@absolutejs/voice 0.0.22-beta.269 → 0.0.22-beta.270

package/dist/index.d.ts

@@ -161,12 +161,12 @@ export type { StoredVoiceIntegrationEvent, StoredVoiceExternalObjectMap, StoredV
 export { createTwilioMediaStreamBridge, createTwilioVoiceRoutes, createTwilioVoiceResponse, decodeTwilioMulawBase64, encodeTwilioMulawBase64, transcodePCMToTwilioOutboundPayload, transcodeTwilioInboundPayloadToPCM16 } from './telephony/twilio';
 export { evaluateVoiceTelephonyContract } from './telephony/contract';
 export { createTelnyxMediaStreamBridge, createTelnyxVoiceResponse, createTelnyxVoiceRoutes, verifyVoiceTelnyxWebhookSignature } from './telephony/telnyx';
-export { createPlivoMediaStreamBridge, createPlivoVoiceResponse, createPlivoVoiceRoutes, signVoicePlivoWebhook, verifyVoicePlivoWebhookSignature } from './telephony/plivo';
+export { createMemoryVoicePlivoWebhookNonceStore, createPlivoMediaStreamBridge, createPlivoVoiceResponse, createPlivoVoiceRoutes, createVoicePlivoWebhookVerifier, signVoicePlivoWebhook, verifyVoicePlivoWebhookSignature } from './telephony/plivo';
 export { createVoiceTelephonyCarrierMatrix, createVoiceTelephonyCarrierMatrixRoutes, renderVoiceTelephonyCarrierMatrixHTML } from './telephony/matrix';
 export type { TwilioInboundMessage, TwilioMediaStreamBridge, TwilioMediaStreamBridgeOptions, TwilioMediaStreamSocket, TwilioOutboundClearMessage, TwilioOutboundMarkMessage, TwilioOutboundMediaMessage, TwilioOutboundMessage, TwilioVoiceRouteParameters, TwilioVoiceResponseOptions, TwilioVoiceSmokeCheck, TwilioVoiceSmokeOptions, TwilioVoiceSmokeReport, TwilioVoiceSetupOptions, TwilioVoiceSetupStatus, TwilioVoiceRoutesOptions } from './telephony/twilio';
 export type { VoiceTelephonyContractIssue, VoiceTelephonyContractOptions, VoiceTelephonyContractReport, VoiceTelephonyContractRequirement, VoiceTelephonyProvider, VoiceTelephonySetupStatus, VoiceTelephonySmokeCheck, VoiceTelephonySmokeReport } from './telephony/contract';
 export type { TelnyxInboundMessage, TelnyxMediaPayload, TelnyxMediaStreamBridge, TelnyxMediaStreamBridgeOptions, TelnyxMediaStreamSocket, TelnyxOutboundClearMessage, TelnyxOutboundMarkMessage, TelnyxOutboundMediaMessage, TelnyxOutboundMessage, TelnyxVoiceResponseOptions, TelnyxVoiceRoutesOptions, TelnyxVoiceSetupOptions, TelnyxVoiceSetupStatus, TelnyxVoiceSmokeCheck, TelnyxVoiceSmokeOptions, TelnyxVoiceSmokeReport } from './telephony/telnyx';
-export type { PlivoInboundMessage, PlivoMediaStreamBridge, PlivoMediaStreamBridgeOptions, PlivoMediaStreamSocket, PlivoOutboundCheckpointMessage, PlivoOutboundClearAudioMessage, PlivoOutboundMessage, PlivoOutboundPlayAudioMessage, PlivoVoiceResponseOptions, PlivoVoiceRoutesOptions, PlivoVoiceSetupOptions, PlivoVoiceSetupStatus, PlivoVoiceSmokeCheck, PlivoVoiceSmokeOptions, PlivoVoiceSmokeReport } from './telephony/plivo';
+export type { PlivoInboundMessage, PlivoMediaStreamBridge, PlivoMediaStreamBridgeOptions, PlivoMediaStreamSocket, PlivoOutboundCheckpointMessage, PlivoOutboundClearAudioMessage, PlivoOutboundMessage, PlivoOutboundPlayAudioMessage, PlivoVoiceResponseOptions, PlivoVoiceRoutesOptions, PlivoVoiceSetupOptions, PlivoVoiceSetupStatus, PlivoVoiceSmokeCheck, PlivoVoiceSmokeOptions, PlivoVoiceSmokeReport, VoicePlivoWebhookNonceStore, VoicePlivoWebhookVerifierOptions } from './telephony/plivo';
 export type { VoiceTelephonyCarrierMatrix, VoiceTelephonyCarrierMatrixEntry, VoiceTelephonyCarrierMatrixInput, VoiceTelephonyCarrierMatrixOptions, VoiceTelephonyCarrierMatrixRoutesOptions, VoiceTelephonyCarrierMatrixStatus } from './telephony/matrix';
 export { shapeTelephonyAssistantText } from './telephony/response';
 export type { TelephonyResponseShapeMode, TelephonyResponseShapeOptions } from './telephony/response';

package/dist/index.js

@@ -19122,6 +19122,40 @@ var verifyVoicePlivoWebhookSignature = async (input) => {
   });
   return signatures.some((signature) => timingSafeEqual2(signature, expected)) ? { ok: true } : { ok: false, reason: "invalid-signature" };
 };
+var createMemoryVoicePlivoWebhookNonceStore = () => {
+  const nonces = new Set;
+  return {
+    has: (nonce) => nonces.has(nonce),
+    set: (nonce) => {
+      nonces.add(nonce);
+    }
+  };
+};
+var createVoicePlivoWebhookVerifier = (options) => async (input) => {
+  const verificationUrl = options.verificationUrl;
+  const verification = await verifyVoicePlivoWebhookSignature({
+    authToken: options.authToken,
+    body: input.body,
+    headers: input.headers,
+    url: typeof verificationUrl === "function" ? verificationUrl({
+      query: input.query,
+      request: input.request
+    }) : verificationUrl ?? input.request.url
+  });
+  if (!verification.ok) {
+    return verification;
+  }
+  const nonceStore = options.nonceStore;
+  if (!nonceStore) {
+    return verification;
+  }
+  const nonce = input.headers.get("x-plivo-signature-v3-nonce");
+  if (!nonce || await nonceStore.has(nonce)) {
+    return { ok: false, reason: "invalid-signature" };
+  }
+  await nonceStore.set(nonce);
+  return verification;
+};
 var buildPlivoVoiceSetupStatus = async (options, input) => {
   const origin = resolveRequestOrigin2(input.request);
   const stream = await resolvePlivoStreamUrl(options, input);
@@ -19253,15 +19287,10 @@ var createPlivoVoiceRoutes = (options = {}) => {
   const smokePath = options.smoke?.path === false ? false : options.smoke?.path ?? "/api/voice/plivo/smoke";
   const bridges = new WeakMap;
   const webhookPolicy = options.webhook?.policy ?? options.outcomePolicy ?? createVoiceTelephonyOutcomePolicy();
-  const verificationUrl = options.webhook?.verificationUrl;
-  const verify = options.webhook?.verify ?? (options.webhook?.authToken ? (input) => verifyVoicePlivoWebhookSignature({
-    authToken: options.webhook?.authToken,
-    body: input.body,
-    headers: input.request.headers,
-    url: typeof verificationUrl === "function" ? verificationUrl({
-      query: input.query,
-      request: input.request
-    }) : verificationUrl ?? input.request.url
+  const verify = options.webhook?.verify ?? (options.webhook?.authToken ? createVoicePlivoWebhookVerifier({
+    authToken: options.webhook.authToken,
+    nonceStore: options.webhook.nonceStore,
+    verificationUrl: options.webhook.verificationUrl
   }) : undefined);
   const app = new Elysia30({
     name: options.name ?? "absolutejs-voice-plivo"
@@ -31678,6 +31707,7 @@ export {
   createVoicePostgresAuditSinkDeliveryStore,
   createVoicePostgresAuditEventStore,
   createVoicePostCallAnalysisRoutes,
+  createVoicePlivoWebhookVerifier,
   createVoicePlivoCampaignDialer,
   createVoicePlatformCoverageRoutes,
   createVoicePhoneAgentProductionSmokeRoutes,
@@ -31820,6 +31850,7 @@ export {
   createOpenAIVoiceAssistantModel,
   createOpenAIRealtimeAdapter,
   createMemoryVoiceTelephonyWebhookIdempotencyStore,
+  createMemoryVoicePlivoWebhookNonceStore,
   createJSONVoiceAssistantModel,
   createId,
   createGeminiVoiceAssistantModel,

package/dist/telephony/plivo.d.ts

@@ -131,6 +131,18 @@ export type PlivoVoiceSmokeOptions = {
     status?: string;
     title?: string;
 };
+export type VoicePlivoWebhookNonceStore = {
+    has: (nonce: string) => Promise<boolean> | boolean;
+    set: (nonce: string) => Promise<void> | void;
+};
+export type VoicePlivoWebhookVerifierOptions = {
+    authToken?: string;
+    nonceStore?: VoicePlivoWebhookNonceStore;
+    verificationUrl?: string | ((input: {
+        query: Record<string, unknown>;
+        request: Request;
+    }) => string);
+};
 export type PlivoVoiceRoutesOptions<TContext = unknown, TSession extends VoiceSessionRecord = VoiceSessionRecord, TResult = unknown> = {
     answer?: {
         path?: string;
@@ -150,6 +162,7 @@ export type PlivoVoiceRoutesOptions<TContext = unknown, TSession extends VoiceSe
     streamPath?: string;
     webhook?: Omit<VoiceTelephonyWebhookRoutesOptions<TContext, TSession, TResult>, 'context' | 'path' | 'policy' | 'provider'> & {
         authToken?: string;
+        nonceStore?: VoicePlivoWebhookNonceStore;
         path?: string;
         policy?: VoiceTelephonyOutcomePolicy;
         verificationUrl?: string | ((input: {
@@ -172,6 +185,13 @@ export declare const verifyVoicePlivoWebhookSignature: (input: {
     headers: Headers;
     url: string;
 }) => Promise<VoiceTelephonyWebhookVerificationResult>;
+export declare const createMemoryVoicePlivoWebhookNonceStore: () => VoicePlivoWebhookNonceStore;
+export declare const createVoicePlivoWebhookVerifier: (options: VoicePlivoWebhookVerifierOptions) => (input: {
+    body: unknown;
+    headers: Headers;
+    query: Record<string, unknown>;
+    request: Request;
+}) => Promise<VoiceTelephonyWebhookVerificationResult>;
 export declare const createPlivoVoiceRoutes: <TContext = unknown, TSession extends VoiceSessionRecord = VoiceSessionRecord, TResult = unknown>(options?: PlivoVoiceRoutesOptions<TContext, TSession, TResult>) => Elysia<"", {
     decorator: {};
     store: {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@absolutejs/voice",
-	"version": "0.0.22-beta.269",
+	"version": "0.0.22-beta.270",
 	"description": "Voice primitives and Elysia plugin for AbsoluteJS",
 	"repository": {
 		"type": "git",