@openclaw/voice-call 2026.9.8 → 2026.10.1-beta.2

package/dist/.setup/{guarded-json-api-Bqc6QS8A.mjs → guarded-json-api-x55yqHvW.mjs}

@@ -1,6 +1,6 @@
 import { fetchWithSsrFGuard } from "../api.js";
-import { l as getHeader, n as normalizeProxyIp } from "./runtime-entry-BNOQRXii.mjs";
-import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-CCQSoBNF.mjs";
+import { n as normalizeProxyIp, s as getHeader } from "./runtime-entry-CbSKxSKk.mjs";
+import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-B7RJNWNG.mjs";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isLoopbackHost } from "openclaw/plugin-sdk/gateway-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -15,8 +15,13 @@ const telnyxReplayCache = createWebhookReplayCache();
 function sha256Hex(input) {
 	return crypto.createHash("sha256").update(input).digest("hex");
 }
-function createSkippedVerificationReplayKey(provider, ctx) {
-	return `${provider}:skip:${sha256Hex(`${ctx.method}\n${ctx.url}\n${ctx.rawBody}`)}`;
+function skipWebhookVerification(provider, ctx, cache) {
+	const replayKey = `${provider}:skip:${sha256Hex(`${ctx.method}\n${ctx.url}\n${ctx.rawBody}`)}`;
+	return {
+		ok: true,
+		reason: "verification skipped (dev mode)",
+		...reserveWebhookReplay(cache, replayKey)
+	};
 }
 /**
 * Validate Twilio webhook signature using HMAC-SHA1.
@@ -41,18 +46,10 @@ function buildTwilioDataToSign(url, params) {
 function buildCanonicalTwilioParamString(params) {
 	return Array.from(params.entries()).toSorted((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0).map(([key, value]) => `${key}=${value}`).join("&");
 }
-/**
-* Validate that a hostname matches RFC 1123 format.
-* Prevents injection of malformed hostnames.
-*/
 function isValidHostname(hostname) {
 	if (!hostname || hostname.length > 253) return false;
 	return /^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/.test(hostname);
 }
-/**
-* Safely extract hostname from a host header value.
-* Handles IPv6 addresses and prevents injection via malformed values.
-*/
 function extractHostname(hostHeader) {
 	if (!hostHeader) return null;
 	if (hostHeader.startsWith("[")) {
@@ -155,13 +152,12 @@ function reconstructWebhookUrl(ctx, options) {
 	} catch {
 		host = "";
 	}
-	if (!host) host = "";
 	let path = "/";
 	try {
 		const parsed = new URL(ctx.url);
 		path = parsed.pathname + parsed.search;
 	} catch {}
-	return `${proto}://${formatHostnameForUrl(host)}${path}`;
+	return `${proto}://${formatHostnameForUrl(host ?? "")}${path}`;
 }
 function buildTwilioVerificationUrl(ctx, publicUrl, urlOptions) {
 	if (!publicUrl) return reconstructWebhookUrl(ctx, urlOptions);
@@ -242,14 +238,7 @@ function importEd25519PublicKey(publicKey) {
 * - `telnyx-timestamp` (Unix seconds)
 */
 function verifyTelnyxWebhook(ctx, publicKey, options) {
-	if (options?.skipVerification) {
-		const replayKey = createSkippedVerificationReplayKey("telnyx", ctx);
-		return {
-			ok: true,
-			reason: "verification skipped (dev mode)",
-			...reserveWebhookReplay(telnyxReplayCache, replayKey)
-		};
-	}
+	if (options?.skipVerification) return skipWebhookVerification("telnyx", ctx, telnyxReplayCache);
 	if (!publicKey) return {
 		ok: false,
 		reason: "Missing telnyx.publicKey (configure to verify webhooks)"
@@ -292,18 +281,8 @@ function verifyTelnyxWebhook(ctx, publicKey, options) {
 		};
 	}
 }
-/**
-* Verify Twilio webhook with full context and detailed result.
-*/
 function verifyTwilioWebhook(ctx, authToken, options) {
-	if (options?.skipVerification) {
-		const replayKey = createSkippedVerificationReplayKey("twilio", ctx);
-		return {
-			ok: true,
-			reason: "verification skipped (dev mode)",
-			...reserveWebhookReplay(twilioReplayCache, replayKey)
-		};
-	}
+	if (options?.skipVerification) return skipWebhookVerification("twilio", ctx, twilioReplayCache);
 	const signature = getHeader(ctx.headers, "x-twilio-signature");
 	if (!signature) return {
 		ok: false,
@@ -376,28 +355,18 @@ function validatePlivoV2Signature(params) {
 	const provided = normalizeSignatureBase64(params.signature);
 	return safeEqualSecret(expected, provided);
 }
-function toParamMapFromSearchParams(sp) {
-	const map = {};
-	for (const [key, value] of sp.entries()) {
-		if (!map[key]) map[key] = [];
-		map[key].push(value);
-	}
-	return map;
-}
 function sortedPlivoParams(params, format) {
-	const parts = [];
-	const entries = Object.entries(params).toSorted(([left], [right]) => left < right ? -1 : left > right ? 1 : 0);
-	for (const [key, entryValues] of entries) {
-		const values = [...entryValues].toSorted();
-		for (const value of values) parts.push(format === "query" ? `${key}=${value}` : `${key}${value}`);
-	}
-	return parts.join(format === "query" ? "&" : "");
+	return [...params].toSorted(([leftKey, leftValue], [rightKey, rightValue]) => {
+		const left = leftKey === rightKey ? leftValue : leftKey;
+		const right = leftKey === rightKey ? rightValue : rightKey;
+		return left < right ? -1 : left > right ? 1 : 0;
+	}).map(([key, value]) => format === "query" ? `${key}=${value}` : `${key}${value}`).join(format === "query" ? "&" : "");
 }
 function constructPlivoV3BaseUrl(params) {
-	const hasPostParams = Object.keys(params.postParams).length > 0;
+	const hasPostParams = params.postParams.size > 0;
 	const u = new URL(params.url);
 	const baseNoQuery = `${u.protocol}//${u.host}${u.pathname}`;
-	const queryString = sortedPlivoParams(toParamMapFromSearchParams(u.searchParams), "query");
+	const queryString = sortedPlivoParams(u.searchParams, "query");
 	let baseUrl = baseNoQuery;
 	if (queryString.length > 0 || hasPostParams) baseUrl = `${baseNoQuery}?${queryString}`;
 	if (queryString.length > 0 && hasPostParams) baseUrl = `${baseUrl}.`;
@@ -407,9 +376,7 @@ function constructPlivoV3BaseUrl(params) {
 function validatePlivoV3Signature(params) {
 	const hmacBase = `${params.baseUrl}.${params.nonce}`;
 	const expected = normalizeSignatureBase64(crypto.createHmac("sha256", params.authToken).update(hmacBase).digest("base64"));
-	const provided = normalizeStringEntries(params.signatureHeader.split(",")).map((s) => normalizeSignatureBase64(s));
-	for (const sig of provided) if (safeEqualSecret(expected, sig)) return true;
-	return false;
+	return normalizeStringEntries(params.signatureHeader.split(",")).map((s) => normalizeSignatureBase64(s)).some((signature) => safeEqualSecret(expected, signature));
 }
 /**
 * Verify Plivo webhooks using V3 signature if present; fall back to V2.
@@ -419,14 +386,7 @@ function validatePlivoV3Signature(params) {
 * - V2: X-Plivo-Signature-V2 / X-Plivo-Signature-V2-Nonce
 */
 function verifyPlivoWebhook(ctx, authToken, options) {
-	if (options?.skipVerification) {
-		const replayKey = createSkippedVerificationReplayKey("plivo", ctx);
-		return {
-			ok: true,
-			reason: "verification skipped (dev mode)",
-			...reserveWebhookReplay(plivoReplayCache, replayKey)
-		};
-	}
+	if (options?.skipVerification) return skipWebhookVerification("plivo", ctx, plivoReplayCache);
 	const signatureV3 = getHeader(ctx.headers, "x-plivo-signature-v3");
 	const nonceV3 = getHeader(ctx.headers, "x-plivo-signature-v3-nonce");
 	const signatureV2 = getHeader(ctx.headers, "x-plivo-signature-v2");
@@ -454,7 +414,7 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 			verificationUrl,
 			reason: `Unsupported HTTP method for Plivo V3 signature: ${ctx.method}`
 		};
-		const postParams = toParamMapFromSearchParams(new URLSearchParams(ctx.rawBody));
+		const postParams = new URLSearchParams(ctx.rawBody);
 		const baseUrl = constructPlivoV3BaseUrl({
 			method,
 			url: verificationUrl,
@@ -506,34 +466,10 @@ function verifyPlivoWebhook(ctx, authToken, options) {
 	};
 }
 //#endregion
-//#region extensions/voice-call/src/providers/shared/response-body.ts
-const PROVIDER_JSON_RESPONSE_MAX_BYTES = 1048576;
-const PROVIDER_ERROR_RESPONSE_MAX_BYTES = 8192;
-const TRUNCATED_SUFFIX = "... [truncated]";
-async function cancelProviderResponseBody(response) {
-	await response.body?.cancel().catch(() => void 0);
-}
-function appendTruncatedSuffix(text) {
-	return `${text.trimEnd()}${TRUNCATED_SUFFIX}`;
-}
-async function readVoiceCallProviderJsonResponse(response, malformedJsonMessage) {
-	const body = await readResponseWithLimit(response, PROVIDER_JSON_RESPONSE_MAX_BYTES, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
-	if (body.byteLength === 0) return;
-	try {
-		const text = new TextDecoder("utf-8", { fatal: true }).decode(body);
-		return JSON.parse(text);
-	} catch (cause) {
-		throw new Error(malformedJsonMessage, { cause });
-	}
-}
-async function readProviderErrorResponseSnippet(response) {
-	const prefix = await readResponseTextPrefix(response, PROVIDER_ERROR_RESPONSE_MAX_BYTES);
-	const text = redactSensitiveText(prefix.text, { mode: "tools" });
-	return prefix.truncated ? appendTruncatedSuffix(text) : text;
-}
-//#endregion
 //#region extensions/voice-call/src/providers/shared/guarded-json-api.ts
 const VOICE_CALL_PROVIDER_API_TIMEOUT_MS = 3e4;
+const PROVIDER_JSON_RESPONSE_MAX_BYTES = 1048576;
+const PROVIDER_ERROR_RESPONSE_MAX_BYTES = 8192;
 /** Send a provider JSON request through the SSRF guard and parse bounded JSON responses. */
 async function guardedJsonApiRequest(params) {
 	const { response, release } = await fetchWithSsrFGuard({
@@ -541,7 +477,7 @@ async function guardedJsonApiRequest(params) {
 		init: {
 			method: params.method,
 			headers: params.headers,
-			body: params.body ? JSON.stringify(params.body) : void 0
+			body: params.body instanceof URLSearchParams ? params.body : params.body ? JSON.stringify(params.body) : void 0
 		},
 		policy: { allowedHostnames: params.allowedHostnames },
 		auditContext: params.auditContext,
@@ -550,13 +486,22 @@ async function guardedJsonApiRequest(params) {
 	try {
 		if (!response.ok) {
 			if (params.allowNotFound && response.status === 404) {
-				await cancelProviderResponseBody(response);
+				await response.body?.cancel().catch(() => void 0);
 				return;
 			}
-			const errorText = await readProviderErrorResponseSnippet(response);
-			throw new Error(`${params.errorPrefix}: ${response.status} ${errorText}`);
+			const prefix = await readResponseTextPrefix(response, PROVIDER_ERROR_RESPONSE_MAX_BYTES);
+			const text = redactSensitiveText(prefix.text, { mode: "tools" });
+			const errorText = prefix.truncated ? `${text.trimEnd()}... [truncated]` : text;
+			throw params.createError ? params.createError(response.status, errorText) : /* @__PURE__ */ new Error(`${params.errorPrefix}: ${response.status} ${errorText}`);
+		}
+		const body = await readResponseWithLimit(response, PROVIDER_JSON_RESPONSE_MAX_BYTES, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`provider response body too large: ${size} bytes (limit: ${maxBytes} bytes)`) });
+		if (body.byteLength === 0) return;
+		try {
+			const text = new TextDecoder("utf-8", { fatal: true }).decode(body);
+			return JSON.parse(text);
+		} catch (cause) {
+			throw new Error(params.malformedJsonMessage ?? `${params.errorPrefix}: malformed JSON response`, { cause });
 		}
-		return await readVoiceCallProviderJsonResponse(response, `${params.errorPrefix}: malformed JSON response`);
 	} finally {
 		await release();
 	}
@@ -578,4 +523,4 @@ async function readProviderCallStatus(request, describe) {
 	}
 }
 //#endregion
-export { readVoiceCallProviderJsonResponse as a, verifyTelnyxWebhook as c, readProviderErrorResponseSnippet as i, verifyTwilioWebhook as l, readProviderCallStatus as n, reconstructWebhookUrl as o, cancelProviderResponseBody as r, verifyPlivoWebhook as s, guardedJsonApiRequest as t };
+export { verifyTelnyxWebhook as a, verifyPlivoWebhook as i, readProviderCallStatus as n, verifyTwilioWebhook as o, reconstructWebhookUrl as r, guardedJsonApiRequest as t };

package/dist/.setup/{mock-ClWW6Ufu.mjs → mock-eLv_Dc4o.mjs}

@@ -1,4 +1,4 @@
-import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-CCQSoBNF.mjs";
+import { n as reserveWebhookReplay, t as createWebhookReplayCache } from "./webhook-replay-B7RJNWNG.mjs";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/mock.ts
@@ -26,14 +26,11 @@ var MockProvider = class {
 		try {
 			const payload = JSON.parse(ctx.rawBody);
 			const events = [];
-			if (Array.isArray(payload.events)) for (const evt of payload.events) {
+			const candidates = Array.isArray(payload.events) ? payload.events : payload.event ? [payload.event] : [];
+			for (const evt of candidates) {
 				const normalized = this.normalizeEvent(evt);
 				if (normalized) events.push(normalized);
 			}
-			else if (payload.event) {
-				const normalized = this.normalizeEvent(payload.event);
-				if (normalized) events.push(normalized);
-			}
 			return {
 				events,
 				statusCode: 200

package/dist/.setup/{plivo-69ObrQPk.mjs → plivo-CpPIENu4.mjs}

@@ -1,5 +1,6 @@
-import { l as getHeader, y as escapeXml } from "./runtime-entry-BNOQRXii.mjs";
-import { n as readProviderCallStatus, o as reconstructWebhookUrl, s as verifyPlivoWebhook, t as guardedJsonApiRequest } from "./guarded-json-api-Bqc6QS8A.mjs";
+import { s as getHeader } from "./runtime-entry-CbSKxSKk.mjs";
+import { t as escapeXml } from "./voice-mapping-B_iAUkER.mjs";
+import { i as verifyPlivoWebhook, n as readProviderCallStatus, r as reconstructWebhookUrl, t as guardedJsonApiRequest } from "./guarded-json-api-x55yqHvW.mjs";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 //#region extensions/voice-call/src/providers/plivo.ts
@@ -87,49 +88,34 @@ var PlivoProvider = class PlivoProvider {
 			const webhookBase = this.baseWebhookUrlFromCtx(ctx);
 			if (webhookBase) this.callUuidToWebhookUrl.set(callUuid, webhookBase);
 		}
+		const callId = normalizeOptionalString(ctx.query?.callId);
+		let event = null;
+		let providerResponseBody;
 		if (flow === "xml-speak") {
-			const callId = normalizeOptionalString(ctx.query?.callId);
 			const pending = callId ? this.pendingSpeakByCallId.get(callId) : void 0;
 			if (callId) this.pendingSpeakByCallId.delete(callId);
-			const actionUrl = pending?.listenAfterPlayback && callId ? this.buildActionUrl(ctx, {
-				flow: "getinput",
-				callId
-			}) : null;
-			return {
-				events: [],
-				providerResponseBody: pending ? actionUrl ? PlivoProvider.xmlSpeakAndListen({
-					text: pending.text,
-					language: pending.locale,
-					actionUrl
-				}) : PlivoProvider.xmlSpeak(pending.text, pending.locale) : PlivoProvider.xmlKeepAlive(),
-				providerResponseHeaders: { "Content-Type": "text/xml" },
-				statusCode: 200
-			};
-		}
-		if (flow === "xml-listen") {
-			const callId = normalizeOptionalString(ctx.query?.callId);
+			const actionUrl = pending?.listenAfterPlayback && callId ? this.buildActionUrl(ctx, callId) : null;
+			providerResponseBody = pending ? actionUrl ? PlivoProvider.xmlGetInputSpeech({
+				text: pending.text,
+				language: pending.locale,
+				actionUrl
+			}) : PlivoProvider.xmlSpeak(pending.text, pending.locale) : PlivoProvider.xmlKeepAlive();
+		} else if (flow === "xml-listen") {
 			const pending = callId ? this.pendingListenByCallId.get(callId) : void 0;
 			if (callId) this.pendingListenByCallId.delete(callId);
-			const actionUrl = this.buildActionUrl(ctx, {
-				flow: "getinput",
-				callId
-			});
-			return {
-				events: [],
-				providerResponseBody: actionUrl && callId ? PlivoProvider.xmlGetInputSpeech({
-					actionUrl,
-					language: pending?.language
-				}) : PlivoProvider.xmlKeepAlive(),
-				providerResponseHeaders: { "Content-Type": "text/xml" },
-				statusCode: 200
-			};
+			const actionUrl = this.buildActionUrl(ctx, callId);
+			providerResponseBody = actionUrl && callId ? PlivoProvider.xmlGetInputSpeech({
+				actionUrl,
+				language: pending?.language
+			}) : PlivoProvider.xmlKeepAlive();
+		} else {
+			const dedupeKey = options?.verifiedRequestKey ?? createPlivoRequestDedupeKey(ctx);
+			event = this.normalizeEvent(parsed, callId, dedupeKey);
+			providerResponseBody = flow === "answer" || flow === "getinput" ? PlivoProvider.xmlKeepAlive() : PlivoProvider.xmlEmpty();
 		}
-		const callIdFromQuery = normalizeOptionalString(ctx.query?.callId);
-		const dedupeKey = options?.verifiedRequestKey ?? createPlivoRequestDedupeKey(ctx);
-		const event = this.normalizeEvent(parsed, callIdFromQuery, dedupeKey);
 		return {
 			events: event ? [event] : [],
-			providerResponseBody: flow === "answer" || flow === "getinput" ? PlivoProvider.xmlKeepAlive() : PlivoProvider.xmlEmpty(),
+			providerResponseBody,
 			providerResponseHeaders: { "Content-Type": "text/xml" },
 			statusCode: 200
 		};
@@ -139,8 +125,6 @@ var PlivoProvider = class PlivoProvider {
 		const requestUuid = params.get("RequestUUID") || "";
 		if (requestUuid && callUuid) this.requestUuidToCallUuid.set(requestUuid, callUuid);
 		const direction = params.get("Direction");
-		const from = params.get("From") || void 0;
-		const to = params.get("To") || void 0;
 		const callStatus = params.get("CallStatus");
 		const baseEvent = {
 			id: crypto.randomUUID(),
@@ -149,8 +133,8 @@ var PlivoProvider = class PlivoProvider {
 			providerCallId: callUuid || requestUuid || void 0,
 			timestamp: Date.now(),
 			direction: direction === "inbound" ? "inbound" : direction === "outbound" ? "outbound" : void 0,
-			from,
-			to
+			from: params.get("From") || void 0,
+			to: params.get("To") || void 0
 		};
 		const digits = params.get("Digits");
 		if (digits) return {
@@ -201,7 +185,6 @@ var PlivoProvider = class PlivoProvider {
 		const hangupUrl = new URL(webhookUrl);
 		hangupUrl.searchParams.set("flow", "hangup");
 		this.callIdToWebhookUrl.set(input.callId, input.webhookUrl);
-		const ringTimeoutSec = this.options.ringTimeoutSec ?? 30;
 		const result = await this.apiRequest({
 			method: "POST",
 			endpoint: "/Call/",
@@ -212,7 +195,7 @@ var PlivoProvider = class PlivoProvider {
 				answer_method: "POST",
 				hangup_url: hangupUrl.toString(),
 				hangup_method: "POST",
-				hangup_on_ring: ringTimeoutSec
+				hangup_on_ring: this.options.ringTimeoutSec ?? 30
 			}
 		});
 		const requestUuid = Array.isArray(result.request_uuid) ? result.request_uuid[0] : result.request_uuid;
@@ -224,42 +207,31 @@ var PlivoProvider = class PlivoProvider {
 	}
 	async hangupCall(input) {
 		const callUuid = this.requestUuidToCallUuid.get(input.providerCallId);
-		if (callUuid) {
-			await this.apiRequest({
-				method: "DELETE",
-				endpoint: `/Call/${callUuid}/`,
-				allowNotFound: true
-			});
-			this.releaseCallState({
-				callId: input.callId,
-				providerCallId: input.providerCallId,
-				callUuid
-			});
-			return;
-		}
 		await this.apiRequest({
 			method: "DELETE",
-			endpoint: `/Call/${input.providerCallId}/`,
+			endpoint: `/Call/${callUuid || input.providerCallId}/`,
 			allowNotFound: true
 		});
-		await this.apiRequest({
+		if (!callUuid) await this.apiRequest({
 			method: "DELETE",
 			endpoint: `/Request/${input.providerCallId}/`,
 			allowNotFound: true
 		});
 		this.releaseCallState({
 			callId: input.callId,
-			providerCallId: input.providerCallId
+			providerCallId: input.providerCallId,
+			callUuid
 		});
 	}
-	resolveCallContext(params) {
-		const callUuid = this.requestUuidToCallUuid.get(params.providerCallId) ?? params.providerCallId;
-		const webhookBase = this.callUuidToWebhookUrl.get(callUuid) || this.callIdToWebhookUrl.get(params.callId);
+	resolveCallContext(input, operation) {
+		const callUuid = this.requestUuidToCallUuid.get(input.providerCallId) ?? input.providerCallId;
+		const webhookBase = this.callUuidToWebhookUrl.get(callUuid) || this.callIdToWebhookUrl.get(input.callId);
 		if (!webhookBase) throw new Error("Missing webhook URL for this call (provider state missing)");
-		if (!callUuid) throw new Error(`Missing Plivo CallUUID for ${params.operation}`);
+		if (!callUuid) throw new Error(`Missing Plivo CallUUID for ${operation}`);
 		return {
 			callUuid,
-			webhookBase
+			webhookBase,
+			callId: input.callId
 		};
 	}
 	async transferCallLeg(params) {
@@ -278,34 +250,22 @@ var PlivoProvider = class PlivoProvider {
 		});
 	}
 	async playTts(input) {
-		const { callUuid, webhookBase } = this.resolveCallContext({
-			providerCallId: input.providerCallId,
-			callId: input.callId,
-			operation: "playTts"
-		});
+		const context = this.resolveCallContext(input, "playTts");
 		this.pendingSpeakByCallId.set(input.callId, {
 			text: input.text,
 			locale: input.locale,
 			listenAfterPlayback: input.listenAfterPlayback
 		});
 		await this.transferCallLeg({
-			callUuid,
-			webhookBase,
-			callId: input.callId,
+			...context,
 			flow: "xml-speak"
 		});
 	}
 	async startListening(input) {
-		const { callUuid, webhookBase } = this.resolveCallContext({
-			providerCallId: input.providerCallId,
-			callId: input.callId,
-			operation: "startListening"
-		});
+		const context = this.resolveCallContext(input, "startListening");
 		this.pendingListenByCallId.set(input.callId, { language: input.language });
 		await this.transferCallLeg({
-			callUuid,
-			webhookBase,
-			callId: input.callId,
+			...context,
 			flow: "xml-listen"
 		});
 	}
@@ -360,39 +320,26 @@ var PlivoProvider = class PlivoProvider {
 	}
 	static xmlGetInputSpeech(params) {
 		const language = params.language || "en-US";
+		const prompt = params.text === void 0 ? "" : `    <Speak language="${escapeXml(language)}">${escapeXml(params.text)}</Speak>\n`;
 		return `<?xml version="1.0" encoding="UTF-8"?>
 <Response>
   <GetInput inputType="speech" method="POST" action="${escapeXml(params.actionUrl)}" language="${escapeXml(language)}" executionTimeout="30" speechEndTimeout="2" redirect="false">
-  </GetInput>
+${prompt}  </GetInput>
   <Wait length="300" />
 </Response>`;
 	}
-	static xmlSpeakAndListen(params) {
-		const language = params.language || "en-US";
-		return `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <GetInput inputType="speech" method="POST" action="${escapeXml(params.actionUrl)}" language="${escapeXml(language)}" executionTimeout="30" speechEndTimeout="2" redirect="false">
-    <Speak language="${escapeXml(language)}">${escapeXml(params.text)}</Speak>
-  </GetInput>
-  <Wait length="300" />
-</Response>`;
-	}
-	buildActionUrl(ctx, opts) {
+	buildActionUrl(ctx, callId) {
 		const base = this.baseWebhookUrlFromCtx(ctx);
 		if (!base) return null;
 		const u = new URL(base);
 		u.searchParams.set("provider", "plivo");
-		u.searchParams.set("flow", opts.flow);
-		if (opts.callId) u.searchParams.set("callId", opts.callId);
+		u.searchParams.set("flow", "getinput");
+		if (callId) u.searchParams.set("callId", callId);
 		return u.toString();
 	}
 	baseWebhookUrlFromCtx(ctx) {
 		try {
-			if (this.options.publicUrl) {
-				const base = new URL(this.options.publicUrl);
-				return `${base.origin}${base.pathname}`;
-			}
-			const u = new URL(reconstructWebhookUrl(ctx, {
+			const u = new URL(this.options.publicUrl || reconstructWebhookUrl(ctx, {
 				allowedHosts: this.options.webhookSecurity?.allowedHosts,
 				trustForwardingHeaders: this.options.webhookSecurity?.trustForwardingHeaders,
 				trustedProxyIPs: this.options.webhookSecurity?.trustedProxyIPs,
@@ -412,8 +359,8 @@ var PlivoProvider = class PlivoProvider {
 			"RecognizedSpeech",
 			"Text"
 		]) {
-			const value = params.get(key);
-			if (value && value.trim()) return value.trim();
+			const value = params.get(key)?.trim();
+			if (value) return value;
 		}
 		return null;
 	}