arisa 2.3.21 → 2.3.23

package/bin/arisa.js

@@ -495,6 +495,10 @@ if (isRoot() && arisaUserExists()) {
 
   // All processes use arisa's data dir (inherited by Daemon → Core)
   process.env.ARISA_DATA_DIR = arisaDataDir;
+
+  // Permissive umask so files Daemon (root) creates at runtime in the shared
+  // data dir are readable/writable by Core (arisa). Safe in Docker containers.
+  process.umask(0o000);
 }
 
 // Then fall through to normal daemon startup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arisa",
-  "version": "2.3.21",
+  "version": "2.3.23",
   "description": "Arisa - dynamic agent runtime with daemon/core architecture that evolves through user interaction",
   "keywords": [
     "tinyclaw",

package/src/daemon/index.ts

@@ -262,11 +262,25 @@ void autoInstallMissingClis();
 // --- Start Core process ---
 startCore();
 
-// --- Connect Telegram ---
-telegram.connect().catch((error) => {
-  log.error(`Telegram connection failed: ${error}`);
-  process.exit(1);
-});
+// --- Connect Telegram (with retry for 409 conflict from stale polling sessions) ---
+(async function connectTelegram(maxRetries = 5) {
+  for (let attempt = 1; attempt <= maxRetries; attempt++) {
+    try {
+      await telegram.connect();
+      return; // connected — polling continues in background
+    } catch (error) {
+      const is409 = String(error).includes("409");
+      if (is409 && attempt < maxRetries) {
+        const wait = attempt * 5;
+        log.warn(`Telegram 409 conflict (attempt ${attempt}/${maxRetries}), retrying in ${wait}s...`);
+        await new Promise((r) => setTimeout(r, wait * 1000));
+        continue;
+      }
+      log.error(`Telegram connection failed: ${error}`);
+      process.exit(1);
+    }
+  }
+})();
 
 // --- Graceful shutdown ---
 function shutdown() {

package/src/daemon/lifecycle.ts

@@ -15,6 +15,7 @@ import { config } from "../shared/config";
 import { createLogger } from "../shared/logger";
 import { attemptAutoFix } from "./autofix";
 import { isRunningAsRoot } from "../shared/ai-cli";
+import { spawnSync } from "child_process";
 import { join } from "path";
 
 const log = createLogger("daemon");
@@ -126,6 +127,10 @@ export function startCore() {
   // (tokens, ARISA_DATA_DIR, API keys). We only override HOME/BUN/PATH.
   let cmd: string[];
   if (isRunningAsRoot()) {
+    // Ensure arisa owns all data dir files created during Daemon init
+    // (encryption keys, DB, PID files, etc.) before Core reads them.
+    spawnSync("chown", ["-R", "arisa:arisa", config.arisaDir], { stdio: "ignore" });
+
     const bunEnv = "export HOME=/home/arisa && export BUN_INSTALL=/home/arisa/.bun && export PATH=/home/arisa/.bun/bin:$PATH";
     const inner = `${bunEnv} && cd ${config.projectDir} && exec bun --watch ${coreEntry}`;
     cmd = ["su", "arisa", "-s", "/bin/bash", "-c", inner];