Sync fork: multi-company, flexible invoice sequences, and recurring-invoice auto-send

.dockerignore

@@ -0,0 +1,56 @@
+# VCS
+.git
+.github
+.gitignore
+
+# Editor / agent metadata
+.claude
+.agents
+.audit
+.idea
+.vscode
+.envrc
+.direnv
+
+# Built binaries
+/zfaktury
+/zfaktury-server
+*.exe
+*.dll
+*.so
+*.dylib
+
+# Frontend artifacts (re-built inside the image)
+frontend/node_modules
+frontend/build
+frontend/.svelte-kit
+frontend/coverage
+
+# Embedded frontend output (re-generated inside the image; placeholder index.html stays)
+web/frontend/build/_app
+web/frontend/build/favicon.png
+
+# Go test/coverage
+*.test
+*.out
+coverage.html
+/vendor
+
+# Local data and runtime
+*.db
+*.db-shm
+*.db-wal
+logs
+tmp
+config.dev.toml
+# Live deployment config (must NEVER be baked into the image — mounted at runtime)
+/config.toml
+.env
+.env.*
+
+# Docs and reports
+docs/AGENT-REPORTS
+
+# Nix / Rust sibling project (not needed by Go server build)
+shell.nix
+rust

.github/workflows/ci.yml

@@ -20,7 +20,8 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v7
         with:
-          version: latest
+          # Pinned to avoid CI breaking when a newer linter version adds rules.
+          version: v2.12.2
           args: --build-tags server
 
       - name: Test

.gitignore

@@ -43,6 +43,8 @@ frontend/coverage/
 
 # Local config
 config.dev.toml
+# Live deployment config (template: config.toml.example)
+/config.toml
 
 # Nix
 .envrc
@@ -55,3 +57,6 @@ web/frontend/build/favicon.png
 # Claude
 docs/AGENT-REPORTS
 .claude/worktrees/
+
+# Claude Code transient scheduler lock
+.claude/scheduled_tasks.lock

Dockerfile

@@ -0,0 +1,49 @@
+# syntax=docker/dockerfile:1.7
+
+# Build the SvelteKit frontend
+FROM node:22-alpine AS frontend
+WORKDIR /app/frontend
+COPY frontend/package.json frontend/package-lock.json ./
+RUN npm ci --no-audit --no-fund
+COPY frontend/ ./
+RUN npm run build
+
+# Build the Go server binary (CGO disabled, server build tag)
+FROM golang:1.25-alpine AS backend
+WORKDIR /src
+RUN apk add --no-cache git ca-certificates
+COPY go.mod go.sum ./
+RUN go mod download
+COPY . .
+# Frontend output must live at web/frontend/build for //go:embed all:frontend/build (relative to web/)
+RUN rm -rf web/frontend/build
+COPY --from=frontend /app/frontend/build/ ./web/frontend/build/
+
+ARG VERSION=docker
+ARG COMMIT=unknown
+ARG DATE=unknown
+ENV CGO_ENABLED=0
+RUN go build -tags server -trimpath \
+    -ldflags="-s -w \
+      -X github.com/zajca/zfaktury/internal/version.Version=${VERSION} \
+      -X github.com/zajca/zfaktury/internal/version.Commit=${COMMIT} \
+      -X github.com/zajca/zfaktury/internal/version.Date=${DATE}" \
+    -o /out/zfaktury-server ./cmd/zfaktury
+
+# Runtime image: small Alpine with ca-certificates + timezone data
+FROM alpine:3.20
+RUN apk add --no-cache ca-certificates tzdata wget \
+ && addgroup -g 1000 zfaktury \
+ && adduser -u 1000 -G zfaktury -S -h /data -D zfaktury \
+ && mkdir -p /data && chown -R 1000:1000 /data
+COPY --from=backend --chown=1000:1000 /out/zfaktury-server /usr/local/bin/zfaktury-server
+USER 1000:1000
+ENV ZFAKTURY_DATA_DIR=/data \
+    TZ=Europe/Prague
+WORKDIR /data
+VOLUME ["/data"]
+EXPOSE 8080
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD wget -qO- http://127.0.0.1:8080/health >/dev/null 2>&1 || exit 1
+ENTRYPOINT ["/usr/local/bin/zfaktury-server"]
+CMD ["serve", "--host", "0.0.0.0", "--port", "8080"]

README.md

@@ -94,6 +94,37 @@ make clean          # Remove build artifacts
 make install-hooks  # Install git pre-commit hook
 ```
 
+## Docker
+
+A multi-stage `Dockerfile` is included for the server-only (headless) build:
+node22 → golang1.25 → alpine, producing a ~33 MB image with no CGO and the
+SvelteKit frontend embedded in the binary.
+
+```bash
+# Build the image
+docker build -t zfaktury:latest .
+
+# Create your runtime config (gitignored, never baked into the image)
+cp config.toml.example config.toml
+$EDITOR config.toml
+
+# Run it
+docker run -d --name zfaktury --restart unless-stopped \
+  -p 8080:8080 \
+  -v "$PWD/data:/data" \
+  -v "$PWD/config.toml:/data/.zfaktury/config.toml:ro" \
+  zfaktury:latest
+```
+
+By default the container binds `0.0.0.0:8080` (the `serve --host` flag is
+configurable; the desktop build still defaults to `127.0.0.1`). The SQLite
+database, uploaded documents, and backups live in the mounted `/data`
+directory.
+
+See `deploy/docker-compose.yml` for an equivalent Compose setup, and
+`config.toml.example` for the full set of configurable sections (SMTP, FIO,
+OCR, S3 backups).
+
 ## Testing
 
 ```bash
@@ -110,6 +141,17 @@ cd frontend && npm test
 make coverage-frontend
 ```
 
+The production-sized migration test (`TestMultiCompanyMigrationProductionSized`)
+seeds ~22k rows into a v024 fixture and runs migration 025 end-to-end. It is
+gated behind the env var `ZFAKTURY_RUN_BIG_MIGRATION_TEST=1` so CI runs stay
+fast; enable it locally before merging schema changes that touch existing
+migrations:
+
+```bash
+ZFAKTURY_RUN_BIG_MIGRATION_TEST=1 CGO_ENABLED=0 go test ./internal/database \
+    -run TestMultiCompanyMigrationProductionSized -v -timeout 90s
+```
+
 ### Coverage
 
 Go backend test coverage is enforced at **80% minimum** via a pre-commit hook. Run `make install-hooks` after cloning to enable it.
@@ -245,6 +287,33 @@ Without the `[ocr]` section (or with an empty `api_key`), the import still works
 
 Maximum file size: 20 MB. Up to 10 documents per expense.
 
+## Multi-Company Support
+
+zfaktury can manage multiple legal entities — for example, an OSVČ
+and an s.r.o. owned by the same person — from a single install.
+
+The active company is selectable from the header dropdown and
+persisted across sessions. Each company has its own contacts,
+invoices, expenses, tax filings, and sequences. Switching is
+instantaneous (no reload).
+
+When upgrading from a single-company install, the database
+migration creates a default company from your existing settings
+(name, IČO, DIČ, bank details, etc.) and backfills every existing
+record into it. You can rename it or add more companies after
+the first launch.
+
+To run the production-sized migration test locally before merging
+schema changes:
+
+```bash
+ZFAKTURY_RUN_BIG_MIGRATION_TEST=1 CGO_ENABLED=0 go test ./internal/database -run TestMultiCompanyMigrationProductionSized -v
+```
+
+See [docs/UPGRADING.md](docs/UPGRADING.md) for upgrade notes,
+including the known tax-year-tables limitation and the destructive
+downgrade caveat.
+
 ## License
 
 Private project.

config.dev.dist.toml

@@ -12,3 +12,7 @@
 host = "localhost"
 port = 1025
 from = "dev@zfaktury.local"
+
+# [scheduler]
+# enabled = false               # Generate due recurring invoices automatically once a day
+# hour = 7                      # Local-time hour (0-23) of the daily run

config.toml.example

@@ -0,0 +1,69 @@
+# ZFaktury runtime configuration template.
+#
+# Copy this file to `config.toml` at the repository root and fill in the
+# sections you actually use. `config.toml` is gitignored and dockerignored,
+# so the secrets it contains never enter the image or version control.
+#
+# Apply changes by restarting the container:
+#     docker restart zfaktury
+
+# --- HTTP server -------------------------------------------------------------
+# When running in a container the CMD already passes --host 0.0.0.0, so this
+# section can stay commented. Uncomment only to override.
+# [server]
+# host = "0.0.0.0"
+# port = 8080
+
+# --- Database (defaults are fine) -------------------------------------------
+# [database]
+# path = ""                          # Custom SQLite path (default: <data_dir>/zfaktury.db)
+# journal_mode = "wal"               # wal (default) or delete
+
+# --- Logging ----------------------------------------------------------------
+# [log]
+# path = ""                          # Empty = stderr only
+# level = "info"                     # debug, info, warn, error
+
+# --- Email sending (invoices, reminders) ------------------------------------
+# Gmail/M365 require an "app password", not your account password.
+# [smtp]
+# host = "smtp.seznam.cz"            # or smtp.gmail.com, smtp.office365.com
+# port = 587                         # 587 STARTTLS (usual) or 465 implicit TLS
+# username = "you@example.com"
+# password = "app-password-here"
+# from     = "you@example.com"
+
+# --- FIO Bank API import (Czech) --------------------------------------------
+# Generate the token in FIO Internetbanking -> Nastaveni -> API.
+# [fio]
+# api_token = ""
+
+# --- Backups ----------------------------------------------------------------
+# [backup]
+# destination     = ""               # Local fallback dir (default: <data_dir>/backups)
+# schedule        = "0 2 * * *"      # Cron expression; empty disables scheduled backups
+# retention_count = 14               # Keep last N; 0 = keep all
+#
+# Off-site copy to S3-compatible storage (AWS S3, MinIO, Backblaze B2, Cloudflare R2).
+# [backup.s3]
+# endpoint   = "s3.eu-central-1.amazonaws.com"
+# region     = "eu-central-1"
+# bucket     = ""
+# access_key = ""
+# secret_key = ""
+# use_ssl    = true
+
+# --- OCR for expense document extraction ------------------------------------
+# Pick ONE provider. Leave api_key empty to disable OCR entirely.
+#
+# Defaults per provider:
+#   openai      -> gpt-4o
+#   claude      -> claude-sonnet-4-20250514
+#   gemini      -> gemini-2.0-flash
+#   openrouter  -> google/gemini-2.0-flash-001
+#   mistral     -> pixtral-large-latest
+# [ocr]
+# provider = "openai"                # openai | openrouter | gemini | mistral | claude
+# api_key  = ""
+# model    = ""                      # Optional override of the per-provider default
+# base_url = ""                      # Optional, for proxies / self-hosted endpoints

deploy/docker-compose.yml

@@ -0,0 +1,43 @@
+# Example docker-compose.yml for running zfaktury in a container.
+#
+# This file is a starting point — copy it to your deployment directory
+# (outside the repo) and adjust host paths, the published port, and
+# the `user:` UID/GID to your environment.
+#
+# Pair it with a `config.toml` at the repository root (gitignored).
+# Edit that file in your editor, then `docker compose restart` to apply.
+
+name: zfaktury
+
+services:
+  zfaktury:
+    build:
+      context: ..
+      dockerfile: Dockerfile
+      args:
+        VERSION: docker-local
+    image: zfaktury:latest
+    container_name: zfaktury
+    hostname: zfaktury
+    restart: unless-stopped
+
+    # Override the image's default 1000:1000 if your host data directory
+    # is owned by a different UID/GID (common on NAS systems).
+    # user: "1024:100"
+
+    ports:
+      - "8080:8080"
+
+    environment:
+      - TZ=Europe/Prague
+      - ZFAKTURY_DATA_DIR=/data
+
+    volumes:
+      # Persistent state: SQLite DB, uploaded documents, backups, lock file.
+      # Point this at any host directory you want to keep across rebuilds.
+      - ./data:/data
+
+      # Live configuration. Edit the host file in your editor and
+      # `docker compose restart zfaktury` to apply changes.
+      # The :ro suffix makes the mount read-only inside the container.
+      - ../config.toml:/data/.zfaktury/config.toml:ro

docs/UPGRADING.md

@@ -0,0 +1,48 @@
+# Upgrading to multi-company (v0.0.51 and later)
+
+Migration `025_multi_company.sql` is the first multi-company migration.
+It rewrites the database in-place — back up your `~/.zfaktury/zfaktury.db`
+before upgrading.
+
+## What happens
+
+1. A `companies` table is created.
+2. A default company (id = 1) is created from your existing settings
+   (company_name, ico, dic, address, bank details, etc.).
+3. Every per-company table (contacts, invoices, expenses, tax filings,
+   etc.) gains a `company_id` column, backfilled to 1.
+4. Composite foreign keys are added to invoice_items, expense_items,
+   recurring_invoice_items, vat_return_invoices, and vat_return_expenses
+   for physical cross-company isolation.
+
+## Known limitation: tax-year tables
+
+The following tables retain their original `UNIQUE(year)` constraint
+from migrations 015-017 and are not yet partitioned for multi-company
+UPSERT collisions:
+
+- `tax_year_settings`
+- `tax_prepayments`
+- `tax_spouse_credits`
+- `tax_child_credits`
+- `tax_personal_credits`
+- `tax_deductions`
+
+Reads from these tables ARE properly scoped by `company_id`, so cross-
+company leakage is impossible. The limitation only manifests if two
+companies try to UPSERT the same year row simultaneously. A follow-up
+migration will extend the unique constraints to `(company_id, year)`.
+
+## Downgrade is destructive
+
+The `Down` migration restores the 17 identity keys from id = 1 only.
+Any data you created in companies other than the first will be lost
+on downgrade. Back up your database before testing the downgrade
+path.
+
+## Renaming the default company
+
+After upgrade, visit `/companies/[id]` (clickable from the header
+dropdown's "Spravovat firmy →" link) to rename or fill in additional
+fields. You can add more companies from "+ Přidat firmu" — IČO
+lookup against ARES auto-fills most fields.