alvin-bot 4.18.4 → 4.18.5

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to Alvin Bot are documented here.
 
+## [4.18.5] — 2026-04-23
+
+### 🐛 Fix: auto-reset stale SDK sessionId on empty-stream detection
+
+**Problem:** After a round of failed queries (common trigger: token rotation, quota exhaustion mid-turn, Claude backend dropping the session silently), the stored `session.sessionId` references a conversation that the Claude backend has already discarded. Every subsequent query passes `resume: session.sessionId` into the SDK, the backend can't find the session, and the stream terminates with zero text chunks. The v4.18.3 empty-stream detector only invalidated the availability cache — the sessionId stayed stale, so the next retry resumed the same dead session. A burn-credits loop that required a manual `/new` to escape.
+
+**Fix:** the provider now sets a new `sessionResetRequested: true` flag on the empty-stream text chunk. Both message handlers (`handlers/message.ts` and `handlers/platform-message.ts`) listen for it and clear `session.sessionId` + `session.lastSdkHistoryIndex` immediately, so the very next user message starts a fresh SDK session instead of resuming the dead one.
+
+**Net effect:** after a single empty-stream, the bot self-heals. One resend from the user is enough; no manual `/new`, no bot restart.
+
 ## [4.18.4] — 2026-04-23
 
 ### 🐛 Critical fix: detect Anthropic quota-exhausted responses

package/dist/handlers/message.js

@@ -446,6 +446,16 @@ export async function handleMessage(ctx) {
                     // Clear any tool-use status line — real content is flowing now.
                     streamer.setStatus(null);
                     await streamer.update(finalText);
+                    // v4.18.5 — Provider requested a session reset (empty-stream / stale
+                    // sessionId recovery). Clear the session's sessionId + SDK anchor so
+                    // the next query starts a fresh Claude session instead of resuming
+                    // the broken one. Without this, the bot would loop empty-stream
+                    // replies and burn credits until the user manually runs /new.
+                    if (chunk.sessionResetRequested) {
+                        console.warn(`[session] provider requested reset for ${sessionKey} — clearing sessionId + SDK anchor`);
+                        session.sessionId = null;
+                        session.lastSdkHistoryIndex = -1;
+                    }
                     // Emit the new delta for observers — accumulated text minus what
                     // we already broadcast.
                     if (finalText.length > lastBroadcastLen) {

package/dist/handlers/platform-message.js

@@ -194,6 +194,13 @@ export async function handlePlatformMessage(msg, adapter) {
             switch (chunk.type) {
                 case "text":
                     finalText = chunk.text || "";
+                    // v4.18.5 — Provider-requested session reset on empty-stream detection.
+                    // Mirror of the same handling in handlers/message.ts.
+                    if (chunk.sessionResetRequested) {
+                        console.warn(`[session] provider requested reset for ${sessionKey} — clearing sessionId + SDK anchor`);
+                        session.sessionId = null;
+                        session.lastSdkHistoryIndex = -1;
+                    }
                     break;
                 case "done":
                     if (chunk.sessionId)

package/dist/providers/claude-sdk-provider.js

@@ -377,13 +377,19 @@ export class ClaudeSDKProvider {
                     //      and knows to resend — without tripping the failover.
                     if (accumulatedText === "" && outputTok === 0) {
                         this.invalidateAvailabilityCache();
-                        const hint = "⚠️ Claude antwortete mit leerem Stream (meist nach /extra-usage, /login oder Token-Refresh). " +
-                            "Der SDK-Token-Cache wurde geleert — bitte schick die Nachricht einfach nochmal.";
+                        const hint = "⚠️ Claude antwortete mit leerem Stream. " +
+                            "Meist Folge einer stale SDK-Session nach /extra-usage, /login oder Token-Refresh. " +
+                            "Ich starte die Session automatisch neu — bitte schick die Nachricht einfach nochmal.";
                         yield {
                             type: "text",
                             text: hint,
                             delta: hint,
                             sessionId: resultMsg.session_id || capturedSessionId,
+                            // v4.18.5 — Signal to the message handler that it should clear
+                            // session.sessionId now. Without this the next query resumes
+                            // the same stale sessionId and produces another empty stream
+                            // in a loop that burns credits until the user manually /new's.
+                            sessionResetRequested: true,
                         };
                     }
                     yield {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alvin-bot",
-  "version": "4.18.4",
+  "version": "4.18.5",
   "description": "Alvin Bot \u2014 Your personal AI agent on Telegram, WhatsApp, Discord, Signal, and Web.",
   "type": "module",
   "main": "dist/index.js",