principles-disciple 1.126.0 → 1.128.0

package/dist/utils/workspace-resolver.js

@@ -0,0 +1,288 @@
+/**
+ * Workspace Directory Resolution Utilities
+ *
+ * Shared helpers for resolving workspace directories across commands and hooks.
+ *
+ * Hook resolution priority (PRI-259): PD canonical config → OpenClaw fallback.
+ * PD canonical sources: PD_WORKSPACE_DIR env → OPENCLAW_WORKSPACE env →
+ * principles-disciple.json → ~/.openclaw/workspace default.
+ * OpenClaw fallback: ctx.workspaceDir → api.runtime.agent.resolveAgentWorkspaceDir().
+ */
+import { validateWorkspaceDir } from '../core/workspace-dir-validation.js';
+import { resolveWorkspaceDirFromApi } from '../core/path-resolver.js';
+import * as path from 'path';
+import * as os from 'os';
+import * as fs from 'fs';
+/**
+ * Resolve workspace directory for command execution.
+ *
+ * Chain: ctx.workspaceDir → resolveWorkspaceDirFromApi (official OpenClaw API + env vars)
+ *
+ * CRITICAL: Throws if workspaceDir cannot be resolved. Silent failures are dangerous
+ * because commands might operate on the wrong directory.
+ */
+export function resolveCommandWorkspaceDir(api, ctx) {
+    // 1. Direct from command context (most reliable — set by OpenClaw for current session)
+    if (ctx.workspaceDir) {
+        const issue = validateWorkspaceDir(ctx.workspaceDir);
+        if (!issue)
+            return ctx.workspaceDir;
+        // Validation failed — fail immediately, do not silently fall back
+        const errorMsg = `[PD:Command] ctx.workspaceDir="${ctx.workspaceDir}" is invalid: ${issue}`;
+        api.logger.error(errorMsg);
+        throw new Error(errorMsg);
+    }
+    // 2. Official OpenClaw API → env vars → config file
+    const resolved = resolveWorkspaceDirFromApi(api);
+    if (resolved)
+        return resolved;
+    // CRITICAL FAILURE: Cannot determine workspace directory
+    const errorMsg = `[PD:Command] CRITICAL: Cannot resolve workspace directory. ` +
+        `ctx.workspaceDir="${ctx.workspaceDir ?? ''}" is invalid, and all fallbacks failed. ` +
+        `Commands will NOT execute to prevent data corruption.`;
+    api.logger.error(errorMsg);
+    throw new Error(errorMsg);
+}
+/**
+ * Resolve workspace directory for plugin command execution.
+ *
+ * Chain: ctx.workspaceDir (canonical) → ctx.config.workspaceDir (dispatcher fallback)
+ *
+ * CRITICAL: Throws if workspaceDir cannot be resolved. Commands must NEVER silently
+ * fall back to process.cwd() as this masks configuration errors and can corrupt
+ * the wrong workspace.
+ *
+ * @param ctx - Plugin command context (has workspaceDir + config properties)
+ * @param source - Source label for error messages (e.g. 'evolution-status', 'pain')
+ */
+export function resolvePluginCommandWorkspaceDir(ctx, source) {
+    // 1. Canonical workspaceDir field (set by OpenClaw command dispatcher)
+    if (ctx.workspaceDir) {
+        const issue = validateWorkspaceDir(ctx.workspaceDir);
+        if (!issue)
+            return ctx.workspaceDir;
+        throw new Error(`[PD:Command:${source}] ctx.workspaceDir="${ctx.workspaceDir}" is invalid: ${issue}`);
+    }
+    // 2. Dispatcher may also put workspaceDir in config (legacy/alternative path)
+    const configWorkspaceDir = ctx.config?.workspaceDir;
+    if (configWorkspaceDir) {
+        const issue = validateWorkspaceDir(configWorkspaceDir);
+        if (!issue)
+            return configWorkspaceDir;
+        throw new Error(`[PD:Command:${source}] ctx.config.workspaceDir="${configWorkspaceDir}" is invalid: ${issue}`);
+    }
+    // CRITICAL FAILURE: No workspace directory available
+    throw new Error(`[PD:Command:${source}] CRITICAL: workspaceDir is not set in ctx.workspaceDir or ctx.config.workspaceDir. ` +
+        `Commands cannot execute without a valid workspace. Set OPENCLAW_WORKSPACE_DIR env var or ensure the workspace is properly initialized.`);
+}
+const PD_CONFIG_FILENAME = 'principles-disciple.json';
+function loadWorkspaceFromPdConfigFile() {
+    const candidates = [
+        path.join(os.homedir(), '.openclaw', PD_CONFIG_FILENAME),
+        path.join(os.homedir(), '.principles', PD_CONFIG_FILENAME),
+        path.join(process.cwd(), PD_CONFIG_FILENAME),
+    ];
+    for (const configPath of candidates) {
+        if (!fs.existsSync(configPath))
+            continue;
+        try {
+            const raw = fs.readFileSync(configPath, 'utf8');
+            const parsed = JSON.parse(raw);
+            if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                if (Object.hasOwn(parsed, 'workspace')) {
+                    const workspaceValue = parsed['workspace'];
+                    if (typeof workspaceValue === 'string' && workspaceValue.trim()) {
+                        return workspaceValue.trim();
+                    }
+                }
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+export function resolveCanonicalWorkspaceDir() {
+    const pdEnv = process.env.PD_WORKSPACE_DIR;
+    if (pdEnv && pdEnv.trim()) {
+        const dir = path.resolve(pdEnv.trim());
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'pd_env' };
+        }
+    }
+    const ocEnv = process.env.OPENCLAW_WORKSPACE;
+    if (ocEnv && ocEnv.trim()) {
+        const dir = path.resolve(ocEnv.trim());
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'openclaw_env' };
+        }
+    }
+    const configWorkspace = loadWorkspaceFromPdConfigFile();
+    if (configWorkspace) {
+        const dir = path.resolve(configWorkspace);
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'pd_config' };
+        }
+    }
+    const defaultDir = path.join(os.homedir(), '.openclaw', 'workspace');
+    if (!validateWorkspaceDir(defaultDir)) {
+        return { workspaceDir: defaultDir, source: 'pd_default' };
+    }
+    return null;
+}
+/**
+ * Resolve only PD explicit sources (env vars + config file), excluding pd_default.
+ * Used by hook resolution to ensure ctx.workspaceDir takes priority over the
+ * hardcoded default fallback.
+ */
+function resolveExplicitPdSources() {
+    const pdEnv = process.env.PD_WORKSPACE_DIR;
+    if (pdEnv && pdEnv.trim()) {
+        const dir = path.resolve(pdEnv.trim());
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'pd_env' };
+        }
+    }
+    const ocEnv = process.env.OPENCLAW_WORKSPACE;
+    if (ocEnv && ocEnv.trim()) {
+        const dir = path.resolve(ocEnv.trim());
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'openclaw_env' };
+        }
+    }
+    const configWorkspace = loadWorkspaceFromPdConfigFile();
+    if (configWorkspace) {
+        const dir = path.resolve(configWorkspace);
+        if (!validateWorkspaceDir(dir)) {
+            return { workspaceDir: dir, source: 'pd_config' };
+        }
+    }
+    return null;
+}
+function tryResolveFromOpenClawApi(api, agentId) {
+    try {
+        const resolved = api.runtime?.agent?.resolveAgentWorkspaceDir?.(api.config, agentId ?? 'main');
+        if (resolved && !validateWorkspaceDir(resolved)) {
+            return resolved;
+        }
+    }
+    catch {
+        // Fall through
+    }
+    return undefined;
+}
+export function resolveHookWorkspaceDir(ctx, api, source, options) {
+    // Priority 1: PD explicit sources (env vars + config file) — these are
+    // owner-declared and intentionally override the live session context.
+    const resolveExplicit = options?.explicitPdResolver ?? resolveExplicitPdSources;
+    const explicit = resolveExplicit();
+    if (explicit) {
+        let consistencyWarning;
+        if (ctx.workspaceDir) {
+            const normalizedCtx = path.resolve(ctx.workspaceDir);
+            const normalizedExplicit = path.resolve(explicit.workspaceDir);
+            if (normalizedCtx !== normalizedExplicit) {
+                consistencyWarning =
+                    `PD explicit workspace (${explicit.source}: ${explicit.workspaceDir}) ` +
+                        `differs from OpenClaw context (${ctx.workspaceDir}). Using PD explicit.`;
+            }
+        }
+        return {
+            ok: true,
+            workspaceDir: explicit.workspaceDir,
+            source: explicit.source,
+            consistencyWarning,
+        };
+    }
+    // Priority 2: OpenClaw live context — the real session workspace.
+    // This MUST take priority over pd_default (the hardcoded fallback).
+    if (ctx.workspaceDir) {
+        const issue = validateWorkspaceDir(ctx.workspaceDir);
+        if (!issue) {
+            return {
+                ok: true,
+                workspaceDir: ctx.workspaceDir,
+                source: 'openclaw_context',
+            };
+        }
+    }
+    // Priority 3: OpenClaw API resolution
+    const apiResolved = tryResolveFromOpenClawApi(api, ctx.agentId);
+    if (apiResolved) {
+        return {
+            ok: true,
+            workspaceDir: apiResolved,
+            source: 'openclaw_api',
+        };
+    }
+    // Priority 4: pd_default (hardcoded fallback) — only when nothing else works
+    const resolveCanonical = options?.canonicalResolver ?? resolveCanonicalWorkspaceDir;
+    const canonical = resolveCanonical();
+    if (canonical && canonical.source === 'pd_default') {
+        return {
+            ok: true,
+            workspaceDir: canonical.workspaceDir,
+            source: 'pd_default',
+            consistencyWarning: 'Using hardcoded default workspace (~/.openclaw/workspace). ' +
+                'Set PD_WORKSPACE_DIR or create ~/.openclaw/principles-disciple.json for stable resolution.',
+        };
+    }
+    return {
+        ok: false,
+        reason: 'workspace_dir_unresolvable',
+        nextAction: 'Set PD_WORKSPACE_DIR environment variable, create ~/.openclaw/principles-disciple.json ' +
+            'with a "workspace" field, or ensure OpenClaw provides workspaceDir in hook context.',
+        message: `[PD:${source}] Cannot resolve workspace directory from any source. ` +
+            `PD explicit config (PD_WORKSPACE_DIR, principles-disciple.json) ` +
+            `and OpenClaw fallback (ctx.workspaceDir, api.resolveAgentWorkspaceDir, ~/.openclaw/workspace) all failed.`,
+    };
+}
+/**
+ * Resolve workspace directory for tool hook execution (safe version).
+ * Returns undefined instead of throwing if resolution fails.
+ *
+ * PRI-259: Uses PD canonical config as primary source, OpenClaw as fallback.
+ */
+export function resolveToolHookWorkspaceDirSafe(ctx, api, source, options) {
+    const result = resolveHookWorkspaceDir(ctx, api, source, options);
+    if (!result.ok) {
+        api.logger.warn(result.message);
+        return undefined;
+    }
+    if (result.consistencyWarning) {
+        api.logger.warn(`[PD:${source}] ${result.consistencyWarning}`);
+    }
+    return result.workspaceDir;
+}
+export class WorkspaceResolutionError extends Error {
+    reason;
+    nextAction;
+    constructor(message, reason, nextAction) {
+        super(message);
+        this.name = 'WorkspaceResolutionError';
+        this.reason = reason;
+        this.nextAction = nextAction;
+    }
+    toJSON() {
+        return {
+            ok: false,
+            reason: this.reason,
+            message: this.message,
+            nextAction: this.nextAction,
+        };
+    }
+}
+export function resolveWorkspaceDirForRuntimeV2(ctx, api, source) {
+    const explicit = ctx.workspaceDir;
+    if (!explicit || !explicit.trim()) {
+        throw new WorkspaceResolutionError(`No explicit workspace directory for Runtime V2 entrypoint (${source}). ` +
+            'Provide workspaceDir in context. Runtime V2 does not use legacy discovery fallback.', 'workspace_dir_missing', 'Ensure the OpenClaw hook context includes workspaceDir, or set PD_WORKSPACE_DIR environment variable.');
+    }
+    const normalized = path.resolve(explicit.trim());
+    const validation = validateWorkspaceDir(normalized);
+    if (validation) {
+        throw new WorkspaceResolutionError(`workspaceDir validation failed for ${source}: ${validation}`, 'workspace_dir_invalid', 'Provide a valid workspaceDir that is not the home directory, root, or empty.');
+    }
+    return normalized;
+}

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Evolutionary programming agent framework with strategic guardrails and reflection loops.",
-  "version": "1.126.0",
+  "version": "1.128.0",
   "activation": {
     "onCapabilities": [
       "hook"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.126.0",
+  "version": "1.128.0",
   "description": "Native OpenClaw plugin for Principles Disciple",
   "type": "module",
   "main": "./dist/bundle.js",
@@ -14,6 +14,12 @@
   },
   "author": "csuzngjh",
   "license": "MIT",
+  "files": [
+    "dist",
+    "scripts",
+    "templates",
+    "openclaw.plugin.json"
+  ],
   "publishConfig": {
     "access": "public"
   },
@@ -70,7 +76,7 @@
     }
   },
   "dependencies": {
-    "@principles/core": "^1.73.0",
+    "@principles/core": "^1.74.1",
     "@sinclair/typebox": "^0.34.48",
     "better-sqlite3": "^12.9.0",
     "commander": "^12.0.0",

package/templates/workspace/.principles/DECISION_POLICY.json

@@ -0,0 +1,44 @@
+{
+  "enabled": true,
+  "autonomy": {
+    "block_micro_ask_user_question": true,
+    "high_impact_score_threshold": 70,
+    "medium_impact_score_threshold": 40,
+    "allow_force_ask_override": true,
+    "high_impact_keywords": [
+      "production",
+      "database migration",
+      "schema",
+      "security",
+      "compliance",
+      "breaking change",
+      "cost",
+      "budget",
+      "architecture",
+      "data loss",
+      "permission",
+      "privacy",
+      "delete",
+      "irreversible",
+      "rollout",
+      "rollback"
+    ],
+    "micro_keywords": [
+      "rename",
+      "variable",
+      "format",
+      "style",
+      "spacing",
+      "comment",
+      "minor",
+      "typo",
+      "wording",
+      "small refactor",
+      "which name"
+    ]
+  },
+  "user_profile": {
+    "domain_low_threshold": 0,
+    "ask_on_medium_for_low_expertise": true
+  }
+}

package/templates/workspace/.principles/PRINCIPLES.md

@@ -0,0 +1,20 @@
+# Principles
+
+可进化编程智能体的原则库（Principle Repository）。
+
+## 格式说明
+
+每条原则使用以下格式：
+
+```markdown
+### P-XX: <One-line principle>
+- Trigger: <什么情况下触发>
+- Constraint (Must/Forbidden): <必须/禁止做什么>
+- Verification: <如何验证>
+- Exceptions: <什么情况下例外>
+- Source: <来源：Issue Log #XX / Date / External Reference>
+```
+
+---
+
+<!-- 原则从这里开始记录 -->

package/templates/workspace/.principles/PROFILE.json

@@ -0,0 +1,54 @@
+{
+  "audit_level": "high",
+  "risk_paths": [
+    "AGENTS.md",
+    "SOUL.md",
+    "IDENTITY.md",
+    "USER.md",
+    "docs/PRINCIPLES.md",
+    ".principles/PROFILE.json",
+    "docs/PROFILE.json"
+  ],
+  "gate": {
+    "require_plan_for_risk_paths": true,
+    "require_audit_before_write": true
+  },
+  "progressive_gate": {
+    "enabled": true,
+    "plan_approvals": {
+      "enabled": true,
+      "allowed_patterns": [
+        "AGENTS.md",
+        "SOUL.md",
+        "IDENTITY.md",
+        "USER.md",
+        "docs/PRINCIPLES.md",
+        ".principles/PROFILE.json",
+        "docs/PROFILE.json",
+        "docs/okr/**"
+      ],
+      "allowed_operations": [
+        "write",
+        "edit",
+        "replace"
+      ]
+    }
+  },
+  "tests": {
+    "on_change": "smoke",
+    "commands": {
+      "smoke": "",
+      "unit": ""
+    }
+  },
+  "permissions": {
+    "deny_skip_tests": true,
+    "deny_unsafe_db_ops": true
+  },
+  "custom_guards": [
+    {
+      "pattern": "Edit.*SYSTEM_CAPABILITIES",
+      "message": "⚠️ 确认：所有工具都已实际验证安装了吗？请在标记为 'installed: true' 之前运行验证命令。"
+    }
+  ]
+}

package/templates/workspace/.principles/PROFILE.schema.json

@@ -0,0 +1,56 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "System Profile Schema",
+  "description": "Schema for the evolutionary agent framework configuration (The Interception Database)",
+  "type": "object",
+  "properties": {
+    "audit_level": {
+      "type": "string",
+      "enum": ["low", "medium", "high"],
+      "default": "medium"
+    },
+    "risk_paths": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "description": "Project-relative directory or file paths that require mandatory gating."
+      },
+      "default": []
+    },
+    "gate": {
+      "type": "object",
+      "properties": {
+        "require_plan_for_risk_paths": { "type": "boolean", "default": true },
+        "require_audit_before_write": { "type": "boolean", "default": true },
+        "require_reviewer_after_write": { "type": "boolean", "default": true }
+      }
+    },
+    "tests": {
+      "type": "object",
+      "properties": {
+        "on_change": { "type": "string", "enum": ["smoke", "unit", "full"], "default": "smoke" },
+        "on_risk_change": { "type": "string", "enum": ["smoke", "unit", "full"], "default": "unit" },
+        "commands": {
+          "type": "object",
+          "additionalProperties": { "type": "string" },
+          "description": "Key-value pairs mapping test levels to shell commands."
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "properties": {
+        "deny_skip_tests": { "type": "boolean", "default": true },
+        "deny_unsafe_db_ops": { "type": "boolean", "default": true }
+      }
+    },
+    "output": {
+      "type": "object",
+      "properties": {
+        "verbosity": { "type": "string", "enum": ["concise", "balanced", "detailed"], "default": "balanced" },
+        "show_evidence": { "type": "boolean", "default": true }
+      }
+    }
+  },
+  "required": ["risk_paths", "gate", "tests"]
+}

package/templates/workspace/.principles/THINKING_OS.md

@@ -0,0 +1,65 @@
+<!--
+# Thinking OS — 智能体思维操作系统
+此文件通过 XML 结构化注入给大语言模型，定义其元认知框架。
+大模型对 XML 标签极其敏感，此结构旨在提升指令遵循度。
+-->
+<thinking_os_core_directives>
+  <system_role>
+    你是由 Principles Disciple 框架驱动的演化型编程智能体。你的核心使命是将“痛苦”（失败、报错、挫折）转化为系统的演化。
+    以下指令是绝对的元认知框架。它们决定了你如何思考和行动。
+    违反这些指令将被视为严重的系统故障。
+  </system_role>
+
+  <!-- 认知与记忆防线 (Cognition & Memory Defense) -->
+  <directive id="T-01" name="MAP_BEFORE_TERRITORY">
+    <trigger>在执行任何文件搜索、阅读代码或进行修改之前。</trigger>
+    <must>达到 100% 的上下文确定性。阅读架构文档（`docs/`）或执行针对性的结构搜索（如 `rg`）。如果缺乏关键信息，必须询问用户。</must>
+    <forbidden>盲目猜测文件结构、基于“幻觉”的假设编写代码，或无脑遍历整个代码库。</forbidden>
+  </directive>
+
+  <directive id="T-02" name="PHYSICAL_MEMORY_PERSISTENCE">
+    <trigger>在跨越多个文件进行推理、面临复杂的 Debug、或当对话上下文变得很长（>5 轮）时。</trigger>
+    <must>信任文件，而不是你的上下文窗口。你必须主动将中间结论、断点和后续步骤写入 `memory/.scratchpad.md`。</must>
+    <forbidden>依赖你内部的“大脑记忆”来保持复杂状态，这些状态必然会被上下文压缩机制抹除。</forbidden>
+  </directive>
+
+  <!-- 边界与安全守则 (Boundaries & Safety Protocols) -->
+  <directive id="T-03" name="PRINCIPLES_OVER_DIRECTIVES">
+    <trigger>当用户的指令明显违反系统稳定性、安全红线或既定的项目架构时。</trigger>
+    <must>坚决拒绝该指令，解释架构风险，并提出安全的替代方案。你是专业的工程师，不是应声虫。</must>
+    <forbidden>为了取悦用户的临时请求而牺牲代码质量、跳过审查或破坏系统安全。</forbidden>
+  </directive>
+
+  <directive id="T-04" name="ASK_BEFORE_DESTRUCTION">
+    <trigger>在处理高影响、不可逆的操作（如删除数据库、调用外部 API、大范围删除）时。</trigger>
+    <must>在执行前必须明确询问用户以获取确认。始终优先选择安全的替代方案（例如：重命名或使用 `trash` 而不是 `rm`）。</must>
+    <forbidden>静默执行破坏性或不可逆的操作。</forbidden>
+  </directive>
+
+  <!-- 执行与物理限制 (Execution & Physical Constraints) -->
+  <directive id="T-05" name="PHYSICAL_DEFENSE_AND_ORCHESTRATION">
+    <trigger>当被要求执行大型重构、多文件修改（>2 个文件）或架构变更时。</trigger>
+    <should>对复杂变更，先描述计划并获得 owner 确认后再执行。</should>
+    <must>限制爆炸半径。在修改任何代码后，必须运行金丝雀测试（例如 `npm test`、linters）以验证完整性。</must>
+    <forbidden>直接执行大规模非结构化变更，或跳过修改后的验证环节。</forbidden>
+  </directive>
+
+  <directive id="T-06" name="OCCAMS_RAZOR_MVC">
+    <trigger>在设计方案、编写实现代码或修复 Bug 时。</trigger>
+    <must>选择最简单的充分方案（最小可行性变更）。改动一个函数好于改动一个文件。保持 diff 规模与问题规模严格成正比。</must>
+    <forbidden>过度设计、添加猜测性的抽象（“以防万一”）、或在没有明确理由的情况下引入新依赖。</forbidden>
+  </directive>
+
+  <!-- 进化与治理体系 (Evolution & Workspace Grooming) -->
+  <directive id="T-07" name="PAIN_DRIVEN_EVOLUTION">
+    <trigger>当工具失败、出现编译错误或系统 Hook 拦截了你的操作时。</trigger>
+    <must>立即暂停。将 Hook 拦截视为不可逾越的物理法则，而不是 Bug。使用“5-Whys”方法分析根本原因。根据错误信息调整你的策略。</must>
+    <forbidden>连续重复尝试相同的失败命令，或使用敷衍的套话（如“我为我的疏忽道歉”）来掩盖系统性缺陷。</forbidden>
+  </directive>
+
+  <directive id="T-08" name="ZERO_ENTROPY_GROOMING">
+    <trigger>在创建文件、编写日志或完成一个任务会话时。</trigger>
+    <must>保持极致的数字洁癖。项目根目录是神圣的。所有命名必须严格使用 `kebab-case`。任务结束后清理所有的测试脚本和 Debug 遗留物。</must>
+    <forbidden>在项目根目录下随意创建临时文件（如 `test.txt`、`temp.md`、`debug.log`）。</forbidden>
+  </directive>
+</thinking_os_core_directives>

package/templates/workspace/.principles/THINKING_OS_ARCHIVE.md

@@ -0,0 +1,7 @@
+# Thinking OS — 归档思维模型
+
+> 被淘汰或休眠的思维模型存放于此。可随时通过 `/thinking-os propose` 恢复。
+
+---
+
+<!-- 归档条目从这里开始 -->

package/templates/workspace/.principles/THINKING_OS_CANDIDATES.md

@@ -0,0 +1,9 @@
+# Thinking OS — 候选思维模型池
+
+> 本文件由智能体在反思过程中自动追加候选条目。
+> 晋升为正式模型需满足：≥3 种任务验证有效 + ≤3 行可描述 + 非冗余 + 人类批准。
+> 使用 `/thinking-os propose` 手动提议，或 `/thinking-os audit` 审计候选池。
+
+---
+
+<!-- 候选条目从这里开始 -->

package/templates/workspace/.principles/models/_INDEX.md

@@ -0,0 +1,27 @@
+# 扩展思维模型索引
+
+> 根据任务需要，使用 `read` 工具加载一个或多个模型进行组合分析。
+
+## 可用模型
+
+| ID | 名称 | 适用场景 | 文件路径 |
+|----|------|----------|----------|
+| MARKETING_4P | 营销4P模型 | 营销策略、市场规划、产品推广 | docs/models/marketing_4p.md |
+| SWOT | SWOT分析 | 战略分析、竞争评估、决策支持 | docs/models/swot.md |
+| PORTER_FIVE | 波特五力模型 | 行业分析、竞争格局、市场进入 | docs/models/porter_five.md |
+| FIRST_PRINCIPLES | 第一性原理 | 复杂问题拆解、创新思考 | docs/models/first_principles.md |
+| USER_STORY_MAP | 用户故事地图 | 产品规划、需求分析、用户体验 | docs/models/user_story_map.md |
+
+## 使用方式
+
+1. 分析任务上下文，判断需要哪些思维模型
+2. 使用 `read` 工具加载选中的模型文件
+3. 可以加载多个模型进行组合分析
+4. 如果没有匹配的模型，直接使用元认知模型（T-01 到 T-09）
+
+## 模型组合建议
+
+- **营销策略分析**：MARKETING_4P + SWOT
+- **市场进入决策**：PORTER_FIVE + SWOT
+- **产品创新**：FIRST_PRINCIPLES + USER_STORY_MAP
+- **竞争分析**：SWOT + PORTER_FIVE