feat: Add Excel, PDF export, and user generation modules

- Implemented `excel_export.py` for generating library item exports in Excel format.
- Created `pdf_export.py` for generating audit reports compliant with DIN 5008 standards, including detailed event tables and signature blocks.
- Developed `generate_user.py` for interactive user creation with validation for usernames and passwords.
- Introduced `module_registry.py` for managing module states and path matching.
- Added a basic `__init__.py` in the `terminplaner` module for initialization.

Web/app.py

@@ -29,12 +29,12 @@ from flask import Flask, render_template, request, redirect, url_for, session, f
 from werkzeug.utils import secure_filename
 from werkzeug.middleware.proxy_fix import ProxyFix
 from jinja2 import TemplateNotFound
-import user as us
-import items as it
-import ausleihung as au
-import audit_log as al
+import Web.modules.database.user as us
+import Web.modules.database.items as it
+import Web.modules.database.ausleihung as au
+import Web.modules.logs.audit_log as al
 import push_notifications as pn
-import pdf_export 
+import Web.modules.inventarsystem.pdf_export as pdf_export 
 import datetime
 from apscheduler.schedulers.background import BackgroundScheduler
 from bson.objectid import ObjectId
@@ -69,7 +69,7 @@ import uuid
 from PIL import Image, ImageOps
 import mimetypes
 import subprocess
-from data_protection import (
+from Web.modules.inventarsystem.data_protection import (
     decrypt_document_fields,
     encrypt_document_fields,
     encrypt_soft_deleted_media_pack,
@@ -77,8 +77,8 @@ from data_protection import (
 
 # Set base directory and centralized settings
 BASE_DIR = os.path.dirname(os.path.abspath(__file__))
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 from tenant import get_tenant_context
 
 
@@ -2724,7 +2724,7 @@ def library_export_excel(scope):
     username = session['username']
     is_admin_user = us.check_admin(username)
     
-    import excel_export
+    import Web.modules.inventarsystem.excel_export as excel_export
     client = MongoClient(MONGODB_HOST, MONGODB_PORT)
     db = client[cfg.MONGODB_DB]
     items_collection = db['items']
@@ -10104,7 +10104,7 @@ def reset_item(id):
     
     try:
         # Import the ausleihung module
-        import ausleihung as au
+        import Web.modules.database.ausleihung as au
         
         result = au.reset_item_completely(id)
         

Web/audit_log.py

@@ -1,149 +0,0 @@
-"""
-Tamper-evident audit logging helpers.
-
-The audit chain stores each entry with a hash of the previous entry.
-Any mutation in history breaks the chain verification.
-"""
-
-import datetime
-import hashlib
-import json
-import random
-import time
-
-from pymongo.errors import DuplicateKeyError
-
-
-def _stable_json(value):
-    """Serialize dictionaries in a stable way for deterministic hashing."""
-    return json.dumps(value, sort_keys=True, separators=(",", ":"), ensure_ascii=False, default=str)
-
-
-def _entry_hash(prev_hash, payload):
-    """Build the chained entry hash from previous hash + canonical payload."""
-    base = f"{prev_hash}|{_stable_json(payload)}"
-    return hashlib.sha256(base.encode("utf-8")).hexdigest()
-
-
-def append_audit_event(db, event_type, actor, payload, request_ip=None, source="web", max_retries=5):
-    """
-    Append an audit event to a tamper-evident chain.
-
-    Args:
-        db: MongoDB database handle.
-        event_type (str): Event category.
-        actor (str): User/system who performed the action.
-        payload (dict): Event details.
-        request_ip (str, optional): Request origin.
-        source (str): Source subsystem.
-
-    Returns:
-        dict: Inserted audit entry.
-    """
-    logs = db["audit_log"]
-    attempts = 0
-
-    while attempts <= max_retries:
-        previous = logs.find_one(sort=[("chain_index", -1)])
-        prev_hash = previous.get("entry_hash", "") if previous else ""
-        chain_index = int(previous.get("chain_index", 0)) + 1 if previous else 1
-
-        timestamp = datetime.datetime.utcnow()
-        entry_payload = {
-            "event_type": event_type,
-            "actor": actor or "system",
-            "source": source,
-            "ip": request_ip or "",
-            "payload": payload or {},
-            "timestamp": timestamp.isoformat() + "Z",
-        }
-
-        entry_hash = _entry_hash(prev_hash, entry_payload)
-
-        entry = {
-            **entry_payload,
-            "created_at": timestamp,
-            "prev_hash": prev_hash,
-            "entry_hash": entry_hash,
-            "chain_index": chain_index,
-        }
-
-        try:
-            logs.insert_one(entry)
-            return entry
-        except DuplicateKeyError:
-            attempts += 1
-            if attempts > max_retries:
-                raise
-            # Exponential backoff with jitter to avoid retry storms.
-            delay = min(0.25, (0.005 * (2 ** attempts)) + random.random() * 0.01)
-            time.sleep(delay)
-
-
-def ensure_audit_indexes(db):
-    """Create indexes required for fast and safe audit operations."""
-    logs = db["audit_log"]
-    logs.create_index("chain_index", unique=True, name="audit_chain_index_unique")
-    logs.create_index("created_at", name="audit_created_at_idx")
-    logs.create_index("event_type", name="audit_event_type_idx")
-
-
-def verify_audit_chain(db):
-    """Verify hash chain integrity across all stored audit entries."""
-    logs = db["audit_log"]
-    entries = list(logs.find({}, {"_id": 1, "event_type": 1, "actor": 1, "source": 1, "ip": 1, "payload": 1, "timestamp": 1, "prev_hash": 1, "entry_hash": 1, "chain_index": 1}).sort("chain_index", 1))
-
-    previous_hash = ""
-    previous_index = 0
-    mismatches = []
-
-    for entry in entries:
-        chain_index = int(entry.get("chain_index", 0))
-        prev_hash = entry.get("prev_hash", "")
-        entry_hash = entry.get("entry_hash", "")
-
-        payload = {
-            "event_type": entry.get("event_type", ""),
-            "actor": entry.get("actor", ""),
-            "source": entry.get("source", ""),
-            "ip": entry.get("ip", ""),
-            "payload": entry.get("payload", {}),
-            "timestamp": entry.get("timestamp", ""),
-        }
-
-        expected_hash = _entry_hash(previous_hash, payload)
-
-        if chain_index != previous_index + 1:
-            mismatches.append({
-                "chain_index": chain_index,
-                "error": "chain_index_gap",
-                "expected": previous_index + 1,
-                "found": chain_index,
-            })
-
-        if prev_hash != previous_hash:
-            mismatches.append({
-                "chain_index": chain_index,
-                "error": "prev_hash_mismatch",
-                "expected": previous_hash,
-                "found": prev_hash,
-            })
-
-        if entry_hash != expected_hash:
-            mismatches.append({
-                "chain_index": chain_index,
-                "error": "entry_hash_mismatch",
-                "expected": expected_hash,
-                "found": entry_hash,
-            })
-
-        previous_hash = entry_hash
-        previous_index = chain_index
-
-    return {
-        "ok": len(mismatches) == 0,
-        "count": len(entries),
-        "last_chain_index": previous_index,
-        "last_hash": previous_hash,
-        "mismatches": mismatches,
-    }

Web/ausleihung_log.py

@@ -1,45 +0,0 @@
-'''
-   Copyright 2025-2026 AIIrondev
-
-   Licensed under the Inventarsystem EULA (Endbenutzer-Lizenzvertrag).
-   See Legal/LICENSE for the full license text.
-   Unauthorized commercial use, SaaS hosting, or removal of branding is prohibited.
-   For commercial licensing inquiries: https://github.com/AIIrondev
-'''
-"""
-Funktion zum Protokollieren von Statusänderungen bei Ausleihungen
-"""
-import os
-import datetime
-from bson.objectid import ObjectId
-
-def log_status_change(ausleihung_id, old_status, new_status, user=None):
-    """
-    Protokolliert eine Statusänderung einer Ausleihung in einer Log-Datei.
-    
-    Args:
-        ausleihung_id: Die ID der Ausleihung
-        old_status: Der alte Status
-        new_status: Der neue Status
-        user: Der Benutzer, der die Änderung vorgenommen hat (optional)
-    """
-    try:
-        # Erstelle Log-Verzeichnis, falls es nicht existiert
-        log_dir = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), 'logs')
-        if not os.path.exists(log_dir):
-            os.makedirs(log_dir)
-        
-        # Log-Datei für Statusänderungen
-        log_file = os.path.join(log_dir, 'ausleihungen_status_changes.log')
-        
-        # Protokolliere die Änderung
-        timestamp = datetime.datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-        user_info = f" by {user}" if user else ""
-        
-        with open(log_file, 'a', encoding='utf-8') as f:
-            f.write(f"{timestamp}: Ausleihung {ausleihung_id} - Status changed from '{old_status}' to '{new_status}'{user_info}\n")
-            
-        return True
-    except Exception as e:
-        print(f"Fehler beim Protokollieren der Statusänderung: {e}")
-        return False

Web/modules/database/__init__.py

@@ -0,0 +1,4 @@
+"""
+"""
+
+# Log initialization

Web/modules/database/ausleihung.py

@@ -32,8 +32,8 @@ from datetime import timezone
 import os
 import json
 import shutil
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 
 # Add this helper function after imports
 def ensure_timezone_aware(dt):
@@ -103,7 +103,7 @@ def get_current_status(ausleihung, log_changes=False, user=None):
     if log_changes and new_status != original_status and '_id' in ausleihung:
         try:
             # Importieren Sie das Modul nur bei Bedarf, um zirkuläre Importe zu vermeiden
-            import ausleihung_log
+            import Web.modules.logs.ausleihung_log as ausleihung_log
             ausleihung_log.log_status_change(
                 str(ausleihung['_id']), 
                 original_status, 

Web/modules/database/items.py

@@ -28,8 +28,8 @@ Collection Structure:
 '''
 from bson.objectid import ObjectId
 import datetime
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 
 
 LIBRARY_ITEM_TYPES = ('book', 'cd', 'dvd', 'media')

Web/modules/database/settings.py

@@ -211,7 +211,7 @@ class _TenantAwareBool:
         return f"_TenantAwareBool(module_name={self.module_name!r}, value={self.resolve()!r})"
 
 
-from module_registry import registry as MODULES
+from Web.modules.module_registry import registry as MODULES
 
 INVENTORY_MODULE_ENABLED = _TenantAwareBool('inventory', _get(_conf, ['modules', 'inventory', 'enabled'], DEFAULTS['modules']['inventory']['enabled']))
 LIBRARY_MODULE_ENABLED = _TenantAwareBool('library', _get(_conf, ['modules', 'library', 'enabled'], DEFAULTS['modules']['library']['enabled']))

Web/modules/database/update_filters.py

@@ -1,5 +1,5 @@
 from pymongo import MongoClient
-import Web.settings as cfg
+import Web.modules.database.settings as cfg
 
 def get_filter_names():
     client = MongoClient(cfg.MONGODB_HOST, cfg.MONGODB_PORT)

Web/modules/database/user.py

@@ -17,8 +17,8 @@ import re
 import secrets
 import string
 from bson.objectid import ObjectId
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 
 logger = logging.getLogger('app')
 logger.setLevel(logging.DEBUG)

Web/modules/inventarsystem/__init__.py

@@ -0,0 +1,6 @@
+"""
+Inventar System Funktionen
+
+
+
+"""

Web/modules/inventarsystem/data_protection.py

@@ -10,7 +10,7 @@ from datetime import datetime
 
 from cryptography.fernet import Fernet, InvalidToken
 
-import settings as cfg
+import Web.modules.database.settings as cfg
 
 _ENC_PREFIX = "enc::"
 

Web/modules/inventarsystem/generate_user.py

@@ -6,7 +6,7 @@
    Unauthorized commercial use, SaaS hosting, or removal of branding is prohibited.
    For commercial licensing inquiries: https://github.com/AIIrondev
 '''
-import user
+import Web.modules.database.user as user
 import sys
 import getpass
 import re

Web/modules/inventarsystem/pdf_export.py

@@ -18,7 +18,7 @@ from reportlab.pdfgen import canvas
 from reportlab.lib.enums import TA_LEFT, TA_RIGHT, TA_CENTER, TA_JUSTIFY
 from reportlab.pdfbase import pdfmetrics
 from reportlab.pdfbase.ttfonts import TTFont
-import settings as cfg
+import Web.modules.database.settings as cfg
 
 
 __version__ = cfg.APP_VERSION

Web/modules/terminplaner/__init__.py

@@ -0,0 +1 @@
+print("hello")

Web/push_notifications.py

@@ -11,8 +11,8 @@ import requests
 import hashlib
 import logging
 
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 
 logger = logging.getLogger(__name__)
 

Web/tenant.py

@@ -12,8 +12,8 @@ from functools import wraps
 import logging
 import os
 import re
-import settings as cfg
-from settings import MongoClient
+import Web.modules.database.settings as cfg
+from Web.modules.database.settings import MongoClient
 
 logger = logging.getLogger(__name__)