124 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Hermes	3b4c73425a	fix(css): hide summary::marker for Firefox + list-style:none on li (Safari)	2026-06-05 17:24:30 +00:00
Hermes	acaea97415	fix(locale-switcher): make flag the visual anchor (32x24, no border, no lazy load) ... Martin feedback round 3: dropdown still looked 'fuerchterlich' even with the official flag-icons. Root cause: 14px vertical padding around an 18px-tall flag meant the flag occupied only 39% of the trigger height and was dwarfed by whitespace. Plus a 1px black box-shadow border made flags look 'boxy', and loading='lazy' caused empty boxes on the four menu flags the moment the <details> opened. Changes: - Flag size 24x18 -> 32x24 (+78% area, ~4:3 matches flag-icons) - Trigger padding 14px 8px -> 6px (flag now 73% of trigger width, 55% of trigger height, was 46%/39%) - Drop the artificial 1px black box-shadow outline on flags - Drop border-radius on flags (real flag-icons look better as crisp rectangles) - Drop object-fit: cover (no longer needed for SVG) - Drop loading='lazy' and decoding='async' (4 small SVGs, must be ready the moment <details> opens, not flash empty boxes) - min-height: 44px restored on trigger for WCAG 2.5.5 touch target - Menu border-radius 8 -> 10px, padding tightened, font-size 0.85 -> 0.9rem for label legibility - Two-layer box-shadow on menu for subtle elevation	2026-06-05 17:05:01 +00:00
Hermes	69e23d959a	fix(flags): rename flag assets to match ADR-002 locale mapping (en->gb, uk->ua)	2026-06-04 19:45:38 +00:00
Hermes	391985cd42	fix(flags): replace hand-coded inline SVGs with official flag-icons assets ... The previous inline flag SVGs were visually broken — most notably the 'en' Union Jack, which was reduced to a single X plus a cross and did not resemble the real flag at all. The 'de' and 'ru' stripes also had slight off-by-pixel rounding errors. Switched to lipis/flag-icons (CC-BY 4.0) shipped as static files under public/img/flags/. These are the canonical, professionally-designed flag icons with correct proportions and all the details of the real flags. Loaded via plain <img> tags (no JS, no external CDN at runtime, no FOUC, no extra request after the page is cached). Locale code mapping: en -> gb (per ADR-002, en = en-GB). Unknown locales fall back to a 1x1 transparent gif so the layout stays intact.	2026-06-04 19:43:23 +00:00
Hermes	70691ff242	fix(locale-switcher): size flag SVG in closed trigger ... The original CSS scoped .flag to .locale-switcher__option only, so the flag SVG inside the <summary> trigger rendered at 0x0 (intrinsic svg defaults). Add a .locale-switcher .flag rule so the closed trigger visibly shows a 24x16 flag. Playwright recheck: trigger 52x44, flag 24x16 (matches previous inline flags). 141/141 PHPUnit green.	2026-06-04 18:33:32 +00:00
Hermes	08235b0faf	refactor(locale-switcher): single flag-sized dropdown, drop 4-inline-flag UI ... The nav previously showed 4 inline flag buttons (DE/EN/UK/RU) on desktop and a details-based dropdown on mobile. Martin asked for one dropdown with a trigger the size of a single flag, and the 4 inline flags to go away. - LocaleSwitcher: render a single <details class='locale-switcher'> everywhere; trigger is one flag + tiny caret; menu lists all 4 with labels. - Drop the 4-inline <ul> and the locale-switcher-mobile duplicate. - CSS: replace both blocks with one compact dropdown (flag-sized trigger, 44px touch target via padding, scrolled/transparent-nav variants). - Tests: assert 4 menu options, 5 flag SVGs, single <details> dropdown, active locale is a <span aria-current>, others are <a> with hreflang. - 141/141 PHPUnit green.	2026-06-04 18:24:36 +00:00
Hermes	9a14803d26	fix(ui): 10 regression fixes from new design pass ... - Nav: always visible glass background (no more transparent-on-top) - Logo: remove text span, kill link underline completely - Masonry: fix HTML class drift (gallery-grid -> masonry-grid) - Gallery captions: rename to grid-item-label (hover-only) - Honeypot: rename to hp-field (was rendered visible!) - Hero: stronger gradient + text-shadow on h1/tag/meta - LAGE features: cards with pin icon, no more bulleted list - Map: full-viewport-width break-out from .lage-section - Contact form: border-radius, focus glow, custom select arrow, working .form-submit button style - Light text: unified --text-muted-on-dark token (replaces 4 magic white-XX% variants + --stone on .fact-label) - A11y test: update honeypot class assertion	2026-06-04 18:03:50 +00:00
Hermes	7dd8023222	-m	2026-06-04 17:23:49 +00:00
Hermes	c737312ada	fix(css): mobile nav overflow, hero-bg as <img>, map wrapper class ... - mobile (≤900px): hide .nav-cta (was overflowing viewport by 65px) - .nav-hamburger span: center inside button via left:50%; top:50% - .nav-hamburger.active states: add translate(-50%,-50%) so the X lines stay centered after rotation - .hero-bg: switch from background-* to object-fit/object-position (was an <img> but CSS targeted background-image → 1024px wide hero-bg broke mobile layout) - responsive: also override nav.scrolled padding on mobile (specificity 0,1,1 > 0,0,1 → 3rem padding stayed in effect, pushing the hamburger off-screen with width:0 on scroll) - home/index.php: rename lage-map → lage-map-wrapper so the existing .lage-map-wrapper CSS (border, margin-top: 3rem, overflow: hidden, full-width 450px iframe) actually applies	2026-06-04 16:39:05 +00:00
Hermes	4bc035b783	fix(i18n): map gallery + hero + floorplan images to real filenames; force-DE on legal pages ... - home: map 9/12 gallery items to real filenames (Wohnzimmer-1 -> wohnzimmer2.png, Badezimmer-1 -> Bad.jpg, etc.); remove 3 items whose source images are missing - home: hero-bg.jpg -> Außenansicht-2.webp (file exists) - home: floorplan image -> /bilder/grundrisse/<name>.png (subdir + correct name) - layout: og:image fallback Aussenansicht-2.webp (ASCII) -> Außenansicht-2.png (UTF-8) - layout: hero-bg.jpg fallback -> Außenansicht-2.png (UTF-8) - Controller::render(): add $forceLocale param for legal pages - ImpressumController / DatenschutzController: force 'de' (TMG §5 / GDPR) so <html lang=de> is emitted regardless of cookie	2026-06-04 16:13:54 +00:00
Hermes	d9b4c71735	fix(css): replace deprecated clip: rect() with clip-path: inset(50%) — unblocks deploy-test.yml	2026-06-04 11:52:57 +00:00
Hermes	586a496aa6	docs: Ph4 deployment-test-plan + smoke-tests + rollback strategy	2026-06-04 11:18:25 +00:00
Hermes	c5a608d77a	chore: remove dead lowercase app/controllers/ (PSR-4 autoload uses App\\Controllers\\)	2026-06-04 11:15:24 +00:00
Hermes	a1984b9413	test(i18n): integration render tests for 4 locales + Playwright E2E flow (closes #77)	2026-06-04 11:14:25 +00:00
Hermes	13a25aded2	feat(i18n): accessibility - per-field form errors, landmark aria-labels, tests (closes #76)	2026-06-04 11:04:06 +00:00
Hermes	0186de90ec	feat(i18n): responsive locale-switcher with SVG flags (closes #75)	2026-06-04 09:44:40 +00:00
Hermes	4b1c779846	feat(i18n): translation files DE/EN/UK/RU + layout integration (closes #74)	2026-06-04 09:31:34 +00:00
Hermes	ce21242308	feat(i18n): LocaleController switcher with open-redirect protection (closes #73) ... - App\Controllers\LocaleController: GET /locale?set=xx&return=/path - Sets 1-year cookie (HttpOnly=false for SSR, SameSite=Lax, Secure on HTTPS) - 302 redirect to explicit return URL > Referer > / - Pure buildResponse() helper for unit tests (no headers/exit) - current() helper: resolves locale from $_GET/$_COOKIE/Accept-Language - safeRedirect: rejects absolute URLs, protocol-relative (//evil.com), backslash tricks (\\evil.com), javascript:/data: schemes - 28 PHPUnit tests (LocaleControllerTest), all green - Total project tests now: 92	2026-06-04 08:57:33 +00:00
Hermes	63c8c759d2	feat(i18n): core Locale resolver + I18n t()-helper with tests (closes #72) ... - App\Core\Locale: query-param > cookie > Accept-Language > 'de' fallback - BCP-47 region stripping (en-US -> en, uk-UA -> uk) - q-value sorting with stable order - og:locale mapping (de_DE, en_GB, uk_UA, ru_RU) - hreflang alternates helper - App\Core\I18n: t() with {placeholder} interpolation, lookup chain current-locale -> de -> key, in-memory cache - ADR-002: documents the architecture decision - 46 PHPUnit tests (LocaleTest, I18nTest), all green	2026-06-04 08:53:58 +00:00
Hermes	f9295a2d07	docs(adr): add ADR-001 for PHPUnit integration (#65, #67) ... Nachtraegliche Architektur-Dokumentation der Test-Integration (CI-Pipeline + Pre-Commit-Hook mit Shared-Script-Pattern). - Begruendet 2-Layer-Strategie (lokal + CI) - Dokumentiert Performance-Optimierungen (Conditional PHPUnit, Composer-Lazy-Install) - Listet verworfene Alternativen mit Rationale - Beschreibt Stale-Index-Edge-Case-Mitigation	2026-06-04 07:47:09 +00:00
greggy	b5073fd892	Merge pull request 'Hooks: PHPUnit in Pre-Commit (#67)' (#70) from feature/issue-67-phpunit-precommit into main	2026-06-04 02:41:15 +02:00
greggy	fce5c3be78	Merge pull request 'CI: PHPUnit Pipeline (#65)' (#69) from feature/issue-65-phpunit-pipeline into main	2026-06-04 02:40:48 +02:00
Hermes	3f1f0f5788	fix(hooks): use array-based file iteration for safety check ... mapfile + array prevents word-splitting issues with filenames containing spaces or other shell-special characters. Affects both the affected-files listing and the stale-index safety check. Without this fix, a filename like 'My Module.php' would be split into 'My' and 'Module.php', causing the disk-existence check to look for wrong paths.	2026-06-04 00:15:21 +00:00
Hermes	b0f769d186	feat(hooks): run PHPUnit in pre-commit hook (#67) ... Erweitert den Husky pre-commit-Hook um einen PHPUnit-Schritt. Ausserdem wird scripts/safe-commit.sh aktualisiert, damit das Safety-Net dieselbe Logik wie der Hook verwendet (kein doppelter Code). Vorher: Hook rief nur 'npx lint-staged' auf. Nachher: Hook ruft scripts/pre-commit-checks.sh auf, das - lint-staged ausfuehrt (unveraendert) - PHPUnit nur dann ausfuehrt, wenn PHP-relevante Dateien gestaged sind (Performance-Optimierung: Issue #67 Anforderung) - Bei Test-Fehler den Commit mit Exit-Code 1 abbricht Closes #67	2026-06-03 23:42:31 +00:00
Hermes	85cf4f3b03	chore(hooks): add shared pre-commit-checks script ... Extrahiert die Pre-Commit-Checks (lint-staged + PHPUnit) in ein gemeinsames Script, das sowohl vom Husky-Hook (.husky/pre-commit) als auch von scripts/safe-commit.sh aufgerufen wird. Logik: - lint-staged laeuft immer (HTML/CSS/JS/JSON/MD/PHP-Syntax) - PHPUnit laeuft nur, wenn PHP-relevante Dateien gestaged sind (*.php, phpunit.xml, composer.json, composer.lock) - Safety-Check: alle gestaged PHP-Dateien muessen auf Disk existieren - Bei Test-Fehler wird der Commit mit Exit-Code != 0 abgebrochen - Composer-Deps werden nur bei Bedarf installiert (Cache-Hit)	2026-06-03 23:42:22 +00:00
Hermes	71adf37762	ci: add PHPUnit pipeline (#65) ... Neue Gitea-CI-Pipeline analog zur bestehenden lint.yml: - Trigger auf push und pull_request - Installiert PHP + Composer + Extensions (xml, mbstring) - Fuehrt 'composer install' und 'vendor/bin/phpunit' aus - 18 Tests / 31 Assertions gruen	2026-06-03 23:36:04 +00:00
greggy	45368bb607	fix: replace jQuery with vanilla JS scrollIntoView	2026-06-02 23:50:56 +02:00
greggy	b774bd0363	fix: scroll-class check on load, hero null guard, JS syntax fix	2026-06-02 23:50:55 +02:00
greggy	ad4284733c	fix: solid navbar background on scroll (closes #68)	2026-06-02 23:50:54 +02:00
greggy	1a72210608	Merge pull request 'feat: PHPUnit Test-Infrastruktur und Router-Tests' (#64) from feature/phpunit-tests into main	2026-05-22 21:33:32 +02:00
greggy	3a30abc05e	fix: replace custom autoloader with composer PSR-4 autoloader ... The custom autoloader used lowercase directory names which broke after renaming app/core/ → app/Core/ and app/controllers/ → app/Controllers/ for PSR-4 compliance.	2026-05-22 19:19:28 +00:00
greggy	57b97b5069	feat: add PHPUnit test infrastructure and Router tests ... - Add composer.json with PHPUnit 11 and PSR-4 autoloading - Add phpunit.xml configuration - Rename app/core/ → app/Core/ and app/controllers/ → app/Controllers/ (PSR-4) - Add 18 unit tests for App\Core\Router (31 assertions) - addRoute(): default action, custom action, overwrite - dispatch(): URL normalization, direct match, legacy redirects - dispatch(): 404 handling, controller/action not found exceptions - TestableRouter subclass to intercept side-effects - Update .gitignore (vendor/, .phpunit.cache/)	2026-05-22 19:02:02 +00:00
greggy	b6f745e144	Merge pull request 'Fix #54: Pre-Commit Hook als Gate für jeden Commit' (#55) from feature/issue-54-precommit-lint-gate into main	2026-05-22 16:41:40 +02:00
greggy	e7f2875287	Merge pull request 'fix(#62): Correct PLZ 98533 → 98553 in Lage-Section' (#63) from feature/issue-62-fix-plz into main	2026-05-22 16:31:32 +02:00
Claw (KI-Assistent)	0c6f8cac5a	merge: resolve conflict in deploy-test.yml with main	2026-05-22 14:28:47 +00:00
greggy	2b5b0afd91	Merge pull request 'fix(#58): Remove broken getElementById form stub' (#61) from feature/issue-58-fix-formsuccess into main	2026-05-22 16:24:52 +02:00
Claw (KI-Assistent)	e896831b36	fix(#62): correct PLZ from 98533 to 98553 in lage section ... The PLZ was incorrect in the Lage-Section view (98533 instead of 98553). HomeController and meta description already used the correct 98553. Closes #62	2026-05-22 14:23:07 +00:00
Claw (KI-Assistent)	3db7dc8971	fix(#58): remove broken getElementById('contactForm') stub ... The JS had a dangling document.getElementById('contactForm') call that did nothing - no event handler attached, no return value used. Form handling is entirely server-side (PHP POST → redirect to #form-result). No JS form intervention needed. Closes #58	2026-05-22 14:14:23 +00:00
Claw (KI-Assistent)	e30bc5704b	Merge PR #59: remove old haus-schleusingen.html references (fixes #56)	2026-05-22 14:05:29 +00:00
Claw (KI-Assistent)	25a48e9958	Merge PR #60: fix contact form mailto + formSuccess ID (fixes #57, #58)	2026-05-22 14:04:07 +00:00
Claw (KI-Assistent)	a170afa7c0	fix: remove mailto handler and fix formSuccess element ID (refs #57, #58)	2026-05-22 13:57:21 +00:00
Claw (KI-Assistent)	148b4849fd	fix: remove all references to old haus-schleusingen.html (refs #56)	2026-05-22 13:38:33 +00:00
Claw (AI)	4d2393f436	docs: add pre-commit hook activation instructions to README (closes #54)	2026-05-22 13:16:54 +00:00
Claw	fb646eba85	feat: enforce lint checks as gate for commits and CI (#54) ... - Add PHP syntax check to lint-staged via scripts/lint-php.sh - Add lint:php script to package.json - Update lint script to include PHP checks - Create scripts/safe-commit.sh for AI agent use - Update deploy-test.yml: lint jobs as gate before deploy - Add branch protection for main requiring status checks - Update AGENTS.md with pre-commit hook rules for agents Also addresses #53: CI requires lint checks before merge Co-authored-by: Claw <claw@openclaw.local>	2026-05-22 07:25:57 +00:00
greggy	6b605bb961	Merge pull request 'Fix #48: Dateien an korrekte Orte im Projekt verschieben' (#52) from feature/issue-48-cleanup-files into main ... Reviewed-on: #52	2026-05-22 08:56:43 +02:00
Claw	9c2c8324b0	refactor: clean up file locations (#48) ... - Remove duplicate bilder/ directory from root (already in public/bilder/) - Move screenshots (docker-preview, page-preview, screenshot-landingpage) to docs/ - Remove duplicate robots.txt from root (already in public/) - Update README.md image references to docs/ path - Update deploy workflow exclusions	2026-05-22 06:53:50 +00:00
greggy	344b0d8271	Merge pull request 'Fix #41: CSP und Security Headers implementieren' (#49) from feature/issue-41-csp-header into main ... Reviewed-on: #49	2026-05-22 08:34:34 +02:00
greggy	9b92136048	Merge pull request 'Fix #42: CSRF-Schutz für Kontaktformular' (#50) from feature/issue-42-csrf-protection into main ... Reviewed-on: #50	2026-05-22 08:33:41 +02:00
greggy	bd1407f8ab	Merge pull request 'Fix #43: Offene Redirects via REQUEST_URI fixen' (#51) from feature/issue-43-open-redirect-fix into main ... Reviewed-on: #51	2026-05-22 08:32:23 +02:00
Claw (KI-Assistent)	d44fb337e2	fix(security): replace REQUEST_URI with fixed path in redirects (#43) ... - Replace all 3 occurrences of $_SERVER['REQUEST_URI'] with '/' - Prevents potential open redirect via client-controlled REQUEST_URI - Safe since contact form only exists on homepage Fix #43	2026-05-21 23:06:19 +00:00