@wrongstack/plugins 1.0.14 → 1.0.15

package/dist/accessibility-auditor.js

@@ -33,7 +33,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   includeExtensions: [".tsx", ".jsx", ".html", ".vue"],
   maxFindings: 50,
   severity: "warn",

package/dist/auto-doc.js

@@ -339,6 +339,10 @@ var plugin = {
       },
       permission: "auto",
       mutating: true,
+      // It rewrites project source files, so it declares the same capability
+      // as the built-in writers: the agent-state write gate and capability
+      // allowlists key on `fs.write`, not on `mutating`.
+      capabilities: ["fs.write"],
       category: "Project",
       async execute(input) {
         const inp = input;

package/dist/auto-i18n-extractor.js

@@ -33,7 +33,7 @@ var state = {
   lastResult: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   fileExtensions: [".tsx", ".jsx", ".vue"],
   minLength: 2,
   maxContextStrings: 10,

package/dist/code-metrics.js

@@ -32,7 +32,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   maxFiles: 50
 };

package/dist/cron.js

@@ -2,6 +2,7 @@
 import { ToolValidationError } from "@wrongstack/core/types";
 var COORDINATION_CRON_CAPABILITY = "coordination.cron";
 var API_VERSION = "^0.1.10";
+var MAX_TIMER_DELAY_MS = 2147483647;
 var state = {
   jobs: /* @__PURE__ */ new Map(),
   timers: /* @__PURE__ */ new Map(),
@@ -147,7 +148,9 @@ var plugin = {
           name: { type: "string", description: "Unique name for this cron job" },
           intervalMs: {
             type: "number",
-            description: "Interval between runs in milliseconds (minimum 1000)"
+            minimum: 1e3,
+            maximum: MAX_TIMER_DELAY_MS,
+            description: `Interval between runs in milliseconds (1000 to ${MAX_TIMER_DELAY_MS})`
           },
           action: {
             type: "string",
@@ -179,6 +182,12 @@ var plugin = {
             field: "intervalMs"
           });
         }
+        if (intervalMs > MAX_TIMER_DELAY_MS) {
+          throw new ToolValidationError({
+            message: `intervalMs must be <= ${MAX_TIMER_DELAY_MS} (about 24.8 days)`,
+            field: "intervalMs"
+          });
+        }
         if (typeof action !== "string" || action.trim() === "") {
           throw new ToolValidationError({
             message: "action is required and must be a non-empty string",

package/dist/dead-code-detector.js

@@ -34,7 +34,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   defaultDepth: 3,
   maxDepth: 10,
@@ -190,7 +190,7 @@ var plugin = {
     properties: {
       enabled: {
         type: "boolean",
-        default: false,
+        default: true,
         description: "Master switch."
       },
       extensions: {

package/dist/duplicate-code-detector.js

@@ -53,7 +53,7 @@ var hookIndexBudgets = {
   maxFileBytes: 2 * 1024 * 1024
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   minLines: 8,
   threshold: 0.8,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
@@ -269,7 +269,7 @@ var plugin = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       minLines: {
         type: "number",
         minimum: 2,

package/dist/feature-flag-tracker.js

@@ -39,7 +39,7 @@ var DEFAULT_PATTERNS = [
   String.raw`flags(?:\.|\?\.)([A-Za-z_$][A-Za-z0-9_$]*)`
 ];
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   patterns: [],
   maxFindings: 50

package/dist/git-autocommit.js

@@ -452,8 +452,9 @@ var plugin = {
             try {
               commitScope = await stageFiles(files);
             } catch (err) {
+              const detail = err instanceof Error ? err.message : String(err);
               throw new Error(
-                `Failed to stage files: ${err instanceof Error ? err.message : String(err)}`,
+                detail.startsWith("Failed to stage files") ? detail : `Failed to stage files: ${detail}`,
                 { cause: err }
               );
             }

package/dist/index.js

@@ -33,7 +33,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   includeExtensions: [".tsx", ".jsx", ".html", ".vue"],
   maxFindings: 50,
   severity: "warn",
@@ -1522,6 +1522,10 @@ var plugin4 = {
       },
       permission: "auto",
       mutating: true,
+      // It rewrites project source files, so it declares the same capability
+      // as the built-in writers: the agent-state write gate and capability
+      // allowlists key on `fs.write`, not on `mutating`.
+      capabilities: ["fs.write"],
       category: "Project",
       async execute(input) {
         const inp = input;
@@ -1773,7 +1777,7 @@ var state6 = {
   lastResult: null
 };
 var DEFAULTS5 = {
-  enabled: false,
+  enabled: true,
   fileExtensions: [".tsx", ".jsx", ".vue"],
   minLength: 2,
   maxContextStrings: 10,
@@ -3317,7 +3321,7 @@ var state10 = {
   hookUnregister: null
 };
 var DEFAULTS9 = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   maxFiles: 50
 };
@@ -5088,6 +5092,7 @@ var cost_tracker_default = plugin14;
 import { ToolValidationError as ToolValidationError8 } from "@wrongstack/core/types";
 var COORDINATION_CRON_CAPABILITY = "coordination.cron";
 var API_VERSION9 = "^0.1.10";
+var MAX_TIMER_DELAY_MS = 2147483647;
 var state14 = {
   jobs: /* @__PURE__ */ new Map(),
   timers: /* @__PURE__ */ new Map(),
@@ -5233,7 +5238,9 @@ var plugin15 = {
           name: { type: "string", description: "Unique name for this cron job" },
           intervalMs: {
             type: "number",
-            description: "Interval between runs in milliseconds (minimum 1000)"
+            minimum: 1e3,
+            maximum: MAX_TIMER_DELAY_MS,
+            description: `Interval between runs in milliseconds (1000 to ${MAX_TIMER_DELAY_MS})`
           },
           action: {
             type: "string",
@@ -5265,6 +5272,12 @@ var plugin15 = {
             field: "intervalMs"
           });
         }
+        if (intervalMs > MAX_TIMER_DELAY_MS) {
+          throw new ToolValidationError8({
+            message: `intervalMs must be <= ${MAX_TIMER_DELAY_MS} (about 24.8 days)`,
+            field: "intervalMs"
+          });
+        }
         if (typeof action !== "string" || action.trim() === "") {
           throw new ToolValidationError8({
             message: "action is required and must be a non-empty string",
@@ -5390,7 +5403,7 @@ var state15 = {
   hookUnregister: null
 };
 var DEFAULTS13 = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   defaultDepth: 3,
   maxDepth: 10,
@@ -5546,7 +5559,7 @@ var plugin16 = {
     properties: {
       enabled: {
         type: "boolean",
-        default: false,
+        default: true,
         description: "Master switch."
       },
       extensions: {
@@ -7103,7 +7116,7 @@ var hookIndexBudgets = {
   maxFileBytes: 2 * 1024 * 1024
 };
 var DEFAULTS18 = {
-  enabled: false,
+  enabled: true,
   minLines: 8,
   threshold: 0.8,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
@@ -7319,7 +7332,7 @@ var plugin21 = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       minLines: {
         type: "number",
         minimum: 2,
@@ -7915,7 +7928,7 @@ var DEFAULT_PATTERNS2 = [
   String.raw`flags(?:\.|\?\.)([A-Za-z_$][A-Za-z0-9_$]*)`
 ];
 var DEFAULTS20 = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   patterns: [],
   maxFindings: 50
@@ -9430,8 +9443,9 @@ var plugin26 = {
             try {
               commitScope = await stageFiles(files);
             } catch (err) {
+              const detail = err instanceof Error ? err.message : String(err);
               throw new Error(
-                `Failed to stage files: ${err instanceof Error ? err.message : String(err)}`,
+                detail.startsWith("Failed to stage files") ? detail : `Failed to stage files: ${detail}`,
                 { cause: err }
               );
             }
@@ -10747,7 +10761,7 @@ var state27 = {
   hookUnregister: null
 };
 var DEFAULTS25 = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx"],
   maxFindings: 50,
   maxFiles: 2e3
@@ -13892,7 +13906,8 @@ var state35 = {
   lastDelivery: null,
   stopHookUnregister: null,
   eventUnsubscribers: [],
-  circuitWarned: false
+  circuitWarned: false,
+  disabledReason: null
 };
 var KNOWN_EVENTS = ["session.stop", "tool.error", "budget.threshold"];
 var DEFAULTS33 = {
@@ -14075,13 +14090,21 @@ var plugin38 = {
       }
     }
     state35.eventUnsubscribers = [];
-    const cfg = readConfig33(api.config.extensions?.["notify-hub"]);
+    state35.disabledReason = null;
+    const rawCfg = api.config.extensions?.["notify-hub"];
+    const cfg = readConfig33(rawCfg);
     let active = cfg.enabled && cfg.webhookUrl.length > 0;
+    const rawUrl = rawCfg?.["webhookUrl"] ?? rawCfg?.["webhook_url"] ?? rawCfg?.["url"];
+    if (cfg.enabled && typeof rawUrl === "string" && rawUrl.trim() && !cfg.webhookUrl) {
+      state35.disabledReason = "webhookUrl was refused: it must be an http(s) URL without credentials that does not target localhost or a private address";
+      api.log.warn(`notify-hub: ${state35.disabledReason}`);
+    }
     if (active) {
       try {
         const url = new URL(cfg.webhookUrl);
         const hostnameBlocked = await hasPrivateResolvedIP(url.hostname);
         if (hostnameBlocked) {
+          state35.disabledReason = `webhookUrl was refused: ${url.hostname} resolves to a private/local IP`;
           api.log.warn(
             `notify-hub: webhook URL resolves to a private/local IP (${url.hostname}) \u2014 disabling plugin`
           );
@@ -14154,7 +14177,7 @@ var plugin38 = {
         const ch = state35.channel;
         if (!ch) {
           throw new Error(
-            'no webhookUrl configured \u2014 set config.extensions["notify-hub"].webhookUrl to enable deliveries'
+            state35.disabledReason ?? 'no webhookUrl configured \u2014 set config.extensions["notify-hub"].webhookUrl to enable deliveries'
           );
         }
         const inp = input ?? {};
@@ -17414,7 +17437,7 @@ var state41 = {
   lastHookWarning: new runtime_exports.BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS2 })
 };
 var DEFAULTS38 = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   maxSuggestions: 5,
   rules: { longFunctionLines: 50, maxParams: 5, maxNesting: 3 }
@@ -17605,7 +17628,7 @@ var plugin44 = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       extensions: {
         type: "array",
         items: { type: "string" },
@@ -19020,7 +19043,7 @@ var state44 = {
   hookUnregister: null
 };
 var DEFAULTS42 = {
-  enabled: false,
+  enabled: true,
   severity: "warn",
   maxFindings: 10,
   scanOnChange: [
@@ -19211,7 +19234,7 @@ var plugin48 = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       severity: {
         type: "string",
         enum: ["warn", "block"],

package/dist/interface-contract-guard.js

@@ -33,7 +33,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx"],
   maxFindings: 50,
   maxFiles: 2e3

package/dist/notify-hub.js

@@ -170,7 +170,8 @@ var state = {
   lastDelivery: null,
   stopHookUnregister: null,
   eventUnsubscribers: [],
-  circuitWarned: false
+  circuitWarned: false,
+  disabledReason: null
 };
 var KNOWN_EVENTS = ["session.stop", "tool.error", "budget.threshold"];
 var DEFAULTS = {
@@ -353,13 +354,21 @@ var plugin = {
       }
     }
     state.eventUnsubscribers = [];
-    const cfg = readConfig(api.config.extensions?.["notify-hub"]);
+    state.disabledReason = null;
+    const rawCfg = api.config.extensions?.["notify-hub"];
+    const cfg = readConfig(rawCfg);
     let active = cfg.enabled && cfg.webhookUrl.length > 0;
+    const rawUrl = rawCfg?.["webhookUrl"] ?? rawCfg?.["webhook_url"] ?? rawCfg?.["url"];
+    if (cfg.enabled && typeof rawUrl === "string" && rawUrl.trim() && !cfg.webhookUrl) {
+      state.disabledReason = "webhookUrl was refused: it must be an http(s) URL without credentials that does not target localhost or a private address";
+      api.log.warn(`notify-hub: ${state.disabledReason}`);
+    }
     if (active) {
       try {
         const url = new URL(cfg.webhookUrl);
         const hostnameBlocked = await hasPrivateResolvedIP(url.hostname);
         if (hostnameBlocked) {
+          state.disabledReason = `webhookUrl was refused: ${url.hostname} resolves to a private/local IP`;
           api.log.warn(
             `notify-hub: webhook URL resolves to a private/local IP (${url.hostname}) \u2014 disabling plugin`
           );
@@ -432,7 +441,7 @@ var plugin = {
         const ch = state.channel;
         if (!ch) {
           throw new Error(
-            'no webhookUrl configured \u2014 set config.extensions["notify-hub"].webhookUrl to enable deliveries'
+            state.disabledReason ?? 'no webhookUrl configured \u2014 set config.extensions["notify-hub"].webhookUrl to enable deliveries'
           );
         }
         const inp = input ?? {};

package/dist/refactor-suggester.js

@@ -35,7 +35,7 @@ var state = {
   lastHookWarning: new runtime_exports.BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS })
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   extensions: [".ts", ".tsx", ".js", ".jsx"],
   maxSuggestions: 5,
   rules: { longFunctionLines: 50, maxParams: 5, maxNesting: 3 }
@@ -226,7 +226,7 @@ var plugin = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       extensions: {
         type: "array",
         items: { type: "string" },

package/dist/security-hotspot-scanner.js

@@ -36,7 +36,7 @@ var state = {
   hookUnregister: null
 };
 var DEFAULTS = {
-  enabled: false,
+  enabled: true,
   severity: "warn",
   maxFindings: 10,
   scanOnChange: [
@@ -227,7 +227,7 @@ var plugin = {
   configSchema: {
     type: "object",
     properties: {
-      enabled: { type: "boolean", default: false, description: "Master switch." },
+      enabled: { type: "boolean", default: true, description: "Master switch." },
       severity: {
         type: "string",
         enum: ["warn", "block"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,10 +303,10 @@
     "vitest": "^5.0.0"
   },
   "dependencies": {
-    "@wrongstack/core": "1.0.14",
-    "@wrongstack/plugin-sdk": "1.0.14",
-    "@wrongstack/primitives": "1.0.14",
-    "@wrongstack/tools": "1.0.14"
+    "@wrongstack/core": "1.0.15",
+    "@wrongstack/plugin-sdk": "1.0.15",
+    "@wrongstack/primitives": "1.0.15",
+    "@wrongstack/tools": "1.0.15"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",