blun-king-cli 9.1.628-pruefpaket.modules.r7 → 9.1.628

package/bin/launcher-runtime.js

@@ -40,6 +40,7 @@ const {
   writePrivateFile,
 } = require('./private-paths');
 
+const { writeTelegramTemplate } = require('./rename-private-staging.cjs');
 const PKG = path.resolve(__dirname, '..');
 const ARGS = process.argv.slice(2);
 
@@ -253,7 +254,7 @@ function installTelegramForProfile(packageRoot, blunDir) {
   ensurePrivateDirectory(channelDir);
   const envFile = path.join(channelDir, '.env');
   if (!fs.existsSync(envFile)) {
-    writePrivateFile(envFile, 'BLUN_TELEGRAM_BOT_TOKEN=HIER_DEIN_BOT_TOKEN_EINFUEGEN\n');
+    writeTelegramTemplate(envFile, 'BLUN_TELEGRAM_BOT_TOKEN=HIER_DEIN_BOT_TOKEN_EINFUEGEN\n');
   } else {
     securePrivateFile(envFile);
   }

package/bin/managed-plugin-selection.cjs

@@ -1,115 +1,116 @@
-'use strict';
-const { createHash, randomUUID } = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-const { ensurePrivateDirectory, securePrivateTree } = require('./private-paths');
-const SCHEMA = 'blun.managed-plugin-selection/v1';
-
-function snapshotPluginTree(root) {
-  const entries = [];
-  const rootStat = fs.lstatSync(root);
-  if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) return null;
-  const visit = (directory, relativeDirectory = '') => {
-    for (const entry of fs.readdirSync(directory, { withFileTypes: true })
-      .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
-      const relativePath = path.join(relativeDirectory, entry.name);
-      const absolutePath = path.join(directory, entry.name);
-      const stat = fs.lstatSync(absolutePath);
-      if (stat.isSymbolicLink()) return false;
-      if (stat.isDirectory()) {
-        entries.push({ kind: 'directory', path: relativePath });
-        if (!visit(absolutePath, relativePath)) return false;
-      } else if (stat.isFile()) {
-        entries.push({ kind: 'file', path: relativePath, content: fs.readFileSync(absolutePath) });
-      } else return false;
-    }
-    return true;
-  };
-  return visit(root) ? entries : null;
-}
-
-function digestPluginEntries(entries) {
-  if (entries === null) throw new Error('Invalid managed plugin tree');
-  const hash = createHash('sha256');
-  for (const entry of entries) {
-    hash.update(Buffer.from(`${entry.kind}\0${entry.path}\0`, 'utf8'));
-    if (entry.kind === 'file') {
-      const length = Buffer.allocUnsafe(8);
-      length.writeBigUInt64BE(BigInt(entry.content.length));
-      hash.update(length);
-      hash.update(entry.content);
-    }
-  }
-  return hash.digest('hex');
-}
-
-function samePath(left, right) {
-  const normalize = value => process.platform === 'win32' ? path.resolve(value).toLowerCase() : path.resolve(value);
-  return normalize(left) === normalize(right);
-}
-
-function scopedPluginRoot(blunDir, pluginRoot) {
-  const managed = path.resolve(blunDir, 'plugins', 'managed');
-  const root = path.resolve(pluginRoot);
-  if (!samePath(path.dirname(root), managed)) throw new Error('Selected AgentSpine root is outside this profile');
-  for (const directory of [blunDir, path.dirname(managed), managed, root]) {
-    const stat = fs.lstatSync(directory);
-    if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error('Selected AgentSpine root contains a linked directory');
-  }
-  if (!samePath(path.dirname(fs.realpathSync(root)), fs.realpathSync(managed))) {
-    throw new Error('Selected AgentSpine root resolves outside this profile');
-  }
-  return root;
-}
-
-function describeAgentSpineSelection({ blunDir, pluginRoot }) {
-  const root = scopedPluginRoot(blunDir, pluginRoot);
-  const digest = digestPluginEntries(snapshotPluginTree(root));
-  if (path.basename(root) !== `agent-spine-${digest}`) throw new Error('Selected AgentSpine digest mismatch');
-  return { schema: SCHEMA, digest };
-}
-
-function selectedAgentSpineRoot({ installed, blunDir }) {
-  const records = installed.plugins.filter(record => record.id === 'agent-spine');
-  if (!records.some(record => Object.hasOwn(record, 'managedSelection'))) return null;
-  if (records.length !== 1) throw new Error('Ambiguous AgentSpine selection');
-  const [record] = records;
-  const selection = record.managedSelection;
-  if (!selection || selection.schema !== SCHEMA || !/^[a-f0-9]{64}$/.test(selection.digest || '')
-    || Object.keys(selection).sort().join(',') !== 'digest,schema' || typeof record.root !== 'string') {
-    throw new Error('Invalid AgentSpine selection');
-  }
-  const actual = describeAgentSpineSelection({ blunDir, pluginRoot: record.root });
-  if (actual.digest !== selection.digest) throw new Error('Selected AgentSpine digest mismatch');
-  return record.root;
-}
-
-function copySelectedAgentSpinePlugin({ blunDir, sourceRoot }) {
-  const plugins = path.resolve(blunDir, 'plugins');
-  const managed = path.join(plugins, 'managed');
-  ensurePrivateDirectory(plugins);
-  ensurePrivateDirectory(managed);
-  const digest = digestPluginEntries(snapshotPluginTree(sourceRoot));
-  const pluginRoot = path.join(managed, `agent-spine-${digest}`);
-  if (fs.existsSync(pluginRoot)) {
-    describeAgentSpineSelection({ blunDir, pluginRoot });
-    return pluginRoot;
-  }
-  const staging = path.join(managed, `.agent-spine-selected-${process.pid}-${randomUUID()}.tmp`);
-  try {
-    fs.cpSync(sourceRoot, staging, { recursive: true, errorOnExist: true, force: false });
-    securePrivateTree(staging);
-    if (digestPluginEntries(snapshotPluginTree(staging)) !== digest) throw new Error('AgentSpine source changed during installation');
-    fs.renameSync(staging, pluginRoot);
-    describeAgentSpineSelection({ blunDir, pluginRoot });
-    return pluginRoot;
-  } finally {
-    if (!samePath(path.dirname(staging), managed) || !path.basename(staging).startsWith('.agent-spine-selected-')) {
-      throw new Error('Invalid AgentSpine staging cleanup path');
-    }
-    fs.rmSync(staging, { recursive: true, force: true });
-  }
-}
-
-module.exports = { snapshotPluginTree, digestPluginEntries, describeAgentSpineSelection,
-  selectedAgentSpineRoot, copySelectedAgentSpinePlugin };
+'use strict';
+const { createHash, randomUUID } = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { renamePrivateStaging } = require('./rename-private-staging.cjs');
+const { ensurePrivateDirectory, securePrivateTree } = require('./private-paths');
+const SCHEMA = 'blun.managed-plugin-selection/v1';
+
+function snapshotPluginTree(root) {
+  const entries = [];
+  const rootStat = fs.lstatSync(root);
+  if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) return null;
+  const visit = (directory, relativeDirectory = '') => {
+    for (const entry of fs.readdirSync(directory, { withFileTypes: true })
+      .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
+      const relativePath = path.join(relativeDirectory, entry.name);
+      const absolutePath = path.join(directory, entry.name);
+      const stat = fs.lstatSync(absolutePath);
+      if (stat.isSymbolicLink()) return false;
+      if (stat.isDirectory()) {
+        entries.push({ kind: 'directory', path: relativePath });
+        if (!visit(absolutePath, relativePath)) return false;
+      } else if (stat.isFile()) {
+        entries.push({ kind: 'file', path: relativePath, content: fs.readFileSync(absolutePath) });
+      } else return false;
+    }
+    return true;
+  };
+  return visit(root) ? entries : null;
+}
+
+function digestPluginEntries(entries) {
+  if (entries === null) throw new Error('Invalid managed plugin tree');
+  const hash = createHash('sha256');
+  for (const entry of entries) {
+    hash.update(Buffer.from(`${entry.kind}\0${entry.path}\0`, 'utf8'));
+    if (entry.kind === 'file') {
+      const length = Buffer.allocUnsafe(8);
+      length.writeBigUInt64BE(BigInt(entry.content.length));
+      hash.update(length);
+      hash.update(entry.content);
+    }
+  }
+  return hash.digest('hex');
+}
+
+function samePath(left, right) {
+  const normalize = value => process.platform === 'win32' ? path.resolve(value).toLowerCase() : path.resolve(value);
+  return normalize(left) === normalize(right);
+}
+
+function scopedPluginRoot(blunDir, pluginRoot) {
+  const managed = path.resolve(blunDir, 'plugins', 'managed');
+  const root = path.resolve(pluginRoot);
+  if (!samePath(path.dirname(root), managed)) throw new Error('Selected AgentSpine root is outside this profile');
+  for (const directory of [blunDir, path.dirname(managed), managed, root]) {
+    const stat = fs.lstatSync(directory);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error('Selected AgentSpine root contains a linked directory');
+  }
+  if (!samePath(path.dirname(fs.realpathSync(root)), fs.realpathSync(managed))) {
+    throw new Error('Selected AgentSpine root resolves outside this profile');
+  }
+  return root;
+}
+
+function describeAgentSpineSelection({ blunDir, pluginRoot }) {
+  const root = scopedPluginRoot(blunDir, pluginRoot);
+  const digest = digestPluginEntries(snapshotPluginTree(root));
+  if (path.basename(root) !== `agent-spine-${digest}`) throw new Error('Selected AgentSpine digest mismatch');
+  return { schema: SCHEMA, digest };
+}
+
+function selectedAgentSpineRoot({ installed, blunDir }) {
+  const records = installed.plugins.filter(record => record.id === 'agent-spine');
+  if (!records.some(record => Object.hasOwn(record, 'managedSelection'))) return null;
+  if (records.length !== 1) throw new Error('Ambiguous AgentSpine selection');
+  const [record] = records;
+  const selection = record.managedSelection;
+  if (!selection || selection.schema !== SCHEMA || !/^[a-f0-9]{64}$/.test(selection.digest || '')
+    || Object.keys(selection).sort().join(',') !== 'digest,schema' || typeof record.root !== 'string') {
+    throw new Error('Invalid AgentSpine selection');
+  }
+  const actual = describeAgentSpineSelection({ blunDir, pluginRoot: record.root });
+  if (actual.digest !== selection.digest) throw new Error('Selected AgentSpine digest mismatch');
+  return record.root;
+}
+
+function copySelectedAgentSpinePlugin({ blunDir, sourceRoot }) {
+  const plugins = path.resolve(blunDir, 'plugins');
+  const managed = path.join(plugins, 'managed');
+  ensurePrivateDirectory(plugins);
+  ensurePrivateDirectory(managed);
+  const digest = digestPluginEntries(snapshotPluginTree(sourceRoot));
+  const pluginRoot = path.join(managed, `agent-spine-${digest}`);
+  if (fs.existsSync(pluginRoot)) {
+    describeAgentSpineSelection({ blunDir, pluginRoot });
+    return pluginRoot;
+  }
+  const staging = path.join(managed, `.agent-spine-selected-${process.pid}-${randomUUID()}.tmp`);
+  try {
+    fs.cpSync(sourceRoot, staging, { recursive: true, errorOnExist: true, force: false });
+    securePrivateTree(staging);
+    if (digestPluginEntries(snapshotPluginTree(staging)) !== digest) throw new Error('AgentSpine source changed during installation');
+    renamePrivateStaging(staging, pluginRoot);
+    describeAgentSpineSelection({ blunDir, pluginRoot });
+    return pluginRoot;
+  } finally {
+    if (!samePath(path.dirname(staging), managed) || !path.basename(staging).startsWith('.agent-spine-selected-')) {
+      throw new Error('Invalid AgentSpine staging cleanup path');
+    }
+    fs.rmSync(staging, { recursive: true, force: true });
+  }
+}
+
+module.exports = { snapshotPluginTree, digestPluginEntries, describeAgentSpineSelection,
+  selectedAgentSpineRoot, copySelectedAgentSpinePlugin };

package/bin/plugin-bootstrap.js

@@ -1,162 +1,163 @@
-'use strict';
-
-const { randomUUID } = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-const { selectedAgentSpineRoot, describeAgentSpineSelection, copySelectedAgentSpinePlugin } = require('./managed-plugin-selection.cjs');
-
-const {
-  ensurePrivateDirectory,
-  securePrivateFile,
-  writePrivateFile,
-} = require('./private-paths');
-
-function isObject(value) {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-function readInstalledPlugins(filePath) {
-  if (!fs.existsSync(filePath)) return { version: 1, plugins: [] };
-
-  const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
-  if (!isObject(parsed) || parsed.version !== 1 || !Array.isArray(parsed.plugins)
-    || !parsed.plugins.every(isObject)) {
-    throw new Error(`Ungültige Plugin-Konfiguration: ${filePath}`);
-  }
-  return parsed;
-}
-
-function updatedInstalledPlugins(installed, pluginRoot, now, pluginId = 'telegram') {
-  const previous = installed.plugins.find((plugin) => plugin.id === pluginId);
-  const previousCapabilities = isObject(previous?.capabilities) ? previous.capabilities : {};
-  const previousMcpServers = isObject(previousCapabilities.mcpServers)
-    ? previousCapabilities.mcpServers : {};
-  const previousTelegramMcp = isObject(previousMcpServers[pluginId])
-    ? previousMcpServers[pluginId] : {};
-  const telegram = {
-    ...previous,
-    id: pluginId,
-    root: pluginRoot,
-    source: 'local-path',
-    enabled: true,
-    installedAt: typeof previous?.installedAt === 'string' && previous.installedAt.length > 0
-      ? previous.installedAt : now,
-    updatedAt: now,
-    capabilities: {
-      ...previousCapabilities,
-      mcpServers: {
-        ...previousMcpServers,
-        [pluginId]: { ...previousTelegramMcp, enabled: previousTelegramMcp.enabled === false && pluginId === 'agent-spine' ? false : true },
-      },
-    },
-  };
-
-  const plugins = [];
-  let replaced = false;
-  for (const plugin of installed.plugins) {
-    if (plugin.id !== pluginId) {
-      plugins.push(plugin);
-    } else if (!replaced) {
-      plugins.push(telegram);
-      replaced = true;
-    }
-  }
-  if (!replaced) plugins.push(telegram);
-  return { ...installed, version: 1, plugins };
-}
-
-function writeInstalledPlugins(filePath, installed) {
-  const temporaryPath = path.join(
-    path.dirname(filePath),
-    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,
-  );
-  try {
-    writePrivateFile(temporaryPath, `${JSON.stringify(installed, null, 2)}\n`);
-    fs.renameSync(temporaryPath, filePath);
-  } catch (error) {
-    fs.rmSync(temporaryPath, { force: true });
-    throw error;
-  }
-}
-
-function installManagedTelegramPlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
-  const sourceRoot = path.join(packageRoot, 'telegram-plugin');
-  const pluginsDir = path.join(blunDir, 'plugins');
-  const managedDir = path.join(pluginsDir, 'managed');
-  const pluginRoot = path.join(managedDir, 'telegram');
-  const installedFile = path.join(pluginsDir, 'installed.json');
-
-  ensurePrivateDirectory(pluginsDir);
-  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
-  const installed = readInstalledPlugins(installedFile);
-  const updatedInstalled = updatedInstalledPlugins(installed, pluginRoot, now);
-  ensurePrivateDirectory(managedDir);
-  const nonce = `${process.pid}-${randomUUID()}`;
-  const stagingRoot = path.join(managedDir, `.telegram-${nonce}.tmp`);
-  const backupRoot = path.join(managedDir, `.telegram-${nonce}.bak`);
-  let hadPreviousPlugin = false;
-  let installedNewPlugin = false;
-  try {
-    if (fs.existsSync(pluginRoot)) {
-      ensurePrivateDirectory(pluginRoot);
-      hadPreviousPlugin = true;
-    }
-    fs.cpSync(sourceRoot, stagingRoot, { recursive: true, force: true });
-    if (hadPreviousPlugin) fs.renameSync(pluginRoot, backupRoot);
-    try {
-      fs.renameSync(stagingRoot, pluginRoot);
-      installedNewPlugin = true;
-      writeInstalledPlugins(installedFile, updatedInstalled);
-    } catch (error) {
-      if (installedNewPlugin) fs.rmSync(pluginRoot, { recursive: true, force: true });
-      if (hadPreviousPlugin && fs.existsSync(backupRoot)) {
-        fs.renameSync(backupRoot, pluginRoot);
-      }
-      throw error;
-    }
-    if (hadPreviousPlugin) fs.rmSync(backupRoot, { recursive: true, force: true });
-  } finally {
-    fs.rmSync(stagingRoot, { recursive: true, force: true });
-  }
-
-  return { installedFile, pluginRoot };
-}
-
-function installManagedAgentSpinePlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
-  const installedFile = path.join(blunDir, 'plugins', 'installed.json');
-  ensurePrivateDirectory(path.dirname(installedFile));
-  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
-  const installed = readInstalledPlugins(installedFile);
-  const records = installed.plugins.filter(plugin => plugin.id === 'agent-spine');
-  if (records.length > 1) throw new Error('Ambiguous AgentSpine registration');
-  const selected = selectedAgentSpineRoot({ installed, blunDir });
-  if (selected) return { installedFile, pluginRoot: selected, reused: true, selected: true };
-  if (records[0]?.enabled === false) {
-    return { installedFile, pluginRoot: records[0].root, reused: true, disabled: true };
-  }
-  if (records[0]) {
-    const currentRoot = records[0].root;
-    if (typeof currentRoot !== 'string' || !path.isAbsolute(currentRoot)) {
-      throw new Error('Invalid AgentSpine registration root');
-    }
-    const managed = path.resolve(blunDir, 'plugins', 'managed');
-    const sameDirectory = (left, right) => process.platform === 'win32'
-      ? left.toLowerCase() === right.toLowerCase() : left === right;
-    if (!sameDirectory(path.dirname(path.resolve(currentRoot)), managed)
-      || !/^agent-spine-[a-f0-9]{64}$/.test(path.basename(currentRoot))) {
-      return { installedFile, pluginRoot: currentRoot, reused: true, custom: true };
-    }
-    // An upgrade must not conceal changes to the previous immutable default.
-    describeAgentSpineSelection({ blunDir, pluginRoot: currentRoot });
-  }
-  const pluginRoot = copySelectedAgentSpinePlugin({ blunDir, sourceRoot: path.join(packageRoot, 'agent-spine-plugin') });
-  if (records[0]?.root === pluginRoot) return { installedFile, pluginRoot, reused: true };
-  writeInstalledPlugins(installedFile, updatedInstalledPlugins(installed, pluginRoot, now, 'agent-spine'));
-  return { installedFile, pluginRoot, reused: false };
-}
-
-module.exports = {
-  installManagedAgentSpinePlugin,
-  installManagedTelegramPlugin,
-  readInstalledPlugins,
-};
+'use strict';
+
+const { randomUUID } = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { renamePrivateStaging, copyTelegramFiles } = require('./rename-private-staging.cjs');
+const { selectedAgentSpineRoot, describeAgentSpineSelection, copySelectedAgentSpinePlugin } = require('./managed-plugin-selection.cjs');
+
+const {
+  ensurePrivateDirectory,
+  securePrivateFile,
+  writePrivateFile,
+} = require('./private-paths');
+
+function isObject(value) {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+function readInstalledPlugins(filePath) {
+  if (!fs.existsSync(filePath)) return { version: 1, plugins: [] };
+
+  const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+  if (!isObject(parsed) || parsed.version !== 1 || !Array.isArray(parsed.plugins)
+    || !parsed.plugins.every(isObject)) {
+    throw new Error(`Ungültige Plugin-Konfiguration: ${filePath}`);
+  }
+  return parsed;
+}
+
+function updatedInstalledPlugins(installed, pluginRoot, now, pluginId = 'telegram') {
+  const previous = installed.plugins.find((plugin) => plugin.id === pluginId);
+  const previousCapabilities = isObject(previous?.capabilities) ? previous.capabilities : {};
+  const previousMcpServers = isObject(previousCapabilities.mcpServers)
+    ? previousCapabilities.mcpServers : {};
+  const previousTelegramMcp = isObject(previousMcpServers[pluginId])
+    ? previousMcpServers[pluginId] : {};
+  const telegram = {
+    ...previous,
+    id: pluginId,
+    root: pluginRoot,
+    source: 'local-path',
+    enabled: true,
+    installedAt: typeof previous?.installedAt === 'string' && previous.installedAt.length > 0
+      ? previous.installedAt : now,
+    updatedAt: now,
+    capabilities: {
+      ...previousCapabilities,
+      mcpServers: {
+        ...previousMcpServers,
+        [pluginId]: { ...previousTelegramMcp, enabled: previousTelegramMcp.enabled === false && pluginId === 'agent-spine' ? false : true },
+      },
+    },
+  };
+
+  const plugins = [];
+  let replaced = false;
+  for (const plugin of installed.plugins) {
+    if (plugin.id !== pluginId) {
+      plugins.push(plugin);
+    } else if (!replaced) {
+      plugins.push(telegram);
+      replaced = true;
+    }
+  }
+  if (!replaced) plugins.push(telegram);
+  return { ...installed, version: 1, plugins };
+}
+
+function writeInstalledPlugins(filePath, installed) {
+  const temporaryPath = path.join(
+    path.dirname(filePath),
+    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,
+  );
+  try {
+    writePrivateFile(temporaryPath, `${JSON.stringify(installed, null, 2)}\n`);
+    fs.renameSync(temporaryPath, filePath);
+  } catch (error) {
+    fs.rmSync(temporaryPath, { force: true });
+    throw error;
+  }
+}
+
+function installManagedTelegramPlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
+  const sourceRoot = path.join(packageRoot, 'telegram-plugin');
+  const pluginsDir = path.join(blunDir, 'plugins');
+  const managedDir = path.join(pluginsDir, 'managed');
+  const pluginRoot = path.join(managedDir, 'telegram');
+  const installedFile = path.join(pluginsDir, 'installed.json');
+
+  ensurePrivateDirectory(pluginsDir);
+  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
+  const installed = readInstalledPlugins(installedFile);
+  const updatedInstalled = updatedInstalledPlugins(installed, pluginRoot, now);
+  ensurePrivateDirectory(managedDir);
+  const nonce = `${process.pid}-${randomUUID()}`;
+  const stagingRoot = path.join(managedDir, `.telegram-${nonce}.tmp`);
+  const backupRoot = path.join(managedDir, `.telegram-${nonce}.bak`);
+  let hadPreviousPlugin = false;
+  let installedNewPlugin = false;
+  try {
+    if (fs.existsSync(pluginRoot)) {
+      ensurePrivateDirectory(pluginRoot);
+      hadPreviousPlugin = true;
+    }
+    copyTelegramFiles(sourceRoot, stagingRoot);
+    if (hadPreviousPlugin) fs.renameSync(pluginRoot, backupRoot);
+    try {
+      renamePrivateStaging(stagingRoot, pluginRoot);
+      installedNewPlugin = true;
+      writeInstalledPlugins(installedFile, updatedInstalled);
+    } catch (error) {
+      if (installedNewPlugin) fs.rmSync(pluginRoot, { recursive: true, force: true });
+      if (hadPreviousPlugin && fs.existsSync(backupRoot)) {
+        fs.renameSync(backupRoot, pluginRoot);
+      }
+      throw error;
+    }
+    if (hadPreviousPlugin) fs.rmSync(backupRoot, { recursive: true, force: true });
+  } finally {
+    fs.rmSync(stagingRoot, { recursive: true, force: true });
+  }
+
+  return { installedFile, pluginRoot };
+}
+
+function installManagedAgentSpinePlugin({ packageRoot, blunDir, now = new Date().toISOString() }) {
+  const installedFile = path.join(blunDir, 'plugins', 'installed.json');
+  ensurePrivateDirectory(path.dirname(installedFile));
+  if (fs.existsSync(installedFile)) securePrivateFile(installedFile);
+  const installed = readInstalledPlugins(installedFile);
+  const records = installed.plugins.filter(plugin => plugin.id === 'agent-spine');
+  if (records.length > 1) throw new Error('Ambiguous AgentSpine registration');
+  const selected = selectedAgentSpineRoot({ installed, blunDir });
+  if (selected) return { installedFile, pluginRoot: selected, reused: true, selected: true };
+  if (records[0]?.enabled === false) {
+    return { installedFile, pluginRoot: records[0].root, reused: true, disabled: true };
+  }
+  if (records[0]) {
+    const currentRoot = records[0].root;
+    if (typeof currentRoot !== 'string' || !path.isAbsolute(currentRoot)) {
+      throw new Error('Invalid AgentSpine registration root');
+    }
+    const managed = path.resolve(blunDir, 'plugins', 'managed');
+    const sameDirectory = (left, right) => process.platform === 'win32'
+      ? left.toLowerCase() === right.toLowerCase() : left === right;
+    if (!sameDirectory(path.dirname(path.resolve(currentRoot)), managed)
+      || !/^agent-spine-[a-f0-9]{64}$/.test(path.basename(currentRoot))) {
+      return { installedFile, pluginRoot: currentRoot, reused: true, custom: true };
+    }
+    // An upgrade must not conceal changes to the previous immutable default.
+    describeAgentSpineSelection({ blunDir, pluginRoot: currentRoot });
+  }
+  const pluginRoot = copySelectedAgentSpinePlugin({ blunDir, sourceRoot: path.join(packageRoot, 'agent-spine-plugin') });
+  if (records[0]?.root === pluginRoot) return { installedFile, pluginRoot, reused: true };
+  writeInstalledPlugins(installedFile, updatedInstalledPlugins(installed, pluginRoot, now, 'agent-spine'));
+  return { installedFile, pluginRoot, reused: false };
+}
+
+module.exports = {
+  installManagedAgentSpinePlugin,
+  installManagedTelegramPlugin,
+  readInstalledPlugins,
+};

package/bin/rename-private-staging.cjs

@@ -0,0 +1,82 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const pause = new Int32Array(new SharedArrayBuffer(4));
+const RETRY_CODES = new Set(['EPERM', 'EBUSY', 'EACCES']);
+function withWindowsFsRetry(operation, options = {}) {
+  if ((options.platform || process.platform) !== 'win32') return operation();
+  const now = options.now || (() => Number(process.hrtime.bigint()) / 1e6);
+  const sleep = options.sleep || (ms => Atomics.wait(pause, 0, 0, ms));
+  const started = now();
+  let firstError;
+  for (let attempt = 1; ; attempt++) {
+    if (options.validate) options.validate(firstError);
+    try { return operation(); } catch (error) {
+      if (!RETRY_CODES.has(error.code)) throw error;
+      firstError ||= error;
+      const elapsedMs = now() - started;
+      if (attempt >= 11 || elapsedMs >= 500) {
+        firstError.blunFsRetry = { attempts: attempt, elapsedMs, operation: options.label || 'Dateisystemoperation' };
+        firstError.message += ' [BLUN: ' + (options.label || 'Dateisystemoperation')
+          + ' nach ' + attempt + ' Versuchen endgueltig fehlgeschlagen; Originalfehler bleibt erhalten]';
+        throw firstError;
+      }
+      sleep(Math.min(50, 500 - elapsedMs));
+    }
+  }
+}
+function canonical(value) { return path.resolve(value).toLowerCase(); }
+function stagingState(staging, impl, expected) {
+  const parent = path.dirname(path.resolve(staging));
+  if (path.basename(parent) !== 'managed'
+    || !/^\.(?:agent-spine-selected|telegram)-[0-9]+-[a-f0-9-]+\.tmp$/.test(path.basename(staging))
+    || canonical(impl.realpathSync(parent)) !== canonical(parent)) throw new Error('Invalid private staging scope');
+  let stat;
+  try { stat = impl.lstatSync(staging); } catch (error) { if (error.code === 'ENOENT') return null; throw error; }
+  if (!stat.isDirectory() || stat.isSymbolicLink()
+    || canonical(impl.realpathSync(staging)) !== canonical(staging)
+    || (expected && (stat.dev !== expected.dev || stat.ino !== expected.ino))) throw new Error('Private staging identity changed');
+  return stat;
+}
+function renamePrivateStaging(source, target, options = {}) {
+  const impl = options.fsImpl || fs;
+  if ((options.platform || process.platform) !== 'win32') return impl.renameSync(source, target);
+  if (canonical(path.dirname(target)) !== canonical(path.dirname(source))
+    || !/^(?:telegram|agent-spine-[a-f0-9]{64})$/.test(path.basename(target))) throw new Error('Invalid private staging target');
+  const identity = stagingState(source, impl);
+  if (!identity) throw new Error('Private staging is missing');
+  return withWindowsFsRetry(() => impl.renameSync(source, target), {
+    ...options, label: 'Privates Plugin umbenennen', validate(original) {
+      if (!stagingState(source, impl, identity)) throw original || new Error('Private staging disappeared');
+      try { impl.lstatSync(target); } catch (error) { if (error.code === 'ENOENT') return; throw error; }
+      throw original || new Error('Private staging target already exists');
+    },
+  });
+}
+function copyTelegramFiles(source, staging, options = {}) {
+  const impl = options.fsImpl || fs;
+  if ((options.platform || process.platform) !== 'win32') return impl.cpSync(source, staging, { recursive: true, force: true });
+  if (!path.basename(staging).startsWith('.telegram-')) throw new Error('Invalid Telegram staging');
+  if (stagingState(staging, impl)) throw new Error('Telegram staging already exists');
+  let identity;
+  return withWindowsFsRetry(() => {
+    try { return impl.cpSync(source, staging, { recursive: true, force: true }); }
+    catch (error) { identity ||= stagingState(staging, impl); throw error; }
+  }, { ...options, label: 'Telegram-Dateien kopieren', validate() { stagingState(staging, impl, identity); } });
+}
+function writeTelegramTemplate(file, content, options = {}) {
+  const impl = options.fsImpl || fs;
+  const write = options.writeFile || require('./private-paths').writePrivateFile;
+  if ((options.platform || process.platform) !== 'win32') return write(file, content);
+  const parent = path.dirname(path.resolve(file));
+  if (path.basename(file) !== '.env' || path.basename(parent) !== 'telegram'
+    || path.basename(path.dirname(parent)) !== 'channels'
+    || canonical(impl.realpathSync(parent)) !== canonical(parent)) throw new Error('Invalid Telegram template scope');
+  return withWindowsFsRetry(() => write(file, content), {
+    ...options, label: 'Telegram-Vorlagendatei schreiben', validate(original) {
+      try { impl.lstatSync(file); } catch (error) { if (error.code === 'ENOENT') return; throw error; }
+      throw original || new Error('Telegram template already exists; refusing overwrite');
+    },
+  });
+}
+module.exports = { withWindowsFsRetry, renamePrivateStaging, copyTelegramFiles, writeTelegramTemplate };

package/blun.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:6b3e444de8032dc30ce210b87332794c64047374cd1d5148e6777dfb25e9c748
+// BLUN_BUILD_INPUT_SHA256:c6e4e4587ddf016fdb40a775622da5455beee2ed97708e374bf683b38e4a9dea
 /*! wasm-webp 0.1.0
 MIT License
 
@@ -368248,7 +368248,7 @@ function optionalBuildString(value) {
 var BLUN_BUILD_INFO;
 var init_build_info = __esmMin((() => {
 	BLUN_BUILD_INFO = {
-		version: optionalBuildString("9.1.628-pruefpaket.modules.r7"),
+		version: optionalBuildString("9.1.628-pruefpaket.modules.r8"),
 		channel: typeof __BLUN_CHANNEL__ === "string" ? optionalBuildString(__BLUN_CHANNEL__) : void 0,
 		commit: typeof __BLUN_COMMIT__ === "string" ? optionalBuildString(__BLUN_COMMIT__) : void 0,
 		buildTarget: typeof __BLUN_BUILD_TARGET__ === "string" ? optionalBuildString(__BLUN_BUILD_TARGET__) : void 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.628-pruefpaket.modules.r7",
+  "version": "9.1.628",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/worker-host.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// BLUN_BUILD_INPUT_SHA256:6b3e444de8032dc30ce210b87332794c64047374cd1d5148e6777dfb25e9c748
+// BLUN_BUILD_INPUT_SHA256:c6e4e4587ddf016fdb40a775622da5455beee2ed97708e374bf683b38e4a9dea
 /*! wasm-webp 0.1.0
 MIT License
 
@@ -350041,7 +350041,7 @@ function optionalBuildString(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 const BLUN_BUILD_INFO = {
-	version: optionalBuildString("9.1.628-pruefpaket.modules.r7"),
+	version: optionalBuildString("9.1.628-pruefpaket.modules.r8"),
 	channel: typeof __BLUN_CHANNEL__ === "string" ? optionalBuildString(__BLUN_CHANNEL__) : void 0,
 	commit: typeof __BLUN_COMMIT__ === "string" ? optionalBuildString(__BLUN_COMMIT__) : void 0,
 	buildTarget: typeof __BLUN_BUILD_TARGET__ === "string" ? optionalBuildString(__BLUN_BUILD_TARGET__) : void 0