@absolutejs/voice 0.0.22-beta.272 → 0.0.22-beta.274

package/dist/index.d.ts

@@ -159,11 +159,13 @@ export type { VoiceS3ReviewStoreClient, VoiceS3ReviewStoreFile, VoiceS3ReviewSto
 export type { VoiceSQLiteRuntimeStorage, VoiceSQLiteStoreOptions } from './sqliteStore';
 export type { StoredVoiceIntegrationEvent, StoredVoiceExternalObjectMap, StoredVoiceOpsTask, VoiceExternalObjectMap, VoiceExternalObjectMapStore, VoiceOpsTaskAgeBucket, VoiceOpsTaskAnalyticsOptions, VoiceOpsTaskAnalyticsSummary, VoiceOpsTaskAssignmentRule, VoiceOpsTaskAssignmentRuleCondition, VoiceOpsTaskAssignmentRules, VoiceOpsTaskAssigneeAnalytics, VoiceOpsDispositionTaskPolicies, VoiceOpsSLABreachPolicy, VoiceIntegrationDeliveryStatus, VoiceIntegrationEvent, VoiceIntegrationEventStore, VoiceIntegrationSinkDelivery, VoiceIntegrationEventType, VoiceIntegrationWebhookConfig, VoiceOpsTask, VoiceOpsTaskHistoryEntry, VoiceOpsTaskKind, VoiceOpsTaskPolicy, VoiceOpsTaskPriority, VoiceOpsTaskStatus, VoiceOpsTaskStore, VoiceOpsTaskSummary, VoiceOpsTaskWorkerAnalytics } from './ops';
 export { createTwilioMediaStreamBridge, createTwilioVoiceRoutes, createTwilioVoiceResponse, decodeTwilioMulawBase64, encodeTwilioMulawBase64, transcodePCMToTwilioOutboundPayload, transcodeTwilioInboundPayloadToPCM16 } from './telephony/twilio';
+export { createVoiceTelephonyWebhookSecurityPreset } from './telephony/security';
 export { evaluateVoiceTelephonyContract } from './telephony/contract';
 export { createMemoryVoiceTelnyxWebhookEventStore, createTelnyxMediaStreamBridge, createTelnyxVoiceResponse, createTelnyxVoiceRoutes, createVoicePostgresTelnyxWebhookEventStore, createVoiceRedisTelnyxWebhookEventStore, createVoiceSQLiteTelnyxWebhookEventStore, createVoiceTelnyxWebhookVerifier, verifyVoiceTelnyxWebhookSignature } from './telephony/telnyx';
 export { createMemoryVoicePlivoWebhookNonceStore, createPlivoMediaStreamBridge, createPlivoVoiceResponse, createPlivoVoiceRoutes, createVoicePostgresPlivoWebhookNonceStore, createVoicePlivoWebhookVerifier, createVoiceRedisPlivoWebhookNonceStore, createVoiceSQLitePlivoWebhookNonceStore, signVoicePlivoWebhook, verifyVoicePlivoWebhookSignature } from './telephony/plivo';
 export { createVoiceTelephonyCarrierMatrix, createVoiceTelephonyCarrierMatrixRoutes, renderVoiceTelephonyCarrierMatrixHTML } from './telephony/matrix';
 export type { TwilioInboundMessage, TwilioMediaStreamBridge, TwilioMediaStreamBridgeOptions, TwilioMediaStreamSocket, TwilioOutboundClearMessage, TwilioOutboundMarkMessage, TwilioOutboundMediaMessage, TwilioOutboundMessage, TwilioVoiceRouteParameters, TwilioVoiceResponseOptions, TwilioVoiceSmokeCheck, TwilioVoiceSmokeOptions, TwilioVoiceSmokeReport, TwilioVoiceSetupOptions, TwilioVoiceSetupStatus, TwilioVoiceRoutesOptions } from './telephony/twilio';
+export type { VoiceTelephonyWebhookSecurityOptions, VoiceTelephonyWebhookSecurityPreset, VoiceTelephonyWebhookSecurityStorePreset } from './telephony/security';
 export type { VoiceTelephonyContractIssue, VoiceTelephonyContractOptions, VoiceTelephonyContractReport, VoiceTelephonyContractRequirement, VoiceTelephonyProvider, VoiceTelephonySetupStatus, VoiceTelephonySmokeCheck, VoiceTelephonySmokeReport } from './telephony/contract';
 export type { TelnyxInboundMessage, TelnyxMediaPayload, TelnyxMediaStreamBridge, TelnyxMediaStreamBridgeOptions, TelnyxMediaStreamSocket, TelnyxOutboundClearMessage, TelnyxOutboundMarkMessage, TelnyxOutboundMediaMessage, TelnyxOutboundMessage, TelnyxVoiceResponseOptions, TelnyxVoiceRoutesOptions, TelnyxVoiceSetupOptions, TelnyxVoiceSetupStatus, TelnyxVoiceSmokeCheck, TelnyxVoiceSmokeOptions, TelnyxVoiceSmokeReport, VoicePostgresTelnyxWebhookEventStoreOptions, VoiceRedisTelnyxWebhookEventClient, VoiceRedisTelnyxWebhookEventStoreOptions, VoiceSQLiteTelnyxWebhookEventStoreOptions, VoiceTelnyxWebhookEventStore, VoiceTelnyxWebhookEventStoreOptions, VoiceTelnyxWebhookVerifierOptions } from './telephony/telnyx';
 export type { PlivoInboundMessage, PlivoMediaStreamBridge, PlivoMediaStreamBridgeOptions, PlivoMediaStreamSocket, PlivoOutboundCheckpointMessage, PlivoOutboundClearAudioMessage, PlivoOutboundMessage, PlivoOutboundPlayAudioMessage, PlivoVoiceResponseOptions, PlivoVoiceRoutesOptions, PlivoVoiceSetupOptions, PlivoVoiceSetupStatus, PlivoVoiceSmokeCheck, PlivoVoiceSmokeOptions, PlivoVoiceSmokeReport, VoicePostgresPlivoWebhookNonceStoreOptions, VoicePlivoWebhookNonceStore, VoicePlivoWebhookNonceStoreOptions, VoicePlivoWebhookVerifierOptions, VoiceRedisPlivoWebhookNonceClient, VoiceRedisPlivoWebhookNonceStoreOptions, VoiceSQLitePlivoWebhookNonceStoreOptions } from './telephony/plivo';

package/dist/index.js

@@ -13757,6 +13757,17 @@ var buildRetentionPolicyFromQuery = (query, options) => ({
   scopes: parseRetentionScopes(query.scopes),
   traceFilter: typeof query.sessionId === "string" && query.sessionId.trim() ? { sessionId: query.sessionId } : undefined
 });
+var buildAuditFilterFromQuery = (query) => {
+  const filter = {
+    after: getNumberQuery(query.auditAfter),
+    afterOrAt: getNumberQuery(query.auditAfterOrAt),
+    before: getNumberQuery(query.auditBefore),
+    beforeOrAt: getNumberQuery(query.auditBeforeOrAt),
+    limit: getNumberQuery(query.auditLimit),
+    sessionId: typeof query.sessionId === "string" && query.sessionId.trim() ? query.sessionId : undefined
+  };
+  return Object.values(filter).some((value) => value !== undefined) ? filter : undefined;
+};
 var parseRetentionPolicyBody = (body, options, dryRun) => {
   const input = body && typeof body === "object" ? body : {};
   return {
@@ -13777,6 +13788,7 @@ var createVoiceDataControlRoutes = (options) => {
   });
   routes.get(path, async ({ query }) => {
     const report = await buildVoiceDataControlReport({
+      auditFilter: buildAuditFilterFromQuery(query),
       ...options,
       retention: buildRetentionPolicyFromQuery(query, options)
     });
@@ -13788,11 +13800,13 @@ var createVoiceDataControlRoutes = (options) => {
     });
   });
   routes.get(`${path}.json`, async ({ query }) => buildVoiceDataControlReport({
+    auditFilter: buildAuditFilterFromQuery(query),
     ...options,
     retention: buildRetentionPolicyFromQuery(query, options)
   }));
   routes.get(`${path}.md`, async ({ query }) => {
     const report = await buildVoiceDataControlReport({
+      auditFilter: buildAuditFilterFromQuery(query),
       ...options,
       retention: buildRetentionPolicyFromQuery(query, options)
     });
@@ -31664,6 +31678,139 @@ var createVoiceSTTRoutingCorrectionHandler = (mode = "generic") => {
   }
   return createPhraseHintCorrectionHandler();
 };
+// src/telephony/security.ts
+var resolveVerificationUrl2 = (option, input) => typeof option === "function" ? option(input) : option ?? input.request.url;
+var createStores = (options) => {
+  const ttlSeconds = options.ttlSeconds;
+  const store = options.store ?? { kind: "memory" };
+  if (store.kind === "sqlite") {
+    return {
+      idempotency: options.twilio?.idempotencyStore ?? createVoiceSQLiteTelephonyWebhookIdempotencyStore({
+        path: store.path,
+        tableName: "voice_twilio_webhook_idempotency",
+        tablePrefix: store.tablePrefix
+      }),
+      plivo: options.plivo?.nonceStore ?? createVoiceSQLitePlivoWebhookNonceStore({
+        path: store.path,
+        tableName: "voice_plivo_webhook_nonces",
+        tablePrefix: store.tablePrefix,
+        ttlSeconds
+      }),
+      telnyx: options.telnyx?.eventStore ?? createVoiceSQLiteTelnyxWebhookEventStore({
+        path: store.path,
+        tableName: "voice_telnyx_webhook_events",
+        tablePrefix: store.tablePrefix,
+        ttlSeconds
+      })
+    };
+  }
+  if (store.kind === "postgres") {
+    return {
+      idempotency: options.twilio?.idempotencyStore ?? createVoicePostgresTelephonyWebhookIdempotencyStore({
+        connectionString: store.connectionString,
+        schemaName: store.schemaName,
+        sql: store.sql,
+        tableName: "voice_twilio_webhook_idempotency",
+        tablePrefix: store.tablePrefix
+      }),
+      plivo: options.plivo?.nonceStore ?? createVoicePostgresPlivoWebhookNonceStore({
+        connectionString: store.connectionString,
+        schemaName: store.schemaName,
+        sql: store.sql,
+        tableName: "voice_plivo_webhook_nonces",
+        tablePrefix: store.tablePrefix,
+        ttlSeconds
+      }),
+      telnyx: options.telnyx?.eventStore ?? createVoicePostgresTelnyxWebhookEventStore({
+        connectionString: store.connectionString,
+        schemaName: store.schemaName,
+        sql: store.sql,
+        tableName: "voice_telnyx_webhook_events",
+        tablePrefix: store.tablePrefix,
+        ttlSeconds
+      })
+    };
+  }
+  if (store.kind === "redis") {
+    const keyPrefix = store.keyPrefix?.trim() || "voice:webhook-security";
+    return {
+      idempotency: options.twilio?.idempotencyStore ?? createVoiceRedisTelephonyWebhookIdempotencyStore({
+        client: store.idempotencyClient,
+        keyPrefix: `${keyPrefix}:twilio:idempotency`,
+        ttlSeconds,
+        url: store.url
+      }),
+      plivo: options.plivo?.nonceStore ?? createVoiceRedisPlivoWebhookNonceStore({
+        client: store.plivoClient,
+        keyPrefix: `${keyPrefix}:plivo:nonce`,
+        ttlSeconds,
+        url: store.url
+      }),
+      telnyx: options.telnyx?.eventStore ?? createVoiceRedisTelnyxWebhookEventStore({
+        client: store.telnyxClient,
+        keyPrefix: `${keyPrefix}:telnyx:event`,
+        ttlSeconds,
+        url: store.url
+      })
+    };
+  }
+  return {
+    idempotency: options.twilio?.idempotencyStore ?? createMemoryVoiceTelephonyWebhookIdempotencyStore(),
+    plivo: options.plivo?.nonceStore ?? createMemoryVoicePlivoWebhookNonceStore(),
+    telnyx: options.telnyx?.eventStore ?? createMemoryVoiceTelnyxWebhookEventStore()
+  };
+};
+var createVoiceTelephonyWebhookSecurityPreset = (options = {}) => {
+  const stores = createStores(options);
+  const twilioVerificationUrl = options.twilio?.verificationUrl;
+  const plivoVerify = createVoicePlivoWebhookVerifier({
+    authToken: options.plivo?.authToken,
+    nonceStore: stores.plivo,
+    verificationUrl: options.plivo?.verificationUrl
+  });
+  const telnyxVerify = createVoiceTelnyxWebhookVerifier({
+    eventStore: stores.telnyx,
+    publicKey: options.telnyx?.publicKey,
+    toleranceSeconds: options.telnyx?.toleranceSeconds
+  });
+  const twilioVerify = async (input) => verifyVoiceTwilioWebhookSignature({
+    authToken: options.twilio?.authToken,
+    body: input.body,
+    headers: input.headers,
+    url: resolveVerificationUrl2(twilioVerificationUrl, {
+      query: input.query,
+      request: input.request
+    })
+  });
+  return {
+    plivo: {
+      authToken: options.plivo?.authToken,
+      nonceStore: stores.plivo,
+      verify: plivoVerify
+    },
+    telnyx: {
+      eventStore: stores.telnyx,
+      publicKey: options.telnyx?.publicKey,
+      toleranceSeconds: options.telnyx?.toleranceSeconds,
+      verify: telnyxVerify
+    },
+    twilio: {
+      idempotency: {
+        enabled: true,
+        store: stores.idempotency
+      },
+      requireVerification: true,
+      signingSecret: options.twilio?.authToken,
+      verificationUrl: twilioVerificationUrl,
+      verify: twilioVerify
+    },
+    verify: {
+      plivo: plivoVerify,
+      telnyx: telnyxVerify,
+      twilio: twilioVerify
+    }
+  };
+};
 // src/telephony/response.ts
 var normalizeWhitespace = (value) => value.replace(/\s+/g, " ").trim();
 var DEFAULT_MAX_WORDS = 12;
@@ -31974,6 +32121,7 @@ export {
   createVoiceToolContract,
   createVoiceTelnyxWebhookVerifier,
   createVoiceTelnyxCampaignDialer,
+  createVoiceTelephonyWebhookSecurityPreset,
   createVoiceTelephonyWebhookRoutes,
   createVoiceTelephonyWebhookHandler,
   createVoiceTelephonyOutcomePolicy,

package/dist/telephony/security.d.ts

@@ -0,0 +1,95 @@
+import { type VoiceTelephonyWebhookIdempotencyStore, type VoiceTelephonyWebhookVerificationResult } from '../telephonyOutcome';
+import { type VoicePostgresClient } from '../postgresStore';
+import { type VoiceRedisTelephonyWebhookIdempotencyClient } from '../queue';
+import { type VoicePlivoWebhookNonceStore, type VoiceRedisPlivoWebhookNonceClient } from './plivo';
+import { type VoiceRedisTelnyxWebhookEventClient, type VoiceTelnyxWebhookEventStore } from './telnyx';
+export type VoiceTelephonyWebhookSecurityStorePreset = {
+    kind?: 'memory';
+} | {
+    kind: 'sqlite';
+    path: string;
+    tablePrefix?: string;
+} | {
+    connectionString?: string;
+    kind: 'postgres';
+    schemaName?: string;
+    sql?: VoicePostgresClient;
+    tablePrefix?: string;
+} | {
+    idempotencyClient?: VoiceRedisTelephonyWebhookIdempotencyClient;
+    keyPrefix?: string;
+    kind: 'redis';
+    plivoClient?: VoiceRedisPlivoWebhookNonceClient;
+    telnyxClient?: VoiceRedisTelnyxWebhookEventClient;
+    url?: string;
+};
+export type VoiceTelephonyWebhookSecurityOptions<TResult = unknown> = {
+    plivo?: {
+        authToken?: string;
+        nonceStore?: VoicePlivoWebhookNonceStore;
+        verificationUrl?: string | ((input: {
+            query: Record<string, unknown>;
+            request: Request;
+        }) => string);
+    };
+    store?: VoiceTelephonyWebhookSecurityStorePreset;
+    telnyx?: {
+        eventStore?: VoiceTelnyxWebhookEventStore;
+        publicKey?: string;
+        toleranceSeconds?: number;
+    };
+    ttlSeconds?: number;
+    twilio?: {
+        authToken?: string;
+        idempotencyStore?: VoiceTelephonyWebhookIdempotencyStore<TResult>;
+        verificationUrl?: string | ((input: {
+            query: Record<string, unknown>;
+            request: Request;
+        }) => string);
+    };
+};
+export type VoiceTelephonyWebhookSecurityPreset<TResult = unknown> = {
+    plivo: {
+        authToken?: string;
+        nonceStore: VoicePlivoWebhookNonceStore;
+        verify: (input: {
+            body: unknown;
+            headers: Headers;
+            query: Record<string, unknown>;
+            request: Request;
+        }) => Promise<VoiceTelephonyWebhookVerificationResult>;
+    };
+    telnyx: {
+        eventStore: VoiceTelnyxWebhookEventStore;
+        publicKey?: string;
+        toleranceSeconds?: number;
+        verify: (input: {
+            headers: Headers;
+            rawBody: string;
+        }) => Promise<VoiceTelephonyWebhookVerificationResult>;
+    };
+    twilio: {
+        idempotency: {
+            enabled: true;
+            store: VoiceTelephonyWebhookIdempotencyStore<TResult>;
+        };
+        requireVerification: true;
+        signingSecret?: string;
+        verificationUrl?: string | ((input: {
+            query: Record<string, unknown>;
+            request: Request;
+        }) => string);
+        verify: (input: {
+            body: unknown;
+            headers: Headers;
+            query: Record<string, unknown>;
+            request: Request;
+        }) => Promise<VoiceTelephonyWebhookVerificationResult>;
+    };
+    verify: {
+        plivo: VoiceTelephonyWebhookSecurityPreset<TResult>['plivo']['verify'];
+        telnyx: VoiceTelephonyWebhookSecurityPreset<TResult>['telnyx']['verify'];
+        twilio: VoiceTelephonyWebhookSecurityPreset<TResult>['twilio']['verify'];
+    };
+};
+export declare const createVoiceTelephonyWebhookSecurityPreset: <TResult = unknown>(options?: VoiceTelephonyWebhookSecurityOptions<TResult>) => VoiceTelephonyWebhookSecurityPreset<TResult>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@absolutejs/voice",
-	"version": "0.0.22-beta.272",
+	"version": "0.0.22-beta.274",
 	"description": "Voice primitives and Elysia plugin for AbsoluteJS",
 	"repository": {
 		"type": "git",