feat(matrix): add TTS bot for text-to-speech conversion

- NestJS bot that converts text messages to speech via mana-tts
- Commands: !voice, !voices, !speed, !status, !help
- User settings stored in-memory (voice, speed per user)
- Docker config for Mac Mini deployment
- Setup script for bot registration

Co-Authored-By: Claude <noreply@anthropic.com>

scripts/mac-mini/setup-tts-bot.sh

@@ -0,0 +1,160 @@
+#!/bin/bash
+# Register and setup Matrix TTS Bot
+# Run this after Matrix Synapse is running
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="$(cd "$SCRIPT_DIR/../.." && pwd)"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+CYAN='\033[0;36m'
+NC='\033[0m'
+
+echo "============================================"
+echo "  Matrix TTS Bot Setup"
+echo "============================================"
+echo ""
+
+# Default values
+HOMESERVER_URL="${MATRIX_HOMESERVER_URL:-http://localhost:8008}"
+BOT_USERNAME="tts"
+BOT_DISPLAY_NAME="TTS"
+
+# Check if Synapse is running
+echo "Checking Synapse..."
+if ! curl -s "${HOMESERVER_URL}/health" > /dev/null 2>&1; then
+    echo -e "${RED}Error: Synapse is not reachable at ${HOMESERVER_URL}${NC}"
+    echo "Start it with: docker compose -f docker-compose.macmini.yml up -d synapse"
+    exit 1
+fi
+echo -e "${GREEN}Synapse is running${NC}"
+echo ""
+
+# Check if registration secret is available
+if [ -z "$SYNAPSE_REGISTRATION_SECRET" ]; then
+    echo -e "${YELLOW}SYNAPSE_REGISTRATION_SECRET not set.${NC}"
+    echo "Please provide the registration secret from your .env file:"
+    read -sp "Registration Secret: " SYNAPSE_REGISTRATION_SECRET
+    echo ""
+fi
+
+# Generate bot password
+BOT_PASSWORD=$(openssl rand -base64 24)
+
+echo "Registering bot user @${BOT_USERNAME}..."
+
+# Generate HMAC for registration
+generate_mac() {
+    local nonce=$1
+    local user=$2
+    local password=$3
+    local user_type=$4
+    local admin=$5
+
+    local mac_input="${nonce}\x00${user}\x00${password}\x00${user_type}\x00${admin}"
+    echo -n "$mac_input" | openssl dgst -sha1 -hmac "$SYNAPSE_REGISTRATION_SECRET" | cut -d' ' -f2
+}
+
+# Get nonce
+NONCE=$(curl -s "${HOMESERVER_URL}/_synapse/admin/v1/register" | jq -r '.nonce')
+
+if [ -z "$NONCE" ] || [ "$NONCE" = "null" ]; then
+    echo -e "${RED}Failed to get registration nonce. Is admin registration enabled?${NC}"
+    exit 1
+fi
+
+# Calculate MAC
+MAC=$(generate_mac "$NONCE" "$BOT_USERNAME" "$BOT_PASSWORD" "bot" "false")
+
+# Register user
+REGISTER_RESPONSE=$(curl -s -X POST "${HOMESERVER_URL}/_synapse/admin/v1/register" \
+    -H "Content-Type: application/json" \
+    -d "{
+        \"nonce\": \"${NONCE}\",
+        \"username\": \"${BOT_USERNAME}\",
+        \"password\": \"${BOT_PASSWORD}\",
+        \"displayname\": \"${BOT_DISPLAY_NAME}\",
+        \"user_type\": \"bot\",
+        \"admin\": false,
+        \"mac\": \"${MAC}\"
+    }")
+
+# Check if registration was successful
+if echo "$REGISTER_RESPONSE" | jq -e '.access_token' > /dev/null 2>&1; then
+    ACCESS_TOKEN=$(echo "$REGISTER_RESPONSE" | jq -r '.access_token')
+    USER_ID=$(echo "$REGISTER_RESPONSE" | jq -r '.user_id')
+
+    echo -e "${GREEN}Bot registered successfully!${NC}"
+    echo ""
+    echo -e "${CYAN}User ID:${NC} ${USER_ID}"
+    echo ""
+else
+    ERROR=$(echo "$REGISTER_RESPONSE" | jq -r '.error // .errcode // "Unknown error"')
+
+    # Check if user already exists
+    if echo "$ERROR" | grep -qi "user.*exists\|already.*registered\|M_USER_IN_USE"; then
+        echo -e "${YELLOW}User @${BOT_USERNAME} already exists. Getting access token via login...${NC}"
+
+        echo "Please enter the existing bot password:"
+        read -sp "Password: " EXISTING_PASSWORD
+        echo ""
+
+        LOGIN_RESPONSE=$(curl -s -X POST "${HOMESERVER_URL}/_matrix/client/r0/login" \
+            -H "Content-Type: application/json" \
+            -d "{
+                \"type\": \"m.login.password\",
+                \"user\": \"${BOT_USERNAME}\",
+                \"password\": \"${EXISTING_PASSWORD}\"
+            }")
+
+        if echo "$LOGIN_RESPONSE" | jq -e '.access_token' > /dev/null 2>&1; then
+            ACCESS_TOKEN=$(echo "$LOGIN_RESPONSE" | jq -r '.access_token')
+            USER_ID=$(echo "$LOGIN_RESPONSE" | jq -r '.user_id')
+            echo -e "${GREEN}Login successful!${NC}"
+        else
+            echo -e "${RED}Login failed. Please check the password.${NC}"
+            exit 1
+        fi
+    else
+        echo -e "${RED}Registration failed: ${ERROR}${NC}"
+        exit 1
+    fi
+fi
+
+echo ""
+echo "============================================"
+echo "  Add to .env file"
+echo "============================================"
+echo ""
+echo -e "${CYAN}# Matrix TTS Bot${NC}"
+echo "MATRIX_TTS_BOT_TOKEN=${ACCESS_TOKEN}"
+echo ""
+
+# Optional: Set display name and avatar
+echo "Setting display name..."
+curl -s -X PUT "${HOMESERVER_URL}/_matrix/client/r0/profile/${USER_ID}/displayname" \
+    -H "Authorization: Bearer ${ACCESS_TOKEN}" \
+    -H "Content-Type: application/json" \
+    -d "{\"displayname\": \"🔊 ${BOT_DISPLAY_NAME}\"}" > /dev/null
+
+echo ""
+echo "============================================"
+echo "  Next Steps"
+echo "============================================"
+echo ""
+echo "1. Add the MATRIX_TTS_BOT_TOKEN to your .env file"
+echo ""
+echo "2. Build the bot image:"
+echo "   docker build -t matrix-tts-bot ./services/matrix-tts-bot"
+echo ""
+echo "3. Start the bot:"
+echo "   docker compose -f docker-compose.macmini.yml up -d matrix-tts-bot"
+echo ""
+echo "4. Invite the bot to a room in Element:"
+echo "   /invite @tts:mana.how"
+echo ""
+echo -e "${GREEN}Setup complete!${NC}"