Robin Waslander 7e49e98f79 fix(telegram): validate webhook secret before reading request body ...

Refs: GHSA-jq3f-vjww-8rq7

2026-03-13 23:21:48 +01:00

..

bot

fix(telegram): thread media transport policy into SSRF (#44639)

2026-03-13 10:11:43 +05:30

account-inspect.test.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

account-inspect.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

accounts.test.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

accounts.ts

refactor(telegram): share account config helpers

2026-03-07 17:05:23 +00:00

allowed-updates.ts

feat(telegram): add channel_post support for bot-to-bot communication (#17857)

2026-02-17 14:44:18 +05:30

api-logging.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

approval-buttons.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

approval-buttons.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

audit-membership-runtime.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

audit.test.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

audit.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

bot-access.test.ts

test(telegram): cover sender-only groupAllowFrom normalization

2026-03-07 16:34:42 -08:00

bot-access.ts

docs(telegram): clarify group and sender allowlists (#42451)

2026-03-10 21:56:30 +03:00

bot-handlers.ts

fix(telegram): thread media transport policy into SSRF (#44639)

2026-03-13 10:11:43 +05:30

bot-message-context.acp-bindings.test.ts

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

bot-message-context.audio-transcript.test.ts

refactor(channels): dedupe monitor message test flows

2026-03-03 01:06:00 +00:00

bot-message-context.body.ts

refactor(telegram): split bot message context helpers

2026-03-08 02:16:03 +00:00

bot-message-context.dm-threads.test.ts

telegram: route dm sessions by sender id

2026-03-02 22:08:07 +00:00

bot-message-context.dm-topic-threadid.test.ts

Fix Telegram DM last-route metadata leakage (#19491)

2026-02-22 11:29:59 +05:30

bot-message-context.implicit-mention.test.ts

refactor(auto-reply,telegram,config): extract guard and forum helpers

2026-03-02 23:48:11 +00:00

bot-message-context.named-account-dm.test.ts

refactor: share telegram named account dm fixtures

2026-03-13 20:19:39 +00:00

bot-message-context.sender-prefix.test.ts

refactor(channels): dedupe message routing and telegram helpers

2026-02-22 07:44:57 +00:00

bot-message-context.session.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

bot-message-context.test-harness.ts

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

bot-message-context.thread-binding.test.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

bot-message-context.topic-agentid.test.ts

refactor(telegram): dedupe topic agent routing tests

2026-03-07 17:05:23 +00:00

bot-message-context.ts

refactor(telegram): split bot message context helpers

2026-03-08 02:16:03 +00:00

bot-message-context.types.ts

refactor(telegram): split bot message context helpers

2026-03-08 02:16:03 +00:00

bot-message-dispatch.sticker-media.test.ts

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

bot-message-dispatch.test.ts

feat: show status reaction during context compaction (#35474)

2026-03-12 21:06:15 -07:00

bot-message-dispatch.ts

feat: show status reaction during context compaction (#35474)

2026-03-12 21:06:15 -07:00

bot-message.test.ts

refactor: share telegram dispatch failure harness

2026-03-13 20:19:39 +00:00

bot-message.ts

fix(telegram): surface fallback on dispatch failures (#39209, thanks @riftzen-bit)

2026-03-07 22:41:09 +00:00

bot-native-command-menu.test.ts

fix: quiet Telegram command overflow retry logs

2026-03-13 01:45:56 +00:00

bot-native-command-menu.ts

fix: quiet Telegram command overflow retry logs

2026-03-13 01:45:56 +00:00

bot-native-commands.group-auth.test.ts

refactor: share telegram native command auth harness

2026-03-13 20:19:38 +00:00

bot-native-commands.plugin-auth.test.ts

fix: repair ci audit and type drift

2026-03-13 21:02:19 +00:00

bot-native-commands.session-meta.test.ts

fix: repair ci audit and type drift

2026-03-13 21:02:19 +00:00

bot-native-commands.skills-allowlist.test.ts

fix: repair ci audit and type drift

2026-03-13 21:02:19 +00:00

bot-native-commands.test-helpers.ts

[codex] Polish sidebar status, agent skills, and chat rendering (#45451)

2026-03-13 16:53:40 -05:00

bot-native-commands.test.ts

fix: repair ci audit and type drift

2026-03-13 21:02:19 +00:00

bot-native-commands.ts

fix(telegram): thread media transport policy into SSRF (#44639)

2026-03-13 10:11:43 +05:30

bot-updates.ts

fix(telegram): unify inbound handling for message-like updates (#20591)

2026-02-19 09:54:47 +05:30

bot.create-telegram-bot.test-harness.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

bot.create-telegram-bot.test.ts

fix: abort telegram getupdates on shutdown (#23950) (thanks @Gkinthecodeland)

2026-03-09 06:03:46 +00:00

bot.fetch-abort.test.ts

refactor: share auth overview and fetch test helpers

2026-03-13 20:19:38 +00:00

bot.helpers.test.ts

feat(telegram): default streaming preview to partial

2026-03-02 23:04:12 +00:00

bot.media.downloads-media-file-path-no-file-download.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

bot.media.e2e-harness.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

bot.media.stickers-and-fragments.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

bot.media.test-utils.ts

test: fix TS2742 in telegram media test utils

2026-02-25 02:32:35 +00:00

bot.test.ts

fix(telegram): allow fallback models in /model validation (#40105)

2026-03-12 13:55:51 +01:00

bot.ts

fix(telegram): thread media transport policy into SSRF (#44639)

2026-03-13 10:11:43 +05:30

button-types.ts

refactor(test): stabilize case tables and readonly helper inputs

2026-02-22 00:10:07 +01:00

caption.ts

refactor: share telegram caption splitting

2026-01-17 03:50:09 +00:00

conversation-route.ts

refactor(routing): centralize inbound last-route policy

2026-03-08 02:16:03 +00:00

dm-access.ts

refactor: unify DM pairing challenge flows

2026-03-07 20:33:50 +00:00

draft-chunking.test.ts

chore: Fix types in tests 24/N.

2026-02-17 14:30:36 +09:00

draft-chunking.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

draft-stream.test-helpers.ts

fix(telegram): prevent duplicate messages with slow LLM providers (#41932)

2026-03-11 11:19:55 +05:30

draft-stream.test.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

draft-stream.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

exec-approvals-handler.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

exec-approvals-handler.ts

refactor: share exec approval session target routing

2026-03-13 20:19:39 +00:00

exec-approvals.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

exec-approvals.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

fetch.env-proxy-runtime.test.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

fetch.test.ts

refactor: share telegram network test helpers

2026-03-13 18:38:12 +00:00

fetch.ts

fix(telegram): thread media transport policy into SSRF (#44639)

2026-03-13 10:11:43 +05:30

format.test.ts

fix(telegram): chunk long html outbound messages (#42240)

2026-03-10 22:53:04 +05:30

format.ts

fix(telegram): chunk long html outbound messages (#42240)

2026-03-10 22:53:04 +05:30

format.wrap-md.test.ts

fix: preserve whitespace in telegram html retry chunking

2026-02-28 08:13:59 +05:30

forum-service-message.ts

refactor(auto-reply,telegram,config): extract guard and forum helpers

2026-03-02 23:48:11 +00:00

group-access.base-access.test.ts

fix(telegram): fail closed on empty group allowFrom override

2026-02-25 11:54:27 +05:30

group-access.group-policy.test.ts

test: share runtime group policy fallback cases

2026-03-10 22:20:19 +00:00

group-access.policy-access.test.ts

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

group-access.ts

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

group-config-helpers.ts

feat(telegram): improve DM topics support (#30579) (thanks @kesor)

2026-03-02 09:06:45 +05:30

group-migration.test.ts

refactor(channels): dedupe plugin routing and channel helpers

2026-02-22 14:08:51 +00:00

group-migration.ts

refactor(telegram): simplify send/dispatch/target handling (#17819)

2026-02-16 14:00:34 +05:30

inline-buttons.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

inline-buttons.ts

refactor(telegram): simplify send/dispatch/target handling (#17819)

2026-02-16 14:00:34 +05:30

lane-delivery-state.ts

refactor(telegram): split lane delivery modules

2026-03-08 01:14:16 +00:00

lane-delivery-text-deliverer.ts

fix(telegram): clear stale retain before transient final fallback (#41763)

2026-03-11 21:36:43 +05:30

lane-delivery.test.ts

refactor: share lane delivery test flows

2026-03-13 20:19:38 +00:00

lane-delivery.ts

fix(telegram): prevent duplicate messages when preview edit times out (#41662)

2026-03-10 10:17:39 +05:30

model-buttons.test.ts

refactor: unify queueing and normalize telegram slack flows

2026-03-02 20:55:15 +00:00

model-buttons.ts

refactor: unify queueing and normalize telegram slack flows

2026-03-02 20:55:15 +00:00

monitor.test.ts

refactor: share telegram network test helpers

2026-03-13 18:38:12 +00:00

monitor.ts

fix: scope telegram polling restart to telegram errors (#43799)

2026-03-12 13:14:17 +05:30

network-config.test.ts

test: fix CI type regressions

2026-03-13 19:53:40 +00:00

network-config.ts

fix(telegram): add dnsResultOrder=ipv4first default on Node 22+ to fix fetch failures (#5405)

2026-02-22 20:07:51 +05:30

network-errors.test.ts

test: tighten channel auth and network coverage

2026-03-13 18:06:39 +00:00

network-errors.ts

fix: scope telegram polling restart to telegram errors (#43799)

2026-03-12 13:14:17 +05:30

outbound-params.ts

fix(telegram): scope DM topic thread keys by chat id (#31064)

2026-03-02 02:54:45 +00:00

polling-session.ts

fix: clear telegram polling cleanup timers

2026-03-12 09:36:04 +05:30

probe.test.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

probe.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

proxy.test.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

proxy.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

reaction-level.test.ts

refactor(channels): dedupe message routing and telegram helpers

2026-02-22 07:44:57 +00:00

reaction-level.ts

refactor(reactions): share reaction level resolver

2026-02-14 15:39:45 +00:00

reasoning-lane-coordinator.test.ts

refactor(text): share code-region parsing for reasoning tags

2026-02-22 07:44:57 +00:00

reasoning-lane-coordinator.ts

refactor(text): share code-region parsing for reasoning tags

2026-02-22 07:44:57 +00:00

send.proxy.test.ts

fix(telegram): move network fallback to resolver-scoped dispatchers (#40740)

2026-03-10 11:28:51 +05:30

send.test-harness.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

send.test.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

send.ts

fix(telegram): prevent duplicate messages with slow LLM providers (#41932)

2026-03-11 11:19:55 +05:30

sendchataction-401-backoff.test.ts

fix(telegram): add sendChatAction 401 backoff guard (land #27415, thanks @widingmarcus-cyber)

2026-02-26 11:45:57 +00:00

sendchataction-401-backoff.ts

fix(telegram): add sendChatAction 401 backoff guard (land #27415, thanks @widingmarcus-cyber)

2026-02-26 11:45:57 +00:00

sent-message-cache.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

sequential-key.test.ts

refactor(telegram): extract sequential key module

2026-03-03 02:32:13 +00:00

sequential-key.ts

refactor(telegram): extract sequential key module

2026-03-03 02:32:13 +00:00

status-reaction-variants.test.ts

fix: preselect Telegram-supported status reaction variants (#22380)

2026-02-21 09:20:20 +05:30

status-reaction-variants.ts

feat: show status reaction during context compaction (#35474)

2026-03-12 21:06:15 -07:00

sticker-cache.test.ts

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

sticker-cache.ts

fix(models): support minimax-portal coding plan vlm routing for image tool (openclaw#33953)

2026-03-07 14:30:53 -06:00

target-writeback.test.ts

fix(cron): preserve telegram announce target + delivery truth

2026-02-23 11:45:18 +05:30

target-writeback.ts

fix(cron): preserve telegram announce target + delivery truth

2026-02-23 11:45:18 +05:30

targets.test.ts

fix: persist resolved telegram delivery targets at runtime

2026-02-23 11:45:18 +05:30

targets.ts

fix: persist resolved telegram delivery targets at runtime

2026-02-23 11:45:18 +05:30

thread-bindings.test.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

thread-bindings.ts

fix(runtime): duplicate messages, share singleton state across bundled chunks (#43683)

2026-03-12 14:59:27 -04:00

token.test.ts

test: refine telegram token coverage

2026-03-13 18:19:27 +00:00

token.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

update-offset-store.test.ts

fix(telegram): harden persisted offset confirmation and stall recovery

2026-03-07 20:47:33 +00:00

update-offset-store.ts

fix(telegram): harden persisted offset confirmation and stall recovery

2026-03-07 20:47:33 +00:00

voice.test.ts

fix(media): recognize MP3 and M4A as voice-compatible audio (#15438)

2026-02-14 03:03:02 +01:00

voice.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

webhook.test.ts

fix(telegram): validate webhook secret before reading request body

2026-03-13 23:21:48 +01:00

webhook.ts

fix(telegram): validate webhook secret before reading request body

2026-03-13 23:21:48 +01:00