create-principles-disciple 1.121.7 → 1.121.9

package/plugin/dist/hooks/gate-block-helper.d.ts

@@ -15,7 +15,14 @@ import type { PluginHookBeforeToolCallResult } from '../openclaw-sdk.js';
  * Block context containing all information needed for block persistence
  */
 export interface BlockContext {
-    filePath: string;
+    /**
+     * Target path. Nullable by contract (PRI-569 round 3): the shared
+     * host-runtime path may deny a call whose path cannot be normalized, and
+     * trajectory.db accepts a null file_path — a deny is always accounted,
+     * never dropped for lack of a path. Display-only contexts use
+     * `<unresolved>` via the caller-side displayPath coercion.
+     */
+    filePath: string | null;
     reason: string;
     toolName: string;
     sessionId?: string;
@@ -26,6 +33,23 @@ export interface BlockContext {
     /** Principle id from the rule result — enables PRI-530 receipt copy attribution */
     principleId?: string;
 }
+/**
+ * Authoritative persistence core for ONE gate-block decision.
+ *
+ * Shared by BOTH enforcement paths (PRI-569): recordGateBlockAndReturn
+ * (legacy hook path) and handleSharedRuleHostResult's deny branch (shared
+ * host-runtime path). Before PRI-569 the shared path recorded only EventLog
+ * JSONL rows, so trajectory.db gate_blocks stayed empty and Wave-4's
+ * "blocks today" metric read 0 despite live blocks.
+ *
+ * None of the steps throws into the caller; degradation is observable via
+ * reasonCode-carrying warnings, and trajectory write failures schedule the
+ * bounded retry chain.
+ */
+export declare function persistGateBlock(wctx: WorkspaceContext, blockCtx: BlockContext, logger: {
+    warn?: (_message: string) => void;
+    error?: (_message: string) => void;
+}): void;
 /**
  * Single authoritative block helper.
  *

package/plugin/dist/hooks/gate.d.ts

@@ -42,3 +42,25 @@ export declare function handleSharedRuleHostResult(event: PluginHookBeforeToolCa
     workspaceDir: string;
     logger?: Partial<PluginLogger>;
 }, result: HostEventResult): void;
+/**
+ * Authoritative accounting for ONE shared-path deny decision (PRI-569).
+ *
+ * Both shared-handler deny branches (resolvable and unresolved target path)
+ * funnel here: receipt-ledger effect row (flag-gated, failure-degrading —
+ * parity with the legacy hook path) plus persistGateBlock (session GFI,
+ * EventLog gate_block, trajectory gate_blocks with bounded retry). A null
+ * filePath is accounted with a null trajectory file_path; the EventLog copy
+ * carries an '<unresolved>' placeholder. Never throws into the caller;
+ * every skip/failure warns with a reasonCode (rc-9).
+ */
+export declare function accountSharedDeny(wctx: WorkspaceContext, accounting: {
+    sessionId?: string;
+    toolName: string;
+    filePath: string | null;
+    reason: string;
+    ruleId?: string;
+    principleId?: string;
+}, logger: {
+    warn?: (_message: string) => void;
+    error?: (_message: string) => void;
+}): void;

package/plugin/dist/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "1.198.1",
+  "version": "1.222.5",
   "activation": {
     "onCapabilities": [
       "hook"