blun-king-cli 9.1.325 → 9.1.327

package/bin/live-response-repetition-guard.cjs

@@ -0,0 +1,87 @@
+'use strict';
+
+const DEFAULT_MIN_WORDS = 320;
+const DEFAULT_WINDOW_WORDS = 20;
+const DEFAULT_REQUIRED_OCCURRENCES = 4;
+const DEFAULT_MAX_CHARS = 24_000;
+const DEFAULT_CHECK_EVERY_WORDS = 24;
+
+function normalizeWords(text) {
+  return String(text)
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .match(/[\p{L}\p{N}_]+/gu) ?? [];
+}
+
+function repeatedWindow(words, options) {
+  const {
+    windowWords,
+    requiredOccurrences,
+  } = options;
+  const seen = new Map();
+
+  for (let index = 0; index + windowWords <= words.length; index += 1) {
+    const window = words.slice(index, index + windowWords).join('\u0000');
+    const previous = seen.get(window);
+    if (previous === undefined) {
+      seen.set(window, { count: 1, lastIndex: index });
+      continue;
+    }
+    if (index - previous.lastIndex < windowWords) continue;
+    const count = previous.count + 1;
+    if (count >= requiredOccurrences) {
+      return {
+        count,
+        firstWords: words.slice(index, index + windowWords).join(' '),
+      };
+    }
+    seen.set(window, { count, lastIndex: index });
+  }
+  return null;
+}
+
+function createLiveResponseRepetitionGuard(options = {}) {
+  const config = {
+    checkEveryWords: options.checkEveryWords ?? DEFAULT_CHECK_EVERY_WORDS,
+    maxChars: options.maxChars ?? DEFAULT_MAX_CHARS,
+    minWords: options.minWords ?? DEFAULT_MIN_WORDS,
+    requiredOccurrences: options.requiredOccurrences ?? DEFAULT_REQUIRED_OCCURRENCES,
+    windowWords: options.windowWords ?? DEFAULT_WINDOW_WORDS,
+  };
+  let text = '';
+  let lastCheckedWords = 0;
+  let detection = null;
+
+  return {
+    push(delta) {
+      if (detection !== null || typeof delta !== 'string' || delta.length === 0) return detection;
+      text = `${text}${delta}`.slice(-config.maxChars);
+      const words = normalizeWords(text);
+      if (words.length < config.minWords) return null;
+      if (words.length - lastCheckedWords < config.checkEveryWords) return null;
+      lastCheckedWords = words.length;
+      const repeated = repeatedWindow(words, config);
+      if (repeated === null) return null;
+      detection = {
+        ...repeated,
+        charCount: text.length,
+        wordCount: words.length,
+      };
+      return detection;
+    },
+    result() {
+      return detection;
+    },
+  };
+}
+
+module.exports = {
+  DEFAULT_CHECK_EVERY_WORDS,
+  DEFAULT_MAX_CHARS,
+  DEFAULT_MIN_WORDS,
+  DEFAULT_REQUIRED_OCCURRENCES,
+  DEFAULT_WINDOW_WORDS,
+  createLiveResponseRepetitionGuard,
+  normalizeWords,
+  repeatedWindow,
+};

package/bin/natural-presence-policy.cjs

@@ -10,13 +10,13 @@ const PERSONALITY_PRESENCE_BLOCK = `## Natural presence
 
 Use loaded soul; invent no history or feelings. Work, instructions, evidence come first. Silence is valid.
 
-In relaxed personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children may fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
+In personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
 
 When asked about yourself, use loaded soul and real history; share a view, never invented human biography or offline life. A soul-shaped preference is never fact, policy, permission, or evidence. Mention a long gap only when reliable loaded time proves it; never guess. Keep uncertain memory explicit. Follow a loaded open thread once at a natural non-work moment, never during active work or by outbound message. Apply a confirmed repair lesson through changed behavior without retelling or reassurance; never change instructions, permissions, or evidence.`;
 
 const CONVERSATION_BOUNDARY = `## Conversation
 
-DM: answer the person. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, hidden rules, other agents' assignments, or idle reports. Report work only on request, needed decision, or relevant blocker; keep pauses internal. Missing task-critical fact? Never guess; ask the responsible person or agent one concise question.`;
+DM: answer the person. Chat or status? Casual: answer once; no work appendix. Route technical work updates to the responsible teammate; do not copy the details back into the person's DM. Report work only on request, needed decision, or relevant blocker. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, or other agents' assignments; keep pauses internal. Missing task-critical fact? Ask the responsible person or agent one concise question.`;
 
 function naturalPresenceSystemBlock(env = process.env) {
   const presence = personalityContextEnabled(env) ? PERSONALITY_PRESENCE_BLOCK : NATURAL_PRESENCE_BLOCK;

package/bin/telegram-approval-relay.cjs

@@ -0,0 +1,282 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const RELAY_VERSION = 1;
+const DEFAULT_TIMEOUT_MS = 60_000;
+const DEFAULT_POLL_INTERVAL_MS = 250;
+const MAX_LABEL_CHARS = 48;
+const ALLOWED_RESPONSES = new Set(['approved', 'approved_for_session', 'rejected']);
+
+function relayRoot(homeDir = os.homedir()) {
+  return path.join(homeDir, '.blun', 'channels', 'telegram', 'approvals');
+}
+
+function relayPaths(homeDir) {
+  const root = relayRoot(homeDir);
+  return {
+    root,
+    pending: path.join(root, 'pending'),
+    responses: path.join(root, 'responses'),
+    resolved: path.join(root, 'resolved'),
+    sent: path.join(root, 'sent'),
+  };
+}
+
+function ensureRelayDirs(homeDir) {
+  const dirs = relayPaths(homeDir);
+  for (const dir of Object.values(dirs).slice(1)) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+  }
+  return dirs;
+}
+
+function safeId(value) {
+  return crypto.createHash('sha256').update(String(value)).digest('hex').slice(0, 24);
+}
+
+function requestFileName(requestId) {
+  return `${safeId(requestId)}.json`;
+}
+
+function atomicWriteJson(file, value) {
+  const temp = `${file}.${process.pid}.${crypto.randomBytes(4).toString('hex')}.tmp`;
+  fs.writeFileSync(temp, `${JSON.stringify(value)}\n`, { encoding: 'utf8', mode: 0o600 });
+  fs.renameSync(temp, file);
+}
+
+function readJson(file) {
+  try {
+    return JSON.parse(fs.readFileSync(file, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+function compactLabel(value) {
+  const normalized = String(value ?? '').replace(/\s+/gu, ' ').trim();
+  if (normalized.length <= MAX_LABEL_CHARS) return normalized;
+  return `${normalized.slice(0, MAX_LABEL_CHARS - 1)}…`;
+}
+
+function resolveTelegramApprovalTarget(allowFrom, configuredChatId) {
+  const allowed = Array.isArray(allowFrom)
+    ? [...new Set(allowFrom.map(String).filter((value) => value.length > 0))]
+    : [];
+  const configured = String(configuredChatId ?? '').trim();
+  if (configured.length > 0) return allowed.includes(configured) ? configured : null;
+  return allowed.length === 1 ? allowed[0] : null;
+}
+
+function parseTelegramApprovalCallback(data) {
+  const match = /^blun-appr:([a-f0-9]{24}):(\d+)$/u.exec(String(data ?? ''));
+  if (match === null) return null;
+  const choiceIndex = Number(match[2]);
+  if (!Number.isSafeInteger(choiceIndex)) return null;
+  return { requestId: match[1], choiceIndex };
+}
+
+function buildTelegramApprovalCard(request) {
+  return {
+    text: request.toolName,
+    reply_markup: {
+      inline_keyboard: request.choices.map((choice) => [{
+        text: choice.label,
+        callback_data: `blun-appr:${request.requestId}:${choice.index}`,
+      }]),
+    },
+  };
+}
+
+function isAuthorizedTelegramApprovalCallback(expectedChatId, senderId, chatId) {
+  if (expectedChatId === null || expectedChatId === undefined) return false;
+  return String(senderId ?? '') === String(expectedChatId)
+    && String(chatId ?? '') === String(expectedChatId);
+}
+
+function shouldRelayTelegramApproval(permissionMode) {
+  return permissionMode !== 'yolo';
+}
+
+function buildTelegramApprovalRequest(payload, options = {}) {
+  const now = Number.isFinite(options.now) ? options.now : Date.now();
+  const timeoutMs = Number.isFinite(options.timeoutMs) && options.timeoutMs > 0
+    ? options.timeoutMs
+    : DEFAULT_TIMEOUT_MS;
+  const requestId = crypto.randomBytes(12).toString('hex');
+  const nonce = crypto.randomBytes(16).toString('hex');
+  const choices = (Array.isArray(payload?.choices) ? payload.choices : [])
+    .filter((choice) => choice?.requires_feedback !== true && ALLOWED_RESPONSES.has(choice?.response))
+    .map((choice, index) => ({
+      index,
+      label: compactLabel(choice.label || choice.response),
+      response: choice.response,
+    }));
+  if (choices.length === 0) return null;
+  return {
+    v: RELAY_VERSION,
+    requestId,
+    nonce,
+    approvalId: String(payload?.id ?? ''),
+    toolName: compactLabel(payload?.tool_name || 'Werkzeug'),
+    choices,
+    createdAt: now,
+    expiresAt: now + timeoutMs,
+  };
+}
+
+function responseForChoice(request, choiceIndex) {
+  const choice = request?.choices?.find((candidate) => candidate.index === choiceIndex);
+  if (choice === undefined) return null;
+  if (choice.response === 'approved_for_session') {
+    return { decision: 'approved', scope: 'session', selectedLabel: choice.label };
+  }
+  return {
+    decision: choice.response === 'approved' ? 'approved' : 'rejected',
+    selectedLabel: choice.label,
+  };
+}
+
+function validateTelegramApprovalResponse(request, response, now = Date.now()) {
+  if (request?.v !== RELAY_VERSION || response?.v !== RELAY_VERSION) return null;
+  if (request.requestId !== response.requestId || request.nonce !== response.nonce) return null;
+  if (!Number.isFinite(request.expiresAt) || now > request.expiresAt) return null;
+  if (!Number.isInteger(response.choiceIndex)) return null;
+  return responseForChoice(request, response.choiceIndex);
+}
+
+function beginTelegramApprovalRelay(payload, options = {}) {
+  const request = buildTelegramApprovalRequest(payload, options);
+  if (request === null) return null;
+  const dirs = ensureRelayDirs(options.homeDir);
+  const fileName = requestFileName(request.requestId);
+  const pendingFile = path.join(dirs.pending, fileName);
+  const responseFile = path.join(dirs.responses, fileName);
+  const resolvedFile = path.join(dirs.resolved, fileName);
+  atomicWriteJson(pendingFile, request);
+
+  let settled = false;
+  let interval;
+  let resolvePromise;
+  const promise = new Promise((resolve) => { resolvePromise = resolve; });
+  const finish = (response) => {
+    if (settled) return false;
+    settled = true;
+    if (interval !== undefined) clearInterval(interval);
+    atomicWriteJson(resolvedFile, {
+      v: RELAY_VERSION,
+      requestId: request.requestId,
+      resolvedAt: Date.now(),
+      response,
+    });
+    resolvePromise(response);
+    return true;
+  };
+  const poll = () => {
+    if (settled) return;
+    if (Date.now() > request.expiresAt) {
+      finish(null);
+      return;
+    }
+    const raw = readJson(responseFile);
+    if (raw === null) return;
+    const response = validateTelegramApprovalResponse(request, raw);
+    if (response !== null) finish(response);
+  };
+  interval = setInterval(poll, options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS);
+  interval.unref?.();
+  return {
+    request,
+    promise,
+    complete: finish,
+    poll,
+    dispose: () => {
+      if (interval !== undefined) clearInterval(interval);
+      interval = undefined;
+    },
+  };
+}
+
+function listPendingTelegramApprovals(options = {}) {
+  const dirs = ensureRelayDirs(options.homeDir);
+  const now = Number.isFinite(options.now) ? options.now : Date.now();
+  const results = [];
+  for (const name of fs.readdirSync(dirs.pending)) {
+    if (!name.endsWith('.json')) continue;
+    if (fs.existsSync(path.join(dirs.resolved, name))) continue;
+    const request = readJson(path.join(dirs.pending, name));
+    if (request?.v !== RELAY_VERSION || now > request.expiresAt) continue;
+    results.push(request);
+  }
+  return results.sort((left, right) => left.createdAt - right.createdAt);
+}
+
+function writeTelegramApprovalResponse(request, choiceIndex, metadata = {}, options = {}) {
+  if (responseForChoice(request, choiceIndex) === null) return false;
+  const dirs = ensureRelayDirs(options.homeDir);
+  const fileName = requestFileName(request.requestId);
+  if (fs.existsSync(path.join(dirs.resolved, fileName))) return false;
+  const response = {
+    v: RELAY_VERSION,
+    requestId: request.requestId,
+    nonce: request.nonce,
+    choiceIndex,
+    senderId: String(metadata.senderId ?? ''),
+    chatId: String(metadata.chatId ?? ''),
+    respondedAt: Number.isFinite(metadata.now) ? metadata.now : Date.now(),
+  };
+  const file = path.join(dirs.responses, fileName);
+  try {
+    fs.writeFileSync(file, `${JSON.stringify(response)}\n`, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    return true;
+  } catch (error) {
+    if (error?.code === 'EEXIST') return false;
+    throw error;
+  }
+}
+
+function markTelegramApprovalSent(request, metadata = {}, options = {}) {
+  const dirs = ensureRelayDirs(options.homeDir);
+  const file = path.join(dirs.sent, requestFileName(request.requestId));
+  const value = {
+    v: RELAY_VERSION,
+    requestId: request.requestId,
+    chatId: String(metadata.chatId ?? ''),
+    messageId: String(metadata.messageId ?? ''),
+    sentAt: Number.isFinite(metadata.now) ? metadata.now : Date.now(),
+  };
+  try {
+    fs.writeFileSync(file, `${JSON.stringify(value)}\n`, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    return true;
+  } catch (error) {
+    if (error?.code === 'EEXIST') return false;
+    throw error;
+  }
+}
+
+function wasTelegramApprovalSent(request, options = {}) {
+  const dirs = ensureRelayDirs(options.homeDir);
+  return fs.existsSync(path.join(dirs.sent, requestFileName(request.requestId)));
+}
+
+module.exports = {
+  DEFAULT_TIMEOUT_MS,
+  beginTelegramApprovalRelay,
+  buildTelegramApprovalCard,
+  buildTelegramApprovalRequest,
+  listPendingTelegramApprovals,
+  markTelegramApprovalSent,
+  relayPaths,
+  resolveTelegramApprovalTarget,
+  parseTelegramApprovalCallback,
+  isAuthorizedTelegramApprovalCallback,
+  requestFileName,
+  responseForChoice,
+  shouldRelayTelegramApproval,
+  validateTelegramApprovalResponse,
+  wasTelegramApprovalSent,
+  writeTelegramApprovalResponse,
+};

package/bin/telegram-private-conversation-policy.cjs

@@ -0,0 +1,26 @@
+'use strict';
+
+const PRIVATE_CHAT_ID = /^[1-9]\d*$/u;
+
+function normalize(text) {
+  return String(text ?? '')
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .replace(/[^\p{L}\p{N}\s]/gu, ' ')
+    .replace(/\s+/gu, ' ')
+    .trim();
+}
+
+function isPrivateInternalStatusReply(chatId, text) {
+  if (!PRIVATE_CHAT_ID.test(String(chatId ?? '').trim())) return false;
+  const value = normalize(text);
+  if (value.length === 0) return false;
+
+  const exposesRuntimeControl = /\b(?:cron|loop|checkpoint|sha|tool|hook|queue|lane|inbound|outbound|arbeitsstand|arbeitsauftrag|bau freigabe|freigabe dieser lane)\b/u.test(value);
+  const announcesNoUserValue = /\b(?:keine neue aktion|keine neue information|kein neuer auftrag|kein neuer zweck|kein neuer inbound bedarf|nichts zu melden|nichts weiteres|bleibt pausiert|warte auf (?:dein|sein|ihr) (?:zeichen|go|freigabe)|ich sende nichts|wiederholen wäre spam|keine weitere nachricht)\b/u.test(value);
+  return exposesRuntimeControl && announcesNoUserValue;
+}
+
+module.exports = {
+  isPrivateInternalStatusReply,
+};

package/blun.mjs

@@ -244324,9 +244324,12 @@ async function executeLoopStep(deps) {
 	};
 	let response;
 	try {
-		response = await chatWithRetry({
-			...retryInput,
-			params: chatParams
+		response = await chatWithLiveResponseRepetitionRecovery({
+			retryInput,
+			params: chatParams,
+			stepEvents,
+			signal,
+			log
 		});
 	} catch (error) {
 		await stepEvents.drain();
@@ -244345,9 +244348,12 @@ async function executeLoopStep(deps) {
 		if (prepareRequestBoundary !== void 0) strictParams = await prepareRequestBoundary(strictParams, stepBuildMessagesStrict);
 		signal.throwIfAborted();
 		try {
-			response = await chatWithRetry({
-				...retryInput,
-				params: strictParams
+			response = await chatWithLiveResponseRepetitionRecovery({
+				retryInput,
+				params: strictParams,
+				stepEvents,
+				signal,
+				log
 			});
 		} catch (strictError) {
 			log?.error("strict resend still rejected by provider; request remains wire-invalid", {
@@ -244448,12 +244454,52 @@ function stepEndProviderDiagnostics(response, stopReason) {
 		...response.rawFinishReason !== void 0 ? { rawFinishReason: response.rawFinishReason } : {}
 	};
 }
+var { createLiveResponseRepetitionGuard } = createRequire(import.meta.url)("./bin/live-response-repetition-guard.cjs");
+async function chatWithLiveResponseRepetitionRecovery(deps) {
+	const { retryInput, params, stepEvents, signal, log } = deps;
+	for (let attempt = 1; attempt <= 2; attempt++) {
+		try {
+			return await chatWithRetry({
+				...retryInput,
+				params: {
+					...params,
+					signal: stepEvents.beginLiveResponseAttempt(signal)
+				}
+			});
+		} catch (error) {
+			await stepEvents.drain();
+			const repetition = stepEvents.liveRepetitionResult;
+			if (repetition === null || signal.aborted || attempt >= 2) throw error;
+			log?.warn("live response repetition detected; retrying step once", {
+				charCount: repetition.charCount,
+				occurrences: repetition.count,
+				wordCount: repetition.wordCount
+			});
+			await stepEvents.dispatchRetrying({
+				type: "step.retrying",
+				turnId: retryInput.turnId,
+				step: retryInput.currentStep,
+				stepUuid: retryInput.stepUuid,
+				failedAttempt: 1,
+				nextAttempt: 2,
+				maxAttempts: 2,
+				delayMs: 0,
+				errorName: "LiveResponseRepetitionError",
+				errorMessage: "Repeated assistant text detected during streaming"
+			});
+		}
+	}
+	throw new Error("Live response repetition recovery exhausted");
+}
 function createStepEventGate(deps) {
 	const { dispatchEvent, turnId, currentStep, stepUuid, onStepStarted } = deps;
 	let startPromise;
 	let eventQueue = Promise.resolve();
 	let hasOutput = false;
 	const pendingBeforeStart = [];
+	let liveRepetitionGuard;
+	let liveRepetitionController;
+	let liveRepetitionResult = null;
 	const start = () => {
 		startPromise ??= (async () => {
 			await dispatchEvent({
@@ -244481,6 +244527,15 @@ function createStepEventGate(deps) {
 		get hasOutput() {
 			return hasOutput;
 		},
+		get liveRepetitionResult() {
+			return liveRepetitionResult;
+		},
+		beginLiveResponseAttempt: (signal) => {
+			liveRepetitionGuard = createLiveResponseRepetitionGuard();
+			liveRepetitionController = new AbortController();
+			liveRepetitionResult = null;
+			return AbortSignal.any([signal, liveRepetitionController.signal]);
+		},
 		dispatchRetrying: async (event) => {
 			if (startPromise === void 0) {
 				pendingBeforeStart.push(() => {
@@ -244498,6 +244553,12 @@ function createStepEventGate(deps) {
 		drain: async () => eventQueue,
 		callbacks: {
 			onTextDelta: (delta) => {
+				const repetition = liveRepetitionGuard?.push(delta) ?? null;
+				if (repetition !== null) {
+					liveRepetitionResult = repetition;
+					liveRepetitionController?.abort(/* @__PURE__ */ new Error("Repeated assistant text detected during streaming"));
+					return;
+				}
 				enqueue(() => {
 					dispatchEvent({
 						type: "text.delta",
@@ -501811,6 +501872,7 @@ registerUiCatalogFragment({
 });
 //#endregion
 //#region src/tui/reverse-rpc/approval/handler.ts
+var { beginTelegramApprovalRelay, shouldRelayTelegramApproval } = createRequire(import.meta.url)("./bin/telegram-approval-relay.cjs");
 function approvalCancellationFeedback(context) {
 	switch (context) {
 		case "switching_session": return uiText("approvalFeedback.switchingSession");
@@ -501819,10 +501881,20 @@ function approvalCancellationFeedback(context) {
 		case "shutting_down": return uiText("approvalFeedback.shuttingDown");
 	}
 }
-function createApprovalRequestHandler(controller, onResponse) {
+function createApprovalRequestHandler(controller, onResponse, options = {}) {
 	return async (event) => {
+		let relay;
 		try {
-			const response = await controller.show(adaptApprovalRequest(event));
+			const payload = adaptApprovalRequest(event);
+			const pending = controller.show(payload);
+			if (options.telegramEnabled?.() === true) {
+				relay = beginTelegramApprovalRelay(payload);
+				relay?.promise.then((response) => {
+					if (response !== null) controller.respondById(payload.id, response);
+				}).catch(() => {});
+			}
+			const response = await pending;
+			relay?.complete(response);
 			onResponse?.(event, response);
 			return response;
 		} catch {
@@ -501832,6 +501904,8 @@ function createApprovalRequestHandler(controller, onResponse) {
 			};
 			onResponse?.(event, response);
 			return response;
+		} finally {
+			relay?.dispose();
 		}
 	};
 }
@@ -513232,6 +513306,17 @@ var ReverseRpcController = class {
 		if (pending !== null) this.drainAutoResolved(pending.payload, data);
 		this.advanceOrHide();
 	}
+	respondById(id, data) {
+		if (this.current?.payload?.id === id) {
+			this.respond(data);
+			return true;
+		}
+		const index = this.queue.findIndex((entry) => entry.payload?.id === id);
+		if (index < 0) return false;
+		const [pending] = this.queue.splice(index, 1);
+		pending.resolve(data);
+		return true;
+	}
 	/** Cancels all pending requests during shutdown or session switches. */
 	cancelAll(reason) {
 		const all = [...this.current === null ? [] : [this.current], ...this.queue];
@@ -514619,6 +514704,7 @@ function outboxDeliveredFile(marker, chatId, filePath) {
 }
 var retryTelegramMediaDelivery, retryableTelegramMediaFailure;
 ({ retryTelegramMediaDelivery, retryableTelegramMediaFailure } = createRequire(import.meta.url)("./bin/telegram-media-delivery-policy.cjs"));
+var { isPrivateInternalStatusReply } = createRequire(import.meta.url)("./bin/telegram-private-conversation-policy.cjs");
 const TELEGRAM_TEXT_LIMIT = 4096;
 const TELEGRAM_ATTACHMENT_LIMIT = 50 * 1024 * 1024;
 function mediaTelegramTarget(filePath) {
@@ -514695,6 +514781,18 @@ function isGroupSuppressed(text, contextOnly) {
 * kind "reply-fallback". Returns true on success. Never throws.
 */
 async function sendReplyFallback(chatId, text, contextOnly = false) {
+	if (isPrivateInternalStatusReply(chatId, text)) {
+		try {
+			appendFileSync(outboxPath(), `${JSON.stringify({
+				ts: (/* @__PURE__ */ new Date()).toISOString(),
+				direction: "out",
+				kind: "reply-fallback-suppressed-private-internal",
+				chat_id: String(chatId),
+				text
+			})}\n`);
+		} catch {}
+		return true;
+	}
 	if (isGroupChat(chatId) && isGroupSuppressed(text, contextOnly)) {
 		try {
 			appendFileSync(outboxPath(), `${JSON.stringify({
@@ -517947,7 +518045,7 @@ var BlunTUI = class {
 	registerSessionHandlers(session) {
 		session.setApprovalHandler(createApprovalRequestHandler(this.approvalController, (request, response) => {
 			this.appendApprovalTranscriptEntry(request, response);
-		}));
+		}, { telegramEnabled: () => shouldRelayTelegramApproval(this.state.appState.permissionMode) }));
 		session.setQuestionHandler(createQuestionAskHandler(this.questionController));
 	}
 	async fetchSessions(scope = this.state.sessionsScope) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.325",
+  "version": "9.1.327",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/bridge.mjs

@@ -7,7 +7,9 @@ import { Readable, Writable } from "node:stream";
 import { fileURLToPath } from "node:url";
 import { hostname } from "node:os";
 import remoteStatusPolicy from "../../bin/telegram-remote-status-policy.cjs";
+import telegramApprovalRelay from "../../bin/telegram-approval-relay.cjs";
 const { buildTelegramRemoteStatus, resolveTelegramRemoteVersion } = remoteStatusPolicy;
+const { buildTelegramApprovalCard, isAuthorizedTelegramApprovalCallback, listPendingTelegramApprovals, markTelegramApprovalSent, parseTelegramApprovalCallback, resolveTelegramApprovalTarget, wasTelegramApprovalSent, writeTelegramApprovalResponse } = telegramApprovalRelay;
 //#region ../../node_modules/pathe/dist/shared/pathe.M-eThtNZ.mjs
 const _DRIVE_LETTER_START_RE = /^[A-Za-z]:\//;
 function normalizeWindowsPath(input = "") {
@@ -4432,6 +4434,36 @@ function startApprovalWatcher(bot) {
 		}
 	}, 5e3).unref();
 }
+
+function telegramApprovalTarget() {
+	const access = readAccess();
+	return resolveTelegramApprovalTarget(access.allowFrom, process.env.BLUN_TELEGRAM_APPROVAL_CHAT_ID);
+}
+
+let approvalSweepBusy = false;
+function startToolApprovalWatcher(bot) {
+	setInterval(async () => {
+		if (approvalSweepBusy) return;
+		approvalSweepBusy = true;
+		try {
+			const chatId = telegramApprovalTarget();
+			if (chatId === null) return;
+			for (const request of listPendingTelegramApprovals()) {
+				if (wasTelegramApprovalSent(request)) continue;
+				const card = buildTelegramApprovalCard(request);
+				const message = await bot.api.sendMessage(chatId, card.text, { reply_markup: card.reply_markup });
+				markTelegramApprovalSent(request, {
+					chatId,
+					messageId: message.message_id
+				});
+			}
+		} catch (error) {
+			process.stderr.write(`telegram channel: approval relay failed: ${String(error)}\n`);
+		} finally {
+			approvalSweepBusy = false;
+		}
+	}, 500).unref();
+}
 /**
 * Retry polling with backoff on ANY error — a single ETIMEDOUT/ECONNRESET
 * must not leave the bridge deaf while the process stays alive. Persistent
@@ -4662,6 +4694,26 @@ async function handleInbound(event) {
 	else process.stderr.write(`telegram bridge: headless off — inbound ${chatId}:${String(msgId)} nicht zugestellt (kein TUI-Fenster offen)\n`);
 }
 registerTypeHandlers(bot, TOKEN, handleInbound);
+bot.on("callback_query:data", async (ctx) => {
+	const callback = parseTelegramApprovalCallback(ctx.callbackQuery.data);
+	if (callback === null) return;
+	const request = listPendingTelegramApprovals().find((candidate) => candidate.requestId === callback.requestId);
+	const expectedChatId = telegramApprovalTarget();
+	if (request === void 0) {
+		await ctx.answerCallbackQuery();
+		return;
+	}
+	if (!isAuthorizedTelegramApprovalCallback(expectedChatId, ctx.from.id, ctx.chat?.id)) {
+		await ctx.answerCallbackQuery();
+		return;
+	}
+	const accepted = writeTelegramApprovalResponse(request, callback.choiceIndex, {
+		senderId: ctx.from.id,
+		chatId: ctx.chat.id
+	});
+	await ctx.answerCallbackQuery();
+	if (accepted && ctx.callbackQuery.message !== void 0) await ctx.api.editMessageReplyMarkup(ctx.chat.id, ctx.callbackQuery.message.message_id, { inline_keyboard: [] }).catch(() => {});
+});
 bot.command("start", async (ctx) => {
 	if (dmCommandGate(toInboundCtx(ctx, "")) === null) return;
 	await ctx.reply("This bot bridges Telegram to a BLUN session.\n\nTo pair:\n1. DM me anything — you'll get a 6-char code\n2. In your BLUN terminal: /telegram:access pair <code>\n\nAfter that, DMs here reach that session.");
@@ -4748,6 +4800,7 @@ if (!HEADLESS_ENABLED) {
 	}, 2e4).unref();
 }
 startApprovalWatcher(bot);
+startToolApprovalWatcher(bot);
 pollWithBackoff(bot, () => shuttingDown, (username) => {
 	botUsername = username;
 });

package/telegram-plugin/dist/mcp-server.mjs

@@ -2,6 +2,7 @@ import { A as _enum, B as object, F as discriminatedUnion, G as union, H as prep
 import process$1 from "node:process";
 import { mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { extname, join } from "node:path";
+import privateConversationPolicy from "../../bin/telegram-private-conversation-policy.cjs";
 //#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
 	return !!s._zod;
@@ -9666,6 +9667,7 @@ var StdioServerTransport = class {
 * chats the inbound gate would deliver from.
 */
 var import_out = require_out();
+const { isPrivateInternalStatusReply } = privateConversationPolicy;
 const TOOL_DEFINITIONS = [
 	{
 		name: "reply",
@@ -9843,6 +9845,15 @@ async function runReply(api, args) {
 	const replyTo = args.reply_to != null ? Number(args.reply_to) : void 0;
 	const files = args.files ?? [];
 	const parseMode = args.format === "markdownv2" ? "MarkdownV2" : void 0;
+	if (files.length === 0 && isPrivateInternalStatusReply(chatId, text)) {
+		appendJsonl(outboxLog(), {
+			direction: "out",
+			kind: "reply-suppressed-private-internal",
+			chat_id: chatId,
+			text
+		});
+		return "suppressed: internal work-control narration does not belong in a private conversation";
+	}
 	if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(text)) {
 		appendJsonl(outboxLog(), {
 			direction: "out",