blun-king-cli 9.1.614 → 9.1.616

package/codebase-index/codebase_index.py

@@ -7,7 +7,7 @@ Auflagen Dieter 43102:
   (Run-3-Befund: Liste trieb RAM-Spitze auf 10,5 GB).
 - Inkrementell: Content-Hash je Datei im Manifest, Delta statt Vollindex.
 - Query mit Frische-Auskunft + Selbstauskunft in JEDER Antwort.
-- Query-Fehlschlag-Log lokal (query-log.jsonl) — der Moat.
+- Lokales Query-Metadatenlog (query-log.jsonl), ohne Fragetext.
 
 Aufruf:
   python codebase_index.py build  <repo>
@@ -351,13 +351,29 @@ def cmd_update(repo: str) -> None:
     )
 
 
-def freshness(repo: str, man: dict) -> str:
-    current = git_head(repo)
-    same = "== HEAD" if current == man["head"] else f"Index {man['head']} != HEAD {current} — 'update' faellig"
-    return f"Index-Stand: {man['head']} ({man['built_at']}), {man['chunks']} Chunks | {same}"
-
-
-def cmd_query(repo: str, question: str, top: int, selector: str = "auto") -> int:
+def freshness(repo: str, man: dict) -> str:
+    current = git_head(repo)
+    same = "== HEAD" if current == man["head"] else f"Index {man['head']} != HEAD {current} — 'update' faellig"
+    return f"Index-Stand: {man['head']} ({man['built_at']}), {man['chunks']} Chunks | {same}"
+
+
+def append_query_metadata(dirpath: str, question: str, hits: list[tuple[str, float]],
+                          requested_top: int, latency_ms: float, man: dict) -> None:
+    record = {
+        "ts": datetime.now(timezone.utc).isoformat(),
+        "query_bytes": len(question.encode("utf-8")),
+        "requested_top": requested_top,
+        "result_count": len(hits),
+        "result_paths": list(dict.fromkeys(meta.rsplit("#", 1)[0] for meta, _ in hits)),
+        "query_ms": round(latency_ms, 1),
+        "index_head": man["head"],
+        "model": man["model"],
+    }
+    with open(os.path.join(dirpath, "query-log.jsonl"), "a", encoding="utf-8") as fh:
+        fh.write(json.dumps(record) + "\n")
+
+
+def cmd_query(repo: str, question: str, top: int, selector: str = "auto") -> int:
     dirpath, man = resolve_existing_index(repo, selector)
     activate_model(man["model"], man["dim"])
     mat = np.load(os.path.join(dirpath, "vectors.npy"))
@@ -380,15 +396,7 @@ def cmd_query(repo: str, question: str, top: int, selector: str = "auto") -> int
         print(f"  {s:.4f}  {m}")
     print(f"query_ms={latency_ms:.1f}")
 
-    log_path = os.path.join(dirpath, "query-log.jsonl")
-    with open(log_path, "a", encoding="utf-8") as fh:
-        fh.write(json.dumps({
-            "ts": datetime.now(timezone.utc).isoformat(),
-            "query": question,
-            "top": hits,
-            "query_ms": round(latency_ms, 1),
-            "index_head": man["head"],
-        }) + "\n")
+    append_query_metadata(dirpath, question, hits, top, latency_ms, man)
     return 0
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.614",
+  "version": "9.1.616",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/bridge.mjs

@@ -1,11 +1,12 @@
 import { createRequire } from "node:module";
 import { appendFileSync, chmodSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { spawn } from "node:child_process";
 import { Readable, Writable } from "node:stream";
 import { fileURLToPath } from "node:url";
+import { StringDecoder } from "node:string_decoder";
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
@@ -41794,10 +41795,10 @@ var require_internal = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	InternalCodec.prototype.encoder = InternalEncoder;
 	InternalCodec.prototype.decoder = InternalDecoder;
-	var StringDecoder = __require("string_decoder").StringDecoder;
-	if (!StringDecoder.prototype.end) StringDecoder.prototype.end = function() {};
+	var StringDecoder$1 = __require("string_decoder").StringDecoder;
+	if (!StringDecoder$1.prototype.end) StringDecoder$1.prototype.end = function() {};
 	function InternalDecoder(options, codec) {
-		this.decoder = new StringDecoder(codec.enc);
+		this.decoder = new StringDecoder$1(codec.enc);
 	}
 	InternalDecoder.prototype.write = function(buf) {
 		if (!Buffer.isBuffer(buf)) buf = Buffer.from(buf);
@@ -60026,7 +60027,7 @@ function toInboundCtx(ctx, text) {
 		chatId: ctx.chat?.id,
 		chatType: chatType === "private" || chatType === "group" || chatType === "supergroup" || chatType === "channel" ? chatType : void 0,
 		messageId: ctx.message?.message_id,
-		messageThreadId: ctx.message?.message_thread_id,
+		messageThreadId: ctx.message?.is_topic_message === true || ctx.chat?.is_forum === true ? ctx.message?.message_thread_id : void 0,
 		text,
 		entities: (ctx.message?.entities ?? ctx.message?.caption_entities ?? []).map((entity) => ({
 			type: entity.type,
@@ -60197,7 +60198,7 @@ var BoundedChannelContextBuffer = class {
 function buildChannelTag(content, meta, addressed = true, inferAddressing = false) {
 	const pairs = [["source", "telegram"]];
 	for (const [key, value] of Object.entries(meta)) if (value !== void 0) pairs.push([key, String(value)]);
-	return `<channel ${pairs.map(([key, value]) => `${key}="${escapeAttr(value)}"`).join(" ")}>\n${content}\n</channel>\n${addressed && meta.chat_id.startsWith("-") ? `[GRUPPENANTWORT: Eine bloße Information oder eine Nachricht, die ausdrücklich keine Bestätigung verlangt, macht keine Antwort erforderlich. Beende den Turn dann ohne Ausgabe und ohne Bestätigung deiner Stille. Eine Antwort auf deine Statusfrage ohne neuen Auftrag braucht keine Zusammenfassung und keinen sichtbaren Text. Falls ein Abschlusstext nötig ist, gib nur [[BLUN_TELEGRAM_SILENT]] aus. Einen konkreten Auftrag an dich nimm kurz an und beginne die Arbeit; melde danach das Ergebnis oder einen echten Blocker. Eine Frage beantworte, wenn du etwas beitragen kannst. Sende eine nötige Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}, ohne dieselbe Annahme zu wiederholen.]` : addressed ? `[REPLY-PFLICHT: Der Absender liest NUR Telegram. Sende deine Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Sichtbarer Antworttext kann auch automatisch weitergeleitet werden; er ist kein privater Denkbereich.]` : inferAddressing ? `[SEMANTISCHE ADRESSIERUNG: Diese menschliche Gruppennachricht nennt dich nicht explizit. Entscheide anhand von Inhalt und Gesprächskontext, ob sie an dich gerichtet ist oder Arbeit von dir verlangt. Falls ja, antworte kurz mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Falls nein, beende den Turn ohne Ausgabe; sende keine Bestätigung deiner Stille.]` : "[NUR MITLESEN — diese Nachricht ist NICHT an dich gerichtet (kein @King, keine Antwort an dich, sie spricht jemand anderen oder die Gruppe allgemein an). ANTWORTE NICHT: kein reply-Tool, keine Bestätigung, kein \"verstanden\", kein \"halte mich raus\" — beende den Turn einfach ohne Ausgabe. NUR wenn du ein echtes, konkretes Ergebnis oder einen echten Blocker beitragen kannst, antwortest du kurz. Im Zweifel: schweigen.]"}`;
+	return `<channel ${pairs.map(([key, value]) => `${key}="${escapeAttr(value)}"`).join(" ")}>\n${content}\n</channel>\n${addressed && meta.chat_id.startsWith("-") ? `[GRUPPENANTWORT: Eine bloße Information oder eine Nachricht, die ausdrücklich keine Bestätigung verlangt, macht keine Antwort erforderlich. Beende den Turn dann ohne Ausgabe und ohne Bestätigung deiner Stille. Antwortet jemand auf deine eigene Statusfrage ohne neuen Auftrag, schweige. Fragt dich jemand nach dem Stand, antworte kurz und ehrlich. Falls ein Abschlusstext nötig ist, gib nur [[BLUN_TELEGRAM_SILENT]] aus. Einen konkreten Auftrag an dich nimm kurz an und beginne die Arbeit; melde danach das Ergebnis oder einen echten Blocker. Eine Frage beantworte, wenn du etwas beitragen kannst. Sende eine nötige Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}, ohne dieselbe Annahme zu wiederholen.]` : addressed ? `[REPLY-PFLICHT: Der Absender liest NUR Telegram. Sende deine Antwort mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Sichtbarer Antworttext kann auch automatisch weitergeleitet werden; er ist kein privater Denkbereich.]` : inferAddressing ? `[SEMANTISCHE ADRESSIERUNG: Diese menschliche Gruppennachricht nennt dich nicht explizit. Entscheide anhand von Inhalt und Gesprächskontext, ob sie an dich gerichtet ist oder Arbeit von dir verlangt. Falls ja, antworte kurz mit dem telegram reply-Tool an chat_id=${meta.chat_id}. Falls nein, beende den Turn ohne Ausgabe; sende keine Bestätigung deiner Stille.]` : "[NUR MITLESEN — diese Nachricht ist NICHT an dich gerichtet (kein @King, keine Antwort an dich, sie spricht jemand anderen oder die Gruppe allgemein an). ANTWORTE NICHT: kein reply-Tool, keine Bestätigung, kein \"verstanden\", kein \"halte mich raus\" — beende den Turn einfach ohne Ausgabe. NUR wenn du ein echtes, konkretes Ergebnis oder einen echten Blocker beitragen kannst, antwortest du kurz. Im Zweifel: schweigen.]"}`;
 }
 /**
 * Sent once as the head of the first prompt of every bridged session —
@@ -67686,204 +67687,6 @@ var RequestError = class RequestError extends Error {
 	}
 };
 //#endregion
-//#region src/language-release.ts
-const EXACT_LANGUAGE_TAG = /^(?:[A-Za-z]{2,8}|x)(?:-[A-Za-z0-9]{1,8})*$/;
-const LETTER = /^\p{Letter}$/u;
-const LATIN = /^\p{Script=Latin}$/u;
-const CYRILLIC = /^\p{Script=Cyrillic}$/u;
-const GREEK = /^\p{Script=Greek}$/u;
-const ARABIC = /^\p{Script=Arabic}$/u;
-const HEBREW = /^\p{Script=Hebrew}$/u;
-const HAN = /^\p{Script=Han}$/u;
-const HIRAGANA = /^\p{Script=Hiragana}$/u;
-const KATAKANA = /^\p{Script=Katakana}$/u;
-const HANGUL = /^\p{Script=Hangul}$/u;
-const LATIN_LANGUAGES = new Set([
-	"af",
-	"bs",
-	"ca",
-	"cs",
-	"cy",
-	"da",
-	"de",
-	"en",
-	"es",
-	"et",
-	"eu",
-	"fi",
-	"fr",
-	"ga",
-	"gd",
-	"gl",
-	"hr",
-	"hu",
-	"id",
-	"is",
-	"it",
-	"la",
-	"lb",
-	"lt",
-	"lv",
-	"ms",
-	"mt",
-	"nl",
-	"no",
-	"pl",
-	"pt",
-	"ro",
-	"sk",
-	"sl",
-	"sq",
-	"sv",
-	"sw",
-	"tr",
-	"vi"
-]);
-function canonicalText(text) {
-	return text.replace(/^\uFEFF/, "").replace(/\r\n?/g, "\n").normalize("NFC");
-}
-function canonicalHash(text) {
-	return createHash("sha256").update(canonicalText(text), "utf8").digest("hex");
-}
-function maskTechnicalText(text) {
-	const mask = (value) => " ".repeat(value.length);
-	return text.replace(/```[\s\S]*?```|~~~[\s\S]*?~~~/g, mask).replace(/`[^`\r\n]*`/g, mask);
-}
-function allowedScriptMatchers(locale) {
-	if (!EXACT_LANGUAGE_TAG.test(locale) || ["auto", "all"].includes(locale.toLowerCase())) throw new Error("language release blocked: exact output locale required");
-	const parts = locale.replaceAll("_", "-").split("-");
-	const base = parts[0]?.toLowerCase() ?? "";
-	const explicitScript = parts.find((part) => part.length === 4)?.toLowerCase();
-	if (explicitScript !== void 0) {
-		const explicit = {
-			latn: [LATIN],
-			cyrl: [CYRILLIC],
-			grek: [GREEK],
-			arab: [ARABIC],
-			hebr: [HEBREW],
-			hani: [HAN],
-			jpan: [
-				HAN,
-				HIRAGANA,
-				KATAKANA
-			],
-			hang: [HANGUL, HAN]
-		}[explicitScript];
-		if (explicit === void 0) throw new Error("language release blocked: unsupported output script");
-		return explicit;
-	}
-	if (LATIN_LANGUAGES.has(base)) return [LATIN];
-	if ([
-		"ru",
-		"uk",
-		"bg",
-		"mk"
-	].includes(base)) return [CYRILLIC];
-	if (base === "el") return [GREEK];
-	if ([
-		"ar",
-		"fa",
-		"ur"
-	].includes(base)) return [ARABIC];
-	if (base === "he") return [HEBREW];
-	if (base === "zh") return [HAN];
-	if (base === "ja") return [
-		HAN,
-		HIRAGANA,
-		KATAKANA
-	];
-	if (base === "ko") return [HANGUL, HAN];
-	throw new Error("language release blocked: output locale has no deterministic script policy");
-}
-function assertExpectedScript(text, locale) {
-	const allowed = allowedScriptMatchers(locale);
-	for (const character of maskTechnicalText(text)) {
-		if (!LETTER.test(character)) continue;
-		if (allowed.some((matcher) => matcher.test(character))) continue;
-		const point = character.codePointAt(0)?.toString(16).toUpperCase().padStart(4, "0") ?? "UNKNOWN";
-		throw new Error(`language release blocked: unexpected-script-contamination (U+${point})`);
-	}
-}
-function parseAndVerifySignature(token, key) {
-	if (key.length < 32) throw new Error("language release blocked: invalid verification key");
-	if (token.length > 16384) throw new Error("language release blocked: release token too large");
-	const parts = token.split(".");
-	if (parts.length !== 3 || parts[0] !== "blg6" || parts[1] === "" || parts[2] === "") throw new Error("language release blocked: malformed release token");
-	const encoded = parts[1];
-	let supplied;
-	let payload;
-	try {
-		supplied = Buffer.from(parts[2], "base64url");
-		payload = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
-	} catch {
-		throw new Error("language release blocked: malformed release token");
-	}
-	const expected = createHmac("sha256", key).update(encoded).digest();
-	if (supplied.length !== expected.length || !timingSafeEqual(supplied, expected)) throw new Error("language release blocked: invalid release token signature");
-	if (payload === null || typeof payload !== "object" || Array.isArray(payload)) throw new Error("language release blocked: malformed release payload");
-	return payload;
-}
-function assertEqual(actual, expected, field) {
-	if (actual !== expected) throw new Error(`language release blocked: ${field} mismatch`);
-}
-function verifyTelegramLanguageRelease(text, releaseToken, options) {
-	if (typeof releaseToken !== "string" || releaseToken.length === 0) throw new Error("language release blocked: release token required");
-	if (options.expectedVersion.trim().length === 0) throw new Error("language release blocked: expected guard version required");
-	assertExpectedScript(text, options.locale);
-	const payload = parseAndVerifySignature(releaseToken, options.key);
-	const now = Math.floor(options.now ?? Date.now() / 1e3);
-	if (!Number.isSafeInteger(payload.iat) || !Number.isSafeInteger(payload.exp)) throw new Error("language release blocked: invalid receipt lifetime");
-	const issuedAt = payload.iat;
-	const expiresAt = payload.exp;
-	if (expiresAt < now) throw new Error("language release blocked: release token expired");
-	if (issuedAt > now + 60 || expiresAt < issuedAt || expiresAt - issuedAt > 604800) throw new Error("language release blocked: invalid receipt lifetime");
-	if (typeof payload.nonce !== "string" || payload.nonce.length === 0) throw new Error("language release blocked: invalid receipt nonce");
-	assertEqual(payload.source_sha256, canonicalHash(""), "source");
-	assertEqual(payload.target_sha256, canonicalHash(text), "target");
-	if (payload.language !== options.locale) throw new Error(`language release blocked: language mismatch (expected ${options.locale})`);
-	assertEqual(payload.purpose, "response", "purpose");
-	assertEqual(payload.content_type, "prose", "content type");
-	assertEqual(payload.short_text_reviewed, false, "short text review");
-	assertEqual(payload.v, options.expectedVersion, "version");
-}
-function isLanguageReleaseRequired() {
-	return process.env["BLUN_TELEGRAM_LANGUAGE_GATE"]?.trim().toLowerCase() === "required";
-}
-function requiredSetting(name) {
-	const value = process.env[name]?.trim();
-	if (value === void 0 || value.length === 0) throw new Error(`language release blocked: host setting ${name} required`);
-	return value;
-}
-function telegramLanguageReleaseLocale() {
-	if (!isLanguageReleaseRequired()) return void 0;
-	const locale = requiredSetting("BLUN_TELEGRAM_OUTPUT_LOCALE");
-	allowedScriptMatchers(locale);
-	return locale;
-}
-function defaultKeyFile() {
-	const configuredHome = process.env["BLUN_HOME"]?.trim();
-	return join(configuredHome !== void 0 && configuredHome.length > 0 ? configuredHome : join(homedir(), ".blun"), "secrets", "blun-language-guard-signing.key");
-}
-function assertTelegramLanguageReleased(text, releaseToken, now) {
-	if (!isLanguageReleaseRequired()) return;
-	if (typeof releaseToken !== "string" || releaseToken.length === 0) throw new Error("language release blocked: release token required");
-	const locale = telegramLanguageReleaseLocale();
-	if (locale === void 0) throw new Error("language release blocked: exact output locale required");
-	const keyFile = process.env["BLUN_LANGUAGE_GUARD_KEY_FILE"]?.trim() || defaultKeyFile();
-	let key;
-	try {
-		key = readFileSync(keyFile);
-	} catch {
-		throw new Error("language release blocked: verification key unavailable");
-	}
-	verifyTelegramLanguageRelease(text, releaseToken, {
-		locale,
-		expectedVersion: requiredSetting("BLUN_LANGUAGE_GUARD_VERSION"),
-		key,
-		now
-	});
-}
-//#endregion
 //#region src/noise.ts
 /**
 * Conservative outbound guard for group acknowledgements and narrated silence.
@@ -67895,9 +67698,12 @@ function assertTelegramLanguageReleased(text, releaseToken, now) {
 function isGroupChat(chatId) {
 	return chatId.startsWith("-");
 }
-const SILENT_TURN_MARKER = "[[BLUN_TELEGRAM_SILENT]]";
-function isSilentTurnMarker(text) {
-	return text.trim() === SILENT_TURN_MARKER;
+function stripTrailingSilentTurnMarker(text) {
+	const trimmed = text.trimEnd();
+	if (!trimmed.endsWith("[[BLUN_TELEGRAM_SILENT]]")) return text;
+	const prefix = trimmed.slice(0, -24);
+	if (prefix.length > 0 && !/\s$/u.test(prefix)) return text;
+	return prefix.trimEnd();
 }
 function normalize(s) {
 	return s.toLowerCase().replace(/ä/g, "a").replace(/ö/g, "o").replace(/ü/g, "u").replace(/ß/g, "ss").replace(/[‐-―]/g, " ").replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
@@ -67907,6 +67713,7 @@ const EMPTY_CLAUSES = [
 	/^(bin da|bin hier|hier bin ich|ich bin da|was brauchst du|was gibt es|was liegt an|wie kann ich helfen|bereit|ich warte|warte auf|melde mich|freut mich|here|standing by|ready|awaiting|what do you need)$/,
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
+	/^ich best(?:a|ae|ä)tige nichts und beende still$/u,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
 	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
@@ -67935,6 +67742,40 @@ function isGroupNoiseReply(text) {
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion
+//#region src/outbox-reader.ts
+/** Read a byte suffix from one outbox descriptor, never the preceding history. */
+function readOutboxSuffix(start) {
+	if (typeof start === "number" && (!Number.isSafeInteger(start) || start < 0)) return void 0;
+	let fd;
+	try {
+		fd = openSync(outboxLog(), "r");
+		const stat = fstatSync(fd);
+		if (!stat.isFile()) return void 0;
+		const end = stat.size;
+		const offset = typeof start === "number" ? start : start(end);
+		if (!Number.isSafeInteger(offset) || offset < 0) return void 0;
+		if (offset >= end) return "";
+		const buffer = Buffer.allocUnsafe(Math.min(64 * 1024, end - offset));
+		const decoder = new StringDecoder("utf8");
+		const chunks = [];
+		let position = offset;
+		while (position < end) {
+			const count = readSync(fd, buffer, 0, Math.min(buffer.length, end - position), position);
+			if (count === 0) break;
+			position += count;
+			chunks.push(decoder.write(buffer.subarray(0, count)));
+		}
+		chunks.push(decoder.end());
+		return chunks.join("");
+	} catch {
+		return;
+	} finally {
+		if (fd !== void 0) try {
+			closeSync(fd);
+		} catch {}
+	}
+}
+//#endregion
 //#region src/acp-session.ts
 /**
 * The King side of the bridge: spawns `<node> <main.mjs> acp`, drives it as
@@ -68028,8 +67869,8 @@ function outboxMarker() {
 /** True when the reply tool appended an outbox entry for this chat since `marker`. */
 function outboxGrewForChat(marker, chatId, threadId) {
 	try {
-		if (statSync(outboxLog()).size <= marker) return false;
-		const fresh = readFileSync(outboxLog(), "utf8").slice(marker);
+		const fresh = readOutboxSuffix(marker);
+		if (fresh === void 0 || fresh.length === 0) return false;
 		for (const line of fresh.split(/\r?\n/)) {
 			if (line.trim().length === 0) continue;
 			try {
@@ -68055,7 +67896,8 @@ function scrubSecrets(text) {
 * log it to outbox.jsonl as kind "reply-fallback". Returns true on success.
 */
 async function sendReplyFallback(chatId, rawText, threadId) {
-	if (rawText.trim().length === 0 || isSilentTurnMarker(rawText)) return true;
+	const cleanText = stripTrailingSilentTurnMarker(rawText);
+	if (cleanText.trim().length === 0) return true;
 	let topic;
 	try {
 		topic = threadId === void 0 ? {} : { message_thread_id: telegramThreadId(threadId) };
@@ -68064,14 +67906,13 @@ async function sendReplyFallback(chatId, rawText, threadId) {
 	}
 	const token = botToken();
 	if (token === void 0) return false;
-	if (isGroupChat(chatId) && isGroupNoiseReply(rawText)) {
+	if (isGroupChat(chatId) && isGroupNoiseReply(cleanText)) {
 		logLine(`reply-fallback suppressed (group meta-noise): ${rawText.slice(0, 60)}`);
 		return true;
 	}
-	const text = scrubSecrets(rawText);
+	const text = scrubSecrets(cleanText);
 	const body = text.length > TELEGRAM_TEXT_LIMIT ? `${text.slice(0, TELEGRAM_TEXT_LIMIT - 1)}…` : text;
 	try {
-		assertTelegramLanguageReleased(body, void 0);
 		const payload = await (await fetch(`https://api.telegram.org/bot${token}/sendMessage`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },

package/telegram-plugin/dist/mcp-server.mjs

@@ -1,9 +1,10 @@
 import { createRequire } from "node:module";
 import process$1 from "node:process";
-import { appendFileSync, chmodSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { appendFileSync, chmodSync, closeSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { extname, join, sep } from "node:path";
 import { homedir } from "node:os";
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { StringDecoder } from "node:string_decoder";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -55633,10 +55634,10 @@ var require_internal = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	InternalCodec.prototype.encoder = InternalEncoder;
 	InternalCodec.prototype.decoder = InternalDecoder;
-	var StringDecoder = __require("string_decoder").StringDecoder;
-	if (!StringDecoder.prototype.end) StringDecoder.prototype.end = function() {};
+	var StringDecoder$1 = __require("string_decoder").StringDecoder;
+	if (!StringDecoder$1.prototype.end) StringDecoder$1.prototype.end = function() {};
 	function InternalDecoder(options, codec) {
-		this.decoder = new StringDecoder(codec.enc);
+		this.decoder = new StringDecoder$1(codec.enc);
 	}
 	InternalDecoder.prototype.write = function(buf) {
 		if (!Buffer.isBuffer(buf)) buf = Buffer.from(buf);
@@ -73449,6 +73450,10 @@ function assertTelegramLanguageReleased(text, releaseToken, now) {
 		now
 	});
 }
+function assertOptionalTelegramLanguageRelease(text, releaseToken, now) {
+	if (releaseToken === void 0) return;
+	assertTelegramLanguageReleased(text, releaseToken, now);
+}
 //#endregion
 //#region src/noise.ts
 /**
@@ -73465,6 +73470,13 @@ const SILENT_TURN_MARKER = "[[BLUN_TELEGRAM_SILENT]]";
 function isSilentTurnMarker(text) {
 	return text.trim() === SILENT_TURN_MARKER;
 }
+function stripTrailingSilentTurnMarker(text) {
+	const trimmed = text.trimEnd();
+	if (!trimmed.endsWith("[[BLUN_TELEGRAM_SILENT]]")) return text;
+	const prefix = trimmed.slice(0, -24);
+	if (prefix.length > 0 && !/\s$/u.test(prefix)) return text;
+	return prefix.trimEnd();
+}
 function normalize(s) {
 	return s.toLowerCase().replace(/ä/g, "a").replace(/ö/g, "o").replace(/ü/g, "u").replace(/ß/g, "ss").replace(/[‐-―]/g, " ").replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
 }
@@ -73473,6 +73485,7 @@ const EMPTY_CLAUSES = [
 	/^(bin da|bin hier|hier bin ich|ich bin da|was brauchst du|was gibt es|was liegt an|wie kann ich helfen|bereit|ich warte|warte auf|melde mich|freut mich|here|standing by|ready|awaiting|what do you need)$/,
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
+	/^ich best(?:a|ae|ä)tige nichts und beende still$/u,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
 	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
@@ -73501,6 +73514,40 @@ function isGroupNoiseReply(text) {
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion
+//#region src/outbox-reader.ts
+/** Read a byte suffix from one outbox descriptor, never the preceding history. */
+function readOutboxSuffix(start) {
+	if (typeof start === "number" && (!Number.isSafeInteger(start) || start < 0)) return void 0;
+	let fd;
+	try {
+		fd = openSync(outboxLog(), "r");
+		const stat = fstatSync(fd);
+		if (!stat.isFile()) return void 0;
+		const end = stat.size;
+		const offset = typeof start === "number" ? start : start(end);
+		if (!Number.isSafeInteger(offset) || offset < 0) return void 0;
+		if (offset >= end) return "";
+		const buffer = Buffer.allocUnsafe(Math.min(64 * 1024, end - offset));
+		const decoder = new StringDecoder("utf8");
+		const chunks = [];
+		let position = offset;
+		while (position < end) {
+			const count = readSync(fd, buffer, 0, Math.min(buffer.length, end - position), position);
+			if (count === 0) break;
+			position += count;
+			chunks.push(decoder.write(buffer.subarray(0, count)));
+		}
+		chunks.push(decoder.end());
+		return chunks.join("");
+	} catch {
+		return;
+	} finally {
+		if (fd !== void 0) try {
+			closeSync(fd);
+		} catch {}
+	}
+}
+//#endregion
 //#region src/inbound.ts
 function telegramThreadId(value) {
 	if (value === void 0) return void 0;
@@ -73528,7 +73575,7 @@ const TOOL_DEFINITIONS = [
 				text: { type: "string" },
 				release_token: {
 					type: "string",
-					description: "Language Guard receipt for this exact text. Required when the host enables the language release gate."
+					description: "Optional Language Guard receipt for released text. When provided, it must match this exact text."
 				},
 				reply_to: {
 					type: "string",
@@ -73592,7 +73639,7 @@ const TOOL_DEFINITIONS = [
 				text: { type: "string" },
 				release_token: {
 					type: "string",
-					description: "Language Guard receipt for this exact text. Required when the host enables the language release gate."
+					description: "Optional Language Guard receipt for released text. When provided, it must match this exact text."
 				},
 				format: {
 					type: "string",
@@ -73621,8 +73668,8 @@ async function runTool(api, token, name, args) {
 		case "download_attachment": return runDownload(api, token, args["file_id"]);
 		case "edit_message": {
 			const chatId = resolveAllowedChatId(args["chat_id"]);
-			if (isSilentTurnMarker(args["text"])) throw new Error("silent marker cannot be used to edit a Telegram message");
-			assertTelegramLanguageReleased(args["text"], args["release_token"]);
+			if (stripTrailingSilentTurnMarker(args["text"]) !== args["text"] || isSilentTurnMarker(args["text"])) throw new Error("silent marker cannot be used to edit a Telegram message");
+			assertOptionalTelegramLanguageRelease(args["text"], args["release_token"]);
 			const parseMode = args["format"] === "markdownv2" ? "MarkdownV2" : void 0;
 			const edited = await api.editMessageText(chatId, Number(args["message_id"]), args["text"], parseMode !== void 0 ? { parse_mode: parseMode } : void 0);
 			const id = typeof edited === "object" ? edited.message_id : args["message_id"];
@@ -73646,13 +73693,10 @@ async function runTool(api, token, name, args) {
 * nicht weiter retryt. Datei-Anhänge sind nie betroffen.
 */
 const DUPLICATE_WINDOW_MS = 3e5;
-const OUTBOX_TAIL_BYTES = 32768;
+const OUTBOX_TAIL_CHARACTERS = 32768;
 function isRecentDuplicate(chatId, text, threadId, replyTo) {
 	try {
-		const file = outboxLog();
-		const size = statSync(file).size;
-		const raw = readFileSync(file, "utf8");
-		const tail = size > OUTBOX_TAIL_BYTES ? raw.slice(raw.length - OUTBOX_TAIL_BYTES) : raw;
+		const tail = readOutboxSuffix((size) => Math.max(0, size - 4 * OUTBOX_TAIL_CHARACTERS))?.slice(-OUTBOX_TAIL_CHARACTERS) ?? "";
 		const wanted = text.trim();
 		const cutoff = Date.now() - DUPLICATE_WINDOW_MS;
 		for (const line of tail.split("\n")) {
@@ -73681,6 +73725,10 @@ async function runReply(api, args) {
 		if (files.length > 0) throw new Error("silent marker cannot accompany files");
 		return "suppressed: silent marker - not sent";
 	}
+	if (stripTrailingSilentTurnMarker(text) !== text) {
+		if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(stripTrailingSilentTurnMarker(text))) return "suppressed: group meta/acknowledgement noise - not sent";
+		throw new Error("silent marker cannot accompany Telegram reply text or files; resend the reply without it");
+	}
 	if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(text)) {
 		appendJsonl(outboxLog(), {
 			direction: "out",
@@ -73701,7 +73749,7 @@ async function runReply(api, args) {
 		});
 		return "already delivered: an identical message was sent to this chat moments ago — do NOT send it again";
 	}
-	assertTelegramLanguageReleased(text, args["release_token"]);
+	assertOptionalTelegramLanguageRelease(text, args["release_token"]);
 	for (const file of files) {
 		assertSendable(file);
 		const info = statSync(file);

package/telegram-plugin/dist/noise.mjs

@@ -13,6 +13,13 @@ const SILENT_TURN_MARKER = "[[BLUN_TELEGRAM_SILENT]]";
 function isSilentTurnMarker(text) {
 	return text.trim() === SILENT_TURN_MARKER;
 }
+function stripTrailingSilentTurnMarker(text) {
+	const trimmed = text.trimEnd();
+	if (!trimmed.endsWith("[[BLUN_TELEGRAM_SILENT]]")) return text;
+	const prefix = trimmed.slice(0, -24);
+	if (prefix.length > 0 && !/\s$/u.test(prefix)) return text;
+	return prefix.trimEnd();
+}
 function normalize(s) {
 	return s.toLowerCase().replace(/ä/g, "a").replace(/ö/g, "o").replace(/ü/g, "u").replace(/ß/g, "ss").replace(/[‐-―]/g, " ").replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
 }
@@ -21,6 +28,7 @@ const EMPTY_CLAUSES = [
 	/^(bin da|bin hier|hier bin ich|ich bin da|was brauchst du|was gibt es|was liegt an|wie kann ich helfen|bereit|ich warte|warte auf|melde mich|freut mich|here|standing by|ready|awaiting|what do you need)$/,
 	/^(keine (gruppen ?)?antwort|gar keine antwort|keine reaktion|kein wort|no ?action|no (response|reply|answer|comment))( (notig|erforderlich|needed|required))?$/,
 	/^(ich )?(halte mich raus|(bin|bleibe) (jetzt )?still|schweige|habe nichts zu melden)$/,
+	/^ich best(?:a|ae|ä)tige nichts und beende still$/u,
 	/^(stille|still|silence|nichts (zu tun|zu melden|fur mich|fuer mich)|nicht meine lane)$/,
 	/^(kein handlungsbedarf|es gibt keinen handlungsbedarf|hier besteht kein handlungsbedarf)( (fur|fuer) mich)?$/,
 	/^(i (am |will be )?)?(staying (silent|out|quiet)|keeping (quiet|out)|holding back)$/,
@@ -49,4 +57,4 @@ function isGroupNoiseReply(text) {
 	return text.split(/[.!?;,\r\n]+|\s+[-\u2013\u2014]\s+/u).map(normalize).filter(Boolean).every((clause) => EMPTY_CLAUSES.some((pattern) => pattern.test(clause)) || NOTIFICATION_CONTEXT.test(clause));
 }
 //#endregion
-export { SILENT_TURN_MARKER, isGroupChat, isGroupNoiseReply, isSilentTurnMarker };
+export { SILENT_TURN_MARKER, isGroupChat, isGroupNoiseReply, isSilentTurnMarker, stripTrailingSilentTurnMarker };