lemintare
e5646ba33d
This commit introduces a new `hoist` attribute for Discord roles, allowing team roles and the registered role to be displayed in separate groups within the Discord member list. The `RoleWorker` has been updated to ensure team roles are positioned above the registered role, improving visibility and organization. Database schema changes have been made to support the new `hoist` field, and corresponding updates have been implemented in the service layer and tests to validate the new behavior.
Mixmaker backend
Go/PostgreSQL API organized as domain, application, and inbound/outbound adapters.
Run
Required environment:
DATABASE_URLDISCORD_CLIENT_IDDISCORD_CLIENT_SECRETDISCORD_REDIRECT_URLADMIN_DISCORD_IDS(comma-separated Discord IDs)
Optional environment:
HTTP_ADDR=:8080FRONTEND_URL=/SESSION_COOKIE_NAME=mixmaker_sessionSESSION_TTL=168hCOOKIE_SECURE=true(setfalseonly for local HTTP)MIGRATIONS_DIR=migrations
Apply migrations and run:
go run ./cmd/api migrate
go run ./cmd/api
The same commands work with the container image:
docker run --rm ... mixmaker-api migrate
docker run --rm ... mixmaker-api
GET /healthz is a process health check and GET /readyz checks PostgreSQL.
Authenticated realtime updates are available from
GET /api/events/stream?topic=event:<event-id> as Server-Sent Events.
Security and behavior
Discord access tokens are used only during callback and are not stored. The API
creates opaque server-side sessions and sends an HttpOnly, SameSite=Lax cookie.
Initial administrators are promoted only when their Discord ID is present in
ADMIN_DISCORD_IDS; existing administrators are never demoted by login.
Draft and series writes use persisted versions to reject stale repeated commands. RSVP overrides, captain assignments, balancing selections, tosses, draft actions, and results retain actor information in domain state or the append-only audit log.