@wrongstack/plugins 0.281.0 → 0.281.1

package/dist/git-autocommit.js

@@ -6,13 +6,15 @@ var API_VERSION = "^0.1.10";
 var commitCount = { value: 0 };
 var lastCommit = { hash: null, at: null };
 var llmGenerated = { value: 0 };
-function runGit(args, cwd) {
+var DEFAULT_GIT_TIMEOUT_MS = 3e4;
+var GIT_COMMIT_TIMEOUT_MS = 5 * 6e4;
+function runGit(args, cwd, timeoutMs = DEFAULT_GIT_TIMEOUT_MS) {
   try {
     return execFileSync("git", args, {
       encoding: "utf-8",
       cwd,
       stdio: ["pipe", "pipe", "pipe"],
-      timeout: 3e4,
+      timeout: timeoutMs,
       maxBuffer: 10 * 1024 * 1024,
       windowsHide: true
     }).trim();
@@ -43,7 +45,7 @@ function stageFiles(files, cwd) {
   runGit(["add", ...existing], cwd);
 }
 function commitWithMessage(message, cwd) {
-  return runGit(["commit", "-m", message], cwd);
+  return runGit(["commit", "-m", message], cwd, GIT_COMMIT_TIMEOUT_MS);
 }
 function getWorktrees(cwd) {
   try {

package/dist/index.js

@@ -1,7 +1,7 @@
+import * as path from 'path';
+import { dirname, resolve, isAbsolute, relative, join, basename } from 'path';
 import { execSync, execFileSync, spawn } from 'child_process';
 import { readFileSync, writeFileSync, mkdirSync, existsSync, statSync, watch, readdirSync, mkdtempSync, rmSync } from 'fs';
-import * as path from 'path';
-import { dirname, isAbsolute, join, basename } from 'path';
 import { expectDefined } from '@wrongstack/core';
 import { tmpdir } from 'os';
 import { randomUUID, createHash } from 'crypto';
@@ -10,6 +10,14 @@ import * as fsp from 'fs/promises';
 
 // src/auto-doc/index.ts
 var AUTO_DOC_API_VERSION = "^0.1.10";
+function resolveProjectPath(rawPath, cwd = process.cwd()) {
+  if (typeof rawPath !== "string" || rawPath.length === 0) return null;
+  const root = resolve(cwd);
+  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const rel = relative(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
+  return null;
+}
 var state = {
   invocationCount: 0,
   /** Doc comments whose prose came from the LLM this session. */
@@ -180,14 +188,19 @@ async function runAutoDoc(input, api) {
   const maxLlmEntities = typeof extConfig["maxLlmEntities"] === "number" && extConfig["maxLlmEntities"] >= 0 ? extConfig["maxLlmEntities"] : 25;
   const results = [];
   let llmBudget = maxLlmEntities;
-  for (const file of input.files) {
+  for (const rawFile of input.files) {
+    const safeFile = resolveProjectPath(rawFile);
+    if (!safeFile) {
+      api.log.warn(`auto-doc: skipped file outside project directory: ${rawFile}`);
+      continue;
+    }
     try {
       const { readFileSync: readFileSync7, writeFileSync: writeFileSync6 } = await import('fs');
       let content;
       try {
-        content = readFileSync7(file, "utf-8");
+        content = readFileSync7(safeFile, "utf-8");
       } catch {
-        api.log.warn(`auto-doc: could not read file ${file}`);
+        api.log.warn(`auto-doc: could not read file ${safeFile}`);
         continue;
       }
       const entities = parseSource(content);
@@ -215,14 +228,14 @@ async function runAutoDoc(input, api) {
         }
         if (!doc) doc = generateDocComment(entity, includeTypes);
         modified = injectDocComment(modified, entity, doc);
-        results.push({ file, entity: entity.name, source });
+        results.push({ file: safeFile, entity: entity.name, source });
       }
       if (!input.dry_run && results.length > 0) {
-        writeFileSync6(file, modified, "utf-8");
-        api.log.info(`auto-doc: updated ${file}`);
+        writeFileSync6(safeFile, modified, "utf-8");
+        api.log.info(`auto-doc: updated ${safeFile}`);
       }
     } catch (err) {
-      api.log.error(`auto-doc: error processing ${file}: ${err}`);
+      api.log.error(`auto-doc: error processing ${safeFile}: ${err}`);
     }
   }
   return {
@@ -625,9 +638,21 @@ var plugin3 = {
         default: "block",
         description: '"block" refuses the call; "warn" injects context but lets it through.'
       },
-      blockCommit: { type: "boolean", default: true, description: "Block commits on protected branches." },
-      blockPush: { type: "boolean", default: true, description: "Block pushes from protected branches." },
-      blockMerge: { type: "boolean", default: true, description: "Block merges into protected branches." }
+      blockCommit: {
+        type: "boolean",
+        default: true,
+        description: "Block commits on protected branches."
+      },
+      blockPush: {
+        type: "boolean",
+        default: true,
+        description: "Block pushes from protected branches."
+      },
+      blockMerge: {
+        type: "boolean",
+        default: true,
+        description: "Block merges into protected branches."
+      }
     }
   },
   setup(api) {
@@ -645,6 +670,7 @@ var plugin3 = {
       state3.invocationCount += 1;
       let gitOp = null;
       if (toolName === "git_autocommit") {
+        if (inp["dry_run"] === true) return;
         gitOp = { type: "commit", snippet: "git_autocommit" };
       } else if (toolName === "bash") {
         const command = inp["command"];
@@ -659,6 +685,7 @@ var plugin3 = {
       const when = (/* @__PURE__ */ new Date()).toISOString();
       const opVerb = gitOp.type === "commit" ? "committing to" : gitOp.type === "push" ? "pushing from" : "merging into";
       const hasUncommitted = detectUncommittedChanges(cwd);
+      const retryStep = toolName === "git_autocommit" ? "retry git_autocommit" : `git ${gitOp.type} ...`;
       const suggestionParts = [];
       if (hasUncommitted) {
         suggestionParts.push("git stash");
@@ -667,7 +694,7 @@ var plugin3 = {
       if (hasUncommitted) {
         suggestionParts.push("git stash pop");
       }
-      suggestionParts.push(`git ${gitOp.type} ...`);
+      suggestionParts.push(retryStep);
       const suggestion = suggestionParts.join(" \u2192 ");
       const reason = `branch-guard: refused to ${gitOp.type} on protected branch '${branch}'. You're on a protected branch. Use a feature branch instead.
 ` + (hasUncommitted ? `You have uncommitted changes. Safe workflow:
@@ -769,12 +796,19 @@ var DEFAULTS2 = {
   collectCommits: true,
   maxEntries: 200
 };
+function resolveProjectPath2(rawPath, cwd = process.cwd()) {
+  const root = resolve(cwd);
+  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const rel = relative(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
+  return null;
+}
 function readConfig3(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS2 };
   const r = raw;
   return {
     enabled: r["enabled"] !== false,
-    filePath: typeof r["filePath"] === "string" && r["filePath"].length > 0 ? r["filePath"] : DEFAULTS2.filePath,
+    filePath: typeof r["filePath"] === "string" && r["filePath"].length > 0 ? resolveProjectPath2(r["filePath"]) ?? "" : resolveProjectPath2(DEFAULTS2.filePath) ?? DEFAULTS2.filePath,
     collectCommits: r["collectCommits"] !== false,
     maxEntries: typeof r["maxEntries"] === "number" && r["maxEntries"] >= 10 ? r["maxEntries"] : DEFAULTS2.maxEntries
   };
@@ -1044,6 +1078,9 @@ var plugin4 = {
       mutating: true,
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "changelog-writer is disabled" };
+        if (!cfg.filePath) {
+          return { ok: false, error: "filePath must stay within the current project directory" };
+        }
         if (state4.entries.length === 0) {
           return { ok: false, error: "no pending entries \u2014 add some with changelog_add first" };
         }
@@ -1142,6 +1179,13 @@ function readConfig4(raw) {
     maxFileBytes: typeof r["maxFileBytes"] === "number" && r["maxFileBytes"] >= 1024 ? r["maxFileBytes"] : DEFAULTS3.maxFileBytes
   };
 }
+function resolveProjectPath3(rawPath, cwd = process.cwd()) {
+  const root = resolve(cwd);
+  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const rel = relative(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
+  return null;
+}
 function captureFile(path2, maxBytes) {
   try {
     const st = statSync(path2);
@@ -1208,7 +1252,9 @@ var plugin5 = {
         const ti = input.toolInput ?? {};
         const raw = ti["path"] ?? ti["file_path"] ?? ti["filePath"];
         if (typeof raw !== "string" || raw.length === 0) return;
-        const captured = captureFile(raw, cfg.maxFileBytes);
+        const safePath = resolveProjectPath3(raw);
+        if (!safePath) return;
+        const captured = captureFile(safePath, cfg.maxFileBytes);
         if (captured === "too-large") {
           state5.skippedLarge += 1;
           return;
@@ -1250,9 +1296,15 @@ var plugin5 = {
         const paths = Array.isArray(input.paths) ? input.paths.filter((p) => typeof p === "string" && p.length > 0) : [];
         if (paths.length === 0) return { ok: false, error: "paths must not be empty" };
         const files = [];
+        const rejectedOutsideProject = [];
         let skipped = 0;
         for (const p of paths) {
-          const captured = captureFile(p, cfg.maxFileBytes);
+          const safePath = resolveProjectPath3(p);
+          if (!safePath) {
+            rejectedOutsideProject.push(p);
+            continue;
+          }
+          const captured = captureFile(safePath, cfg.maxFileBytes);
           if (captured === "too-large") {
             skipped += 1;
             state5.skippedLarge += 1;
@@ -1260,6 +1312,13 @@ var plugin5 = {
           }
           files.push(captured);
         }
+        if (rejectedOutsideProject.length > 0) {
+          return {
+            ok: false,
+            error: "paths must stay within the current project directory",
+            rejectedOutsideProject
+          };
+        }
         if (files.length === 0) {
           return { ok: false, error: "all files were skipped (too large)" };
         }
@@ -2087,12 +2146,21 @@ var DEFAULTS6 = {
   maxPins: 20,
   maxPinChars: 500
 };
+function resolveProjectPath4(rawPath, cwd = process.cwd()) {
+  if (typeof rawPath !== "string" || rawPath.length === 0) return "";
+  const root = resolve(cwd);
+  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
+  const rel = relative(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
+  return null;
+}
 function readConfig7(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS6 };
   const r = raw;
+  const rawPath = typeof r["filePath"] === "string" ? r["filePath"] : DEFAULTS6.filePath;
   return {
     enabled: r["enabled"] !== false,
-    filePath: typeof r["filePath"] === "string" ? r["filePath"] : DEFAULTS6.filePath,
+    filePath: rawPath ? resolveProjectPath4(rawPath) ?? "" : "",
     maxPins: typeof r["maxPins"] === "number" && r["maxPins"] >= 1 && r["maxPins"] <= 100 ? r["maxPins"] : DEFAULTS6.maxPins,
     maxPinChars: typeof r["maxPinChars"] === "number" && r["maxPinChars"] >= 20 ? r["maxPinChars"] : DEFAULTS6.maxPinChars
   };
@@ -4157,13 +4225,15 @@ var API_VERSION8 = "^0.1.10";
 var commitCount = { value: 0 };
 var lastCommit = { hash: null, at: null };
 var llmGenerated = { value: 0 };
-function runGit(args, cwd) {
+var DEFAULT_GIT_TIMEOUT_MS = 3e4;
+var GIT_COMMIT_TIMEOUT_MS = 5 * 6e4;
+function runGit(args, cwd, timeoutMs = DEFAULT_GIT_TIMEOUT_MS) {
   try {
     return execFileSync("git", args, {
       encoding: "utf-8",
       cwd,
       stdio: ["pipe", "pipe", "pipe"],
-      timeout: 3e4,
+      timeout: timeoutMs,
       maxBuffer: 10 * 1024 * 1024,
       windowsHide: true
     }).trim();
@@ -4194,7 +4264,7 @@ function stageFiles(files, cwd) {
   runGit(["add", ...existing], cwd);
 }
 function commitWithMessage(message, cwd) {
-  return runGit(["commit", "-m", message], cwd);
+  return runGit(["commit", "-m", message], cwd, GIT_COMMIT_TIMEOUT_MS);
 }
 function getWorktrees(cwd) {
   try {
@@ -4635,7 +4705,7 @@ function readConfig12(raw) {
   };
 }
 function runCommand(command, args, timeoutMs, cwd) {
-  return new Promise((resolve) => {
+  return new Promise((resolve6) => {
     let timedOut = false;
     const stdoutChunks = [];
     const stderrChunks = [];
@@ -4647,17 +4717,17 @@ function runCommand(command, args, timeoutMs, cwd) {
         signal: AbortSignal.timeout(timeoutMs)
       });
     } catch {
-      resolve({ code: 127, stdout: "", stderr: "", timedOut: false });
+      resolve6({ code: 127, stdout: "", stderr: "", timedOut: false });
       return;
     }
     child.stdout?.on("data", (c) => stdoutChunks.push(c));
     child.stderr?.on("data", (c) => stderrChunks.push(c));
     child.on("error", () => {
-      resolve({ code: 127, stdout: "", stderr: "", timedOut: false });
+      resolve6({ code: 127, stdout: "", stderr: "", timedOut: false });
     });
     child.on("close", (code) => {
       if (timedOut) return;
-      resolve({
+      resolve6({
         code,
         stdout: Buffer.concat(stdoutChunks).toString("utf-8"),
         stderr: Buffer.concat(stderrChunks).toString("utf-8"),
@@ -4666,7 +4736,7 @@ function runCommand(command, args, timeoutMs, cwd) {
     });
     child.on("abort", () => {
       timedOut = true;
-      resolve({ code: null, stdout: "", stderr: "", timedOut: true });
+      resolve6({ code: null, stdout: "", stderr: "", timedOut: true });
     });
   });
 }
@@ -6169,6 +6239,31 @@ var DEFAULTS17 = {
   timeoutMs: 5e3,
   maxConsecutiveFailures: 5
 };
+function isPrivateIPv4(hostname) {
+  const parts = hostname.split(".").map((p) => Number(p));
+  if (parts.length !== 4 || parts.some((p) => !Number.isInteger(p) || p < 0 || p > 255)) {
+    return false;
+  }
+  const [a, b] = parts;
+  return a === 0 || a === 10 || a === 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168;
+}
+function isBlockedHostname(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  return h === "localhost" || h.endsWith(".localhost") || h === "::1" || h === "0:0:0:0:0:0:0:1" || h.startsWith("fc") || h.startsWith("fd") || h.startsWith("fe80:") || isPrivateIPv4(h);
+}
+function normalizeWebhookUrl(raw) {
+  if (typeof raw !== "string" || raw.trim().length === 0) return "";
+  try {
+    const url = new URL(raw.trim());
+    if (url.protocol !== "https:" && url.protocol !== "http:") return "";
+    if (url.username || url.password) return "";
+    if (!url.hostname || isBlockedHostname(url.hostname)) return "";
+    url.hash = "";
+    return url.toString();
+  } catch {
+    return "";
+  }
+}
 function readConfig18(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS17, events: [...DEFAULTS17.events] };
   const r = raw;
@@ -6180,7 +6275,7 @@ function readConfig18(raw) {
   }
   return {
     enabled: r["enabled"] !== false,
-    webhookUrl: typeof r["webhookUrl"] === "string" ? r["webhookUrl"] : "",
+    webhookUrl: normalizeWebhookUrl(r["webhookUrl"]),
     events: Array.isArray(r["events"]) ? r["events"].filter((e) => KNOWN_EVENTS.includes(e)) : [...DEFAULTS17.events],
     headers,
     timeoutMs: typeof r["timeoutMs"] === "number" && r["timeoutMs"] >= 500 && r["timeoutMs"] <= 6e4 ? r["timeoutMs"] : DEFAULTS17.timeoutMs,
@@ -7383,6 +7478,14 @@ var plugin26 = {
 };
 var secret_scanner_default = plugin26;
 var API_VERSION11 = "^0.1.10";
+function resolveProjectRoot(rawCwd, root = process.cwd()) {
+  if (typeof rawCwd !== "string" || rawCwd.length === 0) return root;
+  const base = resolve(root);
+  const resolved = isAbsolute(rawCwd) ? resolve(rawCwd) : resolve(base, rawCwd);
+  const rel = relative(base, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
+  return null;
+}
 var state24 = {
   /** Total invocations across all three tools this session. */
   invocationCount: 0,
@@ -7433,7 +7536,11 @@ function collectManifests(root) {
 function parseVersion(v) {
   const m = v.match(/^v?(\d+)\.(\d+)\.(\d+)/);
   if (!m) return [0, 0, 0];
-  return [Number.parseInt(expectDefined(m[1]), 10), Number.parseInt(expectDefined(m[2]), 10), Number.parseInt(expectDefined(m[3]), 10)];
+  return [
+    Number.parseInt(expectDefined(m[1]), 10),
+    Number.parseInt(expectDefined(m[2]), 10),
+    Number.parseInt(expectDefined(m[3]), 10)
+  ];
 }
 function bumpVersion(version, part) {
   let [major, minor, patch] = parseVersion(version);
@@ -7569,6 +7676,11 @@ var plugin27 = {
       defaultPart = readDefaultPart(next);
     });
     async function performBump(part, dryRun, cwd) {
+      const safeCwd = resolveProjectRoot(cwd);
+      if (!safeCwd) {
+        return { ok: false, error: "cwd must stay within the current project directory" };
+      }
+      cwd = safeCwd;
       const pkg = getPackageJson(cwd);
       if (!pkg) {
         return { ok: false, error: "No package.json found" };
@@ -7676,7 +7788,12 @@ var plugin27 = {
         properties: {
           cwd: { type: "string", description: "Working directory (defaults to project root)" },
           dry_run: { type: "boolean", default: false },
-          part: { type: "string", enum: ["major", "minor", "patch", "auto"], default: defaultPart, description: "Version part to bump. Omitted \u2192 the configured default (/settings semver-part, factory default: patch). Use auto to infer from commits." }
+          part: {
+            type: "string",
+            enum: ["major", "minor", "patch", "auto"],
+            default: defaultPart,
+            description: "Version part to bump. Omitted \u2192 the configured default (/settings semver-part, factory default: patch). Use auto to infer from commits."
+          }
         }
       },
       permission: "confirm",
@@ -7740,7 +7857,11 @@ var plugin27 = {
         if (mode !== "patch" && mode !== "minor" && mode !== "major" && mode !== "auto") {
           return { message: `Unknown mode "${mode}". Use status, patch, minor, major or auto.` };
         }
-        const result = await performBump(mode, dry, cwd);
+        const safeCwd = resolveProjectRoot(cwd);
+        if (!safeCwd) {
+          return { message: "cwd must stay within the current project directory" };
+        }
+        const result = await performBump(mode, dry, safeCwd);
         return { message: String(result["message"] ?? result["error"] ?? JSON.stringify(result)) };
       }
     });
@@ -7758,16 +7879,20 @@ var plugin27 = {
       async execute(input) {
         state24.invocationCount += 1;
         state24.perTool["semver_current"] = (state24.perTool["semver_current"] ?? 0) + 1;
-        const cwd = input["cwd"];
-        const pkg = getPackageJson(cwd);
+        const cwdInput = input["cwd"];
+        const safeCwd = resolveProjectRoot(cwdInput);
+        if (!safeCwd) {
+          return { ok: false, error: "cwd must stay within the current project directory" };
+        }
+        const pkg = getPackageJson(safeCwd);
         const currentVersion = pkg?.version ?? "unknown";
         let latestTag = null;
         let commitsSinceTag = 0;
         try {
-          const tagsOutput = runGit2(["describe", "--tags", "--abbrev=0"], cwd);
+          const tagsOutput = runGit2(["describe", "--tags", "--abbrev=0"], safeCwd);
           latestTag = tagsOutput || null;
           if (latestTag) {
-            const countOutput = runGit2(["rev-list", "--count", `${latestTag}..HEAD`], cwd);
+            const countOutput = runGit2(["rev-list", "--count", `${latestTag}..HEAD`], safeCwd);
             commitsSinceTag = Number.parseInt(countOutput, 10) || 0;
           }
         } catch {
@@ -7802,11 +7927,15 @@ var plugin27 = {
         const from = input["from"];
         const to = input["to"] ?? "HEAD";
         const cwd = input["cwd"];
+        const safeCwd = resolveProjectRoot(cwd);
+        if (!safeCwd) {
+          return { ok: false, error: "cwd must stay within the current project directory" };
+        }
         const format = input["format"] ?? "markdown";
         const range = from ? `${from}..${to}` : to;
         let commits;
         try {
-          const output = runGit2(["log", range === to ? "-30" : range, "--format=%H %s"], cwd);
+          const output = runGit2(["log", range === to ? "-30" : range, "--format=%H %s"], safeCwd);
           commits = output.split("\n").filter(Boolean).map((line) => {
             const spaceIdx = line.indexOf(" ");
             const hash = line.slice(0, spaceIdx);
@@ -8530,27 +8659,21 @@ function expandTemplate(template, variables) {
   return result;
 }
 function expandConditionals(template, variables) {
-  return template.replace(
-    /\{\{#if\s+(\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g,
-    (_, key, content) => {
-      const val = variables[key];
-      return val !== void 0 && val !== "" && val !== "false" && val !== "0" ? content : "";
-    }
-  );
+  return template.replace(/\{\{#if\s+(\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (_, key, content) => {
+    const val = variables[key];
+    return val !== void 0 && val !== "" && val !== "false" && val !== "0" ? content : "";
+  });
 }
 function expandLoops(template, variables) {
-  return template.replace(
-    /\{\{#each\s+(\w+)\}\}([\s\S]*?)\{\{\/each\}\}/g,
-    (_, key, content) => {
-      const val = variables[key];
-      if (!val) return "";
-      if (typeof val === "string" && val.includes(",")) {
-        const items = val.split(",").map((s) => s.trim());
-        return items.map((item) => expandTemplate(content, { ...variables, [key]: item })).join("\n");
-      }
-      return expandTemplate(content, variables);
-    }
-  );
+  return template.replace(/\{\{#each\s+(\w+)\}\}([\s\S]*?)\{\{\/each\}\}/g, (_, key, content) => {
+    const val = variables[key];
+    if (!val) return "";
+    if (typeof val === "string" && val.includes(",")) {
+      const items = val.split(",").map((s) => s.trim());
+      return items.map((item) => expandTemplate(content, { ...variables, [key]: item })).join("\n");
+    }
+    return expandTemplate(content, variables);
+  });
 }
 function renderTemplate(template, variables, escapeHtml = true) {
   let result = template;
@@ -8569,6 +8692,12 @@ function renderTemplateRaw(template, variables) {
   result = expandTemplate(result, variables);
   return result;
 }
+function validateRelativeTemplatePath(field, value) {
+  if (isAbsolute(value) || value.split(/[\\/]+/).includes("..")) {
+    return `${field} must be a relative path without ".." components`;
+  }
+  return null;
+}
 var plugin30 = {
   name: "template-engine",
   version: "0.1.0",
@@ -8597,13 +8726,19 @@ var plugin30 = {
       inputSchema: {
         type: "object",
         properties: {
-          template: { type: "string", description: "Template string with {{variable}} placeholders" },
+          template: {
+            type: "string",
+            description: "Template string with {{variable}} placeholders"
+          },
           variables: {
             type: "object",
             description: "Variables to substitute into the template",
             additionalProperties: { type: "string" }
           },
-          output_path: { type: "string", description: "Optional path to write the expanded result" },
+          output_path: {
+            type: "string",
+            description: "Optional path to write the expanded result"
+          },
           raw: { type: "boolean", default: false, description: "Disable HTML auto-escaping" }
         },
         required: ["template", "variables"]
@@ -8629,9 +8764,8 @@ var plugin30 = {
           return { ok: false, error: String(err) };
         }
         if (output_path) {
-          if (isAbsolute(output_path) || output_path.includes("..")) {
-            return { ok: false, error: 'output_path must be a relative path without ".." components' };
-          }
+          const pathError = validateRelativeTemplatePath("output_path", output_path);
+          if (pathError) return { ok: false, error: pathError };
           const { writeFileSync: writeFileSync6 } = await import('fs');
           writeFileSync6(output_path, result, "utf-8");
           return {
@@ -8661,7 +8795,10 @@ var plugin30 = {
             description: "Variables to substitute",
             additionalProperties: { type: "string" }
           },
-          output_path: { type: "string", description: "Optional path to write the rendered result" },
+          output_path: {
+            type: "string",
+            description: "Optional path to write the rendered result"
+          },
           raw: { type: "boolean", default: false }
         },
         required: ["template_path", "variables"]
@@ -8676,6 +8813,8 @@ var plugin30 = {
         if (!template_path || typeof template_path !== "string") {
           return { ok: false, error: "template_path is required and must be a string" };
         }
+        const templatePathError = validateRelativeTemplatePath("template_path", template_path);
+        if (templatePathError) return { ok: false, error: templatePathError };
         if (!variables || typeof variables !== "object") {
           return { ok: false, error: "variables is required and must be an object" };
         }
@@ -8693,9 +8832,8 @@ var plugin30 = {
           return { ok: false, error: `Template rendering failed: ${err}` };
         }
         if (output_path) {
-          if (isAbsolute(output_path) || output_path.includes("..")) {
-            return { ok: false, error: 'output_path must be a relative path without ".." components' };
-          }
+          const pathError = validateRelativeTemplatePath("output_path", output_path);
+          if (pathError) return { ok: false, error: pathError };
           const { writeFileSync: writeFileSync6 } = await import('fs');
           writeFileSync6(output_path, result, "utf-8");
           return {
@@ -8720,8 +8858,14 @@ var plugin30 = {
         type: "object",
         properties: {
           name: { type: "string", description: "Unique name for this template" },
-          content: { type: "string", description: "Template content with {{variable}} placeholders" },
-          description: { type: "string", description: "Optional description of what this template is for" }
+          content: {
+            type: "string",
+            description: "Template content with {{variable}} placeholders"
+          },
+          description: {
+            type: "string",
+            description: "Optional description of what this template is for"
+          }
         },
         required: ["name", "content"]
       },
@@ -10123,7 +10267,7 @@ function estimateRequestTokens(request, charsPerToken) {
   walk(request["messages"]);
   return Math.ceil(chars / charsPerToken);
 }
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var sleep = (ms) => new Promise((resolve6) => setTimeout(resolve6, ms));
 var plugin35 = {
   name: "token-throttle",
   version: "0.1.0",
@@ -10380,9 +10524,26 @@ function isWrappedAsLinkOrCode(line, name) {
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+function mapMarkdownFences(lines) {
+  const fenced = new Array(lines.length).fill(false);
+  let inFence = false;
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (/^\s*```/.test(line)) {
+      fenced[i] = true;
+      inFence = !inFence;
+      continue;
+    }
+    fenced[i] = inFence;
+  }
+  return fenced;
+}
 function findUnlinkedReferences(lines, names) {
   const found = /* @__PURE__ */ new Map();
-  for (const line of lines) {
+  const fencedLines = mapMarkdownFences(lines);
+  for (let i = 0; i < lines.length; i++) {
+    if (fencedLines[i]) continue;
+    const line = lines[i];
     if (line.length === 0) continue;
     for (const name of names) {
       const re = new RegExp(`(^|[^\\w-])${escapeRegExp(name)}(?![\\w-])`, "i");
@@ -10395,8 +10556,10 @@ function findUnlinkedReferences(lines, names) {
 }
 function wrapUnlinkedReferences(content) {
   const lines = content.split("\n");
+  const fencedLines = mapMarkdownFences(lines);
   let changed = false;
   for (let i = 0; i < lines.length; i++) {
+    if (fencedLines[i]) continue;
     const line = lines[i];
     if (line.length === 0) continue;
     const newLine = wrapLineReferences(line);
@@ -10512,7 +10675,9 @@ var plugin36 = {
       state32.unlinkedCount += 1;
       const limited = unlinked.slice(0, cfg.maxReferences);
       const overflow = unlinked.length - limited.length;
-      const lines = limited.map((name) => `- \`${name}\` \u2192 \`[${name}](${PLUGIN_CATALOG.get(name) ?? `./src/${name}`})\``).join("\n");
+      const lines = limited.map(
+        (name) => `- \`${name}\` \u2192 \`[${name}](${PLUGIN_CATALOG.get(name) ?? `./src/${name}`})\``
+      ).join("\n");
       const overflowNote = overflow > 0 ? `
 - \u2026and ${overflow} more` : "";
       return {