polygram 0.10.0-rc.25 → 0.10.0-rc.26

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "polygram",
-  "version": "0.10.0-rc.25",
+  "version": "0.10.0-rc.26",
   "description": "Telegram integration for Claude Code that preserves the OpenClaw per-chat session model. Migration target for OpenClaw users. Multi-bot, multi-chat, per-topic isolation; SQLite transcripts; inline-keyboard approvals. Bundles /polygram:status|logs|pair-code|approvals admin commands plus history (transcript queries) and polygram-send (out-of-turn IPC sends with file-upload validation) skills.",
   "keywords": [
     "telegram",

package/config.example.json

@@ -98,7 +98,8 @@
       "cwd": "/Users/you/admin-agent",
       "requireMention": true,
       "isolateTopics": true,
-      "_comment_topics": "rc.48: each topic entry is EITHER a string (legacy: just a label) OR an object with optional fields {name, agent, cwd, model, effort, permissionMode}. Object form lets a topic override chat-level config. Per-topic permissionMode overrides chat-level — typical use: scope one topic to permissionMode:'default' (so settings.json gates apply) while the rest of the chat stays on bypassPermissions. Object form requires isolateTopics: true (each topic gets its own SDK Query); polygram emits a startup warning otherwise.",
+      "_comment_topics": "rc.48: each topic entry is EITHER a string (legacy: just a label) OR an object with optional fields {name, agent, cwd, model, effort, permissionMode, isolateUserConfig}. Object form lets a topic override chat-level config. Per-topic permissionMode overrides chat-level — typical use: scope one topic to permissionMode:'default' (so settings.json gates apply) while the rest of the chat stays on bypassPermissions. Object form requires isolateTopics: true (each topic gets its own SDK Query); polygram emits a startup warning otherwise.",
+      "_comment_isolateUserConfig": "0.10.0, tmux backend only: isolateUserConfig:true spawns the topic's claude TUI cut off from the user-level ~/.claude config — passes --strict-mcp-config (zero MCP servers load) and --setting-sources project,local (drops ~/.claude/settings.json; the spawn cwd's own .claude/settings.json still loads). Use it when a topic's agent would otherwise inherit slow user-global MCP servers whose cold-start (tens of seconds) wedges the TUI before it can accept a prompt. Settable at chat OR topic level (topic wins). Default false.",
       "topics": {
         "100": "Customer A",
         "200": {
@@ -107,7 +108,8 @@
           "cwd": "/Users/you/customer-b-projects",
           "model": "opus",
           "effort": "high",
-          "permissionMode": "default"
+          "permissionMode": "default",
+          "isolateUserConfig": true
         }
       }
     },

package/lib/process/tmux-process.js

@@ -347,7 +347,7 @@ class TmuxProcess extends Process {
    *
    * @param {object} ctx
    * @param {string|null} [ctx.existingSessionId] — for --resume
-   * @param {object} [ctx.chatConfig={}]          — supplies model, effort, cwd, agent, permissionMode
+   * @param {object} [ctx.chatConfig={}]          — supplies model, effort, cwd, agent, permissionMode, isolateUserConfig
    * @param {string} [ctx.model]                  — override (rare; e.g. tests)
    * @param {string} [ctx.effort]                 — override
    * @param {string} [ctx.cwd]                    — override
@@ -378,6 +378,21 @@ class TmuxProcess extends Process {
       const cwd = ctx.cwd || topicConfig.cwd || chatConfig.cwd;
       const agent = topicConfig.agent || chatConfig.agent;
       const permissionMode = topicConfig.permissionMode || chatConfig.permissionMode || 'acceptEdits';
+      // `isolateUserConfig` (topic- or chat-level, topic wins — same
+      // merge path as agent/cwd/permissionMode). When true, the spawned
+      // claude TUI is cut off from the user-level `~/.claude` config:
+      // no user-level MCP servers, plugins, or settings load. Decided
+      // fix for the Music topic incident — the music-curation agent was
+      // pulling in user-global MCP servers (serena ~27.5 s, peekaboo
+      // ~9 s, context7) and the ~45 s MCP cold-start left the TUI
+      // accepting a pasted prompt but dropping the submitted Enter, so
+      // polygram's paste never submitted and the turn failed (broke the
+      // Music topic 5+ times). Default OFF — every other topic is
+      // unaffected unless it explicitly opts in.
+      const isolateUserConfig =
+        topicConfig.isolateUserConfig != null
+          ? topicConfig.isolateUserConfig === true
+          : chatConfig.isolateUserConfig === true;
 
       // Pre-allocate the sessionId via --session-id flag (v9 finding).
       // claude accepts a valid UUID and uses it as THE session ID for the
@@ -400,6 +415,25 @@ class TmuxProcess extends Process {
       }
       args.push('--debug-file', this.debugLogPath);
       if (agent) args.push('--agent', agent);
+      // isolateUserConfig: cut the spawned TUI off from `~/.claude`.
+      //   --strict-mcp-config    — claude CLI v2.1.142: "Only use MCP
+      //     servers from --mcp-config, ignoring all other MCP
+      //     configurations." Passed ALONE (no --mcp-config) → zero MCP
+      //     servers load. Hard guarantee that no plugin-provided OR
+      //     directly-registered MCP server (serena/peekaboo/context7)
+      //     starts, so there is no ~45 s cold-start window.
+      //   --setting-sources project,local — load only project + local
+      //     settings, NOT `user`. Drops `~/.claude/settings.json`
+      //     (user-level plugins/skills/settings) while the spawn cwd's
+      //     own `.claude/settings.json` still loads — so the rekordbox
+      //     project's WebFetch allowlist + dontAsk mode still apply.
+      // No --mcp-config needed: the music-curation plugin ships NO MCP
+      // server (its .claude-plugin/plugin.json declares no `mcpServers`;
+      // it is all-Bash), so --strict-mcp-config alone is clean.
+      if (isolateUserConfig) {
+        args.push('--strict-mcp-config');
+        args.push('--setting-sources', 'project,local');
+      }
       // Cross-backend parity: SDK appends polygram's Telegram display
       // hint to every agent's systemPrompt (lib/sdk/build-options.js).
       // Without this, the spawned claude session has no idea it's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.10.0-rc.25",
+  "version": "0.10.0-rc.26",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {