222d3155f0e89f2b4b5a3effe317ea1e59347efa7730a8e1b0e9",
+      "size": 461
+    },
+    {
+      "path": "docs/SLICE_34_PUBLISHING_HARDENING.md",
+      "sha256": "1161decfabd73c40ff1d2ffbc7d1b9b5168a8fb5fa392187c1b431e9a7f3a78f",
+      "size": 1933
+    },
+    {
+      "path": "docs/SLICE_34_VERIFICATION.json",
+      "sha256": "aa7ebc90470071566749c61b0dece4169f87666dcca4b88922f7fbafcfdd5a84",
+      "size": 776
+    },
+    {
+      "path": "docs/superpowers/specs/2026-07-06-autolister-features-design.md",
+      "sha256": "cc77a92ca268d3c444c6113a9cfaa38d3c805a579f6b1b21b7dd43a6ada58551",
+      "size": 2773
+    },
+    {
+      "path": "docs/UI_FOUNDATION_2026.md",
+      "sha256": "4b66a14b4515e38477f10325ab9d03d9782ad0d426845aefe2d508986ed2cd81",
+      "size": 1508
+    },
+    {
+      "path": "docs/UI_UX_FIXES_SLICE_03.md",
+      "sha256": "5e655fcf3bb1182f8850b4104b56697ea952b01d2698af6d3d40b05e338b3506",
+      "size": 1215
+    },
+    {
+      "path": "docs/UPDATER_HOTFIX_1_43_0_H1.md",
+      "sha256": "7da8488d5c53572e6dabb301eb5f408c9235e39ca4d5cda7176c2abf777b6615",
+      "size": 687
+    },
+    {
+      "path": "docs/UPDATER_HOTFIX_1_43_0_H2.md",
+      "sha256": "227ba6c35304d2d56832b331f7ae7019e025d417c73e737193d3cf37d6d88ffe",
+      "size": 967
+    },
+    {
+      "path": "docs/WEB_UPDATE_CENTER_1_41_0.md",
+      "sha256": "31b3d3ef6368e0b09b073d5641fd5649264fe78662de5d9ca4c1eef71f300e15",
+      "size": 1314
+    },
+    {
+      "path": "extension/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extension/content.css",
+      "sha256": "b86f00c7afa1dc921dd66f5cfea8c817eebc8876b9daca6a55dfd03680156c79",
+      "size": 28529
+    },
+    {
+      "path": "extension/content.js",
+      "sha256": "8ee8d1a94bbf83e5d09aee3c7d8c4ea5f216b2a51e73b6dbc74f7e6b99017a1c",
+      "size": 65065
+    },
+    {
+      "path": "extension/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extension/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extension/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extension/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extension/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extension/manifest.json",
+      "sha256": "c2fdc0530c71ef400fe9d52aed914f65d331b0d89dfae7ef1d156d54d1a22a6b",
+      "size": 1302
+    },
+    {
+      "path": "extension/popup.css",
+      "sha256": "e61fd8e1264995fd633bd76e71329813dd02f361286329832a18dfd5a8bdd372",
+      "size": 6526
+    },
+    {
+      "path": "extension/popup.html",
+      "sha256": "bdf5b794473cae818789cf95a28a9c9a9d50f81529d72fdf45a536247a783922",
+      "size": 3753
+    },
+    {
+      "path": "extension/popup.js",
+      "sha256": "d7893cfdd686d4a6a1bea333468d4ba72cfff0e7166687181a2d37ba1faf3332",
+      "size": 6376
+    },
+    {
+      "path": "extension/README.txt",
+      "sha256": "c7db96df5fed3c8336062204322d62b4870f5c8ab1d30ea48cc6e7e38ed3513b",
+      "size": 534
+    },
+    {
+      "path": "extension/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "extensions/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extensions/chrome/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extensions/chrome/content.css",
+      "sha256": "c5a0ca59a8858e9bd484d1e5fb7a2aca72db092fb062674f531bb76f5a0c952e",
+      "size": 33987
+    },
+    {
+      "path": "extensions/chrome/content.js",
+      "sha256": "22bd64723d279a6229bccba2a4cec56f1ae83f4cd5628bd1a1841930b0f442f6",
+      "size": 66901
+    },
+    {
+      "path": "extensions/chrome/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extensions/chrome/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extensions/chrome/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extensions/chrome/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extensions/chrome/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extensions/chrome/manifest.json",
+      "sha256": "c2fdc0530c71ef400fe9d52aed914f65d331b0d89dfae7ef1d156d54d1a22a6b",
+      "size": 1302
+    },
+    {
+      "path": "extensions/chrome/popup.css",
+      "sha256": "e3a3863b58a571a0f0180bdd333f9389b918415b4ea96b70f3ab6d4105d95c50",
+      "size": 5854
+    },
+    {
+      "path": "extensions/chrome/popup.html",
+      "sha256": "559dc70841ebb186ff96f9f2ba32ef26a3a7f8edd08363f09c0d7163049eae5a",
+      "size": 3510
+    },
+    {
+      "path": "extensions/chrome/popup.js",
+      "sha256": "2bf2d5ccf02622cf1d62fd553d21c0ef1b744616742e7962ac302c10d37426e2",
+      "size": 8789
+    },
+    {
+      "path": "extensions/chrome/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "extensions/content.css",
+      "sha256": "c5a0ca59a8858e9bd484d1e5fb7a2aca72db092fb062674f531bb76f5a0c952e",
+      "size": 33987
+    },
+    {
+      "path": "extensions/content.js",
+      "sha256": "22bd64723d279a6229bccba2a4cec56f1ae83f4cd5628bd1a1841930b0f442f6",
+      "size": 66901
+    },
+    {
+      "path": "extensions/edge/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extensions/edge/content.css",
+      "sha256": "c5a0ca59a8858e9bd484d1e5fb7a2aca72db092fb062674f531bb76f5a0c952e",
+      "size": 33987
+    },
+    {
+      "path": "extensions/edge/content.js",
+      "sha256": "22bd64723d279a6229bccba2a4cec56f1ae83f4cd5628bd1a1841930b0f442f6",
+      "size": 66901
+    },
+    {
+      "path": "extensions/edge/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extensions/edge/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extensions/edge/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extensions/edge/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extensions/edge/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extensions/edge/manifest.json",
+      "sha256": "c2fdc0530c71ef400fe9d52aed914f65d331b0d89dfae7ef1d156d54d1a22a6b",
+      "size": 1302
+    },
+    {
+      "path": "extensions/edge/popup.css",
+      "sha256": "e3a3863b58a571a0f0180bdd333f9389b918415b4ea96b70f3ab6d4105d95c50",
+      "size": 5854
+    },
+    {
+      "path": "extensions/edge/popup.html",
+      "sha256": "559dc70841ebb186ff96f9f2ba32ef26a3a7f8edd08363f09c0d7163049eae5a",
+      "size": 3510
+    },
+    {
+      "path": "extensions/edge/popup.js",
+      "sha256": "2bf2d5ccf02622cf1d62fd553d21c0ef1b744616742e7962ac302c10d37426e2",
+      "size": 8789
+    },
+    {
+      "path": "extensions/edge/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "extensions/firefox/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extensions/firefox/content.css",
+      "sha256": "c5a0ca59a8858e9bd484d1e5fb7a2aca72db092fb062674f531bb76f5a0c952e",
+      "size": 33987
+    },
+    {
+      "path": "extensions/firefox/content.js",
+      "sha256": "22bd64723d279a6229bccba2a4cec56f1ae83f4cd5628bd1a1841930b0f442f6",
+      "size": 66901
+    },
+    {
+      "path": "extensions/firefox/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extensions/firefox/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extensions/firefox/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extensions/firefox/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extensions/firefox/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extensions/firefox/manifest.json",
+      "sha256": "1954ca9f34b3afe109935173f685482f06bb685a9b8f0d4c344f0c6133ccfaaf",
+      "size": 1424
+    },
+    {
+      "path": "extensions/firefox/popup.css",
+      "sha256": "e3a3863b58a571a0f0180bdd333f9389b918415b4ea96b70f3ab6d4105d95c50",
+      "size": 5854
+    },
+    {
+      "path": "extensions/firefox/popup.html",
+      "sha256": "559dc70841ebb186ff96f9f2ba32ef26a3a7f8edd08363f09c0d7163049eae5a",
+      "size": 3510
+    },
+    {
+      "path": "extensions/firefox/popup.js",
+      "sha256": "2bf2d5ccf02622cf1d62fd553d21c0ef1b744616742e7962ac302c10d37426e2",
+      "size": 8789
+    },
+    {
+      "path": "extensions/firefox/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "extensions/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extensions/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extensions/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extensions/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extensions/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extensions/manifest.chromium.json",
+      "sha256": "c2fdc0530c71ef400fe9d52aed914f65d331b0d89dfae7ef1d156d54d1a22a6b",
+      "size": 1302
+    },
+    {
+      "path": "extensions/manifest.firefox.json",
+      "sha256": "1954ca9f34b3afe109935173f685482f06bb685a9b8f0d4c344f0c6133ccfaaf",
+      "size": 1424
+    },
+    {
+      "path": "extensions/packages/vendoo-link-chrome-1.7.0.zip",
+      "sha256": "86646989c12663f98135623bf1162ef9960ab95d6ab97745a3c4ba2657a603b4",
+      "size": 58162
+    },
+    {
+      "path": "extensions/packages/vendoo-link-chrome-1.9.0.zip",
+      "sha256": "e4ea31f91a4c8df18901bfc77fc351a8808d19d690243b80bc4faa140e18f851",
+      "size": 59132
+    },
+    {
+      "path": "extensions/packages/vendoo-link-edge-1.7.0.zip",
+      "sha256": "aa1b329b0f1e14c5abcdb14699919dab090d32c261b94b24300eb642703f7802",
+      "size": 58110
+    },
+    {
+      "path": "extensions/packages/vendoo-link-edge-1.9.0.zip",
+      "sha256": "e4ea31f91a4c8df18901bfc77fc351a8808d19d690243b80bc4faa140e18f851",
+      "size": 59132
+    },
+    {
+      "path": "extensions/packages/vendoo-link-firefox-1.7.0.zip",
+      "sha256": "7683a597861f111e8e349a3e712f981ff88ae46f71542f776ed7cd75547f62e6",
+      "size": 58238
+    },
+    {
+      "path": "extensions/packages/vendoo-link-firefox-1.9.0.zip",
+      "sha256": "74c219587cf0f827a1a1e2b8adacac55477be717fd4ae80e2ae027a9ffb0744d",
+      "size": 59180
+    },
+    {
+      "path": "extensions/packages/vendoo-link-safari-1.7.0.zip",
+      "sha256": "ca0f288dc8a07183be860cf70f8a3d560c669220067689f749f069fd131dfdcb",
+      "size": 59433
+    },
+    {
+      "path": "extensions/packages/vendoo-link-safari-1.9.0.zip",
+      "sha256": "9e828844f41154c87ccfc5d8f3a19476396e2782fbd0f956465b42fb508cb098",
+      "size": 60635
+    },
+    {
+      "path": "extensions/popup.css",
+      "sha256": "e3a3863b58a571a0f0180bdd333f9389b918415b4ea96b70f3ab6d4105d95c50",
+      "size": 5854
+    },
+    {
+      "path": "extensions/popup.html",
+      "sha256": "559dc70841ebb186ff96f9f2ba32ef26a3a7f8edd08363f09c0d7163049eae5a",
+      "size": 3510
+    },
+    {
+      "path": "extensions/popup.js",
+      "sha256": "2bf2d5ccf02622cf1d62fd553d21c0ef1b744616742e7962ac302c10d37426e2",
+      "size": 8789
+    },
+    {
+      "path": "extensions/README.md",
+      "sha256": "48b5f9f4ecc1c1c42f37321e9bb2fc857c646b9c16c34520fc7d4ca59a1036ac",
+      "size": 1994
+    },
+    {
+      "path": "extensions/safari/build-safari-extension.command",
+      "sha256": "0b2a03d06faae7aaebeee8ec9fe1864422c8651f17ae90b185fd31474ac5eeb0",
+      "size": 439
+    },
+    {
+      "path": "extensions/safari/README_SAFARI.md",
+      "sha256": "afd76deccd8bcf26d39f8c86deb1de578873ddd8b09ac18eebacae33169bb420",
+      "size": 569
+    },
+    {
+      "path": "extensions/safari/web-extension/background.js",
+      "sha256": "3873602c1529daad6647a7585c858d817821de0afbec93a26d1b3f5a7b9cb01e",
+      "size": 2733
+    },
+    {
+      "path": "extensions/safari/web-extension/content.css",
+      "sha256": "c5a0ca59a8858e9bd484d1e5fb7a2aca72db092fb062674f531bb76f5a0c952e",
+      "size": 33987
+    },
+    {
+      "path": "extensions/safari/web-extension/content.js",
+      "sha256": "22bd64723d279a6229bccba2a4cec56f1ae83f4cd5628bd1a1841930b0f442f6",
+      "size": 66901
+    },
+    {
+      "path": "extensions/safari/web-extension/icon-128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "extensions/safari/web-extension/icon-16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "extensions/safari/web-extension/icon-32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "extensions/safari/web-extension/icon-48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "extensions/safari/web-extension/icon.svg",
+      "sha256": "5904aad2263358a5be638db435d5a0576b8c2bf21d1a20114636d65dbdbc07a8",
+      "size": 542
+    },
+    {
+      "path": "extensions/safari/web-extension/manifest.json",
+      "sha256": "772f1e2e33f4d6d882fa0af663e315fd3b8208141227bb5beb9baaf1f4e08397",
+      "size": 1291
+    },
+    {
+      "path": "extensions/safari/web-extension/popup.css",
+      "sha256": "e3a3863b58a571a0f0180bdd333f9389b918415b4ea96b70f3ab6d4105d95c50",
+      "size": 5854
+    },
+    {
+      "path": "extensions/safari/web-extension/popup.html",
+      "sha256": "559dc70841ebb186ff96f9f2ba32ef26a3a7f8edd08363f09c0d7163049eae5a",
+      "size": 3510
+    },
+    {
+      "path": "extensions/safari/web-extension/popup.js",
+      "sha256": "2bf2d5ccf02622cf1d62fd553d21c0ef1b744616742e7962ac302c10d37426e2",
+      "size": 8789
+    },
+    {
+      "path": "extensions/safari/web-extension/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "extensions/vinted-categories.js",
+      "sha256": "273322e8dc29b0c6b639a6cc7e44a9570ceece09306fd46003b05a8fc86c88b7",
+      "size": 12262
+    },
+    {
+      "path": "FEATURES.md",
+      "sha256": "3554b4a2b6619ffc90e4689524ae46db532b2fa0da23ebb0f26f4fc01acc6eb6",
+      "size": 48612
+    },
+    {
+      "path": "GitHub-Deploy-Assistent.bat",
+      "sha256": "2ac25489fd4c5b57af0ae1ec2fe1f09c230dec6a631956f759d3099c1f94b8de",
+      "size": 130
+    },
+    {
+      "path": "lib/ai-claude.mjs",
+      "sha256": "9a5bfcafdce53130d7bc36695090a8f87096b4ead9dd5ccc3d46d1d80c07a0fa",
+      "size": 1298
+    },
+    {
+      "path": "lib/ai-flux-prompt-jobs.mjs",
+      "sha256": "ad6ba4ef521557d5c06bc546cda70db57e710e8173daadae74e8f15f99836c1c",
+      "size": 27932
+    },
+    {
+      "path": "lib/ai-local-images.mjs",
+      "sha256": "347778ce521a1919ec0679918171dc625d7f04d6dec26c8a4700e702bc78de67",
+      "size": 22528
+    },
+    {
+      "path": "lib/ai-local.mjs",
+      "sha256": "aeb5103c0179232b9954b7854be8099cf4bb0f3ef1ee908eb5e4faf6a8f1205f",
+      "size": 2115
+    },
+    {
+      "path": "lib/ai-model-jobs.mjs",
+      "sha256": "29fbe09982b0b327b773bd119f57f50363424161815ac894ca4d677759e93e83",
+      "size": 4492
+    },
+    {
+      "path": "lib/ai-model-photos.mjs",
+      "sha256": "9f474f665d6d610fe00d9e707e85314a854abb906e31db2bb9a3a7c76785ff4f",
+      "size": 31121
+    },
+    {
+      "path": "lib/ai-openai.mjs",
+      "sha256": "3fb484456b9e6374f14b53a2276eea8533642b7c9073bb73a1bb0dbed7048bbd",
+      "size": 1345
+    },
+    {
+      "path": "lib/ai-openrouter.mjs",
+      "sha256": "581c10b8346d0aa10169ed23ed49c038951ecd5cac014722c1080bbd5aec1c5b",
+      "size": 5478
+    },
+    {
+      "path": "lib/ai-router.mjs",
+      "sha256": "271696d7cbef3581b667a8ce3b07d0b17b1e8b467fbede4d8aa512ecc5225515",
+      "size": 1337
+    },
+    {
+      "path": "lib/archive.mjs",
+      "sha256": "76a2f1fdf60053739d82962264219060807022dfc9a2b3a644946fddff02a8d9",
+      "size": 3833
+    },
+    {
+      "path": "lib/auth.mjs",
+      "sha256": "2015974b9ceced554ecf0cfbdbf50a7d1db57459d50fb0241b8e9277559e70f4",
+      "size": 149
+    },
+    {
+      "path": "lib/categories.mjs",
+      "sha256": "3e2b75c0758703e590233cbcc9b589e3177134accecf5ed921791891cbfc8522",
+      "size": 17181
+    },
+    {
+      "path": "lib/config-store.mjs",
+      "sha256": "86793fb57a1dad32f4d93e34c27ffe9e77a95785dd30b2b55ffb67d0ad5e14fb",
+      "size": 1644
+    },
+    {
+      "path": "lib/db.mjs",
+      "sha256": "f6564cf6525dddda2bc1a78da3b41d782862878ccf7f28026a59d9a1ad8ec6a6",
+      "size": 71123
+    },
+    {
+      "path": "lib/ebay-api.mjs",
+      "sha256": "54722d3f76ad9ee4fbe731d3a65c2a03d343eb82d98f8ea5a5996b1bec24d57f",
+      "size": 9849
+    },
+    {
+      "path": "lib/etsy-api.mjs",
+      "sha256": "524f1b48d467998da819f0b947f2551ad45784e588eb442304c5f6e925dffaee",
+      "size": 5307
+    },
+    {
+      "path": "lib/fees.mjs",
+      "sha256": "5b2c566ff14fa502ba2cd4d4c918fe238a8e93c3283d521144093a897f9d8018",
+      "size": 2598
+    },
+    {
+      "path": "lib/html-templates.mjs",
+      "sha256": "7dcb2fb5606140afb7a019094d20ef88e9b4e2c70041f77b06d67d8992fd25ce",
+      "size": 10434
+    },
+    {
+      "path": "lib/image-batch-jobs.mjs",
+      "sha256": "e41a13284429ac01652d979efd0734d5a2b29945e7e93a910b44eaefab9c00b6",
+      "size": 19550
+    },
+    {
+      "path": "lib/image-editor.mjs",
+      "sha256": "5ca5fc65a7de7c27243646d291dc42c0b5267a47705a09b306cd2c2eae2a77c8",
+      "size": 15143
+    },
+    {
+      "path": "lib/images.mjs",
+      "sha256": "5e7aa66faddd3d19bc6ebb9ddc13abfc4ab4f17d8c51bb39b2c4e0279385d788",
+      "size": 2890
+    },
+    {
+      "path": "lib/mailer.mjs",
+      "sha256": "606f4cb1013c711d971dd201ab06df84ecb128bf5d5277095ce2e2ea56029e45",
+      "size": 8167
+    },
+    {
+      "path": "lib/operations-center.mjs",
+      "sha256": "bf386b6071e1e6ee4d24a31257da4b70d144679660c9d7919af7b0891fa4638b",
+      "size": 24197
+    },
+    {
+      "path": "lib/publishing-jobs.mjs",
+      "sha256": "f10c3951bc604392e9fdaef7ba51b227893266baaa93981aa480409fed722062",
+      "size": 16796
+    },
+    {
+      "path": "lib/quality-center.mjs",
+      "sha256": "3a728417dd668d60fd1526ec738cb9b302f86c01d62b2227f12b2e44b7d389c7",
+      "size": 15982
+    },
+    {
+      "path": "lib/runtime-paths.mjs",
+      "sha256": "74c783c1e06e9cc2da0165261a49511aaf374dab3159cbc24c0d69b6b467dcb9",
+      "size": 2751
+    },
+    {
+      "path": "lib/secret-store.mjs",
+      "sha256": "d3d862ab32fd276ecffb54c0307976ca680135d92f24d024c95d365a50257643",
+      "size": 7098
+    },
+    {
+      "path": "lib/security.mjs",
+      "sha256": "4ac2e7f7c2235109a2ea949b2ff7b649d05ef607b95704676a43c60ddb1ae4a0",
+      "size": 16387
+    },
+    {
+      "path": "lib/structured-logger.mjs",
+      "sha256": "2fd970a6a357a26211f0b9bcf432e59e79f73dc9a4cd35f88cca939655eefdff",
+      "size": 2427
+    },
+    {
+      "path": "lib/zip.mjs",
+      "sha256": "ddb9c7677600795a4adf8a19a7525b7551455459d16eed4cdfbe751ef9ddf0eb",
+      "size": 2983
+    },
+    {
+      "path": "local-ai/install-state.json",
+      "sha256": "d50fdc9d289f7009fbbd8c9961831754bac933e0fd15c3c0e4bc189d46239e74",
+      "size": 1108
+    },
+    {
+      "path": "local-ai/start-local-flux.ps1",
+      "sha256": "2924f4e8abe5ebbd099fe1ceb2bc6ceb4bdda55fa3e57dd299cfc05d310a9246",
+      "size": 8412
+    },
+    {
+      "path": "local-ai/stop-local-flux.ps1",
+      "sha256": "7c6176d8311b1ba9d511beb40edd41b8248e61c298528bbec3f9ef1171856c05",
+      "size": 1258
+    },
+    {
+      "path": "local-ai/workflows/vendoo_flux_schnell_api.json",
+      "sha256": "5f220a2dca02cc0764f6d0157677611b26c88860b48367eb661b6e47a1b92265",
+      "size": 1318
+    },
+    {
+      "path": "MockupDesign/AdminDashboard.png",
+      "sha256": "302ab1609d08b3059ba6563b676c64f0709651f2e3c531857bfca3840c535a79",
+      "size": 1142341
+    },
+    {
+      "path": "MockupDesign/ChatGPT Image 7. Juli 2026, 10_05_19 (1).png",
+      "sha256": "49f7625a1299a16576feabfd7824ec3511391bd9b7c53a1fba9232da7e8bd6c6",
+      "size": 1328830
+    },
+    {
+      "path": "MockupDesign/Dashboard.png",
+      "sha256": "7b8cc9c5db8718b0b653ec6aa9d2a8bfa1bba03810248c3ba17745b6f15cc412",
+      "size": 1959592
+    },
+    {
+      "path": "MockupDesign/Einstellungen.png",
+      "sha256": "4e3e797ed5d3ed0b60d00d8e567fbe51543c08578b858ef71e77b274ae449fd0",
+      "size": 1276207
+    },
+    {
+      "path": "MockupDesign/ExtensionDesignMockup.png",
+      "sha256": "c78fd6f673c0e59789ea313396b12c2f21f75a2ee6c7ad2de81a6b89f6d90588",
+      "size": 2340379
+    },
+    {
+      "path": "MockupDesign/Heute StudioFlow.png",
+      "sha256": "ed20bc04cab8e85245a855810a61b736a682f972eb85e23340edc9b558851a93",
+      "size": 2015368
+    },
+    {
+      "path": "MockupDesign/IconLogoMockup.png",
+      "sha256": "1ad88f45f377ab9b3f35f96a0ceaaa7f75cb0a996e83370d76c54f527392a08d",
+      "size": 1932624
+    },
+    {
+      "path": "MockupDesign/Lager.png",
+      "sha256": "0e8b4a31d075f1f83ea62b5eeeb53e89859e395a696deb43155932a23e7cef86",
+      "size": 1162950
+    },
+    {
+      "path": "MockupDesign/Listings.png",
+      "sha256": "b1c62e118d9be316274e966c558cdcccdd41afb3a9f05a60ec1e4a3433d2ca0c",
+      "size": 1220541
+    },
+    {
+      "path": "MockupDesign/Publish.png",
+      "sha256": "a52983b9ea2bf920d115485d10bc30226da88bc5cba8b00bebf801b21c096346",
+      "size": 1184278
+    },
+    {
+      "path": "MockupDesign/Startseite.png",
+      "sha256": "8c8bf278d0c6725e1dbb97b3c3d0c36a9bfc0753c3c86433fdc294bec70dbc0e",
+      "size": 1506235
+    },
+    {
+      "path": "MockupDesign/Vorlagen.png",
+      "sha256": "62f14221b1d71c9e631efdadd221397ff657adae4b737df52c8bff1610b90999",
+      "size": 1275065
+    },
+    {
+      "path": "package-lock.json",
+      "sha256": "00fb56728fbfd61b4aac85140ecde9af2546eca106712a6c16e8751dfd4755e1",
+      "size": 76218
+    },
+    {
+      "path": "package.json",
+      "sha256": "cbc637abe9c70f94b51daeeca2eba33be31a55327ee1b5da9e5cf12552aed666",
+      "size": 4434
+    },
+    {
+      "path": "platforms/ebay-de.mjs",
+      "sha256": "3da71dd28cb25c7c7317b9061855d40c6a3ab8bc39391963b49ee1e707f838e5",
+      "size": 2022
+    },
+    {
+      "path": "platforms/ebay-ka.mjs",
+      "sha256": "cc1ca2b4384c8c548bf755dc33101d248541bf893c3d5f35369961f904afcc00",
+      "size": 1711
+    },
+    {
+      "path": "platforms/etsy.mjs",
+      "sha256": "fa52b247dd758aeee06120499bd1ae6c53e9f460f8bd7762b8f06141b201e32b",
+      "size": 1627
+    },
+    {
+      "path": "platforms/vinted.mjs",
+      "sha256": "5c925e3934a4c9e2f26dc15b3449a249f5ce20ecebbd459b15365a34804824d6",
+      "size": 1966
+    },
+    {
+      "path": "public/android-chrome-192x192.png",
+      "sha256": "a2ea3f5f56dba8bd4d23fa54a26fd941567b4febdd1ed1b4e9f5bcc1c9786e53",
+      "size": 34743
+    },
+    {
+      "path": "public/android-chrome-512x512.png",
+      "sha256": "46ea6ba4ca6ca2352f37353b8bc4ca258935d29ecb8d3c9b133a48ea75c0c58f",
+      "size": 199488
+    },
+    {
+      "path": "public/app.js",
+      "sha256": "66b40d911f1c44dec43f77560b8b24790be221094128f435be158918c4312090",
+      "size": 574785
+    },
+    {
+      "path": "public/apple-touch-icon.png",
+      "sha256": "e0e7b8ef01c36f0625b6157aa46bd69de05c17be0b054208fb635d6507b52154",
+      "size": 30122
+    },
+    {
+      "path": "public/brand/favicons/android-chrome-192x192.png",
+      "sha256": "a2ea3f5f56dba8bd4d23fa54a26fd941567b4febdd1ed1b4e9f5bcc1c9786e53",
+      "size": 34743
+    },
+    {
+      "path": "public/brand/favicons/android-chrome-512x512.png",
+      "sha256": "46ea6ba4ca6ca2352f37353b8bc4ca258935d29ecb8d3c9b133a48ea75c0c58f",
+      "size": 199488
+    },
+    {
+      "path": "public/brand/favicons/apple-touch-icon.png",
+      "sha256": "e0e7b8ef01c36f0625b6157aa46bd69de05c17be0b054208fb635d6507b52154",
+      "size": 30122
+    },
+    {
+      "path": "public/brand/favicons/browserconfig.xml",
+      "sha256": "a0f1e01de4e8215e690c1ce869fecaae9d7ba3cc95883340a53ff38f6be52ce0",
+      "size": 237
+    },
+    {
+      "path": "public/brand/favicons/favicon-16x16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "public/brand/favicons/favicon-32x32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "public/brand/favicons/favicon-48x48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "public/brand/favicons/favicon.ico",
+      "sha256": "15bf8dd655b34a8015447e834d387af12685238ede598f5f0e7927eea2933483",
+      "size": 5503
+    },
+    {
+      "path": "public/brand/favicons/html-snippet.txt",
+      "sha256": "2daa93cca0ad2c0cab90a9e8ad4ea0ae4b64feeb68c422954020d17e2376a381",
+      "size": 608
+    },
+    {
+      "path": "public/brand/favicons/mstile-150x150.png",
+      "sha256": "3798313cc939d9fa582a92638356abfcfc8f8b4f143d9434b7012446195e6937",
+      "size": 21464
+    },
+    {
+      "path": "public/brand/favicons/site.webmanifest",
+      "sha256": "c372675942caa5010340f21fe521adc72af537d909008731976820fd84604d42",
+      "size": 401
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-120x120.png",
+      "sha256": "b2dc767e7a01395d23a7f3f5915324db1a7d1912bac60470d2f7c10815895173",
+      "size": 13175
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-128x128.png",
+      "sha256": "409a96b169bc91efbcd7e923614a8cb30c6ca36cbd727f41e02c2ee4f89098cf",
+      "size": 15250
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-144x144.png",
+      "sha256": "d276f50b298e4dfcbba9147550463aee498531280399167d1e9774aa8e5f7e21",
+      "size": 19306
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-152x152.png",
+      "sha256": "3798313cc939d9fa582a92638356abfcfc8f8b4f143d9434b7012446195e6937",
+      "size": 21464
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-167x167.png",
+      "sha256": "47122dc91010721e2692d11986f0b91d9b76634130a95723e92b2a070268d16f",
+      "size": 25623
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-16x16.png",
+      "sha256": "8c031a533aeec86818d442ce96e859497817d16c2c9bf037c68955b90e8ced6b",
+      "size": 698
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-180x180.png",
+      "sha256": "e0e7b8ef01c36f0625b6157aa46bd69de05c17be0b054208fb635d6507b52154",
+      "size": 30122
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-192x192.png",
+      "sha256": "a2ea3f5f56dba8bd4d23fa54a26fd941567b4febdd1ed1b4e9f5bcc1c9786e53",
+      "size": 34743
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-256x256.png",
+      "sha256": "3f2517cfd215cb624ed639d60b064dfa5e88ce71eb7bbebbbfaa70b3d62556db",
+      "size": 59645
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-32x32.png",
+      "sha256": "9963f60ab46d7f015a9400ee22e8e7a9fed31781a3907ef14b674d179d8f5f45",
+      "size": 1755
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-384x384.png",
+      "sha256": "cae3eb737c8ad3a82a679b09d33d991b501bf482e0132e99aa1b8ad064e472b4",
+      "size": 124463
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-48x48.png",
+      "sha256": "64d7b63beed9f972848daabc86484b5672b42ac7ed402a0d3effb47e200bf253",
+      "size": 2996
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-512x512.png",
+      "sha256": "46ea6ba4ca6ca2352f37353b8bc4ca258935d29ecb8d3c9b133a48ea75c0c58f",
+      "size": 199488
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-64x64.png",
+      "sha256": "bc85af557be532dcce6beb82cf9bd61af683666b00fb61e4b2069f78e60a9a33",
+      "size": 4453
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-72x72.png",
+      "sha256": "01d59b665bc90dddbd34221e3a2ec3af11bff6fb328aab2c9947c03d74b0465d",
+      "size": 5381
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-96x96.png",
+      "sha256": "ed3dfa59e989b154fac88a3c72ac840290ee3e1565d44aa75596bf0055c74020",
+      "size": 8894
+    },
+    {
+      "path": "public/brand/icons/vendoo-icon-original-1254.png",
+      "sha256": "46ea6ba4ca6ca2352f37353b8bc4ca258935d29ecb8d3c9b133a48ea75c0c58f",
+      "size": 199488
+    },
+    {
+      "path": "public/brand/logo/vendoo-logo-cropped.png",
+      "sha256": "8fd9901e07dc9172d162706511ac8dcce220a4c907cb3efa9940c9c13fa32526",
+      "size": 333957
+    },
+    {
+      "path": "public/brand/logo/vendoo-logo-original.png",
+      "sha256": "3f39371abd1efa6cc8366aac9a6d067f3339b8f2a2da77ab8a26c6bdcf8c4fce",
+      "size": 858583
+    },
+    {
+      "path": "public/brand/logo/vendoo-logo-transparent.png",
+      "sha256": "b56d07515f6220de7fd0cb149fed598a7361c985ae6ca7cb14329a99e8947aee",
+      "size": 243644
+    },
+    {
+      "path": "public/brand/logo/vendoo-wordmark-transparent.png",
+      "sha256": "e83921d2af9930ab27df1abe64374cb9311189bfaaa951068109177443571a07",
+      "size": 157997
+    },
+    {
+      "path": "public/core/api-client.js",
+      "sha256": "1711a9387f2d6e75797b77c8daa92b94d7a15e128476e4b8aa9d54ccb0692a0e",
+      "size": 1596
+    },
+    {
+      "path": "public/core/frontend-module-registry.js",
+      "sha256": "f30395399a5c6d7e0a884b22f28f7648e6343695cee9960d6ff13b34de7b48f1",
+      "size": 1854
+    },
+    {
+      "path": "public/core/safe-dom.js",
+      "sha256": "fb3dbcd03f7ed15b773b582c2a2b785c3040d3319aba5b7c682a7e74e1cf3b4e",
+      "size": 1291
+    },
+    {
+      "path": "public/design-system/theme-contract.json",
+      "sha256": "38aa57d13aeb3ab70babcb903bfee71e47d80932ed24a73267c13ff81c24e3ba",
+      "size": 8067
+    },
+    {
+      "path": "public/design-system/theme-runtime.js",
+      "sha256": "308f1c0e2ed1de34aa11545a1a660aab02631e422d6c6945e3203d11666784fc",
+      "size": 4004
+    },
+    {
+      "path": "public/design-system/tokens/source.json",
+      "sha256": "4d69e2cb6b7f9f63b54d708a5d8b1ebefcdcb9f88a977053db5031c05b098464",
+      "size": 11468
+    },
+    {
+      "path": "public/design-system/tokens.css",
+      "sha256": "4a9e65edeaee3421edc3dd4831230062494f1a42f8495f4cb979fde8664d06c4",
+      "size": 4141
+    },
+    {
+      "path": "public/favicon.ico",
+      "sha256": "15bf8dd655b34a8015447e834d387af12685238ede598f5f0e7927eea2933483",
+      "size": 5503
+    },
+    {
+      "path": "public/index.html",
+      "sha256": "2af933209c3830cdd4d692185aba6b2b23f9c17370dcb5a785e1f7fbafe3fee6",
+      "size": 180904
+    },
+    {
+      "path": "public/login.html",
+      "sha256": "ebd37a3757dee6bf7cbe5550080fb184b043564d174c446b49226f1e88638f7c",
+      "size": 6486
+    },
+    {
+      "path": "public/login.js",
+      "sha256": "e37558ee9612a36db8a19999fbb320f1c249a8e155f94c83a82926bec920f989",
+      "size": 6240
+    },
+    {
+      "path": "public/mobile-upload-expired.html",
+      "sha256": "59291f75eca405e3856bafea76cc601d681060eb6b36bf82a4be3c3ab7eac290",
+      "size": 1347
+    },
+    {
+      "path": "public/mobile-upload.css",
+      "sha256": "f046f166d89fc32774b87deb02e6d144fd2f40c0925aac67487e5b7c489a0ec1",
+      "size": 6622
+    },
+    {
+      "path": "public/mobile-upload.html",
+      "sha256": "6152e4fe715efbf8fd6a7c4286f23172bc3cf15dde085e5e4f7389ad5e65ad73",
+      "size": 4046
+    },
+    {
+      "path": "public/mobile-upload.js",
+      "sha256": "f13846801a8493aa43df6ec3d78b826b21b59e8f21d47735f68fd0b278e440c7",
+      "size": 6828
+    },
+    {
+      "path": "public/modules/module-manager/module-manager.css",
+      "sha256": "3132436d52caba719a3460c29a807e6f0703cb2118a80c9fae6c30360498d249",
+      "size": 3806
+    },
+    {
+      "path": "public/modules/module-manager/module-manager.js",
+      "sha256": "6439820fc6f7f739e4fb4f2a1cfb46934389763796638d945496659d44504534",
+      "size": 9444
+    },
+    {
+      "path": "public/modules/README.md",
+      "sha256": "01f2bd124257220005032bf234d122b9942fdd8fd57ed8195748b2fb1f5a5cfb",
+      "size": 669
+    },
+    {
+      "path": "public/modules/theme-manager/theme-manager.css",
+      "sha256": "2d7a004db3e22b30ad3a682ba445bcee3fc1c5f0ed5e8fee45b5892c5b335e51",
+      "size": 5445
+    },
+    {
+      "path": "public/modules/theme-manager/theme-manager.js",
+      "sha256": "0edc61f0c2bb604c3adc40813b18fe5ca8d9b846ec2a3d9f406ae26ae313d3ee",
+      "size": 16304
+    },
+    {
+      "path": "public/style.css",
+      "sha256": "f902e26fac4ea4a906cda4834749386153c1eac5be63f329c0eb72adf3dc8622",
+      "size": 364864
+    },
+    {
+      "path": "public/vendoo-icons.js",
+      "sha256": "ff525e0af963e6f54636cfdc1bd2d045aaf82e7b0199755eb5cdf4c52110be2e",
+      "size": 6610
+    },
+    {
+      "path": "README.md",
+      "sha256": "c110e0b01d14a125df48d2884838eb969ae5159582934a20df69567c6dc1bda1",
+      "size": 21815
+    },
+    {
+      "path": "scripts/docker-backup.sh",
+      "sha256": "f397e46da92394d34c2fc01715f037cca380703ecfa1d4a451de8ec7342e05b3",
+      "size": 1218
+    },
+    {
+      "path": "scripts/docker-entrypoint.sh",
+      "sha256": "86a411ae1fa5e36a11b0a8cb61e6c0169e0b80d3cedc9b7b82c3cfff23dd7390",
+      "size": 1050
+    },
+    {
+      "path": "scripts/docker-restore.sh",
+      "sha256": "1b58c1e5f762c4928d42605c01872f38f6d6bca92342260f3cd88a132e6af095",
+      "size": 2277
+    },
+    {
+      "path": "scripts/github-deploy.ps1",
+      "sha256": "7caf2fc3622810ab7e6114517efc9ca3657d7e2686bd328e784ec99e1dea7bbe",
+      "size": 122
+    },
+    {
+      "path": "scripts/github-deploy.sh",
+      "sha256": "d4d41170106979e1be9266a569215ff484e80452f568f0bf8dd9cdc9978dbb7c",
+      "size": 2566
+    },
+    {
+      "path": "scripts/install-local-flux.ps1",
+      "sha256": "0a9bafc79c1c5d59fb9b51ebc34c00eec4a4e9a5e873ce1818f50f3ab983da70",
+      "size": 37265
+    },
+    {
+      "path": "scripts/runtime-start-local-flux.ps1",
+      "sha256": "2924f4e8abe5ebbd099fe1ceb2bc6ceb4bdda55fa3e57dd299cfc05d310a9246",
+      "size": 8412
+    },
+    {
+      "path": "scripts/runtime-stop-local-flux.ps1",
+      "sha256": "7c6176d8311b1ba9d511beb40edd41b8248e61c298528bbec3f9ef1171856c05",
+      "size": 1258
+    },
+    {
+      "path": "scripts/start-local-flux.bat",
+      "sha256": "ff261a88c2e4492291b35607836d5e79329035439b143d52cc5ef32ab43efef4",
+      "size": 119
+    },
+    {
+      "path": "scripts/uninstall-local-flux.ps1",
+      "sha256": "3bf3aa74f5cc1f2946bb2da637eb30fe8daec783a32f9721ebb0468e20df90bd",
+      "size": 4132
+    },
+    {
+      "path": "scripts/update-vendoo-gui.ps1",
+      "sha256": "216b78e404026e8bfdcd002d59c92327e94548a3474c0fbd14aa808787cec2fb",
+      "size": 1084
+    },
+    {
+      "path": "scripts/update-vendoo.ps1",
+      "sha256": "d2944de16acea89df6c391bf2cde5963598cbccb70543363e95652677b596184",
+      "size": 372
+    },
+    {
+      "path": "scripts/updater/Vendoo.Updater.Host.ps1",
+      "sha256": "01f330e1bcd05ddf48685b9382057be7aa8e9329538d3c6e5044bb17129c53c4",
+      "size": 5807
+    },
+    {
+      "path": "scripts/updater/Vendoo.Updater.Preflight.ps1",
+      "sha256": "180adf209ea2c4f7d7a64594e231ecd5508dd44993cce15c0d871aa0a1b6e83a",
+      "size": 3605
+    },
+    {
+      "path": "scripts/updater/Vendoo.Updater.UI.ps1",
+      "sha256": "ddf685413aa052bbc7b150bd396ff796ba62b30d9db30fa25f2c47fa50c85ab1",
+      "size": 28122
+    },
+    {
+      "path": "scripts/updater/Vendoo.Updater.Worker.ps1",
+      "sha256": "5b7ea5829d0f7499e418d546d0a05ef63557dd5a9a2b4ba60ac9f0e2c9617a51",
+      "size": 30578
+    },
+    {
+      "path": "SECURITY.md",
+      "sha256": "327bb6e7b99939508b807d0c3c6d5617a2d8f0d5464ba0b1865d8e9e1ed82dde",
+      "size": 10089
+    },
+    {
+      "path": "server.mjs",
+      "sha256": "b82797c61415243698caade4ac89d829141383b2149312a784873d5d91757d9d",
+      "size": 145908
+    },
+    {
+      "path": "setup-gui.ps1",
+      "sha256": "8c1a431535b847ac31a78e89212c48135348dcc66c31d746432ef5831868f6e0",
+      "size": 10498
+    },
+    {
+      "path": "setup.bat",
+      "sha256": "7295930d9ce9f826ef52bc945667f8d52d55ff410e264374c3bcd9f692e9b656",
+      "size": 1576
+    },
+    {
+      "path": "setup.ps1",
+      "sha256": "b7fe629688d18f1d7f7ac2c91b338c4ae2c93a228391ddc64061e01405b37caa",
+      "size": 83084
+    },
+    {
+      "path": "setup.sh",
+      "sha256": "7634a20c531431059053ebc093be906bf8ea6d68ebe880087e7df295ac299ed5",
+      "size": 10292
+    },
+    {
+      "path": "THIRD_PARTY_NOTICES.md",
+      "sha256": "2851c914a1b50a036cb265ddd32e5545cc7e8e34ba9d682445926acc23eb8f28",
+      "size": 677
+    },
+    {
+      "path": "tools/apply-release-manifest.mjs",
+      "sha256": "3ddece908ffdfb15c94852c0fcc554ce7de39725650b4d139d0afc2f59297a55",
+      "size": 889
+    },
+    {
+      "path": "tools/build-release.mjs",
+      "sha256": "fd35ee48f4c0ae1d14f7ffe9e9b27a5802305b6dfa7726f3df79e03a0e57335a",
+      "size": 2368
+    },
+    {
+      "path": "tools/check-syntax.mjs",
+      "sha256": "94f4ced84834fceeb4f797bf8aab0703c873b57fd5d4a5b3fb02fee12e42bd2e",
+      "size": 1571
+    },
+    {
+      "path": "tools/generate-design-tokens.mjs",
+      "sha256": "ac8440bce2659a035302609722f1dfed5d125223376cd575ffc0636397c94b54",
+      "size": 2969
+    },
+    {
+      "path": "tools/generate-release-manifest.mjs",
+      "sha256": "3b65ccf6fb0daeba78abe37c4ea1ba2fbd3f269ac94534026a30977fe6a3991b",
+      "size": 1320
+    },
+    {
+      "path": "tools/prepare-git-staging.mjs",
+      "sha256": "5e1716ecb03aefc626bb8258ceb75c9372bef5d401b798a16703a65d87a9e6a7",
+      "size": 4193
+    },
+    {
+      "path": "tools/release-manifest-lib.mjs",
+      "sha256": "45dc394a9ef255c3acde855213e23ed727c280c23c1bdf41156048268f603368",
+      "size": 10320
+    },
+    {
+      "path": "tools/test-runtime-cleanup.mjs",
+      "sha256": "5bb59f8283122f6db66e94883f04246ceb108399f97f6e961831bfe5b6b10025",
+      "size": 1002
+    },
+    {
+      "path": "tools/verify-capability-graph-1.40.2.mjs",
+      "sha256": "e3d8c6e8dfd566acbe037ad744edbf60816152d4994698c2a9c46d2b890e246a",
+      "size": 1772
+    },
+    {
+      "path": "tools/verify-capability-graph-1.41.0.mjs",
+      "sha256": "8916ca58f8f67b7186d4b3644d13a56743965a57a50dc30bb33bd6baa8b2b646",
+      "size": 2412
+    },
+    {
+      "path": "tools/verify-capability-graph-1.41.1.mjs",
+      "sha256": "e7cbaaa0ca1f0a655af500aea14044455a80cfae10246716a17488f96e99dae7",
+      "size": 2412
+    },
+    {
+      "path": "tools/verify-capability-graph-1.41.2.mjs",
+      "sha256": "0ddebc7336752a3d5adb29132183ceaeef83e27d98f535819be8516110ea037d",
+      "size": 3474
+    },
+    {
+      "path": "tools/verify-catalog-media-1.39.0.mjs",
+      "sha256": "85114eff887ba65ca7df00f43333414c44b3aadc16fbc2fe10dc4dd4f9aa7aed",
+      "size": 3268
+    },
+    {
+      "path": "tools/verify-catalog-media-1.40.0.mjs",
+      "sha256": "753288b83a655dbe4a9da8e93d8c3956ae17544699e2221873d479d72b977e2f",
+      "size": 3268
+    },
+    {
+      "path": "tools/verify-catalog-media-1.41.0.mjs",
+      "sha256": "f208ce5267103ab81c30da71e7b7c51c973b36dd617a1bc42c12063fbf1473f0",
+      "size": 3268
+    },
+    {
+      "path": "tools/verify-catalog-media-1.41.1.mjs",
+      "sha256": "1c8da7af9bb5d743a60997fcba3345e568a862c97ff7102621134fa347a0056f",
+      "size": 3268
+    },
+    {
+      "path": "tools/verify-catalog-media-1.41.2.mjs",
+      "sha256": "6d68d970b82c364d84579d748b130f3b32b88786422555673a7c4d483158e6e0",
+      "size": 3268
+    },
+    {
+      "path": "tools/verify-catalog-services-1.39.0.mjs",
+      "sha256": "93d8fdee3feaf6e82ef15e7ac84bfd7e43ad13192f94655ccfce37f5a87b21ef",
+      "size": 4161
+    },
+    {
+      "path": "tools/verify-catalog-services-1.40.0.mjs",
+      "sha256": "60de35103ed4c4abf30445b4465b849f8be8842f1a4c22da6ae5d74943dba386",
+      "size": 4161
+    },
+    {
+      "path": "tools/verify-catalog-services-1.41.0.mjs",
+      "sha256": "f89edc3b9d32c1618522c5810e53f25b47e72d52e8a041a2e7ae7939fbe169f2",
+      "size": 4161
+    },
+    {
+      "path": "tools/verify-catalog-services-1.41.1.mjs",
+      "sha256": "122d1664ce9eff57331fd5f86554943494d46ba38e90f7e1a13c0de33ad6906d",
+      "size": 4161
+    },
+    {
+      "path": "tools/verify-catalog-services-1.41.2.mjs",
+      "sha256": "fb8ee4afa1d6abc09106ab032793da8dfef43bcb8614c7fe04086eb52cfb2a0b",
+      "size": 4161
+    },
+    {
+      "path": "tools/verify-config-store.mjs",
+      "sha256": "8f9ede5f112ee03323db3a6c73aee00b7037f5139dad241b11baf5f0e9cee4e0",
+      "size": 1429
+    },
+    {
+      "path": "tools/verify-controlled-invitations-1.42.0.mjs",
+      "sha256": "01ce4bf2fa2d52c92a912042e4a6d0b299bc18c7e0aa8d4eb29b52e6f31be2c6",
+      "size": 3514
+    },
+    {
+      "path": "tools/verify-coolify-deployment-1.41.0.mjs",
+      "sha256": "e5a0614ef4f2ea73bdaaa1924cfafe86550a1a50c0105c569e405c332d8389a5",
+      "size": 3669
+    },
+    {
+      "path": "tools/verify-coolify-deployment-1.41.1.mjs",
+      "sha256": "63afde37353f750f4bfe0b02324f774a7b3c7ece9339d85e5428b9a427c0d11e",
+      "size": 3669
+    },
+    {
+      "path": "tools/verify-coolify-deployment-1.41.2.mjs",
+      "sha256": "a66efb128565db5267c03a1503eb29d1f12024e1a357e1fd17d409430c2503f3",
+      "size": 3669
+    },
+    {
+      "path": "tools/verify-db-migrations.mjs",
+      "sha256": "14b86ee3d851cc1450e43ca1b9ab8aaf32f8c8ea30857a2038b91f7dbfaab4d2",
+      "size": 10989
+    },
+    {
+      "path": "tools/verify-db-migrations.py",
+      "sha256": "5752f6edb956696781da8bddb1c1848d26941fbed5a524691653c84c88c34bff",
+      "size": 10292
+    },
+    {
+      "path": "tools/verify-deployment-1.32.0.mjs",
+      "sha256": "3745de55a110d8254983b096c6afab196ddaec7f1153cd2f34c1e480b15aa33e",
+      "size": 3957
+    },
+    {
+      "path": "tools/verify-deployment-1.33.0.mjs",
+      "sha256": "44f6b349b722e5a83d4725c4879fa1a9383f59ab5634c49d3d7d9d7aa0cd5e12",
+      "size": 5517
+    },
+    {
+      "path": "tools/verify-deployment-1.34.0.mjs",
+      "sha256": "cbd91b45d97e11bd4f5ca2f9d2edf2b5931cb2aa336cb71afc30aad9cffbe1e0",
+      "size": 8107
+    },
+    {
+      "path": "tools/verify-deployment-1.34.1.mjs",
+      "sha256": "bbe5b40f80d2eb1005ebbb50f32b605f530f32188d88a2d7bd24c9a6265ccafa",
+      "size": 8603
+    },
+    {
+      "path": "tools/verify-deployment-1.34.2.mjs",
+      "sha256": "01a43040a95cdac40703f49031acd9267cdba99d9027a51718f35ffb643237fc",
+      "size": 9400
+    },
+    {
+      "path": "tools/verify-deployment-1.34.3.mjs",
+      "sha256": "906767e574c06aedebb2d7797150bda2f1e4c4536e8f82f4c7de2e3cc8398c8e",
+      "size": 9544
+    },
+    {
+      "path": "tools/verify-deployment-1.35.0.mjs",
+      "sha256": "71d00227a59592cc0ad8ba321c63350ec25748ef965d8cd0eff1317738c7fba8",
+      "size": 11485
+    },
+    {
+      "path": "tools/verify-deployment-1.36.0.mjs",
+      "sha256": "b65eec7fd54e1459b363d99d20f9438ae5bc4b518e775de8b97e33e89a382e42",
+      "size": 12117
+    },
+    {
+      "path": "tools/verify-deployment-1.37.0.mjs",
+      "sha256": "22a5ba1951b2e8dbc924e60aaff8be7c41189ae7b30de9ecf50d0b741e84e13a",
+      "size": 12931
+    },
+    {
+      "path": "tools/verify-deployment-1.38.0.mjs",
+      "sha256": "84961aed097ee00496dd853677895614263baf425b00218cc0e1f3ced1b5b7b9",
+      "size": 13336
+    },
+    {
+      "path": "tools/verify-deployment-1.39.0.mjs",
+      "sha256": "2ecf465073b7ec9e8ba38bf83364f681886d50440fbdd579a5df14df5d1bb3af",
+      "size": 13603
+    },
+    {
+      "path": "tools/verify-deployment-1.40.0.mjs",
+      "sha256": "4b37972998d87c1336590e2550895a826d63b47e4828d5bb3ba619376c287271",
+      "size": 15102
+    },
+    {
+      "path": "tools/verify-deployment-1.40.1.mjs",
+      "sha256": "947942c84416b126f29281a8bef7b8230ecde09ea8b3bf3304cfacb0f9623fff",
+      "size": 15801
+    },
+    {
+      "path": "tools/verify-deployment-1.40.2.mjs",
+      "sha256": "77f44ad4e13da47bcf4bc9c6a37d014c8b5f6c3e735ecfdb63830e09e43df296",
+      "size": 16148
+    },
+    {
+      "path": "tools/verify-deployment-1.41.0.mjs",
+      "sha256": "9a33b8594744ed4c7774f12da5b14dce64049c1c0df65e98c9cd26d5404fda0c",
+      "size": 17422
+    },
+    {
+      "path": "tools/verify-deployment-1.41.1.mjs",
+      "sha256": "a885727e8847bf32ead7d7dc80e2e27deac62df53763a187717fcd8e6157a1f5",
+      "size": 17925
+    },
+    {
+      "path": "tools/verify-deployment-1.41.2.mjs",
+      "sha256": "ca6e6baebc9489fd101d005f75c34c90b28e914443a11e3ad759513f653f4c82",
+      "size": 18309
+    },
+    {
+      "path": "tools/verify-esm-export-contracts.mjs",
+      "sha256": "c2d270efae9209d6fdf810f44db4cfdb9642db29060d5b75c2d920a859bc6918",
+      "size": 4378
+    },
+    {
+      "path": "tools/verify-flux-loop-hotfix-1.40.1.mjs",
+      "sha256": "58c275a972393d7db7cab087523d3963a743e5a0d654fbc9b2cc09618abfea6c",
+      "size": 2180
+    },
+    {
+      "path": "tools/verify-flux-loop-hotfix-1.40.2.mjs",
+      "sha256": "58c275a972393d7db7cab087523d3963a743e5a0d654fbc9b2cc09618abfea6c",
+      "size": 2180
+    },
+    {
+      "path": "tools/verify-flux-loop-hotfix-1.41.0.mjs",
+      "sha256": "824ea8ed05fb68ef6bedba83e76697f9b03eb9830db981781e002c64f8b6858d",
+      "size": 2180
+    },
+    {
+      "path": "tools/verify-flux-loop-hotfix-1.41.1.mjs",
+      "sha256": "a055379e9ca3e7ebded24d4c75ccd54f8f81aa3618d63cdf41d79e3a17f126ac",
+      "size": 2180
+    },
+    {
+      "path": "tools/verify-flux-loop-hotfix-1.41.2.mjs",
+      "sha256": "677d4a7bcd31d800833d529e815794de6a65f543dd6f06eea2039facd469dce2",
+      "size": 2180
+    },
+    {
+      "path": "tools/verify-git-ignore-boundaries-1.41.2.mjs",
+      "sha256": "e06cda8d9850a84cde34a99009c51a18dbc1b7a66e45c82f35aadd631a71540b",
+      "size": 3995
+    },
+    {
+      "path": "tools/verify-git-safety-regression.mjs",
+      "sha256": "d716f48436179c7f156b43a687b6149648fd38de12767da2be1bc63e3e1fce31",
+      "size": 4123
+    },
+    {
+      "path": "tools/verify-git-safety.mjs",
+      "sha256": "872cb8d1e0f86e2e571ddcce1adbb002d0a86f2d834f4ee7f601e011c7306e70",
+      "size": 4657
+    },
+    {
+      "path": "tools/verify-git-staging.mjs",
+      "sha256": "ad2d1df5725da388ca427ddf6da0e0d62bf02999c6554e8c1ab918d63f5b8d50",
+      "size": 3724
+    },
+    {
+      "path": "tools/verify-hotfix-1.23.1.mjs",
+      "sha256": "c21d4f4544c0d6a7f0c90b4c38d4ceb2276b3ca7e4825433cc503bbbfccb2c82",
+      "size": 2617
+    },
+    {
+      "path": "tools/verify-hotfix-1.23.2.mjs",
+      "sha256": "1d4351e4a827e718766a1677ddfbc3771a91942d0d5a93753e39f1b99c68a4dd",
+      "size": 3245
+    },
+    {
+      "path": "tools/verify-identity-db-1.38.0.py",
+      "sha256": "2f43dd1a89a36527cd3b4873b8cc9f7386cdfc06ade96fcc05dd5deb15dbcec7",
+      "size": 3288
+    },
+    {
+      "path": "tools/verify-identity-db-1.39.0.py",
+      "sha256": "2f43dd1a89a36527cd3b4873b8cc9f7386cdfc06ade96fcc05dd5deb15dbcec7",
+      "size": 3288
+    },
+    {
+      "path": "tools/verify-identity-db-1.40.0.mjs",
+      "sha256": "5254630836d97384ce13d4c4f78b2f3027cf24e2023ecdce566e5cd36b936a69",
+      "size": 3409
+    },
+    {
+      "path": "tools/verify-identity-db-1.40.0.py",
+      "sha256": "2f43dd1a89a36527cd3b4873b8cc9f7386cdfc06ade96fcc05dd5deb15dbcec7",
+      "size": 3288
+    },
+    {
+      "path": "tools/verify-identity-settings-1.38.0.mjs",
+      "sha256": "1b5c21eb5688bc15895541968fa1ab69a2384ed611b01d23901abc040dcc3255",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-identity-settings-1.39.0.mjs",
+      "sha256": "a1dddb35f4b6eeafe47ff3f40e5565bdb4477c8f63101d3c0d7f84c7393abe4c",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-identity-settings-1.40.0.mjs",
+      "sha256": "ff839066b02121a19046f19093904550e1184785e73dd2d079ab518cc74583ff",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-identity-settings-1.41.0.mjs",
+      "sha256": "3725fdbb20e93dd0bcbf3ad385bbb0c459cdd68448371757e549543b007155cc",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-identity-settings-1.41.1.mjs",
+      "sha256": "3dc54d074497913255774603f043e1154e2ae865ca62d7d4d682826cb02906c2",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-identity-settings-1.41.2.mjs",
+      "sha256": "4df609fa104d69bc00995b7ede6251fe7c64970df1f7c99d36a6dcb94ed65eaa",
+      "size": 4026
+    },
+    {
+      "path": "tools/verify-initial-disabled-modules-1.41.0.mjs",
+      "sha256": "9492911fac3771e3b906b5a583e4bbf136ec8383b5fc23b0478f58b7407f7c65",
+      "size": 1900
+    },
+    {
+      "path": "tools/verify-initial-disabled-modules-1.41.1.mjs",
+      "sha256": "932e2359c3ee00924e1a89cdcdabe44ddf1a60479f75f4d4094f2102d1c12949",
+      "size": 1900
+    },
+    {
+      "path": "tools/verify-initial-disabled-modules-1.41.2.mjs",
+      "sha256": "76ead600259c891c231224b2d356a871b4327c899a0f6febef6f5b79cf962c53",
+      "size": 2729
+    },
+    {
+      "path": "tools/verify-initial-module-cleanup-regression-1.43.0.mjs",
+      "sha256": "cfa3a8572a49150a7171dd5228c26f44317451b74d689f842332d1ebdf640298",
+      "size": 1485
+    },
+    {
+      "path": "tools/verify-installer-shell.mjs",
+      "sha256": "fe9092492724d50ea7f3481781daabe8289f8e689daca9df12cbcfa95bab7050",
+      "size": 7148
+    },
+    {
+      "path": "tools/verify-installer-shell.sh",
+      "sha256": "f7267131d3c7d7e373ff48ec66ab072ec2f74d66aa02cbf4e71209bf90fca750",
+      "size": 4693
+    },
+    {
+      "path": "tools/verify-module-manager-1.40.0.mjs",
+      "sha256": "33ca957bf8acd3cc73354ef4c8d5e4b61c44810ecd8a8994ff89305cf1b9429c",
+      "size": 6151
+    },
+    {
+      "path": "tools/verify-module-manager-1.41.0.mjs",
+      "sha256": "2a80e837f754e7490f775956161e4fc8866c127c37b95d688baa239fee4cd883",
+      "size": 6151
+    },
+    {
+      "path": "tools/verify-module-manager-1.41.1.mjs",
+      "sha256": "6b83edfaa57dd3633c7d100a8ed476ef63ae41384d215c787a2cbb6e608b22e5",
+      "size": 6151
+    },
+    {
+      "path": "tools/verify-module-manager-1.41.2.mjs",
+      "sha256": "f4da6e0be42aa7eda0a496f4ab77547af6e3238a6d405aec00a61a9bb3622c1a",
+      "size": 6151
+    },
+    {
+      "path": "tools/verify-module-navigation-generator-1.43.0.mjs",
+      "sha256": "8e6f7b62f9dbccdf1c01a4819d0b70aa96f8954323a3d9868f82764d9bb5d9c2",
+      "size": 2707
+    },
+    {
+      "path": "tools/verify-one-click-updater-1.42.0.mjs",
+      "sha256": "e2ac45c61f5d4a5092954aefb38bb6f5302751bba3acf2b302857e5b40cee1e9",
+      "size": 1668
+    },
+    {
+      "path": "tools/verify-one-click-updater-1.43.0.mjs",
+      "sha256": "ae015616e289a4bfb371a2823c35e8e5a013cbdefd4005c47ac972c2e5df7516",
+      "size": 46
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.35.0.mjs",
+      "sha256": "cab03e98687af87f359f6424d440fc0b644da97b3c614509b8c7d008d4b18a8d",
+      "size": 8938
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.36.0.mjs",
+      "sha256": "732bb15431746a829e45ae55c695360cbf1dd21d4fc3be26a98f35708d571e84",
+      "size": 3849
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.37.0.mjs",
+      "sha256": "ee8ae7bed4e93a2ef278662552a4ae5d751306aad7133a93f380bbf2a5d5a28c",
+      "size": 4646
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.38.0.mjs",
+      "sha256": "584ea4735937238b4c3bffa70364d0f45cf1f3d41bf34adde64c7cbb7b729efa",
+      "size": 3933
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.39.0.mjs",
+      "sha256": "f8590c6986786cbbce95e58af1d1d3fec61d163c19fcf4c22aff57f5954c398e",
+      "size": 3574
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.40.0.mjs",
+      "sha256": "c9e704c372cf6a973fcdb887b337ead6509fd03e78570e6d1c9e24b1d879fe6b",
+      "size": 4798
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.40.2.mjs",
+      "sha256": "8b1b0eda98f0d16a99b47b0cb7a9e550d40d3dd048abbec6695c11ceca96f259",
+      "size": 5091
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.41.0.mjs",
+      "sha256": "2a06e9f6e73b37f35d055d0dd911e9cb741fa1fdb2cdfc5d926a2635f817356c",
+      "size": 5217
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.41.1.mjs",
+      "sha256": "957cc887090f8d9c3a477c532e1aca79d24a3725924cb6e5a934f121a155c0e4",
+      "size": 5217
+    },
+    {
+      "path": "tools/verify-platform-architecture-1.41.2.mjs",
+      "sha256": "fe70496832e1872d9e7b3df08ea934bb68768c9e84c4bfac08b0f3f9a7f9f21d",
+      "size": 6733
+    },
+    {
+      "path": "tools/verify-powershell-parser.ps1",
+      "sha256": "140cb2adc774612c43c8e8962b7ecdbe70ca0e7def42ac0dd71b86695697e570",
+      "size": 1295
+    },
+    {
+      "path": "tools/verify-powershell-static.mjs",
+      "sha256": "a4186794813ccb9a11164378effd4492fed590d5c6490286c2e685a74e8a7d20",
+      "size": 1964
+    },
+    {
+      "path": "tools/verify-production-operations-1.42.0.mjs",
+      "sha256": "5cce51f6a19048bf3948635f0e80f4968857143a7781a94f24f50ef93784e3f6",
+      "size": 5369
+    },
+    {
+      "path": "tools/verify-production-operations-db-1.42.0.mjs",
+      "sha256": "e0757f65726fe248e8ff404b88aa5d5e896208ef4e3706c65791f456af9ed140",
+      "size": 2484
+    },
+    {
+      "path": "tools/verify-production-operations-db-1.42.0.py",
+      "sha256": "10b6b7a632c2aaa24380e5427d4cd321abb747d6215b3facd5644d063b7e1700",
+      "size": 1837
+    },
+    {
+      "path": "tools/verify-production-updater-2.0.mjs",
+      "sha256": "f8054fce23e51a538f1d65cf611d1f28f687eab7be21092efe224e39b075869e",
+      "size": 2172
+    },
+    {
+      "path": "tools/verify-production-updater-2.1.mjs",
+      "sha256": "274c76c8bb772834ae371df8398135061ec4c15b8511be8747cf51ea843052a0",
+      "size": 2136
+    },
+    {
+      "path": "tools/verify-production-updater-2.2.mjs",
+      "sha256": "d92979ebdb6d584565684640bbca54ed3361d86d5a26d7daac9c0777db39bf2f",
+      "size": 2592
+    },
+    {
+      "path": "tools/verify-production-updater-2.3.mjs",
+      "sha256": "559746212d837b2430292648dced18967fd7197f20fcb46a625ad3e38ea2551d",
+      "size": 2801
+    },
+    {
+      "path": "tools/verify-production-updater-2.4.mjs",
+      "sha256": "ea679665597d6a053b7521eace37fa8fe45b7fd3d0a1997d76014c5a8e2d9558",
+      "size": 2981
+    },
+    {
+      "path": "tools/verify-production-updater-2.5.mjs",
+      "sha256": "366ee0da6a1565143b1f746bda484be45d05484c9d7f0ac85a26d69ac0db671b",
+      "size": 3385
+    },
+    {
+      "path": "tools/verify-production-updater-2.6.mjs",
+      "sha256": "0a836fefef6e65b69531e4a2717add63e515b8717ccd0634b4f920ca3f398c38",
+      "size": 3946
+    },
+    {
+      "path": "tools/verify-production-updater-2.9.mjs",
+      "sha256": "7ec1fff3c67ee6e255028af0b6d10fee588dde8287d762505ce275a056df65a0",
+      "size": 6286
+    },
+    {
+      "path": "tools/verify-production-updater-3.2.mjs",
+      "sha256": "27bf38d65ea164c9b6eaa442f876c8ebf1197eda0f004ba597c5c2dbedfce86c",
+      "size": 7610
+    },
+    {
+      "path": "tools/verify-production-updater-3.3.mjs",
+      "sha256": "2c276876f6fde314a9a7cbc7f93d14cc6a378dce4eebaec7dc1af5b0e395a779",
+      "size": 8753
+    },
+    {
+      "path": "tools/verify-release-1.24.0.mjs",
+      "sha256": "551ec082e47dbb54ff8c942985face7dead33b684c9e50218ba31fe20ef7d8d4",
+      "size": 6453
+    },
+    {
+      "path": "tools/verify-release-1.25.0.mjs",
+      "sha256": "36e35fedb08923c22fd8551389d33432b66dbd4215d95c594ef29bfc790c98e0",
+      "size": 6407
+    },
+    {
+      "path": "tools/verify-release-1.25.1-static.mjs",
+      "sha256": "89621694b7bad18b6f3f1ac1956032f64112c40d3edc069ca581dc813d57d628",
+      "size": 3029
+    },
+    {
+      "path": "tools/verify-release-1.25.1.mjs",
+      "sha256": "c908f5186cf2d71ef83d5e649327ae19965568933acfb32057ca00d29cf890bc",
+      "size": 7429
+    },
+    {
+      "path": "tools/verify-release-1.26.0-static.mjs",
+      "sha256": "e31a055d2ebb8e439f5b0e0235a71dacecb891e299377cfbbcfa8a32f53a85b0",
+      "size": 5938
+    },
+    {
+      "path": "tools/verify-release-1.26.1-static.mjs",
+      "sha256": "7e107b5f9a1b4ee381ff31105feb6d38dda5c40e4afe105a955badc36e6b8d10",
+      "size": 3595
+    },
+    {
+      "path": "tools/verify-release-1.27.0.mjs",
+      "sha256": "d9a75c45f40d857c84790d51dca2fd088c3851ca250405871a7e32773918c66e",
+      "size": 6384
+    },
+    {
+      "path": "tools/verify-release-1.28.0.mjs",
+      "sha256": "3989e3ec236c1aa4c387b26cc15e04cf200a018e29c095321acf826c6bae4d66",
+      "size": 5752
+    },
+    {
+      "path": "tools/verify-release-1.29.0.mjs",
+      "sha256": "7d196d913a697248ab1233907fed56c10329cf201e3bdc173bca73cb02755369",
+      "size": 6403
+    },
+    {
+      "path": "tools/verify-release-1.30.0.mjs",
+      "sha256": "3f30260dabbdf0fa7b042381cb9e24f840d0c3ddbc44fe309763789a7d14afb7",
+      "size": 8777
+    },
+    {
+      "path": "tools/verify-release-1.31.0.mjs",
+      "sha256": "b1ceed5dfc17dbd3b038b7168e61076e4d39a0f1d67e2b87677a91c4dbb2daff",
+      "size": 5398
+    },
+    {
+      "path": "tools/verify-release-manifest-staging-3.0.mjs",
+      "sha256": "36111e35cb4b4a75376a028b2407678bbce0c40585c606965f1680d4aa46afca",
+      "size": 5356
+    },
+    {
+      "path": "tools/verify-security-1.31.0.py",
+      "sha256": "a372258b97aa68d59a1fe0fd3f380d019c59412d5c408a6064f437d5cfc6e709",
+      "size": 3193
+    },
+    {
+      "path": "tools/verify-security-foundation-1.37.0.mjs",
+      "sha256": "08820d9bb7be1dec496c04e9ea4a39b2ebb84d373a9481136610d16dea0edde3",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.38.0.mjs",
+      "sha256": "a415d294679adab8ea76b86235a522e73ad9dd9ea0e2348691b1de3191255b81",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.39.0.mjs",
+      "sha256": "805aa61d7f9cba8c20afda0dd871189108b02f3751f8a75963784cc12fd6cf76",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.40.0.mjs",
+      "sha256": "f5296410e7c56a924978569a8ae904a1de8d4e327cb833e34e4b49e0384f3892",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.41.0.mjs",
+      "sha256": "cd21f37b51ca99312c624a3b353d9eb5bff7e3dbca774600ae429f468b1d6b3f",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.41.1.mjs",
+      "sha256": "a619c7ecff5febe8afa746125ba100c603598951dfc177562307614ecf509715",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-security-foundation-1.41.2.mjs",
+      "sha256": "3b3e52ef41fee7f5d96a2a96f9b0ecdc51a2fa00837fa466384b340aba3e6653",
+      "size": 5491
+    },
+    {
+      "path": "tools/verify-slice30-mock.mjs",
+      "sha256": "31a120622ce8bb8451014f2662366f81abd28d0f3be59adfe35d17e0ada1838f",
+      "size": 5790
+    },
+    {
+      "path": "tools/verify-slice31-image-editor.mjs",
+      "sha256": "20957a4a038b9afdb01a8c98b881644daf793d2a6bb778a4c8e04780687d00e4",
+      "size": 4178
+    },
+    {
+      "path": "tools/verify-slice32-batch.mjs",
+      "sha256": "21061ed5dc88feef48e80efffd9a1054d38598dce5a5d3f9f6bde39b539b83f0",
+      "size": 4655
+    },
+    {
+      "path": "tools/verify-slice32-image-render.mjs",
+      "sha256": "0f05b1ac3b686cf535bcfb3e6f6df24a29c3429ade1b3c666c1b99abb1a7311b",
+      "size": 1854
+    },
+    {
+      "path": "tools/verify-source-boundaries-1.41.1.mjs",
+      "sha256": "168e58bd08b657abf2c7a84c7d0210e8393720e3f2b665703b03d45646480b04",
+      "size": 2668
+    },
+    {
+      "path": "tools/verify-source-boundaries-1.41.2.mjs",
+      "sha256": "4424e4abf9a1dddd138b0dcb91b6d63f646c3a0c8eaae484d1e9d5b34bb35d77",
+      "size": 2668
+    },
+    {
+      "path": "tools/verify-sqlite-cleanup-contract-1.43.0.mjs",
+      "sha256": "e7a02bef89e810b1c704f68b2177478da5e41457364209ac369589de992a9e98",
+      "size": 3402
+    },
+    {
+      "path": "tools/verify-theme-manager-1.36.0.mjs",
+      "sha256": "c9aa6693aa93ff1f220a2ce3bc35ef714a0b18a53eae0f907879fc92c66c1e38",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.37.0.mjs",
+      "sha256": "1e61c4b180aa09de3dae9e72aef313b09a6f422229f180984b69a8d226e7cd8d",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.38.0.mjs",
+      "sha256": "3257b31d80034c077b25d3f1b13f8378378772bc6512445aa5ac8e882e4be109",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.39.0.mjs",
+      "sha256": "41033ba36a11a14ab74a80d65c1124848eddee21a5f3fef8bd5ab001699e2e4b",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.40.0.mjs",
+      "sha256": "072a20e27b80b911ace2c9c18d1bb0298f59345967b6ee8f3d6b9075c522a6ba",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.41.0.mjs",
+      "sha256": "251bc56d2d52cbac1e126e35ad5e0077affb2b5cde6b251ad3df6a39ce67d16d",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.41.1.mjs",
+      "sha256": "33a6f24d26cda4d2129501c4e826ed0dda4eb9e15a324bf823b2ef19540e31ef",
+      "size": 5880
+    },
+    {
+      "path": "tools/verify-theme-manager-1.41.2.mjs",
+      "sha256": "c721fda8a7a5b569a1c4beb05255261f51fbb8935d670cc0092fef30ffd1fe4a",
+      "size": 6130
+    },
+    {
+      "path": "tools/verify-ui-contracts-1.26.1.mjs",
+      "sha256": "0f3f684019763a14f5fbaec42e42c680cf748d930d46cd607fc61eb413ca4553",
+      "size": 2360
+    },
+    {
+      "path": "tools/verify-updater-hang-hotfix-1.43.0.mjs",
+      "sha256": "ae015616e289a4bfb371a2823c35e8e5a013cbdefd4005c47ac972c2e5df7516",
+      "size": 46
+    },
+    {
+      "path": "tools/verify-updater-status-ui-1.43.0.mjs",
+      "sha256": "ae015616e289a4bfb371a2823c35e8e5a013cbdefd4005c47ac972c2e5df7516",
+      "size": 46
+    },
+    {
+      "path": "tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs",
+      "sha256": "fd900efee640685ee1a0deb515513ba305b4a6e6686dc68e485f7ea26b41ca95",
+      "size": 1919
+    },
+    {
+      "path": "UPDATE_VENDOO.bat",
+      "sha256": "aab80ea7612891502fe3e6e275c864fd3c0239b9ca91738252363706a5ee4a8a",
+      "size": 1294
+    },
+    {
+      "path": "update-manifest.json",
+      "sha256": "a080d7733b65715573b9936502ce5228a8bfccd59a1766115be8cda908fa3285",
+      "size": 446
+    }
+  ]
+}
diff --git a/scripts/github-deploy.ps1 b/scripts/github-deploy.ps1
index 33e4e98..9f0781f 100644
--- a/scripts/github-deploy.ps1
+++ b/scripts/github-deploy.ps1
@@ -1,210 +1,3 @@
-# Vendoo 1.41.2 – kontrollierter GitHub-Erstimport
-$ErrorActionPreference = 'Stop'
-$Root = Split-Path -Parent (Split-Path -Parent $MyInvocation.MyCommand.Path)
-$RepoUrl = 'https://github.com/Masterluke77/vendoo.git'
-$PullRequestUrl = 'https://github.com/Masterluke77/vendoo/pull/18'
-$Branch = 'release/1.41.2-git-ignore-boundary-hotfix'
-$WorkRoot = Join-Path $env:TEMP ('vendoo-github-deploy-' + [Guid]::NewGuid().ToString('N'))
-$CloneDir = Join-Path $WorkRoot 'repo'
-
-function Info($Text) { Write-Host "[INFO] $Text" -ForegroundColor Cyan }
-function Ok($Text) { Write-Host "[OK]   $Text" -ForegroundColor Green }
-function Warn($Text) { Write-Host "[WARN] $Text" -ForegroundColor Yellow }
-function Fail($Text) { Write-Host "[FEHLER] $Text" -ForegroundColor Red }
-
-function Test-Command([string]$Name) {
-    return [bool](Get-Command $Name -ErrorAction SilentlyContinue)
-}
-
-function Ensure-Git {
-    if (Test-Command 'git.exe') { return }
-    Warn 'Git für Windows wurde nicht gefunden.'
-    if (Test-Command 'winget.exe') {
-        $answer = Read-Host 'Git jetzt automatisch über winget installieren? (ja/nein)'
-        if ($answer -eq 'ja') {
-            & winget.exe install --id Git.Git --exact --source winget --accept-package-agreements --accept-source-agreements
-            if ($LASTEXITCODE -ne 0) { throw 'Git-Installation über winget ist fehlgeschlagen.' }
-            $env:Path = [Environment]::GetEnvironmentVariable('Path','Machine') + ';' + [Environment]::GetEnvironmentVariable('Path','User')
-        }
-    }
-    if (-not (Test-Command 'git.exe')) { throw 'Git für Windows wird benötigt. Starte den Assistenten nach der Git-Installation erneut.' }
-}
-
-function Invoke-Git([string[]]$Arguments, [string]$WorkingDirectory = $CloneDir) {
-    Push-Location $WorkingDirectory
-    try {
-        & git.exe @Arguments
-        if ($LASTEXITCODE -ne 0) { throw "git $($Arguments -join ' ') fehlgeschlagen (Exit-Code $LASTEXITCODE)." }
-    } finally { Pop-Location }
-}
-
-function Copy-ProjectClean {
-    if (-not (Test-Command 'node.exe')) {
-        throw 'Node.js ist für den sicheren GitHub-Import erforderlich. Bitte zuerst über setup.bat installieren oder aktualisieren.'
-    }
-    Info 'Bereite den bereinigten Git-Arbeitsordner mit dem plattformübergreifenden Staging-Builder vor ...'
-    $builder = Join-Path $Root 'tools\prepare-git-staging.mjs'
-    $result = Invoke-NodeProcess -ScriptPath $builder -Arguments @($Root, $CloneDir) -WorkingDirectory $Root -Prefix 'Staging'
-    if ($result.ExitCode -ne 0) {
-        $result.Lines | ForEach-Object { Write-Host $_ -ForegroundColor Red }
-        throw 'Der sichere Git-Staging-Aufbau ist fehlgeschlagen.'
-    }
-    $result.Lines | ForEach-Object { Write-Host $_ }
-}
-
-function Invoke-NodeProcess {
-    param(
-        [Parameter(Mandatory=$true)][string]$ScriptPath,
-        [string[]]$Arguments = @(),
-        [string]$WorkingDirectory = $CloneDir,
-        [string]$Prefix = 'Node'
-    )
-    $id = [Guid]::NewGuid().ToString('N')
-    $stdoutPath = Join-Path $WorkRoot ("$Prefix-$id-stdout.txt")
-    $stderrPath = Join-Path $WorkRoot ("$Prefix-$id-stderr.txt")
-    $nodePath = (Get-Command node.exe -ErrorAction Stop).Source
-    $allArguments = @($ScriptPath) + $Arguments
-    $argumentLine = ($allArguments | ForEach-Object { '"' + ([string]$_).Replace('"','\"') + '"' }) -join ' '
-    $process = Start-Process -FilePath $nodePath `
-        -ArgumentList $argumentLine `
-        -WorkingDirectory $WorkingDirectory `
-        -NoNewWindow `
-        -Wait `
-        -PassThru `
-        -RedirectStandardOutput $stdoutPath `
-        -RedirectStandardError $stderrPath
-
-    $lines = @()
-    if (Test-Path -LiteralPath $stdoutPath) { $lines += @(Get-Content -LiteralPath $stdoutPath -Encoding UTF8 -ErrorAction SilentlyContinue) }
-    if (Test-Path -LiteralPath $stderrPath) { $lines += @(Get-Content -LiteralPath $stderrPath -Encoding UTF8 -ErrorAction SilentlyContinue) }
-    return [pscustomobject]@{ ExitCode = [int]$process.ExitCode; Lines = $lines }
-}
-
-function Run-SafetyGate {
-    $ReportDir = Join-Path $Root 'logs'
-    $ReportPath = Join-Path $ReportDir 'github-deploy-safety-report.txt'
-    if (-not (Test-Command 'node.exe')) {
-        throw 'Node.js ist für den sicheren GitHub-Import erforderlich. Bitte zuerst über setup.bat installieren oder aktualisieren.'
-    }
-
-    Info 'Führe das Vendoo Git-Sicherheitsgate über den vollständigen Staging-Arbeitsbaum aus ...'
-    $result = Invoke-NodeProcess -ScriptPath 'tools/verify-git-safety.mjs' -WorkingDirectory $CloneDir -Prefix 'SafetyGate'
-    foreach ($line in $result.Lines) {
-        if ($line -match '^Git-Sicherheitsgate fehlgeschlagen|^- ') { Write-Host $line -ForegroundColor Red }
-        elseif ($line -match '^\[WARN\]') { Write-Host $line -ForegroundColor Yellow }
-        else { Write-Host $line }
-    }
-
-    if ($result.ExitCode -ne 0) {
-        New-Item -ItemType Directory -Path $ReportDir -Force | Out-Null
-        @(
-            'Vendoo Git-Sicherheitsgate – vollständiger Fehlerbericht',
-            ('Zeitpunkt: ' + (Get-Date -Format 'yyyy-MM-dd HH:mm:ss')),
-            ('Projekt: ' + $Root),
-            ('Staging: ' + $CloneDir),
-            '',
-            $result.Lines
-        ) | Set-Content -LiteralPath $ReportPath -Encoding UTF8
-        Fail "Das Gate hat $($result.Lines.Count) Diagnosezeilen erzeugt. Bericht: $ReportPath"
-        try { Start-Process notepad.exe -ArgumentList ('"' + $ReportPath + '"') | Out-Null } catch {}
-        throw 'Git-Sicherheitsgate ist fehlgeschlagen. Die konkreten Treffer wurden oben angezeigt und im Bericht gespeichert.'
-    }
-
-    Remove-Item -LiteralPath $ReportPath -Force -ErrorAction SilentlyContinue
-    $forbidden = Get-ChildItem -LiteralPath $CloneDir -Recurse -Force -File -ErrorAction SilentlyContinue | Where-Object {
-        ($_.Name -match '^\.env(?:\..+)?$' -and $_.Name -notin @('.env.example','.env.docker.example')) -or
-        $_.Extension -in @('.db','.sqlite','.sqlite3','.log','.key','.pem','.pfx','.p12')
-    }
-    if ($forbidden) {
-        throw ('Verbotene Dateien im Git-Staging: ' + (($forbidden | Select-Object -First 20 -ExpandProperty FullName) -join ', '))
-    }
-    Ok 'Git-Sicherheitsgate erfolgreich: keine lokalen Secrets oder Laufzeitdaten im Import.'
-}
-
-try {
-    Write-Host ''
-    Write-Host 'Vendoo 1.41.2 – GitHub Deploy Assistent' -ForegroundColor Green
-    Write-Host 'Repository: Masterluke77/vendoo (privat)' -ForegroundColor DarkGray
-    Write-Host ''
-
-    Ensure-Git
-    New-Item -ItemType Directory -Path $WorkRoot -Force | Out-Null
-
-    Info 'Klone die vorhandene GitHub-Baseline ...'
-    & git.exe clone $RepoUrl $CloneDir
-    if ($LASTEXITCODE -ne 0) { throw 'Repository konnte nicht geklont werden. Die Git-Anmeldung öffnet sich normalerweise automatisch im Browser.' }
-
-    Push-Location $CloneDir
-    try {
-        & git.exe ls-remote --exit-code --heads origin $Branch 1>$null 2>$null
-        $branchExists = ($LASTEXITCODE -eq 0)
-    } finally { Pop-Location }
-    if ($branchExists) {
-        Invoke-Git @('fetch','origin',$Branch)
-        Invoke-Git @('switch','--track','-c',$Branch,("origin/" + $Branch))
-    } else {
-        Invoke-Git @('switch','-c',$Branch)
-    }
-
-    Copy-ProjectClean
-    Run-SafetyGate
-
-    Info 'Prüfe produktive Source-Dateien und Git-Ignore-Grenzen im Staging ...'
-    $sourceGate = Invoke-NodeProcess -ScriptPath 'tools/verify-source-boundaries-1.41.2.mjs' -WorkingDirectory $CloneDir -Prefix 'SourceGate'
-    $sourceGate.Lines | ForEach-Object { Write-Host $_ }
-    if ($sourceGate.ExitCode -ne 0) { throw 'Produktive Source-Root-Prüfung ist fehlgeschlagen.' }
-    $ignoreGate = Invoke-NodeProcess -ScriptPath 'tools/verify-git-ignore-boundaries-1.41.2.mjs' -WorkingDirectory $CloneDir -Prefix 'IgnoreGate'
-    $ignoreGate.Lines | ForEach-Object { Write-Host $_ }
-    if ($ignoreGate.ExitCode -ne 0) { throw 'Git-Ignore-Grenzprüfung ist fehlgeschlagen.' }
-
-    Invoke-Git @('config','user.name','Markus Müller')
-    Invoke-Git @('config','user.email','163446896+Masterluke77@users.noreply.github.com')
-    Invoke-Git @('add','--all')
-
-    $requiredTracked = @(
-        'app/modules/listings/routes.mjs',
-        'app/modules/inventory/index.mjs',
-        'app/modules/inventory/repository.mjs',
-        'app/modules/inventory/routes.mjs',
-        'app/modules/sessions/index.mjs'
-    )
-    Push-Location $CloneDir
-    try {
-        $ignoredModules = @(& git.exe ls-files --others --ignored --exclude-standard -- app/modules)
-        if ($ignoredModules.Count -gt 0) { throw ('Produktive Moduldateien werden von .gitignore ausgeschlossen: ' + ($ignoredModules -join ', ')) }
-        foreach ($rel in $requiredTracked) {
-            if (-not (Test-Path -LiteralPath (Join-Path $CloneDir $rel))) { throw "Pflichtdatei fehlt im Git-Staging: $rel" }
-            & git.exe ls-files --error-unmatch -- $rel 1>$null 2>$null
-            if ($LASTEXITCODE -ne 0) { throw "Pflichtdatei wurde von Git nicht getrackt: $rel" }
-        }
-    } finally { Pop-Location }
-    Ok 'Produktive Moduldateien sind vorhanden und werden von Git getrackt.'
-
-    Push-Location $CloneDir
-    try {
-        $status = & git.exe status --short
-        if (-not $status) { Warn 'Es gibt keine Änderungen gegenüber GitHub.'; exit 0 }
-        Write-Host ''
-        Write-Host $status
-        Write-Host ''
-    } finally { Pop-Location }
-
-    $confirm = Read-Host 'Geprüften Vendoo-Stand als Release-Branch zu GitHub übertragen? Zum Fortfahren PUSH eingeben'
-    if ($confirm -cne 'PUSH') { Warn 'Deployment abgebrochen. Auf GitHub wurde nichts verändert.'; exit 0 }
-
-    Invoke-Git @('commit','-m','fix: track native source modules with root-anchored runtime ignores')
-    Invoke-Git @('push','--set-upstream','origin',$Branch)
-    Ok "Branch $Branch wurde erfolgreich übertragen."
-
-    Info 'Öffne jetzt Draft Pull Request #18 im Browser ...'
-    Start-Process $PullRequestUrl
-    Write-Host ''
-    Write-Host 'Nächster Schritt im Browser: Pull Request #18 und CI prüfen. Erst nach grüner CI nach main mergen.' -ForegroundColor Yellow
-} catch {
-    Fail $_.Exception.Message
-    exit 1
-} finally {
-    if (Test-Path -LiteralPath $WorkRoot) {
-        Remove-Item -LiteralPath $WorkRoot -Recurse -Force -ErrorAction SilentlyContinue
-    }
-}
+# Kompatibilitaetsstarter fuer alte Verknuepfungen.
+& (Join-Path $PSScriptRoot 'update-vendoo.ps1')
+exit $LASTEXITCODE
diff --git a/scripts/update-vendoo-gui.ps1 b/scripts/update-vendoo-gui.ps1
new file mode 100644
index 0000000..cf5ad35
--- /dev/null
+++ b/scripts/update-vendoo-gui.ps1
@@ -0,0 +1,23 @@
+[CmdletBinding()]
+param([switch]$SkipProductionDeploy)
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference = 'Stop'
+$ui = Join-Path $PSScriptRoot 'updater\Vendoo.Updater.UI.ps1'
+try {
+  & $ui @PSBoundParameters
+} catch {
+  try {
+    Add-Type -AssemblyName PresentationFramework
+    [System.Windows.MessageBox]::Show(
+      "Der Vendoo-Updater konnte nicht gestartet werden.`n`n$($_.Exception.Message)`n`nBitte die Datei logs\updater-bootstrap.log mitsenden.",
+      'Vendoo Updater – Startfehler',
+      [System.Windows.MessageBoxButton]::OK,
+      [System.Windows.MessageBoxImage]::Error
+    ) | Out-Null
+  } catch {}
+  $packageRoot = (Resolve-Path -LiteralPath (Join-Path $PSScriptRoot '..') -ErrorAction Stop).ProviderPath.TrimEnd([System.IO.Path]::DirectorySeparatorChar,[System.IO.Path]::AltDirectorySeparatorChar)
+  $fallback = Join-Path $packageRoot 'logs\updater-bootstrap.log'
+  New-Item -ItemType Directory -Path (Split-Path -Parent $fallback) -Force | Out-Null
+  "$(Get-Date -Format o) $($_.Exception.ToString())" | Add-Content -LiteralPath $fallback -Encoding UTF8
+}
diff --git a/scripts/update-vendoo.ps1 b/scripts/update-vendoo.ps1
new file mode 100644
index 0000000..1b5b857
--- /dev/null
+++ b/scripts/update-vendoo.ps1
@@ -0,0 +1,14 @@
+[CmdletBinding()]
+param(
+  [string]$StatusFile = '',
+  [string]$EventFile = '',
+  [string]$InputFile = '',
+  [string]$CancelFile = '',
+  [string]$SessionFile = '',
+  [switch]$SkipProductionDeploy,
+  [switch]$SelfTest,
+  [string]$SelfTestFailAt = ''
+)
+$worker = Join-Path $PSScriptRoot 'updater\Vendoo.Updater.Worker.ps1'
+& $worker @PSBoundParameters
+exit $LASTEXITCODE
diff --git a/scripts/updater/Vendoo.Updater.Host.ps1 b/scripts/updater/Vendoo.Updater.Host.ps1
new file mode 100644
index 0000000..3445f8b
--- /dev/null
+++ b/scripts/updater/Vendoo.Updater.Host.ps1
@@ -0,0 +1,140 @@
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory=$true)][string]$CoreScript,
+  [Parameter(Mandatory=$true)][string]$StatusFile,
+  [Parameter(Mandatory=$true)][string]$EventFile,
+  [Parameter(Mandatory=$true)][string]$InputFile,
+  [Parameter(Mandatory=$true)][string]$CancelFile,
+  [Parameter(Mandatory=$true)][string]$SessionFile,
+  [Parameter(Mandatory=$true)][string]$LogFile,
+  [switch]$SkipProductionDeploy,
+  [switch]$SelfTest,
+  [string]$SelfTestFailAt = ''
+)
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference = 'Stop'
+$TargetVersion = '1.43.0'
+$UpdaterVersion = '3.3.0'
+
+function Get-DefaultSteps {
+  return @(
+    [ordered]@{id='package';title='Paket prüfen';state='pending'},
+    [ordered]@{id='tools';title='System prüfen';state='pending'},
+    [ordered]@{id='github';title='GitHub verbinden';state='pending'},
+    [ordered]@{id='production';title='Produktion vorbereiten';state='pending'},
+    [ordered]@{id='workspace';title='Arbeitskopie erstellen';state='pending'},
+    [ordered]@{id='tests';title='Vollständig testen';state='pending'},
+    [ordered]@{id='pullrequest';title='Pull Request erstellen';state='pending'},
+    [ordered]@{id='merge';title='Sicher mergen';state='pending'},
+    [ordered]@{id='deploy';title='Coolify deployen';state='pending'},
+    [ordered]@{id='verify';title='Produktion bestätigen';state='pending'}
+  )
+}
+
+function Append-HostLog([string]$Level,[string]$Message) {
+  try {
+    $parent = Split-Path -Parent $LogFile
+    if ($parent) { New-Item -ItemType Directory -Path $parent -Force | Out-Null }
+    $line = "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss.fff') [$Level] $Message$([Environment]::NewLine)"
+    [IO.File]::AppendAllText($LogFile,$line,(New-Object Text.UTF8Encoding($false)))
+  } catch {}
+}
+
+function Write-HostStatus([string]$State,[string]$Phase,[string]$Detail,[string]$ErrorText='',[string]$Remediation='') {
+  try {
+    $percent = 1
+    if ($State -in @('failed','cancelled','success')) { $percent = 100 }
+    $payload = [ordered]@{
+      version=$TargetVersion
+      updaterVersion=$UpdaterVersion
+      percent=$percent
+      phase=$Phase
+      detail=$Detail
+      state=$State
+      error=$ErrorText
+      remediation=$Remediation
+      updatedAt=(Get-Date).ToString('o')
+      logFile=$LogFile
+      sessionFile=$SessionFile
+      steps=(Get-DefaultSteps)
+      request=$null
+    } | ConvertTo-Json -Depth 8
+    $parent = Split-Path -Parent $StatusFile
+    if ($parent) { New-Item -ItemType Directory -Path $parent -Force | Out-Null }
+    $tmp = "$StatusFile.$PID.host.tmp"
+    [IO.File]::WriteAllText($tmp,$payload,(New-Object Text.UTF8Encoding($false)))
+    Move-Item -LiteralPath $tmp -Destination $StatusFile -Force
+  } catch {
+    Append-HostLog 'HOST-ERROR' "Status konnte nicht geschrieben werden: $($_.Exception.ToString())"
+  }
+}
+
+try {
+  foreach($path in @($StatusFile,$EventFile,$InputFile,$CancelFile,$SessionFile,$LogFile)) {
+    $parent = Split-Path -Parent $path
+    if ($parent) { New-Item -ItemType Directory -Path $parent -Force | Out-Null }
+  }
+  if (-not (Test-Path -LiteralPath $CoreScript -PathType Leaf)) {
+    throw "Worker-Core fehlt: $CoreScript"
+  }
+
+  Append-HostLog 'HOST' "Worker-Host $UpdaterVersion gestartet. Core: $CoreScript"
+  Write-HostStatus 'running' 'PowerShell-Parserprüfung' 'Der Worker-Kern wird vor der Ausführung mit dem echten PowerShell-Parser geprüft.'
+
+  $parserTokens = $null
+  $parserErrors = $null
+  [void][System.Management.Automation.Language.Parser]::ParseFile($CoreScript,[ref]$parserTokens,[ref]$parserErrors)
+  if ($parserErrors -and $parserErrors.Count -gt 0) {
+    $details = @($parserErrors | ForEach-Object {
+      "{0}:{1}:{2} {3}" -f $_.Extent.File,$_.Extent.StartLineNumber,$_.Extent.StartColumnNumber,$_.Message
+    }) -join [Environment]::NewLine
+    throw "PowerShell-Parserprüfung des Worker-Kerns fehlgeschlagen.$([Environment]::NewLine)$details"
+  }
+  Append-HostLog 'HOST' 'PowerShell-Parserprüfung des Worker-Kerns erfolgreich.'
+  Write-HostStatus 'running' 'Worker wird gestartet' 'Der geprüfte Worker-Kern wird geladen.'
+
+  $invokeParams = @{
+    StatusFile=$StatusFile
+    EventFile=$EventFile
+    InputFile=$InputFile
+    CancelFile=$CancelFile
+    SessionFile=$SessionFile
+    LogFile=$LogFile
+  }
+  if ($SkipProductionDeploy) { $invokeParams.SkipProductionDeploy = $true }
+  if ($SelfTest) { $invokeParams.SelfTest = $true }
+  if ($SelfTestFailAt) { $invokeParams.SelfTestFailAt = $SelfTestFailAt }
+
+  & $CoreScript @invokeParams
+
+  $terminal = $false
+  $stateName = ''
+  if (Test-Path -LiteralPath $StatusFile) {
+    try {
+      $final = Get-Content -LiteralPath $StatusFile -Raw -Encoding UTF8 | ConvertFrom-Json
+      $stateName = [string]$final.state
+      $terminal = $stateName -in @('success','failed','cancelled')
+    } catch {
+      Append-HostLog 'HOST-ERROR' "Abschlussstatus ist nicht lesbar: $($_.Exception.Message)"
+    }
+  }
+
+  if (-not $terminal) {
+    $message = 'Der Update-Kern wurde beendet, ohne einen terminalen Status zu schreiben.'
+    Append-HostLog 'HOST-ERROR' $message
+    Write-HostStatus 'failed' 'Update-Kern unvollständig beendet' $message $message 'Das Protokoll enthält jetzt die vollständige Start- und Worker-Diagnose. Es wurden keine stillen Fehler verworfen.'
+  } else {
+    Append-HostLog 'HOST' "Worker-Core regulär beendet. Status: $stateName"
+  }
+  exit 0
+}
+catch {
+  $full = $_.Exception.ToString()
+  $message = $_.Exception.Message
+  Append-HostLog 'HOST-FATAL' $full
+  Write-HostStatus 'failed' 'Worker konnte nicht initialisiert werden' $message $full 'Der Fehler entstand vor oder beim Laden des Worker-Kerns. Protokoll öffnen zeigt die vollständige PowerShell-Ausnahme einschließlich Datei und Zeile.'
+  try { [Console]::Error.WriteLine($full) } catch {}
+  Start-Sleep -Milliseconds 350
+  exit 1
+}
diff --git a/scripts/updater/Vendoo.Updater.Preflight.ps1 b/scripts/updater/Vendoo.Updater.Preflight.ps1
new file mode 100644
index 0000000..0f43ab6
--- /dev/null
+++ b/scripts/updater/Vendoo.Updater.Preflight.ps1
@@ -0,0 +1,90 @@
+[CmdletBinding()]
+param()
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference = 'Stop'
+$UpdaterVersion = '3.3.0'
+
+function Get-CanonicalPackageRoot {
+  $candidate = Join-Path -Path $PSScriptRoot -ChildPath '..\..'
+  $resolved = Resolve-Path -LiteralPath $candidate -ErrorAction Stop
+  $fullPath = [System.IO.Path]::GetFullPath($resolved.ProviderPath)
+  if ([string]::IsNullOrWhiteSpace($fullPath)) {
+    throw 'Der kanonische Vendoo-Paketpfad ist leer.'
+  }
+  if (-not (Test-Path -LiteralPath $fullPath -PathType Container)) {
+    throw "Der kanonische Vendoo-Paketpfad existiert nicht: $fullPath"
+  }
+  return $fullPath.TrimEnd([System.IO.Path]::DirectorySeparatorChar,[System.IO.Path]::AltDirectorySeparatorChar)
+}
+
+$PackageRoot = Get-CanonicalPackageRoot
+$logDirectory = Join-Path -Path $PackageRoot -ChildPath 'logs'
+$logFile = Join-Path -Path $logDirectory -ChildPath 'updater-preflight.log'
+
+function Write-PreflightLog([string]$Level,[string]$Message) {
+  [System.IO.Directory]::CreateDirectory($logDirectory) | Out-Null
+  $line = "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss.fff') [$Level] $Message$([Environment]::NewLine)"
+  [System.IO.File]::AppendAllText($logFile,$line,(New-Object System.Text.UTF8Encoding($false)))
+}
+
+function Show-PreflightError([string]$Message) {
+  try {
+    Add-Type -AssemblyName PresentationFramework
+    [System.Windows.MessageBox]::Show(
+      "Der Vendoo Production Updater konnte die PowerShell-Startprüfung nicht bestehen.`n`n$Message`n`nProtokoll:`n$logFile",
+      'Vendoo Updater – Startprüfung fehlgeschlagen',
+      [System.Windows.MessageBoxButton]::OK,
+      [System.Windows.MessageBoxImage]::Error
+    ) | Out-Null
+  } catch {}
+}
+
+try {
+  Write-PreflightLog 'INFO' "Production Updater $UpdaterVersion – kanonischer Paketpfad: $PackageRoot"
+  if ($PackageRoot.IndexOfAny([System.IO.Path]::GetInvalidPathChars()) -ge 0) {
+    throw "Der kanonische Paketpfad enthält unzulässige Zeichen: $PackageRoot"
+  }
+
+  $scripts = @(
+    (Join-Path $PackageRoot 'scripts\updater\Vendoo.Updater.Preflight.ps1'),
+    (Join-Path $PackageRoot 'scripts\update-vendoo-gui.ps1'),
+    (Join-Path $PackageRoot 'scripts\updater\Vendoo.Updater.UI.ps1'),
+    (Join-Path $PackageRoot 'scripts\updater\Vendoo.Updater.Host.ps1'),
+    (Join-Path $PackageRoot 'scripts\updater\Vendoo.Updater.Worker.ps1')
+  )
+
+  Write-PreflightLog 'INFO' 'Echte Windows-PowerShell-Parserprüfung gestartet.'
+  $allErrors = New-Object System.Collections.Generic.List[string]
+  foreach ($scriptPath in $scripts) {
+    if (-not (Test-Path -LiteralPath $scriptPath -PathType Leaf)) {
+      $allErrors.Add("Pflichtskript fehlt: $scriptPath")
+      continue
+    }
+    $tokens = $null
+    $errors = $null
+    [void][System.Management.Automation.Language.Parser]::ParseFile($scriptPath,[ref]$tokens,[ref]$errors)
+    if ($errors -and $errors.Count -gt 0) {
+      foreach ($parseError in $errors) {
+        $allErrors.Add(("{0}:{1}:{2} {3}" -f $parseError.Extent.File,$parseError.Extent.StartLineNumber,$parseError.Extent.StartColumnNumber,$parseError.Message))
+      }
+    } else {
+      Write-PreflightLog 'OK' "Parserprüfung erfolgreich: $scriptPath"
+    }
+  }
+
+  if ($allErrors.Count -gt 0) {
+    $message = @($allErrors) -join [Environment]::NewLine
+    Write-PreflightLog 'FATAL' $message
+    Show-PreflightError $message
+    exit 21
+  }
+
+  Write-PreflightLog 'OK' 'Alle Updater-Skripte wurden vom echten Windows-PowerShell-Parser akzeptiert.'
+  exit 0
+} catch {
+  $message = $_.Exception.ToString()
+  try { Write-PreflightLog 'FATAL' $message } catch {}
+  Show-PreflightError $message
+  exit 22
+}
diff --git a/scripts/updater/Vendoo.Updater.UI.ps1 b/scripts/updater/Vendoo.Updater.UI.ps1
new file mode 100644
index 0000000..3cce15a
--- /dev/null
+++ b/scripts/updater/Vendoo.Updater.UI.ps1
@@ -0,0 +1,333 @@
+[CmdletBinding()]
+param([switch]$SkipProductionDeploy)
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference = 'Stop'
+Add-Type -AssemblyName PresentationFramework
+Add-Type -AssemblyName PresentationCore
+Add-Type -AssemblyName WindowsBase
+Add-Type -AssemblyName System.Xaml
+
+$PackageRoot = (Resolve-Path -LiteralPath (Join-Path $PSScriptRoot '..\..') -ErrorAction Stop).ProviderPath.TrimEnd([System.IO.Path]::DirectorySeparatorChar,[System.IO.Path]::AltDirectorySeparatorChar)
+$TargetVersion = '1.43.0'
+$UpdaterVersion = '3.3.0'
+$WorkerScript = Join-Path $PSScriptRoot 'Vendoo.Updater.Worker.ps1'
+$WorkerHostScript = Join-Path $PSScriptRoot 'Vendoo.Updater.Host.ps1'
+$LocalRoot = Join-Path $env:LOCALAPPDATA 'Vendoo\Updater'
+$RuntimeRoot = Join-Path $LocalRoot 'runtime'
+$SessionRoot = Join-Path $LocalRoot 'sessions'
+New-Item -ItemType Directory -Path $RuntimeRoot,$SessionRoot -Force | Out-Null
+
+$createdNew = $false
+$mutex = [System.Threading.Mutex]::new($true, 'Local\VendooProductionUpdater', [ref]$createdNew)
+if (-not $createdNew) {
+  [System.Windows.MessageBox]::Show('Der Vendoo-Updater läuft bereits. Bitte das vorhandene Fenster verwenden.','Vendoo Updater',[System.Windows.MessageBoxButton]::OK,[System.Windows.MessageBoxImage]::Information) | Out-Null
+  return
+}
+
+$xaml = @'
+<Window xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
+        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
+        Title="Vendoo Production Updater" Width="1080" Height="720" MinWidth="960" MinHeight="650"
+        WindowStartupLocation="CenterScreen" Background="#0F1115" Foreground="#EEF1F5"
+        FontFamily="Segoe UI" ResizeMode="CanResize">
+  <Window.Resources>
+    <SolidColorBrush x:Key="Panel" Color="#171A20"/>
+    <SolidColorBrush x:Key="Panel2" Color="#1D2129"/>
+    <SolidColorBrush x:Key="Border" Color="#2B313C"/>
+    <SolidColorBrush x:Key="Muted" Color="#9AA4B2"/>
+    <SolidColorBrush x:Key="Accent" Color="#4F8CFF"/>
+    <Style TargetType="Button">
+      <Setter Property="Foreground" Value="#EEF1F5"/><Setter Property="Background" Value="#252B35"/>
+      <Setter Property="BorderBrush" Value="#343C49"/><Setter Property="Padding" Value="16,9"/>
+      <Setter Property="FontWeight" Value="SemiBold"/><Setter Property="Cursor" Value="Hand"/>
+      <Setter Property="Template"><Setter.Value><ControlTemplate TargetType="Button">
+        <Border Background="{TemplateBinding Background}" BorderBrush="{TemplateBinding BorderBrush}" BorderThickness="1" CornerRadius="7" Padding="{TemplateBinding Padding}">
+          <ContentPresenter HorizontalAlignment="Center" VerticalAlignment="Center"/>
+        </Border><ControlTemplate.Triggers>
+          <Trigger Property="IsMouseOver" Value="True"><Setter Property="Background" Value="#303744"/></Trigger>
+          <Trigger Property="IsEnabled" Value="False"><Setter Property="Opacity" Value="0.42"/></Trigger>
+        </ControlTemplate.Triggers>
+      </ControlTemplate></Setter.Value></Setter>
+    </Style>
+    <Style x:Key="PrimaryButton" TargetType="Button" BasedOn="{StaticResource {x:Type Button}}">
+      <Setter Property="Background" Value="#2E6FE8"/><Setter Property="BorderBrush" Value="#4F8CFF"/>
+    </Style>
+  </Window.Resources>
+  <Grid>
+    <Grid.RowDefinitions><RowDefinition Height="76"/><RowDefinition Height="*"/><RowDefinition Height="68"/></Grid.RowDefinitions>
+    <Border Grid.Row="0" Background="#14171C" BorderBrush="#252B35" BorderThickness="0,0,0,1">
+      <Grid Margin="28,0"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+        <StackPanel VerticalAlignment="Center">
+          <TextBlock FontSize="23" FontWeight="SemiBold" Text="Vendoo Production Updater"/>
+          <TextBlock Foreground="{StaticResource Muted}" FontSize="12" Margin="0,4,0,0" Text="Sicherer Release-, GitHub- und Coolify-Ablauf"/>
+        </StackPanel>
+        <Border Grid.Column="1" Background="#202631" BorderBrush="#343C49" BorderThickness="1" CornerRadius="8" Padding="14,8" VerticalAlignment="Center">
+          <StackPanel Orientation="Horizontal"><TextBlock Text="ZIEL  "/><TextBlock FontWeight="Bold" Text="1.43.0"/></StackPanel>
+        </Border>
+      </Grid>
+    </Border>
+
+    <Grid Grid.Row="1" Margin="24,22,24,16">
+      <Grid.ColumnDefinitions><ColumnDefinition Width="300"/><ColumnDefinition Width="18"/><ColumnDefinition Width="*"/></Grid.ColumnDefinitions>
+      <Border Grid.Column="0" Background="{StaticResource Panel}" BorderBrush="{StaticResource Border}" BorderThickness="1" CornerRadius="10" Padding="18">
+        <Grid><Grid.RowDefinitions><RowDefinition Height="Auto"/><RowDefinition Height="*"/><RowDefinition Height="Auto"/></Grid.RowDefinitions>
+          <StackPanel><TextBlock FontSize="15" FontWeight="SemiBold" Text="Update-Ablauf"/><TextBlock Foreground="{StaticResource Muted}" FontSize="11" Margin="0,4,0,14" Text="Jeder Schritt wird einzeln geprüft."/></StackPanel>
+          <ScrollViewer Grid.Row="1" VerticalScrollBarVisibility="Auto"><StackPanel x:Name="StepsPanel"/></ScrollViewer>
+          <Border Grid.Row="2" Background="#12151A" BorderBrush="#272D37" BorderThickness="1" CornerRadius="8" Padding="12" Margin="0,14,0,0">
+            <StackPanel><TextBlock Foreground="{StaticResource Muted}" FontSize="10" Text="SICHERHEIT"/>
+              <TextBlock FontSize="11" Margin="0,5,0,0" TextWrapping="Wrap" Text="Kein Datenbank-Reset. Keine Uploads, Secrets oder /app/data-Dateien werden ersetzt."/>
+            </StackPanel>
+          </Border>
+        </Grid>
+      </Border>
+
+      <Grid Grid.Column="2"><Grid.RowDefinitions><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/><RowDefinition Height="*"/></Grid.RowDefinitions>
+        <Border Background="{StaticResource Panel}" BorderBrush="{StaticResource Border}" BorderThickness="1" CornerRadius="10" Padding="22">
+          <Grid><Grid.RowDefinitions><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/></Grid.RowDefinitions>
+            <Grid><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+              <StackPanel><TextBlock x:Name="PhaseText" FontSize="20" FontWeight="SemiBold" Text="Updater wird vorbereitet"/>
+                <TextBlock x:Name="DetailText" Foreground="{StaticResource Muted}" Margin="0,7,20,0" TextWrapping="Wrap" Text="Die sichere Update-Umgebung wird initialisiert."/>
+              </StackPanel>
+              <Border x:Name="StatusBadge" Grid.Column="1" Background="#22314A" BorderBrush="#36598A" BorderThickness="1" CornerRadius="7" Padding="12,7" VerticalAlignment="Top">
+                <TextBlock x:Name="StatusText" FontWeight="Bold" FontSize="11" Text="START"/>
+              </Border>
+            </Grid>
+            <Grid Grid.Row="1" Margin="0,24,0,0"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="64"/></Grid.ColumnDefinitions>
+              <ProgressBar x:Name="ProgressBar" Height="10" Minimum="0" Maximum="100" Value="0" Foreground="{StaticResource Accent}" Background="#262C35" BorderThickness="0"/>
+              <TextBlock x:Name="PercentText" Grid.Column="1" HorizontalAlignment="Right" VerticalAlignment="Center" FontWeight="SemiBold" Text="0 %"/>
+            </Grid>
+            <Grid Grid.Row="2" Margin="0,13,0,0"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+              <TextBlock x:Name="ActivityText" Foreground="{StaticResource Muted}" FontSize="11" Text="Laufzeit 00:00"/>
+              <TextBlock x:Name="HeartbeatText" Grid.Column="1" Foreground="{StaticResource Muted}" FontSize="11" Text="Status wird aufgebaut"/>
+            </Grid>
+            <Border x:Name="InputPanel" Grid.Row="3" Visibility="Collapsed" Background="#171E2A" BorderBrush="#35547E" BorderThickness="1" CornerRadius="8" Padding="15" Margin="0,18,0,0">
+              <Grid><Grid.RowDefinitions><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/><RowDefinition Height="Auto"/></Grid.RowDefinitions>
+                <TextBlock x:Name="InputTitle" FontWeight="SemiBold" Text="Eingabe erforderlich"/>
+                <TextBlock x:Name="InputPrompt" Grid.Row="1" Foreground="{StaticResource Muted}" Margin="0,6,0,10" TextWrapping="Wrap"/>
+                <Grid Grid.Row="2"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+                  <PasswordBox x:Name="SecretInput" Height="34" Padding="8" Background="#0F1217" Foreground="#EEF1F5" BorderBrush="#3A4657"/>
+                  <Button x:Name="SubmitInputButton" Grid.Column="1" Style="{StaticResource PrimaryButton}" Margin="10,0,0,0" Content="Sicher übernehmen"/>
+                </Grid>
+              </Grid>
+            </Border>
+          </Grid>
+        </Border>
+
+        <Border Grid.Row="1" x:Name="ErrorPanel" Visibility="Collapsed" Background="#24181B" BorderBrush="#7A3640" BorderThickness="1" CornerRadius="10" Padding="18" Margin="0,14,0,0">
+          <StackPanel><TextBlock x:Name="ErrorTitle" FontSize="15" FontWeight="SemiBold" Foreground="#FFB6BE" Text="Update gestoppt"/>
+            <TextBlock x:Name="ErrorText" Margin="0,7,0,0" TextWrapping="Wrap"/>
+            <TextBlock x:Name="RemediationText" Foreground="#D7A9AF" Margin="0,8,0,0" TextWrapping="Wrap"/>
+          </StackPanel>
+        </Border>
+
+        <Border Grid.Row="2" Background="{StaticResource Panel}" BorderBrush="{StaticResource Border}" BorderThickness="1" CornerRadius="10" Margin="0,14,0,0">
+          <Grid><Grid.RowDefinitions><RowDefinition Height="42"/><RowDefinition Height="*"/></Grid.RowDefinitions>
+            <Grid Margin="16,0"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+              <TextBlock VerticalAlignment="Center" FontWeight="SemiBold" Text="Technisches Protokoll"/>
+              <TextBlock x:Name="LogPathText" Grid.Column="1" VerticalAlignment="Center" Foreground="{StaticResource Muted}" FontSize="10" Text="wird vorbereitet"/>
+            </Grid>
+            <TextBox x:Name="LogBox" Grid.Row="1" Margin="12,0,12,12" IsReadOnly="True" AcceptsReturn="True" TextWrapping="NoWrap" VerticalScrollBarVisibility="Auto" HorizontalScrollBarVisibility="Auto" Background="#0D0F13" Foreground="#CDD4DE" BorderBrush="#292F38" FontFamily="Consolas" FontSize="11" Padding="10"/>
+          </Grid>
+        </Border>
+      </Grid>
+    </Grid>
+
+    <Border Grid.Row="2" Background="#14171C" BorderBrush="#252B35" BorderThickness="0,1,0,0">
+      <Grid Margin="24,0"><Grid.ColumnDefinitions><ColumnDefinition/><ColumnDefinition Width="Auto"/></Grid.ColumnDefinitions>
+        <StackPanel Orientation="Horizontal" VerticalAlignment="Center">
+          <Button x:Name="OpenLogButton" Content="Protokoll öffnen" IsEnabled="False"/>
+          <Button x:Name="OpenRuntimeButton" Content="Diagnoseordner" Margin="10,0,0,0" IsEnabled="False"/>
+          <Button x:Name="CopyErrorButton" Content="Fehler kopieren" Margin="10,0,0,0" Visibility="Collapsed"/>
+        </StackPanel>
+        <StackPanel Grid.Column="1" Orientation="Horizontal" VerticalAlignment="Center">
+          <Button x:Name="CancelButton" Content="Update abbrechen"/>
+          <Button x:Name="RetryButton" Content="Erneut versuchen" Margin="10,0,0,0" Visibility="Collapsed"/>
+          <Button x:Name="CloseButton" Style="{StaticResource PrimaryButton}" Content="Schließen" Margin="10,0,0,0" IsEnabled="False"/>
+        </StackPanel>
+      </Grid>
+    </Border>
+  </Grid>
+</Window>
+'@
+
+$reader = [System.Xml.XmlNodeReader]::new([xml]$xaml)
+$window = [System.Windows.Markup.XamlReader]::Load($reader)
+$names = @('StepsPanel','PhaseText','DetailText','StatusBadge','StatusText','ProgressBar','PercentText','ActivityText','HeartbeatText','InputPanel','InputTitle','InputPrompt','SecretInput','SubmitInputButton','ErrorPanel','ErrorTitle','ErrorText','RemediationText','LogBox','LogPathText','OpenLogButton','OpenRuntimeButton','CopyErrorButton','CancelButton','RetryButton','CloseButton')
+foreach ($name in $names) { Set-Variable -Name $name -Value $window.FindName($name) -Scope Script }
+
+$steps = @(
+  @{id='package'; title='Paket prüfen'}, @{id='tools'; title='System prüfen'}, @{id='github'; title='GitHub verbinden'},
+  @{id='production'; title='Produktion vorbereiten'}, @{id='workspace'; title='Arbeitskopie erstellen'}, @{id='tests'; title='Vollständig testen'},
+  @{id='pullrequest'; title='Pull Request erstellen'}, @{id='merge'; title='Sicher mergen'}, @{id='deploy'; title='Coolify deployen'}, @{id='verify'; title='Produktion bestätigen'}
+)
+$script:StepControls = @{}
+foreach ($step in $steps) {
+  $border = New-Object System.Windows.Controls.Border
+  $border.CornerRadius = [System.Windows.CornerRadius]::new(6); $border.Padding = [System.Windows.Thickness]::new(9,8,9,8); $border.Margin = [System.Windows.Thickness]::new(0,0,0,4); $border.Background = [System.Windows.Media.BrushConverter]::new().ConvertFromString('#171A20')
+  $grid = New-Object System.Windows.Controls.Grid
+  $c1=New-Object System.Windows.Controls.ColumnDefinition; $c1.Width=[System.Windows.GridLength]::new(28); $grid.ColumnDefinitions.Add($c1)
+  $c2=New-Object System.Windows.Controls.ColumnDefinition; $c2.Width=[System.Windows.GridLength]::new(1,[System.Windows.GridUnitType]::Star); $grid.ColumnDefinitions.Add($c2)
+  $icon=New-Object System.Windows.Controls.TextBlock; $icon.Text='○'; $icon.Foreground='#6E7886'; $icon.FontSize=16; $icon.VerticalAlignment='Center'
+  $label=New-Object System.Windows.Controls.TextBlock; $label.Text=$step.title; $label.Foreground='#AAB3BF'; $label.VerticalAlignment='Center'; [System.Windows.Controls.Grid]::SetColumn($label,1)
+  $grid.Children.Add($icon)|Out-Null; $grid.Children.Add($label)|Out-Null; $border.Child=$grid; $StepsPanel.Children.Add($border)|Out-Null
+  $script:StepControls[$step.id]=@{Border=$border;Icon=$icon;Label=$label}
+}
+
+$script:Worker=$null; $script:Timer=$null; $script:Terminal=$false; $script:ClosingAllowed=$false; $script:LastStatusAt=Get-Date; $script:StartedAt=Get-Date
+$script:StatusFile=''; $script:EventFile=''; $script:InputFile=''; $script:CancelFile=''; $script:SessionFile=Join-Path $SessionRoot "$TargetVersion.json"; $script:LogFile=''; $script:StdoutFile=''; $script:StderrFile=''; $script:EventOffset=0; $script:LastRequestId=''; $script:LastError=''
+
+function Set-Badge([string]$state) {
+  switch ($state) {
+    'success' { $StatusText.Text='ERFOLGREICH'; $StatusBadge.Background='#173322'; $StatusBadge.BorderBrush='#2C7A4B'; $StatusText.Foreground='#8FE0AC' }
+    'failed' { $StatusText.Text='GESTOPPT'; $StatusBadge.Background='#351B20'; $StatusBadge.BorderBrush='#8B3B48'; $StatusText.Foreground='#FFB6BE' }
+    'input' { $StatusText.Text='EINGABE'; $StatusBadge.Background='#392E17'; $StatusBadge.BorderBrush='#8C6D27'; $StatusText.Foreground='#F4D47B' }
+    'waiting' { $StatusText.Text='WARTE'; $StatusBadge.Background='#1B2D3B'; $StatusBadge.BorderBrush='#35627D'; $StatusText.Foreground='#91CBE9' }
+    'cancelling' { $StatusText.Text='ABBRUCH'; $StatusBadge.Background='#392E17'; $StatusBadge.BorderBrush='#8C6D27'; $StatusText.Foreground='#F4D47B' }
+    default { $StatusText.Text='LÄUFT'; $StatusBadge.Background='#1C2D49'; $StatusBadge.BorderBrush='#36598A'; $StatusText.Foreground='#9FC0FF' }
+  }
+}
+
+function Update-Steps($status) {
+  if (-not $status.steps) { return }
+  foreach ($s in @($status.steps)) {
+    if (-not $script:StepControls.ContainsKey([string]$s.id)) { continue }
+    $c=$script:StepControls[[string]$s.id]
+    switch ([string]$s.state) {
+      'done' { $c.Icon.Text='●'; $c.Icon.Foreground='#62D28B'; $c.Label.Foreground='#EEF1F5'; $c.Border.Background='#18251E' }
+      'active' { $c.Icon.Text='●'; $c.Icon.Foreground='#6EA1FF'; $c.Label.Foreground='#FFFFFF'; $c.Label.FontWeight='SemiBold'; $c.Border.Background='#1A2435' }
+      'failed' { $c.Icon.Text='×'; $c.Icon.Foreground='#FF7A88'; $c.Label.Foreground='#FFD2D7'; $c.Border.Background='#2A191D' }
+      'skipped' { $c.Icon.Text='–'; $c.Icon.Foreground='#77808D'; $c.Label.Foreground='#77808D'; $c.Border.Background='#171A20' }
+      default { $c.Icon.Text='○'; $c.Icon.Foreground='#6E7886'; $c.Label.Foreground='#AAB3BF'; $c.Label.FontWeight='Normal'; $c.Border.Background='#171A20' }
+    }
+  }
+}
+
+function Write-InitialStatus {
+  $steps=@(
+    @{id='package';title='Paket prüfen';state='pending'},@{id='tools';title='System prüfen';state='pending'},@{id='github';title='GitHub verbinden';state='pending'},
+    @{id='production';title='Produktion vorbereiten';state='pending'},@{id='workspace';title='Arbeitskopie erstellen';state='pending'},@{id='tests';title='Vollständig testen';state='pending'},
+    @{id='pullrequest';title='Pull Request erstellen';state='pending'},@{id='merge';title='Sicher mergen';state='pending'},@{id='deploy';title='Coolify deployen';state='pending'},@{id='verify';title='Produktion bestätigen';state='pending'}
+  )
+  $payload=[ordered]@{version=$TargetVersion;updaterVersion=$UpdaterVersion;percent=0;phase='Updater wird vorbereitet';detail='Die überwachte Update-Umgebung wird initialisiert.';state='running';error='';remediation='';updatedAt=(Get-Date).ToString('o');logFile=$script:LogFile;sessionFile=$script:SessionFile;steps=$steps;request=$null}|ConvertTo-Json -Depth 8
+  [IO.File]::WriteAllText($script:StatusFile,$payload,(New-Object Text.UTF8Encoding($false)))
+}
+
+function Get-WorkerExitDiagnostics {
+  $parts=New-Object Collections.Generic.List[string]
+  try {
+    $stderr=[string]$script:Worker.StandardError.ReadToEnd()
+    if($stderr){$stderr|Set-Content -LiteralPath $script:StderrFile -Encoding UTF8;$parts.Add("PowerShell-Fehlerkanal:`n$stderr")}
+  } catch {}
+  try {
+    $stdout=[string]$script:Worker.StandardOutput.ReadToEnd()
+    if($stdout){$stdout|Set-Content -LiteralPath $script:StdoutFile -Encoding UTF8;$parts.Add("PowerShell-Ausgabe:`n$stdout")}
+  } catch {}
+  if(Test-Path -LiteralPath $script:LogFile){
+    try{
+      $tail=@(Get-Content -LiteralPath $script:LogFile -Encoding UTF8 -Tail 35) -join [Environment]::NewLine
+      if($tail){$parts.Add("Letzte Protokollzeilen:`n$tail")}
+    }catch{}
+  }
+  if($parts.Count -eq 0){$parts.Add('Der Prozess lieferte keinen Fehlertext. Die Bootstrap-Dateien im Laufzeitordner wurden dennoch erhalten.')}
+  return ($parts -join ([Environment]::NewLine+[Environment]::NewLine))
+}
+
+function Start-Worker {
+  $stamp=Get-Date -Format 'yyyyMMdd-HHmmss-fff'; $run=Join-Path $RuntimeRoot $stamp; New-Item -ItemType Directory -Path $run -Force|Out-Null
+  $script:StatusFile=Join-Path $run 'status.json'; $script:EventFile=Join-Path $run 'events.ndjson'; $script:InputFile=Join-Path $run 'input.json'; $script:CancelFile=Join-Path $run 'cancel.flag'
+  $script:LogFile=Join-Path $run 'updater.log'; $script:StdoutFile=Join-Path $run 'worker.stdout.log'; $script:StderrFile=Join-Path $run 'worker.stderr.log'
+  $script:EventOffset=0; $script:Terminal=$false; $script:ClosingAllowed=$false; $script:StartedAt=Get-Date; $script:LastStatusAt=Get-Date; $script:LastRequestId=''; $script:LastError=''
+  $ErrorPanel.Visibility='Collapsed'; $InputPanel.Visibility='Collapsed'; $CopyErrorButton.Visibility='Collapsed'; $RetryButton.Visibility='Collapsed'; $CloseButton.IsEnabled=$false; $CancelButton.IsEnabled=$true; $OpenLogButton.IsEnabled=$true; $LogBox.Clear()
+  $LogPathText.Text=[IO.Path]::GetFileName($script:LogFile)
+  [IO.File]::WriteAllText($script:LogFile,"$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss.fff') [UI] Laufzeitordner angelegt: $run$([Environment]::NewLine)",(New-Object Text.UTF8Encoding($false)))
+  $OpenRuntimeButton.IsEnabled=$true
+  foreach($entry in $script:StepControls.Values){$entry.Icon.Text='○';$entry.Icon.Foreground='#6E7886';$entry.Label.Foreground='#AAB3BF';$entry.Label.FontWeight='Normal';$entry.Border.Background='#171A20'}
+  Set-Badge 'running'; $PhaseText.Text='Updater wird vorbereitet'; $DetailText.Text='Die überwachte Update-Umgebung wird initialisiert.'; $ProgressBar.Value=0; $PercentText.Text='0 %'
+  Write-InitialStatus
+
+  $args=@('-NoLogo','-NoProfile','-ExecutionPolicy','Bypass','-File',('"{0}"' -f $WorkerHostScript),'-CoreScript',('"{0}"' -f $WorkerScript),'-StatusFile',('"{0}"' -f $script:StatusFile),'-EventFile',('"{0}"' -f $script:EventFile),'-InputFile',('"{0}"' -f $script:InputFile),'-CancelFile',('"{0}"' -f $script:CancelFile),'-SessionFile',('"{0}"' -f $script:SessionFile),'-LogFile',('"{0}"' -f $script:LogFile))
+  if($SkipProductionDeploy){$args+='-SkipProductionDeploy'}
+  $psi=New-Object Diagnostics.ProcessStartInfo
+  $psi.FileName='powershell.exe'; $psi.Arguments=($args -join ' '); $psi.UseShellExecute=$false; $psi.CreateNoWindow=$true; $psi.WorkingDirectory=$PackageRoot
+  $psi.RedirectStandardOutput=$true; $psi.RedirectStandardError=$true
+  $script:Worker=New-Object Diagnostics.Process; $script:Worker.StartInfo=$psi
+  if(-not $script:Worker.Start()){throw 'Der überwachte Update-Prozess konnte nicht gestartet werden.'}
+}
+
+function Read-NewEvents {
+  if(-not (Test-Path -LiteralPath $script:EventFile)){return}
+  $stream=[IO.File]::Open($script:EventFile,[IO.FileMode]::Open,[IO.FileAccess]::Read,[IO.FileShare]::ReadWrite)
+  try {
+    if($script:EventOffset -gt $stream.Length){$script:EventOffset=0}
+    $stream.Seek($script:EventOffset,[IO.SeekOrigin]::Begin)|Out-Null
+    $reader=New-Object IO.StreamReader($stream,[Text.Encoding]::UTF8,$true,4096,$true)
+    while(-not $reader.EndOfStream){
+      $line=$reader.ReadLine(); if(-not $line){continue}
+      try{$e=$line|ConvertFrom-Json; $display=('{0}  {1,-7}  {2}' -f ([DateTime]::Parse($e.at).ToString('HH:mm:ss')),[string]$e.level,[string]$e.message)}catch{$display=$line}
+      $LogBox.AppendText($display+[Environment]::NewLine); $LogBox.ScrollToEnd()
+    }
+    $script:EventOffset=$stream.Position; $reader.Dispose()
+  } finally {$stream.Dispose()}
+}
+
+function Apply-Status($s) {
+  $script:LastStatusAt=Get-Date
+  $PhaseText.Text=[string]$s.phase; $DetailText.Text=[string]$s.detail
+  $p=[Math]::Max(0,[Math]::Min(100,[int]$s.percent)); $ProgressBar.Value=$p; $PercentText.Text="$p %"
+  Set-Badge ([string]$s.state); Update-Steps $s
+  if($s.logFile){$script:LogFile=[string]$s.logFile;$LogPathText.Text=[IO.Path]::GetFileName($script:LogFile);$OpenLogButton.IsEnabled=$true}
+  if([string]$s.state -eq 'input' -and $s.request){
+    $requestId=[string]$s.request.id
+    if($requestId -ne $script:LastRequestId){$script:LastRequestId=$requestId;$SecretInput.Clear();$InputTitle.Text=[string]$s.request.title;$InputPrompt.Text=[string]$s.request.prompt;$InputPanel.Visibility='Visible';$SecretInput.Focus()}
+  } else {$InputPanel.Visibility='Collapsed'}
+  if([string]$s.state -in @('success','failed','cancelled')){
+    $script:Terminal=$true;$script:ClosingAllowed=$true;$CancelButton.IsEnabled=$false;$CloseButton.IsEnabled=$true
+    if([string]$s.state -eq 'failed'){
+      $script:LastError=[string]$s.error; $ErrorTitle.Text='Update sicher gestoppt';$ErrorText.Text=[string]$s.error;$RemediationText.Text=[string]$s.remediation;$ErrorPanel.Visibility='Visible';$CopyErrorButton.Visibility='Visible';$RetryButton.Visibility='Visible'
+    } elseif([string]$s.state -eq 'cancelled'){
+      $script:LastError='Das Update wurde durch den Benutzer abgebrochen.';$ErrorTitle.Text='Update abgebrochen';$ErrorText.Text=$script:LastError;$RemediationText.Text='Ein erneuter Start setzt den kontrollierten Ablauf fort.';$ErrorPanel.Visibility='Visible';$CopyErrorButton.Visibility='Visible';$RetryButton.Visibility='Visible'
+    }
+  }
+}
+
+$SubmitInputButton.Add_Click({
+  $value=$SecretInput.Password.Trim(); if(-not $value){[System.Windows.MessageBox]::Show('Bitte einen Wert eintragen.','Vendoo Updater',[System.Windows.MessageBoxButton]::OK,[System.Windows.MessageBoxImage]::Warning)|Out-Null;return}
+  @{requestId=$script:LastRequestId;value=$value;submittedAt=(Get-Date).ToString('o')}|ConvertTo-Json|Set-Content -LiteralPath $script:InputFile -Encoding UTF8
+  $SecretInput.Clear();$InputPanel.Visibility='Collapsed';$DetailText.Text='Eingabe wurde sicher übernommen und wird geprüft.'
+})
+$CancelButton.Add_Click({if($script:Worker -and -not $script:Worker.HasExited){New-Item -ItemType File -Path $script:CancelFile -Force|Out-Null;Set-Badge 'cancelling';$DetailText.Text='Der aktuelle Prozess wird kontrolliert beendet. Bitte kurz geöffnet lassen.';$CancelButton.IsEnabled=$false}})
+$RetryButton.Add_Click({ try { Start-Worker } catch { $script:LastError=$_.Exception.Message; $ErrorText.Text=$script:LastError; $ErrorPanel.Visibility='Visible'; Set-Badge 'failed' } })
+$CloseButton.Add_Click({$script:ClosingAllowed=$true;$window.Close()})
+$OpenLogButton.Add_Click({if($script:LogFile -and (Test-Path -LiteralPath $script:LogFile)){Start-Process notepad.exe -ArgumentList ('"{0}"' -f $script:LogFile)}elseif($script:StatusFile){$folder=Split-Path -Parent $script:StatusFile;if(Test-Path $folder){Start-Process explorer.exe -ArgumentList ('"{0}"' -f $folder)}}})
+$OpenRuntimeButton.Add_Click({if($script:StatusFile){$folder=Split-Path -Parent $script:StatusFile;if(Test-Path $folder){Start-Process explorer.exe -ArgumentList ('"{0}"' -f $folder)}}})
+$CopyErrorButton.Add_Click({if($script:LastError){[System.Windows.Clipboard]::SetText($script:LastError+[Environment]::NewLine+[Environment]::NewLine+'Protokoll: '+$script:LogFile)}})
+$window.Add_Closing({param($sender,$e) if(-not $script:ClosingAllowed){if($script:Worker -and -not $script:Worker.HasExited){$choice=[System.Windows.MessageBox]::Show('Das Update läuft noch. Soll es kontrolliert abgebrochen werden?','Vendoo Updater',[System.Windows.MessageBoxButton]::YesNo,[System.Windows.MessageBoxImage]::Warning);if($choice -eq [System.Windows.MessageBoxResult]::Yes){New-Item -ItemType File -Path $script:CancelFile -Force|Out-Null;$e.Cancel=$true;$CancelButton.IsEnabled=$false;$DetailText.Text='Abbruch wird ausgeführt …'}else{$e.Cancel=$true}}else{$e.Cancel=$true}}})
+
+$script:Timer=New-Object System.Windows.Threading.DispatcherTimer
+$script:Timer.Interval=[TimeSpan]::FromMilliseconds(350)
+$script:Timer.Add_Tick({
+  try {
+    Read-NewEvents
+    if(Test-Path -LiteralPath $script:StatusFile){try{$s=Get-Content -LiteralPath $script:StatusFile -Raw -Encoding UTF8|ConvertFrom-Json;Apply-Status $s}catch{}}
+    $elapsed=(Get-Date)-$script:StartedAt;$idle=[int]((Get-Date)-$script:LastStatusAt).TotalSeconds
+    $ActivityText.Text=('Laufzeit {0:00}:{1:00}' -f [int]$elapsed.TotalMinutes,$elapsed.Seconds);$HeartbeatText.Text=if($idle -lt 5){'Status aktuell'}else{"Letzte Meldung vor $idle Sek."}
+    if($script:Worker -and $script:Worker.HasExited -and -not $script:Terminal){
+      if(Test-Path -LiteralPath $script:StatusFile){
+        try{$final=Get-Content -LiteralPath $script:StatusFile -Raw -Encoding UTF8|ConvertFrom-Json;Apply-Status $final}catch{}
+      }
+      if(-not $script:Terminal){
+        $diagnostics=Get-WorkerExitDiagnostics
+        $script:Terminal=$true;$script:ClosingAllowed=$true;$CancelButton.IsEnabled=$false;$CloseButton.IsEnabled=$true;$RetryButton.Visibility='Visible';$CopyErrorButton.Visibility='Visible';Set-Badge 'failed'
+        $PhaseText.Text='Updater-Prozess unerwartet beendet';$DetailText.Text='Die vollständige Startdiagnose wurde aufgezeichnet. Das Fenster bleibt geöffnet.'
+        $script:LastError="Der überwachte Worker-Host wurde mit Exit-Code $($script:Worker.ExitCode) beendet.`n`n$diagnostics"
+        $ErrorText.Text=$script:LastError;$RemediationText.Text='Protokoll öffnen zeigt die vollständige Ausnahme mit Datei und Zeile. Danach kann derselbe sichere Lauf erneut gestartet werden.';$ErrorPanel.Visibility='Visible'
+      }
+    }
+  } catch {
+    $script:LastError=$_.Exception.Message
+  }
+})
+
+try { Start-Worker; $script:Timer.Start(); $window.ShowDialog()|Out-Null }
+finally { try{$script:Timer.Stop()}catch{};if($script:Worker -and -not $script:Worker.HasExited){try{New-Item -ItemType File -Path $script:CancelFile -Force|Out-Null}catch{}};try{$mutex.ReleaseMutex()}catch{};$mutex.Dispose() }
diff --git a/scripts/updater/Vendoo.Updater.Worker.ps1 b/scripts/updater/Vendoo.Updater.Worker.ps1
new file mode 100644
index 0000000..8721562
--- /dev/null
+++ b/scripts/updater/Vendoo.Updater.Worker.ps1
@@ -0,0 +1,334 @@
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory=$true)][string]$StatusFile,
+  [Parameter(Mandatory=$true)][string]$EventFile,
+  [Parameter(Mandatory=$true)][string]$InputFile,
+  [Parameter(Mandatory=$true)][string]$CancelFile,
+  [Parameter(Mandatory=$true)][string]$SessionFile,
+  [Parameter(Mandatory=$true)][string]$LogFile,
+  [switch]$SkipProductionDeploy,
+  [switch]$SelfTest,
+  [string]$SelfTestFailAt = ''
+)
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference='Stop';$ProgressPreference='SilentlyContinue'
+Add-Type -AssemblyName System.Net.Http
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$PackageRoot=(Resolve-Path -LiteralPath (Join-Path $PSScriptRoot '..\..') -ErrorAction Stop).ProviderPath.TrimEnd([System.IO.Path]::DirectorySeparatorChar,[System.IO.Path]::AltDirectorySeparatorChar)
+$Repository='Masterluke77/vendoo';$BaseBranch='main';$TargetVersion='1.43.0';$UpdaterVersion='3.3.0';$PublicBaseUrl='https://vendoo.flatlined.de'
+$LocalRoot=Join-Path $env:LOCALAPPDATA 'Vendoo\Updater';$ToolsRoot=Join-Path $LocalRoot 'tools';$LogsRoot=Join-Path $LocalRoot 'logs';$WorkRoot=Join-Path $LocalRoot "work\$TargetVersion";New-Item -ItemType Directory -Path $ToolsRoot,$LogsRoot,(Split-Path -Parent $SessionFile) -Force|Out-Null
+$Stamp=Get-Date -Format 'yyyyMMdd-HHmmss';$Branch="release/$TargetVersion-production-update-v3";$CloneDir=Join-Path $WorkRoot 'repository'
+$script:Tools=@{};$script:CurrentStep='package';$script:LastHeartbeat=Get-Date
+$script:Steps=@(
+  [ordered]@{id='package';title='Paket prüfen';state='pending'},[ordered]@{id='tools';title='System prüfen';state='pending'},[ordered]@{id='github';title='GitHub verbinden';state='pending'},
+  [ordered]@{id='production';title='Produktion vorbereiten';state='pending'},[ordered]@{id='workspace';title='Arbeitskopie erstellen';state='pending'},[ordered]@{id='tests';title='Vollständig testen';state='pending'},
+  [ordered]@{id='pullrequest';title='Pull Request erstellen';state='pending'},[ordered]@{id='merge';title='Sicher mergen';state='pending'},[ordered]@{id='deploy';title='Coolify deployen';state='pending'},[ordered]@{id='verify';title='Produktion bestätigen';state='pending'}
+)
+
+function Write-Event([string]$Level,[string]$Message){
+  $safe=$Message -replace '(?i)(https://[^\s]*(?:token|webhook)[^\s]*)','[VERDECKT]'
+  $entry=[ordered]@{at=(Get-Date).ToString('o');level=$Level.ToUpperInvariant();message=$safe}|ConvertTo-Json -Compress
+  [IO.File]::AppendAllText($EventFile,$entry+[Environment]::NewLine,(New-Object Text.UTF8Encoding($false)))
+  [IO.File]::AppendAllText($LogFile,"$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') [$($Level.ToUpperInvariant())] $safe$([Environment]::NewLine)",(New-Object Text.UTF8Encoding($false)))
+}
+function Write-State([int]$Percent,[string]$Phase,[string]$Detail,[string]$State='running',[string]$Error='',[string]$Remediation='', $Request=$null){
+  $payload=[ordered]@{version=$TargetVersion;updaterVersion=$UpdaterVersion;percent=[Math]::Max(0,[Math]::Min(100,$Percent));phase=$Phase;detail=$Detail;state=$State;error=$Error;remediation=$Remediation;updatedAt=(Get-Date).ToString('o');logFile=$LogFile;sessionFile=$SessionFile;steps=$script:Steps;request=$Request}|ConvertTo-Json -Depth 8
+  $tmp="$StatusFile.$PID.tmp";[IO.File]::WriteAllText($tmp,$payload,(New-Object Text.UTF8Encoding($false)));Move-Item -LiteralPath $tmp -Destination $StatusFile -Force
+}
+function Set-Step([string]$Id,[string]$State){foreach($s in $script:Steps){if($s.id -eq $Id){$s.state=$State}elseif($State -eq 'active' -and $s.state -eq 'active'){$s.state='pending'}};$script:CurrentStep=$Id}
+function Complete-Step([string]$Id){foreach($s in $script:Steps){if($s.id -eq $Id){$s.state='done'}}}
+function Fail-Step{foreach($s in $script:Steps){if($s.id -eq $script:CurrentStep){$s.state='failed'}}}
+function Assert-NotCancelled{if(Test-Path -LiteralPath $CancelFile){throw [System.OperationCanceledException]::new('Das Update wurde durch den Benutzer abgebrochen.')}}
+function Save-Session($Data){if(-not($Data.PSObject.Properties.Name -contains 'updaterVersion')){$Data|Add-Member -NotePropertyName updaterVersion -NotePropertyValue $UpdaterVersion};$Data.updaterVersion=$UpdaterVersion;$Data.updatedAt=(Get-Date).ToString('o');$tmp="$SessionFile.tmp";$Data|ConvertTo-Json -Depth 8|Set-Content -LiteralPath $tmp -Encoding UTF8;Move-Item $tmp $SessionFile -Force}
+function Load-Session{if(Test-Path -LiteralPath $SessionFile){try{$saved=Get-Content $SessionFile -Raw -Encoding UTF8|ConvertFrom-Json;if([string]$saved.version-eq$TargetVersion -and [string]$saved.updaterVersion-eq$UpdaterVersion){return $saved};Write-Event 'INFO' 'Veralteter oder anderer Updater-Sitzungsstand wird nicht übernommen.'}catch{Write-Event 'WARN' 'Gespeicherter Sitzungsstand ist ungültig und wird verworfen.'}};return [pscustomobject]@{version=$TargetVersion;updaterVersion=$UpdaterVersion;branch=$Branch;prUrl='';merged=$false;runId='';stage='new';updatedAt=''}}
+function Quote-Arg([string]$Value){if($null -eq $Value){return '""'};if($Value -notmatch '[\s"]'){return $Value};return '"'+($Value -replace '(\\*)"','$1$1\"' -replace '(\\+)$','$1$1')+'"'}
+function Stop-Tree([int]$ProcessId){
+  try { & taskkill.exe /PID $ProcessId /T /F 2>$null | Out-Null }
+  catch { try { Stop-Process -Id $ProcessId -Force -ErrorAction SilentlyContinue } catch {} }
+}
+function Get-TailText([string]$Text,[int]$MaxLength){
+  if([string]::IsNullOrWhiteSpace($Text)){return ''}
+  $value=$Text.Trim()
+  if($value.Length -gt $MaxLength){return $value.Substring($value.Length-$MaxLength)}
+  return $value
+}
+function Get-ProcessFailureSummary([string]$StdErr,[string]$StdOut){
+  $parts=New-Object Collections.Generic.List[string]
+  $errorTail=Get-TailText $StdErr 1800
+  $outputTail=Get-TailText $StdOut 900
+  if($errorTail){$parts.Add("Fehlerausgabe:`n$errorTail")}
+  if($outputTail){$parts.Add("Letzte Standardausgabe:`n$outputTail")}
+  if($parts.Count -eq 0){return 'Der Prozess lieferte keine Diagnoseausgabe.'}
+  return ($parts -join "`n`n")
+}
+function Invoke-External{
+  param([string]$File,[string[]]$Arguments,[string]$WorkingDirectory=$PackageRoot,[int]$TimeoutSeconds=120,[switch]$AllowFailure,[string]$InputText='',[string]$Label='Prozess',[switch]$Quiet)
+  Assert-NotCancelled
+  $psi=New-Object Diagnostics.ProcessStartInfo;$psi.FileName=$File;$psi.Arguments=(@($Arguments|ForEach-Object{Quote-Arg ([string]$_)}) -join ' ');$psi.WorkingDirectory=$WorkingDirectory;$psi.UseShellExecute=$false;$psi.CreateNoWindow=$true;$psi.RedirectStandardOutput=$true;$psi.RedirectStandardError=$true;$psi.RedirectStandardInput=$true
+  # Node.js, npm and Git emit UTF-8 when redirected. Windows PowerShell otherwise decodes
+  # redirected streams with the active OEM code page, which corrupts German umlauts.
+  $utf8NoBom=New-Object Text.UTF8Encoding($false)
+  if($psi.PSObject.Properties.Name -contains 'StandardOutputEncoding'){$psi.StandardOutputEncoding=$utf8NoBom}
+  if($psi.PSObject.Properties.Name -contains 'StandardErrorEncoding'){$psi.StandardErrorEncoding=$utf8NoBom}
+  $psi.EnvironmentVariables['NO_COLOR']='1'
+  $psi.EnvironmentVariables['FORCE_COLOR']='0'
+  $psi.EnvironmentVariables['NPM_CONFIG_COLOR']='false'
+  $psi.EnvironmentVariables['NPM_CONFIG_UNICODE']='true'
+  $p=New-Object Diagnostics.Process;$p.StartInfo=$psi
+  if(-not $Quiet){Write-Event 'INFO' "$Label gestartet."}
+  if(-not $p.Start()){throw "$Label konnte nicht gestartet werden."}
+  $outTask = $p.StandardOutput.ReadToEndAsync()
+  $errTask = $p.StandardError.ReadToEndAsync()
+  if ($InputText) { $p.StandardInput.Write($InputText) }
+  $p.StandardInput.Close()
+  $sw=[Diagnostics.Stopwatch]::StartNew()
+  while(-not $p.WaitForExit(500)){
+    if(Test-Path -LiteralPath $CancelFile){Stop-Tree $p.Id;throw [System.OperationCanceledException]::new('Das Update wurde durch den Benutzer abgebrochen.')}
+    if($sw.Elapsed.TotalSeconds -gt $TimeoutSeconds){Stop-Tree $p.Id;throw "$Label hat das Zeitlimit von $TimeoutSeconds Sekunden überschritten."}
+    if(-not $Quiet -and ((Get-Date)-$script:LastHeartbeat).TotalSeconds -ge 8){Write-Event 'INFO' ("$Label läuft seit {0:mm\:ss}." -f $sw.Elapsed);$script:LastHeartbeat=Get-Date}
+  }
+  $p.WaitForExit();$stdout=[string]$outTask.Result;$stderr=[string]$errTask.Result;$code=$p.ExitCode;$p.Dispose()
+  if(-not $Quiet){
+    foreach($line in @($stdout -split "`r?`n")){if($line.Trim()){Write-Event 'OUTPUT' $line.Trim()}}
+    foreach($line in @($stderr -split "`r?`n")){
+      $clean=$line.Trim()
+      if(-not $clean){continue}
+      if($code -ne 0){Write-Event 'ERROR' $clean}
+      elseif($clean -match '(?i)\b(warn|warning|deprecated)\b'){Write-Event 'WARN' $clean}
+      else{Write-Event 'OUTPUT' $clean}
+    }
+  }
+  if(-not $AllowFailure -and $code -ne 0){$summary=Get-ProcessFailureSummary $stderr $stdout;throw "$Label ist mit Exit-Code $code fehlgeschlagen.`n$summary"}
+  return [pscustomobject]@{Code=$code;Output=$stdout;Error=$stderr}
+}
+function Resolve-Tool([string]$Name,[string[]]$Candidates=@()){
+  if($script:Tools.ContainsKey($Name) -and (Test-Path -LiteralPath $script:Tools[$Name])){return $script:Tools[$Name]}
+  foreach($c in @($Candidates)){if($c -and (Test-Path -LiteralPath $c -PathType Leaf)){$script:Tools[$Name]=(Resolve-Path $c).Path;return $script:Tools[$Name]}}
+  $cmd=Get-Command $Name -CommandType Application -ErrorAction SilentlyContinue|Select-Object -First 1;if($cmd -and $cmd.Source -and (Test-Path $cmd.Source)){$script:Tools[$Name]=$cmd.Source;return $cmd.Source};return $null
+}
+function Get-GitPath{return Resolve-Tool 'git.exe' @("$env:ProgramFiles\Git\cmd\git.exe","$env:LOCALAPPDATA\Programs\Git\cmd\git.exe")}
+function Get-NodePath{return Resolve-Tool 'node.exe' @("$env:ProgramFiles\nodejs\node.exe","$env:LOCALAPPDATA\Programs\nodejs\node.exe")}
+function Get-NpmPath{return Resolve-Tool 'npm.cmd' @("$env:ProgramFiles\nodejs\npm.cmd","$env:LOCALAPPDATA\Programs\nodejs\npm.cmd")}
+function Invoke-WebJson([string]$Uri){for($i=1;$i-le3;$i++){try{return Invoke-RestMethod -Uri $Uri -Headers @{'User-Agent'="Vendoo-Updater/$UpdaterVersion";'Accept'='application/vnd.github+json'} -TimeoutSec 30}catch{if($i-eq3){throw};Start-Sleep -Seconds (2*$i)}}}
+function Download-File([string]$Uri,[string]$Destination,[string]$Label){
+  for($attempt=1;$attempt-le3;$attempt++){try{
+    $handler = New-Object Net.Http.HttpClientHandler
+    $client = [Net.Http.HttpClient]::new($handler)
+    $client.Timeout=[TimeSpan]::FromMinutes(5);$client.DefaultRequestHeaders.UserAgent.ParseAdd("Vendoo-Updater/$UpdaterVersion")
+    $resp = $client.GetAsync($Uri,[Net.Http.HttpCompletionOption]::ResponseHeadersRead).Result
+    $null = $resp.EnsureSuccessStatusCode()
+    $total=$resp.Content.Headers.ContentLength;$input=$resp.Content.ReadAsStreamAsync().Result;$output=[IO.File]::Open($Destination,[IO.FileMode]::Create,[IO.FileAccess]::Write,[IO.FileShare]::None)
+    try{
+      $buf=New-Object byte[] 65536;$readTotal=0L;$lastReported=-10
+      while(($read=$input.Read($buf,0,$buf.Length))-gt0){
+        Assert-NotCancelled;$output.Write($buf,0,$read);$readTotal+=$read
+        if($total -and $total -gt 0){
+          $percent=[Math]::Min(100,[int][Math]::Floor(($readTotal*100.0)/$total))
+          if($percent -ge ($lastReported+10) -or $readTotal -ge $total){
+            $bucket=[Math]::Min(100,[int]([Math]::Floor($percent/10)*10))
+            if($bucket -gt $lastReported){
+              $lastReported=$bucket
+              Write-Event 'INFO' ("${Label}: {0}% ({1:N1} von {2:N1} MB)" -f $bucket,($readTotal/1048576),($total/1048576))
+              Write-State 18 'GitHub CLI' ("${Label} wird geladen: {0}%" -f $bucket)
+            }
+          }
+        }
+      }
+    }finally{$output.Dispose();$input.Dispose();$resp.Dispose();$client.Dispose();$handler.Dispose()}
+    if(-not $total){Write-Event 'INFO' "${Label}: Download abgeschlossen."}
+    return
+  }catch{if($attempt-eq3){throw "$Label konnte nach drei Versuchen nicht geladen werden: $($_.Exception.Message)"};Write-Event 'WARN' "${Label}: Downloadversuch $attempt fehlgeschlagen; erneuter Versuch.";Start-Sleep -Seconds (3*$attempt)}}
+}
+
+function Ensure-GitHubCli{
+  $managed=Join-Path $ToolsRoot 'github-cli\current\bin\gh.exe';if(Test-Path $managed){$test=Invoke-External $managed @('--version') -TimeoutSeconds 20 -AllowFailure -Label 'GitHub CLI prüfen';if($test.Code-eq0){$script:Tools['gh.exe']=$managed;return $managed}}
+  Write-State 18 'GitHub CLI' 'Die offizielle portable GitHub CLI wird sicher geladen und per SHA-256 geprüft.'
+  $release=Invoke-WebJson 'https://api.github.com/repos/cli/cli/releases/latest';$arch=if([Environment]::Is64BitOperatingSystem){'amd64'}else{'386'};$asset=@($release.assets|Where-Object{$_.name -like "gh_*_windows_$arch.zip"}|Select-Object -First 1);$checks=@($release.assets|Where-Object{$_.name -like '*_checksums.txt'}|Select-Object -First 1)
+  if(-not $asset -or -not $checks){throw 'Die offiziellen GitHub-CLI-Release-Dateien konnten nicht ermittelt werden.'}
+  $tmp=Join-Path $env:TEMP "vendoo-gh-$PID";New-Item -ItemType Directory -Path $tmp -Force|Out-Null;$zip=Join-Path $tmp $asset.name;$checkFile=Join-Path $tmp $checks.name;$extract=Join-Path $tmp 'extract'
+  try{Download-File $asset.browser_download_url $zip 'GitHub CLI';Download-File $checks.browser_download_url $checkFile 'Prüfsummen';$line=Get-Content $checkFile|Where-Object{$_ -match [regex]::Escape($asset.name)}|Select-Object -First 1;if(-not $line){throw 'Für das GitHub-CLI-Archiv wurde keine offizielle Prüfsumme gefunden.'};$expected=($line -split '\s+')[0].ToLowerInvariant();$actual=(Get-FileHash $zip -Algorithm SHA256).Hash.ToLowerInvariant();if($actual-ne$expected){throw 'SHA-256-Prüfung der GitHub CLI fehlgeschlagen.'};New-Item -ItemType Directory -Path $extract -Force|Out-Null;Expand-Archive $zip $extract -Force;$source=Get-ChildItem $extract -Filter gh.exe -File -Recurse|Select-Object -First 1;if(-not $source){throw 'Das geprüfte GitHub-CLI-Archiv enthält keine gh.exe.'};$targetRoot=Split-Path -Parent (Split-Path -Parent $managed);if(Test-Path $targetRoot){Remove-Item $targetRoot -Recurse -Force};New-Item -ItemType Directory -Path (Split-Path -Parent $managed) -Force|Out-Null;Copy-Item $source.FullName $managed -Force;$test=Invoke-External $managed @('--version') -TimeoutSeconds 20 -Label 'GitHub CLI validieren';$script:Tools['gh.exe']=$managed;Write-Event 'OK' "GitHub CLI $($release.tag_name) wurde geprüft und lokal bereitgestellt.";return $managed}finally{Remove-Item $tmp -Recurse -Force -ErrorAction SilentlyContinue}
+}
+function Test-GitHubAuthentication([string]$GhPath){
+  $status=Invoke-External $GhPath @('auth','status','--hostname','github.com') -TimeoutSeconds 20 -AllowFailure -Label 'GitHub-Anmeldung prüfen' -Quiet
+  return ($status.Code -eq 0)
+}
+function Invoke-VisibleGitHubLogin([string]$GhPath){
+  $runtimeDirectory=Split-Path -Parent $StatusFile
+  $loginScript=Join-Path $runtimeDirectory 'github-login.cmd'
+  $escapedGh=$GhPath.Replace('"','""')
+  $lines=@(
+    '@echo off',
+    'chcp 65001 >nul',
+    'title Vendoo - GitHub Anmeldung',
+    'echo ============================================================',
+    'echo Vendoo - Sichere GitHub Anmeldung',
+    'echo ============================================================',
+    'echo.',
+    'echo Der einmalige GitHub-Code wird angezeigt und in die',
+    'echo Zwischenablage kopiert. Folge danach dem Browserdialog.',
+    'echo Dieses Fenster schliesst sich nach erfolgreicher Anmeldung.',
+    'echo.',
+    ('"{0}" auth login --hostname github.com --git-protocol https --web --clipboard' -f $escapedGh),
+    'set "VENDOO_GH_LOGIN_EXIT=%ERRORLEVEL%"',
+    'echo.',
+    'if "%VENDOO_GH_LOGIN_EXIT%"=="0" (',
+    '  echo GitHub-Anmeldung erfolgreich. Vendoo faehrt automatisch fort.',
+    ') else (',
+    '  echo GitHub-Anmeldung wurde nicht abgeschlossen. Fehlercode: %VENDOO_GH_LOGIN_EXIT%',
+    '  echo Das Fenster kann geschlossen werden; der Vendoo Updater bleibt geoeffnet.',
+    '  pause',
+    ')',
+    'exit /b %VENDOO_GH_LOGIN_EXIT%'
+  )
+  [IO.File]::WriteAllLines($loginScript,$lines,(New-Object Text.UTF8Encoding($false)))
+  Write-State 26 'GitHub-Anmeldung' 'Im geöffneten Anmeldefenster den Gerätecode bestätigen und den Browserdialog abschließen. Danach geht es automatisch weiter.' 'waiting'
+  Write-Event 'WAIT' 'Sichtbares GitHub-Anmeldefenster wird geöffnet.'
+  try{
+    $loginProcess=Start-Process -FilePath 'cmd.exe' -ArgumentList @('/d','/c',('"{0}"' -f $loginScript)) -WorkingDirectory $runtimeDirectory -WindowStyle Normal -PassThru
+  }catch{
+    throw "Das sichtbare GitHub-Anmeldefenster konnte nicht gestartet werden: $($_.Exception.Message)"
+  }
+  $deadline=(Get-Date).AddMinutes(10);$lastStatus=Get-Date
+  while((Get-Date)-lt$deadline){
+    Assert-NotCancelled
+    if(Test-GitHubAuthentication $GhPath){
+      Write-Event 'OK' 'GitHub-Anmeldung wurde bestätigt.'
+      try{if(-not $loginProcess.HasExited){$loginProcess.CloseMainWindow()|Out-Null}}catch{}
+      return
+    }
+    if($loginProcess.HasExited){
+      Start-Sleep -Seconds 1
+      if(Test-GitHubAuthentication $GhPath){Write-Event 'OK' 'GitHub-Anmeldung wurde bestätigt.';return}
+      throw "Die GitHub-Anmeldung wurde nicht abgeschlossen. Das Anmeldefenster endete mit Exit-Code $($loginProcess.ExitCode)."
+    }
+    if(((Get-Date)-$lastStatus).TotalSeconds -ge 15){
+      Write-Event 'INFO' 'GitHub-Anmeldung wartet auf Abschluss im Browser.'
+      $lastStatus=Get-Date
+    }
+    Start-Sleep -Seconds 2
+  }
+  try{if(-not $loginProcess.HasExited){Stop-Tree $loginProcess.Id}}catch{}
+  throw 'Die GitHub-Anmeldung wurde nicht innerhalb von zehn Minuten abgeschlossen.'
+}
+function Check-ProductionVersion{try{$r=Invoke-RestMethod -Uri "$PublicBaseUrl/readyz?updater=$Stamp" -TimeoutSec 20 -Headers @{'Cache-Control'='no-cache';'User-Agent'="Vendoo-Updater/$UpdaterVersion"};return [pscustomobject]@{Ready=[bool]$r.ok;Version=[string]$r.version}}catch{return [pscustomobject]@{Ready=$false;Version='unbekannt'}}}
+function Assert-Package{foreach($f in @('package.json','package-lock.json','update-manifest.json','release-manifest.json','db\schema.sql','tools\apply-release-manifest.mjs')){if(-not(Test-Path(Join-Path $PackageRoot $f))){throw "Paketdatei fehlt: $f"}};$p=Get-Content (Join-Path $PackageRoot 'package.json') -Raw -Encoding UTF8|ConvertFrom-Json;$m=Get-Content (Join-Path $PackageRoot 'update-manifest.json') -Raw -Encoding UTF8|ConvertFrom-Json;$r=Get-Content (Join-Path $PackageRoot 'release-manifest.json') -Raw -Encoding UTF8|ConvertFrom-Json;if([string]$p.version-ne$TargetVersion -or [string]$m.version-ne$TargetVersion -or [string]$r.version-ne$TargetVersion){throw "Paket-, Update- und Release-Manifest-Version müssen exakt $TargetVersion sein."};if([string]$r.updaterVersion-ne$UpdaterVersion){throw "Release-Manifest gehört zu Updater $($r.updaterVersion), erwartet wird $UpdaterVersion."};if([string]$r.mode-ne'overlay-with-explicit-removals'){throw "Unzulässiger Release-Modus: $($r.mode)"}}
+
+try{
+  Write-Event 'INFO' "Vendoo Production Updater $UpdaterVersion gestartet. Zielversion $TargetVersion."
+  $session=Load-Session
+  Set-Step 'package' 'active';Write-State 3 'Paketprüfung' 'Version, Manifest und sicherheitsrelevante Paketdateien werden geprüft.';Assert-Package;if($SelfTestFailAt-eq'package'){throw 'Simulierter Paketfehler.'};Complete-Step 'package';Write-Event 'OK' 'Paketprüfung erfolgreich.'
+  Set-Step 'tools' 'active';Write-State 9 'Systemprüfung' 'Git, Node.js und npm werden mit festen Zeitlimits geprüft.'
+  $git=Get-GitPath;if(-not$git){throw 'Git für Windows wurde nicht gefunden. Bitte Git für Windows installieren; danach kann derselbe Updater erneut gestartet werden.'};$node=Get-NodePath;$npm=Get-NpmPath;if(-not$node -or -not$npm){throw 'Node.js 22 LTS oder npm wurde nicht gefunden.'};$gv=Invoke-External $git @('--version') -TimeoutSeconds 20 -Label 'Git prüfen';$nv=Invoke-External $node @('--version') -TimeoutSeconds 20 -Label 'Node.js prüfen';if($nv.Output -notmatch 'v?(\d+)\.' -or [int]$Matches[1]-lt22){throw "Node.js 22 oder neuer ist erforderlich. Gefunden: $($nv.Output.Trim())"};$gh=Ensure-GitHubCli;Complete-Step 'tools';Write-Event 'OK' 'Systemprüfung erfolgreich.'
+  Set-Step 'github' 'active';Write-State 24 'GitHub-Verbindung' 'Anmeldung und Repository-Berechtigungen werden geprüft.'
+  if(-not (Test-GitHubAuthentication $gh)){Invoke-VisibleGitHubLogin $gh}
+  Invoke-External $gh @('auth','setup-git','--hostname','github.com') -TimeoutSeconds 60 -Label 'Git-Anmeldung konfigurieren'|Out-Null
+  $repo=Invoke-External $gh @('repo','view',$Repository,'--json','viewerPermission,defaultBranchRef,isPrivate') -TimeoutSeconds 60 -Label 'Repository-Zugriff prüfen';$repoObj=$repo.Output|ConvertFrom-Json;if([string]$repoObj.viewerPermission -notin @('ADMIN','MAINTAIN','WRITE')){throw "Für $Repository fehlt Schreibzugriff. GitHub meldet $($repoObj.viewerPermission)."};Complete-Step 'github';Write-Event 'OK' "GitHub-Zugriff bestätigt: $($repoObj.viewerPermission)."
+  Set-Step 'production' 'active';Write-State 32 'Produktionsvorbereitung' 'Aktueller Produktionsstand und Coolify Auto Deploy werden geprüft.'
+  $prod=Check-ProductionVersion;Write-Event 'INFO' "Produktion meldet ready=$($prod.Ready), version=$($prod.Version)."
+  if(-not$SkipProductionDeploy){Write-Event 'OK' 'Kein Coolify-Webhook erforderlich: Nach dem Merge wird das bestehende Coolify Auto Deploy der GitHub-Verknüpfung verwendet.'}
+  Complete-Step 'production'
+  if($SelfTest){foreach($id in @('workspace','tests','pullrequest','merge','deploy','verify')){Set-Step $id 'active';Write-State 50 "Selbsttest: $id" 'Darstellung, Statuswechsel und Protokoll werden simuliert.';Start-Sleep -Milliseconds 350;Complete-Step $id};Write-State 100 'Selbsttest erfolgreich' 'Die Updater-Oberfläche und der Worker-Vertrag funktionieren.' 'success';return}
+
+  if([bool]$session.merged){Write-Event 'INFO' 'Gespeicherter Wiederaufnahmepunkt: main wurde bereits aktualisiert.';foreach($id in @('workspace','tests','pullrequest','merge')){Complete-Step $id}}
+  else {
+    Set-Step 'workspace' 'active'
+    Write-State 40 'Arbeitskopie' 'main wird isoliert geklont; das vollständige Release-Manifest wird ohne Leeren der Baseline angewendet.'
+    if (Test-Path -LiteralPath $WorkRoot) { Remove-Item -LiteralPath $WorkRoot -Recurse -Force }
+    New-Item -ItemType Directory -Path $WorkRoot -Force | Out-Null
+    Invoke-External $gh @('repo','clone',$Repository,$CloneDir,'--','--branch',$BaseBranch,'--single-branch') -WorkingDirectory $WorkRoot -TimeoutSeconds 300 -Label 'Repository klonen' | Out-Null
+    Invoke-External $git @('switch','-c',$Branch) -WorkingDirectory $CloneDir -TimeoutSeconds 60 -Label 'Release-Branch erstellen' | Out-Null
+    Invoke-External $node @((Join-Path $PackageRoot 'tools\apply-release-manifest.mjs'),$PackageRoot,$CloneDir) -TimeoutSeconds 300 -Label 'SHA-256-geprüftes Release-Manifest anwenden' | Out-Null
+    Complete-Step 'workspace'
+
+    Set-Step 'tests' 'active'
+    Write-State 52 'Abnahmetests' 'Abhängigkeiten werden reproduzierbar installiert; danach läuft der vollständige verify:all-Vertrag.'
+    Invoke-External $npm @('ci','--no-audit','--no-fund') -WorkingDirectory $CloneDir -TimeoutSeconds 1200 -Label 'npm ci' | Out-Null
+    Write-State 61 'Abnahmetests' 'Alle Vendoo-Sicherheits-, Datenbank-, Modul- und Release-Gates laufen.'
+    Invoke-External $npm @('run','verify:all') -WorkingDirectory $CloneDir -TimeoutSeconds 3600 -Label 'npm run verify:all' | Out-Null
+    Complete-Step 'tests'
+    Write-Event 'OK' 'Alle lokalen Abnahmetests sind grün.'
+
+    Set-Step 'pullrequest' 'active'
+    Write-State 70 'Pull Request' 'Der geprüfte Stand wird committed und in einen kontrollierten Pull Request übertragen.'
+    Invoke-External $git @('config','user.name','Vendoo Production Updater') -WorkingDirectory $CloneDir -Label 'Git-Name setzen' | Out-Null
+    $uid = (Invoke-External $gh @('api','user','--jq','.id') -Label 'GitHub-Benutzer-ID').Output.Trim()
+    $ulogin = (Invoke-External $gh @('api','user','--jq','.login') -Label 'GitHub-Benutzername').Output.Trim()
+    Invoke-External $git @('config','user.email',"$uid+$ulogin@users.noreply.github.com") -WorkingDirectory $CloneDir -Label 'Git-E-Mail setzen' | Out-Null
+    Invoke-External $git @('add','--all') -WorkingDirectory $CloneDir -Label 'Änderungen vormerken' | Out-Null
+    $diff = Invoke-External $git @('diff','--cached','--quiet') -WorkingDirectory $CloneDir -AllowFailure -Label 'Änderungen prüfen'
+
+    if ($diff.Code -eq 0) {
+      Write-Event 'INFO' 'main enthält bereits denselben Source-Stand.'
+      $session.merged = $true
+      $session.stage = 'merged'
+      Save-Session $session
+      Complete-Step 'pullrequest'
+      Complete-Step 'merge'
+    }
+    elseif ($diff.Code -eq 1) {
+      Invoke-External $git @('commit','-m',"release: Vendoo $TargetVersion production update") -WorkingDirectory $CloneDir -TimeoutSeconds 120 -Label 'Release committen' | Out-Null
+      Invoke-External $git @('push','--force','--set-upstream','origin',$Branch) -WorkingDirectory $CloneDir -TimeoutSeconds 300 -Label 'Release-Branch pushen' | Out-Null
+      $existing = Invoke-External $gh @('pr','list','--repo',$Repository,'--head',$Branch,'--state','open','--json','url','--jq','.[0].url') -AllowFailure -Label 'Vorhandenen Pull Request suchen'
+      $prUrl = $existing.Output.Trim()
+      if (-not $prUrl) {
+        $body = Join-Path $WorkRoot 'pr-body.md'
+        $bodyText = @"
+## Vendoo $TargetVersion – Production Update
+
+Erstellt durch Vendoo Production Updater $UpdaterVersion.
+
+- vollständiges `npm run verify:all` erfolgreich
+- keine Datenbanken, Uploads, Secrets oder `/app/data`-Inhalte
+- Coolify Auto Deploy mit exakter Versionsprüfung
+"@
+        $bodyText | Set-Content -LiteralPath $body -Encoding UTF8
+        $prUrl = (Invoke-External $gh @('pr','create','--repo',$Repository,'--base',$BaseBranch,'--head',$Branch,'--title',"Vendoo $TargetVersion – Production Update",'--body-file',$body) -WorkingDirectory $CloneDir -TimeoutSeconds 180 -Label 'Pull Request erstellen').Output.Trim()
+      }
+      $session.prUrl = $prUrl
+      $session.stage = 'pr'
+      Save-Session $session
+      Complete-Step 'pullrequest'
+      Write-Event 'OK' "Pull Request: $prUrl"
+
+      Set-Step 'merge' 'active'
+      Write-State 78 'GitHub-Prüfungen' 'Alle gemeldeten GitHub-Checks werden abgewartet.'
+      $rollup = Invoke-External $gh @('pr','view',$prUrl,'--repo',$Repository,'--json','statusCheckRollup') -Label 'GitHub-Checks ermitteln'
+      $rollupObj = $rollup.Output | ConvertFrom-Json
+      if (@($rollupObj.statusCheckRollup).Count -gt 0) {
+        Invoke-External $gh @('pr','checks',$prUrl,'--repo',$Repository,'--watch','--fail-fast') -WorkingDirectory $CloneDir -TimeoutSeconds 2700 -Label 'GitHub-Checks abwarten' | Out-Null
+      }
+      Write-State 82 'Merge' 'Der vollständig geprüfte Pull Request wird per Squash nach main übernommen.'
+      Invoke-External $gh @('pr','merge',$prUrl,'--repo',$Repository,'--squash','--delete-branch','--subject',"Vendoo $TargetVersion – Production Update") -WorkingDirectory $CloneDir -TimeoutSeconds 300 -Label 'Pull Request mergen' | Out-Null
+      $session.merged = $true
+      $session.stage = 'merged'
+      Save-Session $session
+      Complete-Step 'merge'
+      Write-Event 'OK' 'main wurde kontrolliert aktualisiert.'
+    }
+    else {
+      throw "Git-Diff-Prüfung lieferte unerwarteten Exit-Code $($diff.Code)."
+    }
+  }
+
+  if($SkipProductionDeploy){foreach($id in @('deploy','verify')){foreach($s in $script:Steps){if($s.id-eq$id){$s.state='skipped'}}};Write-State 100 'Source aktualisiert' 'GitHub wurde aktualisiert; das Produktionsdeployment wurde auf Wunsch übersprungen.' 'success';return}
+  Set-Step 'deploy' 'active';Write-State 87 'Coolify Auto Deploy' 'main wurde aktualisiert. Coolify übernimmt das Deployment über die bestehende GitHub-Verknüpfung.'
+  $session.stage='deploy';Save-Session $session;Write-Event 'INFO' 'Warte auf Coolify Auto Deploy. Es wird kein Webhook und kein GitHub Secret benötigt.'
+  $deadline=(Get-Date).AddMinutes(15);$last='';$nextLog=Get-Date
+  do{
+    Assert-NotCancelled
+    $prod=Check-ProductionVersion
+    $last="ready=$($prod.Ready), version=$($prod.Version)"
+    if((Get-Date)-ge$nextLog){Write-Event 'INFO' "Coolify Auto Deploy: $last";$nextLog=(Get-Date).AddSeconds(30)}
+    if($prod.Ready -and $prod.Version-eq$TargetVersion){break}
+    Start-Sleep -Seconds 10
+  }while((Get-Date)-lt$deadline)
+  if(-not($prod.Ready -and $prod.Version-eq$TargetVersion)){throw "Coolify hat die Zielversion innerhalb von 15 Minuten nicht bereitgestellt. Letzter Stand: $last. In Coolify bei der Vendoo-Anwendung unter Advanced prüfen, ob Auto Deploy aktiviert ist."}
+  Complete-Step 'deploy'
+  Set-Step 'verify' 'active';Write-State 97 'Produktionsprüfung' 'Die öffentlich erreichbare Readiness und die exakte Zielversion werden abschließend bestätigt.'
+  $prod=Check-ProductionVersion
+  if(-not($prod.Ready -and $prod.Version-eq$TargetVersion)){throw "Die abschließende Produktionsprüfung ist fehlgeschlagen. Stand: ready=$($prod.Ready), version=$($prod.Version)"}
+  Complete-Step 'verify';$session.stage='complete';Save-Session $session;Write-State 100 'Update erfolgreich' "Vendoo $TargetVersion läuft geprüft in Produktion." 'success';Write-Event 'OK' "Vendoo $TargetVersion wurde vollständig aktualisiert.";return
+}catch [System.OperationCanceledException]{Fail-Step;Write-State 100 'Update abgebrochen' $_.Exception.Message 'cancelled' $_.Exception.Message 'Der gespeicherte Wiederaufnahmepunkt bleibt erhalten. Mit „Erneut versuchen“ kann der sichere Ablauf fortgesetzt werden.';Write-Event 'WARN' $_.Exception.Message;return
+}catch{Fail-Step;$msg=$_.Exception.Message;$remediation=if ($script:CurrentStep -eq 'tools'){'Systemvoraussetzung korrigieren und „Erneut versuchen“ wählen. Es wurden noch keine GitHub- oder Produktionsänderungen vorgenommen.'}elseif ($script:CurrentStep -in @('deploy','verify')){'main kann bereits aktualisiert sein. „Erneut versuchen“ setzt beim Deployment beziehungsweise der Produktionsprüfung fort.'}else{'„Erneut versuchen“ verwendet den gespeicherten Stand. Vor einem erfolgreichen Merge bleibt main unverändert.'};Write-State 100 'Update sicher gestoppt' $msg 'failed' $msg $remediation;Write-Event 'ERROR' $msg;return
+}finally{if(Test-Path $InputFile){Remove-Item $InputFile -Force -ErrorAction SilentlyContinue}}
diff --git a/server.mjs b/server.mjs
index 32db770..3639794 100644
--- a/server.mjs
+++ b/server.mjs
@@ -153,7 +153,12 @@ configureAiModule({
   stopBatchJobs: stopImageBatchJobLoop,
 });
 configureFluxStudioModule({ start: startFluxPromptJobLoop, stop: stopFluxPromptJobLoop });
-configureDeploymentsModule({ createBackup, checkForUpdates });
+configureDeploymentsModule({
+  createBackup,
+  verifyStoredBackup,
+  checkForUpdates,
+  getPlatformSnapshot: () => platformKernel.snapshot(),
+});
 configurePublishingModule({
   async start() {
     const migration = migrateLegacyEbayQueue();
@@ -609,7 +614,8 @@ function moduleOwnerForApiPath(pathname) {
   if (path.startsWith('/publishing') || path.startsWith('/publish') || path.startsWith('/ebay') || path.startsWith('/etsy') || path.startsWith('/extension/publishing') || path.startsWith('/schedule')) return 'vendoo.publishing';
   if (path.startsWith('/flux') || path.startsWith('/local-image')) return 'vendoo.flux-studio';
   if (path.startsWith('/quality')) return 'vendoo.quality';
-  if (path.startsWith('/ai-model') || path.startsWith('/image-batch') || path === '/generate' || path.startsWith('/providers') || path.startsWith('/prompt-lab') || /^\/listings\/[^/]+\/ai-model/.test(path)) return 'vendoo.ai';
+  if (path.startsWith('/ai-model-photos') || /^\/listings\/[^/]+\/ai-model/.test(path)) return 'vendoo.product-image-tools';
+  if (path.startsWith('/image-batch') || path === '/generate' || path.startsWith('/providers') || path.startsWith('/prompt-lab')) return 'vendoo.ai';
   return null;
 }
 
@@ -646,6 +652,25 @@ platformKernel.routes.register(app, {
   handler: async (_req, res) => res.json({ modules: platformKernel.modules.snapshot() }),
 });
 
+platformKernel.routes.register(app, {
+  id: 'platform.modules.navigation',
+  method: 'GET',
+  path: '/api/modules/navigation',
+  owner: 'vendoo.system',
+  policy: 'platform.authenticated',
+  audit: 'platform.modules.navigation',
+  rateLimit: 'default',
+  csrf: false,
+  stability: 'stable',
+  handler: async (_req, res) => res.json({
+    modules: platformKernel.modules.snapshot().map(module => ({
+      id: module.id,
+      enabled: Boolean(module.enabled && module.state === 'running'),
+      state: module.state,
+    })),
+  }),
+});
+
 platformKernel.routes.register(app, {
   id: 'themes.contract.read',
   method: 'GET',
diff --git a/setup-gui.ps1 b/setup-gui.ps1
index 7ab272d..ada7451 100644
--- a/setup-gui.ps1
+++ b/setup-gui.ps1
@@ -1,4 +1,4 @@
-# Vendoo 1.41.2 – grafischer Zero-Edit-Installationsassistent
+# Vendoo 1.42.0 – grafischer Zero-Edit-Installationsassistent
 $ErrorActionPreference = 'Stop'
 $VendooDir = Split-Path -Parent $MyInvocation.MyCommand.Path
 $SetupScript = Join-Path $VendooDir 'setup.ps1'
@@ -90,7 +90,7 @@ function Set-Configuration([string]$Target, [string]$Access, [int]$Port, [string
 }
 
 $form = New-Object System.Windows.Forms.Form
-$form.Text = 'Vendoo 1.41.2 – Installation'
+$form.Text = 'Vendoo 1.42.0 – Installation'
 $form.StartPosition = 'CenterScreen'
 $form.Size = New-Object System.Drawing.Size(720, 620)
 $form.MinimumSize = New-Object System.Drawing.Size(720, 620)
diff --git a/setup.ps1 b/setup.ps1
index bd70ad3..9712b7b 100644
--- a/setup.ps1
+++ b/setup.ps1
@@ -1,6 +1,6 @@
 $ErrorActionPreference = 'Stop'
 $VendooDir = Split-Path -Parent $MyInvocation.MyCommand.Path
-$Version = '1.41.2'
+$Version = '1.42.0'
 $Port = 8124
 $InstallModeFile = Join-Path $VendooDir '.vendoo-install-mode'
 
@@ -831,7 +831,7 @@ function Start-VendooLocal {
     Write-Host ''
     Write-Step '...' 'Starte Vendoo-Server...'
     Push-Location $VendooDir
-    Start-Process "http://localhost:$Port/?build=1.41.2"
+    Start-Process "http://localhost:$Port/?build=1.42.0"
     & node bootstrap.mjs
     Pop-Location
 }
diff --git a/setup.sh b/setup.sh
index 8fd2877..80beb80 100644
--- a/setup.sh
+++ b/setup.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env sh
 set -eu
 
-APP_VERSION="1.41.2"
+APP_VERSION="1.42.0"
 ROOT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 MODE_FILE="$ROOT_DIR/.vendoo-install-mode"
 ENV_FILE="$ROOT_DIR/.env"
diff --git a/tools/apply-release-manifest.mjs b/tools/apply-release-manifest.mjs
new file mode 100644
index 0000000..490211b
--- /dev/null
+++ b/tools/apply-release-manifest.mjs
@@ -0,0 +1,19 @@
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { applyReleaseManifest } from './release-manifest-lib.mjs';
+
+const invokedPath = process.argv[1] ? resolve(process.argv[1]) : '';
+if (invokedPath === fileURLToPath(import.meta.url)) {
+  const [, , source, destination] = process.argv;
+  if (!source || !destination) {
+    console.error('Aufruf: node tools/apply-release-manifest.mjs <Release-Paket> <geklontes Zielrepository>');
+    process.exit(64);
+  }
+  try {
+    const result = applyReleaseManifest(source, destination);
+    console.log(`Release-Manifest angewendet: ${result.copied} Payload-Dateien und ${result.controlCopied} Steuerdatei geprüft und kopiert; ${result.removed} explizite Löschungen.`);
+  } catch (error) {
+    console.error(`[FEHLER] Release-Manifest konnte nicht angewendet werden: ${error.message}`);
+    process.exit(1);
+  }
+}
diff --git a/tools/build-release.mjs b/tools/build-release.mjs
index 6efc321..34eb597 100644
--- a/tools/build-release.mjs
+++ b/tools/build-release.mjs
@@ -1,43 +1,46 @@
-import { cpSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import {
+  copyFileSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from 'node:fs';
 import { createHash } from 'node:crypto';
 import { dirname, join, relative, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { shouldSkipStagingEntry } from './prepare-git-staging.mjs';
+import { generateReleaseManifest } from './generate-release-manifest.mjs';
+import { MANIFEST_FILE, readAndValidateManifest } from './release-manifest-lib.mjs';
 
 const root = dirname(dirname(fileURLToPath(import.meta.url)));
 const pkg = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
-const version = pkg.version;
 const outputRoot = join(root, 'release-output');
-const packageName = `Vendoo_${version}`;
+const packageName = `Vendoo_${pkg.version}`;
 const stage = join(outputRoot, packageName);
 const normalize = value => value.split(sep).join('/');
 
+// The committed manifest is the only release payload contract. Regenerate it first so
+// stale hashes or accidentally omitted source files make the release fail immediately.
+generateReleaseManifest(root);
+const manifest = readAndValidateManifest(root);
+
 rmSync(outputRoot, { recursive: true, force: true });
 mkdirSync(stage, { recursive: true });
-
-function copyTree(src, dest, rel = '') {
-  for (const name of readdirSync(src)) {
-    const source = join(src, name);
-    const childRel = rel ? join(rel, name) : name;
-    const stat = lstatSync(source);
-    if (shouldSkipStagingEntry(childRel, stat)) continue;
-    const target = join(dest, name);
-    if (stat.isDirectory()) {
-      mkdirSync(target, { recursive: true });
-      copyTree(source, target, childRel);
-    } else if (stat.isFile()) {
-      mkdirSync(dirname(target), { recursive: true });
-      cpSync(source, target);
-    }
-  }
+for (const entry of manifest.files) {
+  const source = join(root, entry.path);
+  const target = join(stage, entry.path);
+  mkdirSync(dirname(target), { recursive: true });
+  copyFileSync(source, target);
+  if (statSync(target).size !== entry.size) throw new Error(`Release-Kopie hat falsche Größe: ${entry.path}`);
 }
-copyTree(root, stage);
+copyFileSync(join(root, MANIFEST_FILE), join(stage, MANIFEST_FILE));
 
 const checksums = [];
 function hashTree(dir) {
-  for (const name of readdirSync(dir).sort((a, b) => a.localeCompare(b))) {
+  for (const name of readdirSync(dir).sort((a, b) => a.localeCompare(b, 'en'))) {
     const abs = join(dir, name);
-    const stat = lstatSync(abs);
+    const stat = statSync(abs);
     if (stat.isDirectory()) hashTree(abs);
     else {
       const rel = normalize(relative(stage, abs));
@@ -48,7 +51,7 @@ function hashTree(dir) {
   }
 }
 hashTree(stage);
-writeFileSync(join(stage, 'FILE_CHECKSUMS_SHA256.txt'), checksums.join('\n') + '\n', 'utf8');
-writeFileSync(join(outputRoot, 'RELEASE_NAME.txt'), packageName + '\n', 'utf8');
-console.log(`Release-Staging erstellt: ${stage}`);
-console.log(`${checksums.length} Dateien mit SHA-256 erfasst.`);
+writeFileSync(join(stage, 'FILE_CHECKSUMS_SHA256.txt'), `${checksums.join('\n')}\n`, 'utf8');
+writeFileSync(join(outputRoot, 'RELEASE_NAME.txt'), `${packageName}\n`, 'utf8');
+console.log(`Manifestbasiertes Release-Staging erstellt: ${stage}`);
+console.log(`${manifest.files.length} Payload-Dateien und ${checksums.length} Paketdateien mit SHA-256 erfasst.`);
diff --git a/tools/generate-release-manifest.mjs b/tools/generate-release-manifest.mjs
new file mode 100644
index 0000000..c89d9d4
--- /dev/null
+++ b/tools/generate-release-manifest.mjs
@@ -0,0 +1,29 @@
+import { readFileSync, writeFileSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { buildReleaseManifest, MANIFEST_FILE } from './release-manifest-lib.mjs';
+
+export function generateReleaseManifest(root) {
+  const base = resolve(root);
+  const pkg = JSON.parse(readFileSync(join(base, 'package.json'), 'utf8'));
+  const update = JSON.parse(readFileSync(join(base, 'update-manifest.json'), 'utf8'));
+  const manifest = buildReleaseManifest(base, {
+    version: pkg.version,
+    updaterVersion: update.updaterVersion || update.updater_version,
+    removedFiles: Array.isArray(update.removedFiles) ? update.removedFiles : [],
+  });
+  writeFileSync(join(base, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+  return manifest;
+}
+
+const invokedPath = process.argv[1] ? resolve(process.argv[1]) : '';
+if (invokedPath === fileURLToPath(import.meta.url)) {
+  const root = process.argv[2] || process.cwd();
+  try {
+    const manifest = generateReleaseManifest(root);
+    console.log(`Release-Manifest erstellt: ${manifest.files.length} Dateien, ${manifest.removedFiles.length} explizite Löschungen.`);
+  } catch (error) {
+    console.error(`[FEHLER] Release-Manifest konnte nicht erstellt werden: ${error.message}`);
+    process.exit(1);
+  }
+}
diff --git a/tools/release-manifest-lib.mjs b/tools/release-manifest-lib.mjs
new file mode 100644
index 0000000..dd30567
--- /dev/null
+++ b/tools/release-manifest-lib.mjs
@@ -0,0 +1,233 @@
+import {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+  statSync,
+} from 'node:fs';
+import { createHash } from 'node:crypto';
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+
+export const MANIFEST_SCHEMA = 'vendoo-release-manifest-v1';
+export const MANIFEST_FILE = 'release-manifest.json';
+export const CONTROL_RELEASE_FILES = Object.freeze([MANIFEST_FILE]);
+export const REQUIRED_RELEASE_FILES = Object.freeze([
+  'package.json',
+  'package-lock.json',
+  'bootstrap.mjs',
+  'server.mjs',
+  'lib/db.mjs',
+  'db/schema.sql',
+  'update-manifest.json',
+  'UPDATE_VENDOO.bat',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'tools/apply-release-manifest.mjs',
+]);
+
+const allowedEnvTemplates = new Set(['.env.example', '.env.docker.example']);
+const skippedTopLevelDirs = new Set([
+  '.git', 'node_modules', 'runtime', 'docker-data', 'uploads', 'backups', 'logs',
+  'sessions', 'tmp', 'temp', '__pycache__', 'release-output', 'operations', 'updates',
+  'modules', 'archiv', 'archive', 'archives', 'data',
+]);
+const skippedLocalAiDirs = new Set(['local-ai/comfyui', 'local-ai/downloads', 'local-ai/extract-temp']);
+const skippedExactFiles = new Set([
+  MANIFEST_FILE,
+  'file_checksums_sha256.txt',
+  '.vendoo-install-mode', '.vendoo-github-state.json',
+  'pending-operation.json', 'last-operation.json', 'first-admin-code.txt',
+]);
+const skippedExtensions = new Set([
+  '.db', '.sqlite', '.sqlite3', '.log', '.key', '.pem', '.pfx', '.p12', '.pyc',
+]);
+
+export function normalizeReleasePath(value) {
+  return String(value).split('\\').join('/').replace(/^\.\//, '');
+}
+
+export function assertSafeReleasePath(value, label = 'Release-Pfad') {
+  const rel = normalizeReleasePath(value);
+  if (!rel || rel === '.' || isAbsolute(rel) || rel.startsWith('/') || /^[A-Za-z]:\//.test(rel)) {
+    throw new Error(`${label} ist nicht relativ: ${value}`);
+  }
+  const parts = rel.split('/');
+  if (parts.some(part => !part || part === '.' || part === '..')) {
+    throw new Error(`${label} enthält unzulässige Segmente: ${value}`);
+  }
+  if (parts[0].toLowerCase() === '.git') {
+    throw new Error(`${label} darf .git nicht verändern: ${value}`);
+  }
+  return rel;
+}
+
+export function shouldIncludeReleaseEntry(relativePath, stat) {
+  const rel = normalizeReleasePath(relativePath);
+  if (!rel) return false;
+  const parts = rel.split('/');
+  const top = parts[0].toLowerCase();
+  const name = basename(rel);
+  const lower = rel.toLowerCase();
+  if (skippedTopLevelDirs.has(top)) return false;
+  if (parts.some(part => part.toLowerCase() === '__pycache__')) return false;
+  if ([...skippedLocalAiDirs].some(dir => lower === dir || lower.startsWith(`${dir}/`))) return false;
+  if (/^\.env(?:\..+)?$/i.test(name) && !allowedEnvTemplates.has(rel)) return false;
+  if (skippedExactFiles.has(name.toLowerCase())) return false;
+  if (/\.(?:db|sqlite|sqlite3)-(?:wal|shm)$/i.test(name)) return false;
+  if (skippedExtensions.has(extname(name).toLowerCase())) return false;
+  if (stat.isSymbolicLink()) return false;
+  return stat.isDirectory() || stat.isFile();
+}
+
+export function sha256File(filePath) {
+  const hash = createHash('sha256');
+  hash.update(readFileSync(filePath));
+  return hash.digest('hex');
+}
+
+export function listReleaseFiles(root) {
+  const base = resolve(root);
+  const files = [];
+  function walk(current) {
+    for (const name of readdirSync(current).sort((a, b) => a.localeCompare(b, 'en'))) {
+      const absolute = join(current, name);
+      const rel = normalizeReleasePath(relative(base, absolute));
+      const stat = lstatSync(absolute);
+      if (!shouldIncludeReleaseEntry(rel, stat)) continue;
+      if (stat.isDirectory()) walk(absolute);
+      else files.push(rel);
+    }
+  }
+  walk(base);
+  return files;
+}
+
+export function buildReleaseManifest(root, { version, updaterVersion, removedFiles = [] } = {}) {
+  if (!version) throw new Error('Release-Version fehlt.');
+  if (!updaterVersion) throw new Error('Updater-Version fehlt.');
+  const base = resolve(root);
+  const files = listReleaseFiles(base).map(path => ({
+    path,
+    sha256: sha256File(join(base, path)),
+    size: statSync(join(base, path)).size,
+  }));
+  const normalizedRemoved = [...new Set(removedFiles.map(path => assertSafeReleasePath(path, 'removedFiles-Eintrag')))].sort();
+  const fileSet = new Set(files.map(entry => entry.path));
+  for (const required of REQUIRED_RELEASE_FILES) {
+    if (!fileSet.has(required)) throw new Error(`Pflichtdatei fehlt im Release-Payload: ${required}`);
+  }
+  for (const removed of normalizedRemoved) {
+    if (fileSet.has(removed)) throw new Error(`Datei ist gleichzeitig Payload und Löschung: ${removed}`);
+    if (CONTROL_RELEASE_FILES.includes(removed)) throw new Error(`Steuerdatei darf nicht als Löschung markiert werden: ${removed}`);
+  }
+  return {
+    schema: MANIFEST_SCHEMA,
+    version,
+    updaterVersion,
+    mode: 'overlay-with-explicit-removals',
+    requiredFiles: [...REQUIRED_RELEASE_FILES],
+    removedFiles: normalizedRemoved,
+    files,
+  };
+}
+
+export function readAndValidateManifest(sourceRoot, { allowExtraFiles = false } = {}) {
+  const base = resolve(sourceRoot);
+  const manifestPath = join(base, MANIFEST_FILE);
+  if (!existsSync(manifestPath)) throw new Error(`${MANIFEST_FILE} fehlt.`);
+  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+  if (manifest.schema !== MANIFEST_SCHEMA) throw new Error(`Unbekanntes Manifest-Schema: ${manifest.schema}`);
+  if (manifest.mode !== 'overlay-with-explicit-removals') throw new Error(`Unzulässiger Release-Modus: ${manifest.mode}`);
+  if (!Array.isArray(manifest.files) || manifest.files.length === 0) throw new Error('Release-Manifest enthält keine Dateien.');
+  if (!Array.isArray(manifest.removedFiles)) throw new Error('removedFiles fehlt im Release-Manifest.');
+  const seen = new Set();
+  for (const entry of manifest.files) {
+    if (!entry || typeof entry !== 'object') throw new Error('Ungültiger Datei-Eintrag im Release-Manifest.');
+    const rel = assertSafeReleasePath(entry.path, 'Manifest-Dateipfad');
+    if (seen.has(rel)) throw new Error(`Doppelter Manifest-Dateipfad: ${rel}`);
+    seen.add(rel);
+    if (!/^[a-f0-9]{64}$/.test(String(entry.sha256 || ''))) throw new Error(`Ungültige SHA-256-Prüfsumme: ${rel}`);
+    if (!Number.isSafeInteger(entry.size) || entry.size < 0) throw new Error(`Ungültige Dateigröße: ${rel}`);
+  }
+  const removedSeen = new Set();
+  for (const value of manifest.removedFiles) {
+    const rel = assertSafeReleasePath(value, 'removedFiles-Eintrag');
+    if (removedSeen.has(rel)) throw new Error(`Doppelter removedFiles-Eintrag: ${rel}`);
+    removedSeen.add(rel);
+    if (seen.has(rel)) throw new Error(`Datei ist gleichzeitig Payload und Löschung: ${rel}`);
+    if (CONTROL_RELEASE_FILES.includes(rel)) throw new Error(`Steuerdatei darf nicht als Löschung markiert werden: ${rel}`);
+  }
+  const required = Array.isArray(manifest.requiredFiles) ? manifest.requiredFiles : REQUIRED_RELEASE_FILES;
+  for (const value of REQUIRED_RELEASE_FILES) {
+    if (!required.includes(value)) throw new Error(`Manifest-Pflichtdatei fehlt in requiredFiles: ${value}`);
+    if (!seen.has(value)) throw new Error(`Manifest-Payload enthält Pflichtdatei nicht: ${value}`);
+  }
+  const actualFiles = listReleaseFiles(base);
+  const actualSet = new Set(actualFiles);
+  if (!allowExtraFiles) {
+    for (const rel of actualFiles) if (!seen.has(rel)) throw new Error(`Sichere Paketdatei fehlt im Manifest: ${rel}`);
+  }
+  for (const rel of seen) if (!actualSet.has(rel)) throw new Error(`Manifest verweist auf fehlende Paketdatei: ${rel}`);
+  for (const entry of manifest.files) {
+    const filePath = join(base, entry.path);
+    const stat = statSync(filePath);
+    if (stat.size !== entry.size) throw new Error(`Dateigröße stimmt nicht: ${entry.path}`);
+    const actualHash = sha256File(filePath);
+    if (actualHash !== entry.sha256) throw new Error(`SHA-256 stimmt nicht: ${entry.path}`);
+  }
+  return manifest;
+}
+
+export function applyReleaseManifest(sourceRoot, destinationRoot) {
+  const source = resolve(sourceRoot);
+  const destination = resolve(destinationRoot);
+  if (source === destination) throw new Error('Quell- und Zielordner dürfen nicht identisch sein.');
+  if (!existsSync(join(destination, '.git'))) throw new Error(`Ziel ist kein geklontes Git-Repository: ${destination}`);
+  const manifest = readAndValidateManifest(source);
+  for (const rel of manifest.removedFiles) {
+    rmSync(join(destination, rel), { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+  }
+  let copied = 0;
+  for (const entry of manifest.files) {
+    const sourceFile = join(source, entry.path);
+    const targetFile = join(destination, entry.path);
+    mkdirSync(dirname(targetFile), { recursive: true });
+    copyFileSync(sourceFile, targetFile);
+    try { chmodSync(targetFile, statSync(sourceFile).mode & 0o777); } catch {}
+    const targetHash = sha256File(targetFile);
+    if (targetHash !== entry.sha256) throw new Error(`Zielprüfung nach Kopieren fehlgeschlagen: ${entry.path}`);
+    copied += 1;
+  }
+  let controlCopied = 0;
+  for (const rel of CONTROL_RELEASE_FILES) {
+    const sourceFile = join(source, rel);
+    const targetFile = join(destination, rel);
+    mkdirSync(dirname(targetFile), { recursive: true });
+    copyFileSync(sourceFile, targetFile);
+    if (sha256File(sourceFile) !== sha256File(targetFile)) {
+      throw new Error(`Steuerdatei-Prüfung nach Kopieren fehlgeschlagen: ${rel}`);
+    }
+    controlCopied += 1;
+  }
+  for (const required of REQUIRED_RELEASE_FILES) {
+    if (!existsSync(join(destination, required))) throw new Error(`Pflichtdatei fehlt nach Release-Anwendung: ${required}`);
+  }
+  for (const controlFile of CONTROL_RELEASE_FILES) {
+    if (!existsSync(join(destination, controlFile))) throw new Error(`Steuerdatei fehlt nach Release-Anwendung: ${controlFile}`);
+  }
+  return {
+    source,
+    destination,
+    version: manifest.version,
+    updaterVersion: manifest.updaterVersion,
+    copied,
+    controlCopied,
+    removed: manifest.removedFiles.length,
+  };
+}
diff --git a/tools/test-runtime-cleanup.mjs b/tools/test-runtime-cleanup.mjs
new file mode 100644
index 0000000..0deb930
--- /dev/null
+++ b/tools/test-runtime-cleanup.mjs
@@ -0,0 +1,34 @@
+import { rmSync } from 'node:fs';
+
+const wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+
+export async function closeVendooDatabase({ failures = [], label = 'Temporäre SQLite-Datenbank' } = {}) {
+  try {
+    const { db } = await import('../lib/db.mjs');
+    if (db?.open) {
+      try { db.pragma('wal_checkpoint(TRUNCATE)'); } catch {}
+      db.close();
+    }
+    return true;
+  } catch (error) {
+    failures.push(`${label} konnte nicht sauber geschlossen werden: ${error.code || error.message}`);
+    return false;
+  }
+}
+
+export async function removeTempDirectory(path, {
+  failures = [],
+  label = 'Temporärer Testordner',
+  settleMs = 100,
+  maxRetries = 30,
+  retryDelay = 100,
+} = {}) {
+  if (settleMs > 0) await wait(settleMs);
+  try {
+    rmSync(path, { recursive: true, force: true, maxRetries, retryDelay });
+    return true;
+  } catch (error) {
+    failures.push(`${label} konnte nicht entfernt werden: ${error.code || error.message} (${path})`);
+    return false;
+  }
+}
diff --git a/tools/verify-capability-graph-1.41.2.mjs b/tools/verify-capability-graph-1.41.2.mjs
index 1ccf296..b7379a7 100644
--- a/tools/verify-capability-graph-1.41.2.mjs
+++ b/tools/verify-capability-graph-1.41.2.mjs
@@ -1,38 +1,55 @@
-import { ModuleRegistry } from '../app/kernel/module-registry.mjs';
-import { loadBuiltInModules } from '../app/modules/catalog.mjs';
+import { mkdtempSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { closeVendooDatabase, removeTempDirectory } from './test-runtime-cleanup.mjs';
+
+const tempPrefix = process.env.VENDOO_TEST_TEMP_PREFIX || 'vendoo-capability-graph-';
+const temp = mkdtempSync(join(tmpdir(), tempPrefix));
+process.env.NODE_ENV = 'test';
+process.env.VENDOO_DATA_DIR = temp;
+process.env.VENDOO_DB_PATH = join(temp, 'db', 'vendoo.db');
+process.env.VENDOO_CONFIG_PATH = join(temp, 'config', 'vendoo.env');
+process.env.VENDOO_MODULE_STATE_PATH = join(temp, 'config', 'modules-state.json');
+process.env.VENDOO_MODULES_DIR = join(temp, 'modules');
 
 const failures = [];
 const assert = (condition, message) => { if (!condition) failures.push(message); };
-
-const modules = loadBuiltInModules();
-const registry = new ModuleRegistry();
-for (const module of modules) registry.register(module);
-
 let graph = null;
+
 try {
-  graph = registry.validateGraph();
-} catch (error) {
-  failures.push(`${error.code || 'CAPABILITY_GRAPH_INVALID'}: ${error.message}`);
+  const { ModuleRegistry } = await import('../app/kernel/module-registry.mjs');
+  const { loadBuiltInModules } = await import('../app/modules/catalog.mjs');
+  const modules = loadBuiltInModules();
+  const registry = new ModuleRegistry();
+  for (const module of modules) registry.register(module);
+
+  try {
+    graph = registry.validateGraph();
+  } catch (error) {
+    failures.push(`${error.code || 'CAPABILITY_GRAPH_INVALID'}: ${error.message}`);
+  }
+
+  const settings = modules.find(item => item.manifest.id === 'vendoo.settings')?.manifest;
+  const manager = modules.find(item => item.manifest.id === 'vendoo.module-manager')?.manifest;
+  const deployments = modules.find(item => item.manifest.id === 'vendoo.deployments')?.manifest;
+  assert(settings?.provides.includes('settings.configuration'), 'vendoo.settings stellt settings.configuration nicht bereit');
+  assert(manager?.consumes.includes('settings.configuration'), 'vendoo.module-manager fordert settings.configuration nicht an');
+  assert(graph?.enabledModules.length === 18, `Erwartet 18 registrierte Module, erhalten ${graph?.enabledModules.length ?? 0}`);
+  assert(deployments?.consumes.includes('settings.configuration'), 'vendoo.deployments fordert settings.configuration nicht an');
+  assert(deployments?.consumes.includes('operations.backup'), 'vendoo.deployments fordert operations.backup nicht an');
+  assert(graph?.capabilities.includes('deployments.coolify'), 'Capability deployments.coolify fehlt im aufgelösten Gesamtgraph');
+  assert(graph?.capabilities.includes('settings.configuration'), 'Capability settings.configuration fehlt im aufgelösten Gesamtgraph');
+  assert(graph?.capabilities.includes('product-images.variants'), 'Capability product-images.variants fehlt im aufgelösten Gesamtgraph');
+  assert(graph?.order.indexOf('vendoo.settings') < graph?.order.indexOf('vendoo.module-manager'), 'vendoo.settings wird nicht vor vendoo.module-manager gestartet');
+  assert(graph?.order.indexOf('vendoo.module-manager') < graph?.order.indexOf('vendoo.deployments'), 'vendoo.module-manager wird nicht vor vendoo.deployments gestartet');
+} finally {
+  await closeVendooDatabase({ failures, label: 'Capability-Graph-Testdatenbank' });
+  await removeTempDirectory(temp, { failures, label: 'Capability-Graph-Testordner' });
 }
 
-const settings = modules.find(item => item.manifest.id === 'vendoo.settings')?.manifest;
-const manager = modules.find(item => item.manifest.id === 'vendoo.module-manager')?.manifest;
-const deployments = modules.find(item => item.manifest.id === 'vendoo.deployments')?.manifest;
-assert(settings?.provides.includes('settings.configuration'), 'vendoo.settings stellt settings.configuration nicht bereit');
-assert(manager?.consumes.includes('settings.configuration'), 'vendoo.module-manager fordert settings.configuration nicht an');
-assert(graph?.enabledModules.length === 17, `Erwartet 17 aktivierbare Module, erhalten ${graph?.enabledModules.length ?? 0}`);
-assert(deployments?.consumes.includes('settings.configuration'), 'vendoo.deployments fordert settings.configuration nicht an');
-assert(deployments?.consumes.includes('operations.backup'), 'vendoo.deployments fordert operations.backup nicht an');
-assert(graph?.capabilities.includes('deployments.coolify'), 'Capability deployments.coolify fehlt im aufgelösten Gesamtgraph');
-assert(graph?.capabilities.includes('settings.configuration'), 'Capability settings.configuration fehlt im aufgelösten Gesamtgraph');
-assert(graph?.order.indexOf('vendoo.settings') < graph?.order.indexOf('vendoo.module-manager'), 'vendoo.settings wird nicht vor vendoo.module-manager gestartet');
-
-assert(graph?.order.indexOf('vendoo.module-manager') < graph?.order.indexOf('vendoo.deployments'), 'vendoo.module-manager wird nicht vor vendoo.deployments gestartet');
-
 if (failures.length) {
   console.error(`Capability-Graph-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);
   failures.forEach(item => console.error(`- ${item}`));
   process.exit(1);
 }
-
 console.log(`Capability-Graph-Gate 1.41.2 erfolgreich: ${graph.enabledModules.length} Module, ${graph.capabilities.length} Capabilities und vollständige Provider-Verträge geprüft.`);
diff --git a/tools/verify-catalog-media-1.41.2.mjs b/tools/verify-catalog-media-1.41.2.mjs
index ae74fb1..b396285 100644
--- a/tools/verify-catalog-media-1.41.2.mjs
+++ b/tools/verify-catalog-media-1.41.2.mjs
@@ -1,6 +1,6 @@
 import { readFileSync } from 'node:fs';import { dirname,join,resolve } from 'node:path';import { fileURLToPath } from 'node:url';
 const root=resolve(dirname(fileURLToPath(import.meta.url)),'..');const read=r=>readFileSync(join(root,r),'utf8');const failures=[];const assert=(c,m)=>{if(!c)failures.push(m)};
-const pkg=JSON.parse(read('package.json'));assert(pkg.version==='1.41.2',`Paketversion ist ${pkg.version}`);const server=read('server.mjs');const catalog=read('app/modules/catalog.mjs');const kernel=read('app/kernel/platform-kernel.mjs');const frontend=read('public/app.js');assert(!frontend.includes('...state.currentListing,\n          ...payload'),'Frontend sendet unkontrolliertes Listing-Objekt an die native Allowlist');
+const pkg=JSON.parse(read('package.json'));assert(pkg.version==='1.43.0',`Paketversion ist ${pkg.version}`);const server=read('server.mjs');const catalog=read('app/modules/catalog.mjs');const kernel=read('app/kernel/platform-kernel.mjs');const frontend=read('public/app.js');assert(!frontend.includes('...state.currentListing,\n          ...payload'),'Frontend sendet unkontrolliertes Listing-Objekt an die native Allowlist');
 for(const marker of ['registerListingsRoutes','registerInventoryRoutes','registerMediaRoutes','configureMediaModule'])assert(server.includes(marker),`Serverregistrierung fehlt: ${marker}`);
 for(const legacy of ["app.post('/api/listings'","app.get('/api/listings'","app.get('/api/media-library'","app.get('/api/inventory/locations'","app.get('/api/trash'"])assert(!server.includes(legacy),`Legacy-Route verblieben: ${legacy}`);
 for(const id of ['listings','inventory','media']){const manifest=JSON.parse(read(`app/modules/${id}/module.json`));assert(manifest.status==='native',`${id} ist nicht nativ`);assert(read(`app/modules/${id}/routes.mjs`).includes("owner:'vendoo."+id)||read(`app/modules/${id}/routes.mjs`).includes("owner: 'vendoo."+id),`${id}-Routenbesitzer fehlt`)}
@@ -8,4 +8,4 @@ for(const marker of ['createListingsModule','createInventoryModule','createMedia
 const listingService=read('app/modules/listings/service.mjs'),listingRoutes=read('app/modules/listings/routes.mjs'),inventoryService=read('app/modules/inventory/service.mjs'),mediaService=read('app/modules/media/service.mjs');
 for(const marker of ['ALLOWED_FIELDS','Unbekanntes Artikelfeld','LISTING_TRASH_NOT_FOUND','sanitizeRichHtml'])assert(listingService.includes(marker),`Listing-Schutz fehlt: ${marker}`);for(const marker of ['validateResourceLock','listings.permanent-delete','listing.soft_deleted'])assert(listingRoutes.includes(marker),`Listing-Route fehlt: ${marker}`);for(const marker of ['Maximal 500 Artikel','Unbekanntes Lagerfeld','INVENTORY_LOCATION_INVALID'])assert(inventoryService.includes(marker),`Inventory-Schutz fehlt: ${marker}`);for(const marker of ['normalizePath','p.includes(\'..\')','referenced','protectedPaths','validateFavorite','validateDelete'])assert(mediaService.includes(marker),`Media-Schutz fehlt: ${marker}`);
 for(const marker of ["policies.register('listings.permanent-delete'","policies.register('inventory.manage'","policies.register('media.delete'"])assert(kernel.includes(marker),`Policy fehlt: ${marker}`);
-if(failures.length){console.error(`Catalog-&-Media-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);failures.forEach(x=>console.error(`- ${x}`));process.exit(1)}console.log('Catalog-&-Media-Gate 1.41.2 erfolgreich: native Listings-, Inventory- und Media-Routen, Payload-Allowlist, Locking, Papierkorbgrenzen, Bulk-Limits und Medien-Referenzschutz geprüft.');
+if(failures.length){console.error(`Catalog-&-Media-Gate 1.43.0 fehlgeschlagen (${failures.length}):`);failures.forEach(x=>console.error(`- ${x}`));process.exit(1)}console.log('Catalog-&-Media-Gate 1.43.0 erfolgreich: native Listings-, Inventory- und Media-Routen, Payload-Allowlist, Locking, Papierkorbgrenzen, Bulk-Limits und Medien-Referenzschutz geprüft.');
diff --git a/tools/verify-controlled-invitations-1.42.0.mjs b/tools/verify-controlled-invitations-1.42.0.mjs
new file mode 100644
index 0000000..2c8d27c
--- /dev/null
+++ b/tools/verify-controlled-invitations-1.42.0.mjs
@@ -0,0 +1,57 @@
+import { mkdtempSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { readFileSync } from 'node:fs';
+import { closeVendooDatabase, removeTempDirectory } from './test-runtime-cleanup.mjs';
+
+const tempPrefix = process.env.VENDOO_TEST_TEMP_PREFIX || 'vendoo-invitations-';
+const temp = mkdtempSync(join(tmpdir(), tempPrefix));
+process.env.NODE_ENV = 'test';
+process.env.VENDOO_DATA_DIR = temp;
+process.env.VENDOO_DB_PATH = join(temp, 'db', 'vendoo.db');
+process.env.VENDOO_CONFIG_PATH = join(temp, 'config', 'vendoo.env');
+
+const failures = [];
+const assert = (condition, message) => { if (!condition) failures.push(message); };
+try {
+  const identity = await import('../app/core/identity/identity-store.mjs');
+  const { createUsersService } = await import('../app/modules/users/service.mjs');
+  const first = identity.createAuthToken('tester@example.invalid', 'invite', 'viewer', null);
+  assert(first.token && first.expiresAt, 'Einladungstoken oder Ablauf fehlt');
+  let invitations = identity.listInvitations();
+  assert(invitations.length === 1, `Erwartet eine Einladung, erhalten ${invitations.length}`);
+  assert(invitations[0].status === 'pending', `Neue Einladung ist ${invitations[0].status}`);
+  assert(!Object.hasOwn(invitations[0], 'token_hash'), 'Token-Hash wird in der Einladungsliste ausgegeben');
+  assert(invitations[0].role === 'viewer', `Minimale Testerrolle ist ${invitations[0].role}`);
+
+  const second = identity.createAuthToken('tester@example.invalid', 'invite', 'viewer', null);
+  invitations = identity.listInvitations();
+  assert(invitations.filter(item => item.status === 'pending').length === 1, 'Erneutes Senden lässt mehrere gültige Einladungen offen');
+  const pending = invitations.find(item => item.status === 'pending');
+  const revoked = identity.revokeInvitation(pending.id);
+  assert(revoked?.status === 'revoked', 'Einladung wurde nicht widerrufen');
+  assert(identity.validateAuthToken(second.token) === null, 'Widerrufener Link bleibt gültig');
+
+  const service = createUsersService();
+  const prepared = service.prepareInvite({ email: 'minimal@example.invalid', name: 'Minimal', createdBy: null, method: 'magic_link' });
+  assert(prepared.role === 'viewer', `Service-Standardrolle ist ${prepared.role}`);
+
+  const routes = readFileSync(new URL('../app/modules/users/routes.mjs', import.meta.url), 'utf8');
+  for (const marker of ['/api/admin/users/invitations', '/api/admin/users/invitations/:id/resend', "'user.invitation_revoked'", "policy: 'users.manage'", 'csrf: true']) {
+    assert(routes.includes(marker), `Einladungs-Routenvertrag fehlt: ${marker}`);
+  }
+  const frontend = readFileSync(new URL('../public/app.js', import.meta.url), 'utf8');
+  assert(frontend.includes('loadAdminInvitations'), 'Einladungsübersicht fehlt im Frontend');
+  assert(frontend.includes("invite-role').value = 'viewer'"), 'Einladungsdialog startet nicht mit Leserrolle');
+} finally {
+  await closeVendooDatabase({ failures, label: 'Einladungs-Testdatenbank' });
+  await removeTempDirectory(temp, { failures, label: 'Einladungs-Testordner' });
+}
+
+if (failures.length) {
+  console.error(`Controlled-Invitations-Gate 1.42.0 fehlgeschlagen (${failures.length}):`);
+  failures.forEach(failure => console.error(`- ${failure}`));
+  process.exit(1);
+}
+console.log('Controlled-Invitations-Gate 1.42.0 erfolgreich: Leser-Standardrolle, 48h-Ablauf, Einmalgültigkeit, erneutes Senden, Widerruf, Secret-Grenze, RBAC und UI geprüft.');
+process.exit(0);
diff --git a/tools/verify-db-migrations.mjs b/tools/verify-db-migrations.mjs
new file mode 100644
index 0000000..c3fbf26
--- /dev/null
+++ b/tools/verify-db-migrations.mjs
@@ -0,0 +1,139 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DatabaseSync } from 'node:sqlite';
+
+const APP = resolve(fileURLToPath(new URL('..', import.meta.url)));
+const BASE = process.argv[2] ? resolve(process.argv[2]) : null;
+
+function execDbExecBlocks(db, sourcePath) {
+  const text = readFileSync(sourcePath, 'utf8');
+  const blocks = [...text.matchAll(/db\.exec\(`([\s\S]*?)`\)/g)];
+  let applied = 0;
+  for (const [, sql] of blocks) {
+    if (sql.includes('${')) continue;
+    try { db.exec(sql); applied += 1; } catch { /* additive ALTER blocks intentionally tolerate existing columns */ }
+  }
+  if (text.includes('operations-center-1.30.0')) {
+    db.prepare("INSERT OR IGNORE INTO system_migrations (migration_key, app_version, description) VALUES ('operations-center-1.30.0','1.30.0','Backup, Restore, Update Center und Extension-Diagnose')").run();
+  }
+  return applied;
+}
+
+function columns(db, table) {
+  return new Set(db.prepare(`PRAGMA table_info(${JSON.stringify(table)})`).all().map((row) => row.name));
+}
+
+function verify(db) {
+  const requiredTables = new Set([
+    'flux_images', 'flux_prompt_jobs', 'flux_prompt_job_variants', 'image_edit_versions',
+    'image_batch_profiles', 'image_batch_jobs', 'image_batch_job_items', 'quality_reports',
+    'publishing_jobs', 'publishing_events', 'operation_backups', 'operation_settings',
+    'update_operations', 'system_migrations', 'extension_clients', 'users', 'sessions',
+    'audit_log', 'resource_locks', 'theme_profiles', 'user_theme_preferences',
+  ]);
+  const existingTables = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type='table'").all().map((row) => row.name));
+  const missingTables = [...requiredTables].filter((name) => !existingTables.has(name));
+  const checks = {
+    flux_images: ['favorite', 'job_id', 'variant_index', 'prompt_mode', 'parameters_json'],
+    flux_prompt_jobs: ['archived_at'],
+    image_edit_versions: ['root_path', 'source_path', 'output_path', 'context', 'operations_json', 'width', 'height', 'format', 'quality', 'file_size', 'user_id', 'created_at'],
+    image_batch_jobs: ['name', 'status', 'phase', 'source_count', 'profile_count', 'total_items', 'completed_items', 'failed_items', 'cancelled_items', 'pause_requested', 'cancel_requested', 'settings_json', 'created_at', 'updated_at'],
+    image_batch_job_items: ['job_id', 'source_path', 'profile_id', 'profile_key', 'profile_name', 'status', 'phase', 'settings_json', 'output_path', 'error_message', 'created_at', 'updated_at'],
+    quality_reports: ['listing_id', 'score', 'grade', 'ready', 'blockers', 'warnings', 'recommendations', 'report_json', 'analyzed_at'],
+    publishing_jobs: ['id', 'listing_id', 'platform', 'mode', 'action', 'status', 'phase', 'idempotency_key', 'external_id', 'external_url', 'offer_id', 'retries', 'max_retries', 'next_attempt_at', 'claimed_by', 'claimed_at', 'error_code', 'error_message', 'payload_json', 'result_json', 'created_at', 'started_at', 'completed_at', 'updated_at'],
+    publishing_events: ['id', 'job_id', 'listing_id', 'platform', 'level', 'event_type', 'message', 'details_json', 'created_at'],
+    publish_log: ['offer_id', 'sync_status', 'last_synced_at', 'ended_at', 'updated_at'],
+    operation_backups: ['id', 'kind', 'label', 'file_name', 'file_path', 'file_size', 'sha256', 'status', 'verified_at', 'options_json', 'manifest_json', 'created_at'],
+    operation_settings: ['key', 'value', 'updated_at'],
+    update_operations: ['id', 'version_from', 'version_to', 'source_name', 'archive_path', 'sha256', 'status', 'details_json', 'created_at', 'applied_at', 'error_message'],
+    system_migrations: ['id', 'migration_key', 'app_version', 'description', 'applied_at'],
+    extension_clients: ['client_id', 'browser', 'version', 'platform', 'server_url', 'user_agent', 'capabilities_json', 'first_seen', 'last_seen'],
+    users: ['id', 'email', 'name', 'password_hash', 'role', 'active', 'avatar_color', 'last_active_at', 'failed_login_count', 'locked_until', 'password_changed_at', 'created_at', 'invited_by'],
+    sessions: ['id', 'user_id', 'token_hash', 'ip', 'user_agent', 'expires_at', 'last_seen_at', 'revoked_at', 'created_at'],
+    audit_log: ['id', 'user_id', 'user_email', 'action', 'target_type', 'target_id', 'details', 'ip', 'created_at'],
+    resource_locks: ['id', 'resource_type', 'resource_id', 'user_id', 'token_hash', 'acquired_at', 'renewed_at', 'expires_at', 'client_label'],
+    theme_profiles: ['id', 'name', 'base_theme', 'values_json', 'created_by', 'created_at', 'updated_at'],
+    user_theme_preferences: ['user_id', 'theme_id', 'density', 'reduced_motion', 'updated_at'],
+  };
+  const missingColumns = {};
+  for (const [table, required] of Object.entries(checks)) {
+    const existing = columns(db, table);
+    const missing = required.filter((name) => !existing.has(name));
+    if (missing.length) missingColumns[table] = missing.sort();
+  }
+  if (missingTables.length || Object.keys(missingColumns).length) {
+    throw new Error(JSON.stringify({ missing_tables: missingTables.sort(), missing_columns: missingColumns }));
+  }
+}
+
+const tempRoot = mkdtempSync(join(tmpdir(), 'vendoo-db-migrations-'));
+let fresh;
+let existing;
+try {
+  fresh = new DatabaseSync(join(tempRoot, 'fresh.db'));
+  fresh.exec(readFileSync(join(APP, 'db/schema.sql'), 'utf8'));
+  const freshBlocks = execDbExecBlocks(fresh, join(APP, 'lib/db.mjs'));
+  verify(fresh);
+
+  existing = new DatabaseSync(join(tempRoot, 'existing.db'));
+  existing.exec(readFileSync(join(APP, 'db/schema.sql'), 'utf8'));
+  if (BASE) execDbExecBlocks(existing, join(BASE, 'lib/db.mjs'));
+  existing.prepare("INSERT INTO flux_images (prompt,image_path,width,height,seed,steps,style) VALUES ('Bestand','ai-generated/existing.png',768,768,42,4,'none')").run();
+  const existingBlocks = execDbExecBlocks(existing, join(APP, 'lib/db.mjs'));
+  verify(existing);
+  const row = existing.prepare("SELECT prompt,image_path,favorite FROM flux_images WHERE image_path='ai-generated/existing.png'").get();
+  if (!row || row.prompt !== 'Bestand' || row.image_path !== 'ai-generated/existing.png' || row.favorite !== 0) {
+    throw new Error(`Bestandsdaten verändert: ${JSON.stringify(row)}`);
+  }
+
+  const insertJob = existing.prepare(`INSERT INTO flux_prompt_jobs
+    (id,prompt,final_prompt,width,height,steps,style,profile,prompt_mode,assistant,variants,seed_base,seed_lock,status,phase,settings_json)
+    VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`);
+  for (const [jobId, status] of [['job-complete', 'completed'], ['job-failed', 'failed'], ['job-active', 'running']]) {
+    insertJob.run(jobId, 'Test', 'Test', 768, 768, 6, 'none', 'balanced', 'precise', 1, 1, 42, 0, status, status, '{}');
+  }
+  existing.prepare("UPDATE flux_prompt_jobs SET archived_at=datetime('now') WHERE id IN ('job-complete','job-failed','job-active') AND status NOT IN ('queued','running','cancelling')").run();
+  const archived = new Set(existing.prepare('SELECT id FROM flux_prompt_jobs WHERE archived_at IS NOT NULL').all().map((item) => item.id));
+  if (archived.size !== 2 || !archived.has('job-complete') || !archived.has('job-failed')) {
+    throw new Error(`Archivschutz inkorrekt: ${JSON.stringify([...archived])}`);
+  }
+
+  existing.prepare("INSERT INTO listings (title, platform, ai_provider, photos, tags) VALUES ('Publishing Test', 'ebay-de', 'openai', '[]', '[]')").run();
+  const listingId = existing.prepare('SELECT last_insert_rowid() AS id').get().id;
+  existing.prepare("INSERT INTO publishing_jobs (id, listing_id, platform, mode, action, status, phase, idempotency_key) VALUES ('pub-job-1', ?, 'ebay-de', 'api', 'publish', 'queued', 'queued', 'key-1')").run(listingId);
+  existing.prepare("INSERT INTO publishing_events (job_id, listing_id, platform, level, event_type, message) VALUES ('pub-job-1', ?, 'ebay-de', 'info', 'created', 'Auftrag erstellt')").run(listingId);
+  let duplicateGuard = false;
+  try {
+    existing.prepare("INSERT INTO publishing_jobs (id, listing_id, platform, mode, action, status, phase, idempotency_key) VALUES ('pub-job-2', ?, 'ebay-de', 'api', 'publish', 'queued', 'queued', 'key-1')").run(listingId);
+  } catch { duplicateGuard = true; }
+  if (!duplicateGuard) throw new Error('Idempotency-Key verhindert keinen doppelten Auftrag');
+  existing.prepare("UPDATE publishing_jobs SET status='running', phase='publish' WHERE id='pub-job-1'").run();
+  existing.prepare("UPDATE publishing_jobs SET status='queued', phase='recovered' WHERE status='running'").run();
+  const recovered = existing.prepare("SELECT status, phase FROM publishing_jobs WHERE id='pub-job-1'").get();
+  if (recovered.status !== 'queued' || recovered.phase !== 'recovered') throw new Error(`Publishing-Recovery fehlgeschlagen: ${JSON.stringify(recovered)}`);
+
+  existing.prepare("INSERT INTO operation_settings (key,value) VALUES ('auto_backup_enabled','1')").run();
+  existing.prepare("INSERT INTO operation_backups (id,kind,file_name,file_path,status) VALUES ('backup-1','manual','test.zip','/tmp/test.zip','verified')").run();
+  existing.prepare("INSERT INTO update_operations (id,version_from,version_to,archive_path,status) VALUES ('update-1','1.29.0','1.30.0','/tmp/update.zip','staged')").run();
+  existing.prepare("INSERT INTO extension_clients (client_id,browser,version,platform) VALUES ('client-1','chrome','1.9.0','popup')").run();
+  const migration = existing.prepare("SELECT app_version FROM system_migrations WHERE migration_key='operations-center-1.30.0'").get();
+  if (!migration || migration.app_version !== '1.30.0') throw new Error(`Operations-Migration fehlt: ${JSON.stringify(migration)}`);
+  const extension = existing.prepare("SELECT browser,version FROM extension_clients WHERE client_id='client-1'").get();
+  if (!extension || extension.browser !== 'chrome' || extension.version !== '1.9.0') throw new Error(`Extension-Client fehlerhaft: ${JSON.stringify(extension)}`);
+
+  console.log(JSON.stringify({
+    ok: true,
+    fresh_db_exec_blocks: freshBlocks,
+    existing_db_exec_blocks: existingBlocks,
+    existing_row_preserved: true,
+    publishing_hardening: { tables: ['publishing_jobs', 'publishing_events'], idempotency_key_unique: true, restart_recovery: true, events_persisted: true },
+    operations_center: { backup_tables: true, update_tables: true, extension_heartbeat: true, migration_recorded: true },
+    tables: ['flux_images', 'flux_prompt_jobs', 'flux_prompt_job_variants', 'image_edit_versions', 'image_batch_profiles', 'image_batch_jobs', 'image_batch_job_items', 'quality_reports', 'publishing_jobs', 'publishing_events', 'operation_backups', 'operation_settings', 'update_operations', 'system_migrations', 'extension_clients', 'theme_profiles', 'user_theme_preferences'],
+  }, null, 2));
+} finally {
+  try { fresh?.close(); } catch {}
+  try { existing?.close(); } catch {}
+  rmSync(tempRoot, { recursive: true, force: true });
+}
diff --git a/tools/verify-flux-loop-hotfix-1.41.2.mjs b/tools/verify-flux-loop-hotfix-1.41.2.mjs
index cb1039e..4246265 100644
--- a/tools/verify-flux-loop-hotfix-1.41.2.mjs
+++ b/tools/verify-flux-loop-hotfix-1.41.2.mjs
@@ -14,7 +14,7 @@ const fluxModule = read('app/modules/flux-studio/index.mjs');
 const ci = read('.github/workflows/ci.yml');
 const release = read('.github/workflows/release.yml');
 
-if (pkg.version !== '1.41.2') failures.push(`package.json-Version ist ${pkg.version}`);
+if (pkg.version !== '1.43.0') failures.push(`package.json-Version ist ${pkg.version}`);
 expect(server, 'startFluxPromptJobLoop, stopFluxPromptJobLoop', 'Server importiert Start- und Stop-Funktion');
 expect(server, 'configureFluxStudioModule({ start: startFluxPromptJobLoop, stop: stopFluxPromptJobLoop })', 'FLUX-Lifecycle ist vollständig verdrahtet');
 expect(fluxJobs, 'export function stopFluxPromptJobLoop()', 'fehlender Stop-Export');
@@ -29,8 +29,8 @@ expect(release, 'npm run verify:esm-exports', 'Release prüft ESM-Exportverträg
 expect(release, 'npm run verify:flux-loop', 'Release prüft FLUX-Hotfix');
 
 if (failures.length) {
-  console.error(`FLUX-Loop-Hotfix-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);
+  console.error(`FLUX-Loop-Hotfix-Gate 1.43.0 fehlgeschlagen (${failures.length}):`);
   failures.forEach(item => console.error(`- ${item}`));
   process.exit(1);
 }
-console.log('FLUX-Loop-Hotfix-Gate 1.41.2 erfolgreich: Stop-Export, Lifecycle-Verdrahtung und CI-Verträge geprüft.');
+console.log('FLUX-Loop-Hotfix-Gate 1.43.0 erfolgreich: Stop-Export, Lifecycle-Verdrahtung und CI-Verträge geprüft.');
diff --git a/tools/verify-identity-db-1.40.0.mjs b/tools/verify-identity-db-1.40.0.mjs
new file mode 100644
index 0000000..413dac8
--- /dev/null
+++ b/tools/verify-identity-db-1.40.0.mjs
@@ -0,0 +1,63 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DatabaseSync } from 'node:sqlite';
+
+const root = resolve(fileURLToPath(new URL('..', import.meta.url)));
+const source = readFileSync(join(root, 'app/core/identity/identity-store.mjs'), 'utf8');
+const match = source.match(/db\.exec\(`([\s\S]*?)`\);/);
+if (!match) throw new Error('Identity-Schema-Block fehlt');
+
+const tempRoot = mkdtempSync(join(tmpdir(), 'vendoo-identity-140-'));
+const db = new DatabaseSync(join(tempRoot, 'identity.db'));
+try {
+  db.exec('PRAGMA foreign_keys = ON');
+  db.exec(match[1]);
+
+  for (const statement of [
+    'ALTER TABLE users ADD COLUMN failed_login_count INTEGER NOT NULL DEFAULT 0',
+    'ALTER TABLE users ADD COLUMN locked_until TEXT',
+    'ALTER TABLE users ADD COLUMN password_changed_at TEXT',
+    'ALTER TABLE sessions ADD COLUMN last_seen_at TEXT',
+    'ALTER TABLE sessions ADD COLUMN revoked_at TEXT',
+  ]) {
+    try { db.exec(statement); } catch { /* additive migration may already exist */ }
+  }
+
+  const insertUser = db.prepare('INSERT INTO users(email,name,role,password_hash) VALUES(?,?,?,?)');
+  insertUser.run('admin@example.invalid', 'Admin', 'admin', 'salt:hash');
+  insertUser.run('editor@example.invalid', 'Editor', 'editor', 'salt:hash');
+  const adminId = db.prepare("SELECT id FROM users WHERE email='admin@example.invalid'").get().id;
+  const editorId = db.prepare("SELECT id FROM users WHERE email='editor@example.invalid'").get().id;
+  const insertSession = db.prepare("INSERT INTO sessions(user_id,token_hash,expires_at,last_seen_at) VALUES(?,?,datetime('now','+1 day'),datetime('now'))");
+  insertSession.run(adminId, 'admin-token');
+  insertSession.run(editorId, 'editor-token');
+  const editorSession = db.prepare('SELECT id FROM sessions WHERE user_id=?').get(editorId).id;
+
+  let result = db.prepare("UPDATE sessions SET revoked_at=datetime('now') WHERE id=? AND user_id=? AND revoked_at IS NULL").run(editorSession, adminId);
+  if (result.changes !== 0) throw new Error('Fremde Sitzung konnte durch falschen Eigentümer widerrufen werden');
+  result = db.prepare("UPDATE sessions SET revoked_at=datetime('now') WHERE id=? AND user_id=? AND revoked_at IS NULL").run(editorSession, editorId);
+  if (result.changes !== 1) throw new Error('Eigene Sitzung konnte nicht widerrufen werden');
+
+  db.exec('CREATE TABLE IF NOT EXISTS settings (key TEXT PRIMARY KEY, value TEXT)');
+  db.prepare('INSERT OR REPLACE INTO settings(key,value) VALUES(?,?)').run('default_language', 'de');
+  if (db.prepare("SELECT value FROM settings WHERE key='default_language'").get().value !== 'de') {
+    throw new Error('Settings-Persistenz fehlgeschlagen');
+  }
+
+  const tables = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type='table'").all().map((row) => row.name));
+  const required = ['users', 'sessions', 'auth_tokens', 'audit_log', 'login_history', 'settings'];
+  const missing = required.filter((name) => !tables.has(name));
+  if (missing.length) throw new Error(`Fehlende Identity-/Settings-Tabellen: ${missing.join(', ')}`);
+
+  console.log(JSON.stringify({
+    ok: true,
+    tables: required.sort(),
+    foreign_session_blocked: true,
+    own_session_revoked: true,
+  }));
+} finally {
+  db.close();
+  rmSync(tempRoot, { recursive: true, force: true });
+}
diff --git a/tools/verify-identity-settings-1.41.2.mjs b/tools/verify-identity-settings-1.41.2.mjs
index e9b83dd..ad25dd9 100644
--- a/tools/verify-identity-settings-1.41.2.mjs
+++ b/tools/verify-identity-settings-1.41.2.mjs
@@ -10,7 +10,7 @@ const assert = (condition, message) => { if (!condition) failures.push(message);
 const expectThrow = (fn, message) => { try { fn(); failures.push(message); } catch {} };
 
 const pkg = JSON.parse(read('package.json'));
-assert(pkg.version === '1.41.2', `Paketversion ist ${pkg.version}`);
+assert(pkg.version === '1.43.0', `Paketversion ist ${pkg.version}`);
 const server = read('server.mjs');
 const authFacade = read('lib/auth.mjs');
 const identityStore = read('app/core/identity/identity-store.mjs');
@@ -44,5 +44,5 @@ for (const [id, expected] of [['auth','native'],['users','native'],['sessions','
   assert(manifest.status === expected, `${id}-Modul ist nicht nativ`);
 }
 
-if (failures.length) { console.error(`Identity-&-Settings-Gate 1.41.2 fehlgeschlagen (${failures.length}):`); failures.forEach(item => console.error(`- ${item}`)); process.exit(1); }
-console.log('Identity-&-Settings-Gate 1.41.2 erfolgreich: native Auth-, Benutzer-, Sitzungs- und Settings-Routen, letzten-Admin-Schutz, Sitzungs-Eigentümerprüfung und Settings-Allowlist geprüft.');
+if (failures.length) { console.error(`Identity-&-Settings-Gate 1.43.0 fehlgeschlagen (${failures.length}):`); failures.forEach(item => console.error(`- ${item}`)); process.exit(1); }
+console.log('Identity-&-Settings-Gate 1.43.0 erfolgreich: native Auth-, Benutzer-, Sitzungs- und Settings-Routen, letzten-Admin-Schutz, Sitzungs-Eigentümerprüfung und Settings-Allowlist geprüft.');
diff --git a/tools/verify-initial-disabled-modules-1.41.2.mjs b/tools/verify-initial-disabled-modules-1.41.2.mjs
index ccb9faf..3ae9733 100644
--- a/tools/verify-initial-disabled-modules-1.41.2.mjs
+++ b/tools/verify-initial-disabled-modules-1.41.2.mjs
@@ -1,9 +1,12 @@
-import { mkdtempSync, rmSync } from 'node:fs';
+import { mkdtempSync } from 'node:fs';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
+import { closeVendooDatabase, removeTempDirectory } from './test-runtime-cleanup.mjs';
 
-const temp = mkdtempSync(join(tmpdir(), 'vendoo-module-defaults-'));
+const tempPrefix = process.env.VENDOO_TEST_TEMP_PREFIX || 'vendoo-module-defaults-';
+const temp = mkdtempSync(join(tmpdir(), tempPrefix));
 process.env.VENDOO_DATA_DIR = temp;
+process.env.VENDOO_DB_PATH = join(temp, 'db', 'vendoo.db');
 process.env.VENDOO_CONFIG_PATH = join(temp, 'config', 'vendoo.env');
 process.env.VENDOO_MODULE_STATE_PATH = join(temp, 'config', 'modules-state.json');
 process.env.VENDOO_MODULES_DIR = join(temp, 'modules');
@@ -11,21 +14,28 @@ process.env.VENDOO_INITIAL_DISABLED_MODULES = 'vendoo.flux-studio';
 
 const failures = [];
 const assert = (condition, message) => { if (!condition) failures.push(message); };
+
 try {
   const { createPlatformKernel } = await import('../app/kernel/platform-kernel.mjs');
-  const first = createPlatformKernel({ version: '1.41.2-test', hasPermission: () => true });
+  const first = createPlatformKernel({ version: '1.43.0-test', hasPermission: () => true });
   assert(first.modules.describe('vendoo.flux-studio')?.enabled === false, 'FLUX Studio ist beim ersten Start nicht deaktiviert');
+  assert(first.modules.describe('vendoo.product-image-tools')?.enabled === false, 'Produktbild Studio ist beim ersten Start nicht deaktiviert');
   assert(first.modules.describe('vendoo.deployments')?.enabled === true, 'Geschütztes Deployment-Modul ist nicht aktiviert');
   const { ModuleStateStore } = await import('../app/core/modules/module-state-store.mjs');
-  new ModuleStateStore(process.env.VENDOO_MODULE_STATE_PATH).setEnabled('vendoo.flux-studio', true, { source: 'test' });
-  const second = createPlatformKernel({ version: '1.41.2-test', hasPermission: () => true });
-  assert(second.modules.describe('vendoo.flux-studio')?.enabled === true, 'Gespeicherte Admin-Aktivierung wird durch Initialwert überschrieben');
+  const stateStore = new ModuleStateStore(process.env.VENDOO_MODULE_STATE_PATH);
+  stateStore.setEnabled('vendoo.flux-studio', true, { source: 'test' });
+  stateStore.setEnabled('vendoo.product-image-tools', true, { source: 'test' });
+  const second = createPlatformKernel({ version: '1.43.0-test', hasPermission: () => true });
+  assert(second.modules.describe('vendoo.flux-studio')?.enabled === true, 'Gespeicherte FLUX-Aktivierung wird durch Initialwert überschrieben');
+  assert(second.modules.describe('vendoo.product-image-tools')?.enabled === true, 'Gespeicherte Produktbild-Studio-Aktivierung wird durch Initialwert überschrieben');
 } finally {
-  rmSync(temp, { recursive: true, force: true });
+  await closeVendooDatabase({ failures, label: 'Initial-Modul-Testdatenbank' });
+  await removeTempDirectory(temp, { failures, label: 'Initial-Modul-Testordner' });
 }
+
 if (failures.length) {
-  console.error(`Initial-Module-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);
+  console.error(`Initial-Module-Gate 1.43.0 fehlgeschlagen (${failures.length}):`);
   failures.forEach(item => console.error(`- ${item}`));
   process.exit(1);
 }
-console.log('Initial-Module-Gate 1.41.2 erfolgreich: FLUX ist beim ersten Start aus und bleibt nach bewusster Admin-Aktivierung dauerhaft aktivierbar.');
+console.log('Initial-Module-Gate 1.43.0 erfolgreich: FLUX und Produktbild Studio sind beim ersten Start aus, bleiben nach bewusster Admin-Aktivierung dauerhaft aktivierbar und geben ihre temporäre SQLite-Datenbank sauber frei.');
diff --git a/tools/verify-initial-module-cleanup-regression-1.43.0.mjs b/tools/verify-initial-module-cleanup-regression-1.43.0.mjs
new file mode 100644
index 0000000..6497da5
--- /dev/null
+++ b/tools/verify-initial-module-cleanup-regression-1.43.0.mjs
@@ -0,0 +1,36 @@
+import { readdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import { spawnSync } from 'node:child_process';
+
+const root = resolve(import.meta.dirname, '..');
+const gate = resolve(root, 'tools', 'verify-initial-disabled-modules-1.41.2.mjs');
+const prefix = `vendoo-module-defaults-regression-${process.pid}-${Date.now()}-`;
+const failures = [];
+
+for (let attempt = 1; attempt <= 3; attempt += 1) {
+  const result = spawnSync(process.execPath, [gate], {
+    cwd: root,
+    env: { ...process.env, VENDOO_TEST_TEMP_PREFIX: prefix },
+    encoding: 'utf8',
+    timeout: 60_000,
+  });
+  if (result.error) failures.push(`Durchlauf ${attempt}: ${result.error.message}`);
+  if (result.status !== 0) {
+    failures.push(`Durchlauf ${attempt}: Exit-Code ${result.status}
+${result.stdout || ''}
+${result.stderr || ''}`.trim());
+  }
+}
+
+const leftovers = readdirSync(tmpdir(), { withFileTypes: true })
+  .filter(entry => entry.isDirectory() && entry.name.startsWith(prefix))
+  .map(entry => entry.name);
+if (leftovers.length) failures.push(`Temporäre Testordner wurden nicht entfernt: ${leftovers.join(', ')}`);
+
+if (failures.length) {
+  console.error(`Initial-Module-Cleanup-Regression 1.43.0 fehlgeschlagen (${failures.length}):`);
+  failures.forEach(item => console.error(`- ${item}`));
+  process.exit(1);
+}
+console.log('Initial-Module-Cleanup-Regression 1.43.0 erfolgreich: drei isolierte Durchläufe ohne offene SQLite-Datei oder Temp-Rest.');
diff --git a/tools/verify-installer-shell.mjs b/tools/verify-installer-shell.mjs
new file mode 100644
index 0000000..51d4bd2
--- /dev/null
+++ b/tools/verify-installer-shell.mjs
@@ -0,0 +1,189 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join, normalize, resolve, win32 } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const packageJson = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+const command = packageJson?.scripts?.['verify:installer-shell'] || '';
+const isWindowsHost = process.platform === 'win32' || process.env.VENDOO_TEST_WINDOWS_SHELL === '1';
+
+function fail(message) {
+  console.error(`Installer-Shell-Portabilitätsgate fehlgeschlagen: ${message}`);
+  process.exit(1);
+}
+
+if (/^\s*sh\s+/i.test(command)) {
+  fail('package.json darf den POSIX-Befehl sh nicht direkt voraussetzen.');
+}
+if (command !== 'node tools/verify-installer-shell.mjs') {
+  fail(`Unerwarteter npm-Vertrag: ${command}`);
+}
+
+const shellContract = readFileSync(join(root, 'tools', 'verify-installer-shell.sh'), 'utf8');
+for (const marker of [
+  'VENDOO_INSTALLER_SHELL_HOST',
+  'MINGW*|MSYS*|CYGWIN*',
+  'POSIX-Modus 0600',
+  'show_file',
+  'assert_env_permissions',
+  '--exclude=.git',
+]) {
+  if (!shellContract.includes(marker)) fail(`Shell-Testvertrag fehlt: ${marker}`);
+}
+
+function run(file, args, options = {}) {
+  return spawnSync(file, args, {
+    cwd: root,
+    encoding: 'utf8',
+    windowsHide: true,
+    maxBuffer: 16 * 1024 * 1024,
+    ...options,
+  });
+}
+
+function addCandidate(set, value) {
+  if (!value) return;
+  const candidate = normalize(value.replace(/^"|"$/g, '').trim());
+  if (candidate) set.add(candidate);
+}
+
+function addGitRootCandidates(set, gitRoot) {
+  if (!gitRoot) return;
+  addCandidate(set, join(gitRoot, 'bin', 'sh.exe'));
+  addCandidate(set, join(gitRoot, 'usr', 'bin', 'sh.exe'));
+}
+
+function pathApiFor(value) {
+  return /^[a-zA-Z]:[\\/]/.test(value) ? win32 : { normalize, dirname };
+}
+
+function deriveGitRootFromExecutable(executable) {
+  const raw = executable.replace(/^"|"$/g, '').trim();
+  const api = pathApiFor(raw);
+  const clean = api.normalize(raw);
+  const parent = api.dirname(clean);
+  const leaf = parent.toLowerCase().split(/[\\/]/).pop();
+  if (['cmd', 'bin', 'usr'].includes(leaf)) {
+    return api.dirname(parent);
+  }
+  return api.dirname(clean);
+}
+
+function deriveGitRootFromExecPath(execPath) {
+  const raw = execPath.replace(/^"|"$/g, '').trim();
+  const api = pathApiFor(raw);
+  const clean = api.normalize(raw);
+  const lowered = clean.toLowerCase().replace(/\\/g, '/');
+  for (const marker of ['/mingw64/', '/mingw32/', '/usr/libexec/', '/libexec/']) {
+    const index = lowered.indexOf(marker);
+    if (index > 0) return clean.slice(0, index);
+  }
+  return null;
+}
+
+function findWindowsGitBash() {
+  const candidates = new Set();
+  addCandidate(candidates, process.env.VENDOO_SH);
+  addCandidate(candidates, process.env.SHELL);
+
+  for (const base of [process.env.ProgramFiles, process.env['ProgramFiles(x86)'], process.env.LOCALAPPDATA]) {
+    if (!base) continue;
+    addGitRootCandidates(candidates, join(base, base === process.env.LOCALAPPDATA ? 'Programs' : '', 'Git'));
+  }
+
+  const whereGit = run('where.exe', ['git.exe']);
+  if (whereGit.status === 0) {
+    for (const line of whereGit.stdout.split(/\r?\n/).map((entry) => entry.trim()).filter(Boolean)) {
+      addGitRootCandidates(candidates, deriveGitRootFromExecutable(line));
+    }
+  }
+
+  const execPath = run('git.exe', ['--exec-path']);
+  if (execPath.status === 0) {
+    const gitRoot = deriveGitRootFromExecPath(execPath.stdout);
+    if (gitRoot) addGitRootCandidates(candidates, gitRoot);
+  }
+
+  const whereSh = run('where.exe', ['sh.exe']);
+  if (whereSh.status === 0) {
+    for (const line of whereSh.stdout.split(/\r?\n/).map((entry) => entry.trim()).filter(Boolean)) {
+      addCandidate(candidates, line);
+    }
+  }
+
+  return [...candidates].find((candidate) => existsSync(candidate)) || null;
+}
+
+// Regression contracts for common Git-for-Windows layouts.
+const standardRoot = deriveGitRootFromExecutable('C:\\Program Files\\Git\\cmd\\git.exe');
+if (standardRoot.toLowerCase() !== win32.normalize('C:\\Program Files\\Git').toLowerCase()) {
+  fail(`Git-Root aus cmd\\git.exe falsch abgeleitet: ${standardRoot}`);
+}
+const execRoot = deriveGitRootFromExecPath('C:\\Program Files\\Git\\mingw64\\libexec\\git-core');
+if (!execRoot || execRoot.toLowerCase() !== win32.normalize('C:\\Program Files\\Git').toLowerCase()) {
+  fail(`Git-Root aus git --exec-path falsch abgeleitet: ${execRoot}`);
+}
+
+let shell;
+if (isWindowsHost) {
+  shell = process.platform === 'win32' ? findWindowsGitBash() : 'sh';
+  if (!shell) {
+    fail('Git Bash wurde trotz installiertem Git nicht gefunden. Erwartet wird bin\\sh.exe oder usr\\bin\\sh.exe innerhalb der Git-for-Windows-Installation.');
+  }
+} else {
+  const probe = run('sh', ['-c', 'printf vendoo-shell-ok']);
+  if (probe.status !== 0 || probe.stdout !== 'vendoo-shell-ok') {
+    fail('Eine funktionsfähige POSIX-Shell wurde nicht gefunden.');
+  }
+  shell = 'sh';
+}
+
+if (isWindowsHost) {
+  for (const script of ['setup.sh', 'tools/verify-installer-shell.sh']) {
+    const syntax = run(shell, ['-n', script], {
+      env: {
+        ...process.env,
+        NO_COLOR: '1',
+        FORCE_COLOR: '0',
+        MSYS2_ARG_CONV_EXCL: '*',
+      },
+      timeout: 60_000,
+    });
+    if (syntax.stdout) process.stdout.write(syntax.stdout);
+    if (syntax.stderr) process.stderr.write(syntax.stderr);
+    if (syntax.error) fail(`Shell-Syntaxprüfung konnte nicht gestartet werden (${script}): ${syntax.error.message}`);
+    if (syntax.signal) fail(`Shell-Syntaxprüfung wurde durch Signal ${syntax.signal} beendet (${script}).`);
+    if (syntax.status !== 0) {
+      fail(`Shell-Syntaxprüfung fehlgeschlagen (${script}, Exit-Code ${syntax.status}). Verwendete Shell: ${shell}`);
+    }
+  }
+  console.log('Installer-Shell-Portabilitätsgate erfolgreich: Git Bash hat setup.sh und den Linux-Funktionstest syntaktisch geprüft; die funktionale Docker-/NAS-/VPS-Simulation läuft im verpflichtenden Linux-CI-Gate.');
+  process.exit(0);
+}
+
+const result = run(shell, ['tools/verify-installer-shell.sh'], {
+  env: {
+    ...process.env,
+    NO_COLOR: '1',
+    FORCE_COLOR: '0',
+    VENDOO_INSTALLER_SHELL_HOST: 'posix',
+  },
+  timeout: 180_000,
+});
+
+if (result.stdout) process.stdout.write(result.stdout);
+if (result.stderr) process.stderr.write(result.stderr);
+if (result.error) fail(`Shell-Gate konnte nicht gestartet werden: ${result.error.message}`);
+if (result.signal) fail(`Shell-Gate wurde durch Signal ${result.signal} beendet.`);
+if (result.status !== 0) {
+  const stdout = String(result.stdout || '').trim();
+  const stderr = String(result.stderr || '').trim();
+  const diagnostics = [
+    stderr ? `Shell-Fehlerausgabe:\n${stderr}` : '',
+    stdout ? `Shell-Standardausgabe:\n${stdout}` : '',
+  ].filter(Boolean).join('\n\n');
+  fail(`Shell-Gate endete mit Exit-Code ${result.status}. Verwendete Shell: ${shell}${diagnostics ? `\n${diagnostics}` : ''}`);
+}
+
+console.log(`Installer-Shell-Portabilitätsgate erfolgreich: ${shell} führte die vollständige Linux-/NAS-/VPS-Simulation mit strikter POSIX-Rechteprüfung aus.`);
diff --git a/tools/verify-installer-shell.sh b/tools/verify-installer-shell.sh
index a0ba38a..ac85f11 100644
--- a/tools/verify-installer-shell.sh
+++ b/tools/verify-installer-shell.sh
@@ -3,9 +3,80 @@ set -eu
 
 ROOT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
 TMP_DIR=$(mktemp -d)
+HOST_KIND=${VENDOO_INSTALLER_SHELL_HOST:-auto}
+
 cleanup() { rm -rf "$TMP_DIR"; }
 trap cleanup EXIT INT TERM
 
+fail() {
+  printf '%s\n' "[FEHLER] $*" >&2
+  exit 1
+}
+
+show_file() {
+  label=$1
+  file=$2
+  printf '%s\n' "--- $label: $file ---" >&2
+  if [ -f "$file" ]; then cat "$file" >&2; else printf '%s\n' '(Datei fehlt)' >&2; fi
+  printf '%s\n' "--- Ende $label ---" >&2
+}
+
+assert_file() {
+  file=$1
+  label=$2
+  [ -f "$file" ] || fail "$label fehlt: $file"
+}
+
+assert_dir() {
+  dir=$1
+  label=$2
+  [ -d "$dir" ] || fail "$label fehlt: $dir"
+}
+
+assert_contains() {
+  pattern=$1
+  file=$2
+  label=$3
+  if ! grep -q "$pattern" "$file"; then
+    show_file "$label" "$file"
+    fail "$label enthält das erwartete Muster nicht: $pattern"
+  fi
+}
+
+assert_token() {
+  file=$1
+  if ! grep -Eq '^VENDOO_SETUP_TOKEN=[0-9a-f]{64}$' "$file"; then
+    show_file '.env' "$file"
+    fail 'VENDOO_SETUP_TOKEN fehlt oder ist nicht 64-stellig hexadezimal.'
+  fi
+}
+
+is_windows_shell() {
+  if [ "$HOST_KIND" = windows ]; then return 0; fi
+  if [ "$HOST_KIND" = posix ]; then return 1; fi
+  case "$(uname -s 2>/dev/null || printf unknown)" in
+    MINGW*|MSYS*|CYGWIN*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+assert_env_permissions() {
+  file=$1
+  if is_windows_shell; then
+    # Git Bash runs on NTFS and cannot reliably represent POSIX mode 0600.
+    # The Linux/NAS/VPS branch below remains strict. On Windows we verify
+    # that the installer still contains and executes the chmod hardening.
+    assert_contains 'chmod 600 "$ENV_FILE"' "$ROOT_DIR/setup.sh" 'setup.sh-Härtung'
+    assert_contains 'chmod 600 "$tmp"' "$ROOT_DIR/setup.sh" 'setup.sh-Härtung'
+    [ -r "$file" ] && [ -w "$file" ] || fail '.env ist unter Git Bash nicht les- und schreibbar.'
+    printf '%s\n' '[INFO] NTFS/Git-Bash erkannt: POSIX-Modus 0600 wird statisch geprüft; exakte Modusprüfung erfolgt auf Linux/NAS/VPS.'
+    return 0
+  fi
+
+  mode=$(stat -c '%a' "$file" 2>/dev/null || true)
+  [ "$mode" = 600 ] || fail ".env besitzt auf POSIX nicht Modus 600, sondern: ${mode:-unbekannt}"
+}
+
 mkdir -p "$TMP_DIR/bin"
 cat > "$TMP_DIR/bin/docker" <<'EOF'
 #!/usr/bin/env sh
@@ -23,32 +94,43 @@ run_mode() {
   input=$2
   dir="$TMP_DIR/$name"
   mkdir -p "$dir"
-  tar -C "$ROOT_DIR" --exclude=node_modules --exclude=release-output -cf - . | tar -C "$dir" -xf -
+
+  if ! tar -C "$ROOT_DIR" --exclude=.git --exclude=node_modules --exclude=release-output -cf - . | tar -C "$dir" -xf -; then
+    fail "Release-Kopie für Modus $name konnte nicht erstellt werden."
+  fi
+
   FAKE_DOCKER_LOG="$dir/docker.log"
   export FAKE_DOCKER_LOG
-  printf '%b' "$input" | PATH="$TMP_DIR/bin:$PATH" sh "$dir/setup.sh" install > "$dir/out.log" 2>&1
+  if ! printf '%b' "$input" | PATH="$TMP_DIR/bin:$PATH" sh "$dir/setup.sh" install > "$dir/out.log" 2>&1; then
+    show_file "setup.sh-Ausgabe ($name)" "$dir/out.log"
+    show_file "Docker-Aufrufe ($name)" "$dir/docker.log"
+    fail "setup.sh ist im Modus $name fehlgeschlagen."
+  fi
 
-  grep -q 'keine Datei musste manuell bearbeitet werden' "$dir/out.log"
-  grep -q '^VENDOO_SETUP_TOKEN=[0-9a-f]\{64\}$' "$dir/.env"
-  grep -q 'docker compose build --pull' "$dir/docker.log"
-  grep -q 'docker compose up -d --remove-orphans' "$dir/docker.log"
-  test "$(stat -c '%a' "$dir/.env")" = 600
+  assert_file "$dir/out.log" "Installer-Ausgabe ($name)"
+  assert_file "$dir/.env" ".env ($name)"
+  assert_file "$dir/docker.log" "Docker-Protokoll ($name)"
+  assert_contains 'keine Datei musste manuell bearbeitet werden' "$dir/out.log" "Installer-Ausgabe ($name)"
+  assert_token "$dir/.env"
+  assert_contains 'docker compose build --pull' "$dir/docker.log" "Docker-Protokoll ($name)"
+  assert_contains 'docker compose up -d --remove-orphans' "$dir/docker.log" "Docker-Protokoll ($name)"
+  assert_env_permissions "$dir/.env"
 }
 
 run_mode docker '1\n8124\nnein\n'
-grep -q '^VENDOO_PUBLISH_ADDRESS=127.0.0.1$' "$TMP_DIR/docker/.env"
-grep -q '^VENDOO_BIND_HOST=0.0.0.0$' "$TMP_DIR/docker/.env"
+assert_contains '^VENDOO_PUBLISH_ADDRESS=127.0.0.1$' "$TMP_DIR/docker/.env" 'Docker-.env'
+assert_contains '^VENDOO_BIND_HOST=0.0.0.0$' "$TMP_DIR/docker/.env" 'Docker-.env'
 
 run_mode nas '2\n9124\nhttp://192.168.1.50:9124\nnein\n'
-test -d "$TMP_DIR/nas/runtime/config"
-test -d "$TMP_DIR/nas/runtime/db"
-grep -q '^VENDOO_PUBLISH_ADDRESS=0.0.0.0$' "$TMP_DIR/nas/.env"
-grep -q '^PUBLIC_BASE_URL=http://192.168.1.50:9124$' "$TMP_DIR/nas/.env"
+assert_dir "$TMP_DIR/nas/runtime/config" 'NAS-Konfigurationsordner'
+assert_dir "$TMP_DIR/nas/runtime/db" 'NAS-Datenbankordner'
+assert_contains '^VENDOO_PUBLISH_ADDRESS=0.0.0.0$' "$TMP_DIR/nas/.env" 'NAS-.env'
+assert_contains '^PUBLIC_BASE_URL=http://192.168.1.50:9124$' "$TMP_DIR/nas/.env" 'NAS-.env'
 
 run_mode vps '3\n8124\nvendoo.example.invalid\nnein\n'
-grep -q '^VENDOO_DOMAIN=vendoo.example.invalid$' "$TMP_DIR/vps/.env"
-grep -q '^PUBLIC_BASE_URL=https://vendoo.example.invalid$' "$TMP_DIR/vps/.env"
-grep -q '^VENDOO_COOKIE_SECURE=true$' "$TMP_DIR/vps/.env"
-grep -q '^VENDOO_TRUST_PROXY=true$' "$TMP_DIR/vps/.env"
+assert_contains '^VENDOO_DOMAIN=vendoo.example.invalid$' "$TMP_DIR/vps/.env" 'VPS-.env'
+assert_contains '^PUBLIC_BASE_URL=https://vendoo.example.invalid$' "$TMP_DIR/vps/.env" 'VPS-.env'
+assert_contains '^VENDOO_COOKIE_SECURE=true$' "$TMP_DIR/vps/.env" 'VPS-.env'
+assert_contains '^VENDOO_TRUST_PROXY=true$' "$TMP_DIR/vps/.env" 'VPS-.env'
 
-printf '%s\n' 'Shell-Installer-Gate erfolgreich: Docker-, NAS- und VPS-Dialog erzeugen valide, geschützte Konfiguration ohne manuelle Dateibearbeitung.'
+printf '%s\n' 'Shell-Installer-Gate erfolgreich: Docker-, NAS- und VPS-Dialog erzeugen valide Konfiguration; POSIX-Dateirechte werden auf Linux/NAS/VPS strikt geprüft.'
diff --git a/tools/verify-module-navigation-generator-1.43.0.mjs b/tools/verify-module-navigation-generator-1.43.0.mjs
new file mode 100644
index 0000000..053e28e
--- /dev/null
+++ b/tools/verify-module-navigation-generator-1.43.0.mjs
@@ -0,0 +1,25 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root = resolve(import.meta.dirname, '..');
+const must = (condition, message) => { if (!condition) throw new Error(message); };
+const read = path => readFileSync(resolve(root, path), 'utf8');
+const html = read('public/index.html');
+const app = read('public/app.js');
+const server = read('server.mjs');
+const catalog = read('app/modules/catalog.mjs');
+const moduleJson = JSON.parse(read('app/modules/product-image-tools/module.json'));
+must(existsSync(resolve(root, 'app/modules/product-image-tools/index.mjs')), 'Produktbild-Modulindex fehlt.');
+must(moduleJson.id === 'vendoo.product-image-tools' && moduleJson.status === 'native' && moduleJson.defaultEnabled === false, 'Produktbild Studio muss nativ, optional und initial deaktiviert sein.');
+must(catalog.includes('createProductImageToolsModule()'), 'Produktbild Studio ist nicht im Built-in-Katalog registriert.');
+must(server.includes("path: '/api/modules/navigation'"), 'Öffentlicher authentifizierter Modulstatus-Endpunkt fehlt.');
+must(server.includes("return 'vendoo.product-image-tools'"), 'AI-Model-Routen sind nicht dem Produktbild-Modul zugeordnet.');
+for (const id of ['vendoo.ai','vendoo.quality','vendoo.publishing','vendoo.flux-studio','vendoo.listings','vendoo.inventory','vendoo.media','vendoo.module-manager','vendoo.settings','vendoo.users']) must(html.includes(`data-module="${id}"`), `Navigationsbindung fehlt: ${id}`);
+must(html.includes('class="generator-commandbar"') && html.includes('id="generate-btn"') && html.includes('id="save-btn"'), 'Dauerhaft sichtbare Generator-Aktionsleiste fehlt.');
+must((html.match(/id="generate-btn"/g) || []).length === 1, 'generate-btn muss eindeutig sein.');
+must((html.match(/id="save-btn"/g) || []).length === 1, 'save-btn muss eindeutig sein.');
+must(html.includes('data-module-panel="vendoo.product-image-tools"'), 'Produktbild Studio ist nicht als Modul-Panel markiert.');
+must(!html.includes('<h4>Produktbild-Werkzeuge</h4>'), 'Alte Produktbild-Werkzeuge-Bezeichnung ist noch vorhanden.');
+must(app.includes('applyModuleNavigation') && app.includes("vendoo:modules-changed"), 'Frontend reagiert nicht auf Modulstatusänderungen.');
+must(app.indexOf("api('GET', '/api/modules/navigation')") < app.indexOf("aiEnabled ? api('GET', '/api/providers')"), 'Modulstatus muss vor modulgeschützten APIs geladen werden.');
+must(app.includes("saveButton.disabled = false") && app.includes("saveButton.disabled = true"), 'Speichern-Status ist nicht an den Generatorzustand gebunden.');
+console.log('OK: Modulnavigation, optionales Produktbild Studio und Listing-Studio-Aktionsleiste 1.43.0 verifiziert.');
diff --git a/tools/verify-one-click-updater-1.42.0.mjs b/tools/verify-one-click-updater-1.42.0.mjs
new file mode 100644
index 0000000..88ef881
--- /dev/null
+++ b/tools/verify-one-click-updater-1.42.0.mjs
@@ -0,0 +1,17 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root = resolve(import.meta.dirname, '..');
+const read = path => readFileSync(resolve(root, path), 'utf8');
+const expect = (text, marker, label) => { if (!text.includes(marker)) throw new Error(`Ein-Klick-Updater-Gate: ${label} fehlt (${marker}).`); };
+const bat = read('UPDATE_VENDOO.bat');
+const ps = read('scripts/update-vendoo.ps1');
+const workflow = read('.github/workflows/vendoo-production-deploy.yml');
+const docs = read('docs/EIN_KLICK_UPDATE_1_42_0.md');
+const legacy = read('GitHub-Deploy-Assistent.bat');
+for (const marker of ['scripts\\update-vendoo.ps1','ExecutionPolicy Bypass','pause']) expect(bat, marker, `BAT ${marker}`);
+for (const marker of ["TargetVersion = '1.42.0'","Repository = 'Masterluke77/vendoo'",'prepare-git-staging.mjs',"npm.cmd' @('run','verify:all')","pr','create'","pr','merge'",'COOLIFY_DEPLOY_WEBHOOK_URL',"workflow','run",'/readyz']) expect(ps, marker, `PowerShell ${marker}`);
+for (const marker of ['workflow_dispatch:','concurrency:','cancel-in-progress: false','secrets.COOLIFY_DEPLOY_WEBHOOK_URL','--request GET','/readyz?','"$version" == "$TARGET_VERSION"','/healthz?']) expect(workflow, marker, `Workflow ${marker}`);
+for (const marker of ['UPDATE_VENDOO.bat','npm run verify:all','/app/data','GitHub Actions Secret']) expect(docs, marker, `Dokumentation ${marker}`);
+expect(legacy,'UPDATE_VENDOO.bat','Kompatibilitätsstarter');
+if (/COOLIFY_DEPLOY_WEBHOOK_URL\s*=\s*https?:\/\//i.test(ps + workflow)) throw new Error('Ein konkreter Coolify-Webhook darf nicht im Source stehen.');
+console.log('Ein-Klick-Updater-Gate 1.42.0 erfolgreich.');
diff --git a/tools/verify-one-click-updater-1.43.0.mjs b/tools/verify-one-click-updater-1.43.0.mjs
new file mode 100644
index 0000000..4be26a3
--- /dev/null
+++ b/tools/verify-one-click-updater-1.43.0.mjs
@@ -0,0 +1 @@
+import './verify-production-updater-2.0.mjs';
diff --git a/tools/verify-platform-architecture-1.41.2.mjs b/tools/verify-platform-architecture-1.41.2.mjs
index 7e9b43c..5b79235 100644
--- a/tools/verify-platform-architecture-1.41.2.mjs
+++ b/tools/verify-platform-architecture-1.41.2.mjs
@@ -1,10 +1,20 @@
-import { readFileSync } from 'node:fs';
+import { mkdtempSync, readFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { tmpdir } from 'node:os';
+import { closeVendooDatabase, removeTempDirectory } from './test-runtime-cleanup.mjs';
 import { ModuleRegistry } from '../app/kernel/module-registry.mjs';
 import { PolicyEngine } from '../app/kernel/policy-engine.mjs';
 import { RouteRegistry } from '../app/kernel/route-registry.mjs';
-import { loadBuiltInModules } from '../app/modules/catalog.mjs';
+
+const tempPrefix = process.env.VENDOO_TEST_TEMP_PREFIX || 'vendoo-platform-architecture-';
+const temp = mkdtempSync(join(tmpdir(), tempPrefix));
+process.env.NODE_ENV = 'test';
+process.env.VENDOO_DATA_DIR = temp;
+process.env.VENDOO_DB_PATH = join(temp, 'db', 'vendoo.db');
+process.env.VENDOO_CONFIG_PATH = join(temp, 'config', 'vendoo.env');
+process.env.VENDOO_MODULE_STATE_PATH = join(temp, 'config', 'modules-state.json');
+process.env.VENDOO_MODULES_DIR = join(temp, 'modules');
 
 const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const read = rel => readFileSync(join(root, rel), 'utf8');
@@ -12,23 +22,27 @@ const failures = [];
 const assert = (condition, message) => { if (!condition) failures.push(message); };
 const expectThrow = async (fn, code, message) => { try { await fn(); failures.push(message); } catch (error) { if (error.code !== code) failures.push(`${message} (${error.code || error.message})`); } };
 
-const pkg = JSON.parse(read('package.json'));
-assert(pkg.version === '1.41.2', `package.json ist ${pkg.version}`);
+try {
+  const { loadBuiltInModules } = await import('../app/modules/catalog.mjs');
+  const pkg = JSON.parse(read('package.json'));
+assert(pkg.version === '1.43.0', `package.json ist ${pkg.version}`);
 const modules = loadBuiltInModules();
-assert(modules.length === 17, `Erwartet 17 Module, erhalten ${modules.length}`);
+assert(modules.length === 18, `Erwartet 18 Module, erhalten ${modules.length}`);
 const nativeIds = modules.filter(item => item.manifest.status === 'native').map(item => item.manifest.id).sort();
 for (const id of ['vendoo.auth','vendoo.users','vendoo.sessions','vendoo.settings','vendoo.security','vendoo.themes','vendoo.listings','vendoo.inventory','vendoo.media','vendoo.ai','vendoo.flux-studio','vendoo.quality','vendoo.publishing','vendoo.module-manager','vendoo.deployments']) {
   assert(nativeIds.includes(id), `Natives Modul fehlt: ${id}`);
 }
-assert(nativeIds.length === 15, `Erwartet 15 native Module, erhalten ${nativeIds.length}`);
+assert(nativeIds.length === 16, `Erwartet 16 native Module, erhalten ${nativeIds.length}`);
 assert(modules.filter(item => item.manifest.status === 'legacy-bridge').length === 2, 'Es müssen 2 Legacy-Bridges verbleiben');
+const productImages = modules.find(item => item.manifest.id === 'vendoo.product-image-tools')?.manifest;
+assert(productImages?.status === 'native' && productImages?.defaultEnabled === false, 'Produktbild Studio muss nativ und initial deaktiviert sein');
 
 const registry = new ModuleRegistry();
 for (const module of modules) registry.register(module);
 let realGraph = null;
 try { realGraph = registry.validateGraph(); } catch (error) { failures.push(`Realer Modulgraph ungültig: ${error.code || error.message} – ${error.message}`); }
-assert(registry.snapshot().length === 17, 'Modulregistrierung unvollständig');
-assert(realGraph?.enabledModules.length === 17, 'Nicht alle 17 Module sind im realen Graph auflösbar');
+assert(registry.snapshot().length === 18, 'Modulregistrierung unvollständig');
+assert(realGraph?.enabledModules.length === 18, 'Nicht alle 18 registrierten Module sind im realen Graph auflösbar');
 assert(realGraph?.capabilities.includes('settings.configuration'), 'settings.configuration fehlt im realen Capability-Graph');
 
 const cycle = new ModuleRegistry();
@@ -47,17 +61,27 @@ let status = 0; let payload = null;
 await fake.handler({ user:{id:1}, requestId:'test' }, { headersSent:false, status(code){status=code;return this;}, json(value){payload=value;} }, () => {});
 assert(status === 503 && payload?.code === 'MODULE_DISABLED', `Deaktiviertes Modul ergab ${status}`);
 
+const moduleContract = read('app/kernel/module-contract.mjs');
+assert(moduleContract.includes('defaultEnabled: manifest.defaultEnabled !== false'), 'Manifestvertrag für defaultEnabled fehlt');
+const moduleSchema = JSON.parse(read('app/contracts/module.schema.json'));
+assert(moduleSchema.properties.defaultEnabled?.type === 'boolean', 'JSON-Schema für defaultEnabled fehlt');
+
 const kernel = read('app/kernel/platform-kernel.mjs');
 for (const marker of ["policies.register('modules.manage'", "policies.register('updates.manage'", "features.define('deployments.coolify'", "features.define('modules.manager'", "features.define('publishing.native-module'", 'moduleStateStore', 'modulePackageStore']) assert(kernel.includes(marker), `Kernelvertrag fehlt: ${marker}`);
 const catalog = read('app/modules/catalog.mjs');
-for (const marker of ['createAiModule','createFluxStudioModule','createQualityModule','createPublishingModule','createModuleManagerModule','createDeploymentsModule']) assert(catalog.includes(marker), `Modulkatalog fehlt: ${marker}`);
+for (const marker of ['createAiModule','createFluxStudioModule','createQualityModule','createPublishingModule','createModuleManagerModule','createDeploymentsModule','createProductImageToolsModule']) assert(catalog.includes(marker), `Modulkatalog fehlt: ${marker}`);
 assert(catalog.includes("const legacyModuleNames = ['system', 'operations']"), 'Legacy-Liste ist nicht auf System und Operations begrenzt');
 const boundaries = JSON.parse(read('app/architecture-boundaries.json'));
 assert(boundaries.architecture === 'modular-monolith', 'Architekturtyp wurde verändert');
 
+} finally {
+  await closeVendooDatabase({ failures, label: 'Architektur-Testdatenbank' });
+  await removeTempDirectory(temp, { failures, label: 'Architektur-Testordner' });
+}
+
 if (failures.length) {
-  console.error(`Platform-Architecture-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);
+  console.error(`Platform-Architecture-Gate 1.43.0 fehlgeschlagen (${failures.length}):`);
   failures.forEach(item => console.error(`- ${item}`));
   process.exit(1);
 }
-console.log('Platform-Architecture-Gate 1.41.2 erfolgreich: 17 Module, 15 native Module, 2 Legacy-Bridges, dynamische Zustände und Modul-Routensperre geprüft.');
+console.log('Platform-Architecture-Gate 1.43.0 erfolgreich: 18 Module, 16 native Module, 2 Legacy-Bridges, davon 1 optionales Modul, dynamische Zustände und Modul-Routensperre geprüft.');
diff --git a/tools/verify-powershell-parser.ps1 b/tools/verify-powershell-parser.ps1
new file mode 100644
index 0000000..9723138
--- /dev/null
+++ b/tools/verify-powershell-parser.ps1
@@ -0,0 +1,31 @@
+[CmdletBinding()]
+param()
+
+Set-StrictMode -Version 2.0
+$ErrorActionPreference = 'Stop'
+$root = Split-Path -Parent $PSScriptRoot
+$excludedParts = @('\node_modules\','\.git\','\runtime\','\logs\','\data\','\backups\')
+$files = Get-ChildItem -LiteralPath $root -Recurse -File | Where-Object {
+  $_.Extension -in @('.ps1','.psm1','.psd1')
+} | Where-Object {
+  $full = $_.FullName
+  -not (@($excludedParts | Where-Object { $full.IndexOf($_,[StringComparison]::OrdinalIgnoreCase) -ge 0 }).Count)
+}
+
+$failures = New-Object System.Collections.Generic.List[string]
+foreach ($file in $files) {
+  $tokens = $null
+  $errors = $null
+  [void][System.Management.Automation.Language.Parser]::ParseFile($file.FullName,[ref]$tokens,[ref]$errors)
+  foreach ($parseError in @($errors)) {
+    $failures.Add(("{0}:{1}:{2} {3}" -f $parseError.Extent.File,$parseError.Extent.StartLineNumber,$parseError.Extent.StartColumnNumber,$parseError.Message))
+  }
+}
+
+if ($failures.Count -gt 0) {
+  Write-Error ("Windows-PowerShell-Parser-Gate fehlgeschlagen ({0} Fehler):{1}{2}" -f $failures.Count,[Environment]::NewLine,(@($failures) -join [Environment]::NewLine))
+  exit 1
+}
+
+Write-Host ("OK: Windows PowerShell {0} hat {1} PowerShell-Dateien ohne Parserfehler akzeptiert." -f $PSVersionTable.PSVersion,$files.Count)
+exit 0
diff --git a/tools/verify-powershell-static.mjs b/tools/verify-powershell-static.mjs
new file mode 100644
index 0000000..a546f15
--- /dev/null
+++ b/tools/verify-powershell-static.mjs
@@ -0,0 +1,49 @@
+import { readFileSync, readdirSync } from 'node:fs';
+import { extname, join, relative, resolve } from 'node:path';
+
+const root = resolve(import.meta.dirname, '..');
+const ignored = new Set(['node_modules', '.git', 'runtime', 'logs', 'data', 'backups']);
+const files = [];
+function walk(dir) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (ignored.has(entry.name)) continue;
+    const full = join(dir, entry.name);
+    if (entry.isDirectory()) walk(full);
+    else if (['.ps1', '.psm1', '.psd1'].includes(extname(entry.name).toLowerCase())) files.push(full);
+  }
+}
+walk(root);
+
+const allowedScopes = new Set(['global','local','script','private','using','env','function','variable','alias']);
+const failures = [];
+for (const file of files) {
+  const raw = readFileSync(file);
+  if (!(raw[0] === 0xef && raw[1] === 0xbb && raw[2] === 0xbf)) {
+    failures.push(`${relative(root,file)}: Windows-PowerShell-Datei besitzt keine UTF-8-BOM.`);
+  }
+  const text = raw.toString('utf8');
+  const lines = text.split(/\r?\n/);
+  lines.forEach((line,index) => {
+    const regex = /\$([A-Za-z_][A-Za-z0-9_]*):/g;
+    for (const match of line.matchAll(regex)) {
+      if (!allowedScopes.has(match[1].toLowerCase())) {
+        failures.push(`${relative(root,file)}:${index+1}: ungültiger/mehrdeutiger Variablenverweis "${match[0]}"; ${'${'+match[1]+'}'}: verwenden.`);
+      }
+    }
+  });
+}
+
+const required = [
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'tools/verify-powershell-parser.ps1'
+];
+for (const file of required) {
+  try { readFileSync(join(root,file)); } catch { failures.push(`Pflichtdatei fehlt: ${file}`); }
+}
+
+if (failures.length) {
+  console.error(`PowerShell-Static-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log(`OK: PowerShell-Static-Gate – ${files.length} Dateien, UTF-8-BOM und Variablen-Doppelpunkt-Regression geprüft.`);
diff --git a/tools/verify-production-operations-1.42.0.mjs b/tools/verify-production-operations-1.42.0.mjs
new file mode 100644
index 0000000..06c6595
--- /dev/null
+++ b/tools/verify-production-operations-1.42.0.mjs
@@ -0,0 +1,90 @@
+import { readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import {
+  DEPLOYMENT_STATES,
+  ACTIVE_DEPLOYMENT_STATES,
+  canTransitionDeployment,
+  isActiveDeploymentState,
+} from '../app/modules/deployments/state-machine.mjs';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const read = path => readFileSync(join(root, path), 'utf8');
+const failures = [];
+const assert = (condition, message) => { if (!condition) failures.push(message); };
+const contains = (file, markers) => {
+  const source = read(file);
+  for (const marker of markers) assert(source.includes(marker), `${file}: Vertrag fehlt: ${marker}`);
+  return source;
+};
+
+const pkg = JSON.parse(read('package.json'));
+assert(pkg.version === '1.43.0', `package.json ist ${pkg.version}`);
+assert(pkg.scripts['verify:production-operations']?.includes('verify-production-operations-1.42.0.mjs'), 'NPM-Gate für Production Operations fehlt');
+
+assert(DEPLOYMENT_STATES.length === 10, `State-Machine hat ${DEPLOYMENT_STATES.length} statt 10 Zustände`);
+for (const state of ['checking','backup_pending','backup_running','backup_verified','deploy_requested','deploy_running','health_wait','succeeded','failed','rollback_required']) {
+  assert(DEPLOYMENT_STATES.includes(state), `Zustand fehlt: ${state}`);
+}
+for (const [from, to] of [
+  ['checking','backup_pending'], ['backup_running','backup_verified'], ['backup_verified','deploy_requested'],
+  ['deploy_requested','deploy_running'], ['deploy_running','health_wait'], ['health_wait','succeeded'],
+  ['health_wait','rollback_required'], ['rollback_required','failed'],
+]) assert(canTransitionDeployment(from, to), `Legaler Übergang blockiert: ${from} -> ${to}`);
+for (const [from, to] of [['checking','succeeded'], ['succeeded','deploy_requested'], ['failed','checking'], ['rollback_required','succeeded']]) {
+  assert(!canTransitionDeployment(from, to), `Illegaler Übergang erlaubt: ${from} -> ${to}`);
+}
+assert(ACTIVE_DEPLOYMENT_STATES.includes('rollback_required'), 'Rollbackbedarf blockiert keine Folgeaufträge');
+assert(isActiveDeploymentState('health_wait') && !isActiveDeploymentState('succeeded'), 'Aktivstatus ist fehlerhaft');
+
+contains('lib/db.mjs', [
+  'CREATE TABLE IF NOT EXISTS deployment_runs', 'idempotency_key TEXT NOT NULL UNIQUE',
+  'CREATE TABLE IF NOT EXISTS deployment_events', 'CREATE TABLE IF NOT EXISTS backup_verifications',
+  'CREATE TABLE IF NOT EXISTS production_checks', "production-operations-1.42.0",
+]);
+const repository = contains('app/modules/deployments/repository.mjs', [
+  'DEPLOYMENT_ALREADY_ACTIVE', 'findByIdempotencyKey', 'recordBackupVerification',
+  'createProductionCheck', 'canTransitionDeployment',
+]);
+assert(!repository.includes('DELETE FROM deployment_runs'), 'Deployment-Repository löscht Verlauf');
+
+const service = contains('app/modules/deployments/service.mjs', [
+  "input.confirmation !== 'DEPLOY'", "input.confirmation !== 'CONFIRM'",
+  'verifyStoredBackup(backup.id)', 'DEPLOYMENT_BACKUP_INVALID', 'DEPLOYMENT_TARGET_NOT_APPROVED',
+  'UPDATE_CHECKSUM_MISSING', 'UPDATE_URL_INSECURE', 'deployment_status_endpoint',
+  'probePublicReadiness', 'targetMatches', 'rollback_required', 'runProductionCheck',
+  'VENDOO_COOLIFY_AUTO_DEPLOY', 'docker_socket_access: false',
+]);
+for (const forbidden of ['docker.sock', 'git pull', 'npm install', 'docker compose', 'child_process']) {
+  assert(!service.toLowerCase().includes(forbidden), `Deployment-Service enthält verbotenen Selbstupdate-/Hostzugriff: ${forbidden}`);
+}
+
+contains('app/modules/deployments/routes.mjs', [
+  "policy: 'updates.manage'", "csrf: true", '/api/admin/deployment/runs',
+  '/api/admin/deployment/runs/:id/refresh', '/api/admin/deployment/runs/:id/confirm',
+  '/api/admin/deployment/production-check', "req.get('Idempotency-Key')",
+]);
+contains('server.mjs', ['verifyStoredBackup,', 'getPlatformSnapshot: () => platformKernel.snapshot()', 'registerDeploymentRoutes']);
+contains('public/index.html', [
+  'deployment-production-overview', 'deployment-production-check', 'deployment-status-endpoint',
+  'deployment-target-version', 'deployment-run-list', 'content="1.43.0"',
+]);
+contains('public/app.js', [
+  "const VENDOO_UI_BUILD = '1.43.0';", 'deploymentStateLabel', 'data-deployment-refresh',
+  'data-deployment-confirm', 'data-deployment-resolve', 'idempotency_key',
+]);
+contains('.env.example', [
+  'COOLIFY_DEPLOYMENT_STATUS_ENDPOINT=', 'VENDOO_DEPLOY_TIMEOUT_SECONDS=900',
+  'VENDOO_DEPLOY_HEALTH_POLL_SECONDS=15', 'VENDOO_COOLIFY_AUTO_DEPLOY=false',
+]);
+const moduleManifest = JSON.parse(read('app/modules/deployments/module.json'));
+assert(moduleManifest.version === '1.1.0', `Deployment-Modulversion ist ${moduleManifest.version}`);
+assert(moduleManifest.provides.includes('deployments.state-machine'), 'State-Machine-Capability fehlt');
+assert(moduleManifest.provides.includes('deployments.production-checks'), 'Production-Check-Capability fehlt');
+
+if (failures.length) {
+  console.error(`Production-Operations-Gate 1.42.0 fehlgeschlagen (${failures.length}):`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('Production-Operations-Gate 1.42.0 erfolgreich: State-Machine, Idempotenz, Backup-Gate, Coolify-Status, Readiness, Rollback-Sperre, Produktionscheck, API und UI geprüft.');
diff --git a/tools/verify-production-operations-db-1.42.0.mjs b/tools/verify-production-operations-db-1.42.0.mjs
new file mode 100644
index 0000000..e942cc2
--- /dev/null
+++ b/tools/verify-production-operations-db-1.42.0.mjs
@@ -0,0 +1,42 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DatabaseSync } from 'node:sqlite';
+
+const root = resolve(fileURLToPath(new URL('..', import.meta.url)));
+const source = readFileSync(join(root, 'lib/db.mjs'), 'utf8');
+const required = ['deployment_runs', 'deployment_events', 'backup_verifications', 'production_checks'];
+const statements = new Map();
+for (const table of required) {
+  const escaped = table.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  const regex = new RegExp(`db\\.exec\\(\\\`(CREATE TABLE IF NOT EXISTS ${escaped} \\([\\s\\S]*?\\n  \\))\\\`\\);`);
+  const match = source.match(regex);
+  if (!match) throw new Error(`Fehlende CREATE-TABLE-Anweisung: ${table}`);
+  statements.set(table, match[1]);
+}
+
+const tempRoot = mkdtempSync(join(tmpdir(), 'vendoo-production-ops-'));
+const db = new DatabaseSync(join(tempRoot, 'production-operations.db'));
+try {
+  db.exec('PRAGMA foreign_keys = ON');
+  db.exec('CREATE TABLE users (id INTEGER PRIMARY KEY)');
+  db.exec('CREATE TABLE operation_backups (id TEXT PRIMARY KEY)');
+  for (const table of required) db.exec(statements.get(table));
+  db.prepare("INSERT INTO deployment_runs (id,idempotency_key,current_version,target_version) VALUES ('r1','idem-0001','1.41.2','1.42.0')").run();
+  db.prepare("INSERT INTO deployment_events (run_id,state,event_type,message) VALUES ('r1','checking','run.created','created')").run();
+  db.prepare("INSERT INTO operation_backups (id) VALUES ('b1')").run();
+  db.prepare("INSERT INTO backup_verifications (id,backup_id,deployment_run_id,status) VALUES ('v1','b1','r1','verified')").run();
+  db.prepare("INSERT INTO production_checks (id,overall_status) VALUES ('p1','passed')").run();
+
+  if (db.prepare('SELECT count(*) AS count FROM deployment_events WHERE run_id = ?').get('r1').count !== 1) {
+    throw new Error('Deployment-Event wurde nicht gespeichert');
+  }
+  if (db.prepare('PRAGMA foreign_key_check').all().length !== 0) throw new Error('SQLite-Fremdschlüsselprüfung fehlgeschlagen');
+  if (db.prepare('PRAGMA integrity_check').get().integrity_check !== 'ok') throw new Error('SQLite-Integritätsprüfung fehlgeschlagen');
+
+  console.log('Production-Operations-DB-Gate 1.42.0 erfolgreich: additive Tabellen, Fremdschlüssel und SQLite-Integrität geprüft.');
+} finally {
+  db.close();
+  rmSync(tempRoot, { recursive: true, force: true });
+}
diff --git a/tools/verify-production-operations-db-1.42.0.py b/tools/verify-production-operations-db-1.42.0.py
new file mode 100644
index 0000000..1f51754
--- /dev/null
+++ b/tools/verify-production-operations-db-1.42.0.py
@@ -0,0 +1,32 @@
+from pathlib import Path
+import re
+import sqlite3
+import tempfile
+
+root = Path(__file__).resolve().parent.parent
+source = (root / 'lib' / 'db.mjs').read_text(encoding='utf-8')
+required = ['deployment_runs', 'deployment_events', 'backup_verifications', 'production_checks']
+statements = {}
+for table in required:
+    match = re.search(rf"db\.exec\(`(CREATE TABLE IF NOT EXISTS {re.escape(table)} \(.*?\n  \))`\);", source, re.S)
+    if not match:
+        raise SystemExit(f'Fehlende CREATE-TABLE-Anweisung: {table}')
+    statements[table] = match.group(1)
+
+with tempfile.NamedTemporaryFile(suffix='.db') as handle:
+    con = sqlite3.connect(handle.name)
+    con.execute('PRAGMA foreign_keys = ON')
+    con.execute('CREATE TABLE users (id INTEGER PRIMARY KEY)')
+    con.execute('CREATE TABLE operation_backups (id TEXT PRIMARY KEY)')
+    for table in required:
+        con.execute(statements[table])
+    con.execute("INSERT INTO deployment_runs (id,idempotency_key,current_version,target_version) VALUES ('r1','idem-0001','1.41.2','1.42.0')")
+    con.execute("INSERT INTO deployment_events (run_id,state,event_type,message) VALUES ('r1','checking','run.created','created')")
+    con.execute("INSERT INTO operation_backups (id) VALUES ('b1')")
+    con.execute("INSERT INTO backup_verifications (id,backup_id,deployment_run_id,status) VALUES ('v1','b1','r1','verified')")
+    con.execute("INSERT INTO production_checks (id,overall_status) VALUES ('p1','passed')")
+    assert con.execute('SELECT count(*) FROM deployment_events WHERE run_id = ?', ('r1',)).fetchone()[0] == 1
+    assert con.execute('PRAGMA foreign_key_check').fetchall() == []
+    assert con.execute('PRAGMA integrity_check').fetchone()[0] == 'ok'
+
+print('Production-Operations-DB-Gate 1.42.0 erfolgreich: additive Tabellen, Fremdschlüssel und SQLite-Integrität geprüft.')
diff --git a/tools/verify-production-updater-2.0.mjs b/tools/verify-production-updater-2.0.mjs
new file mode 100644
index 0000000..31cc3f7
--- /dev/null
+++ b/tools/verify-production-updater-2.0.mjs
@@ -0,0 +1,15 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root=resolve(import.meta.dirname,'..');
+const files=['UPDATE_VENDOO.bat','scripts/update-vendoo-gui.ps1','scripts/update-vendoo.ps1','scripts/updater/Vendoo.Updater.UI.ps1','scripts/updater/Vendoo.Updater.Worker.ps1','docs/PRODUCTION_UPDATER_2_0.md'];
+const failures=[];for(const f of files)if(!existsSync(resolve(root,f)))failures.push(`Pflichtdatei fehlt: ${f}`);
+const read=f=>readFileSync(resolve(root,f),'utf8');const bat=read(files[0]),ui=read(files[3]),worker=read(files[4]),docs=read(files[5]);
+const must=(text,t,label)=>{if(!text.includes(t))failures.push(`${label} fehlt: ${t}`)};
+for(const t of ['WindowStyle Hidden','update-vendoo-gui.ps1'])must(bat,t,'Starter');
+for(const t of ['Vendoo Production Updater','Update-Ablauf','Technisches Protokoll','Erneut versuchen','Fehler kopieren','ClosingAllowed','Updater-Prozess unerwartet beendet','PasswordBox','DispatcherTimer'])must(ui,t,'WPF-Oberfläche');
+for(const t of ["$UpdaterVersion='2.0.0'",'Vendoo\\Updater','api.github.com/repos/cli/cli/releases/latest','_checksums.txt','Get-FileHash','SHA-256','Invoke-External','TimeoutSeconds','Stop-Tree','OperationCanceledException','Request-Secret','RedirectStandardInput','Save-Session','Load-Session','runId','Check-ProductionVersion','verify:all'])must(worker,t,'Worker');
+for(const forbidden of ['winget.exe','UPDATE_VENDOO.bat bitte erneut starten','Start-Transcript'])if(worker.includes(forbidden))failures.push(`Verbotene Altlogik im Worker: ${forbidden}`);
+for(const f of [files[1],files[2],files[3],files[4]]){const b=readFileSync(resolve(root,f));if(!(b[0]===0xef&&b[1]===0xbb&&b[2]===0xbf))failures.push(`${f} besitzt keine UTF-8-BOM.`)}
+for(const t of ['Fenster bleibt','Wiederaufnahmepunkt','SHA-256'])must(docs,t,'Dokumentation');
+if(failures.length){console.error(`Production-Updater-2.0-Gate fehlgeschlagen (${failures.length})`);for(const f of failures)console.error(`- ${f}`);process.exit(1)}
+console.log('OK: Vendoo Production Updater 2.0 – WPF, persistente Fehleranzeige, portable verifizierte GitHub CLI, Timeouts, Abbruch und Wiederaufnahme.');
diff --git a/tools/verify-production-updater-2.1.mjs b/tools/verify-production-updater-2.1.mjs
new file mode 100644
index 0000000..0e7776a
--- /dev/null
+++ b/tools/verify-production-updater-2.1.mjs
@@ -0,0 +1,17 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root=resolve(import.meta.dirname,'..');
+const files=['UPDATE_VENDOO.bat','scripts/update-vendoo-gui.ps1','scripts/updater/Vendoo.Updater.UI.ps1','scripts/updater/Vendoo.Updater.Host.ps1','scripts/updater/Vendoo.Updater.Worker.ps1','docs/PRODUCTION_UPDATER_2_1.md'];
+const failures=[];
+for(const f of files) if(!existsSync(resolve(root,f))) failures.push(`Pflichtdatei fehlt: ${f}`);
+const read=f=>readFileSync(resolve(root,f),'utf8');
+const ui=read(files[2]),host=read(files[3]),worker=read(files[4]),docs=read(files[5]);
+const must=(text,needle,label)=>{if(!text.includes(needle))failures.push(`${label} fehlt: ${needle}`)};
+for(const t of ["$UpdaterVersion = '2.1.0'",'Vendoo.Updater.Host.ps1','Write-InitialStatus','RedirectStandardOutput=$true','RedirectStandardError=$true','Get-WorkerExitDiagnostics','worker.stderr.log','Diagnoseordner','Protokoll öffnen','Erneut versuchen'])must(ui,t,'UI');
+for(const t of ["$UpdaterVersion = '2.1.0'",'Write-HostStatus','Append-HostLog','CoreScript','Worker konnte nicht initialisiert werden','terminalen Status','Exception.ToString()'])must(host,t,'Worker-Host');
+for(const t of ["$UpdaterVersion='2.1.0'",'[Parameter(Mandatory=$true)][string]$LogFile','verify:all','Save-Session','Load-Session'])must(worker,t,'Worker-Core');
+for(const forbidden of [';exit 0',';exit 1',';exit 2'])if(worker.includes(forbidden))failures.push(`Worker-Core beendet den Host eigenmächtig: ${forbidden}`);
+for(const f of files.slice(1,5)){const b=readFileSync(resolve(root,f));if(!(b[0]===0xef&&b[1]===0xbb&&b[2]===0xbf))failures.push(`${f} besitzt keine UTF-8-BOM.`)}
+for(const t of ['Worker-Host','status.json','worker.stderr.log','Protokollpfad kann nicht mehr leer sein'])must(docs,t,'Dokumentation');
+if(failures.length){console.error(`Production-Updater-2.1-Gate fehlgeschlagen (${failures.length})`);for(const f of failures)console.error(`- ${f}`);process.exit(1)}
+console.log('OK: Vendoo Production Updater 2.1 – überwachter Worker-Host, garantierte Bootstrap-Diagnose und vollständiger Fehlerkanal.');
diff --git a/tools/verify-production-updater-2.2.mjs b/tools/verify-production-updater-2.2.mjs
new file mode 100644
index 0000000..d4c9eae
--- /dev/null
+++ b/tools/verify-production-updater-2.2.mjs
@@ -0,0 +1,20 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root=resolve(import.meta.dirname,'..');
+const files=['UPDATE_VENDOO.bat','scripts/update-vendoo-gui.ps1','scripts/updater/Vendoo.Updater.Preflight.ps1','scripts/updater/Vendoo.Updater.UI.ps1','scripts/updater/Vendoo.Updater.Host.ps1','scripts/updater/Vendoo.Updater.Worker.ps1','tools/verify-powershell-parser.ps1','tools/verify-powershell-static.mjs','docs/PRODUCTION_UPDATER_2_2.md'];
+const failures=[];
+for(const f of files) if(!existsSync(resolve(root,f))) failures.push(`Pflichtdatei fehlt: ${f}`);
+const read=f=>readFileSync(resolve(root,f),'utf8');
+const bat=read(files[0]),preflight=read(files[2]),ui=read(files[3]),host=read(files[4]),worker=read(files[5]),parser=read(files[6]),docs=read(files[8]);
+const must=(text,needle,label)=>{if(!text.includes(needle))failures.push(`${label} fehlt: ${needle}`)};
+for(const t of ['Vendoo.Updater.Preflight.ps1','PREFLIGHT_EXIT','pause']) must(bat,t,'BAT-Startvertrag');
+for(const t of ["$UpdaterVersion = '2.2.0'",'System.Management.Automation.Language.Parser','ParseFile','updater-preflight.log','exit 21']) must(preflight,t,'Preflight');
+for(const t of ["$UpdaterVersion = '2.2.0'",'Vendoo.Updater.Host.ps1','Write-InitialStatus','RedirectStandardOutput=$true','RedirectStandardError=$true','Diagnoseordner','Erneut versuchen']) must(ui,t,'UI');
+for(const t of ["$UpdaterVersion = '2.2.0'",'PowerShell-Parserprüfung','System.Management.Automation.Language.Parser','ParseFile','Exception.ToString()']) must(host,t,'Worker-Host');
+for(const t of ["$UpdaterVersion='2.2.0'",'"${Label}: {0:N1}','"${Title}: sichere Eingabe']) must(worker,t,'Worker-Core');
+for(const forbidden of ['"$Label:','"$Title:']) if(worker.includes(forbidden)) failures.push(`Worker enthält verbotene Parser-Regression: ${forbidden}`);
+for(const t of ['System.Management.Automation.Language.Parser','ParseFile','Windows-PowerShell-Parser-Gate']) must(parser,t,'Windows-Parser-Gate');
+for(const f of files.slice(1,7)){const b=readFileSync(resolve(root,f));if(!(b[0]===0xef&&b[1]===0xbb&&b[2]===0xbf))failures.push(`${f} besitzt keine UTF-8-BOM.`)}
+for(const t of ['echter Windows-PowerShell-5.1-Parser','Variablen-Doppelpunkt','GitHub Actions']) must(docs,t,'Dokumentation');
+if(failures.length){console.error(`Production-Updater-2.2-Gate fehlgeschlagen (${failures.length})`);for(const f of failures)console.error(`- ${f}`);process.exit(1)}
+console.log('OK: Vendoo Production Updater 2.2 – PS5.1-Parser-Gate, lokale Preflight-Sperre und Interpolations-Regressionstest.');
diff --git a/tools/verify-production-updater-2.3.mjs b/tools/verify-production-updater-2.3.mjs
new file mode 100644
index 0000000..a8d2c09
--- /dev/null
+++ b/tools/verify-production-updater-2.3.mjs
@@ -0,0 +1,21 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root=resolve(import.meta.dirname,'..');
+const files=['UPDATE_VENDOO.bat','scripts/update-vendoo-gui.ps1','scripts/updater/Vendoo.Updater.Preflight.ps1','scripts/updater/Vendoo.Updater.UI.ps1','scripts/updater/Vendoo.Updater.Host.ps1','scripts/updater/Vendoo.Updater.Worker.ps1','tools/verify-powershell-parser.ps1','tools/verify-powershell-static.mjs','docs/PRODUCTION_UPDATER_2_3.md'];
+const failures=[];
+for(const f of files) if(!existsSync(resolve(root,f))) failures.push(`Pflichtdatei fehlt: ${f}`);
+const read=f=>readFileSync(resolve(root,f),'utf8');
+const bat=read(files[0]),preflight=read(files[2]),ui=read(files[3]),host=read(files[4]),worker=read(files[5]),parser=read(files[6]),docs=read(files[8]);
+const must=(text,needle,label)=>{if(!text.includes(needle))failures.push(`${label} fehlt: ${needle}`)};
+for(const t of ['pushd "%~dp0"','Vendoo.Updater.Preflight.ps1','PREFLIGHT_EXIT','GUI_EXIT','pause']) must(bat,t,'BAT-Startvertrag');
+for(const forbidden of ['-PackageRoot "%~dp0"','start "Vendoo Production Updater"']) if(bat.includes(forbidden)) failures.push(`BAT enthält verbotene Pfad-/Startregression: ${forbidden}`);
+for(const t of ["$UpdaterVersion = '2.3.0'",'param()','Get-CanonicalPackageRoot','$PSScriptRoot','Resolve-Path','GetFullPath','GetInvalidPathChars','updater-preflight.log']) must(preflight,t,'Preflight');
+for(const t of ["$UpdaterVersion = '2.3.0'",'Resolve-Path -LiteralPath','Vendoo.Updater.Host.ps1','RedirectStandardOutput=$true','RedirectStandardError=$true']) must(ui,t,'UI');
+for(const t of ["$UpdaterVersion = '2.3.0'",'PowerShell-Parserprüfung','System.Management.Automation.Language.Parser','ParseFile']) must(host,t,'Worker-Host');
+for(const t of ["$UpdaterVersion='2.3.0'",'Resolve-Path -LiteralPath','"${Label}: {0:N1}','"${Title}: sichere Eingabe']) must(worker,t,'Worker-Core');
+for(const forbidden of ['"$Label:','"$Title:']) if(worker.includes(forbidden)) failures.push(`Worker enthält verbotene Parser-Regression: ${forbidden}`);
+for(const t of ['System.Management.Automation.Language.Parser','ParseFile','Windows-PowerShell-Parser-Gate']) must(parser,t,'Windows-Parser-Gate');
+for(const f of files.slice(1,7)){const b=readFileSync(resolve(root,f));if(!(b[0]===0xef&&b[1]===0xbb&&b[2]===0xbf))failures.push(`${f} besitzt keine UTF-8-BOM.`)}
+for(const t of ['%~dp0','Resolve-Path','kanonisiert','Regression']) must(docs,t,'Dokumentation');
+if(failures.length){console.error(`Production-Updater-2.3-Gate fehlgeschlagen (${failures.length})`);for(const f of failures)console.error(`- ${f}`);process.exit(1)}
+console.log('OK: Vendoo Production Updater 2.3 – kanonischer Root-Pfad, kein trailing-backslash-Argument und synchron sichtbare Exit-Codes.');
diff --git a/tools/verify-production-updater-2.4.mjs b/tools/verify-production-updater-2.4.mjs
new file mode 100644
index 0000000..03cbaf8
--- /dev/null
+++ b/tools/verify-production-updater-2.4.mjs
@@ -0,0 +1,21 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+const root=resolve(import.meta.dirname,'..');
+const files=['UPDATE_VENDOO.bat','scripts/update-vendoo-gui.ps1','scripts/updater/Vendoo.Updater.Preflight.ps1','scripts/updater/Vendoo.Updater.UI.ps1','scripts/updater/Vendoo.Updater.Host.ps1','scripts/updater/Vendoo.Updater.Worker.ps1','tools/verify-powershell-parser.ps1','tools/verify-powershell-static.mjs','docs/PRODUCTION_UPDATER_2_4.md'];
+const failures=[];
+for(const f of files) if(!existsSync(resolve(root,f))) failures.push(`Pflichtdatei fehlt: ${f}`);
+const read=f=>readFileSync(resolve(root,f),'utf8');
+const bat=read(files[0]),preflight=read(files[2]),ui=read(files[3]),host=read(files[4]),worker=read(files[5]),parser=read(files[6]),docs=read(files[8]);
+const must=(text,needle,label)=>{if(!text.includes(needle))failures.push(`${label} fehlt: ${needle}`)};
+for(const t of ['pushd "%~dp0"','Vendoo.Updater.Preflight.ps1','PREFLIGHT_EXIT','GUI_EXIT','pause']) must(bat,t,'BAT-Startvertrag');
+for(const forbidden of ['-PackageRoot "%~dp0"','start "Vendoo Production Updater"']) if(bat.includes(forbidden)) failures.push(`BAT enthält verbotene Pfad-/Startregression: ${forbidden}`);
+for(const t of ["$UpdaterVersion = '2.4.0'",'param()','Get-CanonicalPackageRoot','$PSScriptRoot','Resolve-Path','GetFullPath','GetInvalidPathChars','updater-preflight.log']) must(preflight,t,'Preflight');
+for(const t of ["$UpdaterVersion = '2.4.0'",'Resolve-Path -LiteralPath','Vendoo.Updater.Host.ps1','RedirectStandardOutput=$true','RedirectStandardError=$true']) must(ui,t,'UI');
+for(const t of ["$UpdaterVersion = '2.4.0'",'PowerShell-Parserprüfung','System.Management.Automation.Language.Parser','ParseFile']) must(host,t,'Worker-Host');
+for(const t of ["$UpdaterVersion='2.4.0'",'Invoke-VisibleGitHubLogin','github-login.cmd','Start-Process','--web','--clipboard','Test-GitHubAuthentication','-Quiet','$lastReported+10','Write-State 18']) must(worker,t,'Worker-Core');
+for(const forbidden of ['"$Label:','"$Title:','Invoke-External $gh @(\'auth\',\'login\'','GitHub-Browseranmeldung läuft seit']) if(worker.includes(forbidden)) failures.push(`Worker enthält verbotene Regression: ${forbidden}`);
+for(const t of ['System.Management.Automation.Language.Parser','ParseFile','Windows-PowerShell-Parser-Gate']) must(parser,t,'Windows-Parser-Gate');
+for(const f of files.slice(1,7)){const b=readFileSync(resolve(root,f));if(!(b[0]===0xef&&b[1]===0xbb&&b[2]===0xbf))failures.push(`${f} besitzt keine UTF-8-BOM.`)}
+for(const t of ['sichtbares Anmeldefenster','Gerätecode','10-%','versteckten Worker']) must(docs,t,'Dokumentation');
+if(failures.length){console.error(`Production-Updater-2.4-Gate fehlgeschlagen (${failures.length})`);for(const f of failures)console.error(`- ${f}`);process.exit(1)}
+console.log('OK: Vendoo Production Updater 2.4 – sichtbare GitHub-Geräteanmeldung, stilles Status-Polling und gedrosselter Downloadfortschritt.');
diff --git a/tools/verify-production-updater-2.5.mjs b/tools/verify-production-updater-2.5.mjs
new file mode 100644
index 0000000..5ede910
--- /dev/null
+++ b/tools/verify-production-updater-2.5.mjs
@@ -0,0 +1,79 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+const root = resolve(import.meta.dirname, '..');
+const failures = [];
+const required = [
+  'UPDATE_VENDOO.bat',
+  '.gitattributes',
+  '.editorconfig',
+  'scripts/update-vendoo-gui.ps1',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'docs/PRODUCTION_UPDATER_2_5.md',
+];
+for (const file of required) {
+  if (!existsSync(resolve(root, file))) failures.push(`Pflichtdatei fehlt: ${file}`);
+}
+
+const batPath = resolve(root, 'UPDATE_VENDOO.bat');
+const bat = readFileSync(batPath);
+const batText = bat.toString('ascii');
+
+if (bat.length < 16) failures.push('UPDATE_VENDOO.bat ist unerwartet leer.');
+if (bat[0] === 0xef && bat[1] === 0xbb && bat[2] === 0xbf) failures.push('UPDATE_VENDOO.bat darf keine UTF-8-BOM besitzen.');
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] > 0x7f) {
+    failures.push(`UPDATE_VENDOO.bat ist nicht reines ASCII (Byte ${i}: 0x${bat[i].toString(16)}).`);
+    break;
+  }
+}
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] === 0x0a && (i === 0 || bat[i - 1] !== 0x0d)) {
+    failures.push(`UPDATE_VENDOO.bat enthält LF ohne CR an Byte ${i}.`);
+    break;
+  }
+  if (bat[i] === 0x0d && (i + 1 >= bat.length || bat[i + 1] !== 0x0a)) {
+    failures.push(`UPDATE_VENDOO.bat enthält CR ohne LF an Byte ${i}.`);
+    break;
+  }
+}
+if (!batText.startsWith('@echo off\r\n')) failures.push('UPDATE_VENDOO.bat startet nicht exakt mit @echo off + CRLF.');
+for (const needle of [
+  'cd /d "%~dp0"',
+  '%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe',
+  'Vendoo.Updater.Preflight.ps1',
+  'update-vendoo-gui.ps1',
+  ':preflight_failed',
+  ':gui_failed',
+  'pause',
+]) {
+  if (!batText.includes(needle)) failures.push(`BAT-Startvertrag fehlt: ${needle}`);
+}
+for (const forbidden of ['chcp ', '-PackageRoot', 'start "', 'ä', 'ö', 'ü', 'ß']) {
+  if (batText.includes(forbidden)) failures.push(`BAT enthält verbotene Regression: ${forbidden}`);
+}
+
+const attrs = readFileSync(resolve(root, '.gitattributes'), 'ascii');
+if (!attrs.includes('*.bat text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für BAT nicht.');
+if (!attrs.includes('*.cmd text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für CMD nicht.');
+const editor = readFileSync(resolve(root, '.editorconfig'), 'ascii');
+for (const needle of ['[*.{bat,cmd}]', 'charset = latin1', 'end_of_line = crlf']) {
+  if (!editor.includes(needle)) failures.push(`.editorconfig fehlt: ${needle}`);
+}
+
+for (const rel of required.filter((file) => file.endsWith('.ps1'))) {
+  const bytes = readFileSync(resolve(root, rel));
+  if (!(bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf)) failures.push(`${rel} besitzt keine UTF-8-BOM.`);
+  const text = bytes.subarray(3).toString('utf8');
+  if (!text.includes('2.5.0') && rel.includes('updater/Vendoo.Updater.')) failures.push(`${rel} enthält nicht Updater-Version 2.5.0.`);
+}
+
+if (failures.length) {
+  console.error(`Production-Updater-2.5-Binary-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('OK: Production Updater 2.5 – BAT ist reines ASCII, BOM-frei und vollständig CRLF-normalisiert.');
diff --git a/tools/verify-production-updater-2.6.mjs b/tools/verify-production-updater-2.6.mjs
new file mode 100644
index 0000000..3109a26
--- /dev/null
+++ b/tools/verify-production-updater-2.6.mjs
@@ -0,0 +1,87 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+const root = resolve(import.meta.dirname, '..');
+const failures = [];
+const required = [
+  'UPDATE_VENDOO.bat',
+  '.gitattributes',
+  '.editorconfig',
+  'scripts/update-vendoo-gui.ps1',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'docs/PRODUCTION_UPDATER_2_6.md',
+];
+for (const file of required) {
+  if (!existsSync(resolve(root, file))) failures.push(`Pflichtdatei fehlt: ${file}`);
+}
+
+const batPath = resolve(root, 'UPDATE_VENDOO.bat');
+const bat = readFileSync(batPath);
+const batText = bat.toString('ascii');
+
+if (bat.length < 16) failures.push('UPDATE_VENDOO.bat ist unerwartet leer.');
+if (bat[0] === 0xef && bat[1] === 0xbb && bat[2] === 0xbf) failures.push('UPDATE_VENDOO.bat darf keine UTF-8-BOM besitzen.');
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] > 0x7f) {
+    failures.push(`UPDATE_VENDOO.bat ist nicht reines ASCII (Byte ${i}: 0x${bat[i].toString(16)}).`);
+    break;
+  }
+}
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] === 0x0a && (i === 0 || bat[i - 1] !== 0x0d)) {
+    failures.push(`UPDATE_VENDOO.bat enthält LF ohne CR an Byte ${i}.`);
+    break;
+  }
+  if (bat[i] === 0x0d && (i + 1 >= bat.length || bat[i + 1] !== 0x0a)) {
+    failures.push(`UPDATE_VENDOO.bat enthält CR ohne LF an Byte ${i}.`);
+    break;
+  }
+}
+if (!batText.startsWith('@echo off\r\n')) failures.push('UPDATE_VENDOO.bat startet nicht exakt mit @echo off + CRLF.');
+for (const needle of [
+  'cd /d "%~dp0"',
+  '%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe',
+  'Vendoo.Updater.Preflight.ps1',
+  'update-vendoo-gui.ps1',
+  ':preflight_failed',
+  ':gui_failed',
+  'pause',
+]) {
+  if (!batText.includes(needle)) failures.push(`BAT-Startvertrag fehlt: ${needle}`);
+}
+for (const forbidden of ['chcp ', '-PackageRoot', 'start "', 'ä', 'ö', 'ü', 'ß']) {
+  if (batText.includes(forbidden)) failures.push(`BAT enthält verbotene Regression: ${forbidden}`);
+}
+
+const attrs = readFileSync(resolve(root, '.gitattributes'), 'ascii');
+if (!attrs.includes('*.bat text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für BAT nicht.');
+if (!attrs.includes('*.cmd text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für CMD nicht.');
+const editor = readFileSync(resolve(root, '.editorconfig'), 'ascii');
+for (const needle of ['[*.{bat,cmd}]', 'charset = latin1', 'end_of_line = crlf']) {
+  if (!editor.includes(needle)) failures.push(`.editorconfig fehlt: ${needle}`);
+}
+
+for (const rel of required.filter((file) => file.endsWith('.ps1'))) {
+  const bytes = readFileSync(resolve(root, rel));
+  if (!(bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf)) failures.push(`${rel} besitzt keine UTF-8-BOM.`);
+  const text = bytes.subarray(3).toString('utf8');
+  if (!text.includes('2.6.0') && rel.includes('updater/Vendoo.Updater.')) failures.push(`${rel} enthält nicht Updater-Version 2.6.0.`);
+}
+
+
+const workerText = readFileSync(resolve(root, 'scripts/updater/Vendoo.Updater.Worker.ps1'), 'utf8');
+for (const marker of ['Coolify Auto Deploy', 'Es wird kein Webhook und kein GitHub Secret benötigt.', 'AddMinutes(15)', '/readyz']) {
+  if (!workerText.includes(marker)) failures.push(`Auto-Deploy-Vertrag fehlt: ${marker}`);
+}
+for (const forbidden of ['COOLIFY_DEPLOY_WEBHOOK_URL', 'Request-Secret', "'secret','set'", "'workflow','run'"]) {
+  if (workerText.includes(forbidden)) failures.push(`Verbotener Webhook-/Workflow-Rest im Updater: ${forbidden}`);
+}
+if (failures.length) {
+  console.error(`Production-Updater-2.6-Binary-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('OK: Production Updater 2.6 – BAT ist reines ASCII, BOM-frei und vollständig CRLF-normalisiert.');
diff --git a/tools/verify-production-updater-2.9.mjs b/tools/verify-production-updater-2.9.mjs
new file mode 100644
index 0000000..acc110d
--- /dev/null
+++ b/tools/verify-production-updater-2.9.mjs
@@ -0,0 +1,129 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+const root = resolve(import.meta.dirname, '..');
+const failures = [];
+const required = [
+  'UPDATE_VENDOO.bat',
+  '.gitattributes',
+  '.editorconfig',
+  'scripts/update-vendoo-gui.ps1',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'docs/PRODUCTION_UPDATER_2_9.md',
+];
+for (const file of required) {
+  if (!existsSync(resolve(root, file))) failures.push(`Pflichtdatei fehlt: ${file}`);
+}
+
+const batPath = resolve(root, 'UPDATE_VENDOO.bat');
+const bat = readFileSync(batPath);
+const batText = bat.toString('ascii');
+
+if (bat.length < 16) failures.push('UPDATE_VENDOO.bat ist unerwartet leer.');
+if (bat[0] === 0xef && bat[1] === 0xbb && bat[2] === 0xbf) failures.push('UPDATE_VENDOO.bat darf keine UTF-8-BOM besitzen.');
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] > 0x7f) {
+    failures.push(`UPDATE_VENDOO.bat ist nicht reines ASCII (Byte ${i}: 0x${bat[i].toString(16)}).`);
+    break;
+  }
+}
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] === 0x0a && (i === 0 || bat[i - 1] !== 0x0d)) {
+    failures.push(`UPDATE_VENDOO.bat enthält LF ohne CR an Byte ${i}.`);
+    break;
+  }
+  if (bat[i] === 0x0d && (i + 1 >= bat.length || bat[i + 1] !== 0x0a)) {
+    failures.push(`UPDATE_VENDOO.bat enthält CR ohne LF an Byte ${i}.`);
+    break;
+  }
+}
+if (!batText.startsWith('@echo off\r\n')) failures.push('UPDATE_VENDOO.bat startet nicht exakt mit @echo off + CRLF.');
+for (const needle of [
+  'cd /d "%~dp0"',
+  '%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe',
+  'Vendoo.Updater.Preflight.ps1',
+  'update-vendoo-gui.ps1',
+  ':preflight_failed',
+  ':gui_failed',
+  'pause',
+]) {
+  if (!batText.includes(needle)) failures.push(`BAT-Startvertrag fehlt: ${needle}`);
+}
+for (const forbidden of ['chcp ', '-PackageRoot', 'start "', 'ä', 'ö', 'ü', 'ß']) {
+  if (batText.includes(forbidden)) failures.push(`BAT enthält verbotene Regression: ${forbidden}`);
+}
+
+const attrs = readFileSync(resolve(root, '.gitattributes'), 'ascii');
+if (!attrs.includes('*.bat text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für BAT nicht.');
+if (!attrs.includes('*.cmd text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für CMD nicht.');
+const editor = readFileSync(resolve(root, '.editorconfig'), 'ascii');
+for (const needle of ['[*.{bat,cmd}]', 'charset = latin1', 'end_of_line = crlf']) {
+  if (!editor.includes(needle)) failures.push(`.editorconfig fehlt: ${needle}`);
+}
+
+for (const rel of required.filter((file) => file.endsWith('.ps1'))) {
+  const bytes = readFileSync(resolve(root, rel));
+  if (!(bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf)) failures.push(`${rel} besitzt keine UTF-8-BOM.`);
+  const text = bytes.subarray(3).toString('utf8');
+  if (!text.includes('2.9.0') && rel.includes('updater/Vendoo.Updater.')) failures.push(`${rel} enthält nicht Updater-Version 2.9.0.`);
+}
+
+
+const workerText = readFileSync(resolve(root, 'scripts/updater/Vendoo.Updater.Worker.ps1'), 'utf8');
+for (const marker of ['Coolify Auto Deploy', 'Es wird kein Webhook und kein GitHub Secret benötigt.', 'AddMinutes(15)', '/readyz']) {
+  if (!workerText.includes(marker)) failures.push(`Auto-Deploy-Vertrag fehlt: ${marker}`);
+}
+
+const packageJson = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'));
+for (const [name, command] of Object.entries(packageJson.scripts || {})) {
+  if (/\bpython(?:3)?\b|\bpy(?:\.exe)?\s+-/i.test(command)) {
+    failures.push(`Aktiver npm-Script ${name} enthält weiterhin eine Python-Abhängigkeit: ${command}`);
+  }
+}
+for (const requiredNodeGate of [
+  'tools/verify-identity-db-1.40.0.mjs',
+  'tools/verify-db-migrations.mjs',
+  'tools/verify-production-operations-db-1.42.0.mjs',
+]) {
+  if (!existsSync(resolve(root, requiredNodeGate))) failures.push(`Node-only-DB-Gate fehlt: ${requiredNodeGate}`);
+}
+if (!workerText.includes('StandardOutputEncoding') || !workerText.includes('StandardErrorEncoding')) {
+  failures.push('Worker setzt die UTF-8-Dekodierung für externe Prozesse nicht explizit.');
+}
+for (const utf8Marker of ["NPM_CONFIG_COLOR']='false", "FORCE_COLOR']='0", "Text.UTF8Encoding($false)"]) {
+  if (!workerText.includes(utf8Marker)) failures.push(`UTF-8-/Ausgabevertrag fehlt: ${utf8Marker}`);
+}
+
+
+const cleanupHelper = readFileSync(resolve(root, 'tools/test-runtime-cleanup.mjs'), 'utf8');
+for (const marker of ["db.close()", "wal_checkpoint(TRUNCATE)", "maxRetries = 30", "retryDelay = 100"]) {
+  if (!cleanupHelper.includes(marker)) failures.push(`Zentraler Windows-SQLite-Cleanup-Vertrag fehlt: ${marker}`);
+}
+for (const requiredCleanupGate of [
+  'tools/verify-sqlite-cleanup-contract-1.43.0.mjs',
+  'tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs',
+]) {
+  if (!existsSync(resolve(root, requiredCleanupGate))) failures.push(`SQLite-Cleanup-Pflichtgate fehlt: ${requiredCleanupGate}`);
+}
+for (const rel of ['tools/verify-initial-disabled-modules-1.41.2.mjs', 'tools/verify-controlled-invitations-1.42.0.mjs', 'tools/verify-capability-graph-1.41.2.mjs', 'tools/verify-platform-architecture-1.41.2.mjs']) {
+  const cleanupSource = readFileSync(resolve(root, rel), 'utf8');
+  for (const marker of ['closeVendooDatabase', 'removeTempDirectory']) {
+    if (!cleanupSource.includes(marker)) failures.push(`${rel} verwendet den zentralen SQLite-Cleanup nicht: ${marker}`);
+  }
+}
+if (!packageJson.scripts?.['verify:sqlite-cleanup'] || !packageJson.scripts['verify:all'].includes('verify:sqlite-cleanup')) {
+  failures.push('verify:sqlite-cleanup ist nicht verbindlich in verify:all verdrahtet.');
+}
+
+for (const forbidden of ['COOLIFY_DEPLOY_WEBHOOK_URL', 'Request-Secret', "'secret','set'", "'workflow','run'"]) {
+  if (workerText.includes(forbidden)) failures.push(`Verbotener Webhook-/Workflow-Rest im Updater: ${forbidden}`);
+}
+if (failures.length) {
+  console.error(`Production-Updater-2.9-Binary-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('OK: Production Updater 2.9 – BAT ist reines ASCII, BOM-frei und vollständig CRLF-normalisiert.');
diff --git a/tools/verify-production-updater-3.2.mjs b/tools/verify-production-updater-3.2.mjs
new file mode 100644
index 0000000..85aa268
--- /dev/null
+++ b/tools/verify-production-updater-3.2.mjs
@@ -0,0 +1,125 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { readAndValidateManifest, REQUIRED_RELEASE_FILES } from './release-manifest-lib.mjs';
+
+const root = resolve(import.meta.dirname, '..');
+const failures = [];
+const required = [
+  'UPDATE_VENDOO.bat',
+  '.gitattributes',
+  '.editorconfig',
+  'scripts/update-vendoo-gui.ps1',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'release-manifest.json',
+  'tools/release-manifest-lib.mjs',
+  'tools/generate-release-manifest.mjs',
+  'tools/apply-release-manifest.mjs',
+  'tools/verify-release-manifest-staging-3.0.mjs',
+  'docs/PRODUCTION_UPDATER_3_2.md',
+  'db/schema.sql',
+];
+for (const file of required) if (!existsSync(resolve(root, file))) failures.push(`Pflichtdatei fehlt: ${file}`);
+
+const batPath = resolve(root, 'UPDATE_VENDOO.bat');
+const bat = readFileSync(batPath);
+const batText = bat.toString('ascii');
+if (bat.length < 16) failures.push('UPDATE_VENDOO.bat ist unerwartet leer.');
+if (bat[0] === 0xef && bat[1] === 0xbb && bat[2] === 0xbf) failures.push('UPDATE_VENDOO.bat darf keine UTF-8-BOM besitzen.');
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] > 0x7f) { failures.push(`UPDATE_VENDOO.bat ist nicht reines ASCII (Byte ${i}).`); break; }
+  if (bat[i] === 0x0a && (i === 0 || bat[i - 1] !== 0x0d)) { failures.push(`UPDATE_VENDOO.bat enthält LF ohne CR an Byte ${i}.`); break; }
+  if (bat[i] === 0x0d && (i + 1 >= bat.length || bat[i + 1] !== 0x0a)) { failures.push(`UPDATE_VENDOO.bat enthält CR ohne LF an Byte ${i}.`); break; }
+}
+if (!batText.startsWith('@echo off\r\n')) failures.push('UPDATE_VENDOO.bat startet nicht exakt mit @echo off + CRLF.');
+for (const needle of ['cd /d "%~dp0"', '%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe', 'Vendoo.Updater.Preflight.ps1', 'update-vendoo-gui.ps1', 'pause']) {
+  if (!batText.includes(needle)) failures.push(`BAT-Startvertrag fehlt: ${needle}`);
+}
+for (const forbidden of ['chcp ', '-PackageRoot', 'start "', 'ä', 'ö', 'ü', 'ß']) if (batText.includes(forbidden)) failures.push(`BAT enthält verbotene Regression: ${forbidden}`);
+
+const attrs = readFileSync(resolve(root, '.gitattributes'), 'ascii');
+if (!attrs.includes('*.bat text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für BAT nicht.');
+if (!attrs.includes('*.cmd text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für CMD nicht.');
+
+for (const rel of required.filter(file => file.endsWith('.ps1'))) {
+  const bytes = readFileSync(resolve(root, rel));
+  if (!(bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf)) failures.push(`${rel} besitzt keine UTF-8-BOM.`);
+  const text = bytes.subarray(3).toString('utf8');
+  if (rel.includes('updater/Vendoo.Updater.') && !text.includes('3.2.0')) failures.push(`${rel} enthält nicht Updater-Version 3.2.0.`);
+}
+
+const workerText = readFileSync(resolve(root, 'scripts/updater/Vendoo.Updater.Worker.ps1'), 'utf8');
+for (const marker of [
+  "release/$TargetVersion-production-update-v3",
+  'release-manifest.json',
+  'tools\\apply-release-manifest.mjs',
+  'overlay-with-explicit-removals',
+  'Veralteter 2.x-Sitzungsstand wird nicht übernommen.',
+  'StandardOutputEncoding',
+  'StandardErrorEncoding',
+  'Get-ProcessFailureSummary',
+  'Fehlerausgabe:',
+  'Letzte Standardausgabe:',
+  'Coolify Auto Deploy',
+  '/readyz',
+]) if (!workerText.includes(marker)) failures.push(`Updater-3.2-Vertrag fehlt: ${marker}`);
+for (const forbidden of [
+  "tools\\prepare-git-staging.mjs'),$PackageRoot,$CloneDir",
+  'cleanDestination',
+  'COOLIFY_DEPLOY_WEBHOOK_URL',
+  'Request-Secret',
+]) if (workerText.includes(forbidden)) failures.push(`Verbotene 2.x-Regression im Worker: ${forbidden}`);
+
+const applyText = readFileSync(resolve(root, 'tools/apply-release-manifest.mjs'), 'utf8');
+const libText = readFileSync(resolve(root, 'tools/release-manifest-lib.mjs'), 'utf8');
+for (const marker of ['applyReleaseManifest', 'overlay-with-explicit-removals', 'removedFiles', 'sha256File', 'db/schema.sql', 'Zielprüfung nach Kopieren', 'CONTROL_RELEASE_FILES', 'Steuerdatei-Prüfung nach Kopieren', 'allowExtraFiles']) {
+  if (!(applyText + libText).includes(marker)) failures.push(`Manifest-Release-Vertrag fehlt: ${marker}`);
+}
+for (const forbidden of ['cleanDestination(destination)', 'for (const name of readdirSync(destination))']) {
+  if (libText.includes(forbidden)) failures.push(`Manifest-Applier darf die Baseline nicht leeren: ${forbidden}`);
+}
+
+try {
+  const manifest = readAndValidateManifest(root, { allowExtraFiles: true });
+  if (manifest.version !== '1.43.0') failures.push(`Release-Manifest-Version falsch: ${manifest.version}`);
+  if (manifest.updaterVersion !== '3.2.0') failures.push(`Release-Manifest-Updaterversion falsch: ${manifest.updaterVersion}`);
+  for (const requiredFile of REQUIRED_RELEASE_FILES) {
+    if (!manifest.files.some(entry => entry.path === requiredFile)) failures.push(`Release-Manifest enthält Pflichtdatei nicht: ${requiredFile}`);
+  }
+} catch (error) {
+  failures.push(`Release-Manifest ist ungültig: ${error.message}`);
+}
+
+
+const ciText = readFileSync(resolve(root, '.github/workflows/ci.yml'), 'utf8');
+for (const marker of ['windows-release-contract', 'runs-on: windows-latest', 'npm run verify:all', 'verify-powershell-parser.ps1']) {
+  if (!ciText.includes(marker)) failures.push(`Windows-CI-Vertrag fehlt: ${marker}`);
+}
+const releaseWorkflow = readFileSync(resolve(root, '.github/workflows/release.yml'), 'utf8');
+for (const marker of ['npm run verify:all', 'generate-release-manifest.mjs', 'git diff --exit-code -- release-manifest.json', 'Manifestbasiertes Release-Staging']) {
+  if (!releaseWorkflow.includes(marker)) failures.push(`Release-Workflow-Vertrag fehlt: ${marker}`);
+}
+const buildRelease = readFileSync(resolve(root, 'tools/build-release.mjs'), 'utf8');
+for (const marker of ['generateReleaseManifest', 'readAndValidateManifest', 'manifest.files', 'Manifestbasiertes Release-Staging']) {
+  if (!buildRelease.includes(marker)) failures.push(`Manifestbasierter Release-Builder fehlt: ${marker}`);
+}
+if (buildRelease.includes('shouldSkipStagingEntry')) failures.push('Release-Builder verwendet weiterhin die alte Ausschlusslisten-Kopie.');
+
+const packageJson = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'));
+if (packageJson.scripts?.['verify:release-manifest'] !== 'node tools/verify-release-manifest-staging-3.0.mjs') failures.push('verify:release-manifest ist nicht korrekt verdrahtet.');
+if (!packageJson.scripts?.['verify:all']?.includes('verify:release-manifest')) failures.push('verify:release-manifest fehlt in verify:all.');
+for (const name of ['verify:one-click-update', 'verify:updater-ui', 'verify:updater-hotfix']) {
+  if (packageJson.scripts?.[name] !== 'node tools/verify-production-updater-3.2.mjs') failures.push(`${name} verweist nicht auf Updater-3.2-Gate.`);
+}
+for (const [name, command] of Object.entries(packageJson.scripts || {})) {
+  if (/\bpython(?:3)?\b|\bpy(?:\.exe)?\s+-/i.test(command)) failures.push(`Aktiver npm-Script ${name} enthält eine Python-Abhängigkeit.`);
+}
+
+if (failures.length) {
+  console.error(`Production-Updater-3.2-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('Production-Updater-3.2-Gate erfolgreich: manifestbasiertes Overlay, SHA-256-Prüfung, bytegeprüfte Steuerdatei, explizite Löschungen, Pflichtdateien und Sitzungsgrenze geprüft.');
diff --git a/tools/verify-production-updater-3.3.mjs b/tools/verify-production-updater-3.3.mjs
new file mode 100644
index 0000000..7b7d5b9
--- /dev/null
+++ b/tools/verify-production-updater-3.3.mjs
@@ -0,0 +1,139 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { readAndValidateManifest, REQUIRED_RELEASE_FILES } from './release-manifest-lib.mjs';
+
+const root = resolve(import.meta.dirname, '..');
+const failures = [];
+const required = [
+  'UPDATE_VENDOO.bat',
+  '.gitattributes',
+  '.editorconfig',
+  'scripts/update-vendoo-gui.ps1',
+  'scripts/updater/Vendoo.Updater.Preflight.ps1',
+  'scripts/updater/Vendoo.Updater.UI.ps1',
+  'scripts/updater/Vendoo.Updater.Host.ps1',
+  'scripts/updater/Vendoo.Updater.Worker.ps1',
+  'release-manifest.json',
+  'tools/release-manifest-lib.mjs',
+  'tools/generate-release-manifest.mjs',
+  'tools/apply-release-manifest.mjs',
+  'tools/verify-release-manifest-staging-3.0.mjs',
+  'docs/PRODUCTION_UPDATER_3_2.md',
+  'db/schema.sql',
+];
+for (const file of required) if (!existsSync(resolve(root, file))) failures.push(`Pflichtdatei fehlt: ${file}`);
+
+const batPath = resolve(root, 'UPDATE_VENDOO.bat');
+const bat = readFileSync(batPath);
+const batText = bat.toString('ascii');
+if (bat.length < 16) failures.push('UPDATE_VENDOO.bat ist unerwartet leer.');
+if (bat[0] === 0xef && bat[1] === 0xbb && bat[2] === 0xbf) failures.push('UPDATE_VENDOO.bat darf keine UTF-8-BOM besitzen.');
+for (let i = 0; i < bat.length; i += 1) {
+  if (bat[i] > 0x7f) { failures.push(`UPDATE_VENDOO.bat ist nicht reines ASCII (Byte ${i}).`); break; }
+  if (bat[i] === 0x0a && (i === 0 || bat[i - 1] !== 0x0d)) { failures.push(`UPDATE_VENDOO.bat enthält LF ohne CR an Byte ${i}.`); break; }
+  if (bat[i] === 0x0d && (i + 1 >= bat.length || bat[i + 1] !== 0x0a)) { failures.push(`UPDATE_VENDOO.bat enthält CR ohne LF an Byte ${i}.`); break; }
+}
+if (!batText.startsWith('@echo off\r\n')) failures.push('UPDATE_VENDOO.bat startet nicht exakt mit @echo off + CRLF.');
+for (const needle of ['cd /d "%~dp0"', '%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe', 'Vendoo.Updater.Preflight.ps1', 'update-vendoo-gui.ps1', 'pause']) {
+  if (!batText.includes(needle)) failures.push(`BAT-Startvertrag fehlt: ${needle}`);
+}
+for (const forbidden of ['chcp ', '-PackageRoot', 'start "', 'ä', 'ö', 'ü', 'ß']) if (batText.includes(forbidden)) failures.push(`BAT enthält verbotene Regression: ${forbidden}`);
+
+const attrs = readFileSync(resolve(root, '.gitattributes'), 'ascii');
+if (!attrs.includes('*.bat text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für BAT nicht.');
+if (!attrs.includes('*.cmd text eol=crlf')) failures.push('.gitattributes erzwingt CRLF für CMD nicht.');
+
+for (const rel of required.filter(file => file.endsWith('.ps1'))) {
+  const bytes = readFileSync(resolve(root, rel));
+  if (!(bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf)) failures.push(`${rel} besitzt keine UTF-8-BOM.`);
+  const text = bytes.subarray(3).toString('utf8');
+  if (rel.includes('updater/Vendoo.Updater.') && !text.includes('3.3.0')) failures.push(`${rel} enthält nicht Updater-Version 3.3.0.`);
+}
+
+const workerText = readFileSync(resolve(root, 'scripts/updater/Vendoo.Updater.Worker.ps1'), 'utf8');
+for (const marker of [
+  "release/$TargetVersion-production-update-v3",
+  'release-manifest.json',
+  'tools\\apply-release-manifest.mjs',
+  'overlay-with-explicit-removals',
+  'Veralteter oder anderer Updater-Sitzungsstand wird nicht übernommen.',
+  'StandardOutputEncoding',
+  'StandardErrorEncoding',
+  'Get-ProcessFailureSummary',
+  'Fehlerausgabe:',
+  'Letzte Standardausgabe:',
+  'Coolify Auto Deploy',
+  '/readyz',
+]) if (!workerText.includes(marker)) failures.push(`Updater-3.3-Vertrag fehlt: ${marker}`);
+for (const forbidden of [
+  "tools\\prepare-git-staging.mjs'),$PackageRoot,$CloneDir",
+  'cleanDestination',
+  'COOLIFY_DEPLOY_WEBHOOK_URL',
+  'Request-Secret',
+]) if (workerText.includes(forbidden)) failures.push(`Verbotene 2.x-Regression im Worker: ${forbidden}`);
+
+const applyText = readFileSync(resolve(root, 'tools/apply-release-manifest.mjs'), 'utf8');
+const libText = readFileSync(resolve(root, 'tools/release-manifest-lib.mjs'), 'utf8');
+for (const marker of ['applyReleaseManifest', 'overlay-with-explicit-removals', 'removedFiles', 'sha256File', 'db/schema.sql', 'Zielprüfung nach Kopieren', 'CONTROL_RELEASE_FILES', 'Steuerdatei-Prüfung nach Kopieren', 'allowExtraFiles']) {
+  if (!(applyText + libText).includes(marker)) failures.push(`Manifest-Release-Vertrag fehlt: ${marker}`);
+}
+for (const forbidden of ['cleanDestination(destination)', 'for (const name of readdirSync(destination))']) {
+  if (libText.includes(forbidden)) failures.push(`Manifest-Applier darf die Baseline nicht leeren: ${forbidden}`);
+}
+
+try {
+  const manifest = readAndValidateManifest(root, { allowExtraFiles: true });
+  if (manifest.version !== '1.43.0') failures.push(`Release-Manifest-Version falsch: ${manifest.version}`);
+  if (manifest.updaterVersion !== '3.3.0') failures.push(`Release-Manifest-Updaterversion falsch: ${manifest.updaterVersion}`);
+  for (const requiredFile of REQUIRED_RELEASE_FILES) {
+    if (!manifest.files.some(entry => entry.path === requiredFile)) failures.push(`Release-Manifest enthält Pflichtdatei nicht: ${requiredFile}`);
+  }
+} catch (error) {
+  failures.push(`Release-Manifest ist ungültig: ${error.message}`);
+}
+
+
+const ciText = readFileSync(resolve(root, '.github/workflows/ci.yml'), 'utf8');
+for (const marker of ['windows-release-contract', 'runs-on: windows-latest', 'npm run verify:all', 'verify-powershell-parser.ps1']) {
+  if (!ciText.includes(marker)) failures.push(`Windows-CI-Vertrag fehlt: ${marker}`);
+}
+
+if (!ciText.includes('Geführte Shell-Installer simulieren') || !ciText.includes('run: npm run verify:installer-shell')) {
+  failures.push('Linux-CI-Vertrag für den funktionalen Installer-Shell-Test fehlt.');
+}
+const releaseWorkflow = readFileSync(resolve(root, '.github/workflows/release.yml'), 'utf8');
+for (const marker of ['npm run verify:all', 'generate-release-manifest.mjs', 'git diff --exit-code -- release-manifest.json', 'Manifestbasiertes Release-Staging']) {
+  if (!releaseWorkflow.includes(marker)) failures.push(`Release-Workflow-Vertrag fehlt: ${marker}`);
+}
+const buildRelease = readFileSync(resolve(root, 'tools/build-release.mjs'), 'utf8');
+for (const marker of ['generateReleaseManifest', 'readAndValidateManifest', 'manifest.files', 'Manifestbasiertes Release-Staging']) {
+  if (!buildRelease.includes(marker)) failures.push(`Manifestbasierter Release-Builder fehlt: ${marker}`);
+}
+if (buildRelease.includes('shouldSkipStagingEntry')) failures.push('Release-Builder verwendet weiterhin die alte Ausschlusslisten-Kopie.');
+
+const installerWrapper = readFileSync(resolve(root, 'tools/verify-installer-shell.mjs'), 'utf8');
+const installerShell = readFileSync(resolve(root, 'tools/verify-installer-shell.sh'), 'utf8');
+for (const requiredMarker of ['VENDOO_INSTALLER_SHELL_HOST', 'VENDOO_TEST_WINDOWS_SHELL', "process.platform === 'win32'", "['-n', script]", 'verpflichtenden Linux-CI-Gate', 'Shell-Fehlerausgabe:', 'Shell-Standardausgabe:']) {
+  if (!installerWrapper.includes(requiredMarker)) failures.push(`Installer-Wrapper-Vertrag fehlt: ${requiredMarker}`);
+}
+for (const requiredMarker of ['MINGW*|MSYS*|CYGWIN*', 'POSIX-Modus 0600', 'assert_env_permissions', 'show_file', '--exclude=.git']) {
+  if (!installerShell.includes(requiredMarker)) failures.push(`Installer-Shell-Vertrag fehlt: ${requiredMarker}`);
+}
+if (!installerShell.includes("mode=$(stat -c '%a'")) failures.push('Linux/NAS/VPS-Rechteprüfung auf Modus 600 fehlt.');
+
+const packageJson = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'));
+if (packageJson.scripts?.['verify:release-manifest'] !== 'node tools/verify-release-manifest-staging-3.0.mjs') failures.push('verify:release-manifest ist nicht korrekt verdrahtet.');
+if (!packageJson.scripts?.['verify:all']?.includes('verify:release-manifest')) failures.push('verify:release-manifest fehlt in verify:all.');
+for (const name of ['verify:one-click-update', 'verify:updater-ui', 'verify:updater-hotfix']) {
+  if (packageJson.scripts?.[name] !== 'node tools/verify-production-updater-3.3.mjs') failures.push(`${name} verweist nicht auf Updater-3.3-Gate.`);
+}
+for (const [name, command] of Object.entries(packageJson.scripts || {})) {
+  if (/\bpython(?:3)?\b|\bpy(?:\.exe)?\s+-/i.test(command)) failures.push(`Aktiver npm-Script ${name} enthält eine Python-Abhängigkeit.`);
+}
+
+if (failures.length) {
+  console.error(`Production-Updater-3.3-Gate fehlgeschlagen (${failures.length})`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('Production-Updater-3.3-Gate erfolgreich: manifestbasiertes Overlay, SHA-256-Prüfung, bytegeprüfte Steuerdatei, explizite Löschungen, Pflichtdateien und Sitzungsgrenze geprüft.');
diff --git a/tools/verify-release-manifest-staging-3.0.mjs b/tools/verify-release-manifest-staging-3.0.mjs
new file mode 100644
index 0000000..b9f5b2e
--- /dev/null
+++ b/tools/verify-release-manifest-staging-3.0.mjs
@@ -0,0 +1,97 @@
+import {
+  copyFileSync,
+  existsSync,
+  mkdtempSync,
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { applyReleaseManifest, buildReleaseManifest, MANIFEST_FILE, readAndValidateManifest } from './release-manifest-lib.mjs';
+
+const temp = mkdtempSync(join(tmpdir(), 'vendoo-release-manifest-'));
+const source = join(temp, 'source');
+const destination = join(temp, 'repo');
+const requiredBodies = new Map([
+  ['package.json', '{"name":"vendoo","version":"1.43.0"}\n'],
+  ['package-lock.json', '{"name":"vendoo","lockfileVersion":3}\n'],
+  ['bootstrap.mjs', 'export const bootstrap = true;\n'],
+  ['server.mjs', 'export const server = true;\n'],
+  ['lib/db.mjs', 'export const db = true;\n'],
+  ['db/schema.sql', 'CREATE TABLE test(id INTEGER PRIMARY KEY);\n'],
+  ['update-manifest.json', '{"version":"1.43.0","updaterVersion":"3.3.0"}\n'],
+  ['UPDATE_VENDOO.bat', '@echo off\r\n'],
+  ['scripts/updater/Vendoo.Updater.Preflight.ps1', 'Write-Output preflight\n'],
+  ['scripts/updater/Vendoo.Updater.UI.ps1', 'Write-Output ui\n'],
+  ['scripts/updater/Vendoo.Updater.Host.ps1', 'Write-Output host\n'],
+  ['scripts/updater/Vendoo.Updater.Worker.ps1', 'Write-Output worker\n'],
+  ['tools/apply-release-manifest.mjs', 'export {};\n'],
+]);
+
+function write(root, rel, content) {
+  const target = join(root, rel);
+  mkdirSync(join(target, '..'), { recursive: true });
+  writeFileSync(target, content, 'utf8');
+}
+
+function writeManifest(root, removedFiles = []) {
+  const manifest = buildReleaseManifest(root, { version: '1.43.0', updaterVersion: '3.3.0', removedFiles });
+  writeFileSync(join(root, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+  return manifest;
+}
+
+try {
+  mkdirSync(join(destination, '.git'), { recursive: true });
+  for (const [rel, body] of requiredBodies) write(source, rel, body);
+  write(source, 'public/new.js', 'export const current = 3;\n');
+  write(source, 'logs/secret.log', 'must-not-enter-manifest');
+  write(destination, 'db/schema.sql', 'OLD SCHEMA');
+  write(destination, 'baseline-only.txt', 'must survive overlay');
+  write(destination, 'obsolete.txt', 'must be removed explicitly');
+  const manifest = writeManifest(source, ['obsolete.txt']);
+  if (manifest.files.some(entry => entry.path === 'logs/secret.log')) throw new Error('Runtime-Log wurde in das Release-Manifest aufgenommen.');
+  const result = applyReleaseManifest(source, destination);
+  if (result.copied !== manifest.files.length || result.controlCopied !== 1 || result.removed !== 1) throw new Error('Release-Zähler sind falsch.');
+  if (!existsSync(join(destination, 'baseline-only.txt'))) throw new Error('Overlay hat eine nicht deklarierte Baseline-Datei gelöscht.');
+  if (existsSync(join(destination, 'obsolete.txt'))) throw new Error('Explizite Löschung wurde nicht angewendet.');
+  if (readFileSync(join(destination, 'db/schema.sql'), 'utf8') !== requiredBodies.get('db/schema.sql')) throw new Error('db/schema.sql wurde nicht korrekt überlagert.');
+  if (!existsSync(join(destination, MANIFEST_FILE))) throw new Error('release-manifest.json wurde nicht als Steuerdatei in die Arbeitskopie übernommen.');
+  readAndValidateManifest(destination, { allowExtraFiles: true });
+
+  let controlDeletionBlocked = false;
+  try { buildReleaseManifest(source, { version: '1.43.0', updaterVersion: '3.3.0', removedFiles: [MANIFEST_FILE] }); }
+  catch (error) { controlDeletionBlocked = /Steuerdatei/.test(error.message); }
+  if (!controlDeletionBlocked) throw new Error('Löschung von release-manifest.json wurde nicht blockiert.');
+
+  const corrupt = join(temp, 'corrupt');
+  mkdirSync(corrupt, { recursive: true });
+  for (const entry of manifest.files) {
+    const target = join(corrupt, entry.path);
+    mkdirSync(join(target, '..'), { recursive: true });
+    copyFileSync(join(source, entry.path), target);
+  }
+  copyFileSync(join(source, MANIFEST_FILE), join(corrupt, MANIFEST_FILE));
+  writeFileSync(join(corrupt, 'db/schema.sql'), 'CORRUPT', 'utf8');
+  let corruptionBlocked = false;
+  try { applyReleaseManifest(corrupt, destination); } catch (error) { corruptionBlocked = /SHA-256|Dateigröße/.test(error.message); }
+  if (!corruptionBlocked) throw new Error('Manipulierte Release-Datei wurde nicht blockiert.');
+
+  const missing = join(temp, 'missing');
+  mkdirSync(missing, { recursive: true });
+  for (const entry of manifest.files) {
+    if (entry.path === 'db/schema.sql') continue;
+    const target = join(missing, entry.path);
+    mkdirSync(join(target, '..'), { recursive: true });
+    copyFileSync(join(source, entry.path), target);
+  }
+  copyFileSync(join(source, MANIFEST_FILE), join(missing, MANIFEST_FILE));
+  let missingBlocked = false;
+  try { applyReleaseManifest(missing, destination); } catch (error) { missingBlocked = /fehlende Paketdatei|Pflichtdatei|verweist auf fehlende/.test(error.message); }
+  if (!missingBlocked) throw new Error('Fehlende Pflichtdatei db/schema.sql wurde nicht blockiert.');
+
+  console.log(`Release-Manifest-Gate 3.3 erfolgreich: ${manifest.files.length} Dateien hashgeprüft, Overlay bewahrt Baseline, Löschungen sind explizit, Manipulation und fehlendes db/schema.sql werden blockiert.`);
+} finally {
+  rmSync(temp, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 });
+}
diff --git a/tools/verify-security-foundation-1.41.2.mjs b/tools/verify-security-foundation-1.41.2.mjs
index 55a8749..e81e2e4 100644
--- a/tools/verify-security-foundation-1.41.2.mjs
+++ b/tools/verify-security-foundation-1.41.2.mjs
@@ -46,7 +46,7 @@ try {
   assert(!server.includes("scriptSrc: [\"'self'\", \"'unsafe-inline'\""), 'Inline-Skripte sind in CSP noch erlaubt');
   assert(!read('public/index.html').includes('onclick='), 'index.html enthält Inline-Eventhandler');
   assert(!read('public/login.html').includes('<script>'), 'login.html enthält Inline-Script');
-  assert(read('public/login.html').includes('/login.js?v=1.41.2'), 'Externes Login-Script fehlt');
+  assert(read('public/login.html').includes('/login.js?v=1.43.0'), 'Externes Login-Script fehlt');
   assert(!read('public/app.js').includes('onclick='), 'app.js erzeugt Inline-Eventhandler');
   for (const file of ['lib/ebay-api.mjs','lib/etsy-api.mjs']) {
     const oauth = read(file);
@@ -57,11 +57,11 @@ try {
   const manifest = JSON.parse(read('app/modules/security/module.json'));
   assert(manifest.status === 'native' && manifest.provides.includes('security.secrets'), 'Security-Modul ist nicht nativ');
   const pkg = JSON.parse(read('package.json'));
-  assert(pkg.version === '1.41.2', `Paketversion ist ${pkg.version}`);
+  assert(pkg.version === '1.43.0', `Paketversion ist ${pkg.version}`);
 
   const syntax = spawnSync(process.execPath, ['--check', join(root, 'public/login.js')], { encoding:'utf8' });
   assert(syntax.status === 0, `login.js Syntaxfehler: ${syntax.stderr}`);
 } finally { rmSync(temp, { recursive:true, force:true }); }
 
-if (failures.length) { console.error(`Security-Foundation-Gate 1.41.2 fehlgeschlagen (${failures.length}):`); failures.forEach(item => console.error(`- ${item}`)); process.exit(1); }
-console.log('Security-Foundation-Gate 1.41.2 erfolgreich: verschlüsselte Secret-Migration, Maskierung, Inputschutz, strikte Script-CSP, Request-/Correlation-IDs und Telemetrie geprüft.');
+if (failures.length) { console.error(`Security-Foundation-Gate 1.43.0 fehlgeschlagen (${failures.length}):`); failures.forEach(item => console.error(`- ${item}`)); process.exit(1); }
+console.log('Security-Foundation-Gate 1.43.0 erfolgreich: verschlüsselte Secret-Migration, Maskierung, Inputschutz, strikte Script-CSP, Request-/Correlation-IDs und Telemetrie geprüft.');
diff --git a/tools/verify-sqlite-cleanup-contract-1.43.0.mjs b/tools/verify-sqlite-cleanup-contract-1.43.0.mjs
new file mode 100644
index 0000000..6fbccb9
--- /dev/null
+++ b/tools/verify-sqlite-cleanup-contract-1.43.0.mjs
@@ -0,0 +1,70 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const pkg = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'));
+const failures = [];
+const importPattern = /(?:import\s+(?:[^'";]+?\s+from\s+)?|import\s*\()\s*['"]([^'"]+)['"]/g;
+
+function resolveImport(fromFile, specifier) {
+  if (!specifier.startsWith('.')) return null;
+  const base = resolve(dirname(fromFile), specifier);
+  const candidates = [base, `${base}.mjs`, `${base}.js`, resolve(base, 'index.mjs'), resolve(base, 'index.js')];
+  return candidates.find((candidate) => existsSync(candidate)) || null;
+}
+
+const dependencyCache = new Map();
+function dependencyClosure(file, visiting = new Set()) {
+  if (dependencyCache.has(file)) return dependencyCache.get(file);
+  if (visiting.has(file)) return new Set();
+  visiting.add(file);
+  const source = readFileSync(file, 'utf8');
+  const result = new Set();
+  for (const match of source.matchAll(importPattern)) {
+    const dependency = resolveImport(file, match[1]);
+    if (!dependency) continue;
+    result.add(dependency);
+    for (const nested of dependencyClosure(dependency, new Set(visiting))) result.add(nested);
+  }
+  dependencyCache.set(file, result);
+  return result;
+}
+
+function collectVerifierFiles(scriptName, seen = new Set()) {
+  if (seen.has(scriptName)) return [];
+  seen.add(scriptName);
+  const command = pkg.scripts?.[scriptName] || '';
+  const files = [];
+  for (const match of command.matchAll(/npm run ([\w:-]+)/g)) files.push(...collectVerifierFiles(match[1], new Set(seen)));
+  for (const match of command.matchAll(/node(?: --no-warnings)? (tools\/[A-Za-z0-9._-]+\.mjs)/g)) files.push(resolve(root, match[1]));
+  return files;
+}
+
+const dbModule = resolve(root, 'lib/db.mjs');
+const activeFiles = [...new Set(collectVerifierFiles('verify:all'))];
+for (const file of activeFiles) {
+  const source = readFileSync(file, 'utf8');
+  const dependencies = dependencyClosure(file);
+  const opensVendooDatabase = dependencies.has(dbModule);
+  if (!opensVendooDatabase) continue;
+  if (!source.includes('VENDOO_DATA_DIR') || !source.includes('VENDOO_DB_PATH')) failures.push(`${file.slice(root.length + 1)} öffnet lib/db.mjs transitiv ohne isolierten Test-Datenpfad.`);
+  if (!source.includes('closeVendooDatabase')) failures.push(`${file.slice(root.length + 1)} öffnet lib/db.mjs transitiv, schließt die Datenbank aber nicht explizit.`);
+  if (!source.includes('removeTempDirectory')) failures.push(`${file.slice(root.length + 1)} verwendet nicht den Windows-tauglichen Temp-Cleanup.`);
+}
+
+for (const required of [
+  'tools/test-runtime-cleanup.mjs',
+  'tools/verify-controlled-invitations-1.42.0.mjs',
+  'tools/verify-initial-disabled-modules-1.41.2.mjs',
+  'tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs',
+]) {
+  if (!existsSync(resolve(root, required))) failures.push(`Pflichtdatei fehlt: ${required}`);
+}
+
+if (failures.length) {
+  console.error(`SQLite-Cleanup-Vertragsprüfung 1.43.0 fehlgeschlagen (${failures.length}):`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log(`SQLite-Cleanup-Vertragsprüfung 1.43.0 erfolgreich: ${activeFiles.length} aktive Verifier transitiv geprüft; alle Vendoo-DB-Temp-Tests schließen ihre Handles.`);
diff --git a/tools/verify-theme-manager-1.41.2.mjs b/tools/verify-theme-manager-1.41.2.mjs
index a192928..73facb7 100644
--- a/tools/verify-theme-manager-1.41.2.mjs
+++ b/tools/verify-theme-manager-1.41.2.mjs
@@ -8,6 +8,7 @@ import {
 
 const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const read = rel => readFileSync(join(root, rel), 'utf8');
+const canonicalizeEol = value => String(value).replace(/\r\n?/g, '\n');
 const failures = [];
 const assert = (condition, message) => { if (!condition) failures.push(message); };
 const expectThrow = (fn, code, message) => {
@@ -16,7 +17,7 @@ const expectThrow = (fn, code, message) => {
 };
 
 const pkg = JSON.parse(read('package.json'));
-assert(pkg.version === '1.41.2', `Paketversion ist ${pkg.version}`);
+assert(pkg.version === '1.43.0', `Paketversion ist ${pkg.version}`);
 const source = JSON.parse(read('public/design-system/tokens/source.json'));
 assert(source.contractVersion === '1.1.0', `Tokenvertrag ist ${source.contractVersion}`);
 assert(Object.keys(source.tokens).length >= 42, `Zu wenige Tokens: ${Object.keys(source.tokens).length}`);
@@ -39,7 +40,9 @@ assert(!poorContrast.ok && poorContrast.failures.length >= 2, 'Kontrastfehler wu
 const before = read('public/design-system/tokens.css');
 const generated = spawnSync(process.execPath, [join(root, 'tools/generate-design-tokens.mjs')], { cwd: root, encoding: 'utf8' });
 assert(generated.status === 0, `Token-Generator fehlgeschlagen: ${generated.stderr || generated.stdout}`);
-assert(before === read('public/design-system/tokens.css'), 'Token-Generator ist nicht deterministisch');
+const generatedCss = read('public/design-system/tokens.css');
+assert(canonicalizeEol(before) === canonicalizeEol(generatedCss), 'Token-Generator ist inhaltlich nicht deterministisch');
+assert(!generatedCss.includes('\r'), 'Token-Generator muss kanonische LF-Zeilenenden schreiben');
 
 const manifest = JSON.parse(read('app/modules/themes/module.json'));
 assert(manifest.status === 'native', 'Theme-Modul ist nicht nativ');
@@ -59,7 +62,7 @@ for (const marker of [
 assert(server.indexOf("path: '/api/themes/system-default'") < server.indexOf("path: '/api/themes/:id'"), 'Systemstandard-Route wird von :id überschattet');
 
 const html = read('public/index.html');
-for (const marker of ['id="theme-manager-root"','id="theme-choice-grid"','id="theme-token-groups"','id="theme-contrast-list"','theme-manager.js?v=1.41.2']) assert(html.includes(marker), `Theme-Manager UI fehlt: ${marker}`);
+for (const marker of ['id="theme-manager-root"','id="theme-choice-grid"','id="theme-token-groups"','id="theme-contrast-list"','theme-manager.js?v=1.43.0']) assert(html.includes(marker), `Theme-Manager UI fehlt: ${marker}`);
 const manager = read('public/modules/theme-manager/theme-manager.js');
 assert(!manager.includes('.innerHTML ='), 'Theme Manager verwendet unsicheres innerHTML');
 for (const marker of ['/api/themes/validate','/api/themes/preference','/api/themes/system-default','window.VendooTheme?.previewTheme']) assert(manager.includes(marker), `Theme Manager Logik fehlt: ${marker}`);
@@ -69,8 +72,8 @@ const schema = read('db/schema.sql');
 for (const marker of ['CREATE TABLE IF NOT EXISTS theme_profiles','CREATE TABLE IF NOT EXISTS user_theme_preferences']) assert(schema.includes(marker), `Theme-Schema fehlt: ${marker}`);
 
 if (failures.length) {
-  console.error(`Theme-Manager-Gate 1.41.2 fehlgeschlagen (${failures.length}):`);
+  console.error(`Theme-Manager-Gate 1.43.0 fehlgeschlagen (${failures.length}):`);
   failures.forEach(item => console.error(`- ${item}`));
   process.exit(1);
 }
-console.log(`Theme-Manager-Gate 1.41.2 erfolgreich: ${Object.keys(source.tokens).length} Tokens, natives Theme-Modul, sichere Profile, Benutzerpräferenzen, Kontrastprüfung und tokenisierte Komponenten geprüft.`);
+console.log(`Theme-Manager-Gate 1.43.0 erfolgreich: ${Object.keys(source.tokens).length} Tokens, natives Theme-Modul, sichere Profile, Benutzerpräferenzen, Kontrastprüfung und tokenisierte Komponenten geprüft.`);
diff --git a/tools/verify-updater-hang-hotfix-1.43.0.mjs b/tools/verify-updater-hang-hotfix-1.43.0.mjs
new file mode 100644
index 0000000..4be26a3
--- /dev/null
+++ b/tools/verify-updater-hang-hotfix-1.43.0.mjs
@@ -0,0 +1 @@
+import './verify-production-updater-2.0.mjs';
diff --git a/tools/verify-updater-status-ui-1.43.0.mjs b/tools/verify-updater-status-ui-1.43.0.mjs
new file mode 100644
index 0000000..4be26a3
--- /dev/null
+++ b/tools/verify-updater-status-ui-1.43.0.mjs
@@ -0,0 +1 @@
+import './verify-production-updater-2.0.mjs';
diff --git a/tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs b/tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs
new file mode 100644
index 0000000..263789e
--- /dev/null
+++ b/tools/verify-windows-sqlite-cleanup-regression-1.43.0.mjs
@@ -0,0 +1,39 @@
+import { readdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const cases = [
+  ['initial-modules', 'tools/verify-initial-disabled-modules-1.41.2.mjs', 'vendoo-win-cleanup-modules-'],
+  ['controlled-invitations', 'tools/verify-controlled-invitations-1.42.0.mjs', 'vendoo-win-cleanup-invitations-'],
+  ['capability-graph', 'tools/verify-capability-graph-1.41.2.mjs', 'vendoo-win-cleanup-capabilities-'],
+  ['platform-architecture', 'tools/verify-platform-architecture-1.41.2.mjs', 'vendoo-win-cleanup-architecture-'],
+];
+const failures = [];
+
+for (const [name, relativeFile, prefix] of cases) {
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    const result = spawnSync(process.execPath, [resolve(root, relativeFile)], {
+      cwd: root,
+      env: { ...process.env, VENDOO_TEST_TEMP_PREFIX: prefix },
+      encoding: 'utf8',
+      timeout: 60_000,
+    });
+    if (result.status !== 0) {
+      failures.push(`${name} Durchlauf ${attempt} scheiterte (${result.status}): ${(result.stderr || result.stdout || '').trim()}`);
+      continue;
+    }
+    const leftovers = readdirSync(tmpdir()).filter((entry) => entry.startsWith(prefix));
+    if (leftovers.length) failures.push(`${name} Durchlauf ${attempt} hinterließ Temp-Ordner: ${leftovers.join(', ')}`);
+  }
+}
+
+if (failures.length) {
+  console.error(`Windows-SQLite-Cleanup-Regression 1.43.0 fehlgeschlagen (${failures.length}):`);
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+console.log('Windows-SQLite-Cleanup-Regression 1.43.0 erfolgreich: Initialmodule, Einladungen, Capability-Graph und Architektur liefen je dreimal isoliert ohne offene SQLite-Datei oder Temp-Rest.');
diff --git a/update-manifest.json b/update-manifest.json
index 8f2d1e1..75a6b64 100644
--- a/update-manifest.json
+++ b/update-manifest.json
@@ -1,10 +1,13 @@
 {
   "schema": "vendoo-update-manifest-v1",
-  "version": "1.41.2",
-  "name": "Vendoo Git Ignore Boundary & Module Tracking Hotfix",
+  "version": "1.43.0",
+  "name": "Vendoo Manifest-Based Production Update 3.3",
   "channel": "stable",
   "minimum_node": "22",
-  "notes": "Root-verankerte Runtime-Ignores, damit app/modules und app/modules/sessions zuverlässig getrackt werden; Deploy-Staging prüft Pflichtdateien und Git-Tracking vor dem Push.",
+  "notes": "Production Updater 3.3 trennt Windows-Git-Bash-Portabilität von der strikten POSIX-Rechteprüfung und liefert vollständige Shell-Diagnosen.",
   "download_url": "",
-  "sha256": ""
+  "sha256": "",
+  "updater_version": "3.3.0",
+  "updaterVersion": "3.3.0",
+  "removedFiles": []
 }