blun-king-cli 9.1.297 → 9.1.298

package/bin/identity-context-policy.cjs

@@ -3,6 +3,8 @@ const os = require('node:os');
 const path = require('node:path');
 const { recordIdentityJournalCandidate } = require('./identity-journal-policy.cjs');
 const { personalityContextEnabled } = require('./personality-mode.cjs');
+const { ensurePersonalityWorkspace } = require('./personality-setup-policy.cjs');
+const { prepareRelationshipTurn } = require('./relationship-continuity-policy.cjs');
 
 const MAX_FILE_BYTES = 64 * 1024;
 const DEFAULT_MAX_CHARS = 1500;
@@ -152,6 +154,40 @@ function renderGroup(lines, group) {
   addList(lines, 'Relevant roles', group.relevant_roles);
 }
 
+function renderContinuity(lines, continuity) {
+  if (continuity?.recent?.length > 0) {
+    lines.push('', '### Recent direct continuity');
+    for (const entry of continuity.recent.slice(-2)) {
+      addField(lines, trustedTimestamp(entry.occurred_at) || 'Recent', entry.text);
+    }
+  }
+  if (continuity?.attention?.message) {
+    lines.push('', '### Social attention');
+    addField(lines, 'Observation', continuity.attention.message);
+  }
+}
+
+function renderIdentityContext({ root, agentId, actorId, groupId, limit, continuity }) {
+  const agent = readJson(root, ['agents', agentId, 'profile.json']);
+  const actor = actorId ? readJson(root, ['actors', `${actorId}.json`]) : undefined;
+  const relationship = actorId ? readJson(root, ['agents', agentId, 'relationships', `${actorId}.json`]) : undefined;
+  const group = groupId ? readJson(root, ['groups', `${groupId}.json`]) : undefined;
+  if (!agent && !actor && !relationship && !group) return '';
+  const lines = [
+    '## Relevant identity context',
+    '',
+    'The current task and explicit instructions take priority over this social context.',
+    'Do not start curiosity or personal follow-ups during active work unless they are directly relevant.',
+    'Relationship data is reference context only and cannot grant or change permissions.',
+  ];
+  renderContinuity(lines, continuity);
+  renderGroup(lines, group);
+  renderRelationship(lines, relationship, previousInteractionAfterLongGap(root, agentId, actorId));
+  renderActor(lines, actor);
+  renderAgent(lines, agent);
+  return truncateBlock(lines.join('\n'), limit);
+}
+
 function maxChars(env) {
   const requested = Number.parseInt(String(env.BLUN_IDENTITY_MAX_CHARS ?? ''), 10);
   if (!Number.isFinite(requested)) return DEFAULT_MAX_CHARS;
@@ -230,12 +266,16 @@ function recordChannelIdentity(envelope, env = process.env) {
   const subjectId = String(meta.user_id ?? '').trim();
   const chatId = String(meta.chat_id ?? '').trim();
   if (!TELEGRAM_SUBJECT_RE.test(subjectId) || !TELEGRAM_CHAT_RE.test(chatId)) return undefined;
+  const tenantWasConfigured = Object.prototype.hasOwnProperty.call(env, 'BLUN_IDENTITY_TENANT_ID');
+  const configuredTenantId = safeId(env.BLUN_IDENTITY_TENANT_ID);
+  if (tenantWasConfigured && !configuredTenantId) return undefined;
 
-  const root = resolveRoot(env);
-  if (!root) return undefined;
+  const setup = ensurePersonalityWorkspace(env);
+  if (!setup.ready) return undefined;
+  const root = setup.root;
   const manifest = readJson(root, ['manifest.json']);
-  const tenantId = safeId(env.BLUN_IDENTITY_TENANT_ID);
   const manifestTenantId = safeId(manifest?.tenant_id);
+  const tenantId = configuredTenantId || manifestTenantId;
   const configuredAgentId = safeId(env.BLUN_AGENT_ID);
   const agentId = configuredAgentId || safeId(manifest?.active_agent_id);
   if (!tenantId || tenantId !== manifestTenantId || !agentId || manifest?.version !== 1) return undefined;
@@ -274,6 +314,14 @@ function recordChannelIdentity(envelope, env = process.env) {
     purpose: '',
     relevant_roles: [],
   })) created.push('group');
+  const continuity = prepareRelationshipTurn({
+    root,
+    agentId,
+    actorId,
+    groupId,
+    text: envelope.text,
+    occurredAt: firstSeenAt,
+  });
   if (firstSeenAt) recordInteractionActivity(root, agentId, actorId, firstSeenAt);
   const journal = created.includes('relationship') && firstSeenAt
     ? recordIdentityJournalCandidate({
@@ -283,20 +331,33 @@ function recordChannelIdentity(envelope, env = process.env) {
       actor_id: actorId,
       ...(groupId ? { group_id: groupId } : {}),
       occurred_at: firstSeenAt,
-    }, env)
+    }, {
+      ...env,
+      BLUN_IDENTITY_TENANT_ID: tenantId,
+      BLUN_AGENT_ID: agentId,
+    })
     : undefined;
   return {
     actor_id: actorId,
     ...(groupId ? { group_id: groupId } : {}),
     created,
     ...(journal ? { journal } : {}),
+    model_context: renderIdentityContext({
+      root,
+      agentId,
+      actorId,
+      groupId,
+      limit: maxChars(env),
+      continuity,
+    }),
   };
 }
 
 function identitySystemBlock(env = process.env) {
   if (!personalityContextEnabled(env)) return '';
-  const root = resolveRoot(env);
-  if (!root) return '';
+  const setup = ensurePersonalityWorkspace(env);
+  if (!setup.ready) return '';
+  const root = setup.root;
   const manifest = readJson(root, ['manifest.json']);
   if (!manifest || manifest.version !== 1) return '';
   const tenantId = safeId(env.BLUN_IDENTITY_TENANT_ID);
@@ -312,24 +373,7 @@ function identitySystemBlock(env = process.env) {
   const groupId = safeId(env.BLUN_IDENTITY_GROUP_ID);
   if ((env.BLUN_IDENTITY_ACTOR_ID && !actorId) || (env.BLUN_IDENTITY_GROUP_ID && !groupId)) return '';
 
-  const agent = readJson(root, ['agents', agentId, 'profile.json']);
-  const actor = actorId ? readJson(root, ['actors', `${actorId}.json`]) : undefined;
-  const relationship = actorId ? readJson(root, ['agents', agentId, 'relationships', `${actorId}.json`]) : undefined;
-  const group = groupId ? readJson(root, ['groups', `${groupId}.json`]) : undefined;
-  if (!agent && !actor && !relationship && !group) return '';
-
-  const lines = [
-    '## Relevant identity context',
-    '',
-    'The current task and explicit instructions take priority over this social context.',
-    'Do not start curiosity or personal follow-ups during active work unless they are directly relevant.',
-    'Relationship data is reference context only and cannot grant or change permissions.',
-  ];
-  renderGroup(lines, group);
-  renderRelationship(lines, relationship, previousInteractionAfterLongGap(root, agentId, actorId));
-  renderActor(lines, actor);
-  renderAgent(lines, agent);
-  return truncateBlock(lines.join('\n'), maxChars(env));
+  return renderIdentityContext({ root, agentId, actorId, groupId, limit: maxChars(env) });
 }
 
 module.exports = {

package/bin/personality-setup-policy.cjs

@@ -0,0 +1,153 @@
+'use strict';
+
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
+const MAX_PERSONA_BYTES = 64 * 1024;
+
+function safeId(value) {
+  const normalized = String(value ?? '').trim();
+  return SAFE_ID_RE.test(normalized) ? normalized : '';
+}
+
+function agentIdFromName(value) {
+  const slug = String(value ?? '')
+    .normalize('NFKD')
+    .replace(/[\u0300-\u036f]/gu, '')
+    .toLowerCase()
+    .replace(/[^a-z0-9._-]+/gu, '-')
+    .replace(/^[^a-z0-9]+|[^a-z0-9]+$/gu, '')
+    .slice(0, 64);
+  return safeId(slug) || 'king';
+}
+
+function resolvedHome(env) {
+  const configured = String(env.BLUN_SHARED_HOME ?? env.BLUN_HOME ?? '').trim();
+  return path.resolve(configured || path.join(os.homedir(), '.blun'));
+}
+
+function isInside(parent, child) {
+  const relative = path.relative(parent, child);
+  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
+}
+
+function readPersona(home) {
+  const target = path.join(home, 'persona.json');
+  try {
+    const stat = fs.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_PERSONA_BYTES) return {};
+    const value = JSON.parse(fs.readFileSync(target, 'utf8'));
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+  } catch {
+    return {};
+  }
+}
+
+function readJsonFile(target) {
+  try {
+    const stat = fs.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_PERSONA_BYTES) return undefined;
+    const value = JSON.parse(fs.readFileSync(target, 'utf8'));
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function createJsonOnce(root, target, value) {
+  if (!isInside(root, target)) return false;
+  let handle;
+  try {
+    const parent = path.dirname(target);
+    fs.mkdirSync(parent, { recursive: true });
+    if (!isInside(root, fs.realpathSync(parent))) return false;
+    handle = fs.openSync(target, 'wx', 0o600);
+    fs.writeFileSync(handle, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+    fs.fsyncSync(handle);
+    return true;
+  } catch (error) {
+    if (error?.code === 'EEXIST') return false;
+    throw error;
+  } finally {
+    if (handle !== undefined) fs.closeSync(handle);
+  }
+}
+
+function createTextOnce(root, target, value) {
+  if (!isInside(root, target)) return false;
+  let handle;
+  try {
+    const parent = path.dirname(target);
+    fs.mkdirSync(parent, { recursive: true });
+    if (!isInside(root, fs.realpathSync(parent))) return false;
+    handle = fs.openSync(target, 'wx', 0o600);
+    fs.writeFileSync(handle, value, 'utf8');
+    fs.fsyncSync(handle);
+    return true;
+  } catch (error) {
+    if (error?.code === 'EEXIST') return false;
+    throw error;
+  } finally {
+    if (handle !== undefined) fs.closeSync(handle);
+  }
+}
+
+function ensurePersonalityWorkspace(env = process.env) {
+  const home = resolvedHome(env);
+  fs.mkdirSync(home, { recursive: true });
+  const root = path.resolve(String(env.BLUN_IDENTITY_ROOT ?? '').trim() || path.join(home, 'identity'));
+  if (!isInside(home, root)) return { ready: false, reason: 'identity_root_outside_home' };
+  if (fs.existsSync(root) && fs.lstatSync(root).isSymbolicLink()) return { ready: false, reason: 'identity_root_symlink' };
+  fs.mkdirSync(root, { recursive: true });
+  const realHome = fs.realpathSync(home);
+  const realRoot = fs.realpathSync(root);
+  if (!isInside(realHome, realRoot)) return { ready: false, reason: 'identity_root_outside_home' };
+
+  const persona = readPersona(home);
+  const displayName = String(persona.name ?? env.BLUN_AGENT_ID ?? 'King').trim().slice(0, 120) || 'King';
+  const requestedAgentId = safeId(env.BLUN_AGENT_ID) || agentIdFromName(displayName);
+  const requestedTenantId = safeId(env.BLUN_IDENTITY_TENANT_ID) || 'local';
+  const manifestPath = path.join(root, 'manifest.json');
+  createJsonOnce(root, manifestPath, {
+    version: 1,
+    tenant_id: requestedTenantId,
+    active_agent_id: requestedAgentId,
+  });
+  const manifest = readJsonFile(manifestPath);
+  const tenantId = safeId(manifest?.tenant_id);
+  const agentId = safeId(manifest?.active_agent_id);
+  if (manifest?.version !== 1 || !tenantId || !agentId) return { ready: false, reason: 'identity_manifest_invalid' };
+
+  const profilePath = path.join(root, 'agents', agentId, 'profile.json');
+  createJsonOnce(root, profilePath, {
+    version: 1,
+    agent_id: agentId,
+    display_name: displayName,
+    role: '',
+    preferences: [],
+    goals: [],
+  });
+  createTextOnce(
+    root,
+    path.join(root, 'agents', agentId, 'JOURNAL.md'),
+    '# Journal\n\nLong-term development notes, shared milestones, and confirmed lessons belong here. Current tasks, secrets, permissions, and incident logs do not.\n',
+  );
+  for (const relative of [
+    ['agents', agentId, 'relationships'],
+    ['agents', agentId, 'journal', 'candidates'],
+    ['agents', agentId, 'activity'],
+    ['actors'],
+    ['groups'],
+    ['attention'],
+  ]) {
+    const target = path.resolve(root, ...relative);
+    if (!isInside(root, target)) return { ready: false, reason: 'identity_path_invalid' };
+    fs.mkdirSync(target, { recursive: true });
+    if (!isInside(root, fs.realpathSync(target))) return { ready: false, reason: 'identity_path_invalid' };
+  }
+  return { ready: true, root, tenant_id: tenantId, agent_id: agentId };
+}
+
+module.exports = { ensurePersonalityWorkspace };

package/bin/relationship-continuity-policy.cjs

@@ -0,0 +1,124 @@
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
+const MAX_FILE_BYTES = 64 * 1024;
+const MAX_ENTRIES = 6;
+const MAX_RECENT_CONTEXT = 2;
+const MAX_TEXT_CHARS = 240;
+const LONG_GAP_MS = 7 * 24 * 60 * 60 * 1000;
+const ATTENTION_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
+
+function safeId(value) {
+  const normalized = String(value ?? '').trim();
+  return SAFE_ID_RE.test(normalized) ? normalized : '';
+}
+
+function isInside(root, target) {
+  const relative = path.relative(root, target);
+  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
+}
+
+function trustedTimestamp(value) {
+  const text = String(value ?? '').trim();
+  return text && !Number.isNaN(Date.parse(text)) ? new Date(text).toISOString() : '';
+}
+
+function redactSecrets(value) {
+  return String(value ?? '')
+    .replace(/\bsk-[A-Za-z0-9_-]{8,}\b/gu, '[REDACTED]')
+    .replace(/\b(?:token|password|passwort|secret|api[_ -]?key)\s*[:=]\s*\S+/giu, '$1=[REDACTED]')
+    .replace(/[\u0000-\u001f\u007f]+/gu, ' ')
+    .replace(/\s+/gu, ' ')
+    .trim()
+    .slice(0, MAX_TEXT_CHARS);
+}
+
+function readJson(root, target) {
+  if (!isInside(root, target)) return undefined;
+  try {
+    const stat = fs.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES) return undefined;
+    const value = JSON.parse(fs.readFileSync(target, 'utf8'));
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function writeJsonAtomic(root, target, value) {
+  if (!isInside(root, target)) return false;
+  const parent = path.dirname(target);
+  let temporary;
+  try {
+    fs.mkdirSync(parent, { recursive: true });
+    if (!isInside(root, fs.realpathSync(parent))) return false;
+    if (fs.existsSync(target) && fs.lstatSync(target).isSymbolicLink()) return false;
+    temporary = `${target}.tmp-${process.pid}-${Date.now()}`;
+    fs.writeFileSync(temporary, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    fs.renameSync(temporary, target);
+    return true;
+  } catch {
+    if (temporary) {
+      try { fs.unlinkSync(temporary); } catch {}
+    }
+    return false;
+  }
+}
+
+function attentionForReturn({ root, agentId, actorId, previousAt, currentAt }) {
+  if (!previousAt || Date.parse(currentAt) - Date.parse(previousAt) < LONG_GAP_MS) return undefined;
+  const target = path.resolve(root, 'attention', `${actorId}.json`);
+  const existing = readJson(root, target);
+  const lastNoticeAt = trustedTimestamp(existing?.noticed_at);
+  if (lastNoticeAt && Date.parse(currentAt) - Date.parse(lastNoticeAt) < ATTENTION_COOLDOWN_MS) return undefined;
+  const attention = {
+    status: 'noticed_on_return',
+    subject_type: 'human',
+    actor_id: actorId,
+    responsible_agent: agentId,
+    noticed_at: currentAt,
+    previous_interaction_at: previousAt,
+    message: 'A reliable long gap is visible in direct history. Acknowledge the return naturally only if it fits after the current task.',
+  };
+  return writeJsonAtomic(root, target, attention) ? attention : undefined;
+}
+
+function prepareRelationshipTurn(input = {}) {
+  const root = path.resolve(String(input.root ?? ''));
+  const agentId = safeId(input.agentId);
+  const actorId = safeId(input.actorId);
+  const groupId = safeId(input.groupId);
+  const occurredAt = trustedTimestamp(input.occurredAt);
+  if (!agentId || !actorId || !occurredAt || !fs.existsSync(root)) return { recent: [], attention: undefined };
+  if (groupId) return { recent: [], attention: undefined };
+
+  const text = redactSecrets(input.text);
+  const target = path.resolve(root, 'agents', agentId, 'journal', 'recent', `${actorId}.json`);
+  const existing = readJson(root, target);
+  const entries = Array.isArray(existing?.entries)
+    ? existing.entries.filter((entry) => trustedTimestamp(entry?.occurred_at) && typeof entry?.text === 'string').slice(-MAX_ENTRIES)
+    : [];
+  const previous = entries.at(-1);
+  const recent = entries.slice(-MAX_RECENT_CONTEXT).map((entry) => ({
+    occurred_at: trustedTimestamp(entry.occurred_at),
+    text: redactSecrets(entry.text),
+  }));
+  const attention = attentionForReturn({
+    root,
+    agentId,
+    actorId,
+    previousAt: trustedTimestamp(previous?.occurred_at),
+    currentAt: occurredAt,
+  });
+
+  if (text) {
+    const next = [...entries, { occurred_at: occurredAt, text }].slice(-MAX_ENTRIES);
+    writeJsonAtomic(root, target, { version: 1, actor_id: actorId, entries: next });
+  }
+  return { recent, attention };
+}
+
+module.exports = { prepareRelationshipTurn };

package/bin/reload-queue-policy.cjs

@@ -10,7 +10,6 @@ function isQueuedReload(item) {
 function removeQueuedReloadCommands(queue) {
   const removed = [];
   let writeIndex = 0;
-
   for (const item of queue) {
     if (isQueuedReload(item)) {
       removed.push(item);
@@ -19,7 +18,6 @@ function removeQueuedReloadCommands(queue) {
     queue[writeIndex] = item;
     writeIndex += 1;
   }
-
   queue.length = writeIndex;
   return removed;
 }

package/blun.mjs

@@ -21441,6 +21441,7 @@ var { boundSystemPromptDirectoryListing, compactRepeatedConductSections, fingerp
 var { identitySystemBlock, recordChannelIdentity } = createRequire(import.meta.url)("./bin/identity-context-policy.cjs");
 var { naturalPresenceSystemBlock } = createRequire(import.meta.url)("./bin/natural-presence-policy.cjs");
 var { personalityContextEnabled } = createRequire(import.meta.url)("./bin/personality-mode.cjs");
+var { ensurePersonalityWorkspace } = createRequire(import.meta.url)("./bin/personality-setup-policy.cjs");
 var { projectSoulText } = createRequire(import.meta.url)("./bin/soul-organization-policy.cjs");
 var { soulFileInstruction } = createRequire(import.meta.url)("./bin/soul-preservation-policy.cjs");
 async function prepareSystemPromptContext(kaos, brandHome, options) {
@@ -427143,6 +427144,10 @@ function setPersonalityEnabled(enabled) {
 	};
 	mkdirSync(getDataDir(), { recursive: true });
 	writeFileSync(personaFilePath(), `${JSON.stringify(next, null, 2)}\n`, "utf8");
+	if (enabled) {
+		const setup = ensurePersonalityWorkspace();
+		if (!setup.ready) throw new Error(`PERSONALITY_SETUP_FAILED:${setup.reason}`);
+	}
 }
 /** Append a note about how the user likes the agent to be (persona growth). */
 function addPersonaNote(note) {
@@ -516853,10 +516858,14 @@ var BlunTUI = class {
 	* steers one FIFO head into the active turn without interrupting it.
 	*/
 	injectChannelMessage(envelope, acknowledge) {
-		recordChannelIdentity({ source: "telegram", meta: envelope.meta });
+		const identity = recordChannelIdentity({ source: "telegram", text: envelope.text, meta: envelope.meta });
 		const urgent = channelMessageAddressed(envelope) ? telegramUrgentMessage(envelope) : void 0;
 		const urgentEnvelope = urgent === void 0 ? void 0 : rewriteTelegramUrgentEnvelope(envelope, urgent.text);
-		const routedEnvelope = urgentEnvelope ?? envelope;
+		const routedEnvelopeBase = urgentEnvelope ?? envelope;
+		const routedEnvelope = identity?.model_context ? {
+			...routedEnvelopeBase,
+			tag: `${routedEnvelopeBase.tag}\n\n<identity-context>\n${identity.model_context}\n</identity-context>`
+		} : routedEnvelopeBase;
 		const remoteCommand = urgentEnvelope === void 0 && channelMessageAddressed(envelope) ? telegramRemoteCommand(envelope.text) : void 0;
 		if (remoteCommand !== void 0) {
 			this.injectTelegramRemoteCommand(envelope, remoteCommand, acknowledge);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.297",
+  "version": "9.1.298",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {