blun-king-cli 9.1.52 → 9.1.53

package/LIESMICH.txt

@@ -9,7 +9,7 @@ Installation
 ------------
 Die geprüfte Version exakt global installieren:
 
-  npm install -g blun-king-cli@9.1.52
+  npm install -g blun-king-cli@9.1.53
 
 Start
 -----
@@ -59,6 +59,10 @@ lokale Schritte um und fragt gezielt nach, wenn eine Entscheidung oder ein Zugan
 fehlt. Blockierte, auf Freigabe wartende und abgebrochene Schritte bleiben mit
 ihrem tatsächlichen Zustand sichtbar.
 
+Der erste Werkzeugaufruf muss den sichtbaren Plan setzen. Ausgehende Aktionen
+werden zusätzlich pro Werkzeugaufruf geprüft und bei fehlender Kanal- oder
+Zugangsfreigabe angehalten.
+
 Im automatisch angebundenen Telegram-Kanal werden ausschließlich /loop, /goal,
 /idea und /befehle als Befehle ausgeführt. Ist der Agent beschäftigt, bleiben
 sie in der Warteschlange. Andere Slash-Eingaben werden aus Sicherheitsgründen

package/README.md

@@ -9,7 +9,7 @@ Voraussetzung ist Node.js 24.15 oder neuer. Die geprüfte Version wird exakt
 installiert:
 
 ```powershell
-npm install -g blun-king-cli@9.1.52
+npm install -g blun-king-cli@9.1.53
 ```
 
 ## Reproduzierbares Staging und Packen
@@ -74,6 +74,10 @@ lokale Schritte um und fragt gezielt nach, wenn eine Entscheidung oder ein Zugan
 fehlt. Blockierte, auf Freigabe wartende und abgebrochene Schritte bleiben mit
 ihrem tatsächlichen Zustand sichtbar.
 
+Der erste Werkzeugaufruf muss den sichtbaren Plan setzen. Ausgehende Aktionen
+werden zusätzlich pro Werkzeugaufruf geprüft und bei fehlender Kanal- oder
+Zugangsfreigabe angehalten.
+
 Im automatisch angebundenen Telegram-Kanal werden ausschließlich `/loop`,
 `/goal`, `/idea` und `/befehle` als Befehle ausgeführt. Ist der Agent
 beschäftigt, bleiben sie in der Warteschlange. Andere Slash-Eingaben werden aus

package/blun.mjs

@@ -260655,7 +260655,7 @@ var init_turn = __esmMin((() => {
 								this.agent.log.warn("goal token accounting failed", { error });
 							}
 						},
-						hooks: {
+							hooks: {
 							beforeStep: async ({ signal: stepSignal, llm }) => {
 								this.agent.microCompaction.detect();
 								await this.agent.injection.inject();
@@ -260705,6 +260705,8 @@ var init_turn = __esmMin((() => {
 								return { continue: false };
 							},
 							prepareToolExecution: async (ctx) => {
+								const ideaPolicy = enforceIdeaToolPolicy(this.agent, ctx);
+								if (ideaPolicy !== void 0) return ideaPolicy;
 								const cached = deduper.checkSameStep(ctx.toolCall.id, ctx.toolCall.name, ctx.args);
 								if (cached !== null) return { syntheticResult: cached };
 							},
@@ -400692,6 +400694,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Reload interface settings only",
 		"command.compact.description": "Compact the conversation context",
 		"command.goal.description": "Start or manage an autonomous goal",
+		"command.idea.description": "Start or manage an autonomous idea",
 		"command.loop.description": "Start or manage a recurring prompt",
 		"command.init.description": "Analyze the codebase and generate AGENTS.md",
 		"command.fork.description": "Fork the current session",
@@ -400749,6 +400752,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Nur Oberflächeneinstellungen neu laden",
 		"command.compact.description": "Konversationskontext komprimieren",
 		"command.goal.description": "Autonomes Ziel starten oder verwalten",
+		"command.idea.description": "Autonome Idee starten oder verwalten",
 		"command.loop.description": "Wiederkehrenden Prompt starten oder verwalten",
 		"command.init.description": "Codebasis analysieren und AGENTS.md erstellen",
 		"command.fork.description": "Aktuelle Sitzung abzweigen",
@@ -400806,6 +400810,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Recargar solo los ajustes de la interfaz",
 		"command.compact.description": "Compactar el contexto de la conversación",
 		"command.goal.description": "Iniciar o gestionar un objetivo autónomo",
+		"command.idea.description": "Iniciar o gestionar una idea autónoma",
 		"command.loop.description": "Iniciar o gestionar una instrucción recurrente",
 		"command.init.description": "Analizar el código base y generar AGENTS.md",
 		"command.fork.description": "Bifurcar la sesión actual",
@@ -400863,6 +400868,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Recharger uniquement les paramètres de l’interface",
 		"command.compact.description": "Compacter le contexte de la conversation",
 		"command.goal.description": "Démarrer ou gérer un objectif autonome",
+		"command.idea.description": "Démarrer ou gérer une idée autonome",
 		"command.loop.description": "Démarrer ou gérer une demande récurrente",
 		"command.init.description": "Analyser la base de code et générer AGENTS.md",
 		"command.fork.description": "Créer une branche de la session actuelle",
@@ -400920,6 +400926,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Läs bara in gränssnittsinställningarna på nytt",
 		"command.compact.description": "Komprimera konversationskontexten",
 		"command.goal.description": "Starta eller hantera ett autonomt mål",
+		"command.idea.description": "Starta eller hantera en självständig idé",
 		"command.loop.description": "Starta eller hantera en återkommande prompt",
 		"command.init.description": "Analysera kodbasen och skapa AGENTS.md",
 		"command.fork.description": "Förgrena den aktuella sessionen",
@@ -400977,6 +400984,7 @@ registerUiCatalogFragment({
 		"command.reload-tui.description": "Znovu načíst pouze nastavení rozhraní",
 		"command.compact.description": "Komprimovat kontext konverzace",
 		"command.goal.description": "Spustit nebo spravovat autonomní cíl",
+		"command.idea.description": "Spustit nebo spravovat autonomní nápad",
 		"command.loop.description": "Spustit nebo spravovat opakované zadání",
 		"command.init.description": "Analyzovat kódovou základnu a vygenerovat AGENTS.md",
 		"command.fork.description": "Vytvořit větev aktuální relace",
@@ -401389,7 +401397,7 @@ const BUILTIN_SLASH_COMMAND_DEFINITIONS = [
 	{
 		name: "idea",
 		aliases: [],
-		descriptionKey: "command.goal.description",
+		descriptionKey: "command.idea.description",
 		priority: 80,
 		argumentHint: "<objective>",
 		availability: (args) => {
@@ -420130,6 +420138,7 @@ async function handleGoalCommand(host, args) {
 			return;
 	}
 }
+const IDEA_CONTRACT_MARKER = "Work as a self-directing employee:";
 const IDEA_ALLOWED_CHANNELS = Object.freeze([]);
 const IDEA_TERMINAL_TODO_STATUSES = Object.freeze([
 	"done",
@@ -420137,6 +420146,77 @@ const IDEA_TERMINAL_TODO_STATUSES = Object.freeze([
 	"waiting_approval",
 	"aborted"
 ]);
+const IDEA_OUTBOUND_TOOL_LEAF = /(?:^|_)(?:send|reply|post|publish|upload|purchase|buy|register|signup|merge|push|deploy|create_(?:account|user|issue|pull|pr|comment|post|order|campaign|repo(?:sitory)?)|update_(?:issue|pull|pr|comment|post)|delete_(?:issue|pull|pr|comment|post|account|user)|release)(?:_|$)/iu;
+const IDEA_OUTBOUND_SHELL = /(?:\bgit\s+push\b|\bnpm\s+publish\b|\bgh\s+(?:pr|issue|release)\s+(?:create|edit|comment|merge|delete)\b|\b(?:ssh|scp|rsync)\b|\bSend-MailMessage\b|\b(?:curl|wget)\b[^\r\n]*(?:-X|--request)\s*(?:POST|PUT|PATCH|DELETE)\b|\bInvoke-(?:WebRequest|RestMethod)\b[^\r\n]*-Method\s+(?:POST|PUT|PATCH|DELETE)\b)/iu;
+function isIdeaGoal(agent) {
+	const goal = agent.goal.getActiveGoal();
+	return goal !== null && goal.completionCriterion?.includes(IDEA_CONTRACT_MARKER) === true;
+}
+function ideaTodos(agent) {
+	const value = agent.tools.store?.["todo"];
+	return Array.isArray(value) ? value : [];
+}
+function validInitialIdeaPlan(value) {
+	if (!Array.isArray(value) || value.length === 0) return false;
+	let active = 0;
+	for (const todo of value) {
+		if (typeof todo !== "object" || todo === null || typeof todo.title !== "string" || todo.title.trim().length === 0) return false;
+		if (todo.status === "in_progress") active += 1;
+		else if (todo.status !== "pending") return false;
+	}
+	return active === 1;
+}
+function ideaOutboundChannel(toolName, args) {
+	if (toolName === "Bash") {
+		const command = typeof args?.command === "string" ? args.command : "";
+		return IDEA_OUTBOUND_SHELL.test(command) ? "shell-external" : void 0;
+	}
+	if (!toolName.startsWith("mcp__")) return void 0;
+	const lower = toolName.toLowerCase();
+	if (lower.includes("blun_language_guard")) return void 0;
+	const leaf = lower.split("__").at(-1) ?? lower;
+	if (!IDEA_OUTBOUND_TOOL_LEAF.test(leaf)) return void 0;
+	for (const channel of ["telegram", "github", "reddit", "linkedin", "instagram", "facebook", "youtube", "gmail", "email", "smtp", "canva"]) if (lower.includes(channel)) return channel;
+	return lower.split("__")[1] ?? "external";
+}
+function enforceIdeaToolPolicy(agent, context) {
+	if (!isIdeaGoal(agent)) return;
+	const todos = ideaTodos(agent);
+	const batchKey = `${String(context.turnId)}:${String(context.stepNumber)}`;
+	if (todos.length === 0) {
+		const firstCall = context.toolCalls[0];
+		if (context.toolCall.id !== firstCall?.id || context.toolCall.name !== "TodoList") return {
+			block: true,
+			reason: "Idea mode requires TodoList to be the first tool call. Publish the visible plan before research or action."
+		};
+		if (!validInitialIdeaPlan(context.args?.todos)) return {
+			block: true,
+			reason: "The first Idea TodoList must contain at least one item, exactly one in_progress item, and only pending items otherwise."
+		};
+		agent.ideaPlanBatchKey = batchKey;
+		return;
+	}
+	if (agent.ideaPlanBatchKey === batchKey && context.toolCall.name !== "TodoList") return {
+		block: true,
+		reason: "Idea mode publishes its plan in a separate first step. Continue research or action in the next step."
+	};
+	if (context.toolCall.name === "UpdateGoal" && (context.args?.status === "complete" || context.args?.status === "blocked")) {
+		if (todos.some((todo) => !IDEA_TERMINAL_TODO_STATUSES.includes(todo.status))) return {
+			block: true,
+			reason: "Idea mode cannot finish while a plan item has no truthful terminal status."
+		};
+		if (context.args.status === "complete" && todos.some((todo) => todo.status !== "done")) return {
+			block: true,
+			reason: "Idea mode can complete only when every plan item is done. Use blocked when any item is blocked, waiting_approval, or aborted."
+		};
+	}
+	const channel = ideaOutboundChannel(context.toolCall.name, context.args);
+	if (channel === void 0 || IDEA_ALLOWED_CHANNELS.includes(channel)) return;
+	return {
+		block: true,
+		reason: `Idea mode blocked an external action on channel "${channel}". Prepare the result, mark the step waiting_approval with the required access or approval, and ask the user.`
+	};
+}
 function buildIdeaPrompt(objective) {
 	const allowedChannels = IDEA_ALLOWED_CHANNELS.length === 0 ? "none" : IDEA_ALLOWED_CHANNELS.join(", ");
 	return `<idea-mode>
@@ -420149,7 +420229,7 @@ ${buildIdeaContract(allowedChannels)}
 </idea-mode>`;
 }
 function buildIdeaContract(allowedChannels = IDEA_ALLOWED_CHANNELS.length === 0 ? "none" : IDEA_ALLOWED_CHANNELS.join(", ")) {
-	return `Work as a self-directing employee: discover a useful route, research current examples and real user problems when relevant, decide, implement reversible local work, verify results, and keep going without waiting for step-by-step instructions.
+	return `${IDEA_CONTRACT_MARKER} discover a useful route, research current examples and real user problems when relevant, decide, implement reversible local work, verify results, and keep going without waiting for step-by-step instructions.
 
 Maintain the task-specific plan in TodoList. Keep exactly one item in_progress. Every plan item must end in exactly one truthful terminal status from: ${IDEA_TERMINAL_TODO_STATUSES.join(", ")}. A blocked title must include the reason and what would unblock it. A waiting_approval title must include the prepared result and the exact approval needed. An aborted title must include the last reached state.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.52",
+  "version": "9.1.53",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {