refactor: convert repository to monorepo with npm workspaces

Restructured the repository into a monorepo to better organize application code
and maintenance scripts.

## Workspace Structure
- web-app: Next.js application (all app code moved from root)
- housekeeping: Database backup and maintenance scripts

## Key Changes
- Moved all application code to web-app/ using git mv
- Moved database scripts to housekeeping/ workspace
- Updated Dockerfile for monorepo build process
- Updated docker-compose files (volume paths: ./web-app/etc/hosts/)
- Updated .gitignore for workspace-level node_modules
- Updated documentation (README.md, CLAUDE.md, CHANGELOG.md)

## Migration Impact
- Root package.json now manages workspaces
- Build commands delegate to web-app workspace
- All file history preserved via git mv
- Docker build process updated for workspace structure

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

web-app/app/[locale]/share/attachment/[id]/not-found.tsx

@@ -0,0 +1,6 @@
+import { NotFoundPage } from '@/app/ui/NotFoundPage';
+ 
+const ShareAttachmentNotFound = () =>
+<NotFoundPage title="404 File Not Found" description="Could not find the requested shared attachment." />;
+
+export default ShareAttachmentNotFound;

web-app/app/[locale]/share/attachment/[id]/route.tsx

@@ -0,0 +1,64 @@
+import { fetchBillById } from '@/app/lib/actions/billActions';
+import { notFound } from 'next/navigation';
+import { extractShareId, validateShareChecksum } from '@/app/lib/shareChecksum';
+import { getDbClient } from '@/app/lib/dbClient';
+import { BillingLocation } from '@/app/lib/db-types';
+
+export async function GET(request: Request, { params: { id } }: { params: { id: string } }) {
+    // Parse shareId-billID format
+    // shareId = 40 chars (locationId 24 + checksum 16)
+    const shareId = id.substring(0, 40);
+    const billID = id.substring(41); // Skip the '-' separator
+
+    if (!shareId || !billID) {
+        notFound();
+    }
+
+    // Validate shareId and extract locationId
+    const extracted = extractShareId(shareId);
+    if (!extracted) {
+        notFound();
+    }
+
+    const { locationId: locationID, checksum } = extracted;
+
+    // Validate checksum
+    if (!validateShareChecksum(locationID, checksum)) {
+        notFound();
+    }
+
+    // Check TTL before fetching bill
+    const dbClient = await getDbClient();
+    const location = await dbClient.collection<BillingLocation>("lokacije")
+        .findOne({ _id: locationID }, { projection: { shareTTL: 1 } });
+
+    if (!location) {
+        notFound();
+    }
+
+    // Check if sharing is active and not expired
+    if (!location.shareTTL || new Date() > location.shareTTL) {
+        notFound();
+    }
+
+    const [_, bill] = await fetchBillById(locationID, billID, true) ?? [];
+
+    if (!bill?.attachment) {
+        notFound();
+    }
+
+    // convert fileContentsBase64 from Base64 string to binary string
+    const fileContentsBuffer = Buffer.from(bill.attachment.fileContentsBase64, 'base64');
+
+    // convert fileContentsBuffer to format that can be sent to the client
+    const fileContents = new Uint8Array(fileContentsBuffer);
+    
+    return new Response(fileContents, {
+        status: 200,
+        headers: {
+            'Content-Type': "application/octet-stream",
+            'Content-Disposition': `attachment; filename="${bill.attachment.fileName}"`,
+            'Last-Modified': `${bill.attachment.fileLastModified}`
+        }
+    });
+}

web-app/app/[locale]/share/bill/[id]/not-found.tsx

@@ -0,0 +1,6 @@
+import { NotFoundPage } from '@/app/ui/NotFoundPage';
+ 
+const BillNotFound = () =>
+<NotFoundPage title="404 Bill Not Found" description="Could not find the requested Bill." />;
+
+export default BillNotFound;

web-app/app/[locale]/share/bill/[id]/page.tsx

@@ -0,0 +1,41 @@
+import { fetchBillById } from '@/app/lib/actions/billActions';
+import { ViewBillCard } from '@/app/ui/ViewBillCard';
+import { Main } from '@/app/ui/Main';
+import { notFound } from 'next/navigation';
+import { validateShareAccess } from '@/app/lib/actions/locationActions';
+
+export default async function Page({ params: { id } }: { params: { id: string } }) {
+
+    // Split combined ID: shareId (40 chars) + '-' + billID (24 chars)
+    // ShareId = locationId (24) + checksum (16) = 40 chars
+    const shareId = id.substring(0, 40);
+    const billID = id.substring(41); // Skip the '-' separator
+
+    // Validate share access (checks checksum + TTL, extracts locationId)
+    const accessValidation = await validateShareAccess(shareId);
+
+    if (!accessValidation.valid || !accessValidation.locationId) {
+        return (
+            <Main>
+                <div className="alert alert-error">
+                    <p>{accessValidation.error || 'This content is no longer shared'}</p>
+                </div>
+            </Main>
+        );
+    }
+
+    const locationID = accessValidation.locationId;
+
+    // Fetch bill data
+    const [location, bill] = await fetchBillById(locationID, billID) ?? [];
+
+    if (!bill || !location) {
+        return notFound();
+    }
+
+    return (
+        <Main>
+            <ViewBillCard location={location} bill={bill} shareId={shareId} />
+        </Main>
+    );
+}

web-app/app/[locale]/share/location/[id]/LocationViewPage.tsx

@@ -0,0 +1,47 @@
+import { ViewLocationCard } from '@/app/ui/ViewLocationCard';
+import { fetchLocationById, setSeenByTenantAt, validateShareAccess } from '@/app/lib/actions/locationActions';
+import { getUserSettingsByUserId } from '@/app/lib/actions/userSettingsActions';
+import { notFound } from 'next/navigation';
+import { myAuth } from '@/app/lib/auth';
+
+export default async function LocationViewPage({ shareId }: { shareId: string }) {
+    // Validate share access (checks checksum + TTL, extracts locationId)
+    const accessValidation = await validateShareAccess(shareId);
+
+    if (!accessValidation.valid || !accessValidation.locationId) {
+        return (
+            <div className="alert alert-error">
+                <p>{accessValidation.error || 'This content is no longer shared'}</p>
+            </div>
+        );
+    }
+
+    const locationId = accessValidation.locationId;
+
+    // Fetch location
+    const location = await fetchLocationById(locationId);
+
+    if (!location) {
+        return notFound();
+    }
+
+    // Fetch user settings for the location owner
+    const userSettings = await getUserSettingsByUserId(location.userId);
+
+    // Check if the page was accessed by an authenticated user who is the owner
+    const session = await myAuth();
+    const isOwner = session?.user?.id === location.userId;
+
+    // If the page is not visited by the owner, mark it as seen by tenant
+    if (!isOwner) {
+         await setSeenByTenantAt(locationId);
+    }
+
+    return (
+        <ViewLocationCard
+            location={location}
+            userSettings={userSettings}
+            shareId={shareId}
+        />
+    );
+}

web-app/app/[locale]/share/location/[id]/page.tsx

@@ -0,0 +1,14 @@
+import { Suspense } from 'react';
+import LocationViewPage from './LocationViewPage';
+import { Main } from '@/app/ui/Main';
+import { LocationEditFormSkeleton } from '@/app/ui/LocationEditForm';
+
+export default async function Page({ params: { id } }: { params: { id: string } }) {
+    return (
+        <Main>
+            <Suspense fallback={<LocationEditFormSkeleton />}>
+                <LocationViewPage shareId={id} />
+            </Suspense>
+        </Main>
+    );
+}

web-app/app/[locale]/share/proof-of-payment/combined/[id]/not-found.tsx

@@ -0,0 +1,7 @@
+export default function NotFound() {
+    return (
+        <div className="flex min-h-screen flex-col items-center justify-center p-6 bg-base-300">
+            <h2 className="text-2xl font-bold">Proof of payment not found</h2>
+        </div>
+    );
+}

web-app/app/[locale]/share/proof-of-payment/combined/[id]/route.tsx

@@ -0,0 +1,54 @@
+import { getDbClient } from '@/app/lib/dbClient';
+import { BillingLocation } from '@/app/lib/db-types';
+import { notFound } from 'next/navigation';
+import { extractShareId, validateShareChecksum } from '@/app/lib/shareChecksum';
+
+export async function GET(request: Request, { params: { id } }: { params: { id: string } }) {
+    const shareId = id;
+
+    // Validate shareId and extract locationId
+    const extracted = extractShareId(shareId);
+    if (!extracted) {
+        notFound();
+    }
+
+    const { locationId: locationID, checksum } = extracted;
+
+    // Validate checksum
+    if (!validateShareChecksum(locationID, checksum)) {
+        notFound();
+    }
+
+    const dbClient = await getDbClient();
+    const location = await dbClient.collection<BillingLocation>("lokacije")
+        .findOne({ _id: locationID }, {
+            projection: {
+                utilBillsProofOfPayment: 1,
+                shareTTL: 1,
+            }
+        });
+
+    if (!location?.utilBillsProofOfPayment) {
+        notFound();
+    }
+
+    // Check if sharing is active and not expired
+    if (!location.shareTTL || new Date() > location.shareTTL) {
+        notFound();
+    }
+
+    // Convert fileContentsBase64 from Base64 string to binary
+    const fileContentsBuffer = Buffer.from(location.utilBillsProofOfPayment.fileContentsBase64, 'base64');
+
+    // Convert fileContentsBuffer to format that can be sent to the client
+    const fileContents = new Uint8Array(fileContentsBuffer);
+
+    return new Response(fileContents, {
+        status: 200,
+        headers: {
+            'Content-Type': 'application/pdf',
+            'Content-Disposition': `attachment; filename="${location.utilBillsProofOfPayment.fileName}"`,
+            'Last-Modified': `${location.utilBillsProofOfPayment.fileLastModified}`
+        }
+    });
+}

web-app/app/[locale]/share/proof-of-payment/per-bill/[id]/not-found.tsx

@@ -0,0 +1,7 @@
+export default function NotFound() {
+    return (
+        <div className="flex min-h-screen flex-col items-center justify-center p-6 bg-base-300">
+            <h2 className="text-2xl font-bold">Proof of payment not found</h2>
+        </div>
+    );
+}

web-app/app/[locale]/share/proof-of-payment/per-bill/[id]/route.tsx

@@ -0,0 +1,70 @@
+import { getDbClient } from '@/app/lib/dbClient';
+import { BillingLocation } from '@/app/lib/db-types';
+import { notFound } from 'next/navigation';
+import { extractShareId, validateShareChecksum } from '@/app/lib/shareChecksum';
+
+export async function GET(_request: Request, { params: { id } }: { params: { id: string } }) {
+    // Parse shareId-billID format
+    // shareId = 40 chars (locationId 24 + checksum 16)
+    const shareId = id.substring(0, 40);
+    const billID = id.substring(41); // Skip the '-' separator
+
+    if (!shareId || !billID) {
+        notFound();
+    }
+
+    // Validate shareId and extract locationId
+    const extracted = extractShareId(shareId);
+    if (!extracted) {
+        notFound();
+    }
+
+    const { locationId: locationID, checksum } = extracted;
+
+    // Validate checksum
+    if (!validateShareChecksum(locationID, checksum)) {
+        notFound();
+    }
+
+    const dbClient = await getDbClient();
+    const location = await dbClient.collection<BillingLocation>("lokacije")
+        .findOne({ _id: locationID }, {
+            projection: {
+                // Don't load bill attachments, only proof of payment and shareTTL
+                "bills._id": 1,
+                "bills.proofOfPayment": 1,
+                "shareTTL": 1,
+            }
+        });
+
+    if (!location) {
+        notFound();
+    }
+
+    // Check if sharing is active and not expired
+    if (!location.shareTTL || new Date() > location.shareTTL) {
+        notFound();
+    }
+
+    // Find the specific bill
+    const bill = location.bills.find(b => b._id === billID);
+
+    if(!bill?.proofOfPayment) {
+        notFound();
+    }
+
+    // Convert fileContentsBase64 from Base64 string to binary
+    const fileContentsBuffer = Buffer.from(bill.proofOfPayment.fileContentsBase64, 'base64');
+
+    // Convert fileContentsBuffer to format that can be sent to the client
+    const fileContents = new Uint8Array(fileContentsBuffer);
+
+    return new Response(fileContents, {
+        status: 200,
+        headers: {
+            'Content-Type': 'application/pdf',
+            'Content-Disposition': `attachment; filename="${bill.proofOfPayment.fileName}"`,
+            'Last-Modified': `${bill.proofOfPayment.fileLastModified}`
+        }
+    });
+}