@openclaw/voice-call 2026.6.11 → 2026.6.33

package/dist/{guarded-json-api-BXeBxB7w.js → guarded-json-api-CmMKa9uZ.js}

@@ -1,6 +1,6 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { a as getHeader } from "./runtime-entry-DIAae7sB.js";
+import { a as getHeader } from "./runtime-entry-CZx1atFe.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { isFutureDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
@@ -197,6 +197,18 @@ function buildTwilioVerificationUrl(ctx, publicUrl, urlOptions) {
 		return publicUrl;
 	}
 }
+function redactTwilioVerificationUrlForDiagnostics(url) {
+	try {
+		const parsed = new URL(url);
+		parsed.username = parsed.username ? "***" : "";
+		parsed.password = parsed.password ? "***" : "";
+		parsed.hash = parsed.hash ? "#***" : "";
+		for (const key of Array.from(parsed.searchParams.keys())) parsed.searchParams.set(key, "***");
+		return parsed.toString();
+	} catch {
+		return "<invalid verification URL>";
+	}
+}
 function stripPortFromUrl(url) {
 	try {
 		const parsed = new URL(url);
@@ -382,8 +394,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 	const isNgrokFreeTier = verificationUrl.includes(".ngrok-free.app") || verificationUrl.includes(".ngrok.io");
 	return {
 		ok: false,
-		reason: `Invalid signature for URL: ${verificationUrl}`,
-		verificationUrl,
+		reason: `Invalid signature for URL: ${redactTwilioVerificationUrlForDiagnostics(verificationUrl)}`,
 		isNgrokFreeTier
 	};
 }

package/dist/index.js

@@ -1,7 +1,7 @@
 import { definePluginEntry, sleep } from "./runtime-api.js";
 import "./api.js";
 import { i as resolveVoiceCallConfig, s as validateProviderConfig } from "./config-BKDAAd8j.js";
-import { c as getTailscaleSelfInfo, l as setupTailscaleExposureRoute, o as resolveWebhookExposureStatus, p as resolveUserPath, s as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime } from "./runtime-entry-DIAae7sB.js";
+import { c as getTailscaleSelfInfo, l as setupTailscaleExposureRoute, o as resolveWebhookExposureStatus, p as resolveUserPath, s as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime } from "./runtime-entry-CZx1atFe.js";
 import { c as getCallHistoryFromStore, m as setVoiceCallStateRuntime } from "./store-8M2m4Isq.js";
 import { i as parseVoiceCallPluginConfig, r as normalizeVoiceCallLegacyConfigInput, t as formatVoiceCallLegacyConfigWarnings } from "./config-compat-qDCcKTUt.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -915,6 +915,19 @@ function asParamRecord(params) {
 function isCliOnlyProcess() {
 	return process.env.OPENCLAW_CLI === "1" && !process.argv.slice(2).includes("gateway");
 }
+function toVoiceCallStatus(call) {
+	return {
+		callId: call.callId,
+		...call.providerCallId !== void 0 ? { providerCallId: call.providerCallId } : {},
+		provider: call.provider,
+		direction: call.direction,
+		state: call.state,
+		startedAt: call.startedAt,
+		...call.answeredAt !== void 0 ? { answeredAt: call.answeredAt } : {},
+		...call.endedAt !== void 0 ? { endedAt: call.endedAt } : {},
+		...call.endReason !== void 0 ? { endReason: call.endReason } : {}
+	};
+}
 const VOICE_CALL_RUNTIME_KEY = Symbol.for("openclaw.voice-call.runtime");
 const VOICE_CALL_RUNTIME_PROMISE_KEY = Symbol.for("openclaw.voice-call.runtimePromise");
 const VOICE_CALL_RUNTIME_STOP_PROMISE_KEY = Symbol.for("openclaw.voice-call.runtimeStopPromise");
@@ -1183,7 +1196,7 @@ var voice_call_default = definePluginEntry({
 				if (!raw) {
 					respond(true, {
 						found: true,
-						calls: rt.manager.getActiveCalls()
+						calls: rt.manager.getActiveCalls().map(toVoiceCallStatus)
 					});
 					return;
 				}
@@ -1194,7 +1207,7 @@ var voice_call_default = definePluginEntry({
 				}
 				respond(true, {
 					found: true,
-					call
+					call: toVoiceCallStatus(call)
 				});
 			} catch (err) {
 				sendError(respond, err);
@@ -1299,7 +1312,7 @@ var voice_call_default = definePluginEntry({
 							const call = rt.manager.getCall(callId) || rt.manager.getCallByProviderCallId(callId);
 							return json(call ? {
 								found: true,
-								call
+								call: toVoiceCallStatus(call)
 							} : { found: false });
 						}
 					}
@@ -1309,7 +1322,7 @@ var voice_call_default = definePluginEntry({
 						const call = rt.manager.getCall(sid) || rt.manager.getCallByProviderCallId(sid);
 						return json(call ? {
 							found: true,
-							call
+							call: toVoiceCallStatus(call)
 						} : { found: false });
 					}
 					const to = normalizeOptionalString(rawParams.to) ?? rt.config.toNumber;

package/dist/{plivo-CPxvHw8k.js → plivo-5ZPBAFQL.js}

@@ -1,5 +1,5 @@
-import { a as getHeader, m as escapeXml } from "./runtime-entry-DIAae7sB.js";
-import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-BXeBxB7w.js";
+import { a as getHeader, m as escapeXml } from "./runtime-entry-CZx1atFe.js";
+import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-CmMKa9uZ.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/plivo.ts

package/dist/{response-generator-DBzGujH_.js → response-generator-UQneIJrB.js}

@@ -1,5 +1,5 @@
 import { o as resolveVoiceCallSessionKey } from "./config-BKDAAd8j.js";
-import { f as resolveVoiceResponseModel } from "./runtime-entry-DIAae7sB.js";
+import { f as resolveVoiceResponseModel } from "./runtime-entry-CZx1atFe.js";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { applyModelOverrideToSessionEntry } from "openclaw/plugin-sdk/model-session-runtime";

package/dist/{runtime-entry-DIAae7sB.js → runtime-entry-CZx1atFe.js}

@@ -1431,6 +1431,13 @@ function runTailscaleCommand(args, timeoutMs = 2500) {
 			clearTimeout(timer);
 			resolve(result);
 		};
+		const timer = setTimeout(() => {
+			proc.kill("SIGKILL");
+			finish({
+				code: -1,
+				stdout: ""
+			});
+		}, timeoutMs);
 		proc.stdout.on("data", (data) => {
 			stdout = appendTailscaleCommandStdout(stdout, data);
 			if (stdout.exceeded) {
@@ -1441,13 +1448,13 @@ function runTailscaleCommand(args, timeoutMs = 2500) {
 				});
 			}
 		});
-		const timer = setTimeout(() => {
+		proc.stdout.on("error", () => {
 			proc.kill("SIGKILL");
 			finish({
 				code: -1,
 				stdout: ""
 			});
-		}, timeoutMs);
+		});
 		proc.on("error", () => {
 			finish({
 				code: -1,
@@ -1531,6 +1538,10 @@ async function cleanupTailscaleExposure(config) {
 //#endregion
 //#region extensions/voice-call/src/tunnel.ts
 const NGROK_LOG_BUFFER_MAX_CHARS = 16384;
+function listenForChildStreamErrors(proc, onError) {
+	proc.stdout.on("error", (error) => onError("stdout", error));
+	proc.stderr.on("error", (error) => onError("stderr", error));
+}
 /**
 * Start an ngrok tunnel to expose the local webhook server.
 *
@@ -1563,6 +1574,7 @@ async function startNgrokTunnel(config) {
 			"pipe"
 		] });
 		let resolved = false;
+		let closed = false;
 		let publicUrl = null;
 		let outputBuffer = "";
 		const timeout = setTimeout(() => {
@@ -1572,6 +1584,14 @@ async function startNgrokTunnel(config) {
 				reject(/* @__PURE__ */ new Error("ngrok startup timed out (30s)"));
 			}
 		}, 3e4);
+		const rejectIfPending = (message, kill = false) => {
+			if (!resolved) {
+				resolved = true;
+				clearTimeout(timeout);
+				if (kill && !closed) proc.kill("SIGKILL");
+				reject(new Error(message));
+			}
+		};
 		const processLine = (line) => {
 			try {
 				const log = JSON.parse(line);
@@ -1586,10 +1606,24 @@ async function startNgrokTunnel(config) {
 						publicUrl: fullUrl,
 						provider: "ngrok",
 						stop: async () => {
-							proc.kill("SIGTERM");
+							if (closed) return;
 							await new Promise((res) => {
-								proc.on("close", () => res());
-								setTimeout(res, 2e3);
+								let finished = false;
+								const finish = () => {
+									if (finished) return;
+									finished = true;
+									clearTimeout(fallback);
+									proc.off("close", finish);
+									res();
+								};
+								if (closed) {
+									res();
+									return;
+								}
+								proc.once("close", finish);
+								const fallback = setTimeout(finish, 2e3);
+								proc.kill("SIGTERM");
+								if (closed) finish();
 							});
 						}
 					});
@@ -1604,23 +1638,16 @@ async function startNgrokTunnel(config) {
 		});
 		proc.stderr.on("data", (data) => {
 			const msg = data.toString();
-			if (msg.includes("ERR_NGROK")) {
-				if (!resolved) {
-					resolved = true;
-					clearTimeout(timeout);
-					const output = appendBoundedChildOutput(emptyBoundedChildOutput(), msg);
-					reject(/* @__PURE__ */ new Error(`ngrok error: ${formatBoundedChildOutput(output)}`));
-				}
-			}
+			if (msg.includes("ERR_NGROK")) rejectIfPending(`ngrok error: ${formatBoundedChildOutput(appendBoundedChildOutput(emptyBoundedChildOutput(), msg))}`, true);
+		});
+		listenForChildStreamErrors(proc, (stream, error) => {
+			rejectIfPending(`ngrok ${stream} error: ${error.message}`, true);
 		});
 		proc.on("error", (err) => {
-			if (!resolved) {
-				resolved = true;
-				clearTimeout(timeout);
-				reject(/* @__PURE__ */ new Error(`Failed to start ngrok: ${err.message}`));
-			}
+			rejectIfPending(`Failed to start ngrok: ${err.message}`);
 		});
 		proc.on("close", (code) => {
+			closed = true;
 			if (!resolved) {
 				resolved = true;
 				clearTimeout(timeout);
@@ -1641,20 +1668,32 @@ async function runNgrokCommand(args) {
 		] });
 		let stdout = emptyBoundedChildOutput();
 		let stderr = emptyBoundedChildOutput();
+		let settled = false;
+		const rejectIfPending = (error, kill = false) => {
+			if (settled) return;
+			settled = true;
+			if (kill) proc.kill("SIGKILL");
+			reject(error);
+		};
 		proc.stdout.on("data", (data) => {
 			stdout = appendBoundedChildOutput(stdout, data.toString());
 		});
 		proc.stderr.on("data", (data) => {
 			stderr = appendBoundedChildOutput(stderr, data.toString());
 		});
+		listenForChildStreamErrors(proc, (stream, error) => {
+			rejectIfPending(/* @__PURE__ */ new Error(`ngrok command ${stream} error: ${error.message}`), true);
+		});
 		proc.on("close", (code) => {
+			if (settled) return;
+			settled = true;
 			if (code === 0) resolve(stdout.text);
 			else {
 				const output = stderr.text ? stderr : stdout;
 				reject(/* @__PURE__ */ new Error(`ngrok command failed: ${formatBoundedChildOutput(output)}`));
 			}
 		});
-		proc.on("error", reject);
+		proc.on("error", (error) => rejectIfPending(error));
 	});
 }
 /**
@@ -1678,11 +1717,18 @@ async function startTailscaleTunnel(config) {
 			"pipe",
 			"pipe"
 		] });
+		let resolved = false;
 		let stdout = emptyBoundedChildOutput();
 		let stderr = emptyBoundedChildOutput();
+		const rejectIfPending = (error, kill = false) => {
+			if (resolved) return;
+			resolved = true;
+			clearTimeout(timeout);
+			if (kill) proc.kill("SIGKILL");
+			reject(error);
+		};
 		const timeout = setTimeout(() => {
-			proc.kill("SIGKILL");
-			reject(/* @__PURE__ */ new Error(`Tailscale ${config.mode} timed out`));
+			rejectIfPending(/* @__PURE__ */ new Error(`Tailscale ${config.mode} timed out`), true);
 		}, 1e4);
 		proc.stdout.on("data", (data) => {
 			stdout = appendBoundedChildOutput(stdout, data.toString());
@@ -1690,8 +1736,13 @@ async function startTailscaleTunnel(config) {
 		proc.stderr.on("data", (data) => {
 			stderr = appendBoundedChildOutput(stderr, data.toString());
 		});
+		listenForChildStreamErrors(proc, (stream, error) => {
+			rejectIfPending(/* @__PURE__ */ new Error(`Tailscale ${config.mode} ${stream} error: ${error.message}`), true);
+		});
 		proc.on("close", (code) => {
 			clearTimeout(timeout);
+			if (resolved) return;
+			resolved = true;
 			if (code === 0) {
 				const publicUrl = `https://${dnsName}${path}`;
 				console.log(`[voice-call] Tailscale ${config.mode} active: ${publicUrl}`);
@@ -1709,8 +1760,7 @@ async function startTailscaleTunnel(config) {
 			}
 		});
 		proc.on("error", (err) => {
-			clearTimeout(timeout);
-			reject(err);
+			rejectIfPending(err);
 		});
 	});
 }
@@ -1732,6 +1782,10 @@ async function stopTailscaleTunnel(mode, path) {
 			clearTimeout(timeout);
 			resolve();
 		});
+		proc.on("error", () => {
+			clearTimeout(timeout);
+			resolve();
+		});
 	});
 }
 /**
@@ -2510,7 +2564,7 @@ function loadRealtimeTranscriptionRuntime() {
 	return realtimeTranscriptionRuntimePromise;
 }
 function loadResponseGeneratorModule() {
-	responseGeneratorModulePromise ??= import("./response-generator-DBzGujH_.js");
+	responseGeneratorModulePromise ??= import("./response-generator-UQneIJrB.js");
 	return responseGeneratorModulePromise;
 }
 function sanitizeTranscriptForLog(value) {
@@ -3198,15 +3252,15 @@ let mockProviderPromise;
 let realtimeVoiceRuntimePromise;
 let realtimeHandlerPromise;
 function loadTelnyxProvider() {
-	telnyxProviderPromise ??= import("./telnyx-CYS_IihO.js");
+	telnyxProviderPromise ??= import("./telnyx-iEUfESPw.js");
 	return telnyxProviderPromise;
 }
 function loadTwilioProvider() {
-	twilioProviderPromise ??= import("./twilio-Bn1ta3tQ.js");
+	twilioProviderPromise ??= import("./twilio-iv98cUsF.js");
 	return twilioProviderPromise;
 }
 function loadPlivoProvider() {
-	plivoProviderPromise ??= import("./plivo-CPxvHw8k.js");
+	plivoProviderPromise ??= import("./plivo-5ZPBAFQL.js");
 	return plivoProviderPromise;
 }
 function loadMockProvider() {

package/dist/runtime-entry.js

@@ -1,2 +1,2 @@
-import { t as createVoiceCallRuntime } from "./runtime-entry-DIAae7sB.js";
+import { t as createVoiceCallRuntime } from "./runtime-entry-CZx1atFe.js";
 export { createVoiceCallRuntime };

package/dist/{telnyx-CYS_IihO.js → telnyx-iEUfESPw.js}

@@ -1,4 +1,4 @@
-import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-BXeBxB7w.js";
+import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-CmMKa9uZ.js";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/telnyx.ts
 function normalizeTelnyxDirection(direction) {

package/dist/{twilio-Bn1ta3tQ.js → twilio-iv98cUsF.js}

@@ -1,7 +1,7 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { a as getHeader, d as chunkAudio, h as mapVoiceToPolly, i as normalizeProviderStatus, m as escapeXml, n as isProviderStatusTerminal, r as mapProviderStatusToEndReason } from "./runtime-entry-DIAae7sB.js";
-import { c as verifyTwilioWebhook, i as readProviderJsonResponseText, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-BXeBxB7w.js";
+import { a as getHeader, d as chunkAudio, h as mapVoiceToPolly, i as normalizeProviderStatus, m as escapeXml, n as isProviderStatusTerminal, r as mapProviderStatusToEndReason } from "./runtime-entry-CZx1atFe.js";
+import { c as verifyTwilioWebhook, i as readProviderJsonResponseText, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-CmMKa9uZ.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
@@ -129,10 +129,7 @@ function verifyTwilioProviderWebhook(params) {
 		trustedProxyIPs: params.options.webhookSecurity?.trustedProxyIPs,
 		remoteIP: params.ctx.remoteAddress
 	});
-	if (!result.ok) {
-		console.warn(`[twilio] Webhook verification failed: ${result.reason}`);
-		if (result.verificationUrl) console.warn(`[twilio] Verification URL: ${result.verificationUrl}`);
-	}
+	if (!result.ok) console.warn(`[twilio] Webhook verification failed: ${result.reason}`);
 	return {
 		ok: result.ok,
 		reason: result.reason,

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.6.11",
+  "version": "2026.6.33",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/voice-call",
-      "version": "2026.6.11",
+      "version": "2026.6.33",
       "dependencies": {
         "commander": "14.0.3",
         "typebox": "1.1.39",
@@ -14,7 +14,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.6.11"
+        "openclaw": ">=2026.6.33"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.6.11",
+  "version": "2026.6.33",
   "description": "OpenClaw voice-call plugin for Twilio, Telnyx, and Plivo phone calls.",
   "repository": {
     "type": "git",
@@ -14,7 +14,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.6.11"
+    "openclaw": ">=2026.6.33"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -31,10 +31,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.6.11"
+      "pluginApi": ">=2026.6.33"
     },
     "build": {
-      "openclawVersion": "2026.6.11"
+      "openclawVersion": "2026.6.33"
     },
     "release": {
       "publishToClawHub": true,