samograph 0.6.1 → 0.7.0

package/dist/cli.js

@@ -5,15 +5,29 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: () => mod[key],
+        get: __accessProp.bind(mod, key),
         enumerable: true
       });
+  if (canCache)
+    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
@@ -22,7 +36,7 @@ var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports,
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "samograph",
-    version: "0.6.1",
+    version: "0.7.0",
     description: "Let AI agents join Zoom and Google Meet calls as active participants.",
     type: "module",
     license: "Apache-2.0",
@@ -160,7 +174,15 @@ function newPresenceSnapshot(state = "listening", message = defaultPresenceMessa
     state,
     message,
     updated_at: new Date().toISOString(),
-    activities
+    activities,
+    chime: null
+  };
+}
+function withChime(snapshot) {
+  return {
+    ...snapshot,
+    updated_at: new Date().toISOString(),
+    chime: { at: new Date().toISOString() }
   };
 }
 var ACTIVITY_LIMIT = 16;
@@ -410,6 +432,9 @@ function presencePageHtml() {
       overflow: hidden;
       display: flex;
       flex-direction: column;
+      /* Pin the stack to the top: the first line appears at the top and each
+         new line is added below it (newest at the bottom, chat order). Once the
+         lane is full, the oldest lines overflow off the top. */
       justify-content: flex-start;
     }
     .item {
@@ -695,6 +720,54 @@ function presencePageHtml() {
       resize();
       requestAnimationFrame(draw);
     }
+    // Soft "blip" audio cue, synthesized with WebAudio (no asset files). Played
+    // once per new chime timestamp \u2014 e.g. when the bot posts a meeting-chat
+    // message \u2014 so people notice it without watching the camera. Recall renders
+    // this page as the bot camera and streams its audio into the call.
+    let audioCtx = null;
+    function chimeAudioContext() {
+      if (!audioCtx) {
+        const Ctx = window.AudioContext || window.webkitAudioContext;
+        if (!Ctx) return null;
+        try { audioCtx = new Ctx(); } catch { return null; }
+      }
+      if (audioCtx.state === "suspended") audioCtx.resume().catch(() => {});
+      return audioCtx;
+    }
+    function playChime() {
+      const ctx = chimeAudioContext();
+      if (!ctx) return;
+      const t = ctx.currentTime;
+      const osc = ctx.createOscillator();
+      const gain = ctx.createGain();
+      const lp = ctx.createBiquadFilter();
+      lp.type = "lowpass";
+      lp.frequency.value = 1800; // shave harshness for a soft tone
+      osc.type = "sine";
+      // A gentle upward "bl-ip" rather than a flat beep.
+      osc.frequency.setValueAtTime(540, t);
+      osc.frequency.exponentialRampToValueAtTime(680, t + 0.06);
+      // Quick soft attack, smooth decay; low peak gain so it stays unobtrusive.
+      gain.gain.setValueAtTime(0.0001, t);
+      gain.gain.exponentialRampToValueAtTime(0.16, t + 0.012);
+      gain.gain.exponentialRampToValueAtTime(0.0001, t + 0.28);
+      osc.connect(lp);
+      lp.connect(gain);
+      gain.connect(ctx.destination);
+      osc.start(t);
+      osc.stop(t + 0.32);
+    }
+    let lastChimeAt = "";
+    let chimeReady = false;
+    function handleChime(chime) {
+      const at = chime && chime.at ? String(chime.at) : "";
+      // First poll establishes a baseline without playing, so a chime already
+      // sitting in the snapshot at page load does not fire on join.
+      if (!chimeReady) { lastChimeAt = at; chimeReady = true; return; }
+      if (!at || at === lastChimeAt) return;
+      lastChimeAt = at;
+      playChime();
+    }
     function formatUpdated(value) {
       const date = new Date(String(value || ""));
       if (Number.isNaN(date.getTime())) return "Waiting for live signal";
@@ -726,8 +799,10 @@ function presencePageHtml() {
         element.append(empty);
         return;
       }
+      // items arrive newest-first; render oldest-first so the newest line lands
+      // at the bottom of the lane (chat order). Keep only the newest 14.
       let lastLabel = "";
-      for (const item of items.slice(0, 14)) {
+      for (const item of items.slice(0, 14).reverse()) {
         const row = document.createElement("div");
         row.className = "item";
         const label = document.createElement("div");
@@ -743,6 +818,12 @@ function presencePageHtml() {
         element.append(row);
       }
     }
+    // Adaptive polling: every poll is a request through the public tunnel
+    // (the page is loaded by Recall via the tunnel URL, so same-origin
+    // fetches ride it too). Poll fast only while the snapshot is changing;
+    // back off when the call goes quiet to preserve tunnel request quota.
+    let lastSignature = "";
+    let lastActivityAt = Date.now();
     async function refresh() {
       try {
         const response = await fetch("/presence.json", {
@@ -751,6 +832,12 @@ function presencePageHtml() {
         });
         if (!response.ok) return;
         const data = await response.json();
+        handleChime(data.chime);
+        const signature = String(data.updated_at || "");
+        if (signature !== lastSignature) {
+          lastSignature = signature;
+          lastActivityAt = Date.now();
+        }
         const state = String(data.state || "listening");
         document.getElementById("live").textContent = state;
         const buckets = { heard: [], comment: [] };
@@ -773,23 +860,33 @@ function presencePageHtml() {
         document.documentElement.style.setProperty("--accent-mid", pair[2]);
       } catch {}
     }
+    function nextPollDelay() {
+      // 1 s while the snapshot changed within the last 30 s, else 5 s.
+      return Date.now() - lastActivityAt < 30000 ? 1000 : 5000;
+    }
+    async function pollLoop() {
+      await refresh();
+      setTimeout(pollLoop, nextPollDelay());
+    }
     if (backgroundMode === "robot") {
       initRobot();
     } else {
       initPlasma();
       initFpsProbe();
-      refresh();
-      setInterval(refresh, 1000);
     }
+    // Poll on every background, including the static robot avatar: the loop
+    // drives the chime cue and live activity lanes, which must not depend on
+    // the animated plasma backgrounds being active.
+    pollLoop();
   </script>
 </body>
 </html>`;
 }
 
 // src/commands/join.ts
-import { writeFileSync as writeFileSync4 } from "fs";
-import { spawn as spawnChild } from "child_process";
-import { randomUUID } from "crypto";
+import { writeFileSync as writeFileSync5 } from "fs";
+import { spawn as spawnChild2 } from "child_process";
+import { randomUUID as randomUUID2 } from "crypto";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/transcript.ts
@@ -1270,6 +1367,14 @@ function makeRecallClient(fetchFn = fetch) {
         signal: AbortSignal.timeout(1e4)
       });
     },
+    async outputAudio(botId, b64Mp3) {
+      return fetchFn(`${RECALL_BASE}/bot/${botId}/output_audio/`, {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify({ kind: "mp3", b64_data: b64Mp3 }),
+        signal: AbortSignal.timeout(15000)
+      });
+    },
     async screenshot(botId) {
       return fetchFn(`${RECALL_BASE}/bot/${botId}/screenshot/`, {
         method: "GET",
@@ -1294,20 +1399,501 @@ function makeRecallClient(fetchFn = fetch) {
   };
 }
 
+// src/introText.ts
+var DEFAULT_INTRO_TEXT = "Hi, I'm Leo, a samograph assistant bot \uD83E\uDD16 During the call I follow the " + "live transcript and can help in real time: post messages here in chat (with " + "a soft chime), show my status on the bot camera, capture the screen-share or " + "a participant's video on request, and keep shared notes in a Google Doc. " + "Just mention me in chat if you need anything.";
+
+// src/chimeAudio.ts
+var CHIME_MP3_BASE64 = "//uQxAAAAAAAAAAAAAAAAAAAAAAASW5mbwAAAA8AAAAOAAAYfAASEhISEhISJCQkJCQkJDY2NjY2NjZJSUlJSUlJW1tbW1tbW21t" + "bW1tbW2AgICAgICAkpKSkpKSkpKkpKSkpKSktra2tra2tsnJycnJycnb29vb29vb7e3t7e3t7f////////8AAAA5TEFNRTMuMTAw" + "Ac0AAAAALkEAABSAJAWgQgAAgAAAGHwb6dIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA//uQxAAAEghu+lXcgAKCk2IDP0AAACJjEQRzRV2znu3z" + "u+mzd0lTUCej07sj46zjWIgzli3DsyUjbZGjJYJDA0KQcFxhsMBjsPBjIHx4pmq6cMJurmmeZZJihgIMuOXEQcRUTEUEWIuxnDXG" + "vuW5b/v+/8bjcvjEYjEspKSksYWwfB8HwfBAEAQBAEwfB98Mf2ggGP8Pwx//qDGUOd/9QPh/LvyDzA8gAAwhMnVMFdBFDEHhrUwT" + "oC/MFgMSDXx0UEx8gHsNd2nBDMZQpQ09DmRNVcI6TAVgNgwAoA5MH4BIzATQDIwmMBmBICKIWHESywJVQMmNGWJk14bGFoYqRRSS" + "SOm7ROgk4swcExXup6RGEQL5EDNTalVdRuYm6jdjkUpagQFCNMYJddY8ejTJ6qbdb+pRNm6pn1Dn272QLd/d+j6G9tAWQAMASART" + "AZAGswAoCUMEBBODBuQlowkUFSMEXBsDRu+IQySQ2oMdsCMzGNguUwJAAwMA7AsDA4QJ4wEMAaMAHAATAGgAdcpcgjxxK5mqrUNQ" + "1m3mC9e1rX1l//uSxC2DTWBRFF33gAlhCqHFz4iggigoJ/IKGsBQ3MX/cb/7qmGFAaYhBRjYImWRMacLpzeGGGPC4JiiILyfp0ci" + "GGNlDRjEYUMYF4BWgkAqEYAGqRr7uQ+BiHoYQT/8sWsyedkRlegtf+3Z+f/V/c9fbXv+n/e79Xu/+brqMCBkQi4VKJgJCGGXOY+5" + "xgX4oKY2AU3G8Udu5oAAnwY96BdGFdAZYHQT0Bq4lgZpFQGPAiAcPgRAgPYEcjnGtSRq9nq2fZSKCa/V/UkmcAL/Q1tReKrpYkhl" + "jyUXbrX9Z08bO1jolCWqg3KXi/dQVihP37WNa5CF2KQ9Sma5OtAcAjxGBkw0MLNqGDtQcwWQDPMPfJJjHIf9Qxb4VFMU9DEDB4AY" + "0DfbkA0sjQMvlYDHAxAwyEAvqI6DEopY1fSJ/1L6u+ifR01yd2vLB8porw+W+kl7eaY/auhb86f7DjVs9Mfq64Uf7WEdKqWu41UX" + "TEFNRTMuMTAwqqqqqqqqqqqqqqqqqqqqqqqqLzmEg4YxHplYyGiVGbchhgv4P6YZYKbGcf/7ksSSA8/8eQgOfqSBwIthQb/UkK9F" + "hv1IlmYEIBIAYCFHgGIeALSYAOUQYu4kMXda5wUqK6olD3I7YIdzEvWreypm/XTZTr9f1dRx5y044aUGGgotSG1GsU3TakXrSTiM" + "VPWOSqxLhE9LGjR0cKMfNvNOvcUFVJeNOpCatzyZe8xIaMzOTWGI42dPm/jBnwbkw8INKNMrVpj4gxEwxIgILMGTBIDAxgKkwHUB" + "kMBEAPTAJwB4wA4AHUucFdz8001oA5qpeLWi8d8Pg/C3e/aJNVHRIiXMdVLXaP/Die4iqr6/qpQQEurufoiWi6tBsXSq9RpE2/rU" + "XO6zN73XaTjHiOhvxETTVCR0k3T3C3GkT7ra/Psw76HGs09VyO7imj+KnhfbHxDRGLUIHL1TkU9MQU1FMy4xMDBVVVVVVVVVVVVV" + "VVVVVXuVgDgAMBADhgEYAOYCMAFGBSgHhhDAaCZvPzJns2lPRjGgbaYT6DcHVIGbPURoIzmUR0YoC4kBlVUHmC362NbFpeGHMZIl" + "0Pp72aAmuYPSbyfGOtDbEW680Y//+5LE0wPQdMUGDnylQsE7IAG/oKlXj1uC3oRrqW5nW+0I5ENNqxtqz2OhLi4TqjGiINZTOW6p" + "7iMa0N/VDXFxhCNEvDY6uKs+paVJRYH08VFsKW7zaNUQ42F86KSU6uotrvnGuUV0Zi3stuPi+svKTGpsKS4zKQ4tgEgBJgBwA8YB" + "GAcmAgAMRgN4FeYF4C7GCkibJhc3/aaGeQlGHHBIpgyIIQe1JnArBphqZaMGJAKcTdV3PzTcyyvw5O/3m/t3+9z72rvCxDoW3rb4" + "zjZ2hHHDl01qSNahQVrta75qSGZLWeZHNiLPIlydrOZnT4sdN2PDg5CU+vBTLSH6EwpESnQfCk6Y7wEcdSD6kzpckiw1449UjoOU" + "jS7pRZBSu2YMgSpiY40Mw+ZkskiHKLSqFAAAwBEAdMAsAPDAUQGcwIICiMDVBETBcAggwwEWDM0G/eTZ2Beo19FzUJSMuCMxiDjC" + "wBCAcly98flV7uW8phpWWtfu1ljq9evb5dy95hxguVA5mkWWoEF+AurUNHFsacQsk8wJDjU8cPLGjzmG3T4T//uSxPQD18YA/A/x" + "CwLcQN/B/Y1wMfBEDJg12uFsZQdRbRatu56kQ9Ct30UNkWGQOOVKomTrh6ukHN3LOyd0kDjLojW0Lax6Y6dmGydQxH5thSJIzVR2" + "HqdwxRdvqLtGNgwyXmB8ENEDCayosyqHW6CYi4KAAxgEIBSYCMAoGA5gQZgWgGcYJGCmmEABJBiQom6ayNTOn8yBUpiQYOsYLwCJ" + "nZzxsi+Z+cGQDphYIu1rTBYex33GjLADJpRHpfWj1qLTEeu/Rdszs4txyNx7XUi6j0CAhP5GrBlapwkJkv0X448s87QwULaw/RUY" + "cPX6umUB/E26jU8nbdOVhZini+mRuwRF11MsP3SSWPUS26Z1xQl6qd55fKEZQUi6K59c4VvQacpdR0WZRe8hOmJksrb3aIQ+nTs9" + "x6cn9Xz0/K+RxQNnhgX1BdWqykYFldR9hZqTY4mVz65hcpb9SsderjqFd+118MTDJqjQ3G341kD69i5wsXHVqw/VnHfWIXjMAGAA" + "jAGQA8wEQAQMDjAojFpkB41IQNVMIbBFjAyAIU8MY//7ksT/g9oKCPoP8QnEF8GeQf2xcGSUzJAxAFBZ+Y9GabGpuwUVcuVVrjaj" + "Hs1CGkXEO9xUxFS5KRCc9T0rJ6B1VPeO2xg3ib7EN4inpjUmJdZeG//sfxc9x0O9ebarR713i31+SbmYdpn14jiYp0iYuccsMMD+" + "KP91qhpWdudPMCxXmhzG8Tk2AC1Ao3GR1QWtAKgAJgAAAYYAeAQmARAJBgIYFmYDIFQGBqSRBnAwn+YSaCxGB6AUJ/6hxmJpzBkA" + "4QCb2JOzTcrW7lR1rV3WaDI9lGJHjQKovaxnPecLoONGhqJNMniyL1lTrKQahqzL5SIkGPBFyPHDJo6x8SaIxo2xVlFHccSsEu8i" + "MhuTCDFFNVuH4h6otxqzZ9nl2g2DGJEE+Ezrhn/LuTfQZB0W5Ario+cpnHrwvJFLw+albjYzJsi9Rj6mnnWIlGjWHiyDlTJIVysa" + "iW5l7DCizJHDUuTmajAkQN0wTYKKMU3e1DIlwx0wLUCgMBeAMzALwBIwBIADBwAMmq20myq53cL+8183sLGEbayNQp+ZBS559DD/" + "+5LE2oPUXXcAD+kKiyTBX0H9IWC4tLQTvAji5AVK0a0iINVoRrEITGDVqSnVVWkGOKh1FDZh97Ew8liXpxGH0zu0XYoPt5aYE66E" + "q91ckJ2dkHWVj/H62lylFDR824ysVeK4oo4qC9R7w9sLpPMWxqNdQZ8HNI2SysyLt6OpyNnlqgVzOmYXPmdDxordCCw2EsHDaXhZ" + "8wBgCjAZAfMDIEAwawhTEGFMNT3Ug+CwIzDKA1MCsBwwBABy4SpRCMXnV02vMVwUzNy0Nl2WWs9SJnAqCfcFvDMmZrpkIKC6Z+3a" + "JNrfdZaPlX3XztK86nFt/nKydpq/fIGVFdcH0f4xBb+8SzPPM1NTMdtXq3OPKLpztdOdR08CZZ8dSUp9Gf7mFqOhhhTEHLYxA1RT" + "uv3aD2XkV7xGzzMmcbIvT4Z/++18F74xLby5hMqMAEEAiW3cWOioYAIAJgJAHGBuBKChXTQ9d9PncfQxWApzB1BMMDICMwFwDjAG" + "ABQBLpl0zTXb9jHth56bWXabuutK2t1jQgaLkKT2kVJwZzdlGQvGk9nF//uSxOsDGL4K+g19BcLkwJ+F5hmo8p1dR3tWekspl9bZ" + "p2m0o+XaKK7W4u1J/hCmWA2fh79co+nmksVgwleDVbiVuegdsIlW5Afz1lwEIpYc5hgDgdVqtULnVb2h4Y4/05B9r4nhV8e4F0WN" + "1Kj4pB3snF25UlFLshmzsM2qiHPgi/stK34ew4lflcELzQwBoAaYAAAeEoJWYLCjrmSKhRhgnQFmYDyAlGAcAEJgDIAYAgA0vEy2" + "RGKE71spwCT3YaM3ipfppK+a8Ffde9tggrTauY7JTJy3l6a2Xcf3eu1HY7NZPRoZkFm0pvcaKUJAkLiiDJYrSR3gg4gnQg027tbc" + "nWlKJi+xm1DXJC1WxSUlylzSucjQt3YDEuxP2xSAsxOStRXF0eWbSJS9JMk2dFZLCeY5hyZN0CPP7kzDHW5GLIlEqO2eedNFMv6t" + "PLyiReGFcy5lgCUPuoAXXMAAAgwDwHzAqBSMG8R0x7ulzIQGKPZNNWSARkt8pqy6Qz138d39dyYR9r7Utyv8+texxw3VrxCoOR5a" + "dx1UV3cWrmSZRf/7ksTyAhlmBPrPJNWLMcFfAfYZ+ZyrzT8T3g4ae+yffSymZiUlrmc6UHuenteoSJ9tWyOWdZR53nnBVF5fL1Gk" + "r+3LFE4NtjLWa3+dBE4h0edrsB79gkSk5aPPfyzH7FN7bCw1eUaaKId1Xz28vup3sLM5cIcrcQlJlY5hDaeK3GOKacyyoLNOWuQv" + "+YAAAhgGgLmBUB4YPYXJlOQym1YC4GA9IOtKfWGpbTYtORtIfrPBOYcszGsZXO09p9izg8oTp0mqsVLz9b8bdZXuBg87Vto7vz8F" + "LZ17l2NR5z0xaI5R9MSyAV4wiV4Mc3KKOfAMQ15meTkrc+yemqCmeb5R/Jfne6OAt5gslpLNQS03CDmGECM0accTHrDGTh1uSQli" + "UKBa9I0ISt2nTX8djVPpR2KaAwNyerlcNqDSXGPq1IsexZjP6romENNquP21hU5eAwoczhg9qMyrB2Di6DtMLUEwwMgHTAPAGLMq" + "DARMoIFlW3Y3eAaaWpi+Nq0f1e7MeZA9T+eWPLGWLqdrtJIRr1q0ZWsnHxdsTz8RBu9d1i3/+5LE7IIXagj6L2jJyxzAn1nmGflk" + "ncysuvbphevDBTegjgrEtgX8xsLWvMzBCvdgZZxC2J88aqiSp8Ql9ltap3HXbWhlZil+FxyrXrKdeGr9mqViW0g+jcThV7Nb69mK" + "vQN2fZtjV42o3GlTh97t2LXZyNQ7RuB5RXTmKHaXt32RsWX3fh1uKWeS1gWppjGChCNPUxqU8EJOgUFQwzGdDQyDvMHUDYwIADQM" + "AUiiwZ3X6vapLXe8l+mNT1rtuv29l/LlqpdtR3jNb6D84rqEhZxaTNHCf15ENx3a3k7l5h96drRsdskFUG4sO6eriDkbM0XEbm/n" + "HRzUCVkKJwYKaS6xI5uYetslaXnVFFV7mLNWykFoIeiOopQVRMVz3Z18gDp6msH0km4T/AJDfkEoca9Xzt0kXr1ClfD33CvGGFRy" + "qZgN9mlRkRrydOJp7Z+IP+uRL8EACGASBCYFQTRhpxeGDIHmclUZQKW+TpZdGZdeuSnLfKSxmpXY1fy1vLnKuVNupcr4Mn72pnGD" + "lmtRUS6tGYTMt0vAkM0gEqT2eiim//uSxPGDGi4I9g15hor5QV9J5JsQTqo2fk/jC7L2kjrYzF6xCplIIvWJElVHQTtDqqKCbmFc" + "moguPkYViojVkhskQsIFa5NOKNeJTI6xExcS1UYRSxqBZNZ0oWqq0gj0tnq0CqCaRphNZBEnEiCdtFisS8asvKCT1FU2qRxSbTTM" + "5bUHuKKqTlt2unWJL5aJcsu1IqZFlwjFO5DW0TAKAJhMIRnv4hx2EKqrfRO3Xt1dYY36tn7e4RZ1r/JEohMIWGX9bACIkfRG5LOb" + "v4ykq0HzSa8bWlteOQ2NZA1P1F3ncV5xxKMBhY3FrIaigYZQJy8tLTt2TY0dy0OTttG8+gpHKWrlGFi5RkxMQka+k0TUQx2GuiRL" + "5KIGsX15SGIFZpsJbW0YSLn6ThisskHY4s6Y+xVZSR27/LbRnar8ufG0+MnjyZTShUbskymQZbv08gkrHWPmDQOmoYsngpZGIwPm" + "B4AAYR/FtYkNjZxGs83LMGcxvoF4tXCPmI6Y5WK0WhgsVsZuUbcgyTLUGg+GG0MZoeS5qTviBAhUF7Kfl1oW/f/7ksTwAho2CPYP" + "aSnK58GfmdSauJn34Us+hu3FSFh+e5ppuLoAqvE49JuiVZEagnRBCaLCbEBGifOFMrVczZAaVbi9dOCR7WSrllyEjIiGJSSHJmU1" + "6pqzpgWTLPVOQZYumV5LoF2Vj6I8RmBQqTNsqwJj6aqStJtvdqAksiIPRKnOZNlKMvaQybagtFe8MpeQgKn5dqRN2Gdl7DA4zNbQ" + "k02ODBQBUGcmVUqZdHNmn4ru3ASbO2ZdtC7v9Zmi72BCUP0fPZW5VmB7HmchMfz6xB2xQ9coegs+VfKkocUWKwNNxWtSnNaauCTS" + "rgWD4u0OUQjuRWYZinDkPRCMO2Jh0D4o4kVFRwKhGGCqWKioqMOUoWdVWMYOFng5eBaG5GAqBsH3JsNO1qSHtFHDQ9HXalHbWqLB" + "QtZQsNHLEraryzN6xdKsM1koLLkmyTQ3SkxBTUUzLjEwMKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq" + "qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr/+5LE8IIaGgj0Dr0rivbA3uHGIbmqqqqqqqqqqqqqqqqqqqqqqqqqqqqq" + "qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoAUakj" + "rtRWckiBjGZ5j8FpxFKFGjBLBRAkGlws9jjfBoPkCNAuw9yFEVSmkqNDIyURwtJeDb2VlVlUl1INRrc///2Mk4T1mUZKlipwo25q" + "KypYqVKI4XSaU55v/919/+soipVRGw/NjKVw/xEQlji7DeayiVGSiNh7pKrLKpTpUiEI0NF0E6VLHShRGw9mSqS88ldbn//yUa+Z" + "KMooiERB8PkE83JRlV16ismklOG5sZXcNzclFZaxKqIFpd9NTEFNRTMuMTAwVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "//uSxJgD17XquExlJsgAADSAAAAEVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV" + "VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQ==";
+
+// src/commands/chat.ts
+async function ringCallAudio(recall, botId) {
+  try {
+    const resp = await recall.outputAudio(botId, CHIME_MP3_BASE64);
+    if (!resp.ok)
+      await resp.text().catch(() => "");
+  } catch {}
+}
+async function ringChime(fetchFn) {
+  try {
+    const state = loadState();
+    const presenceUrl = state.local_presence_update_url;
+    const token = state.presence_write_token;
+    if (typeof presenceUrl !== "string" || !presenceUrl)
+      return;
+    if (typeof token !== "string" || !token)
+      return;
+    const u = new URL(presenceUrl);
+    u.pathname = "/chime";
+    await fetchFn(u.toString(), {
+      method: "POST",
+      headers: { "X-Samograph-Presence-Token": token }
+    });
+  } catch {}
+}
+async function cmdChat(args, deps = {}) {
+  const recall = deps.recall ?? makeRecallClient();
+  const bid = botIdFromArgsOrState(args.bot_id);
+  const resp = await recall.sendChat(bid, args.message ?? "");
+  if (!resp.ok) {
+    const body = await resp.text().catch(() => "");
+    throw new Error(`send_chat_message failed: ${resp.status} ${body}`);
+  }
+  await ringCallAudio(recall, bid);
+  await ringChime(deps.fetchFn ?? fetch);
+  process.stdout.write(`Sent: ${args.message}
+`);
+}
+
+// src/commands/intro.ts
+var UTTERANCE_RE = /^\[[^\]]+\]\s+([^:]+):\s*(.*)$/;
+function firstHeardLine(path) {
+  for (const line of localTranscriptLines(path)) {
+    const m = line.match(UTTERANCE_RE);
+    if (!m)
+      continue;
+    const speaker = m[1].trim();
+    const text = m[2].trim();
+    if (!text || speaker.startsWith("SAMOGRAPH-WARNING"))
+      continue;
+    return { speaker, text };
+  }
+  return null;
+}
+function buildIntroMessage(args, transcriptPath) {
+  const custom = args.intro_text?.trim();
+  let message = custom && custom.length ? custom : DEFAULT_INTRO_TEXT;
+  if (args.context) {
+    const first = firstHeardLine(transcriptPath);
+    if (first) {
+      message += `
+
+The first thing I heard was \u2014 ${first.speaker}: "${first.text}"`;
+    }
+  }
+  return message;
+}
+async function cmdIntro(args, deps = {}) {
+  const recall = deps.recall ?? makeRecallClient();
+  const message = buildIntroMessage(args, deps.transcriptPath);
+  await cmdChat({ command: "chat", message, bot_id: args.bot_id ?? null }, { recall, fetchFn: deps.fetchFn });
+}
+var IN_CALL_STATUSES = new Set([
+  "in_call_recording",
+  "in_call_not_recording"
+]);
+function latestStatusCode(bot) {
+  const changes = bot?.status_changes;
+  if (Array.isArray(changes) && changes.length) {
+    return String(changes[changes.length - 1]?.code ?? "");
+  }
+  return "";
+}
+var realSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function postIntroOnJoin(recall, botId, text, opts = {}) {
+  const tries = opts.tries ?? 12;
+  const delayMs = opts.delayMs ?? 2500;
+  const sleepFn = opts.sleepFn ?? realSleep;
+  for (let i = 0;i < tries; i++) {
+    try {
+      const bot = await recall.getBot(botId);
+      if (IN_CALL_STATUSES.has(latestStatusCode(bot))) {
+        const resp = await recall.sendChat(botId, text);
+        if (resp.ok) {
+          process.stdout.write(`Posted intro to meeting chat.
+`);
+          return true;
+        }
+        process.stderr.write(`Note: posting the intro returned HTTP ${resp.status}. ` + `Run 'samograph intro' to retry if it did not appear.
+`);
+        return false;
+      }
+    } catch {}
+    if (i < tries - 1)
+      await sleepFn(delayMs);
+  }
+  process.stderr.write("Note: could not post the intro yet (bot not in the call). " + `Run 'samograph intro' once it has joined.
+`);
+  return false;
+}
+
+// src/server.ts
+import { appendFileSync } from "fs";
+import { readFileSync as readFileSync5 } from "fs";
+import { Buffer as Buffer3 } from "buffer";
+import { createHash, randomUUID, timingSafeEqual } from "crypto";
+var WEBHOOK_MAX_BYTES = 1024 * 1024;
+var HEALTH_MARKER = "samograph-health";
+async function probeTunnelHealth(publicBaseUrl, fetchFn = fetch, nonceFn = randomUUID) {
+  const nonce = nonceFn();
+  try {
+    const response = await fetchFn(`${publicBaseUrl}/health?nonce=${encodeURIComponent(nonce)}`, { cache: "no-store", signal: AbortSignal.timeout(5000) });
+    const headerCode = response.headers.get("ngrok-error-code");
+    if (headerCode) {
+      return { ok: false, ngrokErrorCode: headerCode.trim() };
+    }
+    if (response.ok) {
+      const body = await response.json().catch(() => null);
+      if (body !== null && body.nonce === nonce && body.marker === HEALTH_MARKER) {
+        return { ok: true, ngrokErrorCode: null };
+      }
+      return { ok: false, ngrokErrorCode: null };
+    }
+    const text = await response.text().catch(() => "");
+    const bodyCode = text.match(/ERR_NGROK_\d+/);
+    return { ok: false, ngrokErrorCode: bodyCode ? bodyCode[0] : null };
+  } catch {
+    return { ok: false, ngrokErrorCode: null };
+  }
+}
+var TUNNEL_WATCHDOG_INTERVAL_MS = 60000;
+var TUNNEL_WATCHDOG_FAILURE_THRESHOLD = 2;
+function fmtTranscriptTs(d) {
+  const pad = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ` + `${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}`;
+}
+function defaultSchedule(fn, ms) {
+  const timer = setInterval(fn, ms);
+  timer.unref?.();
+  return { stop: () => clearInterval(timer) };
+}
+function startTunnelWatchdog(options) {
+  const publicBase = (options.publicBase ?? "").replace(/\/+$/, "");
+  if (!publicBase)
+    return null;
+  const fetchFn = options.fetch ?? fetch;
+  const nonceFn = options.nonce ?? randomUUID;
+  const now = options.now ?? (() => new Date);
+  const writeStderr = options.stderr ?? ((s) => void process.stderr.write(s));
+  let consecutiveFailures = 0;
+  let inOutage = false;
+  const emit = (text) => {
+    const line = `[${fmtTranscriptTs(now())}] ${text}`;
+    try {
+      appendFileSync(options.transcriptPath, line + `
+`);
+    } catch {}
+    writeStderr(line + `
+`);
+  };
+  const tick = async () => {
+    const probe = await probeTunnelHealth(publicBase, fetchFn, nonceFn);
+    if (probe.ok) {
+      consecutiveFailures = 0;
+      if (inOutage) {
+        inOutage = false;
+        emit("SAMOGRAPH-WARNING: tunnel recovered - live transcript delivery resumed");
+      }
+      return;
+    }
+    consecutiveFailures += 1;
+    if (consecutiveFailures >= TUNNEL_WATCHDOG_FAILURE_THRESHOLD && !inOutage) {
+      inOutage = true;
+      const cause = probe.ngrokErrorCode ?? "health check failed";
+      emit(`SAMOGRAPH-WARNING: tunnel unreachable (${cause}) - transcript may be ` + "incomplete; rejoin with --tunnel cloudflared or --webhook-base");
+    }
+  };
+  const scheduled = (options.schedule ?? defaultSchedule)(() => void tick(), options.intervalMs ?? TUNNEL_WATCHDOG_INTERVAL_MS);
+  return { tick, stop: () => scheduled.stop() };
+}
+function tokensEqual(a, b) {
+  if (!a || !b)
+    return false;
+  const ha = createHash("sha256").update(a).digest();
+  const hb = createHash("sha256").update(b).digest();
+  return timingSafeEqual(ha, hb);
+}
+async function handleWebhook(payload, transcriptPath) {
+  const line = formatTranscriptLine(payload);
+  if (line !== null) {
+    appendFileSync(transcriptPath, line + `
+`);
+  }
+  return line;
+}
+function selectedFrame(latest, bySource, source) {
+  const key = normalizeFrameSource(source);
+  return key ? bySource.get(key) ?? { raw: null, metadata: null } : latest;
+}
+function frameInventory(bySource) {
+  const seen = new Set;
+  const frames = [];
+  for (const frame of bySource.values()) {
+    const sourceKey = frame.metadata?.source_key;
+    if (!frame.metadata || !sourceKey || seen.has(sourceKey))
+      continue;
+    seen.add(sourceKey);
+    frames.push(frame.metadata);
+  }
+  frames.sort((a, b) => String(a.source_key).localeCompare(String(b.source_key)));
+  return frames;
+}
+function callIdFromStateFile(path) {
+  if (!path)
+    return null;
+  try {
+    const state = JSON.parse(readFileSync5(path, "utf-8"));
+    return typeof state.bot_id === "string" ? state.bot_id : null;
+  } catch {
+    return null;
+  }
+}
+function serve(port, transcriptPath, options = {}) {
+  const opts = typeof options === "string" || options === null ? { webhookToken: options } : options;
+  const latestVideoFrame = { raw: null, metadata: null };
+  let presence = newPresenceSnapshot();
+  const framesBySource = new Map;
+  const frameAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Frame-Token"), opts.frameToken);
+  const presencePageAuthorized = (req, url) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceToken) || tokensEqual(url.searchParams.get("token"), opts.presenceToken);
+  const presenceJsonAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceToken);
+  const presenceWriteAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceWriteToken);
+  return Bun.serve({
+    port,
+    hostname: "127.0.0.1",
+    maxRequestBodySize: WEBHOOK_MAX_BYTES,
+    async fetch(req, server) {
+      const url = new URL(req.url);
+      if (req.method === "POST" && url.pathname === "/webhook") {
+        if (!tokensEqual(url.searchParams.get("token"), opts.webhookToken)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        const contentLength = req.headers.get("content-length");
+        if (contentLength !== null && Number(contentLength) > WEBHOOK_MAX_BYTES) {
+          return Response.json({ error: "payload too large" }, { status: 413 });
+        }
+        let payload = {};
+        try {
+          const body = await req.text();
+          if (new TextEncoder().encode(body).byteLength > WEBHOOK_MAX_BYTES) {
+            return Response.json({ error: "payload too large" }, { status: 413 });
+          }
+          payload = body ? JSON.parse(body) : {};
+        } catch {
+          payload = {};
+        }
+        const transcriptLine = await handleWebhook(payload, transcriptPath);
+        if (transcriptLine !== null) {
+          const activity = activityFromTranscriptLine(transcriptLine);
+          if (activity !== null) {
+            presence = appendPresenceActivity(presence, activity);
+          }
+        }
+        return Response.json({ ok: true });
+      }
+      if (req.method === "GET" && url.pathname === "/health") {
+        return Response.json({
+          ok: true,
+          nonce: url.searchParams.get("nonce") ?? "",
+          marker: HEALTH_MARKER
+        });
+      }
+      if (req.method === "GET" && url.pathname === "/frame") {
+        if (!frameAuthorized(req)) {
+          return new Response("", { status: 403 });
+        }
+        const frame = selectedFrame(latestVideoFrame, framesBySource, url.searchParams.get("source"));
+        if (frame.raw === null) {
+          return new Response("", { status: 404 });
+        }
+        return new Response(frame.raw, {
+          headers: { "Content-Type": "image/png" }
+        });
+      }
+      if (req.method === "GET" && url.pathname === "/frame.json") {
+        if (!frameAuthorized(req)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        const frame = selectedFrame(latestVideoFrame, framesBySource, url.searchParams.get("source"));
+        if (frame.metadata === null) {
+          return Response.json({ error: "no frame" }, { status: 404 });
+        }
+        return Response.json(frame.metadata);
+      }
+      if (req.method === "GET" && url.pathname === "/frames.json") {
+        if (!frameAuthorized(req)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        return Response.json({ frames: frameInventory(framesBySource) });
+      }
+      if (req.method === "GET" && url.pathname === "/presence") {
+        if (!presencePageAuthorized(req, url)) {
+          return new Response("", { status: 403 });
+        }
+        return new Response(presencePageHtml(), {
+          headers: {
+            "Content-Type": "text/html; charset=utf-8",
+            "Cache-Control": "no-store"
+          }
+        });
+      }
+      if (req.method === "GET" && url.pathname === "/presence.json") {
+        if (!presenceJsonAuthorized(req)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        return Response.json(presence, {
+          headers: { "Cache-Control": "no-store" }
+        });
+      }
+      if (req.method === "POST" && url.pathname === "/presence") {
+        if (!presenceWriteAuthorized(req)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        const contentLength = req.headers.get("content-length");
+        if (contentLength !== null && Number(contentLength) > WEBHOOK_MAX_BYTES) {
+          return Response.json({ error: "payload too large" }, { status: 413 });
+        }
+        let payload = {};
+        try {
+          const body = await req.text();
+          if (new TextEncoder().encode(body).byteLength > WEBHOOK_MAX_BYTES) {
+            return Response.json({ error: "payload too large" }, { status: 413 });
+          }
+          payload = body ? JSON.parse(body) : {};
+        } catch {
+          payload = {};
+        }
+        const rawPayload = payload;
+        const state = normalizePresenceState(rawPayload.state);
+        if (state === null) {
+          return Response.json({ error: "invalid presence state" }, { status: 400 });
+        }
+        const hasMessage = typeof rawPayload.message === "string" && sanitizePresenceText(rawPayload.message) !== "";
+        const message = hasMessage ? sanitizePresenceMessage(rawPayload.message, state) : defaultPresenceMessage(state);
+        if (hasMessage) {
+          presence = appendPresenceActivity(presence, {
+            kind: activityKindForState(state),
+            label: labelForPresenceState(state),
+            text: message
+          });
+        }
+        presence = newPresenceSnapshot(state, message, presence.activities);
+        return Response.json({ ok: true, presence });
+      }
+      if (req.method === "POST" && url.pathname === "/chime") {
+        if (!presenceWriteAuthorized(req)) {
+          return Response.json({ error: "forbidden" }, { status: 403 });
+        }
+        presence = withChime(presence);
+        return Response.json({ ok: true, chime: presence.chime });
+      }
+      if (url.pathname === "/video-ws") {
+        if (!tokensEqual(url.searchParams.get("token"), opts.frameToken)) {
+          return new Response("", { status: 403 });
+        }
+        const upgraded = server.upgrade(req);
+        if (upgraded)
+          return;
+        return new Response("Upgrade Required", { status: 426 });
+      }
+      return new Response("Not Found", { status: 404 });
+    },
+    websocket: {
+      message(_ws, message) {
+        let payload;
+        try {
+          const text = typeof message === "string" ? message : Buffer3.from(message).toString("utf-8");
+          payload = JSON.parse(text);
+        } catch {
+          return;
+        }
+        const decoded = decodeVideoSeparatePng(payload, opts.currentCallId?.() ?? null);
+        if (decoded === null)
+          return;
+        latestVideoFrame.raw = decoded.raw;
+        latestVideoFrame.metadata = decoded.metadata;
+        const frame = { raw: decoded.raw, metadata: decoded.metadata };
+        for (const alias of frameSourceAliases(decoded.metadata)) {
+          framesBySource.set(alias, frame);
+        }
+      }
+    }
+  });
+}
+
+// src/tunnel.ts
+import { spawn as spawnChild } from "child_process";
+import { mkdirSync as mkdirSync4, openSync as openSync2, closeSync as closeSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { join as join5 } from "path";
+var CLOUDFLARED_URL_RE = /https:\/\/[a-z0-9][a-z0-9-]*\.trycloudflare\.com(?![\w.-])/i;
+function parseCloudflaredUrl(text) {
+  const match = text.match(CLOUDFLARED_URL_RE);
+  return match ? match[0] : null;
+}
+function cloudflaredBinary(env = process.env) {
+  return env.CLOUDFLARED_BIN || "cloudflared";
+}
+var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+var CLOUDFLARED_URL_ATTEMPTS = 40;
+var CLOUDFLARED_URL_SLEEP_MS = 750;
+async function waitForCloudflaredUrl(readText, sleepFn = sleep2, attempts = CLOUDFLARED_URL_ATTEMPTS, aborted = () => false) {
+  for (let i = 0;i < attempts; i++) {
+    const url = parseCloudflaredUrl(readText());
+    if (url)
+      return url;
+    if (aborted())
+      return null;
+    if (i < attempts - 1)
+      await sleepFn(CLOUDFLARED_URL_SLEEP_MS);
+  }
+  return null;
+}
+async function startCloudflared(port) {
+  const dir = samographDir();
+  mkdirSync4(dir, { recursive: true });
+  const logPath = join5(dir, "cloudflared.log");
+  writeFileSync4(logPath, "");
+  const fd = openSync2(logPath, "a");
+  let spawnFailed = false;
+  const child = spawnChild(cloudflaredBinary(), ["tunnel", "--url", `http://127.0.0.1:${port}`], { detached: true, stdio: ["ignore", "ignore", fd] });
+  child.on("error", () => {
+    spawnFailed = true;
+  });
+  child.on("exit", () => {
+    spawnFailed = true;
+  });
+  child.unref();
+  const url = await waitForCloudflaredUrl(() => {
+    try {
+      return readFileSync6(logPath, "utf-8");
+    } catch {
+      return "";
+    }
+  }, sleep2, CLOUDFLARED_URL_ATTEMPTS, () => spawnFailed);
+  closeSync2(fd);
+  if (url === null || typeof child.pid !== "number") {
+    try {
+      child.kill("SIGTERM");
+    } catch {}
+    return null;
+  }
+  return {
+    proc: {
+      get pid() {
+        return child.pid;
+      },
+      kill() {
+        try {
+          child.kill("SIGTERM");
+        } catch {}
+      }
+    },
+    url
+  };
+}
+
 // src/rtmp.ts
 import {
   existsSync as existsSync5,
-  mkdirSync as mkdirSync4,
+  mkdirSync as mkdirSync5,
   copyFileSync as copyFileSync2,
   chmodSync as chmodSync3
 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { homedir as homedir4 } from "os";
 function rtmpStreamPath(rtmpUrl) {
   const parsed = new URL(rtmpUrl);
   return parsed.pathname.replace(/^\/+/, "");
 }
-var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
 async function ngrokApiPort(fetchFn = fetch) {
   for (const p of [4040, 4041, 4042, 4043]) {
     try {
@@ -1342,7 +1928,7 @@ async function waitForNgrok(port, timeout = 15, fetchFn = fetch) {
         return tunnels[0].public_url;
       }
     } catch {}
-    await sleep2(1000);
+    await sleep3(1000);
   }
   return null;
 }
@@ -1386,7 +1972,7 @@ async function ensureMediamtx() {
   if (inPath) {
     return inPath;
   }
-  const localBin = join5(homedir4(), ".samograph", "bin", "mediamtx");
+  const localBin = join6(homedir4(), ".samograph", "bin", "mediamtx");
   if (existsSync5(localBin)) {
     return localBin;
   }
@@ -1401,20 +1987,20 @@ async function ensureMediamtx() {
   const url = `https://github.com/bluenviron/mediamtx/releases/download/${version}/${filename}`;
   process.stdout.write(`Downloading mediamtx ${version}...
 `);
-  const tmpdir = join5(homedir4(), ".samograph", "tmp-mediamtx");
-  mkdirSync4(tmpdir, { recursive: true });
-  const archivePath = join5(tmpdir, filename);
+  const tmpdir = join6(homedir4(), ".samograph", "tmp-mediamtx");
+  mkdirSync5(tmpdir, { recursive: true });
+  const archivePath = join6(tmpdir, filename);
   const resp = await fetch(url);
   if (!resp.ok) {
     throw new Error(`Failed to download mediamtx: ${resp.status}`);
   }
   await Bun.write(archivePath, resp);
   await Bun.$`tar -xzf ${archivePath} -C ${tmpdir} mediamtx`.quiet();
-  const extracted = join5(tmpdir, "mediamtx");
+  const extracted = join6(tmpdir, "mediamtx");
   if (!existsSync5(extracted)) {
     throw new Error("mediamtx binary not found in downloaded archive");
   }
-  mkdirSync4(join5(localBin, ".."), { recursive: true });
+  mkdirSync5(join6(localBin, ".."), { recursive: true });
   copyFileSync2(extracted, localBin);
   chmodSync3(localBin, 493);
   return localBin;
@@ -1425,7 +2011,7 @@ async function startMediamtx() {
     stdout: "ignore",
     stderr: "ignore"
   });
-  await sleep2(1500);
+  await sleep3(1500);
   if (proc.exitCode !== null) {
     return null;
   }
@@ -1438,7 +2024,7 @@ function defaultKill(pid, signal) {
     process.kill(pid, signal);
   } catch {}
 }
-function spawnDetached(cmd, opts = {}, spawnFn = spawnChild) {
+function spawnDetached(cmd, opts = {}, spawnFn = spawnChild2) {
   const [command, ...args] = cmd;
   if (!command) {
     throw new Error("cannot spawn an empty command");
@@ -1462,13 +2048,43 @@ function spawnDetached(cmd, opts = {}, spawnFn = spawnChild) {
   };
 }
 var PRESENCE_PAGE_MARKER = "samograph-presence";
+var TUNNEL_HEALTH_ATTEMPTS = 40;
+var TUNNEL_HEALTH_SLEEP_MS = 750;
+var NGROK_ERROR_HINTS = {
+  ERR_NGROK_727: "account HTTP request limit exceeded"
+};
+async function checkTunnelHealth(publicBaseUrl, fetchFn = fetch, sleepFn = sleep4, attempts = TUNNEL_HEALTH_ATTEMPTS, nonceFn = randomUUID2) {
+  for (let i = 0;i < attempts; i++) {
+    const probe = await probeTunnelHealth(publicBaseUrl, fetchFn, nonceFn);
+    if (probe.ok) {
+      return probe;
+    }
+    if (probe.ngrokErrorCode) {
+      return probe;
+    }
+    if (i < attempts - 1) {
+      await sleepFn(TUNNEL_HEALTH_SLEEP_MS);
+    }
+  }
+  return { ok: false, ngrokErrorCode: null };
+}
+function tunnelHealthFailureMessage(result) {
+  const options = "Options: --tunnel cloudflared (free, no request limits), " + "--webhook-base with your own tunnel, or upgrade ngrok.";
+  if (result.ngrokErrorCode) {
+    const hint = NGROK_ERROR_HINTS[result.ngrokErrorCode] ?? "see https://ngrok.com/docs/errors";
+    return `Error: tunnel is not relaying requests (ngrok error ${result.ngrokErrorCode}: ${hint}). ` + `The bot would join but receive no transcript. ${options}
+`;
+  }
+  return "Error: tunnel is not relaying requests (the public /health round-trip never " + "returned this server's response \u2014 interstitial page, unreachable URL, or a " + "tunnel pointed at something else). " + `The bot would join but receive no transcript. ${options}
+`;
+}
 var PRESENCE_PREFLIGHT_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 " + "(KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36";
 var PRESENCE_PREFLIGHT_ATTEMPTS = 40;
 var PRESENCE_PREFLIGHT_SLEEP_MS = 750;
-async function sleep3(ms) {
+async function sleep4(ms) {
   await new Promise((resolve2) => setTimeout(resolve2, ms));
 }
-async function waitForPresenceCamera(url, fetchFn = fetch, sleepFn = sleep3, attempts = PRESENCE_PREFLIGHT_ATTEMPTS) {
+async function waitForPresenceCamera(url, fetchFn = fetch, sleepFn = sleep4, attempts = PRESENCE_PREFLIGHT_ATTEMPTS) {
   for (let i = 0;i < attempts; i++) {
     try {
       const response = await fetchFn(url, {
@@ -1493,16 +2109,17 @@ async function cmdJoin(args, deps = {}) {
   const kill = deps.kill ?? defaultKill;
   const spawn = deps.spawn ?? spawnDetached;
   const waitForNgrokFn = deps.waitForNgrok ?? waitForNgrok;
+  const startCloudflaredFn = deps.startCloudflared ?? startCloudflared;
   const startMediamtxFn = deps.startMediamtx ?? startMediamtx;
   const startNgrokTcpTunnelFn = deps.startNgrokTcpTunnel ?? startNgrokTcpTunnel;
   const fetchFn = deps.fetch ?? fetch;
-  const sleepFn = deps.sleep ?? sleep3;
+  const sleepFn = deps.sleep ?? sleep4;
   const transcriptFile = resolveNewTranscriptFile(args.transcript_dir);
-  writeFileSync4(transcriptFile, "", { flag: "wx", mode: 384 });
-  const webhookToken = randomUUID();
-  const frameToken = randomUUID();
-  const presenceToken = randomUUID();
-  const presenceWriteToken = randomUUID();
+  writeFileSync5(transcriptFile, "", { flag: "wx", mode: 384 });
+  const webhookToken = randomUUID2();
+  const frameToken = randomUUID2();
+  const presenceToken = randomUUID2();
+  const presenceWriteToken = randomUUID2();
   const keyterms = loadDict(args.dict);
   const name = botName(args.name);
   const port = args.port || 8080;
@@ -1512,7 +2129,7 @@ async function cmdJoin(args, deps = {}) {
   const videoFrameDir = resolveVideoFrameDir(args.frame_dir, false);
   const videoFrameFile = resolveVideoFrameFile(args.frame_dir, false);
   const oldState = loadState();
-  for (const pidKey of ["server_pid", "ngrok_pid", "mediamtx_pid"]) {
+  for (const pidKey of ["server_pid", "ngrok_pid", "tunnel_pid", "mediamtx_pid"]) {
     const pid = oldState[pidKey];
     if (typeof pid === "number" && pid) {
       kill(pid, "SIGTERM");
@@ -1520,25 +2137,7 @@ async function cmdJoin(args, deps = {}) {
   }
   const selfPath = fileURLToPath2(import.meta.url);
   const cliPath = selfPath.replace(/commands\/join\.ts$/, "cli.ts");
-  const server = spawn([
-    process.execPath,
-    cliPath,
-    "_serve",
-    "--port",
-    String(port),
-    "--transcript-file",
-    transcriptFile,
-    "--call-id-file",
-    stateFile()
-  ], {
-    env: {
-      SAMOGRAPH_WEBHOOK_TOKEN: webhookToken,
-      SAMOGRAPH_FRAME_TOKEN: frameToken,
-      SAMOGRAPH_PRESENCE_TOKEN: presenceToken,
-      SAMOGRAPH_PRESENCE_WRITE_TOKEN: presenceWriteToken
-    }
-  });
-  const started = new Set([server]);
+  const started = new Set;
   let stateSaved = false;
   const cleanupUnsaved = () => {
     if (stateSaved)
@@ -1576,15 +2175,32 @@ async function cmdJoin(args, deps = {}) {
   if (webhookBase !== null) {
     webhookBase = normalizeWebhookBase(webhookBase);
   }
-  const ngrok = webhookBase ? null : spawn(["ngrok", "http", String(port), "--log=stdout"]);
+  const useCloudflared = (args.tunnel ?? "ngrok") === "cloudflared";
+  const ngrok = webhookBase || useCloudflared ? null : spawn(["ngrok", "http", String(port), "--log=stdout"]);
   if (ngrok)
     started.add(ngrok);
+  let cloudflared = null;
   try {
     let webhookUrl;
     if (webhookBase) {
       process.stdout.write(`Using external tunnel (--webhook-base): ${webhookBase} \u2192 localhost:${port}
 `);
       webhookUrl = webhookBase;
+    } else if (useCloudflared) {
+      process.stdout.write(`Starting cloudflared tunnel on port ${port}...
+`);
+      const tunnel = await startCloudflaredFn(port);
+      if (!tunnel) {
+        process.stderr.write("Error: cloudflared tunnel failed to start. Install cloudflared " + "(e.g. brew install cloudflared) or point CLOUDFLARED_BIN at the " + `binary; alternatively use --webhook-base or the default ngrok tunnel.
+`);
+        cleanupUnsaved();
+        throw new ExitError(1);
+      }
+      cloudflared = tunnel.proc;
+      started.add(cloudflared);
+      webhookUrl = tunnel.url;
+      process.stdout.write(`cloudflared tunnel: ${webhookUrl} \u2192 localhost:${port}
+`);
     } else {
       process.stdout.write(`Starting ngrok tunnel on port ${port}...
 `);
@@ -1597,6 +2213,33 @@ async function cmdJoin(args, deps = {}) {
       throw new ExitError(1);
     }
     const publicBaseUrl = webhookUrl.replace(/\/+$/, "");
+    const server = spawn([
+      process.execPath,
+      cliPath,
+      "_serve",
+      "--port",
+      String(port),
+      "--transcript-file",
+      transcriptFile,
+      "--call-id-file",
+      stateFile(),
+      "--public-base",
+      publicBaseUrl
+    ], {
+      env: {
+        SAMOGRAPH_WEBHOOK_TOKEN: webhookToken,
+        SAMOGRAPH_FRAME_TOKEN: frameToken,
+        SAMOGRAPH_PRESENCE_TOKEN: presenceToken,
+        SAMOGRAPH_PRESENCE_WRITE_TOKEN: presenceWriteToken
+      }
+    });
+    started.add(server);
+    const health = await checkTunnelHealth(publicBaseUrl, fetchFn, sleepFn);
+    if (!health.ok) {
+      process.stderr.write(tunnelHealthFailureMessage(health));
+      cleanupUnsaved();
+      throw new ExitError(1);
+    }
     const presenceBgSuffix = args.presence_bg ? `&bg=${encodeURIComponent(args.presence_bg)}` : "";
     let presencePageUrl = args.no_presence ? null : `${publicBaseUrl}/presence?token=${encodeURIComponent(presenceToken)}${presenceBgSuffix}`;
     webhookUrl = `${publicBaseUrl}/webhook?token=${encodeURIComponent(webhookToken)}`;
@@ -1774,6 +2417,9 @@ async function cmdJoin(args, deps = {}) {
       newState.presence_token = presenceToken;
       newState.presence_write_token = presenceWriteToken;
     }
+    if (cloudflared) {
+      newState.tunnel_pid = cloudflared.pid;
+    }
     if (mediamtxProc) {
       newState.mediamtx_pid = mediamtxProc.pid;
     }
@@ -1835,6 +2481,10 @@ The agent will appear in the call within ~15 seconds.
 `);
     process.stdout.write(`--------------------------
 `);
+    if (args.intro) {
+      const introText = args.intro_text && args.intro_text.trim() ? args.intro_text.trim() : DEFAULT_INTRO_TEXT;
+      postIntroOnJoin(recall, bid, introText);
+    }
   } catch (err) {
     cleanupUnsaved();
     throw err;
@@ -1842,7 +2492,7 @@ The agent will appear in the call within ~15 seconds.
 }
 
 // src/commands/leave.ts
-import { existsSync as existsSync6, unlinkSync, appendFileSync } from "fs";
+import { existsSync as existsSync6, unlinkSync, appendFileSync as appendFileSync2 } from "fs";
 function defaultKill2(pid, signal) {
   process.kill(pid, signal);
 }
@@ -1869,12 +2519,12 @@ async function cmdLeave(args, deps = {}) {
     if (existsSync6(transcriptFile)) {
       const ts = fmtSentinelTs(now());
       try {
-        appendFileSync(transcriptFile, `[${ts}] SAMOGRAPH_CALL_ENDED
+        appendFileSync2(transcriptFile, `[${ts}] SAMOGRAPH_CALL_ENDED
 `);
       } catch {}
     }
   }
-  for (const pidKey of ["server_pid", "ngrok_pid", "mediamtx_pid"]) {
+  for (const pidKey of ["server_pid", "ngrok_pid", "tunnel_pid", "mediamtx_pid"]) {
     const pid = state[pidKey];
     if (typeof pid === "number" && pid) {
       try {
@@ -1894,7 +2544,7 @@ async function cmdLeave(args, deps = {}) {
 }
 
 // src/commands/status.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5, statSync } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7, statSync } from "fs";
 async function cmdStatus(args, deps = {}) {
   const recall = deps.recall ?? makeRecallClient();
   const fetchFn = deps.fetchFn ?? fetch;
@@ -1912,7 +2562,7 @@ async function cmdStatus(args, deps = {}) {
   const state = loadState();
   const tf = typeof state.transcript_file === "string" ? state.transcript_file : defaultTranscriptFile();
   if (existsSync7(tf)) {
-    const lines = readFileSync5(tf, "utf-8").split(/\r?\n/).filter((l) => l.trim() && !SENTINEL_RE.test(l));
+    const lines = readFileSync7(tf, "utf-8").split(/\r?\n/).filter((l) => l.trim() && !SENTINEL_RE.test(l));
     process.stdout.write(`Transcript lines so far: ${lines.length}
 `);
     if (lines.length) {
@@ -1993,7 +2643,7 @@ async function cmdStatus(args, deps = {}) {
 
 // src/commands/screenshot.ts
 import { resolve as resolve2 } from "path";
-var sleep4 = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep5 = (ms) => new Promise((r) => setTimeout(r, ms));
 function defaultRun(cmd) {
   const proc = Bun.spawnSync(cmd);
   return { exitCode: proc.exitCode };
@@ -2035,7 +2685,7 @@ async function cmdScreenshot(args, deps = {}) {
   const meetingUrl = state.meeting_url ?? "";
   if (meetingUrl.includes("meet.google.com") || meetingUrl.includes("zoom.us")) {
     focus(meetingUrl);
-    await sleep4(1000);
+    await sleep5(1000);
   }
   const result = run(["screencapture", "-x", out]);
   if (result.exitCode !== 0) {
@@ -2103,21 +2753,8 @@ async function cmdTranscript(args, deps = {}) {
   }
 }
 
-// src/commands/chat.ts
-async function cmdChat(args, deps = {}) {
-  const recall = deps.recall ?? makeRecallClient();
-  const bid = botIdFromArgsOrState(args.bot_id);
-  const resp = await recall.sendChat(bid, args.message ?? "");
-  if (!resp.ok) {
-    const body = await resp.text().catch(() => "");
-    throw new Error(`send_chat_message failed: ${resp.status} ${body}`);
-  }
-  process.stdout.write(`Sent: ${args.message}
-`);
-}
-
 // src/commands/frame.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
 import { dirname as dirname4, resolve as resolve3 } from "path";
 function defaultRun2(cmd) {
   const proc = Bun.spawnSync(cmd, { timeout: 15000 });
@@ -2215,10 +2852,10 @@ async function cmdFrame(args, deps = {}) {
   if (typeof legacyFrameFile === "string" && legacyFrameFile && existsSync8(legacyFrameFile)) {
     const output = archive && !args.out ? archiveExistingFrame(legacyFrameFile) : out;
     if (!(archive && !args.out)) {
-      writeFileSync5(output, readFileSync6(legacyFrameFile));
+      writeFileSync6(output, readFileSync8(legacyFrameFile));
       const metadataFile = frameMetadataPath(legacyFrameFile);
       if (existsSync8(metadataFile)) {
-        writeFileSync5(frameMetadataPath(output), readFileSync6(metadataFile));
+        writeFileSync6(frameMetadataPath(output), readFileSync8(metadataFile));
       }
     }
     process.stdout.write(resolve3(output) + `
@@ -2230,7 +2867,7 @@ async function cmdFrame(args, deps = {}) {
   const contentType = resp.headers.get("content-type") ?? "";
   if (resp.status === 200 && contentType.startsWith("image/")) {
     const buf = new Uint8Array(await resp.arrayBuffer());
-    writeFileSync5(out, buf);
+    writeFileSync6(out, buf);
     process.stdout.write(resolve3(out) + `
 `);
     return;
@@ -2299,8 +2936,8 @@ async function cmdFrames(deps = {}) {
 }
 
 // src/commands/dicts.ts
-import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync7 } from "fs";
-import { join as join6, basename } from "path";
+import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync9 } from "fs";
+import { join as join7, basename } from "path";
 async function cmdDicts() {
   const dir = dictDir();
   if (!existsSync9(dir)) {
@@ -2308,7 +2945,7 @@ async function cmdDicts() {
 `);
     return;
   }
-  const files = readdirSync(dir).filter((f) => f.endsWith(".txt")).sort().map((f) => join6(dir, f));
+  const files = readdirSync(dir).filter((f) => f.endsWith(".txt")).sort().map((f) => join7(dir, f));
   if (!files.length) {
     process.stdout.write(`No dictionaries found.
 `);
@@ -2317,7 +2954,7 @@ async function cmdDicts() {
   process.stdout.write(`Available dictionaries:
 `);
   for (const f of files) {
-    const terms = readFileSync7(f, "utf-8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0);
+    const terms = readFileSync9(f, "utf-8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0);
     const stem = basename(f, ".txt");
     process.stdout.write(`  ${stem} (${terms.length} terms)
 `);
@@ -2329,228 +2966,25 @@ async function cmdWatch() {
   await watch();
 }
 
-// src/server.ts
-import { appendFileSync as appendFileSync2 } from "fs";
-import { readFileSync as readFileSync8 } from "fs";
-import { Buffer as Buffer3 } from "buffer";
-import { createHash, timingSafeEqual } from "crypto";
-var WEBHOOK_MAX_BYTES = 1024 * 1024;
-function tokensEqual(a, b) {
-  if (!a || !b)
-    return false;
-  const ha = createHash("sha256").update(a).digest();
-  const hb = createHash("sha256").update(b).digest();
-  return timingSafeEqual(ha, hb);
-}
-async function handleWebhook(payload, transcriptPath) {
-  const line = formatTranscriptLine(payload);
-  if (line !== null) {
-    appendFileSync2(transcriptPath, line + `
-`);
-  }
-  return line;
-}
-function selectedFrame(latest, bySource, source) {
-  const key = normalizeFrameSource(source);
-  return key ? bySource.get(key) ?? { raw: null, metadata: null } : latest;
-}
-function frameInventory(bySource) {
-  const seen = new Set;
-  const frames = [];
-  for (const frame of bySource.values()) {
-    const sourceKey = frame.metadata?.source_key;
-    if (!frame.metadata || !sourceKey || seen.has(sourceKey))
-      continue;
-    seen.add(sourceKey);
-    frames.push(frame.metadata);
-  }
-  frames.sort((a, b) => String(a.source_key).localeCompare(String(b.source_key)));
-  return frames;
-}
-function callIdFromStateFile(path) {
-  if (!path)
-    return null;
-  try {
-    const state = JSON.parse(readFileSync8(path, "utf-8"));
-    return typeof state.bot_id === "string" ? state.bot_id : null;
-  } catch {
-    return null;
-  }
-}
-function serve(port, transcriptPath, options = {}) {
-  const opts = typeof options === "string" || options === null ? { webhookToken: options } : options;
-  const latestVideoFrame = { raw: null, metadata: null };
-  let presence = newPresenceSnapshot();
-  const framesBySource = new Map;
-  const frameAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Frame-Token"), opts.frameToken);
-  const presencePageAuthorized = (req, url) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceToken) || tokensEqual(url.searchParams.get("token"), opts.presenceToken);
-  const presenceJsonAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceToken);
-  const presenceWriteAuthorized = (req) => tokensEqual(req.headers.get("X-Samograph-Presence-Token"), opts.presenceWriteToken);
-  return Bun.serve({
-    port,
-    hostname: "127.0.0.1",
-    maxRequestBodySize: WEBHOOK_MAX_BYTES,
-    async fetch(req, server) {
-      const url = new URL(req.url);
-      if (req.method === "POST" && url.pathname === "/webhook") {
-        if (!tokensEqual(url.searchParams.get("token"), opts.webhookToken)) {
-          return Response.json({ error: "forbidden" }, { status: 403 });
-        }
-        const contentLength = req.headers.get("content-length");
-        if (contentLength !== null && Number(contentLength) > WEBHOOK_MAX_BYTES) {
-          return Response.json({ error: "payload too large" }, { status: 413 });
-        }
-        let payload = {};
-        try {
-          const body = await req.text();
-          if (new TextEncoder().encode(body).byteLength > WEBHOOK_MAX_BYTES) {
-            return Response.json({ error: "payload too large" }, { status: 413 });
-          }
-          payload = body ? JSON.parse(body) : {};
-        } catch {
-          payload = {};
-        }
-        const transcriptLine = await handleWebhook(payload, transcriptPath);
-        if (transcriptLine !== null) {
-          const activity = activityFromTranscriptLine(transcriptLine);
-          if (activity !== null) {
-            presence = appendPresenceActivity(presence, activity);
-          }
-        }
-        return Response.json({ ok: true });
-      }
-      if (req.method === "GET" && url.pathname === "/frame") {
-        if (!frameAuthorized(req)) {
-          return new Response("", { status: 403 });
-        }
-        const frame = selectedFrame(latestVideoFrame, framesBySource, url.searchParams.get("source"));
-        if (frame.raw === null) {
-          return new Response("", { status: 404 });
-        }
-        return new Response(frame.raw, {
-          headers: { "Content-Type": "image/png" }
-        });
-      }
-      if (req.method === "GET" && url.pathname === "/frame.json") {
-        if (!frameAuthorized(req)) {
-          return Response.json({ error: "forbidden" }, { status: 403 });
-        }
-        const frame = selectedFrame(latestVideoFrame, framesBySource, url.searchParams.get("source"));
-        if (frame.metadata === null) {
-          return Response.json({ error: "no frame" }, { status: 404 });
-        }
-        return Response.json(frame.metadata);
-      }
-      if (req.method === "GET" && url.pathname === "/frames.json") {
-        if (!frameAuthorized(req)) {
-          return Response.json({ error: "forbidden" }, { status: 403 });
-        }
-        return Response.json({ frames: frameInventory(framesBySource) });
-      }
-      if (req.method === "GET" && url.pathname === "/presence") {
-        if (!presencePageAuthorized(req, url)) {
-          return new Response("", { status: 403 });
-        }
-        return new Response(presencePageHtml(), {
-          headers: {
-            "Content-Type": "text/html; charset=utf-8",
-            "Cache-Control": "no-store"
-          }
-        });
-      }
-      if (req.method === "GET" && url.pathname === "/presence.json") {
-        if (!presenceJsonAuthorized(req)) {
-          return Response.json({ error: "forbidden" }, { status: 403 });
-        }
-        return Response.json(presence, {
-          headers: { "Cache-Control": "no-store" }
-        });
-      }
-      if (req.method === "POST" && url.pathname === "/presence") {
-        if (!presenceWriteAuthorized(req)) {
-          return Response.json({ error: "forbidden" }, { status: 403 });
-        }
-        const contentLength = req.headers.get("content-length");
-        if (contentLength !== null && Number(contentLength) > WEBHOOK_MAX_BYTES) {
-          return Response.json({ error: "payload too large" }, { status: 413 });
-        }
-        let payload = {};
-        try {
-          const body = await req.text();
-          if (new TextEncoder().encode(body).byteLength > WEBHOOK_MAX_BYTES) {
-            return Response.json({ error: "payload too large" }, { status: 413 });
-          }
-          payload = body ? JSON.parse(body) : {};
-        } catch {
-          payload = {};
-        }
-        const rawPayload = payload;
-        const state = normalizePresenceState(rawPayload.state);
-        if (state === null) {
-          return Response.json({ error: "invalid presence state" }, { status: 400 });
-        }
-        const hasMessage = typeof rawPayload.message === "string" && sanitizePresenceText(rawPayload.message) !== "";
-        const message = hasMessage ? sanitizePresenceMessage(rawPayload.message, state) : defaultPresenceMessage(state);
-        if (hasMessage) {
-          presence = appendPresenceActivity(presence, {
-            kind: activityKindForState(state),
-            label: labelForPresenceState(state),
-            text: message
-          });
-        }
-        presence = newPresenceSnapshot(state, message, presence.activities);
-        return Response.json({ ok: true, presence });
-      }
-      if (url.pathname === "/video-ws") {
-        if (!tokensEqual(url.searchParams.get("token"), opts.frameToken)) {
-          return new Response("", { status: 403 });
-        }
-        const upgraded = server.upgrade(req);
-        if (upgraded)
-          return;
-        return new Response("Upgrade Required", { status: 426 });
-      }
-      return new Response("Not Found", { status: 404 });
-    },
-    websocket: {
-      message(_ws, message) {
-        let payload;
-        try {
-          const text = typeof message === "string" ? message : Buffer3.from(message).toString("utf-8");
-          payload = JSON.parse(text);
-        } catch {
-          return;
-        }
-        const decoded = decodeVideoSeparatePng(payload, opts.currentCallId?.() ?? null);
-        if (decoded === null)
-          return;
-        latestVideoFrame.raw = decoded.raw;
-        latestVideoFrame.metadata = decoded.metadata;
-        const frame = { raw: decoded.raw, metadata: decoded.metadata };
-        for (const alias of frameSourceAliases(decoded.metadata)) {
-          framesBySource.set(alias, frame);
-        }
-      }
-    }
-  });
-}
-
 // src/commands/serve.ts
 function resolveServeOptions(args, env = process.env) {
   return {
     webhookToken: args.webhook_token || env.SAMOGRAPH_WEBHOOK_TOKEN || "",
     frameToken: args.frame_token || env.SAMOGRAPH_FRAME_TOKEN || "",
     presenceToken: args.presence_token || env.SAMOGRAPH_PRESENCE_TOKEN || "",
-    presenceWriteToken: args.presence_write_token || env.SAMOGRAPH_PRESENCE_WRITE_TOKEN || ""
+    presenceWriteToken: args.presence_write_token || env.SAMOGRAPH_PRESENCE_WRITE_TOKEN || "",
+    publicBase: args.public_base || env.SAMOGRAPH_PUBLIC_BASE || ""
   };
 }
 async function cmdServe(args) {
   const port = args.port || 8080;
   const transcriptPath = args.transcript_file;
+  const { publicBase, ...tokens } = resolveServeOptions(args);
   serve(port, transcriptPath, {
-    ...resolveServeOptions(args),
+    ...tokens,
     currentCallId: () => callIdFromStateFile(args.call_id_file)
   });
+  startTunnelWatchdog({ publicBase, transcriptPath });
   await new Promise(() => {});
 }
 
@@ -2622,7 +3056,7 @@ async function cmdDoctor() {
 }
 
 // src/googleDocs.ts
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
 import { createSign } from "crypto";
 var DOCS_SCOPE = "https://www.googleapis.com/auth/documents";
 var TOKEN_URI = "https://oauth2.googleapis.com/token";
@@ -2650,7 +3084,7 @@ function loadServiceAccountCredentials(path) {
   if (!existsSync11(rawPath)) {
     throw new Error(`Google credentials file not found: ${rawPath}`);
   }
-  const parsed = JSON.parse(readFileSync9(rawPath, "utf-8"));
+  const parsed = JSON.parse(readFileSync10(rawPath, "utf-8"));
   if (!parsed.client_email || !parsed.private_key) {
     throw new Error("Google credentials file must contain client_email and private_key");
   }
@@ -2936,14 +3370,16 @@ Put your AI agent in Zoom and Google Meet calls.
 samograph joins through Recall.ai, streams live transcript lines,
 captures call frames on demand, and sends explicit chat messages.
 
-Requires: Bun, RECALL_API_KEY env var (get one at recall.ai), and ngrok (or an alternative tunnel via --webhook-base).
+Requires: Bun, RECALL_API_KEY env var (get one at recall.ai), and a tunnel:
+ngrok (default), cloudflared (--tunnel cloudflared), or your own via --webhook-base.
 
 commands:
-  join <url> [--name N] [--dict D] [--port P] [--transcript-dir DIR] [--rtmp-url URL] [--rtmp] [--no-ws-video] [--frame-dir DIR] [--webhook-base URL] [--variant web|web_4_core|web_gpu] [--no-presence] [--presence-bg MODE]
+  join <url> [--name N] [--dict D] [--port P] [--transcript-dir DIR] [--rtmp-url URL] [--rtmp] [--no-ws-video] [--frame-dir DIR] [--tunnel ngrok|cloudflared] [--webhook-base URL] [--variant web|web_4_core|web_gpu] [--no-presence] [--presence-bg MODE] [--intro] [--intro-text TEXT]
   leave [bot_id]
   status [bot_id]
   screenshot [--out FILE] [bot_id]
   chat <message> [--bot-id ID]
+  intro [--intro-text TEXT] [--context] [--bot-id ID]
   presence <listening|thinking|speaking|acting|idle> [message]
   transcript [--local] [--file FILE] [--cursor N] [--limit N] [bot_id]
   dicts
@@ -2970,8 +3406,13 @@ options:
   --transcript-dir DIR   Directory for timestamped transcript files
   --frame-dir DIR        Directory for on-demand frame output
   --no-ws-video          Disable WebSocket call-frame capture
-  --webhook-base URL     Use an existing public tunnel URL instead of starting ngrok
-                         (e.g. localtunnel/cloudflared pointing at --port)
+  --tunnel NAME          Tunnel to start for webhooks: ngrok|cloudflared
+                         (default: ngrok; cloudflared quick tunnels are free
+                         with no request limits \u2014 recommended when ngrok hits
+                         ERR_NGROK_727). Binary from PATH or CLOUDFLARED_BIN.
+  --webhook-base URL     Use an existing public tunnel URL instead of starting one
+                         (e.g. localtunnel/cloudflared pointing at --port);
+                         mutually exclusive with --tunnel
   --variant NAME         Recall Output Media bot size: web|web_4_core|web_gpu
                          (default: web_4_core; smoothest camera rendering)
   --no-presence          Join without the presence camera page (skips the
@@ -2980,6 +3421,11 @@ options:
                          (default: robot \u2014 static samoagent avatar image)
   --rtmp                 Use local RTMP path through ngrok TCP
   --rtmp-url URL         Use an existing RTMP endpoint
+  --intro                After joining, post a short self-introduction into the
+                         meeting chat once the bot is admitted (best-effort).
+                         Default text is English (no transcript yet to detect
+                         the call language).
+  --intro-text TEXT      Custom introduction text for --intro (overrides default)
 
 examples:
   samograph join "https://meet.google.com/abc-defg-hij" --name Leo
@@ -3078,7 +3524,8 @@ function parseArgs(argv) {
   const positionals = [];
   const opts = {};
   const valueFlags = {
-    join: new Set(["--name", "--dict", "--port", "--transcript-dir", "--rtmp-url", "--frame-dir", "--webhook-base", "--variant", "--presence-bg"]),
+    join: new Set(["--name", "--dict", "--port", "--transcript-dir", "--rtmp-url", "--frame-dir", "--webhook-base", "--tunnel", "--variant", "--presence-bg", "--intro-text"]),
+    intro: new Set(["--bot-id", "--intro-text"]),
     leave: new Set,
     status: new Set,
     screenshot: new Set(["--out"]),
@@ -3091,10 +3538,11 @@ function parseArgs(argv) {
     frame: new Set(["--out", "--source"]),
     frames: new Set,
     doctor: new Set,
-    _serve: new Set(["--port", "--transcript-file", "--webhook-token", "--call-id-file", "--frame-token", "--presence-token", "--presence-write-token"])
+    _serve: new Set(["--port", "--transcript-file", "--webhook-token", "--call-id-file", "--frame-token", "--presence-token", "--presence-write-token", "--public-base"])
   };
   const boolFlags = {
-    join: new Set(["--rtmp", "--no-ws-video", "--no-presence"]),
+    join: new Set(["--rtmp", "--no-ws-video", "--no-presence", "--intro"]),
+    intro: new Set(["--context"]),
     leave: new Set,
     status: new Set,
     screenshot: new Set,
@@ -3171,11 +3619,20 @@ function parseArgs(argv) {
       result.rtmp = opts["--rtmp"] === true;
       result.ws_video = opts["--no-ws-video"] !== true;
       result.webhook_base = opts["--webhook-base"] ?? null;
+      result.tunnel = opts["--tunnel"] ?? "ngrok";
+      if (!["ngrok", "cloudflared"].includes(result.tunnel)) {
+        throw new ArgError(`argument --tunnel: invalid choice: '${result.tunnel}' (choose from ngrok, cloudflared)`);
+      }
+      if (opts["--tunnel"] !== undefined && result.webhook_base !== null) {
+        throw new ArgError("argument --tunnel: not allowed with --webhook-base (an external tunnel is already provided)");
+      }
       result.no_presence = opts["--no-presence"] === true;
       result.presence_bg = opts["--presence-bg"] ?? null;
       if (result.presence_bg !== null && !["robot", "sphere", "field", "static", "cycle"].includes(result.presence_bg)) {
         throw new ArgError(`argument --presence-bg: invalid choice: '${result.presence_bg}' (choose from robot, sphere, field, static, cycle)`);
       }
+      result.intro = opts["--intro"] === true;
+      result.intro_text = opts["--intro-text"] ?? null;
       result.frame_dir = opts["--frame-dir"] ?? null;
       result.variant = opts["--variant"] ?? "web_4_core";
       if (result.variant !== null && !["web", "web_4_core", "web_gpu"].includes(result.variant)) {
@@ -3227,6 +3684,12 @@ function parseArgs(argv) {
       result.bot_id = opts["--bot-id"] ?? null;
       break;
     }
+    case "intro": {
+      result.bot_id = opts["--bot-id"] ?? null;
+      result.intro_text = opts["--intro-text"] ?? null;
+      result.context = opts["--context"] === true;
+      break;
+    }
     case "presence": {
       if (positionals.length < 1) {
         throw new ArgError("the following arguments are required: state");
@@ -3273,6 +3736,7 @@ function parseArgs(argv) {
       result.transcript_file = opts["--transcript-file"];
       result.webhook_token = opts["--webhook-token"] ?? "";
       result.call_id_file = opts["--call-id-file"] ?? "";
+      result.public_base = opts["--public-base"] ?? "";
       result.frame_token = opts["--frame-token"] ?? "";
       result.presence_token = opts["--presence-token"] ?? "";
       result.presence_write_token = opts["--presence-write-token"] ?? "";
@@ -3295,6 +3759,8 @@ async function dispatch(args) {
       return cmdTranscript(args);
     case "chat":
       return cmdChat(args);
+    case "intro":
+      return cmdIntro(args);
     case "presence":
       return cmdPresence(args);
     case "frame":