create-principles-disciple 1.93.0 → 1.94.0

package/core/dist/prompt-builder/xml-escape.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Escape special XML characters in a string.
+ *
+ * Pure logic — no I/O, no side effects.
+ *
+ * Used by prompt injection to safely embed user/principle text into XML-style
+ * prompt markers (e.g. `<directive id="...">...</directive>`). Also accepted
+ * as a callback by `trimToBudget` and `renderPrinciplesToDirectives` in
+ * `runtime-v2/activation/prompt-activation-reader-contract.ts`.
+ */
+export declare function escapeXml(input: string): string;
+//# sourceMappingURL=xml-escape.d.ts.map

package/core/dist/prompt-builder/xml-escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml-escape.d.ts","sourceRoot":"","sources":["../../src/prompt-builder/xml-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO/C"}

package/core/dist/prompt-builder/xml-escape.js

@@ -0,0 +1,19 @@
+/**
+ * Escape special XML characters in a string.
+ *
+ * Pure logic — no I/O, no side effects.
+ *
+ * Used by prompt injection to safely embed user/principle text into XML-style
+ * prompt markers (e.g. `<directive id="...">...</directive>`). Also accepted
+ * as a callback by `trimToBudget` and `renderPrinciplesToDirectives` in
+ * `runtime-v2/activation/prompt-activation-reader-contract.ts`.
+ */
+export function escapeXml(input) {
+    return input
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+//# sourceMappingURL=xml-escape.js.map

package/core/dist/prompt-builder/xml-escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml-escape.js","sourceRoot":"","sources":["../../src/prompt-builder/xml-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC"}

package/core/dist/runtime-v2/__tests__/architecture-regression.test.js

@@ -195,6 +195,12 @@ const REQUIRED_SOURCE_FILES = [
     'activation/approval-completion-service.ts',
     // PRI-431: L2 principle reader (pure logic, extracted from pd-cli + plugin duplicates)
     'build-l2-principle-reader.ts',
+    // PRI-446: pure logic migrated from openclaw-plugin into core
+    'evidence-triage/observation-resolver.ts',
+    'pain-gate/pain-diagnostic-gate-policy.ts',
+    'pain-gate/index.ts',
+    'detection/detection-funnel-policy.ts',
+    'detection/index.ts',
 ];
 // ── PRI-212: Plugin core anti-growth guard ────────────────────────────────────
 //
@@ -247,6 +253,9 @@ const KNOWN_PLUGIN_CORE_FILES = new Set([
     'schema/migration-runner.ts',
     'rule-host.ts',
     'principle-training-state.ts',
+    // PRI-446: now a thin adapter delegating pure decision logic to
+    // runtime-v2/pain-gate/pain-diagnostic-gate-policy.ts. Kept here because it
+    // owns the cooldown Map + SystemLogger + Date.now side effects.
     'pain-diagnostic-gate.ts',
     'hygiene/tracker.ts',
     'schema/migrations/002-init-central.ts',
@@ -289,6 +298,9 @@ const KNOWN_PLUGIN_CORE_FILES = new Set([
     'dictionary.ts',
     'thinking-os-parser.ts',
     'system-logger.ts',
+    // PRI-446: now a thin shell wiring DetectionFunnelCore (core runtime-v2/detection)
+    // with crypto.createHash + PainDictionary. Kept here because it owns the
+    // crypto + dictionary I/O boundary.
     'detection-funnel.ts',
     'risk-calculator.ts',
     'migration.ts',
@@ -361,6 +373,9 @@ describe('PRI-212 plugin core anti-growth guard', () => {
         // model-training-registry.ts, model-deployment-registry.ts,
         // shadow-observation-registry.ts (98 → 93)
         // PRI-449: Removed external-training-contract.ts (93 → 92)
+        // PRI-446: pain-diagnostic-gate.ts and detection-funnel.ts remain at 92 —
+        // they are now thin adapters delegating pure logic to core, but still live
+        // in plugin src/core/ and own I/O side effects, so they stay classified.
         expect(KNOWN_PLUGIN_CORE_FILES.size).toBe(92);
     });
 });
@@ -597,6 +612,30 @@ describe('PRI-42 internalization boundary', () => {
             expect(src).not.toContain('../../../openclaw-plugin');
         }
     });
+    it('PRI-446: pain-gate has zero openclaw-plugin imports', async () => {
+        const { existsSync, readdirSync, readFileSync } = await import('node:fs');
+        const { resolve, join } = await import('node:path');
+        const dir = resolve(__dirname, '..', 'pain-gate');
+        expect(existsSync(dir)).toBe(true);
+        const files = readdirSync(dir).filter((f) => f.endsWith('.ts') && !f.endsWith('.test.ts'));
+        for (const file of files) {
+            const src = readFileSync(join(dir, file), 'utf-8');
+            expect(src).not.toContain('openclaw-plugin');
+            expect(src).not.toContain('../../../openclaw-plugin');
+        }
+    });
+    it('PRI-446: detection has zero openclaw-plugin imports', async () => {
+        const { existsSync, readdirSync, readFileSync } = await import('node:fs');
+        const { resolve, join } = await import('node:path');
+        const dir = resolve(__dirname, '..', 'detection');
+        expect(existsSync(dir)).toBe(true);
+        const files = readdirSync(dir).filter((f) => f.endsWith('.ts') && !f.endsWith('.test.ts'));
+        for (const file of files) {
+            const src = readFileSync(join(dir, file), 'utf-8');
+            expect(src).not.toContain('openclaw-plugin');
+            expect(src).not.toContain('../../../openclaw-plugin');
+        }
+    });
     it('plugin does not re-define RuleHost contract types locally', async () => {
         const { existsSync, readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
@@ -1598,6 +1637,16 @@ describe('PRI-75/PRI-74/PRI-81 prompt-builder core boundary', () => {
         // Must NOT have the old multi-line fallback block with attitudeDirective interpolation
         expect(src).not.toMatch(/## 【CONTEXT SECTIONS】\n\n\[WARNING: Context sections stripped/);
     });
+    it('plugin prompt-helpers.ts imports escapeXml from core, not reimplemented', async () => {
+        const { readFileSync } = await import('node:fs');
+        const { resolve } = await import('node:path');
+        const src = readFileSync(resolve(__dirname, '../../../../openclaw-plugin/src/hooks/prompt-helpers.ts'), 'utf-8');
+        // Must import escapeXml from core
+        expect(src).toContain('@principles/core/prompt-builder');
+        expect(src).toMatch(/import\s*\{[^}]*escapeXml[^}]*\}\s*from\s*['"]@principles\/core\/prompt-builder['"]/);
+        // Must NOT reimplement escapeXml inline
+        expect(src).not.toMatch(/\b(function\s+escapeXml\s*\(|const\s+escapeXml\s*=\s*(?:async\s*)?(?:\([^)]*\)|[a-zA-Z_$][\w$]*)\s*=>)/);
+    });
     it('plugin empathy-keyword-matcher.ts is a thin adapter (re-exports from core)', async () => {
         const { readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
@@ -1755,6 +1804,19 @@ describe('PRI-111 ArtificerRunner boundary', () => {
         expect(src).toContain('ArtificerRuleOutputSchema');
     });
 });
+// ── PRI-458: PhilosopherRunner barrel boundary (MVP-Quiet) ─────────────────────
+describe('PRI-458 PhilosopherRunner barrel boundary', () => {
+    it('BARREL_EXPORTS: internalization/index.ts does NOT export PhilosopherRunner (PRI-458 MVP-Quiet)', async () => {
+        // PRI-458: PhilosopherRunner is de-surfaced from the internal barrel (MVP-Quiet).
+        // It remains in runtime-v2/index.ts (public barrel) because rulehost-pipeline-runner.ts
+        // imports it from there (EP-02 exception).
+        const { readFileSync } = await import('node:fs');
+        const { resolve } = await import('node:path');
+        const src = readFileSync(resolve(__dirname, '..', 'internalization', 'index.ts'), 'utf-8');
+        expect(src).not.toContain("from './philosopher-runner.js'");
+        expect(src).not.toContain("from './philosopher-output.js'");
+    });
+});
 // ── PRI-EVAL: EvaluatorRunner boundary guards ──────────────────────────────────
 describe('PRI-EVAL EvaluatorRunner boundary', () => {
     it('evaluator source files exist in internalization directory', async () => {
@@ -1795,13 +1857,17 @@ describe('PRI-EVAL EvaluatorRunner boundary', () => {
         expect(src).not.toContain('node:fs');
         expect(src).not.toContain('node:cron');
     });
-    it('BARREL_EXPORTS: internalization/index.ts exports EvaluatorRunner and EvaluatorOutput', async () => {
+    it('BARREL_EXPORTS: internalization/index.ts does NOT export EvaluatorRunner (PRI-458 MVP-Quiet)', async () => {
+        // PRI-458: EvaluatorRunner is de-surfaced from the internal barrel (MVP-Quiet).
+        // It remains in runtime-v2/index.ts (public barrel) because rulehost-pipeline-runner.ts
+        // imports it from there (EP-02 exception). These negative assertions lock the boundary:
+        // if someone re-aggregates the evaluator exports into this barrel, the test will fail.
         const { readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
         const src = readFileSync(resolve(__dirname, '..', 'internalization', 'index.ts'), 'utf-8');
-        expect(src).toContain('EvaluatorRunner');
-        expect(src).toContain('EvaluatorOutput');
-        expect(src).toContain('DefaultEvaluatorValidator');
+        expect(src).not.toContain("from './evaluator-runner.js'");
+        expect(src).not.toContain("from './evaluator-output.js'");
+        expect(src).not.toContain("from './evaluator-prompt-builder.js'");
     });
     it('SCHEMA_REGISTRY: pi-ai-runtime-adapter.ts registers evaluator-output-v1 schema', async () => {
         const { readFileSync } = await import('node:fs');
@@ -1851,13 +1917,16 @@ describe('PRI-RR RolloutReviewerRunner boundary', () => {
         expect(src).not.toContain('node:fs');
         expect(src).not.toContain('node:cron');
     });
-    it('BARREL_EXPORTS: internalization/index.ts exports RolloutReviewerRunner and RolloutReviewerOutput', async () => {
+    it('BARREL_EXPORTS: internalization/index.ts does NOT export RolloutReviewerRunner (PRI-458 MVP-Quiet)', async () => {
+        // PRI-458: RolloutReviewerRunner is de-surfaced from the internal barrel (MVP-Quiet).
+        // It remains in runtime-v2/index.ts (public barrel) because runtime-internalization-run-once.ts
+        // imports it from there and package.json has no deep import path available (EP-02 exception).
         const { readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
         const src = readFileSync(resolve(__dirname, '..', 'internalization', 'index.ts'), 'utf-8');
-        expect(src).toContain('RolloutReviewerRunner');
-        expect(src).toContain('RolloutReviewerOutput');
-        expect(src).toContain('DefaultRolloutReviewerValidator');
+        expect(src).not.toContain("from './rollout-reviewer-runner.js'");
+        expect(src).not.toContain("from './rollout-reviewer-output.js'");
+        expect(src).not.toContain("from './rollout-reviewer-prompt-builder.js'");
     });
     it('SCHEMA_REGISTRY: pi-ai-runtime-adapter.ts registers rollout-reviewer-output-v1 schema', async () => {
         const { readFileSync } = await import('node:fs');
@@ -2127,12 +2196,14 @@ describe('PRI-117 Nocturnal god-class freeze', () => {
             expect(src).not.toContain('invokeStubScribe');
         }
     });
-    it('RUNTIME_V2_USES_PEER_RUNNERS: DreamerRunner/PhilosopherRunner/ScribeRunner are the canonical entry points', async () => {
+    it('RUNTIME_V2_USES_PEER_RUNNERS: DreamerRunner/ScribeRunner/ArtificerRunner are the canonical MVP-Core entry points', async () => {
+        // PRI-458: narrowed to MVP-Core runners only. PhilosopherRunner (MVP-Quiet)
+        // remains in runtime-v2/index.ts for rulehost-pipeline-runner.ts compatibility
+        // but is no longer asserted as a canonical entry point.
         const { readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
         const src = readFileSync(resolve(__dirname, '..', 'index.ts'), 'utf-8');
         expect(src).toContain('DreamerRunner');
-        expect(src).toContain('PhilosopherRunner');
         expect(src).toContain('ScribeRunner');
         expect(src).toContain('ArtificerRunner');
     });
@@ -2878,7 +2949,7 @@ describe('PRI-225: No unsafe type assertions on untrusted metadata arrays', () =
 // ── PRI-239: Feature flag registry architecture boundary ──────────────────
 //
 // Core: packages/principles-core/src/runtime-v2/feature-flags/feature-flag-contract.ts
-// I/O Loader: packages/pd-cli/src/services/feature-flag-loader.ts
+// I/O Loader: packages/pd-cli/src/services/pd-config-loader.ts (PRI-460: replaced feature-flag-loader.ts)
 // CLI Command: packages/pd-cli/src/commands/runtime-features.ts
 // Consumption: packages/pd-cli/src/commands/runtime-canary.ts (GFI check)
 describe('PRI-239: Feature flag registry architecture boundary', () => {
@@ -2900,10 +2971,10 @@ describe('PRI-239: Feature flag registry architecture boundary', () => {
         expect(src).not.toContain('InternalizationOrchestrator');
         expect(src).not.toContain('SqliteConnection');
     });
-    it('IO_LOADER_OUTSIDE_CORE: I/O loader exists at pd-cli/src/services/feature-flag-loader.ts', async () => {
+    it('IO_LOADER_OUTSIDE_CORE: I/O loader exists at pd-cli/src/services/pd-config-loader.ts', async () => {
         const { existsSync } = await import('node:fs');
         const { resolve } = await import('node:path');
-        expect(existsSync(resolve(__dirname, '../../../../pd-cli/src/services/feature-flag-loader.ts'))).toBe(true);
+        expect(existsSync(resolve(__dirname, '../../../../pd-cli/src/services/pd-config-loader.ts'))).toBe(true);
     });
     it('CLI_COMMAND_OUTSIDE_CORE: CLI command exists at pd-cli/src/commands/runtime-features.ts', async () => {
         const { existsSync } = await import('node:fs');
@@ -2918,12 +2989,12 @@ describe('PRI-239: Feature flag registry architecture boundary', () => {
         expect(src).not.toContain('nocturnal-arbiter');
         expect(src).not.toContain('nocturnal-service');
     });
-    it('CONSUMPTION_WIRED: runtime-canary.ts imports feature flag loader', async () => {
+    it('CONSUMPTION_WIRED: runtime-canary.ts imports canonical PD config loader', async () => {
         const { readFileSync } = await import('node:fs');
         const { resolve } = await import('node:path');
         const src = readFileSync(resolve(__dirname, '../../../../pd-cli/src/commands/runtime-canary.ts'), 'utf-8');
-        expect(src).toContain('feature-flag-loader');
-        expect(src).toContain('loadEffectiveFeatureFlags');
+        expect(src).toContain('pd-config-loader');
+        expect(src).toContain('loadPdConfig');
     });
 });
 describe('PRI-304: PD-Owned Config Contract barrel exports and purity', () => {