nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/extensions
History
HCL 4e45a663e7 fix(telegram): prevent silent wrong-bot routing when accountId not in config 
When a non-default accountId is specified but not found in the accounts
config, resolveTelegramToken() falls through to channel-level defaults
(botToken, tokenFile, env) — silently routing messages via the wrong
bot's token. This is a cross-bot message leak with no error or warning.

Root cause: extensions/telegram/src/token.ts:44-46, resolveAccountCfg()
returns undefined for unknown accountIds but code continues to fallbacks.
Introduced in e5bca0832f when Telegram moved to extensions/.

Fix: return { token: "", source: "none" } with a diagnostic log when
a non-default accountId is not found. Existing behavior for known
accounts (with or without per-account tokens) preserved.

Test: added "does not fall through when non-default accountId not in
config" — 1/1 new, 10/10 existing unaffected.

Closes #49383

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: HCL <chenglunhu@gmail.com>
 		2026-03-20 23:24:40 +05:30
..
acpx refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
amazon-bedrock fix(plugin-sdk): isolate provider entry surfaces 2026-03-18 13:20:46 -07:00
anthropic refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
bluebubbles fix: persist outbound sends and skip stale cron deliveries (#50092) 2026-03-19 11:40:34 +09:00
brave refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
byteplus refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
chutes refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
cloudflare-ai-gateway refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
copilot-proxy refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
device-pair refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
diagnostics-otel fix(release): isolate config doc surfaces and sdk exports 2026-03-18 17:14:15 -07:00
diffs Diffs: route plugin context through artifacts 2026-03-19 00:24:00 -04:00
discord fix(discord): drop stale carbon deploy option 2026-03-19 23:30:48 -07:00
elevenlabs refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
fal Image generation: add fal provider (#49454) 2026-03-17 21:35:13 -07:00
feishu fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
firecrawl refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
github-copilot Plugin SDK: split provider auth login seam 2026-03-18 02:04:10 -07:00
google refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
googlechat fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
huggingface refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
imessage Plugins: remove shared extension boundary debt 2026-03-18 22:58:40 -05:00
irc fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
kilocode refactor: converge plugin sdk channel helpers 2026-03-19 00:25:19 +00:00
kimi-coding refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
line refactor(plugin-sdk): route bundled runtime barrels through public subpaths 2026-03-20 10:38:55 -07:00
llm-task fix: restore full gate stability 2026-03-19 03:36:03 +00:00
lobster refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
matrix refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
mattermost fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
memory-core refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
memory-lancedb refactor: install heavy plugins on demand 2026-03-19 03:37:30 +00:00
microsoft refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
minimax refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
mistral refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
modelstudio refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
moonshot refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
msteams test(msteams): clear remaining rebase conflict hunk 2026-03-20 10:38:55 -07:00
nextcloud-talk fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
nostr fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
nvidia refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
ollama fix: preserve interactive Ollama model selection (#49249) (thanks @BruceMacD) 2026-03-18 18:02:44 -07:00
open-prose refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
openai refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
opencode refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
opencode-go refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
openrouter fix(plugin-sdk): isolate provider entry surfaces 2026-03-18 13:20:46 -07:00
openshell Plugin SDK: split setup and sandbox subpaths 2026-03-16 12:06:32 +00:00
perplexity refactor(web-search): share scoped provider config plumbing 2026-03-19 23:52:53 -07:00
phone-control refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
qianfan refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
qwen-portal-auth refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
sglang refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
shared refactor: finalize plugin sdk legacy boundary cleanup 2026-03-16 22:51:46 -07:00
signal fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
slack Channels: stabilize lane harness and monitor tests (#50167) 2026-03-19 01:47:48 -05:00
synology-chat refactor: shrink sdk helper surfaces 2026-03-20 15:43:14 +00:00
synthetic refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
talk-voice refactor: prune bundled sdk facades 2026-03-19 07:17:04 +00:00
tavily refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
telegram fix(telegram): prevent silent wrong-bot routing when accountId not in config 2026-03-20 23:24:40 +05:30
thread-ownership fix(release): isolate config doc surfaces and sdk exports 2026-03-18 17:14:15 -07:00
tlon fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
together refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
twitch fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
venice refactor: unify plugin sdk primitives 2026-03-18 23:58:56 +00:00
vercel-ai-gateway refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
vllm refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
voice-call fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
volcengine refactor: dedupe bundled plugin entrypoints 2026-03-17 00:14:12 -07:00
whatsapp test(whatsapp): override config-runtime mock exports safely 2026-03-19 09:42:13 -07:00
xai refactor(web-search): share provider clients and config helpers 2026-03-20 09:30:34 -07:00
xiaomi feat(xiaomi): add MiMo V2 Pro and MiMo V2 Omni models, switch to OpenAI completions API (#49214) 2026-03-19 19:26:47 -07:00
zai refactor(plugin-sdk): formalize runtime contract barrels 2026-03-20 09:30:34 -07:00
zalo fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
zalouser fix: restore plugin sdk runtime barrels 2026-03-20 16:46:34 +00:00
.npmignore fix: harden windows npm runtime path 2026-03-12 23:03:19 +00:00