@wrongstack/plugin-sdk 0.318.0 → 0.319.1

package/dist/runtime.js

@@ -2,6 +2,7 @@
 import { execFile } from "node:child_process";
 import { existsSync, readdirSync, statSync } from "node:fs";
 import { basename, extname as extname2, isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
+import { buildChildEnv } from "@wrongstack/core/utils";
 
 // src/runtime/llm.ts
 function stripOuterMarkdownFence(text) {
@@ -321,7 +322,10 @@ var CREDENTIAL_PATTERNS = [
     type: "anthropic_key",
     regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
   },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
+  {
+    type: "openai_key",
+    regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
+  },
   // GitHub. `ghp_` is only the personal-access-token prefix — the OAuth
   // (`gho_`), user-to-server (`ghu_`), server-to-server (`ghs_`) and
   // refresh (`ghr_`) tokens grant the same or broader access and were
@@ -384,14 +388,29 @@ var CREDENTIAL_PATTERNS = [
   { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
   // SaaS / infrastructure tokens — each grants API access on the user's
   // account, and each was previously invisible to this gate.
-  { type: "sendgrid_key", regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "sendgrid_key",
+    regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   { type: "digitalocean_token", regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g },
-  { type: "doppler_token", regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "shopify_token", regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g },
+  {
+    type: "doppler_token",
+    regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+  },
+  {
+    type: "shopify_token",
+    regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g
+  },
   { type: "docker_pat", regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
   { type: "linear_key", regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "atlassian_token", regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g },
-  { type: "square_token", regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "atlassian_token",
+    regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g
+  },
+  {
+    type: "square_token",
+    regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   {
     type: "azure_storage_key",
     regex: /AccountKey=[A-Za-z0-9+/]{80,}={0,2}/g
@@ -685,7 +704,10 @@ function resolveRunnerCommand(runtime, command, options = {}) {
     return null;
   }
   if (head === runtime.executable) {
-    if (!everyFlagAllowed(runtime.allowedFlags, [second, ...rest].filter((v) => Boolean(v)))) {
+    if (!everyFlagAllowed(
+      runtime.allowedFlags,
+      [second, ...rest].filter((v) => Boolean(v))
+    )) {
       return null;
     }
     return {
@@ -769,6 +791,12 @@ function runRunnerCommand(argv, options) {
       invocation.args,
       {
         cwd: trimmedCwd,
+        // H-8 (security report VF-09): plugin subprocesses inherit the FULL
+        // environment by default — every provider API key and the vault
+        // passphrase were visible to any plugin exec(). Route through the
+        // shared allowlist + secret-strip child env (operators can widen it
+        // deliberately via WRONGSTACK_CHILD_ENV_PASSTHROUGH).
+        env: buildChildEnv(),
         timeout: options.timeoutMs,
         signal: options.signal,
         maxBuffer: MAX_BUFFER_BYTES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugin-sdk",
-  "version": "0.318.0",
+  "version": "0.319.1",
   "description": "Authoring SDK for WrongStack plugins — the plugin contract types, definePlugin, and shared runtime helpers. Third-party plugins should depend on this package only.",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -29,8 +29,8 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/core": "0.318.0",
-    "@wrongstack/tools": "0.318.0"
+    "@wrongstack/core": "0.319.1",
+    "@wrongstack/tools": "0.319.1"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",