Add radio embed widget, SSE real-time, song history, moderation panel, and Auto DJ

- Embed widget: standalone iframe player with dark/light/transparent themes, copy-paste embed code admin page
- Real-time SSE: streaming now-playing/listeners/dj events, replaces polling in radio-player and embed
- Song history: auto-records song changes to radio_song_plays table, Filament resource to view
- DJ moderation: unified panel for shouts approval, song request queue, DJ applications
- Auto DJ: playlist management with round-robin playback when no DJ is live
- Refactored radio-player Alpine component to use EventSource API with auto-reconnect

routes/api.php

@@ -5,6 +5,7 @@ use App\Http\Controllers\Api\HotelApiController;
 use App\Http\Controllers\Community\RadioController;
 use App\Http\Controllers\RadioListenerPointController;
 use App\Models\Miscellaneous\WebsiteSetting;
+use App\Models\RadioApiKey;
 use Illuminate\Support\Facades\Route;
 
 /*
@@ -74,6 +75,12 @@ Route::get('/radio/now-playing', [RadioController::class, 'nowPlaying'])->middle
 Route::get('/radio/listeners', [RadioController::class, 'listeners'])->middleware('throttle:100,1')->name('api.radio.listeners');
 Route::get('/radio/shouts', [RadioController::class, 'getShouts'])->middleware('throttle:100,1')->name('api.radio.shouts');
 
+// Radio SSE (Server-Sent Events) stream
+Route::get('/radio/sse', [\App\Http\Controllers\Radio\SseController::class, 'stream'])->name('api.radio.sse');
+
+// Radio embed config
+Route::get('/radio/embed/config', [\App\Http\Controllers\Radio\EmbedController::class, 'config'])->middleware('throttle:100,1')->name('api.radio.embed.config');
+
 // Radio Settings
 Route::get('/settings/radio/auto-play', function () {
     $autoPlaySetting = cache()->remember('radio_auto_play_setting', 300, fn () => WebsiteSetting::where('key', 'radio_auto_play')->first());
@@ -100,3 +107,21 @@ Route::post('/photos/upload', [HotelApiController::class, 'uploadPhoto'])->middl
 
 // Shop Purchase
 Route::post('/shop/packages/{packageId}/purchase', [HotelApiController::class, 'purchasePackage'])->middleware('auth:sanctum');
+
+// Protected Radio API (requires API key)
+Route::prefix('radio')->middleware(['radio.api', 'throttle:radio'])->group(function () {
+    Route::get('/current-dj', [RadioController::class, 'currentDJ'])->name('api.radio.v2.current-dj');
+    Route::get('/now-playing', [RadioController::class, 'nowPlaying'])->name('api.radio.v2.now-playing');
+    Route::get('/listeners', [RadioController::class, 'listeners'])->name('api.radio.v2.listeners');
+    Route::get('/config', [RadioController::class, 'config'])->name('api.radio.v2.config');
+    Route::get('/shouts', [RadioController::class, 'getShouts'])->name('api.radio.v2.shouts');
+    Route::get('/points', [RadioListenerPointController::class, 'index'])->name('api.radio.v2.points');
+    Route::get('/points/leaderboard', [RadioListenerPointController::class, 'leaderboard'])->name('api.radio.v2.points.leaderboard');
+    Route::get('/points/stats', [RadioListenerPointController::class, 'stats'])->name('api.radio.v2.points.stats');
+    Route::get('/verify', function () {
+        return response()->json([
+            'valid' => true,
+            'message' => 'API key is geldig',
+        ]);
+    })->name('api.radio.v2.verify');
+});

routes/web.php

@@ -9,6 +9,9 @@ use App\Http\Controllers\Miscellaneous\MaintenanceController;
 use App\Http\Controllers\User\BannedController;
 use Illuminate\Support\Facades\Route;
 
+// Radio embed (public, no auth required)
+Route::get('/radio/embed', [\App\Http\Controllers\Radio\EmbedController::class, 'show'])->name('radio.embed');
+
 // Language route
 Route::get('/language/{locale}', LocaleController::class)->name('language.select');