blun-king-cli 9.1.305 → 9.1.306

package/bin/cognitive-turn-lifecycle.cjs

@@ -6,6 +6,8 @@ const { openCognitiveStateStore } = require('./cognitive-state-store.cjs');
 const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 const RIGHTS_AUTHORITIES = new Set(['runtime_user_prompt_hook', 'runtime_tool_policy']);
 const RIGHTS_DECISIONS = new Set(['passed', 'blocked', 'not_applicable']);
+const TOOL_POLICY_DECISIONS = new Set(['passed', 'blocked', 'error']);
+const TOOL_OUTCOMES = new Set(['success', 'error', 'cancelled']);
 const TURN_REASONS = new Set(['completed', 'cancelled', 'filtered', 'failed']);
 
 function fail(code) {
@@ -28,6 +30,11 @@ function safeTurnId(value) {
   return Number.isSafeInteger(value) && value >= 0 ? value : null;
 }
 
+function cleanLabel(value, max = 128) {
+  const text = String(value ?? '').replace(/[\u0000-\u001f\u007f]+/gu, ' ').replace(/\s+/gu, ' ').trim();
+  return text && text.length <= max ? text : '';
+}
+
 function digestId(prefix, values) {
   const digest = crypto.createHash('sha256').update(values.join('\0')).digest('hex').slice(0, 40);
   return `${prefix}-${digest}`;
@@ -132,9 +139,44 @@ function createCognitiveTurnLifecycle({ home, tenantId, agentId, runtimeId, now
     ]);
   }
 
+  function toolFields(input, allowedKeys) {
+    if (!exactKeys(input, allowedKeys)) fail('COGNITIVE_LIFECYCLE_INVALID');
+    const turnId = safeTurnId(input.turnId);
+    const toolCallId = cleanLabel(input.toolCallId, 256);
+    const toolName = cleanLabel(input.toolName, 128);
+    if (turnId === null || !toolCallId || !toolName) fail('COGNITIVE_LIFECYCLE_INVALID');
+    return { turnId, toolCallId, toolName, callKey: digestId('call', [toolCallId]).slice(0, 21) };
+  }
+
+  function recordToolPolicy(input) {
+    const { turnId, toolCallId, toolName, callKey } = toolFields(input, new Set(['turnId', 'toolCallId', 'toolName', 'decision']));
+    const decision = String(input.decision ?? '');
+    if (!TOOL_POLICY_DECISIONS.has(decision)) fail('COGNITIVE_LIFECYCLE_INVALID');
+    return commitStage(`turn-${turnId}-${callKey}-policy`, [{
+      domain: 'world',
+      key: `turn:${turnId}:${callKey}:tool-policy`,
+      value: `${decision}:runtime_tool_policy:${toolName}`,
+      confidence: 1,
+      scope: 'runtime',
+    }]);
+  }
+
+  function recordToolResult(input) {
+    const { turnId, toolCallId, toolName, callKey } = toolFields(input, new Set(['turnId', 'toolCallId', 'toolName', 'outcome', 'durationMs']));
+    const outcome = String(input.outcome ?? '');
+    const durationMs = Number(input.durationMs);
+    if (!TOOL_OUTCOMES.has(outcome) || !Number.isSafeInteger(durationMs) || durationMs < 0) fail('COGNITIVE_LIFECYCLE_INVALID');
+    return commitStage(`turn-${turnId}-${callKey}-result`, [
+      { domain: 'expected_evidence', key: `turn:${turnId}:${callKey}:tool-result`, value: `${outcome}:${durationMs}ms:${toolName}`, confidence: 1, scope: 'runtime' },
+      { domain: 'next_trigger', key: `turn:${turnId}:${callKey}:tool-next`, value: outcome === 'success' ? 'continue-after-tool' : 'inspect-tool-failure', confidence: 1, scope: 'runtime' },
+    ]);
+  }
+
   return {
     startTurn,
     recordRightsCheck,
+    recordToolPolicy,
+    recordToolResult,
     endTurn,
     read: () => store.read({ tenantId: tenant, agentId: agent }),
     verify: () => store.verify({ tenantId: tenant, agentId: agent }),

package/blun.mjs

@@ -262214,7 +262214,24 @@ var init_turn = __esmMin((() => {
 								if (cached !== null) return { syntheticResult: cached };
 							},
 							authorizeToolExecution: async (ctx) => {
-								return this.agent.permission.beforeToolCall(ctx);
+								try {
+									const resolution = await this.agent.permission.beforeToolCall(ctx);
+									this.recordCognitiveStage("recordToolPolicy", {
+										turnId,
+										toolCallId: ctx.toolCall.id,
+										toolName: ctx.toolCall.name,
+										decision: resolution?.block === true ? "blocked" : "passed"
+									});
+									return resolution;
+								} catch (error) {
+									this.recordCognitiveStage("recordToolPolicy", {
+										turnId,
+										toolCallId: ctx.toolCall.id,
+										toolName: ctx.toolCall.name,
+										decision: "error"
+									});
+									throw error;
+								}
 							},
 							finalizeToolResult: async (ctx) => {
 								const finalResult = await deduper.finalizeResult(ctx.toolCall.id, ctx.toolCall.name, ctx.args, ctx.result);
@@ -262356,6 +262373,13 @@ var init_turn = __esmMin((() => {
 				};
 				const errorType = outcome === "error" ? telemetryToolErrorType(event.result) : void 0;
 				if (errorType !== void 0) properties["error_type"] = errorType;
+				this.recordCognitiveStage("recordToolResult", {
+					turnId,
+					toolCallId: event.toolCallId,
+					toolName: started.name,
+					outcome,
+					durationMs: Date.now() - started.startedAt
+				});
 				this.agent.telemetry.track("tool_call", properties);
 				this.agent.feedRootMissionContract("result", {
 					toolCallId: event.toolCallId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.305",
+  "version": "9.1.306",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {