@wrongstack/plugin-sdk 0.319.0 → 0.320.1

package/dist/runtime.js

@@ -322,7 +322,10 @@ var CREDENTIAL_PATTERNS = [
     type: "anthropic_key",
     regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
   },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
+  {
+    type: "openai_key",
+    regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
+  },
   // GitHub. `ghp_` is only the personal-access-token prefix — the OAuth
   // (`gho_`), user-to-server (`ghu_`), server-to-server (`ghs_`) and
   // refresh (`ghr_`) tokens grant the same or broader access and were
@@ -385,14 +388,29 @@ var CREDENTIAL_PATTERNS = [
   { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
   // SaaS / infrastructure tokens — each grants API access on the user's
   // account, and each was previously invisible to this gate.
-  { type: "sendgrid_key", regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "sendgrid_key",
+    regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   { type: "digitalocean_token", regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g },
-  { type: "doppler_token", regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "shopify_token", regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g },
+  {
+    type: "doppler_token",
+    regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g
+  },
+  {
+    type: "shopify_token",
+    regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g
+  },
   { type: "docker_pat", regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
   { type: "linear_key", regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "atlassian_token", regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g },
-  { type: "square_token", regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "atlassian_token",
+    regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g
+  },
+  {
+    type: "square_token",
+    regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
   {
     type: "azure_storage_key",
     regex: /AccountKey=[A-Za-z0-9+/]{80,}={0,2}/g
@@ -686,7 +704,10 @@ function resolveRunnerCommand(runtime, command, options = {}) {
     return null;
   }
   if (head === runtime.executable) {
-    if (!everyFlagAllowed(runtime.allowedFlags, [second, ...rest].filter((v) => Boolean(v)))) {
+    if (!everyFlagAllowed(
+      runtime.allowedFlags,
+      [second, ...rest].filter((v) => Boolean(v))
+    )) {
       return null;
     }
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugin-sdk",
-  "version": "0.319.0",
+  "version": "0.320.1",
   "description": "Authoring SDK for WrongStack plugins — the plugin contract types, definePlugin, and shared runtime helpers. Third-party plugins should depend on this package only.",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -29,8 +29,8 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/core": "0.319.0",
-    "@wrongstack/tools": "0.319.0"
+    "@wrongstack/core": "0.320.1",
+    "@wrongstack/tools": "0.320.1"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",