polygram 0.23.1 → 0.23.3

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "polygram",
-  "version": "0.23.1",
+  "version": "0.23.3",
   "description": "Telegram integration for Claude Code that preserves the OpenClaw per-chat session model. Migration target for OpenClaw users. Multi-bot, multi-chat, per-topic isolation; SQLite transcripts; inline-keyboard approvals. Bundles /polygram:status|logs|pair-code|approvals admin commands plus history (transcript queries) and polygram-send (out-of-turn IPC sends with file-upload validation) skills.",
   "keywords": [
     "telegram",

package/lib/codex/runtime-profile.js

@@ -278,6 +278,7 @@ function buildOwnedConfig({
   filesystem[':workspace_roots'] = { '.': 'write' };
   return {
     cli_auth_credentials_store: 'file',
+    model_provider: 'openai',
     default_permissions: CODEX_PERMISSION_PROFILE_ID,
     approval_policy: 'never',
     approvals_reviewer: 'user',
@@ -315,6 +316,7 @@ function renderOwnedConfig(config, {
   ].filesystem;
   const lines = [
     'cli_auth_credentials_store = "file"',
+    'model_provider = "openai"',
     `default_permissions = ${tomlString(CODEX_PERMISSION_PROFILE_ID)}`,
     'approval_policy = "never"',
     'approvals_reviewer = "user"',
@@ -586,8 +588,8 @@ function validateProjectedConfig(config, materialized) {
     || !isDeepStrictEqual(config.mcpServers, { count: 0, keySha256: [] })
     || !isDeepStrictEqual(config.plugins, { count: 0, keySha256: [] })
     || !isDeepStrictEqual(config.modelProviders, {
-      count: 1,
-      keySha256: [digest('openai')],
+      count: 0,
+      keySha256: [],
     })
     || !Array.isArray(config.permissionProfiles)
     || config.permissionProfiles.length !== 1

package/lib/ops/heartbeat.js

@@ -4,7 +4,7 @@
  *
  * File-only equivalent of water's lib/ops/heartbeat.js pattern — no
  * /healthz endpoint, since this repo has no HTTP server to hang a route on.
- * Wiring heartbeat.json into an actual Netdata alert (netdata_watch_units /
+ * Wiring the heartbeat file into an actual Netdata alert (netdata_watch_units /
  * a filecheck-or-cron-parses-JSON entry) is a VPS-side ops/ansible change
  * outside this repo's scope; this only builds the code-side signal.
  */
@@ -14,8 +14,24 @@
 const fs = require('node:fs');
 const path = require('node:path');
 
-function createHeartbeat({ dataDir, authDisabledGate, intervalMs = 60_000, now = Date.now }) {
-  const file = path.join(dataDir, 'heartbeat.json');
+// Every bot on a host shares one DATA_DIR (it is process.cwd(), and the fleet
+// starts each --bot from the same directory), so the filename MUST carry the bot
+// name. A shared heartbeat lets a live bot's beat stand in for a dead one's —
+// which defeats the file's only purpose — and puts both daemons on one temp path,
+// where the rename that loses the race fails ENOENT every minute. botName is
+// required rather than defaulted so a second caller can't silently reintroduce it.
+function createHeartbeat({ dataDir, botName, authDisabledGate, intervalMs = 60_000, now = Date.now }) {
+  if (!botName) throw new TypeError('createHeartbeat: botName required (the data dir is shared between bots)');
+  // The name lands in a path segment. Reject anything unsafe rather than rewriting
+  // it: sanitising would map two distinct names ('a/b' and 'a_b') onto one file and
+  // silently restore the very collision this split exists to prevent.
+  if (!/^[a-zA-Z0-9._-]+$/.test(botName) || botName === '.' || botName === '..') {
+    throw new TypeError(`createHeartbeat: unsafe botName ${JSON.stringify(botName)} — allowed: A-Z a-z 0-9 . _ -`);
+  }
+  const file = path.join(dataDir, `heartbeat-${botName}.json`);
+  // Unique per process so two daemons never contend for one temp path, even if
+  // they are ever pointed at the same bot name.
+  const tmp = `${file}.tmp.${process.pid}`;
   let timer = null;
 
   function snapshot() {
@@ -26,7 +42,6 @@ function createHeartbeat({ dataDir, authDisabledGate, intervalMs = 60_000, now =
   function beat() {
     const snap = snapshot();
     try {
-      const tmp = `${file}.tmp`;
       fs.writeFileSync(tmp, JSON.stringify(snap));
       fs.renameSync(tmp, file); // atomic
     } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.23.1",
+  "version": "0.23.3",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {
@@ -63,7 +63,7 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.2.123",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@shumkov/orchestra": "0.7.1",
+    "@shumkov/orchestra": "0.7.4",
     "better-sqlite3": "^12.9.0",
     "grammy": "^1.42.0",
     "markdown-it": "^14.1.1",

package/polygram.js

@@ -772,7 +772,10 @@ let recoverCodexRequest = null;
 // heartbeat.start() is called in main() once DATA_DIR is settled; the gate
 // needs no runtime config, so it's constructed here directly.
 const authDisabledGate = createAuthDisabledGate();
-const authDisabledHeartbeat = createHeartbeat({ dataDir: DATA_DIR, authDisabledGate });
+// Constructed in main(), not here: the heartbeat filename carries BOT_NAME (every
+// bot shares DATA_DIR, which is process.cwd()), and BOT_NAME is only parsed once
+// main() runs.
+let authDisabledHeartbeat = null;
 
 // rc.59: once-per-cycle gate for the contextHint. A session is added
 // to this Set when the hint fires, removed when the SDK emits
@@ -3114,10 +3117,11 @@ async function main() {
   setInterval(() => runAuthCheck('interval'), 30 * 60_000).unref?.();
 
   // AUTH_DISABLED Netdata-visibility heartbeat (docs/AUTH_DISABLED_HANDLING_SPEC.md,
-  // Layer 3.3) — writes <DATA_DIR>/heartbeat.json every 60s with the
+  // Layer 3.3) — writes <DATA_DIR>/heartbeat-<botName>.json every 60s with the
   // authDisabledGate's occurrence counter. File-only (no HTTP server in this
   // repo to hang a /healthz route on); wiring the file into an actual Netdata
   // alert is a separate VPS-side ops change, out of scope here.
+  authDisabledHeartbeat = createHeartbeat({ dataDir: DATA_DIR, botName: BOT_NAME, authDisabledGate });
   authDisabledHeartbeat.start();
 
   // 0.8.0 Phase 1 step 11 + rc.50: defensive uncaughtException +
@@ -3703,7 +3707,7 @@ async function main() {
     // 4. Remaining shutdown: approvals sweeper, IPC, resolve hook waiters,
     //    kill pm subprocesses, close DB.
     if (approvalSweepTimer) clearInterval(approvalSweepTimer);
-    authDisabledHeartbeat.stop();
+    authDisabledHeartbeat?.stop();  // null if we shut down before main() armed it
     if (ipcCloser) ipcCloser.close().catch(() => {});
     try { fs.unlinkSync(ipcServer.secretPathFor(BOT_NAME)); } catch {}
     // Reject every parked canUseTool waiter so the SDK doesn't