Reorganize migrations for new vs existing deployments

- Created core/ directory for essential migrations that always run
- Created legacy/ directory for migrations only needed when upgrading
- New deployments will only run core migrations for a clean database
- Existing deployments will run all migrations in proper sequence
- Fixed duplicate migration numbers (014 and 027)
- Updated migration runners to handle new directory structure
- Added README explaining the migration organization

This change optimizes deployment for new users who will get a clean
schema without running unnecessary upgrade migrations.

backend/migrations/core/init.js

@@ -0,0 +1,126 @@
+const bcrypt = require('bcrypt');
+const { db, initializeDatabase } = require('../src/database/db');
+const { generateReadablePassword } = require('../src/utils/passwordGenerator');
+const fs = require('fs').promises;
+const path = require('path');
+
+async function runMigrations() {
+  console.log('Running database migrations...');
+  
+  try {
+    // Initialize tables
+    await initializeDatabase();
+    
+    // Create default admin user if none exists
+    const adminExists = await db('admin_users').first();
+    if (!adminExists) {
+      // Generate a secure random password
+      const generatedPassword = generateReadablePassword();
+      const passwordHash = await bcrypt.hash(generatedPassword, 12); // Increased rounds for better security
+      
+      await db('admin_users').insert({
+        username: 'admin',
+        email: '[email protected]',
+        password_hash: passwordHash,
+        must_change_password: true, // Flag for forcing password change
+        created_at: new Date()
+      });
+      
+      // Save the generated password to a file for the user to retrieve
+      const setupInfoPath = path.join(__dirname, '..', '..', 'ADMIN_CREDENTIALS.txt');
+      const setupInfo = `
+========================================
+PicPeak Admin Credentials
+========================================
+
+Your admin account has been created with these credentials:
+
+Username: admin
+Password: ${generatedPassword}
+
+IMPORTANT SECURITY NOTES:
+1. You MUST change this password on first login
+2. This file will be created only once
+3. Store these credentials securely
+4. Delete this file after noting the password
+
+Login URL: ${process.env.ADMIN_URL || 'http://localhost:3001'}/admin
+
+Generated on: ${new Date().toISOString()}
+========================================
+`;
+      
+      await fs.writeFile(setupInfoPath, setupInfo, 'utf8');
+      
+      console.log('\n========================================');
+      console.log('✅ Admin user created successfully!');
+      console.log('========================================');
+      console.log('Username: admin');
+      console.log(`Password: ${generatedPassword}`);
+      console.log('\n⚠️  IMPORTANT:');
+      console.log('1. Save these credentials securely');
+      console.log('2. You will be required to change the password on first login');
+      console.log('3. Credentials are also saved in: ADMIN_CREDENTIALS.txt');
+      console.log('========================================\n');
+    }
+    
+    // Create default email templates if none exist
+    const templateExists = await db('email_templates').first();
+    if (!templateExists) {
+      await db('email_templates').insert([
+        {
+          template_key: 'gallery_created',
+          subject: 'Your Photo Gallery is Ready!',
+          body_html: `<h2>Gallery Created Successfully</h2>
+<p>Dear {{host_name}},</p>
+<p>Your photo gallery "{{event_name}}" has been created successfully!</p>
+<p><strong>Gallery Details:</strong></p>
+<ul>
+  <li>Event Date: {{event_date}}</li>
+  <li>Gallery Link: {{gallery_link}}</li>
+  <li>Password: {{gallery_password}}</li>
+  <li>Expires: {{expiry_date}}</li>
+</ul>
+<p>Share this link and password with your guests to allow them to view and download photos.</p>`,
+          body_text: 'Gallery Created Successfully\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" has been created successfully!',
+          variables: JSON.stringify(['host_name', 'event_name', 'event_date', 'gallery_link', 'gallery_password', 'expiry_date'])
+        },
+        {
+          template_key: 'expiration_warning',
+          subject: 'Your Photo Gallery Expires Soon',
+          body_html: `<h2>Gallery Expiring Soon</h2>
+<p>Dear {{host_name}},</p>
+<p>Your photo gallery "{{event_name}}" will expire in {{days_remaining}} days.</p>
+<p>After expiration, the gallery will be archived and no longer accessible to guests.</p>
+<p><a href="{{gallery_link}}">Visit Gallery</a></p>`,
+          body_text: 'Gallery Expiring Soon\n\nDear {{host_name}},\n\nYour photo gallery "{{event_name}}" will expire in {{days_remaining}} days.',
+          variables: JSON.stringify(['host_name', 'event_name', 'days_remaining', 'gallery_link'])
+        }
+      ]);
+      console.log('Default email templates created');
+    }
+
+    // Create default email config if none exists
+    const emailConfig = await db('email_configs').first();
+    if (!emailConfig) {
+      await db('email_configs').insert({
+        smtp_host: process.env.SMTP_HOST || 'mailhog',
+        smtp_port: process.env.SMTP_PORT || 1025,
+        smtp_secure: process.env.SMTP_SECURE === 'true',
+        smtp_user: process.env.SMTP_USER || '',
+        smtp_pass: process.env.SMTP_PASS || '',
+        from_email: process.env.EMAIL_FROM || '[email protected]',
+        from_name: 'Photo Sharing'
+      });
+      console.log('Default email configuration created');
+    }
+
+    console.log('Migrations completed successfully');
+    process.exit(0);
+  } catch (error) {
+    console.error('Migration failed:', error);
+    process.exit(1);
+  }
+}
+
+runMigrations();