blun-king-cli 9.1.536 → 9.1.561

package/fredrik-glm-profile.toml.example

@@ -1,26 +0,0 @@
-# Add only to Fredrik's active profile config.toml. Keep King as the default.
-
-[providers."fredrik:zai"]
-type = "openai_compatible"
-base_url = "https://api.z.ai/api/coding/paas/v4"
-api_key_file = "secrets/zai-api-key.txt"
-
-[models."fredrik/glm-5.3-flash"]
-provider = "fredrik:zai"
-model = "glm-5.3-flash"
-display_name = "GLM 5.3 Flash"
-max_context_size = 1000000
-max_output_size = 128000
-capabilities = ["tool_use", "always_thinking"]
-support_efforts = ["low", "high", "max"]
-default_effort = "max"
-
-[models."fredrik/glm-5.3"]
-provider = "fredrik:zai"
-model = "glm-5.3"
-display_name = "GLM 5.3"
-max_context_size = 1000000
-max_output_size = 128000
-capabilities = ["tool_use", "always_thinking"]
-support_efforts = ["low", "high", "max"]
-default_effort = "max"

package/release-planned-removals.json

@@ -1,15 +0,0 @@
-{
-  "version": "9.1.393",
-  "removals": [
-    {
-      "path": "package/bin/running-update.cjs",
-      "reason": "Background updater removed by owner decision; the visible manual startup picker remains.",
-      "decisionRef": "Telegram DM 5597, 5603, 5610, 5614 and 5619, 2026-08-28"
-    },
-    {
-      "path": "package/bin/running-update-preference.cjs",
-      "reason": "Background updater preference removed with the background updater; manual startup choices remain.",
-      "decisionRef": "Telegram DM 5597, 5603, 5610, 5614 and 5619, 2026-08-28"
-    }
-  ]
-}

package/scripts/check-active-profile-plugin-startup.js

@@ -1,36 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-
-const { installAgentSpineForExistingProfiles } = require('../bin/launcher-runtime');
-
-const packageRoot = path.resolve(__dirname, '..');
-const temporaryRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'blun-active-profile-plugin-'));
-const sharedHome = path.join(temporaryRoot, '.blun');
-const currentProfile = path.join(sharedHome, 'profile', 'current');
-const dormantProfile = path.join(sharedHome, 'profile', 'dormant');
-
-try {
-  fs.mkdirSync(currentProfile, { recursive: true });
-  fs.mkdirSync(dormantProfile, { recursive: true });
-
-  installAgentSpineForExistingProfiles(packageRoot, sharedHome, currentProfile);
-
-  assert.equal(
-    fs.existsSync(path.join(currentProfile, 'plugins', 'installed.json')),
-    true,
-    'the active profile must receive the managed AgentSpine plugin',
-  );
-  assert.equal(
-    fs.existsSync(path.join(dormantProfile, 'plugins', 'installed.json')),
-    false,
-    'startup must not rescan or mutate dormant profiles',
-  );
-
-  process.stdout.write('active profile plugin startup regression: PASS\n');
-} finally {
-  fs.rmSync(temporaryRoot, { recursive: true, force: true });
-}

package/scripts/check-active-work-steer-regression.js

@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-const packageRoot = process.env.BLUN_PACKAGE_UNDER_TEST
-  ? path.resolve(process.env.BLUN_PACKAGE_UNDER_TEST)
-  : path.resolve(__dirname, '..');
-const policy = require(path.join(packageRoot, 'bin', 'turn-thinking-policy.cjs'));
-const bundle = fs.readFileSync(path.join(packageRoot, 'blun.mjs'), 'utf8');
-
-function assert(condition, message) {
-  if (!condition) throw new Error(`ACTIVE_WORK_STEER_REGRESSION: ${message}`);
-}
-
-assert(
-  policy.selectThinkingEffortForTurn('Wo stehst du?', 'user') === 'low',
-  'an idle standalone status question must retain the fast conversation path',
-);
-
-for (const text of [
-  'Wo stehst du?',
-  'Kurzes Update',
-  'Danke, gute Arbeit',
-]) {
-  assert(
-    policy.selectThinkingEffortForBufferedSteer(text, 'user') === undefined,
-    `buffered active-work steer must preserve the running turn: ${text}`,
-  );
-}
-
-assert(
-  bundle.includes('if (steerEfforts.some((effort) => effort === void 0)) return;'),
-  'active-work steers no longer fall through to the running turn configuration',
-);
-assert(
-  bundle.includes('additionalMessages: steers.messages,'),
-  'preserved active-work steers are not appended to the next model request',
-);
-assert(
-  bundle.includes('this.turn.commitPendingSteers(steers);'),
-  'preserved active-work steers are not committed after request assembly',
-);
-
-process.stdout.write('active-work-steer-regression PASS\n');

package/scripts/check-approval-observability-regression.js

@@ -1,111 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const packageRoot = path.resolve(__dirname, '..');
-const bundlePath = process.env.BLUN_BUNDLE_UNDER_TEST
-  ? path.resolve(process.env.BLUN_BUNDLE_UNDER_TEST)
-  : path.join(packageRoot, 'blun.mjs');
-const relayPath = process.env.BLUN_APPROVAL_RELAY_UNDER_TEST
-  ? path.resolve(process.env.BLUN_APPROVAL_RELAY_UNDER_TEST)
-  : path.join(packageRoot, 'bin', 'telegram-approval-relay.cjs');
-const pluginRelayPath = process.env.BLUN_PLUGIN_APPROVAL_RELAY_UNDER_TEST
-  ? path.resolve(process.env.BLUN_PLUGIN_APPROVAL_RELAY_UNDER_TEST)
-  : path.join(packageRoot, 'telegram-plugin', 'bin', 'telegram-approval-relay.cjs');
-
-const bundle = fs.readFileSync(bundlePath, 'utf8');
-const requestToolApproval = bundle.match(
-  /async requestToolApproval\(context, result, policyName\) \{[\s\S]*?\n\t\t\}/,
-);
-assert(requestToolApproval, 'APPROVAL_OBSERVABILITY_REGRESSION: requestToolApproval is missing');
-assert.match(
-  requestToolApproval[0],
-  /this\.agent\.records\.logRecord\(\{[\s\S]*?type: "permission\.approval_requested"[\s\S]*?toolCallId: id[\s\S]*?toolName: name/,
-  'APPROVAL_OBSERVABILITY_REGRESSION: opening an approval is invisible in the wire',
-);
-assert(
-  requestToolApproval[0].indexOf('type: "permission.approval_requested"')
-    < requestToolApproval[0].indexOf('await this.agent.rpc.requestApproval'),
-  'APPROVAL_OBSERVABILITY_REGRESSION: approval wire event is emitted too late',
-);
-
-const ApprovalProbe = Function(`return class ApprovalProbe {${requestToolApproval[0]}};`)();
-const wireRecords = [];
-const probe = new ApprovalProbe();
-probe.agent = {
-  records: { logRecord(record) { wireRecords.push(record); } },
-  rpc: { async requestApproval() { return { decision: 'approved' }; } },
-  hooks: { fireAndForgetTrigger() {} },
-  telemetry: { track() {} },
-};
-probe.recordApprovalResult = () => {};
-probe.permissionPolicyResolutionToPrepare = () => undefined;
-probe.formatApprovalRejectionMessage = () => '';
-
-const approvalRun = probe.requestToolApproval({
-  signal: new AbortController().signal,
-  turnId: 7,
-  toolCall: { id: 'tool-7', name: 'Bash' },
-  execution: {
-    description: 'Run command',
-    display: { kind: 'command', command: 'echo ok' },
-  },
-  args: { command: 'echo ok' },
-}, {}, 'manual-approval');
-assert.equal(wireRecords.length, 1, 'approval request must be written before awaiting a response');
-assert.deepEqual(
-  wireRecords[0],
-  {
-    type: 'permission.approval_requested',
-    turnId: 7,
-    toolCallId: 'tool-7',
-    toolName: 'Bash',
-    action: 'Run command',
-    display: { kind: 'command', command: 'echo ok' },
-    policyName: 'manual-approval',
-  },
-  'approval wire record lost identifying fields',
-);
-
-function checkRelay(modulePath, label) {
-  delete require.cache[require.resolve(modulePath)];
-  const { resolveTelegramApprovalTarget } = require(modulePath);
-  assert.equal(
-    resolveTelegramApprovalTarget(['1605241602', '-1003927574737']),
-    '1605241602',
-    `${label}: one authorized private chat must be selected even when groups are also allowed`,
-  );
-  assert.equal(
-    resolveTelegramApprovalTarget(['0', '-1003927574737']),
-    null,
-    `${label}: zero is not a positive private Telegram chat ID`,
-  );
-  assert.equal(
-    resolveTelegramApprovalTarget(['1605241602', '8711923962', '-1003927574737']),
-    null,
-    `${label}: multiple authorized private chats must remain fail-closed`,
-  );
-  assert.equal(
-    resolveTelegramApprovalTarget(['1605241602', '8711923962'], '8711923962'),
-    '8711923962',
-    `${label}: an explicitly configured authorized chat must win`,
-  );
-  assert.equal(
-    resolveTelegramApprovalTarget(['1605241602'], '-1003927574737'),
-    null,
-    `${label}: an unauthorized configured chat must be rejected`,
-  );
-}
-
-checkRelay(relayPath, 'package relay');
-checkRelay(pluginRelayPath, 'plugin relay');
-
-approvalRun.then(() => {
-  process.stdout.write('approval-observability-regression PASS\n');
-}).catch((error) => {
-  process.stderr.write(`${error.stack || error.message}\n`);
-  process.exitCode = 1;
-});

package/scripts/check-approval-queue-shortcuts-regression.js

@@ -1,65 +0,0 @@
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const bundlePath = process.env.BLUN_BUNDLE_UNDER_TEST
-  || path.join(__dirname, '..', 'blun.mjs');
-const bundle = fs.readFileSync(bundlePath, 'utf8');
-
-function between(start, end, from = 0) {
-  const startIndex = bundle.indexOf(start, from);
-  assert.notEqual(startIndex, -1, `missing bundle marker: ${start}`);
-  const endIndex = bundle.indexOf(end, startIndex + start.length);
-  assert.notEqual(endIndex, -1, `missing bundle marker: ${end}`);
-  return bundle.slice(startIndex, endIndex);
-}
-
-const panelStart = bundle.indexOf('var ApprovalPanelComponent = class extends Container {');
-assert.notEqual(panelStart, -1, 'ApprovalPanelComponent must exist');
-const handleSource = between('\n\thandleInput(data) {', '\n\trender(width) {', panelStart).trim();
-
-const Key = {
-  escape: 'escape',
-  ctrl(key) { return `ctrl+${key}`; },
-};
-const matchesKey = (data, expected) => {
-  if (expected === 'escape') return data === '\x1b';
-  if (expected === 'ctrl+s') return data === '\x13';
-  return data === expected;
-};
-const handleInput = Function(
-  'matchesKey',
-  'Key',
-  `"use strict"; return ({${handleSource}}).handleInput;`,
-)(matchesKey, Key);
-
-let responses = 0;
-let flushed = 0;
-let released = 0;
-const panel = {
-  choiceCount() { return 0; },
-  onResponse(response) {
-    responses += 1;
-    assert.equal(response.response, 'rejected');
-  },
-  onCtrlS() { flushed += 1; },
-  onEscape() { released += 1; return true; },
-};
-
-handleInput.call(panel, '\x13');
-assert.equal(flushed, 1, 'Ctrl+S must reach the global queue flush while approval is open');
-assert.equal(responses, 0);
-
-handleInput.call(panel, '\x1b');
-assert.equal(released, 1, 'Escape must first release one queued message while approval is open');
-assert.equal(responses, 0, 'a released queued message must not reject the approval');
-
-panel.onEscape = () => false;
-handleInput.call(panel, '\x1b');
-assert.equal(responses, 1, 'Escape must reject the approval when no queued message waits');
-
-const showApprovalPanel = between('\n\tshowApprovalPanel(payload) {', '\n\thideApprovalPanel() {');
-assert.match(showApprovalPanel, /this\.flushQueuedMessages\(this\.state\.editor\.getText\(\)\.trim\(\), this\.state\.editor\.inputMode\)/);
-assert.match(showApprovalPanel, /return this\.releaseNextQueuedMessage\(\)/);
-
-console.log('approval queue shortcuts regression: PASS');

package/scripts/check-bundled-agent-spine-regression.js

@@ -1,48 +0,0 @@
-const assert = require('node:assert/strict');
-const { execFileSync } = require('node:child_process');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const expectedVersion = '0.11.4';
-const pluginRoot = process.env.BLUN_AGENT_SPINE_ROOT_UNDER_TEST
-  ? path.resolve(process.env.BLUN_AGENT_SPINE_ROOT_UNDER_TEST)
-  : path.resolve(__dirname, '..', 'agent-spine-plugin');
-
-function readJson(relativePath) {
-  return JSON.parse(fs.readFileSync(path.join(pluginRoot, relativePath), 'utf8'));
-}
-
-for (const relativePath of [
-  'package.json',
-  'hooks/version.json',
-  '.claude-plugin/plugin.json',
-  '.codex-plugin/plugin.json',
-  'blun.plugin.json',
-]) {
-  assert.equal(
-    readJson(relativePath).version,
-    expectedVersion,
-    `BUNDLED_AGENT_SPINE_REGRESSION: ${relativePath} must declare ${expectedVersion}`,
-  );
-}
-
-const runtimeVersion = execFileSync(
-  process.execPath,
-  [path.join(pluginRoot, 'bin', 'agentspine.js'), '--version'],
-  { encoding: 'utf8' },
-).trim();
-assert.equal(
-  runtimeVersion,
-  expectedVersion,
-  'BUNDLED_AGENT_SPINE_REGRESSION: packaged runtime version is stale',
-);
-
-for (const relativePath of ['CONTRIBUTING.md', 'SECURITY.md']) {
-  assert.equal(
-    fs.existsSync(path.join(pluginRoot, relativePath)),
-    true,
-    `BUNDLED_AGENT_SPINE_REGRESSION: README link target ${relativePath} is missing`,
-  );
-}
-
-console.log(`bundled-agent-spine-regression PASS (${expectedVersion})`);

package/scripts/check-codebase-search-packaging-regression.js

@@ -1,92 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const { spawnSync } = require('node:child_process');
-const { mkdtempSync, readFileSync, rmSync, writeFileSync } = require('node:fs');
-const { tmpdir } = require('node:os');
-const { join } = require('node:path');
-const { pathToFileURL } = require('node:url');
-
-const root = join(__dirname, '..');
-const bundlePath = join(root, 'blun.mjs');
-const scriptPath = join(root, 'codebase-index', 'codebase_index.py');
-const readmePath = join(root, 'codebase-index', 'README.md');
-const runtimePath = join(root, 'bin', 'codebase-search-runtime.cjs');
-
-function readUtf8(path) {
-  return readFileSync(path, 'utf8');
-}
-
-function pythonCommand() {
-  for (const command of ['python', 'python3']) {
-    const result = spawnSync(command, ['--version'], { encoding: 'utf8', windowsHide: true });
-    if (result.status === 0) return command;
-  }
-  throw new Error('CODEBASE_SEARCH_PYTHON_MISSING');
-}
-
-function assertPackageContract() {
-  const packageJson = JSON.parse(readUtf8(join(root, 'package.json')));
-  assert.ok(packageJson.files.includes('codebase-index/'), 'package files must include codebase-index/');
-  assert.ok(packageJson.scripts.prepack.includes('check-codebase-search-packaging-regression.js'), 'prepack must run the packaging gate');
-
-  const source = readUtf8(bundlePath);
-  assert.match(source, /resolveCodebaseIndexScript\(import\.meta\.url, process\.env\["CODEBASE_INDEX_SCRIPT"\]\)/u);
-  assert.match(source, /\.\/bin\/codebase-search-runtime\.cjs/u);
-  const start = source.indexOf('function resolveScriptPath()');
-  const end = source.indexOf('\nvar resolveCodebaseIndexScript', start);
-  assert.ok(start >= 0 && end > start, 'CodebaseSearch resolver region missing');
-  assert.doesNotMatch(source.slice(start, end), /\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/codebase-index/u, 'source-tree traversal must not survive packaging');
-}
-
-function assertResolverContract() {
-  const { resolveCodebaseIndexScript } = require(runtimePath);
-  const bundleUrl = pathToFileURL(bundlePath).href;
-  assert.equal(resolveCodebaseIndexScript(bundleUrl), scriptPath, 'default resolution must select the packaged script');
-
-  const temp = mkdtempSync(join(tmpdir(), 'blun-codebase-search-'));
-  try {
-    const override = join(temp, 'override.py');
-    writeFileSync(override, 'print("override")\n', 'utf8');
-    assert.equal(resolveCodebaseIndexScript(bundleUrl, override), override, 'existing absolute override must win');
-    assert.equal(resolveCodebaseIndexScript(bundleUrl, join(temp, 'missing.py')), '', 'missing override must fail closed');
-    assert.equal(resolveCodebaseIndexScript(bundleUrl, 'relative.py'), '', 'relative override must fail closed');
-    assert.equal(resolveCodebaseIndexScript('', override), '', 'missing module URL must fail closed');
-  } finally {
-    rmSync(temp, { recursive: true, force: true });
-  }
-}
-
-function assertPythonSource() {
-  const source = readUtf8(scriptPath);
-  assert.match(source, /def cmd_build\(repo: str\)/u);
-  assert.match(source, /def cmd_update\(repo: str\)/u);
-  assert.match(source, /def cmd_query\(repo: str, question: str, top: int\)/u);
-  assert.match(source, /HINWEIS: semantischer Index/u);
-  assert.match(readUtf8(readmePath), /fastembed/u);
-
-  const cache = mkdtempSync(join(tmpdir(), 'blun-codebase-pycache-'));
-  try {
-    const result = spawnSync(pythonCommand(), ['-m', 'py_compile', scriptPath], {
-      encoding: 'utf8',
-      env: { ...process.env, PYTHONPYCACHEPREFIX: cache },
-      windowsHide: true,
-    });
-    assert.equal(result.status, 0, `codebase_index.py syntax failed: ${result.stderr || result.stdout}`);
-  } finally {
-    rmSync(cache, { recursive: true, force: true });
-  }
-}
-
-function assertMutationCoverage() {
-  const runtime = readUtf8(runtimePath);
-  assert.match(runtime, /existsSync\(packaged\) \? packaged : ''/u, 'packaged path existence gate missing');
-  assert.match(runtime, /!isAbsolute\(envPath\) \|\| !existsSync\(envPath\)/u, 'override boundary missing');
-  assert.doesNotMatch(runtime, /process\.cwd/u, 'resolver must not search arbitrary working directories');
-}
-
-assertPackageContract();
-assertResolverContract();
-assertPythonSource();
-assertMutationCoverage();
-process.stdout.write('codebase-search-packaging PASS\n');

package/scripts/check-copy-command-regression.js

@@ -1,74 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-const vm = require('node:vm');
-
-const rootArg = process.argv.find((value) => value.startsWith('--root='));
-const packageRoot = rootArg ? path.resolve(rootArg.slice('--root='.length)) : path.resolve(__dirname, '..');
-const bundle = fs.readFileSync(path.join(packageRoot, 'blun.mjs'), 'utf8');
-
-function extractFunction(name) {
-  const start = bundle.indexOf(`function ${name}(`);
-  assert.notEqual(start, -1, `${name} must exist`);
-  const open = bundle.indexOf('{', start);
-  let depth = 0;
-  for (let index = open; index < bundle.length; index += 1) {
-    if (bundle[index] === '{') depth += 1;
-    if (bundle[index] === '}') depth -= 1;
-    if (depth === 0) return bundle.slice(start, index + 1);
-  }
-  assert.fail(`${name} must have a complete function body`);
-}
-
-assert.match(
-  bundle,
-  /name:\s*"copy"[\s\S]{0,180}descriptionKey:\s*"command\.copy\.description"[\s\S]{0,180}availability:\s*"always"/,
-  '/copy must be registered and available while a turn is running',
-);
-assert.match(bundle, /case "copy":\s*await handleCopyCommand\(host\);\s*return;/, '/copy must dispatch to its handler');
-assert.match(bundle, /await copyTextToClipboard\(text\);/, '/copy must use the existing cross-platform clipboard helper');
-
-const selectorSource = extractFunction('findLatestAssistantResponse');
-const findLatestAssistantResponse = vm.runInNewContext(`(${selectorSource})`);
-assert.equal(
-  findLatestAssistantResponse([
-    { kind: 'assistant', content: '  previous answer  ' },
-    { kind: 'user', content: 'question' },
-    { kind: 'assistant', content: '   ' },
-  ]),
-  '  previous answer  ',
-  'the selector must ignore user and empty assistant entries while preserving response bytes',
-);
-assert.equal(findLatestAssistantResponse([{ kind: 'user', content: 'question' }]), undefined);
-
-const requiredUiStrings = [
-  'Copy the latest assistant response to the clipboard.',
-  'Copied the latest response to the clipboard.',
-  'There is no response to copy yet.',
-  'Could not copy the latest response: {error}',
-  'Neueste Assistentenantwort in die Zwischenablage übernehmen.',
-  'Die neueste Antwort wurde in die Zwischenablage übernommen.',
-  'Es ist noch keine Antwort zum Kopieren verfügbar.',
-  'Die neueste Antwort konnte nicht kopiert werden: {error}',
-  'Copiar la respuesta más reciente del asistente al portapapeles.',
-  'La respuesta más reciente se copió al portapapeles.',
-  'Todavía no hay ninguna respuesta que copiar.',
-  'No se pudo copiar la respuesta más reciente: {error}',
-  'Copier la réponse la plus récente de l’assistant dans le presse-papiers.',
-  'La réponse la plus récente a été copiée dans le presse-papiers.',
-  'Aucune réponse à copier pour le moment.',
-  'Impossible de copier la réponse la plus récente : {error}',
-  'Kopiera assistentens senaste svar till urklipp.',
-  'Det senaste svaret kopierades till urklipp.',
-  'Det finns inget svar att kopiera ännu.',
-  'Det gick inte att kopiera det senaste svaret: {error}',
-  'Zkopírovat nejnovější odpověď asistenta do schránky.',
-  'Nejnovější odpověď byla zkopírována do schránky.',
-  'Zatím není k dispozici žádná odpověď ke zkopírování.',
-  'Nejnovější odpověď se nepodařilo zkopírovat: {error}',
-];
-for (const text of requiredUiStrings) assert.ok(bundle.includes(text), `missing released UI text: ${text}`);
-
-process.stdout.write('Copy command regression gate: PASS\n');

package/scripts/check-current-turn-read-pin-mutation-regression.js

@@ -1,72 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-const { spawnSync } = require('node:child_process');
-
-const packageRoot = path.resolve(__dirname, '..');
-const gatePath = path.join(packageRoot, 'scripts', 'check-current-turn-read-pin-regression.js');
-const sourcePolicy = fs.readFileSync(
-  path.join(packageRoot, 'bin', 'tool-result-offload-policy.cjs'),
-  'utf8',
-);
-const sourceBundle = fs.readFileSync(path.join(packageRoot, 'blun.mjs'), 'utf8');
-
-const mutations = [
-  {
-    name: 'policy helper removed',
-    policy: sourcePolicy.replace(
-      'function currentTurnReadToolResultIds(messages) {',
-      'function removedCurrentTurnReadToolResultIds(messages) {',
-    ),
-    bundle: sourceBundle,
-  },
-  {
-    name: 'injections accepted as user turns',
-    policy: sourcePolicy.replace(
-      "message?.role === 'user' && message.origin?.kind === 'user'",
-      "message?.role === 'user'",
-    ),
-    bundle: sourceBundle,
-  },
-  {
-    name: 'Read pin filter removed',
-    policy: sourcePolicy,
-    bundle: sourceBundle.replace(
-      ' && !pinnedReadIds.has(message.toolCallId)',
-      '',
-    ),
-  },
-  {
-    name: 'current user instruction no longer skipped',
-    policy: sourcePolicy,
-    bundle: sourceBundle.replace(
-      'if (historyIndex === currentTurnStart) continue;',
-      'if (false && historyIndex === currentTurnStart) continue;',
-    ),
-  },
-];
-
-for (const mutation of mutations) {
-  if (mutation.policy === sourcePolicy && mutation.bundle === sourceBundle) {
-    throw new Error(`mutation marker missing: ${mutation.name}`);
-  }
-  const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'blun-read-pin-mutation-'));
-  try {
-    fs.mkdirSync(path.join(tempRoot, 'bin'), { recursive: true });
-    fs.writeFileSync(path.join(tempRoot, 'bin', 'tool-result-offload-policy.cjs'), mutation.policy);
-    fs.writeFileSync(path.join(tempRoot, 'blun.mjs'), mutation.bundle);
-    const result = spawnSync(process.execPath, [gatePath], {
-      cwd: packageRoot,
-      encoding: 'utf8',
-      env: { ...process.env, BLUN_PACKAGE_UNDER_TEST: tempRoot },
-    });
-    if (result.status === 0) throw new Error(`gate accepted mutation: ${mutation.name}`);
-  } finally {
-    fs.rmSync(tempRoot, { recursive: true, force: true });
-  }
-}
-
-process.stdout.write(`current-turn-read-pin-mutation-regression PASS (${mutations.length} mutations rejected)\n`);