From 5b916cb319f84cd3cda88f87bf0f2fff5231c7ba Mon Sep 17 00:00:00 2001
From: chengzhichao-xydt <cheng.zhichao@xydigit.com>
Date: Fri, 10 Jul 2026 14:05:24 +0800
Subject: [PATCH] fix(voice-call): add timeout to guardedJsonApiRequest
 (#102884)

* fix(voice-call): add timeout to guardedJsonApiRequest

* fix(voice-call): bound provider JSON requests

---------

Co-authored-by: chengzhichao-xydt <chengzhichao-xydt@users.noreply.github.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
---
 .../voice-call/src/providers/shared/guarded-json-api.test.ts   | 1 +
 extensions/voice-call/src/providers/shared/guarded-json-api.ts | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/extensions/voice-call/src/providers/shared/guarded-json-api.test.ts b/extensions/voice-call/src/providers/shared/guarded-json-api.test.ts
index 9e16fe839950..c9247bb0f4d0 100644
--- a/extensions/voice-call/src/providers/shared/guarded-json-api.test.ts
+++ b/extensions/voice-call/src/providers/shared/guarded-json-api.test.ts
@@ -66,6 +66,7 @@ describe("guardedJsonApiRequest", () => {
       },
       policy: { allowedHostnames: ["api.example.com"] },
       auditContext: "voice-call:test",
+      timeoutMs: 30_000,
     });
     expect(release).toHaveBeenCalledTimes(1);
   });
diff --git a/extensions/voice-call/src/providers/shared/guarded-json-api.ts b/extensions/voice-call/src/providers/shared/guarded-json-api.ts
index 7959d22f9dc2..ffe3b7e9c54f 100644
--- a/extensions/voice-call/src/providers/shared/guarded-json-api.ts
+++ b/extensions/voice-call/src/providers/shared/guarded-json-api.ts
@@ -8,6 +8,8 @@ import {
 
 // Shared guarded JSON API client for voice-call providers.
 
+const VOICE_CALL_PROVIDER_API_TIMEOUT_MS = 30_000;
+
 /** Parameters for an SSRF-guarded provider JSON request. */
 type GuardedJsonApiRequestParams = {
   url: string;
@@ -33,6 +35,7 @@ export async function guardedJsonApiRequest<T = unknown>(
     },
     policy: { allowedHostnames: params.allowedHostnames },
     auditContext: params.auditContext,
+    timeoutMs: VOICE_CALL_PROVIDER_API_TIMEOUT_MS,
   });
 
   try {