feat: Bidirectional image and file support

Add photo/document handling in both directions:

- Telegram → Claude: Photos and documents sent to a session topic are
  downloaded to /tmp/ctm-images/ with UUID filenames and 0o600 perms,
  then the file path is injected into the tmux session
- Claude → Telegram: New SendImage message type lets any script send
  images or documents via the bridge socket
- bot.rs: download_file_to(), send_photo(), send_document() methods
- bridge.rs: handle_telegram_photo/document for inbound,
  handle_send_image for outbound with path traversal validation

Co-Authored-By: DreamLabAI <github@thedreamlab.uk>

Author: John O'Hare

README.md

@@ -2,7 +2,7 @@
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Rust](https://img.shields.io/badge/Rust-1.75%2B-orange.svg)](https://www.rust-lang.org/)
-[![Tests](https://img.shields.io/badge/Tests-21%20passing-green.svg)]()
+[![Tests](https://img.shields.io/badge/Tests-23%20passing-green.svg)]()
 [![Clippy](https://img.shields.io/badge/Clippy-0%20warnings-green.svg)]()
 
 Monitor and control Claude Code from your phone. CTM is a Rust daemon that bridges Claude Code CLI sessions to Telegram, giving you a real-time mobile interface to what Claude is doing.
@@ -26,6 +26,8 @@ You (phone)                    Your machine
 - Approve/reject tool executions with inline buttons
 - Each Claude session gets its own Forum Topic thread
 - Type prompts, stop, or kill Claude directly from chat
+- Send photos/files from Telegram directly into Claude's session
+- Send images and documents from Claude back to Telegram
 
 ## Quick Start
 
@@ -71,6 +73,12 @@ This is a security-focused rewrite of the original TypeScript version. The TypeS
 - **Stop/interrupt** — Send `stop` to press Escape, `kill` to send Ctrl-C
 - **Slash commands** — `cc clear`, `cc compact` forwarded to Claude
 
+### Image & File Support
+- **Telegram → Claude** — Send photos or documents from Telegram; they're downloaded locally and the file path is injected into Claude's tmux session
+- **Claude → Telegram** — Send images or files to Telegram via the bridge socket using the `send_image` message type
+- Photos include dimensions; documents include file size and original filename
+- Secure download directory (`/tmp/ctm-images/`) with UUID-based filenames and `0o600` permissions
+
 ### Tool Approval
 - **Inline keyboards** — Approve, Reject, or Abort with one tap
 - **Details button** — Expand to see full tool input parameters
@@ -182,6 +190,7 @@ ctm setup              # Interactive setup wizard
 | Input | Action |
 |-------|--------|
 | Any text | Sends as input to Claude |
+| Photo/file | Downloads and injects file path into Claude's session |
 | `stop` / `esc` | Sends Escape (pause Claude) |
 | `kill` / `ctrl-c` | Sends Ctrl-C (exit Claude) |
 | `cc clear` | Sends `/clear` to Claude |
@@ -190,6 +199,17 @@ ctm setup              # Interactive setup wizard
 | `/help` | Show commands |
 | `/ping` | Health check |
 
+## Sending Images to Telegram
+
+Any script or tool can send images/files to Telegram via the bridge socket:
+
+```bash
+echo '{"type":"send_image","sessionId":"test","content":"/tmp/diagram.png","metadata":{"caption":"Architecture diagram"},"timestamp":"now"}' \
+  | socat - UNIX-CONNECT:~/.config/claude-telegram-mirror/bridge.sock
+```
+
+The `content` field is the absolute path to the file. Image extensions (jpg, png, gif, webp, bmp) are sent as photos; everything else is sent as a document. The optional `caption` metadata field adds a caption. If `sessionId` matches an active session, the file is posted to that session's forum topic.
+
 ## Configuration Reference
 
 ### Environment Variables
@@ -266,8 +286,8 @@ Run CTM on multiple machines with a shared Telegram group:
 
 | Module | Lines | Responsibility |
 |--------|-------|---------------|
-| `bridge.rs` | ~1100 | Central orchestrator: routes messages between all components |
-| `bot.rs` | ~300 | Telegram API: send/receive, forums, inline keyboards, rate limiting |
+| `bridge.rs` | ~1500 | Central orchestrator: routes messages between all components |
+| `bot.rs` | ~400 | Telegram API: send/receive, forums, inline keyboards, file transfer, rate limiting |
 | `socket.rs` | ~250 | Unix socket server with flock PID locking, NDJSON protocol |
 | `session.rs` | ~250 | SQLite persistence: sessions, approvals, stale cleanup |
 | `formatting.rs` | ~700 | Tool summaries, message formatting, ANSI stripping, chunking |
@@ -299,7 +319,7 @@ ctm doctor --fix     # Auto-fix permissions and config
 ```bash
 cargo build              # Debug build
 cargo build --release    # Optimized release build (~8MB binary)
-cargo test               # 21 tests
+cargo test               # 23 tests
 cargo clippy             # 0 warnings
 cargo fmt --check        # Check formatting
 RUST_LOG=debug ctm start # Verbose logging

src/bot.rs

@@ -153,6 +153,27 @@ impl TelegramBot {
         }
     }
 
+    /// Rename a forum topic
+    pub async fn edit_forum_topic(&self, thread_id: i32, name: &str) -> Result<bool> {
+        self.rate_limiter.until_ready().await;
+
+        match self
+            .bot
+            .edit_forum_topic(self.chat_id, ThreadId(MessageId(thread_id)))
+            .name(name)
+            .await
+        {
+            Ok(_) => {
+                tracing::info!(%thread_id, %name, "Forum topic renamed");
+                Ok(true)
+            }
+            Err(e) => {
+                tracing::warn!(error = %e, %thread_id, "Failed to rename forum topic");
+                Ok(false)
+            }
+        }
+    }
+
     /// Close a forum topic
     pub async fn close_forum_topic(&self, thread_id: i32) -> Result<bool> {
         self.rate_limiter.until_ready().await;
@@ -255,6 +276,77 @@ impl TelegramBot {
 
         Ok(updates)
     }
+
+    /// Download a Telegram file by file_id, saving to `dest_path`.
+    /// Returns the file extension from the server-side path (e.g. "jpg", "pdf").
+    pub async fn download_file_to(
+        &self,
+        file_id: &str,
+        dest_path: &std::path::Path,
+    ) -> Result<String> {
+        use teloxide::net::Download;
+
+        let file_info = self
+            .bot
+            .get_file(file_id)
+            .await
+            .map_err(|e| AppError::Telegram(scrub_telegram_error(&e)))?;
+
+        let ext = file_info
+            .path
+            .rsplit('.')
+            .next()
+            .unwrap_or("bin")
+            .to_string();
+
+        let mut dest_file = tokio::fs::File::create(dest_path).await?;
+        self.bot
+            .download_file(&file_info.path, &mut dest_file)
+            .await
+            .map_err(|e| AppError::Telegram(format!("download: {}", e)))?;
+
+        Ok(ext)
+    }
+
+    /// Send a photo from a local file path with optional caption and thread targeting.
+    pub async fn send_photo(
+        &self,
+        path: &std::path::Path,
+        caption: Option<&str>,
+        thread_id: Option<i32>,
+    ) -> Result<Message> {
+        self.rate_limiter.until_ready().await;
+        let input_file = teloxide::types::InputFile::file(path.to_path_buf());
+        let mut req = self.bot.send_photo(self.chat_id, input_file);
+        if let Some(c) = caption {
+            req = req.caption(c);
+        }
+        if let Some(tid) = thread_id {
+            req = req.message_thread_id(ThreadId(MessageId(tid)));
+        }
+        req.await
+            .map_err(|e| AppError::Telegram(scrub_telegram_error(&e)))
+    }
+
+    /// Send a document from a local file path with optional caption and thread targeting.
+    pub async fn send_document(
+        &self,
+        path: &std::path::Path,
+        caption: Option<&str>,
+        thread_id: Option<i32>,
+    ) -> Result<Message> {
+        self.rate_limiter.until_ready().await;
+        let input_file = teloxide::types::InputFile::file(path.to_path_buf());
+        let mut req = self.bot.send_document(self.chat_id, input_file);
+        if let Some(c) = caption {
+            req = req.caption(c);
+        }
+        if let Some(tid) = thread_id {
+            req = req.message_thread_id(ThreadId(MessageId(tid)));
+        }
+        req.await
+            .map_err(|e| AppError::Telegram(scrub_telegram_error(&e)))
+    }
 }
 
 impl Clone for TelegramBot {