Enhance ESLint configuration to include support for .mjs and .cjs file types. Update ignored files patterns to ensure proper linting of project files. Refactor Vue component templates for improved readability and maintainability, including consistent formatting and structure across various components. Update error handling in save functions to prevent silent failures.

server/api/membership/download/[id].get.js

@@ -1,6 +1,7 @@
 import fs from 'fs/promises'
 import path from 'path'
 import { getUserFromToken } from '../../../utils/auth.js'
+import { getServerDataPath } from '../../../utils/paths.js'
 
 export default defineEventHandler(async (event) => {
   try {
@@ -14,7 +15,7 @@ export default defineEventHandler(async (event) => {
     }
 
   // Upload-Verzeichnis finden (intern)
-  const uploadDir = path.join(process.cwd(), '..', 'server', 'data', 'uploads')
+  const uploadDir = getServerDataPath('uploads')
   console.log('Upload-Verzeichnis:', uploadDir)
     
   // Alle Dateien im Upload-Verzeichnis durchsuchen

server/api/membership/generate-pdf.post.js

@@ -6,6 +6,7 @@ import path from 'path'
 import { StandardFonts } from 'pdf-lib'
 import { getDownloadCookieOptionsWithMaxAge } from '../../utils/cookies.js'
 import { sendMembershipEmail as sendMembershipEmailUtil } from '../../utils/email-service.js'
+import { getProjectPath, getServerDataPath } from '../../utils/paths.js'
 
 // const require = createRequire(import.meta.url) // Nicht verwendet
 const execAsync = promisify(exec)
@@ -306,16 +307,8 @@ Das ausgefüllte Formular ist als Anhang verfügbar.`
   return `${filename}.txt`
 }
 
-// nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
-// filename is always a hardcoded constant (e.g., 'membership-applications'), never user input
 function getDataPath(filename) {
-  // Immer den absoluten Pfad zum Projekt-Root verwenden
-  // In der Entwicklung: process.cwd() ist bereits das Projekt-Root
-  // In der Produktion: process.cwd() ist .output, daher ein Verzeichnis zurück
-  const isDev = process.env.NODE_ENV === 'development'
-  const projectRoot = isDev ? process.cwd() : path.resolve(process.cwd(), '..')
-  // nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
-  return path.join(projectRoot, 'server', 'data', filename)
+  return getServerDataPath(filename)
 }
 
 // Use central email service
@@ -351,8 +344,9 @@ export default defineEventHandler(async (event) => {
     const timestamp = Date.now()
     const filename = `beitrittserklärung_${timestamp}`
     
-    // Temp-Verzeichnis erstellen
-    const tempDir = path.join(process.cwd(), '.output', 'temp', 'latex')
+    // Temp-Verzeichnis erstellen (bewusst außerhalb von .output,
+    // da Deploy-Artefakte dort je nach Setup schreibgeschützt sein können)
+    const tempDir = getServerDataPath('tmp', 'latex')
     await fs.mkdir(tempDir, { recursive: true })
     
       try {
@@ -360,8 +354,8 @@ export default defineEventHandler(async (event) => {
         // Versuch: Original-PDF-Template herunterladen und AcroForm-Felder befüllen
         async function fillPdfTemplate(data) {
   // Priorität: neues lokales Fillable-Template in server/templates, sonst ursprüngliches Template
-  const fillablePath = path.join(process.cwd(), 'server', 'templates', 'mitgliedschaft-fillable.pdf')
-  const localPath = (await fs.stat(fillablePath).then(() => fillablePath).catch(() => null)) || path.join(process.cwd(), 'server', 'templates', 'Aufnahmeantrag 2025.pdf')
+  const fillablePath = getProjectPath('server', 'templates', 'mitgliedschaft-fillable.pdf')
+  const localPath = (await fs.stat(fillablePath).then(() => fillablePath).catch(() => null)) || getProjectPath('server', 'templates', 'Aufnahmeantrag 2025.pdf')
         let arrayBuffer
         try {
           const localExists = await fs.stat(localPath).then(() => true).catch(() => false)