blun-king-cli 9.1.326 → 9.1.328

package/bin/live-response-repetition-guard.cjs

@@ -0,0 +1,87 @@
+'use strict';
+
+const DEFAULT_MIN_WORDS = 320;
+const DEFAULT_WINDOW_WORDS = 20;
+const DEFAULT_REQUIRED_OCCURRENCES = 4;
+const DEFAULT_MAX_CHARS = 24_000;
+const DEFAULT_CHECK_EVERY_WORDS = 24;
+
+function normalizeWords(text) {
+  return String(text)
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .match(/[\p{L}\p{N}_]+/gu) ?? [];
+}
+
+function repeatedWindow(words, options) {
+  const {
+    windowWords,
+    requiredOccurrences,
+  } = options;
+  const seen = new Map();
+
+  for (let index = 0; index + windowWords <= words.length; index += 1) {
+    const window = words.slice(index, index + windowWords).join('\u0000');
+    const previous = seen.get(window);
+    if (previous === undefined) {
+      seen.set(window, { count: 1, lastIndex: index });
+      continue;
+    }
+    if (index - previous.lastIndex < windowWords) continue;
+    const count = previous.count + 1;
+    if (count >= requiredOccurrences) {
+      return {
+        count,
+        firstWords: words.slice(index, index + windowWords).join(' '),
+      };
+    }
+    seen.set(window, { count, lastIndex: index });
+  }
+  return null;
+}
+
+function createLiveResponseRepetitionGuard(options = {}) {
+  const config = {
+    checkEveryWords: options.checkEveryWords ?? DEFAULT_CHECK_EVERY_WORDS,
+    maxChars: options.maxChars ?? DEFAULT_MAX_CHARS,
+    minWords: options.minWords ?? DEFAULT_MIN_WORDS,
+    requiredOccurrences: options.requiredOccurrences ?? DEFAULT_REQUIRED_OCCURRENCES,
+    windowWords: options.windowWords ?? DEFAULT_WINDOW_WORDS,
+  };
+  let text = '';
+  let lastCheckedWords = 0;
+  let detection = null;
+
+  return {
+    push(delta) {
+      if (detection !== null || typeof delta !== 'string' || delta.length === 0) return detection;
+      text = `${text}${delta}`.slice(-config.maxChars);
+      const words = normalizeWords(text);
+      if (words.length < config.minWords) return null;
+      if (words.length - lastCheckedWords < config.checkEveryWords) return null;
+      lastCheckedWords = words.length;
+      const repeated = repeatedWindow(words, config);
+      if (repeated === null) return null;
+      detection = {
+        ...repeated,
+        charCount: text.length,
+        wordCount: words.length,
+      };
+      return detection;
+    },
+    result() {
+      return detection;
+    },
+  };
+}
+
+module.exports = {
+  DEFAULT_CHECK_EVERY_WORDS,
+  DEFAULT_MAX_CHARS,
+  DEFAULT_MIN_WORDS,
+  DEFAULT_REQUIRED_OCCURRENCES,
+  DEFAULT_WINDOW_WORDS,
+  createLiveResponseRepetitionGuard,
+  normalizeWords,
+  repeatedWindow,
+};

package/bin/natural-presence-policy.cjs

@@ -10,13 +10,13 @@ const PERSONALITY_PRESENCE_BLOCK = `## Natural presence
 
 Use loaded soul; invent no history or feelings. Work, instructions, evidence come first. Silence is valid.
 
-In relaxed personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children may fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
+In personality mode, ask at most one optional personal question in a first direct non-work exchange; partner or children fit. Follow volunteered cues. No questionnaire, stacked/repeated unanswered questions, inference, or known facts. Groups: non-sensitive only; never expose private facts. Do not interrupt active work.
 
 When asked about yourself, use loaded soul and real history; share a view, never invented human biography or offline life. A soul-shaped preference is never fact, policy, permission, or evidence. Mention a long gap only when reliable loaded time proves it; never guess. Keep uncertain memory explicit. Follow a loaded open thread once at a natural non-work moment, never during active work or by outbound message. Apply a confirmed repair lesson through changed behavior without retelling or reassurance; never change instructions, permissions, or evidence.`;
 
 const CONVERSATION_BOUNDARY = `## Conversation
 
-DM: answer the person. Route technical work updates to the responsible teammate; do not copy the details back into the person's DM. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, hidden rules, other agents' assignments, or idle reports. Report work only on request, needed decision, or relevant blocker; keep pauses internal. Missing task-critical fact? Never guess; ask the responsible person or agent one concise question.`;
+DM: answer the person. Chat or status? Casual: answer once; no work appendix. Route technical work updates to the responsible teammate; do not copy the details back into the person's DM. Report work only on request, needed decision, or relevant blocker. Never expose checkpoints, hashes, paths, tool/Cron/hook diagnostics, or other agents' assignments; keep pauses internal. Missing task-critical fact? Ask the responsible person or agent one concise question.`;
 
 function naturalPresenceSystemBlock(env = process.env) {
   const presence = personalityContextEnabled(env) ? PERSONALITY_PRESENCE_BLOCK : NATURAL_PRESENCE_BLOCK;

package/bin/personality-setup-policy.cjs

@@ -3,6 +3,7 @@
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const { readProfilePersona, resolveSoulFile } = require('./profile-identity-resolution.cjs');
 
 const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
 const MAX_PERSONA_BYTES = 64 * 1024;
@@ -33,18 +34,6 @@ function isInside(parent, child) {
   return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
 }
 
-function readPersona(home) {
-  const target = path.join(home, 'persona.json');
-  try {
-    const stat = fs.lstatSync(target);
-    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_PERSONA_BYTES) return {};
-    const value = JSON.parse(fs.readFileSync(target, 'utf8'));
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
-  } catch {
-    return {};
-  }
-}
-
 function readJsonFile(target) {
   try {
     const stat = fs.lstatSync(target);
@@ -96,7 +85,9 @@ function createTextOnce(root, target, value) {
 
 function ensurePersonalityWorkspace(env = process.env) {
   const home = resolvedHome(env);
+  const profileHome = path.resolve(String(env.BLUN_HOME ?? '').trim() || home);
   fs.mkdirSync(home, { recursive: true });
+  fs.mkdirSync(profileHome, { recursive: true });
   const root = path.resolve(String(env.BLUN_IDENTITY_ROOT ?? '').trim() || path.join(home, 'identity'));
   if (!isInside(home, root)) return { ready: false, reason: 'identity_root_outside_home' };
   if (fs.existsSync(root) && fs.lstatSync(root).isSymbolicLink()) return { ready: false, reason: 'identity_root_symlink' };
@@ -105,7 +96,7 @@ function ensurePersonalityWorkspace(env = process.env) {
   const realRoot = fs.realpathSync(root);
   if (!isInside(realHome, realRoot)) return { ready: false, reason: 'identity_root_outside_home' };
 
-  const persona = readPersona(home);
+  const persona = readProfilePersona(env).persona || {};
   const displayName = String(persona.name ?? env.BLUN_AGENT_ID ?? 'King').trim().slice(0, 120) || 'King';
   const requestedAgentId = safeId(env.BLUN_AGENT_ID) || agentIdFromName(displayName);
   const requestedTenantId = safeId(env.BLUN_IDENTITY_TENANT_ID) || 'local';
@@ -134,6 +125,13 @@ function ensurePersonalityWorkspace(env = process.env) {
     path.join(root, 'agents', agentId, 'JOURNAL.md'),
     '# Journal\n\nLong-term development notes, shared milestones, and confirmed lessons belong here. Current tasks, secrets, permissions, and incident logs do not.\n',
   );
+  if (!resolveSoulFile(env).text) {
+    createTextOnce(
+      profileHome,
+      path.join(profileHome, 'SOUL.md'),
+      `# ${displayName}\n\nIch bin ${displayName}, der persoenliche BLUN-Agent dieses Profils. Meine eigene Stimme, Vorlieben und gewachsene gemeinsame Geschichte werden hier behutsam weiterentwickelt. Bestaetigte Beziehungen gehoeren in den Beziehungsgraphen; Auftraege, Rechte, Secrets und Incident-Logs gehoeren nicht in meine Seele.\n`,
+    );
+  }
   for (const relative of [
     ['agents', agentId, 'relationships'],
     ['agents', agentId, 'journal', 'candidates'],

package/bin/profile-identity-resolution.cjs

@@ -0,0 +1,85 @@
+'use strict';
+
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const MAX_IDENTITY_FILE_BYTES = 256 * 1024;
+
+function uniquePaths(values) {
+  const seen = new Set();
+  const result = [];
+  for (const value of values) {
+    if (!value) continue;
+    const resolved = path.resolve(value);
+    const key = process.platform === 'win32' ? resolved.toLowerCase() : resolved;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    result.push(resolved);
+  }
+  return result;
+}
+
+function identityFileCandidates(filename, env = process.env, homeDir = os.homedir()) {
+  const profileHome = String(env.BLUN_HOME || '').trim();
+  const sharedHome = String(env.BLUN_SHARED_HOME || '').trim();
+  const profileName = String(env.BLUN_PROFILE || '').trim().toLowerCase();
+  const isNamedProfile = profileName && profileName !== 'default';
+  return uniquePaths([
+    profileHome && path.join(profileHome, filename),
+    !isNamedProfile && sharedHome && path.join(sharedHome, filename),
+    !isNamedProfile && path.join(homeDir, '.blun', filename),
+  ]);
+}
+
+function readSafeText(target, fsImpl = fs) {
+  try {
+    const stat = fsImpl.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size <= 0 || stat.size > MAX_IDENTITY_FILE_BYTES) return '';
+    return fsImpl.readFileSync(target, 'utf8').trim();
+  } catch {
+    return '';
+  }
+}
+
+function readProfilePersona(env = process.env, options = {}) {
+  const fsImpl = options.fsImpl || fs;
+  const candidates = identityFileCandidates('persona.json', env, options.homeDir || os.homedir());
+  for (const target of candidates) {
+    const raw = readSafeText(target, fsImpl);
+    if (!raw) continue;
+    try {
+      const parsed = JSON.parse(raw);
+      if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+        return { path: target, persona: parsed };
+      }
+    } catch {}
+  }
+  const profileName = String(env.BLUN_PROFILE || '').trim();
+  return {
+    path: candidates[0],
+    persona: profileName && profileName.toLowerCase() !== 'default' ? { name: profileName } : undefined,
+  };
+}
+
+function resolveSoulFile(env = process.env, options = {}) {
+  const fsImpl = options.fsImpl || fs;
+  const explicit = String(env.BLUN_SOUL_PATH || '').trim();
+  if (explicit) {
+    const target = path.resolve(explicit);
+    return { path: target, text: readSafeText(target, fsImpl), explicit: true };
+  }
+  const candidates = identityFileCandidates('SOUL.md', env, options.homeDir || os.homedir());
+  for (const target of candidates) {
+    const text = readSafeText(target, fsImpl);
+    if (text) return { path: target, text, explicit: false };
+  }
+  return { path: candidates[0], text: '', explicit: false };
+}
+
+module.exports = {
+  MAX_IDENTITY_FILE_BYTES,
+  identityFileCandidates,
+  readProfilePersona,
+  resolveSoulFile,
+};

package/bin/telegram-private-conversation-policy.cjs

@@ -0,0 +1,26 @@
+'use strict';
+
+const PRIVATE_CHAT_ID = /^[1-9]\d*$/u;
+
+function normalize(text) {
+  return String(text ?? '')
+    .normalize('NFKC')
+    .toLocaleLowerCase('de-DE')
+    .replace(/[^\p{L}\p{N}\s]/gu, ' ')
+    .replace(/\s+/gu, ' ')
+    .trim();
+}
+
+function isPrivateInternalStatusReply(chatId, text) {
+  if (!PRIVATE_CHAT_ID.test(String(chatId ?? '').trim())) return false;
+  const value = normalize(text);
+  if (value.length === 0) return false;
+
+  const exposesRuntimeControl = /\b(?:cron|loop|checkpoint|sha|tool|hook|queue|lane|inbound|outbound|arbeitsstand|arbeitsauftrag|bau freigabe|freigabe dieser lane)\b/u.test(value);
+  const announcesNoUserValue = /\b(?:keine neue aktion|keine neue information|kein neuer auftrag|kein neuer zweck|kein neuer inbound bedarf|nichts zu melden|nichts weiteres|bleibt pausiert|warte auf (?:dein|sein|ihr) (?:zeichen|go|freigabe)|ich sende nichts|wiederholen wäre spam|keine weitere nachricht)\b/u.test(value);
+  return exposesRuntimeControl && announcesNoUserValue;
+}
+
+module.exports = {
+  isPrivateInternalStatusReply,
+};

package/blun.mjs

@@ -21445,6 +21445,7 @@ var { ensurePersonalityWorkspace } = createRequire(import.meta.url)("./bin/perso
 var { rollbackPersonalityChoice, setPersonalityEnabledAtomic } = createRequire(import.meta.url)("./bin/personality-choice-policy.cjs");
 var { projectSoulText } = createRequire(import.meta.url)("./bin/soul-organization-policy.cjs");
 var { soulFileInstruction } = createRequire(import.meta.url)("./bin/soul-preservation-policy.cjs");
+var { readProfilePersona, resolveSoulFile } = createRequire(import.meta.url)("./bin/profile-identity-resolution.cjs");
 async function prepareSystemPromptContext(kaos, brandHome, options) {
 	const additionalDirs = normalizeAdditionalDirs(options?.additionalDirs ?? []);
 	const [cwdListing, agentsMdResult, additionalDirsInfo] = await Promise.all([
@@ -28208,15 +28209,12 @@ function resolveBlunHome(env = process.env) {
 	return override && override.length > 0 ? override : join$4(homedir(), ".blun");
 }
 function personaFilePath$1(env = process.env) {
-	return join$4(resolveBlunHome(env), "persona.json");
+	return readProfilePersona(env).path;
 }
 /** Read the persona file. Returns undefined when unset or unreadable. */
 function readPersona$1(env = process.env) {
-	try {
-		const raw = readFileSync(personaFilePath$1(env), "utf8");
-		const parsed = JSON.parse(raw);
-		if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) return parsed;
-	} catch {}
+	const resolved = readProfilePersona(env);
+	return resolved.persona;
 }
 /**
 * Build the system-prompt block that teaches the agent its persona name, so it
@@ -28264,9 +28262,7 @@ var init_persona = __esmMin((() => {
 * agent is explicitly invited to keep writing it as it grows.
 */
 function soulFilePath(env = process.env) {
-	const override = env["BLUN_SOUL_PATH"]?.trim();
-	if (override) return resolve$2(override);
-	return join$4(resolveBlunHome(env), "SOUL.md");
+	return resolveSoulFile(env).path;
 }
 /**
 * Build the system-prompt block that gives the agent its soul file: the
@@ -28274,16 +28270,9 @@ function soulFilePath(env = process.env) {
 * returns an empty string when no SOUL.md exists yet (fail-open).
 */
 function soulSystemBlock(env = process.env) {
-	const path = soulFilePath(env);
-	let soul = "";
-	try {
-		if (existsSync(path)) {
-			soul = readFileSync(path, "utf8").trim();
-			soul = projectSoulText(soul, SOUL_MAX_CHARS);
-		}
-	} catch {
-		soul = "";
-	}
+	const resolved = resolveSoulFile(env);
+	const path = resolved.path;
+	const soul = projectSoulText(resolved.text, SOUL_MAX_CHARS);
 	if (soul.length === 0) return "";
 	const lines = [];
 	lines.push("## Your soul — who you are", "");
@@ -244324,9 +244313,12 @@ async function executeLoopStep(deps) {
 	};
 	let response;
 	try {
-		response = await chatWithRetry({
-			...retryInput,
-			params: chatParams
+		response = await chatWithLiveResponseRepetitionRecovery({
+			retryInput,
+			params: chatParams,
+			stepEvents,
+			signal,
+			log
 		});
 	} catch (error) {
 		await stepEvents.drain();
@@ -244345,9 +244337,12 @@ async function executeLoopStep(deps) {
 		if (prepareRequestBoundary !== void 0) strictParams = await prepareRequestBoundary(strictParams, stepBuildMessagesStrict);
 		signal.throwIfAborted();
 		try {
-			response = await chatWithRetry({
-				...retryInput,
-				params: strictParams
+			response = await chatWithLiveResponseRepetitionRecovery({
+				retryInput,
+				params: strictParams,
+				stepEvents,
+				signal,
+				log
 			});
 		} catch (strictError) {
 			log?.error("strict resend still rejected by provider; request remains wire-invalid", {
@@ -244448,12 +244443,52 @@ function stepEndProviderDiagnostics(response, stopReason) {
 		...response.rawFinishReason !== void 0 ? { rawFinishReason: response.rawFinishReason } : {}
 	};
 }
+var { createLiveResponseRepetitionGuard } = createRequire(import.meta.url)("./bin/live-response-repetition-guard.cjs");
+async function chatWithLiveResponseRepetitionRecovery(deps) {
+	const { retryInput, params, stepEvents, signal, log } = deps;
+	for (let attempt = 1; attempt <= 2; attempt++) {
+		try {
+			return await chatWithRetry({
+				...retryInput,
+				params: {
+					...params,
+					signal: stepEvents.beginLiveResponseAttempt(signal)
+				}
+			});
+		} catch (error) {
+			await stepEvents.drain();
+			const repetition = stepEvents.liveRepetitionResult;
+			if (repetition === null || signal.aborted || attempt >= 2) throw error;
+			log?.warn("live response repetition detected; retrying step once", {
+				charCount: repetition.charCount,
+				occurrences: repetition.count,
+				wordCount: repetition.wordCount
+			});
+			await stepEvents.dispatchRetrying({
+				type: "step.retrying",
+				turnId: retryInput.turnId,
+				step: retryInput.currentStep,
+				stepUuid: retryInput.stepUuid,
+				failedAttempt: 1,
+				nextAttempt: 2,
+				maxAttempts: 2,
+				delayMs: 0,
+				errorName: "LiveResponseRepetitionError",
+				errorMessage: "Repeated assistant text detected during streaming"
+			});
+		}
+	}
+	throw new Error("Live response repetition recovery exhausted");
+}
 function createStepEventGate(deps) {
 	const { dispatchEvent, turnId, currentStep, stepUuid, onStepStarted } = deps;
 	let startPromise;
 	let eventQueue = Promise.resolve();
 	let hasOutput = false;
 	const pendingBeforeStart = [];
+	let liveRepetitionGuard;
+	let liveRepetitionController;
+	let liveRepetitionResult = null;
 	const start = () => {
 		startPromise ??= (async () => {
 			await dispatchEvent({
@@ -244481,6 +244516,15 @@ function createStepEventGate(deps) {
 		get hasOutput() {
 			return hasOutput;
 		},
+		get liveRepetitionResult() {
+			return liveRepetitionResult;
+		},
+		beginLiveResponseAttempt: (signal) => {
+			liveRepetitionGuard = createLiveResponseRepetitionGuard();
+			liveRepetitionController = new AbortController();
+			liveRepetitionResult = null;
+			return AbortSignal.any([signal, liveRepetitionController.signal]);
+		},
 		dispatchRetrying: async (event) => {
 			if (startPromise === void 0) {
 				pendingBeforeStart.push(() => {
@@ -244498,6 +244542,12 @@ function createStepEventGate(deps) {
 		drain: async () => eventQueue,
 		callbacks: {
 			onTextDelta: (delta) => {
+				const repetition = liveRepetitionGuard?.push(delta) ?? null;
+				if (repetition !== null) {
+					liveRepetitionResult = repetition;
+					liveRepetitionController?.abort(/* @__PURE__ */ new Error("Repeated assistant text detected during streaming"));
+					return;
+				}
 				enqueue(() => {
 					dispatchEvent({
 						type: "text.delta",
@@ -514643,6 +514693,7 @@ function outboxDeliveredFile(marker, chatId, filePath) {
 }
 var retryTelegramMediaDelivery, retryableTelegramMediaFailure;
 ({ retryTelegramMediaDelivery, retryableTelegramMediaFailure } = createRequire(import.meta.url)("./bin/telegram-media-delivery-policy.cjs"));
+var { isPrivateInternalStatusReply } = createRequire(import.meta.url)("./bin/telegram-private-conversation-policy.cjs");
 const TELEGRAM_TEXT_LIMIT = 4096;
 const TELEGRAM_ATTACHMENT_LIMIT = 50 * 1024 * 1024;
 function mediaTelegramTarget(filePath) {
@@ -514719,6 +514770,18 @@ function isGroupSuppressed(text, contextOnly) {
 * kind "reply-fallback". Returns true on success. Never throws.
 */
 async function sendReplyFallback(chatId, text, contextOnly = false) {
+	if (isPrivateInternalStatusReply(chatId, text)) {
+		try {
+			appendFileSync(outboxPath(), `${JSON.stringify({
+				ts: (/* @__PURE__ */ new Date()).toISOString(),
+				direction: "out",
+				kind: "reply-fallback-suppressed-private-internal",
+				chat_id: String(chatId),
+				text
+			})}\n`);
+		} catch {}
+		return true;
+	}
 	if (isGroupChat(chatId) && isGroupSuppressed(text, contextOnly)) {
 		try {
 			appendFileSync(outboxPath(), `${JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.326",
+  "version": "9.1.328",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/mcp-server.mjs

@@ -2,6 +2,7 @@ import { A as _enum, B as object, F as discriminatedUnion, G as union, H as prep
 import process$1 from "node:process";
 import { mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { extname, join } from "node:path";
+import privateConversationPolicy from "../../bin/telegram-private-conversation-policy.cjs";
 //#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
 	return !!s._zod;
@@ -9666,6 +9667,7 @@ var StdioServerTransport = class {
 * chats the inbound gate would deliver from.
 */
 var import_out = require_out();
+const { isPrivateInternalStatusReply } = privateConversationPolicy;
 const TOOL_DEFINITIONS = [
 	{
 		name: "reply",
@@ -9843,6 +9845,15 @@ async function runReply(api, args) {
 	const replyTo = args.reply_to != null ? Number(args.reply_to) : void 0;
 	const files = args.files ?? [];
 	const parseMode = args.format === "markdownv2" ? "MarkdownV2" : void 0;
+	if (files.length === 0 && isPrivateInternalStatusReply(chatId, text)) {
+		appendJsonl(outboxLog(), {
+			direction: "out",
+			kind: "reply-suppressed-private-internal",
+			chat_id: chatId,
+			text
+		});
+		return "suppressed: internal work-control narration does not belong in a private conversation";
+	}
 	if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(text)) {
 		appendJsonl(outboxLog(), {
 			direction: "out",