@openclaw/voice-call 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/{guarded-json-api-Dxhe25Zi.js → guarded-json-api-DS9sZa3C.js}

@@ -1,12 +1,13 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-CQtitvRd.js";
+import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-D0UJiLfi.js";
 import { n as markWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-aaP79dI8.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { isIP } from "node:net";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 //#region extensions/voice-call/src/webhook-security.ts
 const twilioReplayCache = createWebhookReplayCache();
@@ -57,7 +58,17 @@ function extractHostname(hostHeader) {
 	if (hostHeader.startsWith("[")) {
 		const endBracket = hostHeader.indexOf("]");
 		if (endBracket === -1) return null;
-		return normalizeLowercaseStringOrEmpty(hostHeader.slice(1, endBracket));
+		const suffix = hostHeader.slice(endBracket + 1);
+		if (suffix && !/^:\d+$/u.test(suffix)) return null;
+		const hostname = hostHeader.slice(1, endBracket);
+		if (isIP(hostname) !== 6) return null;
+		try {
+			const parsedHostname = new URL(`https://[${hostname}]/`).hostname;
+			if (!parsedHostname.startsWith("[") || !parsedHostname.endsWith("]")) return null;
+			return normalizeLowercaseStringOrEmpty(parsedHostname.slice(1, -1));
+		} catch {
+			return null;
+		}
 	}
 	if (hostHeader.includes("@")) return null;
 	const hostname = hostHeader.split(":").at(0);
@@ -78,6 +89,9 @@ function normalizeAllowedHosts(allowedHosts) {
 	}
 	return normalized.size > 0 ? normalized : null;
 }
+function formatHostnameForUrl(hostname) {
+	return isIP(hostname) === 6 ? `[${hostname}]` : hostname;
+}
 /**
 * Reconstruct the public webhook URL from request headers.
 *
@@ -147,15 +161,13 @@ function reconstructWebhookUrl(ctx, options) {
 		const parsed = new URL(ctx.url);
 		path = parsed.pathname + parsed.search;
 	} catch {}
-	return `${proto}://${host}${path}`;
+	return `${proto}://${formatHostnameForUrl(host)}${path}`;
 }
 function buildTwilioVerificationUrl(ctx, publicUrl, urlOptions) {
 	if (!publicUrl) return reconstructWebhookUrl(ctx, urlOptions);
 	try {
 		const base = new URL(publicUrl);
-		const requestUrl = new URL(ctx.url);
-		base.pathname = requestUrl.pathname;
-		base.search = requestUrl.search;
+		base.search = new URL(ctx.url).search;
 		return base.toString();
 	} catch {
 		return publicUrl;
@@ -258,8 +270,8 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		ok: false,
 		reason: "Missing signature or timestamp header"
 	};
-	const eventTimeSec = Number.parseInt(timestamp, 10);
-	if (!Number.isFinite(eventTimeSec)) return {
+	const eventTimeSec = /^(?:0|[1-9]\d*)$/.test(timestamp) ? Number(timestamp) : void 0;
+	if (eventTimeSec === void 0 || !Number.isSafeInteger(eventTimeSec)) return {
 		ok: false,
 		reason: "Invalid timestamp header"
 	};

package/dist/index.js

@@ -1,7 +1,7 @@
 import { definePluginEntry, sleep } from "./runtime-api.js";
 import "./api.js";
 import { VOICE_CALL_CLI_DESCRIPTOR } from "./cli-output-mode.js";
-import { S as validateProviderConfig, b as resolveVoiceCallConfig, c as resolveWebhookExposureStatus, d as setupTailscaleExposureRoute, g as resolveUserPath, l as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime, u as getTailscaleSelfInfo, y as VoiceCallConfigSchema } from "./runtime-entry-CQtitvRd.js";
+import { S as validateProviderConfig, b as resolveVoiceCallConfig, c as resolveWebhookExposureStatus, d as setupTailscaleExposureRoute, g as resolveUserPath, l as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime, u as getTailscaleSelfInfo, y as VoiceCallConfigSchema } from "./runtime-entry-D0UJiLfi.js";
 import { g as setVoiceCallStateRuntime, t as resolveDefaultVoiceCallStoreDir, u as getCallHistoryFromStore } from "./store-path-nYL-yM0S.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ErrorCodes, callGatewayFromCli, errorShape } from "openclaw/plugin-sdk/gateway-runtime";
@@ -13,6 +13,7 @@ import { Type } from "typebox";
 import fs from "node:fs";
 import { randomUUID } from "node:crypto";
 import path from "node:path";
+import { StringDecoder } from "node:string_decoder";
 import { format } from "node:util";
 //#region extensions/voice-call/src/cli.ts
 const VOICE_CALL_GATEWAY_DEFAULT_TIMEOUT_MS = 5e3;
@@ -429,22 +430,33 @@ function registerVoiceCallCli(params) {
 			}
 		};
 		if (fs.existsSync(file) && path.basename(file) !== "calls.jsonl") {
-			const initial = fs.readFileSync(file, "utf8");
-			const lines = initial.split("\n").filter(Boolean);
+			const initial = fs.readFileSync(file);
+			let decoder = new StringDecoder("utf8");
+			const initialLines = decoder.write(initial).split("\n");
+			let pendingLine = initialLines.pop() ?? "";
+			const lines = initialLines.filter(Boolean);
 			for (const line of lines.slice(Math.max(0, lines.length - since))) writeStdoutLine(line);
-			let offset = Buffer.byteLength(initial, "utf8");
+			let offset = initial.length;
+			let lastObservedSize = initial.length;
 			for (;;) {
 				try {
 					const stat = fs.statSync(file);
-					if (stat.size < offset) offset = 0;
+					if (stat.size < lastObservedSize) {
+						offset = 0;
+						decoder = new StringDecoder("utf8");
+						pendingLine = "";
+					}
+					lastObservedSize = stat.size;
 					if (stat.size > offset) {
 						const fd = fs.openSync(file, "r");
 						try {
 							const buf = Buffer.alloc(stat.size - offset);
-							fs.readSync(fd, buf, 0, buf.length, offset);
-							offset = stat.size;
-							const text = buf.toString("utf8");
-							for (const line of text.split("\n").filter(Boolean)) writeStdoutLine(line);
+							const bytesRead = fs.readSync(fd, buf, 0, buf.length, offset);
+							offset += bytesRead;
+							const text = decoder.write(buf.subarray(0, bytesRead));
+							const completeLines = `${pendingLine}${text}`.split("\n");
+							pendingLine = completeLines.pop() ?? "";
+							for (const line of completeLines.filter(Boolean)) writeStdoutLine(line);
 						} finally {
 							fs.closeSync(fd);
 						}

package/dist/{plivo-B-KvPVji.js → plivo-vZ--Wqxv.js}

@@ -1,5 +1,5 @@
-import { _ as escapeXml, s as getHeader } from "./runtime-entry-CQtitvRd.js";
-import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Dxhe25Zi.js";
+import { _ as escapeXml, s as getHeader } from "./runtime-entry-D0UJiLfi.js";
+import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-DS9sZa3C.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/plivo.ts

package/dist/{realtime-handler-hIVPEZxN.js → realtime-handler--i_OERv6.js}

@@ -1,4 +1,4 @@
-import { o as canonicalizeVoiceCallMediaBase64 } from "./runtime-entry-CQtitvRd.js";
+import { o as canonicalizeVoiceCallMediaBase64 } from "./runtime-entry-D0UJiLfi.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isFutureDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/runtime-env";
@@ -634,7 +634,7 @@ var RealtimeCallHandler = class {
 			},
 			onTalkEvent: (event) => appendRecentTalkEventMetadata(callRecord, event)
 		});
-		const providerHandlesInputAudioBargeIn = this.realtimeProvider.capabilities?.handlesInputAudioBargeIn === true;
+		let providerHandlesInputAudioBargeIn = this.realtimeProvider.capabilities?.handlesInputAudioBargeIn === true;
 		const cancelOutputAudioForBargeIn = (source, interruptProvider, clearedAudioBytes = 0) => {
 			const outputAudioActive = harness.talk.outputAudioActive;
 			const pendingTelephonyAudio = audioPacer.hasPendingAudio();
@@ -890,6 +890,7 @@ var RealtimeCallHandler = class {
 				});
 			}
 		});
+		providerHandlesInputAudioBargeIn = session.bridge.handlesInputAudioBargeIn ?? providerHandlesInputAudioBargeIn;
 		const closeTelephony = (reason) => {
 			try {
 				session.close();

package/dist/{response-generator-z6M9229t.js → response-generator-D-7ApVfT.js}

@@ -1,4 +1,4 @@
-import { h as resolveCallAgentId, m as resolveVoiceResponseModel, x as resolveVoiceCallSessionKey } from "./runtime-entry-CQtitvRd.js";
+import { h as resolveCallAgentId, m as resolveVoiceResponseModel, x as resolveVoiceCallSessionKey } from "./runtime-entry-D0UJiLfi.js";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { ModelSelectionLockedError, applyModelOverrideToSessionEntry, resolvePersistedSessionRuntimeId } from "openclaw/plugin-sdk/model-session-runtime";

package/dist/{runtime-entry-CQtitvRd.js → runtime-entry-D0UJiLfi.js}

@@ -3071,7 +3071,7 @@ const WEBHOOK_BODY_TIMEOUT_MS = WEBHOOK_BODY_READ_DEFAULTS.preAuth.timeoutMs;
 const MISSING_REMOTE_ADDRESS_IN_FLIGHT_KEY = "__voice_call_no_remote__";
 const STREAM_DISCONNECT_HANGUP_GRACE_MS = 2e3;
 const loadRealtimeTranscriptionRuntime = createLazyRuntimeModule(() => import("./realtime-transcription.runtime-CbJAs5t_.js"));
-const loadResponseGeneratorModule = createLazyRuntimeModule(() => import("./response-generator-z6M9229t.js"));
+const loadResponseGeneratorModule = createLazyRuntimeModule(() => import("./response-generator-D-7ApVfT.js"));
 function appendRecentTalkEventMetadata(call, event) {
 	const metadata = call.metadata ?? {};
 	const recent = Array.isArray(metadata.recentTalkEvents) ? metadata.recentTalkEvents.filter((entry) => Boolean(entry) && typeof entry === "object" && !Array.isArray(entry)) : [];
@@ -3746,12 +3746,12 @@ const REALTIME_VOICE_CONSULT_SYSTEM_PROMPT = [
 	"Do not print secret values or dump environment variables; only check whether required configuration is present.",
 	"Be accurate, brief, and speakable."
 ].join(" ");
-const loadTelnyxProvider = createLazyRuntimeModule(() => import("./telnyx-BG56lL7z.js"));
-const loadTwilioProvider = createLazyRuntimeModule(() => import("./twilio-B3FQ_P9x.js"));
-const loadPlivoProvider = createLazyRuntimeModule(() => import("./plivo-B-KvPVji.js"));
+const loadTelnyxProvider = createLazyRuntimeModule(() => import("./telnyx-Dx6cfLvV.js"));
+const loadTwilioProvider = createLazyRuntimeModule(() => import("./twilio-D_D8KysU.js"));
+const loadPlivoProvider = createLazyRuntimeModule(() => import("./plivo-vZ--Wqxv.js"));
 const loadMockProvider = createLazyRuntimeModule(() => import("./mock-YsvBTX-7.js"));
 const loadRealtimeVoiceRuntime = createLazyRuntimeModule(() => import("./realtime-voice.runtime-vtdCOWg-.js"));
-const loadRealtimeHandler = createLazyRuntimeModule(() => import("./realtime-handler-hIVPEZxN.js"));
+const loadRealtimeHandler = createLazyRuntimeModule(() => import("./realtime-handler--i_OERv6.js"));
 function resolveVoiceCallConsultSessionKey(call) {
 	return resolveVoiceCallSessionKey({
 		config: call.config,

package/dist/runtime-entry.js

@@ -1,2 +1,2 @@
-import { t as createVoiceCallRuntime } from "./runtime-entry-CQtitvRd.js";
+import { t as createVoiceCallRuntime } from "./runtime-entry-D0UJiLfi.js";
 export { createVoiceCallRuntime };

package/dist/{telnyx-BG56lL7z.js → telnyx-Dx6cfLvV.js}

@@ -1,4 +1,4 @@
-import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Dxhe25Zi.js";
+import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-DS9sZa3C.js";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/telnyx.ts
 function normalizeTelnyxDirection(direction) {

package/dist/{twilio-B3FQ_P9x.js → twilio-D_D8KysU.js}

@@ -1,8 +1,8 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
 import { n as requireSupportedTwilioApiHostname, r as resolveTwilioApiBaseUrl } from "./twilio-region-4fkgz3UG.js";
-import { _ as escapeXml, a as normalizeProviderStatus, i as mapProviderStatusToEndReason, p as chunkAudio, r as isProviderStatusTerminal, s as getHeader, v as mapVoiceToPolly } from "./runtime-entry-CQtitvRd.js";
-import { c as verifyTwilioWebhook, i as readProviderJsonResponseText, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-Dxhe25Zi.js";
+import { _ as escapeXml, a as normalizeProviderStatus, i as mapProviderStatusToEndReason, p as chunkAudio, r as isProviderStatusTerminal, s as getHeader, v as mapVoiceToPolly } from "./runtime-entry-D0UJiLfi.js";
+import { c as verifyTwilioWebhook, i as readProviderJsonResponseText, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-DS9sZa3C.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import crypto from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.7.2-beta.5",
+  "version": "2026.7.2-beta.7",
   "description": "OpenClaw voice-call plugin for Twilio, Telnyx, and Plivo phone calls.",
   "repository": {
     "type": "git",
@@ -13,7 +13,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.5"
+    "openclaw": ">=2026.7.2-beta.7"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -30,10 +30,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.5"
+      "pluginApi": ">=2026.7.2-beta.7"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.5"
+      "openclawVersion": "2026.7.2-beta.7"
     },
     "release": {
       "publishToClawHub": true,