@robono/calling 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.4.0 — unreleased
+
+Add the authenticated Messenger transport with server-held call controls and a separate hint-only events credential. Disabled calling creates no session or media resources.
+
 # Changelog
 
 ## 0.3.0

package/SBOM.spdx.json

@@ -2,22 +2,22 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@robono/calling@0.3.0",
-  "documentNamespace": "http://spdx.org/spdxdocs/@robono%2fcalling-0.3.0-***",
+  "name": "@robono/calling@0.4.0",
+  "documentNamespace": "http://spdx.org/spdxdocs/@robono%2fcalling-0.4.0-***",
   "creationInfo": {
-    "created": "2026-10-31T09:48:46.351Z",
+    "created": "2026-11-04T11:34:49.725Z",
     "creators": [
       "Tool: npm/cli-11.6.2"
     ]
   },
   "documentDescribes": [
-    "SPDXRef-Package-robono.calling-0.3.0"
+    "SPDXRef-Package-robono.calling-0.4.0"
   ],
   "packages": [
     {
       "name": "@robono/calling",
-      "SPDXID": "SPDXRef-Package-robono.calling-0.3.0",
-      "versionInfo": "0.3.0",
+      "SPDXID": "SPDXRef-Package-robono.calling-0.4.0",
+      "versionInfo": "0.4.0",
       "packageFileName": "",
       "description": "WebRTC voice, video, group calling and screen sharing within apps and across Robono Bridge networks.",
       "primaryPackagePurpose": "LIBRARY",
@@ -29,7 +29,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40robono/calling@0.3.0"
+          "referenceLocator": "pkg:npm/%40robono/calling@0.4.0"
         }
       ]
     }
@@ -37,7 +37,7 @@
   "relationships": [
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
-      "relatedSpdxElement": "SPDXRef-Package-robono.calling-0.3.0",
+      "relatedSpdxElement": "SPDXRef-Package-robono.calling-0.4.0",
       "relationshipType": "DESCRIBES"
     }
   ]

package/dist/messenger.d.ts

@@ -0,0 +1,8 @@
+import type {Request} from './index.js';
+export interface MessengerCallingTransport {
+ request:Request;appearance:Record<string,unknown>;revision:number;
+ features:{voice:boolean;video:boolean;groups?:boolean;screenSharing?:boolean};expiresAt:number;
+ dispose():Promise<void>;
+}
+/** The hostRequest callback uses the customer's authenticated server route. */
+export function createMessengerCallingTransport(options:{request:(operation:string,input:Record<string,unknown>)=>Promise<any>;WebSocketImpl?:typeof WebSocket}):Promise<MessengerCallingTransport>;

package/dist/messenger.js

@@ -0,0 +1,23 @@
+import {subscribeCallingEvents} from './events.js';
+/** Calling through the customer's signed-in route. The separate event token
+ * cannot fetch state, start a call, answer, read history, or control media. */
+export async function createMessengerCallingTransport({request:hostRequest,WebSocketImpl=globalThis.WebSocket}){
+ const session=await hostRequest('session',{});
+ if(session.disabled===true&&session.features?.voice===false&&session.features?.video===false)return {request:async()=>{throw Error('calling_not_enabled');},appearance:session.appearance??{},revision:session.revision??0,features:session.features,expiresAt:Date.now()+300000,dispose:async()=>{}};
+ let url;try{url=new URL(session.serviceUrl);}catch{throw Error('Invalid calling service.');}
+ if(url.protocol!=='https:'||url.username||url.password||url.search||url.hash||typeof session.handle!=='string'||!session.handle||typeof session.eventsToken!=='string'||!session.eventsToken||!Number.isFinite(session.expiresAt)||session.expiresAt<=Date.now())throw Error('Invalid calling session.');
+ let closed=false;const subscriptions=new Set();
+ const request=async(operation,input={})=>{
+  if(closed)throw Object.assign(Error('calling_session_expired'),{status:401});
+  return hostRequest(operation,{handle:session.handle,input});
+ };
+ if(WebSocketImpl)request.subscribe=callbacks=>{
+  if(closed){queueMicrotask(()=>callbacks.onError?.(Object.assign(Error('calling_session_expired'),{status:401})));return {setEnabled(){},close(){}};}
+  const underlying=subscribeCallingEvents({baseUrl:session.serviceUrl,token:session.eventsToken,WebSocketImpl},callbacks);
+  const entry={setEnabled:enabled=>underlying.setEnabled(enabled),close(){underlying.close();subscriptions.delete(entry);}};
+  subscriptions.add(entry);return entry;
+ };
+ return {request,appearance:session.appearance??{},revision:session.revision??0,features:session.features??{voice:false,video:false},expiresAt:session.expiresAt,
+  async dispose(){if(closed)return;closed=true;for(const entry of [...subscriptions])entry.close();await hostRequest('close',{handle:session.handle,input:{}});},
+ };
+}

package/package.json

@@ -17,7 +17,7 @@
     "provenance": true
   },
   "name": "@robono/calling",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "WebRTC voice, video, group calling and screen sharing within apps and across Robono Bridge networks.",
   "homepage": "https://robono.com/docs#calling",
   "repository": {
@@ -39,6 +39,10 @@
     "./groups": {
       "types": "./dist/groups.d.ts",
       "import": "./dist/groups.js"
+    },
+    "./messenger": {
+      "types": "./dist/messenger.d.ts",
+      "import": "./dist/messenger.js"
     }
   },
   "files": [
@@ -53,7 +57,7 @@
   },
   "scripts": {
     "build": "node build.mjs",
-    "test": "npm run build && node --test test/client.test.mjs test/package.test.mjs test/group-client.test.mjs test/sharing.test.mjs test/telemetry.test.mjs test/events.test.mjs",
+    "test": "npm run build && node --test test/client.test.mjs test/package.test.mjs test/group-client.test.mjs test/sharing.test.mjs test/telemetry.test.mjs test/events.test.mjs test/messenger.test.mjs",
     "prepack": "npm run build && node ../../scripts/generate-package-sbom.mjs",
     "prepublishOnly": "npm test"
   }