@wrongstack/plugins 1.0.4 → 1.0.5

package/dist/accessibility-auditor.js

@@ -68,10 +68,21 @@ var ATTR_TITLE = /\btitle\s*=/i;
 var ATTR_PLACEHOLDER = /\bplaceholder\s*=/i;
 var ATTR_VALUE = /\bvalue\s*=/i;
 var ATTR_ROLE_DECORATIVE = /\brole\s*=\s*["'](?:presentation|none)["']/i;
+var LABEL_SPAN = /<label\b[^>]*>[\s\S]*?<\/label>/gi;
+var FIELDSET_SPAN = /<fieldset\b[^>]*>[\s\S]*?<\/fieldset>/gi;
 var SINGLE_FILE_LABEL_NOTE = "Single-file heuristic: a label declared in a sibling component file is not visible to this scan.";
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+function collectSpans(content, re) {
+  return [...content.matchAll(re)].map((m) => ({
+    start: m.index ?? 0,
+    end: (m.index ?? 0) + m[0].length
+  }));
+}
+function isInsideSpan(spans, offset) {
+  return spans.some((s) => offset > s.start && offset < s.end);
+}
 function hasMeaningfulAlt(tag) {
   const m = ATTR_ALT.exec(tag);
   ATTR_ALT.lastIndex = 0;
@@ -81,7 +92,7 @@ function hasMeaningfulAlt(tag) {
   if (alt.length > 0) return true;
   return ATTR_ROLE_DECORATIVE.test(tag);
 }
-function hasFieldsetLegendLabel(tag, content) {
+function hasFieldsetLegendLabel(tag, content, fieldsetSpans, inputStart) {
   const labelledBy = tag.match(/\baria-labelledby\s*=\s*["']([^"']+)["']/i);
   if (labelledBy?.[1]) {
     for (const id of labelledBy[1].split(/\s+/).filter(Boolean)) {
@@ -92,8 +103,8 @@ function hasFieldsetLegendLabel(tag, content) {
   const typeMatch = tag.match(/\btype\s*=\s*["']?([^"'\s>]*)["']?/i);
   const type = typeMatch ? typeMatch[1].toLowerCase() : "text";
   if (type === "checkbox" || type === "radio") {
-    return /<fieldset\b[\s\S]*?<legend\b[\s\S]*?<\/legend>[\s\S]*?<input\b[\s\S]*?<\/fieldset>/i.test(
-      content
+    return fieldsetSpans.some(
+      (s) => inputStart > s.start && inputStart < s.end && /<legend\b[\s\S]*?<\/legend>/i.test(content.slice(s.start, inputStart))
     );
   }
   return false;
@@ -108,6 +119,12 @@ async function auditFile(filePath, projectRoot) {
   const findings = [];
   const lines = content.split(/\r?\n/);
   const idsByValue = /* @__PURE__ */ new Map();
+  const lineStarts = [0];
+  for (let nl = content.indexOf("\n"); nl !== -1; nl = content.indexOf("\n", nl + 1)) {
+    lineStarts.push(nl + 1);
+  }
+  const labelSpans = collectSpans(content, LABEL_SPAN);
+  const fieldsetSpans = collectSpans(content, FIELDSET_SPAN);
   function add(line, rule, severity, message, note) {
     findings.push({
       file: relative(projectRoot, filePath),
@@ -155,8 +172,9 @@ async function auditFile(filePath, projectRoot) {
         );
         hasLabelFor = labelForRe.test(content);
       }
-      const wrappedInLabel = /<label\b[\s\S]*?<input\b[\s\S]*?<\/label>/i.test(content);
-      const hasLegend = hasFieldsetLegendLabel(tag, content);
+      const inputStart = (lineStarts[i] ?? 0) + (inputMatch.index ?? 0);
+      const wrappedInLabel = isInsideSpan(labelSpans, inputStart);
+      const hasLegend = hasFieldsetLegendLabel(tag, content, fieldsetSpans, inputStart);
       const hasPrimaryLabel = hasAriaLabel || hasTitle || hasLabelFor || wrappedInLabel || hasLegend;
       if (!hasPrimaryLabel && hasDescribedBy) {
         add(

package/dist/context-pins.js

@@ -137,7 +137,7 @@ var plugin = {
         },
         required: ["text"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -175,7 +175,7 @@ var plugin = {
           label: { type: "string", description: "Alternative label to remove." }
         }
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {

package/dist/gitignore-guard.js

@@ -362,7 +362,7 @@ var plugin = {
         },
         required: ["path"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Code Quality",
       mutating: true,
       async execute(input) {

package/dist/index.js

@@ -68,10 +68,21 @@ var ATTR_TITLE = /\btitle\s*=/i;
 var ATTR_PLACEHOLDER = /\bplaceholder\s*=/i;
 var ATTR_VALUE = /\bvalue\s*=/i;
 var ATTR_ROLE_DECORATIVE = /\brole\s*=\s*["'](?:presentation|none)["']/i;
+var LABEL_SPAN = /<label\b[^>]*>[\s\S]*?<\/label>/gi;
+var FIELDSET_SPAN = /<fieldset\b[^>]*>[\s\S]*?<\/fieldset>/gi;
 var SINGLE_FILE_LABEL_NOTE = "Single-file heuristic: a label declared in a sibling component file is not visible to this scan.";
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+function collectSpans(content, re) {
+  return [...content.matchAll(re)].map((m) => ({
+    start: m.index ?? 0,
+    end: (m.index ?? 0) + m[0].length
+  }));
+}
+function isInsideSpan(spans, offset) {
+  return spans.some((s) => offset > s.start && offset < s.end);
+}
 function hasMeaningfulAlt(tag) {
   const m = ATTR_ALT.exec(tag);
   ATTR_ALT.lastIndex = 0;
@@ -81,7 +92,7 @@ function hasMeaningfulAlt(tag) {
   if (alt.length > 0) return true;
   return ATTR_ROLE_DECORATIVE.test(tag);
 }
-function hasFieldsetLegendLabel(tag, content) {
+function hasFieldsetLegendLabel(tag, content, fieldsetSpans, inputStart) {
   const labelledBy = tag.match(/\baria-labelledby\s*=\s*["']([^"']+)["']/i);
   if (labelledBy?.[1]) {
     for (const id of labelledBy[1].split(/\s+/).filter(Boolean)) {
@@ -92,8 +103,8 @@ function hasFieldsetLegendLabel(tag, content) {
   const typeMatch = tag.match(/\btype\s*=\s*["']?([^"'\s>]*)["']?/i);
   const type = typeMatch ? typeMatch[1].toLowerCase() : "text";
   if (type === "checkbox" || type === "radio") {
-    return /<fieldset\b[\s\S]*?<legend\b[\s\S]*?<\/legend>[\s\S]*?<input\b[\s\S]*?<\/fieldset>/i.test(
-      content
+    return fieldsetSpans.some(
+      (s) => inputStart > s.start && inputStart < s.end && /<legend\b[\s\S]*?<\/legend>/i.test(content.slice(s.start, inputStart))
     );
   }
   return false;
@@ -108,6 +119,12 @@ async function auditFile(filePath, projectRoot) {
   const findings = [];
   const lines = content.split(/\r?\n/);
   const idsByValue = /* @__PURE__ */ new Map();
+  const lineStarts = [0];
+  for (let nl = content.indexOf("\n"); nl !== -1; nl = content.indexOf("\n", nl + 1)) {
+    lineStarts.push(nl + 1);
+  }
+  const labelSpans = collectSpans(content, LABEL_SPAN);
+  const fieldsetSpans = collectSpans(content, FIELDSET_SPAN);
   function add(line, rule, severity, message, note) {
     findings.push({
       file: relative(projectRoot, filePath),
@@ -155,8 +172,9 @@ async function auditFile(filePath, projectRoot) {
         );
         hasLabelFor = labelForRe.test(content);
       }
-      const wrappedInLabel = /<label\b[\s\S]*?<input\b[\s\S]*?<\/label>/i.test(content);
-      const hasLegend = hasFieldsetLegendLabel(tag, content);
+      const inputStart = (lineStarts[i] ?? 0) + (inputMatch.index ?? 0);
+      const wrappedInLabel = isInsideSpan(labelSpans, inputStart);
+      const hasLegend = hasFieldsetLegendLabel(tag, content, fieldsetSpans, inputStart);
       const hasPrimaryLabel = hasAriaLabel || hasTitle || hasLabelFor || wrappedInLabel || hasLegend;
       if (!hasPrimaryLabel && hasDescribedBy) {
         add(
@@ -4475,7 +4493,7 @@ var plugin13 = {
         },
         required: ["text"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -4513,7 +4531,7 @@ var plugin13 = {
           label: { type: "string", description: "Alternative label to remove." }
         }
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -9861,7 +9879,7 @@ var plugin27 = {
         },
         required: ["path"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Code Quality",
       mutating: true,
       async execute(input) {
@@ -11049,7 +11067,7 @@ var plugin31 = {
         },
         required: ["subject", "relation", "object"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -11150,7 +11168,7 @@ var plugin31 = {
         },
         required: ["id"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -13626,6 +13644,20 @@ var WebhookNotificationChannel = class {
           method: "POST",
           headers: { "content-type": "application/json", ...this.#headers },
           body,
+          // The private-IP check on this URL runs ONCE, at plugin setup
+          // (`index.ts`), against the host the operator configured. Delivery
+          // resolves again and, with the default `redirect: 'follow'`, would
+          // replay this POST — including `this.#headers`, which is where the
+          // operator's `X-Webhook-Secret` / `X-Api-Key` lives — to wherever a
+          // 307 pointed. A webhook host that is compromised, or simply
+          // hostile, could aim that at loopback or the cloud metadata
+          // endpoint and read the secret out of the request.
+          //
+          // Refusing the redirect outright is what the sibling HTTP hook
+          // executor already does (`core/src/hooks/http-executor.ts:73`). A
+          // webhook endpoint that answers with a redirect is misconfigured;
+          // failing it is correct and is visible through the circuit breaker.
+          redirect: "error",
           signal: controller.signal
         });
         if (typeof res.arrayBuffer === "function") {

package/dist/knowledge-graph.js

@@ -167,7 +167,7 @@ var plugin = {
         },
         required: ["subject", "relation", "object"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {
@@ -268,7 +268,7 @@ var plugin = {
         },
         required: ["id"]
       },
-      permission: "auto",
+      permission: "confirm",
       category: "Memory",
       mutating: true,
       async execute(input) {

package/dist/notify-hub.js

@@ -84,6 +84,20 @@ var WebhookNotificationChannel = class {
           method: "POST",
           headers: { "content-type": "application/json", ...this.#headers },
           body,
+          // The private-IP check on this URL runs ONCE, at plugin setup
+          // (`index.ts`), against the host the operator configured. Delivery
+          // resolves again and, with the default `redirect: 'follow'`, would
+          // replay this POST — including `this.#headers`, which is where the
+          // operator's `X-Webhook-Secret` / `X-Api-Key` lives — to wherever a
+          // 307 pointed. A webhook host that is compromised, or simply
+          // hostile, could aim that at loopback or the cloud metadata
+          // endpoint and read the secret out of the request.
+          //
+          // Refusing the redirect outright is what the sibling HTTP hook
+          // executor already does (`core/src/hooks/http-executor.ts:73`). A
+          // webhook endpoint that answers with a redirect is misconfigured;
+          // failing it is correct and is visible through the circuit breaker.
+          redirect: "error",
           signal: controller.signal
         });
         if (typeof res.arrayBuffer === "function") {

package/dist/plugin-audit-catalog.js

@@ -514,7 +514,13 @@ var HOST_PLUGIN_AUDIT_ENTRIES = [
     summary: "Language Server Protocol tools and slash commands.",
     // Active by default: with `autoStart: 'lazy'` nothing is spawned until a
     // file of a matching language is touched, and auto-discovery only adopts
-    // servers already installed on the machine. Disable with
+    // servers from the user's own environment — never from the opened
+    // repository. That second clause used to read "already installed on the
+    // machine", which was wrong: the resolver preferred
+    // `<repo>/node_modules/.bin` over PATH on an existence check alone, so a
+    // cloned repo could supply the executable and have it spawned unprompted
+    // (WS-SEC-01). Provenance is now decided by where the binary lives; see
+    // `plug-lsp/src/utils/command-resolver.ts`. Disable the plugin with
     // `{ name: 'lsp', enabled: false }` in config.plugins.
     defaultState: "active",
     canDisable: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,10 +303,10 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/core": "1.0.4",
-    "@wrongstack/primitives": "1.0.4",
-    "@wrongstack/plugin-sdk": "1.0.4",
-    "@wrongstack/tools": "1.0.4"
+    "@wrongstack/core": "1.0.5",
+    "@wrongstack/primitives": "1.0.5",
+    "@wrongstack/plugin-sdk": "1.0.5",
+    "@wrongstack/tools": "1.0.5"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",