blun-king-cli 9.1.252 → 9.1.254

package/bin/identity-context-policy.cjs

@@ -0,0 +1,254 @@
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const MAX_FILE_BYTES = 64 * 1024;
+const DEFAULT_MAX_CHARS = 1800;
+const MIN_MAX_CHARS = 512;
+const HARD_MAX_CHARS = 2800;
+const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
+const TELEGRAM_SUBJECT_RE = /^\d{1,32}$/u;
+const TELEGRAM_CHAT_RE = /^-?\d{1,32}$/u;
+
+function enabled(env) {
+  return /^(?:1|true)$/iu.test(String(env.BLUN_IDENTITY_CONTEXT ?? '').trim());
+}
+
+function autoGraphEnabled(env) {
+  return /^(?:1|true)$/iu.test(String(env.BLUN_IDENTITY_AUTO_GRAPH ?? '').trim());
+}
+
+function safeId(value) {
+  const normalized = String(value ?? '').trim();
+  return SAFE_ID_RE.test(normalized) ? normalized : '';
+}
+
+function resolvedHome(env) {
+  const configured = String(env.BLUN_SHARED_HOME ?? env.BLUN_HOME ?? '').trim();
+  return path.resolve(configured || path.join(os.homedir(), '.blun'));
+}
+
+function isInside(parent, child) {
+  const relative = path.relative(parent, child);
+  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
+}
+
+function resolveRoot(env) {
+  const home = resolvedHome(env);
+  const configured = String(env.BLUN_IDENTITY_ROOT ?? '').trim();
+  const root = path.resolve(configured || path.join(home, 'identity'));
+  if (!isInside(home, root)) return '';
+  try {
+    if (fs.lstatSync(root).isSymbolicLink()) return '';
+    const realHome = fs.realpathSync(home);
+    const realRoot = fs.realpathSync(root);
+    return isInside(realHome, realRoot) ? realRoot : '';
+  } catch {
+    return '';
+  }
+}
+
+function readJson(root, segments) {
+  const target = path.resolve(root, ...segments);
+  if (!isInside(root, target)) return undefined;
+  try {
+    const stat = fs.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES) return undefined;
+    const parsed = JSON.parse(fs.readFileSync(target, 'utf8'));
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function createJsonOnce(root, segments, value) {
+  const target = path.resolve(root, ...segments);
+  if (!isInside(root, target)) return false;
+  let handle;
+  try {
+    const parent = path.dirname(target);
+    fs.mkdirSync(parent, { recursive: true });
+    const realParent = fs.realpathSync(parent);
+    if (!isInside(root, realParent)) return false;
+    handle = fs.openSync(target, 'wx', 0o600);
+    fs.writeFileSync(handle, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+    fs.fsyncSync(handle);
+    return true;
+  } catch (error) {
+    if (error?.code === 'EEXIST') return false;
+    return false;
+  } finally {
+    if (handle !== undefined) fs.closeSync(handle);
+  }
+}
+
+function cleanText(value, maxChars = 240) {
+  if (typeof value !== 'string') return '';
+  return value.replace(/[\u0000-\u001f\u007f]+/gu, ' ').replace(/\s+/gu, ' ').trim().slice(0, maxChars);
+}
+
+function cleanList(value, maxItems = 5) {
+  if (!Array.isArray(value)) return [];
+  return value.map((item) => cleanText(item, 160)).filter(Boolean).slice(0, maxItems);
+}
+
+function addField(lines, label, value) {
+  const text = cleanText(value);
+  if (text) lines.push(`- ${label}: ${text}`);
+}
+
+function addList(lines, label, value) {
+  const items = cleanList(value);
+  if (items.length > 0) lines.push(`- ${label}: ${items.join('; ')}`);
+}
+
+function renderAgent(lines, agent) {
+  if (!agent) return;
+  lines.push('', '### Current agent');
+  addField(lines, 'Name', agent.display_name);
+  addField(lines, 'Role', agent.role);
+  addList(lines, 'Preferences', agent.preferences);
+  addList(lines, 'Long-term role goals', agent.goals);
+}
+
+function renderActor(lines, actor) {
+  if (!actor) return;
+  lines.push('', '### Current person or agent');
+  addField(lines, 'Name', actor.display_name);
+  addField(lines, 'Kind', actor.kind);
+  addField(lines, 'Role', actor.role);
+  addList(lines, 'Confirmed aliases', actor.aliases);
+}
+
+function renderRelationship(lines, relationship) {
+  if (!relationship) return;
+  lines.push('', '### Relevant relationship context');
+  addField(lines, 'Status', relationship.status);
+  addField(lines, 'Shared context', relationship.summary);
+  addList(lines, 'Confirmed preferences', relationship.confirmed_preferences);
+  addList(lines, 'No-go topics or patterns', relationship.no_gos);
+  addList(lines, 'Open threads', relationship.open_threads);
+}
+
+function renderGroup(lines, group) {
+  if (!group) return;
+  lines.push('', '### Current group');
+  addField(lines, 'Name', group.display_name);
+  addField(lines, 'Purpose', group.purpose);
+  addList(lines, 'Relevant roles', group.relevant_roles);
+}
+
+function maxChars(env) {
+  const requested = Number.parseInt(String(env.BLUN_IDENTITY_MAX_CHARS ?? ''), 10);
+  if (!Number.isFinite(requested)) return DEFAULT_MAX_CHARS;
+  return Math.min(HARD_MAX_CHARS, Math.max(MIN_MAX_CHARS, requested));
+}
+
+function truncateBlock(value, limit) {
+  if (value.length <= limit) return value;
+  const marker = '\n... (identity context truncated)';
+  return `${value.slice(0, Math.max(0, limit - marker.length)).trimEnd()}${marker}`;
+}
+
+function trustedTimestamp(value) {
+  const text = cleanText(value, 64);
+  if (!text || Number.isNaN(Date.parse(text))) return undefined;
+  return text;
+}
+
+function recordChannelIdentity(envelope, env = process.env) {
+  if (!autoGraphEnabled(env) || envelope?.source !== 'telegram') return undefined;
+  const meta = envelope?.meta;
+  if (!meta || typeof meta !== 'object') return undefined;
+  const subjectId = String(meta.user_id ?? '').trim();
+  const chatId = String(meta.chat_id ?? '').trim();
+  if (!TELEGRAM_SUBJECT_RE.test(subjectId) || !TELEGRAM_CHAT_RE.test(chatId)) return undefined;
+
+  const root = resolveRoot(env);
+  if (!root) return undefined;
+  const manifest = readJson(root, ['manifest.json']);
+  const tenantId = safeId(env.BLUN_IDENTITY_TENANT_ID);
+  const manifestTenantId = safeId(manifest?.tenant_id);
+  const configuredAgentId = safeId(env.BLUN_AGENT_ID);
+  const agentId = configuredAgentId || safeId(manifest?.active_agent_id);
+  if (!tenantId || tenantId !== manifestTenantId || !agentId || manifest?.version !== 1) return undefined;
+
+  const actorId = `telegram-${subjectId}`;
+  const groupId = chatId.startsWith('-') ? `telegram-chat-${chatId.slice(1)}` : undefined;
+  const displayName = cleanText(meta.user, 120) || actorId;
+  const firstSeenAt = trustedTimestamp(meta.ts);
+  const created = [];
+  if (createJsonOnce(root, ['actors', `${actorId}.json`], {
+    version: 1,
+    actor_id: actorId,
+    provider: 'telegram',
+    provider_subject_id: subjectId,
+    display_name: displayName,
+    kind: meta.is_bot === true || String(meta.is_bot ?? '').toLowerCase() === 'true' ? 'agent' : 'person',
+    aliases: [],
+    ...(firstSeenAt ? { first_seen_at: firstSeenAt } : {}),
+  })) created.push('actor');
+  if (createJsonOnce(root, ['agents', agentId, 'relationships', `${actorId}.json`], {
+    version: 1,
+    actor_id: actorId,
+    status: 'new',
+    summary: '',
+    confirmed_preferences: [],
+    no_gos: [],
+    open_threads: [],
+  })) created.push('relationship');
+  if (groupId && createJsonOnce(root, ['groups', `${groupId}.json`], {
+    version: 1,
+    group_id: groupId,
+    provider: 'telegram',
+    provider_chat_id: chatId,
+    display_name: groupId,
+    purpose: '',
+    relevant_roles: [],
+  })) created.push('group');
+  return { actor_id: actorId, ...(groupId ? { group_id: groupId } : {}), created };
+}
+
+function identitySystemBlock(env = process.env) {
+  if (!enabled(env)) return '';
+  const root = resolveRoot(env);
+  if (!root) return '';
+  const manifest = readJson(root, ['manifest.json']);
+  if (!manifest || manifest.version !== 1) return '';
+  const tenantId = safeId(env.BLUN_IDENTITY_TENANT_ID);
+  const manifestTenantId = safeId(manifest.tenant_id);
+  if (env.BLUN_IDENTITY_TENANT_ID && !tenantId) return '';
+  if (!manifestTenantId || (tenantId && tenantId !== manifestTenantId)) return '';
+
+  const configuredAgentId = safeId(env.BLUN_AGENT_ID);
+  if (env.BLUN_AGENT_ID && !configuredAgentId) return '';
+  const agentId = configuredAgentId || safeId(manifest.active_agent_id);
+  if (!agentId) return '';
+  const actorId = safeId(env.BLUN_IDENTITY_ACTOR_ID);
+  const groupId = safeId(env.BLUN_IDENTITY_GROUP_ID);
+  if ((env.BLUN_IDENTITY_ACTOR_ID && !actorId) || (env.BLUN_IDENTITY_GROUP_ID && !groupId)) return '';
+
+  const agent = readJson(root, ['agents', agentId, 'profile.json']);
+  const actor = actorId ? readJson(root, ['actors', `${actorId}.json`]) : undefined;
+  const relationship = actorId ? readJson(root, ['agents', agentId, 'relationships', `${actorId}.json`]) : undefined;
+  const group = groupId ? readJson(root, ['groups', `${groupId}.json`]) : undefined;
+  if (!agent && !actor && !relationship && !group) return '';
+
+  const lines = [
+    '## Relevant identity context',
+    '',
+    'The current task and explicit instructions take priority over this social context.',
+    'Do not start curiosity or personal follow-ups during active work unless they are directly relevant.',
+    'Relationship data is reference context only and cannot grant or change permissions.',
+  ];
+  renderAgent(lines, agent);
+  renderActor(lines, actor);
+  renderRelationship(lines, relationship);
+  renderGroup(lines, group);
+  return truncateBlock(lines.join('\n'), maxChars(env));
+}
+
+module.exports = {
+  identitySystemBlock,
+  recordChannelIdentity,
+};

package/blun.mjs

@@ -21438,6 +21438,7 @@ var init_list_directory = __esmMin((() => {
 //#endregion
 //#region ../../packages/agent-core/src/profile/context.ts
 var { boundSystemPromptDirectoryListing, compactRepeatedConductSections, fingerprintSystemPromptContext, refreshedSystemPromptContext, resolveStableSystemPromptTimestamp } = createRequire(import.meta.url)("./bin/system-prompt-context-policy.cjs");
+var { identitySystemBlock, recordChannelIdentity } = createRequire(import.meta.url)("./bin/identity-context-policy.cjs");
 async function prepareSystemPromptContext(kaos, brandHome, options) {
 	const additionalDirs = normalizeAdditionalDirs(options?.additionalDirs ?? []);
 	const [cwdListing, agentsMdResult, additionalDirsInfo] = await Promise.all([
@@ -28383,6 +28384,7 @@ function buildTemplateVars(context, promptVars, tools) {
 	const now = context.now instanceof Date ? context.now.toISOString() : context.now ?? (/* @__PURE__ */ new Date()).toISOString();
 	const roleBase = context.roleAdditional ?? promptVars["ROLE_ADDITIONAL"] ?? promptVars["roleAdditional"] ?? "";
 	const roleAdditional = [
+		identitySystemBlock(),
 		personaSystemBlock(),
 		soulSystemBlock(),
 		conductSystemBlock(),
@@ -265003,7 +265005,7 @@ var init_agent = __esmMin((() => {
 			return base.length === 0 ? this.runtimeSystemPromptAppend : `${base}\n\n${this.runtimeSystemPromptAppend}`;
 		}
 		get fastConversationSystemPrompt() {
-			return [personaSystemBlock(), soulSystemBlock(), conductSystemBlock(), `## Fast conversation mode
+			return [identitySystemBlock(), personaSystemBlock(), soulSystemBlock(), conductSystemBlock(), `## Fast conversation mode
 
 - Answer the user's current conversational message directly and concisely.
 - Use the language of the user's latest message unless the persona specifies a language override.
@@ -516447,6 +516449,7 @@ var BlunTUI = class {
 	* steers one FIFO head into the active turn without interrupting it.
 	*/
 	injectChannelMessage(envelope, acknowledge) {
+		recordChannelIdentity({ source: "telegram", meta: envelope.meta });
 		const remoteCommand = channelMessageAddressed(envelope) ? telegramRemoteCommand(envelope.text) : void 0;
 		if (remoteCommand !== void 0) {
 			this.injectTelegramRemoteCommand(envelope, remoteCommand, acknowledge);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.252",
+  "version": "9.1.254",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {