feat(wardrobe): module foundation — garments + outfits space-scoped data layer (M1)

M1 of docs/plans/wardrobe-module.md — pure data layer + backend plumbing,
zero UI (that's M2). A user can now hold a digital wardrobe per space:
brand merch, club Trikots, family Kleiderschrank, team Kostüme, practice
Dresscode, and personal closet all live as separate pools under the same
Dexie tables, space-scoped like tags/scenes/agents after Phase 2c.

Data model — two tables, no join:

- wardrobeGarments (Dexie v41): single clothing items / accessories.
  Indexed on `category` + `createdAt` + `isArchived`. Encrypted:
  name/brand/color/size/material/tags/notes. Plaintext: category,
  mediaIds, counters, timestamps — all indexed or structural.
  `mediaIds[0]` is the primary photo used for try-on; additional
  ids are alternate views (back, detail) for M7.

- wardrobeOutfits (Dexie v41): named compositions referencing
  garment ids. Encrypted: name/description/tags. Plaintext:
  garmentIds (FK array), occasion (closed enum — useful for
  undecrypted filtering), season, booleans, lastTryOn snapshot.

- picture.images gains `wardrobeOutfitId?: string | null` as a
  plaintext back-reference. Try-on results land in the Picture
  gallery like any other generation; the outfit detail view
  queries them via this id rather than maintaining a third table.

Space scope:

- `wardrobe` added to all five explicit allowlists in shared-types/
  spaces.ts (personal is wildcard, no edit needed). Each space type
  gets a one-line comment explaining the real-world use case.
- App registry: `wardrobe` entry in shared-branding/mana-apps.ts
  with a rose→fuchsia gradient icon (T-shirt on hanger silhouette),
  color #e11d48, tier 'beta', status 'beta'.
- Module registry: wardrobeModuleConfig imported + appended to
  MODULE_CONFIGS so SYNC_APP_MAP picks it up automatically.

Backend:

- MAX_REFERENCE_IMAGES bumped 4 → 8 in picture/generate-with-
  reference (plus the client-side default in ReferenceImagePicker).
  Justified with a comment: face + body + top + bottom + shoes +
  outerwear + 2 accessories = 8. Cost doesn't scale with ref count
  (OpenAI bills per output), so the bump is a pure capability
  expansion with no credit-side risk.
- New POST /api/v1/wardrobe/garments/upload wraps uploadImageToMedia
  with app='wardrobe'. Registered under /api/v1/wardrobe in index.ts.
  Pattern 1:1 with the profile/me-images/upload endpoint; tier-gating
  falls out of wardrobe NOT being in RESOURCE_MODULES (tier='guest'
  works — consistent with picture's plain CRUD).

Stores emit domain events (WardrobeGarmentAdded, WardrobeOutfitCreated,
WardrobeOutfitTryOn, etc.) so later mana-ai missions can observe
activity without polling.

No UI in this commit. M2 (Garments-Grundlayer) wires the route + grid
+ upload-zone; M3 the Outfit composer; M4 the Try-On integration.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/shared-branding/src/app-icons.ts

@@ -75,6 +75,12 @@ const calcSvg = `<svg width="1024" height="1024" viewBox="0 0 1024 1024" fill="n
 // Context icon (document/knowledge with sky blue gradient)
 const contextSvg = `<svg width="1024" height="1024" viewBox="0 0 1024 1024" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="130" y="130" width="764" height="764" rx="382" fill="url(#contextGrad)"/><rect x="300" y="240" width="424" height="544" rx="24" fill="white"/><path d="M400 400H624" stroke="#0ea5e9" stroke-width="24" stroke-linecap="round"/><path d="M400 480H580" stroke="#0ea5e9" stroke-width="24" stroke-linecap="round" stroke-opacity="0.6"/><path d="M400 560H540" stroke="#0ea5e9" stroke-width="24" stroke-linecap="round" stroke-opacity="0.4"/><path d="M400 640H600" stroke="#0ea5e9" stroke-width="24" stroke-linecap="round" stroke-opacity="0.3"/><path d="M620 240V380H760" stroke="white" stroke-width="24" stroke-linecap="round" stroke-linejoin="round"/><path d="M620 240L760 380" stroke="#0ea5e9" stroke-width="16" stroke-linecap="round" stroke-opacity="0.3"/><circle cx="680" cy="620" r="100" fill="#0ea5e9" fill-opacity="0.2" stroke="white" stroke-width="16"/><path d="M660 620L680 640L720 600" stroke="white" stroke-width="16" stroke-linecap="round" stroke-linejoin="round"/><defs><linearGradient id="contextGrad" x1="130" y1="130" x2="894" y2="894" gradientUnits="userSpaceOnUse"><stop stop-color="#0ea5e9"/><stop offset="1" stop-color="#0284c7"/></linearGradient></defs></svg>`;
 
+// Wardrobe icon — T-shirt on hanger with rose-violet gradient.
+// Rose/violet to sit between Picture (green) and Calc (pink) without
+// clashing; the hanger loop sits on the shoulder line so the silhouette
+// reads as "clothing" at any scale.
+const wardrobeSvg = `<svg width="1024" height="1024" viewBox="0 0 1024 1024" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x="130" y="130" width="764" height="764" rx="382" fill="url(#wardrobeGrad)"/><path d="M512 246c-34 0-62 28-62 62 0 15 6 28 15 37l-113 58c-14 7-22 22-22 37v40l-40 28c-10 7-13 20-8 31l20 40c5 10 16 16 27 13l46-12v256c0 18 14 32 32 32h250c18 0 32-14 32-32V580l46 12c11 3 22-3 27-13l20-40c5-11 2-24-8-31l-40-28v-40c0-15-8-30-22-37l-113-58c9-9 15-22 15-37 0-34-28-62-62-62zm0 44c18 0 32 14 32 32s-14 32-32 32-32-14-32-32 14-32 32-32z" fill="white"/><path d="M420 450c0 50 41 90 92 90s92-40 92-90" stroke="#be185d" stroke-width="6" stroke-linecap="round" fill="none" stroke-opacity="0.25"/><defs><linearGradient id="wardrobeGrad" x1="130" y1="130" x2="894" y2="894" gradientUnits="userSpaceOnUse"><stop stop-color="#e11d48"/><stop offset="1" stop-color="#a21caf"/></linearGradient></defs></svg>`;
+
 /**
  * App icons as data URLs
  * Use these directly in <img src={APP_ICONS.memoro}> or CSS background-image
@@ -102,6 +108,7 @@ export const APP_ICONS = {
 	todo: svgToDataUrl(todoSvg),
 	mail: svgToDataUrl(mailSvg),
 	inventory: svgToDataUrl(inventorySvg),
+	wardrobe: svgToDataUrl(wardrobeSvg),
 	questions: svgToDataUrl(questionsSvg),
 	context: svgToDataUrl(contextSvg),
 	citycorners: svgToDataUrl(citycornersSvg),

packages/shared-branding/src/mana-apps.ts

@@ -377,6 +377,23 @@ export const MANA_APPS: ManaApp[] = [
 		status: 'beta',
 		requiredTier: 'guest',
 	},
+	{
+		id: 'wardrobe',
+		name: 'Wardrobe',
+		description: {
+			de: 'Dein digitaler Kleiderschrank',
+			en: 'Your digital wardrobe',
+		},
+		longDescription: {
+			de: 'Fotografiere Kleidungsstücke, komponiere Outfits und probiere sie mit KI an dir selbst an — vom eigenen Schrank bis zu Brillen, Vereinstrikots und Merch.',
+			en: 'Photograph garments, compose outfits, and try them on yourself with AI — from your own closet to glasses, club jerseys, and brand merch.',
+		},
+		icon: APP_ICONS.wardrobe,
+		color: '#e11d48',
+		comingSoon: false,
+		status: 'beta',
+		requiredTier: 'beta',
+	},
 	{
 		id: 'questions',
 		name: 'Questions',

packages/shared-types/src/spaces.ts

@@ -88,6 +88,7 @@ export const SPACE_MODULE_ALLOWLIST: Record<SpaceType, readonly SpaceModuleId[]
 		'invoices',
 		'activity',
 		'goals',
+		'wardrobe', // Merch-Katalog (T-Shirts, Caps, Zip-Hoodies)
 	],
 
 	club: [
@@ -115,6 +116,7 @@ export const SPACE_MODULE_ALLOWLIST: Record<SpaceType, readonly SpaceModuleId[]
 		'photos',
 		'activity',
 		'goals',
+		'wardrobe', // Vereinstrikots, Club-Bekleidung
 	],
 
 	family: [
@@ -139,6 +141,8 @@ export const SPACE_MODULE_ALLOWLIST: Record<SpaceType, readonly SpaceModuleId[]
 		'wetter',
 		'wisekeep',
 		'firsts',
+		'wardrobe', // Familien-Kleiderschrank (Kinder inkl.); Try-On
+		//   rendert auf dem aufrufenden Elternteil, nicht auf Kindern
 	],
 
 	team: [
@@ -164,6 +168,7 @@ export const SPACE_MODULE_ALLOWLIST: Record<SpaceType, readonly SpaceModuleId[]
 		'times',
 		'activity',
 		'goals',
+		'wardrobe', // Bühnen-Kostüme, Uniformen, Produktions-Wardrobe
 	],
 
 	practice: [
@@ -185,6 +190,7 @@ export const SPACE_MODULE_ALLOWLIST: Record<SpaceType, readonly SpaceModuleId[]
 		'research-lab',
 		'activity',
 		'goals',
+		'wardrobe', // Praxis-Kittel, Dresscode-Items
 	],
 } as const;
 

packages/website-blocks/src/analytics/Analytics.svelte

@@ -0,0 +1,53 @@
+<script lang="ts">
+	import type { BlockRenderProps } from '../types';
+	import type { AnalyticsProps } from './schema';
+
+	let { block, mode }: BlockRenderProps<AnalyticsProps> = $props();
+
+	const isPublic = $derived(mode === 'public');
+	const configured = $derived(Boolean(block.props.siteKey));
+
+	const plausibleSrc = $derived.by(() => {
+		if (block.props.scriptUrl) return block.props.scriptUrl;
+		return 'https://plausible.io/js/script.js';
+	});
+
+	const umamiSrc = $derived.by(() => {
+		if (block.props.scriptUrl) return block.props.scriptUrl;
+		return 'https://cloud.umami.is/script.js';
+	});
+</script>
+
+{#if !isPublic}
+	<!-- Silent placeholder in edit/preview — the block is invisible and
+	     exists only to emit a tracker snippet at publish time. -->
+	<div class="wb-analytics-meta" data-mode={mode} aria-hidden="true">
+		<span class="wb-analytics-meta__pill">
+			📊 Analytics: {block.props.provider}
+			{#if configured}({block.props.siteKey}){/if}
+		</span>
+	</div>
+{:else if configured}
+	{#if block.props.provider === 'plausible'}
+		<script defer data-domain={block.props.siteKey} src={plausibleSrc}></script>
+	{:else if block.props.provider === 'umami'}
+		<script defer data-website-id={block.props.siteKey} src={umamiSrc}></script>
+	{/if}
+{/if}
+
+<style>
+	.wb-analytics-meta {
+		display: flex;
+		justify-content: center;
+		padding: 0.5rem;
+	}
+	.wb-analytics-meta__pill {
+		padding: 0.25rem 0.75rem;
+		font-size: 0.7rem;
+		background: rgba(255, 255, 255, 0.04);
+		border: 1px dashed rgba(255, 255, 255, 0.2);
+		border-radius: 9999px;
+		opacity: 0.6;
+		font-family: ui-monospace, monospace;
+	}
+</style>

packages/website-blocks/src/analytics/AnalyticsInspector.svelte

@@ -0,0 +1,99 @@
+<script lang="ts">
+	import type { BlockInspectorProps } from '../types';
+	import type { AnalyticsProps } from './schema';
+
+	let { block, onChange }: BlockInspectorProps<AnalyticsProps> = $props();
+
+	const provider = $derived(block.props.provider);
+
+	const helpText = $derived.by(() => {
+		if (provider === 'plausible') {
+			return 'Trage hier die Domain ein, die du bei Plausible registriert hast (z.B. "meineseite.de"). Keine Cookies, DSGVO-konform.';
+		}
+		return 'Umami Website-ID (UUID). Keine Cookies, DSGVO-konform.';
+	});
+
+	const keyLabel = $derived(provider === 'plausible' ? 'Domain' : 'Website-ID');
+	const keyPlaceholder = $derived(provider === 'plausible' ? 'meineseite.de' : 'abc12345-1234-…');
+</script>
+
+<div class="wb-inspector">
+	<label class="wb-field">
+		<span>Provider</span>
+		<select
+			value={block.props.provider}
+			onchange={(e) => onChange({ provider: e.currentTarget.value as AnalyticsProps['provider'] })}
+		>
+			<option value="plausible">Plausible</option>
+			<option value="umami">Umami</option>
+		</select>
+	</label>
+
+	<label class="wb-field">
+		<span>{keyLabel}</span>
+		<input
+			type="text"
+			value={block.props.siteKey}
+			oninput={(e) => onChange({ siteKey: e.currentTarget.value.trim() })}
+			placeholder={keyPlaceholder}
+		/>
+		<small>{helpText}</small>
+	</label>
+
+	<label class="wb-field">
+		<span>Script-URL (optional)</span>
+		<input
+			type="url"
+			value={block.props.scriptUrl}
+			oninput={(e) => onChange({ scriptUrl: e.currentTarget.value.trim() })}
+			placeholder="https://analytics.deineseite.de/script.js"
+		/>
+		<small>Für selbst-gehostete Instanzen. Leer lassen für Default-CDN.</small>
+	</label>
+
+	<p class="wb-hint">
+		Der Block ist im Editor unsichtbar — er fügt auf der veröffentlichten Website einen einzigen
+		&lt;script&gt;-Tag ein. Keine Cookies, keine PII.
+	</p>
+</div>
+
+<style>
+	.wb-inspector {
+		display: flex;
+		flex-direction: column;
+		gap: 1rem;
+	}
+	.wb-field {
+		display: flex;
+		flex-direction: column;
+		gap: 0.25rem;
+	}
+	.wb-field > span {
+		font-size: 0.75rem;
+		font-weight: 500;
+		opacity: 0.7;
+	}
+	.wb-field input,
+	.wb-field select {
+		padding: 0.5rem 0.625rem;
+		border-radius: 0.5rem;
+		border: 1px solid rgba(255, 255, 255, 0.12);
+		background: rgba(255, 255, 255, 0.04);
+		color: inherit;
+		font-size: 0.875rem;
+	}
+	.wb-field small {
+		font-size: 0.7rem;
+		opacity: 0.55;
+		line-height: 1.4;
+	}
+	.wb-hint {
+		margin: 0;
+		padding: 0.5rem 0.75rem;
+		background: rgba(255, 255, 255, 0.03);
+		border-radius: 0.375rem;
+		font-size: 0.75rem;
+		opacity: 0.6;
+		line-height: 1.4;
+	}
+</style>

packages/website-blocks/src/analytics/index.ts

@@ -0,0 +1,19 @@
+import type { BlockSpec } from '../types';
+import Analytics from './Analytics.svelte';
+import AnalyticsInspector from './AnalyticsInspector.svelte';
+import { AnalyticsSchema, ANALYTICS_DEFAULTS, type AnalyticsProps } from './schema';
+
+export const analyticsBlockSpec: BlockSpec<AnalyticsProps> = {
+	type: 'analytics',
+	label: 'Analytics',
+	icon: 'chart',
+	category: 'embed',
+	schema: AnalyticsSchema,
+	schemaVersion: 1,
+	defaults: ANALYTICS_DEFAULTS,
+	Component: Analytics,
+	Inspector: AnalyticsInspector,
+};
+
+export type { AnalyticsProps };
+export { AnalyticsSchema, ANALYTICS_DEFAULTS };

packages/website-blocks/src/analytics/schema.ts

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+
+/**
+ * Analytics block — injects a tracking snippet into the published
+ * page. Opt-in, no cookies by design (Plausible / Umami are
+ * cookieless).
+ *
+ * The block renders nothing visible in edit/preview; in public mode
+ * it emits a single <script> tag. No PII collection (no visitor IDs,
+ * no fingerprinting), no admin UI access required.
+ */
+export const AnalyticsSchema = z.object({
+	provider: z.enum(['plausible', 'umami']).default('plausible'),
+	/** Plausible: the domain property; Umami: the website id (UUID). */
+	siteKey: z.string().max(128).default(''),
+	/**
+	 * Optional script-host override for self-hosted instances. Leave
+	 * empty for the default provider CDN. Validated as full https URL.
+	 */
+	scriptUrl: z.string().max(512).default(''),
+});
+
+export type AnalyticsProps = z.infer<typeof AnalyticsSchema>;
+
+export const ANALYTICS_DEFAULTS: AnalyticsProps = {
+	provider: 'plausible',
+	siteKey: '',
+	scriptUrl: '',
+};

packages/website-blocks/src/index.ts

@@ -52,6 +52,12 @@ export {
 	type EmbedItem,
 	type EmbedSource,
 } from './moduleEmbed';
+export {
+	analyticsBlockSpec,
+	AnalyticsSchema,
+	ANALYTICS_DEFAULTS,
+	type AnalyticsProps,
+} from './analytics';
 
 export {
 	THEME_PRESETS,

packages/website-blocks/src/registry.ts

@@ -9,6 +9,7 @@ import { columnsBlockSpec } from './columns';
 import { galleryBlockSpec } from './gallery';
 import { formBlockSpec } from './form';
 import { moduleEmbedBlockSpec } from './moduleEmbed';
+import { analyticsBlockSpec } from './analytics';
 
 /**
  * The block registry — single source of truth for every block type the
@@ -27,6 +28,7 @@ export const BLOCK_SPECS: readonly BlockSpec<unknown>[] = [
 	faqBlockSpec,
 	formBlockSpec,
 	moduleEmbedBlockSpec,
+	analyticsBlockSpec,
 	columnsBlockSpec,
 	spacerBlockSpec,
 ] as unknown as readonly BlockSpec<unknown>[];