polygram 0.38.9 → 0.39.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "polygram",
-  "version": "0.38.9",
+  "version": "0.39.1",
   "description": "Telegram integration for Claude Code that preserves the OpenClaw per-chat session model. Migration target for OpenClaw users. Multi-bot, multi-chat, per-topic isolation; SQLite transcripts; inline-keyboard approvals. Bundles /polygram:status|logs|pair-code|approvals admin commands plus history (transcript queries) and polygram-send (out-of-turn IPC sends with file-upload validation) skills.",
   "keywords": [
     "telegram",

package/config.example.json

@@ -9,6 +9,8 @@
       "_comment_adminChatId": "Required when allowConfigCommands is true for pairing commands (/pair-code, /pairings, /unpair) to work. These grant cross-chat trust and are gated to the admin chat only.",
       "adminChatId": "123456789",
       "needsToken": false,
+      "_comment_claudeCliAuthSource": "native (default) checks the host Claude login before CLI turns. Set external only when the configured session launcher supplies proxy credentials. SDK retains native checks; Codex is unaffected. Requires a verified pinned CLI and an absolute session launcher. Restart after changes; restore native when disabling proxy routing.",
+      "claudeCliAuthSource": "native",
       "_comment_stream": "Streaming is always on. `streamMinChars` sets the initial-send debounce (default 30) — short responses below that stay idle until the final result. `streamThrottleMs` sets the edit cadence (default 1000ms, min 250).",
       "streamMinChars": 30,
       "streamThrottleMs": 1000,

package/lib/attachments.js

@@ -111,6 +111,7 @@ const MIME_ALLOW = [
   /^text\/csv$/,
   // rc.68: archives + markup formats Claude reads natively.
   /^application\/zip$/, /^application\/x-zip-compressed$/,
+  /^application\/gzip$/, /^application\/x-gzip$/, /^application\/x-tar$/,
   /^text\/markdown$/,
   /^text\/html$/,
   /^text\/yaml$/, /^application\/yaml$/, /^application\/x-yaml$/,
@@ -122,8 +123,10 @@ const MIME_ALLOW = [
 // the fallback is "trust the filename when MIME is unhelpful" — not "any
 // extension goes." A file named foo.exe with empty MIME stays rejected.
 const EXTENSION_ALLOW = new Set([
-  // archives
-  'zip',
+  // archives — extensionOf() only sees the last dot segment, so
+  // "foo.tar.gz" resolves to 'gz' (not 'tar.gz'); listing 'gz'/'tgz'/'tar'
+  // separately covers the common compound and short forms.
+  'zip', 'gz', 'tgz', 'tar',
   // text / structured data
   'txt', 'md', 'csv', 'json', 'yaml', 'yml', 'xml', 'html',
   // documents

package/lib/handlers/config-ui.js

@@ -220,7 +220,7 @@ function resolveDisplayRichText(chatConfig, topicConfig, effectiveRichText) {
 // polygram passes the alias (opus / sonnet / haiku) and lets claude
 // resolve. Bump on Claude release.
 const MODEL_VERSIONS_DESC = {
-  opus: 'claude-opus-5',
+  opus: 'claude-opus-5-5',
   sonnet: 'claude-sonnet-4-6',
   haiku: 'claude-haiku-4-5',
 };

package/lib/model-costs.js

@@ -17,8 +17,8 @@
 'use strict';
 
 // Per-million-token rates ($ USD). Cache-read and cache-creation
-// follow Anthropic's prompt-caching pricing — read is ~10% of normal
-// input; 1-hour creation is ~125% of normal input.
+// follow Anthropic's prompt-caching pricing — read is usually ~10% of
+// normal input (Opus 5.5: 5%); 5-minute creation is 125% of normal input.
 const MODEL_COSTS = {
   // Claude Sonnet 4.6
   'claude-sonnet-4-6': { input: 3, output: 15, cacheRead: 0.30, cacheCreation: 3.75 },
@@ -31,8 +31,11 @@ const MODEL_COSTS = {
   // Claude Opus 4.8 — kept for turns recorded before the CLI pin moved to
   // 2.1.220; without an entry those fall back to the Sonnet `default`.
   'claude-opus-4-8': { input: 15, output: 75, cacheRead: 1.50, cacheCreation: 18.75 },
-  // Claude Opus 5 — what `--model opus` resolves to on the pinned CLI.
+  // Claude Opus 5 — kept for turns recorded before the CLI pin moved to
+  // 2.1.283; without an entry those fall back to the Sonnet `default`.
   'claude-opus-5': { input: 5, output: 25, cacheRead: 0.50, cacheCreation: 6.25 },
+  // Claude Opus 5.5 — what `--model opus` resolves to on the pinned CLI.
+  'claude-opus-5-5': { input: 4, output: 20, cacheRead: 0.20, cacheCreation: 5 },
   // Default fallback — Sonnet rates (safest mid-tier estimate).
   default: { input: 3, output: 15, cacheRead: 0.30, cacheCreation: 3.75 },
 };

package/lib/ops/claude-auth-health.js

@@ -0,0 +1,52 @@
+'use strict';
+
+const path = require('node:path');
+const { resolveRuntimeDescriptor } = require('../runtime-config');
+
+function validateClaudeCliAuthSource(botConfig = {}) {
+  const source = botConfig.claudeCliAuthSource;
+  if (source !== undefined && source !== 'native' && source !== 'external') {
+    throw new TypeError('claudeCliAuthSource must be native or external');
+  }
+}
+
+function needsNativeClaudeAuth(botConfig, backend) {
+  validateClaudeCliAuthSource(botConfig);
+  if (backend === 'codex') return false;
+  if (backend === 'sdk') return true;
+  if (backend !== 'cli') throw new TypeError('Unknown Claude auth backend');
+  return botConfig?.claudeCliAuthSource !== 'external';
+}
+
+function hasNativeClaudeRuntime(config) {
+  validateClaudeCliAuthSource(config.bot);
+  for (const [chatId, chat] of Object.entries(config.chats || {})) {
+    for (const threadId of [null, ...Object.keys(chat.topics || {})]) {
+      const { backend } = resolveRuntimeDescriptor({
+        config, chatId, threadId, defaultPm: 'sdk',
+      });
+      if (needsNativeClaudeAuth(config.bot, backend)) return true;
+    }
+  }
+  return false;
+}
+
+function assertExternalClaudeCliReady(botConfig, { sessionLauncher, pinnedClaudeBin }) {
+  validateClaudeCliAuthSource(botConfig);
+  if (botConfig?.claudeCliAuthSource !== 'external') return;
+  if (typeof sessionLauncher !== 'string' || !path.isAbsolute(sessionLauncher)) {
+    throw new Error('External Claude CLI auth requires an absolute session launcher');
+  }
+  // Without a pinned binary the process factory falls back to SDK, which does
+  // not use the CLI launcher's external credentials.
+  if (!pinnedClaudeBin) {
+    throw new Error('External Claude CLI auth requires a verified pinned Claude binary');
+  }
+}
+
+module.exports = {
+  validateClaudeCliAuthSource,
+  needsNativeClaudeAuth,
+  hasNativeClaudeRuntime,
+  assertExternalClaudeCliReady,
+};

package/lib/sdk/build-options.js

@@ -36,6 +36,19 @@ const CHILD_ENV_ALLOWLIST = new Set([
 ]);
 const CHILD_ENV_PREFIXES = ['LC_', 'NODE_', 'CLAUDE_', 'ANTHROPIC_'];
 
+// Claude Code records a conversation's system prompt once and replays that
+// record on every resume until compaction. The appended display hint depends
+// on richText and changes between releases, so opt out of the recording to
+// let changes reach resumed sessions. Bare string / string[] prompts can only
+// opt out in the custom-object form.
+function withoutPromptSnapshot(systemPrompt) {
+  if (systemPrompt == null) return systemPrompt;
+  if (typeof systemPrompt === 'string' || Array.isArray(systemPrompt)) {
+    return { type: 'custom', prompt: systemPrompt, snapshot: false };
+  }
+  return { ...systemPrompt, snapshot: false };
+}
+
 function filterEnv(src) {
   const out = {};
   for (const [k, v] of Object.entries(src)) {
@@ -173,13 +186,13 @@ function createBuildSdkOptions({
     // inlineMedia: replies on this path are delivered by the streamer, which
     // resolves and uploads local media into the rich payload. The reply-tool
     // path cannot, so it asks for the hint without those paragraphs.
-    composed.systemPrompt = appendDisplayHint(
+    composed.systemPrompt = withoutPromptSnapshot(appendDisplayHint(
       composed.systemPrompt,
       buildPolygramDisplayHint(
         resolveRichTextEnabled(config, chatId, threadId),
         { inlineMedia: true },
       ),
-    );
+    ));
     return composed;
   };
 }
@@ -189,6 +202,7 @@ module.exports = {
   // Exposed for tests + adjacent extractions that need the same env
   // discipline (e.g. lib/sdk/callbacks.js when it ships).
   filterEnv,
+  withoutPromptSnapshot,
   CHILD_ENV_ALLOWLIST,
   CHILD_ENV_PREFIXES,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.38.9",
+  "version": "0.39.1",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc/client.js",
   "bin": {
@@ -66,9 +66,9 @@
   "homepage": "https://github.com/shumkov/polygram#readme",
   "type": "commonjs",
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.2.123",
+    "@anthropic-ai/claude-agent-sdk": "0.3.283",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@shumkov/orchestra": "0.10.21",
+    "@shumkov/orchestra": "0.11.0",
     "acorn": "8.18.0",
     "better-sqlite3": "^12.9.0",
     "grammy": "^1.42.0",

package/polygram.js

@@ -61,6 +61,12 @@ const { filterAttachments, resolveFileCaps, resolveMaxFileOverride, MAX_TOTAL_BY
 const { ProcessManager } = require('@shumkov/orchestra');
 const { createProcessFactory, pickBackend } = require('@shumkov/orchestra');
 const { checkClaudeAuthHealth } = require('@shumkov/orchestra').claudeBin;
+const {
+  validateClaudeCliAuthSource,
+  needsNativeClaudeAuth,
+  hasNativeClaudeRuntime,
+  assertExternalClaudeCliReady,
+} = require('./lib/ops/claude-auth-health');
 const { extractAssistantText } = require('@shumkov/orchestra');
 // 0.11.0: channels backend tool dispatcher — adapts CliProcess's reply
 // tool callback into polygram's existing chunkText + deliverReplies primitives.
@@ -1411,7 +1417,7 @@ async function handleMessage(sessionKey, chatId, msg, bot, dispatchContext = nul
     cmdUser, cmdUserId, label, sendReply,
   })) return;
 
-  // Claude-auth gate: if the CLI login has expired, every claude turn wedges
+  // Claude-auth gate: if the native CLI login has expired, its turns wedge
   // INVISIBLY — the 401 fires inside the subprocess, never reaches the
   // classifier, and the turn degrades to a silent "⏱ went quiet" across every
   // topic. Refuse up-front with a clear message + a loud log instead of
@@ -1424,7 +1430,9 @@ async function handleMessage(sessionKey, chatId, msg, bot, dispatchContext = nul
   // read, and a token can expire between an original dispatch and its later
   // redelivery, so skipping it there would silently re-wedge exactly the
   // messages most likely to hit an expired-auth window (post-restart backlog).
-  if (selectedInboundProvider === 'claude') {
+  // An externally authenticated CLI uses its launcher's credentials instead;
+  // the host login says nothing about that route. SDK retains its native check.
+  if (needsNativeClaudeAuth(config.bot, selectedBackend)) {
     let auth;
     try {
       auth = checkClaudeAuthHealth();
@@ -3634,6 +3642,7 @@ async function main() {
     // `= config.bots[BOT_NAME]` silently dropped top-level shared fields and
     // orphaned apiRoot (both bots ran on cloud, not the 2GB local server).
     config.bot = activeBotConfig(config, BOT_NAME);
+    validateClaudeCliAuthSource(config.bot);
   } catch (err) {
     console.error(`[fatal] ${err.message}`);
     process.exit(2);
@@ -3929,18 +3938,19 @@ async function main() {
 
   // Claude-auth health monitor — a FREE credentials-file check (no API call, no
   // model spawn). An expired refresh token makes the CLI 401 silently and wedges
-  // every channels turn; the handleMessage gate refuses turns + tells the user,
+  // native CLI turns; the handleMessage gate refuses turns + tells the user,
   // and this surfaces the same state loudly in the operator logs at boot + every
   // 30 min, warning a few days ahead so re-login happens before it breaks.
   const runAuthCheck = (trigger) => {
     try {
+      if (!hasNativeClaudeRuntime(config)) return;
       const auth = checkClaudeAuthHealth();
       const expIso = auth.refreshTokenExpiresAt ? new Date(auth.refreshTokenExpiresAt).toISOString() : 'n/a';
       if (auth.state === 'expired') {
-        console.error(`[auth] (${trigger}) Claude login EXPIRED (refresh token ${expIso}) — turns are being refused; re-login on the host.`);
+        console.error(`[auth] (${trigger}) Native Claude login EXPIRED (refresh token ${expIso}) — native-auth turns are being refused; re-login on the host.`);
         logEvent('auth-expired', { source: 'monitor', trigger, refresh_token_expires_at: auth.refreshTokenExpiresAt });
       } else if (auth.state === 'expiring') {
-        console.warn(`[auth] (${trigger}) Claude login expires in ${auth.daysLeft}d (${expIso}) — re-login soon.`);
+        console.warn(`[auth] (${trigger}) Native Claude login expires in ${auth.daysLeft}d (${expIso}) — re-login soon.`);
         logEvent('auth-expiring', { source: 'monitor', trigger, days_left: auth.daysLeft, refresh_token_expires_at: auth.refreshTokenExpiresAt });
       } else if (auth.state === 'unknown') {
         console.warn(`[auth] (${trigger}) Claude credentials check inconclusive: ${auth.reason}`);
@@ -4184,6 +4194,11 @@ async function main() {
         + `${binCheck.vendored ? ' (vendored)' : ''}`,
       );
       pinnedClaudeBin = binCheck.path;
+      // CliProcess checks `claude --help` before passing newer flags; the
+      // probe is synchronous and takes up to a few seconds, so run it here
+      // while boot already blocks instead of on the first chat's spawn.
+      const { supportsClaudeFlag } = require('@shumkov/orchestra').claudeBin;
+      supportsClaudeFlag(pinnedClaudeBin, '--system-prompt-snapshot', { logger: console });
     } else {
       console.warn(`[polygram] WARNING: ${binCheck.reason}`);
     }
@@ -4315,6 +4330,7 @@ async function main() {
     logger: console,
   });
   const channelsClaudeBin = pinnedClaudeBin;
+  assertExternalClaudeCliReady(config.bot, { sessionLauncher, pinnedClaudeBin });
 
   const orchestraProcessFactory = createProcessFactory({
     config,