Enhance API with OIDC support, including login and callback endpoints. Update environment variables for OIDC configuration in .env.example. Add new features to the catalog service for listing software families, Minecraft versions, and deployment regions. Implement server management actions such as kill, delete, and update in the servers module. Integrate feature flags for maintenance mode in server operations. Update pnpm-lock.yaml with new dependencies and versions.

docs/MASTERPROMPT_GAP_ANALYSIS.md

@@ -0,0 +1,86 @@
+# Masterprompt Gap-Analyse — HexaHost GameCloud
+
+Stand: 2026-07-05 (Sprint 1–3 abgeschlossen)
+
+Vergleich mit `HexaHost_GameCloud_Cursor_Masterprompt.md`. Legende: ✅ erledigt · 🟡 teilweise · ❌ offen · 🔜 Post-MVP
+
+---
+
+## Zusammenfassung
+
+| Bereich | Status |
+|---------|--------|
+| Auth, 2FA, Sessions, CSRF | ✅ |
+| Server-Lifecycle, Queue, Multi-Node | ✅ |
+| Console, Files, Properties, Worlds, Backups | ✅ |
+| Add-ons (Modrinth), Catalog | ✅ |
+| Billing / Idle-Stop / Credits | ✅ |
+| WHMCS Integration + mTLS + Actions | ✅ |
+| Members, Schedules, Players, Software-Reinstall | ✅ |
+| Notifications (In-App, E-Mail, Webhook, Discord) | ✅ |
+| Organizations, Support, Abuse | ✅ |
+| Compliance (Export, Deletion) | ✅ |
+| Feature Flags, Idempotency, OIDC, OTel | ✅ |
+| Radix UI, E2E, apps/docs | ✅ |
+| DB-Migration Gap-Closure | ✅ (SQL vorhanden) |
+
+---
+
+## 30. Abgeschlossene Sprint-Prioritäten
+
+### Sprint 1 (Gap-Closure)
+Login-Fix, CSRF, Admin-UI, öffentliche Seiten, Permissions, Server-State, WHMCS Renew/SSO, Deploy-Stubs, 25 Ops-Docs, Container-Härtung Node-Agent.
+
+### Sprint 2 (Feature-Completion)
+Datei-Upload/Archiv, Spieler-Mutationen, Software-Reinstall, Schedules-API, Notifications-REST, OTel, Playwright, FeatureFlags, OIDC, CurseForge, Radix UI, apps/docs, Idempotency, WHMCS actions API.
+
+### Sprint 3 (Hardening)
+- **Members-UI** (`server-access.tsx`) an Members-API
+- **Organizations / Support / Abuse** REST-Module
+- **Compliance**: S3-Export, Kontolöschung mit Anonymisierung + Server-Delete-Queue
+- **Cron-Parser** (API + Worker) für Schedules
+- **Idempotency** global registriert
+- **Feature Flag** `maintenance_mode`
+- **WHMCS PHP**: Start/Stop/Restart/Backup Buttons + ApiClient
+- **Worker**: Catalog-Sync (Modrinth), Notification-Dispatch (E-Mail/Webhook/Discord), Compliance-Tick
+- **Migration** `20260705160000_gap_closure_tables` (40 Tabellen)
+- **Security-Docs**: backup-encryption, container-hardening
+- **Impressum**, erweiterte E2E-Smoke-Tests
+
+---
+
+## 31. Post-MVP / Produktions-Härtung
+
+| Thema | Status |
+|-------|--------|
+| Kubernetes, Live-Migration | 🔜 |
+| Passkeys, Werbenetzwerke | 🔜 |
+| ZFS/Ceph Storage-Adapter | 🔜 |
+| Backup Client-Side-Verschlüsselung | 🔜 (Bucket-SSE dokumentiert) |
+| Seccomp/AppArmor Profile | 🔜 (Baseline Docker-Härtung ✅) |
+| ClamAV Upload-Scan | 🔜 |
+| Penetrationstest | 🔜 |
+| Integration-API IP-Allowlist | 🔜 |
+
+---
+
+## 32. Lokales Setup
+
+```bash
+cp .env.example .env
+pnpm dev:infra
+pnpm db:migrate    # oder pnpm db:push bei frischer DB
+pnpm db:seed
+pnpm bootstrap:admin -- --email admin@example.com --password 'Relation123!'
+pnpm dev
+```
+
+Login: `admin@example.com` / `Relation123!`
+
+---
+
+## 33. Pflege-Hinweis
+
+Bei weiteren Änderungen diese Datei und `docs/IMPLEMENTATION_STATUS.md` aktualisieren.
+
+*Erstellt: 2026-07-05 · Sprint 3: 2026-07-05*