@openclaw/voice-call 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/doctor-contract-api.js

@@ -1,9 +1,10 @@
-import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-nYL-yM0S.js";
+import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-51_oC_xn.js";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
-import { archiveLegacyStateSource, detectOpenClawStateDatabaseSchemaMigrations, repairOpenClawStateDatabaseSchema } from "openclaw/plugin-sdk/runtime-doctor";
+import { archiveLegacyStateSource } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 //#region extensions/voice-call/doctor-contract-api.ts
 /** Resolve home from doctor env with OS fallback. */
 function resolveHome(env) {
@@ -26,21 +27,18 @@ function getVoiceCallConfigStore(config) {
 	}
 	return "";
 }
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
 /** Return Voice Call agents whose templated core session stores need migration. */
 function resolveSessionStoreAgentIds(params) {
 	const agentIds = /* @__PURE__ */ new Set();
 	for (const pluginId of ["voice-call", "@openclaw/voice-call"]) {
 		const entry = params.cfg.plugins?.entries?.[pluginId];
 		if (!entry) continue;
-		const config = entry.config === void 0 ? {} : asRecord(entry.config);
+		const config = entry.config === void 0 ? {} : asOptionalRecord(entry.config);
 		if (!config) continue;
 		agentIds.add(normalizeAgentId(typeof config.agentId === "string" ? config.agentId : void 0));
-		const numbers = asRecord(config.numbers);
+		const numbers = asOptionalRecord(config.numbers);
 		for (const route of Object.values(numbers ?? {})) {
-			const agentId = asRecord(route)?.agentId;
+			const agentId = asOptionalRecord(route)?.agentId;
 			if (typeof agentId === "string") agentIds.add(normalizeAgentId(agentId));
 		}
 	}
@@ -62,6 +60,8 @@ function describeVoiceCallSchemaMigration(migration) {
 	switch (migration.kind) {
 		case "agent-databases-composite-primary-key": return "agent database registry primary key -> agent_id,path";
 		case "audit-events-v2": return "audit event ledger -> versioned message lifecycle schema";
+		case "commitments-retirement-v7": return "retired commitments storage -> removed table and indexes";
+		case "worker-placement-execution-mode-v8": return "cloud worker placements -> execution-mode claims";
 		case "operator-approvals-system-agent": return "operator approvals -> OpenClaw system changes";
 		case "session-watch-cursor-provenance-v4": return "session watch cursors -> provenance column";
 		case "strict-tables-v3": return "tables -> SQLite STRICT typing";
@@ -185,12 +185,14 @@ const stateMigrations = [{
 	id: "voice-call-calls-jsonl-to-plugin-state",
 	label: "Voice Call call log",
 	async detectLegacyState(params) {
+		const { detectOpenClawStateDatabaseSchemaMigrations } = await import("openclaw/plugin-sdk/doctor-repair-runtime");
 		const { entries } = await readLegacyCallRecords(resolveVoiceCallLegacyCallLogPath(resolveVoiceCallStorePath(params)));
 		const schemaMigrations = detectOpenClawStateDatabaseSchemaMigrations({ env: resolveVoiceCallStateDatabaseEnv(params) });
 		if (entries.length === 0 && schemaMigrations.length === 0) return null;
 		return { preview: [...schemaMigrations.map((migration) => `- Voice Call SQLite schema: ${describeVoiceCallSchemaMigration(migration)}`), ...entries.length > 0 ? [`- Voice Call call log: ${entries.length} ${entries.length === 1 ? "record" : "records"} -> plugin state (${CALL_RECORD_EVENTS_NAMESPACE})`] : []] };
 	},
 	async migrateLegacyState(params) {
+		const { detectOpenClawStateDatabaseSchemaMigrations, repairOpenClawStateDatabaseSchema } = await import("openclaw/plugin-sdk/doctor-repair-runtime");
 		const changes = [];
 		const warnings = [];
 		const filePath = resolveVoiceCallLegacyCallLogPath(resolveVoiceCallStorePath(params));

package/dist/{guarded-json-api-Dxhe25Zi.js → guarded-json-api-DEDwgf4J.js}

@@ -1,12 +1,13 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-CQtitvRd.js";
-import { n as markWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-aaP79dI8.js";
+import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-F13eJ4pp.js";
+import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-FQrEGVSM.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { redactSensitiveText, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { isIP } from "node:net";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 //#region extensions/voice-call/src/webhook-security.ts
 const twilioReplayCache = createWebhookReplayCache();
@@ -57,7 +58,17 @@ function extractHostname(hostHeader) {
 	if (hostHeader.startsWith("[")) {
 		const endBracket = hostHeader.indexOf("]");
 		if (endBracket === -1) return null;
-		return normalizeLowercaseStringOrEmpty(hostHeader.slice(1, endBracket));
+		const suffix = hostHeader.slice(endBracket + 1);
+		if (suffix && !/^:\d+$/u.test(suffix)) return null;
+		const hostname = hostHeader.slice(1, endBracket);
+		if (isIP(hostname) !== 6) return null;
+		try {
+			const parsedHostname = new URL(`https://[${hostname}]/`).hostname;
+			if (!parsedHostname.startsWith("[") || !parsedHostname.endsWith("]")) return null;
+			return normalizeLowercaseStringOrEmpty(parsedHostname.slice(1, -1));
+		} catch {
+			return null;
+		}
 	}
 	if (hostHeader.includes("@")) return null;
 	const hostname = hostHeader.split(":").at(0);
@@ -78,6 +89,9 @@ function normalizeAllowedHosts(allowedHosts) {
 	}
 	return normalized.size > 0 ? normalized : null;
 }
+function formatHostnameForUrl(hostname) {
+	return isIP(hostname) === 6 ? `[${hostname}]` : hostname;
+}
 /**
 * Reconstruct the public webhook URL from request headers.
 *
@@ -147,15 +161,13 @@ function reconstructWebhookUrl(ctx, options) {
 		const parsed = new URL(ctx.url);
 		path = parsed.pathname + parsed.search;
 	} catch {}
-	return `${proto}://${host}${path}`;
+	return `${proto}://${formatHostnameForUrl(host)}${path}`;
 }
 function buildTwilioVerificationUrl(ctx, publicUrl, urlOptions) {
 	if (!publicUrl) return reconstructWebhookUrl(ctx, urlOptions);
 	try {
 		const base = new URL(publicUrl);
-		const requestUrl = new URL(ctx.url);
-		base.pathname = requestUrl.pathname;
-		base.search = requestUrl.search;
+		base.search = new URL(ctx.url).search;
 		return base.toString();
 	} catch {
 		return publicUrl;
@@ -244,8 +256,7 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(telnyxReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(telnyxReplayCache, replayKey)
 		};
 	}
 	if (!publicKey) return {
@@ -258,8 +269,8 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		ok: false,
 		reason: "Missing signature or timestamp header"
 	};
-	const eventTimeSec = Number.parseInt(timestamp, 10);
-	if (!Number.isFinite(eventTimeSec)) return {
+	const eventTimeSec = /^(?:0|[1-9]\d*)$/.test(timestamp) ? Number(timestamp) : void 0;
+	if (eventTimeSec === void 0 || !Number.isSafeInteger(eventTimeSec)) return {
 		ok: false,
 		reason: "Invalid timestamp header"
 	};
@@ -281,8 +292,7 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		const replayKey = `telnyx:${sha256Hex(`${timestamp}\n${canonicalSignature}\n${ctx.rawBody}`)}`;
 		return {
 			ok: true,
-			isReplay: markWebhookReplay(telnyxReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(telnyxReplayCache, replayKey)
 		};
 	} catch (err) {
 		return {
@@ -300,8 +310,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const signature = getHeader(ctx.headers, "x-twilio-signature");
@@ -327,8 +336,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			verificationUrl,
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const variants = /* @__PURE__ */ new Set();
@@ -351,8 +359,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			verificationUrl: candidateUrl,
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const isNgrokFreeTier = verificationUrl.includes(".ngrok-free.app") || verificationUrl.includes(".ngrok.io");
@@ -444,8 +451,7 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(plivoReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	const signatureV3 = getHeader(ctx.headers, "x-plivo-signature-v3");
@@ -495,13 +501,11 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 			postParams,
 			nonce: nonceV3
 		});
-		const isReplay = markWebhookReplay(plivoReplayCache, replayKey);
 		return {
 			ok: true,
 			version: "v3",
 			verificationUrl,
-			isReplay,
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	if (signatureV2 && nonceV2) {
@@ -517,13 +521,11 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 			reason: "Invalid Plivo V2 signature"
 		};
 		const replayKey = createPlivoV2ReplayKey(verificationUrl, nonceV2);
-		const isReplay = markWebhookReplay(plivoReplayCache, replayKey);
 		return {
 			ok: true,
 			version: "v2",
 			verificationUrl,
-			isReplay,
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	return {
@@ -543,26 +545,20 @@ async function cancelProviderResponseBody(response) {
 function appendTruncatedSuffix(text) {
 	return `${text.trimEnd()}${TRUNCATED_SUFFIX}`;
 }
-async function readProviderResponseTextWithLimit(params) {
-	if (params.truncateOnLimit) {
-		const prefix = await readResponseTextPrefix(params.response, params.maxBytes);
-		return prefix.truncated ? appendTruncatedSuffix(prefix.text) : prefix.text;
+async function readVoiceCallProviderJsonResponse(response, malformedJsonMessage) {
+	const body = await readResponseWithLimit(response, PROVIDER_JSON_RESPONSE_MAX_BYTES, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
+	if (body.byteLength === 0) return;
+	try {
+		const text = new TextDecoder("utf-8", { fatal: true }).decode(body);
+		return JSON.parse(text);
+	} catch (cause) {
+		throw new Error(malformedJsonMessage, { cause });
 	}
-	const body = await readResponseWithLimit(params.response, params.maxBytes, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
-	return new TextDecoder().decode(body);
-}
-async function readProviderJsonResponseText(response) {
-	return await readProviderResponseTextWithLimit({
-		response,
-		maxBytes: PROVIDER_JSON_RESPONSE_MAX_BYTES
-	});
 }
 async function readProviderErrorResponseSnippet(response) {
-	return await readProviderResponseTextWithLimit({
-		response,
-		maxBytes: PROVIDER_ERROR_RESPONSE_MAX_BYTES,
-		truncateOnLimit: true
-	});
+	const prefix = await readResponseTextPrefix(response, PROVIDER_ERROR_RESPONSE_MAX_BYTES);
+	const text = redactSensitiveText(prefix.text, { mode: "tools" });
+	return prefix.truncated ? appendTruncatedSuffix(text) : text;
 }
 //#endregion
 //#region extensions/voice-call/src/providers/shared/guarded-json-api.ts
@@ -589,16 +585,10 @@ async function guardedJsonApiRequest(params) {
 			const errorText = await readProviderErrorResponseSnippet(response);
 			throw new Error(`${params.errorPrefix}: ${response.status} ${errorText}`);
 		}
-		const text = await readProviderJsonResponseText(response);
-		if (!text) return;
-		try {
-			return JSON.parse(text);
-		} catch {
-			throw new Error(`${params.errorPrefix}: malformed JSON response`);
-		}
+		return await readVoiceCallProviderJsonResponse(response, `${params.errorPrefix}: malformed JSON response`);
 	} finally {
 		await release();
 	}
 }
 //#endregion
-export { reconstructWebhookUrl as a, verifyTwilioWebhook as c, readProviderJsonResponseText as i, cancelProviderResponseBody as n, verifyPlivoWebhook as o, readProviderErrorResponseSnippet as r, verifyTelnyxWebhook as s, guardedJsonApiRequest as t };
+export { reconstructWebhookUrl as a, verifyTwilioWebhook as c, readVoiceCallProviderJsonResponse as i, cancelProviderResponseBody as n, verifyPlivoWebhook as o, readProviderErrorResponseSnippet as r, verifyTelnyxWebhook as s, guardedJsonApiRequest as t };