- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts
- Seeded a ready-to-use demo tenant (user, tenant, active package, purchase)
- Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits
- Removed the public “Register” links from the marketing header
- hardened join event logic and improved error handling in the guest pwa.

public/admin-sw.js

@@ -0,0 +1,99 @@
+const SHELL_CACHE = 'tenant-admin-shell-v1';
+const ASSET_CACHE = 'tenant-admin-assets-v1';
+
+self.addEventListener('install', (event) => {
+  event.waitUntil(
+    caches.open(SHELL_CACHE).then((cache) => cache.addAll(['/event-admin']))
+  );
+  self.skipWaiting();
+});
+
+self.addEventListener('activate', (event) => {
+  event.waitUntil(
+    caches
+      .keys()
+      .then((keys) =>
+        Promise.all(
+          keys
+            .filter((key) => ![SHELL_CACHE, ASSET_CACHE].includes(key))
+            .map((key) => caches.delete(key))
+        )
+      )
+  );
+  event.waitUntil(self.clients.claim());
+});
+
+self.addEventListener('fetch', (event) => {
+  const { request } = event;
+  if (request.method !== 'GET') return;
+
+  const url = new URL(request.url);
+  if (url.origin !== self.location.origin) return;
+
+  // Allow API traffic to bypass the SW
+  if (url.pathname.startsWith('/api/')) return;
+
+  // Navigation requests for the admin shell
+  if (request.mode === 'navigate' && url.pathname.startsWith('/event-admin')) {
+    event.respondWith(
+      (async () => {
+        try {
+          const networkResponse = await fetch(request);
+          const cache = await caches.open(SHELL_CACHE);
+          cache.put('/event-admin', networkResponse.clone());
+          return networkResponse;
+        } catch {
+          const cached = await caches.match('/event-admin');
+          if (cached) return cached;
+          return Response.error();
+        }
+      })()
+    );
+    return;
+  }
+
+  // Static asset caching (CSS/JS/fonts)
+  if (
+    request.destination === 'style' ||
+    request.destination === 'script' ||
+    request.destination === 'font'
+  ) {
+    event.respondWith(
+      (async () => {
+        const cache = await caches.open(ASSET_CACHE);
+        const cached = await cache.match(request);
+        const fetchPromise = fetch(request)
+          .then((response) => {
+            if (response.ok) {
+              cache.put(request, response.clone());
+            }
+            return response;
+          })
+          .catch(() => null);
+        return cached || (await fetchPromise) || Response.error();
+      })()
+    );
+    return;
+  }
+
+  // Images and icons (cache-first)
+  if (
+    request.destination === 'image' ||
+    /\.(png|jpg|jpeg|webp|avif|gif|svg)(\?.*)?$/i.test(url.pathname)
+  ) {
+    event.respondWith(
+      (async () => {
+        const cache = await caches.open(ASSET_CACHE);
+        const cached = await cache.match(request);
+        if (cached) return cached;
+        try {
+          const response = await fetch(request);
+          if (response.ok) cache.put(request, response.clone());
+          return response;
+        } catch {
+          return cached || Response.error();
+        }
+      })()
+    );
+  }
+});

public/manifest.json

@@ -0,0 +1,43 @@
+{
+  "name": "Fotospiel Tenant Admin",
+  "short_name": "Fotospiel Admin",
+  "id": "/event-admin",
+  "start_url": "/event-admin/",
+  "scope": "/event-admin/",
+  "display": "standalone",
+  "lang": "de-DE",
+  "description": "Verwalte Events, Pakete und Gäste mobil – inklusive geführtem Onboarding und schnellen Management-Tools.",
+  "background_color": "#0f172a",
+  "theme_color": "#f43f5e",
+  "orientation": "portrait",
+  "categories": ["productivity", "photo-video"],
+  "icons": [
+    {
+      "src": "/favicon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any"
+    },
+    {
+      "src": "/apple-touch-icon.png",
+      "sizes": "180x180",
+      "type": "image/png",
+      "purpose": "any"
+    }
+  ],
+  "shortcuts": [
+    {
+      "name": "Neues Event planen",
+      "short_name": "Event planen",
+      "url": "/event-admin/welcome",
+      "description": "Starte den geführten Onboarding-Prozess für dein nächstes Event."
+    },
+    {
+      "name": "Dashboard",
+      "short_name": "Dashboard",
+      "url": "/event-admin/",
+      "description": "Direkt zur Übersicht deiner Events und Aufgaben."
+    }
+  ],
+  "prefer_related_applications": false
+}