blun-king-cli 9.1.511 → 9.1.512

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 9.1.512 - 2026-08-31
+
+- Makes a proactive TodoList maintenance step set the same mandatory refresh state as the fallback policy gate, so an unchanged list can no longer reset the deadline and silently continue.
+- Gives the isolated Todo-only request at most eight compact tool-name/outcome facts since the last accepted refresh, without replaying prompts, arguments, commands, full paths, results, or work history.
+- Retains bounded evidence after a failed TodoList attempt, clears it after the accepted TodoList tool succeeds, and covers proactive enforcement, privacy, boundedness, retry, and tool restoration in the 127-test package suite.
+
 ## 9.1.511 - 2026-08-31
 
 - Upgrades the managed core plugin from AgentSpine 0.8.0 to the cache-distinct 0.10.1 bundle with mandatory pre-answer receipts, Must-Remember, self-healing authenticated persona and relationship graph reconciliation, and a five-second local relationship deadline.

package/LIESMICH.txt

@@ -9,11 +9,11 @@ Installation
 ------------
 Die geprüfte Version exakt global installieren:
 
-  npm install -g blun-king-cli@9.1.511
+  npm install -g blun-king-cli@9.1.512
 
 AgentSpine 0.10.1
 -----------------
-Version 9.1.511 liefert AgentSpine 0.10.1 als neue inhaltsadressierte
+Version 9.1.512 liefert AgentSpine 0.10.1 als neue inhaltsadressierte
 Pluginfassung. Der Preflight prueft weiterhin jede aktive Host-Anweisungsdatei
 race-sicher und bindet SHA-256 sowie Dateiidentitaet an den Zug, dupliziert den
 bereits vom Host geladenen Volltext aber nicht mehr in den Laufzeitkontext.

package/README.md

@@ -9,12 +9,12 @@ Voraussetzung ist Node.js 24.15 oder neuer. Die geprüfte Version wird exakt
 installiert:
 
 ```powershell
-npm install -g blun-king-cli@9.1.511
+npm install -g blun-king-cli@9.1.512
 ```
 
 ## AgentSpine 0.10.1
 
-Version 9.1.511 liefert AgentSpine 0.10.1 als neue inhaltsadressierte
+Version 9.1.512 liefert AgentSpine 0.10.1 als neue inhaltsadressierte
 Pluginfassung. Der Preflight prueft weiterhin jede aktive Host-Anweisungsdatei
 race-sicher und bindet SHA-256 sowie Dateiidentitaet an den Zug, dupliziert den
 bereits vom Host geladenen Volltext aber nicht mehr in den Laufzeitkontext.

package/blun.mjs

@@ -262985,6 +262985,7 @@ var init_turn = __esmMin((() => {
 								const { isError, output } = finalResult;
 								currentStepHadTool = true;
 								if (isError === true) currentStepHadFailure = true;
+								recordGoalTodoEvidence(this.agent, ctx.toolCall.name, ctx.args, isError);
 								directReplyTurnStop.noteToolResult(ctx.toolCall.name, isError);
 								const event = isError === true ? "PostToolUseFailure" : "PostToolUse";
 								this.agent.hooks?.fireAndForgetTrigger(event, {
@@ -423291,6 +423292,7 @@ async function handleGoalCommand(host, args) {
 const IDEA_CONTRACT_MARKER = "Work as a self-directing employee:";
 const IDEA_ALLOWED_CHANNELS = Object.freeze([]);
 const GOAL_TODO_REFRESH_WORK_CALL_LIMIT = 8;
+const GOAL_TODO_EVIDENCE_LIMIT = 8;
 const IDEA_TERMINAL_TODO_STATUSES = Object.freeze([
 	"done",
 	"blocked",
@@ -423318,6 +423320,45 @@ function validInitialIdeaPlan(value) {
 	}
 	return active === 1;
 }
+function goalTodoEvidenceTarget(args) {
+	if (args === null || typeof args !== "object") return "";
+	if (Array.isArray(args.requests)) return `${args.requests.length} requested files`;
+	for (const key of ["file_path", "path", "old_path", "new_path"]) {
+		const value = typeof args[key] === "string" ? args[key].trim() : "";
+		if (value === "") continue;
+		return value.replaceAll("\\", "/").split("/").filter(Boolean).at(-1)?.slice(0, 120) ?? "";
+	}
+	return "";
+}
+function goalTodoEvidenceLabel(toolName, args, isError) {
+	const name = String(toolName ?? "tool");
+	const outcome = isError === true ? "failed" : "succeeded";
+	const target = goalTodoEvidenceTarget(args);
+	if (target !== "") return `${name} ${outcome}: ${target}`;
+	if (name === "Bash") {
+		const command = typeof args?.command === "string" ? args.command : "";
+		if (/\bnode\s+--check\b/iu.test(command)) return `Node syntax check ${outcome}`;
+		if (/\b(?:sha256sum|Get-FileHash)\b/iu.test(command)) return `SHA-256 measurement ${outcome}`;
+		if (/\b(?:rg|grep)\b/iu.test(command)) return `Shell search ${outcome}`;
+	}
+	return `${name} ${outcome}`;
+}
+function recordGoalTodoEvidence(agent, toolName, args, isError) {
+	if (isIdeaGoal(agent) || agent.goal.getActiveGoal() === null) return;
+	const name = String(toolName ?? "");
+	const progress = agent.goalTodoPolicyState ??= {
+		workCallsSinceRefresh: 0,
+		refreshRequired: false
+	};
+	if (name === "TodoList") {
+		if (isError !== true) progress.recentEvidence = [];
+		return;
+	}
+	if (name === "UpdateGoal" || TELEGRAM_DELIVERY_TOOL_RE.test(name)) return;
+	const recentEvidence = Array.isArray(progress.recentEvidence) ? progress.recentEvidence : [];
+	recentEvidence.push(goalTodoEvidenceLabel(name, args, isError));
+	progress.recentEvidence = recentEvidence.slice(-GOAL_TODO_EVIDENCE_LIMIT);
+}
 function goalTodoMaintenanceMode(agent) {
 	if (isIdeaGoal(agent)) return null;
 	const todos = ideaTodos(agent);
@@ -423326,7 +423367,9 @@ function goalTodoMaintenanceMode(agent) {
 		workCallsSinceRefresh: 0,
 		refreshRequired: false
 	};
-	return progress.refreshRequired || progress.workCallsSinceRefresh >= GOAL_TODO_REFRESH_WORK_CALL_LIMIT ? "refresh" : null;
+	if (!progress.refreshRequired && progress.workCallsSinceRefresh < GOAL_TODO_REFRESH_WORK_CALL_LIMIT) return null;
+	progress.refreshRequired = true;
+	return "refresh";
 }
 function buildGoalTodoMaintenanceSystemPrompt(agent, mode) {
 	const todos = ideaTodos(agent);
@@ -423343,14 +423386,17 @@ ${visibleTodoList}
 function buildGoalTodoMaintenanceMessages(agent, mode) {
 	const goal = agent.goal.getActiveGoal();
 	const todos = ideaTodos(agent);
+	const recentEvidence = Array.isArray(agent.goalTodoPolicyState?.recentEvidence) ? agent.goalTodoPolicyState.recentEvidence.slice(-GOAL_TODO_EVIDENCE_LIMIT) : [];
 	const objective = String(goal?.objective ?? "Continue the current multi-step task.").trim();
 	const visibleTodoList = todos.length === 0 ? "The visible TodoList is empty." : ["Current visible TodoList:", ...todos.map((todo) => `- [${String(todo?.status ?? "pending")}] ${String(todo?.title ?? "").trim()}`)].join("\n");
+	const verifiedEvidence = recentEvidence.length === 0 ? "No new work-tool evidence is available." : ["Recent bounded work-tool evidence since the last accepted TodoList:", ...recentEvidence.map((entry) => `- ${entry}`)].join("\n");
 	const action = mode === "initial" ? "Create the task-specific TodoList from the active objective. Keep exactly one item in_progress and every later item pending." : "Refresh the TodoList from the current verified state. Mark finished work done, keep the actual current step in_progress, and leave later work pending. Completed items disappear automatically after this call.";
 	const request = [
 		"Return exactly one TodoList tool call and no prose.",
 		action,
 		`Active objective: ${objective}`,
-		visibleTodoList
+		visibleTodoList,
+		verifiedEvidence
 	].join("\n\n");
 	return [{
 		role: "user",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.511",
+  "version": "9.1.512",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {