blun-king-cli 9.1.569 → 9.1.570

package/CHANGELOG.md

@@ -0,0 +1,33 @@
+# Changelog
+
+## 9.1.570
+
+### Fixed
+
+- Give each new prompt delivery a distinct hook correlation ID. Hooks for the same delivery retain the same ID; explicitly supplied IDs are preserved.
+- Pass session-specific runtime environment values to hook subprocesses and MCP connections, including reconnects, without rewriting stored plugin configuration.
+- Preserve native tool-result correlation across turns, including failed tools and duplicate calls.
+- Match canonically equivalent Unicode research queries without conflating different characters. Stored sources, dates, versions and project boundaries are preserved.
+- Keep `king --help` and `king --version` from changing Windows crash-dump registry settings.
+
+### Added
+
+- Support negotiated partial web-search results with a visible source-failure notice. Empty or incompatible partial responses remain explicit errors. This client change does not activate or guarantee a hosted search service.
+- Add the default-off `BLUN_EXPERIMENTAL_AGENT_SPINE_TIMELINE` transport. When explicitly enabled, it passes the actual persisted session-record path and protocol to the selected AgentSpine plugin, with a separate capability per session and a new capability after resume. This is transport support, not proof of recall or authorization by the receiving plugin.
+
+### Preserved
+
+- Includes the public 9.1.569 Telegram group mention routing, startup, permission persistence, research collection and crawler changes.
+- The bundled AgentSpine implementation is unchanged from public 9.1.569. No Mnemo dependency is introduced.
+- User profiles, permissions, conversations and plugin settings are not migrated or reset by this release.
+
+### Updating
+
+- Public-channel installations use `king update`.
+- Old packages explicitly pinned to the internal update channel do not discover public releases. Close the relevant King sessions, then migrate once with `npm install -g blun-king-cli@9.1.570`.
+- A Windows `EBUSY` rename failure means the installation did not complete. Identify the process holding the package before retrying; do not delete the package or terminate unrelated Node processes.
+
+## 9.1.569
+
+- Cumulative public release including Telegram group mention routing, startup and permission fixes, research collection, and crawler tooling.
+- Published artifacts are immutable. Later changes ship under a new version.

package/bin/core-bootstrap.js

@@ -12,7 +12,8 @@ const CORE_LOADED_MESSAGE = 'blun-core-bootstrap-loaded';
 async function runCoreBootstrap() {
   const packageRoot = path.resolve(__dirname, '..');
   const mainPath = path.join(packageRoot, 'blun.mjs');
-  installWindowsNodeCrashDump({ homeDir: process.env.BLUN_HOME });
+  const informational = process.argv.slice(2).some(arg => ['-h', '--help', '-V', '--version'].includes(arg));
+  if (!informational) installWindowsNodeCrashDump({ homeDir: process.env.BLUN_HOME });
   const leaseResult = await acquireSharedRuntimeLease({ packageRoot });
   if (!leaseResult.acquired) throw new Error('RUNTIME_PROTECTION_UNAVAILABLE');
 

package/blun.mjs

@@ -21351,7 +21351,15 @@ var init_types$14 = __esmMin((() => {}));
 //#region ../../packages/agent-core/src/flags/registry.ts
 var FLAG_DEFINITIONS;
 var init_registry$1 = __esmMin((() => {
-	FLAG_DEFINITIONS = [{
+	FLAG_DEFINITIONS = [
+{
+        id: 'agent_spine_timeline',
+        title: 'AgentSpine session transport',
+        description: 'Pass the current native record source to the enabled AgentSpine plugin.',
+        env: 'BLUN_EXPERIMENTAL_AGENT_SPINE_TIMELINE',
+        default: false,
+        surface: 'core',
+    },{
 		id: "vision_reader",
 		title: "Vision reader",
 		description: "Enrich user images with observations from a configured internal service.",
@@ -231318,10 +231326,9 @@ async function runHook(command, input, options) {
 			cwd: options.cwd,
 			stdio: "pipe",
 			detached: process.platform !== "win32",
-			env: options.env ? {
-				...process.env,
-				...options.env
-			} : void 0
+			env: options.env || options.runtimeEnv
+                ? overlayRuntimeEnv({ ...process.env, ...options.env }, options.runtimeEnv)
+                : undefined
 		});
 	} catch (error) {
 		return allowResult({ stderr: errorMessage$11(error) });
@@ -231659,28 +231666,44 @@ async prepareToolUse(args = {}) {
 			await Promise.allSettled([...this.pendingTriggers]);
 		}
 		async triggerInner(event, args) {
-			const matcherValue = matcherValueText(args.matcherValue);
-			const inputData = toHookInputData({
-				hookEventName: event,
-				sessionId: this.options.sessionId ?? "",
-				cwd: this.options.cwd ?? "",
-				...args.inputData
-			});
-			const matched = this.matchingHooks(event, matcherValue);
-			if (matched.length === 0) return [];
-			this.emitTriggered(event, matcherValue, matched.length);
-			const startedAt = Date.now();
-			const results = await createRequire(import.meta.url)("./bin/observer-hooks.cjs").runHookPhases(matched, (hook) => runHook(hook.command, inputData, {
-				timeout: hook.timeout ?? DEFAULT_HOOK_TIMEOUT_SECONDS,
-				cwd: hook.cwd ?? (this.options.cwd === "" ? void 0 : this.options.cwd),
-				env: hook.env,
-				signal: args.signal
-			}), args.signal);
-			for (const message of hookWarningMessages(results)) this.emitWarning(event, message);
-			const { action, reason } = aggregateResults(event, results);
-			this.emitResolved(event, matcherValue, action, reason, Date.now() - startedAt);
-			return results;
-		}
+        const matcherValue = matcherValueText(args.matcherValue);
+        const inputData = toHookInputData({
+            hookEventName: event,
+            sessionId: this.options.sessionId ?? '',
+            cwd: this.options.cwd ?? '',
+            ...args.inputData,
+        });
+        const matched = this.matchingHooks(event, matcherValue);
+        if (matched.length === 0)
+            return [];
+        if (event === 'UserPromptSubmit'
+            && !Object.hasOwn(inputData, 'event_id') && !Object.hasOwn(inputData, 'hook_event_id')) {
+            // One logical delivery, shared by every hook; explicit IDs preserve redelivery identity.
+            inputData['event_id'] = releasePromptUUID();
+        }
+        this.emitTriggered(event, matcherValue, matched.length);
+        const startedAt = Date.now();
+        const results = await Promise.all(matched.map(async (hook) => {
+            let runtimeEnv;
+            try {
+                runtimeEnv = this.options.runtimeEnv?.(hook);
+            }
+            catch {
+                // A resolver error may contain private values. Other hooks still run.
+                return { action: 'allow', stderr: 'Hook runtime environment is unavailable.' };
+            }
+            return runHook(hook.command, inputData, {
+                timeout: hook.timeout ?? DEFAULT_HOOK_TIMEOUT_SECONDS,
+                cwd: hook.cwd ?? (this.options.cwd === '' ? undefined : this.options.cwd),
+                env: hook.env,
+                runtimeEnv,
+                signal: args.signal,
+            });
+        }));
+        const { action, reason } = aggregateResults(event, results);
+        this.emitResolved(event, matcherValue, action, reason, Date.now() - startedAt);
+        return results;
+    }
 		matchingHooks(event, matcherValue) {
 			const seen = /* @__PURE__ */ new Set();
 			const matched = [];
@@ -236096,6 +236119,13 @@ var init_records = __esmMin((() => {
 		persistence;
 		_restoring = null;
 		metadataInitialized = false;
+persistedProtocolVersion;
+get fileSource() {
+        if (!(this.persistence instanceof FileSystemAgentRecordPersistence)
+            || this.persistedProtocolVersion === undefined)
+            return undefined;
+        return { path: this.persistence.filePath, protocolVersion: this.persistedProtocolVersion };
+    }
 		resumeCheckpointRestored = false;
 		messageTimes = new WeakMap();
 		constructor(agent, persistence) {
@@ -236119,8 +236149,15 @@ var init_records = __esmMin((() => {
 					created_at: Date.now()
 				});
 				this.metadataInitialized = true;
-			}
-			if (stamped.type === "metadata") this.metadataInitialized = true;
+			
+this.persistedProtocolVersion = "1.4";
+}
+			if (stamped.type === 'metadata') {
+            if (!this.metadataInitialized) {
+                this.persistedProtocolVersion = stamped.protocol_version;
+            }
+            this.metadataInitialized = true;
+        }
 			this.persistence?.append(stamped);
 		}
 		restore(record) {
@@ -236134,7 +236171,8 @@ var init_records = __esmMin((() => {
 			}
 		}
 		async replay(options = {}) {
-			if (!this.persistence) throw new Error("No persistence provided for AgentRecords");
+			this.persistedProtocolVersion = undefined;
+if (!this.persistence) throw new Error("No persistence provided for AgentRecords");
 			this.resumeCheckpointRestored = false;
 			const rewriteMigratedRecords = options.rewriteMigratedRecords ?? true;
 			if (rewriteMigratedRecords && await this.tryReplayResumeCheckpoint()) return {};
@@ -236152,6 +236190,7 @@ var init_records = __esmMin((() => {
 					hasMetadata = true;
 					this.metadataInitialized = true;
 					const readVersion = record.protocol_version;
+this.persistedProtocolVersion = readVersion;
 					if (isNewerWireVersion(readVersion)) {
 						warning = `Session wire protocol version ${readVersion} is newer than the current version 1.4. Records will be replayed without migration.`;
 						shouldRewrite = false;
@@ -236174,6 +236213,7 @@ var init_records = __esmMin((() => {
 			if (completed && shouldRewrite && replayedRecords !== void 0) {
 				this.persistence.rewrite(replayedRecords);
 				await this.persistence.flush();
+this.persistedProtocolVersion = "1.4";
 			}
 			if (completed && this.persistence instanceof FileSystemAgentRecordPersistence) this.persistence.persistedRecordCount = replayedRecordCount;
 			if (completed && this.agent.blobStore !== void 0) for (const msg of this.agent.context.history) await this.agent.blobStore.rehydrateParts(msg.content);
@@ -236184,8 +236224,17 @@ var init_records = __esmMin((() => {
 			if (this.agent.replayBuilder.options.range !== void 0) return false;
 			const checkpoint = await loadResumeCheckpoint({ wirePath: this.persistence.filePath });
 			if (!checkpoint.ok) return false;
+let sourceProtocol;
+for await (const metadata of this.persistence.read()) {
+  if (metadata.type !== 'metadata' || metadata.protocol_version !== "1.4") return false;
+  sourceProtocol = metadata.protocol_version;
+  break;
+}
+if (sourceProtocol === undefined) return false;
+
 			if (!restoreAgentResumeSnapshot(this.agent, checkpoint.snapshot)) return false;
 			this.metadataInitialized = true;
+this.persistedProtocolVersion = sourceProtocol;
 			let tailRecordCount = 0;
 			for await (const record of this.persistence.readFrom(checkpoint.offset, checkpoint.recordCount)) {
 				this.restore(record);
@@ -265678,34 +265727,52 @@ var init_web_search = __esmMin((() => {
 				execute: (ctx) => this.execution(args, ctx)
 			};
 		}
-		async execution(args, { toolCallId }) {
-			try {
-				const opts = { toolCallId };
-				const results = await this.provider.search(args.query, opts);
-				const builder = new ToolResultBuilder({ maxLineLength: null });
-				if (results.length === 0) {
-					builder.write("No search results found.");
-					return builder.ok();
-				}
-				let first = true;
-				for (const result of results) {
-					if (!first) builder.write("---\n\n");
-					first = false;
-					builder.write(`Title: ${result.title}\n`);
-					if (result.siteName) builder.write(`Site: ${result.siteName}\n`);
-					if (result.date) builder.write(`Date: ${result.date}\n`);
-					builder.write(`URL: ${result.url}\n`);
-					builder.write(`Snippet: ${result.snippet}\n\n`);
-				}
-				builder.write("When you rely on a result in your answer, cite it inline as a markdown link, e.g. [title](url).");
-				return builder.ok();
-			} catch (error) {
-				return {
-					isError: true,
-					output: classifySearchError(error)
-				};
-			}
-		}
+		async execution(args, { toolCallId, }) {
+        try {
+            let failedSources = 0;
+            const opts = { toolCallId, onNotice: notice => {
+                    if (notice.code === 'partial-sources' && Number.isInteger(notice.failedSources)
+                        && notice.failedSources > 0 && notice.failedSources <= 128) {
+                        failedSources = Math.max(failedSources, notice.failedSources);
+                    }
+                } };
+            const results = await this.provider.search(args.query, opts);
+            const builder = new ToolResultBuilder({ maxLineLength: null });
+            if (failedSources > 0) {
+                if (results.length === 0)
+                    throw new Error('Search sources failed without usable results.');
+                builder.write(`Some search sources failed (${failedSources}). Results below are partial, not a complete search.\n\n`);
+            }
+            if (results.length === 0) {
+                builder.write('No search results found.');
+                return builder.ok();
+            }
+            let first = true;
+            for (const result of results) {
+                if (!first)
+                    builder.write('---\n\n');
+                first = false;
+                builder.write(`Title: ${result.title}\n`);
+                if (result.siteName)
+                    builder.write(`Site: ${result.siteName}\n`);
+                if (result.date)
+                    builder.write(`Date: ${result.date}\n`);
+                builder.write(`URL: ${result.url}\n`);
+                builder.write(`Snippet: ${result.snippet}\n\n`);
+            }
+            // Keep the citation reminder next to the data (not just in the static tool
+            // description), so it is present on every search. Cite the page actually
+            // relied on — after a FetchURL follow-up, that is the fetched page.
+            builder.write('When you rely on a result in your answer, cite it inline as a markdown link, e.g. [title](url).');
+            return builder.ok();
+        }
+        catch (error) {
+            return {
+                isError: true,
+                output: classifySearchError(error),
+            };
+        }
+    }
 	};
 }));
 //#endregion
@@ -298151,13 +298218,11 @@ function resolveStdioCwd(configCwd, defaultCwd) {
 	if (defaultCwd !== void 0 && !isAbsolute$2(configCwd)) return resolve$2(defaultCwd, configCwd);
 	return configCwd;
 }
-function mergeStdioEnv(configEnv, parentEnv = process.env) {
-	const merged = {};
-	for (const [key, value] of Object.entries(parentEnv)) if (value !== void 0) merged[key] = value;
-	if (configEnv !== void 0) Object.assign(merged, configEnv);
-	Object.assign(merged, proxyEnvForChild(merged));
-	reconcileChildNoProxy(merged, configEnv);
-	return merged;
+function mergeStdioEnv(configEnv, parentEnv = process.env, runtimeEnv) {
+    const merged = overlayRuntimeEnv({ ...parentEnv, ...configEnv }, runtimeEnv);
+    Object.assign(merged, proxyEnvForChild(merged));
+    reconcileChildNoProxy(merged, overlayRuntimeEnv(configEnv ?? {}, runtimeEnv));
+    return merged;
 }
 var STDERR_BUFFER_CAPACITY, StdioMcpClient, BoundedTail;
 var init_client_stdio = __esmMin((() => {
@@ -298187,7 +298252,7 @@ var init_client_stdio = __esmMin((() => {
 			this.transport = new StdioClientTransport({
 				command: config.command,
 				args: config.args,
-				env: mergeStdioEnv(config.env, config.inheritEnv === false ? {} : process.env),
+				env: mergeStdioEnv(config.env, config.inheritEnv === false ? {} : process.env, options.runtimeEnv),
 				cwd: resolveStdioCwd(config.cwd, options.defaultCwd),
 				stderr: "pipe"
 			});
@@ -298689,22 +298754,32 @@ var init_connection_manager = __esmMin((() => {
 			return entry.attemptId;
 		}
 		createClient(config, name) {
-			const toolCallTimeoutMs = config.toolTimeoutMs;
-			if (config.transport === "stdio") return new StdioMcpClient(config, {
-				toolCallTimeoutMs,
-				defaultCwd: this.options.stdioCwd
-			});
-			if (config.transport === "sse") return new SseMcpClient(config, {
-				toolCallTimeoutMs,
-				envLookup: this.options.envLookup,
-				oauthProvider: this.resolveOAuthProvider(config, name)
-			});
-			return new HttpMcpClient(config, {
-				toolCallTimeoutMs,
-				envLookup: this.options.envLookup,
-				oauthProvider: this.resolveOAuthProvider(config, name)
-			});
-		}
+        const toolCallTimeoutMs = config.toolTimeoutMs;
+        if (config.transport === 'stdio') {
+            let runtimeEnv;
+            try {
+                runtimeEnv = this.options.stdioRuntimeEnv?.(name, config);
+            }
+            catch {
+                throw new Error('MCP runtime environment is unavailable.');
+            }
+            return new StdioMcpClient(config, {
+                toolCallTimeoutMs, defaultCwd: this.options.stdioCwd, runtimeEnv,
+            });
+        }
+        if (config.transport === 'sse') {
+            return new SseMcpClient(config, {
+                toolCallTimeoutMs,
+                envLookup: this.options.envLookup,
+                oauthProvider: this.resolveOAuthProvider(config, name),
+            });
+        }
+        return new HttpMcpClient(config, {
+            toolCallTimeoutMs,
+            envLookup: this.options.envLookup,
+            oauthProvider: this.resolveOAuthProvider(config, name),
+        });
+    }
 		resolveOAuthProvider(config, name) {
 			const oauthService = this.oauthService;
 			if (oauthService === void 0) return void 0;
@@ -299417,6 +299492,43 @@ var init_lsp = __esmMin((() => {
 	init_manager$1();
 }));
 //#endregion
+
+import { randomBytes as releaseRecordRandomBytes } from "node:crypto";
+const EMPTY_RUNTIME = Object.freeze({
+    AGENTSPINE_KING_TIMELINE_SOURCE: '',
+    AGENTSPINE_KING_WIRE_PROTOCOL_VERSION: '',
+    AGENTSPINE_TIMELINE_TRANSPORT_SESSION_ID: '',
+    AGENTSPINE_TIMELINE_SESSION_CAPABILITY: '',
+});
+class AgentSpineSessionRuntime {
+    #env = EMPTY_RUNTIME;
+    #hooks;
+    #servers;
+    constructor(recipients) {
+        this.#hooks = new Set(recipients?.hooks);
+        this.#servers = new Map(Object.entries(recipients?.mcpServers ?? {}));
+    }
+    get hasRecipients() {
+        return this.#hooks.size > 0 || this.#servers.size > 0;
+    }
+    bind(sessionId, source) {
+        this.#env = EMPTY_RUNTIME;
+        if (!sessionId || !/^[A-Za-z0-9][A-Za-z0-9:_.@/-]{0,127}$/.test(sessionId) || !source)
+            return;
+        this.#env = Object.freeze({
+            AGENTSPINE_KING_TIMELINE_SOURCE: source.path,
+            AGENTSPINE_KING_WIRE_PROTOCOL_VERSION: source.protocolVersion,
+            AGENTSPINE_TIMELINE_TRANSPORT_SESSION_ID: sessionId,
+            AGENTSPINE_TIMELINE_SESSION_CAPABILITY: `astc_${releaseRecordRandomBytes(32).toString('base64url')}`,
+        });
+    }
+    forHook(hook) {
+        return this.#hooks.has(hook) ? this.#env : EMPTY_RUNTIME;
+    }
+    forMcp(name, config) {
+        return config.transport === 'stdio' && this.#servers.get(name) === config ? this.#env : EMPTY_RUNTIME;
+    }
+}
 //#region ../../packages/agent-core/src/session/index.ts
 async function waitForSettlementOrTimeout(promise, timeoutMs) {
 	let timeout;
@@ -299497,6 +299609,16 @@ var init_session$1 = __esmMin((() => {
 		writeMetadataPromise = Promise.resolve();
 		agentsMdWarning;
 		accountMemoryContext = "";
+agentSpineRuntime;
+mcpLoadStarted = false;
+startMcpServers() {
+        if (this.mcpLoadStarted)
+            return;
+        this.mcpLoadStarted = true;
+        void this.loadMcpServers().catch((error) => {
+            this.emitInitialMcpLoadError(error);
+        });
+    }
 		constructor(options) {
 			this.options = options;
 			this.logHandle = options.id === void 0 ? void 0 : getRootLogger().attachSession({
@@ -299506,6 +299628,8 @@ var init_session$1 = __esmMin((() => {
 			this.log = this.logHandle?.logger ?? (options.id === void 0 ? log : log.createChild({ sessionId: options.id }));
 			this.rpc = options.rpc;
 			this.experimentalFlags = options.experimentalFlags ?? new FlagResolver();
+this.agentSpineRuntime = this.experimentalFlags.enabled('agent_spine_timeline')
+            ? new AgentSpineSessionRuntime(options.agentSpineRuntime) : undefined;
 			this.visionReader = createManagedMediaVisionReader(options.toolServices?.media) ?? (this.experimentalFlags.enabled("vision_reader") ? createVisionReader(options.config?.services?.visionReader) : void 0);
 			this.hookEngine = new HookEngine(options.hooks, {
 				cwd: options.kaos.getcwd(),
@@ -299534,8 +299658,13 @@ var init_session$1 = __esmMin((() => {
 						code: "HOST_HOOK_WARNING",
 						message
 					});
-				}
-			});
+				},
+runtimeEnv: (hook) => {
+                const hostEnv = options.hookRuntimeEnv?.(hook);
+                const timelineEnv = this.agentSpineRuntime?.forHook(hook);
+                return timelineEnv === undefined ? hostEnv : { ...hostEnv, ...timelineEnv };
+            }
+});
 			this.telemetry = options.telemetry ?? noopTelemetryClient;
 			this.toolKaos = options.kaos;
 			this.persistenceKaos = options.persistenceKaos ?? options.kaos;
@@ -299546,8 +299675,13 @@ var init_session$1 = __esmMin((() => {
 			this.mcp = new McpConnectionManager({
 				oauthService: new McpOAuthService({ blunHomeDir: resolveSharedBlunHome(options.blunHomeDir) }),
 				log: this.log,
-				stdioCwd: options.kaos.getcwd()
-			});
+				stdioCwd: options.kaos.getcwd(),
+stdioRuntimeEnv: (name, config) => {
+                const hostEnv = options.mcpRuntimeEnv?.(name, config);
+                const timelineEnv = this.agentSpineRuntime?.forMcp(name, config);
+                return timelineEnv === undefined ? hostEnv : { ...hostEnv, ...timelineEnv };
+            }
+});
 			this.lsp = options.lspServers === void 0 || Object.keys(options.lspServers).length === 0 ? void 0 : new LspManager({
 				cwd: options.kaos.getcwd(),
 				servers: options.lspServers
@@ -299560,9 +299694,7 @@ var init_session$1 = __esmMin((() => {
 			}).then(() => {
 				this.refreshAgentBuiltinTools();
 			});
-			this.loadMcpServers().catch((error) => {
-				this.emitInitialMcpLoadError(error);
-			});
+			if (!this.agentSpineRuntime?.hasRecipients) this.startMcpServers();
 		}
 		setToolKaos(kaos) {
 			this.toolKaos = kaos;
@@ -300208,7 +300340,18 @@ var init_session$1 = __esmMin((() => {
 			});
 		}
 		async triggerSessionStart(source) {
-			const results = await this.hookEngine.trigger("SessionStart", {
+			if (this.agentSpineRuntime?.hasRecipients && !this.mcpLoadStarted) {
+            try {
+                const main = this.getReadyAgent('main');
+                await main?.records.flush();
+                this.agentSpineRuntime.bind(this.options.id, main?.records.fileSource);
+            }
+            catch {
+                this.log.warn('Native session record source is unavailable.');
+            }
+            this.startMcpServers();
+        }
+const results = await this.hookEngine.trigger("SessionStart", {
 				matcherValue: source,
 				inputData: { source }
 			});
@@ -315095,43 +315238,80 @@ var init_blun_web_search = __esmMin((() => {
 			this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
 		}
 		async search(query, options) {
-			const bodyJson = JSON.stringify({ text_query: query });
-			const toolCallId = options?.toolCallId;
-			const response = await this.post(bodyJson, toolCallId);
-			if (response.status === 401) {
-				const detail = await safeReadText(response);
-				throw new Error(`Blun search request failed: HTTP 401 (auth/unauthorized). ${detail}`.trim());
-			}
-			if (response.status !== 200) {
-				const detail = await safeReadText(response);
-				throw new Error(`Blun search request failed: HTTP ${String(response.status)}. ${detail}`.trim());
-			}
-			const json = await response.json();
-			return (Array.isArray(json.search_results) ? json.search_results : []).map((r) => {
-				const out = {
-					title: r.title ?? "",
-					url: r.url ?? "",
-					snippet: r.snippet ?? ""
-				};
-				if (typeof r.date === "string" && r.date.length > 0) out.date = r.date;
-				if (typeof r.site_name === "string" && r.site_name.length > 0) out.siteName = r.site_name;
-				return out;
-			});
-		}
-		async post(bodyJson, toolCallId) {
-			const accessToken = await this.resolveApiKey();
-			return this.fetchImpl(this.baseUrl, {
-				method: "POST",
-				headers: {
-					...this.defaultHeaders,
-					Authorization: `Bearer ${accessToken}`,
-					"Content-Type": "application/json",
-					...toolCallId !== void 0 && toolCallId.length > 0 ? { "X-Msh-Tool-Call-Id": toolCallId } : {},
-					...this.customHeaders
-				},
-				body: bodyJson
-			});
-		}
+        const body = { text_query: query };
+        const bodyJson = JSON.stringify(body);
+        const toolCallId = options?.toolCallId;
+        const supportsNotices = typeof options?.onNotice === 'function';
+        const response = await this.post(bodyJson, toolCallId, supportsNotices);
+        if (response.status === 401) {
+            const detail = await safeReadText(response);
+            throw new Error(`Blun search request failed: HTTP 401 (auth/unauthorized). ${detail}`.trim());
+        }
+        if (response.status !== 200) {
+            const detail = await safeReadText(response);
+            throw new Error(`Blun search request failed: HTTP ${String(response.status)}. ${detail}`.trim());
+        }
+        const json = (await response.json());
+        const raw = Array.isArray(json.search_results) ? json.search_results : [];
+        const status = json.search_status;
+        if (status !== undefined) {
+            if (!status || typeof status !== 'object' || !Array.isArray(json.search_results)
+                || !Number.isInteger(status.failed_sources) || typeof status.failed_sources !== 'number'
+                || status.failed_sources < 0 || status.failed_sources > 128
+                || (status.state !== 'complete' && status.state !== 'partial')
+                || (status.state === 'complete' && status.failed_sources !== 0)
+                || (status.state === 'partial' && (status.failed_sources === 0 || raw.length === 0))) {
+                throw new Error('Invalid search status response.');
+            }
+            if (!raw.every(row => {
+                if (!row || typeof row.title !== 'string' || !row.title.trim()
+                    || typeof row.snippet !== 'string' || typeof row.url !== 'string')
+                    return false;
+                try {
+                    const url = new URL(row.url);
+                    return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
+                }
+                catch {
+                    return false;
+                }
+            }))
+                throw new Error('Invalid search results response.');
+            if (status.state === 'partial') {
+                if (!supportsNotices)
+                    throw new Error('Partial search results require a notice consumer.');
+                options?.onNotice?.({ code: 'partial-sources', failedSources: status.failed_sources });
+            }
+        }
+        return raw.map((r) => {
+            const out = {
+                title: r.title ?? '',
+                url: r.url ?? '',
+                snippet: r.snippet ?? '',
+            };
+            if (typeof r.date === 'string' && r.date.length > 0)
+                out.date = r.date;
+            if (typeof r.site_name === 'string' && r.site_name.length > 0)
+                out.siteName = r.site_name;
+            return out;
+        });
+    }
+		async post(bodyJson, toolCallId, supportsNotices) {
+        const accessToken = await this.resolveApiKey();
+        return this.fetchImpl(this.baseUrl, {
+            method: 'POST',
+            headers: {
+                ...this.defaultHeaders,
+                Authorization: `Bearer ${accessToken}`,
+                'Content-Type': 'application/json',
+                ...(toolCallId !== undefined && toolCallId.length > 0
+                    ? { 'X-Msh-Tool-Call-Id': toolCallId }
+                    : {}),
+                ...this.customHeaders,
+                ...(supportsNotices ? { 'X-BLUN-Search-Contract': 'partial-v1' } : {}),
+            },
+            body: bodyJson,
+        });
+    }
 		async resolveApiKey() {
 			if (this.tokenProvider !== void 0) try {
 				return await this.tokenProvider.getAccessToken();
@@ -318903,6 +319083,7 @@ var init_core_impl = __esmMin((() => {
 			const pluginSessionStarts = this.plugins.enabledSessionStarts();
 			const pluginCommands = await this.plugins.enabledCommands();
 			const mcpConfig = this.mergePluginMcpConfig(withCallerMcp);
+const pluginHooks = this.plugins.enabledHooks();
 			const runtime = await this.resolveRuntime(config);
 			const session = new Session$1({
 				kaos: parentKaos.withCwd(workDir),
@@ -318915,7 +319096,8 @@ var init_core_impl = __esmMin((() => {
 				rpc: proxyWithExtraPayload(await this.sdk, { sessionId: summary.id }),
 				providerManager: this.resolveProviderManager(summary.id),
 				background: config.background,
-				hooks: [...config.hooks ?? [], ...this.plugins.enabledHooks()],
+				hooks: [...(config.hooks ?? []), ...pluginHooks],
+agentSpineRuntime: this.agentSpineRuntimeRecipients(pluginHooks, mcpConfig),
 				permissionRules: config.permission?.rules,
 				skills: this.resolveSessionSkillConfig(config),
 				mcpConfig,
@@ -318998,6 +319180,7 @@ var init_core_impl = __esmMin((() => {
 			const pluginSessionStarts = this.plugins.enabledSessionStarts();
 			const pluginCommands = await this.plugins.enabledCommands();
 			const mcpConfig = this.mergePluginMcpConfig(withCallerMcp);
+const pluginHooks = this.plugins.enabledHooks();
 			const runtime = await this.resolveRuntime(config);
 			const parentKaos = parentKaosForRead;
 			const persistenceKaos = overrides.persistenceKaos ?? parentKaos;
@@ -319012,7 +319195,8 @@ var init_core_impl = __esmMin((() => {
 				rpc: proxyWithExtraPayload(await this.sdk, { sessionId: summary.id }),
 				providerManager: this.resolveProviderManager(summary.id),
 				background: config.background,
-				hooks: [...config.hooks ?? [], ...this.plugins.enabledHooks()],
+				hooks: [...(config.hooks ?? []), ...pluginHooks],
+agentSpineRuntime: this.agentSpineRuntimeRecipients(pluginHooks, mcpConfig),
 				permissionRules: config.permission?.rules,
 				skills: this.resolveSessionSkillConfig(config),
 				mcpConfig,
@@ -319468,6 +319652,21 @@ var init_core_impl = __esmMin((() => {
 				}
 			};
 		}
+agentSpineRuntimeRecipients(pluginHooks, mcpConfig) {
+        if (!this.experimentalFlags.enabled('agent_spine_timeline'))
+            return undefined;
+        const plugin = this.plugins.get('agent-spine');
+        if (plugin?.state !== 'ok' || !plugin.enabled)
+            return undefined;
+        // These objects came from PluginManager, not caller hooks or session metadata.
+        const hooks = pluginHooks.filter(hook => hook.env?.['BLUN_PLUGIN_ROOT'] === plugin.root);
+        const mcpServers = Object.fromEntries(Object.entries(mcpConfig?.servers ?? {}).filter(([name, config]) => {
+            const origin = mcpConfig?.origins?.[name];
+            return origin?.source === 'plugin' && origin.pluginId === plugin.id && origin.pluginEnabled
+                && config.transport === 'stdio' && config.enabled !== false;
+        }));
+        return hooks.length > 0 || Object.keys(mcpServers).length > 0 ? { hooks, mcpServers } : undefined;
+    }
 		async resolveCurrentMcpConfig(session) {
 			const snapshot = session.mcpConfigSnapshot();
 			const callerServers = Object.fromEntries(Object.entries(snapshot?.servers ?? {}).filter(([name]) => snapshot?.origins?.[name]?.source === "session"));
@@ -525292,3 +525491,23 @@ async function logStartupFailure(operation, error) {
 }
 //#endregion
 export { configureTelegramPluginLaunchMode, createBlunHarness, createBlunHostIdentity, handleMainCommand, isDirectCliEntry, main };
+
+import { randomUUID as releasePromptUUID } from "node:crypto";
+function overlayRuntimeEnv(base, runtime) {
+    const result = {};
+    for (const [key, value] of Object.entries(base)) {
+        if (value !== undefined)
+            result[key] = value;
+    }
+    for (const [key, value] of Object.entries(runtime ?? {})) {
+        // Node selects one casing on Windows; leaving both can preserve a stale value.
+        if (process.platform === 'win32') {
+            for (const existing of Object.keys(result)) {
+                if (existing.toUpperCase() === key.toUpperCase())
+                    delete result[existing];
+            }
+        }
+        result[key] = value;
+    }
+    return result;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.569",
+  "version": "9.1.570",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {
@@ -39,7 +39,8 @@
     "agent-spine-plugin/.codex-plugin/",
     "agent-spine-plugin/.mcp.json",
     "telegram-plugin/",
-    "LIESMICH.txt"
+    "LIESMICH.txt",
+    "CHANGELOG.md"
   ],
   "keywords": [
     "blun",

package/standard-skills/research-evidence/scripts/evidence-collection.cjs

@@ -151,7 +151,7 @@ function save({ home, project, report }) {
     }
   }
 }
-const terms = text => [...new Set(text.toLocaleLowerCase('en').match(/[\p{L}\p{N}]{2,}/gu) || [])];
+const terms = text => [...new Set(text.normalize('NFC').toLocaleLowerCase('en').match(/[\p{L}\p{N}]{2,}/gu) || [])];
 function query({ home, project, query: question, limit = 5, maxChars = 8000, offset = 0, expectedCollectionSha256 }) {
   const output = { schema: 'blun.research-recall/v1', availability: 'unavailable', matches: [], diagnostics: [],
     sourceVerified: false, retrieval: 'lexical-artifact-search', bytesRead: 0, limited: false,