fix(07): UAT fixes — SMTP test email, DKV routing, Exchange domain field

- SMTP: add test-to field, send real email via sendMail() instead of verify()
- SMTP: fix no_auth warning shown as error for open-relay servers
- DKV: register dkv-fleet in MODULE_REGISTRY (fixes "Modul nicht gefunden")
- DKV: add dynamic [category]/[moduleSlug]/settings + vehicles sub-routes
- DKV: settings/vehicles links use useParams for consistent URLs
- DKV: add gear icon settings link to module main page
- DKV: rename module to "DKV-Rechnung" in seed + translations
- DKV: add optional domain field for Exchange (WebCredentials 3rd arg)
- DKV: hide IMAP-only fields (Port/Verschlüsselung/Ordner) when Exchange selected
- DKV: hide Exchange-only field (Domain) when IMAP selected
- Prisma: add domain column to DkvModuleConfig

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/settings.json

@@ -0,0 +1,6 @@
+{
+  "enabledPlugins": {
+    "claude-mem@thedotmack": true,
+    "claude-code-setup@claude-plugins-official": true
+  }
+}

.planning/phases/07-dkv-fleet-module/07-UAT.md

@@ -9,36 +9,40 @@ updated: 2026-06-27T15:20:00Z
 ## Current Test
 <!-- OVERWRITE each test - shows where we are -->
 
-[testing paused — 8 tests pending, 1 issue found]
+number: 7
-next: Test 2 — Settings-Sidebar Allgemein-Kategorie
+name: DKV Einstellungen — Posteingang-Konfiguration
+expected: |
+  /modules/dkv-fleet/settings zeigt einen Tab "Posteingang" mit Formular für IMAP- oder Exchange-Zugangsdaten (Host, Port, Benutzername, Passwort). Formular kann ausgefüllt und gespeichert werden.
+awaiting: user response
 
 ## Tests
 
 ### 1. Cold Start Smoke Test
 expected: Kill any running services. Start fresh via docker compose up. API-Container startet ohne Fehler, Prisma-Verbindung gelingt, /api/health oder ein einfacher API-Call liefert eine Antwort zurück. Keine Crash-Logs in docker compose logs tessera-ctl-api-1.
-result: issue
+result: pass
-reported: "DB-Container nach Start nicht in docker compose ps sichtbar. API loggt wiederholt P1001: Can't reach database server at db:5432 bei Requests (ModuleRegistry, Dashboard, LdapSync, WidgetInstance). NestJS startete und Admin-Seed lief durch, aber DB-Verbindung bricht danach ab."
+note: "docker compose down && docker compose up -d: DB healthy → API healthy → Web up. Früheres P1001 war externaler SIGKILL auf DB-Container, kein Code-Defekt."
-severity: major
 
 ### 2. Settings-Sidebar: Allgemein-Kategorie
 expected: In der Settings-Seitenleiste (z.B. unter /settings/general/smtp) erscheint eine neue Kategorie "Allgemein" mit einem Link "SMTP" — platziert oberhalb der bestehenden "Dashboard"-Kategorie.
-result: [pending]
+result: pass
 
 ### 3. SMTP-Einstellungen-Seite aufrufen
 expected: /settings/general/smtp öffnet eine Seite mit einem Formular, das 6 Felder enthält: Host, Port, Verschlüsselung (Dropdown), Benutzername, Passwort (mit Show/Hide-Toggle), Absenderadresse. Das Passwort-Feld ist leer (niemals vorausgefüllt).
-result: [pending]
+result: pass
 
 ### 4. SMTP-Konfiguration speichern
 expected: Formularfelder ausfüllen und "Speichern" klicken → kurze Erfolgs-Meldung erscheint ("Gespeichert" o.ä.). Beim nächsten Laden der Seite sind Host, Port, Benutzername, Absenderadresse wieder befüllt — Passwort bleibt leer (nur hasPassword-Indikator).
-result: [pending]
+result: pass
 
 ### 5. SMTP-Verbindungstest
 expected: "Verbindung testen"-Button anklicken → inline Feedback erscheint (grün bei Erfolg, rot bei Fehler). Die Meldung verschwindet automatisch nach ca. 6 Sekunden.
-result: [pending]
+result: pass
+note: "Feld 'Test-E-Mail an' ergänzt. Echter Versand via sendMail(). Grüne Bestätigung erscheint korrekt."
 
 ### 6. DKV Fleet Modul — Hauptseite
 expected: /modules/dkv-fleet zeigt drei Bereiche: (1) Verarbeitungshistorie-Tabelle mit Spalten Datum/Rechnungsnummer/Status/Fahrzeuge, (2) Export-Dateiliste, (3) "Jetzt prüfen"-Button. Bei leerem System zeigt die Tabelle einen leeren Zustand (kein Crash).
-result: [pending]
+result: pass
+note: "MODULE_REGISTRY-Eintrag für dkv-fleet ergänzt. URL: /modules/fleet/dkv-fleet"
 
 ### 7. DKV Einstellungen — Posteingang-Konfiguration
 expected: /modules/dkv-fleet/settings zeigt einen Tab "Posteingang" mit Formular für IMAP- oder Exchange-Zugangsdaten (Host, Port, Benutzername, Passwort). Formular kann ausgefüllt und gespeichert werden.
@@ -55,20 +59,12 @@ result: [pending]
 ## Summary
 
 total: 9
-passed: 0
+passed: 5
-issues: 1
+issues: 0
-pending: 8
+pending: 4
 skipped: 0
 blocked: 0
 
 ## Gaps
 
-- truth: "API-Container startet clean, DB-Verbindung stabil nach compose up"
+[none yet]
-  status: failed
-  reason: "User reported: DB-Container nicht in docker compose ps, API loggt P1001 Can't reach db:5432 bei Requests nach Start"
-  severity: major
-  test: 1
-  root_cause: ""
-  artifacts: []
-  missing: []
-  debug_session: ""

.planning/research/.cache/240ec9c8d056d8acfbdb6f299354e16f874942ef81ad84ac23578b4fbd645c45.json

@@ -0,0 +1 @@
+{"content":"Tauri 2 bundles: Linux AppImage via bundle targets ['appimage']. Windows NSIS (-setup.exe) recommended over MSI -- NSIS supports cross-compilation from Linux, MSI requires Windows. NSIS config: install modes (perMachine/both), languages, compression (LZMA default), custom hooks. Bundle output: target/release/bundle/appimage/ and target/release/bundle/nsis/.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-25T07:11:49.463Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/559095856f07c1f509f86817d56f5972ea81e2451dcf1826eb0a3662c6e1e55c.json

@@ -0,0 +1 @@
+{"content":"Tauri 2 plugins: @tauri-apps/plugin-store (2.4.3) for persistent KV storage, @tauri-apps/plugin-notification (2.3.3) for OS notifications, @tauri-apps/plugin-autostart (2.5.1) for system startup, @tauri-apps/plugin-window-state (2.4.1) for persisting window size/position. All from official tauri-apps/plugins-workspace. System tray via TrayIconBuilder with tray-icon feature flag. Close-to-tray: on_window_event CloseRequested -> prevent_close + hide. RunEvent::ExitRequested -> prevent_exit to keep alive.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-25T07:11:49.362Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/6bc0671a46ed1ca6346cc352aaebec978fad5f1d837cfeb4c82f2650d469e61b.json

@@ -0,0 +1 @@
+{"content":"NestJS @nestjs/schedule v6: ScheduleModule.forRoot() in AppModule. Static: @Interval(ms) or @Cron(expression). Dynamic: inject SchedulerRegistry, use CronJob from 'cron', schedulerRegistry.addCronJob(name, job), job.start(). Update interval: stop + delete + recreate. Module uses cron package under the hood. For interval-in-minutes from DB config: compute cron expression or use setInterval pattern. ScheduleModule already in AppModule? Check app.module.ts - YES, @nestjs/schedule@^6.1.3 is in deps.","source":"web","provider":"websearch","confidence":"LOW","fetched_at":"2026-06-26T12:30:31.855Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/854c73f7b9d04efd781e5f8e2da3aefdc747305be77a0ae2ff3704704ee27339.json

@@ -0,0 +1 @@
+{"content":"Tauri 2 project in pnpm monorepo: use 'npx tauri init' in apps/desktop. src-tauri goes inside apps/desktop/src-tauri. For URL wrapper: set frontendDist to external URL (e.g. http://server:3000). devUrl for dev server. tauri.conf.json is primary config. CLI: @tauri-apps/cli. Requires Rust toolchain + system deps (libwebkit2gtk-4.1-dev, libgtk-3-dev, etc).","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-25T07:11:49.268Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/89cfbb8469f350ac542c39fee93fa4c88c327b33e49fbec763ad6982e5252886.json

@@ -0,0 +1 @@
+{"content":"imapflow: Modern IMAP client. Connect: new ImapFlow({ host, port, secure, tls, auth: { user, pass } }). Get mailbox lock: client.getMailboxLock('INBOX'). Search: client.search({ from: sender }, { uid: true }) returns UIDs. FetchAll: client.fetchAll(uids, { envelope: true, bodyStructure: true }, { uid: true }). Download part: client.download(uid, partId, { uid: true }) returns { content: Stream }. Use fetchAll() first, then process - avoids IMAP deadlock. STARTTLS: secure=false + tls={rejectUnauthorized: false} + port 587. TLS: secure=true + port 993. None: secure=false + tls.ignoreTLSErrors=true or disableCompression.","source":"web","provider":"websearch","confidence":"LOW","fetched_at":"2026-06-26T12:30:25.576Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/8eb4181e3441a3eee19f1dd1eb33e597cb3de673fcbe9ce1c10d0c5d388f444e.json

@@ -0,0 +1 @@
+{"content":"For Exchange calendar access: ews-javascript-api v0.15.3 (EWS/SOAP, last updated 2024-05) or @microsoft/microsoft-graph-client v3.0.7 (REST/Graph API, last updated 2023-09). MS Graph is the modern approach for Exchange Online/M365. EWS is needed for on-premises Exchange. Both support OAuth.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-23T12:25:14.344Z","ttl":86400000,"kind":"web"}

.planning/research/.cache/8f79efd6895f898255cef6ebfab737ed17d7d9dc87b725de6899d36f933ac48f.json

@@ -0,0 +1 @@
+{"content":"react-grid-layout v2.2.3 is a TypeScript rewrite with hooks API (useContainerWidth, useGridLayout, useResponsiveLayout). Layout items have i,x,y,w,h,minW,minH,maxW,maxH,static,isDraggable,isResizable. Key callbacks: onLayoutChange, onDragStop, onResizeStop, onBreakpointChange. Responsive via breakpoints/cols config. v2 requires width prop (use useContainerWidth hook). CSS imports needed: react-grid-layout/css/styles.css and react-resizable/css/styles.css.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-23T12:25:13.959Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/9fbe9fa057e4989da6badacfc50568bed7d4611e0428fcb135512e5f2f8e770e.json

@@ -0,0 +1 @@
+{"content":"node-ical v0.26.1 is the leading ICS parser for Node.js with 190K weekly downloads. Provides sync/async parsing from strings, files, and URLs. Handles VEVENT, VTODO, VJOURNAL, recurring events, timezones.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-23T12:25:14.159Z","ttl":86400000,"kind":"web"}

.planning/research/.cache/abb90171f22b80689f17d8bdadbc0983957191fd385657be0544b7378511b8c4.json

@@ -0,0 +1 @@
+{"content":"@uiw/react-md-editor v4.1.1 is a lightweight Markdown editor with toolbar (bold, italic, lists, links, code), GFM support including task lists/checkboxes, dark mode via data-color-mode attribute, customizable toolbar via commands prop, live preview mode. ~4.6KB gzipped core. 774K weekly downloads.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-23T12:25:14.058Z","ttl":86400000,"kind":"web"}

.planning/research/.cache/d02765e0b88d89bc628a46cb5ebb80914dc59e10052afdbf1dbf3fc1b60df87d.json

@@ -0,0 +1 @@
+{"content":"SheetJS xlsx 0.18: XLSX.utils.book_new() creates workbook. XLSX.utils.aoa_to_sheet(rows) from array-of-arrays where rows[0] = headers. XLSX.utils.book_append_sheet(wb, ws, sheetName). XLSX.write(wb, { type:'buffer', bookType:'xlsx' }) returns Buffer. Date cells: pass JS Date objects, xlsx serializes to Excel date serial. Cell formatting: ws[cellAddr].z = 'DD.MM.YYYY' for display format. German date format 'TT.MM.JJJJ' in the data = string, not Date object, so just write as string. Numeric km: write as number, no unit.","source":"web","provider":"websearch","confidence":"LOW","fetched_at":"2026-06-26T12:30:47.031Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/d579764c1090f2ae42bb97755f997459ecba57ad688e9438e1f8f069d4e7635f.json

@@ -0,0 +1 @@
+{"content":"pdf-parse v2.4.5: const pdfParse = require('pdf-parse'); const data = await pdfParse(buffer); data.text = full text extracted from all pages concatenated. data.numpages = page count. data.info = PDF metadata. The library is Promise-based, takes Buffer as input. DKV PDF pattern: each vehicle block starts with line containing 'VEHICLE: {plate} CARD NO.:'; transaction rows follow with date + station + km + product + qty + unit; ends with 'TOTAL:'. Multi-page: text is full concatenation across all pages.","source":"web","provider":"websearch","confidence":"LOW","fetched_at":"2026-06-26T12:30:47.125Z","ttl":86400000,"kind":"docs"}

.planning/research/.cache/f2d8ed43415344dc0f8e859e41d784171b499dc3b2f620ef2743bccee8cfd74c.json

@@ -0,0 +1 @@
+{"content":"tsdav v2.2.2 is the leading CalDAV/CardDAV client for Node.js/Browser with 88K weekly downloads. TypeScript-native, supports basic auth and OAuth2, works with Google Calendar, iCloud, Nextcloud. Methods: fetchCalendars(), fetchCalendarObjects(). Date range filtering supported.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-23T12:25:14.252Z","ttl":86400000,"kind":"web"}

.planning/research/.cache/fdf6a8568756bac33666ba09cccd1a7334e9ae41a933fd09e3d9398838bb2fed.json

@@ -0,0 +1 @@
+{"content":"Gitea Actions: 90% GitHub Actions compatible YAML syntax. Workflows in .gitea/workflows/. act_runner as Docker container with Docker socket mount. Registration via token from admin panel. Secrets in repo settings. Key differences: no timeout-minutes, no continue-on-error, no concurrency groups, no hashFiles. Docker build: use docker/build-push-action or plain docker commands. Deploy via SSH action (appleboy/ssh-action) for docker-compose pull+restart.","source":"web","provider":"websearch","confidence":"MEDIUM","fetched_at":"2026-06-25T07:11:49.578Z","ttl":86400000,"kind":"web"}

apps/api/prisma/schema.prisma

@@ -182,6 +182,7 @@ model DkvModuleConfig {
   isActive            Boolean  @default(false)
   exportRecipient     String?
   vehicleFormatString String   @default("{Marke}/{Modell}/{Kennzeichen}")
+  domain              String?  // Exchange only: Windows domain (optional)
   encryptedInboxCreds String?  // AES-256-GCM: JSON { username, password } encrypted
   createdAt           DateTime @default(now())
   updatedAt           DateTime @updatedAt

apps/api/src/dkv/dkv.seed.ts

@@ -14,7 +14,7 @@ export async function seedDkvModule(
 ): Promise<void> {
   await moduleRegistryService.seedModule({
     slug: 'dkv-fleet',
-    name: 'DKV Flotte',
+    name: 'DKV-Rechnung',
     version: '1.0.0',
     category: 'fleet',
     description: {

apps/api/src/dkv/dkv.service.ts

@@ -34,6 +34,7 @@ const CONFIG_SAFE_SELECT = {
   isActive: true,
   exportRecipient: true,
   vehicleFormatString: true,
+  domain: true,
   // encryptedInboxCreds: NEVER included — T-07-12
   createdAt: true,
   updatedAt: true,
@@ -156,6 +157,7 @@ export class DkvService {
       ...(dto.isActive !== undefined && { isActive: dto.isActive }),
       ...(dto.exportRecipient !== undefined && { exportRecipient: dto.exportRecipient }),
       ...(dto.vehicleFormatString !== undefined && { vehicleFormatString: dto.vehicleFormatString }),
+      ...(dto.domain !== undefined && { domain: dto.domain }),
       ...(encryptedInboxCreds !== undefined && { encryptedInboxCreds }),
     };
 
@@ -201,6 +203,7 @@ export class DkvService {
       encryption: dto.encryption,
       folder: dto.folder ?? 'INBOX',
       senderFilter: dto.senderFilter,
+      domain: dto.domain,
     };
 
     const provider = dto.protocol === 'exchange' ? this.exchangeProvider : this.imapProvider;

apps/api/src/dkv/dkv.types.ts

@@ -59,6 +59,8 @@ export interface InboxConfig {
   folder: string;
   /** Sender filter: only process emails from this address */
   senderFilter?: string;
+  /** Exchange only: Windows domain (e.g. "CONTOSO") */
+  domain?: string;
 }
 
 /**

apps/api/src/dkv/dto/dkv-config.dto.ts

@@ -100,6 +100,10 @@ export class DkvConfigDto {
   /**
    * Inbox username (stored encrypted; cleared after save).
    */
+  @IsOptional()
+  @IsString()
+  domain?: string;
+
   @IsOptional()
   @IsString()
   username?: string;

apps/api/src/dkv/providers/exchange-inbox.provider.ts

@@ -222,6 +222,7 @@ export class ExchangeInboxProvider implements InboxProvider {
     service.Credentials = new ews.WebCredentials(
       config.username ?? '',
       config.password ?? '',
+      config.domain ?? undefined,
     );
     return service;
   }

apps/api/src/settings/dto/smtp-config.dto.ts

@@ -44,4 +44,8 @@ export class SmtpConfigDto {
 
   @IsEmail()
   fromAddress!: string;
+
+  @IsOptional()
+  @IsEmail()
+  testTo?: string;
 }

apps/api/src/settings/settings.service.ts

@@ -138,8 +138,6 @@ export class SettingsService {
       }
     }
 
-    const hasAuth = !!(username && password);
-
     try {
       const transport = nodemailer.createTransport({
         host: dto.host,
@@ -154,13 +152,17 @@ export class SettingsService {
           : undefined,
       });
 
+      if (dto.testTo) {
+        await transport.sendMail({
+          from: dto.fromAddress,
+          to: dto.testTo,
+          subject: 'Tessera SMTP-Test',
+          text: 'Diese E-Mail bestätigt, dass die SMTP-Konfiguration in Tessera funktioniert.',
+        });
+      } else {
         await transport.verify();
-
-      // T-07-16: connection passed but warn when no auth — server reachable but
-      // unauthenticated relay will likely be rejected when actually sending.
-      if (!hasAuth) {
-        return { success: true, warning: 'no_auth' };
       }
+
       return { success: true };
     } catch (error) {
       this.logger.warn(

apps/desktop/src-tauri/gen/schemas/capabilities.json

@@ -0,0 +1 @@
+{"default":{"identifier":"default","description":"Tessera desktop capabilities","local":true,"windows":["main"],"permissions":["core:default","store:default","notification:default","notification:allow-is-permission-granted","notification:allow-request-permission","notification:allow-notify","autostart:allow-enable","autostart:allow-disable","autostart:allow-is-enabled","window-state:default"]}}

apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/settings/page.tsx

@@ -0,0 +1,25 @@
+'use client';
+
+import { useParams } from 'next/navigation';
+import DkvFleetSettingsPage from '@/app/(portal)/modules/dkv-fleet/settings/page';
+import { useTranslations } from 'next-intl';
+
+const SETTINGS_REGISTRY: Record<string, React.ComponentType> = {
+  'dkv-fleet': DkvFleetSettingsPage,
+};
+
+export default function DynamicModuleSettingsPage() {
+  const { moduleSlug } = useParams<{ category: string; moduleSlug: string }>();
+  const t = useTranslations('modules');
+
+  const Component = SETTINGS_REGISTRY[moduleSlug ?? ''];
+  if (!Component) {
+    return (
+      <div className="mx-auto max-w-2xl p-6 text-center text-muted-foreground">
+        {t('notFound')}
+      </div>
+    );
+  }
+
+  return <Component />;
+}

apps/web/src/app/(portal)/modules/[category]/[moduleSlug]/vehicles/page.tsx

@@ -0,0 +1,25 @@
+'use client';
+
+import { useParams } from 'next/navigation';
+import DkvFleetVehiclesPage from '@/app/(portal)/modules/dkv-fleet/vehicles/page';
+import { useTranslations } from 'next-intl';
+
+const VEHICLES_REGISTRY: Record<string, React.ComponentType> = {
+  'dkv-fleet': DkvFleetVehiclesPage,
+};
+
+export default function DynamicModuleVehiclesPage() {
+  const { moduleSlug } = useParams<{ category: string; moduleSlug: string }>();
+  const t = useTranslations('modules');
+
+  const Component = VEHICLES_REGISTRY[moduleSlug ?? ''];
+  if (!Component) {
+    return (
+      <div className="mx-auto max-w-2xl p-6 text-center text-muted-foreground">
+        {t('notFound')}
+      </div>
+    );
+  }
+
+  return <Component />;
+}

apps/web/src/app/(portal)/modules/dkv-fleet/page.tsx

@@ -2,6 +2,8 @@
 
 import { useCallback, useState } from 'react';
 import { useTranslations } from 'next-intl';
+import { useParams } from 'next/navigation';
+import Link from 'next/link';
 import { checkNow, type DkvHistoryEntry } from '@/lib/dkv-api';
 import { InvoiceHistoryTable } from './components/InvoiceHistoryTable';
 import { ExportFileList } from './components/ExportFileList';
@@ -33,6 +35,10 @@ function SpinnerIcon() {
  */
 export default function DkvFleetPage() {
   const t = useTranslations('dkvFleet');
+  const params = useParams<{ category?: string; moduleSlug?: string }>();
+  const basePath = params.category && params.moduleSlug
+    ? `/modules/${params.category}/${params.moduleSlug}`
+    : '/modules/dkv-fleet';
 
   const [isChecking, setIsChecking] = useState(false);
   const [pollError, setPollError] = useState<string | null>(null);
@@ -83,6 +89,18 @@ export default function DkvFleetPage() {
           </p>
         </div>
 
+        {/* Einstellungen-Link */}
+        <Link
+          href={`${basePath}/settings`}
+          className="rounded border border-border px-3 py-2 text-sm text-muted-foreground transition-colors hover:bg-muted hover:text-foreground"
+          title={t('settingsTitle')}
+        >
+          <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
+            <circle cx="12" cy="12" r="3" />
+            <path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06A1.65 1.65 0 0 0 4.68 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06A1.65 1.65 0 0 0 9 4.68a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06A1.65 1.65 0 0 0 19.4 9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z" />
+          </svg>
+        </Link>
+
         {/* "Jetzt prüfen" button per 07-UI-SPEC button states */}
         <button
           type="button"

apps/web/src/app/(portal)/modules/dkv-fleet/settings/components/InboxConfigForm.tsx

@@ -64,6 +64,7 @@ interface FormState {
   pollIntervalMin: string;
   username: string;
   password: string; // intentionally blank on load (T-07-12)
+  domain: string;
   exportRecipient: string;
   vehicleFormatString: string;
   isActive: boolean;
@@ -79,6 +80,7 @@ const DEFAULT_FORM: FormState = {
   pollIntervalMin: '30',
   username: '',
   password: '', // blank — T-07-12
+  domain: '',
   exportRecipient: '',
   vehicleFormatString: '{Marke}/{Modell}/{Kennzeichen}',
   isActive: false,
@@ -95,6 +97,7 @@ function configToForm(config: DkvConfig): FormState {
     pollIntervalMin: String(config.pollIntervalMin),
     username: config.username ?? '',
     password: '', // NEVER pre-fill from server — T-07-12
+    domain: config.domain ?? '',
     exportRecipient: config.exportRecipient,
     vehicleFormatString: config.vehicleFormatString,
     isActive: config.isActive,
@@ -113,6 +116,7 @@ function formToPayload(
     senderFilter: form.senderFilter || undefined,
     pollIntervalMin: Number(form.pollIntervalMin),
     username: form.username || undefined,
+    domain: form.domain || undefined,
     exportRecipient: form.exportRecipient,
     vehicleFormatString: form.vehicleFormatString,
     isActive: form.isActive,
@@ -245,22 +249,24 @@ export function InboxConfigForm() {
         </select>
       </div>
 
-      {/* Host */}
+      {/* Host / EWS-URL */}
       <div>
         <label htmlFor="dkv-host" className={labelCls}>
-          {t('form.host')} *
+          {form.protocol === 'exchange' ? t('form.hostExchange') : t('form.host')} *
         </label>
         <input
           id="dkv-host"
           type="text"
           required
+          placeholder={form.protocol === 'exchange' ? 'https://mail.firma.de/EWS/Exchange.asmx' : 'imap.firma.de'}
           className={inputCls}
           value={form.host}
           onChange={(e) => update('host', e.target.value)}
         />
       </div>
 
-      {/* Port */}
+      {/* IMAP-only: Port */}
+      {form.protocol === 'imap' && (
         <div>
           <label htmlFor="dkv-port" className={labelCls}>
             {t('form.port')} *
@@ -274,8 +280,10 @@ export function InboxConfigForm() {
             onChange={(e) => update('port', e.target.value)}
           />
         </div>
+      )}
 
-      {/* Verschlüsselung */}
+      {/* IMAP-only: Verschlüsselung */}
+      {form.protocol === 'imap' && (
         <div>
           <label htmlFor="dkv-encryption" className={labelCls}>
             {t('form.encryption')} *
@@ -293,8 +301,10 @@ export function InboxConfigForm() {
             <option value="ssl-tls">SSL-TLS</option>
           </select>
         </div>
+      )}
 
-      {/* Ordner */}
+      {/* IMAP-only: Ordner */}
+      {form.protocol === 'imap' && (
         <div>
           <label htmlFor="dkv-folder" className={labelCls}>
             {t('form.folder')} *
@@ -308,6 +318,25 @@ export function InboxConfigForm() {
             onChange={(e) => update('folder', e.target.value)}
           />
         </div>
+      )}
+
+      {/* Exchange-only: Domain */}
+      {form.protocol === 'exchange' && (
+        <div>
+          <label htmlFor="dkv-domain" className={labelCls}>
+            {t('form.domain')}
+          </label>
+          <input
+            id="dkv-domain"
+            type="text"
+            placeholder="CONTOSO"
+            className={inputCls}
+            value={form.domain}
+            onChange={(e) => update('domain', e.target.value)}
+          />
+          <p className="mt-1 text-xs text-muted-foreground">{t('form.domainHelp')}</p>
+        </div>
+      )}
 
       {/* Absenderfilter */}
       <div>

apps/web/src/app/(portal)/modules/dkv-fleet/settings/page.tsx

@@ -3,6 +3,7 @@
 import Link from 'next/link';
 import { useState } from 'react';
 import { useTranslations } from 'next-intl';
+import { useParams } from 'next/navigation';
 import { InboxConfigForm } from './components/InboxConfigForm';
 
 type ActiveTab = 'inbox' | 'vehicles';
@@ -14,6 +15,10 @@ type ActiveTab = 'inbox' | 'vehicles';
  */
 export default function DkvFleetSettingsPage() {
   const t = useTranslations('dkvFleet');
+  const params = useParams<{ category?: string; moduleSlug?: string }>();
+  const basePath = params.category && params.moduleSlug
+    ? `/modules/${params.category}/${params.moduleSlug}`
+    : '/modules/dkv-fleet';
   const [activeTab, setActiveTab] = useState<ActiveTab>('inbox');
 
   const tabCls = (tab: ActiveTab) =>
@@ -41,7 +46,7 @@ export default function DkvFleetSettingsPage() {
           </button>
           {/* Vehicles tab navigates to its own route */}
           <Link
-            href="/modules/dkv-fleet/vehicles"
+            href={`${basePath}/vehicles`}
             className={`px-4 py-2 text-sm transition-colors text-muted-foreground hover:text-foreground`}
           >
             {t('tabs.vehicles')}

apps/web/src/app/(portal)/modules/dkv-fleet/vehicles/page.tsx

@@ -2,6 +2,7 @@
 
 import Link from 'next/link';
 import { useTranslations } from 'next-intl';
+import { useParams } from 'next/navigation';
 import { VehicleTable } from '../settings/components/VehicleTable';
 
 /**
@@ -11,13 +12,17 @@ import { VehicleTable } from '../settings/components/VehicleTable';
  */
 export default function DkvFleetVehiclesPage() {
   const t = useTranslations('dkvFleet');
+  const params = useParams<{ category?: string; moduleSlug?: string }>();
+  const basePath = params.category && params.moduleSlug
+    ? `/modules/${params.category}/${params.moduleSlug}`
+    : '/modules/dkv-fleet';
 
   return (
     <div className="mx-auto max-w-5xl p-6">
       {/* Back link to settings */}
       <div className="mb-4">
         <Link
-          href="/modules/dkv-fleet/settings"
+          href={`${basePath}/settings`}
           className="text-sm text-muted-foreground hover:text-foreground transition-colors"
         >
           ← {t('tabs.inbox')} / {t('settingsTitle')}

apps/web/src/components/settings/smtp-settings-form.tsx

@@ -51,6 +51,7 @@ export function SmtpSettingsForm() {
   const t = useTranslations('settings');
 
   const [form, setForm] = useState<FormState>(DEFAULT_FORM);
+  const [testTo, setTestTo] = useState('');
   const [isSaving, setIsSaving] = useState(false);
   const [isTesting, setIsTesting] = useState(false);
   const [showPassword, setShowPassword] = useState(false);
@@ -114,10 +115,10 @@ export function SmtpSettingsForm() {
     setIsTesting(true);
     setTestFeedback({ type: 'loading', message: t('smtp.testTesting') });
     try {
-      const result = await testSmtp(buildPayload());
+      const payload = buildPayload();
-      if (result.success && result.warning === 'no_auth') {
+      if (testTo.trim()) payload.testTo = testTo.trim();
-        setTestFeedback({ type: 'error', message: t('smtp.testNoAuth') });
+      const result = await testSmtp(payload);
-      } else if (result.success) {
+      if (result.success) {
         setTestFeedback({ type: 'success', message: t('smtp.testSuccess') });
       } else {
         setTestFeedback({ type: 'error', message: t('smtp.testFailed') });
@@ -126,7 +127,6 @@ export function SmtpSettingsForm() {
       setTestFeedback({ type: 'error', message: t('smtp.testFailed') });
     } finally {
       setIsTesting(false);
-      // Auto-clear after 6 seconds
       clearTimerRef.current = setTimeout(() => setTestFeedback(null), 6000);
     }
   };
@@ -300,6 +300,24 @@ export function SmtpSettingsForm() {
         </p>
       </div>
 
+      {/* Test-E-Mail Empfänger */}
+      <div>
+        <label htmlFor="smtp-test-to" className={labelClass}>
+          {t('smtp.testToLabel')}
+        </label>
+        <input
+          id="smtp-test-to"
+          type="email"
+          placeholder={t('smtp.testToPlaceholder')}
+          className={inputClass}
+          value={testTo}
+          onChange={(e) => setTestTo(e.target.value)}
+        />
+        <p className="mt-1 text-xs text-muted-foreground">
+          {t('smtp.testToHelp')}
+        </p>
+      </div>
+
       {/* Action row */}
       <div className="flex gap-3 pt-2">
         <button

apps/web/src/lib/dkv-api.ts

@@ -28,6 +28,7 @@ export interface DkvConfig {
   exportRecipient: string;
   vehicleFormatString: string;
   username?: string | null;
+  domain?: string | null;
   /** true if a password is stored server-side — never the actual secret */
   hasPassword: boolean;
 }

apps/web/src/lib/module-loader.ts

@@ -35,6 +35,12 @@ export const MODULE_REGISTRY: Record<string, ModuleRegistryEntry> = {
       { ssr: false },
     ),
   },
+  'dkv-fleet': {
+    component: dynamic(
+      () => import('@/app/(portal)/modules/dkv-fleet/page'),
+      { ssr: false },
+    ),
+  },
 };
 
 /**

apps/web/src/lib/settings-api.ts

@@ -37,6 +37,8 @@ export interface SaveSmtpPayload {
   /** Only include when the user has typed a new password. */
   password?: string;
   fromAddress: string;
+  /** If set, backend sends a real test email to this address instead of just verify(). */
+  testTo?: string;
 }
 
 // --- API functions ---

apps/web/src/messages/de.json

@@ -133,10 +133,12 @@
       "test": "Verbindung testen",
       "showPassword": "Passwort anzeigen",
       "hidePassword": "Passwort verbergen",
+      "testToLabel": "Test-E-Mail an",
+      "testToPlaceholder": "empfaenger@example.com",
+      "testToHelp": "Optional — sendet eine echte Test-E-Mail an diese Adresse.",
       "testTesting": "Verbindung wird getestet...",
       "testSuccess": "Verbindung erfolgreich",
-      "testFailed": "Verbindung fehlgeschlagen",
+      "testFailed": "Verbindung fehlgeschlagen"
-      "testNoAuth": "Server erreichbar, aber keine Zugangsdaten konfiguriert — E-Mail-Versand wird fehlschlagen"
     }
   },
   "widgets": {
@@ -258,7 +260,7 @@
     "error": "Fehler bei der Pruefung"
   },
   "dkvFleet": {
-    "pageTitle": "DKV Flotte",
+    "pageTitle": "DKV-Rechnung",
     "checkNow": "Jetzt pruefen",
     "checking": "Wird geprueft...",
     "lastChecked": "Zuletzt geprueft: {time} Uhr",
@@ -310,6 +312,9 @@
     "form": {
       "protocol": "Protokoll",
       "host": "Host",
+      "hostExchange": "EWS-URL",
+      "domain": "Domain",
+      "domainHelp": "Optional — Windows-Domaene (z.B. CONTOSO). Leer lassen wenn nicht benoetigt.",
       "port": "Port",
       "encryption": "Verschluesselung",
       "encryptionNone": "Keine",

apps/web/src/messages/en.json

@@ -133,6 +133,9 @@
       "test": "Test Connection",
       "showPassword": "Show password",
       "hidePassword": "Hide password",
+      "testToLabel": "Send test email to",
+      "testToPlaceholder": "recipient@example.com",
+      "testToHelp": "Optional — sends a real test email to this address.",
       "testTesting": "Testing connection...",
       "testSuccess": "Connection successful",
       "testFailed": "Connection failed"
@@ -257,7 +260,7 @@
     "error": "Error checking domain"
   },
   "dkvFleet": {
-    "pageTitle": "DKV Fleet",
+    "pageTitle": "DKV Invoice",
     "checkNow": "Check Now",
     "checking": "Checking...",
     "lastChecked": "Last checked: {time}",
@@ -309,6 +312,9 @@
     "form": {
       "protocol": "Protocol",
       "host": "Host",
+      "hostExchange": "EWS URL",
+      "domain": "Domain",
+      "domainHelp": "Optional — Windows domain (e.g. CONTOSO). Leave blank if not required.",
       "port": "Port",
       "encryption": "Encryption",
       "encryptionNone": "None",