principles-disciple 1.157.0 → 1.159.0

package/dist/core/rule-context-assembler.d.ts

@@ -0,0 +1,45 @@
+/**
+ * PRI-482 Phase 3 — Production RuleContext v2 assembler
+ *
+ * Converts raw TrajectoryDatabase rows into a validated RuleHistoryWindow,
+ * and provides buildProductionRuleContext for gate integration.
+ *
+ * ERR prevention:
+ *   - ERR-001: every row field is validated as unknown. No `as` bypass on
+ *     parsed params_json or outcome.
+ *   - ERR-024: buildProductionRuleContext fail-soft — query failure returns
+ *     unavailable, never throws.
+ *   - ERR-025: callers use recordToolCall → getRuleHostContextRows → this
+ *     assembler, covering the full production chain.
+ *
+ * Spec: docs/superpowers/specs/2026-06-27-rulecode-context-vision-design.md §5.
+ */
+import type { RuleContextV2, RuleHistoryWindow } from '@principles/core/runtime-v2';
+import type { RuleHostContextResult, RuleHostContextRow } from './trajectory-types.js';
+/**
+ * Minimal interface for the data source that TrajectoryDatabase satisfies.
+ * Allows testing buildProductionRuleContext without a real DB.
+ */
+export interface RuleContextDataSource {
+    getRuleHostContextRows(sessionId: string, limit: number): RuleHostContextResult;
+}
+/**
+ * Convert raw DB rows into a validated RuleHistoryWindow.
+ *
+ * If ANY row is malformed (bad params_json, invalid outcome, empty tool_name),
+ * the entire window is marked unavailable (fail loud, spec §5.2).
+ *
+ * ERR-001: row fields are validated as unknown. params_json is JSON.parsed
+ * then structurally checked (must be a non-array object). No `as` bypass.
+ */
+export declare function assembleHistoryFromRows(rows: readonly RuleHostContextRow[], truncated: boolean, projectDir: string): RuleHistoryWindow;
+/**
+ * Build a RuleContextV2 from the production data source (TrajectoryDatabase).
+ *
+ * ERR-024: if the query or assembly fails, returns an unavailable context
+ * (fail-soft). Never throws.
+ *
+ * sameActionBlockCount is always null in this version (spec §5.4:
+ * session-tracker.blockedAttempts is a session total, not per-action).
+ */
+export declare function buildProductionRuleContext(sessionId: string | null | undefined, targetPath: string | null, source: RuleContextDataSource, projectDir: string, limit?: number): RuleContextV2;

package/dist/core/rule-context-assembler.js

@@ -0,0 +1,148 @@
+/**
+ * PRI-482 Phase 3 — Production RuleContext v2 assembler
+ *
+ * Converts raw TrajectoryDatabase rows into a validated RuleHistoryWindow,
+ * and provides buildProductionRuleContext for gate integration.
+ *
+ * ERR prevention:
+ *   - ERR-001: every row field is validated as unknown. No `as` bypass on
+ *     parsed params_json or outcome.
+ *   - ERR-024: buildProductionRuleContext fail-soft — query failure returns
+ *     unavailable, never throws.
+ *   - ERR-025: callers use recordToolCall → getRuleHostContextRows → this
+ *     assembler, covering the full production chain.
+ *
+ * Spec: docs/superpowers/specs/2026-06-27-rulecode-context-vision-design.md §5.
+ */
+import { canonicalizeToolKind, computeBehaviorFacts, extractFilePathFromParams, normalizePathPure, UNAVAILABLE_RULE_CONTEXT, } from '@principles/core/runtime-v2';
+// ── internal constants ─────────────────────────────────────────────────────
+const VALID_OUTCOMES = new Set([
+    'success',
+    'failure',
+    'blocked',
+]);
+const DEFAULT_HISTORY_LIMIT = 20;
+// ── type guards (rc-2: no `as` bypass) ─────────────────────────────────────
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isRuleToolOutcome(value) {
+    return typeof value === 'string' && VALID_OUTCOMES.has(value);
+}
+// ── assembleHistoryFromRows ────────────────────────────────────────────────
+/**
+ * Convert raw DB rows into a validated RuleHistoryWindow.
+ *
+ * If ANY row is malformed (bad params_json, invalid outcome, empty tool_name),
+ * the entire window is marked unavailable (fail loud, spec §5.2).
+ *
+ * ERR-001: row fields are validated as unknown. params_json is JSON.parsed
+ * then structurally checked (must be a non-array object). No `as` bypass.
+ */
+export function assembleHistoryFromRows(rows, truncated, projectDir) {
+    const records = [];
+    for (const row of rows) {
+        // ── validate tool_name (ERR-001: unknown) ──
+        const toolName = row.toolName;
+        if (typeof toolName !== 'string' || toolName.length === 0) {
+            return unavailable(`row id=${row.id}: tool_name must be a non-empty string`);
+        }
+        // ── validate outcome (ERR-001: unknown, enum check) ──
+        const outcome = row.outcome;
+        if (!isRuleToolOutcome(outcome)) {
+            return unavailable(`row id=${row.id}: outcome "${row.outcome}" is not a valid RuleToolOutcome`);
+        }
+        // ── validate & parse params_json (ERR-001: unknown) ──
+        const paramsJsonStr = row.paramsJson;
+        if (typeof paramsJsonStr !== 'string') {
+            return unavailable(`row id=${row.id}: params_json must be a string`);
+        }
+        let parsedParams;
+        try {
+            parsedParams = JSON.parse(paramsJsonStr);
+        }
+        catch {
+            return unavailable(`row id=${row.id}: params_json is not valid JSON`);
+        }
+        // Must be a non-array object (spec §5.2)
+        if (!isPlainObject(parsedParams)) {
+            return unavailable(`row id=${row.id}: params_json must parse to a non-array object`);
+        }
+        // ── build RuleToolCallRecord ──
+        const canonicalKind = canonicalizeToolKind(toolName);
+        // Extract normalized path using the same pure logic as buildRuleHostAction
+        // (avoids production/replay drift, spec §4.4)
+        const rawPath = extractFilePathFromParams(parsedParams, {
+            isBashTool: canonicalKind === 'execute',
+            isWriteTool: canonicalKind === 'write',
+            toolName,
+        });
+        const normalizedPath = normalizePathPure(rawPath, projectDir);
+        records.push({
+            sequenceId: row.id,
+            toolName,
+            canonicalKind,
+            normalizedPath: normalizedPath === '' ? null : normalizedPath,
+            paramsSummary: parsedParams,
+            outcome,
+        });
+    }
+    return {
+        status: 'available',
+        truncated,
+        calls: records,
+    };
+}
+// ── buildProductionRuleContext ─────────────────────────────────────────────
+/**
+ * Build a RuleContextV2 from the production data source (TrajectoryDatabase).
+ *
+ * ERR-024: if the query or assembly fails, returns an unavailable context
+ * (fail-soft). Never throws.
+ *
+ * sameActionBlockCount is always null in this version (spec §5.4:
+ * session-tracker.blockedAttempts is a session total, not per-action).
+ */
+export function buildProductionRuleContext(sessionId, targetPath, source, projectDir, limit = DEFAULT_HISTORY_LIMIT) {
+    // Guard: no session → no context
+    if (!sessionId || typeof sessionId !== 'string' || sessionId.length === 0) {
+        return UNAVAILABLE_RULE_CONTEXT;
+    }
+    try {
+        const result = source.getRuleHostContextRows(sessionId, limit);
+        const history = assembleHistoryFromRows(result.rows, result.truncated, projectDir);
+        // sameActionBlockCount = null (spec §5.4 — no reliable per-action source)
+        const facts = computeBehaviorFacts(history, targetPath, null);
+        return {
+            version: 2,
+            history,
+            facts,
+        };
+    }
+    catch {
+        // ERR-024: fail-soft — never let a DB error propagate to the rule host
+        return unavailableContext('query or assembly failed');
+    }
+}
+// ── internal helpers ───────────────────────────────────────────────────────
+function unavailable(reason) {
+    return {
+        status: 'unavailable',
+        unavailableReason: reason,
+        truncated: false,
+        calls: [],
+    };
+}
+function unavailableContext(reason) {
+    return {
+        version: 2,
+        history: unavailable(reason),
+        facts: {
+            priorReadOfTarget: 'unknown',
+            readCount: null,
+            writeCount: null,
+            uniqueWritePathCount: null,
+            sameActionBlockCount: null,
+        },
+    };
+}

package/dist/core/trajectory-types.d.ts

@@ -222,4 +222,22 @@ export interface TrajectoryDatabaseOptions {
     busyTimeoutMs?: number;
     orphanBlobGraceDays?: number;
 }
+/**
+ * Raw row from tool_calls for RuleContext v2 history assembly.
+ * Fields are raw strings from SQLite — the assembler validates them as unknown.
+ */
+export interface RuleHostContextRow {
+    readonly id: number;
+    readonly toolName: string;
+    readonly outcome: string;
+    readonly paramsJson: string;
+}
+/**
+ * Result of getRuleHostContextRows: FIFO-ordered rows + truncated flag.
+ * truncated=true when more than `limit` rows existed (limit+1 read trick).
+ */
+export interface RuleHostContextResult {
+    readonly rows: readonly RuleHostContextRow[];
+    readonly truncated: boolean;
+}
 export type { DailyMetricRow };

package/dist/core/trajectory.d.ts

@@ -1,5 +1,5 @@
-import type { CorrectionSampleReviewStatus, CorrectionExportMode, TrajectoryDataStats, TrajectoryAssistantTurnInput, TrajectoryUserTurnInput, TrajectoryToolCallInput, TrajectoryPainEventInput, TrajectoryGateBlockInput, TrajectoryTrustChangeInput, TrajectoryPrincipleEventInput, TrajectoryTaskOutcomeInput, TrajectorySessionInput, EvolutionTaskInput, EvolutionEventInput, EvolutionTaskRecord, EvolutionEventRecord, EvolutionTaskFilters, AssistantTurnRecord, CorrectionSampleRecord, TrajectoryExportResult, TrajectoryDatabaseOptions } from './trajectory-types.js';
-export type { CorrectionSampleReviewStatus, CorrectionExportMode, TrajectoryDataStats, TrajectoryAssistantTurnInput, TrajectoryUserTurnInput, TrajectoryToolCallInput, TrajectoryPainEventInput, TrajectoryGateBlockInput, DailyMetricRow, TrajectoryTrustChangeInput, TrajectoryPrincipleEventInput, TrajectoryTaskOutcomeInput, TrajectorySessionInput, TaskKind, TaskPriority, EvolutionTaskInput, EvolutionEventInput, EvolutionTaskRecord, EvolutionEventRecord, EvolutionTaskFilters, AssistantTurnRecord, CorrectionSampleRecord, TrajectoryExportResult, TrajectoryDatabaseOptions, } from './trajectory-types.js';
+import type { CorrectionSampleReviewStatus, CorrectionExportMode, TrajectoryDataStats, TrajectoryAssistantTurnInput, TrajectoryUserTurnInput, TrajectoryToolCallInput, TrajectoryPainEventInput, TrajectoryGateBlockInput, TrajectoryTrustChangeInput, TrajectoryPrincipleEventInput, TrajectoryTaskOutcomeInput, TrajectorySessionInput, EvolutionTaskInput, EvolutionEventInput, EvolutionTaskRecord, EvolutionEventRecord, EvolutionTaskFilters, AssistantTurnRecord, CorrectionSampleRecord, TrajectoryExportResult, TrajectoryDatabaseOptions, RuleHostContextResult } from './trajectory-types.js';
+export type { CorrectionSampleReviewStatus, CorrectionExportMode, TrajectoryDataStats, TrajectoryAssistantTurnInput, TrajectoryUserTurnInput, TrajectoryToolCallInput, TrajectoryPainEventInput, TrajectoryGateBlockInput, DailyMetricRow, TrajectoryTrustChangeInput, TrajectoryPrincipleEventInput, TrajectoryTaskOutcomeInput, TrajectorySessionInput, TaskKind, TaskPriority, EvolutionTaskInput, EvolutionEventInput, EvolutionTaskRecord, EvolutionEventRecord, EvolutionTaskFilters, AssistantTurnRecord, CorrectionSampleRecord, TrajectoryExportResult, TrajectoryDatabaseOptions, RuleHostContextRow, RuleHostContextResult, } from './trajectory-types.js';
 /**
  * Initialize trajectory.db schema at the given workspace directory.
  *
@@ -121,6 +121,15 @@ export declare class TrajectoryDatabase {
         resultPreview: string | null;
         createdAt: string;
     }[];
+    /**
+     * PRI-482 Phase 3: Query tool_calls for RuleContext v2 history assembly.
+     *
+     * Reads limit+1 rows (DESC by id) to compute truncated, then reverses to FIFO.
+     * Returns raw rows — the assembler (rule-context-assembler.ts) validates them.
+     *
+     * Spec: §5.1, §5.2. ERR-026: reuses production schema (no hand-written DDL).
+     */
+    getRuleHostContextRows(sessionId: string, limit?: number): RuleHostContextResult;
     /**
      * List pain events for a session.
      *

package/dist/core/trajectory.js

@@ -903,6 +903,36 @@ export class TrajectoryDatabase {
             };
         });
     }
+    /**
+     * PRI-482 Phase 3: Query tool_calls for RuleContext v2 history assembly.
+     *
+     * Reads limit+1 rows (DESC by id) to compute truncated, then reverses to FIFO.
+     * Returns raw rows — the assembler (rule-context-assembler.ts) validates them.
+     *
+     * Spec: §5.1, §5.2. ERR-026: reuses production schema (no hand-written DDL).
+     */
+    getRuleHostContextRows(sessionId, limit = 20) {
+        const cappedLimit = Math.max(1, Math.floor(limit));
+        const rows = this.db.prepare(`
+      SELECT id, tool_name, outcome, params_json
+      FROM tool_calls
+      WHERE session_id = ?
+      ORDER BY id DESC
+      LIMIT ?
+    `).all(sessionId, cappedLimit + 1);
+        const truncated = rows.length > cappedLimit;
+        const output = truncated ? rows.slice(0, cappedLimit) : rows;
+        output.reverse(); // DESC → FIFO (oldest first)
+        return {
+            rows: output.map((row) => ({
+                id: Number(row.id),
+                toolName: String(row.tool_name),
+                outcome: String(row.outcome),
+                paramsJson: String(row.params_json),
+            })),
+            truncated,
+        };
+    }
     /**
      * List pain events for a session.
      *

package/dist/hooks/gate.js

@@ -17,7 +17,7 @@ import { AGENT_TOOLS, BASH_TOOLS_SET, WRITE_TOOLS } from '../constants/tools.js'
 import { getSession, hasRecentThinking } from '../core/session-tracker.js';
 import { getEvolutionEngine } from '../core/evolution-engine.js';
 import { EventLogService } from '../core/event-log.js';
-import { estimateLineChanges } from '../core/risk-calculator.js';
+import { estimateLineChanges } from '@principles/core/runtime-v2';
 export function handleBeforeToolCall(event, ctx) {
     const logger = ctx.logger || console;
     // 1. Identify tool type

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Evolutionary programming agent framework with strategic guardrails and reflection loops.",
-  "version": "1.157.0",
+  "version": "1.159.0",
   "activation": {
     "onCapabilities": [
       "hook"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.157.0",
+  "version": "1.159.0",
   "description": "Native OpenClaw plugin for Principles Disciple",
   "type": "module",
   "main": "./dist/index.js",

package/dist/core/risk-calculator.d.ts

@@ -1,22 +0,0 @@
-export type RiskLevel = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
-export interface FileModification {
-    toolName: string;
-    params: Record<string, unknown>;
-}
-export declare function estimateLineChanges(modification: FileModification): number;
-export declare function assessRiskLevel(filePath: string, modification: FileModification, riskPaths: string[]): RiskLevel;
-/**
- * Get the total line count of a target file.
- * @param absoluteFilePath - Absolute path to the file
- * @returns File line count, or null if file doesn't exist or can't be read
- */
-export declare function getTargetFileLineCount(absoluteFilePath: string): number | null;
-/**
- * Calculate the effective line limit based on percentage of target file.
- * @param targetLineCount - Total lines in target file
- * @param percentage - Allowed percentage (0-100)
- * @param minLines - Absolute minimum threshold
- * @param maxLines - Optional upper bound to prevent misconfiguration
- * @returns Maximum allowed lines (at least minLines, at most maxLines if provided)
- */
-export declare function calculatePercentageThreshold(targetLineCount: number, percentage: number, minLines: number, maxLines?: number): number;

package/dist/core/risk-calculator.js

@@ -1,88 +0,0 @@
-/* global NodeJS */
-import * as fs from 'fs';
-import { isRisky } from '../utils/io.js';
-export function estimateLineChanges(modification) {
-    const { toolName, params } = modification;
-    if (toolName === 'write_file' || toolName === 'write') {
-        const content = params.content || '';
-        return content.split('\n').length;
-    }
-    if (toolName === 'replace' || toolName === 'edit') {
-        const newContent = params.new_string || params.newText || '';
-        return newContent.split('\n').length;
-    }
-    if (toolName === 'apply_patch' || toolName === 'patch') {
-        const patch = params.patch || '';
-        // Rough estimate for patch files
-        return patch.split('\n').filter((l) => l.startsWith('+') || l.startsWith('-')).length;
-    }
-    if (toolName === 'delete_file') {
-        // Deleting a file is considered a significant change, but we don't know the size. 
-        // We'll treat it as a medium-to-large size change.
-        return 50;
-    }
-    return 0;
-}
-export function assessRiskLevel(filePath, modification, riskPaths) {
-    const isRiskPath = isRisky(filePath, riskPaths);
-    const estimatedLines = estimateLineChanges(modification);
-    if (isRiskPath) {
-        if (estimatedLines > 100)
-            return 'CRITICAL';
-        return 'HIGH';
-    }
-    else {
-        if (estimatedLines > 100)
-            return 'HIGH';
-        if (estimatedLines > 10)
-            return 'MEDIUM';
-        return 'LOW';
-    }
-}
-/**
- * Get the total line count of a target file.
- * @param absoluteFilePath - Absolute path to the file
- * @returns File line count, or null if file doesn't exist or can't be read
- */
-export function getTargetFileLineCount(absoluteFilePath) {
-    try {
-        if (!fs.existsSync(absoluteFilePath)) {
-            return null; // File genuinely doesn't exist
-        }
-        const stats = fs.statSync(absoluteFilePath);
-        if (!stats.isFile()) {
-            return null; // Not a regular file (directory, device, etc.)
-        }
-        const content = fs.readFileSync(absoluteFilePath, 'utf-8');
-        return content.split('\n').length;
-    }
-    catch (e) {
-        // Log error before falling back to null - this is intentional for security gates
-        const error = e instanceof Error ? e : new Error(String(e));
-        const errorCode = e.code;
-        console.error(`[PD:RISK_CALC] Failed to read file for line count: ${absoluteFilePath}`, {
-            code: errorCode,
-            message: error.message,
-        });
-        return null;
-    }
-}
-/**
- * Calculate the effective line limit based on percentage of target file.
- * @param targetLineCount - Total lines in target file
- * @param percentage - Allowed percentage (0-100)
- * @param minLines - Absolute minimum threshold
- * @param maxLines - Optional upper bound to prevent misconfiguration
- * @returns Maximum allowed lines (at least minLines, at most maxLines if provided)
- */
-export function calculatePercentageThreshold(targetLineCount, percentage, minLines, maxLines) {
-    // Clamp percentage to valid range [0, 100]
-    const clampedPercentage = Math.max(0, Math.min(100, percentage));
-    const calculated = Math.round(targetLineCount * (clampedPercentage / 100));
-    let effectiveLimit = Math.max(calculated, minLines);
-    // Apply optional upper bound
-    if (maxLines !== undefined && maxLines > 0) {
-        effectiveLimit = Math.min(effectiveLimit, maxLines);
-    }
-    return effectiveLimit;
-}