blun-king-cli 9.1.229 → 9.1.231

package/bin/bash-search-scope-policy.cjs

@@ -0,0 +1,49 @@
+'use strict';
+
+function normalizePath(value) {
+  return String(value || '').trim().replaceAll('\\', '/').replace(/\/+$/u, '').toLowerCase();
+}
+
+function windowsBashPath(value) {
+  const normalized = normalizePath(value);
+  const match = normalized.match(/^([a-z]):(\/.*)$/u);
+  return match ? `/${match[1]}${match[2]}` : normalized;
+}
+
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&');
+}
+
+function findTargetsWholeHome(command, homeDir, isWindowsBash) {
+  const normalizedHome = normalizePath(homeDir);
+  if (!normalizedHome) return false;
+  const homes = new Set([normalizedHome, '~', '$home']);
+  if (isWindowsBash) homes.add(windowsBashPath(normalizedHome));
+  return [...homes].some((home) => {
+    const target = escapeRegExp(home);
+    return new RegExp(`(?:^|[;&|]\\s*)find\\s+(?:["']?)${target}(?=["'\\s;|&]|$)`, 'iu').test(command);
+  });
+}
+
+function recursiveGrepTargetsDot(command) {
+  const segments = String(command || '').split(/(?:&&|\|\||[;\n])/u);
+  return segments.some((segment) => {
+    const match = segment.match(/^\s*grep\s+(.+)$/iu);
+    if (!match) return false;
+    const args = match[1];
+    if (!/(?:^|\s)-[^\s]*[rR][^\s]*(?=\s|$)/u.test(args)) return false;
+    return /(?:^|\s)["']?\.["']?(?=\s|$)/u.test(args);
+  });
+}
+
+function broadRecursiveSearchRefusal({ command, homeDir, isWindowsBash = false }) {
+  if (findTargetsWholeHome(String(command || ''), homeDir, isWindowsBash)) {
+    return 'Refused broad recursive search over the whole user home before execution. Use Glob with an anchored filename pattern, or narrow Bash find to a known project directory.';
+  }
+  if (recursiveGrepTargetsDot(command)) {
+    return 'Refused broad recursive grep against dot before execution. Use Grep with a path/glob filter, or narrow Bash grep to explicit project subdirectories.';
+  }
+  return undefined;
+}
+
+module.exports = { broadRecursiveSearchRefusal };

package/blun.mjs

@@ -262719,7 +262719,7 @@ function windowsPathToPosixPath(path) {
 function rewriteWindowsNullRedirect(command) {
 	return command.replace(WINDOWS_NUL_REDIRECT, "$1/dev/null");
 }
-var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT;
+var MS_PER_SECOND, DEFAULT_TIMEOUT_S, MAX_TIMEOUT_S, DEFAULT_BACKGROUND_TIMEOUT_S, MAX_BACKGROUND_TIMEOUT_S, USER_INTERRUPT_REASON, BashInputSchema, SHELL_TIMEOUT_VARS, BashTool, WINDOWS_NUL_REDIRECT, broadRecursiveSearchRefusal;
 var init_bash = __esmMin((() => {
 	init_zod$1();
 	init_background();
@@ -262728,6 +262728,7 @@ var init_bash = __esmMin((() => {
 	init_rule_match();
 	init_result_builder();
 	init_bash$1();
+	({ broadRecursiveSearchRefusal } = createRequire(import.meta.url)("./bin/bash-search-scope-policy.cjs"));
 	MS_PER_SECOND = 1e3;
 	DEFAULT_TIMEOUT_S = 60;
 	MAX_TIMEOUT_S = 300;
@@ -262764,7 +262765,7 @@ var init_bash = __esmMin((() => {
 		MAX_TIMEOUT_S,
 		MAX_BACKGROUND_TIMEOUT_S
 	};
-	bash_default = "Execute a `{{ SHELL_NAME }}` command for pipes, environment variables, processes, git, package managers, build or test runners, and other genuine shell semantics.\n\nPrefer the dedicated tools when they fit: `Read` for a known file, `Write` to create or replace a file, `Edit` for exact changes, `Glob` to locate files, and `Grep` to search contents. Their output is bounded and their permissions are clearer.\n\nStdout and stderr are combined. Long foreground output is streamed to a private file; capture stops at a safe size while the command continues to its real exit code. A non-zero command ends with its exit code; timeouts and user interrupts are reported separately.\n\nEach call runs in a fresh shell environment. Variables, `cd`, and shell history do not carry into later calls; pass `cwd` or use absolute paths. Foreground commands default to {{ DEFAULT_TIMEOUT_S }}s and allow up to {{ MAX_TIMEOUT_S }}s through `timeout`. Do not run interactive commands or commands that may run forever in the foreground.\n\nWith `run_in_background=true`, provide a short `description`; the tool returns a task ID and notifies you on completion. Background tasks default to {{ DEFAULT_BACKGROUND_TIMEOUT_S }}s and allow up to {{ MAX_BACKGROUND_TIMEOUT_S }}s. Use `disable_timeout=true` only when no deadline is appropriate. Use `TaskOutput` for a status or output snapshot and `TaskStop` only to cancel. After launch, normally return control instead of immediately waiting.\n\nQuote paths containing spaces. Chain dependent commands with `&&`; issue independent read-only checks as parallel tool calls. Use `;`, `||`, pipes, redirects, and shell control flow when their semantics are required.\n\nStay inside the working directory unless the user explicitly requests otherwise. Avoid `..`, and never require superuser privileges without explicit instruction. Command availability depends on the host; verify unfamiliar commands before relying on them.";
+	bash_default = "Execute a `{{ SHELL_NAME }}` command for pipes, environment variables, processes, git, package managers, builds, tests, and other shell semantics.\n\nPrefer dedicated tools: `Read` for a known file, `Write` to create or replace it, `Edit` for exact changes, `Glob` to locate files, and `Grep` to search contents. Whole-home `find` and recursive `grep` against `.` are refused; narrow the path or use those search tools.\n\nStdout and stderr are combined. Long foreground output is streamed to a private file; capture stops at a safe size while the command continues to its real exit code. A non-zero command ends with its exit code; timeouts and user interrupts are reported separately.\n\nEach call runs in a fresh shell environment. Variables, `cd`, and shell history do not carry into later calls; pass `cwd` or use absolute paths. Foreground commands default to {{ DEFAULT_TIMEOUT_S }}s and allow up to {{ MAX_TIMEOUT_S }}s through `timeout`. Do not run interactive commands or commands that may run forever in the foreground.\n\nWith `run_in_background=true`, provide a short `description`; the tool returns a task ID and notifies you on completion. Background tasks default to {{ DEFAULT_BACKGROUND_TIMEOUT_S }}s and allow up to {{ MAX_BACKGROUND_TIMEOUT_S }}s. Use `disable_timeout=true` only when no deadline is appropriate. Use `TaskOutput` for a status or output snapshot and `TaskStop` only to cancel. After launch, normally return control instead of immediately waiting.\n\nQuote paths containing spaces. Chain dependent commands with `&&`; issue independent read-only checks as parallel tool calls. Use `;`, `||`, pipes, redirects, and shell control flow when their semantics are required.\n\nStay inside the working directory unless the user explicitly requests otherwise. Avoid `..`, and never require superuser privileges without explicit instruction. Command availability depends on the host; verify unfamiliar commands before relying on them.";
 	BashTool = class {
 		kaos;
 		cwd;
@@ -262897,6 +262898,16 @@ var init_bash = __esmMin((() => {
 				isError: true,
 				output: "Command cannot be empty."
 			};
+			const searchRefusal = broadRecursiveSearchRefusal({
+				command: args.command,
+				cwd: args.cwd ?? this.cwd,
+				homeDir: process.env["USERPROFILE"] ?? process.env["HOME"],
+				isWindowsBash: this.isWindowsBash
+			});
+			if (searchRefusal !== void 0) return {
+				isError: true,
+				output: searchRefusal
+			};
 			if (args.run_in_background !== true) return void 0;
 			if (!this.allowBackground) return {
 				isError: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.229",
+	"version": "9.1.231",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/mcp-server.mjs

@@ -9814,6 +9814,29 @@ function isRecentDuplicate(chatId, text) {
 	} catch {}
 	return false;
 }
+function telegramErrorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function isTelegramEntityParseError(error) {
+	return /bad request: can't parse entities:/iu.test(telegramErrorMessage(error));
+}
+async function sendTelegramTextChunk(api, chatId, text, options, parseMode) {
+	try {
+		return {
+			sent: await api.sendMessage(chatId, text, {
+				...options,
+				...parseMode !== void 0 ? { parse_mode: parseMode } : {}
+			}),
+			plainTextFallback: false
+		};
+	} catch (error) {
+		if (parseMode === void 0 || !isTelegramEntityParseError(error)) throw error;
+		return {
+			sent: await api.sendMessage(chatId, text, options),
+			plainTextFallback: true
+		};
+	}
+}
 async function runReply(api, args) {
 	const chatId = resolveAllowedChatId(args.chat_id);
 	const text = args.text;
@@ -9849,13 +9872,15 @@ async function runReply(api, args) {
 	const replyMode = access.replyToMode ?? "first";
 	const chunks = chunk(text, limit, mode);
 	const sentIds = [];
+	let plainTextFallbacks = 0;
 	try {
 		for (let i = 0; i < chunks.length; i++) {
 			const shouldReplyTo = replyTo !== void 0 && replyMode !== "off" && (replyMode === "all" || i === 0);
-			const sent = await api.sendMessage(chatId, chunks[i], {
-				...shouldReplyTo ? { reply_parameters: { message_id: replyTo } } : {},
-				...parseMode !== void 0 ? { parse_mode: parseMode } : {}
-			});
+			const result = await sendTelegramTextChunk(api, chatId, chunks[i], {
+				...shouldReplyTo ? { reply_parameters: { message_id: replyTo } } : {}
+			}, parseMode);
+			const sent = result.sent;
+			if (result.plainTextFallback) plainTextFallbacks += 1;
 			sentIds.push(sent.message_id);
 		}
 	} catch (err) {
@@ -9875,6 +9900,7 @@ async function runReply(api, args) {
 		chat_id: chatId,
 		message_ids: sentIds,
 		text,
+		...plainTextFallbacks > 0 ? { plain_text_fallbacks: plainTextFallbacks } : {},
 		...files.length > 0 ? { files } : {}
 	});
 	return sentIds.length === 1 ? `sent (id: ${sentIds[0]})` : `sent ${sentIds.length} parts (ids: ${sentIds.join(", ")})`;