blun-king-cli 9.1.565 → 9.1.567

package/LIESMICH.txt

@@ -1,7 +1,7 @@
-BLUN Code 9.1.563
+BLUN Code 9.1.566
 
 Installation:
-  npm install -g blun-king-cli@9.1.563
+  npm install -g blun-king-cli@9.1.566
 
 Start:
   blun

package/README.md

@@ -11,7 +11,7 @@ web tools, MCP servers, and an optional Telegram channel.
 ## Install
 
 ```sh
-npm install -g blun-king-cli@9.1.563
+npm install -g blun-king-cli@9.1.566
 ```
 
 Start the local console with:

package/agent-spine-plugin/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "agent-spine",
       "source": ".",
       "description": "Map existing rules, soul, and memory without rewriting source files.",
-      "version": "0.54.0",
+      "version": "0.59.1",
       "author": {
         "name": "Mayk Biletti"
       },

package/agent-spine-plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-spine",
-  "version": "0.54.0",
+  "version": "0.59.1",
   "description": "A non-destructive identity and memory spine for Claude Code agents.",
   "author": {
     "name": "Mayk Biletti",

package/agent-spine-plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-spine",
-  "version": "0.54.0",
+  "version": "0.59.1",
   "description": "A non-destructive identity and memory spine for Codex agents.",
   "author": {
     "name": "Mayk Biletti",

package/agent-spine-plugin/README.md

@@ -92,6 +92,18 @@ claude --plugin-dir .
 
 Claude Code discovers the bundled skill, hooks, and MCP server. Review and trust executable components when the host asks.
 
+Version `0.59.1` keeps every lifecycle hook available when a bounded filesystem scan encounters an inaccessible directory. Scanner-tagged failures and raw `EPERM` or `EACCES` directory-enumeration errors return success from `PreToolUse`, `PostToolUse`, `Stop`, and `SubagentStop`, while recording the event, phase, code, and path locally. Security decisions remain fail closed. Starting at the exact Claude, Codex, or BLUN profile root also suppresses project and self-starter recursion through that profile; a real nested project is still scanned normally.
+
+Version `0.59.0` adds bounded, outcome-driven exploration to durable plan execution. An owner-confirmed step can freeze two to four attempts; after an objectively measured non-blocking failure, AgentSpine tries exactly one remaining sufficient strategy from the same minimum-risk class. The host receives an immutable attempt number, strategy, budget and previous-outcome digest. Missing or reused evidence, a blocking defect, budget exhaustion and any attempt to enter a higher-risk class stop fail closed. Exploration remains context only and cannot grant tools, permissions or policy exceptions.
+
+Version `0.58.0` transfers objectively successful execution strategies to new scope-matching plan steps. A transfer needs two independent passing goals with distinct source digests, the same capability and evaluator contract, an unexpired owner-bound transfer key, and no matching regression. It may break cost ties only inside the lowest-risk sufficient strategy class. A single blocking defect withdraws the strategy from future tasks, while foreign groups, stale evidence and fabricated proof lineages receive the ordinary unproven choice. Transfer records contain only stable IDs, timestamps and digests and never grant tools or authority.
+
+Version `0.57.0` adds bounded execution-strategy selection and objective post-action reflection to durable plan steps. An owner-confirmed plan precommits required capability classes, two to eight candidate strategies, risk and cost, plus an evaluator, metric, threshold and minimum case count. AgentSpine selects the lowest-risk sufficient strategy deterministically and will not complete the step from a model or runner self-report alone. The exact strategy and a SHA-256-bound objective outcome must pass; a blocking defect overrides a favorable score. These capability labels remain context only and cannot grant host tools or authority.
+
+Version `0.56.0` adds deterministic shared-resource conflict resolution to durable team plans. A step may declare bounded resource IDs in its immutable definition; while that step is leased, only conflicting work in the exact project and group waits. The highest current owner-confirmed goal priority wins even if mutable queue state is altered, while unrelated resources and foreign groups continue in parallel. Resource waits are visible only in the affected agent's scoped gateway context, and completion or lease-expiry recovery releases the resource without granting any tool or authority.
+
+Version `0.55.0` adds provider-neutral team execution to durable goal plans. Each dependent step can be bound to a different already-authenticated agent in the same tenant and exact project group, so a plan can move from Codex to Claude and back while preserving one immutable dependency graph, checkpoint chain and objective success criteria. Queue creation, claim, host/profile routing and completion all verify the same step assignee. Foreign-group members, identity drift and assignment tampering fail closed; a departed assignee pauses the exact step before host execution. Historical single-agent plans remain compatible, and plan context never grants tools, delegation or policy exceptions.
+
 Version `0.54.0` adds durable, evidence-classified knowledge-gap handling to hierarchical goal plans. A host can pause the exact current step with one bounded question and an objective reason; reconciliation does not ask again, and the step resumes only after an exact locally confirmed answer. Owner input and objective observations remain distinct, objective answers require a SHA-256 source digest, and every answer is context-only. Conflicts, state tampering, secrets and authority-shaped answers fail closed.
 
 Version `0.53.0` adds durable hierarchical goal plans to the optional gateway worker. An owner can precommit a bounded dependency graph of objective steps; the worker leases only the current ready step, advances after its explicit success result, resumes the exact step after restart, and reconstructs one missing wake after a torn write. Cycles, definition drift and stale-step completion fail closed, while the plan remains context-only and cannot grant tools, rights or delegation.
@@ -257,7 +269,7 @@ Read the full [preservation contract](docs/preservation-contract.md), including
 | `agentspine channel-events …` | Inspect the exact-scope durable ingress queue and leases |
 | `agentspine persona-sync …` | Synchronize an explicitly approved external authenticated roster |
 | `agentspine personas …` | Inspect active and historical persona identities and provenance |
-| `agentspine goal-assign …` | Assign one authenticated focused goal or dependency-bound plan to an active agent |
+| `agentspine goal-assign …` | Assign one focused goal or an authenticated multi-agent dependency plan |
 | `agentspine goal-clarify …` | Resolve one exact plan-bound knowledge gap with locally confirmed context |
 | `agentspine gateway-control …` | Enable, stop, or kill-switch the local worker under explicit owner control |
 | `agentspine gateway-status …` | Inspect goals, queue, delivery receipts, and independent health gates |

package/agent-spine-plugin/blun.plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-spine",
-  "version": "0.54.0",
+  "version": "0.59.1",
   "description": "A non-destructive identity and memory spine for BLUN King agents.",
   "license": "Apache-2.0",
   "author": {

package/agent-spine-plugin/hooks/version.json

@@ -1,5 +1,5 @@
 {
   "schema": "agentspine.hook-bundle/v1",
-  "version": "0.54.0",
+  "version": "0.59.1",
   "contract": "agentspine.preflight/v2"
 }

package/agent-spine-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-spine",
-  "version": "0.54.0",
+  "version": "0.59.1",
   "description": "A non-destructive identity and memory spine for AI agents.",
   "type": "module",
   "bin": {

package/agent-spine-plugin/src/hook.js

@@ -253,8 +253,8 @@ function sessionId(input) {
 async function startSelfstarter(input, event, root, scope, sourceDiagnostics) {
   if (!SELFSTART_EVENTS.has(event)) return null;
   const requested = selfstarterInput(input);
-  if (["skipped-unmarked-home", "skipped-home-root"].includes(sourceDiagnostics?.projectTreeScan)) {
-    if (requested) throw new Error("self-starter cannot use a user home as its workspace root");
+  if (selfstarterRootSkipped(sourceDiagnostics)) {
+    if (requested) throw new Error("self-starter cannot use a user home or host profile as its workspace root");
     return null;
   }
   const session = sessionId(input);
@@ -269,6 +269,11 @@ async function startSelfstarter(input, event, root, scope, sourceDiagnostics) {
   });
 }
 
+function selfstarterRootSkipped(sourceDiagnostics) {
+  return ["skipped-unmarked-home", "skipped-home-root", "skipped-profile-root"]
+    .includes(sourceDiagnostics?.projectTreeScan);
+}
+
 async function startChannelEvent(input, event, root, scope, catalog) {
   const requested = channelEventInput(input);
   if (!requested) return null;
@@ -476,20 +481,14 @@ function isScanFailOpenTool(name = "") {
   return /(^|__)(apply_patch|edit|write|bash|exec_command)(_|$)/i.test(name);
 }
 
-const RAW_SCAN_ERROR_CODES = new Set(["EPERM", "EACCES"]);
-const RAW_SCAN_SYSCALLS = new Set(["opendir", "readdir", "scandir", "lstat", "stat", "realpath"]);
-
 function filesystemScanError(error) {
-  if (!error) return false;
-  if (error.code === "AGENTSPINE_SCAN_INCOMPLETE" || error.agentSpineScan === true) return true;
-  return RAW_SCAN_ERROR_CODES.has(error.code)
-    && RAW_SCAN_SYSCALLS.has(error.syscall)
-    && typeof error.path === "string"
-    && error.path.length > 0;
+  return Boolean(error && (error.code === "AGENTSPINE_SCAN_INCOMPLETE" || error.agentSpineScan === true));
 }
 
-export function hookScanFailureFailsOpen(_event, _toolName, error) {
-  return filesystemScanError(error);
+export function hookScanFailureFailsOpen(eventOrError, _toolName, suppliedError) {
+  const error = suppliedError ?? eventOrError;
+  return filesystemScanError(error) || (["EPERM", "EACCES"].includes(error?.code)
+    && ["opendir", "readdir", "scandir"].includes(error?.syscall));
 }
 
 async function auditSkippedScans(input, phase, skipped = []) {
@@ -503,12 +502,19 @@ async function auditSkippedScans(input, phase, skipped = []) {
 }
 
 async function allowScanFailure(input, phase, error) {
+  const event = input.hook_event_name || input.event_name || "unknown";
   await recordHookScanAudit({
-    event: input.hook_event_name || input.event_name || "unknown",
-    toolName: input.tool_name || null, phase, error,
+    event, toolName: input.tool_name || null, phase, error,
     path: error?.path || input.cwd || process.cwd(), now: input.timestamp || new Date()
   });
-  return { blocked: false, scanFailedOpen: true, phase, error: error.message };
+  return { blocked: false, scanFailedOpen: true, event, phase, error: error.message };
+}
+
+async function finishScanFailure(input, payload, phase, error) {
+  const allowed = await allowScanFailure(input, phase, error);
+  if (payload) return allowed;
+  process.stdout.write("{}\n");
+  return undefined;
 }
 
 function stringValues(value, output = []) {
@@ -553,7 +559,7 @@ function blockPrompt(reason) {
   })}\n`);
 }
 
-async function runHookWithInput(input, payload) {
+async function runHookCore(input, payload) {
   if (!input || typeof input !== "object" || Array.isArray(input)) throw new Error("hook input must be one JSON object");
   const event = input.hook_event_name || input.event_name || "";
   if (!KNOWN_EVENTS.has(event)) throw new Error(`unsupported hook event: ${event || "missing"}`);
@@ -583,11 +589,8 @@ async function runHookWithInput(input, payload) {
   try {
     resolvedSources = await resolveHostSourceCatalog({ host: instructionHost, cwd, input });
   } catch (error) {
-    if (hookScanFailureFailsOpen(event, input.tool_name, error)) {
-      const allowed = await allowScanFailure(input, "source-resolution", error);
-      if (payload) return allowed;
-      process.stdout.write("{}\n");
-      return;
+    if (hookScanFailureFailsOpen(error)) {
+      return finishScanFailure(input, payload, "source-resolution", error);
     }
     const reason = `AgentSpine source resolution failed closed: ${error.message}`;
     if (event === "PreToolUse" && isMutationTool(input.tool_name)) {
@@ -661,7 +664,7 @@ async function runHookWithInput(input, payload) {
     }
   }
 
-  if (event === "PreToolUse") {
+  if (event === "PreToolUse" && !selfstarterRootSkipped(resolvedSources.diagnostics)) {
     try {
       scope ||= await runtimeScope(input, root, resolvedSources.userStateRoot, catalog);
       const exact = await selfstarterScope(input, scope, root, "effect");
@@ -672,11 +675,8 @@ async function runHookWithInput(input, payload) {
         });
       }
     } catch (error) {
-      if (isScanFailOpenTool(input.tool_name) && filesystemScanError(error)) {
-        const allowed = await allowScanFailure(input, "self-starter", error);
-        if (payload) return allowed;
-        process.stdout.write("{}\n");
-        return;
+      if (isScanFailOpenTool(input.tool_name) && hookScanFailureFailsOpen(error)) {
+        return finishScanFailure(input, payload, "self-starter", error);
       }
       const reason = `AgentSpine self-starter denied this effect: ${error.message}`;
       if (payload) return { blocked: true, reason, selfstarter: { allowed: false, reason: error.message } };
@@ -691,7 +691,7 @@ async function runHookWithInput(input, payload) {
     attentionEvent = await captureAttentionLifecycle(input, event, root, scope, catalog);
   }
 
-  if (event === "PostToolUse") {
+  if (event === "PostToolUse" && !selfstarterRootSkipped(resolvedSources.diagnostics)) {
     scope ||= await runtimeScope(input, root, resolvedSources.userStateRoot, catalog);
     const exact = await selfstarterScope(input, scope, root, "effect");
     if (exact) {
@@ -704,7 +704,8 @@ async function runHookWithInput(input, payload) {
 
   if (["Stop", "SubagentStop"].includes(event)) {
     scope ||= await runtimeScope(input, root, resolvedSources.userStateRoot, catalog);
-    const exact = await selfstarterScope(input, scope, root, "resume");
+    const exact = selfstarterRootSkipped(resolvedSources.diagnostics)
+      ? null : await selfstarterScope(input, scope, root, "resume");
     if (exact && !scope.currentTaskId) scope.currentTaskId = exact.taskId;
     try {
       learningDelivery = await recordLearningDeliveries({
@@ -826,15 +827,12 @@ async function runHookWithInput(input, payload) {
       process.stdout.write(`${JSON.stringify(hookOutput(event, context))}\n`);
       return;
     } catch (error) {
+      if (hookScanFailureFailsOpen(error)) {
+        return finishScanFailure(input, payload, "context-lifecycle", error);
+      }
       if (event === "UserPromptSubmit") {
         await recordPreflightFailure({ receiptId: preflight?.receipt?.id || null, input, host,
           error, now: input.timestamp || new Date(), env: process.env }).catch(() => {});
-        if (hookScanFailureFailsOpen(event, input.tool_name, error)) {
-          const allowed = await allowScanFailure(input, "preflight", error);
-          if (payload) return { ...allowed, catalogPath };
-          process.stdout.write("{}\n");
-          return;
-        }
         const reason = `AgentSpine pre-answer preflight blocked this turn: ${error.message}`;
         if (payload) return { blocked: true, failedClosed: true, reason, error: error.message, catalogPath };
         blockPrompt(reason);
@@ -859,16 +857,14 @@ async function runHookWithInput(input, payload) {
 }
 
 export async function runHook(payload = null, options = {}) {
-  const input = payload || await readStdin(options);
-  if (input === SILENT_OVERSIZE_POST_TOOL_USE) return;
+  let input = payload;
   try {
-    return await runHookWithInput(input, payload);
+    input ||= await readStdin(options);
+    if (input === SILENT_OVERSIZE_POST_TOOL_USE) return;
+    return await runHookCore(input, payload);
   } catch (error) {
-    const event = input?.hook_event_name || input?.event_name || "";
-    if (!hookScanFailureFailsOpen(event, input?.tool_name, error)) throw error;
-    const allowed = await allowScanFailure(input, "hook-runtime", error);
-    if (payload) return allowed;
-    process.stdout.write("{}\n");
+    if (!hookScanFailureFailsOpen(error) || input === SILENT_OVERSIZE_POST_TOOL_USE) throw error;
+    return finishScanFailure(input, payload, "lifecycle", error);
   }
 }
 

package/agent-spine-plugin/src/index.js

@@ -45,9 +45,10 @@ export {
   personaRuntimeFindings, syncPersonaRosterFromEnvironment
 } from "./lib/persona-runtime.js";
 export {
-  GATEWAY_EVENT_SCHEMA, GATEWAY_POLICY_SCHEMA, GATEWAY_RUNTIME_SCHEMA, GOAL_PLAN_SCHEMA, KNOWLEDGE_GAP_SCHEMA,
+  EXECUTION_ATTEMPT_SCHEMA, GATEWAY_EVENT_SCHEMA, GATEWAY_POLICY_SCHEMA, GATEWAY_RUNTIME_SCHEMA,
+  GOAL_PLAN_SCHEMA, KNOWLEDGE_GAP_SCHEMA,
   assignGoal, claimGatewayWork, completeGatewayRun, deliverPrepared,
-  enqueueGatewayWake, gatewayContext, gatewayRuntimeFindings,
+  enqueueGatewayWake, executionAttemptForStep, gatewayContext, gatewayRuntimeFindings,
   inspectGatewayRuntime, loadGatewayRuntime, reconcileGateway, resolveGoalKnowledgeGap, setGatewayControl
 } from "./lib/gateway-runtime.js";
 export { createTelegramAdapter } from "./lib/telegram-adapter.js";