@memberjunction/server 5.44.0 → 5.45.1

package/dist/telephony/TeamsMeetingsRouter.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview Express wiring for the Teams meetings ingress — the Microsoft Graph change-notification webhook.
+ *
+ * One public surface (Graph cannot present an MJ JWT — the subscription validation-token handshake + the
+ * per-notification `clientState` shared secret are the gate):
+ *   - `POST /meetings/teams/notifications` — the Graph change-notification endpoint. Handles BOTH:
+ *       1. The **subscription-validation handshake**: when Graph creates/renews a subscription it calls this
+ *          URL with `?validationToken=…` and expects the exact token echoed back as `text/plain` 200.
+ *       2. **Real call/participant notifications**: each carries a `clientState` verified (constant-time)
+ *          against the secret set on subscription creation, then mapped to the meetings service's roster /
+ *          call-ended drive helpers.
+ *
+ * Mirrors the Twilio telephony public-router pattern: mount the router BEFORE the unified auth middleware. The
+ * validation + notification parsing use the offline-complete, unit-tested helpers from the Teams provider
+ * package (`validateGraphNotification` / `parseCallNotification`); this module is thin HTTP plumbing over them
+ * and the {@link TeamsMeetingsService}.
+ *
+ * The ACS application-hosted-media socket(s) (the audio plane) are owned by the server's native ACS media
+ * adapter, which attaches transports to the shared {@link TeamsAcsMediaRegistry} — there is no media WSS here
+ * (unlike Twilio Media Streams), because ACS app-hosted media is negotiated out-of-band by that adapter.
+ *
+ * @module @memberjunction/server/telephony
+ */
+import { Router } from 'express';
+import type { TeamsMeetingsConfig } from '../config.js';
+import { TeamsAcsMediaRegistry } from './teamsAcsMediaRegistry.js';
+import { TeamsMeetingsService } from './TeamsMeetingsService.js';
+/** The mount path for the Teams meetings public router. */
+export declare const TEAMS_MEETINGS_MOUNT_PATH = "/meetings/teams";
+/**
+ * Builds the Teams meetings handler: the public Graph change-notification router + the shared ACS media
+ * registry + the meetings service (returned for observability/tests + so server boot can bind the service to
+ * the runtime holder and hand the registry to the native ACS media adapter).
+ */
+export declare function createTeamsMeetingsHandler(config: TeamsMeetingsConfig): {
+    publicRouter: Router;
+    registry: TeamsAcsMediaRegistry;
+    service: TeamsMeetingsService;
+};
+//# sourceMappingURL=TeamsMeetingsRouter.d.ts.map

package/dist/telephony/TeamsMeetingsRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TeamsMeetingsRouter.d.ts","sourceRoot":"","sources":["../../src/telephony/TeamsMeetingsRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAqC,MAAM,SAAS,CAAC;AAOpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAO3D;;;;GAIG;AACH,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,mBAAmB,GAC5B;IACC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAYA"}

package/dist/telephony/TeamsMeetingsRouter.js

@@ -0,0 +1,96 @@
+/**
+ * @fileoverview Express wiring for the Teams meetings ingress — the Microsoft Graph change-notification webhook.
+ *
+ * One public surface (Graph cannot present an MJ JWT — the subscription validation-token handshake + the
+ * per-notification `clientState` shared secret are the gate):
+ *   - `POST /meetings/teams/notifications` — the Graph change-notification endpoint. Handles BOTH:
+ *       1. The **subscription-validation handshake**: when Graph creates/renews a subscription it calls this
+ *          URL with `?validationToken=…` and expects the exact token echoed back as `text/plain` 200.
+ *       2. **Real call/participant notifications**: each carries a `clientState` verified (constant-time)
+ *          against the secret set on subscription creation, then mapped to the meetings service's roster /
+ *          call-ended drive helpers.
+ *
+ * Mirrors the Twilio telephony public-router pattern: mount the router BEFORE the unified auth middleware. The
+ * validation + notification parsing use the offline-complete, unit-tested helpers from the Teams provider
+ * package (`validateGraphNotification` / `parseCallNotification`); this module is thin HTTP plumbing over them
+ * and the {@link TeamsMeetingsService}.
+ *
+ * The ACS application-hosted-media socket(s) (the audio plane) are owned by the server's native ACS media
+ * adapter, which attaches transports to the shared {@link TeamsAcsMediaRegistry} — there is no media WSS here
+ * (unlike Twilio Media Streams), because ACS app-hosted media is negotiated out-of-band by that adapter.
+ *
+ * @module @memberjunction/server/telephony
+ */
+import { Router, json } from 'express';
+import { LogError, LogStatus } from '@memberjunction/core';
+import { validateGraphNotification, parseCallNotification, } from '@memberjunction/ai-bridge-teams';
+import { TeamsAcsMediaRegistry } from './teamsAcsMediaRegistry.js';
+import { TeamsMeetingsService } from './TeamsMeetingsService.js';
+/** The mount path for the Teams meetings public router. */
+export const TEAMS_MEETINGS_MOUNT_PATH = '/meetings/teams';
+/**
+ * Builds the Teams meetings handler: the public Graph change-notification router + the shared ACS media
+ * registry + the meetings service (returned for observability/tests + so server boot can bind the service to
+ * the runtime holder and hand the registry to the native ACS media adapter).
+ */
+export function createTeamsMeetingsHandler(config) {
+    const registry = new TeamsAcsMediaRegistry(config.acsSampleRate);
+    const service = new TeamsMeetingsService(config, registry);
+    const publicRouter = Router();
+    // Graph posts JSON; it also issues the validation handshake as a query-param GET-like POST. Parse JSON but
+    // tolerate an empty body on the handshake.
+    publicRouter.post('/notifications', json({ type: () => true }), (req, res) => {
+        handleGraphNotification(service, config, req, res);
+    });
+    return { publicRouter, registry, service };
+}
+/** Handles the Graph webhook: echo the validation token, else verify clientState + drive the service. */
+function handleGraphNotification(service, config, req, res) {
+    const validationToken = readValidationToken(req);
+    const batch = (req.body ?? {});
+    const notifications = Array.isArray(batch.value) ? batch.value : [];
+    const clientStates = notifications.map((n) => n.clientState);
+    const verdict = validateGraphNotification(validationToken, config.notificationClientState ?? '', clientStates);
+    if (verdict.Kind === 'validation') {
+        // The subscription-validation handshake: echo the token verbatim as text/plain 200.
+        res.status(200).type('text/plain').send(verdict.ValidationToken);
+        return;
+    }
+    if (verdict.Kind === 'reject') {
+        LogStatus(`[Meetings][Teams] notification rejected: ${verdict.Reason}`);
+        res.status(verdict.Reason === 'empty-validation-token' ? 400 : 403).type('text/plain').send('Rejected.');
+        return;
+    }
+    dispatchNotifications(service, notifications);
+    // Graph requires a fast 202 to acknowledge receipt; processing is fire-and-forget.
+    res.status(202).end();
+}
+/** Maps each Graph call/participant notification to the meetings service's roster / call-ended drive helpers. */
+function dispatchNotifications(service, notifications) {
+    for (const notification of notifications) {
+        try {
+            const normalized = parseCallNotification(notification);
+            if (normalized.state === 'terminated') {
+                service.DriveCallEnded(normalized.callId);
+            }
+            else if (normalized.participants.length > 0) {
+                service.DriveParticipantsUpdated(normalized.callId, normalized.participants);
+            }
+        }
+        catch (e) {
+            LogError(`[Meetings][Teams] failed to process notification: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+}
+/** Reads the `?validationToken=…` query param (Graph URL-encodes it), when present. */
+function readValidationToken(req) {
+    const raw = req.query?.validationToken;
+    if (typeof raw === 'string') {
+        return raw;
+    }
+    if (Array.isArray(raw) && typeof raw[0] === 'string') {
+        return raw[0];
+    }
+    return undefined;
+}
+//# sourceMappingURL=TeamsMeetingsRouter.js.map

package/dist/telephony/TeamsMeetingsRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TeamsMeetingsRouter.js","sourceRoot":"","sources":["../../src/telephony/TeamsMeetingsRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,IAAI,EAA+B,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACH,yBAAyB,EACzB,qBAAqB,GAExB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAO3D;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACtC,MAA2B;IAM3B,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;IAE9B,2GAA2G;IAC3G,2CAA2C;IAC3C,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5F,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,yGAAyG;AACzG,SAAS,uBAAuB,CAC5B,OAA6B,EAC7B,MAA2B,EAC3B,GAAY,EACZ,GAAa;IAEb,MAAM,eAAe,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2B,CAAC;IACzD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,yBAAyB,CAAC,eAAe,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/G,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,oFAAoF;QACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjE,OAAO;IACX,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,SAAS,CAAC,4CAA4C,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzG,OAAO;IACX,CAAC;IAED,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9C,mFAAmF;IACnF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,iHAAiH;AACjH,SAAS,qBAAqB,CAAC,OAA6B,EAAE,aAAwC;IAClG,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACpC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;YACjF,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,QAAQ,CAAC,qDAAqD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;IACL,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,mBAAmB,CAAC,GAAY;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/telephony/TeamsMeetingsService.d.ts

@@ -0,0 +1,113 @@
+/**
+ * @fileoverview Orchestrates Teams meeting bridge sessions (join-by-URL) for MJAPI.
+ *
+ * This is the composition layer between the Teams meetings ingress (the public Graph change-notification
+ * webhook + the server-owned ACS media plane) and the ONE unified realtime-agent pathway. It does NOT
+ * re-implement any bridge logic: it resolves the Teams provider + the agent identity, opens a server-side
+ * realtime session via the agent layer's `CreateBridgeRealtimeSession` factory, binds the REAL Teams binding
+ * (`RealTeamsBindings` over the Graph control plane + the per-call ACS media registry) onto the driver, and
+ * hands everything to `AIBridgeEngine.StartBridgeSession` — exactly the seam the Twilio telephony service +
+ * the LiveKit room coordinator use.
+ *
+ * Collaborators are injected (engine, session factory, session manager) so the resolution/branching logic is
+ * unit-testable with fakes; the actual Graph call placement + ACS media flow are live-only (real Teams/Azure
+ * credentials + a publicly reachable Graph webhook URL — see meeting-vendor-bindings-teams-slack.md M1).
+ *
+ * @module @memberjunction/server/telephony
+ */
+import { UserInfo, IMetadataProvider } from '@memberjunction/core';
+import { AIBridgeEngine, type StartBridgeSessionParams } from '@memberjunction/ai-bridge-server';
+import { CreateBridgeRealtimeSession } from '@memberjunction/ai-agents';
+import { type BridgeNativeSdkBinding } from '@memberjunction/ai-bridge-base';
+import { RealGraphCallsClient } from '@memberjunction/ai-bridge-teams';
+import type { TeamsMeetingsConfig } from '../config.js';
+import { SessionManager } from '../agentSessions/SessionManager.js';
+import { TeamsAcsMediaRegistry } from './teamsAcsMediaRegistry.js';
+/** Result of starting a Teams meeting bridge session. */
+export interface JoinMeetingResult {
+    /** Whether a bridge session was started for the meeting. */
+    accepted: boolean;
+    /** The Graph call id the bot joined (the bridge's external connection id), when accepted. */
+    callId?: string;
+    /** Why it was rejected (no agent identity, provider missing, unparseable join URL, etc.). */
+    reason?: string;
+}
+/** Injectable collaborators (production defaults wired in the constructor; fakes in tests). */
+export interface TeamsMeetingsServiceDeps {
+    engine?: Pick<AIBridgeEngine, 'ProviderByName' | 'ProviderByDriverClass' | 'StartBridgeSession' | 'Config'>;
+    sessionFactory?: typeof CreateBridgeRealtimeSession;
+    sessionManager?: Pick<SessionManager, 'CreateSession'>;
+    /** Constructs the Graph control-plane client for a session (default: the real lazy-SDK client). */
+    graphClientFactory?: (accessToken: string, tenantId?: string) => RealGraphCallsClient;
+}
+/**
+ * Starts Teams meeting bridge sessions. One instance per server, constructed alongside the meetings router and
+ * sharing the {@link TeamsAcsMediaRegistry} with the server's ACS media adapter.
+ */
+export declare class TeamsMeetingsService {
+    private readonly config;
+    private readonly registry;
+    private readonly engine;
+    private readonly sessionFactory;
+    private readonly sessionManager;
+    private readonly graphClientFactory;
+    /** Live Graph clients keyed by call id, so the webhook ingress can drive their roster/ended handlers. */
+    private readonly graphClientsByCall;
+    constructor(config: TeamsMeetingsConfig, registry: TeamsAcsMediaRegistry, deps?: TeamsMeetingsServiceDeps);
+    /**
+     * Joins a Teams meeting by URL for a given agent identity and starts the bridge session. The bound
+     * `RealTeamsBindings` issues the Graph `POST /communications/calls` and accepts the ACS media transport
+     * (attached by the server's media adapter) for the joined call. Returns `{ accepted:false }` (never
+     * throws) when the agent identity is missing/inactive, so the caller can answer cleanly.
+     *
+     * @param agentIdentityId The agent identity to join as (its Teams account/email is the bot's identity).
+     * @param joinUrl The Teams meeting join URL.
+     * @param contextUser The request-scoped principal.
+     * @param provider The request-scoped metadata provider (multi-provider safe — never the global Metadata).
+     */
+    JoinMeetingByUrl(agentIdentityId: string, joinUrl: string, contextUser: UserInfo, provider: IMetadataProvider): Promise<JoinMeetingResult>;
+    /**
+     * Drives the retained Graph roster handler for a call from a Graph change notification (called by the
+     * webhook ingress — Graph delivers roster changes over the webhook, not a client subscription).
+     */
+    DriveParticipantsUpdated(callId: string, participants: {
+        id: string;
+        displayName?: string;
+        role?: string;
+    }[]): void;
+    /** Drives the call-ended handler for a call from a Graph change notification, then tears the call down. */
+    DriveCallEnded(callId: string): void;
+    /**
+     * Builds the {@link StartBridgeSessionParams} for a SCHEDULED Teams join — a bridge the
+     * {@link ScheduledBridgeRunner} owns (it created the `MJ: AI Agent Sessions` row and owns the
+     * `StartBridgeSession` call). Reuses the same provider resolution, realtime-session factory, Graph
+     * client, and bind-sdk as an on-demand join, so a scheduled Teams join is identical to a live one
+     * for audio (the ACS media registry is wired via {@link buildBindSdk}).
+     *
+     * NOTE: an on-demand join also registers the live Graph client by call id for webhook-driven
+     * roster/ended routing; the runner abstracts the post-start call id away, so for a SCHEDULED join
+     * that notification routing is a documented follow-on. Audio is fully wired here.
+     */
+    BuildScheduledStartParams(args: {
+        agentID: string;
+        joinUrl: string;
+        agentSessionID: string;
+        contextUser: UserInfo;
+        provider: IMetadataProvider;
+    }): Promise<StartBridgeSessionParams>;
+    /** Resolves provider, opens the realtime session, binds the real Teams SDK, and starts the bridge. */
+    private startBridge;
+    /** Resolves the seeded Teams provider row (by driver class, falling back to display name). */
+    private resolveProvider;
+    /**
+     * Builds the per-session SDK binding that wires the REAL Teams binding (`RealTeamsBindings` over the Graph
+     * control plane + the per-call ACS media registry) onto the Teams driver — overriding the package's default
+     * native loader. This is where the offline-complete seams meet the live Graph + ACS plumbing.
+     */
+    buildBindSdk(graphClient: RealGraphCallsClient): BridgeNativeSdkBinding;
+    /** Assembles the per-session bridge configuration (carries the resolved tenant for diagnostics). */
+    private buildSessionConfiguration;
+    /** Loads a specific agent identity by id (used by join-by-URL), requiring it be active. */
+    private loadAgentIdentity;
+}
+//# sourceMappingURL=TeamsMeetingsService.d.ts.map

package/dist/telephony/TeamsMeetingsService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TeamsMeetingsService.d.ts","sourceRoot":"","sources":["../../src/telephony/TeamsMeetingsService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAW,QAAQ,EAAE,iBAAiB,EAAY,MAAM,sBAAsB,CAAC;AAEtF,OAAO,EAAE,cAAc,EAAE,KAAK,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAqB,oBAAoB,EAAwC,MAAM,iCAAiC,CAAC;AAChI,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAKnE,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAC9B,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+FAA+F;AAC/F,MAAM,WAAW,wBAAwB;IACrC,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,GAAG,uBAAuB,GAAG,oBAAoB,GAAG,QAAQ,CAAC,CAAC;IAC5G,cAAc,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACpD,cAAc,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACvD,mGAAmG;IACnG,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,oBAAoB,CAAC;CACzF;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IASzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAT7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqG;IAC5H,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwC;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAmE;IACtG,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2C;gBAGzD,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,qBAAqB,EAChD,IAAI,GAAE,wBAA6B;IASvC;;;;;;;;;;OAUG;IACU,gBAAgB,CACzB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,iBAAiB,CAAC;IAc7B;;;OAGG;IACI,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IAI1H,2GAA2G;IACpG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAM3C;;;;;;;;;;OAUG;IACU,yBAAyB,CAAC,IAAI,EAAE;QACzC,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,QAAQ,CAAC;QACtB,QAAQ,EAAE,iBAAiB,CAAC;KAC/B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA6BrC,sGAAsG;YACxF,WAAW;IAgDzB,8FAA8F;IAC9F,OAAO,CAAC,eAAe;IAQvB;;;;OAIG;IACI,YAAY,CAAC,WAAW,EAAE,oBAAoB,GAAG,sBAAsB;IAgB9E,oGAAoG;IACpG,OAAO,CAAC,yBAAyB;IAQjC,2FAA2F;YAC7E,iBAAiB;CAalC"}

package/dist/telephony/TeamsMeetingsService.js

@@ -0,0 +1,196 @@
+/**
+ * @fileoverview Orchestrates Teams meeting bridge sessions (join-by-URL) for MJAPI.
+ *
+ * This is the composition layer between the Teams meetings ingress (the public Graph change-notification
+ * webhook + the server-owned ACS media plane) and the ONE unified realtime-agent pathway. It does NOT
+ * re-implement any bridge logic: it resolves the Teams provider + the agent identity, opens a server-side
+ * realtime session via the agent layer's `CreateBridgeRealtimeSession` factory, binds the REAL Teams binding
+ * (`RealTeamsBindings` over the Graph control plane + the per-call ACS media registry) onto the driver, and
+ * hands everything to `AIBridgeEngine.StartBridgeSession` — exactly the seam the Twilio telephony service +
+ * the LiveKit room coordinator use.
+ *
+ * Collaborators are injected (engine, session factory, session manager) so the resolution/branching logic is
+ * unit-testable with fakes; the actual Graph call placement + ACS media flow are live-only (real Teams/Azure
+ * credentials + a publicly reachable Graph webhook URL — see meeting-vendor-bindings-teams-slack.md M1).
+ *
+ * @module @memberjunction/server/telephony
+ */
+import { LogError } from '@memberjunction/core';
+import { AIBridgeEngine } from '@memberjunction/ai-bridge-server';
+import { CreateBridgeRealtimeSession } from '@memberjunction/ai-agents';
+import { RealTeamsBindings, RealGraphCallsClient, PumpBackedAcsMedia } from '@memberjunction/ai-bridge-teams';
+import { SessionManager } from '../agentSessions/SessionManager.js';
+const TEAMS_PROVIDER_DRIVER = 'TeamsBridge';
+const AGENT_IDENTITY_ENTITY = 'MJ: AI Bridge Agent Identities';
+/**
+ * Starts Teams meeting bridge sessions. One instance per server, constructed alongside the meetings router and
+ * sharing the {@link TeamsAcsMediaRegistry} with the server's ACS media adapter.
+ */
+export class TeamsMeetingsService {
+    constructor(config, registry, deps = {}) {
+        this.config = config;
+        this.registry = registry;
+        /** Live Graph clients keyed by call id, so the webhook ingress can drive their roster/ended handlers. */
+        this.graphClientsByCall = new Map();
+        this.engine = deps.engine ?? AIBridgeEngine.Instance;
+        this.sessionFactory = deps.sessionFactory ?? CreateBridgeRealtimeSession;
+        this.sessionManager = deps.sessionManager ?? new SessionManager();
+        this.graphClientFactory =
+            deps.graphClientFactory ?? ((accessToken, tenantId) => new RealGraphCallsClient({ AccessToken: accessToken, TenantId: tenantId }));
+    }
+    /**
+     * Joins a Teams meeting by URL for a given agent identity and starts the bridge session. The bound
+     * `RealTeamsBindings` issues the Graph `POST /communications/calls` and accepts the ACS media transport
+     * (attached by the server's media adapter) for the joined call. Returns `{ accepted:false }` (never
+     * throws) when the agent identity is missing/inactive, so the caller can answer cleanly.
+     *
+     * @param agentIdentityId The agent identity to join as (its Teams account/email is the bot's identity).
+     * @param joinUrl The Teams meeting join URL.
+     * @param contextUser The request-scoped principal.
+     * @param provider The request-scoped metadata provider (multi-provider safe — never the global Metadata).
+     */
+    async JoinMeetingByUrl(agentIdentityId, joinUrl, contextUser, provider) {
+        try {
+            const identity = await this.loadAgentIdentity(agentIdentityId, contextUser, provider);
+            if (!identity) {
+                return { accepted: false, reason: `Agent identity '${agentIdentityId}' not found or inactive.` };
+            }
+            const session = await this.startBridge({ agentID: identity.AgentID, joinUrl, contextUser, provider });
+            return { accepted: true, callId: session.CallId };
+        }
+        catch (e) {
+            LogError(`[Meetings][Teams] join meeting failed: ${e instanceof Error ? e.message : String(e)}`);
+            return { accepted: false, reason: e instanceof Error ? e.message : 'Internal error starting the agent.' };
+        }
+    }
+    /**
+     * Drives the retained Graph roster handler for a call from a Graph change notification (called by the
+     * webhook ingress — Graph delivers roster changes over the webhook, not a client subscription).
+     */
+    DriveParticipantsUpdated(callId, participants) {
+        this.graphClientsByCall.get(callId)?.DriveParticipantsUpdated(callId, participants);
+    }
+    /** Drives the call-ended handler for a call from a Graph change notification, then tears the call down. */
+    DriveCallEnded(callId) {
+        this.graphClientsByCall.get(callId)?.DriveCallEnded(callId);
+        this.graphClientsByCall.delete(callId);
+        this.registry.EndCall(callId);
+    }
+    /**
+     * Builds the {@link StartBridgeSessionParams} for a SCHEDULED Teams join — a bridge the
+     * {@link ScheduledBridgeRunner} owns (it created the `MJ: AI Agent Sessions` row and owns the
+     * `StartBridgeSession` call). Reuses the same provider resolution, realtime-session factory, Graph
+     * client, and bind-sdk as an on-demand join, so a scheduled Teams join is identical to a live one
+     * for audio (the ACS media registry is wired via {@link buildBindSdk}).
+     *
+     * NOTE: an on-demand join also registers the live Graph client by call id for webhook-driven
+     * roster/ended routing; the runner abstracts the post-start call id away, so for a SCHEDULED join
+     * that notification routing is a documented follow-on. Audio is fully wired here.
+     */
+    async BuildScheduledStartParams(args) {
+        await this.engine.Config(false, args.contextUser, args.provider);
+        const teamsProvider = this.resolveProvider();
+        const realtimeSession = await this.sessionFactory({
+            AgentID: args.agentID,
+            TargetAgentID: args.agentID,
+            ContextUser: args.contextUser,
+            MetadataProvider: args.provider,
+            AgentSessionID: args.agentSessionID,
+            RoomName: args.joinUrl,
+        });
+        const graphClient = this.graphClientFactory(this.config.botAccessToken ?? '', this.config.tenantId);
+        return {
+            AgentSessionID: args.agentSessionID,
+            AgentID: args.agentID,
+            TargetAgentID: args.agentID,
+            Provider: teamsProvider,
+            RealtimeSession: realtimeSession,
+            Address: args.joinUrl,
+            Direction: 'Outbound',
+            Configuration: this.buildSessionConfiguration(),
+            BindSdk: this.buildBindSdk(graphClient),
+            ContextUser: args.contextUser,
+            MetadataProvider: args.provider,
+        };
+    }
+    // ── internals ────────────────────────────────────────────────────────────────
+    /** Resolves provider, opens the realtime session, binds the real Teams SDK, and starts the bridge. */
+    async startBridge(args) {
+        await this.engine.Config(false, args.contextUser, args.provider);
+        const teamsProvider = this.resolveProvider();
+        const agentSession = await this.sessionManager.CreateSession({ agentID: args.agentID, userID: args.contextUser.ID }, args.contextUser, args.provider);
+        const realtimeSession = await this.sessionFactory({
+            AgentID: args.agentID,
+            TargetAgentID: args.agentID,
+            ContextUser: args.contextUser,
+            MetadataProvider: args.provider,
+            AgentSessionID: agentSession.ID,
+            RoomName: args.joinUrl,
+        });
+        // The Graph client is created per session; its retained webhook handlers are driven by the ingress.
+        const graphClient = this.graphClientFactory(this.config.botAccessToken ?? '', this.config.tenantId);
+        const active = await this.engine.StartBridgeSession({
+            AgentSessionID: agentSession.ID,
+            AgentID: args.agentID,
+            TargetAgentID: args.agentID,
+            Provider: teamsProvider,
+            RealtimeSession: realtimeSession,
+            Address: args.joinUrl,
+            Direction: 'Outbound',
+            Configuration: this.buildSessionConfiguration(),
+            BindSdk: this.buildBindSdk(graphClient),
+            ContextUser: args.contextUser,
+            MetadataProvider: args.provider,
+        });
+        const callId = active.RoomKey;
+        if (callId) {
+            this.registry.RegisterCall(callId);
+            this.graphClientsByCall.set(callId, graphClient);
+        }
+        return { CallId: callId };
+    }
+    /** Resolves the seeded Teams provider row (by driver class, falling back to display name). */
+    resolveProvider() {
+        const provider = this.engine.ProviderByDriverClass(TEAMS_PROVIDER_DRIVER) ?? this.engine.ProviderByName('Microsoft Teams');
+        if (!provider) {
+            throw new Error(`No active 'MJ: AI Bridge Providers' row for the Teams bridge (DriverClass '${TEAMS_PROVIDER_DRIVER}').`);
+        }
+        return provider;
+    }
+    /**
+     * Builds the per-session SDK binding that wires the REAL Teams binding (`RealTeamsBindings` over the Graph
+     * control plane + the per-call ACS media registry) onto the Teams driver — overriding the package's default
+     * native loader. This is where the offline-complete seams meet the live Graph + ACS plumbing.
+     */
+    buildBindSdk(graphClient) {
+        return (driver) => {
+            const teams = driver;
+            // RealTeamsBindings threads the Graph call id through every media call, so PumpBackedAcsMedia
+            // routes onto the shared registry keyed by that id — no call id needed at construction.
+            teams.SetSdkFactory(() => new RealTeamsBindings({
+                Graph: graphClient,
+                Media: new PumpBackedAcsMedia(this.registry),
+                ModelSampleRate: this.config.modelSampleRate,
+            }));
+        };
+    }
+    /** Assembles the per-session bridge configuration (carries the resolved tenant for diagnostics). */
+    buildSessionConfiguration() {
+        const config = {};
+        if (this.config.tenantId) {
+            config.TenantId = this.config.tenantId;
+        }
+        return config;
+    }
+    /** Loads a specific agent identity by id (used by join-by-URL), requiring it be active. */
+    async loadAgentIdentity(agentIdentityId, contextUser, provider) {
+        // Use the request-scoped provider (multi-provider safe), not the global Metadata.
+        const entity = await provider.GetEntityObject(AGENT_IDENTITY_ENTITY, contextUser);
+        const loaded = await entity.Load(agentIdentityId);
+        if (!loaded || !entity.IsActive) {
+            return null;
+        }
+        return entity;
+    }
+}
+//# sourceMappingURL=TeamsMeetingsService.js.map

package/dist/telephony/TeamsMeetingsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TeamsMeetingsService.js","sourceRoot":"","sources":["../../src/telephony/TeamsMeetingsService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAwC,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEtF,OAAO,EAAE,cAAc,EAAiC,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,kBAAkB,EAAoB,MAAM,iCAAiC,CAAC;AAEhI,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGpE,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAqB/D;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAQ7B,YACqB,MAA2B,EAC3B,QAA+B,EAChD,OAAiC,EAAE;QAFlB,WAAM,GAAN,MAAM,CAAqB;QAC3B,aAAQ,GAAR,QAAQ,CAAuB;QALpD,yGAAyG;QACxF,uBAAkB,GAAG,IAAI,GAAG,EAAgC,CAAC;QAO1E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;QACzE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,cAAc,EAAE,CAAC;QAClE,IAAI,CAAC,kBAAkB;YACnB,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC3I,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,gBAAgB,CACzB,eAAuB,EACvB,OAAe,EACf,WAAqB,EACrB,QAA2B;QAE3B,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,eAAe,0BAA0B,EAAE,CAAC;YACrG,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,QAAQ,CAAC,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC,EAAE,CAAC;QAC9G,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,wBAAwB,CAAC,MAAc,EAAE,YAAmE;QAC/G,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACxF,CAAC;IAED,2GAA2G;IACpG,cAAc,CAAC,MAAc;QAChC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,yBAAyB,CAAC,IAMtC;QACG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,OAAO;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpG,OAAO;YACH,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,OAAO;YAC3B,QAAQ,EAAE,aAAa;YACvB,eAAe,EAAE,eAAe;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,UAAU;YACrB,aAAa,EAAE,IAAI,CAAC,yBAAyB,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACvC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;SAClC,CAAC;IACN,CAAC;IAED,gFAAgF;IAEhF,sGAAsG;IAC9F,KAAK,CAAC,WAAW,CAAC,IAKzB;QACG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACxD,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EACtD,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,CAChB,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,OAAO;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;YAC/B,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,QAAQ,EAAE,IAAI,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,oGAAoG;QACpG,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAChD,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,OAAO;YAC3B,QAAQ,EAAE,aAAa;YACvB,eAAe,EAAE,eAAe;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,UAAU;YACrB,aAAa,EAAE,IAAI,CAAC,yBAAyB,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACvC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;SAClC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,8FAA8F;IACtF,eAAe;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC3H,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8EAA8E,qBAAqB,KAAK,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACI,YAAY,CAAC,WAAiC;QACjD,OAAO,CAAC,MAA0B,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,MAAqB,CAAC;YACpC,8FAA8F;YAC9F,wFAAwF;YACxF,KAAK,CAAC,aAAa,CACf,GAAG,EAAE,CACD,IAAI,iBAAiB,CAAC;gBAClB,KAAK,EAAE,WAAW;gBAClB,KAAK,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC5C,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;aAC/C,CAAC,CACT,CAAC;QACN,CAAC,CAAC;IACN,CAAC;IAED,oGAAoG;IAC5F,yBAAyB;QAC7B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,iBAAiB,CAC3B,eAAuB,EACvB,WAAqB,EACrB,QAA2B;QAE3B,kFAAkF;QAClF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAgC,qBAAqB,EAAE,WAAW,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/telephony/TwilioTelephonyRouter.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @fileoverview Express + WSS wiring for the Twilio telephony ingress.
+ *
+ * Two public surfaces (carriers cannot present an MJ JWT — the X-Twilio-Signature HMAC is the gate):
+ *   - `POST /telephony/twilio/voice`  — inbound voice webhook. Verifies the signature, resolves the
+ *     dialed DID to a pinned agent, starts an inbound bridge session, and answers with the
+ *     `<Connect><Stream>` TwiML that opens the Media-Streams socket.
+ *   - `WSS /telephony/twilio/media`   — the bidirectional Media-Streams socket. Frames are routed to the
+ *     active call's `RealTwilioBindings` via the shared {@link TwilioCallMediaRegistry}.
+ *
+ * Mirrors the magic-link / widget public-router pattern: mount the router BEFORE the unified auth
+ * middleware and attach the WSS to the shared HTTP server at startup. The signature-verification gate +
+ * inbound resolution use the offline-complete, unit-tested helpers from the Twilio provider package; this
+ * module is thin HTTP/WS plumbing over them and the {@link TwilioTelephonyService}.
+ *
+ * @module @memberjunction/server/telephony
+ */
+import { Router } from 'express';
+import type { TwilioTelephonyConfig } from '../config.js';
+import { TwilioCallMediaRegistry } from './twilioMediaRegistry.js';
+import { TwilioTelephonyService } from './TwilioTelephonyService.js';
+/** The mount path for the Twilio telephony public router. */
+export declare const TWILIO_TELEPHONY_MOUNT_PATH = "/telephony/twilio";
+/** The Media-Streams websocket path Twilio's `<Connect><Stream>` connects to. */
+export declare const TWILIO_MEDIA_WSS_PATH = "/telephony/twilio/media";
+/**
+ * Builds the Twilio telephony handler: the public webhook router + a function to attach the
+ * Media-Streams WSS to the shared HTTP server. Returns the registry + service for observability/tests.
+ */
+export declare function createTwilioTelephonyHandler(publicUrl: string, config: TwilioTelephonyConfig): {
+    publicRouter: Router;
+    attachMediaStreamServer: () => void;
+    registry: TwilioCallMediaRegistry;
+    service: TwilioTelephonyService;
+};
+//# sourceMappingURL=TwilioTelephonyRouter.d.ts.map

package/dist/telephony/TwilioTelephonyRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TwilioTelephonyRouter.d.ts","sourceRoot":"","sources":["../../src/telephony/TwilioTelephonyRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAA2C,MAAM,SAAS,CAAC;AAW1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,6DAA6D;AAC7D,eAAO,MAAM,2BAA2B,sBAAsB,CAAC;AAE/D,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAY/D;;;GAGG;AACH,wBAAgB,4BAA4B,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,qBAAqB,GAC9B;IACC,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,MAAM,IAAI,CAAC;IACpC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,sBAAsB,CAAC;CACnC,CAgBA"}