@openclaw/voice-call 2026.5.27 → 2026.5.28-beta.1

package/dist/{config-cNGVtrwa.js → config-U-rgixyY.js}

@@ -218,8 +218,6 @@ const VoiceCallRealtimeAgentContextConfigSchema = z.object({
 	maxChars: z.number().int().positive().default(6e3),
 	/** Include configured agent identity fields. */
 	includeIdentity: z.boolean().default(true),
-	/** Include agents.defaults/list systemPromptOverride when configured. */
-	includeSystemPrompt: z.boolean().default(true),
 	/** Include selected workspace files such as SOUL.md and IDENTITY.md. */
 	includeWorkspaceFiles: z.boolean().default(true),
 	/** Workspace-relative files to include, bounded by maxChars. */
@@ -232,7 +230,6 @@ const VoiceCallRealtimeAgentContextConfigSchema = z.object({
 	enabled: false,
 	maxChars: 6e3,
 	includeIdentity: true,
-	includeSystemPrompt: true,
 	includeWorkspaceFiles: true,
 	files: [
 		"SOUL.md",
@@ -293,7 +290,6 @@ const VoiceCallRealtimeConfigSchema = z.object({
 		enabled: false,
 		maxChars: 6e3,
 		includeIdentity: true,
-		includeSystemPrompt: true,
 		includeWorkspaceFiles: true,
 		files: [
 			"SOUL.md",

package/dist/{config-compat-4gaIelu_.js → config-compat-CokN3Zzr.js}

@@ -1,4 +1,4 @@
-import { t as VoiceCallConfigSchema } from "./config-cNGVtrwa.js";
+import { t as VoiceCallConfigSchema } from "./config-U-rgixyY.js";
 import { asOptionalRecord, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/voice-call/src/config-compat.ts
 const VOICE_CALL_LEGACY_CONFIG_REMOVAL_VERSION = "2026.6.0";
@@ -6,7 +6,7 @@ const asObject = asOptionalRecord;
 const getString = readStringField;
 function getNumber(obj, key) {
 	const value = obj?.[key];
-	return typeof value === "number" ? value : void 0;
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
 function mergeProviderConfig(providersValue, providerId, compatValues) {
 	if (Object.keys(compatValues).length === 0) return asObject(providersValue);
@@ -22,6 +22,7 @@ function mergeProviderConfig(providersValue, providerId, compatValues) {
 }
 function collectVoiceCallLegacyConfigIssues(value) {
 	const raw = asObject(value) ?? {};
+	const realtimeAgentContext = asObject(asObject(raw.realtime)?.agentContext);
 	const twilio = asObject(raw.twilio);
 	const streaming = asObject(raw.streaming);
 	const issues = [];
@@ -60,6 +61,11 @@ function collectVoiceCallLegacyConfigIssues(value) {
 		replacement: "streaming.providers.openai.vadThreshold",
 		message: "Move streaming.vadThreshold to streaming.providers.openai.vadThreshold."
 	});
+	if (realtimeAgentContext && Object.prototype.hasOwnProperty.call(realtimeAgentContext, "includeSystemPrompt")) issues.push({
+		path: "realtime.agentContext.includeSystemPrompt",
+		replacement: "realtime.agentContext",
+		message: "Remove realtime.agentContext.includeSystemPrompt; realtime context now uses the generated agent prompt."
+	});
 	return issues;
 }
 function formatVoiceCallLegacyConfigWarnings(params) {
@@ -69,6 +75,8 @@ function formatVoiceCallLegacyConfigWarnings(params) {
 }
 function migrateVoiceCallLegacyConfigInput(params) {
 	const raw = asObject(params.value) ?? {};
+	const realtime = asObject(raw.realtime);
+	const realtimeAgentContext = asObject(realtime?.agentContext);
 	const twilio = asObject(raw.twilio);
 	const streaming = asObject(raw.streaming);
 	const configPathPrefix = params.configPathPrefix ?? "plugins.entries.voice-call.config";
@@ -98,12 +106,19 @@ function migrateVoiceCallLegacyConfigInput(params) {
 	}
 	const normalizedTwilio = twilio ? { ...twilio } : void 0;
 	if (normalizedTwilio) delete normalizedTwilio.from;
+	const normalizedRealtimeAgentContext = realtimeAgentContext ? { ...realtimeAgentContext } : void 0;
+	if (normalizedRealtimeAgentContext) delete normalizedRealtimeAgentContext.includeSystemPrompt;
+	const normalizedRealtime = realtime ? {
+		...realtime,
+		agentContext: normalizedRealtimeAgentContext ?? realtime.agentContext
+	} : void 0;
 	const config = {
 		...raw,
 		provider: raw.provider === "log" ? "mock" : raw.provider,
 		fromNumber: raw.fromNumber ?? (typeof twilio?.from === "string" ? twilio.from : void 0),
 		twilio: normalizedTwilio,
-		streaming: normalizedStreaming
+		streaming: normalizedStreaming,
+		realtime: normalizedRealtime
 	};
 	const changes = [];
 	if (raw.provider === "log") changes.push(`Moved ${configPathPrefix}.provider "log" → "mock".`);
@@ -111,8 +126,11 @@ function migrateVoiceCallLegacyConfigInput(params) {
 	if (typeof streaming?.sttProvider === "string") changes.push(`Moved ${configPathPrefix}.streaming.sttProvider → ${configPathPrefix}.streaming.provider.`);
 	if (typeof streaming?.openaiApiKey === "string") changes.push(`Moved ${configPathPrefix}.streaming.openaiApiKey → ${configPathPrefix}.streaming.providers.openai.apiKey.`);
 	if (typeof streaming?.sttModel === "string") changes.push(`Moved ${configPathPrefix}.streaming.sttModel → ${configPathPrefix}.streaming.providers.openai.model.`);
-	if (typeof streaming?.silenceDurationMs === "number") changes.push(`Moved ${configPathPrefix}.streaming.silenceDurationMs → ${configPathPrefix}.streaming.providers.openai.silenceDurationMs.`);
-	if (typeof streaming?.vadThreshold === "number") changes.push(`Moved ${configPathPrefix}.streaming.vadThreshold → ${configPathPrefix}.streaming.providers.openai.vadThreshold.`);
+	if (getNumber(streaming, "silenceDurationMs") !== void 0) changes.push(`Moved ${configPathPrefix}.streaming.silenceDurationMs → ${configPathPrefix}.streaming.providers.openai.silenceDurationMs.`);
+	else if (typeof streaming?.silenceDurationMs === "number") changes.push(`Removed invalid ${configPathPrefix}.streaming.silenceDurationMs.`);
+	if (getNumber(streaming, "vadThreshold") !== void 0) changes.push(`Moved ${configPathPrefix}.streaming.vadThreshold → ${configPathPrefix}.streaming.providers.openai.vadThreshold.`);
+	else if (typeof streaming?.vadThreshold === "number") changes.push(`Removed invalid ${configPathPrefix}.streaming.vadThreshold.`);
+	if (realtimeAgentContext && Object.prototype.hasOwnProperty.call(realtimeAgentContext, "includeSystemPrompt")) changes.push(`Removed ${configPathPrefix}.realtime.agentContext.includeSystemPrompt.`);
 	return {
 		config,
 		changes,

package/dist/{guarded-json-api-Dkeawg_W.js → guarded-json-api-BT5XfY80.js}

@@ -1,6 +1,6 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { a as getHeader } from "./runtime-entry-CxeSe0VA.js";
+import { a as getHeader } from "./runtime-entry-lBiyw_6t.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/index.js

@@ -1,8 +1,8 @@
 import { definePluginEntry, sleep } from "./runtime-api.js";
 import "./api.js";
-import { i as resolveVoiceCallConfig, s as validateProviderConfig } from "./config-cNGVtrwa.js";
-import { c as getTailscaleSelfInfo, l as setupTailscaleExposureRoute, o as resolveWebhookExposureStatus, p as resolveUserPath, s as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime } from "./runtime-entry-CxeSe0VA.js";
-import { i as parseVoiceCallPluginConfig, r as normalizeVoiceCallLegacyConfigInput, t as formatVoiceCallLegacyConfigWarnings } from "./config-compat-4gaIelu_.js";
+import { i as resolveVoiceCallConfig, s as validateProviderConfig } from "./config-U-rgixyY.js";
+import { c as getTailscaleSelfInfo, l as setupTailscaleExposureRoute, o as resolveWebhookExposureStatus, p as resolveUserPath, s as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime } from "./runtime-entry-lBiyw_6t.js";
+import { i as parseVoiceCallPluginConfig, r as normalizeVoiceCallLegacyConfigInput, t as formatVoiceCallLegacyConfigWarnings } from "./config-compat-CokN3Zzr.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ErrorCodes, callGatewayFromCli, errorShape } from "openclaw/plugin-sdk/gateway-runtime";
 import { isRecord, normalizeOptionalLowercaseString, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -17,6 +17,7 @@ const VOICE_CALL_GATEWAY_DEFAULT_TIMEOUT_MS = 5e3;
 const VOICE_CALL_GATEWAY_OPERATION_TIMEOUT_MS = 3e4;
 const VOICE_CALL_GATEWAY_TRANSCRIPT_BUFFER_MS = 1e4;
 const VOICE_CALL_GATEWAY_POLL_INTERVAL_MS = 1e3;
+const DECIMAL_INTEGER_RE = /^\d+$/;
 const voiceCallCliDeps = { callGatewayFromCli };
 function writeStdoutLine(...values) {
 	process.stdout.write(`${format(...values)}\n`);
@@ -26,7 +27,8 @@ function writeStdoutJson(value) {
 }
 function parseVoiceCallIntOption(raw, optionName, opts) {
 	const min = opts?.min ?? 0;
-	const parsed = Number(raw);
+	const value = raw?.trim() ?? "";
+	const parsed = DECIMAL_INTEGER_RE.test(value) ? Number(value) : NaN;
 	if (!Number.isInteger(parsed) || parsed < min) throw new Error(`Invalid numeric value for ${optionName}: ${raw ?? ""}`);
 	return parsed;
 }
@@ -763,7 +765,7 @@ const voiceCallConfigSchema = {
 		},
 		"realtime.agentContext.enabled": {
 			label: "Enable Agent Voice Context",
-			help: "Injects a compact agent identity, system prompt, and workspace context capsule into realtime voice instructions.",
+			help: "Injects a compact agent identity and workspace context capsule into realtime voice instructions.",
 			advanced: true
 		},
 		"realtime.agentContext.maxChars": {
@@ -774,10 +776,6 @@ const voiceCallConfigSchema = {
 			label: "Include Agent Identity",
 			advanced: true
 		},
-		"realtime.agentContext.includeSystemPrompt": {
-			label: "Include Agent System Prompt",
-			advanced: true
-		},
 		"realtime.agentContext.includeWorkspaceFiles": {
 			label: "Include Agent Workspace Files",
 			advanced: true

package/dist/{plivo-CNtzf7Do.js → plivo-D4QmQaQu.js}

@@ -1,5 +1,5 @@
-import { a as getHeader, m as escapeXml } from "./runtime-entry-CxeSe0VA.js";
-import { n as reconstructWebhookUrl, r as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Dkeawg_W.js";
+import { a as getHeader, m as escapeXml } from "./runtime-entry-lBiyw_6t.js";
+import { n as reconstructWebhookUrl, r as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-BT5XfY80.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/plivo.ts

package/dist/{realtime-handler-NP8w71q9.js → realtime-handler-DT0Rlj3m.js}

@@ -142,9 +142,9 @@ function decodeMulawSample(value) {
 //#region extensions/voice-call/src/webhook/stream-frame-adapter.ts
 function parseTimestampMs(value) {
 	if (typeof value === "number" && Number.isFinite(value)) return value;
-	if (typeof value === "string") {
-		const parsed = Number.parseInt(value, 10);
-		return Number.isFinite(parsed) ? parsed : void 0;
+	if (typeof value === "string" && /^[+-]?\d+$/.test(value.trim())) {
+		const parsed = Number(value.trim());
+		return Number.isSafeInteger(parsed) ? parsed : void 0;
 	}
 }
 function tryParseJson(rawMessage) {

package/dist/{response-generator-D7HL2sFM.js → response-generator-Ca_N0987.js}

@@ -1,11 +1,11 @@
-import { o as resolveVoiceCallSessionKey } from "./config-cNGVtrwa.js";
-import { f as resolveVoiceResponseModel } from "./runtime-entry-CxeSe0VA.js";
+import { o as resolveVoiceCallSessionKey } from "./config-U-rgixyY.js";
+import { f as resolveVoiceResponseModel } from "./runtime-entry-lBiyw_6t.js";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { applyModelOverrideToSessionEntry } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/voice-call/src/response-generator.ts
 /**
-* Voice call response generator - uses the embedded Pi agent for tool support.
+* Voice call response generator - uses the embedded OpenClaw agent for tool support.
 * Routes voice responses through the same agent infrastructure as messaging.
 */
 function readExplicitToolsAllow(value) {
@@ -92,7 +92,7 @@ function resolveVoiceSandboxSessionKey(agentId, sessionKey) {
 	return `agent:${agentId}:${trimmed}`;
 }
 /**
-* Generate a voice response using the embedded Pi agent with full tool support.
+* Generate a voice response using the embedded OpenClaw agent with full tool support.
 * Uses the same agent infrastructure as messaging for consistent behavior.
 */
 async function generateVoiceResponse(params) {
@@ -168,7 +168,7 @@ async function generateVoiceResponse(params) {
 	const timeoutMs = voiceConfig.responseTimeoutMs ?? agentRuntime.resolveAgentTimeoutMs({ cfg });
 	const runId = `voice:${callId}:${Date.now()}`;
 	try {
-		const result = await agentRuntime.runEmbeddedPiAgent({
+		const result = await agentRuntime.runEmbeddedAgent({
 			sessionId,
 			sessionKey: resolvedSessionKey,
 			sandboxSessionKey: resolveVoiceSandboxSessionKey(agentId, resolvedSessionKey),

package/dist/{runtime-entry-CxeSe0VA.js → runtime-entry-lBiyw_6t.js}

@@ -1,6 +1,6 @@
 import { isBlockedHostnameOrIp, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText } from "./runtime-api.js";
 import "./api.js";
-import { a as resolveVoiceCallEffectiveConfig, c as deepMergeDefined, i as resolveVoiceCallConfig, n as normalizeVoiceCallConfig, o as resolveVoiceCallSessionKey, r as resolveTwilioAuthToken, s as validateProviderConfig } from "./config-cNGVtrwa.js";
+import { a as resolveVoiceCallEffectiveConfig, c as deepMergeDefined, i as resolveVoiceCallConfig, n as normalizeVoiceCallConfig, o as resolveVoiceCallSessionKey, r as resolveTwilioAuthToken, s as validateProviderConfig } from "./config-U-rgixyY.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -1250,13 +1250,6 @@ var CallManager = class {
 };
 //#endregion
 //#region extensions/voice-call/src/realtime-agent-context.ts
-function readAgentEntries(cfg) {
-	const agents = cfg.agents;
-	return Array.isArray(agents?.list) ? agents.list.filter((entry) => Boolean(entry && typeof entry === "object")) : [];
-}
-function resolveAgentSystemPromptOverride(cfg, agentId) {
-	return normalizeOptionalString(readAgentEntries(cfg).find((candidate) => normalizeOptionalString(candidate.id) === agentId)?.systemPromptOverride) ?? normalizeOptionalString(cfg.agents?.defaults?.systemPromptOverride);
-}
 function limitText(text, maxChars) {
 	if (text.length <= maxChars) return text;
 	return `${text.slice(0, Math.max(0, maxChars - 32)).trimEnd()}\n[truncated]`;
@@ -1301,10 +1294,6 @@ async function buildRealtimeVoiceInstructions(params) {
 		].filter(Boolean);
 		if (identityLines.length > 0) capsule.push(`Configured identity:\n${identityLines.join("\n")}`);
 	}
-	if (contextConfig.includeSystemPrompt) {
-		const systemPrompt = resolveAgentSystemPromptOverride(params.coreConfig, agentId);
-		if (systemPrompt) capsule.push(`Configured system prompt override:\n${systemPrompt}`);
-	}
 	if (contextConfig.includeWorkspaceFiles) {
 		const fileSections = await readWorkspaceVoiceContextFiles({
 			workspaceDir: params.agentRuntime.resolveAgentWorkspaceDir(params.coreConfig, agentId),
@@ -1464,15 +1453,58 @@ function collectTelephonyProviderConfigs(ttsConfig) {
 	return entries;
 }
 //#endregion
+//#region extensions/voice-call/src/bounded-child-output.ts
+const DEFAULT_MAX_OUTPUT_CHARS = 16384;
+function emptyBoundedChildOutput() {
+	return {
+		text: "",
+		truncated: false
+	};
+}
+function appendBoundedChildOutput(current, chunk, maxChars = DEFAULT_MAX_OUTPUT_CHARS) {
+	const appended = current.text + chunk;
+	if (appended.length <= maxChars) return {
+		text: appended,
+		truncated: current.truncated
+	};
+	return {
+		text: appended.slice(-maxChars),
+		truncated: true
+	};
+}
+function formatBoundedChildOutput(output) {
+	return output.truncated ? `[output truncated]\n${output.text}` : output.text;
+}
+//#endregion
 //#region extensions/voice-call/src/webhook/tailscale.ts
+const TAILSCALE_COMMAND_STDOUT_MAX_BYTES = 4 * 1024 * 1024;
+function appendTailscaleCommandStdout(current, data, maxBytes = TAILSCALE_COMMAND_STDOUT_MAX_BYTES) {
+	if (current.exceeded) return current;
+	const buffer = Buffer.isBuffer(data) ? data : Buffer.from(data);
+	const bytes = current.bytes + buffer.byteLength;
+	if (bytes > maxBytes) return {
+		bytes,
+		exceeded: true,
+		text: ""
+	};
+	return {
+		bytes,
+		exceeded: false,
+		text: `${current.text}${buffer.toString("utf8")}`
+	};
+}
 function runTailscaleCommand(args, timeoutMs = 2500) {
 	return new Promise((resolve) => {
 		const proc = spawn("tailscale", args, { stdio: [
 			"ignore",
 			"pipe",
-			"pipe"
+			"ignore"
 		] });
-		let stdout = "";
+		let stdout = {
+			bytes: 0,
+			exceeded: false,
+			text: ""
+		};
 		let settled = false;
 		let timer;
 		const finish = (result) => {
@@ -1482,7 +1514,14 @@ function runTailscaleCommand(args, timeoutMs = 2500) {
 			resolve(result);
 		};
 		proc.stdout.on("data", (data) => {
-			stdout += data;
+			stdout = appendTailscaleCommandStdout(stdout, data);
+			if (stdout.exceeded) {
+				proc.kill("SIGKILL");
+				finish({
+					code: -1,
+					stdout: ""
+				});
+			}
 		});
 		timer = setTimeout(() => {
 			proc.kill("SIGKILL");
@@ -1500,13 +1539,17 @@ function runTailscaleCommand(args, timeoutMs = 2500) {
 		proc.on("close", (code) => {
 			finish({
 				code: code ?? -1,
-				stdout
+				stdout: stdout.text
 			});
 		});
 	});
 }
 async function getTailscaleSelfInfo() {
-	const { code, stdout } = await runTailscaleCommand(["status", "--json"]);
+	const { code, stdout } = await runTailscaleCommand([
+		"status",
+		"--json",
+		"--peers=false"
+	]);
 	if (code !== 0) return null;
 	try {
 		const status = JSON.parse(stdout);
@@ -1569,6 +1612,7 @@ async function cleanupTailscaleExposure(config) {
 }
 //#endregion
 //#region extensions/voice-call/src/tunnel.ts
+const NGROK_LOG_BUFFER_MAX_CHARS = 16384;
 /**
 * Start an ngrok tunnel to expose the local webhook server.
 *
@@ -1635,9 +1679,9 @@ async function startNgrokTunnel(config) {
 			} catch {}
 		};
 		proc.stdout.on("data", (data) => {
-			outputBuffer += data.toString();
-			const lines = outputBuffer.split("\n");
+			const lines = (outputBuffer + data.toString()).split("\n");
 			outputBuffer = lines.pop() || "";
+			if (outputBuffer.length > NGROK_LOG_BUFFER_MAX_CHARS) outputBuffer = outputBuffer.slice(-16384);
 			for (const line of lines) if (line.trim()) processLine(line);
 		});
 		proc.stderr.on("data", (data) => {
@@ -1646,7 +1690,8 @@ async function startNgrokTunnel(config) {
 				if (!resolved) {
 					resolved = true;
 					clearTimeout(timeout);
-					reject(/* @__PURE__ */ new Error(`ngrok error: ${msg}`));
+					const output = appendBoundedChildOutput(emptyBoundedChildOutput(), msg);
+					reject(/* @__PURE__ */ new Error(`ngrok error: ${formatBoundedChildOutput(output)}`));
 				}
 			}
 		});
@@ -1676,17 +1721,20 @@ async function runNgrokCommand(args) {
 			"pipe",
 			"pipe"
 		] });
-		let stdout = "";
-		let stderr = "";
+		let stdout = emptyBoundedChildOutput();
+		let stderr = emptyBoundedChildOutput();
 		proc.stdout.on("data", (data) => {
-			stdout += data.toString();
+			stdout = appendBoundedChildOutput(stdout, data.toString());
 		});
 		proc.stderr.on("data", (data) => {
-			stderr += data.toString();
+			stderr = appendBoundedChildOutput(stderr, data.toString());
 		});
 		proc.on("close", (code) => {
-			if (code === 0) resolve(stdout);
-			else reject(/* @__PURE__ */ new Error(`ngrok command failed: ${stderr || stdout}`));
+			if (code === 0) resolve(stdout.text);
+			else {
+				const output = stderr.text ? stderr : stdout;
+				reject(/* @__PURE__ */ new Error(`ngrok command failed: ${formatBoundedChildOutput(output)}`));
+			}
 		});
 		proc.on("error", reject);
 	});
@@ -1712,10 +1760,18 @@ async function startTailscaleTunnel(config) {
 			"pipe",
 			"pipe"
 		] });
+		let stdout = emptyBoundedChildOutput();
+		let stderr = emptyBoundedChildOutput();
 		const timeout = setTimeout(() => {
 			proc.kill("SIGKILL");
 			reject(/* @__PURE__ */ new Error(`Tailscale ${config.mode} timed out`));
 		}, 1e4);
+		proc.stdout.on("data", (data) => {
+			stdout = appendBoundedChildOutput(stdout, data.toString());
+		});
+		proc.stderr.on("data", (data) => {
+			stderr = appendBoundedChildOutput(stderr, data.toString());
+		});
 		proc.on("close", (code) => {
 			clearTimeout(timeout);
 			if (code === 0) {
@@ -1728,7 +1784,11 @@ async function startTailscaleTunnel(config) {
 						await stopTailscaleTunnel(config.mode, path);
 					}
 				});
-			} else reject(/* @__PURE__ */ new Error(`Tailscale ${config.mode} failed with code ${code}`));
+			} else {
+				const output = stderr.text ? stderr : stdout;
+				const detail = output.text ? `: ${formatBoundedChildOutput(output)}` : "";
+				reject(/* @__PURE__ */ new Error(`Tailscale ${config.mode} failed with code ${code}${detail}`));
+			}
 		});
 		proc.on("error", (err) => {
 			clearTimeout(timeout);
@@ -2528,7 +2588,7 @@ function loadRealtimeTranscriptionRuntime() {
 	return realtimeTranscriptionRuntimePromise;
 }
 function loadResponseGeneratorModule() {
-	responseGeneratorModulePromise ??= import("./response-generator-D7HL2sFM.js");
+	responseGeneratorModulePromise ??= import("./response-generator-Ca_N0987.js");
 	return responseGeneratorModulePromise;
 }
 function sanitizeTranscriptForLog(value) {
@@ -2595,6 +2655,23 @@ function buildRealtimeRejectedTwiML() {
 		body: "<?xml version=\"1.0\" encoding=\"UTF-8\"?><Response><Reject reason=\"rejected\" /></Response>"
 	};
 }
+function buildTwilioReplayTwiML() {
+	return {
+		statusCode: 200,
+		headers: { "Content-Type": "text/xml" },
+		body: "<?xml version=\"1.0\" encoding=\"UTF-8\"?><Response></Response>"
+	};
+}
+const WEBHOOK_REPLAY_RESPONSE_TTL_MS = 600 * 1e3;
+const WEBHOOK_REPLAY_RESPONSE_MAX_ENTRIES = 1e4;
+const WEBHOOK_REPLAY_RESPONSE_PRUNE_INTERVAL = 64;
+function cloneWebhookResponsePayload(payload) {
+	return {
+		statusCode: payload.statusCode,
+		headers: payload.headers ? { ...payload.headers } : void 0,
+		body: payload.body
+	};
+}
 /**
 * HTTP server for receiving voice call webhooks from providers.
 * Supports WebSocket upgrades for media streams when streaming is enabled.
@@ -2609,6 +2686,8 @@ var VoiceCallWebhookServer = class {
 		this.mediaStreamHandler = null;
 		this.pendingDisconnectHangups = /* @__PURE__ */ new Map();
 		this.realtimeHandler = null;
+		this.replayResponses = /* @__PURE__ */ new Map();
+		this.replayResponseCacheCalls = 0;
 		this.config = normalizeVoiceCallConfig(config);
 		this.manager = manager;
 		this.provider = provider;
@@ -2976,34 +3055,78 @@ var VoiceCallWebhookServer = class {
 					body: "Unauthorized"
 				};
 			}
-			const initialTwiML = this.provider.consumeInitialTwiML?.(ctx);
-			if (initialTwiML !== void 0 && initialTwiML !== null) {
-				const params = new URLSearchParams(ctx.rawBody);
-				console.log(`[voice-call] Serving provider initial TwiML before realtime handling (callSid=${params.get("CallSid") ?? "unknown"}, direction=${params.get("Direction") ?? "unknown"})`);
-				return {
-					statusCode: 200,
-					headers: { "Content-Type": "application/xml" },
-					body: initialTwiML
-				};
+			const isReplay = Boolean(verification.isReplay);
+			if (isReplay) {
+				console.warn("[voice-call] Replay detected; skipping event side effects");
+				if (this.provider.name === "twilio") return buildTwilioReplayTwiML();
+				const cachedResponse = await this.getCachedReplayResponse(verification.verifiedRequestKey);
+				if (cachedResponse) return cachedResponse;
 			}
-			const realtimeParams = this.getRealtimeTwimlParams(ctx);
-			if (realtimeParams) {
-				const direction = realtimeParams.get("Direction");
-				if ((!direction || direction === "inbound") && !this.shouldAcceptRealtimeInboundRequest(realtimeParams)) {
-					console.log("[voice-call] Realtime inbound call rejected before stream setup");
-					return buildRealtimeRejectedTwiML();
+			const buildResponse = async () => {
+				const initialTwiML = this.provider.consumeInitialTwiML?.(ctx);
+				if (initialTwiML !== void 0 && initialTwiML !== null) {
+					const params = new URLSearchParams(ctx.rawBody);
+					console.log(`[voice-call] Serving provider initial TwiML before realtime handling (callSid=${params.get("CallSid") ?? "unknown"}, direction=${params.get("Direction") ?? "unknown"})`);
+					return {
+						statusCode: 200,
+						headers: { "Content-Type": "application/xml" },
+						body: initialTwiML
+					};
 				}
-				console.log(`[voice-call] Serving realtime TwiML for Twilio call ${realtimeParams.get("CallSid") ?? "unknown"} (direction=${direction ?? "unknown"})`);
-				return this.realtimeHandler.buildTwiMLPayload(req, realtimeParams);
-			}
-			const parsed = this.provider.parseWebhookEvent(ctx, { verifiedRequestKey: verification.verifiedRequestKey });
-			if (verification.isReplay) console.warn("[voice-call] Replay detected; skipping event side effects");
-			else this.processParsedEvents(parsed.events);
-			return normalizeWebhookResponse(parsed);
+				const realtimeParams = this.getRealtimeTwimlParams(ctx);
+				if (realtimeParams) {
+					const direction = realtimeParams.get("Direction");
+					if ((!direction || direction === "inbound") && !this.shouldAcceptRealtimeInboundRequest(realtimeParams)) {
+						console.log("[voice-call] Realtime inbound call rejected before stream setup");
+						return buildRealtimeRejectedTwiML();
+					}
+					console.log(`[voice-call] Serving realtime TwiML for Twilio call ${realtimeParams.get("CallSid") ?? "unknown"} (direction=${direction ?? "unknown"})`);
+					return this.realtimeHandler.buildTwiMLPayload(req, realtimeParams);
+				}
+				const parsed = this.provider.parseWebhookEvent(ctx, { verifiedRequestKey: verification.verifiedRequestKey });
+				if (!isReplay) this.processParsedEvents(parsed.events);
+				return normalizeWebhookResponse(parsed);
+			};
+			if (isReplay) return await buildResponse();
+			if (this.provider.name === "twilio") return await buildResponse();
+			return await this.cacheReplayResponse(verification.verifiedRequestKey, buildResponse);
 		} finally {
 			this.webhookInFlightLimiter.release(inFlightKey);
 		}
 	}
+	pruneReplayResponses(now) {
+		for (const [key, entry] of this.replayResponses) if (entry.expiresAt <= now) this.replayResponses.delete(key);
+		while (this.replayResponses.size > WEBHOOK_REPLAY_RESPONSE_MAX_ENTRIES) {
+			const oldest = this.replayResponses.keys().next().value;
+			if (!oldest) break;
+			this.replayResponses.delete(oldest);
+		}
+	}
+	async getCachedReplayResponse(key) {
+		const now = Date.now();
+		const entry = this.replayResponses.get(key);
+		if (!entry) return null;
+		if (entry.expiresAt <= now) {
+			this.replayResponses.delete(key);
+			return null;
+		}
+		return cloneWebhookResponsePayload(await entry.response);
+	}
+	async cacheReplayResponse(key, buildResponse) {
+		const now = Date.now();
+		this.replayResponseCacheCalls += 1;
+		if (this.replayResponseCacheCalls % WEBHOOK_REPLAY_RESPONSE_PRUNE_INTERVAL === 0) this.pruneReplayResponses(now);
+		const response = buildResponse().then(cloneWebhookResponsePayload).catch((err) => {
+			this.replayResponses.delete(key);
+			throw err;
+		});
+		this.replayResponses.set(key, {
+			expiresAt: now + WEBHOOK_REPLAY_RESPONSE_TTL_MS,
+			response
+		});
+		if (this.replayResponses.size > WEBHOOK_REPLAY_RESPONSE_MAX_ENTRIES) this.pruneReplayResponses(now);
+		return cloneWebhookResponsePayload(await response);
+	}
 	verifyPreAuthWebhookHeaders(headers) {
 		if (this.config.skipSignatureVerification) return { ok: true };
 		switch (this.provider.name) {
@@ -3145,15 +3268,15 @@ let mockProviderPromise;
 let realtimeVoiceRuntimePromise;
 let realtimeHandlerPromise;
 function loadTelnyxProvider() {
-	telnyxProviderPromise ??= import("./telnyx-CJAhbDYn.js");
+	telnyxProviderPromise ??= import("./telnyx-l9-ePiyj.js");
 	return telnyxProviderPromise;
 }
 function loadTwilioProvider() {
-	twilioProviderPromise ??= import("./twilio-Dn84Eomh.js");
+	twilioProviderPromise ??= import("./twilio-C5wUc1S2.js");
 	return twilioProviderPromise;
 }
 function loadPlivoProvider() {
-	plivoProviderPromise ??= import("./plivo-CNtzf7Do.js");
+	plivoProviderPromise ??= import("./plivo-D4QmQaQu.js");
 	return plivoProviderPromise;
 }
 function loadMockProvider() {
@@ -3165,7 +3288,7 @@ function loadRealtimeVoiceRuntime() {
 	return realtimeVoiceRuntimePromise;
 }
 function loadRealtimeHandler() {
-	realtimeHandlerPromise ??= import("./realtime-handler-NP8w71q9.js");
+	realtimeHandlerPromise ??= import("./realtime-handler-DT0Rlj3m.js");
 	return realtimeHandlerPromise;
 }
 function resolveVoiceCallConsultSessionKey(call) {

package/dist/runtime-entry.js

@@ -1,2 +1,2 @@
-import { t as createVoiceCallRuntime } from "./runtime-entry-CxeSe0VA.js";
+import { t as createVoiceCallRuntime } from "./runtime-entry-lBiyw_6t.js";
 export { createVoiceCallRuntime };

package/dist/setup-api.js

@@ -1,4 +1,4 @@
-import { n as migrateVoiceCallLegacyConfigInput } from "./config-compat-4gaIelu_.js";
+import { n as migrateVoiceCallLegacyConfigInput } from "./config-compat-CokN3Zzr.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/voice-call/setup-api.ts

package/dist/{telnyx-CJAhbDYn.js → telnyx-l9-ePiyj.js}

@@ -1,4 +1,4 @@
-import { i as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Dkeawg_W.js";
+import { i as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-BT5XfY80.js";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/telnyx.ts
 function normalizeTelnyxDirection(direction) {

package/dist/{twilio-Dn84Eomh.js → twilio-C5wUc1S2.js}

@@ -1,7 +1,7 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { a as getHeader, d as chunkAudio, h as mapVoiceToPolly, i as normalizeProviderStatus, m as escapeXml, n as isProviderStatusTerminal, r as mapProviderStatusToEndReason } from "./runtime-entry-CxeSe0VA.js";
-import { a as verifyTwilioWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Dkeawg_W.js";
+import { a as getHeader, d as chunkAudio, h as mapVoiceToPolly, i as normalizeProviderStatus, m as escapeXml, n as isProviderStatusTerminal, r as mapProviderStatusToEndReason } from "./runtime-entry-lBiyw_6t.js";
+import { a as verifyTwilioWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-BT5XfY80.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
@@ -314,6 +314,11 @@ var TwilioProvider = class TwilioProvider {
 		if (direction === "inbound") return "inbound";
 		if (direction === "outbound-api" || direction === "outbound-dial") return "outbound";
 	}
+	static parseConfidence(value) {
+		const trimmed = value?.trim();
+		if (!trimmed || !/^\d+(?:\.\d+)?$/.test(trimmed)) return .9;
+		return Number(trimmed);
+	}
 	/**
 	* Convert Twilio webhook params to normalized event format.
 	*/
@@ -337,7 +342,7 @@ var TwilioProvider = class TwilioProvider {
 			type: "call.speech",
 			transcript: speechResult,
 			isFinal: true,
-			confidence: Number.parseFloat(params.get("Confidence") || "0.9")
+			confidence: TwilioProvider.parseConfidence(params.get("Confidence"))
 		};
 		const digits = params.get("Digits");
 		if (digits) return {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.5.27",
+  "version": "2026.5.28-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/voice-call",
-      "version": "2026.5.27",
+      "version": "2026.5.28-beta.1",
       "dependencies": {
         "commander": "14.0.3",
         "typebox": "1.1.38",
@@ -14,7 +14,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.27"
+        "openclaw": ">=2026.5.28-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -188,7 +188,7 @@
     },
     "realtime.agentContext.enabled": {
       "label": "Enable Agent Voice Context",
-      "help": "Injects a compact agent identity, system prompt, and workspace context capsule into realtime voice instructions.",
+      "help": "Injects a compact agent identity and workspace context capsule into realtime voice instructions.",
       "advanced": true
     },
     "realtime.agentContext.maxChars": {
@@ -199,10 +199,6 @@
       "label": "Include Agent Identity",
       "advanced": true
     },
-    "realtime.agentContext.includeSystemPrompt": {
-      "label": "Include Agent System Prompt",
-      "advanced": true
-    },
     "realtime.agentContext.includeWorkspaceFiles": {
       "label": "Include Agent Workspace Files",
       "advanced": true
@@ -617,9 +613,6 @@
               "includeIdentity": {
                 "type": "boolean"
               },
-              "includeSystemPrompt": {
-                "type": "boolean"
-              },
               "includeWorkspaceFiles": {
                 "type": "boolean"
               },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.5.27",
+  "version": "2026.5.28-beta.1",
   "description": "OpenClaw voice-call plugin for Twilio, Telnyx, and Plivo phone calls.",
   "repository": {
     "type": "git",
@@ -14,7 +14,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.27"
+    "openclaw": ">=2026.5.28-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -31,10 +31,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.27"
+      "pluginApi": ">=2026.5.28-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.27"
+      "openclawVersion": "2026.5.28-beta.1"
     },
     "release": {
       "publishToClawHub": true,