Merge branch 'main' into fix/fd_1828

Dockerfile

@@ -1,10 +1,10 @@
-FROM --platform=linux/amd64 node:24-alpine AS base
+FROM --platform=linux/amd64 node:20-alpine as base
 
 RUN apk --update --no-cache add --virtual .builds-deps build-base python3
 
 WORKDIR /opt/app/
 
-FROM base AS build
+FROM base as build
 
 COPY package.json package-lock.json ./
 

lib/http-routes/api/create-call.js

@@ -18,7 +18,6 @@ const { createCallSchema, customSanitizeFunction } = require('../schemas/create-
 const { selectHostPort } = require('../../utils/network');
 const { JAMBONES_DIAL_SBC_FOR_REGISTERED_USER } = require('../../config');
 const { createMediaEndpoint } = require('../../utils/media-endpoint');
-const { DbErrorBadRequest } = require('../utils/errors');
 
 const removeNullProperties = (obj) => (Object.keys(obj).forEach((key) => obj[key] === null && delete obj[key]), obj);
 const removeNulls = (req, res, next) => {
@@ -123,16 +122,8 @@ router.post('/',
           }
           break;
         case 'user':
-          let targetName = target.name;
-          if (!targetName.includes('@')) {
-            if (!account.sip_realm) {
-              throw new DbErrorBadRequest('no sip realm configured for account');
-            }
-            logger.debug(`appending sip realm ${account.sip_realm} to target name ${targetName}`);
-            targetName = `${targetName}@${account.sip_realm}`;
-          }
-          uri = `sip:${targetName}`;
-          to = targetName;
+          uri = `sip:${target.name}`;
+          to = target.name;
           if (target.overrideTo) {
             Object.assign(opts.headers, {
               'X-Override-To': target.overrideTo
@@ -246,7 +237,6 @@ router.post('/',
       if ('WS' === app.call_hook?.method || /^wss?:/.test(app.call_hook.url)) {
         logger.debug({call_hook: app.call_hook}, 'creating websocket for call hook');
         app.requestor = new WsRequestor(logger, account.account_sid, app.call_hook, account.webhook_secret) ;
-        app.requestor.service_provider_sid = account.service_provider_sid;
         if (app.call_hook.url === app.call_status_hook?.url  || !app.call_status_hook?.url) {
           logger.debug('reusing websocket for call status hook');
           app.notifier = app.requestor;
@@ -256,11 +246,9 @@ router.post('/',
       else {
         logger.debug({call_hook: app.call_hook}, 'creating http client for call hook');
         app.requestor = new HttpRequestor(logger, account.account_sid, app.call_hook, account.webhook_secret);
-        app.requestor.service_provider_sid = account.service_provider_sid;
       }
       if (!app.notifier && app.call_status_hook) {
         app.notifier = new HttpRequestor(logger, account.account_sid, app.call_status_hook, account.webhook_secret);
-        app.notifier.service_provider_sid = account.service_provider_sid;
         logger.debug({call_status_hook: app.call_status_hook}, 'creating http client for call status hook');
       }
       else if (!app.notifier) {
@@ -343,12 +331,6 @@ router.post('/',
           }
         });
         connectStream(dlg.remote.sdp);
-
-        /* ensure sbcCallid is set even if no provisional response was received */
-        if (!cs.callInfo.sbcCallid && dlg.res.has('X-CID')) {
-          cs.callInfo.sbcCallid = dlg.res.get('X-CID');
-        }
-
         cs.emit('callStatusChange', {
           callStatus: CallStatus.InProgress,
           sipStatus: 200,

lib/http-routes/api/error.js

@@ -6,8 +6,8 @@ function sysError(logger, res, err) {
     return res.status(400).json({msg: err.message});
   }
   if (err instanceof DbErrorUnprocessableRequest) {
-    logger.info({message: err.message}, 'unprocessable request');
-    return res.status(422).send(err.message);
+    logger.info(err, 'unprocessable request');
+    return res.status(422).json({msg: err.message});
   }
   if (err.code === 'ER_DUP_ENTRY') {
     logger.info(err, 'duplicate entry on insert');

lib/http-routes/api/messaging.js

@@ -23,12 +23,10 @@ router.post('/:partner', async(req, res) => {
 
   if ('WS' === hook?.method) {
     app.requestor = new WsRequestor(logger, account.account_sid, hook, account.webhook_secret) ;
-    app.requestor.service_provider_sid = account.service_provider_sid;
     app.notifier = app.requestor;
   }
   else {
     app.requestor = new HttpRequestor(logger, account.account_sid, hook, account.webhook_secret);
-    app.requestor.service_provider_sid = account.service_provider_sid;
     app.notifier = {request: () => {}};
   }
 

lib/middleware.js

@@ -211,9 +211,7 @@ module.exports = function(srf, logger) {
       if (account?.enable_debug_log) {
         req.locals.logger.level = 'debug';
       }
-      // eslint-disable-next-line no-unused-vars
-      const {bucket_credential, ...safeAccount} = req.locals?.accountInfo?.account || {};
-      logger.debug({accountInfo: safeAccount}, `retrieved account info for ${account_sid}`);
+      logger.debug({accountInfo: req.locals?.accountInfo?.account}, `retrieved account info for ${account_sid}`);
       next();
     } catch (err) {
       span.end();
@@ -331,19 +329,14 @@ module.exports = function(srf, logger) {
       if ('WS' === app.call_hook?.method ||
         app.call_hook?.url.startsWith('ws://') || app.call_hook?.url.startsWith('wss://')) {
         const requestor = new WsRequestor(logger, account_sid, app.call_hook, accountInfo.account.webhook_secret) ;
-        requestor.service_provider_sid = accountInfo.account.service_provider_sid;
         app2.requestor = requestor;
         app2.notifier = requestor;
         app2.call_hook.method = 'WS';
       }
       else {
         app2.requestor = new HttpRequestor(logger, account_sid, app.call_hook, accountInfo.account.webhook_secret);
-        app2.requestor.service_provider_sid = accountInfo.account.service_provider_sid;
-        if (app.call_status_hook) {
-          app2.notifier = new HttpRequestor(logger, account_sid, app.call_status_hook,
-            accountInfo.account.webhook_secret);
-          app2.notifier.service_provider_sid = accountInfo.account.service_provider_sid;
-        }
+        if (app.call_status_hook) app2.notifier = new HttpRequestor(logger, account_sid, app.call_status_hook,
+          accountInfo.account.webhook_secret);
         else app2.notifier = {request: () => {}, close: () => {}};
       }
 
@@ -483,7 +476,6 @@ module.exports = function(srf, logger) {
       span?.end();
       writeAlerts({
         account_sid: req.locals.account_sid,
-        service_provider_sid: req.locals.service_provider_sid,
         target_sid: req.locals.callSid,
         alert_type: AlertType.INVALID_APP_PAYLOAD,
         message: `${err?.message}`.trim()

lib/session/call-session.js

@@ -452,10 +452,6 @@ class CallSession extends Emitter {
     return this.callInfo.accountSid;
   }
 
-  get serviceProviderSid() {
-    return this.accountInfo?.account?.service_provider_sid;
-  }
-
   /**
    * returns true if this session was transferred from another server
    */
@@ -641,7 +637,6 @@ class CallSession extends Emitter {
             writeAlerts({
               alert_type: 'bot-action-delay-giveup',
               account_sid: this.accountSid,
-              service_provider_sid: this.serviceProviderSid,
               message: 'Call terminated due to bot action delay timeout',
               target_sid: this.callSid
             });
@@ -1099,7 +1094,6 @@ class CallSession extends Emitter {
             writeAlerts({
               alert_type: AlertType.TTS_FAILURE,
               account_sid: this.accountSid,
-              service_provider_sid: this.serviceProviderSid,
               vendor,
               target_sid: this.callSid
             }).catch((err) => this.logger.error({err}, 'Error writing tts alert'));
@@ -1299,7 +1293,6 @@ class CallSession extends Emitter {
         writeAlerts({
           alert_type: type === 'tts' ? AlertType.TTS_NOT_PROVISIONED : AlertType.STT_NOT_PROVISIONED,
           account_sid: this.accountSid,
-          service_provider_sid: this.serviceProviderSid,
           vendor,
           label,
           target_sid: this.callSid
@@ -2063,7 +2056,6 @@ Duration=${duration} `
         writeAlerts({
           alert_type: 'error-updating-call',
           account_sid: this.accountSid,
-          service_provider_sid: this.serviceProviderSid,
           message: err.message,
           target_sid: callSid
         });
@@ -2261,7 +2253,6 @@ Duration=${duration} `
       await writeAlerts({
         alert_type: AlertType.WEBHOOK_CONNECTION_FAILURE,
         account_sid: this.accountSid,
-        service_provider_sid: this.serviceProviderSid,
         detail: `Session:reconnect error ${err}`,
         url: this.application.call_hook.url,
       });
@@ -2324,8 +2315,7 @@ Duration=${duration} `
         break;
 
       case 'mute:status':
-        const status = typeof (data) === 'string' ? data : data.mute_status;
-        this._lccMuteStatus(status === 'mute', call_sid);
+        this._lccMuteStatus(data, call_sid);
         break;
 
       case 'conf:mute-status':
@@ -2485,7 +2475,7 @@ Duration=${duration} `
       this.logger.info(`allocated endpoint ${ep.uuid}`);
 
       this.ep.on('destroy', () => {
-        this.logger.debug(`endpoint was destroyed!! ${this.ep?.uuid}`);
+        this.logger.debug(`endpoint was destroyed!! ${this.ep.uuid}`);
       });
 
       if (this.direction === CallDirection.Inbound || this.application?.transferredCall) {
@@ -2794,7 +2784,6 @@ Duration=${duration} `
       }
     } catch (err) {
       this.logger.error(err, 'Error handling reinvite');
-      res.send(err.status || 500);
     }
   }
 
@@ -2894,7 +2883,6 @@ Duration=${duration} `
           this.logger.debug({accountSid: this.accountSid, webhook: r[0]}, 'performQueueWebhook: webhook found');
           this.queueEventHookRequestor = new HttpRequestor(this.logger, this.accountSid,
             r[0], this.webhook_secret);
-          this.queueEventHookRequestor.service_provider_sid = this.serviceProviderSid;
           this.queueEventHook = r[0];
         }
       } catch (err) {
@@ -3231,7 +3219,6 @@ Duration=${duration} `
       await writeAlerts({
         alert_type: AlertType.TTS_STREAMING_CONNECTION_FAILURE,
         account_sid: this.accountSid,
-        service_provider_sid: this.serviceProviderSid,
         vendor
       });
     } catch (error) {

lib/tasks/alert.js

@@ -15,7 +15,6 @@ class TaskAlert extends Task {
     await super.exec(cs);
     writeAlerts({
       account_sid,
-      service_provider_sid: cs.serviceProviderSid,
       alert_type: AlertType.APPLICATION,
       detail: `Application SID ${application_sid}`,
       message: this.message,

lib/tasks/conference.js

@@ -469,7 +469,6 @@ class Conference extends Task {
     assert (cs.isInConference);
 
     const mute = opts.conf_mute_status === 'mute';
-    this.logger.info(`Conference:doConferenceMute ${mute ? 'muting' : 'unmuting'} member`);
     this.ep.api(`conference ${this.confName} ${mute ? 'mute' : 'unmute'} ${this.memberId}`)
       .catch((err) => this.logger.info({err}, 'Error muting or unmuting participant'));
   }
@@ -571,8 +570,8 @@ class Conference extends Task {
   /**
    * mute or unmute side of the call
    */
-  async mute(callSid, doMute) {
-    this.doConferenceMute(this.callSession, {conf_mute_status: doMute ? 'mute' : 'unmute'});
+  mute(callSid, doMute) {
+    this.doConferenceMute(this.callSession, {conf_mute_status: doMute});
   }
 
   /**

lib/tasks/gather.js

@@ -726,7 +726,6 @@ class TaskGather extends SttTask {
       this.logger.error(err, 'TaskGather:_startTranscribing error');
       writeAlerts({
         account_sid: this.cs.accountSid,
-        service_provider_sid: this.cs.serviceProviderSid,
         alert_type: AlertType.STT_FAILURE,
         vendor: this.vendor,
         detail: err.message,
@@ -1206,7 +1205,6 @@ class TaskGather extends SttTask {
     const errMessage = evt.error || evt.Message;
     writeAlerts({
       account_sid: cs.accountSid,
-      service_provider_sid: cs.serviceProviderSid,
       alert_type: AlertType.STT_FAILURE,
       message: `Custom speech vendor ${this.vendor} error: ${errMessage}`,
       vendor: this.vendor,
@@ -1426,27 +1424,7 @@ class TaskGather extends SttTask {
           returnedVerbs = await this.performAction({speech:evt, reason: 'stt-low-confidence', ...latencies});
         }
       }
-    } catch (err) {
-      this.logger.info({err}, 'TaskGather:_resolve - error performing action');
-      this.notifyError({msg: 'invalid actionHook response', details: err.message});
-      const {writeAlerts, AlertType} = this.cs.srf.locals;
-      writeAlerts({
-        account_sid: this.cs.accountSid,
-        service_provider_sid: this.cs.serviceProviderSid,
-        alert_type: AlertType.INVALID_APP_PAYLOAD,
-        target_sid: this.cs.callSid,
-        message: `actionHook returned invalid verb syntax: ${err.message}`
-      }).catch((err) => this.logger.info({err}, 'TaskGather:_resolve - error generating alert'));
-      try {
-        const obj = Object.assign({}, this.cs.callInfo.toJSON(), {
-          error: 'invalid actionHook response',
-          reason: err.message
-        });
-        await this.cs.notifier.request('call:status', this.cs.call_status_hook, obj);
-      } catch (statusErr) {
-        this.logger.info({statusErr}, 'TaskGather:_resolve - error sending statusHook');
-      }
-    }
+    } catch (err) {  /*already logged error*/ }
 
     // Gather got response from hook, cancel actionHookDelay processing
     if (this.cs.actionHookDelayProcessor) {

lib/tasks/llm/index.js

@@ -105,7 +105,6 @@ class TaskLlm extends Task {
   }
 
   async sendEventHook(data) {
-    if (!this.eventHook) return;
     await this.cs?.requestor.request('llm:event', this.eventHook, data);
   }
 

lib/tasks/play.js

@@ -105,7 +105,6 @@ class TaskPlay extends Task {
         this.emit('playDone');
         writeAlerts({
           account_sid: cs.accountSid,
-          service_provider_sid: cs.serviceProviderSid,
           alert_type: AlertType.PLAY_FILENOTFOUND,
           url: this.url,
           target_sid: cs.callSid

lib/tasks/redirect.js

@@ -26,7 +26,6 @@ class TaskRedirect extends Task {
         try {
           const requestor = new WsRequestor(this.logger, cs.accountSid, {url: this.actionHook},
             cs.accountInfo.account.webhook_secret) ;
-          requestor.service_provider_sid = cs.serviceProviderSid;
           cs.requestor.emit('handover', requestor);
         } catch (err) {
           this.logger.info(err, `TaskRedirect error redirecting to ${this.actionHook}`);
@@ -41,7 +40,6 @@ class TaskRedirect extends Task {
             this.logger.info(`Task:redirect updating base url to ${newBaseUrl}`);
             const newRequestor = new HttpRequestor(this.logger, cs.accountSid, {url: this.actionHook},
               cs.accountInfo.account.webhook_secret);
-            newRequestor.service_provider_sid = cs.serviceProviderSid;
             cs.requestor.emit('handover', newRequestor);
           } catch (err) {
             this.logger.info(err, `TaskRedirect error updating base url to ${this.actionHook}`);
@@ -58,15 +56,11 @@ class TaskRedirect extends Task {
         const isStatusHookAbsolute = cs.notifier?._isAbsoluteUrl(this.statusHook);
         if (isStatusHookAbsolute) {
           if (cs.notifier instanceof WsRequestor) {
-            const notifier = new WsRequestor(this.logger, cs.accountSid, {url: this.statusHook},
+            cs.application.notifier = new WsRequestor(this.logger, cs.accountSid, {url: this.statusHook},
               cs.accountInfo.account.webhook_secret);
-            notifier.service_provider_sid = cs.serviceProviderSid;
-            cs.application.notifier = notifier;
           } else {
-            const notifier = new HttpRequestor(this.logger, cs.accountSid, {url: this.statusHook},
+            cs.application.notifier = new HttpRequestor(this.logger, cs.accountSid, {url: this.statusHook},
               cs.accountInfo.account.webhook_secret);
-            notifier.service_provider_sid = cs.serviceProviderSid;
-            cs.application.notifier = notifier;
           }
           if (oldNotifier?.close) oldNotifier.close();
         }

lib/tasks/say.js

@@ -326,7 +326,6 @@ class TaskSay extends TtsTask {
                 response_code <= 199 || response_code >= 300) {
                 writeAlerts({
                   account_sid,
-                  service_provider_sid: cs.serviceProviderSid,
                   alert_type: AlertType.TTS_FAILURE,
                   vendor,
                   detail: evt.variable_tts_error || `TTS playback failed with response code ${response_code}`,

lib/tasks/sip_decline.js

@@ -17,7 +17,7 @@ class TaskSipDecline extends Task {
   async exec(cs, {res}) {
     super.exec(cs);
     res.send(this.data.status, this.data.reason, {
-      headers: {'X-Reason': 'SIP Decline Verb', ...this.headers}
+      headers: this.headers
     }, (err) => {
       if (!err) {
         // Call was successfully declined

lib/tasks/stt-task.js

@@ -274,7 +274,6 @@ class SttTask extends Task {
       this.logger.info(`ERROR stt using ${vendor} requested but creds not supplied`);
       writeAlerts({
         account_sid: cs.accountSid,
-        service_provider_sid: cs.serviceProviderSid,
         alert_type: AlertType.STT_NOT_PROVISIONED,
         vendor,
         label,
@@ -474,7 +473,6 @@ class SttTask extends Task {
     const {writeAlerts, AlertType} = cs.srf.locals;
     writeAlerts({
       account_sid: cs.accountSid,
-      service_provider_sid: cs.serviceProviderSid,
       alert_type: AlertType.STT_FAILURE,
       message: 'STT failure reported by vendor',
       detail: evt.error,
@@ -490,7 +488,6 @@ class SttTask extends Task {
     this.logger.info({evt}, `${this.name}:_on${this.vendor}ConnectFailure`);
     writeAlerts({
       account_sid: cs.accountSid,
-      service_provider_sid: cs.serviceProviderSid,
       alert_type: AlertType.STT_FAILURE,
       message: `Failed connecting to ${this.vendor} speech recognizer: ${reason}`,
       vendor: this.vendor,

lib/tasks/transcribe.js

@@ -843,7 +843,6 @@ class TaskTranscribe extends SttTask {
     this.logger.info({evt}, 'TaskTranscribe:_onJambonzError');
     writeAlerts({
       account_sid: cs.accountSid,
-      service_provider_sid: cs.serviceProviderSid,
       alert_type: AlertType.STT_FAILURE,
       message: `Custom speech vendor ${this.vendor} error: ${evt.error}`,
       vendor: this.vendor,

lib/tasks/tts-task.js

@@ -282,7 +282,6 @@ class TtsTask extends Task {
       if (!credentials) {
         writeAlerts({
           account_sid,
-          service_provider_sid: cs.serviceProviderSid,
           alert_type: AlertType.TTS_NOT_PROVISIONED,
           vendor,
           label,
@@ -370,7 +369,6 @@ class TtsTask extends Task {
           if (this.otelSpan) this.otelSpan.end();
           writeAlerts({
             account_sid: cs.accountSid,
-            service_provider_sid: cs.serviceProviderSid,
             alert_type: AlertType.TTS_FAILURE,
             vendor,
             label,

lib/utils/amd-utils.js

@@ -219,7 +219,6 @@ module.exports = (logger) => {
       logger.error(err, 'amd:_startTranscribing error');
       writeAlerts({
         account_sid: cs.accountSid,
-        service_provider_sid: cs.serviceProviderSid,
         alert_type: AlertType.STT_FAILURE,
         vendor: vendor,
         detail: err.message,

lib/utils/http-requestor.js

@@ -128,7 +128,6 @@ class HttpRequestor extends BaseRequestor {
       this.logger.debug({hook}, 'HttpRequestor: switching to websocket connection');
       const h = typeof hook === 'object' ? hook : {url: hook};
       const requestor = new WsRequestor(this.logger, this.account_sid, h, this.secret);
-      requestor.service_provider_sid = this.service_provider_sid;
       if (type === 'session:redirect') {
         this.close();
         this.emit('handover', requestor);
@@ -249,7 +248,7 @@ class HttpRequestor extends BaseRequestor {
         this.logger.error({err, baseUrl: this.baseUrl, url},
           'web callback returned unexpected error');
       }
-      let opts = {account_sid: this.account_sid, service_provider_sid: this.service_provider_sid};
+      let opts = {account_sid: this.account_sid};
       if (err.code === 'ECONNREFUSED') {
         opts = {...opts, alert_type: this.Alerter.AlertType.WEBHOOK_CONNECTION_FAILURE, url};
       }

lib/utils/place-outdial.js

@@ -234,11 +234,6 @@ class SingleDialer extends Emitter {
       await connectStream(this.dlg.remote.sdp, opts.isVideoCall);
       this.dlg.callSid = this.callSid;
       this.inviteInProgress = null;
-
-      /* ensure sbcCallid is set even if no provisional response was received */
-      if (!this.callInfo.sbcCallid && this.dlg.res.has('X-CID')) {
-        this.callInfo.sbcCallid = this.dlg.res.get('X-CID');
-      }
       this.emit('callStatusChange', {
         sipStatus: 200,
         sipReason: 'OK',
@@ -295,7 +290,6 @@ class SingleDialer extends Emitter {
             }
           } catch (err) {
             this.logger.error(err, 'Error handling reinvite');
-            res.send(err.status || 500);
           }
         })
         .on('refer', (req, res) => {
@@ -455,7 +449,6 @@ class SingleDialer extends Emitter {
       if (app.call_hook?.url) app.call_hook.url += '/adulting';
       const requestor = new WsRequestor(logger, this.accountInfo.account.account_sid,
         app.call_hook, this.accountInfo.account.webhook_secret);
-      requestor.service_provider_sid = this.accountInfo.account.service_provider_sid;
       app.requestor = requestor;
       app.notifier = requestor;
       app.call_hook.method = 'WS';
@@ -463,13 +456,9 @@ class SingleDialer extends Emitter {
     else {
       app.requestor = new HttpRequestor(logger, this.accountInfo.account.account_sid,
         app.call_hook, this.accountInfo.account.webhook_secret);
-      app.requestor.service_provider_sid = this.accountInfo.account.service_provider_sid;
-      if (app.call_status_hook) {
-        app.notifier = new HttpRequestor(logger,
-          this.accountInfo.account.account_sid, app.call_status_hook,
-          this.accountInfo.account.webhook_secret);
-        app.notifier.service_provider_sid = this.accountInfo.account.service_provider_sid;
-      }
+      if (app.call_status_hook) app.notifier = new HttpRequestor(logger,
+        this.accountInfo.account.account_sid, app.call_status_hook,
+        this.accountInfo.account.webhook_secret);
       else app.notifier = {request: () => {}, close: () => {}};
     }
     // Replace old application with new application.

lib/utils/tts-streaming-buffer.js

@@ -220,7 +220,8 @@ class TtsStreamingBuffer extends Emitter {
           this.queue.shift();
         }
         // Immediately send all accumulated text (ignoring sentence boundaries).
-        if (flushText.length > 0) {
+        // Skip sending if flushText is only whitespace.
+        if (flushText.length > 0 && !isWhitespace(flushText)) {
           const modifiedFlushText = flushText.replace(/\n\n/g, '\n \n');
           try {
             await this._api(this.ep, [this.ep.uuid, 'send', modifiedFlushText]);

lib/utils/ws-requestor.js

@@ -97,7 +97,6 @@ class WsRequestor extends BaseRequestor {
       this.logger.debug({hook}, 'WsRequestor: sending a webhook (HTTP)');
       const h = typeof hook === 'object' ? hook : {url: hook};
       const requestor = new HttpRequestor(this.logger, this.account_sid, h, this.secret);
-      requestor.service_provider_sid = this.service_provider_sid;
       if (type === 'session:redirect') {
         this.close();
         this.emit('handover', requestor);
@@ -523,7 +522,6 @@ class WsRequestor extends BaseRequestor {
       const {writeAlerts, AlertType} = this.Alerter;
       writeAlerts({
         account_sid: this.account_sid,
-        service_provider_sid: this.service_provider_sid,
         alert_type: AlertType.INVALID_APP_PAYLOAD,
         target_sid: this.call_sid,
         message: err.message,

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "jambonz-feature-server",
-  "version": "0.9.6",
+  "version": "0.9.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jambonz-feature-server",
-      "version": "0.9.6",
+      "version": "0.9.5",
       "license": "MIT",
       "dependencies": {
         "@aws-sdk/client-auto-scaling": "^3.549.0",
@@ -17,7 +17,7 @@
         "@jambonz/realtimedb-helpers": "^0.8.15",
         "@jambonz/speech-utils": "^0.2.30",
         "@jambonz/stats-collector": "^0.1.10",
-        "@jambonz/time-series": "^0.2.17",
+        "@jambonz/time-series": "^0.2.15",
         "@jambonz/verb-specifications": "^0.0.125",
         "@modelcontextprotocol/sdk": "^1.9.0",
         "@opentelemetry/api": "^1.8.0",
@@ -30,21 +30,21 @@
         "@opentelemetry/sdk-trace-node": "^1.23.0",
         "@opentelemetry/semantic-conventions": "^1.23.0",
         "bent": "^7.3.12",
-        "debug": "^4.4.3",
+        "debug": "^4.3.4",
         "deepcopy": "^2.1.0",
         "drachtio-fsmrf": "^4.1.2",
-        "drachtio-srf": "^5.0.20",
-        "express": "^4.22.1",
+        "drachtio-srf": "^5.0.19",
+        "express": "^4.19.2",
         "express-validator": "^7.0.1",
         "moment": "^2.30.1",
         "parse-url": "^9.2.0",
-        "pino": "^10.3.1",
+        "pino": "^10.1.0",
         "polly-ssml-split": "^0.1.0",
         "sdp-transform": "^2.15.0",
         "short-uuid": "^5.1.0",
         "sinon": "^17.0.1",
         "to-snake-case": "^1.0.0",
-        "undici": "^7.24.5",
+        "undici": "^7.5.0",
         "verify-aws-sns-signature": "^0.1.0",
         "ws": "^8.18.0",
         "xml2js": "^0.6.2"
@@ -58,7 +58,7 @@
         "tape": "^5.7.5"
       },
       "engines": {
-        "node": ">= 20.x"
+        "node": ">= 18.x"
       },
       "optionalDependencies": {
         "bufferutil": "^4.0.8",
@@ -847,13 +847,13 @@
       }
     },
     "node_modules/@aws-sdk/xml-builder": {
-      "version": "3.972.16",
-      "resolved": "https://registry.npmjs.org/@aws-sdk/xml-builder/-/xml-builder-3.972.16.tgz",
-      "integrity": "sha512-iu2pyvaqmeatIJLURLqx9D+4jKAdTH20ntzB6BFwjyN7V960r4jK32mx0Zf7YbtOYAbmbtQfDNuL60ONinyw7A==",
+      "version": "3.972.4",
+      "resolved": "https://registry.npmjs.org/@aws-sdk/xml-builder/-/xml-builder-3.972.4.tgz",
+      "integrity": "sha512-0zJ05ANfYqI6+rGqj8samZBFod0dPPousBjLEqg8WdxSgbMAkRgLyn81lP215Do0rFJ/17LIXwr7q0yK24mP6Q==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@smithy/types": "^4.13.1",
-        "fast-xml-parser": "5.5.8",
+        "@smithy/types": "^4.12.0",
+        "fast-xml-parser": "5.3.4",
         "tslib": "^2.6.2"
       },
       "engines": {
@@ -1270,16 +1270,6 @@
         "node": ">=6.9.0"
       }
     },
-    "node_modules/@borewit/text-codec": {
-      "version": "0.2.2",
-      "resolved": "https://registry.npmjs.org/@borewit/text-codec/-/text-codec-0.2.2.tgz",
-      "integrity": "sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Borewit"
-      }
-    },
     "node_modules/@cartesia/cartesia-js": {
       "version": "2.2.9",
       "resolved": "https://registry.npmjs.org/@cartesia/cartesia-js/-/cartesia-js-2.2.9.tgz",
@@ -1319,9 +1309,9 @@
       }
     },
     "node_modules/@eslint/eslintrc/node_modules/ajv": {
-      "version": "6.14.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
-      "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
+      "version": "6.12.6",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
+      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1386,9 +1376,9 @@
       }
     },
     "node_modules/@hono/node-server": {
-      "version": "1.19.11",
-      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.11.tgz",
-      "integrity": "sha512-dr8/3zEaB+p0D2n/IUrlPF1HZm586qgJNXK1a9fhg/PzdtkK7Ksd5l312tJX2yBuALqDYBlG20QEbayqPyxn+g==",
+      "version": "1.19.9",
+      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.9.tgz",
+      "integrity": "sha512-vHL6w3ecZsky+8P5MD+eFfaGTyCeOHUIFYMGpQGbrBTSmNNoxv0if69rEZ5giu36weC5saFuznL411gRX7bJDw==",
       "license": "MIT",
       "engines": {
         "node": ">=18.14.1"
@@ -1637,9 +1627,9 @@
       }
     },
     "node_modules/@jambonz/time-series": {
-      "version": "0.2.17",
-      "resolved": "https://registry.npmjs.org/@jambonz/time-series/-/time-series-0.2.17.tgz",
-      "integrity": "sha512-bqglB1INDo+jo4XgHHq3twomZc2sTz9eR14t+4tck4TEvHH51ywvsPQqUQ/CqH0PR9rNTQn+yn7+Hq0X88kbtA==",
+      "version": "0.2.16",
+      "resolved": "https://registry.npmjs.org/@jambonz/time-series/-/time-series-0.2.16.tgz",
+      "integrity": "sha512-+WRXZRkLHMEmXjtxGCZta7XVJXOd98+Yz5WsTnXxd3Aa7hg+wJBjmDrVuj8JvTV4nUIBFZ5TuYpIQDVyYJuwlQ==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.3.1",
@@ -3120,9 +3110,9 @@
       }
     },
     "node_modules/@smithy/types": {
-      "version": "4.13.1",
-      "resolved": "https://registry.npmjs.org/@smithy/types/-/types-4.13.1.tgz",
-      "integrity": "sha512-787F3yzE2UiJIQ+wYW1CVg2odHjmaWLGksnKQHUrK/lYZSEcy1msuLVvxaR/sI2/aDe9U+TBuLsXnr3vod1g0g==",
+      "version": "4.12.0",
+      "resolved": "https://registry.npmjs.org/@smithy/types/-/types-4.12.0.tgz",
+      "integrity": "sha512-9YcuJVTOBDjg9LWo23Qp0lTQ3D7fQsQtwle0jVfpbUHy9qBwCEgKuVH4FqFB3VYu0nwdHKiEMA+oXz7oV8X1kw==",
       "license": "Apache-2.0",
       "dependencies": {
         "tslib": "^2.6.2"
@@ -3364,29 +3354,21 @@
         "node": ">=18.0.0"
       }
     },
-    "node_modules/@tokenizer/inflate": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/@tokenizer/inflate/-/inflate-0.4.1.tgz",
-      "integrity": "sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==",
-      "license": "MIT",
-      "dependencies": {
-        "debug": "^4.4.3",
-        "token-types": "^6.1.1"
-      },
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Borewit"
-      }
-    },
     "node_modules/@tokenizer/token": {
       "version": "0.3.0",
       "resolved": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz",
       "integrity": "sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==",
       "license": "MIT"
     },
+    "node_modules/@tootallnate/once": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz",
+      "integrity": "sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 10"
+      }
+    },
     "node_modules/@types/async": {
       "version": "3.2.25",
       "resolved": "https://registry.npmjs.org/@types/async/-/async-3.2.25.tgz",
@@ -3559,9 +3541,9 @@
       }
     },
     "node_modules/ajv": {
-      "version": "8.18.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
-      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "version": "8.17.1",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
+      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
@@ -3808,13 +3790,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.13.6",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
-      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.2.tgz",
+      "integrity": "sha512-VPk9ebNqPcy5lRGuSlKx752IlDatOjT9paPlm8A7yOuW2Fbvp4X3JznJtT4f0GzGLLiWE9W8onz51SqLYwzGaA==",
       "license": "MIT",
       "dependencies": {
-        "follow-redirects": "^1.15.11",
-        "form-data": "^4.0.5",
+        "follow-redirects": "^1.15.6",
+        "form-data": "^4.0.4",
         "proxy-from-env": "^1.1.0"
       }
     },
@@ -3945,9 +3927,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.13",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
-      "integrity": "sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==",
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4736,9 +4718,9 @@
       }
     },
     "node_modules/drachtio-srf": {
-      "version": "5.0.20",
-      "resolved": "https://registry.npmjs.org/drachtio-srf/-/drachtio-srf-5.0.20.tgz",
-      "integrity": "sha512-gqWTfqFZhC93TVBaFtRseemmfHPASotMfHhCy/3wQUHZShUl+Zr7Vbq+pLD1kyTNr4/pzpMwEMLd0/6oq/fCtg==",
+      "version": "5.0.19",
+      "resolved": "https://registry.npmjs.org/drachtio-srf/-/drachtio-srf-5.0.19.tgz",
+      "integrity": "sha512-l6YghIldPh5YKwCo++F32zChh6sieDWZ46c/woWZAqKKudBUAN6DNYR/kEP2ROAiN1FAD+Zfgnsc0BSuE+VqjQ==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -5243,9 +5225,9 @@
       }
     },
     "node_modules/eslint/node_modules/ajv": {
-      "version": "6.14.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
-      "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
+      "version": "6.12.6",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
+      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -5497,12 +5479,12 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.3.1",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.3.1.tgz",
-      "integrity": "sha512-D1dKN+cmyPWuvB+G2SREQDzPY1agpBIcTa9sJxOPMCNeH3gwzhqJRDWCXW3gg0y//+LQ/8j52JbMROWyrKdMdw==",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
+      "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
       "license": "MIT",
       "dependencies": {
-        "ip-address": "10.1.0"
+        "ip-address": "10.0.1"
       },
       "engines": {
         "node": ">= 16"
@@ -5611,25 +5593,10 @@
       ],
       "license": "BSD-3-Clause"
     },
-    "node_modules/fast-xml-builder": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/fast-xml-builder/-/fast-xml-builder-1.1.4.tgz",
-      "integrity": "sha512-f2jhpN4Eccy0/Uz9csxh3Nu6q4ErKxf0XIsasomfOihuSUa3/xw6w8dnOtCDgEItQFJG8KyXPzQXzcODDrrbOg==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/NaturalIntelligence"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "path-expression-matcher": "^1.1.3"
-      }
-    },
     "node_modules/fast-xml-parser": {
-      "version": "5.5.8",
-      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.5.8.tgz",
-      "integrity": "sha512-Z7Fh2nVQSb2d+poDViM063ix2ZGt9jmY1nWhPfHBOK2Hgnb/OW3P4Et3P/81SEej0J7QbWtJqxO05h8QYfK7LQ==",
+      "version": "5.3.4",
+      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.3.4.tgz",
+      "integrity": "sha512-EFd6afGmXlCx8H8WTZHhAoDaWaGyuIBoZJ2mknrNxug+aZKjkp0a0dlars9Izl+jF+7Gu1/5f/2h68cQpe0IiA==",
       "funding": [
         {
           "type": "github",
@@ -5638,9 +5605,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "fast-xml-builder": "^1.1.4",
-        "path-expression-matcher": "^1.2.0",
-        "strnum": "^2.2.0"
+        "strnum": "^2.1.0"
       },
       "bin": {
         "fxparser": "src/cli/cli.js"
@@ -5692,18 +5657,17 @@
       }
     },
     "node_modules/file-type": {
-      "version": "21.3.4",
-      "resolved": "https://registry.npmjs.org/file-type/-/file-type-21.3.4.tgz",
-      "integrity": "sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==",
+      "version": "16.5.4",
+      "resolved": "https://registry.npmjs.org/file-type/-/file-type-16.5.4.tgz",
+      "integrity": "sha512-/yFHK0aGjFEgDJjEKP0pWCplsPFPhwyfwevf/pVxiN0tmE4L9LmwWxWukdJSHdoCli4VgQLehjJtwQBnqmsKcw==",
       "license": "MIT",
       "dependencies": {
-        "@tokenizer/inflate": "^0.4.1",
-        "strtok3": "^10.3.4",
-        "token-types": "^6.1.1",
-        "uint8array-extras": "^1.4.0"
+        "readable-web-to-node-stream": "^3.0.0",
+        "strtok3": "^6.2.4",
+        "token-types": "^4.1.1"
       },
       "engines": {
-        "node": ">=20"
+        "node": ">=10"
       },
       "funding": {
         "url": "https://github.com/sindresorhus/file-type?sponsor=1"
@@ -5811,9 +5775,9 @@
       }
     },
     "node_modules/flatted": {
-      "version": "3.4.2",
-      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
-      "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz",
+      "integrity": "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==",
       "dev": true,
       "license": "ISC"
     },
@@ -6028,9 +5992,9 @@
       }
     },
     "node_modules/gaxios/node_modules/brace-expansion": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
-      "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
@@ -6073,12 +6037,12 @@
       }
     },
     "node_modules/gaxios/node_modules/minimatch": {
-      "version": "9.0.9",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
-      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
+      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
       "license": "ISC",
       "dependencies": {
-        "brace-expansion": "^2.0.2"
+        "brace-expansion": "^2.0.1"
       },
       "engines": {
         "node": ">=16 || 14 >=14.17"
@@ -6358,9 +6322,9 @@
       }
     },
     "node_modules/google-gax/node_modules/brace-expansion": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
-      "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==",
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
+      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
@@ -6403,12 +6367,12 @@
       }
     },
     "node_modules/google-gax/node_modules/minimatch": {
-      "version": "9.0.9",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
-      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
+      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
       "license": "ISC",
       "dependencies": {
-        "brace-expansion": "^2.0.2"
+        "brace-expansion": "^2.0.1"
       },
       "engines": {
         "node": ">=16 || 14 >=14.17"
@@ -6670,9 +6634,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.9",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.9.tgz",
-      "integrity": "sha512-wy3T8Zm2bsEvxKZM5w21VdHDDcwVS1yUFFY6i8UobSsKfFceT7TOwhbhfKsDyx7tYQlmRM5FLpIuYvNFyjctiA==",
+      "version": "4.11.9",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.11.9.tgz",
+      "integrity": "sha512-Eaw2YTGM6WOxA6CXbckaEvslr2Ne4NFsKrvc0v97JD5awbmeBLO5w9Ho9L9kmKonrwF9RJlW6BxT1PVv/agBHQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -6718,16 +6682,29 @@
       }
     },
     "node_modules/http-proxy-agent": {
-      "version": "7.0.2",
-      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
-      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-5.0.0.tgz",
+      "integrity": "sha512-n2hY8YdoRE1i7r6M0w9DIw5GgZN0G25P8zLCRQ8rjXtTU3vsNFBI/vWK/UIeE6g5MUUz6avwAPXmL6Fy9D/90w==",
       "license": "MIT",
       "dependencies": {
-        "agent-base": "^7.1.0",
-        "debug": "^4.3.4"
+        "@tootallnate/once": "2",
+        "agent-base": "6",
+        "debug": "4"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">= 6"
+      }
+    },
+    "node_modules/http-proxy-agent/node_modules/agent-base": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
+      "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6.0.0"
       }
     },
     "node_modules/https-proxy-agent": {
@@ -6762,24 +6739,23 @@
       }
     },
     "node_modules/ibm-cloud-sdk-core": {
-      "version": "5.4.9",
-      "resolved": "https://registry.npmjs.org/ibm-cloud-sdk-core/-/ibm-cloud-sdk-core-5.4.9.tgz",
-      "integrity": "sha512-340fGcZEwUBdxBOPmn8V8fIiFRWF92yFqSFRNLwPQz4h+PS4jcAyd3JGqU6CpFqzUTt+PatVX/jHFwzUTVdmxQ==",
+      "version": "5.4.5",
+      "resolved": "https://registry.npmjs.org/ibm-cloud-sdk-core/-/ibm-cloud-sdk-core-5.4.5.tgz",
+      "integrity": "sha512-7ClYtr/Xob83hypKUa1D9N8/ViH71giKQ0kqjHcoyKum6yvwsWAeFA6zf6WTWb+DdZ1XSBrMPhgCCoy0bqReLg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@types/debug": "^4.1.12",
         "@types/node": "^18.19.80",
         "@types/tough-cookie": "^4.0.0",
-        "axios": "^1.13.5",
+        "axios": "^1.12.2",
         "camelcase": "^6.3.0",
         "debug": "^4.3.4",
         "dotenv": "^16.4.5",
         "extend": "3.0.2",
-        "file-type": "^21.3.2",
+        "file-type": "16.5.4",
         "form-data": "^4.0.4",
         "isstream": "0.1.2",
         "jsonwebtoken": "^9.0.3",
-        "load-esm": "^1.0.3",
         "mime-types": "2.1.35",
         "retry-axios": "^2.6.0",
         "tough-cookie": "^4.1.3"
@@ -7019,9 +6995,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
-      "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
+      "version": "10.0.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz",
+      "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -7865,25 +7841,6 @@
         "node": ">= 0.8.0"
       }
     },
-    "node_modules/load-esm": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/load-esm/-/load-esm-1.0.3.tgz",
-      "integrity": "sha512-v5xlu8eHD1+6r8EHTg6hfmO97LN8ugKtiXcy5e6oN72iD2r6u0RPfLl6fxM+7Wnh2ZRq15o0russMst44WauPA==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/Borewit"
-        },
-        {
-          "type": "buymeacoffee",
-          "url": "https://buymeacoffee.com/borewit"
-        }
-      ],
-      "license": "MIT",
-      "engines": {
-        "node": ">=13.2.0"
-      }
-    },
     "node_modules/locate-path": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
@@ -8216,9 +8173,9 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "3.1.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
-      "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
+      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
       "dev": true,
       "license": "ISC",
       "dependencies": {
@@ -8971,21 +8928,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/path-expression-matcher": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/path-expression-matcher/-/path-expression-matcher-1.2.0.tgz",
-      "integrity": "sha512-DwmPWeFn+tq7TiyJ2CxezCAirXjFxvaiD03npak3cRjlP9+OjTmSy1EpIrEbh+l6JgUundniloMLDQ/6VTdhLQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/NaturalIntelligence"
-        }
-      ],
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
     "node_modules/path-is-absolute": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
@@ -9034,11 +8976,24 @@
       "license": "ISC"
     },
     "node_modules/path-to-regexp": {
-      "version": "0.1.13",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
-      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "version": "0.1.12",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
       "license": "MIT"
     },
+    "node_modules/peek-readable": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/peek-readable/-/peek-readable-4.1.0.tgz",
+      "integrity": "sha512-ZI3LnwUv5nOGbQzD9c2iDG6toheuXSZP5esSHBjopsXH4dg19soufvpUGA3uohi5anFtGb2lhAVdHzH6R/Evvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/Borewit"
+      }
+    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -9047,31 +9002,31 @@
       "license": "ISC"
     },
     "node_modules/pino": {
-      "version": "10.3.1",
-      "resolved": "https://registry.npmjs.org/pino/-/pino-10.3.1.tgz",
-      "integrity": "sha512-r34yH/GlQpKZbU1BvFFqOjhISRo1MNx1tWYsYvmj6KIRHSPMT2+yHOEb1SG6NMvRoHRF0a07kCOox/9yakl1vg==",
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/pino/-/pino-10.1.0.tgz",
+      "integrity": "sha512-0zZC2ygfdqvqK8zJIr1e+wT1T/L+LF6qvqvbzEQ6tiMAoTqEVK9a1K3YRu8HEUvGEvNqZyPJTtb2sNIoTkB83w==",
       "license": "MIT",
       "dependencies": {
         "@pinojs/redact": "^0.4.0",
         "atomic-sleep": "^1.0.0",
         "on-exit-leak-free": "^2.1.0",
-        "pino-abstract-transport": "^3.0.0",
+        "pino-abstract-transport": "^2.0.0",
         "pino-std-serializers": "^7.0.0",
         "process-warning": "^5.0.0",
         "quick-format-unescaped": "^4.0.3",
         "real-require": "^0.2.0",
         "safe-stable-stringify": "^2.3.1",
         "sonic-boom": "^4.0.1",
-        "thread-stream": "^4.0.0"
+        "thread-stream": "^3.0.0"
       },
       "bin": {
         "pino": "bin.js"
       }
     },
     "node_modules/pino-abstract-transport": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/pino-abstract-transport/-/pino-abstract-transport-3.0.0.tgz",
-      "integrity": "sha512-wlfUczU+n7Hy/Ha5j9a/gZNy7We5+cXp8YL+X+PG8S0KXxw7n/JXA3c46Y0zQznIJ83URJiwy7Lh56WLokNuxg==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/pino-abstract-transport/-/pino-abstract-transport-2.0.0.tgz",
+      "integrity": "sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==",
       "license": "MIT",
       "dependencies": {
         "split2": "^4.0.0"
@@ -9283,9 +9238,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.14.2",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz",
-      "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==",
+      "version": "6.14.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
+      "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.1.0"
@@ -9365,6 +9320,22 @@
         "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
       }
     },
+    "node_modules/readable-web-to-node-stream": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/readable-web-to-node-stream/-/readable-web-to-node-stream-3.0.4.tgz",
+      "integrity": "sha512-9nX56alTf5bwXQ3ZDipHJhusu9NTQJ/CVPtb/XHAJCXihZeitfJvIRS4GqQ/mfIoOE3IelHMrpayVrosdHBuLw==",
+      "license": "MIT",
+      "dependencies": {
+        "readable-stream": "^4.7.0"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/Borewit"
+      }
+    },
     "node_modules/real-require": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/real-require/-/real-require-0.2.0.tgz",
@@ -9599,9 +9570,9 @@
       }
     },
     "node_modules/router/node_modules/path-to-regexp": {
-      "version": "8.4.0",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.0.tgz",
-      "integrity": "sha512-PuseHIvAnz3bjrM2rGJtSgo1zjgxapTLZ7x2pjhzWwlp4SJQgK3f3iZIQwkpEnBaKz6seKBADpM4B4ySkuYypg==",
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz",
+      "integrity": "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==",
       "license": "MIT",
       "funding": {
         "type": "opencollective",
@@ -10391,9 +10362,9 @@
       }
     },
     "node_modules/strnum": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.2.2.tgz",
-      "integrity": "sha512-DnR90I+jtXNSTXWdwrEy9FakW7UX+qUZg28gj5fk2vxxl7uS/3bpI4fjFYVmdK9etptYBPNkpahuQnEwhwECqA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.1.2.tgz",
+      "integrity": "sha512-l63NF9y/cLROq/yqKXSLtcMeeyOfnSQlfMSlzFt/K73oIaD8DGaQWd7Z34X9GPiKqP5rbSh84Hl4bOlLcjiSrQ==",
       "funding": [
         {
           "type": "github",
@@ -10403,15 +10374,16 @@
       "license": "MIT"
     },
     "node_modules/strtok3": {
-      "version": "10.3.5",
-      "resolved": "https://registry.npmjs.org/strtok3/-/strtok3-10.3.5.tgz",
-      "integrity": "sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/strtok3/-/strtok3-6.3.0.tgz",
+      "integrity": "sha512-fZtbhtvI9I48xDSywd/somNqgUHl2L2cstmXCCif0itOf96jeW18MBSyrLuNicYQVkvpOxkZtkzujiTJ9LW5Jw==",
       "license": "MIT",
       "dependencies": {
-        "@tokenizer/token": "^0.3.0"
+        "@tokenizer/token": "^0.3.0",
+        "peek-readable": "^4.1.0"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=10"
       },
       "funding": {
         "type": "github",
@@ -10521,13 +10493,13 @@
       }
     },
     "node_modules/teeny-request": {
-      "version": "10.1.2",
-      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.2.tgz",
-      "integrity": "sha512-Xj0ZAQ0CeuQn6UxCDPLbFRlgcSTUEyO3+wiepr2grjIjyL/lMMs1Z4OwXn8kLvn/V1OuaEP0UY7Na6UDNNsYrQ==",
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.0.tgz",
+      "integrity": "sha512-3ZnLvgWF29jikg1sAQ1g0o+lr5JX6sVgYvfUJazn7ZjJroDBUTWp44/+cFVX0bULjv4vci+rBD+oGVAkWqhUbw==",
       "license": "Apache-2.0",
       "dependencies": {
-        "http-proxy-agent": "^7.0.0",
-        "https-proxy-agent": "^7.0.1",
+        "http-proxy-agent": "^5.0.0",
+        "https-proxy-agent": "^5.0.0",
         "node-fetch": "^3.3.2",
         "stream-events": "^1.0.5"
       },
@@ -10535,6 +10507,31 @@
         "node": ">=18"
       }
     },
+    "node_modules/teeny-request/node_modules/agent-base": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
+      "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6.0.0"
+      }
+    },
+    "node_modules/teeny-request/node_modules/https-proxy-agent": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
+      "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "6",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/teeny-request/node_modules/node-fetch": {
       "version": "3.3.2",
       "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.3.2.tgz",
@@ -10576,15 +10573,12 @@
       "license": "MIT"
     },
     "node_modules/thread-stream": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/thread-stream/-/thread-stream-4.0.0.tgz",
-      "integrity": "sha512-4iMVL6HAINXWf1ZKZjIPcz5wYaOdPhtO8ATvZ+Xqp3BTdaqtAwQkNmKORqcIo5YkQqGXq5cwfswDwMqqQNrpJA==",
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/thread-stream/-/thread-stream-3.1.0.tgz",
+      "integrity": "sha512-OqyPZ9u96VohAyMfJykzmivOrY2wfMSf3C5TtFJVgN+Hm6aj+voFhlK+kZEIv2FBh1X6Xp3DlnCOfEQ3B2J86A==",
       "license": "MIT",
       "dependencies": {
         "real-require": "^0.2.0"
-      },
-      "engines": {
-        "node": ">=20"
       }
     },
     "node_modules/thriftrw": {
@@ -10646,17 +10640,16 @@
       }
     },
     "node_modules/token-types": {
-      "version": "6.1.2",
-      "resolved": "https://registry.npmjs.org/token-types/-/token-types-6.1.2.tgz",
-      "integrity": "sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==",
+      "version": "4.2.1",
+      "resolved": "https://registry.npmjs.org/token-types/-/token-types-4.2.1.tgz",
+      "integrity": "sha512-6udB24Q737UD/SDsKAHI9FCRP7Bqc9D/MQUV02ORQg5iskjtLJlZJNdN4kKtcdtwCeWIwIHDGaUsTsCCAa8sFQ==",
       "license": "MIT",
       "dependencies": {
-        "@borewit/text-codec": "^0.2.1",
         "@tokenizer/token": "^0.3.0",
         "ieee754": "^1.2.1"
       },
       "engines": {
-        "node": ">=14.16"
+        "node": ">=10"
       },
       "funding": {
         "type": "github",
@@ -10831,18 +10824,6 @@
         "is-typedarray": "^1.0.0"
       }
     },
-    "node_modules/uint8array-extras": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/uint8array-extras/-/uint8array-extras-1.5.0.tgz",
-      "integrity": "sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/unbox-primitive": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz",
@@ -10863,9 +10844,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.24.5",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.24.5.tgz",
-      "integrity": "sha512-3IWdCpjgxp15CbJnsi/Y9TCDE7HWVN19j1hmzVhoAkY/+CJx449tVxT5wZc1Gwg8J+P0LWvzlBzxYRnHJ+1i7Q==",
+      "version": "7.21.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.21.0.tgz",
+      "integrity": "sha512-Hn2tCQpoDt1wv23a68Ctc8Cr/BHpUSfaPYrkajTXOS9IKpxVRx/X5m1K2YkbK2ipgZgxXSgsUinl3x+2YdSSfg==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"
@@ -10968,9 +10949,9 @@
       }
     },
     "node_modules/utf-8-validate": {
-      "version": "6.0.6",
-      "resolved": "https://registry.npmjs.org/utf-8-validate/-/utf-8-validate-6.0.6.tgz",
-      "integrity": "sha512-q3l3P9UtEEiAHcsgsqTgf9PPjctrDWoIXW3NpOHFdRDbLvu4DLIcxHangJ4RLrWkBcKjmcs/6NkerI8T/rE4LA==",
+      "version": "6.0.5",
+      "resolved": "https://registry.npmjs.org/utf-8-validate/-/utf-8-validate-6.0.5.tgz",
+      "integrity": "sha512-EYZR+OpIXp9Y1eG1iueg8KRsY8TuT8VNgnanZ0uA3STqhHQTLwbl+WX76/9X5OY12yQubymBpaBSmMPkSTQcKA==",
       "hasInstallScript": true,
       "license": "MIT",
       "optional": true,

package.json

@@ -1,9 +1,9 @@
 {
   "name": "jambonz-feature-server",
-  "version": "0.9.6",
+  "version": "0.9.5",
   "main": "app.js",
   "engines": {
-    "node": ">= 20.x"
+    "node": ">= 18.x"
   },
   "keywords": [
     "sip",
@@ -33,7 +33,7 @@
     "@jambonz/realtimedb-helpers": "^0.8.15",
     "@jambonz/speech-utils": "^0.2.30",
     "@jambonz/stats-collector": "^0.1.10",
-    "@jambonz/time-series": "^0.2.17",
+    "@jambonz/time-series": "^0.2.15",
     "@jambonz/verb-specifications": "^0.0.125",
     "@modelcontextprotocol/sdk": "^1.9.0",
     "@opentelemetry/api": "^1.8.0",
@@ -46,21 +46,21 @@
     "@opentelemetry/sdk-trace-node": "^1.23.0",
     "@opentelemetry/semantic-conventions": "^1.23.0",
     "bent": "^7.3.12",
-    "debug": "^4.4.3",
+    "debug": "^4.3.4",
     "deepcopy": "^2.1.0",
     "drachtio-fsmrf": "^4.1.2",
-    "drachtio-srf": "^5.0.20",
-    "express": "^4.22.1",
+    "drachtio-srf": "^5.0.19",
+    "express": "^4.19.2",
     "express-validator": "^7.0.1",
     "moment": "^2.30.1",
     "parse-url": "^9.2.0",
-    "pino": "^10.3.1",
+    "pino": "^10.1.0",
     "polly-ssml-split": "^0.1.0",
     "sdp-transform": "^2.15.0",
     "short-uuid": "^5.1.0",
     "sinon": "^17.0.1",
     "to-snake-case": "^1.0.0",
-    "undici": "^7.24.5",
+    "undici": "^7.5.0",
     "verify-aws-sns-signature": "^0.1.0",
     "ws": "^8.18.0",
     "xml2js": "^0.6.2"

test/index.js

@@ -4,6 +4,7 @@ require('./ws-requestor-unit-test');
 require('./http-requestor-retry-test');
 require('./http-requestor-unit-test');
 require('./unit-tests');
+require('./tts-streaming-buffer-test');
 require('./docker_start');
 require('./create-test-db');
 require('./account-validation-tests');

test/tts-streaming-buffer-test.js

@@ -0,0 +1,177 @@
+const test = require('tape');
+const sinon = require('sinon');
+
+const noop = () => {};
+const logger = {
+  error: noop,
+  info: noop,
+  debug: noop
+};
+
+const {
+  TtsStreamingConnectionStatus
+} = require('../lib/utils/constants.json');
+
+const TtsStreamingBuffer = require('../lib/utils/tts-streaming-buffer');
+
+// Helper to create a mock CallSession
+function createMockCs(options = {}) {
+  const mockEp = {
+    uuid: 'test-uuid-1234',
+    api: sinon.stub().resolves({ body: '+OK' }),
+    addCustomEventListener: sinon.stub(),
+    removeCustomEventListener: sinon.stub()
+  };
+
+  return {
+    logger,
+    ep: mockEp,
+    isTtsStreamOpen: options.isTtsStreamOpen !== undefined ? options.isTtsStreamOpen : true,
+    getTsStreamingVendor: () => options.vendor || 'deepgram'
+  };
+}
+
+/**
+ * BUG REPRODUCTION TEST
+ *
+ * This test reproduces the exact issue from production logs:
+ * {
+ *   "args": ["uuid", "send", " "],
+ *   "msg": "Error calling uuid_deepgram_tts_streaming: -USAGE: <uuid> connect|send|clear|close [tokens]"
+ * }
+ *
+ * Root cause: When multiple flushes are queued while connecting, and a space token
+ * gets buffered between flushes, Phase 1 of _feedQueue sends that space to the TTS vendor.
+ *
+ * Sequence:
+ * 1. bufferTokens('Hello.') while connecting
+ * 2. flush() while connecting
+ * 3. bufferTokens(' ') while connecting (passes because bufferedLength > 0)
+ * 4. flush() while connecting
+ * 5. Connection completes, _feedQueue processes: [text:Hello., flush, text:" ", flush]
+ * 6. First flush sends "Hello." - OK
+ * 7. Second flush sends " " - BUG!
+ */
+test('TtsStreamingBuffer: multiple flushes while connecting - space token sent to TTS vendor', async(t) => {
+  const cs = createMockCs();
+  const buffer = new TtsStreamingBuffer(cs);
+
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connecting;
+  buffer.vendor = 'deepgram';
+
+  const apiCalls = [];
+  const originalApi = buffer._api.bind(buffer);
+  buffer._api = async function(ep, args) {
+    apiCalls.push({ args: [...args] });
+    return originalApi(ep, args);
+  };
+
+  // First batch while connecting
+  await buffer.bufferTokens('Hello.');
+  buffer.flush();
+
+  // Second batch - just a space (passes because bufferedLength > 0)
+  await buffer.bufferTokens(' ');
+  buffer.flush();
+
+  // Verify queue state before connect
+  t.equal(buffer.queue.length, 4, 'queue should have 4 items: [text, flush, text, flush]');
+  t.equal(buffer.queue[0].type, 'text', 'first item should be text');
+  t.equal(buffer.queue[0].value, 'Hello.', 'first text should be "Hello."');
+  t.equal(buffer.queue[1].type, 'flush', 'second item should be flush');
+  t.equal(buffer.queue[2].type, 'text', 'third item should be text');
+  t.equal(buffer.queue[2].value, ' ', 'third item should be space');
+  t.equal(buffer.queue[3].type, 'flush', 'fourth item should be flush');
+
+  // Connect - triggers _feedQueue
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connected;
+  await buffer._feedQueue();
+
+  // Check API calls
+  const sendCalls = apiCalls.filter(call => call.args[1] === 'send');
+
+  // This assertion will FAIL until the bug is fixed
+  const whitespaceOnlySends = sendCalls.filter(call => /^\s*$/.test(call.args[2]));
+
+  t.equal(whitespaceOnlySends.length, 0,
+    `should not send whitespace-only tokens, but sent: ${whitespaceOnlySends.map(c => JSON.stringify(c.args[2])).join(', ')}`);
+
+  t.end();
+});
+
+/**
+ * Additional test: Verify text with trailing space in same flush is OK
+ */
+test('TtsStreamingBuffer: text with trailing space in same flush should work', async(t) => {
+  const cs = createMockCs();
+  const buffer = new TtsStreamingBuffer(cs);
+
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connecting;
+  buffer.vendor = 'deepgram';
+
+  const apiCalls = [];
+  const originalApi = buffer._api.bind(buffer);
+  buffer._api = async function(ep, args) {
+    apiCalls.push({ args: [...args] });
+    return originalApi(ep, args);
+  };
+
+  // Buffer text with trailing space, then flush
+  await buffer.bufferTokens('Hello.');
+  await buffer.bufferTokens(' ');
+  buffer.flush();
+
+  // Connect
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connected;
+  await buffer._feedQueue();
+
+  const sendCalls = apiCalls.filter(call => call.args[1] === 'send');
+
+  t.equal(sendCalls.length, 1, 'should have one send call');
+  t.equal(sendCalls[0].args[2], 'Hello. ', 'should send "Hello. " (text with trailing space)');
+
+  t.end();
+});
+
+/**
+ * Test: Leading whitespace should be discarded when buffer is empty
+ */
+test('TtsStreamingBuffer: leading whitespace discarded when buffer empty', async(t) => {
+  const cs = createMockCs();
+  const buffer = new TtsStreamingBuffer(cs);
+
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connected;
+  buffer.vendor = 'deepgram';
+
+  // Try to buffer whitespace when buffer is empty
+  const result = await buffer.bufferTokens('   ');
+
+  t.equal(result.status, 'ok', 'should return ok status');
+  t.equal(buffer.bufferedLength, 0, 'buffer should remain empty');
+  t.equal(buffer.queue.length, 0, 'queue should remain empty');
+
+  t.end();
+});
+
+/**
+ * Test: Whitespace can be buffered when buffer has content
+ */
+test('TtsStreamingBuffer: whitespace accepted when buffer has content', async(t) => {
+  const cs = createMockCs();
+  const buffer = new TtsStreamingBuffer(cs);
+
+  buffer._connectionStatus = TtsStreamingConnectionStatus.Connecting;
+  buffer.vendor = 'deepgram';
+
+  // Buffer real text first
+  await buffer.bufferTokens('Hello');
+
+  // Now buffer whitespace (should pass because bufferedLength > 0)
+  const result = await buffer.bufferTokens(' ');
+
+  t.equal(result.status, 'ok', 'should return ok status');
+  t.equal(buffer.bufferedLength, 6, 'buffer should have 6 chars');
+  t.equal(buffer.queue.length, 2, 'queue should have 2 items');
+
+  t.end();
+});