---
context: phase
phase: 09-cert-manager-module
task: null
total_tasks: null
status: paused
last_updated: 2026-07-02T06:21:28.260Z
---

# BLOCKING CONSTRAINTS — Read Before Anything Else

_Keine blocking constraints aus der Implementierung._

<current_state>
Phase 09 vollständig implementiert (6/6 Pläne, 27 API + 19 Web-Tests grün).
UAT gestartet (09-UAT.md) aber geblockt:
Docker API-Container läuft alten Build — CertManagerModule nicht deployed.
Keine cert-manager Routes, kein Seed. Marketplace zeigt nur 2 Module.
</current_state>

<completed_work>

- Wave 1 (09-01+02): API Foundation + Web Shell 4-Tabs
- Wave 2 (09-03): parseCert PEM/DER/PFX/P7B + InspectTab (TDD RED→GREEN)
- Wave 3 (09-04): splitCerts fullchain+P7B + SplitTab
- Wave 4 (09-05): convertCert PEM↔DER↔P7B + ConvertTab
- Wave 5 (09-06): mergeCerts PEM-Kette + Passwort-PFX + MergeTab
- 09-UAT.md: 8 Tests definiert, status: partial
</completed_work>

<remaining_work>

**Vor Resume (manuell):**
```bash
docker compose build api && docker compose up -d api
docker logs tessera-ctl-api-1 | grep "Cert-Manager"
```
Dann: Marketplace → cert-manager aktivieren (Tenant: Default)
Dann: `/gsd-verify-work 9`
</remaining_work>

<decisions_made>

- forge.pkcs12.toPkcs12Asn1(null, certs, password) funktioniert — null-key PFX OK (Open Question 1 resolved)
- DER: bytesToHex → Buffer.from(hex,'hex') → base64 (Pitfall 1 — nie utf-8)
- expect.extend(matchers) explizit in web vitest setup.ts (Vitest 4.x Bug)
</decisions_made>

<blockers>

- Docker-Build veraltet: `docker compose build api && docker compose up -d api` nötig
- Uncommitted files aus alten Sessions (auth, dashboard etc.) — NICHT committen
</blockers>

## Required Reading
1. `.planning/phases/09-cert-manager-module/09-UAT.md` — 8 Tests, alle pending

## Infrastructure State
- Docker: web (3000) OK; api (3001) läuft mit ALTEM Build (kein CertManagerModule)
- git: main, HEAD daff82e
- Uncommitted (ignorieren): .mcp.json, auth.service.ts, user.controller.ts, dashboard-*.tsx, widget-wrapper.tsx, account-settings-form.tsx, auth-actions.ts, dashboard-store.ts

<context>
Phase 09 code-seitig fertig. Einziger offener Punkt: Docker rebuild + UAT.
</context>

<next_action>
docker compose build api && docker compose up -d api — dann /gsd-verify-work 9
</next_action>