blun-king-cli 9.1.609 → 9.1.610

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # BLUN King Changelog
 
+## 9.1.610
+
+- Mit `@all` erreichst du in einer Telegram-Gruppe alle angebundenen Kings. Nachrichten ohne passende Erwähnung bleiben vom Modellkontext ausgeschlossen, wenn die Erwähnungsregel aktiv ist.
+- Konkrete Aufträge und Fragen bleiben beantwortbar; bloße Informationen und ausdrücklich bestätigungsfreie Nachrichten lösen keine unnötige Gruppenbestätigung aus.
+- Telegram-`/`-Befehle werden vor normalen TUI-Nachrichten zugestellt und nicht in die Arbeitswarteschlange gelegt. Kann ein Fernbefehl während eines laufenden Zugs nicht sicher ausgeführt werden, erhältst du sofort eine Ablehnung und kannst ihn erneut senden; er läuft nicht später überraschend an.
+- Ein leerer oder ausdrücklich stiller Headless-Zug sendet keine automatische Telegram-Antwort. Als eindeutiges Stille-Zeichen gilt `[[BLUN_TELEGRAM_SILENT]]` allein als Ausgabetext; die fünf beobachteten Stille-Formulierungen werden ebenfalls unterdrückt. Echte Antworten ohne `reply` bleiben zustellbar.
+- Auf Linux ist das npm-Paket wieder installierbar. `king --profile serve` und `king serve` öffnen wieder das bestehende Profil; dessen Konfiguration bleibt getrennt, während vorhandene gemeinsame Zugangsdaten weiter genutzt werden.
+- Diese Änderungen belegen weder eine kürzere Modellwartezeit noch geringeren Tokenverbrauch.
+
 ## 9.1.609
 
 - Open the existing effort picker with Ctrl+L while preserving the editor draft. Reuse the existing effort settings and model restrictions rather than adding a second configuration path.

package/LIESMICH.txt

@@ -26,7 +26,7 @@ Installation
 ------------
 Die geprüfte Version exakt global installieren:
 
-  npm install -g blun-king-cli@9.1.609
+  npm install -g blun-king-cli@9.1.610
 
 Start
 -----

package/README.md

@@ -9,7 +9,7 @@ Voraussetzung ist Node.js 24.15 oder neuer. Die geprüfte Version wird exakt
 installiert:
 
 ```powershell
-npm install -g blun-king-cli@9.1.609
+npm install -g blun-king-cli@9.1.610
 ```
 
 ### Windows: Node.js, npm und Git Bash

package/bin/launcher-runtime.js

@@ -33,29 +33,68 @@ const { unsupportedNodeMessage } = require('./node-version');
 const { repairConfiguredNativeModules } = require('./native-module-repair');
 const { acquireSharedRuntimeLease, tryAcquireUpdateLease } = require('./update-lease');
 const { runExplicitUpdate, runUpdateNotice } = require('./update-notice');
-const {
-  ensurePrivateDirectory,
-  securePrivateFile,
-  writePrivateFile,
-} = require('./private-paths');
-
-const PKG = path.resolve(__dirname, '..');
-const ARGS = process.argv.slice(2);
+const {
+  ensurePrivateDirectory,
+  securePrivateFile,
+  writePrivateFile,
+} = require('./private-paths');
+const { parseProfileLaunchArgs, resolveSelectedProfile } = require('./profile-launch.cjs');
+
+const PKG = path.resolve(__dirname, '..');
+const PROFILE = parseProfileLaunchArgs(process.argv.slice(2), launcherModeFromArgv(process.argv));
+const ARGS = PROFILE.args;
 const CORE_LOAD_TIMEOUT_MS = 30_000;
 
-function normalizeWindowsPath(value) {
-  return path.win32.normalize(value).replace(/\\+$/u, '').toLowerCase();
-}
+function normalizeWindowsPath(value) {
+  return path.win32.normalize(value).replace(/\\+$/u, '').toLowerCase();
+}
+
+function runningTuiPid(blunDir, options = {}) {
+  const fsImpl = options.fsImpl || fs;
+  const kill = options.kill || process.kill.bind(process);
+  const now = options.now ?? Date.now();
+  const stateDir = path.join(blunDir, 'channels', 'telegram');
+  try {
+    const leaseFile = path.join(stateDir, 'tui.pid');
+    const owner = JSON.parse(fsImpl.readFileSync(path.join(stateDir, 'tui-owner.json'), 'utf8'));
+    const leasePid = Number(fsImpl.readFileSync(leaseFile, 'utf8').trim());
+    if (owner?.version !== 1 || !Number.isSafeInteger(owner.pid) || owner.pid <= 1
+      || owner.pid !== leasePid || now - fsImpl.statSync(leaseFile).mtimeMs > 90_000) return null;
+    kill(owner.pid, 0);
+    return owner.pid;
+  } catch {
+    return null;
+  }
+}
+
+function isInteractiveKingStart(args) {
+  return args.length === 0 || (args.length === 1 && args[0] === '-c');
+}
 
-function resolveLauncherPrivatePaths(options = {}) {
-  const env = options.env || process.env;
-  const platform = options.platform || process.platform;
-  const configuredHome = String(env.BLUN_HOME || '').trim();
-  if (platform !== 'win32') {
-    const userHome = (options.homedir || os.homedir)();
-    return {
-      blunHome: configuredHome ? path.resolve(configuredHome) : path.join(userHome, '.blun'),
-      userHome,
+function resolveLauncherPrivatePaths(options = {}) {
+  const env = options.env || process.env;
+  const platform = options.platform || process.platform;
+  const configuredHome = String(env.BLUN_HOME || '').trim();
+  const selectedProfile = options.profileName ?? PROFILE.name;
+  if (platform !== 'win32') {
+    const posix = path.posix;
+    const userHome = (options.homedir || os.homedir)();
+    if (selectedProfile !== undefined) {
+      const configuredShared = String(env.BLUN_SHARED_HOME || '').trim();
+      const sharedHome = configuredShared
+        ? posix.resolve(configuredShared)
+        : configuredHome && posix.basename(posix.dirname(configuredHome)) === 'profile'
+          ? posix.resolve(configuredHome, '..', '..')
+          : configuredHome ? posix.resolve(configuredHome) : posix.join(userHome, '.blun');
+      const blunHome = resolveSelectedProfile(sharedHome, selectedProfile, posix);
+      if (configuredShared && configuredHome && posix.resolve(configuredHome) !== blunHome) {
+        throw new Error(`BLUN_HOME passt nicht zum Profil ${selectedProfile}: ${blunHome}`);
+      }
+      return { blunHome, sharedHome, userHome };
+    }
+    return {
+      blunHome: configuredHome ? path.resolve(configuredHome) : path.join(userHome, '.blun'),
+      userHome,
     };
   }
 
@@ -78,8 +117,20 @@ function resolveLauncherPrivatePaths(options = {}) {
     throw new Error('Das lokale Windows-Benutzerprofil ist kein kanonischer lokaler Pfad.');
   }
 
-  const blunHome = path.win32.join(userHome, '.blun');
-  if (configuredHome
+  const blunHome = path.win32.join(userHome, '.blun');
+  if (selectedProfile !== undefined) {
+    const profileHome = resolveSelectedProfile(blunHome, selectedProfile, path.win32);
+    const configuredShared = String(env.BLUN_SHARED_HOME || '').trim();
+    if (configuredShared && normalizeWindowsPath(path.win32.resolve(configuredShared)) !== normalizeWindowsPath(blunHome)) {
+      throw new Error(`BLUN_SHARED_HOME muss unter Windows exakt im Windows-Benutzerprofil liegen: ${blunHome}`);
+    }
+    if (configuredHome && normalizeWindowsPath(path.win32.resolve(configuredHome)) !== normalizeWindowsPath(profileHome)
+      && normalizeWindowsPath(path.win32.resolve(configuredHome)) !== normalizeWindowsPath(blunHome)) {
+      throw new Error(`BLUN_HOME passt nicht zum Profil ${selectedProfile}: ${profileHome}`);
+    }
+    return { blunHome: profileHome, sharedHome: blunHome, userHome };
+  }
+  if (configuredHome
     && normalizeWindowsPath(path.win32.resolve(configuredHome)) !== normalizeWindowsPath(blunHome)) {
     throw new Error(`BLUN_HOME muss unter Windows exakt im Windows-Benutzerprofil liegen: ${blunHome}`);
   }
@@ -367,18 +418,29 @@ async function runLauncher(options = {}) {
       }
       process.stdout.write(launcherHelpText());
       const env = createLauncherEnvironment(process.env, mode, readPackageVersion());
-      const informationalEnv = { ...process.env };
-      delete informationalEnv.BLUN_HOME;
-      env.BLUN_HOME = resolveLauncherPrivatePaths({ env: informationalEnv }).blunHome;
+      const informationalEnv = { ...process.env };
+      delete informationalEnv.BLUN_HOME;
+      const paths = resolveLauncherPrivatePaths({ env: informationalEnv });
+      env.BLUN_HOME = paths.blunHome;
+      if (PROFILE.name !== undefined) {
+        env.BLUN_SHARED_HOME = paths.sharedHome;
+        env.BLUN_PROFILE = PROFILE.name;
+      }
       process.exitCode = await runInformationalCore(ARGS, env, callerCwd, releaseNotice);
       return;
     }
 
-    let privatePaths;
-    const getPrivatePaths = () => {
-      privatePaths ||= resolveLauncherPrivatePaths();
-      return privatePaths;
-    };
+    let privatePaths;
+    const getPrivatePaths = () => {
+      if (!privatePaths) {
+        const resolved = resolveLauncherPrivatePaths();
+        if (PROFILE.implicit && !fs.existsSync(resolved.blunHome)) {
+          throw new Error(`Profil ${PROFILE.name} gibt es nicht. Anlegen mit king --profile ${PROFILE.name}.`);
+        }
+        privatePaths = resolved;
+      }
+      return privatePaths;
+    };
     const nodeRuntime = await prepareManagedNodeRuntime({
       getBlunDir: () => getPrivatePaths().blunHome,
     });
@@ -397,15 +459,28 @@ async function runLauncher(options = {}) {
     if (ARGS.some((arg) => arg === '--help' || arg === '-h')) {
       process.stdout.write(launcherHelpText());
       const env = createLauncherEnvironment(process.env, mode, readPackageVersion());
-      const informationalEnv = { ...process.env };
-      delete informationalEnv.BLUN_HOME;
-      env.BLUN_HOME = resolveLauncherPrivatePaths({ env: informationalEnv }).blunHome;
+      const informationalEnv = { ...process.env };
+      delete informationalEnv.BLUN_HOME;
+      const paths = resolveLauncherPrivatePaths({ env: informationalEnv });
+      env.BLUN_HOME = paths.blunHome;
+      if (PROFILE.name !== undefined) {
+        env.BLUN_SHARED_HOME = paths.sharedHome;
+        env.BLUN_PROFILE = PROFILE.name;
+      }
       process.exitCode = await superviseProtectedCore(ARGS, env, callerCwd, releaseNotice);
       return;
     }
 
-    const blunDir = getPrivatePaths().blunHome;
-    ensurePrivateDirectory(blunDir);
+    const blunDir = getPrivatePaths().blunHome;
+    if (mode === LAUNCHER_MODES.KING && isInteractiveKingStart(ARGS)) {
+      const activePid = runningTuiPid(blunDir);
+      if (activePid !== null) {
+        process.stderr.write(`King läuft bereits (PID ${activePid}).\n`);
+        process.exitCode = 1;
+        return;
+      }
+    }
+    ensurePrivateDirectory(blunDir);
 
     // --- 1. Oeffentlicher npm-Update-Dialog. -------------------------------
     const updateResult = options.skipUpdateNotice === true
@@ -470,8 +545,12 @@ async function runLauncher(options = {}) {
     }
 
     // --- 6. Start -----------------------------------------------------------
-    const env = createLauncherEnvironment(process.env, mode, readPackageVersion(), blunDir);
-    env.BLUN_HOME = blunDir;
+    const env = createLauncherEnvironment(process.env, mode, readPackageVersion(), blunDir);
+    env.BLUN_HOME = blunDir;
+    if (PROFILE.name !== undefined) {
+      env.BLUN_SHARED_HOME = getPrivatePaths().sharedHome;
+      env.BLUN_PROFILE = PROFILE.name;
+    }
     process.exitCode = await superviseProtectedCore(
       ARGS,
       env,
@@ -483,8 +562,10 @@ async function runLauncher(options = {}) {
   }
 }
 
-module.exports = {
-  resolveLauncherPrivatePaths,
+module.exports = {
+  resolveLauncherPrivatePaths,
+  isInteractiveKingStart,
+  runningTuiPid,
   runLauncher,
   shouldDetachProtectedCore,
   spawnManagedLauncher,

package/bin/private-paths.js

@@ -44,7 +44,10 @@ public static class BlunPrivateAclNative
     private const uint FILE_DIRECTORY_FILE = 0x00000001;
     private const uint FILE_SYNCHRONOUS_IO_NONALERT = 0x00000020;
     private const uint FILE_OPEN_REPARSE_POINT = 0x00200000;
-    private const uint FILE_OPEN_IF = 3;
+    private const uint FILE_OPEN_IF = 3;
+    private const uint FILE_SHARE_READ = 0x00000001;
+    private const uint FILE_SHARE_WRITE = 0x00000002;
+    private const uint FILE_SHARE_DELETE = 0x00000004;
     private const uint OBJ_CASE_INSENSITIVE = 0x00000040;
     private const uint SE_FILE_OBJECT = 1;
     private const uint OWNER_SECURITY_INFORMATION = 0x00000001;
@@ -602,17 +605,30 @@ public static class BlunPrivateAclNative
             IoStatusBlock ioStatus;
             int status = NtCreateFile(
                 out rawHandle,
-                GENERIC_READ | READ_CONTROL | WRITE_DAC | DELETE | SYNCHRONIZE,
+                GENERIC_READ | READ_CONTROL | WRITE_DAC | DELETE | SYNCHRONIZE,
                 ref attributes,
                 out ioStatus,
                 IntPtr.Zero,
                 0,
-                0,
-                FILE_OPEN_IF,
+                FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
+                FILE_OPEN_IF,
                 FILE_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT | FILE_OPEN_REPARSE_POINT,
-                IntPtr.Zero,
-                0);
-            if (status < 0)
+                IntPtr.Zero,
+                0);
+            if (status < 0 && RtlNtStatusToDosError(status) == 32)
+                status = NtCreateFile(
+                    out rawHandle,
+                    GENERIC_READ | READ_CONTROL | WRITE_DAC | SYNCHRONIZE,
+                    ref attributes,
+                    out ioStatus,
+                    IntPtr.Zero,
+                    0,
+                    FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
+                    FILE_OPEN_IF,
+                    FILE_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT | FILE_OPEN_REPARSE_POINT,
+                    IntPtr.Zero,
+                    0);
+            if (status < 0)
                 throw new Win32Exception((int)RtlNtStatusToDosError(status));
             return new SafeFileHandle(rawHandle, true);
         }
@@ -1058,8 +1074,8 @@ public static class BlunPrivateAclNative
     }
 }`;
 
-const WINDOWS_ACL_CSHARP_GZIP = gzipSync(
-  Buffer.from(WINDOWS_ACL_CSHARP),
+const WINDOWS_ACL_CSHARP_GZIP = gzipSync(
+  Buffer.from(WINDOWS_ACL_CSHARP.replace(/\n[ \t]*\n/gu, '\n')),
   { level: 9 },
 ).toString('base64');
 
@@ -1068,9 +1084,9 @@ const WINDOWS_ACL_SCRIPT = [
   "$ProgressPreference = 'SilentlyContinue'",
   'try {',
   'Set-StrictMode -Version 3',
-  "$target=[Environment]::GetEnvironmentVariable('BLUN_PRIVATE_ACL_TARGET','Process')",
-  "$kind=[Environment]::GetEnvironmentVariable('BLUN_PRIVATE_ACL_KIND','Process')",
-  "$sid=[Environment]::GetEnvironmentVariable('BLUN_PRIVATE_ACL_USER_SID','Process')",
+  '$target=$env:BLUN_PRIVATE_ACL_TARGET',
+  '$kind=$env:BLUN_PRIVATE_ACL_KIND',
+  '$sid=$env:BLUN_PRIVATE_ACL_USER_SID',
   "if ([string]::IsNullOrWhiteSpace($target) -or -not [IO.Path]::IsPathRooted($target)) { throw 'Invalid target.' }",
   "if ($kind -ne 'directory' -and $kind -ne 'file' -and $kind -ne 'file-write' -and $kind -ne 'tree') { throw 'Invalid kind.' }",
   `$bytes=[Convert]::FromBase64String('${WINDOWS_ACL_CSHARP_GZIP}')`,
@@ -1105,15 +1121,18 @@ const WINDOWS_ACL_SCRIPT = [
   '$mem.Dispose()',
   '}',
   '}',
-  "[Console]::Out.Write('BLUN_PRIVATE_ACL_OK_V1')",
-  'exit 0',
-  '} catch {',
-  "[Console]::Error.Write('BLUN_PRIVATE_ACL_ERROR_V1')",
-  'exit 1',
+  "[Console]::Out.Write('BLUN_PRIVATE_ACL_OK_V1')",
+  'exit 0',
+  '} catch {',
+  "$e='BLUN_PRIVATE_ACL_ERROR_V1'; if ($kind -eq 'directory') { $e += '|' + $_.Exception.Message }; [Console]::Error.Write($e)",
+  'exit 1',
   '}',
 ].join('\n');
 
-const WINDOWS_ACL_ENCODED_COMMAND = Buffer.from(WINDOWS_ACL_SCRIPT, 'utf16le').toString('base64');
+const WINDOWS_ACL_ENCODED_COMMAND = Buffer.from(
+  WINDOWS_ACL_SCRIPT.replace(/\n[ \t]*\n/gu, '\n'),
+  'utf16le',
+).toString('base64');
 
 function windowsSystemDirectory(options) {
   const env = options.env || process.env;
@@ -1127,10 +1146,16 @@ function windowsSystemDirectory(options) {
   return path.win32.normalize(directory);
 }
 
-function windowsHostEnvironment(systemDirectory) {
-  const systemRoot = path.win32.dirname(systemDirectory);
-  return { SystemRoot: systemRoot, WINDIR: systemRoot };
-}
+function windowsHostEnvironment(systemDirectory, options) {
+  const systemRoot = path.win32.dirname(systemDirectory);
+  const source = options.env || process.env;
+  const temporaryDirectory = source.TEMP || source.TMP;
+  return {
+    SystemRoot: systemRoot,
+    WINDIR: systemRoot,
+    ...(temporaryDirectory ? { TEMP: temporaryDirectory, TMP: temporaryDirectory } : {}),
+  };
+}
 
 function runWindowsCommand(executable, args, options, env, input) {
   const execFileSyncImpl = options.execFileSyncImpl || execFileSync;
@@ -1190,14 +1215,14 @@ function resolveWindowsPrivateTarget(targetPath) {
       throw new Error('Invalid Windows private path.');
     }
     return absoluteTarget;
-  } catch {
-    throw new Error('Windows private ACL hardening or verification failed.');
+  } catch (error) {
+    throw new Error('Windows private ACL hardening or verification failed: invalid target path.', { cause: error });
   }
 }
 
-function windowsAclController(options) {
-  const systemDirectory = windowsSystemDirectory(options);
-  const hostEnvironment = windowsHostEnvironment(systemDirectory);
+function windowsAclController(options) {
+  const systemDirectory = windowsSystemDirectory(options);
+  const hostEnvironment = windowsHostEnvironment(systemDirectory, options);
   const whoami = path.win32.join(systemDirectory, 'whoami.exe');
   const powershell = path.win32.join(
     systemDirectory,
@@ -1228,14 +1253,19 @@ function windowsAclController(options) {
     return userSid;
   };
 
-  const invoke = (targetPath, kind, input) => {
-    try {
-      const absoluteTarget = resolveWindowsPrivateTarget(targetPath);
-      const root = path.parse(absoluteTarget).root;
+  const invoke = (targetPath, kind, input) => {
+    try {
+      const absoluteTarget = resolveWindowsPrivateTarget(targetPath);
+      const failure = (reason) => new Error(
+        kind === 'directory'
+          ? `Windows private ACL hardening or verification failed for ${absoluteTarget}: ${reason}`
+          : 'Windows private ACL hardening or verification failed.',
+      );
+      const root = path.parse(absoluteTarget).root;
       if (!path.isAbsolute(absoluteTarget)
         || root.toLowerCase() === absoluteTarget.toLowerCase()
         || !['directory', 'file', 'file-write', 'tree'].includes(kind)) {
-        throw new Error('Windows private ACL hardening or verification failed.');
+        throw failure('invalid target or operation');
       }
       const env = {
         ...hostEnvironment,
@@ -1253,11 +1283,19 @@ function windowsAclController(options) {
           env,
           input,
         );
-      } catch {
-        throw new Error('Windows private ACL hardening or verification failed.');
-      }
-      if (output !== WINDOWS_ACL_OK_SENTINEL) {
-        throw new Error('Windows private ACL hardening or verification failed.');
+      } catch (error) {
+        const stderr = String(error?.stderr || '');
+        const marker = 'BLUN_PRIVATE_ACL_ERROR_V1|';
+        const detail = kind === 'directory' && stderr.startsWith(marker)
+          ? stderr.slice(marker.length).replace(/[\x00-\x1f\x7f]/gu, ' ').slice(0, 400)
+          : 'Windows ACL helper failed without a native diagnosis';
+        if (kind === 'directory') {
+          throw new Error(failure(detail).message, { cause: new Error(detail) });
+        }
+        throw failure(detail);
+      }
+      if (output !== WINDOWS_ACL_OK_SENTINEL) {
+        throw failure('unexpected ACL helper response');
       }
     } finally {
       input?.fill(0);

package/bin/profile-launch.cjs

@@ -0,0 +1,42 @@
+'use strict';
+
+const path = require('node:path');
+
+const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,31}$/u;
+const RESERVED = new Set(['doctor', 'export', 'help', 'login', 'mcp', 'server', 'tools', 'update', 'upgrade', 'version']);
+
+function profileName(value) {
+  const name = String(value || '').trim().toLowerCase();
+  if (!PROFILE_NAME.test(name)) {
+    throw new Error('Profilnamen duerfen nur Buchstaben, Zahlen, Unterstriche und Bindestriche enthalten.');
+  }
+  return name;
+}
+
+function parseProfileLaunchArgs(args, mode) {
+  const remaining = [...args];
+  if (mode !== 'king') return { args: remaining, name: undefined };
+
+  const flag = remaining.indexOf('--profile');
+  if (flag >= 0) {
+    if (flag + 1 >= remaining.length) throw new Error('--profile braucht einen Profilnamen.');
+    const name = profileName(remaining[flag + 1]);
+    remaining.splice(flag, 2);
+    return { args: remaining, name };
+  }
+
+  if (remaining.length === 1 && !remaining[0].startsWith('-') && !RESERVED.has(remaining[0].toLowerCase())) {
+    return { args: [], name: profileName(remaining[0]), implicit: true };
+  }
+  if (remaining.length === 2 && remaining.includes('-c')) {
+    const candidate = remaining.find(value => value !== '-c');
+    if (candidate && !candidate.startsWith('-')) return { args: ['-c'], name: profileName(candidate), implicit: true };
+  }
+  return { args: remaining, name: undefined };
+}
+
+function resolveSelectedProfile(sharedHome, name, pathImpl = path) {
+  return pathImpl.join(sharedHome, 'profile', profileName(name));
+}
+
+module.exports = { parseProfileLaunchArgs, resolveSelectedProfile };

package/blun.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:5d42292f090cacd4506d9194f177756c6d8acc509f938ecc413c752522d368c2
+// BLUN_BUILD_INPUT_SHA256:8c6e16ea727bc28d31e8a784ec7ab7cc656e35f70f996bb1e64df97776875360
 import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
@@ -350557,6 +350557,7 @@ var BlunAuthTransitionError = class extends Error {
 function blunAuthWarningsFromError(error) {
 	return error instanceof BlunAuthTransitionError ? error.warnings : void 0;
 }
+const LEGACY_PROFILE_MODEL = "blun/king";
 var BlunAuthFacade = class {
 	options;
 	toolkit;
@@ -350583,6 +350584,57 @@ var BlunAuthFacade = class {
 			}
 		});
 	}
+	async restoreMissingProfileModel() {
+		const needsRepair = (config) => config.defaultModel === LEGACY_PROFILE_MODEL && config.models?.[LEGACY_PROFILE_MODEL] === void 0 && config.providers["managed:blun"] === void 0;
+		if (!needsRepair(readConfigFileForUpdate(this.options.configPath))) return false;
+		const runtime = this.resolveRuntimeManagedAuth(BLUN_PROVIDER_NAME$1);
+		if (!(await this.toolkit.status("managed:blun", runtime.oauthRef)).providers.some((provider) => provider.hasToken)) return false;
+		let accessToken;
+		try {
+			accessToken = await this.toolkit.ensureFresh(BLUN_PROVIDER_NAME$1, { oauthRef: runtime.oauthRef });
+		} catch (error) {
+			if (error instanceof OAuthError$1) return false;
+			throw error;
+		}
+		let models;
+		try {
+			models = requireManagedBlunKingCatalog(await fetchManagedBlunCodeModels({
+				accessToken,
+				baseUrl: runtime.baseUrl,
+				headers: this.options.identity === void 0 ? void 0 : createBlunDefaultHeaders({
+					homeDir: this.options.homeDir,
+					...this.options.identity
+				})
+			}));
+		} catch (error) {
+			if (error instanceof ManagedBlunCodeModelsAuthError) return false;
+			throw error;
+		}
+		const repaired = await mutateConfigFile(this.options.configPath, (config) => {
+			if (!needsRepair(config)) return {
+				config,
+				result: false
+			};
+			const existingServices = config.services;
+			applyManagedBlunCodeConfig(config, {
+				models,
+				baseUrl: runtime.baseUrl,
+				oauthKey: runtime.oauthRef.key,
+				oauthHost: runtime.oauthRef.oauthHost,
+				preserveDefaultModel: true
+			});
+			config.services = {
+				...config.services,
+				...existingServices
+			};
+			return {
+				config,
+				result: true
+			};
+		});
+		if (repaired) this.options.onConfigUpdated?.(readConfigFile(this.options.configPath));
+		return repaired;
+	}
 	async status(providerName) {
 		const auth = this.resolveManagedAuth(providerName);
 		const apiKey = nonEmpty(auth.apiKey);
@@ -351618,6 +351670,15 @@ function errorMessage$9(error) {
 //#region ../../packages/node-sdk/src/sdk-rpc-client.ts
 init_src();
 init_src$3();
+function authHomeForProfile(homeDir) {
+	const sharedHome = process.env["BLUN_SHARED_HOME"]?.trim();
+	const profile = process.env["BLUN_PROFILE"]?.trim();
+	if (!sharedHome || !profile || !/^[a-z0-9][a-z0-9_-]{0,31}$/u.test(profile)) return homeDir;
+	const expected = resolve(join(sharedHome, "profile", profile));
+	const actual = resolve(homeDir);
+	if ((process.platform === "win32" ? expected.toLowerCase() : expected) !== (process.platform === "win32" ? actual.toLowerCase() : actual)) return homeDir;
+	return resolve(sharedHome);
+}
 var SDKRpcClient = class extends SDKRpcClientBase {
 	homeDir;
 	configPath;
@@ -351626,6 +351687,7 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 	auth;
 	core;
 	ready;
+	usesDefaultConfigPath;
 	constructor(options = {}) {
 		super();
 		this.identity = options.identity === void 0 ? void 0 : assertBlunHostIdentity(options.identity);
@@ -351634,9 +351696,10 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 			homeDir: this.homeDir,
 			configPath: options.configPath
 		});
+		this.usesDefaultConfigPath = options.configPath === void 0;
 		this.telemetry = options.telemetry ?? noopTelemetryClient;
 		this.auth = new BlunAuthFacade({
-			homeDir: this.homeDir,
+			homeDir: authHomeForProfile(this.homeDir),
 			configPath: this.configPath,
 			identity: this.identity,
 			onRefresh: options.onOAuthRefresh
@@ -351656,6 +351719,7 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 	}
 	async ensureConfigFile() {
 		await ensureConfigFile(this.configPath);
+		if (this.usesDefaultConfigPath && authHomeForProfile(this.homeDir) !== this.homeDir) await this.auth.restoreMissingProfileModel();
 	}
 	async close() {
 		try {
@@ -505096,6 +505160,134 @@ registerUiCatalogFragment({
 //#region src/tui/constant/telegram-session-queue.ts
 const SESSION_QUEUE_READ_BYTES = 65536;
 //#endregion
+//#region src/tui/constant/channel-command.ts
+const REMOTE_COMMANDS = new Set([
+	"loop",
+	"goal",
+	"idea",
+	"chancenradar",
+	"curiosity",
+	"scout",
+	"reload",
+	"memory",
+	"queue",
+	"usage",
+	"befehle"
+]);
+const REMOTE_COMMAND_LIST = "/loop [interval] [prompt]\n/loop status|pause|resume|stop\n/goal\n/idea\n/chancenradar\n/curiosity\n/scout\n/reload\n/memory status|on|off\n/queue [steer|followup|collect|interrupt|reset|default] [debounce:500ms] [batch:20]\n/usage off|tokens|full|reset\n/befehle";
+//#endregion
+//#region src/tui/controllers/channel-command.ts
+function channelSlashCommandCandidate(envelope) {
+	if (!channelMessageAddressed(envelope) || envelope.meta["addressed"]?.trim().toLowerCase() === "semantic") return false;
+	return parseSlashInput(envelope.text.trim()) !== null;
+}
+function channelCommandInput(envelope) {
+	if (!channelMessageAddressed(envelope) || envelope.meta["addressed"]?.trim().toLowerCase() === "semantic") return void 0;
+	const parsed = parseSlashInput(envelope.text.trim());
+	if (parsed === null) return void 0;
+	const name = parsed.name.toLowerCase().split("@")[0];
+	if (!REMOTE_COMMANDS.has(name)) return void 0;
+	if (name === "usage" && !isUsageDisplayArgument(parsed.args)) return void 0;
+	return parsed.args.length === 0 ? `/${name}` : `/${name} ${parsed.args}`;
+}
+function channelCommandCanInterrupt(input) {
+	const parsed = parseSlashInput(input);
+	if (parsed?.name === "befehle") return true;
+	if (parsed === null) return false;
+	if (parsed.name === "usage") return isUsageDisplayArgument(parsed.args);
+	if ([
+		"goal",
+		"idea",
+		"chancenradar",
+		"curiosity",
+		"scout"
+	].includes(parsed.name)) {
+		if (!/^(?:status|pause|paused|cancel|clear|stop)?$/i.test(parsed.args.trim())) return false;
+	} else if (parsed.name !== "loop" && parsed.name !== "queue") return false;
+	const command = findBuiltInSlashCommand(parsed.name);
+	return command !== void 0 && resolveSlashCommandAvailability(command, parsed.args) === "always";
+}
+/** Capture only this command's output, never another room's concurrent turn. */
+var ChannelCommandController = class {
+	host;
+	execution = new AsyncLocalStorage();
+	constructor(host) {
+		this.host = host;
+	}
+	get context() {
+		const execution = this.execution.getStore();
+		return execution?.active ? {
+			input: execution.input,
+			chatId: execution.envelope.meta.chat_id,
+			...execution.envelope.meta.message_thread_id === void 0 ? {} : { threadId: execution.envelope.meta.message_thread_id }
+		} : void 0;
+	}
+	commit() {
+		const execution = this.execution.getStore();
+		if (execution?.active) this.acknowledge(execution);
+	}
+	bindGoal(goalId) {
+		const execution = this.execution.getStore();
+		if (!execution?.active) return false;
+		execution.goalId = goalId;
+		return true;
+	}
+	acknowledge(execution) {
+		if (execution.acknowledged) return;
+		execution.acknowledged = true;
+		execution.acknowledge?.();
+	}
+	captureStatus(message) {
+		const execution = this.execution.getStore();
+		if (execution?.active) execution.responses.push(message);
+	}
+	capturePrompt(text) {
+		const execution = this.execution.getStore();
+		if (!execution?.active) return false;
+		this.host.sendPrompt(execution.envelope, text, () => {
+			this.acknowledge(execution);
+		}, execution.goalId);
+		execution.sentModelTurn = true;
+		return true;
+	}
+	async run(envelope, input, acknowledge) {
+		const execution = {
+			input,
+			envelope,
+			acknowledge,
+			responses: [],
+			active: true,
+			sentModelTurn: false,
+			acknowledged: false
+		};
+		await this.execution.run(execution, async () => {
+			try {
+				if (parseSlashInput(input)?.name === "befehle") this.host.showStatus(REMOTE_COMMAND_LIST);
+				else await this.host.dispatch(input);
+			} catch (error) {
+				this.host.showError(formatErrorMessage$2(error));
+			} finally {
+				execution.active = false;
+			}
+			if (execution.sentModelTurn) return;
+			this.acknowledge(execution);
+			const text = execution.responses.at(-1) ?? input;
+			if (envelope.meta.message_thread_id === void 0) await this.host.reply(envelope.meta.chat_id, text);
+			else await this.host.reply(envelope.meta.chat_id, text, envelope.meta.message_thread_id);
+		});
+	}
+	async rejectBusy(envelope, acknowledge) {
+		await this.reject(envelope, "Befehl nicht ausgeführt: Die Konsole ist beschäftigt oder hat keine aktive Sitzung. Bitte erneut senden.", acknowledge);
+	}
+	async rejectUnsupported(envelope, acknowledge) {
+		await this.reject(envelope, "Dieser Befehl ist über Telegram nicht freigegeben. Mit /befehle siehst du die verfügbaren Fernbefehle.", acknowledge);
+	}
+	async reject(envelope, message, acknowledge) {
+		acknowledge?.();
+		await this.host.reply(envelope.meta.chat_id, message, envelope.meta.message_thread_id);
+	}
+};
+//#endregion
 //#region src/tui/controllers/telegram-session-queue.ts
 function requireValid(condition) {
 	if (!condition) throw new Error("Invalid Telegram session queue state or transition");
@@ -505346,6 +505538,8 @@ var SessionQueueDelivery = class {
 	host;
 	boundSessionId;
 	inFlight = /* @__PURE__ */ new Set();
+	commandsInFlight = /* @__PURE__ */ new Set();
+	priorityScanEnd = 0;
 	queueFile;
 	stateFile;
 	constructor(dir, host) {
@@ -505381,28 +505575,59 @@ var SessionQueueDelivery = class {
 		if (state === void 0) throw new Error("Telegram session queue checkpoint is missing");
 		state = observeSessionQueue(state, position);
 		if (JSON.stringify(state) !== before) writeSessionQueue(this.stateFile, state);
-		if (rebind) this.inFlight.clear();
+		if (rebind) {
+			this.inFlight.clear();
+			this.commandsInFlight.clear();
+			this.priorityScanEnd = 0;
+		}
 		this.boundSessionId = scope.sessionId;
 		if (!deliver) return;
-		if (this.inFlight.size >= 16) return;
-		let delivered = 0;
-		for (const pending of pendingSessionQueue(state, scope.sessionId)) for (const line of readLines(this.queueFile, pending)) {
-			if (!this.host.ownsChannel() || this.host.currentSessionId() !== scope.sessionId) return;
-			const key = `${line.range.fileId}:${line.range.start}:${line.range.end}`;
-			if (this.inFlight.has(key)) continue;
-			const acknowledge = () => {
-				if (!this.host.ownsChannel()) return;
-				const current = readSessionQueue(this.stateFile);
-				if (current === void 0) throw new Error("Telegram session queue checkpoint is missing");
-				writeSessionQueue(this.stateFile, acknowledgeSessionQueue(current, scope.sessionId, line.range));
-				this.inFlight.delete(key);
-			};
-			this.inFlight.add(key);
-			const envelope = parseChannelEnvelope(line.text);
-			if (envelope === void 0) acknowledge();
-			else this.host.inject(envelope, acknowledge);
-			delivered += 1;
-			if (delivered >= 16 || this.inFlight.size >= 16) return;
+		const ranges = pendingSessionQueue(state, scope.sessionId);
+		for (const commandsOnly of [true, false]) {
+			if (!commandsOnly && this.inFlight.size >= 16) return;
+			let delivered = 0;
+			let limitReached = false;
+			for (const pending of ranges) {
+				const start = commandsOnly ? Math.max(pending.start, this.priorityScanEnd) : pending.start;
+				if (start >= pending.end) continue;
+				for (const line of readLines(this.queueFile, {
+					...pending,
+					start
+				})) {
+					if (!this.host.ownsChannel() || this.host.currentSessionId() !== scope.sessionId) return;
+					if (commandsOnly) this.priorityScanEnd = line.range.end;
+					const key = `${line.range.fileId}:${line.range.start}:${line.range.end}`;
+					if (this.inFlight.has(key)) continue;
+					const envelope = parseChannelEnvelope(line.text);
+					const isCommand = envelope !== void 0 && channelSlashCommandCandidate(envelope);
+					if (isCommand !== commandsOnly) continue;
+					if (commandsOnly && this.commandsInFlight.size >= 16) {
+						this.priorityScanEnd = line.range.start;
+						limitReached = true;
+						break;
+					}
+					if (!commandsOnly && this.inFlight.size >= 16) return;
+					const acknowledge = () => {
+						if (!this.host.ownsChannel()) return;
+						const current = readSessionQueue(this.stateFile);
+						if (current === void 0) throw new Error("Telegram session queue checkpoint is missing");
+						writeSessionQueue(this.stateFile, acknowledgeSessionQueue(current, scope.sessionId, line.range));
+						this.inFlight.delete(key);
+						this.commandsInFlight.delete(key);
+					};
+					this.inFlight.add(key);
+					if (isCommand) this.commandsInFlight.add(key);
+					if (envelope === void 0) acknowledge();
+					else this.host.inject(envelope, acknowledge);
+					delivered += 1;
+					if (delivered >= 16) {
+						limitReached = true;
+						break;
+					}
+				}
+				if (limitReached) break;
+			}
+			if (commandsOnly && !limitReached) this.priorityScanEnd = position.frontier;
 		}
 	}
 };
@@ -527957,6 +528182,9 @@ var AuthFlowController = class {
 	enterLoginRequiredStartupState() {
 		this.enterSessionlessStartupState(oauthLoginRequiredStartupNotice());
 	}
+	enterMissingModelStartupState() {
+		this.enterSessionlessStartupState(uiText("core.error.llmNotSet"));
+	}
 	enterManagedAccountUnavailableStartupState(kind) {
 		this.enterSessionlessStartupState(uiText(kind === "invalid_payload" ? "usage.plan.error.invalidPayload" : "usage.plan.error.unavailable"));
 	}
@@ -529448,120 +529676,6 @@ function planQueueCollection(messages, policy, now, activeContext) {
 	};
 }
 //#endregion
-//#region src/tui/constant/channel-command.ts
-const REMOTE_COMMANDS = new Set([
-	"loop",
-	"goal",
-	"idea",
-	"chancenradar",
-	"curiosity",
-	"scout",
-	"reload",
-	"memory",
-	"queue",
-	"usage",
-	"befehle"
-]);
-const REMOTE_COMMAND_LIST = "/loop [interval] [prompt]\n/loop status|pause|resume|stop\n/goal\n/idea\n/chancenradar\n/curiosity\n/scout\n/reload\n/memory status|on|off\n/queue [steer|followup|collect|interrupt|reset|default] [debounce:500ms] [batch:20]\n/usage off|tokens|full|reset\n/befehle";
-//#endregion
-//#region src/tui/controllers/channel-command.ts
-function channelCommandInput(envelope) {
-	if (!channelMessageAddressed(envelope) || envelope.meta["addressed"]?.trim().toLowerCase() === "semantic") return void 0;
-	const parsed = parseSlashInput(envelope.text.trim());
-	if (parsed === null) return void 0;
-	const name = parsed.name.toLowerCase().split("@")[0];
-	if (!REMOTE_COMMANDS.has(name)) return void 0;
-	if (name === "usage" && !isUsageDisplayArgument(parsed.args)) return void 0;
-	return parsed.args.length === 0 ? `/${name}` : `/${name} ${parsed.args}`;
-}
-function channelCommandCanInterrupt(input) {
-	const parsed = parseSlashInput(input);
-	if (parsed?.name === "befehle") return true;
-	if (parsed === null) return false;
-	if (parsed.name === "usage") return isUsageDisplayArgument(parsed.args);
-	if ([
-		"goal",
-		"idea",
-		"chancenradar",
-		"curiosity",
-		"scout"
-	].includes(parsed.name)) {
-		if (!/^(?:status|pause|paused|cancel|clear|stop)?$/i.test(parsed.args.trim())) return false;
-	} else if (parsed.name !== "loop" && parsed.name !== "queue") return false;
-	const command = findBuiltInSlashCommand(parsed.name);
-	return command !== void 0 && resolveSlashCommandAvailability(command, parsed.args) === "always";
-}
-/** Capture only this command's output, never another room's concurrent turn. */
-var ChannelCommandController = class {
-	host;
-	execution = new AsyncLocalStorage();
-	constructor(host) {
-		this.host = host;
-	}
-	get context() {
-		const execution = this.execution.getStore();
-		return execution?.active ? {
-			input: execution.input,
-			chatId: execution.envelope.meta.chat_id,
-			...execution.envelope.meta.message_thread_id === void 0 ? {} : { threadId: execution.envelope.meta.message_thread_id }
-		} : void 0;
-	}
-	commit() {
-		const execution = this.execution.getStore();
-		if (execution?.active) this.acknowledge(execution);
-	}
-	bindGoal(goalId) {
-		const execution = this.execution.getStore();
-		if (!execution?.active) return false;
-		execution.goalId = goalId;
-		return true;
-	}
-	acknowledge(execution) {
-		if (execution.acknowledged) return;
-		execution.acknowledged = true;
-		execution.acknowledge?.();
-	}
-	captureStatus(message) {
-		const execution = this.execution.getStore();
-		if (execution?.active) execution.responses.push(message);
-	}
-	capturePrompt(text) {
-		const execution = this.execution.getStore();
-		if (!execution?.active) return false;
-		this.host.sendPrompt(execution.envelope, text, () => {
-			this.acknowledge(execution);
-		}, execution.goalId);
-		execution.sentModelTurn = true;
-		return true;
-	}
-	async run(envelope, input, acknowledge) {
-		const execution = {
-			input,
-			envelope,
-			acknowledge,
-			responses: [],
-			active: true,
-			sentModelTurn: false,
-			acknowledged: false
-		};
-		await this.execution.run(execution, async () => {
-			try {
-				if (parseSlashInput(input)?.name === "befehle") this.host.showStatus(REMOTE_COMMAND_LIST);
-				else await this.host.dispatch(input);
-			} catch (error) {
-				this.host.showError(formatErrorMessage$2(error));
-			} finally {
-				execution.active = false;
-			}
-			if (execution.sentModelTurn) return;
-			this.acknowledge(execution);
-			const text = execution.responses.at(-1) ?? input;
-			if (envelope.meta.message_thread_id === void 0) await this.host.reply(envelope.meta.chat_id, text);
-			else await this.host.reply(envelope.meta.chat_id, text, envelope.meta.message_thread_id);
-		});
-	}
-};
-//#endregion
 //#region src/tui/constant/goal-channel-replies.ts
 const GOAL_REPLY_RETRY_DELAY_MS = 1e3;
 const GOAL_REPLY_REQUEST_TIMEOUT_MS = 15e3;
@@ -542667,6 +542781,12 @@ var BlunTUI = class {
 		}
 		if (this.startupWorkspaceSelectionPending) return false;
 		await this.refreshProviderModelsBeforeSession();
+		const config = await this.harness.getConfig();
+		if (Object.keys(config.providers ?? {}).length === 0 && Object.keys(config.models ?? {}).length === 0) {
+			this.authFlow.enterMissingModelStartupState();
+			this.startupLoginRequired = true;
+			return false;
+		}
 		const { startup } = this.options;
 		const { workDir } = this.state.appState;
 		let session;
@@ -543361,33 +543481,35 @@ var BlunTUI = class {
 	/**
 	* Remote channel inbound (Telegram) into THIS visible session.
 	* Never routes through handleUserInput: only allowlisted slash dispatch (a Telegram
-	* "/new" is just text for the model), no local editor history. The transcript
+	* "/new" is rejected without execution), no local editor history. The transcript
 	* shows a clean user line with a muted origin prefix; the
-	* model receives the full <channel …> payload. Busy turns queue via the same
-	* queuedMessages mechanic as typed input; a completed tool/step boundary
-	* steers one FIFO head into the active turn without interrupting it.
+	* model receives the full <channel …> payload. Model messages use the shared
+	* queue; recognized remote controls run now or receive an immediate busy
+	* reply, so they never wait behind ordinary prompts.
 	*/
 	injectChannelMessage(envelope, acknowledge) {
 		const command = channelCommandInput(envelope);
 		if (command !== void 0) {
-			const item = {
+			const active = this.queueSteerInFlight !== void 0 || this.manualPromptInFlight !== void 0 || this.state.appState.streamingPhase !== "idle" || this.state.appState.isCompacting;
+			if (this.session === void 0 || this.deferUserMessages || this.queueCommandRunning || this.editorReplacementActive || active && !channelCommandCanInterrupt(command)) {
+				this.channelCommands.rejectBusy(envelope, acknowledge).catch((error) => {
+					this.showError(formatErrorMessage$2(error));
+				});
+				return;
+			}
+			this.runChannelCommand({
 				text: command,
-				displayText: envelope.text,
 				origin: channelOrigin(envelope),
-				mode: "command",
 				agentId: this.harness.interactiveAgentId,
-				channelChatId: envelope.meta.chat_id,
-				channelThreadId: envelope.meta.message_thread_id,
-				channelCommandEnvelope: envelope,
+				mode: "command",
 				channelAcknowledge: acknowledge
-			};
-			const busy = this.state.queuedMessages.length > 0 || this.queueSteerInFlight !== void 0 || this.manualPromptInFlight !== void 0 || this.state.appState.streamingPhase !== "idle" || this.state.appState.isCompacting;
-			if (this.session === void 0 || this.deferUserMessages || this.queueCommandRunning || this.editorReplacementActive || busy && !channelCommandCanInterrupt(command)) {
-				this.state.queuedMessages.push(item);
-				this.scheduleQueueDrain();
-				this.updateQueueDisplay();
-				this.state.ui.requestRender();
-			} else this.runChannelCommand(item, envelope);
+			}, envelope);
+			return;
+		}
+		if (channelSlashCommandCandidate(envelope)) {
+			this.channelCommands.rejectUnsupported(envelope, acknowledge).catch((error) => {
+				this.showError(formatErrorMessage$2(error));
+			});
 			return;
 		}
 		injectChannelEnvelope({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.609",
+  "version": "9.1.610",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {
@@ -17,6 +17,7 @@
   },
   "os": [
     "darwin",
+    "linux",
     "win32"
   ],
   "cpu": [

package/telegram-plugin/dist/bridge.mjs

@@ -59412,6 +59412,9 @@ function isGermanGroupBroadcast(text) {
 	}
 	return false;
 }
+function hasAllMention(text) {
+	return /(?:^|[^\p{L}\p{N}_@])@all(?=$|[^\p{L}\p{N}_])/iu.test(text);
+}
 /**
 * Bot-to-bot loop guard (Telegram's own safety requirement for Bot API 10.0
 * bot-to-bot mode): once King can receive other bots' messages, an unthrottled
@@ -59479,9 +59482,10 @@ function gate(ctx, botUsername) {
 		if (groupAllowFrom.length > 0 && !groupAllowFrom.includes(senderId)) return { action: "drop" };
 		const addressesAnother = matchesAny(ctx.text, access.ignorePatterns);
 		const mentioned = !addressesAnother && isMentioned(ctx, botUsername, access.mentionPatterns);
-		if (policy.requireMention === true && !mentioned) return { action: "drop" };
+		const broadcastMention = from.isBot !== true && hasAllMention(ctx.text);
+		if (policy.requireMention && !mentioned && !broadcastMention) return { action: "drop" };
 		const mentionBypass = from.isBot !== true && (policy.alwaysAllowFrom ?? []).includes(senderId);
-		const addressed = !addressesAnother && (mentionBypass || mentioned || isGermanGroupBroadcast(ctx.text));
+		const addressed = broadcastMention || !addressesAnother && (mentionBypass || mentioned || isGermanGroupBroadcast(ctx.text));
 		const inferAddressing = !addressesAnother && !addressed && from.isBot !== true;
 		if (!addressed && from.isBot === true && !botLoopGuardAllows(senderId)) return { action: "drop" };
 		return {
@@ -60193,7 +60197,7 @@ var BoundedChannelContextBuffer = class {
 function buildChannelTag(content, meta, addressed = true, inferAddressing = false) {
 	const pairs = [["source", "telegram"]];
 	for (const [key, value] of Object.entries(meta)) if (value !== void 0) pairs.push([key, String(value)]);
-	return `<channel ${pairs.map(([key, value]) => `${key}="${escapeAttr(value)}"`).join(" ")}>\n${content}\n</channel>\n${addressed ? `[REPLY-PFLICHT: Der Absender liest NUR Telegram. Sende deine Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Sichtbarer Antworttext kann auch automatisch weitergeleitet werden; er ist kein privater Denkbereich.]` : inferAddressing ? `[SEMANTISCHE ADRESSIERUNG: Diese menschliche Gruppennachricht nennt dich nicht explizit. Entscheide anhand von Inhalt und Gesprächskontext, ob sie an dich gerichtet ist oder Arbeit von dir verlangt. Falls ja, antworte kurz mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Falls nein, beende den Turn ohne Ausgabe; sende keine Bestätigung deiner Stille.]` : "[NUR MITLESEN — diese Nachricht ist NICHT an dich gerichtet (kein @King, keine Antwort an dich, sie spricht jemand anderen oder die Gruppe allgemein an). ANTWORTE NICHT: kein reply-Tool, keine Bestätigung, kein \"verstanden\", kein \"halte mich raus\" — beende den Turn einfach ohne Ausgabe. NUR wenn du ein echtes, konkretes Ergebnis oder einen echten Blocker beitragen kannst, antwortest du kurz. Im Zweifel: schweigen.]"}`;
+	return `<channel ${pairs.map(([key, value]) => `${key}="${escapeAttr(value)}"`).join(" ")}>\n${content}\n</channel>\n${addressed && meta.chat_id.startsWith("-") ? `[GRUPPENANTWORT: Eine bloße Information oder eine Nachricht, die ausdrücklich keine Bestätigung verlangt, macht keine Antwort erforderlich. Beende den Turn dann ohne Ausgabe und ohne Bestätigung deiner Stille. Einen konkreten Auftrag an dich nimm kurz an und beginne die Arbeit; melde danach das Ergebnis oder einen echten Blocker. Eine Frage beantworte, wenn du etwas beitragen kannst. Sende eine nötige Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}, ohne dieselbe Annahme zu wiederholen.]` : addressed ? `[REPLY-PFLICHT: Der Absender liest NUR Telegram. Sende deine Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Sichtbarer Antworttext kann auch automatisch weitergeleitet werden; er ist kein privater Denkbereich.]` : inferAddressing ? `[SEMANTISCHE ADRESSIERUNG: Diese menschliche Gruppennachricht nennt dich nicht explizit. Entscheide anhand von Inhalt und Gesprächskontext, ob sie an dich gerichtet ist oder Arbeit von dir verlangt. Falls ja, antworte kurz mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Falls nein, beende den Turn ohne Ausgabe; sende keine Bestätigung deiner Stille.]` : "[NUR MITLESEN — diese Nachricht ist NICHT an dich gerichtet (kein @King, keine Antwort an dich, sie spricht jemand anderen oder die Gruppe allgemein an). ANTWORTE NICHT: kein reply-Tool, keine Bestätigung, kein \"verstanden\", kein \"halte mich raus\" — beende den Turn einfach ohne Ausgabe. NUR wenn du ein echtes, konkretes Ergebnis oder einen echten Blocker beitragen kannst, antwortest du kurz. Im Zweifel: schweigen.]"}`;
 }
 /**
 * Sent once as the head of the first prompt of every bridged session —
@@ -60211,6 +60215,8 @@ function buildPreamble() {
 		"useful contribution: a relevant finding, error, or improvement. Otherwise finish",
 		"with no reply tool call and no assistant text. Do not narrate that decision, cite",
 		"a silence rule, acknowledge inactivity, or report that you ended without output.",
+		"If your host requires assistant text to finish a silent turn, output exactly",
+		"[[BLUN_TELEGRAM_SILENT]] and nothing else. Never send this marker with reply.",
 		"When you do have something useful to contribute, send it once without repeating it.",
 		"",
 		"Messages arrive wrapped as <channel source=\"telegram\" chat_id=\"...\" message_id=\"...\"",
@@ -67887,6 +67893,10 @@ function assertTelegramLanguageReleased(text, releaseToken, now) {
 function isGroupChat(chatId) {
 	return chatId.startsWith("-");
 }
+const SILENT_TURN_MARKER = "[[BLUN_TELEGRAM_SILENT]]";
+function isSilentTurnMarker(text) {
+	return text.trim() === SILENT_TURN_MARKER;
+}
 function normalize(s) {
 	return s.toLowerCase().replace(/ä/g, "a").replace(/ö/g, "o").replace(/ü/g, "u").replace(/ß/g, "ss").replace(/[‐-―]/g, " ").replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
 }
@@ -67896,6 +67906,7 @@ const EMPTY_CLAUSES = [
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
+	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
 	/^(i have )?nothing (to (add|do|report)|for me)$/,
 	/^no need to (respond|reply)$/,
@@ -67909,11 +67920,16 @@ const EMPTY_CLAUSES = [
 	/^(nach|gemaess) der leerlauf regel( \d+)? gibt es nichts zu melden$/
 ];
 const NOTIFICATION_CONTEXT = /^die(se)? nachricht ist eine (konfigurations )?information( [\p{L}\p{N} _-]{1,64} wird ab jetzt nur noch bei erwahnung benachrichtigt)?( an die gruppe gerichtet)?$/u;
+function isNarratedSilentTurn(text) {
+	const words = normalize(text);
+	return /^(kein neuer auftrag|kein handlungsbedarf|keine neue anweisung keine frage an mich nichts zu berichten)\b/u.test(words) && /\b(nichts weiter zu tun|stille|stille ohne jede ausgabe)$/u.test(words);
+}
 /**
 * True only when all clauses are acknowledgements or silence commentary.
 * One substantive or unrecognised clause preserves the entire message.
 */
 function isGroupNoiseReply(text) {
+	if (isNarratedSilentTurn(text)) return true;
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion
@@ -68037,6 +68053,7 @@ function scrubSecrets(text) {
 * log it to outbox.jsonl as kind "reply-fallback". Returns true on success.
 */
 async function sendReplyFallback(chatId, rawText, threadId) {
+	if (rawText.trim().length === 0 || isSilentTurnMarker(rawText)) return true;
 	let topic;
 	try {
 		topic = threadId === void 0 ? {} : { message_thread_id: telegramThreadId(threadId) };

package/telegram-plugin/dist/mcp-server.mjs

@@ -73470,6 +73470,7 @@ const EMPTY_CLAUSES = [
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
+	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
 	/^(i have )?nothing (to (add|do|report)|for me)$/,
 	/^no need to (respond|reply)$/,
@@ -73483,11 +73484,16 @@ const EMPTY_CLAUSES = [
 	/^(nach|gemaess) der leerlauf regel( \d+)? gibt es nichts zu melden$/
 ];
 const NOTIFICATION_CONTEXT = /^die(se)? nachricht ist eine (konfigurations )?information( [\p{L}\p{N} _-]{1,64} wird ab jetzt nur noch bei erwahnung benachrichtigt)?( an die gruppe gerichtet)?$/u;
+function isNarratedSilentTurn(text) {
+	const words = normalize(text);
+	return /^(kein neuer auftrag|kein handlungsbedarf|keine neue anweisung keine frage an mich nichts zu berichten)\b/u.test(words) && /\b(nichts weiter zu tun|stille|stille ohne jede ausgabe)$/u.test(words);
+}
 /**
 * True only when all clauses are acknowledgements or silence commentary.
 * One substantive or unrecognised clause preserves the entire message.
 */
 function isGroupNoiseReply(text) {
+	if (isNarratedSilentTurn(text)) return true;
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion

package/telegram-plugin/dist/noise.mjs

@@ -9,6 +9,10 @@
 function isGroupChat(chatId) {
 	return chatId.startsWith("-");
 }
+const SILENT_TURN_MARKER = "[[BLUN_TELEGRAM_SILENT]]";
+function isSilentTurnMarker(text) {
+	return text.trim() === SILENT_TURN_MARKER;
+}
 function normalize(s) {
 	return s.toLowerCase().replace(/ä/g, "a").replace(/ö/g, "o").replace(/ü/g, "u").replace(/ß/g, "ss").replace(/[‐-―]/g, " ").replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
 }
@@ -18,6 +22,7 @@ const EMPTY_CLAUSES = [
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
+	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
 	/^(i have )?nothing (to (add|do|report)|for me)$/,
 	/^no need to (respond|reply)$/,
@@ -31,12 +36,17 @@ const EMPTY_CLAUSES = [
 	/^(nach|gemaess) der leerlauf regel( \d+)? gibt es nichts zu melden$/
 ];
 const NOTIFICATION_CONTEXT = /^die(se)? nachricht ist eine (konfigurations )?information( [\p{L}\p{N} _-]{1,64} wird ab jetzt nur noch bei erwahnung benachrichtigt)?( an die gruppe gerichtet)?$/u;
+function isNarratedSilentTurn(text) {
+	const words = normalize(text);
+	return /^(kein neuer auftrag|kein handlungsbedarf|keine neue anweisung keine frage an mich nichts zu berichten)\b/u.test(words) && /\b(nichts weiter zu tun|stille|stille ohne jede ausgabe)$/u.test(words);
+}
 /**
 * True only when all clauses are acknowledgements or silence commentary.
 * One substantive or unrecognised clause preserves the entire message.
 */
 function isGroupNoiseReply(text) {
+	if (isNarratedSilentTurn(text)) return true;
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion
-export { isGroupChat, isGroupNoiseReply };
+export { SILENT_TURN_MARKER, isGroupChat, isGroupNoiseReply, isSilentTurnMarker };

package/worker-host.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:5d42292f090cacd4506d9194f177756c6d8acc509f938ecc413c752522d368c2
+// BLUN_BUILD_INPUT_SHA256:8c6e16ea727bc28d31e8a784ec7ab7cc656e35f70f996bb1e64df97776875360
 import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
@@ -347625,6 +347625,7 @@ var BlunAuthTransitionError = class extends Error {
 		this.warnings = warnings;
 	}
 };
+const LEGACY_PROFILE_MODEL = "blun/king";
 var BlunAuthFacade = class {
 	options;
 	toolkit;
@@ -347651,6 +347652,57 @@ var BlunAuthFacade = class {
 			}
 		});
 	}
+	async restoreMissingProfileModel() {
+		const needsRepair = (config) => config.defaultModel === LEGACY_PROFILE_MODEL && config.models?.[LEGACY_PROFILE_MODEL] === void 0 && config.providers["managed:blun"] === void 0;
+		if (!needsRepair(readConfigFileForUpdate(this.options.configPath))) return false;
+		const runtime = this.resolveRuntimeManagedAuth(BLUN_PROVIDER_NAME$1);
+		if (!(await this.toolkit.status("managed:blun", runtime.oauthRef)).providers.some((provider) => provider.hasToken)) return false;
+		let accessToken;
+		try {
+			accessToken = await this.toolkit.ensureFresh(BLUN_PROVIDER_NAME$1, { oauthRef: runtime.oauthRef });
+		} catch (error) {
+			if (error instanceof OAuthError$1) return false;
+			throw error;
+		}
+		let models;
+		try {
+			models = requireManagedBlunKingCatalog(await fetchManagedBlunCodeModels({
+				accessToken,
+				baseUrl: runtime.baseUrl,
+				headers: this.options.identity === void 0 ? void 0 : createBlunDefaultHeaders({
+					homeDir: this.options.homeDir,
+					...this.options.identity
+				})
+			}));
+		} catch (error) {
+			if (error instanceof ManagedBlunCodeModelsAuthError) return false;
+			throw error;
+		}
+		const repaired = await mutateConfigFile(this.options.configPath, (config) => {
+			if (!needsRepair(config)) return {
+				config,
+				result: false
+			};
+			const existingServices = config.services;
+			applyManagedBlunCodeConfig(config, {
+				models,
+				baseUrl: runtime.baseUrl,
+				oauthKey: runtime.oauthRef.key,
+				oauthHost: runtime.oauthRef.oauthHost,
+				preserveDefaultModel: true
+			});
+			config.services = {
+				...config.services,
+				...existingServices
+			};
+			return {
+				config,
+				result: true
+			};
+		});
+		if (repaired) this.options.onConfigUpdated?.(readConfigFile(this.options.configPath));
+		return repaired;
+	}
 	async status(providerName) {
 		const auth = this.resolveManagedAuth(providerName);
 		const apiKey = nonEmpty(auth.apiKey);
@@ -348683,6 +348735,15 @@ function errorMessage(error) {
 }
 //#endregion
 //#region ../../packages/node-sdk/src/sdk-rpc-client.ts
+function authHomeForProfile(homeDir) {
+	const sharedHome = process.env["BLUN_SHARED_HOME"]?.trim();
+	const profile = process.env["BLUN_PROFILE"]?.trim();
+	if (!sharedHome || !profile || !/^[a-z0-9][a-z0-9_-]{0,31}$/u.test(profile)) return homeDir;
+	const expected = resolve(join(sharedHome, "profile", profile));
+	const actual = resolve(homeDir);
+	if ((process.platform === "win32" ? expected.toLowerCase() : expected) !== (process.platform === "win32" ? actual.toLowerCase() : actual)) return homeDir;
+	return resolve(sharedHome);
+}
 var SDKRpcClient = class extends SDKRpcClientBase {
 	homeDir;
 	configPath;
@@ -348691,6 +348752,7 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 	auth;
 	core;
 	ready;
+	usesDefaultConfigPath;
 	constructor(options = {}) {
 		super();
 		this.identity = options.identity === void 0 ? void 0 : assertBlunHostIdentity(options.identity);
@@ -348699,9 +348761,10 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 			homeDir: this.homeDir,
 			configPath: options.configPath
 		});
+		this.usesDefaultConfigPath = options.configPath === void 0;
 		this.telemetry = options.telemetry ?? noopTelemetryClient;
 		this.auth = new BlunAuthFacade({
-			homeDir: this.homeDir,
+			homeDir: authHomeForProfile(this.homeDir),
 			configPath: this.configPath,
 			identity: this.identity,
 			onRefresh: options.onOAuthRefresh
@@ -348721,6 +348784,7 @@ var SDKRpcClient = class extends SDKRpcClientBase {
 	}
 	async ensureConfigFile() {
 		await ensureConfigFile(this.configPath);
+		if (this.usesDefaultConfigPath && authHomeForProfile(this.homeDir) !== this.homeDir) await this.auth.restoreMissingProfileModel();
 	}
 	async close() {
 		try {