@wrongstack/plugins 0.292.1 → 0.295.0

package/dist/injection-shield/index.d.ts

@@ -40,7 +40,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export declare function scanForInjection(text: string): string[];
 declare const plugin: Plugin;
 export default plugin;

package/dist/injection-shield/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/injection-shield/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA6G/C,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAMD,QAAA,MAAM,MAAM,EAAE,MAwJb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/injection-shield/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA6GrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAMD,QAAA,MAAM,MAAM,EAAE,MAwJb,CAAC;eAEa,MAAM"}

package/dist/interface-contract-guard/index.d.ts

@@ -23,7 +23,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export interface InterfaceContractFinding {
     interfaceName: string;
     file: string;

package/dist/interface-contract-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interface-contract-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAS/C,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAqID,QAAA,MAAM,MAAM,EAAE,MAuMb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interface-contract-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AASrD,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAwID,QAAA,MAAM,MAAM,EAAE,MAuMb,CAAC;eAEa,MAAM"}

package/dist/interface-contract-guard.js

@@ -1,9 +1,8 @@
 // src/interface-contract-guard/index.ts
-import { readFileSync } from "node:fs";
+import { readFile } from "node:fs/promises";
 import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
 
 // src/runtime/index.ts
-import { existsSync, readdirSync, statSync } from "node:fs";
 import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -17,44 +16,45 @@ function withinProjectPath(projectRoot, candidate) {
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
 function withinProject(p) {
-  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+  const cwd = process.cwd();
+  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
 }
 var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
-function collectSourceFiles(root, opts) {
+async function collectSourceFilesAsync(root, opts) {
+  const { readdir, stat } = await import("node:fs/promises");
   const files = [];
-  if (!existsSync(root)) return files;
-  const s = statSync(root);
-  if (s.isFile()) {
-    if (matchesExtension(root, opts.extensions)) files.push(root);
+  try {
+    const s = await stat(root);
+    if (s.isFile()) {
+      if (matchesExtension(root, opts.extensions)) files.push(root);
+      return files;
+    }
+    if (!s.isDirectory()) return files;
+  } catch {
     return files;
   }
-  if (!s.isDirectory()) return files;
   const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
-  function walk(dir, depth) {
+  const excludeSet = new Set(exclude);
+  async function walk(dir, depth) {
     if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
     let entries;
     try {
-      entries = readdirSync(dir);
+      entries = await readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
+    entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      if (exclude.includes(entry)) continue;
-      const full = resolve(dir, entry);
-      let st;
-      try {
-        st = statSync(full);
-      } catch {
-        continue;
-      }
-      if (st.isDirectory()) {
-        walk(full, depth + 1);
-      } else if (st.isFile() && matchesExtension(full, opts.extensions)) {
+      if (excludeSet.has(entry.name)) continue;
+      const full = resolve(dir, entry.name);
+      if (entry.isDirectory()) {
+        await walk(full, depth + 1);
+      } else if (entry.isFile() && matchesExtension(full, opts.extensions)) {
         files.push(full);
       }
     }
   }
-  walk(root, 0);
+  await walk(root, 0);
   return files;
 }
 function matchesExtension(p, exts) {
@@ -110,15 +110,15 @@ function hasImplementer(name, contents) {
   }
   return false;
 }
-function scanPath(rawPath, cfg) {
+async function scanPath(rawPath, cfg) {
   const root = process.cwd();
   const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
-  const files = collectSourceFiles(resolved, { extensions: exts });
+  const files = await collectSourceFilesAsync(resolved, { extensions: exts });
   const contents = [];
   for (const p of files) {
     try {
-      contents.push({ path: p, content: readFileSync(p, "utf-8") });
+      contents.push({ path: p, content: await readFile(p, "utf-8") });
     } catch {
     }
   }
@@ -180,7 +180,7 @@ var plugin = {
       state.hookUnregister = null;
     }
     const cfg = readConfig(api.config.extensions?.["interface-contract-guard"]);
-    const hook = (input) => {
+    const hook = async (input) => {
       if (!cfg.enabled) return;
       if (input.toolResult?.isError) return;
       const inp = input.toolInput ?? {};
@@ -193,7 +193,7 @@ var plugin = {
       const resolved = resolve2(process.cwd(), sourcePath);
       let content;
       try {
-        content = readFileSync(resolved, "utf-8");
+        content = await readFile(resolved, "utf-8");
       } catch {
         state.errorCount += 1;
         return;
@@ -230,7 +230,7 @@ If you changed member shapes, search the project for implementers/\`satisfies\`/
         state.scanCount += 1;
         let result;
         try {
-          result = scanPath(rawPath, cfg);
+          result = await scanPath(rawPath, cfg);
         } catch (err) {
           state.errorCount += 1;
           return { ok: false, error: String(err) };

package/dist/knowledge-graph/index.d.ts

@@ -28,7 +28,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export interface Fact {
     id: string;
     subject: string;

package/dist/knowledge-graph/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/knowledge-graph/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;CACnB;AA2HD,QAAA,MAAM,MAAM,EAAE,MA2Sb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/knowledge-graph/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAQrD,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;CACnB;AA2HD,QAAA,MAAM,MAAM,EAAE,MA2Sb,CAAC;eAEa,MAAM"}

package/dist/license-audit-gate/index.d.ts

@@ -26,7 +26,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/license-audit-gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/license-audit-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAkK/C,QAAA,MAAM,MAAM,EAAE,MAqMb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/license-audit-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAkKrD,QAAA,MAAM,MAAM,EAAE,MAqMb,CAAC;eAEa,MAAM"}

package/dist/lint-gate/index.d.ts

@@ -25,7 +25,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/lint-gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lint-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwU/C,QAAA,MAAM,MAAM,EAAE,MAwWb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lint-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA8VrD,QAAA,MAAM,MAAM,EAAE,MA2Wb,CAAC;eAEa,MAAM"}

package/dist/lint-gate.js

@@ -42,6 +42,7 @@ var LINTER_PACKAGES = {
   biome: "@biomejs/biome",
   eslint: "eslint"
 };
+var linterCache = /* @__PURE__ */ new Map();
 function isInside(parent, candidate) {
   const rel = relative(parent, candidate);
   return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
@@ -89,13 +90,20 @@ function runCommand(command, args, timeoutMs, cwd, signal) {
   });
 }
 async function detectLinter(requested, cwd) {
+  const cacheKey = `${requested}:${cwd}`;
+  const cached = linterCache.get(cacheKey);
+  if (cached !== void 0) return cached;
   const candidates = requested === "auto" ? ["biome", "eslint"] : [requested];
   for (const name of candidates) {
     const linter = resolveLocalLinter(name, cwd);
     if (!linter) continue;
     const probe = await runCommand(linter.cmd, [linter.args[0], "--version"], 5e3, cwd);
-    if (!probe.error) return linter;
+    if (!probe.error) {
+      linterCache.set(cacheKey, linter);
+      return linter;
+    }
   }
+  linterCache.set(cacheKey, null);
   return null;
 }
 async function lintContent(content, filePath, linter, timeoutMs, cwd, signal) {
@@ -223,6 +231,7 @@ var plugin = {
     state.linterErrorCount = 0;
     state.hookUnregister = null;
     state.lastResult = null;
+    linterCache.clear();
     const cfg = readConfig(api.config.extensions?.["lint-gate"]);
     const cwd = resolve(api.config.cwd ?? process.cwd());
     const linterReady = detectLinter(cfg.linter, cwd).then((linter) => {

package/dist/llm-cache/index.d.ts

@@ -37,7 +37,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 /**
  * Whether a request is safe to cache under `onlyDeterministic`. Sampled
  * requests (temperature > 0) return different content each call, so
@@ -47,6 +47,10 @@ export declare function isDeterministic(request: Record<string, unknown>): boole
 /**
  * Stable fingerprint of the request fields that affect the response.
  * Excludes anything cosmetic (user id, etc.). Same inputs → same key.
+ *
+ * Determinism: uses canonical JSON key ordering (alphabetical) so
+ * identical semantic requests produce identical fingerprints regardless
+ * of property insertion order.
  */
 export declare function fingerprintRequest(request: Record<string, unknown>): string;
 declare const plugin: Plugin;

package/dist/llm-cache/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/llm-cache/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AAwF1D;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAGzE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiB3E;AAkCD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/llm-cache/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AAwFhE;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAGzE;AAeD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAsB3E;AA6CD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}

package/dist/llm-cache.js

@@ -32,21 +32,26 @@ function isDeterministic(request) {
   const t = request["temperature"];
   return t === void 0 || t === 0;
 }
+var fingerprintCache = /* @__PURE__ */ new WeakMap();
 function fingerprintRequest(request) {
+  const cached = fingerprintCache.get(request);
+  if (cached) return cached;
   const subset = {
+    maxTokens: request["maxTokens"] ?? null,
+    messages: request["messages"] ?? null,
     model: request["model"] ?? null,
+    reasoning: request["reasoning"] ?? null,
+    responseFormat: request["responseFormat"] ?? null,
+    stopSequences: request["stopSequences"] ?? null,
     system: request["system"] ?? null,
-    messages: request["messages"] ?? null,
-    tools: Array.isArray(request["tools"]) ? request["tools"].map((t) => t?.name ?? t) : null,
     temperature: request["temperature"] ?? null,
-    topP: request["topP"] ?? null,
+    tools: Array.isArray(request["tools"]) ? request["tools"].map((t) => t?.name ?? t) : null,
     topK: request["topK"] ?? null,
-    maxTokens: request["maxTokens"] ?? null,
-    stopSequences: request["stopSequences"] ?? null,
-    responseFormat: request["responseFormat"] ?? null,
-    reasoning: request["reasoning"] ?? null
+    topP: request["topP"] ?? null
   };
-  return createHash("sha256").update(JSON.stringify(subset)).digest("hex");
+  const fingerprint = createHash("sha256").update(JSON.stringify(subset)).digest("hex");
+  fingerprintCache.set(request, fingerprint);
+  return fingerprint;
 }
 function lruGet(key, ttlMs) {
   const entry = state.cache.get(key);
@@ -60,6 +65,9 @@ function lruGet(key, ttlMs) {
   return entry;
 }
 function lruSet(key, response, maxEntries) {
+  if (state.cache.has(key)) {
+    state.cache.delete(key);
+  }
   state.cache.set(key, { response, storedAt: Date.now(), hits: 0 });
   while (state.cache.size > maxEntries) {
     const oldest = state.cache.keys().next().value;

package/dist/loop-breaker/index.d.ts

@@ -1,4 +1,4 @@
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/loop-breaker/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/loop-breaker/index.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAqP/C,QAAA,MAAM,MAAM,EAAE,MA6Yb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/loop-breaker/index.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAqQrD,QAAA,MAAM,MAAM,EAAE,MA+Yb,CAAC;eAEa,MAAM"}

package/dist/loop-breaker.js

@@ -34,11 +34,17 @@ var DEFAULTS = {
   repeatedErrorBlockAfter: 3,
   ignoreTools: []
 };
+var ignoreToolsSet = new Set(DEFAULTS.ignoreTools);
 function readConfig(raw) {
-  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
+  if (!raw || typeof raw !== "object") {
+    ignoreToolsSet = new Set(DEFAULTS.ignoreTools);
+    return { ...DEFAULTS };
+  }
   const r = raw;
   const warnAfter = typeof r["warnAfter"] === "number" && r["warnAfter"] >= 2 ? r["warnAfter"] : DEFAULTS.warnAfter;
   const blockAfter = typeof r["blockAfter"] === "number" && r["blockAfter"] > warnAfter ? r["blockAfter"] : Math.max(DEFAULTS.blockAfter, warnAfter + 1);
+  const ignoreTools = Array.isArray(r["ignoreTools"]) ? r["ignoreTools"].filter((t) => typeof t === "string") : [];
+  ignoreToolsSet = new Set(ignoreTools);
   return {
     enabled: r["enabled"] !== false,
     mode: r["mode"] === "warn" ? "warn" : "block",
@@ -50,7 +56,7 @@ function readConfig(raw) {
     noDiffBlockAfter: typeof r["noDiffBlockAfter"] === "number" && r["noDiffBlockAfter"] >= 0 ? Math.floor(r["noDiffBlockAfter"]) : DEFAULTS.noDiffBlockAfter,
     repeatedErrorWarnAfter: typeof r["repeatedErrorWarnAfter"] === "number" && r["repeatedErrorWarnAfter"] >= 1 ? Math.floor(r["repeatedErrorWarnAfter"]) : DEFAULTS.repeatedErrorWarnAfter,
     repeatedErrorBlockAfter: typeof r["repeatedErrorBlockAfter"] === "number" && r["repeatedErrorBlockAfter"] >= 0 ? Math.floor(r["repeatedErrorBlockAfter"]) : DEFAULTS.repeatedErrorBlockAfter,
-    ignoreTools: Array.isArray(r["ignoreTools"]) ? r["ignoreTools"].filter((t) => typeof t === "string") : []
+    ignoreTools
   };
 }
 function canonicalize(value) {
@@ -228,7 +234,7 @@ var plugin = {
     const hook = (input) => {
       if (!cfg.enabled) return;
       const toolName = input.toolName ?? "unknown";
-      if (cfg.ignoreTools.includes(toolName)) return;
+      if (ignoreToolsSet.has(toolName)) return;
       state.invocations += 1;
       if (state.pendingBlockReason && cfg.mode === "block") {
         const reason = state.pendingBlockReason;
@@ -289,7 +295,7 @@ var plugin = {
     const postHook = async (input, runtime = { signal: new AbortController().signal }) => {
       if (!cfg.enabled) return;
       const toolName = input.toolName ?? "unknown";
-      if (cfg.ignoreTools.includes(toolName)) return;
+      if (ignoreToolsSet.has(toolName)) return;
       state.postInvocations += 1;
       if (input.toolResult?.isError) {
         const errorFingerprint = normalizeError(input.toolResult.content);

package/dist/manifest/index.d.ts

@@ -0,0 +1,16 @@
+/** Metadata that can be consumed without importing plugin implementations. */
+export interface OfficialPluginManifestEntry {
+    name: string;
+    exportName: string;
+    packageSubpath: string;
+    sourcePath: string;
+    importSpecifier: string;
+    audit: {
+        risk: 'low' | 'medium' | 'high';
+        defaultState: 'active' | 'inactive';
+        canDisable: true;
+    };
+}
+export declare const OFFICIAL_PLUGIN_MANIFEST: readonly OfficialPluginManifestEntry[];
+export declare const OFFICIAL_PLUGIN_NAME_SET: ReadonlySet<string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/manifest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/manifest/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE;QACL,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC;KAClB,CAAC;CACH;AA0ID,eAAO,MAAM,wBAAwB,EAAE,SAAS,2BAA2B,EAe1E,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAkC,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1 @@
+export * from './manifest/index.js';

package/dist/manifest.js

@@ -0,0 +1,152 @@
+// src/manifest/index.ts
+var OFFICIAL_PLUGIN_NAMES = [
+  "agent-handoff",
+  "cost-tracker",
+  "file-watcher",
+  "git-autocommit",
+  "auto-doc",
+  "shell-check",
+  "cron",
+  "template-engine",
+  "semver-bump",
+  "secret-scanner",
+  "todo-tracker",
+  "token-budget",
+  "lint-gate",
+  "branch-guard",
+  "diff-summary",
+  "commit-validator",
+  "format-on-save",
+  "test-runner-gate",
+  "import-organizer",
+  "knowledge-graph",
+  "todo-listener",
+  "session-recap",
+  "spec-linker",
+  "loop-breaker",
+  "path-guard",
+  "process-guard",
+  "context-pins",
+  "checkpoint",
+  "error-lens",
+  "dep-guard",
+  "config-validator",
+  "notify-hub",
+  "changelog-writer",
+  "injection-shield",
+  "llm-cache",
+  "model-router",
+  "pr-drafter",
+  "prompt-firewall",
+  "auto-escalate",
+  "test-coverage-gate",
+  "type-gate",
+  "token-throttle",
+  "plugin-stack-observer",
+  "dead-code-detector",
+  "dependency-vulnerability-gate",
+  "migration-planner",
+  "semantic-search-indexer",
+  "auto-i18n-extractor",
+  "doc-sync-guard",
+  "api-compatibility-gate",
+  "performance-regression-gate",
+  "test-flake-detector",
+  "schema-evolution-guard",
+  "license-audit-gate",
+  "accessibility-auditor",
+  "security-hotspot-scanner",
+  "duplicate-code-detector",
+  "code-metrics",
+  "refactor-suggester",
+  "test-generator",
+  "release-notes-generator",
+  "smart-rename",
+  "feature-flag-tracker",
+  "interface-contract-guard"
+];
+var MEDIUM_RISK_PLUGINS = /* @__PURE__ */ new Set([
+  "agent-handoff",
+  "auto-doc",
+  "accessibility-auditor",
+  "file-watcher",
+  "cron",
+  "template-engine",
+  "token-budget",
+  "lint-gate",
+  "commit-validator",
+  "format-on-save",
+  "test-runner-gate",
+  "import-organizer",
+  "path-guard",
+  "checkpoint",
+  "dep-guard",
+  "api-compatibility-gate",
+  "notify-hub",
+  "llm-cache",
+  "model-router",
+  "auto-escalate",
+  "token-throttle",
+  "test-coverage-gate",
+  "test-flake-detector",
+  "performance-regression-gate",
+  "type-gate",
+  "interface-contract-guard",
+  "smart-rename"
+]);
+var HIGH_RISK_PLUGINS = /* @__PURE__ */ new Set([
+  "git-autocommit",
+  "semver-bump",
+  "secret-scanner",
+  "branch-guard",
+  "process-guard",
+  "dependency-vulnerability-gate",
+  "license-audit-gate",
+  "security-hotspot-scanner",
+  "schema-evolution-guard",
+  "prompt-firewall"
+]);
+var DEFAULT_ACTIVE_PLUGINS = /* @__PURE__ */ new Set([
+  "cost-tracker",
+  "secret-scanner",
+  "todo-tracker",
+  "token-budget",
+  "diff-summary",
+  "knowledge-graph",
+  "loop-breaker",
+  "process-guard",
+  "context-pins",
+  "error-lens",
+  "dep-guard",
+  "config-validator",
+  "injection-shield"
+]);
+function auditRisk(name) {
+  if (HIGH_RISK_PLUGINS.has(name)) return "high";
+  if (MEDIUM_RISK_PLUGINS.has(name)) return "medium";
+  return "low";
+}
+function exportName(name) {
+  return `${name.replace(/-([a-z0-9])/g, (_, char) => char.toUpperCase())}Plugin`;
+}
+var OFFICIAL_PLUGIN_MANIFEST = Object.freeze(
+  OFFICIAL_PLUGIN_NAMES.map(
+    (name) => Object.freeze({
+      name,
+      exportName: exportName(name),
+      packageSubpath: `./${name}`,
+      sourcePath: `./src/${name}`,
+      importSpecifier: `@wrongstack/plugins/${name}`,
+      audit: Object.freeze({
+        risk: auditRisk(name),
+        defaultState: DEFAULT_ACTIVE_PLUGINS.has(name) ? "active" : "inactive",
+        canDisable: true
+      })
+    })
+  )
+);
+var OFFICIAL_PLUGIN_NAME_SET = new Set(OFFICIAL_PLUGIN_NAMES);
+export {
+  OFFICIAL_PLUGIN_MANIFEST,
+  OFFICIAL_PLUGIN_NAME_SET
+};

package/dist/migration-planner/index.d.ts

@@ -25,7 +25,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export interface MigrationAiAnalysis {
     summary: string;
     riskLevel: 'low' | 'medium' | 'high' | 'unknown';

package/dist/migration-planner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migration-planner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwP/C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAwED,QAAA,MAAM,MAAM,EAAE,MA+Sb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migration-planner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwPrD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAwED,QAAA,MAAM,MAAM,EAAE,MA+Sb,CAAC;eAEa,MAAM"}

package/dist/migration-planner.js

@@ -63,7 +63,8 @@ function withinProjectPath(projectRoot, candidate) {
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
 function withinProject(p) {
-  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+  const cwd = process.cwd();
+  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
 }
 
 // src/migration-planner/index.ts

package/dist/model-router/index.d.ts

@@ -42,7 +42,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 interface RouteRule {
     /** Match when the request's total char size is <= this. */
     maxChars?: number | undefined;

package/dist/model-router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model-router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AAM1D,UAAU,SAAS;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;CACf;AA8DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgBxE;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ9F;AAMD,QAAA,MAAM,MAAM,EAAE,MAyKb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model-router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AAMhE,UAAU,SAAS;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;CACf;AA8DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgBxE;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ9F;AAMD,QAAA,MAAM,MAAM,EAAE,MAyKb,CAAC;eAEa,MAAM"}

package/dist/notify-hub/index.d.ts

@@ -1,4 +1,4 @@
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/notify-hub/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notify-hub/index.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAmD,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA8NhG,QAAA,MAAM,MAAM,EAAE,MAwRb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notify-hub/index.ts"],"names":[],"mappings":"AAyDA,OAAO,KAAK,EAAU,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA8N7D,QAAA,MAAM,MAAM,EAAE,MAwRb,CAAC;eAEa,MAAM"}

package/dist/notify-hub/webhook-channel.d.ts

@@ -14,7 +14,7 @@
  * @module notify-hub
  * @public
  */
-import type { NotificationChannel, NotificationMessage, NotificationResult } from '@wrongstack/core';
+import type { NotificationChannel, NotificationMessage, NotificationResult } from '@wrongstack/core/notifications';
 export interface WebhookChannelOptions {
     /** HTTP(S) endpoint that receives JSON POSTs. */
     readonly webhookUrl: string;

package/dist/notify-hub/webhook-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-channel.d.ts","sourceRoot":"","sources":["../../src/notify-hub/webhook-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAmBrG,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,iDAAiD;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;;IACpE,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IAiBnC,YAAY,IAAI,EAAE,qBAAqB,EAMtC;IAMK,OAAO,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6DnE;IAEK,IAAI,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAYjE;IAMD,4DAA4D;IAC5D,YAAY,IAAI,IAAI,CAGnB;IAED,qCAAqC;IACrC,aAAa,IAAI;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED,gDAAgD;IAChD,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAOA;CACF"}
+{"version":3,"file":"webhook-channel.d.ts","sourceRoot":"","sources":["../../src/notify-hub/webhook-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAmBnH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,iDAAiD;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;;IACpE,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IAiBnC,YAAY,IAAI,EAAE,qBAAqB,EAMtC;IAMK,OAAO,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6DnE;IAEK,IAAI,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAYjE;IAMD,4DAA4D;IAC5D,YAAY,IAAI,IAAI,CAGnB;IAED,qCAAqC;IACrC,aAAa,IAAI;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED,gDAAgD;IAChD,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAOA;CACF"}

package/dist/path-guard/index.d.ts

@@ -31,7 +31,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 /**
  * Compile a glob pattern to a RegExp. Supports `**` (any depth),
  * `*` (within one segment), and `?` (single char). Matching is done

package/dist/path-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/path-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwE/C;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyBvD;AAWD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB5D;AAMD,QAAA,MAAM,MAAM,EAAE,MA8Kb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/path-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwErD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyBvD;AAWD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB5D;AAMD,QAAA,MAAM,MAAM,EAAE,MA8Kb,CAAC;eAEa,MAAM"}

package/dist/performance-regression-gate/index.d.ts

@@ -25,7 +25,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map