@wrongstack/plugins 0.313.0 → 0.316.1

package/dist/interface-contract-guard.js

@@ -72,10 +72,19 @@ function extractInterfaceNames(content) {
   }
   return names;
 }
-var IMPLEMENTER_RE = /(?:implements|satisfies|\bas)\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
+var IMPLEMENTS_EXTENDS_RE = /(?:\bimplements\b|\bextends\b)\s+([^{;=]+)/g;
+var SATISFIES_AS_RE = /(?:\bsatisfies\b|\bas\b)\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
+var IDENTIFIER_RE = /[A-Za-z_$][A-Za-z0-9_$]*/g;
 function collectImplementedNames(content, into) {
-  IMPLEMENTER_RE.lastIndex = 0;
-  for (const m of content.matchAll(IMPLEMENTER_RE)) {
+  for (const m of content.matchAll(IMPLEMENTS_EXTENDS_RE)) {
+    const clause = m[1];
+    if (clause) {
+      for (const id of clause.matchAll(IDENTIFIER_RE)) {
+        if (id[0]) into.add(id[0]);
+      }
+    }
+  }
+  for (const m of content.matchAll(SATISFIES_AS_RE)) {
     const name = m[1];
     if (name) into.add(name);
   }

package/dist/knowledge-graph.js

@@ -47,7 +47,11 @@ function loadFacts(filePath) {
     const facts = Array.isArray(raw.facts) ? raw.facts.filter(
       (f) => !!f && typeof f === "object" && typeof f.id === "string" && typeof f.subject === "string" && typeof f.relation === "string" && typeof f.object === "string"
     ) : [];
-    const nextId = typeof raw.nextId === "number" && raw.nextId >= 1 ? raw.nextId : facts.length + 1;
+    const maxExistingId = facts.reduce((max, f) => {
+      const n = parseInt(f.id.replace(/^\D+/, ""), 10);
+      return Number.isFinite(n) && n > max ? n : max;
+    }, 0);
+    const nextId = typeof raw.nextId === "number" && raw.nextId >= 1 ? raw.nextId : maxExistingId + 1;
     return { facts, nextId };
   } catch {
     return { facts: [], nextId: 1 };

package/dist/llm-cache.js

@@ -30,7 +30,7 @@ function readConfig(raw) {
 }
 function isDeterministic(request) {
   const t = request["temperature"];
-  return t === void 0 || t === 0;
+  return t === void 0 || t === null || t === 0;
 }
 var fingerprintCache = /* @__PURE__ */ new WeakMap();
 function fingerprintRequest(request) {
@@ -172,7 +172,8 @@ var plugin = {
           state.misses += 1;
           api.metrics.counter("misses");
           const response = await inner(_ctx, request);
-          if (response && typeof response === "object" && response.stopReason === "end_turn") {
+          const sr = response && typeof response === "object" ? response.stopReason : void 0;
+          if (response && typeof response === "object" && (sr === "end_turn" || sr === "stop" || sr === "tool_use")) {
             lruSet(key, response, cfg.maxEntries);
           }
           return response;

package/dist/loop-breaker.js

@@ -112,7 +112,7 @@ function hashString(value) {
 }
 async function gitDiffFingerprint(cwd, targetPath, signal) {
   const pathspec = isAbsolute(targetPath) ? relative(cwd, targetPath) : targetPath;
-  if (!pathspec || pathspec === ".." || pathspec.startsWith("../") || pathspec.startsWith("..\\")) {
+  if (!pathspec || isAbsolute(pathspec) || pathspec === ".." || pathspec.startsWith("../") || pathspec.startsWith("..\\")) {
     return null;
   }
   try {

package/dist/migration-planner.js

@@ -113,7 +113,6 @@ function extractBreakingChanges(sectionText) {
   for (const rawLine of sectionText.split(/\r?\n/)) {
     const line = rawLine.trim();
     if (!line) {
-      inBreakingSection = false;
       continue;
     }
     if (/^#{3,4}\s+(?:BREAKING\s+CHANGES?|Breaking\s+Changes?|Breaking)/i.test(line)) {
@@ -139,7 +138,6 @@ function extractRecommendedSteps(sectionText) {
   for (const rawLine of sectionText.split(/\r?\n/)) {
     const line = rawLine.trim();
     if (!line) {
-      inMigrationSection = false;
       continue;
     }
     if (/^#{3,4}\s+(?:Migration|Upgrade|How to|Steps|Recommended)/i.test(line)) {

package/dist/model-router.js

@@ -39,6 +39,8 @@ function requestCharSize(request) {
       const o = v;
       if (typeof o["text"] === "string") size += o["text"].length;
       if (o["content"] !== void 0) walk(o["content"]);
+      if (o["input"] !== void 0) walk(o["input"]);
+      if (o["arguments"] !== void 0) walk(o["arguments"]);
     }
   };
   walk(request["system"]);

package/dist/notify-hub.js

@@ -56,7 +56,7 @@ var WebhookNotificationChannel = class {
   // -----------------------------------------------------------------------
   async deliver(msg) {
     const deliveredAt = (/* @__PURE__ */ new Date()).toISOString();
-    const inCooldown = this.#resetMs > 0 && Date.now() - this.#openedAt < this.#resetMs;
+    const inCooldown = this.#resetMs === 0 || Date.now() - this.#openedAt < this.#resetMs;
     if (this.#circuit.open && this.#maxFailures > 0 && inCooldown) {
       this.#totalSuppressed += 1;
       return {
@@ -86,6 +86,10 @@ var WebhookNotificationChannel = class {
           body,
           signal: controller.signal
         });
+        if (typeof res.arrayBuffer === "function") {
+          await res.arrayBuffer().catch(() => {
+          });
+        }
         if (!res.ok) throw new Error(`webhook responded ${res.status}`);
       } finally {
         clearTimeout(timer);

package/dist/path-guard.js

@@ -89,6 +89,7 @@ function normalizePath(p) {
   }
   const joined = segments.join("/");
   if (drive) return `${drive}/${joined}`.replace(/\/$/, "");
+  if (slashNormalized.startsWith("//")) return `//${joined}`.replace(/\/$/, "") || "//";
   if (slashNormalized.startsWith("/")) return `/${joined}`.replace(/\/$/, "") || "/";
   return joined;
 }
@@ -1007,7 +1008,7 @@ function destructiveTargetsAtDepth(command, depth) {
     targets.push(...roots.length > 0 ? roots : ["."]);
     f = findDelete.exec(normalizedCommand);
   }
-  const shellWrapper = /\b(?:ba|z|k)?sh\s+-c\s+(['"])(.*?)\1/gi;
+  const shellWrapper = /\b(?:(?:ba|z|k)?sh|pwsh|powershell)\s+(?:-c|-Command)\s+(['"])(.*?)\1/gi;
   let w = shellWrapper.exec(normalizedCommand);
   while (w !== null) {
     if (w[2] && !tokenIsQuoted(w, w[0].split(/\s/)[0] ?? "")) {

package/dist/performance-regression-gate.js

@@ -108,6 +108,8 @@ function pairCrossFile(baseline, current) {
   const byKey = /* @__PURE__ */ new Map();
   for (const bench of baseline) {
     byKey.set(bench.key, bench);
+    const base = stripVariantSuffix(bench.name).base;
+    byKey.set(`${bench.group} > ${base}`, bench);
   }
   const pairs = [];
   for (const bench of current) {

package/dist/plugin-stack-observer.js

@@ -55,6 +55,7 @@ var PLUGIN = {
         if (typeof p.plugin !== "string" || p.plugin.length === 0) return;
         const wraps = Array.isArray(p.wraps) ? p.wraps.filter((w) => typeof w === "string") : [];
         const kind = typeof p.kind === "string" ? p.kind : "unknown";
+        state.wraps = state.wraps.filter((w) => w.plugin !== p.plugin);
         state.wraps.push({
           plugin: p.plugin,
           kind,

package/dist/pr-drafter.js

@@ -278,10 +278,10 @@ var plugin = {
       category: "Workflow",
       mutating: true,
       capabilities: ["fs.write"],
-      async execute(input) {
+      async execute(input = {}) {
         if (!cfg.enabled) return { ok: false, error: "pr-drafter is disabled" };
         const draft = await buildDraft(cfg, api.llm);
-        if (input.preview) {
+        if (input?.preview) {
           return { ok: true, preview: true, title: draft.title, body: draft.body };
         }
         const resolved = resolveProjectPath(cfg.outputPath);

package/dist/process-guard.js

@@ -63,8 +63,7 @@ var plugin = {
       const ti = input.toolInput ?? {};
       const command = typeof ti["command"] === "string" ? ti["command"] : "";
       if (!command) return;
-      const cmdLower = command.toLowerCase();
-      const isKillRelated = cmdLower.includes("kill") || cmdLower.includes("taskkill") || cmdLower.includes("stop-process") || cmdLower.includes("tskill") || cmdLower.includes("pkill") || cmdLower.includes("killall") || cmdLower.includes("wmic");
+      const isKillRelated = /\b(?:kill|taskkill|stop-process|tskill|pkill|killall|wmic)\b/i.test(command);
       if (!isKillRelated) return;
       state.detections += 1;
       state.lastDetection = {

package/dist/prompt-firewall.js

@@ -74,7 +74,7 @@ function growMatch(re, p, text, absStart, deadline) {
     const ext = text.slice(absStart, extEnd);
     re.lastIndex = 0;
     const em = re.exec(ext);
-    if (!em || em.index !== 0 || em[0].length === 0) return null;
+    if (em?.index !== 0 || em[0].length === 0) return null;
     const end = absStart + em[0].length;
     if (end < extEnd || extEnd === text.length) {
       return { start: absStart, end, matched: em[0] };
@@ -84,7 +84,8 @@ function growMatch(re, p, text, absStart, deadline) {
   return null;
 }
 function* execWindowed(p, text, deadline) {
-  const re = new RegExp(p.re.source, p.re.flags);
+  const flags = p.re.flags.includes("g") ? p.re.flags : `${p.re.flags}g`;
+  const re = new RegExp(p.re.source, flags);
   let acceptLo = 0;
   let highWater = 0;
   for (let window = 0; acceptLo < text.length; window++) {

package/dist/refactor-suggester.js

@@ -77,10 +77,21 @@ function detectSmells(filePath, content, rules) {
   const suggestions = [];
   const lines = content.split(/\r?\n/);
   const stripped = content.replace(/\/\/.*$/gm, "").replace(/\/\*[\s\S]*?\*\//g, " ");
+  const CONTROL_KEYWORDS = /* @__PURE__ */ new Set([
+    "if",
+    "for",
+    "while",
+    "switch",
+    "catch",
+    "with",
+    "typeof",
+    "instanceof"
+  ]);
   const functionLikeRe = /(?:export\s+)?(?:async\s+)?(?:function\s+)?([A-Za-z_$][A-Za-z0-9_$]*)\s*\(([^)]*)\)\s*\{/g;
   functionLikeRe.lastIndex = 0;
   for (const match of stripped.matchAll(functionLikeRe)) {
     const name = match[1];
+    if (CONTROL_KEYWORDS.has(name)) continue;
     const paramsRaw = match[2];
     const params = paramsRaw.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
     if (params.length > rules.maxParams) {

package/dist/security-hotspot-scanner.js

@@ -14,7 +14,7 @@ var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "defau
 
 // src/security-hotspot-scanner/index.ts
 import { readdir, readFile, stat } from "node:fs/promises";
-import { isAbsolute, relative, resolve } from "node:path";
+import { extname, isAbsolute, relative, resolve } from "node:path";
 
 // src/runtime/index.ts
 var runtime_exports = {};
@@ -250,10 +250,10 @@ var plugin = {
       if (!cfg.enabled) return;
       if (input.toolResult?.isError) return;
       const inp = input.toolInput ?? {};
-      const sourcePath = inp["path"];
-      if (!sourcePath || typeof sourcePath !== "string") return;
-      if (!(0, runtime_exports.withinProject)(sourcePath)) return;
-      const ext = sourcePath.includes(".") ? sourcePath.slice(sourcePath.lastIndexOf(".")).toLowerCase() : "";
+      const rawPath = inp["path"] ?? inp["filePath"] ?? inp["file_path"];
+      const sourcePath = typeof rawPath === "string" ? rawPath : void 0;
+      if (!sourcePath || !(0, runtime_exports.withinProject)(sourcePath)) return;
+      const ext = extname(sourcePath).toLowerCase();
       if (!scanOnChangeSet.has(ext)) {
         state.skippedCount += 1;
         return;

package/dist/semver-bump.js

@@ -217,6 +217,7 @@ var plugin = {
     state.lastBump = null;
     const tagPrefix = api.config.extensions?.["semver-bump"]?.["tagPrefix"] ?? "v";
     const autoTag = api.config.extensions?.["semver-bump"]?.["autoTag"] ?? true;
+    const tagMessage = api.config.extensions?.["semver-bump"]?.["tagMessage"] ?? "Release {{version}}";
     const VALID_PARTS = ["major", "minor", "patch", "auto"];
     function readDefaultPart(cfg) {
       const raw = cfg.extensions?.["semver-bump"]?.["defaultPart"];
@@ -325,7 +326,8 @@ var plugin = {
       }
       if (autoTag) {
         try {
-          await runGit(["tag", "-a", `${tagPrefix}${newVersion}`, "-m", `Release ${newVersion}`], cwd);
+          const msg = tagMessage.replace("{{version}}", newVersion);
+          await runGit(["tag", "-a", `${tagPrefix}${newVersion}`, "-m", msg], cwd);
         } catch {
         }
       }

package/dist/smart-rename.js

@@ -171,8 +171,8 @@ var plugin = {
   },
   async health() {
     return {
-      ok: state.errorCount === 0,
-      message: state.errorCount ? `smart-rename: ${state.errorCount} error(s)` : `smart-rename: ${state.renameCount} rename(s), ${state.replacementCount} replacement(s)`,
+      ok: true,
+      message: `smart-rename: ${state.renameCount} rename(s), ${state.replacementCount} replacement(s)${state.errorCount ? ` (${state.errorCount} error(s))` : ""}`,
       counters: {
         renames: state.renameCount,
         replacements: state.replacementCount,

package/dist/spec-linker.js

@@ -227,7 +227,7 @@ function isWrappedAsLinkOrCode(line, name) {
   const target = name.toLowerCase();
   if (lower.includes(`[${target}](`)) return true;
   if (lower.includes(`\`${target}\``)) return true;
-  if (lower.includes(`[\``) && lower.includes(`\`](`)) return true;
+  if (new RegExp(`\\[[^\\]]*\`${escapeRegExp(target)}\`[^\\]]*\\]\\(`, "i").test(line)) return true;
   return false;
 }
 function escapeRegExp(s) {

package/dist/template-engine.js

@@ -35,7 +35,7 @@ function templateChars(template) {
 var contributorUnregister = null;
 function expandTemplate(template, variables) {
   let result = template;
-  result = result.replace(/\{\{(\w+)\}\}/g, (match, key) => {
+  result = result.replace(/\{\{([\w.-]+)\}\}/g, (match, key) => {
     const value = variables[key];
     if (value !== void 0) return value;
     return match;
@@ -43,18 +43,18 @@ function expandTemplate(template, variables) {
   return result;
 }
 function expandConditionals(template, variables) {
-  return template.replace(/\{\{#if\s+(\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (_, key, content) => {
+  return template.replace(/\{\{#if\s+([\w.-]+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (_, key, content) => {
     const val = variables[key];
     return val !== void 0 && val !== "" && val !== "false" && val !== "0" ? content : "";
   });
 }
 function expandLoops(template, variables) {
-  return template.replace(/\{\{#each\s+(\w+)\}\}([\s\S]*?)\{\{\/each\}\}/g, (_, key, content) => {
+  return template.replace(/\{\{#each\s+([\w.-]+)\}\}([\s\S]*?)\{\{\/each\}\}/g, (_, key, content) => {
     const val = variables[key];
     if (!val) return "";
     if (typeof val === "string" && val.includes(",")) {
       const items = val.split(",").map((s) => s.trim());
-      return items.map((item) => expandTemplate(content, { ...variables, [key]: item })).join("\n");
+      return items.map((item) => expandTemplate(content, { ...variables, [key]: item, item })).join("\n");
     }
     return expandTemplate(content, variables);
   });

package/dist/test-coverage-gate.js

@@ -14,6 +14,7 @@ var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "defau
 
 // src/test-coverage-gate/index.ts
 import { readFileSync } from "node:fs";
+import { extname } from "node:path";
 
 // src/runtime/index.ts
 var runtime_exports = {};
@@ -137,10 +138,10 @@ var plugin = {
       if (!cfg.enabled) return;
       if (input.toolResult?.isError) return;
       const inp = input.toolInput ?? {};
-      const sourcePath = inp["path"];
-      if (!sourcePath || typeof sourcePath !== "string") return;
-      if (!(0, runtime_exports.withinProject)(sourcePath)) return;
-      const ext = sourcePath.includes(".") ? sourcePath.slice(sourcePath.lastIndexOf(".")).toLowerCase() : "";
+      const rawPath = inp["path"] ?? inp["filePath"] ?? inp["file_path"];
+      const sourcePath = typeof rawPath === "string" ? rawPath : void 0;
+      if (!sourcePath || !(0, runtime_exports.withinProject)(sourcePath)) return;
+      const ext = extname(sourcePath).toLowerCase();
       if (!runOnChangeSet.has(ext)) {
         state.skippedCount += 1;
         return;

package/dist/test-flake-detector.js

@@ -1,8 +1,29 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/test-flake-detector/index.ts
 import { execFile } from "node:child_process";
 import { readFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
+
+// src/runtime/index.ts
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
+
+// src/test-flake-detector/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   invocationCount: 0,
@@ -71,13 +92,6 @@ var ALLOWED_RUNNER_FLAGS = /* @__PURE__ */ new Set([
   "--reporter=verbose",
   "--reporter=default"
 ]);
-function withinProject(p) {
-  if (p.length === 0 || p.length > 4096 || p.startsWith("-")) return false;
-  const root = resolve(process.cwd());
-  const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
-  const rel = relative(root, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
 function isInside(parent, child) {
   if (parent === child) return true;
   const rel = relative(parent, child);
@@ -134,7 +148,7 @@ function resolveTestCommand(baseCommand, testPattern) {
   }
   const args = [resolvedEntry, ...runnerArgs];
   if (testPattern) {
-    if (!withinProject(testPattern)) return null;
+    if (!(0, runtime_exports.withinProject)(testPattern)) return null;
     args.push(testPattern);
   }
   return {

package/dist/test-generator.js

@@ -369,8 +369,8 @@ var plugin = {
   },
   async health() {
     return {
-      ok: state.errorCount === 0,
-      message: state.errorCount ? `test-generator: ${state.errorCount} error(s)` : `test-generator: ${state.generateCount} generation(s), ${state.exportCount} export(s)`,
+      ok: true,
+      message: `test-generator: ${state.generateCount} generation(s), ${state.exportCount} export(s)${state.errorCount ? ` (${state.errorCount} error(s))` : ""}`,
       counters: {
         generated: state.generateCount,
         exports: state.exportCount,

package/dist/todo-listener.js

@@ -47,8 +47,9 @@ function readConfig(raw) {
 function hashTodos(todos) {
   const sorted = todos.map((t) => `${t.id}|${t.status}|${t.content ?? ""}`).sort();
   let h = 2166136261;
-  for (let i = 0; i < sorted.join("\n").length; i++) {
-    h ^= sorted.join("\n").charCodeAt(i);
+  const joined = sorted.join("\n");
+  for (let i = 0; i < joined.length; i++) {
+    h ^= joined.charCodeAt(i);
     h = h * 16777619 >>> 0;
   }
   return h.toString(16);

package/dist/todo-tracker.js

@@ -1,6 +1,7 @@
 // src/todo-tracker/index.ts
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
+import { dirname } from "node:path";
 import { atomicWrite, ensureDir } from "@wrongstack/core/utils";
 import { nowIso } from "@wrongstack/primitives";
 function deriveFilePath(api) {
@@ -32,7 +33,7 @@ async function loadFile(filePath) {
   }
 }
 async function saveFile(filePath, file) {
-  await ensureDir(filePath.replace(/[/\\][^/\\]+$/, ""));
+  await ensureDir(dirname(filePath));
   await atomicWrite(filePath, JSON.stringify(file, null, 2), { mode: 384 });
 }
 var state = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.313.0",
+  "version": "0.316.1",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,10 +303,10 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/plugin-sdk": "0.313.0",
-    "@wrongstack/core": "0.313.0",
-    "@wrongstack/tools": "0.313.0",
-    "@wrongstack/primitives": "0.313.0"
+    "@wrongstack/core": "0.316.1",
+    "@wrongstack/plugin-sdk": "0.316.1",
+    "@wrongstack/tools": "0.316.1",
+    "@wrongstack/primitives": "0.316.1"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",

package/dist/runtime/bounded-map.d.ts

@@ -1,3 +0,0 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { BoundedMap, BoundedSet, type BoundedMapOptions } from '@wrongstack/plugin-sdk/runtime';
-//# sourceMappingURL=bounded-map.d.ts.map

package/dist/runtime/local-bin.d.ts

@@ -1,3 +0,0 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { clearLocalBinCache, findOnPath, resolveExecInvocation, resolveFirstNodeBin, resolveNodeBin, resolveWin32Command, type ExecInvocation, type ResolvedNodeBin, } from '@wrongstack/plugin-sdk/runtime';
-//# sourceMappingURL=local-bin.d.ts.map

package/dist/runtime/safe-json.d.ts

@@ -1,3 +0,0 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { UNSERIALIZABLE, safeJsonStringify } from '@wrongstack/plugin-sdk/runtime';
-//# sourceMappingURL=safe-json.d.ts.map