refactor: align codebase with EventCrew domain and trim legacy band stack

- Update API: events, users, policies, routes, resources, migrations
- Remove deprecated models/resources (customers, setlists, invitations, etc.)
- Refresh admin app and docs; remove apps/band

Made-with: Cursor

api/app/Http/Controllers/Api/V1/AuthController.php

@@ -1,75 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Http\Controllers\Api\V1;
-
-use App\Http\Controllers\Controller;
-use App\Http\Requests\Api\V1\LoginRequest;
-use App\Http\Requests\Api\V1\RegisterRequest;
-use App\Http\Resources\Api\V1\UserResource;
-use App\Models\User;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
-use Illuminate\Support\Facades\Auth;
-use Illuminate\Support\Facades\Hash;
-
-final class AuthController extends Controller
-{
-    public function login(LoginRequest $request): JsonResponse
-    {
-        $credentials = $request->only('email', 'password');
-
-        if (!Auth::attempt($credentials)) {
-            return $this->unauthorized('Invalid credentials');
-        }
-
-        $user = Auth::user();
-
-        if (!$user->isActive()) {
-            Auth::logout();
-            return $this->forbidden('Your account is inactive');
-        }
-
-        $token = $user->createToken('auth-token')->plainTextToken;
-
-        return $this->success([
-            'user' => new UserResource($user),
-            'token' => $token,
-        ], 'Login successful');
-    }
-
-    public function register(RegisterRequest $request): JsonResponse
-    {
-        $user = User::create([
-            'name' => $request->name,
-            'email' => $request->email,
-            'password' => Hash::make($request->password),
-            'type' => 'member',
-            'role' => 'member',
-            'status' => 'active',
-        ]);
-
-        $token = $user->createToken('auth-token')->plainTextToken;
-
-        return $this->created([
-            'user' => new UserResource($user),
-            'token' => $token,
-        ], 'Registration successful');
-    }
-
-    public function user(Request $request): JsonResponse
-    {
-        return $this->success(
-            new UserResource($request->user())
-        );
-    }
-
-    public function logout(Request $request): JsonResponse
-    {
-        $request->user()->currentAccessToken()->delete();
-
-        return $this->success(null, 'Logged out successfully');
-    }
-}
-

api/app/Http/Controllers/Api/V1/EventController.php

@@ -4,151 +4,55 @@ declare(strict_types=1);
 
 namespace App\Http\Controllers\Api\V1;
 
-use App\Enums\RsvpStatus;
 use App\Http\Controllers\Controller;
-use App\Http\Requests\Api\V1\InviteToEventRequest;
-use App\Http\Requests\Api\V1\RsvpEventRequest;
 use App\Http\Requests\Api\V1\StoreEventRequest;
 use App\Http\Requests\Api\V1\UpdateEventRequest;
-use App\Http\Resources\Api\V1\EventCollection;
-use App\Http\Resources\Api\V1\EventInvitationResource;
 use App\Http\Resources\Api\V1\EventResource;
 use App\Models\Event;
-use App\Models\EventInvitation;
+use App\Models\Organisation;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
 use Illuminate\Support\Facades\Gate;
 
 final class EventController extends Controller
 {
-    /**
-     * Display a listing of events.
-     */
-    public function index(): EventCollection
+    public function index(Organisation $organisation): AnonymousResourceCollection
     {
-        Gate::authorize('viewAny', Event::class);
+        Gate::authorize('viewAny', [Event::class, $organisation]);
 
-        $events = Event::query()
-            ->with(['location', 'customer'])
-            ->latest('event_date')
+        $events = $organisation->events()
+            ->latest('start_date')
             ->paginate();
 
-        return new EventCollection($events);
+        return EventResource::collection($events);
     }
 
-    /**
-     * Store a newly created event.
-     */
-    public function store(StoreEventRequest $request): JsonResponse
-    {
-        Gate::authorize('create', Event::class);
-
-        $data = $request->validated();
-        $data['created_by'] = auth()->id();
-        $data['currency'] = $data['currency'] ?? 'EUR';
-
-        $event = Event::create($data);
-
-        return $this->created(
-            new EventResource($event->load(['location', 'customer'])),
-            'Event created successfully'
-        );
-    }
-
-    /**
-     * Display the specified event.
-     */
-    public function show(Event $event): EventResource
+    public function show(Organisation $organisation, Event $event): JsonResponse
     {
         Gate::authorize('view', $event);
 
-        return new EventResource(
-            $event->load(['location', 'customer', 'setlist.items.musicNumber', 'invitations.user', 'creator'])
-        );
+        abort_unless($event->organisation_id === $organisation->id, 404);
+
+        return $this->success(new EventResource($event->load('organisation')));
     }
 
-    /**
-     * Update the specified event.
-     */
-    public function update(UpdateEventRequest $request, Event $event): JsonResponse
+    public function store(StoreEventRequest $request, Organisation $organisation): JsonResponse
+    {
+        Gate::authorize('create', [Event::class, $organisation]);
+
+        $event = $organisation->events()->create($request->validated());
+
+        return $this->created(new EventResource($event));
+    }
+
+    public function update(UpdateEventRequest $request, Organisation $organisation, Event $event): JsonResponse
     {
         Gate::authorize('update', $event);
 
+        abort_unless($event->organisation_id === $organisation->id, 404);
+
         $event->update($request->validated());
 
-        return $this->success(
-            new EventResource($event->load(['location', 'customer'])),
-            'Event updated successfully'
-        );
-    }
-
-    /**
-     * Remove the specified event.
-     */
-    public function destroy(Event $event): JsonResponse
-    {
-        Gate::authorize('delete', $event);
-
-        $event->delete();
-
-        return $this->success(null, 'Event deleted successfully');
-    }
-
-    /**
-     * Invite members to an event.
-     */
-    public function invite(InviteToEventRequest $request, Event $event): JsonResponse
-    {
-        Gate::authorize('invite', $event);
-
-        $userIds = $request->validated()['user_ids'];
-        $invitedCount = 0;
-
-        foreach ($userIds as $userId) {
-            // Skip if already invited
-            if ($event->invitations()->where('user_id', $userId)->exists()) {
-                continue;
-            }
-
-            $event->invitations()->create([
-                'user_id' => $userId,
-                'rsvp_status' => RsvpStatus::Pending,
-                'invited_at' => now(),
-            ]);
-
-            $invitedCount++;
-        }
-
-        return $this->success(
-            EventInvitationResource::collection(
-                $event->invitations()->with('user')->get()
-            ),
-            "{$invitedCount} member(s) invited successfully"
-        );
-    }
-
-    /**
-     * Respond to an event invitation (RSVP).
-     */
-    public function rsvp(RsvpEventRequest $request, Event $event): JsonResponse
-    {
-        Gate::authorize('rsvp', $event);
-
-        $invitation = EventInvitation::where('event_id', $event->id)
-            ->where('user_id', auth()->id())
-            ->firstOrFail();
-
-        $data = $request->validated();
-
-        $invitation->update([
-            'rsvp_status' => $data['status'],
-            'rsvp_note' => $data['note'] ?? null,
-            'rsvp_responded_at' => now(),
-        ]);
-
-        return $this->success(
-            new EventInvitationResource($invitation->load('user')),
-            'RSVP updated successfully'
-        );
+        return $this->success(new EventResource($event->fresh()));
     }
 }
-

api/app/Http/Controllers/Api/V1/LoginController.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Api\V1\LoginRequest;
+use App\Http\Resources\Api\V1\UserResource;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Auth;
+
+final class LoginController extends Controller
+{
+    public function __invoke(LoginRequest $request): JsonResponse
+    {
+        if (!Auth::attempt($request->only('email', 'password'))) {
+            return $this->unauthorized('Invalid credentials');
+        }
+
+        $user = Auth::user()->load(['organisations', 'roles']);
+        $token = $user->createToken('auth-token')->plainTextToken;
+
+        return $this->success([
+            'user' => new UserResource($user),
+            'token' => $token,
+        ], 'Login successful');
+    }
+}

api/app/Http/Controllers/Api/V1/LogoutController.php

@@ -0,0 +1,19 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+final class LogoutController extends Controller
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $request->user()->currentAccessToken()->delete();
+
+        return $this->success(null, 'Logged out successfully');
+    }
+}

api/app/Http/Controllers/Api/V1/MeController.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Resources\Api\V1\UserResource;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+final class MeController extends Controller
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $user = $request->user()->load(['organisations', 'events']);
+
+        return $this->success(new UserResource($user));
+    }
+}

api/app/Http/Controllers/Api/V1/OrganisationController.php

@@ -0,0 +1,55 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Api\V1\StoreOrganisationRequest;
+use App\Http\Requests\Api\V1\UpdateOrganisationRequest;
+use App\Http\Resources\Api\V1\OrganisationResource;
+use App\Models\Organisation;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Illuminate\Support\Facades\Gate;
+
+final class OrganisationController extends Controller
+{
+    public function index(): AnonymousResourceCollection
+    {
+        Gate::authorize('viewAny', Organisation::class);
+
+        $user = auth()->user();
+
+        $organisations = $user->hasRole('super_admin')
+            ? Organisation::query()->paginate()
+            : $user->organisations()->paginate();
+
+        return OrganisationResource::collection($organisations);
+    }
+
+    public function show(Organisation $organisation): JsonResponse
+    {
+        Gate::authorize('view', $organisation);
+
+        return $this->success(new OrganisationResource($organisation));
+    }
+
+    public function store(StoreOrganisationRequest $request): JsonResponse
+    {
+        Gate::authorize('create', Organisation::class);
+
+        $organisation = Organisation::create($request->validated());
+
+        return $this->created(new OrganisationResource($organisation));
+    }
+
+    public function update(UpdateOrganisationRequest $request, Organisation $organisation): JsonResponse
+    {
+        Gate::authorize('update', $organisation);
+
+        $organisation->update($request->validated());
+
+        return $this->success(new OrganisationResource($organisation->fresh()));
+    }
+}