Enhance bot functionality with improved error handling and media support

.env.example

@@ -12,6 +12,10 @@ JOIN_WAIT_TIME_MINUTES=2
 # RETRY_COUNT=2 means: 1 initial attempt + 2 retries = 3 total attempts
 RETRY_COUNT=2
 
+# MediaRecorder target video bitrate (bits/sec) for Zoom tab-capture recordings.
+# VP9 under software GL starved the encoder and produced ~187 kbps; this sets a sane target.
+# RECORDING_VIDEO_BITS_PER_SECOND=4000000
+
 # Optional Google Meet identity.
 # Prefer a dedicated, consented Google account that is invited to meetings.
 # If you use CDP, launch that Chrome with --auto-accept-this-tab-capture so
@@ -22,6 +26,40 @@ RETRY_COUNT=2
 # Re-submit anonymous guest requests if Google redirects while still waiting for host admission.
 GOOGLE_ANONYMOUS_JOIN_REQUEST_ATTEMPTS=10
 
+# Optional: connect Zoom bots to an already-running Chrome via CDP.
+# Launch that Chrome with --remote-debugging-port and the recording flags the
+# Zoom bot needs (see recordingBrowserArgs in src/lib/chromium.ts). Every meeting
+# gets a fresh isolated context, optionally seeded with its customer's state.
+# ZOOM_CHROME_CDP_URL=http://host.docker.internal:9222
+# Optional customer-specific Zoom session states (export via Playwright storageState).
+# Values are read-only secret-mounted file paths selected by exact teamId.
+# ZOOM_CHROME_CUSTOMER_STORAGE_STATE_PATHS_JSON={"team-id":"/var/run/secrets/meeting-bot/zoom-profiles/team-id.json"}
+
+# Zoom transport: browser-only, browser with RTMS fallback, or forced RTMS.
+# ZOOM_RECORDING_TRANSPORT=rtms forces RTMS and does not start Chrome for Zoom.
+ZOOM_RECORDING_TRANSPORT=browser
+# Allow RTMS only after an explicit pre-join automated-bot rejection.
+ZOOM_RTMS_FALLBACK_ENABLED=false
+# Exact teamId allowed to use the global/internal OAuth credentials below.
+# ZOOM_RTMS_GLOBAL_TEAM_ID=internal-team-id
+# Exact teamId allowlist for customer S2S OAuth credentials.
+# Enforce shared or dedicated customer apps; auto keeps per-entry inference for compatibility.
+ZOOM_RTMS_CUSTOMER_CREDENTIAL_MODE=auto
+# ZOOM_RTMS_CUSTOMER_CREDENTIALS_JSON={"team-id":{"enabled":true,"accountId":"zoom-account-id","clientId":"zoom-s2s-client-id","clientSecret":"zoom-s2s-client-secret","participantUserId":"zoom-user-id"}}
+# Add rtmsApp for a dedicated private General app. Its webhook URL is /zoom/rtms/webhook/apps/<webhookId>.
+# ZOOM_RTMS_CUSTOMER_CREDENTIALS_JSON={"team-id":{"enabled":true,"accountId":"zoom-account-id","clientId":"zoom-s2s-client-id","clientSecret":"zoom-s2s-client-secret","participantUserId":"zoom-user-id","rtmsApp":{"webhookId":"unique-customer-app-id","clientId":"zoom-general-app-client-id","clientSecret":"zoom-general-app-client-secret","webhookSecret":"zoom-general-app-webhook-secret"}}}
+# ZOOM_RTMS_CLIENT_ID=
+# ZOOM_RTMS_CLIENT_SECRET=
+# ZOOM_RTMS_WEBHOOK_SECRET=
+# Prefer account-level S2S OAuth credentials. A short-lived access token is useful for local tests.
+# ZOOM_RTMS_OAUTH_ACCESS_TOKEN=
+# ZOOM_RTMS_OAUTH_ACCOUNT_ID=
+# ZOOM_RTMS_OAUTH_CLIENT_ID=
+# ZOOM_RTMS_OAUTH_CLIENT_SECRET=
+# Required with account-level control when Zoom cannot infer the authorized participant.
+# ZOOM_RTMS_PARTICIPANT_USER_ID=
+# ZOOM_RTMS_EVENT_TTL_SECONDS=3600
+
 # GCP bucket configuration for uploading debugging screenshots
 GCP_ACCESS_KEY_ID=
 GCP_SECRET_ACCESS_KEY=

.github/workflows/docker-build.yml

@@ -25,6 +25,26 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install media test dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes ffmpeg
+
+      - name: Run tests
+        run: npm test
+
+      - name: Build application
+        run: npm run build
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -58,15 +78,6 @@ jobs:
             exit 1
           fi
 
-      # Create and push git tag if it doesn't exist (only on main push)
-      - name: Create and push tag
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git tag ${{ env.TAG }}
-          git push origin ${{ env.TAG }}
-
       # Always generate Docker tags for build, but only include version tag on main
       - name: Extract metadata
         id: meta
@@ -90,6 +101,39 @@ jobs:
             type=sha,prefix=sha-
             type=raw,value=latest,enable={{is_default_branch}}
 
+      - name: Build Chrome CDP smoke image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./Dockerfile.chrome-cdp
+          platforms: linux/amd64
+          load: true
+          tags: meeting-bot-chrome-cdp:smoke
+          cache-from: type=gha,scope=chrome-cdp
+
+      - name: Smoke-test Chrome CDP sidecar
+        run: |
+          set -euo pipefail
+          container=meeting-bot-chrome-cdp-smoke
+          cleanup() {
+            status=$?
+            trap - EXIT
+            if [ "$status" -ne 0 ]; then
+              docker logs "$container" || true
+            fi
+            docker rm -f "$container" >/dev/null 2>&1 || true
+            exit "$status"
+          }
+          trap cleanup EXIT
+
+          docker run --detach \
+            --name "$container" \
+            --network host \
+            --shm-size=1g \
+            --env CHROME_NO_SANDBOX=true \
+            meeting-bot-chrome-cdp:smoke
+          CHROME_CDP_CONTAINER="$container" node scripts/smoke-chrome-cdp.mjs
+
       # Build and push on all branches
       - name: Build and push Docker image
         uses: docker/build-push-action@v5
@@ -116,3 +160,12 @@ jobs:
           labels: ${{ steps.chrome-cdp-meta.outputs.labels }}
           cache-from: type=gha,scope=chrome-cdp
           cache-to: type=gha,mode=max,scope=chrome-cdp
+
+      # Create and push the release tag only after both images and the smoke test succeed.
+      - name: Create and push tag
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag ${{ env.TAG }}
+          git push origin ${{ env.TAG }}

.gitignore

@@ -9,12 +9,13 @@ assets/videos
 *.wav
 __pycache__/
 .env
+.env.*
+!.env.example
 .chrome/
 gcp-key
 assets/screenshots
 /data
 debug-videos/
-.env.native
 
 # Local-only docker compose override for signal-handling testing — see compose.override.yml header
 compose.override.yml

CHANGELOG.md

@@ -33,6 +33,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Security
 - N/A
 
+## [1.3.16] - 2026-09-09
+
+### Fixed
+- Reduce Google Meet recording load by preferring VP8 for WebM and limiting capture to 25 fps; honor the existing video bitrate setting.
+
 ## [1.0.0] - 2024-01-01
 
 ### Added

DEPLOYMENT.md

@@ -28,15 +28,15 @@ The workflow is defined in `.github/workflows/docker-build.yml` and includes:
 
 ### Production Image (`Dockerfile.production`)
 
-- **Base**: Node.js 20 Alpine
+- **Base**: Node.js 22 Bookworm
 - **Multi-stage build** for smaller final image
 - **Security**: Runs as non-root user
 - **Optimized**: Only production dependencies
 - **Health check**: Built-in health monitoring
 
 ### Development Image (`Dockerfile`)
 
-- **Base**: Node.js 20
+- **Base**: Node.js 22 Bookworm
 - **Full dependencies** for development
 - **Hot reload** support
 - **Debugging tools** included
@@ -269,4 +269,4 @@ For high availability, consider:
 
 ### Contributing
 
-We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) for details on how to get involved with the project. 
+We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) for details on how to get involved with the project.

Dockerfile.chrome-cdp

@@ -9,6 +9,9 @@ RUN apt-get update && \
     dumb-init \
     ffmpeg \
     fonts-liberation \
+    fonts-noto-cjk \
+    fonts-noto-color-emoji \
+    fonts-noto-core \
     gnupg \
     libasound2 \
     libatk-bridge2.0-0 \
@@ -54,7 +57,7 @@ RUN chmod +x /usr/local/bin/start-chrome-cdp
 
 USER chrome
 ENV XDG_RUNTIME_DIR=/run/user/1001
-EXPOSE 9222 9223
+EXPOSE 9223
 
 ENTRYPOINT ["dumb-init", "--"]
 CMD ["start-chrome-cdp"]

Dockerfile.development

@@ -1,4 +1,10 @@
-FROM node:20
+FROM gcc:13-bookworm AS rtms-cxx-runtime
+RUN cp "$(g++ -print-file-name=libstdc++.so.6)" /libstdc++.so.6
+
+FROM node:22-bookworm
+
+COPY --from=rtms-cxx-runtime /libstdc++.so.6 /opt/rtms/libstdc++.so.6
+ENV LD_LIBRARY_PATH=/opt/rtms
 
 WORKDIR /usr/src/app
 
@@ -57,14 +63,19 @@ RUN npm install -g nodemon
 COPY package*.json ./
 RUN npm install
 
+RUN if [ "$(dpkg --print-architecture)" = "amd64" ]; then \
+    cp /opt/rtms/libstdc++.so.6 /usr/src/app/node_modules/@zoom/rtms/build/Release/libstdc++.so.6 && \
+    node -e "const rtms=require('@zoom/rtms').default;if(typeof rtms.Client!=='function')process.exit(1)"; \
+  fi
+
 # Install Playwright and its dependencies
 RUN npx playwright install --with-deps
 
 # Copy application code
 COPY . .
 
 # Build app
-RUN npm run build
+RUN npm test && npm run build
 
 # Set permissions
 RUN chmod +x /usr/src/app/start.sh

Dockerfile.production

@@ -1,5 +1,11 @@
+FROM gcc:13-bookworm AS rtms-cxx-runtime
+RUN cp "$(g++ -print-file-name=libstdc++.so.6)" /libstdc++.so.6
+
 # Use the official Node.js image as a base image
-FROM node:20
+FROM node:22-bookworm
+
+COPY --from=rtms-cxx-runtime /libstdc++.so.6 /opt/rtms/libstdc++.so.6
+ENV LD_LIBRARY_PATH=/opt/rtms
 
 # Set the working directory
 WORKDIR /usr/src/app
@@ -63,6 +69,12 @@ COPY package*.json ./
 # Install all dependencies (including dev dependencies for build)
 RUN npm ci && npm cache clean --force
 
+# The Zoom RTMS Linux SDK requires GCC 13's C++ runtime and currently supports amd64 only.
+RUN if [ "$(dpkg --print-architecture)" = "amd64" ]; then \
+    cp /opt/rtms/libstdc++.so.6 /usr/src/app/node_modules/@zoom/rtms/build/Release/libstdc++.so.6 && \
+    node -e "const rtms=require('@zoom/rtms').default;if(typeof rtms.Client!=='function')process.exit(1)"; \
+  fi
+
 # Install Playwright and its dependencies
 RUN npx playwright install --with-deps
 
@@ -77,7 +89,7 @@ RUN dos2unix /usr/src/app/xvfb-run-wrapper && \
     chmod +x /usr/src/app/xvfb-run-wrapper
 
 # Build the TypeScript code
-RUN npm run build
+RUN npm test && npm run build
 
 USER root
 RUN mkdir -p /tmp/.X11-unix && chmod 1777 /tmp/.X11-unix