@wrongstack/plugins 0.281.3 → 0.282.0

package/dist/import-organizer.js

@@ -1,7 +1,48 @@
 import { spawn } from 'child_process';
 import { existsSync, statSync } from 'fs';
+import { isAbsolute, resolve, relative, basename } from 'path';
 
 // src/import-organizer/index.ts
+function withinProject(p) {
+  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
+  const root = process.cwd();
+  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
+  const rel = relative(root, resolved);
+  if (rel === "" || rel === ".") return true;
+  if (rel.startsWith("..")) return false;
+  if (isAbsolute(rel)) return false;
+  return true;
+}
+var ALLOWED_FIRST_TOKENS = /* @__PURE__ */ new Set([
+  "npx",
+  "pnpm",
+  "npm",
+  "yarn",
+  "biome",
+  "@biomejs/biome",
+  "eslint",
+  "node"
+  // Recognise a fully-qualified project-local path like
+  // "./node_modules/.bin/biome"; basename check kicks in below.
+]);
+function resolveAllowedCommand(command) {
+  const tokens = command.split(/\s+/).filter(Boolean);
+  if (tokens.length === 0) return null;
+  const head = tokens[0];
+  if (ALLOWED_FIRST_TOKENS.has(head)) {
+    return { cmd: head, args: tokens.slice(1) };
+  }
+  if (isAbsolute(head)) {
+    if (!withinProject(head)) return null;
+    const base = basename(head);
+    if (ALLOWED_FIRST_TOKENS.has(base)) return { cmd: head, args: tokens.slice(1) };
+  }
+  if (!isAbsolute(head) && withinProject(head)) {
+    const base = basename(head);
+    if (ALLOWED_FIRST_TOKENS.has(base)) return { cmd: head, args: tokens.slice(1) };
+  }
+  return null;
+}
 var API_VERSION = "^0.1.10";
 var state = {
   invocationCount: 0,
@@ -17,7 +58,8 @@ var DEFAULTS = {
   enabled: true,
   command: "npx @biomejs/biome check --write --unsafe",
   fallbackCommand: "npx eslint --fix",
-  timeoutMs: 1e4
+  timeoutMs: 1e4,
+  notifyFormatOnSave: true
 };
 function readConfig(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS };
@@ -26,11 +68,12 @@ function readConfig(raw) {
     enabled: r["enabled"] !== false,
     command: typeof r["command"] === "string" && r["command"].length > 0 ? r["command"] : DEFAULTS.command,
     fallbackCommand: typeof r["fallbackCommand"] === "string" && r["fallbackCommand"].length > 0 ? r["fallbackCommand"] : DEFAULTS.fallbackCommand,
-    timeoutMs: typeof r["timeoutMs"] === "number" && r["timeoutMs"] > 0 ? r["timeoutMs"] : DEFAULTS.timeoutMs
+    timeoutMs: typeof r["timeoutMs"] === "number" && r["timeoutMs"] > 0 ? r["timeoutMs"] : DEFAULTS.timeoutMs,
+    notifyFormatOnSave: r["notifyFormatOnSave"] !== false
   };
 }
 function runCommand(command, args, timeoutMs, cwd) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let timedOut = false;
     const stdoutChunks = [];
     const stderrChunks = [];
@@ -42,17 +85,17 @@ function runCommand(command, args, timeoutMs, cwd) {
         signal: AbortSignal.timeout(timeoutMs)
       });
     } catch {
-      resolve({ code: 127, stdout: "", stderr: "", timedOut: false });
+      resolve2({ code: 127, stdout: "", stderr: "", timedOut: false });
       return;
     }
     child.stdout?.on("data", (c) => stdoutChunks.push(c));
     child.stderr?.on("data", (c) => stderrChunks.push(c));
     child.on("error", () => {
-      resolve({ code: 127, stdout: "", stderr: "", timedOut: false });
+      resolve2({ code: 127, stdout: "", stderr: "", timedOut: false });
     });
     child.on("close", (code) => {
       if (timedOut) return;
-      resolve({
+      resolve2({
         code,
         stdout: Buffer.concat(stdoutChunks).toString("utf-8"),
         stderr: Buffer.concat(stderrChunks).toString("utf-8"),
@@ -61,11 +104,12 @@ function runCommand(command, args, timeoutMs, cwd) {
     });
     child.on("abort", () => {
       timedOut = true;
-      resolve({ code: null, stdout: "", stderr: "", timedOut: true });
+      resolve2({ code: null, stdout: "", stderr: "", timedOut: true });
     });
   });
 }
 async function organizeImports(filePath, cfg, cwd) {
+  if (!withinProject(filePath)) return null;
   if (!existsSync(filePath)) return null;
   let bytesBefore;
   try {
@@ -73,15 +117,15 @@ async function organizeImports(filePath, cfg, cwd) {
   } catch {
     return null;
   }
-  const primary = cfg.command.split(/\s+/).filter(Boolean);
-  if (primary.length === 0) return null;
-  const [primaryCmd, ...primaryArgs] = primary;
+  const primary = resolveAllowedCommand(cfg.command);
+  if (!primary) return null;
+  const [primaryCmd, ...primaryArgs] = [primary.cmd, ...primary.args];
   let result = await runCommand(primaryCmd, [...primaryArgs, filePath], cfg.timeoutMs, cwd);
   let usedCommand = cfg.command;
   if (result.code === 127 && cfg.fallbackCommand) {
-    const fallback = cfg.fallbackCommand.split(/\s+/).filter(Boolean);
-    if (fallback.length > 0) {
-      const [fbCmd, ...fbArgs] = fallback;
+    const fallback = resolveAllowedCommand(cfg.fallbackCommand);
+    if (fallback) {
+      const [fbCmd, ...fbArgs] = [fallback.cmd, ...fallback.args];
       result = await runCommand(fbCmd, [...fbArgs, filePath], cfg.timeoutMs, cwd);
       usedCommand = cfg.fallbackCommand;
     }
@@ -132,6 +176,11 @@ var plugin = {
         minimum: 1e3,
         default: 1e4,
         description: "Per-invocation linter timeout in milliseconds."
+      },
+      notifyFormatOnSave: {
+        type: "boolean",
+        default: true,
+        description: "Emit `import-organizer:done` after each successful run so `format-on-save` can skip its redundant `biome format --write` pass on the same file. Set false to keep both running unconditionally."
       }
     }
   },
@@ -160,13 +209,23 @@ var plugin = {
         if (!state.linterAvailable) {
           state.linterAvailable = false;
           state.probeComplete = true;
-          api.log.warn("import-organizer: no linter available \u2014 hook will be a no-op for the rest of the session");
+          api.log.warn(
+            "import-organizer: no linter available \u2014 hook will be a no-op for the rest of the session"
+          );
         }
         state.errorCount += 1;
         return;
       }
       state.linterAvailable = true;
       state.probeComplete = true;
+      if (cfg.notifyFormatOnSave) {
+        api.emitCustom("import-organizer:done", {
+          path: filePath,
+          changed: result.changed,
+          command: result.command,
+          when: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      }
       state.lastResult = {
         path: filePath,
         tool: toolName,

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export { default as agentHandoffPlugin } from './agent-handoff.js';
 export { default as autoDocPlugin } from './auto-doc.js';
 export { default as autoEscalatePlugin } from './auto-escalate.js';
 export { default as branchGuardPlugin } from './branch-guard.js';
@@ -16,12 +17,15 @@ export { default as formatOnSavePlugin } from './format-on-save.js';
 export { default as gitAutocommitPlugin } from './git-autocommit.js';
 export { default as importOrganizerPlugin } from './import-organizer.js';
 export { default as injectionShieldPlugin } from './injection-shield.js';
+export { default as knowledgeGraphPlugin } from './knowledge-graph.js';
 export { default as lintGatePlugin } from './lint-gate.js';
 export { default as llmCachePlugin } from './llm-cache.js';
 export { default as loopBreakerPlugin } from './loop-breaker.js';
 export { default as modelRouterPlugin } from './model-router.js';
 export { default as notifyHubPlugin } from './notify-hub.js';
 export { default as pathGuardPlugin } from './path-guard.js';
+export { default as pluginStackObserverPlugin } from './plugin-stack-observer.js';
+export { default as prDrafterPlugin } from './pr-drafter.js';
 export { default as promptFirewallPlugin } from './prompt-firewall.js';
 export { default as secretScannerPlugin } from './secret-scanner.js';
 export { default as semverBumpPlugin } from './semver-bump.js';
@@ -29,7 +33,30 @@ export { default as sessionRecapPlugin } from './session-recap.js';
 export { default as shellCheckPlugin } from './shell-check.js';
 export { default as specLinkerPlugin } from './spec-linker.js';
 export { default as templateEnginePlugin } from './template-engine.js';
+export { default as testCoverageGatePlugin } from './test-coverage-gate.js';
 export { default as testRunnerGatePlugin } from './test-runner-gate.js';
+export { default as typeGatePlugin } from './type-gate.js';
+export { default as accessibilityAuditorPlugin } from './accessibility-auditor.js';
+export { default as apiCompatibilityGatePlugin } from './api-compatibility-gate.js';
+export { default as autoI18nExtractorPlugin } from './auto-i18n-extractor.js';
+export { default as codeMetricsPlugin } from './code-metrics.js';
+export { default as deadCodeDetectorPlugin } from './dead-code-detector.js';
+export { default as dependencyVulnerabilityGatePlugin } from './dependency-vulnerability-gate.js';
+export { default as docSyncGuardPlugin } from './doc-sync-guard.js';
+export { default as duplicateCodeDetectorPlugin } from './duplicate-code-detector.js';
+export { default as featureFlagTrackerPlugin } from './feature-flag-tracker.js';
+export { default as interfaceContractGuardPlugin } from './interface-contract-guard.js';
+export { default as licenseAuditGatePlugin } from './license-audit-gate.js';
+export { default as migrationPlannerPlugin } from './migration-planner.js';
+export { default as performanceRegressionGatePlugin } from './performance-regression-gate.js';
+export { default as refactorSuggesterPlugin } from './refactor-suggester.js';
+export { default as releaseNotesGeneratorPlugin } from './release-notes-generator.js';
+export { default as schemaEvolutionGuardPlugin } from './schema-evolution-guard.js';
+export { default as securityHotspotScannerPlugin } from './security-hotspot-scanner.js';
+export { default as semanticSearchIndexerPlugin } from './semantic-search-indexer.js';
+export { default as smartRenamePlugin } from './smart-rename.js';
+export { default as testFlakeDetectorPlugin } from './test-flake-detector.js';
+export { default as testGeneratorPlugin } from './test-generator.js';
 export { default as todoListenerPlugin } from './todo-listener.js';
 export { default as todoTrackerPlugin } from './todo-tracker.js';
 export { default as tokenBudgetPlugin } from './token-budget.js';