Summary

OpenClaw 2026.4.7 ships with a build regression in setup-entry.js for at least two
bundled channel extensions (telegram and slack). The specifier paths were changed
between 2026.4.5 and 2026.4.7 to reference ./src/ files that are not included in the published npm tarball.

Related: #62880 covers the telegram side. This report adds the slack extension, root cause diff, and confirms via tarball comparison.

Root cause

In 2026.4.5, dist/extensions/telegram/setup-entry.js uses:
plugin: { specifier: "./channel-plugin-api.js", exportName: "telegramSetupPlugin" }

In 2026.4.7, it was changed to:
plugin: { specifier: "./src/channel.setup.js", exportName: "telegramSetupPlugin" }
secrets: { specifier: "./src/secret-contract.js", exportName: "channelSecrets" }

The src/ directory does not exist under dist/extensions/telegram/ in the published package. The actual compiled code lives at dist/channel.setup-DnkdT607.js
(referenced correctly by api.js and channel-plugin-api.js).

Affected extensions

telegram — missing src/channel.setup.js (was ./channel-plugin-api.js in 2026.4.5,
changed to ./src/channel.setup.js in 2026.4.7)

telegram — missing src/secret-contract.js (not referenced in 2026.4.5, added as
./src/secret-contract.js in 2026.4.7)

slack — missing src/secret-contract.js (not referenced in 2026.4.5, added as
./src/secret-contract.js in 2026.4.7)

Impact

• Config validation fails on startup, blocking the entire gateway — not just the
  affected channels
• openclaw doctor, openclaw plugins list, openclaw config validate all crash before they can run
• The error fires during bootstrap scan of all bundled extensions, even disabled ones — there is no config-level workaround
• Users upgrading from 2026.4.5 to 2026.4.7 have no working CLI to diagnose or fix the issue

Verification

Fresh install confirms the bug is in the published package, not local state:

npm uninstall -g openclaw && npm cache clean --force npm install -g [email protected]

Tarball comparison:

npm pack [email protected] && npm pack [email protected]
tar tf openclaw-2026.4.5.tgz | grep "extensions/telegram/src/" # empty tar tf openclaw-2026.4.7.tgz | grep "extensions/telegram/src/" # also empty

Both tarballs lack src/ — but only 2026.4.7's setup-entry.js references it

Workaround

Downgrade to 2026.4.5:
npm install -g [email protected]

Environment

• OpenClaw 2026.4.7 (5050017)
• Ubuntu Linux 6.17.0 / Node v22
• Clean npm install (no prior symlinks or local modifications)