principles-disciple 1.137.0 → 1.139.0

package/dist/commands/capabilities.js

@@ -16,10 +16,11 @@ function scanEnvironment(wctx) {
     const tools = {};
     for (const tool of TOOLS_TO_SCAN) {
         try {
-            const [versionLine] = execSync(tool.cmd.join(' '), { stdio: ['ignore', 'pipe', 'ignore'] }).toString().split('\n');
+            const lines = execSync(tool.cmd.join(' '), { stdio: ['ignore', 'pipe', 'ignore'] }).toString().split('\n');
+            const versionLine = lines[0];
             tools[tool.name] = {
                 available: true,
-                version: versionLine.trim(),
+                version: versionLine ? versionLine.trim() : undefined,
             };
             // eslint-disable-next-line @typescript-eslint/no-unused-vars -- Reason: catch parameter intentionally unused - we only care that the command failed
         }

package/dist/commands/disable-impl.js

@@ -108,7 +108,7 @@ export function handleDisableImplCommand(ctx) {
     const subcommand = parts[0] || '';
     const implId = subcommand === 'list' ? '' : subcommand;
     const reasonMatch = (/--reason\s+"([^"]+)"/.exec(args)) || (/--reason\s+(\S+)/.exec(args));
-    const reason = reasonMatch ? reasonMatch[1] : null;
+    const reason = reasonMatch ? (reasonMatch[1] ?? null) : null;
     // Subcommand: list
     if (subcommand === 'list' || subcommand === '') {
         return _handleListActive(stateDir, isZh);

package/dist/commands/focus.js

@@ -57,6 +57,8 @@ function compressFocusContent(content, workspaceDir) {
     };
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
+        if (!line)
+            continue;
         const trimmedLine = line.trim();
         // 识别章节
         if (/^#{1,3}\s*.*状态快照|📍/.test(trimmedLine)) {
@@ -245,7 +247,8 @@ async function compressFocus(workspaceDir, isZh, api) {
         compressedContent = oldContent;
     }
     // 6. 更新版本号和日期
-    const [majorVersion] = oldVersion.split('.');
+    const versionParts = oldVersion.split('.');
+    const majorVersion = versionParts[0] ?? '';
     const newVersion = `${(parseInt(majorVersion, 10) || 1) + 1}`;
     const [today] = new Date().toISOString().split('T');
     const newContent = compressedContent
@@ -314,6 +317,11 @@ function rollbackFocus(workspaceDir, index, isZh) {
             : `❌ Invalid index: ${index}\n\n💡 Please enter a number between 1-${files.length}`;
     }
     const targetFile = files[index - 1];
+    if (!targetFile) {
+        return isZh
+            ? `❌ 无效的序号: ${index}\n\n💡 请输入 1-${files.length} 之间的数字`
+            : `❌ Invalid index: ${index}\n\n💡 Please enter a number between 1-${files.length}`;
+    }
     const historyContent = fs.readFileSync(targetFile.path, 'utf-8');
     // 备份当前版本
     const currentContent = fs.existsSync(focusPath)
@@ -416,7 +424,7 @@ export async function handleFocusCommand(ctx, api) {
             break;
         case 'rollback':
         case 'rb': {
-            const index = parseInt(args[1], 10);
+            const index = parseInt(args[1] ?? '', 10);
             if (isNaN(index)) {
                 result = isZh
                     ? '❌ 请指定要回滚的版本序号\n\n💡 输入 `/pd-focus history` 查看可用版本'

package/dist/commands/rollback-impl.js

@@ -46,7 +46,7 @@ export function handleRollbackImplCommand(ctx) {
     const subcommand = args.split(/\s+/)[0] || '';
     const implId = subcommand === 'list' ? '' : subcommand;
     const reasonMatch = (/--reason\s+"([^"]+)"/.exec(args)) || (/--reason\s+(\S+)/.exec(args));
-    const reason = reasonMatch ? reasonMatch[1] : null;
+    const reason = reasonMatch ? (reasonMatch[1] ?? null) : null;
     // List active
     if (subcommand === 'list' || subcommand === '') {
         return _handleListActiveRollback(stateDir, isZh);

package/dist/commands/thinking-os.js

@@ -16,7 +16,11 @@ function getModels(wctx) {
         for (const line of lines) {
             const match = /^###\s*(T-\d+):\s*(.*)/.exec(line);
             if (match) {
-                models[match[1]] = match[2].trim();
+                const key = match[1];
+                const value = match[2];
+                if (key === undefined || value === undefined)
+                    continue;
+                models[key] = value.trim();
             }
         }
     }

package/dist/core/correction-cue-learner.js

@@ -103,6 +103,8 @@ export class CorrectionCueLearner {
             if (keywordIndex < 0)
                 continue;
             const keyword = this.store.keywords[keywordIndex];
+            if (!keyword)
+                continue;
             this.store.keywords[keywordIndex] = {
                 ...keyword,
                 hitCount: (keyword.hitCount ?? 0) + 1,

package/dist/core/event-log.js

@@ -30,7 +30,7 @@ export class EventLog {
         return path.join(this.logsDir, `events_${date}.jsonl`);
     }
     getTodayStr() {
-        return new Date().toISOString().split('T')[0];
+        return new Date().toISOString().split('T')[0] ?? '';
     }
     ensureEventsFile() {
         const today = this.getTodayStr();
@@ -255,7 +255,7 @@ export class EventLog {
         }
     }
     formatDate(date) {
-        return date.toISOString().split('T')[0];
+        return date.toISOString().split('T')[0] ?? '';
     }
     loadStats() {
         if (fs.existsSync(this.statsFile)) {
@@ -343,11 +343,14 @@ export class EventLog {
                 if (!stats.hooks.byType[data.hook]) {
                     stats.hooks.byType[data.hook] = { total: 0, success: 0, failure: 0 };
                 }
-                stats.hooks.byType[data.hook].total++;
-                if (entry.category === 'success')
-                    stats.hooks.byType[data.hook].success++;
-                else
-                    stats.hooks.byType[data.hook].failure++;
+                const hookStats = stats.hooks.byType[data.hook];
+                if (hookStats) {
+                    hookStats.total++;
+                    if (entry.category === 'success')
+                        hookStats.success++;
+                    else
+                        hookStats.failure++;
+                }
             }
         }
         else if (entry.type === 'empathy_rollback') {
@@ -383,13 +386,13 @@ export class EventLog {
             const raw = entry.data;
             if (Object.prototype.hasOwnProperty.call(raw, 'category')) {
                 const cat = raw['category'];
-                if (cat === 'success' || cat === 'missing_json' || cat === 'incomplete_fields') {
+                if (typeof cat === 'string' && (cat === 'success' || cat === 'missing_json' || cat === 'incomplete_fields')) {
                     stats.evolution.diagnosticianReportsWritten++;
                 }
-                if (cat === 'missing_json') {
+                if (typeof cat === 'string' && cat === 'missing_json') {
                     stats.evolution.reportsMissingJson++;
                 }
-                if (cat === 'incomplete_fields') {
+                if (typeof cat === 'string' && cat === 'incomplete_fields') {
                     stats.evolution.reportsIncompleteFields++;
                 }
             }
@@ -651,6 +654,8 @@ export class EventLog {
         const allEvents = this.getMergedEvents();
         for (let i = allEvents.length - 1; i >= 0; i--) {
             const entry = allEvents[i];
+            if (!entry)
+                continue;
             if (entry.sessionId === sessionId && entry.type === 'pain_signal') {
                 const data = entry.data;
                 if (data.source === 'user_empathy' && !data.deduped) {
@@ -664,6 +669,8 @@ export class EventLog {
         const allEvents = this.getMergedEvents();
         for (let i = allEvents.length - 1; i >= 0; i--) {
             const entry = allEvents[i];
+            if (!entry)
+                continue;
             if (entry.sessionId === sessionId && entry.type === "pain_signal") {
                 return entry.data;
             }

package/dist/core/focus-history.js

@@ -503,7 +503,7 @@ export function recoverFromTemplate(focusPath, extensionRoot) {
             };
         }
         let template = fs.readFileSync(templatePath, 'utf-8');
-        const [today] = new Date().toISOString().split('T');
+        const today = new Date().toISOString().split('T')[0] ?? '';
         template = template.replace(/{YYYY-MM-DD}/g, today);
         if (fs.existsSync(focusPath)) {
             const backupPath = `${focusPath}.corrupted.${Date.now()}.md`;

package/dist/core/hygiene/tracker.js

@@ -24,7 +24,7 @@ export class HygieneTracker {
         this.currentStats = this.loadStats();
     }
     loadStats() {
-        const [today] = new Date().toISOString().split('T');
+        const today = new Date().toISOString().split('T')[0] ?? '';
         if (fs.existsSync(this.statsFile)) {
             try {
                 const content = fs.readFileSync(this.statsFile, 'utf-8');
@@ -54,7 +54,7 @@ export class HygieneTracker {
     saveStats() {
         let allStats = {};
         // Check if we need to rotate date (reset currentStats if date changed)
-        const [today] = new Date().toISOString().split('T');
+        const today = new Date().toISOString().split('T')[0] ?? '';
         if (this.currentStats.date !== today) {
             this.currentStats = createEmptyHygieneStats(today);
         }
@@ -101,7 +101,7 @@ export class HygieneTracker {
     }
     getStats() {
         // Check for date change on every get
-        const [today] = new Date().toISOString().split('T');
+        const today = new Date().toISOString().split('T')[0] ?? '';
         if (this.currentStats.date !== today) {
             this.currentStats = createEmptyHygieneStats(today);
         }

package/dist/core/principle-compiler/compiler.js

@@ -244,6 +244,8 @@ export class PrincipleCompiler {
         if (patterns.length === 0)
             return [];
         const pattern = patterns[0];
+        if (!pattern)
+            return [];
         // Skip replay when the pattern has no regex qualifier -- the generated template
         // blocks ALL calls to the tool, making it impossible to construct a passing
         // positive case. Replay is only meaningful when the template is selective.

package/dist/core/replay-engine.js

@@ -30,7 +30,7 @@ export class ReplayEngine {
     }
     getLatestReport(implementationId) {
         const reports = this.listReports(implementationId);
-        return reports.length > 0 ? reports[0] : null;
+        return reports[0] ?? null;
     }
     hasPassingReport(implementationId) {
         return this.listReports(implementationId).some((report) => report.overallDecision === 'pass');

package/dist/core/rule-host.js

@@ -188,7 +188,9 @@ export class RuleHost {
                     }
                 }
                 else {
-                    validRows.push(group[0]);
+                    const row = group[0];
+                    if (row)
+                        validRows.push(row);
                 }
             }
             const loaded = [];

package/dist/core/thinking-os-parser.js

@@ -23,7 +23,10 @@ function extractTag(content, tagName) {
     const match = content.match(regex);
     if (!match)
         return '';
-    return match[1].trim().replace(/\s+/g, ' ');
+    const raw = match[1];
+    if (!raw)
+        return '';
+    return raw.trim().replace(/\s+/g, ' ');
 }
 /**
  * Parse THINKING_OS.md content and extract all <directive> blocks.
@@ -35,14 +38,20 @@ export function parseThinkingOsMd(content) {
     const directiveRegex = /<directive\s+([^>]*)>([\s\S]*?)<\/directive>/gi;
     let _match = null;
     while ((_match = directiveRegex.exec(content)) !== null) {
-        const [, attrs, body] = _match;
+        const attrs = _match[1];
+        const body = _match[2];
+        if (!attrs || !body)
+            continue;
         const idMatch = /id="([^"]+)"/i.exec(attrs);
         const nameMatch = /name="([^"]+)"/i.exec(attrs);
         if (!idMatch)
             continue;
+        const id = idMatch[1];
+        if (!id)
+            continue;
         const directive = {
-            id: idMatch[1],
-            name: nameMatch ? nameMatch[1] : '',
+            id,
+            name: nameMatch ? (nameMatch[1] ?? '') : '',
             trigger: extractTag(body, 'trigger'),
             must: extractTag(body, 'must'),
             forbidden: extractTag(body, 'forbidden'),

package/dist/hooks/trajectory-collector.d.ts

@@ -1,9 +1,23 @@
 /**
  * Trajectory Collector - message write trajectory recording
  *
- * Records message data to memory/trajectories/ JSONL files.
- * PRI-347 removed tool_call and llm_output JSONL writers (no consumers).
- * PRI-346 will repurpose handleBeforeMessageWrite for SQLite collection.
+ * Fallback trajectory collection when llm_output is blocked by missing
+ * allowConversationAccess. before_message_write is NOT in
+ * CONVERSATION_HOOK_NAMES so OpenClaw always delivers it.
+ *
+ * SQLite writes are enqueued to an async queue because before_message_write is
+ * a SYNCHRONOUS OpenClaw hook — the handler must return immediately. better-sqlite3
+ * is synchronous, so calling it directly would block the message-write main path.
+ * Trade-off: in degradation mode the last few queued writes may be lost on
+ * process exit; this is acceptable because degradation mode is already caused
+ * by a config problem (missing allowConversationAccess), and the primary
+ * llm_output path is authoritative when authorized.
+ *
+ * JSONL writing was removed (no consumers — verified zero readers across the
+ * codebase; PRI-347 already removed tool_call/llm_output JSONL writers).
+ *
+ * ERR-002: fallback errors are logged, never silent.
+ * ERR-001/005: content is sanitized before persisting.
  */
 import type { PluginHookAgentContext, PluginHookBeforeMessageWriteEvent } from '../openclaw-sdk.js';
 /**
@@ -14,7 +28,9 @@ import type { PluginHookAgentContext, PluginHookBeforeMessageWriteEvent } from '
  * CONVERSATION_HOOK_NAMES, so it always fires — making it the natural fallback.
  *
  * De-duplication: only writes to SQLite when llm_output is blocked (unauthorized).
- * When llm_output is working (authorized), this hook degrades to JSONL-only.
+ * When llm_output is working (authorized), this hook is a no-op.
+ *
+ * SQLite writes are async-queued (see file header) to avoid blocking the sync hook.
  *
  * ERR-002: structured observability when fallback fires.
  * ERR-001/005: content is sanitized before persisting.

package/dist/hooks/trajectory-collector.js

@@ -1,127 +1,79 @@
 /**
  * Trajectory Collector - message write trajectory recording
  *
- * Records message data to memory/trajectories/ JSONL files.
- * PRI-347 removed tool_call and llm_output JSONL writers (no consumers).
- * PRI-346 will repurpose handleBeforeMessageWrite for SQLite collection.
+ * Fallback trajectory collection when llm_output is blocked by missing
+ * allowConversationAccess. before_message_write is NOT in
+ * CONVERSATION_HOOK_NAMES so OpenClaw always delivers it.
+ *
+ * SQLite writes are enqueued to an async queue because before_message_write is
+ * a SYNCHRONOUS OpenClaw hook — the handler must return immediately. better-sqlite3
+ * is synchronous, so calling it directly would block the message-write main path.
+ * Trade-off: in degradation mode the last few queued writes may be lost on
+ * process exit; this is acceptable because degradation mode is already caused
+ * by a config problem (missing allowConversationAccess), and the primary
+ * llm_output path is authoritative when authorized.
+ *
+ * JSONL writing was removed (no consumers — verified zero readers across the
+ * codebase; PRI-347 already removed tool_call/llm_output JSONL writers).
+ *
+ * ERR-002: fallback errors are logged, never silent.
+ * ERR-001/005: content is sanitized before persisting.
  */
-import * as fs from 'fs';
-import * as path from 'path';
 import { MAX_STRING_LENGTH } from '../config/defaults/runtime.js';
 import { WorkspaceContext } from '../core/workspace-context.js';
 import { SystemLogger } from '../core/system-logger.js';
 import { sanitizeForEvidence } from './message-sanitize.js';
 import { checkConversationAccessConfig } from '../core/config-health.js';
-const TRAJECTORY_DIR = 'memory/trajectories/';
-// 敏感字段匹配正则
-const SENSITIVE_KEY_PATTERN = /password|token|authorization|secret|api[_-]?key|credential|cookie|session/i;
-/**
- * 递归脱敏处理：遍历对象/数组，移除敏感字段值
- */
-function scrubSensitive(obj, depth = 0) {
-    // 防止无限递归
-    if (depth > 10)
-        return '[MAX_DEPTH]';
-    // 处理 null/undefined
-    if (obj == null)
-        return obj;
-    // 处理基本类型
-    if (typeof obj !== 'object') {
-        if (typeof obj === 'string' && obj.length > MAX_STRING_LENGTH) {
-            return obj.slice(0, MAX_STRING_LENGTH) + '...[truncated]';
-        }
-        return obj;
-    }
-    // 处理数组
-    if (Array.isArray(obj)) {
-        return obj.map(item => scrubSensitive(item, depth + 1));
-    }
-    // 处理对象
-    const result = {};
-    for (const [key, value] of Object.entries(obj)) {
-        if (SENSITIVE_KEY_PATTERN.test(key)) {
-            result[key] = '[REDACTED]';
-        }
-        else {
-            result[key] = scrubSensitive(value, depth + 1);
-        }
-    }
-    return result;
-}
 /**
- * 异步写入队列 - 确保有序、非阻塞写入
+ * Async write queue — ensures ordered, non-blocking execution of SQLite writes.
+ * before_message_write is a sync hook; SQLite I/O must not block it.
+ *
+ * Tasks are deferred to the microtask queue via `queueMicrotask` so the sync
+ * hook handler returns before any synchronous better-sqlite3 work runs.
  */
 class AsyncWriteQueue {
     queue = [];
     processing = false;
-    async enqueue(task) {
+    enqueue(task) {
         this.queue.push(task);
         if (!this.processing) {
-            this.processNext();
+            this.processing = true;
+            queueMicrotask(() => { void this.processNext(); });
         }
     }
     async processNext() {
-        if (this.queue.length === 0) {
-            this.processing = false;
-            return;
-        }
-        this.processing = true;
-        const task = this.queue.shift();
-        if (!task) {
-            this.processing = false;
-            return;
+        while (this.queue.length > 0) {
+            const task = this.queue.shift();
+            if (!task)
+                break;
+            try {
+                await task();
+            }
+            catch (err) {
+                // EP-03/ERR-002: safety net — tasks should catch their own errors with
+                // structured logging. This catches bugs where a task's try/catch is
+                // missing or re-throws. Never silently swallow (ERR-002).
+                console.warn('[PD:trajectory-queue] uncaught task error:', err);
+            }
         }
-        try {
-            await task();
-        }
-        catch {
-            // Silently fail - trajectory collection should not block main functionality
-        }
-        // 处理下一个任务
-        this.processNext();
+        this.processing = false;
     }
 }
-// 全局写入队列实例
 const writeQueue = new AsyncWriteQueue();
-// 目录缓存（避免重复检查）
-const dirCache = new Map();
 /**
- * 确保轨迹目录存在（异步）
+ * Extract text content from a message (string or content-part array).
  */
-async function ensureTrajectoryDirAsync(workspaceDir) {
-    const dir = path.join(workspaceDir, TRAJECTORY_DIR);
-    if (dirCache.get(dir)) {
-        return dir;
-    }
-    try {
-        await fs.promises.mkdir(dir, { recursive: true });
-        dirCache.set(dir, true);
+function extractContent(content) {
+    if (typeof content === 'string') {
+        return content;
     }
-    catch {
-        // 目录可能已存在，忽略错误
-        dirCache.set(dir, true);
+    if (Array.isArray(content)) {
+        return content
+            .filter((part) => part && typeof part === 'object' && part.type === 'text')
+            .map((part) => part.text)
+            .join('\n');
     }
-    return dir;
-}
-/**
- * 获取今日轨迹文件名
- */
-function getTodayFilename() {
-    const now = new Date();
-    const year = now.getUTCFullYear();
-    const month = String(now.getUTCMonth() + 1).padStart(2, '0');
-    return `${year}-${month}-${String(now.getUTCDate()).padStart(2, '0')}.jsonl`;
-}
-/**
- * 写入轨迹记录（JSON Lines 格式）- 异步版本
- */
-function writeTrajectoryRecord(workspaceDir, record) {
-    const line = JSON.stringify(record) + '\n';
-    writeQueue.enqueue(async () => {
-        const dir = await ensureTrajectoryDirAsync(workspaceDir);
-        const filepath = path.join(dir, getTodayFilename());
-        await fs.promises.appendFile(filepath, line, 'utf8');
-    });
+    return '';
 }
 /**
  * PRI-346: Message write hook with SQLite fallback trajectory recording.
@@ -131,7 +83,9 @@ function writeTrajectoryRecord(workspaceDir, record) {
  * CONVERSATION_HOOK_NAMES, so it always fires — making it the natural fallback.
  *
  * De-duplication: only writes to SQLite when llm_output is blocked (unauthorized).
- * When llm_output is working (authorized), this hook degrades to JSONL-only.
+ * When llm_output is working (authorized), this hook is a no-op.
+ *
+ * SQLite writes are async-queued (see file header) to avoid blocking the sync hook.
  *
  * ERR-002: structured observability when fallback fires.
  * ERR-001/005: content is sanitized before persisting.
@@ -146,73 +100,58 @@ export function handleBeforeMessageWrite(event, ctx) {
     // Only record user and assistant messages
     if (msg.role !== 'user' && msg.role !== 'assistant')
         return;
-    // Extract text content (consistent with existing implementation)
-    let content = '';
-    if (typeof msg.content === 'string') {
-        content = msg.content;
-    }
-    else if (Array.isArray(msg.content)) {
-        content = msg.content
-            .filter((part) => part && typeof part === 'object' && part.type === 'text')
-            .map((part) => part.text)
-            .join('\n');
-    }
-    // Sanitize content preview for JSONL
-    const sanitizedPreview = scrubSensitive(content.slice(0, 200));
-    // Existing JSONL write (always, for backward compatibility)
-    writeTrajectoryRecord(workspaceDir, {
-        type: 'message',
-        timestamp: new Date().toISOString(),
-        sessionId: event.sessionKey || event.sessionId || 'unknown',
-        role: msg.role,
-        contentLength: content.length,
-        contentPreview: typeof sanitizedPreview === 'string' ? sanitizedPreview : '[sanitized]',
-        agentId: event.agentId || null,
-        fallback: 'before_message_write',
-    });
     // ── SQLite fallback (PRI-346): only when conversation hooks are blocked ──
     const accessCheck = checkConversationAccessConfig(ctx.pluginConfig);
     if (accessCheck.authorized) {
         // llm_output is working — do NOT duplicate write to SQLite (de-dup, case D)
         return;
     }
-    // Conversation hooks blocked — this hook is the fallback trajectory writer
+    // Conversation hooks blocked — this hook is the fallback trajectory writer.
+    // Enqueue SQLite writes to avoid blocking the sync before_message_write hook.
+    const logger = ctx.logger;
+    const content = extractContent(msg.content);
+    const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
+    const createdAt = new Date().toISOString();
     if (msg.role === 'assistant') {
-        try {
-            const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger: ctx.logger });
-            const sanitized = sanitizeForEvidence(content.slice(0, MAX_STRING_LENGTH), workspaceDir);
-            const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
-            wctx.trajectory?.recordAssistantTurn?.({
-                sessionId,
-                runId: 'before_message_write_fallback',
-                provider: 'unknown',
-                model: 'unknown',
-                rawText: content,
-                sanitizedText: sanitized,
-                usageJson: {},
-                empathySignalJson: { detected: false, severity: 'mild', confidence: 1 },
-                createdAt: new Date().toISOString(),
-            });
-        }
-        catch (err) {
-            ctx.logger?.warn?.(`[PD:before_message_write] SQLite fallback write failed: ${String(err)}`);
-        }
+        writeQueue.enqueue(async () => {
+            try {
+                const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
+                const sanitized = sanitizeForEvidence(content.slice(0, MAX_STRING_LENGTH), workspaceDir);
+                wctx.trajectory?.recordAssistantTurn?.({
+                    sessionId,
+                    runId: 'before_message_write_fallback',
+                    provider: 'unknown',
+                    model: 'unknown',
+                    rawText: content,
+                    sanitizedText: sanitized,
+                    usageJson: {},
+                    empathySignalJson: { detected: false, severity: 'mild', confidence: 1 },
+                    createdAt,
+                });
+            }
+            catch (err) {
+                // EP-03/ERR-002: observable degradation, never silent
+                logger?.warn?.(`[PD:before_message_write] SQLite fallback write failed: ${String(err)}`);
+            }
+        });
     }
     else if (msg.role === 'user') {
-        try {
-            const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger: ctx.logger });
-            const sessionId = event.sessionKey ?? ctx.sessionId ?? 'unknown';
-            wctx.trajectory?.recordUserTurn?.({
-                sessionId,
-                turnIndex: 0,
-                rawText: content.slice(0, MAX_STRING_LENGTH),
-                correctionDetected: false,
-                createdAt: new Date().toISOString(),
-            });
-        }
-        catch (err) {
-            ctx.logger?.warn?.(`[PD:before_message_write] SQLite user turn fallback failed: ${String(err)}`);
-        }
+        writeQueue.enqueue(async () => {
+            try {
+                const wctx = WorkspaceContext.fromHookContext({ workspaceDir, logger });
+                wctx.trajectory?.recordUserTurn?.({
+                    sessionId,
+                    turnIndex: 0,
+                    rawText: content.slice(0, MAX_STRING_LENGTH),
+                    correctionDetected: false,
+                    createdAt,
+                });
+            }
+            catch (err) {
+                // EP-03/ERR-002: observable degradation, never silent
+                logger?.warn?.(`[PD:before_message_write] SQLite user turn fallback failed: ${String(err)}`);
+            }
+        });
     }
     // ERR-002: Structured observability — no silent fallback
     SystemLogger.log(workspaceDir, 'CONVERSATION_HOOK_BLOCKED', JSON.stringify({

package/dist/index.js

@@ -266,6 +266,9 @@ const plugin = {
             }
         }));
         // ── Hook: Pain & Trust ──
+        // timeoutMs=10s: OpenClaw has no default timeout for after_tool_call; without
+        // this a stuck SQLite write (busy_timeout=5000ms) leaks the handler promise.
+        // 10s gives 2x headroom over busy_timeout. fail-open means agent is unaffected.
         api.on('after_tool_call', guardHook('hook:after_tool_call', api.logger, (event, ctx) => {
             const wsResult = resolveHookWorkspaceDir(ctx, api, 'after_tool_call');
             if (!wsResult.ok) {
@@ -294,8 +297,10 @@ const plugin = {
                 }, { flushImmediately: true });
                 api.logger.error(`[PD:EmpathyObserver] Error in after_tool_call: ${String(err)}`);
             }
-        }));
+        }), { timeoutMs: 10_000 });
         // ── Hook: LLM Analysis ──
+        // timeoutMs=10s: OpenClaw has no default timeout for llm_output; without
+        // this a stuck SQLite write leaks the handler promise. See after_tool_call.
         api.on('llm_output', guardHook('hook:llm_output', api.logger, (event, ctx) => {
             const wsResult = resolveHookWorkspaceDir(ctx, api, 'llm_output');
             if (!wsResult.ok) {
@@ -325,7 +330,7 @@ const plugin = {
                 });
                 api.logger.error(`[PD] Error in llm_output: ${String(err)}`);
             }
-        }));
+        }), { timeoutMs: 10_000 });
         // ── Hook: Lifecycle ──
         api.on('before_reset', guardHook('hook:before_reset', api.logger, (event, ctx) => {
             const wsResult = resolveHookWorkspaceDir(ctx, api, 'before_reset');

package/dist/openclaw-sdk.d.ts

@@ -151,7 +151,10 @@ export interface OpenClawPluginApi {
             text: (content: string, code?: number) => void;
         }) => boolean | Promise<boolean>;
     }) => void;
-    on: (event: string, handler: (...args: any[]) => unknown) => void;
+    on: (event: string, handler: (...args: any[]) => unknown, opts?: {
+        priority?: number;
+        timeoutMs?: number;
+    }) => void;
 }
 export interface PluginHookBeforePromptBuildEvent {
     agentId?: string;

package/dist/service/evolution-worker.js

@@ -93,7 +93,8 @@ export function purgeStaleFailedTasks(queue, logger) {
     // Remove purged items from the queue (mutates in place)
     const purgedIds = new Set(purged.map((t) => t.id));
     for (let i = queue.length - 1; i >= 0; i--) {
-        if (purgedIds.has(queue[i].id))
+        const task = queue[i];
+        if (task && purgedIds.has(task.id))
             queue.splice(i, 1);
     }
     const summary = Object.entries(byReason)
@@ -377,17 +378,20 @@ async function processDetectionQueue(wctx, api, eventLog) {
                 if (wctx.trajectory) {
                     const searchResults = wctx.trajectory.searchPainEvents(text, 5);
                     if (searchResults.length > 0) {
+                        const topResult = searchResults[0];
+                        if (!topResult)
+                            continue;
                         // Found similar pain events - record as L3 semantic hit
                         if (eventLog) {
                             eventLog.recordRuleMatch(undefined, {
                                 ruleId: 'l3_semantic',
                                 layer: 'L3',
-                                severity: searchResults[0].score,
+                                severity: topResult.score,
                                 textPreview: text.substring(0, 100)
                             });
                         }
                         // Update detection funnel cache with L3 hit result
-                        funnel.updateCache(text, { detected: true, severity: searchResults[0].score });
+                        funnel.updateCache(text, { detected: true, severity: topResult.score });
                         // Don't track as candidate - this is a confirmed L3 hit
                         if (logger)
                             logger.info(`[PD:EvolutionWorker] L3 semantic hit: found ${searchResults.length} similar pain events for "${text.substring(0, 50)}..."`);

package/dist/service/runtime-summary-service.js

@@ -290,7 +290,10 @@ export class RuntimeSummaryService {
         if (sessions.length === 0) {
             return { session: null, reason: 'none' };
         }
-        return { session: sessions[0], reason: 'latest_active' };
+        const session = sessions[0];
+        if (!session)
+            return { session: null, reason: 'none' };
+        return { session, reason: 'latest_active' };
     }
     static mergeSessionSnapshots(persistedSessions, workspaceDir) {
         const merged = new Map();
@@ -392,6 +395,8 @@ export class RuntimeSummaryService {
                         if (!m)
                             continue;
                         const fileDate = m[1];
+                        if (!fileDate)
+                            continue;
                         if (fileDate > newestDate) {
                             newestDate = fileDate;
                             bestFile = path.join(dir, file);
@@ -463,6 +468,8 @@ export class RuntimeSummaryService {
     static findLastPainSignal(events, sessionId) {
         for (let i = events.length - 1; i >= 0; i--) {
             const entry = events[i];
+            if (!entry)
+                continue;
             if (entry.type !== 'pain_signal')
                 continue;
             if (sessionId && entry.sessionId !== sessionId)

package/dist/service/workflow-watchdog.js

@@ -32,7 +32,8 @@ export async function runWorkflowWatchdog(wctx, api, logger) {
                     const ageMin = Math.round((now - wf.created_at) / 60000);
                     details.push(`stale_active: ${wf.workflow_id} (${wf.workflow_type}, ${ageMin}min old)`);
                     const events = store.getEvents(wf.workflow_id);
-                    const lastEventReason = events.length > 0 ? events[events.length - 1].reason : 'unknown';
+                    const lastEvent = events[events.length - 1];
+                    const lastEventReason = lastEvent ? lastEvent.reason : 'unknown';
                     if (isExpectedSubagentError(lastEventReason)) {
                         logger?.debug?.(`[PD:Watchdog] Skipping stale active workflow ${wf.workflow_id}: expected subagent error (${lastEventReason})`);
                         continue;

package/dist/utils/retry.js

@@ -245,11 +245,13 @@ export function percentile(values, p) {
     const n = sorted.length;
     // For small samples, use median to avoid overfitting
     if (n < 10) {
-        return sorted[Math.floor(n / 2)];
+        const median = sorted[Math.floor(n / 2)];
+        return median ?? 0;
     }
     // Standard percentile calculation (nearest-rank method)
     const rank = Math.ceil((p / 100) * n);
-    return sorted[Math.min(rank, n) - 1];
+    const result = sorted[Math.min(rank, n) - 1];
+    return result ?? 0;
 }
 /**
  * Clamp timeout to safe bounds.
@@ -317,6 +319,9 @@ export function computeAdaptiveTimeout(history, fallbackMs, options = {}) {
     const sorted = [...history].sort((a, b) => a - b);
     const rank = Math.ceil((p / 100) * sorted.length);
     const pValue = sorted[Math.min(rank, sorted.length) - 1];
+    if (pValue === undefined) {
+        return Math.max(minTimeoutMs, Math.min(maxTimeoutMs, fallbackMs));
+    }
     const adaptive = pValue * safetyMultiplier;
     return Math.max(minTimeoutMs, Math.min(maxTimeoutMs, Math.round(adaptive)));
 }

package/dist/utils/session-key.js

@@ -13,6 +13,9 @@ export function extractAgentIdFromSessionKey(sessionKey) {
     const match = /^agent:([^:]+):/.exec(sessionKey);
     if (!match)
         return undefined;
-    const agentId = match[1].trim();
+    const raw = match[1];
+    if (!raw)
+        return undefined;
+    const agentId = raw.trim();
     return agentId || undefined;
 }

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Evolutionary programming agent framework with strategic guardrails and reflection loops.",
-  "version": "1.137.0",
+  "version": "1.139.0",
   "activation": {
     "onCapabilities": [
       "hook"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.137.0",
+  "version": "1.139.0",
   "description": "Native OpenClaw plugin for Principles Disciple",
   "type": "module",
   "main": "./dist/bundle.js",