From 13ed6afe6006579063b974bd4c3838880a1f73a9 Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Sat, 7 Mar 2026 16:34:21 -0800
Subject: [PATCH] telegram: restore sender-only allowFrom validation

---
 src/telegram/bot-access.ts | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/telegram/bot-access.ts b/src/telegram/bot-access.ts
index ac1e70f12bf..d08a54616f0 100644
--- a/src/telegram/bot-access.ts
+++ b/src/telegram/bot-access.ts
@@ -44,12 +44,11 @@ export const normalizeAllowFrom = (list?: Array<string | number>): NormalizedAll
   const normalized = entries
     .filter((value) => value !== "*")
     .map((value) => value.replace(/^(telegram|tg):/i, ""));
-  // Support negative IDs for Telegram group/channel IDs (e.g., -1001234567890)
-  const invalidEntries = normalized.filter((value) => !/^-?\d+$/.test(value));
+  const invalidEntries = normalized.filter((value) => !/^\d+$/.test(value));
   if (invalidEntries.length > 0) {
     warnInvalidAllowFromEntries([...new Set(invalidEntries)]);
   }
-  const ids = normalized.filter((value) => /^-?\d+$/.test(value));
+  const ids = normalized.filter((value) => /^\d+$/.test(value));
   return {
     entries: ids,
     hasWildcard,