@wrongstack/plugins 0.286.0 → 0.289.0

package/README.md

@@ -68,7 +68,7 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 | 41 | [`knowledge-graph`](./src/knowledge-graph) | `kg_add_fact`, `kg_query`, `kg_remove_fact`, `kg_status` | System prompt contributor | Persistent structured (subject, relation, object) project facts |
 | 42 | [`dead-code-detector`](./src/dead-code-detector) | `dead_code_scan` | `PostToolUse` | Regex-based scan for exported identifiers that appear unused |
 | 43 | [`dependency-vulnerability-gate`](./src/dependency-vulnerability-gate) | `dependency_audit_status` | `PostToolUse` | Opt-in blocking `npm/pnpm audit` after installs |
-| 44 | [`migration-planner`](./src/migration-planner) | `migration_plan`, `migration_status` | `PostToolUse` | Reads changelogs and produces version-migration checklists |
+| 44 | [`migration-planner`](./src/migration-planner) | `migration_plan`, `migration_status` | `PostToolUse` | Evidence-backed checklists + optional `api.llm` risk/verification analysis |
 | 45 | [`semantic-search-indexer`](./src/semantic-search-indexer) | `semantic_search`, `semantic_index_status` | — | Lightweight keyword index over project source files |
 | 46 | [`auto-i18n-extractor`](./src/auto-i18n-extractor) | `i18n_extract`, `i18n_status` | `PostToolUse` | Detects hardcoded user-facing strings and suggests i18n keys |
 | 47 | [`doc-sync-guard`](./src/doc-sync-guard) | `doc_sync_status` | `PostToolUse` | Warns when README/docs edits omit recently changed source files |
@@ -82,11 +82,12 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 | 55 | [`duplicate-code-detector`](./src/duplicate-code-detector) | `detect_duplicate_code`, `duplicate_code_status` | `PostToolUse` | Detects duplicate/similar code blocks using normalized-line fingerprints |
 | 56 | [`code-metrics`](./src/code-metrics) | `measure_code_metrics`, `metrics_status` | `PostToolUse` | Computes LOC, comment ratio, function count, and approximate cyclomatic complexity |
 | 57 | [`refactor-suggester`](./src/refactor-suggester) | `suggest_refactors`, `refactor_status` | `PostToolUse` | Flags long functions, deep nesting, many parameters, magic numbers, console.log |
-| 58 | [`test-generator`](./src/test-generator) | `generate_unit_tests` | — | Generates a unit-test skeleton from exported functions/classes |
-| 59 | [`release-notes-generator`](./src/release-notes-generator) | `generate_release_notes` | — | Groups conventional commits into a release-notes markdown draft |
+| 58 | [`test-generator`](./src/test-generator) | `generate_unit_tests` | — | Framework-correct skeletons + optional behavior-focused `api.llm` tests |
+| 59 | [`release-notes-generator`](./src/release-notes-generator) | `generate_release_notes` | — | Traceable notes + optional hash-preserving `api.llm` polish |
 | 60 | [`smart-rename`](./src/smart-rename) | `smart_rename` | — | Whole-word symbol rename with preview and optional apply |
 | 61 | [`feature-flag-tracker`](./src/feature-flag-tracker) | `scan_feature_flags`, `feature_flag_status` | `PostToolUse` | Scans source files for feature-flag usage and reports flag inventory |
 | 62 | [`interface-contract-guard`](./src/interface-contract-guard) | `check_interface_contracts`, `interface_contract_status` | `PostToolUse` | Warns when TypeScript interfaces change or lack implementers |
+| 63 | [`plugin-stack-observer`](./src/plugin-stack-observer) | `plugin_stack_status` | Event listener + optional system prompt contributor | Reports active provider-runner wrappers in registration order |
 
 ### Removed plugins (use built-in tools instead)
 
@@ -97,7 +98,7 @@ under the `BUILTIN_PLUGIN_FACTORIES` array. The canonical default is
 
 If a user lists either name in `config.plugins`, the loader emits a
 one-shot `log.warn` and skips loading. See
-[`DEPRECATED_PLUGIN_NAMES`](../../cli/src/wiring/plugins.ts)
+[`DEPRECATED_PLUGIN_NAMES`](../cli/src/wiring/plugins.ts)
 in `packages/cli/src/wiring/plugins.ts` for the canonical list and
 migration hints.
 
@@ -701,7 +702,7 @@ context. Increase `includeTranscriptTail` for more history.
 Two hooks working together:
 
 **PostToolUse** (always active when the plugin is enabled):
-scans markdown files for *unlinked* references to one of the 62
+scans markdown files for *unlinked* references to one of the 63
 known plugins and surfaces them to the LLM via
 `additionalContext`. The plugin does NOT modify the file — it
 only injects a low-noise context block listing the unlinked
@@ -1043,18 +1044,26 @@ There are two surfaces for plugin configuration:
    {
      "plugins": [
        { "name": "auto-doc", "enabled": true },
-       { "name": "git-autocommit", "options": { "conventionalCommits": true } }
+       {
+         "name": "git-autocommit",
+         "enabled": true,
+         "options": { "conventionalCommits": true }
+       }
      ]
    }
    ```
-2. **Options** — `config.extensions["<plugin-name>"]` stores each
-   plugin's runtime options. The plugin's `configSchema` validates
-   this section before `setup()` runs.
+2. **Options** — set an entry's `options` field or use
+   `config.extensions["<plugin-name>"]`; the CLI merges both before `setup()`.
+   If both are present, `config.extensions` wins for duplicate keys.
 
 ```jsonc
 {
-  "plugins": {
-    "auto-doc": { "enabled": true },
+  "plugins": [
+    { "name": "auto-doc", "enabled": true },
+    { "name": "git-autocommit", "enabled": true },
+    { "name": "secret-scanner", "enabled": true }
+  ],
+  "extensions": {
     "git-autocommit": { "conventionalCommits": true },
     "secret-scanner": { "mode": "block", "matcher": "bash|write|edit" }
   }

package/dist/accessibility-auditor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accessibility-auditor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,qBAAqB,GACrB,0BAA0B,GAC1B,qBAAqB,GACrB,cAAc,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAwSD,QAAA,MAAM,MAAM,EAAE,MA0Nb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accessibility-auditor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,qBAAqB,GACrB,0BAA0B,GAC1B,qBAAqB,GACrB,cAAc,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAoPD,QAAA,MAAM,MAAM,EAAE,MA0Nb,CAAC;eAEa,MAAM"}

package/dist/accessibility-auditor.js

@@ -1,61 +1,37 @@
 // src/accessibility-auditor/index.ts
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { isAbsolute, relative, resolve } from "node:path";
-var API_VERSION = "^0.1.10";
-var state = {
-  auditCount: 0,
-  fileCount: 0,
-  findingCount: 0,
-  hookInvocationCount: 0,
-  lastResult: null,
-  hookUnregister: null
-};
-var DEFAULTS = {
-  enabled: false,
-  includeExtensions: [".tsx", ".jsx", ".html", ".vue"],
-  maxFindings: 50,
-  severity: "warn",
-  onWriteEdit: true
-};
-function readConfig(raw) {
-  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
-  const r = raw;
-  return {
-    enabled: r["enabled"] !== false,
-    includeExtensions: Array.isArray(r["includeExtensions"]) ? r["includeExtensions"].filter((x) => typeof x === "string") : DEFAULTS.includeExtensions,
-    maxFindings: typeof r["maxFindings"] === "number" && r["maxFindings"] >= 1 && r["maxFindings"] <= 500 ? r["maxFindings"] : DEFAULTS.maxFindings,
-    severity: r["severity"] === "block" ? "block" : DEFAULTS.severity,
-    onWriteEdit: r["onWriteEdit"] !== false
-  };
-}
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
+import { readFileSync } from "node:fs";
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+
+// src/runtime/index.ts
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
 }
-function normalizeExtensions(exts) {
-  return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
-function matchesExtension(p, exts) {
-  const dot = p.lastIndexOf(".");
-  if (dot === -1) return false;
-  return exts.includes(p.slice(dot).toLowerCase());
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
 }
-function collectUiFiles(root, exts) {
+var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
+function collectSourceFiles(root, opts) {
   const files = [];
   if (!existsSync(root)) return files;
   const s = statSync(root);
   if (s.isFile()) {
-    if (matchesExtension(root, exts)) files.push(root);
+    if (matchesExtension(root, opts.extensions)) files.push(root);
     return files;
   }
   if (!s.isDirectory()) return files;
-  function walk(dir) {
+  const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
+  function walk(dir, depth) {
+    if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
     let entries;
     try {
       entries = readdirSync(dir);
@@ -63,6 +39,7 @@ function collectUiFiles(root, exts) {
       return;
     }
     for (const entry of entries) {
+      if (exclude.includes(entry)) continue;
       const full = resolve(dir, entry);
       let st;
       try {
@@ -71,15 +48,50 @@ function collectUiFiles(root, exts) {
         continue;
       }
       if (st.isDirectory()) {
-        walk(full);
-      } else if (st.isFile() && matchesExtension(full, exts)) {
+        walk(full, depth + 1);
+      } else if (st.isFile() && matchesExtension(full, opts.extensions)) {
         files.push(full);
       }
     }
   }
-  walk(root);
+  walk(root, 0);
   return files;
 }
+function matchesExtension(p, exts) {
+  return exts.includes(extname(p).toLowerCase());
+}
+
+// src/accessibility-auditor/index.ts
+var API_VERSION = "^0.1.10";
+var state = {
+  auditCount: 0,
+  fileCount: 0,
+  findingCount: 0,
+  hookInvocationCount: 0,
+  lastResult: null,
+  hookUnregister: null
+};
+var DEFAULTS = {
+  enabled: false,
+  includeExtensions: [".tsx", ".jsx", ".html", ".vue"],
+  maxFindings: 50,
+  severity: "warn",
+  onWriteEdit: true
+};
+function readConfig(raw) {
+  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
+  const r = raw;
+  return {
+    enabled: r["enabled"] !== false,
+    includeExtensions: Array.isArray(r["includeExtensions"]) ? r["includeExtensions"].filter((x) => typeof x === "string") : DEFAULTS.includeExtensions,
+    maxFindings: typeof r["maxFindings"] === "number" && r["maxFindings"] >= 1 && r["maxFindings"] <= 500 ? r["maxFindings"] : DEFAULTS.maxFindings,
+    severity: r["severity"] === "block" ? "block" : DEFAULTS.severity,
+    onWriteEdit: r["onWriteEdit"] !== false
+  };
+}
+function normalizeExtensions(exts) {
+  return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
+}
 var TAG_IMG = /<img\b[^>]*>/gi;
 var TAG_INPUT = /<input\b[^>]*\/?>/gi;
 var TAG_BUTTON = /<button\b[^>]*>([\s\S]*?)<\/button>/gi;
@@ -109,7 +121,7 @@ function auditFile(filePath, projectRoot) {
   const idsByValue = /* @__PURE__ */ new Map();
   function add(line, rule, severity, message) {
     findings.push({
-      file: relative(projectRoot, filePath),
+      file: relative2(projectRoot, filePath),
       line,
       rule,
       severity,
@@ -188,9 +200,9 @@ function auditFile(filePath, projectRoot) {
 }
 function auditPath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.includeExtensions);
-  const files = collectUiFiles(resolved, exts);
+  const files = collectSourceFiles(resolved, { extensions: exts });
   const findings = [];
   for (const file of files) {
     const fileFindings = auditFile(file, root);
@@ -198,7 +210,7 @@ function auditPath(rawPath, cfg) {
     if (findings.length >= cfg.maxFindings) break;
   }
   return {
-    path: relative(root, resolved),
+    path: relative2(root, resolved),
     findings: findings.slice(0, cfg.maxFindings),
     fileCount: files.length
   };
@@ -289,7 +301,7 @@ var plugin = {
       }
       return { additionalContext: summary };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "a11y_audit",
       description: "Audit a file or directory for accessibility issues. Scans .tsx/.jsx/.html/.vue files for missing alt text, missing labels, low-contrast placeholders, missing button text, and duplicate ids.",

package/dist/api-compatibility-gate.js

@@ -279,7 +279,7 @@ var plugin = {
       }
       return { additionalContext: message };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "api_compat_status",
       description: "Reports api-compatibility-gate state: severity, entry-point patterns, and per-session counters.",

package/dist/auto-doc.js

@@ -241,7 +241,7 @@ var plugin = {
   version: "0.2.0",
   description: "Auto-generates JSDoc/TSDoc comments for functions, classes, types, and interfaces",
   apiVersion: AUTO_DOC_API_VERSION,
-  capabilities: { tools: true, pipelines: ["toolCall"] },
+  capabilities: { tools: true, pipelines: ["toolCall"], llm: true },
   defaultConfig: {
     style: "tsdoc",
     includeTypes: false,

package/dist/auto-i18n-extractor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auto-i18n-extractor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAgL/C,QAAA,MAAM,MAAM,EAAE,MAsQb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auto-i18n-extractor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwK/C,QAAA,MAAM,MAAM,EAAE,MAsQb,CAAC;eAEa,MAAM"}

package/dist/auto-i18n-extractor.js

@@ -1,6 +1,24 @@
 // src/auto-i18n-extractor/index.ts
 import { readFileSync } from "node:fs";
-import { isAbsolute, relative, resolve } from "node:path";
+
+// src/runtime/index.ts
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+}
+
+// src/auto-i18n-extractor/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   filesScanned: 0,
@@ -41,16 +59,6 @@ function readConfig(raw) {
     excludeAttributes: Array.isArray(r["excludeAttributes"]) ? r["excludeAttributes"].filter((x) => typeof x === "string") : DEFAULTS.excludeAttributes
   };
 }
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
-}
 function fileExtension(p) {
   const dot = p.lastIndexOf(".");
   return dot > 0 ? p.slice(dot).toLowerCase() : "";
@@ -201,7 +209,7 @@ var plugin = {
 ${lines.join("\n")}${more}`;
       return { additionalContext: context };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "i18n_extract",
       description: "Scan a UI source file (.tsx/.jsx/.vue) for hardcoded user-facing string literals and return suggested i18n keys.",

package/dist/changelog-writer.js

@@ -138,7 +138,7 @@ var plugin = {
   version: "0.1.0",
   description: "Collects session work (commits, edits, manual notes) and writes Keep-a-Changelog entries under [Unreleased] on demand",
   apiVersion: "^0.1.10",
-  capabilities: { tools: true },
+  capabilities: { tools: true, llm: true },
   defaultConfig: { ...DEFAULTS },
   configSchema: {
     type: "object",

package/dist/code-metrics/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-metrics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA4P/C,QAAA,MAAM,MAAM,EAAE,MAgMb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-metrics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA0M/C,QAAA,MAAM,MAAM,EAAE,MAgMb,CAAC;eAEa,MAAM"}

package/dist/code-metrics.js

@@ -1,54 +1,37 @@
 // src/code-metrics/index.ts
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { extname, isAbsolute, relative, resolve } from "node:path";
-var API_VERSION = "^0.1.10";
-var state = {
-  measureCount: 0,
-  fileCount: 0,
-  hookInvocationCount: 0,
-  errorCount: 0,
-  hookUnregister: null
-};
-var DEFAULTS = {
-  enabled: false,
-  extensions: [".ts", ".tsx", ".js", ".jsx"],
-  maxFiles: 50
-};
-function readConfig(raw) {
-  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
-  const r = raw;
-  return {
-    enabled: r["enabled"] !== false,
-    extensions: Array.isArray(r["extensions"]) ? r["extensions"].filter((x) => typeof x === "string") : DEFAULTS.extensions,
-    maxFiles: typeof r["maxFiles"] === "number" && r["maxFiles"] >= 1 && r["maxFiles"] <= 500 ? r["maxFiles"] : DEFAULTS.maxFiles
-  };
-}
-function withinProject(p) {
-  if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = process.cwd();
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  if (rel === "" || rel === ".") return true;
-  if (rel.startsWith("..")) return false;
-  if (isAbsolute(rel)) return false;
-  return true;
+import { readFileSync } from "node:fs";
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+
+// src/runtime/index.ts
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
 }
-function normalizeExtensions(exts) {
-  return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
-function matchesExtension(p, exts) {
-  return exts.includes(extname(p).toLowerCase());
+function withinProject(p) {
+  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
 }
-function collectSourceFiles(root, exts) {
+var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
+function collectSourceFiles(root, opts) {
   const files = [];
   if (!existsSync(root)) return files;
   const s = statSync(root);
   if (s.isFile()) {
-    if (matchesExtension(root, exts)) files.push(root);
+    if (matchesExtension(root, opts.extensions)) files.push(root);
     return files;
   }
   if (!s.isDirectory()) return files;
-  function walk(dir) {
+  const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
+  function walk(dir, depth) {
+    if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
     let entries;
     try {
       entries = readdirSync(dir);
@@ -56,7 +39,7 @@ function collectSourceFiles(root, exts) {
       return;
     }
     for (const entry of entries) {
-      if (entry === "node_modules" || entry === "dist" || entry === ".git" || entry === "coverage") continue;
+      if (exclude.includes(entry)) continue;
       const full = resolve(dir, entry);
       let st;
       try {
@@ -65,20 +48,50 @@ function collectSourceFiles(root, exts) {
         continue;
       }
       if (st.isDirectory()) {
-        walk(full);
-      } else if (st.isFile() && matchesExtension(full, exts)) {
+        walk(full, depth + 1);
+      } else if (st.isFile() && matchesExtension(full, opts.extensions)) {
         files.push(full);
       }
     }
   }
-  walk(root);
+  walk(root, 0);
   return files;
 }
+function matchesExtension(p, exts) {
+  return exts.includes(extname(p).toLowerCase());
+}
+
+// src/code-metrics/index.ts
+var API_VERSION = "^0.1.10";
+var state = {
+  measureCount: 0,
+  fileCount: 0,
+  hookInvocationCount: 0,
+  errorCount: 0,
+  hookUnregister: null
+};
+var DEFAULTS = {
+  enabled: false,
+  extensions: [".ts", ".tsx", ".js", ".jsx"],
+  maxFiles: 50
+};
+function readConfig(raw) {
+  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
+  const r = raw;
+  return {
+    enabled: r["enabled"] !== false,
+    extensions: Array.isArray(r["extensions"]) ? r["extensions"].filter((x) => typeof x === "string") : DEFAULTS.extensions,
+    maxFiles: typeof r["maxFiles"] === "number" && r["maxFiles"] >= 1 && r["maxFiles"] <= 500 ? r["maxFiles"] : DEFAULTS.maxFiles
+  };
+}
+function normalizeExtensions(exts) {
+  return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
+}
 function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath(p) {
-  return toPosix(relative(process.cwd(), p));
+  return toPosix(relative2(process.cwd(), p));
 }
 function countFunctions(content) {
   let count = 0;
@@ -155,9 +168,9 @@ function analyzeFile(filePath, content) {
 }
 function measurePath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
-  const allFiles = collectSourceFiles(resolved, exts);
+  const allFiles = collectSourceFiles(resolved, { extensions: exts });
   const files = allFiles.slice(0, cfg.maxFiles);
   const metrics = [];
   for (const p of files) {
@@ -218,7 +231,7 @@ var plugin = {
       const exts = normalizeExtensions(cfg.extensions);
       if (!matchesExtension(sourcePath, exts)) return;
       state.hookInvocationCount += 1;
-      const resolved = resolve(process.cwd(), sourcePath);
+      const resolved = resolve2(process.cwd(), sourcePath);
       let content;
       try {
         content = readFileSync(resolved, "utf-8");
@@ -232,7 +245,7 @@ var plugin = {
 \u{1F4CA} code-metrics: ${relativePath(resolved)} \u2014 ${metrics.lines} lines (${metrics.codeLines} code, ${metrics.commentLines} comments, ${metrics.blankLines} blank), ${metrics.functionCount} function(s), complexity ${metrics.complexity}.`
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "measure_code_metrics",
       description: "Measure lines, comments, blank lines, function count, and cyclomatic-complexity-like score for a source file or directory.",
@@ -262,7 +275,7 @@ var plugin = {
         state.fileCount += result.files.length;
         return {
           ok: true,
-          path: relativePath(resolve(process.cwd(), rawPath)),
+          path: relativePath(resolve2(process.cwd(), rawPath)),
           files: result.files,
           totalFiles: result.totalFiles,
           capped: result.totalFiles > cfg.maxFiles

package/dist/commit-validator.js

@@ -130,7 +130,7 @@ var plugin = {
   version: "0.1.0",
   description: "PreToolUse hook that validates conventional-commit format before git_autocommit or bash git commit runs",
   apiVersion: API_VERSION,
-  capabilities: { tools: true, hooks: true },
+  capabilities: { tools: true, hooks: true, llm: true },
   defaultConfig: { ...DEFAULTS },
   configSchema: {
     type: "object",

package/dist/config-validator.js

@@ -282,7 +282,7 @@ var plugin = {
   \u2026 and ${problems.length - 10} more` : "") + "\nFix these before moving on \u2014 downstream tools will fail on this file."
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook);
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
     api.tools.register({
       name: "config_validator_status",
       description: "Reports config-validator state: watched extensions and counters (files checked, problems found).",

package/dist/cost-tracker/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cost-tracker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAK/C;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AA8KD,QAAA,MAAM,MAAM,EAAE,MA8Zb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cost-tracker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAK/C;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AAyKD,QAAA,MAAM,MAAM,EAAE,MA8Zb,CAAC;eAEa,MAAM"}

package/dist/cost-tracker.js

@@ -19,11 +19,13 @@ var digestCounters = {
   mailboxDigestErrors: 0
 };
 function readCostTrackerConfig(raw) {
+  const digestEveryN = raw?.["mailboxDigestEveryN"];
+  const digestTo = raw?.["mailboxDigestTo"];
   return {
     budgetLimit: typeof raw?.["budgetLimit"] === "number" ? raw["budgetLimit"] : 0,
     warningThreshold: typeof raw?.["warningThreshold"] === "number" ? raw["warningThreshold"] : 80,
-    mailboxDigestEveryN: typeof raw?.["mailboxDigestEveryN"] === "number" && raw?.["mailboxDigestEveryN"] >= 0 ? Math.floor(raw?.["mailboxDigestEveryN"]) : 0,
-    mailboxDigestTo: typeof raw?.["mailboxDigestTo"] === "string" && (raw?.["mailboxDigestTo"]).length > 0 ? raw?.["mailboxDigestTo"] : "cost-tracker"
+    mailboxDigestEveryN: typeof digestEveryN === "number" && digestEveryN >= 0 ? Math.floor(digestEveryN) : 0,
+    mailboxDigestTo: typeof digestTo === "string" && digestTo.length > 0 ? digestTo : "cost-tracker"
   };
 }
 function estimateCost(model, promptTokens, completionTokens) {

package/dist/cron/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cron/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAoE/C,QAAA,MAAM,MAAM,EAAE,MA2Pb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cron/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA+F/C,QAAA,MAAM,MAAM,EAAE,MAqRb,CAAC;eAEa,MAAM"}

package/dist/cron.js

@@ -11,6 +11,19 @@ function formatNextRun(intervalMs) {
   const ms = Number.isNaN(intervalMs) || intervalMs <= 0 ? 6e4 : intervalMs;
   return new Date(Date.now() + ms).toISOString();
 }
+function buildSnapshot(s, maxConcurrent) {
+  const jobs = Array.from(s.jobs.values()).map((j) => ({
+    name: j.name,
+    intervalMs: j.intervalMs,
+    action: j.action,
+    enabled: j.enabled,
+    lastRun: j.lastRun,
+    nextRun: j.nextRun,
+    runCount: j.runCount,
+    overdue: new Date(j.nextRun).getTime() < Date.now()
+  }));
+  return { count: jobs.length, maxConcurrent, jobs };
+}
 function clearCronResources() {
   for (const timer of state.timers.values()) {
     clearTimeout(timer);
@@ -64,6 +77,7 @@ var plugin = {
           runCount: job.runCount,
           ts: (/* @__PURE__ */ new Date()).toISOString()
         });
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         api.metrics.counter("cron_job_fired", 1, { job: name });
         api.metrics.histogram("cron_job_interval_ms", job.intervalMs, { job: name });
         scheduleNextRun(name);
@@ -165,6 +179,7 @@ var plugin = {
         state.jobs.set(name, job);
         scheduleNextRun(name);
         api.metrics.gauge("cron_active_jobs", state.jobs.size);
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         return {
           ok: true,
           name,
@@ -220,6 +235,7 @@ var plugin = {
         }
         cancelJob(name);
         api.metrics.gauge("cron_active_jobs", state.jobs.size);
+        api.emitCustom("cron:state_snapshot", buildSnapshot(state, maxConcurrent));
         return {
           ok: true,
           name,
@@ -232,6 +248,19 @@ var plugin = {
   teardown(api) {
     clearCronResources();
     api.log.info("cron plugin unloaded");
+  },
+  async health() {
+    const jobs = Array.from(state.jobs.values());
+    const overdue = jobs.filter(
+      (job) => job.enabled && new Date(job.nextRun).getTime() < Date.now()
+    ).length;
+    return {
+      ok: overdue === 0,
+      message: overdue > 0 ? `cron: ${overdue} overdue job(s) out of ${jobs.length}` : `cron: ${jobs.length} active job(s)`,
+      activeJobs: jobs.length,
+      overdueJobs: overdue,
+      totalRuns: jobs.reduce((sum, job) => sum + job.runCount, 0)
+    };
   }
 };
 var cron_default = plugin;