Initial implementation of inventree

A small IT asset inventory system built around a nested folder tree,
matching the project brief: Go + html/template + Bootstrap 5 + vanilla JS,
SQLite storage (WAL, FKs, migrations), embedded templates/static assets,
single compiled binary.

- AJAX-driven inventory tree: lazy-loaded folder expansion with per-user
  persisted expand state, drag-and-drop move for folders/assets, safe
  delete-with-relocate-or-cascade confirmation, search with breadcrumbs.
- Assets: CRUD, duplicate, move, auto-generated IT-000001-style IDs,
  CSV import (with optional folder auto-create) and export.
- Admin-defined item types with custom fields (text/long_text/number/date/
  boolean/dropdown/url/ip_address).
- Configurable statuses, session-based auth (bcrypt, secure cookies),
  admin/user roles, user management.
- CLI: serve, version, database migrate, database backup; /healthz;
  graceful shutdown; Dockerfile/docker-compose/systemd unit; Go test suite.

internal/web/handlers_csv.go

@@ -0,0 +1,70 @@
+package web
+
+import (
+	"fmt"
+	"net/http"
+	"time"
+
+	"inventree/internal/assets"
+)
+
+func (a *App) handleExportCSV(w http.ResponseWriter, r *http.Request) {
+	ctx := r.Context()
+	filter := assets.ListFilter{
+		ItemTypeID:     queryInt64(r, "item_type_id"),
+		StatusID:       queryInt64(r, "status_id"),
+		AssignedUserID: queryInt64(r, "assigned_user_id"),
+		Query:          r.URL.Query().Get("q"),
+	}
+	if folderID, err := queryOptionalID(r, "folder_id"); err == nil && folderID != nil {
+		filter.FolderID = folderID
+		filter.FolderSet = true
+		filter.IncludeSub = r.URL.Query().Get("recursive") == "1"
+	}
+
+	filename := fmt.Sprintf("inventree-assets-%s.csv", time.Now().Format("2006-01-02"))
+	w.Header().Set("Content-Type", "text/csv; charset=utf-8")
+	w.Header().Set("Content-Disposition", "attachment; filename=\""+filename+"\"")
+	if err := a.Assets.Export(ctx, w, filter); err != nil {
+		a.Log.Error("csv export failed", "error", err)
+	}
+}
+
+func (a *App) handleImportCSV(w http.ResponseWriter, r *http.Request) {
+	ctx := r.Context()
+	if err := r.ParseMultipartForm(32 << 20); err != nil {
+		jsonErr(w, http.StatusBadRequest, err)
+		return
+	}
+	file, _, err := r.FormFile("file")
+	if err != nil {
+		jsonErr(w, http.StatusBadRequest, err)
+		return
+	}
+	defer file.Close()
+
+	createMissing := r.FormValue("create_missing_folders") == "1"
+
+	itemTypes, err := a.ItemTypes.List(ctx, true)
+	if err != nil {
+		jsonErr(w, http.StatusInternalServerError, err)
+		return
+	}
+	statusList, err := a.Statuses.List(ctx)
+	if err != nil {
+		jsonErr(w, http.StatusInternalServerError, err)
+		return
+	}
+	userList, err := a.Users.List(ctx)
+	if err != nil {
+		jsonErr(w, http.StatusInternalServerError, err)
+		return
+	}
+
+	result, err := a.Assets.Import(ctx, file, assets.ImportOptions{CreateMissingFolders: createMissing}, itemTypes, statusList, userList)
+	if err != nil {
+		jsonErr(w, http.StatusBadRequest, err)
+		return
+	}
+	jsonOK(w, result)
+}