@wrongstack/plugins 0.287.0 → 0.289.0

package/dist/interface-contract-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interface-contract-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AA+KD,QAAA,MAAM,MAAM,EAAE,MAuMb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interface-contract-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAqID,QAAA,MAAM,MAAM,EAAE,MAuMb,CAAC;eAEa,MAAM"}

package/dist/interface-contract-guard.js

@@ -1,9 +1,10 @@
 // src/interface-contract-guard/index.ts
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { extname, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+import { readFileSync } from "node:fs";
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
 
 // src/runtime/index.ts
-import { basename, isAbsolute, relative, resolve } from "node:path";
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
   return arg.length > 0 && arg.startsWith("-");
@@ -18,6 +19,47 @@ function withinProjectPath(projectRoot, candidate) {
 function withinProject(p) {
   return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
 }
+var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
+function collectSourceFiles(root, opts) {
+  const files = [];
+  if (!existsSync(root)) return files;
+  const s = statSync(root);
+  if (s.isFile()) {
+    if (matchesExtension(root, opts.extensions)) files.push(root);
+    return files;
+  }
+  if (!s.isDirectory()) return files;
+  const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
+  function walk(dir, depth) {
+    if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
+    let entries;
+    try {
+      entries = readdirSync(dir);
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (exclude.includes(entry)) continue;
+      const full = resolve(dir, entry);
+      let st;
+      try {
+        st = statSync(full);
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) {
+        walk(full, depth + 1);
+      } else if (st.isFile() && matchesExtension(full, opts.extensions)) {
+        files.push(full);
+      }
+    }
+  }
+  walk(root, 0);
+  return files;
+}
+function matchesExtension(p, exts) {
+  return exts.includes(extname(p).toLowerCase());
+}
 
 // src/interface-contract-guard/index.ts
 var API_VERSION = "^0.1.10";
@@ -46,44 +88,6 @@ function readConfig(raw) {
 function normalizeExtensions(exts) {
   return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
 }
-function matchesExtension(p, exts) {
-  return exts.includes(extname(p).toLowerCase());
-}
-function collectSourceFiles(root, exts) {
-  const files = [];
-  if (!existsSync(root)) return files;
-  const s = statSync(root);
-  if (s.isFile()) {
-    if (matchesExtension(root, exts)) files.push(root);
-    return files;
-  }
-  if (!s.isDirectory()) return files;
-  function walk(dir) {
-    let entries;
-    try {
-      entries = readdirSync(dir);
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (entry === "node_modules" || entry === "dist" || entry === ".git" || entry === "coverage") continue;
-      const full = resolve2(dir, entry);
-      let st;
-      try {
-        st = statSync(full);
-      } catch {
-        continue;
-      }
-      if (st.isDirectory()) {
-        walk(full);
-      } else if (st.isFile() && matchesExtension(full, exts)) {
-        files.push(full);
-      }
-    }
-  }
-  walk(root);
-  return files;
-}
 function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
@@ -110,7 +114,7 @@ function scanPath(rawPath, cfg) {
   const root = process.cwd();
   const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
-  const files = collectSourceFiles(resolved, exts);
+  const files = collectSourceFiles(resolved, { extensions: exts });
   const contents = [];
   for (const p of files) {
     try {

package/dist/lint-gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lint-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA6R/C,QAAA,MAAM,MAAM,EAAE,MA8Vb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lint-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwU/C,QAAA,MAAM,MAAM,EAAE,MAwWb,CAAC;eAEa,MAAM"}

package/dist/lint-gate.js

@@ -1,8 +1,10 @@
 // src/lint-gate/index.ts
 import { execFile } from "node:child_process";
+import { readFileSync } from "node:fs";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { createRequire } from "node:module";
 import { tmpdir } from "node:os";
-import { join } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 var API_VERSION = "^0.1.10";
 var state = {
   /** Total PreToolUse invocations. */
@@ -36,55 +38,74 @@ function readConfig(raw) {
     fixRules: Array.isArray(r["fixRules"]) ? r["fixRules"].filter((x) => typeof x === "string") : []
   };
 }
-function executable(command) {
-  return process.platform === "win32" && command === "npx" ? "npx.cmd" : command;
+var LINTER_PACKAGES = {
+  biome: "@biomejs/biome",
+  eslint: "eslint"
+};
+function isInside(parent, candidate) {
+  const rel = relative(parent, candidate);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
+}
+function resolveLocalLinter(name, cwd) {
+  try {
+    const packageName = LINTER_PACKAGES[name];
+    const requireFromProject = createRequire(resolve(cwd, "package.json"));
+    const packagePath = requireFromProject.resolve(`${packageName}/package.json`);
+    const packageJson = JSON.parse(readFileSync(packagePath, "utf-8"));
+    const relativeBin = typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin?.[name] ?? Object.values(packageJson.bin ?? {})[0];
+    if (!relativeBin || isAbsolute(relativeBin)) return null;
+    const packageDir = dirname(packagePath);
+    const entry = resolve(packageDir, relativeBin);
+    if (!isInside(packageDir, entry)) return null;
+    return {
+      cmd: process.execPath,
+      args: name === "biome" ? [entry, "check", "--reporter=json"] : [entry, "--format=json"],
+      name
+    };
+  } catch {
+    return null;
+  }
 }
-function runCommand(command, args, timeoutMs, signal) {
-  return new Promise((resolve) => {
+function runCommand(command, args, timeoutMs, cwd, signal) {
+  return new Promise((resolveResult) => {
     try {
       execFile(
-        executable(command),
+        command,
         args,
         {
           encoding: "utf-8",
           timeout: timeoutMs,
-          cwd: process.cwd(),
+          cwd,
           windowsHide: true,
+          shell: false,
           maxBuffer: 2 * 1024 * 1024,
           ...signal ? { signal } : {}
         },
-        (error, stdout) => resolve({ stdout, error })
+        (error, stdout) => resolveResult({ stdout, error })
       );
     } catch (err) {
-      resolve({ stdout: "", error: err instanceof Error ? err : new Error(String(err)) });
+      resolveResult({ stdout: "", error: err instanceof Error ? err : new Error(String(err)) });
     }
   });
 }
-async function detectLinter(requested) {
-  const tryBiome = requested === "biome" || requested === "auto";
-  const tryEslint = requested === "eslint" || requested === "auto";
-  if (tryBiome) {
-    const probe = await runCommand("npx", ["biome", "--version"], 5e3);
-    if (!probe.error) {
-      return { cmd: "npx", args: ["biome", "check", "--reporter=json"], name: "biome" };
-    }
-  }
-  if (tryEslint) {
-    const probe = await runCommand("npx", ["eslint", "--version"], 5e3);
-    if (!probe.error) {
-      return { cmd: "npx", args: ["eslint", "--format=json"], name: "eslint" };
-    }
+async function detectLinter(requested, cwd) {
+  const candidates = requested === "auto" ? ["biome", "eslint"] : [requested];
+  for (const name of candidates) {
+    const linter = resolveLocalLinter(name, cwd);
+    if (!linter) continue;
+    const probe = await runCommand(linter.cmd, [linter.args[0], "--version"], 5e3, cwd);
+    if (!probe.error) return linter;
   }
   return null;
 }
-async function lintContent(content, filePath, linter, timeoutMs, signal) {
+async function lintContent(content, filePath, linter, timeoutMs, cwd, signal) {
   const ext = filePath.includes(".") ? filePath.slice(filePath.lastIndexOf(".")) : ".ts";
   const tmpDir = await mkdtemp(join(tmpdir(), "lint-gate-"));
   const tmpFile = join(tmpDir, `input${ext}`);
   try {
     await writeFile(tmpFile, content, "utf-8");
     const fullArgs = [...linter.args, tmpFile];
-    const result = await runCommand(linter.cmd, fullArgs, timeoutMs, signal);
+    const result = await runCommand(linter.cmd, fullArgs, timeoutMs, cwd, signal);
     if (signal.aborted) throw signal.reason;
     if (result.error && !result.stdout) return null;
     return parseLinterOutput(result.stdout, linter.name);
@@ -95,14 +116,14 @@ async function lintContent(content, filePath, linter, timeoutMs, signal) {
     await rm(tmpDir, { recursive: true, force: true }).catch(() => void 0);
   }
 }
-async function lintAndFix(content, filePath, linter, timeoutMs, signal) {
+async function lintAndFix(content, filePath, linter, timeoutMs, cwd, signal) {
   const ext = filePath.includes(".") ? filePath.slice(filePath.lastIndexOf(".")) : ".ts";
   const tmpDir = await mkdtemp(join(tmpdir(), "lint-gate-fix-"));
   const tmpFile = join(tmpDir, `input${ext}`);
   try {
     await writeFile(tmpFile, content, "utf-8");
-    const fixArgs = linter.name === "biome" ? ["biome", "check", "--write", tmpFile] : ["eslint", "--fix", tmpFile];
-    await runCommand(linter.cmd, fixArgs, timeoutMs, signal);
+    const fixArgs = linter.name === "biome" ? [linter.args[0], "check", "--write", tmpFile] : [linter.args[0], "--fix", tmpFile];
+    await runCommand(linter.cmd, fixArgs, timeoutMs, cwd, signal);
     if (signal.aborted) throw signal.reason;
     return await readFile(tmpFile, "utf-8");
   } catch {
@@ -203,7 +224,8 @@ var plugin = {
     state.hookUnregister = null;
     state.lastResult = null;
     const cfg = readConfig(api.config.extensions?.["lint-gate"]);
-    const linterReady = detectLinter(cfg.linter).then((linter) => {
+    const cwd = resolve(api.config.cwd ?? process.cwd());
+    const linterReady = detectLinter(cfg.linter, cwd).then((linter) => {
       if (!linter) {
         api.log.warn("lint-gate: no linter found (biome or eslint) \u2014 hook will be a no-op", {
           requested: cfg.linter
@@ -240,7 +262,14 @@ var plugin = {
       } else {
         return;
       }
-      const issues = await lintContent(content, filePath, linter, cfg.timeoutMs, runtime.signal);
+      const issues = await lintContent(
+        content,
+        filePath,
+        linter,
+        cfg.timeoutMs,
+        cwd,
+        runtime.signal
+      );
       if (issues === null) {
         state.linterErrorCount += 1;
         return;
@@ -280,6 +309,7 @@ ${summary}${truncated}`
             filePath,
             linter,
             cfg.timeoutMs,
+            cwd,
             runtime.signal
           );
           if (fixedContent !== content) {
@@ -318,6 +348,7 @@ ${remainingSummary}` : "")
               filePath,
               linter,
               cfg.timeoutMs,
+              cwd,
               runtime.signal
             );
             if (fixedNewStr !== newStr) {

package/dist/migration-planner.js

@@ -2,7 +2,7 @@
 import { existsSync, readFileSync } from "node:fs";
 
 // src/runtime/index.ts
-import { basename, isAbsolute, relative, resolve } from "node:path";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 
 // src/runtime/llm.ts
 function stripOuterMarkdownFence(text) {

package/dist/prompt-firewall/index.d.ts

@@ -9,25 +9,25 @@
  * outgoing request's system + message text for high-confidence
  * credential patterns and, depending on `mode`:
  *
- *  - `warn`   (default) — logs + counts + emits a `prompt-firewall:leak`
+ *  - `warn`   — logs + counts + emits a `prompt-firewall:leak`
  *    event; the request goes through unchanged
- *  - `redact` — replaces each match with `[REDACTED:<kind>]` in a CLONE
+ *  - `redact` (default) — replaces each match with `[REDACTED:<kind>]` in a CLONE
  *    of the request before sending, and also redacts secrets echoed back
  *    in the response
  *  - `block`  — throws before the request is sent (the agent's error
  *    path surfaces it), so the secret never reaches the provider
  *
  * Safety posture: opt-in — loads inert until
- * `config.extensions['prompt-firewall'].enabled = true`. `warn` is the
- * default so it can never corrupt context until you deliberately choose
- * `redact`/`block`.
+ * `config.extensions['prompt-firewall'].enabled = true`. `redact` is the
+ * default so secrets are automatically stripped; switch to `warn` only
+ * for detection-mode diagnostics without data loss.
  *
  * Config (`config.extensions['prompt-firewall']`):
  *
  * ```jsonc
  * {
  *   "enabled": false,
- *   "mode": "warn",          // "warn" | "redact" | "block"
+ *   "mode": "redact",        // "warn" | "redact" | "block"
  *   "scanResponse": true,     // redact secrets echoed back (redact mode)
  *   "allow": []               // regex source strings to exempt (false positives)
  * }
@@ -50,6 +50,14 @@ export declare function redactSecrets(text: string, allow: RegExp[]): {
     text: string;
     redactions: number;
 };
+type FirewallMode = 'warn' | 'redact' | 'block';
+interface PromptFirewallConfig {
+    enabled: boolean;
+    mode: FirewallMode;
+    scanResponse: boolean;
+    allow: RegExp[];
+}
+export declare function readConfig(raw: unknown): PromptFirewallConfig;
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/prompt-firewall/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompt-firewall/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AA+B1D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAcxE;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAWjG;AA6GD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompt-firewall/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AA+B1D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAcxE;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAWjG;AA0CD,KAAK,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEhD,UAAU,oBAAoB;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CA0B7D;AAgCD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}

package/dist/prompt-firewall.js

@@ -76,7 +76,7 @@ function redactDeep(value, allow, counter) {
 function readConfig(raw) {
   const base = {
     enabled: false,
-    mode: "warn",
+    mode: "redact",
     scanResponse: true,
     allow: []
   };
@@ -91,7 +91,7 @@ function readConfig(raw) {
   }) : [];
   return {
     enabled: r["enabled"] === true,
-    mode: r["mode"] === "redact" ? "redact" : r["mode"] === "block" ? "block" : "warn",
+    mode: r["mode"] === "warn" ? "warn" : r["mode"] === "block" ? "block" : "redact",
     scanResponse: r["scanResponse"] !== false,
     allow
   };
@@ -109,10 +109,10 @@ var state = {
 var plugin = {
   name: "prompt-firewall",
   version: "0.1.0",
-  description: "Scans the provider wire for credential leaks before context reaches the LLM API (wrapProviderRunner); warn/redact/block. Opt-in; warn by default.",
+  description: "Scans the provider wire for credential leaks before context reaches the LLM API (wrapProviderRunner); redact/warn/block. Opt-in; redact by default.",
   apiVersion: "^0.1.10",
   capabilities: { tools: true },
-  defaultConfig: { enabled: false, mode: "warn", scanResponse: true, allow: [] },
+  defaultConfig: { enabled: false, mode: "redact", scanResponse: true, allow: [] },
   configSchema: {
     type: "object",
     properties: {
@@ -124,8 +124,8 @@ var plugin = {
       mode: {
         type: "string",
         enum: ["warn", "redact", "block"],
-        default: "warn",
-        description: "warn = detect only; redact = strip secrets from the request/response; block = refuse the request."
+        default: "redact",
+        description: "redact (default) = strip secrets from the request/response; warn = detect only; block = refuse the request."
       },
       scanResponse: {
         type: "boolean",
@@ -294,5 +294,6 @@ var prompt_firewall_default = plugin;
 export {
   prompt_firewall_default as default,
   detectSecrets,
+  readConfig,
   redactSecrets
 };

package/dist/refactor-suggester/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/refactor-suggester/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,MAAM,SAAS,GACjB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAuQD,QAAA,MAAM,MAAM,EAAE,MA4Nb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/refactor-suggester/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,MAAM,SAAS,GACjB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AA6ND,QAAA,MAAM,MAAM,EAAE,MA4Nb,CAAC;eAEa,MAAM"}

package/dist/refactor-suggester.js

@@ -1,9 +1,10 @@
 // src/refactor-suggester/index.ts
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { extname, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+import { readFileSync } from "node:fs";
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
 
 // src/runtime/index.ts
-import { basename, isAbsolute, relative, resolve } from "node:path";
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
   return arg.length > 0 && arg.startsWith("-");
@@ -18,6 +19,47 @@ function withinProjectPath(projectRoot, candidate) {
 function withinProject(p) {
   return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
 }
+var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
+function collectSourceFiles(root, opts) {
+  const files = [];
+  if (!existsSync(root)) return files;
+  const s = statSync(root);
+  if (s.isFile()) {
+    if (matchesExtension(root, opts.extensions)) files.push(root);
+    return files;
+  }
+  if (!s.isDirectory()) return files;
+  const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
+  function walk(dir, depth) {
+    if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
+    let entries;
+    try {
+      entries = readdirSync(dir);
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (exclude.includes(entry)) continue;
+      const full = resolve(dir, entry);
+      let st;
+      try {
+        st = statSync(full);
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) {
+        walk(full, depth + 1);
+      } else if (st.isFile() && matchesExtension(full, opts.extensions)) {
+        files.push(full);
+      }
+    }
+  }
+  walk(root, 0);
+  return files;
+}
+function matchesExtension(p, exts) {
+  return exts.includes(extname(p).toLowerCase());
+}
 
 // src/refactor-suggester/index.ts
 var API_VERSION = "^0.1.10";
@@ -58,44 +100,6 @@ function readConfig(raw) {
 function normalizeExtensions(exts) {
   return exts.map((e) => e.startsWith(".") ? e.toLowerCase() : `.${e.toLowerCase()}`);
 }
-function matchesExtension(p, exts) {
-  return exts.includes(extname(p).toLowerCase());
-}
-function collectSourceFiles(root, exts) {
-  const files = [];
-  if (!existsSync(root)) return files;
-  const s = statSync(root);
-  if (s.isFile()) {
-    if (matchesExtension(root, exts)) files.push(root);
-    return files;
-  }
-  if (!s.isDirectory()) return files;
-  function walk(dir) {
-    let entries;
-    try {
-      entries = readdirSync(dir);
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (entry === "node_modules" || entry === "dist" || entry === ".git" || entry === "coverage") continue;
-      const full = resolve2(dir, entry);
-      let st;
-      try {
-        st = statSync(full);
-      } catch {
-        continue;
-      }
-      if (st.isDirectory()) {
-        walk(full);
-      } else if (st.isFile() && matchesExtension(full, exts)) {
-        files.push(full);
-      }
-    }
-  }
-  walk(root);
-  return files;
-}
 function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
@@ -189,7 +193,7 @@ function scanPath(rawPath, cfg) {
   const root = process.cwd();
   const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
-  const files = collectSourceFiles(resolved, exts);
+  const files = collectSourceFiles(resolved, { extensions: exts });
   const suggestions = [];
   for (const p of files) {
     try {

package/dist/runtime/index.d.ts

@@ -133,4 +133,28 @@ export declare function withinProject(p: string): boolean;
  * Returns the absolute path or `null`.
  */
 export declare function locateRunnerEntry(runtime: LanguageRuntime, projectRoot: string): string | null;
+export interface CollectOptions {
+    /** File extensions to include (e.g. ['.ts', '.tsx', '.js']). */
+    extensions: string[];
+    /** Directory names to skip entirely. Default skips node_modules, dist, .git, coverage. */
+    excludeDirs?: string[] | undefined;
+    /** Maximum recursion depth. Unlimited when omitted. */
+    maxDepth?: number | undefined;
+}
+/**
+ * Recursively collect files under `root` whose extension is in
+ * `opts.extensions`. Skips directories named in `opts.excludeDirs`
+ * (defaulting to node_modules, dist, .git, coverage) and limits depth
+ * when `opts.maxDepth` is set.
+ *
+ * Shared by 6+ plugin source-scan tools that previously duplicated
+ * this implementation identically.
+ */
+export declare function collectSourceFiles(root: string, opts: CollectOptions): string[];
+/**
+ * Check whether `p` has one of the given extensions (case-insensitive).
+ * Replaces a 6-copy helper that was duplicated identically across
+ * source-scan plugins.
+ */
+export declare function matchesExtension(p: string, exts: string[]): boolean;
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,OAAO,GACP,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,OAAO,GACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf;;;;OAIG;IACH,cAAc,EAAE,gBAAgB,CAAC;IACjC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAkDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,cAAmB,GAC3B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAmB,GAC3B,eAAe,GAAG,IAAI,CAoExB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,SAAS,CAAC,CAwHpB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,YAAc,EAC9B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAWf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,OAAO,GACP,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,OAAO,GACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf;;;;OAIG;IACH,cAAc,EAAE,gBAAgB,CAAC;IACjC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAkDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,cAAmB,GAC3B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAmB,GAC3B,eAAe,GAAG,IAAI,CAoExB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,SAAS,CAAC,CAmHpB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,YAAc,EAC9B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAWf;AAMD,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAID;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAsC/E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAEnE"}