create-principles-disciple 1.112.0 → 1.112.2

package/plugin/scripts/acceptance-test.mjs

@@ -1,257 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * PD Pipeline — End-to-End Acceptance Test
- *
- * Verifies that all components of the PD reflection pipeline
- * work correctly in a real environment (not unit tests).
- *
- * Usage:
- *   node scripts/acceptance-test.mjs --workspace /path/to/workspace
- *
- * Output: Pass/Fail for each checkpoint with detailed diagnostics.
- */
-
-import { existsSync, readFileSync, writeFileSync, rmSync, mkdirSync, readdirSync } from 'fs';
-import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
-import { execFileSync } from 'child_process';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-// ─── Helpers ───
-let passCount = 0;
-let failCount = 0;
-let warnCount = 0;
-
-function assert(condition, testName, detail = '') {
-  if (condition) {
-    console.log(`  ✅ ${testName}`);
-    passCount++;
-  } else {
-    console.log(`  ❌ ${testName}${detail ? ` — ${detail}` : ''}`);
-    failCount++;
-  }
-}
-
-function warn(testName, detail = '') {
-  console.log(`  ⚠️  ${testName}${detail ? ` — ${detail}` : ''}`);
-  warnCount++;
-}
-
-function runSql(dbPath, sql) {
-  return execFileSync('sqlite3', [dbPath, sql], {
-    encoding: 'utf-8',
-    timeout: 5000,
-  }).trim();
-}
-
-// ─── Parse workspace ───
-function parseArgs() {
-  const argv = process.argv.slice(2);
-  for (let i = 0; i < argv.length; i++) {
-    if (argv[i] === '--workspace' && argv[i + 1]) return argv[++i];
-  }
-  try {
-    return execFileSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf-8' }).trim();
-  } catch {
-    return process.cwd();
-  }
-}
-
-// ─── Main ───
-function main() {
-  const workspaceDir = parseArgs();
-  const stateDir = join(workspaceDir, '.state');
-  const dbPath = join(stateDir, 'trajectory.db');
-
-  if (!existsSync(dbPath)) {
-    console.error('❌ trajectory.db not found. Run seed script first.');
-    process.exit(1);
-  }
-
-  console.log('\n🧪 PD Pipeline Acceptance Test');
-  console.log('═'.repeat(55));
-  console.log(`Workspace: ${workspaceDir}`);
-  console.log(`Database:  ${dbPath}\n`);
-
-  // ═══════════════════════════════════════════════
-  // SECTION 1: Seed Scenario Data Integrity
-  // ═══════════════════════════════════════════════
-  console.log('── 1. Seed Scenario Data Integrity ──');
-
-  // 1.1 Count seed sessions
-  const sessionCount = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM sessions WHERE session_id LIKE 'seed-%';"));
-  assert(sessionCount === 10, '10 seed sessions exist', `found ${sessionCount}`);
-
-  // 1.2 Count seed pain events
-  const painCount = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM pain_events WHERE session_id LIKE 'seed-%';"));
-  assert(painCount >= 10, 'Pain events exist for seed sessions', `found ${painCount}`);
-
-  // 1.3 Verify signal diversity
-  const sources = runSql(dbPath, "SELECT DISTINCT source FROM pain_events WHERE session_id LIKE 'seed-%';").split('\n');
-  assert(sources.includes('tool_failure'), 'tool_failure signal present');
-  assert(sources.includes('user_empathy'), 'user_empathy signal present');
-
-  // 1.4 Verify pain event scores are in valid range
-  const invalidScores = runSql(dbPath, "SELECT COUNT(*) FROM pain_events WHERE session_id LIKE 'seed-%' AND (score < 0 OR score > 100);");
-  assert(parseInt(invalidScores) === 0, 'All pain scores in 0-100 range', `${invalidScores} invalid`);
-
-  // 1.5 Verify correction cues exist
-  const correctionCount = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM user_turns WHERE session_id LIKE 'seed-%' AND correction_detected = 1;"));
-  assert(correctionCount >= 5, 'Multiple correction cues present', `found ${correctionCount}`);
-
-  // 1.6 Verify tool calls (both success and failure)
-  const failureCalls = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM tool_calls WHERE session_id LIKE 'seed-%' AND outcome = 'failure';"));
-  const successCalls = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM tool_calls WHERE session_id LIKE 'seed-%' AND outcome = 'success';"));
-  assert(failureCalls > 0, 'Failed tool calls in seed data', `found ${failureCalls}`);
-  assert(successCalls > 0, 'Successful tool calls in seed data', `found ${successCalls}`);
-
-  // 1.7 Verify scenario descriptions are unique and meaningful
-  const reasons = runSql(dbPath, "SELECT DISTINCT reason FROM pain_events WHERE session_id LIKE 'seed-%' ORDER BY reason;").split('\n');
-  const uniqueReasons = new Set(reasons);
-  assert(uniqueReasons.size === reasons.length, 'All pain reasons are unique', `${uniqueReasons.size}/${reasons.length} unique`);
-
-  // ═══════════════════════════════════════════════
-  // SECTION 2: PainSignalBridge + Runtime v2
-  // ═══════════════════════════════════════════════
-  console.log('\n── 2. PainSignalBridge + Runtime v2 ──');
-
-  // 2.1 Verify PainSignalBridge is imported from runtime-v2 in pain.ts
-  const painHookSource = join(__dirname, '..', 'src', 'hooks', 'pain.ts');
-  if (existsSync(painHookSource)) {
-    const painContent = readFileSync(painHookSource, 'utf-8');
-    assert(painContent.includes('PainToPrincipleService'), 'pain.ts uses PainToPrincipleService from runtime-v2');
-    assert(!painContent.includes('createPainSignalBridge'), 'pain.ts no longer imports createPainSignalBridge');
-  }
-
-  // 2.2 Verify write_pain_flag tool is NOT registered in index.ts
-  const indexSource2 = join(__dirname, '..', 'src', 'index.ts');
-  if (existsSync(indexSource2)) {
-    const indexContent = readFileSync(indexSource2, 'utf-8');
-    assert(!indexContent.includes('createWritePainFlagTool'), 'write_pain_flag NOT registered in index.ts');
-  }
-
-  // ═══════════════════════════════════════════════
-  // SECTION 3: Dedup Logic
-  // ═══════════════════════════════════════════════
-  console.log('\n── 3. Dedup Logic (Phase 3c) ──');
-
-  const workerSource = join(__dirname, '..', 'src', 'service', 'evolution-worker.ts');
-  if (existsSync(workerSource)) {
-    const workerContent = readFileSync(workerSource, 'utf-8');
-
-    // 3.1 Helper functions exist
-    assert(workerContent.includes('hasRecentSimilarReflection'), 'hasRecentSimilarReflection helper extracted');
-    assert(workerContent.includes('buildPainSourceKey'), 'buildPainSourceKey helper extracted');
-    assert(workerContent.includes('shouldSkipForDedup'), 'shouldSkipForDedup helper extracted');
-
-    // 3.2 Dedup window is configured
-    assert(workerContent.includes('4 * 60 * 60 * 1000') || workerContent.includes('DEDUP_WINDOW_MS'), '4-hour dedup window configured');
-
-    // 3.3 No-pain-context bypass
-    const bypassCheck = workerContent.includes('!painSourceKey') || workerContent.includes('painSourceKey === null') || 
-                        workerContent.includes('painSourceKey) return false') || workerContent.includes('if (!painSourceKey) return false');
-    assert(bypassCheck, 'no_pain_context bypasses dedup', 'bypass pattern not found');
-
-    // 3.4 Only completed tasks are checked (not failed)
-    assert(workerContent.includes("status !== 'completed'") || workerContent.includes("status === 'completed'"), 'Only completed tasks matched for dedup');
-  } else {
-    fail('Dedup logic check', 'evolution-worker.ts not found');
-  }
-
-  // ═══════════════════════════════════════════════
-  // SECTION 4: Correction Rejected Pain Event
-  // ═══════════════════════════════════════════════
-  console.log('\n── 4. Correction Rejected Pain Signal ──');
-
-  const trajectorySource = join(__dirname, '..', 'src', 'core', 'trajectory.ts');
-  if (existsSync(trajectorySource)) {
-    const trajContent = readFileSync(trajectorySource, 'utf-8');
-
-    // 4.1 Method exists
-    assert(trajContent.includes('recordCorrectionRejectedPain'), 'recordCorrectionRejectedPain method exists');
-
-    // 4.2 Called on rejected status
-    assert(trajContent.includes("status === 'rejected'"), 'Pain event created on rejected status');
-
-    // 4.3 Uses correct source
-    assert(trajContent.includes("'correction_rejected'"), 'Uses correction_rejected source');
-
-    // 4.4 Score is clamped
-    assert(trajContent.includes('Math.max(0') && trajContent.includes('Math.min(100'), 'Score clamped 0-100');
-  } else {
-    fail('Correction rejected check', 'trajectory.ts not found');
-  }
-
-  // ═══════════════════════════════════════════════
-  // SECTION 5: Shell Injection Safety
-  // ═══════════════════════════════════════════════
-  console.log('\n── 5. Shell Injection Safety ──');
-  // (Nocturnal scripts removed in PRI-231 — section retained for future script checks)
-
-  // ═══════════════════════════════════════════════
-  // SECTION 6: Pending Review Warning Fix
-  // ═══════════════════════════════════════════════
-  console.log('\n── 6. Pending Review Warning Fix ──');
-  // (Nocturnal scripts removed in PRI-231 — section retained for future checks)
-
-  // ═══════════════════════════════════════════════
-  // SECTION 7: Path Resolver Fallback
-  // ═══════════════════════════════════════════════
-  console.log('\n── 7. Path Resolver Fallback ──');
-
-  const pathResolverSource = join(__dirname, '..', 'src', 'core', 'path-resolver.ts');
-  if (existsSync(pathResolverSource)) {
-    const prContent = readFileSync(pathResolverSource, 'utf-8');
-    // 7.1 resolveWorkspaceDirFromApi checks config.workspaceDir
-    assert(prContent.includes('config.workspaceDir') || prContent.includes('cfgWorkspaceDir'), 
-           'resolveWorkspaceDirFromApi checks config.workspaceDir');
-  }
-
-  // ═══════════════════════════════════════════════
-  // SECTION 8: Seed Scenario Quality (Manual Review)
-  // ═══════════════════════════════════════════════
-  console.log('\n── 8. Seed Scenario Quality ──');
-
-  // 8.1 Verify pain score distribution
-  const avgScore = parseFloat(runSql(dbPath, "SELECT ROUND(AVG(score), 1) FROM pain_events WHERE session_id LIKE 'seed-%';"));
-  assert(avgScore > 50 && avgScore < 100, 'Average pain score reasonable (50-100)', `avg=${avgScore}`);
-
-  // 8.2 Verify severity levels are set
-  const nullSeverity = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM pain_events WHERE session_id LIKE 'seed-%' AND severity IS NULL;"));
-  assert(nullSeverity === 0, 'All seed pain events have severity', `${nullSeverity} null`);
-
-  // 8.3 Verify origin is set
-  const nullOrigin = parseInt(runSql(dbPath, "SELECT COUNT(*) FROM pain_events WHERE session_id LIKE 'seed-%' AND origin IS NULL;"));
-  assert(nullOrigin === 0, 'All seed pain events have origin', `${nullOrigin} null`);
-
-  // 8.4 Verify all 10 scenario IDs follow naming convention
-  const seedSessions = runSql(dbPath, "SELECT session_id FROM sessions WHERE session_id LIKE 'seed-%' ORDER BY session_id;").split('\n');
-  const validPattern = /^seed-[a-z-]+-\d{3}$/;
-  const allValid = seedSessions.every(s => validPattern.test(s));
-  assert(allValid, 'All session IDs follow naming convention', `${seedSessions.filter(s => !validPattern.test(s)).length} invalid`);
-
-  // ═══════════════════════════════════════════════
-  // SUMMARY
-  // ═══════════════════════════════════════════════
-  console.log('\n' + '═'.repeat(55));
-  console.log(`  Acceptance Test Summary`);
-  console.log('═'.repeat(55));
-  console.log(`  ✅ Passed:  ${passCount}`);
-  console.log(`  ❌ Failed:  ${failCount}`);
-  console.log(`  ⚠️  Warnings: ${warnCount}`);
-  console.log(`  Total:    ${passCount + failCount + warnCount}`);
-  console.log('═'.repeat(55));
-
-  if (failCount === 0) {
-    console.log('\n🎉 All acceptance tests passed!');
-    process.exit(0);
-  } else {
-    console.log(`\n❌ ${failCount} test(s) failed. Review details above.`);
-    process.exit(1);
-  }
-}
-
-main();

package/plugin/scripts/bootstrap-rules.mjs

@@ -1,70 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Minimal Rule Bootstrap CLI (Phase 17)
- *
- * Seeds 1-3 stub Rule entities for high-value deterministic principles.
- * Idempotent: re-running skips already-existing rules.
- *
- * Usage:
- *   npm run bootstrap-rules                        # default (3 principles)
- *   BOOTSTRAP_LIMIT=2 npm run bootstrap-rules      # limit to 2 principles
- *   STATE_DIR=/path/to/state npm run bootstrap-rules  # custom state dir
- */
-
-import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-const PROJECT_ROOT = join(__dirname, '..');
-const STATE_DIR = process.env.STATE_DIR || join(PROJECT_ROOT, '..', '.state');
-const LIMIT = parseInt(process.env.BOOTSTRAP_LIMIT || '3', 10);
-
-async function run() {
-  let BootstrapModule;
-  try {
-    BootstrapModule = await import('../dist/core/bootstrap-rules.js');
-  } catch {
-    console.error('Bootstrap module not found in dist/. Build first: node esbuild.config.js');
-    process.exit(1);
-  }
-
-  const { bootstrapRules, validateBootstrap, selectPrinciplesForBootstrap } = BootstrapModule;
-
-  console.log('Selecting principles for bootstrap...');
-  console.log(`  State dir: ${STATE_DIR}`);
-  console.log(`  Limit: ${LIMIT}`);
-
-  try {
-    const selectedIds = selectPrinciplesForBootstrap(STATE_DIR, LIMIT);
-    console.log(`  Selected ${selectedIds.length} principle(s): ${selectedIds.join(', ')}`);
-
-    console.log('\nRunning bootstrap...');
-    const results = bootstrapRules(STATE_DIR, LIMIT);
-
-    for (const r of results) {
-      console.log(`  ${r.status === 'created' ? '+' : '='} ${r.principleId} -> ${r.ruleId} (${r.status})`);
-    }
-
-    const created = results.filter((r) => r.status === 'created');
-    const skipped = results.filter((r) => r.status === 'skipped');
-    console.log(`\nDone: ${created.length} created, ${skipped.length} skipped.`);
-
-    if (created.length > 0) {
-      console.log('\nValidating...');
-      const valid = validateBootstrap(STATE_DIR, selectedIds);
-      console.log(`  Validation: ${valid ? 'PASS' : 'FAIL'}`);
-    }
-  } catch (err) {
-    if (err && typeof err === 'object' && 'code' in err && err.code === 'NO_DETERMINISTIC_PRINCIPLES') {
-      console.log('\nNothing to bootstrap yet; the workspace has no deterministic principles.');
-      return;
-    }
-    console.error(`\nBootstrap failed: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
-  }
-}
-
-run();

package/plugin/scripts/compile-principles.mjs

@@ -1,104 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Principle Compiler CLI
- *
- * Compiles eligible principles (those derived from pain events) into
- * auto-generated rules via the PrincipleCompiler pipeline.
- *
- * Usage:
- *   npm run compile-principles
- *   WORKSPACE_DIR=/path/to/workspace npm run compile-principles
- *   node scripts/compile-principles.mjs /path/to/workspace
- */
-
-import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-/**
- * Cross-platform home directory (Linux: HOME, Windows: USERPROFILE/HOMEDRIVE+HOMEPATH)
- */
-function getHomeDir() {
-  return process.env.HOME
-    || process.env.USERPROFILE
-    || (process.env.HOMEDRIVE && process.env.HOMEPATH ? process.env.HOMEDRIVE + process.env.HOMEPATH : null)
-    || '.';
-}
-
-// Resolve workspace directory: CLI arg > env var > default
-const WORKSPACE_DIR = process.argv[2]
-  || process.env.WORKSPACE_DIR
-  || join(getHomeDir(), '.openclaw', 'workspace');
-
-const STATE_DIR = join(WORKSPACE_DIR, '.state');
-
-async function run() {
-  console.log('Principle Compiler CLI');
-  console.log(`  Workspace: ${WORKSPACE_DIR}`);
-  console.log(`  State dir: ${STATE_DIR}`);
-
-  let compilerModule, trajectoryModule;
-
-  try {
-    compilerModule = await import('../dist/core/principle-compiler/index.js');
-  } catch {
-    console.error('PrincipleCompiler module not found in dist/. Build first: node esbuild.config.js');
-    process.exit(1);
-  }
-
-  try {
-    trajectoryModule = await import('../dist/core/trajectory/index.js');
-  } catch {
-    console.error('TrajectoryDatabase module not found in dist/. Build first: node esbuild.config.js');
-    process.exit(1);
-  }
-
-  const { PrincipleCompiler } = compilerModule;
-  const { TrajectoryDatabase } = trajectoryModule;
-
-  let trajectory;
-  try {
-    trajectory = new TrajectoryDatabase({ workspaceDir: WORKSPACE_DIR });
-  } catch (err) {
-    console.error(`Failed to open trajectory database: ${err.message}`);
-    process.exit(1);
-  }
-
-  try {
-    const compiler = new PrincipleCompiler(STATE_DIR, trajectory);
-
-    console.log('\nCompiling eligible principles...');
-    const results = compiler.compileAll();
-
-    const succeeded = results.filter(r => r.success);
-    const failed = results.filter(r => !r.success);
-
-    console.log(`\nResults: ${succeeded.length} succeeded, ${failed.length} failed`);
-
-    for (const r of succeeded) {
-      console.log(`  + ${r.principleId} -> rule ${r.ruleId} (impl: ${r.implementationId})`);
-    }
-
-    for (const r of failed) {
-      console.log(`  x ${r.principleId}: ${r.reason}`);
-    }
-
-    if (results.length === 0) {
-      console.log('  No eligible principles found for compilation.');
-    }
-
-    if (failed.length > 0) {
-      process.exitCode = 1;
-    }
-  } finally {
-    trajectory.dispose();
-  }
-}
-
-run().catch((err) => {
-  console.error(`Fatal: ${err.message}`);
-  process.exit(1);
-});

package/plugin/scripts/install-dependencies.cjs

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-
-const { execFileSync } = require('child_process');
-const { existsSync, readFileSync } = require('fs');
-const { join } = require('path');
-
-const PLUGIN_DIR = join(__dirname, '..');
-
-console.log('Setting up Principles Disciple plugin dependencies...');
-
-const packageJsonPath = join(PLUGIN_DIR, 'package.json');
-if (!existsSync(packageJsonPath)) {
-  console.log('Not in plugin directory, skipping dependency setup');
-  process.exit(0);
-}
-
-const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
-const dependencyNames = ['micromatch', '@sinclair/typebox', 'better-sqlite3'];
-const DEPENDENCIES = dependencyNames.map((name) => {
-  const version = packageJson.dependencies?.[name] || packageJson.devDependencies?.[name];
-  if (!version) {
-    throw new Error(`Missing dependency version in package.json for ${name}`);
-  }
-  return `${name}@${version}`;
-});
-
-const nodeModulesDir = join(PLUGIN_DIR, 'node_modules');
-const betterSqliteDir = join(nodeModulesDir, 'better-sqlite3');
-if (existsSync(nodeModulesDir) && existsSync(betterSqliteDir)) {
-  console.log('Dependencies already installed');
-  process.exit(0);
-}
-
-console.log('Installing plugin dependencies...');
-try {
-  execFileSync('npm', ['install', ...DEPENDENCIES], {
-    cwd: PLUGIN_DIR,
-    stdio: 'inherit',
-  });
-  console.log('Plugin dependencies installed successfully');
-} catch (error) {
-  console.error('Failed to install plugin dependencies:', error.message);
-  console.log('\nManual fix:');
-  console.log('  cd', PLUGIN_DIR);
-  console.log('  npm install', DEPENDENCIES.join(' '));
-  process.exit(1);
-}

package/plugin/scripts/postinstall.cjs

@@ -1,177 +0,0 @@
-#!/usr/bin/env node
-/**
- * PRI-343: postinstall hook — auto-configure allowConversationAccess.
- *
- * Runs during `npm install` (i.e. `openclaw plugins install principles-disciple`).
- * Sets plugins.entries['principles-disciple'].hooks.allowConversationAccess = true
- * in ~/.openclaw/openclaw.json so users never need to manually run
- * `openclaw config set ... allowConversationAccess true`.
- *
- * Design constraints:
- *  - Idempotent: safe to run multiple times.
- *  - BOM-resistant: strip U+FEFF before JSON.parse (PowerShell UTF8 writes add BOM).
- *  - Atomic write: temp file + rename to avoid partial writes.
- *  - File-locked: uses O_EXCL lock file to prevent races with concurrent writers.
- *  - Never fail the install: all errors are caught and logged to stderr.
- *  - No dependencies: pure Node.js built-ins (fs, path, os).
- */
-'use strict';
-
-const { existsSync, readFileSync, writeFileSync, renameSync, unlinkSync, openSync, closeSync, statSync, writeSync, fsyncSync, constants } = require('fs');
-const { join } = require('path');
-const { homedir } = require('os');
-
-const PLUGIN_ID = 'principles-disciple';
-const CONFIG_PATH = join(homedir(), '.openclaw', 'openclaw.json');
-const LOCK_PATH = CONFIG_PATH + '.lock';
-const LOCK_MAX_RETRIES = 20;
-const LOCK_BASE_DELAY_MS = 25;
-
-function log(msg) {
-  process.stderr.write(`[PD:postinstall] ${msg}\n`);
-}
-
-function isRecord(value) {
-  return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-
-function isProcessAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-function tryAcquireLock() {
-  try {
-    const flags = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL;
-    const fd = openSync(LOCK_PATH, flags, 0o600);
-    try {
-      writeSync(fd, String(process.pid));
-      fsyncSync(fd);
-    } finally {
-      closeSync(fd);
-    }
-    return true;
-  } catch (err) {
-    if (err.code === 'EEXIST') return false;
-    throw err;
-  }
-}
-
-function readLockPid() {
-  try {
-    const content = readFileSync(LOCK_PATH, 'utf8');
-    const pid = parseInt(content.trim(), 10);
-    return Number.isNaN(pid) ? null : pid;
-  } catch {
-    return null;
-  }
-}
-
-function cleanupStaleLock() {
-  try {
-    const stat = statSync(LOCK_PATH);
-    const pid = readLockPid();
-    const isStale = Date.now() - stat.mtimeMs > 10000;
-    const isDead = pid === null || !isProcessAlive(pid);
-    if (isStale || isDead) {
-      try {
-        unlinkSync(LOCK_PATH);
-        return true;
-      } catch {
-        return false;
-      }
-    }
-    return false;
-  } catch {
-    return false;
-  }
-}
-
-function acquireLockSync() {
-  for (let attempt = 0; attempt < LOCK_MAX_RETRIES; attempt++) {
-    if (tryAcquireLock()) return true;
-    if (!cleanupStaleLock()) {
-      const delay = LOCK_BASE_DELAY_MS * Math.pow(2, Math.min(attempt, 5));
-      const jitter = delay * 0.2 * Math.random();
-      const waitUntil = Date.now() + delay + jitter;
-      while (Date.now() < waitUntil) { /* spin */ }
-      continue;
-    }
-    if (tryAcquireLock()) return true;
-  }
-  return false;
-}
-
-function releaseLock() {
-  try {
-    const pid = readLockPid();
-    if (pid === process.pid) {
-      unlinkSync(LOCK_PATH);
-    }
-  } catch {
-    // best effort
-  }
-}
-
-try {
-  if (!existsSync(CONFIG_PATH)) {
-    log(`No openclaw.json at ${CONFIG_PATH} — skipping (will auto-fix on first load).`);
-    process.exit(0);
-  }
-
-  const locked = acquireLockSync();
-  if (!locked) {
-    log(`Could not acquire config lock — skipping (will auto-fix on first load).`);
-    process.exit(0);
-  }
-
-  let exitCode = 0;
-  try {
-    // BOM-resistant read
-    const raw = readFileSync(CONFIG_PATH, 'utf8').replace(/^\uFEFF/, '');
-    const cfg = JSON.parse(raw);
-
-    if (!isRecord(cfg)) {
-      log(`openclaw.json is not a JSON object — skipping.`);
-    } else {
-      // Ensure plugins.entries path exists
-      if (!isRecord(cfg.plugins)) cfg.plugins = {};
-      if (!isRecord(cfg.plugins.entries)) cfg.plugins.entries = {};
-
-      const rawEntry = cfg.plugins.entries[PLUGIN_ID];
-      const entry = isRecord(rawEntry) ? rawEntry : { enabled: true };
-
-      if (!isRecord(entry.hooks)) entry.hooks = {};
-
-      if (entry.hooks.allowConversationAccess !== true) {
-        // Set allowConversationAccess = true
-        entry.hooks.allowConversationAccess = true;
-        cfg.plugins.entries[PLUGIN_ID] = entry;
-
-        // Atomic write: temp file + rename
-        const tmpPath = CONFIG_PATH + '.tmp.' + Date.now();
-        writeFileSync(tmpPath, JSON.stringify(cfg, null, 2), 'utf8');
-        renameSync(tmpPath, CONFIG_PATH);
-
-        log(`allowConversationAccess auto-configured to true in ${CONFIG_PATH}`);
-      }
-    }
-  } catch (innerErr) {
-    log(`Auto-configuration failed: ${innerErr instanceof Error ? innerErr.message : String(innerErr)}`);
-    log(`The plugin will retry on first load. If it still fails, run:`);
-    log(`  openclaw config set plugins.entries.principles-disciple.hooks.allowConversationAccess true`);
-  } finally {
-    releaseLock();
-  }
-  process.exit(exitCode);
-} catch (err) {
-  // Never fail the install — the plugin's module-level auto-fix will retry on load.
-  log(`Auto-configuration failed: ${err instanceof Error ? err.message : String(err)}`);
-  log(`The plugin will retry on first load. If it still fails, run:`);
-  log(`  openclaw config set plugins.entries.principles-disciple.hooks.allowConversationAccess true`);
-  process.exit(0);
-}