Sets up the complete application skeleton for Flipventory v2, an inventory
management tool for small/medium resellers using chaotic stockpiling.
Architecture
------------
- app/config.py pydantic-settings; reads .env; holds admin_email guard
- app/database.py SQLAlchemy 2.x engine, SessionLocal, Base, get_db dep
- app/models/user.py User (email, bcrypt hash, is_admin bool, is_active)
- app/models/item.py StorageBin + Item with FOUND/LISTED/SOLD/ARCHIVED enum
- app/schemas/ Pydantic request/response shapes (separate from models)
- app/auth/security.py bcrypt password hashing + HS256 JWT creation/validation
- app/routers/auth.py POST /auth/register, POST /auth/login, GET /auth/me
- app/routers/users.py Admin-only CRUD for user accounts
- app/routers/items.py /bins and /items CRUD with role-based access control
Key design decisions
--------------------
- martin@hohenberg.jp is ALWAYS admin: enforced on every login, cannot be
demoted, cannot be deactivated. Prevents accidental lockout.
- All other registered e-mails are customers (is_admin=False).
- Customers can manage their own bins and items; admins see everything.
- Item hard-delete is admin-only; customers archive instead (audit safety).
- SQLite default for zero-infra local dev; any SQLAlchemy URL works in prod.
- Tables are created on startup via create_tables(); swap for Alembic later.
Addresses v1 Gitea issues
--------------------------
- Issue #1 (storage bins): StorageBin model + /bins CRUD endpoints
- Issue #2 (item CRUD): Item model + /items CRUD endpoints
- Issue #3 (audit logging): created_by_id / updated_by_id on every item row
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
