docs: simpler README with the logo; ready-for-v1 checklist

release: version 0.0.2; note more SIP providers (Telnyx, Flowroute, Twilio) as next
dialplan: build the dial string per contact; iOS Linphone's push params broke Dial
2026-10-21 07:42:33 -05:00 · 2026-10-21 07:38:17 -05:00 · 2026-10-20 16:34:45 -05:00 · 2026-10-20 15:00:07 -05:00
27 changed files with 655 additions and 79 deletions
@@ -3,6 +3,11 @@
 Versions follow [semver](https://semver.org). Each release's container images are built from its
 tag (08 §3.1): `selfphoneng-api` and `selfphoneng-asterisk`, on ghcr.io and on the Gitea registry.

+## v0.0.2 — 2026-10-21
+
+- Fix: calls to a user with Linphone on an iPhone registered dropped at once, for every device of
+  that user. Its push parameters hold `&`, which split the dial string.
+
 ## v0.0.1 — 2026-10-20

 The first tagged build, for testing. Not for production yet: the v1.0 definition of done
@@ -1,15 +1,43 @@
+<p align="center">
+  <img src="apps/web/public/logo-512.png" alt="SelfPhoneNG" width="220">
+</p>
+
 # SelfPhoneNG

-A fully open source, self-hosted business phone system: extensions, desk phones and a
-browser softphone, voicemail to email, IVRs, ring groups, queues, office hours, call
-recording, live dashboard, SMS and phone provisioning. Bring your own SIP trunk and
-numbers (reference provider: voip.ms). Built on Asterisk 24 LTS + TypeScript + PostgreSQL 18.
+A fully open source, self-hosted business phone system. Bring your own SIP trunk and numbers
+(reference provider: voip.ms). Built on Asterisk 24 + TypeScript + PostgreSQL 18, runs in Docker.

-**Status:** pre-1.0, not yet tested by an outside installer.
+**Status:** pre-1.0 (v0.0.2), for testing. See [what's left for v1](docs/v1-checklist.md).

- Installing and running it: the [admin guide](docs/admin-guide/README.md)
- Start here if you are writing code (human or AI): [`AGENTS.md`](AGENTS.md)
- The full spec: [`docs/spec/`](docs/spec/00-overview.md)
- Build order: [`docs/spec/09-roadmap.md`](docs/spec/09-roadmap.md)
+## What it does today
+
+- **Phones:** users and extensions, desk phones (Yealink, Grandstream) set up automatically, a
+  browser phone, and Linphone set up by scanning a QR code.
+- **Numbers:** voip.ms trunks (registration or IP auth, UDP/TCP/TLS + SRTP), phone numbers,
+  outbound rules with calling permissions, 911 with E911 caller ID and alerts.
+- **Call flows:** digital receptionists, office hours and holidays, ring groups, queues, parking,
+  pickup, conference rooms, paging and intercom, music on hold.
+- **Voicemail** with email, **call history**, **recordings**, a **live dashboard** (listen,
+  whisper, barge) and reports.
+- **Running it:** backups and restore, background health checks, webhooks and API tokens,
+  two-step sign-in for admins, limits on outside calls at once.
+
+## Wanted
+
+- More SIP providers: **Telnyx, Flowroute and Twilio** first.
+- SMS (built for voip.ms, parked until wanted).
+- Push notifications, so phone apps ring in the background.
+- An update script for running installs.
+- Text-to-speech prompts, recording prompts by phone, a queue wallboard, Polycom phones.
+
+## Docs
+
+- [Admin guide](docs/admin-guide/README.md): install, [voip.ms setup](docs/admin-guide/voipms.md),
+  [network and firewall](docs/admin-guide/network.md), [E911 and recording law](docs/admin-guide/legal.md),
+  [troubleshooting](docs/admin-guide/troubleshooting.md), [updating and backups](docs/admin-guide/maintenance.md)
+- [Changelog](CHANGELOG.md)
+- [Ready for v1 checklist](docs/v1-checklist.md)
+- Writing code (human or AI): start with [`AGENTS.md`](AGENTS.md), then the
+  [spec](docs/spec/00-overview.md) and the [roadmap](docs/spec/09-roadmap.md)

 License: AGPL-3.0-or-later.
@@ -1,6 +1,6 @@
 {
  "name": "@selfphoneng/api",
-  "version": "0.0.1",
+  "version": "0.0.2",
  "private": true,
  "license": "AGPL-3.0-or-later",
  "type": "module",
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -10,16 +10,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -13,16 +13,38 @@ exten => s,1,Set(N=\${FILTER(0123456789+,\${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=\${PJSIP_DIAL_CONTACTS(\${ARG1})})
- same => n,Set(WS=\${PJSIP_DIAL_CONTACTS(\${ARG1}-web)})
- same => n,ExecIf($["\${DS}" != "" & "\${WS}" != ""]?Set(DS=\${DS}&\${WS}))
- same => n,ExecIf($["\${DS}" = ""]?Set(DS=\${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(\${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(\${ARG1}-web))
 same => n,GotoIf($["\${DS}" = ""]?unavail)
 same => n,Dial(\${DS},\${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=\${PJSIP_AOR(\${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=\${POP(CL)})
+ same => n,GotoIf($["\${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=\${PJSIP_CONTACT(\${C},status)})
+ same => n,GotoIf($["\${ST}" = "Unavailable" | "\${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=\${PJSIP_CONTACT(\${C},uri)})
+ same => n,Set(LOCAL(D)=\${CUT(U,\\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[\${I} + 1])
+ same => n,GotoIf($[\${I} > \${FIELDQTY(U,\\;)}]?add)
+ same => n,Set(LOCAL(P)=\${CUT(U,\\;,\${I})})
+ same => n,GotoIf($["\${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=\${D}\\;\${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=\${DS}\${IF($["\${DS}" = ""]?:&)}PJSIP/\${ARG1}/\${FILTER(0-9a-zA-Z.:@\\;=_+%[]\\x2d,\${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -22,6 +22,7 @@ const RECORD = process.argv.includes('--record')
 const NET = 'sp-test';
 const AST = 'sp-test-ast';
 const PHONES = 'sp-test-phones';
+const PN_PHONE = 'sp-test-pn-phone';
 const AMI_PORT = 15038;
 const AMI_SECRET = 'call-test-secret';
 const PASS = { '101': 'CallTest101xxxxxxxxxxxxx', '102': 'CallTest102xxxxxxxxxxxxx' };
@@ -142,7 +143,7 @@ async function main() {
    backoffMs: [500],
  });
  try {
-    docker('rm', '-f', AST, PHONES);
+    docker('rm', '-f', AST, PHONES, PN_PHONE);
    docker('network', 'create', NET);
    const run = docker(
      'run',
@@ -236,6 +237,30 @@ async function main() {
    ).out.trim();
    if (!wsReg.startsWith('SIP/2.0 200')) problems.push(`102-web over WebSocket: ${wsReg}`);
    else log('102-web over WebSocket from 127.0.0.1: registered');
+    // 101 also on an iOS Linphone: '&' in its push params used to break Dial for every device.
+    const pn = docker(
+      'run',
+      '-d',
+      '--rm',
+      '--name',
+      PN_PHONE,
+      '--network',
+      NET,
+      '-v',
+      `${join(import.meta.dirname, 'pn-phone.mjs')}:/pn-phone.mjs:ro`,
+      'node:24-trixie-slim',
+      'node',
+      '/pn-phone.mjs',
+      AST,
+      '101',
+      PASS['101'],
+    );
+    if (!pn.ok) throw new Error(`pn phone: ${pn.out}`);
+    for (let i = 0; i < 20 && !/REGISTER SIP\/2.0 200/.test(docker('logs', PN_PHONE).out); i++)
+      await sleep(500);
+    if (!/REGISTER SIP\/2.0 200/.test(docker('logs', PN_PHONE).out))
+      throw new Error(`pn phone did not register: ${docker('logs', PN_PHONE).out}`);
+    log('101 also registered with iOS Linphone push params');
    // Real list responses with registered phones, for the live-state fixture.
    recorder?.write(
      'Action: PJSIPShowContacts\r\nActionID: rec-2\r\n\r\n' +
@@ -263,6 +288,11 @@ async function main() {
        break;
    }
    if (!/Up!Dial/.test(channels)) throw new Error(`call did not connect:\n${channels}`);
+    // Rung too, without its pn-* params; the rest of its Contact kept.
+    const pnInvite = /^INVITE .*$/m.exec(docker('logs', PN_PHONE).out)?.[0] ?? 'no INVITE';
+    if (!/;x-test=keep-me$/.test(pnInvite) || /pn-/.test(pnInvite))
+      problems.push(`push-params phone: ${pnInvite}`);
+    else log(`push-params phone rung: ${pnInvite}`);
    log(`call up, holding ${CALL_SECONDS} s`);
    await sleep(CALL_SECONDS * 1000);

@@ -307,7 +337,7 @@ async function main() {
 ${docker('exec', PHONES, 'tail', '-n', '25', `/phones/phone-${e}/log`).out}`);
    recorder?.destroy();
    ami.stop();
-    docker('rm', '-f', PHONES, AST);
+    docker('rm', '-f', PHONES, PN_PHONE, AST);
    docker('network', 'rm', NET);
    rmSync(dir, { recursive: true, force: true });
  }
@@ -0,0 +1,78 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// A phone that registers like iOS Linphone: push params holding '&' in its Contact. Answers
+// qualify OPTIONS, prints the Request-URI of each INVITE ("INVITE <uri>") and turns it down (486),
+// so the real phone on the same extension takes the call. call-test.ts runs it.
+// Usage: node pn-phone.mjs <asterisk host> <user> <password>
+import { createHash, randomUUID } from 'node:crypto';
+import { createSocket } from 'node:dgram';
+import { lookup } from 'node:dns/promises';
+import { networkInterfaces } from 'node:os';
+
+const [astHost, user, pass] = process.argv.slice(2);
+const md5 = (s) => createHash('md5').update(s).digest('hex');
+const ast = (await lookup(astHost)).address;
+const me = Object.values(networkInterfaces())
+  .flat()
+  .find((i) => i.family === 'IPv4' && !i.internal).address;
+const PORT = 5080;
+const uri = `sip:${astHost}`;
+const callId = randomUUID();
+const tag = randomUUID().slice(0, 8);
+const contact =
+  `<sip:${user}@${me}:${PORT};pn-prid=AAAA1111:voip&bbbb2222:remote;pn-provider=apns;` +
+  `pn-param=ABCD1234.org.linphone.phone.voip&remote;x-test=keep-me>`;
+
+const sock = createSocket('udp4');
+const send = (msg) => sock.send(msg, 5060, ast);
+const register = (cseq, auth) =>
+  [
+    `REGISTER ${uri} SIP/2.0`,
+    `Via: SIP/2.0/UDP ${me}:${PORT};rport;branch=z9hG4bK${randomUUID().slice(0, 12)}`,
+    'Max-Forwards: 70',
+    `From: <sip:${user}@${astHost}>;tag=${tag}`,
+    `To: <sip:${user}@${astHost}>`,
+    `Call-ID: ${callId}`,
+    `CSeq: ${cseq} REGISTER`,
+    `Contact: ${contact}`,
+    'Expires: 300',
+    ...(auth ? [`Authorization: ${auth}`] : []),
+    'Content-Length: 0',
+    '',
+    '',
+  ].join('\r\n');
+
+/** A response to a request: its Via, From, Call-ID and CSeq, and a To tag. */
+const reply = (req, status) => {
+  const keep = req.split('\r\n').filter((l) => /^(Via|From|To|Call-ID|CSeq):/i.test(l));
+  const lines = keep.map((l) => (/^To:/i.test(l) && !/;tag=/.test(l) ? `${l};tag=${tag}` : l));
+  return [`SIP/2.0 ${status}`, ...lines, 'Content-Length: 0', '', ''].join('\r\n');
+};
+
+sock.on('message', (buf) => {
+  const msg = buf.toString();
+  const first = msg.split('\r\n')[0];
+  const challenge = /WWW-Authenticate: Digest (.*)/i.exec(msg)?.[1];
+  if (first.includes(' 401 ') && challenge) {
+    const p = Object.fromEntries(
+      [...challenge.matchAll(/(\w+)="?([^",]*)"?/g)].map((m) => [m[1], m[2]]),
+    );
+    const cnonce = randomUUID().slice(0, 8);
+    const ha1 = md5(`${user}:${p.realm}:${pass}`);
+    const ha2 = md5(`REGISTER:${uri}`);
+    const response = md5(`${ha1}:${p.nonce}:00000001:${cnonce}:auth:${ha2}`);
+    send(
+      register(
+        2,
+        `Digest username="${user}", realm="${p.realm}", nonce="${p.nonce}", uri="${uri}", ` +
+          `response="${response}", algorithm=MD5, qop=auth, nc=00000001, cnonce="${cnonce}"` +
+          (p.opaque ? `, opaque="${p.opaque}"` : ''),
+      ),
+    );
+  } else if (first.startsWith('SIP/2.0 ')) console.log(`REGISTER ${first}`);
+  else if (first.startsWith('OPTIONS ')) send(reply(msg, '200 OK'));
+  else if (first.startsWith('INVITE ')) {
+    console.log(first.split(' ').slice(0, 2).join(' '));
+    send(reply(msg, '486 Busy Here'));
+  }
+});
+sock.bind(PORT, () => send(register(1)));
@@ -1,6 +1,6 @@
 {
  "name": "@selfphoneng/web",
-  "version": "0.0.1",
+  "version": "0.0.2",
  "private": true,
  "license": "AGPL-3.0-or-later",
  "type": "module",
@@ -390,16 +390,38 @@ exten => s,1,Set(N=${FILTER(0123456789+,${ARG1})})
 ; ─── Ring every registered device of a user. ARG1 = ext, ARG2 = seconds.
 ; Sets DIALSTATUS. Rings desk/softphone contacts (PJSIP/101) and browser (PJSIP/101-web).
 [sp-sub-dial-user]
-exten => s,1,Set(DS=${PJSIP_DIAL_CONTACTS(${ARG1})})
- same => n,Set(WS=${PJSIP_DIAL_CONTACTS(${ARG1}-web)})
- same => n,ExecIf($["${DS}" != "" & "${WS}" != ""]?Set(DS=${DS}&${WS}))
- same => n,ExecIf($["${DS}" = ""]?Set(DS=${WS}))
+exten => s,1,Set(DS=)
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}))
+ same => n,Gosub(sp-sub-contacts,s,1(${ARG1}-web))
 same => n,GotoIf($["${DS}" = ""]?unavail)
 same => n,Dial(${DS},${ARG2},tx)
 same => n,Return()
 same => n(unavail),Set(DIALSTATUS=CHANUNAVAIL)
 same => n,Return()

+; ─── Add AOR ARG1's reachable contacts to DS as PJSIP/<ARG1>/<uri>. Not PJSIP_DIAL_CONTACTS: iOS
+; Linphone's push params (pn-prid=…:voip&…:remote) hold '&', which splits Dial's device list.
+; pn-* only matter to a push server, so they're dropped; FILTER keeps whatever else a phone puts
+; in its Contact from reaching Dial's options (',') or another device ('&').
+[sp-sub-contacts]
+exten => s,1,Set(LOCAL(CL)=${PJSIP_AOR(${ARG1},contact)})
+ same => n(next),Set(LOCAL(C)=${POP(CL)})
+ same => n,GotoIf($["${C}" = ""]?done)
+ same => n,Set(LOCAL(ST)=${PJSIP_CONTACT(${C},status)})
+ same => n,GotoIf($["${ST}" = "Unavailable" | "${ST}" = "Unreachable"]?next)
+ same => n,Set(LOCAL(U)=${PJSIP_CONTACT(${C},uri)})
+ same => n,Set(LOCAL(D)=${CUT(U,\;,1)})
+ same => n,Set(LOCAL(I)=1)
+ same => n(param),Set(I=$[${I} + 1])
+ same => n,GotoIf($[${I} > ${FIELDQTY(U,\;)}]?add)
+ same => n,Set(LOCAL(P)=${CUT(U,\;,${I})})
+ same => n,GotoIf($["${P:0:3}" = "pn-"]?param)
+ same => n,Set(D=${D}\;${P})
+ same => n,Goto(param)
+ same => n(add),Set(DS=${DS}${IF($["${DS}" = ""]?:&)}PJSIP/${ARG1}/${FILTER(0-9a-zA-Z.:@\;=_+%[]\x2d,${D})})
+ same => n,Goto(next)
+ same => n(done),Return()
+
 ; ─── Call a user with all their personal rules.
 ; ARG1 = ext, ARG2 = ring seconds, ARG3 = voicemail enabled (1/0), ARG4 = record mode
 [sp-sub-user]
@@ -181,6 +181,11 @@ without a shell; CSV export escapes formulas; no `dangerouslySetInnerHTML`; sess
 stored as sha256; AES-256-GCM with a random IV per value; AMI, Asterisk HTTP and the api listen on
 127.0.0.1 only; webhooks check addresses at connect time (no DNS rebinding), follow no redirects.

+To do (owner, 2026-10-20, for the next image): `noload` in `asterisk/conf/modules.conf` for
+`app_system.so`, `func_shell.so`, `app_disa.so` and `res_agi.so`. Nothing uses them, but they are
+what a dialplan injection would reach for (`SHELL()` runs host commands). Check with
+`pnpm test:asterisk` before releasing.
+
 Left as they are, for the owner:
 - Turning two-step sign-in on doesn't ask for the password again (turning it off does).
 - `*98` allows 3 PIN tries per call, with no limit on calls; only internal phones reach it.
@@ -248,6 +248,19 @@ As built: all four tasks done and tested with simulated phones (`scripts/e2e/m10

 ---

+## More SIP providers (owner, 2026-10-21: wanted, next after 0.0.2)
+Quick hits: **Telnyx, Flowroute, Twilio**, as presets beside voip.ms with their own setup checklist
+(like 06 §1). The generic trunk misses, for these:
+- Password on calls without registering: `authMode: 'ip'` sends no `outbound_auth` (Twilio's SIP
+  trunks don't register).
+- More than one inbound address per trunk: `identify` only matches the server host; they send from
+  several addresses or ranges.
+- Numbers sent as +1…: caller ID goes through `s.digits`, which drops the `+` (Twilio needs E.164).
+- Flowroute's tech prefix (`12345678*`) in a route's prepend: check it fits.
+Each one checked against a real account before it's called supported (06's verify rule).
+
+---
+
 ## M12 — Nice to have (after v1.0)
 - Piper TTS for prompts (04 §6).
 - Record prompts by phone.
@@ -259,6 +272,7 @@ As built: all four tasks done and tested with simulated phones (`scripts/e2e/m10
 ---

 ## Definition of done for v1.0
+Tracked box by box in [`docs/v1-checklist.md`](../v1-checklist.md).
 All of M0–M11 done (including the open real voip.ms checks under M3), plus: 7 days running on the owner's server handling real calls with
 no crash/restart of the api or Asterisk, and nightly backups restoring cleanly. Also `scripts/update.sh` (08 §3.1) written,
 reviewed and thoroughly tested on a real server (updating a running install, with calls, backups and the bundled Caddy), with
@@ -0,0 +1,64 @@
+# Ready for v1 checklist
+
+v1.0 ships when every box is ticked. It gathers the roadmap's definition of done
+([09](spec/09-roadmap.md)) and its open real-hardware checks, plus the security leftovers (08 §6).
+Tick a box only with proof: a date and what was seen.
+
+## Built
+
+- [x] Milestones M0–M11 built and tested (simulated phones and a simulated voip.ms).
+- [x] Security review (M11-T8), with an independent review (08 §6).
+
+## Real voip.ms account (M3)
+
+- [ ] The trunk shows **Registered** in the UI.
+- [x] A mobile → DID call rings a phone. 2026-10-21: DID → digital receptionist → browser
+      phone; the DID came in the Request-URI. Still to do: write that down in 06 §3.
+- [ ] An outbound call shows the DID as caller ID on the mobile. Write down in 06 §4 whether
+      per-call caller ID (Remote-Party-ID) is honored.
+
+## Real phones (M8, M10)
+
+- [x] Linphone on a real phone registers by scanning the QR (2026-10-20, iPhone).
+- [ ] An incoming call rings that Linphone while the app is open (fixed in v0.0.2, needs
+      checking on the server).
+- [ ] A factory-reset Yealink pointed at the setup URL registers with the right name and BLF keys.
+- [ ] A Grandstream gets its keys the same way.
+- [ ] Paging auto-answers on a real Yealink or Grandstream.
+
+## Someone else installs it (M11)
+
+- [ ] An outside tester follows only the admin guide and gets inbound and outbound calls working
+      on a fresh VM.
+- [ ] A backup restores on a second VM.
+
+## A week on the owner's server
+
+- [ ] 7 days handling real calls with no crash or restart of the api or Asterisk.
+- [ ] Nightly backups restore cleanly.
+
+## Updating
+
+- [ ] `scripts/update.sh` written, reviewed and tested on a real server: updating a running
+      install, with calls, backups and the bundled Caddy.
+- [ ] The admin guide's "Updating" section matches it.
+
+## Security leftovers (08 §6)
+
+- [ ] Asterisk no longer loads `app_system`, `func_shell`, `app_disa` and `res_agi`; checked with
+      `pnpm test:asterisk`.
+- [ ] Owner decision, fix or accept each:
+  - [ ] Turning two-step sign-in on doesn't ask for the password again.
+  - [ ] `*98` allows 3 PIN tries per call, with no limit on calls.
+  - [ ] A known MAC answers `/prov` with 401, an unknown one with 404.
+  - [ ] The login limiter's memory grows with the number of distinct emails tried.
+
+## The release
+
+- [ ] Version 1.0.0 in every `package.json`, and a v1.0.0 entry in the [changelog](../CHANGELOG.md).
+- [ ] The release builds and pushes images to both the Gitea registry and ghcr.io.
+
+## Not needed for v1
+
+More SIP providers (Telnyx, Flowroute, Twilio), SMS, push notifications for phone apps, and the
+M12 list in the roadmap.
@@ -1,6 +1,6 @@
 {
  "name": "selfphoneng",
-  "version": "0.0.1",
+  "version": "0.0.2",
  "private": true,
  "license": "AGPL-3.0-or-later",
  "type": "module",
@@ -1,6 +1,6 @@
 {
  "name": "@selfphoneng/shared",
-  "version": "0.0.1",
+  "version": "0.0.2",
  "private": true,
  "license": "AGPL-3.0-or-later",
  "type": "module",
Author	SHA1	Message	Date
iamdoubz	3c8828eedb	docs: simpler README with the logo; ready-for-v1 checklist ci / check (push) Successful in 58s Details ci / images (push) Successful in 4s Details release / images (release) Successful in 34s Details	2026-10-21 07:42:33 -05:00
iamdoubz	0a2264d8af	release: version 0.0.2; note more SIP providers (Telnyx, Flowroute, Twilio) as next ci / check (push) Successful in 1m26s Details ci / images (push) Successful in 2m59s Details	2026-10-21 07:38:17 -05:00
iamdoubz	996685e1ab	dialplan: build the dial string per contact; iOS Linphone's push params broke Dial Its Contact holds pn-prid=...:voip&...:remote, and PJSIP_DIAL_CONTACTS passes that '&' through, so Dial rejected the whole device list and the call dropped for every device of the user. sp-sub-contacts walks the AOR's contacts, drops pn-* params and FILTERs the rest. call-test registers a phone with such a Contact and checks it is rung.	2026-10-20 16:34:45 -05:00
iamdoubz	38f39c9028	docs: to do, unload Asterisk modules that can run commands Task: none (owner request, 2026-10-20)	2026-10-20 15:00:07 -05:00