blun-king-cli 9.1.584 → 9.1.586

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 9.1.586 - 2026-09-09
+
+- Fix Telegram receiver startup on Windows when an old bridge PID has been reused by an unrelated process. Preserve uncertain process ownership and never stop that unrelated process.
+- Keep context compaction, model settings, conversation history, and existing Telegram delivery behavior unchanged.
+
+
+## 9.1.585 - 2026-09-08
+
+- Managed WebSearch validates result envelopes and source rows even when optional search status metadata is absent.
+- Malformed successful HTTP responses no longer appear as empty searches; invalid source rows fail the whole response before results or partial-source notices are returned.
+- Valid legacy responses, empty result arrays and empty string excerpts remain supported. Cancellation, request authentication, FetchURL and Telegram behavior are unchanged.
+
 ## 9.1.584 - 2026-09-08
 
 - WebSearch forwards caller cancellation through the tool and managed HTTP search request, including response-body reads.

package/blun.mjs

@@ -315303,10 +315303,25 @@ var init_blun_web_search = __esmMin((() => {
         }
         const json = (await response.json());
         signal?.throwIfAborted();
-        const raw = Array.isArray(json.search_results) ? json.search_results : [];
+        if (!json || typeof json !== 'object' || Array.isArray(json) || !Array.isArray(json.search_results))
+            throw new Error('Invalid search results response.');
+        const raw = json.search_results;
+        if (!raw.every(row => {
+            if (!row || typeof row.title !== 'string' || !row.title.trim()
+                || typeof row.snippet !== 'string' || typeof row.url !== 'string')
+                return false;
+            try {
+                const url = new URL(row.url);
+                return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
+            }
+            catch {
+                return false;
+            }
+        }))
+            throw new Error('Invalid search results response.');
         const status = json.search_status;
         if (status !== undefined) {
-            if (!status || typeof status !== 'object' || !Array.isArray(json.search_results)
+            if (!status || typeof status !== 'object'
                 || !Number.isInteger(status.failed_sources) || typeof status.failed_sources !== 'number'
                 || status.failed_sources < 0 || status.failed_sources > 128
                 || (status.state !== 'complete' && status.state !== 'partial')
@@ -315314,19 +315329,6 @@ var init_blun_web_search = __esmMin((() => {
                 || (status.state === 'partial' && (status.failed_sources === 0 || raw.length === 0))) {
                 throw new Error('Invalid search status response.');
             }
-            if (!raw.every(row => {
-                if (!row || typeof row.title !== 'string' || !row.title.trim()
-                    || typeof row.snippet !== 'string' || typeof row.url !== 'string')
-                    return false;
-                try {
-                    const url = new URL(row.url);
-                    return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
-                }
-                catch {
-                    return false;
-                }
-            }))
-                throw new Error('Invalid search results response.');
             if (status.state === 'partial') {
                 if (!supportsNotices)
                     throw new Error('Partial search results require a notice consumer.');
@@ -422275,7 +422277,41 @@ function resolveTelegramMcpEntry() {
 	];
 	for (const candidate of candidates) if (candidate !== void 0 && existsSync(candidate)) return resolveKnownTelegramMcp(candidate, { explicitOverride: candidate === process.env["BLUN_TELEGRAM_MCP_SERVER"] });
 }
+import { fstatSync as __blunTelegramPidFstatSync } from "node:fs";
+"use strict";
+const PROCESS_START_LOOKUP_TIMEOUT_MS = 1500;
+const PID_CLAIM_TIME_TOLERANCE_MS = 1000;
+function readNonBridgeProcessStartedAt(pid) {
+    if (process.platform !== 'win32' || !Number.isSafeInteger(pid) || pid <= 1)
+        return undefined;
+    try {
+        const output = execFileSync('powershell.exe', [
+            '-NoProfile', '-NonInteractive', '-Command',
+            `$ErrorActionPreference='Stop'; $p=Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}'; ` +
+                // A recognizable bridge is preserved even after a wall-clock correction.
+                `if($null -ne $p -and -not [string]::IsNullOrWhiteSpace($p.CommandLine) -and $p.CommandLine -notmatch 'bridge\\.mjs'){` +
+                `([DateTimeOffset]$p.CreationDate.ToUniversalTime()).ToUnixTimeMilliseconds()}`,
+        ], {
+            encoding: 'utf8',
+            windowsHide: true,
+            timeout: PROCESS_START_LOOKUP_TIMEOUT_MS,
+            maxBuffer: 4096,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        if (!/^\d+$/.test(output))
+            return undefined;
+        const startedAt = Number(output);
+        return Number.isSafeInteger(startedAt) && startedAt > 0 ? startedAt : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+
 var TelegramChannelController = class {
+bridgeClaimUncertain = false;
+readProcessStartedAt;
+
 	host;
 	dir;
 	heartbeatTimer;
@@ -422341,7 +422377,9 @@ var TelegramChannelController = class {
 				return false;
 			}
 		});
-	}
+	
+this.readProcessStartedAt = options.readProcessStartedAt ?? readNonBridgeProcessStartedAt;
+}
 	get leaseFile() {
 		return join(this.dir, "tui.pid");
 	}
@@ -422464,11 +422502,68 @@ var TelegramChannelController = class {
 		this.handoffTimer.unref();
 	}
 	liveBridgePid() {
-		try {
-			const pid = parseInt(readFileSync(this.botPidFile, "utf8"), 10);
-			if (Number.isInteger(pid) && pid > 1 && this.isProcessAlive(pid)) return pid;
-		} catch {}
-	}
+        if (this.bridgeClaimUncertain)
+            return null;
+        let pid;
+        let claim;
+        let stats;
+        try {
+            const fd = openSync(this.botPidFile, 'r');
+            try {
+                claim = readFileSync(fd, 'utf8');
+                stats = __blunTelegramPidFstatSync(fd);
+            }
+            finally {
+                closeSync(fd);
+            }
+            pid = parseInt(claim, 10);
+            if (!Number.isInteger(pid) || pid <= 1)
+                return null;
+            if (!this.isProcessAlive(pid))
+                return undefined;
+        }
+        catch (error) {
+            // Only an absent claim proves that reading it did not hide an owner.
+            return error.code === 'ENOENT' ? undefined : null;
+        }
+        try {
+            const startedAt = this.readProcessStartedAt(pid);
+            if (startedAt !== undefined && Number.isFinite(startedAt)
+                && startedAt > stats.mtimeMs + PID_CLAIM_TIME_TOLERANCE_MS
+                && this.ownsChannel() && this.retireReusedBridgePid(claim, stats))
+                return undefined;
+        }
+        catch {
+            // A failed identity or archive lookup must not launch a second poller.
+        }
+        return pid;
+    }
+retireReusedBridgePid(claim, original) {
+        const matches = (file) => {
+            const current = lstatSync(file);
+            return current.isFile() && current.dev === original.dev && current.ino === original.ino
+                && current.size === original.size && current.mtimeMs === original.mtimeMs
+                && readFileSync(file, 'utf8') === claim;
+        };
+        if (!matches(this.botPidFile))
+            return false;
+        const retired = join(this.dir, `bot.pid.stale-${randomUUID()}`);
+        renameSync(this.botPidFile, retired);
+        try {
+            if (matches(retired))
+                return true;
+        }
+        catch {
+            // Restore the name if the moved claim cannot be verified.
+        }
+        this.bridgeClaimUncertain = true;
+        // Do not overwrite a newer claim if another writer won the rename window.
+        try {
+            linkSync(retired, this.botPidFile);
+        }
+        catch { /* A current claim wins. */ }
+        return false;
+    }
 	releaseOwnership() {
 		try {
 			if (this.readOwner()?.ownerId === this.ownerId) rmSync(this.ownerFile);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.584",
+  "version": "9.1.586",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {