@openclaw/inworld-speech 2026.6.11 → 2026.7.1-beta.1

package/dist/tts.js

@@ -1,8 +1,42 @@
+import { MAX_AUDIO_BYTES } from "openclaw/plugin-sdk/media-runtime";
+import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/inworld/tts.ts
 const DEFAULT_INWORLD_BASE_URL = "https://api.inworld.ai";
 const DEFAULT_INWORLD_VOICE_ID = "Sarah";
 const DEFAULT_INWORLD_MODEL_ID = "inworld-tts-1.5-max";
+const INWORLD_TTS_BODY_MAX_BYTES = MAX_AUDIO_BYTES * 2;
+const INWORLD_VOICES_BODY_MAX_BYTES = MAX_AUDIO_BYTES;
+const INWORLD_BODY_READ_IDLE_TIMEOUT_MS = 3e4;
+const INWORLD_ERROR_BODY_MAX_BYTES = 8 * 1024;
+const INWORLD_ERROR_BODY_MAX_CHARS = 400;
+const INWORLD_ERROR_BODY_READ_IDLE_TIMEOUT_MS = 1e4;
+var InworldErrorBodyOverflow = class extends Error {};
+/**
+* Reads a bounded, whitespace-collapsed diagnostic snippet from a non-OK
+* response body. A misbehaving or hostile endpoint can stream an arbitrarily
+* large error body, so this never buffers it whole: it reuses the shared
+* `readResponseWithLimit` reader (which cancels the underlying stream on
+* overflow and enforces an idle timeout) with a small cap. On overflow it
+* returns a fixed marker instead of echoing attacker-controlled bytes into the
+* thrown error. Kept local to this extension so it depends only on the
+* already-exported `response-limit-runtime` entry and adds no shared plugin-SDK
+* surface.
+*/
+async function readInworldErrorBodySnippet(response) {
+	let buffer;
+	try {
+		buffer = await readResponseWithLimit(response, INWORLD_ERROR_BODY_MAX_BYTES, {
+			chunkTimeoutMs: INWORLD_ERROR_BODY_READ_IDLE_TIMEOUT_MS,
+			onOverflow: () => new InworldErrorBodyOverflow()
+		});
+	} catch (error) {
+		return error instanceof InworldErrorBodyOverflow ? "(error body exceeded diagnostic limit; truncated)" : "";
+	}
+	const collapsed = buffer.toString("utf8").replace(/\s+/g, " ").trim();
+	if (collapsed.length > INWORLD_ERROR_BODY_MAX_CHARS) return `${collapsed.slice(0, INWORLD_ERROR_BODY_MAX_CHARS)}…`;
+	return collapsed;
+}
 const INWORLD_TTS_MODELS = [
 	"inworld-tts-1.5-max",
 	"inworld-tts-1.5-mini",
@@ -55,11 +89,16 @@ async function inworldTTS(params) {
 	});
 	try {
 		if (!response.ok) {
-			const errorBody = await response.text().catch(() => "");
+			const errorBody = await readInworldErrorBodySnippet(response);
 			throw new Error(`Inworld TTS API error (${response.status}): ${errorBody}`);
 		}
-		const body = await response.text();
+		const body = (await readResponseWithLimit(response, INWORLD_TTS_BODY_MAX_BYTES, {
+			chunkTimeoutMs: INWORLD_BODY_READ_IDLE_TIMEOUT_MS,
+			onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`Inworld TTS audio stream too large: ${size} bytes (limit: ${maxBytes} bytes)`),
+			onIdleTimeout: ({ chunkTimeoutMs }) => /* @__PURE__ */ new Error(`Inworld TTS audio stream stalled: no data received for ${chunkTimeoutMs}ms`)
+		})).toString("utf8");
 		const chunks = [];
+		let decodedAudioBytes = 0;
 		for (const line of body.split("\n")) {
 			const trimmed = line.trim();
 			if (!trimmed) continue;
@@ -70,7 +109,13 @@ async function inworldTTS(params) {
 				throw new Error(`Inworld TTS stream parse error: unexpected non-JSON line: ${trimmed.slice(0, 80)}`);
 			}
 			if (parsed.error) throw new Error(`Inworld TTS stream error (${parsed.error.code}): ${parsed.error.message}`);
-			if (parsed.result?.audioContent) chunks.push(Buffer.from(parsed.result.audioContent, "base64"));
+			if (parsed.result?.audioContent) {
+				const chunk = Buffer.from(parsed.result.audioContent, "base64");
+				const nextDecodedAudioBytes = decodedAudioBytes + chunk.length;
+				if (nextDecodedAudioBytes > MAX_AUDIO_BYTES) throw new Error(`Inworld TTS decoded audio too large: ${nextDecodedAudioBytes} bytes (limit: ${MAX_AUDIO_BYTES} bytes)`);
+				decodedAudioBytes = nextDecodedAudioBytes;
+				chunks.push(chunk);
+			}
 		}
 		if (chunks.length === 0) throw new Error("Inworld TTS returned no audio data");
 		return Buffer.concat(chunks);
@@ -92,10 +137,20 @@ async function listInworldVoices(params) {
 	});
 	try {
 		if (!response.ok) {
-			const errorBody = await response.text().catch(() => "");
+			const errorBody = await readInworldErrorBodySnippet(response);
 			throw new Error(`Inworld voices API error (${response.status}): ${errorBody}`);
 		}
-		const json = await response.json();
+		const voicesBody = (await readResponseWithLimit(response, INWORLD_VOICES_BODY_MAX_BYTES, {
+			chunkTimeoutMs: INWORLD_BODY_READ_IDLE_TIMEOUT_MS,
+			onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`Inworld voices response too large: ${size} bytes (limit: ${maxBytes} bytes)`),
+			onIdleTimeout: ({ chunkTimeoutMs }) => /* @__PURE__ */ new Error(`Inworld voices response stalled: no data received for ${chunkTimeoutMs}ms`)
+		})).toString("utf8");
+		let json;
+		try {
+			json = JSON.parse(voicesBody);
+		} catch {
+			throw new Error("Inworld voices API returned malformed JSON");
+		}
 		return Array.isArray(json.voices) ? json.voices.map((voice) => ({
 			id: voice.voiceId?.trim() ?? "",
 			name: voice.displayName?.trim() || void 0,

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/inworld-speech",
-  "version": "2026.6.11",
+  "version": "2026.7.1-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/inworld-speech",
-      "version": "2026.6.11"
+      "version": "2026.7.1-beta.1"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/inworld-speech",
-  "version": "2026.6.11",
+  "version": "2026.7.1-beta.1",
   "description": "OpenClaw Inworld speech plugin.",
   "repository": {
     "type": "git",
@@ -18,10 +18,10 @@
       "minHostVersion": ">=2026.6.8"
     },
     "compat": {
-      "pluginApi": ">=2026.6.11"
+      "pluginApi": ">=2026.7.1-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.6.11",
+      "openclawVersion": "2026.7.1-beta.1",
       "bundledDist": false
     },
     "release": {
@@ -39,7 +39,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.11"
+    "openclaw": ">=2026.7.1-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {