polygram 0.12.0-rc.16 → 0.12.0-rc.17

package/lib/process/cli-process.js

@@ -1871,15 +1871,22 @@ class CliProcess extends Process {
         {
           const requestId = ev.toolUseId || `hook-notification-${Date.now()}`;
           const toolName = ev.toolName;
-          const toolInput = this._formatToolInputForApproval(
-            ev.prompt || null,
-            // Use the structured tool_input as the "preview" — it's
-            // already structured by claude rather than truncated to
-            // 200 chars like the channels bridge perm_req does.
-            typeof ev.toolInput === 'string'
-              ? ev.toolInput
-              : JSON.stringify(ev.toolInput || {}),
-          );
+          // Finding #11 fix: pass the STRUCTURED tool_input through. makeCanUseTool
+          // matches gated patterns via matchesAnyPattern, which reads
+          // input.command (Bash) / input.url (WebFetch) — a formatted STRING
+          // makes those undefined so a gated `Bash(rm *)` never matches and the
+          // tool is allowed with NO approval card (silent gating bypass). The
+          // hook Notification payload carries structured tool_input, so forward
+          // it as-is; the approval card (approvalCardText) renders a structured
+          // object fine — same shape the SDK canUseTool path already uses. Fall
+          // back to the formatted-string preview only if claude sent no
+          // structured tool_input (degenerate — tool needs perm but no input).
+          const toolInput = (ev.toolInput && typeof ev.toolInput === 'object')
+            ? ev.toolInput
+            : this._formatToolInputForApproval(
+                ev.prompt || null,
+                typeof ev.toolInput === 'string' ? ev.toolInput : JSON.stringify(ev.toolInput || {}),
+              );
           this.emit('approval-required', {
             id: requestId,
             toolName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.12.0-rc.16",
+  "version": "0.12.0-rc.17",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {