Rayo

%ents; ]>

Rayo This specification defines an XMPP protocol extension for the third-party control of telephone calls and other similar media sessions. The protocol includes support for session management/signaling, as well as advanced media resources such as speech recognizers, speech synthesizers and audio/video recorders. The protocol serves a different purpose from that of first-party protocols such as Jingle or SIP, and is compatible with those protocols. This XMPP Extension Protocol is copyright (c) 2013 by the XMPP Standards Foundation (XSF). Permission is hereby granted, free of charge, to any person obtaining a copy of this specification (the "Specification"), to make use of the Specification without restriction, including without limitation the rights to implement the Specification in a software program, deploy the Specification in a network service, and copy, modify, merge, publish, translate, distribute, sublicense, or sell copies of the Specification, and to permit persons to whom the Specification is furnished to do so, subject to the condition that the foregoing copyright notice and this permission notice shall be included in all copies or substantial portions of the Specification. Unless separate permission is granted, modified works that are redistributed shall not contain misleading information regarding the authors, title, number, or publisher of the Specification, and shall not claim endorsement of the modified works by the authors, any organization or project to which the authors belong, or the XMPP Standards Foundation. ## NOTE WELL: This Specification is provided on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. In no event shall the XMPP Standards Foundation or the authors of this Specification be liable for any claim, damages, or other liability, whether in an action of contract, tort, or otherwise, arising from, out of, or in connection with the Specification or the implementation, deployment, or other use of the Specification. ## In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall the XMPP Standards Foundation or any author of this Specification be liable for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising out of the use or inability to use the Specification (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if the XMPP Standards Foundation or such author has been advised of the possibility of such damages. This XMPP Extension Protocol has been contributed in full conformance with the XSF's Intellectual Property Rights Policy (a copy of which may be found at <http://www.xmpp.org/extensions/ipr-policy.shtml> or obtained by writing to XSF, P.O. Box 1641, Denver, CO 80201 USA). xxxx ProtoXEP Standards Track Standards Council XMPP Core NOT_YET_ASSIGNED Ben Langfeld ben@langfeld.me ben@langfeld.me http://langfeld.me Jose de Castro jdecastro@voxeo.com jdecastro@voxeo.com http://voxeolabs.com 0.0.1 2013-04-05 bl

First draft.

Rayo is a protocol to allow third-party remote control over media sessions, audio/video mixers and a variety of advanced media resources such as speech recognizers, speech synthesizers and audio/video recorders. These capabilities can be combined to create a wide variety of applications such as menu-based phone systems, in-game conferencing and anonymous dating services. Unlike Jingle or even SIP, a Rayo client is not concerned with being a party to either the session negotiation or the media stream itself.

A Rayo server takes on the role of negotiating a media session between itself and some other endpoint, or between two external endpoints, by way of an implementation-specific means, be that Jingle, SIP, the public-switched telephone network, or anything else. The server may even bridge multiple networks.
The server then presents the Rayo protocol as an interface to a Rayo client, allowing it to monitor and/or exercise third-party control over particular the established media sessions.
The client has the option to accept/reject/answer inbound session requests, request the creation of outbound sessions and monitor their progress, execute media operations such as speech synthesis, speech recognition & recording, and to end sessions.

The relationship between the calling parties, the Rayo server and the Rayo client looks something like this:


    [caller] ----SIP---- [rayo server] ( -----Jingle---- [callee] ) optional
                              |
                              |
                          rayo client

This document defines the core Rayo protocol, and contains provisions for its extension by further specifications.

In order to understand the nature of a Rayo interaction, here we show a simple example of a control session.

]]>

In this example, a call from 'tel:+13058881212' has reached the Rayo server 'shakespeare.lit' by calling 'tel:+18003211212', and been assigned an ID '9f00061'. The server has determined that 'juliet@capulet.lit' is a valid candidate for delegating control of the call, and so has directed an offer event to her 'balcony' resource.

The client then decides that it is able to handle the incoming call, and so accepts it from the server, thus gaining exclusive control and indicating to the calling party that the call will be processed and that it should ring.

]]> ]]>

Following confirmation from the server that the attempt to gain control of the call was successful, the client proceeds to answer the call, opening up the media stream between the caller and the server.

]]> ]]>

Once the client has confirmation that the call has been answered, it triggers the start of a media output component in order to play a message to the caller using a Text-to-speech (TTS) engine.

]]> ]]>

After confirmation that the output component was successfully created, the client then awaits notification of its completion.

]]>

The client then decides it has no further operations to perform on the call, and that the call should end. It instructs the server to hang up the call gracefully.

]]> ]]>

]]>

The protocol defined herein is designed to provide the following features:

Call Control: Incoming calls are "offered" to clients at which point they can be answered, rejected, redirected to another destination, etc. Outbound calls may also be made and monitored. Every attempt is made to be shield the Rayo client from the low level telephony protocol (e.g. SIP, Jingle, PSTN, etc).
Audio File Playback: A compatible Rayo server will fetch a file from a a specified URL and play the containing audio to the caller.
Speech Synthesis / TTS: In cases where dynamic data must be spoken, a Speech Synthesis engine may be used to play computer generated speech to the caller.
Touch-tone Events / DTMF: Rayo surfaces real-time event when the caller presses keys on their touch-tone keypad.
Speech Recognition: Enables the phone application to take spoken queues allowing for sophisticated voice-driven menus and directory services.
Call Recording: Can be used to capture the caller's voice (e.g. Voicemail) or both sides of the call for auditing and compliance purposes.
Mixing: Typically referred to as an audio "conference"; calls can be joined together so that the participants can hear each other in real-time.

Many third-party call control protocols have preceeded Rayo (see Asterisk's AGI/AMI, FreeSWITCH's eventsocket, Microsoft's TAPI, Java's JTAPI, Novell/AT&T's TSAPI, CSTA, etc). None of these protocols is ideal, and all have one or more of the following drawbacks:

Totally ground-up wire protocol requiring implementation all the way down to the socket.
Platform/vendor/hardware specific - each system implements its own proprietary protocol (in many cases, without a formal published specification) which does not allow easily porting an application from one back-end to another.
Synchronous interface - Operations on calls or other entities are often blocking, and one must serialise all control messages.
Inconsistent - evolved, rather than designed.
Lacking in scalability - client/server sometimes tied one-to-one, servers rarely clustered, advanced message routing not possible.
Poor security - lack of wire-level encryption, lack of or sub-standard authentication mechanisms, lack of or limited authorization mechanisms, lack of or poor sandboxing between multiple tenants on one system.
Inextensible - The specification of extensions to the core protocol is either impossible or very difficult.

Rayo has been designed with these failings in mind, and intends to address many concerns not addressed by these earlier attempts. The following considerations were made:

Simple client library implementation - XMPP client libraries exist in all modern languages, and many are of a high standard of quality and maturity.
Cross-platform standard - The protocol must not expose any platform specifics and all elements should be candidates for implementation on any suitable platform. Addiditionally, the protocol must be ratified as a standard following a community discussion.
Asynchronous interface - The protocol should present an asynchronous interface for the purposes of performance and flexibility in performing parallel operations.
Consistent - The protocol must provide a considered, unobtrusive, logically and philisophically consistent interface.
Federated - The protocol must support communication between client and server entities on separately owned, operated and addressed networks.
Flexible routing - The protocol must lend itself to routing across wide networks such as the internet, and to potential complex routing such as proxying or redirection. Additionally, the client and server should each be aware of the presence of the other and be able to use such information to make routing decisions.
Extensible - The protocol must provide for the possibility of extra functionality being added by future specifications or an individual implementation.
Secure - The protocol should include appropriate measures for authentication and authorization of participants, as well as preventing third-parties from intercepting control messages.

Many of the features in the above list are available to Rayo at no specification or implementation cost, since they are core to XMPP itself and thus Rayo inherits these 'for free'.

Additionally, the protocol is required to abstract away the complexity of the back-end negotiation, especially the details of the transport protocols such as SIP or Jingle, but to map conceptually to such protocols.

Third-party call control (3PCC): The observation and/or control of a live media session by an entity which is not a direct party to the session.
Command: Commands instruct the receiving entity to perform some atomic action. Commands may be executed against a given call, component or mixer and can be considered completed as soon as they receive a response. Some commands create components, and return a reference to the component in their response.
Component: Components extend the Rayo protocol by providing additional media and call control functionality. Components are created by an appropriate command, which returns a reference to the component. Components are executed asynchronously, and have a lifecycle attached to them, with the ability to trigger events or have commands issued to it. Once a component is stopped or comes to an end naturally, it will issue a special <complete/> event, indicating that it has ceased executing and deliver any required data.
Potential controlling party (PCP): An XMPP entity to which an offer to control an incoming call may be sent.
Definitive controlling party (DCP): The XMPP entity which gains a lock on control of a session, either by requesting the session's creation, or being the first respondent to an offer.
Security Zone: A security zone is the conceptual border around a call which defines which parties may interact with the call's media or signaling. A security zone MUST contain the rayo server's internal implementation, the media server to which the call is joined, the DCP, and any JID whose bare form is the same as the DCP. A server MAY relax this definition further, for example to consider all JIDs at the same domain to be in the same security zone.

In examples, the following JIDs are used:

juliet@capulet.lit/balcony, romeo@montague.lit/orchard - Potential controlling parties
shakespeare.lit - The root domain of the Rayo service

A complete Rayo deployment has several elements and interacting entities which must be understood.

A Rayo server is an entity which is capable of receiving and intiating calls and being party to their media stream, while exposing a Rayo interface to a client in order to permit control over its calls. The Rayo server may handle calls in any way supported by the implementation, such as SIP, Jingle, etc, and should expose a full XMPP domain at the root level of the service deployment (eg shakespeare.lit).

The Rayo server is responsible for keeping track of valid clients, routing calls to the correct potential controlling parties, performing authorization measures on received stanzas, etc.

For the purposes of this specification, complex server-side deployments such as clusters, proxies, gateways, protocol translators, etc are not considered. Further details of such concepts may be found in their (present or future) relevant specifications.

A Rayo client is an entity which implements the Rayo protocol for the purpose of asserting control over calls made available by a Rayo server. The method by which such control measures are determined is outside the scope of this document, but may be the result of human interaction or some automated decision-making process.

A Rayo client is responsible for indicating its availability to a Rayo server and responding to offer messages appropriately.

A Rayo call is a short-lived XMPP entity within the scope of the deployment's root domain, perhaps at a sub-domain, with the purpose of representing a single session. It is usually a simple alias for the main server process.

A Rayo call is the entity with which most client interactions are made, and is responsible for sending its events to and receiving commands from a client. Calls may host components.

Calls have separate presence from the root domain of the service and thus appear to be separate entities.

A Rayo mixer is an XMPP entity within the scope of the deployment's root domain, perhaps at a sub-domain, with the purpose of representing a service for the linking of media streams from several calls. It is usually a simple alias for the main server process.

A Rayo mixer is responsible for sending its events to and receiving commands from one or more clients, and can host components.

Mixers have separate presence from the root domain of the service and its calls and thus appear to be separate entities.

A Rayo command is a simple combination of request and response and may be issued directly to the service domain, or to a call or a mixer. Commands are executed serially and are generally very short-lived.

Components extend the Rayo protocol by providing additional media and call control functionality.

Components have a lifecycle and are started by sending a specialized command to a call or mixer. Thus, a request for creation of a component will return a reference to the component's ID, and the component will continue to execute until it completes, potentially sending events and processing commands along the way (such as an instruction to pause or terminate), before finally issuing an event indicating its completion and thus unavailability. Multiple components may be active on a call or mixer at any one time, and commands may be executed on any entity during the execution of a component.

All of the actors described in the previous section (with the exception of commands) are represented by XMPP entities with a JID of their own. Thus, a scheme for determining the JIDs of each of these entities is required. The following is the required naming scheme for Rayo deployments, where elements in square brackets are optional.

Actor	JID format	Example JID
Server	[service domain]	shakespeare.lit
Client	any JID	juliet@capulet.lit/balcony
Call	<call ID>@[<call sub-domain>.]<service domain>	f88eh2@call.shakespeare.lit
Mixer	<mixer name>@[<mixer sub-domain>.]<service domain>	conf1@mixer.shakespeare.lit
Call Component	<call ID>@[<call sub-domain>.]<service domain>/<component ID>	f88eh2@call.shakespeare.lit/8f83jf
Mixer Component	<mixer name>@[<mixer sub-domain>.]<service domain>/<component ID>	conf1@mixer.shakespeare.lit/932eu
Server Component	<service domain>/<component ID>	shakespeare.lit/f3fg4

Commands should be addressed to the entity on which they should be enacted. Individual commands only apply to certain object (for example instructing a component to hangup will return an error). In general, commands may be sent from a client to the service, a call, a mixer or a component. Events may be sent from a call, a mixer or a component to a client.

Rayo defines several events and commands which may be executed on one of the above actors. These payloads must be sent within an XMPP primitive element, and the rules are as such:

Events: Sent as directed presence from the entity producing the event to a client.
Commands: Sent as an <iq/> with the 'type' attribute 'set' from the client to the entity to be acted on. Responses returned as an <iq/> with the 'type' attribute either 'result' or 'error'.

This section describes the form, function and order of Rayo stanzas sent across the wire, and the circumstances in which they apply and/or may arise.

In order for a Rayo client to be considered a potential controlling party for incoming sessions, it MUST first notify the Rayo server that it is available for the receipt of calls. This is done by sending directed presence to the Rayo server with a <show/> element containing 'chat' as in the example:

chat ]]>

Conversely, when a Rayo client wishes not to be considered a potential controlling party, it SHOULD send directed presence to the Rayo server with a <show/> element containing 'dnd' as in the example:

dnd ]]>

Sessions may be established either at the request of the Rayo client (an outbound call) or as a result of a 3rd party request (an inbound call). Each scenario differs in the Rayo protocol only up to the point at which the session is established and media begins to flow. First we shall examine the sequence of stanzas passed between server and client in each of these scenarios.

In order for a client to establish a new outbound call, it MUST first send a dial command to the server, indicating the proposed target for the call, its apparent source, and any meta-data to send to the target as headers.

]]>

On successfully receiving and parsing the dial command, the server SHOULD perform its own proprietary authorization measures to ensure that only desirable outbound sessions are created. If it is established that the command should not be allowed, the server MUST return an error giving an authorization reason.

There are several reasons why the server might immediately return an error instead of acknowledging the creation of a new call:

The client is unknown to the server and the server does not permit session creation by unknown clients.
The client is not authorized to create this new session.
The server does not support outbound calls.
The server does not have sufficient resources to create a new session.
The dial command was malformed.

If the client is unknown to the server and the server does not permit session creation by unknown clients, the server MUST return a <registration-required/> error with a type of 'auth'.

]]>

If the client is not authorized (as determined by an implementation/deployment-specific algorithm) to create a new outbound session given the parameters provided, the server MUST return a <not-authorized/> error with a type of 'auth'.

]]>

If the server does not support outbound calls, the server MUST return a <feature-not-implemented/> error with a type of 'cancel'.

]]>

If the server does not have sufficient resources to create a new session, the server MUST return a <resource-constraint/> error with a type of 'wait'.

]]>

If the dial command was malformed, the server MUST return a <bad-request/> error with a type of 'modify'.

]]>

If the command is successful and the call is queued, however, confirmation of such should be sent to the client, including a reference to the unique ID of the call. This call ID may be used to execute commands and filter events for the duration of the session.

]]>

Once the server receives notification that the session has been accepted by the third party, it should send a ringing event to the client to indicate such:

]]>

Similarly, once the server receives notification that the session has been answered, it should negotiate media between the dialed party and its local media server. Once media negotiation is complete, it should send an answered event to the client to indicate such:

]]>

When sending a dial request, a client MAY specify a join target within the dial element:

]]>

In this case, the server MUST treat the session creation in the same way as without the join element, until the point of media negotiation. Here, the server should negotiate media as specified by the join element, in accordance with the rules defined in joining calls. Media MUST NOT be negotiated with the local media server, unless the join specifies so. The join operation MUST behave as described in joining calls.

When the system receives a call from one of its connected networks, it MUST then expose that requested session to Rayo clients. It SHOULD use an implementation-specific routing mechanism to map incoming calls to some set of registered JIDs which are considered appropriate controlling parties. From this set, it SHOULD then remove any parties whom it can identify as being temporarily inappropriate for control (either unavailable based on presence, under too much load, or any other metric which the server has available). If, as a result, the set of Potentially Controlling Parties is empty, the server MUST reject the call with a 'decline' reason.

If the server can identify active Potential Controlling Parties, it MUST offer them control of the call simultaneously. The server must broadcast an offer on behalf of the call to all Potential Controlling Parties, using applicable to/from/header data from the incoming session. The server MUST also include entity capabilities information in the presence stanza containing the offer, in order to advertise the fact that the entity is a call, qualified by the node name "urn:xmpp:rayo:call:1".

]]>

Once the server has offered control, it MUST wait indefinitely for a response from a PCP. The server SHOULD monitor the availability of PCPs to whom offers have been sent. If they all cease to be PCPs (eg by going offline) then the call should be rejected in the same way as if there had not been any available PCPs to begin with.

If an offered PCP executes a command against the call, by sending a command node to the call's JID inside an IQ 'set', the server should execute the following routine:

If the call does not have a DCP, set it to the PCP from which the command originated.
If the call has a DCP, and the command did not originate from the DCP, return a conflict (cancel) error in response to the command of the following format: ]]> otherwise;
If the command is an accept command, notify the remote calling party that the call has been accepted. Return an empty IQ result to the command issuing party to confirm successful execution.
If the command is an answer command, notify the remote calling party that the call has been answered and negotiate media between the calling party and the server's local media server. Return an empty IQ result to the command issuing party to confirm successful execution.
If the command is any other, handle it in the manner detailed in the following sections.

Calls in a Rayo system are capable of having their media streams moved/manipulated. Once such manipulation is to join the media streams of two calls. In a scenario where callA and callB should be joined, the client MUST send a join command to either call (not both) specifying the call ID of the other call, like so:

]]>

If the calls to be joined to each other are in the same security zone, the server MUST join the media streams of the two calls and return an empty IQ result to confirm that the operation has been successful. If the parties to be joined are not within the same security zone, an error should be returned as detailed below.

When calls are joined to each other by any mechanism, each call MUST dispatch a joined event specifying who they have been joined to:

]]>

By default, the server MUST join the calls by bridging their audio through its local media server, with bidirectional media. In order to specify alternative behaviour, the client MAY specify a media option (either 'bridge' or 'direct') and/or a direction option (either 'duplex', 'send' or 'recv'), and the server MUST bridge accordingly.

There are several reasons why the call might return an error instead of acknowledging a join:

The specified join party does not exist or cannot be found.
The specified join party is inaccessible for the purposes of being joined due to security restrictions.
The server does not have sufficient resources to complete the join.
The join command was malformed.
The specified media/direction options or their combination are not possible/supported.

If the specified join party does not exist or cannot be found, the server MUST return a <service-unavailable/> error with a type of 'cancel'.

]]>

If the specified join party is inaccessible for the purposes of being joined due to security restrictions, the server MUST return a <not-allowed/> error with a type of 'cancel'.

]]>

If the server does not have sufficient resources to complete the join, the server MUST return a <resource-constraint/> error with a type of 'wait'.

]]>

If the join command was malformed (eg no call URI specified), the server MUST return a <bad-request/> error with a type of 'modify'.

]]>

If the specified media/direction options or their combination are not possible/supported, the server MUST return a <feature-not-implemented/> error with a type of 'modify'.

]]>

When the client wishes to terminate an existing join, it MUST send an unjoin command specifying the join to break (call-id).

]]>

The server MUST unjoin the media streams of the two calls, rejoin both to the media server and return an empty IQ result to confirm that the operation has been successful:

]]>

Optionally, if no join is specified on the unjoin command, all existing joins must be broken:

]]>

There are several reasons why the call might return an error instead of acknowledging an unjoin command:

The specified join does not exist.
The unjoin command was malformed.

If the specified join does not exist, the server MUST return a <service-unavailable/> error with a type of 'cancel'.

]]>

If the unjoin command was malformed (eg an empty call URI specified), the server MUST return a <bad-request/> error with a type of 'modify'.

]]>

Calls may be unjoined from other calls either in response to an unjoin command, as the result of one of the calls disconnecting, or as the result of an error. The server MUST monitor calls for being unjoined from another call, and emit an unjoined event when this is detected.

]]>

If a client wishes to modify the parameters of a join, it MUST send a new join command to the target call with the new parameters. The server MUST renegotiate media using the new parameters, and acknowledge the command's completion. The server MUST NOT re-send joined events.

]]>

Rayo calls SHOULD support being joined to more than one other call at a time, each join having different parameters. Creating a new join MUST NOT destroy existing joins. If a join is requested but cannot be created without destroying existing joins, the call MUST return a conflict (cancel) error.

]]>

While calls may generally be joined peer-to-peer in any desirable combination, such an implementation is not necessarily scalable or practical to manage. Rayo, therefore, includes the concept of mixers, which are entities like calls, to which calls or other mixers may be joined in the same way as joining multiple calls directly. A mixer MUST be implicitly created the first time a call attempts to join it, MUST immediately broadcast presence to all controlling parties who have calls joined to it, and must respond to the join command with a reference to the mixer. The server MUST include entity capabilities information in the first presence stanza it sends, in order to advertise the fact that the entity is a mixer, qualified by the node name "urn:xmpp:rayo:mixer:1". A mixer MUST emit events (joined, unjoined) to all controlling parties who have calls joined to it, using the same semantics as joining calls.

In order to support friendly-named mixers without causing naming collisions between security zones, a server SHOULD represent a mixer internally using some alternative name scoped to the client's security zone and mapped to the friendly name/URI presented to the client for the emission of events and processing of commands. A server MUST NOT allow clients to interact with mixers allocated within other security zones either by observing their status or media.

]]>

Mixers MUST respect the normal rules of XMPP presence subscriptions. If a client sends directed presence to a mixer, the mixer MUST implicitly create a presence subscription for the client. On receiving unavailable presence, the mixer MUST stop sending events to the client.

The error conditions on joining a mixer are the same as for calls, as are the unjoin and join modification semantics. Additionally, mixers SHOULD be able to host components just like calls, following the rules defined for each component.

]]>

If the media server providing the mixer supports active speaker detection, it MUST emit active speaker events to all clients with a presence subscription. Such events MUST indicate the start and end of speaking for a particular call ID joined to the mixer.

]]>

Once the last participant unjoins from the mixer, the mixer SHOULD be destroyed. When a mixer is destroyed, it MUST send unavailable presence to all entities which have a presence subscription.

Components are long-lived elements of a call or mixer which may execute in parallel, have a lifecycle (may send events and/or process commands during their execution, indicate their completion asynchronously) and typically implement media operations. A server SHOULD implement components in such a way that it is acceptable to execute multiple components of the same type or of differing types simultaneously. A server SHOULD implement all core components.

In the event that a call or mixer receives a command which triggers the execution of a component, it MUST use the normal command handling routine, schedule the component for immediate execution and return a reference to the requesting client as confirmation of the component's creation:

]]> ]]>

If a component execution command is received prior to the call being answered, the server MUST NOT answer the call, and SHOULD attempt to use early-media techniques to perform the relevant operation without answering the call. If such early-media is not possible, it MUST return an error indicating that the call state is incorrect (unexpected-request).

The whole command MUST be parsed up-front, and any applicable validation performed before acknowledgement of the command.

There are several reasons why the server might immediately return an error instead of acknowledging the creation of a new component:

The server does not implement the component.
The server does not implement a particular option value for the component.
Some aspect of the component does not comply with this specification.
The server does not have sufficient resources to create a new component on this call/mixer.
The component would cause a resource conflict with another component on this call/mixer.
The call/mixer is not in the correct state to begin executing the component.

If the server does not implement the command/component, it should return a feature-not-implemented (cancel) error:

]]>

If the server does not implement a particular option value for the command/component, it should return a feature-not-implemented (modify) error:

]]>

If the command does not meet the specification, the server should return a bad-request (modify) error:

]]>

If the server does not have sufficient resources to create the component, it should return a resource-constraint (wait) error:

]]>

If the server is not able to create the component due to a resource conflict with another component, it should return a resource-constraint (wait) error:

]]>

If the server is not able to create the component due to the call being in an incorrect state, it should return an unexpected-request (wait) error:

]]>

Once acknowleged, the component MUST begin execution according to its particular specification. During its execution, it MAY emit events relevant to its progress, and an implementation MUST be capable of emitting events specified for each component. Any events should be sent inside a directed presence element to the executing party.

During execution, the component MUST respond to commands addressed to it. Each component has its own set of commands, but all components have the 'stop' command in common. On receipt of the stop command, the component MUST acknowledge that it has been instructed to stop and gracefully cease its execution in whatever way is appropriate to the particular component.

]]>

There are several reasons why a component might return an error instead of acknowledging a command:

The component does not implement the command.
The component does not implement a particular option value for the command.
Some aspect of the command does not comply with the components specification.
The command is not appropriate for the component at its current stage of execution.
The command is issued by a party other than that which created the component.

If the component does not implement the command, it should return a feature-not-implemented (cancel) error:

]]>

If the component does not implement a particular option/value for the command, it should return a feature-not-implemented (modify) error:

]]>

If some aspect of the command does not comply with the component's spec, it should return a bad-request (modify) error:

]]>

If the command is not appropriate for the component's current stage of execution, it should return a unexpected-request (wait) error:

]]>

If the command is issued by a party other than the component creator, it should return a conflict (cancel) error:

]]>

When the component ceases to execute, it MUST send a complete event with a valid reason to the requesting party as directed presence with a type of 'unavailable'.

]]>

Once a component is completed, or if it did not exist, the server should return an item-not-found (cancel) error as response to any commands:

]]>

Media output is a core concept in Rayo, and is provided by the output component. The component allows media to be rendered to a call or a mixer, using the server's local media server. A server MUST support audio file playback and MUST support the text/uri-list document format. A server MAY support speech synthesis and MAY support SSML. The component is created using an <output/> command, containing one or more documents to render, along with a set of options to determine the nature of the rendering.

~~You have 4 new messages.~~ ~~The first is from Stephanie Williams and arrived at 3:45pm.~~ ~~The subject is ski trip~~

]]]]> ]]> ]]>

The server MUST validate that it has apropriate resources/mechanisms to render the requested document before acknowledging the component creation.

In the case that an output component is executed on a call joined to other calls or mixers, the output SHOULD be rendered only to the call and not the joined parties (also known as 'whisper'). In the case that an output component is executed on a mixer, the output should be rendered into the mixer, such that all participants receive the output (also known as 'announce').

The output component implements several commands for manipulating the output during its execution.

A client may instruct an output component to pause by sending a pause command. The server MUST cause the media server to pause rendering, maintaining position within the document and allowing for later resumption.

]]>

A client may instruct an output component to resume rendering if it has previously been paused. The server MUST cause the media server to resume rendering at the last pause marker.

]]>

A client may instruct an output component to increase the rendering rate by a unit amount, defined by the media server. The server MUST cause the media server to perform the rate increase and acknowledge the command.

]]>

A client may instruct an output component to decrease the rendering rate by a unit amount, defined by the media server. The server MUST cause the media server to perform the rate decrease and acknowledge the command.

]]>

A client may instruct an output component to increase the rendering volume by a unit amount, defined by the media server. The server MUST cause the media server to perform the volume increase and acknowledge the command.

]]>

A client may instruct an output component to decrease the rendering volume by a unit amount, defined by the media server. The server MUST cause the media server to perform the volume decrease and acknowledge the command.

]]>

A client may instruct an output component to move the play marker forward or back in time by a specified amount before resuming output. The server MUST cause the media to seek as instructed and acknowledge the command.

The attributes of the <seek/> element are as follows.

]]>

The output component does not provide any intermediate events.

The output completion reason MUST be one of the core Rayo reasons, finish (indicating that the document finished rendering naturally) or max-time (indicating that the maximum time was exceeded). Output component completion does not provide any metadata.

]]>

Media input is a core concept in Rayo, and is provided by the input component. The component allows input to be collected from a call by way of either DTMF (dual-tone multi-frequency) or ASR (automatic speech recognition), using the server's local media server. A Rayo server MUST support DTMF input and MUST support SRGS XML grammars (application/srgs+xml). A server MAY suport speech input, and MAY support other grammar formats. The component is created using an <input/> command, containing one or more grammar documents by which to control input, along with a set of options to determine the nature of the collection.

0 1 2 3 4 5 6 7 8 9

# * 9

]]]]> ]]>

The server MUST validate that it has appropriate resources/mechanisms to collect the requested input before acknowledging the component creation.

In the case that an input component is executed on a call joined to other calls or mixers, the input SHOULD be collected only from the call and not the joined parties. Input components executed on a mixer SHOULD collect and combine input from all participants joined to the mixer.

The input component does not implement any intermediate commands, other than those specified for all components.

The input component does not provide any intermediate events.

The input completion reason MUST be one of the core Rayo reasons, or one of the following reasons. Input component completion provides match metadata for the <finish/> reason only.

match (indicating that one of the grammars matched the received input).
initial-timeout (indicating that the initial timeout was triggered).
inter-digit-timeout (indicating that the inter-digit timeout was triggered).
max-silence (indicating that the max-silence timeout was triggered).
min-confidence (indicating that the minimum confidence threshold was not reached).
no-match (indicating that input was received which did not match any of the specified grammars).

If the media server reports a match to one of the provided grammars, the server MUST present the results of the match to the client by way of a match document in the format requested by the client. A server MUST be capable of supporting NLSML, and may support other formats.

1 2 3 4 ]]]]> ]]>

Prompt is a convenience component to wrap input and output components, combine their lifecycles, and allow input to barge-in on an output component in the standard sense.

~~Please enter your pin number now.~~

]]]]>

0 1 2 3 4 5 6 7 8 9

# * 9

]]]]> ]]>

The server MUST validate that it has appropriate resources/mechanisms to render the requested output and collect the requested input before acknowledging the component creation.

The prompt component follows the same combined join considerations as output and input components.

The prompt component implements implements all intermediate commands from output and input and behaves the same. If output component commands are executed after the output component has ceased executing, a <unexpected-request> error MUST be returned.

The prompt component emits intermediate events from the nested output and input components.

The input completion reason MUST be one of the core Rayo reasons, or one of the Input component reasons. Events signalling completion of the output components are suppressed.

Call recording is a core concept in Rayo, and is provided by the record component. The component allows media to be captured from a call or a mixer, using the server's local media server, stored, and made available to clients. The component is created using a <record/> command, with a set of options to determine the nature of the recording.

]]>

The server MUST validate that it has apropriate resources/mechanisms to make the recording before acknowledging the component creation. The component MUST ignore any hints that it does not understand.

In the case that a record component is executed on a call joined to other calls or mixers, the direction attibute will specify if the sent audio, received audio, or both will be present in the recording.

In send mode, only the audio sent by the caller is recorded.

In recv mode, when just joined to the media server, should record TTS, audio playback, etc; when joined to another call, should record that other call's sending audio (probably a human talking) also. When joined to a mixer, should record the audio send from the mixer (other people talking) also.

Duplex mode is a combination of send and recv. The platform may mix these or record them as separate channels.

When executing a record against a mixer, send mode is not supported. Recv mode records audio from all mixer participants. Duplex is a clone of recv.

The record component implements several commands for manipulating the recording during its execution.

A client may instruct a record component to pause by sending a pause command. The server MUST cause the media server to pause recording, allowing for later appending.

]]>

A client may instruct a record component to resume recording if it has previously been paused. The server MUST cause the media server to resume recording, appending to the original file.

]]>

The record component does not provide any intermediate events.

The record completion reason MUST be one of the core Rayo reasons, or one of the following reasons. Record component completion provides recording metadata in all cases.

max-duration (indicating that the max duration was reached).
initial-timeout (indicating that the initial timeout was triggered).
final-timeout (indicating that the final timeout was triggered).

The server MUST present the recording for consumption by the client by way of recording meta-data on the complete reason, including a URI at which the recording may be fetched. It MUST provide uri, duration & size data as specified on the recording element.

]]>

Session termination may occur by one of several methods:

An inbound call may be redirected by a PCP to some other target.
An inbound call may be rejected by a PCP.
An active call, whether inbound or outbound, may be hung up (gracefully ended) by a DCP.
An active call may be hung up (gracefully ended) by the remote party.
An outbound call may be rejected by the remote party.

A call end notification will be dispatched to the PCP if one of the following conditions is met:

The call has been accepted and has a PCP.
The call is outbound and implicitly has a PCP (the requesting party).

If a client can determine a more appropriate target for an incoming call, it may wish to relay this information to the caller in the form of a URI (eg SIP). The client MUST do this before accepting a call. The target URI must be specified in the 'to' attribute of the redirect element.

]]>

The server should send an appropriate redirection instruction to the underlying session.

If the server is able to successfully relay the redirection to the calling party, it should send an empty IQ result to confirm the command has completed execution:

]]>

If the server is unable to perform the redirect because the call has already been accepted, it should return a not-allowed (cancel) error indicating such:

]]>

If a client cannot handle an incoming call, it MAY reject it. The client MUST do this before accepting the call. The target URI must be specified in the 'to' attribute of the redirect element.

]]>

The server should reject the underlying session. If the server is able to do so successfully, it should send an empty IQ result to confirm the command has completed execution:

]]>

If the server is unable to perform the rejection because the call has already been accepted, it should return a not-allowed (cancel) error indicating such:

]]>

If a client wishes to end a call it should send a hangup command to the call instructing it to do so:

]]>

The server should queue the call for immediate hangup and return a response indicating success of the command:

]]>

The server MUST follow this sequence to hang up a call:

Terminate all components of the call, and components MUST send a complete event indicating hangup as the cause.
Terminate all joins on the call, sending unjoined events.
Terminate the underlying session.

The server MUST monitor a call's underlying session and react appropriately in the case that it comes to an end:

The server MUST determine the reason for the call ending to be one of the appropriate end reasons.
If the call ending was not a result of a hangup command from a client, the server MUST terminate all components on the call, which MUST send a complete event indicating hangup as the cause. The server MUST additionally terminate all joins on the call, sending unjoined events.
The server MUST send an end event (of type unavailable) on behalf of the call, specifying the above determined reason as a child element, to all JIDs to which an offer was sent or from which a command was received.
The server MUST NOT send any more events from a call which has ended and declared itself unavailable.
The server MUST respond to any commands sent to an ended call (or one which never existed) with an item-not-found (cancel) error.

]]>

In elements which may carry child <header/> elements, a server or client MAY specify several header elements with the same name. In such cases, these MUST be considered to form a collection of ordered values for the key provided.

]]>

The <header/> element MUST be empty.

The attributes of the <header/> element are as follows.

Attribute	Definition	Inclusion
name	A token giving the name by which the header may be known.	REQUIRED
value	The string value of the named header.	REQUIRED

Informs the recipient that a new call is available for control and invites it to take control using progress commands below.

The <offer/> element MAY contain one or more <header/> elements.

The attributes of the <offer/> element are as follows.

Attribute	Definition	Inclusion
to	The target URI for the call. May me a tel URI, SIP URI, a JID (for Jingle) or some other platform-specific addressing mechanism.	REQUIRED
from	The caller ID URI for the call. May be a tel URI, SIP URI, a JID (for Jingle) or some other platform-specific addressing mechanism.	OPTIONAL

Indication that an outbound call has begun ringing, or accepted by the remote party.

The <ringing/> element MAY contain one or more <header/> elements.

The <ringing/> element has no attributes.

Indication that an outbound call has been answered and that the 3rd party negotiation has completed. At this point, the media stream should be open.

The <answered/> element MAY contain one or more <header/> elements.

The <answered/> element has no attributes.

Indication that the call has come to an end, giving the reason.

The <end/> element MUST contain a single end reason element. It MAY also contain one or more <header/> elements.

The <end/> element has no attributes.

The following are valid end reason elements. Unless otherwise stated, they all MUST be empty, and they do not have any attributes.

<hungup/>: Indication that the call ended due to a normal hangup by the remote party.
<hangup-command/>: Indication that the call ended due to a normal hangup triggered by a hangup command.
<timeout/>: Indication that the call ended due to a timeout in contacting the remote party.
<busy/>: Indication that the call ended due to being rejected by the remote party subsequent to being accepted.
<rejected/>: Indication that the call ended due to being rejected by the remote party before being accepted.
<error/>: Indication that the call ended due to a system error.

Instructs the server to send notification to the calling party that the call will be dealt with and that ringing may begin.

The <accept/> element MAY contain one or more <header/> elements.

The <accept/> element has no attributes.

Instructs the server to pick up an incoming call and connect the media stream.

The <answer/> element MAY contain one or more <header/> elements.

The <answer/> element has no attributes.

Instructs the calling party that the call will not be accepted and that instead it should try to call the URI indicated in the command.

The <redirect/> element MAY contain one or more <header/> elements.

The attributes of the <redirect/> element are as follows.

Attribute	Definition	Inclusion
to	The new target URI for the call to be redirected to.	REQUIRED

Instructs the server to reject the call with a given reason.

The <reject/> element MUST contain a single reject reason element. It MAY also contain one or more <header/> elements.

The <reject/> element has no attributes.

The following are valid reject reason elements. Unless otherwise stated, they all MUST be empty, and they do not have any attributes.

<decline/>: Indicates that the controlling party refused the call for an unspecified reason, such as access control.
<busy/>: Indicates that the controlling party refused the call due to excess load.
<error/>: Indicates that the controlling party refused the call because some error occurred.

Instructs the server to bring the call to an end naturally.

The <hangup/> element MAY contain one or more <header/> elements.

The <hangup/> element has no attributes.

Instructs the server to create a new call and surrender control of it to the requesting party.

The <dial/> element MAY contain one or more <header/> elements. It MAY contain one or more <join/> elements, instructing the server to join the new call in the indicated manner rather than the default (join to the local media server).

The attributes of the <dial/> element are as follows.

Attribute	Definition	Inclusion	Default
to	Indicates the party to whom the call should be directed.	REQUIRED
from	Indicates the caller ID with which the call should appear to originate.	OPTIONAL
timeout	Indicates the maximum time allowed for a response to be provided by the third party before the call should be considered to have come to an end.	OPTIONAL	-1

Instructs the server to join the media streams of the call and the specified party, given direction and media negotiation parameters.

The <join/> element MUST be empty.

The attributes of the <join/> element are as follows.

Attribute	Definition	Inclusion	Default
direction	Indicates the direction in which the media should flow between the call and the 3rd party. Must be one of the following values: "duplex" - Indicates that media should flow in both directions between the parties. "send" - Indicates that media should only flow from the target call to the third party. "recv" - Indicates that media should only flow from the third party to the target call.	OPTIONAL	duplex
media	Indicates the manner in which the server should negotiate media between the two parties. Must be one of the following values: "bridge" - Instructs the server to bridge the parties media streams via its local media server. "direct" - Instructs the server to have the parties negotiate media directly with one another.	OPTIONAL	bridge
call-uri	Indicates the 3rd party call URI to which the target call should be joined.	REQUIRED unless mixer-name is set. MUST NOT be set if mixer-name is set.
mixer-name	Indicates the mixer name to which the target call should be joined.	REQUIRED unless call-uri is set. MUST NOT be set if call-uri is set.

Instructs the server to unjoin the media streams of the call and the specified party.

The <unjoin/> element MUST be empty.

The attributes of the <unjoin/> element are as follows.

Attribute	Definition	Inclusion
call-uri	Indicates the 3rd party call URI from which the target call should be unjoined.	REQUIRED unless mixer-name is set. MUST NOT be set if mixer-name is set.
mixer-name	Indicates the mixer name from which the target call should be unjoined.	REQUIRED unless call-uri is set. MUST NOT be set if call-uri is set.

Indicates that the call was successfully joined to the specified party.

The <joined/> element MUST be empty.

The attributes of the <joined/> element are as follows.

Attribute	Definition	Inclusion
call-uri	Indicates the 3rd party call URI to which the target call was joined.	REQUIRED unless mixer-name is set. MUST NOT be set if mixer-name is set.
mixer-name	Indicates the mixer name to which the target call was joined.	REQUIRED unless call-uri is set. MUST NOT be set if call-uri is set.

Indicates that the call ceased to be joined to the specified party.

The <unjoined/> element MUST be empty.

The attributes of the <unjoined/> element are as follows.

Attribute	Definition	Inclusion
call-uri	Indicates the 3rd party call URI from which the target call was unjoined.	REQUIRED unless mixer-name is set. MUST NOT be set if mixer-name is set.
mixer-name	Indicates the mixer name from which the target call was unjoined.	REQUIRED unless call-uri is set. MUST NOT be set if call-uri is set.

Indicates that a call joined to a mixer with which the controlling party has an events subscription has activated a speech detector, providing its URI.

The <started-speaking/> element MUST be empty.

The attributes of the <started-speaking/> element are as follows.

Attribute	Definition	Inclusion
call-uri	Indicates the URI of the call which has triggered the speech detector.	REQUIRED

Indicates that a call joined to a mixer with which the controlling party has an events subscription has ceased activation of a speech detector, providing its URI.

The <stopped-speaking/> element MUST be empty.

The attributes of the <stopped-speaking/> element are as follows.

Attribute	Definition	Inclusion
call-uri	Indicates the URI of the call which has triggered the speech detector.	REQUIRED

Used to give the address of a newly created resource, either a call or a component.

The <ref/> element MUST be empty.

The attributes of the <ref/> element are as follows.

Attribute	Definition	Inclusion
uri	Gives the URI of the new resource.	REQUIRED

Instructs a component to come to an end before it completes naturally.

The <stop/> element MUST be empty.

The <stop/> element has no attributes.

Indicates that the component has come to an end and no further processing will occurr. Gives the reason for the termination.

The <complete/> element MUST contain exactly one child element, indicating the reason for the complete event being raised. The reason may be a core complete reason or a reason specific to a particular component.

The <complete/> element has no attributes.

The following are valid complete reason elements. They all MAY contain further component-specific metadata elements, but they do not have any attributes.

<stop/>: Indicates that the component came to an end because it was issued a stop command by the controlling party.
<hangup/>: Indicates that the component came to an end because the call ended.
<error/>: Indicates that the component came to an end because it encountered an error.

An output component is used to instruct the server to generate audible output to a call or mixer.

Instructs the server to begin an output component executing on the target call or mixer with the specified document and parameters.

The <output/> element MUST contain one or more <document/> elements. A server MUST support the application/ssml+xml content type, but MAY additionally support others.

The attributes of the <output/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
start-offset	Indicates some offset through which the output should be skipped before rendering begins.	A positive integer in ms.	0	OPTIONAL
start-paused	Indicates wether or not the component should be started in a paused state to be resumed at a later time.	true\|false	false	OPTIONAL
repeat-interval	Indicates the duration of silence that should space repeats of the rendered document.	A positive integer in ms.	0	OPTIONAL
repeat-times	Indicates the number of times the output should be played.	An integer greater than 0.	1	OPTIONAL
max-time	Indicates the maximum amount of time for which the output should be allowed to run before being terminated. Includes repeats.	A positive integer in ms or -1 to disable.	-1	OPTIONAL
renderer	Indicates which media engine the server should use to render the Output. The server defines the possible values and falls back to the platform default if not specified.	An arbitrary string		OPTIONAL
voice	The voice with which to speak the requested document	Any voice supported by the TTS engine.		OPTIONAL

Presents a document for rendering by the output engine.

The <document/> element MUST have either a url attribute set OR a content type and a body, containing a document for output rendering enclosed within CDATA.

The attributes of the <document/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
url	Provides a URI at which the document is available.	Any valid URI scheme supported by the server (eg HTTP).	none	REQUIRED unless content-type and content are set
content-type	Indicates the content type of the document provided as CDATA.	A document content type token		REQUIRED unless url is set

Instructs the server to pause the media output, but not terminate the component.

The <pause/> element MUST be empty.

The <pause/> element has no attributes.

Instructs the server to continue rendering the output from the last pause marker.

The <resume/> element MUST be empty.

The <resume/> element has no attributes.

Instructs the server to increase the rate of output by a unit amount.

The <speed-up/> element MUST be empty.

The <speed-up/> element has no attributes.

Instructs the server to decrease the rate of output by a unit amount.

The <speed-down/> element MUST be empty.

The <speed-down/> element has no attributes.

Instructs the server to increase the volume of output by a unit amount.

The <volume-up/> element MUST be empty.

The <volume-up/> element has no attributes.

Instructs the server to decrease the volume of output by a unit amount.

The <volume-down/> element MUST be empty.

The <volume-down/> element has no attributes.

Instructs the server to move the play marker of the output forward or back in time before resuming output.

The <seek/> element MUST be empty.

The attributes of the <seek/> element are as follows.

Attribute	Definition	Possible Values	Inclusion
direction	Indicates the direction in time in which to move the play marker.	forward\|back	REQUIRED
amount	Indicates the duration by which to move the play marker.	A positive integer, in ms.	REQUIRED

Indicates that the output component came to an end as a result of reaching the end of the document to be rendered.

The <finish/> element MUST be empty.

The <finish/> element has no attributes.

Indicates that the output component came to an end due to the maximum time limit being reached.

The <max-time/> element MUST be empty.

The <max-time/> element has no attributes.

An input component is used to instruct the server to gather media input from a call or mixer, using either DTMF or ASR.

Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents.

The <input/> element MUST contain one or more <grammar/> elements.

The attributes of the <input/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
mode	The method by which to collect input.	any\|dtmf\|speech	any	OPTIONAL
terminator	Indicates a terminator token which, when encountered, should cause the input detection to cease.	A token string	none	OPTIONAL
recognizer	Indicates the name of the particular input processor to be engaged, used only for routing purposes (eg to choose which MRCP profile to invoke).	A token string	none	OPTIONAL
language	Specifies the recognition language to the recognizer.	Any valid ISO 639‑3 language code	en-US	OPTIONAL
initial-timeout	Indicates the amount of time preceding input which may expire before a timeout is triggered.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
inter-digit-timeout	Indicates (in the case of DTMF input) the amount of time between input digits which may expire before a timeout is triggered.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
sensitivity	Indicates how sensitive the interpreter should be to loud versus quiet input. Higher values represent greater sensitivity.	A decimal value between 0 and 1.	0.5	OPTIONAL
min-confidence	Indicates the confidence threshold, below which a match is to be considered unreliable.	A decimal value between 0 and 1.	0	OPTIONAL
max-silence	Indicates the maximum period of silence which may be encountered during input gathering before a timeout is triggered.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
match-content-type	Indicates the required response document format.	Must support at least application/nlsml+xml, but may support others such as application/emma+xml.	application/nlsml+xml	OPTIONAL

Provides the grammar document by which the input detection should be governed.

The <grammar/> element MUST have either a url attribute set OR a content type and a body.

The attributes of the <grammar/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
url	Provides a URI at which the grammar document is available.	Any valid URI scheme supported by the server (eg HTTP).	none	REQUIRED unless content-type and content are set
content-type	Indicates the content type of the grammar document provided as CDATA.	A grammar content type token	none	REQUIRED unless url is set

Indicates that the component came to an end due to one of its grammars matching the received input.

The <match/> element MUST contain a valid response document within CDATA.

The attributes of the <matchr/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
content-type	Indicates the content type of the result document provided as CDATA.	A result document content type token	application/nlsml+xml	REQUIRED

Indicates that the component came to an end because the initial timeout was triggered.

The <initial-timeout/> element MUST be empty.

The <initial-timeout/> element has no attributes.

Indicates that the component came to an end because the inter-digit timeout was triggered.

The <inter-digit-timeout/> element MUST be empty.

The <inter-digit-timeout/> element has no attributes.

Indicates that the component came to an end because the max-silence timeout was triggered.

The <max-silence/> element MUST be empty.

The <max-silence/> element has no attributes.

Indicates that the component came to an end because the minimum confidence threshold was not reached.

The <min-confidence/> element MUST be empty.

The <min-confidence/> element has no attributes.

Indicates that the component came to an end because input was received which did not match any of the specified grammars.

The <nomatch/> element MUST be empty.

The <nomatch/> element has no attributes.

An prompt component is a mixture of audio output and input, and is used to link the lifecycle of both such input may interrupt output via an arbitrary grammar.

Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents, while simultaneously rendering output.

The <prompt/> element MUST contain an <input/> element and an <output/> element.

The attributes of the <prompt/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
barge-in	Whether or not the input detector is permitted to interrupt the output.	true\|false	true	OPTIONAL

A record component is used to instruct the server to record audible or visual media for temporary or permanent storage.

Instructs the server to begin recording input to the call to a file.

The <record/> element MAY contain one or more <hint/> elements.

The attributes of the <record/> element are as follows.

Attribute	Definition	Possible Values	Default	Inclusion
format	File format used during recording.	A valid format token, such as 'mp3', 'wav', 'h264'. Implementation specific.	mp3	OPTIONAL
start-beep	Indicates whether subsequent record will be preceded with a beep.	true\|false	false	OPTIONAL
stop-beep	Indicates whether subsequent record stop will be preceded with a beep.	true\|false	false	OPTIONAL
start-paused	Whether subsequent record will start in PAUSE mode.	true\|false	false	OPTIONAL
max-duration	Indicates the maximum duration for the recording.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
initial-timeout	Controls how long the recognizer should wait after the end of the prompt for the caller to speak before sending a Recorder event.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
final-timeout	Controls the length of a period of silence after callers have spoken to conclude they finished.	Any positive integer in miliseconds, or -1 to disable.	-1	OPTIONAL
direction	Indicates the direction of the call to record, meaning which call legs(s) are included in the resulting file, in case the call is joined to another or a mixer.	"duplex" - Records both sent and received audio. "send" - Indicates that only the audio sent from the caller is to be recorded. Not supported when Record is executed against a mixer. "recv" - Indicates that only and all audio received by the caller is recorded.	duplex	OPTIONAL
mix	Whether all channels (call legs) should be mixed into a single recording channel.	true\|false	false	OPTIONAL

Optional format-specific encoding hint

The <hint/> element MUST be empty.

The attributes of the <hint/> element are as follows.

Attribute	Definition	Inclusion
name	The name of the hint value as expected by the recorder.	REQUIRED
value	The value of the hint provided.	REQUIRED

Instructs the server to cease recording input but to leave the destination open for appending to permit resumption from the same point.

The <pause/> element MUST be empty.

The <pause/> element has no attributes.

Instructs the server to continue recording input, appending to the same destination.

The <resume/> element MUST be empty.

The <resume/> element has no attributes.

Provides the result of a recording, as a reference to its location.

The <recording/> element MUST be empty.

The attributes of the <recording/> element are as follows.

Attribute	Definition	Possible Values	Inclusion
uri	Indicates the URI at which the recording is made available.	A valid URI	REQUIRED
duration	Indicates the duration of the completed recording.	A positive integer in milliseconds.	REQUIRED
size	Indicates the filesize of the completed recording.	A positive integer in bytes.	REQUIRED

Indicates that the component came to an end due to the max duration being reached.

The <max-duration/> element MUST be empty.

The <max-duration/> element has no attributes.

Indicates that the component came to an end due to no input being detected before the initial-timeout.

The <initial-timeout/> element MUST be empty.

The <initial-timeout/> element has no attributes.

Indicates that the component came to an end because no input had been detected for the final timeout duration.

The <final-timeout/> element MUST be empty.

The <final-timeout/> element has no attributes.

STRONGLY RECOMMENDED.

If an entity supports Rayo, it MUST advertise that fact by returning a feature of "urn:xmpp:rayo:0" &VNOTE; in response to a &xep0030; information request. The response MUST also include features for the application formats and transport methods supported by the responding entity, as described in the relevant specifications.

]]> ]]> ]]> ]]>

In order for an application to determine whether an entity supports this protocol, where possible it SHOULD use the dynamic, presence-based profile of service discovery defined in &xep0115;. However, if an application has not received entity capabilities information from an entity, it SHOULD use explicit service discovery instead.

Rayo is a protocol designed for extensibility. Rayo implementations and deployments have great flexibility in the way they map the Rayo protocol to their underlying transport and media layers, and the functionality they provide around the Rayo interface to the system.

Further commands and components may also be added to the Rayo protocol in order to extend its capabilities. Such extensions should be submitted to the XSF as ProtoXEPs and use namespaces aligning with the core component namespaces.

A server MUST document any cases where its behaviour differs from that in this specification (such as lack of support for particular options/components/etc) and return an error whenever a command is not understood. A server MUST NOT silently ignore any instructions.

Rayo sessions can be resource-intensive. Therefore, it is possible to launch a denial-of-service attack against an entity by burdening it with too many Rayo sessions. Care must be taken to accept sessions only from known entities and only if the entity's device is able to process such sessions.

Rayo communications can be enabled through gateways to non-XMPP networks, whose security characteristics can be quite different from those of XMPP networks. For example, on some SIP networks authentication is optional and "from" addresses can be easily forged. Care must be taken in communicating through such gateways.

Mere negotiation of a Rayo session can expose sensitive information about the parties (e.g. IP addresses). Care must be taken in communicating such information, and end-to-end encryption should be used if the parties do not trust the intermediate servers or gateways.

This document requires no interaction with &IANA;.

This specification defines the following XML namespaces:

urn:xmpp:rayo:1
urn:xmpp:rayo:client:1
urn:xmpp:rayo:call:1
urn:xmpp:rayo:mixer:1
urn:xmpp:rayo:ext:1
urn:xmpp:rayo:ext:complete:1
urn:xmpp:rayo:output:1
urn:xmpp:rayo:output:complete:1
urn:xmpp:rayo:input:1
urn:xmpp:rayo:input:complete:1
urn:xmpp:rayo:prompt:1
urn:xmpp:rayo:record:1
urn:xmpp:rayo:record:complete:1

The ®ISTRAR; includes the foregoing namespaces in its registry at &NAMESPACES;, as governed by &xep0053;.

If the protocol defined in this specification undergoes a major revision that is not fully backward-compatible with an older version, or that contains significant new features, the XMPP Registrar shall increment the protocol version number found at the end of the XML namespaces defined herein, as described in Section 4 of XEP-0053.

The XMPP Registrar maintains a registry of Rayo components. All component registrations with the exception of those defined above shall be defined in separate specifications (not in this document). Components defined within the XEP series MUST be registered with the XMPP Registrar, resulting in protocol URNs of the form "urn:xmpp:rayo:component_name:X" (where "component_name" is the registered name of the component and "X" is a non-negative integer).

®PROCESS;


  The name of the component.
  A natural-language summary of the component.
  The document in which the component is specified.

    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        
          A token giving the name by which the header may be known.
        
      
    
    
      
        
          The string value of the named header.
        
      
    
  

  
  
    
      
        Informs the recipient that a new call is available for control and invites it to take control using progress commands below.
      
    
    
      
        
          
            The target URI for the call. May be a tel URI, SIP URI, a JID (for Jingle) or some other platform-specific addressing mechanism.
          
        
      
      
        
          
            The caller ID URI for the call. May be a tel URI, SIP URI, a JID (for Jingle) or some other platform-specific addressing mechanism.
          
        
      
      
        
          
            
              Set of header variables sent by the originating party (eg SIP INVITE headers).
            
          
        
      
    
  

  
    
      
    
  

  
  
    
      
        Indication that an outbound call has begun ringing, or accepted by the remote party.
      
    
  

  
  
    
      
        Indication that an outbound call has been answered and that the 3rd party negotiation has completed. At this point, the media stream should be open.
      
    
  

  
  
    
      
        Indication that the call has come to an end, giving the reason.
      
    
    
      
        
          
            
              
                Indication that the call ended due to a normal hangup by the remote party.
              
            
          
          
            
              
                Indication that the call ended due to a normal hangup triggered by a hangup command.
              
            
          
          
            
              
                Indication that the call ended due to a timeout in contacting the remote party.
              
            
          
          
            
              
                Indication that the call ended due to being rejected by the remote party subsequent to being accepted.
              
            
          
          
            
              
                Indication that the call ended due to being rejected by the remote party before being accepted.
              
            
          
          
            
              
                Indication that the call ended due to a system error.
              
            
          
        
        
          
            
             Set of header variables sent by the remote party along with the indication of the call ending.
            
          
        
      
    
  

  
  
    
      
        Instructs the server to send notification to the calling party that the call will be dealt with and that ringing may begin.
      
    
    
      
        
      
    
  

  
  
    
      
        Instructs the server to pick up an incoming call and connect the media stream.
      
    
    
      
        
      
    
  

  
  
    
      
        Instructs the calling party that the call will not be accepted and that instead it should try to call the URI indicated in the command.
      
    
    
      
        
          
            The new target URI for the call to be redirected to.
          
        
      
      
        
      
    
  

  
  
    
      
        Instructs the server to reject the call with a given reason.
      
    
    
      
        
          
            
              
                Indicates that the controlling party refused the call for an unspecified reason, such as access control.
              
            
          
          
            
              
                Indicates that the controlling party refused the call due to excess load.
              
            
          
          
            
              
                Indicates that the controlling party refused the call because some error occurred.
              
            
          
        
        
      
    
  

  
  
    
      
        Instructs the server to bring the call to an end naturally.
      
    
    
      
        
      
    
  

  
  
    
      
        Instructs the server to create a new call and surrender control of it to the requesting party.
      
    
    
      
        
          
            Indicates the party to whom the call should be directed.
          
        
      
      
        
          
            Indicates the caller ID with which the call should appear to originate.
          
        
      
      
        
          
            Indicates the maximum time allowed for a response to be provided by the third party before the call should be considered to have come to an end.
          
        
      
      
        
        
          
            
              Instructs the server to join the new call in the indicated manner rather than the default (join to the local media server).
            
          
        
      
    
  

  
  
    
      
        Instructs the server to join the media streams of the call and the specified party, given direction and media negotiation parameters.
      
    
    
      
        
          
            
              
                Indicates the direction in which the media should flow between the call and the 3rd party.
              
            
            
              
                
                  
                    
                      Indicates that media should flow in both directions between the parties.
                    
                  
                
                
                  
                    
                      Indicates that media should only flow from the target call to the third party.
                    
                  
                
                
                  
                    
                      Indicates that media should only flow from the third party to the target call.
                    
                  
                
              
            
          
          
            
              
                Indicates the manner in which the server should negotiate media between the two parties.
              
            
            
              
                
                  
                    
                      Instructs the server to bridge the parties media streams via its local media server.
                    
                  
                
                
                  
                    
                      Instructs the server to have the parties negotiate media directly with one another.
                    
                  
                
              
            
          
        
      
    
  

  
  
    
      
        Instructs the server to unjoin the media streams of the call and the specified party.
      
    
  

  
  
    
      
        Indicates that the call was successfully joined to the specified party.
      
    
  

  
  
    
      
        Indicates that the call ceased to be joined to the specified party.
      
    
  

  
    
      
        
          Indicates the 3rd party call URI to which the target call should be joined. May not be set if the mixer-name attribute is set.
        
      
    
    
      
        
          Indicates the mixer name to which the target call should be joined. May not be set if the call-id attribute is set.
        
      
    
  

  
  
    
      
        Indicates that a call joined to a mixer with which the controlling party has an events subscription has activated a speech detector, providing its ID.
      
    
  

  
  
    
      
        Indicates that a call joined to a mixer with which the controlling party has an events subscription has ceased activation of a speech detector, providing its ID.
      
    
  

  
    
      
        
          Indicates the URI of the call which has triggered the speech detector.
        
      
    
  

  
  
    
      
        Used to give an indication of the identity of a newly created resource, either a call or a component.
      
    
    
      
        
          
            Gives the URI of the new resource.
          
        
      
    
  

  
  
    
      
    
  

  
  
    
      
        
          Value is a duration in milleseconds
        
      
    
  

  
  
    
      
        A value of -1 indicates no timeout
      
    

    
      
    
  

  
  
    
      
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Instructs a component to come to an end before it completes naturally.
      
    
  

  
  
    
      
        Indicates that the component has come to an end and no further processing will occurr. Gives the reason for the termination.
      
    
    
      
        
          
            
              The reason for component termination. May be either one of the core termination reasons (stop, hangup, error) or a component specific reason.
            
          
        
      
      
        
          
            
              May be any component specific meta-data elements, such as .
            
          
        
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Indicates that the component came to an end because it was issued a stop command by the controlling party.
      
    
  

  
  
    
      
        Indicates that the component came to an end because the call ended.
      
    
  

  
  
    
      
        Indicates that the component came to an end because it encountered an error.
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
    
      
        
          
            Provides a URI at which the document is available. Must not be provided if the content-type attribute is set or the element contains a document as CDATA.
          
        
      
      
        
          
            Indicates the content type of the document provided as CDATA. Must not be set if the url attribute is set.
          
        
      

      
    
  

  
  
    
      
        Instructs the server to begin an output component executing on the target call or mixer with the specified document and parameters.
      
    
    
      
        
          
            Indicates some offset through which the output should be skipped before rendering begins.
          
        
      
      
        
          
            Indicates wether or not the component should be started in a paused state to be resumed at a later time.
          
        
      
      
        
          
            Indicates the duration of silence that should space repeats of the rendered document.
          
        
      
      
        
          
            Indicates the number of times the output should be played.
          
        
      
      
        
          
            Indicates the maximum amount of time for which the output should be allowed to run before being terminated. Includes repeats.
          
        
      
      
        
          
            Indicates which media engine the server should use to render the Output.
          
        
      
      
        
          
            The voice with which to speak the requested document.
          
        
      

      
        
          
            
              Provides the document for rendering.
            
          
        
      
    
  

  
  
    
      
        Instructs the server to cease rendering output at the current marker and permit resumption from the same point.
      
    
  

  
  
    
      
        Instructs the server to continue rendering the output from the last pause marker.
      
    
  

  
  
    
      
        Instructs the server to increase the rate of output by a unit amount.
      
    
  

  
  
    
      
        Instructs the server to decrease the rate of output by a unit amount.
      
    
  

  
  
    
      
        Instructs the server to increase the volume of output by a unit amount.
      
    
  

  
  
    
      
        Instructs the server to decrease the volume of output by a unit amount.
      
    
  

  
  
    
      
        Instructs the server to move the play marker of the output forward or back in time before resuming output.
      
    
    
      
        
          
            Indicates the direction in time in which to move the play marker.
          
        
        
          
            
            
          
        
      
      
        
          
            Indicates the duration by which to move the play marker.
          
        
        
          
            
          
        
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Indicates that the output component came to an end as a result of reaching the end of the document to be rendered.
      
    
  

  
  
    
      
        Indicates that the output component came to an end due to the maximum time limit being reached.
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
    
      
        
          
            Provides a URI at which the grammar document is available. Must not be provided if the content-type attribute is set or the element contains a grammar document as CDATA.
          
        
      
      
        
          
            Indicates the content type of the grammar document provided as CDATA. Must not be set if the url attribute is set.
          
        
      

      
    
  

  
  
    
      
        Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents.
      
    
    
      
        
          
            
              The method by which to collect input.
            
          
          
            
              
              
              
            
          
        
        
          
            
              Indicates a terminator token which, when encountered, should cause the input detection to cease.
            
          
        
        
          
            
              Indicates the name of the particular input processor to be engaged, used only for routing purposes (eg to choose which MRCP profile to invoke).
            
          
        
        
          
            
              Specifies the recognition language to the recognizer.
            
          
        
        
          
            
              Indicates the amount of time preceding input which may expire before a timeout is triggered.
            
          
        
        
          
            
              Indicates (in the case of DTMF input) the amount of time between input digits which may expire before a timeout is triggered.
            
          
        
        
          
            
              Indicates how sensitive the interpreter should be to loud versus quiet input. Higher values represent greater sensitivity.
            
          
        
        
          
            
              Indicates the confidence threshold, below which a match is to be considered unreliable.
            
          
        
        
          
            
              Indicates the maximum period of silence which may be encountered during input gathering before a timeout is triggered.
            
          
        
        
          
            
              Indicates the required response document format.
            
          
        

        
          
            
              
                Provides the grammar document by which the input detection should be governed.
              
            
          
        
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Indicates that the component came to an end due to one of its grammars matching the received input. Provides the NLSML result of the grammar match after any symantic processing which may have been performed. See the NLSML spec for details.
      
    

    
      
        
          
            
              Indicates the content type of the result document provided as CDATA.
            
          
        
      
    
  

  
  
    
      
        Indicates that the component came to an end because the initial timeout was triggered.
      
    
  

  
  
    
      
        Indicates that the component came to an end because the inter-digit timeout was triggered.
      
    
  

  
  
    
      
        Indicates that the component came to an end because the max-silence timeout was triggered.
      
    
  

  
  
    
      
        Indicates that the component came to an end because the minimum confidence threshold was not reached.
      
    
  

  
  
    
      
        Indicates that the component came to an end because input was received which did not match any of the specified grammars.
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Instructs the server to begin an input detector of the specified mode, with certain attributes, governed by the rules provided in one or more grammar documents, while simultaneously rendering output.
      
    
    
      
        
          
            
              Whether or not the input detector is permitted to interrupt the output.
            
          
        

        
          
            
              
                Provides the output component to be executed
              
            
          
          
            
              
                Provides the input component to be executed
              
            
          
        
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        Instructs the server to begin recording input to the call to a file.
      
    
    
      
        
          
            File format used during recording.
          
        
      
      
        
          
            Indicates whether subsequent record will be preceded with a beep.
          
        
      
      
        
          
            Indicates whether subsequent record stop will be preceded with a beep.
          
        
      
      
        
          
            Whether subsequent record will start in PAUSE mode.
          
        
      
      
        
          
            Indicates the maximum duration for the recording.
          
        
      
      
        
          
            Controls how long the recognizer should wait after the end of the prompt for the caller to speak before sending a Recorder event.
          
        
      
      
        
          
            Controls the length of a period of silence after callers have spoken to conclude they finished.
          
        
      
      
        
          
            Indicates the direction of the call to record, as in media produced or received by the calling party.
          
        
        
          
            
              
                
                  Records both sent and received audio.
                
              
            
            
              
                
                  Indicates that only the audio sent from the caller is to be recorded. Not supported when Record is executed against a mixer.
                
              
            
            
              
                
                  Indicates that only and all audio received by the caller is recorded.
                
              
            
          
        
      
      
        
          
            Whether all channels (call legs) should be mixed into a single recording channel.
          
        
      

      
        
          
            
              Optional format-specific encoding hints
            
          
          
            
              
                
                  The name of the hint value as expected by the recorder.
                
              
            
            
              
                
                  The value of the hint provided.
                
              
            
          
        
      
    
  

  
  
    
      
        Instructs the server to cease recording input but to leave the destination open for appending to permit resumption from the same point.
      
    
  

  
  
    
      
        Instructs the server to continue recording input, appending to the same destination.
      
    
  


    ]]>




  
    
      The protocol documented by this schema is defined at http://rayo.org/xep
    
  

  
  
    
      
        
          Indicates the URI at which the recording is made available.
        
      
    
    
      
        
          Indicates the duration of the completed recording.
        
      
    
    
      
        
          Indicates the filesize (in bytes) of the completed recording.
        
      
    
  

  
  
    
      
        Indicates that the component came to an end due to the max duration being reached.
      
    
  

  
  
    
      
        Indicates that the component came to an end due to no input being detected before the initial-timeout.
      
    
  

  
  
    
      
        Indicates that the component came to an end because no input had been detected for the final timeout duration.
      
    
  


    ]]>

Prior to the development of the Rayo protocol, the most widely-used 3PCC protocols were Asterisk's AGI and AMI. Unfortunately, these protocols have many drawbacks, not least in their inconsistency and relatively poor documentation, but also in that they are poorly secured and lacking in attributes required for significant scalability. Much 3PCC activity is also done using process-internal APIs rather than a wire protocol like XMPP.

Rayo was developed to satisfy three main desires:

To separate the application logic from the back-end call processing infrastructure for large-scale scripting-based hosted voice application platforms. This helps to ensure that the performance of the back-end infrastructure cannot be impacted by the applications controling it, and specifically to allow sandboxing the applications.
To create a platform-agnostic protocol for the control of live media sessions that has been designed from the start for such use.
To enable authenticated, federated, web-scale 3PCC on platforms with APIs only suitable for trusted internal use (Asterisk, FreeSWITCH, etc).

Initial development of the Rayo specification and its reference implementation was sponsored by Voxeo Labs and Telefónica, with Punchblock being the first client library implementation, as part of the Adhearsion project. Since the beginning of the development process, further implementation efforts have begun on top of Asterisk's AGI/AMI protocols and FreeSWITCH EventSocket, native to FreeSWITCH (mod_rayo), as well as client library implementations in Node/CoffeeScript and Python.

The authors would like to acknowledge the input of teams at Voxeo Labs, Mojo Lingo and Telefónica in the development of the initial specification, and Grasshopper in expanding the implementation landscape.

Specific individuals who have contributed to the specification or to software significant to its completion include:

Ben Langfeld
Ben Klang
Chris Rienzo
Jason Goecke
John Dyer
Jose de Castro
Juan de Bravo
Luca Pradovera
Martín Pérez