@wrongstack/plugins 0.299.0 → 0.301.0

package/README.md

@@ -725,7 +725,9 @@ warning depending on `mode`.
 
 Protects sensitive paths from accidental writes/edits and destructive shell
 commands. Defaults cover lockfiles, `.env`, `.git`, and migration-like paths;
-use `mode: "warn"` for advisory-only enforcement.
+use `mode: "warn"` for advisory-only enforcement. Writer globs are blocked when
+their unresolved scope overlaps a protected path; narrow the target or add an
+`allow` glob to exempt an intentional scope.
 
 ```jsonc
 {

package/dist/audit/index.d.ts

@@ -265,7 +265,7 @@ export declare const OFFICIAL_PLUGIN_AUDIT_ENTRIES: readonly [{
 }, {
     readonly name: 'migration-planner';
     readonly risk: 'low';
-    readonly summary: 'Builds evidence-backed migration checklists with optional host-routed LLM risk analysis';
+    readonly summary: 'Builds evidence-backed migration checklists with optional Council-reviewed risk analysis';
     readonly defaultState: 'inactive';
     readonly canDisable: true;
 }, {

package/dist/audit.js

@@ -311,7 +311,7 @@ var OFFICIAL_PLUGIN_AUDIT_ENTRIES = [
   {
     name: "migration-planner",
     risk: "low",
-    summary: "Builds evidence-backed migration checklists with optional host-routed LLM risk analysis",
+    summary: "Builds evidence-backed migration checklists with optional Council-reviewed risk analysis",
     defaultState: "inactive",
     canDisable: true
   },

package/dist/auto-doc.js

@@ -106,6 +106,7 @@ async function generateDocCommentLlm(entity, snippet, includeTypes, api) {
       `Write documentation for this ${entity.kind} named "${entity.name}". Respond with ONLY a JSON object of the form {"summary": string, "params": {"<name>": string}, "returns": string}. summary is one concise sentence. params has one entry per parameter` + (paramList.length > 0 ? ` (${paramList.join(", ")})` : " (may be empty)") + ". returns describes the return value (empty string if none). No prose outside the JSON.\n\n```\n" + snippet + "\n```",
       {
         system: "You are a precise API documentation writer. Output only JSON.",
+        role: "document",
         maxTokens: 400,
         responseFormat: "json"
       }

package/dist/changelog-writer.js

@@ -320,7 +320,11 @@ var plugin = {
       try {
         const result = await api.llm.complete(
           'Rewrite this Keep-a-Changelog block into concise, user-facing release-notes wording. Keep the EXACT markdown structure: the same "### Section" headings, one "- " bullet per entry, no entries added or removed. Output ONLY the markdown block.\n\n' + block,
-          { system: "You are a precise technical release-notes editor.", maxTokens: 1500 }
+          {
+            system: "You are a precise technical release-notes editor.",
+            role: "document",
+            maxTokens: 1500
+          }
         );
         const text = result.text.trim();
         if (!text.startsWith("###")) return block;

package/dist/commit-validator.js

@@ -300,6 +300,7 @@ Errors: ${parsed.errors.join("; ")}
 Reply with ONE corrected conventional-commit subject line (and optional body) and nothing else.`,
             {
               system: "You rewrite commit subjects to follow the conventional-commits format. Reply tersely, no preamble, no quotes.",
+              role: "reviewer",
               maxTokens: 120
             }
           );

package/dist/config-validator.js

@@ -1,5 +1,30 @@
 // src/config-validator/index.ts
 import { readFileSync, statSync } from "node:fs";
+
+// src/runtime/index.ts
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
+
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+function hasLeadingDash(arg) {
+  return arg.length > 0 && arg.startsWith("-");
+}
+function withinProjectPath(projectRoot, candidate) {
+  if (candidate.length === 0 || candidate.length > 4096) return false;
+  if (hasLeadingDash(candidate)) return false;
+  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
+  const rel = relative(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function withinProject(p) {
+  const cwd = process.cwd();
+  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
+}
+
+// src/config-validator/index.ts
 var state = {
   invocations: 0,
   filesChecked: 0,
@@ -79,6 +104,9 @@ function positionToLineCol(text, pos) {
   const col = pos - upTo.lastIndexOf("\n");
   return { line, col };
 }
+function redactParseSnippet(message) {
+  return message.replace(/"[\s\S]{0,200}?"(?= is not valid JSON)/g, '"\u2026"');
+}
 function validateJson(text, isJsonc, fileName) {
   const source = isJsonc ? stripJsonc(text) : text;
   try {
@@ -112,10 +140,10 @@ function validateJson(text, isJsonc, fileName) {
       const idx = source.indexOf(snippetMatch[1]);
       if (idx >= 0) {
         const { line } = positionToLineCol(source, idx);
-        return [`JSON parse error near line ${line}: ${message.split("\n")[0]}`];
+        return [`JSON parse error near line ${line}`];
       }
     }
-    return [`JSON parse error: ${message.split("\n")[0]}`];
+    return [`JSON parse error: ${redactParseSnippet(message.split("\n")[0] ?? "")}`];
   }
 }
 function validateYaml(text) {
@@ -252,10 +280,12 @@ var plugin = {
     const cfg = readConfig(api.config.extensions?.["config-validator"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
+      if (input.toolResult?.isError) return;
       state.invocations += 1;
       const ti = input.toolInput ?? {};
       const raw = ti["path"] ?? ti["file_path"] ?? ti["filePath"];
       if (typeof raw !== "string" || raw.length === 0) return;
+      if (!withinProject(raw)) return;
       const lower = raw.toLowerCase();
       if (!cfg.extensions.some((ext) => lower.endsWith(ext))) return;
       let text;

package/dist/dep-guard.js

@@ -175,7 +175,7 @@ var plugin = {
       confirmTyposquatsWithLlm: {
         type: "boolean",
         default: false,
-        description: "Ask the host LLM to confirm whether a flagged typosquat is real-but-obscure or genuinely a typo. Appended to the warn context, never escalates to a block. Off by default."
+        description: "Ask the risk-review Council to assess a flagged typosquat, with One Shot fallback. Appended to the warn context, never escalates to a block. Off by default."
       }
     }
   },
@@ -234,14 +234,25 @@ var plugin = {
             const baseNote = `"${pkg.name}" is one edit away from the well-known package "${lookalike}" \u2014 possible typosquat. Verify the name before installing.`;
             if (cfg.confirmTyposquatsWithLlm && api.llm) {
               try {
-                const verdict = await api.llm.complete(
-                  `A user is installing the npm package "${pkg.name}" which is 1 edit away from the well-known "${lookalike}". Is "${pkg.name}" likely a typo of "${lookalike}" or a real-but-obscure package? Reply with ONE sentence starting with "TYPO:" or "REAL:".`,
+                const question = `Classify whether npm package "${pkg.name}" is likely a typo or typosquat of "${lookalike}".`;
+                const council = api.llm.council ? await api.llm.council(question, {
+                  context: "The only supplied evidence is that the names have edit distance 1. Do not invent registry, download, ownership, or provenance facts.",
+                  profile: "risk-review",
+                  options: [
+                    { id: "typo", label: "Likely typo or typosquat" },
+                    { id: "real", label: "Likely distinct real package" },
+                    { id: "uncertain", label: "Insufficient evidence" }
+                  ]
+                }) : null;
+                const councilVerdict = council?.status === "decided" && council.optionId ? `${council.optionId.toUpperCase()}: ${council.reason ?? council.answer ?? "no rationale"}` : null;
+                const t = councilVerdict ? councilVerdict : (await api.llm.complete(
+                  `${question} Reply with ONE sentence starting with "TYPO:", "REAL:", or "UNCERTAIN:".`,
                   {
-                    system: "You are a supply-chain security assistant. Reply tersely with a single TYPO: or REAL: verdict.",
-                    maxTokens: 80
+                    system: "You are a supply-chain security assistant. Use only supplied evidence and preserve uncertainty.",
+                    role: "security-reviewer",
+                    maxTokens: 100
                   }
-                );
-                const t = verdict.text.trim();
+                )).text.trim();
                 if (t) {
                   state.llmConfirmCount += 1;
                   api.metrics.counter("llm_confirm");

package/dist/error-lens.js

@@ -190,7 +190,11 @@ var plugin = {
 ${errorLine ?? "(no error line)"}
 ` + (frames.length > 0 ? `Top stack frames: ${frames.join(", ")}
 ` : "") + "Reply with ONE short sentence suggesting the most likely fix. No preamble.",
-            { system: "You are a terse debugging assistant.", maxTokens: 100 }
+            {
+              system: "You are a terse debugging assistant.",
+              role: "reviewer",
+              maxTokens: 100
+            }
           );
           const text = hint.text.trim();
           if (text) {

package/dist/git-autocommit.js

@@ -22,11 +22,7 @@ async function runGit(args, cwd, timeoutMs = DEFAULT_GIT_TIMEOUT_MS) {
       (err, stdout) => {
         if (err) {
           const e = err;
-          rejectPromise(
-            new Error(
-              `git command failed: ${e.message ?? e.stderr ?? String(err)}`
-            )
-          );
+          rejectPromise(new Error(`git command failed: ${e.message ?? e.stderr ?? String(err)}`));
           return;
         }
         resolvePromise(stdout.trim());
@@ -198,6 +194,7 @@ Diff:
 ${diff}`,
       {
         system: "You are a precise release engineer writing Conventional Commits. Output only JSON.",
+        role: "document",
         maxTokens: 400,
         responseFormat: "json"
       }