polygram 0.20.3 → 0.22.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "polygram",
-  "version": "0.20.3",
+  "version": "0.22.0",
   "description": "Telegram integration for Claude Code that preserves the OpenClaw per-chat session model. Migration target for OpenClaw users. Multi-bot, multi-chat, per-topic isolation; SQLite transcripts; inline-keyboard approvals. Bundles /polygram:status|logs|pair-code|approvals admin commands plus history (transcript queries) and polygram-send (out-of-turn IPC sends with file-upload validation) skills.",
   "keywords": [
     "telegram",

package/lib/db/auto-resume.js

@@ -90,6 +90,9 @@ function createAutoResumeTracker({ cooldownMs = DEFAULT_COOLDOWN_MS, now = Date.
  */
 function isAutoResumable({ error, aborted, replay, shuttingDown }) {
   if (aborted || replay || shuttingDown) return false;
+  // Delivery may have happened before the contained process tree disappeared.
+  // Automatic continuation could duplicate work; a user resend starts fresh.
+  if (error?.code === 'SESSION_PROCESS_LOST') return false;
   // Review F#6: channels analog of the tmux 'idle with no Claude activity'
   // pattern. The bridge socket dropped mid-turn (claude crashed, bridge
   // process died) — that's a wedge, not a runaway. Same intent as the

package/lib/error/classify.js

@@ -184,6 +184,15 @@ const CODES = {
     isTransient: true,
     autoRecover: null,
   },
+  // The isolated process tree exited, so its persisted session cannot be
+  // resumed safely. The dispatcher clears that session before surfacing this
+  // guidance, and the user's resend starts a fresh process.
+  SESSION_PROCESS_LOST: {
+    kind: 'sessionProcessLost',
+    userMessage: '🔄 That Claude session stopped before the turn finished. Please resend your message and I\'ll start a fresh session.',
+    isTransient: false,
+    autoRecover: null,
+  },
   // CHANNELS_HANDSHAKE_TIMEOUT: bridge process never sent session_init
   // within the handshake window during start(). Usually means the bridge
   // crashed pre-init or the socket file is stale.

package/lib/handlers/dispatcher.js

@@ -194,6 +194,7 @@ function createDispatcher({
         oomShutdown = getOomObservation()?.detected === true;
       } catch {}
       const isShuttingDown = getIsShuttingDown() || oomShutdown;
+      let processLossResetFailed = false;
       logger.error?.(`[${sessionKey}] Error: ${err.message}`);
       // Mark the row terminal so the right thing happens on next
       // boot:
@@ -219,6 +220,26 @@ function createDispatcher({
         replay: isReplay || undefined,
         oom_shutdown: oomShutdown || undefined,
       });
+      // A lost contained process cannot service a resume. Only promise a fresh
+      // session after the durable mapping has actually been removed.
+      if (err.code === 'SESSION_PROCESS_LOST') {
+        try {
+          if (typeof db.clearSessionId !== 'function') {
+            throw new Error('clearSessionId unavailable');
+          }
+          db.clearSessionId(sessionKey);
+          logEvent('session-reset-after-process-loss', {
+            chat_id: chatId, session_key: sessionKey, msg_id: msg?.message_id,
+          });
+        } catch (resetErr) {
+          processLossResetFailed = true;
+          logger.error?.(`[${sessionKey}] failed to clear lost session: ${resetErr.message}`);
+          logEvent('session-reset-after-process-loss-failed', {
+            chat_id: chatId, session_key: sessionKey, msg_id: msg?.message_id,
+            error: resetErr.message?.slice(0, 200),
+          });
+        }
+      }
       // Startup-gate death (claude exited during spawn / the dialog gate timed
       // out) of a likely-aged RESUMED session — the persisted claude_session_id
       // can't be resumed cleanly (shumorobot general chat 2026-06-01→03: a
@@ -336,9 +357,10 @@ function createDispatcher({
         // (not handleMessage), so its errors don't re-enter this
         // catch block — autoResumeTracker.isInCooldown() is the
         // only guard needed against runaway loops.
-        const resumable = isAutoResumable({
-          error: err, aborted: wasAborted, replay: isReplay, shuttingDown: isShuttingDown,
-        });
+        const resumable = err.code !== 'SESSION_PROCESS_LOST'
+          && isAutoResumable({
+            error: err, aborted: wasAborted, replay: isReplay, shuttingDown: isShuttingDown,
+          });
         if (resumable && !autoResumeTracker.isInCooldown(sessionKey)) {
           autoResumeTracker.markAttempt(sessionKey);
           logEvent('auto-resume-attempted', {
@@ -393,7 +415,9 @@ function createDispatcher({
         }
         // 0.7.7: errorReplyText may return null (suppress reply
         // signal — INTERRUPTED inside abort grace).
-        const replyText = errorReplyText(err);
+        const replyText = err.code === 'SESSION_PROCESS_LOST' && processLossResetFailed
+          ? '⚠️ That Claude session stopped, but I couldn\'t safely reset its saved state. Please try again later.'
+          : errorReplyText(err);
         if (replyText) {
           tg(bot, 'sendMessage', {
             chat_id: chatId,

package/lib/util/claude-session-jsonl.js

@@ -86,8 +86,9 @@ const os = require('os');
  *   → -Users-ivanshumkov-Projects-polygram
  */
 function encodeCwd(cwd) {
-  // Replace path separator with dash; leading dash signals absolute path.
-  return cwd.replace(/\//g, '-');
+  // Claude replaces path separators and dots; the leading dash signals an
+  // absolute path.
+  return cwd.replace(/[/.]/g, '-');
 }
 
 // SECURITY (audit L3): sessionId is interpolated into a filesystem

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.20.3",
+  "version": "0.22.0",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {
@@ -63,7 +63,7 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.2.123",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@shumkov/orchestra": "0.4.3",
+    "@shumkov/orchestra": "0.6.0",
     "better-sqlite3": "^12.9.0",
     "grammy": "^1.42.0",
     "markdown-it": "^14.1.1",

package/polygram.js

@@ -2406,6 +2406,9 @@ async function main() {
   loadStickers();
   DB_PATH = dbOverride || path.join(DB_DIR, `${BOT_NAME}.db`);
   console.log(`[polygram] bot: ${BOT_NAME} (${Object.keys(config.chats).length} chats) db: ${DB_PATH}`);
+  const sessionLauncher = process.env.ORCHESTRA_SESSION_LAUNCHER;
+  const requireExistingServer = process.env.ORCHESTRA_TMUX_REQUIRE_SERVER === '1';
+  console.log(`[polygram] session containment configured: ${sessionLauncher ? 'yes' : 'no'}`);
 
   // rc.50: claim our PID file BEFORE binding the bot token. If a
   // prior daemon (orphan from a botched restart) is still running,
@@ -2429,7 +2432,11 @@ async function main() {
     // sessions (dead safety net + EEXIST on cli respawn of a leaked session).
     const sweep = await sweepTmuxOrphans({
       botName: BOT_NAME,
-      runner: createTmuxRunner({ logger: console, sessionPrefix: 'polygram' }),
+      runner: createTmuxRunner({
+        logger: console,
+        sessionPrefix: 'polygram',
+        requireExistingServer,
+      }),
       logger: console,
     });
     if (sweep.swept.length > 0) {
@@ -2739,7 +2746,11 @@ async function main() {
   // tmux backend runner — one per daemon, shared across all TmuxProcess
   // instances. Construction is cheap (no system call until first
   // spawn/send). Only used if any chat in config has pm:'tmux'.
-  const tmuxRunner = createTmuxRunner({ logger: console, sessionPrefix: 'polygram' });
+  const tmuxRunner = createTmuxRunner({
+    logger: console,
+    sessionPrefix: 'polygram',
+    requireExistingServer,
+  });
   // Verify the pinned claude CLI binary is present. The tmux
   // backend spawns this exact binary by absolute path (see
   // lib/claude-bin.js + TmuxProcess.start) — it never resolves
@@ -2801,6 +2812,7 @@ async function main() {
     db,
     logger: console,
     tmuxRunner,
+    sessionLauncher,
     botName: BOT_NAME,
     // channels backend
     toolDispatcher: channelsToolDispatcher,