principles-disciple 1.11.0 → 1.13.0

package/src/hooks/bash-risk.ts

@@ -38,11 +38,12 @@ export type BashRiskLevel = 'safe' | 'dangerous' | 'normal';
  * @param logger - Optional logger for warnings about invalid patterns
  * @returns The risk level: 'safe', 'dangerous', or 'normal'
  */
+/* eslint-disable @typescript-eslint/max-params -- Reason: Bash risk analysis requires command + pattern lists - refactoring to options object would be breaking API change */
 export function analyzeBashCommand(
   command: string,
   safePatterns: string[],
   dangerousPatterns: string[],
-  logger?: { warn?: (message: string) => void }
+  logger?: { warn?: (/* eslint-disable-line no-unused-vars -- Reason: callback parameter, unused by design */_message: string) => void }
 ): BashRiskLevel {
   let normalizedCmd = command.trim().toLowerCase();
 
@@ -64,6 +65,7 @@ export function analyzeBashCommand(
   // - Zero-width joiner (U+200D)
   // - Word joiner (U+2060)
   // - Zero-width invisible separator (U+FEFF)
+  // eslint-disable-next-line no-misleading-character-class -- Reason: zero-width character class ranges are intentional - documented in comment above
   const ZERO_WIDTH_CHARS = /[\u200B\u200C\u200D\u2060\uFEFF]/g;
   if (ZERO_WIDTH_CHARS.test(command)) {
     logger?.warn?.(`[PD_GATE] Bash command contains zero-width characters — blocking as dangerous`);

package/src/hooks/edit-verification.ts

@@ -44,7 +44,7 @@ export function normalizeLine(line: string): string {
  * @param threshold - Match threshold (0-1)
  * @returns Match index or -1 if not found
  */
-export function findFuzzyMatch(lines: string[], oldLines: string[], threshold: number = 0.8): number {
+export function findFuzzyMatch(lines: string[], oldLines: string[], threshold = 0.8): number {
   if (oldLines.length === 0) return -1;  // P2 fix: empty array boundary check
 
   const normalizedLines = lines.map(normalizeLine);
@@ -75,7 +75,7 @@ export function findFuzzyMatch(lines: string[], oldLines: string[], threshold: n
  * @param threshold - Match threshold (0-1)
  * @returns Object with found status and corrected text if found
  */
-export function tryFuzzyMatch(currentContent: string, oldText: string, threshold: number = 0.8): { found: boolean; correctedText?: string } {
+export function tryFuzzyMatch(currentContent: string, oldText: string, threshold = 0.8): { found: boolean; correctedText?: string } {
   const lines = currentContent.split('\n');
   const oldLines = oldText.split('\n');
 
@@ -126,9 +126,11 @@ This is enforced by P-03 (精确匹配前验证原则).`;
  * Handle edit tool verification before allowing operation
  * This enforces P-03 at the tool layer
  */
+// eslint-disable-next-line @typescript-eslint/max-params -- Reason: Hook handler signature requires event + context + config - refactoring would break plugin interface
 export function handleEditVerification(
   event: PluginHookBeforeToolCallEvent,
   wctx: WorkspaceContext,
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Reason: logger is typed as any by plugin framework - type not available
   ctx: { logger?: any; sessionId?: string },
   config: EditVerificationConfig = {}
 ): PluginHookBeforeToolCallResult | void {
@@ -153,10 +155,11 @@ export function handleEditVerification(
   }
 
   // 2. Resolve and read file
+  // eslint-disable-next-line @typescript-eslint/init-declarations -- assigned in try, catch has early return
   let absolutePath: string;
   try {
     absolutePath = wctx.resolve(filePath);
-  } catch (error) {
+  } catch (_error) { // eslint-disable-line @typescript-eslint/no-unused-vars, no-unused-vars -- Reason: intentionally unused - let it fail naturally on path resolution error
     // Path resolution error, let it fail naturally
     return;
   }
@@ -200,7 +203,7 @@ export function handleEditVerification(
     } catch (statError) {
       // File stat error (e.g., permission denied)
       const errStr = statError instanceof Error ? statError.message : String(statError);
-      const errCode = (statError as any).code;
+      const errCode = (statError as { code?: string }).code;
 
       if (errCode === 'EACCES' || errCode === 'EPERM') {
         logger?.error?.(`[PD_GATE:EDIT_VERIFY] Permission denied accessing file: ${path.basename(filePath)} (${errStr})`);
@@ -219,12 +222,13 @@ export function handleEditVerification(
     }
 
     // 3. Read current file content with improved error handling
+    // eslint-disable-next-line @typescript-eslint/init-declarations -- assigned in try, all catch paths return early
     let currentContent: string;
     try {
       currentContent = fs.readFileSync(absolutePath, 'utf-8');
     } catch (readError) {
       const errStr = readError instanceof Error ? readError.message : String(readError);
-      const errCode = (readError as any).code;
+      const errCode = (readError as { code?: string }).code;
 
       if (errCode === 'EACCES' || errCode === 'EPERM') {
         logger?.error?.(`[PD_GATE:EDIT_VERIFY] Permission denied reading file: ${path.basename(filePath)} (${errStr})`);

package/src/hooks/gate-block-helper.ts

@@ -48,7 +48,9 @@ export interface BlockContext {
 export function recordGateBlockAndReturn(
   wctx: WorkspaceContext,
   blockCtx: BlockContext,
-  logger: { warn?: (message: string) => void; error?: (message: string) => void; info?: (message: string) => void }
+  /* eslint-disable no-unused-vars -- Reason: type-only callback parameters in logger type */
+  logger: { warn?: (_message: string) => void; error?: (_message: string) => void; info?: (_message: string) => void }
+  /* eslint-enable no-unused-vars */
 ): PluginHookBeforeToolCallResult {
   const { filePath, reason, toolName, sessionId, blockSource } = blockCtx;
 
@@ -91,6 +93,7 @@ export function recordGateBlockAndReturn(
     wctx.trajectory?.recordGateBlock?.(trajectoryPayload);
   } catch (error: unknown) {
     logWarn(`[PD_GATE] Failed to record trajectory gate block: ${String(error)}`);
+    // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: function is defined later but called in this helper for retry logic
     scheduleTrajectoryGateBlockRetry(wctx, trajectoryPayload, 1, logWarn, logError);
   }
 
@@ -130,6 +133,7 @@ This is a mandatory security gate. The operation was blocked because the modific
  * Uses exponential backoff with max retries.
  * Failures are logged but do not affect the runtime block decision.
  */
+/* eslint-disable @typescript-eslint/max-params, no-unused-vars -- Reason: Function requires all params for retry scheduling */
 function scheduleTrajectoryGateBlockRetry(
   wctx: WorkspaceContext,
   payload: {

package/src/hooks/gate.ts

@@ -7,11 +7,12 @@
  * 2. Thinking OS Checkpoint (P-10): Deep reflection enforcement
  * 3. GFI Gate: Fatigue index-based blocking
  * 4. Bash Mutation Detection: Heuristic for bash file modifications
+ * 4.5. Rule Host: Active code implementation evaluation (Phase 12)
  * 5. Progressive Gate: EP tier-based access control
  * 6. Edit Verification (P-03): Exact/fuzzy match for edit operations
  *
  * IMPORTANT: This is the SINGLE AUTHORITATIVE orchestration path.
- * All policy modules (gfi-gate, progressive-trust-gate) use the shared
+ * All policy modules (gfi-gate, progressive-trust-gate, rule-host) use the shared
  * `recordGateBlockAndReturn` helper to ensure consistent block persistence.
  *
  * Zero-width character detection is handled in bash-risk.ts.
@@ -28,16 +29,20 @@ import { handleEditVerification } from './edit-verification.js';
 import { checkGfiGate } from './gfi-gate.js';
 import { checkProgressiveTrustGate } from './progressive-trust-gate.js';
 import { recordGateBlockAndReturn } from './gate-block-helper.js';
-import type { PluginHookBeforeToolCallEvent, PluginHookToolContext, PluginHookBeforeToolCallResult } from '../openclaw-sdk.js';
+import { RuleHost } from '../core/rule-host.js';
+import type { RuleHostInput } from '../core/rule-host-types.js';
+import type { PluginHookBeforeToolCallEvent, PluginHookToolContext, PluginHookBeforeToolCallResult, PluginLogger } from '../openclaw-sdk.js';
 import {
   AGENT_TOOLS,
   BASH_TOOLS_SET,
   WRITE_TOOLS,
 } from '../constants/tools.js';
+import { getSession, hasRecentThinking } from '../core/session-tracker.js';
+import { getEvolutionEngine } from '../core/evolution-engine.js';
 
 export function handleBeforeToolCall(
   event: PluginHookBeforeToolCallEvent,
-  ctx: PluginHookToolContext & { workspaceDir?: string; pluginConfig?: Record<string, unknown>; logger?: any }
+  ctx: PluginHookToolContext & { workspaceDir?: string; pluginConfig?: Record<string, unknown>; logger?: Partial<PluginLogger> }
 ): PluginHookBeforeToolCallResult | void {
   const logger = ctx.logger || console;
 
@@ -126,9 +131,10 @@ export function handleBeforeToolCall(
   // Heuristic for bash mutation detection
   if (isBash && !filePath) {
     const command = String(event.params.command || event.params.args || "");
-    const mutationMatch = command.match(/(?:>|>>|sed\s+-i|rm|mv|mkdir|touch|cp)\s+(?:-[a-zA-Z]+\s+)*([^\s;&|<>]+)/);
+    const mutationMatch = /(?:>|>>|sed\s+-i|rm|mv|mkdir|touch|cp)\s+(?:-[a-zA-Z]+\s+)*([^\s;&|<>]+)/.exec(command);
 
     if (mutationMatch) {
+      // eslint-disable-next-line @typescript-eslint/prefer-destructuring -- Reason: mutationMatch[1] assigned to reassignable outer let - destructuring would shadow outer variable
       filePath = mutationMatch[1];
     } else {
       const hasRiskPath = profile.risk_paths.some(rp => command.includes(rp));
@@ -149,6 +155,64 @@ export function handleBeforeToolCall(
     ? profile.risk_paths.some(rp => filePath.includes(rp))
     : isRisky(relPath, profile.risk_paths);
 
+  // ─────────────────────────────────────────────────────────────────────────────
+  // POLICY STEP 2.5: Rule Host Evaluation (Phase 12, D-01/D-03)
+  // ─────────────────────────────────────────────────────────────────────────────
+  // Inserted between GFI gate and Progressive Gate so principle rules can act
+  // before the capability-boundary fallback. Active code implementations run
+  // through a constrained vm context with minimal helpers only.
+  try {
+    const ruleHost = new RuleHost(wctx.stateDir, logger);
+    const hostInput: RuleHostInput = {
+      action: {
+        toolName: event.toolName,
+        normalizedPath: relPath,
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        paramsSummary: _extractParamsSummary(event.params),
+      },
+      workspace: {
+        isRiskPath: risky,
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        planStatus: _getPlanStatus(ctx.workspaceDir),
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        hasPlanFile: _hasPlanFile(ctx.workspaceDir),
+      },
+      session: {
+        sessionId: ctx.sessionId,
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        currentGfi: _getCurrentGfi(ctx.sessionId),
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        recentThinking: _hasRecentThinking(ctx.sessionId),
+      },
+      evolution: {
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        epTier: _getEpTier(wctx.workspaceDir),
+      },
+      derived: {
+        estimatedLineChanges: estimateLineChanges({ toolName: event.toolName, params: event.params }),
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define -- Reason: mutual recursion between helper functions - reordering would break logical grouping
+        bashRisk: _getBashRisk(event, profile),
+      },
+    };
+
+    const hostResult = ruleHost.evaluate(hostInput);
+    if (hostResult?.decision === 'block' || hostResult?.decision === 'requireApproval') {
+      const reason = hostResult.decision === 'requireApproval'
+        ? `[Rule Host] Approval required: ${hostResult.reason}`
+        : hostResult.reason;
+      return recordGateBlockAndReturn(wctx, {
+        filePath: relPath,
+        reason,
+        toolName: event.toolName,
+        sessionId: ctx.sessionId,
+        blockSource: 'rule-host',
+      }, logger);
+    }
+  } catch (hostError: unknown) {
+    // D-08: Conservative degradation — log and continue to Progressive Gate
+    logger.warn?.(`[PD_GATE:RULE_HOST] Host evaluation failed, degrading conservatively: ${String(hostError)}`);
+  }
+
   // ─────────────────────────────────────────────────────────────────────────────
   // POLICY STEP 3: Progressive Trust Gate (Stage 1-4 access control)
   // ─────────────────────────────────────────────────────────────────────────────
@@ -207,4 +271,87 @@ export function handleBeforeToolCall(
 
   // All checks passed - allow the operation
   return;
-}
+}
+
+// ---------------------------------------------------------------------------
+// Private helpers for building RuleHostInput snapshot
+// These are NOT passed to hosted implementations — they only populate the
+// frozen snapshot that implementations receive.
+// ---------------------------------------------------------------------------
+
+function _extractParamsSummary(params: Record<string, unknown>): Record<string, unknown> {
+  const summary: Record<string, unknown> = {};
+  if (params.file_path) summary.file_path = params.file_path;
+  if (params.path) summary.path = params.path;
+  if (params.command) summary.command = params.command;
+  if (params.args) summary.args = params.args;
+  if (params.old_string) summary.old_string = params.old_string;
+  if (params.new_string) summary.new_string = params.new_string;
+  return summary;
+}
+
+function _getPlanStatus(workspaceDir: string): 'NONE' | 'DRAFT' | 'READY' | 'UNKNOWN' {
+  try {
+    const status = getPlanStatus(workspaceDir);
+    if (status === 'READY') return 'READY';
+    if (status === 'DRAFT') return 'DRAFT';
+    if (status === '') return 'NONE';
+    return 'UNKNOWN';
+  } catch {
+    return 'UNKNOWN';
+  }
+}
+
+function _hasPlanFile(workspaceDir: string): boolean {
+  try {
+    return fs.existsSync(path.join(workspaceDir, 'PLAN.md'));
+  } catch {
+    return false;
+  }
+}
+
+function _getCurrentGfi(sessionId?: string): number {
+  if (!sessionId) return 0;
+  try {
+    return getSession(sessionId)?.currentGfi ?? 0;
+  } catch {
+    return 0;
+  }
+}
+
+function _hasRecentThinking(sessionId?: string): boolean {
+  if (!sessionId) return false;
+  try {
+    return hasRecentThinking(sessionId);
+  } catch {
+    return false;
+  }
+}
+
+function _getEpTier(workspaceDir: string): number {
+  try {
+    const engine = getEvolutionEngine(workspaceDir);
+    return engine.getTier() as number;
+  } catch {
+    return 0;
+  }
+}
+
+/* eslint-disable no-unused-vars, @typescript-eslint/no-unused-vars -- Reason: type-only parameter not used at runtime */
+function _getBashRisk(
+  event: PluginHookBeforeToolCallEvent,
+  _profile: { risk_paths: string[] }
+): 'safe' | 'normal' | 'dangerous' | 'unknown' {
+/* eslint-enable no-unused-vars, @typescript-eslint/no-unused-vars */
+  if (!BASH_TOOLS_SET.has(event.toolName)) return 'unknown';
+  try {
+    const command = String(event.params.command || event.params.args || '');
+    const isDangerous = /\brm\s+-rf\b|\bchmod\b|\bchown\b|>\s*\/dev\//.test(command);
+    if (isDangerous) return 'dangerous';
+    const isMutation = /(?:>|>>|sed|rm|mv|mkdir|touch|cp|npm|yarn|pnpm|pip|cargo)/.test(command);
+    if (isMutation) return 'normal';
+    return 'safe';
+  } catch {
+    return 'unknown';
+  }
+}

package/src/hooks/gfi-gate.ts

@@ -24,7 +24,7 @@
 
 import { getSession } from '../core/session-tracker.js';
 import { estimateLineChanges } from '../core/risk-calculator.js';
-import { analyzeBashCommand, calculateDynamicThreshold, type DynamicThresholdConfig } from './bash-risk.js';
+import { analyzeBashCommand, calculateDynamicThreshold } from './bash-risk.js';
 import { BASH_TOOLS_SET, HIGH_RISK_TOOLS, LOW_RISK_WRITE_TOOLS, AGENT_TOOLS } from '../constants/tools.js';
 import { AGENT_SPAWN_GFI_THRESHOLD } from '../config/index.js';
 import { recordGateBlockAndReturn } from './gate-block-helper.js';
@@ -47,13 +47,16 @@ export interface GfiGateConfig {
 /**
  * Internal helper to call the shared block helper with gfi-gate source tag.
  */
+/* eslint-disable @typescript-eslint/max-params -- Reason: Helper function requires all params for block recording */
 function block(
   wctx: WorkspaceContext,
   filePath: string,
   reason: string,
   toolName: string,
   sessionId: string | undefined,
+  /* eslint-disable no-unused-vars -- Reason: type-only callback params in logger type */
   logger?: { info?: (message: string) => void; warn?: (message: string) => void; error?: (message: string) => void }
+  /* eslint-enable no-unused-vars */
 ): PluginHookBeforeToolCallResult {
   return recordGateBlockAndReturn(wctx, {
     filePath,
@@ -61,15 +64,19 @@ function block(
     toolName,
     sessionId,
     blockSource: 'gfi-gate',
-  }, logger || { warn: () => {}, error: () => {} });
+  }, logger || // eslint-disable-next-line @typescript-eslint/no-empty-function -- empty warn/error no-op
+  { warn: () => {}, error: () => {} } as const);
 }
 
+/* eslint-disable @typescript-eslint/max-params -- Reason: Gate function requires all params for comprehensive checks */
 export function checkGfiGate(
   event: PluginHookBeforeToolCallEvent,
   wctx: WorkspaceContext,
   sessionId: string | undefined,
   config: GfiGateConfig,
+  /* eslint-disable no-unused-vars -- Reason: type-only callback params in logger type */
   logger?: { info?: (message: string) => void; warn?: (message: string) => void }
+  /* eslint-enable no-unused-vars */
 ): PluginHookBeforeToolCallResult | undefined {
   if (!config || config.enabled === false || !sessionId) {
     return undefined;

package/src/hooks/lifecycle-routing.ts

@@ -0,0 +1,124 @@
+/**
+ * Lifecycle Routing Hook — Natural Language Intent Detection
+ * ==========================================================
+ *
+ * PURPOSE: Detect natural language intent for promotion, disable, and rollback
+ * of implementations. Supports both English and Chinese phrases.
+ *
+ * PATTERN: Extends the existing rollback natural language detection pattern
+ * from rollback.ts.
+ */
+
+// ---------------------------------------------------------------------------
+// Natural Language Patterns
+// ---------------------------------------------------------------------------
+
+const PROMOTE_PATTERNS_CN = [
+  /促[进推]/,
+  /启[用用]/,
+  /激活/,
+  /设为活动/,
+  /启用.*实现/,
+];
+
+const PROMOTE_PATTERNS_EN = [
+  /promote\s+(this|the|implementation)/i,
+  /activate\s+(this|the|implementation)/i,
+  /enable\s+(this|the|implementation)/i,
+  /set\s+(as|to)\s+active/i,
+];
+
+const DISABLE_PATTERNS_CN = [
+  /禁[用止]/,
+  /关闭.*实现/,
+  /停止.*实现/,
+  /停用/,
+];
+
+const DISABLE_PATTERNS_EN = [
+  /disable\s+(this|the|implementation)/i,
+  /turn\s+off\s+(this|the|implementation)/i,
+  /deactivate\s+(this|the|implementation)/i,
+  /stop\s+(this|the|implementation)/i,
+];
+
+const ROLLBACK_PATTERNS_CN = [
+  /回滚/,
+  /撤销.*实现/,
+  /恢复.*实现/,
+  /退回.*实现/,
+];
+
+const ROLLBACK_PATTERNS_EN = [
+  /rollback\s+(this|the|implementation)/i,
+  /revert\s+(this|the|implementation)/i,
+  /undo\s+(this|the|implementation)/i,
+  /restore\s+(previous|last|implementation)/i,
+];
+
+// ---------------------------------------------------------------------------
+// Intent Detection
+// ---------------------------------------------------------------------------
+
+export type LifecycleIntent = 'promote' | 'disable' | 'rollback' | null;
+
+/**
+ * Detect implementation lifecycle intent from user message.
+ * Returns the detected intent type or null.
+ */
+export function detectLifecycleIntent(message: string): LifecycleIntent {
+  // Check promote patterns
+  for (const p of PROMOTE_PATTERNS_EN) {
+    if (p.test(message)) return 'promote';
+  }
+  for (const p of PROMOTE_PATTERNS_CN) {
+    if (p.test(message)) return 'promote';
+  }
+
+  // Check disable patterns
+  for (const p of DISABLE_PATTERNS_EN) {
+    if (p.test(message)) return 'disable';
+  }
+  for (const p of DISABLE_PATTERNS_CN) {
+    if (p.test(message)) return 'disable';
+  }
+
+  // Check rollback patterns
+  for (const p of ROLLBACK_PATTERNS_EN) {
+    if (p.test(message)) return 'rollback';
+  }
+  for (const p of ROLLBACK_PATTERNS_CN) {
+    if (p.test(message)) return 'rollback';
+  }
+
+  return null;
+}
+
+/**
+ * Route a natural language lifecycle intent to the appropriate command handler.
+ * Returns command name and normalized message, or null if no intent detected.
+ */
+export function routeLifecycleIntent(
+  message: string
+): { command: string; normalizedMessage: string } | null {
+  const intent = detectLifecycleIntent(message);
+  if (!intent) return null;
+
+  switch (intent) {
+    case 'promote':
+      return {
+        command: 'pd-promote-impl',
+        normalizedMessage: 'list',
+      };
+    case 'disable':
+      return {
+        command: 'pd-disable-impl',
+        normalizedMessage: 'list',
+      };
+    case 'rollback':
+      return {
+        command: 'pd-rollback-impl',
+        normalizedMessage: 'list',
+      };
+  }
+}

package/src/hooks/lifecycle.ts

@@ -1,13 +1,12 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as readline from 'readline';
-import { computePainScore, buildPainFlag, writePainFlag } from '../core/pain.js';
+import { buildPainFlag, writePainFlag } from '../core/pain.js';
 import { WorkspaceContext } from '../core/workspace-context.js';
 import { PD_DIRS } from '../core/paths.js';
-import { 
-  extractWorkingMemory, 
-  mergeWorkingMemory, 
-  type WorkingMemorySnapshot 
+import {
+  extractWorkingMemory,
+  mergeWorkingMemory,
 } from '../core/focus-history.js';
 import type { PluginHookBeforeResetEvent, PluginHookBeforeCompactionEvent, PluginHookAfterCompactionEvent, PluginHookAgentContext } from '../openclaw-sdk.js';
 
@@ -55,7 +54,7 @@ interface JsonlMessage {
 
 export async function extractPainFromSessionFile(sessionFile: string, ctx: PluginHookAgentContext): Promise<void> {
   const painPoints: string[] = [];
-  const workspaceDir = ctx.workspaceDir;
+  const {workspaceDir} = ctx;
 
   if (!workspaceDir) return;
 
@@ -123,13 +122,13 @@ export async function extractPainFromSessionFile(sessionFile: string, ctx: Plugi
     try {
       rl.close();
       fileStream.destroy();
-    } catch (_e) {
+    } catch (_e) { // eslint-disable-line @typescript-eslint/no-unused-vars, no-unused-vars -- Reason: intentionally unused - cleanup errors ignored
       // Ignore cleanup errors
     }
   }
 
   if (painPoints.length > 0) {
-    const dateStr = new Date().toISOString().split('T')[0];
+    const [dateStr] = new Date().toISOString().split('T');
     const dailyLogPath = path.join(workspaceDir, PD_DIRS.MEMORY, `${dateStr}.md`);
     const timestamp = new Date().toISOString();
     
@@ -177,7 +176,7 @@ export async function handleBeforeCompaction(
   if (!ctx.workspaceDir) return;
 
   const wctx = WorkspaceContext.fromHookContext(ctx);
-  const dateStr = new Date().toISOString().split('T')[0];
+  const [dateStr] = new Date().toISOString().split('T');
   const checkpointPath = path.join(ctx.workspaceDir, PD_DIRS.MEMORY, `${dateStr}.md`);
   const log =
     `\n## [${new Date().toISOString()}] Pre-Compaction Checkpoint\n` +
@@ -195,8 +194,9 @@ export async function handleBeforeCompaction(
   // 提取工作记忆（从 sessionFile）
   if (event.sessionFile) {
     await extractPainFromSessionFile(event.sessionFile, ctx);
-    
+
     // 新增：提取并保存工作记忆
+    /* eslint-disable @typescript-eslint/no-use-before-define -- Reason: extractAndSaveWorkingMemory is defined later in this file */
     await extractAndSaveWorkingMemory(event.sessionFile, ctx, wctx);
   }
 }
@@ -314,8 +314,8 @@ export async function handleAfterCompaction(
 ): Promise<void> {
   if (!ctx.workspaceDir) return;
 
-  const dateStr = new Date().toISOString().split('T')[0];
-  const checkpointPath = path.join(ctx.workspaceDir, PD_DIRS.MEMORY, `${dateStr}.md`);
+  const [dateStrPost] = new Date().toISOString().split('T');
+  const checkpointPath = path.join(ctx.workspaceDir, PD_DIRS.MEMORY, `${dateStrPost}.md`);
   const log =
     `- Post-Compaction Complete. Reduced active context to ${event.messageCount} messages.\n`;