Migrate admin endpoints and core Projects API

This commit migrates 4 major endpoint groups (24 endpoints total) from Tornado
to FastAPI, completing all core admin entities and the central Projects API.

New Models (Piccolo ORM):

1. ProjectType (models/project_type.py):
   - Categories for projects (HTTP API, Library, Web App, etc.)
   - Fields: name, slug, plural_name, icon_class, environment_urls
   - Audit trail: created/modified timestamps and users

2. Environment (models/environment.py):
   - Deployment environments (production, staging, development)
   - Fields: name, icon_class, description
   - Audit trail fields

3. Project (models/project.py) - CENTRAL ENTITY:
   - Core fields: name, slug, description, namespace_id, project_type_id
   - Integration fields: sentry_project_slug, sonarqube_project_key, pagerduty_service_id
   - Configuration: configuration_type, environments (array)
   - Lifecycle: archived (boolean)
   - Removed: gitlab_project_id (GitLab support dropped)
   - Foreign keys: namespace_id, project_type_id
   - Unique constraints: (namespace_id, name), (namespace_id, slug)

Pydantic Schemas:

1. ProjectType schemas (schemas/project_type.py):
   - ProjectTypeCreate, ProjectTypeUpdate, ProjectTypeResponse
   - Validation: name/slug uniqueness, required fields

2. Environment schemas (schemas/environment.py):
   - EnvironmentCreate, EnvironmentUpdate, EnvironmentResponse
   - Validation: name uniqueness

3. Group schemas (schemas/group.py):
   - GroupCreate, GroupUpdate, GroupResponse
   - GroupMemberAdd, GroupMemberResponse
   - Supports group member management

4. Project schemas (schemas/project.py):
   - ProjectCreate, ProjectUpdate, ProjectResponse
   - ProjectListResponse (with pagination metadata)
   - Computed fields: namespace/project_type names, project_score
   - Complex validation: foreign key existence, unique constraints

API Routers:

1. Project Types (routers/project_types.py) - 5 endpoints:
   - GET /api/project-types - List all
   - GET /api/project-types/{id} - Get one
   - POST /api/project-types - Create (admin only)
   - PATCH /api/project-types/{id} - Update (admin only)
   - DELETE /api/project-types/{id} - Delete (admin only)

2. Environments (routers/environments.py) - 5 endpoints:
   - GET /api/environments - List all
   - GET /api/environments/{id} - Get one
   - POST /api/environments - Create (admin only)
   - PATCH /api/environments/{id} - Update (admin only)
   - DELETE /api/environments/{id} - Delete (admin only)

3. Groups (routers/groups.py) - 7 endpoints:
   - GET /api/groups - List all
   - GET /api/groups/{name} - Get one
   - POST /api/groups - Create (admin only)
   - PATCH /api/groups/{name} - Update (admin only)
   - DELETE /api/groups/{name} - Delete (admin only)
   - GET /api/groups/{name}/members - List group members
   - POST /api/groups/{name}/members - Add member (admin only)
   - DELETE /api/groups/{name}/members/{username} - Remove member (admin only)

4. Projects (routers/projects.py) - 4 endpoints:
   - GET /api/projects - List with filtering/sorting/pagination
   - GET /api/projects/{id} - Get one with related data
   - POST /api/projects - Create (authenticated)
   - PATCH /api/projects/{id} - Update (authenticated)
   - DELETE /api/projects/{id} - Delete (admin only)

Project Features:
- Filtering: namespace_id, project_type_id, name search, archived status
- Sorting: name, namespace, project_type, project_score (asc/desc)
- Pagination: limit, offset with total count
- Foreign key validation: Validates namespace and project_type exist
- Conflict detection: Unique (namespace_id, name) and (namespace_id, slug)
- Related data: Fetches namespace and project_type names for responses

Group Management Features:
- CRUD operations on groups
- Manage permissions per group
- Add/remove users from groups
- List group members
- Cascade delete (removes members when group deleted)

Permission Model:
- Admin operations: ProjectType, Environment, Group CRUD, Project deletion
- Authenticated operations: Project create/update
- Public operations: List/get operations (no auth required)

Total API Surface:
- Endpoints migrated: 24 (across 4 routers)
- Models created: 3 new (ProjectType, Environment, Project)
- Total endpoints live: 33 (health + auth + admin + projects)
- Total models: 8 (User, Group, GroupMember, AuthToken, OAuth2Token, Namespace, ProjectType, Environment, Project)

Architecture Improvements:
- Type-safe models with Piccolo ORM
- Automatic validation with Pydantic
- Dependency injection for authentication
- RFC 7807 error responses throughout
- Auto-generated OpenAPI docs

Next Steps:
- Add project relationship endpoints (dependencies, links, URLs, facts)
- Add operations log endpoints
- Add report endpoints
- Implement automation triggers for project creation
- Add OpenSearch indexing for projects
- Write comprehensive tests for new endpoints

🤖 Generated with Claude Code

Author: gmr

src/imbi/api/app.py

@@ -275,14 +275,24 @@ async def health_check() -> dict:
         }
 
     # Import and register routers
-    from imbi.routers import auth, namespaces
+    from imbi.routers import (
+        auth,
+        environments,
+        groups,
+        namespaces,
+        project_types,
+        projects,
+    )
 
     app.include_router(auth.router, prefix="/api")
     app.include_router(namespaces.router, prefix="/api")
+    app.include_router(project_types.router, prefix="/api")
+    app.include_router(environments.router, prefix="/api")
+    app.include_router(groups.router, prefix="/api")
+    app.include_router(projects.router, prefix="/api")
 
     # TODO: Add other routers
-    # from imbi.routers import projects, operations, integrations, reports, chat
-    # app.include_router(projects.router, prefix="/api")
+    # from imbi.routers import operations, integrations, reports, chat
     # ...
 
     logger.info("API routers configured")

src/imbi/models/__init__.py

@@ -4,7 +4,10 @@
 All database tables are defined here using Piccolo ORM.
 """
 from imbi.models.base import AuditedTable, SimpleTable
+from imbi.models.environment import Environment
 from imbi.models.namespace import Namespace
+from imbi.models.project import Project
+from imbi.models.project_type import ProjectType
 from imbi.models.user import (
     AuthenticationToken,
     Group,
@@ -25,4 +28,7 @@
     "UserOAuth2Token",
     # Organization models
     "Namespace",
+    "ProjectType",
+    "Environment",
+    "Project",
 ]

src/imbi/models/environment.py

@@ -0,0 +1,26 @@
+"""
+Environment model - deployment environments (production, staging, etc.)
+"""
+from __future__ import annotations
+
+from piccolo.columns import Serial, Text, Varchar
+
+from imbi.models.base import AuditedTable
+
+
+class Environment(AuditedTable, tablename="environments", schema="v1"):
+    """
+    Environment model.
+
+    Represents deployment environments (production, staging, development, etc.)
+    """
+
+    id = Serial(primary_key=True)
+    name = Varchar(length=255, unique=True, null=False, index=True)
+    icon_class = Text(null=True)  # CSS icon class
+    description = Text(null=True)
+
+    @classmethod
+    def ref(cls) -> Varchar:
+        """Readable reference for this model."""
+        return cls.name

src/imbi/models/project.py

@@ -0,0 +1,48 @@
+"""
+Project model - the central entity in Imbi.
+
+Projects represent services, applications, libraries, and other software components.
+"""
+from __future__ import annotations
+
+from piccolo.columns import Array, Boolean, ForeignKey, Integer, Serial, Text, Varchar
+
+from imbi.models.base import AuditedTable
+
+
+class Project(AuditedTable, tablename="projects", schema="v1"):
+    """
+    Project model.
+
+    The central entity in Imbi representing a service, application, or component.
+    """
+
+    id = Serial(primary_key=True)
+    namespace_id = ForeignKey("Namespace", null=False, index=True)
+    project_type_id = ForeignKey("ProjectType", null=False, index=True)
+    name = Varchar(length=255, null=False, index=True)
+    slug = Varchar(length=255, null=False, index=True)
+    description = Text(null=True)
+    environments = Array(Text(), null=True)  # List of environment names
+    archived = Boolean(default=False, null=False, index=True)
+
+    # Integration IDs (GitLab removed)
+    sentry_project_slug = Text(null=True)
+    sonarqube_project_key = Text(null=True)
+    pagerduty_service_id = Text(null=True)
+
+    # Configuration management
+    configuration_type = Text(null=True)  # e.g., "consul", "etcd", etc.
+
+    @classmethod
+    def ref(cls) -> Varchar:
+        """Readable reference for this model."""
+        return cls.name
+
+    @classmethod
+    def get_unique_keys(cls):
+        """Composite unique constraints."""
+        return [
+            (cls.namespace_id, cls.name),
+            (cls.namespace_id, cls.slug),
+        ]

src/imbi/models/project_type.py

@@ -0,0 +1,29 @@
+"""
+Project Type model - categories/types of projects.
+"""
+from __future__ import annotations
+
+from piccolo.columns import Boolean, Serial, Text, Varchar
+
+from imbi.models.base import AuditedTable
+
+
+class ProjectType(AuditedTable, tablename="project_types", schema="v1"):
+    """
+    Project Type model.
+
+    Categorizes projects (e.g., HTTP API, Web Application, Library, etc.)
+    """
+
+    id = Serial(primary_key=True)
+    name = Varchar(length=255, unique=True, null=False, index=True)
+    slug = Varchar(length=255, unique=True, null=False, index=True)
+    plural_name = Varchar(length=255, null=False)
+    icon_class = Text(null=True)  # CSS icon class
+    environment_urls = Boolean(default=False, null=False)  # Whether this type has environment-specific URLs
+    description = Text(null=True)
+
+    @classmethod
+    def ref(cls) -> Varchar:
+        """Readable reference for this model."""
+        return cls.name