fix(plugins): classify realtime-voice-activation as private-local

ClawSweeper P2: the subpath exports only a default target, which is the
private-local shape; register it in plugin-sdk-private-local-only-subpaths,
the package-boundary d.ts alias maps, and correct the public surface budgets
(realtime-voice-activation no longer counts as public).

docs/.generated/plugin-sdk-api-baseline.sha256

@@ -106,7 +106,6 @@ de508df6d9cfa9d21c4524989dd8bd142fb60cb4ae980193e0907767d76e6022  module/provide
 71bebeac51e701cd7c8e63d22754b9bcbd82b024aced303aa055d229781129d7  module/provider-catalog-runtime
 56151035047a69e6163d5578023d00f51a2413b777f3784af88e06261c039345  module/proxy-capture
 cc3f586640ca1f1988de64ab2b6c9a119024a911a27289fdacfa0901d093c8fe  module/question-gateway-runtime
-ec0dcccc1658cbcf10d9d81efb73ea59eed1f4a9a869746808347161f8135ba8  module/realtime-voice-activation
 2e09c3181e79e157ed5366b144d116ef8cc06023256ace3fa59b35c43cab513a  module/reply-chunking
 7994045066b29af1fc6b36ae32068f2a6f277195971af84701cb739cc23d0579  module/reply-dispatch-runtime
 ac2b199e95c5c8b1e2a65e62bd41d1b6322e531bca294ef4979a297a12640bce  module/reply-history

docs/plugins/sdk-subpaths.md

@@ -341,7 +341,7 @@ Use `isLoopbackHost(host)` when a plugin must accept only the local machine. It
     | `plugin-sdk/realtime-transcription` | Private-local after July 2026; Realtime transcription provider types, registry helpers, and shared WebSocket session helper |
     | `plugin-sdk/realtime-bootstrap-context` | Private-local after July 2026; Realtime profile bootstrap helper for bounded `IDENTITY.md`, `USER.md`, and `SOUL.md` context injection |
     | `plugin-sdk/realtime-voice-audio-queue` | Private-local JavaScript-only host runtime for bundled or separately published official plugins; narrow bounded audio queue seam for lazy realtime voice provider facades without importing the broader realtime voice runtime; not for third-party plugins |
-    | `plugin-sdk/realtime-voice-activation` | Dependency-light realtime-voice activation-name helpers (normalize, match, word-count, sort) for doctor contract closures and other control-plane paths that must not load the realtime voice runtime |
+    | `plugin-sdk/realtime-voice-activation` | Private-local; dependency-light realtime-voice activation-name helpers (normalize, match, word-count, sort) for doctor contract closures and other control-plane paths that must not load the realtime voice runtime |
     | `plugin-sdk/realtime-voice` | Private-local after July 2026; Realtime voice provider types, registry helpers, shared audio-energy/speech-onset gates, and realtime voice behavior helpers, including the transport-independent session harness and output activity tracking. For official runtime consumers, sender-auth contract revision 1 forwards ingress-authenticated `senderId` and `senderIsOwner` unchanged; ingress owns authentication, and consumers requiring the handoff must fail closed on other revisions. |
     | `plugin-sdk/meeting-runtime` | Browser-meeting session runtime, realtime audio engines/transports, `MeetingPlatformAdapter`, browser/node control, agent-consult, voice-call delegation, setup checks, and SoX command helpers |
     | `plugin-sdk/image-generation` | Private-local after July 2026; Image generation provider types plus image asset/data URL helpers and the OpenAI-compatible image provider builder |

extensions/tsconfig.package-boundary.paths.json

@@ -362,6 +362,9 @@
       "openclaw/plugin-sdk/realtime-voice-audio-queue": [
         "../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice-audio-queue.d.ts"
       ],
+      "openclaw/plugin-sdk/realtime-voice-activation": [
+        "../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice-activation.d.ts"
+      ],
       "openclaw/plugin-sdk/realtime-voice": [
         "../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice.d.ts"
       ],

extensions/xai/tsconfig.json

@@ -359,6 +359,9 @@
       "openclaw/plugin-sdk/realtime-voice-audio-queue": [
         "../../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice-audio-queue.d.ts"
       ],
+      "openclaw/plugin-sdk/realtime-voice-activation": [
+        "../../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice-activation.d.ts"
+      ],
       "openclaw/plugin-sdk/realtime-voice": [
         "../../packages/plugin-sdk/dist/src/plugin-sdk/realtime-voice.d.ts"
       ],

scripts/lib/plugin-sdk-private-local-only-subpaths.json

@@ -128,6 +128,7 @@
   "realtime-bootstrap-context",
   "realtime-transcription",
   "realtime-voice-audio-queue",
+  "realtime-voice-activation",
   "realtime-voice",
   "reply-payload-testing",
   "reply-reference",

scripts/plugin-sdk-surface-report.mjs

@@ -165,9 +165,9 @@ export function readPluginSdkSurfaceBudgets(env = process.env) {
       // +2: restore the documented session-catalog and tool-results plugin contracts.
       // +1: focused inbound-event delivery correlation for channel plugins.
       // +1: dependency-light agent scope helpers for doctor migration enumeration.
-      // +1: dependency-light realtime-voice activation helpers for doctor closures.
-      // +1: dependency-light channel streaming config readers for doctor closures.
-      152,
+      // +1: dependency-light channel streaming config readers for doctor closures
+      //     (realtime-voice-activation is private-local and not counted here).
+      151,
       env,
     ),
     publicExports: readPluginSdkSurfaceBudgetEnv(
@@ -228,9 +228,8 @@ export function readPluginSdkSurfaceBudgets(env = process.env) {
       // +1: simple channel secret contract factory replacing repeated collectors.
       // +4: focused agent scope functions for doctor migration enumeration.
       // +1: shared transcript credential-safety prompt for plugin-owned agent harnesses.
-      // +12: realtime-voice activation subpath re-exports and session-agent scope resolver.
-      // +2: channel streaming config reader re-exports.
-      4854,
+      // +3: channel streaming config reader re-exports and session-agent scope resolver.
+      4843,
       env,
     ),
     publicFunctionExports: readPluginSdkSurfaceBudgetEnv(
@@ -282,9 +281,8 @@ export function readPluginSdkSurfaceBudgets(env = process.env) {
       // +1: shared channel interactive dispatcher with canonical binding authorization.
       // +1: simple channel secret contract factory replacing repeated collectors.
       // +4: focused agent scope functions for doctor migration enumeration.
-      // +8: realtime-voice activation functions and session-agent scope resolver.
-      // +2: channel streaming config reader functions.
-      2926,
+      // +3: channel streaming config reader functions and session-agent scope resolver.
+      2919,
       env,
     ),
     publicDeprecatedExports: readPluginSdkSurfaceBudgetEnv(