@memberjunction/livekit-room-server 6.2.0-edge.2 → 6.2.0-edge.4

package/dist/livekit-token-service.js

@@ -10,6 +10,14 @@
  * @module @memberjunction/livekit-room-server
  */
 import { AccessToken } from 'livekit-server-sdk';
+/**
+ * The LiveKit participant identity a signed-in MJ user joins a room with. Everything that mints a token for a user, and
+ * everything that later looks for that user in a room (the handoff engine watching for a person to appear), derives it
+ * here so the two can never disagree.
+ */
+export function LiveKitUserIdentity(userID) {
+    return `user-${userID}`.toLowerCase();
+}
 /** Mints scoped LiveKit access tokens. Stateless apart from its resolved credentials. */
 export class LiveKitTokenService {
     /**
@@ -39,12 +47,13 @@ export class LiveKitTokenService {
      * @throws {Error} when credentials are not configured.
      */
     async MintToken(params) {
-        this.assertConfigured();
+        this.AssertConfigured();
         const at = new AccessToken(this.config.ApiKey, this.config.ApiSecret, {
             identity: params.Identity,
             name: params.DisplayName,
             ttl: params.TtlSeconds ?? 3600,
             metadata: this.buildMetadata(params),
+            attributes: params.Attributes,
         });
         at.addGrant(this.buildGrant(params));
         const token = await at.toJwt();
@@ -63,16 +72,18 @@ export class LiveKitTokenService {
     }
     /**
      * Mints a token for the AGENT bot (publish + subscribe + data, `agent` role metadata so the UI badges
-     * it correctly). The bridge passes this in its session `Configuration.AccessToken`.
+     * it correctly, and leave to update its own attributes, so it can say when its avatar was taken down). The bridge
+     * passes this in its session `Configuration.AccessToken`.
      *
      * @param roomName The room to join.
      * @param identity The bot identity.
      * @param displayName The bot display name.
+     * @param attributes Participant attributes the bot carries from the moment it joins (e.g. `mj.agentWatches`).
      */
-    MintBotToken(roomName, identity, displayName) {
-        return this.MintToken({ RoomName: roomName, Identity: identity, DisplayName: displayName, Role: 'agent' });
+    MintBotToken(roomName, identity, displayName, attributes) {
+        return this.MintToken({ RoomName: roomName, Identity: identity, DisplayName: displayName, Role: 'agent', Attributes: attributes, CanUpdateOwnMetadata: true });
     }
-    /** Builds the LiveKit video grant from the params (defaults: publish + subscribe + data all on). */
+    /** Builds the LiveKit video grant from the params (defaults: publish + subscribe + data all on; own metadata off). */
     buildGrant(params) {
         return {
             roomJoin: true,
@@ -80,14 +91,18 @@ export class LiveKitTokenService {
             canPublish: params.CanPublish ?? true,
             canSubscribe: params.CanSubscribe ?? true,
             canPublishData: params.CanPublishData ?? true,
+            ...(params.CanUpdateOwnMetadata ? { canUpdateOwnMetadata: true } : {}),
         };
     }
     /** Builds the participant metadata JSON string, always stamping the role for UI resolution. */
     buildMetadata(params) {
         return JSON.stringify({ mjRole: params.Role ?? 'participant', ...(params.Metadata ?? {}) });
     }
-    /** Throws a clear error when credentials are missing. */
-    assertConfigured() {
+    /**
+     * Throws a clear error when credentials are missing. Public so a caller that must fail before doing costly work (the
+     * room coordinator, before it opens a model session) gets the same error minting would.
+     */
+    AssertConfigured() {
         if (!this.IsConfigured) {
             throw new Error('LiveKitTokenService is not configured. Set LIVEKIT_URL, LIVEKIT_API_KEY, and LIVEKIT_API_SECRET ' +
                 '(or pass them to the constructor) before minting tokens.');

package/dist/livekit-token-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"livekit-token-service.js","sourceRoot":"","sources":["../src/livekit-token-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AAiDlE,yFAAyF;AACzF,MAAM,OAAO,mBAAmB;IAG9B;;;OAGG;IACH,YAAY,MAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAC3D,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAW,YAAY;QACrB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC;IAED,iFAAiF;IACjF,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,SAAS,CAAC,MAAuB;QAC5C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YACpE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YAC9B,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClH,CAAC;IAED;;;;;;;OAOG;IACI,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAE,WAAoB,EAAE,UAAmB;QAClG,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED;;;;;;;OAOG;IACI,YAAY,CAAC,QAAgB,EAAE,QAAgB,EAAE,WAAoB;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,oGAAoG;IAC5F,UAAU,CAAC,MAAuB;QACxC,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;SAC9C,CAAC;IACJ,CAAC;IAED,+FAA+F;IACvF,aAAa,CAAC,MAAuB;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,yDAAyD;IACjD,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,kGAAkG;gBAChG,0DAA0D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"livekit-token-service.js","sourceRoot":"","sources":["../src/livekit-token-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AA2DlE;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,QAAQ,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,mBAAmB;IAG9B;;;OAGG;IACH,YAAY,MAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAC3D,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAW,YAAY;QACrB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC;IAED,iFAAiF;IACjF,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,SAAS,CAAC,MAAuB;QAC5C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YACpE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YAC9B,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACpC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClH,CAAC;IAED;;;;;;;OAOG;IACI,eAAe,CAAC,QAAgB,EAAE,QAAgB,EAAE,WAAoB,EAAE,UAAmB;QAClG,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED;;;;;;;;;OASG;IACI,YAAY,CAAC,QAAgB,EAAE,QAAgB,EAAE,WAAoB,EAAE,UAAmC;QAC/G,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;IACjK,CAAC;IAED,sHAAsH;IAC9G,UAAU,CAAC,MAAuB;QACxC,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,+FAA+F;IACvF,aAAa,CAAC,MAAuB;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;OAGG;IACI,gBAAgB;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,kGAAkG;gBAChG,0DAA0D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/livekit-webhook.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @fileoverview {@link LiveKitWebhookParser}: verifies and reads LiveKit's server webhooks.
+ *
+ * LiveKit posts room and participant events (`room_started`, `participant_joined`, `participant_left`, …) to a URL
+ * configured on the project, signed with the project's API secret. For phone calls the event MJ acts on is a **SIP
+ * participant joining a room**: it is how MJ learns that a call arrived and which number was dialed. This parser checks
+ * the signature (a forged event must never make MJ start an agent) and reduces the SDK's protobuf event to a plain value.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { type LiveKitServerConfig } from './livekit-token-service.js';
+/** A LiveKit webhook event reduced to what MJ looks at. */
+export interface LiveKitRoomWebhookEvent {
+    /** The event name, e.g. `participant_joined`. */
+    Event: string;
+    RoomName: string;
+    ParticipantIdentity: string;
+    /** True when the participant is a phone (SIP) participant. */
+    IsSipParticipant: boolean;
+    /** The caller's number, for a SIP participant (`sip.phoneNumber`). */
+    CallerNumber?: string;
+    /** The number that was dialed, for a SIP participant (`sip.trunkPhoneNumber`). */
+    DialedNumber?: string;
+    /** LiveKit's call id, for a SIP participant. */
+    SipCallID?: string;
+}
+/** The part of the SDK receiver the parser uses (so tests inject a fake). */
+export interface WebhookReceiverLike {
+    receive(body: string, authHeader?: string): Promise<{
+        event: string;
+        room?: {
+            name: string;
+        };
+        participant?: {
+            identity: string;
+            kind: number;
+            attributes: {
+                [key: string]: string;
+            };
+        };
+    }>;
+}
+/** Verifies and parses LiveKit webhooks. */
+export declare class LiveKitWebhookParser {
+    private readonly receiver;
+    /**
+     * @param config Explicit credentials; omitted fields fall back to the `LIVEKIT_*` environment variables.
+     * @param receiver Injectable receiver (tests); defaults to the SDK's `WebhookReceiver`.
+     * @throws {Error} when no receiver is injected and the API key and secret are not configured.
+     */
+    constructor(config?: Partial<LiveKitServerConfig>, receiver?: WebhookReceiverLike);
+    /**
+     * Verifies the request's signature and returns the event.
+     *
+     * One event is also acted on here, because every LiveKit webhook MJ receives passes through this method: on a
+     * verified `room_finished` the room's {@link RoomAudioPlayer} playbacks (hold music) are stopped, so a bot never
+     * outlives its room. That cleanup runs in the background and never throws.
+     *
+     * @param body The raw request body (the signature covers the exact bytes, so do not re-serialise parsed JSON).
+     * @param authHeader The request's `Authorization` header.
+     * @throws {Error} when the signature is missing or does not verify.
+     */
+    Parse(body: string, authHeader?: string): Promise<LiveKitRoomWebhookEvent>;
+}
+//# sourceMappingURL=livekit-webhook.d.ts.map

package/dist/livekit-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"livekit-webhook.d.ts","sourceRoot":"","sources":["../src/livekit-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAIxF,2DAA2D;AAC3D,MAAM,WAAW,uBAAuB;IACtC,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,WAAW,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE;gBAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KACzF,CAAC,CAAC;CACJ;AAED,4CAA4C;AAC5C,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAE/C;;;;OAIG;gBACS,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,EAAE,mBAAmB;IAajF;;;;;;;;;;OAUG;IACU,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAmBxF"}

package/dist/livekit-webhook.js

@@ -0,0 +1,65 @@
+/**
+ * @fileoverview {@link LiveKitWebhookParser}: verifies and reads LiveKit's server webhooks.
+ *
+ * LiveKit posts room and participant events (`room_started`, `participant_joined`, `participant_left`, …) to a URL
+ * configured on the project, signed with the project's API secret. For phone calls the event MJ acts on is a **SIP
+ * participant joining a room**: it is how MJ learns that a call arrived and which number was dialed. This parser checks
+ * the signature (a forged event must never make MJ start an agent) and reduces the SDK's protobuf event to a plain value.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { WebhookReceiver } from 'livekit-server-sdk';
+import { LiveKitTokenService } from './livekit-token-service.js';
+import { LIVEKIT_PARTICIPANT_KIND_SIP, LIVEKIT_SIP_ATTRIBUTES } from './livekit-sip-service.js';
+import { RoomAudioPlayer } from './room-audio/room-audio-player.js';
+/** Verifies and parses LiveKit webhooks. */
+export class LiveKitWebhookParser {
+    /**
+     * @param config Explicit credentials; omitted fields fall back to the `LIVEKIT_*` environment variables.
+     * @param receiver Injectable receiver (tests); defaults to the SDK's `WebhookReceiver`.
+     * @throws {Error} when no receiver is injected and the API key and secret are not configured.
+     */
+    constructor(config, receiver) {
+        if (receiver) {
+            this.receiver = receiver;
+            return;
+        }
+        const apiKey = config?.ApiKey ?? process.env.LIVEKIT_API_KEY ?? '';
+        const apiSecret = config?.ApiSecret ?? process.env.LIVEKIT_API_SECRET ?? '';
+        if (!new LiveKitTokenService(config).IsConfigured) {
+            throw new Error('LiveKit webhooks cannot be verified: LIVEKIT_URL, LIVEKIT_API_KEY and LIVEKIT_API_SECRET are not all set.');
+        }
+        this.receiver = new WebhookReceiver(apiKey, apiSecret);
+    }
+    /**
+     * Verifies the request's signature and returns the event.
+     *
+     * One event is also acted on here, because every LiveKit webhook MJ receives passes through this method: on a
+     * verified `room_finished` the room's {@link RoomAudioPlayer} playbacks (hold music) are stopped, so a bot never
+     * outlives its room. That cleanup runs in the background and never throws.
+     *
+     * @param body The raw request body (the signature covers the exact bytes, so do not re-serialise parsed JSON).
+     * @param authHeader The request's `Authorization` header.
+     * @throws {Error} when the signature is missing or does not verify.
+     */
+    async Parse(body, authHeader) {
+        const event = await this.receiver.receive(body, authHeader);
+        const participant = event.participant;
+        const isSip = participant?.kind === LIVEKIT_PARTICIPANT_KIND_SIP;
+        const attributes = participant?.attributes ?? {};
+        const roomName = event.room?.name ?? '';
+        if (event.event === 'room_finished' && roomName) {
+            void RoomAudioPlayer.Instance.StopAllInRoom(roomName);
+        }
+        return {
+            Event: event.event,
+            RoomName: roomName,
+            ParticipantIdentity: participant?.identity ?? '',
+            IsSipParticipant: isSip,
+            CallerNumber: isSip ? attributes[LIVEKIT_SIP_ATTRIBUTES.CallerNumber] : undefined,
+            DialedNumber: isSip ? attributes[LIVEKIT_SIP_ATTRIBUTES.DialedNumber] : undefined,
+            SipCallID: isSip ? attributes[LIVEKIT_SIP_ATTRIBUTES.CallID] : undefined,
+        };
+    }
+}
+//# sourceMappingURL=livekit-webhook.js.map

package/dist/livekit-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"livekit-webhook.js","sourceRoot":"","sources":["../src/livekit-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AA2BjE,4CAA4C;AAC5C,MAAM,OAAO,oBAAoB;IAG/B;;;;OAIG;IACH,YAAY,MAAqC,EAAE,QAA8B;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,UAAmB;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACtC,MAAM,KAAK,GAAG,WAAW,EAAE,IAAI,KAAK,4BAA4B,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,EAAE,UAAU,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,IAAI,QAAQ,EAAE,CAAC;YAChD,KAAK,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,QAAQ;YAClB,mBAAmB,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE;YAChD,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;CACF"}

package/dist/meeting-dial-in-service.d.ts

@@ -0,0 +1,83 @@
+/**
+ * @fileoverview Server-side service for verifying and generating phone dial-in codes for meetings.
+ *
+ * Security architecture:
+ * - Dial-in codes are NOT verified through a public GraphQL mutation.
+ * - Verification is performed server-side by the LiveKit SIP inbound path upon receiving verified webhooks.
+ * - Dual rate-limiting:
+ *   1. Keyed on the caller's verified phone number (`CallerNumber`).
+ *   2. Keyed on the dialed trunk number (`DialedNumber`) to prevent distributed brute-forcing against a single line.
+ * - Code generation uses `crypto.randomInt` (cryptographically secure pseudo-random number generator), never `Math.random`.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { BaseSingleton } from '@memberjunction/global';
+import { type IMetadataProvider, type UserInfo } from '@memberjunction/core';
+/** Rate limiter with configurable attempt limits and lockout windows. */
+export declare class DialInRateLimiter {
+    private readonly maxAttempts;
+    private readonly windowMs;
+    private readonly lockoutMs;
+    private readonly attempts;
+    constructor(maxAttempts?: number, windowMs?: number, lockoutMs?: number);
+    CheckAllowed(key: string): {
+        allowed: boolean;
+        remainingMs?: number;
+    };
+    /** Above this many tracked keys, RecordFailure sweeps expired entries (keys are caller-supplied, so unbounded otherwise). */
+    private static readonly sweepThreshold;
+    /** Hard ceiling; if a sweep can't get below it (a flood of live entries), the oldest entries are dropped. */
+    private static readonly maxEntries;
+    /** Removes entries whose window and lockout have both elapsed. */
+    private sweepExpired;
+    /** Number of tracked keys (diagnostics/tests). */
+    get Size(): number;
+    RecordFailure(key: string): void;
+    RecordSuccess(key: string): void;
+    Clear(): void;
+}
+/** Input parameters for verifying a dial-in code. */
+export interface VerifyDialInCodeParams {
+    /** The verified caller number from the SIP carrier webhook. */
+    CallerNumber: string;
+    /** The dialed phone number or Phone Numbers row ID. */
+    DialedNumber: string;
+    /** The DTMF dial-in code entered by the caller. */
+    DialInCode: string;
+    /** Optional authenticated context user. */
+    ContextUser?: UserInfo;
+    /** Optional metadata provider. */
+    Provider?: IMetadataProvider;
+}
+/** Result of dial-in code verification. */
+export interface VerifyDialInCodeOutcome {
+    Success: boolean;
+    ErrorMessage?: string;
+    RoomName?: string;
+    MeetingID?: string;
+}
+/**
+ * Server-side singleton service for meeting dial-in verification and code generation.
+ */
+export declare class MeetingDialInService extends BaseSingleton<MeetingDialInService> {
+    private readonly callerLimiter;
+    private readonly dialedLimiter;
+    constructor();
+    static get Instance(): MeetingDialInService;
+    /**
+     * Generates a cryptographically secure 6-digit numeric dial-in code.
+     */
+    GenerateDialInCode(): string;
+    /**
+     * Generates a unique 6-digit dial-in code for a given phone number among active/scheduled meetings.
+     */
+    GenerateUniqueDialInCode(phoneNumberID: string, user: UserInfo, provider?: IMetadataProvider): Promise<string | undefined>;
+    /**
+     * Verifies a DTMF dial-in code against active/scheduled meetings on the dialed line.
+     * Rate limits on both the verified caller number and the dialed number.
+     */
+    VerifyDialInCode(params: VerifyDialInCodeParams): Promise<VerifyDialInCodeOutcome>;
+    /** Clears rate limiter entries (test harness). */
+    ClearRateLimitsForTesting(): void;
+}
+//# sourceMappingURL=meeting-dial-in-service.d.ts.map

package/dist/meeting-dial-in-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meeting-dial-in-service.d.ts","sourceRoot":"","sources":["../src/meeting-dial-in-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,aAAa,EAAmB,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAqB,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAUhG,yEAAyE;AACzE,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAL5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;gBAG3C,WAAW,GAAE,MAAU,EACvB,QAAQ,GAAE,MAAuB,EACjC,SAAS,GAAE,MAAuB;IAG9C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAoB5E,6HAA6H;IAC7H,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAQ;IAC9C,6GAA6G;IAC7G,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAS;IAE3C,kEAAkE;IAClE,OAAO,CAAC,YAAY;IAgBpB,kDAAkD;IAClD,IAAW,IAAI,IAAI,MAAM,CAExB;IAEM,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAgBhC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIhC,KAAK,IAAI,IAAI;CAGrB;AAED,qDAAqD;AACrD,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IAE3E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4D;IAE1F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6D;;IAM3F,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED;;OAEG;IACI,kBAAkB,IAAI,MAAM;IAInC;;OAEG;IACU,wBAAwB,CACnC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,QAAQ,EACd,QAAQ,CAAC,EAAE,iBAAiB,GAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAqB9B;;;OAGG;IACU,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA0E/F,kDAAkD;IAC3C,yBAAyB,IAAI,IAAI;CAIzC"}

package/dist/meeting-dial-in-service.js

@@ -0,0 +1,202 @@
+/**
+ * @fileoverview Server-side service for verifying and generating phone dial-in codes for meetings.
+ *
+ * Security architecture:
+ * - Dial-in codes are NOT verified through a public GraphQL mutation.
+ * - Verification is performed server-side by the LiveKit SIP inbound path upon receiving verified webhooks.
+ * - Dual rate-limiting:
+ *   1. Keyed on the caller's verified phone number (`CallerNumber`).
+ *   2. Keyed on the dialed trunk number (`DialedNumber`) to prevent distributed brute-forcing against a single line.
+ * - Code generation uses `crypto.randomInt` (cryptographically secure pseudo-random number generator), never `Math.random`.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { randomInt } from 'node:crypto';
+import { BaseSingleton, EscapeSQLString } from '@memberjunction/global';
+import { LogError, RunView } from '@memberjunction/core';
+/** Rate limiter with configurable attempt limits and lockout windows. */
+export class DialInRateLimiter {
+    constructor(maxAttempts = 5, windowMs = 15 * 60 * 1000, lockoutMs = 15 * 60 * 1000) {
+        this.maxAttempts = maxAttempts;
+        this.windowMs = windowMs;
+        this.lockoutMs = lockoutMs;
+        this.attempts = new Map();
+    }
+    CheckAllowed(key) {
+        const entry = this.attempts.get(key);
+        if (!entry) {
+            return { allowed: true };
+        }
+        const now = Date.now();
+        if (entry.lockedUntil && entry.lockedUntil > now) {
+            return { allowed: false, remainingMs: entry.lockedUntil - now };
+        }
+        if (now - entry.firstAttemptAt > this.windowMs) {
+            this.attempts.delete(key);
+            return { allowed: true };
+        }
+        if (entry.attempts >= this.maxAttempts) {
+            entry.lockedUntil = now + this.lockoutMs;
+            return { allowed: false, remainingMs: this.lockoutMs };
+        }
+        return { allowed: true };
+    }
+    /** Above this many tracked keys, RecordFailure sweeps expired entries (keys are caller-supplied, so unbounded otherwise). */
+    static { this.sweepThreshold = 1000; }
+    /** Hard ceiling; if a sweep can't get below it (a flood of live entries), the oldest entries are dropped. */
+    static { this.maxEntries = 10000; }
+    /** Removes entries whose window and lockout have both elapsed. */
+    sweepExpired(now) {
+        for (const [key, entry] of this.attempts) {
+            const lockExpired = !entry.lockedUntil || entry.lockedUntil <= now;
+            if (lockExpired && now - entry.firstAttemptAt > this.windowMs) {
+                this.attempts.delete(key);
+            }
+        }
+        // Map iterates in insertion order, so the first keys are the oldest. Leave room for the entry about to be inserted.
+        for (const key of this.attempts.keys()) {
+            if (this.attempts.size < DialInRateLimiter.maxEntries) {
+                break;
+            }
+            this.attempts.delete(key);
+        }
+    }
+    /** Number of tracked keys (diagnostics/tests). */
+    get Size() {
+        return this.attempts.size;
+    }
+    RecordFailure(key) {
+        const now = Date.now();
+        if (this.attempts.size >= DialInRateLimiter.sweepThreshold) {
+            this.sweepExpired(now);
+        }
+        const entry = this.attempts.get(key);
+        if (!entry || now - entry.firstAttemptAt > this.windowMs) {
+            this.attempts.set(key, { attempts: 1, firstAttemptAt: now });
+        }
+        else {
+            entry.attempts++;
+            if (entry.attempts >= this.maxAttempts) {
+                entry.lockedUntil = now + this.lockoutMs;
+            }
+        }
+    }
+    RecordSuccess(key) {
+        this.attempts.delete(key);
+    }
+    Clear() {
+        this.attempts.clear();
+    }
+}
+/**
+ * Server-side singleton service for meeting dial-in verification and code generation.
+ */
+export class MeetingDialInService extends BaseSingleton {
+    constructor() {
+        super();
+        // Caller-based limiter: 5 attempts per 15 minutes
+        this.callerLimiter = new DialInRateLimiter(5, 15 * 60 * 1000, 15 * 60 * 1000);
+        // Dialed-number limiter: 20 failed attempts per 15 minutes across all callers
+        this.dialedLimiter = new DialInRateLimiter(20, 15 * 60 * 1000, 15 * 60 * 1000);
+    }
+    static get Instance() {
+        return MeetingDialInService.getInstance();
+    }
+    /**
+     * Generates a cryptographically secure 6-digit numeric dial-in code.
+     */
+    GenerateDialInCode() {
+        return randomInt(100000, 1000000).toString();
+    }
+    /**
+     * Generates a unique 6-digit dial-in code for a given phone number among active/scheduled meetings.
+     */
+    async GenerateUniqueDialInCode(phoneNumberID, user, provider) {
+        const rv = provider ? RunView.FromMetadataProvider(provider) : new RunView();
+        const escapedPhoneID = EscapeSQLString(phoneNumberID);
+        for (let attempt = 0; attempt < 10; attempt++) {
+            const candidate = this.GenerateDialInCode();
+            const res = await rv.RunView({
+                EntityName: 'MJ: Meetings',
+                ExtraFilter: `DialInPhoneNumberID = '${escapedPhoneID}' AND DialInCode = '${candidate}' AND Status IN ('Live', 'Scheduled')`,
+                ResultType: 'entity_object',
+            }, user);
+            if (res.Success && (!res.Results || res.Results.length === 0)) {
+                return candidate;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Verifies a DTMF dial-in code against active/scheduled meetings on the dialed line.
+     * Rate limits on both the verified caller number and the dialed number.
+     */
+    async VerifyDialInCode(params) {
+        try {
+            const callerNumber = (params.CallerNumber ?? '').trim().toLowerCase();
+            const dialedNumber = (params.DialedNumber ?? '').trim();
+            const dialInCode = (params.DialInCode ?? '').trim();
+            if (!callerNumber) {
+                return { Success: false, ErrorMessage: 'Caller number is required.' };
+            }
+            if (!dialedNumber) {
+                return { Success: false, ErrorMessage: 'Dialed number is required.' };
+            }
+            if (!dialInCode) {
+                return { Success: false, ErrorMessage: 'Dial-in code is required.' };
+            }
+            // Check caller-based rate limit
+            const callerLimit = this.callerLimiter.CheckAllowed(callerNumber);
+            if (!callerLimit.allowed) {
+                const remainingSeconds = Math.ceil((callerLimit.remainingMs ?? 0) / 1000);
+                return {
+                    Success: false,
+                    ErrorMessage: `Too many invalid attempts from this caller. Please try again in ${remainingSeconds} seconds.`,
+                };
+            }
+            // Check dialed-number-based rate limit
+            const dialedKey = dialedNumber.toLowerCase();
+            const dialedLimit = this.dialedLimiter.CheckAllowed(dialedKey);
+            if (!dialedLimit.allowed) {
+                const remainingSeconds = Math.ceil((dialedLimit.remainingMs ?? 0) / 1000);
+                return {
+                    Success: false,
+                    ErrorMessage: `Too many invalid attempts on this line. Please try again in ${remainingSeconds} seconds.`,
+                };
+            }
+            const escapedDialed = EscapeSQLString(dialedNumber);
+            const escapedCode = EscapeSQLString(dialInCode);
+            const rv = params.Provider ? RunView.FromMetadataProvider(params.Provider) : new RunView();
+            const filter = `(DialInPhoneNumberID = '${escapedDialed}' OR DialInPhoneNumber = '${escapedDialed}') AND DialInCode = '${escapedCode}' AND Status IN ('Live', 'Scheduled')`;
+            const result = await rv.RunView({
+                EntityName: 'MJ: Meetings',
+                ExtraFilter: filter,
+                ResultType: 'entity_object',
+            }, params.ContextUser);
+            if (!result.Success || !result.Results || result.Results.length === 0) {
+                this.callerLimiter.RecordFailure(callerNumber);
+                this.dialedLimiter.RecordFailure(dialedKey);
+                return { Success: false, ErrorMessage: 'Invalid dial-in code.' };
+            }
+            this.callerLimiter.RecordSuccess(callerNumber);
+            this.dialedLimiter.RecordSuccess(dialedKey);
+            const meeting = result.Results[0];
+            return {
+                Success: true,
+                RoomName: meeting.RoomName,
+                MeetingID: meeting.ID,
+            };
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            LogError(`[MeetingDialInService] VerifyDialInCode exception: ${msg}`);
+            return { Success: false, ErrorMessage: msg };
+        }
+    }
+    /** Clears rate limiter entries (test harness). */
+    ClearRateLimitsForTesting() {
+        this.callerLimiter.Clear();
+        this.dialedLimiter.Clear();
+    }
+}
+//# sourceMappingURL=meeting-dial-in-service.js.map

package/dist/meeting-dial-in-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meeting-dial-in-service.js","sourceRoot":"","sources":["../src/meeting-dial-in-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAyC,MAAM,sBAAsB,CAAC;AAUhG,yEAAyE;AACzE,MAAM,OAAO,iBAAiB;IAG5B,YACmB,cAAsB,CAAC,EACvB,WAAmB,EAAE,GAAG,EAAE,GAAG,IAAI,EACjC,YAAoB,EAAE,GAAG,EAAE,GAAG,IAAI;QAFlC,gBAAW,GAAX,WAAW,CAAY;QACvB,aAAQ,GAAR,QAAQ,CAAyB;QACjC,cAAS,GAAT,SAAS,CAAyB;QALpC,aAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAM3D,CAAC;IAEG,YAAY,CAAC,GAAW;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,KAAK,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6HAA6H;aACrG,mBAAc,GAAG,IAAI,AAAP,CAAQ;IAC9C,6GAA6G;aACrF,eAAU,GAAG,KAAK,AAAR,CAAS;IAE3C,kEAAkE;IAC1D,YAAY,CAAC,GAAW;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC;YACnE,IAAI,WAAW,IAAI,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,oHAAoH;QACpH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC;gBACtD,MAAM;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEM,aAAa,CAAC,GAAW;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC;YAC3D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvC,KAAK,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,GAAW;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;;AAyBH;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAmC;IAM3E;QACE,KAAK,EAAE,CAAC;QANV,kDAAkD;QACjC,kBAAa,GAAG,IAAI,iBAAiB,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1F,8EAA8E;QAC7D,kBAAa,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAI3F,CAAC;IAEM,MAAM,KAAK,QAAQ;QACxB,OAAO,oBAAoB,CAAC,WAAW,EAAwB,CAAC;IAClE,CAAC;IAED;;OAEG;IACI,kBAAkB;QACvB,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CACnC,aAAqB,EACrB,IAAc,EACd,QAA4B;QAE5B,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC7E,MAAM,cAAc,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAEtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B;gBACE,UAAU,EAAE,cAAc;gBAC1B,WAAW,EAAE,0BAA0B,cAAc,uBAAuB,SAAS,uCAAuC;gBAC5H,UAAU,EAAE,eAAe;aAC5B,EACD,IAAI,CACL,CAAC;YACF,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC9D,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAA8B;QAC1D,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtE,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,4BAA4B,EAAE,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,4BAA4B,EAAE,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC;YACvE,CAAC;YAED,gCAAgC;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,YAAY,EAAE,mEAAmE,gBAAgB,WAAW;iBAC7G,CAAC;YACJ,CAAC;YAED,uCAAuC;YACvC,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,YAAY,EAAE,+DAA+D,gBAAgB,WAAW;iBACzG,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;YAEhD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC3F,MAAM,MAAM,GAAG,2BAA2B,aAAa,6BAA6B,aAAa,wBAAwB,WAAW,uCAAuC,CAAC;YAE5K,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B;gBACE,UAAU,EAAE,cAAc;gBAC1B,WAAW,EAAE,MAAM;gBACnB,UAAU,EAAE,eAAe;aAC5B,EACD,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAC/C,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAE5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,QAAQ,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,kDAAkD;IAC3C,yBAAyB;QAC9B,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/room-audio/audio-decoder.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview {@link DecodeAudio} — turns an audio file's bytes (WAV or MP3) into mono PCM16, the one shape the
+ * room audio player plays. WAV is parsed here (RIFF chunk walk, integer PCM 8/16/24/32-bit and IEEE float 32/64-bit,
+ * any channel count downmixed); MP3 is decoded by `mpg123-decoder`, a WebAssembly build of libmpg123 with no native
+ * build step. Anything else is refused with an error that names the format it saw.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+/** Decoded audio: mono 16-bit PCM and its sample rate. */
+export interface DecodedAudio {
+    /** Mono PCM16 samples. */
+    Pcm: Int16Array;
+    /** The rate of {@link Pcm}, in Hz. */
+    SampleRate: number;
+}
+/** What the caller knows about the bytes, used only when the bytes themselves do not say what they are. */
+export interface AudioFormatHint {
+    /** The MIME type (e.g. `audio/mpeg`, `audio/wav`). */
+    MimeType?: string;
+    /** The file name (its extension is read). */
+    FileName?: string;
+}
+/** The longest audio {@link DecodeAudio} accepts, in seconds (15 minutes). Hold music loops; a longer file is a mistake. */
+export declare const MAX_DECODED_AUDIO_SECONDS: number;
+/**
+ * Decodes WAV or MP3 bytes into mono PCM16. The format is read from the bytes' own signature first and from the hint
+ * only when the bytes carry none (a bare MP3 frame stream).
+ *
+ * @param bytes The file's bytes.
+ * @param hint The MIME type and/or file name, when known.
+ * @returns Mono PCM16 at the file's own sample rate.
+ * @throws {Error} when the format is not WAV or MP3, the file is malformed or empty, or it is longer than
+ *   {@link MAX_DECODED_AUDIO_SECONDS}.
+ */
+export declare function DecodeAudio(bytes: Uint8Array, hint?: AudioFormatHint): Promise<DecodedAudio>;
+/** Throws when `sampleCount` samples at `sampleRate` run longer than {@link MAX_DECODED_AUDIO_SECONDS}. */
+export declare function AssertAudioDurationWithinCap(sampleCount: number, sampleRate: number): void;
+/** Converts one [-1, 1] float sample to PCM16, clamping anything outside the range. */
+export declare function FloatToPcm16(sample: number): number;
+//# sourceMappingURL=audio-decoder.d.ts.map

package/dist/room-audio/audio-decoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio-decoder.d.ts","sourceRoot":"","sources":["../../src/room-audio/audio-decoder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,GAAG,EAAE,UAAU,CAAC;IAChB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2GAA2G;AAC3G,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4HAA4H;AAC5H,eAAO,MAAM,yBAAyB,QAAU,CAAC;AAoBjD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAQlG;AAED,2GAA2G;AAC3G,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAQ1F;AAqID,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGnD"}