create-principles-disciple 1.104.0 → 1.104.2

package/plugin/dist/hooks/trajectory-collector.js

@@ -1,164 +0,0 @@
-/**
- * Trajectory Collector - message write trajectory recording
- *
- * Fallback trajectory collection when llm_output is blocked by missing
- * allowConversationAccess. before_message_write is NOT in
- * CONVERSATION_HOOK_NAMES so OpenClaw always delivers it.
- *
- * SQLite writes are enqueued to an async queue because before_message_write is
- * a SYNCHRONOUS OpenClaw hook — the handler must return immediately. better-sqlite3
- * is synchronous, so calling it directly would block the message-write main path.
- * Trade-off: in degradation mode the last few queued writes may be lost on
- * process exit; this is acceptable because degradation mode is already caused
- * by a config problem (missing allowConversationAccess), and the primary
- * llm_output path is authoritative when authorized.
- *
- * JSONL writing was removed (no consumers — verified zero readers across the
- * codebase; PRI-347 already removed tool_call/llm_output JSONL writers).
- *
- * ERR-002: fallback errors are logged, never silent.
- * ERR-001/005: content is sanitized before persisting.
- */
-import { MAX_STRING_LENGTH } from '../config/defaults/runtime.js';
-import { WorkspaceContext } from '../core/workspace-context.js';
-import { SystemLogger } from '../core/system-logger.js';
-import { sanitizeForEvidence } from './message-sanitize.js';
-import { checkConversationAccessConfig } from '../core/config-health.js';
-/**
- * Async write queue — ensures ordered, non-blocking execution of SQLite writes.
- * before_message_write is a sync hook; SQLite I/O must not block it.
- *
- * Tasks are deferred to the microtask queue via `queueMicrotask` so the sync
- * hook handler returns before any synchronous better-sqlite3 work runs.
- */
-class AsyncWriteQueue {
-    queue = [];
-    processing = false;
-    enqueue(task) {
-        this.queue.push(task);
-        if (!this.processing) {
-            this.processing = true;
-            queueMicrotask(() => { void this.processNext(); });
-        }
-    }
-    async processNext() {
-        while (this.queue.length > 0) {
-            const task = this.queue.shift();
-            if (!task)
-                break;
-            try {
-                await task();
-            }
-            catch (err) {
-                // EP-03/ERR-002: safety net — tasks should catch their own errors with
-                // structured logging. This catches bugs where a task's try/catch is
-                // missing or re-throws. Never silently swallow (ERR-002).
-                console.warn('[PD:trajectory-queue] uncaught task error:', err);
-            }
-        }
-        this.processing = false;
-    }
-}
-const writeQueue = new AsyncWriteQueue();
-/**
- * Extract text content from a message (string or content-part array).
- */
-function extractContent(content) {
-    if (typeof content === 'string') {
-        return content;
-    }
-    if (Array.isArray(content)) {
-        return content
-            .filter((part) => part && typeof part === 'object' && part.type === 'text')
-            .map((part) => part.text)
-            .join('\n');
-    }
-    return '';
-}
-/**
- * PRI-346: Message write hook with SQLite fallback trajectory recording.
- *
- * When allowConversationAccess is NOT set (unauthorized), llm_output is silently
- * blocked by OpenClaw and trajectory.db has no data. This hook is NOT in
- * CONVERSATION_HOOK_NAMES, so it always fires — making it the natural fallback.
- *
- * De-duplication: only writes to SQLite when llm_output is blocked (unauthorized).
- * When llm_output is working (authorized), this hook is a no-op.
- *
- * SQLite writes are async-queued (see file header) to avoid blocking the sync hook.
- *
- * ERR-002: structured observability when fallback fires.
- * ERR-001/005: content is sanitized before persisting.
- */
-export function handleBeforeMessageWrite(event, ctx) {
-    const { workspaceDir } = ctx;
-    if (!workspaceDir)
-        return;
-    const msg = event.message;
-    if (!msg || !msg.role)
-        return;
-    // Only record user and assistant messages
-    if (msg.role !== 'user' && msg.role !== 'assistant')
-        return;
-    // ── SQLite fallback (PRI-346): only when conversation hooks are blocked ──
-    const accessCheck = checkConversationAccessConfig(ctx.pluginConfig);
-    if (accessCheck.authorized) {
-        // llm_output is working — do NOT duplicate write to SQLite (de-dup, case D)
-        return;
-    }
-    // Conversation hooks blocked — this hook is the fallback trajectory writer.
-    // Enqueue SQLite writes to avoid blocking the sync before_message_write hook.
-    const logger = ctx.logger;
-    const content = extractContent(msg.content);
-    const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
-    const createdAt = new Date().toISOString();
-    if (msg.role === 'assistant') {
-        writeQueue.enqueue(async () => {
-            try {
-                const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
-                const sanitized = sanitizeForEvidence(content.slice(0, MAX_STRING_LENGTH), workspaceDir);
-                wctx.trajectory?.recordAssistantTurn?.({
-                    sessionId,
-                    runId: 'before_message_write_fallback',
-                    provider: 'unknown',
-                    model: 'unknown',
-                    rawText: content,
-                    sanitizedText: sanitized,
-                    usageJson: {},
-                    empathySignalJson: { detected: false, severity: 'mild', confidence: 1 },
-                    createdAt,
-                });
-            }
-            catch (err) {
-                // EP-03/ERR-002: observable degradation, never silent
-                logger?.warn?.(`[PD:before_message_write] SQLite fallback write failed: ${String(err)}`);
-            }
-        });
-    }
-    else if (msg.role === 'user') {
-        writeQueue.enqueue(async () => {
-            try {
-                const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
-                wctx.trajectory?.recordUserTurn?.({
-                    sessionId,
-                    turnIndex: 0,
-                    rawText: content.slice(0, MAX_STRING_LENGTH),
-                    correctionDetected: false,
-                    createdAt,
-                });
-            }
-            catch (err) {
-                // EP-03/ERR-002: observable degradation, never silent
-                logger?.warn?.(`[PD:before_message_write] SQLite user turn fallback failed: ${String(err)}`);
-            }
-        });
-    }
-    // ERR-002: Structured observability — no silent fallback
-    SystemLogger.log(workspaceDir, 'CONVERSATION_HOOK_BLOCKED', JSON.stringify({
-        reason: accessCheck.reason,
-        nextAction: accessCheck.nextAction,
-        hook: 'llm_output',
-        fallback: 'before_message_write',
-        role: msg.role,
-    }));
-}

package/plugin/dist/hooks/trajectory-evidence.js

@@ -1,92 +0,0 @@
-/**
- * Trajectory Evidence Builder — PRI-326
- *
- * Extracted from pain.ts to avoid circular imports between
- * pain.ts and after-tool-call-helpers.ts.
- *
- * Pure data extraction — reads from trajectory DB, sanitizes, returns evidence entries.
- */
-import { sanitizeAssistantText } from './message-sanitize.js';
-import { MAX_EVIDENCE_ENTRIES, MAX_EVIDENCE_NOTE_CHARS } from '@principles/core/runtime-v2';
-export function buildTrajectoryEvidence(wctx, sessionId) {
-    const evidence = [];
-    if (!wctx.trajectory || sessionId === 'unknown') {
-        evidence.push({
-            sourceRef: 'owner_message:unavailable',
-            note: `trajectory_unavailable: ${!wctx.trajectory ? 'no_trajectory_db' : 'unknown_session'}`,
-        });
-        return evidence.slice(0, MAX_EVIDENCE_ENTRIES);
-    }
-    try {
-        const userTurns = wctx.trajectory.listUserTurnsForSession(sessionId) ?? [];
-        const lastCorrectionTurn = [...userTurns].reverse().find(t => t.correctionDetected);
-        if (lastCorrectionTurn) {
-            const sanitizedOwnerMessage = sanitizeAssistantText((lastCorrectionTurn.rawExcerpt ?? '').slice(0, MAX_EVIDENCE_NOTE_CHARS));
-            evidence.push({
-                sourceRef: `owner_message:${lastCorrectionTurn.createdAt}`,
-                note: sanitizedOwnerMessage,
-            });
-        }
-    }
-    catch (e) {
-        evidence.push({
-            sourceRef: 'owner_message:unavailable',
-            note: `trajectory_user_turns_unavailable: ${String(e).slice(0, 100)}`,
-        });
-    }
-    try {
-        const assistantTurns = wctx.trajectory.listAssistantTurns(sessionId) ?? [];
-        const recentAssistant = assistantTurns.slice(-3);
-        for (const turn of recentAssistant) {
-            if (evidence.length >= MAX_EVIDENCE_ENTRIES)
-                break;
-            const sanitizedNote = sanitizeAssistantText((turn.sanitizedText ?? '').slice(0, MAX_EVIDENCE_NOTE_CHARS));
-            // Enhanced: append truncation warning when stop_reason=length
-            const truncationWarning = turn.stopReason === 'length' ? ' [TRUNCATED: output cut off by length limit]' : '';
-            evidence.push({
-                sourceRef: `agent_turn:${turn.createdAt}`,
-                note: sanitizedNote + truncationWarning,
-            });
-        }
-    }
-    catch (e) {
-        if (evidence.length < MAX_EVIDENCE_ENTRIES) {
-            evidence.push({
-                sourceRef: 'agent_turn:unavailable',
-                note: `trajectory_assistant_turns_unavailable: ${String(e).slice(0, 100)}`,
-            });
-        }
-    }
-    // PRI-358: Extract failed tool_calls as evidence
-    try {
-        const allToolCalls = wctx.trajectory.listToolCallsForSession(sessionId) ?? [];
-        const failedToolCalls = allToolCalls.filter(tc => tc.outcome === 'failure').slice(-3);
-        for (const tc of failedToolCalls) {
-            if (evidence.length >= MAX_EVIDENCE_ENTRIES)
-                break;
-            // Enhanced: append resultPreview when available
-            const previewSuffix = tc.resultPreview ? ` | ${tc.resultPreview.slice(0, 200)}` : '';
-            const note = `Tool ${tc.toolName} failed: ${tc.errorType ?? 'unknown'} (exitCode: ${tc.exitCode ?? 'N/A'})${previewSuffix}`;
-            evidence.push({
-                sourceRef: `tool_call_failure:${tc.createdAt}`,
-                note: sanitizeAssistantText(note.slice(0, MAX_EVIDENCE_NOTE_CHARS)),
-            });
-        }
-    }
-    catch (e) {
-        // Only add unavailable entry when no other evidence exists (avoid noise)
-        if (evidence.length === 0) {
-            evidence.push({
-                sourceRef: 'tool_call_failure:unavailable',
-                note: `trajectory_tool_calls_unavailable: ${String(e).slice(0, 100)}`,
-            });
-        }
-    }
-    if (evidence.length === 0) {
-        evidence.push({
-            sourceRef: 'trajectory:empty',
-            note: 'trajectory_available_but_empty: no user correction or assistant turns found',
-        });
-    }
-    return evidence.slice(0, MAX_EVIDENCE_ENTRIES);
-}

package/plugin/dist/hooks/triage-adapter.js

@@ -1,72 +0,0 @@
-/**
- * Triage Adapter — PEAT-B1
- *
- * Plugin-side adapter that maps OpenClaw hook context to evidence triage input.
- * Calls the pure triage policy from principles-core.
- *
- * This file lives in openclaw-plugin because it:
- * - Maps hook-specific context (source strings, session state) to SourceKind
- * - Wraps evaluatePainDiagnosticGate as a compatibility sub-policy
- * - Knows about OpenClaw hook conventions (sessionId, toolName, etc.)
- *
- * It does NOT expose evaluatePainDiagnosticGate to core.
- * Core only sees SourceKind and TriageResult.
- *
- * ERR checklist:
- * - ERR-001: Source kind derived from runtime values with guards, not `as` casts.
- * - ERR-002: Every triage result carries reason + nextAction.
- * - ERR-024/025/048: Production-path tests cover this adapter.
- */
-import { evaluateTriage, } from '@principles/core/runtime-v2';
-// ── Source Kind Resolution ───────────────────────────────────────────────────
-/**
- * Map RawObservation to SourceKind.
- *
- * This is the unified entry point for source-kind classification.
- * It replaces the scattered resolveSourceKindFrom* functions.
- *
- * PRI-360 S1: All source-kind resolution now goes through this single entry point.
- */
-export { resolveSourceKind, buildToolFailureObservation, buildLlmDetectionObservation } from './raw-observation-adapter.js';
-// All callers should use resolveSourceKind with RawObservation.
-// ── Triage Evaluation ───────────────────────────────────────────────────────
-/**
- * Evaluate evidence triage for a given source kind and context.
- *
- * This is the main entry point for hooks. It calls the pure triage policy
- * from principles-core and returns the result.
- *
- * The caller (hook) is responsible for:
- * - Checking the painEvidenceAdmission feature flag
- * - Acting on the triage result (proceed to diagnosis, store evidence, etc.)
- * - Falling back to existing behavior when the flag is off
- */
-export function evaluateEvidenceTriage(sourceKind, score, options) {
-    // PRI-446: the risky high-score and repeated-failure upgrade rules now live
-    // in core triage-policy.ts (single source of truth). The adapter passes the
-    // context flags straight through; core decides whether to upgrade.
-    const input = {
-        sourceKind,
-        score,
-        isUnsafeHighConfidence: options?.isUnsafeHighConfidence,
-        provenance: options?.provenance,
-        isRisky: options?.isRisky,
-        consecutiveErrors: options?.consecutiveErrors,
-    };
-    return evaluateTriage(input);
-}
-// ── High-Confidence Unsafe Action Detection ──────────────────────────────────
-/**
- * Determine if a gate-blocked action is a high-confidence unsafe action.
- *
- * This is a heuristic that the plugin adapter owns. Core does not know about
- * these heuristics — it only receives the boolean flag.
- *
- * Criteria for high-confidence unsafe:
- * - Score >= 70 (high severity)
- * - Tool is in the risky write set
- * - Action would be irreversible (file deletion, force push, etc.)
- */
-export function isHighConfidenceUnsafeAction(score, isRisky) {
-    return isRisky && score >= 70;
-}

package/plugin/dist/hooks/trigger-cooldown-tracker.js

@@ -1,80 +0,0 @@
-/**
- * Trigger Cooldown Tracker — PRI-363
- *
- * Manages cooldown state for trigger controller decisions.
- *
- * This is a plugin-layer concern because:
- * - Core (trigger-controller) is stateless and pure
- * - Cooldown state needs to persist across tool calls
- * - The map is scoped to the plugin's lifecycle
- *
- * EP-05: Loop State Freshness — each check reads fresh state from the map.
- * ERR-001: No `as` casts on map access.
- * ERR-002: Every rejected decision includes reason + nextAction.
- */
-const DEFAULT_COOLDOWN_MS = 15 * 60 * 1000; // 15 minutes
-/**
- * Episode key format: sessionId:source:errorHash
- */
-function buildEpisodeKey(source, sessionId, errorHash) {
-    const sid = sessionId || 'unknown';
-    const hash = errorHash || 'no-hash';
-    return `${sid}:${source}:${hash}`;
-}
-/**
- * Check whether cooldown is currently active for a given episode.
- */
-export function isCooldownActive(source, sessionId, errorHash, cooldownMap) {
-    const episodeKey = buildEpisodeKey(source, sessionId, errorHash);
-    const lastDiagnosedAt = cooldownMap.get(episodeKey);
-    if (lastDiagnosedAt === undefined) {
-        return false;
-    }
-    const now = Date.now();
-    return now - lastDiagnosedAt < DEFAULT_COOLDOWN_MS;
-}
-/**
- * Mark an episode as diagnosed (set cooldown timestamp).
- */
-export function markEpisodeAsDiagnosed(source, sessionId, errorHash, cooldownMap) {
-    const episodeKey = buildEpisodeKey(source, sessionId, errorHash);
-    cooldownMap.set(episodeKey, Date.now());
-}
-/**
- * Clear all cooldown state (for tests).
- */
-export function clearCooldownState(cooldownMap) {
-    cooldownMap.clear();
-}
-/**
- * Get the cooldown timestamp for a given episode (for tests).
- */
-export function getCooldownTimestamp(source, sessionId, errorHash, cooldownMap) {
-    const episodeKey = buildEpisodeKey(source, sessionId, errorHash);
-    return cooldownMap.get(episodeKey);
-}
-// ── Shared Cooldown Map (PRI-454) ───────────────────────────────────────────
-//
-// Module-level singleton Map shared across all Gate B paths.
-// Replaces the per-file TRIGGER_COOLDOWN_MAP in after-tool-call-helpers.ts.
-// All paths (gate-block, llm, empathy, manual pain) use this single Map
-// to ensure unified cooldown state.
-const SHARED_COOLDOWN_MAP = new Map();
-/**
- * Check whether cooldown is currently active using the shared Map.
- */
-export function isSharedCooldownActive(source, sessionId, errorHash) {
-    return isCooldownActive(source, sessionId, errorHash, SHARED_COOLDOWN_MAP);
-}
-/**
- * Mark an episode as diagnosed using the shared Map.
- */
-export function markSharedEpisodeAsDiagnosed(source, sessionId, errorHash) {
-    markEpisodeAsDiagnosed(source, sessionId, errorHash, SHARED_COOLDOWN_MAP);
-}
-/**
- * Clear all shared cooldown state (for tests).
- */
-export function resetSharedCooldownForTest() {
-    SHARED_COOLDOWN_MAP.clear();
-}

package/plugin/dist/i18n/commands.js

@@ -1,120 +0,0 @@
-/**
- * Command internationalization module.
- * Provides localized descriptions for all plugin commands.
- */
-/**
- * Normalize language code to supported language.
- * Handles variants like zh-CN, zh-TW, en-US, etc.
- * @param lang - Language code (e.g., 'zh-CN', 'en-US', 'zh', 'en')
- * @returns Normalized language ('zh' or 'en')
- */
-export function normalizeLanguage(lang) {
-    if (lang.toLowerCase().startsWith('zh'))
-        return 'zh';
-    return 'en';
-}
-export const commandDescriptions = {
-    'pd-init': {
-        zh: '初始化工作区（生成 PRINCIPLES.md、THINKING_OS.md 等）',
-        en: 'Initialize workspace (generate PRINCIPLES.md, THINKING_OS.md, etc.)'
-    },
-    'pd-bootstrap': {
-        zh: '扫描环境工具并建议升级',
-        en: 'Scan environment tools and suggest upgrades'
-    },
-    'pd-research': {
-        zh: '研究工具升级方案',
-        en: 'Research tool upgrade solutions'
-    },
-    'pd-thinking': {
-        zh: '管理思维模型 [status|propose|audit]（默认关闭，/pd-context thinking on 开启）',
-        en: 'Manage Thinking OS [status|propose|audit] (off by default, enable via /pd-context thinking on)'
-    },
-    'pd-help': {
-        zh: '显示所有命令和使用指南',
-        en: 'Show all commands and usage guide'
-    },
-    'pd-status': {
-        zh: '查看系统状态（GFI、Pain 词典）',
-        en: 'View system status (GFI, Pain dictionary)'
-    },
-    'pd-context': {
-        zh: '控制上下文注入 [status|thinking|reflection|focus|preset] - 输入 /pd-context help 查看详情',
-        en: 'Control context injection [status|thinking|reflection|focus|preset] - Type /pd-context help for details'
-    },
-    'pd-focus': {
-        zh: '管理 CURRENT_FOCUS.md [status|history|compress|rollback] - 查看/压缩/回滚焦点文件',
-        en: 'Manage CURRENT_FOCUS.md [status|history|compress|rollback] - View/compress/rollback focus file'
-    },
-    'pd-evolution-status': {
-        zh: '查看 evolution 闭环状态（candidate/probation/active）',
-        en: 'Show evolution loop status (candidate/probation/active)'
-    },
-    'pd-principle-rollback': {
-        zh: '回滚原则并加入黑名单 <principle-id> [reason]',
-        en: 'Rollback principle and blacklist pattern <principle-id> [reason]'
-    },
-    'pd-rollback': {
-        zh: '回滚情绪事件惩罚 <event-id>|last',
-        en: 'Rollback empathy event penalty <event-id>|last'
-    },
-    'pd-export': {
-        zh: '导出数据 [analytics|corrections --redacted]',
-        en: 'Export data [analytics|corrections --redacted]'
-    },
-    'pd-samples': {
-        zh: '查看或审核纠错样本 [review approve|reject <sample-id> [note]]',
-        en: 'List or review correction samples [review approve|reject <sample-id> [note]]'
-    },
-    'pd-pain': {
-        zh: '从 OpenClaw 会话报告 pain（context-bound provenance）',
-        en: 'Report pain from OpenClaw session (context-bound provenance)'
-    },
-    'pd-workflow-debug': {
-        zh: '调试 workflow 状态与事件 [workflowId]',
-        en: 'Debug workflow state and events [workflowId]'
-    },
-    'pd-promote-impl': {
-        zh: '提升候选实现到 active [list|show <id>|<id>]（半废弃）',
-        en: 'Promote candidate implementation to active [list|show <id>|<id>] (semi-deprecated)'
-    },
-    'pd-disable-impl': {
-        zh: '禁用 active 实现 [list|<id> --reason "..."]（半废弃）',
-        en: 'Disable active implementation [list|<id> --reason "..."] (semi-deprecated)'
-    },
-    'pd-archive-impl': {
-        zh: '永久归档实现 [list|<id>]（半废弃）',
-        en: 'Archive implementation permanently [list|<id>] (semi-deprecated)'
-    },
-    'pd-rollback-impl': {
-        zh: '回滚到上一个 active 实现 [list|<id> --reason "..."]（半废弃）',
-        en: 'Rollback to previous active implementation [list|<id> --reason "..."] (semi-deprecated)'
-    },
-};
-/**
- * Get localized command description.
- * @param name - Command name (e.g., 'pd-init')
- * @param lang - Language code (e.g., 'zh-CN', 'en-US', 'zh', 'en')
- * @returns Localized description or fallback to English then command name
- */
-export function getCommandDescription(name, lang) {
-    const normalizedLang = normalizeLanguage(lang);
-    const descriptions = commandDescriptions[name];
-    if (!descriptions) {
-        return name;
-    }
-    return descriptions[normalizedLang] || descriptions.en || name;
-}
-/**
- * Get all command descriptions for a language.
- * @param lang - Language code (e.g., 'zh-CN', 'en-US', 'zh', 'en')
- * @returns Object mapping command names to descriptions
- */
-export function getAllCommandDescriptions(lang) {
-    const normalizedLang = normalizeLanguage(lang);
-    const result = {};
-    for (const [name, descriptions] of Object.entries(commandDescriptions)) {
-        result[name] = descriptions[normalizedLang] || descriptions.en || name;
-    }
-    return result;
-}

package/plugin/dist/openclaw-sdk.js

@@ -1,4 +0,0 @@
-// OpenClaw Plugin SDK Type Definitions
-// Provides type declarations for the OpenClaw plugin system
-// This file is tracked in git (renamed from .d.ts to .ts)
-export {};

package/plugin/dist/rulehost-evidence.js

@@ -1,3 +0,0 @@
-/** Side-effect-free public boundary for RuleHost evidence assembly. */
-export { BehaviorExamplePackAssembler } from './core/behavior-example-pack-assembler.js';
-export { TrajectoryRegistry as RuleHostEvidenceRegistry } from './core/trajectory.js';