@wrongstack/plugins 0.286.0 → 0.287.0

package/README.md

@@ -68,7 +68,7 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 | 41 | [`knowledge-graph`](./src/knowledge-graph) | `kg_add_fact`, `kg_query`, `kg_remove_fact`, `kg_status` | System prompt contributor | Persistent structured (subject, relation, object) project facts |
 | 42 | [`dead-code-detector`](./src/dead-code-detector) | `dead_code_scan` | `PostToolUse` | Regex-based scan for exported identifiers that appear unused |
 | 43 | [`dependency-vulnerability-gate`](./src/dependency-vulnerability-gate) | `dependency_audit_status` | `PostToolUse` | Opt-in blocking `npm/pnpm audit` after installs |
-| 44 | [`migration-planner`](./src/migration-planner) | `migration_plan`, `migration_status` | `PostToolUse` | Reads changelogs and produces version-migration checklists |
+| 44 | [`migration-planner`](./src/migration-planner) | `migration_plan`, `migration_status` | `PostToolUse` | Evidence-backed checklists + optional `api.llm` risk/verification analysis |
 | 45 | [`semantic-search-indexer`](./src/semantic-search-indexer) | `semantic_search`, `semantic_index_status` | — | Lightweight keyword index over project source files |
 | 46 | [`auto-i18n-extractor`](./src/auto-i18n-extractor) | `i18n_extract`, `i18n_status` | `PostToolUse` | Detects hardcoded user-facing strings and suggests i18n keys |
 | 47 | [`doc-sync-guard`](./src/doc-sync-guard) | `doc_sync_status` | `PostToolUse` | Warns when README/docs edits omit recently changed source files |
@@ -82,11 +82,12 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 | 55 | [`duplicate-code-detector`](./src/duplicate-code-detector) | `detect_duplicate_code`, `duplicate_code_status` | `PostToolUse` | Detects duplicate/similar code blocks using normalized-line fingerprints |
 | 56 | [`code-metrics`](./src/code-metrics) | `measure_code_metrics`, `metrics_status` | `PostToolUse` | Computes LOC, comment ratio, function count, and approximate cyclomatic complexity |
 | 57 | [`refactor-suggester`](./src/refactor-suggester) | `suggest_refactors`, `refactor_status` | `PostToolUse` | Flags long functions, deep nesting, many parameters, magic numbers, console.log |
-| 58 | [`test-generator`](./src/test-generator) | `generate_unit_tests` | — | Generates a unit-test skeleton from exported functions/classes |
-| 59 | [`release-notes-generator`](./src/release-notes-generator) | `generate_release_notes` | — | Groups conventional commits into a release-notes markdown draft |
+| 58 | [`test-generator`](./src/test-generator) | `generate_unit_tests` | — | Framework-correct skeletons + optional behavior-focused `api.llm` tests |
+| 59 | [`release-notes-generator`](./src/release-notes-generator) | `generate_release_notes` | — | Traceable notes + optional hash-preserving `api.llm` polish |
 | 60 | [`smart-rename`](./src/smart-rename) | `smart_rename` | — | Whole-word symbol rename with preview and optional apply |
 | 61 | [`feature-flag-tracker`](./src/feature-flag-tracker) | `scan_feature_flags`, `feature_flag_status` | `PostToolUse` | Scans source files for feature-flag usage and reports flag inventory |
 | 62 | [`interface-contract-guard`](./src/interface-contract-guard) | `check_interface_contracts`, `interface_contract_status` | `PostToolUse` | Warns when TypeScript interfaces change or lack implementers |
+| 63 | [`plugin-stack-observer`](./src/plugin-stack-observer) | `plugin_stack_status` | Event listener + optional system prompt contributor | Reports active provider-runner wrappers in registration order |
 
 ### Removed plugins (use built-in tools instead)
 
@@ -97,7 +98,7 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 
 If a user lists either name in `config.plugins`, the loader emits a
 one-shot `log.warn` and skips loading. See
-[`DEPRECATED_PLUGIN_NAMES`](../../cli/src/wiring/plugins.ts)
+[`DEPRECATED_PLUGIN_NAMES`](../cli/src/wiring/plugins.ts)
 in `packages/cli/src/wiring/plugins.ts` for the canonical list and
 migration hints.
 
@@ -701,7 +702,7 @@ context. Increase `includeTranscriptTail` for more history.
 Two hooks working together:
 
 **PostToolUse** (always active when the plugin is enabled):
-scans markdown files for *unlinked* references to one of the 62
+scans markdown files for *unlinked* references to one of the 63
 known plugins and surfaces them to the LLM via
 `additionalContext`. The plugin does NOT modify the file — it
 only injects a low-noise context block listing the unlinked
@@ -1043,18 +1044,26 @@ There are two surfaces for plugin configuration:
    {
      "plugins": [
        { "name": "auto-doc", "enabled": true },
-       { "name": "git-autocommit", "options": { "conventionalCommits": true } }
+       {
+         "name": "git-autocommit",
+         "enabled": true,
+         "options": { "conventionalCommits": true }
+       }
      ]
    }
    ```
-2. **Options** — `config.extensions["<plugin-name>"]` stores each
-   plugin's runtime options. The plugin's `configSchema` validates
-   this section before `setup()` runs.
+2. **Options** — set an entry's `options` field or use
+   `config.extensions["<plugin-name>"]`; the CLI merges both before `setup()`.
+   If both are present, `config.extensions` wins for duplicate keys.
 
 ```jsonc
 {
-  "plugins": {
-    "auto-doc": { "enabled": true },
+  "plugins": [
+    { "name": "auto-doc", "enabled": true },
+    { "name": "git-autocommit", "enabled": true },
+    { "name": "secret-scanner", "enabled": true }
+  ],
+  "extensions": {
     "git-autocommit": { "conventionalCommits": true },
     "secret-scanner": { "mode": "block", "matcher": "bash|write|edit" }
   }

package/dist/accessibility-auditor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accessibility-auditor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,qBAAqB,GACrB,0BAA0B,GAC1B,qBAAqB,GACrB,cAAc,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAwSD,QAAA,MAAM,MAAM,EAAE,MA0Nb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accessibility-auditor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,qBAAqB,GACrB,0BAA0B,GAC1B,qBAAqB,GACrB,cAAc,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AA+RD,QAAA,MAAM,MAAM,EAAE,MA0Nb,CAAC;eAEa,MAAM"}

package/dist/accessibility-auditor.js

@@ -1,6 +1,25 @@
 // src/accessibility-auditor/index.ts
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { isAbsolute, relative, resolve } from "node:path";
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+
+// src/runtime/index.ts
+import { basename, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+}
+
+// src/accessibility-auditor/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   auditCount: 0,
@@ -28,16 +47,6 @@ function readConfig(raw) {
     onWriteEdit: r["onWriteEdit"] !== false
   };
 }
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
-}
 function normalizeExtensions(exts) {
   return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
 }
@@ -63,7 +72,7 @@ function collectUiFiles(root, exts) {
       return;
     }
     for (const entry of entries) {
-      const full = resolve(dir, entry);
+      const full = resolve2(dir, entry);
       let st;
       try {
         st = statSync(full);
@@ -109,7 +118,7 @@ function auditFile(filePath, projectRoot) {
   const idsByValue = /* @__PURE__ */ new Map();
   function add(line, rule, severity, message) {
     findings.push({
-      file: relative(projectRoot, filePath),
+      file: relative2(projectRoot, filePath),
       line,
       rule,
       severity,
@@ -188,7 +197,7 @@ function auditFile(filePath, projectRoot) {
 }
 function auditPath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.includeExtensions);
   const files = collectUiFiles(resolved, exts);
   const findings = [];
@@ -198,7 +207,7 @@ function auditPath(rawPath, cfg) {
     if (findings.length >= cfg.maxFindings) break;
   }
   return {
-    path: relative(root, resolved),
+    path: relative2(root, resolved),
     findings: findings.slice(0, cfg.maxFindings),
     fileCount: files.length
   };
@@ -289,7 +298,7 @@ var plugin = {
       }
       return { additionalContext: summary };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "a11y_audit",
       description: "Audit a file or directory for accessibility issues. Scans .tsx/.jsx/.html/.vue files for missing alt text, missing labels, low-contrast placeholders, missing button text, and duplicate ids.",

package/dist/api-compatibility-gate.js

@@ -279,7 +279,7 @@ var plugin = {
       }
       return { additionalContext: message };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "api_compat_status",
       description: "Reports api-compatibility-gate state: severity, entry-point patterns, and per-session counters.",

package/dist/auto-doc.js

@@ -241,7 +241,7 @@ var plugin = {
   version: "0.2.0",
   description: "Auto-generates JSDoc/TSDoc comments for functions, classes, types, and interfaces",
   apiVersion: AUTO_DOC_API_VERSION,
-  capabilities: { tools: true, pipelines: ["toolCall"] },
+  capabilities: { tools: true, pipelines: ["toolCall"], llm: true },
   defaultConfig: {
     style: "tsdoc",
     includeTypes: false,

package/dist/auto-i18n-extractor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auto-i18n-extractor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAgL/C,QAAA,MAAM,MAAM,EAAE,MAsQb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auto-i18n-extractor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwK/C,QAAA,MAAM,MAAM,EAAE,MAsQb,CAAC;eAEa,MAAM"}

package/dist/auto-i18n-extractor.js

@@ -1,6 +1,24 @@
 // src/auto-i18n-extractor/index.ts
 import { readFileSync } from "node:fs";
-import { isAbsolute, relative, resolve } from "node:path";
+
+// src/runtime/index.ts
+import { basename, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+}
+
+// src/auto-i18n-extractor/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   filesScanned: 0,
@@ -41,16 +59,6 @@ function readConfig(raw) {
     excludeAttributes: Array.isArray(r["excludeAttributes"]) ? r["excludeAttributes"].filter((x) => typeof x === "string") : DEFAULTS.excludeAttributes
   };
 }
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
-}
 function fileExtension(p) {
   const dot = p.lastIndexOf(".");
   return dot > 0 ? p.slice(dot).toLowerCase() : "";
@@ -201,7 +209,7 @@ var plugin = {
 ${lines.join("\n")}${more}`;
       return { additionalContext: context };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "i18n_extract",
       description: "Scan a UI source file (.tsx/.jsx/.vue) for hardcoded user-facing string literals and return suggested i18n keys.",

package/dist/changelog-writer.js

@@ -138,7 +138,7 @@ var plugin = {
   version: "0.1.0",
   description: "Collects session work (commits, edits, manual notes) and writes Keep-a-Changelog entries under [Unreleased] on demand",
   apiVersion: "^0.1.10",
-  capabilities: { tools: true },
+  capabilities: { tools: true, llm: true },
   defaultConfig: { ...DEFAULTS },
   configSchema: {
     type: "object",

package/dist/code-metrics/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-metrics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA4P/C,QAAA,MAAM,MAAM,EAAE,MAgMb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-metrics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAoP/C,QAAA,MAAM,MAAM,EAAE,MAgMb,CAAC;eAEa,MAAM"}

package/dist/code-metrics.js

@@ -1,6 +1,25 @@
 // src/code-metrics/index.ts
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { extname, isAbsolute, relative, resolve } from "node:path";
+import { extname, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+
+// src/runtime/index.ts
+import { basename, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+}
+
+// src/code-metrics/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   measureCount: 0,
@@ -23,16 +42,6 @@ function readConfig(raw) {
     maxFiles: typeof r["maxFiles"] === "number" && r["maxFiles"] >= 1 && r["maxFiles"] <= 500 ? r["maxFiles"] : DEFAULTS.maxFiles
   };
 }
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
-}
 function normalizeExtensions(exts) {
   return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
 }
@@ -57,7 +66,7 @@ function collectSourceFiles(root, exts) {
     }
     for (const entry of entries) {
       if (entry === "node_modules" || entry === "dist" || entry === ".git" || entry === "coverage") continue;
-      const full = resolve(dir, entry);
+      const full = resolve2(dir, entry);
       let st;
       try {
         st = statSync(full);
@@ -78,7 +87,7 @@ function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath(p) {
-  return toPosix(relative(process.cwd(), p));
+  return toPosix(relative2(process.cwd(), p));
 }
 function countFunctions(content) {
   let count = 0;
@@ -155,7 +164,7 @@ function analyzeFile(filePath, content) {
 }
 function measurePath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
   const allFiles = collectSourceFiles(resolved, exts);
   const files = allFiles.slice(0, cfg.maxFiles);
@@ -218,7 +227,7 @@ var plugin = {
       const exts = normalizeExtensions(cfg.extensions);
       if (!matchesExtension(sourcePath, exts)) return;
       state.hookInvocationCount += 1;
-      const resolved = resolve(process.cwd(), sourcePath);
+      const resolved = resolve2(process.cwd(), sourcePath);
       let content;
       try {
         content = readFileSync(resolved, "utf-8");
@@ -232,7 +241,7 @@ var plugin = {
 \u{1F4CA} code-metrics: ${relativePath(resolved)} \u2014 ${metrics.lines} lines (${metrics.codeLines} code, ${metrics.commentLines} comments, ${metrics.blankLines} blank), ${metrics.functionCount} function(s), complexity ${metrics.complexity}.`
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "measure_code_metrics",
       description: "Measure lines, comments, blank lines, function count, and cyclomatic-complexity-like score for a source file or directory.",
@@ -262,7 +271,7 @@ var plugin = {
         state.fileCount += result.files.length;
         return {
           ok: true,
-          path: relativePath(resolve(process.cwd(), rawPath)),
+          path: relativePath(resolve2(process.cwd(), rawPath)),
           files: result.files,
           totalFiles: result.totalFiles,
           capped: result.totalFiles > cfg.maxFiles

package/dist/commit-validator.js

@@ -130,7 +130,7 @@ var plugin = {
   version: "0.1.0",
   description: "PreToolUse hook that validates conventional-commit format before git_autocommit or bash git commit runs",
   apiVersion: API_VERSION,
-  capabilities: { tools: true, hooks: true },
+  capabilities: { tools: true, hooks: true, llm: true },
   defaultConfig: { ...DEFAULTS },
   configSchema: {
     type: "object",

package/dist/config-validator.js

@@ -282,7 +282,7 @@ var plugin = {
   \u2026 and ${problems.length - 10} more` : "") + "\nFix these before moving on \u2014 downstream tools will fail on this file."
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "config_validator_status",
       description: "Reports config-validator state: watched extensions and counters (files checked, problems found).",

package/dist/cron/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cron/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAoE/C,QAAA,MAAM,MAAM,EAAE,MA2Pb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cron/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA+F/C,QAAA,MAAM,MAAM,EAAE,MAqRb,CAAC;eAEa,MAAM"}

package/dist/cron.js

@@ -11,6 +11,19 @@ function formatNextRun(intervalMs) {
   const ms = Number.isNaN(intervalMs) || intervalMs <= 0 ? 6e4 : intervalMs;
   return new Date(Date.now() + ms).toISOString();
 }
+function buildSnapshot(s, maxConcurrent) {
+  const jobs = Array.from(s.jobs.values()).map((j) => ({
+    name: j.name,
+    intervalMs: j.intervalMs,
+    action: j.action,
+    enabled: j.enabled,
+    lastRun: j.lastRun,
+    nextRun: j.nextRun,
+    runCount: j.runCount,
+    overdue: new Date(j.nextRun).getTime() < Date.now()
+  }));
+  return { count: jobs.length, maxConcurrent, jobs };
+}
 function clearCronResources() {
   for (const timer of state.timers.values()) {
     clearTimeout(timer);
@@ -64,6 +77,7 @@ var plugin = {
           runCount: job.runCount,
           ts: (/* @__PURE__ */ new Date()).toISOString()
         });
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         api.metrics.counter("cron_job_fired", 1, { job: name });
         api.metrics.histogram("cron_job_interval_ms", job.intervalMs, { job: name });
         scheduleNextRun(name);
@@ -165,6 +179,7 @@ var plugin = {
         state.jobs.set(name, job);
         scheduleNextRun(name);
         api.metrics.gauge("cron_active_jobs", state.jobs.size);
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         return {
           ok: true,
           name,
@@ -220,6 +235,7 @@ var plugin = {
         }
         cancelJob(name);
         api.metrics.gauge("cron_active_jobs", state.jobs.size);
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         return {
           ok: true,
           name,
@@ -232,6 +248,19 @@ var plugin = {
   teardown(api) {
     clearCronResources();
     api.log.info("cron plugin unloaded");
+  },
+  async health() {
+    const jobs = Array.from(state.jobs.values());
+    const overdue = jobs.filter(
+      (job) => job.enabled && new Date(job.nextRun).getTime() < Date.now()
+    ).length;
+    return {
+      ok: overdue === 0,
+      message: overdue > 0 ? `cron: ${overdue} overdue job(s) out of ${jobs.length}` : `cron: ${jobs.length} active job(s)`,
+      activeJobs: jobs.length,
+      overdueJobs: overdue,
+      totalRuns: jobs.reduce((sum, job) => sum + job.runCount, 0)
+    };
   }
 };
 var cron_default = plugin;

package/dist/dead-code-detector/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dead-code-detector/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAyQ/C,QAAA,MAAM,MAAM,EAAE,MAkOb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dead-code-detector/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAiQ/C,QAAA,MAAM,MAAM,EAAE,MAkOb,CAAC;eAEa,MAAM"}

package/dist/dead-code-detector.js

@@ -1,6 +1,25 @@
 // src/dead-code-detector/index.ts
 import { readdirSync, readFileSync, statSync } from "node:fs";
-import { extname, isAbsolute, join, relative, resolve } from "node:path";
+import { extname, join, relative as relative2, resolve as resolve2 } from "node:path";
+
+// src/runtime/index.ts
+import { basename, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+}
+
+// src/dead-code-detector/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   scanCount: 0,
@@ -51,7 +70,7 @@ function gatherFiles(root, depth, cfg) {
       }
     }
   }
-  walk(resolve(root), depth);
+  walk(resolve2(root), depth);
   return files;
 }
 function stripNoise(content) {
@@ -134,22 +153,12 @@ function scan(root, depth, cfg) {
   }
   return { findings: findUnusedSymbols(files), scannedFiles: files.length };
 }
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
-}
 function resolveScanRoot(rawPath) {
-  const resolved = resolve(process.cwd(), rawPath);
+  const resolved = resolve2(process.cwd(), rawPath);
   try {
     const stats = statSync(resolved);
     if (!stats.isDirectory()) {
-      return resolve(resolved, "..");
+      return resolve2(resolved, "..");
     }
   } catch {
   }
@@ -159,7 +168,7 @@ function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath(p) {
-  return toPosix(relative(process.cwd(), p));
+  return toPosix(relative2(process.cwd(), p));
 }
 var plugin = {
   name: "dead-code-detector",
@@ -230,8 +239,8 @@ var plugin = {
         state.errorCount += 1;
         return;
       }
-      const changedFile = resolve(process.cwd(), sourcePath);
-      const relevant = result.findings.filter((f) => resolve(f.file) === changedFile);
+      const changedFile = resolve2(process.cwd(), sourcePath);
+      const relevant = result.findings.filter((f) => resolve2(f.file) === changedFile);
       if (relevant.length === 0) {
         state.missCount += 1;
         return;
@@ -247,7 +256,7 @@ ${list}
 Consider removing the export if it is not part of the public API.`;
       return { additionalContext: message };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "dead_code_scan",
       description: "Scan TypeScript/JavaScript source files for exported symbols that appear unused anywhere in the project.",

package/dist/dep-guard.js

@@ -138,7 +138,7 @@ var plugin = {
   version: "0.1.0",
   description: "Supervises dependency installs: blocks deny-listed packages, flags typosquat lookalikes, and optionally warns on unpinned versions",
   apiVersion: "^0.1.10",
-  capabilities: { tools: true, hooks: true },
+  capabilities: { tools: true, hooks: true, llm: true },
   defaultConfig: { ...DEFAULTS },
   configSchema: {
     type: "object",

package/dist/diff-summary/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/diff-summary/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAgQ/C,QAAA,MAAM,MAAM,EAAE,MA4Pb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/diff-summary/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwP/C,QAAA,MAAM,MAAM,EAAE,MA4Pb,CAAC;eAEa,MAAM"}

package/dist/diff-summary.js

@@ -1,17 +1,25 @@
 // src/diff-summary/index.ts
 import { execFileSync } from "node:child_process";
-import { isAbsolute, relative, resolve } from "node:path";
-var API_VERSION = "^0.1.10";
+
+// src/runtime/index.ts
+import { basename, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
 function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
 }
+
+// src/diff-summary/index.ts
+var API_VERSION = "^0.1.10";
 var state = {
   invocationCount: 0,
   /** Times a diff was successfully generated and injected. */
@@ -243,7 +251,7 @@ var plugin = {
         additionalContext: header + summary
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "diff_summary_status",
       description: "Reports diff-summary state: mode, maxLines, and per-session invocation/injected/fallback counters.",

package/dist/doc-sync-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/doc-sync-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAkJ/C,QAAA,MAAM,MAAM,EAAE,MAuJb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/doc-sync-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA0I/C,QAAA,MAAM,MAAM,EAAE,MAuJb,CAAC;eAEa,MAAM"}