HCL 4e45a663e7 fix(telegram): prevent silent wrong-bot routing when accountId not in config ...

When a non-default accountId is specified but not found in the accounts
config, resolveTelegramToken() falls through to channel-level defaults
(botToken, tokenFile, env) — silently routing messages via the wrong
bot's token. This is a cross-bot message leak with no error or warning.

Root cause: extensions/telegram/src/token.ts:44-46, resolveAccountCfg()
returns undefined for unknown accountIds but code continues to fallbacks.
Introduced in e5bca0832f when Telegram moved to extensions/.

Fix: return { token: "", source: "none" } with a diagnostic log when
a non-default accountId is not found. Existing behavior for known
accounts (with or without per-account tokens) preserved.

Test: added "does not fall through when non-default accountId not in
config" — 1/1 new, 10/10 existing unaffected.

Closes #49383

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: HCL <chenglunhu@gmail.com>

2026-03-20 23:24:40 +05:30

..

bot

fix: emit message:sent hook on Telegram streaming preview finalization (#50917)

2026-03-20 22:42:04 +05:30

account-inspect.test.ts

refactor: split plugin testing seam from bundled extension helpers

2026-03-17 01:05:09 -07:00

account-inspect.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

accounts.test.ts

refactor: split plugin testing seam from bundled extension helpers

2026-03-17 01:05:09 -07:00

accounts.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

action-runtime.test.ts

refactor(telegram): unify action normalization

2026-03-18 09:15:41 +05:30

action-runtime.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

allow-from.test.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

allow-from.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

allowed-updates.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

api-fetch.test.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

api-fetch.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

api-logging.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

approval-buttons.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

approval-buttons.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

audit-membership-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

audit.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

audit.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

bot-access.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-access.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

bot-deps.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-handlers.buffers.ts

refactor: split remaining monitor runtime helpers

2026-03-17 21:27:21 -07:00

bot-handlers.media.ts

refactor: split remaining monitor runtime helpers

2026-03-17 20:36:03 -07:00

bot-handlers.runtime.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-handlers.ts

refactor: dedupe channel plugin shared assembly

2026-03-17 20:13:52 -07:00

bot-message-context.acp-bindings.test.ts

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

bot-message-context.audio-transcript.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.body.ts

refactor: finalize plugin sdk legacy boundary cleanup

2026-03-16 22:51:46 -07:00

bot-message-context.dm-threads.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.dm-topic-threadid.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.implicit-mention.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.named-account-dm.test.ts

Telegram: fix named-account DM topic session keys (#48773)

2026-03-17 00:41:44 -07:00

bot-message-context.sender-prefix.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.session.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

bot-message-context.test-harness.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.thread-binding.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-context.topic-agentid.test.ts

fix(ci): update vitest configs after channel move to extensions/ (openclaw#46066)

2026-03-14 13:23:25 -05:00

bot-message-context.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-message-context.types.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-message-dispatch.sticker-media.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-message-dispatch.test.ts

fix: emit message:sent hook on Telegram streaming preview finalization (#50917)

2026-03-20 22:42:04 +05:30

bot-message-dispatch.ts

fix: emit message:sent hook on Telegram streaming preview finalization (#50917)

2026-03-20 22:42:04 +05:30

bot-message.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-message.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-command-menu.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-native-command-menu.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

bot-native-commands.fixture-test-support.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

bot-native-commands.group-auth.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-commands.menu-test-support.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-commands.plugin-auth.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot-native-commands.registry.test.ts

refactor(telegram-tests): share native command helpers

2026-03-17 07:23:43 +00:00

bot-native-commands.session-meta.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-commands.skills-allowlist.test.ts

test(telegram): fix native command runtime mocks

2026-03-18 12:46:09 +05:30

bot-native-commands.test-helpers.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-commands.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-native-commands.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot-updates.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

bot.create-telegram-bot.test-harness.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot.create-telegram-bot.test.ts

Channels: stabilize lane harness and monitor tests (#50167)

2026-03-19 01:47:48 -05:00

bot.fetch-abort.test.ts

Main recovery: restore formatter and contract checks (#49570)

2026-03-18 00:30:01 -07:00

bot.helpers.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

bot.media.downloads-media-file-path-no-file-download.e2e.test.ts

test(telegram): stabilize inbound media harness

2026-03-18 13:35:56 +05:30

bot.media.e2e-harness.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot.media.stickers-and-fragments.e2e.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot.media.test-utils.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

bot.runtime.ts

test(telegram): add bot runtime seam

2026-03-18 10:12:15 +05:30

bot.test.ts

Gateway: unify plugin interactive callback state (#50722)

2026-03-19 22:09:38 -04:00

bot.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

button-types.test.ts

refactor: unify telegram interactive button resolution

2026-03-16 05:54:16 +00:00

button-types.ts

refactor(plugin-sdk): split interactive runtime helpers

2026-03-18 11:30:34 +05:30

caption.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

channel-actions.test.ts

refactor(telegram): unify action normalization

2026-03-18 09:15:41 +05:30

channel-actions.ts

Plugins: move message tool schemas into channel plugins

2026-03-19 01:08:23 -04:00

channel.setup.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

channel.test.ts

Telegram: move group policy behind plugin boundary

2026-03-18 03:32:51 +00:00

channel.ts

Outbound: move target display fallbacks behind plugins

2026-03-19 01:08:22 -04:00

config-schema.ts

fix(release): isolate bundled config docs loading

2026-03-18 16:01:43 -07:00

conversation-route.base-session-key.test.ts

Telegram: fix named-account DM topic session keys (#48773)

2026-03-17 00:41:44 -07:00

conversation-route.ts

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

directory-config.ts

refactor: deduplicate channel runtime helpers

2026-03-18 16:37:27 +00:00

dm-access.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

draft-chunking.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

draft-chunking.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

draft-stream.test-helpers.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

draft-stream.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

draft-stream.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

exec-approvals-handler.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

exec-approvals-handler.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

exec-approvals.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

exec-approvals.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

fetch.env-proxy-runtime.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

fetch.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

fetch.ts

fix(telegram): unify transport fallback chain (#49148)

2026-03-17 22:44:15 +05:30

format.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

format.ts

refactor(channels): share route format and binding helpers

2026-03-20 09:30:34 -07:00

format.wrap-md.test.ts

fix: preserve Telegram word boundaries when rechunking HTML (#47274)

2026-03-15 18:10:49 +05:30

forum-service-message.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

group-access.base-access.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

group-access.policy-access.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

group-access.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

group-config-helpers.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

group-migration.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

group-migration.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

group-policy.test.ts

Telegram: move group policy behind plugin boundary

2026-03-18 03:32:51 +00:00

group-policy.ts

Telegram: move group policy behind plugin boundary

2026-03-18 03:32:51 +00:00

inline-buttons.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

inline-buttons.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

lane-delivery-state.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

lane-delivery-text-deliverer.ts

fix: emit message:sent hook on Telegram streaming preview finalization (#50917)

2026-03-20 22:42:04 +05:30

lane-delivery.test.ts

fix: emit message:sent hook on Telegram streaming preview finalization (#50917)

2026-03-20 22:42:04 +05:30

lane-delivery.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

media-understanding.runtime.ts

build: remove ineffective dynamic import shims

2026-03-16 23:11:59 -07:00

message-tool-schema.ts

Plugins: move message tool schemas into channel plugins

2026-03-19 01:08:23 -04:00

model-buttons.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

model-buttons.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

monitor.test.ts

Channels: stabilize lane harness and monitor tests (#50167)

2026-03-19 01:47:48 -05:00

monitor.ts

fix(telegram): persist sticky IPv4 fallback across polling restarts (fixes #48177) (#48282)

2026-03-17 21:56:12 +05:30

network-config.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

network-config.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

network-errors.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

network-errors.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

normalize.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

outbound-adapter.ts

refactor: deduplicate reply payload helpers

2026-03-18 17:30:25 +00:00

outbound-params.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

polling-session.test.ts

Telegram: stabilize pairing/session/forum routing and reply formatting tests (#50155)

2026-03-19 00:01:14 -05:00

polling-session.ts

fix(telegram): persist sticky IPv4 fallback across polling restarts (fixes #48177) (#48282)

2026-03-17 21:56:12 +05:30

probe.test.ts

refactor: split plugin testing seam from bundled extension helpers

2026-03-17 01:05:09 -07:00

probe.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

proxy.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

proxy.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

reaction-level.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

reaction-level.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

reasoning-lane-coordinator.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

reasoning-lane-coordinator.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

send.proxy.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

send.test-harness.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

send.test.ts

fix(telegram): normalize topic-edit targets

2026-03-16 08:03:22 +05:30

send.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

sendchataction-401-backoff.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

sendchataction-401-backoff.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

sent-message-cache.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

sequential-key.test.ts

Add /btw side questions (#45444)

2026-03-14 17:27:54 +02:00

sequential-key.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

setup-core.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

setup-surface.test.ts

fix(telegram): warn when setup leaves dmPolicy as pairing without allowFrom (#50710)

2026-03-20 09:29:33 +05:30

setup-surface.ts

fix(telegram): warn when setup leaves dmPolicy as pairing without allowFrom (#50710)

2026-03-20 09:29:33 +05:30

shared.ts

Plugins: internalize telegram SDK imports

2026-03-17 23:09:26 -07:00

status-issues.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

status-reaction-variants.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

status-reaction-variants.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

sticker-cache.test.ts

refactor(channels): route media helpers through runtime

2026-03-16 22:58:55 -07:00

sticker-cache.ts

refactor(channels): route media helpers through runtime

2026-03-16 22:58:55 -07:00

target-writeback.test.ts

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

target-writeback.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

targets.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

targets.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

thread-bindings.test.ts

fix(telegram): serialize thread binding persists

2026-03-20 00:30:11 -07:00

thread-bindings.ts

refactor(channels): share route format and binding helpers

2026-03-20 09:30:34 -07:00

token.test.ts

fix(telegram): prevent silent wrong-bot routing when accountId not in config

2026-03-20 23:24:40 +05:30

token.ts

fix(telegram): prevent silent wrong-bot routing when accountId not in config

2026-03-20 23:24:40 +05:30

update-offset-store.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

update-offset-store.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

voice.test.ts

refactor: move Telegram channel implementation to extensions/ (#45635)

2026-03-14 02:50:17 -07:00

voice.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

webhook.test.ts

refactor(telegram-tests): share webhook settlement helper

2026-03-17 07:23:43 +00:00

webhook.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00