<abstract>This specification defines an XMPP protocol extension for the third-party control of telephone calls and other similar media sessions. The protocol includes support for session management/signaling, as well as advanced media resources such as speech recognizers, speech synthesizers and audio/video recorders. The protocol serves a different purpose from that of first-party protocols such as Jingle or SIP, and is compatible with those protocols.</abstract>
<p>Rayo is a protocol to allow third-party remote control over media sessions, audio/video mixers and a variety of advanced media resources such as speech recognizers, speech synthesizers and audio/video recorders. These capabilities can be combined to create a wide variety of applications such as menu-based phone systems, in-game conferencing and anonymous dating services. Unlike <ahref='xep-0166.html'>Jingle</a> or even <ahref='http://en.wikipedia.org/wiki/Session_Initiation_Protocol'>SIP</a>, a Rayo client is not concerned with being a party to either the session negotiation or the media stream itself.</p>
<ul>
<li>A Rayo server takes on the role of negotiating a media session between itself and some other endpoint, or between two external endpoints, by way of an implementation-specific means, be that Jingle, SIP, the public-switched telephone network, or anything else. The server may even bridge multiple networks.</li>
<li>The server then presents the Rayo protocol as an interface to a Rayo client, allowing it to monitor and/or exercise third-party control over the established media sessions.</li>
<li>The client has the option to accept/reject/answer inbound session requests, request the creation of outbound sessions and monitor their progress, execute media operations such as speech synthesis, speech recognition & recording, and to end sessions.</li>
</ul>
<p>The relationship between the calling parties, the Rayo server and the Rayo client looks something like this:</p>
<p>In this example, a call from 'tel:+13058881212' has reached the Rayo server 'shakespeare.lit' by calling 'tel:+18003211212', and been assigned an ID '9f00061'. The server has determined that 'juliet@capulet.lit' is a valid candidate to be the client to whom the server delegates control of the call, and so has directed an <ahref='def-offer'>offer event</a> to her 'balcony' resource.</p>
<p>The client, 'juliet@capulet.lit', then decides that it is able to handle the incoming call, and so accepts it from the server, thus gaining exclusive control and indicating to the calling party that the call will be processed and that it should ring.</p>
<examplecaption="Potential controlling party attempts to become definitive controlling party by sending the call an accept command"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='hd721'>
<acceptxmlns='urn:xmpp:rayo:1'/>
</iq>
]]></example>
<examplecaption="Call acknowledges accept command to the (now) definitive controlling party"><![CDATA[
<iqfrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='result'
id='hd721'/>
]]></example>
<p>Following confirmation from the server that the attempt to gain control of the call was successful, the client proceeds to answer the call, opening up the media stream between the caller and the server.</p>
<examplecaption="Controlling party answers the call"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='43jo3'>
<answerxmlns='urn:xmpp:rayo:1'/>
</iq>
]]></example>
<examplecaption="Call acknowledges answer command to controlling party"><![CDATA[
<iqfrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='result'
id='43jo3'/>
]]></example>
<p>Once the client has confirmation that the call has been answered, it triggers the start of a media output component in order to play a message to the caller using a Text-to-speech (TTS) engine.</p>
<examplecaption="Controlling party requests a new output component"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='j9d3j'>
<outputxmlns='urn:xmpp:rayo:output:1'
voice='allison'>
<documentcontent-type="text/plain">
<![CDATA[
You have no new messages. Goodbye!
]]]]><![CDATA[>
</document>
</output>
</iq>
]]></example>
<examplecaption="Call acknowledges request for new output component and provides its ID"><![CDATA[
<p>The client then decides it has no further operations to perform on the call, and that the call should end. It instructs the server to hang up the call gracefully.</p>
<examplecaption="Controlling party hangs up the call"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='f3wh8'>
<hangupxmlns='urn:xmpp:rayo:1'/>
</iq>
]]></example>
<examplecaption="Call acknowledges hangup command to controlling party"><![CDATA[
<iqfrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='result'
id='f3wh8'/>
]]></example>
<examplecaption="Controlling party receives notification of the call being terminated"><![CDATA[
<presencefrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='unavailable'>
<endxmlns='urn:xmpp:rayo:1'>
<hangup-command/>
</end>
</presence>
]]></example>
</section1>
<section1topic='Requirements'anchor='reqs'>
<p>The protocol defined herein is designed to provide the following features:</p>
<ol>
<li><strong>Call Control:</strong> Incoming calls are "offered" to clients at which point they can be answered, rejected, redirected to another destination, etc. Outbound calls may also be made and monitored. Every attempt is made to be shield the Rayo client from the low level telephony protocol (e.g. SIP, Jingle, PSTN, etc).</li>
<li><strong>Audio File Playback:</strong> A compatible Rayo server will fetch a file from a a specified URL and play the containing audio to the caller.</li>
<li><strong>Speech Synthesis / TTS:</strong> In cases where dynamic data must be spoken, a Speech Synthesis engine may be used to play computer generated speech to the caller.</li>
<li><strong>Touch-tone Events / DTMF:</strong> Rayo surfaces real-time event when the caller presses keys on their touch-tone keypad.</li>
<li><strong>Speech Recognition:</strong> Enables the phone application to take spoken queues allowing for sophisticated voice-driven menus and directory services.</li>
<li><strong>Call Recording:</strong> Can be used to capture the caller's voice (e.g. Voicemail) or both sides of the call for auditing and compliance purposes.</li>
<li><strong>Mixing:</strong> Typically referred to as an audio "conference"; calls can be joined together so that the participants can hear each other in real-time.</li>
</ol>
<p>Many third-party call control protocols have preceeded Rayo (see Asterisk's AGI/AMI, FreeSWITCH's eventsocket, Microsoft's TAPI, Java's JTAPI, Novell/AT&T's TSAPI, CSTA, etc). None of these protocols is ideal, and all have one or more of the following drawbacks:</p>
<ul>
<li><strong>Totally ground-up wire protocol</strong> requiring implementation all the way down to the socket.</li>
<li><strong>Platform/vendor/hardware specific</strong> - each system implements its own proprietary protocol (in many cases, without a formal published specification) which does not allow easily porting an application from one back-end to another.</li>
<li><strong>Synchronous interface</strong> - Operations on calls or other entities are often blocking, and one must serialise all control messages.</li>
<li><strong>Inconsistent</strong> - evolved, rather than designed.</li>
<li><strong>Lacking in scalability</strong> - client/server sometimes tied one-to-one, servers rarely clustered, advanced message routing not possible.</li>
<li><strong>Poor security</strong> - lack of wire-level encryption, lack of or sub-standard authentication mechanisms, lack of or limited authorization mechanisms, lack of or poor sandboxing between multiple tenants on one system.</li>
<li><strong>Inextensible</strong> - The specification of extensions to the core protocol is either impossible or very difficult.</li>
</ul>
<p>Rayo has been designed with these failings in mind, and intends to address many concerns not addressed by these earlier attempts. The following considerations were made:</p>
<ul>
<li><strong>Simple client library implementation</strong> - XMPP client libraries exist in all modern languages, and many are of a high standard of quality and maturity.</li>
<li><strong>Cross-platform standard</strong> - The protocol must not expose any platform specifics and all elements should be candidates for implementation on any suitable platform. Addiditionally, the protocol must be ratified as a standard following a community discussion.</li>
<li><strong>Asynchronous interface</strong> - The protocol should present an asynchronous interface for the purposes of performance and flexibility in performing parallel operations.</li>
<li><strong>Consistent</strong> - The protocol must provide a considered, unobtrusive, logically and philisophically consistent interface.</li>
<li><strong>Federated</strong> - The protocol must support communication between client and server entities on separately owned, operated and addressed networks.</li>
<li><strong>Flexible routing</strong> - The protocol must lend itself to routing across wide networks such as the internet, and to potential complex routing such as proxying or redirection. Additionally, the client and server should each be aware of the presence of the other and be able to use such information to make routing decisions.</li>
<li><strong>Extensible</strong> - The protocol must provide for the possibility of extra functionality being added by future specifications or an individual implementation.</li>
<li><strong>Secure</strong> - The protocol should include appropriate measures for authentication and authorization of participants, as well as preventing third-parties from intercepting control messages.</li>
</ul>
<p>Many of the features in the above list are available to Rayo at no specification or implementation cost, since they are core to XMPP itself and thus Rayo inherits these 'for free'.</p>
<p>Additionally, the protocol is required to abstract away the complexity of the back-end negotiation, especially the details of the transport protocols such as SIP or Jingle, but to map conceptually to such protocols.</p>
</section1>
<section1topic='Terminology'anchor='terms'>
<section2topic='Glossary'anchor='terms-glossary'>
<dl>
<di>
<dt>Third-party call control (3PCC)</dt>
<dd>The observation and/or control of a live media session by an entity which is not a direct party to the session.</dd>
</di>
<di>
<dt>Command</dt>
<dd>Commands instruct the receiving entity to perform some atomic action. Commands may be executed against a given call, component or mixer and can be considered completed as soon as they receive a response. Some commands create components, and return a reference to the component in their response.</dd>
</di>
<di>
<dt>Component</dt>
<dd>Components extend the Rayo protocol by providing additional media and call control functionality. Components are created by an appropriate command, which returns a reference to the component. Components are executed asynchronously, and have a lifecycle attached to them, with the ability to trigger events or have commands issued to it. Once a component is stopped or comes to an end naturally, it will issue a special <complete/> event, indicating that it has ceased executing and deliver any required data.</dd>
</di>
<di>
<dt>Potential controlling party (PCP)</dt>
<dd>An XMPP entity to which an offer to control an incoming call may be sent.</dd>
</di>
<di>
<dt>Definitive controlling party (DCP)</dt>
<dd>The XMPP entity which gains a lock on control of a session, either by requesting the session's creation, or being the first respondent to an offer.</dd>
</di>
<di>
<dt>Security Zone</dt>
<dd>A security zone is the conceptual border around a call which defines which parties may interact with the call's media or signaling. A security zone MUST contain the rayo server's internal implementation, the media server to which the call is joined, the DCP, and any JID whose bare form is the same as the DCP. A server MAY relax this definition further, for example to consider all JIDs at the same domain to be in the same security zone.</dd>
<p>A Rayo server is an entity which is capable of receiving and initiating calls and being party to their media stream, while exposing a Rayo interface to a client in order to permit control over its calls. The Rayo server may handle calls in any way supported by the implementation, such as SIP, Jingle, etc, and should expose a full XMPP domain at the root level of the service deployment (eg shakespeare.lit).</p>
<p>The Rayo server is responsible for keeping track of valid clients, routing calls to the correct potential controlling parties, performing authorization measures on received stanzas, etc.</p>
<p>For the purposes of this specification, complex server-side deployments such as clusters, proxies, gateways, protocol translators, etc are not considered. Further details of such concepts may be found in their (present or future) relevant specifications.</p>
<p>A Rayo client is an entity which implements the Rayo protocol for the purpose of asserting control over calls made available by a Rayo server. The method by which such control measures are determined is outside the scope of this document, but may be the result of human interaction or some automated decision-making process.</p>
<p>A Rayo client is responsible for indicating its availability to a Rayo server and responding to offer messages appropriately.</p>
<p>A Rayo call is a short-lived XMPP entity within the scope of the deployment's root domain, perhaps at a sub-domain, with the purpose of representing a single session. It is usually a simple alias for the main server process.</p>
<p>A Rayo call is the entity with which most client interactions are made, and is responsible for sending its events to and receiving commands from a client. Calls may host components.</p>
<p>Calls have separate presence from the root domain of the service and thus appear to be separate entities.</p>
<p>A Rayo mixer is an XMPP entity within the scope of the deployment's root domain, perhaps at a sub-domain, with the purpose of representing a service for the linking of media streams from several calls. It is usually a simple alias for the main server process.</p>
<p>A Rayo mixer is responsible for sending its events to and receiving commands from one or more clients, and can host components.</p>
<p>Mixers have separate presence from the root domain of the service and its calls and thus appear to be separate entities.</p>
<p>A Rayo command is a simple combination of request and response and may be issued directly to the service domain, a call, a mixer or a component attached to any of the former. Commands are executed serially and are generally very short-lived.</p>
<p>Components extend the Rayo protocol by providing additional media and call control functionality.</p>
<p>Components have a lifecycle and are started by sending a specialized command to a call or mixer. Thus, a request for creation of a component will return a reference to the component's ID, and the component will continue to execute until it completes, potentially sending events and processing commands along the way (such as an instruction to pause or terminate), before finally issuing an event indicating its completion and thus unavailability. Multiple components may be active on a call or mixer at any one time, and commands may be executed on any entity during the execution of a component.</p>
<p>All of the actors described in the previous section (with the exception of commands) are represented by XMPP entities with a JID of their own. Thus, a scheme for determining the JIDs of each of these entities is required. The following is the required naming scheme for Rayo deployments, where elements in square brackets are optional.</p>
<p>Commands should be addressed to the entity on which they should be enacted. Individual commands only apply to certain object (for example instructing a component to hangup will return an error). In general, commands may be sent from a client to the service, a call, a mixer or a component. Events may be sent from a call, a mixer or a component to a client.</p>
<p>Rayo defines several events and commands which may be executed on one of the above actors. These payloads must be sent within an XMPP primitive element, and the rules are as such:</p>
<li><strong>Events:</strong> Sent as directed presence from the entity producing the event to a client. Rayo servers SHOULD timestamp all events using &xep0203; in order to allow clients to reliably use Rayo events for billing purposes.</li>
<li><strong>Commands:</strong> Sent as an <iq/> with the 'type' attribute 'set' from the client to the entity to be acted on. Responses returned as an <iq/> with the 'type' attribute either 'result' or 'error'.</li>
</ul>
</section2>
</section1>
<section1topic='Session Flow'anchor='session'>
<p>This section describes the form, function and order of Rayo stanzas sent across the wire, and the circumstances in which they apply and/or may arise.</p>
<p>In order for a Rayo client to be considered a potential controlling party for incoming sessions, it MUST first notify the Rayo server that it is available for the receipt of calls. This is done by sending directed presence to the Rayo server with a <show/> element containing 'chat' as in the example:</p>
<examplecaption="Client presents itself as available to the Rayo server"><![CDATA[
<presencefrom='juliet@capulet.lit/balcony'
to='shakespeare.lit'>
<cxmlns='http://jabber.org/protocol/caps'
hash='sha-1'
node='urn:xmpp:rayo:client:1'
ver='QgayPKawpkPSDYmwT/WM94uAlu0='/>
<show>chat</show>
</presence>
]]></example>
<p>Conversely, when a Rayo client wishes not to be considered a potential controlling party, it SHOULD send directed presence to the Rayo server with a <show/> element containing 'dnd' as in the example:</p>
<examplecaption="Client presents itself as unavailable to the Rayo server"><![CDATA[
<p>Sessions may be established either at the request of the Rayo client (an outbound call) or as a result of a 3rd party request (an inbound call). Each scenario differs in the Rayo protocol only up to the point at which the session is established and media begins to flow. First we shall examine the sequence of stanzas passed between server and client in each of these scenarios.</p>
<p>In order for a client to establish a new outbound call, it MUST first send a <linkurl="def-dial">dial command</link> to the server, indicating the proposed target for the call, its apparent source, and any meta-data to send to the target as headers.</p>
<examplecaption="Client requests establishment of a new outbound session"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='shakespeare.lit'
type='set'
id='h7ed2'>
<dialxmlns='urn:xmpp:rayo:1'
to='tel:+13055195825'
from='tel:+14152226789'>
<headername="x-skill"value="agent"/>
<headername="x-customer-id"value="8877"/>
</dial>
</iq>
]]></example>
<p>On successfully receiving and parsing the dial command, the server SHOULD perform its own proprietary authorization measures to ensure that only desirable outbound sessions are created. If it is established that the command should not be allowed, the server MUST return an error giving an authorization reason.</p>
<p>If a 'uri' attribute is set on the dial command, the server should attempt to create the call at the requested URI. This allows clients to know the URI of the call prior to it coming into existence, for clients where this distinction might be important.</p>
<p>If the client is unknown to the server and the server does not permit session creation by unknown clients, the server MUST return a <registration-required/> error with a type of 'auth'.</p>
<examplecaption="Server indicates client is unknown and the server does not permit session creation by unknown clients"><![CDATA[
<p>If the client is not authorized (as determined by an implementation/deployment-specific algorithm) to create a new outbound session given the parameters provided, the server MUST return a <not-authorized/> error with a type of 'auth'.</p>
<examplecaption="Server indicates client is not authorized to create a new outbound session given the parameters provided"><![CDATA[
<p>If the server does not have sufficient resources to create a new session, the server MUST return a <resource-constraint/> error with a type of 'wait'.</p>
<examplecaption="Server indicates that it does not have sufficient resources to create a new session"><![CDATA[
<p>If the command is successful and the call is queued, however, confirmation of such should be sent to the client, including a reference to the unique ID of the call. This call ID may be used to execute commands and filter events for the duration of the session.</p>
<examplecaption="Confirmation of successful dial request and call ID"><![CDATA[
<p>Once the server receives notification that the session has been accepted by the third party, it should send a ringing event to the client to indicate such:</p>
<examplecaption="Call announces its ringing state (accepted by 3rd party but not yet answered)."><![CDATA[
<presencefrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'>
<ringingxmlns='urn:xmpp:rayo:1'/>
</presence>
]]></example>
<p>Similarly, once the server receives notification that the session has been answered, it should negotiate media between the dialed party and its local media server. Once media negotiation is complete, it should send an answered event to the client to indicate such:</p>
<examplecaption="Call announces its answered state (media connected)."><![CDATA[
<p>In this case, the server MUST treat the session creation in the same way as without the join element, until the point of media negotiation. Here, the server should negotiate media as specified by the join element, in accordance with the rules defined in <linkurl='#session-joining'>joining calls</link>. Media MUST NOT be negotiated with the local media server, unless the join specifies so. The join operation MUST behave as described in <linkurl='#session-joining'>joining calls</link>.</p>
<p>When the system receives a call from one of its connected networks, it MUST then expose that requested session to Rayo clients. It SHOULD use an implementation-specific routing mechanism to map incoming calls to some set of registered JIDs which are considered appropriate controlling parties. From this set, it SHOULD then remove any parties whom it can identify as being temporarily inappropriate for control (either unavailable based on presence, under too much load, or any other metric which the server has available). If, as a result, the set of Potentially Controlling Parties is empty, the server MUST reject the call indicating that the requested service was unavailable.</p>
<p>If the server can identify active Potential Controlling Parties, it MUST offer them control of the call simultaneously. The server must broadcast an offer on behalf of the call to all Potential Controlling Parties, using applicable to/from/header data from the incoming session. The server MUST also include entity capabilities information in the presence stanza containing the offer, in order to advertise the fact that the entity is a call, qualified by the node name "urn:xmpp:rayo:call:1".</p>
<examplecaption="New call announces itself to a potential controlling party"><![CDATA[
<presencefrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'>
<cxmlns='http://jabber.org/protocol/caps'
hash='sha-1'
node='urn:xmpp:rayo:call:1'
ver='QgayPKawpkPSDYmwT/WM94uAlu0='/>
<offerxmlns='urn:xmpp:rayo:1'
to='tel:+18003211212'
from='tel:+13058881212'>
<headername="x-skill"value="agent"/>
<headername="x-customer-id"value="8877"/>
</offer>
</presence>
]]></example>
<p>Once the server has offered control, it MUST wait indefinitely for a response from a PCP. The server SHOULD monitor the availability of PCPs to whom offers have been sent. If they all cease to be PCPs (eg by going offline) then the call should be rejected in the same way as if there had not been any available PCPs to begin with.</p>
<p>If an offered PCP executes a command against the call, by sending a command node to the call's JID inside an IQ 'set', the server should execute the following routine:</p>
<ol>
<li>If the call does not have a DCP, set it to the PCP from which the command originated.</li>
<li>If the call has a DCP, and the command did not originate from the DCP, return a conflict (cancel) error in response to the command of the following format:
<examplecaption="Server indicates that the call already has another DCP and that control of the call is no longer available."><![CDATA[
<li>If the command is an accept command, notify the remote calling party that the call has been accepted. Return an empty IQ result to the command issuing party to confirm successful execution.</li>
<li>If the command is an answer command, notify the remote calling party that the call has been answered and negotiate media between the calling party and the server's local media server. Return an empty IQ result to the command issuing party to confirm successful execution.</li>
<li>If the command is any other, handle it in the manner detailed in the following sections.</li>
<p>Calls in a Rayo system are capable of having their media streams moved/manipulated. Once such manipulation is to join the media streams of two calls. In a scenario where callA and callB should be joined, the client MUST send a join command to either call (not both) specifying the call ID of the other call, like so:</p>
<examplecaption="Client instructs callA to join to callB and the server acknowledges the join was completed"><![CDATA[
<p>If the calls to be joined to each other are in the same security zone, the server MUST join the media streams of the two calls and return an empty IQ result to confirm that the operation has been successful. If the parties to be joined are not within the same security zone, an error should be returned as detailed below.</p>
<p>When calls are joined to each other by any mechanism, each call MUST dispatch a joined event specifying who they have been joined to:</p>
<examplecaption="Call A and B were joined, both calls emit joined events"><![CDATA[
<p>By default, the server MUST join the calls by bridging their audio through its local media server, with bidirectional media. In order to specify alternative behaviour, the client MAY specify a media option (either 'bridge' or 'direct') and/or a direction option (either 'duplex', 'send' or 'recv'), and the server MUST bridge accordingly.</p>
<p>There are several reasons why the call might return an error instead of acknowledging a join:</p>
<ul>
<li>The specified join party does not exist or cannot be found.</li>
<li>The specified join party is inaccessible for the purposes of being joined due to security restrictions.</li>
<li>The server does not have sufficient resources to complete the join.</li>
<li>The join command was malformed.</li>
<li>The specified media/direction options or their combination are not possible/supported.</li>
</ul>
<p>If the specified join party does not exist or cannot be found, the server MUST return a <service-unavailable/> error with a type of 'cancel'.</p>
<examplecaption="Call indicates that the specified join party does not exist or cannot be found"><![CDATA[
<p>If the specified join party is inaccessible for the purposes of being joined due to security restrictions, the server MUST return a <not-allowed/> error with a type of 'cancel'.</p>
<examplecaption="Call indicates that the specified join party is inaccessible for the purposes of being joined due to security restrictionss"><![CDATA[
<p>If the server does not have sufficient resources to complete the join, the server MUST return a <resource-constraint/> error with a type of 'wait'.</p>
<examplecaption="Call indicates that there are not sufficient resources to complete the join"><![CDATA[
<p>If the specified media/direction options or their combination are not possible/supported, the server MUST return a <feature-not-implemented/> error with a type of 'modify'.</p>
<examplecaption="Call indicates that the specified media/direction options or their combination are not possible/supported."><![CDATA[
<p>The server MUST unjoin the media streams of the two calls, rejoin both to the media server and return an empty IQ result to confirm that the operation has been successful:</p>
<examplecaption="CallA acknowledges unjoin from callB"><![CDATA[
<iqfrom='callA@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='result'
id='h7ed2'/>
]]></example>
<p>Optionally, if no join is specified on the unjoin command, all existing joins must be broken:</p>
<examplecaption="Client instructs callA to unjoin from every existing join"><![CDATA[
<p>If the unjoin command was malformed (eg an empty call URI specified), the server MUST return a <bad-request/> error with a type of 'modify'.</p>
<examplecaption="Call indicates that the join command was malformed"><![CDATA[
<p>Calls may be unjoined from other calls either in response to an unjoin command, as the result of one of the calls disconnecting, or as the result of an error. The server MUST monitor calls for being unjoined from another call, and emit an unjoined event when this is detected.</p>
<examplecaption="CallA announces that it has been unjoined from callB, and vice versa"><![CDATA[
<p>If a client wishes to modify the parameters of a join, it MUST send a new join command to the target call with the new parameters. The server MUST renegotiate media using the new parameters, and acknowledge the command's completion. The server MUST NOT re-send joined events.</p>
<examplecaption="Client joins callA to callB in receive-only mode, and then 'upgrades' the join to full-duplex"><![CDATA[
<p>Rayo calls SHOULD support being joined to more than one other call at a time, each join having different parameters. Creating a new join MUST NOT destroy existing joins. If a join is requested but cannot be created without destroying existing joins, the call MUST return a conflict (cancel) error.</p>
<examplecaption="Call indicates that the requested joins cannot be created in parallel"><![CDATA[
<p>While calls may generally be joined peer-to-peer in any desirable combination, such an implementation is not necessarily scalable or practical to manage. Rayo, therefore, includes the concept of mixers, which are entities like calls, to which calls or other mixers may be joined in the same way as joining multiple calls directly. A mixer MUST be implicitly created the first time a call attempts to join it, MUST immediately broadcast presence to all controlling parties who have calls joined to it, and must respond to the join command with a reference to the mixer. The server MUST include entity capabilities information in the first presence stanza it sends, in order to advertise the fact that the entity is a mixer, qualified by the node name "urn:xmpp:rayo:mixer:1". A mixer MUST emit events (joined, unjoined) to all controlling parties who have calls joined to it, using the same semantics as joining calls.</p>
<p>In order to support friendly-named mixers without causing naming collisions between security zones, a server SHOULD represent a mixer internally using some alternative name scoped to the client's security zone and mapped to the friendly name/URI presented to the client for the emission of events and processing of commands. A server MUST NOT allow clients to interact with mixers allocated within other security zones either by observing their status or media.</p>
<examplecaption="Client instructs call to join a mixer"><![CDATA[
<p>Mixers MUST respect the normal rules of XMPP presence subscriptions. If a client sends directed presence to a mixer, the mixer MUST implicitly create a presence subscription for the client. On receiving unavailable presence, the mixer MUST stop sending events to the client.</p>
<p>The error conditions on joining a mixer are the same as for calls, as are the unjoin and join modification semantics. Additionally, mixers SHOULD be able to host components just like calls, following the rules defined for each component.</p>
<examplecaption="Client renders output to a mixer"><![CDATA[
<p>If the media server providing the mixer supports active speaker detection, it MUST emit active speaker events to all clients with a presence subscription. Such events MUST indicate the start and end of speaking for a particular call ID joined to the mixer.</p>
<examplecaption="Mixer indicates overlapping speaking status of two joined calls"><![CDATA[
<p>Once the last participant unjoins from the mixer, the mixer SHOULD be destroyed. When a mixer is destroyed, it MUST send unavailable presence to all entities which have a presence subscription.</p>
<p>Components are long-lived elements of a call or mixer which may execute in parallel, have a lifecycle (may send events and/or process commands during their execution, indicate their completion asynchronously) and typically implement media operations. A server SHOULD implement components in such a way that it is acceptable to execute multiple components of the same type or of differing types simultaneously. A server SHOULD implement all core components.</p>
<p>In the event that a call or mixer receives a command which triggers the execution of a component, it MUST use the normal command handling routine, schedule the component for immediate execution and return a reference to the requesting client as confirmation of the component's creation:</p>
<examplecaption="Client requests execution of an output component"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<outputxmlns='urn:xmpp:rayo:output:1'/>
</iq>
]]></example>
<examplecaption="Server provides reference to output component"><![CDATA[
<p>If a component execution command is received prior to the call being answered, the server MUST NOT answer the call, and SHOULD attempt to use early-media techniques to perform the relevant operation without answering the call. If such early-media is not possible, it MUST return an error indicating that the call state is incorrect (unexpected-request).</p>
<p>The whole command MUST be parsed up-front, and any applicable validation performed before acknowledgement of the command.</p>
<p>If the server does not implement a particular option value for the command/component, it should return a feature-not-implemented (modify) error:</p>
<examplecaption="Server indicates a lack of support for some aspect of the requested component/command"><![CDATA[
<p>If the server is not able to create the component due to a resource conflict with another component, it should return a resource-constraint (wait) error:</p>
<examplecaption="Server indicates a resource conflict with another component"><![CDATA[
<p>If the server is not able to create the component due to the call being in an incorrect state, it should return an unexpected-request (wait) error:</p>
<p>Once acknowleged, the component MUST begin execution according to its particular specification. During its execution, it MAY emit events relevant to its progress, and an implementation MUST be capable of emitting events specified for each component. Any events should be sent inside a directed presence element to the executing party.</p>
<p>During execution, the component MUST respond to commands addressed to it. Each component has its own set of commands, but all components have the 'stop' command in common. On receipt of the stop command, the component MUST acknowledge that it has been instructed to stop and gracefully cease its execution in whatever way is appropriate to the particular component.</p>
<examplecaption="Client requests component stop, server confirms"><![CDATA[
<p>When the component ceases to execute, it MUST send a <linkurl='#def-components-complete'>complete event</link> with a valid reason to the requesting party as directed presence with a type of 'unavailable'.</p>
<examplecaption="Component indicates it has completed due to being stopped"><![CDATA[
<p>Media output is a core concept in Rayo, and is provided by the output component. The component allows media to be rendered to a call or a mixer, using the server's local media server. A server MUST support audio file playback and MUST support the text/uri-list document format. A server MAY support speech synthesis and MAY support SSML. The component is created using an <linkurl='def-component-output'><output/> command</link>, containing one or more documents to render, along with a set of options to determine the nature of the rendering.</p>
<examplecaption='Client renders a simple SSML document to a call'><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<outputxmlns='urn:xmpp:rayo:output:1'>
<documentcontent-type='application/ssml+xml'>
<![CDATA[
<?xml version="1.0"?>
<!DOCTYPE speak PUBLIC "-//W3C//DTD SYNTHESIS 1.0//EN"
<s>The first is from Stephanie Williams and arrived at <break/> 3:45pm.</s>
<s>
The subject is <prosodyrate="-20%">ski trip</prosody>
</s>
</p>
</speak>
]]]]><![CDATA[>
</document>
</output>
</iq>
]]></example>
<examplecaption='Client renders a plain text document to a call'><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<outputxmlns='urn:xmpp:rayo:output:1'>
<documentcontent-type='text/plain'>
<![CDATA[
Thanks for calling, goodbye!
]]]]><![CDATA[>
</document>
</output>
</iq>
]]></example>
<p>The server MUST validate that it has apropriate resources/mechanisms to render the requested document before acknowledging the component creation.</p>
<p>In the case that an output component is executed on a call joined to other calls or mixers, the output SHOULD be rendered only to the call and not the joined parties (also known as 'whisper'). In the case that an output component is executed on a mixer, the output should be rendered into the mixer, such that all participants receive the output (also known as 'announce').</p>
<p>A client may instruct an output component to pause by sending a pause command. The server MUST cause the media server to pause rendering, maintaining position within the document and allowing for later resumption.</p>
<examplecaption="Client requests output component pause, server confirms"><![CDATA[
<p>A client may instruct an output component to resume rendering if it has previously been paused. The server MUST cause the media server to resume rendering at the last pause marker.</p>
<examplecaption="Client requests output component resume, server confirms"><![CDATA[
<p>A client may instruct an output component to increase the rendering rate by a unit amount, defined by the media server. The server MUST cause the media server to perform the rate increase and acknowledge the command.</p>
<examplecaption="Client requests output component speed up, server confirms"><![CDATA[
<p>A client may instruct an output component to decrease the rendering rate by a unit amount, defined by the media server. The server MUST cause the media server to perform the rate decrease and acknowledge the command.</p>
<examplecaption="Client requests output component speed down, server confirms"><![CDATA[
<p>A client may instruct an output component to increase the rendering volume by a unit amount, defined by the media server. The server MUST cause the media server to perform the volume increase and acknowledge the command.</p>
<examplecaption="Client requests output component volume up, server confirms"><![CDATA[
<p>A client may instruct an output component to decrease the rendering volume by a unit amount, defined by the media server. The server MUST cause the media server to perform the volume decrease and acknowledge the command.</p>
<examplecaption="Client requests output component volume down, server confirms"><![CDATA[
<p>A client may instruct an output component to move the play marker forward or back in time by a specified amount before resuming output. The server MUST cause the media to seek as instructed and acknowledge the command.</p>
<p>The attributes of the <seek/> element are as follows.</p>
<examplecaption="Client requests output seek forward by 20s, server confirms"><![CDATA[
<p>The output completion reason MUST be one of the <linkurl='#def-components-complete-reason'>core Rayo reasons</link>, <linkurl='#def-component-output-finish'>finish</link> (indicating that the document finished rendering naturally) or <linkurl='#def-component-output-maxtime'>max-time</link> (indicating that the maximum time was exceeded). Output component completion does not provide any metadata.</p>
<examplecaption="Component indicates it has completed due to reaching the end of the document"><![CDATA[
<p>Media input is a core concept in Rayo, and is provided by the input component. The component allows input to be collected from a call by way of either DTMF (dual-tone multi-frequency) or ASR (automatic speech recognition), using the server's local media server. A Rayo server MUST support DTMF input and MUST support SRGS XML grammars (application/srgs+xml). A server MAY suport speech input, and MAY support other grammar formats. The component is created using an <linkurl='def-component-input'><input/> command</link>, containing one or more grammar documents by which to control input, along with a set of options to determine the nature of the collection.</p>
<examplecaption='Client requests DTMF input collection from a call'><![CDATA[
<p>The server MUST validate that it has appropriate resources/mechanisms to collect the requested input before acknowledging the component creation.</p>
<p>In the case that an input component is executed on a call joined to other calls or mixers, the input SHOULD be collected only from the call and not the joined parties. Input components executed on a mixer SHOULD collect and combine input from all participants joined to the mixer.</p>
<p>The input completion reason MUST be one of the <linkurl='#def-components-complete-reason'>core Rayo reasons</link>, or one of the following reasons. Input component completion provides match metadata for the <finish/> reason only.</p>
<ul>
<li>
<linkurl='#def-component-input-match'>match</link> (indicating that one of the grammars matched the received input).
<p>If the media server reports a match to one of the provided grammars, the server MUST present the results of the match to the client by way of a match document in the format requested by the client. A server MUST be capable of supporting NLSML, and may support other formats.</p>
<examplecaption="Component indicates it has completed due to one of the grammars returning a match"><![CDATA[
<p>Prompt is a convenience component to wrap input and output components, combine their lifecycles, and allow input to barge-in on an output component in the standard sense.</p>
<examplecaption='Client requests DTMF input collection from a call'><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<promptxmlns='urn:xmpp:rayo:prompt:1'>
<outputxmlns='urn:xmpp:rayo:output:1'>
<documentcontent-type='application/ssml+xml'>
<![CDATA[
<?xml version="1.0"?>
<!DOCTYPE speak PUBLIC "-//W3C//DTD SYNTHESIS 1.0//EN"
<p>The server MUST validate that it has appropriate resources/mechanisms to render the requested output and collect the requested input before acknowledging the component creation.</p>
<p>The prompt component implements implements all intermediate commands from output and input and behaves the same. If output component commands are executed after the output component has ceased executing, a <unexpected-request> error MUST be returned.</p>
<p>It also emits an 'input-timers-started' event when the input component's timers are started, which corresponds to the completion of the output sub-component.</p>
<examplecaption='Prompt component announces that the input timers have started'><![CDATA[
<p>The input completion reason MUST be one of the <linkurl='#def-components-complete-reason'>core Rayo reasons</link>, or one of the <linkurl='#session-component-execution-input-completion'>Input component reasons</link>. Events signalling completion of the output components are suppressed.</p>
<p>Call recording is a core concept in Rayo, and is provided by the record component. The component allows media to be captured from a call or a mixer, using the server's local media server, stored, and made available to clients. The component is created using a <linkurl='def-component-record'><record/> command</link>, with a set of options to determine the nature of the recording.</p>
<examplecaption='Client requests a simple recording'><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<recordxmlns='urn:xmpp:rayo:record:1'/>
</iq>
]]></example>
<p>The server MUST validate that it has apropriate resources/mechanisms to make the recording before acknowledging the component creation. The component MUST ignore any hints that it does not understand.</p>
<p>In the case that a record component is executed on a call joined to other calls or mixers, the direction attibute will specify if the sent audio, received audio, or both will be present in the recording.</p>
<p>In send mode, only the audio sent by the caller is recorded.</p>
<p>In recv mode, when just joined to the media server, should record TTS, audio playback, etc; when joined to another call, should record that other call's sending audio (probably a human talking) also. When joined to a mixer, should record the audio send from the mixer (other people talking) also.</p>
<p>Duplex mode is a combination of send and recv. The platform may mix these or record them as separate channels.</p>
<p>When executing a record against a mixer, send mode is not supported. Recv mode records audio from all mixer participants. Duplex is a clone of recv.</p>
<p>A client may instruct a record component to pause by sending a pause command. The server MUST cause the media server to pause recording, allowing for later appending.</p>
<examplecaption="Client requests record component pause, server confirms"><![CDATA[
<p>A client may instruct a record component to resume recording if it has previously been paused. The server MUST cause the media server to resume recording, appending to the original file.</p>
<examplecaption="Client requests record component resume, server confirms"><![CDATA[
<p>The record completion reason MUST be one of the <linkurl='#def-components-complete-reason'>core Rayo reasons</link>, or one of the following reasons. Record component completion provides recording metadata in all cases.</p>
<ul>
<li>
<linkurl='#def-component-record-max-duration'>max-duration</link> (indicating that the max duration was reached).
</li>
<li>
<linkurl='#def-component-record-initial-timeout'>initial-timeout</link> (indicating that the initial timeout was triggered).
</li>
<li>
<linkurl='#def-component-record-final-timeout'>final-timeout</link> (indicating that the final timeout was triggered).
</li>
</ul>
<p>The server MUST present the recording for consumption by the client by way of recording meta-data on the complete reason, including a URI at which the recording may be fetched. It MUST provide uri, duration & size data as specified on the <linkurl='#def-component-record-recording'>recording element</link>.</p>
<examplecaption="Component indicates it has completed due to being stopped, providing the recording"><![CDATA[
<p>If a client can determine a more appropriate target for an incoming call, it may wish to relay this information to the caller in the form of a URI (eg SIP). The target URI must be specified in the 'to' attribute of the redirect element.</p>
<examplecaption="Client instructs a call to redirect, with some headers"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<redirectxmlns='urn:xmpp:rayo:1'
to='sip:other@there.com'>
<headername="x-skill"value="agent"/>
<headername="x-customer-id"value="8877"/>
</redirect>
</iq>
]]></example>
<p>The server should send an appropriate redirection instruction to the underlying session.</p>
<p>If the server is able to successfully relay the redirection to the calling party, it should send an empty IQ result to confirm the command has completed execution:</p>
<p>If the server is unable to perform the redirect because the call is in a state where a redirect is not possible, it should return an unexpected-request (wait) error indicating such:</p>
<examplecaption="Server indicates that the call is in a state where a redirect is not possible."><![CDATA[
<p>If a client cannot handle an incoming call, it MAY reject it. The client MUST do this before accepting the call. The target URI must be specified in the 'to' attribute of the redirect element.</p>
<examplecaption="Client instructs a call to reject, with some headers"><![CDATA[
<iqfrom='juliet@capulet.lit/balcony'
to='9f00061@call.shakespeare.lit'
type='set'
id='h7ed2'>
<rejectxmlns='urn:xmpp:rayo:1'>
<headername="x-reject-description"value="Sorry, she cannae take it!"/>
</reject>
</iq>
]]></example>
<p>The server should reject the underlying session. If the server is able to do so successfully, it should send an empty IQ result to confirm the command has completed execution:</p>
<p>If the server is unable to perform the rejection because the call has already been accepted, it should return a not-allowed (cancel) error indicating such:</p>
<examplecaption="Server indicates that the call already has another DCP and that control of the call is no longer available."><![CDATA[
<iqfrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='error'
id='h7ed2'>
<rejectxmlns='urn:xmpp:rayo:1'>
<headername="x-reject-description"value="Sorry, she cannae take it!"/>
<p>The server MUST follow this sequence to hang up a call:</p>
<ul>
<li>Terminate all components of the call, and components MUST send a complete event indicating hangup as the cause.</li>
<li>Terminate all joins on the call, sending unjoined events.</li>
<li>Terminate the underlying session.</li>
</ul>
</section3>
<section3topic='Call End Notification'anchor='session-termination-end'>
<p>The server MUST monitor a call's underlying session and react appropriately in the case that it comes to an end:</p>
<ul>
<li>The server MUST determine the reason for the call ending to be one of <linkurl='#def-end-reason'>the appropriate end reasons</link>.</li>
<li>If the call ending was not a result of a hangup command from a client, the server MUST terminate all components on the call, which MUST send a complete event indicating hangup as the cause. The server MUST additionally terminate all joins on the call, sending unjoined events.</li>
<li>The server MUST send an end event (of type unavailable) on behalf of the call, specifying the above determined reason as a child element, to all JIDs to which an offer was sent or from which a command was received.</li>
<li>The server MUST NOT send any more events from a call which has ended and declared itself unavailable.</li>
<li>The server MUST respond to any commands sent to an ended call (or one which never existed) with an item-not-found (cancel) error.</li>
</ul>
<examplecaption="Controlling party receives notification of the call being terminated due to a remote party hangup"><![CDATA[
<presencefrom='9f00061@call.shakespeare.lit'
to='juliet@capulet.lit/balcony'
type='unavailable'>
<endxmlns='urn:xmpp:rayo:1'>
<hangup/>
</end>
</presence>
]]></example>
<examplecaption="Non-existant call receives a command"><![CDATA[
<p>In elements which may carry child <header/> elements, a server or client MAY specify several header elements with the same name. In such cases, these MUST be considered to form a collection of ordered values for the key provided.</p>
<examplecaption="Client requests establishment of a new outbound session with multiple values for the SIP Route header"><![CDATA[
<p>XMPP message stanzas directed to the call's JID with a type of 'normal' MAY be forwarded to the calling party by translating the message into the calling party's protocol. In the case of SIP, this SHOULD follow the conventions set out in <ahref="http://tools.ietf.org/html/draft-ietf-stox-im-06">draft-ietf-stox-im-06</a> with the exception of the <thread/> to Call-ID mapping, as the Call-ID will always be that of the calling party.</p>
<p>If a message is directed to the call's JID with a type other than 'normal' then the server MUST return a <feature-not-implemented/> error with a type of 'modify'. If no translation is possible then the server SHOULD return the same error but with a type of 'cancel'.</p>
<examplecaption="Translation of a XMPP message into a SIP MESSAGE"><![CDATA[
<p>Indication that an outbound call has been answered and that the 3rd party negotiation has completed. At this point, the media stream should be open.</p>
<p>The <answered/> element MAY contain one or more <linkurl='#def-header'><header/> elements</link>.</p>
<p>The <answered/> element has no attributes.</p>
</section2>
<section2topic='End Element'anchor='def-end'>
<p>Indication that the call has come to an end, giving the reason.</p>
<p>The <end/> element MUST contain a single <linkurl='#def-end-reason'>end reason element</link>. It MAY also contain one or more <linkurl='#def-header'><header/> elements</link>.</p>
<p>The <end/> element has no attributes.</p>
<p>Instructs the server to reject the call with a given reason.</p>
<p>The <reject/> element MUST contain a single <linkurl='#def-reject-reason'>reject reason element</link>. It MAY also contain one or more <linkurl='#def-header'><header/> elements</link>.</p>
<p>The <reject/> element has no attributes.</p>
<p>Instructs the server to bring the call to an end naturally.</p>
<p>The <hangup/> element MAY contain one or more <linkurl='#def-header'><header/> elements</link>.</p>
<p>The <hangup/> element has no attributes.</p>
</section2>
<section2topic='Dial Element'anchor='def-dial'>
<p>Instructs the server to create a new call and surrender control of it to the requesting party.</p>
<p>The <dial/> element MAY contain one or more <linkurl='#def-header'><header/> elements</link>. It MAY contain one or more <linkurl='#def-join'><join/> elements</link>, instructing the server to join the new call in the indicated manner rather than the default (join to the local media server).</p>
<p>The attributes of the <dial/> element are as follows.</p>
<tablecaption='Attributes of Dial Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Inclusion</th>
<th>Default</th>
</tr>
<tr>
<td>to</td>
<td>Indicates the party to whom the call should be directed.</td>
<td>REQUIRED</td>
<td></td>
</tr>
<tr>
<td>from</td>
<td>Indicates the caller ID with which the call should appear to originate.</td>
<td>Indicates the maximum time allowed for a response to be provided by the third party before the call should be considered to have come to an end.</td>
<td>OPTIONAL</td>
<td>-1</td>
</tr>
</table>
</section2>
<section2topic='Join Element'anchor='def-join'>
<p>Instructs the server to join the media streams of the call and the specified party, given direction and media negotiation parameters.</p>
<p>The <join/> element MUST be empty.</p>
<p>The attributes of the <join/> element are as follows.</p>
<tablecaption='Attributes of Join Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Inclusion</th>
<th>Default</th>
</tr>
<tr>
<td>direction</td>
<td>
<p>Indicates the direction in which the media should flow between the call and the 3rd party. Must be one of the following values:</p>
<ul>
<li><strong>"duplex"</strong> - Indicates that media should flow in both directions between the parties.</li>
<li><strong>"send"</strong> - Indicates that media should only flow from the target call to the third party.</li>
<li><strong>"recv"</strong> - Indicates that media should only flow from the third party to the target call.</li>
</ul>
</td>
<td>OPTIONAL</td>
<td>duplex</td>
</tr>
<tr>
<td>media</td>
<td>
<p>Indicates the manner in which the server should negotiate media between the two parties. Must be one of the following values:</p>
<ul>
<li><strong>"bridge"</strong> - Instructs the server to bridge the parties media streams via its local media server.</li>
<li><strong>"direct"</strong> - Instructs the server to have the parties negotiate media directly with one another.</li>
</ul>
</td>
<td>OPTIONAL</td>
<td>bridge</td>
</tr>
<tr>
<td>call-uri</td>
<td>Indicates the 3rd party call URI to which the target call should be joined.</td>
<td>REQUIRED unless mixer-name is set. MUST NOT be set if mixer-name is set.</td>
<td></td>
</tr>
<tr>
<td>mixer-name</td>
<td>Indicates the mixer name to which the target call should be joined.</td>
<td>REQUIRED unless call-uri is set. MUST NOT be set if call-uri is set.</td>
<p>Indicates that a call joined to a mixer with which the controlling party has an events subscription has activated a speech detector, providing its URI.</p>
<p>The <started-speaking/> element MUST be empty.</p>
<p>The attributes of the <started-speaking/> element are as follows.</p>
<tablecaption='Attributes of Started Speaking Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Inclusion</th>
</tr>
<tr>
<td>call-uri</td>
<td>Indicates the URI of the call which has triggered the speech detector.</td>
<p>Indicates that a call joined to a mixer with which the controlling party has an events subscription has ceased activation of a speech detector, providing its URI.</p>
<p>The <stopped-speaking/> element MUST be empty.</p>
<p>The attributes of the <stopped-speaking/> element are as follows.</p>
<tablecaption='Attributes of Stopped Speaking Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Inclusion</th>
</tr>
<tr>
<td>call-uri</td>
<td>Indicates the URI of the call which has triggered the speech detector.</td>
<td>REQUIRED</td>
</tr>
</table>
</section2>
<section2topic='Ref Element'anchor='def-ref'>
<p>Used to give the address of a newly created resource, either a call or a component.</p>
<p>The <ref/> element MUST be empty.</p>
<p>The attributes of the <ref/> element are as follows.</p>
<p>Indicates that the component has come to an end and no further processing will occurr. Gives the reason for the termination.</p>
<p>The <complete/> element MUST contain exactly one child element, indicating the reason for the complete event being raised. The reason may be a <linkurl="#def-components-complete-reason">core complete reason</link> or a reason specific to a particular component.</p>
<p>The <complete/> element has no attributes.</p>
<p>The following are valid complete reason elements. They all MAY contain further component-specific metadata elements, but they do not have any attributes.</p>
<dl>
<di>
<dt><stop/></dt>
<dd>Indicates that the component came to an end because it was issued a stop command by the controlling party.</dd>
</di>
<di>
<dt><hangup/></dt>
<dd>Indicates that the component came to an end because the call ended.</dd>
</di>
<di>
<dt><error/></dt>
<dd>Indicates that the component came to an end because it encountered an error.</dd>
<p>Instructs the server to begin an output component executing on the target call or mixer with the specified document and parameters.</p>
<p>The <output/> element MUST contain one or more <linkurl='#def-component-output-output-document'><document/> elements</link>. A server MUST support the application/ssml+xml content type, but MAY additionally support others.</p>
<p>The attributes of the <output/> element are as follows.</p>
<tablecaption='Attributes of Output Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Possible Values</th>
<th>Default</th>
<th>Inclusion</th>
</tr>
<tr>
<td>start-offset</td>
<td>Indicates some offset through which the output should be skipped before rendering begins.</td>
<td>A positive integer in ms.</td>
<td>0</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>start-paused</td>
<td>Indicates wether or not the component should be started in a paused state to be resumed at a later time.</td>
<td>true|false</td>
<td>false</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>repeat-interval</td>
<td>Indicates the duration of silence that should space repeats of the rendered document.</td>
<td>A positive integer in ms.</td>
<td>0</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>repeat-times</td>
<td>Indicates the number of times the output should be played.</td>
<td>Indicates the maximum amount of time for which the output should be allowed to run before being terminated. Includes repeats.</td>
<td>A positive integer in ms or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>renderer</td>
<td>Indicates which media engine the server should use to render the Output. The server defines the possible values and falls back to the platform default if not specified.</td>
<td>An arbitrary string</td>
<td></td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>voice</td>
<td>The voice with which to speak the requested document</td>
<p>Presents a document for rendering by the output engine.</p>
<p>The <document/> element MUST have either a url attribute set OR a content type and a body, containing a document for output rendering enclosed within CDATA.</p>
<p>The attributes of the <document/> element are as follows.</p>
<tablecaption='Attributes of Document Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Possible Values</th>
<th>Default</th>
<th>Inclusion</th>
</tr>
<tr>
<td>url</td>
<td>Provides a URI at which the document is available.</td>
<td>Any valid URI scheme supported by the server (eg HTTP).</td>
<td>none</td>
<td>REQUIRED unless content-type and content are set</td>
</tr>
<tr>
<td>content-type</td>
<td>Indicates the content type of the document provided as CDATA.</td>
<p>Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents.</p>
<p>The <input/> element MUST contain one or more <linkurl='#def-comoponent-input-input-grammar'><grammar/> elements</link>.</p>
<p>The attributes of the <input/> element are as follows.</p>
<td>Indicates a terminator token which, when encountered, should cause the input detection to cease.</td>
<td>A token string</td>
<td>none</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>recognizer</td>
<td>Indicates the name of the particular input processor to be engaged, used only for routing purposes (eg to choose which MRCP profile to invoke).</td>
<td>A token string</td>
<td>none</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>language</td>
<td>Specifies the recognition language to the recognizer.</td>
<td>Any valid ISO 639‑3 language code</td>
<td>en-US</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>initial-timeout</td>
<td>Indicates the amount of time preceding input which may expire before a timeout is triggered.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>inter-digit-timeout</td>
<td>Indicates (in the case of DTMF input) the amount of time between input digits which may expire before a timeout is triggered.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>sensitivity</td>
<td>Indicates how sensitive the interpreter should be to loud versus quiet input. Higher values represent greater sensitivity.</td>
<td>A decimal value between 0 and 1.</td>
<td>0.5</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>min-confidence</td>
<td>Indicates the confidence threshold, below which a match is to be considered unreliable.</td>
<td>A decimal value between 0 and 1.</td>
<td>0</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>max-silence</td>
<td>Indicates the maximum period of silence which may be encountered during input gathering before a timeout is triggered.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>match-content-type</td>
<td>Indicates the required response document format.</td>
<td>Must support at least application/nlsml+xml, but may support others such as application/emma+xml.</td>
<p>An prompt component is a mixture of audio output and input, and is used to link the lifecycle of both such input may interrupt output via an arbitrary grammar.</p>
<p>Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents, while simultaneously rendering output.</p>
<p>The <prompt/> element MUST contain an <linkurl='#def-comoponent-input-input'><input/> element</link> and an <linkurl='#def-comoponent-output-output'><output/> element</link>.</p>
<p>The attributes of the <prompt/> element are as follows.</p>
<tablecaption='Attributes of Prompt Element'>
<tr>
<th>Attribute</th>
<th>Definition</th>
<th>Possible Values</th>
<th>Default</th>
<th>Inclusion</th>
</tr>
<tr>
<td>barge-in</td>
<td>Whether or not the input detector is permitted to interrupt the output.</td>
<td>Indicates whether subsequent record will be preceded with a beep.</td>
<td>true|false</td>
<td>false</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>stop-beep</td>
<td>Indicates whether subsequent record stop will be preceded with a beep.</td>
<td>true|false</td>
<td>false</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>start-paused</td>
<td>Whether subsequent record will start in PAUSE mode.</td>
<td>true|false</td>
<td>false</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>max-duration</td>
<td>Indicates the maximum duration for the recording.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>initial-timeout</td>
<td>Controls how long the recognizer should wait after the end of the prompt for the caller to speak before sending a Recorder event.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>final-timeout</td>
<td>Controls the length of a period of silence after callers have spoken to conclude they finished.</td>
<td>Any positive integer in miliseconds, or -1 to disable.</td>
<td>-1</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>direction</td>
<td>
<p>Indicates the direction of the call to record, meaning which call legs(s) are included in the resulting file, in case the call is joined to another or a mixer.</p>
</td>
<td>
<ul>
<li><strong>"duplex"</strong> - Records both sent and received audio.</li>
<li><strong>"send"</strong> - Indicates that only the audio sent from the caller is to be recorded. Not supported when Record is executed against a mixer.</li>
<li><strong>"recv"</strong> - Indicates that only and all audio received by the caller is recorded.</li>
</ul>
</td>
<td>duplex</td>
<td>OPTIONAL</td>
</tr>
<tr>
<td>mix</td>
<td>Whether all channels (call legs) should be mixed into a single recording channel.</td>
<p>If an entity supports Rayo, it MUST advertise that fact by returning a feature of "urn:xmpp:rayo:0" &VNOTE; in response to a &xep0030; information request. The response MUST also include features for the application formats and transport methods supported by the responding entity, as described in the relevant specifications.</p>
<examplecaption="Service Discovery Information Request - Client to Server"><![CDATA[
<p>In order for an application to determine whether an entity supports this protocol, where possible it SHOULD use the dynamic, presence-based profile of service discovery defined in &xep0115;. However, if an application has not received entity capabilities information from an entity, it SHOULD use explicit service discovery instead.</p>
<p>Rayo is a protocol designed for extensibility. Rayo implementations and deployments have great flexibility in the way they map the Rayo protocol to their underlying transport and media layers, and the functionality they provide around the Rayo interface to the system.</p>
<p>Further commands and components may also be added to the Rayo protocol in order to extend its capabilities. Such extensions should be submitted to the XSF as ProtoXEPs and use namespaces aligning with the core component namespaces.</p>
<p>A server MUST document any cases where its behaviour differs from that in this specification (such as lack of support for particular options/components/etc) and return an error whenever a command is not understood. A server MUST NOT silently ignore any instructions.</p>
<section2topic='Denial of Service'anchor='security-dos'>
<p>Rayo sessions can be resource-intensive. Therefore, it is possible to launch a denial-of-service attack against an entity by burdening it with too many Rayo sessions. Care must be taken to accept sessions only from known entities and only if the entity's device is able to process such sessions.</p>
</section2>
<section2topic='Communication Through Gateways'anchor='security-gateways'>
<p>Rayo communications can be enabled through gateways to non-XMPP networks, whose security characteristics can be quite different from those of XMPP networks. For example, on some SIP networks authentication is optional and "from" addresses can be easily forged. Care must be taken in communicating through such gateways.</p>
<p>Mere negotiation of a Rayo session can expose sensitive information about the parties (e.g. IP addresses). Care must be taken in communicating such information, and end-to-end encryption should be used if the parties do not trust the intermediate servers or gateways.</p>
<p>If the protocol defined in this specification undergoes a major revision that is not fully backward-compatible with an older version, or that contains significant new features, the XMPP Registrar shall increment the protocol version number found at the end of the XML namespaces defined herein, as described in Section 4 of <cite>XEP-0053</cite>.</p>
<p>The XMPP Registrar maintains a registry of Rayo components. All component registrations with the exception of those defined above shall be defined in separate specifications (not in this document). Components defined within the XEP series MUST be registered with the XMPP Registrar, resulting in protocol URNs of the form "urn:xmpp:rayo:component_name:X" (where "component_name" is the registered name of the component and "X" is a non-negative integer).</p>
®PROCESS;
<code><![CDATA[
<component>
<name>The name of the component.</name>
<desc>A natural-language summary of the component.</desc>
<doc>The document in which the component is specified.</doc>
</component>
]]></code>
</section2>
</section1>
<section1topic='XML Schema'anchor='schema'>
<section2topic='Rayo'anchor='schema-rayo'>
<code><![CDATA[
<?xml version="1.0" encoding="UTF-8"?>
<schemaxmlns="http://www.w3.org/2001/XMLSchema"
targetNamespace="urn:xmpp:rayo:1"
xmlns:tns="urn:xmpp:rayo:1"
elementFormDefault="qualified">
<annotation>
<documentation>
The protocol documented by this schema is defined at http://rayo.org/xep
</documentation>
</annotation>
<!-- Header elements -->
<complexTypename="headerType">
<attributename="name"type="token"use="required">
<annotation>
<documentation>
A token giving the name by which the header may be known.
Indicates that a call joined to a mixer with which the controlling party has an events subscription has ceased activation of a speech detector, providing its ID.
The protocol documented by this schema is defined at http://rayo.org/xep
</documentation>
</annotation>
<complexTypename="documentType">
<simpleContent>
<attributename="url"type="anyURI"use="optional">
<annotation>
<documentation>
Provides a URI at which the document is available. Must not be provided if the content-type attribute is set or the element contains a document as CDATA.
The protocol documented by this schema is defined at http://rayo.org/xep
</documentation>
</annotation>
<complexTypename="grammarType">
<simpleContent>
<attributename="url"type="anyURI"use="optional">
<annotation>
<documentation>
Provides a URI at which the grammar document is available. Must not be provided if the content-type attribute is set or the element contains a grammar document as CDATA.
Indicates the content type of the grammar document provided as CDATA. Must not be set if the url attribute is set.
</documentation>
</annotation>
</attribute>
<restrictionbase="CDATA"/>
</simpleContent>
</complexType>
<!-- Main Input command -->
<elementname="input">
<annotation>
<documentation>
Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents.
The protocol documented by this schema is defined at http://rayo.org/xep
</documentation>
</annotation>
<!-- Finish reason -->
<elementname="match">
<annotation>
<documentation>
Indicates that the component came to an end due to one of its grammars matching the received input. Provides the NLSML result of the grammar match after any symantic processing which may have been performed. See the NLSML spec for details.
The protocol documented by this schema is defined at http://rayo.org/xep
</documentation>
</annotation>
<!-- Main Prompt command -->
<elementname="prompt">
<annotation>
<documentation>
Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents, while simultaneously rendering output.
Indicates the duration of the completed recording.
</documentation>
</annotation>
</attribute>
<attributename="size"type="long"use="required">
<annotation>
<documentation>
Indicates the filesize (in bytes) of the completed recording.
</documentation>
</annotation>
</attribute>
</complexType>
<!-- Max Duration reason -->
<elementname="max-duration"type="core:empty">
<annotation>
<documentation>
Indicates that the component came to an end due to the max duration being reached.
</documentation>
</annotation>
</element>
<!-- Initial Timeout reason -->
<elementname="initial-timeout"type="core:empty">
<annotation>
<documentation>
Indicates that the component came to an end due to no input being detected before the initial-timeout.
</documentation>
</annotation>
</element>
<!-- Final Timeout reason -->
<elementname="final-timeout"type="core:empty">
<annotation>
<documentation>
Indicates that the component came to an end because no input had been detected for the final timeout duration.
</documentation>
</annotation>
</element>
</schema>
]]></code>
</section2>
</section1>
<section1topic='History'anchor='history'>
Prior to the development of the Rayo protocol, the most widely-used 3PCC protocols were Asterisk's AGI and AMI. Unfortunately, these protocols have many drawbacks, not least in their inconsistency and relatively poor documentation, but also in that they are poorly secured and lacking in attributes required for significant scalability. Much 3PCC activity is also done using process-internal APIs rather than a wire protocol like XMPP.
<p>Rayo was developed to satisfy three main desires:</p>
<ul>
<li>To separate the application logic from the back-end call processing infrastructure for large-scale scripting-based hosted voice application platforms. This helps to ensure that the performance of the back-end infrastructure cannot be impacted by the applications controling it, and specifically to allow sandboxing the applications.</li>
<li>To create a platform-agnostic protocol for the control of live media sessions that has been designed from the start for such use.</li>
<li>To enable authenticated, federated, web-scale 3PCC on platforms with APIs only suitable for trusted internal use (Asterisk, FreeSWITCH, etc).</li>
</ul>
Initial development of the Rayo specification and its reference implementation was sponsored by Voxeo Labs and Telefónica, with Punchblock being the first client library implementation, as part of the Adhearsion project. Since the beginning of the development process, further implementation efforts have begun on top of Asterisk's AGI/AMI protocols and FreeSWITCH EventSocket, native to FreeSWITCH (mod_rayo), as well as client library implementations in Node/CoffeeScript and Python.
<p>The authors would like to acknowledge the input of teams at Voxeo Labs, Mojo Lingo and Telefónica in the development of the initial specification, and Grasshopper in expanding the implementation landscape.</p>
<p>Specific individuals who have contributed to the specification or to software significant to its completion include:</p>
