v0.1.31 — Policy-Konsolidierung, Geraete-Export nach Gruppe, Gruppen-in-Gruppen

- Policies zusammenfuehren (Settings Catalog -> eine neue Policy, Konfliktaufloesung) - Geraete-Tab: Gruppen-Filter (Live-Suche) + CSV-Export der angezeigten Liste - Group Management: bestehende Gruppen als Mitglied hinzufuegen (verschachtelt) - Fix: Geraete "Invalid Date" (ISO-Normalisierung) + Datums-/Spalten-Sortierung - Doku (README/CHANGELOG) + Version-Bump 0.1.31 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-09-11 09:01:02 +02:00
parent 446c53f409
commit bd73a9c3b2
9 changed files with 774 additions and 49 deletions
@@ -3317,6 +3317,7 @@ function membersTabLink(id, name) {
  return `<a class="entra-link members-link" href="${url}" target="_blank" rel="noopener" title="Mitglieder von ${escapeHtml(name || 'Gruppe')} im Intune-Portal öffnen" onclick="event.stopPropagation()">${MEMBERS_ICON}</a>`;
 }

+
 function teamsChatLink(upn, name) {
  // Microsoft-Teams Deep-Link: oeffnet IMMER den installierten Desktop-Client
  // ueber den msteams:-Protocol-Handler. Web-Variante (https://) wird hier
@@ -4825,6 +4826,7 @@ const GexState = {
  activeTab: 'export',
  userSearchResults: [],
  selectedUsers: new Map(),
+  addMode: 'user',        // 'user' | 'group' — was im "Hinzufuegen"-Pane gesucht/addiert wird
 };

 function openGroupExportModal() {
@@ -4843,7 +4845,13 @@ function openGroupExportModal() {
  document.getElementById('gexMembersTitle').textContent = 'Mitglieder';
  document.getElementById('gexStats').textContent = '';
  document.getElementById('gexExportBtn').disabled = true;
-  // Add-Tab zurücksetzen
+  // Add-Tab zurücksetzen (Modus auf Benutzer)
+  GexState.addMode = 'user';
+  document.querySelectorAll('.gex-addmode-btn').forEach(b => b.classList.toggle('active', b.dataset.addmode === 'user'));
+  const gexAddTitle = document.getElementById('gexAddSearchTitle');
+  if (gexAddTitle) gexAddTitle.textContent = 'Benutzer suchen';
+  const gexUS = document.getElementById('gexUserSearch');
+  if (gexUS) gexUS.placeholder = 'Name, UPN oder E-Mail…';
  document.getElementById('gexUserSearch').value = '';
  document.getElementById('gexUserResults').innerHTML = '<div class="gex-hint">Mindestens 2 Zeichen eingeben.</div>';
  document.getElementById('gexSelectedUsers').innerHTML = '<div class="gex-hint">Noch keine Benutzer ausgewählt.</div>';
@@ -5221,14 +5229,49 @@ document.getElementById('gexUserSearch')?.addEventListener('input', e => {

 async function _gexDoUserSearch(q) {
  try {
-    const data = await api(`/api/users?q=${encodeURIComponent(q)}`);
-    GexState.userSearchResults = data.items || [];
+    if (GexState.addMode === 'group') {
+      // Gruppen suchen; die Zielgruppe selbst rausfiltern. UPN-Feld traegt zur
+      // Anzeige die Beschreibung bzw. "Gruppe" (nur fuers Rendering, Add nutzt Id).
+      const data = await api(`/api/groups/search?q=${encodeURIComponent(q)}`);
+      const targetId = GexState.selectedGroup ? GexState.selectedGroup.Id : null;
+      GexState.userSearchResults = (data.items || [])
+        .filter(g => g.Id !== targetId)
+        .map(g => ({ Id: g.Id, DisplayName: g.DisplayName, UserPrincipalName: g.Description || 'Gruppe', _isGroup: true }));
+    } else {
+      const data = await api(`/api/users?q=${encodeURIComponent(q)}`);
+      GexState.userSearchResults = data.items || [];
+    }
    _gexRenderUserResults();
  } catch (e) {
    document.getElementById('gexUserResults').innerHTML = `<div class="gex-error">Suche fehlgeschlagen: ${escapeHtml(e.message)}</div>`;
  }
 }

+// Umschalter Benutzer/Gruppen im "Hinzufuegen"-Pane.
+document.querySelectorAll('.gex-addmode-btn').forEach(btn => {
+  btn.addEventListener('click', () => {
+    const mode = btn.dataset.addmode;
+    if (GexState.addMode === mode) return;
+    GexState.addMode = mode;
+    document.querySelectorAll('.gex-addmode-btn').forEach(b => b.classList.toggle('active', b === btn));
+    // Auswahl + Suche zuruecksetzen
+    GexState.selectedUsers.clear();
+    GexState.userSearchResults = [];
+    _gexRenderSelectedUsers();
+    _gexUpdateAddBtn();
+    const search = document.getElementById('gexUserSearch');
+    if (search) search.value = '';
+    const isGroup = mode === 'group';
+    const title = document.getElementById('gexAddSearchTitle');
+    if (title) title.textContent = isGroup ? 'Gruppen suchen' : 'Benutzer suchen';
+    if (search) search.placeholder = isGroup ? 'Gruppenname…' : 'Name, UPN oder E-Mail…';
+    document.getElementById('gexUserResults').innerHTML = '<div class="gex-hint">Mindestens 2 Zeichen eingeben.</div>';
+    const selHint = document.getElementById('gexSelectedUsers');
+    if (selHint) selHint.innerHTML = `<div class="gex-hint">Noch keine ${isGroup ? 'Gruppen' : 'Benutzer'} ausgewählt.</div>`;
+    if (search) search.focus();
+  });
+});
+
 function _gexRenderUserResults() {
  const el = document.getElementById('gexUserResults');
  if (!el) return;
@@ -5309,10 +5352,11 @@ document.getElementById('gexAddBtn')?.addEventListener('click', async () => {
      method: 'POST',
      body: { userIds },
    });
+    const kindLbl = GexState.addMode === 'group' ? 'Gruppe(n)' : 'Benutzer';
    if (data.errors > 0) {
      toast(`${data.success} von ${data.total} hinzugefügt, ${data.errors} Fehler.`, 'warn');
    } else {
-      toast(`${data.success} Benutzer zu „${GexState.selectedGroup.DisplayName}" hinzugefügt.`, 'ok');
+      toast(`${data.success} ${kindLbl} zu „${GexState.selectedGroup.DisplayName}" hinzugefügt.`, 'ok');
      GexState.selectedUsers.clear();
      _gexRenderSelectedUsers();
      document.getElementById('gexUserSearch').value = '';
@@ -5725,12 +5769,14 @@ function notifyCsvImportGroupSelected(groupId, groupName) {
 // Geräte-Tab
 // ============================================================
 const DevState = {
-  items: [],
+  items: [],          // aktuell geladener Satz (bei Gruppe: alle Geraete der Gruppe)
  filtered: [],
  selected: null,
  sortCol: 'deviceName',
  sortAsc: true,
-  loaded: false
+  loaded: false,
+  groupId: null,      // aktiver Gruppen-Filter (null = alle Geraete)
+  groupName: ''
 };

 async function devLoadAll() {
@@ -5743,38 +5789,97 @@ function devShowLoading(on) {
 }

 async function devFetch() {
-  const q   = document.getElementById('devSearch').value.trim();
-  const os  = document.getElementById('devOsFilter').value;
-  const cmp = document.getElementById('devComplianceFilter').value;
-
  devShowLoading(true);
  try {
-    const params = new URLSearchParams();
-    if (q)   params.set('q', q);
-    if (os)  params.set('os', os);
-    if (cmp) params.set('compliance', cmp);
-    const data = await api('/api/devices?' + params.toString());
-    DevState.items    = data.items || [];
-    DevState.filtered = DevState.items;
-    devSort();
+    if (DevState.groupId) {
+      // Gruppen-Modus: alle Geraete der Gruppen-User holen, dann clientseitig filtern.
+      const data = await api(`/api/groups/${encodeURIComponent(DevState.groupId)}/devices/export`, { timeoutMs: 180000 });
+      DevState.items = data.items || [];
+      if (DevState.items.length === 0 && (data.errors || []).length) {
+        toast(`Graph-Fehler: ${data.errors[0]}`, 'err', 'Geräte');
+      }
+      devApplyClientFilters();   // sortiert + rendert
+    } else {
+      const q   = document.getElementById('devSearch').value.trim();
+      const os  = document.getElementById('devOsFilter').value;
+      const cmp = document.getElementById('devComplianceFilter').value;
+      const params = new URLSearchParams();
+      if (q)   params.set('q', q);
+      if (os)  params.set('os', os);
+      if (cmp) params.set('compliance', cmp);
+      const data = await api('/api/devices?' + params.toString());
+      DevState.items    = data.items || [];
+      DevState.filtered = DevState.items;
+      devSort();
+    }
  } catch (e) {
-    toast('Geräte konnten nicht geladen werden: ' + e, 'error');
+    toast('Geräte konnten nicht geladen werden: ' + (e.message || e), 'error');
  } finally {
    devShowLoading(false);
  }
 }

+// Ein Geraet gegen die aktuellen UI-Filter pruefen (fuer den Gruppen-Modus,
+// wo serverseitig nicht gefiltert wird).
+function devPassesFilters(d, q, os, cmp) {
+  if (os  && !(d.OS || '').toLowerCase().includes(os.toLowerCase())) return false;
+  if (cmp && (d.ComplianceState || '') !== cmp) return false;
+  if (q) {
+    const hay = `${d.DeviceName || ''} ${d.UserDisplayName || ''} ${d.UserPrincipalName || ''} ${d.SerialNumber || ''}`.toLowerCase();
+    if (!hay.includes(q)) return false;
+  }
+  return true;
+}
+
+function devApplyClientFilters() {
+  const q   = document.getElementById('devSearch').value.trim().toLowerCase();
+  const os  = document.getElementById('devOsFilter').value;
+  const cmp = document.getElementById('devComplianceFilter').value;
+  DevState.filtered = DevState.items.filter(d => devPassesFilters(d, q, os, cmp));
+  devSort();
+}
+
+// Filteraenderung: bei aktiver Gruppe nur clientseitig neu filtern (kein Re-Fetch),
+// sonst serverseitig neu laden.
 function devApplyFilters() {
-  devFetch();
+  if (DevState.groupId) devApplyClientFilters();
+  else devFetch();
+}
+
+// Header-data-col (Graph-Feldnamen) -> tatsaechliche Item-Property.
+const DEV_COL_MAP = {
+  deviceName:        'DeviceName',
+  userDisplayName:   'UserDisplayName',
+  operatingSystem:   'OS',
+  complianceState:   'ComplianceState',
+  lastSyncDateTime:  'LastSync',
+  enrolledDateTime:  'EnrolledDateTime',
+};
+const DEV_DATE_COLS = new Set(['LastSync', 'EnrolledDateTime']);
+
+function devFmtDate(iso) {
+  if (!iso) return '—';
+  const d = new Date(iso);
+  if (isNaN(d.getTime())) return '—';
+  return d.toLocaleDateString('de-DE') + ' ' +
+         d.toLocaleTimeString('de-DE', { hour: '2-digit', minute: '2-digit' });
 }

 function devSort() {
-  const col = DevState.sortCol;
-  const asc = DevState.sortAsc;
+  const col = DEV_COL_MAP[DevState.sortCol] || DevState.sortCol;
+  const asc = DevState.sortAsc ? 1 : -1;
+  const isDate = DEV_DATE_COLS.has(col);
  DevState.filtered.sort((a, b) => {
-    const av = (a[col] || '').toString().toLowerCase();
-    const bv = (b[col] || '').toString().toLowerCase();
-    return asc ? av.localeCompare(bv) : bv.localeCompare(av);
+    if (isDate) {
+      // Nach Zeitstempel sortieren; ungueltige/fehlende Daten ans Ende.
+      const at = Date.parse(a[col]); const bt = Date.parse(b[col]);
+      const av = isNaN(at) ? -Infinity : at;
+      const bv = isNaN(bt) ? -Infinity : bt;
+      return (av - bv) * asc;
+    }
+    const sa = (a[col] ?? '').toString().toLowerCase();
+    const sb = (b[col] ?? '').toString().toLowerCase();
+    return sa.localeCompare(sb, 'de', { numeric: true }) * asc;
  });
  devRender();
 }
@@ -5783,6 +5888,8 @@ function devRender() {
  const tbody = document.getElementById('devTableBody');
  const empty = document.getElementById('devEmpty');
  document.getElementById('devCount').textContent = DevState.filtered.length;
+  const expBtn = document.getElementById('btnDevExport');
+  if (expBtn) expBtn.disabled = DevState.filtered.length === 0;

  if (DevState.filtered.length === 0) {
    tbody.innerHTML = '';
@@ -5803,7 +5910,7 @@ function devRender() {

  let html = '';
  for (const d of DevState.filtered) {
-    const sync  = d.LastSync ? new Date(d.LastSync).toLocaleDateString('de-DE') : '—';
+    const sync  = devFmtDate(d.LastSync);
    const cmpCls = d.ComplianceState === 'compliant' ? 'dev-badge-ok'
                 : d.ComplianceState === 'noncompliant' ? 'dev-badge-err' : 'dev-badge-unk';
    const sel = DevState.selected && DevState.selected.Id === d.Id ? ' class="dev-row-selected"' : '';
@@ -5851,8 +5958,8 @@ function devRenderDetail(d) {
  document.getElementById('devDetailName').textContent = d.DeviceName || '—';
  document.getElementById('devDetailSub').textContent  = `${d.Manufacturer || ''} ${d.Model || ''}`.trim() || '—';

-  const sync     = d.LastSync         ? new Date(d.LastSync).toLocaleString('de-DE')         : '—';
-  const enrolled = d.EnrolledDateTime ? new Date(d.EnrolledDateTime).toLocaleDateString('de-DE') : '—';
+  const sync     = devFmtDate(d.LastSync);
+  const enrolled = devFmtDate(d.EnrolledDateTime);
  const storage  = (d.TotalStorageGB != null)
    ? `${d.FreeStorageGB} GB frei / ${d.TotalStorageGB} GB gesamt` : null;

@@ -5987,10 +6094,104 @@ document.getElementById('devActions')?.addEventListener('click', async (e) => {
 let devSearchDebounce = null;
 document.getElementById('devSearch').addEventListener('input', () => {
  clearTimeout(devSearchDebounce);
-  devSearchDebounce = setTimeout(devFetch, 400);
+  devSearchDebounce = setTimeout(devApplyFilters, 400);
 });
-document.getElementById('devOsFilter').addEventListener('change', devFetch);
-document.getElementById('devComplianceFilter').addEventListener('change', devFetch);
+document.getElementById('devOsFilter').addEventListener('change', devApplyFilters);
+document.getElementById('devComplianceFilter').addEventListener('change', devApplyFilters);
+
+// Gruppen-Filter (Live-Suche) + CSV-Export
+let _devGroupTimer = null, _devGroupAbort = null;
+
+document.getElementById('devGroupSearch')?.addEventListener('input', e => {
+  clearTimeout(_devGroupTimer);
+  const term = e.target.value.trim();
+  const results = document.getElementById('devGroupResults');
+  // Text geaendert -> aktiven Gruppen-Filter loesen (bis eine Gruppe gewaehlt wird)
+  if (DevState.groupId) {
+    DevState.groupId = null; DevState.groupName = '';
+    document.getElementById('devGroupClear').hidden = true;
+    devFetch();
+  }
+  if (term.length < 2) { if (results) { results.classList.add('hidden'); results.innerHTML = ''; } return; }
+  _devGroupTimer = setTimeout(() => devGroupSearch(term), 250);
+});
+
+async function devGroupSearch(term) {
+  const results = document.getElementById('devGroupResults');
+  if (!results) return;
+  if (_devGroupAbort) { try { _devGroupAbort.abort(); } catch {} }
+  _devGroupAbort = new AbortController();
+  results.classList.remove('hidden');
+  results.innerHTML = '<div class="cg-existing-empty">Suche…</div>';
+  try {
+    const resp = await fetch('/api/groups/search?q=' + encodeURIComponent(term), { signal: _devGroupAbort.signal });
+    let data = {}; try { data = await resp.json(); } catch {}
+    if (_devGroupAbort.signal.aborted) return;
+    if (!resp.ok) throw new Error(data.error || `HTTP ${resp.status}`);
+    const gs = data.items || [];
+    if (gs.length === 0) { results.innerHTML = '<div class="cg-existing-empty">Keine Treffer</div>'; return; }
+    results.innerHTML = gs.map(g =>
+      `<button type="button" class="cg-existing-item" data-gid="${escapeHtml(g.Id)}" data-gname="${escapeHtml(g.DisplayName)}">
+        <span class="cg-existing-name">${escapeHtml(g.DisplayName)}</span>
+        ${g.Description ? `<span class="cg-existing-desc">${escapeHtml(g.Description)}</span>` : ''}
+      </button>`).join('');
+  } catch (e) {
+    if (e.name === 'AbortError') return;
+    results.innerHTML = `<div class="cg-existing-empty">Fehler: ${escapeHtml(e.message)}</div>`;
+  }
+}
+
+document.getElementById('devGroupResults')?.addEventListener('click', e => {
+  const btn = e.target.closest('.cg-existing-item');
+  if (!btn) return;
+  DevState.groupId   = btn.dataset.gid;
+  DevState.groupName = btn.dataset.gname;
+  document.getElementById('devGroupSearch').value = btn.dataset.gname;
+  document.getElementById('devGroupClear').hidden = false;
+  document.getElementById('devGroupResults').classList.add('hidden');
+  devFetch();
+});
+
+document.getElementById('devGroupClear')?.addEventListener('click', () => {
+  DevState.groupId = null; DevState.groupName = '';
+  document.getElementById('devGroupSearch').value = '';
+  document.getElementById('devGroupClear').hidden = true;
+  document.getElementById('devGroupResults').classList.add('hidden');
+  devFetch();
+});
+
+// Klick ausserhalb schliesst die Ergebnisliste
+document.addEventListener('click', e => {
+  const wrap = document.getElementById('devGroupWrap');
+  if (wrap && !wrap.contains(e.target)) {
+    document.getElementById('devGroupResults')?.classList.add('hidden');
+  }
+});
+
+function devExportCsv() {
+  const items = DevState.filtered || [];
+  if (items.length === 0) { toast('Keine Geräte zum Exportieren.', 'warn'); return; }
+  const header = ['DeviceName','UserDisplayName','UserPrincipalName','OS','OSVersion','ComplianceState','SerialNumber','Model','Manufacturer','LastSync','EnrolledDateTime'];
+  const rows = [header];
+  for (const d of items) {
+    rows.push([
+      d.DeviceName || '', d.UserDisplayName || '', d.UserPrincipalName || '',
+      d.OS || '', d.OSVersion || '', d.ComplianceState || '',
+      d.SerialNumber || '', d.Model || '', d.Manufacturer || '',
+      d.LastSync ? devFmtDate(d.LastSync) : '', d.EnrolledDateTime ? devFmtDate(d.EnrolledDateTime) : '',
+    ]);
+  }
+  const csv  = rows.map(r => r.map(v => `"${String(v).replace(/"/g, '""')}"`).join(',')).join('\r\n');
+  const blob = new Blob(['' + csv], { type: 'text/csv;charset=utf-8;' });
+  const url  = URL.createObjectURL(blob);
+  const scope = DevState.groupName ? DevState.groupName.replace(/[^a-zA-Z0-9_-]/g, '_') : 'alle';
+  const a = Object.assign(document.createElement('a'), { href: url, download: `devices-${scope}-${new Date().toISOString().slice(0,10)}.csv` });
+  a.click();
+  URL.revokeObjectURL(url);
+  toast(`${items.length} Geräte exportiert${DevState.groupName ? ` (Gruppe „${DevState.groupName}")` : ''}.`, 'ok');
+}
+
+document.getElementById('btnDevExport')?.addEventListener('click', devExportCsv);

 // Sortierung
 document.querySelectorAll('#devTable th.sortable').forEach(th => {
@@ -6112,9 +6313,19 @@ function renderPolicies() {
 }

 function polUpdateSelCount() {
-  const n = PolState.selected.size;
+  const keys = [...PolState.selected];
+  const n = keys.length;
  document.getElementById('polSelCount').textContent = n;
  document.getElementById('btnPolExport').disabled = n === 0;
+  // Konsolidieren nur bei >=2 Policies UND alle vom Typ Settings Catalog.
+  const btnC = document.getElementById('btnPolConsolidate');
+  if (btnC) {
+    const allSc = n >= 2 && keys.every(k => k.startsWith('settingscatalog::'));
+    btnC.disabled = !allSc;
+    btnC.title = allSc
+      ? 'Ausgewählte Settings-Catalog-Policies zu einer neuen Policy zusammenführen'
+      : 'Mindestens zwei Policies vom Typ „Settings Catalog" auswählen';
+  }
 }

 function polSyncCheckAll() {
@@ -6173,6 +6384,109 @@ async function polExportSelected() {
  }
 }

+// =============================================================
+// Policies konsolidieren (Settings Catalog -> eine neue Policy)
+// =============================================================
+let _polConsSelIds = [];         // ausgewaehlte settingscatalog-Ids (Reihenfolge = Default-Gewinner)
+let _polConsPreview = null;      // Preview-Response
+const _polConsResolutions = {};  // settingDefinitionId -> gewaehlte sourceId
+
+async function openPolConsolidate() {
+  const keys = [...PolState.selected].filter(k => k.startsWith('settingscatalog::'));
+  if (keys.length < 2) { toast('Mindestens zwei Settings-Catalog-Policies auswählen.', 'warn'); return; }
+  _polConsSelIds = keys.map(k => k.slice('settingscatalog::'.length));
+  _polConsPreview = null;
+  Object.keys(_polConsResolutions).forEach(k => delete _polConsResolutions[k]);
+
+  document.getElementById('polConsSummary').innerHTML = '<span class="spinner" style="width:14px;height:14px;border-width:2px;"></span> Analysiere…';
+  document.getElementById('polConsConflicts').innerHTML = '';
+  document.getElementById('polConsName').value = '';
+  document.getElementById('polConsDesc').value = '';
+  document.getElementById('polConsConfirm').disabled = true;
+  document.getElementById('polConsInfo').textContent = '';
+  openModal('modalPolConsolidate');
+
+  try {
+    const res = await api('/api/policies/consolidate', { method: 'POST', body: { ids: _polConsSelIds, mode: 'preview' }, timeoutMs: 120000 });
+    _polConsPreview = res;
+    renderPolConsPreview(res);
+  } catch (e) {
+    document.getElementById('polConsSummary').innerHTML = `<span class="pol-cons-err">Analyse fehlgeschlagen: ${escapeHtml(e.message)}</span>`;
+  }
+}
+
+function polConsSourceName(id) {
+  const s = ((_polConsPreview && _polConsPreview.sources) || []).find(x => x.id === id);
+  return s ? s.name : id;
+}
+
+function renderPolConsPreview(res) {
+  const sources = res.sources || [];
+  document.getElementById('polConsSummary').innerHTML = `
+    <div><b>${sources.length}</b> Policies · Plattform <b>${escapeHtml(res.platform || '—')}</b></div>
+    <div><b>${res.totalSettings}</b> Einstellungen gesamt · <b class="${res.conflictCount ? 'pol-cons-warn' : ''}">${res.conflictCount}</b> Konflikt(e)</div>
+    <ul class="pol-cons-src">${sources.map(s => `<li>${escapeHtml(s.name)} <span class="muted">(${s.settingCount})</span></li>`).join('')}</ul>`;
+
+  const cWrap = document.getElementById('polConsConflicts');
+  const conflicts = res.conflicts || [];
+  if (conflicts.length === 0) {
+    cWrap.innerHTML = '<div class="form-hint ok">Keine Konflikte — alle gemeinsamen Einstellungen sind identisch.</div>';
+  } else {
+    cWrap.innerHTML = `<div class="pol-cons-conf-head">Konflikte — welcher Wert soll gewinnen?</div>` +
+      conflicts.map((c, ci) => {
+        _polConsResolutions[c.settingDefinitionId] = c.chosenSourceId;   // Default merken
+        const opts = (c.variants || []).map(v => {
+          const sid = (v.sourceIds || [])[0];
+          const label = (v.sourceNames || []).join(', ') || polConsSourceName(sid);
+          const checked = sid === c.chosenSourceId ? 'checked' : '';
+          return `<label class="pol-cons-opt">
+            <input type="radio" name="polcons-${ci}" data-def="${escapeHtml(c.settingDefinitionId)}" data-src="${escapeHtml(sid)}" ${checked}>
+            <span>${escapeHtml(label)}</span>
+          </label>`;
+        }).join('');
+        return `<div class="pol-cons-conf">
+          <div class="pol-cons-def" title="${escapeHtml(c.settingDefinitionId)}">${escapeHtml(c.settingDefinitionId)}</div>
+          <div class="pol-cons-opts">${opts}</div>
+        </div>`;
+      }).join('');
+    cWrap.querySelectorAll('input[type="radio"][data-def]').forEach(r => {
+      r.addEventListener('change', () => { _polConsResolutions[r.dataset.def] = r.dataset.src; });
+    });
+  }
+
+  document.getElementById('polConsName').value = `Konsolidiert – ${sources.length ? sources[0].name : 'Policy'}`;
+  document.getElementById('polConsInfo').textContent = `${res.totalSettings} Einstellungen → 1 Policy`;
+  document.getElementById('polConsConfirm').disabled = false;
+}
+
+async function polDoConsolidate() {
+  if (!_polConsPreview) return;
+  const name = document.getElementById('polConsName').value.trim();
+  if (!name) { toast('Bitte einen Namen angeben.', 'warn'); return; }
+  const desc = document.getElementById('polConsDesc').value.trim();
+  const btn = document.getElementById('polConsConfirm');
+  btn.disabled = true;
+  setLoading('Führe Policies zusammen…');
+  try {
+    const res = await api('/api/policies/consolidate', {
+      method: 'POST',
+      body: { ids: _polConsSelIds, mode: 'create', name, description: desc, resolutions: _polConsResolutions },
+      timeoutMs: 180000,
+    });
+    toast(`Neue Policy „${res.name}" erstellt (${res.settingsCount} Einstellungen, ${res.conflictCount} Konflikt(e) aufgelöst).`, 'ok', 'Konsolidiert');
+    closeModal('modalPolConsolidate');
+    await loadPolicies();
+  } catch (e) {
+    toast('Zusammenführen fehlgeschlagen: ' + e.message, 'err');
+    btn.disabled = false;
+  } finally {
+    clearLoading();
+  }
+}
+
+document.getElementById('btnPolConsolidate')?.addEventListener('click', openPolConsolidate);
+document.getElementById('polConsConfirm')?.addEventListener('click', polDoConsolidate);
+
 // Datei-Inhalt -> Liste von Envelopes { exportType, policy, ... }
 function polExtractEnvelopes(parsed, fileName) {
  if (parsed && Array.isArray(parsed.policies)) return parsed.policies;