polygram 0.12.0-rc.16 → 0.12.0-rc.18

package/lib/claude-bin.js

@@ -7,7 +7,14 @@ const fs = require('fs');
 // 0.12 Phase 4: moved from lib/process/tmux-process.js into the helper module
 // that consumes it, so the constant survives TmuxProcess deletion. CliProcess
 // + spike scripts + polygram boot all import from here now.
-const CLAUDE_CLI_PINNED_VERSION = '2.1.142';
+// 0.12.0-rc.18: bumped 2.1.142 → 2.1.158 (latest installed). The dev-channels
+// inbound-message delivery has an intermittent channel-bind race (the bridge
+// pushes user_msg before claude's channel subscription is active → message
+// silently dropped → stuck turn; see docs/0.12.0-known-issues.md). Trying a
+// newer claude to see if the research-preview channels reliability improved,
+// before building polygram-side recovery. Re-validate the channel flow on each
+// bump via tests/e2e-channels-real-claude.test.js.
+const CLAUDE_CLI_PINNED_VERSION = '2.1.158';
 
 /**
  * Resolve + verify the pinned claude CLI binary.

package/lib/process/cli-process.js

@@ -1871,15 +1871,22 @@ class CliProcess extends Process {
         {
           const requestId = ev.toolUseId || `hook-notification-${Date.now()}`;
           const toolName = ev.toolName;
-          const toolInput = this._formatToolInputForApproval(
-            ev.prompt || null,
-            // Use the structured tool_input as the "preview" — it's
-            // already structured by claude rather than truncated to
-            // 200 chars like the channels bridge perm_req does.
-            typeof ev.toolInput === 'string'
-              ? ev.toolInput
-              : JSON.stringify(ev.toolInput || {}),
-          );
+          // Finding #11 fix: pass the STRUCTURED tool_input through. makeCanUseTool
+          // matches gated patterns via matchesAnyPattern, which reads
+          // input.command (Bash) / input.url (WebFetch) — a formatted STRING
+          // makes those undefined so a gated `Bash(rm *)` never matches and the
+          // tool is allowed with NO approval card (silent gating bypass). The
+          // hook Notification payload carries structured tool_input, so forward
+          // it as-is; the approval card (approvalCardText) renders a structured
+          // object fine — same shape the SDK canUseTool path already uses. Fall
+          // back to the formatted-string preview only if claude sent no
+          // structured tool_input (degenerate — tool needs perm but no input).
+          const toolInput = (ev.toolInput && typeof ev.toolInput === 'object')
+            ? ev.toolInput
+            : this._formatToolInputForApproval(
+                ev.prompt || null,
+                typeof ev.toolInput === 'string' ? ev.toolInput : JSON.stringify(ev.toolInput || {}),
+              );
           this.emit('approval-required', {
             id: requestId,
             toolName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.12.0-rc.16",
+  "version": "0.12.0-rc.18",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {