blun-king-cli 9.1.508 → 9.1.510

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 9.1.510 - 2026-08-31
+
+- Adds `ReadBatch` for two to twelve independent known UTF-8 files or ranges in one concurrent tool call, reducing repeated model round trips over a large working context.
+- Reuses the exact `Read` path resolution, sensitive-file checks, permissions, UTF-8 validation, paging, and byte limits while preserving request order and reporting partial failures individually.
+- Keeps `ReadBatch` in the bounded core tool catalogue for main, coder, explore, and plan profiles, with focused concurrency, access, partial-failure, registration, and full-package regressions.
+
+## 9.1.509 - 2026-08-30
+
+- Requires every authorized bot-to-bot Telegram work message to mention its intended King explicitly.
+- Keeps unmentioned bot messages visible without buffering, queueing, delivering, or replaying them into that King's model context.
+- Prevents a priority bot message addressed to one King from becoming work for another King, with focused runtime and full-package regressions.
+
 ## 9.1.508 - 2026-08-30
 
 - Keeps pending TodoList markers visible on reduced-color terminals and rejects a newly tracked multi-step list unless it has exactly one active item.

package/LIESMICH.txt

@@ -9,7 +9,7 @@ Installation
 ------------
 Die geprüfte Version exakt global installieren:
 
-  npm install -g blun-king-cli@9.1.508
+  npm install -g blun-king-cli@9.1.510
 
 Start
 -----

package/README.md

@@ -9,7 +9,7 @@ Voraussetzung ist Node.js 24.15 oder neuer. Die geprüfte Version wird exakt
 installiert:
 
 ```powershell
-npm install -g blun-king-cli@9.1.508
+npm install -g blun-king-cli@9.1.510
 ```
 
 ## Reproduzierbares Staging und Packen

package/bin/read-batch-policy.cjs

@@ -0,0 +1,32 @@
+'use strict';
+
+const MAX_READ_BATCH_REQUESTS = 12;
+
+function readBatchAllFailed(results) {
+  return results.length === 0 || results.every((result) => result?.isError === true);
+}
+
+function renderReadBatchOutput(requests, results) {
+  return requests.map((request, index) => {
+    const result = results[index] ?? {
+      isError: true,
+      output: 'ReadBatch did not receive a result for this request.',
+    };
+    const range = [
+      request.line_offset === undefined ? null : `line_offset=${String(request.line_offset)}`,
+      request.n_lines === undefined ? null : `n_lines=${String(request.n_lines)}`,
+    ].filter(Boolean);
+    const rangeSuffix = range.length === 0 ? '' : ` [${range.join(', ')}]`;
+    const status = result.isError === true ? 'error' : 'ok';
+    return [
+      `--- Read ${String(index + 1)}/${String(requests.length)}: ${JSON.stringify(request.path)}${rangeSuffix} (${status}) ---`,
+      String(result.output ?? ''),
+    ].join('\n');
+  }).join('\n\n');
+}
+
+module.exports = {
+  MAX_READ_BATCH_REQUESTS,
+  readBatchAllFailed,
+  renderReadBatchOutput,
+};

package/bin/turn-tool-performance-policy.cjs

@@ -42,6 +42,7 @@ const TOOL_SEARCH_SINGLE_TERM_RELATED_FALLBACKS = new Set([
 const CORE_TOOL_NAMES = Object.freeze([
   'Bash',
   'Read',
+  'ReadBatch',
   'Edit',
   'Grep',
   'Write',

package/blun.mjs

@@ -28544,6 +28544,7 @@ var init_load = __esmMin((() => {
 var agent_default$1;
 var init_agent$3 = __esmMin((() => {
 	agent_default$1 = "name: agent\ndescription: Default BLUN King agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - TaskList\n  - TaskOutput\n  - TaskUpdate\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - ReadMediaFile\n  - TodoList\n  - Skill\n  - WebSearch\n  - Agent\n  - AgentSwarm\n  - FetchURL\n  - GenerateImage\n  - GenerateVideo\n  - GenerateSpeech\n  - UnderstandImage\n  - UnderstandVideo\n  - DubVideo\n  - LipSyncMedia\n  - GetMedia\n  - AskUserQuestion\n  - MistakeRecord\n  - CodebaseSearch\n  - EnterPlanMode\n  - ExitPlanMode\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - mcp__*\n\nsubagents:\n  coder:\n    description: General software engineering agent — the only subagent type with file-editing tools; use it for any delegated task that must modify code.\n  explore:\n    description: Fast codebase exploration with prompt-enforced read-only behavior.\n  plan:\n    description: Read-only implementation planning and architecture design.\n";
+	agent_default$1 = agent_default$1.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
 	agent_default$1 = agent_default$1.replace("  - TodoList\n", "  - TodoList\n  - CompactConversation\n");
 }));
 //#endregion
@@ -28551,12 +28552,14 @@ var init_agent$3 = __esmMin((() => {
 var coder_default;
 var init_coder = __esmMin((() => {
 	coder_default = "extends: agent\nname: coder\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    Your final message is the entire handoff — the parent sees nothing else from your run. Make it technically complete: what you changed and why, the path of every file you touched, how you verified the change (tests or commands run, with results), and anything left undone or worth follow-up. A final message of only a sentence or two is treated as too brief and sent back to you for expansion, costing an extra turn.\nwhenToUse: |\n  Use this agent for non-trivial software engineering work that may require reading files, editing code, running commands, and returning a compact but technically complete summary to the parent agent.\ntools:\n  - Bash\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - Write\n  - Edit\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n  - mcp__*\n";
+	coder_default = coder_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/explore.yaml?raw
 var explore_default;
 var init_explore = __esmMin((() => {
 	explore_default = "extends: agent\nname: explore\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    You are a codebase exploration specialist. Your role is EXCLUSIVELY to search, read, and analyze existing code and resources. You do NOT have access to project file editing tools. MistakeRecord is the sole write-capable exception: it may record a concrete refutation in shared BLUN learning memory, never modify project files.\n\n    Your strengths:\n    - Rapidly finding files using glob patterns\n    - Searching code and text with powerful regex patterns\n    - Reading and analyzing file contents\n    - Running read-only shell commands (git log, git diff, ls, find, etc.)\n\n    Guidelines:\n    - Use Glob for broad file pattern matching. Prefer patterns with a literal anchor (extension or subdirectory); pure wildcards like `*` or `**/*` are allowed but usually truncate at the match cap.\n    - Use Grep for searching file contents with regex\n    - Use Read when you know the specific file path\n    - Use Bash ONLY for read-only operations (ls, git status, git log, git diff, find)\n    - NEVER use Bash for any file creation or modification commands\n    - Use WebSearch or FetchURL when a question needs external context (library documentation, error messages, upstream APIs); the local codebase remains your primary domain\n    - Adapt your search depth based on the thoroughness level specified by the caller\n    - Wherever possible, spawn multiple parallel tool calls for grepping and reading files to maximize speed\n\n    If the prompt includes a <git-context> block, use it to orient yourself about the repository state before starting your investigation.\n\n    You are meant to be a fast agent. Complete the search request efficiently and report your findings clearly in a structured format.\nwhenToUse: |\n  Fast agent specialized for exploring codebases. Use this when you need to quickly find files by patterns (e.g. \"src/**/*.yaml\"), search code for keywords (e.g. \"database connection\"), or answer questions about the codebase (e.g. \"how does the auth module work?\"). When calling this agent, specify the desired thoroughness level: \"quick\" for basic searches, \"medium\" for moderate exploration, or \"thorough\" for comprehensive analysis across multiple locations and naming conventions. Use this agent for any read-only exploration that will clearly require more than 3 search queries. Prefer launching multiple explore agents concurrently when investigating independent questions.\ntools:\n  - Bash\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n";
+	explore_default = explore_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/init.md?raw
@@ -28569,6 +28572,7 @@ var init_init = __esmMin((() => {
 var plan_default;
 var init_plan$1 = __esmMin((() => {
 	plan_default = "extends: agent\nname: plan\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    Before designing your implementation plan, consider whether you fully understand the codebase areas relevant to the task. If not, recommend the parent agent to use the explore agent (subagent_type=\"explore\") to investigate key questions first. In your response, clearly state:\n    1. What you already know from the information provided\n    2. What questions remain unanswered that would benefit from explore agent investigation\n    3. Your implementation plan (either preliminary if questions remain, or final if sufficient context exists)\n\n    You are a read-only planning agent: you can read and search files (Read, Glob, Grep, ReadMediaFile) and consult the web (WebSearch, FetchURL), but you have no shell and no project file-editing tools. MistakeRecord is the sole write-capable exception: it may record a concrete refutation in shared BLUN learning memory, never modify project files. Where the general instructions tell you to make changes with tools, that does not apply to you — do not attempt to run commands or modify project files. Your deliverable is the plan itself, returned as your final message.\nwhenToUse: |\n  Use this agent when the parent agent needs a step-by-step implementation plan, key file identification, and architectural trade-off analysis before code changes are made.\ntools:\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - MistakeRecord\n  - WebSearch\n  - FetchURL\n";
+	plan_default = plan_default.replace("  - Read\n", "  - Read\n  - ReadBatch\n");
 }));
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/system.md?raw
@@ -259401,7 +259405,7 @@ function containsNulByte(text) {
 function notReadableFileOutput(path) {
 	return `"${path}" is not readable as UTF-8 text. If it is an image or video, use ReadMediaFile. For other binary formats, use Bash or an MCP tool if available.`;
 }
-var MAX_LINES$1, MAX_LINE_LENGTH, MAX_BYTES, S_IFMT$1, S_IFREG, PositiveLineOffsetSchema, TailLineOffsetSchema, ReadInputSchema, READ_DESCRIPTION, ReadTool, readContinuationNotice, READ_MODEL_VISIBLE_BYTES;
+var MAX_LINES$1, MAX_LINE_LENGTH, MAX_BYTES, S_IFMT$1, S_IFREG, PositiveLineOffsetSchema, TailLineOffsetSchema, ReadInputSchema, ReadBatchInputSchema, READ_DESCRIPTION, READ_BATCH_DESCRIPTION, ReadTool, ReadBatchTool, readContinuationNotice, READ_MODEL_VISIBLE_BYTES, MAX_READ_BATCH_REQUESTS, readBatchAllFailed, renderReadBatchOutput;
 var init_read = __esmMin((() => {
 	init_zod$1();
 	init_tool_access();
@@ -259413,6 +259417,7 @@ var init_read = __esmMin((() => {
 	init_line_endings();
 	init_read$1();
 	({ readContinuationNotice, READ_MODEL_VISIBLE_BYTES } = createRequire(import.meta.url)("./bin/read-continuation-policy.cjs"));
+	({ MAX_READ_BATCH_REQUESTS, readBatchAllFailed, renderReadBatchOutput } = createRequire(import.meta.url)("./bin/read-batch-policy.cjs"));
 	MAX_LINES$1 = 1e3;
 	MAX_LINE_LENGTH = 2e3;
 	MAX_BYTES = READ_MODEL_VISIBLE_BYTES;
@@ -259425,6 +259430,7 @@ var init_read = __esmMin((() => {
 		line_offset: union([PositiveLineOffsetSchema, TailLineOffsetSchema]).optional().describe(`The line number to start reading from. Omit to start at line 1. Negative values read from the end of the file; the absolute value cannot exceed ${String(MAX_LINES$1)}.`),
 		n_lines: number$1().int().positive().optional().describe(`The number of lines to read; the tool also applies its internal cap. Omit to read up to the internal cap of ${String(MAX_LINES$1)} lines.`)
 	});
+	ReadBatchInputSchema = object({ requests: array(ReadInputSchema).min(2).max(MAX_READ_BATCH_REQUESTS).describe(`Two to ${String(MAX_READ_BATCH_REQUESTS)} independent known text-file reads. Do not batch a read whose path or range depends on an earlier result.`) });
 	object({
 		content: string(),
 		lineCount: number$1().int().nonnegative()
@@ -259434,12 +259440,13 @@ var init_read = __esmMin((() => {
 		MAX_BYTES_KB: MAX_BYTES / 1024,
 		MAX_LINE_LENGTH
 	});
-	read_default = "Read a known UTF-8 text file. Invalid paths error; directories are unsupported. Relative paths use the working directory; outside paths must be absolute. Use Glob for unknown names, Grep for content, and ReadMediaFile for media.\n\nEach call returns at most {{ MAX_LINES }} lines or {{ MAX_BYTES_KB }} KB and truncates lines beyond {{ MAX_LINE_LENGTH }} characters. Page large files with 1-based `line_offset` and `n_lines`; omit `n_lines` for the cap. Negative `line_offset` reads from the end, up to {{ MAX_LINES }} lines. A capped result names the exact next `line_offset`. Issue independent Read calls together in one response when several files or ranges may be useful.\n\nSensitive files such as `.env` and credential stores are refused; templates and public keys remain readable. Only UTF-8 text without NUL bytes is accepted; use Bash or an MCP tool for other binaries.\n\nOutput is `<line-number>\\t<content>` per line. The trailing `<system>...</system>` block is status, not file content. Pure CRLF appears as LF and is preserved by Edit. Mixed or lone carriage returns appear as `\\r` and require exact `Edit.old_string` escapes.";
+	read_default = "Read a known UTF-8 text file. Invalid paths error; directories are unsupported. Relative paths use the working directory; outside paths must be absolute. Use Glob for unknown names, Grep for content, and ReadMediaFile for media.\n\nEach call returns at most {{ MAX_LINES }} lines or {{ MAX_BYTES_KB }} KB and truncates lines beyond {{ MAX_LINE_LENGTH }} characters. Page large files with 1-based `line_offset` and `n_lines`; omit `n_lines` for the cap. Negative `line_offset` reads from the end, up to {{ MAX_LINES }} lines. A capped result names the exact next `line_offset`. Issue independent Read calls together in one response when several files or ranges may be useful. Prefer ReadBatch when two or more independent paths or ranges are already known.\n\nSensitive files such as `.env` and credential stores are refused; templates and public keys remain readable. Only UTF-8 text without NUL bytes is accepted; use Bash or an MCP tool for other binaries.\n\nOutput is `<line-number>\\t<content>` per line. The trailing `<system>...</system>` block is status, not file content. Pure CRLF appears as LF and is preserved by Edit. Mixed or lone carriage returns appear as `\\r` and require exact `Edit.old_string` escapes.";
 	READ_DESCRIPTION = renderPrompt(read_default, {
 		MAX_LINES: MAX_LINES$1,
 		MAX_BYTES_KB: MAX_BYTES / 1024,
 		MAX_LINE_LENGTH
 	});
+	READ_BATCH_DESCRIPTION = `Read ${String(MAX_READ_BATCH_REQUESTS)} or fewer independent known UTF-8 text files or ranges concurrently in one tool call. Use this instead of serial Read calls only when every path and range is already known and no later request depends on an earlier result. Each request uses the same path, sensitive-file, UTF-8, line, and byte rules as Read. Results remain in request order and identify partial failures individually.`;
 	ReadTool = class {
 		kaos;
 		workspace;
@@ -259719,6 +259726,54 @@ var init_read = __esmMin((() => {
 			return parts.join(" ");
 		}
 	};
+	ReadBatchTool = class {
+		kaos;
+		workspace;
+		reader;
+		name = "ReadBatch";
+		description = READ_BATCH_DESCRIPTION;
+		parameters = toInputJsonSchema(ReadBatchInputSchema);
+		constructor(kaos, workspace) {
+			this.kaos = kaos;
+			this.workspace = workspace;
+			this.reader = new ReadTool(kaos, workspace);
+		}
+		resolveExecution(args) {
+			const items = args.requests.map((request) => ({
+				request,
+				safePath: resolvePathAccessPath(request.path, {
+					kaos: this.kaos,
+					workspace: this.workspace,
+					operation: "read"
+				})
+			}));
+			const ruleOptions = {
+				cwd: this.workspace.workspaceDir,
+				pathClass: this.kaos.pathClass(),
+				homeDir: this.kaos.gethome()
+			};
+			return {
+				accesses: items.flatMap((item) => ToolAccesses.readFile(item.safePath)),
+				description: `Reading ${String(items.length)} files or ranges`,
+				display: {
+					kind: "file_io",
+					operation: "read",
+					path: items[0].safePath,
+					detail: `${String(items.length)} reads`
+				},
+				approvalRule: this.name,
+				matchesRule: (ruleArgs) => items.every((item) => matchesPathRuleSubject(ruleArgs, item.safePath, ruleOptions)),
+				execute: () => this.execution(items)
+			};
+		}
+		async execution(items) {
+			const results = await Promise.all(items.map((item) => this.reader.execution(item.request, item.safePath)));
+			return {
+				isError: readBatchAllFailed(results),
+				output: renderReadBatchOutput(items.map((item) => item.request), results)
+			};
+		}
+	};
 }));
 //#endregion
 //#region ../../packages/agent-core/src/tools/builtin/file/read-media.md?raw
@@ -265157,6 +265212,7 @@ var init_tool$1 = __esmMin((() => {
 			const goalToolsEnabled = this.agent.type === "main";
 			this.builtinTools = new Map([
 				new ReadTool(kaos, workspace),
+				new ReadBatchTool(kaos, workspace),
 				new WriteTool(kaos, workspace, () => this.agent.context.history, toolServices?.lsp),
 				new EditTool(kaos, workspace, () => this.agent.context.history, toolServices?.lsp),
 				new GrepTool(kaos, workspace, this.agent.telemetry),
@@ -419689,7 +419745,12 @@ function telegramRemoteCommand(text) {
 */
 function injectChannelEnvelope(host, envelope, preamble) {
 	const origin = channelOrigin(envelope);
+	const targetedElsewhere = ["true", "1"].includes(envelope.meta["targeted_elsewhere"]?.trim().toLowerCase() ?? "");
 	const contextOnly = !channelMessageAddressed(envelope) && !telegramBotPriorityMessage(envelope);
+	if (targetedElsewhere) {
+		host.displayContext?.(envelope.text, origin);
+		return "ignored";
+	}
 	const reportSource = {
 		source: "telegram",
 		chatId: envelope.meta.chat_id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.508",
+  "version": "9.1.510",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {
@@ -61,5 +61,6 @@
   "dependencies": {
     "blun-king-cli": "^9.1.62",
     "node-addon-api": "^7.1.1"
-  }
+  },
+  "devDependencies": {}
 }

package/telegram-plugin/dist/bridge.mjs

@@ -210,10 +210,12 @@ function gate(ctx, botUsername) {
 		if (groupAllowFrom.length > 0 && !groupAllowFrom.includes(senderId)) return { action: "drop" };
 		const mentionBypass = from.isBot !== true && (policy.alwaysAllowFrom ?? []).includes(senderId);
 		const addressed = !matchesAny(ctx.text, access.ignorePatterns) && (mentionBypass || isMentioned(ctx, botUsername, access.mentionPatterns));
+		const targetedElsewhere = from.isBot === true && !addressed;
 		return {
 			action: "deliver",
 			access,
 			addressed,
+			targetedElsewhere,
 			...from.isBot === true ? { priority: "bot" } : {}
 		};
 	}
@@ -4684,6 +4686,7 @@ async function handleInbound(event) {
 	}
 	const msgId = ctx.messageId;
 	const addressed = result.action === "deliver" ? result.addressed ?? true : true;
+	const targetedElsewhere = result.action === "deliver" ? result.targetedElsewhere ?? false : false;
 	const priority = result.action === "deliver" ? result.priority : void 0;
 	if (addressed) {
 		bot.api.sendChatAction(chatId, "typing").catch(() => {});
@@ -4701,6 +4704,7 @@ async function handleInbound(event) {
 		...ctx.chatType !== void 0 ? { chat_type: ctx.chatType } : {},
 		...ctx.chatTitle !== void 0 ? { chat_title: ctx.chatTitle } : {},
 		addressed: String(addressed),
+		targeted_elsewhere: String(targetedElsewhere),
 		...priority === void 0 ? {} : { priority },
 		user: ctx.from?.username ?? String(ctx.from?.id),
 		is_bot: String(ctx.from?.is_bot === true),