Skip to content

chore(voice): unprivate voice provider packages - #2066

Merged
cjol merged 1 commit into
mainfrom
unprivate-voice-providers
Aug 6, 2026
Merged

chore(voice): unprivate voice provider packages#2066
cjol merged 1 commit into
mainfrom
unprivate-voice-providers

Conversation

@cjol

@cjol cjol commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

This PR removes "private": true from the five voice provider packages so they can be published to npm. Opened as a draft because publishing still needs npm-side bootstrap first.

Blocked on

npm trusted publishing cannot create a package's first version. Per npm/cli#8544, "it's not possible to publish the initial version of a package using OIDC, it needs to be published manually or using a token", because the npmjs.com UI requires a package to exist before a trusted publisher can be configured for it. The release workflow publishes over OIDC with id-token: write and no NODE_AUTH_TOKEN.

Package On npm Needs bootstrap
@cloudflare/voice-twilio 0.0.0 No, but needs a trusted publisher configured
@cloudflare/voice-assemblyai absent Yes
@cloudflare/voice-deepgram absent Yes
@cloudflare/voice-elevenlabs absent Yes
@cloudflare/voice-plivo absent Yes

changeset publish throws ExitError(1) when any package fails, which fails the whole release job. Merging this before the four missing names exist on the registry would therefore break the release of agents itself, which is a worse outcome than the current silent skip.

Someone with publish rights on the @cloudflare scope needs to publish a stub for each of the four absent names and configure the trusted publisher for each on npmjs.com. This PR is ready to merge once that is done.

The voice provider packages carry "private": true, so changesets versions
them and writes their changelogs while changeset publish skips them. Plivo
is bumped to 0.1.0 by the pending release yet has never reached npm, and
the Deepgram, ElevenLabs, and AssemblyAI install instructions in the public
docs reference packages that do not exist.

Telnyx is the only provider already publishing, because its private field
was removed by hand in 2142b23.

Publishing still requires npm-side bootstrap: trusted publishing cannot
create a package's first version, and four of these five names are absent
from the registry.
@pkg-pr-new

pkg-pr-new Bot commented Aug 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

agents

npm i https://pkg.pr.new/agents@2066

@cloudflare/ai-chat

npm i https://pkg.pr.new/@cloudflare/ai-chat@2066

@cloudflare/codemode

npm i https://pkg.pr.new/@cloudflare/codemode@2066

create-think

npm i https://pkg.pr.new/create-think@2066

hono-agents

npm i https://pkg.pr.new/hono-agents@2066

@cloudflare/shell

npm i https://pkg.pr.new/@cloudflare/shell@2066

@cloudflare/think

npm i https://pkg.pr.new/@cloudflare/think@2066

@cloudflare/voice

npm i https://pkg.pr.new/@cloudflare/voice@2066

@cloudflare/worker-bundler

npm i https://pkg.pr.new/@cloudflare/worker-bundler@2066

commit: 5cf67d7

@cjol
cjol marked this pull request as ready for review August 6, 2026 19:18

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 2 additional findings.

Open in Devin Review

@cjol
cjol merged commit e70f54d into main Aug 6, 2026
4 of 5 checks passed
@cjol
cjol deleted the unprivate-voice-providers branch August 6, 2026 19:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant