blun-king-cli 9.1.62 → 9.1.64

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.62",
+  "version": "9.1.64",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {
@@ -16,6 +16,7 @@
   },
   "os": [
     "darwin",
+    "linux",
     "win32"
   ],
   "cpu": [
@@ -31,6 +32,8 @@
     "blun.mjs",
     "dist-web/",
     "native/",
+    "release-planned-removals.json",
+    "scripts/check-package-regression.js",
     "scripts/fix-node-pty-perms.js",
     "standard-skills/",
     "standard-tools/",

package/release-planned-removals.json

@@ -0,0 +1,4 @@
+{
+  "version": "9.1.63",
+  "removals": []
+}

package/scripts/check-package-regression.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('node:fs');
+const crypto = require('node:crypto');
+const path = require('node:path');
+const {
+  comparePackagePaths,
+  listTarGzPaths,
+} = require('../bin/package-regression-policy.cjs');
+
+const [, , previousTarball, currentTarball, allowlistPath = path.join(__dirname, '..', 'release-planned-removals.json')] = process.argv;
+if (!previousTarball || !currentTarball) {
+  console.error('Usage: node scripts/check-package-regression.js <previous.tgz> <current.tgz> [planned-removals.json]');
+  process.exit(2);
+}
+
+const planned = JSON.parse(fs.readFileSync(allowlistPath, 'utf8'));
+const comparison = comparePackagePaths(
+  listTarGzPaths(previousTarball),
+  listTarGzPaths(currentTarball),
+  planned,
+);
+const sha256 = (filePath) => crypto.createHash('sha256').update(fs.readFileSync(filePath)).digest('hex');
+const result = {
+  ok: comparison.unexpectedRemovals.length === 0,
+  previous: { path: path.resolve(previousTarball), sha256: sha256(previousTarball) },
+  current: { path: path.resolve(currentTarball), sha256: sha256(currentTarball) },
+  checkedStablePaths: comparison.checkedStablePaths,
+  currentStablePaths: comparison.currentStablePaths,
+  removedCount: comparison.unexpectedRemovals.length,
+  unexpectedRemovals: comparison.unexpectedRemovals,
+};
+if (!result.ok) {
+  console.error(JSON.stringify(result, null, 2));
+  process.exit(1);
+}
+console.log(JSON.stringify(result, null, 2));

package/standard-skills/agent-browser/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: agent-browser
+description: Automate and verify browser workflows with the bundled Agent Browser contract while keeping external runtime installation and activation under explicit user control.
+---
+
+# Agent Browser
+
+Use this skill when a task needs browser navigation, form interaction, screenshots, DOM inspection, or end-to-end UI verification.
+
+## Workflow
+
+1. Read [references/runtime.md](references/runtime.md) before selecting the runtime.
+2. Prefer semantic targets and observable page state over coordinate clicks or fixed delays.
+3. Keep an existing user MCP entry authoritative. Never add a second process for the same browser server.
+4. Ask before enabling or downloading an external runtime. A packaged descriptor is not proof that the runtime is installed or running.
+5. Preserve the user's session, credentials, and browser profile unless the task explicitly requires a clean isolated context.
+6. Report the page state, screenshots, console errors, and network evidence actually observed.
+
+Do not claim a browser workflow passed from source inspection alone.

package/standard-skills/agent-browser/references/runtime.md

@@ -0,0 +1,8 @@
+# Agent Browser Runtime Contract
+
+- Tested contract: Agent Browser 0.31.2 or a compatible newer release.
+- MCP entrypoint: `agent-browser mcp`.
+- The standard descriptor pins `agent-browser@0.31.2` and is disabled until the user opts in.
+- The executable is external and is not bundled with BLUN Code. Enabling the descriptor may require a package download.
+- The default core MCP profile is sufficient for navigation and inspection. Add broader capabilities only for a named task.
+- Reuse an existing equivalent MCP entry. Do not start a duplicate browser process.