@openclaw/voice-call 2026.8.1-beta.3 → 2026.8.1

package/dist/doctor-contract-api.js

@@ -1,4 +1,4 @@
-import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-51_oC_xn.js";
+import { a as CALL_RECORD_EVENT_META_MAX_ENTRIES, c as buildVoiceCallLegacyJsonlEventKey, f as parseVoiceCallRecordLine, h as resolveVoiceCallLegacyCallLogPath, i as CALL_RECORD_EVENT_CHUNKS_NAMESPACE, m as prepareVoiceCallRecordForStorage, n as CALL_RECORD_CHUNK_MAX_ENTRIES, o as MAX_CALL_RECORD_EVENTS, r as CALL_RECORD_EVENTS_NAMESPACE, s as RAW_CALL_RECORD_CHUNK_BYTES, t as resolveDefaultVoiceCallStoreDir } from "./store-path-Cf6k3F2U.js";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
@@ -14,7 +14,7 @@ function resolveHome(env) {
 function resolveUserPath(input, env) {
 	const trimmed = input.trim();
 	if (!trimmed) return trimmed;
-	if (trimmed.startsWith("~")) return path.resolve(trimmed.replace(/^~(?=$|[\\/])/, resolveHome(env)));
+	if (trimmed.startsWith("~")) return path.resolve(trimmed.replace(/^~(?=$|[\\/])/, () => resolveHome(env)));
 	return path.resolve(trimmed);
 }
 /** Read the configured voice-call store path from either package id. */
@@ -61,7 +61,13 @@ function describeVoiceCallSchemaMigration(migration) {
 		case "agent-databases-composite-primary-key": return "agent database registry primary key -> agent_id,path";
 		case "agent-databases-relative-paths-v9": return "agent database registry paths -> state-relative paths";
 		case "audit-events-v2": return "audit event ledger -> versioned message lifecycle schema";
-		case "commitments-retirement-v7": return "retired commitments storage -> removed table and indexes";
+		case "commitments-retirement-v7": return "retired commitments storage -> discarded rows, table, and indexes";
+		case "state-table-retirement-v10": return "retired shared-state tables -> removed tables and indexes";
+		case "state-table-retirement-v11": return "retired skill curator tables -> removed tables and indexes";
+		case "singleton-state-foldin-v12": return "singleton state tables -> shared configuration state";
+		case "state-consolidation-v13": return "cron jobs and subagent runs -> canonical JSON storage";
+		case "creator-namespace-v14": return "cron creators -> explicit principal namespaces";
+		case "conversation-binding-targets-v15": return "conversation bindings -> exact target keys without agent/session projections";
 		case "worker-placement-execution-mode-v8": return "cloud worker placements -> execution-mode claims";
 		case "operator-approvals-system-agent": return "operator approvals -> OpenClaw system changes";
 		case "session-watch-cursor-provenance-v4": return "session watch cursors -> provenance column";
@@ -69,7 +75,6 @@ function describeVoiceCallSchemaMigration(migration) {
 	}
 	return migration.kind;
 }
-/** Return true when a path exists and is a file. */
 /** Build the plugin state key for one migrated event chunk. */
 function buildChunkKey(eventKey, index) {
 	return `${eventKey}:chunk:${String(index).padStart(4, "0")}`;
@@ -139,7 +144,6 @@ async function readLegacyCallRecords(filePath) {
 		warnings
 	};
 }
-/** Archive the legacy JSONL source after a complete migration. */
 /** Select newest missing records that fit remaining plugin state capacity. */
 async function selectEntriesForImport(params) {
 	const existingEventKeys = new Set((await params.eventStore.entries()).map((entry) => entry.key));

package/dist/{guarded-json-api-j4OEG0fR.js → guarded-json-api-CQXCe4aR.js}

@@ -1,6 +1,6 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
-import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-DK8kPCGC.js";
+import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-q02qkX8F.js";
 import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-FQrEGVSM.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";

package/dist/index.js

@@ -1,8 +1,8 @@
 import { definePluginEntry, sleep } from "./runtime-api.js";
 import "./api.js";
 import { VOICE_CALL_CLI_DESCRIPTOR } from "./cli-output-mode.js";
-import { C as resolveVoiceCallStreamExposurePaths, b as resolveVoiceCallConfig, c as resolveWebhookExposureStatus, d as setupTailscaleExposureRoutes, g as resolveUserPath, l as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime, u as getTailscaleSelfInfo, w as validateProviderConfig, y as VoiceCallConfigSchema } from "./runtime-entry-DK8kPCGC.js";
-import { b as setVoiceCallStateRuntime, d as loadActiveCallsFromStore, l as findCallMatchesInStore, t as resolveDefaultVoiceCallStoreDir, u as getCallHistoryFromStore } from "./store-path-51_oC_xn.js";
+import { C as resolveVoiceCallStreamExposurePaths, b as resolveVoiceCallConfig, c as resolveWebhookExposureStatus, d as setupTailscaleExposureRoutes, g as resolveUserPath, l as cleanupTailscaleExposureRoute, t as createVoiceCallRuntime, u as getTailscaleSelfInfo, w as validateProviderConfig, y as VoiceCallConfigSchema } from "./runtime-entry-q02qkX8F.js";
+import { b as setVoiceCallStateRuntime, d as loadActiveCallsFromStore, l as findCallMatchesInStore, t as resolveDefaultVoiceCallStoreDir, u as getCallHistoryFromStore } from "./store-path-Cf6k3F2U.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ErrorCodes, callGatewayFromCli, errorShape, isGatewayClientRequestError, isGatewayTransportError, redactSensitiveUrlLikeString } from "openclaw/plugin-sdk/gateway-runtime";
 import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";

package/dist/{plivo-BbVnahnQ.js → plivo-Ct5BT5LQ.js}

@@ -1,5 +1,5 @@
-import { _ as escapeXml, s as getHeader } from "./runtime-entry-DK8kPCGC.js";
-import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-j4OEG0fR.js";
+import { _ as escapeXml, s as getHeader } from "./runtime-entry-q02qkX8F.js";
+import { a as reconstructWebhookUrl, o as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-CQXCe4aR.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/plivo.ts

package/dist/{realtime-handler-BaMEKbmJ.js → realtime-handler-CSK1A1Gg.js}

@@ -1,8 +1,8 @@
-import { T as REALTIME_VOICE_END_CALL_TOOL_NAME, o as canonicalizeVoiceCallMediaBase64, x as resolveVoiceCallPublicPathPrefix } from "./runtime-entry-DK8kPCGC.js";
+import { T as REALTIME_VOICE_END_CALL_TOOL_NAME, o as canonicalizeVoiceCallMediaBase64, x as resolveVoiceCallPublicPathPrefix } from "./runtime-entry-q02qkX8F.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { asNullableRecord, asOptionalObjectRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/runtime-env";
-import { REALTIME_VOICE_AGENT_CONSULT_TOOL_NAME, buildRealtimeVoiceAgentConsultWorkingResponse, calculateMulawRms, createRealtimeVoiceSessionHarness, createSpeechThresholdGate, readRealtimeVoiceConsultQuestion, readSpeakableRealtimeVoiceToolResult } from "openclaw/plugin-sdk/realtime-voice";
+import { REALTIME_VOICE_AGENT_CONSULT_TOOL_NAME, REALTIME_VOICE_AUDIO_FORMAT_G711_ULAW_8KHZ, buildRealtimeVoiceAgentConsultWorkingResponse, calculateMulawRms, createRealtimeVoiceSessionHarness, createSpeechThresholdGate, readRealtimeVoiceConsultQuestion, readSpeakableRealtimeVoiceToolResult } from "openclaw/plugin-sdk/realtime-voice";
 import { normalizeWebhookPath } from "openclaw/plugin-sdk/webhook-ingress";
 import { isFutureDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { randomUUID } from "node:crypto";
@@ -821,6 +821,8 @@ var RealtimeCallHandler = class {
 		});
 		const interruptResponseOnInputAudio = typeof providerConfig.interruptResponseOnInputAudio === "boolean" ? providerConfig.interruptResponseOnInputAudio : void 0;
 		const nativeConsultOwner = {};
+		let provisionalCloseReason;
+		let sessionClosed = false;
 		const userTranscriptAdoption = this.beginUserTranscriptOwnerAdoption(callId);
 		const userTranscriptOwner = userTranscriptAdoption.owner;
 		const bridgeParams = {
@@ -828,6 +830,7 @@ var RealtimeCallHandler = class {
 			cfg: this.coreConfig,
 			agentId,
 			providerConfig,
+			audioFormat: REALTIME_VOICE_AUDIO_FORMAT_G711_ULAW_8KHZ,
 			interruptResponseOnInputAudio,
 			instructions,
 			tools: this.config.tools,
@@ -856,7 +859,7 @@ var RealtimeCallHandler = class {
 			},
 			onTranscript: (role, text, isFinal) => {
 				const owner = nativeConsultOwner.current;
-				if (!this.getUserTranscriptState(callId, userTranscriptOwner) || owner && !this.isActiveBridgeOwner(callId, owner)) return;
+				if (provisionalCloseReason || !this.getUserTranscriptState(callId, userTranscriptOwner) || owner && !this.isActiveBridgeOwner(callId, owner)) return;
 				const turnId = harness.ensureTurn();
 				const eventType = role === "assistant" ? isFinal ? "output.text.done" : "output.text.delta" : isFinal ? "transcript.done" : "transcript.delta";
 				const payload = role === "assistant" ? { text } : {
@@ -1013,38 +1016,48 @@ var RealtimeCallHandler = class {
 				});
 			},
 			onClose: (reason) => {
-				const owner = nativeConsultOwner.current;
-				const ownsCallState = owner ? this.isActiveBridgeOwner(callId, owner) : false;
-				if (owner) {
-					this.clearActiveBridgeMappings(callId, callSid, owner);
-					this.cancelConsultSession(callId, owner);
-				}
-				if (ownsCallState) this.clearUserTranscriptState(callId, userTranscriptOwner);
 				harness.finishOutputAudio(reason);
 				harness.emit({
 					type: "session.closed",
 					payload: { reason },
 					final: true
 				});
-				if (reason !== "error") return;
+				const owner = nativeConsultOwner.current;
+				if (!owner) {
+					provisionalCloseReason ??= reason;
+					return;
+				}
+				const ownsCallState = this.isActiveBridgeOwner(callId, owner);
+				this.clearActiveBridgeMappings(callId, callSid, owner);
+				this.cancelConsultSession(callId, owner);
+				if (ownsCallState) this.clearUserTranscriptState(callId, userTranscriptOwner);
+				if (reason === "completed" && (!ownsCallState || sessionClosed)) return;
 				this.streamDisconnectLifecycle.retire(callSid, streamSid);
-				if (ws.readyState === WebSocket$1.OPEN) ws.close(1011, "Bridge disconnected");
-				if (owner && !ownsCallState || !owner && hadPredecessorOnAdmission && this.activeBridgesByCallId.has(callId)) return;
-				emitCallEnd("error");
+				if (ws.readyState === WebSocket$1.OPEN) ws.close(reason === "error" ? 1011 : 1e3, "Bridge disconnected");
+				if (ownsCallState) emitCallEnd(reason);
 			}
 		};
-		let session;
+		let candidate;
 		try {
-			session = harness.createBridge(bridgeParams);
+			candidate = harness.createBridge(bridgeParams);
 		} catch (error) {
+			console.error("[voice-call] Failed to create realtime bridge:", error);
+		}
+		if (!candidate || provisionalCloseReason) {
 			this.rollbackUserTranscriptOwnerAdoption(callId, userTranscriptAdoption);
+			try {
+				candidate?.close();
+			} catch (error) {
+				console.warn(`[voice-call] Failed to close realtime bridge ${callSid}: ${formatErrorMessage(error)}`);
+			}
 			harness.close();
 			audioPacer.close();
-			if (!hadPredecessorOnAdmission || !this.activeBridgesByCallId.has(callId)) emitCallEnd("error");
-			if (ws.readyState === WebSocket$1.OPEN) ws.close(1011, "Failed to create realtime bridge");
-			console.error("[voice-call] Failed to create realtime bridge:", error);
+			const reason = provisionalCloseReason ?? "error";
+			if (!hadPredecessorOnAdmission || !this.activeBridgesByCallId.has(callId)) emitCallEnd(reason);
+			if (ws.readyState === WebSocket$1.OPEN) ws.close(reason === "error" ? 1011 : 1e3, "Failed to create realtime bridge");
 			return null;
 		}
+		const session = candidate;
 		this.commitUserTranscriptOwnerAdoption(callId, userTranscriptAdoption);
 		nativeConsultOwner.current = session;
 		providerHandlesInputAudioBargeIn = session.bridge.handlesInputAudioBargeIn ?? providerHandlesInputAudioBargeIn;
@@ -1069,7 +1082,6 @@ var RealtimeCallHandler = class {
 			sendAudioToSession(audio);
 		};
 		const closeSession = session.close.bind(session);
-		let sessionClosed = false;
 		session.close = () => {
 			if (sessionClosed) return;
 			sessionClosed = true;

package/dist/{response-generator-tjyX4tDq.js → response-generator-xbT37lYx.js}

@@ -1,4 +1,4 @@
-import { S as resolveVoiceCallSessionKey, h as resolveCallAgentId, m as resolveVoiceResponseModel } from "./runtime-entry-DK8kPCGC.js";
+import { S as resolveVoiceCallSessionKey, h as resolveCallAgentId, m as resolveVoiceResponseModel } from "./runtime-entry-q02qkX8F.js";
 import { filterStringEntries, isRecord, normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import crypto from "node:crypto";

package/dist/{runtime-entry-DK8kPCGC.js → runtime-entry-q02qkX8F.js}

@@ -1,7 +1,7 @@
 import { TtsConfigSchema, isBlockedHostnameOrIp, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText } from "./runtime-api.js";
 import "./api.js";
 import { t as TWILIO_REGIONS } from "./twilio-region-4fkgz3UG.js";
-import { _ as releaseRejectedProviderCall, b as setVoiceCallStateRuntime, d as loadActiveCallsFromStore, g as appendCallReplayKey, l as findCallMatchesInStore, p as persistCallRecord, t as resolveDefaultVoiceCallStoreDir, u as getCallHistoryFromStore, v as rememberManagerReplayKey, x as TerminalStates, y as reserveRejectedProviderCall } from "./store-path-51_oC_xn.js";
+import { _ as releaseRejectedProviderCall, b as setVoiceCallStateRuntime, d as loadActiveCallsFromStore, g as appendCallReplayKey, l as findCallMatchesInStore, p as persistCallRecord, t as resolveDefaultVoiceCallStoreDir, u as getCallHistoryFromStore, v as rememberManagerReplayKey, x as TerminalStates, y as reserveRejectedProviderCall } from "./store-path-Cf6k3F2U.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeAgentId, parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
@@ -1646,7 +1646,7 @@ function resolveUserPath(input) {
 	const trimmed = input.trim();
 	if (!trimmed) return trimmed;
 	if (trimmed.startsWith("~")) {
-		const expanded = trimmed.replace(/^~(?=$|[\\/])/, os.homedir());
+		const expanded = trimmed.replace(/^~(?=$|[\\/])/, () => os.homedir());
 		return path.resolve(expanded);
 	}
 	return path.resolve(trimmed);
@@ -2240,7 +2240,6 @@ async function cleanupTailscaleExposure(config) {
 //#region extensions/voice-call/src/tunnel.ts
 const NGROK_LOG_BUFFER_MAX_CHARS = 16384;
 const NGROK_ERROR_MARKER = "ERR_NGROK";
-const TUNNEL_COMMAND_OUTPUT_MAX_BYTES = 16384;
 const NGROK_STOP_GRACE_MS = 2e3;
 const NGROK_FORCE_KILL_WAIT_MS = 1e3;
 async function terminateNgrokProcess(proc, isClosed) {
@@ -2280,11 +2279,6 @@ function listenForChildStreamErrors(proc, onError) {
 * // Later: await tunnel.stop();
 */
 async function startNgrokTunnel(config) {
-	if (config.authToken) await runNgrokCommand([
-		"config",
-		"add-authtoken",
-		config.authToken
-	]);
 	const args = [
 		"http",
 		String(config.port),
@@ -2295,11 +2289,17 @@ async function startNgrokTunnel(config) {
 	];
 	if (config.domain) args.push("--domain", config.domain);
 	return new Promise((resolve, reject) => {
-		const proc = spawn("ngrok", args, { stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		] });
+		const proc = spawn("ngrok", args, {
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			...config.authToken ? { env: {
+				...process.env,
+				NGROK_AUTHTOKEN: config.authToken
+			} } : {}
+		});
 		let startupSettled = false;
 		let childClosed = false;
 		let publicUrl = null;
@@ -2372,27 +2372,6 @@ async function startNgrokTunnel(config) {
 	});
 }
 /**
-* Run an ngrok command and wait for completion.
-*/
-async function runNgrokCommand(args) {
-	const result = await runCommandWithTimeout(["ngrok", ...args], {
-		killProcessTree: true,
-		maxOutputBytes: TUNNEL_COMMAND_OUTPUT_MAX_BYTES,
-		outputCapture: "tail",
-		timeoutMs: 3e4
-	});
-	if (result.termination === "timeout") throw new Error("ngrok command timed out");
-	if (result.code === 0) return result.stdout;
-	const output = result.stderr ? {
-		text: result.stderr,
-		truncated: Boolean(result.stderrTruncatedBytes)
-	} : {
-		text: result.stdout,
-		truncated: Boolean(result.stdoutTruncatedBytes)
-	};
-	throw new Error(`ngrok command failed: ${formatBoundedChildOutput(output)}`);
-}
-/**
 * Start a Tailscale serve/funnel tunnel.
 */
 async function startTailscaleTunnel(config) {
@@ -3362,7 +3341,7 @@ const MAX_WEBHOOK_BODY_BYTES = WEBHOOK_BODY_READ_DEFAULTS.preAuth.maxBytes;
 const WEBHOOK_BODY_TIMEOUT_MS = WEBHOOK_BODY_READ_DEFAULTS.preAuth.timeoutMs;
 const MISSING_REMOTE_ADDRESS_IN_FLIGHT_KEY = "__voice_call_no_remote__";
 const loadRealtimeTranscriptionRuntime = createLazyRuntimeModule(() => import("./realtime-transcription.runtime-CbJAs5t_.js"));
-const loadResponseGeneratorModule = createLazyRuntimeModule(() => import("./response-generator-tjyX4tDq.js"));
+const loadResponseGeneratorModule = createLazyRuntimeModule(() => import("./response-generator-xbT37lYx.js"));
 function appendRecentTalkEventMetadata(call, event) {
 	const metadata = call.metadata ?? {};
 	const recent = Array.isArray(metadata.recentTalkEvents) ? metadata.recentTalkEvents.filter((entry) => Boolean(entry) && typeof entry === "object" && !Array.isArray(entry)) : [];
@@ -4061,12 +4040,12 @@ const REALTIME_VOICE_CONSULT_SYSTEM_PROMPT = [
 	"Do not print secret values or dump environment variables; only check whether required configuration is present.",
 	"Be accurate, brief, and speakable."
 ].join(" ");
-const loadTelnyxProvider = createLazyRuntimeModule(() => import("./telnyx-DO8dFQcb.js"));
-const loadTwilioProvider = createLazyRuntimeModule(() => import("./twilio-JDt_1nlz.js"));
-const loadPlivoProvider = createLazyRuntimeModule(() => import("./plivo-BbVnahnQ.js"));
+const loadTelnyxProvider = createLazyRuntimeModule(() => import("./telnyx-C9Yizvox.js"));
+const loadTwilioProvider = createLazyRuntimeModule(() => import("./twilio-BLjVv246.js"));
+const loadPlivoProvider = createLazyRuntimeModule(() => import("./plivo-Ct5BT5LQ.js"));
 const loadMockProvider = createLazyRuntimeModule(() => import("./mock-Dv7KxYGt.js"));
 const loadRealtimeVoiceRuntime = createLazyRuntimeModule(() => import("./realtime-voice.runtime-vtdCOWg-.js"));
-const loadRealtimeHandler = createLazyRuntimeModule(() => import("./realtime-handler-BaMEKbmJ.js"));
+const loadRealtimeHandler = createLazyRuntimeModule(() => import("./realtime-handler-CSK1A1Gg.js"));
 function resolveVoiceCallConsultSessionKey(call) {
 	return resolveVoiceCallSessionKey({
 		config: call.config,

package/dist/runtime-entry.js

@@ -1,2 +1,2 @@
-import { t as createVoiceCallRuntime } from "./runtime-entry-DK8kPCGC.js";
+import { t as createVoiceCallRuntime } from "./runtime-entry-q02qkX8F.js";
 export { createVoiceCallRuntime };

package/dist/{store-path-51_oC_xn.js → store-path-Cf6k3F2U.js}

@@ -133,14 +133,7 @@ const { setRuntime: setVoiceCallStateRuntime, tryGetRuntime: getOptionalVoiceCal
 //#region extensions/voice-call/src/manager/replay-keys.ts
 /** Match the existing voice-call webhook replay-cache cardinality. */
 const MAX_MANAGER_REPLAY_KEYS = 1e4;
-function pruneOldestSetEntries(keys, maxEntries) {
-	while (keys.size > maxEntries) {
-		const oldest = keys.values().next().value;
-		if (oldest === void 0) break;
-		keys.delete(oldest);
-	}
-}
-function pruneOldestMapEntries(keys, maxEntries) {
+function pruneOldestEntries(keys, maxEntries) {
 	while (keys.size > maxEntries) {
 		const oldest = keys.keys().next().value;
 		if (oldest === void 0) break;
@@ -150,7 +143,7 @@ function pruneOldestMapEntries(keys, maxEntries) {
 /** Remember one manager replay key without refreshing duplicate insertion order. */
 function rememberManagerReplayKey(keys, key, maxEntries = MAX_MANAGER_REPLAY_KEYS) {
 	keys.add(key);
-	pruneOldestSetEntries(keys, maxEntries);
+	pruneOldestEntries(keys, maxEntries);
 }
 /** Append one per-call replay key and retain only the newest bounded suffix. */
 function appendCallReplayKey(keys, key, maxEntries = 500) {
@@ -170,7 +163,7 @@ function reserveRejectedProviderCall(calls, providerCallId, maxEntries = MAX_MAN
 	if (calls.has(providerCallId)) return;
 	const reservation = Symbol(providerCallId);
 	calls.set(providerCallId, reservation);
-	pruneOldestMapEntries(calls, maxEntries);
+	pruneOldestEntries(calls, maxEntries);
 	return reservation;
 }
 /** Release a rejected-call reservation only when the failing attempt still owns it. */

package/dist/{telnyx-DO8dFQcb.js → telnyx-C9Yizvox.js}

@@ -1,4 +1,4 @@
-import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-j4OEG0fR.js";
+import { s as verifyTelnyxWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-CQXCe4aR.js";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/telnyx.ts
 function normalizeTelnyxDirection(direction) {

package/dist/{twilio-JDt_1nlz.js → twilio-BLjVv246.js}

@@ -1,8 +1,8 @@
 import { fetchWithSsrFGuard } from "./runtime-api.js";
 import "./api.js";
 import { n as requireSupportedTwilioApiHostname, r as resolveTwilioApiBaseUrl } from "./twilio-region-4fkgz3UG.js";
-import { _ as escapeXml, a as normalizeProviderStatus, i as mapProviderStatusToEndReason, p as chunkAudio, r as isProviderStatusTerminal, s as getHeader, v as mapVoiceToPolly } from "./runtime-entry-DK8kPCGC.js";
-import { c as verifyTwilioWebhook, i as readVoiceCallProviderJsonResponse, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-j4OEG0fR.js";
+import { _ as escapeXml, a as normalizeProviderStatus, i as mapProviderStatusToEndReason, p as chunkAudio, r as isProviderStatusTerminal, s as getHeader, v as mapVoiceToPolly } from "./runtime-entry-q02qkX8F.js";
+import { c as verifyTwilioWebhook, i as readVoiceCallProviderJsonResponse, n as cancelProviderResponseBody, r as readProviderErrorResponseSnippet, t as guardedJsonApiRequest } from "./guarded-json-api-CQXCe4aR.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import crypto from "node:crypto";

package/node_modules/typebox/build/format/date.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a ISO8601 Date component string
- * @source ajv-formats
+ * @description https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12`
  */
 export declare function IsDate(value: string): boolean;

package/node_modules/typebox/build/format/date.mjs

@@ -5,7 +5,7 @@ function IsLeapYear(year) {
 }
 /**
  * Returns true if the value is a ISO8601 Date component string
- * @source ajv-formats
+ * @description https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12`
  */
 export function IsDate(value) {

package/node_modules/typebox/build/format/date_time.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a ISO8601 DateTime string
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12T20:20:40+00:00`
  */
-export declare function IsDateTime(value: string, strictTimeZone?: boolean): boolean;
+export declare function IsDateTime(value: string): boolean;

package/node_modules/typebox/build/format/date_time.mjs

@@ -2,10 +2,10 @@ import { IsDate } from './date.mjs';
 import { IsTime } from './time.mjs';
 /**
  * Returns true if the value is a ISO8601 DateTime string
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc3339
  * @example `2020-12-12T20:20:40+00:00`
  */
-export function IsDateTime(value, strictTimeZone = true) {
+export function IsDateTime(value) {
     const dateTime = value.split(/T/i);
-    return dateTime.length === 2 && IsDate(dateTime[0]) && IsTime(dateTime[1], strictTimeZone);
+    return dateTime.length === 2 && IsDate(dateTime[0]) && IsTime(dateTime[1]);
 }

package/node_modules/typebox/build/format/email.d.mts

@@ -1,5 +1,5 @@
 /**
  * Returns true if the value is an Email
- * @specification ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc5322
  */
 export declare function IsEmail(value: string): boolean;

package/node_modules/typebox/build/format/email.mjs

@@ -1,7 +1,7 @@
-const Email = /^(?!.*\.\.)[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/i;
+const Email = /^(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[^"\\]|\\.)*")@(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*|\[(?:IPv6:[a-f0-9:]+|(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3})\])$/i;
 /**
  * Returns true if the value is an Email
- * @specification ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc5322
  */
 export function IsEmail(value) {
     return Email.test(value);

package/node_modules/typebox/build/format/hostname.mjs

@@ -1,4 +1,4 @@
-import * as Idna from './_idna.mjs';
+import * as Idna from './idna/index.mjs';
 /**
  * Returns true if the value is a valid hostname.
  * @specification https://tools.ietf.org/html/rfc1123
@@ -6,13 +6,5 @@ import * as Idna from './_idna.mjs';
  * @specification https://tools.ietf.org/html/rfc5892
  */
 export function IsHostname(value) {
-    if (value.length === 0 || value.length > 253)
-        return false;
-    if (value.charCodeAt(value.length - 1) === 46)
-        return false;
-    for (const label of value.split('.')) {
-        if (!Idna.IsLabel(label))
-            return false;
-    }
-    return true;
+    return Idna.IsHostname(value);
 }

package/node_modules/typebox/build/format/idn_email.d.mts

@@ -1,5 +1,5 @@
 /**
  * Returns true if the value is an IdnEmail
- * @specification ajv-formats (unicode-extension)
+ * @specification https://datatracker.ietf.org/doc/html/rfc4952
  */
 export declare function IsIdnEmail(value: string): boolean;

package/node_modules/typebox/build/format/idn_email.mjs

@@ -1,8 +1,8 @@
-const IdnEmail = /^(?!.*\.\.)[\p{L}\p{N}!#$%&'*+/=?^_`{|}~-]+(?:\.[\p{L}\p{N}!#$%&'*+/=?^_`{|}~-]+)*@[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,61}[\p{L}\p{N}])?(?:\.[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,61}[\p{L}\p{N}])?)*$/iu;
+const IdnEmail = /^(?:[A-Za-z0-9!#$%&'*+\/=?^_`{|}~\u{0080}-\u{10FFFF}-]+(?:\.[A-Za-z0-9!#$%&'*+\/=?^_`{|}~\u{0080}-\u{10FFFF}-]+)*|"(?:[^"\\]|\\.)*")@[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,62})(?<!-)(?:\.[\p{L}\p{N}](?:[\p{L}\p{N}-]{0,62})(?<!-))*$/iu;
 /**
  * Returns true if the value is an IdnEmail
- * @specification ajv-formats (unicode-extension)
+ * @specification https://datatracker.ietf.org/doc/html/rfc4952
  */
 export function IsIdnEmail(value) {
-    return IdnEmail.test(value);
+    return IdnEmail.test(value.normalize('NFC'));
 }

package/node_modules/typebox/build/format/idn_hostname.d.mts

@@ -3,5 +3,6 @@
  * @specification https://tools.ietf.org/html/rfc3490
  * @specification https://tools.ietf.org/html/rfc5891
  * @specification https://tools.ietf.org/html/rfc5892
+ * @specification https://tools.ietf.org/html/rfc5893
  */
 export declare function IsIdnHostname(value: string): boolean;

package/node_modules/typebox/build/format/idn_hostname.mjs

@@ -1,19 +1,11 @@
-import { IsIdnLabel } from './_idna.mjs';
+import * as Idna from './idna/index.mjs';
 /**
  * Returns true if the value is a valid internationalized (IDN) hostname.
  * @specification https://tools.ietf.org/html/rfc3490
  * @specification https://tools.ietf.org/html/rfc5891
  * @specification https://tools.ietf.org/html/rfc5892
+ * @specification https://tools.ietf.org/html/rfc5893
  */
 export function IsIdnHostname(value) {
-    if (value.length === 0 || value.includes(' '))
-        return false;
-    const canonical = value.normalize('NFC').replace(/[\u002E\u3002\uFF0E\uFF61]/g, '.');
-    if (canonical.length > 253)
-        return false;
-    for (const label of canonical.split('.')) {
-        if (!IsIdnLabel(label))
-            return false;
-    }
-    return true;
+    return Idna.IsIdnHostname(value);
 }

package/node_modules/typebox/build/format/idna/format/bidi.d.mts

@@ -0,0 +1,3 @@
+export declare function HasBidiChars(value: string): boolean;
+export declare function HasRightToLeftCharacters(value: string): boolean;
+export declare function SatisfiesBidiRule(value: string): boolean;

package/node_modules/typebox/build/format/idna/format/bidi.mjs

@@ -0,0 +1,98 @@
+// deno-fmt-ignore-file
+import * as FormatPuny from './puny.mjs';
+import * as Pattern from '../pattern/pattern.mjs';
+// ------------------------------------------------------------------
+// LOCAL REGEX: Allowed Bidi classes per direction (RFC 5893)
+// ------------------------------------------------------------------
+const RE_RTL_ALLOWED = /^(?:R|AL|AN|EN|ES|CS|ET|ON|BN|NSM)$/;
+const RE_LTR_ALLOWED = /^(?:L|EN|ES|CS|ET|ON|BN|NSM)$/;
+const RE_RTL_CLASSES = /^(?:R|AL|AN)$/;
+// ------------------------------------------------------------------
+// HasBidiChars
+//
+// Decodes a punycode label to its Unicode form (if it is one) and
+// checks whether the result is an RTL label per RFC 5893 §1.4.
+// ------------------------------------------------------------------
+export function HasBidiChars(value) {
+    if (FormatPuny.IsAcePrefixed(value)) {
+        try {
+            return HasRightToLeftCharacters(FormatPuny.Decode(value.slice(4).toLowerCase()));
+        }
+        catch {
+            return false;
+        }
+    }
+    return HasRightToLeftCharacters(value);
+}
+// ------------------------------------------------------------------
+// GetBidiClass
+// ------------------------------------------------------------------
+function GetBidiClass(codePoint) {
+    const char = String.fromCodePoint(codePoint);
+    return (Pattern.RE_EUROPEAN_NUMBER.test(char) ? 'EN' :
+        Pattern.RE_ARABIC_INDIC_DIGIT.test(char) ? 'AN' :
+            // Pattern.RE_EUROPEAN_SEPARATOR.test(char) ? 'ES' : // (no-spec-coverage)
+            // Pattern.RE_COMMON_SEPARATOR.test(char) ? 'CS' : // (no-spec-coverage)
+            Pattern.RE_MARK_NONSPACING.test(char) ? 'NSM' :
+                Pattern.RE_SCRIPT_HEBREW.test(char) ? 'R' :
+                    Pattern.RE_SCRIPT_ARABIC_LETTER.test(char) ? 'AL' :
+                        Pattern.RE_LETTER.test(char) ? 'L' :
+                            'ON');
+}
+// ------------------------------------------------------------------
+// HasRightToLeftCharacters
+//
+// Per RFC 5893 §1.4: "An RTL label is a label that contains at least
+// one character of type R, AL, or AN." Used to determine whether a
+// domain name is a "Bidi domain name" (RFC 5893 §1.4), in which case
+// the Bidi Rule applies to every label in the domain.
+// ------------------------------------------------------------------
+export function HasRightToLeftCharacters(value) {
+    for (const ch of value)
+        if (RE_RTL_CLASSES.test(GetBidiClass(ch.codePointAt(0))))
+            return true;
+    return false;
+}
+// ------------------------------------------------------------------
+// SatisfiesBidiRule
+// ------------------------------------------------------------------
+export function SatisfiesBidiRule(value) {
+    let isRtl = false;
+    let allowed = RE_LTR_ALLOWED;
+    let sawEN = false;
+    let sawAN = false;
+    let isFirst = true;
+    // let lastClass: string | null = null // (no-spec-coverage)
+    for (const ch of value) {
+        const bidiClass = GetBidiClass(ch.codePointAt(0));
+        if (isFirst) {
+            // 1. The first character must be a character with Bidi property L, R, or AL.
+            if (bidiClass !== 'L' && bidiClass !== 'R' && bidiClass !== 'AL')
+                return false;
+            isRtl = bidiClass === 'R' || bidiClass === 'AL';
+            allowed = isRtl ? RE_RTL_ALLOWED : RE_LTR_ALLOWED;
+            isFirst = false;
+        }
+        // 2 / 5. Only characters in the allowed set for this direction may appear.
+        if (!allowed.test(bidiClass))
+            return false;
+        if (bidiClass === 'EN')
+            sawEN = true;
+        else if (bidiClass === 'AN')
+            sawAN = true;
+        // if (bidiClass !== 'NSM') lastClass = bidiClass // (no-spec-coverage)
+    }
+    if (isRtl && sawEN && sawAN)
+        return false; // spec coverage path
+    // (no-spec-coverage)
+    // if (isRtl) {
+    //   // 3. The end of the label must be R, AL, EN, or AN (ignoring trailing NSM).
+    //   // if (lastClass !== 'R' && lastClass !== 'AL' && lastClass !== 'EN' && lastClass !== 'AN') return false
+    //   // 4. If an EN is present, no AN may be present, and vice versa.
+    //   if (sawEN && sawAN) return false
+    // } else {
+    //   // 6. The end of the label must be L or EN (ignoring trailing NSM).
+    //   // if (lastClass !== 'L' && lastClass !== 'EN') return false
+    // }
+    return true;
+}

package/node_modules/typebox/build/format/idna/format/puny.d.mts

@@ -0,0 +1,3 @@
+export declare function IsAcePrefixed(value: string): boolean;
+export declare function Decode(value: string): string;
+export declare function Encode(input: string): string;