blun-king-cli 9.1.16 → 9.1.18

package/README.md

@@ -9,7 +9,7 @@ Voraussetzung ist Node.js 24.15 oder neuer. Die geprüfte Version wird exakt
 installiert:
 
 ```powershell
-npm install -g blun-king-cli@9.1.1
+npm install -g blun-king-cli@9.1.18
 ```
 
 ## Reproduzierbares Staging und Packen

package/blun.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:39e4b4359446de9a47446e631b853adaafc78c8097e76296c6826ec91ee9902d
+// BLUN_BUILD_INPUT_SHA256:e2258991ea4b7ce19aa0b6147dfc25e8b2f1945acc329856a2a2d00ad594a825
 import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
@@ -74394,8 +74394,8 @@ var init_kosong_llm = __esmMin((() => {
 //#endregion
 //#region ../../packages/agent-core/src/agent/compaction/typical-duration.ts
 /**
-* Experience-based expectation for compaction duration (Mayk/Dieter/Angel
-* 03.08.2026): instead of a fabricated percentage, the compaction indicator
+* Experience-based expectation for compaction duration: instead of a
+* fabricated percentage, the compaction indicator
 * may show the median duration of past completed runs for the same
 * provider+model — but only when the data actually supports it.
 *
@@ -232242,9 +232242,14 @@ var WINDOWS_MCP_TOOL_PREFIX, DesktopControlAlwaysAskPermissionPolicy;
 var init_desktop_control_always_ask = __esmMin((() => {
 	WINDOWS_MCP_TOOL_PREFIX = "mcp__windows-mcp__";
 	DesktopControlAlwaysAskPermissionPolicy = class {
+		agent;
 		name = "desktop-control-always-ask";
+		constructor(agent) {
+			this.agent = agent;
+		}
 		evaluate(context) {
 			if (!context.toolCall.name.toLowerCase().startsWith(WINDOWS_MCP_TOOL_PREFIX)) return;
+			if (this.agent.permission.mode === "yolo") return;
 			return { kind: "ask" };
 		}
 	};
@@ -232873,7 +232878,7 @@ function createPermissionDecisionPolicies(agent) {
 		new PlanModeGuardDenyPermissionPolicy(agent),
 		new UserConfiguredDenyPermissionPolicy(agent),
 		new PersonalMemoryMutationAlwaysAskPermissionPolicy(),
-		new DesktopControlAlwaysAskPermissionPolicy(),
+		new DesktopControlAlwaysAskPermissionPolicy(agent),
 		new AutoModeApprovePermissionPolicy(agent),
 		new SessionApprovalHistoryPermissionPolicy(agent),
 		new UserConfiguredAskPermissionPolicy(agent),
@@ -336447,6 +336452,7 @@ function buildSkillSlashCommands(skills) {
 //#region src/constant/account-memory.ts
 const ACCOUNT_MEMORY_READ_URL = "https://chat.blun.ai/api/blun-memory?persona_id=king&surface=global";
 const ACCOUNT_MEMORY_EXTRACT_URL = "https://chat.blun.ai/api/blun-memory/extract?persona_id=king&surface=global";
+const ACCOUNT_MEMORY_PREFERENCES_URL = "https://account.blun.ai/api/me/preferences";
 const ACCOUNT_MEMORY_MAX_FACT_CHARS = 1e3;
 //#endregion
 //#region src/utils/account-memory.ts
@@ -336464,6 +336470,19 @@ function createAccountMemoryClient(auth, options = {}) {
 	const fetchImpl = options.fetch ?? globalThis.fetch;
 	const timeoutMs = options.timeoutMs ?? 4e3;
 	return {
+		async getConsentStatus() {
+			return readAccountMemoryConsentStatus(await requestWithOAuth(auth, fetchImpl, ACCOUNT_MEMORY_PREFERENCES_URL, { method: "GET" }, timeoutMs, readBoundedJson));
+		},
+		async setConsent(enabled) {
+			if (readAccountMemoryConsentStatus(await requestWithOAuth(auth, fetchImpl, "https://account.blun.ai/api/account/settings", {
+				method: "PATCH",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify({ data_controls: {
+					allow_memory: enabled,
+					memory_consent_asked: true
+				} })
+			}, timeoutMs, readBoundedJson)) !== (enabled ? "enabled" : "disabled")) throw new Error("Account memory returned an invalid response.");
+		},
 		async loadSystemContext() {
 			return renderAccountMemoryContext(await requestWithOAuth(auth, fetchImpl, ACCOUNT_MEMORY_READ_URL, { method: "GET" }, timeoutMs, readBoundedJson));
 		},
@@ -336476,6 +336495,15 @@ function createAccountMemoryClient(auth, options = {}) {
 		}
 	};
 }
+function readAccountMemoryConsentStatus(payload) {
+	const settings = unwrapPayload(payload)?.["settings"];
+	const dataControls = isRecord$13(settings) ? settings["data_controls"] : void 0;
+	if (!isRecord$13(dataControls)) throw new Error("Account memory returned an invalid response.");
+	if (dataControls["memory_consent_asked"] !== true) return "never_asked";
+	if (dataControls["allow_memory"] === true) return "enabled";
+	if (dataControls["allow_memory"] === false) return "disabled";
+	throw new Error("Account memory returned an invalid response.");
+}
 async function requestWithOAuth(auth, fetchImpl, url, init, timeoutMs, consume) {
 	const controller = new AbortController();
 	let timeout;
@@ -407807,12 +407835,20 @@ function installRainbowDance(requestRender) {
 		if (currentDanceController === dance) setRainbowDance(void 0);
 	};
 }
+function getRainbowDanceView() {
+	return currentDanceView;
+}
 function isRainbowDancing() {
 	return currentDanceView?.colored === true;
 }
 function renderDanceFooterModel(modelLabel) {
 	return rainbowText(modelLabel, getDanceRainbowPalette(), currentDanceView?.phase ?? 0);
 }
+function renderDanceWelcomeWordmark(rows) {
+	const phase = currentDanceView?.phase ?? 0;
+	const palette = getDanceRainbowPalette();
+	return rows.map((row, index) => rainbowText(row, palette, phase + index * 3, true));
+}
 /**
 * Drives the rainbow: a single timer advances a shared `phase` and asks the UI
 * to repaint. Lives independently of any component, so the welcome banner
@@ -412627,12 +412663,12 @@ registerUiCatalogFragment({
 //#region src/tui/utils/channel-injection.ts
 /**
 * Channel inbound injection into the VISIBLE interactive TUI session
-* (Otto gate 49 / Angel spec 51).
+* for channel delivery.
 *
 * A remote message (Telegram) must NEVER travel through handleUserInput():
 * no slash-command dispatch (a Telegram "/new" must not open a session), no
 * bash mode, no local editor history — and the transcript shows a clean user
-* line ("Telegram · Mayk  <text>") while the MODEL receives the full
+* line ("Telegram · User  <text>") while the MODEL receives the full
 * <channel …> payload (plus the channel preamble once per TUI process).
 *
 * This module is dependency-free on purpose: verify-telegram.ts drives the
@@ -412669,7 +412705,7 @@ function bufferContext(state, chatId, tag) {
 	while (messages.length > MAX_BUFFERED_CONTEXT_MESSAGES || chars > MAX_BUFFERED_CONTEXT_CHARS) chars -= messages.shift()?.length ?? 0;
 	buffers.set(chatId, messages);
 }
-/** Muted origin prefix for the transcript line, e.g. "Telegram · Mayk". */
+/** Muted origin prefix for the transcript line, e.g. "Telegram · User". */
 function channelOrigin(envelope) {
 	return `Telegram · ${envelope.meta.user ?? envelope.meta.chat_id}`;
 }
@@ -412768,7 +412804,7 @@ registerUiCatalogFragment({
 /**
 * Telegram channel attach mode — the visible TUI session takes over delivery.
 *
-* Design (Otto gate 49, "ein Poller, Lease-Routing"):
+* Design: one poller with lease routing.
 *  - The bridge (plugins/telegram dist/bridge.mjs) stays the ONLY getUpdates
 *    poller at all times. The TUI never talks to Telegram itself.
 *  - While this controller runs, it holds a lease: tui.pid in the channel
@@ -413228,7 +413264,7 @@ var TelegramChannelController = class {
 		for (const candidate of candidates) if (candidate !== void 0 && existsSync(candidate)) return candidate;
 	}
 	/**
-	* The reply path must live in THIS session (Otto gate 49): without the
+	* The reply path must live in THIS session: without the
 	* telegram MCP the model can read channel messages but its answers never
 	* reach the chat — warn loudly instead of failing silently.
 	*/
@@ -422061,17 +422097,23 @@ const BLUN_GLYPHS = {
 		"█  █"
 	]
 };
-function renderBlunWordmark(blueHex) {
-	const white = chalk.bold.hex("#ffffff");
-	const blue = chalk.bold.hex(blueHex);
+function blunWordmarkParts() {
 	const rows = [];
 	for (let i = 0; i < 5; i++) {
 		const bl = `${BLUN_GLYPHS["B"][i]} ${BLUN_GLYPHS["L"][i]}`;
 		const un = `${BLUN_GLYPHS["U"][i]} ${BLUN_GLYPHS["N"][i]}`;
-		rows.push(white(bl) + " " + blue(un));
+		rows.push({
+			bl,
+			un
+		});
 	}
 	return rows;
 }
+function renderBlunWordmark(blueHex) {
+	const white = chalk.bold.hex("#ffffff");
+	const blue = chalk.bold.hex(blueHex);
+	return blunWordmarkParts().map(({ bl, un }) => white(bl) + " " + blue(un));
+}
 function renderHelpLine(text, dim, command) {
 	const token = "/help";
 	const tokenIndex = text.indexOf(token);
@@ -422102,7 +422144,7 @@ var WelcomeComponent = class {
 		const pad = "  ";
 		const dim = chalk.hex(currentTheme.palette.textDim);
 		const labelStyle = chalk.hex(currentTheme.palette.textDim);
-		const wordmarkRows = renderBlunWordmark(primaryHex);
+		const wordmarkRows = getRainbowDanceView()?.colored === true ? renderDanceWelcomeWordmark(blunWordmarkParts().map(({ bl, un }) => `${bl} ${un}`)) : renderBlunWordmark(primaryHex);
 		const tagline = chalk.bold.hex(currentTheme.palette.textStrong)(uiText("welcome.tagline"));
 		const helpLine = isLoggedOut ? chalk.hex(currentTheme.palette.warning)(uiText("welcome.start")) : renderHelpLine(uiText("welcome.help"), dim, chalk.bold.hex(primaryHex));
 		const directoryLabel = uiText("welcome.label.directory");
@@ -422122,7 +422164,7 @@ var WelcomeComponent = class {
 			renderLabel(directoryLabel) + chalk.hex(currentTheme.palette.text)(this.state.workDir),
 			renderLabel(sessionLabel) + chalk.hex(currentTheme.palette.text)(this.state.sessionId),
 			renderLabel(modelLabel) + chalk.bold.hex(primaryHex)(modelValue),
-			renderLabel(versionLabel) + chalk.hex(currentTheme.palette.text)(`${PRODUCT_NAME} 1.0`)
+			renderLabel(versionLabel) + chalk.hex(currentTheme.palette.text)(`${PRODUCT_NAME} ${this.state.version}`)
 		];
 		if (this.state.mcpServersSummary) infoLines.push(renderLabel(mcpLabel) + chalk.hex(currentTheme.palette.text)(this.state.mcpServersSummary));
 		const contentLines = [
@@ -486823,8 +486865,8 @@ var PrefixedWrappedLine = class {
 };
 /** BLUN code surface — the same colored full-width band the ActivityPane uses
 * (WORK_BG #16233a), wrapped around a Write preview so code King writes sits on
-* a coloured background over the FULL width (Papa 05.07: "der bunte Hintergrund
-* beim Coden"). applyBackgroundToLine pads to width and survives the inner
+* a coloured background over the FULL width. applyBackgroundToLine pads to
+* width and survives the inner
 * syntax-highlight ANSI resets; the line count is unchanged so the pinned
 * editor below never moves. */
 const CODE_SURFACE_BG = "#16233a";
@@ -486832,7 +486874,7 @@ var CodeSurfaceComponent = class extends Container {
 	fixedLines;
 	fixedRows;
 	/**
-	* Fixed mode (Papa 05.07: "chatfenster wandert auf und ab beim coden"):
+	* Fixed mode prevents the chat area from moving while tools run:
 	* while Write args STREAM, the preview must have a CONSTANT physical height —
 	* wrapped long lines and collapsing blank lines made the band grow/shrink
 	* every delta, which bounced the whole frame once the transcript filled the
@@ -486865,7 +486907,7 @@ var ToolCallComponent = class ToolCallComponent extends Container {
 	* True once the STREAMING preview rendered the fixed-height code band.
 	* The collapsed FINAL preview then keeps exactly that height (padded band),
 	* so the result landing never changes the block height — no short transcript
-	* jump per tool call (Papa 05.07: "bleibt manchmal kurz nicht stehen").
+	* jump per tool call.
 	*/
 	streamedFixedBand = false;
 	toolCall;
@@ -487041,7 +487083,7 @@ var ToolCallComponent = class ToolCallComponent extends Container {
 	* rief SOFORT rebuildBody+requestRender. Weil die Body-Hoehe sich dabei um
 	* eine Zeile aendert, verschob der BottomPinnedTUI-Filler die Eingabe fuer
 	* einen Frame — das sporadische 1-Zeilen-Zucken NUR waehrend Tool-Aktivitaet
-	* (Papa: "das passiert nicht immer"). appendLiveOutput hatte den Debounce
+	* appendLiveOutput previously had the debounce
 	* schon; hier fehlte er. Daten sofort, Neu-Render coalesced (50ms).
 	*/
 	progressRenderTimer;
@@ -496055,7 +496097,7 @@ function isRateLimitError(error) {
 /**
 * F2 Tippen-mit-Vorschlag — Completion-Client.
 *
-* ANBIETERNEUTRAL seit 04.08.2026 (Papa: "Wir bauen alles selbst").
+* Provider-neutral since 2026-08-04.
 * Vorher stand hier eine fest verdrahtete Route zu einem Fremdanbieter:
 * Bei jedem Tippen ging ein Datei-Ausschnitt dorthin, ohne dass der Nutzer
 * etwas abgeschickt hat. Das widersprach der Zusage, dass nichts den Rechner
@@ -497334,7 +497376,11 @@ var BottomPinnedTUI = class extends TUI {
 	}
 	paintSurface(lines, width) {
 		if (!this.surfaceEnabled) return lines;
-		return lines.map((line) => applyBackgroundToLine(line, width, (text) => currentTheme.bg("surface", text)));
+		try {
+			return lines.map((line) => applyBackgroundToLine(line, width, (text) => currentTheme.bg("surface", text)));
+		} catch {
+			return lines;
+		}
 	}
 	/**
 	* Children from this index on (editor, footer) are pinned to the bottom.
@@ -497354,7 +497400,7 @@ var BottomPinnedTUI = class extends TUI {
 	chromeFromIndex = Number.POSITIVE_INFINITY;
 	/**
 	* Rows of the pinned block that are an OVERLAY (the editor's autocomplete
-	* menu). The menu must not shift the transcript (Papa 05.07: "aber / das
+	* menu). The menu must not shift the transcript (the
 	* ändert es trotzdem noch") — instead it covers the bottommost transcript
 	* rows: we drop that many content rows so every remaining row keeps its
 	* exact position while the menu is open.
@@ -497437,7 +497483,7 @@ var BottomPinnedTUI = class extends TUI {
 		const pinAt = this.pinFromIndex;
 		if (!Number.isFinite(pinAt) || pinAt < 0 || pinAt >= this.children.length) {
 			this.setMouseTracking(false);
-			return this.paintSurface(super.render(width), width);
+			return super.render(width);
 		}
 		try {
 			const blocks = this.children.map((child) => child.render(width));
@@ -507184,6 +507230,7 @@ var BlunTUI = class {
 	scrollbackController;
 	personalMemoryController;
 	accountMemory;
+	accountMemoryEnabledForSession = false;
 	pendingAccountMemoryExtractions = /* @__PURE__ */ new Set();
 	managedQuotaWarningController;
 	managedQuotaWarningPersistence = Promise.resolve();
@@ -507489,7 +507536,10 @@ var BlunTUI = class {
 		}
 		if (this.aborted) return;
 		if (this.session === void 0 && this.state.startupState !== "picker") return;
-		if (this.session !== void 0) await this.applyAccountMemoryContext(this.session);
+		if (this.session !== void 0) {
+			await this.refreshPersonalMemory(true);
+			await this.authFlow.refreshManagedQuotaWindows();
+		}
 		this.showTmuxKeyboardWarningIfNeeded();
 		this.startTelegramChannel();
 		if (this.state.startupState === "picker") {
@@ -508093,10 +508143,10 @@ var BlunTUI = class {
 		this.state.ui.requestRender();
 	}
 	/**
-	* Remote channel inbound (Telegram) into THIS visible session — Otto gate 49.
+	* Remote channel inbound (Telegram) into THIS visible session.
 	* Never routes through handleUserInput: no slash/bash dispatch (a Telegram
 	* "/new" is just text for the model), no local editor history. The transcript
-	* shows a clean user line with a muted origin prefix (Angel spec 51); the
+	* shows a clean user line with a muted origin prefix; the
 	* model receives the full <channel …> payload. Busy turns queue via the same
 	* queuedMessages mechanic as typed input; a completed tool/step boundary
 	* steers one FIFO head into the active turn without interrupting it.
@@ -508522,12 +508572,34 @@ var BlunTUI = class {
 	refreshManagedQuotaWindows() {
 		this.authFlow.refreshManagedQuotaWindows();
 	}
-	async refreshPersonalMemory(_promptIfNeverAsked = false) {
-		if (this.session !== void 0) await this.applyAccountMemoryContext(this.session);
+	async refreshPersonalMemory(promptIfNeverAsked = false) {
+		const session = this.session;
+		if (session === void 0) return;
+		this.accountMemoryEnabledForSession = false;
+		try {
+			let consentStatus = await this.accountMemory.getConsentStatus();
+			if (consentStatus === "never_asked" && promptIfNeverAsked) {
+				const consent = await ensureStartupPersonalMemoryConsent({
+					host: this,
+					consentStatus,
+					copy: startupPersonalMemoryConsentCopy(),
+					updateSettings: async (patch) => {
+						await this.accountMemory.setConsent(patch.memory_enabled === true);
+					}
+				});
+				if (consent === "persistence-failed") this.showStatus(startupPersonalMemoryConsentCopy().persistenceFailed, "warning");
+				consentStatus = consent === "enabled" || consent === "disabled" ? consent : "never_asked";
+			}
+			this.accountMemoryEnabledForSession = consentStatus === "enabled";
+		} catch (error) {
+			this.reportAccountMemoryIssue("Account memory consent unavailable", error);
+		}
+		await this.applyAccountMemoryContext(session);
 	}
 	async applyAccountMemoryContext(session) {
 		try {
-			await session.setAccountMemoryContext(await this.accountMemory.loadSystemContext());
+			const context = this.accountMemoryEnabledForSession ? await this.accountMemory.loadSystemContext() : void 0;
+			await session.setAccountMemoryContext(context);
 		} catch (error) {
 			try {
 				await session.setAccountMemoryContext(void 0);
@@ -508536,7 +508608,7 @@ var BlunTUI = class {
 		}
 	}
 	extractAccountMemory(text) {
-		if (text.trim().length === 0) return;
+		if (!this.accountMemoryEnabledForSession || text.trim().length === 0) return;
 		let pending;
 		pending = this.accountMemory.extract(text).catch((error) => {
 			this.reportAccountMemoryIssue("Account memory update failed", error);
@@ -509464,7 +509536,7 @@ var BlunTUI = class {
 	/**
 	* Presence label next to the thinking spinner — uses the persona name the
 	* user gave the agent, falling back to the model name "King". E.g. "Sven
-	* denkt…" / "King arbeitet…". Angel's persona statusline spec.
+	* denkt…" / "King arbeitet…" persona status line.
 	*/
 	personaVerbLabel(mode) {
 		return uiText(mode === "thinking" ? "blunTui.activity.thinking" : "blunTui.activity.working", { name: personaName() ?? "King" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.16",
+  "version": "9.1.18",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {
@@ -22,6 +22,7 @@
     "x64",
     "arm64"
   ],
+  "dependencies": {},
   "optionalDependencies": {
     "@mariozechner/clipboard": "^0.3.9",
     "node-pty": "^1.1.0"
@@ -44,5 +45,5 @@
     "cli",
     "assistant"
   ],
-  "author": "BLUN / Mayk Biletti"
+  "author": "BLUN"
 }

package/telegram-plugin/dist/bridge.mjs

@@ -59318,13 +59318,32 @@ function defaultAccess() {
 		pending: {}
 	};
 }
+function normalizeIdList(value) {
+	if (!Array.isArray(value)) return [];
+	return [...new Set(value.filter((entry) => typeof entry === "string" || typeof entry === "number").map((entry) => String(entry).trim()).filter((entry) => entry.length > 0))];
+}
+function normalizeGroups(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
+	const groups = {};
+	for (const [chatId, rawPolicy] of Object.entries(value)) {
+		if (rawPolicy === null || typeof rawPolicy !== "object" || Array.isArray(rawPolicy)) continue;
+		const policy = rawPolicy;
+		const alwaysAllowFrom = normalizeIdList(policy.alwaysAllowFrom);
+		groups[chatId] = {
+			requireMention: policy.requireMention !== false,
+			allowFrom: normalizeIdList(policy.allowFrom),
+			...alwaysAllowFrom.length > 0 ? { alwaysAllowFrom } : {}
+		};
+	}
+	return groups;
+}
 function readAccess() {
 	try {
 		const parsed = JSON.parse(readFileSync(accessFile(), "utf8"));
 		return {
 			dmPolicy: parsed.dmPolicy ?? "pairing",
-			allowFrom: parsed.allowFrom ?? [],
-			groups: parsed.groups ?? {},
+			allowFrom: normalizeIdList(parsed.allowFrom),
+			groups: normalizeGroups(parsed.groups),
 			pending: parsed.pending ?? {},
 			mentionPatterns: parsed.mentionPatterns,
 			ignorePatterns: parsed.ignorePatterns,
@@ -59333,8 +59352,8 @@ function readAccess() {
 			textChunkLimit: parsed.textChunkLimit,
 			chunkMode: parsed.chunkMode
 		};
-	} catch (err) {
-		if (err.code === "ENOENT") return defaultAccess();
+	} catch (error) {
+		if (error.code === "ENOENT") return defaultAccess();
 		try {
 			renameSync(accessFile(), `${accessFile()}.corrupt-${Date.now()}`);
 		} catch {}
@@ -67292,7 +67311,7 @@ function normalize(s) {
 }
 const STRONG_META = /\b(keine (gruppen ?)?antwort|gar keine antwort|halte (mich|die klappe)|(bin|bleibe) (jetzt )?still|ich schweige|schweige|stille|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht (direkt )?an mich( gerichtet)?|nicht meine lane|keine reaktion|no ?action|kein wort|silence|staying (silent|out|quiet)|keeping (quiet|out)|no (response|reply|answer|comment)|nothing (to (add|do|report)|for me)|not (for me|my lane|addressed to me|directed at me)|holding back|standing by|no need to (respond|reply))\b/;
 const SHORT_CONFIRM = /^(verstanden|kapiert|ok|okay|alles klar|geht klar|angekommen|seh sie|ich seh sie|gemerkt|passt|erledigt notiert|notiert|no ?action|understood|got it|noted|acknowledged|roger|received|silence|still)\b[\s\S]{0,48}$/;
-const PRESENCE_ONLY = /^(ja +papa|hier +papa|bin +da|bin +hier|hier +bin +ich|ich +bin +da|hi +papa|hallo +papa|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|danke +papa|freut +mich|yes +papa|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
+const PRESENCE_ONLY = /^(bin +da|bin +hier|hier +bin +ich|ich +bin +da|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|freut +mich|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
 /**
 * True when this reply text, sent into a GROUP, is pure meta/acknowledgement
 * noise that must not be delivered. Length-guarded so genuine longer answers

package/telegram-plugin/dist/mcp-server.mjs

@@ -73135,13 +73135,32 @@ function defaultAccess() {
 		pending: {}
 	};
 }
+function normalizeIdList(value) {
+	if (!Array.isArray(value)) return [];
+	return [...new Set(value.filter((entry) => typeof entry === "string" || typeof entry === "number").map((entry) => String(entry).trim()).filter((entry) => entry.length > 0))];
+}
+function normalizeGroups(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
+	const groups = {};
+	for (const [chatId, rawPolicy] of Object.entries(value)) {
+		if (rawPolicy === null || typeof rawPolicy !== "object" || Array.isArray(rawPolicy)) continue;
+		const policy = rawPolicy;
+		const alwaysAllowFrom = normalizeIdList(policy.alwaysAllowFrom);
+		groups[chatId] = {
+			requireMention: policy.requireMention !== false,
+			allowFrom: normalizeIdList(policy.allowFrom),
+			...alwaysAllowFrom.length > 0 ? { alwaysAllowFrom } : {}
+		};
+	}
+	return groups;
+}
 function readAccess() {
 	try {
 		const parsed = JSON.parse(readFileSync(accessFile(), "utf8"));
 		return {
 			dmPolicy: parsed.dmPolicy ?? "pairing",
-			allowFrom: parsed.allowFrom ?? [],
-			groups: parsed.groups ?? {},
+			allowFrom: normalizeIdList(parsed.allowFrom),
+			groups: normalizeGroups(parsed.groups),
 			pending: parsed.pending ?? {},
 			mentionPatterns: parsed.mentionPatterns,
 			ignorePatterns: parsed.ignorePatterns,
@@ -73150,8 +73169,8 @@ function readAccess() {
 			textChunkLimit: parsed.textChunkLimit,
 			chunkMode: parsed.chunkMode
 		};
-	} catch (err) {
-		if (err.code === "ENOENT") return defaultAccess();
+	} catch (error) {
+		if (error.code === "ENOENT") return defaultAccess();
 		try {
 			renameSync(accessFile(), `${accessFile()}.corrupt-${Date.now()}`);
 		} catch {}
@@ -73448,7 +73467,7 @@ function normalize(s) {
 }
 const STRONG_META = /\b(keine (gruppen ?)?antwort|gar keine antwort|halte (mich|die klappe)|(bin|bleibe) (jetzt )?still|ich schweige|schweige|stille|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht (direkt )?an mich( gerichtet)?|nicht meine lane|keine reaktion|no ?action|kein wort|silence|staying (silent|out|quiet)|keeping (quiet|out)|no (response|reply|answer|comment)|nothing (to (add|do|report)|for me)|not (for me|my lane|addressed to me|directed at me)|holding back|standing by|no need to (respond|reply))\b/;
 const SHORT_CONFIRM = /^(verstanden|kapiert|ok|okay|alles klar|geht klar|angekommen|seh sie|ich seh sie|gemerkt|passt|erledigt notiert|notiert|no ?action|understood|got it|noted|acknowledged|roger|received|silence|still)\b[\s\S]{0,48}$/;
-const PRESENCE_ONLY = /^(ja +papa|hier +papa|bin +da|bin +hier|hier +bin +ich|ich +bin +da|hi +papa|hallo +papa|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|danke +papa|freut +mich|yes +papa|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
+const PRESENCE_ONLY = /^(bin +da|bin +hier|hier +bin +ich|ich +bin +da|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|freut +mich|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
 /**
 * True when this reply text, sent into a GROUP, is pure meta/acknowledgement
 * noise that must not be delivered. Length-guarded so genuine longer answers

package/telegram-plugin/dist/noise.mjs

@@ -22,7 +22,7 @@ function normalize(s) {
 }
 const STRONG_META = /\b(keine (gruppen ?)?antwort|gar keine antwort|halte (mich|die klappe)|(bin|bleibe) (jetzt )?still|ich schweige|schweige|stille|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht (direkt )?an mich( gerichtet)?|nicht meine lane|keine reaktion|no ?action|kein wort|silence|staying (silent|out|quiet)|keeping (quiet|out)|no (response|reply|answer|comment)|nothing (to (add|do|report)|for me)|not (for me|my lane|addressed to me|directed at me)|holding back|standing by|no need to (respond|reply))\b/;
 const SHORT_CONFIRM = /^(verstanden|kapiert|ok|okay|alles klar|geht klar|angekommen|seh sie|ich seh sie|gemerkt|passt|erledigt notiert|notiert|no ?action|understood|got it|noted|acknowledged|roger|received|silence|still)\b[\s\S]{0,48}$/;
-const PRESENCE_ONLY = /^(ja +papa|hier +papa|bin +da|bin +hier|hier +bin +ich|ich +bin +da|hi +papa|hallo +papa|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|danke +papa|freut +mich|yes +papa|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
+const PRESENCE_ONLY = /^(bin +da|bin +hier|hier +bin +ich|ich +bin +da|was +brauchst +du|was +gibt +es|was +liegt +an|wie +kann +ich +helfen|bereit|ich +warte|warte +auf|melde +mich|freut +mich|here|standing +by|ready|awaiting|what +do +you +need)\b[\s\S]{0,40}$/;
 /**
 * True when this reply text, sent into a GROUP, is pure meta/acknowledgement
 * noise that must not be delivered. Length-guarded so genuine longer answers