blun-king-cli 9.1.73 → 9.1.74

package/blun.mjs

@@ -502526,7 +502526,7 @@ var EditorKeyboardController = class {
 				host.toggleTodoPanelExpansion();
 				return;
 			}
-			if (host.state.appState.streamingPhase === "idle") return;
+			if (!host.streamingUI.hasActiveTurn() && host.state.appState.streamingPhase === "idle") return;
 			host.flushQueuedMessages(editor.getText().trim(), editor.inputMode);
 			host.updateQueueDisplay();
 			host.state.ui.requestRender();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.73",
+  "version": "9.1.74",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {

package/telegram-plugin/dist/mcp-server.mjs

@@ -9744,26 +9744,38 @@ const TOOL_DEFINITIONS = [
 		}
 	}
 ];
+function resolveAllowedChatId(chatId) {
+	const access = readAccess();
+	const requested = String(chatId).trim();
+	const isAllowed = (candidate) => access.allowFrom.includes(candidate) || Object.hasOwn(access.groups, candidate);
+	if (isAllowed(requested)) return requested;
+	if (/^100\d+$/.test(requested)) {
+		const supergroupId = `-${requested}`;
+		if (isAllowed(supergroupId)) return supergroupId;
+	}
+	throw new Error(`chat ${requested} is not allowlisted — add via /telegram:access`);
+}
 async function runTool(api, token, name, args) {
 	switch (name) {
 		case "reply": return runReply(api, args);
-		case "react":
-			assertAllowedChat(args.chat_id);
-			await api.setMessageReaction(args.chat_id, Number(args.message_id), [{
+		case "react": {
+			const chatId = resolveAllowedChatId(args.chat_id);
+			await api.setMessageReaction(chatId, Number(args.message_id), [{
 				type: "emoji",
 				emoji: args.emoji
 			}]);
 			return "reacted";
+		}
 		case "download_attachment": return runDownload(api, token, args.file_id);
 		case "edit_message": {
-			assertAllowedChat(args.chat_id);
+			const chatId = resolveAllowedChatId(args.chat_id);
 			const parseMode = args.format === "markdownv2" ? "MarkdownV2" : void 0;
-			const edited = await api.editMessageText(args.chat_id, Number(args.message_id), args.text, parseMode !== void 0 ? { parse_mode: parseMode } : void 0);
+			const edited = await api.editMessageText(chatId, Number(args.message_id), args.text, parseMode !== void 0 ? { parse_mode: parseMode } : void 0);
 			const id = typeof edited === "object" ? edited.message_id : args.message_id;
 			appendJsonl(outboxLog(), {
 				direction: "out",
 				kind: "edit",
-				chat_id: args.chat_id,
+				chat_id: chatId,
 				message_id: id,
 				text: args.text
 			});
@@ -9803,12 +9815,11 @@ function isRecentDuplicate(chatId, text) {
 	return false;
 }
 async function runReply(api, args) {
-	const chatId = args.chat_id;
+	const chatId = resolveAllowedChatId(args.chat_id);
 	const text = args.text;
 	const replyTo = args.reply_to != null ? Number(args.reply_to) : void 0;
 	const files = args.files ?? [];
 	const parseMode = args.format === "markdownv2" ? "MarkdownV2" : void 0;
-	assertAllowedChat(chatId);
 	if (files.length === 0 && isGroupChat(chatId) && isGroupNoiseReply(text)) {
 		appendJsonl(outboxLog(), {
 			direction: "out",