blun-king-cli 9.1.587 → 9.1.589

package/bin/outbound-claim-provenance.cjs

@@ -1,150 +0,0 @@
-'use strict';
-
-const MAX_CLAIMS = 32;
-const MAX_CONFLICT_ORIGINS = 8;
-const CHECKSUM_CLAIM_RE = /(?<![A-Za-z0-9])[A-Fa-f0-9]{16,128}(?![A-Za-z0-9])/gu;
-const TELEGRAM_MESSAGE_TOOL_RE = /^mcp__[^\s]*telegram[^\s]*__(?:reply|edit_message)$/iu;
-const REF_RE = /^[a-f0-9]{16}$/u;
-const ISO_TIMESTAMP_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}(?::?\d{2})?)$/u;
-
-function extractChecksumClaims(value) {
-  const claims = [];
-  const seen = new Set();
-  const text = typeof value === 'string' ? value : String(value ?? '');
-  for (const match of text.matchAll(CHECKSUM_CLAIM_RE)) {
-    const claim = match[0].toLowerCase();
-    if (seen.has(claim)) continue;
-    seen.add(claim);
-    claims.push(claim);
-    if (claims.length >= MAX_CLAIMS) break;
-  }
-  return Object.freeze(claims);
-}
-
-function boundedText(value, max) {
-  const text = String(value ?? '')
-    .replace(/[\u0000-\u001f\u007f]+/gu, ' ')
-    .replace(/\s+/gu, ' ')
-    .trim();
-  return text.length > 0 ? text.slice(0, max) : undefined;
-}
-
-function optionalRef(value) {
-  const ref = String(value ?? '').trim().toLowerCase();
-  return REF_RE.test(ref) ? ref : undefined;
-}
-
-function optionalTimestamp(value) {
-  const timestamp = String(value ?? '').trim();
-  return ISO_TIMESTAMP_RE.test(timestamp) ? timestamp : undefined;
-}
-
-function normalizedExternalReports(value) {
-  if (!Array.isArray(value)) return [];
-  const reports = [];
-  for (const report of value.slice(0, MAX_CLAIMS)) {
-    if (!report || typeof report !== 'object' || Array.isArray(report)) continue;
-    const reporter = boundedText(report.reporter, 128);
-    const eventRef = optionalRef(report.eventRef);
-    const occurredAt = optionalTimestamp(report.occurredAt);
-    const claimTokens = extractChecksumClaims(
-      Array.isArray(report.claimTokens) ? report.claimTokens.join(' ') : '',
-    );
-    if (reporter === undefined || eventRef === undefined || occurredAt === undefined || claimTokens.length === 0) continue;
-    const reporterRef = optionalRef(report.reporterRef);
-    reports.push(Object.freeze({ reporter, reporterRef, eventRef, occurredAt, claimTokens }));
-  }
-  return reports;
-}
-
-function externalClaimOrigin(report) {
-  return Object.freeze({
-    reporter: report.reporter,
-    ...(report.reporterRef !== undefined ? { reporterRef: report.reporterRef } : {}),
-    eventRef: report.eventRef,
-    occurredAt: report.occurredAt,
-  });
-}
-
-function assessOutboundClaimProvenance({ text, localClaims = [], externalReports = [] } = {}) {
-  const claims = extractChecksumClaims(text);
-  const local = new Set(extractChecksumClaims(Array.isArray(localClaims) ? localClaims.join(' ') : ''));
-  const reports = normalizedExternalReports(externalReports);
-  const localMatches = [];
-  const externalMatches = [];
-  const conflicted = [];
-  const unattributed = [];
-
-  for (const value of claims) {
-    if (local.has(value)) {
-      localMatches.push(value);
-      continue;
-    }
-    const matchingByEvent = new Map();
-    for (const report of reports) {
-      if (report.claimTokens.includes(value) && !matchingByEvent.has(report.eventRef)) {
-        matchingByEvent.set(report.eventRef, report);
-      }
-    }
-    const matchingReports = [...matchingByEvent.values()];
-    if (matchingReports.length === 0) {
-      unattributed.push(value);
-      continue;
-    }
-    if (matchingReports.length > 1) {
-      conflicted.push(Object.freeze({
-        value,
-        totalOrigins: matchingReports.length,
-        reports: Object.freeze(
-          matchingReports.slice(0, MAX_CONFLICT_ORIGINS).map(externalClaimOrigin),
-        ),
-      }));
-      continue;
-    }
-    const [report] = matchingReports;
-    const external = {
-      value,
-      ...externalClaimOrigin(report),
-    };
-    externalMatches.push(Object.freeze(external));
-  }
-
-  return Object.freeze({
-    local: Object.freeze(localMatches),
-    external: Object.freeze(externalMatches),
-    conflicted: Object.freeze(conflicted),
-    unattributed: Object.freeze(unattributed),
-  });
-}
-
-function normalizedToolArgs(input) {
-  if (input && typeof input === 'object' && !Array.isArray(input)) return input;
-  if (typeof input !== 'string') return undefined;
-  try {
-    const parsed = JSON.parse(input);
-    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-function provenanceAdvisoryForToolCall({ toolName, toolArgs, localClaims, externalReports } = {}) {
-  if (!TELEGRAM_MESSAGE_TOOL_RE.test(String(toolName ?? ''))) return null;
-  const args = normalizedToolArgs(toolArgs);
-  if (args === undefined || typeof args.text !== 'string') return null;
-  const assessment = assessOutboundClaimProvenance({
-    text: args.text,
-    localClaims,
-    externalReports,
-  });
-  if (assessment.external.length === 0
-      && assessment.conflicted.length === 0
-      && assessment.unattributed.length === 0) return null;
-  return Object.freeze({ ...assessment, blocked: false });
-}
-
-module.exports = {
-  assessOutboundClaimProvenance,
-  extractChecksumClaims,
-  provenanceAdvisoryForToolCall,
-};

package/bin/oversized-context-offload-policy.cjs

@@ -1,86 +0,0 @@
-'use strict';
-
-const OVERSIZED_CONTEXT_MESSAGE_MAX_CHARS = 200_000;
-const OVERSIZED_CONTEXT_TOOL_RESULT_MAX_CHARS = 200_000;
-
-function textContent(message) {
-  if (!Array.isArray(message?.content)) return undefined;
-  const textParts = message.content.filter(
-    (part) => part?.type === 'text' && typeof part.text === 'string',
-  );
-  if (textParts.length === 0) return undefined;
-  return textParts.map((part) => part.text).join('\n');
-}
-
-function oversizedItemKind(message) {
-  if (message?.role === 'tool') return 'tool-result';
-  if (message?.role === 'user') return 'user-message';
-  if (message?.role === 'assistant') return 'assistant-message';
-  return undefined;
-}
-
-function oversizedItemLimit(kind) {
-  return kind === 'tool-result'
-    ? OVERSIZED_CONTEXT_TOOL_RESULT_MAX_CHARS
-    : OVERSIZED_CONTEXT_MESSAGE_MAX_CHARS;
-}
-
-async function projectOversizedContextItems(messages, options = {}) {
-  if (!Array.isArray(messages) || typeof options.persistItem !== 'function') {
-    return {
-      messages,
-      offloadedCount: 0,
-      charsBefore: 0,
-      charsAfter: 0,
-      interventions: [],
-    };
-  }
-
-  const projected = messages.slice();
-  const interventions = [];
-  let charsBefore = 0;
-  let charsAfter = 0;
-
-  for (let index = 0; index < messages.length; index += 1) {
-    const message = messages[index];
-    const kind = oversizedItemKind(message);
-    if (kind === undefined) continue;
-    const text = textContent(message);
-    if (text === undefined || text.length < oversizedItemLimit(kind)) continue;
-
-    const replacement = await options.persistItem({ index, kind, message, text });
-    if (!Array.isArray(replacement?.content)) continue;
-    const replacementChars = textContent({ content: replacement.content })?.length;
-    if (!Number.isSafeInteger(replacementChars) || replacementChars >= text.length) continue;
-
-    projected[index] = {
-      ...message,
-      content: replacement.content,
-    };
-    charsBefore += text.length;
-    charsAfter += replacementChars;
-    interventions.push({
-      index,
-      kind,
-      charsBefore: text.length,
-      charsAfter: replacementChars,
-      ...(typeof replacement.outputPath === 'string'
-        ? { outputPath: replacement.outputPath }
-        : {}),
-    });
-  }
-
-  return {
-    messages: interventions.length === 0 ? messages : projected,
-    offloadedCount: interventions.length,
-    charsBefore,
-    charsAfter,
-    interventions,
-  };
-}
-
-module.exports = {
-  OVERSIZED_CONTEXT_MESSAGE_MAX_CHARS,
-  OVERSIZED_CONTEXT_TOOL_RESULT_MAX_CHARS,
-  projectOversizedContextItems,
-};

package/bin/pending-media-policy.cjs

@@ -1,182 +0,0 @@
-'use strict';
-
-const crypto = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const TERMINAL_STATUSES = new Set([
-  'blocked',
-  'cancelled',
-  'canceled',
-  'complete',
-  'completed',
-  'expired',
-  'failed',
-  'succeeded',
-]);
-const STATE_VERSION = 1;
-const MAX_RECORDS = 100;
-
-function validMediaId(value) {
-  return typeof value === 'string' && value.length > 0 && value.length <= 200
-    && /^[A-Za-z0-9_-]+$/.test(value);
-}
-
-function normalizedStatus(value, fallback = 'processing') {
-  const status = typeof value === 'string' ? value.trim().toLowerCase() : '';
-  return status || fallback;
-}
-
-function terminalStatus(value) {
-  return TERMINAL_STATUSES.has(normalizedStatus(value, ''));
-}
-
-function mediaRequestKey(requestPath, body) {
-  const stableBody = Object.fromEntries(Object.entries(body ?? {}).sort(([a], [b]) => a.localeCompare(b)));
-  return crypto.createHash('sha256')
-    .update(String(requestPath))
-    .update('\0')
-    .update(JSON.stringify(stableBody))
-    .digest('hex');
-}
-
-function safeRecord(value) {
-  if (!value || typeof value !== 'object' || !validMediaId(value.id)) return undefined;
-  return {
-    id: value.id,
-    status: normalizedStatus(value.status),
-    ...(typeof value.requestKey === 'string' && /^[a-f0-9]{64}$/.test(value.requestKey)
-      ? { requestKey: value.requestKey }
-      : {}),
-    ...(typeof value.chatId === 'string' && value.chatId.length > 0 && value.chatId.length <= 100
-      ? { chatId: value.chatId }
-      : {}),
-    ...(typeof value.localPath === 'string' && value.localPath.length > 0 && value.localPath.length <= 4096
-      ? { localPath: value.localPath }
-      : {}),
-    createdAt: Number.isFinite(value.createdAt) ? value.createdAt : Date.now(),
-    updatedAt: Number.isFinite(value.updatedAt) ? value.updatedAt : Date.now(),
-    ...(Number.isFinite(value.deliveredAt) ? { deliveredAt: value.deliveredAt } : {}),
-    ...(typeof value.lastError === 'string' && value.lastError.length > 0
-      ? { lastError: value.lastError.slice(0, 500) }
-      : {}),
-  };
-}
-
-function createPendingMediaTracker(options = {}) {
-  const statePath = typeof options.statePath === 'string' && options.statePath.length > 0
-    ? options.statePath
-    : undefined;
-  const now = typeof options.now === 'function' ? options.now : Date.now;
-  const records = new Map();
-
-  function load() {
-    if (!statePath) return;
-    try {
-      const parsed = JSON.parse(fs.readFileSync(statePath, 'utf8'));
-      if (parsed?.version !== STATE_VERSION || !Array.isArray(parsed.jobs)) return;
-      for (const value of parsed.jobs) {
-        const record = safeRecord(value);
-        if (record) records.set(record.id, record);
-      }
-    } catch {}
-  }
-
-  function persist() {
-    if (!statePath) return;
-    const jobs = [...records.values()]
-      .sort((a, b) => b.updatedAt - a.updatedAt)
-      .slice(0, MAX_RECORDS);
-    records.clear();
-    for (const job of jobs) records.set(job.id, job);
-    fs.mkdirSync(path.dirname(statePath), { recursive: true, mode: 0o700 });
-    const temporary = `${statePath}.${process.pid}.tmp`;
-    fs.writeFileSync(temporary, `${JSON.stringify({ version: STATE_VERSION, jobs })}\n`, { mode: 0o600 });
-    fs.renameSync(temporary, statePath);
-  }
-
-  function change(id, updates) {
-    if (!validMediaId(id)) return undefined;
-    const existing = records.get(id) ?? {
-      id,
-      status: 'processing',
-      createdAt: now(),
-      updatedAt: now(),
-    };
-    const record = safeRecord({ ...existing, ...updates, id, updatedAt: now() });
-    if (!record) return undefined;
-    records.set(id, record);
-    persist();
-    return record;
-  }
-
-  load();
-
-  return {
-    observeSubmission(job, requestKey) {
-      if (!validMediaId(job?.id)) return;
-      change(job.id, {
-        status: normalizedStatus(job.status),
-        ...(typeof requestKey === 'string' ? { requestKey } : {}),
-      });
-    },
-    observeLookup(result) {
-      if (!validMediaId(result?.id)) return;
-      if (result.kind === 'file' || result.kind === 'text') {
-        change(result.id, { status: 'complete' });
-        return;
-      }
-      change(result.id, { status: normalizedStatus(result.status) });
-    },
-    findReusableRequest(requestKey) {
-      if (typeof requestKey !== 'string') return undefined;
-      const record = [...records.values()]
-        .filter((job) => job.requestKey === requestKey && job.deliveredAt === undefined)
-        .sort((a, b) => b.updatedAt - a.updatedAt)[0];
-      if (!record || (terminalStatus(record.status) && record.status !== 'complete' && record.status !== 'completed')) {
-        return undefined;
-      }
-      return { id: record.id, status: record.status };
-    },
-    associateDelivery(id, chatId) {
-      if (typeof chatId !== 'string' || chatId.length === 0) return;
-      change(id, { chatId });
-    },
-    noteSaved(id, localPath) {
-      if (typeof localPath !== 'string' || localPath.length === 0) return;
-      change(id, { localPath, status: 'complete', lastError: undefined });
-    },
-    noteDelivered(id) {
-      change(id, { deliveredAt: now(), status: 'complete', lastError: undefined });
-    },
-    noteDeliveryFailure(id, error) {
-      change(id, { lastError: String(error ?? 'delivery_failed').slice(0, 500) });
-    },
-    noteRejected(id, error) {
-      change(id, {
-        status: 'failed',
-        lastError: String(error ?? 'media_quality_rejected').slice(0, 500),
-      });
-    },
-    pendingDeliveries() {
-      return [...records.values()]
-        .filter((job) => job.chatId !== undefined && job.deliveredAt === undefined
-          && (!terminalStatus(job.status) || job.status === 'complete' || job.status === 'completed'))
-        .sort((a, b) => a.createdAt - b.createdAt)
-        .map((job) => ({
-          id: job.id,
-          chatId: job.chatId,
-          status: job.status,
-          ...(job.localPath === undefined ? {} : { localPath: job.localPath }),
-        }));
-    },
-    ids() {
-      return [...records.values()]
-        .filter((job) => !terminalStatus(job.status))
-        .sort((a, b) => a.createdAt - b.createdAt)
-        .map((job) => job.id);
-    },
-  };
-}
-
-module.exports = { createPendingMediaTracker, mediaRequestKey };

package/bin/pending-token-estimate-policy.cjs

@@ -1,41 +0,0 @@
-'use strict';
-
-function createPendingTokenEstimateCache(estimateMessages) {
-  if (typeof estimateMessages !== 'function') {
-    throw new TypeError('estimateMessages must be a function');
-  }
-
-  let cachedHistory = null;
-  let cachedCoveredCount = -1;
-  let cachedRevision = -1;
-  let cachedEstimate = 0;
-
-  return {
-    read(history, coveredMessageCount, revision) {
-      const messages = Array.isArray(history) ? history : [];
-      const covered = Math.max(
-        0,
-        Math.min(messages.length, Math.floor(Number(coveredMessageCount) || 0)),
-      );
-      const currentRevision = Number.isSafeInteger(revision) ? revision : 0;
-
-      if (
-        messages === cachedHistory
-        && covered === cachedCoveredCount
-        && currentRevision === cachedRevision
-      ) {
-        return cachedEstimate;
-      }
-
-      cachedEstimate = estimateMessages(messages.slice(covered));
-      cachedHistory = messages;
-      cachedCoveredCount = covered;
-      cachedRevision = currentRevision;
-      return cachedEstimate;
-    },
-  };
-}
-
-module.exports = {
-  createPendingTokenEstimateCache,
-};

package/bin/personal-memory-consent-policy.cjs

@@ -1,72 +0,0 @@
-'use strict';
-
-const PERSONAL_MEMORY_MUTATION_TOOLS = new Set([
-  'mcp__personal-memory__memory_settings_update',
-  'mcp__personal-memory__memory_remember',
-]);
-
-function normalizeText(input) {
-  return String(input ?? '')
-    .normalize('NFKD')
-    .replaceAll(/\p{M}/gu, '')
-    .toLocaleLowerCase()
-    .replaceAll(/[\u2018\u2019]/g, "'")
-    .replaceAll(/\s+/g, ' ')
-    .trim();
-}
-
-function personalMemoryMutationDecision(permissionMode, toolName) {
-  if (!PERSONAL_MEMORY_MUTATION_TOOLS.has(String(toolName).toLowerCase())) {
-    return undefined;
-  }
-  return permissionMode === 'yolo' ? 'approve' : 'ask';
-}
-
-function isNegatedRememberRequest(input) {
-  return /^(?:please\s+)?(?:do\s+not|don't|never)\s+(?:remember|save|keep)\b/.test(input)
-    || /^(?:bitte\s+)?(?:nicht|nie)\s+(?:merken|speichern)\b/.test(input)
-    || /^(?:bitte\s+)?merk(?:e)?\s+dir\b.*\b(?:nicht|nie)\b/.test(input)
-    || /^(?:por\s+favor\s+)?no\s+(?:recuerdes|guardes)\b/.test(input)
-    || /^ne\s+(?:memorise|te\s+souviens)\b.*\bpas\b/.test(input)
-    || /^(?:snalla\s+)?(?:kom\s+inte\s+ihag|spara\s+inte)\b/.test(input)
-    || /^(?:prosim\s+)?(?:nezapamatuj|neukladej)\b/.test(input);
-}
-
-function isExplicitRememberRequest(input, allowEmbedded) {
-  const normalized = normalizeText(input);
-  if (normalized.length === 0 || isNegatedRememberRequest(normalized)) return false;
-
-  const anchored = [
-    /^(?:please\s+)?remember\s+(?:this|that|my|the\s+following|that\b)/,
-    /^(?:please\s+)?(?:save|keep)\s+(?:this|that)\s+(?:in\s+(?:your\s+)?memory|for\s+later)\b/,
-    /^(?:bitte\s+)?merk(?:e)?\s+dir(?:\s*[:,]|\s+(?:das|dies|dass|mein(?:e|en)?|folgendes)\b)/,
-    /^(?:kannst\s+du\s+dir\s+(?:bitte\s+)?|bitte\s+)merken\s*[,]?\s+dass\b/,
-    /^(?:bitte\s+)?speicher(?:e)?\s+(?:dir\s+)?(?:das|dies|folgendes)\b/,
-    /^(?:por\s+favor\s+)?recuerda(?:\s*[:,]|\s+(?:esto|eso|que|mi)\b)/,
-    /^(?:por\s+favor\s+)?guarda\s+(?:esto|eso)\s+en\s+(?:la\s+)?memoria\b/,
-    /^(?:s'il\s+te\s+plait\s*[,]?\s+)?memorise(?:\s*[:,]|\s+(?:ceci|cela|que|mon|ma|mes)\b)/,
-    /^(?:s'il\s+te\s+plait\s*[,]?\s+)?souviens-toi(?:\s*[:,]|\s+(?:de|que|ceci|cela)\b)/,
-    /^(?:snalla\s+)?kom\s+ihag(?:\s*[:,]|\s+(?:detta|det|att|min|mitt|mina)\b)/,
-    /^(?:snalla\s+)?spara\s+(?:det\s+har|detta)\s+i\s+minnet\b/,
-    /^(?:prosim\s+)?zapamatuj\s+si(?:\s*[:,]|\s+(?:to|ze|moje|muj|mou)\b)/,
-    /^(?:prosim\s+)?uloz\s+si\s+(?:to|toto)\s+do\s+pameti\b/,
-  ];
-  if (anchored.some((pattern) => pattern.test(normalized))) return true;
-  if (!allowEmbedded) return false;
-
-  return [
-    /\b(?:please\s+)?remember\s+(?:this|that|my|the\s+following)\b/,
-    /\b(?:bitte\s+)?merk(?:e)?\s+dir\s+(?:das|dies|dass|folgendes)\b/,
-    /\bspeicher(?:e)?\s+(?:dir\s+)?(?:das|dies|folgendes)\b/,
-  ].some((pattern) => pattern.test(normalized));
-}
-
-function shouldArmPersonalMemoryRememberIntent(input, options = {}) {
-  if (options.permissionMode === 'yolo') return true;
-  return isExplicitRememberRequest(input, options.channel === true);
-}
-
-module.exports = {
-  personalMemoryMutationDecision,
-  shouldArmPersonalMemoryRememberIntent,
-};

package/bin/personal-memory-performance-policy.cjs

@@ -1,12 +0,0 @@
-'use strict';
-
-const LOW_INFORMATION_TURN_RE = /^(?:k|ok(?:ay)?|ja|jo|jep|yes|yep|passt|danke|dankeschön|thanks|super|perfekt|gut|alles klar|verstanden|notiert|erledigt)[.!?]*$/iu;
-
-function isLowInformationPersonalMemoryQuery(value) {
-  if (typeof value !== 'string') return false;
-  const normalized = value.trim().replaceAll(/\s+/gu, ' ');
-  if (normalized.length === 0 || normalized.length > 32) return false;
-  return LOW_INFORMATION_TURN_RE.test(normalized);
-}
-
-module.exports = { isLowInformationPersonalMemoryQuery };

package/bin/personality-choice-policy.cjs

@@ -1,101 +0,0 @@
-'use strict';
-
-const crypto = require('node:crypto');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-
-const { ensurePersonalityWorkspace } = require('./personality-setup-policy.cjs');
-const { readProfilePersona } = require('./profile-identity-resolution.cjs');
-
-const MAX_PERSONA_BYTES = 64 * 1024;
-
-function fail(code, detail = '') {
-  throw new Error(detail ? `${code}:${detail}` : code);
-}
-
-function resolvedHome(env) {
-  const configured = String(env.BLUN_HOME ?? env.BLUN_SHARED_HOME ?? '').trim();
-  return path.resolve(configured || path.join(os.homedir(), '.blun'));
-}
-
-function safeHome(env) {
-  const home = resolvedHome(env);
-  fs.mkdirSync(home, { recursive: true });
-  const stat = fs.lstatSync(home);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) fail('PERSONALITY_CHOICE_UNSAFE_HOME');
-  const realHome = fs.realpathSync(home);
-  if (path.resolve(realHome) !== home) fail('PERSONALITY_CHOICE_UNSAFE_HOME');
-  return home;
-}
-
-function readPersonaState(target) {
-  try {
-    const stat = fs.lstatSync(target);
-    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_PERSONA_BYTES) {
-      fail('PERSONALITY_CHOICE_UNSAFE_PERSONA');
-    }
-    const raw = fs.readFileSync(target, 'utf8');
-    const value = JSON.parse(raw);
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-      fail('PERSONALITY_CHOICE_UNSAFE_PERSONA');
-    }
-    return { existed: true, raw, value };
-  } catch (error) {
-    if (error?.code === 'ENOENT') return { existed: false, raw: '', value: {} };
-    if (String(error?.message ?? '').startsWith('PERSONALITY_CHOICE_')) throw error;
-    fail('PERSONALITY_CHOICE_UNSAFE_PERSONA');
-  }
-}
-
-function atomicWrite(target, raw) {
-  const parent = path.dirname(target);
-  const temp = path.join(parent, `.persona-${process.pid}-${crypto.randomBytes(8).toString('hex')}.tmp`);
-  let handle;
-  try {
-    handle = fs.openSync(temp, 'wx', 0o600);
-    fs.writeFileSync(handle, raw, 'utf8');
-    fs.fsyncSync(handle);
-    fs.closeSync(handle);
-    handle = undefined;
-    fs.renameSync(temp, target);
-  } finally {
-    if (handle !== undefined) fs.closeSync(handle);
-    try {
-      fs.unlinkSync(temp);
-    } catch (error) {
-      if (error?.code !== 'ENOENT') throw error;
-    }
-  }
-}
-
-function setPersonalityEnabledAtomic(enabled, env = process.env) {
-  if (typeof enabled !== 'boolean') fail('PERSONALITY_CHOICE_INVALID_VALUE');
-  const home = safeHome(env);
-  const target = path.join(home, 'persona.json');
-  const previous = readPersonaState(target);
-
-  if (enabled) {
-    const setup = ensurePersonalityWorkspace(env);
-    if (!setup.ready) fail('PERSONALITY_SETUP_FAILED', setup.reason);
-  }
-
-  const nextRaw = `${JSON.stringify({ ...previous.value, personalityEnabled: enabled }, null, 2)}\n`;
-  atomicWrite(target, nextRaw);
-  return Object.freeze({ target, previousRaw: previous.raw, previousExisted: previous.existed, nextRaw });
-}
-
-function rollbackPersonalityChoice(receipt) {
-  if (!receipt || typeof receipt !== 'object') fail('PERSONALITY_CHOICE_INVALID_RECEIPT');
-  const target = path.resolve(String(receipt.target ?? ''));
-  const current = readPersonaState(target);
-  if (!current.existed || current.raw !== receipt.nextRaw) fail('PERSONALITY_CHOICE_CONFLICT');
-
-  if (receipt.previousExisted) {
-    atomicWrite(target, String(receipt.previousRaw ?? ''));
-  } else {
-    fs.unlinkSync(target);
-  }
-}
-
-module.exports = { rollbackPersonalityChoice, setPersonalityEnabledAtomic };