@principles/host-runtime 0.7.11 → 0.7.13

package/dist/index.d.ts

@@ -66,6 +66,8 @@ export declare function createProductionHostRuntime(options?: Partial<Pick<HostR
     painDatabaseFactory?: PainDatabaseFactory;
     /** PRI-640: host attribution supplied by the constructing host adapter (OpenClaw / Codex). */
     hostKind?: GovernanceHostKind;
+    /** Host project cwd, distinct from the workspace owning shared PD state. */
+    projectDir?: string;
     /** PRI-634-F: host-declared tool semantics supplied by the constructing host adapter. */
     toolSemantics?: ToolSemanticRegistry;
     /**

package/dist/index.js

@@ -163,6 +163,7 @@ export function createHostRuntime(options) {
 }
 export function createProductionHostRuntime(options = {}) {
     const productionGate = createProductionRuleHostGate({
+        ...(options.projectDir ? { projectDir: options.projectDir } : {}),
         ...(options.ruleContextProvider ? { ruleContextProvider: options.ruleContextProvider } : {}),
         ...(options.ruleInputEnrichmentProvider ? { ruleInputEnrichmentProvider: options.ruleInputEnrichmentProvider } : {}),
         ...(options.ruleImplementationRuntime ? { implementationRuntime: options.ruleImplementationRuntime } : {}),

package/dist/production-rulehost-gate.d.ts

@@ -16,6 +16,7 @@ export interface RuleInputEnrichment {
 }
 export type RuleInputEnrichmentProvider = (request: ProductionRuleContextRequest) => unknown | Promise<unknown>;
 export interface ProductionRuleHostGateOptions {
+    projectDir?: string;
     ruleContextProvider?: RuleContextProvider;
     ruleInputEnrichmentProvider?: RuleInputEnrichmentProvider;
     implementationRuntime?: RuleImplementationRuntime;

package/dist/production-rulehost-gate.js

@@ -81,7 +81,7 @@ export function createProductionRuleHostGate(options = {}) {
         }
         const canonicalKind = toolSemantics.resolve(input.toolName);
         const { isBashTool: isBash, isWriteTool: isWrite } = deriveToolHintsFromCanonicalKind(canonicalKind);
-        const action = buildRuleHostAction(input.toolName, input.params, event.context.workspaceDir, { isBashTool: isBash, isWriteTool: isWrite, canonicalKind });
+        const action = buildRuleHostAction(input.toolName, input.params, options.projectDir ?? event.context.workspaceDir, { isBashTool: isBash, isWriteTool: isWrite, canonicalKind });
         if (action.normalizedPath === null)
             return { decision: 'allow', source: event.source, metadata: { evaluatedLiveRules: 0 } };
         let context;

package/dist/prompt-injection-projection.d.ts

@@ -1,3 +1,4 @@
+import { type PromptSelectionPolicy } from '@principles/core/runtime-v2';
 export interface PromptInjectionProjection {
     /** Which real injection route the workspace is on (abstraction_layer_v1 flag). */
     route: 'legacy_trim' | 'shared_render';
@@ -13,6 +14,38 @@ export interface PromptInjectionProjection {
     injectedPrincipleIds: string[];
     injectedActivationIds: string[];
     warnings: string[];
+    /**
+     * PR-1894: the budget-packing policy that produced THIS projection
+     * (`legacy_fifo_prefix_v1` | `fair_rotation_v1`). The console must not
+     * describe a fair-rotation workspace in FIFO terms, so the policy travels
+     * with the projection instead of being re-derived by each consumer.
+     */
+    selectionPolicy: PromptSelectionPolicy;
+    /**
+     * PR-1894: activations that the production route will inject under SOME
+     * round key, i.e. activations that are merely rotated out of the current
+     * window rather than structurally starved.
+     *
+     * Reachability is a property of the SELECTION POLICY, not of any single
+     * round: a fair-rotation workspace reaches every non-oversized eligible
+     * entry within N turns. So this is computed under the production policy
+     * (fair rotation whenever the route actually rotates) and is therefore
+     * non-empty even for a caller that supplied no round key — which is
+     * exactly the console's situation. Empty only when the production route
+     * genuinely does not rotate (shared route) or nothing is eligible.
+     */
+    eventuallyInjectedActivationIds: string[];
+    /** Number of eligible candidates that reached the selector. */
+    eligibleCount: number;
+    /**
+     * PR-1894: whether the PRODUCTION route for this workspace rotates.
+     * The forecast's own `selectionPolicy` answers "which policy did THIS
+     * projection run", which is legacy for a console that holds no session
+     * round key; this answers "will the agent's real injection rotate",
+     * which is what determines whether an out-of-window activation is queued
+     * or starved. They differ exactly in the case this whole fix is about.
+     */
+    productionRotates: boolean;
 }
 /**
  * PR #1844 follow-up: forecast the prompt-injection budget from the SAME
@@ -31,8 +64,25 @@ export interface PromptInjectionProjection {
  * candidates against the legacy evolution ledger before trimming; the
  * console cannot replay that reducer read-only, so this projection may
  * forecast slightly MORE consumption than the real injection (never less).
+ *
+ * PR-1894 — round-key alignment. The plugin derives its fair-rotation round
+ * key from the CURRENT session's turn ordinal
+ * (`nextSessionTurnOrdinal`), which the console has no access to. Passing no
+ * key therefore does NOT make the forecast "more conservative": it selects a
+ * DIFFERENT policy (`legacy_fifo_prefix_v1`) than the one production runs, and
+ * legacy FIFO structurally excludes the newest activation from every
+ * truncated selection. The console must either supply the round key or
+ * report the policy honestly, so this function takes the key as an explicit
+ * input and exposes `selectionPolicy` on the result.
  */
 export declare function buildLivePromptInjectionProjection(input: {
     workspaceDir: string;
     excludePrincipleIds?: ReadonlySet<string>;
+    /**
+     * PR-1894: the fair-rotation round key the production route is using this
+     * turn. Callers that hold one (the plugin) pass it; callers that do not
+     * (the console) omit it and MUST read `selectionPolicy` off the result
+     * rather than assuming FIFO.
+     */
+    roundKey?: number;
 }): Promise<PromptInjectionProjection>;

package/dist/prompt-injection-projection.js

@@ -2,6 +2,28 @@ import { RUNTIME_V2_PRINCIPLE_BUDGET, computeFeatureFlagsFromConfig, trimToBudge
 import { escapeXml } from '@principles/core/prompt-builder';
 import { loadPdConfigForPlugin } from './pd-config.js';
 import { buildActivePrinciplePromptContext, readPromptActivationCandidates } from './active-principle-prompt.js';
+/**
+ * PR-1894: which activations a fair-rotation selector injects across the
+ * whole ring. The plugin's round key advances by one per recorded user turn
+ * within a continuously advancing session, so N consecutive turns cover all
+ * N ring positions: an activation absent from the current window but present
+ * in ANY round is reachable, not starved.
+ *
+ * Kept here (not in the console) so the production selector's own arithmetic
+ * stays the single authority for what "reachable" means.
+ */
+function collectReachableActivationIds(principles, budget) {
+    const reachable = new Set();
+    for (let roundKey = 0; roundKey < principles.length; roundKey += 1) {
+        const result = trimToBudget(principles, budget, escapeXml, roundKey);
+        for (const principleId of result.injectedIds) {
+            const match = principles.find((p) => p.principleId === principleId);
+            if (match)
+                reachable.add(match.activationId);
+        }
+    }
+    return [...reachable];
+}
 /**
  * PR #1844 follow-up: forecast the prompt-injection budget from the SAME
  * projection the agent injection itself uses, routed by the same
@@ -19,6 +41,16 @@ import { buildActivePrinciplePromptContext, readPromptActivationCandidates } fro
  * candidates against the legacy evolution ledger before trimming; the
  * console cannot replay that reducer read-only, so this projection may
  * forecast slightly MORE consumption than the real injection (never less).
+ *
+ * PR-1894 — round-key alignment. The plugin derives its fair-rotation round
+ * key from the CURRENT session's turn ordinal
+ * (`nextSessionTurnOrdinal`), which the console has no access to. Passing no
+ * key therefore does NOT make the forecast "more conservative": it selects a
+ * DIFFERENT policy (`legacy_fifo_prefix_v1`) than the one production runs, and
+ * legacy FIFO structurally excludes the newest activation from every
+ * truncated selection. The console must either supply the round key or
+ * report the policy honestly, so this function takes the key as an explicit
+ * input and exposes `selectionPolicy` on the result.
  */
 export async function buildLivePromptInjectionProjection(input) {
     const sharedRoute = computeFeatureFlagsFromConfig(loadPdConfigForPlugin(input.workspaceDir).effective).flags.abstraction_layer_v1?.enabled === true;
@@ -32,6 +64,13 @@ export async function buildLivePromptInjectionProjection(input) {
             injectedPrincipleIds: context.principleIds,
             injectedActivationIds: context.activationIds,
             warnings: context.warnings,
+            // The shared production path deliberately passes no round key
+            // (host-runtime/src/index.ts), so this route genuinely does not rotate
+            // and claims nothing about eventual reachability.
+            selectionPolicy: context.selectionPolicy ?? 'legacy_fifo_prefix_v1',
+            eventuallyInjectedActivationIds: [],
+            eligibleCount: context.eligibleCount ?? 0,
+            productionRotates: false,
         };
     }
     const candidates = await readPromptActivationCandidates(input);
@@ -45,10 +84,23 @@ export async function buildLivePromptInjectionProjection(input) {
             injectedPrincipleIds: [],
             injectedActivationIds: [],
             warnings,
+            selectionPolicy: 'legacy_fifo_prefix_v1',
+            eventuallyInjectedActivationIds: [],
+            eligibleCount: 0,
+            productionRotates: false,
         };
     }
-    const trimmed = trimToBudget(principles, RUNTIME_V2_PRINCIPLE_BUDGET, escapeXml);
+    // PR-1894: pass the caller's round key so the forecast runs the SAME
+    // packing policy production runs this turn.
+    const trimmed = trimToBudget(principles, RUNTIME_V2_PRINCIPLE_BUDGET, escapeXml, input.roundKey);
     const injected = principles.filter((p) => trimmed.injectedIds.has(p.principleId));
+    // PR-1894: the legacy_trim route IS the OpenClaw plugin-local route, which
+    // rotates on every recorded user turn (PRI-904). Reachability is therefore
+    // computed under fair rotation regardless of whether THIS forecast holds a
+    // round key — a console without a session key must still be able to tell
+    // "queued behind rotation" apart from "structurally starved", otherwise it
+    // keeps telling the Owner to deactivate healthy principles.
+    const eventuallyInjectedActivationIds = collectReachableActivationIds(principles, RUNTIME_V2_PRINCIPLE_BUDGET);
     return {
         route: 'legacy_trim',
         budget: RUNTIME_V2_PRINCIPLE_BUDGET,
@@ -57,5 +109,9 @@ export async function buildLivePromptInjectionProjection(input) {
         injectedPrincipleIds: [...trimmed.injectedIds],
         injectedActivationIds: injected.map((p) => p.activationId),
         warnings,
+        selectionPolicy: trimmed.selectionPolicy,
+        eventuallyInjectedActivationIds,
+        eligibleCount: trimmed.eligibleCount,
+        productionRotates: true,
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.7.11",
+  "version": "0.7.13",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,7 +21,7 @@
     "lint": "eslint \"src/**/*.ts\""
   },
   "dependencies": {
-    "@principles/core": "^1.287.6",
+    "@principles/core": "^1.289.0",
     "@principles/install-layout": "^0.2.7",
     "better-sqlite3": "^13.0.3",
     "js-yaml": "^5.4.1"