@rapidmx/meet-plugin 0.6.0 → 0.8.1

package/dist/lib/util/RelayHub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RelayHub.js","sourceRoot":"","sources":["../../../src/util/RelayHub.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E,kGAAkG;AAClG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;mHAEmH;AACnH,MAAM,CAAC,MAAM,uBAAuB,GAAW,EAAE,GAAG,IAAI,CAAC;AAEzD;;;gDAGgD;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAW,EAAE,GAAG,IAAI,CAAC;AAE3D;;;8BAG8B;AAC9B,MAAM,CAAC,MAAM,+BAA+B,GAAW,IAAI,GAAG,IAAI,CAAC;AAEnE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,oHAAoH;AACpH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,oGAAoG;AACpG,MAAM,CAAC,MAAM,2BAA2B,GAAW,GAAG,GAAG,IAAI,CAAC;AAE9D,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAW,IAAI,GAAG,IAAI,CAAC;AAErD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAM,CAAC;AAEjD;;;mCAGmC;AACnC,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAK,CAAC;AAEhD,oGAAoG;AACpG,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAE7C;qDACqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AA8BvC;oEACoE;AACpE,MAAM,OAAO,iBAAiB;IAA9B;QACqB,cAAS,GAAuC,IAAI,GAAG,EAAE,CAAC;IAsB/E,CAAC;IApBU,SAAS,CAAC,MAAc,EAAE,QAA0B;QACvD,IAAI,GAAG,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE;YACR,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAEM,OAAO,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;QACxD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ;AAgCD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC1C,OAAO,CACH,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,MAAM,IAAI,CAAC;QAChB,IAAI,CAAC,MAAM,IAAI,qBAAqB;QACpC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CACzC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAW,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AACrG,CAAC;AAED,+FAA+F;AAC/F,MAAM,WAAW;IAIb,YAAY,GAAW;QAHf,WAAM,GAAW,iBAAiB,CAAC;QAIvC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IACpB,CAAC;IAED,gFAAgF;IACzE,IAAI,CAAC,MAAc,EAAE,GAAW;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,2BAA2B,CAAC,CAAC;QAClH,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAsBD,MAAM,UAAU;IAWZ,YACqB,GAAkB,EACnB,IAAU,EACV,GAAW,EACV,MAAmB;QAHnB,QAAG,GAAH,GAAG,CAAe;QACnB,SAAI,GAAJ,IAAI,CAAM;QACV,QAAG,GAAH,GAAG,CAAQ;QACV,WAAM,GAAN,MAAM,CAAa;QAbxC,+DAA+D;QACxD,WAAM,GAAgB,IAAI,GAAG,EAAE,CAAC;QAE/B,WAAM,GAAG,KAAK,CAAC;QAEN,WAAM,GAAgB,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3D,mBAAc,GAAG,CAAC,CAAC;QAQvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACzF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEM,OAAO,CAAC,IAAyB,EAAE,QAAiB;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAEM,KAAK;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACX,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;uCAEmC;IAC5B,KAAK,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,gHAAgH;IACzG,OAAO,CAAC,KAAa;QACxB,MAAM,IAAI,GAAG,CAAC,GAAY,EAAQ,EAAE;YAChC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,KAAM,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QACnH,CAAC,CAAC;QACF,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5B,IAAI,GAAG,EAAE,CAAC;oBACN,IAAI,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACL,CAAC;IAED,gHAAgH;IACxG,QAAQ,CAAC,IAAY;QACzB,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACL,uDAAuD;QAC3D,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,IAAY;QACrB,yFAAyF;QACzF,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO;QACX,CAAC;QACD,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,OAAO;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAY;QACtB,IAAI,OAAO,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACnC,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAY,OAAO,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC5B,OAAO;QACX,CAAC;QACD,sGAAsG;QACtG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,sBAAsB,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;IAEO,IAAI,CAAC,OAAY;QACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAgB,IAAI,GAAG,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;gBACtC,MAAM;YACV,CAAC;YACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,OAAe;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAClF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,GAAG,0BAA0B,EAAE,CAAC;gBAC/F,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;YAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,GAAG,0BAA0B,EAAE,CAAC;gBAC1D,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACjC,CAAC;YACD,OAAO;QACX,CAAC;QACD,gGAAgG;QAChG,MAAM,MAAM,GAAW,IAAI,CAAC,SAAU,CAAC;QACvC,MAAM,KAAK,GAAW,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;CACJ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,OAAO,QAAQ;IAcjB,YAAY,UAA2B,EAAE;QAbzC,0CAA0C;QAC1B,UAAK,GAAe;YAChC,eAAe,EAAE,CAAC;YAClB,yBAAyB,EAAE,CAAC;YAC5B,mBAAmB,EAAE,CAAC;YACtB,oBAAoB,EAAE,CAAC;SAC1B,CAAC;QAIe,UAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;QAIlD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,uBAAuB;YACnE,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;YACvD,MAAM,EAAE,CAAC,IAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;SAClD,CAAC;IACN,CAAC;IAED,mEAAmE;IACnE,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAC1D,WAAW,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,MAAc,EAAE,GAAW,EAAE,MAAmB;QAC1D,IAAI,IAAI,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,IAAI,EAAE,CAAC;YACP,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,0BAA0B,EAAE,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACjC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;oBACnB,KAAK,EAAE,CAAC;gBACZ,CAAC;YACL,CAAC;YACD,IAAI,KAAK,IAAI,yBAAyB,EAAE,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC5C,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG;gBACH,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aAClG,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,uDAAuD;IAC/C,MAAM,CAAC,IAAgB;QAC3B,MAAM,IAAI,GAAS,IAAI,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IAED;iHAC6G;IACrG,OAAO,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;QACzD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/types/index.d.ts

@@ -15,6 +15,8 @@ export * from "./models/types.js";
 export * from "./util/BookingIntegrationUtils.js";
 export * from "./util/IceServerUtils.js";
 export * from "./util/PublicUrlUtils.js";
+export * from "./util/RedisRelayBus.js";
+export * from "./util/RelayHub.js";
 export * from "./util/RouteAccessUtils.js";
 export * from "./util/TokenUtils.js";
 export * from "./routes/BaseVideoMeetingRoute.js";

package/dist/types/routes/BaseVideoMeetingRoute.d.ts

@@ -98,6 +98,13 @@ export interface VideoMeetingJoinResult {
     /** ISO 8601 instant `token` expires at. Present only when `authenticated` is `false`, exactly when `token`
      * itself is. */
     expiresAt?: string;
+    /** Whether the last-resort WebSocket media relay (`relay()`, the third tier after a direct WebRTC connection and
+     * TURN) is enabled on this server (`mail:videoconf:relay:enabled`). A client only falls back to it when this is
+     * `true`; connecting to a disabled relay is refused anyway. */
+    relayEnabled: boolean;
+    /** Where the video filters' machine-learning runtime and models are hosted, when the administrator hosts them
+     * (`mail:videoconf:effects:assets_url`). Omitted when unset, in which case clients use the public CDNs. */
+    effectsAssetsUrl?: string;
 }
 /**
  * The owner's management of their own `VideoMeeting`s (JWT-authenticated, mailbox-ACL-checked exactly like any
@@ -222,6 +229,27 @@ export interface VideoMeetingJoinResult {
  * now run every loaded meeting through `withJoinUrls()` - the exact same computation `create()` already did,
  * applied uniformly on read instead of only once on write.
  *
+ * ## The last-resort WebSocket media relay (`relay()`)
+ *
+ * Clients connect peer-to-peer over WebRTC, fall back to TURN, and as a third and last resort (a corporate firewall
+ * that allows neither) send media over a WebSocket this server proxies: `relay()`, at `/relay/:id` under the
+ * subclass's own base path (`/api/mail/video-meetings/relay/<meetingUid>`). It is a fan-out of opaque binary
+ * frames between the participants of one meeting - the wire protocol and limits are documented on `RelayHub`, which
+ * does all of the relaying; this class only authorizes a socket and hands it over, and picks how frames travel
+ * between server replicas: when the deployment configures `datastores:events` (the Redis the framework's push system
+ * already uses) frames cross replicas over Redis pub/sub (`RedisRelayBus`), so participants connected to different
+ * replicas reach each other; without it they travel in-process only, with a one-time warning at start-up that relay
+ * does not cross replicas.
+ *
+ * Authorization is the very grant `join()`'s `ensureChannelGrant()` already gives every participant, guest or real:
+ * `READ` and `CREATE` on the meeting's uid, checked with the caller's trusted roles stripped exactly as
+ * `MailPushRoute` does for `/push`, so a trusted administrator with no grant is refused just like there. The meeting must exist and be neither
+ * cancelled nor ended. Every refusal closes the socket with code 1008; a missing meeting and a missing grant are
+ * indistinguishable ("Not permitted."), so a caller learns nothing about meetings they can't join. The whole
+ * thing can be turned off with `mail:videoconf:relay:enabled` (default `true`; `false`/`"false"`/`0`/`"0"` disable
+ * it): a disabled relay closes every socket with 1008 "Relay disabled." and `join()` reports `relayEnabled: false`, so
+ * clients don't try it.
+ *
  * ## Other known limitations
  *
  * **`VideoMeetingInvitee.joinToken` never expires** and has no GC job - identical tradeoff to `Booking.manageToken`.
@@ -261,7 +289,22 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
     private turnUsername;
     private turnCredential;
     private turnSharedSecret;
+    /** Whether `relay()` accepts sockets, and `join()` advertises it - read through `isRelayEnabled()`, since a value
+     * set from an environment variable arrives as a string. */
+    private relayEnabledSetting;
+    /** The base URL the video filters' models are hosted under, when not on the public CDNs - read through
+     * `parseEffectsAssetsUrl()`, which drops anything that isn't a plain URL or path. */
+    private effectsAssetsUrlSetting;
+    /** The deployment's `events` datastore (`datastores:events`) - the Redis the framework's push system publishes
+     * across replicas on; `null` when the deployment has none. Decides how `initRelayBus()` carries relay frames. */
+    private eventsConfig;
     private logger;
+    /** The rooms of this process's relay sockets. One per route instance. It starts out on an in-process bus, which
+     * is what a route that was never initialized (a test's) keeps; `initRelayBus()` swaps in a hub on a Redis bus
+     * when the deployment has one, before any socket can attach. Its socket caps are per server replica. */
+    private relayHub;
+    /** The Redis bus `relayHub` runs on, when there is one. */
+    private relayBus?;
     /**
      * Exposes the `@Model(...)`-supplied entity class as an instance property so `@Transactional()` on
      * `persistMeeting()` can resolve which datasource to open a transaction against - identical to
@@ -269,6 +312,17 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      * `ModelRoute`, which defines the same getter for its own subclasses).
      */
     get modelClass(): any;
+    /**
+     * Picks how relay frames travel between server replicas, once the route is created: over Redis pub/sub
+     * (`RedisRelayBus`) when `datastores:events` is configured, else in-process only with a single warning that
+     * participants on different replicas cannot relay to each other. A Redis bus that cannot be created (the `redis`
+     * package is missing, an unusable URL) falls back the same way, with the error logged. Runs before the route
+     * serves anything, so no socket is attached to the hub it replaces.
+     */
+    initRelayBus(): Promise<void>;
+    /** Disconnects the Redis relay bus, if there is one, when the object factory destroys the route. (The factory
+     * runs one destroy method per object: a subclass declaring its own `@Destroy` must call this one.) */
+    destroyRelayBus(): void;
     private init;
     /** Rejects a `403` unless `user` (with its trusted roles stripped - see `util/RouteAccessUtils.ts`) holds
      * `action` on `mailboxUid`, by ownership or an explicit ACL grant. */
@@ -380,4 +434,29 @@ export declare abstract class BaseVideoMeetingRoute<VM extends VideoMeeting, VMI
      * orphaned meeting should still be joinable, just without a host name to show). */
     private hostDisplayName;
     join(token: string, user?: JWTUser): Promise<VideoMeetingJoinResult>;
+    /** Whether the WebSocket media relay is enabled - `mail:videoconf:relay:enabled`, see `parseRelayEnabled()`. */
+    private isRelayEnabled;
+    /**
+     * Decides whether `user` may open a relay socket to meeting `id`: the relay must be enabled, `user` must hold BOTH
+     * `READ` and `CREATE` on the meeting's uid - exactly what `ensureChannelGrant()` gives a joined participant, and
+     * what `/push` demands to subscribe and publish - and the meeting must exist and be neither cancelled nor ended.
+     * Returns the reason to close the socket with, or `undefined` when permitted.
+     *
+     * `hasPermission()` gets `user` with its trusted roles stripped (`stripTrustedRoles()`), exactly as
+     * `@rapidmx/restapi`'s `MailPushRoute` does for the same grant on `/push`: without it the framework's "trusted
+     * users always have permission" rule would let any administrator relay in any meeting they hold no grant on, so
+     * a trusted administrator with no grant is refused here exactly as `/push` refuses them. Every authorization
+     * failure gives the same `RELAY_NOT_PERMITTED`, whether the grant, the meeting or its state is what's missing.
+     */
+    private authorizeRelay;
+    /**
+     * The meeting uid a relay socket's URL names. `@Param("id")` is filled in by the Bun router, but NOT by the uWS
+     * router this framework actually serves with: it never populates `req.params` for a WebSocket upgrade (a
+     * `@WebSocket()` route has, so far, never had a path parameter - `BasePushRoute.connect()` has none). So when the
+     * decorated argument is empty this reads the last segment of the request path instead, which the
+     * `/relay/:id` pattern guarantees is the id (the framework also registers the trailing-slash form; the path
+     * never carries the query string). Returns `undefined` when there is none or it isn't valid percent-encoding.
+     */
+    private relayMeetingId;
+    relay(paramId: string | undefined, req: HttpRequest, sock: any, user?: JWTUser): Promise<void>;
 }

package/dist/types/util/EffectsUtils.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Reads the `mail:videoconf:effects:assets_url` setting: the base URL an administrator hosts the video filters'
+ * machine-learning runtime and models under, in place of the public CDNs they are otherwise fetched from. It is
+ * handed to every participant's browser, so only an absolute `http(s)` URL or a path on this server is accepted;
+ * anything else (a `javascript:` URL, a typo, nothing at all) is treated as unset. A trailing slash is dropped.
+ *
+ * @param value The setting as configured.
+ * @returns The URL to hand to clients, or `undefined` to have them use the defaults.
+ */
+export declare function parseEffectsAssetsUrl(value: unknown): string | undefined;

package/dist/types/util/IceServerUtils.d.ts

@@ -17,6 +17,17 @@ export interface TurnSettings {
 /** The URLs in a `mail:videoconf:turn:url` value: one, or several separated by commas and/or whitespace (for a TURN server
  * listening on both UDP and TLS, `turn:host:3478,turns:host:5349`). Blank entries are dropped. */
 export declare function parseTurnUrls(value: string): string[];
+/**
+ * Adds the TCP flavour of every plain `turn:` URL that does not name a transport itself. A browser given
+ * `turn:host:3478` speaks only UDP to the TURN server, and UDP is precisely what a restrictive firewall blocks while
+ * still letting outbound TCP through - so a client behind one never reaches a TURN server that was listening on TCP
+ * all along. Offering both lets ICE try UDP first and settle for TCP when UDP goes nowhere. `turns:` URLs are TCP
+ * (TLS) already, and a URL with an explicit `transport=` is the operator's own choice and is left exactly as given.
+ *
+ * @param urls The URLs from `parseTurnUrls()`, in the order the operator wrote them.
+ * @returns The same URLs, each plain `turn:` one followed by its `?transport=tcp` twin, without duplicates.
+ */
+export declare function withTcpFallback(urls: string[]): string[];
 /** Always-available, free public STUN servers - discovery only, no media relay. Two independent providers, so a
  * call still has STUN available if one of them is ever unreachable. */
 export declare const DEFAULT_STUN_SERVERS: readonly IceServerConfig[];
@@ -44,7 +55,7 @@ export declare function turnRestCredential(sharedSecret: string, userPart: strin
 };
 /**
  * Builds the full ICE server list for a join response: the hardcoded public STUN servers, plus a TURN entry when
- * `settings.url` is configured. When a `sharedSecret` is also configured, the TURN entry carries a fresh,
+ * `settings.url` is configured (see `withTcpFallback()` for the URLs it carries). When a `sharedSecret` is also configured, the TURN entry carries a fresh,
  * time-limited credential (`turnRestCredential()`) rather than the static `username`/`credential` pair, which is
  * used verbatim only when no shared secret is set. A TURN url with neither a shared secret nor a static
  * credential is still included with no credentials at all - some self-hosted TURN servers are deliberately run

package/dist/types/util/RedisRelayBus.d.ts

@@ -0,0 +1,131 @@
+import type { RelayBus, RelayBusListener } from "./RelayHub.js";
+/** The prefix of the Redis pub/sub channel a room's frames travel on: `videoconf:relay:<roomId>`. */
+export declare const REDIS_RELAY_CHANNEL_PREFIX = "videoconf:relay:";
+/** The length, in bytes, of the random id every `RedisRelayBus` stamps on what it publishes. */
+export declare const REDIS_RELAY_ORIGIN_BYTES = 16;
+/** The least time between two `warn` messages about failing Redis commands; the failures in between are logged at
+ * `debug`, so a Redis outage cannot flood the log at the rate media frames arrive. */
+export declare const REDIS_RELAY_WARN_INTERVAL_MS = 30000;
+/** The channel a room's frames are published to. */
+export declare function redisRelayChannel(roomId: string): string;
+/** The logger a `RedisRelayBus` writes to - the framework's logger satisfies it. */
+export interface RedisRelayBusLogger {
+    debug(message: string): void;
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+}
+export interface RedisRelayBusOptions {
+    /** The `datastores:events` Redis URL. */
+    url: string;
+    logger: RedisRelayBusLogger;
+}
+/** What the bus counts, for tests and diagnostics. */
+export interface RedisRelayBusStats {
+    /** Frames published to Redis. */
+    published: number;
+    /** Frames not published because the publisher was not connected (or the sender id cannot be encoded). */
+    publishSkipped: number;
+    /** Redis commands (publish, subscribe, unsubscribe, connect) that failed. */
+    failures: number;
+    /** Messages received from Redis and handed to local listeners. */
+    received: number;
+    /** Messages received from Redis and ignored: this bus's own, garbled, or for a room with no local listener. */
+    receivedDropped: number;
+}
+/**
+ * A `RelayBus` that also carries frames between server replicas over Redis pub/sub, so participants whose relay
+ * sockets landed on different replicas still reach each other. The Redis is the deployment's `datastores:events` one,
+ * the same the framework's push system (`BasePushRoute`) uses across replicas.
+ *
+ * ## How
+ *
+ * The bus owns exactly two Redis clients for the whole process, however many sockets and rooms there are: a
+ * publisher, and one shared subscriber (a client in subscriber mode cannot publish). Both come from
+ * `importRedis()` and `attachRedisErrorHandler()` of `@rapidrest/service-core`, exactly as `BasePushRoute` obtains its
+ * clients - see `connect()`.
+ *
+ * Each room has a channel, `videoconf:relay:<roomId>`. The bus counts the local listeners of every room: the first
+ * one to arrive makes it SUBSCRIBE and the last one to leave makes it UNSUBSCRIBE, so a replica receives only the
+ * rooms it has sockets in. Subscriptions use the client's BUFFER mode, so media bytes are never decoded as text.
+ *
+ * `publish()` delivers to this process's listeners synchronously, exactly as `InProcessRelayBus` does - local
+ * delivery never goes through Redis - and, when the publisher is connected, also publishes the frame to the room's
+ * channel without waiting for it. Every message carries the id of the bus that published it and a bus ignores its own,
+ * so nothing is delivered twice on the replica of origin, while every other replica delivers it to its own listeners.
+ *
+ * ## Wire format of a Redis message
+ *
+ * `[16 bytes: origin bus id][1 byte: N][N bytes: the sender's peer id, UTF-8][the frame]`, where `frame` is what the
+ * `RelayHub` gave `publish()` (its own `[sender length][sender][payload]` header included). The origin id is random
+ * per bus instance. A message that is shorter than that, whose length byte is 0 or overruns it, or that carries no
+ * frame, is dropped; parsing never throws.
+ *
+ * ## Failure behaviour
+ *
+ * Redis being down or slow never affects local delivery and never throws into the hub: `publish()` is fire-and-forget,
+ * is skipped outright while the publisher is not connected (its offline queue is disabled, so an outage cannot pile
+ * frames up in memory), and every failed command is caught and counted. Failures are logged at `warn` at most once per
+ * `REDIS_RELAY_WARN_INTERVAL_MS` and at `debug` otherwise; connection errors themselves are logged by
+ * `attachRedisErrorHandler()` (one error per outage). The clients keep node-redis's default reconnect strategy
+ * (retry forever with backoff), and on reconnect node-redis re-issues SUBSCRIBE for every channel the subscriber held
+ * (`resubscribe()` in the client's socket initiator), so the bus needs no re-subscribe logic of its own - relay
+ * between replicas resumes by itself when Redis comes back, and frames sent during the outage are simply lost, which
+ * media tolerates. A bus used before `connect()`, after `close()`, or whose Redis is unavailable behaves as an
+ * `InProcessRelayBus`.
+ *
+ * ## Bandwidth
+ *
+ * Every relayed frame is published once, whatever the number of receivers, and Redis delivers it to every replica
+ * subscribed to that room - including replicas whose sockets there do not `want` the sender at all (the hub filters
+ * after the bus). A room's cross-replica traffic is therefore roughly its total relayed upload times the number of
+ * OTHER replicas holding sockets of it, and each of those replicas' subscribers reads all of it. A single-replica
+ * room costs a publish per frame and no receiving. Redis pub/sub buffers nothing for a slow subscriber beyond the
+ * server's client-output-buffer limit for pub/sub, after which Redis drops that connection (the client then
+ * reconnects and resubscribes).
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare class RedisRelayBus implements RelayBus {
+    private readonly options;
+    /** What the bus has done so far. */
+    readonly stats: RedisRelayBusStats;
+    private readonly id;
+    private readonly rooms;
+    private publisher?;
+    private subscriber?;
+    private lastWarn;
+    constructor(options: RedisRelayBusOptions);
+    /** Whether frames are currently being published to Redis: `connect()` was called, the bus is not closed and the
+     * publisher's connection is up. */
+    get connected(): boolean;
+    /**
+     * Creates the publisher and the shared subscriber and starts connecting them, then returns without waiting for
+     * either connection - a Redis that is down at start-up delays cross-replica relay, not the server, and the
+     * clients keep retrying. Rooms subscribed to before this call are not caught up (the route calls it before it
+     * exposes the bus). Does nothing when already connected. Throws when the `redis` package is not installed or the
+     * URL is unusable; nothing is left open then.
+     */
+    connect(): Promise<void>;
+    /**
+     * Shuts the bus down: destroys both clients (which ends their connections, and with them every subscription) and
+     * stops publishing. Local delivery keeps working, as after a failed `connect()`. Safe to call repeatedly.
+     * Nothing is unsubscribed one by one: the connection going away does that server-side, and an UNSUBSCRIBE could
+     * only stall behind a Redis that is down.
+     */
+    close(): void;
+    subscribe(roomId: string, listener: RelayBusListener): () => void;
+    publish(roomId: string, sender: string, frame: Buffer): void;
+    private publishToRedis;
+    private redisSubscribe;
+    private redisUnsubscribe;
+    /** Handles one message of a room's channel: parses it defensively and hands its frame to the local listeners,
+     * unless this very bus published it. Never throws - it runs inside the Redis client's own message dispatch. */
+    private receive;
+    /** Splits a Redis message into its sender and frame; `undefined` for a garbled one or this bus's own. */
+    private parse;
+    /** Runs a Redis command without waiting for it: a failure, thrown or rejected, is only counted and logged. */
+    private run;
+    /** Counts a failure and logs it - at `warn` once per `REDIS_RELAY_WARN_INTERVAL_MS`, at `debug` in between. */
+    private report;
+}

package/dist/types/util/RelayHub.d.ts

@@ -0,0 +1,188 @@
+/** The version of the relay wire protocol this module implements - the `v` of `hello`/`ready`. */
+export declare const RELAY_PROTOCOL_VERSION = 1;
+/** The largest binary payload (in bytes, excluding the sender header the server adds) a socket may send; anything
+ * larger or empty is dropped. Matches `@rapidrest/service-core`'s uWS `DEFAULT_WS_OPTIONS.maxPayloadLength` (16 KiB),
+ * which this framework's route registration cannot raise - a larger message closes the socket at the transport. */
+export declare const RELAY_MAX_PAYLOAD_BYTES: number;
+/** The larger message limit the relay route asks the framework for when the installed `@rapidrest/service-core` lets a
+ * `@WebSocket()` route set one (its 2.4.0 and later): a video key frame then fits in one message instead of several,
+ * with far less fragmenting and reassembly for the client to get wrong. The hub advertises whichever limit applies to
+ * the client in `ready` (`maxMessageBytes`). */
+export declare const RELAY_LARGE_PAYLOAD_BYTES: number;
+/** How many bytes the framework may hold unsent for one relay socket before it drops further messages to it, when the
+ * installed `@rapidrest/service-core` lets a route set that (its default, 64 KiB, is smaller than one key frame's worth
+ * of headroom and made a briefly slow receiver lose frames constantly). One MiB is roughly two seconds of a 350 kbps
+ * video stream plus audio. */
+export declare const RELAY_WS_MAX_BACKPRESSURE_BYTES: number;
+/** The most sockets (registered or still awaiting their `hello`) one room holds at once. */
+export declare const RELAY_MAX_SOCKETS_PER_ROOM = 16;
+/** The most sockets one authenticated uid may hold in one room at once (several tabs or devices of one account). */
+export declare const RELAY_MAX_SOCKETS_PER_UID = 4;
+/** Sustained inbound binary budget per socket, in bytes per second (a token bucket refill rate). */
+export declare const RELAY_RATE_BYTES_PER_SECOND: number;
+/** Burst allowance of a socket's token bucket, in bytes - also the bucket's capacity. */
+export declare const RELAY_BURST_BYTES: number;
+/** How long a socket may stay over budget continuously before it is closed with 1008 "Too much data.". */
+export declare const RELAY_OVER_BUDGET_CLOSE_MS = 10000;
+/** Two over-budget drops further apart than this are separate episodes: a socket is "continuously" over budget only
+ * while it keeps being dropped at least this often. A sender that exceeds its budget by a hair (one drop every few
+ * seconds) is throttled but never closed; one that keeps sending well past it is closed after
+ * `RELAY_OVER_BUDGET_CLOSE_MS`. */
+export declare const RELAY_OVER_BUDGET_GRACE_MS = 1000;
+/** How long a new socket has to send its `hello` before it is closed with 1008 "Hello timeout.". */
+export declare const RELAY_HELLO_TIMEOUT_MS = 10000;
+/** The longest peer id, in characters. Its UTF-8 encoding must also fit in the one length byte of a forwarded frame
+ * (255), which `isValidRelayPeer()` enforces too. */
+export declare const RELAY_MAX_PEER_LENGTH = 128;
+/** The most peers one `want` message may name; further valid entries are ignored. */
+export declare const RELAY_MAX_WANT_PEERS = 32;
+/** The minimal socket surface the hub needs - satisfied by the framework's uWS/Bun/`ws` sockets and by a trivial
+ * fake in a test. */
+export interface RelaySocket {
+    /** Sends a text or binary message. `cb` is called with an error when the message could not be sent - for the
+     * framework's uWS shim that includes "dropped because the receiver's backpressure limit was reached". */
+    send(data: string | Uint8Array, cb?: (err?: Error | null) => void): void;
+    close(code?: number, reason?: string): void;
+}
+/** Receives every frame published to a room, whichever replica published it. */
+export type RelayBusListener = (sender: string, frame: Buffer) => void;
+/**
+ * **The seam between sockets.** How a frame gets from the socket that sent it to the sockets that want it. The hub
+ * never delivers directly: it `publish()`es the stamped frame and delivers whatever its own `subscribe()`d listener
+ * receives, so a bus that also carries frames between server replicas (a Redis pub/sub channel per room, say) makes
+ * the whole relay multi-replica without touching the hub. `InProcessRelayBus` delivers within this process only;
+ * `RedisRelayBus` (`util/RedisRelayBus.ts`) also crosses server replicas over Redis pub/sub.
+ */
+export interface RelayBus {
+    /** Registers `listener` for `roomId`'s frames - including frames this very process publishes - and returns a
+     * function that removes it. */
+    subscribe(roomId: string, listener: RelayBusListener): () => void;
+    /** Publishes `frame` (the complete forwarded message, sender header included) that `sender` (a peer id) sent
+     * to `roomId`. */
+    publish(roomId: string, sender: string, frame: Buffer): void;
+}
+/** A `RelayBus` that delivers synchronously to the listeners of this one process - see `RelayHub`'s doc comment for
+ * what that means for a deployment with several server replicas. */
+export declare class InProcessRelayBus implements RelayBus {
+    private readonly listeners;
+    subscribe(roomId: string, listener: RelayBusListener): () => void;
+    publish(roomId: string, sender: string, frame: Buffer): void;
+}
+/** What the hub tells a caller about one socket it accepted; the caller feeds it the socket's events. */
+export interface RelayConnection {
+    /** Handles one message received from the socket. Never throws, whatever the payload. */
+    message(data: string | Uint8Array, isBinary: boolean): void;
+    /** Handles the socket having closed. Idempotent, and safe after the hub itself closed the socket. */
+    close(): void;
+}
+/** Counters of what the hub did with frames - for tests and diagnostics. */
+export interface RelayStats {
+    /** Frames handed to a receiver's `send()`, including any of them it then reported as dropped. */
+    framesForwarded: number;
+    /** Frames a receiver's `send()` reported as dropped (uWS backpressure) or threw on - a subset of the above,
+     * apart from a throw, which is not counted as forwarded. */
+    framesDroppedBackpressure: number;
+    /** Frames dropped because their sender was over its token-bucket budget. */
+    framesDroppedBudget: number;
+    /** Frames dropped for being empty, oversized, or sent before `hello`. */
+    framesDroppedInvalid: number;
+}
+export interface RelayHubOptions {
+    /** Where frames travel between sockets. Defaults to a new `InProcessRelayBus`. */
+    bus?: RelayBus;
+    logger?: {
+        debug(message: string): void;
+    };
+    /** The largest binary message (and text message) a socket may send, and what `ready` tells the client. Defaults to
+     * `RELAY_MAX_PAYLOAD_BYTES`; the route sets `RELAY_LARGE_PAYLOAD_BYTES` when the framework was asked for that much. */
+    maxPayloadBytes?: number;
+}
+/**
+ * Returns whether `peer` is a well-formed relay peer id: a string of 1 to `RELAY_MAX_PEER_LENGTH` characters with no
+ * whitespace, separator, control or other invisible (Unicode category C or Z) character, whose UTF-8 encoding fits in
+ * the single length byte of a forwarded frame.
+ */
+export declare function isValidRelayPeer(peer: unknown): peer is string;
+/**
+ * Reads the `mail:videoconf:relay:enabled` setting. Environment-variable config arrives as a string ("true", "false",
+ * "0", "1") and nconf may parse it into a boolean or a number, so all of those are accepted; `false`, `0`, `"false"`
+ * and `"0"` (case-insensitive, trimmed) disable the relay and anything else - including an unset or unrecognizable
+ * value - leaves it enabled, the default.
+ */
+export declare function parseRelayEnabled(value: unknown): boolean;
+/**
+ * A fan-out relay of opaque binary frames between the participants of a room (one meeting) - the last-resort tier
+ * for participants whose network allows neither a direct WebRTC connection nor a TURN relay, only a WebSocket to this
+ * server. It knows nothing about meetings, users, HTTP or any framework: a caller authorizes a socket however it
+ * likes, hands it to `attach()` and feeds the returned `RelayConnection` the socket's `message` and `close` events.
+ *
+ * ## Wire protocol (version 1)
+ *
+ * Client to server, the first message must be a text message
+ * `{"op":"hello","v":1,"peer":"<peerId>"}`, sent within `RELAY_HELLO_TIMEOUT_MS`. `peer` is the caller's uid (the `uid`
+ * given to `attach()`) or starts with `<uid>~` - a per-tab or per-device id - and passes `isValidRelayPeer()`. Anything
+ * else closes the socket with 1008 "Invalid peer."; a wrong `v` closes it with 1008 "Unsupported version.". The server
+ * answers with the text message `{"op":"ready","v":1,"maxMessageBytes":<the limit below>}`. A second socket registering an already registered peer in the
+ * same room replaces the older one, which is closed with 1008 "Replaced.".
+ *
+ * After that, `{"op":"want","peers":["<peerId>", ...]}` REPLACES the socket's interest set with the valid entries, at
+ * most `RELAY_MAX_WANT_PEERS` of them; every other or malformed text message is ignored. Binary messages of 1 to
+ * `RelayHubOptions.maxPayloadBytes` bytes (`RELAY_MAX_PAYLOAD_BYTES` unless the route asked for more; opaque to the hub) are forwarded to every other socket of the room whose interest
+ * set contains the sender's peer id; binary before `hello`, empty and oversized messages are dropped.
+ *
+ * Server to client: `{"op":"ready","v":1,"maxMessageBytes":N}` once, then binary messages `[1 byte: UTF-8 length N of the sender's peer
+ * id][N bytes: the sender's peer id][the original payload]`. The sender is stamped by the hub from the `hello`,
+ * never trusted from the payload.
+ *
+ * ## Limits
+ *
+ * At most `RELAY_MAX_SOCKETS_PER_ROOM` sockets per room and `RELAY_MAX_SOCKETS_PER_UID` per uid per room, counting
+ * a socket from `attach()` on (a socket refused for either is closed with 1008 "Room full." / "Too many
+ * connections."). Each socket's inbound binary traffic is metered by a token bucket of `RELAY_RATE_BYTES_PER_SECOND`
+ * sustained with a `RELAY_BURST_BYTES` burst: an over-budget message is dropped silently, and a socket kept over
+ * budget for more than `RELAY_OVER_BUDGET_CLOSE_MS` (see `RELAY_OVER_BUDGET_GRACE_MS`) is closed with 1008 "Too
+ * much data.". A receiver whose `send()` reports the message as dropped (uWS backpressure) simply misses that
+ * frame - counted in `stats`, never queued or retried. Sockets and rooms are released when their socket closes; an
+ * empty room is deleted.
+ *
+ * ## Replicas
+ *
+ * The transport between sockets is the `RelayBus` given to the constructor, `InProcessRelayBus` by default, which
+ * delivers only within this process: **with several server replicas, participants whose sockets landed on different
+ * replicas cannot relay to each other** - a room exists independently on each replica and its members see only the
+ * members connected to the same one. Give the hub a `RedisRelayBus` and frames cross replicas over Redis pub/sub (one
+ * channel per room; `BaseVideoMeetingRoute` does that whenever `datastores:events` is configured); nothing else in the
+ * hub changes for it.
+ *
+ * Every limit above is enforced **per replica**, because a hub only knows its own sockets. A room's capacity across
+ * replicas is therefore up to `replicas x RELAY_MAX_SOCKETS_PER_ROOM` sockets (and `replicas x
+ * RELAY_MAX_SOCKETS_PER_UID` for one uid) in the worst case, where the load balancer spreads a meeting's sockets
+ * evenly. A peer id that registers on two replicas is not detected as a duplicate either (the "Replaced." rule is
+ * per replica), and each frame reaches every socket that wants its sender on every replica.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare class RelayHub {
+    /** What has happened to frames so far. */
+    readonly stats: RelayStats;
+    private readonly bus;
+    private readonly logger?;
+    private readonly rooms;
+    private readonly env;
+    constructor(options?: RelayHubOptions);
+    /** The number of rooms that currently hold at least one socket. */
+    get roomCount(): number;
+    /** The number of sockets in `roomId` (0 for an unknown room). */
+    socketCount(roomId: string): number;
+    /**
+     * Accepts an already-authorized `socket` of `uid` into room `roomId`, or refuses it (closing it with 1008) when
+     * the room or the uid is at its limit. Returns the connection to feed the socket's events to, or `undefined`
+     * when refused.
+     */
+    attach(roomId: string, uid: string, socket: RelaySocket): RelayConnection | undefined;
+    /** Forgets `conn`, and its room once that is empty. */
+    private remove;
+    /** Hands `frame` from `sender` to every other socket of room `roomId` that wants it. A bus that delivers
+     * asynchronously (across replicas) may deliver a frame for a room that has just emptied; that is ignored. */
+    private deliver;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rapidmx/meet-plugin",
-    "version": "0.6.0",
+    "version": "0.8.1",
     "description": "RapidMX plugin that provides WebRTC video conferencing, joinable from a calendar invite or a shared link.",
     "repository": "https://github.com/rapidmx/meet-plugin.git",
     "author": "RapidREST <rapidrests@gmail.com>",
@@ -21,10 +21,12 @@
         "release": "npx @rapidrest/cli release",
         "prepublish": "yarn build"
     },
+    "dependencies": {
+        "@mediapipe/tasks-vision": "^1.0.1"
+    },
     "peerDependencies": {
-        "@rapidmx/react-shared": ">=0.19.0 <1",
         "@rapidmx/restapi": ">=0.23.0 <1",
-        "@rapidmx/web-client": ">=0.17.0 <1",
+        "@rapidmx/web-client": ">=0.22.0 <1",
         "@rapidrest/core": "5.x",
         "@rapidrest/react": ">=2.1.0 <3",
         "@rapidrest/service-core": "2.x",
@@ -32,12 +34,11 @@
         "react-dom": "19.x"
     },
     "devDependencies": {
-        "@rapidmx/react-shared": "^0.20.0",
-        "@rapidmx/restapi": "^0.24.0",
-        "@rapidmx/web-client": "^0.19.0",
+        "@rapidmx/restapi": "^0.25.1",
+        "@rapidmx/web-client": "^0.22.0",
         "@rapidrest/core": "^6.0.0",
         "@rapidrest/react": "^2.1.0",
-        "@rapidrest/service-core": "^2.3.0",
+        "@rapidrest/service-core": "^2.4.0",
         "@swc/core": "^1.16.2",
         "@testing-library/dom": "^10.4.1",
         "@testing-library/jest-dom": "^7.0.1",
@@ -79,9 +80,8 @@
         "winston": "^3.19.0"
     },
     "resolutions": {
-        "@rapidmx/react-shared": "^0.19.0",
         "@rapidmx/restapi": "^0.23.0",
-        "@rapidmx/web-client": "^0.17.0"
+        "@rapidmx/web-client": "^0.22.0"
     },
     "packageManager": "yarn@4.5.3",
     "engines": {
@@ -114,7 +114,7 @@
     "rapidmx": {
         "plugin": {
             "apiVersion": 1,
-            "displayName": "Video Conferencing",
+            "displayName": "Meet",
             "description": "Private and public WebRTC video meetings. A private meeting mints one link per invitee for a calendar invite's location and body; a public meeting shares a single link. Joining needs no account - a guest picks a name, checks their camera and microphone, and enters.",
             "mailboxScopedData": true,
             "settings": [
@@ -130,7 +130,7 @@
                     "label": "TURN server URL",
                     "type": "string",
                     "default": "",
-                    "help": "A turn: or turns: URL (e.g. turns:turn.example.com:5349), or several separated by commas (turn:turn.example.com:3478,turns:turn.example.com:5349), relaying media for a participant behind a restrictive NAT or firewall, for whom a direct peer-to-peer connection fails. Public STUN servers are used for everyone else and need no configuration. Leave empty to serve calls with STUN only - most calls will still connect, but some participants may not."
+                    "help": "A turn: or turns: URL (e.g. turns:turn.example.com:5349), or several separated by commas (turn:turn.example.com:3478,turns:turn.example.com:5349), relaying media for a participant behind a restrictive NAT or firewall, for whom a direct peer-to-peer connection fails. A plain turn: address is offered over both UDP and TCP (a network that blocks UDP can still use the TCP one); add ?transport=udp or ?transport=tcp to an address to offer only that. Public STUN servers are used for everyone else and need no configuration. Leave empty to serve calls with STUN only - most calls will still connect, but some participants may not."
                 },
                 {
                     "key": "mail:videoconf:turn:username",
@@ -152,6 +152,20 @@
                     "type": "string",
                     "default": "",
                     "help": "coturn's static-auth-secret, if configured. When set, every join mints its own short-lived username/credential pair (an HMAC-SHA1 of a timestamp with this secret) instead of handing out one permanent password to every participant - the recommended setup. Leave empty to use the static username/credential above instead."
+                },
+                {
+                    "key": "mail:videoconf:relay:enabled",
+                    "label": "WebSocket media relay",
+                    "type": "boolean",
+                    "default": true,
+                    "help": "The last-resort tier for a participant whose network blocks both a direct connection and TURN (e.g. a corporate firewall that only allows web traffic): their media travels over a WebSocket this server relays between the meeting's participants. Turn off to serve calls with direct and TURN connections only. With several server replicas it connects participants across them through the same Redis the push system uses; without that Redis it works only between participants on the same replica."
+                },
+                {
+                    "key": "mail:videoconf:effects:assets_url",
+                    "label": "Video effects assets URL",
+                    "type": "string",
+                    "default": "",
+                    "help": "Video effects (background blur, custom backgrounds, face accessories) run a small machine-learning model in the participant's browser. By default the model files and their WebAssembly runtime are downloaded, only when a participant turns such an effect on, from cdn.jsdelivr.net and storage.googleapis.com. To serve them yourself instead, set this to the base URL (https://files.example.com/meet-effects, or a path on this server) of a directory holding wasm/ (the contents of the @mediapipe/tasks-vision package's wasm directory), selfie_segmenter.tflite and face_landmarker.task. Leave empty to use the public CDNs."
                 }
             ],
             "ui": {