@komaa/standin-sdk 0.1.0

package/dist/plugins/openclaw/handler.js

@@ -0,0 +1,146 @@
+// Copyright (c) 2026 Komaa DigiTech
+// SPDX-License-Identifier: MIT
+/**
+ * The seam adapter: one {@link CallHandler} per Microsoft Teams call.
+ *
+ * This is the whole surface between StandIn and OpenClaw, and it is deliberately
+ * thin. Everything framework-independent - the socket, the HMAC handshake and its
+ * replay guard, capacity, the wire protocol, the outbound sequence number and
+ * audio timeline, the pre-start and audio-idle watchdogs, idempotent teardown -
+ * belongs to the SDK's `CallServer`. Everything model-shaped belongs to
+ * {@link createRealtimeCall}. What is left here is the decision of whether to
+ * take the call at all, and the wiring between the two.
+ *
+ * There are four refusal paths, and each is one line, because `session.end()` is
+ * safe to call from inside `onStart`: it returns immediately and the close runs
+ * once `onStart` unwinds, so refusing a call needs no dance around a teardown
+ * deadlock.
+ */
+import { contextSentences, } from "../../index.js";
+import { describeInboundRejection, isInboundCallAllowed } from "./allowlist.js";
+import { createRealtimeCall, } from "./realtime.js";
+/**
+ * One Microsoft Teams call.
+ *
+ * Implements four of the SDK's five methods. `onCallerAudio` is the hot path and
+ * does no work of its own - it hands the frame to the realtime bridge, which owns
+ * the recording gate, the echo guard and the resampling.
+ */
+export class TeamsCallHandler {
+    #deps;
+    #call;
+    #callId = "";
+    /** Set only once a slot is actually reserved, so a refusal never frees someone else's. */
+    #held = false;
+    constructor(deps) {
+        this.#deps = deps;
+    }
+    async onStart(session) {
+        const { config, realtime, registry, logger } = this.#deps;
+        this.#callId = session.callId;
+        // REFUSAL 1: no realtime provider. The startup log already said this would
+        // happen; the close reason is what makes it visible on the call itself
+        // instead of as silence.
+        if (!realtime) {
+            logger?.error?.(`standin-msteams: no realtime voice provider resolved - refusing call ${session.callId}`);
+            await session.end("realtime-unavailable");
+            return;
+        }
+        // REFUSAL 2: inbound policy. Checked before the slot is taken, so a refused
+        // caller cannot consume capacity by dialling repeatedly.
+        const from = session.start.caller.aadId ?? "";
+        if (!isInboundCallAllowed(config.voice.inboundPolicy, config.voice.allowFrom, from)) {
+            logger?.warn?.(`standin-msteams: ${describeInboundRejection(config.voice.inboundPolicy, from)}`);
+            await session.end("not-allowed");
+            return;
+        }
+        // REFUSAL 3: the operator's concurrency cap.
+        if (!registry.acquire(session.callId)) {
+            logger?.warn?.(`standin-msteams: at maxConcurrentCalls (${config.media.maxConcurrentCalls}) - refusing call ${session.callId}`);
+            await session.end("busy");
+            return;
+        }
+        this.#held = true;
+        const call = createRealtimeCall({
+            session,
+            deps: {
+                provider: realtime.provider,
+                providerConfig: realtime.providerConfig,
+                cfg: this.#deps.cfg,
+                instructions: config.voice.realtime.instructions,
+                greetingInstructions: config.voice.inboundGreeting,
+                requireRecordingStatus: config.voice.requireRecordingStatus,
+                echo: config.voice.realtime,
+                logger,
+            },
+        });
+        // REFUSAL 4: the model never came up.
+        //
+        // Awaited, not fired off: the SDK bounds onStart and holds caller audio until
+        // it resolves, so a failed connect becomes a refusal with a reason rather than
+        // an answered call that never speaks.
+        try {
+            await call.connect();
+        }
+        catch (err) {
+            logger?.error?.(`standin-msteams: realtime connect failed on ${session.callId} - ${err instanceof Error ? err.message : String(err)}`);
+            call.close();
+            await session.end("realtime-unavailable");
+            return;
+        }
+        this.#call = call;
+        registry.bind(session.callId, call);
+        logger?.info?.(`standin-msteams: call ${session.callId} live` +
+            (session.start.caller.displayName
+                ? ` with ${session.start.caller.displayName}`
+                : ""));
+    }
+    /** PCM16, 16 kHz, mono, little-endian, already validated by the SDK. */
+    async onCallerAudio(pcm) {
+        this.#call?.pushAudio(pcm);
+    }
+    /**
+     * Participant counts, DTMF and recording status, as plain sentences.
+     *
+     * Recording status is the one that is not just text: it opens and closes the
+     * media gate, so it is matched rather than forwarded. Matched against the SDK's
+     * own {@link contextSentences} rather than a string literal of our own, so the
+     * two cannot drift apart the next time the wording is improved.
+     */
+    async onContext(text) {
+        if (!this.#call)
+            return;
+        if (text === contextSentences.recording("active")) {
+            this.#call.setRecordingActive(true);
+            return;
+        }
+        if (text === contextSentences.recording("inactive")) {
+            this.#call.setRecordingActive(false);
+            return;
+        }
+        this.#call.pushContext(text);
+    }
+    /**
+     * StandIn is ending the call and wants this line spoken first.
+     *
+     * Interrupt, then say. A goodbye queued behind a long answer is a goodbye the
+     * caller never hears, and teardown follows within seconds.
+     */
+    async onGoodbye(text) {
+        if (!this.#call)
+            return;
+        this.#call.interrupt();
+        this.#call.say(text);
+    }
+    /** Always called exactly once, on every path, before the slot is freed. */
+    async aclose(reason) {
+        this.#call?.close();
+        this.#call = undefined;
+        if (this.#held) {
+            this.#deps.registry.release(this.#callId);
+            this.#held = false;
+        }
+        this.#deps.logger?.info?.(`standin-msteams: call ${this.#callId} ended (${reason})`);
+    }
+}
+//# sourceMappingURL=handler.js.map

package/dist/plugins/openclaw/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../src/plugins/openclaw/handler.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,+BAA+B;AAE/B;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,gBAAgB,GAGjB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EACL,kBAAkB,GAGnB,MAAM,eAAe,CAAC;AAyCvB;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAc;IAC5B,KAAK,CAA2B;IAChC,OAAO,GAAG,EAAE,CAAC;IACb,0FAA0F;IAC1F,KAAK,GAAG,KAAK,CAAC;IAEd,YAAY,IAAiB;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAoB;QAChC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,2EAA2E;QAC3E,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,EAAE,KAAK,EAAE,CACb,wEAAwE,OAAO,CAAC,MAAM,EAAE,CACzF,CAAC;YACF,MAAM,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,yDAAyD;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,oBAAoB,CACnB,MAAM,CAAC,KAAK,CAAC,aAAa,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,EACtB,IAAI,CACL,EACD,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,CACZ,oBAAoB,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CACjF,CAAC;YACF,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,IAAI,EAAE,CACZ,2CAA2C,MAAM,CAAC,KAAK,CAAC,kBAAkB,qBAAqB,OAAO,CAAC,MAAM,EAAE,CAChH,CAAC;YACF,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAElB,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,OAAO;YACP,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;gBACnB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY;gBAChD,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe;gBAClD,sBAAsB,EAAE,MAAM,CAAC,KAAK,CAAC,sBAAsB;gBAC3D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC3B,MAAM;aACP;SACF,CAAC,CAAC;QAEH,sCAAsC;QACtC,EAAE;QACF,8EAA8E;QAC9E,+EAA+E;QAC/E,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,KAAK,EAAE,CACb,+CAA+C,OAAO,CAAC,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtH,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,EAAE,IAAI,EAAE,CACZ,yBAAyB,OAAO,CAAC,MAAM,OAAO;YAC5C,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW;gBAC/B,CAAC,CAAC,SAAS,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,IAAI,KAAK,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CACvB,yBAAyB,IAAI,CAAC,OAAO,WAAW,MAAM,GAAG,CAC1D,CAAC;IACJ,CAAC;CACF"}

package/dist/plugins/openclaw/index.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The StandIn plugin for OpenClaw: your agent, in a real Microsoft Teams call.
+ *
+ * This is not a worker you run. It is an OpenClaw plugin, and it has to be: it
+ * consumes the host's realtime speech-to-speech session, its provider registry
+ * and its logger, all of which are in-process objects inside the gateway.
+ * OpenClaw's external HTTP surface is text-only, so a standalone worker could only
+ * use OpenClaw as a text brain and bring its own STT and TTS - which is exactly
+ * the part this plugin exists to avoid.
+ *
+ * It lives inside `@komaa/standin-sdk` rather than in a package of its own, and
+ * nothing in the SDK core imports it, so an install that never touches OpenClaw
+ * never loads this file. The `openclaw` imports below are therefore at module
+ * scope on purpose: by the time anything reaches here, the host IS the process.
+ *
+ * OpenClaw does not load a plugin by package specifier. It is given a DIRECTORY
+ * through `plugins.load.paths`, so the built form of this file ships as a
+ * self-describing directory inside the published package:
+ *
+ * ```jsonc
+ * // openclaw.json
+ * { "plugins": {
+ *     "load": { "paths": ["node_modules/@komaa/standin-sdk/dist/plugins/openclaw"] },
+ *     "entries": { "standin-msteams": { "enabled": true, "config": {
+ *       "secret": "sk_standin_...",
+ *       "inboundPolicy": "allowlist",
+ *       "allowFrom": ["<caller AAD object id>"],
+ *       "realtime": { "provider": "openai", "providers": { "openai": { "apiKey": "sk-..." } } }
+ *     } } }
+ * } }
+ * ```
+ *
+ * `openclaw.plugin.json` and the directory's own `package.json` are placed beside
+ * the emitted `index.js` by `scripts/emit-openclaw-plugin-dir.mjs`, because `tsc`
+ * emits only `.ts` and a manifest one level up is a manifest the host never sees.
+ *
+ * The plugin registers ONE host-managed background service, so OpenClaw's own
+ * lifecycle starts the call listener at boot and tears it down on shutdown or
+ * reload. There is nothing to supervise separately.
+ */
+import { type OpenClawPluginDefinition } from "openclaw/plugin-sdk/core";
+export { resolvePluginConfig, type ResolvedPluginConfig } from "./config.js";
+export { TeamsCallHandler, type CallRegistry, type HandlerDeps, } from "./handler.js";
+export { createRealtimeCall, type RealtimeCall, type RealtimeCallDeps, } from "./realtime.js";
+export { StandInCallRuntime } from "./runtime.js";
+/**
+ * The entry OpenClaw loads.
+ *
+ * Annotated rather than inferred: the inferred type reaches into an internal
+ * OpenClaw declaration file whose name is a build hash, and a `.d.ts` that names
+ * it would not survive that package being rebuilt.
+ */
+declare const entry: OpenClawPluginDefinition;
+export default entry;
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/openclaw/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/openclaw/index.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;GAMG;AACH,QAAA,MAAM,KAAK,EAAE,wBAqCX,CAAC;AAEH,eAAe,KAAK,CAAC"}

package/dist/plugins/openclaw/index.js

@@ -0,0 +1,89 @@
+// Copyright (c) 2026 Komaa DigiTech
+// SPDX-License-Identifier: MIT
+/**
+ * The StandIn plugin for OpenClaw: your agent, in a real Microsoft Teams call.
+ *
+ * This is not a worker you run. It is an OpenClaw plugin, and it has to be: it
+ * consumes the host's realtime speech-to-speech session, its provider registry
+ * and its logger, all of which are in-process objects inside the gateway.
+ * OpenClaw's external HTTP surface is text-only, so a standalone worker could only
+ * use OpenClaw as a text brain and bring its own STT and TTS - which is exactly
+ * the part this plugin exists to avoid.
+ *
+ * It lives inside `@komaa/standin-sdk` rather than in a package of its own, and
+ * nothing in the SDK core imports it, so an install that never touches OpenClaw
+ * never loads this file. The `openclaw` imports below are therefore at module
+ * scope on purpose: by the time anything reaches here, the host IS the process.
+ *
+ * OpenClaw does not load a plugin by package specifier. It is given a DIRECTORY
+ * through `plugins.load.paths`, so the built form of this file ships as a
+ * self-describing directory inside the published package:
+ *
+ * ```jsonc
+ * // openclaw.json
+ * { "plugins": {
+ *     "load": { "paths": ["node_modules/@komaa/standin-sdk/dist/plugins/openclaw"] },
+ *     "entries": { "standin-msteams": { "enabled": true, "config": {
+ *       "secret": "sk_standin_...",
+ *       "inboundPolicy": "allowlist",
+ *       "allowFrom": ["<caller AAD object id>"],
+ *       "realtime": { "provider": "openai", "providers": { "openai": { "apiKey": "sk-..." } } }
+ *     } } }
+ * } }
+ * ```
+ *
+ * `openclaw.plugin.json` and the directory's own `package.json` are placed beside
+ * the emitted `index.js` by `scripts/emit-openclaw-plugin-dir.mjs`, because `tsc`
+ * emits only `.ts` and a manifest one level up is a manifest the host never sees.
+ *
+ * The plugin registers ONE host-managed background service, so OpenClaw's own
+ * lifecycle starts the call listener at boot and tears it down on shutdown or
+ * reload. There is nothing to supervise separately.
+ */
+import { definePluginEntry, } from "openclaw/plugin-sdk/core";
+import { resolvePluginConfig } from "./config.js";
+import { StandInCallRuntime } from "./runtime.js";
+export { resolvePluginConfig } from "./config.js";
+export { TeamsCallHandler, } from "./handler.js";
+export { createRealtimeCall, } from "./realtime.js";
+export { StandInCallRuntime } from "./runtime.js";
+/**
+ * The entry OpenClaw loads.
+ *
+ * Annotated rather than inferred: the inferred type reaches into an internal
+ * OpenClaw declaration file whose name is a build hash, and a `.d.ts` that names
+ * it would not survive that package being rebuilt.
+ */
+const entry = definePluginEntry({
+    id: "standin-msteams",
+    name: "Microsoft Teams calls by StandIn",
+    description: "Put your OpenClaw agent in a real Microsoft Teams call, through StandIn.",
+    register(api) {
+        const config = resolvePluginConfig(api.pluginConfig);
+        if (!config.enabled)
+            return;
+        // Fail CLOSED on the secret. Every socket StandIn dials is HMAC-authenticated
+        // with it, so starting without one would mean either refusing every call or,
+        // worse, accepting anything - and `CallServer` rightly throws rather than
+        // choose. Say why here, where an operator is reading the log, instead of
+        // letting the service registration throw during boot.
+        if (!config.media.secret) {
+            api.logger.warn("standin-msteams: no secret configured - set `secret` to the value the StandIn portal shows you. Nothing started.");
+            return;
+        }
+        let runtime;
+        api.registerService({
+            id: "standin-msteams",
+            start: async () => {
+                runtime = new StandInCallRuntime(api, config);
+                await runtime.start();
+            },
+            stop: async () => {
+                await runtime?.stop();
+                runtime = undefined;
+            },
+        });
+    },
+});
+export default entry;
+//# sourceMappingURL=index.js.map

package/dist/plugins/openclaw/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/openclaw/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,+BAA+B;AAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAA6B,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,gBAAgB,GAGjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,KAAK,GAA6B,iBAAiB,CAAC;IACxD,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,kCAAkC;IACxC,WAAW,EACT,0EAA0E;IAC5E,QAAQ,CAAC,GAAG;QACV,MAAM,MAAM,GAAG,mBAAmB,CAC/B,GAAkC,CAAC,YAAY,CACjD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAE5B,8EAA8E;QAC9E,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,sDAAsD;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,kHAAkH,CACnH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,OAAuC,CAAC;QAE5C,GAAG,CAAC,eAAe,CAAC;YAClB,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,OAAO,GAAG,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC9C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,OAAO,EAAE,IAAI,EAAE,CAAC;gBACtB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,KAAK,CAAC"}

package/dist/plugins/openclaw/openclaw.plugin.json

@@ -0,0 +1,74 @@
+{
+  "id": "standin-msteams",
+  "name": "Microsoft Teams calls by StandIn",
+  "description": "Put your OpenClaw agent in a real Microsoft Teams call. StandIn owns the Microsoft side and dials this plugin once per call; the call is bridged straight to your configured realtime speech-to-speech provider.",
+  "icon": "https://standin.komaa.com/brand/standin-s-mark.png",
+  "activation": { "onStartup": true },
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "enabled": { "type": "boolean" },
+      "secret": {
+        "type": "string",
+        "description": "The StandIn connection secret. Paste the value the StandIn portal shows you. Without it nothing starts."
+      },
+      "callingPort": {
+        "type": "integer",
+        "minimum": 1,
+        "maximum": 65535,
+        "description": "Port the call listener binds (default 9442)."
+      },
+      "bindAddress": {
+        "type": "string",
+        "description": "Address the call listener binds. Defaults to 0.0.0.0; set 127.0.0.1 when only a local tunnel should reach it."
+      },
+      "path": {
+        "type": "string",
+        "description": "Path StandIn dials (default /msteams/calling)."
+      },
+      "maxConcurrentCalls": { "type": "integer", "minimum": 1 },
+      "inboundPolicy": {
+        "type": "string",
+        "enum": ["disabled", "allowlist", "pairing", "open"],
+        "description": "Who may call. Defaults to disabled, which refuses every call."
+      },
+      "allowFrom": {
+        "type": "array",
+        "items": { "type": "string" },
+        "description": "AAD object ids (or phone numbers) accepted under allowlist/pairing."
+      },
+      "inboundGreeting": {
+        "type": "string",
+        "description": "What the agent says when it picks up. Omitted means it waits for the caller to speak first."
+      },
+      "requireRecordingStatus": {
+        "type": "boolean",
+        "description": "Hold caller audio back until Microsoft Teams reports recording active (Microsoft Media Access API obligation)."
+      },
+      "realtime": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "provider": { "type": "string" },
+          "providers": {
+            "type": "object",
+            "additionalProperties": { "type": "object", "additionalProperties": true }
+          },
+          "instructions": { "type": "string" },
+          "suppressInputDuringPlayback": { "type": "boolean" },
+          "echoSuppressionWindowMs": { "type": "integer", "minimum": 0 },
+          "echoBargeInRms": { "type": "number", "minimum": 0, "maximum": 1 }
+        }
+      }
+    }
+  },
+  "configContracts": {
+    "secretInputs": {
+      "paths": [
+        { "path": "secret", "expected": "string" },
+        { "path": "realtime.providers.*.apiKey", "expected": "string" }
+      ]
+    }
+  }
+}

package/dist/plugins/openclaw/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@komaa/standin-sdk-openclaw",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "openclaw": {
+    "extensions": [
+      "./index.js"
+    ],
+    "compat": {
+      "pluginApi": ">=2026.6.10"
+    }
+  }
+}

package/dist/plugins/openclaw/realtime.d.ts

@@ -0,0 +1,82 @@
+/**
+ * One Microsoft Teams call, bridged to OpenClaw's realtime speech-to-speech session.
+ *
+ * This file is the reason the plugin cannot be a standalone worker. It does not
+ * drive a model: it CONSUMES the host's realtime session
+ * (`createRealtimeVoiceBridgeSession`), the host's provider registry and the
+ * host's config, all of which are in-process objects inside the OpenClaw gateway.
+ * Nothing here opens a provider socket, and nothing here knows which vendor is on
+ * the other end.
+ *
+ * What it does own is the audio boundary between two rates and two framings:
+ *
+ *     caller   16 kHz --> 24 kHz --> host realtime session
+ *     model    24 kHz --> 16 kHz --> session.sendAudio
+ *
+ * and the three things that make a spoken call feel right rather than merely
+ * work: the echo guard, the playout clock the guard keys on, and barge-in.
+ *
+ * Everything the SDK owns is deliberately absent here: the socket, the sequence
+ * number, the outbound timeline, the frame loop and the watchdogs.
+ */
+import { type CallSession } from "../../index.js";
+import type { OpenClawConfig } from "openclaw/plugin-sdk/config-contracts";
+import { type RealtimeVoiceProviderConfig, type RealtimeVoiceProviderPlugin } from "openclaw/plugin-sdk/realtime-voice";
+import { type EchoGuardOptions } from "../../echoGuard.js";
+/**
+ * The logging surface this file needs, and no more.
+ *
+ * Structural, not OpenClaw's `PluginLogger`, so a test can pass `{}` and the call
+ * path stays identical. Every method is optional for the same reason.
+ */
+export interface CallLogger {
+    debug?(message: string): void;
+    info?(message: string): void;
+    warn?(message: string): void;
+    error?(message: string): void;
+}
+/** What the runtime hands one call. Resolved once at startup, shared by every call. */
+export interface RealtimeCallDeps {
+    /** The host's realtime voice provider, already resolved and credentialed. */
+    provider: RealtimeVoiceProviderPlugin;
+    providerConfig: RealtimeVoiceProviderConfig;
+    /** The gateway's own config, which the host session reads for model defaults. */
+    cfg?: OpenClawConfig;
+    /** System instructions for this call. */
+    instructions?: string;
+    /** Spoken on pickup. Undefined means the agent waits for the caller to speak. */
+    greetingInstructions?: string;
+    /** Withhold caller media until Microsoft Teams reports recording active. */
+    requireRecordingStatus: boolean;
+    echo: EchoGuardOptions;
+    logger?: CallLogger;
+}
+/** One bridged call, as {@link TeamsCallHandler} drives it. */
+export interface RealtimeCall {
+    /** Open the provider session. Rejects if the model never comes up. */
+    connect(): Promise<void>;
+    /** One frame of caller audio, PCM16 16 kHz mono LE, straight off the wire. */
+    pushAudio(pcm16k: Buffer): void;
+    /** Put a plain sentence in front of the model without interrupting it. */
+    pushContext(text: string): void;
+    /** Microsoft Teams recording status changed. Opens or closes the media gate. */
+    setRecordingActive(active: boolean): void;
+    /** Cut the model off mid-turn. Call before {@link RealtimeCall.say}. */
+    interrupt(): void;
+    /** Speak this line in the agent's own voice, now. */
+    say(text: string): void;
+    /** Release the provider session. Idempotent. */
+    close(): void;
+}
+/**
+ * Build the bridge for one call.
+ *
+ * `session` is the SDK's {@link CallSession}: the only route to the caller, and
+ * the owner of the sequence number and the outbound timeline, so nothing here
+ * tracks either.
+ */
+export declare function createRealtimeCall(params: {
+    session: CallSession;
+    deps: RealtimeCallDeps;
+}): RealtimeCall;
+//# sourceMappingURL=realtime.d.ts.map

package/dist/plugins/openclaw/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../../src/plugins/openclaw/realtime.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAGL,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EACjC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG/E;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,EAAE,2BAA2B,CAAC;IACtC,cAAc,EAAE,2BAA2B,CAAC;IAC5C,iFAAiF;IACjF,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,sBAAsB,EAAE,OAAO,CAAC;IAChC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,8EAA8E;IAC9E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gFAAgF;IAChF,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,wEAAwE;IACxE,SAAS,IAAI,IAAI,CAAC;IAClB,qDAAqD;IACrD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gDAAgD;IAChD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,gBAAgB,CAAC;CACxB,GAAG,YAAY,CAwOf"}