@wrongstack/plugins 0.300.0 → 0.301.0

package/dist/plugin-audit-catalog.js

@@ -466,6 +466,13 @@ var HOST_PLUGIN_AUDIT_ENTRIES = [
     defaultState: "active",
     canDisable: true
   },
+  {
+    name: "wstack-cloud-config-sync",
+    risk: "medium",
+    summary: "my.wrongstack.com config synchronization over the namespaced sync API.",
+    defaultState: "active",
+    canDisable: true
+  },
   {
     name: "wstack-chimera",
     risk: "medium",

package/dist/pr-drafter.js

@@ -267,9 +267,15 @@ var plugin = {
           }
         }
       },
-      permission: "auto",
+      // Writes the draft to disk (`writeFile` below), so `mutating: false` was
+      // not just a missing capability — it actively LIED, letting even a gate
+      // that reads `mutating` correctly through. It also flipped the tool onto
+      // the wrong side of `smoke.test.ts`, which skips `mutating: true` tools:
+      // this one was exercised by the suite and wrote to the repo during it.
+      permission: "confirm",
       category: "Workflow",
-      mutating: false,
+      mutating: true,
+      capabilities: ["fs.write"],
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "pr-drafter is disabled" };
         const draft = await buildDraft(cfg, api.llm);

package/dist/shell-check.js

@@ -4,6 +4,7 @@ import { readdir } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve } from "node:path";
 var API_VERSION = "^0.1.10";
 function withinProject(p) {
+  if (p.startsWith("-")) return false;
   const root = process.cwd();
   const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
   const rel = relative(root, resolved);

package/dist/smart-rename.js

@@ -91,9 +91,13 @@ var plugin = {
         },
         required: ["path", "oldName", "newName"]
       },
-      permission: "auto",
+      // Rewrites source files on `apply: true`. `auto` + no declared
+      // capability meant no confirmation prompt and no read-only-mode block —
+      // `readonly-permission-policy` keys on `capabilities`, not `mutating`.
+      permission: "confirm",
       category: "Development",
       mutating: true,
+      capabilities: ["fs.write"],
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "smart-rename is disabled" };
         const rawPath = input.path;

package/dist/template-engine.js

@@ -100,6 +100,33 @@ function validateRelativeTemplatePath(field, value) {
   }
   return null;
 }
+var PROTECTED_WRITE_PREFIXES = [
+  ".git/",
+  ".husky/",
+  ".github/workflows/",
+  ".wrongstack/",
+  ".claude/",
+  "node_modules/"
+];
+var PROTECTED_WRITE_FILES = /* @__PURE__ */ new Set([
+  "package.json",
+  "pnpm-workspace.yaml",
+  "package-lock.json",
+  "pnpm-lock.yaml",
+  "yarn.lock",
+  ".npmrc",
+  ".gitattributes"
+]);
+function validateWritableTemplateTarget(field, value) {
+  const baseError = validateRelativeTemplatePath(field, value);
+  if (baseError) return baseError;
+  const norm = value.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
+  const base = norm.slice(norm.lastIndexOf("/") + 1);
+  if (PROTECTED_WRITE_PREFIXES.some((p) => norm.startsWith(p)) || PROTECTED_WRITE_FILES.has(base) || base === ".env" || base.startsWith(".env.")) {
+    return `${field} "${value}" is a protected path (VCS hooks, CI workflows, dependency manifests, or agent configuration). Write it with the \`write\` tool instead, which prompts for confirmation.`;
+  }
+  return null;
+}
 var plugin = {
   name: "template-engine",
   version: "0.1.0",
@@ -145,7 +172,14 @@ var plugin = {
         },
         required: ["template", "variables"]
       },
-      permission: "auto",
+      // Writes caller-supplied content to a caller-supplied path. `auto` +
+      // no declared capability meant no confirmation prompt, no read-only-mode
+      // block (`readonly-permission-policy` keys on `capabilities`, not
+      // `mutating`), and no PreToolUse hook — plugin tools reach the executor
+      // through `plugin_manager action:'use'`, which bypasses it.
+      permission: "confirm",
+      capabilities: ["fs.write"],
+      riskTier: "destructive",
       category: "Project",
       mutating: true,
       async execute(input) {
@@ -166,9 +200,13 @@ var plugin = {
           return { ok: false, error: String(err) };
         }
         if (output_path) {
-          const pathError = validateRelativeTemplatePath("output_path", output_path);
+          const pathError = validateWritableTemplateTarget("output_path", output_path);
           if (pathError) return { ok: false, error: pathError };
-          await writeFile(output_path, result, "utf-8");
+          try {
+            await writeFile(output_path, result, "utf-8");
+          } catch (err) {
+            return { ok: false, error: `Could not write ${output_path}: ${String(err)}` };
+          }
           return {
             ok: true,
             output_path,
@@ -204,7 +242,10 @@ var plugin = {
         },
         required: ["template_path", "variables"]
       },
-      permission: "auto",
+      // Same reasoning as `template_expand` above.
+      permission: "confirm",
+      capabilities: ["fs.write"],
+      riskTier: "destructive",
       mutating: true,
       async execute(input) {
         const template_path = input["template_path"];
@@ -232,9 +273,13 @@ var plugin = {
           return { ok: false, error: `Template rendering failed: ${err}` };
         }
         if (output_path) {
-          const pathError = validateRelativeTemplatePath("output_path", output_path);
+          const pathError = validateWritableTemplateTarget("output_path", output_path);
           if (pathError) return { ok: false, error: pathError };
-          await writeFile(output_path, result, "utf-8");
+          try {
+            await writeFile(output_path, result, "utf-8");
+          } catch (err) {
+            return { ok: false, error: `Could not write ${output_path}: ${String(err)}` };
+          }
           return {
             ok: true,
             template_path,

package/dist/test-generator.js

@@ -71,6 +71,30 @@ function readConfig(raw) {
     maxSourceChars: typeof r["maxSourceChars"] === "number" && r["maxSourceChars"] >= 1e3 && r["maxSourceChars"] <= 1e5 ? r["maxSourceChars"] : DEFAULTS.maxSourceChars
   };
 }
+var SOURCE_EXTENSIONS = [
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".mts",
+  ".cts",
+  ".py",
+  ".go",
+  ".rs",
+  ".java",
+  ".kt",
+  ".rb",
+  ".php",
+  ".cs",
+  ".swift",
+  ".c",
+  ".h",
+  ".cc",
+  ".cpp",
+  ".hpp"
+];
 function withinProject(p) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
   const root = process.cwd();
@@ -298,6 +322,12 @@ var plugin = {
         if (!withinProject(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
+        if (!SOURCE_EXTENSIONS.some((ext) => rawPath.toLowerCase().endsWith(ext))) {
+          return {
+            ok: false,
+            error: `test generation only reads source files (${SOURCE_EXTENSIONS.join(", ")}); refusing "${rawPath}"`
+          };
+        }
         const resolved = resolve(process.cwd(), rawPath);
         state.generateCount += 1;
         let result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.300.0",
+  "version": "0.301.0",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -299,8 +299,8 @@
     "vitest": "^4.1.10"
   },
   "dependencies": {
-    "@wrongstack/core": "0.300.0",
-    "@wrongstack/tools": "0.300.0"
+    "@wrongstack/core": "0.301.0",
+    "@wrongstack/tools": "0.301.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",