clawgram 2.21.0 → 2.22.0

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "clawgram",
   "name": "Clawgram",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
-  "version": "2.21.0",
+  "version": "2.22.0",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,
@@ -35,7 +35,8 @@
                   "type": "number"
                 }
               ]
-            }
+            },
+            "description": "Who may talk to this account. Numeric Telegram ids are the recommended form: an `@username` entry is a claim about a handle, and a handle can be released and taken by someone else — after which the entry admits a stranger. Ids do not change hands. `[\"*\"]` means anyone."
           },
           "groups": {
             "type": "object",
@@ -70,7 +71,8 @@
                         "type": "number"
                       }
                     ]
-                  }
+                  },
+                  "description": "Who may talk to this account. Numeric Telegram ids are the recommended form: an `@username` entry is a claim about a handle, and a handle can be released and taken by someone else — after which the entry admits a stranger. Ids do not change hands. `[\"*\"]` means anyone."
                 },
                 "tools": {
                   "type": "object",
@@ -342,7 +344,8 @@
                         "type": "number"
                       }
                     ]
-                  }
+                  },
+                  "description": "Who may talk to this account. Numeric Telegram ids are the recommended form: an `@username` entry is a claim about a handle, and a handle can be released and taken by someone else — after which the entry admits a stranger. Ids do not change hands. `[\"*\"]` means anyone."
                 },
                 "groups": {
                   "type": "object",
@@ -377,7 +380,8 @@
                               "type": "number"
                             }
                           ]
-                        }
+                        },
+                        "description": "Who may talk to this account. Numeric Telegram ids are the recommended form: an `@username` entry is a claim about a handle, and a handle can be released and taken by someone else — after which the entry admits a stranger. Ids do not change hands. `[\"*\"]` means anyone."
                       },
                       "tools": {
                         "type": "object",
@@ -445,6 +449,13 @@
                     }
                   }
                 },
+                "operatorIds": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Who receives core's operational telemetry in a DM — tool-failure warnings, model-fallback notices. These carry shell commands and secret-store paths, so they go only to the people named here. Absent falls back to allowFrom when that is a concrete list; a wildcard or an empty list means no operator is identified and the notices are dropped everywhere (they stay in the run diagnostics and the gateway log)."
+                },
                 "readChats": {
                   "type": "array",
                   "items": {
@@ -452,6 +463,13 @@
                   },
                   "description": "Chat ids the account may read history and membership for. Absent means no restriction; an empty array denies everything."
                 },
+                "sendChats": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Chat ids the account may SEND to (2.18.0): send, upload-file, react and core's delivery path. Same shape as readChats — absent means no restriction, [] denies everything, [\"*\"] allows every chat. A phone number is refused in every configuration, wildcard included: messaging a raw number starts a conversation with someone who never interacted with the account. Without this list an injected turn can message strangers from the owner's personal account or carry a work chat's content into a DM one send at a time."
+                },
                 "manageChats": {
                   "type": "array",
                   "items": {
@@ -561,6 +579,22 @@
           "help": "Trusted prompt block appended for messages from this group — the place to state what this chat is about and what stays out of it.",
           "advanced": true
         },
+        "accounts.*.operatorIds": {
+          "label": "Operator Ids",
+          "help": "Who may receive tool-failure and fallback notices in a DM. These quote shell commands and secret-store paths. Leave empty to drop them everywhere.",
+          "advanced": true
+        },
+        "accounts.*.apiHash": {
+          "label": "API Hash",
+          "help": "The account's API hash from my.telegram.org. Together with the session string it is a bearer credential for everything this account can reach.",
+          "sensitive": true
+        },
+        "accounts.*.sessionString": {
+          "label": "Session String",
+          "help": "The logged-in session for this account. Whoever holds it is logged in as this account — no password, no 2FA.",
+          "sensitive": true,
+          "advanced": true
+        },
         "accounts.*.twoFaPassword": {
           "label": "2FA Password",
           "help": "The account's Telegram two-step verification password. Only needed for ownership transfer.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawgram",
-  "version": "2.21.0",
+  "version": "2.22.0",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
   "main": "./dist/index.js",
   "scripts": {
@@ -28,7 +28,8 @@
     "dist",
     "package.json",
     "openclaw.plugin.json",
-    "README.md"
+    "README.md",
+    "npm-shrinkwrap.json"
   ],
   "author": "Konstantin Dipezh (d3pre5s)",
   "contributors": [
@@ -56,15 +57,22 @@
     }
   },
   "devDependencies": {
+    "@types/node": "^22",
     "openclaw": "2026.7.1-2",
     "typescript": "^5.9.3"
   },
+  "engines": {
+    "node": ">=22.22.3"
+  },
   "peerDependencies": {
     "openclaw": ">=2026.5.26"
   },
   "installDependencies": true,
   "dependencies": {
-    "json5": "^2.2.3",
-    "telegram": "^2.26.22"
+    "json5": "2.2.3",
+    "telegram": "2.26.22"
+  },
+  "overrides": {
+    "ip-address": "10.7.0"
   }
 }