@wrongstack/plugins 0.316.1 → 0.317.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ECOSTACK TECHNOLOGY OÜ
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/context-pins.js

@@ -160,16 +160,17 @@ var plugin = {
       inputSchema: {
         type: "object",
         properties: {
-          id: { type: "string", description: "Pin id (pin-N) or label to remove." }
-        },
-        required: ["id"]
+          id: { type: "string", description: "Pin id (pin-N) or label to remove." },
+          label: { type: "string", description: "Alternative label to remove." }
+        }
       },
       permission: "auto",
       category: "Memory",
       mutating: true,
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "context-pins is disabled" };
-        const key = String(input.id ?? "").trim();
+        const key = String(input.id ?? input.label ?? "").trim();
+        if (!key) return { ok: false, error: "id or label is required" };
         const before = state.pins.length;
         state.pins = state.pins.filter((p) => p.id !== key && p.label !== key);
         const removed = before - state.pins.length;

package/dist/index.js

@@ -4306,16 +4306,17 @@ var plugin13 = {
       inputSchema: {
         type: "object",
         properties: {
-          id: { type: "string", description: "Pin id (pin-N) or label to remove." }
-        },
-        required: ["id"]
+          id: { type: "string", description: "Pin id (pin-N) or label to remove." },
+          label: { type: "string", description: "Alternative label to remove." }
+        }
       },
       permission: "auto",
       category: "Memory",
       mutating: true,
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "context-pins is disabled" };
-        const key = String(input.id ?? "").trim();
+        const key = String(input.id ?? input.label ?? "").trim();
+        if (!key) return { ok: false, error: "id or label is required" };
         const before = state13.pins.length;
         state13.pins = state13.pins.filter((p) => p.id !== key && p.label !== key);
         const removed = before - state13.pins.length;
@@ -10628,11 +10629,12 @@ var plugin31 = {
           if (input.confidence && f.confidence !== input.confidence) return false;
           return true;
         });
+        const returnedFacts = matches.slice(-limit);
         return {
           ok: true,
           totalFacts: state28.facts.length,
-          returned: Math.min(matches.length, limit),
-          facts: matches.slice(-limit)
+          returned: returnedFacts.length,
+          facts: returnedFacts
         };
       }
     });
@@ -19830,6 +19832,7 @@ import { readdir as readdir5 } from "node:fs/promises";
 import { isAbsolute as isAbsolute22, join as join6, relative as relative22, resolve as resolve24 } from "node:path";
 var API_VERSION34 = "^0.1.10";
 function withinProject22(p) {
+  if (typeof p !== "string" || p.length === 0 || p.length > MAX_PATH_LEN) return false;
   if (p.startsWith("-")) return false;
   const root = process.cwd();
   const resolved = isAbsolute22(p) ? resolve24(p) : resolve24(root, p);
@@ -19932,7 +19935,7 @@ async function findShellFiles(dir, pattern) {
     const full = join6(dir, entry.name);
     if (entry.isDirectory() && entry.name !== "node_modules" && entry.name !== ".git") {
       results.push(...await findShellFiles(full, pattern));
-    } else if (entry.isFile() && (entry.name.endsWith(".sh") || entry.name === "Dockerfile")) {
+    } else if (entry.isFile() && (entry.name.endsWith(".sh") || entry.name.endsWith(".bash") || entry.name.endsWith(".zsh") || entry.name === "Dockerfile" || entry.name === ".bashrc" || entry.name === ".zshrc")) {
       if (!pattern || entry.name.includes(pattern)) {
         results.push(full);
       }

package/dist/knowledge-graph.js

@@ -223,11 +223,12 @@ var plugin = {
           if (input.confidence && f.confidence !== input.confidence) return false;
           return true;
         });
+        const returnedFacts = matches.slice(-limit);
         return {
           ok: true,
           totalFacts: state.facts.length,
-          returned: Math.min(matches.length, limit),
-          facts: matches.slice(-limit)
+          returned: returnedFacts.length,
+          facts: returnedFacts
         };
       }
     });

package/dist/shell-check.js

@@ -4,6 +4,7 @@ import { readdir } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve } from "node:path";
 var API_VERSION = "^0.1.10";
 function withinProject(p) {
+  if (typeof p !== "string" || p.length === 0 || p.length > MAX_PATH_LEN) return false;
   if (p.startsWith("-")) return false;
   const root = process.cwd();
   const resolved = isAbsolute(p) ? resolve(p) : resolve(root, p);
@@ -106,7 +107,7 @@ async function findShellFiles(dir, pattern) {
     const full = join(dir, entry.name);
     if (entry.isDirectory() && entry.name !== "node_modules" && entry.name !== ".git") {
       results.push(...await findShellFiles(full, pattern));
-    } else if (entry.isFile() && (entry.name.endsWith(".sh") || entry.name === "Dockerfile")) {
+    } else if (entry.isFile() && (entry.name.endsWith(".sh") || entry.name.endsWith(".bash") || entry.name.endsWith(".zsh") || entry.name === "Dockerfile" || entry.name === ".bashrc" || entry.name === ".zshrc")) {
       if (!pattern || entry.name.includes(pattern)) {
         results.push(full);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.316.1",
+  "version": "0.317.0",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,10 +303,10 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/core": "0.316.1",
-    "@wrongstack/plugin-sdk": "0.316.1",
-    "@wrongstack/tools": "0.316.1",
-    "@wrongstack/primitives": "0.316.1"
+    "@wrongstack/core": "0.317.0",
+    "@wrongstack/primitives": "0.317.0",
+    "@wrongstack/plugin-sdk": "0.317.0",
+    "@wrongstack/tools": "0.317.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",