@openclaw/voice-call 2026.7.2-beta.7 → 2026.8.1-beta.3

package/README.md

@@ -38,7 +38,7 @@ Put under `plugins.entries.voice-call.config`:
   provider: "twilio", // or "telnyx" | "plivo" | "mock"
   fromNumber: "+15550001234",
   toNumber: "+15550005678",
-  sessionScope: "per-phone", // or "per-call"
+  sessionScope: "per-phone", // or "per-call" | "main"
 
   twilio: {
     accountSid: "ACxxxxxxxx",
@@ -67,7 +67,7 @@ Put under `plugins.entries.voice-call.config`:
   // Public exposure (pick one):
   // publicUrl: "https://example.ngrok.app/voice/webhook",
   // tunnel: { provider: "ngrok" },
-  // tailscale: { mode: "funnel", path: "/voice/webhook" }
+  // tailscale: { mode: "funnel", port: 8443, path: "/voice/webhook" }
 
   outbound: {
     defaultMode: "notify", // or "conversation"
@@ -98,13 +98,14 @@ Put under `plugins.entries.voice-call.config`:
 Notes:
 
 - Twilio/Telnyx/Plivo require a **publicly reachable** webhook URL.
+- `tailscale.port` defaults to `443` and owns the external HTTPS port for both legacy `tailscale.mode` and unified Tailscale tunnel providers. Funnel supports `443`, `8443`, or `10000`; Serve accepts any valid TCP port.
 - Twilio defaults to US1. For a non-US Region, set `twilio.region` to `ie1` or `au1` and use credentials created in that Region; see [Twilio's regional REST API guide](https://www.twilio.com/docs/global-infrastructure/using-the-twilio-rest-api-in-a-non-us-region).
 - `mock` is a local dev provider (no network calls).
 - Telnyx requires `telnyx.publicKey` (or `TELNYX_PUBLIC_KEY`) unless `skipSignatureVerification` is true.
 - Runtime accepts canonical config only. If older configs still use `provider: "log"`, `twilio.from`, or legacy `streaming.*` OpenAI keys, run `openclaw doctor --fix` to rewrite them.
 - advanced webhook, streaming, and tunnel notes: `https://docs.openclaw.ai/plugins/voice-call`
 - `responseModel` is optional. When unset, voice responses use the runtime default model.
-- `sessionScope` defaults to `per-phone`, preserving caller memory across calls. Use `per-call` for reception, booking, IVR, and bridge flows where each carrier call should start fresh.
+- `sessionScope` defaults to `per-phone`, preserving caller memory across calls. Use `per-call` for reception, booking, IVR, and bridge flows where each carrier call should start fresh. Use `main` to share the configured agent's main session, honoring core `session.mainKey` and global scope.
 - `realtime.consultThinkingLevel` is optional. When set, it overrides the thinking level used by the model behind realtime `openclaw_agent_consult` calls.
 - `realtime.consultFastMode` is optional. When set, it toggles fast mode for realtime `openclaw_agent_consult` calls.
 

package/dist/doctor-contract-api.js

@@ -1,9 +1,10 @@
-import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-nYL-yM0S.js";
+import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-51_oC_xn.js";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
-import { archiveLegacyStateSource, detectOpenClawStateDatabaseSchemaMigrations, repairOpenClawStateDatabaseSchema } from "openclaw/plugin-sdk/runtime-doctor";
+import { archiveLegacyStateSource } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 //#region extensions/voice-call/doctor-contract-api.ts
 /** Resolve home from doctor env with OS fallback. */
 function resolveHome(env) {
@@ -26,21 +27,18 @@ function getVoiceCallConfigStore(config) {
 	}
 	return "";
 }
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
 /** Return Voice Call agents whose templated core session stores need migration. */
 function resolveSessionStoreAgentIds(params) {
 	const agentIds = /* @__PURE__ */ new Set();
 	for (const pluginId of ["voice-call", "@openclaw/voice-call"]) {
 		const entry = params.cfg.plugins?.entries?.[pluginId];
 		if (!entry) continue;
-		const config = entry.config === void 0 ? {} : asRecord(entry.config);
+		const config = entry.config === void 0 ? {} : asOptionalRecord(entry.config);
 		if (!config) continue;
 		agentIds.add(normalizeAgentId(typeof config.agentId === "string" ? config.agentId : void 0));
-		const numbers = asRecord(config.numbers);
+		const numbers = asOptionalRecord(config.numbers);
 		for (const route of Object.values(numbers ?? {})) {
-			const agentId = asRecord(route)?.agentId;
+			const agentId = asOptionalRecord(route)?.agentId;
 			if (typeof agentId === "string") agentIds.add(normalizeAgentId(agentId));
 		}
 	}
@@ -61,7 +59,10 @@ function resolveVoiceCallStateDatabaseEnv(params) {
 function describeVoiceCallSchemaMigration(migration) {
 	switch (migration.kind) {
 		case "agent-databases-composite-primary-key": return "agent database registry primary key -> agent_id,path";
+		case "agent-databases-relative-paths-v9": return "agent database registry paths -> state-relative paths";
 		case "audit-events-v2": return "audit event ledger -> versioned message lifecycle schema";
+		case "commitments-retirement-v7": return "retired commitments storage -> removed table and indexes";
+		case "worker-placement-execution-mode-v8": return "cloud worker placements -> execution-mode claims";
 		case "operator-approvals-system-agent": return "operator approvals -> OpenClaw system changes";
 		case "session-watch-cursor-provenance-v4": return "session watch cursors -> provenance column";
 		case "strict-tables-v3": return "tables -> SQLite STRICT typing";
@@ -185,12 +186,14 @@ const stateMigrations = [{
 	id: "voice-call-calls-jsonl-to-plugin-state",
 	label: "Voice Call call log",
 	async detectLegacyState(params) {
+		const { detectOpenClawStateDatabaseSchemaMigrations } = await import("openclaw/plugin-sdk/doctor-repair-runtime");
 		const { entries } = await readLegacyCallRecords(resolveVoiceCallLegacyCallLogPath(resolveVoiceCallStorePath(params)));
 		const schemaMigrations = detectOpenClawStateDatabaseSchemaMigrations({ env: resolveVoiceCallStateDatabaseEnv(params) });
 		if (entries.length === 0 && schemaMigrations.length === 0) return null;
 		return { preview: [...schemaMigrations.map((migration) => `- Voice Call SQLite schema: ${describeVoiceCallSchemaMigration(migration)}`), ...entries.length > 0 ? [`- Voice Call call log: ${entries.length} ${entries.length === 1 ? "record" : "records"} -> plugin state (${CALL_RECORD_EVENTS_NAMESPACE})`] : []] };
 	},
 	async migrateLegacyState(params) {
+		const { detectOpenClawStateDatabaseSchemaMigrations, repairOpenClawStateDatabaseSchema } = await import("openclaw/plugin-sdk/doctor-repair-runtime");
 		const changes = [];
 		const warnings = [];
 		const filePath = resolveVoiceCallLegacyCallLogPath(resolveVoiceCallStorePath(params));

package/dist/{guarded-json-api-DS9sZa3C.js → guarded-json-api-j4OEG0fR.js}

@@ -1,12 +1,12 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-D0UJiLfi.js";
-import { n as markWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-aaP79dI8.js";
+import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-DK8kPCGC.js";
+import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-FQrEGVSM.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { redactSensitiveText, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { isIP } from "node:net";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 //#region extensions/voice-call/src/webhook-security.ts
@@ -256,8 +256,7 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(telnyxReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(telnyxReplayCache, replayKey)
 		};
 	}
 	if (!publicKey) return {
@@ -293,8 +292,7 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		const replayKey = `telnyx:${sha256Hex(`${timestamp}\n${canonicalSignature}\n${ctx.rawBody}`)}`;
 		return {
 			ok: true,
-			isReplay: markWebhookReplay(telnyxReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(telnyxReplayCache, replayKey)
 		};
 	} catch (err) {
 		return {
@@ -312,8 +310,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const signature = getHeader(ctx.headers, "x-twilio-signature");
@@ -339,8 +336,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			verificationUrl,
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const variants = /* @__PURE__ */ new Set();
@@ -363,8 +359,7 @@ function verifyTwilioWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			verificationUrl: candidateUrl,
-			isReplay: markWebhookReplay(twilioReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(twilioReplayCache, replayKey)
 		};
 	}
 	const isNgrokFreeTier = verificationUrl.includes(".ngrok-free.app") || verificationUrl.includes(".ngrok.io");
@@ -456,8 +451,7 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 		return {
 			ok: true,
 			reason: "verification skipped (dev mode)",
-			isReplay: markWebhookReplay(plivoReplayCache, replayKey),
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	const signatureV3 = getHeader(ctx.headers, "x-plivo-signature-v3");
@@ -507,13 +501,11 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 			postParams,
 			nonce: nonceV3
 		});
-		const isReplay = markWebhookReplay(plivoReplayCache, replayKey);
 		return {
 			ok: true,
 			version: "v3",
 			verificationUrl,
-			isReplay,
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	if (signatureV2 && nonceV2) {
@@ -529,13 +521,11 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 			reason: "Invalid Plivo V2 signature"
 		};
 		const replayKey = createPlivoV2ReplayKey(verificationUrl, nonceV2);
-		const isReplay = markWebhookReplay(plivoReplayCache, replayKey);
 		return {
 			ok: true,
 			version: "v2",
 			verificationUrl,
-			isReplay,
-			verifiedRequestKey: replayKey
+			...reserveWebhookReplay(plivoReplayCache, replayKey)
 		};
 	}
 	return {
@@ -555,26 +545,20 @@ async function cancelProviderResponseBody(response) {
 function appendTruncatedSuffix(text) {
 	return `${text.trimEnd()}${TRUNCATED_SUFFIX}`;
 }
-async function readProviderResponseTextWithLimit(params) {
-	if (params.truncateOnLimit) {
-		const prefix = await readResponseTextPrefix(params.response, params.maxBytes);
-		return prefix.truncated ? appendTruncatedSuffix(prefix.text) : prefix.text;
+async function readVoiceCallProviderJsonResponse(response, malformedJsonMessage) {
+	const body = await readResponseWithLimit(response, PROVIDER_JSON_RESPONSE_MAX_BYTES, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
+	if (body.byteLength === 0) return;
+	try {
+		const text = new TextDecoder("utf-8", { fatal: true }).decode(body);
+		return JSON.parse(text);
+	} catch (cause) {
+		throw new Error(malformedJsonMessage, { cause });
 	}
-	const body = await readResponseWithLimit(params.response, params.maxBytes, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
-	return new TextDecoder().decode(body);
-}
-async function readProviderJsonResponseText(response) {
-	return await readProviderResponseTextWithLimit({
-		response,
-		maxBytes: PROVIDER_JSON_RESPONSE_MAX_BYTES
-	});
 }
 async function readProviderErrorResponseSnippet(response) {
-	return await readProviderResponseTextWithLimit({
-		response,
-		maxBytes: PROVIDER_ERROR_RESPONSE_MAX_BYTES,
-		truncateOnLimit: true
-	});
+	const prefix = await readResponseTextPrefix(response, PROVIDER_ERROR_RESPONSE_MAX_BYTES);
+	const text = redactSensitiveText(prefix.text, { mode: "tools" });
+	return prefix.truncated ? appendTruncatedSuffix(text) : text;
 }
 //#endregion
 //#region extensions/voice-call/src/providers/shared/guarded-json-api.ts
@@ -601,16 +585,10 @@ async function guardedJsonApiRequest(params) {
 			const errorText = await readProviderErrorResponseSnippet(response);
 			throw new Error(`${params.errorPrefix}: ${response.status} ${errorText}`);
 		}
-		const text = await readProviderJsonResponseText(response);
-		if (!text) return;
-		try {
-			return JSON.parse(text);
-		} catch {
-			throw new Error(`${params.errorPrefix}: malformed JSON response`);
-		}
+		return await readVoiceCallProviderJsonResponse(response, `${params.errorPrefix}: malformed JSON response`);
 	} finally {
 		await release();
 	}
 }
 //#endregion
-export { reconstructWebhookUrl as a, verifyTwilioWebhook as c, readProviderJsonResponseText as i, cancelProviderResponseBody as n, verifyPlivoWebhook as o, readProviderErrorResponseSnippet as r, verifyTelnyxWebhook as s, guardedJsonApiRequest as t };
+export { reconstructWebhookUrl as a, verifyTwilioWebhook as c, readVoiceCallProviderJsonResponse as i, cancelProviderResponseBody as n, verifyPlivoWebhook as o, readProviderErrorResponseSnippet as r, verifyTelnyxWebhook as s, guardedJsonApiRequest as t };