create-principles-disciple 1.132.2 → 1.132.4

package/release-manager/dist/installer.d.ts

@@ -0,0 +1,217 @@
+import type { InstallOptions } from './prompts.js';
+import { type ComponentStatus, type VerificationResult } from './mvp-config.js';
+import { type HostTarget } from './installers/index.js';
+import type { HostInstallResult } from '@principles/core/host';
+import { type SkillLanguage } from './skill-language.js';
+import { type ReleaseMetadataDigestSource, type TransactionState } from './update/transaction-journal.js';
+/** PRI-343: Keep in sync with @principles/core CONVERSATION_ACCESS_CONFIG_KEY */
+export declare const CONVERSATION_ACCESS_CONFIG_KEY: 'allowConversationAccess';
+/**
+ * PRI-343: Pure function — deep-merges allowConversationAccess: true into
+ * the openclaw.json config without mutating the input.
+ *
+ * Ensures plugins.entries['principles-disciple'].hooks.allowConversationAccess
+ * is set to true, creating intermediate objects if missing.
+ * Preserves all other fields.
+ */
+export declare function ensureConversationAccess(config: Record<string, unknown>): Record<string, unknown>;
+export declare function resolveConsolePortBase(): number;
+export declare function mergeInstallManifestHosts(current: unknown, host: HostTarget): ('codex' | 'openclaw')[];
+/**
+ * 验证原生模块：better-sqlite3 随发布资产携带 prebuilt 二进制
+ * (prebuilds/*.node)，node-gyp-build 在 require 时解析——无需（也没有）
+ * npm rebuild 步骤。本函数的 require 探针就是唯一验证（历史上存在一个
+ * 名为 rebuildNativeModules 的空壳函数，已删除以避免误导维护者）。
+ */
+export declare function verifyNativeModules(cwd: string, componentName: string): void;
+export declare class SelfContainedDependencyError extends Error {
+    readonly reason: string;
+    readonly nextAction: string;
+    readonly component: string;
+    readonly dependency?: string;
+    constructor(options: {
+        reason: string;
+        nextAction: string;
+        message: string;
+        component: string;
+        dependency?: string;
+        cause?: unknown;
+    });
+}
+/**
+ * Installer payload shape, decided once per install run (see
+ * `decideInstallPayloadMode` below):
+ * - `self-contained` — the package ships the immutable release asset
+ *   (`_release/asset.json` + per-component node_modules); the default
+ *   for the release-asset publication channel.
+ * - `npm-distributed` — the npm registry package ships the bundled
+ *   component trees WITHOUT node_modules/_release (the registry package
+ *   is ~8MB vs ~792MB for the self-contained payload); dependencies
+ *   resolve from the npm registry at install time (the
+ *   PD_ALLOW_LEGACY_NPM_INSTALL recovery path).
+ */
+type InstallerPayloadMode = 'self-contained' | 'npm-distributed';
+/**
+ * Decide which payload shape this package instance carries and whether
+ * registry dependency resolution (npm install) is required. Env override
+ * first (explicit operator intent), then the physical shape: a present
+ * `_release/asset.json` always takes the self-contained path (a present
+ * but CORRUPT asset still fails hard inside the preflight — never
+ * silently falling back to registry resolution); a package without the
+ * release asset but with complete component trees is the npm-distributed
+ * shape and resolves dependencies from the registry.
+ */
+export declare function decideInstallPayloadMode(pluginDir: string): InstallerPayloadMode;
+/**
+ * Whether registry dependency resolution (npm install / global root
+ * discovery) may run: true for the npm-distributed payload shape and the
+ * PD_ALLOW_LEGACY_NPM_INSTALL recovery path. Host installers consume this
+ * gate instead of re-reading the env (their concern is payload shape, not
+ * the specific env var).
+ */
+export declare function isNpmDependencyResolutionEnabled(): boolean;
+/**
+ * Supported release assets are self-contained: installation validates the
+ * copied component and never resolves dependencies or runs lifecycle scripts.
+ * The old npm path remains opt-in for development/legacy recovery only.
+ */
+export declare function prepareBundledComponentDependencies(cwd: string, componentName: string): Promise<void>;
+export declare function preflightSelfContainedReleaseAsset(assetDir: string): Promise<void>;
+/**
+ * 验证路径是否在工作区目录内，防止路径遍历攻击
+ */
+export declare function validateWorkspacePath(targetPath: string, workspaceDir: string): void;
+interface BackupResult {
+    type: 'no_existing' | 'backed_up';
+    backupDir: string | null;
+    runtimeBackupDir?: string | null;
+}
+/**
+ * Move legacy PD backup directories out of the extensions dir into the PD
+ * backups root. Older versions created backups as siblings of the plugin
+ * inside ~/.openclaw/extensions — OpenClaw plugin discovery scans every
+ * extensions/ child directory, so those backups get discovered as duplicate
+ * principles-disciple plugins ("duplicate plugin id detected" on every
+ * gateway startup). Best-effort: failures are logged, never fatal (rc-9).
+ *
+ * Exported for real-filesystem tests (tests/backup-location.test.ts).
+ */
+export declare function migrateLegacyPdBackups(): void;
+/**
+ * Exported for real-filesystem tests (tests/backup-location.test.ts).
+ */
+export declare function backupExistingInstall(host?: HostTarget): BackupResult;
+/**
+ * Legacy rule contract preflight (2026-08-19).
+ *
+ * Before replacing the current installation, run the NEW pd-cli's
+ * `runtime compatibility-scan` against the target workspace: if any ACTIVE
+ * owner-approved RuleCode still references a RuleHost contract symbol this
+ * version removed (recentThinking, planStatus, hasPlanFile, ...), upgrading
+ * would silently change that rule's behavior. Refusing here keeps the old
+ * installation untouched (cli-5) and tells the owner exactly which rules
+ * block the upgrade.
+ */
+/**
+ * Compatibility preflight status taxonomy (P1-3, 2026-08-20).
+ *
+ * The scanner's status is preserved end-to-end so a refusal names the real
+ * cause instead of smearing every failure into "legacy RuleCode":
+ *
+ *   clean             → allow upgrade
+ *   no_state_db       → allow (nothing persisted to be incompatible)
+ *   legacy_dependency → refuse → migrate/deactivate the listed rules
+ *   scan_failed       → refuse → repair DB / permissions
+ *   scan_unavailable  → refuse → repair/re-download the installer
+ *
+ * Any unrecognized status is treated as a refusal (fail closed).
+ */
+export type CompatibilityStatus = 'clean' | 'no_state_db' | 'legacy_dependency' | 'scan_failed' | 'scan_unavailable';
+export interface LegacyRulePreflightOutcome {
+    ok: boolean;
+    status?: CompatibilityStatus;
+    /** rc-9: structured reason + remediation whenever ok=false. */
+    reason?: string;
+    remediation?: string;
+}
+/** Injected runner so tests can exercise refusal without a built pd-cli. */
+export type LegacyRulePreflightRunner = (pdCliEntry: string, workspaceDir: string) => Promise<LegacyRulePreflightOutcome>;
+/**
+ * Strict (ok, status) protocol parse (P2, 2026-08-20).
+ *
+ * Boolean `ok` alone is NOT authoritative — the (ok, status) pair is the
+ * contract. Only ok=true + (clean|no_state_db) is a successful scan. Every
+ * other combination fails closed:
+ *   - ok=true + refusal/success-impossible status → protocol invalid
+ *   - ok=false + clean|no_state_db/unknown   → protocol invalid
+ *   - ok=false + legacy_dependency|scan_failed|scan_unavailable → refusal
+ *   - non-boolean / missing ok               → protocol invalid
+ * The payload is never trusted to self-describe a pass.
+ */
+export declare function parseCompatibilityScanStdout(stdout: unknown): LegacyRulePreflightOutcome;
+export declare function runLegacyRuleContractPreflight(pluginDir: string, workspaceDir: string, runScan?: LegacyRulePreflightRunner): Promise<LegacyRulePreflightOutcome>;
+export declare function checkBuiltPlugin(pluginDir: string): Promise<void>;
+export declare function installPluginToStaging(pluginDir: string, language: SkillLanguage): Promise<void>;
+export interface InstallResult {
+    success: boolean;
+    workspaceDir: string;
+    configYamlPath: string;
+    templatesCount: number;
+    components: ComponentStatus;
+    verification: VerificationResult;
+    enabledChannels: string[];
+    nextAction: string;
+    reason?: string;
+    component?: string;
+    dependency?: string;
+    error?: string;
+    /** Task 8: URL the browser was opened to when the installer auto-launched the
+     * console via `pd console open`. Undefined when auto-launch was skipped or failed. */
+    consoleUrl?: string;
+    /** ADR-0020 §2.3: Host-side install results (one per HostInstaller). */
+    hostResults?: HostInstallResult[];
+    /** ADR-0024 D-2 (PRI-664): transaction journal record for this install.
+     * Undefined when the mutation never began (pre-mutation refusal/throw). */
+    journal?: InstallJournalRecord;
+}
+/** Observability record for one installer transaction (ADR-0024 D-2). */
+export interface InstallJournalRecord {
+    readonly transactionId: string;
+    /** Journal file: `~/.pd/transactions/<transactionId>.jsonl` (D-6, runtime scope). */
+    readonly journalPath: string;
+    /** True when a mid-flight journal append failed (Tier-2 degradation) and
+     * later transitions were skipped — the backup/restore safety net remained
+     * authoritative for this transaction. */
+    readonly degraded: boolean;
+}
+export interface InstallRunMode {
+    /** Suppress human output (spinner / progress). True under --json. */
+    quiet?: boolean;
+    /** No interactive prompts. True under --yes / --non-interactive / --json. */
+    nonInteractive?: boolean;
+}
+interface InstallerJournal {
+    readonly transactionId: string;
+    readonly journalPath: string;
+    readonly releaseId: string;
+    readonly productVersion: string;
+    readonly releaseMetadataDigest: string;
+    /** PRI-664 review: provenance of releaseMetadataDigest ('manifest' | 'package_manifest' | 'fallback'). */
+    readonly releaseMetadataDigestSource: ReleaseMetadataDigestSource;
+    degraded: boolean;
+    /** Last successfully journaled state — the `from` for failure-path transitions. */
+    lastState: TransactionState | null;
+}
+/** Opens one installer transaction: `~/.pd/transactions/<transactionId>.jsonl`. */
+export declare function beginInstallerJournal(pluginDir: string): InstallerJournal;
+/**
+ * Append one transition durably (append + fsync) BEFORE the side effect it
+ * describes. Throws on failure — the caller decides Tier-1 (refuse before
+ * mutation) vs Tier-2 (degrade and continue).
+ */
+export declare function journalInstallerTransition(journal: InstallerJournal, from: TransactionState | null, to: TransactionState, detail: string): void;
+/** Tier-2 wrapper: on append failure, degrade (mark + warn) instead of throwing. */
+export declare function journalInstallerTransitionDegrading(journal: InstallerJournal, from: TransactionState | null, to: TransactionState, detail: string): void;
+export declare function install(options: InstallOptions, pluginDir: string, mode?: InstallRunMode): Promise<InstallResult>;
+export {};
+//# sourceMappingURL=installer.d.ts.map

package/release-manager/dist/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAmBL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EAExB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGnF,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQtF,OAAO,EAA2B,KAAK,2BAA2B,EAAE,KAAK,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnI,iFAAiF;AACjF,eAAO,MAAM,8BAA8B,EAAG,yBAAkC,CAAC;AAMjF;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCjG;AAeD,wBAAgB,sBAAsB,IAAI,MAAM,CAU/C;AAgCD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,GAAG,UAAU,CAAC,EAAE,CAUtG;AAqGD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAW5E;AAKD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpC,YAAY,OAAO,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,EAOA;CACF;AAOD;;;;;;;;;;;GAWG;AACH,KAAK,oBAAoB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AA2DjE;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAIhF;AAOD;;;;;;GAMG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAWD,wBAAsB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCxF;AAYD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOpF;AAiDD,UAAU,YAAY;IACpB,IAAI,EAAE,aAAa,GAAG,WAAW,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA+B7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,UAAuB,GAAG,YAAY,CA0BjF;AA+FD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAC3B,OAAO,GACP,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,kBAAkB,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,MAAM,yBAAyB,GAAG,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,KACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAkDzC;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAgCxF;AAiCD,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,yBAA4D,GACpE,OAAO,CAAC,0BAA0B,CAAC,CAiDrC;AA0BD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvE;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG;AAm7BD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;0FACsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC;+EAC2E;IAC3E,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,qFAAqF;IACrF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;6CAEyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAoCD,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsBD,UAAU,gBAAgB;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,0GAA0G;IAC1G,QAAQ,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACpC;AA0CD,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAMzE;AAED;;;;GAIG;AAEH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAC7B,EAAE,EAAE,gBAAgB,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAiBN;AAED,oFAAoF;AAEpF,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAC7B,EAAE,EAAE,gBAAgB,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAYN;AAOD,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8hB3H"}