expect((error as Error).cause).toBeInstanceOf(SyntaxError);

});

it("rejects start frames when no stream acceptance validator is configured", async () => {

const createSession = vi.fn(() => createStubSession());

const handler = new MediaStreamHandler({

transcriptionProvider: {

createSession,

id: "openai",

label: "OpenAI",

isConfigured: () => true,

},

providerConfig: {},

});

const server = await startWsServer(handler);

try {

const ws = await connectWs(server.url);

ws.send(

JSON.stringify({

event: "start",

streamSid: "MZ-unvalidated",

start: { callSid: "CA-unvalidated" },

}),

);

const closed = await waitForClose(ws);

expect(closed.code).toBe(1008);

expect(closed.reason).toBe("Unauthorized stream");

expect(createSession).not.toHaveBeenCalled();

} finally {

await server.close();

}

});

it("emits common Talk events for telephony STT/TTS sessions", async () => {

let callbacks: RealtimeTranscriptionSessionCreateRequest | undefined;

const sentAudio: Buffer[] = [];

maxConnections?: number;

/** Optional trusted resolver for the source IP used by pending-connection guards. */

resolveClientIp?: (request: IncomingMessage) => string | undefined;

/** Validate whether to accept a media stream for the given call ID */

/** Validate whether to accept a media stream for the given call ID. Missing validator rejects. */

shouldAcceptStream?: (params: { callId: string; streamSid: string; token?: string }) => boolean;

/** Callback when transcript is received */

onTranscript?: (callId: string, transcript: string) => void;

ws.close(1008, "Missing callSid");

return null;

}

if (

this.config.shouldAcceptStream &&

!this.config.shouldAcceptStream({ callId: callSid, streamSid, token: effectiveToken })

) {

if (!this.config.shouldAcceptStream) {

console.warn("[MediaStream] Rejecting stream without an acceptance validator");

ws.close(1008, "Unauthorized stream");

return null;

}

if (!this.config.shouldAcceptStream({ callId: callSid, streamSid, token: effectiveToken })) {

console.warn(`[MediaStream] Rejecting stream for unknown call: ${callSid}`);

ws.close(1008, "Unknown call");

return null;