polygram 0.12.0-rc.40 → 0.12.0-rc.41

package/lib/error/classify.js

@@ -84,6 +84,12 @@ const PATTERNS = {
   // to "unknown".
   format:           /invalid[_ ]request|invalid[_ ]json|malformed|bad request/i,
 
+  // CLI/channels backend: the claude process exited unexpectedly mid-life
+  // ("Claude Code process exited with code N" — e.g. 129/SIGHUP seen on
+  // shumabit). A respawn fixes it, so it's transient; the user gets a calm
+  // line, never the raw exit code. (known-issue #2.1)
+  processExit:      /process exited with code|claude code process exited|exited with (signal|code)/i,
+
   // Transient HTTP (5xx upstream Anthropic outage / overload). Only
   // these get retried by pm. 521-524/529 are Cloudflare codes seen
   // when Anthropic's edge is degraded.
@@ -104,6 +110,7 @@ const USER_MESSAGES = {
   imageProcess:     '🖼 One of the images in this conversation can\'t be re-processed by Claude — likely an older one in the history. Starting a fresh session for this chat.',
   timeout:          '⏳ I went quiet too long without finishing. Try resending or simplifying.',
   format:           '⚠️ Invalid request format. Try rephrasing or /new.',
+  processExit:      '🔄 My Claude process stopped unexpectedly — resend in a moment and I\'ll restart it.',
   // Used both for in-flight retry attempts AND for the post-retry-failed
   // bubble-up message. Avoid promising "retrying once" since by the
   // time the user reads it pm has already retried and given up.
@@ -265,7 +272,7 @@ function classify(err) {
       return {
         kind,
         userMessage: USER_MESSAGES[kind],
-        isTransient: kind === 'transient5xx' || kind === 'rateLimit',
+        isTransient: kind === 'transient5xx' || kind === 'rateLimit' || kind === 'processExit',
         autoRecover: AUTO_RECOVER[kind] ?? null,
       };
     }
@@ -285,13 +292,15 @@ function classify(err) {
     if (sdkResultSubtype) return sdkResultSubtype;
   }
 
-  // Fall-through: surface a snippet of the raw error so users at
-  // least know SOMETHING happened. Same shape as before, just
-  // routed through the classifier so callers get a uniform return.
-  const reason = msg.split('\n')[0].slice(0, 120);
+  // Fall-through: an error we couldn't classify. Do NOT echo the raw text
+  // to the user (known-issue #2.2) — it leaks internal identifiers (tmux
+  // names, gate vocabulary, pane dumps; the 2026-06-03 incident). The full
+  // raw string is preserved by callers in the events log
+  // (handler-error.detail_json) for forensics; the user gets a calm,
+  // generic, actionable line.
   return {
     kind: 'unknown',
-    userMessage: `Hit a snag: ${reason || 'unknown error'}. Try resending.`,
+    userMessage: '⚠️ Something went wrong on my end — try resending. If it keeps happening, send /new.',
     isTransient: false,
     autoRecover: null,
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.12.0-rc.40",
+  "version": "0.12.0-rc.41",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {