blun-king-cli 9.1.571 → 9.1.573

package/CHANGELOG.md

@@ -1,5 +1,30 @@
+## 9.1.573
+
+- Keep the input field visible and focused after the startup goal choice,
+  including Escape and a failed goal-resume request. Preserve unsent drafts.
+- Show a compact with/without-goal choice instead of the entire objective.
+- Ctrl+S leaves that choice without approving the goal and reaches the normal
+  queue shortcut. It also handles pending input while the session is idle.
+- Preserve existing Escape behavior: queued work is cleared before a subsequent
+  Escape cancels the active turn. No automatic deletion of session history.
+
+The release does not reconstruct acknowledgements lost by an older process
+before upgrading. Genuinely pending messages remain attached to their session.
+
 # Changelog
 
+## 9.1.572
+
+- Research evidence rejects source URLs containing recognized credential parameter
+  names in queries or parameter-shaped fragments, including nested names and
+  fragment routes. Rejection applies to failed sources as well as usable sources.
+- Previously saved reports with these URLs are withheld during recall with the
+  existing `partial` / `report-invalid` result. Original snapshots are not modified
+  or deleted, and source addresses are never silently stripped or rewritten.
+- Ordinary documentation queries and anchors retain their exact bytes. This is
+  a credential-name boundary, not general secret detection or a history cleanup.
+
+
 ## 9.1.571
 
 - Bind Telegram queue ranges to their owning session. A new session no longer automatically consumes work left pending by an older session; resuming a known session restores only its own pending ranges.

package/blun.mjs

@@ -417373,6 +417373,10 @@ var ChoicePickerComponent = class extends Container {
 	}
 	handleInput(data) {
 		if (isKeyRelease(data)) return;
+		if (matchesKey(normalizeCapsLockedCtrl(data), Key.ctrl("s")) && this.opts.onCtrlS !== void 0) {
+			this.opts.onCtrlS();
+			return;
+		}
 		if (matchesKey(data, Key.ctrl("c")) && this.opts.onCtrlC !== void 0) {
 			this.opts.onCtrlC();
 			return;
@@ -508611,7 +508615,7 @@ var EditorKeyboardController = class {
 		};
 		editor.onCtrlS = () => {
 			const draft = (editor.getExpandedText?.() ?? editor.getText()).trim();
-			if (!host.streamingUI.hasActiveTurn() && host.state.appState.streamingPhase === "idle" && !draft.trimStart().startsWith("/") && !host.state.queuedMessages.some((item) => host.canRetryLocalPrompt?.(item.localPromptRecovery))) return;
+			if (!host.streamingUI.hasActiveTurn() && host.state.appState.streamingPhase === "idle" && draft.length === 0 && host.state.queuedMessages.length === 0) return;
 			host.flushQueuedMessages(draft, editor.inputMode);
 			host.updateQueueDisplay();
 			host.state.ui.requestRender();
@@ -519807,13 +519811,14 @@ function startupResumeGoalPromptCopy() {
 		withGoal: uiText("startupResumeGoal.resume")
 	};
 }
-function promptStartupResumeGoal(host, objective, copy) {
+function promptStartupResumeGoal(host, objective, copy, onFlushQueue) {
 	return new Promise((resolve) => {
 		let done = false;
 		const finish = (choice) => {
 			if (done) return;
 			done = true;
-			host.dismissEditorReplacement();
+			if (choice === "exit") host.dismissEditorReplacement();
+			else host.restoreEditor();
 			resolve(choice);
 		};
 		host.mountEditorReplacement(new ChoicePickerComponent({
@@ -519824,8 +519829,7 @@ function promptStartupResumeGoal(host, objective, copy) {
 				label: copy.withoutGoal
 			}, {
 				value: "resume",
-				label: copy.withGoal,
-				description: objective
+				label: copy.withGoal
 			}],
 			onSelect: (value) => {
 				finish(value);
@@ -519838,6 +519842,11 @@ function promptStartupResumeGoal(host, objective, copy) {
 			},
 			onCtrlD: () => {
 				finish("exit");
+			},
+			onCtrlS: () => {
+				if (done) return;
+				finish("without");
+				onFlushQueue?.();
 			}
 		}));
 	});
@@ -521194,13 +521203,15 @@ const telegramBoundary = this.captureTelegramQueueBoundary();
 		this.syncGoalTimeTrigger();
 		if (goal.status !== "paused" && goal.status !== "blocked") return;
 		this.startupGoalPromptedSessionId = sessionId;
-		const choice = await promptStartupResumeGoal(this, goal.objective, startupResumeGoalPromptCopy());
-		if (this.aborted || this.session?.id !== sessionId) return;
-		if (choice === "exit") {
-			await this.stop(0);
-			return;
-		}
-		if (choice === "resume") await handleGoalCommand(this, "resume");
+		await this.withTelegramQueuePaused(async () => {
+			const choice = await promptStartupResumeGoal(this, goal.objective, startupResumeGoalPromptCopy(), () => { this.state.editor.handleInput("\u0013"); });
+			if (this.aborted || this.session?.id !== sessionId) return;
+			if (choice === "exit") {
+				await this.stop(0);
+				return;
+			}
+			if (choice === "resume") await handleGoalCommand(this, "resume");
+		});
 	}
 	async stop(exitCode) {
 		if (this.isShuttingDown) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.571",
+  "version": "9.1.573",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/standard-skills/research-evidence/references/evidence-format.md

@@ -80,3 +80,25 @@ unread global corpus. `limited:true` also flags result-count or output truncatio
 continuation is for the read budget, not pagination of every lexical hit. Narrow
 the query when necessary. Unavailable or partial results must remain visible as
 limitations; they do not prevent ordinary authorized research.
+
+## Source URL Credential Boundary
+
+All source statuses reject URL userinfo and recognized credential parameter names
+in queries and parameter-shaped fragments, including fragment routes. Names are
+decoded with URLSearchParams, compared case-insensitively, and checked within
+bracket/dot nesting. Examples include access_token, refresh_token, api_key,
+client_secret, authorization, session_id and signed-URL credential/signature fields.
+
+The source address is never silently stripped or rewritten. Normal queries such
+as `q=access_token`, bare `key` / `code` parameters, and ordinary documentation
+anchors are not classified as credentials. This is not a general secret detector:
+custom keys, opaque path values, nested encoded URLs and report text still require
+the explicit review described above. Passing validation does not prove public
+reachability, permission to share, or absence of secrets.
+
+New invalid reports return `saved:false` / `report-invalid` before collection
+creation. Reading an older invalid report withholds that snapshot and reports
+`partial` / `report-invalid`, while leaving its original bytes on disk. Other valid
+snapshots may still be returned. This is not automatic cleanup or credential
+revocation. Do not remove history or rewrite URLs to make validation pass.
+

package/standard-skills/research-evidence/scripts/score-report.cjs

@@ -5,6 +5,25 @@ const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,99}$/;
 const HASH = /^[a-f0-9]{64}$/;
 const STATES = new Set(['usable', 'failed', 'challenge', 'irrelevant', 'stale']);
 const VERDICTS = new Set(['supported', 'unsupported', 'uncertain']);
+const CREDENTIAL_PARAMETER = /^(?:(?:access|refresh|id|oauth)[_-]?token|token|api[_-]?key|client[_-]?secret|password|passwd|authorization|bearer|jwt|session[_-]?(?:id|token)|secret|signature|sig|x-(?:amz|goog)-(?:signature|credential|security-token))$/i;
+function validateSourceUrl(value) {
+  let url;
+  try { url = new URL(value); } catch { assert.fail('source URL'); }
+  assert(['http:', 'https:'].includes(url.protocol) && !url.username && !url.password, 'source URL');
+  const parameters = [url.searchParams];
+  // OAuth-style fragments can hold credentials; ordinary documentation anchors stay intact.
+  const fragment = url.hash.slice(1);
+  if (fragment.includes('=')) {
+    parameters.push(new URLSearchParams(fragment));
+    const queryStart = fragment.indexOf('?');
+    if (queryStart !== -1) parameters.push(new URLSearchParams(fragment.slice(queryStart + 1)));
+  }
+  for (const params of parameters) {
+    for (const key of params.keys()) {
+      assert(!key.split(/[\[\].]+/).some(part => CREDENTIAL_PARAMETER.test(part)), 'source URL');
+    }
+  }
+}
 function boundedArray(value, maximum, label) {
   assert(Array.isArray(value) && value.length <= maximum, label);
   return value;
@@ -38,8 +57,7 @@ function score(report) {
   const sourceMap = new Map();
   const sourceCounts = Object.fromEntries([...STATES].map(status => [status, 0]));
   for (const source of sources) {
-    const url = new URL(source.url);
-    assert(['http:', 'https:'].includes(url.protocol) && !url.username && !url.password, 'source URL');
+    validateSourceUrl(source.url);
     assert(STATES.has(source.status), 'source status');
     assert(source.retrievedAt === null || timestamp(source.retrievedAt), 'source time');
     assert(source.contentSha256 === null || HASH.test(source.contentSha256), 'source hash');