commit fd473f00af1021f37cf653181a936fc339e07ca8
Author: Simon Kühn <simon@kuehn.de>
Date:   Wed Apr 29 15:40:57 2026 +0200

    Initial commit: Dudi habit tracker
    
    Symfony 8 SPA with Doctrine ORM, Symfony Security, vanilla JS frontend.
    Migrated from plain PHP (delight-im/auth + raw SQL) to full Symfony stack.
    
    Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

diff --git a/.env b/.env
new file mode 100644
index 0000000..c36a3ba
--- /dev/null
+++ b/.env
@@ -0,0 +1,18 @@
+###> symfony/framework-bundle ###
+APP_ENV=dev
+APP_SECRET=change_me
+###< symfony/framework-bundle ###
+
+###> doctrine/doctrine-bundle ###
+DATABASE_URL="mysql://app:!ChangeMe!@127.0.0.1:3306/app?serverVersion=10.11-MariaDB&charset=utf8mb4"
+###< doctrine/doctrine-bundle ###
+
+###> symfony/mailer ###
+MAILER_DSN=null://null
+MAILER_FROM=noreply@example.com
+###< symfony/mailer ###
+
+###> app ###
+APP_URL=http://localhost
+DEFAULT_URI=http://localhost/dd
+###< app ###
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..3ba2448
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,18 @@
+###> symfony ###
+/.env.local
+/.env.*.local
+/var/
+/vendor/
+/public/bundles/
+###< symfony ###
+
+###> legacy (pre-symfony) ###
+/include/config.php
+###< legacy ###
+
+###> tools ###
+/.claude/
+/.superpowers/
+/.aider*
+/docs/private/
+###< tools ###
diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..60fdb56
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,15 @@
+RewriteEngine On
+RewriteBase /dd/
+
+# Composer-Dateien nicht ausliefern
+<FilesMatch "^(composer\.(json|lock))$">
+  Require all denied
+</FilesMatch>
+
+# API-Requests an api.php weiterleiten, Pfad als Query-Parameter
+RewriteRule ^api/(.+)$ api.php?_path=$1 [L,QSA]
+RewriteRule ^api/?$ api.php [L,QSA]
+
+# Alles andere an index.php (SPA)
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteRule ^ index.php [L]
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 0000000..f6ed5d6
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,48 @@
+# Dudi – Claude Context
+
+## What this is
+Habit & goal tracking PWA. Users set goals (e.g. "50 push-ups/day for 30 days"), log sets daily, and see progress. Invite-only registration. German UI.
+
+## Stack
+- Symfony 8 + Doctrine ORM (src/)
+- Vanilla JS SPA — no build step, no npm (public/app.js)
+- HTML `<template>` elements in templates/app.html.twig (rendered once, JS clones them)
+- MariaDB, session auth + remember-me 24h
+
+## Local dev
+- URL: http://dudi.local/
+- DB: zieltracker / zieltracker (see .env.local, gitignored)
+- `php bin/console cache:clear` after config changes
+- `public/app.js` is the authoritative JS file — also copy to `public/` after edits to `app.js` at root (root copy is legacy, will be removed)
+
+## Server
+- `ssh -p 30183 root@miniweb.kuehn.home`
+- App: /var/www/tracker/, DB: dd/dd
+- Deploy: `bash deploy.sh` (rsync + remote composer install + cache:clear)
+- Remember-me table must exist: `rememberme_token` (already created)
+
+## Key files
+- `src/Controller/AuthController.php` — login, register, password reset, name change
+- `src/Controller/GoalController.php` — goals CRUD
+- `src/Controller/InviteController.php` — invite creation + listing
+- `src/Security/JsonLoginAuthenticator.php` — JSON POST /api/login
+- `config/packages/security.yaml` — firewall, remember-me, access control
+- `templates/app.html.twig` — SPA shell + all tpl-* templates
+- `public/app.js` — all frontend logic
+
+## Data model
+- `goals.sets` is a JSON object: `{"2026-04-01": [20, 30], "2026-04-02": [50]}` — keys are dates, values are arrays of logged amounts per session
+- Users table schema is compatible with the old delight-im/auth library (bcrypt hashes work unchanged)
+- Password resets use `users_resets` table directly (raw SQL) — Symfony doesn't manage this table
+
+## Conventions
+- API responses: `{ ok: true, ... }` on success, `{ error: "message" }` on failure
+- All API routes prefixed `/api/`, catch-all route in AppController renders SPA
+- No Twig cache (cache: false in index.php, now handled by Symfony kernel in prod)
+- JS uses `tpl(id)` helper to clone `<template>` elements, fills via querySelector with semantic class names
+- No comments in JS unless non-obvious; no trailing summaries in responses
+
+## Pending cleanup
+- `api.php`, `index.php`, `include/`, `app.js`, `style.css` at project root are legacy pre-Symfony files — safe to delete once miniweb is migrated to Symfony
+- Legacy DB tables that can be dropped: `users_throttling`, `users_confirmations`, `schema_migrations`
+- miniweb still runs old non-Symfony code — Symfony deploy + Apache config update pending
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..7053d67
--- /dev/null
+++ b/README.md
@@ -0,0 +1,48 @@
+# Dudi – Durchzieh-Dienst
+
+A lightweight habit & goal tracker PWA built with Symfony 8, Doctrine ORM, and vanilla JS.
+
+## Stack
+
+- **Backend:** Symfony 8, Doctrine ORM, Symfony Security, Symfony Mailer
+- **Frontend:** Vanilla JS SPA, HTML `<template>` elements, no build step
+- **Database:** MariaDB
+- **Auth:** Symfony Security with bcrypt, session + remember-me (24h)
+
+## Local Setup
+
+```bash
+composer install
+cp .env .env.local   # then fill in real values
+php bin/console cache:clear
+```
+
+Configure Apache to point to `public/` as DocumentRoot (see `docs/deployment.md`).
+
+## Development
+
+The app runs at `http://dudi.local/` locally. An Apache VirtualHost and `/etc/hosts` entry are required.
+
+```
+127.0.0.1 dudi.local
+```
+
+Apache VirtualHost:
+```apache
+<VirtualHost *:80>
+    ServerName dudi.local
+    DocumentRoot "/path/to/dudi/public"
+    <Directory "/path/to/dudi/public">
+        AllowOverride All
+        Require all granted
+    </Directory>
+</VirtualHost>
+```
+
+## Deploy
+
+```bash
+bash deploy.sh
+```
+
+See `docs/deployment.md` for first-time server setup.
diff --git a/api.php b/api.php
new file mode 100644
index 0000000..b7788b1
--- /dev/null
+++ b/api.php
@@ -0,0 +1,294 @@
+<?php
+error_reporting(E_ALL);
+ini_set('display_errors', 0);
+ini_set('log_errors', 1);
+ini_set('error_log', '/tmp/zt.log');
+set_exception_handler(function(\Throwable $e) {
+    http_response_code(500);
+    echo json_encode(['error' => $e->getMessage(), 'file' => basename($e->getFile()), 'line' => $e->getLine()]);
+    exit;
+});
+require_once __DIR__ . '/include/db.php';
+require_once __DIR__ . '/include/mailer.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+// CORS für gleiche Domain nicht nötig; bei separaten Dev-Domains ggf. ergänzen
+
+$method     = $_SERVER['REQUEST_METHOD'];
+$segments   = explode('/', trim($_GET['_path'] ?? '', '/'));
+$resource   = $segments[0] ?? '';
+$resourceId = isset($segments[1]) && $segments[1] !== '' ? (int)$segments[1] : null;
+
+
+$body = json_decode(file_get_contents('php://input'), true) ?? [];
+
+function json_out(array $data, int $status = 200): never {
+    http_response_code($status);
+    echo json_encode($data);
+    exit;
+}
+
+function require_auth(\Delight\Auth\Auth $auth): int {
+    if (!$auth->isLoggedIn()) {
+        json_out(['error' => 'Unauthorized'], 401);
+    }
+    return $auth->getUserId();
+}
+
+// ── POST /api/login ──────────────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'login') {
+    $email = trim($body['email'] ?? '');
+    $pass  = $body['password'] ?? '';
+    try {
+        $auth->login($email, $pass, 86400);
+        json_out(['ok' => true, 'email' => $auth->getEmail()]);
+    } catch (\Delight\Auth\InvalidEmailException
+           | \Delight\Auth\InvalidPasswordException
+           | \Delight\Auth\UserNotFound $e) {
+        json_out(['error' => 'Falsche E-Mail oder Passwort'], 401);
+    } catch (\Delight\Auth\TooManyRequestsException $e) {
+        json_out(['error' => 'Zu viele Versuche, bitte warten'], 429);
+    }
+}
+
+// ── POST /api/logout ─────────────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'logout') {
+    $auth->logOut();
+    json_out(['ok' => true]);
+}
+
+// ── GET /api/me ───────────────────────────────────────────────────────────────
+if ($method === 'GET' && $resource === 'me') {
+    if ($auth->isLoggedIn()) {
+        $name = $conn->fetchOne('SELECT username FROM users WHERE id = ?', [$auth->getUserId()]);
+        json_out(['ok' => true, 'email' => $auth->getEmail(), 'id' => $auth->getUserId(), 'name' => $name ?: '']);
+    }
+    json_out(['ok' => false], 401);
+}
+
+// ── PATCH /api/me ─────────────────────────────────────────────────────────────
+if ($method === 'PATCH' && $resource === 'me') {
+    $uid  = require_auth($auth);
+    $name = trim($body['name'] ?? '');
+    if (!$name) json_out(['error' => 'Name fehlt'], 400);
+    $conn->executeStatement('UPDATE users SET username = ? WHERE id = ?', [$name, $uid]);
+    json_out(['ok' => true, 'name' => $name]);
+}
+
+// ── POST /api/register ────────────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'register') {
+    $email = trim($body['email'] ?? '');
+    $pass  = $body['password'] ?? '';
+    $token = trim($body['token'] ?? '');
+
+    if (!$email || !$pass || !$token) {
+        json_out(['error' => 'Fehlende Felder'], 400);
+    }
+
+    // Token validieren
+    $invite = $conn->fetchAssociative(
+        'SELECT * FROM invites WHERE token = ? AND used_by IS NULL AND expires_at > NOW()',
+        [$token]
+    );
+    if (!$invite) {
+        json_out(['error' => 'Ungültiger oder abgelaufener Einladungslink'], 400);
+    }
+
+    $name = trim($body['name'] ?? '');
+
+    try {
+        $userId = $auth->register($email, $pass);
+    } catch (\Delight\Auth\InvalidEmailException $e) {
+        json_out(['error' => 'Ungültige E-Mail'], 400);
+    } catch (\Delight\Auth\InvalidPasswordException $e) {
+        json_out(['error' => 'Passwort zu kurz (min. 8 Zeichen)'], 400);
+    } catch (\Delight\Auth\UserAlreadyExistsException $e) {
+        json_out(['error' => 'E-Mail bereits registriert'], 409);
+    }
+
+    // Token als verwendet markieren
+    $conn->executeStatement(
+        'UPDATE invites SET used_by = ?, used_at = NOW() WHERE token = ?',
+        [$userId, $token]
+    );
+    if ($name) {
+        $conn->executeStatement('UPDATE users SET username = ? WHERE id = ?', [$name, $userId]);
+    }
+
+    // Direkt einloggen
+    $auth->login($email, $pass, 86400);
+    json_out(['ok' => true, 'email' => $auth->getEmail(), 'name' => $name]);
+}
+
+// ── POST /api/reset-request ──────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'reset-request') {
+    $email = trim($body['email'] ?? '');
+    if (!$email) json_out(['error' => 'E-Mail fehlt'], 400);
+    try {
+        $auth->requestPasswordReset($email, function (string $selector, string $token) use ($email) {
+            $url  = APP_URL . '/?reset_selector=' . rawurlencode($selector) . '&reset_token=' . rawurlencode($token);
+            $text = "Hallo,\n\nklicke auf den folgenden Link um dein Passwort zurückzusetzen (gültig 24h):\n\n$url\n\nFalls du das nicht angefragt hast, ignoriere diese E-Mail.";
+            sendMail($email, 'Durchzieh-Dienst – Passwort zurücksetzen', $text);
+        });
+    } catch (\Delight\Auth\InvalidEmailException $e) {
+        // Keinen Hinweis geben ob die E-Mail existiert
+    } catch (\Exception $e) {
+        json_out(['error' => 'Mail konnte nicht gesendet werden'], 500);
+    }
+    json_out(['ok' => true]); // immer ok, auch wenn E-Mail unbekannt
+}
+
+// ── POST /api/reset-password ──────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'reset-password') {
+    $selector = $body['selector'] ?? '';
+    $token    = $body['token']    ?? '';
+    $pass     = $body['password'] ?? '';
+    if (!$selector || !$token || !$pass) json_out(['error' => 'Fehlende Felder'], 400);
+    try {
+        $auth->resetPassword($selector, $token, $pass);
+        json_out(['ok' => true]);
+    } catch (\Delight\Auth\InvalidSelectorTokenPairException $e) {
+        json_out(['error' => 'Ungültiger oder abgelaufener Reset-Link'], 400);
+    } catch (\Delight\Auth\TokenExpiredException $e) {
+        json_out(['error' => 'Reset-Link abgelaufen, bitte neu anfordern'], 400);
+    } catch (\Delight\Auth\InvalidPasswordException $e) {
+        json_out(['error' => 'Passwort zu kurz (min. 8 Zeichen)'], 400);
+    }
+}
+
+// ── POST /api/change-password ─────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'change-password') {
+    $uid     = require_auth($auth);
+    $oldPass = $body['old_password'] ?? '';
+    $newPass = $body['new_password'] ?? '';
+    if (!$oldPass || !$newPass) json_out(['error' => 'Fehlende Felder'], 400);
+    try {
+        $auth->changePassword($oldPass, $newPass);
+        json_out(['ok' => true]);
+    } catch (\Delight\Auth\NotLoggedInException $e) {
+        json_out(['error' => 'Nicht eingeloggt'], 401);
+    } catch (\Delight\Auth\InvalidPasswordException $e) {
+        json_out(['error' => 'Neues Passwort zu kurz (min. 8 Zeichen)'], 400);
+    } catch (\Delight\Auth\TooManyRequestsException $e) {
+        json_out(['error' => 'Zu viele Versuche'], 429);
+    }
+}
+
+// ── POST /api/invite ─────────────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'invite') {
+    $uid   = require_auth($auth);
+    $token = bin2hex(random_bytes(32));
+    $note  = trim($body['note'] ?? '');
+    $conn->executeStatement(
+        'INSERT INTO invites (token, note, created_by, expires_at) VALUES (?, ?, ?, DATE_ADD(NOW(), INTERVAL 7 DAY))',
+        [$token, $note ?: null, $uid]
+    );
+    json_out(['url' => APP_URL . '/?invite=' . $token]);
+}
+
+// ── GET /api/invites ──────────────────────────────────────────────────────────
+if ($method === 'GET' && $resource === 'invites') {
+    $uid  = require_auth($auth);
+    $rows = $conn->fetchAllAssociative(
+        'SELECT i.token, i.created_at, i.expires_at, i.used_at, i.note, u.email AS used_by_email
+         FROM invites i
+         LEFT JOIN users u ON u.id = i.used_by
+         WHERE i.created_by = ?
+         ORDER BY i.created_at DESC',
+        [$uid]
+    );
+    $result = array_map(function ($r) {
+        if ($r['used_by_email'] !== null) {
+            $status = 'used';
+        } elseif (strtotime($r['expires_at']) < time()) {
+            $status = 'expired';
+        } else {
+            $status = 'pending';
+        }
+        return [
+            'url'           => $status === 'pending' ? APP_URL . '/?invite=' . $r['token'] : null,
+            'created_at'    => $r['created_at'],
+            'expires_at'    => $r['expires_at'],
+            'used_at'       => $r['used_at'],
+            'note'          => $r['note'],
+            'used_by_email' => $r['used_by_email'],
+            'status'        => $status,
+        ];
+    }, $rows);
+    json_out($result);
+}
+
+// ── GET /api/goals ────────────────────────────────────────────────────────────
+if ($method === 'GET' && $resource === 'goals') {
+    $uid  = require_auth($auth);
+    $rows = $conn->fetchAllAssociative(
+        'SELECT id, name, unit, daily, days, start, sets FROM goals WHERE user_id = ? ORDER BY created_at ASC',
+        [$uid]
+    );
+    $goals = array_map(function ($r) {
+        $r['sets'] = json_decode($r['sets'], true) ?: [];
+        $r['id']   = (string)$r['id'];
+        return $r;
+    }, $rows);
+    json_out($goals);
+}
+
+// ── POST /api/goals ───────────────────────────────────────────────────────────
+if ($method === 'POST' && $resource === 'goals') {
+    $uid = require_auth($auth);
+    $name  = trim($body['name']  ?? '');
+    $unit  = trim($body['unit']  ?? 'Stück');
+    $daily = (float)($body['daily'] ?? 1);
+    $days  = (int)  ($body['days']  ?? 30);
+    try { $start = (new DateTime($body['start'] ?? 'now'))->format('Y-m-d H:i:s'); }
+    catch (\Exception $e) { $start = date('Y-m-d H:i:s'); }
+    $setsJson = isset($body['sets']) && is_array($body['sets']) ? json_encode((object)$body['sets']) : '{}';
+    if (!$name) json_out(['error' => 'Name fehlt'], 400);
+
+    $conn->executeStatement(
+        'INSERT INTO goals (user_id, name, unit, daily, days, start, sets) VALUES (?, ?, ?, ?, ?, ?, ?)',
+        [$uid, $name, $unit, $daily, $days, $start, $setsJson]
+    );
+    $id = (string)$conn->lastInsertId();
+    json_out(['id' => $id, 'name' => $name, 'unit' => $unit, 'daily' => $daily, 'days' => $days, 'start' => $start, 'sets' => json_decode($setsJson, true)]);
+}
+
+// ── PATCH /api/goals/{id} ─────────────────────────────────────────────────────
+if ($method === 'PATCH' && $resource === 'goals' && $resourceId !== null) {
+    $uid = require_auth($auth);
+    // Sicherstellen dass das Ziel dem User gehört
+    $existing = $conn->fetchOne('SELECT id FROM goals WHERE id = ? AND user_id = ?', [$resourceId, $uid]);
+    if (!$existing) json_out(['error' => 'Nicht gefunden'], 404);
+
+    $fields = [];
+    $params = [];
+    foreach (['name', 'unit'] as $f) {
+        if (isset($body[$f])) { $fields[] = "$f = ?"; $params[] = (string)$body[$f]; }
+    }
+    foreach (['daily'] as $f) {
+        if (isset($body[$f])) { $fields[] = "$f = ?"; $params[] = (float)$body[$f]; }
+    }
+    foreach (['days'] as $f) {
+        if (isset($body[$f])) { $fields[] = "$f = ?"; $params[] = (int)$body[$f]; }
+    }
+    if (isset($body['sets'])) {
+        $fields[] = 'sets = ?';
+        $params[] = json_encode($body['sets']);
+    }
+    if (!$fields) json_out(['ok' => true]);
+
+    $params[] = $resourceId;
+    $params[] = $uid;
+    $conn->executeStatement('UPDATE goals SET ' . implode(', ', $fields) . ' WHERE id = ? AND user_id = ?', $params);
+    json_out(['ok' => true]);
+}
+
+// ── DELETE /api/goals/{id} ────────────────────────────────────────────────────
+if ($method === 'DELETE' && $resource === 'goals' && $resourceId !== null) {
+    $uid = require_auth($auth);
+    $conn->executeStatement('DELETE FROM goals WHERE id = ? AND user_id = ?', [$resourceId, $uid]);
+    json_out(['ok' => true]);
+}
+
+json_out(['error' => 'Not found'], 404);
diff --git a/app.js b/app.js
new file mode 100644
index 0000000..97a60e2
--- /dev/null
+++ b/app.js
@@ -0,0 +1,716 @@
+var TODAY = new Date(); TODAY.setHours(0,0,0,0);
+var goals = [], prefs, selDay = {}, addAmt = {}, renamingId = null, renameVal = '', collapsed = {};
+var userName = '';
+
+function loadPref(k,def){ try{ return JSON.parse(localStorage.getItem(k)||def); }catch(e){ return JSON.parse(def); } }
+function saveP(){ localStorage.setItem('zt_p',JSON.stringify(prefs)); }
+prefs = loadPref('zt_p','{}');
+
+function tOff(g){ return Math.round((TODAY - new Date(g.start))/86400000); }
+function o2d(g,i){ var d=new Date(new Date(g.start).getTime()+i*86400000); d.setHours(0,0,0,0); return d; }
+function dTot(g,o){ return (g.sets[String(o)]||[]).reduce(function(a,b){return a+b.amount;},0); }
+function fd(d){ return d.toLocaleDateString('de-DE',{weekday:'short',day:'numeric',month:'short'}); }
+function fs(d){ return d.toLocaleDateString('de-DE',{day:'numeric',month:'short'}); }
+function editable(g,o){ var t=tOff(g); return o===t||o===t-1; }
+function now(){ var n=new Date(); return String(n.getHours()).padStart(2,'0')+':'+String(n.getMinutes()).padStart(2,'0'); }
+
+function heuteColor(tdone,daily){
+  if(tdone===0) return 'var(--red)';
+  if(tdone>=daily*1.1) return 'var(--blue)';
+  if(tdone>=daily) return 'var(--green)';
+  return 'var(--amber)';
+}
+
+function isCollapsed(id){ return collapsed[id]!==false; }
+function toggleCollapse(id){
+  var wasCollapsed=isCollapsed(id);
+  collapsed[id]=!wasCollapsed;
+  if(wasCollapsed){
+    var g=goals.filter(function(x){return x.id===id;})[0];
+    if(g) selDay[id]=tOff(g);
+  }
+  render();
+}
+
+function calc(g){
+  var t=tOff(g), tot=g.daily*g.days;
+  var dr=Math.max(0,g.days-t-1);
+  var sd=new Date(g.start); sd.setHours(0,0,0,0);
+  var end=new Date(sd.getTime()+g.days*86400000);
+  var past=0;
+  for(var i=0;i<Math.min(t,g.days);i++) past+=dTot(g,i);
+  var tdone=dTot(g,t), tot2=past+tdone;
+  var dl=dr+1;
+  var remaining=Math.max(0,tot-past);
+  var pd=Math.ceil(remaining/Math.max(1,dl));
+  var st=Math.max(0,pd-tdone);
+  var expectedPast=Math.min(t,g.days)*g.daily;
+  var buf=(past-expectedPast)+Math.max(0,tdone-g.daily);
+  var deficit=Math.min(0,buf);
+  var surplus=Math.max(0,buf);
+  var dailyDelta=pd-g.daily;
+  var pct=Math.min(100,Math.round((tot2/tot)*100));
+  return{tot:tot,tOff:t,end:end,dr:dr,done:tot2,tdone:tdone,pd:pd,st:st,buf:buf,deficit:deficit,surplus:surplus,dailyDelta:dailyDelta,net:tdone-pd,pct:pct,ok:tdone>=pd};
+}
+
+function dcls(g,i){
+  var t=tOff(g); if(i>t) return 'dot df';
+  var v=dTot(g,i);
+  var c=v===0?'dot dm':v>=g.daily*1.1?'dot db':v>=g.daily?'dot dd':'dot dp';
+  return c+(editable(g,i)?' de':' dl');
+}
+function dlbl(g,i){
+  var t=tOff(g); if(i>t) return String(i+1);
+  var v=dTot(g,i);
+  if(v===0) return '✕'; if(v>=g.daily*1.1) return '+'; if(v>=g.daily) return '✓';
+  return Math.round(v/g.daily*100)+'%';
+}
+
+// ── API ──────────────────────────────────────────────────────────────────────
+
+function api(method, path, body){
+  var opts = {method:method, credentials:'include', headers:{'Content-Type':'application/json'}};
+  if(body) opts.body = JSON.stringify(body);
+  return fetch('api/' + path, opts).then(function(res){
+    return res.json().then(function(data){
+      if(!res.ok){ var e=new Error(data.error||'Fehler'); e.status=res.status; throw e; }
+      return data;
+    });
+  });
+}
+
+function loadGoals(){
+  return api('GET','goals').then(function(data){ return data; });
+}
+
+function saveGoal(g){
+  api('PATCH','goals/'+g.id,{name:g.name,unit:g.unit,daily:g.daily,days:g.days,start:g.start,sets:g.sets})
+    .catch(function(e){
+      if(e.status===401){ showLogin(); }
+      else showToast('Speicherfehler');
+    });
+}
+
+// ── Toast ─────────────────────────────────────────────────────────────────────
+
+function showToast(msg){
+  var t=document.createElement('div'); t.className='toast'; t.textContent=msg;
+  document.body.appendChild(t); setTimeout(function(){t.remove();},3000);
+}
+
+// ── Goal-Aktionen ─────────────────────────────────────────────────────────────
+
+function addSet(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  var k=gid+'_'+off, amt=parseInt(addAmt[k]||'0',10);
+  if(amt<=0) return;
+  if(!g.sets[String(off)]) g.sets[String(off)]=[];
+  g.sets[String(off)].push({amount:amt,time:off===tOff(g)?now():'—'});
+  addAmt[k]=''; saveGoal(g); render();
+}
+function remSet(gid,off,idx){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  g.sets[String(off)].splice(idx,1); saveGoal(g); render();
+}
+function delGoal(id){
+  if(!confirm('Ziel wirklich löschen?')) return;
+  goals=goals.filter(function(g){return g.id!==id;});
+  render();
+  api('DELETE','goals/'+id).catch(function(){ showToast('Fehler beim Löschen'); });
+}
+function selD(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  selDay[gid]=selDay[gid]===off?null:off; render();
+}
+function startRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0]; if(!g) return;
+  renamingId=id; renameVal=g.name; render();
+  setTimeout(function(){ var el=document.getElementById('ri'+id); if(el){el.focus();el.select();} },50);
+}
+function commitRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0];
+  if(g&&renameVal.trim()){g.name=renameVal.trim(); saveGoal(g);}
+  renamingId=null; render();
+}
+function cancelRen(){ renamingId=null; render(); }
+
+// ── Template-Helper ───────────────────────────────────────────────────────────
+
+function tpl(id){
+  return document.getElementById(id).content.cloneNode(true).firstElementChild;
+}
+
+// ── Overlays ──────────────────────────────────────────────────────────────────
+
+var OV_CSS='display:flex;position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);align-items:flex-end;justify-content:center;animation:fi .2s ease';
+
+function closeOv(){
+  var o=document.getElementById('ov');
+  o.style.display='none';
+  o.innerHTML='';
+}
+
+function showSheet(content, dismissable){
+  var o=document.getElementById('ov');
+  o.style.cssText=OV_CSS;
+  var sheet=tpl('tpl-sheet');
+  sheet.appendChild(content);
+  o.innerHTML='';
+  o.appendChild(sheet);
+  o.onclick=dismissable!==false?function(e){if(e.target===o)closeOv();}:null;
+}
+
+// ── Login ─────────────────────────────────────────────────────────────────────
+
+function showLogin(err){
+  var c=tpl('tpl-login');
+  if(err){ var e=c.querySelector('.login-err'); e.textContent=err; e.style.display=''; }
+  showSheet(c,false);
+  var email=c.querySelector('.lf-email'), pass=c.querySelector('.lf-pass'), sub=c.querySelector('.lf-sub');
+  setTimeout(function(){email.focus();},50);
+  email.onkeydown=function(e){if(e.key==='Enter')pass.focus();};
+  pass.onkeydown=function(e){if(e.key==='Enter')sub.click();};
+  c.querySelector('.lf-fgt').onclick=function(){showForgotPassword();};
+  sub.onclick=function(){
+    var ev=email.value.trim(), pv=pass.value;
+    if(!ev||!pv){ var errEl=c.querySelector('.login-err'); errEl.textContent='Bitte E-Mail und Passwort eingeben'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','login',{email:ev,password:pv})
+      .then(function(){ return loadGoals(); })
+      .then(function(g){ goals=g; closeOv(); render(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Anmelden';
+        showLogin(err.status===401?'Falsche E-Mail oder Passwort':err.status===429?'Zu viele Versuche':'Verbindungsfehler');
+      });
+  };
+}
+
+// ── Passwort vergessen ────────────────────────────────────────────────────────
+
+function showForgotPassword(){
+  var c=tpl('tpl-forgot-pw');
+  showSheet(c,false);
+  var email=c.querySelector('.fp-email'), errEl=c.querySelector('.login-err'), sub=c.querySelector('.fp-sub');
+  setTimeout(function(){email.focus();},50);
+  c.querySelector('.fp-back').onclick=function(){showLogin();};
+  sub.onclick=function(){
+    var ev=email.value.trim(); if(!ev) return;
+    sub.disabled=true; sub.textContent='…';
+    api('POST','reset-request',{email:ev})
+      .then(function(){
+        var conf=tpl('tpl-email-sent');
+        conf.querySelector('.es-ok').onclick=function(){showLogin();};
+        showSheet(conf,false);
+      })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Link senden';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Passwort zurücksetzen ─────────────────────────────────────────────────────
+
+function showResetPassword(selector,token){
+  var c=tpl('tpl-reset-pw');
+  showSheet(c,false);
+  var pass=c.querySelector('.rp-pass'), errEl=c.querySelector('.login-err'), sub=c.querySelector('.rp-sub');
+  setTimeout(function(){pass.focus();},50);
+  sub.onclick=function(){
+    var pv=pass.value; if(!pv) return;
+    sub.disabled=true; sub.textContent='…';
+    api('POST','reset-password',{selector:selector,token:token,password:pv})
+      .then(function(){
+        var conf=tpl('tpl-pw-changed');
+        conf.querySelector('.pc-ok').onclick=function(){showLogin();};
+        showSheet(conf,false);
+      })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Passwort setzen';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Passwort ändern ───────────────────────────────────────────────────────────
+
+function showChangePassword(){
+  var c=tpl('tpl-change-pw');
+  showSheet(c,true);
+  var oldP=c.querySelector('.cp-old'), newP=c.querySelector('.cp-new'), newP2=c.querySelector('.cp-new2');
+  var errEl=c.querySelector('.login-err'), sub=c.querySelector('.cp-sub');
+  setTimeout(function(){oldP.focus();},50);
+  c.querySelector('.cp-can').onclick=closeOv;
+  sub.onclick=function(){
+    var o=oldP.value, n=newP.value, n2=newP2.value;
+    if(!o||!n||!n2) return;
+    if(n!==n2){ errEl.textContent='Die neuen Passwörter stimmen nicht überein'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','change-password',{old_password:o,new_password:n})
+      .then(function(){ showToast('Passwort geändert'); closeOv(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Ändern';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Registrierung ─────────────────────────────────────────────────────────────
+
+function showRegister(token){
+  var c=tpl('tpl-register');
+  showSheet(c,false);
+  var nameInp=c.querySelector('.rg-name'), email=c.querySelector('.rg-email');
+  var pass=c.querySelector('.rg-pass'), pass2=c.querySelector('.rg-pass2');
+  var errEl=c.querySelector('.login-err'), sub=c.querySelector('.rg-sub');
+  setTimeout(function(){nameInp.focus();},50);
+  nameInp.onkeydown=function(e){if(e.key==='Enter')email.focus();};
+  email.onkeydown=function(e){if(e.key==='Enter')pass.focus();};
+  pass.onkeydown=function(e){if(e.key==='Enter')pass2.focus();};
+  pass2.onkeydown=function(e){if(e.key==='Enter')sub.click();};
+  function checkMatch(){ if(pass2.value&&pass.value!==pass2.value){ errEl.textContent='Passwörter stimmen nicht überein'; errEl.style.display=''; } else { errEl.style.display='none'; } }
+  pass.oninput=checkMatch; pass2.oninput=checkMatch;
+  sub.onclick=function(){
+    var nv=nameInp.value.trim(), ev=email.value.trim(), pv=pass.value;
+    if(!nv||!ev||!pv){ errEl.textContent='Bitte alle Felder ausfüllen'; errEl.style.display=''; return; }
+    if(pv!==pass2.value){ errEl.textContent='Passwörter stimmen nicht überein'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','register',{name:nv,email:ev,password:pv,token:token})
+      .then(function(r){ userName=r.name||''; return loadGoals(); })
+      .then(function(g){ goals=g; closeOv(); updateHeader(); render(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Registrieren';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Neues Ziel ────────────────────────────────────────────────────────────────
+
+function openNew(){
+  var c=tpl('tpl-new-goal');
+  showSheet(c,true);
+  var name=c.querySelector('.ng-name'), unit=c.querySelector('.ng-unit');
+  var daily=c.querySelector('.ng-daily'), days=c.querySelector('.ng-days'), sub=c.querySelector('.ng-sub');
+  setTimeout(function(){name.focus();},50);
+  c.querySelector('.ng-can').onclick=closeOv;
+  sub.onclick=function(){
+    var nv=(name.value||'').trim(), uv=(unit.value||'').trim()||'Stück';
+    var dv=parseInt(daily.value,10)||1, dyv=parseInt(days.value,10)||30;
+    if(!nv){ name.focus(); return; }
+    sub.disabled=true;
+    api('POST','goals',{name:nv,unit:uv,daily:dv,days:dyv,start:TODAY.toISOString()})
+      .then(function(r){
+        goals.push({id:r.id,name:r.name,unit:r.unit,daily:r.daily,days:r.days,start:r.start,sets:r.sets||{}});
+        closeOv(); render();
+      }).catch(function(e){
+        sub.disabled=false;
+        if(e.status===401){ closeOv(); showLogin(); }
+        else showToast('Fehler beim Erstellen');
+      });
+  };
+}
+
+// ── Daten-Menü ────────────────────────────────────────────────────────────────
+
+function openData(){
+  var c=tpl('tpl-data-menu');
+  showSheet(c,true);
+  c.querySelector('.dm-cls').onclick=closeOv;
+  c.querySelector('.dm-name').onclick=function(){
+    var nc=tpl('tpl-change-name');
+    showSheet(nc,true);
+    var inp=nc.querySelector('.cn-name'), errEl=nc.querySelector('.login-err'), sub=nc.querySelector('.cn-sub');
+    inp.value=userName;
+    setTimeout(function(){inp.focus();inp.select();},50);
+    nc.querySelector('.cn-can').onclick=closeOv;
+    sub.onclick=function(){
+      var nv=inp.value.trim();
+      if(!nv){ errEl.textContent='Name darf nicht leer sein'; errEl.style.display=''; return; }
+      sub.disabled=true; sub.textContent='…';
+      api('PATCH','me',{name:nv})
+        .then(function(r){ userName=r.name; closeOv(); render(); showToast('Name gespeichert'); })
+        .catch(function(){ sub.disabled=false; sub.textContent='Speichern'; showToast('Fehler beim Speichern'); });
+    };
+  };
+  c.querySelector('.dm-cpw').onclick=function(){ closeOv(); showChangePassword(); };
+  c.querySelector('.dm-lgout').onclick=function(){
+    api('POST','logout').then(function(){ goals=[]; closeOv(); render(); showLogin(); });
+  };
+
+  c.querySelector('.dm-inv').onclick=function(){
+    var ic=tpl('tpl-invite-form');
+    showSheet(ic,true);
+    var invName=ic.querySelector('.inv-name');
+    setTimeout(function(){invName.focus();},50);
+    ic.querySelector('.inv-cancel').onclick=closeOv;
+    ic.querySelector('.inv-gen').onclick=function(){
+      var note=invName.value.trim(), btn=this;
+      btn.disabled=true; btn.textContent='…';
+      api('POST','invite',{note:note}).then(function(res){
+        var lc=tpl('tpl-invite-link');
+        lc.querySelector('.stitle').textContent='Einladungslink'+(note?' für '+note:'');
+        var urlInp=lc.querySelector('.il-url');
+        urlInp.value=res.url;
+        showSheet(lc,true);
+        lc.querySelector('.il-close').onclick=closeOv;
+        lc.querySelector('.il-copy').onclick=function(){
+          navigator.clipboard.writeText(res.url).then(function(){ showToast('Link kopiert!'); closeOv(); });
+        };
+        setTimeout(function(){urlInp.select();},50);
+      }).catch(function(){
+        btn.disabled=false; btn.textContent='Link generieren';
+        showToast('Fehler beim Generieren');
+      });
+    };
+  };
+
+  c.querySelector('.dm-invlist').onclick=function(){
+    api('GET','invites').then(function(list){
+      var statusLabel={'pending':'Ausstehend','used':'Angenommen','expired':'Abgelaufen'};
+      var statusColor={'pending':'var(--amber)','used':'var(--green)','expired':'var(--red)'};
+      var lc=tpl('tpl-invite-list');
+      var body=lc.querySelector('.dpanel-body');
+      if(!list.length){
+        var empty=document.createElement('div');
+        empty.className='nosets'; empty.style.padding='16px';
+        empty.textContent='Noch keine Einladungen verschickt';
+        body.appendChild(empty);
+      } else {
+        for(var i=0;i<list.length;i++){
+          var inv=list[i];
+          var label=inv.note||new Date(inv.created_at).toLocaleDateString('de-DE',{day:'numeric',month:'short',year:'numeric'});
+          var detail=inv.used_by_email?('→ '+inv.used_by_email):(inv.status==='pending'?'läuft ab: '+new Date(inv.expires_at).toLocaleDateString('de-DE',{day:'numeric',month:'short'}):'');
+          var row=tpl('tpl-invite-row');
+          row.querySelector('.ir-label').textContent=label;
+          if(detail) row.querySelector('.ir-detail').textContent=' '+detail;
+          var st=row.querySelector('.ir-status');
+          st.textContent=statusLabel[inv.status]; st.style.color=statusColor[inv.status];
+          if(inv.url){
+            var cp=row.querySelector('.ir-copy'); cp.style.display='';
+            cp.onclick=function(url){ return function(){ navigator.clipboard.writeText(url).then(function(){ showToast('Link kopiert!'); }); }; }(inv.url);
+          }
+          body.appendChild(row);
+        }
+      }
+      showSheet(lc,true);
+      lc.querySelector('.il-close').onclick=closeOv;
+    }).catch(function(){ showToast('Fehler beim Laden'); });
+  };
+
+  c.querySelector('.dm-exp').onclick=function(){
+    var blob=new Blob([JSON.stringify({goals:goals,at:new Date().toISOString()},null,2)],{type:'application/json'});
+    var url=URL.createObjectURL(blob), a=document.createElement('a');
+    a.href=url; a.download='dudi-backup.json'; a.click(); URL.revokeObjectURL(url); closeOv();
+  };
+
+  c.querySelector('.dm-imp').onclick=function(){
+    var inp=document.createElement('input'); inp.type='file'; inp.accept='.json';
+    inp.onchange=function(e){
+      var f=e.target.files[0]; if(!f) return;
+      var r=new FileReader(); r.onload=function(ev){
+        try{
+          var p=JSON.parse(ev.target.result);
+          if(!p.goals||!Array.isArray(p.goals)) throw new Error('Ungültiges Format');
+          if(!confirm(p.goals.length+' Ziel(e) importieren?')) return;
+          var promises=p.goals.map(function(g){
+            return api('POST','goals',{name:g.name,unit:g.unit,daily:g.daily,days:g.days,start:g.start,sets:g.sets||{}})
+              .then(function(r){ goals.push({id:r.id,name:r.name,unit:r.unit,daily:r.daily,days:r.days,start:r.start,sets:r.sets||{}}); });
+          });
+          Promise.all(promises).then(function(){ closeOv(); render(); alert(p.goals.length+' Ziel(e) importiert.'); });
+        }catch(err){ alert('Fehler: '+err.message); }
+      }; r.readAsText(f);
+    }; inp.click();
+  };
+
+  c.querySelector('.dm-clr').onclick=function(){
+    if(!confirm('Alle Daten löschen?')) return;
+    var ids=goals.map(function(g){return g.id;}); goals=[]; render();
+    Promise.all(ids.map(function(id){return api('DELETE','goals/'+id);}))
+      .catch(function(){ showToast('Fehler beim Löschen'); });
+    closeOv();
+  };
+}
+
+// ── Card-Bausteine ────────────────────────────────────────────────────────────
+
+function buildNameWrap(g){
+  if(renamingId===g.id){
+    var el=tpl('tpl-name-edit');
+    var inp=el.querySelector('.ren-input');
+    inp.id='ri'+g.id; inp.value=g.name; inp.dataset.g=g.id;
+    return el;
+  }
+  var el=tpl('tpl-name-view');
+  el.querySelector('.goal-name').textContent=g.name;
+  el.querySelector('.btn-ren').dataset.g=g.id;
+  return el;
+}
+
+function buildPanel(g,off){
+  var t=tOff(g), sets=g.sets[String(off)]||[], tot=dTot(g,off);
+  var lbl=off===t?'Heute':'Gestern', k=g.id+'_'+off;
+  var el=tpl('tpl-panel');
+  el.querySelector('.dpanel-title').textContent=lbl+' — '+fd(o2d(g,off));
+  el.querySelector('.dpanel-sub').textContent=tot+' / '+g.daily+' '+g.unit;
+  var body=el.querySelector('.dpanel-body');
+  if(sets.length){
+    for(var i=0;i<sets.length;i++){
+      var s=sets[i], row=tpl('tpl-set-row'), span=row.querySelector('span');
+      if(s.time!=='—'){
+        var st=document.createElement('span'); st.className='stime'; st.textContent=s.time+' ·';
+        span.appendChild(st); span.appendChild(document.createTextNode(' '));
+      }
+      var strong=document.createElement('strong'); strong.textContent=s.amount;
+      span.appendChild(strong); span.appendChild(document.createTextNode(' '+g.unit));
+      var btn=row.querySelector('.sdel');
+      btn.dataset.g=g.id; btn.dataset.o=off; btn.dataset.i=i;
+      body.appendChild(row);
+    }
+  } else {
+    body.appendChild(tpl('tpl-nosets'));
+  }
+  var addRow=tpl('tpl-add-row');
+  var inp=addRow.querySelector('.num-in');
+  inp.placeholder=g.daily; inp.value=addAmt[k]||''; inp.dataset.k=k; inp.dataset.g=g.id; inp.dataset.o=off;
+  var abtn=addRow.querySelector('.btn-as');
+  abtn.dataset.g=g.id; abtn.dataset.o=off;
+  addRow.querySelector('.ulbl').textContent=g.unit;
+  body.appendChild(addRow);
+  return el;
+}
+
+function buildCard(g){
+  var c=calc(g), t=c.tOff;
+  var fc=c.surplus>0?'var(--blue)':c.st===0?'var(--green)':c.dailyDelta<=0?'var(--green)':c.dailyDelta<=g.daily*.2?'var(--amber)':'var(--red)';
+  var bc,bt,bufStr=(c.buf>0?'+':'')+c.buf;
+  if(c.ok&&c.surplus>0){bc='b-buf';bt=bufStr;}
+  else if(c.ok){bc='b-done';bt=bufStr;}
+  else if(c.dailyDelta<=0){bc='b-ok';bt=bufStr;}
+  else if(c.dailyDelta<=g.daily*.2){bc='b-warn';bt=bufStr;}
+  else{bc='b-danger';bt=bufStr;}
+
+  var el;
+  if(isCollapsed(g.id)){
+    el=tpl('tpl-card-collapsed');
+    if(c.ok) el.classList.add('done');
+    el.querySelector('.card-hdr').dataset.g=g.id;
+    var bd=el.querySelector('.card-bd');
+    bd.insertBefore(buildNameWrap(g),bd.firstElementChild);
+    var hc=heuteColor(c.tdone,g.daily);
+    el.querySelector('.m-dr').textContent=c.dr;
+    el.querySelector('.m-end').textContent=fs(c.end);
+    var mH=el.querySelector('.m-heute'); mH.textContent=c.tdone+'/'+g.daily; mH.style.color=hc;
+    el.querySelector('.m-total').textContent=c.done+'/'+c.tot;
+    var badge=el.querySelector('.badge'); badge.className='badge '+bc; badge.textContent=bt;
+    var fill=el.querySelector('.prog-fill'); fill.style.width=c.pct+'%'; fill.style.background=fc;
+    return el;
+  }
+
+  el=tpl('tpl-card-expanded');
+  if(c.ok) el.classList.add('done');
+  el.querySelector('.card-hdr').dataset.g=g.id;
+  var bd=el.querySelector('.card-bd');
+  bd.insertBefore(buildNameWrap(g),bd.firstElementChild);
+  el.querySelector('.m-dr').textContent=c.dr;
+  el.querySelector('.m-end').textContent=fs(c.end);
+  var badge=el.querySelector('.badge'); badge.className='badge '+bc; badge.textContent=bt;
+  var fill=el.querySelector('.prog-fill'); fill.style.width=c.pct+'%'; fill.style.background=fc;
+  el.querySelector('.pr-done').textContent=c.done+' '+g.unit+' gemacht';
+  el.querySelector('.pr-pct').textContent=c.pct+'% von '+c.tot;
+  el.querySelector('.sv-tdone').textContent=c.tdone;
+  el.querySelector('.sv-daily').textContent=g.daily;
+  el.querySelector('.sv-st').textContent=c.st;
+  el.querySelector('.sv-noch').style.color=heuteColor(c.tdone,g.daily);
+  el.querySelectorAll('.sunit').forEach(function(u){ u.textContent=g.unit; });
+
+  var sel=selDay[g.id]!=null?selDay[g.id]:t;
+  var dotsWrap=el.querySelector('.dots-wrap');
+  for(var i=0;i<g.days;i++){
+    var it=i===t, iy=i===t-1, is=sel===i, ed=editable(g,i);
+    var dot=tpl('tpl-dot');
+    dot.className=dcls(g,i)+(is?' rs':it?' rt':iy&&t>0?' ry':'');
+    if(ed){ dot.dataset.g=g.id; dot.dataset.d=i; }
+    dot.textContent=dlbl(g,i);
+    dotsWrap.appendChild(dot);
+  }
+
+  if(sel!=null) el.insertBefore(buildPanel(g,sel),el.querySelector('.card-foot'));
+  el.querySelector('.btn-del').dataset.g=g.id;
+  return el;
+}
+
+// ── Quick-Buchen ──────────────────────────────────────────────────────────────
+
+function buildQuickBook(){
+  var active=goals.filter(function(g){ var c=calc(g); return tOff(g)<g.days&&!c.ok; });
+  if(!active.length) return null;
+  var frag=document.createDocumentFragment();
+  var lbl=document.createElement('div'); lbl.className='sec-lbl'; lbl.textContent='Quick-Buchen';
+  frag.appendChild(lbl);
+  var card=document.createElement('div'); card.className='card qb-card';
+  for(var i=0;i<active.length;i++){
+    var g=active[i], c=calc(g), k=g.id+'_'+c.tOff;
+    var row=tpl('tpl-qb-row');
+    row.querySelector('.qb-name').textContent=g.name;
+    var stat=row.querySelector('.qb-stat'); stat.textContent=c.tdone+'/'+g.daily; stat.style.color=heuteColor(c.tdone,g.daily);
+    var inp=row.querySelector('.num-in');
+    inp.placeholder=g.daily; inp.value=addAmt[k]||''; inp.dataset.k=k; inp.dataset.g=g.id; inp.dataset.o=c.tOff;
+    var btn=row.querySelector('.btn-as'); btn.dataset.g=g.id; btn.dataset.o=c.tOff;
+    card.appendChild(row);
+  }
+  frag.appendChild(card);
+  return frag;
+}
+
+// ── Render ────────────────────────────────────────────────────────────────────
+
+function calcAwards(){
+  var units=0;
+  for(var i=0;i<goals.length;i++){
+    var g=goals[i];
+    if(tOff(g)>=g.days) units+=Math.floor(g.days/30);
+  }
+  var gold=Math.floor(units/25); units%=25;
+  var silver=Math.floor(units/5); var bronze=units%5;
+  return{gold:gold,silver:silver,bronze:bronze};
+}
+
+function render(){
+  var m=document.getElementById('main');
+  var frag=document.createDocumentFragment();
+
+  if(!prefs.hd){
+    var hint=tpl('tpl-hint');
+    hint.querySelector('.hclose').onclick=function(){ prefs.hd=1; saveP(); hint.remove(); };
+    frag.appendChild(hint);
+  }
+
+  var aw=calcAwards();
+  if(aw.gold||aw.silver||aw.bronze){
+    var awards=document.createElement('div'); awards.className='awards';
+    var medals=[['🥇',aw.gold],['🥈',aw.silver],['🥉',aw.bronze]];
+    for(var mi=0;mi<medals.length;mi++){
+      for(var ai=0;ai<medals[mi][1];ai++){
+        var sp=document.createElement('span'); sp.className='aw'; sp.textContent=medals[mi][0];
+        awards.appendChild(sp);
+      }
+    }
+    frag.appendChild(awards);
+  }
+
+  if(!goals.length){
+    frag.appendChild(tpl('tpl-empty'));
+    m.innerHTML=''; m.appendChild(frag); wire(); return;
+  }
+
+  if(userName){
+    var gr=document.createElement('div'); gr.className='greeting'; gr.textContent='Hallo '+userName+'!';
+    frag.appendChild(gr);
+  }
+
+  var qb=buildQuickBook(); if(qb) frag.appendChild(qb);
+
+  var open=[],done=[];
+  for(var gi=0;gi<goals.length;gi++){
+    var g=goals[gi], c=calc(g);
+    if(c.ok) done.push(g); else open.push(g);
+  }
+  if(open.length){
+    var sl=document.createElement('div'); sl.className='sec-lbl'; sl.textContent='Offen';
+    frag.appendChild(sl);
+    for(var i=0;i<open.length;i++) frag.appendChild(buildCard(open[i]));
+  }
+  if(done.length){
+    var sl2=document.createElement('div'); sl2.className='sec-lbl'; sl2.textContent='Heute erledigt';
+    frag.appendChild(sl2);
+    for(var j=0;j<done.length;j++) frag.appendChild(buildCard(done[j]));
+  }
+
+  m.innerHTML=''; m.appendChild(frag); wire();
+}
+
+function wire(){
+  document.querySelectorAll('.card-hdr[data-g]').forEach(function(el){
+    el.onclick=function(e){
+      if(e.target.classList.contains('btn-ren')||e.target.classList.contains('ren-input')) return;
+      toggleCollapse(this.dataset.g);
+    };
+  });
+  document.querySelectorAll('.btn-ren').forEach(function(b){
+    b.onclick=function(e){e.stopPropagation();startRen(this.dataset.g);};
+  });
+  document.querySelectorAll('.ren-input').forEach(function(inp){
+    var gid=inp.dataset.g;
+    inp.oninput=function(){renameVal=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')commitRen(gid);if(e.key==='Escape')cancelRen();};
+    inp.onblur=function(){commitRen(gid);};
+  });
+  document.querySelectorAll('.de').forEach(function(d){
+    d.onclick=function(e){e.stopPropagation();selD(this.dataset.g,parseInt(this.dataset.d,10));};
+  });
+  document.querySelectorAll('.btn-as').forEach(function(b){
+    b.onclick=function(){addSet(this.dataset.g,parseInt(this.dataset.o,10));};
+  });
+  document.querySelectorAll('.num-in').forEach(function(inp){
+    var k=inp.dataset.k, g=inp.dataset.g, o=parseInt(inp.dataset.o,10);
+    inp.oninput=function(){addAmt[k]=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')addSet(g,o);};
+  });
+  document.querySelectorAll('.sdel').forEach(function(b){
+    b.onclick=function(){remSet(this.dataset.g,parseInt(this.dataset.o,10),parseInt(this.dataset.i,10));};
+  });
+  document.querySelectorAll('.btn-del').forEach(function(b){
+    b.onclick=function(){delGoal(this.dataset.g);};
+  });
+}
+
+// ── Start ─────────────────────────────────────────────────────────────────────
+
+function updateHeader(){
+  document.getElementById('tlbl').textContent=TODAY.toLocaleDateString('de-DE',{weekday:'long',day:'numeric',month:'long'});
+}
+
+document.getElementById('btnNew').onclick=openNew;
+document.getElementById('btnData').onclick=openData;
+updateHeader();
+
+var _qs=new URLSearchParams(window.location.search);
+var inviteToken=_qs.get('invite');
+var resetSelector=_qs.get('reset_selector');
+var resetToken=_qs.get('reset_token');
+if(inviteToken||resetSelector) history.replaceState(null,'',location.pathname);
+
+if(resetSelector&&resetToken){
+  render(); showResetPassword(resetSelector,resetToken);
+} else {
+  api('GET','me')
+    .then(function(r){ userName=r.name||''; updateHeader(); return loadGoals(); })
+    .then(function(g){ goals=g; render(); })
+    .catch(function(){
+      render();
+      if(inviteToken){ showRegister(inviteToken); }
+      else { showLogin(); }
+    });
+}
+
+function scheduleMidnight(){
+  var n=new Date();
+  var ms=new Date(n.getFullYear(),n.getMonth(),n.getDate()+1,0,0,5).getTime()-n.getTime();
+  setTimeout(function(){
+    TODAY=new Date();TODAY.setHours(0,0,0,0);selDay={};collapsed={};
+    updateHeader();render();scheduleMidnight();
+  },ms);
+}
+scheduleMidnight();
+
+document.addEventListener('visibilitychange',function(){
+  if(document.visibilityState==='visible'){
+    var n=new Date();n.setHours(0,0,0,0);
+    if(n.getTime()!==TODAY.getTime()){TODAY=n;selDay={};collapsed={};render();scheduleMidnight();}
+    loadGoals().then(function(g){goals=g;render();}).catch(function(){});
+  }
+});
diff --git a/bin/console b/bin/console
new file mode 100755
index 0000000..d8d530e
--- /dev/null
+++ b/bin/console
@@ -0,0 +1,21 @@
+#!/usr/bin/env php
+<?php
+
+use App\Kernel;
+use Symfony\Bundle\FrameworkBundle\Console\Application;
+
+if (!is_dir(dirname(__DIR__).'/vendor')) {
+    throw new LogicException('Dependencies are missing. Try running "composer install".');
+}
+
+if (!is_file(dirname(__DIR__).'/vendor/autoload_runtime.php')) {
+    throw new LogicException('Symfony Runtime is missing. Try running "composer require symfony/runtime".');
+}
+
+require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
+
+return function (array $context) {
+    $kernel = new Kernel($context['APP_ENV'], (bool) $context['APP_DEBUG']);
+
+    return new Application($kernel);
+};
diff --git a/composer.json b/composer.json
new file mode 100644
index 0000000..40d5b99
--- /dev/null
+++ b/composer.json
@@ -0,0 +1,77 @@
+{
+    "type": "project",
+    "license": "proprietary",
+    "minimum-stability": "stable",
+    "prefer-stable": true,
+    "require": {
+        "php": ">=8.4",
+        "ext-ctype": "*",
+        "doctrine/doctrine-bundle": "^3.2",
+        "doctrine/doctrine-migrations-bundle": "^4.0",
+        "doctrine/orm": "^3.6",
+        "symfony/console": "8.0.*",
+        "symfony/doctrine-messenger": "8.0.*",
+        "symfony/dotenv": "8.0.*",
+        "symfony/flex": "^2",
+        "symfony/framework-bundle": "8.0.*",
+        "symfony/mailer": "8.0.*",
+        "symfony/password-hasher": "8.0.*",
+        "symfony/runtime": "8.0.*",
+        "symfony/security-bundle": "8.0.*",
+        "symfony/twig-bundle": "8.0.*",
+        "symfony/validator": "8.0.*",
+        "symfony/yaml": "8.0.*"
+    },
+    "config": {
+        "allow-plugins": {
+            "php-http/discovery": true,
+            "symfony/flex": true,
+            "symfony/runtime": true
+        },
+        "optimize-autoloader": true,
+        "sort-packages": true
+    },
+    "autoload": {
+        "psr-4": {
+            "App\\": "src/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "App\\Tests\\": "tests/"
+        }
+    },
+    "replace": {
+        "symfony/polyfill-ctype": "*",
+        "symfony/polyfill-iconv": "*",
+        "symfony/polyfill-php72": "*",
+        "symfony/polyfill-php73": "*",
+        "symfony/polyfill-php74": "*",
+        "symfony/polyfill-php80": "*",
+        "symfony/polyfill-php81": "*",
+        "symfony/polyfill-php82": "*",
+        "symfony/polyfill-php83": "*",
+        "symfony/polyfill-php84": "*"
+    },
+    "scripts": {
+        "auto-scripts": {
+            "cache:clear": "symfony-cmd",
+            "assets:install %PUBLIC_DIR%": "symfony-cmd"
+        },
+        "post-install-cmd": [
+            "@auto-scripts"
+        ],
+        "post-update-cmd": [
+            "@auto-scripts"
+        ]
+    },
+    "conflict": {
+        "symfony/symfony": "*"
+    },
+    "extra": {
+        "symfony": {
+            "allow-contrib": false,
+            "require": "8.0.*"
+        }
+    }
+}
diff --git a/composer.lock b/composer.lock
new file mode 100644
index 0000000..3df67c0
--- /dev/null
+++ b/composer.lock
@@ -0,0 +1,5486 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "bcce77086b33c138b2af0283f7193e69",
+    "packages": [
+        {
+            "name": "doctrine/collections",
+            "version": "2.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/collections.git",
+                "reference": "7713da39d8e237f28411d6a616a3dce5e20d5de2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/collections/zipball/7713da39d8e237f28411d6a616a3dce5e20d5de2",
+                "reference": "7713da39d8e237f28411d6a616a3dce5e20d5de2",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/deprecations": "^1",
+                "php": "^8.1",
+                "symfony/polyfill-php84": "^1.30"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "ext-json": "*",
+                "phpstan/phpstan": "^2.1.30",
+                "phpstan/phpstan-phpunit": "^2.0.7",
+                "phpunit/phpunit": "^10.5.58 || ^11.5.42 || ^12.4"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Common\\Collections\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                }
+            ],
+            "description": "PHP Doctrine Collections library that adds additional functionality on top of PHP arrays.",
+            "homepage": "https://www.doctrine-project.org/projects/collections.html",
+            "keywords": [
+                "array",
+                "collections",
+                "iterators",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/collections/issues",
+                "source": "https://github.com/doctrine/collections/tree/2.6.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fcollections",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-15T10:01:58+00:00"
+        },
+        {
+            "name": "doctrine/dbal",
+            "version": "4.4.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/dbal.git",
+                "reference": "61e730f1658814821a85f2402c945f3883407dec"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/dbal/zipball/61e730f1658814821a85f2402c945f3883407dec",
+                "reference": "61e730f1658814821a85f2402c945f3883407dec",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/deprecations": "^1.1.5",
+                "php": "^8.2",
+                "psr/cache": "^1|^2|^3",
+                "psr/log": "^1|^2|^3"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "14.0.0",
+                "fig/log-test": "^1",
+                "jetbrains/phpstorm-stubs": "2023.2",
+                "phpstan/phpstan": "2.1.30",
+                "phpstan/phpstan-phpunit": "2.0.7",
+                "phpstan/phpstan-strict-rules": "^2",
+                "phpunit/phpunit": "11.5.50",
+                "slevomat/coding-standard": "8.27.1",
+                "squizlabs/php_codesniffer": "4.0.1",
+                "symfony/cache": "^6.3.8|^7.0|^8.0",
+                "symfony/console": "^5.4|^6.3|^7.0|^8.0"
+            },
+            "suggest": {
+                "symfony/console": "For helpful console commands such as SQL execution and import of files."
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\DBAL\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                }
+            ],
+            "description": "Powerful PHP database abstraction layer (DBAL) with many features for database schema introspection and management.",
+            "homepage": "https://www.doctrine-project.org/projects/dbal.html",
+            "keywords": [
+                "abstraction",
+                "database",
+                "db2",
+                "dbal",
+                "mariadb",
+                "mssql",
+                "mysql",
+                "oci8",
+                "oracle",
+                "pdo",
+                "pgsql",
+                "postgresql",
+                "queryobject",
+                "sasql",
+                "sql",
+                "sqlite",
+                "sqlserver",
+                "sqlsrv"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/dbal/issues",
+                "source": "https://github.com/doctrine/dbal/tree/4.4.3"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fdbal",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-20T08:52:12+00:00"
+        },
+        {
+            "name": "doctrine/deprecations",
+            "version": "1.1.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/deprecations.git",
+                "reference": "d4fe3e6fd9bb9e72557a19674f44d8ac7db4c6ca"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/deprecations/zipball/d4fe3e6fd9bb9e72557a19674f44d8ac7db4c6ca",
+                "reference": "d4fe3e6fd9bb9e72557a19674f44d8ac7db4c6ca",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1 || ^8.0"
+            },
+            "conflict": {
+                "phpunit/phpunit": "<=7.5 || >=14"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^9 || ^12 || ^14",
+                "phpstan/phpstan": "1.4.10 || 2.1.30",
+                "phpstan/phpstan-phpunit": "^1.0 || ^2",
+                "phpunit/phpunit": "^7.5 || ^8.5 || ^9.6 || ^10.5 || ^11.5 || ^12.4 || ^13.0",
+                "psr/log": "^1 || ^2 || ^3"
+            },
+            "suggest": {
+                "psr/log": "Allows logging deprecations via PSR-3 logger implementation"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Deprecations\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "A small layer on top of trigger_error(E_USER_DEPRECATED) or PSR-3 logging with options to disable all deprecations or selectively for packages.",
+            "homepage": "https://www.doctrine-project.org/",
+            "support": {
+                "issues": "https://github.com/doctrine/deprecations/issues",
+                "source": "https://github.com/doctrine/deprecations/tree/1.1.6"
+            },
+            "time": "2026-02-07T07:09:04+00:00"
+        },
+        {
+            "name": "doctrine/doctrine-bundle",
+            "version": "3.2.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/DoctrineBundle.git",
+                "reference": "af84173db6978c3d2688ea3bcf3a91720b0704ce"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/DoctrineBundle/zipball/af84173db6978c3d2688ea3bcf3a91720b0704ce",
+                "reference": "af84173db6978c3d2688ea3bcf3a91720b0704ce",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/dbal": "^4.0",
+                "doctrine/deprecations": "^1.0",
+                "doctrine/persistence": "^4",
+                "doctrine/sql-formatter": "^1.0.1",
+                "php": "^8.4",
+                "symfony/cache": "^6.4 || ^7.0 || ^8.0",
+                "symfony/config": "^6.4 || ^7.0 || ^8.0",
+                "symfony/console": "^6.4 || ^7.0 || ^8.0",
+                "symfony/dependency-injection": "^6.4 || ^7.0 || ^8.0",
+                "symfony/doctrine-bridge": "^6.4.3 || ^7.0.3 || ^8.0",
+                "symfony/framework-bundle": "^6.4 || ^7.0 || ^8.0",
+                "symfony/service-contracts": "^3"
+            },
+            "conflict": {
+                "doctrine/orm": "<3.0 || >=4.0",
+                "twig/twig": "<3.0.4"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "doctrine/orm": "^3.4.4",
+                "phpstan/phpstan": "2.1.1",
+                "phpstan/phpstan-phpunit": "2.0.3",
+                "phpstan/phpstan-strict-rules": "^2",
+                "phpstan/phpstan-symfony": "^2.0",
+                "phpunit/phpunit": "^12.3.10",
+                "psr/log": "^3.0",
+                "symfony/doctrine-messenger": "^6.4 || ^7.0 || ^8.0",
+                "symfony/expression-language": "^6.4 || ^7.0 || ^8.0",
+                "symfony/messenger": "^6.4 || ^7.0 || ^8.0",
+                "symfony/property-info": "^6.4 || ^7.0 || ^8.0",
+                "symfony/security-bundle": "^6.4 || ^7.0 || ^8.0",
+                "symfony/stopwatch": "^6.4 || ^7.0 || ^8.0",
+                "symfony/string": "^6.4 || ^7.0 || ^8.0",
+                "symfony/twig-bridge": "^6.4 || ^7.0 || ^8.0",
+                "symfony/validator": "^6.4 || ^7.0 || ^8.0",
+                "symfony/web-profiler-bundle": "^6.4 || ^7.0 || ^8.0",
+                "symfony/yaml": "^6.4 || ^7.0 || ^8.0",
+                "twig/twig": "^3.21.1"
+            },
+            "suggest": {
+                "doctrine/orm": "The Doctrine ORM integration is optional in the bundle.",
+                "ext-pdo": "*",
+                "symfony/web-profiler-bundle": "To use the data collector."
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Bundle\\DoctrineBundle\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                },
+                {
+                    "name": "Doctrine Project",
+                    "homepage": "https://www.doctrine-project.org/"
+                }
+            ],
+            "description": "Symfony DoctrineBundle",
+            "homepage": "https://www.doctrine-project.org",
+            "keywords": [
+                "database",
+                "dbal",
+                "orm",
+                "persistence"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/DoctrineBundle/issues",
+                "source": "https://github.com/doctrine/DoctrineBundle/tree/3.2.2"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fdoctrine-bundle",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-12-24T12:24:29+00:00"
+        },
+        {
+            "name": "doctrine/doctrine-migrations-bundle",
+            "version": "4.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/DoctrineMigrationsBundle.git",
+                "reference": "20505da78735744fb4a42a3bb9a416b345ad6f7c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/DoctrineMigrationsBundle/zipball/20505da78735744fb4a42a3bb9a416b345ad6f7c",
+                "reference": "20505da78735744fb4a42a3bb9a416b345ad6f7c",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/dbal": "^4",
+                "doctrine/doctrine-bundle": "^3",
+                "doctrine/migrations": "^3.2",
+                "php": "^8.4",
+                "psr/log": "^3",
+                "symfony/config": "^6.4 || ^7.0 || ^8.0",
+                "symfony/console": "^6.4 || ^7.0 || ^8.0",
+                "symfony/dependency-injection": "^6.4 || ^7.0 || ^8.0",
+                "symfony/deprecation-contracts": "^3",
+                "symfony/framework-bundle": "^6.4 || ^7.0 || ^8.0",
+                "symfony/http-foundation": "^6.4 || ^7.0 || ^8.0",
+                "symfony/http-kernel": "^6.4 || ^7.0 || ^8.0",
+                "symfony/service-contracts": "^3.0"
+            },
+            "require-dev": {
+                "composer/semver": "^3.0",
+                "doctrine/coding-standard": "^14",
+                "doctrine/orm": "^3",
+                "phpstan/phpstan": "^2",
+                "phpstan/phpstan-deprecation-rules": "^2",
+                "phpstan/phpstan-phpunit": "^2",
+                "phpstan/phpstan-strict-rules": "^2",
+                "phpstan/phpstan-symfony": "^2",
+                "phpunit/phpunit": "^12.5",
+                "symfony/var-exporter": "^6.4 || ^7 || ^8"
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Bundle\\MigrationsBundle\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Doctrine Project",
+                    "homepage": "https://www.doctrine-project.org"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony DoctrineMigrationsBundle",
+            "homepage": "https://www.doctrine-project.org",
+            "keywords": [
+                "dbal",
+                "migrations",
+                "schema"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/DoctrineMigrationsBundle/issues",
+                "source": "https://github.com/doctrine/DoctrineMigrationsBundle/tree/4.0.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fdoctrine-migrations-bundle",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-12-05T08:14:38+00:00"
+        },
+        {
+            "name": "doctrine/event-manager",
+            "version": "2.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/event-manager.git",
+                "reference": "dda33921b198841ca8dbad2eaa5d4d34769d18cf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/event-manager/zipball/dda33921b198841ca8dbad2eaa5d4d34769d18cf",
+                "reference": "dda33921b198841ca8dbad2eaa5d4d34769d18cf",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "conflict": {
+                "doctrine/common": "<2.9"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "phpdocumentor/guides-cli": "^1.4",
+                "phpstan/phpstan": "^2.1.32",
+                "phpunit/phpunit": "^10.5.58"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Common\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                },
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com"
+                }
+            ],
+            "description": "The Doctrine Event Manager is a simple PHP event system that was built to be used with the various Doctrine projects.",
+            "homepage": "https://www.doctrine-project.org/projects/event-manager.html",
+            "keywords": [
+                "event",
+                "event dispatcher",
+                "event manager",
+                "event system",
+                "events"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/event-manager/issues",
+                "source": "https://github.com/doctrine/event-manager/tree/2.1.1"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fevent-manager",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-29T07:11:08+00:00"
+        },
+        {
+            "name": "doctrine/inflector",
+            "version": "2.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/inflector.git",
+                "reference": "6d6c96277ea252fc1304627204c3d5e6e15faa3b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/inflector/zipball/6d6c96277ea252fc1304627204c3d5e6e15faa3b",
+                "reference": "6d6c96277ea252fc1304627204c3d5e6e15faa3b",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^12.0 || ^13.0",
+                "phpstan/phpstan": "^1.12 || ^2.0",
+                "phpstan/phpstan-phpunit": "^1.4 || ^2.0",
+                "phpstan/phpstan-strict-rules": "^1.6 || ^2.0",
+                "phpunit/phpunit": "^8.5 || ^12.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Inflector\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                }
+            ],
+            "description": "PHP Doctrine Inflector is a small library that can perform string manipulations with regard to upper/lowercase and singular/plural forms of words.",
+            "homepage": "https://www.doctrine-project.org/projects/inflector.html",
+            "keywords": [
+                "inflection",
+                "inflector",
+                "lowercase",
+                "manipulation",
+                "php",
+                "plural",
+                "singular",
+                "strings",
+                "uppercase",
+                "words"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/inflector/issues",
+                "source": "https://github.com/doctrine/inflector/tree/2.1.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Finflector",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-10T19:31:58+00:00"
+        },
+        {
+            "name": "doctrine/instantiator",
+            "version": "2.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/instantiator.git",
+                "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/23da848e1a2308728fe5fdddabf4be17ff9720c7",
+                "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.4"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "ext-pdo": "*",
+                "ext-phar": "*",
+                "phpbench/phpbench": "^1.2",
+                "phpstan/phpstan": "^2.1",
+                "phpstan/phpstan-phpunit": "^2.0",
+                "phpunit/phpunit": "^10.5.58"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com",
+                    "homepage": "https://ocramius.github.io/"
+                }
+            ],
+            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
+            "homepage": "https://www.doctrine-project.org/projects/instantiator.html",
+            "keywords": [
+                "constructor",
+                "instantiate"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/instantiator/issues",
+                "source": "https://github.com/doctrine/instantiator/tree/2.1.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Finstantiator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-05T06:47:08+00:00"
+        },
+        {
+            "name": "doctrine/lexer",
+            "version": "3.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/lexer.git",
+                "reference": "31ad66abc0fc9e1a1f2d9bc6a42668d2fbbcd6dd"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/lexer/zipball/31ad66abc0fc9e1a1f2d9bc6a42668d2fbbcd6dd",
+                "reference": "31ad66abc0fc9e1a1f2d9bc6a42668d2fbbcd6dd",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^12",
+                "phpstan/phpstan": "^1.10",
+                "phpunit/phpunit": "^10.5",
+                "psalm/plugin-phpunit": "^0.18.3",
+                "vimeo/psalm": "^5.21"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Common\\Lexer\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                }
+            ],
+            "description": "PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.",
+            "homepage": "https://www.doctrine-project.org/projects/lexer.html",
+            "keywords": [
+                "annotations",
+                "docblock",
+                "lexer",
+                "parser",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/lexer/issues",
+                "source": "https://github.com/doctrine/lexer/tree/3.0.1"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Flexer",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-02-05T11:56:58+00:00"
+        },
+        {
+            "name": "doctrine/migrations",
+            "version": "3.9.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/migrations.git",
+                "reference": "96cb2a89b56c9efb0bac38e606dc0b0f13e650ec"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/migrations/zipball/96cb2a89b56c9efb0bac38e606dc0b0f13e650ec",
+                "reference": "96cb2a89b56c9efb0bac38e606dc0b0f13e650ec",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": "^2",
+                "doctrine/dbal": "^3.6 || ^4",
+                "doctrine/deprecations": "^0.5.3 || ^1",
+                "doctrine/event-manager": "^1.2 || ^2.0",
+                "php": "^8.1",
+                "psr/log": "^1.1.3 || ^2 || ^3",
+                "symfony/console": "^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/stopwatch": "^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/var-exporter": "^6.2 || ^7.0 || ^8.0"
+            },
+            "conflict": {
+                "doctrine/orm": "<2.12 || >=4"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "doctrine/orm": "^2.13 || ^3",
+                "doctrine/persistence": "^2 || ^3 || ^4",
+                "doctrine/sql-formatter": "^1.0",
+                "ext-pdo_sqlite": "*",
+                "fig/log-test": "^1",
+                "phpstan/phpstan": "^2",
+                "phpstan/phpstan-deprecation-rules": "^2",
+                "phpstan/phpstan-phpunit": "^2",
+                "phpstan/phpstan-strict-rules": "^2",
+                "phpstan/phpstan-symfony": "^2",
+                "phpunit/phpunit": "^10.3 || ^11.0 || ^12.0",
+                "symfony/cache": "^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/process": "^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/yaml": "^5.4 || ^6.0 || ^7.0 || ^8.0"
+            },
+            "suggest": {
+                "doctrine/sql-formatter": "Allows to generate formatted SQL with the diff command.",
+                "symfony/yaml": "Allows the use of yaml for migration configuration files."
+            },
+            "bin": [
+                "bin/doctrine-migrations"
+            ],
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Migrations\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Michael Simonson",
+                    "email": "contact@mikesimonson.com"
+                }
+            ],
+            "description": "PHP Doctrine Migrations project offer additional functionality on top of the database abstraction layer (DBAL) for versioning your database schema and easily deploying changes to it. It is a very easy to use and a powerful tool.",
+            "homepage": "https://www.doctrine-project.org/projects/migrations.html",
+            "keywords": [
+                "database",
+                "dbal",
+                "migrations"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/migrations/issues",
+                "source": "https://github.com/doctrine/migrations/tree/3.9.7"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fmigrations",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-23T19:33:20+00:00"
+        },
+        {
+            "name": "doctrine/orm",
+            "version": "3.6.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/orm.git",
+                "reference": "e88cd591f0786089dee22b972c28aa2076df51c0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/orm/zipball/e88cd591f0786089dee22b972c28aa2076df51c0",
+                "reference": "e88cd591f0786089dee22b972c28aa2076df51c0",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": "^2",
+                "doctrine/collections": "^2.2",
+                "doctrine/dbal": "^3.8.2 || ^4",
+                "doctrine/deprecations": "^0.5.3 || ^1",
+                "doctrine/event-manager": "^1.2 || ^2",
+                "doctrine/inflector": "^1.4 || ^2.0",
+                "doctrine/instantiator": "^1.3 || ^2",
+                "doctrine/lexer": "^3",
+                "doctrine/persistence": "^3.3.1 || ^4",
+                "ext-ctype": "*",
+                "php": "^8.1",
+                "psr/cache": "^1 || ^2 || ^3",
+                "symfony/console": "^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/var-exporter": "^6.3.9 || ^7.0 || ^8.0"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14.0",
+                "phpbench/phpbench": "^1.0",
+                "phpstan/extension-installer": "^1.4",
+                "phpstan/phpstan": "2.1.23",
+                "phpstan/phpstan-deprecation-rules": "^2",
+                "phpunit/phpunit": "^10.5.0 || ^11.5",
+                "psr/log": "^1 || ^2 || ^3",
+                "symfony/cache": "^5.4 || ^6.2 || ^7.0 || ^8.0"
+            },
+            "suggest": {
+                "ext-dom": "Provides support for XSD validation for XML mapping files",
+                "symfony/cache": "Provides cache support for Setup Tool with doctrine/cache 2.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\ORM\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com"
+                }
+            ],
+            "description": "Object-Relational-Mapper for PHP",
+            "homepage": "https://www.doctrine-project.org/projects/orm.html",
+            "keywords": [
+                "database",
+                "orm"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/orm/issues",
+                "source": "https://github.com/doctrine/orm/tree/3.6.3"
+            },
+            "time": "2026-04-02T06:53:27+00:00"
+        },
+        {
+            "name": "doctrine/persistence",
+            "version": "4.2.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/persistence.git",
+                "reference": "49ab73e0d3e2ac8d1f5ecda3dd8acd5503781e8b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/persistence/zipball/49ab73e0d3e2ac8d1f5ecda3dd8acd5503781e8b",
+                "reference": "49ab73e0d3e2ac8d1f5ecda3dd8acd5503781e8b",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/deprecations": "^1",
+                "doctrine/event-manager": "^1 || ^2",
+                "php": "^8.1",
+                "psr/cache": "^1.0 || ^2.0 || ^3.0"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "phpstan/phpstan": "2.1.30",
+                "phpstan/phpstan-phpunit": "^2",
+                "phpstan/phpstan-strict-rules": "^2",
+                "phpunit/phpunit": "^10.5.58 || ^12",
+                "symfony/cache": "^4.4 || ^5.4 || ^6.0 || ^7.0 || ^8.0",
+                "symfony/finder": "^4.4 || ^5.4 || ^6.0 || ^7.0 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Persistence\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Guilherme Blanco",
+                    "email": "guilhermeblanco@gmail.com"
+                },
+                {
+                    "name": "Roman Borschel",
+                    "email": "roman@code-factory.org"
+                },
+                {
+                    "name": "Benjamin Eberlei",
+                    "email": "kontakt@beberlei.de"
+                },
+                {
+                    "name": "Jonathan Wage",
+                    "email": "jonwage@gmail.com"
+                },
+                {
+                    "name": "Johannes Schmitt",
+                    "email": "schmittjoh@gmail.com"
+                },
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com"
+                }
+            ],
+            "description": "The Doctrine Persistence project is a set of shared interfaces and functionality that the different Doctrine object mappers share.",
+            "homepage": "https://www.doctrine-project.org/projects/persistence.html",
+            "keywords": [
+                "mapper",
+                "object",
+                "odm",
+                "orm",
+                "persistence"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/persistence/issues",
+                "source": "https://github.com/doctrine/persistence/tree/4.2.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Fpersistence",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-26T12:12:52+00:00"
+        },
+        {
+            "name": "doctrine/sql-formatter",
+            "version": "1.5.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/sql-formatter.git",
+                "reference": "9563949f5cd3bd12a17d12fb980528bc141c5806"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/sql-formatter/zipball/9563949f5cd3bd12a17d12fb980528bc141c5806",
+                "reference": "9563949f5cd3bd12a17d12fb980528bc141c5806",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^14",
+                "ergebnis/phpunit-slow-test-detector": "^2.20",
+                "phpstan/phpstan": "^2.1.31",
+                "phpunit/phpunit": "^10.5.58"
+            },
+            "bin": [
+                "bin/sql-formatter"
+            ],
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\SqlFormatter\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Jeremy Dorn",
+                    "email": "jeremy@jeremydorn.com",
+                    "homepage": "https://jeremydorn.com/"
+                }
+            ],
+            "description": "a PHP SQL highlighting library",
+            "homepage": "https://github.com/doctrine/sql-formatter/",
+            "keywords": [
+                "highlight",
+                "sql"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/sql-formatter/issues",
+                "source": "https://github.com/doctrine/sql-formatter/tree/1.5.4"
+            },
+            "time": "2026-02-08T16:21:46+00:00"
+        },
+        {
+            "name": "egulias/email-validator",
+            "version": "4.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/egulias/EmailValidator.git",
+                "reference": "d42c8731f0624ad6bdc8d3e5e9a4524f68801cfa"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/egulias/EmailValidator/zipball/d42c8731f0624ad6bdc8d3e5e9a4524f68801cfa",
+                "reference": "d42c8731f0624ad6bdc8d3e5e9a4524f68801cfa",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/lexer": "^2.0 || ^3.0",
+                "php": ">=8.1",
+                "symfony/polyfill-intl-idn": "^1.26"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^10.2",
+                "vimeo/psalm": "^5.12"
+            },
+            "suggest": {
+                "ext-intl": "PHP Internationalization Libraries are required to use the SpoofChecking validation"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Egulias\\EmailValidator\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Eduardo Gulias Davis"
+                }
+            ],
+            "description": "A library for validating emails against several RFCs",
+            "homepage": "https://github.com/egulias/EmailValidator",
+            "keywords": [
+                "email",
+                "emailvalidation",
+                "emailvalidator",
+                "validation",
+                "validator"
+            ],
+            "support": {
+                "issues": "https://github.com/egulias/EmailValidator/issues",
+                "source": "https://github.com/egulias/EmailValidator/tree/4.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/egulias",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-03-06T22:45:56+00:00"
+        },
+        {
+            "name": "psr/cache",
+            "version": "3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/cache.git",
+                "reference": "aa5030cfa5405eccfdcb1083ce040c2cb8d253bf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/cache/zipball/aa5030cfa5405eccfdcb1083ce040c2cb8d253bf",
+                "reference": "aa5030cfa5405eccfdcb1083ce040c2cb8d253bf",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.0.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Cache\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for caching libraries",
+            "keywords": [
+                "cache",
+                "psr",
+                "psr-6"
+            ],
+            "support": {
+                "source": "https://github.com/php-fig/cache/tree/3.0.0"
+            },
+            "time": "2021-02-03T23:26:27+00:00"
+        },
+        {
+            "name": "psr/clock",
+            "version": "1.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/clock.git",
+                "reference": "e41a24703d4560fd0acb709162f73b8adfc3aa0d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/clock/zipball/e41a24703d4560fd0acb709162f73b8adfc3aa0d",
+                "reference": "e41a24703d4560fd0acb709162f73b8adfc3aa0d",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.0 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Clock\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for reading the clock.",
+            "homepage": "https://github.com/php-fig/clock",
+            "keywords": [
+                "clock",
+                "now",
+                "psr",
+                "psr-20",
+                "time"
+            ],
+            "support": {
+                "issues": "https://github.com/php-fig/clock/issues",
+                "source": "https://github.com/php-fig/clock/tree/1.0.0"
+            },
+            "time": "2022-11-25T14:36:26+00:00"
+        },
+        {
+            "name": "psr/container",
+            "version": "2.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/container.git",
+                "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/container/zipball/c71ecc56dfe541dbd90c5360474fbc405f8d5963",
+                "reference": "c71ecc56dfe541dbd90c5360474fbc405f8d5963",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Container\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common Container Interface (PHP FIG PSR-11)",
+            "homepage": "https://github.com/php-fig/container",
+            "keywords": [
+                "PSR-11",
+                "container",
+                "container-interface",
+                "container-interop",
+                "psr"
+            ],
+            "support": {
+                "issues": "https://github.com/php-fig/container/issues",
+                "source": "https://github.com/php-fig/container/tree/2.0.2"
+            },
+            "time": "2021-11-05T16:47:00+00:00"
+        },
+        {
+            "name": "psr/event-dispatcher",
+            "version": "1.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/event-dispatcher.git",
+                "reference": "dbefd12671e8a14ec7f180cab83036ed26714bb0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/event-dispatcher/zipball/dbefd12671e8a14ec7f180cab83036ed26714bb0",
+                "reference": "dbefd12671e8a14ec7f180cab83036ed26714bb0",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\EventDispatcher\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Standard interfaces for event handling.",
+            "keywords": [
+                "events",
+                "psr",
+                "psr-14"
+            ],
+            "support": {
+                "issues": "https://github.com/php-fig/event-dispatcher/issues",
+                "source": "https://github.com/php-fig/event-dispatcher/tree/1.0.0"
+            },
+            "time": "2019-01-08T18:20:26+00:00"
+        },
+        {
+            "name": "psr/log",
+            "version": "3.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/log.git",
+                "reference": "f16e1d5863e37f8d8c2a01719f5b34baa2b714d3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/log/zipball/f16e1d5863e37f8d8c2a01719f5b34baa2b714d3",
+                "reference": "f16e1d5863e37f8d8c2a01719f5b34baa2b714d3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.0.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Log\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "https://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for logging libraries",
+            "homepage": "https://github.com/php-fig/log",
+            "keywords": [
+                "log",
+                "psr",
+                "psr-3"
+            ],
+            "support": {
+                "source": "https://github.com/php-fig/log/tree/3.0.2"
+            },
+            "time": "2024-09-11T13:17:53+00:00"
+        },
+        {
+            "name": "symfony/cache",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/cache.git",
+                "reference": "8abf3ccbeae9d3071b81a3ae7ee11b209f9e1e78"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/cache/zipball/8abf3ccbeae9d3071b81a3ae7ee11b209f9e1e78",
+                "reference": "8abf3ccbeae9d3071b81a3ae7ee11b209f9e1e78",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/cache": "^2.0|^3.0",
+                "psr/log": "^1.1|^2|^3",
+                "symfony/cache-contracts": "^3.6",
+                "symfony/service-contracts": "^2.5|^3",
+                "symfony/var-exporter": "^7.4|^8.0"
+            },
+            "conflict": {
+                "doctrine/dbal": "<4.3",
+                "ext-redis": "<6.1",
+                "ext-relay": "<0.12.1"
+            },
+            "provide": {
+                "psr/cache-implementation": "2.0|3.0",
+                "psr/simple-cache-implementation": "1.0|2.0|3.0",
+                "symfony/cache-implementation": "1.1|2.0|3.0"
+            },
+            "require-dev": {
+                "cache/integration-tests": "dev-master",
+                "doctrine/dbal": "^4.3",
+                "predis/predis": "^1.1|^2.0",
+                "psr/simple-cache": "^1.0|^2.0|^3.0",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/filesystem": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Cache\\": ""
+                },
+                "classmap": [
+                    "Traits/ValueWrapper.php"
+                ],
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides extended PSR-6, PSR-16 (and tags) implementations",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "caching",
+                "psr6"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/cache/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:18:51+00:00"
+        },
+        {
+            "name": "symfony/cache-contracts",
+            "version": "v3.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/cache-contracts.git",
+                "reference": "5d68a57d66910405e5c0b63d6f0af941e66fc868"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/cache-contracts/zipball/5d68a57d66910405e5c0b63d6f0af941e66fc868",
+                "reference": "5d68a57d66910405e5c0b63d6f0af941e66fc868",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1",
+                "psr/cache": "^3.0"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/contracts",
+                    "name": "symfony/contracts"
+                },
+                "branch-alias": {
+                    "dev-main": "3.6-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\Cache\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to caching",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/cache-contracts/tree/v3.6.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-03-13T15:25:07+00:00"
+        },
+        {
+            "name": "symfony/clock",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/clock.git",
+                "reference": "b55a638b189a6faa875e0ccdb00908fb87af95b3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/clock/zipball/b55a638b189a6faa875e0ccdb00908fb87af95b3",
+                "reference": "b55a638b189a6faa875e0ccdb00908fb87af95b3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/clock": "^1.0"
+            },
+            "provide": {
+                "psr/clock-implementation": "1.0"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "Resources/now.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Component\\Clock\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Decouples applications from the system clock",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "clock",
+                "psr20",
+                "time"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/clock/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/config",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/config.git",
+                "reference": "c7369cc1da250fcbfe0c5a9d109e419661549c39"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/config/zipball/c7369cc1da250fcbfe0c5a9d109e419661549c39",
+                "reference": "c7369cc1da250fcbfe0c5a9d109e419661549c39",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/filesystem": "^7.4|^8.0",
+                "symfony/polyfill-ctype": "^1.8"
+            },
+            "conflict": {
+                "symfony/service-contracts": "<2.5"
+            },
+            "require-dev": {
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Config\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Helps you find, load, combine, autofill and validate configuration values of any kind",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/config/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/console",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/console.git",
+                "reference": "5b66d385dc58f69652e56f78a4184615e3f2b7f7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/console/zipball/5b66d385dc58f69652e56f78a4184615e3f2b7f7",
+                "reference": "5b66d385dc58f69652e56f78a4184615e3f2b7f7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-mbstring": "^1.0",
+                "symfony/service-contracts": "^2.5|^3",
+                "symfony/string": "^7.4|^8.0"
+            },
+            "provide": {
+                "psr/log-implementation": "1.0|2.0|3.0"
+            },
+            "require-dev": {
+                "psr/log": "^1|^2|^3",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/lock": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Console\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Eases the creation of beautiful and testable command line interfaces",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "cli",
+                "command-line",
+                "console",
+                "terminal"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/console/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/dependency-injection",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/dependency-injection.git",
+                "reference": "3ce58b0fa844dc647ca1d66ea34748af985728c5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/dependency-injection/zipball/3ce58b0fa844dc647ca1d66ea34748af985728c5",
+                "reference": "3ce58b0fa844dc647ca1d66ea34748af985728c5",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/container": "^1.1|^2.0",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/service-contracts": "^3.6",
+                "symfony/var-exporter": "^7.4|^8.0"
+            },
+            "conflict": {
+                "ext-psr": "<1.1|>=2"
+            },
+            "provide": {
+                "psr/container-implementation": "1.1|2.0",
+                "symfony/service-implementation": "1.1|2.0|3.0"
+            },
+            "require-dev": {
+                "symfony/config": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\DependencyInjection\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Allows you to standardize and centralize the way objects are constructed in your application",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/dependency-injection/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-31T07:15:36+00:00"
+        },
+        {
+            "name": "symfony/deprecation-contracts",
+            "version": "v3.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/deprecation-contracts.git",
+                "reference": "63afe740e99a13ba87ec199bb07bbdee937a5b62"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/deprecation-contracts/zipball/63afe740e99a13ba87ec199bb07bbdee937a5b62",
+                "reference": "63afe740e99a13ba87ec199bb07bbdee937a5b62",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/contracts",
+                    "name": "symfony/contracts"
+                },
+                "branch-alias": {
+                    "dev-main": "3.6-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "function.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "A generic function and convention to trigger deprecation notices",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/deprecation-contracts/tree/v3.6.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-09-25T14:21:43+00:00"
+        },
+        {
+            "name": "symfony/doctrine-bridge",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/doctrine-bridge.git",
+                "reference": "a45ac00ffcc763ffc36c791647e93d310142804f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/doctrine-bridge/zipball/a45ac00ffcc763ffc36c791647e93d310142804f",
+                "reference": "a45ac00ffcc763ffc36c791647e93d310142804f",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/event-manager": "^2",
+                "doctrine/persistence": "^3.1|^4",
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-mbstring": "^1.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "doctrine/collections": "<1.8",
+                "doctrine/dbal": "<4.3",
+                "doctrine/lexer": "<1.1",
+                "doctrine/orm": "<3.4",
+                "symfony/property-info": "<8.0"
+            },
+            "require-dev": {
+                "doctrine/collections": "^1.8|^2.0",
+                "doctrine/data-fixtures": "^1.1|^2",
+                "doctrine/dbal": "^4.3",
+                "doctrine/orm": "^3.4",
+                "psr/log": "^1|^2|^3",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/doctrine-messenger": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/form": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/lock": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/property-info": "^8.0",
+                "symfony/security-core": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/type-info": "^7.4|^8.0",
+                "symfony/uid": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "type": "symfony-bridge",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bridge\\Doctrine\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides integration for Doctrine with various Symfony components",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/doctrine-bridge/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/doctrine-messenger",
+            "version": "v8.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/doctrine-messenger.git",
+                "reference": "88329a3faba5023cfb569b3fc5b8a771336c4a88"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/doctrine-messenger/zipball/88329a3faba5023cfb569b3fc5b8a771336c4a88",
+                "reference": "88329a3faba5023cfb569b3fc5b8a771336c4a88",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/dbal": "^4.3",
+                "php": ">=8.4",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "doctrine/persistence": "<1.3"
+            },
+            "require-dev": {
+                "doctrine/persistence": "^1.3|^2|^3",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0"
+            },
+            "type": "symfony-messenger-bridge",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Messenger\\Bridge\\Doctrine\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Doctrine Messenger Bridge",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/doctrine-messenger/tree/v8.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-02-20T07:51:53+00:00"
+        },
+        {
+            "name": "symfony/dotenv",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/dotenv.git",
+                "reference": "5ba6337f9a86e78e13b1ac11a89f85689b12cf2c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/dotenv/zipball/5ba6337f9a86e78e13b1ac11a89f85689b12cf2c",
+                "reference": "5ba6337f9a86e78e13b1ac11a89f85689b12cf2c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Dotenv\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Registers environment variables from a .env file",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "dotenv",
+                "env",
+                "environment"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/dotenv/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/error-handler",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/error-handler.git",
+                "reference": "c1119fe8dcfc3825ec74ec061b96ef0c8f281517"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/error-handler/zipball/c1119fe8dcfc3825ec74ec061b96ef0c8f281517",
+                "reference": "c1119fe8dcfc3825ec74ec061b96ef0c8f281517",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/log": "^1|^2|^3",
+                "symfony/polyfill-php85": "^1.32",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "conflict": {
+                "symfony/deprecation-contracts": "<2.5"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/webpack-encore-bundle": "^1.0|^2.0"
+            },
+            "bin": [
+                "Resources/bin/patch-type-declarations"
+            ],
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\ErrorHandler\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides tools to manage errors and ease debugging PHP code",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/error-handler/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/event-dispatcher",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/event-dispatcher.git",
+                "reference": "f662acc6ab22a3d6d716dcb44c381c6002940df6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/event-dispatcher/zipball/f662acc6ab22a3d6d716dcb44c381c6002940df6",
+                "reference": "f662acc6ab22a3d6d716dcb44c381c6002940df6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/event-dispatcher-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "symfony/security-http": "<7.4",
+                "symfony/service-contracts": "<2.5"
+            },
+            "provide": {
+                "psr/event-dispatcher-implementation": "1.0",
+                "symfony/event-dispatcher-implementation": "2.0|3.0"
+            },
+            "require-dev": {
+                "psr/log": "^1|^2|^3",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/error-handler": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/framework-bundle": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3",
+                "symfony/stopwatch": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\EventDispatcher\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides tools that allow your application components to communicate with each other by dispatching events and listening to them",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/event-dispatcher/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/event-dispatcher-contracts",
+            "version": "v3.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/event-dispatcher-contracts.git",
+                "reference": "59eb412e93815df44f05f342958efa9f46b1e586"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/event-dispatcher-contracts/zipball/59eb412e93815df44f05f342958efa9f46b1e586",
+                "reference": "59eb412e93815df44f05f342958efa9f46b1e586",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1",
+                "psr/event-dispatcher": "^1"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/contracts",
+                    "name": "symfony/contracts"
+                },
+                "branch-alias": {
+                    "dev-main": "3.6-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\EventDispatcher\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to dispatching event",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/event-dispatcher-contracts/tree/v3.6.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-09-25T14:21:43+00:00"
+        },
+        {
+            "name": "symfony/filesystem",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/filesystem.git",
+                "reference": "66b769ae743ce2d13e435528fbef4af03d623e5a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/filesystem/zipball/66b769ae743ce2d13e435528fbef4af03d623e5a",
+                "reference": "66b769ae743ce2d13e435528fbef4af03d623e5a",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "~1.8",
+                "symfony/polyfill-mbstring": "~1.8"
+            },
+            "require-dev": {
+                "symfony/process": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Filesystem\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides basic utilities for the filesystem",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/filesystem/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/finder",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/finder.git",
+                "reference": "8da41214757b87d97f181e3d14a4179286151007"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/finder/zipball/8da41214757b87d97f181e3d14a4179286151007",
+                "reference": "8da41214757b87d97f181e3d14a4179286151007",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4"
+            },
+            "require-dev": {
+                "symfony/filesystem": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Finder\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Finds files and directories via an intuitive fluent interface",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/finder/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/flex",
+            "version": "v2.10.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/flex.git",
+                "reference": "9cd384775973eabbf6e8b05784dda279fc67c28d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/flex/zipball/9cd384775973eabbf6e8b05784dda279fc67c28d",
+                "reference": "9cd384775973eabbf6e8b05784dda279fc67c28d",
+                "shasum": ""
+            },
+            "require": {
+                "composer-plugin-api": "^2.1",
+                "php": ">=8.1"
+            },
+            "conflict": {
+                "composer/semver": "<1.7.2",
+                "symfony/dotenv": "<5.4"
+            },
+            "require-dev": {
+                "composer/composer": "^2.1",
+                "symfony/dotenv": "^6.4|^7.4|^8.0",
+                "symfony/filesystem": "^6.4|^7.4|^8.0",
+                "symfony/phpunit-bridge": "^6.4|^7.4|^8.0",
+                "symfony/process": "^6.4|^7.4|^8.0"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "Symfony\\Flex\\Flex"
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Flex\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien.potencier@gmail.com"
+                }
+            ],
+            "description": "Composer plugin for Symfony",
+            "support": {
+                "issues": "https://github.com/symfony/flex/issues",
+                "source": "https://github.com/symfony/flex/tree/v2.10.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-11-16T09:38:19+00:00"
+        },
+        {
+            "name": "symfony/framework-bundle",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/framework-bundle.git",
+                "reference": "ce3ee5db0a9c1b6c52f5e3ba16b63a677b18b7df"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/framework-bundle/zipball/ce3ee5db0a9c1b6c52f5e3ba16b63a677b18b7df",
+                "reference": "ce3ee5db0a9c1b6c52f5e3ba16b63a677b18b7df",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": ">=2.1",
+                "ext-xml": "*",
+                "php": ">=8.4",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/config": "^7.4.4|^8.0.4",
+                "symfony/dependency-injection": "^7.4.4|^8.0.4",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/error-handler": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/filesystem": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/polyfill-mbstring": "^1.0",
+                "symfony/polyfill-php85": "^1.32",
+                "symfony/routing": "^7.4|^8.0"
+            },
+            "conflict": {
+                "doctrine/persistence": "<1.3",
+                "phpdocumentor/reflection-docblock": "<5.2|>=7",
+                "phpdocumentor/type-resolver": "<1.5.1",
+                "symfony/console": "<7.4",
+                "symfony/form": "<7.4",
+                "symfony/json-streamer": "<7.4",
+                "symfony/messenger": "<7.4",
+                "symfony/security-csrf": "<7.4",
+                "symfony/serializer": "<7.4",
+                "symfony/translation": "<7.4",
+                "symfony/webhook": "<7.4",
+                "symfony/workflow": "<7.4"
+            },
+            "require-dev": {
+                "doctrine/persistence": "^1.3|^2|^3",
+                "dragonmantank/cron-expression": "^3.1",
+                "phpdocumentor/reflection-docblock": "^5.2|^6.0",
+                "phpstan/phpdoc-parser": "^1.0|^2.0",
+                "seld/jsonlint": "^1.10",
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/asset-mapper": "^7.4|^8.0",
+                "symfony/browser-kit": "^7.4|^8.0",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/css-selector": "^7.4|^8.0",
+                "symfony/dom-crawler": "^7.4|^8.0",
+                "symfony/dotenv": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/form": "^7.4|^8.0",
+                "symfony/html-sanitizer": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/json-streamer": "^7.4|^8.0",
+                "symfony/lock": "^7.4|^8.0",
+                "symfony/mailer": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/notifier": "^7.4|^8.0",
+                "symfony/object-mapper": "^7.4|^8.0",
+                "symfony/polyfill-intl-icu": "^1.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/property-info": "^7.4|^8.0",
+                "symfony/rate-limiter": "^7.4|^8.0",
+                "symfony/runtime": "^7.4|^8.0",
+                "symfony/scheduler": "^7.4|^8.0",
+                "symfony/security-bundle": "^7.4|^8.0",
+                "symfony/semaphore": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/string": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/twig-bundle": "^7.4|^8.0",
+                "symfony/type-info": "^7.4.1|^8.0.1",
+                "symfony/uid": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/web-link": "^7.4|^8.0",
+                "symfony/webhook": "^7.4|^8.0",
+                "symfony/workflow": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bundle\\FrameworkBundle\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a tight integration between Symfony components and the Symfony full-stack framework",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/framework-bundle/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/http-foundation",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/http-foundation.git",
+                "reference": "02656f7ebeae5c155d659e946f6b3a33df24051b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/http-foundation/zipball/02656f7ebeae5c155d659e946f6b3a33df24051b",
+                "reference": "02656f7ebeae5c155d659e946f6b3a33df24051b",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-mbstring": "^1.1"
+            },
+            "conflict": {
+                "doctrine/dbal": "<4.3"
+            },
+            "require-dev": {
+                "doctrine/dbal": "^4.3",
+                "predis/predis": "^1.1|^2.0",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/rate-limiter": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\HttpFoundation\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Defines an object-oriented layer for the HTTP specification",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/http-foundation/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/http-kernel",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/http-kernel.git",
+                "reference": "1770f6818d83b2fddc12185025b93f39a90cb628"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/http-kernel/zipball/1770f6818d83b2fddc12185025b93f39a90cb628",
+                "reference": "1770f6818d83b2fddc12185025b93f39a90cb628",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/log": "^1|^2|^3",
+                "symfony/error-handler": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/polyfill-ctype": "^1.8"
+            },
+            "conflict": {
+                "symfony/flex": "<2.10",
+                "symfony/http-client-contracts": "<2.5",
+                "symfony/translation-contracts": "<2.5",
+                "twig/twig": "<3.21"
+            },
+            "provide": {
+                "psr/log-implementation": "1.0|2.0|3.0"
+            },
+            "require-dev": {
+                "psr/cache": "^1.0|^2.0|^3.0",
+                "symfony/browser-kit": "^7.4|^8.0",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/css-selector": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/dom-crawler": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/http-client-contracts": "^2.5|^3",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/translation-contracts": "^2.5|^3",
+                "symfony/uid": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0",
+                "symfony/var-exporter": "^7.4|^8.0",
+                "twig/twig": "^3.21"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\HttpKernel\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a structured process for converting a Request into a Response",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/http-kernel/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-31T21:14:05+00:00"
+        },
+        {
+            "name": "symfony/mailer",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/mailer.git",
+                "reference": "ca5f6edaf8780ece814404b58a4482b22b509c56"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/mailer/zipball/ca5f6edaf8780ece814404b58a4482b22b509c56",
+                "reference": "ca5f6edaf8780ece814404b58a4482b22b509c56",
+                "shasum": ""
+            },
+            "require": {
+                "egulias/email-validator": "^2.1.10|^3|^4",
+                "php": ">=8.4",
+                "psr/event-dispatcher": "^1",
+                "psr/log": "^1|^2|^3",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "symfony/http-client-contracts": "<2.5"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/messenger": "^7.4|^8.0",
+                "symfony/twig-bridge": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Mailer\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Helps sending emails",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/mailer/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/messenger",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/messenger.git",
+                "reference": "8d0e6b2d5e5dc9d484c6e45117395ae98f0a497a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/messenger/zipball/8d0e6b2d5e5dc9d484c6e45117395ae98f0a497a",
+                "reference": "8d0e6b2d5e5dc9d484c6e45117395ae98f0a497a",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/log": "^1|^2|^3",
+                "symfony/clock": "^7.4|^8.0"
+            },
+            "conflict": {
+                "symfony/console": "<7.4",
+                "symfony/event-dispatcher-contracts": "<2.5",
+                "symfony/lock": "<7.4",
+                "symfony/serializer": "<7.4.4|>=8.0,<8.0.4"
+            },
+            "require-dev": {
+                "psr/cache": "^1.0|^2.0|^3.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/lock": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/rate-limiter": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/serializer": "^7.4.4|^8.0.4",
+                "symfony/service-contracts": "^2.5|^3",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Messenger\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Samuel Roze",
+                    "email": "samuel.roze@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Helps applications send and receive messages to/from other applications or via message queues",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/messenger/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/mime",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/mime.git",
+                "reference": "ddff21f14c7ce04b98101b399a9463dce8b0ce66"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/mime/zipball/ddff21f14c7ce04b98101b399a9463dce8b0ce66",
+                "reference": "ddff21f14c7ce04b98101b399a9463dce8b0ce66",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-intl-idn": "^1.10",
+                "symfony/polyfill-mbstring": "^1.0"
+            },
+            "conflict": {
+                "egulias/email-validator": "~3.0.0",
+                "phpdocumentor/reflection-docblock": "<5.2|>=7",
+                "phpdocumentor/type-resolver": "<1.5.1"
+            },
+            "require-dev": {
+                "egulias/email-validator": "^2.1.10|^3.1|^4",
+                "league/html-to-markdown": "^5.0",
+                "phpdocumentor/reflection-docblock": "^5.2|^6.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/property-info": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Mime\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Allows manipulating MIME messages",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "mime",
+                "mime-type"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/mime/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/password-hasher",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/password-hasher.git",
+                "reference": "57ee968d3c38301ed3e5b838f850a10f2d06a7f6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/password-hasher/zipball/57ee968d3c38301ed3e5b838f850a10f2d06a7f6",
+                "reference": "57ee968d3c38301ed3e5b838f850a10f2d06a7f6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0",
+                "symfony/security-core": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\PasswordHasher\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Robin Chalas",
+                    "email": "robin.chalas@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides password hashing utilities",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "hashing",
+                "password"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/password-hasher/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/polyfill-intl-grapheme",
+            "version": "v1.37.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-intl-grapheme.git",
+                "reference": "4864388bfbd3001ce88e234fab652acd91fdc57e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/4864388bfbd3001ce88e234fab652acd91fdc57e",
+                "reference": "4864388bfbd3001ce88e234fab652acd91fdc57e",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2"
+            },
+            "suggest": {
+                "ext-intl": "For best performance"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Intl\\Grapheme\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill for intl's grapheme_* functions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "grapheme",
+                "intl",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-intl-grapheme/tree/v1.37.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-26T13:13:48+00:00"
+        },
+        {
+            "name": "symfony/polyfill-intl-idn",
+            "version": "v1.37.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-intl-idn.git",
+                "reference": "9614ac4d8061dc257ecc64cba1b140873dce8ad3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-intl-idn/zipball/9614ac4d8061dc257ecc64cba1b140873dce8ad3",
+                "reference": "9614ac4d8061dc257ecc64cba1b140873dce8ad3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2",
+                "symfony/polyfill-intl-normalizer": "^1.10"
+            },
+            "suggest": {
+                "ext-intl": "For best performance"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Intl\\Idn\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Laurent Bassin",
+                    "email": "laurent@bassin.info"
+                },
+                {
+                    "name": "Trevor Rowbotham",
+                    "email": "trevor.rowbotham@pm.me"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill for intl's idn_to_ascii and idn_to_utf8 functions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "idn",
+                "intl",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-intl-idn/tree/v1.37.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-09-10T14:38:51+00:00"
+        },
+        {
+            "name": "symfony/polyfill-intl-normalizer",
+            "version": "v1.37.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-intl-normalizer.git",
+                "reference": "3833d7255cc303546435cb650316bff708a1c75c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-intl-normalizer/zipball/3833d7255cc303546435cb650316bff708a1c75c",
+                "reference": "3833d7255cc303546435cb650316bff708a1c75c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2"
+            },
+            "suggest": {
+                "ext-intl": "For best performance"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Intl\\Normalizer\\": ""
+                },
+                "classmap": [
+                    "Resources/stubs"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill for intl's Normalizer class and related functions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "intl",
+                "normalizer",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-intl-normalizer/tree/v1.37.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-09-09T11:45:10+00:00"
+        },
+        {
+            "name": "symfony/polyfill-mbstring",
+            "version": "v1.37.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-mbstring.git",
+                "reference": "6a21eb99c6973357967f6ce3708cd55a6bec6315"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/6a21eb99c6973357967f6ce3708cd55a6bec6315",
+                "reference": "6a21eb99c6973357967f6ce3708cd55a6bec6315",
+                "shasum": ""
+            },
+            "require": {
+                "ext-iconv": "*",
+                "php": ">=7.2"
+            },
+            "provide": {
+                "ext-mbstring": "*"
+            },
+            "suggest": {
+                "ext-mbstring": "For best performance"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Mbstring\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill for the Mbstring extension",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "mbstring",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.37.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-10T17:25:58+00:00"
+        },
+        {
+            "name": "symfony/polyfill-php85",
+            "version": "v1.37.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-php85.git",
+                "reference": "fcfa4973a9917cef23f2e38774da74a2b7d115ee"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-php85/zipball/fcfa4973a9917cef23f2e38774da74a2b7d115ee",
+                "reference": "fcfa4973a9917cef23f2e38774da74a2b7d115ee",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Php85\\": ""
+                },
+                "classmap": [
+                    "Resources/stubs"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill backporting some PHP 8.5+ features to lower PHP versions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-php85/tree/v1.37.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-04-26T13:10:57+00:00"
+        },
+        {
+            "name": "symfony/property-access",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/property-access.git",
+                "reference": "704c7808116fcdd67327db7b17de56b8ef6169e4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/property-access/zipball/704c7808116fcdd67327db7b17de56b8ef6169e4",
+                "reference": "704c7808116fcdd67327db7b17de56b8ef6169e4",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/property-info": "^7.4.4|^8.0.4"
+            },
+            "require-dev": {
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/var-exporter": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\PropertyAccess\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides functions to read and write from/to an object or array using a simple string notation",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "access",
+                "array",
+                "extraction",
+                "index",
+                "injection",
+                "object",
+                "property",
+                "property-path",
+                "reflection"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/property-access/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/property-info",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/property-info.git",
+                "reference": "c21711980653360d6ef5c26d0f9ca6f58a1135c6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/property-info/zipball/c21711980653360d6ef5c26d0f9ca6f58a1135c6",
+                "reference": "c21711980653360d6ef5c26d0f9ca6f58a1135c6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/string": "^7.4|^8.0",
+                "symfony/type-info": "^7.4.7|^8.0.7"
+            },
+            "conflict": {
+                "phpdocumentor/reflection-docblock": "<5.2|>=7",
+                "phpdocumentor/type-resolver": "<1.5.1"
+            },
+            "require-dev": {
+                "phpdocumentor/reflection-docblock": "^5.2|^6.0",
+                "phpstan/phpdoc-parser": "^1.0|^2.0",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\PropertyInfo\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Kévin Dunglas",
+                    "email": "dunglas@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Extracts information about PHP class' properties using metadata of popular sources",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "doctrine",
+                "phpdoc",
+                "property",
+                "symfony",
+                "type",
+                "validator"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/property-info/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/routing",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/routing.git",
+                "reference": "0de330ec2ea922a7b08ec45615bd51179de7fda4"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/routing/zipball/0de330ec2ea922a7b08ec45615bd51179de7fda4",
+                "reference": "0de330ec2ea922a7b08ec45615bd51179de7fda4",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/deprecation-contracts": "^2.5|^3"
+            },
+            "require-dev": {
+                "psr/log": "^1|^2|^3",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Routing\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Maps an HTTP request to a set of configuration variables",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "router",
+                "routing",
+                "uri",
+                "url"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/routing/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/runtime",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/runtime.git",
+                "reference": "30884f00e017a26100fcd9aa281082ebf9a87dce"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/runtime/zipball/30884f00e017a26100fcd9aa281082ebf9a87dce",
+                "reference": "30884f00e017a26100fcd9aa281082ebf9a87dce",
+                "shasum": ""
+            },
+            "require": {
+                "composer-plugin-api": "^1.0|^2.0",
+                "php": ">=8.4"
+            },
+            "conflict": {
+                "symfony/error-handler": "<7.4"
+            },
+            "require-dev": {
+                "composer/composer": "^2.6",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/dotenv": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0"
+            },
+            "type": "composer-plugin",
+            "extra": {
+                "class": "Symfony\\Component\\Runtime\\Internal\\ComposerPlugin"
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Runtime\\": "",
+                    "Symfony\\Runtime\\Symfony\\Component\\": "Internal/"
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Enables decoupling PHP applications from global state",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "runtime"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/runtime/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/security-bundle",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/security-bundle.git",
+                "reference": "00a13be2abf3fe9baf54e1e16e7583ca9c708f09"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/security-bundle/zipball/00a13be2abf3fe9baf54e1e16e7583ca9c708f09",
+                "reference": "00a13be2abf3fe9baf54e1e16e7583ca9c708f09",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": ">=2.1",
+                "ext-xml": "*",
+                "php": ">=8.4",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/password-hasher": "^7.4|^8.0",
+                "symfony/security-core": "^7.4|^8.0",
+                "symfony/security-csrf": "^7.4|^8.0",
+                "symfony/security-http": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "require-dev": {
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/browser-kit": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/css-selector": "^7.4|^8.0",
+                "symfony/dom-crawler": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/form": "^7.4|^8.0",
+                "symfony/framework-bundle": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/ldap": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/rate-limiter": "^7.4|^8.0",
+                "symfony/runtime": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/twig-bridge": "^7.4|^8.0",
+                "symfony/twig-bundle": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0",
+                "web-token/jwt-library": "^3.3.2|^4.0"
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bundle\\SecurityBundle\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a tight integration of the Security component into the Symfony full-stack framework",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/security-bundle/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/security-core",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/security-core.git",
+                "reference": "8456ed58e22f59a4c50f50d7dd82b2f41d162c5f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/security-core/zipball/8456ed58e22f59a4c50f50d7dd82b2f41d162c5f",
+                "reference": "8456ed58e22f59a4c50f50d7dd82b2f41d162c5f",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/event-dispatcher-contracts": "^2.5|^3",
+                "symfony/password-hasher": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "require-dev": {
+                "psr/cache": "^1.0|^2.0|^3.0",
+                "psr/container": "^1.1|^2.0",
+                "psr/log": "^1|^2|^3",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/ldap": "^7.4|^8.0",
+                "symfony/string": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Security\\Core\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Security Component - Core Library",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/security-core/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-31T07:15:36+00:00"
+        },
+        {
+            "name": "symfony/security-csrf",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/security-csrf.git",
+                "reference": "83c8f60ef8d385c05ea863093c9efabe74800883"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/security-csrf/zipball/83c8f60ef8d385c05ea863093c9efabe74800883",
+                "reference": "83c8f60ef8d385c05ea863093c9efabe74800883",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/security-core": "^7.4|^8.0"
+            },
+            "require-dev": {
+                "psr/log": "^1|^2|^3",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Security\\Csrf\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Security Component - CSRF Library",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/security-csrf/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/security-http",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/security-http.git",
+                "reference": "d3918d827ad0d18dcf009cf8fee82fd6e107de92"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/security-http/zipball/d3918d827ad0d18dcf009cf8fee82fd6e107de92",
+                "reference": "d3918d827ad0d18dcf009cf8fee82fd6e107de92",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/polyfill-mbstring": "^1.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/security-core": "^7.4|^8.0",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "symfony/http-client-contracts": "<3.0"
+            },
+            "require-dev": {
+                "psr/log": "^1|^2|^3",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/clock": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/http-client-contracts": "^3.0",
+                "symfony/rate-limiter": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/security-csrf": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "web-token/jwt-library": "^3.3.2|^4.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Security\\Http\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony Security Component - HTTP Integration",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/security-http/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/service-contracts",
+            "version": "v3.6.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/service-contracts.git",
+                "reference": "45112560a3ba2d715666a509a0bc9521d10b6c43"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/service-contracts/zipball/45112560a3ba2d715666a509a0bc9521d10b6c43",
+                "reference": "45112560a3ba2d715666a509a0bc9521d10b6c43",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1",
+                "psr/container": "^1.1|^2.0",
+                "symfony/deprecation-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "ext-psr": "<1.1|>=2"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/contracts",
+                    "name": "symfony/contracts"
+                },
+                "branch-alias": {
+                    "dev-main": "3.6-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\Service\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Test/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to writing services",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/service-contracts/tree/v3.6.1"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-07-15T11:30:57+00:00"
+        },
+        {
+            "name": "symfony/stopwatch",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/stopwatch.git",
+                "reference": "85954ed72d5440ea4dc9a10b7e49e01df766ffa3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/stopwatch/zipball/85954ed72d5440ea4dc9a10b7e49e01df766ffa3",
+                "reference": "85954ed72d5440ea4dc9a10b7e49e01df766ffa3",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/service-contracts": "^2.5|^3"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Stopwatch\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a way to profile code",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/stopwatch/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/string",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/string.git",
+                "reference": "ae9488f874d7603f9d2dfbf120203882b645d963"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/string/zipball/ae9488f874d7603f9d2dfbf120203882b645d963",
+                "reference": "ae9488f874d7603f9d2dfbf120203882b645d963",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-intl-grapheme": "^1.33",
+                "symfony/polyfill-intl-normalizer": "^1.0",
+                "symfony/polyfill-mbstring": "^1.0"
+            },
+            "conflict": {
+                "symfony/translation-contracts": "<2.5"
+            },
+            "require-dev": {
+                "symfony/emoji": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/intl": "^7.4|^8.0",
+                "symfony/translation-contracts": "^2.5|^3.0",
+                "symfony/var-exporter": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "Resources/functions.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Component\\String\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides an object-oriented API to strings and deals with bytes, UTF-8 code points and grapheme clusters in a unified way",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "grapheme",
+                "i18n",
+                "string",
+                "unicode",
+                "utf-8",
+                "utf8"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/string/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/translation-contracts",
+            "version": "v3.6.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/translation-contracts.git",
+                "reference": "65a8bc82080447fae78373aa10f8d13b38338977"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/translation-contracts/zipball/65a8bc82080447fae78373aa10f8d13b38338977",
+                "reference": "65a8bc82080447fae78373aa10f8d13b38338977",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/contracts",
+                    "name": "symfony/contracts"
+                },
+                "branch-alias": {
+                    "dev-main": "3.6-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Contracts\\Translation\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Test/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Generic abstractions related to translation",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "abstractions",
+                "contracts",
+                "decoupling",
+                "interfaces",
+                "interoperability",
+                "standards"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/translation-contracts/tree/v3.6.1"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-07-15T13:41:35+00:00"
+        },
+        {
+            "name": "symfony/twig-bridge",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/twig-bridge.git",
+                "reference": "a892d0b7f3d5d51b35895467e48aafbd1f2612a0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/twig-bridge/zipball/a892d0b7f3d5d51b35895467e48aafbd1f2612a0",
+                "reference": "a892d0b7f3d5d51b35895467e48aafbd1f2612a0",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/translation-contracts": "^2.5|^3",
+                "twig/twig": "^3.21"
+            },
+            "conflict": {
+                "phpdocumentor/reflection-docblock": "<5.2|>=7",
+                "phpdocumentor/type-resolver": "<1.5.1",
+                "symfony/form": "<7.4.4|>8.0,<8.0.4",
+                "symfony/mime": "<7.4.8|>8.0,<8.0.8"
+            },
+            "require-dev": {
+                "egulias/email-validator": "^2.1.10|^3|^4",
+                "league/html-to-markdown": "^5.0",
+                "phpdocumentor/reflection-docblock": "^5.2|^6.0",
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/asset-mapper": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/emoji": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/form": "^7.4.4|^8.0.4",
+                "symfony/html-sanitizer": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/intl": "^7.4|^8.0",
+                "symfony/mime": "^7.4.8|^8.0.8",
+                "symfony/polyfill-intl-icu": "^1.0",
+                "symfony/property-info": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/security-acl": "^2.8|^3.0",
+                "symfony/security-core": "^7.4|^8.0",
+                "symfony/security-csrf": "^7.4|^8.0",
+                "symfony/security-http": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/web-link": "^7.4|^8.0",
+                "symfony/workflow": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0",
+                "twig/cssinliner-extra": "^3",
+                "twig/inky-extra": "^3",
+                "twig/markdown-extra": "^3"
+            },
+            "type": "symfony-bridge",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bridge\\Twig\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides integration for Twig with various Symfony components",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/twig-bridge/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/twig-bundle",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/twig-bundle.git",
+                "reference": "f83767b78e2580ca9fe9a2cf6fcff19cd5389bc1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/twig-bundle/zipball/f83767b78e2580ca9fe9a2cf6fcff19cd5389bc1",
+                "reference": "f83767b78e2580ca9fe9a2cf6fcff19cd5389bc1",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": ">=2.1",
+                "php": ">=8.4",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/twig-bridge": "^7.4|^8.0"
+            },
+            "require-dev": {
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/form": "^7.4|^8.0",
+                "symfony/framework-bundle": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/runtime": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/web-link": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bundle\\TwigBundle\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a tight integration of Twig into the Symfony full-stack framework",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/twig-bundle/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/type-info",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/type-info.git",
+                "reference": "622d81551770029d44d16be68969712eb47892f1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/type-info/zipball/622d81551770029d44d16be68969712eb47892f1",
+                "reference": "622d81551770029d44d16be68969712eb47892f1",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/container": "^1.1|^2.0"
+            },
+            "conflict": {
+                "phpstan/phpdoc-parser": "<1.30"
+            },
+            "require-dev": {
+                "phpstan/phpdoc-parser": "^1.30|^2.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\TypeInfo\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Mathias Arlaud",
+                    "email": "mathias.arlaud@gmail.com"
+                },
+                {
+                    "name": "Baptiste LEDUC",
+                    "email": "baptiste.leduc@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Extracts PHP types information.",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "PHPStan",
+                "phpdoc",
+                "symfony",
+                "type"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/type-info/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/validator",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/validator.git",
+                "reference": "1a559eecc841a6fd3dabdcbff9401a0b8951be90"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/validator/zipball/1a559eecc841a6fd3dabdcbff9401a0b8951be90",
+                "reference": "1a559eecc841a6fd3dabdcbff9401a0b8951be90",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-mbstring": "^1.0",
+                "symfony/translation-contracts": "^2.5|^3"
+            },
+            "conflict": {
+                "doctrine/lexer": "<1.1",
+                "symfony/doctrine-bridge": "<7.4",
+                "symfony/expression-language": "<7.4"
+            },
+            "require-dev": {
+                "egulias/email-validator": "^2.1.10|^3|^4",
+                "symfony/cache": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/intl": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/property-info": "^7.4|^8.0",
+                "symfony/string": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/type-info": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Validator\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/",
+                    "/Resources/bin/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides tools to validate values",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/validator/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/var-dumper",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/var-dumper.git",
+                "reference": "cfb7badd53bf4177f6e9416cfbbccc13c0e773a1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/var-dumper/zipball/cfb7badd53bf4177f6e9416cfbbccc13c0e773a1",
+                "reference": "cfb7badd53bf4177f6e9416cfbbccc13c0e773a1",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-mbstring": "^1.0"
+            },
+            "conflict": {
+                "symfony/console": "<7.4",
+                "symfony/error-handler": "<7.4"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0",
+                "symfony/uid": "^7.4|^8.0",
+                "twig/twig": "^3.12"
+            },
+            "bin": [
+                "Resources/bin/var-dump-server"
+            ],
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "Resources/functions/dump.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Component\\VarDumper\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides mechanisms for walking through any arbitrary PHP variable",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "debug",
+                "dump"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/var-dumper/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-31T07:15:36+00:00"
+        },
+        {
+            "name": "symfony/var-exporter",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/var-exporter.git",
+                "reference": "15776bb07a91b089037da89f8832fa41d5fa6ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/var-exporter/zipball/15776bb07a91b089037da89f8832fa41d5fa6ec6",
+                "reference": "15776bb07a91b089037da89f8832fa41d5fa6ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4"
+            },
+            "require-dev": {
+                "symfony/property-access": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/var-dumper": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\VarExporter\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Allows exporting any serializable PHP data structure to plain PHP code",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "clone",
+                "construct",
+                "export",
+                "hydrate",
+                "instantiate",
+                "lazy-loading",
+                "proxy",
+                "serialize"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/var-exporter/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "symfony/yaml",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/yaml.git",
+                "reference": "54174ab48c0c0f9e21512b304be17f8150ccf8f1"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/yaml/zipball/54174ab48c0c0f9e21512b304be17f8150ccf8f1",
+                "reference": "54174ab48c0c0f9e21512b304be17f8150ccf8f1",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "^1.8"
+            },
+            "conflict": {
+                "symfony/console": "<7.4"
+            },
+            "require-dev": {
+                "symfony/console": "^7.4|^8.0"
+            },
+            "bin": [
+                "Resources/bin/yaml-lint"
+            ],
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\Yaml\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Loads and dumps YAML files",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/yaml/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
+        {
+            "name": "twig/twig",
+            "version": "v3.24.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/twigphp/Twig.git",
+                "reference": "a6769aefb305efef849dc25c9fd1653358c148f0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/twigphp/Twig/zipball/a6769aefb305efef849dc25c9fd1653358c148f0",
+                "reference": "a6769aefb305efef849dc25c9fd1653358c148f0",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1.0",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-mbstring": "^1.3"
+            },
+            "require-dev": {
+                "php-cs-fixer/shim": "^3.0@stable",
+                "phpstan/phpstan": "^2.0@stable",
+                "psr/container": "^1.0|^2.0",
+                "symfony/phpunit-bridge": "^5.4.9|^6.4|^7.0"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/Resources/core.php",
+                    "src/Resources/debug.php",
+                    "src/Resources/escaper.php",
+                    "src/Resources/string_loader.php"
+                ],
+                "psr-4": {
+                    "Twig\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com",
+                    "homepage": "http://fabien.potencier.org",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Twig Team",
+                    "role": "Contributors"
+                },
+                {
+                    "name": "Armin Ronacher",
+                    "email": "armin.ronacher@active-4.com",
+                    "role": "Project Founder"
+                }
+            ],
+            "description": "Twig, the flexible, fast, and secure template language for PHP",
+            "homepage": "https://twig.symfony.com",
+            "keywords": [
+                "templating"
+            ],
+            "support": {
+                "issues": "https://github.com/twigphp/Twig/issues",
+                "source": "https://github.com/twigphp/Twig/tree/v3.24.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/twig/twig",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-17T21:31:11+00:00"
+        }
+    ],
+    "packages-dev": [],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": {},
+    "prefer-stable": true,
+    "prefer-lowest": false,
+    "platform": {
+        "php": ">=8.4",
+        "ext-ctype": "*",
+        "ext-iconv": "*"
+    },
+    "platform-dev": {},
+    "plugin-api-version": "2.9.0"
+}
diff --git a/config/bundles.php b/config/bundles.php
new file mode 100644
index 0000000..1bb6da6
--- /dev/null
+++ b/config/bundles.php
@@ -0,0 +1,9 @@
+<?php
+
+return [
+    Symfony\Bundle\FrameworkBundle\FrameworkBundle::class => ['all' => true],
+    Doctrine\Bundle\DoctrineBundle\DoctrineBundle::class => ['all' => true],
+    Doctrine\Bundle\MigrationsBundle\DoctrineMigrationsBundle::class => ['all' => true],
+    Symfony\Bundle\SecurityBundle\SecurityBundle::class => ['all' => true],
+    Symfony\Bundle\TwigBundle\TwigBundle::class => ['all' => true],
+];
diff --git a/config/packages/cache.yaml b/config/packages/cache.yaml
new file mode 100644
index 0000000..6899b72
--- /dev/null
+++ b/config/packages/cache.yaml
@@ -0,0 +1,19 @@
+framework:
+    cache:
+        # Unique name of your app: used to compute stable namespaces for cache keys.
+        #prefix_seed: your_vendor_name/app_name
+
+        # The "app" cache stores to the filesystem by default.
+        # The data in this cache should persist between deploys.
+        # Other options include:
+
+        # Redis
+        #app: cache.adapter.redis
+        #default_redis_provider: redis://localhost
+
+        # APCu (not recommended with heavy random-write workloads as memory fragmentation can cause perf issues)
+        #app: cache.adapter.apcu
+
+        # Namespaced pools use the above "app" backend by default
+        #pools:
+            #my.dedicated.cache: null
diff --git a/config/packages/doctrine.yaml b/config/packages/doctrine.yaml
new file mode 100644
index 0000000..ffb8ee9
--- /dev/null
+++ b/config/packages/doctrine.yaml
@@ -0,0 +1,44 @@
+doctrine:
+    dbal:
+        url: '%env(resolve:DATABASE_URL)%'
+
+        # IMPORTANT: You MUST configure your server version,
+        # either here or in the DATABASE_URL env var (see .env file)
+        #server_version: '16'
+
+        profiling_collect_backtrace: '%kernel.debug%'
+    orm:
+        validate_xml_mapping: true
+        naming_strategy: doctrine.orm.naming_strategy.underscore
+        auto_mapping: true
+        mappings:
+            App:
+                type: attribute
+                is_bundle: false
+                dir: '%kernel.project_dir%/src/Entity'
+                prefix: 'App\Entity'
+                alias: App
+
+when@test:
+    doctrine:
+        dbal:
+            # "TEST_TOKEN" is typically set by ParaTest
+            dbname_suffix: '_test%env(default::TEST_TOKEN)%'
+
+when@prod:
+    doctrine:
+        orm:
+            query_cache_driver:
+                type: pool
+                pool: doctrine.system_cache_pool
+            result_cache_driver:
+                type: pool
+                pool: doctrine.result_cache_pool
+
+    framework:
+        cache:
+            pools:
+                doctrine.result_cache_pool:
+                    adapter: cache.app
+                doctrine.system_cache_pool:
+                    adapter: cache.system
diff --git a/config/packages/doctrine_migrations.yaml b/config/packages/doctrine_migrations.yaml
new file mode 100644
index 0000000..29231d9
--- /dev/null
+++ b/config/packages/doctrine_migrations.yaml
@@ -0,0 +1,6 @@
+doctrine_migrations:
+    migrations_paths:
+        # namespace is arbitrary but should be different from App\Migrations
+        # as migrations classes should NOT be autoloaded
+        'DoctrineMigrations': '%kernel.project_dir%/migrations'
+    enable_profiler: false
diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
new file mode 100644
index 0000000..7e1ee1f
--- /dev/null
+++ b/config/packages/framework.yaml
@@ -0,0 +1,15 @@
+# see https://symfony.com/doc/current/reference/configuration/framework.html
+framework:
+    secret: '%env(APP_SECRET)%'
+
+    # Note that the session will be started ONLY if you read or write from it.
+    session: true
+
+    #esi: true
+    #fragments: true
+
+when@test:
+    framework:
+        test: true
+        session:
+            storage_factory_id: session.storage.factory.mock_file
diff --git a/config/packages/mailer.yaml b/config/packages/mailer.yaml
new file mode 100644
index 0000000..56a650d
--- /dev/null
+++ b/config/packages/mailer.yaml
@@ -0,0 +1,3 @@
+framework:
+    mailer:
+        dsn: '%env(MAILER_DSN)%'
diff --git a/config/packages/messenger.yaml b/config/packages/messenger.yaml
new file mode 100644
index 0000000..19db483
--- /dev/null
+++ b/config/packages/messenger.yaml
@@ -0,0 +1,22 @@
+framework:
+    messenger:
+        # Uncomment this (and the failed transport below) to send failed messages to this transport for later handling.
+        # failure_transport: failed
+
+        transports:
+            # https://symfony.com/doc/current/messenger.html#transport-configuration
+            # async: '%env(MESSENGER_TRANSPORT_DSN)%'
+            # failed: 'doctrine://default?queue_name=failed'
+            sync: 'sync://'
+
+        routing:
+            # Route your messages to the transports
+            # 'App\Message\YourMessage': async
+
+# when@test:
+#    framework:
+#        messenger:
+#            transports:
+#                # replace with your transport name here (e.g., my_transport: 'in-memory://')
+#                # For more Messenger testing tools, see https://github.com/zenstruck/messenger-test
+#                async: 'in-memory://'
diff --git a/config/packages/property_info.yaml b/config/packages/property_info.yaml
new file mode 100644
index 0000000..dd31b9d
--- /dev/null
+++ b/config/packages/property_info.yaml
@@ -0,0 +1,3 @@
+framework:
+    property_info:
+        with_constructor_extractor: true
diff --git a/config/packages/routing.yaml b/config/packages/routing.yaml
new file mode 100644
index 0000000..0f34f87
--- /dev/null
+++ b/config/packages/routing.yaml
@@ -0,0 +1,10 @@
+framework:
+    router:
+        # Configure how to generate URLs in non-HTTP contexts, such as CLI commands.
+        # See https://symfony.com/doc/current/routing.html#generating-urls-in-commands
+        default_uri: '%env(DEFAULT_URI)%'
+
+when@prod:
+    framework:
+        router:
+            strict_requirements: null
diff --git a/config/packages/security.yaml b/config/packages/security.yaml
new file mode 100644
index 0000000..c3b731c
--- /dev/null
+++ b/config/packages/security.yaml
@@ -0,0 +1,45 @@
+security:
+    password_hashers:
+        App\Entity\User:
+            algorithm: bcrypt
+
+    providers:
+        app_user_provider:
+            entity:
+                class: App\Entity\User
+                property: email
+
+    firewalls:
+        dev:
+            pattern: ^/(_profiler|_wdt|assets|build)/
+            security: false
+        main:
+            lazy: true
+            provider: app_user_provider
+            custom_authenticators:
+                - App\Security\JsonLoginAuthenticator
+            logout:
+                path: app_auth_logout
+                invalidate_session: true
+            remember_me:
+                secret: '%kernel.secret%'
+                lifetime: 86400
+                token_provider:
+                    doctrine: true
+
+    access_control:
+        - { path: ^/api/login, roles: PUBLIC_ACCESS }
+        - { path: ^/api/logout, roles: PUBLIC_ACCESS }
+        - { path: ^/api/register, roles: PUBLIC_ACCESS }
+        - { path: ^/api/reset-request, roles: PUBLIC_ACCESS }
+        - { path: ^/api/reset-password, roles: PUBLIC_ACCESS }
+        - { path: ^/api/me, roles: PUBLIC_ACCESS }
+        - { path: ^/api, roles: ROLE_USER }
+        - { path: ^/, roles: PUBLIC_ACCESS }
+
+when@test:
+    security:
+        password_hashers:
+            App\Entity\User:
+                algorithm: auto
+                cost: 4
diff --git a/config/packages/twig.yaml b/config/packages/twig.yaml
new file mode 100644
index 0000000..3f795d9
--- /dev/null
+++ b/config/packages/twig.yaml
@@ -0,0 +1,6 @@
+twig:
+    file_name_pattern: '*.twig'
+
+when@test:
+    twig:
+        strict_variables: true
diff --git a/config/packages/validator.yaml b/config/packages/validator.yaml
new file mode 100644
index 0000000..dd47a6a
--- /dev/null
+++ b/config/packages/validator.yaml
@@ -0,0 +1,11 @@
+framework:
+    validation:
+        # Enables validator auto-mapping support.
+        # For instance, basic validation constraints will be inferred from Doctrine's metadata.
+        #auto_mapping:
+        #    App\Entity\: []
+
+when@test:
+    framework:
+        validation:
+            not_compromised_password: false
diff --git a/config/preload.php b/config/preload.php
new file mode 100644
index 0000000..5ebcdb2
--- /dev/null
+++ b/config/preload.php
@@ -0,0 +1,5 @@
+<?php
+
+if (file_exists(dirname(__DIR__).'/var/cache/prod/App_KernelProdContainer.preload.php')) {
+    require dirname(__DIR__).'/var/cache/prod/App_KernelProdContainer.preload.php';
+}
diff --git a/config/reference.php b/config/reference.php
new file mode 100644
index 0000000..7defcec
--- /dev/null
+++ b/config/reference.php
@@ -0,0 +1,1372 @@
+<?php
+
+// This file is auto-generated and is for apps only. Bundles SHOULD NOT rely on its content.
+
+namespace Symfony\Component\DependencyInjection\Loader\Configurator;
+
+use Symfony\Component\Config\Loader\ParamConfigurator as Param;
+
+/**
+ * This class provides array-shapes for configuring the services and bundles of an application.
+ *
+ * Services declared with the config() method below are autowired and autoconfigured by default.
+ *
+ * This is for apps only. Bundles SHOULD NOT use it.
+ *
+ * Example:
+ *
+ *     ```php
+ *     // config/services.php
+ *     namespace Symfony\Component\DependencyInjection\Loader\Configurator;
+ *
+ *     return App::config([
+ *         'services' => [
+ *             'App\\' => [
+ *                 'resource' => '../src/',
+ *             ],
+ *         ],
+ *     ]);
+ *     ```
+ *
+ * @psalm-type ImportsConfig = list<string|array{
+ *     resource: string,
+ *     type?: string|null,
+ *     ignore_errors?: bool,
+ * }>
+ * @psalm-type ParametersConfig = array<string, scalar|\UnitEnum|array<scalar|\UnitEnum|array<mixed>|Param|null>|Param|null>
+ * @psalm-type ArgumentsType = list<mixed>|array<string, mixed>
+ * @psalm-type CallType = array<string, ArgumentsType>|array{0:string, 1?:ArgumentsType, 2?:bool}|array{method:string, arguments?:ArgumentsType, returns_clone?:bool}
+ * @psalm-type TagsType = list<string|array<string, array<string, mixed>>> // arrays inside the list must have only one element, with the tag name as the key
+ * @psalm-type CallbackType = string|array{0:string|ReferenceConfigurator,1:string}|\Closure|ReferenceConfigurator
+ * @psalm-type DeprecationType = array{package: string, version: string, message?: string}
+ * @psalm-type DefaultsType = array{
+ *     public?: bool,
+ *     tags?: TagsType,
+ *     resource_tags?: TagsType,
+ *     autowire?: bool,
+ *     autoconfigure?: bool,
+ *     bind?: array<string, mixed>,
+ * }
+ * @psalm-type InstanceofType = array{
+ *     shared?: bool,
+ *     lazy?: bool|string,
+ *     public?: bool,
+ *     properties?: array<string, mixed>,
+ *     configurator?: CallbackType,
+ *     calls?: list<CallType>,
+ *     tags?: TagsType,
+ *     resource_tags?: TagsType,
+ *     autowire?: bool,
+ *     bind?: array<string, mixed>,
+ *     constructor?: string,
+ * }
+ * @psalm-type DefinitionType = array{
+ *     class?: string,
+ *     file?: string,
+ *     parent?: string,
+ *     shared?: bool,
+ *     synthetic?: bool,
+ *     lazy?: bool|string,
+ *     public?: bool,
+ *     abstract?: bool,
+ *     deprecated?: DeprecationType,
+ *     factory?: CallbackType,
+ *     configurator?: CallbackType,
+ *     arguments?: ArgumentsType,
+ *     properties?: array<string, mixed>,
+ *     calls?: list<CallType>,
+ *     tags?: TagsType,
+ *     resource_tags?: TagsType,
+ *     decorates?: string,
+ *     decoration_inner_name?: string,
+ *     decoration_priority?: int,
+ *     decoration_on_invalid?: 'exception'|'ignore'|null,
+ *     autowire?: bool,
+ *     autoconfigure?: bool,
+ *     bind?: array<string, mixed>,
+ *     constructor?: string,
+ *     from_callable?: CallbackType,
+ * }
+ * @psalm-type AliasType = string|array{
+ *     alias: string,
+ *     public?: bool,
+ *     deprecated?: DeprecationType,
+ * }
+ * @psalm-type PrototypeType = array{
+ *     resource: string,
+ *     namespace?: string,
+ *     exclude?: string|list<string>,
+ *     parent?: string,
+ *     shared?: bool,
+ *     lazy?: bool|string,
+ *     public?: bool,
+ *     abstract?: bool,
+ *     deprecated?: DeprecationType,
+ *     factory?: CallbackType,
+ *     arguments?: ArgumentsType,
+ *     properties?: array<string, mixed>,
+ *     configurator?: CallbackType,
+ *     calls?: list<CallType>,
+ *     tags?: TagsType,
+ *     resource_tags?: TagsType,
+ *     autowire?: bool,
+ *     autoconfigure?: bool,
+ *     bind?: array<string, mixed>,
+ *     constructor?: string,
+ * }
+ * @psalm-type StackType = array{
+ *     stack: list<DefinitionType|AliasType|PrototypeType|array<class-string, ArgumentsType|null>>,
+ *     public?: bool,
+ *     deprecated?: DeprecationType,
+ * }
+ * @psalm-type ServicesConfig = array{
+ *     _defaults?: DefaultsType,
+ *     _instanceof?: InstanceofType,
+ *     ...<string, DefinitionType|AliasType|PrototypeType|StackType|ArgumentsType|null>
+ * }
+ * @psalm-type ExtensionType = array<string, mixed>
+ * @psalm-type FrameworkConfig = array{
+ *     secret?: scalar|Param|null,
+ *     http_method_override?: bool|Param, // Set true to enable support for the '_method' request parameter to determine the intended HTTP method on POST requests. // Default: false
+ *     allowed_http_method_override?: list<string|Param>|null,
+ *     trust_x_sendfile_type_header?: scalar|Param|null, // Set true to enable support for xsendfile in binary file responses. // Default: "%env(bool:default::SYMFONY_TRUST_X_SENDFILE_TYPE_HEADER)%"
+ *     ide?: scalar|Param|null, // Default: "%env(default::SYMFONY_IDE)%"
+ *     test?: bool|Param,
+ *     default_locale?: scalar|Param|null, // Default: "en"
+ *     set_locale_from_accept_language?: bool|Param, // Whether to use the Accept-Language HTTP header to set the Request locale (only when the "_locale" request attribute is not passed). // Default: false
+ *     set_content_language_from_locale?: bool|Param, // Whether to set the Content-Language HTTP header on the Response using the Request locale. // Default: false
+ *     enabled_locales?: list<scalar|Param|null>,
+ *     trusted_hosts?: list<scalar|Param|null>,
+ *     trusted_proxies?: mixed, // Default: ["%env(default::SYMFONY_TRUSTED_PROXIES)%"]
+ *     trusted_headers?: list<scalar|Param|null>,
+ *     error_controller?: scalar|Param|null, // Default: "error_controller"
+ *     handle_all_throwables?: bool|Param, // HttpKernel will handle all kinds of \Throwable. // Default: true
+ *     csrf_protection?: bool|array{
+ *         enabled?: scalar|Param|null, // Default: null
+ *         stateless_token_ids?: list<scalar|Param|null>,
+ *         check_header?: scalar|Param|null, // Whether to check the CSRF token in a header in addition to a cookie when using stateless protection. // Default: false
+ *         cookie_name?: scalar|Param|null, // The name of the cookie to use when using stateless protection. // Default: "csrf-token"
+ *     },
+ *     form?: bool|array{ // Form configuration
+ *         enabled?: bool|Param, // Default: false
+ *         csrf_protection?: bool|array{
+ *             enabled?: scalar|Param|null, // Default: null
+ *             token_id?: scalar|Param|null, // Default: null
+ *             field_name?: scalar|Param|null, // Default: "_token"
+ *             field_attr?: array<string, scalar|Param|null>,
+ *         },
+ *     },
+ *     http_cache?: bool|array{ // HTTP cache configuration
+ *         enabled?: bool|Param, // Default: false
+ *         debug?: bool|Param, // Default: "%kernel.debug%"
+ *         trace_level?: "none"|"short"|"full"|Param,
+ *         trace_header?: scalar|Param|null,
+ *         default_ttl?: int|Param,
+ *         private_headers?: list<scalar|Param|null>,
+ *         skip_response_headers?: list<scalar|Param|null>,
+ *         allow_reload?: bool|Param,
+ *         allow_revalidate?: bool|Param,
+ *         stale_while_revalidate?: int|Param,
+ *         stale_if_error?: int|Param,
+ *         terminate_on_cache_hit?: bool|Param,
+ *     },
+ *     esi?: bool|array{ // ESI configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ *     ssi?: bool|array{ // SSI configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ *     fragments?: bool|array{ // Fragments configuration
+ *         enabled?: bool|Param, // Default: false
+ *         hinclude_default_template?: scalar|Param|null, // Default: null
+ *         path?: scalar|Param|null, // Default: "/_fragment"
+ *     },
+ *     profiler?: bool|array{ // Profiler configuration
+ *         enabled?: bool|Param, // Default: false
+ *         collect?: bool|Param, // Default: true
+ *         collect_parameter?: scalar|Param|null, // The name of the parameter to use to enable or disable collection on a per request basis. // Default: null
+ *         only_exceptions?: bool|Param, // Default: false
+ *         only_main_requests?: bool|Param, // Default: false
+ *         dsn?: scalar|Param|null, // Default: "file:%kernel.cache_dir%/profiler"
+ *         collect_serializer_data?: true|Param, // Default: true
+ *     },
+ *     workflows?: bool|array{
+ *         enabled?: bool|Param, // Default: false
+ *         workflows?: array<string, array{ // Default: []
+ *             audit_trail?: bool|array{
+ *                 enabled?: bool|Param, // Default: false
+ *             },
+ *             type?: "workflow"|"state_machine"|Param, // Default: "state_machine"
+ *             marking_store?: array{
+ *                 type?: "method"|Param,
+ *                 property?: scalar|Param|null,
+ *                 service?: scalar|Param|null,
+ *             },
+ *             supports?: list<scalar|Param|null>,
+ *             definition_validators?: list<scalar|Param|null>,
+ *             support_strategy?: scalar|Param|null,
+ *             initial_marking?: list<scalar|Param|null>,
+ *             events_to_dispatch?: list<string|Param>|null,
+ *             places?: list<array{ // Default: []
+ *                 name?: scalar|Param|null,
+ *                 metadata?: array<string, mixed>,
+ *             }>,
+ *             transitions?: list<array{ // Default: []
+ *                 name?: string|Param,
+ *                 guard?: string|Param, // An expression to block the transition.
+ *                 from?: list<array{ // Default: []
+ *                     place?: string|Param,
+ *                     weight?: int|Param, // Default: 1
+ *                 }>,
+ *                 to?: list<array{ // Default: []
+ *                     place?: string|Param,
+ *                     weight?: int|Param, // Default: 1
+ *                 }>,
+ *                 weight?: int|Param, // Default: 1
+ *                 metadata?: array<string, mixed>,
+ *             }>,
+ *             metadata?: array<string, mixed>,
+ *         }>,
+ *     },
+ *     router?: bool|array{ // Router configuration
+ *         enabled?: bool|Param, // Default: false
+ *         resource?: scalar|Param|null,
+ *         type?: scalar|Param|null,
+ *         default_uri?: scalar|Param|null, // The default URI used to generate URLs in a non-HTTP context. // Default: null
+ *         http_port?: scalar|Param|null, // Default: 80
+ *         https_port?: scalar|Param|null, // Default: 443
+ *         strict_requirements?: scalar|Param|null, // set to true to throw an exception when a parameter does not match the requirements set to false to disable exceptions when a parameter does not match the requirements (and return null instead) set to null to disable parameter checks against requirements 'true' is the preferred configuration in development mode, while 'false' or 'null' might be preferred in production // Default: true
+ *         utf8?: bool|Param, // Default: true
+ *     },
+ *     session?: bool|array{ // Session configuration
+ *         enabled?: bool|Param, // Default: false
+ *         storage_factory_id?: scalar|Param|null, // Default: "session.storage.factory.native"
+ *         handler_id?: scalar|Param|null, // Defaults to using the native session handler, or to the native *file* session handler if "save_path" is not null.
+ *         name?: scalar|Param|null,
+ *         cookie_lifetime?: scalar|Param|null,
+ *         cookie_path?: scalar|Param|null,
+ *         cookie_domain?: scalar|Param|null,
+ *         cookie_secure?: true|false|"auto"|Param, // Default: "auto"
+ *         cookie_httponly?: bool|Param, // Default: true
+ *         cookie_samesite?: null|"lax"|"strict"|"none"|Param, // Default: "lax"
+ *         use_cookies?: bool|Param,
+ *         gc_divisor?: scalar|Param|null,
+ *         gc_probability?: scalar|Param|null,
+ *         gc_maxlifetime?: scalar|Param|null,
+ *         save_path?: scalar|Param|null, // Defaults to "%kernel.cache_dir%/sessions" if the "handler_id" option is not null.
+ *         metadata_update_threshold?: int|Param, // Seconds to wait between 2 session metadata updates. // Default: 0
+ *     },
+ *     request?: bool|array{ // Request configuration
+ *         enabled?: bool|Param, // Default: false
+ *         formats?: array<string, string|list<scalar|Param|null>>,
+ *     },
+ *     assets?: bool|array{ // Assets configuration
+ *         enabled?: bool|Param, // Default: false
+ *         strict_mode?: bool|Param, // Throw an exception if an entry is missing from the manifest.json. // Default: false
+ *         version_strategy?: scalar|Param|null, // Default: null
+ *         version?: scalar|Param|null, // Default: null
+ *         version_format?: scalar|Param|null, // Default: "%%s?%%s"
+ *         json_manifest_path?: scalar|Param|null, // Default: null
+ *         base_path?: scalar|Param|null, // Default: ""
+ *         base_urls?: list<scalar|Param|null>,
+ *         packages?: array<string, array{ // Default: []
+ *             strict_mode?: bool|Param, // Throw an exception if an entry is missing from the manifest.json. // Default: false
+ *             version_strategy?: scalar|Param|null, // Default: null
+ *             version?: scalar|Param|null,
+ *             version_format?: scalar|Param|null, // Default: null
+ *             json_manifest_path?: scalar|Param|null, // Default: null
+ *             base_path?: scalar|Param|null, // Default: ""
+ *             base_urls?: list<scalar|Param|null>,
+ *         }>,
+ *     },
+ *     asset_mapper?: bool|array{ // Asset Mapper configuration
+ *         enabled?: bool|Param, // Default: false
+ *         paths?: array<string, scalar|Param|null>,
+ *         excluded_patterns?: list<scalar|Param|null>,
+ *         exclude_dotfiles?: bool|Param, // If true, any files starting with "." will be excluded from the asset mapper. // Default: true
+ *         server?: bool|Param, // If true, a "dev server" will return the assets from the public directory (true in "debug" mode only by default). // Default: true
+ *         public_prefix?: scalar|Param|null, // The public path where the assets will be written to (and served from when "server" is true). // Default: "/assets/"
+ *         missing_import_mode?: "strict"|"warn"|"ignore"|Param, // Behavior if an asset cannot be found when imported from JavaScript or CSS files - e.g. "import './non-existent.js'". "strict" means an exception is thrown, "warn" means a warning is logged, "ignore" means the import is left as-is. // Default: "warn"
+ *         extensions?: array<string, scalar|Param|null>,
+ *         importmap_path?: scalar|Param|null, // The path of the importmap.php file. // Default: "%kernel.project_dir%/importmap.php"
+ *         importmap_polyfill?: scalar|Param|null, // The importmap name that will be used to load the polyfill. Set to false to disable. // Default: "es-module-shims"
+ *         importmap_script_attributes?: array<string, scalar|Param|null>,
+ *         vendor_dir?: scalar|Param|null, // The directory to store JavaScript vendors. // Default: "%kernel.project_dir%/assets/vendor"
+ *         precompress?: bool|array{ // Precompress assets with Brotli, Zstandard and gzip.
+ *             enabled?: bool|Param, // Default: false
+ *             formats?: list<scalar|Param|null>,
+ *             extensions?: list<scalar|Param|null>,
+ *         },
+ *     },
+ *     translator?: bool|array{ // Translator configuration
+ *         enabled?: bool|Param, // Default: false
+ *         fallbacks?: list<scalar|Param|null>,
+ *         logging?: bool|Param, // Default: false
+ *         formatter?: scalar|Param|null, // Default: "translator.formatter.default"
+ *         cache_dir?: scalar|Param|null, // Default: "%kernel.cache_dir%/translations"
+ *         default_path?: scalar|Param|null, // The default path used to load translations. // Default: "%kernel.project_dir%/translations"
+ *         paths?: list<scalar|Param|null>,
+ *         pseudo_localization?: bool|array{
+ *             enabled?: bool|Param, // Default: false
+ *             accents?: bool|Param, // Default: true
+ *             expansion_factor?: float|Param, // Default: 1.0
+ *             brackets?: bool|Param, // Default: true
+ *             parse_html?: bool|Param, // Default: false
+ *             localizable_html_attributes?: list<scalar|Param|null>,
+ *         },
+ *         providers?: array<string, array{ // Default: []
+ *             dsn?: scalar|Param|null,
+ *             domains?: list<scalar|Param|null>,
+ *             locales?: list<scalar|Param|null>,
+ *         }>,
+ *         globals?: array<string, string|array{ // Default: []
+ *             value?: mixed,
+ *             message?: string|Param,
+ *             parameters?: array<string, scalar|Param|null>,
+ *             domain?: string|Param,
+ *         }>,
+ *     },
+ *     validation?: bool|array{ // Validation configuration
+ *         enabled?: bool|Param, // Default: true
+ *         enable_attributes?: bool|Param, // Default: true
+ *         static_method?: list<scalar|Param|null>,
+ *         translation_domain?: scalar|Param|null, // Default: "validators"
+ *         email_validation_mode?: "html5"|"html5-allow-no-tld"|"strict"|Param, // Default: "html5"
+ *         mapping?: array{
+ *             paths?: list<scalar|Param|null>,
+ *         },
+ *         not_compromised_password?: bool|array{
+ *             enabled?: bool|Param, // When disabled, compromised passwords will be accepted as valid. // Default: true
+ *             endpoint?: scalar|Param|null, // API endpoint for the NotCompromisedPassword Validator. // Default: null
+ *         },
+ *         disable_translation?: bool|Param, // Default: false
+ *         auto_mapping?: array<string, array{ // Default: []
+ *             services?: list<scalar|Param|null>,
+ *         }>,
+ *     },
+ *     serializer?: bool|array{ // Serializer configuration
+ *         enabled?: bool|Param, // Default: false
+ *         enable_attributes?: bool|Param, // Default: true
+ *         name_converter?: scalar|Param|null,
+ *         circular_reference_handler?: scalar|Param|null,
+ *         max_depth_handler?: scalar|Param|null,
+ *         mapping?: array{
+ *             paths?: list<scalar|Param|null>,
+ *         },
+ *         default_context?: array<string, mixed>,
+ *         named_serializers?: array<string, array{ // Default: []
+ *             name_converter?: scalar|Param|null,
+ *             default_context?: array<string, mixed>,
+ *             include_built_in_normalizers?: bool|Param, // Whether to include the built-in normalizers // Default: true
+ *             include_built_in_encoders?: bool|Param, // Whether to include the built-in encoders // Default: true
+ *         }>,
+ *     },
+ *     property_access?: bool|array{ // Property access configuration
+ *         enabled?: bool|Param, // Default: true
+ *         magic_call?: bool|Param, // Default: false
+ *         magic_get?: bool|Param, // Default: true
+ *         magic_set?: bool|Param, // Default: true
+ *         throw_exception_on_invalid_index?: bool|Param, // Default: false
+ *         throw_exception_on_invalid_property_path?: bool|Param, // Default: true
+ *     },
+ *     type_info?: bool|array{ // Type info configuration
+ *         enabled?: bool|Param, // Default: true
+ *         aliases?: array<string, scalar|Param|null>,
+ *     },
+ *     property_info?: bool|array{ // Property info configuration
+ *         enabled?: bool|Param, // Default: true
+ *         with_constructor_extractor?: bool|Param, // Registers the constructor extractor. // Default: true
+ *     },
+ *     cache?: array{ // Cache configuration
+ *         prefix_seed?: scalar|Param|null, // Used to namespace cache keys when using several apps with the same shared backend. // Default: "_%kernel.project_dir%.%kernel.container_class%"
+ *         app?: scalar|Param|null, // App related cache pools configuration. // Default: "cache.adapter.filesystem"
+ *         system?: scalar|Param|null, // System related cache pools configuration. // Default: "cache.adapter.system"
+ *         directory?: scalar|Param|null, // Default: "%kernel.share_dir%/pools/app"
+ *         default_psr6_provider?: scalar|Param|null,
+ *         default_redis_provider?: scalar|Param|null, // Default: "redis://localhost"
+ *         default_valkey_provider?: scalar|Param|null, // Default: "valkey://localhost"
+ *         default_memcached_provider?: scalar|Param|null, // Default: "memcached://localhost"
+ *         default_doctrine_dbal_provider?: scalar|Param|null, // Default: "database_connection"
+ *         default_pdo_provider?: scalar|Param|null, // Default: null
+ *         pools?: array<string, array{ // Default: []
+ *             adapters?: list<scalar|Param|null>,
+ *             tags?: scalar|Param|null, // Default: null
+ *             public?: bool|Param, // Default: false
+ *             default_lifetime?: scalar|Param|null, // Default lifetime of the pool.
+ *             provider?: scalar|Param|null, // Overwrite the setting from the default provider for this adapter.
+ *             early_expiration_message_bus?: scalar|Param|null,
+ *             clearer?: scalar|Param|null,
+ *         }>,
+ *     },
+ *     php_errors?: array{ // PHP errors handling configuration
+ *         log?: mixed, // Use the application logger instead of the PHP logger for logging PHP errors. // Default: true
+ *         throw?: bool|Param, // Throw PHP errors as \ErrorException instances. // Default: true
+ *     },
+ *     exceptions?: array<string, array{ // Default: []
+ *         log_level?: scalar|Param|null, // The level of log message. Null to let Symfony decide. // Default: null
+ *         status_code?: scalar|Param|null, // The status code of the response. Null or 0 to let Symfony decide. // Default: null
+ *         log_channel?: scalar|Param|null, // The channel of log message. Null to let Symfony decide. // Default: null
+ *     }>,
+ *     web_link?: bool|array{ // Web links configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ *     lock?: bool|string|array{ // Lock configuration
+ *         enabled?: bool|Param, // Default: false
+ *         resources?: array<string, string|list<scalar|Param|null>>,
+ *     },
+ *     semaphore?: bool|string|array{ // Semaphore configuration
+ *         enabled?: bool|Param, // Default: false
+ *         resources?: array<string, scalar|Param|null>,
+ *     },
+ *     messenger?: bool|array{ // Messenger configuration
+ *         enabled?: bool|Param, // Default: true
+ *         routing?: array<string, string|array{ // Default: []
+ *             senders?: list<scalar|Param|null>,
+ *         }>,
+ *         serializer?: array{
+ *             default_serializer?: scalar|Param|null, // Service id to use as the default serializer for the transports. // Default: "messenger.transport.native_php_serializer"
+ *             symfony_serializer?: array{
+ *                 format?: scalar|Param|null, // Serialization format for the messenger.transport.symfony_serializer service (which is not the serializer used by default). // Default: "json"
+ *                 context?: array<string, mixed>,
+ *             },
+ *         },
+ *         transports?: array<string, string|array{ // Default: []
+ *             dsn?: scalar|Param|null,
+ *             serializer?: scalar|Param|null, // Service id of a custom serializer to use. // Default: null
+ *             options?: array<string, mixed>,
+ *             failure_transport?: scalar|Param|null, // Transport name to send failed messages to (after all retries have failed). // Default: null
+ *             retry_strategy?: string|array{
+ *                 service?: scalar|Param|null, // Service id to override the retry strategy entirely. // Default: null
+ *                 max_retries?: int|Param, // Default: 3
+ *                 delay?: int|Param, // Time in ms to delay (or the initial value when multiplier is used). // Default: 1000
+ *                 multiplier?: float|Param, // If greater than 1, delay will grow exponentially for each retry: this delay = (delay * (multiple ^ retries)). // Default: 2
+ *                 max_delay?: int|Param, // Max time in ms that a retry should ever be delayed (0 = infinite). // Default: 0
+ *                 jitter?: float|Param, // Randomness to apply to the delay (between 0 and 1). // Default: 0.1
+ *             },
+ *             rate_limiter?: scalar|Param|null, // Rate limiter name to use when processing messages. // Default: null
+ *         }>,
+ *         failure_transport?: scalar|Param|null, // Transport name to send failed messages to (after all retries have failed). // Default: null
+ *         stop_worker_on_signals?: list<scalar|Param|null>,
+ *         default_bus?: scalar|Param|null, // Default: null
+ *         buses?: array<string, array{ // Default: {"messenger.bus.default":{"default_middleware":{"enabled":true,"allow_no_handlers":false,"allow_no_senders":true},"middleware":[]}}
+ *             default_middleware?: bool|string|array{
+ *                 enabled?: bool|Param, // Default: true
+ *                 allow_no_handlers?: bool|Param, // Default: false
+ *                 allow_no_senders?: bool|Param, // Default: true
+ *             },
+ *             middleware?: list<string|array{ // Default: []
+ *                 id?: scalar|Param|null,
+ *                 arguments?: list<mixed>,
+ *             }>,
+ *         }>,
+ *     },
+ *     scheduler?: bool|array{ // Scheduler configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ *     disallow_search_engine_index?: bool|Param, // Enabled by default when debug is enabled. // Default: true
+ *     http_client?: bool|array{ // HTTP Client configuration
+ *         enabled?: bool|Param, // Default: false
+ *         max_host_connections?: int|Param, // The maximum number of connections to a single host.
+ *         default_options?: array{
+ *             headers?: array<string, mixed>,
+ *             vars?: array<string, mixed>,
+ *             max_redirects?: int|Param, // The maximum number of redirects to follow.
+ *             http_version?: scalar|Param|null, // The default HTTP version, typically 1.1 or 2.0, leave to null for the best version.
+ *             resolve?: array<string, scalar|Param|null>,
+ *             proxy?: scalar|Param|null, // The URL of the proxy to pass requests through or null for automatic detection.
+ *             no_proxy?: scalar|Param|null, // A comma separated list of hosts that do not require a proxy to be reached.
+ *             timeout?: float|Param, // The idle timeout, defaults to the "default_socket_timeout" ini parameter.
+ *             max_duration?: float|Param, // The maximum execution time for the request+response as a whole.
+ *             bindto?: scalar|Param|null, // A network interface name, IP address, a host name or a UNIX socket to bind to.
+ *             verify_peer?: bool|Param, // Indicates if the peer should be verified in a TLS context.
+ *             verify_host?: bool|Param, // Indicates if the host should exist as a certificate common name.
+ *             cafile?: scalar|Param|null, // A certificate authority file.
+ *             capath?: scalar|Param|null, // A directory that contains multiple certificate authority files.
+ *             local_cert?: scalar|Param|null, // A PEM formatted certificate file.
+ *             local_pk?: scalar|Param|null, // A private key file.
+ *             passphrase?: scalar|Param|null, // The passphrase used to encrypt the "local_pk" file.
+ *             ciphers?: scalar|Param|null, // A list of TLS ciphers separated by colons, commas or spaces (e.g. "RC3-SHA:TLS13-AES-128-GCM-SHA256"...)
+ *             peer_fingerprint?: array{ // Associative array: hashing algorithm => hash(es).
+ *                 sha1?: mixed,
+ *                 pin-sha256?: mixed,
+ *                 md5?: mixed,
+ *             },
+ *             crypto_method?: scalar|Param|null, // The minimum version of TLS to accept; must be one of STREAM_CRYPTO_METHOD_TLSv*_CLIENT constants.
+ *             extra?: array<string, mixed>,
+ *             rate_limiter?: scalar|Param|null, // Rate limiter name to use for throttling requests. // Default: null
+ *             caching?: bool|array{ // Caching configuration.
+ *                 enabled?: bool|Param, // Default: false
+ *                 cache_pool?: string|Param, // The taggable cache pool to use for storing the responses. // Default: "cache.http_client"
+ *                 shared?: bool|Param, // Indicates whether the cache is shared (public) or private. // Default: true
+ *                 max_ttl?: int|Param, // The maximum TTL (in seconds) allowed for cached responses. Null means no cap. // Default: null
+ *             },
+ *             retry_failed?: bool|array{
+ *                 enabled?: bool|Param, // Default: false
+ *                 retry_strategy?: scalar|Param|null, // service id to override the retry strategy. // Default: null
+ *                 http_codes?: array<string, array{ // Default: []
+ *                     code?: int|Param,
+ *                     methods?: list<string|Param>,
+ *                 }>,
+ *                 max_retries?: int|Param, // Default: 3
+ *                 delay?: int|Param, // Time in ms to delay (or the initial value when multiplier is used). // Default: 1000
+ *                 multiplier?: float|Param, // If greater than 1, delay will grow exponentially for each retry: delay * (multiple ^ retries). // Default: 2
+ *                 max_delay?: int|Param, // Max time in ms that a retry should ever be delayed (0 = infinite). // Default: 0
+ *                 jitter?: float|Param, // Randomness in percent (between 0 and 1) to apply to the delay. // Default: 0.1
+ *             },
+ *         },
+ *         mock_response_factory?: scalar|Param|null, // The id of the service that should generate mock responses. It should be either an invokable or an iterable.
+ *         scoped_clients?: array<string, string|array{ // Default: []
+ *             scope?: scalar|Param|null, // The regular expression that the request URL must match before adding the other options. When none is provided, the base URI is used instead.
+ *             base_uri?: scalar|Param|null, // The URI to resolve relative URLs, following rules in RFC 3985, section 2.
+ *             auth_basic?: scalar|Param|null, // An HTTP Basic authentication "username:password".
+ *             auth_bearer?: scalar|Param|null, // A token enabling HTTP Bearer authorization.
+ *             auth_ntlm?: scalar|Param|null, // A "username:password" pair to use Microsoft NTLM authentication (requires the cURL extension).
+ *             query?: array<string, scalar|Param|null>,
+ *             headers?: array<string, mixed>,
+ *             max_redirects?: int|Param, // The maximum number of redirects to follow.
+ *             http_version?: scalar|Param|null, // The default HTTP version, typically 1.1 or 2.0, leave to null for the best version.
+ *             resolve?: array<string, scalar|Param|null>,
+ *             proxy?: scalar|Param|null, // The URL of the proxy to pass requests through or null for automatic detection.
+ *             no_proxy?: scalar|Param|null, // A comma separated list of hosts that do not require a proxy to be reached.
+ *             timeout?: float|Param, // The idle timeout, defaults to the "default_socket_timeout" ini parameter.
+ *             max_duration?: float|Param, // The maximum execution time for the request+response as a whole.
+ *             bindto?: scalar|Param|null, // A network interface name, IP address, a host name or a UNIX socket to bind to.
+ *             verify_peer?: bool|Param, // Indicates if the peer should be verified in a TLS context.
+ *             verify_host?: bool|Param, // Indicates if the host should exist as a certificate common name.
+ *             cafile?: scalar|Param|null, // A certificate authority file.
+ *             capath?: scalar|Param|null, // A directory that contains multiple certificate authority files.
+ *             local_cert?: scalar|Param|null, // A PEM formatted certificate file.
+ *             local_pk?: scalar|Param|null, // A private key file.
+ *             passphrase?: scalar|Param|null, // The passphrase used to encrypt the "local_pk" file.
+ *             ciphers?: scalar|Param|null, // A list of TLS ciphers separated by colons, commas or spaces (e.g. "RC3-SHA:TLS13-AES-128-GCM-SHA256"...).
+ *             peer_fingerprint?: array{ // Associative array: hashing algorithm => hash(es).
+ *                 sha1?: mixed,
+ *                 pin-sha256?: mixed,
+ *                 md5?: mixed,
+ *             },
+ *             crypto_method?: scalar|Param|null, // The minimum version of TLS to accept; must be one of STREAM_CRYPTO_METHOD_TLSv*_CLIENT constants.
+ *             extra?: array<string, mixed>,
+ *             rate_limiter?: scalar|Param|null, // Rate limiter name to use for throttling requests. // Default: null
+ *             caching?: bool|array{ // Caching configuration.
+ *                 enabled?: bool|Param, // Default: false
+ *                 cache_pool?: string|Param, // The taggable cache pool to use for storing the responses. // Default: "cache.http_client"
+ *                 shared?: bool|Param, // Indicates whether the cache is shared (public) or private. // Default: true
+ *                 max_ttl?: int|Param, // The maximum TTL (in seconds) allowed for cached responses. Null means no cap. // Default: null
+ *             },
+ *             retry_failed?: bool|array{
+ *                 enabled?: bool|Param, // Default: false
+ *                 retry_strategy?: scalar|Param|null, // service id to override the retry strategy. // Default: null
+ *                 http_codes?: array<string, array{ // Default: []
+ *                     code?: int|Param,
+ *                     methods?: list<string|Param>,
+ *                 }>,
+ *                 max_retries?: int|Param, // Default: 3
+ *                 delay?: int|Param, // Time in ms to delay (or the initial value when multiplier is used). // Default: 1000
+ *                 multiplier?: float|Param, // If greater than 1, delay will grow exponentially for each retry: delay * (multiple ^ retries). // Default: 2
+ *                 max_delay?: int|Param, // Max time in ms that a retry should ever be delayed (0 = infinite). // Default: 0
+ *                 jitter?: float|Param, // Randomness in percent (between 0 and 1) to apply to the delay. // Default: 0.1
+ *             },
+ *         }>,
+ *     },
+ *     mailer?: bool|array{ // Mailer configuration
+ *         enabled?: bool|Param, // Default: true
+ *         message_bus?: scalar|Param|null, // The message bus to use. Defaults to the default bus if the Messenger component is installed. // Default: null
+ *         dsn?: scalar|Param|null, // Default: null
+ *         transports?: array<string, scalar|Param|null>,
+ *         envelope?: array{ // Mailer Envelope configuration
+ *             sender?: scalar|Param|null,
+ *             recipients?: list<scalar|Param|null>,
+ *             allowed_recipients?: list<scalar|Param|null>,
+ *         },
+ *         headers?: array<string, string|array{ // Default: []
+ *             value?: mixed,
+ *         }>,
+ *         dkim_signer?: bool|array{ // DKIM signer configuration
+ *             enabled?: bool|Param, // Default: false
+ *             key?: scalar|Param|null, // Key content, or path to key (in PEM format with the `file://` prefix) // Default: ""
+ *             domain?: scalar|Param|null, // Default: ""
+ *             select?: scalar|Param|null, // Default: ""
+ *             passphrase?: scalar|Param|null, // The private key passphrase // Default: ""
+ *             options?: array<string, mixed>,
+ *         },
+ *         smime_signer?: bool|array{ // S/MIME signer configuration
+ *             enabled?: bool|Param, // Default: false
+ *             key?: scalar|Param|null, // Path to key (in PEM format) // Default: ""
+ *             certificate?: scalar|Param|null, // Path to certificate (in PEM format without the `file://` prefix) // Default: ""
+ *             passphrase?: scalar|Param|null, // The private key passphrase // Default: null
+ *             extra_certificates?: scalar|Param|null, // Default: null
+ *             sign_options?: int|Param, // Default: null
+ *         },
+ *         smime_encrypter?: bool|array{ // S/MIME encrypter configuration
+ *             enabled?: bool|Param, // Default: false
+ *             repository?: scalar|Param|null, // S/MIME certificate repository service. This service shall implement the `Symfony\Component\Mailer\EventListener\SmimeCertificateRepositoryInterface`. // Default: ""
+ *             cipher?: int|Param, // A set of algorithms used to encrypt the message // Default: null
+ *         },
+ *     },
+ *     secrets?: bool|array{
+ *         enabled?: bool|Param, // Default: true
+ *         vault_directory?: scalar|Param|null, // Default: "%kernel.project_dir%/config/secrets/%kernel.runtime_environment%"
+ *         local_dotenv_file?: scalar|Param|null, // Default: "%kernel.project_dir%/.env.%kernel.environment%.local"
+ *         decryption_env_var?: scalar|Param|null, // Default: "base64:default::SYMFONY_DECRYPTION_SECRET"
+ *     },
+ *     notifier?: bool|array{ // Notifier configuration
+ *         enabled?: bool|Param, // Default: false
+ *         message_bus?: scalar|Param|null, // The message bus to use. Defaults to the default bus if the Messenger component is installed. // Default: null
+ *         chatter_transports?: array<string, scalar|Param|null>,
+ *         texter_transports?: array<string, scalar|Param|null>,
+ *         notification_on_failed_messages?: bool|Param, // Default: false
+ *         channel_policy?: array<string, string|list<scalar|Param|null>>,
+ *         admin_recipients?: list<array{ // Default: []
+ *             email?: scalar|Param|null,
+ *             phone?: scalar|Param|null, // Default: ""
+ *         }>,
+ *     },
+ *     rate_limiter?: bool|array{ // Rate limiter configuration
+ *         enabled?: bool|Param, // Default: false
+ *         limiters?: array<string, array{ // Default: []
+ *             lock_factory?: scalar|Param|null, // The service ID of the lock factory used by this limiter (or null to disable locking). // Default: "auto"
+ *             cache_pool?: scalar|Param|null, // The cache pool to use for storing the current limiter state. // Default: "cache.rate_limiter"
+ *             storage_service?: scalar|Param|null, // The service ID of a custom storage implementation, this precedes any configured "cache_pool". // Default: null
+ *             policy?: "fixed_window"|"token_bucket"|"sliding_window"|"compound"|"no_limit"|Param, // The algorithm to be used by this limiter.
+ *             limiters?: list<scalar|Param|null>,
+ *             limit?: int|Param, // The maximum allowed hits in a fixed interval or burst.
+ *             interval?: scalar|Param|null, // Configures the fixed interval if "policy" is set to "fixed_window" or "sliding_window". The value must be a number followed by "second", "minute", "hour", "day", "week" or "month" (or their plural equivalent).
+ *             rate?: array{ // Configures the fill rate if "policy" is set to "token_bucket".
+ *                 interval?: scalar|Param|null, // Configures the rate interval. The value must be a number followed by "second", "minute", "hour", "day", "week" or "month" (or their plural equivalent).
+ *                 amount?: int|Param, // Amount of tokens to add each interval. // Default: 1
+ *             },
+ *         }>,
+ *     },
+ *     uid?: bool|array{ // Uid configuration
+ *         enabled?: bool|Param, // Default: false
+ *         default_uuid_version?: 7|6|4|1|Param, // Default: 7
+ *         name_based_uuid_version?: 5|3|Param, // Default: 5
+ *         name_based_uuid_namespace?: scalar|Param|null,
+ *         time_based_uuid_version?: 7|6|1|Param, // Default: 7
+ *         time_based_uuid_node?: scalar|Param|null,
+ *     },
+ *     html_sanitizer?: bool|array{ // HtmlSanitizer configuration
+ *         enabled?: bool|Param, // Default: false
+ *         sanitizers?: array<string, array{ // Default: []
+ *             allow_safe_elements?: bool|Param, // Allows "safe" elements and attributes. // Default: false
+ *             allow_static_elements?: bool|Param, // Allows all static elements and attributes from the W3C Sanitizer API standard. // Default: false
+ *             allow_elements?: array<string, mixed>,
+ *             block_elements?: list<string|Param>,
+ *             drop_elements?: list<string|Param>,
+ *             allow_attributes?: array<string, mixed>,
+ *             drop_attributes?: array<string, mixed>,
+ *             force_attributes?: array<string, array<string, string|Param>>,
+ *             force_https_urls?: bool|Param, // Transforms URLs using the HTTP scheme to use the HTTPS scheme instead. // Default: false
+ *             allowed_link_schemes?: list<string|Param>,
+ *             allowed_link_hosts?: list<string|Param>|null,
+ *             allow_relative_links?: bool|Param, // Allows relative URLs to be used in links href attributes. // Default: false
+ *             allowed_media_schemes?: list<string|Param>,
+ *             allowed_media_hosts?: list<string|Param>|null,
+ *             allow_relative_medias?: bool|Param, // Allows relative URLs to be used in media source attributes (img, audio, video, ...). // Default: false
+ *             with_attribute_sanitizers?: list<string|Param>,
+ *             without_attribute_sanitizers?: list<string|Param>,
+ *             max_input_length?: int|Param, // The maximum length allowed for the sanitized input. // Default: 0
+ *         }>,
+ *     },
+ *     webhook?: bool|array{ // Webhook configuration
+ *         enabled?: bool|Param, // Default: false
+ *         message_bus?: scalar|Param|null, // The message bus to use. // Default: "messenger.default_bus"
+ *         routing?: array<string, array{ // Default: []
+ *             service?: scalar|Param|null,
+ *             secret?: scalar|Param|null, // Default: ""
+ *         }>,
+ *     },
+ *     remote-event?: bool|array{ // RemoteEvent configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ *     json_streamer?: bool|array{ // JSON streamer configuration
+ *         enabled?: bool|Param, // Default: false
+ *     },
+ * }
+ * @psalm-type DoctrineConfig = array{
+ *     dbal?: array{
+ *         default_connection?: scalar|Param|null,
+ *         types?: array<string, string|array{ // Default: []
+ *             class?: scalar|Param|null,
+ *         }>,
+ *         driver_schemes?: array<string, scalar|Param|null>,
+ *         connections?: array<string, array{ // Default: []
+ *             url?: scalar|Param|null, // A URL with connection information; any parameter value parsed from this string will override explicitly set parameters
+ *             dbname?: scalar|Param|null,
+ *             host?: scalar|Param|null, // Defaults to "localhost" at runtime.
+ *             port?: scalar|Param|null, // Defaults to null at runtime.
+ *             user?: scalar|Param|null, // Defaults to "root" at runtime.
+ *             password?: scalar|Param|null, // Defaults to null at runtime.
+ *             dbname_suffix?: scalar|Param|null, // Adds the given suffix to the configured database name, this option has no effects for the SQLite platform
+ *             application_name?: scalar|Param|null,
+ *             charset?: scalar|Param|null,
+ *             path?: scalar|Param|null,
+ *             memory?: bool|Param,
+ *             unix_socket?: scalar|Param|null, // The unix socket to use for MySQL
+ *             persistent?: bool|Param, // True to use as persistent connection for the ibm_db2 driver
+ *             protocol?: scalar|Param|null, // The protocol to use for the ibm_db2 driver (default to TCPIP if omitted)
+ *             service?: bool|Param, // True to use SERVICE_NAME as connection parameter instead of SID for Oracle
+ *             servicename?: scalar|Param|null, // Overrules dbname parameter if given and used as SERVICE_NAME or SID connection parameter for Oracle depending on the service parameter.
+ *             sessionMode?: scalar|Param|null, // The session mode to use for the oci8 driver
+ *             server?: scalar|Param|null, // The name of a running database server to connect to for SQL Anywhere.
+ *             default_dbname?: scalar|Param|null, // Override the default database (postgres) to connect to for PostgreSQL connexion.
+ *             sslmode?: scalar|Param|null, // Determines whether or with what priority a SSL TCP/IP connection will be negotiated with the server for PostgreSQL.
+ *             sslrootcert?: scalar|Param|null, // The name of a file containing SSL certificate authority (CA) certificate(s). If the file exists, the server's certificate will be verified to be signed by one of these authorities.
+ *             sslcert?: scalar|Param|null, // The path to the SSL client certificate file for PostgreSQL.
+ *             sslkey?: scalar|Param|null, // The path to the SSL client key file for PostgreSQL.
+ *             sslcrl?: scalar|Param|null, // The file name of the SSL certificate revocation list for PostgreSQL.
+ *             pooled?: bool|Param, // True to use a pooled server with the oci8/pdo_oracle driver
+ *             MultipleActiveResultSets?: bool|Param, // Configuring MultipleActiveResultSets for the pdo_sqlsrv driver
+ *             instancename?: scalar|Param|null, // Optional parameter, complete whether to add the INSTANCE_NAME parameter in the connection. It is generally used to connect to an Oracle RAC server to select the name of a particular instance.
+ *             connectstring?: scalar|Param|null, // Complete Easy Connect connection descriptor, see https://docs.oracle.com/database/121/NETAG/naming.htm.When using this option, you will still need to provide the user and password parameters, but the other parameters will no longer be used. Note that when using this parameter, the getHost and getPort methods from Doctrine\DBAL\Connection will no longer function as expected.
+ *             driver?: scalar|Param|null, // Default: "pdo_mysql"
+ *             auto_commit?: bool|Param,
+ *             schema_filter?: scalar|Param|null,
+ *             logging?: bool|Param, // Default: true
+ *             profiling?: bool|Param, // Default: true
+ *             profiling_collect_backtrace?: bool|Param, // Enables collecting backtraces when profiling is enabled // Default: false
+ *             profiling_collect_schema_errors?: bool|Param, // Enables collecting schema errors when profiling is enabled // Default: true
+ *             server_version?: scalar|Param|null,
+ *             idle_connection_ttl?: int|Param, // Default: 600
+ *             driver_class?: scalar|Param|null,
+ *             wrapper_class?: scalar|Param|null,
+ *             keep_replica?: bool|Param,
+ *             options?: array<string, mixed>,
+ *             mapping_types?: array<string, scalar|Param|null>,
+ *             default_table_options?: array<string, scalar|Param|null>,
+ *             schema_manager_factory?: scalar|Param|null, // Default: "doctrine.dbal.default_schema_manager_factory"
+ *             result_cache?: scalar|Param|null,
+ *             replicas?: array<string, array{ // Default: []
+ *                 url?: scalar|Param|null, // A URL with connection information; any parameter value parsed from this string will override explicitly set parameters
+ *                 dbname?: scalar|Param|null,
+ *                 host?: scalar|Param|null, // Defaults to "localhost" at runtime.
+ *                 port?: scalar|Param|null, // Defaults to null at runtime.
+ *                 user?: scalar|Param|null, // Defaults to "root" at runtime.
+ *                 password?: scalar|Param|null, // Defaults to null at runtime.
+ *                 dbname_suffix?: scalar|Param|null, // Adds the given suffix to the configured database name, this option has no effects for the SQLite platform
+ *                 application_name?: scalar|Param|null,
+ *                 charset?: scalar|Param|null,
+ *                 path?: scalar|Param|null,
+ *                 memory?: bool|Param,
+ *                 unix_socket?: scalar|Param|null, // The unix socket to use for MySQL
+ *                 persistent?: bool|Param, // True to use as persistent connection for the ibm_db2 driver
+ *                 protocol?: scalar|Param|null, // The protocol to use for the ibm_db2 driver (default to TCPIP if omitted)
+ *                 service?: bool|Param, // True to use SERVICE_NAME as connection parameter instead of SID for Oracle
+ *                 servicename?: scalar|Param|null, // Overrules dbname parameter if given and used as SERVICE_NAME or SID connection parameter for Oracle depending on the service parameter.
+ *                 sessionMode?: scalar|Param|null, // The session mode to use for the oci8 driver
+ *                 server?: scalar|Param|null, // The name of a running database server to connect to for SQL Anywhere.
+ *                 default_dbname?: scalar|Param|null, // Override the default database (postgres) to connect to for PostgreSQL connexion.
+ *                 sslmode?: scalar|Param|null, // Determines whether or with what priority a SSL TCP/IP connection will be negotiated with the server for PostgreSQL.
+ *                 sslrootcert?: scalar|Param|null, // The name of a file containing SSL certificate authority (CA) certificate(s). If the file exists, the server's certificate will be verified to be signed by one of these authorities.
+ *                 sslcert?: scalar|Param|null, // The path to the SSL client certificate file for PostgreSQL.
+ *                 sslkey?: scalar|Param|null, // The path to the SSL client key file for PostgreSQL.
+ *                 sslcrl?: scalar|Param|null, // The file name of the SSL certificate revocation list for PostgreSQL.
+ *                 pooled?: bool|Param, // True to use a pooled server with the oci8/pdo_oracle driver
+ *                 MultipleActiveResultSets?: bool|Param, // Configuring MultipleActiveResultSets for the pdo_sqlsrv driver
+ *                 instancename?: scalar|Param|null, // Optional parameter, complete whether to add the INSTANCE_NAME parameter in the connection. It is generally used to connect to an Oracle RAC server to select the name of a particular instance.
+ *                 connectstring?: scalar|Param|null, // Complete Easy Connect connection descriptor, see https://docs.oracle.com/database/121/NETAG/naming.htm.When using this option, you will still need to provide the user and password parameters, but the other parameters will no longer be used. Note that when using this parameter, the getHost and getPort methods from Doctrine\DBAL\Connection will no longer function as expected.
+ *             }>,
+ *         }>,
+ *     },
+ *     orm?: array{
+ *         default_entity_manager?: scalar|Param|null,
+ *         enable_native_lazy_objects?: bool|Param, // Deprecated: The "enable_native_lazy_objects" option is deprecated and will be removed in DoctrineBundle 4.0, as native lazy objects are now always enabled. // Default: true
+ *         controller_resolver?: bool|array{
+ *             enabled?: bool|Param, // Default: true
+ *             auto_mapping?: bool|Param, // Deprecated: The "doctrine.orm.controller_resolver.auto_mapping.auto_mapping" option is deprecated and will be removed in DoctrineBundle 4.0, as it only accepts `false` since 3.0. // Set to true to enable using route placeholders as lookup criteria when the primary key doesn't match the argument name // Default: false
+ *             evict_cache?: bool|Param, // Set to true to fetch the entity from the database instead of using the cache, if any // Default: false
+ *         },
+ *         entity_managers?: array<string, array{ // Default: []
+ *             query_cache_driver?: string|array{
+ *                 type?: scalar|Param|null, // Default: null
+ *                 id?: scalar|Param|null,
+ *                 pool?: scalar|Param|null,
+ *             },
+ *             metadata_cache_driver?: string|array{
+ *                 type?: scalar|Param|null, // Default: null
+ *                 id?: scalar|Param|null,
+ *                 pool?: scalar|Param|null,
+ *             },
+ *             result_cache_driver?: string|array{
+ *                 type?: scalar|Param|null, // Default: null
+ *                 id?: scalar|Param|null,
+ *                 pool?: scalar|Param|null,
+ *             },
+ *             entity_listeners?: array{
+ *                 entities?: array<string, array{ // Default: []
+ *                     listeners?: array<string, array{ // Default: []
+ *                         events?: list<array{ // Default: []
+ *                             type?: scalar|Param|null,
+ *                             method?: scalar|Param|null, // Default: null
+ *                         }>,
+ *                     }>,
+ *                 }>,
+ *             },
+ *             connection?: scalar|Param|null,
+ *             class_metadata_factory_name?: scalar|Param|null, // Default: "Doctrine\\ORM\\Mapping\\ClassMetadataFactory"
+ *             default_repository_class?: scalar|Param|null, // Default: "Doctrine\\ORM\\EntityRepository"
+ *             auto_mapping?: scalar|Param|null, // Default: false
+ *             naming_strategy?: scalar|Param|null, // Default: "doctrine.orm.naming_strategy.default"
+ *             quote_strategy?: scalar|Param|null, // Default: "doctrine.orm.quote_strategy.default"
+ *             typed_field_mapper?: scalar|Param|null, // Default: "doctrine.orm.typed_field_mapper.default"
+ *             entity_listener_resolver?: scalar|Param|null, // Default: null
+ *             fetch_mode_subselect_batch_size?: scalar|Param|null,
+ *             repository_factory?: scalar|Param|null, // Default: "doctrine.orm.container_repository_factory"
+ *             schema_ignore_classes?: list<scalar|Param|null>,
+ *             validate_xml_mapping?: bool|Param, // Set to "true" to opt-in to the new mapping driver mode that was added in Doctrine ORM 2.14 and will be mandatory in ORM 3.0. See https://github.com/doctrine/orm/pull/6728. // Default: false
+ *             second_level_cache?: array{
+ *                 region_cache_driver?: string|array{
+ *                     type?: scalar|Param|null, // Default: null
+ *                     id?: scalar|Param|null,
+ *                     pool?: scalar|Param|null,
+ *                 },
+ *                 region_lock_lifetime?: scalar|Param|null, // Default: 60
+ *                 log_enabled?: bool|Param, // Default: true
+ *                 region_lifetime?: scalar|Param|null, // Default: 3600
+ *                 enabled?: bool|Param, // Default: true
+ *                 factory?: scalar|Param|null,
+ *                 regions?: array<string, array{ // Default: []
+ *                     cache_driver?: string|array{
+ *                         type?: scalar|Param|null, // Default: null
+ *                         id?: scalar|Param|null,
+ *                         pool?: scalar|Param|null,
+ *                     },
+ *                     lock_path?: scalar|Param|null, // Default: "%kernel.cache_dir%/doctrine/orm/slc/filelock"
+ *                     lock_lifetime?: scalar|Param|null, // Default: 60
+ *                     type?: scalar|Param|null, // Default: "default"
+ *                     lifetime?: scalar|Param|null, // Default: 0
+ *                     service?: scalar|Param|null,
+ *                     name?: scalar|Param|null,
+ *                 }>,
+ *                 loggers?: array<string, array{ // Default: []
+ *                     name?: scalar|Param|null,
+ *                     service?: scalar|Param|null,
+ *                 }>,
+ *             },
+ *             hydrators?: array<string, scalar|Param|null>,
+ *             mappings?: array<string, bool|string|array{ // Default: []
+ *                 mapping?: scalar|Param|null, // Default: true
+ *                 type?: scalar|Param|null,
+ *                 dir?: scalar|Param|null,
+ *                 alias?: scalar|Param|null,
+ *                 prefix?: scalar|Param|null,
+ *                 is_bundle?: bool|Param,
+ *             }>,
+ *             dql?: array{
+ *                 string_functions?: array<string, scalar|Param|null>,
+ *                 numeric_functions?: array<string, scalar|Param|null>,
+ *                 datetime_functions?: array<string, scalar|Param|null>,
+ *             },
+ *             filters?: array<string, string|array{ // Default: []
+ *                 class?: scalar|Param|null,
+ *                 enabled?: bool|Param, // Default: false
+ *                 parameters?: array<string, mixed>,
+ *             }>,
+ *             identity_generation_preferences?: array<string, scalar|Param|null>,
+ *         }>,
+ *         resolve_target_entities?: array<string, scalar|Param|null>,
+ *     },
+ * }
+ * @psalm-type DoctrineMigrationsConfig = array{
+ *     enable_service_migrations?: bool|Param, // Whether to enable fetching migrations from the service container. // Default: false
+ *     migrations_paths?: array<string, scalar|Param|null>,
+ *     services?: array<string, scalar|Param|null>,
+ *     factories?: array<string, scalar|Param|null>,
+ *     storage?: array{ // Storage to use for migration status metadata.
+ *         table_storage?: array{ // The default metadata storage, implemented as a table in the database.
+ *             table_name?: scalar|Param|null, // Default: null
+ *             version_column_name?: scalar|Param|null, // Default: null
+ *             version_column_length?: scalar|Param|null, // Default: null
+ *             executed_at_column_name?: scalar|Param|null, // Default: null
+ *             execution_time_column_name?: scalar|Param|null, // Default: null
+ *         },
+ *     },
+ *     migrations?: list<scalar|Param|null>,
+ *     connection?: scalar|Param|null, // Connection name to use for the migrations database. // Default: null
+ *     em?: scalar|Param|null, // Entity manager name to use for the migrations database (available when doctrine/orm is installed). // Default: null
+ *     all_or_nothing?: scalar|Param|null, // Run all migrations in a transaction. // Default: false
+ *     check_database_platform?: scalar|Param|null, // Adds an extra check in the generated migrations to allow execution only on the same platform as they were initially generated on. // Default: true
+ *     custom_template?: scalar|Param|null, // Custom template path for generated migration classes. // Default: null
+ *     organize_migrations?: scalar|Param|null, // Organize migrations mode. Possible values are: "BY_YEAR", "BY_YEAR_AND_MONTH", false // Default: false
+ *     enable_profiler?: bool|Param, // Whether or not to enable the profiler collector to calculate and visualize migration status. This adds some queries overhead. // Default: false
+ *     transactional?: bool|Param, // Whether or not to wrap migrations in a single transaction. // Default: true
+ * }
+ * @psalm-type SecurityConfig = array{
+ *     access_denied_url?: scalar|Param|null, // Default: null
+ *     session_fixation_strategy?: "none"|"migrate"|"invalidate"|Param, // Default: "migrate"
+ *     expose_security_errors?: \Symfony\Component\Security\Http\Authentication\ExposeSecurityLevel::None|\Symfony\Component\Security\Http\Authentication\ExposeSecurityLevel::AccountStatus|\Symfony\Component\Security\Http\Authentication\ExposeSecurityLevel::All|Param, // Default: "none"
+ *     erase_credentials?: bool|Param, // Default: true
+ *     access_decision_manager?: array{
+ *         strategy?: "affirmative"|"consensus"|"unanimous"|"priority"|Param,
+ *         service?: scalar|Param|null,
+ *         strategy_service?: scalar|Param|null,
+ *         allow_if_all_abstain?: bool|Param, // Default: false
+ *         allow_if_equal_granted_denied?: bool|Param, // Default: true
+ *     },
+ *     password_hashers?: array<string, string|array{ // Default: []
+ *         algorithm?: scalar|Param|null,
+ *         migrate_from?: list<scalar|Param|null>,
+ *         hash_algorithm?: scalar|Param|null, // Name of hashing algorithm for PBKDF2 (i.e. sha256, sha512, etc..) See hash_algos() for a list of supported algorithms. // Default: "sha512"
+ *         key_length?: scalar|Param|null, // Default: 40
+ *         ignore_case?: bool|Param, // Default: false
+ *         encode_as_base64?: bool|Param, // Default: true
+ *         iterations?: scalar|Param|null, // Default: 5000
+ *         cost?: int|Param, // Default: null
+ *         memory_cost?: scalar|Param|null, // Default: null
+ *         time_cost?: scalar|Param|null, // Default: null
+ *         id?: scalar|Param|null,
+ *     }>,
+ *     providers?: array<string, array{ // Default: []
+ *         id?: scalar|Param|null,
+ *         chain?: array{
+ *             providers?: list<scalar|Param|null>,
+ *         },
+ *         entity?: array{
+ *             class?: scalar|Param|null, // The full entity class name of your user class.
+ *             property?: scalar|Param|null, // Default: null
+ *             manager_name?: scalar|Param|null, // Default: null
+ *         },
+ *         memory?: array{
+ *             users?: array<string, array{ // Default: []
+ *                 password?: scalar|Param|null, // Default: null
+ *                 roles?: list<scalar|Param|null>,
+ *             }>,
+ *         },
+ *         ldap?: array{
+ *             service?: scalar|Param|null,
+ *             base_dn?: scalar|Param|null,
+ *             search_dn?: scalar|Param|null, // Default: null
+ *             search_password?: scalar|Param|null, // Default: null
+ *             extra_fields?: list<scalar|Param|null>,
+ *             default_roles?: list<scalar|Param|null>,
+ *             role_fetcher?: scalar|Param|null, // Default: null
+ *             uid_key?: scalar|Param|null, // Default: "sAMAccountName"
+ *             filter?: scalar|Param|null, // Default: "({uid_key}={user_identifier})"
+ *             password_attribute?: scalar|Param|null, // Default: null
+ *         },
+ *     }>,
+ *     firewalls?: array<string, array{ // Default: []
+ *         pattern?: scalar|Param|null,
+ *         host?: scalar|Param|null,
+ *         methods?: list<scalar|Param|null>,
+ *         security?: bool|Param, // Default: true
+ *         user_checker?: scalar|Param|null, // The UserChecker to use when authenticating users in this firewall. // Default: "security.user_checker"
+ *         request_matcher?: scalar|Param|null,
+ *         access_denied_url?: scalar|Param|null,
+ *         access_denied_handler?: scalar|Param|null,
+ *         entry_point?: scalar|Param|null, // An enabled authenticator name or a service id that implements "Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface".
+ *         provider?: scalar|Param|null,
+ *         stateless?: bool|Param, // Default: false
+ *         lazy?: bool|Param, // Default: false
+ *         context?: scalar|Param|null,
+ *         logout?: array{
+ *             enable_csrf?: bool|Param|null, // Default: null
+ *             csrf_token_id?: scalar|Param|null, // Default: "logout"
+ *             csrf_parameter?: scalar|Param|null, // Default: "_csrf_token"
+ *             csrf_token_manager?: scalar|Param|null,
+ *             path?: scalar|Param|null, // Default: "/logout"
+ *             target?: scalar|Param|null, // Default: "/"
+ *             invalidate_session?: bool|Param, // Default: true
+ *             clear_site_data?: list<"*"|"cache"|"cookies"|"storage"|"executionContexts"|Param>,
+ *             delete_cookies?: array<string, array{ // Default: []
+ *                 path?: scalar|Param|null, // Default: null
+ *                 domain?: scalar|Param|null, // Default: null
+ *                 secure?: scalar|Param|null, // Default: false
+ *                 samesite?: scalar|Param|null, // Default: null
+ *                 partitioned?: scalar|Param|null, // Default: false
+ *             }>,
+ *         },
+ *         switch_user?: array{
+ *             provider?: scalar|Param|null,
+ *             parameter?: scalar|Param|null, // Default: "_switch_user"
+ *             role?: scalar|Param|null, // Default: "ROLE_ALLOWED_TO_SWITCH"
+ *             target_route?: scalar|Param|null, // Default: null
+ *         },
+ *         required_badges?: list<scalar|Param|null>,
+ *         custom_authenticators?: list<scalar|Param|null>,
+ *         login_throttling?: array{
+ *             limiter?: scalar|Param|null, // A service id implementing "Symfony\Component\HttpFoundation\RateLimiter\RequestRateLimiterInterface".
+ *             max_attempts?: int|Param, // Default: 5
+ *             interval?: scalar|Param|null, // Default: "1 minute"
+ *             lock_factory?: scalar|Param|null, // The service ID of the lock factory used by the login rate limiter (or null to disable locking). // Default: null
+ *             cache_pool?: string|Param, // The cache pool to use for storing the limiter state // Default: "cache.rate_limiter"
+ *             storage_service?: string|Param, // The service ID of a custom storage implementation, this precedes any configured "cache_pool" // Default: null
+ *         },
+ *         x509?: array{
+ *             provider?: scalar|Param|null,
+ *             user?: scalar|Param|null, // Default: "SSL_CLIENT_S_DN_Email"
+ *             credentials?: scalar|Param|null, // Default: "SSL_CLIENT_S_DN"
+ *             user_identifier?: scalar|Param|null, // Default: "emailAddress"
+ *         },
+ *         remote_user?: array{
+ *             provider?: scalar|Param|null,
+ *             user?: scalar|Param|null, // Default: "REMOTE_USER"
+ *         },
+ *         login_link?: array{
+ *             check_route?: scalar|Param|null, // Route that will validate the login link - e.g. "app_login_link_verify".
+ *             check_post_only?: scalar|Param|null, // If true, only HTTP POST requests to "check_route" will be handled by the authenticator. // Default: false
+ *             signature_properties?: list<scalar|Param|null>,
+ *             lifetime?: int|Param, // The lifetime of the login link in seconds. // Default: 600
+ *             max_uses?: int|Param, // Max number of times a login link can be used - null means unlimited within lifetime. // Default: null
+ *             used_link_cache?: scalar|Param|null, // Cache service id used to expired links of max_uses is set.
+ *             success_handler?: scalar|Param|null, // A service id that implements Symfony\Component\Security\Http\Authentication\AuthenticationSuccessHandlerInterface.
+ *             failure_handler?: scalar|Param|null, // A service id that implements Symfony\Component\Security\Http\Authentication\AuthenticationFailureHandlerInterface.
+ *             provider?: scalar|Param|null, // The user provider to load users from.
+ *             secret?: scalar|Param|null, // Default: "%kernel.secret%"
+ *             always_use_default_target_path?: bool|Param, // Default: false
+ *             default_target_path?: scalar|Param|null, // Default: "/"
+ *             login_path?: scalar|Param|null, // Default: "/login"
+ *             target_path_parameter?: scalar|Param|null, // Default: "_target_path"
+ *             use_referer?: bool|Param, // Default: false
+ *             failure_path?: scalar|Param|null, // Default: null
+ *             failure_forward?: bool|Param, // Default: false
+ *             failure_path_parameter?: scalar|Param|null, // Default: "_failure_path"
+ *         },
+ *         form_login?: array{
+ *             provider?: scalar|Param|null,
+ *             remember_me?: bool|Param, // Default: true
+ *             success_handler?: scalar|Param|null,
+ *             failure_handler?: scalar|Param|null,
+ *             check_path?: scalar|Param|null, // Default: "/login_check"
+ *             use_forward?: bool|Param, // Default: false
+ *             login_path?: scalar|Param|null, // Default: "/login"
+ *             username_parameter?: scalar|Param|null, // Default: "_username"
+ *             password_parameter?: scalar|Param|null, // Default: "_password"
+ *             csrf_parameter?: scalar|Param|null, // Default: "_csrf_token"
+ *             csrf_token_id?: scalar|Param|null, // Default: "authenticate"
+ *             enable_csrf?: bool|Param, // Default: false
+ *             post_only?: bool|Param, // Default: true
+ *             form_only?: bool|Param, // Default: false
+ *             always_use_default_target_path?: bool|Param, // Default: false
+ *             default_target_path?: scalar|Param|null, // Default: "/"
+ *             target_path_parameter?: scalar|Param|null, // Default: "_target_path"
+ *             use_referer?: bool|Param, // Default: false
+ *             failure_path?: scalar|Param|null, // Default: null
+ *             failure_forward?: bool|Param, // Default: false
+ *             failure_path_parameter?: scalar|Param|null, // Default: "_failure_path"
+ *         },
+ *         form_login_ldap?: array{
+ *             provider?: scalar|Param|null,
+ *             remember_me?: bool|Param, // Default: true
+ *             success_handler?: scalar|Param|null,
+ *             failure_handler?: scalar|Param|null,
+ *             check_path?: scalar|Param|null, // Default: "/login_check"
+ *             use_forward?: bool|Param, // Default: false
+ *             login_path?: scalar|Param|null, // Default: "/login"
+ *             username_parameter?: scalar|Param|null, // Default: "_username"
+ *             password_parameter?: scalar|Param|null, // Default: "_password"
+ *             csrf_parameter?: scalar|Param|null, // Default: "_csrf_token"
+ *             csrf_token_id?: scalar|Param|null, // Default: "authenticate"
+ *             enable_csrf?: bool|Param, // Default: false
+ *             post_only?: bool|Param, // Default: true
+ *             form_only?: bool|Param, // Default: false
+ *             always_use_default_target_path?: bool|Param, // Default: false
+ *             default_target_path?: scalar|Param|null, // Default: "/"
+ *             target_path_parameter?: scalar|Param|null, // Default: "_target_path"
+ *             use_referer?: bool|Param, // Default: false
+ *             failure_path?: scalar|Param|null, // Default: null
+ *             failure_forward?: bool|Param, // Default: false
+ *             failure_path_parameter?: scalar|Param|null, // Default: "_failure_path"
+ *             service?: scalar|Param|null, // Default: "ldap"
+ *             dn_string?: scalar|Param|null, // Default: "{user_identifier}"
+ *             query_string?: scalar|Param|null,
+ *             search_dn?: scalar|Param|null, // Default: ""
+ *             search_password?: scalar|Param|null, // Default: ""
+ *         },
+ *         json_login?: array{
+ *             provider?: scalar|Param|null,
+ *             remember_me?: bool|Param, // Default: true
+ *             success_handler?: scalar|Param|null,
+ *             failure_handler?: scalar|Param|null,
+ *             check_path?: scalar|Param|null, // Default: "/login_check"
+ *             use_forward?: bool|Param, // Default: false
+ *             login_path?: scalar|Param|null, // Default: "/login"
+ *             username_path?: scalar|Param|null, // Default: "username"
+ *             password_path?: scalar|Param|null, // Default: "password"
+ *         },
+ *         json_login_ldap?: array{
+ *             provider?: scalar|Param|null,
+ *             remember_me?: bool|Param, // Default: true
+ *             success_handler?: scalar|Param|null,
+ *             failure_handler?: scalar|Param|null,
+ *             check_path?: scalar|Param|null, // Default: "/login_check"
+ *             use_forward?: bool|Param, // Default: false
+ *             login_path?: scalar|Param|null, // Default: "/login"
+ *             username_path?: scalar|Param|null, // Default: "username"
+ *             password_path?: scalar|Param|null, // Default: "password"
+ *             service?: scalar|Param|null, // Default: "ldap"
+ *             dn_string?: scalar|Param|null, // Default: "{user_identifier}"
+ *             query_string?: scalar|Param|null,
+ *             search_dn?: scalar|Param|null, // Default: ""
+ *             search_password?: scalar|Param|null, // Default: ""
+ *         },
+ *         access_token?: array{
+ *             provider?: scalar|Param|null,
+ *             remember_me?: bool|Param, // Default: true
+ *             success_handler?: scalar|Param|null,
+ *             failure_handler?: scalar|Param|null,
+ *             realm?: scalar|Param|null, // Default: null
+ *             token_extractors?: list<scalar|Param|null>,
+ *             token_handler?: string|array{
+ *                 id?: scalar|Param|null,
+ *                 oidc_user_info?: string|array{
+ *                     base_uri?: scalar|Param|null, // Base URI of the userinfo endpoint on the OIDC server, or the OIDC server URI to use the discovery (require "discovery" to be configured).
+ *                     discovery?: array{ // Enable the OIDC discovery.
+ *                         cache?: array{
+ *                             id?: scalar|Param|null, // Cache service id to use to cache the OIDC discovery configuration.
+ *                         },
+ *                     },
+ *                     claim?: scalar|Param|null, // Claim which contains the user identifier (e.g. sub, email, etc.). // Default: "sub"
+ *                     client?: scalar|Param|null, // HttpClient service id to use to call the OIDC server.
+ *                 },
+ *                 oidc?: array{
+ *                     discovery?: array{ // Enable the OIDC discovery.
+ *                         base_uri?: list<scalar|Param|null>,
+ *                         cache?: array{
+ *                             id?: scalar|Param|null, // Cache service id to use to cache the OIDC discovery configuration.
+ *                         },
+ *                     },
+ *                     claim?: scalar|Param|null, // Claim which contains the user identifier (e.g.: sub, email..). // Default: "sub"
+ *                     audience?: scalar|Param|null, // Audience set in the token, for validation purpose.
+ *                     issuers?: list<scalar|Param|null>,
+ *                     algorithms?: list<scalar|Param|null>,
+ *                     keyset?: scalar|Param|null, // JSON-encoded JWKSet used to sign the token (must contain a list of valid public keys).
+ *                     encryption?: bool|array{
+ *                         enabled?: bool|Param, // Default: false
+ *                         enforce?: bool|Param, // When enabled, the token shall be encrypted. // Default: false
+ *                         algorithms?: list<scalar|Param|null>,
+ *                         keyset?: scalar|Param|null, // JSON-encoded JWKSet used to decrypt the token (must contain a list of valid private keys).
+ *                     },
+ *                 },
+ *                 cas?: array{
+ *                     validation_url?: scalar|Param|null, // CAS server validation URL
+ *                     prefix?: scalar|Param|null, // CAS prefix // Default: "cas"
+ *                     http_client?: scalar|Param|null, // HTTP Client service // Default: null
+ *                 },
+ *                 oauth2?: scalar|Param|null,
+ *             },
+ *         },
+ *         http_basic?: array{
+ *             provider?: scalar|Param|null,
+ *             realm?: scalar|Param|null, // Default: "Secured Area"
+ *         },
+ *         http_basic_ldap?: array{
+ *             provider?: scalar|Param|null,
+ *             realm?: scalar|Param|null, // Default: "Secured Area"
+ *             service?: scalar|Param|null, // Default: "ldap"
+ *             dn_string?: scalar|Param|null, // Default: "{user_identifier}"
+ *             query_string?: scalar|Param|null,
+ *             search_dn?: scalar|Param|null, // Default: ""
+ *             search_password?: scalar|Param|null, // Default: ""
+ *         },
+ *         remember_me?: array{
+ *             secret?: scalar|Param|null, // Default: "%kernel.secret%"
+ *             service?: scalar|Param|null,
+ *             user_providers?: list<scalar|Param|null>,
+ *             catch_exceptions?: bool|Param, // Default: true
+ *             signature_properties?: list<scalar|Param|null>,
+ *             token_provider?: string|array{
+ *                 service?: scalar|Param|null, // The service ID of a custom remember-me token provider.
+ *                 doctrine?: bool|array{
+ *                     enabled?: bool|Param, // Default: false
+ *                     connection?: scalar|Param|null, // Default: null
+ *                 },
+ *             },
+ *             token_verifier?: scalar|Param|null, // The service ID of a custom rememberme token verifier.
+ *             name?: scalar|Param|null, // Default: "REMEMBERME"
+ *             lifetime?: int|Param, // Default: 31536000
+ *             path?: scalar|Param|null, // Default: "/"
+ *             domain?: scalar|Param|null, // Default: null
+ *             secure?: true|false|"auto"|Param, // Default: false
+ *             httponly?: bool|Param, // Default: true
+ *             samesite?: null|"lax"|"strict"|"none"|Param, // Default: null
+ *             always_remember_me?: bool|Param, // Default: false
+ *             remember_me_parameter?: scalar|Param|null, // Default: "_remember_me"
+ *         },
+ *     }>,
+ *     access_control?: list<array{ // Default: []
+ *         request_matcher?: scalar|Param|null, // Default: null
+ *         requires_channel?: scalar|Param|null, // Default: null
+ *         path?: scalar|Param|null, // Use the urldecoded format. // Default: null
+ *         host?: scalar|Param|null, // Default: null
+ *         port?: int|Param, // Default: null
+ *         ips?: list<scalar|Param|null>,
+ *         attributes?: array<string, scalar|Param|null>,
+ *         route?: scalar|Param|null, // Default: null
+ *         methods?: list<scalar|Param|null>,
+ *         allow_if?: scalar|Param|null, // Default: null
+ *         roles?: list<scalar|Param|null>,
+ *     }>,
+ *     role_hierarchy?: array<string, string|list<scalar|Param|null>>,
+ * }
+ * @psalm-type TwigConfig = array{
+ *     form_themes?: list<scalar|Param|null>,
+ *     globals?: array<string, array{ // Default: []
+ *         id?: scalar|Param|null,
+ *         type?: scalar|Param|null,
+ *         value?: mixed,
+ *     }>,
+ *     autoescape_service?: scalar|Param|null, // Default: null
+ *     autoescape_service_method?: scalar|Param|null, // Default: null
+ *     cache?: scalar|Param|null, // Default: true
+ *     charset?: scalar|Param|null, // Default: "%kernel.charset%"
+ *     debug?: bool|Param, // Default: "%kernel.debug%"
+ *     strict_variables?: bool|Param, // Default: "%kernel.debug%"
+ *     auto_reload?: scalar|Param|null,
+ *     optimizations?: int|Param,
+ *     default_path?: scalar|Param|null, // The default path used to load templates. // Default: "%kernel.project_dir%/templates"
+ *     file_name_pattern?: list<scalar|Param|null>,
+ *     paths?: array<string, mixed>,
+ *     date?: array{ // The default format options used by the date filter.
+ *         format?: scalar|Param|null, // Default: "F j, Y H:i"
+ *         interval_format?: scalar|Param|null, // Default: "%d days"
+ *         timezone?: scalar|Param|null, // The timezone used when formatting dates, when set to null, the timezone returned by date_default_timezone_get() is used. // Default: null
+ *     },
+ *     number_format?: array{ // The default format options for the number_format filter.
+ *         decimals?: int|Param, // Default: 0
+ *         decimal_point?: scalar|Param|null, // Default: "."
+ *         thousands_separator?: scalar|Param|null, // Default: ","
+ *     },
+ *     mailer?: array{
+ *         html_to_text_converter?: scalar|Param|null, // A service implementing the "Symfony\Component\Mime\HtmlToTextConverter\HtmlToTextConverterInterface". // Default: null
+ *     },
+ * }
+ * @psalm-type ConfigType = array{
+ *     imports?: ImportsConfig,
+ *     parameters?: ParametersConfig,
+ *     services?: ServicesConfig,
+ *     framework?: FrameworkConfig,
+ *     doctrine?: DoctrineConfig,
+ *     doctrine_migrations?: DoctrineMigrationsConfig,
+ *     security?: SecurityConfig,
+ *     twig?: TwigConfig,
+ *     "when@dev"?: array{
+ *         imports?: ImportsConfig,
+ *         parameters?: ParametersConfig,
+ *         services?: ServicesConfig,
+ *         framework?: FrameworkConfig,
+ *         doctrine?: DoctrineConfig,
+ *         doctrine_migrations?: DoctrineMigrationsConfig,
+ *         security?: SecurityConfig,
+ *         twig?: TwigConfig,
+ *     },
+ *     "when@prod"?: array{
+ *         imports?: ImportsConfig,
+ *         parameters?: ParametersConfig,
+ *         services?: ServicesConfig,
+ *         framework?: FrameworkConfig,
+ *         doctrine?: DoctrineConfig,
+ *         doctrine_migrations?: DoctrineMigrationsConfig,
+ *         security?: SecurityConfig,
+ *         twig?: TwigConfig,
+ *     },
+ *     "when@test"?: array{
+ *         imports?: ImportsConfig,
+ *         parameters?: ParametersConfig,
+ *         services?: ServicesConfig,
+ *         framework?: FrameworkConfig,
+ *         doctrine?: DoctrineConfig,
+ *         doctrine_migrations?: DoctrineMigrationsConfig,
+ *         security?: SecurityConfig,
+ *         twig?: TwigConfig,
+ *     },
+ *     ...<string, ExtensionType|array{ // extra keys must follow the when@%env% pattern or match an extension alias
+ *         imports?: ImportsConfig,
+ *         parameters?: ParametersConfig,
+ *         services?: ServicesConfig,
+ *         ...<string, ExtensionType>,
+ *     }>
+ * }
+ */
+final class App
+{
+    /**
+     * @param ConfigType $config
+     *
+     * @psalm-return ConfigType
+     */
+    public static function config(array $config): array
+    {
+        /** @var ConfigType $config */
+        $config = AppReference::config($config);
+
+        return $config;
+    }
+}
+
+namespace Symfony\Component\Routing\Loader\Configurator;
+
+/**
+ * This class provides array-shapes for configuring the routes of an application.
+ *
+ * Example:
+ *
+ *     ```php
+ *     // config/routes.php
+ *     namespace Symfony\Component\Routing\Loader\Configurator;
+ *
+ *     return Routes::config([
+ *         'controllers' => [
+ *             'resource' => 'routing.controllers',
+ *         ],
+ *     ]);
+ *     ```
+ *
+ * @psalm-type RouteConfig = array{
+ *     path: string|array<string,string>,
+ *     controller?: string,
+ *     methods?: string|list<string>,
+ *     requirements?: array<string,string>,
+ *     defaults?: array<string,mixed>,
+ *     options?: array<string,mixed>,
+ *     host?: string|array<string,string>,
+ *     schemes?: string|list<string>,
+ *     condition?: string,
+ *     locale?: string,
+ *     format?: string,
+ *     utf8?: bool,
+ *     stateless?: bool,
+ * }
+ * @psalm-type ImportConfig = array{
+ *     resource: string,
+ *     type?: string,
+ *     exclude?: string|list<string>,
+ *     prefix?: string|array<string,string>,
+ *     name_prefix?: string,
+ *     trailing_slash_on_root?: bool,
+ *     controller?: string,
+ *     methods?: string|list<string>,
+ *     requirements?: array<string,string>,
+ *     defaults?: array<string,mixed>,
+ *     options?: array<string,mixed>,
+ *     host?: string|array<string,string>,
+ *     schemes?: string|list<string>,
+ *     condition?: string,
+ *     locale?: string,
+ *     format?: string,
+ *     utf8?: bool,
+ *     stateless?: bool,
+ * }
+ * @psalm-type AliasConfig = array{
+ *     alias: string,
+ *     deprecated?: array{package:string, version:string, message?:string},
+ * }
+ * @psalm-type RoutesConfig = array{
+ *     "when@dev"?: array<string, RouteConfig|ImportConfig|AliasConfig>,
+ *     "when@prod"?: array<string, RouteConfig|ImportConfig|AliasConfig>,
+ *     "when@test"?: array<string, RouteConfig|ImportConfig|AliasConfig>,
+ *     ...<string, RouteConfig|ImportConfig|AliasConfig>
+ * }
+ */
+final class Routes
+{
+    /**
+     * @param RoutesConfig $config
+     *
+     * @psalm-return RoutesConfig
+     */
+    public static function config(array $config): array
+    {
+        return $config;
+    }
+}
diff --git a/config/routes.yaml b/config/routes.yaml
new file mode 100644
index 0000000..cef258c
--- /dev/null
+++ b/config/routes.yaml
@@ -0,0 +1,11 @@
+# yaml-language-server: $schema=../vendor/symfony/routing/Loader/schema/routing.schema.json
+
+# This file is the entry point to configure the routes of your app.
+# Methods with the #[Route] attribute are automatically imported.
+# See also https://symfony.com/doc/current/routing.html
+
+# To list all registered routes, run the following command:
+#   bin/console debug:router
+
+controllers:
+    resource: routing.controllers
diff --git a/config/routes/framework.yaml b/config/routes/framework.yaml
new file mode 100644
index 0000000..bc1feac
--- /dev/null
+++ b/config/routes/framework.yaml
@@ -0,0 +1,4 @@
+when@dev:
+    _errors:
+        resource: '@FrameworkBundle/Resources/config/routing/errors.php'
+        prefix: /_error
diff --git a/config/routes/security.yaml b/config/routes/security.yaml
new file mode 100644
index 0000000..f853be1
--- /dev/null
+++ b/config/routes/security.yaml
@@ -0,0 +1,3 @@
+_security_logout:
+    resource: security.route_loader.logout
+    type: service
diff --git a/config/services.yaml b/config/services.yaml
new file mode 100644
index 0000000..79b8ce2
--- /dev/null
+++ b/config/services.yaml
@@ -0,0 +1,23 @@
+# yaml-language-server: $schema=../vendor/symfony/dependency-injection/Loader/schema/services.schema.json
+
+# This file is the entry point to configure your own services.
+# Files in the packages/ subdirectory configure your dependencies.
+# See also https://symfony.com/doc/current/service_container/import.html
+
+# Put parameters here that don't need to change on each machine where the app is deployed
+# https://symfony.com/doc/current/best_practices.html#use-parameters-for-application-configuration
+parameters:
+
+services:
+    # default configuration for services in *this* file
+    _defaults:
+        autowire: true      # Automatically injects dependencies in your services.
+        autoconfigure: true # Automatically registers your services as commands, event subscribers, etc.
+
+    # makes classes in src/ available to be used as services
+    # this creates a service per class whose id is the fully-qualified class name
+    App\:
+        resource: '../src/'
+
+    # add more service definitions when explicit configuration is needed
+    # please note that last definitions always *replace* previous ones
diff --git a/deploy.sh b/deploy.sh
new file mode 100755
index 0000000..831a8b0
--- /dev/null
+++ b/deploy.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e
+
+REMOTE="root@miniweb.kuehn.home"
+REMOTE_DIR="/var/www/tracker"
+SSH="ssh -p 30183"
+
+rsync -av \
+  -e "$SSH" \
+  --exclude='.claude/' \
+  --exclude='.superpowers/' \
+  --exclude='.aider*' \
+  --exclude='vendor/' \
+  --exclude='var/' \
+  --exclude='docs/' \
+  --exclude='.env.local' \
+  --exclude='deploy.sh' \
+  --exclude='include/' \
+  --exclude='api.php' \
+  --exclude='index.php' \
+  /srv/http/zieltracker/ $REMOTE:$REMOTE_DIR/
+
+# composer install auf dem Server
+$SSH $REMOTE "cd $REMOTE_DIR && composer install --no-dev --no-interaction --optimize-autoloader 2>&1 | tail -5"
+
+# Cache leeren
+$SSH $REMOTE "cd $REMOTE_DIR && php bin/console cache:clear --env=prod --no-warmup 2>&1"
+
+echo "Deploy fertig."
diff --git a/docs/api.md b/docs/api.md
new file mode 100644
index 0000000..821475b
--- /dev/null
+++ b/docs/api.md
@@ -0,0 +1,102 @@
+# API Reference
+
+All endpoints are under `/api/`. JSON in, JSON out. Auth via session cookie + remember-me.
+
+## Auth
+
+### `POST /api/login`
+```json
+{ "email": "...", "password": "..." }
+```
+Returns `{ ok, email, name }` or `401`.
+
+### `POST /api/logout`
+Invalidates session. Returns `{ ok: true }`.
+
+### `GET /api/me`
+Returns `{ ok, email, id, name }` or `{ ok: false }` (401) if not logged in.
+
+### `PATCH /api/me`
+```json
+{ "name": "Max" }
+```
+Updates display name. Returns `{ ok, name }`.
+
+### `POST /api/register`
+```json
+{ "email": "...", "password": "...", "token": "<invite-token>", "name": "..." }
+```
+Requires a valid pending invite token. Registers + auto-logs in. Returns `{ ok, email, name }`.
+
+### `POST /api/reset-request`
+```json
+{ "email": "..." }
+```
+Sends password reset mail. Always returns `{ ok: true }` (no email enumeration).
+
+### `POST /api/reset-password`
+```json
+{ "selector": "...", "token": "...", "password": "..." }
+```
+
+### `POST /api/change-password`
+```json
+{ "old_password": "...", "new_password": "..." }
+```
+
+---
+
+## Goals
+
+### `GET /api/goals`
+Returns array of goal objects for the authenticated user.
+
+```json
+[{
+  "id": "1",
+  "name": "Liegestütz",
+  "unit": "Stück",
+  "daily": 50,
+  "days": 30,
+  "start": "2026-04-01 00:00:00",
+  "sets": { "2026-04-01": [20, 30], "2026-04-02": [50] }
+}]
+```
+
+`sets` is a JSON object keyed by date (`YYYY-MM-DD`), values are arrays of logged amounts.
+
+### `POST /api/goals`
+```json
+{ "name": "...", "unit": "Stück", "daily": 50, "days": 30, "start": "2026-04-01" }
+```
+
+### `PATCH /api/goals/{id}`
+Partial update — send only fields to change: `name`, `unit`, `daily`, `days`, `sets`.
+
+### `DELETE /api/goals/{id}`
+Deletes goal. Only owner can delete.
+
+---
+
+## Invites
+
+### `POST /api/invite`
+```json
+{ "note": "Max" }
+```
+Creates a 7-day single-use invite token. Returns `{ url: "http://dudi.local/?invite=<token>" }`.
+
+### `GET /api/invites`
+Returns all invites created by the authenticated user.
+
+```json
+[{
+  "url": "http://dudi.local/?invite=...",  // null if used or expired
+  "note": "Max",
+  "status": "pending",  // "pending" | "used" | "expired"
+  "created_at": "...",
+  "expires_at": "...",
+  "used_at": null,
+  "used_by_email": null
+}]
+```
diff --git a/docs/deployment.md b/docs/deployment.md
new file mode 100644
index 0000000..1b85119
--- /dev/null
+++ b/docs/deployment.md
@@ -0,0 +1,69 @@
+# Deployment
+
+## Server: miniweb.kuehn.home
+
+- SSH: `ssh -p 30183 root@miniweb.kuehn.home`
+- App dir: `/var/www/tracker/`
+- Apache DocumentRoot: `/var/www/tracker/public/`
+- Database: MariaDB, DB name `dd`, user `dd`
+- URL: `http://miniweb.kuehn.home/dd/`
+
+## First-time Setup (already done)
+
+```bash
+cd /var/www/tracker
+composer install --no-dev --optimize-autoloader
+# create .env.local with real credentials (see below)
+php bin/console cache:clear --env=prod
+```
+
+### `.env.local` on server
+```
+APP_ENV=prod
+APP_SECRET=<random 32 hex chars>
+DATABASE_URL="mysql://dd:<password>@127.0.0.1:3306/dd?serverVersion=mariadb-8.3.0&charset=utf8mb4"
+APP_URL=http://miniweb.kuehn.home/dd
+DEFAULT_URI=http://miniweb.kuehn.home/dd
+MAILER_DSN=smtp://user:pass@smtp.example.com:587
+MAILER_FROM=noreply@example.com
+```
+
+### Apache VirtualHost (or adjust existing)
+```apache
+<VirtualHost *:80>
+    ServerName miniweb.kuehn.home
+    DocumentRoot /var/www/tracker/public
+    <Directory /var/www/tracker/public>
+        AllowOverride All
+        Require all granted
+    </Directory>
+</VirtualHost>
+```
+
+### Database remember-me table
+```sql
+CREATE TABLE IF NOT EXISTS rememberme_token (
+    series VARCHAR(88) NOT NULL,
+    value VARCHAR(88) NOT NULL,
+    lastUsed DATETIME NOT NULL,
+    class VARCHAR(100) DEFAULT '' NOT NULL,
+    username VARCHAR(200) NOT NULL,
+    PRIMARY KEY (series)
+) DEFAULT CHARACTER SET utf8mb4;
+```
+
+## Deploying Updates
+
+```bash
+bash deploy.sh
+```
+
+This rsync's the project (excluding `vendor/`, `var/`, `.env.local`), runs `composer install --no-dev` and `cache:clear --env=prod` remotely.
+
+## Local Development
+
+- URL: `http://dudi.local/`
+- Apache VirtualHost with DocumentRoot `/srv/http/zieltracker/public`
+- `/etc/hosts`: `127.0.0.1 dudi.local`
+- DB: MariaDB, db `zieltracker`, user `zieltracker`
+- `APP_ENV=dev` (Symfony debug bar active)
diff --git a/docs/structure.md b/docs/structure.md
new file mode 100644
index 0000000..7907ec1
--- /dev/null
+++ b/docs/structure.md
@@ -0,0 +1,66 @@
+# Project Structure
+
+```
+dudi/
+├── bin/
+│   └── console                     # Symfony CLI
+├── config/
+│   ├── packages/
+│   │   ├── doctrine.yaml           # ORM + DBAL config
+│   │   ├── security.yaml           # Firewall, providers, access control
+│   │   ├── mailer.yaml
+│   │   └── ...
+│   └── routes.yaml                 # Auto-discovers #[Route] attributes
+├── migrations/                     # Legacy SQL migrations (pre-Symfony)
+├── public/                         # Apache DocumentRoot
+│   ├── index.php                   # Symfony kernel entry point
+│   ├── .htaccess                   # RewriteRule → index.php
+│   ├── app.js                      # Frontend SPA (vanilla JS)
+│   ├── style.css
+│   └── logo.png
+├── src/
+│   ├── Controller/
+│   │   ├── AppController.php       # Catch-all → renders app.html.twig
+│   │   ├── AuthController.php      # /api/me, /api/register, /api/reset-*, /api/change-password
+│   │   ├── GoalController.php      # /api/goals CRUD
+│   │   └── InviteController.php    # /api/invite, /api/invites
+│   ├── Entity/
+│   │   ├── User.php                # Maps to users table (delight-im/auth compatible schema)
+│   │   ├── Goal.php
+│   │   └── Invite.php
+│   ├── Repository/
+│   │   ├── UserRepository.php      # implements PasswordUpgraderInterface
+│   │   ├── GoalRepository.php
+│   │   └── InviteRepository.php
+│   ├── Security/
+│   │   └── JsonLoginAuthenticator.php  # Handles POST /api/login with JSON body
+│   └── Kernel.php
+├── templates/
+│   └── app.html.twig               # Full SPA shell + all <template> elements
+├── .env                            # Generic defaults (committed)
+├── .env.local                      # Local credentials (gitignored)
+├── deploy.sh                       # rsync + remote composer install + cache:clear
+└── symfony.lock
+```
+
+## Frontend Architecture
+
+The frontend is a single-page app with no build step:
+
+- `public/app.js` — all logic, ~700 lines vanilla JS
+- `templates/app.html.twig` — rendered once server-side; contains all `<template id="tpl-*">` elements
+- JS clones templates with `tpl(id)` helper and fills in dynamic values via `querySelector`
+- No framework, no bundler, no npm
+
+## Database Tables
+
+| Table | Managed by | Purpose |
+|---|---|---|
+| `goals` | Doctrine ORM | User goals with JSON `sets` column |
+| `invites` | Doctrine ORM | Invite tokens |
+| `users` | Doctrine ORM | User accounts (bcrypt passwords) |
+| `rememberme_token` | Symfony Security | 24h remember-me tokens |
+| `users_resets` | Raw SQL in AuthController | Password reset tokens |
+| `users_throttling` | Legacy (delight-im/auth) | Can be removed |
+| `users_confirmations` | Legacy (delight-im/auth) | Can be removed |
+| `schema_migrations` | Legacy | Can be removed |
diff --git a/docs/superpowers/plans/2026-04-17-refactor-collapsible.md b/docs/superpowers/plans/2026-04-17-refactor-collapsible.md
new file mode 100644
index 0000000..a58b2cb
--- /dev/null
+++ b/docs/superpowers/plans/2026-04-17-refactor-collapsible.md
@@ -0,0 +1,562 @@
+# Zieltracker Refactor & Collapsible Cards Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Split index.html into three files, add collapsible cards with compact meta-line, sort by daily completion status, replace 4-block stats with a "Heute" group, and constrain desktop width to 480px.
+
+**Architecture:** Pure HTML/CSS/JS — no build step. Logic stays in `app.js`, styles in `style.css`, HTML skeleton in `index.html`. All changes are in-place; localStorage data format is unchanged.
+
+**Tech Stack:** Vanilla JS (ES5), CSS custom properties, localStorage
+
+---
+
+## File Map
+
+| File | Action | Responsibility |
+|------|--------|---------------|
+| `index.html` | Modify | HTML skeleton only — links to style.css + app.js |
+| `style.css` | Create | All styles including new classes |
+| `app.js` | Create | All logic including new collapse/sort/render |
+
+---
+
+### Task 1: Create style.css
+
+**Files:**
+- Create: `style.css`
+
+- [ ] **Step 1: Create style.css** — extract the full `<style>` block from index.html (lines 12–103) and add new classes at the bottom:
+
+```css
+@import url('https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600&family=DM+Mono:wght@400;500&display=swap');
+:root{--bg:#f5f4f0;--bg2:#fff;--bg3:#f0eeea;--border:rgba(0,0,0,.07);--border2:rgba(0,0,0,.12);--text:#1a1a1a;--text2:#666;--text3:#aaa;--green:#16a34a;--green-bg:rgba(22,163,74,.08);--blue:#2563eb;--blue-bg:rgba(37,99,235,.08);--amber:#d97706;--amber-bg:rgba(217,119,6,.08);--red:#dc2626;--red-bg:rgba(220,38,38,.08);--r:14px;--rs:8px}
+*{box-sizing:border-box;margin:0;padding:0;-webkit-tap-highlight-color:transparent}
+body{font-family:'DM Sans',sans-serif;background:var(--bg);color:var(--text);min-height:100dvh;padding-bottom:80px}
+.main-wrap{max-width:480px;margin:0 auto}
+.hdr{position:sticky;top:0;z-index:100;background:rgba(245,244,240,.92);backdrop-filter:blur(12px);-webkit-backdrop-filter:blur(12px);border-bottom:1px solid var(--border);padding:16px 20px 14px;display:flex;align-items:center;justify-content:space-between}
+.hdr-title{font-size:18px;font-weight:600;letter-spacing:-.3px}
+.hdr-sub{font-size:12px;color:var(--text3);margin-top:1px;font-family:'DM Mono',monospace}
+.hdr-btns{display:flex;gap:8px;align-items:center}
+.btn-add{width:38px;height:38px;border-radius:50%;background:var(--text);color:var(--bg);border:none;cursor:pointer;font-size:22px;display:flex;align-items:center;justify-content:center;font-weight:300;transition:transform .15s}
+.btn-add:active{transform:scale(.92)}
+.btn-menu{width:38px;height:38px;border-radius:50%;background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-size:20px;display:flex;align-items:center;justify-content:center;transition:transform .15s}
+.btn-menu:active{transform:scale(.92)}
+.main{padding:16px 16px 0}
+.sec-lbl{font-size:10px;color:var(--text3);text-transform:uppercase;letter-spacing:.6px;font-family:'DM Mono',monospace;margin-bottom:6px;margin-top:4px;padding:0 2px}
+.empty{text-align:center;padding:60px 20px;color:var(--text3);font-size:14px;line-height:1.8}
+.card{background:var(--bg2);border:1px solid var(--border);border-radius:var(--r);margin-bottom:8px;overflow:hidden}
+.card.done{opacity:.7}
+.card-hdr{padding:14px 16px 12px;display:flex;align-items:center;justify-content:space-between;gap:10px;cursor:pointer;user-select:none}
+.name-wrap{display:flex;align-items:center;gap:6px}
+.goal-name{font-size:16px;font-weight:600;letter-spacing:-.2px}
+.btn-ren{background:none;border:none;color:var(--text3);cursor:pointer;font-size:14px;padding:2px 4px;line-height:1;flex-shrink:0}
+.btn-ren:active{color:var(--blue)}
+.ren-input{font-family:'DM Sans',sans-serif;font-size:16px;font-weight:600;background:var(--bg3);border:1px solid var(--blue);border-radius:6px;color:var(--text);padding:2px 8px;width:100%;letter-spacing:-.2px}
+.ren-input:focus{outline:none}
+.goal-meta{font-size:11px;color:var(--text3);margin-top:3px;font-family:'DM Mono',monospace;line-height:1.5}
+.chevron{font-size:13px;color:var(--text3);margin-left:4px;flex-shrink:0}
+.badge{font-size:10px;font-weight:600;padding:3px 8px;border-radius:99px;white-space:nowrap;flex-shrink:0;letter-spacing:.3px;text-transform:uppercase}
+.b-ok{background:var(--green-bg);color:var(--green)}.b-done{background:var(--green-bg);color:var(--green)}.b-warn{background:var(--amber-bg);color:var(--amber)}.b-danger{background:var(--red-bg);color:var(--red)}.b-buf{background:var(--blue-bg);color:var(--blue)}
+.prog-wrap{padding:0 16px 12px}
+.prog-track{height:4px;background:var(--bg3);border-radius:99px;overflow:hidden}
+.prog-fill{height:100%;border-radius:99px;transition:width .4s ease}
+.prog-row{display:flex;justify-content:space-between;font-size:11px;color:var(--text3);margin-top:5px;font-family:'DM Mono',monospace}
+.heute-stats{padding:0 16px 14px}
+.heute-group{background:var(--bg3);border-radius:var(--rs);padding:8px 8px 6px}
+.heute-lbl{font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;text-align:center;margin-bottom:6px;font-family:'DM Mono',monospace}
+.heute-inner{display:grid;grid-template-columns:1fr 1fr 1fr;gap:5px}
+.stat{background:var(--bg2);border-radius:6px;padding:7px 6px 5px;text-align:center}
+.slbl{font-size:9px;color:var(--text3);margin-bottom:2px}
+.sval{font-size:14px;font-weight:600;font-family:'DM Mono',monospace}
+.sunit{font-size:8px;color:var(--text3)}
+.dots-sec{padding:0 16px 12px}
+.dots-lbl{font-size:11px;color:var(--text3);margin-bottom:6px}
+.dots-wrap{display:flex;gap:3px;flex-wrap:wrap}
+.dot{width:26px;height:26px;border-radius:5px;display:flex;align-items:center;justify-content:center;font-size:8px;font-weight:600;font-family:'DM Mono',monospace;transition:opacity .15s}
+.df{background:var(--bg3);color:var(--text3)}
+.dm{background:rgba(220,38,38,.12);color:var(--red)}
+.dp{background:rgba(217,119,6,.12);color:var(--amber)}
+.dd{background:rgba(22,163,74,.12);color:var(--green)}
+.db{background:rgba(37,99,235,.12);color:var(--blue)}
+.de{cursor:pointer}.de:active{opacity:.6;transform:scale(.9)}.dl{opacity:.6;cursor:default}
+.rt{box-shadow:0 0 0 2px var(--text2)}.ry{box-shadow:0 0 0 2px var(--text3)}.rs{box-shadow:0 0 0 2px var(--blue) !important}
+.legend{display:flex;gap:10px;flex-wrap:wrap;margin-top:8px}
+.leg{display:flex;align-items:center;gap:4px;font-size:10px;color:var(--text3)}
+.ldot{width:8px;height:8px;border-radius:2px}
+.dpanel{margin:0 16px 14px;background:var(--bg3);border-radius:var(--rs);overflow:hidden;border:1px solid var(--border2)}
+.dpanel-hdr{padding:10px 12px;display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid var(--border)}
+.dpanel-title{font-size:13px;font-weight:600}
+.dpanel-sub{font-size:11px;color:var(--text2);font-family:'DM Mono',monospace}
+.dpanel-body{padding:10px 12px}
+.set-row{display:flex;align-items:center;justify-content:space-between;padding:5px 0;border-bottom:1px solid var(--border);font-size:13px}
+.set-row:last-of-type{border-bottom:none}
+.stime{font-size:10px;color:var(--text3);font-family:'DM Mono',monospace;margin-right:4px}
+.sdel{background:none;border:none;color:var(--text3);cursor:pointer;font-size:16px;padding:2px 6px;border-radius:4px}
+.sdel:active{color:var(--red)}
+.add-row{display:flex;gap:8px;align-items:center;margin-top:10px}
+.num-in{font-family:'DM Mono',monospace;font-size:15px;padding:8px 10px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg2);color:var(--text);width:90px;text-align:center}
+.num-in:focus{outline:none;border-color:var(--blue)}
+.ulbl{font-size:12px;color:var(--text3)}
+.btn-as{flex:1;padding:8px;border-radius:var(--rs);background:var(--blue-bg);color:var(--blue);border:1px solid rgba(37,99,235,.2);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:13px;font-weight:600}
+.btn-as:active{opacity:.7}
+.nosets{font-size:12px;color:var(--text3);padding:4px 0 8px}
+.card-foot{padding:8px 16px 12px;display:flex;justify-content:flex-end}
+.btn-del{background:none;border:none;color:var(--text3);font-size:12px;cursor:pointer;padding:4px 0;font-family:'DM Sans',sans-serif}
+.btn-del:active{color:var(--red)}
+.ov{position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);display:flex;align-items:flex-end;animation:fi .2s ease}
+@keyframes fi{from{opacity:0}to{opacity:1}}
+.sheet{width:100%;background:var(--bg2);border-radius:20px 20px 0 0;border:1px solid var(--border2);padding:20px 20px 40px;animation:su .25s ease;max-height:90dvh;overflow-y:auto}
+@keyframes su{from{transform:translateY(100%)}to{transform:translateY(0)}}
+.shandle{width:36px;height:4px;border-radius:2px;background:var(--border2);margin:0 auto 20px}
+.stitle{font-size:17px;font-weight:600;margin-bottom:4px}
+.ssub{font-size:12px;color:var(--text3);margin-bottom:16px}
+.fgrid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
+.ff{margin-bottom:10px}
+.ff label{font-size:11px;color:var(--text3);display:block;margin-bottom:4px;text-transform:uppercase;letter-spacing:.5px}
+.fi{width:100%;font-family:'DM Sans',sans-serif;font-size:15px;padding:10px 12px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg3);color:var(--text)}
+.fi:focus{outline:none;border-color:var(--blue)}
+.factions{display:flex;gap:8px;margin-top:16px}
+.btn-p{flex:1;padding:13px;border-radius:var(--rs);background:var(--text);color:var(--bg);border:none;cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px;font-weight:600}
+.btn-p:active{opacity:.8}
+.btn-c{padding:13px 20px;border-radius:var(--rs);background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px}
+.dbtn{width:100%;padding:13px 16px;border-radius:var(--rs);background:var(--bg3);border:1px solid var(--border);color:var(--text);font-family:'DM Sans',sans-serif;font-size:15px;text-align:left;cursor:pointer;margin-bottom:8px;display:flex;align-items:center;gap:12px}
+.dbtn:active{background:var(--border2)}
+.dico{font-size:18px;width:24px;text-align:center;flex-shrink:0}
+.dlbl{flex:1}.dsub{font-size:11px;color:var(--text3);display:block;margin-top:1px}
+.ddanger{color:var(--red)}
+.ddiv{height:1px;background:var(--border);margin:12px 0}
+.hint{margin:0 16px 12px;background:var(--blue-bg);border:1px solid rgba(37,99,235,.15);border-radius:var(--rs);padding:10px 12px;font-size:12px;color:var(--blue);line-height:1.5;display:flex;justify-content:space-between;align-items:center;gap:8px}
+.hclose{background:none;border:none;color:var(--blue);cursor:pointer;font-size:16px;padding:0 2px}
+```
+
+- [ ] **Step 2: Verify file exists**
+```bash
+ls -la /srv/http/zieltracker/style.css
+```
+Expected: file exists, ~4KB
+
+---
+
+### Task 2: Create app.js
+
+**Files:**
+- Create: `app.js`
+
+- [ ] **Step 1: Create app.js** with the full logic — extracted from index.html plus all new functionality:
+
+```js
+var TODAY = new Date(); TODAY.setHours(0,0,0,0);
+var goals, prefs, selDay={}, addAmt={}, renamingId=null, renameVal='', collapsed={};
+
+function load(k,def){ try{ return JSON.parse(localStorage.getItem(k)||def); }catch(e){ return JSON.parse(def); } }
+function save(){ localStorage.setItem('zt_g',JSON.stringify(goals)); }
+function saveP(){ localStorage.setItem('zt_p',JSON.stringify(prefs)); }
+goals = load('zt_g','[]');
+prefs = load('zt_p','{}');
+
+function tOff(g){ return Math.round((TODAY - new Date(g.start))/86400000); }
+function o2d(g,i){ var d=new Date(new Date(g.start).getTime()+i*86400000); d.setHours(0,0,0,0); return d; }
+function dTot(g,o){ return (g.sets[String(o)]||[]).reduce(function(a,b){return a+b.amount;},0); }
+function fd(d){ return d.toLocaleDateString('de-DE',{weekday:'short',day:'numeric',month:'short'}); }
+function fs(d){ return d.toLocaleDateString('de-DE',{day:'numeric',month:'short'}); }
+function editable(g,o){ var t=tOff(g); return o===t||o===t-1; }
+function now(){ var n=new Date(); return String(n.getHours()).padStart(2,'0')+':'+String(n.getMinutes()).padStart(2,'0'); }
+
+// Returns CSS color for heute: X/Y display
+function heuteColor(tdone, daily){
+  if(tdone===0) return 'var(--red)';
+  if(tdone>=daily*1.1) return 'var(--blue)';
+  if(tdone>=daily) return 'var(--green)';
+  return 'var(--amber)';
+}
+
+// collapsed defaults to true — only false when explicitly opened
+function isCollapsed(id){ return collapsed[id]!==false; }
+function toggleCollapse(id){ collapsed[id]=!isCollapsed(id); render(); }
+
+function calc(g){
+  var t=tOff(g), tot=g.daily*g.days;
+  var dr=Math.max(0,g.days-t-1);
+  var sd=new Date(g.start); sd.setHours(0,0,0,0);
+  var end=new Date(sd.getTime()+g.days*86400000);
+  var past=0;
+  for(var i=0;i<Math.min(t,g.days);i++) past+=dTot(g,i);
+  var tdone=dTot(g,t), tot2=past+tdone;
+  var dl=dr+1;
+  var remaining=Math.max(0,tot-past);
+  var pd=Math.ceil(remaining/Math.max(1,dl));
+  var st=Math.max(0,pd-tdone);
+  var expectedPast=Math.min(t,g.days)*g.daily;
+  var buf=(past-expectedPast)+Math.max(0,tdone-g.daily);
+  var deficit=Math.min(0,buf);
+  var surplus=Math.max(0,buf);
+  var dailyDelta=pd-g.daily;
+  var pct=Math.min(100,Math.round((tot2/tot)*100));
+  return{tot:tot,tOff:t,end:end,dr:dr,done:tot2,tdone:tdone,pd:pd,st:st,buf:buf,deficit:deficit,surplus:surplus,dailyDelta:dailyDelta,net:tdone-pd,pct:pct,ok:tdone>=pd};
+}
+
+function dcls(g,i){
+  var t=tOff(g); if(i>t) return 'dot df';
+  var v=dTot(g,i);
+  var c=v===0?'dot dm':v>=g.daily*1.1?'dot db':v>=g.daily?'dot dd':'dot dp';
+  return c+(editable(g,i)?' de':' dl');
+}
+function dlbl(g,i){
+  var t=tOff(g); if(i>t) return String(i+1);
+  var v=dTot(g,i);
+  if(v===0) return '✕'; if(v>=g.daily*1.1) return '+'; if(v>=g.daily) return '✓';
+  return Math.round(v/g.daily*100)+'%';
+}
+
+function addSet(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  var k=gid+'_'+off, amt=parseInt(addAmt[k]||'0',10);
+  if(amt<=0) return;
+  if(!g.sets[String(off)]) g.sets[String(off)]=[];
+  g.sets[String(off)].push({amount:amt,time:off===tOff(g)?now():'—'});
+  addAmt[k]=''; save(); render();
+}
+function remSet(gid,off,idx){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  g.sets[String(off)].splice(idx,1); save(); render();
+}
+function delGoal(id){
+  if(!confirm('Ziel wirklich löschen?')) return;
+  goals=goals.filter(function(g){return g.id!==id;}); save(); render();
+}
+function selD(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  selDay[gid]=selDay[gid]===off?null:off; render();
+}
+function startRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0]; if(!g) return;
+  renamingId=id; renameVal=g.name; render();
+  setTimeout(function(){ var el=document.getElementById('ri'+id); if(el){el.focus();el.select();} },50);
+}
+function commitRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0];
+  if(g&&renameVal.trim()) g.name=renameVal.trim();
+  renamingId=null; save(); render();
+}
+function cancelRen(){ renamingId=null; render(); }
+
+function closeOv(){ var o=document.getElementById('ov'); o.style.display='none'; o.innerHTML=''; }
+function showSheet(html){
+  var o=document.getElementById('ov');
+  o.style.cssText='display:flex;position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);align-items:flex-end;animation:fi .2s ease';
+  o.innerHTML='<div class="sheet">'+html+'</div>';
+  o.onclick=function(e){if(e.target===o)closeOv();};
+}
+
+function openNew(){
+  showSheet(
+    '<div class="shandle"></div>'+
+    '<div class="stitle">Neues Ziel</div>'+
+    '<div class="ff"><label>Übung / Gewohnheit</label><input class="fi" id="fn" type="text" placeholder="Liegestütz, Plank …"/></div>'+
+    '<div class="fgrid">'+
+    '<div class="ff"><label>Einheit</label><input class="fi" id="fu" type="text" value="Stück"/></div>'+
+    '<div class="ff"><label>Tagesziel</label><input class="fi" id="fd" type="number" min="1" value="50"/></div>'+
+    '</div>'+
+    '<div class="ff"><label>Dauer in Tagen</label><input class="fi" id="fdy" type="number" min="7" max="365" value="30"/></div>'+
+    '<div class="factions"><button class="btn-p" id="fsub">Ziel starten</button><button class="btn-c" id="fcan">Abbrechen</button></div>'
+  );
+  document.getElementById('fn').focus();
+  document.getElementById('fsub').onclick=function(){
+    var name=(document.getElementById('fn').value||'').trim();
+    var unit=(document.getElementById('fu').value||'').trim()||'Stück';
+    var daily=parseInt(document.getElementById('fd').value,10)||1;
+    var days=parseInt(document.getElementById('fdy').value,10)||30;
+    if(!name){document.getElementById('fn').focus();return;}
+    goals.push({id:Date.now(),name:name,unit:unit,daily:daily,days:days,start:TODAY.toISOString(),sets:{}});
+    save(); closeOv(); render();
+  };
+  document.getElementById('fcan').onclick=closeOv;
+}
+
+function openData(){
+  showSheet(
+    '<div class="shandle"></div>'+
+    '<div class="stitle">Daten verwalten</div>'+
+    '<div class="ssub">Export, Import und Backup</div>'+
+    '<button class="dbtn" id="dexp"><span class="dico">⬇</span><span class="dlbl">Exportieren<span class="dsub">Alle Ziele als JSON-Datei speichern</span></span></button>'+
+    '<button class="dbtn" id="dimp"><span class="dico">⬆</span><span class="dlbl">Importieren<span class="dsub">Backup laden oder zusammenführen</span></span></button>'+
+    '<div class="ddiv"></div>'+
+    '<button class="dbtn ddanger" id="dclr"><span class="dico">✕</span><span class="dlbl">Alle Daten löschen<span class="dsub">Kann nicht rückgängig gemacht werden</span></span></button>'+
+    '<button class="btn-c" id="dcls" style="width:100%;margin-top:4px;text-align:center">Schließen</button>'
+  );
+  document.getElementById('dcls').onclick=closeOv;
+  document.getElementById('dexp').onclick=function(){
+    var blob=new Blob([JSON.stringify({goals:goals,at:new Date().toISOString()},null,2)],{type:'application/json'});
+    var url=URL.createObjectURL(blob), a=document.createElement('a');
+    a.href=url; a.download='zieltracker-backup.json'; a.click(); URL.revokeObjectURL(url); closeOv();
+  };
+  document.getElementById('dimp').onclick=function(){
+    var inp=document.createElement('input'); inp.type='file'; inp.accept='.json';
+    inp.onchange=function(e){
+      var f=e.target.files[0]; if(!f) return;
+      var r=new FileReader(); r.onload=function(ev){
+        try{
+          var p=JSON.parse(ev.target.result);
+          if(!p.goals||!Array.isArray(p.goals)) throw new Error('Ungültiges Format');
+          if(!confirm(p.goals.length+' Ziel(e) importieren? Bestehende Daten bleiben erhalten.')) return;
+          var ex={}; goals.forEach(function(g){ex[g.id]=1;});
+          var add=0; p.goals.forEach(function(g){if(!ex[g.id]){goals.push(g);add++;}});
+          save(); closeOv(); render(); alert(add+' Ziel(e) importiert.');
+        }catch(err){alert('Fehler: '+err.message);}
+      }; r.readAsText(f);
+    }; inp.click();
+  };
+  document.getElementById('dclr').onclick=function(){
+    if(!confirm('Alle Daten löschen?')) return;
+    goals=[]; save(); closeOv(); render();
+  };
+}
+
+function panel(g,off){
+  var t=tOff(g), sets=g.sets[String(off)]||[], tot=dTot(g,off);
+  var lbl=off===t?'Heute':'Gestern', k=g.id+'_'+off;
+  var rows='';
+  for(var i=0;i<sets.length;i++){
+    var s=sets[i];
+    rows+='<div class="set-row"><span>'+(s.time!=='—'?'<span class="stime">'+s.time+' ·</span>':'')+' <strong>'+s.amount+'</strong> '+g.unit+'</span>'+
+      '<button class="sdel" data-g="'+g.id+'" data-o="'+off+'" data-i="'+i+'">×</button></div>';
+  }
+  return '<div class="dpanel">'+
+    '<div class="dpanel-hdr"><span class="dpanel-title">'+lbl+' — '+fd(o2d(g,off))+'</span><span class="dpanel-sub">'+tot+' / '+g.daily+' '+g.unit+'</span></div>'+
+    '<div class="dpanel-body">'+
+      (sets.length?rows:'<div class="nosets">Noch kein Eintrag</div>')+
+      '<div class="add-row">'+
+        '<input class="num-in" type="number" min="1" placeholder="'+g.daily+'" value="'+(addAmt[k]||'')+'" data-k="'+k+'" data-g="'+g.id+'" data-o="'+off+'"/>'+
+        '<span class="ulbl">'+g.unit+'</span>'+
+        '<button class="btn-as" data-g="'+g.id+'" data-o="'+off+'">+ Satz</button>'+
+      '</div>'+
+    '</div></div>';
+}
+
+function cardHtml(g){
+  var c=calc(g), t=c.tOff;
+  var fc=c.surplus>0?'var(--blue)':c.st===0?'var(--green)':c.dailyDelta<=0?'var(--green)':c.dailyDelta<=g.daily*.2?'var(--amber)':'var(--red)';
+  var bc,bt;
+  if(c.ok&&c.surplus>0){bc='b-buf';bt='+'+c.surplus+' Puffer';}
+  else if(c.ok){bc='b-done';bt='Heute ✓';}
+  else if(c.dailyDelta<=0){bc='b-ok';bt='Im Plan';}
+  else if(c.dailyDelta<=g.daily*.2){bc='b-warn';bt='Leicht mehr';}
+  else{bc='b-danger';bt='-'+Math.abs(c.deficit)+' Rückstand';}
+
+  var nh=renamingId===g.id
+    ?'<div class="name-wrap"><input class="ren-input" id="ri'+g.id+'" value="'+g.name.replace(/"/g,'&quot;')+'" data-g="'+g.id+'"/></div>'
+    :'<div class="name-wrap"><div class="goal-name">'+g.name+'</div><button class="btn-ren" data-g="'+g.id+'">✎</button></div>';
+
+  var doneCls=c.ok?' done':'';
+
+  if(isCollapsed(g.id)){
+    var hc=heuteColor(c.tdone,g.daily);
+    var metaC='Noch '+c.dr+'T · endet '+fs(c.end)+' · heute: <span style="color:'+hc+'">'+c.tdone+'/'+g.daily+'</span> · total: '+c.done+'/'+c.tot;
+    return '<div class="card'+doneCls+'">'+
+      '<div class="card-hdr" data-g="'+g.id+'">'+
+        '<div style="flex:1;min-width:0">'+nh+'<div class="goal-meta">'+metaC+'</div></div>'+
+        '<span class="badge '+bc+'">'+bt+'</span>'+
+        '<span class="chevron">▸</span>'+
+      '</div>'+
+      '<div style="padding:0 16px 12px"><div class="prog-track"><div class="prog-fill" style="width:'+c.pct+'%;background:'+fc+'"></div></div></div>'+
+    '</div>';
+  }
+
+  // Expanded
+  var sel=selDay[g.id];
+  var dots='';
+  for(var i=0;i<g.days;i++){
+    var it=i===t, iy=i===t-1, is=sel===i, ed=editable(g,i);
+    var cls=dcls(g,i)+(is?' rs':it?' rt':iy&&t>0?' ry':'');
+    dots+='<div class="'+cls+'"'+(ed?' data-g="'+g.id+'" data-d="'+i+'"':'')+'>'+dlbl(g,i)+'</div>';
+  }
+  var nc=heuteColor(c.tdone,g.daily);
+  return '<div class="card'+doneCls+'">'+
+    '<div class="card-hdr" data-g="'+g.id+'">'+
+      '<div style="flex:1;min-width:0">'+nh+'<div class="goal-meta">Noch '+c.dr+'T · endet '+fs(c.end)+'</div></div>'+
+      '<span class="badge '+bc+'">'+bt+'</span>'+
+      '<span class="chevron">▴</span>'+
+    '</div>'+
+    '<div class="prog-wrap"><div class="prog-track"><div class="prog-fill" style="width:'+c.pct+'%;background:'+fc+'"></div></div>'+
+    '<div class="prog-row"><span>'+c.done+' '+g.unit+' gemacht</span><span>'+c.pct+'% von '+c.tot+'</span></div></div>'+
+    '<div class="heute-stats"><div class="heute-group">'+
+      '<div class="heute-lbl">Heute</div>'+
+      '<div class="heute-inner">'+
+        '<div class="stat"><div class="slbl">Gemacht</div><div class="sval">'+c.tdone+'<div class="sunit">'+g.unit+'</div></div></div>'+
+        '<div class="stat"><div class="slbl">Tagesziel</div><div class="sval">'+g.daily+'<div class="sunit">'+g.unit+'</div></div></div>'+
+        '<div class="stat"><div class="slbl">Noch</div><div class="sval" style="color:'+nc+'">'+c.st+'<div class="sunit">'+g.unit+'</div></div></div>'+
+      '</div>'+
+    '</div></div>'+
+    '<div class="dots-sec"><div class="dots-lbl">Verlauf — heute &amp; gestern bearbeitbar</div>'+
+    '<div class="dots-wrap">'+dots+'</div>'+
+    '<div class="legend">'+
+      '<span class="leg"><span class="ldot" style="background:rgba(37,99,235,.3)"></span>Puffer</span>'+
+      '<span class="leg"><span class="ldot" style="background:rgba(22,163,74,.3)"></span>Erreicht</span>'+
+      '<span class="leg"><span class="ldot" style="background:rgba(217,119,6,.3)"></span>Teilweise</span>'+
+      '<span class="leg"><span class="ldot" style="background:rgba(220,38,38,.3)"></span>Verpasst</span>'+
+    '</div></div>'+
+    (sel!=null?panel(g,sel):'')+
+    '<div class="card-foot"><button class="btn-del" data-g="'+g.id+'">Ziel löschen</button></div>'+
+  '</div>';
+}
+
+function render(){
+  var m=document.getElementById('main'), h='';
+  if(!prefs.hd) h+='<div class="hint">Menü → "Zum Startbildschirm" für App-Icon<button class="hclose" id="hc">×</button></div>';
+  if(!goals.length){
+    h+='<div class="empty"><div style="font-size:40px;opacity:.4;margin-bottom:12px">🎯</div>Noch keine Ziele.<br>Tippe auf <strong>+</strong> um zu starten.</div>';
+    m.innerHTML=h; wire(); return;
+  }
+
+  // Sort: open first, done today at bottom
+  var open=[], done=[];
+  for(var gi=0;gi<goals.length;gi++){
+    var g=goals[gi], c=calc(g);
+    if(c.ok) done.push(g); else open.push(g);
+  }
+
+  if(open.length){
+    h+='<div class="sec-lbl">Offen</div>';
+    for(var i=0;i<open.length;i++) h+=cardHtml(open[i]);
+  }
+  if(done.length){
+    h+='<div class="sec-lbl">Heute erledigt</div>';
+    for(var j=0;j<done.length;j++) h+=cardHtml(done[j]);
+  }
+
+  m.innerHTML=h; wire();
+}
+
+function wire(){
+  var hc=document.getElementById('hc');
+  if(hc) hc.onclick=function(){prefs.hd=1;saveP();this.closest('.hint').remove();};
+
+  document.querySelectorAll('.card-hdr[data-g]').forEach(function(el){
+    el.onclick=function(e){
+      if(e.target.classList.contains('btn-ren')||e.target.classList.contains('ren-input')) return;
+      toggleCollapse(parseInt(this.dataset.g,10));
+    };
+  });
+
+  document.querySelectorAll('.btn-ren').forEach(function(b){
+    b.onclick=function(e){e.stopPropagation();startRen(parseInt(this.dataset.g,10));};
+  });
+  document.querySelectorAll('.ren-input').forEach(function(inp){
+    var gid=parseInt(inp.dataset.g,10);
+    inp.oninput=function(){renameVal=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')commitRen(gid);if(e.key==='Escape')cancelRen();};
+    inp.onblur=function(){commitRen(gid);};
+  });
+  document.querySelectorAll('.de').forEach(function(d){
+    d.onclick=function(e){e.stopPropagation();selD(parseInt(this.dataset.g,10),parseInt(this.dataset.d,10));};
+  });
+  document.querySelectorAll('.btn-as').forEach(function(b){
+    b.onclick=function(){addSet(parseInt(this.dataset.g,10),parseInt(this.dataset.o,10));};
+  });
+  document.querySelectorAll('.num-in').forEach(function(inp){
+    var k=inp.dataset.k, g=parseInt(inp.dataset.g,10), o=parseInt(inp.dataset.o,10);
+    inp.oninput=function(){addAmt[k]=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')addSet(g,o);};
+  });
+  document.querySelectorAll('.sdel').forEach(function(b){
+    b.onclick=function(){remSet(parseInt(this.dataset.g,10),parseInt(this.dataset.o,10),parseInt(this.dataset.i,10));};
+  });
+  document.querySelectorAll('.btn-del').forEach(function(b){
+    b.onclick=function(){delGoal(parseInt(this.dataset.g,10));};
+  });
+}
+
+document.getElementById('btnNew').onclick=openNew;
+document.getElementById('btnData').onclick=openData;
+document.getElementById('tlbl').textContent=TODAY.toLocaleDateString('de-DE',{weekday:'long',day:'numeric',month:'long'});
+render();
+
+function scheduleMidnight(){
+  var n=new Date();
+  var ms=new Date(n.getFullYear(),n.getMonth(),n.getDate()+1,0,0,5).getTime()-n.getTime();
+  setTimeout(function(){
+    TODAY=new Date();TODAY.setHours(0,0,0,0);selDay={};collapsed={};
+    document.getElementById('tlbl').textContent=TODAY.toLocaleDateString('de-DE',{weekday:'long',day:'numeric',month:'long'});
+    render();scheduleMidnight();
+  },ms);
+}
+scheduleMidnight();
+document.addEventListener('visibilitychange',function(){
+  if(document.visibilityState==='visible'){
+    var n=new Date();n.setHours(0,0,0,0);
+    if(n.getTime()!==TODAY.getTime()){TODAY=n;selDay={};collapsed={};render();scheduleMidnight();}
+  }
+});
+```
+
+- [ ] **Step 2: Verify file exists**
+```bash
+ls -la /srv/http/zieltracker/app.js
+```
+Expected: file exists, ~8KB
+
+---
+
+### Task 3: Rewrite index.html as clean skeleton
+
+**Files:**
+- Modify: `index.html`
+
+- [ ] **Step 1: Replace index.html** with a clean skeleton that references the new files:
+
+```html
+<!DOCTYPE html>
+<html lang="de">
+<head>
+<meta charset="UTF-8"/>
+<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"/>
+<meta name="theme-color" content="#f5f4f0"/>
+<meta name="mobile-web-app-capable" content="yes"/>
+<meta name="apple-mobile-web-app-capable" content="yes"/>
+<title>Zieltracker</title>
+<link rel="stylesheet" href="style.css"/>
+</head>
+<body>
+<div class="main-wrap">
+  <div class="hdr">
+    <div>
+      <div class="hdr-title">Zieltracker</div>
+      <div class="hdr-sub" id="tlbl"></div>
+    </div>
+    <div class="hdr-btns">
+      <button class="btn-menu" id="btnData">⋯</button>
+      <button class="btn-add" id="btnNew">+</button>
+    </div>
+  </div>
+  <div class="main" id="main"></div>
+</div>
+<div id="ov" style="display:none"></div>
+<script src="app.js"></script>
+</body>
+</html>
+```
+
+- [ ] **Step 2: Open in browser and verify**
+
+Open `http://localhost/zieltracker/` (or wherever it's served).
+
+Check:
+- Page loads without console errors
+- Header and cards are centered on a wide screen (max ~480px content width)
+- Existing goals show up as collapsed with meta-line `Noch XT · endet DD. Mon · heute: X/Y · total: X/Y`
+- Clicking a card header expands it, showing Heute-Stats group + Dots + Entry panel
+- Clicking again collapses it
+- Goals with `ok=true` (today's quota met) appear under "Heute erledigt" with reduced opacity
+- Rename pencil still works (click pencil → edit inline)
+- Dot click still opens entry panel
+- `+ Satz` still saves a set
+
+- [ ] **Step 3: Commit**
+```bash
+cd /srv/http/zieltracker
+git add index.html style.css app.js
+git commit -m "refactor: split into files, collapsible cards, heute stats, desktop max-width"
+```
diff --git a/docs/superpowers/plans/2026-04-21-registration-invites.md b/docs/superpowers/plans/2026-04-21-registration-invites.md
new file mode 100644
index 0000000..d70b64e
--- /dev/null
+++ b/docs/superpowers/plans/2026-04-21-registration-invites.md
@@ -0,0 +1,578 @@
+# Registration & Invite System Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Add invite-only registration, referral tracking, and password reset to Zieltracker.
+
+**Architecture:** Vanilla JS single-page app. A new `config.js` externalizes server URLs. PocketBase handles auth, email verification, and password reset natively via SMTP. A new `invites` collection tracks tokens with labels and referral state. All new UI flows (register tab, password reset, invite management) are added to `app.js` following the existing sheet pattern.
+
+**Tech Stack:** Vanilla JS, PocketBase REST API, Brevo SMTP (configured in PocketBase admin)
+
+> **Note:** This app has no test framework. Each task uses browser-based manual verification instead of automated tests.
+
+---
+
+## File Map
+
+| File | Action | Responsibility |
+|---|---|---|
+| `config.js` | Create | `PB_URL` and `APP_URL` globals |
+| `index.html` | Modify | Add `<script src="config.js">` before `app.js` |
+| `app.js` | Modify | Remove hardcoded `PB_URL`; add `inviteRecord`/`loginTab` globals; refactor `showLogin`; add password reset, registration, and invite management functions; update startup block |
+| `style.css` | Modify | Add tab styles, password-reset link style, invite list/link styles |
+
+---
+
+### Task 1: Create config.js and wire it up
+
+**Files:**
+- Create: `config.js`
+- Modify: `index.html`
+- Modify: `app.js` (remove line 4)
+
+- [ ] **Step 1: Create `config.js`**
+
+```js
+var PB_URL = 'http://miniweb.kuehn.home:8090';
+var APP_URL = 'http://miniweb.kuehn.home';
+```
+
+- [ ] **Step 2: Add script tag to `index.html`**
+
+In `index.html`, before `<script src="app.js"></script>`, add:
+
+```html
+<script src="config.js"></script>
+```
+
+- [ ] **Step 3: Remove hardcoded `PB_URL` from `app.js`**
+
+Delete line 4 of `app.js`:
+```js
+var PB_URL = 'http://miniweb.kuehn.home:8090';
+```
+
+- [ ] **Step 4: Verify in browser**
+
+Open the app. Goals load, login/logout works, no console errors.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add config.js index.html app.js
+git commit -m "feat: externalize server URLs into config.js"
+```
+
+---
+
+### Task 2: PocketBase — create `invites` collection (manual)
+
+**Files:** None — PocketBase admin UI only
+
+- [ ] **Step 1: Open PocketBase admin**
+
+Navigate to `http://miniweb.kuehn.home:8090/_/` and log in.
+
+- [ ] **Step 2: Create `invites` collection**
+
+Collections → New collection → Name: `invites`
+
+Add fields:
+
+| Name | Type | Options |
+|---|---|---|
+| `token` | Text | Required |
+| `label` | Text | Required |
+| `created_by` | Relation | Collection: `users`, Required |
+| `used_by` | Relation | Collection: `users`, Optional |
+| `used_at` | Date | Optional |
+
+- [ ] **Step 3: Set API rules**
+
+In the `invites` collection → API rules:
+
+| Rule | Value |
+|---|---|
+| List / View | *(empty — public)* |
+| Create | `@request.auth.id != ""` |
+| Update | `used_by = ""` |
+| Delete | `@request.auth.id = created_by` |
+
+- [ ] **Step 4: Verify**
+
+In PocketBase admin, create a test invite record manually with any token string. Then open in browser:
+`http://miniweb.kuehn.home:8090/api/collections/invites/records`
+Should return the record as JSON.
+
+---
+
+### Task 3: PocketBase — configure SMTP (manual)
+
+**Files:** None — PocketBase admin UI only
+
+- [ ] **Step 1: Get Brevo SMTP credentials**
+
+Sign up at brevo.com (free tier). Go to:
+SMTP & API → SMTP → Generate SMTP key
+
+Note: host `smtp-relay.brevo.com`, port `587`, your Brevo login email, and the generated key.
+
+- [ ] **Step 2: Configure PocketBase SMTP**
+
+PocketBase admin → Settings → Mail settings:
+
+| Field | Value |
+|---|---|
+| Sender name | ZielTracker |
+| Sender address | your-email@example.com |
+| SMTP host | smtp-relay.brevo.com |
+| SMTP port | 587 |
+| Username | your-brevo-login@example.com |
+| Password | (Brevo SMTP key) |
+| TLS | enabled |
+
+- [ ] **Step 3: Send test email**
+
+PocketBase admin → Settings → Mail settings → "Send test email". Confirm arrival in inbox.
+
+---
+
+### Task 4: Add CSS for new UI elements
+
+**Files:**
+- Modify: `style.css`
+
+- [ ] **Step 1: Append styles to `style.css`**
+
+```css
+.ltabs{display:flex;gap:0;margin:0 0 16px;border-bottom:2px solid var(--border)}
+.ltab{flex:1;padding:10px;background:none;border:none;font-size:15px;color:var(--text3);cursor:pointer;border-bottom:2px solid transparent;margin-bottom:-2px;transition:color .15s;font-family:'DM Sans',sans-serif}
+.ltab.active{color:var(--text);border-bottom-color:var(--text)}
+.pw-link{background:none;border:none;color:var(--text3);font-size:13px;padding:8px 0 0;text-decoration:underline;cursor:pointer;display:block;text-align:center;font-family:'DM Sans',sans-serif;width:100%}
+.inv-row{display:flex;justify-content:space-between;align-items:center;padding:10px 0;border-bottom:1px solid var(--border)}
+.inv-lbl{font-weight:500;font-size:15px}
+.inv-link{background:var(--bg3);border:1px solid var(--border2);border-radius:var(--rs);padding:12px;font-size:13px;word-break:break-all;margin:8px 0 16px;font-family:'DM Mono',monospace;line-height:1.5}
+```
+
+- [ ] **Step 2: Verify**
+
+Open app in browser, confirm no visual regressions.
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add style.css
+git commit -m "feat: add CSS for login tabs, password-reset link, and invite rows"
+```
+
+---
+
+### Task 5: Add globals and refactor startup block
+
+**Files:**
+- Modify: `app.js`
+
+- [ ] **Step 1: Add globals near top of `app.js`**
+
+After line 3 (`var authToken = '', authUserId = '';`), insert:
+
+```js
+var inviteRecord = null;
+var loginTab = 'login';
+```
+
+- [ ] **Step 2: Replace the startup block at the bottom of `app.js`**
+
+The current startup block (after `scheduleMidnight` and `visibilitychange`) is:
+
+```js
+authToken=localStorage.getItem('zt_token')||'';
+authUserId=localStorage.getItem('zt_uid')||'';
+
+if(!authToken){
+  render(); showLogin();
+} else {
+  pbGoals()
+    .then(function(g){ goals=g; render(); })
+    .catch(function(){ clearAuth(); render(); showLogin(); });
+}
+```
+
+Replace with:
+
+```js
+authToken=localStorage.getItem('zt_token')||'';
+authUserId=localStorage.getItem('zt_uid')||'';
+
+function init(){
+  if(!authToken){ render(); showLogin(); }
+  else{
+    pbGoals()
+      .then(function(g){ goals=g; render(); })
+      .catch(function(){ clearAuth(); render(); showLogin(); });
+  }
+}
+
+var urlInviteToken=(new URLSearchParams(window.location.search)).get('invite');
+if(urlInviteToken){
+  api('GET','/api/collections/invites/records?filter='+encodeURIComponent('(token="'+urlInviteToken+'"&&used_by="")'))
+    .then(function(res){
+      if(res.items&&res.items.length>0) inviteRecord=res.items[0];
+    })
+    .catch(function(){})
+    .then(function(){ init(); });
+}else{
+  init();
+}
+```
+
+- [ ] **Step 3: Verify**
+
+Open app normally (no `?invite` param). Works as before, no console errors.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add app.js
+git commit -m "feat: add invite globals and refactored startup with URL token check"
+```
+
+---
+
+### Task 6: Password reset UI
+
+**Files:**
+- Modify: `app.js`
+
+- [ ] **Step 1: Add `showPasswordReset` function after `showLogin` in `app.js`**
+
+```js
+function showPasswordReset(){
+  var o=document.getElementById('ov');
+  o.innerHTML='<div class="sheet">'+
+    '<div class="shandle"></div>'+
+    '<div class="stitle">Passwort zurücksetzen</div>'+
+    '<div class="ssub">Wir senden dir einen Reset-Link per E-Mail</div>'+
+    '<div class="ff"><label>E-Mail</label><input class="fi" id="premail" type="email" autocomplete="email"/></div>'+
+    '<div class="factions">'+
+      '<button class="btn-p" id="prsub">Link senden</button>'+
+      '<button class="btn-c" id="prback">Zurück</button>'+
+    '</div>'+
+  '</div>';
+  o.onclick=null;
+  setTimeout(function(){ var el=document.getElementById('premail'); if(el) el.focus(); },50);
+  document.getElementById('prback').onclick=function(){ loginTab='login'; showLogin(); };
+  document.getElementById('prsub').onclick=function(){
+    var email=document.getElementById('premail').value.trim();
+    if(!email) return;
+    var btn=this; btn.disabled=true; btn.textContent='…';
+    api('POST','/api/collections/users/request-password-reset',{email:email})
+      .then(function(){
+        document.querySelector('#ov .sheet').innerHTML=
+          '<div class="shandle"></div>'+
+          '<div class="stitle">E-Mail gesendet</div>'+
+          '<div class="ssub">Falls ein Konto mit dieser Adresse existiert, hast du einen Link erhalten.</div>'+
+          '<div class="factions"><button class="btn-p" id="prdone">Zum Login</button></div>';
+        document.getElementById('prdone').onclick=function(){ loginTab='login'; showLogin(); };
+      })
+      .catch(function(){
+        btn.disabled=false; btn.textContent='Link senden';
+        showToast('Fehler beim Senden');
+      });
+  };
+}
+```
+
+- [ ] **Step 2: Verify**
+
+Open app. The login sheet still works. (The "Passwort vergessen?" link is wired in the next task.)
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add app.js
+git commit -m "feat: add password reset sheet"
+```
+
+---
+
+### Task 7: Login sheet refactor + registration form
+
+> All six functions in this task must be added together in one commit — `showLogin` calls `renderRegisterForm` and `wireRegisterForm` which are defined here.
+
+**Files:**
+- Modify: `app.js`
+
+- [ ] **Step 1: Replace the entire `showLogin` function and add all six helper functions**
+
+Replace the existing `showLogin` function in `app.js` with the following block. This is a complete replacement — remove the old function and insert all six functions in its place:
+
+```js
+function showLogin(err){
+  var o=document.getElementById('ov');
+  o.style.cssText='display:flex;position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);align-items:flex-end;animation:fi .2s ease';
+  var hasInvite=!!inviteRecord;
+  var tabsHtml=hasInvite
+    ?'<div class="ltabs">'+
+      '<button class="ltab'+(loginTab==='login'?' active':'')+'" id="ltab-login">Anmelden</button>'+
+      '<button class="ltab'+(loginTab==='register'?' active':'')+'" id="ltab-reg">Registrieren</button>'+
+      '</div>'
+    :'';
+  var formHtml=(hasInvite&&loginTab==='register')?renderRegisterForm(err):renderLoginForm(err);
+  o.innerHTML='<div class="sheet">'+
+    '<div class="shandle"></div>'+
+    '<div class="stitle">Anmelden</div>'+
+    '<div class="ssub">ZielTracker</div>'+
+    tabsHtml+formHtml+
+  '</div>';
+  o.onclick=null;
+  if(hasInvite){
+    document.getElementById('ltab-login').onclick=function(){loginTab='login';showLogin();};
+    document.getElementById('ltab-reg').onclick=function(){loginTab='register';showLogin();};
+  }
+  if(hasInvite&&loginTab==='register') wireRegisterForm();
+  else wireLoginForm();
+}
+
+function renderLoginForm(err){
+  return (err?'<div class="login-err">'+err+'</div>':'')+
+    '<div class="ff"><label>E-Mail</label><input class="fi" id="lemail" type="email" autocomplete="email"/></div>'+
+    '<div class="ff"><label>Passwort</label><input class="fi" id="lpass" type="password" autocomplete="current-password"/></div>'+
+    '<div class="factions"><button class="btn-p" id="lsub">Anmelden</button></div>'+
+    '<button class="pw-link" id="lpw">Passwort vergessen?</button>';
+}
+
+function wireLoginForm(){
+  setTimeout(function(){
+    var le=document.getElementById('lemail'),lp=document.getElementById('lpass');
+    if(le){le.focus();le.onkeydown=function(e){if(e.key==='Enter')lp.focus();};}
+    if(lp) lp.onkeydown=function(e){if(e.key==='Enter')document.getElementById('lsub').click();};
+    var lpw=document.getElementById('lpw');
+    if(lpw) lpw.onclick=showPasswordReset;
+  },50);
+  document.getElementById('lsub').onclick=function(){
+    var email=document.getElementById('lemail').value.trim();
+    var pass=document.getElementById('lpass').value;
+    if(!email||!pass) return;
+    var btn=this; btn.disabled=true; btn.textContent='…';
+    api('POST','/api/collections/users/auth-with-password',{identity:email,password:pass})
+      .then(function(res){
+        authToken=res.token; authUserId=res.record.id;
+        localStorage.setItem('zt_token',authToken);
+        localStorage.setItem('zt_uid',authUserId);
+        return pbGoals();
+      })
+      .then(function(g){ goals=g; closeOv(); render(); })
+      .catch(function(e){
+        btn.disabled=false; btn.textContent='Anmelden';
+        if(authToken){ closeOv(); render(); }
+        else{ showLogin(e.status===400||e.status===401?'Falsche E-Mail oder Passwort':'Verbindungsfehler'); }
+      });
+  };
+}
+
+function renderRegisterForm(err){
+  return (err?'<div class="login-err">'+err+'</div>':'')+
+    '<div class="ssub" style="margin-bottom:8px">Eingeladen als: <strong>'+inviteRecord.label+'</strong></div>'+
+    '<div class="ff"><label>E-Mail</label><input class="fi" id="remail" type="email" autocomplete="email"/></div>'+
+    '<div class="ff"><label>Passwort</label><input class="fi" id="rpass" type="password" autocomplete="new-password"/></div>'+
+    '<div class="ff"><label>Passwort wiederholen</label><input class="fi" id="rpass2" type="password" autocomplete="new-password"/></div>'+
+    '<div class="factions"><button class="btn-p" id="rsub">Registrieren</button></div>';
+}
+
+function wireRegisterForm(){
+  setTimeout(function(){ var el=document.getElementById('remail'); if(el) el.focus(); },50);
+  document.getElementById('rsub').onclick=function(){
+    var email=document.getElementById('remail').value.trim();
+    var pass=document.getElementById('rpass').value;
+    var pass2=document.getElementById('rpass2').value;
+    if(!email||!pass||!pass2) return;
+    if(pass!==pass2){showLogin('Passwörter stimmen nicht überein');return;}
+    if(pass.length<8){showLogin('Passwort muss mindestens 8 Zeichen haben');return;}
+    var btn=this; btn.disabled=true; btn.textContent='…';
+    var savedInviteId=inviteRecord.id;
+    api('POST','/api/collections/users/records',{email:email,password:pass,passwordConfirm:pass2})
+      .then(function(){
+        return api('POST','/api/collections/users/auth-with-password',{identity:email,password:pass});
+      })
+      .then(function(res){
+        authToken=res.token; authUserId=res.record.id;
+        localStorage.setItem('zt_token',authToken);
+        localStorage.setItem('zt_uid',authUserId);
+        return api('PATCH','/api/collections/invites/records/'+savedInviteId,{used_by:authUserId,used_at:new Date().toISOString()});
+      })
+      .then(function(){
+        inviteRecord=null;
+        return pbGoals();
+      })
+      .then(function(g){ goals=g; closeOv(); render(); })
+      .catch(function(e){
+        btn.disabled=false; btn.textContent='Registrieren';
+        showLogin(e.status===400?'E-Mail bereits vergeben oder ungültig':'Registrierung fehlgeschlagen');
+      });
+  };
+}
+```
+
+- [ ] **Step 2: Verify login still works**
+
+Open app normally (no `?invite` param). Login works as before. "Passwort vergessen?" link appears and opens the reset sheet.
+
+- [ ] **Step 3: Verify registration flow**
+
+1. In PocketBase admin, create a test invite: token = `testtoken123`, label = `Testkind`, used_by = empty.
+2. Open `http://miniweb.kuehn.home/?invite=testtoken123` in a private window.
+3. Login sheet shows two tabs: "Anmelden" / "Registrieren".
+4. Click "Registrieren" → form shows "Eingeladen als: **Testkind**".
+5. Enter mismatched passwords → error "Passwörter stimmen nicht überein".
+6. Enter a 7-char password → error "Passwort muss mindestens 8 Zeichen haben".
+7. Enter valid email + matching passwords (8+ chars) → user created, logged in, goals list shown.
+8. In PocketBase admin, confirm invite record has `used_by` and `used_at` set.
+9. Open the same link again in a private window → only "Anmelden" tab visible (token is used).
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add app.js
+git commit -m "feat: refactor login sheet with tabs, registration form, and password-reset link"
+```
+
+---
+
+### Task 8: Invite management UI
+
+**Files:**
+- Modify: `app.js`
+- Modify: `style.css`
+
+- [ ] **Step 1: Add `genToken` utility function to `app.js`**
+
+Add after the `now()` function (around line 16):
+
+```js
+function genToken(){
+  var c='ABCDEFGHJKMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789',t='';
+  for(var i=0;i<12;i++) t+=c[Math.floor(Math.random()*c.length)];
+  return t;
+}
+```
+
+- [ ] **Step 2: Add `showInvites` and `showNewInvite` functions after `openData` in `app.js`**
+
+```js
+function showInvites(){
+  api('GET','/api/collections/invites/records?filter='+encodeURIComponent('(created_by="'+authUserId+'")&sort=-created&expand=used_by'))
+    .then(function(res){
+      var items=res.items||[];
+      var rows='';
+      for(var i=0;i<items.length;i++){
+        var inv=items[i];
+        var usedEmail=inv.expand&&inv.expand.used_by?inv.expand.used_by.email:'registriert';
+        var status=inv.used_by
+          ?'<span style="color:var(--green)">✓ '+usedEmail+'</span>'
+          :'<span style="color:var(--text3)">Ausstehend</span>';
+        rows+='<div class="inv-row"><span class="inv-lbl">'+inv.label+'</span>'+status+'</div>';
+      }
+      showSheet(
+        '<div class="shandle"></div>'+
+        '<div class="stitle">Einladungen</div>'+
+        (rows||'<div style="color:var(--text3);padding:12px 0;font-size:14px">Noch keine Einladungen verschickt.</div>')+
+        '<div class="ddiv"></div>'+
+        '<button class="btn-p" id="inew" style="width:100%">+ Neue Einladung</button>'+
+        '<button class="btn-c" id="icls" style="width:100%;margin-top:4px;text-align:center">Schließen</button>'
+      );
+      document.getElementById('icls').onclick=closeOv;
+      document.getElementById('inew').onclick=showNewInvite;
+    })
+    .catch(function(){ showToast('Fehler beim Laden'); });
+}
+
+function showNewInvite(){
+  showSheet(
+    '<div class="shandle"></div>'+
+    '<div class="stitle">Neue Einladung</div>'+
+    '<div class="ff"><label>Name / Für wen?</label><input class="fi" id="ilabel" type="text" placeholder="z.B. Mama"/></div>'+
+    '<div class="factions">'+
+      '<button class="btn-p" id="isub">Einladung erstellen</button>'+
+      '<button class="btn-c" id="iback">Zurück</button>'+
+    '</div>'
+  );
+  setTimeout(function(){ var el=document.getElementById('ilabel'); if(el) el.focus(); },50);
+  document.getElementById('iback').onclick=showInvites;
+  document.getElementById('isub').onclick=function(){
+    var label=(document.getElementById('ilabel').value||'').trim();
+    if(!label) return;
+    var btn=this; btn.disabled=true; btn.textContent='…';
+    var token=genToken();
+    api('POST','/api/collections/invites/records',{token:token,label:label,created_by:authUserId})
+      .then(function(){
+        var link=APP_URL+'/?invite='+token;
+        showSheet(
+          '<div class="shandle"></div>'+
+          '<div class="stitle">Einladung erstellt</div>'+
+          '<div class="ssub">Teile diesen Link mit '+label+':</div>'+
+          '<div class="inv-link" id="ilink">'+link+'</div>'+
+          '<div class="factions">'+
+            '<button class="btn-p" id="icopy">Link kopieren</button>'+
+            '<button class="btn-c" id="idone">Fertig</button>'+
+          '</div>'
+        );
+        document.getElementById('idone').onclick=closeOv;
+        document.getElementById('icopy').onclick=function(){
+          navigator.clipboard.writeText(link).then(function(){ showToast('Link kopiert!'); });
+        };
+      })
+      .catch(function(){ btn.disabled=false; btn.textContent='Einladung erstellen'; showToast('Fehler'); });
+  };
+}
+```
+
+- [ ] **Step 3: Add "Einladungen" button to `openData`**
+
+In `openData`, the sheet HTML starts with the export button. Add a new button and divider at the very beginning of the sheet content (before the export button):
+
+Replace the beginning of `openData`'s sheet HTML:
+```js
+'<button class="dbtn" id="dexp"><span class="dico">⬇</span><span class="dlbl">Exportieren<span class="dsub">Alle Ziele als JSON-Datei speichern</span></span></button>'+
+```
+
+With:
+```js
+'<button class="dbtn" id="dinv"><span class="dico">✉</span><span class="dlbl">Einladungen<span class="dsub">Freunde und Familie einladen</span></span></button>'+
+'<div class="ddiv"></div>'+
+'<button class="dbtn" id="dexp"><span class="dico">⬇</span><span class="dlbl">Exportieren<span class="dsub">Alle Ziele als JSON-Datei speichern</span></span></button>'+
+```
+
+Add the event binding after `document.getElementById('dcls').onclick=closeOv;`:
+```js
+document.getElementById('dinv').onclick=function(){ closeOv(); showInvites(); };
+```
+
+- [ ] **Step 4: Verify invite management**
+
+1. Log in, open ⋯ menu → "Einladungen" button appears at the top.
+2. Click → invite list sheet opens (empty).
+3. "Neue Einladung" → enter "Papa" → "Einladung erstellen".
+4. Result sheet shows invite link with "Link kopieren" button.
+5. "Link kopieren" → toast "Link kopiert!" appears, clipboard contains the URL.
+6. "Fertig" → sheet closes.
+7. Open ⋯ → Einladungen → "Papa" listed as "Ausstehend".
+8. Open the invite link in a private window and register.
+9. Back in original session: ⋯ → Einladungen → "Papa" shows "✓ [email]".
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add app.js style.css
+git commit -m "feat: add invite management UI with create, list, and referral tracking"
+```
+
+---
+
+## Done
+
+After Task 8, the full feature set is live:
+- `config.js` holds server URLs (update for production deployment)
+- Invite links are the only way to register
+- Password reset works via email (requires PocketBase SMTP configured in Task 3)
+- Invite list shows referral status per person
diff --git a/docs/superpowers/specs/2026-04-17-refactor-design.md b/docs/superpowers/specs/2026-04-17-refactor-design.md
new file mode 100644
index 0000000..ff9df45
--- /dev/null
+++ b/docs/superpowers/specs/2026-04-17-refactor-design.md
@@ -0,0 +1,107 @@
+# Zieltracker — Refactor & Design-Update
+
+**Datum:** 2026-04-17
+
+## Überblick
+
+Refactoring der Single-File-App in separate Dateien, neue einklappbare Karten, überarbeitete Stats, Desktop-Layout und Sortierung nach Tagesstatus.
+
+---
+
+## 1. Dateistruktur
+
+Aus `index.html` (alles inline) werden drei Dateien:
+
+- `index.html` — nur HTML-Gerüst + `<link>` + `<script>`
+- `style.css` — alle Styles
+- `app.js` — gesamte Logik
+
+---
+
+## 2. Layout — Desktop max-width
+
+```css
+.main-wrap {
+  max-width: 480px;
+  margin: 0 auto;
+}
+```
+
+- Header und Content-Bereich beide im `max-width`-Container
+- Außerhalb: `background: var(--bg)` bleibt sichtbar als grauer Rand
+- Auf Handy ändert sich nichts (412px Breite des OnePlus 9 Pro passt rein)
+
+---
+
+## 3. Einklappbare Karten
+
+### Standardverhalten
+- Alle Karten starten **eingeklappt** beim Laden
+- Kein Persist in localStorage — jeder Reload beginnt komplett eingeklappt
+- Klick auf Karte (Header-Bereich) klappt auf/zu
+- Pfeil: `▸` eingeklappt, `▴` ausgeklappt
+
+### Sortierung
+1. **Offen** (heute noch nicht erledigt) — oben, normale Opazität
+2. **Heute erledigt** — unten, leicht abgedunkelt (`opacity: 0.7`)
+
+Trennlabels zwischen den Gruppen: `OFFEN` / `HEUTE ERLEDIGT` (10px, monospace, uppercase, grau)
+
+### Eingeklappt zeigt
+```
+[Name]  [✎]
+[Noch XT · endet DD. Mon · heute: GEMACHT/TAGESZIEL · total: DONE/TOTAL]
+[Badge]  [▸]
+[Fortschrittsbalken]
+```
+
+- `heute: X/Y` farbkodiert: rot (0), amber (teilweise), grün (erreicht), blau (über Ziel)
+- Fortschrittsbalken ohne Beschriftung darunter
+
+### Ausgeklappt zeigt
+```
+[Name]  [✎]
+[Noch XT · endet DD. Mon]
+[Badge]  [▴]
+[Fortschrittsbalken]
+[X Stück gemacht          62% von 500]   ← prog-row
+[Heute-Stats-Block]
+[Dots + Legende]
+[Eingabe-Panel (wenn Tag auswählbar)]
+[Ziel löschen]
+```
+
+---
+
+## 4. Stats — Umbau
+
+### Alt (4 Blöcke, immer sichtbar)
+Heute noch · Gemacht · Puffer · Täglich
+
+### Neu (1 Gruppe "Heute", 3 Blöcke, nur ausgeklappt)
+| Gemacht | Tagesziel | Noch |
+|---------|-----------|------|
+| 30 Stk  | 50 Stk    | 20 Stk (farbig) |
+
+- Gruppe hat Label "HEUTE" (9px monospace uppercase)
+- `Noch` farbkodiert identisch zu `heute:` in der Meta-Zeile
+- Puffer und Täglich entfallen als eigene Blöcke (Badge zeigt Puffer/Rückstand bereits)
+
+---
+
+## 5. Eingabe
+
+Bleibt unverändert: Freie Zahleingabe + `+ Satz` Button.
+
+---
+
+## 6. Zusammenfassung der Änderungen
+
+| Was | Vorher | Nachher |
+|-----|--------|---------|
+| Dateistruktur | 1 HTML-Datei | index.html + style.css + app.js |
+| Desktop-Breite | volle Breite | max-width 480px, zentriert |
+| Karten | immer ausgeklappt | eingeklappt, aufklappbar |
+| Sortierung | Erstellungsreihenfolge | Offen zuerst, Erledigt unten |
+| Stats | 4 Blöcke (Heute noch/Gemacht/Puffer/Täglich) | 3 Blöcke Gruppe "Heute" |
+| Meta-Zeile (eingeklappt) | Noch XT · endet DD | + heute: X/Y · total: X/Y |
diff --git a/docs/superpowers/specs/2026-04-21-registration-invites-design.md b/docs/superpowers/specs/2026-04-21-registration-invites-design.md
new file mode 100644
index 0000000..a41d7fe
--- /dev/null
+++ b/docs/superpowers/specs/2026-04-21-registration-invites-design.md
@@ -0,0 +1,98 @@
+# Design: Registrierung & Einladungssystem
+
+**Datum:** 2026-04-21  
+**Status:** Approved
+
+## Ziel
+
+Zieltracker für Freunde und Familie öffnen: Registrierung nur per Einladungslink, Passwort-Reset per E-Mail, Referral-Tracking pro User.
+
+---
+
+## 1. Konfiguration (`config.js`)
+
+Neue Datei `config.js`, die vor `app.js` eingebunden wird und die zwei globalen Variablen definiert:
+
+```js
+var PB_URL = 'https://pb.kuehn.example.com';
+var APP_URL = 'https://zieltracker.kuehn.example.com';
+```
+
+- `PB_URL` ersetzt die bisherige Hardcodierung in `app.js`
+- `APP_URL` wird verwendet, um Einladungslinks zu bauen (`APP_URL + '/?invite=' + token`)
+- Wird einmalig auf dem Server angepasst — kein UI
+
+---
+
+## 2. PocketBase: `invites`-Collection
+
+| Feld | Typ | Constraints |
+|---|---|---|
+| `token` | text | unique, required |
+| `label` | text | required (z.B. "Für Mama") |
+| `created_by` | relation → users | required |
+| `used_by` | relation → users | optional |
+| `used_at` | date | optional |
+
+**API-Regeln:**
+- Lesen (einzelner Token via Filter): public — zum Validieren beim Registrieren
+- Erstellen: nur authentifizierte User (`@request.auth.id != ""`)
+- Update (`used_by`, `used_at`): public — wird beim Registrieren gesetzt
+- Löschen: nur der Ersteller
+
+---
+
+## 3. PocketBase: E-Mail / SMTP
+
+PocketBase Admin → Settings → Mail settings:
+
+- Provider: Brevo oder Resend (externer SMTP-Dienst, kostenloser Tier)
+- PocketBase schickt nativ: E-Mail-Verifikation nach Registrierung, Passwort-Reset-Link
+- Kein eigener Code nötig
+
+---
+
+## 4. UI-Flows
+
+### 4.1 Einladung erstellen (eingeloggter User)
+
+Im "Daten verwalten"-Sheet (⋯-Menü):
+- Neuer Button **"Einladungen"**
+- Öffnet Sheet mit Liste aller eigenen Einladungen:
+  - Label + Status ("Ausstehend" oder "✓ Registriert")
+- Button **"Neue Einladung"**:
+  1. Eingabe: Label (z.B. "Für Papa")
+  2. Generiert Token (12 zufällige alphanumerische Zeichen)
+  3. Schreibt Token in `invites`-Collection via PocketBase API
+  4. Zeigt fertigen Link zum Kopieren: `APP_URL/?invite=TOKEN`
+
+### 4.2 Registrierung (Eingeladener)
+
+- User öffnet Einladungslink: `https://zieltracker.../?invite=TOKEN`
+- App liest `?invite`-Parameter aus URL
+- App prüft Token gegen PocketBase (`invites`-Collection, Filter: `token=TOKEN && used_by=""`)
+- Ist Token gültig und ungenutzt: Login-Sheet zeigt zusätzlichen Tab **"Registrieren"**
+- Ist Token ungültig/bereits genutzt: nur Login, kein Registrierungs-Tab
+- Registrierungsformular: E-Mail, Passwort, Passwort wiederholen
+- Nach Erfolg:
+  1. PocketBase-User wird angelegt (Standard-Auth-Flow)
+  2. Token wird als `used_by = neuer User`, `used_at = jetzt` markiert
+  3. User ist eingeloggt, Ziele werden geladen
+
+### 4.3 Passwort vergessen
+
+Im Login-Sheet:
+- Kleiner Link **"Passwort vergessen?"** unter dem Anmelden-Button
+- Öffnet Mini-Sheet mit E-Mail-Eingabe
+- Button **"Reset-Link senden"**
+- Ruft PocketBase-Endpoint auf: `POST /api/collections/users/request-password-reset`
+- Zeigt Bestätigung: "E-Mail wurde gesendet" (unabhängig ob Adresse existiert)
+- PocketBase verschickt den Reset-Link — kein eigener Template-Code nötig
+
+---
+
+## 5. Nicht im Scope
+
+- Admin-Funktion zum Deaktivieren von Accounts
+- Invite-Limit pro User
+- Ablaufdatum für Einladungslinks
diff --git a/include/db.php b/include/db.php
new file mode 100644
index 0000000..c81ca34
--- /dev/null
+++ b/include/db.php
@@ -0,0 +1,60 @@
+<?php
+require_once __DIR__ . '/../vendor/autoload.php';
+require_once __DIR__ . '/config.php';
+
+$conn = \Doctrine\DBAL\DriverManager::getConnection([
+    'driver'   => 'pdo_mysql',
+    'host'     => DB_HOST,
+    'dbname'   => DB_NAME,
+    'user'     => DB_USER,
+    'password' => DB_PASS,
+    'charset'  => 'utf8mb4',
+]);
+
+// PDO für delight-im/auth
+$pdo = $conn->getNativeConnection();
+$auth = new \Delight\Auth\Auth($pdo);
+
+// Tabellen anlegen falls nicht vorhanden
+$conn->executeStatement('
+    CREATE TABLE IF NOT EXISTS goals (
+        id         INT AUTO_INCREMENT PRIMARY KEY,
+        user_id    INT          NOT NULL,
+        name       VARCHAR(255) NOT NULL,
+        unit       VARCHAR(50)  NOT NULL DEFAULT \'Stück\',
+        daily      FLOAT        NOT NULL DEFAULT 1,
+        days       INT          NOT NULL DEFAULT 30,
+        start      DATETIME     NOT NULL,
+        sets       JSON         NOT NULL DEFAULT (\'[]\'),
+        created_at TIMESTAMP    DEFAULT CURRENT_TIMESTAMP
+    ) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci
+');
+
+$conn->executeStatement('
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+        version    VARCHAR(64) NOT NULL PRIMARY KEY,
+        applied_at TIMESTAMP   DEFAULT CURRENT_TIMESTAMP
+    ) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci
+');
+
+$conn->executeStatement('
+    CREATE TABLE IF NOT EXISTS invites (
+        id          INT AUTO_INCREMENT PRIMARY KEY,
+        token       VARCHAR(64)  NOT NULL UNIQUE,
+        note        VARCHAR(255) DEFAULT NULL,
+        created_by  INT          NOT NULL,
+        used_by     INT          DEFAULT NULL,
+        created_at  TIMESTAMP    DEFAULT CURRENT_TIMESTAMP,
+        expires_at  TIMESTAMP    NOT NULL,
+        used_at     TIMESTAMP    DEFAULT NULL
+    ) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci
+');
+
+// Migrations ausführen
+foreach (glob(__DIR__ . '/../migrations/*.sql') as $file) {
+    $version = basename($file, '.sql');
+    if (!$conn->fetchOne('SELECT 1 FROM schema_migrations WHERE version = ?', [$version])) {
+        $conn->executeStatement(file_get_contents($file));
+        $conn->executeStatement('INSERT INTO schema_migrations (version) VALUES (?)', [$version]);
+    }
+}
diff --git a/include/mailer.php b/include/mailer.php
new file mode 100644
index 0000000..3e9e12d
--- /dev/null
+++ b/include/mailer.php
@@ -0,0 +1,19 @@
+<?php
+use PHPMailer\PHPMailer\PHPMailer;
+
+function sendMail(string $to, string $subject, string $body): void {
+    $mail = new PHPMailer(true);
+    $mail->isSMTP();
+    $mail->Host       = SMTP_HOST;
+    $mail->SMTPAuth   = true;
+    $mail->Username   = SMTP_USER;
+    $mail->Password   = SMTP_PASS;
+    $mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
+    $mail->Port       = SMTP_PORT;
+    $mail->CharSet    = 'UTF-8';
+    $mail->setFrom(SMTP_FROM, SMTP_FROM_NAME);
+    $mail->addAddress($to);
+    $mail->Subject = $subject;
+    $mail->Body    = $body;
+    $mail->send();
+}
diff --git a/index.php b/index.php
new file mode 100644
index 0000000..a2c8b46
--- /dev/null
+++ b/index.php
@@ -0,0 +1,8 @@
+<?php
+require_once __DIR__ . '/vendor/autoload.php';
+
+$twig = new \Twig\Environment(
+    new \Twig\Loader\FilesystemLoader(__DIR__ . '/templates'),
+    ['cache' => false]
+);
+echo $twig->render('app.html.twig');
diff --git a/logo.png b/logo.png
new file mode 100644
index 0000000..a194b03
Binary files /dev/null and b/logo.png differ
diff --git a/migrations/001_add_invites_note.sql b/migrations/001_add_invites_note.sql
new file mode 100644
index 0000000..6ea9fca
--- /dev/null
+++ b/migrations/001_add_invites_note.sql
@@ -0,0 +1 @@
+ALTER TABLE invites ADD COLUMN IF NOT EXISTS note VARCHAR(255) DEFAULT NULL AFTER token;
diff --git a/public/.htaccess b/public/.htaccess
new file mode 100644
index 0000000..0088cf6
--- /dev/null
+++ b/public/.htaccess
@@ -0,0 +1,17 @@
+DirectoryIndex index.php
+
+<IfModule mod_negotiation.c>
+    Options -MultiViews
+</IfModule>
+
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    RewriteBase /
+
+    # Composer-Dateien sperren (liegen außerhalb public/, trotzdem sicher)
+    RewriteRule ^(composer\.(json|lock))$ - [F,L]
+
+    # Static files direkt ausliefern
+    RewriteCond %{REQUEST_FILENAME} !-f
+    RewriteRule ^ index.php [L]
+</IfModule>
diff --git a/public/app.js b/public/app.js
new file mode 100644
index 0000000..97a60e2
--- /dev/null
+++ b/public/app.js
@@ -0,0 +1,716 @@
+var TODAY = new Date(); TODAY.setHours(0,0,0,0);
+var goals = [], prefs, selDay = {}, addAmt = {}, renamingId = null, renameVal = '', collapsed = {};
+var userName = '';
+
+function loadPref(k,def){ try{ return JSON.parse(localStorage.getItem(k)||def); }catch(e){ return JSON.parse(def); } }
+function saveP(){ localStorage.setItem('zt_p',JSON.stringify(prefs)); }
+prefs = loadPref('zt_p','{}');
+
+function tOff(g){ return Math.round((TODAY - new Date(g.start))/86400000); }
+function o2d(g,i){ var d=new Date(new Date(g.start).getTime()+i*86400000); d.setHours(0,0,0,0); return d; }
+function dTot(g,o){ return (g.sets[String(o)]||[]).reduce(function(a,b){return a+b.amount;},0); }
+function fd(d){ return d.toLocaleDateString('de-DE',{weekday:'short',day:'numeric',month:'short'}); }
+function fs(d){ return d.toLocaleDateString('de-DE',{day:'numeric',month:'short'}); }
+function editable(g,o){ var t=tOff(g); return o===t||o===t-1; }
+function now(){ var n=new Date(); return String(n.getHours()).padStart(2,'0')+':'+String(n.getMinutes()).padStart(2,'0'); }
+
+function heuteColor(tdone,daily){
+  if(tdone===0) return 'var(--red)';
+  if(tdone>=daily*1.1) return 'var(--blue)';
+  if(tdone>=daily) return 'var(--green)';
+  return 'var(--amber)';
+}
+
+function isCollapsed(id){ return collapsed[id]!==false; }
+function toggleCollapse(id){
+  var wasCollapsed=isCollapsed(id);
+  collapsed[id]=!wasCollapsed;
+  if(wasCollapsed){
+    var g=goals.filter(function(x){return x.id===id;})[0];
+    if(g) selDay[id]=tOff(g);
+  }
+  render();
+}
+
+function calc(g){
+  var t=tOff(g), tot=g.daily*g.days;
+  var dr=Math.max(0,g.days-t-1);
+  var sd=new Date(g.start); sd.setHours(0,0,0,0);
+  var end=new Date(sd.getTime()+g.days*86400000);
+  var past=0;
+  for(var i=0;i<Math.min(t,g.days);i++) past+=dTot(g,i);
+  var tdone=dTot(g,t), tot2=past+tdone;
+  var dl=dr+1;
+  var remaining=Math.max(0,tot-past);
+  var pd=Math.ceil(remaining/Math.max(1,dl));
+  var st=Math.max(0,pd-tdone);
+  var expectedPast=Math.min(t,g.days)*g.daily;
+  var buf=(past-expectedPast)+Math.max(0,tdone-g.daily);
+  var deficit=Math.min(0,buf);
+  var surplus=Math.max(0,buf);
+  var dailyDelta=pd-g.daily;
+  var pct=Math.min(100,Math.round((tot2/tot)*100));
+  return{tot:tot,tOff:t,end:end,dr:dr,done:tot2,tdone:tdone,pd:pd,st:st,buf:buf,deficit:deficit,surplus:surplus,dailyDelta:dailyDelta,net:tdone-pd,pct:pct,ok:tdone>=pd};
+}
+
+function dcls(g,i){
+  var t=tOff(g); if(i>t) return 'dot df';
+  var v=dTot(g,i);
+  var c=v===0?'dot dm':v>=g.daily*1.1?'dot db':v>=g.daily?'dot dd':'dot dp';
+  return c+(editable(g,i)?' de':' dl');
+}
+function dlbl(g,i){
+  var t=tOff(g); if(i>t) return String(i+1);
+  var v=dTot(g,i);
+  if(v===0) return '✕'; if(v>=g.daily*1.1) return '+'; if(v>=g.daily) return '✓';
+  return Math.round(v/g.daily*100)+'%';
+}
+
+// ── API ──────────────────────────────────────────────────────────────────────
+
+function api(method, path, body){
+  var opts = {method:method, credentials:'include', headers:{'Content-Type':'application/json'}};
+  if(body) opts.body = JSON.stringify(body);
+  return fetch('api/' + path, opts).then(function(res){
+    return res.json().then(function(data){
+      if(!res.ok){ var e=new Error(data.error||'Fehler'); e.status=res.status; throw e; }
+      return data;
+    });
+  });
+}
+
+function loadGoals(){
+  return api('GET','goals').then(function(data){ return data; });
+}
+
+function saveGoal(g){
+  api('PATCH','goals/'+g.id,{name:g.name,unit:g.unit,daily:g.daily,days:g.days,start:g.start,sets:g.sets})
+    .catch(function(e){
+      if(e.status===401){ showLogin(); }
+      else showToast('Speicherfehler');
+    });
+}
+
+// ── Toast ─────────────────────────────────────────────────────────────────────
+
+function showToast(msg){
+  var t=document.createElement('div'); t.className='toast'; t.textContent=msg;
+  document.body.appendChild(t); setTimeout(function(){t.remove();},3000);
+}
+
+// ── Goal-Aktionen ─────────────────────────────────────────────────────────────
+
+function addSet(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  var k=gid+'_'+off, amt=parseInt(addAmt[k]||'0',10);
+  if(amt<=0) return;
+  if(!g.sets[String(off)]) g.sets[String(off)]=[];
+  g.sets[String(off)].push({amount:amt,time:off===tOff(g)?now():'—'});
+  addAmt[k]=''; saveGoal(g); render();
+}
+function remSet(gid,off,idx){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  g.sets[String(off)].splice(idx,1); saveGoal(g); render();
+}
+function delGoal(id){
+  if(!confirm('Ziel wirklich löschen?')) return;
+  goals=goals.filter(function(g){return g.id!==id;});
+  render();
+  api('DELETE','goals/'+id).catch(function(){ showToast('Fehler beim Löschen'); });
+}
+function selD(gid,off){
+  var g=goals.filter(function(x){return x.id===gid;})[0];
+  if(!g||!editable(g,off)) return;
+  selDay[gid]=selDay[gid]===off?null:off; render();
+}
+function startRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0]; if(!g) return;
+  renamingId=id; renameVal=g.name; render();
+  setTimeout(function(){ var el=document.getElementById('ri'+id); if(el){el.focus();el.select();} },50);
+}
+function commitRen(id){
+  var g=goals.filter(function(x){return x.id===id;})[0];
+  if(g&&renameVal.trim()){g.name=renameVal.trim(); saveGoal(g);}
+  renamingId=null; render();
+}
+function cancelRen(){ renamingId=null; render(); }
+
+// ── Template-Helper ───────────────────────────────────────────────────────────
+
+function tpl(id){
+  return document.getElementById(id).content.cloneNode(true).firstElementChild;
+}
+
+// ── Overlays ──────────────────────────────────────────────────────────────────
+
+var OV_CSS='display:flex;position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);align-items:flex-end;justify-content:center;animation:fi .2s ease';
+
+function closeOv(){
+  var o=document.getElementById('ov');
+  o.style.display='none';
+  o.innerHTML='';
+}
+
+function showSheet(content, dismissable){
+  var o=document.getElementById('ov');
+  o.style.cssText=OV_CSS;
+  var sheet=tpl('tpl-sheet');
+  sheet.appendChild(content);
+  o.innerHTML='';
+  o.appendChild(sheet);
+  o.onclick=dismissable!==false?function(e){if(e.target===o)closeOv();}:null;
+}
+
+// ── Login ─────────────────────────────────────────────────────────────────────
+
+function showLogin(err){
+  var c=tpl('tpl-login');
+  if(err){ var e=c.querySelector('.login-err'); e.textContent=err; e.style.display=''; }
+  showSheet(c,false);
+  var email=c.querySelector('.lf-email'), pass=c.querySelector('.lf-pass'), sub=c.querySelector('.lf-sub');
+  setTimeout(function(){email.focus();},50);
+  email.onkeydown=function(e){if(e.key==='Enter')pass.focus();};
+  pass.onkeydown=function(e){if(e.key==='Enter')sub.click();};
+  c.querySelector('.lf-fgt').onclick=function(){showForgotPassword();};
+  sub.onclick=function(){
+    var ev=email.value.trim(), pv=pass.value;
+    if(!ev||!pv){ var errEl=c.querySelector('.login-err'); errEl.textContent='Bitte E-Mail und Passwort eingeben'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','login',{email:ev,password:pv})
+      .then(function(){ return loadGoals(); })
+      .then(function(g){ goals=g; closeOv(); render(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Anmelden';
+        showLogin(err.status===401?'Falsche E-Mail oder Passwort':err.status===429?'Zu viele Versuche':'Verbindungsfehler');
+      });
+  };
+}
+
+// ── Passwort vergessen ────────────────────────────────────────────────────────
+
+function showForgotPassword(){
+  var c=tpl('tpl-forgot-pw');
+  showSheet(c,false);
+  var email=c.querySelector('.fp-email'), errEl=c.querySelector('.login-err'), sub=c.querySelector('.fp-sub');
+  setTimeout(function(){email.focus();},50);
+  c.querySelector('.fp-back').onclick=function(){showLogin();};
+  sub.onclick=function(){
+    var ev=email.value.trim(); if(!ev) return;
+    sub.disabled=true; sub.textContent='…';
+    api('POST','reset-request',{email:ev})
+      .then(function(){
+        var conf=tpl('tpl-email-sent');
+        conf.querySelector('.es-ok').onclick=function(){showLogin();};
+        showSheet(conf,false);
+      })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Link senden';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Passwort zurücksetzen ─────────────────────────────────────────────────────
+
+function showResetPassword(selector,token){
+  var c=tpl('tpl-reset-pw');
+  showSheet(c,false);
+  var pass=c.querySelector('.rp-pass'), errEl=c.querySelector('.login-err'), sub=c.querySelector('.rp-sub');
+  setTimeout(function(){pass.focus();},50);
+  sub.onclick=function(){
+    var pv=pass.value; if(!pv) return;
+    sub.disabled=true; sub.textContent='…';
+    api('POST','reset-password',{selector:selector,token:token,password:pv})
+      .then(function(){
+        var conf=tpl('tpl-pw-changed');
+        conf.querySelector('.pc-ok').onclick=function(){showLogin();};
+        showSheet(conf,false);
+      })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Passwort setzen';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Passwort ändern ───────────────────────────────────────────────────────────
+
+function showChangePassword(){
+  var c=tpl('tpl-change-pw');
+  showSheet(c,true);
+  var oldP=c.querySelector('.cp-old'), newP=c.querySelector('.cp-new'), newP2=c.querySelector('.cp-new2');
+  var errEl=c.querySelector('.login-err'), sub=c.querySelector('.cp-sub');
+  setTimeout(function(){oldP.focus();},50);
+  c.querySelector('.cp-can').onclick=closeOv;
+  sub.onclick=function(){
+    var o=oldP.value, n=newP.value, n2=newP2.value;
+    if(!o||!n||!n2) return;
+    if(n!==n2){ errEl.textContent='Die neuen Passwörter stimmen nicht überein'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','change-password',{old_password:o,new_password:n})
+      .then(function(){ showToast('Passwort geändert'); closeOv(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Ändern';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Registrierung ─────────────────────────────────────────────────────────────
+
+function showRegister(token){
+  var c=tpl('tpl-register');
+  showSheet(c,false);
+  var nameInp=c.querySelector('.rg-name'), email=c.querySelector('.rg-email');
+  var pass=c.querySelector('.rg-pass'), pass2=c.querySelector('.rg-pass2');
+  var errEl=c.querySelector('.login-err'), sub=c.querySelector('.rg-sub');
+  setTimeout(function(){nameInp.focus();},50);
+  nameInp.onkeydown=function(e){if(e.key==='Enter')email.focus();};
+  email.onkeydown=function(e){if(e.key==='Enter')pass.focus();};
+  pass.onkeydown=function(e){if(e.key==='Enter')pass2.focus();};
+  pass2.onkeydown=function(e){if(e.key==='Enter')sub.click();};
+  function checkMatch(){ if(pass2.value&&pass.value!==pass2.value){ errEl.textContent='Passwörter stimmen nicht überein'; errEl.style.display=''; } else { errEl.style.display='none'; } }
+  pass.oninput=checkMatch; pass2.oninput=checkMatch;
+  sub.onclick=function(){
+    var nv=nameInp.value.trim(), ev=email.value.trim(), pv=pass.value;
+    if(!nv||!ev||!pv){ errEl.textContent='Bitte alle Felder ausfüllen'; errEl.style.display=''; return; }
+    if(pv!==pass2.value){ errEl.textContent='Passwörter stimmen nicht überein'; errEl.style.display=''; return; }
+    sub.disabled=true; sub.textContent='…';
+    api('POST','register',{name:nv,email:ev,password:pv,token:token})
+      .then(function(r){ userName=r.name||''; return loadGoals(); })
+      .then(function(g){ goals=g; closeOv(); updateHeader(); render(); })
+      .catch(function(err){
+        sub.disabled=false; sub.textContent='Registrieren';
+        errEl.textContent=err.message||'Fehler'; errEl.style.display='';
+      });
+  };
+}
+
+// ── Neues Ziel ────────────────────────────────────────────────────────────────
+
+function openNew(){
+  var c=tpl('tpl-new-goal');
+  showSheet(c,true);
+  var name=c.querySelector('.ng-name'), unit=c.querySelector('.ng-unit');
+  var daily=c.querySelector('.ng-daily'), days=c.querySelector('.ng-days'), sub=c.querySelector('.ng-sub');
+  setTimeout(function(){name.focus();},50);
+  c.querySelector('.ng-can').onclick=closeOv;
+  sub.onclick=function(){
+    var nv=(name.value||'').trim(), uv=(unit.value||'').trim()||'Stück';
+    var dv=parseInt(daily.value,10)||1, dyv=parseInt(days.value,10)||30;
+    if(!nv){ name.focus(); return; }
+    sub.disabled=true;
+    api('POST','goals',{name:nv,unit:uv,daily:dv,days:dyv,start:TODAY.toISOString()})
+      .then(function(r){
+        goals.push({id:r.id,name:r.name,unit:r.unit,daily:r.daily,days:r.days,start:r.start,sets:r.sets||{}});
+        closeOv(); render();
+      }).catch(function(e){
+        sub.disabled=false;
+        if(e.status===401){ closeOv(); showLogin(); }
+        else showToast('Fehler beim Erstellen');
+      });
+  };
+}
+
+// ── Daten-Menü ────────────────────────────────────────────────────────────────
+
+function openData(){
+  var c=tpl('tpl-data-menu');
+  showSheet(c,true);
+  c.querySelector('.dm-cls').onclick=closeOv;
+  c.querySelector('.dm-name').onclick=function(){
+    var nc=tpl('tpl-change-name');
+    showSheet(nc,true);
+    var inp=nc.querySelector('.cn-name'), errEl=nc.querySelector('.login-err'), sub=nc.querySelector('.cn-sub');
+    inp.value=userName;
+    setTimeout(function(){inp.focus();inp.select();},50);
+    nc.querySelector('.cn-can').onclick=closeOv;
+    sub.onclick=function(){
+      var nv=inp.value.trim();
+      if(!nv){ errEl.textContent='Name darf nicht leer sein'; errEl.style.display=''; return; }
+      sub.disabled=true; sub.textContent='…';
+      api('PATCH','me',{name:nv})
+        .then(function(r){ userName=r.name; closeOv(); render(); showToast('Name gespeichert'); })
+        .catch(function(){ sub.disabled=false; sub.textContent='Speichern'; showToast('Fehler beim Speichern'); });
+    };
+  };
+  c.querySelector('.dm-cpw').onclick=function(){ closeOv(); showChangePassword(); };
+  c.querySelector('.dm-lgout').onclick=function(){
+    api('POST','logout').then(function(){ goals=[]; closeOv(); render(); showLogin(); });
+  };
+
+  c.querySelector('.dm-inv').onclick=function(){
+    var ic=tpl('tpl-invite-form');
+    showSheet(ic,true);
+    var invName=ic.querySelector('.inv-name');
+    setTimeout(function(){invName.focus();},50);
+    ic.querySelector('.inv-cancel').onclick=closeOv;
+    ic.querySelector('.inv-gen').onclick=function(){
+      var note=invName.value.trim(), btn=this;
+      btn.disabled=true; btn.textContent='…';
+      api('POST','invite',{note:note}).then(function(res){
+        var lc=tpl('tpl-invite-link');
+        lc.querySelector('.stitle').textContent='Einladungslink'+(note?' für '+note:'');
+        var urlInp=lc.querySelector('.il-url');
+        urlInp.value=res.url;
+        showSheet(lc,true);
+        lc.querySelector('.il-close').onclick=closeOv;
+        lc.querySelector('.il-copy').onclick=function(){
+          navigator.clipboard.writeText(res.url).then(function(){ showToast('Link kopiert!'); closeOv(); });
+        };
+        setTimeout(function(){urlInp.select();},50);
+      }).catch(function(){
+        btn.disabled=false; btn.textContent='Link generieren';
+        showToast('Fehler beim Generieren');
+      });
+    };
+  };
+
+  c.querySelector('.dm-invlist').onclick=function(){
+    api('GET','invites').then(function(list){
+      var statusLabel={'pending':'Ausstehend','used':'Angenommen','expired':'Abgelaufen'};
+      var statusColor={'pending':'var(--amber)','used':'var(--green)','expired':'var(--red)'};
+      var lc=tpl('tpl-invite-list');
+      var body=lc.querySelector('.dpanel-body');
+      if(!list.length){
+        var empty=document.createElement('div');
+        empty.className='nosets'; empty.style.padding='16px';
+        empty.textContent='Noch keine Einladungen verschickt';
+        body.appendChild(empty);
+      } else {
+        for(var i=0;i<list.length;i++){
+          var inv=list[i];
+          var label=inv.note||new Date(inv.created_at).toLocaleDateString('de-DE',{day:'numeric',month:'short',year:'numeric'});
+          var detail=inv.used_by_email?('→ '+inv.used_by_email):(inv.status==='pending'?'läuft ab: '+new Date(inv.expires_at).toLocaleDateString('de-DE',{day:'numeric',month:'short'}):'');
+          var row=tpl('tpl-invite-row');
+          row.querySelector('.ir-label').textContent=label;
+          if(detail) row.querySelector('.ir-detail').textContent=' '+detail;
+          var st=row.querySelector('.ir-status');
+          st.textContent=statusLabel[inv.status]; st.style.color=statusColor[inv.status];
+          if(inv.url){
+            var cp=row.querySelector('.ir-copy'); cp.style.display='';
+            cp.onclick=function(url){ return function(){ navigator.clipboard.writeText(url).then(function(){ showToast('Link kopiert!'); }); }; }(inv.url);
+          }
+          body.appendChild(row);
+        }
+      }
+      showSheet(lc,true);
+      lc.querySelector('.il-close').onclick=closeOv;
+    }).catch(function(){ showToast('Fehler beim Laden'); });
+  };
+
+  c.querySelector('.dm-exp').onclick=function(){
+    var blob=new Blob([JSON.stringify({goals:goals,at:new Date().toISOString()},null,2)],{type:'application/json'});
+    var url=URL.createObjectURL(blob), a=document.createElement('a');
+    a.href=url; a.download='dudi-backup.json'; a.click(); URL.revokeObjectURL(url); closeOv();
+  };
+
+  c.querySelector('.dm-imp').onclick=function(){
+    var inp=document.createElement('input'); inp.type='file'; inp.accept='.json';
+    inp.onchange=function(e){
+      var f=e.target.files[0]; if(!f) return;
+      var r=new FileReader(); r.onload=function(ev){
+        try{
+          var p=JSON.parse(ev.target.result);
+          if(!p.goals||!Array.isArray(p.goals)) throw new Error('Ungültiges Format');
+          if(!confirm(p.goals.length+' Ziel(e) importieren?')) return;
+          var promises=p.goals.map(function(g){
+            return api('POST','goals',{name:g.name,unit:g.unit,daily:g.daily,days:g.days,start:g.start,sets:g.sets||{}})
+              .then(function(r){ goals.push({id:r.id,name:r.name,unit:r.unit,daily:r.daily,days:r.days,start:r.start,sets:r.sets||{}}); });
+          });
+          Promise.all(promises).then(function(){ closeOv(); render(); alert(p.goals.length+' Ziel(e) importiert.'); });
+        }catch(err){ alert('Fehler: '+err.message); }
+      }; r.readAsText(f);
+    }; inp.click();
+  };
+
+  c.querySelector('.dm-clr').onclick=function(){
+    if(!confirm('Alle Daten löschen?')) return;
+    var ids=goals.map(function(g){return g.id;}); goals=[]; render();
+    Promise.all(ids.map(function(id){return api('DELETE','goals/'+id);}))
+      .catch(function(){ showToast('Fehler beim Löschen'); });
+    closeOv();
+  };
+}
+
+// ── Card-Bausteine ────────────────────────────────────────────────────────────
+
+function buildNameWrap(g){
+  if(renamingId===g.id){
+    var el=tpl('tpl-name-edit');
+    var inp=el.querySelector('.ren-input');
+    inp.id='ri'+g.id; inp.value=g.name; inp.dataset.g=g.id;
+    return el;
+  }
+  var el=tpl('tpl-name-view');
+  el.querySelector('.goal-name').textContent=g.name;
+  el.querySelector('.btn-ren').dataset.g=g.id;
+  return el;
+}
+
+function buildPanel(g,off){
+  var t=tOff(g), sets=g.sets[String(off)]||[], tot=dTot(g,off);
+  var lbl=off===t?'Heute':'Gestern', k=g.id+'_'+off;
+  var el=tpl('tpl-panel');
+  el.querySelector('.dpanel-title').textContent=lbl+' — '+fd(o2d(g,off));
+  el.querySelector('.dpanel-sub').textContent=tot+' / '+g.daily+' '+g.unit;
+  var body=el.querySelector('.dpanel-body');
+  if(sets.length){
+    for(var i=0;i<sets.length;i++){
+      var s=sets[i], row=tpl('tpl-set-row'), span=row.querySelector('span');
+      if(s.time!=='—'){
+        var st=document.createElement('span'); st.className='stime'; st.textContent=s.time+' ·';
+        span.appendChild(st); span.appendChild(document.createTextNode(' '));
+      }
+      var strong=document.createElement('strong'); strong.textContent=s.amount;
+      span.appendChild(strong); span.appendChild(document.createTextNode(' '+g.unit));
+      var btn=row.querySelector('.sdel');
+      btn.dataset.g=g.id; btn.dataset.o=off; btn.dataset.i=i;
+      body.appendChild(row);
+    }
+  } else {
+    body.appendChild(tpl('tpl-nosets'));
+  }
+  var addRow=tpl('tpl-add-row');
+  var inp=addRow.querySelector('.num-in');
+  inp.placeholder=g.daily; inp.value=addAmt[k]||''; inp.dataset.k=k; inp.dataset.g=g.id; inp.dataset.o=off;
+  var abtn=addRow.querySelector('.btn-as');
+  abtn.dataset.g=g.id; abtn.dataset.o=off;
+  addRow.querySelector('.ulbl').textContent=g.unit;
+  body.appendChild(addRow);
+  return el;
+}
+
+function buildCard(g){
+  var c=calc(g), t=c.tOff;
+  var fc=c.surplus>0?'var(--blue)':c.st===0?'var(--green)':c.dailyDelta<=0?'var(--green)':c.dailyDelta<=g.daily*.2?'var(--amber)':'var(--red)';
+  var bc,bt,bufStr=(c.buf>0?'+':'')+c.buf;
+  if(c.ok&&c.surplus>0){bc='b-buf';bt=bufStr;}
+  else if(c.ok){bc='b-done';bt=bufStr;}
+  else if(c.dailyDelta<=0){bc='b-ok';bt=bufStr;}
+  else if(c.dailyDelta<=g.daily*.2){bc='b-warn';bt=bufStr;}
+  else{bc='b-danger';bt=bufStr;}
+
+  var el;
+  if(isCollapsed(g.id)){
+    el=tpl('tpl-card-collapsed');
+    if(c.ok) el.classList.add('done');
+    el.querySelector('.card-hdr').dataset.g=g.id;
+    var bd=el.querySelector('.card-bd');
+    bd.insertBefore(buildNameWrap(g),bd.firstElementChild);
+    var hc=heuteColor(c.tdone,g.daily);
+    el.querySelector('.m-dr').textContent=c.dr;
+    el.querySelector('.m-end').textContent=fs(c.end);
+    var mH=el.querySelector('.m-heute'); mH.textContent=c.tdone+'/'+g.daily; mH.style.color=hc;
+    el.querySelector('.m-total').textContent=c.done+'/'+c.tot;
+    var badge=el.querySelector('.badge'); badge.className='badge '+bc; badge.textContent=bt;
+    var fill=el.querySelector('.prog-fill'); fill.style.width=c.pct+'%'; fill.style.background=fc;
+    return el;
+  }
+
+  el=tpl('tpl-card-expanded');
+  if(c.ok) el.classList.add('done');
+  el.querySelector('.card-hdr').dataset.g=g.id;
+  var bd=el.querySelector('.card-bd');
+  bd.insertBefore(buildNameWrap(g),bd.firstElementChild);
+  el.querySelector('.m-dr').textContent=c.dr;
+  el.querySelector('.m-end').textContent=fs(c.end);
+  var badge=el.querySelector('.badge'); badge.className='badge '+bc; badge.textContent=bt;
+  var fill=el.querySelector('.prog-fill'); fill.style.width=c.pct+'%'; fill.style.background=fc;
+  el.querySelector('.pr-done').textContent=c.done+' '+g.unit+' gemacht';
+  el.querySelector('.pr-pct').textContent=c.pct+'% von '+c.tot;
+  el.querySelector('.sv-tdone').textContent=c.tdone;
+  el.querySelector('.sv-daily').textContent=g.daily;
+  el.querySelector('.sv-st').textContent=c.st;
+  el.querySelector('.sv-noch').style.color=heuteColor(c.tdone,g.daily);
+  el.querySelectorAll('.sunit').forEach(function(u){ u.textContent=g.unit; });
+
+  var sel=selDay[g.id]!=null?selDay[g.id]:t;
+  var dotsWrap=el.querySelector('.dots-wrap');
+  for(var i=0;i<g.days;i++){
+    var it=i===t, iy=i===t-1, is=sel===i, ed=editable(g,i);
+    var dot=tpl('tpl-dot');
+    dot.className=dcls(g,i)+(is?' rs':it?' rt':iy&&t>0?' ry':'');
+    if(ed){ dot.dataset.g=g.id; dot.dataset.d=i; }
+    dot.textContent=dlbl(g,i);
+    dotsWrap.appendChild(dot);
+  }
+
+  if(sel!=null) el.insertBefore(buildPanel(g,sel),el.querySelector('.card-foot'));
+  el.querySelector('.btn-del').dataset.g=g.id;
+  return el;
+}
+
+// ── Quick-Buchen ──────────────────────────────────────────────────────────────
+
+function buildQuickBook(){
+  var active=goals.filter(function(g){ var c=calc(g); return tOff(g)<g.days&&!c.ok; });
+  if(!active.length) return null;
+  var frag=document.createDocumentFragment();
+  var lbl=document.createElement('div'); lbl.className='sec-lbl'; lbl.textContent='Quick-Buchen';
+  frag.appendChild(lbl);
+  var card=document.createElement('div'); card.className='card qb-card';
+  for(var i=0;i<active.length;i++){
+    var g=active[i], c=calc(g), k=g.id+'_'+c.tOff;
+    var row=tpl('tpl-qb-row');
+    row.querySelector('.qb-name').textContent=g.name;
+    var stat=row.querySelector('.qb-stat'); stat.textContent=c.tdone+'/'+g.daily; stat.style.color=heuteColor(c.tdone,g.daily);
+    var inp=row.querySelector('.num-in');
+    inp.placeholder=g.daily; inp.value=addAmt[k]||''; inp.dataset.k=k; inp.dataset.g=g.id; inp.dataset.o=c.tOff;
+    var btn=row.querySelector('.btn-as'); btn.dataset.g=g.id; btn.dataset.o=c.tOff;
+    card.appendChild(row);
+  }
+  frag.appendChild(card);
+  return frag;
+}
+
+// ── Render ────────────────────────────────────────────────────────────────────
+
+function calcAwards(){
+  var units=0;
+  for(var i=0;i<goals.length;i++){
+    var g=goals[i];
+    if(tOff(g)>=g.days) units+=Math.floor(g.days/30);
+  }
+  var gold=Math.floor(units/25); units%=25;
+  var silver=Math.floor(units/5); var bronze=units%5;
+  return{gold:gold,silver:silver,bronze:bronze};
+}
+
+function render(){
+  var m=document.getElementById('main');
+  var frag=document.createDocumentFragment();
+
+  if(!prefs.hd){
+    var hint=tpl('tpl-hint');
+    hint.querySelector('.hclose').onclick=function(){ prefs.hd=1; saveP(); hint.remove(); };
+    frag.appendChild(hint);
+  }
+
+  var aw=calcAwards();
+  if(aw.gold||aw.silver||aw.bronze){
+    var awards=document.createElement('div'); awards.className='awards';
+    var medals=[['🥇',aw.gold],['🥈',aw.silver],['🥉',aw.bronze]];
+    for(var mi=0;mi<medals.length;mi++){
+      for(var ai=0;ai<medals[mi][1];ai++){
+        var sp=document.createElement('span'); sp.className='aw'; sp.textContent=medals[mi][0];
+        awards.appendChild(sp);
+      }
+    }
+    frag.appendChild(awards);
+  }
+
+  if(!goals.length){
+    frag.appendChild(tpl('tpl-empty'));
+    m.innerHTML=''; m.appendChild(frag); wire(); return;
+  }
+
+  if(userName){
+    var gr=document.createElement('div'); gr.className='greeting'; gr.textContent='Hallo '+userName+'!';
+    frag.appendChild(gr);
+  }
+
+  var qb=buildQuickBook(); if(qb) frag.appendChild(qb);
+
+  var open=[],done=[];
+  for(var gi=0;gi<goals.length;gi++){
+    var g=goals[gi], c=calc(g);
+    if(c.ok) done.push(g); else open.push(g);
+  }
+  if(open.length){
+    var sl=document.createElement('div'); sl.className='sec-lbl'; sl.textContent='Offen';
+    frag.appendChild(sl);
+    for(var i=0;i<open.length;i++) frag.appendChild(buildCard(open[i]));
+  }
+  if(done.length){
+    var sl2=document.createElement('div'); sl2.className='sec-lbl'; sl2.textContent='Heute erledigt';
+    frag.appendChild(sl2);
+    for(var j=0;j<done.length;j++) frag.appendChild(buildCard(done[j]));
+  }
+
+  m.innerHTML=''; m.appendChild(frag); wire();
+}
+
+function wire(){
+  document.querySelectorAll('.card-hdr[data-g]').forEach(function(el){
+    el.onclick=function(e){
+      if(e.target.classList.contains('btn-ren')||e.target.classList.contains('ren-input')) return;
+      toggleCollapse(this.dataset.g);
+    };
+  });
+  document.querySelectorAll('.btn-ren').forEach(function(b){
+    b.onclick=function(e){e.stopPropagation();startRen(this.dataset.g);};
+  });
+  document.querySelectorAll('.ren-input').forEach(function(inp){
+    var gid=inp.dataset.g;
+    inp.oninput=function(){renameVal=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')commitRen(gid);if(e.key==='Escape')cancelRen();};
+    inp.onblur=function(){commitRen(gid);};
+  });
+  document.querySelectorAll('.de').forEach(function(d){
+    d.onclick=function(e){e.stopPropagation();selD(this.dataset.g,parseInt(this.dataset.d,10));};
+  });
+  document.querySelectorAll('.btn-as').forEach(function(b){
+    b.onclick=function(){addSet(this.dataset.g,parseInt(this.dataset.o,10));};
+  });
+  document.querySelectorAll('.num-in').forEach(function(inp){
+    var k=inp.dataset.k, g=inp.dataset.g, o=parseInt(inp.dataset.o,10);
+    inp.oninput=function(){addAmt[k]=this.value;};
+    inp.onkeydown=function(e){if(e.key==='Enter')addSet(g,o);};
+  });
+  document.querySelectorAll('.sdel').forEach(function(b){
+    b.onclick=function(){remSet(this.dataset.g,parseInt(this.dataset.o,10),parseInt(this.dataset.i,10));};
+  });
+  document.querySelectorAll('.btn-del').forEach(function(b){
+    b.onclick=function(){delGoal(this.dataset.g);};
+  });
+}
+
+// ── Start ─────────────────────────────────────────────────────────────────────
+
+function updateHeader(){
+  document.getElementById('tlbl').textContent=TODAY.toLocaleDateString('de-DE',{weekday:'long',day:'numeric',month:'long'});
+}
+
+document.getElementById('btnNew').onclick=openNew;
+document.getElementById('btnData').onclick=openData;
+updateHeader();
+
+var _qs=new URLSearchParams(window.location.search);
+var inviteToken=_qs.get('invite');
+var resetSelector=_qs.get('reset_selector');
+var resetToken=_qs.get('reset_token');
+if(inviteToken||resetSelector) history.replaceState(null,'',location.pathname);
+
+if(resetSelector&&resetToken){
+  render(); showResetPassword(resetSelector,resetToken);
+} else {
+  api('GET','me')
+    .then(function(r){ userName=r.name||''; updateHeader(); return loadGoals(); })
+    .then(function(g){ goals=g; render(); })
+    .catch(function(){
+      render();
+      if(inviteToken){ showRegister(inviteToken); }
+      else { showLogin(); }
+    });
+}
+
+function scheduleMidnight(){
+  var n=new Date();
+  var ms=new Date(n.getFullYear(),n.getMonth(),n.getDate()+1,0,0,5).getTime()-n.getTime();
+  setTimeout(function(){
+    TODAY=new Date();TODAY.setHours(0,0,0,0);selDay={};collapsed={};
+    updateHeader();render();scheduleMidnight();
+  },ms);
+}
+scheduleMidnight();
+
+document.addEventListener('visibilitychange',function(){
+  if(document.visibilityState==='visible'){
+    var n=new Date();n.setHours(0,0,0,0);
+    if(n.getTime()!==TODAY.getTime()){TODAY=n;selDay={};collapsed={};render();scheduleMidnight();}
+    loadGoals().then(function(g){goals=g;render();}).catch(function(){});
+  }
+});
diff --git a/public/index.php b/public/index.php
new file mode 100644
index 0000000..c0037a8
--- /dev/null
+++ b/public/index.php
@@ -0,0 +1,9 @@
+<?php
+
+use App\Kernel;
+
+require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
+
+return static function (array $context) {
+    return new Kernel($context['APP_ENV'], (bool) $context['APP_DEBUG']);
+};
diff --git a/public/logo.png b/public/logo.png
new file mode 100644
index 0000000..a194b03
Binary files /dev/null and b/public/logo.png differ
diff --git a/public/style.css b/public/style.css
new file mode 100644
index 0000000..6252ca9
--- /dev/null
+++ b/public/style.css
@@ -0,0 +1,113 @@
+@import url('https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600&family=DM+Mono:wght@400;500&display=swap');
+:root{--bg:#f5f4f0;--bg2:#fff;--bg3:#f0eeea;--border:rgba(0,0,0,.07);--border2:rgba(0,0,0,.12);--text:#1a1a1a;--text2:#666;--text3:#aaa;--green:#16a34a;--green-bg:rgba(22,163,74,.08);--blue:#2563eb;--blue-bg:rgba(37,99,235,.08);--amber:#d97706;--amber-bg:rgba(217,119,6,.08);--red:#dc2626;--red-bg:rgba(220,38,38,.08);--r:14px;--rs:8px}
+*{box-sizing:border-box;margin:0;padding:0;-webkit-tap-highlight-color:transparent}
+body{font-family:'DM Sans',sans-serif;background:var(--bg);color:var(--text);min-height:100dvh;padding-bottom:80px}
+.main-wrap{max-width:480px;margin:0 auto}
+.hdr{position:sticky;top:0;z-index:100;background:rgba(245,244,240,.92);backdrop-filter:blur(12px);-webkit-backdrop-filter:blur(12px);border-bottom:1px solid var(--border);padding:16px 20px 14px;display:flex;align-items:center;justify-content:space-between}
+.hdr-title{font-size:18px;font-weight:600;letter-spacing:-.3px}
+.hdr-logo{height:100px;width:auto;mix-blend-mode:multiply;display:block}
+.hdr-sub{font-size:12px;color:var(--text3);margin-top:1px;font-family:'DM Mono',monospace}
+.hdr-btns{display:flex;gap:8px;align-items:center}
+.btn-add{width:38px;height:38px;border-radius:50%;background:var(--text);color:var(--bg);border:none;cursor:pointer;font-size:22px;display:flex;align-items:center;justify-content:center;font-weight:300;transition:transform .15s}
+.btn-add:active{transform:scale(.92)}
+.btn-menu{width:38px;height:38px;border-radius:50%;background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-size:20px;display:flex;align-items:center;justify-content:center;transition:transform .15s}
+.btn-menu:active{transform:scale(.92)}
+.main{padding:16px 16px 0}
+.greeting{font-size:17px;font-weight:600;letter-spacing:-.2px;padding:0 2px 10px}
+.sec-lbl{font-size:10px;color:var(--text3);text-transform:uppercase;letter-spacing:.6px;font-family:'DM Mono',monospace;margin-bottom:6px;margin-top:4px;padding:0 2px}
+.empty{text-align:center;padding:60px 20px;color:var(--text3);font-size:14px;line-height:1.8}
+.card{background:var(--bg2);border:1px solid var(--border);border-radius:var(--r);margin-bottom:8px;overflow:hidden}
+.card.done{opacity:.7}
+.card-hdr{padding:14px 16px 12px;display:flex;align-items:center;justify-content:space-between;gap:10px;cursor:pointer;user-select:none}
+.name-wrap{display:flex;align-items:center;gap:6px}
+.goal-name{font-size:16px;font-weight:600;letter-spacing:-.2px}
+.btn-ren{background:none;border:none;color:var(--text3);cursor:pointer;font-size:14px;padding:2px 4px;line-height:1;flex-shrink:0}
+.btn-ren:active{color:var(--blue)}
+.ren-input{font-family:'DM Sans',sans-serif;font-size:16px;font-weight:600;background:var(--bg3);border:1px solid var(--blue);border-radius:6px;color:var(--text);padding:2px 8px;width:100%;letter-spacing:-.2px}
+.ren-input:focus{outline:none}
+.goal-meta{font-size:11px;color:var(--text3);margin-top:3px;font-family:'DM Mono',monospace;line-height:1.5}
+.chevron{font-size:13px;color:var(--text3);margin-left:4px;flex-shrink:0}
+.badge{font-size:10px;font-weight:600;padding:3px 8px;border-radius:99px;white-space:nowrap;flex-shrink:0;letter-spacing:.3px;text-transform:uppercase}
+.b-ok{background:var(--green-bg);color:var(--green)}.b-done{background:var(--green-bg);color:var(--green)}.b-warn{background:var(--amber-bg);color:var(--amber)}.b-danger{background:var(--red-bg);color:var(--red)}.b-buf{background:var(--blue-bg);color:var(--blue)}
+.prog-wrap{padding:0 16px 12px}
+.prog-track{height:4px;background:var(--bg3);border-radius:99px;overflow:hidden}
+.prog-fill{height:100%;border-radius:99px;transition:width .4s ease}
+.prog-row{display:flex;justify-content:space-between;font-size:11px;color:var(--text3);margin-top:5px;font-family:'DM Mono',monospace}
+.heute-stats{padding:0 16px 14px}
+.heute-group{background:var(--bg3);border-radius:var(--rs);padding:8px 8px 6px}
+.heute-lbl{font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;text-align:center;margin-bottom:6px;font-family:'DM Mono',monospace}
+.heute-inner{display:grid;grid-template-columns:1fr 1fr 1fr;gap:5px}
+.stat{background:var(--bg2);border-radius:6px;padding:7px 6px 5px;text-align:center}
+.slbl{font-size:9px;color:var(--text3);margin-bottom:2px}
+.sval{font-size:14px;font-weight:600;font-family:'DM Mono',monospace}
+.sunit{font-size:8px;color:var(--text3)}
+.dots-sec{padding:0 16px 12px}
+.dots-lbl{font-size:11px;color:var(--text3);margin-bottom:6px}
+.dots-wrap{display:flex;gap:3px;flex-wrap:wrap}
+.dot{width:26px;height:26px;border-radius:5px;display:flex;align-items:center;justify-content:center;font-size:8px;font-weight:600;font-family:'DM Mono',monospace;transition:opacity .15s}
+.df{background:var(--bg3);color:var(--text3)}
+.dm{background:rgba(220,38,38,.12);color:var(--red)}
+.dp{background:rgba(217,119,6,.12);color:var(--amber)}
+.dd{background:rgba(22,163,74,.12);color:var(--green)}
+.db{background:rgba(37,99,235,.12);color:var(--blue)}
+.de{cursor:pointer}.de:active{opacity:.6;transform:scale(.9)}.dl{opacity:.6;cursor:default}
+.rt{box-shadow:0 0 0 2px var(--text2)}.ry{box-shadow:0 0 0 2px var(--text3)}.rs{box-shadow:0 0 0 2px var(--blue) !important}
+.legend{display:flex;gap:10px;flex-wrap:wrap;margin-top:8px}
+.leg{display:flex;align-items:center;gap:4px;font-size:10px;color:var(--text3)}
+.ldot{width:8px;height:8px;border-radius:2px}
+.dpanel{margin:0 16px 14px;background:var(--bg3);border-radius:var(--rs);overflow:hidden;border:1px solid var(--border2)}
+.dpanel-hdr{padding:10px 12px;display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid var(--border)}
+.dpanel-title{font-size:13px;font-weight:600}
+.dpanel-sub{font-size:11px;color:var(--text2);font-family:'DM Mono',monospace}
+.dpanel-body{padding:10px 12px}
+.set-row{display:flex;align-items:center;justify-content:space-between;padding:5px 0;border-bottom:1px solid var(--border);font-size:13px}
+.set-row:last-of-type{border-bottom:none}
+.stime{font-size:10px;color:var(--text3);font-family:'DM Mono',monospace;margin-right:4px}
+.sdel{background:none;border:none;color:var(--text3);cursor:pointer;font-size:16px;padding:2px 6px;border-radius:4px}
+.sdel:active{color:var(--red)}
+.add-row{display:flex;gap:8px;align-items:center;margin-top:10px}
+.num-in{font-family:'DM Mono',monospace;font-size:15px;padding:8px 10px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg2);color:var(--text);width:90px;text-align:center}
+.num-in:focus{outline:none;border-color:var(--blue)}
+.ulbl{font-size:12px;color:var(--text3)}
+.btn-as{flex:1;padding:8px;border-radius:var(--rs);background:var(--blue-bg);color:var(--blue);border:1px solid rgba(37,99,235,.2);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:13px;font-weight:600}
+.btn-as:active{opacity:.7}
+.nosets{font-size:12px;color:var(--text3);padding:4px 0 8px}
+.card-foot{padding:8px 16px 12px;display:flex;justify-content:flex-end}
+.btn-del{background:none;border:none;color:var(--text3);font-size:12px;cursor:pointer;padding:4px 0;font-family:'DM Sans',sans-serif}
+.btn-del:active{color:var(--red)}
+.qb-card{padding:0 16px}
+.qb-row{display:flex;align-items:center;gap:8px;padding:10px 0;border-bottom:1px solid var(--border)}
+.qb-row:last-child{border-bottom:none}
+.qb-name{flex:1;font-size:16px;font-weight:600;letter-spacing:-.2px;overflow:hidden;white-space:nowrap;text-overflow:ellipsis;min-width:0}
+.qb-stat{font-size:11px;font-family:'DM Mono',monospace;color:var(--text3);white-space:nowrap}
+.qb-row .num-in{width:62px;padding:6px 6px;font-size:13px}
+.qb-row .btn-as{flex:none;padding:8px 14px;font-size:13px}
+.ov{position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);display:flex;align-items:flex-end;animation:fi .2s ease}
+@keyframes fi{from{opacity:0}to{opacity:1}}
+.sheet{width:100%;max-width:480px;background:var(--bg2);border-radius:20px 20px 0 0;border:1px solid var(--border2);padding:20px 20px 40px;animation:su .25s ease;max-height:90dvh;overflow-y:auto}
+@keyframes su{from{transform:translateY(100%)}to{transform:translateY(0)}}
+.shandle{width:36px;height:4px;border-radius:2px;background:var(--border2);margin:0 auto 20px}
+.stitle{font-size:17px;font-weight:600;margin-bottom:4px}
+.ssub{font-size:12px;color:var(--text3);margin-bottom:16px}
+.fgrid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
+.ff{margin-bottom:10px}
+.ff label{font-size:11px;color:var(--text3);display:block;margin-bottom:4px;text-transform:uppercase;letter-spacing:.5px}
+.fi{width:100%;font-family:'DM Sans',sans-serif;font-size:15px;padding:10px 12px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg3);color:var(--text)}
+.fi:focus{outline:none;border-color:var(--blue)}
+.factions{display:flex;gap:8px;margin-top:16px}
+.btn-p{flex:1;padding:13px;border-radius:var(--rs);background:var(--text);color:var(--bg);border:none;cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px;font-weight:600}
+.btn-p:active{opacity:.8}
+.btn-c{padding:13px 20px;border-radius:var(--rs);background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px}
+.dbtn{width:100%;padding:13px 16px;border-radius:var(--rs);background:var(--bg3);border:1px solid var(--border);color:var(--text);font-family:'DM Sans',sans-serif;font-size:15px;text-align:left;cursor:pointer;margin-bottom:8px;display:flex;align-items:center;gap:12px}
+.dbtn:active{background:var(--border2)}
+.dico{font-size:18px;width:24px;text-align:center;flex-shrink:0}
+.dlbl{flex:1}.dsub{font-size:11px;color:var(--text3);display:block;margin-top:1px}
+.ddanger{color:var(--red)}
+.ddiv{height:1px;background:var(--border);margin:12px 0}
+.awards{display:flex;gap:4px;align-items:center;flex-wrap:wrap;padding:0 16px 10px}
+.aw{font-size:24px;line-height:1}
+.login-err{background:var(--red-bg);color:var(--red);border-radius:var(--rs);padding:10px 12px;font-size:13px;margin-bottom:12px}
+.toast{position:fixed;bottom:100px;left:50%;transform:translateX(-50%);background:#1a1a1a;color:#fff;padding:10px 16px;border-radius:8px;font-size:13px;z-index:300;white-space:nowrap;animation:fi .2s ease}
+.hint{margin:0 16px 12px;background:var(--blue-bg);border:1px solid rgba(37,99,235,.15);border-radius:var(--rs);padding:10px 12px;font-size:12px;color:var(--blue);line-height:1.5;display:flex;justify-content:space-between;align-items:center;gap:8px}
+.hclose{background:none;border:none;color:var(--blue);cursor:pointer;font-size:16px;padding:0 2px}
+.btn-lnk{background:none;border:none;color:var(--text2);font-size:13px;cursor:pointer;padding:4px 8px;text-decoration:underline;text-underline-offset:2px}
diff --git a/src/Controller/.gitignore b/src/Controller/.gitignore
new file mode 100644
index 0000000..e69de29
diff --git a/src/Controller/AppController.php b/src/Controller/AppController.php
new file mode 100644
index 0000000..3dbb872
--- /dev/null
+++ b/src/Controller/AppController.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Controller;
+
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+
+class AppController extends AbstractController
+{
+    #[Route('/{path}', name: 'app', requirements: ['path' => '.*'], priority: -10)]
+    public function index(): Response
+    {
+        return $this->render('app.html.twig');
+    }
+}
diff --git a/src/Controller/AuthController.php b/src/Controller/AuthController.php
new file mode 100644
index 0000000..3788b13
--- /dev/null
+++ b/src/Controller/AuthController.php
@@ -0,0 +1,212 @@
+<?php
+
+namespace App\Controller;
+
+use App\Entity\User;
+use App\Repository\InviteRepository;
+use App\Repository\UserRepository;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Mailer\MailerInterface;
+use Symfony\Component\Mime\Email;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
+
+#[Route('/api')]
+class AuthController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface $em,
+        private readonly UserRepository $users,
+    ) {}
+
+    #[Route('/me', methods: ['GET'])]
+    public function me(): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['ok' => false], Response::HTTP_UNAUTHORIZED);
+        }
+        return new JsonResponse([
+            'ok'    => true,
+            'email' => $user->getEmail(),
+            'id'    => $user->getId(),
+            'name'  => $user->getUsername() ?? '',
+        ]);
+    }
+
+    #[Route('/me', methods: ['PATCH'])]
+    public function updateMe(Request $request): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+        $data = json_decode($request->getContent(), true) ?? [];
+        $name = trim($data['name'] ?? '');
+        if (!$name) {
+            return new JsonResponse(['error' => 'Name fehlt'], Response::HTTP_BAD_REQUEST);
+        }
+        $user->setUsername($name);
+        $this->em->flush();
+        return new JsonResponse(['ok' => true, 'name' => $name]);
+    }
+
+    #[Route('/logout', methods: ['POST'])]
+    public function logout(): never
+    {
+        throw new \LogicException('Handled by firewall.');
+    }
+
+    #[Route('/register', methods: ['POST'])]
+    public function register(
+        Request $request,
+        InviteRepository $invites,
+        UserPasswordHasherInterface $hasher,
+    ): JsonResponse {
+        $data     = json_decode($request->getContent(), true) ?? [];
+        $email    = trim($data['email'] ?? '');
+        $password = $data['password'] ?? '';
+        $token    = trim($data['token'] ?? '');
+        $name     = trim($data['name'] ?? '');
+
+        if (!$email || !$password || !$token) {
+            return new JsonResponse(['error' => 'Fehlende Felder'], Response::HTTP_BAD_REQUEST);
+        }
+        if (strlen($password) < 8) {
+            return new JsonResponse(['error' => 'Passwort zu kurz (min. 8 Zeichen)'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $invite = $invites->findPendingByToken($token);
+        if (!$invite) {
+            return new JsonResponse(['error' => 'Ungültiger oder abgelaufener Einladungslink'], Response::HTTP_BAD_REQUEST);
+        }
+        if ($this->users->findOneBy(['email' => $email])) {
+            return new JsonResponse(['error' => 'E-Mail bereits registriert'], Response::HTTP_CONFLICT);
+        }
+
+        $user = new User();
+        $user->setEmail($email)
+             ->setPassword($hasher->hashPassword($user, $password))
+             ->setUsername($name ?: null)
+             ->setVerified(true);
+
+        $this->em->persist($user);
+        $this->em->flush(); // flush first to get user ID
+
+        $invite->setUsedBy($user->getId());
+        $invite->setUsedAt(new \DateTimeImmutable());
+        $this->em->flush();
+
+        return new JsonResponse(['ok' => true, 'email' => $email, 'name' => $name]);
+    }
+
+    #[Route('/reset-request', methods: ['POST'])]
+    public function resetRequest(Request $request, MailerInterface $mailer): JsonResponse
+    {
+        $data  = json_decode($request->getContent(), true) ?? [];
+        $email = trim($data['email'] ?? '');
+        if (!$email) {
+            return new JsonResponse(['error' => 'E-Mail fehlt'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $user = $this->users->findOneBy(['email' => $email]);
+        if ($user) {
+            $selector = bin2hex(random_bytes(12));
+            $token    = bin2hex(random_bytes(32));
+            $hash     = password_hash($token, PASSWORD_BCRYPT);
+            $expires  = time() + 86400;
+
+            $this->em->getConnection()->executeStatement(
+                'INSERT INTO users_resets (user, selector, token, expires) VALUES (?, ?, ?, ?)',
+                [$user->getId(), $selector, $hash, $expires]
+            );
+
+            $appUrl = $_ENV['APP_URL'] ?? 'http://localhost';
+            $url    = $appUrl . '/?reset_selector=' . rawurlencode($selector) . '&reset_token=' . rawurlencode($token);
+            $from   = $_ENV['MAILER_FROM'] ?? 'noreply@example.com';
+
+            $mail = (new Email())
+                ->from($from)
+                ->to($email)
+                ->subject('Dudi – Passwort zurücksetzen')
+                ->text("Hallo,\n\nklicke auf den folgenden Link um dein Passwort zurückzusetzen (gültig 24h):\n\n$url\n\nFalls du das nicht angefragt hast, ignoriere diese E-Mail.");
+
+            try {
+                $mailer->send($mail);
+            } catch (\Exception) {
+                return new JsonResponse(['error' => 'Mail konnte nicht gesendet werden'], Response::HTTP_INTERNAL_SERVER_ERROR);
+            }
+        }
+
+        return new JsonResponse(['ok' => true]);
+    }
+
+    #[Route('/reset-password', methods: ['POST'])]
+    public function resetPassword(Request $request, UserPasswordHasherInterface $hasher): JsonResponse
+    {
+        $data     = json_decode($request->getContent(), true) ?? [];
+        $selector = $data['selector'] ?? '';
+        $token    = $data['token'] ?? '';
+        $password = $data['password'] ?? '';
+
+        if (!$selector || !$token || !$password) {
+            return new JsonResponse(['error' => 'Fehlende Felder'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $row = $this->em->getConnection()->fetchAssociative(
+            'SELECT * FROM users_resets WHERE selector = ? AND expires > ?',
+            [$selector, time()]
+        );
+
+        if (!$row || !password_verify($token, $row['token'])) {
+            return new JsonResponse(['error' => 'Ungültiger oder abgelaufener Reset-Link'], Response::HTTP_BAD_REQUEST);
+        }
+        if (strlen($password) < 8) {
+            return new JsonResponse(['error' => 'Passwort zu kurz (min. 8 Zeichen)'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $user = $this->users->find($row['user']);
+        if (!$user) {
+            return new JsonResponse(['error' => 'Benutzer nicht gefunden'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $user->setPassword($hasher->hashPassword($user, $password));
+        $this->em->getConnection()->executeStatement('DELETE FROM users_resets WHERE selector = ?', [$selector]);
+        $this->em->flush();
+
+        return new JsonResponse(['ok' => true]);
+    }
+
+    #[Route('/change-password', methods: ['POST'])]
+    public function changePassword(Request $request, UserPasswordHasherInterface $hasher): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Nicht eingeloggt'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $data    = json_decode($request->getContent(), true) ?? [];
+        $oldPass = $data['old_password'] ?? '';
+        $newPass = $data['new_password'] ?? '';
+
+        if (!$oldPass || !$newPass) {
+            return new JsonResponse(['error' => 'Fehlende Felder'], Response::HTTP_BAD_REQUEST);
+        }
+        if (!$hasher->isPasswordValid($user, $oldPass)) {
+            return new JsonResponse(['error' => 'Aktuelles Passwort falsch'], Response::HTTP_UNAUTHORIZED);
+        }
+        if (strlen($newPass) < 8) {
+            return new JsonResponse(['error' => 'Neues Passwort zu kurz (min. 8 Zeichen)'], Response::HTTP_BAD_REQUEST);
+        }
+
+        $user->setPassword($hasher->hashPassword($user, $newPass));
+        $this->em->flush();
+
+        return new JsonResponse(['ok' => true]);
+    }
+}
diff --git a/src/Controller/GoalController.php b/src/Controller/GoalController.php
new file mode 100644
index 0000000..2716976
--- /dev/null
+++ b/src/Controller/GoalController.php
@@ -0,0 +1,108 @@
+<?php
+
+namespace App\Controller;
+
+use App\Entity\Goal;
+use App\Entity\User;
+use App\Repository\GoalRepository;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+
+#[Route('/api/goals')]
+class GoalController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface $em,
+        private readonly GoalRepository $goals,
+    ) {}
+
+    #[Route('', methods: ['GET'])]
+    public function list(): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+        $goals = array_map(fn(Goal $g) => $g->toArray(), $this->goals->findByUser($user->getId()));
+        return new JsonResponse($goals);
+    }
+
+    #[Route('', methods: ['POST'])]
+    public function create(Request $request): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $data = json_decode($request->getContent(), true) ?? [];
+        $name = trim($data['name'] ?? '');
+        if (!$name) {
+            return new JsonResponse(['error' => 'Name fehlt'], Response::HTTP_BAD_REQUEST);
+        }
+
+        try {
+            $start = new \DateTime($data['start'] ?? 'now');
+        } catch (\Exception) {
+            $start = new \DateTime();
+        }
+
+        $goal = new Goal();
+        $goal->setUserId($user->getId())
+             ->setName($name)
+             ->setUnit(trim($data['unit'] ?? 'Stück') ?: 'Stück')
+             ->setDaily((float)($data['daily'] ?? 1))
+             ->setDays((int)($data['days'] ?? 30))
+             ->setStart($start)
+             ->setSets(is_array($data['sets'] ?? null) ? $data['sets'] : []);
+
+        $this->em->persist($goal);
+        $this->em->flush();
+
+        return new JsonResponse($goal->toArray());
+    }
+
+    #[Route('/{id}', methods: ['PATCH'])]
+    public function update(int $id, Request $request): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $goal = $this->goals->findOneBy(['id' => $id, 'userId' => $user->getId()]);
+        if (!$goal) {
+            return new JsonResponse(['error' => 'Nicht gefunden'], Response::HTTP_NOT_FOUND);
+        }
+
+        $data = json_decode($request->getContent(), true) ?? [];
+        if (isset($data['name']))  $goal->setName((string)$data['name']);
+        if (isset($data['unit']))  $goal->setUnit((string)$data['unit']);
+        if (isset($data['daily'])) $goal->setDaily((float)$data['daily']);
+        if (isset($data['days']))  $goal->setDays((int)$data['days']);
+        if (isset($data['sets']))  $goal->setSets((array)$data['sets']);
+
+        $this->em->flush();
+        return new JsonResponse(['ok' => true]);
+    }
+
+    #[Route('/{id}', methods: ['DELETE'])]
+    public function delete(int $id): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $goal = $this->goals->findOneBy(['id' => $id, 'userId' => $user->getId()]);
+        if ($goal) {
+            $this->em->remove($goal);
+            $this->em->flush();
+        }
+        return new JsonResponse(['ok' => true]);
+    }
+}
diff --git a/src/Controller/InviteController.php b/src/Controller/InviteController.php
new file mode 100644
index 0000000..2cfd158
--- /dev/null
+++ b/src/Controller/InviteController.php
@@ -0,0 +1,90 @@
+<?php
+
+namespace App\Controller;
+
+use App\Entity\Invite;
+use App\Entity\User;
+use App\Repository\InviteRepository;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+
+#[Route('/api')]
+class InviteController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface $em,
+        private readonly InviteRepository $invites,
+    ) {}
+
+    #[Route('/invite', methods: ['POST'])]
+    public function create(Request $request): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $data  = json_decode($request->getContent(), true) ?? [];
+        $note  = trim($data['note'] ?? '') ?: null;
+        $token = bin2hex(random_bytes(32));
+
+        $invite = new Invite();
+        $invite->setToken($token)
+               ->setNote($note)
+               ->setCreatedBy($user->getId())
+               ->setExpiresAt(new \DateTimeImmutable('+7 days'));
+
+        $this->em->persist($invite);
+        $this->em->flush();
+
+        $appUrl = $_ENV['APP_URL'] ?? 'http://localhost';
+        return new JsonResponse(['url' => $appUrl . '/?invite=' . $token]);
+    }
+
+    #[Route('/invites', methods: ['GET'])]
+    public function list(): JsonResponse
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+        }
+
+        $rows = $this->invites->findByCreator($user->getId());
+        $appUrl = $_ENV['APP_URL'] ?? 'http://localhost';
+
+        $result = array_map(function (Invite $inv) use ($appUrl) {
+            $pending = $inv->isPending();
+            $usedByEmail = null;
+            if ($inv->getUsedBy()) {
+                $usedByEmail = $this->em->getConnection()->fetchOne(
+                    'SELECT email FROM users WHERE id = ?',
+                    [$inv->getUsedBy()]
+                ) ?: null;
+            }
+
+            if ($usedByEmail !== null) {
+                $status = 'used';
+            } elseif (!$pending) {
+                $status = 'expired';
+            } else {
+                $status = 'pending';
+            }
+
+            return [
+                'url'           => $status === 'pending' ? $appUrl . '/?invite=' . $inv->getToken() : null,
+                'created_at'    => $inv->getCreatedAt()->format('Y-m-d H:i:s'),
+                'expires_at'    => $inv->getExpiresAt()->format('Y-m-d H:i:s'),
+                'used_at'       => $inv->getUsedAt()?->format('Y-m-d H:i:s'),
+                'note'          => $inv->getNote(),
+                'used_by_email' => $usedByEmail,
+                'status'        => $status,
+            ];
+        }, $rows);
+
+        return new JsonResponse($result);
+    }
+}
diff --git a/src/Entity/.gitignore b/src/Entity/.gitignore
new file mode 100644
index 0000000..e69de29
diff --git a/src/Entity/Goal.php b/src/Entity/Goal.php
new file mode 100644
index 0000000..9b73fbf
--- /dev/null
+++ b/src/Entity/Goal.php
@@ -0,0 +1,75 @@
+<?php
+
+namespace App\Entity;
+
+use App\Repository\GoalRepository;
+use Doctrine\ORM\Mapping as ORM;
+
+#[ORM\Entity(repositoryClass: GoalRepository::class)]
+#[ORM\Table(name: 'goals')]
+class Goal
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    private ?int $id = null;
+
+    #[ORM\Column]
+    private int $userId;
+
+    #[ORM\Column(length: 255)]
+    private string $name;
+
+    #[ORM\Column(length: 50)]
+    private string $unit = 'Stück';
+
+    #[ORM\Column]
+    private float $daily = 1;
+
+    #[ORM\Column]
+    private int $days = 30;
+
+    #[ORM\Column(type: 'datetime')]
+    private \DateTimeInterface $start;
+
+    #[ORM\Column(type: 'json')]
+    private array $sets = [];
+
+    #[ORM\Column(type: 'datetime_immutable', options: ['default' => 'CURRENT_TIMESTAMP'])]
+    private \DateTimeImmutable $createdAt;
+
+    public function __construct()
+    {
+        $this->createdAt = new \DateTimeImmutable();
+    }
+
+    public function getId(): ?int { return $this->id; }
+    public function getUserId(): int { return $this->userId; }
+    public function setUserId(int $userId): static { $this->userId = $userId; return $this; }
+    public function getName(): string { return $this->name; }
+    public function setName(string $name): static { $this->name = $name; return $this; }
+    public function getUnit(): string { return $this->unit; }
+    public function setUnit(string $unit): static { $this->unit = $unit; return $this; }
+    public function getDaily(): float { return $this->daily; }
+    public function setDaily(float $daily): static { $this->daily = $daily; return $this; }
+    public function getDays(): int { return $this->days; }
+    public function setDays(int $days): static { $this->days = $days; return $this; }
+    public function getStart(): \DateTimeInterface { return $this->start; }
+    public function setStart(\DateTimeInterface $start): static { $this->start = $start; return $this; }
+    public function getSets(): array { return $this->sets; }
+    public function setSets(array $sets): static { $this->sets = $sets; return $this; }
+    public function getCreatedAt(): \DateTimeImmutable { return $this->createdAt; }
+
+    public function toArray(): array
+    {
+        return [
+            'id'    => (string) $this->id,
+            'name'  => $this->name,
+            'unit'  => $this->unit,
+            'daily' => $this->daily,
+            'days'  => $this->days,
+            'start' => $this->start->format('Y-m-d H:i:s'),
+            'sets'  => $this->sets,
+        ];
+    }
+}
diff --git a/src/Entity/Invite.php b/src/Entity/Invite.php
new file mode 100644
index 0000000..628c1bd
--- /dev/null
+++ b/src/Entity/Invite.php
@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Entity;
+
+use App\Repository\InviteRepository;
+use Doctrine\ORM\Mapping as ORM;
+
+#[ORM\Entity(repositoryClass: InviteRepository::class)]
+#[ORM\Table(name: 'invites')]
+class Invite
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 64, unique: true)]
+    private string $token;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    private ?string $note = null;
+
+    #[ORM\Column]
+    private int $createdBy;
+
+    #[ORM\Column(nullable: true)]
+    private ?int $usedBy = null;
+
+    #[ORM\Column(type: 'datetime_immutable', options: ['default' => 'CURRENT_TIMESTAMP'])]
+    private \DateTimeImmutable $createdAt;
+
+    #[ORM\Column(type: 'datetime_immutable')]
+    private \DateTimeImmutable $expiresAt;
+
+    #[ORM\Column(type: 'datetime_immutable', nullable: true)]
+    private ?\DateTimeImmutable $usedAt = null;
+
+    public function __construct()
+    {
+        $this->createdAt = new \DateTimeImmutable();
+    }
+
+    public function getId(): ?int { return $this->id; }
+    public function getToken(): string { return $this->token; }
+    public function setToken(string $token): static { $this->token = $token; return $this; }
+    public function getNote(): ?string { return $this->note; }
+    public function setNote(?string $note): static { $this->note = $note; return $this; }
+    public function getCreatedBy(): int { return $this->createdBy; }
+    public function setCreatedBy(int $createdBy): static { $this->createdBy = $createdBy; return $this; }
+    public function getUsedBy(): ?int { return $this->usedBy; }
+    public function setUsedBy(?int $usedBy): static { $this->usedBy = $usedBy; return $this; }
+    public function getCreatedAt(): \DateTimeImmutable { return $this->createdAt; }
+    public function getExpiresAt(): \DateTimeImmutable { return $this->expiresAt; }
+    public function setExpiresAt(\DateTimeImmutable $expiresAt): static { $this->expiresAt = $expiresAt; return $this; }
+    public function getUsedAt(): ?\DateTimeImmutable { return $this->usedAt; }
+    public function setUsedAt(?\DateTimeImmutable $usedAt): static { $this->usedAt = $usedAt; return $this; }
+
+    public function isPending(): bool
+    {
+        return $this->usedBy === null && $this->expiresAt > new \DateTimeImmutable();
+    }
+}
diff --git a/src/Entity/User.php b/src/Entity/User.php
new file mode 100644
index 0000000..0de5a52
--- /dev/null
+++ b/src/Entity/User.php
@@ -0,0 +1,59 @@
+<?php
+
+namespace App\Entity;
+
+use App\Repository\UserRepository;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
+use Symfony\Component\Security\Core\User\UserInterface;
+
+#[ORM\Entity(repositoryClass: UserRepository::class)]
+#[ORM\Table(name: 'users')]
+class User implements UserInterface, PasswordAuthenticatedUserInterface
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column(type: 'integer', options: ['unsigned' => true])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 249, unique: true)]
+    private string $email;
+
+    #[ORM\Column(length: 255)]
+    private string $password;
+
+    #[ORM\Column(length: 100, nullable: true)]
+    private ?string $username = null;
+
+    #[ORM\Column(type: 'boolean', options: ['unsigned' => true, 'default' => 0])]
+    private bool $verified = false;
+
+    #[ORM\Column(type: 'integer', options: ['unsigned' => true])]
+    private int $registered;
+
+    #[ORM\Column(type: 'integer', nullable: true, options: ['unsigned' => true])]
+    private ?int $lastLogin = null;
+
+    public function __construct()
+    {
+        $this->registered = time();
+    }
+
+    public function getId(): ?int { return $this->id; }
+    public function getEmail(): string { return $this->email; }
+    public function setEmail(string $email): static { $this->email = $email; return $this; }
+    public function getPassword(): string { return $this->password; }
+    public function setPassword(string $password): static { $this->password = $password; return $this; }
+    public function getUsername(): ?string { return $this->username; }
+    public function setUsername(?string $username): static { $this->username = $username; return $this; }
+    public function isVerified(): bool { return $this->verified; }
+    public function setVerified(bool $verified): static { $this->verified = $verified; return $this; }
+    public function getRegistered(): int { return $this->registered; }
+    public function getLastLogin(): ?int { return $this->lastLogin; }
+    public function setLastLogin(?int $lastLogin): static { $this->lastLogin = $lastLogin; return $this; }
+
+    // UserInterface
+    public function getUserIdentifier(): string { return $this->email; }
+    public function getRoles(): array { return ['ROLE_USER']; }
+    public function eraseCredentials(): void {}
+}
diff --git a/src/Kernel.php b/src/Kernel.php
new file mode 100644
index 0000000..779cd1f
--- /dev/null
+++ b/src/Kernel.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App;
+
+use Symfony\Bundle\FrameworkBundle\Kernel\MicroKernelTrait;
+use Symfony\Component\HttpKernel\Kernel as BaseKernel;
+
+class Kernel extends BaseKernel
+{
+    use MicroKernelTrait;
+}
diff --git a/src/Repository/.gitignore b/src/Repository/.gitignore
new file mode 100644
index 0000000..e69de29
diff --git a/src/Repository/GoalRepository.php b/src/Repository/GoalRepository.php
new file mode 100644
index 0000000..57484da
--- /dev/null
+++ b/src/Repository/GoalRepository.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Repository;
+
+use App\Entity\Goal;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+
+class GoalRepository extends ServiceEntityRepository
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, Goal::class);
+    }
+
+    /** @return Goal[] */
+    public function findByUser(int $userId): array
+    {
+        return $this->findBy(['userId' => $userId], ['createdAt' => 'ASC']);
+    }
+}
diff --git a/src/Repository/InviteRepository.php b/src/Repository/InviteRepository.php
new file mode 100644
index 0000000..0a926a5
--- /dev/null
+++ b/src/Repository/InviteRepository.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Repository;
+
+use App\Entity\Invite;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+
+class InviteRepository extends ServiceEntityRepository
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, Invite::class);
+    }
+
+    public function findPendingByToken(string $token): ?Invite
+    {
+        return $this->createQueryBuilder('i')
+            ->where('i.token = :token')
+            ->andWhere('i.usedBy IS NULL')
+            ->andWhere('i.expiresAt > :now')
+            ->setParameter('token', $token)
+            ->setParameter('now', new \DateTimeImmutable())
+            ->getQuery()
+            ->getOneOrNullResult();
+    }
+
+    /** @return Invite[] */
+    public function findByCreator(int $userId): array
+    {
+        return $this->findBy(['createdBy' => $userId], ['createdAt' => 'DESC']);
+    }
+}
diff --git a/src/Repository/UserRepository.php b/src/Repository/UserRepository.php
new file mode 100644
index 0000000..fd8c468
--- /dev/null
+++ b/src/Repository/UserRepository.php
@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Repository;
+
+use App\Entity\User;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
+use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
+use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;
+
+class UserRepository extends ServiceEntityRepository implements PasswordUpgraderInterface
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, User::class);
+    }
+
+    public function upgradePassword(PasswordAuthenticatedUserInterface $user, string $newHashedPassword): void
+    {
+        if (!$user instanceof User) {
+            throw new UnsupportedUserException(sprintf('Instances of "%s" are not supported.', $user::class));
+        }
+        $user->setPassword($newHashedPassword);
+        $this->getEntityManager()->flush();
+    }
+}
diff --git a/src/Security/JsonLoginAuthenticator.php b/src/Security/JsonLoginAuthenticator.php
new file mode 100644
index 0000000..1b409f5
--- /dev/null
+++ b/src/Security/JsonLoginAuthenticator.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Security;
+
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
+use Symfony\Component\Security\Core\Exception\AuthenticationException;
+use Symfony\Component\Security\Core\Exception\BadCredentialsException;
+use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
+use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
+use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
+use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
+use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
+
+class JsonLoginAuthenticator extends AbstractAuthenticator
+{
+    public function supports(Request $request): ?bool
+    {
+        return $request->getPathInfo() === '/api/login' && $request->isMethod('POST');
+    }
+
+    public function authenticate(Request $request): Passport
+    {
+        $data = json_decode($request->getContent(), true) ?? [];
+        $email = trim($data['email'] ?? '');
+        $password = $data['password'] ?? '';
+
+        if (!$email || !$password) {
+            throw new BadCredentialsException('Falsche E-Mail oder Passwort');
+        }
+
+        return new Passport(
+            new UserBadge($email),
+            new PasswordCredentials($password),
+            [new RememberMeBadge()]
+        );
+    }
+
+    public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
+    {
+        $user = $token->getUser();
+        return new JsonResponse([
+            'ok'    => true,
+            'email' => $user->getUserIdentifier(),
+            'name'  => $user instanceof \App\Entity\User ? ($user->getUsername() ?? '') : '',
+        ]);
+    }
+
+    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
+    {
+        return new JsonResponse(['error' => 'Falsche E-Mail oder Passwort'], Response::HTTP_UNAUTHORIZED);
+    }
+}
diff --git a/style.css b/style.css
new file mode 100644
index 0000000..6252ca9
--- /dev/null
+++ b/style.css
@@ -0,0 +1,113 @@
+@import url('https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600&family=DM+Mono:wght@400;500&display=swap');
+:root{--bg:#f5f4f0;--bg2:#fff;--bg3:#f0eeea;--border:rgba(0,0,0,.07);--border2:rgba(0,0,0,.12);--text:#1a1a1a;--text2:#666;--text3:#aaa;--green:#16a34a;--green-bg:rgba(22,163,74,.08);--blue:#2563eb;--blue-bg:rgba(37,99,235,.08);--amber:#d97706;--amber-bg:rgba(217,119,6,.08);--red:#dc2626;--red-bg:rgba(220,38,38,.08);--r:14px;--rs:8px}
+*{box-sizing:border-box;margin:0;padding:0;-webkit-tap-highlight-color:transparent}
+body{font-family:'DM Sans',sans-serif;background:var(--bg);color:var(--text);min-height:100dvh;padding-bottom:80px}
+.main-wrap{max-width:480px;margin:0 auto}
+.hdr{position:sticky;top:0;z-index:100;background:rgba(245,244,240,.92);backdrop-filter:blur(12px);-webkit-backdrop-filter:blur(12px);border-bottom:1px solid var(--border);padding:16px 20px 14px;display:flex;align-items:center;justify-content:space-between}
+.hdr-title{font-size:18px;font-weight:600;letter-spacing:-.3px}
+.hdr-logo{height:100px;width:auto;mix-blend-mode:multiply;display:block}
+.hdr-sub{font-size:12px;color:var(--text3);margin-top:1px;font-family:'DM Mono',monospace}
+.hdr-btns{display:flex;gap:8px;align-items:center}
+.btn-add{width:38px;height:38px;border-radius:50%;background:var(--text);color:var(--bg);border:none;cursor:pointer;font-size:22px;display:flex;align-items:center;justify-content:center;font-weight:300;transition:transform .15s}
+.btn-add:active{transform:scale(.92)}
+.btn-menu{width:38px;height:38px;border-radius:50%;background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-size:20px;display:flex;align-items:center;justify-content:center;transition:transform .15s}
+.btn-menu:active{transform:scale(.92)}
+.main{padding:16px 16px 0}
+.greeting{font-size:17px;font-weight:600;letter-spacing:-.2px;padding:0 2px 10px}
+.sec-lbl{font-size:10px;color:var(--text3);text-transform:uppercase;letter-spacing:.6px;font-family:'DM Mono',monospace;margin-bottom:6px;margin-top:4px;padding:0 2px}
+.empty{text-align:center;padding:60px 20px;color:var(--text3);font-size:14px;line-height:1.8}
+.card{background:var(--bg2);border:1px solid var(--border);border-radius:var(--r);margin-bottom:8px;overflow:hidden}
+.card.done{opacity:.7}
+.card-hdr{padding:14px 16px 12px;display:flex;align-items:center;justify-content:space-between;gap:10px;cursor:pointer;user-select:none}
+.name-wrap{display:flex;align-items:center;gap:6px}
+.goal-name{font-size:16px;font-weight:600;letter-spacing:-.2px}
+.btn-ren{background:none;border:none;color:var(--text3);cursor:pointer;font-size:14px;padding:2px 4px;line-height:1;flex-shrink:0}
+.btn-ren:active{color:var(--blue)}
+.ren-input{font-family:'DM Sans',sans-serif;font-size:16px;font-weight:600;background:var(--bg3);border:1px solid var(--blue);border-radius:6px;color:var(--text);padding:2px 8px;width:100%;letter-spacing:-.2px}
+.ren-input:focus{outline:none}
+.goal-meta{font-size:11px;color:var(--text3);margin-top:3px;font-family:'DM Mono',monospace;line-height:1.5}
+.chevron{font-size:13px;color:var(--text3);margin-left:4px;flex-shrink:0}
+.badge{font-size:10px;font-weight:600;padding:3px 8px;border-radius:99px;white-space:nowrap;flex-shrink:0;letter-spacing:.3px;text-transform:uppercase}
+.b-ok{background:var(--green-bg);color:var(--green)}.b-done{background:var(--green-bg);color:var(--green)}.b-warn{background:var(--amber-bg);color:var(--amber)}.b-danger{background:var(--red-bg);color:var(--red)}.b-buf{background:var(--blue-bg);color:var(--blue)}
+.prog-wrap{padding:0 16px 12px}
+.prog-track{height:4px;background:var(--bg3);border-radius:99px;overflow:hidden}
+.prog-fill{height:100%;border-radius:99px;transition:width .4s ease}
+.prog-row{display:flex;justify-content:space-between;font-size:11px;color:var(--text3);margin-top:5px;font-family:'DM Mono',monospace}
+.heute-stats{padding:0 16px 14px}
+.heute-group{background:var(--bg3);border-radius:var(--rs);padding:8px 8px 6px}
+.heute-lbl{font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;text-align:center;margin-bottom:6px;font-family:'DM Mono',monospace}
+.heute-inner{display:grid;grid-template-columns:1fr 1fr 1fr;gap:5px}
+.stat{background:var(--bg2);border-radius:6px;padding:7px 6px 5px;text-align:center}
+.slbl{font-size:9px;color:var(--text3);margin-bottom:2px}
+.sval{font-size:14px;font-weight:600;font-family:'DM Mono',monospace}
+.sunit{font-size:8px;color:var(--text3)}
+.dots-sec{padding:0 16px 12px}
+.dots-lbl{font-size:11px;color:var(--text3);margin-bottom:6px}
+.dots-wrap{display:flex;gap:3px;flex-wrap:wrap}
+.dot{width:26px;height:26px;border-radius:5px;display:flex;align-items:center;justify-content:center;font-size:8px;font-weight:600;font-family:'DM Mono',monospace;transition:opacity .15s}
+.df{background:var(--bg3);color:var(--text3)}
+.dm{background:rgba(220,38,38,.12);color:var(--red)}
+.dp{background:rgba(217,119,6,.12);color:var(--amber)}
+.dd{background:rgba(22,163,74,.12);color:var(--green)}
+.db{background:rgba(37,99,235,.12);color:var(--blue)}
+.de{cursor:pointer}.de:active{opacity:.6;transform:scale(.9)}.dl{opacity:.6;cursor:default}
+.rt{box-shadow:0 0 0 2px var(--text2)}.ry{box-shadow:0 0 0 2px var(--text3)}.rs{box-shadow:0 0 0 2px var(--blue) !important}
+.legend{display:flex;gap:10px;flex-wrap:wrap;margin-top:8px}
+.leg{display:flex;align-items:center;gap:4px;font-size:10px;color:var(--text3)}
+.ldot{width:8px;height:8px;border-radius:2px}
+.dpanel{margin:0 16px 14px;background:var(--bg3);border-radius:var(--rs);overflow:hidden;border:1px solid var(--border2)}
+.dpanel-hdr{padding:10px 12px;display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid var(--border)}
+.dpanel-title{font-size:13px;font-weight:600}
+.dpanel-sub{font-size:11px;color:var(--text2);font-family:'DM Mono',monospace}
+.dpanel-body{padding:10px 12px}
+.set-row{display:flex;align-items:center;justify-content:space-between;padding:5px 0;border-bottom:1px solid var(--border);font-size:13px}
+.set-row:last-of-type{border-bottom:none}
+.stime{font-size:10px;color:var(--text3);font-family:'DM Mono',monospace;margin-right:4px}
+.sdel{background:none;border:none;color:var(--text3);cursor:pointer;font-size:16px;padding:2px 6px;border-radius:4px}
+.sdel:active{color:var(--red)}
+.add-row{display:flex;gap:8px;align-items:center;margin-top:10px}
+.num-in{font-family:'DM Mono',monospace;font-size:15px;padding:8px 10px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg2);color:var(--text);width:90px;text-align:center}
+.num-in:focus{outline:none;border-color:var(--blue)}
+.ulbl{font-size:12px;color:var(--text3)}
+.btn-as{flex:1;padding:8px;border-radius:var(--rs);background:var(--blue-bg);color:var(--blue);border:1px solid rgba(37,99,235,.2);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:13px;font-weight:600}
+.btn-as:active{opacity:.7}
+.nosets{font-size:12px;color:var(--text3);padding:4px 0 8px}
+.card-foot{padding:8px 16px 12px;display:flex;justify-content:flex-end}
+.btn-del{background:none;border:none;color:var(--text3);font-size:12px;cursor:pointer;padding:4px 0;font-family:'DM Sans',sans-serif}
+.btn-del:active{color:var(--red)}
+.qb-card{padding:0 16px}
+.qb-row{display:flex;align-items:center;gap:8px;padding:10px 0;border-bottom:1px solid var(--border)}
+.qb-row:last-child{border-bottom:none}
+.qb-name{flex:1;font-size:16px;font-weight:600;letter-spacing:-.2px;overflow:hidden;white-space:nowrap;text-overflow:ellipsis;min-width:0}
+.qb-stat{font-size:11px;font-family:'DM Mono',monospace;color:var(--text3);white-space:nowrap}
+.qb-row .num-in{width:62px;padding:6px 6px;font-size:13px}
+.qb-row .btn-as{flex:none;padding:8px 14px;font-size:13px}
+.ov{position:fixed;inset:0;z-index:200;background:rgba(0,0,0,.5);display:flex;align-items:flex-end;animation:fi .2s ease}
+@keyframes fi{from{opacity:0}to{opacity:1}}
+.sheet{width:100%;max-width:480px;background:var(--bg2);border-radius:20px 20px 0 0;border:1px solid var(--border2);padding:20px 20px 40px;animation:su .25s ease;max-height:90dvh;overflow-y:auto}
+@keyframes su{from{transform:translateY(100%)}to{transform:translateY(0)}}
+.shandle{width:36px;height:4px;border-radius:2px;background:var(--border2);margin:0 auto 20px}
+.stitle{font-size:17px;font-weight:600;margin-bottom:4px}
+.ssub{font-size:12px;color:var(--text3);margin-bottom:16px}
+.fgrid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
+.ff{margin-bottom:10px}
+.ff label{font-size:11px;color:var(--text3);display:block;margin-bottom:4px;text-transform:uppercase;letter-spacing:.5px}
+.fi{width:100%;font-family:'DM Sans',sans-serif;font-size:15px;padding:10px 12px;border-radius:var(--rs);border:1px solid var(--border2);background:var(--bg3);color:var(--text)}
+.fi:focus{outline:none;border-color:var(--blue)}
+.factions{display:flex;gap:8px;margin-top:16px}
+.btn-p{flex:1;padding:13px;border-radius:var(--rs);background:var(--text);color:var(--bg);border:none;cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px;font-weight:600}
+.btn-p:active{opacity:.8}
+.btn-c{padding:13px 20px;border-radius:var(--rs);background:var(--bg3);color:var(--text2);border:1px solid var(--border);cursor:pointer;font-family:'DM Sans',sans-serif;font-size:15px}
+.dbtn{width:100%;padding:13px 16px;border-radius:var(--rs);background:var(--bg3);border:1px solid var(--border);color:var(--text);font-family:'DM Sans',sans-serif;font-size:15px;text-align:left;cursor:pointer;margin-bottom:8px;display:flex;align-items:center;gap:12px}
+.dbtn:active{background:var(--border2)}
+.dico{font-size:18px;width:24px;text-align:center;flex-shrink:0}
+.dlbl{flex:1}.dsub{font-size:11px;color:var(--text3);display:block;margin-top:1px}
+.ddanger{color:var(--red)}
+.ddiv{height:1px;background:var(--border);margin:12px 0}
+.awards{display:flex;gap:4px;align-items:center;flex-wrap:wrap;padding:0 16px 10px}
+.aw{font-size:24px;line-height:1}
+.login-err{background:var(--red-bg);color:var(--red);border-radius:var(--rs);padding:10px 12px;font-size:13px;margin-bottom:12px}
+.toast{position:fixed;bottom:100px;left:50%;transform:translateX(-50%);background:#1a1a1a;color:#fff;padding:10px 16px;border-radius:8px;font-size:13px;z-index:300;white-space:nowrap;animation:fi .2s ease}
+.hint{margin:0 16px 12px;background:var(--blue-bg);border:1px solid rgba(37,99,235,.15);border-radius:var(--rs);padding:10px 12px;font-size:12px;color:var(--blue);line-height:1.5;display:flex;justify-content:space-between;align-items:center;gap:8px}
+.hclose{background:none;border:none;color:var(--blue);cursor:pointer;font-size:16px;padding:0 2px}
+.btn-lnk{background:none;border:none;color:var(--text2);font-size:13px;cursor:pointer;padding:4px 8px;text-decoration:underline;text-underline-offset:2px}
diff --git a/symfony.lock b/symfony.lock
new file mode 100644
index 0000000..5295bca
--- /dev/null
+++ b/symfony.lock
@@ -0,0 +1,170 @@
+{
+    "doctrine/deprecations": {
+        "version": "1.1",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "1.0",
+            "ref": "fdd756167454623e21f1d769c5b814b243782a67"
+        }
+    },
+    "doctrine/doctrine-bundle": {
+        "version": "3.2",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "3.0",
+            "ref": "d39a3bd844edfe90c20ae520b804a3bf4f82b4ad"
+        },
+        "files": [
+            "config/packages/doctrine.yaml",
+            "src/Entity/.gitignore",
+            "src/Repository/.gitignore"
+        ]
+    },
+    "doctrine/doctrine-migrations-bundle": {
+        "version": "4.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "3.1",
+            "ref": "1d01ec03c6ecbd67c3375c5478c9a423ae5d6a33"
+        },
+        "files": [
+            "config/packages/doctrine_migrations.yaml",
+            "migrations/.gitignore"
+        ]
+    },
+    "symfony/console": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "5.3",
+            "ref": "1781ff40d8a17d87cf53f8d4cf0c8346ed2bb461"
+        },
+        "files": [
+            "bin/console"
+        ]
+    },
+    "symfony/flex": {
+        "version": "2.10",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "2.4",
+            "ref": "52e9754527a15e2b79d9a610f98185a1fe46622a"
+        },
+        "files": [
+            ".env",
+            ".env.dev"
+        ]
+    },
+    "symfony/framework-bundle": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "7.4",
+            "ref": "d5dcd308c8becd725c9d8b91e31aab1ff0bbc30b"
+        },
+        "files": [
+            "config/packages/cache.yaml",
+            "config/packages/framework.yaml",
+            "config/preload.php",
+            "config/routes/framework.yaml",
+            "config/services.yaml",
+            "public/index.php",
+            "src/Controller/.gitignore",
+            "src/Kernel.php",
+            ".editorconfig"
+        ]
+    },
+    "symfony/mailer": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "4.3",
+            "ref": "09051cfde49476e3c12cd3a0e44289ace1c75a4f"
+        },
+        "files": [
+            "config/packages/mailer.yaml"
+        ]
+    },
+    "symfony/messenger": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "6.0",
+            "ref": "d8936e2e2230637ef97e5eecc0eea074eecae58b"
+        },
+        "files": [
+            "config/packages/messenger.yaml"
+        ]
+    },
+    "symfony/property-info": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "7.3",
+            "ref": "dae70df71978ae9226ae915ffd5fad817f5ca1f7"
+        },
+        "files": [
+            "config/packages/property_info.yaml"
+        ]
+    },
+    "symfony/routing": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "7.4",
+            "ref": "bc94c4fd86f393f3ab3947c18b830ea343e51ded"
+        },
+        "files": [
+            "config/packages/routing.yaml",
+            "config/routes.yaml"
+        ]
+    },
+    "symfony/security-bundle": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "7.4",
+            "ref": "c42fee7802181cdd50f61b8622715829f5d2335c"
+        },
+        "files": [
+            "config/packages/security.yaml",
+            "config/routes/security.yaml"
+        ]
+    },
+    "symfony/twig-bundle": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "6.4",
+            "ref": "f250159ebe99153d0c640a3e7742876fc7453f2c"
+        },
+        "files": [
+            "config/packages/twig.yaml",
+            "templates/base.html.twig"
+        ]
+    },
+    "symfony/validator": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "7.0",
+            "ref": "8c1c4e28d26a124b0bb273f537ca8ce443472bfd"
+        },
+        "files": [
+            "config/packages/validator.yaml"
+        ]
+    }
+}
diff --git a/templates/app.html.twig b/templates/app.html.twig
new file mode 100644
index 0000000..b3a7514
--- /dev/null
+++ b/templates/app.html.twig
@@ -0,0 +1,329 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+<meta charset="UTF-8"/>
+<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"/>
+<meta name="theme-color" content="#f5f4f0"/>
+<meta name="mobile-web-app-capable" content="yes"/>
+<meta name="apple-mobile-web-app-capable" content="yes"/>
+<title>Dudi</title>
+<link rel="stylesheet" href="style.css"/>
+</head>
+<body>
+<div class="main-wrap">
+  <div class="hdr">
+    <div>
+      <img src="logo.png" alt="Dudi" class="hdr-logo"/>
+      <div class="hdr-sub" id="tlbl"></div>
+    </div>
+    <div class="hdr-btns">
+      <button class="btn-menu" id="btnData">⋯</button>
+      <button class="btn-add" id="btnNew">+</button>
+    </div>
+  </div>
+  <div class="main" id="main"></div>
+</div>
+<div id="ov" style="display:none"></div>
+
+<!-- ── Templates ──────────────────────────────────────────────────────────── -->
+
+<template id="tpl-hint">
+  <div class="hint">Menü → "Zum Startbildschirm" für App-Icon<button class="hclose">×</button></div>
+</template>
+
+<template id="tpl-empty">
+  <div class="empty"><div style="font-size:40px;opacity:.4;margin-bottom:12px">🎯</div>Noch keine Ziele.<br>Tippe auf <strong>+</strong> um zu starten.</div>
+</template>
+
+<template id="tpl-dot">
+  <div></div>
+</template>
+
+<template id="tpl-nosets">
+  <div class="nosets">Noch kein Eintrag</div>
+</template>
+
+<template id="tpl-set-row">
+  <div class="set-row">
+    <span></span>
+    <button class="sdel">×</button>
+  </div>
+</template>
+
+<template id="tpl-add-row">
+  <div class="add-row">
+    <input class="num-in" type="number" min="1"/>
+    <span class="ulbl"></span>
+    <button class="btn-as">Eintragen</button>
+  </div>
+</template>
+
+<template id="tpl-panel">
+  <div class="dpanel">
+    <div class="dpanel-hdr">
+      <span class="dpanel-title"></span>
+      <span class="dpanel-sub"></span>
+    </div>
+    <div class="dpanel-body"></div>
+  </div>
+</template>
+
+<template id="tpl-qb-row">
+  <div class="qb-row">
+    <div class="qb-name"></div>
+    <div class="qb-stat"></div>
+    <input class="num-in" type="number" min="1"/>
+    <button class="btn-as">Eintragen</button>
+  </div>
+</template>
+
+<template id="tpl-name-view">
+  <div class="name-wrap">
+    <div class="goal-name"></div>
+    <button class="btn-ren">✎</button>
+  </div>
+</template>
+
+<template id="tpl-name-edit">
+  <div class="name-wrap">
+    <input class="ren-input" type="text"/>
+  </div>
+</template>
+
+<template id="tpl-card-collapsed">
+  <div class="card">
+    <div class="card-hdr">
+      <div class="card-bd" style="flex:1;min-width:0">
+        <div class="goal-meta">Noch <span class="m-dr"></span>T · endet <span class="m-end"></span> · heute: <span class="m-heute"></span><br>total: <span class="m-total"></span></div>
+      </div>
+      <span class="badge"></span>
+      <span class="chevron">▸</span>
+    </div>
+    <div style="padding:0 16px 12px">
+      <div class="prog-track"><div class="prog-fill"></div></div>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-card-expanded">
+  <div class="card">
+    <div class="card-hdr">
+      <div class="card-bd" style="flex:1;min-width:0">
+        <div class="goal-meta">Noch <span class="m-dr"></span>T · endet <span class="m-end"></span></div>
+      </div>
+      <span class="badge"></span>
+      <span class="chevron">▴</span>
+    </div>
+    <div class="prog-wrap">
+      <div class="prog-track"><div class="prog-fill"></div></div>
+      <div class="prog-row">
+        <span class="pr-done"></span>
+        <span class="pr-pct"></span>
+      </div>
+    </div>
+    <div class="heute-stats">
+      <div class="heute-group">
+        <div class="heute-lbl">Heute</div>
+        <div class="heute-inner">
+          <div class="stat">
+            <div class="slbl">Gemacht</div>
+            <div class="sval"><span class="sv-tdone"></span><div class="sunit"></div></div>
+          </div>
+          <div class="stat">
+            <div class="slbl">Tagesziel</div>
+            <div class="sval"><span class="sv-daily"></span><div class="sunit"></div></div>
+          </div>
+          <div class="stat">
+            <div class="slbl">Noch</div>
+            <div class="sval sv-noch"><span class="sv-st"></span><div class="sunit"></div></div>
+          </div>
+        </div>
+      </div>
+    </div>
+    <div class="dots-sec">
+      <div class="dots-lbl">Verlauf — heute &amp; gestern bearbeitbar</div>
+      <div class="dots-wrap"></div>
+      <div class="legend">
+        <span class="leg"><span class="ldot" style="background:rgba(37,99,235,.3)"></span>Puffer</span>
+        <span class="leg"><span class="ldot" style="background:rgba(22,163,74,.3)"></span>Erreicht</span>
+        <span class="leg"><span class="ldot" style="background:rgba(217,119,6,.3)"></span>Teilweise</span>
+        <span class="leg"><span class="ldot" style="background:rgba(220,38,38,.3)"></span>Verpasst</span>
+      </div>
+    </div>
+    <div class="card-foot"><button class="btn-del">Ziel löschen</button></div>
+  </div>
+</template>
+
+<template id="tpl-sheet">
+  <div class="sheet">
+    <div class="shandle"></div>
+  </div>
+</template>
+
+<template id="tpl-login">
+  <div>
+    <div class="stitle">Anmelden</div>
+    <div class="ssub">Dudi</div>
+    <div class="login-err" style="display:none"></div>
+    <div class="ff"><label>E-Mail</label><input class="fi lf-email" type="email" autocomplete="email"/></div>
+    <div class="ff"><label>Passwort</label><input class="fi lf-pass" type="password" autocomplete="current-password"/></div>
+    <div class="factions"><button class="btn-p lf-sub">Anmelden</button></div>
+    <div style="text-align:center;margin-top:8px"><button class="btn-lnk lf-fgt">Passwort vergessen?</button></div>
+  </div>
+</template>
+
+<template id="tpl-forgot-pw">
+  <div>
+    <div class="stitle">Passwort vergessen</div>
+    <div class="ssub">Wir schicken dir einen Reset-Link</div>
+    <div class="ff"><label>E-Mail</label><input class="fi fp-email" type="email" autocomplete="email"/></div>
+    <div class="login-err" style="display:none"></div>
+    <div class="factions">
+      <button class="btn-p fp-sub">Link senden</button>
+      <button class="btn-c fp-back">Zurück</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-email-sent">
+  <div>
+    <div class="stitle">E-Mail gesendet</div>
+    <div class="ssub">Falls die Adresse bekannt ist, erhältst du in Kürze einen Reset-Link.</div>
+    <div class="factions"><button class="btn-p es-ok">OK</button></div>
+  </div>
+</template>
+
+<template id="tpl-reset-pw">
+  <div>
+    <div class="stitle">Neues Passwort</div>
+    <div class="ff"><label>Neues Passwort</label><input class="fi rp-pass" type="password" autocomplete="new-password" placeholder="mind. 8 Zeichen"/></div>
+    <div class="login-err" style="display:none"></div>
+    <div class="factions"><button class="btn-p rp-sub">Passwort setzen</button></div>
+  </div>
+</template>
+
+<template id="tpl-pw-changed">
+  <div>
+    <div class="stitle">Passwort geändert</div>
+    <div class="ssub">Du kannst dich jetzt anmelden.</div>
+    <div class="factions"><button class="btn-p pc-ok">Anmelden</button></div>
+  </div>
+</template>
+
+<template id="tpl-change-name">
+  <div>
+    <div class="stitle">Name ändern</div>
+    <div class="ff"><label>Dein Name</label><input class="fi cn-name" type="text" autocomplete="name"/></div>
+    <div class="login-err" style="display:none"></div>
+    <div class="factions">
+      <button class="btn-p cn-sub">Speichern</button>
+      <button class="btn-c cn-can">Abbrechen</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-change-pw">
+  <div>
+    <div class="stitle">Passwort ändern</div>
+    <div class="ff"><label>Aktuelles Passwort</label><input class="fi cp-old" type="password" autocomplete="current-password"/></div>
+    <div class="ff"><label>Neues Passwort</label><input class="fi cp-new" type="password" autocomplete="new-password" placeholder="mind. 8 Zeichen"/></div>
+    <div class="ff"><label>Neues Passwort bestätigen</label><input class="fi cp-new2" type="password" autocomplete="new-password" placeholder="mind. 8 Zeichen"/></div>
+    <div class="login-err" style="display:none"></div>
+    <div class="factions">
+      <button class="btn-p cp-sub">Ändern</button>
+      <button class="btn-c cp-can">Abbrechen</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-register">
+  <div>
+    <div class="stitle">Konto erstellen</div>
+    <div class="ssub">Du wurdest eingeladen</div>
+    <div class="ff"><label>Dein Name</label><input class="fi rg-name" type="text" autocomplete="name" placeholder="Wie sollen wir dich nennen?"/></div>
+    <div class="ff"><label>E-Mail</label><input class="fi rg-email" type="email" autocomplete="email"/></div>
+    <div class="ff"><label>Passwort</label><input class="fi rg-pass" type="password" autocomplete="new-password" placeholder="mind. 8 Zeichen"/></div>
+    <div class="ff"><label>Passwort bestätigen</label><input class="fi rg-pass2" type="password" autocomplete="new-password" placeholder="Passwort wiederholen"/></div>
+    <div class="login-err" style="display:none"></div>
+    <div class="factions"><button class="btn-p rg-sub">Registrieren</button></div>
+  </div>
+</template>
+
+<template id="tpl-new-goal">
+  <div>
+    <div class="stitle">Neues Ziel</div>
+    <div class="ff"><label>Übung / Gewohnheit</label><input class="fi ng-name" type="text" placeholder="Liegestütz, Plank …"/></div>
+    <div class="fgrid">
+      <div class="ff"><label>Einheit</label><input class="fi ng-unit" type="text" value="Stück"/></div>
+      <div class="ff"><label>Tagesziel</label><input class="fi ng-daily" type="number" min="1" value="50"/></div>
+    </div>
+    <div class="ff"><label>Dauer in Tagen</label><input class="fi ng-days" type="number" min="7" max="365" value="30"/></div>
+    <div class="factions">
+      <button class="btn-p ng-sub">Ziel starten</button>
+      <button class="btn-c ng-can">Abbrechen</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-data-menu">
+  <div>
+    <div class="stitle">Daten verwalten</div>
+    <div class="ssub">Export, Import und Backup</div>
+    <button class="dbtn dm-exp"><span class="dico">⬇</span><span class="dlbl">Exportieren<span class="dsub">Alle Ziele als JSON-Datei speichern</span></span></button>
+    <button class="dbtn dm-imp"><span class="dico">⬆</span><span class="dlbl">Importieren<span class="dsub">Backup laden oder zusammenführen</span></span></button>
+    <div class="ddiv"></div>
+    <button class="dbtn dm-inv"><span class="dico">🔗</span><span class="dlbl">Freund einladen<span class="dsub">Einladungslink generieren</span></span></button>
+    <button class="dbtn dm-invlist"><span class="dico">📋</span><span class="dlbl">Meine Einladungen<span class="dsub">Status aller gesendeten Einladungen</span></span></button>
+    <div class="ddiv"></div>
+    <button class="dbtn dm-name"><span class="dico">✏️</span><span class="dlbl">Name ändern</span></button>
+    <button class="dbtn dm-cpw"><span class="dico">🔑</span><span class="dlbl">Passwort ändern</span></button>
+    <button class="dbtn dm-lgout"><span class="dico">→</span><span class="dlbl">Abmelden</span></button>
+    <button class="btn-c dm-cls" style="width:100%;margin-top:4px;text-align:center">Schließen</button>
+    <div class="ddiv" style="margin-top:16px"></div>
+    <button class="dbtn ddanger dm-clr"><span class="dico">✕</span><span class="dlbl">Alle Daten löschen<span class="dsub">Kann nicht rückgängig gemacht werden</span></span></button>
+  </div>
+</template>
+
+<template id="tpl-invite-form">
+  <div>
+    <div class="stitle">Freund einladen</div>
+    <div class="ssub">Link gilt 7 Tage und kann nur einmal verwendet werden</div>
+    <div class="ff"><label>Name (für deine Übersicht)</label><input class="fi inv-name" type="text" placeholder="z.B. Max"/></div>
+    <div class="factions">
+      <button class="btn-p inv-gen">Link generieren</button>
+      <button class="btn-c inv-cancel">Abbrechen</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-invite-link">
+  <div>
+    <div class="stitle"></div>
+    <div class="ssub">Link gilt 7 Tage und kann nur einmal verwendet werden</div>
+    <div class="ff"><input class="fi il-url" type="text" readonly/></div>
+    <div class="factions">
+      <button class="btn-p il-copy">Link kopieren</button>
+      <button class="btn-c il-close">Schließen</button>
+    </div>
+  </div>
+</template>
+
+<template id="tpl-invite-list">
+  <div>
+    <div class="stitle">Meine Einladungen</div>
+    <div class="dpanel-body"></div>
+    <div class="factions"><button class="btn-c il-close">Schließen</button></div>
+  </div>
+</template>
+
+<template id="tpl-invite-row">
+  <div class="set-row">
+    <span style="flex:1"><strong class="ir-label"></strong><span class="ir-detail" style="opacity:.6;font-size:.85em"></span></span>
+    <button class="ir-copy btn-lnk" style="font-size:.8em;display:none">🔗 Link</button>
+    <span class="ir-status" style="font-size:.85em;font-weight:600"></span>
+  </div>
+</template>
+
+<script src="app.js"></script>
+</body>
+</html>