principles-disciple 1.222.1 → 1.222.3

package/dist/core/principle-application-ledger.d.ts

@@ -27,6 +27,16 @@ export declare function alignActivationIds(principles: ReadonlyArray<{
     principleId: string;
     activationId?: string;
 }>, injectedIds: ReadonlySet<string>): string[];
+/**
+ * Filter a candidate list down to the actually-injected subset, deduped by
+ * principleId in first-occurrence order (PRI-537). Callers derive every
+ * paired field (principleId/activationId/artifactId) from this single list,
+ * so index alignment cannot drift between them. Supersedes per-field helpers
+ * like alignActivationIds for new call sites.
+ */
+export declare function alignInjectedPrinciples<T extends {
+    principleId: string;
+}>(principles: ReadonlyArray<T>, injectedIds: ReadonlySet<string>): T[];
 /**
  * Presence rows for a prompt injection event — one per principle, deduped per
  * session×principle by the partial unique index (restarts included).

package/dist/hooks/gate-block-helper.d.ts

@@ -15,7 +15,14 @@ import type { PluginHookBeforeToolCallResult } from '../openclaw-sdk.js';
  * Block context containing all information needed for block persistence
  */
 export interface BlockContext {
-    filePath: string;
+    /**
+     * Target path. Nullable by contract (PRI-569 round 3): the shared
+     * host-runtime path may deny a call whose path cannot be normalized, and
+     * trajectory.db accepts a null file_path — a deny is always accounted,
+     * never dropped for lack of a path. Display-only contexts use
+     * `<unresolved>` via the caller-side displayPath coercion.
+     */
+    filePath: string | null;
     reason: string;
     toolName: string;
     sessionId?: string;

package/dist/hooks/gate.d.ts

@@ -42,3 +42,25 @@ export declare function handleSharedRuleHostResult(event: PluginHookBeforeToolCa
     workspaceDir: string;
     logger?: Partial<PluginLogger>;
 }, result: HostEventResult): void;
+/**
+ * Authoritative accounting for ONE shared-path deny decision (PRI-569).
+ *
+ * Both shared-handler deny branches (resolvable and unresolved target path)
+ * funnel here: receipt-ledger effect row (flag-gated, failure-degrading —
+ * parity with the legacy hook path) plus persistGateBlock (session GFI,
+ * EventLog gate_block, trajectory gate_blocks with bounded retry). A null
+ * filePath is accounted with a null trajectory file_path; the EventLog copy
+ * carries an '<unresolved>' placeholder. Never throws into the caller;
+ * every skip/failure warns with a reasonCode (rc-9).
+ */
+export declare function accountSharedDeny(wctx: WorkspaceContext, accounting: {
+    sessionId?: string;
+    toolName: string;
+    filePath: string | null;
+    reason: string;
+    ruleId?: string;
+    principleId?: string;
+}, logger: {
+    warn?: (_message: string) => void;
+    error?: (_message: string) => void;
+}): void;

package/dist/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "1.222.1",
+  "version": "1.222.3",
   "activation": {
     "onCapabilities": [
       "hook"

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
-  "version": "1.222.1",
+  "version": "1.222.3",
   "activation": {
     "onCapabilities": [
       "hook"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.222.1",
+  "version": "1.222.3",
   "description": "Principles Disciple is an AI Agent Governance System. Stop correcting the same AI behavior across sessions. Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles.",
   "type": "module",
   "main": "./dist/index.js",