feat: add projects flow and consolidate default project handling

cmd/qfs/main.go

@@ -14,12 +14,13 @@ import (
 	"path/filepath"
 	"runtime"
 	"strconv"
+	"strings"
 	"syscall"
 	"time"
 
 	qfassets "git.mchus.pro/mchus/quoteforge"
-	"git.mchus.pro/mchus/quoteforge/internal/appstate"
 	"git.mchus.pro/mchus/quoteforge/internal/appmeta"
+	"git.mchus.pro/mchus/quoteforge/internal/appstate"
 	"git.mchus.pro/mchus/quoteforge/internal/config"
 	"git.mchus.pro/mchus/quoteforge/internal/db"
 	"git.mchus.pro/mchus/quoteforge/internal/handlers"
@@ -164,6 +165,16 @@ func main() {
 		slog.Info("migrations completed")
 	}
 
+	// Always apply SQL migrations on startup when database is available.
+	// This keeps schema in sync for long-running installations without manual steps.
+	if mariaDB != nil {
+		sqlMigrationsPath := filepath.Join("migrations")
+		if err := models.RunSQLMigrations(mariaDB, sqlMigrationsPath); err != nil {
+			slog.Error("startup SQL migrations failed", "path", sqlMigrationsPath, "error", err)
+			os.Exit(1)
+		}
+	}
+
 	gin.SetMode(cfg.Server.Mode)
 	restartSig := make(chan struct{}, 1)
 
@@ -438,6 +449,7 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 	var alertService *alerts.Service
 	var pricelistService *pricelist.Service
 	var syncService *sync.Service
+	var projectService *services.ProjectService
 
 	// Sync service always uses ConnectionManager (works offline and online)
 	syncService = sync.NewService(connMgr, local)
@@ -465,8 +477,81 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 	}
 
 	// Local-first configuration service (replaces old ConfigurationService)
+	projectService = services.NewProjectService(local)
 	configService := services.NewLocalConfigurationService(local, syncService, quoteService, isOnline)
 
+	// Data hygiene: remove empty nameless projects and ensure every configuration is attached to a project.
+	if removed, err := local.ConsolidateSystemProjects(); err == nil && removed > 0 {
+		slog.Info("consolidated duplicate local system projects", "removed", removed)
+	}
+	if removed, err := local.PurgeEmptyNamelessProjects(); err == nil && removed > 0 {
+		slog.Info("purged empty nameless local projects", "removed", removed)
+	}
+	if err := local.BackfillConfigurationProjects(dbUsername); err != nil {
+		slog.Warn("failed to backfill local configuration projects", "error", err)
+	}
+	if mariaDB != nil {
+		serverProjectRepo := repository.NewProjectRepository(mariaDB)
+		if removed, err := serverProjectRepo.PurgeEmptyNamelessProjects(); err == nil && removed > 0 {
+			slog.Info("purged empty nameless server projects", "removed", removed)
+		}
+		if err := serverProjectRepo.EnsureSystemProjectsAndBackfillConfigurations(); err != nil {
+			slog.Warn("failed to backfill server configuration projects", "error", err)
+		}
+	}
+
+	syncProjectsFromServer := func() {
+		if !connMgr.IsOnline() {
+			return
+		}
+		serverDB, err := connMgr.GetDB()
+		if err != nil || serverDB == nil {
+			return
+		}
+
+		projectRepo := repository.NewProjectRepository(serverDB)
+		serverProjects, _, err := projectRepo.List(0, 10000, true)
+		if err != nil {
+			return
+		}
+
+		now := time.Now()
+		for i := range serverProjects {
+			sp := serverProjects[i]
+			localProject, getErr := local.GetProjectByUUID(sp.UUID)
+			if getErr == nil && localProject != nil {
+				// Keep unsynced local changes intact.
+				if localProject.SyncStatus == "pending" {
+					continue
+				}
+				localProject.OwnerUsername = sp.OwnerUsername
+				localProject.Name = sp.Name
+				localProject.IsActive = sp.IsActive
+				localProject.IsSystem = sp.IsSystem
+				localProject.CreatedAt = sp.CreatedAt
+				localProject.UpdatedAt = sp.UpdatedAt
+				serverID := sp.ID
+				localProject.ServerID = &serverID
+				localProject.SyncStatus = "synced"
+				localProject.SyncedAt = &now
+				_ = local.SaveProject(localProject)
+				continue
+			}
+
+			lp := localdb.ProjectToLocal(&sp)
+			lp.SyncStatus = "synced"
+			lp.SyncedAt = &now
+			_ = local.SaveProject(lp)
+		}
+	}
+
+	syncConfigurationsFromServer := func() {
+		if !connMgr.IsOnline() {
+			return
+		}
+		_, _ = configService.ImportFromServer()
+	}
+
 	// Use filepath.Join for cross-platform path compatibility
 	templatesPath := filepath.Join("web", "templates")
 
@@ -581,6 +666,8 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 	router.GET("/", webHandler.Index)
 	router.GET("/configs", webHandler.Configs)
 	router.GET("/configurator", webHandler.Configurator)
+	router.GET("/projects", webHandler.Projects)
+	router.GET("/projects/:uuid", webHandler.ProjectDetail)
 	router.GET("/pricelists", func(c *gin.Context) {
 		// Redirect to admin/pricing with pricelists tab
 		c.Redirect(http.StatusFound, "/admin/pricing?tab=pricelists")
@@ -641,15 +728,18 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 		configs := api.Group("/configs")
 		{
 			configs.GET("", func(c *gin.Context) {
+				syncConfigurationsFromServer()
+
 				page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
 				perPage, _ := strconv.Atoi(c.DefaultQuery("per_page", "20"))
 				status := c.DefaultQuery("status", "active")
+				search := c.Query("search")
 				if status != "active" && status != "archived" && status != "all" {
 					c.JSON(http.StatusBadRequest, gin.H{"error": "invalid status"})
 					return
 				}
 
-				cfgs, total, err := configService.ListAllWithStatus(page, perPage, status)
+				cfgs, total, err := configService.ListAllWithStatus(page, perPage, status, search)
 				if err != nil {
 					c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
 					return
@@ -661,6 +751,7 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 					"page":           page,
 					"per_page":       perPage,
 					"status":         status,
+					"search":         search,
 				})
 			})
 
@@ -790,6 +881,32 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 				c.JSON(http.StatusOK, config)
 			})
 
+			configs.PATCH("/:uuid/project", func(c *gin.Context) {
+				uuid := c.Param("uuid")
+				var req struct {
+					ProjectUUID string `json:"project_uuid"`
+				}
+				if err := c.ShouldBindJSON(&req); err != nil {
+					c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+					return
+				}
+				updated, err := configService.SetProjectNoAuth(uuid, req.ProjectUUID)
+				if err != nil {
+					switch {
+					case errors.Is(err, services.ErrConfigNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.JSON(http.StatusOK, updated)
+			})
+
 			configs.GET("/:uuid/versions", func(c *gin.Context) {
 				uuid := c.Param("uuid")
 
@@ -895,6 +1012,223 @@ func setupRouter(cfg *config.Config, local *localdb.LocalDB, connMgr *db.Connect
 			})
 		}
 
+		projects := api.Group("/projects")
+		{
+			projects.GET("", func(c *gin.Context) {
+				syncProjectsFromServer()
+				syncConfigurationsFromServer()
+
+				status := c.DefaultQuery("status", "active")
+				search := strings.ToLower(strings.TrimSpace(c.Query("search")))
+				if status != "active" && status != "archived" && status != "all" {
+					c.JSON(http.StatusBadRequest, gin.H{"error": "invalid status"})
+					return
+				}
+
+				allProjects, err := projectService.ListByUser(dbUsername, true)
+				if err != nil {
+					c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					return
+				}
+
+				filtered := make([]models.Project, 0, len(allProjects))
+				for i := range allProjects {
+					p := allProjects[i]
+					if status == "active" && !p.IsActive {
+						continue
+					}
+					if status == "archived" && p.IsActive {
+						continue
+					}
+					if search != "" && !strings.Contains(strings.ToLower(p.Name), search) {
+						continue
+					}
+					filtered = append(filtered, p)
+				}
+
+				projectRows := make([]gin.H, 0, len(filtered))
+				for i := range filtered {
+					p := filtered[i]
+					configs, err := projectService.ListConfigurations(p.UUID, dbUsername, "active")
+					if err != nil {
+						configs = &services.ProjectConfigurationsResult{
+							ProjectUUID: p.UUID,
+							Configs:     []models.Configuration{},
+							Total:       0,
+						}
+					}
+					projectRows = append(projectRows, gin.H{
+						"id":             p.ID,
+						"uuid":           p.UUID,
+						"owner_username": p.OwnerUsername,
+						"name":           p.Name,
+						"is_active":      p.IsActive,
+						"is_system":      p.IsSystem,
+						"created_at":     p.CreatedAt,
+						"updated_at":     p.UpdatedAt,
+						"config_count":   len(configs.Configs),
+						"total":          configs.Total,
+					})
+				}
+
+				c.JSON(http.StatusOK, gin.H{
+					"projects": projectRows,
+					"status":   status,
+					"search":   search,
+					"total":    len(projectRows),
+				})
+			})
+
+			projects.POST("", func(c *gin.Context) {
+				var req services.CreateProjectRequest
+				if err := c.ShouldBindJSON(&req); err != nil {
+					c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+					return
+				}
+				if strings.TrimSpace(req.Name) == "" {
+					c.JSON(http.StatusBadRequest, gin.H{"error": "project name is required"})
+					return
+				}
+				project, err := projectService.Create(dbUsername, &req)
+				if err != nil {
+					c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					return
+				}
+				c.JSON(http.StatusCreated, project)
+			})
+
+			projects.GET("/:uuid", func(c *gin.Context) {
+				project, err := projectService.GetByUUID(c.Param("uuid"), dbUsername)
+				if err != nil {
+					switch {
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.JSON(http.StatusOK, project)
+			})
+
+			projects.PUT("/:uuid", func(c *gin.Context) {
+				var req services.UpdateProjectRequest
+				if err := c.ShouldBindJSON(&req); err != nil {
+					c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+					return
+				}
+				if strings.TrimSpace(req.Name) == "" {
+					c.JSON(http.StatusBadRequest, gin.H{"error": "project name is required"})
+					return
+				}
+				project, err := projectService.Update(c.Param("uuid"), dbUsername, &req)
+				if err != nil {
+					switch {
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.JSON(http.StatusOK, project)
+			})
+
+			projects.POST("/:uuid/archive", func(c *gin.Context) {
+				if err := projectService.Archive(c.Param("uuid"), dbUsername); err != nil {
+					switch {
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.JSON(http.StatusOK, gin.H{"message": "project archived"})
+			})
+
+			projects.POST("/:uuid/reactivate", func(c *gin.Context) {
+				if err := projectService.Reactivate(c.Param("uuid"), dbUsername); err != nil {
+					switch {
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.JSON(http.StatusOK, gin.H{"message": "project reactivated"})
+			})
+
+			projects.GET("/:uuid/configs", func(c *gin.Context) {
+				syncConfigurationsFromServer()
+
+				status := c.DefaultQuery("status", "active")
+				if status != "active" && status != "archived" && status != "all" {
+					c.JSON(http.StatusBadRequest, gin.H{"error": "invalid status"})
+					return
+				}
+
+				result, err := projectService.ListConfigurations(c.Param("uuid"), dbUsername, status)
+				if err != nil {
+					switch {
+					case errors.Is(err, services.ErrProjectNotFound):
+						c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
+					case errors.Is(err, services.ErrProjectForbidden):
+						c.JSON(http.StatusForbidden, gin.H{"error": err.Error()})
+					default:
+						c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					}
+					return
+				}
+				c.Header("X-Config-Status", status)
+				c.JSON(http.StatusOK, result)
+			})
+
+			projects.POST("/:uuid/configs", func(c *gin.Context) {
+				var req services.CreateConfigRequest
+				if err := c.ShouldBindJSON(&req); err != nil {
+					c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+					return
+				}
+				projectUUID := c.Param("uuid")
+				req.ProjectUUID = &projectUUID
+
+				config, err := configService.Create(dbUsername, &req)
+				if err != nil {
+					c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					return
+				}
+				c.JSON(http.StatusCreated, config)
+			})
+
+			projects.POST("/:uuid/configs/:config_uuid/clone", func(c *gin.Context) {
+				var req struct {
+					Name string `json:"name"`
+				}
+				if err := c.ShouldBindJSON(&req); err != nil {
+					c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+					return
+				}
+
+				projectUUID := c.Param("uuid")
+				config, err := configService.CloneNoAuthToProject(c.Param("config_uuid"), req.Name, dbUsername, &projectUUID)
+				if err != nil {
+					c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+					return
+				}
+				c.JSON(http.StatusCreated, config)
+			})
+		}
+
 		// Pricing admin (public - RBAC disabled)
 		pricingAdmin := api.Group("/admin/pricing")
 		{