feat: add Skills management settings UI and API routes (AIIA-97)

- Skill types (src/types/skill.ts) with form data, slugify helper
- Skills settings component with list view (drag-and-drop reorder),
  editor form (name, slug, prompt, output type, JSON schema, context
  requirements, active toggle), system skill protection
- API routes: GET/POST /api/settings/skills, GET/PATCH/DELETE
  /api/settings/skills/[id], PATCH /api/settings/skills/reorder
- Integrated into /einstellungen page (admin only)
- API routes depend on `skills` table from AIIA-94 schema migration

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.gitea/workflows/deploy.yml

@@ -9,16 +9,15 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - name: Deploy via SSH
-        uses: appleboy/ssh-action@v1
-        with:
-          host: ${{ secrets.VPS_HOST }}
-          username: ${{ secrets.VPS_USER }}
-          key: ${{ secrets.VPS_SSH_KEY }}
-          port: ${{ secrets.VPS_PORT || 22 }}
-          script: |
-            cd ${{ secrets.VPS_PROJECT_PATH || '/opt/legalai' }}
-            git pull origin master
-            docker compose build app
-            docker compose up -d app
-            echo "Deployed commit: $(git rev-parse --short HEAD)"
+      - name: Pull latest code
+        run: |
+          cd /home/remmer/StageAI
+          git pull origin master
+
+      - name: Build and deploy
+        run: |
+          cd /home/remmer/StageAI
+          export COMMIT_HASH=$(git rev-parse --short HEAD)
+          docker compose build app
+          docker compose up -d app
+          echo "Deployed commit: $COMMIT_HASH"

Dockerfile

@@ -7,6 +7,8 @@ RUN npm ci
 
 FROM base AS builder
 WORKDIR /app
+ARG COMMIT_HASH=dev
+ENV NEXT_PUBLIC_BUILD_HASH=$COMMIT_HASH
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 RUN npm run build

deploy.sh

@@ -38,8 +38,9 @@ git reset --hard "origin/$BRANCH"
 echo "Updated to: $(git log --oneline -1)"
 
 # Rebuild containers
+export COMMIT_HASH=$(git rev-parse --short HEAD)
 echo ""
-echo "Rebuilding containers..."
+echo "Rebuilding containers (commit: $COMMIT_HASH)..."
 docker compose -p "$PROJECT_NAME" build --no-cache app
 
 if [[ "$BUILD_ONLY" == true ]]; then

docker-compose.yml

@@ -1,6 +1,9 @@
 services:
   app:
-    build: .
+    build:
+      context: .
+      args:
+        COMMIT_HASH: ${COMMIT_HASH:-dev}
     ports:
       - "3002:3000"
     environment:
@@ -13,6 +16,8 @@ services:
       - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
       - OPENAI_API_KEY=${OPENAI_API_KEY}
       - ENCRYPTION_KEY=${ENCRYPTION_KEY}
+    volumes:
+      - uploads_data:/app/uploads
     depends_on:
       postgres:
         condition: service_healthy
@@ -48,3 +53,4 @@ services:
 volumes:
   postgres_data:
   meilisearch_data:
+  uploads_data:

drizzle/meta/_journal.json

@@ -29,6 +29,13 @@
       "when": 1775775900000,
       "tag": "0003_tenant_api_keys",
       "breakpoints": true
+    },
+    {
+      "idx": 4,
+      "version": "7",
+      "when": 1775856000000,
+      "tag": "0004_document_source_scope",
+      "breakpoints": true
     }
   ]
 }

next.config.ts

@@ -11,7 +11,7 @@ const commitHash = (() => {
 
 const nextConfig: NextConfig = {
   output: "standalone",
-  serverExternalPackages: ["pdf-parse", "drizzle-orm", "pg"],
+  serverExternalPackages: ["pdfjs-dist", "drizzle-orm", "pg"],
   env: {
     NEXT_PUBLIC_BUILD_HASH: commitHash,
   },

package-lock.json

@@ -17,7 +17,7 @@
         "mammoth": "^1.12.0",
         "next": "16.2.3",
         "next-auth": "^4.24.13",
-        "pdf-parse": "^2.4.5",
+        "pdfjs-dist": "^5.4.296",
         "pg": "^8.20.0",
         "react": "19.2.4",
         "react-dom": "19.2.4"
@@ -2058,6 +2058,7 @@
       "resolved": "https://registry.npmjs.org/@napi-rs/canvas/-/canvas-0.1.80.tgz",
       "integrity": "sha512-DxuT1ClnIPts1kQx8FBmkk4BQDTfI5kIzywAaMjQSXfNnra5UFU9PwurXrl+Je3bJ6BGsp/zmshVVFbCmyI+ww==",
       "license": "MIT",
+      "optional": true,
       "workspaces": [
         "e2e/*"
       ],
@@ -7148,26 +7149,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/pdf-parse": {
-      "version": "2.4.5",
-      "resolved": "https://registry.npmjs.org/pdf-parse/-/pdf-parse-2.4.5.tgz",
-      "integrity": "sha512-mHU89HGh7v+4u2ubfnevJ03lmPgQ5WU4CxAVmTSh/sxVTEDYd1er/dKS/A6vg77NX47KTEoihq8jZBLr8Cxuwg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@napi-rs/canvas": "0.1.80",
-        "pdfjs-dist": "5.4.296"
-      },
-      "bin": {
-        "pdf-parse": "bin/cli.mjs"
-      },
-      "engines": {
-        "node": ">=20.16.0 <21 || >=22.3.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/mehmet-kozan"
-      }
-    },
     "node_modules/pdfjs-dist": {
       "version": "5.4.296",
       "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-5.4.296.tgz",

package.json

@@ -18,7 +18,7 @@
     "mammoth": "^1.12.0",
     "next": "16.2.3",
     "next-auth": "^4.24.13",
-    "pdf-parse": "^2.4.5",
+    "pdfjs-dist": "^5.4.296",
     "pg": "^8.20.0",
     "react": "19.2.4",
     "react-dom": "19.2.4"

src/app/(dashboard)/analyse/[id]/analyse-detail.tsx

@@ -0,0 +1,37 @@
+'use client';
+
+interface Props {
+  analysisId: string;
+  result: string | null;
+  title: string;
+}
+
+export default function AnalyseDetail({ analysisId, result, title }: Props) {
+  return (
+    <div className="space-y-4">
+      <div className="flex gap-2">
+        {result && (
+          <a
+            href={`/api/analyses/${analysisId}?action=export-txt`}
+            className="px-4 py-2 text-sm font-medium bg-primary/10 text-primary rounded-lg hover:bg-primary/20 transition-colors"
+          >
+            Als Text exportieren
+          </a>
+        )}
+      </div>
+
+      {result ? (
+        <div className="bg-card-bg border border-card-border rounded-xl p-6">
+          <h3 className="text-sm font-semibold text-foreground mb-4">Ergebnis</h3>
+          <div className="prose prose-sm max-w-none text-foreground whitespace-pre-wrap">
+            {result}
+          </div>
+        </div>
+      ) : (
+        <div className="bg-card-bg border border-card-border rounded-xl p-8 text-center">
+          <p className="text-muted text-sm">Noch kein Ergebnis verfuegbar.</p>
+        </div>
+      )}
+    </div>
+  );
+}

src/app/(dashboard)/analyse/[id]/page.tsx

@@ -0,0 +1,88 @@
+import { getServerSession } from 'next-auth';
+import { authOptions } from '@/lib/auth';
+import { withTenantDb } from '@/lib/db';
+import { analyses } from '@/lib/db/schema';
+import { eq } from 'drizzle-orm';
+import { notFound } from 'next/navigation';
+import Link from 'next/link';
+import AnalyseDetail from './analyse-detail';
+
+const MODE_LABELS: Record<string, string> = {
+  gutachten: 'Gutachten',
+  entscheidung: 'Entscheidungsprognose',
+  vergleich: 'Vergleichsanalyse',
+  risiko: 'Risikoanalyse',
+};
+
+const STATUS_LABELS: Record<string, string> = {
+  draft: 'Entwurf',
+  in_progress: 'In Bearbeitung',
+  completed: 'Abgeschlossen',
+  archived: 'Archiviert',
+};
+
+export default async function AnalyseDetailPage({
+  params,
+}: {
+  params: Promise<{ id: string }>;
+}) {
+  const session = await getServerSession(authOptions);
+  const tenantId = session!.user.tenantId;
+  const { id } = await params;
+
+  const analysis = await withTenantDb(tenantId, async (tdb) => {
+    const [a] = await tdb
+      .select()
+      .from(analyses)
+      .where(eq(analyses.id, id))
+      .limit(1);
+    return a ?? null;
+  });
+
+  if (!analysis) notFound();
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center gap-3">
+        <Link
+          href="/analyse"
+          className="text-sm text-muted hover:text-foreground transition-colors"
+        >
+          ← Zurueck
+        </Link>
+      </div>
+
+      <div className="flex items-start justify-between gap-4">
+        <div>
+          <h2 className="text-xl font-bold text-foreground">{analysis.title}</h2>
+          <p className="text-sm text-muted mt-1">
+            {MODE_LABELS[analysis.mode] ?? analysis.mode}
+            {' · '}
+            {STATUS_LABELS[analysis.status] ?? analysis.status}
+            {' · '}
+            {new Date(analysis.createdAt).toLocaleDateString('de-DE', {
+              day: '2-digit',
+              month: '2-digit',
+              year: 'numeric',
+              hour: '2-digit',
+              minute: '2-digit',
+            })}
+          </p>
+        </div>
+      </div>
+
+      {analysis.query && (
+        <div className="bg-card-bg border border-card-border rounded-xl p-5">
+          <h3 className="text-sm font-semibold text-foreground mb-2">Fragestellung</h3>
+          <p className="text-sm text-muted whitespace-pre-wrap">{analysis.query}</p>
+        </div>
+      )}
+
+      <AnalyseDetail
+        analysisId={analysis.id}
+        result={analysis.result}
+        title={analysis.title}
+      />
+    </div>
+  );
+}

src/app/(dashboard)/analyse/page.tsx

@@ -89,7 +89,7 @@ export default async function AnalysePage() {
           <h3 className="text-lg font-semibold text-foreground mb-4">Bisherige Analysen</h3>
           <div className="bg-card-bg border border-card-border rounded-xl divide-y divide-card-border">
             {recentAnalyses.map((a) => (
-              <div key={a.id} className="px-5 py-4 flex items-center justify-between">
+              <Link key={a.id} href={`/analyse/${a.id}`} className="px-5 py-4 flex items-center justify-between hover:bg-gray-50 transition-colors">
                 <div>
                   <p className="text-sm font-medium text-foreground">{a.title || 'Ohne Titel'}</p>
                   <p className="text-xs text-muted mt-0.5">
@@ -99,7 +99,7 @@ export default async function AnalysePage() {
                 <span className="text-xs text-muted">
                   {new Date(a.createdAt).toLocaleDateString('de-DE')}
                 </span>
-              </div>
+              </Link>
             ))}
           </div>
         </div>

src/app/(dashboard)/dokumente/dokumente-archiv.tsx

@@ -0,0 +1,235 @@
+'use client';
+
+import { useState } from 'react';
+import { useRouter } from 'next/navigation';
+
+interface DocumentItem {
+  id: string;
+  filename: string;
+  mimeType: string;
+  fileSizeBytes: number;
+  category: string;
+  sourceScope: string;
+  status: string;
+  errorMessage: string | null;
+  caseId: string | null;
+  createdAt: Date | string;
+  updatedAt: Date | string;
+}
+
+interface Props {
+  documents: DocumentItem[];
+  currentCategory: string;
+  currentPage: number;
+  categoryLabels: Record<string, string>;
+}
+
+const STATUS_LABELS: Record<string, string> = {
+  uploaded: 'Hochgeladen',
+  extracting: 'Extrahiere...',
+  extracted: 'Extrahiert',
+  failed: 'Fehlgeschlagen',
+};
+
+const STATUS_COLORS: Record<string, string> = {
+  uploaded: 'bg-blue-500/10 text-blue-700',
+  extracting: 'bg-yellow-500/10 text-yellow-700',
+  extracted: 'bg-green-500/10 text-green-700',
+  failed: 'bg-red-500/10 text-red-700',
+};
+
+function formatFileSize(bytes: number): string {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(0)} KB`;
+  return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
+}
+
+export default function DokumenteArchiv({ documents, currentCategory, currentPage, categoryLabels }: Props) {
+  const router = useRouter();
+  const [viewingDoc, setViewingDoc] = useState<{ id: string; filename: string; text: string } | null>(null);
+  const [loading, setLoading] = useState<string | null>(null);
+
+  async function handleView(doc: DocumentItem) {
+    if (doc.status !== 'extracted') return;
+    setLoading(doc.id);
+    try {
+      const res = await fetch(`/api/documents/${doc.id}?action=view`);
+      if (!res.ok) throw new Error('Laden fehlgeschlagen');
+      const data = await res.json();
+      setViewingDoc({
+        id: doc.id,
+        filename: doc.filename,
+        text: data.extractedText || 'Kein Text verfuegbar.',
+      });
+    } catch {
+      alert('Dokument konnte nicht geladen werden.');
+    } finally {
+      setLoading(null);
+    }
+  }
+
+  function handleCategoryChange(cat: string) {
+    const params = new URLSearchParams();
+    if (cat !== 'all') params.set('category', cat);
+    router.push(`/dokumente?${params}`);
+  }
+
+  return (
+    <>
+      {/* Category filter */}
+      <div className="flex gap-2 flex-wrap">
+        {['all', ...Object.keys(categoryLabels)].map((cat) => (
+          <button
+            key={cat}
+            onClick={() => handleCategoryChange(cat)}
+            className={`px-3 py-1.5 rounded-lg text-sm font-medium transition-colors ${
+              currentCategory === cat
+                ? 'bg-primary text-white'
+                : 'bg-card-bg border border-card-border text-muted hover:text-foreground'
+            }`}
+          >
+            {cat === 'all' ? 'Alle' : categoryLabels[cat] ?? cat}
+          </button>
+        ))}
+      </div>
+
+      {/* Document list */}
+      {documents.length === 0 ? (
+        <div className="bg-card-bg border border-card-border rounded-xl p-8 text-center">
+          <p className="text-muted text-sm">Keine Dokumente gefunden.</p>
+        </div>
+      ) : (
+        <div className="bg-card-bg border border-card-border rounded-xl divide-y divide-card-border">
+          {documents.map((doc) => (
+            <div key={doc.id} className="px-5 py-4">
+              <div className="flex items-center justify-between gap-4">
+                <div className="min-w-0 flex-1">
+                  <p className="text-sm font-medium text-foreground truncate">{doc.filename}</p>
+                  <p className="text-xs text-muted mt-0.5">
+                    {formatFileSize(doc.fileSizeBytes)}
+                    {' · '}
+                    {categoryLabels[doc.category] ?? doc.category}
+                    {' · '}
+                    {new Date(doc.createdAt).toLocaleDateString('de-DE', {
+                      day: '2-digit',
+                      month: '2-digit',
+                      year: 'numeric',
+                      hour: '2-digit',
+                      minute: '2-digit',
+                    })}
+                  </p>
+                </div>
+
+                <span
+                  className={`text-xs px-2 py-0.5 rounded-full font-medium shrink-0 ${
+                    STATUS_COLORS[doc.status] ?? 'bg-gray-500/10 text-gray-600'
+                  }`}
+                >
+                  {STATUS_LABELS[doc.status] ?? doc.status}
+                </span>
+
+                <div className="flex gap-2 shrink-0">
+                  {doc.status === 'extracted' && (
+                    <button
+                      onClick={() => handleView(doc)}
+                      disabled={loading === doc.id}
+                      className="px-3 py-1.5 text-xs font-medium bg-primary/10 text-primary rounded-lg hover:bg-primary/20 transition-colors disabled:opacity-50"
+                    >
+                      {loading === doc.id ? '...' : 'Ansehen'}
+                    </button>
+                  )}
+                  <a
+                    href={`/api/documents/${doc.id}?action=download`}
+                    className="px-3 py-1.5 text-xs font-medium bg-card-bg border border-card-border text-foreground rounded-lg hover:bg-gray-50 transition-colors"
+                  >
+                    Herunterladen
+                  </a>
+                  {doc.status === 'extracted' && (
+                    <a
+                      href={`/api/documents/${doc.id}?action=export-txt`}
+                      className="px-3 py-1.5 text-xs font-medium bg-card-bg border border-card-border text-foreground rounded-lg hover:bg-gray-50 transition-colors"
+                    >
+                      Als Text
+                    </a>
+                  )}
+                </div>
+              </div>
+
+              {doc.status === 'failed' && doc.errorMessage && (
+                <div className="mt-2 bg-red-50 border border-red-200 rounded-lg p-2 text-xs text-red-700">
+                  {doc.errorMessage}
+                </div>
+              )}
+            </div>
+          ))}
+        </div>
+      )}
+
+      {/* Pagination */}
+      <div className="flex gap-2 justify-center">
+        {currentPage > 1 && (
+          <button
+            onClick={() => {
+              const params = new URLSearchParams();
+              if (currentCategory !== 'all') params.set('category', currentCategory);
+              params.set('page', String(currentPage - 1));
+              router.push(`/dokumente?${params}`);
+            }}
+            className="px-4 py-2 text-sm bg-card-bg border border-card-border rounded-lg hover:bg-gray-50"
+          >
+            Zurueck
+          </button>
+        )}
+        {documents.length === 20 && (
+          <button
+            onClick={() => {
+              const params = new URLSearchParams();
+              if (currentCategory !== 'all') params.set('category', currentCategory);
+              params.set('page', String(currentPage + 1));
+              router.push(`/dokumente?${params}`);
+            }}
+            className="px-4 py-2 text-sm bg-card-bg border border-card-border rounded-lg hover:bg-gray-50"
+          >
+            Weiter
+          </button>
+        )}
+      </div>
+
+      {/* Document viewer modal */}
+      {viewingDoc && (
+        <div className="fixed inset-0 bg-black/50 z-50 flex items-center justify-center p-4">
+          <div className="bg-white rounded-2xl shadow-xl max-w-4xl w-full max-h-[90vh] flex flex-col">
+            <div className="flex items-center justify-between px-6 py-4 border-b">
+              <h3 className="text-sm font-semibold text-foreground truncate">{viewingDoc.filename}</h3>
+              <div className="flex gap-2 shrink-0">
+                <a
+                  href={`/api/documents/${viewingDoc.id}?action=download`}
+                  className="px-3 py-1.5 text-xs font-medium bg-primary/10 text-primary rounded-lg hover:bg-primary/20 transition-colors"
+                >
+                  Original herunterladen
+                </a>
+                <a
+                  href={`/api/documents/${viewingDoc.id}?action=export-txt`}
+                  className="px-3 py-1.5 text-xs font-medium bg-primary/10 text-primary rounded-lg hover:bg-primary/20 transition-colors"
+                >
+                  Als Text exportieren
+                </a>
+                <button
+                  onClick={() => setViewingDoc(null)}
+                  className="px-3 py-1.5 text-xs font-medium bg-gray-100 text-gray-700 rounded-lg hover:bg-gray-200 transition-colors"
+                >
+                  Schliessen
+                </button>
+              </div>
+            </div>
+            <div className="flex-1 overflow-auto p-6">
+              <pre className="whitespace-pre-wrap text-sm text-foreground font-sans leading-relaxed">
+                {viewingDoc.text}
+              </pre>
+            </div>
+          </div>
+        </div>
+      )}
+    </>
+  );
+}

src/app/(dashboard)/dokumente/page.tsx

@@ -0,0 +1,69 @@
+import { getServerSession } from 'next-auth';
+import { authOptions } from '@/lib/auth';
+import { db } from '@/lib/db';
+import { documents } from '@/lib/db/schema';
+import { desc, eq, and, ilike } from 'drizzle-orm';
+import DokumenteArchiv from './dokumente-archiv';
+
+const CATEGORY_LABELS: Record<string, string> = {
+  entscheidung: 'Entscheidung',
+  norm: 'Norm',
+  falldokument: 'Falldokument',
+  sonstiges: 'Sonstiges',
+};
+
+export default async function DokumentePage({
+  searchParams,
+}: {
+  searchParams: Promise<{ category?: string; page?: string }>;
+}) {
+  const session = await getServerSession(authOptions);
+  const tenantId = session!.user.tenantId;
+  const { category, page } = await searchParams;
+  const currentPage = parseInt(page ?? '1', 10);
+  const pageSize = 20;
+  const offset = (currentPage - 1) * pageSize;
+
+  const conditions = [eq(documents.tenantId, tenantId)];
+  if (category && category !== 'all') {
+    conditions.push(eq(documents.category, category as any));
+  }
+
+  const docs = await db
+    .select({
+      id: documents.id,
+      filename: documents.filename,
+      mimeType: documents.mimeType,
+      fileSizeBytes: documents.fileSizeBytes,
+      category: documents.category,
+      sourceScope: documents.sourceScope,
+      status: documents.status,
+      errorMessage: documents.errorMessage,
+      caseId: documents.caseId,
+      createdAt: documents.createdAt,
+      updatedAt: documents.updatedAt,
+    })
+    .from(documents)
+    .where(and(...conditions))
+    .orderBy(desc(documents.createdAt))
+    .limit(pageSize)
+    .offset(offset);
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <h2 className="text-xl font-bold text-foreground">Dokumentenarchiv</h2>
+        <p className="text-sm text-muted mt-1">
+          Alle hochgeladenen Dokumente einsehen, herunterladen und exportieren.
+        </p>
+      </div>
+
+      <DokumenteArchiv
+        documents={docs}
+        currentCategory={category ?? 'all'}
+        currentPage={currentPage}
+        categoryLabels={CATEGORY_LABELS}
+      />
+    </div>
+  );
+}

src/app/(dashboard)/einstellungen/page.tsx

@@ -6,6 +6,7 @@ import { tenants, users } from '@/lib/db/schema';
 import { eq } from 'drizzle-orm';
 import AISettingsForm from './ai-settings';
 import ApiKeySettings from './api-key-settings';
+import SkillsSettings from './skills-settings';
 
 const ROLE_LABELS: Record<string, string> = {
   admin: 'Administrator',
@@ -76,6 +77,8 @@ export default async function EinstellungenPage() {
 
       {isAdmin && <ApiKeySettings />}
 
+      {isAdmin && <SkillsSettings />}
+
       {isAdmin && tenantUsers.length > 0 && (
         <div className="bg-card-bg border border-card-border rounded-xl p-6">
           <h3 className="text-sm font-semibold text-foreground mb-4">Benutzer</h3>

src/app/(dashboard)/einstellungen/skills-settings.tsx

@@ -0,0 +1,496 @@
+'use client';
+
+import { useEffect, useState, useCallback } from 'react';
+import type { Skill, SkillFormData } from '@/types/skill';
+import { emptySkillForm, slugify } from '@/types/skill';
+
+const OUTPUT_TYPE_LABELS: Record<string, string> = {
+  analysis: 'Analyse',
+  structured_data: 'Strukturierte Daten',
+};
+
+export default function SkillsSettings() {
+  const [skills, setSkills] = useState<Skill[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [message, setMessage] = useState<{ type: 'success' | 'error'; text: string } | null>(null);
+
+  // Editor state
+  const [editing, setEditing] = useState<Skill | null>(null); // null = creating new
+  const [showEditor, setShowEditor] = useState(false);
+  const [form, setForm] = useState<SkillFormData>(emptySkillForm());
+  const [saving, setSaving] = useState(false);
+  const [slugManual, setSlugManual] = useState(false);
+
+  // Drag state
+  const [dragIdx, setDragIdx] = useState<number | null>(null);
+
+  const loadSkills = useCallback(async () => {
+    try {
+      const res = await fetch('/api/settings/skills');
+      if (res.ok) {
+        const data = await res.json();
+        setSkills(data);
+      }
+    } catch {
+      // ignore
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    loadSkills();
+  }, [loadSkills]);
+
+  function openCreate() {
+    setEditing(null);
+    setForm(emptySkillForm());
+    setSlugManual(false);
+    setShowEditor(true);
+    setMessage(null);
+  }
+
+  function openEdit(skill: Skill) {
+    setEditing(skill);
+    setForm({
+      name: skill.name,
+      slug: skill.slug,
+      description: skill.description ?? '',
+      systemPrompt: skill.systemPrompt,
+      outputType: skill.outputType,
+      outputSchema: skill.outputSchema ? JSON.stringify(skill.outputSchema, null, 2) : '',
+      requiresNorms: skill.requiresNorms,
+      requiresDecisions: skill.requiresDecisions,
+      isActive: skill.isActive,
+    });
+    setSlugManual(true);
+    setShowEditor(true);
+    setMessage(null);
+  }
+
+  function closeEditor() {
+    setShowEditor(false);
+    setEditing(null);
+    setForm(emptySkillForm());
+    setMessage(null);
+  }
+
+  function handleNameChange(name: string) {
+    setForm((f) => ({
+      ...f,
+      name,
+      ...(!slugManual && { slug: slugify(name) }),
+    }));
+  }
+
+  function handleSlugChange(slug: string) {
+    setSlugManual(true);
+    setForm((f) => ({ ...f, slug }));
+  }
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault();
+    if (!form.name.trim() || !form.slug.trim() || !form.systemPrompt.trim()) {
+      setMessage({ type: 'error', text: 'Name, Slug und System-Prompt sind Pflichtfelder.' });
+      return;
+    }
+
+    // Validate JSON schema if structured data
+    let outputSchema: Record<string, unknown> | null = null;
+    if (form.outputType === 'structured_data') {
+      if (!form.outputSchema.trim()) {
+        setMessage({ type: 'error', text: 'JSON Schema ist bei strukturierten Daten erforderlich.' });
+        return;
+      }
+      try {
+        outputSchema = JSON.parse(form.outputSchema);
+      } catch {
+        setMessage({ type: 'error', text: 'Ungültiges JSON im Schema-Feld.' });
+        return;
+      }
+    }
+
+    setSaving(true);
+    setMessage(null);
+
+    const payload = {
+      name: form.name.trim(),
+      slug: form.slug.trim(),
+      description: form.description.trim() || null,
+      systemPrompt: form.systemPrompt,
+      outputType: form.outputType,
+      outputSchema,
+      requiresNorms: form.requiresNorms,
+      requiresDecisions: form.requiresDecisions,
+      isActive: form.isActive,
+    };
+
+    try {
+      const url = editing
+        ? `/api/settings/skills/${editing.id}`
+        : '/api/settings/skills';
+      const method = editing ? 'PATCH' : 'POST';
+
+      const res = await fetch(url, {
+        method,
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(payload),
+      });
+
+      if (res.ok) {
+        setMessage({ type: 'success', text: editing ? 'Skill aktualisiert.' : 'Skill erstellt.' });
+        closeEditor();
+        await loadSkills();
+      } else {
+        const data = await res.json();
+        setMessage({ type: 'error', text: data.error ?? 'Fehler beim Speichern.' });
+      }
+    } catch {
+      setMessage({ type: 'error', text: 'Netzwerkfehler.' });
+    } finally {
+      setSaving(false);
+    }
+  }
+
+  async function handleDelete(skill: Skill) {
+    if (skill.isSystem) return;
+    if (!confirm(`Skill "${skill.name}" wirklich löschen?`)) return;
+
+    try {
+      const res = await fetch(`/api/settings/skills/${skill.id}`, { method: 'DELETE' });
+      if (res.ok) {
+        setMessage({ type: 'success', text: 'Skill deaktiviert.' });
+        await loadSkills();
+      } else {
+        const data = await res.json();
+        setMessage({ type: 'error', text: data.error ?? 'Fehler beim Löschen.' });
+      }
+    } catch {
+      setMessage({ type: 'error', text: 'Netzwerkfehler.' });
+    }
+  }
+
+  async function handleToggleActive(skill: Skill) {
+    try {
+      const res = await fetch(`/api/settings/skills/${skill.id}`, {
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ isActive: !skill.isActive }),
+      });
+      if (res.ok) await loadSkills();
+    } catch {
+      // ignore
+    }
+  }
+
+  function handleResetToDefault(skill: Skill) {
+    if (!skill.isSystem) return;
+    // Prefill with current values — the backend handles "reset" by restoring original system prompt
+    // For now, we just re-fetch. A future enhancement could add a dedicated reset endpoint.
+    setMessage({ type: 'error', text: 'Zurücksetzen auf Standard wird noch nicht unterstützt.' });
+  }
+
+  // Drag-and-drop reorder
+  function handleDragStart(idx: number) {
+    setDragIdx(idx);
+  }
+
+  function handleDragOver(e: React.DragEvent, idx: number) {
+    e.preventDefault();
+    if (dragIdx === null || dragIdx === idx) return;
+
+    const reordered = [...skills];
+    const [moved] = reordered.splice(dragIdx, 1);
+    reordered.splice(idx, 0, moved);
+    setSkills(reordered);
+    setDragIdx(idx);
+  }
+
+  async function handleDragEnd() {
+    if (dragIdx === null) return;
+    setDragIdx(null);
+
+    const order = skills.map((s, i) => ({ id: s.id, sortOrder: i }));
+    try {
+      await fetch('/api/settings/skills/reorder', {
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ order }),
+      });
+    } catch {
+      await loadSkills(); // revert on error
+    }
+  }
+
+  if (loading) {
+    return (
+      <div className="bg-card-bg border border-card-border rounded-xl p-6">
+        <p className="text-sm text-muted">Lade Skills...</p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="bg-card-bg border border-card-border rounded-xl p-6 space-y-6">
+      <div className="flex items-center justify-between">
+        <h3 className="text-sm font-semibold text-foreground">Skills (Analysemodi)</h3>
+        {!showEditor && (
+          <button
+            type="button"
+            onClick={openCreate}
+            className="rounded-lg bg-primary px-3 py-1.5 text-sm font-medium text-white hover:bg-primary/90"
+          >
+            + Neuer Skill
+          </button>
+        )}
+      </div>
+
+      {/* Message */}
+      {message && !showEditor && (
+        <p className={`text-sm ${message.type === 'success' ? 'text-green-500' : 'text-red-500'}`}>
+          {message.text}
+        </p>
+      )}
+
+      {/* Editor */}
+      {showEditor && (
+        <form onSubmit={handleSubmit} className="space-y-4 border-t border-card-border pt-4">
+          <p className="text-xs font-medium text-muted uppercase tracking-wide">
+            {editing ? `Skill bearbeiten: ${editing.name}` : 'Neuen Skill erstellen'}
+          </p>
+
+          <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
+            <div>
+              <label className="block text-sm text-muted mb-1">Name *</label>
+              <input
+                type="text"
+                value={form.name}
+                onChange={(e) => handleNameChange(e.target.value)}
+                placeholder="z.B. Rechtsgutachten"
+                className="w-full rounded-lg border border-card-border bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted/50"
+              />
+            </div>
+            <div>
+              <label className="block text-sm text-muted mb-1">Slug *</label>
+              <input
+                type="text"
+                value={form.slug}
+                onChange={(e) => handleSlugChange(e.target.value)}
+                placeholder="z.B. rechtsgutachten"
+                className="w-full rounded-lg border border-card-border bg-background px-3 py-2 text-sm text-foreground font-mono placeholder:text-muted/50"
+              />
+              <p className="text-xs text-muted mt-1">Eindeutiger Bezeichner (Kleinbuchstaben, Bindestriche)</p>
+            </div>
+          </div>
+
+          <div>
+            <label className="block text-sm text-muted mb-1">Beschreibung</label>
+            <input
+              type="text"
+              value={form.description}
+              onChange={(e) => setForm({ ...form, description: e.target.value })}
+              placeholder="Kurze Beschreibung des Skills"
+              className="w-full rounded-lg border border-card-border bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted/50"
+            />
+          </div>
+
+          <div>
+            <label className="block text-sm text-muted mb-1">System-Prompt *</label>
+            <textarea
+              value={form.systemPrompt}
+              onChange={(e) => setForm({ ...form, systemPrompt: e.target.value })}
+              rows={20}
+              placeholder="Der System-Prompt, der an das AI-Modell gesendet wird..."
+              className="w-full rounded-lg border border-card-border bg-background px-3 py-2 text-sm text-foreground font-mono placeholder:text-muted/50 resize-y"
+            />
+          </div>
+
+          <div>
+            <label className="block text-sm text-muted mb-1">Ausgabetyp</label>
+            <div className="flex gap-4">
+              <label className="flex items-center gap-2 text-sm text-foreground cursor-pointer">
+                <input
+                  type="radio"
+                  name="outputType"
+                  value="analysis"
+                  checked={form.outputType === 'analysis'}
+                  onChange={() => setForm({ ...form, outputType: 'analysis' })}
+                  className="accent-primary"
+                />
+                Analyse (Freitext)
+              </label>
+              <label className="flex items-center gap-2 text-sm text-foreground cursor-pointer">
+                <input
+                  type="radio"
+                  name="outputType"
+                  value="structured_data"
+                  checked={form.outputType === 'structured_data'}
+                  onChange={() => setForm({ ...form, outputType: 'structured_data' })}
+                  className="accent-primary"
+                />
+                Strukturierte Daten
+              </label>
+            </div>
+          </div>
+
+          {form.outputType === 'structured_data' && (
+            <div>
+              <label className="block text-sm text-muted mb-1">JSON Schema *</label>
+              <textarea
+                value={form.outputSchema}
+                onChange={(e) => setForm({ ...form, outputSchema: e.target.value })}
+                rows={10}
+                placeholder='{"type": "object", "properties": {...}}'
+                className="w-full rounded-lg border border-card-border bg-background px-3 py-2 text-sm text-foreground font-mono placeholder:text-muted/50 resize-y"
+              />
+            </div>
+          )}
+
+          <div className="flex flex-wrap gap-6">
+            <label className="flex items-center gap-2 text-sm text-foreground cursor-pointer">
+              <input
+                type="checkbox"
+                checked={form.requiresNorms}
+                onChange={(e) => setForm({ ...form, requiresNorms: e.target.checked })}
+                className="accent-primary"
+              />
+              Normen benötigt
+            </label>
+            <label className="flex items-center gap-2 text-sm text-foreground cursor-pointer">
+              <input
+                type="checkbox"
+                checked={form.requiresDecisions}
+                onChange={(e) => setForm({ ...form, requiresDecisions: e.target.checked })}
+                className="accent-primary"
+              />
+              Entscheidungen benötigt
+            </label>
+          </div>
+
+          <div>
+            <label className="flex items-center gap-2 text-sm text-foreground cursor-pointer">
+              <input
+                type="checkbox"
+                checked={form.isActive}
+                onChange={(e) => setForm({ ...form, isActive: e.target.checked })}
+                className="accent-primary"
+              />
+              Aktiv
+            </label>
+          </div>
+
+          {message && showEditor && (
+            <p className={`text-sm ${message.type === 'success' ? 'text-green-500' : 'text-red-500'}`}>
+              {message.text}
+            </p>
+          )}
+
+          <div className="flex gap-2">
+            <button
+              type="submit"
+              disabled={saving}
+              className="rounded-lg bg-primary px-4 py-2 text-sm font-medium text-white hover:bg-primary/90 disabled:opacity-50"
+            >
+              {saving ? 'Speichern...' : 'Speichern'}
+            </button>
+            <button
+              type="button"
+              onClick={closeEditor}
+              className="rounded-lg border border-card-border px-4 py-2 text-sm font-medium text-muted hover:text-foreground"
+            >
+              Abbrechen
+            </button>
+            {editing?.isSystem && (
+              <button
+                type="button"
+                onClick={() => handleResetToDefault(editing)}
+                className="rounded-lg border border-amber-300 px-4 py-2 text-sm font-medium text-amber-600 hover:bg-amber-50"
+              >
+                Standard wiederherstellen
+              </button>
+            )}
+          </div>
+        </form>
+      )}
+
+      {/* Skills list */}
+      {!showEditor && skills.length === 0 && (
+        <p className="text-sm text-muted">
+          Keine Skills vorhanden. Erstellen Sie einen neuen Skill oder warten Sie auf die System-Skills.
+        </p>
+      )}
+
+      {!showEditor && skills.length > 0 && (
+        <div className="divide-y divide-card-border">
+          {skills.map((skill, idx) => (
+            <div
+              key={skill.id}
+              draggable
+              onDragStart={() => handleDragStart(idx)}
+              onDragOver={(e) => handleDragOver(e, idx)}
+              onDragEnd={handleDragEnd}
+              className={`py-3 flex items-center justify-between gap-3 ${
+                dragIdx === idx ? 'opacity-50' : ''
+              }`}
+            >
+              <div className="flex items-center gap-3 min-w-0">
+                <span
+                  className="cursor-grab text-muted hover:text-foreground shrink-0"
+                  title="Ziehen zum Sortieren"
+                >
+                  ⠿
+                </span>
+                <div className="min-w-0">
+                  <div className="flex items-center gap-2">
+                    <span className="text-sm font-medium text-foreground">{skill.name}</span>
+                    <span className="text-xs text-muted font-mono">({skill.slug})</span>
+                    <span
+                      className={`inline-block w-2 h-2 rounded-full shrink-0 ${
+                        skill.isActive ? 'bg-green-500' : 'bg-gray-400'
+                      }`}
+                      title={skill.isActive ? 'Aktiv' : 'Inaktiv'}
+                    />
+                    {skill.isSystem && (
+                      <span className="text-xs px-1.5 py-0.5 rounded bg-primary/10 text-primary font-medium">
+                        System
+                      </span>
+                    )}
+                  </div>
+                  <p className="text-xs text-muted mt-0.5 truncate">
+                    {skill.description ?? '—'} · {OUTPUT_TYPE_LABELS[skill.outputType] ?? skill.outputType}
+                  </p>
+                </div>
+              </div>
+
+              <div className="flex items-center gap-2 shrink-0">
+                <button
+                  type="button"
+                  onClick={() => handleToggleActive(skill)}
+                  className="text-xs px-2 py-1 rounded border border-card-border text-muted hover:text-foreground"
+                >
+                  {skill.isActive ? 'Deaktivieren' : 'Aktivieren'}
+                </button>
+                <button
+                  type="button"
+                  onClick={() => openEdit(skill)}
+                  className="text-xs px-2 py-1 rounded border border-card-border text-muted hover:text-foreground"
+                >
+                  Bearbeiten
+                </button>
+                {!skill.isSystem && (
+                  <button
+                    type="button"
+                    onClick={() => handleDelete(skill)}
+                    className="text-xs px-2 py-1 rounded border border-red-300 text-red-500 hover:bg-red-50"
+                  >
+                    Löschen
+                  </button>
+                )}
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}

src/app/(dashboard)/layout.tsx

@@ -22,6 +22,9 @@ export default async function DashboardLayout({
         <main className="flex-1 p-8 overflow-auto">
           {children}
         </main>
+        <footer className="px-8 py-3 text-xs text-gray-400 border-t border-gray-200">
+          Build {process.env.NEXT_PUBLIC_BUILD_HASH || 'dev'}
+        </footer>
       </div>
     </div>
   );

src/app/api/analyses/[id]/route.ts

@@ -1,25 +1,25 @@
 // GET /api/analyses/:id — Retrieve a single analysis with its sources
+// Supports ?action=export-txt for plain-text export
 
 import { type NextRequest } from 'next/server';
 import { withTenantDb } from '@/lib/db';
 import { analyses, norms, normInstruments, decisions } from '@/lib/db/schema';
 import { eq, inArray } from 'drizzle-orm';
 import { logAuditEvent } from '@/lib/auth/audit';
+import { requirePermission } from '@/lib/auth/rbac';
 import type { TenantContext } from '@/lib/auth';
 
 export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> },
 ) {
+  const auth = await requirePermission('analyses:read');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
   const { id } = await params;
 
-  const tenantId = request.headers.get('x-tenant-id');
-  if (!tenantId) {
-    return Response.json({ error: 'Missing x-tenant-id header' }, { status: 401 });
-  }
-
   // RLS enforces tenant isolation — only rows matching app.tenant_id are visible.
-  const result = await withTenantDb(tenantId, async (tdb) => {
+  const result = await withTenantDb(ctx.tenantId, async (tdb) => {
     const [analysis] = await tdb
       .select()
       .from(analyses)
@@ -72,14 +72,33 @@ export async function GET(
     return Response.json({ error: 'Analysis not found' }, { status: 404 });
   }
 
-  const userId = request.headers.get('x-user-id') ?? 'unknown';
   const ip = request.headers.get('x-forwarded-for')?.split(',')[0]?.trim()
     ?? request.headers.get('x-real-ip')
     ?? undefined;
-  await logAuditEvent(
-    { tenantId, userId } as TenantContext,
-    'read', 'analysis', id, undefined, ip,
-  );
+
+  const action = request.nextUrl.searchParams.get('action');
+
+  // Export analysis as plain text
+  if (action === 'export-txt') {
+    if (!result.analysis.result) {
+      return Response.json(
+        { error: 'Analyse hat noch kein Ergebnis.' },
+        { status: 400 },
+      );
+    }
+
+    await logAuditEvent(ctx, 'export', 'analysis', id, { format: 'txt' }, ip);
+
+    const safeTitle = (result.analysis.title || 'analyse').replace(/[^a-zA-Z0-9äöüÄÖÜß_-]/g, '_');
+    return new Response(result.analysis.result, {
+      headers: {
+        'Content-Type': 'text/plain; charset=utf-8',
+        'Content-Disposition': `attachment; filename="${encodeURIComponent(safeTitle)}.txt"`,
+      },
+    });
+  }
+
+  await logAuditEvent(ctx, 'read', 'analysis', id, undefined, ip);
 
   return Response.json({
     ...result.analysis,

src/app/api/documents/[id]/route.ts

@@ -0,0 +1,130 @@
+// GET    /api/documents/:id — get document metadata, or download/export the file
+// DELETE /api/documents/:id — delete a document and its stored file
+
+import { type NextRequest } from 'next/server';
+import { getDocument, deleteDocument } from '@/lib/documents';
+import { logAuditEvent } from '@/lib/auth/audit';
+import { requirePermission } from '@/lib/auth/rbac';
+
+export async function GET(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const auth = await requirePermission('cases:read');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+
+  const { id } = await params;
+
+  const doc = await getDocument(ctx.tenantId, id);
+
+  if (!doc) {
+    return Response.json({ error: 'Dokument nicht gefunden.' }, { status: 404 });
+  }
+
+  const action = request.nextUrl.searchParams.get('action');
+
+  // Download the original file
+  if (action === 'download') {
+    const fs = await import('node:fs/promises');
+    try {
+      await fs.access(doc.storagePath);
+    } catch {
+      return Response.json({ error: 'Datei nicht gefunden.' }, { status: 404 });
+    }
+    const fileBuffer = await fs.readFile(doc.storagePath);
+
+    const ip = request.headers.get('x-forwarded-for')?.split(',')[0]?.trim()
+      ?? request.headers.get('x-real-ip')
+      ?? undefined;
+    await logAuditEvent(ctx, 'download', 'document', id, { filename: doc.filename }, ip);
+
+    return new Response(fileBuffer, {
+      headers: {
+        'Content-Type': doc.mimeType,
+        'Content-Disposition': `attachment; filename="${encodeURIComponent(doc.filename)}"`,
+        'Content-Length': String(fileBuffer.length),
+      },
+    });
+  }
+
+  // Export as plain text (extracted text)
+  if (action === 'export-txt') {
+    if (!doc.extractedText) {
+      return Response.json(
+        { error: 'Kein extrahierter Text verfuegbar. Status: ' + doc.status },
+        { status: 400 },
+      );
+    }
+
+    const ip = request.headers.get('x-forwarded-for')?.split(',')[0]?.trim()
+      ?? request.headers.get('x-real-ip')
+      ?? undefined;
+    await logAuditEvent(ctx, 'export', 'document', id, { format: 'txt', filename: doc.filename }, ip);
+
+    const baseName = doc.filename.replace(/\.[^.]+$/, '');
+    return new Response(doc.extractedText, {
+      headers: {
+        'Content-Type': 'text/plain; charset=utf-8',
+        'Content-Disposition': `attachment; filename="${encodeURIComponent(baseName)}.txt"`,
+      },
+    });
+  }
+
+  // View extracted text (inline, for the UI viewer)
+  if (action === 'view') {
+    return Response.json({
+      id: doc.id,
+      filename: doc.filename,
+      mimeType: doc.mimeType,
+      fileSizeBytes: doc.fileSizeBytes,
+      category: doc.category,
+      status: doc.status,
+      errorMessage: doc.errorMessage,
+      extractedText: doc.extractedText ?? null,
+      createdAt: doc.createdAt,
+      updatedAt: doc.updatedAt,
+    });
+  }
+
+  // Default: metadata only
+  return Response.json({
+    id: doc.id,
+    filename: doc.filename,
+    mimeType: doc.mimeType,
+    fileSizeBytes: doc.fileSizeBytes,
+    category: doc.category,
+    status: doc.status,
+    errorMessage: doc.errorMessage,
+    createdAt: doc.createdAt,
+    updatedAt: doc.updatedAt,
+  });
+}
+
+export async function DELETE(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const auth = await requirePermission('cases:edit');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+
+  const { id } = await params;
+
+  const deleted = await deleteDocument(ctx.tenantId, id);
+
+  if (!deleted) {
+    return Response.json(
+      { error: 'Dokument nicht gefunden.' },
+      { status: 404 },
+    );
+  }
+
+  const ip =
+    request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() ??
+    request.headers.get('x-real-ip') ??
+    undefined;
+  await logAuditEvent(ctx, 'delete', 'document', id, { filename: deleted.filename }, ip);
+
+  return Response.json({ deleted: true });
+}

src/app/api/documents/route.ts

@@ -66,8 +66,8 @@ export async function POST(request: NextRequest) {
     );
 
     // Trigger text extraction asynchronously (fire-and-forget)
-    extractDocumentText(ctx.tenantId, result.documentId).catch(() => {
-      // Extraction errors are stored in the document record
+    extractDocumentText(ctx.tenantId, result.documentId).catch((err) => {
+      console.error(`[documents] Text extraction failed for ${result.documentId}:`, err);
     });
 
     return Response.json(result, { status: 201 });

src/app/api/norms/parse/route.ts

@@ -39,10 +39,9 @@ Antworte NUR mit einem JSON-Array. Kein erklaerener Text, kein Markdown, nur das
   }
 ]`;
 
-async function extractTextFromPdf(buffer: Buffer): Promise<string> {
-  const pdfParse = (await import('pdf-parse')).default;
-  const data = await pdfParse(buffer);
-  return data.text;
+async function extractTextFromPdfBuffer(buffer: Buffer): Promise<string> {
+  const { extractTextFromPdf } = await import('@/lib/pdf');
+  return extractTextFromPdf(buffer);
 }
 
 const CHUNK_CHAR_LIMIT = 10_000;
@@ -98,7 +97,7 @@ export async function POST(request: Request) {
 
     if (file.type === 'application/pdf' || file.name.endsWith('.pdf')) {
       try {
-        text = await extractTextFromPdf(buffer);
+        text = await extractTextFromPdfBuffer(buffer);
       } catch (err) {
         console.error('PDF parse error:', err);
         return Response.json(

src/app/api/settings/skills/[id]/route.ts

@@ -0,0 +1,142 @@
+// GET    /api/settings/skills/[id] — Get skill detail
+// PATCH  /api/settings/skills/[id] — Update a skill
+// DELETE /api/settings/skills/[id] — Soft-delete (set isActive = false)
+
+import { db } from '@/lib/db';
+import { skills } from '@/lib/db/schema';
+import { eq, and } from 'drizzle-orm';
+import { requirePermission } from '@/lib/auth/rbac';
+
+async function findSkillForTenant(skillId: string, tenantId: string) {
+  const [skill] = await db
+    .select()
+    .from(skills)
+    .where(and(eq(skills.id, skillId), eq(skills.tenantId, tenantId)))
+    .limit(1);
+  return skill ?? null;
+}
+
+export async function GET(
+  _request: Request,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+  const { id } = await params;
+
+  const skill = await findSkillForTenant(id, auth.ctx.tenantId);
+  if (!skill) {
+    return Response.json({ error: 'Skill nicht gefunden.' }, { status: 404 });
+  }
+
+  return Response.json(skill);
+}
+
+export async function PATCH(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+  const { id } = await params;
+
+  const skill = await findSkillForTenant(id, ctx.tenantId);
+  if (!skill) {
+    return Response.json({ error: 'Skill nicht gefunden.' }, { status: 404 });
+  }
+
+  const body = await request.json();
+  const {
+    name, slug, description, systemPrompt, outputType,
+    outputSchema, requiresNorms, requiresDecisions, isActive,
+  } = body as {
+    name?: string;
+    slug?: string;
+    description?: string | null;
+    systemPrompt?: string;
+    outputType?: string;
+    outputSchema?: Record<string, unknown> | null;
+    requiresNorms?: boolean;
+    requiresDecisions?: boolean;
+    isActive?: boolean;
+  };
+
+  // Validate slug if changed
+  if (slug !== undefined && slug !== skill.slug) {
+    if (!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(slug)) {
+      return Response.json(
+        { error: 'Slug muss Kleinbuchstaben, Ziffern und Bindestriche enthalten.' },
+        { status: 400 },
+      );
+    }
+    const existing = await db
+      .select({ id: skills.id })
+      .from(skills)
+      .where(and(eq(skills.tenantId, ctx.tenantId), eq(skills.slug, slug)))
+      .limit(1);
+    if (existing.length > 0 && existing[0].id !== id) {
+      return Response.json(
+        { error: 'Ein Skill mit diesem Slug existiert bereits.' },
+        { status: 409 },
+      );
+    }
+  }
+
+  if (outputType === 'structured_data' && outputSchema === null) {
+    return Response.json(
+      { error: 'JSON Schema ist bei strukturierten Daten erforderlich.' },
+      { status: 400 },
+    );
+  }
+
+  const updates: Record<string, unknown> = { updatedAt: new Date() };
+  if (name !== undefined) updates.name = name;
+  if (slug !== undefined) updates.slug = slug;
+  if (description !== undefined) updates.description = description;
+  if (systemPrompt !== undefined) updates.systemPrompt = systemPrompt;
+  if (outputType !== undefined) updates.outputType = outputType;
+  if (outputSchema !== undefined) updates.outputSchema = outputSchema;
+  if (requiresNorms !== undefined) updates.requiresNorms = requiresNorms;
+  if (requiresDecisions !== undefined) updates.requiresDecisions = requiresDecisions;
+  if (isActive !== undefined) updates.isActive = isActive;
+
+  const [updated] = await db
+    .update(skills)
+    .set(updates)
+    .where(eq(skills.id, id))
+    .returning();
+
+  return Response.json(updated);
+}
+
+export async function DELETE(
+  _request: Request,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+  const { id } = await params;
+
+  const skill = await findSkillForTenant(id, ctx.tenantId);
+  if (!skill) {
+    return Response.json({ error: 'Skill nicht gefunden.' }, { status: 404 });
+  }
+
+  if (skill.isSystem) {
+    return Response.json(
+      { error: 'System-Skills können nicht gelöscht werden. Deaktivieren Sie den Skill stattdessen.' },
+      { status: 400 },
+    );
+  }
+
+  // Soft-delete: set isActive = false
+  const [updated] = await db
+    .update(skills)
+    .set({ isActive: false, updatedAt: new Date() })
+    .where(eq(skills.id, id))
+    .returning();
+
+  return Response.json(updated);
+}

src/app/api/settings/skills/reorder/route.ts

@@ -0,0 +1,32 @@
+// PATCH /api/settings/skills/reorder — Update sort_order for drag-and-drop reordering
+
+import { db } from '@/lib/db';
+import { skills } from '@/lib/db/schema';
+import { eq, and } from 'drizzle-orm';
+import { requirePermission } from '@/lib/auth/rbac';
+
+export async function PATCH(request: Request) {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+
+  const body = await request.json();
+  const { order } = body as {
+    order?: Array<{ id: string; sortOrder: number }>;
+  };
+
+  if (!order || !Array.isArray(order)) {
+    return Response.json({ error: 'order Array ist erforderlich.' }, { status: 400 });
+  }
+
+  // Update each skill's sortOrder within a transaction-like loop
+  // Verify tenant ownership for each skill
+  for (const item of order) {
+    await db
+      .update(skills)
+      .set({ sortOrder: item.sortOrder, updatedAt: new Date() })
+      .where(and(eq(skills.id, item.id), eq(skills.tenantId, ctx.tenantId)));
+  }
+
+  return Response.json({ ok: true });
+}

src/app/api/settings/skills/route.ts

@@ -0,0 +1,101 @@
+// GET  /api/settings/skills — List all skills for tenant (sorted by sortOrder)
+// POST /api/settings/skills — Create a new skill
+
+import { db } from '@/lib/db';
+import { skills } from '@/lib/db/schema';
+import { eq, and, asc } from 'drizzle-orm';
+import { requirePermission } from '@/lib/auth/rbac';
+
+export async function GET() {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+
+  const rows = await db
+    .select()
+    .from(skills)
+    .where(eq(skills.tenantId, auth.ctx.tenantId))
+    .orderBy(asc(skills.sortOrder), asc(skills.createdAt));
+
+  return Response.json(rows);
+}
+
+export async function POST(request: Request) {
+  const auth = await requirePermission('settings:manage');
+  if ('response' in auth) return auth.response;
+  const { ctx } = auth;
+
+  const body = await request.json();
+  const { name, slug, description, systemPrompt, outputType, outputSchema, requiresNorms, requiresDecisions, isActive } = body as {
+    name?: string;
+    slug?: string;
+    description?: string | null;
+    systemPrompt?: string;
+    outputType?: string;
+    outputSchema?: Record<string, unknown> | null;
+    requiresNorms?: boolean;
+    requiresDecisions?: boolean;
+    isActive?: boolean;
+  };
+
+  if (!name || !slug || !systemPrompt) {
+    return Response.json(
+      { error: 'Name, Slug und System-Prompt sind erforderlich.' },
+      { status: 400 },
+    );
+  }
+
+  if (!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(slug)) {
+    return Response.json(
+      { error: 'Slug muss Kleinbuchstaben, Ziffern und Bindestriche enthalten.' },
+      { status: 400 },
+    );
+  }
+
+  if (outputType === 'structured_data' && !outputSchema) {
+    return Response.json(
+      { error: 'JSON Schema ist bei strukturierten Daten erforderlich.' },
+      { status: 400 },
+    );
+  }
+
+  // Check slug uniqueness within tenant
+  const existing = await db
+    .select({ id: skills.id })
+    .from(skills)
+    .where(and(eq(skills.tenantId, ctx.tenantId), eq(skills.slug, slug)))
+    .limit(1);
+
+  if (existing.length > 0) {
+    return Response.json(
+      { error: 'Ein Skill mit diesem Slug existiert bereits.' },
+      { status: 409 },
+    );
+  }
+
+  // Get max sort order for positioning
+  const allSkills = await db
+    .select({ sortOrder: skills.sortOrder })
+    .from(skills)
+    .where(eq(skills.tenantId, ctx.tenantId));
+  const maxOrder = allSkills.reduce((max, s) => Math.max(max, s.sortOrder), -1);
+
+  const [created] = await db
+    .insert(skills)
+    .values({
+      tenantId: ctx.tenantId,
+      name,
+      slug,
+      description: description || null,
+      systemPrompt,
+      outputType: (outputType as 'analysis' | 'structured_data') || 'analysis',
+      outputSchema: outputSchema || null,
+      requiresNorms: requiresNorms ?? false,
+      requiresDecisions: requiresDecisions ?? false,
+      isSystem: false,
+      sortOrder: maxOrder + 1,
+      isActive: isActive ?? true,
+    })
+    .returning();
+
+  return Response.json(created, { status: 201 });
+}

src/components/documents/dokument-upload.tsx

@@ -20,12 +20,13 @@ interface DocumentItem {
   mimeType: string;
   fileSizeBytes: number;
   status: string;
+  errorMessage: string | null;
   createdAt: string;
 }
 
 const STATUS_LABELS: Record<string, string> = {
   uploaded: 'Hochgeladen',
-  extracting: 'Text wird extrahiert...',
+  extracting: 'Extrahiere Text...',
   extracted: 'Extrahiert',
   failed: 'Fehlgeschlagen',
 };
@@ -37,12 +38,83 @@ const STATUS_COLORS: Record<string, string> = {
   failed: 'bg-red-500/10 text-red-700',
 };
 
+const STEP_LABELS = [
+  { key: 'uploaded', label: 'Hochgeladen' },
+  { key: 'extracting', label: 'Extrahiere Text' },
+  { key: 'extracted', label: 'Fertig' },
+];
+
 function formatFileSize(bytes: number): string {
   if (bytes < 1024) return `${bytes} B`;
   if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(0)} KB`;
   return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
 }
 
+function getStepIndex(status: string): number {
+  if (status === 'uploaded') return 0;
+  if (status === 'extracting') return 1;
+  if (status === 'extracted') return 2;
+  return -1; // failed
+}
+
+function IngestionProgress({ doc, debug }: { doc: DocumentItem; debug: boolean }) {
+  const stepIdx = getStepIndex(doc.status);
+  const isFailed = doc.status === 'failed';
+
+  return (
+    <div className="mt-2 space-y-2">
+      {/* Step indicators */}
+      <div className="flex items-center gap-1">
+        {STEP_LABELS.map((step, i) => {
+          const isActive = i === stepIdx;
+          const isComplete = i < stepIdx;
+          const isCurrent = isActive && !isFailed;
+
+          let dotClass = 'w-2.5 h-2.5 rounded-full shrink-0 transition-colors';
+          if (isComplete) dotClass += ' bg-green-500';
+          else if (isCurrent) dotClass += ' bg-yellow-500 animate-pulse';
+          else if (isFailed && i === 1) dotClass += ' bg-red-500';
+          else dotClass += ' bg-gray-300';
+
+          let lineClass = 'flex-1 h-0.5 transition-colors';
+          if (isComplete) lineClass += ' bg-green-500';
+          else lineClass += ' bg-gray-200';
+
+          return (
+            <div key={step.key} className="flex items-center gap-1 flex-1">
+              <div className={dotClass} />
+              <span className={`text-[10px] ${isActive || isComplete ? 'text-foreground font-medium' : 'text-muted'}`}>
+                {step.label}
+              </span>
+              {i < STEP_LABELS.length - 1 && <div className={lineClass} />}
+            </div>
+          );
+        })}
+      </div>
+
+      {/* Error display */}
+      {isFailed && doc.errorMessage && (
+        <div className="bg-red-50 border border-red-200 rounded-lg p-2.5 text-xs text-red-700">
+          <span className="font-medium">Fehler: </span>
+          {doc.errorMessage}
+        </div>
+      )}
+
+      {/* Debug info */}
+      {debug && (
+        <div className="bg-gray-50 border border-gray-200 rounded-lg p-2.5 text-[11px] font-mono text-gray-600 space-y-0.5">
+          <div>ID: {doc.id}</div>
+          <div>Status: {doc.status}</div>
+          <div>MIME: {doc.mimeType}</div>
+          <div>Groesse: {formatFileSize(doc.fileSizeBytes)}</div>
+          <div>Hochgeladen: {new Date(doc.createdAt).toLocaleString('de-DE')}</div>
+          {doc.errorMessage && <div className="text-red-600">Fehler: {doc.errorMessage}</div>}
+        </div>
+      )}
+    </div>
+  );
+}
+
 export default function DokumentUpload({
   category,
   sourceScope,
@@ -52,11 +124,14 @@ export default function DokumentUpload({
   label = 'Dokument hochladen',
 }: DokumentUploadProps) {
   const [uploading, setUploading] = useState(false);
+  const [deleting, setDeleting] = useState<string | null>(null);
   const [error, setError] = useState('');
   const [success, setSuccess] = useState('');
   const [documents, setDocuments] = useState<DocumentItem[]>([]);
   const [dragging, setDragging] = useState(false);
+  const [debug, setDebug] = useState(false);
   const fileRef = useRef<HTMLInputElement>(null);
+  const pollRef = useRef<ReturnType<typeof setInterval> | null>(null);
 
   const fetchDocuments = useCallback(async () => {
     const params = new URLSearchParams({ category });
@@ -75,6 +150,27 @@ export default function DokumentUpload({
     }
   }, [category, caseId, decisionId, normInstrumentId]);
 
+  // Determine if any documents need polling (in-progress states)
+  const hasPending = documents.some(
+    (d) => d.status === 'uploaded' || d.status === 'extracting',
+  );
+
+  // Poll for status updates when documents are being processed
+  useEffect(() => {
+    if (hasPending) {
+      pollRef.current = setInterval(fetchDocuments, 2000);
+    } else if (pollRef.current) {
+      clearInterval(pollRef.current);
+      pollRef.current = null;
+    }
+    return () => {
+      if (pollRef.current) {
+        clearInterval(pollRef.current);
+        pollRef.current = null;
+      }
+    };
+  }, [hasPending, fetchDocuments]);
+
   useEffect(() => {
     fetchDocuments();
   }, [fetchDocuments]);
@@ -103,7 +199,7 @@ export default function DokumentUpload({
         throw new Error(data.error || 'Upload fehlgeschlagen');
       }
 
-      setSuccess(`"${file.name}" erfolgreich hochgeladen.`);
+      setSuccess(`"${file.name}" erfolgreich hochgeladen. Textextraktion laeuft...`);
       if (fileRef.current) fileRef.current.value = '';
       fetchDocuments();
     } catch (err) {
@@ -113,6 +209,28 @@ export default function DokumentUpload({
     }
   }
 
+  async function handleDelete(docId: string, filename: string) {
+    if (!confirm(`"${filename}" wirklich loeschen?`)) return;
+
+    setError('');
+    setSuccess('');
+    setDeleting(docId);
+
+    try {
+      const res = await fetch(`/api/documents/${docId}`, { method: 'DELETE' });
+      if (!res.ok) {
+        const data = await res.json();
+        throw new Error(data.error || 'Loeschen fehlgeschlagen');
+      }
+      setSuccess(`"${filename}" wurde geloescht.`);
+      fetchDocuments();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Ein Fehler ist aufgetreten');
+    } finally {
+      setDeleting(null);
+    }
+  }
+
   function handleSubmit(e: React.FormEvent) {
     e.preventDefault();
     const file = fileRef.current?.files?.[0];
@@ -175,31 +293,76 @@ export default function DokumentUpload({
 
       {documents.length > 0 && (
         <div className="bg-card-bg border border-card-border rounded-xl p-5">
-          <h3 className="text-sm font-semibold text-foreground mb-3">
-            Dokumente ({documents.length})
-          </h3>
-          <div className="space-y-2">
+          <div className="flex items-center justify-between mb-3">
+            <h3 className="text-sm font-semibold text-foreground">
+              Dokumente ({documents.length})
+            </h3>
+            <button
+              type="button"
+              onClick={() => setDebug((prev) => !prev)}
+              className={`text-[11px] px-2 py-0.5 rounded-full border transition-colors ${
+                debug
+                  ? 'border-primary bg-primary/10 text-primary font-medium'
+                  : 'border-card-border text-muted hover:text-foreground'
+              }`}
+            >
+              Debug {debug ? 'an' : 'aus'}
+            </button>
+          </div>
+          <div className="space-y-3">
             {documents.map((doc) => (
               <div
                 key={doc.id}
-                className="flex items-center justify-between p-3 rounded-lg border border-card-border"
+                className="p-3 rounded-lg border border-card-border"
               >
-                <div className="min-w-0 flex-1">
-                  <p className="text-sm font-medium text-foreground truncate">
-                    {doc.filename}
-                  </p>
-                  <p className="text-xs text-muted">
-                    {formatFileSize(doc.fileSizeBytes)} &middot;{' '}
-                    {new Date(doc.createdAt).toLocaleDateString('de-DE')}
-                  </p>
+                <div className="flex items-center justify-between">
+                  <div className="min-w-0 flex-1">
+                    <p className="text-sm font-medium text-foreground truncate">
+                      {doc.filename}
+                    </p>
+                    <p className="text-xs text-muted">
+                      {formatFileSize(doc.fileSizeBytes)} &middot;{' '}
+                      {new Date(doc.createdAt).toLocaleDateString('de-DE')}
+                    </p>
+                  </div>
+                  <span
+                    className={`text-xs px-2 py-0.5 rounded-full font-medium shrink-0 ml-3 ${
+                      STATUS_COLORS[doc.status] ?? 'bg-gray-500/10 text-gray-600'
+                    }`}
+                  >
+                    {STATUS_LABELS[doc.status] ?? doc.status}
+                  </span>
+                  <a
+                    href={`/api/documents/${doc.id}?action=download`}
+                    className="ml-2 text-xs text-primary hover:text-primary/80 transition-colors shrink-0"
+                    title="Herunterladen"
+                  >
+                    ↓
+                  </a>
+                  {doc.status === 'extracted' && (
+                    <a
+                      href={`/api/documents/${doc.id}?action=export-txt`}
+                      className="ml-1 text-xs text-primary hover:text-primary/80 transition-colors shrink-0"
+                      title="Als Text exportieren"
+                    >
+                      TXT
+                    </a>
+                  )}
+                  <button
+                    type="button"
+                    onClick={() => handleDelete(doc.id, doc.filename)}
+                    disabled={deleting === doc.id}
+                    className="ml-2 text-xs text-danger hover:text-danger/80 transition-colors disabled:opacity-50 shrink-0"
+                    title="Dokument loeschen"
+                  >
+                    {deleting === doc.id ? '...' : 'Loeschen'}
+                  </button>
                 </div>
-                <span
-                  className={`text-xs px-2 py-0.5 rounded-full font-medium shrink-0 ml-3 ${
-                    STATUS_COLORS[doc.status] ?? 'bg-gray-500/10 text-gray-600'
-                  }`}
-                >
-                  {STATUS_LABELS[doc.status] ?? doc.status}
-                </span>
+
+                {/* Show progress for non-extracted documents or if debug is on */}
+                {(doc.status !== 'extracted' || debug) && (
+                  <IngestionProgress doc={doc} debug={debug} />
+                )}
               </div>
             ))}
           </div>

src/components/layout/sidebar.tsx

@@ -10,6 +10,7 @@ const NAV_ITEMS = [
   { href: '/entscheidungen', label: 'Entscheidungen', icon: 'M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z' },
   { href: '/analyse', label: 'Analyse', icon: 'M9.663 17h4.673M12 3v1m6.364 1.636l-.707.707M21 12h-1M4 12H3m3.343-5.657l-.707-.707m2.828 9.9a5 5 0 117.072 0l-.548.547A3.374 3.374 0 0014 18.469V19a2 2 0 11-4 0v-.531c0-.895-.356-1.754-.988-2.386l-.548-.547z' },
   { href: '/vertraege', label: 'Verträge', icon: 'M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z' },
+  { href: '/dokumente', label: 'Dokumente', icon: 'M7 21h10a2 2 0 002-2V9.414a1 1 0 00-.293-.707l-5.414-5.414A1 1 0 0012.586 3H7a2 2 0 00-2 2v14a2 2 0 002 2z' },
   { href: '/verfahren', label: 'Verfahren', icon: 'M3 6l3 1m0 0l-3 9a5.002 5.002 0 006.001 0M6 7l3 9M6 7l6-2m6 2l3-1m-3 1l-3 9a5.002 5.002 0 006.001 0M18 7l3 9m-3-9l-6-2m0-2v2m0 16V5m0 16H9m3 0h3' },
   { href: '/einstellungen', label: 'Einstellungen', icon: 'M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.066 2.573c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.573 1.066c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.066-2.573c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z M15 12a3 3 0 11-6 0 3 3 0 016 0z' },
 ] as const;

src/lib/contracts/index.ts

@@ -137,10 +137,8 @@ export async function extractDocumentText(tenantId: string, documentId: string):
   let text: string;
 
   if (doc.mimeType === 'application/pdf') {
-    // Dynamic import for pdf-parse (optional dependency)
-    const pdfParse = (await import('pdf-parse')).default;
-    const pdfData = await pdfParse(fileBuffer);
-    text = pdfData.text;
+    const { extractTextFromPdf } = await import('@/lib/pdf');
+    text = await extractTextFromPdf(fileBuffer);
   } else {
     // DOCX — use mammoth for extraction
     const mammoth = await import('mammoth');

src/lib/documents/index.ts

@@ -121,18 +121,48 @@ export async function extractDocumentText(tenantId: string, documentId: string):
 
   try {
     const fs = await import('node:fs/promises');
+
+    // Verify file exists before attempting extraction
+    try {
+      await fs.access(doc.storagePath);
+    } catch {
+      throw new Error(`Datei nicht gefunden: ${doc.storagePath}`);
+    }
+
     const fileBuffer = await fs.readFile(doc.storagePath);
 
+    if (fileBuffer.length === 0) {
+      throw new Error('Datei ist leer (0 Bytes).');
+    }
+
     let text: string;
 
     if (doc.mimeType === 'application/pdf') {
-      const pdfParse = (await import('pdf-parse')).default;
-      const pdfData = await pdfParse(fileBuffer);
-      text = pdfData.text;
+      const { extractTextFromPdf } = await import('@/lib/pdf');
+      try {
+        text = await extractTextFromPdf(fileBuffer);
+      } catch (pdfErr) {
+        const pdfMessage = pdfErr instanceof Error ? pdfErr.message : String(pdfErr);
+        if (pdfMessage.includes('encrypted') || pdfMessage.includes('password')) {
+          throw new Error('PDF ist passwortgeschuetzt oder verschluesselt. Bitte ungeschuetzte Version hochladen.');
+        }
+        throw new Error(`PDF konnte nicht gelesen werden: ${pdfMessage}`);
+      }
+
+      // Detect scanned PDFs with no text layer
+      if (!text || text.trim().length === 0) {
+        throw new Error(
+          'PDF enthaelt keinen extrahierbaren Text. Moeglicherweise handelt es sich um ein gescanntes Dokument ohne Textebene (OCR erforderlich).',
+        );
+      }
     } else {
       const mammoth = await import('mammoth');
       const result = await mammoth.extractRawText({ buffer: fileBuffer });
       text = result.value;
+
+      if (!text || text.trim().length === 0) {
+        throw new Error('DOCX enthaelt keinen extrahierbaren Text.');
+      }
     }
 
     await withTenantDb(tenantId, async (tdb) => {
@@ -149,6 +179,7 @@ export async function extractDocumentText(tenantId: string, documentId: string):
     return text;
   } catch (err) {
     const message = err instanceof Error ? err.message : 'Textextraktion fehlgeschlagen';
+    console.error(`[extractDocumentText] Document ${documentId} failed:`, message);
     await withTenantDb(tenantId, async (tdb) => {
       await tdb
         .update(documents)
@@ -206,6 +237,7 @@ export async function listDocuments(
         category: documents.category,
         sourceScope: documents.sourceScope,
         status: documents.status,
+        errorMessage: documents.errorMessage,
         caseId: documents.caseId,
         decisionId: documents.decisionId,
         normInstrumentId: documents.normInstrumentId,
@@ -232,3 +264,26 @@ export async function getDocument(tenantId: string, documentId: string) {
     return doc ?? null;
   });
 }
+
+/**
+ * Delete a document by ID. Removes the DB record and the stored file from disk.
+ * Returns the deleted document row, or null if not found.
+ */
+export async function deleteDocument(tenantId: string, documentId: string) {
+  const deleted = await withTenantDb(tenantId, async (tdb) => {
+    const [row] = await tdb
+      .delete(documents)
+      .where(eq(documents.id, documentId))
+      .returning();
+    return row ?? null;
+  });
+
+  if (deleted?.storagePath) {
+    const fs = await import('node:fs/promises');
+    await fs.unlink(deleted.storagePath).catch(() => {
+      // File may already be removed — ignore cleanup errors
+    });
+  }
+
+  return deleted;
+}

src/lib/pdf.ts

@@ -0,0 +1,82 @@
+// PDF text extraction using pdfjs-dist legacy build
+// Polyfill DOMMatrix/Path2D/ImageData for Node.js where they are unavailable
+
+if (typeof globalThis.DOMMatrix === 'undefined') {
+  // Minimal DOMMatrix polyfill — sufficient for pdfjs text extraction (no rendering)
+  globalThis.DOMMatrix = class DOMMatrix {
+    a: number; b: number; c: number; d: number; e: number; f: number;
+    m11: number; m12: number; m13: number; m14: number;
+    m21: number; m22: number; m23: number; m24: number;
+    m31: number; m32: number; m33: number; m34: number;
+    m41: number; m42: number; m43: number; m44: number;
+    is2D: boolean; isIdentity: boolean;
+    constructor(init?: number[] | string) {
+      const v = Array.isArray(init) ? init : [1, 0, 0, 1, 0, 0];
+      [this.a, this.b, this.c, this.d, this.e, this.f] =
+        v.length === 16
+          ? [v[0], v[1], v[4], v[5], v[12], v[13]]
+          : [v[0] ?? 1, v[1] ?? 0, v[2] ?? 0, v[3] ?? 1, v[4] ?? 0, v[5] ?? 0];
+      this.m11 = this.a; this.m12 = this.b; this.m13 = 0; this.m14 = 0;
+      this.m21 = this.c; this.m22 = this.d; this.m23 = 0; this.m24 = 0;
+      this.m31 = 0; this.m32 = 0; this.m33 = 1; this.m34 = 0;
+      this.m41 = this.e; this.m42 = this.f; this.m43 = 0; this.m44 = 1;
+      this.is2D = true; this.isIdentity = this.a === 1 && this.b === 0 && this.c === 0 && this.d === 1 && this.e === 0 && this.f === 0;
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    static fromMatrix(other: any) { return new DOMMatrix([other.a, other.b, other.c, other.d, other.e, other.f]); }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    static fromFloat64Array(arr: any) { return new DOMMatrix(Array.from(arr)); }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    static fromFloat32Array(arr: any) { return new DOMMatrix(Array.from(arr)); }
+  } as unknown as typeof DOMMatrix;
+}
+
+if (typeof globalThis.Path2D === 'undefined') {
+  globalThis.Path2D = class Path2D { constructor() {} } as unknown as typeof Path2D;
+}
+
+if (typeof globalThis.ImageData === 'undefined') {
+  globalThis.ImageData = class ImageData {
+    width: number; height: number; data: Uint8ClampedArray;
+    constructor(w: number, h: number) { this.width = w; this.height = h; this.data = new Uint8ClampedArray(w * h * 4); }
+  } as unknown as typeof ImageData;
+}
+
+// Force Next.js file tracer to include the worker file in standalone builds
+import 'pdfjs-dist/legacy/build/pdf.worker.mjs';
+
+/**
+ * Extract all text from a PDF buffer.
+ * Uses pdfjs-dist legacy build with Node.js DOM polyfills for text extraction.
+ */
+export async function extractTextFromPdf(buffer: Buffer): Promise<string> {
+  const pdfjsLib = await import('pdfjs-dist/legacy/build/pdf.mjs');
+
+  // Resolve the worker path at runtime so pdfjs can find it in standalone builds
+  const { createRequire } = await import('module');
+  const require = createRequire(import.meta.url ?? __filename);
+  pdfjsLib.GlobalWorkerOptions.workerSrc = require.resolve(
+    'pdfjs-dist/legacy/build/pdf.worker.mjs',
+  );
+
+  const data = new Uint8Array(buffer);
+  const doc = await pdfjsLib.getDocument({
+    data,
+    useSystemFonts: true,
+    isEvalSupported: false,
+  }).promise;
+
+  const pages: string[] = [];
+  for (let i = 1; i <= doc.numPages; i++) {
+    const page = await doc.getPage(i);
+    const content = await page.getTextContent();
+    const pageText = content.items
+      .filter((item) => 'str' in item)
+      .map((item) => (item as { str: string }).str)
+      .join(' ');
+    pages.push(pageText);
+  }
+
+  doc.destroy();
+  return pages.join('\n');
+}

src/types/pdf-parse.d.ts

@@ -1,14 +1,45 @@
-declare module 'pdf-parse' {
-  interface PdfData {
-    numpages: number;
-    numrender: number;
-    info: Record<string, unknown>;
-    metadata: Record<string, unknown>;
-    text: string;
-    version: string;
+// Worker module — imported for side-effect (file tracer) only
+declare module 'pdfjs-dist/legacy/build/pdf.worker.mjs' {}
+
+// pdfjs-dist legacy build type shim for dynamic import
+declare module 'pdfjs-dist/legacy/build/pdf.mjs' {
+  export const GlobalWorkerOptions: {
+    workerSrc: string;
+  };
+
+  export function getDocument(params: {
+    data: Uint8Array;
+    useSystemFonts?: boolean;
+    isEvalSupported?: boolean;
+    disableAutoFetch?: boolean;
+  }): { promise: Promise<PDFDocumentProxy> };
+
+  interface PDFDocumentProxy {
+    numPages: number;
+    getPage(pageNumber: number): Promise<PDFPageProxy>;
+    destroy(): void;
   }
 
-  function pdfParse(dataBuffer: Buffer, options?: Record<string, unknown>): Promise<PdfData>;
+  interface PDFPageProxy {
+    getTextContent(): Promise<TextContent>;
+  }
 
-  export default pdfParse;
+  interface TextContent {
+    items: Array<TextItem | TextMarkedContent>;
+  }
+
+  interface TextItem {
+    str: string;
+    dir: string;
+    width: number;
+    height: number;
+    transform: number[];
+    fontName: string;
+    hasEOL: boolean;
+  }
+
+  interface TextMarkedContent {
+    type: string;
+    id: string;
+  }
 }

src/types/skill.ts

@@ -0,0 +1,57 @@
+// Skill types for the Skills management feature
+
+export interface Skill {
+  id: string;
+  tenantId: string;
+  slug: string;
+  name: string;
+  description: string | null;
+  systemPrompt: string;
+  outputType: 'analysis' | 'structured_data';
+  outputSchema: Record<string, unknown> | null;
+  requiresNorms: boolean;
+  requiresDecisions: boolean;
+  isSystem: boolean;
+  sortOrder: number;
+  isActive: boolean;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface SkillFormData {
+  name: string;
+  slug: string;
+  description: string;
+  systemPrompt: string;
+  outputType: 'analysis' | 'structured_data';
+  outputSchema: string; // JSON string for the textarea
+  requiresNorms: boolean;
+  requiresDecisions: boolean;
+  isActive: boolean;
+}
+
+export function emptySkillForm(): SkillFormData {
+  return {
+    name: '',
+    slug: '',
+    description: '',
+    systemPrompt: '',
+    outputType: 'analysis',
+    outputSchema: '',
+    requiresNorms: false,
+    requiresDecisions: false,
+    isActive: true,
+  };
+}
+
+/** Generate a URL-safe slug from a name */
+export function slugify(name: string): string {
+  return name
+    .toLowerCase()
+    .replace(/[äÄ]/g, 'ae')
+    .replace(/[öÖ]/g, 'oe')
+    .replace(/[üÜ]/g, 'ue')
+    .replace(/ß/g, 'ss')
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-|-$/g, '');
+}