polygram 0.10.0-rc.13 → 0.10.0-rc.14

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "polygram",
-  "version": "0.10.0-rc.13",
+  "version": "0.10.0-rc.14",
   "description": "Telegram integration for Claude Code that preserves the OpenClaw per-chat session model. Migration target for OpenClaw users. Multi-bot, multi-chat, per-topic isolation; SQLite transcripts; inline-keyboard approvals. Bundles /polygram:status|logs|pair-code|approvals admin commands plus history (transcript queries) and polygram-send (out-of-turn IPC sends with file-upload validation) skills.",
   "keywords": [
     "telegram",

package/lib/process/tmux-process.js

@@ -387,14 +387,18 @@ class TmuxProcess extends Process {
     try {
       // R2-F1: sanitization happens inside runner.pasteText; we also
       // log when chars get stripped.
-      const result = await this.runner.pasteText(this.tmuxName, prompt);
+      // rc.13.1: pasteAndEnter holds a per-session async lock around
+      // paste + Enter so a concurrent injectUserMessage paste can't
+      // interleave keystrokes with this primary turn's prompt
+      // (shumorobot 2026-05-15 saw msg 696's prompt truncated at
+      // `chat_id="-1003` by msg 698's autosteer paste cutting in).
+      const result = await this._pasteAndEnter(prompt);
       if (result.stripped > 0) {
         this.logger.warn?.(
           `[${this.label}] stripped ${result.stripped} control chars from prompt`,
         );
         this.emit('prompt-sanitized', { stripped: result.stripped, source: 'send' });
       }
-      await this.runner.sendControl(this.tmuxName, 'Enter');
 
       // Race: JSONL result event vs capture-pane quiescence fallback
       // vs hard timeout. JSONL is the primary signal (carries structured
@@ -814,6 +818,31 @@ class TmuxProcess extends Process {
     }
   }
 
+  /**
+   * rc.13.1: paste a prompt body AND press Enter as an atomic
+   * per-session operation. The production runner provides
+   * `pasteAndEnter(name, text)` which holds a per-session async lock
+   * across the paste+Enter pair so concurrent pasteText calls from
+   * a primary pm.send and a parallel injectUserMessage cannot
+   * interleave keystrokes in the TUI input box (root cause of the
+   * shumorobot 2026-05-15 reply-mis-attribution bug: msg 696's
+   * paste was truncated at `chat_id="-1003` when msg 698's autosteer
+   * paste cut in).
+   *
+   * Test runners without pasteAndEnter fall back to the sequential
+   * pasteText + sendControl(Enter) pair. Behaviour-equivalent for
+   * non-concurrent test scenarios; only production with a real tmux
+   * + concurrent injects exposes the race.
+   */
+  async _pasteAndEnter(text) {
+    if (typeof this.runner.pasteAndEnter === 'function') {
+      return this.runner.pasteAndEnter(this.tmuxName, text);
+    }
+    const result = await this.runner.pasteText(this.tmuxName, text);
+    await this.runner.sendControl(this.tmuxName, 'Enter');
+    return result;
+  }
+
   // ─── completion detection (§4.A capture-pane diff path — fallback) ──
 
   /**
@@ -1207,9 +1236,13 @@ class TmuxProcess extends Process {
     // intended extra-turn-reply path with reply_to=msg 686).
     const oneLine = safe.replace(/\r?\n/g, ' / ');
 
-    Promise.resolve()
-      .then(() => this.runner.pasteText(this.tmuxName, safe))
-      .then(() => this.runner.sendControl(this.tmuxName, 'Enter'))
+    // rc.13.1: use pasteAndEnter so the autosteer's paste+Enter pair
+    // serialises behind any in-flight pm.send paste+Enter. Without
+    // the lock, the autosteer paste could interleave keystrokes into
+    // the middle of a primary turn's prompt (caught on shumorobot
+    // 2026-05-15: msg 696's prompt got truncated mid-attribute when
+    // msg 698's autosteer paste cut in).
+    this._pasteAndEnter(safe)
       .catch((err) => this.emit('inject-fail', { err: err.message }));
 
     // Tell the next assistant-chunk to open a fresh Telegram bubble

package/lib/tmux/tmux-runner.js

@@ -32,6 +32,7 @@ const childProcess = require('child_process');
 const crypto = require('crypto');
 const fs = require('fs');
 const path = require('path');
+const { createAsyncLock } = require('../async-lock');
 
 // ─── Constants ───────────────────────────────────────────────────────
 
@@ -196,6 +197,32 @@ function createTmuxRunner({ logger = console, runFn = run } = {}) {
     await runFn('tmux', ['send-keys', '-t', name, key]);
   }
 
+  // rc.13.1: paste+Enter must be ATOMIC per session. Pre-rc.13.1 two
+  // concurrent pasteText+sendControl pairs could interleave in the
+  // TUI's bracketed-paste buffer — Ivan caught this on shumorobot
+  // 2026-05-15 (the 2233-char user JSONL entry contained one
+  // truncated polygram channel + a full nested polygram prompt for
+  // a different msg_id). Symptom: msg 696's paste was at byte
+  // `chat_id="-1003` when msg 698's autosteer paste cut in,
+  // concatenating two pastes into one TUI user message → the agent
+  // saw a malformed input → the reply attribution went sideways
+  // (msg 697 got msg 698's answer, msg 696 got served last).
+  //
+  // The async-lock is keyed by tmux session name, so different
+  // sessions don't block each other. Within one session, pasteText
+  // + sendControl(Enter) hold the lock atomically.
+  const inputLock = createAsyncLock();
+  async function pasteAndEnter(name, text) {
+    const release = await inputLock.acquire(name);
+    try {
+      const res = await pasteText(name, text);
+      await sendControl(name, 'Enter');
+      return res;
+    } finally {
+      release();
+    }
+  }
+
   /**
    * Push a multi-line text prompt into the pane.
    *
@@ -293,6 +320,7 @@ function createTmuxRunner({ logger = console, runFn = run } = {}) {
     spawn,
     sendControl,
     pasteText,
+    pasteAndEnter,
     capturePane,
     captureWide,
     sessionExists,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.10.0-rc.13",
+  "version": "0.10.0-rc.14",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {