\n //\n plugin(({addVariant}) => addVariant(\"phx-click-loading\", [\".phx-click-loading&\", \".phx-click-loading &\"])),\n plugin(({addVariant}) => addVariant(\"phx-submit-loading\", [\".phx-submit-loading&\", \".phx-submit-loading &\"])),\n plugin(({addVariant}) => addVariant(\"phx-change-loading\", [\".phx-change-loading&\", \".phx-change-loading &\"])),\n\n // Embeds Heroicons (https://heroicons.com) into your app.css bundle\n // See your `CoreComponents.icon/1` for more information.\n //\n plugin(function({matchComponents, theme}) {\n let iconsDir = path.join(__dirname, \"../deps/heroicons/optimized\")\n let values = {}\n let icons = [\n [\"\", \"/24/outline\"],\n [\"-solid\", \"/24/solid\"],\n [\"-mini\", \"/20/solid\"],\n [\"-micro\", \"/16/solid\"]\n ]\n icons.forEach(([suffix, dir]) => {\n fs.readdirSync(path.join(iconsDir, dir)).forEach(file => {\n let name = path.basename(file, \".svg\") + suffix\n values[name] = {name, fullPath: path.join(iconsDir, dir, file)}\n })\n })\n matchComponents({\n \"hero\": ({name, fullPath}) => {\n let content = fs.readFileSync(fullPath).toString().replace(/\\r?\\n|\\r/g, \"\")\n let size = theme(\"spacing.6\")\n if (name.endsWith(\"-mini\")) {\n size = theme(\"spacing.5\")\n } else if (name.endsWith(\"-micro\")) {\n size = theme(\"spacing.4\")\n }\n return {\n [`--hero-${name}`]: `url('data:image/svg+xml;utf8,${content}')`,\n \"-webkit-mask\": `var(--hero-${name})`,\n \"mask\": `var(--hero-${name})`,\n \"mask-repeat\": \"no-repeat\",\n \"background-color\": \"currentColor\",\n \"vertical-align\": \"middle\",\n \"display\": \"inline-block\",\n \"width\": size,\n \"height\": size\n }\n }\n }, {values})\n })\n ]\n}\n"
},
{
"path": "assets/vendor/topbar.js",
"content": "/**\n * @license MIT\n * topbar 2.0.0, 2023-02-04\n * https://buunguyen.github.io/topbar\n * Copyright (c) 2021 Buu Nguyen\n */\n(function (window, document) {\n \"use strict\";\n\n // https://gist.github.com/paulirish/1579671\n (function () {\n var lastTime = 0;\n var vendors = [\"ms\", \"moz\", \"webkit\", \"o\"];\n for (var x = 0; x < vendors.length && !window.requestAnimationFrame; ++x) {\n window.requestAnimationFrame =\n window[vendors[x] + \"RequestAnimationFrame\"];\n window.cancelAnimationFrame =\n window[vendors[x] + \"CancelAnimationFrame\"] ||\n window[vendors[x] + \"CancelRequestAnimationFrame\"];\n }\n if (!window.requestAnimationFrame)\n window.requestAnimationFrame = function (callback, element) {\n var currTime = new Date().getTime();\n var timeToCall = Math.max(0, 16 - (currTime - lastTime));\n var id = window.setTimeout(function () {\n callback(currTime + timeToCall);\n }, timeToCall);\n lastTime = currTime + timeToCall;\n return id;\n };\n if (!window.cancelAnimationFrame)\n window.cancelAnimationFrame = function (id) {\n clearTimeout(id);\n };\n })();\n\n var canvas,\n currentProgress,\n showing,\n progressTimerId = null,\n fadeTimerId = null,\n delayTimerId = null,\n addEvent = function (elem, type, handler) {\n if (elem.addEventListener) elem.addEventListener(type, handler, false);\n else if (elem.attachEvent) elem.attachEvent(\"on\" + type, handler);\n else elem[\"on\" + type] = handler;\n },\n options = {\n autoRun: true,\n barThickness: 3,\n barColors: {\n 0: \"rgba(26, 188, 156, .9)\",\n \".25\": \"rgba(52, 152, 219, .9)\",\n \".50\": \"rgba(241, 196, 15, .9)\",\n \".75\": \"rgba(230, 126, 34, .9)\",\n \"1.0\": \"rgba(211, 84, 0, .9)\",\n },\n shadowBlur: 10,\n shadowColor: \"rgba(0, 0, 0, .6)\",\n className: null,\n },\n repaint = function () {\n canvas.width = window.innerWidth;\n canvas.height = options.barThickness * 5; // need space for shadow\n\n var ctx = canvas.getContext(\"2d\");\n ctx.shadowBlur = options.shadowBlur;\n ctx.shadowColor = options.shadowColor;\n\n var lineGradient = ctx.createLinearGradient(0, 0, canvas.width, 0);\n for (var stop in options.barColors)\n lineGradient.addColorStop(stop, options.barColors[stop]);\n ctx.lineWidth = options.barThickness;\n ctx.beginPath();\n ctx.moveTo(0, options.barThickness / 2);\n ctx.lineTo(\n Math.ceil(currentProgress * canvas.width),\n options.barThickness / 2\n );\n ctx.strokeStyle = lineGradient;\n ctx.stroke();\n },\n createCanvas = function () {\n canvas = document.createElement(\"canvas\");\n var style = canvas.style;\n style.position = \"fixed\";\n style.top = style.left = style.right = style.margin = style.padding = 0;\n style.zIndex = 100001;\n style.display = \"none\";\n if (options.className) canvas.classList.add(options.className);\n document.body.appendChild(canvas);\n addEvent(window, \"resize\", repaint);\n },\n topbar = {\n config: function (opts) {\n for (var key in opts)\n if (options.hasOwnProperty(key)) options[key] = opts[key];\n },\n show: function (delay) {\n if (showing) return;\n if (delay) {\n if (delayTimerId) return;\n delayTimerId = setTimeout(() => topbar.show(), delay);\n } else {\n showing = true;\n if (fadeTimerId !== null) window.cancelAnimationFrame(fadeTimerId);\n if (!canvas) createCanvas();\n canvas.style.opacity = 1;\n canvas.style.display = \"block\";\n topbar.progress(0);\n if (options.autoRun) {\n (function loop() {\n progressTimerId = window.requestAnimationFrame(loop);\n topbar.progress(\n \"+\" + 0.05 * Math.pow(1 - Math.sqrt(currentProgress), 2)\n );\n })();\n }\n }\n },\n progress: function (to) {\n if (typeof to === \"undefined\") return currentProgress;\n if (typeof to === \"string\") {\n to =\n (to.indexOf(\"+\") >= 0 || to.indexOf(\"-\") >= 0\n ? currentProgress\n : 0) + parseFloat(to);\n }\n currentProgress = to > 1 ? 1 : to;\n repaint();\n return currentProgress;\n },\n hide: function () {\n clearTimeout(delayTimerId);\n delayTimerId = null;\n if (!showing) return;\n showing = false;\n if (progressTimerId != null) {\n window.cancelAnimationFrame(progressTimerId);\n progressTimerId = null;\n }\n (function loop() {\n if (topbar.progress(\"+.1\") >= 1) {\n canvas.style.opacity -= 0.05;\n if (canvas.style.opacity <= 0.05) {\n canvas.style.display = \"none\";\n fadeTimerId = null;\n return;\n }\n }\n fadeTimerId = window.requestAnimationFrame(loop);\n })();\n },\n };\n\n if (typeof module === \"object\" && typeof module.exports === \"object\") {\n module.exports = topbar;\n } else if (typeof define === \"function\" && define.amd) {\n define(function () {\n return topbar;\n });\n } else {\n this.topbar = topbar;\n }\n}.call(this, window, document));\n"
},
{
"path": "config/config.exs",
"content": "# This file is responsible for configuring your application\n# and its dependencies with the aid of the Config module.\n#\n# This configuration file is loaded before any dependency and\n# is restricted to this project.\n\n# General application configuration\nimport Config\n\n# config :soundboard,\n# ecto_repos: [Soundboard.Repo],\n# generators: [timestamp_type: :utc_datetime],\n# token: System.get_env(\"DISCORD_TOKEN\")\n\n# EDA config shared across environments.\n# Prefix commands like `!join` require :message_content intent.\nconfig :eda,\n intents: [:guilds, :guild_messages, :guild_voice_states, :message_content],\n consumer: Soundboard.Discord.Consumer,\n gateway_encoding: :etf,\n dave: true\n\n# Configures the endpoint\nconfig :soundboard, SoundboardWeb.Endpoint,\n url: [host: \"localhost\", port: 4000],\n adapter: Bandit.PhoenixAdapter,\n render_errors: [\n formats: [html: SoundboardWeb.ErrorHTML, json: SoundboardWeb.ErrorJSON],\n layout: false\n ],\n pubsub_server: Soundboard.PubSub,\n live_view: [signing_salt: \"9gxiIiqP\"]\n\n# Configure esbuild (the version is required)\nconfig :esbuild,\n version: \"0.17.11\",\n soundboard: [\n args:\n ~w(js/app.js --bundle --target=es2017 --outdir=../priv/static/assets --external:/fonts/* --external:/images/*),\n cd: Path.expand(\"../assets\", __DIR__),\n env: %{\"NODE_PATH\" => Path.expand(\"../deps\", __DIR__)}\n ]\n\n# Configure tailwind (the version is required)\nconfig :tailwind,\n version: \"3.4.3\",\n soundboard: [\n args: ~w(\n --config=tailwind.config.js\n --input=css/app.css\n --output=../priv/static/assets/app.css\n ),\n cd: Path.expand(\"../assets\", __DIR__)\n ]\n\n# Use Jason for JSON parsing in Phoenix\nconfig :phoenix, :json_library, Jason\n\n# Add MIME types for audio files\nconfig :mime, :types, %{\n \"audio/mpeg\" => [\"mp3\"],\n \"audio/ogg\" => [\"ogg\"],\n \"audio/wav\" => [\"wav\"],\n \"audio/x-m4a\" => [\"m4a\"]\n}\n\n# Import environment specific config. This must remain at the bottom\n# of this file so it overrides the configuration defined above.\nimport_config \"#{config_env()}.exs\"\n\n# Add this near the top of the file\nconfig :soundboard,\n ecto_repos: [Soundboard.Repo]\n\n# Add this somewhere in the file\nconfig :soundboard, Soundboard.Repo,\n database: \"priv/static/uploads/database.db\",\n pool_size: 5\n\nconfig :phoenix_live_view,\n flash_timeout: 3000\n\nconfig :soundboard, SoundboardWeb.Presence, pubsub_server: Soundboard.PubSub\n\n# Optional voice startup probe (disabled by default)\nconfig :soundboard,\n voice_rtp_probe: false,\n voice_rtp_probe_timeout_ms: 6_000\n\n# Add this with your other configs\nconfig :ueberauth, Ueberauth,\n providers: [\n discord: {Ueberauth.Strategy.Discord, [default_scope: \"identify\"]}\n ]\n"
},
{
"path": "config/dev.exs",
"content": "import Config\n\nconfig :soundboard, Soundboard.Repo,\n database: \"database.db\",\n adapter: Ecto.Adapters.SQLite3\n\ngenerate_secret_key_base = fn ->\n Base.encode64(:crypto.strong_rand_bytes(64), padding: false)\nend\n\nderive_secret_key_base = fn value ->\n :crypto.hash(:sha512, value)\n |> Base.encode64(padding: false)\nend\n\nsecret_key_base =\n case System.get_env(\"SECRET_KEY_BASE\") do\n value when is_binary(value) and byte_size(value) >= 64 ->\n value\n\n value when is_binary(value) ->\n derive_secret_key_base.(value)\n\n _ ->\n generate_secret_key_base.()\n end\n\nconfig :soundboard, SoundboardWeb.Endpoint,\n http: [ip: {127, 0, 0, 1}, port: 4000],\n url: [host: \"localhost\", port: 4000, scheme: \"http\"],\n check_origin: false,\n code_reloader: true,\n debug_errors: true,\n secret_key_base: secret_key_base,\n watchers: [\n esbuild: {Esbuild, :install_and_run, [:soundboard, ~w(--sourcemap=inline --watch)]},\n tailwind: {Tailwind, :install_and_run, [:soundboard, ~w(--watch)]}\n ]\n\nconfig :soundboard, SoundboardWeb.Endpoint,\n live_reload: [\n patterns: [\n ~r\"priv/static/(?!uploads/).*(js|css|png|jpeg|jpg|gif|svg)$\",\n ~r\"priv/gettext/.*(po)$\",\n ~r\"lib/soundboard_web/(controllers|live|components)/.*(ex|heex)$\"\n ]\n ]\n\nconfig :soundboard, dev_routes: true\nconfig :logger, :console, format: \"[$level] $message\\n\"\nconfig :phoenix, :stacktrace_depth, 20\nconfig :phoenix, :plug_init_mode, :runtime\n\nconfig :phoenix_live_view,\n debug_heex_annotations: true,\n enable_expensive_runtime_checks: true\n\nconfig :swoosh, :api_client, false\nconfig :soundboard, env: :dev\n"
},
{
"path": "config/prod.exs",
"content": "import Config\n\n# Note we also include the path to a cache manifest\n# containing the digested version of static files. This\n# manifest is generated by the `mix assets.deploy` task,\n# which you should run after static files are built and\n# before starting your production server.\nconfig :soundboard, SoundboardWeb.Endpoint,\n cache_static_manifest: \"priv/static/cache_manifest.json\"\n\nconfig :soundboard, Soundboard.Repo,\n database: \"/app/priv/static/uploads/soundboard_prod.db\",\n pool_size: 5,\n stacktrace: true,\n show_sensitive_data_on_connection_error: true\n\n# Ensure the uploads directory exists\nconfig :soundboard,\n upload_directory: \"/app/priv/static/uploads\"\n\nconfig :soundboard,\n env: :prod\n\n# Configure logging for production - enable debug level for voice troubleshooting\nconfig :logger, level: :debug\n"
},
{
"path": "config/runtime.exs",
"content": "import Config\nimport Dotenvy\n\nenv_dir_prefix = System.get_env(\"RELEASE_ROOT\") || Path.expand(\".\")\n\nsource!([\n Path.absname(\".env\", env_dir_prefix),\n Path.absname(\".#{config_env()}.env\", env_dir_prefix),\n Path.absname(\".#{config_env()}.overrides.env\", env_dir_prefix),\n System.get_env()\n])\n\n# config/runtime.exs is executed for all environments, including\n# during releases. It is executed after compilation and before the\n# system starts, so it is typically used to load production configuration\n# and secrets from environment variables or elsewhere. Do not define\n# any compile-time configuration in here, as it won't be applied.\n\n# ## Using releases\n#\n# If you use `mix release`, you need to explicitly enable the server\n# by passing the PHX_SERVER=true when you start it:\n#\n# PHX_SERVER=true bin/soundboard start\n#\n# Alternatively, you can use `mix phx.gen.release` to generate a `bin/server`\n# script that automatically sets the env var above.\nif env!(\"PHX_SERVER\", :boolean, false) do\n config :soundboard, SoundboardWeb.Endpoint, server: true\nend\n\nif config_env() == :dev do\n host = env!(\"PHX_HOST\", :string!, \"localhost:4000\")\n scheme = env!(\"SCHEME\", :string!, \"http\")\n port = env!(\"PORT\", :integer, 4000)\n callback_url = \"#{scheme}://#{host}/auth/discord/callback\"\n discord_token = env!(\"DISCORD_TOKEN\", :string!, nil)\n client_id = env!(\"DISCORD_CLIENT_ID\", :string!, nil)\n client_secret = env!(\"DISCORD_CLIENT_SECRET\", :string!, nil)\n eda_dave = env!(\"EDA_DAVE\", :boolean, true)\n voice_rtp_probe = env!(\"VOICE_RTP_PROBE\", :boolean, false)\n voice_rtp_probe_timeout_ms = env!(\"VOICE_RTP_PROBE_TIMEOUT_MS\", :integer, 6_000)\n\n secret_key_base =\n case env!(\"SECRET_KEY_BASE\", :string!, nil) do\n value when is_binary(value) and byte_size(value) >= 64 ->\n value\n\n value when is_binary(value) ->\n :crypto.hash(:sha512, value)\n |> Base.encode64(padding: false)\n\n _ ->\n nil\n end\n\n bind_ip =\n case env!(\"BIND_IP\", :string!, \"127.0.0.1\")\n |> String.to_charlist()\n |> :inet.parse_address() do\n {:ok, ip_tuple} -> ip_tuple\n _ -> {127, 0, 0, 1}\n end\n\n endpoint_overrides = [\n url: [host: host, port: port, scheme: scheme],\n http: [ip: bind_ip, port: port]\n ]\n\n endpoint_overrides =\n if is_binary(secret_key_base) do\n Keyword.put(endpoint_overrides, :secret_key_base, secret_key_base)\n else\n endpoint_overrides\n end\n\n config :soundboard, SoundboardWeb.Endpoint, endpoint_overrides\n\n config :ueberauth, Ueberauth.Strategy.Discord.OAuth,\n client_id: client_id,\n client_secret: client_secret,\n redirect_uri: callback_url\n\n ffmpeg_available = not is_nil(System.find_executable(\"ffmpeg\"))\n\n unless ffmpeg_available do\n IO.warn(\n \"ffmpeg not found in PATH. Voice playback features will be unavailable until ffmpeg is installed.\"\n )\n end\n\n required_guild_id = env!(\"DISCORD_REQUIRED_GUILD_ID\", :string, nil)\n\n required_role_ids =\n \"DISCORD_REQUIRED_ROLE_IDS\"\n |> env!(:string, \"\")\n |> String.split(\",\", trim: true)\n\n role_recheck_interval_seconds = env!(\"DISCORD_ROLE_RECHECK_INTERVAL_SECONDS\", :integer, 900)\n\n config :soundboard,\n discord_token: discord_token,\n voice_rtp_probe: voice_rtp_probe,\n voice_rtp_probe_timeout_ms: voice_rtp_probe_timeout_ms,\n ffmpeg_available: ffmpeg_available,\n required_guild_id: required_guild_id,\n required_role_ids: required_role_ids,\n role_recheck_interval_seconds: role_recheck_interval_seconds\n\n config :eda,\n token: discord_token,\n dave: eda_dave\nend\n\n# Allow build tooling to opt-out to avoid requiring secrets during image builds.\nif config_env() == :prod and is_nil(env!(\"SKIP_RUNTIME_CONFIG\", :string, nil)) do\n port = env!(\"PORT\", :integer, 4000)\n\n # Replace the database_url section with SQLite configuration\n database_path = Path.join(:code.priv_dir(:soundboard), \"static/uploads/soundboard_prod.db\")\n\n config :soundboard, Soundboard.Repo,\n database: database_path,\n adapter: Ecto.Adapters.SQLite3,\n pool_size: env!(\"POOL_SIZE\", :integer, 10)\n\n # The secret key base is used to sign/encrypt cookies and other secrets.\n secret_key_base =\n case env!(\"SECRET_KEY_BASE\", :string!, nil) do\n value when is_binary(value) ->\n value\n\n _ ->\n case env!(\"SECRET_KEY_BASE_FILE\", :string!, nil) do\n file when is_binary(file) ->\n case File.read(file) do\n {:ok, key} ->\n String.trim(key)\n\n {:error, reason} ->\n raise \"\"\"\n could not read SECRET_KEY_BASE_FILE (#{file}): #{inspect(reason)}\n \"\"\"\n end\n\n _ ->\n raise \"\"\"\n environment variable SECRET_KEY_BASE is missing.\n Provide it via your environment (recommended) or set SECRET_KEY_BASE_FILE to a file path containing the key.\n Generate one with: mix phx.gen.secret OR openssl rand -base64 48\n \"\"\"\n end\n end\n\n host = env!(\"PHX_HOST\", :string!)\n scheme = env!(\"SCHEME\", :string!, \"https\")\n callback_url = \"#{scheme}://#{host}/auth/discord/callback\"\n\n # Configure endpoint first\n config :soundboard, SoundboardWeb.Endpoint,\n # In prod, PHX_HOST represents the externally visible host. Do not append\n # the app's internal listen port unless the host itself already includes one.\n url: [\n scheme: scheme,\n host: host,\n port: nil\n ],\n http: [\n ip: {0, 0, 0, 0},\n port: port\n ],\n static_url: [\n host: host,\n port: nil\n ],\n check_origin: false,\n force_ssl: scheme == \"https\",\n secret_key_base: secret_key_base,\n session: [\n store: :cookie,\n key: \"_soundboard_key\",\n signing_salt: secret_key_base\n ]\n\n # Configure Ueberauth\n config :ueberauth, Ueberauth,\n providers: [\n discord: {Ueberauth.Strategy.Discord, [default_scope: \"identify\"]}\n ]\n\n # Configure Discord OAuth\n config :ueberauth, Ueberauth.Strategy.Discord.OAuth,\n client_id: env!(\"DISCORD_CLIENT_ID\", :string!),\n client_secret: env!(\"DISCORD_CLIENT_SECRET\", :string!),\n redirect_uri: callback_url\n\n # Configure Discord bot token\n discord_token = env!(\"DISCORD_TOKEN\", :string!)\n\n # Store token for application use (bot will fetch it from here)\n voice_rtp_probe = env!(\"VOICE_RTP_PROBE\", :boolean, false)\n voice_rtp_probe_timeout_ms = env!(\"VOICE_RTP_PROBE_TIMEOUT_MS\", :integer, 6_000)\n eda_dave = env!(\"EDA_DAVE\", :boolean, true)\n\n ffmpeg_available = not is_nil(System.find_executable(\"ffmpeg\"))\n\n unless ffmpeg_available do\n IO.warn(\n \"ffmpeg not found in PATH. Voice playback features will be unavailable until ffmpeg is installed.\"\n )\n end\n\n required_guild_id = env!(\"DISCORD_REQUIRED_GUILD_ID\", :string, nil)\n\n required_role_ids =\n \"DISCORD_REQUIRED_ROLE_IDS\"\n |> env!(:string, \"\")\n |> String.split(\",\", trim: true)\n\n role_recheck_interval_seconds = env!(\"DISCORD_ROLE_RECHECK_INTERVAL_SECONDS\", :integer, 900)\n\n config :soundboard,\n discord_token: discord_token,\n voice_rtp_probe: voice_rtp_probe,\n voice_rtp_probe_timeout_ms: voice_rtp_probe_timeout_ms,\n ffmpeg_available: ffmpeg_available,\n required_guild_id: required_guild_id,\n required_role_ids: required_role_ids,\n role_recheck_interval_seconds: role_recheck_interval_seconds\n\n config :eda,\n token: discord_token,\n dave: eda_dave\n\n # Configure logger for production\n config :logger,\n # Set minimum log level to debug to see IO.puts\n level: :debug,\n compile_time_purge_matching: [\n # Don't purge debug logs\n [level_lower_than: :debug]\n ]\n\n config :logger, :console,\n format: \"$time $metadata[$level] $message\\n\",\n metadata: [:request_id, :error],\n # Enable colors for better visibility\n colors: [enabled: true]\n\n # Keep stacktraces in production for better error reporting\n config :phoenix,\n stacktrace_depth: 20,\n plug_init_mode: :runtime\n\n config :soundboard, :env, :prod\nend\n"
},
{
"path": "config/test.exs",
"content": "import Config\n\n# Configure your database\n#\n# The MIX_TEST_PARTITION environment variable can be used\n# to provide built-in test partitioning in CI environment.\n# Run `mix help test` for more information.\nconfig :soundboard, Soundboard.Repo,\n adapter: Ecto.Adapters.SQLite3,\n database: Path.expand(\"../soundboard_test.db\", Path.dirname(__ENV__.file)),\n pool: Ecto.Adapters.SQL.Sandbox,\n pool_size: 1,\n busy_timeout: 5000,\n journal_mode: :wal\n\n# We don't run a server during test. If one is required,\n# you can enable the server option below.\ngenerate_secret_key_base = fn ->\n Base.encode64(:crypto.strong_rand_bytes(64), padding: false)\nend\n\nderive_secret_key_base = fn value ->\n :crypto.hash(:sha512, value)\n |> Base.encode64(padding: false)\nend\n\nsecret_key_base =\n case System.get_env(\"SECRET_KEY_BASE_TEST\") do\n value when is_binary(value) and byte_size(value) >= 64 ->\n value\n\n value when is_binary(value) ->\n derive_secret_key_base.(value)\n\n _ ->\n generate_secret_key_base.()\n end\n\nconfig :soundboard, SoundboardWeb.Endpoint,\n http: [ip: {127, 0, 0, 1}, port: 4002],\n secret_key_base: secret_key_base,\n server: false\n\n# Print only warnings and errors during test\nconfig :logger, level: :warning\n# Configure the console backend\nconfig :logger, :console,\n format: \"$time $metadata[$level] $message\\n\",\n metadata: [:request_id, :file, :line]\n\n# Initialize plugs at runtime for faster test compilation\nconfig :phoenix, :plug_init_mode, :runtime\n\n# Enable helpful, but potentially expensive runtime checks\nconfig :phoenix_live_view,\n enable_expensive_runtime_checks: true\n\nconfig :soundboard, :sql_sandbox, true\n\nconfig :soundboard, env: :test\n\nconfig :soundboard, Soundboard.AudioPlayer, voice_maintenance_enabled: false\n\nconfig :soundboard, Soundboard.PubSub,\n adapter: Phoenix.PubSub.PG2,\n name: Soundboard.PubSub\n\nconfig :eda,\n token: nil,\n consumer: nil,\n dave: false\n"
},
{
"path": "coveralls.json",
"content": "{\n \"skip_files\": [\n \"lib/soundboard_web/presence.ex\",\n \"lib/soundboard_web/telemetry.ex\",\n \"lib/soundboard_web/gettext.ex\",\n \"lib/soundboard_web/endpoint.ex\",\n \"lib/soundboard_web/router.ex\",\n \"lib/soundboard_web/components/\",\n \"lib/soundboard_web/live/\",\n \"lib/soundboard_web/audio_player.ex\",\n \"lib/soundboard_web/discord_handler.ex\",\n \"lib/soundboard_web/controllers/upload_controller.ex\",\n \"lib/soundboard_web/controllers/error_html.ex\",\n \"lib/soundboard_web/controllers/error_json.ex\",\n \"lib/soundboard_web/eda_consumer.ex\",\n \"lib/soundboard/discord/guild_cache.ex\",\n \"lib/soundboard/discord/message.ex\",\n \"lib/soundboard/discord/self.ex\",\n \"lib/soundboard/discord/voice.ex\",\n \"lib/soundboard/audio_player.ex\",\n \"lib/soundboard/audio_player/playback_engine.ex\",\n \"lib/soundboard/discord/handler/voice_runtime.ex\",\n \"lib/soundboard/release.ex\",\n \"lib/soundboard/repo.ex\",\n \"lib/soundboard/application.ex\",\n \"lib/soundboard_web.ex\",\n \"test\"\n ]\n}\n"
},
{
"path": "docker-compose.yml",
"content": "services:\n soundbored:\n image: christom/soundbored:latest\n ports:\n - \"127.0.0.1:4000:4000\"\n env_file: .env\n volumes:\n - soundbored_data:/app/priv/static/uploads\n # the below can be added for improved security\n - type: tmpfs\n target: /tmp/mix_pubsub\n tmpfs:\n mode: 0777\n user: 9999:9999 # make sure this user has permissions on the soundbored_data volume\n read_only: true\n environment:\n TMPDIR: /tmp/mix_pubsub\n SECRET_KEY_BASE_FILE: /run/secrets/soundbored_secret_key_base\n secrets:\n - soundbored_secret_key_base\n\nvolumes:\n soundbored_data:\n\nsecrets:\n soundbored_secret_key_base:\n # this file should contain securely-generated random data (see README.md)\n # and only be readable by root or the user running the docker daemon\n file: ./secret_key_base.txt\n"
},
{
"path": "docs/plans/discord-role-gated-access.md",
"content": "# Discord Role-Gated Access Implementation Plan\n\n**Status:** Complete\n**Spec:** `docs/specs/discord-role-gated-access.md`\n\n**Goal:** Restrict web access to Discord users who hold a configured role in a configured guild, with verification at login and periodic re-checks.\n\n---\n\n## Tasks\n\n### Task 1: Config plumbing ✓\nAdded `DISCORD_REQUIRED_GUILD_ID`, `DISCORD_REQUIRED_ROLE_IDS`, and `DISCORD_ROLE_RECHECK_INTERVAL_SECONDS` to `config/runtime.exs` (both `:dev` and `:prod` blocks). Updated `.env.example`.\n\n### Task 2: Soundboard.Discord.RoleChecker ✓\nNew module at `lib/soundboard/discord/role_checker.ex`. Exposes `feature_enabled?/0` and `authorized?/1`. Wraps `EDA.API.Member.get/2`, fails closed on any error.\nTests: `test/soundboard/discord/role_checker_test.exs` (8 tests).\n\n### Task 3: Login-time role check in AuthController ✓\n`AuthController.callback/2` calls `RoleChecker.authorized?/1` before `find_or_create_user`. Stores `:roles_verified_at` in session on success. No DB write on failure.\nTests: `test/soundboard_web/controllers/auth_controller_test.exs` (updated).\n\n### Task 4: SoundboardWeb.Plugs.RoleCheck ✓\nNew plug at `lib/soundboard_web/plugs/role_check.ex`. Re-verifies role membership when session timestamp is missing or stale. Clears session and halts on unauthorized.\nTests: `test/soundboard_web/plugs/role_check_test.exs` (6 tests).\n\n### Task 5: Wire plug into router ✓\nAdded `:require_role_check` pipeline to `lib/soundboard_web/router.ex`, inserted into both protected scopes after `:ensure_authenticated_user`.\n"
},
{
"path": "docs/plans/discord-role-gated-access.md.tasks.json",
"content": "{\n \"planPath\": \"docs/plans/discord-role-gated-access.md\",\n \"tasks\": [\n {\n \"id\": 2,\n \"subject\": \"Task 1: Add config plumbing for required guild/role env vars\",\n \"status\": \"completed\",\n \"description\": \"**Goal:** New env vars are read by runtime.exs and stored under :soundboard app config keys.\\n\\n**Files:** config/runtime.exs, .env.example\\n\\n**Verify:** mix compile --warnings-as-errors\\n\\n```json:metadata\\n{\\\"files\\\": [\\\"config/runtime.exs\\\", \\\".env.example\\\"], \\\"verifyCommand\\\": \\\"mix compile --warnings-as-errors\\\", \\\"acceptanceCriteria\\\": [\\\"required_guild_id defaults nil\\\", \\\"required_role_ids defaults []\\\", \\\"role_recheck_interval_seconds defaults 900\\\"]}\\n```\"\n },\n {\n \"id\": 3,\n \"subject\": \"Task 2: Implement Soundboard.Discord.RoleChecker with TDD\",\n \"status\": \"completed\",\n \"blockedBy\": [2],\n \"description\": \"**Goal:** New module wraps EDA.API.Member.get/2 with feature_enabled?/0 and authorized?/1.\\n\\n**Files:** lib/soundboard/discord/role_checker.ex, test/soundboard/discord/role_checker_test.exs\\n\\n**Verify:** mix test test/soundboard/discord/role_checker_test.exs\\n\\n```json:metadata\\n{\\\"files\\\": [\\\"lib/soundboard/discord/role_checker.ex\\\", \\\"test/soundboard/discord/role_checker_test.exs\\\"], \\\"verifyCommand\\\": \\\"mix test test/soundboard/discord/role_checker_test.exs\\\", \\\"acceptanceCriteria\\\": [\\\"feature_enabled? correct\\\", \\\"authorized? short-circuits when disabled\\\", \\\"matches any required role\\\", \\\"false on error\\\"]}\\n```\"\n },\n {\n \"id\": 4,\n \"subject\": \"Task 3: Add login-time role check to AuthController\",\n \"status\": \"completed\",\n \"blockedBy\": [3],\n \"description\": \"**Goal:** OAuth callback verifies role membership before creating local user. Stores :user_id and :roles_verified_at on success.\\n\\n**Files:** lib/soundboard_web/controllers/auth_controller.ex, test/soundboard_web/controllers/auth_controller_test.exs\\n\\n**Verify:** mix test test/soundboard_web/controllers/auth_controller_test.exs\\n\\n```json:metadata\\n{\\\"files\\\": [\\\"lib/soundboard_web/controllers/auth_controller.ex\\\", \\\"test/soundboard_web/controllers/auth_controller_test.exs\\\"], \\\"verifyCommand\\\": \\\"mix test test/soundboard_web/controllers/auth_controller_test.exs\\\", \\\"acceptanceCriteria\\\": [\\\"authorized branch sets both session keys\\\", \\\"unauthorized creates no user record\\\", \\\"existing tests pass\\\"]}\\n```\"\n },\n {\n \"id\": 5,\n \"subject\": \"Task 4: Implement SoundboardWeb.Plugs.RoleCheck with TDD\",\n \"status\": \"completed\",\n \"blockedBy\": [3],\n \"description\": \"**Goal:** Plug runs after ensure_authenticated_user. Re-verifies via RoleChecker when timestamp is stale/missing. Halts and clears session on failure.\\n\\n**Files:** lib/soundboard_web/plugs/role_check.ex, test/soundboard_web/plugs/role_check_test.exs\\n\\n**Verify:** mix test test/soundboard_web/plugs/role_check_test.exs\\n\\n```json:metadata\\n{\\\"files\\\": [\\\"lib/soundboard_web/plugs/role_check.ex\\\", \\\"test/soundboard_web/plugs/role_check_test.exs\\\"], \\\"verifyCommand\\\": \\\"mix test test/soundboard_web/plugs/role_check_test.exs\\\", \\\"acceptanceCriteria\\\": [\\\"pass through cases skip API\\\", \\\"stale/missing triggers re-check\\\", \\\"unauthorized halts and clears\\\"]}\\n```\"\n },\n {\n \"id\": 6,\n \"subject\": \"Task 5: Wire RoleCheck plug into protected pipeline\",\n \"status\": \"completed\",\n \"blockedBy\": [5],\n \"description\": \"**Goal:** Both protected scopes invoke the plug. Full precommit passes.\\n\\n**Files:** lib/soundboard_web/router.ex\\n\\n**Verify:** mix precommit\\n\\n```json:metadata\\n{\\\"files\\\": [\\\"lib/soundboard_web/router.ex\\\"], \\\"verifyCommand\\\": \\\"mix precommit\\\", \\\"acceptanceCriteria\\\": [\\\"pipeline defined\\\", \\\"both scopes wired\\\", \\\"full precommit passes\\\"]}\\n```\"\n }\n ],\n \"lastUpdated\": \"2026-04-27T17:11:00Z\"\n}\n"
},
{
"path": "docs/specs/discord-role-gated-access.md",
"content": "# Spec: Discord Role-Gated Access\n\n**Status:** Implemented\n**Date:** 2026-04-27\n\n---\n\n## Summary\n\nRestrict web access to Discord users who are members of a configured guild **and** hold at least one configured role. Verification happens at OAuth login and is re-checked periodically per session. When unconfigured, behavior is unchanged — anyone who completes Discord OAuth gets in.\n\n---\n\n## Configuration\n\nThree env vars parsed in `config/runtime.exs`:\n\n| Env Var | Type | Default | Description |\n|---|---|---|---|\n| `DISCORD_REQUIRED_GUILD_ID` | string | `nil` | Guild snowflake ID |\n| `DISCORD_REQUIRED_ROLE_IDS` | comma-separated strings | `\"\"` | Role snowflake IDs; user must hold at least one |\n| `DISCORD_ROLE_RECHECK_INTERVAL_SECONDS` | integer | `900` | Seconds between role re-checks per session |\n\nFeature is **enabled** only when both `DISCORD_REQUIRED_GUILD_ID` is set and `DISCORD_REQUIRED_ROLE_IDS` is non-empty. Either unset → feature disabled, no role checks performed.\n\n---\n\n## Behavior\n\n| Scenario | Result |\n|---|---|\n| Feature not configured | Open access — current behavior preserved |\n| User authenticates, has a required role | Logged in normally |\n| User authenticates, lacks required role | No user record created; redirected to `/` with `\"Error signing in\"` flash |\n| Logged-in user loses required role | At next re-check, session cleared, redirected to `/` |\n| Discord API call fails | Fails closed — user denied |\n\nThe flash message is intentionally generic to avoid leaking why access was denied.\n\n---\n\n## Architecture\n\n**`Soundboard.Discord.RoleChecker`** (`lib/soundboard/discord/role_checker.ex`)\nWraps `EDA.API.Member.get/2`. `feature_enabled?/0` checks config; `authorized?/1` short-circuits to `true` when disabled, otherwise checks guild role membership. Fails closed on any error or unexpected API response.\n\n**`SoundboardWeb.AuthController`**\nThe OAuth callback calls `RoleChecker.authorized?/1` before `find_or_create_user`. On success, stores `:user_id` and `:roles_verified_at` in session. On failure, no DB write, generic flash.\n\n**`SoundboardWeb.Plugs.RoleCheck`** (`lib/soundboard_web/plugs/role_check.ex`)\nRuns after `ensure_authenticated_user`. Pass-through when: no `current_user`, feature disabled, or `:roles_verified_at` is fresh. Otherwise re-checks via `RoleChecker.authorized?/1` — updates timestamp on success, clears session and halts on failure.\n\n**Router:** New `:require_role_check` pipeline wired into both protected scopes (`/` and `/uploads`) after `:ensure_authenticated_user`.\n\n---\n\n## Out of Scope\n\n- Per-LiveView/per-action authorization\n- Multi-guild support\n- Re-checking on WebSocket lifecycle (LiveView mount)\n- Dedicated denial page\n"
},
{
"path": "docs/specs/voice-auto-join-idle-leave.md",
"content": "# Spec: Voice Channel Auto-Join on Playback & Idle Auto-Leave\n\n**Status:** Implemented \n**Date:** 2026-04-29 \n**Author:** Justin Hart\n\n---\n\n## Summary\n\nThree related quality-of-life improvements to bot voice channel management, unified under a single `AUTO_JOIN` mode enum:\n\n1. **Auto-join on play** (`play` mode): when a user triggers sound playback from the web UI or API and the bot is not in any voice channel, the bot automatically joins the user's current Discord voice channel before playing.\n2. **Idle auto-leave**: after a configurable period of inactivity (default: 600 seconds), the bot leaves the voice channel. Behavior varies by mode.\n3. **`AUTO_JOIN` mode enum**: replaces the old boolean flag with a three-value enum (`play`, `presence`, `false`) that unifies join and leave behavior into one setting.\n\n---\n\n## Motivation\n\nPreviously, users had to manually type `!join` in Discord before playing sounds from the web UI. This broke the flow: open the soundboard tab, click a sound, nothing happens, switch to Discord, type `!join`, switch back, click again. The bot also had no way to clean up a lingering voice session after everyone drifted away from a channel.\n\nThe original implementation added auto-join on play and a global idle timeout. A follow-up redesign replaced the boolean `AUTO_JOIN` flag with a proper mode enum, aligning join behavior, leave behavior, and idle timeout semantics into a coherent model.\n\n---\n\n## User-Facing Behavior\n\n### `AUTO_JOIN` Modes\n\n| Mode | How bot joins | How bot leaves |\n|---|---|---|\n| `play` (default) | Joins when a sound is played from the web UI or API | Leaves when last user departs **or** after `VOICE_IDLE_TIMEOUT_SECONDS` of no audio (whichever first). If timeout ≤ 0, only leaves when last user departs. |\n| `presence` | Follows users into channels on voice-state updates (existing behavior) | Leaves immediately when last user departs. Idle timeout is **ignored**. |\n| `false` | Manual `!join` only | If timeout > 0: leaves after `VOICE_IDLE_TIMEOUT_SECONDS` of being alone (timer starts when last user departs, cancels if a user rejoins). If timeout ≤ 0: never auto-leaves. |\n\nThe old `AUTO_JOIN=true` maps to `presence`; `AUTO_JOIN=false` (explicit) maps to `false`; unset now defaults to `play`.\n\n### Auto-Join on Play (in `play` mode)\n\n| Situation | Behavior |\n|---|---|\n| Bot has no voice channel, user clicks a sound | Bot joins the user's current voice channel and plays the sound |\n| User is not in any voice channel | Error: \"Bot is not connected to a voice channel. Use !join in Discord first.\" |\n| Actor is `System` (join/leave sounds) | Same error (no Discord identity to look up) |\n| Bot already in a channel | Plays normally, unchanged |\n| Mode is `presence` or `false` | Error (no auto-join, must use `!join`) |\n\n### Idle Timeout Semantics by Mode\n\n| Event | `play` mode | `presence` mode | `false` mode |\n|---|---|---|---|\n| Bot joins a channel | Timer starts (if timeout > 0) | No timer | No timer |\n| `play_sound` cast | Timer resets | No effect | No effect |\n| Last user leaves | Leave immediately | Leave immediately | Start idle timer (if timeout > 0) |\n| User rejoins (bot alone) | N/A | N/A | Cancel idle timer |\n| Idle timer fires | Leave immediately | Never fires | Leave immediately |\n| Bot leaves (any reason) | Timer cancelled | N/A | Timer cancelled |\n\n---\n\n## Architecture & Design\n\n### `AUTO_JOIN` Enum\n\n`AutoJoinPolicy.mode/0` now returns `:presence | :play | false` (the boolean `false`, not an atom, per Elixir convention). Parsing rules:\n\n| `AUTO_JOIN` value | Mode |\n|---|---|\n| not set | `:play` |\n| `play` | `:play` |\n| `presence`, `true`, `1`, `yes` | `:presence` |\n| `false`, `0`, `no`, any other | `false` |\n\n### Auto-Join Flow (play mode only)\n\n```\nWeb UI / API → AudioPlayer.play_sound(name, %User{discord_id: ...})\n │\n ▼ (voice_channel is nil AND mode == :play)\nAudioPlayer.handle_cast({:play_sound, ...}, %{voice_channel: nil})\n │\n ├─ extract discord_id from actor\n │\n ▼\nVoicePresence.find_user_voice_channel(discord_id)\n │ searches all cached guilds via GuildCache\n │\n ├─ {:ok, {guild_id, channel_id}} ──► Voice.join_channel(guild_id, channel_id)\n │ update state.voice_channel\n │ schedule idle timer (if timeout > 0)\n │ proceed with playback\n │\n └─ :not_found ──► Notifier.error(\"Bot is not connected... Use !join in Discord first.\")\n```\n\nThe join happens directly inside the `handle_cast` body — state is updated synchronously, and playback proceeds in the same message handler. This avoids any circular-cast problem: `VoiceCommands.join_voice_channel` normally calls `AudioPlayer.set_voice_channel` as a success callback, which would deadlock if called from inside `AudioPlayer`. By calling `Voice.join_channel/2` directly and updating state ourselves, we avoid that dependency entirely.\n\n### Last-User-Left Routing\n\n`VoiceRuntime.handle_disconnect` now runs for **all** modes (previously short-circuited for `:disabled`). When the bot is confirmed alone, `bot_alone_action/1` dispatches by mode:\n\n```\nbot_alone_action(guild_id)\n :presence ──► VoiceCommands.leave_voice_channel(guild_id) (existing path)\n :play ──► AudioPlayer.last_user_left(guild_id) (leave immediately)\n false ──► AudioPlayer.last_user_left(guild_id) (start idle timer)\n```\n\n`AudioPlayer.last_user_left/1` is the new single entry point for non-presence leave events. It:\n- `:play` / `:presence`: calls `Voice.leave_channel` directly, clears state.\n- `false`: calls `reset_idle_timeout` — starts the idle timer if `VOICE_IDLE_TIMEOUT_SECONDS > 0`, otherwise no-ops (bot stays indefinitely).\n\n### User-Rejoin Cancel (false mode only)\n\n`VoiceRuntime.handle_connect` gains a `false`-mode clause: when a non-bot user joins the bot's current channel, it calls `AudioPlayer.user_joined_channel/1`, which cancels the idle timer. This prevents the bot from leaving when a user briefly steps out and returns.\n\n### Idle Timeout State Machine\n\n```\nAudioPlayer state: idle_timeout_ref = {timer_ref, token} | nil\n\nplay mode:\n set_voice_channel({guild, chan}) → cancel old timer → schedule new timer\n play_sound cast → cancel old timer → schedule new timer (reset)\n set_voice_channel(nil, nil) → cancel timer\n last_user_left → leave immediately, cancel timer\n {:idle_timeout, token} → leave if token matches, else ignore (stale)\n\nfalse mode:\n last_user_left → schedule timer (if timeout > 0)\n user_joined_channel → cancel timer\n {:idle_timeout, token} → leave if token matches, else ignore (stale)\n\npresence mode:\n (no timer ever scheduled)\n```\n\nThe `{ref, token}` pair guards against a race condition: if `Process.cancel_timer` returns `false` (the message already fired and is in the mailbox), the stale message arrives after a new timer is scheduled. The token mismatch causes it to be silently dropped rather than triggering a spurious leave.\n\n### `IdleTimeoutPolicy` — Disabled State\n\n`timeout_ms/0` now returns `nil` when `VOICE_IDLE_TIMEOUT_SECONDS <= 0` (previously always returned a positive integer). Callers treat `nil` as \"disabled\" and skip scheduling. This is how `false` mode achieves \"never auto-leave\" behavior.\n\n### Direct `Voice.leave_channel` vs `VoiceCommands.leave_voice_channel`\n\n`VoiceCommands.leave_voice_channel` would introduce a circular module dependency:\n- `VoiceCommands` already calls `AudioPlayer.set_voice_channel` (compile-time dep)\n- `AudioPlayer` calling `VoiceCommands` would close the cycle\n\n`AudioPlayer` calls `Voice.leave_channel/1` directly and updates its own state. This is consistent with how `VoiceSession.maintain_connection` already calls `Voice.leave_channel` directly. The `:presence` path continues to use `VoiceCommands` via `VoiceRuntime` (no circular dep there).\n\n### Actor Type Change\n\nPreviously, `play_sound` actors from the web layer were plain username strings (e.g. `\"justin\"`), and from the API layer, a map `%{display_name: username, user_id: db_id}`. Neither carried a `discord_id` usable for voice channel lookup.\n\nBoth callers now pass the full `%Soundboard.Accounts.User{}` struct. `PlaybackEngine` already handled this type (via `actor_display_name/1` and `actor_user_id/1` pattern matches), so no downstream changes were needed. The new `actor_discord_id/1` private function in `AudioPlayer` extracts the Discord ID for auto-join, and falls back to `nil` for strings and maps without `discord_id`.\n\n---\n\n## New Function: `VoicePresence.find_user_voice_channel/1`\n\n```elixir\n@spec find_user_voice_channel(String.t()) ::\n {:ok, {guild_id :: String.t(), channel_id :: String.t()}} | :not_found\n```\n\nIterates over all guilds in the EDA guild cache and returns the first voice state matching the given Discord user ID. Returns `:not_found` if the user is not in any voice channel or the cache is unavailable.\n\n---\n\n## New Module: `IdleTimeoutPolicy`\n\n```\nlib/soundboard/discord/handler/idle_timeout_policy.ex\n```\n\nReads the `VOICE_IDLE_TIMEOUT_SECONDS` environment variable. Returns the timeout in milliseconds, or `nil` if the value is ≤ 0.\n\n---\n\n## Configuration\n\n| Variable | Default | Description |\n|---|---|---|\n| `AUTO_JOIN` | `play` | Join/leave mode. `play` — join on sound playback, leave on idle or last user. `presence` — follow users in, leave when alone. `false` — manual only, leave after idle timeout once alone. |\n| `VOICE_IDLE_TIMEOUT_SECONDS` | `600` | Seconds of inactivity before auto-leave. Set to `0` to disable. In `play` mode: resets on each sound played. In `false` mode: starts when last user leaves, cancels if a user rejoins. In `presence` mode: ignored. |\n\n---\n\n## Database Changes\n\n**None.**\n\n---\n\n## File Inventory\n\n| File | Action |\n|---|---|\n| `lib/soundboard/discord/handler/auto_join_policy.ex` | **Modify** — boolean → enum (`:presence`, `:play`, `false`); remove `enabled?/0` |\n| `lib/soundboard/discord/handler/idle_timeout_policy.ex` | **New** — `VOICE_IDLE_TIMEOUT_SECONDS` config reader; returns `nil` when disabled |\n| `lib/soundboard/discord/handler/voice_presence.ex` | **Modify** — add `find_user_voice_channel/1` |\n| `lib/soundboard/discord/handler/voice_runtime.ex` | **Modify** — mode-aware connect/disconnect routing; `bot_alone_action/1`; `handle_user_rejoin_cancel/1` |\n| `lib/soundboard/audio_player.ex` | **Modify** — mode-gated auto-join, idle timer, and last-user-left; new `last_user_left/1` and `user_joined_channel/1` public API |\n| `lib/soundboard_web/live/support/sound_playback.ex` | **Modify** — pass `%User{}` struct instead of username string |\n| `lib/soundboard_web/controllers/api/sound_controller.ex` | **Modify** — pass `%User{}` struct instead of display-name map |\n| `test/soundboard/discord/handler/auto_join_policy_test.exs` | **Rewrite** — enum mode tests; removed `enabled?/0` tests |\n| `test/soundboard/discord/handler/idle_timeout_policy_test.exs` | **New** — covers default, custom value, whitespace, disabled (0 and negative) |\n| `test/soundboard/discord/handler/voice_presence_test.exs` | **New** — covers `find_user_voice_channel/1` |\n| `test/soundboard/discord/handler/voice_runtime_test.exs` | **Modify** — updated mocks to `:presence`; new tests for `play`/`false` mode routing and user-rejoin cancel |\n| `test/soundboard_web/audio_player_test.exs` | **Modify** — mode-gated idle timeout and auto-join tests; new `last_user_left` and `user_joined_channel` tests |\n| `test/soundboard_web/discord_handler_test.exs` | **Modify** — presence-mode mock; updated leave-sequence assertion |\n| `test/soundboard_web/plugs/api_auth_db_token_test.exs` | **Modify** — actor assertion updated |\n| `test/soundboard_web/controllers/api/sound_controller_test.exs` | **Modify** — actor assertion updated |\n| `test/soundboard_web/live/favorites_live_test.exs` | **Modify** — actor assertion updated |\n\n---\n\n## Testing Strategy\n\n| Layer | What is tested |\n|---|---|\n| `AutoJoinPolicy` | Test env → `:play`. Default (no env var) → `:play`. `play` → `:play`. `presence`/truthy → `:presence`. `false`/falsy/unknown → `false`. |\n| `IdleTimeoutPolicy` | Default → 600,000 ms. Custom value. Whitespace trimming. `0` → `nil`. Negative → `nil`. |\n| `VoicePresence.find_user_voice_channel` | User found in a guild. User not found. User in guild but no channel. Multi-guild search. Cache unavailable. |\n| `VoiceRuntime` | `handle_disconnect` notifies `AudioPlayer.last_user_left` in `:play` and `false` modes. `handle_connect` cancels idle timer via `AudioPlayer.user_joined_channel` in `false` mode. Bootstrap skips guild scan in `:play` mode. |\n| `AudioPlayer` — idle timeout | Timer scheduled on `set_voice_channel` in `:play` mode only. Not scheduled in `:presence` or `false` mode. Timer cancelled on clear. Timer reset on `play_sound` in `:play` mode only (not reset in `:presence`). Timer fires → leave called, state cleared. Stale token ignored. |\n| `AudioPlayer` — `last_user_left` | Leaves immediately in `:play` and `:presence` modes. Starts idle timer in `false` mode with timeout. No-ops in `false` mode with timeout disabled. Ignores call when bot is not in a channel. |\n| `AudioPlayer` — `user_joined_channel` | Cancels idle timer. |\n| `AudioPlayer` — auto-join | User with `discord_id` in a voice channel → join called, `voice_channel` set, idle timer started (`:play` mode). User not in any channel → error, no join. Actor without `discord_id` → no lookup attempted. Auto-join skipped in `false` mode. |\n\n---\n\n## Out of Scope\n\n- **Auto-join for `!play` Discord commands**: the `!play` command handler already requires `!join` first; that flow was not changed.\n- **Per-guild or per-channel idle timeout**: the timeout is global. Future work could make it configurable per guild via DB settings.\n- **Idle timeout reset on playback *finish*** (as opposed to *start*): the timer resets when a sound is cast, not when it finishes playing. This means the clock starts as soon as playback is requested, not after the sound ends. For typical usage (sounds are 1–30 seconds) this makes no practical difference.\n- **Notifying users before leaving**: the bot does not send a Discord message warning that it is about to leave due to inactivity.\n- **`false` mode last-user-leave recheck delay**: the 1.5-second recheck-alone logic in `VoiceRuntime` applies for all modes, including `false`. The idle timer in `false` mode does not start until the recheck confirms the bot is alone.\n"
},
{
"path": "docs/specs/youtube-playback.md",
"content": "# Spec: YouTube Video Playback via Discord Bot Command\n\n**Status:** Draft \n**Date:** 2026-03-07 \n**Author:** —\n\n---\n\n## Summary\n\nAdd a `!play
` Discord bot command that extracts the audio from a YouTube video and plays it through the bot's current voice channel. This is an ephemeral, on-demand playback — it does **not** save the YouTube audio as a permanent sound in the library.\n\n---\n\n## Motivation\n\nUsers currently play pre-uploaded sounds (local files or direct URLs) via the soundboard. There is no way to quickly share and play a YouTube video's audio in voice chat without first downloading, converting, and uploading it. A `!play` command eliminates that friction.\n\n---\n\n## User-Facing Behavior\n\n### Commands\n\n| Command | Description |\n|---|---|\n| `!play ` | Extract audio from the YouTube URL and play it in the bot's current voice channel. |\n| `!play ` | Same as above, with an explicit volume (0.0–1.5, default 1.0). |\n| `!stop` | Stop whatever is currently playing (already exists — no change). |\n\n### Responses\n\n| Scenario | Bot Reply |\n|---|---|\n| Success | 🎵 Now playing: `` |\n| Bot not in a voice channel | \"I'm not in a voice channel. Use `!join` first.\" |\n| Invalid / unsupported URL | \"That doesn't look like a valid YouTube URL.\" |\n| yt-dlp extraction fails | \"Failed to fetch audio from that URL. It may be private, age-restricted, or region-locked.\" |\n| Already playing (interrupt) | Stops current sound, starts YouTube audio (existing interrupt behavior). |\n\n---\n\n## Architecture & Design\n\n### High-Level Flow\n\n```\nDiscord message \"!play \"\n │\n ▼\nCommandHandler.handle_message/1 ← parse command, validate URL format\n │\n ▼\nSoundboard.YouTube.Extractor ← NEW module: call yt-dlp, return audio stream URL + metadata\n │\n ▼\nAudioPlayer.play_youtube/3 ← NEW public API on AudioPlayer GenServer\n │\n ▼\nPlaybackQueue / PlaybackEngine ← reuse existing queue & engine (plays URL type)\n │\n ▼\nDiscord Voice (EDA) ← ffmpeg reads the stream URL, sends RTP\n```\n\n### New Modules\n\n#### 1. `Soundboard.YouTube.Extractor`\n\nWraps the `yt-dlp` CLI directly via `System.cmd/3`.\n\n**Responsibilities:**\n- Validate that a URL is a supported YouTube link via a regex matching `youtube.com/watch?v=`, `youtu.be/`, `youtube.com/shorts/`.\n- Extract metadata + stream URL in a **single** `yt-dlp` invocation using combined flags: `yt-dlp --get-title --get-url --get-duration -f bestaudio --no-playlist `.\n- Parse the multi-line stdout (line 1: title, line 2: stream URL, line 3: duration) into a struct.\n- Enforce a maximum duration (configurable, default: 10 minutes / 600s) to prevent abuse.\n- Wrap the call in `Task.async` + `Task.yield/2` with a configurable timeout (default: 15s) to avoid hanging on slow networks or unresponsive URLs.\n- Return `{:ok, %{stream_url: url, title: title, duration_seconds: integer}}` or `{:error, reason}` with user-friendly messages derived from stderr.\n\n**Key design decisions:**\n- Always use the list-of-args form of `System.cmd/3` — never shell interpolation — to prevent command injection.\n- `--no-playlist` flag to prevent accidentally queuing an entire playlist.\n- `-f bestaudio` to get an audio-only stream URL that ffmpeg can consume directly.\n- Binary path resolved via `Application.get_env(:soundboard, :ytdlp_executable, :system)`, matching the existing `:ffmpeg_executable` pattern.\n- Availability check via `System.find_executable(\"yt-dlp\")` or configured path, cached in `persistent_term` on first call.\n- In tests, the module can be mocked via `Mox` or by making the system-cmd call go through a configurable function/module.\n\n**Public API:**\n```elixir\n@spec extract(String.t()) :: {:ok, extraction()} | {:error, String.t()}\n@spec valid_url?(String.t()) :: boolean()\n@spec available?() :: boolean()\n```\n\n### Modified Modules\n\n#### `Soundboard.Discord.Handler.CommandHandler`\n\nAdd a new clause:\n\n```elixir\ndef handle_message(%{content: \"!play \" <> url_and_args} = msg)\n```\n\n- Parse the URL (first token) and optional volume (second token).\n- Validate URL format via `YouTube.Extractor.valid_youtube_url?/1`.\n- Check that the bot is in a voice channel (`AudioPlayer.current_voice_channel/0`).\n- On validation pass, call `AudioPlayer.play_youtube(url, volume, actor)`.\n- Reply with an appropriate Discord message (see table above).\n\n#### `Soundboard.AudioPlayer` (GenServer)\n\nAdd a new public function and cast:\n\n```elixir\ndef play_youtube(url, volume \\\\ 1.0, actor)\n```\n\nInternally sends `{:play_youtube, url, volume, actor}`. The `handle_cast` will:\n1. Call `YouTube.Extractor.extract(url)`.\n2. On success, build a play request (similar to `PlaybackQueue.build_request/3` but using the extracted stream URL and supplied volume directly, bypassing `SoundLibrary`).\n3. Enqueue via `PlaybackQueue.enqueue/3` — reusing all existing interrupt/retry logic.\n\n#### `Soundboard.AudioPlayer.PlaybackEngine`\n\nNo changes expected. The engine already supports `:url` play type, and the extracted stream URL is a direct audio URL that ffmpeg handles natively.\n\n#### `Soundboard.AudioPlayer.PlaybackQueue`\n\nAdd a new `build_youtube_request/4` function (or extend `build_request`) that creates a play request from a raw URL + volume instead of looking up `SoundLibrary`:\n\n```elixir\n@spec build_youtube_request({String.t(), String.t()}, String.t(), number(), term()) ::\n {:ok, play_request()}\ndef build_youtube_request({guild_id, channel_id}, stream_url, volume, actor)\n```\n\nThe `sound_name` field in the request will be set to the video title (for display in notifications).\n\n### Stats / Tracking\n\nYouTube plays are **not** tracked in the `stats.plays` table (they aren't library sounds). The `PlaybackEngine` already skips tracking for system users — we can use a similar mechanism, or simply not call `track_play_if_needed` for YouTube plays. The `Notifier.sound_played/2` broadcast will still fire so the LiveView shows \"User played