polygram 0.7.8 → 0.8.0-rc.1

package/lib/telegram-chunk.js

@@ -276,7 +276,31 @@ function chunkMarkdownText(text, limit) {
     remaining = next;
   }
   if (remaining.length) chunks.push(remaining);
-  return chunks;
+  // 0.7.x defensive post-pass: enforce limit on every chunk. The
+  // fence-splitting "force the break" path (line ~250) can produce
+  // a chunk whose length = breakIdx + closeLine.length + 1, which
+  // may overflow when there's no safe break. Same for the
+  // hard-cut path when no progress is possible. Production saw
+  // chunks of 4097-4500 chars hitting Telegram's 400 "message is
+  // too long". Splitting again byte-wise here is uglier than
+  // markdown-aware, but it's better than the user getting a
+  // failed-out row + missing reply.
+  const safe = [];
+  for (const c of chunks) {
+    if (c.length <= limit) { safe.push(c); continue; }
+    let rest = c;
+    while (rest.length > limit) {
+      // Prefer a newline cut within the last 200 chars of the
+      // limit (cheap heuristic — much better than mid-word).
+      const window = rest.slice(0, limit);
+      const lastNl = window.lastIndexOf('\n', limit - 1);
+      const cutAt = lastNl > limit - 200 ? lastNl + 1 : limit;
+      safe.push(rest.slice(0, cutAt));
+      rest = rest.slice(cutAt);
+    }
+    if (rest.length) safe.push(rest);
+  }
+  return safe;
 }
 
 module.exports = {

package/migrations/010-tool-use-id.sql

@@ -0,0 +1,62 @@
+-- 0.8.0 Phase 1 step 1: SDK migration prep.
+--
+-- Two changes (atomic in one migration to keep schema-version
+-- bookkeeping clean):
+--
+-- (1) Add `tool_use_id` column to pending_approvals — under SDK,
+--     canUseTool's `opts.toolUseID` is a stable per-call identifier
+--     that the SDK guarantees across retries of the same tool call
+--     within a turn. It's the better dedup key than the current
+--     (bot_name, turn_id, tool_input_digest) tuple — avoids the
+--     digest collision risk if Claude reorders JSON keys between
+--     retries.
+--
+--     Existing rows get NULL. Boot-time sweep marks legacy 'pending'
+--     rows as 'expired' so the new dedup query (matching on
+--     non-NULL tool_use_id) doesn't accidentally match them. See
+--     v4 plan §6.5.4 + seam G.
+--
+-- (2) Add chat_tool_decisions table — cross-turn "always allow /
+--     always deny" persistence for the new 4-button approval UI
+--     (Allow / Deny / Always allow / Always deny). canUseTool
+--     consults this table FIRST (step 3 of §4.2) before posting a
+--     card; "always" buttons write here. Per-bot scoping prevents
+--     cross-bot leakage (ship-breaker H7 mitigation).
+--
+--     match_type semantics (v4 plan §6.5.4):
+--       'exact'  — full canonical-JSON-stringify of `input` matches
+--                  input_pattern exactly. Default for "always allow
+--                  this exact command".
+--       'prefix' — canonical-JSON `input` starts with input_pattern.
+--                  Default for "always allow this command name with
+--                  any args".
+--       'regex'  — full match against canonical input. Power user
+--                  only; not exposed in 0.8.0 UI.
+--
+--     Canonical JSON: keys sorted alphabetically, no whitespace.
+--     Prevents Claude reordering keys from breaking dedup
+--     (ship-breaker M8 mitigation).
+
+ALTER TABLE pending_approvals ADD COLUMN tool_use_id TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_pending_approvals_tool_use_id
+  ON pending_approvals(bot_name, tool_use_id)
+  WHERE tool_use_id IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS chat_tool_decisions (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  bot_name TEXT NOT NULL,
+  chat_id TEXT NOT NULL,
+  tool_name TEXT NOT NULL,
+  match_type TEXT NOT NULL
+    CHECK (match_type IN ('exact', 'prefix', 'regex')),
+  input_pattern TEXT NOT NULL,
+  decision TEXT NOT NULL
+    CHECK (decision IN ('allow', 'deny')),
+  issued_ts INTEGER NOT NULL,
+  issued_by_user_id TEXT,
+  expires_ts INTEGER
+);
+
+CREATE INDEX IF NOT EXISTS idx_chat_tool_decisions_lookup
+  ON chat_tool_decisions(bot_name, chat_id, tool_name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "polygram",
-  "version": "0.7.8",
+  "version": "0.8.0-rc.1",
   "description": "Telegram daemon for Claude Code that preserves the OpenClaw per-chat session model. Migration path for OpenClaw users moving to Claude Code.",
   "main": "lib/ipc-client.js",
   "bin": {
@@ -62,6 +62,7 @@
   "homepage": "https://github.com/shumkov/polygram#readme",
   "type": "commonjs",
   "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "0.2.123",
     "better-sqlite3": "^12.9.0",
     "grammy": "^1.42.0",
     "markdown-it": "^14.1.1",