fix: Paket 0 – data integrity, security hardening and field usability

Backend
- Backup covers every Prisma model (bundle v3); a guard test fails for any
  new model that is neither backed up nor explicitly excluded. Unsealed
  bundles may only add rows to 27 legacy master/field tables and never
  overwrite; counters, ledgers, settings, roles etc. need a sealed file.
  Shared import limit BACKUP_MAX_IMPORT_BYTES (default 50 MB, max 256 MB)
  with warnings in log and UI; replaced document files are removed after
  commit.
- Post-commit side effects (automation, calendar sync, webhooks) run via
  runAfterCommit and never turn a committed write into a 500, so retries
  with the same Idempotency-Key no longer create duplicates.
- Calendar outbox is multi-replica safe: per-entry claims with stale
  takeover, revision-based settle, new Graph event only on 404/410,
  transactionId on create, 30 s Graph timeout, URL-encoded ids, GUID
  validation for groupId, "run now" in background and resets FAILED.
- Automation tasks are deduplicated under a row lock on the rule.
- Update DTOs follow one null rule: omitted = unchanged, null clears a
  nullable field, null on a required field is a 400.
- Varroa mites/day is recomputed on correction; withdrawal status is
  checked against the harvest date (?at=), bounded colonyIds; inspection
  create is audited; updates re-enqueue calendar entries.
- Dashboard, statistics and apiary/colony guards treat WEAK, CONSPICUOUS
  and QUEENLESS colonies as living.
- Prisma errors and body-parser errors are logged without query values or
  request bodies.
- Migration 20261012100000_calendar_sync_claims; schema index name aligned
  with the existing database object.

Frontend
- Sticky save bar sticks again (no scroll container ancestors, card uses
  overflow-clip), safe-area insets, scroll-padding, FAB hidden on forms,
  sticky desktop sidebar.
- Inspections record yes / no / not checked instead of silent defaults.
- All living colonies are selectable; shared RecordSelect, EnumSelect,
  ChoiceGroup and TriStateField replace per-page copies; selects show
  names instead of ids; labels point at real controls.
- Emptied optional fields are sent as null (emptyToNull) so every field
  can be cleared; dates default to the local day and are sent via
  toApiDate.
- Harvest withdrawal warning uses the harvest date; backup page warns when
  a backup outgrows the import limit and lists skipped tables.

Build and docs
- Docker builds fail unless lint, typecheck and unit tests pass.
- ARCHITECTURE.md updated (assumptions 9-12, 19-21, section 8) and spec
  docs/superpowers/specs/2026-10-12-plattform-rueckgrat-und-fahrplan-design.md
  for the backbone (api/worker/job roles, domain event outbox) and the
  feature roadmap T3-T7.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/inspections/dto/update-inspection.dto.ts

@@ -6,4 +6,6 @@ import { CreateInspectionDto } from './create-inspection.dto';
  * the wrong colony is a data-entry error, and re-filing it is the only way to
  * repair the colony's history without deleting the record.
  */
-export class UpdateInspectionDto extends PartialType(CreateInspectionDto) {}
+export class UpdateInspectionDto extends PartialType(CreateInspectionDto, {
+  skipNullProperties: false,
+}) {}

ApiCore-Backend/src/inspections/inspections.service.spec.ts

@@ -18,6 +18,7 @@ describe('InspectionsService', () => {
     task: { create: jest.Mock };
   };
   let auditLog: { record: jest.Mock };
+  let calendarSync: { enqueue: jest.Mock; cancel: jest.Mock };
 
   const inspection = {
     id: 'inspection-1',
@@ -40,7 +41,7 @@ describe('InspectionsService', () => {
       evaluateInspection: jest.fn().mockResolvedValue(undefined),
     };
     auditLog = { record: jest.fn().mockResolvedValue(undefined) };
-    const calendarSync = { enqueue: jest.fn(), cancel: jest.fn() };
+    calendarSync = { enqueue: jest.fn(), cancel: jest.fn() };
     service = new InspectionsService(
       prisma as unknown as PrismaService,
       webhooks as unknown as WebhooksService,
@@ -72,6 +73,23 @@ describe('InspectionsService', () => {
     expect(createArg.data.userId).toBe('user-1');
   });
 
+  it('create writes an audit log entry with the created inspection', async () => {
+    prisma.inspection.create.mockResolvedValue(inspection);
+
+    await service.create(
+      { colonyId: 'colony-1', date: '2026-01-01' },
+      'user-1',
+    );
+
+    expect(auditLog.record).toHaveBeenCalledWith({
+      entityType: 'Inspection',
+      entityId: 'inspection-1',
+      action: 'CREATE',
+      userId: 'user-1',
+      afterData: inspection,
+    });
+  });
+
   it('update writes an audit log entry with before and after data', async () => {
     prisma.inspection.findUnique.mockResolvedValue(inspection);
     const updated = { ...inspection, notes: 'geändert' };
@@ -95,6 +113,18 @@ describe('InspectionsService', () => {
     );
   });
 
+  it('update re-enqueues the calendar sync so a changed date moves the event', async () => {
+    prisma.inspection.findUnique.mockResolvedValue(inspection);
+    prisma.inspection.update.mockResolvedValue(inspection);
+
+    await service.update('inspection-1', { date: '2026-05-02' }, 'user-1');
+
+    expect(calendarSync.enqueue).toHaveBeenCalledWith(
+      'INSPECTION',
+      'inspection-1',
+    );
+  });
+
   it('createTaskFromInspection links the task to the inspection and its colony', async () => {
     prisma.inspection.findUnique.mockResolvedValue(inspection);
     prisma.task.create.mockResolvedValue({ id: 'task-1' });

ApiCore-Backend/src/inspections/inspections.service.ts

@@ -8,6 +8,7 @@ import { Inspection, Task } from '../../generated/prisma';
 import { CreateInspectionDto } from './dto/create-inspection.dto';
 import { CreateTaskFromInspectionDto } from './dto/create-task-from-inspection.dto';
 import { UpdateInspectionDto } from './dto/update-inspection.dto';
+import { optionalDate } from '../common/patch-values';
 
 @Injectable()
 export class InspectionsService {
@@ -47,6 +48,13 @@ export class InspectionsService {
     const inspection = await this.prisma.inspection.create({
       data: { ...dto, date: new Date(dto.date), userId: actingUserId },
     });
+    await this.auditLog.record({
+      entityType: 'Inspection',
+      entityId: inspection.id,
+      action: 'CREATE',
+      userId: actingUserId,
+      afterData: inspection,
+    });
     await this.webhooks.dispatch('inspection.created', inspection);
     await this.automation.evaluateInspection(inspection);
     await this.calendarSync.enqueue('INSPECTION', inspection.id);
@@ -71,6 +79,9 @@ export class InspectionsService {
       beforeData: before,
       afterData: inspection,
     });
+    // A changed date or colony must move the calendar event, not leave the
+    // old one behind.
+    await this.calendarSync.enqueue('INSPECTION', inspection.id);
     return inspection;
   }
 
@@ -85,7 +96,7 @@ export class InspectionsService {
         title: dto.title,
         description: dto.description,
         priority: dto.priority,
-        dueDate: dto.dueDate ? new Date(dto.dueDate) : undefined,
+        dueDate: optionalDate(dto.dueDate),
         assignedUserId: dto.assignedUserId,
         createdByUserId: actingUserId,
         relatedType: 'COLONY',