create-principles-disciple 1.92.0 → 1.93.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/console/dist/server/config/AuthConfig.js +6 -0
  2. package/console/dist/server/index.js +31 -16
  3. package/console/dist/server/models/ApprovalsGroupedConsoleModel.js +6 -3
  4. package/console/dist/server/models/ConsoleLifecycleDatasource.js +1 -1
  5. package/console/dist/server/routes/activations.js +4 -0
  6. package/console/dist/server/routes/approvals.js +24 -4
  7. package/console/dist/server/routes/feedback-reports.js +7 -5
  8. package/console/dist/server/routes/lifecycle.js +6 -1
  9. package/console/dist/server/routes/principles.js +10 -2
  10. package/console/dist/server/routes/workspaces.js +4 -0
  11. package/console/dist/ui/components/ui/charts.js +4 -1
  12. package/console/dist/ui/components/ui/markdown.js +9 -5
  13. package/console/dist/ui/utils/enum-labels.js +4 -1
  14. package/console/dist/web/assets/app.js +5 -2
  15. package/core/dist/index.d.ts +0 -1
  16. package/core/dist/index.d.ts.map +1 -1
  17. package/core/dist/index.js +0 -2
  18. package/core/dist/index.js.map +1 -1
  19. package/core/dist/pain-signal.d.ts +11 -71
  20. package/core/dist/pain-signal.d.ts.map +1 -1
  21. package/core/dist/pain-signal.js +10 -120
  22. package/core/dist/pain-signal.js.map +1 -1
  23. package/core/dist/principle-tree-ledger.d.ts +4 -87
  24. package/core/dist/principle-tree-ledger.d.ts.map +1 -1
  25. package/core/dist/principle-tree-ledger.js +51 -148
  26. package/core/dist/principle-tree-ledger.js.map +1 -1
  27. package/core/dist/runtime-v2/__tests__/architecture-regression.test.js +178 -4
  28. package/core/dist/runtime-v2/__tests__/architecture-regression.test.js.map +1 -1
  29. package/core/dist/runtime-v2/__tests__/barrel-io-cleanup.test.d.ts +12 -0
  30. package/core/dist/runtime-v2/__tests__/barrel-io-cleanup.test.d.ts.map +1 -0
  31. package/core/dist/runtime-v2/__tests__/barrel-io-cleanup.test.js +46 -0
  32. package/core/dist/runtime-v2/__tests__/barrel-io-cleanup.test.js.map +1 -0
  33. package/core/dist/runtime-v2/__tests__/io-deletion.test.d.ts +12 -0
  34. package/core/dist/runtime-v2/__tests__/io-deletion.test.d.ts.map +1 -0
  35. package/core/dist/runtime-v2/__tests__/io-deletion.test.js +92 -0
  36. package/core/dist/runtime-v2/__tests__/io-deletion.test.js.map +1 -0
  37. package/core/dist/runtime-v2/__tests__/ledger-codec.test.d.ts +2 -0
  38. package/core/dist/runtime-v2/__tests__/ledger-codec.test.d.ts.map +1 -0
  39. package/core/dist/runtime-v2/__tests__/ledger-codec.test.js +429 -0
  40. package/core/dist/runtime-v2/__tests__/ledger-codec.test.js.map +1 -0
  41. package/core/dist/runtime-v2/__tests__/ledger-store.test.d.ts +2 -0
  42. package/core/dist/runtime-v2/__tests__/ledger-store.test.d.ts.map +1 -0
  43. package/core/dist/runtime-v2/__tests__/ledger-store.test.js +65 -0
  44. package/core/dist/runtime-v2/__tests__/ledger-store.test.js.map +1 -0
  45. package/core/dist/runtime-v2/__tests__/pain-signal-observability.test.js +146 -0
  46. package/core/dist/runtime-v2/__tests__/pain-signal-observability.test.js.map +1 -1
  47. package/core/dist/runtime-v2/__tests__/pain-signal-unification.test.d.ts +2 -0
  48. package/core/dist/runtime-v2/__tests__/pain-signal-unification.test.d.ts.map +1 -0
  49. package/core/dist/runtime-v2/__tests__/pain-signal-unification.test.js +150 -0
  50. package/core/dist/runtime-v2/__tests__/pain-signal-unification.test.js.map +1 -0
  51. package/core/dist/runtime-v2/adapter/__tests__/test-double-runtime-adapter.test.js +199 -0
  52. package/core/dist/runtime-v2/adapter/__tests__/test-double-runtime-adapter.test.js.map +1 -1
  53. package/core/dist/runtime-v2/diagnostician/__tests__/diag-rootcause-output.test.js +156 -0
  54. package/core/dist/runtime-v2/diagnostician/__tests__/diag-rootcause-output.test.js.map +1 -1
  55. package/core/dist/runtime-v2/index.d.ts +1 -2
  56. package/core/dist/runtime-v2/index.d.ts.map +1 -1
  57. package/core/dist/runtime-v2/index.js +4 -2
  58. package/core/dist/runtime-v2/index.js.map +1 -1
  59. package/core/dist/runtime-v2/principle-tree/ledger-codec.d.ts +30 -0
  60. package/core/dist/runtime-v2/principle-tree/ledger-codec.d.ts.map +1 -0
  61. package/core/dist/runtime-v2/principle-tree/ledger-codec.js +154 -0
  62. package/core/dist/runtime-v2/principle-tree/ledger-codec.js.map +1 -0
  63. package/core/dist/runtime-v2/types/index.d.ts +2 -0
  64. package/core/dist/runtime-v2/types/index.d.ts.map +1 -1
  65. package/core/dist/runtime-v2/types/index.js +1 -0
  66. package/core/dist/runtime-v2/types/index.js.map +1 -1
  67. package/core/dist/runtime-v2/types/ledger-store.d.ts +101 -0
  68. package/core/dist/runtime-v2/types/ledger-store.d.ts.map +1 -0
  69. package/core/dist/runtime-v2/types/ledger-store.js +15 -0
  70. package/core/dist/runtime-v2/types/ledger-store.js.map +1 -0
  71. package/core/dist/runtime-v2/types/pain-signal.d.ts +5 -3
  72. package/core/dist/runtime-v2/types/pain-signal.d.ts.map +1 -1
  73. package/core/dist/runtime-v2/types/pain-signal.js +23 -3
  74. package/core/dist/runtime-v2/types/pain-signal.js.map +1 -1
  75. package/core/package.json +3 -3
  76. package/dist/installer.d.ts.map +1 -1
  77. package/dist/installer.js +9 -3
  78. package/dist/installer.js.map +1 -1
  79. package/dist/mvp-config.d.ts.map +1 -1
  80. package/dist/mvp-config.js +3 -2
  81. package/dist/mvp-config.js.map +1 -1
  82. package/dist/utils/env.d.ts.map +1 -1
  83. package/dist/utils/env.js +10 -4
  84. package/dist/utils/env.js.map +1 -1
  85. package/package.json +1 -1
  86. package/pd-cli/dist/commands/__tests__/legacy-cleanup.test.js +11 -3
  87. package/pd-cli/dist/commands/__tests__/legacy-cleanup.test.js.map +1 -1
  88. package/pd-cli/dist/commands/candidate.d.ts.map +1 -1
  89. package/pd-cli/dist/commands/candidate.js +2 -1
  90. package/pd-cli/dist/commands/candidate.js.map +1 -1
  91. package/pd-cli/dist/commands/health.d.ts.map +1 -1
  92. package/pd-cli/dist/commands/health.js +2 -1
  93. package/pd-cli/dist/commands/health.js.map +1 -1
  94. package/pd-cli/dist/commands/runtime-internalization-integrity.d.ts.map +1 -1
  95. package/pd-cli/dist/commands/runtime-internalization-integrity.js +3 -1
  96. package/pd-cli/dist/commands/runtime-internalization-integrity.js.map +1 -1
  97. package/pd-cli/dist/commands/runtime-uat.d.ts.map +1 -1
  98. package/pd-cli/dist/commands/runtime-uat.js +4 -1
  99. package/pd-cli/dist/commands/runtime-uat.js.map +1 -1
  100. package/pd-cli/dist/legacy/session-history-import.js +7 -5
  101. package/pd-cli/dist/legacy/session-history-import.js.map +1 -1
  102. package/pd-cli/dist/services/__tests__/runtime-adapter-resolver.test.js +13 -2
  103. package/pd-cli/dist/services/__tests__/runtime-adapter-resolver.test.js.map +1 -1
  104. package/pd-cli/dist/services/pain-flood-simulation-runner.d.ts.map +1 -1
  105. package/pd-cli/dist/services/pain-flood-simulation-runner.js +6 -2
  106. package/pd-cli/dist/services/pain-flood-simulation-runner.js.map +1 -1
  107. package/pd-cli/dist/services/runtime-adapter-resolver.d.ts.map +1 -1
  108. package/pd-cli/dist/services/runtime-adapter-resolver.js +6 -4
  109. package/pd-cli/dist/services/runtime-adapter-resolver.js.map +1 -1
  110. package/plugin/dist/commands/capabilities.js +3 -2
  111. package/plugin/dist/commands/disable-impl.js +1 -1
  112. package/plugin/dist/commands/focus.js +10 -2
  113. package/plugin/dist/commands/rollback-impl.js +1 -1
  114. package/plugin/dist/commands/thinking-os.js +5 -1
  115. package/plugin/dist/core/correction-cue-learner.js +2 -0
  116. package/plugin/dist/core/event-log.js +17 -10
  117. package/plugin/dist/core/focus-history.js +1 -1
  118. package/plugin/dist/core/hygiene/tracker.js +3 -3
  119. package/plugin/dist/core/principle-compiler/compiler.js +2 -0
  120. package/plugin/dist/core/replay-engine.js +1 -1
  121. package/plugin/dist/core/rule-host.js +3 -1
  122. package/plugin/dist/core/thinking-os-parser.js +13 -4
  123. package/plugin/dist/hooks/trajectory-collector.d.ts +20 -4
  124. package/plugin/dist/hooks/trajectory-collector.js +95 -156
  125. package/plugin/dist/index.js +7 -2
  126. package/plugin/dist/openclaw-sdk.d.ts +4 -1
  127. package/plugin/dist/service/evolution-worker.js +7 -3
  128. package/plugin/dist/service/internalization-auto-consumer-service.js +2 -1
  129. package/plugin/dist/service/runtime-summary-service.js +8 -1
  130. package/plugin/dist/service/workflow-watchdog.js +2 -1
  131. package/plugin/dist/utils/retry.js +7 -2
  132. package/plugin/dist/utils/session-key.js +4 -1
  133. package/core/dist/io.d.ts +0 -35
  134. package/core/dist/io.d.ts.map +0 -1
  135. package/core/dist/io.js +0 -95
  136. package/core/dist/io.js.map +0 -1
@@ -1,127 +1,79 @@
1
1
  /**
2
2
  * Trajectory Collector - message write trajectory recording
3
3
  *
4
- * Records message data to memory/trajectories/ JSONL files.
5
- * PRI-347 removed tool_call and llm_output JSONL writers (no consumers).
6
- * PRI-346 will repurpose handleBeforeMessageWrite for SQLite collection.
4
+ * Fallback trajectory collection when llm_output is blocked by missing
5
+ * allowConversationAccess. before_message_write is NOT in
6
+ * CONVERSATION_HOOK_NAMES so OpenClaw always delivers it.
7
+ *
8
+ * SQLite writes are enqueued to an async queue because before_message_write is
9
+ * a SYNCHRONOUS OpenClaw hook — the handler must return immediately. better-sqlite3
10
+ * is synchronous, so calling it directly would block the message-write main path.
11
+ * Trade-off: in degradation mode the last few queued writes may be lost on
12
+ * process exit; this is acceptable because degradation mode is already caused
13
+ * by a config problem (missing allowConversationAccess), and the primary
14
+ * llm_output path is authoritative when authorized.
15
+ *
16
+ * JSONL writing was removed (no consumers — verified zero readers across the
17
+ * codebase; PRI-347 already removed tool_call/llm_output JSONL writers).
18
+ *
19
+ * ERR-002: fallback errors are logged, never silent.
20
+ * ERR-001/005: content is sanitized before persisting.
7
21
  */
8
- import * as fs from 'fs';
9
- import * as path from 'path';
10
22
  import { MAX_STRING_LENGTH } from '../config/defaults/runtime.js';
11
23
  import { WorkspaceContext } from '../core/workspace-context.js';
12
24
  import { SystemLogger } from '../core/system-logger.js';
13
25
  import { sanitizeForEvidence } from './message-sanitize.js';
14
26
  import { checkConversationAccessConfig } from '../core/config-health.js';
15
- const TRAJECTORY_DIR = 'memory/trajectories/';
16
- // 敏感字段匹配正则
17
- const SENSITIVE_KEY_PATTERN = /password|token|authorization|secret|api[_-]?key|credential|cookie|session/i;
18
- /**
19
- * 递归脱敏处理:遍历对象/数组,移除敏感字段值
20
- */
21
- function scrubSensitive(obj, depth = 0) {
22
- // 防止无限递归
23
- if (depth > 10)
24
- return '[MAX_DEPTH]';
25
- // 处理 null/undefined
26
- if (obj == null)
27
- return obj;
28
- // 处理基本类型
29
- if (typeof obj !== 'object') {
30
- if (typeof obj === 'string' && obj.length > MAX_STRING_LENGTH) {
31
- return obj.slice(0, MAX_STRING_LENGTH) + '...[truncated]';
32
- }
33
- return obj;
34
- }
35
- // 处理数组
36
- if (Array.isArray(obj)) {
37
- return obj.map(item => scrubSensitive(item, depth + 1));
38
- }
39
- // 处理对象
40
- const result = {};
41
- for (const [key, value] of Object.entries(obj)) {
42
- if (SENSITIVE_KEY_PATTERN.test(key)) {
43
- result[key] = '[REDACTED]';
44
- }
45
- else {
46
- result[key] = scrubSensitive(value, depth + 1);
47
- }
48
- }
49
- return result;
50
- }
51
27
  /**
52
- * 异步写入队列 - 确保有序、非阻塞写入
28
+ * Async write queue — ensures ordered, non-blocking execution of SQLite writes.
29
+ * before_message_write is a sync hook; SQLite I/O must not block it.
30
+ *
31
+ * Tasks are deferred to the microtask queue via `queueMicrotask` so the sync
32
+ * hook handler returns before any synchronous better-sqlite3 work runs.
53
33
  */
54
34
  class AsyncWriteQueue {
55
35
  queue = [];
56
36
  processing = false;
57
- async enqueue(task) {
37
+ enqueue(task) {
58
38
  this.queue.push(task);
59
39
  if (!this.processing) {
60
- this.processNext();
40
+ this.processing = true;
41
+ queueMicrotask(() => { void this.processNext(); });
61
42
  }
62
43
  }
63
44
  async processNext() {
64
- if (this.queue.length === 0) {
65
- this.processing = false;
66
- return;
67
- }
68
- this.processing = true;
69
- const task = this.queue.shift();
70
- if (!task) {
71
- this.processing = false;
72
- return;
45
+ while (this.queue.length > 0) {
46
+ const task = this.queue.shift();
47
+ if (!task)
48
+ break;
49
+ try {
50
+ await task();
51
+ }
52
+ catch (err) {
53
+ // EP-03/ERR-002: safety net — tasks should catch their own errors with
54
+ // structured logging. This catches bugs where a task's try/catch is
55
+ // missing or re-throws. Never silently swallow (ERR-002).
56
+ console.warn('[PD:trajectory-queue] uncaught task error:', err);
57
+ }
73
58
  }
74
- try {
75
- await task();
76
- }
77
- catch {
78
- // Silently fail - trajectory collection should not block main functionality
79
- }
80
- // 处理下一个任务
81
- this.processNext();
59
+ this.processing = false;
82
60
  }
83
61
  }
84
- // 全局写入队列实例
85
62
  const writeQueue = new AsyncWriteQueue();
86
- // 目录缓存(避免重复检查)
87
- const dirCache = new Map();
88
63
  /**
89
- * 确保轨迹目录存在(异步)
64
+ * Extract text content from a message (string or content-part array).
90
65
  */
91
- async function ensureTrajectoryDirAsync(workspaceDir) {
92
- const dir = path.join(workspaceDir, TRAJECTORY_DIR);
93
- if (dirCache.get(dir)) {
94
- return dir;
95
- }
96
- try {
97
- await fs.promises.mkdir(dir, { recursive: true });
98
- dirCache.set(dir, true);
66
+ function extractContent(content) {
67
+ if (typeof content === 'string') {
68
+ return content;
99
69
  }
100
- catch {
101
- // 目录可能已存在,忽略错误
102
- dirCache.set(dir, true);
70
+ if (Array.isArray(content)) {
71
+ return content
72
+ .filter((part) => part && typeof part === 'object' && part.type === 'text')
73
+ .map((part) => part.text)
74
+ .join('\n');
103
75
  }
104
- return dir;
105
- }
106
- /**
107
- * 获取今日轨迹文件名
108
- */
109
- function getTodayFilename() {
110
- const now = new Date();
111
- const year = now.getUTCFullYear();
112
- const month = String(now.getUTCMonth() + 1).padStart(2, '0');
113
- return `${year}-${month}-${String(now.getUTCDate()).padStart(2, '0')}.jsonl`;
114
- }
115
- /**
116
- * 写入轨迹记录(JSON Lines 格式)- 异步版本
117
- */
118
- function writeTrajectoryRecord(workspaceDir, record) {
119
- const line = JSON.stringify(record) + '\n';
120
- writeQueue.enqueue(async () => {
121
- const dir = await ensureTrajectoryDirAsync(workspaceDir);
122
- const filepath = path.join(dir, getTodayFilename());
123
- await fs.promises.appendFile(filepath, line, 'utf8');
124
- });
76
+ return '';
125
77
  }
126
78
  /**
127
79
  * PRI-346: Message write hook with SQLite fallback trajectory recording.
@@ -131,7 +83,9 @@ function writeTrajectoryRecord(workspaceDir, record) {
131
83
  * CONVERSATION_HOOK_NAMES, so it always fires — making it the natural fallback.
132
84
  *
133
85
  * De-duplication: only writes to SQLite when llm_output is blocked (unauthorized).
134
- * When llm_output is working (authorized), this hook degrades to JSONL-only.
86
+ * When llm_output is working (authorized), this hook is a no-op.
87
+ *
88
+ * SQLite writes are async-queued (see file header) to avoid blocking the sync hook.
135
89
  *
136
90
  * ERR-002: structured observability when fallback fires.
137
91
  * ERR-001/005: content is sanitized before persisting.
@@ -146,73 +100,58 @@ export function handleBeforeMessageWrite(event, ctx) {
146
100
  // Only record user and assistant messages
147
101
  if (msg.role !== 'user' && msg.role !== 'assistant')
148
102
  return;
149
- // Extract text content (consistent with existing implementation)
150
- let content = '';
151
- if (typeof msg.content === 'string') {
152
- content = msg.content;
153
- }
154
- else if (Array.isArray(msg.content)) {
155
- content = msg.content
156
- .filter((part) => part && typeof part === 'object' && part.type === 'text')
157
- .map((part) => part.text)
158
- .join('\n');
159
- }
160
- // Sanitize content preview for JSONL
161
- const sanitizedPreview = scrubSensitive(content.slice(0, 200));
162
- // Existing JSONL write (always, for backward compatibility)
163
- writeTrajectoryRecord(workspaceDir, {
164
- type: 'message',
165
- timestamp: new Date().toISOString(),
166
- sessionId: event.sessionKey || event.sessionId || 'unknown',
167
- role: msg.role,
168
- contentLength: content.length,
169
- contentPreview: typeof sanitizedPreview === 'string' ? sanitizedPreview : '[sanitized]',
170
- agentId: event.agentId || null,
171
- fallback: 'before_message_write',
172
- });
173
103
  // ── SQLite fallback (PRI-346): only when conversation hooks are blocked ──
174
104
  const accessCheck = checkConversationAccessConfig(ctx.pluginConfig);
175
105
  if (accessCheck.authorized) {
176
106
  // llm_output is working — do NOT duplicate write to SQLite (de-dup, case D)
177
107
  return;
178
108
  }
179
- // Conversation hooks blocked — this hook is the fallback trajectory writer
109
+ // Conversation hooks blocked — this hook is the fallback trajectory writer.
110
+ // Enqueue SQLite writes to avoid blocking the sync before_message_write hook.
111
+ const logger = ctx.logger;
112
+ const content = extractContent(msg.content);
113
+ const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
114
+ const createdAt = new Date().toISOString();
180
115
  if (msg.role === 'assistant') {
181
- try {
182
- const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger: ctx.logger });
183
- const sanitized = sanitizeForEvidence(content.slice(0, MAX_STRING_LENGTH), workspaceDir);
184
- const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
185
- wctx.trajectory?.recordAssistantTurn?.({
186
- sessionId,
187
- runId: 'before_message_write_fallback',
188
- provider: 'unknown',
189
- model: 'unknown',
190
- rawText: content,
191
- sanitizedText: sanitized,
192
- usageJson: {},
193
- empathySignalJson: { detected: false, severity: 'mild', confidence: 1 },
194
- createdAt: new Date().toISOString(),
195
- });
196
- }
197
- catch (err) {
198
- ctx.logger?.warn?.(`[PD:before_message_write] SQLite fallback write failed: ${String(err)}`);
199
- }
116
+ writeQueue.enqueue(async () => {
117
+ try {
118
+ const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
119
+ const sanitized = sanitizeForEvidence(content.slice(0, MAX_STRING_LENGTH), workspaceDir);
120
+ wctx.trajectory?.recordAssistantTurn?.({
121
+ sessionId,
122
+ runId: 'before_message_write_fallback',
123
+ provider: 'unknown',
124
+ model: 'unknown',
125
+ rawText: content,
126
+ sanitizedText: sanitized,
127
+ usageJson: {},
128
+ empathySignalJson: { detected: false, severity: 'mild', confidence: 1 },
129
+ createdAt,
130
+ });
131
+ }
132
+ catch (err) {
133
+ // EP-03/ERR-002: observable degradation, never silent
134
+ logger?.warn?.(`[PD:before_message_write] SQLite fallback write failed: ${String(err)}`);
135
+ }
136
+ });
200
137
  }
201
138
  else if (msg.role === 'user') {
202
- try {
203
- const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger: ctx.logger });
204
- const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
205
- wctx.trajectory?.recordUserTurn?.({
206
- sessionId,
207
- turnIndex: 0,
208
- rawText: content.slice(0, MAX_STRING_LENGTH),
209
- correctionDetected: false,
210
- createdAt: new Date().toISOString(),
211
- });
212
- }
213
- catch (err) {
214
- ctx.logger?.warn?.(`[PD:before_message_write] SQLite user turn fallback failed: ${String(err)}`);
215
- }
139
+ writeQueue.enqueue(async () => {
140
+ try {
141
+ const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
142
+ wctx.trajectory?.recordUserTurn?.({
143
+ sessionId,
144
+ turnIndex: 0,
145
+ rawText: content.slice(0, MAX_STRING_LENGTH),
146
+ correctionDetected: false,
147
+ createdAt,
148
+ });
149
+ }
150
+ catch (err) {
151
+ // EP-03/ERR-002: observable degradation, never silent
152
+ logger?.warn?.(`[PD:before_message_write] SQLite user turn fallback failed: ${String(err)}`);
153
+ }
154
+ });
216
155
  }
217
156
  // ERR-002: Structured observability — no silent fallback
218
157
  SystemLogger.log(workspaceDir, 'CONVERSATION_HOOK_BLOCKED', JSON.stringify({
@@ -266,6 +266,9 @@ const plugin = {
266
266
  }
267
267
  }));
268
268
  // ── Hook: Pain & Trust ──
269
+ // timeoutMs=10s: OpenClaw has no default timeout for after_tool_call; without
270
+ // this a stuck SQLite write (busy_timeout=5000ms) leaks the handler promise.
271
+ // 10s gives 2x headroom over busy_timeout. fail-open means agent is unaffected.
269
272
  api.on('after_tool_call', guardHook('hook:after_tool_call', api.logger, (event, ctx) => {
270
273
  const wsResult = resolveHookWorkspaceDir(ctx, api, 'after_tool_call');
271
274
  if (!wsResult.ok) {
@@ -294,8 +297,10 @@ const plugin = {
294
297
  }, { flushImmediately: true });
295
298
  api.logger.error(`[PD:EmpathyObserver] Error in after_tool_call: ${String(err)}`);
296
299
  }
297
- }));
300
+ }), { timeoutMs: 10_000 });
298
301
  // ── Hook: LLM Analysis ──
302
+ // timeoutMs=10s: OpenClaw has no default timeout for llm_output; without
303
+ // this a stuck SQLite write leaks the handler promise. See after_tool_call.
299
304
  api.on('llm_output', guardHook('hook:llm_output', api.logger, (event, ctx) => {
300
305
  const wsResult = resolveHookWorkspaceDir(ctx, api, 'llm_output');
301
306
  if (!wsResult.ok) {
@@ -325,7 +330,7 @@ const plugin = {
325
330
  });
326
331
  api.logger.error(`[PD] Error in llm_output: ${String(err)}`);
327
332
  }
328
- }));
333
+ }), { timeoutMs: 10_000 });
329
334
  // ── Hook: Lifecycle ──
330
335
  api.on('before_reset', guardHook('hook:before_reset', api.logger, (event, ctx) => {
331
336
  const wsResult = resolveHookWorkspaceDir(ctx, api, 'before_reset');
@@ -151,7 +151,10 @@ export interface OpenClawPluginApi {
151
151
  text: (content: string, code?: number) => void;
152
152
  }) => boolean | Promise<boolean>;
153
153
  }) => void;
154
- on: (event: string, handler: (...args: any[]) => unknown) => void;
154
+ on: (event: string, handler: (...args: any[]) => unknown, opts?: {
155
+ priority?: number;
156
+ timeoutMs?: number;
157
+ }) => void;
155
158
  }
156
159
  export interface PluginHookBeforePromptBuildEvent {
157
160
  agentId?: string;
@@ -93,7 +93,8 @@ export function purgeStaleFailedTasks(queue, logger) {
93
93
  // Remove purged items from the queue (mutates in place)
94
94
  const purgedIds = new Set(purged.map((t) => t.id));
95
95
  for (let i = queue.length - 1; i >= 0; i--) {
96
- if (purgedIds.has(queue[i].id))
96
+ const task = queue[i];
97
+ if (task && purgedIds.has(task.id))
97
98
  queue.splice(i, 1);
98
99
  }
99
100
  const summary = Object.entries(byReason)
@@ -377,17 +378,20 @@ async function processDetectionQueue(wctx, api, eventLog) {
377
378
  if (wctx.trajectory) {
378
379
  const searchResults = wctx.trajectory.searchPainEvents(text, 5);
379
380
  if (searchResults.length > 0) {
381
+ const topResult = searchResults[0];
382
+ if (!topResult)
383
+ continue;
380
384
  // Found similar pain events - record as L3 semantic hit
381
385
  if (eventLog) {
382
386
  eventLog.recordRuleMatch(undefined, {
383
387
  ruleId: 'l3_semantic',
384
388
  layer: 'L3',
385
- severity: searchResults[0].score,
389
+ severity: topResult.score,
386
390
  textPreview: text.substring(0, 100)
387
391
  });
388
392
  }
389
393
  // Update detection funnel cache with L3 hit result
390
- funnel.updateCache(text, { detected: true, severity: searchResults[0].score });
394
+ funnel.updateCache(text, { detected: true, severity: topResult.score });
391
395
  // Don't track as candidate - this is a confirmed L3 hit
392
396
  if (logger)
393
397
  logger.info(`[PD:EvolutionWorker] L3 semantic hit: found ${searchResults.length} similar pain events for "${text.substring(0, 50)}..."`);
@@ -1,4 +1,5 @@
1
- import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, DefaultDreamerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, buildL2PrincipleReaderFromLedger, loadLedger, OpenClawCliRuntimeAdapter, storeEmitter, resolveRuntimeConfigFromPdConfig, isRuntimeConfigError, computeConsumerDecision, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, } from '@principles/core/runtime-v2';
1
+ import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, DefaultDreamerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, buildL2PrincipleReaderFromLedger, OpenClawCliRuntimeAdapter, storeEmitter, resolveRuntimeConfigFromPdConfig, isRuntimeConfigError, computeConsumerDecision, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, } from '@principles/core/runtime-v2';
2
+ import { loadLedger } from '@principles/core/principle-tree-ledger';
2
3
  import { loadPdConfigForPlugin, loadFeatureFlagFromConfig } from '../core/pd-config-loader.js';
3
4
  import { SystemLogger } from '../core/system-logger.js';
4
5
  const INTERNALIZATION_AUTO_CONSUMER_INTERVAL_MS = 120_000;
@@ -290,7 +290,10 @@ export class RuntimeSummaryService {
290
290
  if (sessions.length === 0) {
291
291
  return { session: null, reason: 'none' };
292
292
  }
293
- return { session: sessions[0], reason: 'latest_active' };
293
+ const session = sessions[0];
294
+ if (!session)
295
+ return { session: null, reason: 'none' };
296
+ return { session, reason: 'latest_active' };
294
297
  }
295
298
  static mergeSessionSnapshots(persistedSessions, workspaceDir) {
296
299
  const merged = new Map();
@@ -392,6 +395,8 @@ export class RuntimeSummaryService {
392
395
  if (!m)
393
396
  continue;
394
397
  const fileDate = m[1];
398
+ if (!fileDate)
399
+ continue;
395
400
  if (fileDate > newestDate) {
396
401
  newestDate = fileDate;
397
402
  bestFile = path.join(dir, file);
@@ -463,6 +468,8 @@ export class RuntimeSummaryService {
463
468
  static findLastPainSignal(events, sessionId) {
464
469
  for (let i = events.length - 1; i >= 0; i--) {
465
470
  const entry = events[i];
471
+ if (!entry)
472
+ continue;
466
473
  if (entry.type !== 'pain_signal')
467
474
  continue;
468
475
  if (sessionId && entry.sessionId !== sessionId)
@@ -32,7 +32,8 @@ export async function runWorkflowWatchdog(wctx, api, logger) {
32
32
  const ageMin = Math.round((now - wf.created_at) / 60000);
33
33
  details.push(`stale_active: ${wf.workflow_id} (${wf.workflow_type}, ${ageMin}min old)`);
34
34
  const events = store.getEvents(wf.workflow_id);
35
- const lastEventReason = events.length > 0 ? events[events.length - 1].reason : 'unknown';
35
+ const lastEvent = events[events.length - 1];
36
+ const lastEventReason = lastEvent ? lastEvent.reason : 'unknown';
36
37
  if (isExpectedSubagentError(lastEventReason)) {
37
38
  logger?.debug?.(`[PD:Watchdog] Skipping stale active workflow ${wf.workflow_id}: expected subagent error (${lastEventReason})`);
38
39
  continue;
@@ -245,11 +245,13 @@ export function percentile(values, p) {
245
245
  const n = sorted.length;
246
246
  // For small samples, use median to avoid overfitting
247
247
  if (n < 10) {
248
- return sorted[Math.floor(n / 2)];
248
+ const median = sorted[Math.floor(n / 2)];
249
+ return median ?? 0;
249
250
  }
250
251
  // Standard percentile calculation (nearest-rank method)
251
252
  const rank = Math.ceil((p / 100) * n);
252
- return sorted[Math.min(rank, n) - 1];
253
+ const result = sorted[Math.min(rank, n) - 1];
254
+ return result ?? 0;
253
255
  }
254
256
  /**
255
257
  * Clamp timeout to safe bounds.
@@ -317,6 +319,9 @@ export function computeAdaptiveTimeout(history, fallbackMs, options = {}) {
317
319
  const sorted = [...history].sort((a, b) => a - b);
318
320
  const rank = Math.ceil((p / 100) * sorted.length);
319
321
  const pValue = sorted[Math.min(rank, sorted.length) - 1];
322
+ if (pValue === undefined) {
323
+ return Math.max(minTimeoutMs, Math.min(maxTimeoutMs, fallbackMs));
324
+ }
320
325
  const adaptive = pValue * safetyMultiplier;
321
326
  return Math.max(minTimeoutMs, Math.min(maxTimeoutMs, Math.round(adaptive)));
322
327
  }
@@ -13,6 +13,9 @@ export function extractAgentIdFromSessionKey(sessionKey) {
13
13
  const match = /^agent:([^:]+):/.exec(sessionKey);
14
14
  if (!match)
15
15
  return undefined;
16
- const agentId = match[1].trim();
16
+ const raw = match[1];
17
+ if (!raw)
18
+ return undefined;
19
+ const agentId = raw.trim();
17
20
  return agentId || undefined;
18
21
  }
package/core/dist/io.d.ts DELETED
@@ -1,35 +0,0 @@
1
- /**
2
- * I/O utilities for @principles/core SDK.
3
- *
4
- * Provides atomic file write operations that are crash-safe.
5
- * No dependencies on openclaw-plugin — self-contained.
6
- */
7
- /**
8
- * AsyncQueueLock — lightweight in-process async queue lock.
9
- * Serializes async operations on the same key within a single Node.js process.
10
- * NOT a distributed lock — use for CLI-in-process concurrency only.
11
- */
12
- export declare class AsyncQueueLock {
13
- private readonly queues;
14
- /**
15
- * Execute a function while holding an exclusive lock on the given key.
16
- * Uses a promise chain to serialize operations — only one operation runs at a time
17
- * for any given key within this process.
18
- *
19
- * @param key - Lock key (e.g. file path to serialize)
20
- * @param fn - Async function to execute
21
- */
22
- withLock<T>(key: string, fn: () => Promise<T>): Promise<T>;
23
- }
24
- /**
25
- * Atomic file write — write to temp file then rename.
26
- *
27
- * Prevents corruption if process crashes mid-write.
28
- * On Windows, retries with exponential backoff on EPERM/EBUSY/EACCES
29
- * to handle transient file locks.
30
- *
31
- * @param filePath - Target file path
32
- * @param data - Content to write (UTF-8 string)
33
- */
34
- export declare function atomicWriteFileSync(filePath: string, data: string): void;
35
- //# sourceMappingURL=io.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAE3D;;;;;;;OAOG;IACG,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAkBjE;AAQD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAiCxE"}
package/core/dist/io.js DELETED
@@ -1,95 +0,0 @@
1
- /**
2
- * I/O utilities for @principles/core SDK.
3
- *
4
- * Provides atomic file write operations that are crash-safe.
5
- * No dependencies on openclaw-plugin — self-contained.
6
- */
7
- import * as fs from 'fs';
8
- /**
9
- * AsyncQueueLock — lightweight in-process async queue lock.
10
- * Serializes async operations on the same key within a single Node.js process.
11
- * NOT a distributed lock — use for CLI-in-process concurrency only.
12
- */
13
- export class AsyncQueueLock {
14
- queues = new Map();
15
- /**
16
- * Execute a function while holding an exclusive lock on the given key.
17
- * Uses a promise chain to serialize operations — only one operation runs at a time
18
- * for any given key within this process.
19
- *
20
- * @param key - Lock key (e.g. file path to serialize)
21
- * @param fn - Async function to execute
22
- */
23
- async withLock(key, fn) {
24
- const lockPath = key;
25
- let resolveRelease;
26
- const releasePromise = new Promise(r => { resolveRelease = r; });
27
- const previousQueue = this.queues.get(lockPath) || Promise.resolve();
28
- const currentQueue = previousQueue.then(() => releasePromise);
29
- this.queues.set(lockPath, currentQueue);
30
- try {
31
- await previousQueue;
32
- return await fn();
33
- }
34
- finally {
35
- resolveRelease?.();
36
- if (this.queues.get(lockPath) === currentQueue) {
37
- this.queues.delete(lockPath);
38
- }
39
- }
40
- }
41
- }
42
- // Sync mutex: promise chain for synchronous code sections that need serialization.
43
- // Use for single-process CLI tools that need atomic file access within the same process.
44
- // NOT a distributed lock — each process gets its own chain on import.
45
- const RENAME_MAX_RETRIES = 3;
46
- const RENAME_BASE_DELAY_MS = 50;
47
- /**
48
- * Atomic file write — write to temp file then rename.
49
- *
50
- * Prevents corruption if process crashes mid-write.
51
- * On Windows, retries with exponential backoff on EPERM/EBUSY/EACCES
52
- * to handle transient file locks.
53
- *
54
- * @param filePath - Target file path
55
- * @param data - Content to write (UTF-8 string)
56
- */
57
- export function atomicWriteFileSync(filePath, data) {
58
- const tmpPath = filePath + '.tmp';
59
- fs.writeFileSync(tmpPath, data, 'utf8');
60
- let lastError;
61
- for (let attempt = 0; attempt < RENAME_MAX_RETRIES; attempt++) {
62
- try {
63
- fs.renameSync(tmpPath, filePath);
64
- return;
65
- }
66
- catch (err) {
67
- lastError = err;
68
- const { code } = /** @type {{ code?: string }} */ err;
69
- // Only retry on Windows transient lock errors
70
- if (code === 'EPERM' || code === 'EBUSY' || code === 'EACCES') {
71
- if (attempt < RENAME_MAX_RETRIES - 1) {
72
- const delay = RENAME_BASE_DELAY_MS * Math.pow(2, attempt);
73
- // Synchronous sleep using a tight spin with accessSync yield
74
- const waitUntil = Date.now() + delay;
75
- while (Date.now() < waitUntil) {
76
- try {
77
- fs.accessSync?.(tmpPath);
78
- }
79
- catch { /* ignore */ }
80
- }
81
- }
82
- continue;
83
- }
84
- // Non-retryable error — throw immediately
85
- break;
86
- }
87
- }
88
- // Clean up temp file on failure
89
- try {
90
- fs.unlinkSync(tmpPath);
91
- }
92
- catch { /* best effort */ }
93
- throw lastError ?? new Error('atomicWriteFileSync: rename failed');
94
- }
95
- //# sourceMappingURL=io.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"io.js","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE3D;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAI,GAAW,EAAE,EAAoB;QACjD,MAAM,QAAQ,GAAG,GAAG,CAAC;QAErB,IAAI,cAAwC,CAAC;QAC7C,MAAM,cAAc,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrE,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,aAAa,CAAC;YACpB,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,cAAc,EAAE,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,YAAY,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,mFAAmF;AACnF,yFAAyF;AACzF,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAY;IAC9D,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAGxC,IAAI,SAA4B,CAAC;IACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjC,OAAO;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,SAAS,GAAG,GAAY,CAAC;YACzB,MAAM,EAAE,IAAI,EAAE,GAAG,gCAAgC,CAAE,GAAyB,CAAC;YAC7E,8CAA8C;YAC9C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,IAAI,OAAO,GAAG,kBAAkB,GAAG,CAAC,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC1D,6DAA6D;oBAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;oBACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;wBAC5B,IAAI,CAAC;4BAAC,EAAE,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAC5D,CAAC;gBACL,CAAC;gBACD,SAAS;YACb,CAAC;YACD,0CAA0C;YAC1C,MAAM;QACV,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACvE,CAAC"}