@wrongstack/plugins 0.295.1 → 0.296.2

package/dist/runtime.js

@@ -292,6 +292,22 @@ function safeJsonStringify(value, indent) {
   }
 }
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+function releaseHandles(state, keys) {
+  for (const key of keys) {
+    state[key] = releaseHandle(state[key]);
+  }
+}
+
 // src/runtime/index.ts
 var META_CHARS = /["'`;&|<>\r\n]/;
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
@@ -606,6 +622,8 @@ export {
   matchesExtension,
   parseLlmJsonObject,
   probeRunner,
+  releaseHandle,
+  releaseHandles,
   resolveExecInvocation,
   resolveFirstNodeBin,
   resolveNodeBin,

package/dist/secret-scanner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/secret-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwmBrD,QAAA,MAAM,MAAM,EAAE,MAgOb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/secret-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAymBrD,QAAA,MAAM,MAAM,EAAE,MAgOb,CAAC;eAEa,MAAM"}

package/dist/secret-scanner.js

@@ -1,3 +1,20 @@
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+
 // src/runtime/credential-patterns.ts
 var CREDENTIAL_PATTERNS = [
   // LLM provider keys
@@ -435,8 +452,8 @@ var plugin = {
     state.leakCount = 0;
     state.lastBlock = null;
     state.lastLeak = null;
-    state.hookUnregister = null;
-    state.postHookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
+    state.postHookUnregister = releaseHandle(state.postHookUnregister);
     const cfg = readConfig(api.config.extensions?.["secret-scanner"]);
     PATTERNS = [...BASE_PATTERNS];
     for (const cp of cfg.customPatterns) {

package/dist/session-recap/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session-recap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA4MrD,QAAA,MAAM,MAAM,EAAE,MA4Yb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session-recap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA6MrD,QAAA,MAAM,MAAM,EAAE,MA4Yb,CAAC;eAEa,MAAM"}

package/dist/session-recap.js

@@ -1,3 +1,20 @@
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+
 // src/session-recap/index.ts
 var state = {
   recapsPublished: 0,
@@ -155,7 +172,7 @@ var plugin = {
     state.commitCount = 0;
     state.startedAt = null;
     state.lastActivityAt = null;
-    state.stopHookUnregister = null;
+    state.stopHookUnregister = releaseHandle(state.stopHookUnregister);
     for (const off of state.eventUnsubscribers) {
       try {
         off();

package/dist/smart-rename/index.d.ts

@@ -19,6 +19,8 @@
  * @public
  */
 import type { Plugin } from '@wrongstack/core/types';
+/** True when `name` is something this tool may safely substitute. */
+export declare function isIdentifier(name: string): boolean;
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/smart-rename/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/smart-rename/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA0FrD,QAAA,MAAM,MAAM,EAAE,MAqIb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/smart-rename/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAkFrD,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAmCD,QAAA,MAAM,MAAM,EAAE,MAgJb,CAAC;eAEa,MAAM"}

package/dist/smart-rename.js

@@ -38,8 +38,15 @@ function relativePath(p) {
 function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var IDENTIFIER_RE = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+function isIdentifier(name) {
+  return IDENTIFIER_RE.test(name);
+}
 function renameInContent(content, oldName, newName) {
-  const re = new RegExp(`\\b${escapeRegex(oldName)}\\b`, "g");
+  const re = new RegExp(
+    `(?<![A-Za-z0-9_$])${escapeRegex(oldName)}(?![A-Za-z0-9_$])`,
+    "g"
+  );
   let replacements = 0;
   const preview = content.replace(re, () => {
     replacements++;
@@ -101,6 +108,12 @@ var plugin = {
         if (!newName || typeof newName !== "string" || newName.length === 0) {
           return { ok: false, error: "newName is required" };
         }
+        if (!isIdentifier(oldName)) {
+          return { ok: false, error: `oldName "${oldName}" is not a valid identifier` };
+        }
+        if (!isIdentifier(newName)) {
+          return { ok: false, error: `newName "${newName}" is not a valid identifier` };
+        }
         if (!withinProject(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
@@ -166,5 +179,6 @@ var plugin = {
 };
 var smart_rename_default = plugin;
 export {
-  smart_rename_default as default
+  smart_rename_default as default,
+  isIdentifier
 };

package/dist/spec-linker/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spec-linker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwPrD,QAAA,MAAM,MAAM,EAAE,MAuOb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spec-linker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAyPrD,QAAA,MAAM,MAAM,EAAE,MAuOb,CAAC;eAEa,MAAM"}

package/dist/spec-linker.js

@@ -1,6 +1,23 @@
 // src/spec-linker/index.ts
 import * as fs from "node:fs/promises";
 
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+
 // src/manifest/index.ts
 var OFFICIAL_PLUGIN_NAMES = [
   "agent-handoff",
@@ -330,8 +347,8 @@ var plugin = {
     state.skippedNonMd = 0;
     state.readErrorCount = 0;
     state.autoFixApplied = 0;
-    state.postHookUnregister = null;
-    state.preHookUnregister = null;
+    state.postHookUnregister = releaseHandle(state.postHookUnregister);
+    state.preHookUnregister = releaseHandle(state.preHookUnregister);
     const cfg = readConfig(api.config.extensions?.["spec-linker"]);
     const postHook = async (input) => {
       if (!cfg.enabled) return;

package/dist/template-engine/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/template-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA+HrD,QAAA,MAAM,MAAM,EAAE,MA4Sb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/template-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA0IrD,QAAA,MAAM,MAAM,EAAE,MA+Sb,CAAC;eAEa,MAAM"}

package/dist/template-engine.js

@@ -8,6 +8,17 @@ import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 // src/runtime/local-bin.ts
 import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -28,6 +39,7 @@ function withinProject(p) {
 // src/template-engine/index.ts
 var API_VERSION = "^0.1.10";
 var templates = /* @__PURE__ */ new Map();
+var contributorUnregister = null;
 function expandTemplate(template, variables) {
   let result = template;
   result = result.replace(/\{\{(\w+)\}\}/g, (match, key) => {
@@ -300,7 +312,8 @@ var plugin = {
         };
       }
     });
-    api.registerSystemPromptContributor(async () => [
+    contributorUnregister = releaseHandle(contributorUnregister);
+    contributorUnregister = api.registerSystemPromptContributor(async () => [
       {
         type: "text",
         text: `Template engine available:
@@ -315,6 +328,7 @@ var plugin = {
   teardown(api) {
     const count = templates.size;
     templates.clear();
+    contributorUnregister = releaseHandle(contributorUnregister);
     api.log.info("template-engine: teardown complete", { cleared: count });
   },
   async health() {

package/dist/test-coverage-gate.js

@@ -7,6 +7,17 @@ import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 // src/runtime/local-bin.ts
 import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -135,7 +146,7 @@ var plugin = {
     state.skippedCount = 0;
     state.lastOverallPct = null;
     state.lastResult = null;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["test-coverage-gate"]);
     const hook = (input) => {
       if (!cfg.enabled) return;

package/dist/test-runner-gate.js

@@ -104,6 +104,17 @@ var BoundedMap = class {
   }
 };
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -451,7 +462,7 @@ var plugin = {
     state.errorCount = 0;
     state.extensionSkippedCount = 0;
     state.cachedSkipCount = 0;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     state.lastResult = null;
     lastPassedHash.clear();
     const cfg = readConfig(api.config.extensions?.["test-runner-gate"]);

package/dist/todo-listener.js

@@ -24,6 +24,17 @@ function safeJsonStringify(value, indent) {
   }
 }
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 
@@ -100,7 +111,7 @@ var plugin = {
     state.lastMessageId = null;
     state.lastPayloadHash = "";
     state.lastBroadcastAt = 0;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["todo-listener"]);
     const mailbox = api.mailbox;
     const hook = async (input) => {

package/dist/token-budget/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/token-budget/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAqFrD,QAAA,MAAM,MAAM,EAAE,MA8Qb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/token-budget/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA8HrD,QAAA,MAAM,MAAM,EAAE,MAyQb,CAAC;eAEa,MAAM"}

package/dist/token-budget.js

@@ -34,16 +34,36 @@ function modelMatches(pattern, model) {
   }
   return model.toLowerCase() === pattern.toLowerCase();
 }
+function readBoundedNumber(value, min, max, fallback) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+  if (value < min || value > max) return fallback;
+  return value;
+}
 function readConfig(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS };
   const r = raw;
+  const warnPercent = readBoundedNumber(r["warnPercent"], 1, 100, DEFAULTS.warnPercent);
+  const stopPercent = readBoundedNumber(r["stopPercent"], 1, 100, DEFAULTS.stopPercent);
   return {
-    limit: typeof r["limit"] === "number" ? r["limit"] : DEFAULTS.limit,
-    warnPercent: typeof r["warnPercent"] === "number" ? r["warnPercent"] : DEFAULTS.warnPercent,
-    stopPercent: typeof r["stopPercent"] === "number" ? r["stopPercent"] : DEFAULTS.stopPercent,
+    limit: readBoundedNumber(r["limit"], 0, Number.MAX_SAFE_INTEGER, DEFAULTS.limit),
+    warnPercent,
+    // A warn threshold above the stop threshold can never fire — the run
+    // stops first. Clamp so the pair always describes a reachable window.
+    stopPercent: Math.max(stopPercent, warnPercent),
     model: typeof r["model"] === "string" ? r["model"] : ""
   };
 }
+function clearRegistrations() {
+  for (const key of ["hookUnregister", "postHookUnregister"]) {
+    const off = state[key];
+    if (!off) continue;
+    try {
+      off();
+    } catch {
+    }
+    state[key] = null;
+  }
+}
 var plugin = {
   name: "token-budget",
   version: "0.1.0",
@@ -90,9 +110,8 @@ var plugin = {
     state.stopFired = false;
     state.warnContextInjected = false;
     state.stopContextInjected = false;
-    state.hookUnregister = null;
-    state.postHookUnregister = null;
     state.lastRequest = null;
+    clearRegistrations();
     const cfg = readConfig(api.config.extensions?.["token-budget"]);
     api.onEvent("provider.response", (payload) => {
       const p = payload;
@@ -189,6 +208,12 @@ var plugin = {
           remaining,
           percent,
           requestCount: state.requestCount,
+          // The EFFECTIVE thresholds, after out-of-range values fall back to
+          // the defaults and warn/stop are ordered. Without these the user
+          // cannot tell that a rejected or clamped setting is not in force.
+          warnPercent: cfg.warnPercent,
+          stopPercent: cfg.stopPercent,
+          model: cfg.model === "" ? null : cfg.model,
           breakdown: {
             prompt: state.totalPromptTokens,
             completion: state.totalCompletionTokens
@@ -207,20 +232,7 @@ var plugin = {
     });
   },
   teardown(api) {
-    if (state.hookUnregister) {
-      try {
-        state.hookUnregister();
-      } catch {
-      }
-      state.hookUnregister = null;
-    }
-    if (state.postHookUnregister) {
-      try {
-        state.postHookUnregister();
-      } catch {
-      }
-      state.postHookUnregister = null;
-    }
+    clearRegistrations();
     const final = {
       totalTokens: state.totalTokens,
       requestCount: state.requestCount,

package/dist/type-gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/type-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA+NrD,QAAA,MAAM,MAAM,EAAE,MAkOb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/type-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAgOrD,QAAA,MAAM,MAAM,EAAE,MAkOb,CAAC;eAEa,MAAM"}

package/dist/type-gate.js

@@ -65,6 +65,17 @@ function resolveNodeBin(packageName, binName, cwd, extraArgs = []) {
   return resolved === null ? null : { ...resolved, args: [resolved.entry, ...extraArgs] };
 }
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var META_CHARS = /["'`;&|<>\r\n]/;
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
@@ -439,7 +450,7 @@ var plugin = {
     state.errorCount = 0;
     state.skippedCount = 0;
     state.lastResult = null;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["type-gate"]);
     const hook = async (input) => {
       if (!cfg.enabled) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.295.1",
+  "version": "0.296.2",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -294,8 +294,8 @@
     "vitest": "^4.1.10"
   },
   "dependencies": {
-    "@wrongstack/core": "0.295.1",
-    "@wrongstack/tools": "0.295.1"
+    "@wrongstack/core": "0.296.2",
+    "@wrongstack/tools": "0.296.2"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",