security: remove hardcoded secret key and improve key handling

.gitea/workflows/android.yaml

@@ -0,0 +1,106 @@
+name: Android Build Final Fixed
+on:
+  push:
+    branches: [main]
+    tags: ["v*"] # Triggert bei v0.1.0, v1.0, etc.
+
+jobs:
+  build-android:
+    runs-on: ubuntu-latest
+    container:
+      image: node:20-bookworm
+
+    steps:
+      - name: Checkout Main Project
+        uses: actions/checkout@v4
+        with:
+          submodules: false
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Manual Clone easy-nostr
+        run: |
+          git clone https://${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}@gitea.malxte.de/Bytemalte/easy-nostr.git src-tauri/easy-nostr
+
+      - name: Install System Dependencies
+        run: |
+          apt-get update
+          apt-get install -y build-essential curl wget file libssl-dev pkg-config openjdk-17-jdk git unzip libgtk-3-dev webkit2gtk-4.1 libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev python3
+
+      - name: Install Rust & Targets
+        run: |
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+          echo "$HOME/.cargo/bin" >> $GITHUB_PATH
+          export PATH="$HOME/.cargo/bin:$PATH"
+          rustup target add aarch64-linux-android wasm32-unknown-unknown
+
+      - name: Install Trunk & Tauri-CLI
+        run: |
+          wget -qO- https://github.com/trunk-rs/trunk/releases/latest/download/trunk-x86_64-unknown-linux-gnu.tar.gz | tar -xzf- -C /usr/local/bin
+          wget -qO- https://github.com/tauri-apps/tauri/releases/latest/download/cargo-tauri-x86_64-unknown-linux-gnu.tgz | tar -xzf- -C /usr/local/bin
+          chmod +x /usr/local/bin/trunk /usr/local/bin/cargo-tauri
+
+      - name: Setup Android SDK
+        run: |
+          export ANDROID_HOME=$HOME/android-sdk
+          mkdir -p $ANDROID_HOME/cmdline-tools
+          cd $ANDROID_HOME/cmdline-tools
+          wget -q https://dl.google.com/android/repository/commandlinetools-linux-9477386_latest.zip
+          unzip -q commandlinetools-linux-9477386_latest.zip
+          mv cmdline-tools latest
+          yes | $ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager --sdk_root=$ANDROID_HOME "platform-tools" "platforms;android-33" "build-tools;33.0.1" "ndk;25.1.8937393"
+          echo "ANDROID_HOME=$ANDROID_HOME" >> $GITHUB_ENV
+          echo "NDK_HOME=$ANDROID_HOME/ndk/25.1.8937393" >> $GITHUB_ENV
+
+      - name: Build and Compile
+        run: |
+          export PATH="$HOME/.cargo/bin:$PATH"
+          export ANDROID_HOME=$HOME/android-sdk
+          export NDK_HOME=$ANDROID_HOME/ndk/25.1.8937393
+          export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64
+
+          # 1. Frontend bauen
+          trunk build --release
+
+          # 2. Android Build
+          if [ ! -d "src-tauri/gen/android" ]; then
+            cargo-tauri android init
+          fi
+          cargo-tauri android build --target aarch64 --apk true
+
+          # 3. APK manuell signieren
+          echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | tr -d '[:space:]' > keystore.b64
+          base64 -d keystore.b64 > release.keystore
+
+          UNSIGNED_APK=$(find src-tauri/gen/android/app/build/outputs/apk/universal/release -name "*-unsigned.apk" | head -n 1)
+          APKSIGNER=$(find $ANDROID_HOME/build-tools -name apksigner | sort -r | head -n 1)
+
+          $APKSIGNER sign --ks release.keystore \
+            --ks-type PKCS12 \
+            --ks-key-alias "${{ secrets.ANDROID_KEY_ALIAS }}" \
+            --ks-pass pass:"${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" \
+            --key-pass pass:"${{ secrets.ANDROID_KEY_PASSWORD }}" \
+            --v4-signing-enabled true \
+            --out Marstemedia-Signed.apk \
+            "$UNSIGNED_APK"
+
+          echo "Signierung erfolgreich!"
+        env:
+          JAVA_HOME: /usr/lib/jvm/java-17-openjdk-amd64
+
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v3
+        with:
+          name: Marstemedia-Signed
+          path: Marstemedia-Signed.apk
+
+      - name: Create Gitea Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v1
+        with:
+          files: Marstemedia-Signed.apk
+          # Gitea braucht manchmal explizit den Namen/Body
+          name: "Release ${{ github.ref_name }}"
+          draft: false
+          prerelease: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -2,3 +2,4 @@
 /target/
 /Cargo.lock
 /.jj/
+my-release-key.keystore

src-tauri/.gitignore

@@ -5,3 +5,4 @@
 # Generated by Tauri
 # will have schema files for capabilities auto-completion
 /gen/schemas
+/gen/android/

src-tauri/Cargo.toml

@@ -21,6 +21,7 @@ easy-nostr = { path = "./easy-nostr" }
 tokio = { version = "1", features = ["full"] }
 feed-rs = "2.3.1"
 ron = "0.8"
+nostr-sdk = "0.44.1"
 
 # FIX: default-features entfernt und rustls-tls hinzugefügt
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }

src-tauri/gen/android/app/build.gradle.kts

@@ -14,23 +14,31 @@ val tauriProperties = Properties().apply {
 }
 
 android {
-    compileSdk = 36
+    compileSdk = 35 // Empfohlen: 35 (Android 15), da 36 noch im Preview-Status sein könnte
     namespace = "malxte.de"
+
     defaultConfig {
         manifestPlaceholders["usesCleartextTraffic"] = "false"
         applicationId = "malxte.de"
+        
+        // WICHTIG: Korrektur für dein Gerät (vorher 21)
         minSdk = 24 
-        targetSdk = 36
+        
+        targetSdk = 35
         versionCode = tauriProperties.getProperty("tauri.android.versionCode", "1").toInt()
         versionName = tauriProperties.getProperty("tauri.android.versionName", "1.0")
+
+        testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
     }
+
     buildTypes {
         getByName("debug") {
             manifestPlaceholders["usesCleartextTraffic"] = "true"
             isDebuggable = true
             isJniDebuggable = true
             isMinifyEnabled = false
-            packaging {                jniLibs.keepDebugSymbols.add("*/arm64-v8a/*.so")
+            packaging {
+                jniLibs.keepDebugSymbols.add("*/arm64-v8a/*.so")
                 jniLibs.keepDebugSymbols.add("*/armeabi-v7a/*.so")
                 jniLibs.keepDebugSymbols.add("*/x86/*.so")
                 jniLibs.keepDebugSymbols.add("*/x86_64/*.so")
@@ -45,26 +53,36 @@ android {
             )
         }
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+
+    compileOptions {
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
     }
+
+    kotlinOptions {
+        jvmTarget = "17" // Angepasst auf Java 17 passend zu Gradle 8.14
+    }
+
     buildFeatures {
         buildConfig = true
     }
 }
 
 rust {
+    // Pfad zu deinem src-tauri Verzeichnis (wo die Cargo.toml liegt)
     rootDirRel = "../../../"
 }
 
 dependencies {
-    implementation("androidx.webkit:webkit:1.14.0")
-    implementation("androidx.appcompat:appcompat:1.7.1")
-    implementation("androidx.activity:activity-ktx:1.10.1")
+    implementation("androidx.webkit:webkit:1.12.0")
+    implementation("androidx.appcompat:appcompat:1.7.0")
+    implementation("androidx.activity:activity-ktx:1.9.3")
     implementation("com.google.android.material:material:1.12.0")
+    
     testImplementation("junit:junit:4.13.2")
-    androidTestImplementation("androidx.test.ext:junit:1.1.4")
-    androidTestImplementation("androidx.test.espresso:espresso-core:3.5.0")
+    androidTestImplementation("androidx.test.ext:junit:1.2.1")
+    androidTestImplementation("androidx.test.espresso:espresso-core:3.6.1")
 }
 
+// Dies bindet die Tauri-Logik für Android ein (generierte Files)
 apply(from = "tauri.build.gradle.kts")

src-tauri/gen/android/build.gradle.kts

@@ -4,7 +4,9 @@ buildscript {
         mavenCentral()
     }
     dependencies {
-        classpath("com.android.tools.build:gradle:8.11.0")
+        // Hier wird das Android-Plugin definiert
+        classpath("com.android.tools.build:gradle:8.2.1") 
+        // Hier wird das Kotlin-Plugin definiert
         classpath("org.jetbrains.kotlin:kotlin-gradle-plugin:1.9.25")
     }
 }
@@ -17,6 +19,5 @@ allprojects {
 }
 
 tasks.register("clean").configure {
-    delete("build")
+    delete(layout.buildDirectory)
 }
-

src-tauri/gen/android/buildSrc/src/main/java/malxte/de/kotlin/BuildTask.kt

@@ -21,23 +21,7 @@ open class BuildTask : DefaultTask() {
             runTauriCli(executable)
         } catch (e: Exception) {
             if (Os.isFamily(Os.FAMILY_WINDOWS)) {
-                // Try different Windows-specific extensions
-                val fallbacks = listOf(
-                    "$executable.exe",
-                    "$executable.cmd",
-                    "$executable.bat",
-                )
-                
-                var lastException: Exception = e
-                for (fallback in fallbacks) {
-                    try {
-                        runTauriCli(fallback)
-                        return
-                    } catch (fallbackException: Exception) {
-                        lastException = fallbackException
-                    }
-                }
-                throw lastException
+                runTauriCli("$executable.cmd")
             } else {
                 throw e;
             }

src-tauri/src/home.rs

@@ -1,5 +1,6 @@
 use easy_nostr::EasyNostr;
-use serde::Serialize;
+use nostr_sdk::prelude::{Keys, ToBech32};
+use serde::Serialize; // Import für die Schlüssel-Generierung
 
 // Diese Struktur ist für den Transport zum Frontend (JSON)
 #[derive(Serialize)]
@@ -11,12 +12,20 @@ pub struct LocalPost {
 
 #[tauri::command]
 pub async fn fetch_nostr_posts() -> Result<Vec<LocalPost>, String> {
-    // 1. Verbindung aufbauen
-    let easy = EasyNostr::new("nsec1fkhszd5sv8yp6g966qdh5kuph25g4nn9pa2k5rwpuglt6rde8u8qwr3r87")
+    // 1. Temporären Einweg-Schlüssel generieren
+    // Das erzeugt ein Schlüsselpaar im RAM, das nach dem Funktionsaufruf verschwindet.
+    let random_keys = Keys::generate();
+    let temp_nsec = random_keys
+        .secret_key()
+        .to_bech32()
+        .map_err(|e| format!("Fehler beim Generieren des Keys: {}", e))?;
+
+    // 2. Verbindung mit dem temporären Key aufbauen
+    let easy = EasyNostr::new(&temp_nsec)
         .await
         .map_err(|e| e.to_string())?;
 
-    // 2. Relays hinzufügen
+    // 3. Relays hinzufügen
     easy.add_relays(vec![
         "wss://relay.damus.io",
         "wss://nos.lol",
@@ -25,16 +34,16 @@ pub async fn fetch_nostr_posts() -> Result<Vec<LocalPost>, String> {
     .await
     .map_err(|e| e.to_string())?;
 
-    // 3. Posts von der Library holen
+    // 4. Posts von der Library holen
     let raw_posts = easy.get_random_posts().await.map_err(|e| e.to_string())?;
 
-    // 4. Mappen: Library-Typ -> Unser serialisierbarer Typ
+    // 5. Mappen: Library-Typ -> Unser serialisierbarer Typ
     let mapped_posts = raw_posts
         .into_iter()
         .map(|p| LocalPost {
             content: p.content,
             author: p.author.to_string(),
-            created_at: p.created_at.as_secs(), // Hier geändert von as_u64()
+            created_at: p.created_at.as_secs(),
         })
         .collect();
 

src-tauri/src/lib.rs

@@ -14,6 +14,7 @@ pub fn run() {
             news::save_rss_urls, // Geändert von save_rss_url zu save_rss_urls
             news::fetch_ai_news,
             news::fetch_rss_news,
+            news::save_groq_key,
         ])
         .run(tauri::generate_context!())
         .expect("error while running tauri application");

src-tauri/src/news.rs

@@ -12,6 +12,7 @@ pub struct RssConfig {
 #[derive(Default)]
 pub struct NewsState {
     pub openrouter_key: Mutex<String>,
+    pub groq_key: Mutex<String>,
     pub rss_config: Mutex<RssConfig>,
 }
 
@@ -37,40 +38,38 @@ pub async fn save_openrouter_key(key: String, state: State<'_, NewsState>) -> Re
     Ok(())
 }
 
+#[tauri::command]
+pub async fn save_groq_key(key: String, state: State<'_, NewsState>) -> Result<(), String> {
+    let mut lock = state.groq_key.lock().map_err(|_| "Lock failed")?;
+    *lock = key.trim().to_string();
+    Ok(())
+}
+
 #[tauri::command]
 pub async fn load_rss_config(
     app: AppHandle,
     state: State<'_, NewsState>,
 ) -> Result<Vec<String>, String> {
     let path = get_config_path(&app);
-
-    // Initialisierung mit Standard-Feeds, falls Datei nicht existiert
     if !path.exists() {
         let default_urls = vec![
             "https://www.nasa.gov/news-release/feed/".to_string(),
             "https://www.heise.de/rss/heise-atom.xml".to_string(),
         ];
-
         let config = RssConfig {
             urls: default_urls.clone(),
         };
-
         if let Some(parent) = path.parent() {
             fs::create_dir_all(parent).map_err(|e| e.to_string())?;
         }
-
         let ron_str = ron::to_string(&config).map_err(|e| e.to_string())?;
         fs::write(&path, ron_str).map_err(|e| e.to_string())?;
-
         let mut lock = state.rss_config.lock().unwrap();
         lock.urls = default_urls.clone();
-
         return Ok(default_urls);
     }
-
     let content = fs::read_to_string(path).map_err(|e| e.to_string())?;
     let config: RssConfig = ron::from_str(&content).map_err(|e| e.to_string())?;
-
     let mut lock = state.rss_config.lock().unwrap();
     *lock = config.clone();
     Ok(config.urls)
@@ -84,40 +83,59 @@ pub async fn save_rss_urls(
 ) -> Result<(), String> {
     let config = RssConfig { urls };
     let path = get_config_path(&app);
-
     if let Some(parent) = path.parent() {
         fs::create_dir_all(parent).map_err(|e| e.to_string())?;
     }
-
     let ron_str = ron::to_string(&config).map_err(|e| e.to_string())?;
     fs::write(path, ron_str).map_err(|e| e.to_string())?;
-
     let mut lock = state.rss_config.lock().unwrap();
     *lock = config;
     Ok(())
 }
 
 #[tauri::command]
-pub async fn fetch_ai_news(state: State<'_, NewsState>) -> Result<Vec<NewsArticle>, String> {
-    let key = state
-        .openrouter_key
-        .lock()
-        .map_err(|_| "Lock failed")?
-        .clone();
+pub async fn fetch_ai_news(
+    provider: String,
+    state: State<'_, NewsState>,
+) -> Result<Vec<NewsArticle>, String> {
+    let (key, url, model, author) = match provider.as_str() {
+        "groq" => {
+            let k = state.groq_key.lock().map_err(|_| "Lock failed")?.clone();
+            (
+                k,
+                "https://api.groq.com/openai/v1/chat/completions",
+                "llama-3.1-8b-instant",
+                "Groq AI",
+            )
+        }
+        _ => {
+            let k = state
+                .openrouter_key
+                .lock()
+                .map_err(|_| "Lock failed")?
+                .clone();
+            (
+                k,
+                "https://openrouter.ai/api/v1/chat/completions",
+                "openai/gpt-oss-20b:free:online",
+                "OpenRouter AI",
+            )
+        }
+    };
 
     if key.is_empty() {
-        return Err("API Key fehlt.".into());
+        return Err(format!("API Key für {} fehlt.", author));
     }
 
     let client = reqwest::Client::new();
     let response = client
-        .post("https://openrouter.ai/api/v1/chat/completions")
+        .post(url)
         .header("Authorization", format!("Bearer {}", key))
         .json(&serde_json::json!({
-            "model": "minimax/minimax-m2.1",
+            "model": model,
             "messages": [
-                {"role": "system", "content": "Kurze News, 1-2 Sätze, Deutsch."},
-                {"role": "user", "content": "Tech-News."}
+                {"role": "system", "content": "Kurze Tech-News, 1-2 Sätze, Deutsch. Nutze Markdown."},
+                {"role": "user", "content": "Was gibt es neues in der Tech-Welt?"}
             ]
         }))
         .send()
@@ -127,12 +145,12 @@ pub async fn fetch_ai_news(state: State<'_, NewsState>) -> Result<Vec<NewsArticl
     let json: serde_json::Value = response.json().await.map_err(|e| e.to_string())?;
     let content = json["choices"][0]["message"]["content"]
         .as_str()
-        .unwrap_or("Fehler")
+        .unwrap_or("Fehler beim Abrufen der Inhalte")
         .to_string();
 
     Ok(vec![NewsArticle {
         content,
-        author: "OpenRouter AI".into(),
+        author: author.into(),
         created_at: "Gerade eben".into(),
     }])
 }
@@ -151,7 +169,6 @@ pub async fn fetch_rss_news(state: State<'_, NewsState>) -> Result<Vec<NewsArtic
                         .title
                         .map(|t| t.content)
                         .unwrap_or_else(|| "RSS".into());
-
                     for entry in feed.entries.into_iter().take(3) {
                         let date = entry
                             .published

src/pages/news.rs

@@ -33,6 +33,10 @@ struct StringArgs {
 struct UrlsArgs {
     urls: Vec<String>,
 }
+#[derive(Serialize)]
+struct AiArgs {
+    provider: String,
+}
 
 #[function_component(News)]
 pub fn news() -> Html {
@@ -40,12 +44,14 @@ pub fn news() -> Html {
     let error_msg = use_state(|| None::<String>);
     let show_config = use_state(|| false);
     let current_mode = use_state(|| NewsMode::Ai);
+    let ai_provider = use_state(|| "openrouter".to_string());
     let rss_urls = use_state(Vec::<String>::new);
 
-    let api_key_ref = use_node_ref();
+    let or_key_ref = use_node_ref();
+    let groq_key_ref = use_node_ref();
     let new_url_ref = use_node_ref();
 
-    // Init: Konfiguration laden
+    // Init: RSS laden
     {
         let rss_urls = rss_urls.clone();
         use_effect_with((), move |_| {
@@ -60,23 +66,27 @@ pub fn news() -> Html {
         });
     }
 
-    // News laden Funktion
     let load_news = {
         let articles = articles.clone();
         let error_msg = error_msg.clone();
         let mode = *current_mode;
+        let provider = (*ai_provider).clone();
         Callback::from(move |_| {
             let articles = articles.clone();
             let error_msg = error_msg.clone();
+            let provider = provider.clone();
             articles.set(None);
             error_msg.set(None);
             spawn_local(async move {
-                let cmd = if mode == NewsMode::Ai {
-                    "fetch_ai_news"
+                let (cmd, args) = if mode == NewsMode::Ai {
+                    (
+                        "fetch_ai_news",
+                        serde_wasm_bindgen::to_value(&AiArgs { provider }).unwrap(),
+                    )
                 } else {
-                    "fetch_rss_news"
+                    ("fetch_rss_news", JsValue::NULL)
                 };
-                match invoke(cmd, JsValue::NULL).await {
+                match invoke(cmd, args).await {
                     Ok(res) => {
                         let data = serde_wasm_bindgen::from_value::<Vec<NewsArticle>>(res)
                             .unwrap_or_default();
@@ -88,22 +98,30 @@ pub fn news() -> Html {
         })
     };
 
-    // Automatisches Laden bei Modus-Wechsel
+    // Auto-Reload bei Switch
     {
         let load_news = load_news.clone();
-        use_effect_with((*current_mode).clone(), move |_| {
-            load_news.emit(MouseEvent::new("click").unwrap());
-            || ()
-        });
+        use_effect_with(
+            ((*current_mode).clone(), (*ai_provider).clone()),
+            move |_| {
+                load_news.emit(MouseEvent::new("click").unwrap());
+                || ()
+            },
+        );
     }
 
     let save_settings = {
         let rss_urls = rss_urls.clone();
-        let api_key_ref = api_key_ref.clone();
+        let or_ref = or_key_ref.clone();
+        let groq_ref = groq_key_ref.clone();
         let show_config = show_config.clone();
         let load_news = load_news.clone();
         Callback::from(move |_| {
-            let key = api_key_ref
+            let or_key = or_ref
+                .cast::<HtmlInputElement>()
+                .map(|i| i.value())
+                .unwrap_or_default();
+            let groq_key = groq_ref
                 .cast::<HtmlInputElement>()
                 .map(|i| i.value())
                 .unwrap_or_default();
@@ -113,7 +131,12 @@ pub fn news() -> Html {
             spawn_local(async move {
                 let _ = invoke(
                     "save_openrouter_key",
-                    serde_wasm_bindgen::to_value(&StringArgs { key }).unwrap(),
+                    serde_wasm_bindgen::to_value(&StringArgs { key: or_key }).unwrap(),
+                )
+                .await;
+                let _ = invoke(
+                    "save_groq_key",
+                    serde_wasm_bindgen::to_value(&StringArgs { key: groq_key }).unwrap(),
                 )
                 .await;
                 let _ = invoke(
@@ -131,20 +154,24 @@ pub fn news() -> Html {
         <div class="feed-container">
             <div class="feed-header">
                 <div class="header-main">
-                    <h1>{ if *current_mode == NewsMode::Ai { "📰 KI News" } else { "📻 RSS Feeds" } }</h1>
+                    <h1>{ if *current_mode == NewsMode::Ai { "📰 KI News" } else { "📻 RSS" } }</h1>
                     <div class="mode-toggle">
-                        <button
-                            class={if *current_mode == NewsMode::Ai { "toggle-btn active" } else { "toggle-btn" }}
-                            onclick={let m = current_mode.clone(); move |_| m.set(NewsMode::Ai)}>
-                            {"KI"}
-                        </button>
-                        <button
-                            class={if *current_mode == NewsMode::Rss { "toggle-btn active" } else { "toggle-btn" }}
-                            onclick={let m = current_mode.clone(); move |_| m.set(NewsMode::Rss)}>
-                            {"RSS"}
-                        </button>
+                        <button class={if *current_mode == NewsMode::Ai { "toggle-btn active" } else { "toggle-btn" }}
+                                onclick={let m = current_mode.clone(); move |_| m.set(NewsMode::Ai)}>{"KI"}</button>
+                        <button class={if *current_mode == NewsMode::Rss { "toggle-btn active" } else { "toggle-btn" }}
+                                onclick={let m = current_mode.clone(); move |_| m.set(NewsMode::Rss)}>{"RSS"}</button>
                     </div>
                 </div>
+
+                if *current_mode == NewsMode::Ai {
+                    <div class="provider-switch">
+                        <button class={if *ai_provider == "openrouter" { "prov-btn active" } else { "prov-btn" }}
+                                onclick={let p = ai_provider.clone(); move |_| p.set("openrouter".into())}>{"OR"}</button>
+                        <button class={if *ai_provider == "groq" { "prov-btn active" } else { "prov-btn" }}
+                                onclick={let p = ai_provider.clone(); move |_| p.set("groq".into())}>{"Groq"}</button>
+                    </div>
+                }
+
                 <div class="header-actions">
                     <button class="action-btn" onclick={let sc = show_config.clone(); move |_| sc.set(!*sc)}>{"⚙️"}</button>
                     <button class="action-btn" onclick={load_news.clone()}>{"🔄"}</button>
@@ -154,14 +181,17 @@ pub fn news() -> Html {
             if *show_config {
                 <div class="config-panel">
                     <div class="config-section">
-                        <label>{"OPENROUTER API KEY"}</label>
-                        <input ref={api_key_ref} type="password" class="config-input" placeholder="sk-..." />
+                        <label>{"OpenRouter Key"}</label>
+                        <input ref={or_key_ref} type="password" class="config-input" placeholder="sk-or-..." />
+                    </div>
+                    <div class="config-section">
+                        <label>{"Groq Key"}</label>
+                        <input ref={groq_key_ref} type="password" class="config-input" placeholder="gsk-..." />
                     </div>
-
                     <div class="config-section">
                         <label>{"RSS FEEDS"}</label>
                         <div class="rss-input-row">
-                            <input ref={new_url_ref.clone()} type="text" class="config-input" placeholder="URL hinzufügen..." />
+                            <input ref={new_url_ref.clone()} type="text" class="config-input" placeholder="URL..." />
                             <button class="add-btn" onclick={
                                 let rss_urls = rss_urls.clone();
                                 let new_url_ref = new_url_ref.clone();
@@ -178,21 +208,6 @@ pub fn news() -> Html {
                                 }
                             }>{"+"}</button>
                         </div>
-                        <div class="rss-list-scroll">
-                            { for (*rss_urls).iter().enumerate().map(|(i, url)| html! {
-                                <div class="rss-url-entry" key={i}>
-                                    <span class="url-text">{url}</span>
-                                    <button class="delete-btn" onclick={
-                                        let rss_urls = rss_urls.clone();
-                                        move |_| {
-                                            let mut list = (*rss_urls).clone();
-                                            list.remove(i);
-                                            rss_urls.set(list);
-                                        }
-                                    }>{"✕"}</button>
-                                </div>
-                            }) }
-                        </div>
                     </div>
                     <button class="save-master-btn" onclick={save_settings}>{"Alles Speichern"}</button>
                 </div>
@@ -202,11 +217,7 @@ pub fn news() -> Html {
                 { if let Some(msg) = (*error_msg).clone() {
                     html! { <div class="error-box">{ format!("⚠️ Error: {}", msg) }</div> }
                 } else if let Some(list) = (*articles).clone() {
-                    if list.is_empty() {
-                        html! { <p class="empty-msg">{"Keine Nachrichten gefunden. Überprüfe deine Feeds."}</p> }
-                    } else {
-                        html! { for list.iter().map(|a| html! { <NewsCard article={a.clone()} /> }) }
-                    }
+                    html! { for list.iter().map(|a| html! { <NewsCard article={a.clone()} /> }) }
                 } else {
                     html! { <div class="loading-spinner">{"Lade Nachrichten..."}</div> }
                 } }
@@ -231,7 +242,6 @@ pub fn news_card(props: &NewsCardProps) -> Html {
         md_html::push_html(&mut out, parser);
         out
     };
-
     html! {
         <div class="post-card">
             <div class="post-header">

styles.css

@@ -2,53 +2,102 @@
 @import url("assets/news.css");
 @import url("assets/greet.css");
 
+/* --- Root Variables & Reset --- */
+:root {
+    --bg-color: #0f0f13;
+    --card-bg: rgba(255, 255, 255, 0.03);
+    --card-border: rgba(255, 255, 255, 0.08);
+    --text-primary: #e2e2e7;
+    --text-secondary: #a0a0b0;
+    --accent-color: #4a90e2;
+    --nav-bg: rgba(30, 30, 46, 0.95); /* Fallback for blur */
+    --danger: #ef4444;
+}
+
+* {
+    box-sizing: border-box;
+    -webkit-tap-highlight-color: transparent; /* UX-Finishing: No blue flash */
+}
+
 /* --- Global & Layout --- */
 body {
-    background-color: #0f0f13;
-    color: #e2e2e7;
+    background-color: var(--bg-color);
+    color: var(--text-primary);
     font-family:
         "Inter",
         -apple-system,
+        BlinkMacSystemFont,
+        "Segoe UI",
+        Roboto,
         sans-serif;
     margin: 0;
     line-height: 1.5;
     display: flex;
     justify-content: center;
+    min-height: 100vh;
+    overflow-x: hidden; /* Performance: Prevent horizontal scroll */
+    -webkit-tap-highlight-color: transparent;
 }
 
 html {
     scroll-behavior: smooth;
+    overflow-x: hidden;
 }
 
 .feed-container {
     width: 100%;
     max-width: 600px;
-    padding: 40px 20px 150px 20px;
+    /* Safe Areas: Top inset and mobile-friendly padding */
+    padding: calc(20px + env(safe-area-inset-top)) 16px
+        calc(120px + env(safe-area-inset-bottom)) 16px;
+}
+
+@media (min-width: 768px) {
+    .feed-container {
+        padding: 40px 20px 150px 20px;
+    }
 }
 
 /* --- Navigation Dock --- */
 .navbar-dock {
     position: fixed;
-    bottom: 30px;
+    /* Safe Areas: Bottom inset */
+    bottom: calc(20px + env(safe-area-inset-bottom));
     left: 50%;
     transform: translateX(-50%);
-    background-color: rgba(30, 30, 46, 0.85);
-    backdrop-filter: blur(12px);
-    -webkit-backdrop-filter: blur(12px);
-    padding: 15px 30px;
+    background-color: var(--nav-bg);
+    padding: 12px 24px;
     border-radius: 50px;
     border: 1px solid rgba(255, 255, 255, 0.1);
     display: flex;
-    gap: 30px;
+    gap: 20px;
     box-shadow: 0 10px 25px rgba(0, 0, 0, 0.3);
     z-index: 1000;
+    width: max-content;
+    max-width: 90%;
+}
+
+@supports (backdrop-filter: blur(12px)) or (-webkit-backdrop-filter: blur(12px)) {
+    .navbar-dock {
+        background-color: rgba(30, 30, 46, 0.85);
+        backdrop-filter: blur(12px);
+        -webkit-backdrop-filter: blur(12px);
+    }
 }
 
 .nav-link {
-    color: #a0a0b0;
+    color: var(--text-secondary);
     text-decoration: none;
     font-weight: 600;
+    font-size: 0.9rem;
     transition: all 0.3s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+    /* Touch-Ergonomie: Min 44px effective height */
+    padding: 10px 12px;
+    user-select: none; /* UX-Finishing */
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 44px;
 }
 
 .nav-link:hover {
@@ -57,228 +106,22 @@ html {
 }
 
 .nav-link.active {
-    color: #4a90e2;
-}
-
-/* --- Content & Cards --- */
-.feed-header {
-    display: flex;
-    justify-content: space-between;
-    align-items: center;
-    margin-bottom: 30px;
-}
-
-.post-card {
-    background: rgba(255, 255, 255, 0.03);
-    border: 1px solid rgba(255, 255, 255, 0.08);
-    border-radius: 16px;
-    padding: 20px;
-    margin-bottom: 16px;
-}
-
-.post-author {
-    color: #4a90e2;
-    font-weight: 700;
-    font-size: 0.85rem;
-}
-
-.post-content {
-    white-space: pre-wrap;
-    word-wrap: break-word;
-    margin-top: 10px;
-}
-
-/* --- Interaction Elements --- */
-.reload-btn-large {
-    cursor: pointer;
-    background: rgba(74, 144, 226, 0.1);
-    color: #4a90e2;
-    padding: 14px;
-    border-radius: 16px;
-    width: 100%;
-    font-weight: 600;
-    border: 1px solid rgba(74, 144, 226, 0.3);
-    transition: all 0.2s ease;
-}
-
-.reload-btn-large:hover {
-    background: rgba(74, 144, 226, 0.2);
-    transform: translateY(-2px);
-}
-
-/* --- Markdown Styling für KI News --- */
-.markdown-body {
-    font-size: 0.95rem;
-    line-height: 1.6;
-    color: #e2e2e7;
-}
-
-/* Fettgedruckter Text in Blau-Weiß-Verlauf Optik */
-.markdown-body strong {
-    color: #ffffff;
-    font-weight: 700;
-}
-
-/* Kursiv für Akzente */
-.markdown-body em {
-    color: #a0a0b0;
-    font-style: italic;
-}
-
-/* Links im KI-Text */
-.markdown-body a {
-    color: #4a90e2;
-    text-decoration: none;
-    border-bottom: 1px solid rgba(74, 144, 226, 0.3);
-    transition: all 0.2s ease;
-}
-
-.markdown-body a:hover {
-    color: #5294e2;
-    border-bottom-color: #5294e2;
-}
-
-/* Listen-Design */
-.markdown-body ul,
-.markdown-body ol {
-    padding-left: 20px;
-    margin: 10px 0;
-}
-
-.markdown-body li {
-    margin-bottom: 6px;
-}
-
-/* Code-Blöcke (falls die KI Code generiert) */
-.markdown-body code {
-    background: rgba(255, 255, 255, 0.05);
-    padding: 2px 6px;
-    border-radius: 6px;
-    font-family: "JetBrains Mono", monospace;
-    font-size: 0.85rem;
-    border: 1px solid rgba(255, 255, 255, 0.1);
-}
-
-/* Überschriften innerhalb der Post-Card */
-.markdown-body h1,
-.markdown-body h2,
-.markdown-body h3 {
-    color: #4a90e2;
-    margin-top: 15px;
-    margin-bottom: 8px;
-    font-weight: 700;
-}
-
-.markdown-body h3 {
-    font-size: 1.1rem;
-}
-
-/* Zitate / Blockquotes */
-.markdown-body blockquote {
-    margin: 10px 0;
-    padding-left: 15px;
-    border-left: 3px solid #4a90e2;
-    color: #8e8e93;
-    font-style: italic;
-}
-
-/* Greet */
-.robot-container {
-    display: flex;
-    flex-direction: column;
-    align-items: center;
-    justify-content: center;
-    cursor: pointer;
-    transition: transform 0.3s cubic-bezier(0.175, 0.885, 0.32, 1.275);
-    margin: 60px auto;
-    width: fit-content;
-}
-
-.robot-container:hover {
-    transform: scale(1.05);
-}
-
-.robot-icon {
-    font-size: 6rem;
-    filter: drop-shadow(0 0 20px rgba(74, 144, 226, 0.3));
-    animation: float 3s ease-in-out infinite;
-}
-
-.bubble {
-    margin-top: 25px;
-    padding: 20px 30px;
-    background: rgba(30, 30, 46, 0.7);
-    backdrop-filter: blur(12px);
-    -webkit-backdrop-filter: blur(12px);
-    border-radius: 24px;
-    border: 1px solid rgba(255, 173, 210, 0.4);
-    color: #ffffff;
-    font-weight: 600;
-    font-size: 1.1rem;
-    text-align: center;
-    box-shadow: 0 10px 30px rgba(0, 0, 0, 0.3);
-    max-width: 320px;
-    line-height: 1.4;
-}
-
-@keyframes float {
-    0% {
-        transform: translateY(0px);
-    }
-    50% {
-        transform: translateY(-10px);
-    }
-    100% {
-        transform: translateY(0px);
-    }
-}
-
-/* --- Mode Switcher (KI / RSS) --- */
-@import url("assets/home.css");
-@import url("assets/news.css");
-@import url("assets/greet.css");
-
-/* --- Global & Layout --- */
-body {
-    background-color: #0f0f13;
-    color: #e2e2e7;
-    font-family:
-        "Inter",
-        -apple-system,
-        sans-serif;
-    margin: 0;
-    line-height: 1.5;
-    display: flex;
-    justify-content: center;
-}
-
-html {
-    scroll-behavior: smooth;
-}
-
-.feed-container {
-    width: 100%;
-    max-width: 600px;
-    padding: 40px 20px 150px 20px;
+    color: var(--accent-color);
 }
 
 /* --- Header & Navigation --- */
 .feed-header {
     display: flex;
     justify-content: space-between;
-    align-items: center;
-    margin-bottom: 30px;
-}
-
-.header-main {
-    display: flex;
-    flex-direction: column;
-    gap: 8px;
+    align-items: flex-start;
+    margin-bottom: 24px;
+    flex-wrap: wrap;
+    gap: 16px;
 }
 
 .header-main h1 {
     margin: 0;
-    font-size: 1.8rem;
+    font-size: 1.5rem;
 }
 
 .mode-toggle {
@@ -286,7 +129,6 @@ html {
     background: rgba(255, 255, 255, 0.05);
     border-radius: 12px;
     padding: 3px;
-    width: fit-content;
     border: 1px solid rgba(255, 255, 255, 0.08);
 }
 
@@ -294,198 +136,237 @@ html {
     border: none;
     background: transparent;
     color: #8e8e93;
-    padding: 4px 12px;
+    padding: 8px 16px;
     border-radius: 9px;
     cursor: pointer;
-    font-size: 0.75rem;
+    font-size: 0.8rem;
     font-weight: 700;
-    transition: all 0.2s ease;
+    user-select: none;
+    min-height: 36px;
 }
 
 .toggle-btn.active {
-    background: #4a90e2;
+    background: var(--accent-color);
     color: white;
 }
 
-.header-actions {
-    display: flex;
-    gap: 10px;
-}
-
 .action-btn {
     background: rgba(255, 255, 255, 0.05);
     border: 1px solid rgba(255, 255, 255, 0.1);
     border-radius: 12px;
-    padding: 10px;
+    padding: 12px;
     cursor: pointer;
     font-size: 1.1rem;
-    transition: all 0.2s;
+    user-select: none;
+    min-width: 44px;
+    min-height: 44px;
+    display: flex;
+    align-items: center;
+    justify-content: center;
 }
 
-.action-btn:hover {
-    background: rgba(255, 255, 255, 0.1);
-    transform: translateY(-2px);
-}
-
-/* --- Config Panel & RSS Management --- */
+/* --- Config Panel --- */
 .config-panel {
     background: rgba(30, 30, 46, 0.6);
-    backdrop-filter: blur(20px);
     border: 1px solid rgba(74, 144, 226, 0.3);
     border-radius: 20px;
-    padding: 25px;
+    padding: 20px;
     margin-bottom: 30px;
     box-shadow: 0 15px 35px rgba(0, 0, 0, 0.4);
-    animation: slideIn 0.3s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+    animation: slideIn 0.3s ease-out;
 }
 
-.config-section {
-    margin-bottom: 20px;
-}
-
-.config-section label {
-    display: block;
-    font-size: 0.7rem;
-    font-weight: 800;
-    color: #4a90e2;
-    margin-bottom: 8px;
-    letter-spacing: 0.05rem;
+@supports (backdrop-filter: blur(20px)) {
+    .config-panel {
+        backdrop-filter: blur(20px);
+    }
 }
 
 .config-input {
-    width: 100%;
-    padding: 12px 16px;
+    flex: 1;
+    padding: 14px 16px;
     background: rgba(0, 0, 0, 0.3);
     border: 1px solid rgba(255, 255, 255, 0.1);
     color: white;
     border-radius: 12px;
-    box-sizing: border-box;
+    /* Input-Fix: Prevent Android Auto-Zoom */
+    font-size: 16px;
     font-family: inherit;
+    transition: border-color 0.2s;
+}
+
+.config-input:focus {
+    outline: none;
+    border-color: var(--accent-color);
 }
 
 .rss-input-row {
     display: flex;
-    gap: 8px;
-    margin-bottom: 12px;
+    gap: 10px;
+    margin-bottom: 16px;
 }
 
 .add-btn {
-    background: #4a90e2;
+    background: var(--accent-color);
     color: white;
     border: none;
     border-radius: 12px;
-    width: 45px;
+    width: 50px;
+    min-width: 50px;
     cursor: pointer;
-    font-weight: bold;
-    font-size: 1.2rem;
+    font-weight: 700;
+    font-size: 1.4rem;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+}
+
+.add-btn:active {
+    transform: scale(0.9);
 }
 
-/* Scrollbereich für viele RSS Feeds */
 .rss-list-scroll {
-    max-height: 150px;
+    max-height: 180px;
     overflow-y: auto;
     background: rgba(0, 0, 0, 0.2);
     border-radius: 12px;
     padding: 8px;
     border: 1px solid rgba(255, 255, 255, 0.05);
+    margin-bottom: 16px;
 }
 
 .rss-url-entry {
     display: flex;
     justify-content: space-between;
     align-items: center;
-    padding: 8px 12px;
+    padding: 10px 14px;
     background: rgba(255, 255, 255, 0.03);
-    border-radius: 8px;
-    margin-bottom: 4px;
-    font-size: 0.8rem;
+    border-radius: 10px;
+    margin-bottom: 6px;
+    font-size: 0.85rem;
+    border: 1px solid transparent;
+    transition: all 0.2s;
+}
+
+.rss-url-entry:hover {
+    background: rgba(255, 255, 255, 0.05);
+    border-color: rgba(255, 255, 255, 0.1);
 }
 
 .url-text {
     white-space: nowrap;
     overflow: hidden;
     text-overflow: ellipsis;
-    margin-right: 10px;
-    color: #a0a0b0;
+    margin-right: 12px;
+    color: var(--text-secondary);
 }
 
 .delete-btn {
-    background: transparent;
-    border: none;
-    color: #ef4444;
+    background: rgba(239, 68, 68, 0.1);
+    border: 1px solid rgba(239, 68, 68, 0.2);
+    color: var(--danger);
     cursor: pointer;
-    padding: 4px;
-    font-weight: bold;
+    padding: 8px 12px;
+    border-radius: 8px;
+    font-weight: 700;
+    font-size: 0.8rem;
+    transition: all 0.2s ease;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-width: 44px;
+    min-height: 36px;
+}
+
+.delete-btn:active {
+    transform: scale(0.95);
+}
+
+.delete-btn:hover {
+    background: var(--danger);
+    color: white;
 }
 
 .save-master-btn {
     background: linear-gradient(135deg, #4a90e2, #357abd);
     color: white;
     border: none;
-    padding: 14px;
+    padding: 16px;
     border-radius: 12px;
     cursor: pointer;
     width: 100%;
     font-weight: 700;
+    font-size: 1rem;
+    user-select: none;
+    min-height: 48px;
     margin-top: 10px;
-    box-shadow: 0 4px 15px rgba(74, 144, 226, 0.3);
 }
 
-/* --- Post Cards & Markdown --- */
+/* --- Post Cards --- */
 .post-card {
-    background: rgba(255, 255, 255, 0.03);
-    border: 1px solid rgba(255, 255, 255, 0.08);
+    background: var(--card-bg);
+    border: 1px solid var(--card-border);
     border-radius: 18px;
-    padding: 22px;
-    margin-bottom: 18px;
-    transition: transform 0.2s ease;
-}
-
-.post-card:hover {
-    background: rgba(255, 255, 255, 0.05);
-}
-
-.post-header {
-    display: flex;
-    justify-content: space-between;
-    font-size: 0.75rem;
-    margin-bottom: 12px;
+    padding: 16px;
+    margin-bottom: 16px;
+    word-wrap: break-word;
 }
 
 .post-author {
-    color: #4a90e2;
+    color: var(--accent-color);
     font-weight: 800;
+    font-size: 0.85rem;
 }
 
-.post-date {
-    color: #636366;
+/* --- Greet Page --- */
+.robot-container {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    cursor: pointer;
+    margin: 40px auto;
+    width: 100%;
+    user-select: none;
 }
 
-.markdown-body h3 {
-    margin: 0 0 10px 0;
+.robot-icon {
+    font-size: 5rem;
+    filter: drop-shadow(0 0 20px rgba(74, 144, 226, 0.3));
+    animation: float 3s ease-in-out infinite;
+}
+
+.bubble {
+    margin-top: 20px;
+    padding: 16px 24px;
+    background: rgba(30, 30, 46, 0.8);
+    border-radius: 20px;
+    border: 1px solid rgba(255, 173, 210, 0.3);
     color: #ffffff;
-    font-size: 1.15rem;
+    font-weight: 600;
+    font-size: 1rem;
+    text-align: center;
+    max-width: 90%;
 }
 
-/* --- Status Messages --- */
-.loading-spinner,
-.status-msg {
-    text-align: center;
-    padding: 40px;
-    color: #8e8e93;
-    font-style: italic;
-}
-
-.error-box {
-    background: rgba(239, 68, 68, 0.1);
-    border: 1px solid rgba(239, 68, 68, 0.3);
-    color: #ef4444;
-    padding: 15px;
-    border-radius: 12px;
-    text-align: center;
+@supports (backdrop-filter: blur(12px)) {
+    .bubble {
+        backdrop-filter: blur(12px);
+    }
 }
 
 /* --- Animations --- */
+@keyframes float {
+    0%,
+    100% {
+        transform: translateY(0px);
+    }
+    50% {
+        transform: translateY(-15px);
+    }
+}
+
 @keyframes slideIn {
     from {
         opacity: 0;
@@ -497,11 +378,144 @@ html {
     }
 }
 
-/* Scrollbar Styling für die RSS Liste */
-.rss-list-scroll::-webkit-scrollbar {
-    width: 6px;
+/* --- Utilities --- */
+.reload-btn-large {
+    cursor: pointer;
+    background: linear-gradient(
+        135deg,
+        rgba(74, 144, 226, 0.15),
+        rgba(74, 144, 226, 0.05)
+    );
+    color: var(--accent-color);
+    padding: 16px;
+    border-radius: 16px;
+    width: 100%;
+    font-weight: 700;
+    border: 1px solid rgba(74, 144, 226, 0.3);
+    user-select: none;
+    min-height: 52px;
+    transition: all 0.3s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 10px;
+    box-shadow: 0 4px 15px rgba(0, 0, 0, 0.1);
 }
-.rss-list-scroll::-webkit-scrollbar-thumb {
-    background: rgba(255, 255, 255, 0.1);
-    border-radius: 10px;
+
+.reload-btn-large:hover {
+    background: rgba(74, 144, 226, 0.2);
+    border-color: var(--accent-color);
+    box-shadow: 0 6px 20px rgba(74, 144, 226, 0.2);
+    transform: translateY(-2px);
+}
+
+.reload-btn-large:active {
+    transform: scale(0.96) translateY(0);
+}
+
+/* Optional: Add a subtle pulse animation when content is old */
+@keyframes pulse-subtle {
+    0% {
+        box-shadow: 0 0 0 0 rgba(74, 144, 226, 0.4);
+    }
+    70% {
+        box-shadow: 0 0 0 10px rgba(74, 144, 226, 0);
+    }
+    100% {
+        box-shadow: 0 0 0 0 rgba(74, 144, 226, 0);
+    }
+}
+
+.error-box {
+    background: rgba(239, 68, 68, 0.1);
+    border: 1px solid rgba(239, 68, 68, 0.3);
+    color: var(--danger);
+    padding: 15px;
+    border-radius: 12px;
+    text-align: center;
+}
+
+/* --- AI Provider Switch (Neu) --- */
+.provider-switch {
+    display: flex;
+    background: rgba(255, 255, 255, 0.05);
+    border-radius: 12px;
+    padding: 3px;
+    border: 1px solid rgba(255, 255, 255, 0.08);
+    /* Zwischen h1 und den Icons positionieren */
+    margin: 0 10px;
+}
+
+.prov-btn {
+    border: none;
+    background: transparent;
+    color: var(--text-secondary);
+    padding: 6px 14px;
+    border-radius: 9px;
+    cursor: pointer;
+    font-size: 0.75rem;
+    font-weight: 700;
+    transition: all 0.2s ease;
+}
+
+.prov-btn.active {
+    background: var(--accent-color);
+    color: white;
+}
+
+/* --- Config Section Refinement --- */
+.config-section {
+    margin-bottom: 20px;
+}
+
+.config-section label {
+    display: block;
+    font-size: 0.7rem;
+    color: var(--text-secondary);
+    margin-bottom: 6px;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+}
+
+/* --- Markdown Content Styling --- */
+.markdown-body {
+    font-size: 0.95rem;
+    color: var(--text-primary);
+    line-height: 1.6;
+}
+
+.markdown-body h3 {
+    margin-top: 0;
+    margin-bottom: 10px;
+    font-size: 1.15rem;
+    color: #ffffff;
+    font-weight: 700;
+}
+
+.markdown-body p {
+    margin: 0;
+}
+
+/* --- Status Indicators --- */
+.loading-spinner {
+    text-align: center;
+    padding: 40px;
+    color: var(--text-secondary);
+    font-style: italic;
+    animation: pulse-subtle 2s infinite;
+}
+
+.empty-msg {
+    text-align: center;
+    color: var(--text-secondary);
+    margin-top: 40px;
+    font-size: 0.9rem;
+    opacity: 0.8;
+}
+
+/* --- Layout Adjustment für Provider Switch --- */
+.header-main {
+    display: flex;
+    align-items: center;
+    gap: 12px;
 }