nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/extensions
History
HCL 4e45a663e7 fix(telegram): prevent silent wrong-bot routing when accountId not in config 
When a non-default accountId is specified but not found in the accounts
config, resolveTelegramToken() falls through to channel-level defaults
(botToken, tokenFile, env) — silently routing messages via the wrong
bot's token. This is a cross-bot message leak with no error or warning.

Root cause: extensions/telegram/src/token.ts:44-46, resolveAccountCfg()
returns undefined for unknown accountIds but code continues to fallbacks.
Introduced in e5bca0832f when Telegram moved to extensions/.

Fix: return { token: "", source: "none" } with a diagnostic log when
a non-default accountId is not found. Existing behavior for known
accounts (with or without per-account tokens) preserved.

Test: added "does not fall through when non-default accountId not in
config" — 1/1 new, 10/10 existing unaffected.

Closes #49383

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: HCL <chenglunhu@gmail.com>
 		2026-03-20 23:24:40 +05:30
..
acpx refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
amazon-bedrock
…
anthropic
…
bluebubbles
…
brave refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
byteplus
…
chutes refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
cloudflare-ai-gateway
…
copilot-proxy refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
device-pair refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
diagnostics-otel
…
diffs
…
discord fix(discord): drop stale carbon deploy option 2026-03-19 23:30:48 -07:00
elevenlabs
…
fal
…
feishu fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
firecrawl refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
github-copilot
…
google refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
googlechat fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
huggingface
…
imessage
…
irc fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
kilocode
…
kimi-coding
…
line refactor(plugin-sdk): route bundled runtime barrels through public subpaths 2026-03-20 10:38:55 -07:00
llm-task
…
lobster refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
matrix refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
mattermost fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
memory-core
…
memory-lancedb
…
microsoft
…
minimax refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
mistral
…
modelstudio
…
moonshot refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
msteams test(msteams): clear remaining rebase conflict hunk 2026-03-20 10:38:55 -07:00
nextcloud-talk fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
nostr fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
nvidia
…
ollama
…
open-prose refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
openai refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
opencode
…
opencode-go
…
openrouter
…
openshell
…
perplexity refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
phone-control refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
qianfan
…
qwen-portal-auth refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
sglang
…
shared
…
signal fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
slack
…
synology-chat refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
synthetic
…
talk-voice refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
tavily refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
telegram fix(telegram): prevent silent wrong-bot routing when accountId not in config 2026-03-20 23:24:40 +05:30
thread-ownership
…
tlon fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
together
…
twitch fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
venice
…
vercel-ai-gateway
…
vllm
…
voice-call fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
volcengine
…
whatsapp test(whatsapp): override config-runtime mock exports safely 2026-03-19 09:42:13 -07:00
xai refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
xiaomi feat(xiaomi): add MiMo V2 Pro and MiMo V2 Omni models, switch to OpenAI completions API (#49214) 2026-03-19 19:26:47 -07:00
zai refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
zalo fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
zalouser fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
.npmignore
…