feat(projects): multi-step project creation wizard

[07prajwal2000]

What

Replaces the single-field "new project" modal with a dedicated 3-step wizard, and extends the create endpoint to accept what the wizard collects.

Server — POST /v1/projects

• Accepts { name, description?, members[], settings{} }. Members and settings are written inside the existing db.transaction alongside the insert — all three repository functions already took an optional tx, so this is atomic without new plumbing. A project that exists but is missing the access grants it was created with can only be repaired by a system admin, so partial creation isn't an acceptable state.
• CREATE_TIME_SETTING_KEYS in create/dto.ts is the single source shared by the request schema and the wizard. Connection-id keys (AI agent, telemetry) are deliberately excluded — they need the live connection test that only settings/keys/upsert performs. Adding a future non-connection key is a one-line change there.

Server — bugs found on the way

• Duplicate-name check never fired. create/service.ts imported checkProjectExist from routes/create/repository, whose signature is (id: string) and which matches eq(projectsEntity.id, id). It was querying id = <the project name>, always returned false, and the 409 was dead code — duplicate project names were silently allowed. The correct checkProjectExists(name) was sitting unused in projects/create/repository.ts. Now used, and covered by a test asserting it's called with the name.
• varchar(50) vs zod. projects.name is varchar({ length: 50 }) but create/dto.ts allowed max(100) and update/dto.ts allowed max(255), so a 51+ character name passed validation and then failed at the DB. Both DTOs now cap at 50.
• create/tests/create.spec.ts was a copy-pasted get-all stub (it("test 01", () => {})). Replaced with real tests.

Portal

• New route /projects/new (_authed/projects.new.tsx), behind the same isSystemAdmin gate as the old modal. Three steps — basics, members, config — split this way so future config keys have a home rather than crowding the name field.
• Members step is a two-column transfer panel: searchable available users on the left, chosen members on the right with a per-row role dropdown reusing ROLES from RoleSelector rather than retyping the three roles.
• ProjectsTab loses the modal and navigates to the wizard.

Notes

• No new DB columns and no migration. Future project metadata goes to the existing project-settings key/value table.
• hidden is untouched — it's the live archive flag used by get-all and update, not something to set at creation.
• All new styling uses design-system tokens. AGENT.md gains a rule documenting this, after a first pass copied literal hex from a neighbouring file.

Testing

• bun run lint — clean across all 10 packages (also runs on pre-commit).
• Server project tests: 19/19 pass. Portal tests: 71/71 pass.
• vite build succeeds; routeTree.gen.ts picks up the new route (it's gitignored and generated at build time, so it doesn't appear in the diff).
• Not yet manually clicked through in a running portal — worth a look at the wizard before merge, particularly the transfer panel.

🤖 Generated with Claude Code