Initial commit: RehearsalHub POC

Full-stack self-hosted band rehearsal platform:

Backend (FastAPI + SQLAlchemy 2.0 async):
- Auth with JWT (register, login, /me, settings)
- Band management with Nextcloud folder integration
- Song management with audio version tracking
- Nextcloud scan to auto-import audio files
- Band membership with link-based invite system
- Song comments
- Audio analysis worker (BPM, key, loudness, waveform)
- Nextcloud activity watcher for auto-import
- WebSocket support for real-time annotation updates
- Alembic migrations (0001–0003)
- Repository pattern, Ruff + mypy configured

Frontend (React 18 + Vite + TypeScript strict):
- Login/register page with post-login redirect
- Home page with band list and creation form
- Band page with member panel, invite link, song list, NC scan
- Song page with waveform player, annotations, comment thread
- Settings page for per-user Nextcloud credentials
- Invite acceptance page (/invite/:token)
- ESLint v9 flat config + TypeScript strict mode

Infrastructure:
- Docker Compose: PostgreSQL, Redis, API, worker, watcher, nginx
- nginx reverse proxy for static files + /api/ proxy
- make check runs all linters before docker compose build

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

api/src/rehearsalhub/routers/versions.py

@@ -0,0 +1,120 @@
+import uuid
+from typing import Any
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi.responses import RedirectResponse
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from rehearsalhub.db.engine import get_session
+from rehearsalhub.db.models import Member
+from rehearsalhub.dependencies import get_current_member
+from rehearsalhub.repositories.audio_version import AudioVersionRepository
+from rehearsalhub.repositories.song import SongRepository
+from rehearsalhub.schemas.audio_version import AudioVersionCreate, AudioVersionRead
+from rehearsalhub.services.band import BandService
+from rehearsalhub.services.song import SongService
+from rehearsalhub.storage.nextcloud import NextcloudClient
+
+router = APIRouter(tags=["versions"])
+
+
+async def _get_version_and_assert_band_membership(
+    version_id: uuid.UUID,
+    session: AsyncSession,
+    current_member: Member,
+) -> tuple:
+    version_repo = AudioVersionRepository(session)
+    version = await version_repo.get_by_id(version_id)
+    if version is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Version not found")
+
+    song_repo = SongRepository(session)
+    song = await song_repo.get_by_id(version.song_id)
+    if song is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Song not found")
+
+    band_svc = BandService(session)
+    try:
+        await band_svc.assert_membership(song.band_id, current_member.id)
+    except PermissionError:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Not a member")
+
+    return version, song
+
+
+@router.get("/songs/{song_id}/versions", response_model=list[AudioVersionRead])
+async def list_versions(
+    song_id: uuid.UUID,
+    session: AsyncSession = Depends(get_session),
+    current_member: Member = Depends(get_current_member),
+):
+    song_repo = SongRepository(session)
+    song = await song_repo.get_by_id(song_id)
+    if song is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Song not found")
+
+    band_svc = BandService(session)
+    try:
+        await band_svc.assert_membership(song.band_id, current_member.id)
+    except PermissionError:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Not a member")
+
+    version_repo = AudioVersionRepository(session)
+    return [AudioVersionRead.model_validate(v) for v in await version_repo.list_for_song(song_id)]
+
+
+@router.post(
+    "/songs/{song_id}/versions",
+    response_model=AudioVersionRead,
+    status_code=status.HTTP_201_CREATED,
+)
+async def create_version(
+    song_id: uuid.UUID,
+    data: AudioVersionCreate,
+    session: AsyncSession = Depends(get_session),
+    current_member: Member = Depends(get_current_member),
+):
+    song_repo = SongRepository(session)
+    song = await song_repo.get_by_id(song_id)
+    if song is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Song not found")
+
+    band_svc = BandService(session)
+    try:
+        await band_svc.assert_membership(song.band_id, current_member.id)
+    except PermissionError:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Not a member")
+
+    song_svc = SongService(session)
+    version = await song_svc.register_version(song_id, data, current_member.id)
+    return AudioVersionRead.model_validate(version)
+
+
+@router.get("/versions/{version_id}/waveform")
+async def get_waveform(
+    version_id: uuid.UUID,
+    session: AsyncSession = Depends(get_session),
+    current_member: Member = Depends(get_current_member),
+) -> Any:
+    version, _ = await _get_version_and_assert_band_membership(version_id, session, current_member)
+    if not version.waveform_url:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Waveform not ready")
+    storage = NextcloudClient()
+    data = await storage.download(version.waveform_url)
+    import json
+
+    return json.loads(data)
+
+
+@router.get("/versions/{version_id}/stream")
+async def stream_version(
+    version_id: uuid.UUID,
+    session: AsyncSession = Depends(get_session),
+    current_member: Member = Depends(get_current_member),
+):
+    version, _ = await _get_version_and_assert_band_membership(version_id, session, current_member)
+    if not version.cdn_hls_base:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Stream not ready")
+    storage = NextcloudClient()
+    url = await storage.get_direct_url(f"{version.cdn_hls_base}/playlist.m3u8")
+    return RedirectResponse(url=url, status_code=302)