feat: integrate durable chat voice transport and deployment assets

web/token_server.py

@@ -60,6 +60,22 @@ async def token(request: Request):
         allowed = set(filter(None, os.getenv("CONTROL_ALLOWED_ORIGINS", "").split(",")))
         if origin not in allowed:
             return JSONResponse({"error": "Invalid request origin"}, 403, headers=headers)
+    # The conversation identifier is only a request to bind an existing chat;
+    # the trusted account service performs ownership checks before granting it.
+    body_bytes = bytearray()
+    async for chunk in request.stream():
+        body_bytes.extend(chunk)
+        if len(body_bytes) > 4096:
+            return JSONResponse({"error": "Request body too large"}, 413, headers=headers)
+    try:
+        body = json.loads(body_bytes) if body_bytes else {}
+    except (ValueError, UnicodeDecodeError):
+        return JSONResponse({"error": "Invalid request"}, 400, headers=headers)
+    if not isinstance(body, dict):
+        return JSONResponse({"error": "Invalid request"}, 400, headers=headers)
+    conversation_id = body.get("conversation_id")
+    if conversation_id is not None and (not isinstance(conversation_id, str) or not 1 <= len(conversation_id) <= 128):
+        return JSONResponse({"error": "Invalid conversation"}, 400, headers=headers)
     try:
         async with httpx.AsyncClient(timeout=10) as client:
             control_headers = {"X-Control-Secret": CONTROL_SECRET}
@@ -73,10 +89,14 @@ async def token(request: Request):
             room_name = f"voice-{user['id']}-{uuid.uuid4().hex}"
             grant = await client.post(f"{CONTROL_URL}/internal/rooms", headers=control_headers,
                                      json={"user_id": user["id"], "room_name": room_name, "ttl": 86400,
-                                           "session_token": credential})
-            grant.raise_for_status()
+                                           "session_token": credential, "conversation_id": conversation_id})
+            if grant.status_code != 201:
+                status = grant.status_code if grant.status_code in (401, 403, 404, 409, 503) else 503
+                return JSONResponse({"error": "Conversation unavailable"}, status, headers=headers)
+            granted = grant.json()
         return JSONResponse({"token": make_token(room_name, f"user:{user['id']}"), "room": room_name,
-                             "user": {"id": user["id"], "display_name": user["display_name"]}}, headers=headers)
+                             "conversation_id": granted.get("conversation_id"),
+                              "user": {"id": user["id"], "display_name": user["display_name"]}}, headers=headers)
     except (httpx.HTTPError, ValueError, KeyError):
         return JSONResponse({"error": "Account service unavailable"}, 503, headers=headers)