create-principles-disciple 1.146.9 → 1.147.0

package/plugin/dist/core/mcp-binding.d.ts

@@ -0,0 +1,41 @@
+export declare const MCP_BINDING_SCHEMA: 'pd.mcp-binding.v1';
+export declare const MCP_BINDING_HOST: 'openclaw';
+export interface McpBindingOutcome {
+    readonly ok: boolean;
+    readonly reason?: string;
+    readonly written?: boolean;
+    readonly serverEntry?: string;
+}
+/** Pure: the binding content for a resolved workspace (exported for tests). */
+export declare function buildMcpBinding(workspaceDir: string, runtimeDir: string, serverEntry: string): Record<string, unknown>;
+/**
+ * Canonical shared runtime root (~/.pd/runtime). Mirrors
+ * @principles/install-layout's runtimeDir; the lean OpenClaw bundle does not
+ * depend on that package, so this is the single local mirror and the binding
+ * records it for the launcher's canonical-path check.
+ */
+export declare function canonicalRuntimeDir(homeDir: string): string;
+/**
+ * Canonical installed MCP server entry (~/.pd/runtime/pd-mcp-server/dist/
+ * index.js). Same canonical-path convention as the plugin scripts' pd-cli
+ * probe; layout authority stays in @principles/install-layout.
+ */
+export declare function canonicalMcpServerEntry(homeDir: string): string;
+/**
+ * Ensure the launcher binding matches the CURRENT resolved workspace.
+ * The workspace arrives from the runtime resolver and may be unresolved
+ * (undefined) — that state is reported, never coerced. Returns an outcome;
+ * never throws (degrades to a structured warning).
+ */
+/**
+ * Remove the launcher binding when the current workspace cannot be trusted.
+ * A stale binding would keep the launcher pointed at the LAST resolved
+ * workspace (SPEC §3.5 requires fail-closed when the workspace cannot be
+ * confirmed). Missing file is not an error; a failed removal is reported.
+ */
+export declare function invalidateMcpBinding(extensionRoot: string): {
+    ok: boolean;
+    removed: boolean;
+    reason?: string;
+};
+export declare function ensureMcpBinding(workspaceDir: string | undefined, extensionRoot: string, homeDir: string): McpBindingOutcome;

package/plugin/dist/index.d.ts

@@ -39,6 +39,39 @@ export declare function shouldUseSharedHostRuntime(workspaceDir: string, logger:
     source: string;
     rollbackReason: string | null;
 };
+/**
+ * Gate 4 (PRI-1071): keep the host-wide launcher binding in lockstep with an
+ * EXPLICITLY DECLARED PD workspace only.
+ *
+ * The MCP server is one process per host and reads ONE `mcp-binding.json` beside
+ * the plugin payload, while OpenClaw may run several agents with different
+ * `ctx.workspaceDir`s. Binding whichever agent resolved first (or `main`) would
+ * serve that workspace's Pain evidence to every other agent — cross-workspace
+ * recall leakage. So:
+ *   - explicit PD workspace (PD_WORKSPACE_DIR / OPENCLAW_WORKSPACE /
+ *     principles-disciple.json `workspace`) → bind it (idempotent);
+ *   - no explicit declaration → REMOVE the binding and let the launcher
+ *     fail closed (`binding_missing`). Never infer from `main`, `cwd`, `HOME`
+ *     or the host default (SPEC §3.5).
+ *
+ * Hooks are unaffected: per-event hook resolution keeps its existing chain.
+ * Never throws (G4-07: MCP unavailability must not break PD's other functions).
+ */
+export interface McpBindingSyncResult {
+    status: 'written' | 'unchanged' | 'invalidated' | 'unavailable';
+    reason: string;
+    nextAction: string;
+    workspaceDir?: string;
+    source?: string;
+}
+export declare function syncMcpBindingFromExplicitWorkspace(options: {
+    extensionRoot: string;
+    homeDir: string;
+    resolver?: () => {
+        workspaceDir: string;
+        source: string;
+    } | null;
+}): McpBindingSyncResult;
 declare const plugin: {
     name: string;
     description: string;

package/plugin/dist/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "2.2.13",
+  "version": "2.4.0",
   "activation": {
     "onStartup": true,
     "onCapabilities": [
@@ -12,6 +12,15 @@
   "skills": [
     "templates/langs/zh/skills"
   ],
+  "mcpServers": {
+    "pd-recall": {
+      "transport": "stdio",
+      "command": "node",
+      "args": [
+        "./mcp/launcher.cjs"
+      ]
+    }
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/plugin/dist/utils/workspace-resolver.d.ts

@@ -77,6 +77,23 @@ export interface RejectedWorkspaceCandidate {
     reason: 'not_absolute' | 'rejected_by_validation';
 }
 export declare function resolveCanonicalWorkspaceDir(): CanonicalWorkspaceResult | null;
+/**
+ * Resolve ONLY owner-declared PD workspace sources (env vars + config file),
+ * without any host/agent/default inference.
+ *
+ * Gate 4 (PRI-1071): the MCP launcher binding is host-wide (one binding file
+ * per plugin payload), so it may only record a workspace the Owner explicitly
+ * declared. A resolved `main` agent workspace, `ctx.workspaceDir` of whichever
+ * agent happened to load the plugin, `process.cwd()` or `~/.openclaw/workspace`
+ * all describe WHERE A SESSION RUNS — never which state tree owns governance
+ * for every agent of the host. In a multi-agent OpenClaw install those differ,
+ * and binding one agent's workspace would serve that agent's Pain evidence to
+ * every other agent (cross-workspace recall leakage).
+ *
+ * Returns `null` when no explicit source resolves; callers must fail closed
+ * (invalidate a previously written binding) instead of inferring a default.
+ */
+export declare function resolveExplicitPdWorkspaceDir(): CanonicalWorkspaceResult | null;
 export type HookWorkspaceSource = CanonicalWorkspaceSource | 'openclaw_context' | 'openclaw_api';
 export interface HookWorkspaceResolutionSuccess {
     ok: true;

package/plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "2.2.13",
+  "version": "2.4.0",
   "activation": {
     "onStartup": true,
     "onCapabilities": [
@@ -12,6 +12,15 @@
   "skills": [
     "templates/langs/zh/skills"
   ],
+  "mcpServers": {
+    "pd-recall": {
+      "transport": "stdio",
+      "command": "node",
+      "args": [
+        "./mcp/launcher.cjs"
+      ]
+    }
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "2.2.13",
+  "version": "2.4.0",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,6 +28,7 @@
   "license": "Apache-2.0",
   "files": [
     "dist",
+    "mcp",
     "templates",
     "assets",
     "openclaw.plugin.json",

package/release-manager/dist/installer.js

@@ -14,7 +14,8 @@ import { t } from './i18n.js';
 import { generateConfigYamlContent, ExistingConfigVerifyInfraError, validateExistingConfigYamlForPreserve, getConfigYamlPath, readEnabledChannelsFromConfigYaml, getOpenClawDir, getPdDir, getPdRuntimeDir, getInstallManifestPath, getPdRuntimeBackupsDir, getPluginExtDir, getInstalledPluginDir, getInstalledLayoutPackageDir, getPdBackupsDir, getInstalledPdCliDir, getInstalledBinDir, getInstalledConsoleDir, getHomeDir, isWindows, } from './mvp-config.js';
 import { getHostInstallers } from './installers/index.js';
 import { runWorkbuddyEarlyPreflight } from './installers/workbuddy-host-installer.js';
-import { INSTALL_LAYOUT_VERSION, getWorkbuddyWorkspaceDir, installManifestHostsForPersist, mergeInstallManifestWorkspaces, parseInstallManifest } from '@principles/install-layout';
+import { INSTALL_LAYOUT_VERSION, getInstallLayoutPaths, getWorkbuddyWorkspaceDir, installManifestHostsForPersist, mergeInstallManifestWorkspaces, parseInstallManifest } from '@principles/install-layout';
+import { resolveMcpServerDir } from './mcp-server-layout-compat.js';
 import { detectOpenClawMainWorkspaceDivergence } from './utils/workspace-divergence.js';
 import { applySkillLanguageSelection } from './skill-language.js';
 import { parseReleaseAssetIdentity, parseReleaseAssetManifest, ReleaseAssetManifestError, verifyReleaseAssetManifestAsync, verifyReleaseAssetTarget, } from './update/release-asset-manifest.js';
@@ -659,6 +660,7 @@ const NPM_DISTRIBUTED_COMPONENTS = [
     ['PD CLI', 'pd-cli'],
     ['Console', 'console'],
     ['Install layout', 'install-layout'],
+    ['MCP server', 'pd-mcp-server'],
 ];
 // Components whose install step demands MORE than the generic
 // package.json+dist shape check — the per-component extra files are
@@ -812,6 +814,7 @@ const SELF_CONTAINED_COMPONENTS = [
     ['PD CLI', 'pd-cli'],
     ['Console', 'console'],
     ['Install layout', 'install-layout'],
+    ['MCP server', 'pd-mcp-server'],
 ];
 export async function preflightSelfContainedReleaseAsset(assetDir) {
     const identityPath = path.join(assetDir, '_release', 'asset.json');
@@ -2190,6 +2193,38 @@ function getInstalledCodexAdapterDir() {
 function getInstalledWorkbuddyAdapterDir() {
     return path.join(getPdRuntimeDir(), 'workbuddy-adapter');
 }
+/**
+ * Gate 4 (PRI-1071): the shared MCP server installs as a runtime sibling so
+ * the three host launchers can point their PD-owned bindings at one canonical
+ * entry (~/.pd/runtime/pd-mcp-server/dist/index.js).
+ */
+function getInstalledMcpServerDir() {
+    return resolveMcpServerDir(getInstallLayoutPaths(getHomeDir()));
+}
+/**
+ * Gate 4 (PRI-1071): deploy the bundled @principles/pd-mcp-server the same
+ * way as the codex/workbuddy adapters. Observable skip (not a failure) for
+ * installer builds older than the component — the host launchers then fail
+ * closed at launch with the honest "server entry missing" state (SPEC §3.5).
+ * Link materialization happens via ensureComponentFileDependencyLinks AFTER
+ * all siblings exist (same ordering contract as the codex adapter).
+ */
+function installBundledMcpServer(pluginDir) {
+    const mcpServerSrc = path.join(pluginDir, 'pd-mcp-server');
+    const mcpServerDest = getInstalledMcpServerDir();
+    if (!existsSync(mcpServerSrc)) {
+        logger.warn(`Bundled @principles/pd-mcp-server not found in this installer package (${mcpServerSrc}) — the pd-recall MCP tool stays unavailable in this deployment. Hook/CLI/Console installation is unaffected.`);
+        return false;
+    }
+    const mcpServerPkgJson = path.join(mcpServerSrc, 'package.json');
+    const mcpServerDistEntry = path.join(mcpServerSrc, 'dist', 'index.js');
+    if (!existsSync(mcpServerPkgJson) || !existsSync(mcpServerDistEntry)) {
+        throw new Error('Bundled @principles/pd-mcp-server is incomplete (missing package.json / dist/index.js). Package may be corrupted.');
+    }
+    rmSync(mcpServerDest, { recursive: true, force: true });
+    cpSync(mcpServerSrc, mcpServerDest, { recursive: true });
+    return true;
+}
 function installBundledCore(pluginDir) {
     const coreSrc = path.join(pluginDir, 'core');
     const coreDest = getInstalledCoreDir();
@@ -2598,6 +2633,9 @@ async function installConsoleDependencies() {
     const consoleDest = getInstalledConsoleDir();
     await prepareComponentDependencies(consoleDest, 'Console');
 }
+async function installMcpServerDependencies() {
+    await prepareComponentDependencies(getInstalledMcpServerDir(), 'MCP server');
+}
 const CONSOLE_PORT_MAX_RETRIES = 3;
 /**
  * P0-2 (SPEC v1.2 §5 step 6 / invariant I-4): terminate a child and WAIT for
@@ -3727,6 +3765,19 @@ transaction) {
         // installer builds is an observable skip, not a failure.
         installBundledWorkbuddyAdapter(pluginDir);
         ensureWorkbuddyAdapterResolution();
+        // Gate 4 (PRI-1071): the shared MCP server refreshes with the runtime so
+        // the host launchers' bindings always point at the current canonical
+        // entry. Older installer payloads skip observably (the launchers fail
+        // closed at start with the honest missing-entry state).
+        const mcpServerInstalled = installBundledMcpServer(pluginDir);
+        if (mcpServerInstalled) {
+            ensureComponentFileDependencyLinks(getInstalledMcpServerDir(), 'pd-mcp-server');
+            // The npm-distributed payload ships only dist/ + package.json, and the
+            // MCP server keeps @modelcontextprotocol/server + zod as registry deps
+            // (unlike the file:-linked siblings). Without this pass the launcher
+            // starts an entry whose imports cannot resolve.
+            await installMcpServerDependencies();
+        }
         if (spinner)
             updateProgress(spinner, stepIndex, 'Installing release-manager authority module...');
         installBundledReleaseManagerPackage(pluginDir);