Musonic Server 1.0.0

Added

• Project structure, PolyForm Noncommercial 1.0.0 license.
• SQLite database (schema v1) with built-in migrations: canonical tracks with local files and
  online sources, albums, artists with roles, genres, folders, accounts, per-device API keys,
  sessions, per-user likes / ratings / play counts, scrobbles, playlists, saved play queue,
  lyrics cache, accent-insensitive full-text search.
• Audio provider interface with conformance checks and an in-memory example provider.
• Shared segment cache for provider streams, track matching, tag writing (from Musonic API).
• /health endpoint, with the state of the last scan.
• Library scanner: reads tags (several artists, composers, genres, dates, ISRC, MusicBrainz
  ids, embedded pictures and lyrics) and audio properties; rescans only the folders that
  changed (folder hash); keeps the track, its likes and playlists when a file moves, is
  duplicated or disappears; attaches an imported file to the track first seen online (ISRC,
  else title + artists + length); picks album covers (cover.*, folder.*, front.*, then
  embedded) and sidecar lyrics (.lrc, .txt). Tracks without an album go to
  "[Unknown Album]". Misnamed files (AAC in a .mp3) are still read.
• Library watching: changes in the music folder are scanned a few seconds later; scheduled
  scan every hour (MUSONIC_SCAN_INTERVAL_MINUTES).
• musonic-server scan [--full]: scans once and prints what it did.
• Accounts: administrators and users, passwords hashed with argon2id, one revocable API key
  per device (only its hash is stored), sign-in sessions (30 days, sliding), a new password
  ends the other sessions, the last administrator cannot be deleted. Failed sign-ins are
  limited per address and account.
• Subsonic API (/rest): sign-in by password (p, also enc:), legacy token (t + s, on by
  default, the password then kept encrypted with AES-256-GCM under a key outside the
  database: MUSONIC_SECRET_KEY or secret.key) and OpenSubsonic API keys; XML, JSON and
  JSONP answers; form posts; ping, getLicense, getOpenSubsonicExtensions, tokenInfo,
  getUser, getUsers, createUser, deleteUser, changePassword, getMusicFolders.
• Native API (/v1): first administrator (/v1/setup), sign-in / sign-out, profile, password,
  device keys, accounts.
• CORS open to any origin (no cookies), for browser clients.
• musonic-server user add <name> [--admin].
• Subsonic browsing: getArtists, getIndexes, getArtist, getAlbum, getSong,
  getMusicDirectory, getGenres, getAlbumList2 / getAlbumList (random, newest, highest,
  frequent, recent, alphabetical, starred, by genre, by year), getRandomSongs,
  getSongsByGenre, getStarred2 / getStarred, getTopSongs (most played here),
  getSimilarSongs2 (same artists and genres), getArtistInfo2 (similar artists by genre),
  getAlbumInfo2, getScanStatus, startScan, getNowPlaying, getPlaylists,
  getPlaylist, getInternetRadioStations (none); OpenSubsonic fields (several artists,
  album artists, genres, release date, ISRC, sampling rate, bit depth).
• Search (search3, search2): every word as a prefix, accents ignored; an empty query lists
  everything.
• Playback: stream sends the file with HTTP ranges (seeking), or transcodes with ffmpeg when
  a lower bit rate or another format is asked (MP3, Opus, AAC, Vorbis; the file as is when
  ffmpeg is missing); download.
• Covers (getCoverArt): the album's image file or embedded picture, resized on request
  (JPEG) and cached on disk.
• Lyrics: getLyricsBySongId (synced lines from .lrc files) and getLyrics.
• Likes and ratings: star / unstar (songs, albums, artists, several at once; liking again
  keeps the first date), setRating.
• Plays: scrobble counts a play for the song, its album and its artists (with the client's
  date when given), feeding the "frequent" / "recent" lists and top songs; submission=false
  shows the song in getNowPlaying until it would have ended.
• Playlists: createPlaylist (new, or every song replaced, which is how clients reorder),
  updatePlaylist (name, comment, public, songs added and removed), deletePlaylist; only
  the owner may change them. Positions sent by clients count the songs they see: a song whose
  file is gone stays in place, untouched, and comes back with its file. Song counts and
  durations count the songs shown.
• Saved play queue: savePlayQueue / getPlayQueue and the OpenSubsonic …ByIndex variants
  (indexBasedQueue extension), to resume on another device.
• Online catalog, from Deezer's public API (no account, metadata only; online, on by
  default): search3 / search2 add online songs, albums and artists after the library's
  (first page, nothing shown twice); getSong, getAlbum, getArtist and getCoverArt open
  online items (dz-track-…, dz-album-…, dz-artist-… ids). Answers are cached and requests
  kept under the API's limit.
• Online songs liked, rated, played, queued or added to a playlist are stored as library tracks
  without a file, under a library id (or linked to the library track of the same recording:
  ISRC, else title, artists and length). Their album and artist pages open, with their covers.
  They show in likes, playlists and the queue, not in the library lists until their file is
  imported; the imported file then joins the same track, which keeps its likes and playlists.
• Songs without a file play from audio providers, tried in order, through the shared segment
  cache (seeking works, several listeners share one stream, idle streams are freed). Included:
  a relay to another Subsonic server (an OctoFiesta, a Navidrome: found by ISRC, else title,
  artists and length) and, last, the 30-second online preview.
• Imports: an online song liked, part of a liked album or added to a playlist is downloaded in
  the background from a provider whose files may be imported (never a preview), tagged, filed
  in <music folder>/Musonic/Album Artist/Album/NN - Title.ext and scanned: it joins the same
  track, which keeps its likes and playlists. Failed imports are tried again (5 min, 30 min,
  2 h, 12 h), then given up until asked again. Settings: import, import_dir,
  import_quality. /health counts them.
• Online albums and artists can be liked whole (albumId / artistId with dz-… ids): a
  liked album's songs are imported; liked albums and artists known only online show in the
  likes.
• musonic-server import-navidrome <copy of navidrome.db>: playlists, likes, ratings, play
  counts and plays of the accounts that exist here (same user name), tracks matched by their
  file (then ignoring case and accents); tracks and playlists keep their Navidrome ids
  (--new-ids otherwise), albums and artists get ids from their tags. Safe to run again
  (--replace-playlists to import playlists again). Tested on a real library: 15 playlists,
  432 entries, 2 858 plays, in about a second.
• Daily database backup (consistent copy while running) in data_dir/backups, 14 days kept
  (backup_days).
• Dockerfile (with ffmpeg) and compose.example.yml.
• Clients can tell Musonic Server from another Subsonic server: OpenSubsonic extension
  musonicServer and GET /v1/info (version, native API version, features), both without
  signing in.
• Real-time events: GET /v1/events (WebSocket, token in Authorization: Bearer or
  ?token=, device id in ?device=) pushes to every device of an account what changed, from
  any client: likes, ratings, playlists, plays, the saved queue, finished or given-up imports.
  A keep-alive ping every 30 seconds; a device that falls behind is told to reload (resync).
  The device that made a change is named in by when it says who it is (X-Musonic-Device
  header or device parameter).
• online: true on songs, albums and artists that have no file in the library (online
  catalog, songs liked but not imported yet), for an "Online" badge in clients.
• Console dashboard and event bar: GET /v1/admin/status (administrators) gives live CPU,
  memory and network rates, disk space (server and music, imports apart), the library's
  figures, database / backups / caches sizes, who is listening, imports, recent activity,
  alerts (expired provider credentials, given-up imports, disk almost full, no backup for two
  days, newer server released) and the latest releases of the server and of Musonic Web,
  looked up on GitHub every 6 hours (update_check).
  Alerts are sent as their kind and figures, for clients to word them in their language.
• Invitations keep the name of the account they created, also once it is deleted.
• A suspended account signing in with its own credentials is told so (Subsonic error 50,
  native API 403), instead of "wrong password".
• Administration console, served at the server's address (admin_dir, see apps/admin).
• Account management (administrators): accounts listed with their devices and imports; role
  (always at least one active administrator), suspension (no sign-in at all, nothing
  deleted), sign out everywhere, revoke one device key. Invitation links: the person
  creates their account, choosing name and password; password reset links: they choose a
  new password (optionally signing their devices out). Links are random, stored hashed, used
  once, valid from a minute to a year; the administrator never sees a password.
• Rights and quotas of users who are not administrators, all allowed and unlimited by
  default: importing online songs, the online catalog, downloads, public playlists; imports
  per day and per month, total size of their imports, highest streaming bit rate.
• Console « Imports » (/v1/admin/imports, /v1/admin/providers): the import queue with its
  counts, retry one or every failed import, remove one; audio providers with their state; a
  provider's credential (the Deezer ARL) changed from the console, checked by the provider
  before it replaces the old one, kept in the database and never shown again.
• Console « Bibliothèque » (/v1/admin/library…): scan now (quick or full), the songs with
  their file, the songs with a missing file, without a cover, twice in the library, online
  without a file; one song's tags, files, sources, likes and plays; its file to listen to.
• Console « Appareils et sécurité » (/v1/admin/devices, /v1/admin/blocked): device keys
  of every account, last sign-ins, addresses refused by the limiter now, unblock one.
• Console « Réglages et maintenance »: settings changed from the console (imports, quality,
  online catalog and previews, scan interval, backups kept, legacy Subsonic sign-in, update
  check), applied at the next start; restart from the console; backups listed, made now,
  downloaded; the last 2,000 log lines; caches emptied; Musonic Web installed at /app from
  its latest release (Musonic-Web-app.zip).
• Failed sign-ins count each different wrong password once: an app that keeps retrying a
  password changed since no longer locks its user out of the new one.
• Playlist imports (ADR-020, any account): /v1/playlist-imports reads a Deezer playlist
  (public API, every song) or a playlist of another service plugged in by a binary
  (Extensions::playlist_sources), or pasted song links; each song is looked for in the
  library (ISRC, else title, artists and length; tracks no client shows are skipped), then in
  the online catalog (same title, an
  artist in common, length within 5 s; within 20 s it is kept as « uncertain »); the playlist
  is made in the account at the end, songs without a file imported as usual (rights and
  quotas apply). Runs in the background, one import at a time, goes on after a restart;
  progress on /v1/events (playlistImport); a report per import (found, uncertain, missing
  and why). Another playlist's address completes an import (its songs are added, no
  duplicates); pasted links replace the list, songs already found are kept. Online search
  tries each credited artist (classical music: Deezer's artist is the performer), compares
  the titles' words, and takes another recording of the same work as « uncertain » (any
  length when the title and composer match well), never a piece made from it (« d'après… »,
  arrangements, covers, karaoke).
  POST /v1/playlist-imports/{id}/retry looks for the songs not found again; a service that
  refuses for a while is asked again up to 5 times (5 to 40 s apart).
• Console « Lecture » (GET /v1/admin/playback): ffmpeg present or not, with its version; the
  highest bit rate for every account (max_bit_rate, an account's own limit wins when lower)
  and the format of smaller streams (transcode_format: mp3, opus, aac), both settings; the
  caches of online songs and of pictures, emptied one by one (caches/clear?kind=).
• GET /v1/admin/library/covers/{id}?token=&size=: a song's picture for the console (same
  pictures and cache as getCoverArt).
• /v1/auth/login also takes the Subsonic token and its salt instead of the password (for
  clients that keep only those, like Musonic Web), under the legacy sign-in setting.
• Artist names match whatever their spaces: « JAŸ-Z » is « JAY Z ».
• A music folder that moved (another disk, another Docker mount) is followed: tracks, likes and
  playlists stay, files are found in the new place.
• musonic_server::cli: the command line, for binaries that add their own providers.
• Providers can say their credentials expired: /health then shows "status": "warning" and
  the provider in alerts.
• Tracks without an album artist tag: the album goes to the main artist ("A feat. B" → "A").