@rapidmx/meet-plugin 0.3.0 → 0.4.0

package/apps/meet/_CallView.tsx

@@ -93,8 +93,9 @@ export function computeMainUid(options: {
     return options.otherUids[0];
 }
 
-/** This tab's identity on the signaling channel: the account (or guest) uid plus a random suffix, so the same
- * account joining from two devices - or two tabs - is two participants rather than one that ignores itself. */
+/** This tab's identity in the call: the account (or guest) uid plus a random suffix, so the same account joining
+ * from two devices - or two tabs - is two participants rather than one that ignores itself. It travels as the
+ * `peer` of each message; `from` stays the exact authenticated uid, which the server requires. */
 export function newPeerId(selfUid: string): string {
     return `${selfUid}~${globalThis.crypto?.randomUUID?.() ?? Math.random().toString(36).slice(2)}`;
 }
@@ -137,7 +138,8 @@ export default function CallView({ channel, token, selfUid, selfName, meetingTit
         let cancelled = false;
         const client = new GuestSignalingClient({ channel, token });
         const manager = new MeshConnectionManager({
-            selfUid: peerId,
+            selfUid,
+            peerId,
             selfName,
             iceServers,
             channel: client,

package/apps/meet/_meetApi.ts

@@ -17,7 +17,7 @@ export type VideoMeetingStatus = "scheduled" | "active" | "ended" | "cancelled";
 /** Mirrors `BaseVideoMeetingRoute.ts`'s `IceServerConfig` - already the exact shape `RTCPeerConnection`'s
  * `iceServers` constructor option expects, passed straight through with no reshaping. */
 export interface IceServerConfig {
-    urls: string;
+    urls: string | string[];
     username?: string;
     credential?: string;
 }

package/apps/shared/webrtc/MeshConnectionManager.ts

@@ -75,8 +75,8 @@ import {
 } from "./types.js";
 
 /** The lexicographically smaller uid is always the offerer for that pair - see this module's doc comment. */
-export function isOfferer(selfUid: string, peerUid: string): boolean {
-    return selfUid < peerUid;
+export function isOfferer(selfId: string, peerId: string): boolean {
+    return selfId < peerId;
 }
 
 /** How many peers' worth of early ICE candidates are held, and how many candidates per peer - bounds the memory a
@@ -96,7 +96,11 @@ interface PeerState extends MeshParticipant {
 }
 
 export interface MeshConnectionManagerOptions {
+    /** The authenticated uid - what `from` must be on the wire (see `SignalMessage.from`). */
     selfUid: string;
+    /** This tab's identity in the call, `<selfUid>~<random>` - defaults to `selfUid`. Everything the manager keys on
+     * (the roster, who offers, who presents) is a peer id, so two tabs of one account are two participants. */
+    peerId?: string;
     selfName: string;
     iceServers: RTCIceServer[];
     channel: SignalingChannel;
@@ -122,8 +126,10 @@ export class MeshConnectionManager {
     private started = false;
     private stopped = false;
     private currentPresenterUid: string | undefined;
+    private readonly selfId: string;
 
     constructor(private readonly options: MeshConnectionManagerOptions) {
+        this.selfId = options.peerId ?? options.selfUid;
         this.localTracks = { audio: options.localAudioTrack ?? null, video: options.localVideoTrack ?? null };
         this.localState = {
             audioOn: !!options.localAudioTrack,
@@ -213,10 +219,10 @@ export class MeshConnectionManager {
      * else already presents - the caller (`_CallView.tsx`) uses this to disable its own "share screen" control
      * rather than let a claim silently do nothing. */
     claimPresenter(): boolean {
-        if (this.currentPresenterUid !== undefined && this.currentPresenterUid !== this.options.selfUid) {
+        if (this.currentPresenterUid !== undefined && this.currentPresenterUid !== this.selfId) {
             return false;
         }
-        this.currentPresenterUid = this.options.selfUid;
+        this.currentPresenterUid = this.selfId;
         this.send({ kind: "presenter-claim" });
         this.emit({ type: "presenter-changed", uid: this.currentPresenterUid });
         return true;
@@ -224,7 +230,7 @@ export class MeshConnectionManager {
 
     /** Releases presenter status - a no-op unless the local participant currently holds it. */
     releasePresenter(): void {
-        if (this.currentPresenterUid !== this.options.selfUid) {
+        if (this.currentPresenterUid !== this.selfId) {
             return;
         }
         this.currentPresenterUid = undefined;
@@ -237,7 +243,7 @@ export class MeshConnectionManager {
     }
 
     private send(partial: Omit<SignalMessage, "type" | "from">): void {
-        this.options.channel.send({ type: "video-meeting-signal", from: this.options.selfUid, ...partial });
+        this.options.channel.send({ type: "video-meeting-signal", from: this.options.selfUid, peer: this.selfId, ...partial });
     }
 
     private emit(event: MeshEvent): void {
@@ -246,11 +252,19 @@ export class MeshConnectionManager {
         }
     }
 
-    private handleMessage(message: SignalMessage): void {
-        if (message.type !== "video-meeting-signal" || message.from === this.options.selfUid) {
+    private handleMessage(raw: SignalMessage): void {
+        if (raw.type !== "video-meeting-signal") {
             return;
         }
-        if (message.to !== undefined && message.to !== this.options.selfUid) {
+        // From here on `from` is the sender's peer id - see `SignalMessage.peer`.
+        if (raw.peer !== undefined && raw.peer !== raw.from && !raw.peer.startsWith(`${raw.from}~`)) {
+            return;
+        }
+        const message: SignalMessage = { ...raw, from: raw.peer ?? raw.from };
+        if (message.from === this.selfId) {
+            return;
+        }
+        if (message.to !== undefined && message.to !== this.selfId) {
             return;
         }
         switch (message.kind) {
@@ -291,7 +305,7 @@ export class MeshConnectionManager {
             this.updatePeer(known, message.name, message.state);
             return;
         }
-        const offerer = isOfferer(this.options.selfUid, message.from);
+        const offerer = isOfferer(this.selfId, message.from);
         const peer = this.createPeer(message.from, message.name ?? message.from, message.state, offerer);
         this.emit({ type: "participant-joined", participant: toParticipant(peer) });
         // Let a newcomer who couldn't have seen our own original `hello` learn about us too - see this module's
@@ -481,12 +495,12 @@ export class MeshConnectionManager {
         // Collision: a claim from someone other than the presenter we already recorded. Resolve deterministically
         // - see this module's doc comment - so every participant converges on the same winner. When the
         // already-recorded presenter has the smaller uid, it wins and nothing changes here - including when that
-        // presenter is `this.options.selfUid` itself, whose own optimistic claim simply stays in place.
+        // presenter is this participant itself, whose own optimistic claim simply stays in place.
         if (from < this.currentPresenterUid) {
             const loser = this.currentPresenterUid;
             this.currentPresenterUid = from;
             this.emit({ type: "presenter-changed", uid: from });
-            if (loser === this.options.selfUid) {
+            if (loser === this.selfId) {
                 this.send({ kind: "presenter-release" });
             }
         }

package/apps/shared/webrtc/types.ts

@@ -45,10 +45,16 @@ export interface SignalMessage {
         | "presenter-release"
         | "state"
         | "reaction";
-    /** The sender's per-call peer id - `CallView` derives it from `VideoMeetingJoinResult.selfUid` plus a random
-     * suffix, so the same account joining from two devices (or two tabs) is two participants, not one that ignores
-     * its own messages. */
+    /** The sender's authenticated uid - the real caller's own uid when `join()` returned `authenticated: true`, else
+     * the `guest:<random>` uid `BaseVideoMeetingRoute.join()` minted. The server refuses a published message whose
+     * `from` isn't the authenticated caller's uid (it stops one participant speaking as another), so this must be
+     * exactly that uid. */
     from: string;
+    /** Which of the sender's tabs or devices this is: `<from>~<random>`. The same account joining from two devices is
+     * two participants, not one that ignores its own messages. A `peer` that doesn't start with `<from>~` is
+     * ignored, so it can't name someone else's tab. Absent from a sender that predates it (the participant is then
+     * identified by `from`). */
+    peer?: string;
     /** Set only on a point-to-point message (`offer`/`answer`/`ice-candidate`). */
     to?: string;
     /** `hello` only - the display name the sender chose in the lobby. */

package/dist/apps/meet/_CallView.d.ts

@@ -54,7 +54,8 @@ export declare function computeMainUid(options: {
     activeSpeakerUid?: string;
     otherUids: readonly string[];
 }): string | undefined;
-/** This tab's identity on the signaling channel: the account (or guest) uid plus a random suffix, so the same
- * account joining from two devices - or two tabs - is two participants rather than one that ignores itself. */
+/** This tab's identity in the call: the account (or guest) uid plus a random suffix, so the same account joining
+ * from two devices - or two tabs - is two participants rather than one that ignores itself. It travels as the
+ * `peer` of each message; `from` stays the exact authenticated uid, which the server requires. */
 export declare function newPeerId(selfUid: string): string;
 export default function CallView({ channel, token, selfUid, selfName, meetingTitle, iceServers, media, onLeave }: CallViewProps): React.JSX.Element;

package/dist/apps/meet/_CallView.js

@@ -63,8 +63,9 @@ export function computeMainUid(options) {
     }
     return options.otherUids[0];
 }
-/** This tab's identity on the signaling channel: the account (or guest) uid plus a random suffix, so the same
- * account joining from two devices - or two tabs - is two participants rather than one that ignores itself. */
+/** This tab's identity in the call: the account (or guest) uid plus a random suffix, so the same account joining
+ * from two devices - or two tabs - is two participants rather than one that ignores itself. It travels as the
+ * `peer` of each message; `from` stays the exact authenticated uid, which the server requires. */
 export function newPeerId(selfUid) {
     return `${selfUid}~${globalThis.crypto?.randomUUID?.() ?? Math.random().toString(36).slice(2)}`;
 }
@@ -103,7 +104,8 @@ export default function CallView({ channel, token, selfUid, selfName, meetingTit
         let cancelled = false;
         const client = new GuestSignalingClient({ channel, token });
         const manager = new MeshConnectionManager({
-            selfUid: peerId,
+            selfUid,
+            peerId,
             selfName,
             iceServers,
             channel: client,

package/dist/apps/meet/_meetApi.d.ts

@@ -3,7 +3,7 @@ export type VideoMeetingStatus = "scheduled" | "active" | "ended" | "cancelled";
 /** Mirrors `BaseVideoMeetingRoute.ts`'s `IceServerConfig` - already the exact shape `RTCPeerConnection`'s
  * `iceServers` constructor option expects, passed straight through with no reshaping. */
 export interface IceServerConfig {
-    urls: string;
+    urls: string | string[];
     username?: string;
     credential?: string;
 }

package/dist/apps/shared/webrtc/MeshConnectionManager.d.ts

@@ -60,10 +60,14 @@
  */
 import { type MeshEvent, type MeshParticipant, type ParticipantState, type RTCPeerConnectionFactory, type SignalingChannel } from "./types.js";
 /** The lexicographically smaller uid is always the offerer for that pair - see this module's doc comment. */
-export declare function isOfferer(selfUid: string, peerUid: string): boolean;
+export declare function isOfferer(selfId: string, peerId: string): boolean;
 type MediaKind = "audio" | "video";
 export interface MeshConnectionManagerOptions {
+    /** The authenticated uid - what `from` must be on the wire (see `SignalMessage.from`). */
     selfUid: string;
+    /** This tab's identity in the call, `<selfUid>~<random>` - defaults to `selfUid`. Everything the manager keys on
+     * (the roster, who offers, who presents) is a peer id, so two tabs of one account are two participants. */
+    peerId?: string;
     selfName: string;
     iceServers: RTCIceServer[];
     channel: SignalingChannel;
@@ -89,6 +93,7 @@ export declare class MeshConnectionManager {
     private started;
     private stopped;
     private currentPresenterUid;
+    private readonly selfId;
     constructor(options: MeshConnectionManagerOptions);
     get participants(): MeshParticipant[];
     get presenterUid(): string | undefined;

package/dist/apps/shared/webrtc/MeshConnectionManager.js

@@ -64,8 +64,8 @@
  */
 import { REACTION_EMOJIS, } from "./types.js";
 /** The lexicographically smaller uid is always the offerer for that pair - see this module's doc comment. */
-export function isOfferer(selfUid, peerUid) {
-    return selfUid < peerUid;
+export function isOfferer(selfId, peerId) {
+    return selfId < peerId;
 }
 /** How many peers' worth of early ICE candidates are held, and how many candidates per peer - bounds the memory a
  * misbehaving participant could make this hold for peers that never materialize. */
@@ -79,6 +79,7 @@ export class MeshConnectionManager {
         this.orphanCandidates = new Map();
         this.started = false;
         this.stopped = false;
+        this.selfId = options.peerId ?? options.selfUid;
         this.localTracks = { audio: options.localAudioTrack ?? null, video: options.localVideoTrack ?? null };
         this.localState = {
             audioOn: !!options.localAudioTrack,
@@ -159,17 +160,17 @@ export class MeshConnectionManager {
      * else already presents - the caller (`_CallView.tsx`) uses this to disable its own "share screen" control
      * rather than let a claim silently do nothing. */
     claimPresenter() {
-        if (this.currentPresenterUid !== undefined && this.currentPresenterUid !== this.options.selfUid) {
+        if (this.currentPresenterUid !== undefined && this.currentPresenterUid !== this.selfId) {
             return false;
         }
-        this.currentPresenterUid = this.options.selfUid;
+        this.currentPresenterUid = this.selfId;
         this.send({ kind: "presenter-claim" });
         this.emit({ type: "presenter-changed", uid: this.currentPresenterUid });
         return true;
     }
     /** Releases presenter status - a no-op unless the local participant currently holds it. */
     releasePresenter() {
-        if (this.currentPresenterUid !== this.options.selfUid) {
+        if (this.currentPresenterUid !== this.selfId) {
             return;
         }
         this.currentPresenterUid = undefined;
@@ -180,18 +181,26 @@ export class MeshConnectionManager {
         this.send({ kind: "hello", name: this.options.selfName, state: this.localState });
     }
     send(partial) {
-        this.options.channel.send({ type: "video-meeting-signal", from: this.options.selfUid, ...partial });
+        this.options.channel.send({ type: "video-meeting-signal", from: this.options.selfUid, peer: this.selfId, ...partial });
     }
     emit(event) {
         for (const listener of [...this.listeners]) {
             listener(event);
         }
     }
-    handleMessage(message) {
-        if (message.type !== "video-meeting-signal" || message.from === this.options.selfUid) {
+    handleMessage(raw) {
+        if (raw.type !== "video-meeting-signal") {
             return;
         }
-        if (message.to !== undefined && message.to !== this.options.selfUid) {
+        // From here on `from` is the sender's peer id - see `SignalMessage.peer`.
+        if (raw.peer !== undefined && raw.peer !== raw.from && !raw.peer.startsWith(`${raw.from}~`)) {
+            return;
+        }
+        const message = { ...raw, from: raw.peer ?? raw.from };
+        if (message.from === this.selfId) {
+            return;
+        }
+        if (message.to !== undefined && message.to !== this.selfId) {
             return;
         }
         switch (message.kind) {
@@ -231,7 +240,7 @@ export class MeshConnectionManager {
             this.updatePeer(known, message.name, message.state);
             return;
         }
-        const offerer = isOfferer(this.options.selfUid, message.from);
+        const offerer = isOfferer(this.selfId, message.from);
         const peer = this.createPeer(message.from, message.name ?? message.from, message.state, offerer);
         this.emit({ type: "participant-joined", participant: toParticipant(peer) });
         // Let a newcomer who couldn't have seen our own original `hello` learn about us too - see this module's
@@ -411,12 +420,12 @@ export class MeshConnectionManager {
         // Collision: a claim from someone other than the presenter we already recorded. Resolve deterministically
         // - see this module's doc comment - so every participant converges on the same winner. When the
         // already-recorded presenter has the smaller uid, it wins and nothing changes here - including when that
-        // presenter is `this.options.selfUid` itself, whose own optimistic claim simply stays in place.
+        // presenter is this participant itself, whose own optimistic claim simply stays in place.
         if (from < this.currentPresenterUid) {
             const loser = this.currentPresenterUid;
             this.currentPresenterUid = from;
             this.emit({ type: "presenter-changed", uid: from });
-            if (loser === this.options.selfUid) {
+            if (loser === this.selfId) {
                 this.send({ kind: "presenter-release" });
             }
         }

package/dist/apps/shared/webrtc/types.d.ts

@@ -29,10 +29,16 @@ export declare const REACTION_EMOJIS: readonly ["👍", "👏", "❤️", "🎉"
 export interface SignalMessage {
     type: "video-meeting-signal";
     kind: "hello" | "bye" | "offer" | "answer" | "ice-candidate" | "presenter-claim" | "presenter-release" | "state" | "reaction";
-    /** The sender's per-call peer id - `CallView` derives it from `VideoMeetingJoinResult.selfUid` plus a random
-     * suffix, so the same account joining from two devices (or two tabs) is two participants, not one that ignores
-     * its own messages. */
+    /** The sender's authenticated uid - the real caller's own uid when `join()` returned `authenticated: true`, else
+     * the `guest:<random>` uid `BaseVideoMeetingRoute.join()` minted. The server refuses a published message whose
+     * `from` isn't the authenticated caller's uid (it stops one participant speaking as another), so this must be
+     * exactly that uid. */
     from: string;
+    /** Which of the sender's tabs or devices this is: `<from>~<random>`. The same account joining from two devices is
+     * two participants, not one that ignores its own messages. A `peer` that doesn't start with `<from>~` is
+     * ignored, so it can't name someone else's tab. Absent from a sender that predates it (the participant is then
+     * identified by `from`). */
+    peer?: string;
     /** Set only on a point-to-point message (`offer`/`answer`/`ice-candidate`). */
     to?: string;
     /** `hello` only - the display name the sender chose in the lobby. */

package/dist/lib/util/IceServerUtils.js

@@ -3,6 +3,11 @@
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import * as crypto from "crypto";
+/** The URLs in a `mail:videoconf:turn:url` value: one, or several separated by commas and/or whitespace (for a TURN server
+ * listening on both UDP and TLS, `turn:host:3478,turns:host:5349`). Blank entries are dropped. */
+export function parseTurnUrls(value) {
+    return value.split(/[\s,]+/).filter(Boolean);
+}
 /** Always-available, free public STUN servers - discovery only, no media relay. Two independent providers, so a
  * call still has STUN available if one of them is ever unreachable. */
 export const DEFAULT_STUN_SERVERS = [
@@ -48,10 +53,12 @@ export function turnRestCredential(sharedSecret, userPart, ttlSeconds = DEFAULT_
  */
 export function buildIceServers(settings, options) {
     const servers = [...DEFAULT_STUN_SERVERS];
-    const url = settings.url.trim();
-    if (!url) {
+    const turnUrls = parseTurnUrls(settings.url);
+    if (turnUrls.length === 0) {
         return servers;
     }
+    // A single URL stays a string, exactly as before, so a deployment that never sets more than one sees no change.
+    const url = turnUrls.length === 1 ? turnUrls[0] : turnUrls;
     if (settings.sharedSecret.trim()) {
         const userPart = settings.username.trim() || (options?.randomUserPart ?? (() => crypto.randomBytes(8).toString("hex")))();
         const { username, credential } = turnRestCredential(settings.sharedSecret.trim(), userPart, options?.ttlSeconds, options?.now);

package/dist/lib/util/IceServerUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"IceServerUtils.js","sourceRoot":"","sources":["../../../src/util/IceServerUtils.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAkBjC;uEACuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAA+B;IAC5D,EAAE,IAAI,EAAE,8BAA8B,EAAE;IACxC,EAAE,IAAI,EAAE,+BAA+B,EAAE;CAC5C,CAAC;AAEF;;iBAEiB;AACjB,MAAM,CAAC,MAAM,mCAAmC,GAAW,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAC9B,YAAoB,EACpB,QAAgB,EAChB,aAAqB,mCAAmC,EACxD,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,MAAM,GAAW,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAW,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;IACjD,MAAM,UAAU,GAAW,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrG,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC3B,QAAsB,EACtB,OAA4E;IAE5E,MAAM,OAAO,GAAsB,CAAC,GAAG,oBAAoB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAW,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAW,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/H,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"IceServerUtils.js","sourceRoot":"","sources":["../../../src/util/IceServerUtils.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAoBjC;kGACkG;AAClG,MAAM,UAAU,aAAa,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;uEACuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAA+B;IAC5D,EAAE,IAAI,EAAE,8BAA8B,EAAE;IACxC,EAAE,IAAI,EAAE,+BAA+B,EAAE;CAC5C,CAAC;AAEF;;iBAEiB;AACjB,MAAM,CAAC,MAAM,mCAAmC,GAAW,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAC9B,YAAoB,EACpB,QAAgB,EAChB,aAAqB,mCAAmC,EACxD,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,MAAM,GAAW,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAW,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;IACjD,MAAM,UAAU,GAAW,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrG,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC3B,QAAsB,EACtB,OAA4E;IAE5E,MAAM,OAAO,GAAsB,CAAC,GAAG,oBAAoB,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAa,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,gHAAgH;IAChH,MAAM,GAAG,GAAsB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9E,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAW,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/H,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/types/util/IceServerUtils.d.ts

@@ -1,17 +1,22 @@
 /** A single ICE server entry, matching the shape the browser `RTCPeerConnection` `iceServers` constructor option
  * expects (`RTCIceServer`), so the join response can be handed to it directly with no reshaping. */
 export interface IceServerConfig {
-    urls: string;
+    /** One URL, or several that share one credential (a TURN server's UDP and TLS addresses, say). */
+    urls: string | string[];
     username?: string;
     credential?: string;
 }
-/** The `mail:videoconf:turn:*` settings, exactly as configured (empty strings for anything unset). */
+/** The `mail:videoconf:turn:*` settings, exactly as configured (empty strings for anything unset). `url` may name several
+ * URLs, separated by commas and/or whitespace - see `parseTurnUrls()`. */
 export interface TurnSettings {
     url: string;
     username: string;
     credential: string;
     sharedSecret: string;
 }
+/** The URLs in a `mail:videoconf:turn:url` value: one, or several separated by commas and/or whitespace (for a TURN server
+ * listening on both UDP and TLS, `turn:host:3478,turns:host:5349`). Blank entries are dropped. */
+export declare function parseTurnUrls(value: string): string[];
 /** Always-available, free public STUN servers - discovery only, no media relay. Two independent providers, so a
  * call still has STUN available if one of them is ever unreachable. */
 export declare const DEFAULT_STUN_SERVERS: readonly IceServerConfig[];

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rapidmx/meet-plugin",
-    "version": "0.3.0",
+    "version": "0.4.0",
     "description": "RapidMX plugin that provides WebRTC video conferencing, joinable from a calendar invite or a shared link.",
     "repository": "https://github.com/RapidMX/meet-plugin.git",
     "author": "RapidREST <rapidrests@gmail.com>",
@@ -128,7 +128,7 @@
                     "label": "TURN server URL",
                     "type": "string",
                     "default": "",
-                    "help": "A turn: or turns: URL (e.g. turns:turn.example.com:5349) relaying media for a participant behind a restrictive NAT or firewall, for whom a direct peer-to-peer connection fails. Public STUN servers are used for everyone else and need no configuration. Leave empty to serve calls with STUN only - most calls will still connect, but some participants may not."
+                    "help": "A turn: or turns: URL (e.g. turns:turn.example.com:5349), or several separated by commas (turn:turn.example.com:3478,turns:turn.example.com:5349), relaying media for a participant behind a restrictive NAT or firewall, for whom a direct peer-to-peer connection fails. Public STUN servers are used for everyone else and need no configuration. Leave empty to serve calls with STUN only - most calls will still connect, but some participants may not."
                 },
                 {
                     "key": "mail:videoconf:turn:username",