tessera-ctl/.planning/quick/260929-lh3-favoriten-eigenes-symbol-wirkt-nicht/260929-lh3-PLAN.md

quick_id, type, wave, autonomous

quick_id	type	wave	autonomous
260929-lh3	quick	1	true

Quick 260929-lh3: Favoriten — eigene Symbol-Adresse wirkt nicht

User reports (29.09.2026, alpha 8c644de)

1. Favorite with URL https://docuvita.ctl.local/server/services/web/ shows a black circle with a white "V" instead of the page's favicon (visible in the browser tab).
2. Setting an explicit icon URL ("Symbol-Adresse", field iconUrl) to https://nextcloud.com/c/uploads/2025/10/Nextcloud_01-standard-logo.png on a favorite does not change the shown icon.

Measured facts (orchestrator, from inside the alpha api container)

• docuvita.ctl.local resolves (172.16.0.46). Server-side GET of the page returns 400 but the HTML contains <link rel="SHORTCUT ICON" type="image/png" href="/webclient/docuvita/resources/brandimage/favicon.ico" />. Server-side GET of that icon returns 404 text/html (also with a Chrome User-Agent). Root /favicon.ico → 404. → docuvita refuses the files to the server; the browser can load them (user sees the icon in the tab).
• Discovery (apps/api/src/favorites/icon-discovery.service.ts discoverFavoriteIconUrl) ignores non-2xx HTML (fetchHtml returns null) → falls back to {origin}/favicon.ico; proxy fails → browser direct {origin}/favicon.ico shows the "V" (a real icon served to browsers at the root).
• Explicit iconUrl that the server cannot fetch → API answers 422 iconUrlUnreachable (quick 260923-lrr), so the user cannot set the docuvita icon URL at all.

Task 1: Explicit icon URL change must show immediately (bug 2)

• files: apps/api/src/favorites/*, apps/web/src/components/dashboard/widgets/favorites-widget.tsx, apps/web/src/lib/favorites-api.ts (+ tests)
• action: Reproduce locally (admin/admin123, favorites widget): set/change iconUrl to a reachable PNG (e.g. the Nextcloud URL, and a second different one). Find why the tile keeps the old image — likely the icon proxy URL (/favorites/:id/icon?...) does not change when iconUrl changes (browser/HTTP cache, Cache-Control on the proxy response, iconVersion only bumped on upload, or the server returns a cached/discovered icon instead of the explicit one). Fix at the root: the explicit iconUrl wins over discovery, and any change of iconUrl changes the image URL (e.g. cache-buster from iconVersion bumped on every iconUrl change, or a hash of iconUrl). Add regression tests (API: PATCH iconUrl bumps version / proxy serves new bytes; web: tile src changes when iconUrl changes).
• verify: api + web tests for favorites green.
• done: commit fix(favorites): geaenderte Symbol-Adresse wird sofort angezeigt.

Task 2: Accept icon URLs the server cannot fetch; browser loads them directly (bug 1)

• action:
  • API: an explicit iconUrl that is a valid http/https URL is stored even if the server cannot fetch it (no more 422 for "unreachable"; keep validation of scheme/length and keep rejecting non-image responses only when the server DID get a response with a non-image content type — decide and document). Keep SSRF guard for server-side fetches unchanged.
  • Web tile: chain for an explicit iconUrl: proxy image → on error the browser loads iconUrl directly (<img> with referrerPolicy="no-referrer", only http/https) → letter fallback. Existing chain for discovered icons unchanged.
  • Discovery improvement (small, safe): if the page answers non-2xx but returns HTML with a <link rel=icon>, still use that icon URL (so docuvita-like servers yield /webclient/.../favicon.ico, which the browser can then load directly).
  • Remove/adjust the now-unused iconUrlUnreachable error text (de/en) if no longer reachable.
• verify: api + web favorites tests green; type-check/lint green; biome web ≤ 55, api ≤ 82.
• done: commit fix(favorites): Symbol-Adresse auch speichern, wenn nur der Browser sie laden kann.

Task 3: CHANGELOG + rebuild

• CHANGELOG ## Unveröffentlicht → ### Behoben: two plain-German bullets (Sie-Form) for both fixes.
• docker compose up -d --build web api.
• Commit docs(changelog): Favoriten-Symbole.

Constraints

• Commit locally only, NEVER git push. Commits end with Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>.
• Commit with explicit paths only.
• Browser check is done by the orchestrator.