Jason O'Neal 44bf1c6d72 fix(voice-call): require realtime websocket path boundary ...

Tighten voice-call realtime WebSocket upgrade matching so configured stream paths match exactly or as slash-delimited children only.

Rejects same-prefix sibling paths that previously entered the realtime handler via a raw startsWith check. Preserves root stream-path child routing and adds bound VoiceCallWebhookServer regression coverage for valid child, sibling rejection, and root child behavior.

Verification:
- node scripts/run-vitest.mjs run extensions/voice-call/src/webhook.test.ts
- node scripts/run-vitest.mjs run extensions/voice-call/src/webhook.test.ts extensions/voice-call/src/webhook/realtime-handler.test.ts
- node scripts/run-oxlint.mjs --tsconfig config/tsconfig/oxlint.extensions.json extensions/voice-call/src/webhook.ts extensions/voice-call/src/webhook.test.ts
- ./node_modules/.bin/oxfmt --check --threads=1 extensions/voice-call/src/webhook.ts extensions/voice-call/src/webhook.test.ts
- git diff --check
- GitHub PR checks passing

2026-06-15 18:21:22 +10:00

..

acpx

fix: update esbuild audit pin (#92540)

2026-06-12 15:36:49 -07:00

active-memory

fix(active-memory): preserve verbose recall summaries (#90739)

2026-06-13 23:38:58 -07:00

admin-http-rpc

docs: document small extension sources

2026-06-04 21:02:07 -04:00

alibaba

docs: document small extension sources

2026-06-04 21:02:07 -04:00

amazon-bedrock

fix(bedrock): route Mythos through Mantle

2026-06-11 11:11:22 +09:00

amazon-bedrock-mantle

fix(bedrock): normalize Mythos minimal effort

2026-06-11 11:11:23 +09:00

anthropic

feat: support /btw in CLI-backed sessions (#92669)

2026-06-13 19:36:53 +02:00

anthropic-vertex

fix(anthropic-vertex): stop re-marking cache_control on transport-budgeted payloads (#92387)

2026-06-12 12:59:02 +00:00

arcee

docs: document small extension sources

2026-06-04 21:02:07 -04:00

azure-speech

docs: document small extension sources

2026-06-04 21:02:07 -04:00

bonjour

feat(matrix): handle voice preflight and threads (#90415)

2026-06-05 08:49:35 -07:00

brave

docs: document small extension sources

2026-06-04 21:02:07 -04:00

browser

feat(browser): extend --labels overlay to full-page and element captures (#92834)

2026-06-14 02:21:23 +00:00

byteplus

docs: document small extension sources

2026-06-04 21:02:07 -04:00

canvas

fix(canvas): validate CLI numeric options

2026-06-14 07:39:17 +08:00

cerebras

docs: document cerebras and chutes providers

2026-06-04 08:09:34 -04:00

chutes

test(chutes): normalize discovery request headers

2026-06-10 15:22:43 +09:00

clickclack

fix: propagate ClickClack toolsAllow through replies

2026-06-05 08:40:35 -07:00

cloudflare-ai-gateway

docs: document small extension sources

2026-06-04 21:02:07 -04:00

codex

fix(agents): retry empty post-tool final turns (#93073)

2026-06-15 00:08:57 -07:00

codex-supervisor

docs: document small extension sources

2026-06-04 21:02:07 -04:00

comfy

docs: document small extension sources

2026-06-04 21:02:07 -04:00

copilot

fix(agents): retry empty post-tool final turns (#93073)

2026-06-15 00:08:57 -07:00

copilot-proxy

docs: document small extension sources

2026-06-04 21:02:07 -04:00

deepgram

docs: document small extension sources

2026-06-04 21:02:07 -04:00

deepinfra

feat: add live provider model catalog helper

2026-06-07 14:16:00 -07:00

deepseek

docs: document small extension sources

2026-06-04 21:02:07 -04:00

device-pair

refactor: store Zalo hosted media in plugin state

2026-06-06 22:56:48 -07:00

diagnostics-otel

Fix OTLP log trace correlation (#92276)

2026-06-12 10:54:21 -05:00

diagnostics-prometheus

docs: document discord extension sources

2026-06-04 22:06:01 -04:00

diffs

chore: update dependencies

2026-06-08 21:44:57 +01:00

diffs-language-pack

docs: document small extension sources

2026-06-04 21:02:07 -04:00

discord

refactor: route bundled plugin session callers through seam (#89129)

2026-06-14 12:26:53 -07:00

document-extract

docs: document small extension sources

2026-06-04 21:02:07 -04:00

duckduckgo

docs: document small extension sources

2026-06-04 21:02:07 -04:00

elevenlabs

fix(elevenlabs): use current TTS model ids (#92904)

2026-06-14 23:01:27 +08:00

exa

docs: document small extension sources

2026-06-04 21:02:07 -04:00

fal

fix(fal): parse raw completed queue results (#92051)

2026-06-11 08:25:25 +09:00

feishu

fix(feishu): pass card_msg_content_type to get full card content (fixes #78289) (#93134)

2026-06-15 12:04:55 +08:00

file-transfer

fix(file-transfer): clarify missing paired node errors

2026-06-09 03:53:38 +09:00

firecrawl

docs: document small extension sources

2026-06-04 21:02:07 -04:00

fireworks

fix(fireworks): resolve catalog model params from manifest (#90326)

2026-06-12 22:48:46 -07:00

github-copilot

fix(copilot): strip replayed thinking blocks

2026-06-13 19:14:16 -07:00

gmi

docs: document small extension sources

2026-06-04 21:02:07 -04:00

google

fix(google): route Gemini CLI OAuth through the env proxy (#46184) (#92815)

2026-06-14 22:52:18 +08:00

google-meet

docs: document medium extension sources

2026-06-04 21:33:54 -04:00

googlechat

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

gradium

docs: document small extension sources

2026-06-04 21:02:07 -04:00

groq

docs: document small extension sources

2026-06-04 21:02:07 -04:00

huggingface

docs: document small extension sources

2026-06-04 21:02:07 -04:00

image-generation-core

docs: document small extension sources

2026-06-04 21:02:07 -04:00

imessage

fix(imessage): honor disabled reply actions (#93137)

2026-06-15 11:53:35 +08:00

inworld

docs: document small extension sources

2026-06-04 21:02:07 -04:00

irc

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

kilocode

docs: document small extension sources

2026-06-04 21:02:07 -04:00

kimi-coding

docs: document small extension sources

2026-06-04 21:02:07 -04:00

line

fix(line): canonicalize trailing-slash webhook paths (#91649)

2026-06-09 16:26:16 +09:00

litellm

fix(providers): preserve Claude output limits

2026-06-11 11:11:21 +09:00

llama-cpp

fix(release): harden plugin package preflight

2026-06-15 14:23:57 +08:00

llm-task

docs: document small extension sources

2026-06-04 21:02:07 -04:00

lmstudio

fix(lmstudio): honor thinking off for binary reasoning models (#92002)

2026-06-14 05:41:49 -07:00

lobster

fix(lobster): surface workflow path errors

2026-06-14 12:18:33 +08:00

matrix

test(matrix): avoid racy inbound dedupe TTL

2026-06-14 07:35:14 +08:00

mattermost

fix(reply): deliver final reply when queued follow-up claims session; scope dedupe to routed thread (#90943)

2026-06-14 09:11:05 -07:00

media-understanding-core

docs: document small extension sources

2026-06-04 21:02:07 -04:00

memory-core

fix(agents): retry empty post-tool final turns (#93073)

2026-06-15 00:08:57 -07:00

memory-lancedb

fix(plugin-sdk): expose delivery hints without utility imports

2026-06-14 18:18:20 +05:30

memory-wiki

fix(memory-wiki): tolerate artifacts without agent ids

2026-06-14 20:19:24 +08:00

microsoft

docs: document small extension sources

2026-06-04 21:02:07 -04:00

microsoft-foundry

fix(auth): apply runtime request overrides everywhere

2026-06-11 11:11:22 +09:00

migrate-claude

docs: document small extension sources

2026-06-04 21:02:07 -04:00

migrate-hermes

docs: document small extension sources

2026-06-04 21:02:07 -04:00

minimax

fix(minimax): keep thinking active for M3

2026-06-06 22:56:17 -07:00

mistral

docs: document small extension sources

2026-06-04 21:02:07 -04:00

moonshot

fix(moonshot): rewrite duplicate native Kimi tool call ids

2026-06-12 21:14:03 -07:00

msteams

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

nextcloud-talk

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

nostr

docs: document discord extension sources

2026-06-04 22:06:01 -04:00

novita

docs: document small extension sources

2026-06-04 21:02:07 -04:00

nvidia

feat: add live provider model catalog helper

2026-06-07 14:16:00 -07:00

oc-path

fix(qqbot): migrate group tool policy config (#91128)

2026-06-07 02:33:06 -07:00

ollama

fix(ollama): preserve length-limited responses (#89160)

2026-06-14 10:59:37 -07:00

open-prose

docs: document small extension sources

2026-06-04 21:02:07 -04:00

openai

test(openai): extend live STT fixture timeout

2026-06-14 19:21:25 +08:00

opencode

docs: document small extension sources

2026-06-04 21:02:07 -04:00

opencode-go

fix(opencode-go): warm context metadata from provider catalog (#92913)

2026-06-14 12:08:49 -07:00

openrouter

feat(openrouter): surface Fusion panel config (#93005)

2026-06-14 12:44:49 -04:00

openshell

fix(sandbox): use materialized skill paths in startup prompts (#91791)

2026-06-10 23:35:34 +09:00

parallel

fix(parallel): send User-Agent on free MCP requests

2026-06-14 01:52:59 +08:00

perplexity

docs: document small extension sources

2026-06-04 21:02:07 -04:00

phone-control

docs: document small extension sources

2026-06-04 21:02:07 -04:00

pixverse

docs: document small extension sources

2026-06-04 21:02:07 -04:00

policy

docs: document small extension sources

2026-06-04 21:02:07 -04:00

qa-channel

docs: document small extension sources

2026-06-04 21:02:07 -04:00

qa-lab

simplify QA evidence profile and mappings/coverage shape (#93153)

2026-06-14 22:26:58 -07:00

qa-matrix

fix(qa): corrupt Matrix idb state in sqlite

2026-06-10 17:49:59 +09:00

qianfan

docs: document small extension sources

2026-06-04 21:02:07 -04:00

qqbot

fix(qqbot): surface failed media sends (#92823)

2026-06-14 11:13:56 +08:00

qwen

docs: document small extension sources

2026-06-04 21:02:07 -04:00

runway

docs: document small extension sources

2026-06-04 21:02:07 -04:00

searxng

docs: document small extension sources

2026-06-04 21:02:07 -04:00

senseaudio

docs: document small extension sources

2026-06-04 21:02:07 -04:00

sglang

fix(release): stabilize candidate validation

2026-06-11 03:04:02 +09:00

signal

fix(markdown-core): treat infinity chunk limit as unbounded

2026-06-14 04:29:12 +08:00

slack

fix: refresh slash command routing config (#39617)

2026-06-14 09:32:18 -07:00

sms

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

stepfun

docs: document small extension sources

2026-06-04 21:02:07 -04:00

synology-chat

docs: document small extension sources

2026-06-04 21:02:07 -04:00

synthetic

docs: document small extension sources

2026-06-04 21:02:07 -04:00

talk-voice

docs: document small extension sources

2026-06-04 21:02:07 -04:00

tavily

fix(tavily): keep web search contract executable

2026-06-14 07:43:17 +08:00

telegram

fix(telegram): preserve sticker media paths (#93130)

2026-06-15 14:43:32 +08:00

tencent

docs: document small extension sources

2026-06-04 21:02:07 -04:00

test-support

docs: document small extension sources

2026-06-04 21:02:07 -04:00

thread-ownership

docs: document small extension sources

2026-06-04 21:02:07 -04:00

tlon

chore: update dependencies

2026-06-08 21:44:57 +01:00

together

docs: document small extension sources

2026-06-04 21:02:07 -04:00

tokenjuice

docs: document small extension sources

2026-06-04 21:02:07 -04:00

tts-local-cli

docs: document small extension sources

2026-06-04 21:02:07 -04:00

twitch

chore: update dependencies

2026-06-08 21:44:57 +01:00

venice

feat: add live provider model catalog helper

2026-06-07 14:16:00 -07:00

vercel-ai-gateway

feat: add live provider model catalog helper

2026-06-07 14:16:00 -07:00

video-generation-core

docs: document small extension sources

2026-06-04 21:02:07 -04:00

vllm

docs: document small extension sources

2026-06-04 21:02:07 -04:00

voice-call

fix(voice-call): require realtime websocket path boundary

2026-06-15 18:21:22 +10:00

volcengine

docs: document small extension sources

2026-06-04 21:02:07 -04:00

voyage

docs: document small extension sources

2026-06-04 21:02:07 -04:00

vydra

docs: document small extension sources

2026-06-04 21:02:07 -04:00

web-readability

docs: document small extension sources

2026-06-04 21:02:07 -04:00

webhooks

docs: document small extension sources

2026-06-04 21:02:07 -04:00

whatsapp

fix(whatsapp): bound socket operations (#93094)

2026-06-15 00:04:11 -03:00

workboard

Improve iPad and iPhone control surfaces (#91557)

2026-06-09 21:46:02 -05:00

xai

fix(agents): retry empty post-tool final turns (#93073)

2026-06-15 00:08:57 -07:00

xiaomi

docs: document small extension sources

2026-06-04 21:02:07 -04:00

zai

feat(providers): add GLM-5.2 support (#92796)

2026-06-13 14:33:28 -07:00

zalo

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

zalouser

refactor(extensions): split channel contract sidecars

2026-06-10 13:05:24 +05:30

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

fix(test): fail filtered live media no-op runs

2026-06-06 18:34:54 +02:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

feat: add live provider model catalog helper

2026-06-07 14:16:00 -07:00

video-generation-providers.live.test.ts

fix(test): fail filtered live media no-op runs

2026-06-06 18:34:54 +02:00