@wrongstack/plugins 0.299.0 → 0.301.0

package/dist/migration-planner.js

@@ -49,6 +49,45 @@ async function runOptionalPluginLlm(request) {
     };
   }
 }
+async function runOptionalPluginCouncil(request) {
+  if (!request.requested) {
+    return { used: false, value: null, fallbackReason: "not-requested" };
+  }
+  if (request.options?.signal?.aborted) {
+    return { used: false, value: null, fallbackReason: "cancelled" };
+  }
+  const council = request.api.llm?.council;
+  if (council) {
+    try {
+      const result = await council(request.prompt, {
+        ...request.context ? { context: request.context } : {},
+        ...request.profile ? { profile: request.profile } : {},
+        ...request.councilOptions ? { options: request.councilOptions } : {},
+        ...request.options?.signal ? { signal: request.options.signal } : {}
+      });
+      if (result.status === "cancelled") {
+        return { used: false, value: null, fallbackReason: "cancelled" };
+      }
+      const parsed = result.status === "decided" ? request.parse(result.answer ?? "") : null;
+      if (parsed !== null) return { used: true, value: parsed, fallbackReason: null };
+      request.api.log.warn(
+        `${request.label}: Council did not return a valid answer; trying One Shot`,
+        {
+          status: result.status,
+          resolution: result.resolution
+        }
+      );
+    } catch (error) {
+      if (request.options?.signal?.aborted) {
+        return { used: false, value: null, fallbackReason: "cancelled" };
+      }
+      request.api.log.warn(`${request.label}: Council failed; trying One Shot`, {
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  return runOptionalPluginLlm(request);
+}
 
 // src/runtime/local-bin.ts
 import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
@@ -283,7 +322,7 @@ function buildMigrationLlmPrompt(input) {
 var plugin = {
   name: "migration-planner",
   version: "0.2.0",
-  description: "Builds evidence-backed migration checklists with optional host-routed LLM risk analysis",
+  description: "Builds evidence-backed migration checklists with optional Council-reviewed risk analysis",
   apiVersion: API_VERSION,
   capabilities: { tools: true, hooks: true, llm: true },
   defaultConfig: { ...DEFAULTS },
@@ -311,7 +350,7 @@ var plugin = {
       useLlm: {
         type: "boolean",
         default: false,
-        description: "Add a separate, evidence-bounded risk analysis through api.llm; deterministic changelog extraction remains authoritative."
+        description: "Add evidence-bounded risk analysis through the risk-review Council profile, with One Shot and deterministic fallbacks."
       },
       maxLlmChars: {
         type: "number",
@@ -347,7 +386,9 @@ var plugin = {
         additionalContext: `Manifest file ${basename2} changed. Consider running migration_plan if a dependency version was updated.`
       };
     };
-    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, { background: true });
+    state.hookUnregister = api.registerHook("PostToolUse", "write|edit", hook, {
+      background: true
+    });
     api.tools.register({
       name: "migration_plan",
       description: "Read a package CHANGELOG and produce a migration checklist with breaking changes and recommended steps between two versions.",
@@ -372,7 +413,7 @@ var plugin = {
           },
           use_llm: {
             type: "boolean",
-            description: "Add evidence-bounded LLM risk analysis. Overrides useLlm for this call."
+            description: "Add evidence-bounded Council risk analysis with One Shot fallback. Overrides useLlm for this call."
           }
         },
         required: ["packageName", "fromVersion", "toVersion"]
@@ -411,10 +452,11 @@ var plugin = {
         }
         execOpts?.signal?.throwIfAborted();
         const requested = input.use_llm ?? cfg.useLlm;
-        const llm = await runOptionalPluginLlm({
+        const llm = await runOptionalPluginCouncil({
           requested,
           api,
           label: "migration-planner",
+          profile: "risk-review",
           prompt: buildMigrationLlmPrompt({
             packageName,
             fromVersion,
@@ -427,6 +469,7 @@ var plugin = {
           }),
           options: {
             system: "You assess software migrations only from supplied evidence. Return one JSON object and clearly preserve uncertainty.",
+            role: "planner",
             responseFormat: "json",
             maxTokens: 2048,
             temperature: 0.1,

package/dist/path-guard/index.d.ts

@@ -3,13 +3,21 @@
  * destructive shell commands that touch protected paths.
  *
  * `branch-guard` protects git *branches*; this plugin protects
- * *files and directories*. A `PreToolUse` hook on `write|edit|bash`
- * matches the target path against a configurable glob list:
+ * *files and directories*. A `PreToolUse` hook matches the target path
+ * against a configurable glob list:
  *
- *  - `write` / `edit` → the `path` / `file_path` input field
- *  - `bash`           → destructive commands only (`rm`, `rmdir`,
- *    `mv`, `del`, output redirection `>` / `>>`, `truncate`) whose
- *    arguments mention a protected path
+ *  - any tool that declares `fs.write` (or, absent a capability list,
+ *    `mutating: true`) → the `path` / `file_path` / `output_path` / …
+ *    input field
+ *  - shell commands → destructive ones only (`rm`, `rmdir`, `mv`, `cp`,
+ *    `install`, `tee`, `dd of=`, output redirection `>` / `>>`, `truncate`)
+ *    whose arguments mention a protected path
+ *
+ * The hook is registered for `*` and decides from the tool's own
+ * declaration. It used to be registered for `write|edit|bash|exec` and to
+ * branch on those four names, which meant `patch`, `scaffold`, every
+ * plugin-registered writer and every MCP filesystem server wrote past it
+ * untouched.
  *
  * Default protected set: lockfiles, `.env*` secrets, `.git/`
  * internals, and production migration folders — files an agent
@@ -40,12 +48,6 @@ import type { Plugin } from '@wrongstack/core/types';
  * (`.env` matches `sub/dir/.env`).
  */
 export declare function compilePathGlob(pattern: string): RegExp;
-/**
- * Extract candidate target paths from a shell command, but only when
- * the command looks destructive. Non-destructive commands (cat, ls,
- * grep …) never trigger the guard, even if they mention a protected
- * path.
- */
 export declare function destructiveTargets(command: string): string[];
 declare const plugin: Plugin;
 export default plugin;