polygram 0.5.9 → 0.5.11

package/lib/prompt.js

@@ -121,9 +121,17 @@ function buildChannelAttrs({ chatId, msgId, user, userId, ts, threadId, topicNam
 
 function buildAttachmentTags(attachments) {
   if (!attachments?.length) return '';
-  return attachments.map((a) =>
-    `<attachment kind="${xmlEscape(a.kind)}" name="${xmlEscape(a.name)}" mime="${xmlEscape(a.mime_type)}" size="${a.size || 0}" path="${xmlEscape(a.path || '')}" />`
-  ).join('\n');
+  // Failed downloads (no `path`, has `error`) get a separate tag so claude
+  // can mention them to the user instead of pretending nothing was sent.
+  // The actual failure reason is included so claude can offer a useful
+  // recovery hint ("looks like the file is too large", "Telegram CDN had
+  // a 410 — could you resend?").
+  return attachments.map((a) => {
+    if (a.error || !a.path) {
+      return `<attachment-failed kind="${xmlEscape(a.kind)}" name="${xmlEscape(a.name)}" mime="${xmlEscape(a.mime_type)}" reason="${xmlEscape(a.error || 'no local path')}" />`;
+    }
+    return `<attachment kind="${xmlEscape(a.kind)}" name="${xmlEscape(a.name)}" mime="${xmlEscape(a.mime_type)}" size="${a.size || 0}" path="${xmlEscape(a.path)}" />`;
+  }).join('\n');
 }
 
 function buildVoiceTags(attachments) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc-client.js",
   "bin": {

package/polygram.js

@@ -415,7 +415,15 @@ async function downloadAttachments(bot, token, chatId, msg, attachments) {
       results.push({ ...att, path: localPath, size: att.size || buf.length });
       console.log(`[attach] ${chatId} ← ${att.kind} ${safeName} (${buf.length} bytes) → ${localPath}`);
     } catch (err) {
-      console.error(`[attach] download failed for ${att.name}: ${err.message}`);
+      // Don't drop the attachment silently — push it through with the
+      // failure noted. buildAttachmentTags renders this as
+      // <attachment-failed reason="..." /> so claude tells the user
+      // "I couldn't see your <kind>" instead of pretending it received
+      // text only. Pre-0.5.11 these were logged to console and dropped,
+      // so claude got the prompt as if no attachment was sent.
+      const reason = (err.message || 'unknown').slice(0, 200);
+      console.error(`[attach] download failed for ${att.name}: ${reason}`);
+      results.push({ ...att, path: null, error: reason });
     }
   }
   return results;
@@ -1626,9 +1634,17 @@ function shouldHandle(msg, chatConfig, botUsername) {
     const text = msg.text || msg.caption || '';
     const isReplyToBot = msg.reply_to_message?.from?.username === botUsername;
     const hasMention = text.includes(`@${botUsername}`);
-    // Paired users bypass requireMention — they've been explicitly trusted
-    // in this chat by an operator, no need for a mention every time.
-    const paired = pairings && msg.from?.id
+    // A reply targeting some other user (not the bot) is a strong signal
+    // "this message is for that person, not me". Paired users normally
+    // bypass requireMention, but not in this case — without the guard a
+    // paired user saying "Gotcha!" to a teammate gets processed by the
+    // bot just because the user is paired, which is what bit us in
+    // UMI Group on 0.5.9 (bot leaked reasoning as a reply to "Gotcha!").
+    const repliesToOtherUser = !!msg.reply_to_message
+      && msg.reply_to_message.from?.username !== botUsername;
+    // Paired users bypass requireMention — operator-trusted, no @ needed
+    // every time. Skipped when they're replying to a non-bot user (above).
+    const paired = !repliesToOtherUser && pairings && msg.from?.id
       ? pairings.hasLivePairing({ bot_name: BOT_NAME, user_id: msg.from.id, chat_id: chatId })
       : false;
     if (!isReplyToBot && !hasMention && !paired) return false;