refactor: consolidate Telegram user ID configuration into TELEGRAM_ALLOWED_USERS environment variable

.env.example

@@ -164,11 +164,8 @@ WHATSAPP_ENABLED=false
 # Get bot token from: https://t.me/BotFather
 TELEGRAM_BOT_TOKEN=your_bot_token_here
 
-# Single user ID (from https://t.me/userinfobot)
-TELEGRAM_USER_ID=123456789
-
-# Multiple user IDs (comma-separated for team access)
-# TELEGRAM_USER_IDS=123456789,987654321,555555555
+# Allowed Telegram User IDs (comma-separated numeric IDs)
+# TELEGRAM_ALLOWED_USERS=123456789,987654321
 
 # ── OPTIONAL: Cloudflare Outbound Proxy ──
 # Automatically bypass platform network blocks for Telegram/WhatsApp/Google/etc.

README.md

@@ -16,6 +16,10 @@ secrets:
     description: "Strong token to secure your OpenClaw Control UI (generate: openssl rand -hex 32)."
   - name: CLOUDFLARE_WORKERS_TOKEN
     description: "Cloudflare API token — auto-creates a Worker proxy and KeepAlive monitor."
+  - name: TELEGRAM_ALLOWED_USERS
+    description: "Comma-separated Telegram user IDs for access"
+  - name: TELEGRAM_BOT_TOKEN
+    description: "Telegram bot token from BotFather"
 ---
 
 <!-- Badges -->
@@ -111,8 +115,7 @@ To chat via Telegram:
 | Variable | Default | Description |
 | :--- | :--- | :--- |
 | `TELEGRAM_BOT_TOKEN` | — | Telegram bot token from BotFather |
-| `TELEGRAM_USER_ID` | — | Single Telegram user ID allowlist |
-| `TELEGRAM_USER_IDS` | — | Comma-separated Telegram user IDs for team access |
+| `TELEGRAM_ALLOWED_USERS` | — | Comma-separated Telegram user IDs for access |
 
 ## 🌐 Cloudflare Proxy Setup
 

SECURITY.md

@@ -18,7 +18,7 @@ When deploying HuggingClaw:
 - **Use a strong `GATEWAY_TOKEN`** — generate with `openssl rand -hex 32`
 - **Keep your HF token scoped** — use fine-grained tokens with minimum permissions
 - **Don't commit `.env` files** — the `.gitignore` already excludes them
-- **Use `TELEGRAM_USER_ID`** — restricts bot access to your account only
+- **Use `TELEGRAM_ALLOWED_USERS`** — restricts bot access to your account only
 - **Review logs regularly** — check for unauthorized access attempts
 
 ## Supported Versions

start.sh

@@ -393,7 +393,13 @@ if [ -n "${TELEGRAM_BOT_TOKEN:-}" ]; then
       }
   ')
   
-  if [ -n "${TELEGRAM_USER_IDS:-}" ]; then
+  if [ -n "${TELEGRAM_ALLOWED_USERS:-}" ]; then
+    # Convert comma-separated IDs to JSON array (already safe — jq -R parses).
+    IDS_JSON=$(echo "$TELEGRAM_ALLOWED_USERS" | tr ',' '\n' | sed 's/^ *//;s/ *$//' | jq -R . | jq -s .)
+    CONFIG_JSON=$(jq \
+      --argjson ids "$IDS_JSON" \
+      '.channels.telegram += {"dmPolicy": "allowlist", "allowFrom": $ids}' <<<"$CONFIG_JSON")
+  elif [ -n "${TELEGRAM_USER_IDS:-}" ]; then
     # Convert comma-separated IDs to JSON array (already safe — jq -R parses).
     IDS_JSON=$(echo "$TELEGRAM_USER_IDS" | tr ',' '\n' | sed 's/^ *//;s/ *$//' | jq -R . | jq -s .)
     CONFIG_JSON=$(jq \