@rapidmx/meet-plugin 0.14.1 → 0.16.0

package/dist/lib/util/SignalingHub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignalingHub.js","sourceRoot":"","sources":["../../../src/util/SignalingHub.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAyD,MAAM,eAAe,CAAC;AAE3H,sGAAsG;AACtG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,2BAA2B,GAAW,EAAE,GAAG,IAAI,CAAC;AAE7D;yHACyH;AACzH,MAAM,CAAC,MAAM,6BAA6B,GAAW,EAAE,GAAG,IAAI,CAAC;AAE/D,4FAA4F;AAC5F,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,oHAAoH;AACpH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;iGACiG;AACjG,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAErD,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,qDAAqD;AACrD,MAAM,CAAC,MAAM,+BAA+B,GAAW,GAAG,GAAG,IAAI,CAAC;AAElE,qHAAqH;AACrH,MAAM,CAAC,MAAM,qBAAqB,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7D,0GAA0G;AAC1G,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAM,CAAC;AAErD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAK,CAAC;AAEpD,oGAAoG;AACpG,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAM,CAAC;AAEjD,uHAAuH;AACvH,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE,oHAAoH;AACpH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC3C,OAAO,UAAU,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,sHAAsH;AACtH,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAKxC,2FAA2F;AAC3F,MAAM,MAAM;IAKR,YAAY,GAAW;QAJf,aAAQ,GAAW,wBAAwB,CAAC;QAC5C,UAAK,GAAW,qBAAqB,CAAC;QAI1C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IACpB,CAAC;IAED,0FAA0F;IACnF,IAAI,CAAC,IAAY,EAAE,GAAW;QACjC,MAAM,OAAO,GAAW,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,GAAG,kCAAkC,CAAC,CAAC;QACjH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,GAAG,OAAO,GAAG,+BAA+B,CAAC,CAAC;QACrG,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA4BD,MAAM,UAAU;IAQZ,YACqB,GAAkB,EAClB,KAAqB,EACtB,IAAU,EACV,GAAW,EACV,MAAmB;QAJnB,QAAG,GAAH,GAAG,CAAe;QAClB,UAAK,GAAL,KAAK,CAAgB;QACtB,SAAI,GAAJ,IAAI,CAAM;QACV,QAAG,GAAH,GAAG,CAAQ;QACV,WAAM,GAAN,MAAM,CAAa;QAXhC,WAAM,GAAG,KAAK,CAAC;QAEN,WAAM,GAAW,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjD,mBAAc,GAAG,CAAC,CAAC;QASvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC7F,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEM,OAAO,CAAC,IAAyB,EAAE,QAAiB;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAW,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAEM,KAAK;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,+EAA+E;IACxE,KAAK,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,iHAAiH;IAC1G,IAAI,CAAC,IAAY;QACpB,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,IAAY;QACrB,yFAAyF;QACzF,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAChC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/B,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAChC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAY;QACtB,IAAI,OAAO,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACnC,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAY,OAAO,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,sGAAsG;QACtG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,0BAA0B,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;IAEO,MAAM,CAAC,IAAa,EAAE,IAAY;QACtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,GAAG,8BAA8B,EAAE,CAAC;gBACnG,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;YAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,GAAG,8BAA8B,EAAE,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACjC,CAAC;YACD,OAAO;QACX,CAAC;QACD,0GAA0G;QAC1G,MAAM,OAAO,GAA4B,EAAE,GAAI,IAAgC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACnH,MAAM,EAAE,GAAY,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;QAC/C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC5B,OAAO;YACX,CAAC;YACD,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC;CACJ;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,YAAY;IAQrB,YAAY,UAA+B,EAAE;QAP7B,UAAK,GAAmB,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAG7E,UAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;QAKlD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG;YACP,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,2BAA2B;YACvE,MAAM,EAAE,CAAC,IAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;SAClD,CAAC;IACN,CAAC;IAED,mEAAmE;IACnE,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAC1D,WAAW,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,MAAc,EAAE,GAAW,EAAE,MAAmB;QAC1D,MAAM,OAAO,GAAW,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,IAAI,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,IAAI,EAAE,CAAC;YACP,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,8BAA8B,EAAE,CAAC;gBACpD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACjC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,6BAA6B,EAAE,CAAC;gBAC7F,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC5C,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG;gBACH,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACpG,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;gCAC4B;IACrB,KAAK,CAAC,MAAc,EAAE,GAAW;QACpC,MAAM,KAAK,GAAa,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC5C,8GAA8G;QAC9G,6FAA6F;QAC7F,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/G,+GAA+G;QAC/G,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAEO,UAAU,CAAC,OAAe,EAAE,GAAW;QAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzC,CAAC;QACL,CAAC;IACL,CAAC;IAED,uDAAuD;IAC/C,MAAM,CAAC,IAAgB;QAC3B,MAAM,IAAI,GAAS,IAAI,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IAED;6DACyD;IACjD,OAAO,CAAC,OAAe,EAAE,MAAc,EAAE,GAAW;QACxD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,4CAA4C,OAAO,GAAG,CAAC,CAAC;YAC3E,OAAO;QACX,CAAC;QACD,IAAI,KAAK,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,OAAO;QACX,CAAC;QACD,IAAI,KAAK,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAW,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,OAAO,GAAiB,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACjJ,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/types/routes/BaseVideoMeetingRoute.d.ts

@@ -1,6 +1,6 @@
 import { type JWTUser } from "@rapidrest/core";
-import { HttpRequest } from "@rapidrest/service-core";
-import { Mailbox } from "@rapidmx/restapi";
+import { HttpRequest, RepoUtils } from "@rapidrest/service-core";
+import { CalendarEventAttendeeLink, Mailbox } from "@rapidmx/restapi";
 import { IceServerConfig } from "../util/IceServerUtils.js";
 import { VideoMeeting, VideoMeetingInvitee, VideoMeetingStatus, VideoMeetingVisibility } from "../models/types.js";
 /** How long a guest JWT minted by `join()` remains valid for. Four hours comfortably covers a realistic call's
@@ -97,12 +97,12 @@ export interface PublicVideoMeeting {
  * **`authenticated`/`selfUid`/`token` - reading this shape correctly.** A caller who already presented a valid
  * session for a real, non-guest RapidMX identity (see `join()`'s doc comment for exactly how that's told apart
  * from a returning guest) gets `authenticated: true` and no `token`/`expiresAt` at all - there is no guest JWT to
- * hand over, because the caller's own already-existing session cookie/header already authenticates `/push` for
- * them, with zero new client-side auth handling. The frontend must not write any cookie in that case (doing so
- * would be pointless at best, and at worst overwrite the caller's real cookie with... the value it already has).
- * The common anonymous case (`authenticated: false`) is unchanged from Phase 1: `token`/`expiresAt` are present
- * and the frontend applies `token` as the `jwt` cookie before connecting - see
- * `apps/shared/push/GuestSignalingClient.ts`.
+ * hand over, because the caller's own already-existing session cookie/header already authenticates the meeting's
+ * WebSockets (`signal()`, `relay()`) for them, with zero new client-side auth handling. The frontend must not write
+ * any cookie in that case (doing so would be pointless at best, and at worst overwrite the caller's real cookie
+ * with... the value it already has). The common anonymous case (`authenticated: false`) is unchanged from Phase 1:
+ * `token`/`expiresAt` are present and the frontend applies `token` as the `jwt` cookie before connecting - see
+ * `apps/shared/signaling/SignalingClient.ts`.
  */
 export interface VideoMeetingJoinResult {
     meeting: PublicVideoMeeting;
@@ -110,14 +110,14 @@ export interface VideoMeetingJoinResult {
     /** `true` when the caller already presented a valid session for a real RapidMX identity when calling `join()`;
      * `false` for the common anonymous case, where a fresh guest identity was just minted instead. */
     authenticated: boolean;
-    /** The identity now holding `READ`/`CREATE` on the meeting's own push channel, and the uid the frontend's mesh
+    /** The identity now holding `READ`/`CREATE` on the meeting's uid (what `signal()` and `relay()` check), and the uid the frontend's mesh
      * connection manager (`apps/shared/webrtc/MeshConnectionManager.ts`) must identify itself as: the caller's own
      * real uid when `authenticated` is `true`, otherwise the freshly minted synthetic `guest:<random>` uid `token`
      * authenticates as. Always present - this replaces Phase 1's guest-only `guestUid` field now that the same
      * grant-and-identify step also runs for a real, already-authenticated caller. */
     selfUid: string;
-    /** A short-lived guest JWT, immediately usable against `/push` to subscribe to and publish on `meeting.uid` -
-     * and nothing else. Present only when `authenticated` is `false`; omitted entirely for an already-authenticated
+    /** A short-lived guest JWT, immediately usable to open the meeting's signaling (`signal()`) and relay (`relay()`)
+     * WebSockets for `meeting.uid` - and nothing else. Present only when `authenticated` is `false`; omitted entirely for an already-authenticated
      * real caller, who has no guest token minted for them at all (see `join()`). See this class's doc comment. */
     token?: string;
     /** ISO 8601 instant `token` expires at. Present only when `authenticated` is `false`, exactly when `token`
@@ -136,7 +136,7 @@ export interface VideoMeetingJoinResult {
  * (`meeting.hasPassword`) that the caller has not yet submitted - see `join()`'s doc comment for exactly when this
  * applies (never for the organizer's own slug, which already proves stronger authority). Carries only enough to
  * show a password prompt (the meeting's title/host, so the prompt isn't a bare form); nothing here grants
- * `/push` access, mints a guest identity, or includes ICE servers - that only happens once
+ * signaling access, mints a guest identity, or includes ICE servers - that only happens once
  * `verifyPassword()` succeeds, returning an ordinary `VideoMeetingJoinResult` instead. The literal `true` is a
  * discriminant: a caller narrows on `"requiresPassword" in result && result.requiresPassword`.
  */
@@ -195,11 +195,11 @@ export type VideoMeetingJoinResponse = VideoMeetingJoinResult | VideoMeetingPass
  *
  * ## Why `VideoMeeting` gets its own per-record `AccessControlList`
  *
- * Unlike `Booking`, `VideoMeeting.uid` doubles as a `/push` signaling channel (see `.claude/NOTES.md`'s "Signaling"
- * design note): SDP offers/answers and ICE candidates are ordinary `NotificationUtils.sendMessage()` payloads
- * published to it, exactly as `MailPushRoute`'s doc comment describes for a `Mailbox`/`Folder` channel. A `/push`
- * channel is authorized purely by `ACLUtils.hasPermission(user, channelUid, action)` against a per-record
- * `AccessControlList` document keyed by that exact uid - there being no such document at all (the case for
+ * Unlike `Booking`, `VideoMeeting.uid` doubles as the meeting's signaling channel: SDP offers/answers and ICE
+ * candidates travel over `signal()`'s WebSocket (see "The signaling WebSocket" below; until it replaced them they
+ * were published on the server's shared `/push` route), whose room is the meeting's uid. Like a `/push` channel
+ * before it, that socket is authorized purely by `ACLUtils.hasPermission(user, meetingUid, action)` against a
+ * per-record `AccessControlList` document keyed by that exact uid - there being no such document at all (the case for
  * `Booking`, whose `@Protect` sets `recordACL: false`) makes `hasPermission()` always answer `false`. So
  * `VideoMeetingMongo`/`VideoMeetingSQL` set `recordACL: true`, and `create()` below claims that per-record ACL
  * with `parentUid` set to the meeting's own `mailboxUid` (mirroring `BaseFolderRoute`'s identical `acl: { uid,
@@ -210,17 +210,17 @@ export type VideoMeetingJoinResponse = VideoMeetingJoinResult | VideoMeetingPass
  *
  * ## The channel-ACL-grant mechanism
  *
- * An anonymous guest holds no `AccessControlList` grant of their own and has no `JWTUser` to authenticate `/push`
- * with in the first place - `join()` therefore does two things together: it mints a short-lived, scope-limited
+ * An anonymous guest holds no `AccessControlList` grant of their own and has no `JWTUser` to authenticate the
+ * meeting's WebSockets with in the first place - `join()` therefore does two things together: it mints a short-lived, scope-limited
  * guest JWT (`mintGuestToken()`: a synthetic `guest:<random>` uid, no roles, `GUEST_JWT_TTL_SECONDS` expiry, real and
  * verifiable since it's signed with the same `auth` config every other token is), and it adds an explicit
  * `ACLRecord` for that exact uid onto the meeting's own `AccessControlList` (`ensureChannelGrant()`), granting
- * `READ` (so `BasePushRoute`'s SUBSCRIBE succeeds) and `CREATE` (so a publish does - see `MailPushRoute`'s doc
- * comment: "publishing to a channel needs CREATE on it as an ordinary user would"). The grant is scoped to exactly
+ * `READ` and `CREATE` - the pair `signal()` and `relay()` both require (`authorizeMeetingSocket()`), the same pair
+ * `/push` demanded to subscribe to and publish on a channel when signaling still went through it. The grant is scoped to exactly
  * that one meeting's uid, nothing else - the same "possession of a link is the credential" pattern
  * `BaseBookingRoute.requireBookingByToken()`/`resolveEffectiveUser()`'s `share:<token>` identity already establish
- * elsewhere in this codebase, extended one step further because signaling needs a channel *subscription*, not just
- * a stateless REST call.
+ * elsewhere in this codebase, extended one step further because signaling needs a long-lived socket, not just a
+ * stateless REST call.
  *
  * **Known limitation, documented rather than silently assumed away**: because each `join()` call for an anonymous
  * caller mints a *fresh* random guest uid (so simultaneous participants of one shared link are distinguishable from
@@ -240,16 +240,16 @@ export type VideoMeetingJoinResponse = VideoMeetingJoinResult | VideoMeetingPass
  * authenticated-optional endpoint in this codebase's family (e.g. `BaseScopedChildRoute.resolveEffectiveUser()`'s
  * "prefer the real authenticated user, fall back to the anonymous token" precedent). This matters because a
  * logged-in RapidMX user's browser already carries a real, `HttpOnly` `jwt` session cookie for this origin - a
- * cookie `apps/shared/push/GuestSignalingClient.ts` cannot overwrite with a guest token even if `join()` minted one
+ * cookie `apps/shared/signaling/SignalingClient.ts` cannot overwrite with a guest token even if `join()` minted one
  * (browsers refuse to let a script override an `HttpOnly` cookie of the same name), so a guest-only `join()` would
- * leave that browser's `/push` WebSocket authenticating as the real session while the meeting's ACL only names a
- * synthetic guest uid - the subscribe is simply, safely refused, and the real user could never actually join.
+ * leave that browser's signaling WebSocket authenticating as the real session while the meeting's ACL only names a
+ * synthetic guest uid - the socket is simply, safely refused, and the real user could never actually join.
  *
  * The fix: when `user` is present and is a *real* identity - not a guest uid from a previous `join()` call, told
  * apart by the `GUEST_UID_PREFIX` a guest uid always starts with and a real, mailbox-owning identity never can -
  * `join()` grants `user.uid` itself (not a synthetic one) `READ`/`CREATE` on the meeting's channel via
  * `ensureChannelGrant()`, mints no guest JWT at all, and returns `authenticated: true` with `selfUid: user.uid`. The
- * caller's own already-existing session cookie now already authenticates `/push` for them with zero new
+ * caller's own already-existing session cookie now already authenticates `signal()` for them with zero new
  * client-side auth handling - the frontend must not write a cookie of its own in this case (see
  * `VideoMeetingJoinResult`'s doc comment). When `user` is absent (the common, true-anonymous case - no existing
  * session at all), behavior is exactly Phase 1's: a fresh guest identity is minted and granted instead.
@@ -310,6 +310,19 @@ export type VideoMeetingJoinResponse = VideoMeetingJoinResult | VideoMeetingPass
  * it): a disabled relay closes every socket with 1008 "Relay disabled." and `join()` reports `relayEnabled: false`, so
  * clients don't try it.
  *
+ * ## The signaling WebSocket (`signal()`)
+ *
+ * Every participant's offers, answers, ICE candidates, presence, moderation signals, chat messages and whiteboard
+ * strokes travel over this plugin's own WebSocket, `signal()` at `/signal/:id`
+ * (`/api/mail/video-meetings/signal/<meetingUid>`), not the server's shared `/push` route: one socket in both
+ * directions, so a message is not a whole HTTP request, and a meeting's traffic never mixes with the webmail's own
+ * push notifications. `SignalingHub` carries the messages (see it for the protocol and limits) on the same bus as the
+ * relay, so it crosses replicas exactly when the relay does. It is authorized exactly as `relay()` is (the same
+ * `READ`/`CREATE` grant from `join()`, the same live-meeting check, the same "Not permitted." for every refusal) but
+ * is never switched off - without it there is no call. The hub stamps every message with the socket's own uid and
+ * peer id, so nobody can speak as someone else, and a point-to-point message (`to`) reaches only that peer. `kick()`
+ * closes the removed participant's sockets at once.
+ *
  * ## Other known limitations
  *
  * **`VideoMeetingInvitee.joinToken` never expires** and has no GC job - identical tradeoff to `Booking.manageToken`.
@@ -332,10 +345,10 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      * `CalendarEventAttendeeLinkSQL`, from `@rapidmx/restapi`) - see `persistMeeting()`. */
     protected abstract attendeeLinkClass: any;
     private _objectFactory?;
-    private meetingRepo?;
-    private inviteeRepo?;
-    private mailboxRepo?;
-    private attendeeLinkRepo?;
+    protected meetingRepo?: RepoUtils<VM>;
+    protected inviteeRepo?: RepoUtils<VMI>;
+    protected mailboxRepo?: RepoUtils<M>;
+    protected attendeeLinkRepo?: RepoUtils<CalendarEventAttendeeLink>;
     private aclUtils?;
     private trustedRoles;
     /** The `auth` config every other JWT in this deployment is signed/verified with - used by `mintGuestToken()` to
@@ -359,12 +372,15 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      * across replicas on; `null` when the deployment has none. Decides how `initRelayBus()` carries relay frames. */
     private eventsConfig;
     private logger;
-    /** The rooms of this process's relay sockets. One per route instance. It starts out on an in-process bus, which
-     * is what a route that was never initialized (a test's) keeps; `initRelayBus()` swaps in a hub on a Redis bus
-     * when the deployment has one, before any socket can attach. Its socket caps are per server replica. */
-    private relayHub;
+    /** The rooms of this process's relay sockets. One per route instance, built through the object factory by
+     * `initRelayBus()` - on a Redis bus when the deployment has one, else on an in-process bus - before any socket
+     * can attach. Its socket caps are per server replica. */
+    private relayHub?;
     /** The Redis bus `relayHub` runs on, when there is one. */
     private relayBus?;
+    /** The rooms of this process's signaling sockets (`signal()`), on the same bus as `relayHub` - built alongside it
+     * by `initRelayBus()`. Its socket caps are per server replica. */
+    private signalingHub?;
     /** Every meeting's pending admission requests (`VideoMeeting.waitingRoomEnabled`), keyed by meeting uid then by
      * the requester's own uid (real or freshly minted guest). In-memory and per server instance only - the same
      * accepted tradeoff `relayHub` above already has: a restart drops anyone currently waiting, who simply
@@ -381,9 +397,9 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      */
     get modelClass(): any;
     /**
-     * Picks how relay frames travel between server replicas, once the route is created: over Redis pub/sub
-     * (`RedisRelayBus`) when `datastores:events` is configured, else in-process only with a single warning that
-     * participants on different replicas cannot relay to each other. A Redis bus that cannot be created (the `redis`
+     * Picks how relay frames and signaling messages travel between server replicas, once the route is created: over
+     * Redis pub/sub (`RedisRelayBus`) when `datastores:events` is configured, else in-process only with a single
+     * warning that participants on different replicas cannot reach each other. A Redis bus that cannot be created (the `redis`
      * package is missing, an unusable URL) falls back the same way, with the error logged. Runs before the route
      * serves anything, so no socket is attached to the hub it replaces.
      */
@@ -391,7 +407,8 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
     /** Disconnects the Redis relay bus, if there is one, when the object factory destroys the route. (The factory
      * runs one destroy method per object: a subclass declaring its own `@Destroy` must call this one.) */
     destroyRelayBus(): void;
-    private init;
+    /** Builds the model repositories once, before the route serves anything. */
+    protected initialize(): Promise<void>;
     /** Rejects a `403` unless `user` (with its trusted roles stripped - see `util/RouteAccessUtils.ts`) holds
      * `action` on `mailboxUid`, by ownership or an explicit ACL grant. */
     private requireMailboxAccess;
@@ -509,9 +526,9 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
     private ensureChannelGrant;
     /**
      * Removes `uid`'s `ACLRecord` from `meetingUid`'s own `AccessControlList`, if it has one - the mirror image of
-     * `ensureChannelGrant()`, used to enforce a kick (see `kick()`): once removed, `uid` can no longer subscribe to
-     * or publish on the meeting's `/push` channel, so even a client that ignores the cooperative `"kicked"` signal
-     * (`SignalMessage`'s doc comment) cannot keep participating. A no-op when `uid` holds no grant (already kicked,
+     * `ensureChannelGrant()`, used to enforce a kick (see `kick()`, which also closes `uid`'s open signaling sockets):
+     * once removed, `uid` can no longer open the meeting's signaling (`signal()`) or relay (`relay()`) socket, so even
+     * a client that ignores the cooperative `"kicked"` signal (`SignalMessage`'s doc comment) cannot keep participating. A no-op when `uid` holds no grant (already kicked,
      * or never joined) or the meeting has no ACL, rather than an error - the caller wants "not able to rejoin",
      * which is already true either way. Same optimistic-lock retry as `ensureChannelGrant()`, for the same reason:
      * a concurrent joiner or the owner editing the ACL directly may save first.
@@ -585,7 +602,7 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
     /**
      * Decides whether `user` may open a relay socket to meeting `id`: the relay must be enabled, `user` must hold BOTH
      * `READ` and `CREATE` on the meeting's uid - exactly what `ensureChannelGrant()` gives a joined participant, and
-     * what `/push` demands to subscribe and publish - and the meeting must exist and be neither cancelled nor ended.
+     * what `signal()` demands too (`authorizeMeetingSocket()`) - and the meeting must exist and be neither cancelled nor ended.
      * Returns the reason to close the socket with, or `undefined` when permitted.
      *
      * `hasPermission()` gets `user` with its trusted roles stripped (`stripTrustedRoles()`), exactly as
@@ -595,14 +612,19 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      * failure gives the same `RELAY_NOT_PERMITTED`, whether the grant, the meeting or its state is what's missing.
      */
     private authorizeRelay;
+    /** Why a meeting WebSocket (`relay()`, `signal()`) of `user` for meeting `id` must be refused, or `undefined` to
+     * accept it - see `authorizeRelay()`'s doc comment for the rules, which are the same for both apart from the
+     * relay's own on/off setting. */
+    private authorizeMeetingSocket;
     /**
-     * The meeting uid a relay socket's URL names. `@Param("id")` is filled in by the Bun router, but NOT by the uWS
+     * The meeting uid a relay or signaling socket's URL names. `@Param("id")` is filled in by the Bun router, but NOT by the uWS
      * router this framework actually serves with: it never populates `req.params` for a WebSocket upgrade (a
      * `@WebSocket()` route has, so far, never had a path parameter - `BasePushRoute.connect()` has none). So when the
      * decorated argument is empty this reads the last segment of the request path instead, which the
-     * `/relay/:id` pattern guarantees is the id (the framework also registers the trailing-slash form; the path
+     * `/relay/:id` and `/signal/:id` patterns guarantee is the id (the framework also registers the trailing-slash form; the path
      * never carries the query string). Returns `undefined` when there is none or it isn't valid percent-encoding.
      */
-    private relayMeetingId;
+    private socketMeetingId;
     relay(paramId: string | undefined, req: HttpRequest, sock: any, user?: JWTUser): Promise<void>;
+    signal(paramId: string | undefined, req: HttpRequest, sock: any, user?: JWTUser): Promise<void>;
 }

package/dist/types/util/RelayHub.d.ts

@@ -133,11 +133,14 @@ export declare function parseRelayEnabled(value: unknown): boolean;
  * same room replaces the older one, which is closed with 1008 "Replaced.".
  *
  * After that, `{"op":"want","peers":["<peerId>", ...]}` REPLACES the socket's interest set with the valid entries, at
- * most `RELAY_MAX_WANT_PEERS` of them; every other or malformed text message is ignored. Binary messages of 1 to
+ * most `RELAY_MAX_WANT_PEERS` of them, and `{"op":"ping","t":<number>}` is answered at once with
+ * `{"op":"pong","t":<the same number>}` (the client's own clock, never interpreted here - it lets the client time its
+ * round trip to the server, on the same socket and so behind the same queues as its media); every other or malformed
+ * text message, including a ping without a finite numeric `t`, is ignored. Binary messages of 1 to
  * `RelayHubOptions.maxPayloadBytes` bytes (`RELAY_MAX_PAYLOAD_BYTES` unless the route asked for more; opaque to the hub) are forwarded to every other socket of the room whose interest
  * set contains the sender's peer id; binary before `hello`, empty and oversized messages are dropped.
  *
- * Server to client: `{"op":"ready","v":1,"maxMessageBytes":N}` once, then binary messages `[1 byte: UTF-8 length N of the sender's peer
+ * Server to client: `{"op":"ready","v":1,"maxMessageBytes":N}` once, a `pong` for each ping, then binary messages `[1 byte: UTF-8 length N of the sender's peer
  * id][N bytes: the sender's peer id][the original payload]`. The sender is stamped by the hub from the `hello`,
  * never trusted from the payload.
  *

package/dist/types/util/SignalingHub.d.ts

@@ -0,0 +1,112 @@
+import { type RelayBus, type RelayConnection, type RelaySocket } from "./RelayHub.js";
+/** The version of the signaling wire protocol this module implements - the `v` of `hello`/`ready`. */
+export declare const SIGNALING_PROTOCOL_VERSION = 1;
+/** The largest text message a socket may send when the route could not raise the framework's own limit. */
+export declare const SIGNALING_MAX_PAYLOAD_BYTES: number;
+/** The larger message limit the signaling route asks the framework for when it can (see the relay's identical
+ * `RELAY_LARGE_PAYLOAD_BYTES`): a whiteboard's catch-up for a late joiner then travels in a few messages, not dozens. */
+export declare const SIGNALING_LARGE_PAYLOAD_BYTES: number;
+/** The most sockets (registered or still awaiting their `hello`) one room holds at once. */
+export declare const SIGNALING_MAX_SOCKETS_PER_ROOM = 16;
+/** The most sockets one authenticated uid may hold in one room at once (several tabs or devices of one account). */
+export declare const SIGNALING_MAX_SOCKETS_PER_UID = 4;
+/** Sustained inbound messages per second per socket. Drawing on the whiteboard sends about 15 a second, and a
+ * connection being set up sends a burst of ICE candidates; this leaves room for both at once. */
+export declare const SIGNALING_RATE_MESSAGES_PER_SECOND = 50;
+/** Burst allowance, in messages, of a socket's message bucket - also its capacity. */
+export declare const SIGNALING_BURST_MESSAGES = 200;
+/** Sustained inbound bytes per second per socket. */
+export declare const SIGNALING_RATE_BYTES_PER_SECOND: number;
+/** Burst allowance, in bytes, of a socket's byte bucket - also its capacity. Enough for a late joiner's catch-up. */
+export declare const SIGNALING_BURST_BYTES: number;
+/** How long a socket may stay over budget continuously before it is closed with 1008 "Too much data.". */
+export declare const SIGNALING_OVER_BUDGET_CLOSE_MS = 10000;
+/** Two over-budget drops further apart than this are separate episodes - see `RELAY_OVER_BUDGET_GRACE_MS`. */
+export declare const SIGNALING_OVER_BUDGET_GRACE_MS = 1000;
+/** How long a new socket has to send its `hello` before it is closed with 1008 "Hello timeout.". */
+export declare const SIGNALING_HELLO_TIMEOUT_MS = 10000;
+/** The reason a socket is closed with (1008) when its uid is removed from the meeting - see `SignalingHub.evict()`. */
+export declare const SIGNALING_EVICTED_REASON = "Removed from the meeting.";
+/** The bus room a meeting's signaling travels in, kept apart from the same meeting's relay room on a shared bus. */
+export declare function signalingBusRoom(roomId: string): string;
+/** Counters of what the hub did with messages - for tests and diagnostics. */
+export interface SignalingStats {
+    /** Messages handed to a receiving socket. */
+    delivered: number;
+    /** Messages dropped because their sender was over budget. */
+    droppedBudget: number;
+    /** Messages dropped for being malformed, oversized, or sent before `hello`. */
+    droppedInvalid: number;
+}
+export interface SignalingHubOptions {
+    /** Where messages travel between sockets. Defaults to a new `InProcessRelayBus`. A bus shared with a `RelayHub` is
+     * fine - the hub keeps to its own rooms (`signalingBusRoom()`). */
+    bus?: RelayBus;
+    logger?: {
+        debug(message: string): void;
+    };
+    /** The largest text message a socket may send, and what `ready` tells the client. Defaults to
+     * `SIGNALING_MAX_PAYLOAD_BYTES`; the route sets `SIGNALING_LARGE_PAYLOAD_BYTES` when the framework was asked for that. */
+    maxPayloadBytes?: number;
+}
+/**
+ * The meeting's own signaling channel: a WebSocket per participant tab, carrying the JSON `SignalMessage`s of the
+ * full-mesh call (`apps/shared/webrtc/types.ts`) - offers, answers, ICE candidates, presence, moderation, chat and
+ * whiteboard - between the participants of one room (one meeting). It replaces publishing on the server's shared `/push`
+ * route, so the call's traffic is neither an HTTP request per message nor shared with the webmail's own push
+ * notifications. Like `RelayHub` it knows nothing about meetings, users, HTTP or any framework: a caller authorizes a
+ * socket however it likes, hands it to `attach()` and feeds the returned connection the socket's events.
+ *
+ * ## Wire protocol (version 1, text messages only)
+ *
+ * Client to server, the first message must be `{"op":"hello","v":1,"peer":"<peerId>"}` within
+ * `SIGNALING_HELLO_TIMEOUT_MS`, `peer` being the socket's uid or starting with `<uid>~` (the same rule, and the same
+ * closing reasons, as the relay's `hello`). The server answers `{"op":"ready","v":1,"maxMessageBytes":N}`. A second
+ * socket registering an already registered peer in the same room replaces the older one ("Replaced.").
+ *
+ * After that, `{"op":"signal","data":{...}}` sends `data` to the room, and `{"op":"ping","t":<number>}` is answered
+ * with `{"op":"pong","t":<the same number>}` (a keepalive). The server overwrites `data.from` with the socket's uid
+ * and `data.peer` with its peer id, so nobody can speak as someone else. When `data.to` names a peer id, only that peer's
+ * socket receives it - an offer, an answer and ICE candidates never reach anyone they are not for; otherwise every
+ * other registered socket of the room does. Each arrives as `{"op":"signal","data":{...}}`. Anything malformed,
+ * binary, oversized, or sent before `hello`, is dropped.
+ *
+ * ## Limits and removal
+ *
+ * `SIGNALING_MAX_SOCKETS_PER_ROOM` sockets per room and `SIGNALING_MAX_SOCKETS_PER_UID` per uid per room ("Room full."
+ * / "Too many connections."). Each socket's messages are metered by two token buckets (messages and bytes); an
+ * over-budget message is dropped, and a socket kept over budget for `SIGNALING_OVER_BUDGET_CLOSE_MS` is closed with
+ * "Too much data.". `evict()` closes every socket of one uid in a room, on every replica the bus reaches - the host
+ * removing someone takes them off the signaling channel at once, not at their next reconnect.
+ *
+ * ## Replicas
+ *
+ * Exactly as `RelayHub`'s: messages cross replicas when the bus does (`RedisRelayBus`), and every limit is per replica.
+ */
+export declare class SignalingHub {
+    readonly stats: SignalingStats;
+    private readonly bus;
+    private readonly rooms;
+    private readonly env;
+    private readonly logger?;
+    constructor(options?: SignalingHubOptions);
+    /** The number of rooms that currently hold at least one socket. */
+    get roomCount(): number;
+    /** The number of sockets in `roomId` (0 for an unknown room). */
+    socketCount(roomId: string): number;
+    /**
+     * Accepts an already-authorized `socket` of `uid` into room `roomId`, or refuses it (closing it with 1008) when
+     * the room or the uid is at its limit. Returns the connection to feed the socket's events to, or `undefined`
+     * when refused.
+     */
+    attach(roomId: string, uid: string, socket: RelaySocket): RelayConnection | undefined;
+    /** Closes every socket `uid` holds in room `roomId` (`SIGNALING_EVICTED_REASON`), on this replica and - through
+     * the bus - every other. */
+    evict(roomId: string, uid: string): void;
+    private evictLocal;
+    /** Forgets `conn`, and its room once that is empty. */
+    private remove;
+    /** Hands one bus frame to the sockets of `busRoom` it is for. A frame for a room that has just emptied, or one
+     * that is not a frame this hub publishes, is ignored. */
+    private deliver;
+}