Files
openclaw/extensions/minimax/tts.ts
NIO 66e2fcc6f8 fix(speech): bound TTS/STT voice-list and transcription JSON response reads (#96496)
Route success JSON reads through readProviderJsonResponse (16 MiB cap) in
azure-speech, elevenlabs, microsoft, minimax/tts, xai/stt, and
openrouter/media-understanding to prevent OOM from oversized or hostile
endpoint responses. Mirrors the response-limit campaign already applied to
other provider paths.

AI-assisted.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-25 14:32:53 -04:00

141 lines
3.7 KiB
TypeScript

// Minimax plugin module implements tts behavior.
import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
import {
assertOkOrThrowProviderError,
readProviderJsonResponse,
} from "openclaw/plugin-sdk/provider-http";
import {
fetchWithSsrFGuard,
ssrfPolicyFromHttpBaseUrlAllowedHostname,
} from "openclaw/plugin-sdk/ssrf-runtime";
export const DEFAULT_MINIMAX_TTS_BASE_URL = "https://api.minimax.io";
export const MINIMAX_TTS_MODELS = [
"speech-2.8-hd",
"speech-2.8-turbo",
"speech-2.6-hd",
"speech-2.6-turbo",
"speech-02-hd",
"speech-02-turbo",
"speech-01-hd",
"speech-01-turbo",
"speech-01-240228",
] as const;
export const MINIMAX_TTS_VOICES = [
"English_expressive_narrator",
"Chinese (Mandarin)_Warm_Girl",
"Chinese (Mandarin)_Lively_Girl",
"Chinese (Mandarin)_Gentle_Boy",
"Chinese (Mandarin)_Steady_Boy",
] as const;
export function normalizeMinimaxTtsBaseUrl(baseUrl?: string): string {
const trimmed = baseUrl?.trim();
if (!trimmed) {
return DEFAULT_MINIMAX_TTS_BASE_URL;
}
return trimmed.replace(/\/+$/, "").replace(/\/(?:anthropic|v1)$/i, "");
}
function normalizeMinimaxTtsPitch(pitch: number): number {
return Math.trunc(pitch);
}
export async function minimaxTTS(params: {
text: string;
apiKey: string;
baseUrl: string;
model: string;
voiceId: string;
speed?: number;
vol?: number;
pitch?: number;
format?: string;
sampleRate?: number;
timeoutMs: number;
}): Promise<Buffer> {
const {
text,
apiKey,
baseUrl,
model,
voiceId,
speed = 1,
vol = 1,
pitch = 0,
format = "mp3",
sampleRate = 32000,
timeoutMs,
} = params;
const safeTimeoutMs = resolveTimerTimeoutMs(timeoutMs, 1);
const controller = new AbortController();
const timeout = setTimeout(() => controller.abort(), safeTimeoutMs);
try {
const { response, release } = await fetchWithSsrFGuard({
url: `${baseUrl}/v1/t2a_v2`,
init: {
method: "POST",
headers: {
Authorization: `Bearer ${apiKey}`,
"Content-Type": "application/json",
},
body: JSON.stringify({
model,
text,
stream: false,
output_format: "hex",
voice_setting: {
voice_id: voiceId,
speed,
vol,
pitch: normalizeMinimaxTtsPitch(pitch),
},
audio_setting: {
format,
sample_rate: sampleRate,
},
}),
signal: controller.signal,
},
timeoutMs: safeTimeoutMs,
policy: ssrfPolicyFromHttpBaseUrlAllowedHostname(baseUrl),
auditContext: "minimax.tts",
});
try {
await assertOkOrThrowProviderError(response, "MiniMax TTS API error");
const body = await readProviderJsonResponse<{
data?: { audio?: string };
base_resp?: { status_code?: number; status_msg?: string };
}>(response, "minimax.tts");
// Check base_resp for envelope errors (HTTP 200 with non-zero status_code).
// Other MiniMax providers (image, video, music, web-search) already check this.
// Without this check, quota/billing errors with placeholder audio are silently accepted.
if (
body.base_resp &&
typeof body.base_resp.status_code === "number" &&
body.base_resp.status_code !== 0
) {
const msg = body.base_resp.status_msg ?? "unknown error";
throw new Error(`MiniMax TTS API error (${body.base_resp.status_code}): ${msg}`);
}
const hexAudio = body?.data?.audio;
if (!hexAudio) {
throw new Error("MiniMax TTS API returned no audio data");
}
return Buffer.from(hexAudio, "hex");
} finally {
await release();
}
} finally {
clearTimeout(timeout);
}
}