registry / principles-disciple / 1.174.0

principles-disciple@1.174.0

Native OpenClaw plugin for Principles Disciple

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 141 file(s), 1.05 MB of source

Source & flagged code

6 flagged

dist/core/rule-implementation-runtime.jsView file

Lines 1-21javascript

1import { nodeVm } from '../utils/node-vm-polyfill.js';

2import { spawnSync } from 'node:child_process';

3/** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

4const COMPILE_TIMEOUT_MS = 1000;

5/** Timeout (ms) for executing evaluate(input, helpers) inside the vm. */

6const EVALUATE_PROCESS_TIMEOUT_MS = 3000;

7const EVALUATE_PROCESS_OUTPUT_BYTES = 1024 * 1024;

8const EVALUATION_PROCESS_SOURCE = String.raw `

9const vm = require('node:vm');

10try {

11 const workerData = JSON.parse(require('node:fs').readFileSync(0, 'utf8'));

12 const context = vm.createContext(Object.create(null));

13 new vm.Script(workerData.source, { filename: workerData.filename }).runInContext(context, { timeout: 1000 });

14 const input = workerData.input;

15 const helpers = Object.freeze({

16 isRiskPath: () => input.workspace.isRiskPath,

17 getToolName: () => input.action.toolName,

18 getEstimatedLineChanges: () => input.derived.estimatedLineChanges,

19 getBashRisk: () => input.derived.bashRisk,

20 hasPlanFile: () => input.workspace.hasPlanFile,

21 getPlanStatus: () => input.workspace.planStatus,

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/core/trajectory.jsView file

Lines 469-509javascript

469 const rawStorage = this.storeRawText('user', input.rawText);

470 const createdAt = input.createdAt ?? nowIso();

471 return this.withWrite(() => {

472

Source & flagged code

6 flagged · loading source

dist/core/rule-implementation-runtime.jsView file

1import { nodeVm } from '../utils/node-vm-polyfill.js'; L2: import { spawnSync } from 'node:child_process'; L3: /** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

scripts/sync-plugin.mjsView file

848try { L849: execSync(`"${localShim}" --version`, { stdio: 'pipe', shell: true }); L850: console.log(`✅ PD CLI shim verified: ${localShim}`);

High

Shell

Package source references shell execution.

scripts/sync-plugin.mjsView on unpkg · L848

1329package = principles-disciple; repositoryIdentity = principles; dependency = better-sqlite3 L1329: try { L1330: execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' }); L1331: console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1329

915try { L916: execSync('npm install --omit=dev --no-audit --no-fund --prefer-offline', { L917: cwd: INSTALL_DIR,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/sync-plugin.mjsView on unpkg · L915

23import { fileURLToPath } from 'url'; L24: import { execSync } from 'child_process'; L25: L26: const __filename = fileURLToPath(import.meta.url); L27: const __dirname = dirname(__filename); L28: ... L38: function getHomeDir() { L39: return process.env.HOME L40: || process.env.USERPROFILE ... L52: const raw = readFileSync(configPath, 'utf-8'); L53: const config = JSON.parse(raw); L54: const workspace = config?.agents?.defaults?.workspace;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/sync-plugin.mjsView on unpkg · L23

dist/core/trajectory.jsView file

489) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) L490: `).run(input.sessionId, input.toolName, input.outcome, input.durationMs ?? null, input.exitCode ?? null, input.errorType ?? null, input.errorMessage ?? null, input.gfiBefore ?? nul... L491: return Number(result.lastInsertRowid); ... L759: summary: row.summary ? String(row.summary) : null, L760: metadata: JSON.parse(String(row.metadata_json ?? '{}')), L761: createdAt: String(row.created_at),

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/trajectory.jsView on unpkg · L489

Findings

4 High3 Medium4 Low

HighChild Processdist/core/rule-implementation-runtime.js

HighShellscripts/sync-plugin.mjs

HighCopied Package Dependency Bridgescripts/sync-plugin.mjs

HighRuntime Package Installscripts/sync-plugin.mjs

MediumEnvironment Vars

MediumInstall Persistencescripts/sync-plugin.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/core/trajectory.js

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

6 flagged

dist/core/rule-implementation-runtime.jsView file

Lines 1-21javascript

1import { nodeVm } from '../utils/node-vm-polyfill.js';

2import { spawnSync } from 'node:child_process';

3/** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

4const COMPILE_TIMEOUT_MS = 1000;

5/** Timeout (ms) for executing evaluate(input, helpers) inside the vm. */

6const EVALUATE_PROCESS_TIMEOUT_MS = 3000;

7const EVALUATE_PROCESS_OUTPUT_BYTES = 1024 * 1024;

8const EVALUATION_PROCESS_SOURCE = String.raw `

9const vm = require('node:vm');

10try {

11 const workerData = JSON.parse(require('node:fs').readFileSync(0, 'utf8'));

12 const context = vm.createContext(Object.create(null));

13 new vm.Script(workerData.source, { filename: workerData.filename }).runInContext(context, { timeout: 1000 });

14 const input = workerData.input;

15 const helpers = Object.freeze({

16 isRiskPath: () => input.workspace.isRiskPath,

17 getToolName: () => input.action.toolName,

18 getEstimatedLineChanges: () => input.derived.estimatedLineChanges,

19 getBashRisk: () => input.derived.bashRisk,

20 hasPlanFile: () => input.workspace.hasPlanFile,

21 getPlanStatus: () => input.workspace.planStatus,

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/core/trajectory.jsView file

Lines 469-509javascript

469 const rawStorage = this.storeRawText('user', input.rawText);

470 const createdAt = input.createdAt ?? nowIso();

471 return this.withWrite(() => {

472

Lines 828-868javascript

828 writeFileSync(

829 join(globalBin, 'pd.ps1'),

830 `$shim = "${pluginPs.replace(/`/g, '``').replace(/"/g, '`"')}"\r\n& $shim @args\r\nexit $LASTEXITCODE\r\n`,

831 'utf-8'

832 );

833 } else {

834 const pluginSh = join(INSTALLED_BIN_DIR, 'pd');

835 const globalSh = join(globalBin, 'pd');

836 writeFileSync(globalSh, `#!/usr/bin/env sh\nexec "${pluginSh.replace(/"/g, '\\"')}" "$@"\n`, 'utf-8');

837 chmodSync(globalSh, 0o755);

838 }

839 console.log(`✅ Global pd shim installed: ${globalBin}`);

840 } catch (err) {

841 console.warn(`⚠️ Could not install global pd shim: ${err.message}`);

842 console.warn(` Use plugin-local shim: ${join(INSTALLED_BIN_DIR, isWindows() ? 'pd.cmd' : 'pd')}`);

843 }

844}

845

846function verifyPdCliShim() {

847 const localShim = join(INSTALLED_BIN_DIR, isWindows() ? 'pd.cmd' : 'pd');

848 try {

849 execSync(`"${localShim}" --version`, { stdio: 'pipe', shell: true });

850 console.log(`✅ PD CLI shim verified: ${localShim}`);

High

Shell

Package source references shell execution.

scripts/sync-plugin.mjsView on unpkg · L848

851 } catch (err) {

852 console.error(`❌ PD CLI shim verification failed: ${err.message}`);

853 process.exit(1);

854 }

855}

856

857/**

858 * Recursive directory copy (Windows-safe, no symlinks).

859 */

860function copyDir(src, dest) {

861 mkdirSync(dest, { recursive: true });

862 for (const entry of readdirSync(src)) {

863 const srcPath = join(src, entry);

864 const destPath = join(dest, entry);

865 if (lstatSync(srcPath).isDirectory()) {

866 copyDir(srcPath, destPath);

867 } else {

868 copyFileSync(srcPath, destPath);

Lines 895-935javascript

895 }

896

897 mkdirSync(dirname(targetModules), { recursive: true });

898 // Use copyDir (Node-based, no cp -rL semantics trap) for reliable

899 // cross-platform overwrite. cpSync creates symlinks on Windows for

900 // symlinked dirs — copyDir dereferences by reading file contents.

901 try {

902 copyDir(monorepoModules, targetModules);

903 console.log(' ✅ @principles/core local build injected');

904 } catch (copyErr) {

905 console.warn(' ⚠️ Failed to inject @principles/core from monorepo: ' + copyErr.message);

906 console.warn(' ⚠️ npm version remains in place — pd-cli may fail if exports differ');

907 }

908}

909

910/**

911 * Install production dependencies in target.

912 */

913function installTargetDependencies() {

914 console.log('\n📦 Installing production dependencies in target...');

915 try {

916 execSync('npm install --omit=dev --no-audit --no-fund --prefer-offline', {

917 cwd: INSTALL_DIR,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/sync-plugin.mjsView on unpkg · L915

918 stdio: 'inherit'

919 });

920 console.log('✅ Dependencies installed');

921 } catch (error) {

922 console.error(`\n❌ npm install failed: ${error.message}`);

923 process.exit(1);

924 }

925}

926

927/**

928 * Verify injected workspace packages have their transitive dependencies installed.

929 * npm install --omit=dev in the target doesn't resolve deps of manually-copied packages,

930 * so transitive deps like @earendil-works/pi-agent-core may be missing after production install.

931 */

932function verifyInjectedWorkspaceDeps() {

933 const corePkgDir = join(INSTALL_DIR, 'node_modules', '@principles', 'core');

934 if (!existsSync(corePkgDir)) return;

935

Lines 1309-1349javascript

1309

1310 syncFilteredManifest(args.lang);

1311 syncPdCli();

1312

1313 // IMPORTANT: npm install must run FIRST, then injectLocalWorkspacePackages

1314 // overwrites @principles/core with the local monorepo version.

1315 //

1316 // Why: @principles/core on npm (v1.164.0-1.174.0, from a different publish

1317 // line) is semantically "^1.74.1"-compatible but its exports field does NOT

1318 // include ./principle-tree-ledger that pd-cli/health.js requires. The npm

1319 // registry version must never be used — only the local monorepo build has

1320 // the correct exports. Injecting BEFORE npm install is useless because npm

1321 // overwrites the injected copy. The authoritative source is always the

1322 // local monorepo, applied AFTER npm install.

1323 installTargetDependencies();

1324 injectLocalWorkspacePackages();

1325 verifyInjectedWorkspaceDeps();

1326 verifyPdCliShim();

1327

1328 console.log('\n🔍 Verifying installed plugin can load native dependencies...');

1329 try {

1330 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1331 console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1329

1332 } catch (error) {

1333 console.warn('\n⚠️ Native module better-sqlite3 failed to load. Attempting automatic rebuild...');

1334 try {

1335 execSync('npm rebuild better-sqlite3', { cwd: INSTALL_DIR, stdio: 'inherit' });

1336 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1337 console.log('✅ Rebuild successful!');

1338 } catch (rebuildErr) {

1339 console.error('\n❌ CRITICAL: better-sqlite3 rebuild failed!');

1340 process.exit(1);

1341 }

1342 }

1343

1344 const bootstrapScript = join(SOURCE_DIR, 'scripts', 'bootstrap-rules.mjs');

1345 if (existsSync(bootstrapScript)) {

1346 console.log('\n🧠 Synchronizing principles to active rules (Bootstrap)...');

1347 try {

1348 const workspaceDir = getConfiguredWorkspaceDir();

1349 const targetStateDir = join(workspaceDir, '.state');