blun-king-cli 9.1.326 → 9.1.327

package/bin/live-response-repetition-guard.cjs

@@ -0,0 +1,87 @@
+'use strict';
+
+const DEFAULT_MIN_WORDS = 320;
+const DEFAULT_WINDOW_WORDS = 20;
+const DEFAULT_REQUIRED_OCCURRENCES = 4;
+const DEFAULT_MAX_CHARS = 24_000;
+const DEFAULT_CHECK_EVERY_WORDS = 24;
+
+function normalizeWords(text) {
+  return String(text)
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .match(/[\p{L}\p{N}_]+/gu) ?? [];
+}
+
+function repeatedWindow(words, options) {
+  const {
+    windowWords,
+    requiredOccurrences,
+  } = options;
+  const seen = new Map();
+
+  for (let index = 0; index + windowWords <= words.length; index += 1) {
+    const window = words.slice(index, index + windowWords).join('\u0000');
+    const previous = seen.get(window);
+    if (previous === undefined) {
+      seen.set(window, { count: 1, lastIndex: index });
+      continue;
+    }
+    if (index - previous.lastIndex < windowWords) continue;
+    const count = previous.count + 1;
+    if (count >= requiredOccurrences) {
+      return {
+        count,
+        firstWords: words.slice(index, index + windowWords).join(' '),
+      };
+    }
+    seen.set(window, { count, lastIndex: index });
+  }
+  return null;
+}
+
+function createLiveResponseRepetitionGuard(options = {}) {
+  const config = {
+    checkEveryWords: options.checkEveryWords ?? DEFAULT_CHECK_EVERY_WORDS,
+    maxChars: options.maxChars ?? DEFAULT_MAX_CHARS,
+    minWords: options.minWords ?? DEFAULT_MIN_WORDS,
+    requiredOccurrences: options.requiredOccurrences ?? DEFAULT_REQUIRED_OCCURRENCES,
+    windowWords: options.windowWords ?? DEFAULT_WINDOW_WORDS,
+  };
+  let text = '';
+  let lastCheckedWords = 0;
+  let detection = null;
+
+  return {
+    push(delta) {
+      if (detection !== null || typeof delta !== 'string' || delta.length === 0) return detection;
+      text = `${text}${delta}`.slice(-config.maxChars);
+      const words = normalizeWords(text);
+      if (words.length < config.minWords) return null;
+      if (words.length - lastCheckedWords < config.checkEveryWords) return null;
+      lastCheckedWords = words.length;
+      const repeated = repeatedWindow(words, config);
+      if (repeated === null) return null;
+      detection = {
+        ...repeated,
+        charCount: text.length,
+        wordCount: words.length,
+      };
+      return detection;
+    },
+    result() {
+      return detection;
+    },
+  };
+}
+
+module.exports = {
+  DEFAULT_CHECK_EVERY_WORDS,
+  DEFAULT_MAX_CHARS,
+  DEFAULT_MIN_WORDS,
+  DEFAULT_REQUIRED_OCCURRENCES,
+  DEFAULT_WINDOW_WORDS,
+  createLiveResponseRepetitionGuard,
+  normalizeWords,
+  repeatedWindow,
+};

package/bin/natural-presence-policy.cjs

@@ -10,13 +10,13 @@ const PERSONALITY_PRESENCE_BLOCK = `## Natural presence
 
 Use loaded soul; invent no history or feelings. Work, instructions, evidence come first. Silence is valid.
 
-In relaxed personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children may fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
+In personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
 
 When asked about yourself, use loaded soul and real history; share a view, never invented human biography or offline life. A soul-shaped preference is never fact, policy, permission, or evidence. Mention a long gap only when reliable loaded time proves it; never guess. Keep uncertain memory explicit. Follow a loaded open thread once at a natural non-work moment, never during active work or by outbound message. Apply a confirmed repair lesson through changed behavior without retelling or reassurance; never change instructions, permissions, or evidence.`;
 
 const CONVERSATION_BOUNDARY = `## Conversation
 
-DM: answer the person. Route technical work updates to the responsible teammate; do not copy the details back into the person's DM. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, hidden rules, other agents' assignments, or idle reports. Report work only on request, needed decision, or relevant blocker; keep pauses internal. Missing task-critical fact? Never guess; ask the responsible person or agent one concise question.`;
+DM: answer the person. Chat or status? Casual: answer once; no work appendix. Route technical work updates to the responsible teammate; do not copy the details back into the person's DM. Report work only on request, needed decision, or relevant blocker. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, or other agents' assignments; keep pauses internal. Missing task-critical fact? Ask the responsible person or agent one concise question.`;
 
 function naturalPresenceSystemBlock(env = process.env) {
   const presence = personalityContextEnabled(env) ? PERSONALITY_PRESENCE_BLOCK : NATURAL_PRESENCE_BLOCK;

package/bin/telegram-private-conversation-policy.cjs

@@ -0,0 +1,26 @@
+'use strict';
+
+const PRIVATE_CHAT_ID = /^[1-9]\d*$/u;
+
+function normalize(text) {
+  return String(text ?? '')
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .replace(/[^\p{L}\p{N}\s]/gu, ' ')
+    .replace(/\s+/gu, ' ')
+    .trim();
+}
+
+function isPrivateInternalStatusReply(chatId, text) {
+  if (!PRIVATE_CHAT_ID.test(String(chatId ?? '').trim())) return false;
+  const value = normalize(text);
+  if (value.length === 0) return false;
+
+  const exposesRuntimeControl = /\b(?:cron|loop|checkpoint|sha|tool|hook|queue|lane|inbound|outbound|arbeitsstand|arbeitsauftrag|bau freigabe|freigabe dieser lane)\b/u.test(value);
+  const announcesNoUserValue = /\b(?:keine neue aktion|keine neue information|kein neuer auftrag|kein neuer zweck|kein neuer inbound bedarf|nichts zu melden|nichts weiteres|bleibt pausiert|warte auf (?:dein|sein|ihr) (?:zeichen|go|freigabe)|ich sende nichts|wiederholen wäre spam|keine weitere nachricht)\b/u.test(value);
+  return exposesRuntimeControl && announcesNoUserValue;
+}
+
+module.exports = {
+  isPrivateInternalStatusReply,
+};

package/blun.mjs

@@ -244324,9 +244324,12 @@ async function executeLoopStep(deps) {
 	};
 	let response;
 	try {
-		response = await chatWithRetry({
-			...retryInput,
-			params: chatParams
+		response = await chatWithLiveResponseRepetitionRecovery({
+			retryInput,
+			params: chatParams,
+			stepEvents,
+			signal,
+			log
 		});
 	} catch (error) {
 		await stepEvents.drain();
@@ -244345,9 +244348,12 @@ async function executeLoopStep(deps) {
 		if (prepareRequestBoundary !== void 0) strictParams = await prepareRequestBoundary(strictParams, stepBuildMessagesStrict);
 		signal.throwIfAborted();
 		try {
-			response = await chatWithRetry({
-				...retryInput,
-				params: strictParams
+			response = await chatWithLiveResponseRepetitionRecovery({
+				retryInput,
+				params: strictParams,
+				stepEvents,
+				signal,
+				log
 			});
 		} catch (strictError) {
 			log?.error("strict resend still rejected by provider; request remains wire-invalid", {
@@ -244448,12 +244454,52 @@ function stepEndProviderDiagnostics(response, stopReason) {
 		...response.rawFinishReason !== void 0 ? { rawFinishReason: response.rawFinishReason } : {}
 	};
 }
+var { createLiveResponseRepetitionGuard } = createRequire(import.meta.url)("./bin/live-response-repetition-guard.cjs");
+async function chatWithLiveResponseRepetitionRecovery(deps) {
+	const { retryInput, params, stepEvents, signal, log } = deps;
+	for (let attempt = 1; attempt <= 2; attempt++) {
+		try {
+			return await chatWithRetry({
+				...retryInput,
+				params: {
+					...params,
+					signal: stepEvents.beginLiveResponseAttempt(signal)
+				}
+			});
+		} catch (error) {
+			await stepEvents.drain();
+			const repetition = stepEvents.liveRepetitionResult;
+			if (repetition === null || signal.aborted || attempt >= 2) throw error;
+			log?.warn("live response repetition detected; retrying step once", {
+				charCount: repetition.charCount,
+				occurrences: repetition.count,
+				wordCount: repetition.wordCount
+			});
+			await stepEvents.dispatchRetrying({
+				type: "step.retrying",
+				turnId: retryInput.turnId,
+				step: retryInput.currentStep,
+				stepUuid: retryInput.stepUuid,
+				failedAttempt: 1,
+				nextAttempt: 2,
+				maxAttempts: 2,
+				delayMs: 0,
+				errorName: "LiveResponseRepetitionError",
+				errorMessage: "Repeated assistant text detected during streaming"
+			});
+		}
+	}
+	throw new Error("Live response repetition recovery exhausted");
+}
 function createStepEventGate(deps) {
 	const { dispatchEvent, turnId, currentStep, stepUuid, onStepStarted } = deps;
 	let startPromise;
 	let eventQueue = Promise.resolve();
 	let hasOutput = false;
 	const pendingBeforeStart = [];
+	let liveRepetitionGuard;
+	let liveRepetitionController;
+	let liveRepetitionResult = null;
 	const start = () => {
 		startPromise ??= (async () => {
 			await dispatchEvent({
@@ -244481,6 +244527,15 @@ function createStepEventGate(deps) {
 		get hasOutput() {
 			return hasOutput;
 		},
+		get liveRepetitionResult() {
+			return liveRepetitionResult;
+		},
+		beginLiveResponseAttempt: (signal) => {
+			liveRepetitionGuard = createLiveResponseRepetitionGuard();
+			liveRepetitionController = new AbortController();
+			liveRepetitionResult = null;
+			return AbortSignal.any([signal, liveRepetitionController.signal]);
+		},
 		dispatchRetrying: async (event) => {
 			if (startPromise === void 0) {
 				pendingBeforeStart.push(() => {
@@ -244498,6 +244553,12 @@ function createStepEventGate(deps) {
 		drain: async () => eventQueue,
 		callbacks: {
 			onTextDelta: (delta) => {
+				const repetition = liveRepetitionGuard?.push(delta) ?? null;
+				if (repetition !== null) {
+					liveRepetitionResult = repetition;
+					liveRepetitionController?.abort(/* @__PURE__ */ new Error("Repeated assistant text detected during streaming"));
+					return;
+				}
 				enqueue(() => {
 					dispatchEvent({
 						type: "text.delta",
@@ -514643,6 +514704,7 @@ function outboxDeliveredFile(marker, chatId, filePath) {
 }
 var retryTelegramMediaDelivery, retryableTelegramMediaFailure;
 ({ retryTelegramMediaDelivery, retryableTelegramMediaFailure } = createRequire(import.meta.url)("./bin/telegram-media-delivery-policy.cjs"));
+var { isPrivateInternalStatusReply } = createRequire(import.meta.url)("./bin/telegram-private-conversation-policy.cjs");
 const TELEGRAM_TEXT_LIMIT = 4096;
 const TELEGRAM_ATTACHMENT_LIMIT = 50 * 1024 * 1024;
 function mediaTelegramTarget(filePath) {
@@ -514719,6 +514781,18 @@ function isGroupSuppressed(text, contextOnly) {
 * kind "reply-fallback". Returns true on success. Never throws.
 */
 async function sendReplyFallback(chatId, text, contextOnly = false) {
+	if (isPrivateInternalStatusReply(chatId, text)) {
+		try {
+			appendFileSync(outboxPath(), `${JSON.stringify({
+				ts: (/* @__PURE__ */ new Date()).toISOString(),
+				direction: "out",
+				kind: "reply-fallback-suppressed-private-internal",
+				chat_id: String(chatId),
+				text
+			})}\n`);
+		} catch {}
+		return true;
+	}
 	if (isGroupChat(chatId) && isGroupSuppressed(text, contextOnly)) {
 		try {
 			appendFileSync(outboxPath(), `${JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.326",
+  "version": "9.1.327",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/mcp-server.mjs

@@ -2,6 +2,7 @@ import { A as _enum, B as object, F as discriminatedUnion, G as union, H as prep
 import process$1 from "node:process";
 import { mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { extname, join } from "node:path";
+import privateConversationPolicy from "../../bin/telegram-private-conversation-policy.cjs";
 //#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
 	return !!s._zod;
@@ -9666,6 +9667,7 @@ var StdioServerTransport = class {
 * chats the inbound gate would deliver from.
 */
 var import_out = require_out();
+const { isPrivateInternalStatusReply } = privateConversationPolicy;
 const TOOL_DEFINITIONS = [
 	{
 		name: "reply",
@@ -9843,6 +9845,15 @@ async function runReply(api, args) {
 	const replyTo = args.reply_to != null ? Number(args.reply_to) : void 0;
 	const files = args.files ?? [];
 	const parseMode = args.format === "markdownv2" ? "MarkdownV2" : void 0;
+	if (files.length === 0 && isPrivateInternalStatusReply(chatId, text)) {
+		appendJsonl(outboxLog(), {
+			direction: "out",
+			kind: "reply-suppressed-private-internal",
+			chat_id: chatId,
+			text
+		});
+		return "suppressed: internal work-control narration does not belong in a private conversation";
+	}
 	if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(text)) {
 		appendJsonl(outboxLog(), {
 			direction: "out",