@broberg/call 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,61 @@
-# Temporary Holding Version
+# @broberg/call
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Voice calls for 2–10 people, like a Slack huddle: the app decides who may enter a room, the audio goes through a self-hosted LiveKit media server (SFU) in the EU, and the browser gets mute, output mute, device choice, per-person volume, who-is-speaking and the participant list. Audio only in 0.1.0. Epic F104.
+
+```bash
+npm i @broberg/call
+```
+
+> **Renamed from `@broberg/voice` (F104.6).** `@broberg/call` 0.1.0 is `@broberg/voice` 0.2.0 under a new name — same API, same server. Moving over means changing the import path only: `@broberg/voice/server` → `@broberg/call/server`, `@broberg/voice/client` → `@broberg/call/client`. Camera and screen share come in 0.2.0 (F104.7); recording is planned (F104.9).
+>
+> **Server:** the shared LiveKit media server `broberg-voice` (Fly `arn`, voice.broberg.ai, F104.2) with TURN over TLS on 443 in `broberg-voice-turn` (F104.5); both owned by components.
+
+## Server — `@broberg/call/server`
+
+```ts
+import { createRoomToken, verifyWebhook, VoiceError } from "@broberg/call/server";
+
+// POST /jam/:id/voice-token — check the person's access FIRST, then:
+const token = await createRoomToken({
+  apiKey: process.env.LIVEKIT_API_KEY!,
+  apiSecret: process.env.LIVEKIT_API_SECRET!,
+  room: `jam:${id}`,      // one room per ticket
+  identity: user.id,      // the same person joining twice replaces the first connection
+  name: user.name,
+  // ttl: 600            // seconds the ticket can be used to ENTER (default 600, max 3600)
+});
+
+// POST /voice/webhook — join/leave from the media server. Pass the RAW body:
+const event = await verifyWebhook(await req.text(), req.headers.get("authorization"), { apiKey, apiSecret });
+if (event.event === "participant_joined") { /* … */ }
+```
+
+- **Listen-only (0.2.0):** `createRoomToken({ …, canPublish: false })` gives a ticket that can join and hear everyone but publish nothing — pair it with `joinVoice({ url, token, publish: false })`, which never opens the microphone (`call.muted` is `true`; `unmute()` would be refused by the server).
+- The ticket admits to **one room**, may **only publish the microphone** (no camera, screen or data channel), and may listen to everyone in the room.
+- Missing `apiKey`/`apiSecret` is refused (`VoiceError` `missing_credentials`) — LiveKit's SDK would otherwise silently fall back to `LIVEKIT_*` from the environment.
+- Every rejection of a webhook (changed body, wrong secret, missing header) is `VoiceError` `invalid_webhook`.
+
+## Browser — `@broberg/call/client`
+
+No `node:` imports. Call `joinVoice` from a click: browsers only let audio play after a user gesture.
+
+```ts
+import { joinVoice } from "@broberg/call/client";
+
+const call = await joinVoice({ url: "wss://voice.broberg.ai", token });
+
+call.onParticipants((people) => render(people));     // [{ identity, name, isLocal }], at once and on every join/leave
+call.onSpeaking((ids) => highlight(ids));            // who is speaking now, loudest first
+await call.mute(); await call.unmute(); call.muted;  // your microphone
+call.setOutputMuted(true);                           // silence everyone else …
+call.setVolume(identity, 0.5);                       // … each person's own volume is kept and comes back on unmute
+await call.setInputDevice(deviceId);                 // from navigator.mediaDevices.enumerateDevices()
+await call.setOutputDevice(deviceId);
+await call.leave();                                  // disconnects; no callback fires after this
+```
+
+- The microphone opens with **noise suppression, echo cancellation and auto gain** on.
+- If joining fails — the microphone is refused, the ticket is rejected — `joinVoice` rejects AND disconnects first, so nobody is left in the room listening without a way to leave.
+- Other people's audio is attached to hidden `<audio>` elements and removed when they leave.
+- Reconnection after a network drop (ICE restart, resume) is LiveKit's own.
+- The package draws no UI. If you build one, give every control a `data-testid`.

package/dist/client.cjs

@@ -0,0 +1,114 @@
+'use strict';
+
+var livekitClient = require('livekit-client');
+
+// src/client.ts
+var AUDIO_CAPTURE = { noiseSuppression: true, echoCancellation: true, autoGainControl: true };
+async function joinVoice({ url, token, publish = true }) {
+  const room = new livekitClient.Room({ audioCaptureDefaults: { ...AUDIO_CAPTURE } });
+  const speakingCbs = /* @__PURE__ */ new Set();
+  const participantCbs = /* @__PURE__ */ new Set();
+  const volumes = /* @__PURE__ */ new Map();
+  const audioEls = /* @__PURE__ */ new Map();
+  let outputMuted = false;
+  let muted = !publish;
+  let left = false;
+  const participants = () => [
+    toVoiceParticipant(room.localParticipant, true),
+    ...[...room.remoteParticipants.values()].map((p) => toVoiceParticipant(p, false))
+  ];
+  const emitParticipants = () => {
+    if (left) return;
+    const list = participants();
+    participantCbs.forEach((cb) => cb(list));
+  };
+  const applyVolume = (p) => p.setVolume(outputMuted ? 0 : volumes.get(p.identity) ?? 1);
+  const handlers = [
+    [livekitClient.RoomEvent.ParticipantConnected, (p) => {
+      applyVolume(p);
+      emitParticipants();
+    }],
+    [livekitClient.RoomEvent.ParticipantDisconnected, () => emitParticipants()],
+    [livekitClient.RoomEvent.ActiveSpeakersChanged, (speakers) => {
+      if (left) return;
+      const ids = speakers.map((s) => s.identity);
+      speakingCbs.forEach((cb) => cb(ids));
+    }],
+    [livekitClient.RoomEvent.TrackSubscribed, (track, _pub, p) => {
+      if (track.kind !== livekitClient.Track.Kind.Audio) return;
+      const el = track.attach();
+      document.body.appendChild(el);
+      audioEls.set(track, [el]);
+      applyVolume(p);
+    }],
+    [livekitClient.RoomEvent.TrackUnsubscribed, (track) => {
+      track.detach().forEach((el) => el.remove());
+      audioEls.delete(track);
+    }]
+  ];
+  for (const [event, fn] of handlers) room.on(event, fn);
+  try {
+    await room.connect(url, token);
+    if (publish) await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });
+    await room.startAudio();
+  } catch (e) {
+    left = true;
+    for (const [event, fn] of handlers) room.off(event, fn);
+    await room.disconnect();
+    throw e;
+  }
+  return {
+    get muted() {
+      return muted;
+    },
+    async mute() {
+      await room.localParticipant.setMicrophoneEnabled(false);
+      muted = true;
+    },
+    async unmute() {
+      await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });
+      muted = false;
+    },
+    setOutputMuted(m) {
+      outputMuted = m;
+      room.remoteParticipants.forEach(applyVolume);
+    },
+    async setInputDevice(deviceId) {
+      await room.switchActiveDevice("audioinput", deviceId);
+    },
+    async setOutputDevice(deviceId) {
+      await room.switchActiveDevice("audiooutput", deviceId);
+    },
+    setVolume(identity, volume) {
+      volumes.set(identity, Math.min(1, Math.max(0, volume)));
+      const p = room.remoteParticipants.get(identity);
+      if (p) applyVolume(p);
+    },
+    onSpeaking(cb) {
+      speakingCbs.add(cb);
+      return () => speakingCbs.delete(cb);
+    },
+    onParticipants(cb) {
+      participantCbs.add(cb);
+      if (!left) cb(participants());
+      return () => participantCbs.delete(cb);
+    },
+    async leave() {
+      left = true;
+      for (const [event, fn] of handlers) room.off(event, fn);
+      speakingCbs.clear();
+      participantCbs.clear();
+      audioEls.forEach((_els, track) => track.detach().forEach((el) => el.remove()));
+      audioEls.clear();
+      await room.disconnect();
+    }
+  };
+}
+function toVoiceParticipant(p, isLocal) {
+  return { identity: p.identity, name: p.name || p.identity, isLocal };
+}
+
+exports.AUDIO_CAPTURE = AUDIO_CAPTURE;
+exports.joinVoice = joinVoice;
+//# sourceMappingURL=client.cjs.map
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":["Room","RoomEvent","Track"],"mappings":";;;;;AAgDO,IAAM,gBAAgB,EAAE,gBAAA,EAAkB,MAAM,gBAAA,EAAkB,IAAA,EAAM,iBAAiB,IAAA;AAEhG,eAAsB,UAAU,EAAE,GAAA,EAAK,KAAA,EAAO,OAAA,GAAU,MAAK,EAAoC;AAC/F,EAAA,MAAM,IAAA,GAAO,IAAIA,kBAAA,CAAK,EAAE,sBAAsB,EAAE,GAAG,aAAA,EAAc,EAAG,CAAA;AACpE,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAA6B;AACrD,EAAA,MAAM,cAAA,uBAAqB,GAAA,EAAsC;AACjE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AACxC,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqC;AAC1D,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,QAAQ,CAAC,OAAA;AACb,EAAA,IAAI,IAAA,GAAO,KAAA;AAEX,EAAA,MAAM,eAAe,MAA0B;AAAA,IAC7C,kBAAA,CAAmB,IAAA,CAAK,gBAAA,EAAkB,IAAI,CAAA;AAAA,IAC9C,GAAG,CAAC,GAAG,IAAA,CAAK,mBAAmB,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAC;AAAA,GAClF;AACA,EAAA,MAAM,mBAAmB,MAAM;AAC7B,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,IAAA,cAAA,CAAe,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,IAAI,CAAC,CAAA;AAAA,EACzC,CAAA;AACA,EAAA,MAAM,WAAA,GAAc,CAAC,CAAA,KAAyB,CAAA,CAAE,SAAA,CAAU,WAAA,GAAc,CAAA,GAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAA,IAAK,CAAE,CAAA;AAE1G,EAAA,MAAM,QAAA,GAAoD;AAAA,IACxD,CAACC,uBAAA,CAAU,oBAAA,EAAsB,CAAC,CAAA,KAAyB;AAAE,MAAA,WAAA,CAAY,CAAC,CAAA;AAAG,MAAA,gBAAA,EAAiB;AAAA,IAAG,CAAC,CAAA;AAAA,IAClG,CAACA,uBAAA,CAAU,uBAAA,EAAyB,MAAM,kBAAkB,CAAA;AAAA,IAC5D,CAACA,uBAAA,CAAU,qBAAA,EAAuB,CAAC,QAAA,KAA4B;AAC7D,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,MAAM,MAAM,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,QAAQ,CAAA;AAC1C,MAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,GAAG,CAAC,CAAA;AAAA,IACrC,CAAC,CAAA;AAAA,IACD,CAACA,uBAAA,CAAU,eAAA,EAAiB,CAAC,KAAA,EAAoB,MAAe,CAAA,KAAyB;AACvF,MAAA,IAAI,KAAA,CAAM,IAAA,KAASC,mBAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACrC,MAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,MAAA,QAAA,CAAS,IAAA,CAAK,YAAY,EAAE,CAAA;AAC5B,MAAA,QAAA,CAAS,GAAA,CAAI,KAAA,EAAO,CAAC,EAAE,CAAC,CAAA;AACxB,MAAA,WAAA,CAAY,CAAC,CAAA;AAAA,IACf,CAAC,CAAA;AAAA,IACD,CAACD,uBAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACpD,MAAA,KAAA,CAAM,QAAO,CAAE,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,QAAQ,CAAA;AAC1C,MAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AAAA,IACvB,CAAC;AAAA,GACH;AACA,EAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,EAAA,CAAG,OAAO,EAAE,CAAA;AAErD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAC7B,IAAA,IAAI,OAAA,QAAe,IAAA,CAAK,gBAAA,CAAiB,qBAAqB,IAAA,EAAM,EAAE,GAAG,aAAA,EAAe,CAAA;AAExF,IAAA,MAAM,KAAK,UAAA,EAAW;AAAA,EACxB,SAAS,CAAA,EAAG;AAGV,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AACtD,IAAA,MAAM,KAAK,UAAA,EAAW;AACtB,IAAA,MAAM,CAAA;AAAA,EACR;AAEA,EAAA,OAAO;AAAA,IACL,IAAI,KAAA,GAAQ;AAAE,MAAA,OAAO,KAAA;AAAA,IAAO,CAAA;AAAA,IAC5B,MAAM,IAAA,GAAO;AAAE,MAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,oBAAA,CAAqB,KAAK,CAAA;AAAG,MAAA,KAAA,GAAQ,IAAA;AAAA,IAAM,CAAA;AAAA,IACtF,MAAM,MAAA,GAAS;AAAE,MAAA,MAAM,KAAK,gBAAA,CAAiB,oBAAA,CAAqB,MAAM,EAAE,GAAG,eAAe,CAAA;AAAG,MAAA,KAAA,GAAQ,KAAA;AAAA,IAAO,CAAA;AAAA,IAC9G,eAAe,CAAA,EAAG;AAChB,MAAA,WAAA,GAAc,CAAA;AACd,MAAA,IAAA,CAAK,kBAAA,CAAmB,QAAQ,WAAW,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA,MAAM,eAAe,QAAA,EAAU;AAAE,MAAA,MAAM,IAAA,CAAK,kBAAA,CAAmB,YAAA,EAAc,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACxF,MAAM,gBAAgB,QAAA,EAAU;AAAE,MAAA,MAAM,IAAA,CAAK,kBAAA,CAAmB,aAAA,EAAe,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IAC1F,SAAA,CAAU,UAAU,MAAA,EAAQ;AAC1B,MAAA,OAAA,CAAQ,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,GAAA,CAAI,CAAA,EAAG,MAAM,CAAC,CAAC,CAAA;AACtD,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA;AAC9C,MAAA,IAAI,CAAA,cAAe,CAAC,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,WAAW,EAAA,EAAI;AACb,MAAA,WAAA,CAAY,IAAI,EAAE,CAAA;AAClB,MAAA,OAAO,MAAM,WAAA,CAAY,MAAA,CAAO,EAAE,CAAA;AAAA,IACpC,CAAA;AAAA,IACA,eAAe,EAAA,EAAI;AACjB,MAAA,cAAA,CAAe,IAAI,EAAE,CAAA;AACrB,MAAA,IAAI,CAAC,IAAA,EAAM,EAAA,CAAG,YAAA,EAAc,CAAA;AAC5B,MAAA,OAAO,MAAM,cAAA,CAAe,MAAA,CAAO,EAAE,CAAA;AAAA,IACvC,CAAA;AAAA,IACA,MAAM,KAAA,GAAQ;AACZ,MAAA,IAAA,GAAO,IAAA;AACP,MAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AACtD,MAAA,WAAA,CAAY,KAAA,EAAM;AAClB,MAAA,cAAA,CAAe,KAAA,EAAM;AACrB,MAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,IAAA,EAAM,KAAA,KAAU,KAAA,CAAM,MAAA,EAAO,CAAE,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA;AAC7E,MAAA,QAAA,CAAS,KAAA,EAAM;AACf,MAAA,MAAM,KAAK,UAAA,EAAW;AAAA,IACxB;AAAA,GACF;AACF;AAEA,SAAS,kBAAA,CAAmB,GAAgB,OAAA,EAAoC;AAC9E,EAAA,OAAO,EAAE,UAAU,CAAA,CAAE,QAAA,EAAU,MAAM,CAAA,CAAE,IAAA,IAAQ,CAAA,CAAE,QAAA,EAAU,OAAA,EAAQ;AACrE","file":"client.cjs","sourcesContent":["// @broberg/call/client — the browser's half of a voice call (F104.3).\n//\n// A thin layer over livekit-client that does the four things every app would\n// otherwise get slightly wrong on its own: open the microphone with noise\n// suppression, echo cancellation and auto gain; actually PLAY the other people\n// (a subscribed audio track is silent until it is attached to an element);\n// keep \"mute everyone\" and per-person volume apart so unmuting restores what\n// each person was set to; and stop calling the app back after leave().\n// No node: imports.\n\nimport { Room, RoomEvent, Track } from \"livekit-client\";\nimport type { Participant, RemoteParticipant, RemoteTrack } from \"livekit-client\";\n\nexport interface VoiceParticipant {\n  identity: string;\n  name: string;\n  isLocal: boolean;\n}\n\nexport interface JoinOptions {\n  /** The media server, e.g. `wss://voice.broberg.ai`. */\n  url: string;\n  /** A ticket from `createRoomToken` on the app's server. */\n  token: string;\n  /**\n   * F104.4 — `false` joins as a listener: the microphone is never opened\n   * (a listen-only ticket would be refused if it tried). Default `true`.\n   */\n  publish?: boolean;\n}\n\nexport interface VoiceCall {\n  mute(): Promise<void>;\n  unmute(): Promise<void>;\n  readonly muted: boolean;\n  /** Silence everyone else (true) or bring back each person's own volume (false). */\n  setOutputMuted(muted: boolean): void;\n  setInputDevice(deviceId: string): Promise<void>;\n  setOutputDevice(deviceId: string): Promise<void>;\n  /** 0–1 for one person. Kept while output is muted and applied on unmute. */\n  setVolume(identity: string, volume: number): void;\n  /** Identities of the people speaking right now, loudest first. Returns an unsubscribe. */\n  onSpeaking(cb: (identities: string[]) => void): () => void;\n  /** Everyone in the call, you included; called at once and on every join/leave. Returns an unsubscribe. */\n  onParticipants(cb: (participants: VoiceParticipant[]) => void): () => void;\n  leave(): Promise<void>;\n}\n\nexport const AUDIO_CAPTURE = { noiseSuppression: true, echoCancellation: true, autoGainControl: true } as const;\n\nexport async function joinVoice({ url, token, publish = true }: JoinOptions): Promise<VoiceCall> {\n  const room = new Room({ audioCaptureDefaults: { ...AUDIO_CAPTURE } });\n  const speakingCbs = new Set<(ids: string[]) => void>();\n  const participantCbs = new Set<(ps: VoiceParticipant[]) => void>();\n  const volumes = new Map<string, number>();\n  const audioEls = new Map<RemoteTrack, HTMLMediaElement[]>();\n  let outputMuted = false;\n  let muted = !publish;\n  let left = false;\n\n  const participants = (): VoiceParticipant[] => [\n    toVoiceParticipant(room.localParticipant, true),\n    ...[...room.remoteParticipants.values()].map((p) => toVoiceParticipant(p, false)),\n  ];\n  const emitParticipants = () => {\n    if (left) return;\n    const list = participants();\n    participantCbs.forEach((cb) => cb(list));\n  };\n  const applyVolume = (p: RemoteParticipant) => p.setVolume(outputMuted ? 0 : (volumes.get(p.identity) ?? 1));\n\n  const handlers: [RoomEvent, (...args: any[]) => void][] = [\n    [RoomEvent.ParticipantConnected, (p: RemoteParticipant) => { applyVolume(p); emitParticipants(); }],\n    [RoomEvent.ParticipantDisconnected, () => emitParticipants()],\n    [RoomEvent.ActiveSpeakersChanged, (speakers: Participant[]) => {\n      if (left) return;\n      const ids = speakers.map((s) => s.identity);\n      speakingCbs.forEach((cb) => cb(ids));\n    }],\n    [RoomEvent.TrackSubscribed, (track: RemoteTrack, _pub: unknown, p: RemoteParticipant) => {\n      if (track.kind !== Track.Kind.Audio) return;\n      const el = track.attach();\n      document.body.appendChild(el);\n      audioEls.set(track, [el]);\n      applyVolume(p);\n    }],\n    [RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach().forEach((el) => el.remove());\n      audioEls.delete(track);\n    }],\n  ];\n  for (const [event, fn] of handlers) room.on(event, fn);\n\n  try {\n    await room.connect(url, token);\n    if (publish) await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });\n    // joinVoice is called from a click; this is the gesture browsers require before audio may play.\n    await room.startAudio();\n  } catch (e) {\n    // A refused microphone must not leave the person connected and listening\n    // with no handle to leave — the caller only gets the rejection.\n    left = true;\n    for (const [event, fn] of handlers) room.off(event, fn);\n    await room.disconnect();\n    throw e;\n  }\n\n  return {\n    get muted() { return muted; },\n    async mute() { await room.localParticipant.setMicrophoneEnabled(false); muted = true; },\n    async unmute() { await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE }); muted = false; },\n    setOutputMuted(m) {\n      outputMuted = m;\n      room.remoteParticipants.forEach(applyVolume);\n    },\n    async setInputDevice(deviceId) { await room.switchActiveDevice(\"audioinput\", deviceId); },\n    async setOutputDevice(deviceId) { await room.switchActiveDevice(\"audiooutput\", deviceId); },\n    setVolume(identity, volume) {\n      volumes.set(identity, Math.min(1, Math.max(0, volume)));\n      const p = room.remoteParticipants.get(identity);\n      if (p) applyVolume(p);\n    },\n    onSpeaking(cb) {\n      speakingCbs.add(cb);\n      return () => speakingCbs.delete(cb);\n    },\n    onParticipants(cb) {\n      participantCbs.add(cb);\n      if (!left) cb(participants());\n      return () => participantCbs.delete(cb);\n    },\n    async leave() {\n      left = true;\n      for (const [event, fn] of handlers) room.off(event, fn);\n      speakingCbs.clear();\n      participantCbs.clear();\n      audioEls.forEach((_els, track) => track.detach().forEach((el) => el.remove()));\n      audioEls.clear();\n      await room.disconnect();\n    },\n  };\n}\n\nfunction toVoiceParticipant(p: Participant, isLocal: boolean): VoiceParticipant {\n  return { identity: p.identity, name: p.name || p.identity, isLocal };\n}\n"]}

package/dist/client.d.cts

@@ -0,0 +1,40 @@
+interface VoiceParticipant {
+    identity: string;
+    name: string;
+    isLocal: boolean;
+}
+interface JoinOptions {
+    /** The media server, e.g. `wss://voice.broberg.ai`. */
+    url: string;
+    /** A ticket from `createRoomToken` on the app's server. */
+    token: string;
+    /**
+     * F104.4 — `false` joins as a listener: the microphone is never opened
+     * (a listen-only ticket would be refused if it tried). Default `true`.
+     */
+    publish?: boolean;
+}
+interface VoiceCall {
+    mute(): Promise<void>;
+    unmute(): Promise<void>;
+    readonly muted: boolean;
+    /** Silence everyone else (true) or bring back each person's own volume (false). */
+    setOutputMuted(muted: boolean): void;
+    setInputDevice(deviceId: string): Promise<void>;
+    setOutputDevice(deviceId: string): Promise<void>;
+    /** 0–1 for one person. Kept while output is muted and applied on unmute. */
+    setVolume(identity: string, volume: number): void;
+    /** Identities of the people speaking right now, loudest first. Returns an unsubscribe. */
+    onSpeaking(cb: (identities: string[]) => void): () => void;
+    /** Everyone in the call, you included; called at once and on every join/leave. Returns an unsubscribe. */
+    onParticipants(cb: (participants: VoiceParticipant[]) => void): () => void;
+    leave(): Promise<void>;
+}
+declare const AUDIO_CAPTURE: {
+    readonly noiseSuppression: true;
+    readonly echoCancellation: true;
+    readonly autoGainControl: true;
+};
+declare function joinVoice({ url, token, publish }: JoinOptions): Promise<VoiceCall>;
+
+export { AUDIO_CAPTURE, type JoinOptions, type VoiceCall, type VoiceParticipant, joinVoice };

package/dist/client.d.ts

@@ -0,0 +1,40 @@
+interface VoiceParticipant {
+    identity: string;
+    name: string;
+    isLocal: boolean;
+}
+interface JoinOptions {
+    /** The media server, e.g. `wss://voice.broberg.ai`. */
+    url: string;
+    /** A ticket from `createRoomToken` on the app's server. */
+    token: string;
+    /**
+     * F104.4 — `false` joins as a listener: the microphone is never opened
+     * (a listen-only ticket would be refused if it tried). Default `true`.
+     */
+    publish?: boolean;
+}
+interface VoiceCall {
+    mute(): Promise<void>;
+    unmute(): Promise<void>;
+    readonly muted: boolean;
+    /** Silence everyone else (true) or bring back each person's own volume (false). */
+    setOutputMuted(muted: boolean): void;
+    setInputDevice(deviceId: string): Promise<void>;
+    setOutputDevice(deviceId: string): Promise<void>;
+    /** 0–1 for one person. Kept while output is muted and applied on unmute. */
+    setVolume(identity: string, volume: number): void;
+    /** Identities of the people speaking right now, loudest first. Returns an unsubscribe. */
+    onSpeaking(cb: (identities: string[]) => void): () => void;
+    /** Everyone in the call, you included; called at once and on every join/leave. Returns an unsubscribe. */
+    onParticipants(cb: (participants: VoiceParticipant[]) => void): () => void;
+    leave(): Promise<void>;
+}
+declare const AUDIO_CAPTURE: {
+    readonly noiseSuppression: true;
+    readonly echoCancellation: true;
+    readonly autoGainControl: true;
+};
+declare function joinVoice({ url, token, publish }: JoinOptions): Promise<VoiceCall>;
+
+export { AUDIO_CAPTURE, type JoinOptions, type VoiceCall, type VoiceParticipant, joinVoice };

package/dist/client.js

@@ -0,0 +1,111 @@
+import { Room, RoomEvent, Track } from 'livekit-client';
+
+// src/client.ts
+var AUDIO_CAPTURE = { noiseSuppression: true, echoCancellation: true, autoGainControl: true };
+async function joinVoice({ url, token, publish = true }) {
+  const room = new Room({ audioCaptureDefaults: { ...AUDIO_CAPTURE } });
+  const speakingCbs = /* @__PURE__ */ new Set();
+  const participantCbs = /* @__PURE__ */ new Set();
+  const volumes = /* @__PURE__ */ new Map();
+  const audioEls = /* @__PURE__ */ new Map();
+  let outputMuted = false;
+  let muted = !publish;
+  let left = false;
+  const participants = () => [
+    toVoiceParticipant(room.localParticipant, true),
+    ...[...room.remoteParticipants.values()].map((p) => toVoiceParticipant(p, false))
+  ];
+  const emitParticipants = () => {
+    if (left) return;
+    const list = participants();
+    participantCbs.forEach((cb) => cb(list));
+  };
+  const applyVolume = (p) => p.setVolume(outputMuted ? 0 : volumes.get(p.identity) ?? 1);
+  const handlers = [
+    [RoomEvent.ParticipantConnected, (p) => {
+      applyVolume(p);
+      emitParticipants();
+    }],
+    [RoomEvent.ParticipantDisconnected, () => emitParticipants()],
+    [RoomEvent.ActiveSpeakersChanged, (speakers) => {
+      if (left) return;
+      const ids = speakers.map((s) => s.identity);
+      speakingCbs.forEach((cb) => cb(ids));
+    }],
+    [RoomEvent.TrackSubscribed, (track, _pub, p) => {
+      if (track.kind !== Track.Kind.Audio) return;
+      const el = track.attach();
+      document.body.appendChild(el);
+      audioEls.set(track, [el]);
+      applyVolume(p);
+    }],
+    [RoomEvent.TrackUnsubscribed, (track) => {
+      track.detach().forEach((el) => el.remove());
+      audioEls.delete(track);
+    }]
+  ];
+  for (const [event, fn] of handlers) room.on(event, fn);
+  try {
+    await room.connect(url, token);
+    if (publish) await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });
+    await room.startAudio();
+  } catch (e) {
+    left = true;
+    for (const [event, fn] of handlers) room.off(event, fn);
+    await room.disconnect();
+    throw e;
+  }
+  return {
+    get muted() {
+      return muted;
+    },
+    async mute() {
+      await room.localParticipant.setMicrophoneEnabled(false);
+      muted = true;
+    },
+    async unmute() {
+      await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });
+      muted = false;
+    },
+    setOutputMuted(m) {
+      outputMuted = m;
+      room.remoteParticipants.forEach(applyVolume);
+    },
+    async setInputDevice(deviceId) {
+      await room.switchActiveDevice("audioinput", deviceId);
+    },
+    async setOutputDevice(deviceId) {
+      await room.switchActiveDevice("audiooutput", deviceId);
+    },
+    setVolume(identity, volume) {
+      volumes.set(identity, Math.min(1, Math.max(0, volume)));
+      const p = room.remoteParticipants.get(identity);
+      if (p) applyVolume(p);
+    },
+    onSpeaking(cb) {
+      speakingCbs.add(cb);
+      return () => speakingCbs.delete(cb);
+    },
+    onParticipants(cb) {
+      participantCbs.add(cb);
+      if (!left) cb(participants());
+      return () => participantCbs.delete(cb);
+    },
+    async leave() {
+      left = true;
+      for (const [event, fn] of handlers) room.off(event, fn);
+      speakingCbs.clear();
+      participantCbs.clear();
+      audioEls.forEach((_els, track) => track.detach().forEach((el) => el.remove()));
+      audioEls.clear();
+      await room.disconnect();
+    }
+  };
+}
+function toVoiceParticipant(p, isLocal) {
+  return { identity: p.identity, name: p.name || p.identity, isLocal };
+}
+
+export { AUDIO_CAPTURE, joinVoice };
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";;;AAgDO,IAAM,gBAAgB,EAAE,gBAAA,EAAkB,MAAM,gBAAA,EAAkB,IAAA,EAAM,iBAAiB,IAAA;AAEhG,eAAsB,UAAU,EAAE,GAAA,EAAK,KAAA,EAAO,OAAA,GAAU,MAAK,EAAoC;AAC/F,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,EAAE,sBAAsB,EAAE,GAAG,aAAA,EAAc,EAAG,CAAA;AACpE,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAA6B;AACrD,EAAA,MAAM,cAAA,uBAAqB,GAAA,EAAsC;AACjE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AACxC,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqC;AAC1D,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,QAAQ,CAAC,OAAA;AACb,EAAA,IAAI,IAAA,GAAO,KAAA;AAEX,EAAA,MAAM,eAAe,MAA0B;AAAA,IAC7C,kBAAA,CAAmB,IAAA,CAAK,gBAAA,EAAkB,IAAI,CAAA;AAAA,IAC9C,GAAG,CAAC,GAAG,IAAA,CAAK,mBAAmB,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAC;AAAA,GAClF;AACA,EAAA,MAAM,mBAAmB,MAAM;AAC7B,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,IAAA,cAAA,CAAe,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,IAAI,CAAC,CAAA;AAAA,EACzC,CAAA;AACA,EAAA,MAAM,WAAA,GAAc,CAAC,CAAA,KAAyB,CAAA,CAAE,SAAA,CAAU,WAAA,GAAc,CAAA,GAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAA,IAAK,CAAE,CAAA;AAE1G,EAAA,MAAM,QAAA,GAAoD;AAAA,IACxD,CAAC,SAAA,CAAU,oBAAA,EAAsB,CAAC,CAAA,KAAyB;AAAE,MAAA,WAAA,CAAY,CAAC,CAAA;AAAG,MAAA,gBAAA,EAAiB;AAAA,IAAG,CAAC,CAAA;AAAA,IAClG,CAAC,SAAA,CAAU,uBAAA,EAAyB,MAAM,kBAAkB,CAAA;AAAA,IAC5D,CAAC,SAAA,CAAU,qBAAA,EAAuB,CAAC,QAAA,KAA4B;AAC7D,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,MAAM,MAAM,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,QAAQ,CAAA;AAC1C,MAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,GAAG,CAAC,CAAA;AAAA,IACrC,CAAC,CAAA;AAAA,IACD,CAAC,SAAA,CAAU,eAAA,EAAiB,CAAC,KAAA,EAAoB,MAAe,CAAA,KAAyB;AACvF,MAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,CAAM,IAAA,CAAK,KAAA,EAAO;AACrC,MAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,MAAA,QAAA,CAAS,IAAA,CAAK,YAAY,EAAE,CAAA;AAC5B,MAAA,QAAA,CAAS,GAAA,CAAI,KAAA,EAAO,CAAC,EAAE,CAAC,CAAA;AACxB,MAAA,WAAA,CAAY,CAAC,CAAA;AAAA,IACf,CAAC,CAAA;AAAA,IACD,CAAC,SAAA,CAAU,iBAAA,EAAmB,CAAC,KAAA,KAAuB;AACpD,MAAA,KAAA,CAAM,QAAO,CAAE,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,QAAQ,CAAA;AAC1C,MAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AAAA,IACvB,CAAC;AAAA,GACH;AACA,EAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,EAAA,CAAG,OAAO,EAAE,CAAA;AAErD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAC7B,IAAA,IAAI,OAAA,QAAe,IAAA,CAAK,gBAAA,CAAiB,qBAAqB,IAAA,EAAM,EAAE,GAAG,aAAA,EAAe,CAAA;AAExF,IAAA,MAAM,KAAK,UAAA,EAAW;AAAA,EACxB,SAAS,CAAA,EAAG;AAGV,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AACtD,IAAA,MAAM,KAAK,UAAA,EAAW;AACtB,IAAA,MAAM,CAAA;AAAA,EACR;AAEA,EAAA,OAAO;AAAA,IACL,IAAI,KAAA,GAAQ;AAAE,MAAA,OAAO,KAAA;AAAA,IAAO,CAAA;AAAA,IAC5B,MAAM,IAAA,GAAO;AAAE,MAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,oBAAA,CAAqB,KAAK,CAAA;AAAG,MAAA,KAAA,GAAQ,IAAA;AAAA,IAAM,CAAA;AAAA,IACtF,MAAM,MAAA,GAAS;AAAE,MAAA,MAAM,KAAK,gBAAA,CAAiB,oBAAA,CAAqB,MAAM,EAAE,GAAG,eAAe,CAAA;AAAG,MAAA,KAAA,GAAQ,KAAA;AAAA,IAAO,CAAA;AAAA,IAC9G,eAAe,CAAA,EAAG;AAChB,MAAA,WAAA,GAAc,CAAA;AACd,MAAA,IAAA,CAAK,kBAAA,CAAmB,QAAQ,WAAW,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA,MAAM,eAAe,QAAA,EAAU;AAAE,MAAA,MAAM,IAAA,CAAK,kBAAA,CAAmB,YAAA,EAAc,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACxF,MAAM,gBAAgB,QAAA,EAAU;AAAE,MAAA,MAAM,IAAA,CAAK,kBAAA,CAAmB,aAAA,EAAe,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IAC1F,SAAA,CAAU,UAAU,MAAA,EAAQ;AAC1B,MAAA,OAAA,CAAQ,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,GAAA,CAAI,CAAA,EAAG,MAAM,CAAC,CAAC,CAAA;AACtD,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA;AAC9C,MAAA,IAAI,CAAA,cAAe,CAAC,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,WAAW,EAAA,EAAI;AACb,MAAA,WAAA,CAAY,IAAI,EAAE,CAAA;AAClB,MAAA,OAAO,MAAM,WAAA,CAAY,MAAA,CAAO,EAAE,CAAA;AAAA,IACpC,CAAA;AAAA,IACA,eAAe,EAAA,EAAI;AACjB,MAAA,cAAA,CAAe,IAAI,EAAE,CAAA;AACrB,MAAA,IAAI,CAAC,IAAA,EAAM,EAAA,CAAG,YAAA,EAAc,CAAA;AAC5B,MAAA,OAAO,MAAM,cAAA,CAAe,MAAA,CAAO,EAAE,CAAA;AAAA,IACvC,CAAA;AAAA,IACA,MAAM,KAAA,GAAQ;AACZ,MAAA,IAAA,GAAO,IAAA;AACP,MAAA,KAAA,MAAW,CAAC,OAAO,EAAE,CAAA,IAAK,UAAU,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AACtD,MAAA,WAAA,CAAY,KAAA,EAAM;AAClB,MAAA,cAAA,CAAe,KAAA,EAAM;AACrB,MAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,IAAA,EAAM,KAAA,KAAU,KAAA,CAAM,MAAA,EAAO,CAAE,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA;AAC7E,MAAA,QAAA,CAAS,KAAA,EAAM;AACf,MAAA,MAAM,KAAK,UAAA,EAAW;AAAA,IACxB;AAAA,GACF;AACF;AAEA,SAAS,kBAAA,CAAmB,GAAgB,OAAA,EAAoC;AAC9E,EAAA,OAAO,EAAE,UAAU,CAAA,CAAE,QAAA,EAAU,MAAM,CAAA,CAAE,IAAA,IAAQ,CAAA,CAAE,QAAA,EAAU,OAAA,EAAQ;AACrE","file":"client.js","sourcesContent":["// @broberg/call/client — the browser's half of a voice call (F104.3).\n//\n// A thin layer over livekit-client that does the four things every app would\n// otherwise get slightly wrong on its own: open the microphone with noise\n// suppression, echo cancellation and auto gain; actually PLAY the other people\n// (a subscribed audio track is silent until it is attached to an element);\n// keep \"mute everyone\" and per-person volume apart so unmuting restores what\n// each person was set to; and stop calling the app back after leave().\n// No node: imports.\n\nimport { Room, RoomEvent, Track } from \"livekit-client\";\nimport type { Participant, RemoteParticipant, RemoteTrack } from \"livekit-client\";\n\nexport interface VoiceParticipant {\n  identity: string;\n  name: string;\n  isLocal: boolean;\n}\n\nexport interface JoinOptions {\n  /** The media server, e.g. `wss://voice.broberg.ai`. */\n  url: string;\n  /** A ticket from `createRoomToken` on the app's server. */\n  token: string;\n  /**\n   * F104.4 — `false` joins as a listener: the microphone is never opened\n   * (a listen-only ticket would be refused if it tried). Default `true`.\n   */\n  publish?: boolean;\n}\n\nexport interface VoiceCall {\n  mute(): Promise<void>;\n  unmute(): Promise<void>;\n  readonly muted: boolean;\n  /** Silence everyone else (true) or bring back each person's own volume (false). */\n  setOutputMuted(muted: boolean): void;\n  setInputDevice(deviceId: string): Promise<void>;\n  setOutputDevice(deviceId: string): Promise<void>;\n  /** 0–1 for one person. Kept while output is muted and applied on unmute. */\n  setVolume(identity: string, volume: number): void;\n  /** Identities of the people speaking right now, loudest first. Returns an unsubscribe. */\n  onSpeaking(cb: (identities: string[]) => void): () => void;\n  /** Everyone in the call, you included; called at once and on every join/leave. Returns an unsubscribe. */\n  onParticipants(cb: (participants: VoiceParticipant[]) => void): () => void;\n  leave(): Promise<void>;\n}\n\nexport const AUDIO_CAPTURE = { noiseSuppression: true, echoCancellation: true, autoGainControl: true } as const;\n\nexport async function joinVoice({ url, token, publish = true }: JoinOptions): Promise<VoiceCall> {\n  const room = new Room({ audioCaptureDefaults: { ...AUDIO_CAPTURE } });\n  const speakingCbs = new Set<(ids: string[]) => void>();\n  const participantCbs = new Set<(ps: VoiceParticipant[]) => void>();\n  const volumes = new Map<string, number>();\n  const audioEls = new Map<RemoteTrack, HTMLMediaElement[]>();\n  let outputMuted = false;\n  let muted = !publish;\n  let left = false;\n\n  const participants = (): VoiceParticipant[] => [\n    toVoiceParticipant(room.localParticipant, true),\n    ...[...room.remoteParticipants.values()].map((p) => toVoiceParticipant(p, false)),\n  ];\n  const emitParticipants = () => {\n    if (left) return;\n    const list = participants();\n    participantCbs.forEach((cb) => cb(list));\n  };\n  const applyVolume = (p: RemoteParticipant) => p.setVolume(outputMuted ? 0 : (volumes.get(p.identity) ?? 1));\n\n  const handlers: [RoomEvent, (...args: any[]) => void][] = [\n    [RoomEvent.ParticipantConnected, (p: RemoteParticipant) => { applyVolume(p); emitParticipants(); }],\n    [RoomEvent.ParticipantDisconnected, () => emitParticipants()],\n    [RoomEvent.ActiveSpeakersChanged, (speakers: Participant[]) => {\n      if (left) return;\n      const ids = speakers.map((s) => s.identity);\n      speakingCbs.forEach((cb) => cb(ids));\n    }],\n    [RoomEvent.TrackSubscribed, (track: RemoteTrack, _pub: unknown, p: RemoteParticipant) => {\n      if (track.kind !== Track.Kind.Audio) return;\n      const el = track.attach();\n      document.body.appendChild(el);\n      audioEls.set(track, [el]);\n      applyVolume(p);\n    }],\n    [RoomEvent.TrackUnsubscribed, (track: RemoteTrack) => {\n      track.detach().forEach((el) => el.remove());\n      audioEls.delete(track);\n    }],\n  ];\n  for (const [event, fn] of handlers) room.on(event, fn);\n\n  try {\n    await room.connect(url, token);\n    if (publish) await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE });\n    // joinVoice is called from a click; this is the gesture browsers require before audio may play.\n    await room.startAudio();\n  } catch (e) {\n    // A refused microphone must not leave the person connected and listening\n    // with no handle to leave — the caller only gets the rejection.\n    left = true;\n    for (const [event, fn] of handlers) room.off(event, fn);\n    await room.disconnect();\n    throw e;\n  }\n\n  return {\n    get muted() { return muted; },\n    async mute() { await room.localParticipant.setMicrophoneEnabled(false); muted = true; },\n    async unmute() { await room.localParticipant.setMicrophoneEnabled(true, { ...AUDIO_CAPTURE }); muted = false; },\n    setOutputMuted(m) {\n      outputMuted = m;\n      room.remoteParticipants.forEach(applyVolume);\n    },\n    async setInputDevice(deviceId) { await room.switchActiveDevice(\"audioinput\", deviceId); },\n    async setOutputDevice(deviceId) { await room.switchActiveDevice(\"audiooutput\", deviceId); },\n    setVolume(identity, volume) {\n      volumes.set(identity, Math.min(1, Math.max(0, volume)));\n      const p = room.remoteParticipants.get(identity);\n      if (p) applyVolume(p);\n    },\n    onSpeaking(cb) {\n      speakingCbs.add(cb);\n      return () => speakingCbs.delete(cb);\n    },\n    onParticipants(cb) {\n      participantCbs.add(cb);\n      if (!left) cb(participants());\n      return () => participantCbs.delete(cb);\n    },\n    async leave() {\n      left = true;\n      for (const [event, fn] of handlers) room.off(event, fn);\n      speakingCbs.clear();\n      participantCbs.clear();\n      audioEls.forEach((_els, track) => track.detach().forEach((el) => el.remove()));\n      audioEls.clear();\n      await room.disconnect();\n    },\n  };\n}\n\nfunction toVoiceParticipant(p: Participant, isLocal: boolean): VoiceParticipant {\n  return { identity: p.identity, name: p.name || p.identity, isLocal };\n}\n"]}

package/dist/server.cjs

@@ -0,0 +1,56 @@
+'use strict';
+
+var livekitServerSdk = require('livekit-server-sdk');
+
+// src/server.ts
+var VoiceError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "VoiceError";
+  }
+  code;
+};
+var DEFAULT_TTL_SECONDS = 600;
+var MAX_TTL_SECONDS = 3600;
+function requireCredentials({ apiKey, apiSecret }) {
+  if (!apiKey || !apiSecret) {
+    throw new VoiceError("missing_credentials", "apiKey and apiSecret are required");
+  }
+}
+async function createRoomToken(opts) {
+  requireCredentials(opts);
+  if (!opts.room?.trim()) throw new VoiceError("invalid_room", "room is required");
+  if (!opts.identity?.trim()) throw new VoiceError("invalid_identity", "identity is required");
+  const ttl = opts.ttl ?? DEFAULT_TTL_SECONDS;
+  if (!Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_TTL_SECONDS) {
+    throw new VoiceError("invalid_ttl", `ttl must be a whole number of seconds between 1 and ${MAX_TTL_SECONDS}`);
+  }
+  const token = new livekitServerSdk.AccessToken(opts.apiKey, opts.apiSecret, { identity: opts.identity, name: opts.name, ttl });
+  const speak = opts.canPublish !== false;
+  token.addGrant({
+    room: opts.room,
+    roomJoin: true,
+    canSubscribe: true,
+    canPublish: speak,
+    ...speak ? { canPublishSources: [livekitServerSdk.TrackSource.MICROPHONE] } : {},
+    canPublishData: false
+  });
+  return token.toJwt();
+}
+async function verifyWebhook(body, authHeader, credentials) {
+  requireCredentials(credentials);
+  try {
+    return await new livekitServerSdk.WebhookReceiver(credentials.apiKey, credentials.apiSecret).receive(body, authHeader ?? void 0);
+  } catch (e) {
+    throw new VoiceError("invalid_webhook", `webhook rejected: ${e.message}`);
+  }
+}
+
+exports.DEFAULT_TTL_SECONDS = DEFAULT_TTL_SECONDS;
+exports.MAX_TTL_SECONDS = MAX_TTL_SECONDS;
+exports.VoiceError = VoiceError;
+exports.createRoomToken = createRoomToken;
+exports.verifyWebhook = verifyWebhook;
+//# sourceMappingURL=server.cjs.map
+//# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"names":["AccessToken","TrackSource","WebhookReceiver"],"mappings":";;;;;AAmBO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,WAAA,CACW,MACT,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHJ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIT,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AAAA,EALW,IAAA;AAMb;AAwBO,IAAM,mBAAA,GAAsB;AAC5B,IAAM,eAAA,GAAkB;AAE/B,SAAS,kBAAA,CAAmB,EAAE,MAAA,EAAQ,SAAA,EAAU,EAA+B;AAI7E,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,SAAA,EAAW;AACzB,IAAA,MAAM,IAAI,UAAA,CAAW,qBAAA,EAAuB,mCAAmC,CAAA;AAAA,EACjF;AACF;AAGA,eAAsB,gBAAgB,IAAA,EAAyC;AAC7E,EAAA,kBAAA,CAAmB,IAAI,CAAA;AACvB,EAAA,IAAI,CAAC,KAAK,IAAA,EAAM,IAAA,IAAQ,MAAM,IAAI,UAAA,CAAW,cAAA,EAAgB,kBAAkB,CAAA;AAC/E,EAAA,IAAI,CAAC,KAAK,QAAA,EAAU,IAAA,IAAQ,MAAM,IAAI,UAAA,CAAW,kBAAA,EAAoB,sBAAsB,CAAA;AAC3F,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,IAAO,mBAAA;AACxB,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,GAAG,KAAK,GAAA,IAAO,CAAA,IAAK,MAAM,eAAA,EAAiB;AAC/D,IAAA,MAAM,IAAI,UAAA,CAAW,aAAA,EAAe,CAAA,oDAAA,EAAuD,eAAe,CAAA,CAAE,CAAA;AAAA,EAC9G;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAIA,4BAAA,CAAY,IAAA,CAAK,QAAQ,IAAA,CAAK,SAAA,EAAW,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAC5G,EAAA,MAAM,KAAA,GAAQ,KAAK,UAAA,KAAe,KAAA;AAClC,EAAA,KAAA,CAAM,QAAA,CAAS;AAAA,IACb,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAA,EAAU,IAAA;AAAA,IACV,YAAA,EAAc,IAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,GAAI,QAAQ,EAAE,iBAAA,EAAmB,CAACC,4BAAA,CAAY,UAAU,CAAA,EAAE,GAAI,EAAC;AAAA,IAC/D,cAAA,EAAgB;AAAA,GACjB,CAAA;AACD,EAAA,OAAO,MAAM,KAAA,EAAM;AACrB;AAMA,eAAsB,aAAA,CACpB,IAAA,EACA,UAAA,EACA,WAAA,EACuB;AACvB,EAAA,kBAAA,CAAmB,WAAW,CAAA;AAC9B,EAAA,IAAI;AAEF,IAAA,OAAO,MAAM,IAAIC,gCAAA,CAAgB,WAAA,CAAY,MAAA,EAAQ,WAAA,CAAY,SAAS,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,UAAA,IAAc,KAAA,CAAS,CAAA;AAAA,EACnH,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,UAAA,CAAW,iBAAA,EAAmB,CAAA,kBAAA,EAAsB,CAAA,CAAY,OAAO,CAAA,CAAE,CAAA;AAAA,EACrF;AACF","file":"server.cjs","sourcesContent":["// @broberg/call/server — the app's half of a voice call (F104.3).\n//\n// The app never carries audio. It decides who may enter a room, signs a short\n// ticket for that one room, and hears from the media server (LiveKit) through a\n// signed webhook when people join and leave. Built on LiveKit's own SDK so the\n// ticket format and the webhook signature are LiveKit's, not ours.\n\nimport { AccessToken, TrackSource, WebhookReceiver } from \"livekit-server-sdk\";\nimport type { WebhookEvent } from \"livekit-server-sdk\";\n\nexport type { WebhookEvent };\n\nexport type VoiceErrorCode =\n  | \"missing_credentials\"\n  | \"invalid_room\"\n  | \"invalid_identity\"\n  | \"invalid_ttl\"\n  | \"invalid_webhook\";\n\nexport class VoiceError extends Error {\n  constructor(\n    readonly code: VoiceErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"VoiceError\";\n  }\n}\n\nexport interface Credentials {\n  apiKey: string;\n  apiSecret: string;\n}\n\nexport interface RoomTokenOptions extends Credentials {\n  /** One room, e.g. `jam:<jam-id>`. The ticket admits to this room only. */\n  room: string;\n  /** Stable id of the person — the same person joining twice replaces the first connection. */\n  identity: string;\n  /** Display name other participants see. */\n  name?: string;\n  /** Seconds the ticket can be used to ENTER. Default 600, max 3600. A call in progress is not cut off when it expires. */\n  ttl?: number;\n  /**\n   * F104.4 — `false` makes a LISTEN-ONLY ticket: the person can join and hear\n   * everyone but publish nothing (no microphone, no data). Default `true`.\n   * Pair it with `joinVoice({ publish: false })` in the browser.\n   */\n  canPublish?: boolean;\n}\n\nexport const DEFAULT_TTL_SECONDS = 600;\nexport const MAX_TTL_SECONDS = 3600;\n\nfunction requireCredentials({ apiKey, apiSecret }: Partial<Credentials>): void {\n  // LiveKit's AccessToken falls back to LIVEKIT_API_KEY/SECRET from the\n  // environment when these are missing — a ticket signed with a key the caller\n  // never chose. Refuse instead.\n  if (!apiKey || !apiSecret) {\n    throw new VoiceError(\"missing_credentials\", \"apiKey and apiSecret are required\");\n  }\n}\n\n/** Sign a microphone-only ticket for one room. Check the person's access BEFORE calling this. */\nexport async function createRoomToken(opts: RoomTokenOptions): Promise<string> {\n  requireCredentials(opts);\n  if (!opts.room?.trim()) throw new VoiceError(\"invalid_room\", \"room is required\");\n  if (!opts.identity?.trim()) throw new VoiceError(\"invalid_identity\", \"identity is required\");\n  const ttl = opts.ttl ?? DEFAULT_TTL_SECONDS;\n  if (!Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_TTL_SECONDS) {\n    throw new VoiceError(\"invalid_ttl\", `ttl must be a whole number of seconds between 1 and ${MAX_TTL_SECONDS}`);\n  }\n\n  const token = new AccessToken(opts.apiKey, opts.apiSecret, { identity: opts.identity, name: opts.name, ttl });\n  const speak = opts.canPublish !== false;\n  token.addGrant({\n    room: opts.room,\n    roomJoin: true,\n    canSubscribe: true,\n    canPublish: speak,\n    ...(speak ? { canPublishSources: [TrackSource.MICROPHONE] } : {}),\n    canPublishData: false,\n  });\n  return token.toJwt();\n}\n\n/**\n * Verify a webhook from the media server and return its event.\n * `body` must be the RAW request body — re-serialised JSON changes the hash.\n */\nexport async function verifyWebhook(\n  body: string,\n  authHeader: string | null | undefined,\n  credentials: Credentials,\n): Promise<WebhookEvent> {\n  requireCredentials(credentials);\n  try {\n    // A missing header is refused by LiveKit itself (\"authorization header is empty\").\n    return await new WebhookReceiver(credentials.apiKey, credentials.apiSecret).receive(body, authHeader ?? undefined);\n  } catch (e) {\n    throw new VoiceError(\"invalid_webhook\", `webhook rejected: ${(e as Error).message}`);\n  }\n}\n"]}

package/dist/server.d.cts

@@ -0,0 +1,39 @@
+import { WebhookEvent } from 'livekit-server-sdk';
+export { WebhookEvent } from 'livekit-server-sdk';
+
+type VoiceErrorCode = "missing_credentials" | "invalid_room" | "invalid_identity" | "invalid_ttl" | "invalid_webhook";
+declare class VoiceError extends Error {
+    readonly code: VoiceErrorCode;
+    constructor(code: VoiceErrorCode, message: string);
+}
+interface Credentials {
+    apiKey: string;
+    apiSecret: string;
+}
+interface RoomTokenOptions extends Credentials {
+    /** One room, e.g. `jam:<jam-id>`. The ticket admits to this room only. */
+    room: string;
+    /** Stable id of the person — the same person joining twice replaces the first connection. */
+    identity: string;
+    /** Display name other participants see. */
+    name?: string;
+    /** Seconds the ticket can be used to ENTER. Default 600, max 3600. A call in progress is not cut off when it expires. */
+    ttl?: number;
+    /**
+     * F104.4 — `false` makes a LISTEN-ONLY ticket: the person can join and hear
+     * everyone but publish nothing (no microphone, no data). Default `true`.
+     * Pair it with `joinVoice({ publish: false })` in the browser.
+     */
+    canPublish?: boolean;
+}
+declare const DEFAULT_TTL_SECONDS = 600;
+declare const MAX_TTL_SECONDS = 3600;
+/** Sign a microphone-only ticket for one room. Check the person's access BEFORE calling this. */
+declare function createRoomToken(opts: RoomTokenOptions): Promise<string>;
+/**
+ * Verify a webhook from the media server and return its event.
+ * `body` must be the RAW request body — re-serialised JSON changes the hash.
+ */
+declare function verifyWebhook(body: string, authHeader: string | null | undefined, credentials: Credentials): Promise<WebhookEvent>;
+
+export { type Credentials, DEFAULT_TTL_SECONDS, MAX_TTL_SECONDS, type RoomTokenOptions, VoiceError, type VoiceErrorCode, createRoomToken, verifyWebhook };

package/dist/server.d.ts

@@ -0,0 +1,39 @@
+import { WebhookEvent } from 'livekit-server-sdk';
+export { WebhookEvent } from 'livekit-server-sdk';
+
+type VoiceErrorCode = "missing_credentials" | "invalid_room" | "invalid_identity" | "invalid_ttl" | "invalid_webhook";
+declare class VoiceError extends Error {
+    readonly code: VoiceErrorCode;
+    constructor(code: VoiceErrorCode, message: string);
+}
+interface Credentials {
+    apiKey: string;
+    apiSecret: string;
+}
+interface RoomTokenOptions extends Credentials {
+    /** One room, e.g. `jam:<jam-id>`. The ticket admits to this room only. */
+    room: string;
+    /** Stable id of the person — the same person joining twice replaces the first connection. */
+    identity: string;
+    /** Display name other participants see. */
+    name?: string;
+    /** Seconds the ticket can be used to ENTER. Default 600, max 3600. A call in progress is not cut off when it expires. */
+    ttl?: number;
+    /**
+     * F104.4 — `false` makes a LISTEN-ONLY ticket: the person can join and hear
+     * everyone but publish nothing (no microphone, no data). Default `true`.
+     * Pair it with `joinVoice({ publish: false })` in the browser.
+     */
+    canPublish?: boolean;
+}
+declare const DEFAULT_TTL_SECONDS = 600;
+declare const MAX_TTL_SECONDS = 3600;
+/** Sign a microphone-only ticket for one room. Check the person's access BEFORE calling this. */
+declare function createRoomToken(opts: RoomTokenOptions): Promise<string>;
+/**
+ * Verify a webhook from the media server and return its event.
+ * `body` must be the RAW request body — re-serialised JSON changes the hash.
+ */
+declare function verifyWebhook(body: string, authHeader: string | null | undefined, credentials: Credentials): Promise<WebhookEvent>;
+
+export { type Credentials, DEFAULT_TTL_SECONDS, MAX_TTL_SECONDS, type RoomTokenOptions, VoiceError, type VoiceErrorCode, createRoomToken, verifyWebhook };

package/dist/server.js

@@ -0,0 +1,50 @@
+import { AccessToken, TrackSource, WebhookReceiver } from 'livekit-server-sdk';
+
+// src/server.ts
+var VoiceError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "VoiceError";
+  }
+  code;
+};
+var DEFAULT_TTL_SECONDS = 600;
+var MAX_TTL_SECONDS = 3600;
+function requireCredentials({ apiKey, apiSecret }) {
+  if (!apiKey || !apiSecret) {
+    throw new VoiceError("missing_credentials", "apiKey and apiSecret are required");
+  }
+}
+async function createRoomToken(opts) {
+  requireCredentials(opts);
+  if (!opts.room?.trim()) throw new VoiceError("invalid_room", "room is required");
+  if (!opts.identity?.trim()) throw new VoiceError("invalid_identity", "identity is required");
+  const ttl = opts.ttl ?? DEFAULT_TTL_SECONDS;
+  if (!Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_TTL_SECONDS) {
+    throw new VoiceError("invalid_ttl", `ttl must be a whole number of seconds between 1 and ${MAX_TTL_SECONDS}`);
+  }
+  const token = new AccessToken(opts.apiKey, opts.apiSecret, { identity: opts.identity, name: opts.name, ttl });
+  const speak = opts.canPublish !== false;
+  token.addGrant({
+    room: opts.room,
+    roomJoin: true,
+    canSubscribe: true,
+    canPublish: speak,
+    ...speak ? { canPublishSources: [TrackSource.MICROPHONE] } : {},
+    canPublishData: false
+  });
+  return token.toJwt();
+}
+async function verifyWebhook(body, authHeader, credentials) {
+  requireCredentials(credentials);
+  try {
+    return await new WebhookReceiver(credentials.apiKey, credentials.apiSecret).receive(body, authHeader ?? void 0);
+  } catch (e) {
+    throw new VoiceError("invalid_webhook", `webhook rejected: ${e.message}`);
+  }
+}
+
+export { DEFAULT_TTL_SECONDS, MAX_TTL_SECONDS, VoiceError, createRoomToken, verifyWebhook };
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"names":[],"mappings":";;;AAmBO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,WAAA,CACW,MACT,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHJ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIT,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AAAA,EALW,IAAA;AAMb;AAwBO,IAAM,mBAAA,GAAsB;AAC5B,IAAM,eAAA,GAAkB;AAE/B,SAAS,kBAAA,CAAmB,EAAE,MAAA,EAAQ,SAAA,EAAU,EAA+B;AAI7E,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,SAAA,EAAW;AACzB,IAAA,MAAM,IAAI,UAAA,CAAW,qBAAA,EAAuB,mCAAmC,CAAA;AAAA,EACjF;AACF;AAGA,eAAsB,gBAAgB,IAAA,EAAyC;AAC7E,EAAA,kBAAA,CAAmB,IAAI,CAAA;AACvB,EAAA,IAAI,CAAC,KAAK,IAAA,EAAM,IAAA,IAAQ,MAAM,IAAI,UAAA,CAAW,cAAA,EAAgB,kBAAkB,CAAA;AAC/E,EAAA,IAAI,CAAC,KAAK,QAAA,EAAU,IAAA,IAAQ,MAAM,IAAI,UAAA,CAAW,kBAAA,EAAoB,sBAAsB,CAAA;AAC3F,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,IAAO,mBAAA;AACxB,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,GAAG,KAAK,GAAA,IAAO,CAAA,IAAK,MAAM,eAAA,EAAiB;AAC/D,IAAA,MAAM,IAAI,UAAA,CAAW,aAAA,EAAe,CAAA,oDAAA,EAAuD,eAAe,CAAA,CAAE,CAAA;AAAA,EAC9G;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,CAAY,IAAA,CAAK,QAAQ,IAAA,CAAK,SAAA,EAAW,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAC5G,EAAA,MAAM,KAAA,GAAQ,KAAK,UAAA,KAAe,KAAA;AAClC,EAAA,KAAA,CAAM,QAAA,CAAS;AAAA,IACb,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAA,EAAU,IAAA;AAAA,IACV,YAAA,EAAc,IAAA;AAAA,IACd,UAAA,EAAY,KAAA;AAAA,IACZ,GAAI,QAAQ,EAAE,iBAAA,EAAmB,CAAC,WAAA,CAAY,UAAU,CAAA,EAAE,GAAI,EAAC;AAAA,IAC/D,cAAA,EAAgB;AAAA,GACjB,CAAA;AACD,EAAA,OAAO,MAAM,KAAA,EAAM;AACrB;AAMA,eAAsB,aAAA,CACpB,IAAA,EACA,UAAA,EACA,WAAA,EACuB;AACvB,EAAA,kBAAA,CAAmB,WAAW,CAAA;AAC9B,EAAA,IAAI;AAEF,IAAA,OAAO,MAAM,IAAI,eAAA,CAAgB,WAAA,CAAY,MAAA,EAAQ,WAAA,CAAY,SAAS,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,UAAA,IAAc,KAAA,CAAS,CAAA;AAAA,EACnH,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,IAAI,UAAA,CAAW,iBAAA,EAAmB,CAAA,kBAAA,EAAsB,CAAA,CAAY,OAAO,CAAA,CAAE,CAAA;AAAA,EACrF;AACF","file":"server.js","sourcesContent":["// @broberg/call/server — the app's half of a voice call (F104.3).\n//\n// The app never carries audio. It decides who may enter a room, signs a short\n// ticket for that one room, and hears from the media server (LiveKit) through a\n// signed webhook when people join and leave. Built on LiveKit's own SDK so the\n// ticket format and the webhook signature are LiveKit's, not ours.\n\nimport { AccessToken, TrackSource, WebhookReceiver } from \"livekit-server-sdk\";\nimport type { WebhookEvent } from \"livekit-server-sdk\";\n\nexport type { WebhookEvent };\n\nexport type VoiceErrorCode =\n  | \"missing_credentials\"\n  | \"invalid_room\"\n  | \"invalid_identity\"\n  | \"invalid_ttl\"\n  | \"invalid_webhook\";\n\nexport class VoiceError extends Error {\n  constructor(\n    readonly code: VoiceErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"VoiceError\";\n  }\n}\n\nexport interface Credentials {\n  apiKey: string;\n  apiSecret: string;\n}\n\nexport interface RoomTokenOptions extends Credentials {\n  /** One room, e.g. `jam:<jam-id>`. The ticket admits to this room only. */\n  room: string;\n  /** Stable id of the person — the same person joining twice replaces the first connection. */\n  identity: string;\n  /** Display name other participants see. */\n  name?: string;\n  /** Seconds the ticket can be used to ENTER. Default 600, max 3600. A call in progress is not cut off when it expires. */\n  ttl?: number;\n  /**\n   * F104.4 — `false` makes a LISTEN-ONLY ticket: the person can join and hear\n   * everyone but publish nothing (no microphone, no data). Default `true`.\n   * Pair it with `joinVoice({ publish: false })` in the browser.\n   */\n  canPublish?: boolean;\n}\n\nexport const DEFAULT_TTL_SECONDS = 600;\nexport const MAX_TTL_SECONDS = 3600;\n\nfunction requireCredentials({ apiKey, apiSecret }: Partial<Credentials>): void {\n  // LiveKit's AccessToken falls back to LIVEKIT_API_KEY/SECRET from the\n  // environment when these are missing — a ticket signed with a key the caller\n  // never chose. Refuse instead.\n  if (!apiKey || !apiSecret) {\n    throw new VoiceError(\"missing_credentials\", \"apiKey and apiSecret are required\");\n  }\n}\n\n/** Sign a microphone-only ticket for one room. Check the person's access BEFORE calling this. */\nexport async function createRoomToken(opts: RoomTokenOptions): Promise<string> {\n  requireCredentials(opts);\n  if (!opts.room?.trim()) throw new VoiceError(\"invalid_room\", \"room is required\");\n  if (!opts.identity?.trim()) throw new VoiceError(\"invalid_identity\", \"identity is required\");\n  const ttl = opts.ttl ?? DEFAULT_TTL_SECONDS;\n  if (!Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_TTL_SECONDS) {\n    throw new VoiceError(\"invalid_ttl\", `ttl must be a whole number of seconds between 1 and ${MAX_TTL_SECONDS}`);\n  }\n\n  const token = new AccessToken(opts.apiKey, opts.apiSecret, { identity: opts.identity, name: opts.name, ttl });\n  const speak = opts.canPublish !== false;\n  token.addGrant({\n    room: opts.room,\n    roomJoin: true,\n    canSubscribe: true,\n    canPublish: speak,\n    ...(speak ? { canPublishSources: [TrackSource.MICROPHONE] } : {}),\n    canPublishData: false,\n  });\n  return token.toJwt();\n}\n\n/**\n * Verify a webhook from the media server and return its event.\n * `body` must be the RAW request body — re-serialised JSON changes the hash.\n */\nexport async function verifyWebhook(\n  body: string,\n  authHeader: string | null | undefined,\n  credentials: Credentials,\n): Promise<WebhookEvent> {\n  requireCredentials(credentials);\n  try {\n    // A missing header is refused by LiveKit itself (\"authorization header is empty\").\n    return await new WebhookReceiver(credentials.apiKey, credentials.apiSecret).receive(body, authHeader ?? undefined);\n  } catch (e) {\n    throw new VoiceError(\"invalid_webhook\", `webhook rejected: ${(e as Error).message}`);\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "@broberg/call",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Calls (audio today; video + screen share next) for 2–10 people on a self-hosted LiveKit SFU: the app's server mints a short-lived, room-bound, microphone-only ticket and verifies LiveKit's signed webhooks; the browser joins with noise suppression, echo cancellation and auto gain, and gets mute, output mute, device choice, per-person volume, who-is-speaking and the participant list.",
+  "type": "module",
+  "license": "MIT",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "exports": {
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js",
+      "require": "./dist/server.cjs"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "require": "./dist/client.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run --reporter=default --reporter=json --outputFile.json=.vitest-report/results.json && node ../../scripts/mutations-if-changed.mjs test/mutations.mjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "livekit-client": "2.22.3",
+    "livekit-server-sdk": "2.19.1"
+  },
+  "devDependencies": {
+    "@types/node": "^26.2.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  },
+  "keywords": [
+    "voice",
+    "webrtc",
+    "livekit",
+    "sfu",
+    "audio-call",
+    "huddle",
+    "broberg"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/broberg-ai/components",
+    "directory": "packages/voice"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}