Recording permission check at SDK level

LiveKitClient.podspec

@@ -14,7 +14,7 @@ Pod::Spec.new do |spec|
 
   spec.source_files = "Sources/**/*"
 
-  spec.dependency("LiveKitWebRTC", "= 125.6422.29")
+  spec.dependency("LiveKitWebRTC", "= 125.6422.30")
   spec.dependency("SwiftProtobuf")
   spec.dependency("Logging", "= 1.5.4")
   spec.dependency("DequeModule", "= 1.1.4")

Package.swift

@@ -18,7 +18,7 @@ let package = Package(
     ],
     dependencies: [
         // LK-Prefixed Dynamic WebRTC XCFramework
-        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.29"),
+        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.30"),
         .package(url: "https://github.com/apple/swift-protobuf.git", from: "1.26.0"),
         .package(url: "https://github.com/apple/swift-log.git", from: "1.5.4"),
         .package(url: "https://github.com/apple/swift-collections.git", from: "1.1.0"),

Package@swift-5.9.swift

@@ -20,7 +20,7 @@ let package = Package(
     ],
     dependencies: [
         // LK-Prefixed Dynamic WebRTC XCFramework
-        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.29"),
+        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.30"),
         .package(url: "https://github.com/apple/swift-protobuf.git", from: "1.29.0"),
         .package(url: "https://github.com/apple/swift-log.git", from: "1.6.2"), // 1.6.x requires Swift >=5.8
         .package(url: "https://github.com/apple/swift-collections.git", from: "1.1.0"),

Package@swift-6.0.swift

@@ -20,7 +20,7 @@ let package = Package(
     ],
     dependencies: [
         // LK-Prefixed Dynamic WebRTC XCFramework
-        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.29"),
+        .package(url: "https://github.com/livekit/webrtc-xcframework.git", exact: "125.6422.30"),
         .package(url: "https://github.com/apple/swift-protobuf.git", from: "1.29.0"),
         .package(url: "https://github.com/apple/swift-log.git", from: "1.6.2"), // 1.6.x requires Swift >=5.8
         .package(url: "https://github.com/apple/swift-collections.git", from: "1.1.0"),

Sources/LiveKit/Audio/AudioDeviceModuleDelegateAdapter.swift

@@ -23,7 +23,7 @@ internal import LiveKitWebRTC
 #endif
 
 // Invoked on WebRTC's worker thread, do not block.
-class AudioDeviceModuleDelegateAdapter: NSObject, LKRTCAudioDeviceModuleDelegate {
+class AudioDeviceModuleDelegateAdapter: NSObject, LKRTCAudioDeviceModuleDelegate, Loggable {
     weak var audioManager: AudioManager?
 
     func audioDeviceModule(_: LKRTCAudioDeviceModule, didReceiveSpeechActivityEvent speechActivityEvent: RTCSpeechActivityEvent) {
@@ -47,7 +47,31 @@ class AudioDeviceModuleDelegateAdapter: NSObject, LKRTCAudioDeviceModuleDelegate
     func audioDeviceModule(_: LKRTCAudioDeviceModule, willEnableEngine engine: AVAudioEngine, isPlayoutEnabled: Bool, isRecordingEnabled: Bool) -> Int {
         guard let audioManager else { return 0 }
         let entryPoint = audioManager.buildEngineObserverChain()
-        return entryPoint?.engineWillEnable(engine, isPlayoutEnabled: isPlayoutEnabled, isRecordingEnabled: isRecordingEnabled) ?? 0
+        let result = entryPoint?.engineWillEnable(engine, isPlayoutEnabled: isPlayoutEnabled, isRecordingEnabled: isRecordingEnabled) ?? 0
+
+        // At this point mic perms / session should be configured for recording.
+        if result == 0, isRecordingEnabled {
+            // This will block WebRTC's worker thread, but when instantiating AVAudioInput node it will block by showing a dialog anyways.
+            // Attempt to acquire mic perms at this point to return an error at SDK level.
+            let isAuthorized = LiveKitSDK.ensureDeviceAccessSync(for: [.audio])
+            log("AudioEngine pre-enable check, device permission: \(isAuthorized)")
+            if !isAuthorized {
+                return kAudioEngineErrorInsufficientDevicePermission
+            }
+
+            #if os(iOS) || os(visionOS) || os(tvOS)
+            // Additional check for audio session category.
+            let session = LKRTCAudioSession.sharedInstance()
+            log("AudioEngine pre-enable check, audio session: \(session.category)")
+            if ![AVAudioSession.Category.playAndRecord.rawValue,
+                 AVAudioSession.Category.record.rawValue,].contains(session.category)
+            {
+                return kAudioEngineErrorAudioSessionCategoryRecordingRequired
+            }
+            #endif
+        }
+
+        return result
     }
 
     func audioDeviceModule(_: LKRTCAudioDeviceModule, willStartEngine engine: AVAudioEngine, isPlayoutEnabled: Bool, isRecordingEnabled: Bool) -> Int {

Sources/LiveKit/Audio/DefaultAudioSessionObserver.swift

@@ -14,8 +14,6 @@
  * limitations under the License.
  */
 
-let kFailedToConfigureAudioSessionErrorCode = -4100
-
 #if os(iOS) || os(visionOS) || os(tvOS)
 
 import AVFoundation
@@ -83,7 +81,7 @@ public class DefaultAudioSessionObserver: AudioEngineObserver, Loggable, @unchec
             } catch {
                 log("AudioSession failed to configure with error: \(error)", .error)
                 // Pass error code to audio engine
-                return kFailedToConfigureAudioSessionErrorCode
+                return kAudioEngineErrorFailedToConfigureAudioSession
             }
 
             log("AudioSession activationCount: \(session.activationCount), webRTCSessionCount: \(session.webRTCSessionCount)")

Sources/LiveKit/Audio/Manager/AudioManager.swift

@@ -106,10 +106,10 @@
         public var localTracksCount: Int = 0
         public var remoteTracksCount: Int = 0
         public var isSpeakerOutputPreferred: Bool = true
         public var customConfigureFunc: ConfigureAudioSessionFunc?
         public var sessionConfiguration: AudioSessionConfiguration?
 
         public var trackState: TrackState {
             switch (localTracksCount > 0, remoteTracksCount > 0) {
             case (true, false): return .localOnly
             case (false, true): return .remoteOnly
@@ -401,10 +401,18 @@
     }
 }
 
+// SDK side AudioEngine error codes
+let kAudioEngineErrorFailedToConfigureAudioSession = -4100
+
+let kAudioEngineErrorInsufficientDevicePermission = -4101
+let kAudioEngineErrorAudioSessionCategoryRecordingRequired = -4102
+
 extension AudioManager {
     func checkAdmResult(code: Int) throws {
-        if code == kFailedToConfigureAudioSessionErrorCode {
+        if code == kAudioEngineErrorFailedToConfigureAudioSession {
             throw LiveKitError(.audioSession, message: "Failed to configure audio session")
+        } else if code == kAudioEngineErrorInsufficientDevicePermission {
+            throw LiveKitError(.deviceAccessDenied, message: "Device permissions are not granted")
         } else if code != 0 {
             throw LiveKitError(.audioEngine, message: "Audio engine returned error code: \(code)")
         }

Sources/LiveKit/LiveKit+DeviceHelpers.swift

@@ -40,4 +40,40 @@ public extension LiveKitSDK {
 
         return true
     }
+
+    /// Blocking version of ensureDeviceAccess that uses DispatchGroup to wait for permissions.
+    static func ensureDeviceAccessSync(for types: Set<AVMediaType>) -> Bool {
+        let group = DispatchGroup()
+        var result = true
+
+        for type in types {
+            if ![.video, .audio].contains(type) {
+                logger.log("types must be .video or .audio", .error, type: LiveKitSDK.self)
+            }
+
+            let status = AVCaptureDevice.authorizationStatus(for: type)
+            switch status {
+            case .notDetermined:
+                group.enter()
+                AVCaptureDevice.requestAccess(for: type) { granted in
+                    if !granted {
+                        result = false
+                    }
+                    group.leave()
+                }
+            case .restricted, .denied:
+                return false
+            case .authorized:
+                continue // No action needed for authorized status
+            @unknown default:
+                logger.error("Unknown AVAuthorizationStatus")
+                return false
+            }
+        }
+
+        // Wait for all permission requests to complete
+        group.wait()
+
+        return result
+    }
 }

Sources/LiveKit/Track/Local/LocalAudioTrack.swift

@@ -97,14 +97,7 @@ public class LocalAudioTrack: Track, LocalTrack, AudioTrack, @unchecked Sendable
     override func startCapture() async throws {
         // AudioDeviceModule's InitRecording() and StartRecording() automatically get called by WebRTC, but
         // explicitly init & start it early to detect audio engine failures (mic not accessible for some reason, etc.).
-        do {
-            try AudioManager.shared.startLocalRecording()
-        } catch {
-            // Make sure internal state is updated to stopped state. (TODO: Remove if ADM reverts state automatically)
-            try? AudioManager.shared.stopLocalRecording()
-            // Rethrow
-            throw error
-        }
+        try AudioManager.shared.startLocalRecording()
     }
 
     override func stopCapture() async throws {