From 9d0261306c142a9abaa93b53395bb62f67cb7f6d Mon Sep 17 00:00:00 2001
From: Deploymentcenter Bot <deploy@mhdf.de>
Date: Sun, 23 Aug 2026 12:20:33 +0200
Subject: [PATCH] chore(cleanup): Altlasten entfernt, Webroot-Sperre und
 Supervisor-Route ergaenzt

Fruehjahrsputz. Alles hier ist unabhaengig von der laufenden Supervisor-
Arbeit im Arbeitsverzeichnis - die bleibt unangetastet.

Entfernt:
- Die zwoelf Symbole unter public/assets/ waren bitgleiche Dubletten der
  Dateien in public/assets/icons/. Referenziert wurde ausschliesslich der
  Pfad mit icons/. getMonitorIconUrl() setzt flach gespeicherte Altwerte
  aus der Datenbank jetzt auf icons/ um, damit bestehende Monitore ihr
  Symbol behalten.
- System.CommandLine (2.0.0-beta4) aus dem Packager. Kein using, kein
  Symbol, die Argumente werden von Hand geparst. Build bleibt fehlerfrei.

Geschlossen:
- client-php/ und mcp/ wurden weder von der .htaccess gesperrt noch vom
  Deployment ausgeschlossen. Die .mjs-Datei haette der Webserver im
  Klartext ausgeliefert. Beide gehoeren nicht ins Webroot: die PHP-Datei
  wird ins Zielprojekt kopiert, der MCP-Server laeuft lokal ueber stdio.
  Jetzt in beiden Ausschlusslisten - wie client-dotnet.
- Fuer /api/supervisor/v1/ fehlte die Rewrite-Regel. Der Datei-Fallback
  haette /api/supervisor/v1/findings auf eine nicht vorhandene Datei
  geleitet, obwohl Code und OpenAPI diese Schreibweise vorsehen.

Ergaenzt:
- __pycache__/ und *.pyc in .gitignore.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .gitignore                                            |  3 +++
 .htaccess                                             |  3 ++-
 .../Deploymentcenter.Packager.csproj                  |  1 -
 public/assets/app.svg                                 |  5 -----
 public/assets/docker.svg                              | 10 ----------
 public/assets/linux.svg                               | 11 -----------
 public/assets/mysql.svg                               |  6 ------
 public/assets/nginx.svg                               |  4 ----
 public/assets/node.svg                                |  4 ----
 public/assets/php.svg                                 |  4 ----
 public/assets/proxmox.svg                             |  4 ----
 public/assets/python.svg                              |  6 ------
 public/assets/redis.svg                               |  5 -----
 public/assets/server.svg                              |  9 ---------
 public/assets/windows.svg                             |  3 ---
 public/index.php                                      |  8 +++++++-
 scripts/deploy.py                                     |  4 ++++
 17 files changed, 16 insertions(+), 74 deletions(-)
 delete mode 100644 public/assets/app.svg
 delete mode 100644 public/assets/docker.svg
 delete mode 100644 public/assets/linux.svg
 delete mode 100644 public/assets/mysql.svg
 delete mode 100644 public/assets/nginx.svg
 delete mode 100644 public/assets/node.svg
 delete mode 100644 public/assets/php.svg
 delete mode 100644 public/assets/proxmox.svg
 delete mode 100644 public/assets/python.svg
 delete mode 100644 public/assets/redis.svg
 delete mode 100644 public/assets/server.svg
 delete mode 100644 public/assets/windows.svg

diff --git a/.gitignore b/.gitignore
index a205629..77e2efd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,6 +7,9 @@ var/*.lock
 artifacts/
 *.bak
 .DS_Store
+# Bytecode-Cache der Deployment-Skripte
+__pycache__/
+*.pyc
 bin/
 obj/
 *.user
diff --git a/.htaccess b/.htaccess
index 5ff373a..7ce8de3 100644
--- a/.htaccess
+++ b/.htaccess
@@ -34,6 +34,7 @@ Options -Indexes
     RewriteRule ^api/updateservice/v1(?:/(.*))?$     public/api/updateservice/v1/index.php [L,QSA]
     RewriteRule ^api/tokens/v1/provision/?$          public/api/tokens/v1/provision.php [L,QSA]
     RewriteRule ^api/setup/v1(?:/(.*))?$             public/api/setup/v1/index.php [L,QSA]
+    RewriteRule ^api/supervisor/v1(?:/(.*))?$        public/api/supervisor/v1/index.php [L,QSA]
 
     # Fallback fuer direkt adressierte Dateien unterhalb von /api/
     RewriteRule ^api/(.*)$ public/api/$1 [L,QSA]
@@ -57,7 +58,7 @@ Options -Indexes
     # ------------------------------------------------------------------
     # 5. Alles Uebrige sperren: Anwendungscode, Konfiguration, Skripte
     # ------------------------------------------------------------------
-    RewriteRule ^(config|src|sql|scripts|cli|var|client-dotnet)(/|$) - [F,L]
+    RewriteRule ^(config|src|sql|scripts|cli|var|client-dotnet|client-php|mcp)(/|$) - [F,L]
     RewriteRule ^Serverdaten\.txt$ - [F,L]
 </IfModule>
 
diff --git a/client-dotnet/Deploymentcenter.Packager/Deploymentcenter.Packager.csproj b/client-dotnet/Deploymentcenter.Packager/Deploymentcenter.Packager.csproj
index 7a6e193..1c5bb5c 100644
--- a/client-dotnet/Deploymentcenter.Packager/Deploymentcenter.Packager.csproj
+++ b/client-dotnet/Deploymentcenter.Packager/Deploymentcenter.Packager.csproj
@@ -11,7 +11,6 @@
 
   <ItemGroup>
     <PackageReference Include="FluentFTP" Version="54.1.2" />
-    <PackageReference Include="System.CommandLine" Version="2.0.0-beta4.22272.1" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/public/assets/app.svg b/public/assets/app.svg
deleted file mode 100644
index 63a7966..0000000
--- a/public/assets/app.svg
+++ /dev/null
@@ -1,5 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="20" fill="#F2622E"/>
-  <path d="M50 20 L80 35 L80 65 L50 80 L20 65 L20 35 Z" fill="none" stroke="#FFF" stroke-width="6"/>
-  <circle cx="50" cy="50" r="10" fill="#FFF"/>
-</svg>
diff --git a/public/assets/docker.svg b/public/assets/docker.svg
deleted file mode 100644
index fa74b76..0000000
--- a/public/assets/docker.svg
+++ /dev/null
@@ -1,10 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="20" fill="#2496ED"/>
-  <rect x="20" y="45" width="12" height="10" rx="2" fill="#FFF"/>
-  <rect x="35" y="45" width="12" height="10" rx="2" fill="#FFF"/>
-  <rect x="50" y="45" width="12" height="10" rx="2" fill="#FFF"/>
-  <rect x="35" y="32" width="12" height="10" rx="2" fill="#FFF"/>
-  <rect x="50" y="32" width="12" height="10" rx="2" fill="#FFF"/>
-  <rect x="65" y="45" width="12" height="10" rx="2" fill="#FFF"/>
-  <path d="M15 62 Q 50 82 85 62 Q 90 70 85 75 Q 45 92 10 70 Z" fill="#FFF"/>
-</svg>
diff --git a/public/assets/linux.svg b/public/assets/linux.svg
deleted file mode 100644
index d0a2444..0000000
--- a/public/assets/linux.svg
+++ /dev/null
@@ -1,11 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <circle cx="50" cy="50" r="48" fill="#FCC624"/>
-  <ellipse cx="50" cy="42" rx="22" ry="26" fill="#000000"/>
-  <ellipse cx="50" cy="45" rx="16" ry="20" fill="#FFFFFF"/>
-  <circle cx="43" cy="35" r="4" fill="#000"/>
-  <circle cx="57" cy="35" r="4" fill="#000"/>
-  <polygon points="46,40 54,40 50,48" fill="#FFA500"/>
-  <ellipse cx="50" cy="72" rx="24" ry="14" fill="#000000"/>
-  <ellipse cx="36" cy="84" rx="12" ry="6" fill="#FFA500"/>
-  <ellipse cx="64" cy="84" rx="12" ry="6" fill="#FFA500"/>
-</svg>
diff --git a/public/assets/mysql.svg b/public/assets/mysql.svg
deleted file mode 100644
index bf998a4..0000000
--- a/public/assets/mysql.svg
+++ /dev/null
@@ -1,6 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="20" fill="#00618A"/>
-  <path d="M20 75 C 20 40, 45 25, 75 35 C 80 50, 70 70, 50 75 Z" fill="#E48E00"/>
-  <circle cx="65" cy="40" r="4" fill="#FFF"/>
-  <text x="50" y="88" font-size="18" font-family="sans-serif" font-weight="bold" fill="#FFF" text-anchor="middle">MySQL</text>
-</svg>
diff --git a/public/assets/nginx.svg b/public/assets/nginx.svg
deleted file mode 100644
index 9b0d133..0000000
--- a/public/assets/nginx.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <polygon points="50,5 92,28 92,72 50,95 8,72 8,28" fill="#009639"/>
-  <path d="M30 70 L30 30 L65 70 L65 30" stroke="#FFF" stroke-width="8" stroke-linecap="round" stroke-linejoin="round" fill="none"/>
-</svg>
diff --git a/public/assets/node.svg b/public/assets/node.svg
deleted file mode 100644
index 9d7dba7..0000000
--- a/public/assets/node.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <polygon points="50,10 90,32 90,78 50,100 10,78 10,32" fill="#5FA04E"/>
-  <text x="50" y="62" font-size="24" font-family="sans-serif" font-weight="bold" fill="#FFF" text-anchor="middle">node</text>
-</svg>
diff --git a/public/assets/php.svg b/public/assets/php.svg
deleted file mode 100644
index 38eba68..0000000
--- a/public/assets/php.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <ellipse cx="50" cy="50" rx="46" ry="28" fill="#777BB4"/>
-  <text x="50" y="58" font-size="28" font-family="sans-serif" font-weight="bold" fill="#FFF" text-anchor="middle">php</text>
-</svg>
diff --git a/public/assets/proxmox.svg b/public/assets/proxmox.svg
deleted file mode 100644
index 3253b16..0000000
--- a/public/assets/proxmox.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="20" fill="#E57000"/>
-  <path d="M25 25 L75 25 L75 45 L45 45 L45 55 L75 55 L75 75 L25 75 Z" fill="#FFFFFF"/>
-</svg>
diff --git a/public/assets/python.svg b/public/assets/python.svg
deleted file mode 100644
index 44fae47..0000000
--- a/public/assets/python.svg
+++ /dev/null
@@ -1,6 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <path d="M48 10 C 25 10, 25 22, 25 22 L 25 34 L 50 34 L 50 38 L 20 38 C 20 38, 8 38, 8 60 C 8 82, 20 82, 20 82 L 32 82 L 32 70 C 32 70, 32 56, 48 56 L 62 56 C 62 56, 75 56, 75 42 L 75 22 C 75 22, 75 10, 48 10 Z" fill="#3776AB"/>
-  <circle cx="36" cy="22" r="4" fill="#FFF"/>
-  <path d="M52 90 C 75 90, 75 78, 75 78 L 75 66 L 50 66 L 50 62 L 80 62 C 80 62, 92 62, 92 40 C 92 18, 80 18, 80 18 L 68 18 L 68 30 C 68 30, 68 44, 52 44 L 38 44 C 38 44, 25 44, 25 58 L 25 78 C 25 78, 25 90, 52 90 Z" fill="#FFD43B"/>
-  <circle cx="64" cy="78" r="4" fill="#000"/>
-</svg>
diff --git a/public/assets/redis.svg b/public/assets/redis.svg
deleted file mode 100644
index d49bac6..0000000
--- a/public/assets/redis.svg
+++ /dev/null
@@ -1,5 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="20" fill="#D82C20"/>
-  <polygon points="50,20 80,35 50,50 20,35" fill="#FFF"/>
-  <polygon points="50,45 80,60 50,75 20,60" fill="#FFF" opacity="0.8"/>
-</svg>
diff --git a/public/assets/server.svg b/public/assets/server.svg
deleted file mode 100644
index fcda703..0000000
--- a/public/assets/server.svg
+++ /dev/null
@@ -1,9 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" width="24" height="24">
-  <rect width="100" height="100" rx="16" fill="#1E232B"/>
-  <rect x="15" y="15" width="70" height="30" rx="6" fill="#242A33" stroke="#F2622E" stroke-width="3"/>
-  <circle cx="30" cy="30" r="4" fill="#37C26B"/>
-  <circle cx="42" cy="30" r="4" fill="#37C26B"/>
-  <rect x="15" y="55" width="70" height="30" rx="6" fill="#242A33" stroke="#F2622E" stroke-width="3"/>
-  <circle cx="30" cy="70" r="4" fill="#37C26B"/>
-  <circle cx="42" cy="70" r="4" fill="#37C26B"/>
-</svg>
diff --git a/public/assets/windows.svg b/public/assets/windows.svg
deleted file mode 100644
index d5144ee..0000000
--- a/public/assets/windows.svg
+++ /dev/null
@@ -1,3 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 88 88" width="24" height="24">
-  <path fill="#00ADEF" d="M0 12.5L35.7 7.6v33.4H0V12.5zm0 32.5h35.7v33.5L0 73.8V45zm39.5-38L88 0v41H39.5V7zm0 38H88v41l-48.5-6.8V45z"/>
-</svg>
diff --git a/public/index.php b/public/index.php
index a896714..16f12ef 100644
--- a/public/index.php
+++ b/public/index.php
@@ -1673,9 +1673,15 @@ function getMonitorIconUrl(?string $icon, ?string $source, ?string $os, ?string
         if (str_starts_with($icon, 'custom/')) {
             return 'assets/icons/' . $icon;
         }
-        if (str_starts_with($icon, 'assets/')) {
+        if (str_starts_with($icon, 'assets/icons/')) {
             return $icon;
         }
+        // Fruehere Fassungen legten die Symbole flach unter assets/ ab und
+        // schrieben diesen Pfad in die Datenbank. Die Dateien liegen jetzt nur
+        // noch unter assets/icons/ - Altwerte werden hier umgesetzt.
+        if (str_starts_with($icon, 'assets/')) {
+            return 'assets/icons/' . substr($icon, strlen('assets/'));
+        }
         return 'assets/icons/' . $icon;
     }
 
diff --git a/scripts/deploy.py b/scripts/deploy.py
index d3df8b8..db1acfd 100644
--- a/scripts/deploy.py
+++ b/scripts/deploy.py
@@ -25,6 +25,10 @@ IGNORE_PATTERNS = {
     'log',
     '__pycache__',
     'client-dotnet',
+    # Bibliothek zum Mitnehmen ins Zielprojekt bzw. lokal ueber stdio
+    # betriebener MCP-Server - beide gehoeren nicht ins Webroot.
+    'client-php',
+    'mcp',
     # Gebaute Installer-Binaries. Sie gehoeren nach /installer/ und werden
     # von upload_installer.py dorthin gebracht - ueber diesen Weg landeten
     # sonst ~100 MB zusaetzlich unter /artifacts/ im Webroot.