chore: prepare 2026.4.7-1 npm release

CHANGELOG.md

@@ -4,10 +4,14 @@ Docs: https://docs.openclaw.ai
 
 ## Unreleased
 
+## 2026.4.7-1
+
 ### Fixes
 
 - Agents/exec: keep `/exec` current-default reporting aligned with real runtime behavior so `host=auto` sessions surface the correct host-aware fallback policy (`full/off` on gateway or node, `deny/off` on sandbox) instead of stale stricter defaults.
 - Agents/progress: keep `update_plan` available for OpenAI-family runs while returning compact success payloads and allowing `tools.experimental.planTool=false` to opt out.
+- Telegram/setup: load setup and secret contracts through packaged top-level sidecars so installed 2026.4.7 npm builds no longer try to import missing `dist/extensions/telegram/src/*` files during gateway startup.
+- Bundled channels/setup: load shared secret contracts through packaged top-level sidecars across BlueBubbles, Feishu, Google Chat, IRC, Matrix, Mattermost, Microsoft Teams, Nextcloud Talk, Slack, and Zalo so installed npm builds no longer rely on missing `dist/extensions/*/src/*` files during gateway startup.
 
 ## 2026.4.7
 
@@ -109,8 +113,6 @@ Docs: https://docs.openclaw.ai
 - Agents/model resolution: let explicit `openai-codex/gpt-5.4` selection prefer provider runtime metadata when it reports a larger context window, keeping configured Codex runs aligned with the live provider limits. (#62694) Thanks @ruclaw7.
 - Agents/model resolution: keep explicit-model runtime comparisons on the configured workspace plugin registry, so workspace-installed providers do not silently fall back to stale explicit metadata during runtime model lookup.
 - Providers/Z.AI: default onboarding and endpoint detection to GLM-5.1 instead of GLM-5. (#61998) Thanks @serg0x.
-- Telegram/setup: load setup and secret contracts through packaged top-level sidecars so installed 2026.4.7 npm builds no longer try to import missing `dist/extensions/telegram/src/*` files during gateway startup.
-- Bundled channels/setup: load shared secret contracts through packaged top-level sidecars across BlueBubbles, Feishu, Google Chat, IRC, Matrix, Mattermost, Microsoft Teams, Nextcloud Talk, Slack, and Zalo so installed npm builds no longer rely on missing `dist/extensions/*/src/*` files during gateway startup.
 
 ## 2026.4.5
 

docs/.generated/config-baseline.sha256

@@ -1,4 +1,4 @@
-85286818bd89469cf10a9fad5039c2129384fa5cc685de0108c1cdc219e0f332  config-baseline.json
+2cbfd5571e122ea9b9ca6b3e407f63976f630354e7d6544aa0fd0a8e2c391fc9  config-baseline.json
 065f474b340fc22b19358cb298131037cbb2a3411ef0b6f765072bbaafedf751  config-baseline.core.json
 d22f4414b79ee03d896e58d875c80523bcc12303cbacb1700261e6ec73945187  config-baseline.channel.json
-483d4f3c1d516719870ad6f2aba6779b9950f85471ee77b9994a077a7574a892  config-baseline.plugin.json
+e655872f3712fa34c3dc82f09a994f38aa92f5108b2815498bc7fddac36d8c35  config-baseline.plugin.json

docs/.generated/plugin-sdk-api-baseline.sha256

@@ -1,2 +1,2 @@
-467a44dd86fa7e2f62e0ba6cf0a2127001876dc21c31d695a87a91ea4d147101  plugin-sdk-api-baseline.json
-0004e7feade04914beea79ae96b343448e2e77fbd4e743cd652ea516852d86ad  plugin-sdk-api-baseline.jsonl
+20b57f1d7dd9545d6812b895d896d9441e30867f00598e3eb7cab0ae916eb0f2  plugin-sdk-api-baseline.json
+164c2da632598f9d84789926bd6589347420db949da3461096cfb32c82cf47c1  plugin-sdk-api-baseline.jsonl

package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw",
-  "version": "2026.4.8",
+  "version": "2026.4.7-1",
   "description": "Multi-channel AI gateway with extensible messaging integrations",
   "keywords": [],
   "homepage": "https://github.com/openclaw/openclaw#readme",

src/config/schema.base.generated.ts

@@ -26904,6 +26904,6 @@ export const GENERATED_BASE_CONFIG_SCHEMA: BaseConfigSchemaResponse = {
       tags: ["advanced", "url-secret"],
     },
   },
-  version: "2026.4.8",
+  version: "2026.4.7-1",
   generatedAt: "2026-03-22T21:17:33.302Z",
 };