@wrongstack/plugins 0.293.0 → 0.295.1

package/dist/loop-breaker.js

@@ -34,11 +34,17 @@ var DEFAULTS = {
   repeatedErrorBlockAfter: 3,
   ignoreTools: []
 };
+var ignoreToolsSet = new Set(DEFAULTS.ignoreTools);
 function readConfig(raw) {
-  if (!raw || typeof raw !== "object") return { ...DEFAULTS };
+  if (!raw || typeof raw !== "object") {
+    ignoreToolsSet = new Set(DEFAULTS.ignoreTools);
+    return { ...DEFAULTS };
+  }
   const r = raw;
   const warnAfter = typeof r["warnAfter"] === "number" && r["warnAfter"] >= 2 ? r["warnAfter"] : DEFAULTS.warnAfter;
   const blockAfter = typeof r["blockAfter"] === "number" && r["blockAfter"] > warnAfter ? r["blockAfter"] : Math.max(DEFAULTS.blockAfter, warnAfter + 1);
+  const ignoreTools = Array.isArray(r["ignoreTools"]) ? r["ignoreTools"].filter((t) => typeof t === "string") : [];
+  ignoreToolsSet = new Set(ignoreTools);
   return {
     enabled: r["enabled"] !== false,
     mode: r["mode"] === "warn" ? "warn" : "block",
@@ -50,7 +56,7 @@ function readConfig(raw) {
     noDiffBlockAfter: typeof r["noDiffBlockAfter"] === "number" && r["noDiffBlockAfter"] >= 0 ? Math.floor(r["noDiffBlockAfter"]) : DEFAULTS.noDiffBlockAfter,
     repeatedErrorWarnAfter: typeof r["repeatedErrorWarnAfter"] === "number" && r["repeatedErrorWarnAfter"] >= 1 ? Math.floor(r["repeatedErrorWarnAfter"]) : DEFAULTS.repeatedErrorWarnAfter,
     repeatedErrorBlockAfter: typeof r["repeatedErrorBlockAfter"] === "number" && r["repeatedErrorBlockAfter"] >= 0 ? Math.floor(r["repeatedErrorBlockAfter"]) : DEFAULTS.repeatedErrorBlockAfter,
-    ignoreTools: Array.isArray(r["ignoreTools"]) ? r["ignoreTools"].filter((t) => typeof t === "string") : []
+    ignoreTools
   };
 }
 function canonicalize(value) {
@@ -60,16 +66,26 @@ function canonicalize(value) {
     return String(value);
   }
 }
-function sortKeys(value) {
-  if (Array.isArray(value)) return value.map(sortKeys);
-  if (value && typeof value === "object") {
+var CANONICALIZE_MAX_DEPTH = 12;
+function sortKeys(value, depth = 0, seen = /* @__PURE__ */ new Set()) {
+  if (value === null || typeof value !== "object") return value;
+  if (seen.has(value)) return "[circular]";
+  if (depth >= CANONICALIZE_MAX_DEPTH) {
+    return Array.isArray(value) ? `[array:${value.length}]` : "[deep-object]";
+  }
+  seen.add(value);
+  try {
+    if (Array.isArray(value)) {
+      return value.map((v) => sortKeys(v, depth + 1, seen));
+    }
     const out = {};
     for (const key of Object.keys(value).sort()) {
-      out[key] = sortKeys(value[key]);
+      out[key] = sortKeys(value[key], depth + 1, seen);
     }
     return out;
+  } finally {
+    seen.delete(value);
   }
-  return value;
 }
 function fingerprint(toolName, toolInput) {
   return `${toolName}\0${canonicalize(toolInput)}`;
@@ -228,7 +244,7 @@ var plugin = {
     const hook = (input) => {
       if (!cfg.enabled) return;
       const toolName = input.toolName ?? "unknown";
-      if (cfg.ignoreTools.includes(toolName)) return;
+      if (ignoreToolsSet.has(toolName)) return;
       state.invocations += 1;
       if (state.pendingBlockReason && cfg.mode === "block") {
         const reason = state.pendingBlockReason;
@@ -289,7 +305,7 @@ var plugin = {
     const postHook = async (input, runtime = { signal: new AbortController().signal }) => {
       if (!cfg.enabled) return;
       const toolName = input.toolName ?? "unknown";
-      if (cfg.ignoreTools.includes(toolName)) return;
+      if (ignoreToolsSet.has(toolName)) return;
       state.postInvocations += 1;
       if (input.toolResult?.isError) {
         const errorFingerprint = normalizeError(input.toolResult.content);

package/dist/manifest/index.d.ts

@@ -0,0 +1,16 @@
+/** Metadata that can be consumed without importing plugin implementations. */
+export interface OfficialPluginManifestEntry {
+    name: string;
+    exportName: string;
+    packageSubpath: string;
+    sourcePath: string;
+    importSpecifier: string;
+    audit: {
+        risk: 'low' | 'medium' | 'high';
+        defaultState: 'active' | 'inactive';
+        canDisable: true;
+    };
+}
+export declare const OFFICIAL_PLUGIN_MANIFEST: readonly OfficialPluginManifestEntry[];
+export declare const OFFICIAL_PLUGIN_NAME_SET: ReadonlySet<string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/manifest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/manifest/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE;QACL,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC;KAClB,CAAC;CACH;AA0ID,eAAO,MAAM,wBAAwB,EAAE,SAAS,2BAA2B,EAe1E,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAkC,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1 @@
+export * from './manifest/index.js';

package/dist/manifest.js

@@ -0,0 +1,152 @@
+// src/manifest/index.ts
+var OFFICIAL_PLUGIN_NAMES = [
+  "agent-handoff",
+  "cost-tracker",
+  "file-watcher",
+  "git-autocommit",
+  "auto-doc",
+  "shell-check",
+  "cron",
+  "template-engine",
+  "semver-bump",
+  "secret-scanner",
+  "todo-tracker",
+  "token-budget",
+  "lint-gate",
+  "branch-guard",
+  "diff-summary",
+  "commit-validator",
+  "format-on-save",
+  "test-runner-gate",
+  "import-organizer",
+  "knowledge-graph",
+  "todo-listener",
+  "session-recap",
+  "spec-linker",
+  "loop-breaker",
+  "path-guard",
+  "process-guard",
+  "context-pins",
+  "checkpoint",
+  "error-lens",
+  "dep-guard",
+  "config-validator",
+  "notify-hub",
+  "changelog-writer",
+  "injection-shield",
+  "llm-cache",
+  "model-router",
+  "pr-drafter",
+  "prompt-firewall",
+  "auto-escalate",
+  "test-coverage-gate",
+  "type-gate",
+  "token-throttle",
+  "plugin-stack-observer",
+  "dead-code-detector",
+  "dependency-vulnerability-gate",
+  "migration-planner",
+  "semantic-search-indexer",
+  "auto-i18n-extractor",
+  "doc-sync-guard",
+  "api-compatibility-gate",
+  "performance-regression-gate",
+  "test-flake-detector",
+  "schema-evolution-guard",
+  "license-audit-gate",
+  "accessibility-auditor",
+  "security-hotspot-scanner",
+  "duplicate-code-detector",
+  "code-metrics",
+  "refactor-suggester",
+  "test-generator",
+  "release-notes-generator",
+  "smart-rename",
+  "feature-flag-tracker",
+  "interface-contract-guard"
+];
+var MEDIUM_RISK_PLUGINS = /* @__PURE__ */ new Set([
+  "agent-handoff",
+  "auto-doc",
+  "accessibility-auditor",
+  "file-watcher",
+  "cron",
+  "template-engine",
+  "token-budget",
+  "lint-gate",
+  "commit-validator",
+  "format-on-save",
+  "test-runner-gate",
+  "import-organizer",
+  "path-guard",
+  "checkpoint",
+  "dep-guard",
+  "api-compatibility-gate",
+  "notify-hub",
+  "llm-cache",
+  "model-router",
+  "auto-escalate",
+  "token-throttle",
+  "test-coverage-gate",
+  "test-flake-detector",
+  "performance-regression-gate",
+  "type-gate",
+  "interface-contract-guard",
+  "smart-rename"
+]);
+var HIGH_RISK_PLUGINS = /* @__PURE__ */ new Set([
+  "git-autocommit",
+  "semver-bump",
+  "secret-scanner",
+  "branch-guard",
+  "process-guard",
+  "dependency-vulnerability-gate",
+  "license-audit-gate",
+  "security-hotspot-scanner",
+  "schema-evolution-guard",
+  "prompt-firewall"
+]);
+var DEFAULT_ACTIVE_PLUGINS = /* @__PURE__ */ new Set([
+  "cost-tracker",
+  "secret-scanner",
+  "todo-tracker",
+  "token-budget",
+  "diff-summary",
+  "knowledge-graph",
+  "loop-breaker",
+  "process-guard",
+  "context-pins",
+  "error-lens",
+  "dep-guard",
+  "config-validator",
+  "injection-shield"
+]);
+function auditRisk(name) {
+  if (HIGH_RISK_PLUGINS.has(name)) return "high";
+  if (MEDIUM_RISK_PLUGINS.has(name)) return "medium";
+  return "low";
+}
+function exportName(name) {
+  return `${name.replace(/-([a-z0-9])/g, (_, char) => char.toUpperCase())}Plugin`;
+}
+var OFFICIAL_PLUGIN_MANIFEST = Object.freeze(
+  OFFICIAL_PLUGIN_NAMES.map(
+    (name) => Object.freeze({
+      name,
+      exportName: exportName(name),
+      packageSubpath: `./${name}`,
+      sourcePath: `./src/${name}`,
+      importSpecifier: `@wrongstack/plugins/${name}`,
+      audit: Object.freeze({
+        risk: auditRisk(name),
+        defaultState: DEFAULT_ACTIVE_PLUGINS.has(name) ? "active" : "inactive",
+        canDisable: true
+      })
+    })
+  )
+);
+var OFFICIAL_PLUGIN_NAME_SET = new Set(OFFICIAL_PLUGIN_NAMES);
+export {
+  OFFICIAL_PLUGIN_MANIFEST,
+  OFFICIAL_PLUGIN_NAME_SET
+};

package/dist/migration-planner/index.d.ts

@@ -25,7 +25,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export interface MigrationAiAnalysis {
     summary: string;
     riskLevel: 'low' | 'medium' | 'high' | 'unknown';

package/dist/migration-planner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migration-planner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwP/C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAwED,QAAA,MAAM,MAAM,EAAE,MA+Sb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migration-planner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwPrD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAwED,QAAA,MAAM,MAAM,EAAE,MA+Sb,CAAC;eAEa,MAAM"}

package/dist/migration-planner.js

@@ -50,6 +50,9 @@ async function runOptionalPluginLlm(request) {
   }
 }
 
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -63,7 +66,8 @@ function withinProjectPath(projectRoot, candidate) {
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
 function withinProject(p) {
-  return withinProjectPath(process.cwd(), p) || relative(process.cwd(), p) === ".";
+  const cwd = process.cwd();
+  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
 }
 
 // src/migration-planner/index.ts

package/dist/model-router/index.d.ts

@@ -42,7 +42,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 interface RouteRule {
     /** Match when the request's total char size is <= this. */
     maxChars?: number | undefined;

package/dist/model-router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model-router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AAM1D,UAAU,SAAS;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;CACf;AA8DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgBxE;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ9F;AAMD,QAAA,MAAM,MAAM,EAAE,MAyKb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model-router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AAMhE,UAAU,SAAS;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;CACf;AA8DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAgBxE;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ9F;AAMD,QAAA,MAAM,MAAM,EAAE,MAyKb,CAAC;eAEa,MAAM"}

package/dist/notify-hub/index.d.ts

@@ -1,4 +1,4 @@
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/notify-hub/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notify-hub/index.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAmD,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA8NhG,QAAA,MAAM,MAAM,EAAE,MAwRb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notify-hub/index.ts"],"names":[],"mappings":"AAyDA,OAAO,KAAK,EAAU,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAiP7D,QAAA,MAAM,MAAM,EAAE,MAwRb,CAAC;eAEa,MAAM"}

package/dist/notify-hub/webhook-channel.d.ts

@@ -14,7 +14,7 @@
  * @module notify-hub
  * @public
  */
-import type { NotificationChannel, NotificationMessage, NotificationResult } from '@wrongstack/core';
+import type { NotificationChannel, NotificationMessage, NotificationResult } from '@wrongstack/core/notifications';
 export interface WebhookChannelOptions {
     /** HTTP(S) endpoint that receives JSON POSTs. */
     readonly webhookUrl: string;

package/dist/notify-hub/webhook-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-channel.d.ts","sourceRoot":"","sources":["../../src/notify-hub/webhook-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAmBrG,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,iDAAiD;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;;IACpE,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IAiBnC,YAAY,IAAI,EAAE,qBAAqB,EAMtC;IAMK,OAAO,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6DnE;IAEK,IAAI,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAYjE;IAMD,4DAA4D;IAC5D,YAAY,IAAI,IAAI,CAGnB;IAED,qCAAqC;IACrC,aAAa,IAAI;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED,gDAAgD;IAChD,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAOA;CACF"}
+{"version":3,"file":"webhook-channel.d.ts","sourceRoot":"","sources":["../../src/notify-hub/webhook-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAmBnH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,iDAAiD;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;;IACpE,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IAiBnC,YAAY,IAAI,EAAE,qBAAqB,EAMtC;IAMK,OAAO,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6DnE;IAEK,IAAI,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAYjE;IAMD,4DAA4D;IAC5D,YAAY,IAAI,IAAI,CAGnB;IAED,qCAAqC;IACrC,aAAa,IAAI;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED,gDAAgD;IAChD,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAOA;CACF"}

package/dist/notify-hub.js

@@ -1,6 +1,35 @@
 // src/notify-hub/index.ts
 import { lookup } from "node:dns/promises";
 
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/safe-json.ts
+var UNSERIALIZABLE = "[unserializable]";
+function safeJsonStringify(value, indent) {
+  try {
+    const stack = [];
+    const out = JSON.stringify(
+      value,
+      function replacer(_key, val) {
+        if (typeof val === "bigint") return `${val.toString()}n`;
+        if (val === null || typeof val !== "object") return val;
+        while (stack.length > 0 && stack[stack.length - 1] !== this) stack.pop();
+        if (stack.includes(val)) return "[circular]";
+        stack.push(val);
+        return val;
+      },
+      indent
+    );
+    return out ?? String(value);
+  } catch {
+    return UNSERIALIZABLE;
+  }
+}
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+
 // src/notify-hub/webhook-channel.ts
 function freshCircuit() {
   return { open: false, consecutiveFailures: 0 };
@@ -202,13 +231,21 @@ async function deliver(event, payload) {
   }
   const result = await deliverViaChannel(ch, event, {
     title: typeof payload.title === "string" ? payload.title : event,
-    body: typeof payload.message === "string" ? payload.message : typeof payload.error === "string" ? payload.error : JSON.stringify(payload),
+    body: typeof payload.message === "string" ? payload.message : typeof payload.error === "string" ? payload.error : safeJsonStringify(payload),
     level: event === "tool.error" || event === "budget.threshold" ? "warning" : "info",
     source: event,
     metadata: payload
   });
   return result.ok;
 }
+function deliverDetached(event, payload) {
+  deliver(event, payload).catch((err) => {
+    _pluginLog?.warn("notify-hub: notification delivery failed", {
+      event,
+      error: err instanceof Error ? err.message : String(err)
+    });
+  });
+}
 async function deliverViaChannel(ch, event, msg) {
   const result = await ch.deliver(msg);
   if (result.ok) {
@@ -317,7 +354,7 @@ var plugin = {
     }
     if (active && cfg.events.includes("session.stop")) {
       const stopHook = (input) => {
-        void deliver("session.stop", {
+        deliverDetached("session.stop", {
           sessionId: input.sessionId ?? null,
           cwd: input.cwd ?? null
         });
@@ -328,7 +365,7 @@ var plugin = {
       const off = api.onPattern("tool.*", (eventName, payload) => {
         if (!/error|failed/.test(eventName)) return;
         const p = payload;
-        void deliver("tool.error", {
+        deliverDetached("tool.error", {
           tool: p?.tool ?? p?.name ?? "unknown",
           busEvent: eventName,
           error: truncateText(
@@ -342,7 +379,7 @@ var plugin = {
     if (active && cfg.events.includes("budget.threshold")) {
       const off = api.onPattern("budget.*", (eventName, payload) => {
         if (!eventName.includes("threshold")) return;
-        void deliver("budget.threshold", { busEvent: eventName, detail: payload });
+        deliverDetached("budget.threshold", { busEvent: eventName, detail: payload });
       });
       state.eventUnsubscribers.push(off);
     }

package/dist/path-guard/index.d.ts

@@ -31,7 +31,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 /**
  * Compile a glob pattern to a RegExp. Supports `**` (any depth),
  * `*` (within one segment), and `?` (single char). Matching is done

package/dist/path-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/path-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwE/C;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyBvD;AAWD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB5D;AAMD,QAAA,MAAM,MAAM,EAAE,MA8Kb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/path-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwErD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyBvD;AAWD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB5D;AAMD,QAAA,MAAM,MAAM,EAAE,MA8Kb,CAAC;eAEa,MAAM"}

package/dist/performance-regression-gate/index.d.ts

@@ -25,7 +25,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/performance-regression-gate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/performance-regression-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwO/C,QAAA,MAAM,MAAM,EAAE,MA8Mb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/performance-regression-gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwOrD,QAAA,MAAM,MAAM,EAAE,MA8Mb,CAAC;eAEa,MAAM"}

package/dist/plugin-stack-observer/index.d.ts

@@ -27,7 +27,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const PLUGIN: Plugin;
 export default PLUGIN;
 //# sourceMappingURL=index.d.ts.map

package/dist/plugin-stack-observer/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugin-stack-observer/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAqC/C,QAAA,MAAM,MAAM,EAAE,MAyIb,CAAC;eAoBa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugin-stack-observer/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAqCrD,QAAA,MAAM,MAAM,EAAE,MAyIb,CAAC;eAoBa,MAAM"}

package/dist/pr-drafter/index.d.ts

@@ -27,7 +27,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/pr-drafter/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pr-drafter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AA4M1D,QAAA,MAAM,MAAM,EAAE,MAyNb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pr-drafter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AA4MhE,QAAA,MAAM,MAAM,EAAE,MAyNb,CAAC;eAEa,MAAM"}

package/dist/pr-drafter.js

@@ -1,6 +1,6 @@
 // src/pr-drafter/index.ts
-import { execFileSync } from "node:child_process";
-import { mkdirSync, writeFileSync } from "node:fs";
+import { execFile } from "node:child_process";
+import { mkdir, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 var API_VERSION = "^0.1.10";
 var state = {
@@ -46,34 +46,33 @@ function resolveProjectPath(rawPath, cwd = process.cwd()) {
   if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
   return null;
 }
+function runGit(args, timeout) {
+  return new Promise((resolveOutput) => {
+    execFile(
+      "git",
+      args,
+      {
+        encoding: "utf8",
+        cwd: process.cwd(),
+        windowsHide: true,
+        timeout,
+        maxBuffer: 5 * 1024 * 1024
+      },
+      (error, stdout) => resolveOutput(error ? null : stdout.trim())
+    );
+  });
+}
 function gitBranch() {
-  try {
-    const out = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
-      encoding: "utf-8",
-      cwd: process.cwd(),
-      stdio: ["pipe", "pipe", "ignore"],
-      timeout: 5e3
-    });
-    return out.trim();
-  } catch {
-    return null;
-  }
+  return runGit(["rev-parse", "--abbrev-ref", "HEAD"], 5e3);
 }
 function gitDiff() {
-  try {
-    return execFileSync("git", ["diff", "--stat"], {
-      encoding: "utf-8",
-      cwd: process.cwd(),
-      stdio: ["pipe", "pipe", "ignore"],
-      timeout: 1e4
-    }).trim();
-  } catch {
-    return null;
-  }
+  return runGit(["diff", "--stat"], 1e4);
 }
 async function buildDraft(cfg, llm) {
-  const branch = gitBranch();
-  const diffStat = cfg.includeDiff ? gitDiff() : null;
+  const [branch, diffStat] = await Promise.all([
+    gitBranch(),
+    cfg.includeDiff ? gitDiff() : Promise.resolve(null)
+  ]);
   const lines = [];
   lines.push("# PR Draft");
   if (branch) lines.push(`**Branch:** \`${branch}\``);
@@ -130,8 +129,8 @@ async function writeDraft(cfg, llm) {
   }
   const draft = await buildDraft(cfg, llm);
   try {
-    mkdirSync(dirname(resolved), { recursive: true });
-    writeFileSync(resolved, draft.body);
+    await mkdir(dirname(resolved), { recursive: true });
+    await writeFile(resolved, draft.body);
     state.draftsWritten += 1;
   } catch {
     state.draftErrors += 1;
@@ -257,8 +256,8 @@ var plugin = {
         const resolved = resolveProjectPath(cfg.outputPath);
         if (!resolved) return { ok: false, error: "outputPath resolves outside project" };
         try {
-          mkdirSync(dirname(resolved), { recursive: true });
-          writeFileSync(resolved, draft.body);
+          await mkdir(dirname(resolved), { recursive: true });
+          await writeFile(resolved, draft.body);
           state.draftsWritten += 1;
           return {
             ok: true,

package/dist/process-guard/index.d.ts

@@ -35,7 +35,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 declare const plugin: Plugin;
 export default plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/process-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/process-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAiD/C,QAAA,MAAM,MAAM,EAAE,MAoKb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/process-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAiDrD,QAAA,MAAM,MAAM,EAAE,MAoKb,CAAC;eAEa,MAAM"}

package/dist/prompt-firewall/index.d.ts

@@ -38,7 +38,7 @@
  *
  * @public
  */
-import type { Plugin } from '@wrongstack/core';
+import type { Plugin } from '@wrongstack/core/types';
 export interface Detection {
     kind: string;
     count: number;

package/dist/prompt-firewall/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompt-firewall/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AA+B1D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAcxE;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAWjG;AA0CD,KAAK,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEhD,UAAU,oBAAoB;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CA0B7D;AAgCD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompt-firewall/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AA2EhE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAcxE;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAWjG;AA0CD,KAAK,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEhD,UAAU,oBAAoB;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CA0B7D;AAgCD,QAAA,MAAM,MAAM,EAAE,MAkNb,CAAC;eAEa,MAAM"}