feat(videochat): implement LiveKit integration for video chat functionality

- Add LiveKit client setup and token generation for room access.
- Implement room management functions including CreateRoom, OpenRoom, ListRooms, and DeleteRoom.
- Introduce participant management with ListParticipants and RemoveParticipant functions.
- Create tests for room and participant management, ensuring proper authentication and authorization.
- Add error handling for LiveKit API interactions.
- Define data structures for room metadata and token responses.
- Implement status endpoint for service availability check.

profiles/personal_setup.go

@@ -0,0 +1,116 @@
+package profiles
+
+import (
+	"context"
+	"errors"
+	"strings"
+	"unicode"
+
+	authsvc "encore.app/auth"
+	"encore.dev/beta/auth"
+	"encore.dev/beta/errs"
+	"encore.dev/storage/sqldb"
+	"encore.dev/types/uuid"
+)
+
+// PersonalSetup holds the broadcasting configuration linked to a user profile.
+type PersonalSetup struct {
+	UserID       uuid.UUID `json:"user_id"`
+	CanBroadcast bool      `json:"can_broadcast"`
+	RoomName     string    `json:"room_name"`
+}
+
+type PersonalSetupParams struct {
+	CanBroadcast bool   `json:"can_broadcast"`
+	RoomName     string `json:"room_name"`
+}
+
+func (p *PersonalSetupParams) Validate() error {
+	if p == nil {
+		return &errs.Error{Code: errs.InvalidArgument, Message: "personal setup params are required"}
+	}
+	if !p.CanBroadcast {
+		p.RoomName = ""
+		return nil
+	}
+	p.RoomName = strings.TrimSpace(p.RoomName)
+	if p.RoomName == "" || len(p.RoomName) > 128 || strings.ContainsAny(p.RoomName, "/\\") || strings.ContainsFunc(p.RoomName, unicode.IsControl) {
+		return &errs.Error{Code: errs.InvalidArgument, Message: "broadcasting requires a room name of 1-128 bytes without slashes or control characters"}
+	}
+	return nil
+}
+
+// GetPersonalSetup returns the caller's setup, defaulting to broadcasting disabled.
+//
+//encore:api auth method=GET path=/profiles/personal-setup
+func GetPersonalSetup(ctx context.Context) (*PersonalSetup, error) {
+	userID, err := authedUserID()
+	if err != nil {
+		return nil, err
+	}
+	return getPersonalSetup(ctx, userID)
+}
+
+// GetUserPersonalSetup lets administrators read the selected user's setup.
+//
+//encore:api auth method=GET path=/profiles/personal-setup/:userID
+func GetUserPersonalSetup(ctx context.Context, userID uuid.UUID) (*PersonalSetup, error) {
+	if _, ok := auth.UserID(); !ok {
+		return nil, &errs.Error{Code: errs.Unauthenticated, Message: "authentication required"}
+	}
+	data, _ := auth.Data().(*authsvc.AuthData)
+	if data == nil || !data.Role.IsAdmin() {
+		return nil, &errs.Error{Code: errs.PermissionDenied, Message: "admin role required"}
+	}
+	return getPersonalSetup(ctx, userID)
+}
+
+func getPersonalSetup(ctx context.Context, userID uuid.UUID) (*PersonalSetup, error) {
+	setup := PersonalSetup{UserID: userID}
+	err := db.QueryRow(ctx, `
+		SELECT COALESCE(s.can_broadcast, FALSE), COALESCE(s.room_name, '')
+		FROM user_profiles p
+		LEFT JOIN personal_setup s ON s.user_id = p.user_id
+		WHERE p.user_id = $1
+	`, userID).Scan(&setup.CanBroadcast, &setup.RoomName)
+	if errors.Is(err, sqldb.ErrNoRows) {
+		return nil, &errs.Error{Code: errs.NotFound, Message: "profile not found"}
+	}
+	if err != nil {
+		return nil, errs.WrapCode(err, errs.Internal, "failed to fetch personal setup")
+	}
+	return &setup, nil
+}
+
+// UpsertPersonalSetup lets administrators assign or revoke a user's broadcasting setup.
+// This stores configuration only; it does not create or delete a LiveKit room.
+//
+//encore:api auth method=PUT path=/profiles/personal-setup/:userID
+func UpsertPersonalSetup(ctx context.Context, userID uuid.UUID, p *PersonalSetupParams) (*PersonalSetup, error) {
+	if _, ok := auth.UserID(); !ok {
+		return nil, &errs.Error{Code: errs.Unauthenticated, Message: "authentication required"}
+	}
+	data, _ := auth.Data().(*authsvc.AuthData)
+	if data == nil || !data.Role.IsAdmin() {
+		return nil, &errs.Error{Code: errs.PermissionDenied, Message: "admin role required"}
+	}
+	if err := p.Validate(); err != nil {
+		return nil, err
+	}
+	setup := PersonalSetup{UserID: userID}
+	err := db.QueryRow(ctx, `
+		INSERT INTO personal_setup (user_id, can_broadcast, room_name)
+		VALUES ($1, $2, $3)
+		ON CONFLICT (user_id) DO UPDATE
+		SET can_broadcast = EXCLUDED.can_broadcast,
+		    room_name = EXCLUDED.room_name
+		RETURNING can_broadcast, room_name
+	`, userID, p.CanBroadcast, p.RoomName).Scan(&setup.CanBroadcast, &setup.RoomName)
+	if isForeignKeyViolation(err) {
+		return nil, &errs.Error{Code: errs.NotFound, Message: "profile not found"}
+	}
+	if err != nil {
+		return nil, errs.WrapCode(err, errs.Internal, "failed to save personal setup")
+	}
+	return &setup, nil
+}