[robo-monk]

Summary

Adds speaker names to transcripts and lets a room owner connect a bot to a call: any program, such as captions, a dial-in bridge or an AI agent. Puts moil behind TIDE_MOIL, off by default. Removes the old name klisi. tide now owns the transcribe bundle.

Speaker names. The bundle keeps the model's diarization. Active-speaker data only decides who each diarized speaker is, so two voices on one mic can map to one participant.

sequenceDiagram
    participant LK as LiveKit
    participant Obs as Hidden observer
    participant S3
    participant Job as Transcribe bundle (owner's machine)
    Obs->>LK: joins when recording starts, publishes nothing
    LK-->>Obs: active speakers
    Obs->>S3: speakers.json, before the recording is completed
    S3-->>Job: audio + speakers.json
    Job->>Job: diarize, then align to names: Ada, or Ada (1) and Ada (2)

Loading

A recording with no timeline still gets a transcript, with labels such as Speaker 1.

Bundle. server/internal/transcripts/bundle/ is the source of the transcribe bundle, with its tests. scripts/vendor-moil.sh copies only the moil SDK, so a bundle change needs no moil commit. make check and CI run the bundle tests.

Flag. TIDE_MOIL needs recording. Off, tide serves no moil, machine, pairing or transcript routes, keeps no speaker timeline, and the SPA hides those controls. Bot sessions work either way.

CI. Removes .forgejo/, so GitHub Actions is the only CI.

Bots. Only the room's owner can get a session, and it needs no moil. tide mints the token and shows the bot. It ships no bot.

+POST /api/rooms/{slug}/bot-session    # owner only
+  → { ws_url, token, room, identity, name, owner_identity, expires_at }

 roles (server/internal/livekit/token.go)
   guest, host
+  bot        # publishes like a guest, plus chat; no admin; shown to everyone
+  observer   # hidden, publishes nothing

docs/BOTS.md is the contract, and examples/bots/hello_bot.py is a working client.

Evidence

• Before: transcripts labelled speakers Speaker 1. tide had no session for a program.
  After:

make check                pass, includes the bundle tests
make bundle-check         37/37
make moil-e2e             pass, against moil 5ad3e78
make media                pass (23, 3, 18), 23b8c4a, before TIDE_MOIL
mocked bot, machine, moil-off, recording-off, anonymous and meeting-chrome specs    pass

Not verified:

• Name accuracy on a real multi-person meeting. Tests use synthetic speech and the thresholds are untuned.
• The final bundle with real models. The last real-model run used moil c25d7f7, which has no coverage threshold.
• That egress StartedAt matches the first audio sample of the file.
• The observer behind a real NAT or load balancer.
• A recording with a bot in the room.
• A bot publishing a camera against the real SFU. The token test covers the grant.
• A bot reconnecting after 10 minutes, and tide refusing an expired token.
• chat.spec, lobby.spec and moderation.spec against the real stack. They time out on the signed-in dashboard. chat.spec also times out on the base commit. The other two have not run there.
• The rest of the non-media Playwright suite. recording-off.spec.ts:31 is flaky, also on the base commit.

Merge Danger

Door: two-way

If this PR is reverted, deleting a recording leaves its speakers.json in S3. That file holds participant names.

Blast Radius: deployments

• Moil must land first. The vendored SDK COMMIT points at moil 5ad3e78 on chore/service-agnostic.
• Machine owners must approve the bundle again. Its hash changes.
• Forgejo's CI jobs are gone. No job runs make build now. Images of main no longer go to the Forgejo registry, and the nightly media fuzz is gone. release.yml still publishes v* tags.
• TIDE_MOIL replaces TIDE_TRANSCRIPTS. tide ignores the old name, so an install with transcripts must set TIDE_MOIL=true when it upgrades. Otherwise transcripts and pairing turn off until it does. Nothing is lost.
• The media gate runs with TIDE_MOIL=false, as a public install does, so it doesn't exercise the speaker observer. make moil-e2e does.
• S3 needs ListBucket. Without it, a missing timeline reads as a 403. The transcript still runs, without names.
• Bots take meeting content into programs that may run tools. docs/BOTS.md covers prompt injection. A bot must identify its owner by owner_identity, never by a name.

Reviewed with sol-loop: 4 rounds with gpt-6.1-sol on high. Sol verdict: approved

🤖 Generated with Claude Code