Every YouTube download — /force and the normal clip path alike — was failing at the data-transfer stage with "HTTP Error 403: Forbidden". Extraction succeeded and a format was selected; only the media fetch died, which is why it read as a per-video problem rather than a broken extractor. The cause was YouTube retiring the cookieless `android_vr` client that yt-dlp 2026.6.9 pinned. Its media URLs now 403 for every video, so the failure was global rather than specific to the video that surfaced it. 2026.8.19 re-points at `visionos` and downloads work again. Refresh the cookie-withholding note, which named android_vr as the client whose URLs work, and record the 403-on-data-transfer signature as the tell for a retired client so the next occurrence goes straight to a yt-dlp upgrade instead of the cookie or format logic. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QH4jMHfUTDhm41BrRtkPc3
signal-bot
A Signal group-chat bot that grabs videos from links people post (X/Twitter, Instagram, YouTube, TikTok, Reddit) and posts them back into the chat, plus a couple of toys for messing with the last video.
What it does
- Auto-download — watches every group message for a supported link and replies with the video. Powered by yt-dlp. Videos over 100 MB are auto re-encoded with ffmpeg to fit. YouTube is fetched as h264 up to 1080p, stepping down a resolution rung on longer videos so the merge lands under the Signal size limit without a re-encode; other hosts take their muxed rendition as-is.
/speed [n]— re-posts the last video sped upn× (default 2×), pitch-shifted like tape. e.g./speed 4,/speed 0.5./rev— re-posts the last video reversed (audio too)./cookies(DM, admins only) — paste exported.instagram.comcookie lines to refresh Instagram auth without touching the server.
Supported links: x.com / twitter.com (and fxtwitter/vxtwitter/fixupx
wrappers), instagram.com/reel|p, youtube.com / youtu.be / Shorts, TikTok,
and Reddit (/comments/ permalinks, /s/ app share links, redd.it and
v.redd.it shortlinks). Reddit posts with no video stay silent.
How it's wired
Signal ──► signal-cli-rest-api (json-rpc, :8080) ──► bot.py (signalbot lib)
[docker-compose.yml] [systemd service]
│
yt-dlp + ffmpeg + cookies.txt
bot.pyconnects to a signal-cli-rest-api daemon over a websocket injson-rpcmode.docker-compose.ymlruns that daemon; the linked-account data lives in a./signal-cli-datavolume (gitignored — it holds private keys).signal-bot.service.exampleis the systemd unit that runsbot.py.
Setup
-
Run signal-cli-rest-api and link it as a device to your Signal account:
docker compose up -dThen link via the QR at
http://127.0.0.1:8080/v1/qrcodelink?device_name=bot(scan from Signal → Settings → Linked devices). Keep signal-cli up to date — an out-of-date signal-cli silently stops receiving messages when Signal changes its server protocol (getServerGuid must not be nullin the logs);docker compose pull && docker compose up -dfixes it. -
Python env:
python3 -m venv venv venv/bin/pip install -r requirements.txtYouTube also needs Node >= 22 on PATH (for
yt-dlp-ejs's challenge solver). If your distro only ships an older Node, install a standalone Node 22+ and pointbot.py's_NODE22at it. Note: YouTube cookies are deliberately withheld (_cookie_args) — sending account cookies forces yt-dlp onto a player client whose media URLs 403; cookieless YouTube requests work. -
Cookies: copy
cookies.txt.exampletocookies.txtand fill in real exported cookies for the sites you want auth'd. (gitignored) -
Service: copy
signal-bot.service.exampletosignal-bot.service, set your user / phone number / paths, install it:sudo cp signal-bot.service /etc/systemd/system/ sudo systemctl enable --now signal-bot
Notes
- The bot only acts in group chats (except
/cookies, which is DM-only). - Reply-targeting (e.g. "speed up this video") was intentionally dropped:
Signal Desktop strips quote metadata from synced transcripts, so
/speedand/revalways act on the last video seen in the group.