@wrongstack/plugins 0.295.0 → 0.296.2

package/dist/index.js

@@ -1,10 +1,10 @@
 // src/accessibility-auditor/index.ts
 import { readFile } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
+import { isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
 
 // src/runtime/index.ts
 import { execFile } from "node:child_process";
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
+import { basename, extname as extname2, isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
 
 // src/runtime/llm.ts
 function stripOuterMarkdownFence(text) {
@@ -52,6 +52,260 @@ async function runOptionalPluginLlm(request) {
   }
 }
 
+// src/runtime/local-bin.ts
+import { createRequire } from "node:module";
+import { delimiter, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { accessSync, constants, readFileSync } from "node:fs";
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+function resolveExecInvocation(command, args = []) {
+  const resolved = resolveWin32Command(command);
+  const normalizedResolved = resolved.toLowerCase();
+  const needsShell = process.platform === "win32" && (normalizedResolved.endsWith(".cmd") || normalizedResolved.endsWith(".bat"));
+  if (needsShell) {
+    const shim = buildWin32CmdShimInvocation(resolved, args);
+    return { cmd: shim.command, args: shim.args, windowsVerbatimArguments: true };
+  }
+  return { cmd: resolved, args: [...args], windowsVerbatimArguments: false };
+}
+function findOnPath(cmd) {
+  if (!cmd) return null;
+  const exists = (p) => {
+    try {
+      accessSync(p, constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  if (cmd.includes("/") || cmd.includes("\\")) {
+    return exists(cmd) ? resolve(cmd) : null;
+  }
+  const suffixes = process.platform === "win32" && extname(cmd) === "" ? (process.env["PATHEXT"] ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
+  for (const dir of (process.env["PATH"] ?? "").split(delimiter)) {
+    if (!dir) continue;
+    const base = join(dir, cmd);
+    for (const suffix of suffixes) {
+      const candidate = `${base}${suffix}`;
+      if (exists(candidate)) return candidate;
+    }
+  }
+  return null;
+}
+function isInside(parent, candidate) {
+  const rel = relative(parent, candidate);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel);
+}
+var binCache = /* @__PURE__ */ new Map();
+var BIN_CACHE_MAX = 64;
+var NEGATIVE_BIN_CACHE_TTL_MS = 5e3;
+function cachePut(key, value) {
+  while (binCache.size >= BIN_CACHE_MAX) {
+    const oldest = binCache.keys().next().value;
+    if (oldest === void 0) break;
+    binCache.delete(oldest);
+  }
+  binCache.set(key, { value, cachedAt: Date.now() });
+  return value;
+}
+function clearLocalBinCache() {
+  binCache.clear();
+}
+function resolveNodeBin(packageName, binName, cwd, extraArgs = []) {
+  const key = `${packageName}|${binName}|${cwd}`;
+  const cached = binCache.get(key);
+  if (cached !== void 0) {
+    if (cached.value !== null || Date.now() - cached.cachedAt < NEGATIVE_BIN_CACHE_TTL_MS) {
+      return cached.value === null ? null : { ...cached.value, args: [cached.value.entry, ...extraArgs] };
+    }
+    binCache.delete(key);
+  }
+  let resolved = null;
+  try {
+    const requireFromProject = createRequire(resolve(cwd, "package.json"));
+    const packagePath = requireFromProject.resolve(`${packageName}/package.json`);
+    const packageJson = JSON.parse(readFileSync(packagePath, "utf-8"));
+    const relativeBin = typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin?.[binName] ?? Object.values(packageJson.bin ?? {})[0];
+    if (relativeBin && !isAbsolute(relativeBin)) {
+      const packageDir = dirname(packagePath);
+      const entry = resolve(packageDir, relativeBin);
+      if (isInside(packageDir, entry)) {
+        resolved = { cmd: process.execPath, args: [entry], entry };
+      }
+    }
+  } catch {
+    resolved = null;
+  }
+  cachePut(key, resolved);
+  return resolved === null ? null : { ...resolved, args: [resolved.entry, ...extraArgs] };
+}
+function resolveFirstNodeBin(candidates, cwd) {
+  for (const c of candidates) {
+    const hit = resolveNodeBin(c.packageName, c.binName, cwd, c.args ?? []);
+    if (hit) return { ...hit, packageName: c.packageName, binName: c.binName };
+  }
+  return null;
+}
+
+// src/runtime/bounded-map.ts
+var BoundedMap = class {
+  map = /* @__PURE__ */ new Map();
+  max;
+  ttlMs;
+  now;
+  /** Entries dropped to stay under `max`. Surfaced by plugin health(). */
+  evictions = 0;
+  constructor(options) {
+    const normalizedMax = Math.floor(options.max);
+    this.max = Number.isSafeInteger(normalizedMax) ? Math.max(1, normalizedMax) : 1;
+    this.ttlMs = options.ttlMs;
+    this.now = options.now ?? Date.now;
+  }
+  expired(entry) {
+    return this.ttlMs !== void 0 && this.now() - entry.storedAt > this.ttlMs;
+  }
+  get(key) {
+    const entry = this.map.get(key);
+    if (entry === void 0) return void 0;
+    if (this.expired(entry)) {
+      this.map.delete(key);
+      return void 0;
+    }
+    this.map.delete(key);
+    this.map.set(key, entry);
+    return entry.value;
+  }
+  /**
+   * Read without promoting the key to most-recently-used. Use for
+   * diagnostics that must not perturb the eviction order.
+   */
+  peek(key) {
+    const entry = this.map.get(key);
+    if (entry === void 0 || this.expired(entry)) return void 0;
+    return entry.value;
+  }
+  has(key) {
+    const entry = this.map.get(key);
+    if (entry === void 0) return false;
+    if (this.expired(entry)) {
+      this.map.delete(key);
+      return false;
+    }
+    return true;
+  }
+  set(key, value) {
+    this.map.delete(key);
+    this.map.set(key, { value, storedAt: this.now() });
+    while (this.map.size > this.max) {
+      const coldest = this.map.keys().next().value;
+      if (coldest === void 0) break;
+      this.map.delete(coldest);
+      this.evictions += 1;
+    }
+    return this;
+  }
+  delete(key) {
+    return this.map.delete(key);
+  }
+  clear() {
+    this.map.clear();
+    this.evictions = 0;
+  }
+  get size() {
+    return this.map.size;
+  }
+  /** How many entries have been dropped to respect `max`, since the last clear. */
+  get evictionCount() {
+    return this.evictions;
+  }
+  /** Drop every expired entry. Cheap enough to call from a status tool. */
+  prune() {
+    if (this.ttlMs === void 0) return 0;
+    let removed = 0;
+    for (const [key, entry] of this.map) {
+      if (this.expired(entry)) {
+        this.map.delete(key);
+        removed += 1;
+      }
+    }
+    return removed;
+  }
+  /** Live (non-expired) entries, coldest first. */
+  *entries() {
+    for (const [key, entry] of this.map) {
+      if (!this.expired(entry)) yield [key, entry.value];
+    }
+  }
+  [Symbol.iterator]() {
+    return this.entries();
+  }
+};
+var BoundedSet = class {
+  inner;
+  constructor(options) {
+    this.inner = new BoundedMap(options);
+  }
+  has(value) {
+    return this.inner.has(value);
+  }
+  add(value) {
+    this.inner.set(value, true);
+    return this;
+  }
+  delete(value) {
+    return this.inner.delete(value);
+  }
+  clear() {
+    this.inner.clear();
+  }
+  get size() {
+    return this.inner.size;
+  }
+  /** How many entries have been dropped to respect `max`, since the last clear. */
+  get evictionCount() {
+    return this.inner.evictionCount;
+  }
+  *values() {
+    for (const [key] of this.inner) yield key;
+  }
+  [Symbol.iterator]() {
+    return this.values();
+  }
+};
+
+// src/runtime/safe-json.ts
+var UNSERIALIZABLE = "[unserializable]";
+function safeJsonStringify(value, indent) {
+  try {
+    const stack = [];
+    const out = JSON.stringify(
+      value,
+      function replacer(_key, val) {
+        if (typeof val === "bigint") return `${val.toString()}n`;
+        if (val === null || typeof val !== "object") return val;
+        while (stack.length > 0 && stack[stack.length - 1] !== this) stack.pop();
+        if (stack.includes(val)) return "[circular]";
+        stack.push(val);
+        return val;
+      },
+      indent
+    );
+    return out ?? String(value);
+  } catch {
+    return UNSERIALIZABLE;
+  }
+}
+
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var META_CHARS = /["'`;&|<>\r\n]/;
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
@@ -66,9 +320,9 @@ function safeSplit(command) {
 function withinProjectPath(projectRoot, candidate) {
   if (candidate.length === 0 || candidate.length > 4096) return false;
   if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+  const resolved = isAbsolute2(candidate) ? resolve2(candidate) : resolve2(projectRoot, candidate);
+  const rel = relative2(projectRoot, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
 }
 function everyFlagAllowed(allowed, args) {
   for (const arg of args) {
@@ -80,14 +334,14 @@ function everyFlagAllowed(allowed, args) {
 }
 function sanitizeRunnerPath(value, options = {}) {
   if (!value || hasLeadingDash(value)) return null;
-  const projectRoot = resolve(options.projectRoot ?? process.cwd());
+  const projectRoot = resolve2(options.projectRoot ?? process.cwd());
   if (!withinProjectPath(projectRoot, value)) return null;
-  return isAbsolute(value) ? resolve(value) : resolve(projectRoot, value);
+  return isAbsolute2(value) ? resolve2(value) : resolve2(projectRoot, value);
 }
 function resolveRunnerCommand(runtime, command, options = {}) {
   const tokens = safeSplit(command);
   if (!tokens || tokens.length === 0) return null;
-  const projectRoot = resolve(options.projectRoot ?? process.cwd());
+  const projectRoot = resolve2(options.projectRoot ?? process.cwd());
   const launcher = runtime.packageManager;
   const [head, second, ...rest] = tokens;
   if (!head) return null;
@@ -118,7 +372,7 @@ function resolveRunnerCommand(runtime, command, options = {}) {
       return { cmd: head, args: [second, exe, ...tail], display };
     }
   }
-  if (isAbsolute(head)) {
+  if (isAbsolute2(head)) {
     if (!withinProjectPath(projectRoot, head)) return null;
     const base = basename(head);
     if (base !== runtime.executable && base !== launcher) return null;
@@ -139,7 +393,7 @@ function runRunnerCommand(argv, options) {
     });
   }
   return new Promise((resolvePromise) => {
-    const projectRoot = resolve(options.projectRoot ?? process.cwd());
+    const projectRoot = resolve2(options.projectRoot ?? process.cwd());
     const trimmedCwd = options.cwd.trim();
     if (!withinProjectPath(projectRoot, trimmedCwd)) {
       resolvePromise({
@@ -157,21 +411,37 @@ function runRunnerCommand(argv, options) {
     const stderrChunks = [];
     let stdoutBytes = 0;
     let stderrBytes = 0;
-    options.signal?.addEventListener("abort", () => {
+    const onAbort = () => {
       timedOut = true;
-    }, { once: true });
+    };
+    let invocation;
+    try {
+      invocation = resolveExecInvocation(argv[0], argv.slice(1));
+    } catch (err) {
+      resolvePromise({
+        code: null,
+        stdout: "",
+        stderr: `runtime helper: ${err instanceof Error ? err.message : String(err)}`,
+        timedOut: false,
+        spawnError: true
+      });
+      return;
+    }
+    options.signal?.addEventListener("abort", onAbort, { once: true });
     const child = execFile(
-      argv[0],
-      argv.slice(1),
+      invocation.cmd,
+      invocation.args,
       {
         cwd: trimmedCwd,
         timeout: options.timeoutMs,
         signal: options.signal,
         maxBuffer: MAX_BUFFER_BYTES,
         windowsHide: true,
-        shell: false
+        shell: false,
+        ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       },
       (err) => {
+        options.signal?.removeEventListener("abort", onAbort);
         if (timedOut) {
           resolvePromise({
             code: null,
@@ -235,7 +505,7 @@ function runRunnerCommand(argv, options) {
 }
 function withinProject(p) {
   const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
+  return withinProjectPath(cwd, p) || relative2(cwd, p) === ".";
 }
 var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
 async function collectSourceFilesAsync(root, opts) {
@@ -264,7 +534,7 @@ async function collectSourceFilesAsync(root, opts) {
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
       if (excludeSet.has(entry.name)) continue;
-      const full = resolve(dir, entry.name);
+      const full = resolve2(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full, depth + 1);
       } else if (entry.isFile() && matchesExtension(full, opts.extensions)) {
@@ -276,7 +546,7 @@ async function collectSourceFilesAsync(root, opts) {
   return files;
 }
 function matchesExtension(p, exts) {
-  return exts.includes(extname(p).toLowerCase());
+  return exts.includes(extname2(p).toLowerCase());
 }
 
 // src/accessibility-auditor/index.ts
@@ -339,7 +609,7 @@ async function auditFile(filePath, projectRoot) {
   const idsByValue = /* @__PURE__ */ new Map();
   function add(line, rule, severity, message) {
     findings.push({
-      file: relative2(projectRoot, filePath),
+      file: relative3(projectRoot, filePath),
       line,
       rule,
       severity,
@@ -418,19 +688,27 @@ async function auditFile(filePath, projectRoot) {
 }
 async function auditPath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
+  const resolved = isAbsolute3(rawPath) ? resolve3(rawPath) : resolve3(root, rawPath);
   const exts = normalizeExtensions(cfg.includeExtensions);
   const files = await collectSourceFilesAsync(resolved, { extensions: exts });
   const findings = [];
+  let scannedFiles = 0;
+  let truncated = false;
   for (const file of files) {
     const fileFindings = await auditFile(file, root);
+    scannedFiles += 1;
     findings.push(...fileFindings);
-    if (findings.length >= cfg.maxFindings) break;
+    if (findings.length >= cfg.maxFindings) {
+      truncated = scannedFiles < files.length;
+      break;
+    }
   }
   return {
-    path: relative2(root, resolved),
+    path: relative3(root, resolved),
     findings: findings.slice(0, cfg.maxFindings),
-    fileCount: files.length
+    fileCount: files.length,
+    scannedFiles,
+    truncated
   };
 }
 function formatSummary(result) {
@@ -490,7 +768,7 @@ var plugin = {
     state.findingCount = 0;
     state.hookInvocationCount = 0;
     state.lastResult = null;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["accessibility-auditor"]);
     const hook = async (input) => {
       if (!cfg.enabled || !cfg.onWriteEdit) return;
@@ -559,6 +837,10 @@ var plugin = {
           ok: true,
           path: result.path,
           fileCount: result.fileCount,
+          scannedFiles: result.scannedFiles,
+          // Say so when the cap stopped the walk early: a partial scan
+          // that reports few findings must not read as a clean result.
+          truncated: result.truncated,
           findingCount: result.findings.length,
           findings: result.findings
         };
@@ -689,7 +971,7 @@ function buildBody(payload, cfg) {
   if (cfg.includeResult && payload.result !== void 0) {
     lines.push("## Result");
     lines.push("```json");
-    lines.push(JSON.stringify(payload.result, null, 2));
+    lines.push(safeJsonStringify(payload.result, 2));
     lines.push("```");
     lines.push("");
   }
@@ -931,9 +1213,9 @@ var agent_handoff_default = plugin2;
 
 // src/api-compatibility-gate/index.ts
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync as readFileSync2 } from "node:fs";
 import { readFile as readFile2 } from "node:fs/promises";
-import { basename as basename2, dirname, extname as extname2, isAbsolute as isAbsolute3, relative as relative3, resolve as resolve3 } from "node:path";
+import { basename as basename2, dirname as dirname2, extname as extname3, isAbsolute as isAbsolute4, relative as relative4, resolve as resolve4 } from "node:path";
 var API_VERSION3 = "^0.1.10";
 var state3 = {
   invocationCount: 0,
@@ -997,25 +1279,25 @@ function matchesAnyPattern(filePath, patterns) {
   return patterns.some((p) => patternToRegex(p).test(normalized));
 }
 function resolveToProjectRoot(filePath) {
-  if (isAbsolute3(filePath)) return resolve3(filePath);
-  return resolve3(process.cwd(), filePath);
+  if (isAbsolute4(filePath)) return resolve4(filePath);
+  return resolve4(process.cwd(), filePath);
 }
 function withinProject2(filePath) {
   if (typeof filePath !== "string" || filePath.length === 0 || filePath.length > 4096) return false;
   const resolved = resolveToProjectRoot(filePath);
-  const rel = relative3(process.cwd(), resolved);
+  const rel = relative4(process.cwd(), resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute3(rel)) return false;
+  if (isAbsolute4(rel)) return false;
   return true;
 }
 function isPackageEntryPoint(filePath) {
   const resolved = resolveToProjectRoot(filePath);
-  const dir = dirname(resolved);
-  const pkgPath = resolve3(dir, "package.json");
+  const dir = dirname2(resolved);
+  const pkgPath = resolve4(dir, "package.json");
   if (!existsSync(pkgPath)) return false;
   try {
-    const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
     const entries = [];
     if (pkg.main) entries.push(pkg.main);
     if (pkg.module) entries.push(pkg.module);
@@ -1033,9 +1315,9 @@ function isPackageEntryPoint(filePath) {
       }
     }
     for (const entry of entries) {
-      const entryResolved = resolve3(dir, entry);
+      const entryResolved = resolve4(dir, entry);
       if (entryResolved === resolved) return true;
-      if (basename2(dirname(entryResolved)) === basename2(dirname(resolved)) && basename2(entryResolved, extname2(entryResolved)) === basename2(resolved, extname2(resolved))) {
+      if (basename2(dirname2(entryResolved)) === basename2(dirname2(resolved)) && basename2(entryResolved, extname3(entryResolved)) === basename2(resolved, extname3(resolved))) {
         return true;
       }
     }
@@ -1086,7 +1368,7 @@ function extractExports(source) {
 }
 function readGitVersion(filePath) {
   const resolved = resolveToProjectRoot(filePath);
-  const relPath = normalizePath(relative3(process.cwd(), resolved));
+  const relPath = normalizePath(relative4(process.cwd(), resolved));
   return new Promise((resolveVersion) => {
     execFile2(
       "git",
@@ -1290,14 +1572,14 @@ var plugin3 = {
 var api_compatibility_gate_default = plugin3;
 
 // src/auto-doc/index.ts
-import { isAbsolute as isAbsolute4, relative as relative4, resolve as resolve4 } from "node:path";
+import { isAbsolute as isAbsolute5, relative as relative5, resolve as resolve5 } from "node:path";
 var AUTO_DOC_API_VERSION = "^0.1.10";
 function resolveProjectPath(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
-  const root = resolve4(cwd);
-  const resolved = isAbsolute4(rawPath) ? resolve4(rawPath) : resolve4(root, rawPath);
-  const rel = relative4(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute4(rel)) return resolved;
+  const root = resolve5(cwd);
+  const resolved = isAbsolute5(rawPath) ? resolve5(rawPath) : resolve5(root, rawPath);
+  const rel = relative5(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute5(rel)) return resolved;
   return null;
 }
 var state4 = {
@@ -1477,16 +1759,17 @@ async function runAutoDoc(input, api) {
       continue;
     }
     try {
-      const { readFileSync: readFileSync16, writeFileSync: writeFileSync5 } = await import("node:fs");
+      const { readFileSync: readFileSync17, writeFileSync: writeFileSync3 } = await import("node:fs");
       let content;
       try {
-        content = readFileSync16(safeFile, "utf-8");
+        content = readFileSync17(safeFile, "utf-8");
       } catch {
         api.log.warn(`auto-doc: could not read file ${safeFile}`);
         continue;
       }
       const entities = parseSource(content);
       let modified = content;
+      const beforeCount = results.length;
       for (const entity of entities) {
         if (!input.force && !needsDocComment(modified, entity)) continue;
         let doc = null;
@@ -1512,8 +1795,9 @@ async function runAutoDoc(input, api) {
         modified = injectDocComment(modified, entity, doc);
         results.push({ file: safeFile, entity: entity.name, source });
       }
-      if (!input.dry_run && results.length > 0) {
-        writeFileSync5(safeFile, modified, "utf-8");
+      const changedThisFile = results.length > beforeCount && modified !== content;
+      if (!input.dry_run && changedThisFile) {
+        writeFileSync3(safeFile, modified, "utf-8");
         api.log.info(`auto-doc: updated ${safeFile}`);
       }
     } catch (err) {
@@ -1828,7 +2112,7 @@ var plugin5 = {
 var auto_escalate_default = plugin5;
 
 // src/auto-i18n-extractor/index.ts
-import { readFileSync as readFileSync2 } from "node:fs";
+import { readFileSync as readFileSync3 } from "node:fs";
 var API_VERSION4 = "^0.1.10";
 var state6 = {
   filesScanned: 0,
@@ -1913,7 +2197,7 @@ function extractStrings(content, cfg) {
 }
 function readSourceFile(filePath) {
   try {
-    return readFileSync2(filePath, "utf-8");
+    return readFileSync3(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -2201,16 +2485,16 @@ function hasDisabledPluginEntry(raw) {
     return name === "branch-guard" || name === "@wrongstack/plugins/branch-guard";
   });
 }
-var branchCache = /* @__PURE__ */ new Map();
+var branchCache = new BoundedMap({ max: 64, ttlMs: 3e4 });
 function runGit(args, cwd, signal) {
-  return new Promise((resolve27, reject) => {
+  return new Promise((resolve28, reject) => {
     execFile3(
       "git",
       args,
       { encoding: "utf-8", timeout: 3e3, cwd, windowsHide: true, signal },
       (error, stdout) => {
         if (error) reject(error);
-        else resolve27(stdout);
+        else resolve28(stdout);
       }
     );
   });
@@ -2311,8 +2595,8 @@ var plugin7 = {
     state7.invocationCount = 0;
     state7.blockCount = 0;
     state7.warnCount = 0;
-    state7.hookUnregister = null;
-    state7.configUnregister = null;
+    state7.hookUnregister = releaseHandle(state7.hookUnregister);
+    state7.configUnregister = releaseHandle(state7.configUnregister);
     state7.lastBlock = null;
     branchCache.clear();
     let cfg = readHostConfig(api.config);
@@ -2458,11 +2742,11 @@ var plugin7 = {
 var branch_guard_default = plugin7;
 
 // src/changelog-writer/index.ts
-import { readFileSync as readFileSync3, writeFileSync } from "node:fs";
-import { isAbsolute as isAbsolute5, relative as relative5, resolve as resolve5 } from "node:path";
+import { readFileSync as readFileSync4, writeFileSync } from "node:fs";
+import { isAbsolute as isAbsolute6, relative as relative6, resolve as resolve6 } from "node:path";
 var state8 = {
   entries: [],
-  filesTouched: /* @__PURE__ */ new Set(),
+  filesTouched: new BoundedSet({ max: 2e3 }),
   commitsSeen: 0,
   writes: 0,
   polishes: 0,
@@ -2476,10 +2760,10 @@ var DEFAULTS6 = {
   maxEntries: 200
 };
 function resolveProjectPath2(rawPath, cwd = process.cwd()) {
-  const root = resolve5(cwd);
-  const resolved = isAbsolute5(rawPath) ? resolve5(rawPath) : resolve5(root, rawPath);
-  const rel = relative5(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute5(rel)) return resolved;
+  const root = resolve6(cwd);
+  const resolved = isAbsolute6(rawPath) ? resolve6(rawPath) : resolve6(root, rawPath);
+  const rel = relative6(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute6(rel)) return resolved;
   return null;
 }
 function readConfig7(raw) {
@@ -2623,7 +2907,7 @@ var plugin8 = {
   },
   setup(api) {
     state8.entries = [];
-    state8.filesTouched = /* @__PURE__ */ new Set();
+    state8.filesTouched = new BoundedSet({ max: 2e3 });
     state8.commitsSeen = 0;
     state8.writes = 0;
     for (const off of state8.eventUnsubscribers) {
@@ -2769,7 +3053,7 @@ var plugin8 = {
         );
         let existing = null;
         try {
-          existing = readFileSync3(cfg.filePath, "utf-8");
+          existing = readFileSync4(cfg.filePath, "utf-8");
         } catch {
           existing = null;
         }
@@ -2815,7 +3099,7 @@ var plugin8 = {
       filesTouched: state8.filesTouched.size
     };
     state8.entries = [];
-    state8.filesTouched = /* @__PURE__ */ new Set();
+    state8.filesTouched = new BoundedSet({ max: 2e3 });
     state8.commitsSeen = 0;
     state8.writes = 0;
     api.log.info("changelog-writer: teardown complete", { final });
@@ -2837,20 +3121,22 @@ var changelog_writer_default = plugin8;
 
 // src/checkpoint/index.ts
 import { mkdir, readFile as readFile3, stat, writeFile } from "node:fs/promises";
-import { dirname as dirname2, isAbsolute as isAbsolute6, relative as relative6, resolve as resolve6 } from "node:path";
+import { dirname as dirname3, isAbsolute as isAbsolute7, relative as relative7, resolve as resolve7 } from "node:path";
 var state9 = {
   snapshots: [],
   nextId: 1,
   captures: 0,
   restores: 0,
   skippedLarge: 0,
+  evictedForBytes: 0,
   hookUnregister: null
 };
 var DEFAULTS7 = {
   enabled: true,
   autoCapture: true,
   maxSnapshots: 50,
-  maxFileBytes: 1048576
+  maxFileBytes: 1048576,
+  maxTotalBytes: 64 * 1048576
 };
 function readConfig8(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS7 };
@@ -2859,14 +3145,15 @@ function readConfig8(raw) {
     enabled: r["enabled"] !== false,
     autoCapture: r["autoCapture"] !== false,
     maxSnapshots: typeof r["maxSnapshots"] === "number" && r["maxSnapshots"] >= 1 && r["maxSnapshots"] <= 500 ? r["maxSnapshots"] : DEFAULTS7.maxSnapshots,
+    maxTotalBytes: typeof r["maxTotalBytes"] === "number" && r["maxTotalBytes"] >= 1024 ? r["maxTotalBytes"] : DEFAULTS7.maxTotalBytes,
     maxFileBytes: typeof r["maxFileBytes"] === "number" && r["maxFileBytes"] >= 1024 ? r["maxFileBytes"] : DEFAULTS7.maxFileBytes
   };
 }
 function resolveProjectPath3(rawPath, cwd = process.cwd()) {
-  const root = resolve6(cwd);
-  const resolved = isAbsolute6(rawPath) ? resolve6(rawPath) : resolve6(root, rawPath);
-  const rel = relative6(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute6(rel)) return resolved;
+  const root = resolve7(cwd);
+  const resolved = isAbsolute7(rawPath) ? resolve7(rawPath) : resolve7(root, rawPath);
+  const rel = relative7(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute7(rel)) return resolved;
   return null;
 }
 function hashContent(s) {
@@ -2900,11 +3187,22 @@ async function captureFileForHook(path, maxBytes, signal) {
     return { path, content: null, bytes: 0 };
   }
 }
-function pushSnapshot(snapshot, maxSnapshots) {
+function retainedSnapshotBytes() {
+  let total = 0;
+  for (const snap of state9.snapshots) {
+    for (const f of snap.files) total += f.content === null ? 0 : f.content.length;
+  }
+  return total;
+}
+function pushSnapshot(snapshot, maxSnapshots, maxTotalBytes) {
   state9.snapshots.push(snapshot);
   if (state9.snapshots.length > maxSnapshots) {
     state9.snapshots.splice(0, state9.snapshots.length - maxSnapshots);
   }
+  while (state9.snapshots.length > 1 && retainedSnapshotBytes() > maxTotalBytes) {
+    state9.snapshots.shift();
+    state9.evictedForBytes += 1;
+  }
 }
 var plugin9 = {
   name: "checkpoint",
@@ -2943,6 +3241,7 @@ var plugin9 = {
     state9.captures = 0;
     state9.restores = 0;
     state9.skippedLarge = 0;
+    state9.evictedForBytes = 0;
     if (state9.hookUnregister) {
       try {
         state9.hookUnregister();
@@ -2970,7 +3269,8 @@ var plugin9 = {
             origin: `auto:${input.toolName ?? "unknown"}`,
             files: [captured]
           },
-          cfg.maxSnapshots
+          cfg.maxSnapshots,
+          cfg.maxTotalBytes
         );
         state9.captures += 1;
         api.metrics.counter("captures");
@@ -3048,7 +3348,7 @@ var plugin9 = {
           origin: input.label?.trim() ? `manual:${input.label.trim()}` : "manual",
           files
         };
-        pushSnapshot(snapshot, cfg.maxSnapshots);
+        pushSnapshot(snapshot, cfg.maxSnapshots, cfg.maxTotalBytes);
         state9.captures += 1;
         api.metrics.counter("captures");
         return {
@@ -3091,7 +3391,9 @@ var plugin9 = {
           counters: {
             captures: state9.captures,
             restores: state9.restores,
-            skippedLarge: state9.skippedLarge
+            skippedLarge: state9.skippedLarge,
+            retainedBytes: retainedSnapshotBytes(),
+            evictedForBytes: state9.evictedForBytes
           }
         };
       }
@@ -3134,7 +3436,7 @@ var plugin9 = {
             continue;
           }
           try {
-            await mkdir(dirname2(f.path), { recursive: true });
+            await mkdir(dirname3(f.path), { recursive: true });
             await writeFile(f.path, f.content);
             restored.push(f.path);
           } catch (err) {
@@ -3173,13 +3475,16 @@ var plugin9 = {
       captures: state9.captures,
       restores: state9.restores,
       skippedLarge: state9.skippedLarge,
-      snapshotsHeld: state9.snapshots.length
+      snapshotsHeld: state9.snapshots.length,
+      retainedBytes: retainedSnapshotBytes(),
+      evictedForBytes: state9.evictedForBytes
     };
     state9.snapshots = [];
     state9.nextId = 1;
     state9.captures = 0;
     state9.restores = 0;
     state9.skippedLarge = 0;
+    state9.evictedForBytes = 0;
     api.log.info("checkpoint: teardown complete", { final });
   },
   async health() {
@@ -3190,7 +3495,11 @@ var plugin9 = {
         snapshotsHeld: state9.snapshots.length,
         captures: state9.captures,
         restores: state9.restores,
-        skippedLarge: state9.skippedLarge
+        skippedLarge: state9.skippedLarge,
+        // Retained snapshot bytes: the count-based ring alone does not
+        // bound memory, so surface the number the byte budget acts on.
+        retainedBytes: retainedSnapshotBytes(),
+        evictedForBytes: state9.evictedForBytes
       }
     };
   }
@@ -3199,7 +3508,7 @@ var checkpoint_default = plugin9;
 
 // src/code-metrics/index.ts
 import { readFile as readFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, relative as relative7, resolve as resolve7 } from "node:path";
+import { isAbsolute as isAbsolute8, relative as relative8, resolve as resolve8 } from "node:path";
 var API_VERSION6 = "^0.1.10";
 var state10 = {
   measureCount: 0,
@@ -3229,7 +3538,7 @@ function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath(p) {
-  return toPosix(relative7(process.cwd(), p));
+  return toPosix(relative8(process.cwd(), p));
 }
 function countFunctions(content) {
   let count = 0;
@@ -3306,7 +3615,7 @@ function analyzeFile(filePath, content) {
 }
 async function measurePath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute7(rawPath) ? resolve7(rawPath) : resolve7(root, rawPath);
+  const resolved = isAbsolute8(rawPath) ? resolve8(rawPath) : resolve8(root, rawPath);
   const exts = normalizeExtensions2(cfg.extensions);
   const allFiles = await collectSourceFilesAsync(resolved, { extensions: exts });
   const files = allFiles.slice(0, cfg.maxFiles);
@@ -3369,7 +3678,7 @@ var plugin10 = {
       const exts = normalizeExtensions2(cfg.extensions);
       if (!matchesExtension(sourcePath, exts)) return;
       state10.hookInvocationCount += 1;
-      const resolved = resolve7(process.cwd(), sourcePath);
+      const resolved = resolve8(process.cwd(), sourcePath);
       let content;
       try {
         content = await readFile4(resolved, "utf-8");
@@ -3413,7 +3722,7 @@ var plugin10 = {
         state10.fileCount += result.files.length;
         return {
           ok: true,
-          path: relativePath(resolve7(process.cwd(), rawPath)),
+          path: relativePath(resolve8(process.cwd(), rawPath)),
           files: result.files,
           totalFiles: result.totalFiles,
           capped: result.totalFiles > cfg.maxFiles
@@ -3601,14 +3910,24 @@ function parseCommitMessage(message, cfg) {
     errors
   };
 }
+var GIT_MESSAGE_FLAG_RE = new RegExp(
+  [
+    // -m "…" | -m '…' | -m=… ; --message "…" | --message='…' | --message=…
+    String.raw`(?:^|\s)(?:-m|--message)(?:\s+|=)"([^"]*)"`,
+    String.raw`(?:^|\s)(?:-m|--message)(?:\s+|=)'([^']*)'`,
+    // Bare value: stops at whitespace or a shell separator.
+    String.raw`(?:^|\s)(?:-m|--message)(?:\s+|=)([^\s;&|"']+)`
+  ].join("|"),
+  "g"
+);
 function extractMessageFromBash(command) {
-  const flags = [];
-  const doubleQuoted = command.matchAll(/-m\s+"([^"]*)"/g);
-  const singleQuoted = command.matchAll(/-m\s+'([^']*)'/g);
-  for (const m of doubleQuoted) flags.push(m[1] ?? "");
-  for (const m of singleQuoted) flags.push(m[1] ?? "");
-  if (flags.length === 0) return null;
-  return flags.join("\n");
+  const parts = [];
+  for (const m of command.matchAll(GIT_MESSAGE_FLAG_RE)) {
+    const value = m[1] ?? m[2] ?? m[3];
+    if (value !== void 0) parts.push(value);
+  }
+  if (parts.length === 0) return null;
+  return parts.join("\n");
 }
 var plugin11 = {
   name: "commit-validator",
@@ -3667,7 +3986,7 @@ var plugin11 = {
     state11.invalidCount = 0;
     state11.suggestFixCount = 0;
     state11.suggestFixErrors = 0;
-    state11.hookUnregister = null;
+    state11.hookUnregister = releaseHandle(state11.hookUnregister);
     state11.lastValidation = null;
     const cfg = readConfig10(api.config.extensions?.["commit-validator"]);
     const hook = async (input) => {
@@ -3859,7 +4178,7 @@ Suggested rewrite (${suggest.model}):
 var commit_validator_default = plugin11;
 
 // src/config-validator/index.ts
-import { readFileSync as readFileSync4, statSync } from "node:fs";
+import { readFileSync as readFileSync5, statSync } from "node:fs";
 var state12 = {
   invocations: 0,
   filesChecked: 0,
@@ -4121,7 +4440,7 @@ var plugin12 = {
       let text;
       try {
         if (statSync(raw).size > cfg.maxFileBytes) return;
-        text = readFileSync4(raw, "utf-8");
+        text = readFileSync5(raw, "utf-8");
       } catch {
         return;
       }
@@ -4205,7 +4524,8 @@ var config_validator_default = plugin12;
 
 // src/context-pins/index.ts
 import * as fs from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute8, relative as relative8, resolve as resolve8 } from "node:path";
+import { dirname as dirname4, isAbsolute as isAbsolute9, relative as relative9, resolve as resolve9 } from "node:path";
+import { atomicWrite, ensureDir } from "@wrongstack/core/utils";
 var state13 = {
   pins: [],
   nextId: 1,
@@ -4222,10 +4542,10 @@ var DEFAULTS11 = {
 };
 function resolveProjectPath4(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return "";
-  const root = resolve8(cwd);
-  const resolved = isAbsolute8(rawPath) ? resolve8(rawPath) : resolve8(root, rawPath);
-  const rel = relative8(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute8(rel)) return resolved;
+  const root = resolve9(cwd);
+  const resolved = isAbsolute9(rawPath) ? resolve9(rawPath) : resolve9(root, rawPath);
+  const rel = relative9(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute9(rel)) return resolved;
   return null;
 }
 function readConfig12(raw) {
@@ -4252,11 +4572,11 @@ function loadPins(filePath) {
     return { pins: [], nextId: 1 };
   }
 }
-function persistPins(filePath) {
+async function persistPins(filePath) {
   if (!filePath) return true;
   try {
-    fs.mkdirSync(dirname3(filePath), { recursive: true });
-    fs.writeFileSync(filePath, JSON.stringify({ pins: state13.pins, nextId: state13.nextId }, null, 2));
+    await ensureDir(dirname4(filePath));
+    await atomicWrite(filePath, JSON.stringify({ pins: state13.pins, nextId: state13.nextId }, null, 2));
     return true;
   } catch {
     state13.persistErrors += 1;
@@ -4354,7 +4674,7 @@ var plugin13 = {
         state13.pins.push(pin);
         state13.adds += 1;
         api.metrics.counter("adds");
-        const persisted = persistPins(cfg.filePath);
+        const persisted = await persistPins(cfg.filePath);
         return { ok: true, pin, persisted, totalPins: state13.pins.length };
       }
     });
@@ -4380,7 +4700,7 @@ var plugin13 = {
         if (removed === 0) return { ok: false, error: `no pin matches "${key}"` };
         state13.removals += removed;
         api.metrics.counter("removals", removed);
-        const persisted = persistPins(cfg.filePath);
+        const persisted = await persistPins(cfg.filePath);
         return { ok: true, removed, persisted, totalPins: state13.pins.length };
       }
     });
@@ -4480,7 +4800,7 @@ function readCostTrackerConfig(raw) {
     mailboxDigestTo: typeof digestTo === "string" && digestTo.length > 0 ? digestTo : "cost-tracker"
   };
 }
-var modelKeyCache = /* @__PURE__ */ new Map();
+var modelKeyCache = new BoundedMap({ max: 256 });
 function estimateCost(model, promptTokens, completionTokens) {
   let key = modelKeyCache.get(model);
   if (!key) {
@@ -4904,6 +5224,7 @@ var plugin15 = {
         api.metrics.histogram("cron_job_interval_ms", job.intervalMs, { job: name });
         scheduleNextRun(name);
       }, delay);
+      timer.unref?.();
       state14.timers.set(name, timer);
     }
     function cancelJob(name) {
@@ -5089,7 +5410,7 @@ var cron_default = plugin15;
 
 // src/dead-code-detector/index.ts
 import { readdir, readFile as readFile5, stat as stat2 } from "node:fs/promises";
-import { extname as extname3, join, relative as relative9, resolve as resolve9 } from "node:path";
+import { extname as extname4, join as join2, relative as relative10, resolve as resolve10 } from "node:path";
 var API_VERSION10 = "^0.1.10";
 var state15 = {
   scanCount: 0,
@@ -5132,17 +5453,17 @@ async function gatherFiles(root, depth, cfg) {
     for (const entry of entries) {
       if (entry.isDirectory()) {
         if (remaining > 0 && !excludeSet.has(entry.name)) {
-          await walk(join(dir, entry.name), remaining - 1);
+          await walk(join2(dir, entry.name), remaining - 1);
         }
       } else if (entry.isFile()) {
-        const ext = extname3(entry.name).toLowerCase();
+        const ext = extname4(entry.name).toLowerCase();
         if (cfg.extensions.includes(ext)) {
-          files.push(join(dir, entry.name));
+          files.push(join2(dir, entry.name));
         }
       }
     }
   }
-  await walk(resolve9(root), depth);
+  await walk(resolve10(root), depth);
   return files;
 }
 function stripNoise(content) {
@@ -5197,7 +5518,10 @@ function findUnusedSymbols(files) {
   for (const file of files) {
     const fileExports = extractExports2(file.content, file.path);
     for (const exp of fileExports) {
-      const pattern = new RegExp(`\\b${escapeRegex(exp.identifier)}\\b`, "g");
+      const pattern = new RegExp(
+        `(?<![A-Za-z0-9_$])${escapeRegex(exp.identifier)}(?![A-Za-z0-9_$])`,
+        "g"
+      );
       let usedElsewhere = false;
       for (const other of files) {
         if (other.path === file.path) continue;
@@ -5231,11 +5555,11 @@ async function scan(root, depth, cfg) {
   return { findings: findUnusedSymbols(files), scannedFiles: files.length };
 }
 async function resolveScanRoot(rawPath) {
-  const resolved = resolve9(process.cwd(), rawPath);
+  const resolved = resolve10(process.cwd(), rawPath);
   try {
     const stats = await stat2(resolved);
     if (!stats.isDirectory()) {
-      return resolve9(resolved, "..");
+      return resolve10(resolved, "..");
     }
   } catch {
   }
@@ -5245,7 +5569,7 @@ function toPosix2(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath2(p) {
-  return toPosix2(relative9(process.cwd(), p));
+  return toPosix2(relative10(process.cwd(), p));
 }
 var plugin16 = {
   name: "dead-code-detector",
@@ -5316,8 +5640,8 @@ var plugin16 = {
         state15.errorCount += 1;
         return;
       }
-      const changedFile = resolve9(process.cwd(), sourcePath);
-      const relevant = result.findings.filter((f) => resolve9(f.file) === changedFile);
+      const changedFile = resolve10(process.cwd(), sourcePath);
+      const relevant = result.findings.filter((f) => resolve10(f.file) === changedFile);
       if (relevant.length === 0) {
         state15.missCount += 1;
         return;
@@ -5910,34 +6234,51 @@ function isInstallCommand(input) {
   const command = typeof ti["command"] === "string" ? ti["command"] : "";
   return INSTALL_RE2.test(command);
 }
+var LOCKFILE_MANAGERS = [
+  { file: "pnpm-lock.yaml", manager: "pnpm" },
+  { file: "bun.lockb", manager: "bun" },
+  { file: "bun.lock", manager: "bun" },
+  { file: "yarn.lock", manager: "yarn" },
+  { file: "package-lock.json", manager: "npm" }
+];
 async function detectManager() {
-  try {
-    await access("pnpm-lock.yaml");
-    return "pnpm";
-  } catch {
-    return "npm";
+  for (const { file, manager } of LOCKFILE_MANAGERS) {
+    try {
+      await access(file);
+      return manager;
+    } catch {
+    }
   }
+  return "npm";
 }
 async function runAudit(cfg) {
   const manager = await detectManager();
   const start = Date.now();
-  const stdout = await new Promise((resolve27) => {
+  let invocation;
+  try {
+    invocation = resolveExecInvocation(manager, ["audit", "--json"]);
+  } catch {
+    return null;
+  }
+  const stdout = await new Promise((resolve28) => {
     execFile4(
-      manager,
-      ["audit", "--json"],
+      invocation.cmd,
+      invocation.args,
       {
         encoding: "utf8",
         timeout: cfg.timeoutMs,
         cwd: process.cwd(),
         windowsHide: true,
-        maxBuffer: 10 * 1024 * 1024
+        maxBuffer: 10 * 1024 * 1024,
+        shell: false,
+        ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       },
       (error, output) => {
         if (error && error.killed) {
-          resolve27(null);
+          resolve28(null);
           return;
         }
-        resolve27(output);
+        resolve28(output);
       }
     );
   });
@@ -6160,7 +6501,7 @@ function contentHash(s) {
   }
   return h >>> 0;
 }
-var pathMemo = /* @__PURE__ */ new Map();
+var pathMemo = new BoundedMap({ max: 512 });
 function runGit2(args, cwd) {
   return new Promise((resolveCommand) => {
     execFile5(
@@ -6275,7 +6616,7 @@ var plugin19 = {
     state18.fallbackCount = 0;
     state18.throttledCount = 0;
     state18.duplicateContentCount = 0;
-    state18.hookUnregister = null;
+    state18.hookUnregister = releaseHandle(state18.hookUnregister);
     state18.lastSummary = null;
     pathMemo.clear();
     const cfg = readConfig16(api.config.extensions?.["diff-summary"]);
@@ -6422,7 +6763,7 @@ var plugin19 = {
 var diff_summary_default = plugin19;
 
 // src/doc-sync-guard/index.ts
-import { basename as basename3, extname as extname4 } from "node:path";
+import { basename as basename3, extname as extname5 } from "node:path";
 var API_VERSION13 = "^0.1.10";
 var state19 = {
   changedFiles: [],
@@ -6451,7 +6792,7 @@ function normalizeSlashes(p) {
   return p.replace(/\\/g, "/");
 }
 function isSourceFile(p, extensions) {
-  const ext = extname4(p).toLowerCase();
+  const ext = extname5(p).toLowerCase();
   return extensions.includes(ext);
 }
 function isPublicSource(p, extensions) {
@@ -6541,7 +6882,7 @@ var plugin20 = {
     state19.sourceWrites = 0;
     state19.docWrites = 0;
     state19.warningsIssued = 0;
-    state19.hookUnregister = null;
+    state19.hookUnregister = releaseHandle(state19.hookUnregister);
     const cfg = readConfig17(api.config.extensions?.["doc-sync-guard"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -6634,8 +6975,9 @@ var doc_sync_guard_default = plugin20;
 
 // src/duplicate-code-detector/index.ts
 import { readFile as readFile6, realpath, stat as stat3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, relative as relative10, resolve as resolve10, sep } from "node:path";
+import { isAbsolute as isAbsolute10, relative as relative11, resolve as resolve11, sep as sep2 } from "node:path";
 var API_VERSION14 = "^0.1.10";
+var HOOK_WARNING_COOLDOWN_MS = 6e4;
 var state20 = {
   scanCount: 0,
   findingCount: 0,
@@ -6643,7 +6985,7 @@ var state20 = {
   warningCount: 0,
   errorCount: 0,
   hookUnregister: null,
-  lastHookWarning: /* @__PURE__ */ new Map(),
+  lastHookWarning: new BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS }),
   fileIndex: /* @__PURE__ */ new Map(),
   inFlightFingerprintReads: /* @__PURE__ */ new Map(),
   indexFingerprintCount: 0,
@@ -6690,14 +7032,14 @@ function readConfig18(raw) {
   };
 }
 function isWithinRoot(projectRoot, candidate) {
-  const rel = relative10(projectRoot, candidate);
-  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute9(rel);
+  const rel = relative11(projectRoot, candidate);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep2}`) && !isAbsolute10(rel);
 }
 function toPosix3(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath3(p) {
-  return toPosix3(relative10(process.cwd(), p));
+  return toPosix3(relative11(process.cwd(), p));
 }
 function removeInlineComments(line) {
   return line.replace(/\/\/.*$/, "").replace(/\/\*[\s\S]*?\*\//, "");
@@ -6789,7 +7131,7 @@ function findDuplicates(files, minLines, maxFindings) {
 }
 async function scanPath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute9(rawPath) ? resolve10(rawPath) : resolve10(root, rawPath);
+  const resolved = isAbsolute10(rawPath) ? resolve11(rawPath) : resolve11(root, rawPath);
   const filePaths = await collectSourceFilesAsync(resolved, {
     extensions: cfg.extensions,
     excludeDirs: cfg.excludeDirs
@@ -6917,8 +7259,8 @@ var plugin21 = {
       const inp = input.toolInput ?? {};
       const sourcePath = inp["path"];
       if (!sourcePath || typeof sourcePath !== "string") return;
-      const projectRoot = resolve10(process.cwd());
-      const resolvedFile = isAbsolute9(sourcePath) ? resolve10(sourcePath) : resolve10(projectRoot, sourcePath);
+      const projectRoot = resolve11(process.cwd());
+      const resolvedFile = isAbsolute10(sourcePath) ? resolve11(sourcePath) : resolve11(projectRoot, sourcePath);
       if (!isWithinRoot(projectRoot, resolvedFile)) return;
       let changedFile;
       try {
@@ -6933,7 +7275,7 @@ var plugin21 = {
       state20.hookInvocationCount += 1;
       const now = Date.now();
       const lastWarning = state20.lastHookWarning.get(changedFile);
-      if (lastWarning !== void 0 && now - lastWarning < 6e4) return;
+      if (lastWarning !== void 0 && now - lastWarning < HOOK_WARNING_COOLDOWN_MS) return;
       const changedFps = await readCachedFingerprints(changedFile, cfg.minLines);
       if (changedFps === null) {
         state20.errorCount += 1;
@@ -6952,7 +7294,7 @@ var plugin21 = {
       }
       const matched = /* @__PURE__ */ new Set();
       for (const p of otherFilePaths) {
-        if (resolve10(p) === resolve10(changedFile)) continue;
+        if (resolve11(p) === resolve11(changedFile)) continue;
         const otherFps = await readCachedFingerprints(p, cfg.minLines);
         if (otherFps === null || otherFps.size === 0) continue;
         for (const fp of changedFps) {
@@ -6998,7 +7340,7 @@ var plugin21 = {
         state20.findingCount += result.findings.length;
         return {
           ok: true,
-          path: relativePath3(resolve10(process.cwd(), rawPath)),
+          path: relativePath3(resolve11(process.cwd(), rawPath)),
           scannedFiles: result.scannedFiles,
           minLines: cfg.minLines,
           findings: result.findings
@@ -7373,7 +7715,7 @@ var error_lens_default = plugin22;
 
 // src/feature-flag-tracker/index.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, relative as relative11, resolve as resolve11 } from "node:path";
+import { isAbsolute as isAbsolute11, relative as relative12, resolve as resolve12 } from "node:path";
 var API_VERSION15 = "^0.1.10";
 var state22 = {
   scanCount: 0,
@@ -7412,11 +7754,17 @@ function toPosix4(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath4(p) {
-  return toPosix4(relative11(process.cwd(), p));
+  return toPosix4(relative12(process.cwd(), p));
 }
 function compilePatterns(patterns) {
-  const sources = [...DEFAULT_PATTERNS2, ...patterns];
-  return sources.map((src) => new RegExp(src, "g"));
+  const out = [];
+  for (const src of [...DEFAULT_PATTERNS2, ...patterns]) {
+    try {
+      out.push(new RegExp(src, "g"));
+    } catch {
+    }
+  }
+  return out;
 }
 function scanFile(filePath, content, patterns, maxFindings) {
   const usages = [];
@@ -7442,20 +7790,31 @@ function scanFile(filePath, content, patterns, maxFindings) {
 }
 async function scanPath2(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute10(rawPath) ? resolve11(rawPath) : resolve11(root, rawPath);
+  const resolved = isAbsolute11(rawPath) ? resolve12(rawPath) : resolve12(root, rawPath);
   const exts = normalizeExtensions3(cfg.extensions);
   const files = await collectSourceFilesAsync(resolved, { extensions: exts });
   const patterns = compilePatterns(cfg.patterns);
   const usages = [];
+  let scannedFiles = 0;
+  let truncated = false;
   for (const p of files) {
     try {
       const content = await readFile7(p, "utf-8");
+      scannedFiles += 1;
       usages.push(...scanFile(p, content, patterns, cfg.maxFindings));
-      if (usages.length >= cfg.maxFindings) break;
+      if (usages.length >= cfg.maxFindings) {
+        truncated = scannedFiles < files.length;
+        break;
+      }
     } catch {
     }
   }
-  return { usages: usages.slice(0, cfg.maxFindings), scannedFiles: files.length };
+  return {
+    usages: usages.slice(0, cfg.maxFindings),
+    scannedFiles,
+    discoveredFiles: files.length,
+    truncated
+  };
 }
 var plugin23 = {
   name: "feature-flag-tracker",
@@ -7513,7 +7872,7 @@ var plugin23 = {
       const exts = normalizeExtensions3(cfg.extensions);
       if (!matchesExtension(sourcePath, exts)) return;
       state22.hookInvocationCount += 1;
-      const resolved = resolve11(process.cwd(), sourcePath);
+      const resolved = resolve12(process.cwd(), sourcePath);
       let content;
       try {
         content = await readFile7(resolved, "utf-8");
@@ -7562,8 +7921,12 @@ Make sure flag behavior is intentional and consider updating flag inventory/docs
         state22.flagCount += result.usages.length;
         return {
           ok: true,
-          path: relativePath4(resolve11(process.cwd(), rawPath)),
+          path: relativePath4(resolve12(process.cwd(), rawPath)),
           scannedFiles: result.scannedFiles,
+          discoveredFiles: result.discoveredFiles,
+          // Say so when the cap stopped the walk early: a partial scan
+          // that reports few findings must not read as a clean result.
+          truncated: result.truncated,
           usages: result.usages
         };
       }
@@ -7638,16 +8001,16 @@ var feature_flag_tracker_default = plugin23;
 
 // src/file-watcher/index.ts
 import { watch as fsWatch } from "node:fs";
-import { isAbsolute as isAbsolute11, join as join2, relative as relative12, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute12, join as join3, relative as relative13, resolve as resolve13 } from "node:path";
 var API_VERSION16 = "^0.1.10";
 function withinProject3(p) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
   const root = process.cwd();
-  const resolved = isAbsolute11(p) ? resolve12(p) : resolve12(root, p);
-  const rel = relative12(root, resolved);
+  const resolved = isAbsolute12(p) ? resolve13(p) : resolve13(root, p);
+  const rel = relative13(root, resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute11(rel)) return false;
+  if (isAbsolute12(rel)) return false;
   return true;
 }
 var watch_idCounter = 0;
@@ -7718,13 +8081,12 @@ var plugin24 = {
     function debounceEvent(key, fn, ms) {
       const existing = debounceTimers.get(key);
       if (existing) clearTimeout(existing);
-      debounceTimers.set(
-        key,
-        setTimeout(() => {
-          debounceTimers.delete(key);
-          fn();
-        }, ms)
-      );
+      const timer = setTimeout(() => {
+        debounceTimers.delete(key);
+        fn();
+      }, ms);
+      timer.unref?.();
+      debounceTimers.set(key, timer);
     }
     const autoIndex = api.config.extensions?.["file-watcher"]?.["autoIndex"] ?? false;
     const indexProjectRoot = api.config.extensions?.["file-watcher"]?.["indexProjectRoot"] ?? "";
@@ -7750,7 +8112,7 @@ var plugin24 = {
           if (handle.events.length > 0 && !(eventType === "change" ? handle.events.includes("change") : handle.events.includes("add") || handle.events.includes("delete"))) {
             return;
           }
-          const rawPath = filename.startsWith(dirPath) ? filename : join2(dirPath, filename);
+          const rawPath = filename.startsWith(dirPath) ? filename : join3(dirPath, filename);
           const fullPath = rawPath.replace(/\\/g, "/");
           const key = `${handle.id}:${fullPath}:${eventType}`;
           debounceEvent(
@@ -7970,7 +8332,8 @@ var file_watcher_default = plugin24;
 
 // src/format-on-save/index.ts
 import { execFile as execFile6 } from "node:child_process";
-import { access as access2, stat as stat4 } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { access as access2, readFile as readFile8, stat as stat4 } from "node:fs/promises";
 var API_VERSION17 = "^0.1.10";
 var state23 = {
   invocationCount: 0,
@@ -8006,7 +8369,7 @@ function readConfig21(raw) {
     skipTtlMs: typeof r["skipTtlMs"] === "number" && r["skipTtlMs"] >= 0 ? r["skipTtlMs"] : DEFAULTS20.skipTtlMs
   };
 }
-var recentlyCovered = /* @__PURE__ */ new Map();
+var recentlyCovered = new BoundedMap({ max: 256 });
 function clearRegistrations() {
   if (state23.hookUnregister) {
     try {
@@ -8029,6 +8392,55 @@ function evictExpired(ttlMs) {
     if (ts < cutoff) recentlyCovered.delete(path);
   }
 }
+var FORMATTERS = [
+  {
+    packageName: "@biomejs/biome",
+    binName: "biome",
+    writeArgs: ["format", "--write"],
+    label: "biome"
+  },
+  { packageName: "prettier", binName: "prettier", writeArgs: ["--write"], label: "prettier" },
+  { packageName: "dprint", binName: "dprint", writeArgs: ["fmt"], label: "dprint" }
+];
+var activeFormatter;
+function resetFormatter() {
+  activeFormatter = void 0;
+  clearLocalBinCache();
+}
+function resolveFormatter() {
+  if (activeFormatter !== void 0) return activeFormatter;
+  const cwd = process.cwd();
+  for (const f of FORMATTERS) {
+    const local = resolveNodeBinFor(f, cwd);
+    if (local) {
+      activeFormatter = local;
+      return local;
+    }
+  }
+  for (const f of FORMATTERS) {
+    const onPath = findOnPath(f.binName);
+    if (!onPath) continue;
+    activeFormatter = { cmd: onPath, args: [...f.writeArgs], label: f.label };
+    return activeFormatter;
+  }
+  activeFormatter = null;
+  return null;
+}
+function resolveNodeBinFor(f, cwd) {
+  const hit = resolveFirstNodeBin([{ packageName: f.packageName, binName: f.binName }], cwd);
+  if (!hit) return null;
+  return { cmd: hit.cmd, args: [...hit.args, ...f.writeArgs], label: f.label };
+}
+function activeFormatterLabel() {
+  return activeFormatter?.label ?? null;
+}
+async function sha256File(filePath) {
+  try {
+    return createHash("sha256").update(await readFile8(filePath)).digest("hex");
+  } catch {
+    return null;
+  }
+}
 async function formatFile(filePath, timeoutMs) {
   if (!withinProject(filePath)) return null;
   try {
@@ -8036,30 +8448,40 @@ async function formatFile(filePath, timeoutMs) {
   } catch {
     return null;
   }
+  const formatter = resolveFormatter();
+  if (!formatter) return null;
   let bytesBefore;
   try {
     bytesBefore = (await stat4(filePath)).size;
   } catch {
     return null;
   }
+  const hashBefore = await sha256File(filePath);
+  let invocation;
+  try {
+    invocation = resolveExecInvocation(formatter.cmd, [...formatter.args, filePath]);
+  } catch {
+    return null;
+  }
   try {
-    await new Promise((resolve27, reject) => {
+    await new Promise((resolve28, reject) => {
       execFile6(
-        "npx",
-        ["biome", "format", "--write", filePath],
+        invocation.cmd,
+        invocation.args,
         {
           encoding: "utf-8",
           timeout: timeoutMs,
           cwd: process.cwd(),
           windowsHide: true,
-          maxBuffer: 16 * 1024 * 1024
+          maxBuffer: 16 * 1024 * 1024,
+          ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
         },
         (err) => {
           if (err) {
             const e = err;
             if (e.killed) return reject(err);
           }
-          resolve27();
+          resolve28();
         }
       );
     });
@@ -8075,28 +8497,11 @@ async function formatFile(filePath, timeoutMs) {
   if (bytesAfter !== bytesBefore) {
     return { changed: true, bytesBefore, bytesAfter };
   }
-  try {
-    await new Promise((resolve27, reject) => {
-      execFile6(
-        "npx",
-        ["biome", "format", filePath],
-        {
-          encoding: "utf-8",
-          timeout: timeoutMs,
-          cwd: process.cwd(),
-          windowsHide: true,
-          maxBuffer: 16 * 1024 * 1024
-        },
-        (err) => {
-          if (err) return reject(err);
-          resolve27();
-        }
-      );
-    });
+  const hashAfter = await sha256File(filePath);
+  if (hashBefore === null || hashAfter === null) {
     return { changed: false, bytesBefore, bytesAfter };
-  } catch {
-    return { changed: true, bytesBefore, bytesAfter };
   }
+  return { changed: hashBefore !== hashAfter, bytesBefore, bytesAfter };
 }
 var plugin25 = {
   name: "format-on-save",
@@ -8142,32 +8547,18 @@ var plugin25 = {
     state23.lastResult = null;
     recentlyCovered.clear();
     const cfg = readConfig21(api.config.extensions?.["format-on-save"]);
-    let biomeAvailable = false;
-    try {
-      await new Promise((resolve27, reject) => {
-        execFile6(
-          "npx",
-          ["biome", "--version"],
-          {
-            encoding: "utf-8",
-            timeout: 5e3,
-            cwd: process.cwd(),
-            windowsHide: true
-          },
-          (err) => {
-            if (err) reject(err);
-            else resolve27();
-          }
-        );
-      });
-      biomeAvailable = true;
-      api.log.info("format-on-save: biome detected");
-    } catch {
-      biomeAvailable = false;
-      api.log.warn("format-on-save: biome not found \u2014 hook will be a no-op");
+    resetFormatter();
+    const formatter = resolveFormatter();
+    const formatterAvailable = formatter !== null;
+    if (formatter) {
+      api.log.info(`format-on-save: ${formatter.label} detected`);
+    } else {
+      api.log.warn(
+        "format-on-save: no formatter found (biome, prettier, dprint) \u2014 hook will be a no-op"
+      );
     }
     const hook = async (input) => {
-      if (!cfg.enabled || !biomeAvailable) return;
+      if (!cfg.enabled || !formatterAvailable) return;
       if (input.toolResult?.isError) return;
       const toolName = input.toolName ?? "";
       const inp = input.toolInput ?? {};
@@ -8228,7 +8619,7 @@ var plugin25 = {
     );
     api.tools.register({
       name: "format_on_save_status",
-      description: "Reports format-on-save state: biome availability, and per-session formatted/clean/error/skipped counters.",
+      description: "Reports format-on-save state: which formatter is active, and per-session formatted/clean/error/skipped counters.",
       inputSchema: { type: "object", properties: {} },
       permission: "auto",
       category: "Code Quality",
@@ -8237,7 +8628,14 @@ var plugin25 = {
         return {
           ok: true,
           enabled: cfg.enabled,
-          biomeAvailable,
+          formatterAvailable,
+          formatter: activeFormatterLabel(),
+          /**
+           * Back-compat alias for the pre-multi-formatter status shape.
+           * Now accurate rather than assumed: true only when the resolved
+           * formatter really is biome.
+           */
+          biomeAvailable: activeFormatterLabel() === "biome",
           timeoutMs: cfg.timeoutMs,
           skipWhenCoveredBy: cfg.skipWhenCoveredBy,
           skipTtlMs: cfg.skipTtlMs,
@@ -8255,11 +8653,13 @@ var plugin25 = {
     api.log.info("format-on-save plugin loaded", {
       version: "0.1.0",
       enabled: cfg.enabled,
-      biomeAvailable
+      formatterAvailable,
+      formatter: activeFormatterLabel()
     });
   },
   teardown(api) {
     clearRegistrations();
+    resetFormatter();
     const final = {
       invocations: state23.invocationCount,
       formatted: state23.formattedCount,
@@ -8329,10 +8729,63 @@ async function runGit3(args, cwd, timeoutMs = DEFAULT_GIT_TIMEOUT_MS) {
     );
   });
 }
+function unquotePorcelainPath(raw) {
+  if (!raw.startsWith('"') || !raw.endsWith('"') || raw.length < 2) return raw;
+  const inner = raw.slice(1, -1);
+  const bytes = [];
+  for (let i = 0; i < inner.length; i++) {
+    const ch = inner[i];
+    if (ch !== "\\") {
+      for (const b of Buffer.from(ch, "utf8")) bytes.push(b);
+      continue;
+    }
+    const next = inner[i + 1];
+    if (next === void 0) {
+      bytes.push(92);
+      break;
+    }
+    const simple = {
+      n: 10,
+      t: 9,
+      r: 13,
+      a: 7,
+      b: 8,
+      f: 12,
+      v: 11,
+      '"': 34,
+      "\\": 92
+    };
+    const mapped = simple[next];
+    if (mapped !== void 0) {
+      bytes.push(mapped);
+      i += 1;
+      continue;
+    }
+    const octal = /^[0-7]{1,3}/.exec(inner.slice(i + 1));
+    if (octal) {
+      bytes.push(Number.parseInt(octal[0], 8) & 255);
+      i += octal[0].length;
+      continue;
+    }
+    for (const b of Buffer.from(next, "utf8")) bytes.push(b);
+    i += 1;
+  }
+  return Buffer.from(bytes).toString("utf8");
+}
+function parsePorcelainLine(line) {
+  const body = line.slice(3);
+  if (!body) return null;
+  const status = line.slice(0, 2);
+  if (status.includes("R") || status.includes("C")) {
+    const arrow = body.lastIndexOf(" -> ");
+    if (arrow !== -1) return unquotePorcelainPath(body.slice(arrow + 4).trim());
+  }
+  return unquotePorcelainPath(body.trim());
+}
 async function getChangedFiles(cwd) {
   const output = await runGit3(["status", "--porcelain"], cwd);
   if (!output) return [];
-  return output.split("\n").filter((l) => l.trim()).map((l) => l.slice(3).trim());
+  return output.split("\n").filter((l) => l.trim()).map((l) => parsePorcelainLine(l)).filter((p) => p !== null && p.length > 0);
 }
 async function getStagedFiles(cwd) {
   const output = await runGit3(["diff", "--cached", "--name-only"], cwd);
@@ -8348,7 +8801,7 @@ async function stageFiles(files, cwd) {
     }
   });
   if (existing.length === 0) throw new Error("No files exist to stage");
-  await runGit3(["add", ...existing], cwd);
+  await runGit3(["add", "--", ...existing], cwd);
 }
 async function commitWithMessage(message, cwd) {
   return await runGit3(["commit", "-m", message], cwd, GIT_COMMIT_TIMEOUT_MS);
@@ -8401,7 +8854,7 @@ async function externalChangesSinceStage(cwd) {
     const unstaged = out.split("\n").filter((l) => l.trim()).filter((l) => {
       const idx = l[0] ?? " ";
       return idx === " " || idx === "?";
-    }).map((l) => l.slice(3).trim());
+    }).map((l) => parsePorcelainLine(l)).filter((p) => p !== null && p.length > 0);
     return unstaged.length > 0 ? unstaged : null;
   } catch {
     return null;
@@ -8768,7 +9221,7 @@ var git_autocommit_default = plugin26;
 // src/import-organizer/index.ts
 import { spawn } from "node:child_process";
 import { existsSync as existsSync3, statSync as statSync2 } from "node:fs";
-import { basename as basename4, isAbsolute as isAbsolute12 } from "node:path";
+import { basename as basename4, isAbsolute as isAbsolute13 } from "node:path";
 var ALLOWED_FIRST_TOKENS = /* @__PURE__ */ new Set([
   "npx",
   "pnpm",
@@ -8777,23 +9230,51 @@ var ALLOWED_FIRST_TOKENS = /* @__PURE__ */ new Set([
   "biome",
   "@biomejs/biome",
   "eslint",
+  "oxlint",
   "node"
   // Recognise a fully-qualified project-local path like
   // "./node_modules/.bin/biome"; basename check kicks in below.
 ]);
+var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "pnpm", "npm", "yarn"]);
+var LOCAL_BIN_PACKAGES = {
+  biome: { packageName: "@biomejs/biome", binName: "biome" },
+  "@biomejs/biome": { packageName: "@biomejs/biome", binName: "biome" },
+  eslint: { packageName: "eslint", binName: "eslint" },
+  oxlint: { packageName: "oxlint", binName: "oxlint" }
+};
+function resolveLocalToolCommand(tokens) {
+  if (tokens.length === 0) return null;
+  let i = 0;
+  if (PACKAGE_RUNNERS.has(tokens[i])) {
+    i++;
+    while (i < tokens.length && (tokens[i] === "exec" || tokens[i] === "dlx" || tokens[i] === "run")) {
+      i++;
+    }
+  }
+  const toolToken = tokens[i];
+  if (!toolToken) return null;
+  const rest = tokens.slice(i + 1);
+  const pkg = LOCAL_BIN_PACKAGES[toolToken];
+  if (!pkg) return null;
+  const local = resolveNodeBin(pkg.packageName, pkg.binName, process.cwd(), rest);
+  if (!local) return null;
+  return { cmd: local.cmd, args: local.args };
+}
 function resolveAllowedCommand(command) {
   const tokens = command.split(/\s+/).filter(Boolean);
   if (tokens.length === 0) return null;
   const head = tokens[0];
+  const local = ALLOWED_FIRST_TOKENS.has(head) ? resolveLocalToolCommand(tokens) : null;
+  if (local) return local;
   if (ALLOWED_FIRST_TOKENS.has(head)) {
     return { cmd: head, args: tokens.slice(1) };
   }
-  if (isAbsolute12(head)) {
+  if (isAbsolute13(head)) {
     if (!withinProject(head)) return null;
     const base = basename4(head);
     if (ALLOWED_FIRST_TOKENS.has(base)) return { cmd: head, args: tokens.slice(1) };
   }
-  if (!isAbsolute12(head) && withinProject(head)) {
+  if (!isAbsolute13(head) && withinProject(head)) {
     const base = basename4(head);
     if (ALLOWED_FIRST_TOKENS.has(base)) return { cmd: head, args: tokens.slice(1) };
   }
@@ -8828,40 +9309,70 @@ function readConfig22(raw) {
     notifyFormatOnSave: r["notifyFormatOnSave"] !== false
   };
 }
+var MAX_CAPTURE_BYTES = 4 * 1024 * 1024;
 function runCommand(command, args, timeoutMs, cwd) {
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let timedOut = false;
+    let settled = false;
+    const settle = (r) => {
+      if (settled) return;
+      settled = true;
+      resolve28(r);
+    };
     const stdoutChunks = [];
     const stderrChunks = [];
+    let stdoutBytes = 0;
+    let stderrBytes = 0;
+    const signal = AbortSignal.timeout(timeoutMs);
+    const onAbort = () => {
+      timedOut = true;
+      settle({ code: null, stdout: "", stderr: "", timedOut: true });
+    };
+    signal.addEventListener("abort", onAbort, { once: true });
     let child;
+    let invocation;
     try {
-      child = spawn(command, args, {
+      invocation = resolveExecInvocation(command, args);
+    } catch {
+      signal.removeEventListener("abort", onAbort);
+      settle({ code: 127, stdout: "", stderr: "", timedOut: false });
+      return;
+    }
+    try {
+      child = spawn(invocation.cmd, invocation.args, {
         cwd,
         stdio: ["ignore", "pipe", "pipe"],
-        signal: AbortSignal.timeout(timeoutMs)
+        signal,
+        windowsHide: true,
+        ...invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       });
     } catch {
-      resolve27({ code: 127, stdout: "", stderr: "", timedOut: false });
+      signal.removeEventListener("abort", onAbort);
+      settle({ code: 127, stdout: "", stderr: "", timedOut: false });
       return;
     }
-    child.stdout?.on("data", (c) => stdoutChunks.push(c));
-    child.stderr?.on("data", (c) => stderrChunks.push(c));
+    child.stdout?.on("data", (c) => {
+      stdoutBytes += c.length;
+      if (stdoutBytes <= MAX_CAPTURE_BYTES) stdoutChunks.push(c);
+    });
+    child.stderr?.on("data", (c) => {
+      stderrBytes += c.length;
+      if (stderrBytes <= MAX_CAPTURE_BYTES) stderrChunks.push(c);
+    });
     child.on("error", () => {
-      resolve27({ code: 127, stdout: "", stderr: "", timedOut: false });
+      signal.removeEventListener("abort", onAbort);
+      settle({ code: 127, stdout: "", stderr: "", timedOut: false });
     });
     child.on("close", (code) => {
+      signal.removeEventListener("abort", onAbort);
       if (timedOut) return;
-      resolve27({
+      settle({
         code,
         stdout: Buffer.concat(stdoutChunks).toString("utf-8"),
         stderr: Buffer.concat(stderrChunks).toString("utf-8"),
         timedOut: false
       });
     });
-    child.on("abort", () => {
-      timedOut = true;
-      resolve27({ code: null, stdout: "", stderr: "", timedOut: true });
-    });
   });
 }
 async function organizeImports(filePath, cfg, cwd) {
@@ -8945,7 +9456,7 @@ var plugin27 = {
     state24.organizedCount = 0;
     state24.cleanCount = 0;
     state24.errorCount = 0;
-    state24.hookUnregister = null;
+    state24.hookUnregister = releaseHandle(state24.hookUnregister);
     state24.lastResult = null;
     state24.probeComplete = false;
     state24.linterAvailable = false;
@@ -9152,12 +9663,19 @@ var PATTERNS = [
     re: /(?:\u200B|\u200C|\u200D|\u2060|\uFEFF){20,}/
   }
 ];
+var INVISIBLE_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g;
+function stripInvisible(text) {
+  INVISIBLE_CHARS.lastIndex = 0;
+  return text.replace(INVISIBLE_CHARS, "");
+}
 function scanForInjection(text) {
-  const hits = [];
+  const hits = /* @__PURE__ */ new Set();
+  const cleaned = stripInvisible(text);
   for (const p of PATTERNS) {
-    if (p.re.test(text)) hits.push(p.name);
+    if (p.re.test(text)) hits.add(p.name);
+    else if (cleaned !== text && p.re.test(cleaned)) hits.add(p.name);
   }
-  return hits;
+  return [...hits];
 }
 var plugin28 = {
   name: "injection-shield",
@@ -9292,8 +9810,8 @@ var plugin28 = {
 var injection_shield_default = plugin28;
 
 // src/interface-contract-guard/index.ts
-import { readFile as readFile8 } from "node:fs/promises";
-import { isAbsolute as isAbsolute13, relative as relative13, resolve as resolve13 } from "node:path";
+import { readFile as readFile9 } from "node:fs/promises";
+import { isAbsolute as isAbsolute14, relative as relative14, resolve as resolve14 } from "node:path";
 var API_VERSION20 = "^0.1.10";
 var state26 = {
   scanCount: 0,
@@ -9306,7 +9824,8 @@ var state26 = {
 var DEFAULTS23 = {
   enabled: false,
   extensions: [".ts", ".tsx"],
-  maxFindings: 50
+  maxFindings: 50,
+  maxFiles: 2e3
 };
 function readConfig24(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS23 };
@@ -9314,7 +9833,8 @@ function readConfig24(raw) {
   return {
     enabled: r["enabled"] !== false,
     extensions: Array.isArray(r["extensions"]) ? r["extensions"].filter((x) => typeof x === "string") : DEFAULTS23.extensions,
-    maxFindings: typeof r["maxFindings"] === "number" && r["maxFindings"] >= 1 && r["maxFindings"] <= 500 ? r["maxFindings"] : DEFAULTS23.maxFindings
+    maxFindings: typeof r["maxFindings"] === "number" && r["maxFindings"] >= 1 && r["maxFindings"] <= 500 ? r["maxFindings"] : DEFAULTS23.maxFindings,
+    maxFiles: typeof r["maxFiles"] === "number" && r["maxFiles"] >= 1 && r["maxFiles"] <= 5e4 ? Math.floor(r["maxFiles"]) : DEFAULTS23.maxFiles
   };
 }
 function normalizeExtensions4(exts) {
@@ -9324,53 +9844,66 @@ function toPosix5(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath5(p) {
-  return toPosix5(relative13(process.cwd(), p));
+  return toPosix5(relative14(process.cwd(), p));
 }
 var INTERFACE_RE = /(?:export\s+)?interface\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
 function extractInterfaceNames(content) {
   const names = [];
   INTERFACE_RE.lastIndex = 0;
+  let searchedUpTo = 0;
+  let line = 1;
   for (const m of content.matchAll(INTERFACE_RE)) {
-    names.push({ name: m[1], line: content.slice(0, m.index).split(/\r?\n/).length });
+    const index = m.index ?? 0;
+    for (let i = searchedUpTo; i < index; i++) {
+      if (content.charCodeAt(i) === 10) line += 1;
+    }
+    searchedUpTo = index;
+    names.push({ name: m[1], line });
   }
   return names;
 }
-function hasImplementer(name, contents) {
-  const implRe = new RegExp(`(?:implements|satisfies|\\bas)\\s+${name}\\b`, "g");
-  for (const content of contents) {
-    if (implRe.test(content)) return true;
+var IMPLEMENTER_RE = /(?:implements|satisfies|\bas)\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
+function collectImplementedNames(content, into) {
+  IMPLEMENTER_RE.lastIndex = 0;
+  for (const m of content.matchAll(IMPLEMENTER_RE)) {
+    const name = m[1];
+    if (name) into.add(name);
   }
-  return false;
 }
 async function scanPath3(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute13(rawPath) ? resolve13(rawPath) : resolve13(root, rawPath);
+  const resolved = isAbsolute14(rawPath) ? resolve14(rawPath) : resolve14(root, rawPath);
   const exts = normalizeExtensions4(cfg.extensions);
-  const files = await collectSourceFilesAsync(resolved, { extensions: exts });
-  const contents = [];
+  const allFiles = await collectSourceFilesAsync(resolved, { extensions: exts });
+  const files = allFiles.slice(0, cfg.maxFiles);
+  const implemented = /* @__PURE__ */ new Set();
+  const declarations = [];
+  let scannedFiles = 0;
   for (const p of files) {
+    let content;
     try {
-      contents.push({ path: p, content: await readFile8(p, "utf-8") });
+      content = await readFile9(p, "utf-8");
     } catch {
+      continue;
     }
-  }
-  const allContentStrings = contents.map((c) => c.content);
-  const findings = [];
-  for (const { path, content } of contents) {
+    scannedFiles += 1;
+    collectImplementedNames(content, implemented);
     for (const { name, line } of extractInterfaceNames(content)) {
-      if (!hasImplementer(name, allContentStrings)) {
-        findings.push({
-          interfaceName: name,
-          file: relativePath5(path),
-          line,
-          message: `interface "${name}" is declared but has no visible implementer`
-        });
-        if (findings.length >= cfg.maxFindings) break;
-      }
+      declarations.push({ name, line, file: p });
     }
+  }
+  const findings = [];
+  for (const { name, line, file } of declarations) {
+    if (implemented.has(name)) continue;
+    findings.push({
+      interfaceName: name,
+      file: relativePath5(file),
+      line,
+      message: `interface "${name}" is declared but has no visible implementer`
+    });
     if (findings.length >= cfg.maxFindings) break;
   }
-  return { findings, scannedFiles: contents.length };
+  return { findings, scannedFiles, truncated: allFiles.length > files.length };
 }
 var plugin29 = {
   name: "interface-contract-guard",
@@ -9389,6 +9922,13 @@ var plugin29 = {
         default: [".ts", ".tsx"],
         description: "File extensions to scan."
       },
+      maxFiles: {
+        type: "number",
+        minimum: 1,
+        maximum: 5e4,
+        default: 2e3,
+        description: "Upper bound on files read per scan."
+      },
       maxFindings: {
         type: "number",
         minimum: 1,
@@ -9422,10 +9962,10 @@ var plugin29 = {
       const exts = normalizeExtensions4(cfg.extensions);
       if (!matchesExtension(sourcePath, exts)) return;
       state26.hookInvocationCount += 1;
-      const resolved = resolve13(process.cwd(), sourcePath);
+      const resolved = resolve14(process.cwd(), sourcePath);
       let content;
       try {
-        content = await readFile8(resolved, "utf-8");
+        content = await readFile9(resolved, "utf-8");
       } catch {
         state26.errorCount += 1;
         return;
@@ -9470,9 +10010,16 @@ If you changed member shapes, search the project for implementers/\`satisfies\`/
         state26.findingCount += result.findings.length;
         return {
           ok: true,
-          path: relativePath5(resolve13(process.cwd(), rawPath)),
+          path: relativePath5(resolve14(process.cwd(), rawPath)),
           scannedFiles: result.scannedFiles,
-          findings: result.findings
+          findings: result.findings,
+          // Say so when the corpus was cut short. A partial scan that
+          // reports "no findings" is not the same as a clean result, and
+          // the caller has no other way to tell the difference.
+          truncated: result.truncated,
+          ...result.truncated ? {
+            note: `Scan stopped at the maxFiles limit (${cfg.maxFiles}); results are partial. Raise \`maxFiles\` or scan a narrower path for full coverage.`
+          } : {}
         };
       }
     });
@@ -9543,8 +10090,9 @@ If you changed member shapes, search the project for implementers/\`satisfies\`/
 var interface_contract_guard_default = plugin29;
 
 // src/knowledge-graph/index.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute14, relative as relative14, resolve as resolve14 } from "node:path";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { dirname as dirname5, isAbsolute as isAbsolute15, relative as relative15, resolve as resolve15 } from "node:path";
+import { atomicWrite as atomicWrite2, ensureDir as ensureDir2 } from "@wrongstack/core/utils";
 var API_VERSION21 = "^0.1.10";
 var state27 = {
   facts: [],
@@ -9565,10 +10113,10 @@ var DEFAULTS24 = {
 };
 function resolveProjectPath5(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
-  const root = resolve14(cwd);
-  const resolved = isAbsolute14(rawPath) ? resolve14(rawPath) : resolve14(root, rawPath);
-  const rel = relative14(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute14(rel)) return resolved;
+  const root = resolve15(cwd);
+  const resolved = isAbsolute15(rawPath) ? resolve15(rawPath) : resolve15(root, rawPath);
+  const rel = relative15(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute15(rel)) return resolved;
   return null;
 }
 function readConfig25(raw) {
@@ -9586,7 +10134,7 @@ function readConfig25(raw) {
 function loadFacts(filePath) {
   if (!filePath) return { facts: [], nextId: 1 };
   try {
-    const raw = JSON.parse(readFileSync6(filePath, "utf-8"));
+    const raw = JSON.parse(readFileSync7(filePath, "utf-8"));
     const facts = Array.isArray(raw.facts) ? raw.facts.filter(
       (f) => !!f && typeof f === "object" && typeof f.id === "string" && typeof f.subject === "string" && typeof f.relation === "string" && typeof f.object === "string"
     ) : [];
@@ -9596,11 +10144,11 @@ function loadFacts(filePath) {
     return { facts: [], nextId: 1 };
   }
 }
-function persistFacts(filePath) {
+async function persistFacts(filePath) {
   if (!filePath) return true;
   try {
-    mkdirSync2(dirname4(filePath), { recursive: true });
-    writeFileSync3(
+    await ensureDir2(dirname5(filePath));
+    await atomicWrite2(
       filePath,
       JSON.stringify({ facts: state27.facts, nextId: state27.nextId }, null, 2)
     );
@@ -9731,7 +10279,7 @@ var plugin30 = {
         state27.facts.push(fact);
         state27.adds += 1;
         api.metrics.counter("adds");
-        const persisted = persistFacts(resolved);
+        const persisted = await persistFacts(resolved);
         return { ok: true, fact, persisted, totalFacts: state27.facts.length };
       }
     });
@@ -9791,7 +10339,7 @@ var plugin30 = {
         if (removed === 0) return { ok: false, error: `no fact matches "${input.id}"` };
         state27.removals += removed;
         api.metrics.counter("removals", removed);
-        const persisted = persistFacts(resolved);
+        const persisted = await persistFacts(resolved);
         return { ok: true, removed, persisted, totalFacts: state27.facts.length };
       }
     });
@@ -9866,8 +10414,8 @@ var plugin30 = {
 var knowledge_graph_default = plugin30;
 
 // src/license-audit-gate/index.ts
-import { readFileSync as readFileSync7 } from "node:fs";
-import { resolve as resolve15 } from "node:path";
+import { readFileSync as readFileSync8 } from "node:fs";
+import { resolve as resolve16 } from "node:path";
 var API_VERSION22 = "^0.1.10";
 var state28 = {
   invocations: 0,
@@ -9943,8 +10491,8 @@ function auditPackages(names, allowedLicenses) {
   for (const name of names) {
     let licenses = [];
     try {
-      const pkgPath = resolve15("node_modules", name, "package.json");
-      const raw = JSON.parse(readFileSync7(pkgPath, "utf-8"));
+      const pkgPath = resolve16("node_modules", name, "package.json");
+      const raw = JSON.parse(readFileSync8(pkgPath, "utf-8"));
       licenses = extractLicenseStrings(raw);
     } catch {
       errors.push(name);
@@ -10124,11 +10672,11 @@ var license_audit_gate_default = plugin31;
 
 // src/lint-gate/index.ts
 import { execFile as execFile8 } from "node:child_process";
-import { readFileSync as readFileSync8 } from "node:fs";
-import { mkdtemp, readFile as readFile9, rm, writeFile as writeFile2 } from "node:fs/promises";
-import { createRequire } from "node:module";
+import { readFileSync as readFileSync9 } from "node:fs";
+import { mkdtemp, readFile as readFile10, rm, writeFile as writeFile2 } from "node:fs/promises";
+import { createRequire as createRequire2 } from "node:module";
 import { tmpdir } from "node:os";
-import { dirname as dirname5, isAbsolute as isAbsolute15, join as join3, relative as relative15, resolve as resolve16, sep as sep2 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute16, join as join4, relative as relative16, resolve as resolve17, sep as sep3 } from "node:path";
 var API_VERSION23 = "^0.1.10";
 var state29 = {
   /** Total PreToolUse invocations. */
@@ -10166,22 +10714,22 @@ var LINTER_PACKAGES = {
   biome: "@biomejs/biome",
   eslint: "eslint"
 };
-var linterCache = /* @__PURE__ */ new Map();
-function isInside(parent, candidate) {
-  const rel = relative15(parent, candidate);
-  return rel === "" || !rel.startsWith(`..${sep2}`) && rel !== ".." && !isAbsolute15(rel);
+var linterCache = new BoundedMap({ max: 32, ttlMs: 3e5 });
+function isInside2(parent, candidate) {
+  const rel = relative16(parent, candidate);
+  return rel === "" || !rel.startsWith(`..${sep3}`) && rel !== ".." && !isAbsolute16(rel);
 }
 function resolveLocalLinter(name, cwd) {
   try {
     const packageName = LINTER_PACKAGES[name];
-    const requireFromProject = createRequire(resolve16(cwd, "package.json"));
+    const requireFromProject = createRequire2(resolve17(cwd, "package.json"));
     const packagePath = requireFromProject.resolve(`${packageName}/package.json`);
-    const packageJson = JSON.parse(readFileSync8(packagePath, "utf-8"));
+    const packageJson = JSON.parse(readFileSync9(packagePath, "utf-8"));
     const relativeBin = typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin?.[name] ?? Object.values(packageJson.bin ?? {})[0];
-    if (!relativeBin || isAbsolute15(relativeBin)) return null;
-    const packageDir = dirname5(packagePath);
-    const entry = resolve16(packageDir, relativeBin);
-    if (!isInside(packageDir, entry)) return null;
+    if (!relativeBin || isAbsolute16(relativeBin)) return null;
+    const packageDir = dirname6(packagePath);
+    const entry = resolve17(packageDir, relativeBin);
+    if (!isInside2(packageDir, entry)) return null;
     return {
       cmd: process.execPath,
       args: name === "biome" ? [entry, "check", "--reporter=json"] : [entry, "--format=json"],
@@ -10232,8 +10780,8 @@ async function detectLinter(requested, cwd) {
 }
 async function lintContent(content, filePath, linter, timeoutMs, cwd, signal) {
   const ext = filePath.includes(".") ? filePath.slice(filePath.lastIndexOf(".")) : ".ts";
-  const tmpDir = await mkdtemp(join3(tmpdir(), "lint-gate-"));
-  const tmpFile = join3(tmpDir, `input${ext}`);
+  const tmpDir = await mkdtemp(join4(tmpdir(), "lint-gate-"));
+  const tmpFile = join4(tmpDir, `input${ext}`);
   try {
     await writeFile2(tmpFile, content, "utf-8");
     const fullArgs = [...linter.args, tmpFile];
@@ -10250,14 +10798,14 @@ async function lintContent(content, filePath, linter, timeoutMs, cwd, signal) {
 }
 async function lintAndFix(content, filePath, linter, timeoutMs, cwd, signal) {
   const ext = filePath.includes(".") ? filePath.slice(filePath.lastIndexOf(".")) : ".ts";
-  const tmpDir = await mkdtemp(join3(tmpdir(), "lint-gate-fix-"));
-  const tmpFile = join3(tmpDir, `input${ext}`);
+  const tmpDir = await mkdtemp(join4(tmpdir(), "lint-gate-fix-"));
+  const tmpFile = join4(tmpDir, `input${ext}`);
   try {
     await writeFile2(tmpFile, content, "utf-8");
     const fixArgs = linter.name === "biome" ? [linter.args[0], "check", "--write", tmpFile] : [linter.args[0], "--fix", tmpFile];
     await runCommand2(linter.cmd, fixArgs, timeoutMs, cwd, signal);
     if (signal.aborted) throw signal.reason;
-    return await readFile9(tmpFile, "utf-8");
+    return await readFile10(tmpFile, "utf-8");
   } catch {
     if (signal.aborted) throw signal.reason;
     return content;
@@ -10353,11 +10901,11 @@ var plugin32 = {
     state29.hitCount = 0;
     state29.fixCount = 0;
     state29.linterErrorCount = 0;
-    state29.hookUnregister = null;
+    state29.hookUnregister = releaseHandle(state29.hookUnregister);
     state29.lastResult = null;
     linterCache.clear();
     const cfg = readConfig27(api.config.extensions?.["lint-gate"]);
-    const cwd = resolve16(api.config.cwd ?? process.cwd());
+    const cwd = resolve17(api.config.cwd ?? process.cwd());
     const linterReady = detectLinter(cfg.linter, cwd).then((linter) => {
       if (!linter) {
         api.log.warn("lint-gate: no linter found (biome or eslint) \u2014 hook will be a no-op", {
@@ -10386,7 +10934,7 @@ var plugin32 = {
         const newStr = inp["new_string"];
         if (typeof oldStr !== "string" || typeof newStr !== "string") return;
         try {
-          const current = await readFile9(filePath, "utf-8");
+          const current = await readFile10(filePath, "utf-8");
           content = applyEdit(current, oldStr, newStr);
         } catch {
           return;
@@ -10591,7 +11139,7 @@ ${summary}${truncated}`
 var lint_gate_default = plugin32;
 
 // src/llm-cache/index.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var state30 = {
   cache: /* @__PURE__ */ new Map(),
   hits: 0,
@@ -10641,7 +11189,7 @@ function fingerprintRequest(request) {
     topK: request["topK"] ?? null,
     topP: request["topP"] ?? null
   };
-  const fingerprint2 = createHash("sha256").update(JSON.stringify(subset)).digest("hex");
+  const fingerprint2 = createHash2("sha256").update(JSON.stringify(subset)).digest("hex");
   fingerprintCache.set(request, fingerprint2);
   return fingerprint2;
 }
@@ -10920,16 +11468,26 @@ function canonicalize(value) {
     return String(value);
   }
 }
-function sortKeys(value) {
-  if (Array.isArray(value)) return value.map(sortKeys);
-  if (value && typeof value === "object") {
+var CANONICALIZE_MAX_DEPTH = 12;
+function sortKeys(value, depth = 0, seen = /* @__PURE__ */ new Set()) {
+  if (value === null || typeof value !== "object") return value;
+  if (seen.has(value)) return "[circular]";
+  if (depth >= CANONICALIZE_MAX_DEPTH) {
+    return Array.isArray(value) ? `[array:${value.length}]` : "[deep-object]";
+  }
+  seen.add(value);
+  try {
+    if (Array.isArray(value)) {
+      return value.map((v) => sortKeys(v, depth + 1, seen));
+    }
     const out = {};
     for (const key of Object.keys(value).sort()) {
-      out[key] = sortKeys(value[key]);
+      out[key] = sortKeys(value[key], depth + 1, seen);
     }
     return out;
+  } finally {
+    seen.delete(value);
   }
-  return value;
 }
 function fingerprint(toolName, toolInput) {
   return `${toolName}\0${canonicalize(toolInput)}`;
@@ -10955,7 +11513,7 @@ function hashString2(value) {
 }
 async function gitDiffFingerprint(cwd, signal) {
   try {
-    const diff = await new Promise((resolve27, reject) => {
+    const diff = await new Promise((resolve28, reject) => {
       execFile9(
         "git",
         ["diff", "--no-ext-diff", "--"],
@@ -10972,7 +11530,7 @@ async function gitDiffFingerprint(cwd, signal) {
         },
         (error, stdout) => {
           if (error) reject(error);
-          else resolve27(stdout);
+          else resolve28(stdout);
         }
       );
     });
@@ -11322,7 +11880,7 @@ var plugin34 = {
 var loop_breaker_default = plugin34;
 
 // src/migration-planner/index.ts
-import { existsSync as existsSync4, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync10 } from "node:fs";
 var API_VERSION24 = "^0.1.10";
 var state32 = {
   plansGenerated: 0,
@@ -11362,7 +11920,7 @@ function readChangelog(packageName, cfg) {
     if (!withinProject(candidate)) continue;
     if (existsSync4(candidate)) {
       try {
-        const content = readFileSync9(candidate, "utf-8");
+        const content = readFileSync10(candidate, "utf-8");
         return { source: candidate, content: content.slice(0, cfg.maxChars) };
       } catch {
       }
@@ -11570,7 +12128,7 @@ var plugin35 = {
     state32.llmAnalysisCount = 0;
     state32.llmFallbackCount = 0;
     state32.lastPlan = null;
-    state32.hookUnregister = null;
+    state32.hookUnregister = releaseHandle(state32.hookUnregister);
     const cfg = readConfig30(api.config.extensions?.["migration-planner"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -12189,13 +12747,21 @@ async function deliver(event, payload) {
   }
   const result = await deliverViaChannel(ch, event, {
     title: typeof payload.title === "string" ? payload.title : event,
-    body: typeof payload.message === "string" ? payload.message : typeof payload.error === "string" ? payload.error : JSON.stringify(payload),
+    body: typeof payload.message === "string" ? payload.message : typeof payload.error === "string" ? payload.error : safeJsonStringify(payload),
     level: event === "tool.error" || event === "budget.threshold" ? "warning" : "info",
     source: event,
     metadata: payload
   });
   return result.ok;
 }
+function deliverDetached(event, payload) {
+  deliver(event, payload).catch((err) => {
+    _pluginLog?.warn("notify-hub: notification delivery failed", {
+      event,
+      error: err instanceof Error ? err.message : String(err)
+    });
+  });
+}
 async function deliverViaChannel(ch, event, msg) {
   const result = await ch.deliver(msg);
   if (result.ok) {
@@ -12304,7 +12870,7 @@ var plugin37 = {
     }
     if (active && cfg.events.includes("session.stop")) {
       const stopHook = (input) => {
-        void deliver("session.stop", {
+        deliverDetached("session.stop", {
           sessionId: input.sessionId ?? null,
           cwd: input.cwd ?? null
         });
@@ -12315,7 +12881,7 @@ var plugin37 = {
       const off = api.onPattern("tool.*", (eventName, payload) => {
         if (!/error|failed/.test(eventName)) return;
         const p = payload;
-        void deliver("tool.error", {
+        deliverDetached("tool.error", {
           tool: p?.tool ?? p?.name ?? "unknown",
           busEvent: eventName,
           error: truncateText(
@@ -12329,7 +12895,7 @@ var plugin37 = {
     if (active && cfg.events.includes("budget.threshold")) {
       const off = api.onPattern("budget.*", (eventName, payload) => {
         if (!eventName.includes("threshold")) return;
-        void deliver("budget.threshold", { busEvent: eventName, detail: payload });
+        deliverDetached("budget.threshold", { busEvent: eventName, detail: payload });
       });
       state34.eventUnsubscribers.push(off);
     }
@@ -12692,8 +13258,8 @@ var plugin38 = {
 var path_guard_default = plugin38;
 
 // src/performance-regression-gate/index.ts
-import { existsSync as existsSync5, readFileSync as readFileSync10 } from "node:fs";
-import { isAbsolute as isAbsolute16, relative as relative16, resolve as resolve17 } from "node:path";
+import { existsSync as existsSync5, readFileSync as readFileSync11 } from "node:fs";
+import { isAbsolute as isAbsolute17, relative as relative17, resolve as resolve18 } from "node:path";
 var API_VERSION25 = "^0.1.10";
 var state36 = {
   invocationCount: 0,
@@ -12718,18 +13284,18 @@ function readConfig34(raw) {
 }
 function withinProject4(p, cwd = process.cwd()) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
-  const root = resolve17(cwd);
-  const resolved = isAbsolute16(p) ? resolve17(p) : resolve17(root, p);
-  const rel = relative16(root, resolved);
+  const root = resolve18(cwd);
+  const resolved = isAbsolute17(p) ? resolve18(p) : resolve18(root, p);
+  const rel = relative17(root, resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute16(rel)) return false;
+  if (isAbsolute17(rel)) return false;
   return true;
 }
 function resolveProjectPath6(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
-  const root = resolve17(cwd);
-  const resolved = isAbsolute16(rawPath) ? resolve17(rawPath) : resolve17(root, rawPath);
+  const root = resolve18(cwd);
+  const resolved = isAbsolute17(rawPath) ? resolve18(rawPath) : resolve18(root, rawPath);
   if (!withinProject4(resolved, cwd)) return null;
   return resolved;
 }
@@ -12760,7 +13326,7 @@ function flattenResults(results) {
 function loadResults(path) {
   if (!path || !existsSync5(path)) return null;
   try {
-    const raw = JSON.parse(readFileSync10(path, "utf-8"));
+    const raw = JSON.parse(readFileSync11(path, "utf-8"));
     return raw;
   } catch {
     return null;
@@ -13144,7 +13710,7 @@ var plugin_stack_observer_default = PLUGIN;
 // src/pr-drafter/index.ts
 import { execFile as execFile10 } from "node:child_process";
 import { mkdir as mkdir2, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname6, isAbsolute as isAbsolute17, relative as relative17, resolve as resolve18 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute18, relative as relative18, resolve as resolve19 } from "node:path";
 var API_VERSION26 = "^0.1.10";
 var state38 = {
   commits: [],
@@ -13183,10 +13749,10 @@ function readConfig36(raw) {
 }
 function resolveProjectPath7(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
-  const root = resolve18(cwd);
-  const resolved = isAbsolute17(rawPath) ? resolve18(rawPath) : resolve18(root, rawPath);
-  const rel = relative17(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute17(rel)) return resolved;
+  const root = resolve19(cwd);
+  const resolved = isAbsolute18(rawPath) ? resolve19(rawPath) : resolve19(root, rawPath);
+  const rel = relative18(root, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute18(rel)) return resolved;
   return null;
 }
 function runGit4(args, timeout) {
@@ -13272,7 +13838,7 @@ async function writeDraft(cfg, llm) {
   }
   const draft = await buildDraft(cfg, llm);
   try {
-    await mkdir2(dirname6(resolved), { recursive: true });
+    await mkdir2(dirname7(resolved), { recursive: true });
     await writeFile3(resolved, draft.body);
     state38.draftsWritten += 1;
   } catch {
@@ -13336,7 +13902,7 @@ var plugin40 = {
     state38.draftsWritten = 0;
     state38.draftErrors = 0;
     state38.stopInvocations = 0;
-    state38.stopHookUnregister = null;
+    state38.stopHookUnregister = releaseHandle(state38.stopHookUnregister);
     for (const off of state38.eventUnsubscribers) {
       try {
         off();
@@ -13399,7 +13965,7 @@ var plugin40 = {
         const resolved = resolveProjectPath7(cfg.outputPath);
         if (!resolved) return { ok: false, error: "outputPath resolves outside project" };
         try {
-          await mkdir2(dirname6(resolved), { recursive: true });
+          await mkdir2(dirname7(resolved), { recursive: true });
           await writeFile3(resolved, draft.body);
           state38.draftsWritten += 1;
           return {
@@ -13620,26 +14186,155 @@ var plugin41 = {
 };
 var process_guard_default = plugin41;
 
+// src/runtime/credential-patterns.ts
+var CREDENTIAL_PATTERNS = [
+  // LLM provider keys
+  {
+    type: "anthropic_key",
+    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
+  },
+  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
+  // GitHub. `ghp_` is only the personal-access-token prefix — the OAuth
+  // (`gho_`), user-to-server (`ghu_`), server-to-server (`ghs_`) and
+  // refresh (`ghr_`) tokens grant the same or broader access and were
+  // previously not detected at all.
+  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
+  {
+    type: "github_oauth_token",
+    regex: /(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g
+  },
+  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
+  // GitLab
+  { type: "gitlab_pat", regex: /(?<![A-Za-z0-9])glpat-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "gitlab_runner_token",
+    regex: /(?<![A-Za-z0-9])glrt-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
+  // npm — a leaked publish token is a supply-chain compromise.
+  { type: "npm_token", regex: /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36}(?![A-Za-z0-9])/g },
+  // AWS
+  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
+  // GCP
+  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
+  // Slack. `xoxe` (token-rotation) and `xapp` (app-level) were missing;
+  // both are as sensitive as the bot/user tokens already covered.
+  {
+    type: "slack_token",
+    regex: /(?<![A-Za-z0-9-])xox[abposer]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g
+  },
+  { type: "slack_app_token", regex: /(?<![A-Za-z0-9-])xapp-\d-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
+  {
+    type: "slack_webhook",
+    regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Za-z0-9_-]+\/B[A-Za-z0-9_-]+\/[A-Za-z0-9]{16,}/g
+  },
+  // Stripe
+  {
+    type: "stripe_key",
+    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
+  },
+  // Twilio
+  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
+  // Telegram
+  {
+    type: "telegram_bot_token",
+    regex: /(?:(?<![A-Za-z0-9_])|(?<=(?:^|[^A-Za-z0-9_])bot))\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
+  // JWT
+  {
+    type: "jwt",
+    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
+  },
+  // Private keys
+  {
+    type: "private_key",
+    regex: /(?:^|\n)(?:-----BEGIN (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----[\s\S]*?-----END (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----|-----BEGIN PGP PRIVATE KEY BLOCK-----[\s\S]*?-----END PGP PRIVATE KEY BLOCK-----)(?!\S)/g
+  },
+  // AI/ML provider tokens
+  { type: "huggingface_token", regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g },
+  { type: "replicate_token", regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
+  { type: "perplexity_key", regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
+  { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
+  // SaaS / infrastructure tokens — each grants API access on the user's
+  // account, and each was previously invisible to this gate.
+  { type: "sendgrid_key", regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  { type: "digitalocean_token", regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g },
+  { type: "doppler_token", regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
+  { type: "shopify_token", regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g },
+  { type: "docker_pat", regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  { type: "linear_key", regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
+  { type: "atlassian_token", regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g },
+  { type: "square_token", regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
+  {
+    type: "azure_storage_key",
+    regex: /AccountKey=[A-Za-z0-9+/]{80,}={0,2}/g
+  },
+  {
+    type: "google_oauth_client_secret",
+    regex: /(?<![A-Za-z0-9_-])GOCSPX-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
+  },
+  // Bearer tokens
+  {
+    type: "bearer_token",
+    regex: /(?<![A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?![A-Za-z0-9._~+/-])/g
+  },
+  // Database URIs. Require password-bearing user-info; credential-free values stay scannable.
+  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
+  {
+    type: "postgres_uri",
+    // Query parsers decode percent-encoded parameter names. Recognize each
+    // encoded character in `password` so mixed forms such as `pass%77ord`
+    // cannot bypass detection while keeping the scan strictly bounded.
+    regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
+  },
+  { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
+  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g }
+];
+function cloneCredentialPatterns() {
+  return CREDENTIAL_PATTERNS.map((p) => ({
+    type: p.type,
+    regex: new RegExp(p.regex.source, p.regex.flags)
+  }));
+}
+
 // src/prompt-firewall/index.ts
-var PATTERNS2 = [
-  { kind: "aws-access-key", re: /\bAKIA[0-9A-Z]{16}\b/g },
+var KIND_ALIASES = {
+  aws_access_key: "aws-access-key",
+  private_key: "private-key-block",
+  github_pat: "github-token",
+  github_oauth_token: "github-token",
+  openai_key: "openai-key",
+  anthropic_key: "anthropic-key",
+  slack_token: "slack-token",
+  gcp_key: "google-api-key",
+  bearer_token: "bearer-token"
+};
+var EXTRA_PATTERNS = [
   {
+    // AWS secret access keys have no prefix — only a 40-char base64-ish
+    // shape — so they need a nearby `aws`/`secret` mention to be worth
+    // acting on.
+    //
+    // The previous spelling required the word "aws" to appear AFTER the
+    // key and wrapped the run in `\b`. Both are wrong: the real layout is
+    // `AWS_SECRET_ACCESS_KEY=<key>` (context first), and a `\b` cannot
+    // hold next to the `+` or `/` that base64 keys routinely end with. The
+    // pattern therefore never fired on a real key. Anchor on the context
+    // token instead and let the key follow it.
     kind: "aws-secret-key",
-    re: /\b(?<![A-Za-z0-9/+])[A-Za-z0-9/+]{40}(?![A-Za-z0-9/+])\b(?=.*aws)/gi
+    re: /(?:aws|amazon)[A-Za-z0-9_-]*(?:secret|key)[A-Za-z0-9_-]*\s*[:=]\s*['"]?([A-Za-z0-9/+]{40})(?![A-Za-z0-9/+])/gi
   },
-  { kind: "private-key-block", re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/g },
-  { kind: "github-token", re: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/g },
-  { kind: "openai-key", re: /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}\b/g },
-  { kind: "anthropic-key", re: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
-  { kind: "slack-token", re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g },
-  { kind: "google-api-key", re: /\bAIza[0-9A-Za-z_-]{35}\b/g },
-  { kind: "jwt", re: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
-  { kind: "bearer-token", re: /\bBearer\s+[A-Za-z0-9._-]{20,}\b/g },
   {
     kind: "generic-secret-assignment",
     re: /\b(?:api[_-]?key|secret|password|passwd|token)\s*[:=]\s*['"]?[A-Za-z0-9._/+-]{12,}['"]?/gi
   }
 ];
+var PATTERNS2 = [
+  ...cloneCredentialPatterns().map((p) => ({
+    kind: KIND_ALIASES[p.type] ?? p.type,
+    re: p.regex
+  })),
+  ...EXTRA_PATTERNS
+];
 function detectSecrets(text, allow) {
   const counts = /* @__PURE__ */ new Map();
   for (const p of PATTERNS2) {
@@ -13915,9 +14610,10 @@ var plugin42 = {
 var prompt_firewall_default = plugin42;
 
 // src/refactor-suggester/index.ts
-import { readFile as readFile10 } from "node:fs/promises";
-import { isAbsolute as isAbsolute18, relative as relative18, resolve as resolve19 } from "node:path";
+import { readFile as readFile11 } from "node:fs/promises";
+import { isAbsolute as isAbsolute19, relative as relative19, resolve as resolve20 } from "node:path";
 var API_VERSION27 = "^0.1.10";
+var HOOK_WARNING_COOLDOWN_MS2 = 6e4;
 var state41 = {
   scanCount: 0,
   suggestionCount: 0,
@@ -13925,7 +14621,7 @@ var state41 = {
   warningCount: 0,
   errorCount: 0,
   hookUnregister: null,
-  lastHookWarning: /* @__PURE__ */ new Map()
+  lastHookWarning: new BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS2 })
 };
 var DEFAULTS36 = {
   enabled: false,
@@ -13959,7 +14655,7 @@ function toPosix6(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath6(p) {
-  return toPosix6(relative18(process.cwd(), p));
+  return toPosix6(relative19(process.cwd(), p));
 }
 function leadingIndentLevel(line) {
   const leading = line.match(/^(\s*)/)?.[1] ?? "";
@@ -14046,19 +14742,30 @@ function detectSmells(filePath, content, rules) {
 }
 async function scanPath4(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute18(rawPath) ? resolve19(rawPath) : resolve19(root, rawPath);
+  const resolved = isAbsolute19(rawPath) ? resolve20(rawPath) : resolve20(root, rawPath);
   const exts = normalizeExtensions5(cfg.extensions);
   const files = await collectSourceFilesAsync(resolved, { extensions: exts });
   const suggestions = [];
+  let scannedFiles = 0;
+  let truncated = false;
   for (const p of files) {
     try {
-      const content = await readFile10(p, "utf-8");
+      const content = await readFile11(p, "utf-8");
+      scannedFiles += 1;
       suggestions.push(...detectSmells(p, content, cfg.rules));
-      if (suggestions.length >= cfg.maxSuggestions) break;
+      if (suggestions.length >= cfg.maxSuggestions) {
+        truncated = scannedFiles < files.length;
+        break;
+      }
     } catch {
     }
   }
-  return { suggestions: suggestions.slice(0, cfg.maxSuggestions), scannedFiles: files.length };
+  return {
+    suggestions: suggestions.slice(0, cfg.maxSuggestions),
+    scannedFiles,
+    discoveredFiles: files.length,
+    truncated
+  };
 }
 var plugin43 = {
   name: "refactor-suggester",
@@ -14121,11 +14828,11 @@ var plugin43 = {
       state41.hookInvocationCount += 1;
       const now = Date.now();
       const lastWarning = state41.lastHookWarning.get(sourcePath);
-      if (lastWarning !== void 0 && now - lastWarning < 6e4) return;
-      const resolved = resolve19(process.cwd(), sourcePath);
+      if (lastWarning !== void 0 && now - lastWarning < HOOK_WARNING_COOLDOWN_MS2) return;
+      const resolved = resolve20(process.cwd(), sourcePath);
       let content;
       try {
-        content = await readFile10(resolved, "utf-8");
+        content = await readFile11(resolved, "utf-8");
       } catch {
         state41.errorCount += 1;
         return;
@@ -14169,8 +14876,12 @@ var plugin43 = {
         state41.suggestionCount += result.suggestions.length;
         return {
           ok: true,
-          path: relativePath6(resolve19(process.cwd(), rawPath)),
+          path: relativePath6(resolve20(process.cwd(), rawPath)),
           scannedFiles: result.scannedFiles,
+          discoveredFiles: result.discoveredFiles,
+          // Say so when the cap stopped the walk early: a partial scan
+          // that reports few findings must not read as a clean result.
+          truncated: result.truncated,
           suggestions: result.suggestions,
           rules: cfg.rules
         };
@@ -14579,7 +15290,7 @@ var plugin44 = {
 var release_notes_generator_default = plugin44;
 
 // src/schema-evolution-guard/index.ts
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 import { basename as basename5 } from "node:path";
 var API_VERSION29 = "^0.1.10";
 var state43 = {
@@ -14782,7 +15493,7 @@ var plugin45 = {
         content = toolInput["content"];
       } else if (withinProject(filePath)) {
         try {
-          content = readFileSync11(filePath, "utf-8");
+          content = readFileSync12(filePath, "utf-8");
         } catch {
           content = void 0;
         }
@@ -14886,71 +15597,43 @@ ${body}${suffix}`;
 var schema_evolution_guard_default = plugin45;
 
 // src/secret-scanner/index.ts
-var BASE_PATTERNS = [
-  // LLM provider keys
-  {
-    type: "anthropic_key",
-    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
-  },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
-  // GitHub
-  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
-  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
-  // AWS
-  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
-  // GCP
-  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
-  // Slack
-  { type: "slack_token", regex: /(?<![A-Za-z0-9-])xox[abpos]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
-  // Stripe
-  {
-    type: "stripe_key",
-    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
-  },
-  // Twilio
-  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
-  // Telegram
-  {
-    type: "telegram_bot_token",
-    regex: /\/bot\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // JWT
-  {
-    type: "jwt",
-    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
-  },
-  // Private keys
-  {
-    type: "private_key",
-    regex: /(?:^|\n)-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END (?:RSA|EC|OPENSSH|DSA|PGP)? ?PRIVATE KEY-----(?!\S)/g
-  },
-  // AI/ML provider tokens
-  { type: "huggingface_token", regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g },
-  { type: "replicate_token", regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "perplexity_key", regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  // Bearer tokens
-  {
-    type: "bearer_token",
-    regex: /(?:^|[^A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?![A-Za-z0-9._~+/-])/g
-  },
-  // Database URIs
-  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s"'`]+/g },
-  { type: "postgres_uri", regex: /postgres(?:ql)?:\/\/[^\s"'`]+/g },
-  { type: "mysql_uri", regex: /mysql:\/\/[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s"'`]+/g }
-];
+var BASE_PATTERNS = cloneCredentialPatterns();
 var PATTERNS3 = [...BASE_PATTERNS];
 var patternCacheKey = "";
+var GROUP_INDEX_OF_PATTERN = [];
 var COMBINED_REGEX = buildCombinedRegex(PATTERNS3);
-var RE_DOS_MAX_SCAN_LENGTH = 1e5;
+var SCAN_WINDOW_LENGTH = 1e5;
+var SCAN_WINDOW_OVERLAP = 4096;
+var MAX_TOTAL_SCAN_LENGTH = 8 * 1024 * 1024;
+var TOO_LARGE_MARKER = "unscannable_oversized_input";
 var RE_DOS_TIMEOUT_MS = 100;
+function countCaptureGroups(source) {
+  try {
+    return new RegExp(`${source}|`).exec("").length - 1;
+  } catch {
+    return 0;
+  }
+}
+function patternTypeForGroups(groups) {
+  for (let i = 0; i < PATTERNS3.length; i++) {
+    const at = GROUP_INDEX_OF_PATTERN[i];
+    if (at !== void 0 && groups[at] !== void 0) return PATTERNS3[i].type;
+  }
+  return void 0;
+}
 function buildCombinedRegex(patterns) {
-  const newCacheKey = JSON.stringify(patterns.map((p) => p.type));
+  const newCacheKey = JSON.stringify(patterns.map((p) => [p.type, p.regex.source]));
   if (newCacheKey === patternCacheKey && COMBINED_REGEX) {
     return COMBINED_REGEX;
   }
   patternCacheKey = newCacheKey;
+  const offsets = [];
+  let cursor = 0;
+  for (const p of patterns) {
+    offsets.push(cursor);
+    cursor += 1 + countCaptureGroups(p.regex.source);
+  }
+  GROUP_INDEX_OF_PATTERN = offsets;
   return new RegExp(patterns.map((p) => `(${p.regex.source})`).join("|"), "g");
 }
 var state44 = {
@@ -14968,29 +15651,37 @@ var state44 = {
   /** PostToolUse hook handle so teardown can unregister. */
   postHookUnregister: null
 };
-function findMatches(text) {
-  if (!text) return [];
-  if (text.length > RE_DOS_MAX_SCAN_LENGTH) return [];
-  const found = /* @__PURE__ */ new Set();
+function scanWindow(window, found, startTime) {
   COMBINED_REGEX.lastIndex = 0;
   let m;
-  const startTime = performance.now();
-  while ((m = COMBINED_REGEX.exec(text)) !== null) {
+  while ((m = COMBINED_REGEX.exec(window)) !== null) {
     if (performance.now() - startTime > RE_DOS_TIMEOUT_MS) {
       throw new Error(
-        `secret-scanner: ReDoS timeout \u2014 regex scan exceeded ${RE_DOS_TIMEOUT_MS}ms on ${text.length}-char input`
+        `secret-scanner: ReDoS timeout \u2014 regex scan exceeded ${RE_DOS_TIMEOUT_MS}ms on ${window.length}-char window`
       );
     }
-    for (let i = 0; i < PATTERNS3.length; i++) {
-      if (m[i + 1] !== void 0) {
-        found.add(PATTERNS3[i].type);
-        break;
-      }
-    }
+    const type = patternTypeForGroups(m.slice(1));
+    if (type !== void 0) found.add(type);
     if (m.index === COMBINED_REGEX.lastIndex) {
       COMBINED_REGEX.lastIndex += 1;
     }
   }
+}
+function findMatches(text) {
+  if (!text) return [];
+  const found = /* @__PURE__ */ new Set();
+  const startTime = performance.now();
+  if (text.length <= SCAN_WINDOW_LENGTH) {
+    scanWindow(text, found, startTime);
+    return Array.from(found).sort();
+  }
+  if (text.length > MAX_TOTAL_SCAN_LENGTH) {
+    return [TOO_LARGE_MARKER];
+  }
+  const stride = SCAN_WINDOW_LENGTH - SCAN_WINDOW_OVERLAP;
+  for (let offset = 0; offset < text.length; offset += stride) {
+    scanWindow(text.slice(offset, offset + SCAN_WINDOW_LENGTH), found, startTime);
+  }
   return Array.from(found).sort();
 }
 function scanInput(input, depth = 0) {
@@ -15016,30 +15707,55 @@ function scanInput(input, depth = 0) {
   }
   return null;
 }
+function redactString(text) {
+  if (text.length > SCAN_WINDOW_LENGTH) {
+    return { ok: false, reason: "oversized_input" };
+  }
+  const startTime = performance.now();
+  let cursor = 0;
+  let output = "";
+  COMBINED_REGEX.lastIndex = 0;
+  let match;
+  while ((match = COMBINED_REGEX.exec(text)) !== null) {
+    if (performance.now() - startTime > RE_DOS_TIMEOUT_MS) {
+      return { ok: false, reason: "oversized_input" };
+    }
+    const type = patternTypeForGroups(match.slice(1));
+    output += text.slice(cursor, match.index);
+    output += `[REDACTED:${type ?? "unknown"}]`;
+    cursor = COMBINED_REGEX.lastIndex;
+    if (match.index === COMBINED_REGEX.lastIndex) {
+      COMBINED_REGEX.lastIndex += 1;
+    }
+  }
+  if (cursor === 0) return { ok: true, value: text };
+  return { ok: true, value: output + text.slice(cursor) };
+}
 function redactInput(input, depth = 0) {
-  if (input === null || input === void 0) return input;
-  if (depth > 50) return input;
+  if (input === null || input === void 0) return { ok: true, value: input };
+  if (depth > 50) return { ok: false, reason: "maximum_depth_exceeded" };
   if (typeof input === "string") {
-    return input.replace(COMBINED_REGEX, (_match, ...groups) => {
-      for (let i = 0; i < PATTERNS3.length; i++) {
-        if (groups[i] !== void 0) {
-          return `[REDACTED:${PATTERNS3[i].type}]`;
-        }
-      }
-      return "[REDACTED:unknown]";
-    });
+    return redactString(input);
   }
   if (Array.isArray(input)) {
-    return input.map((item) => redactInput(item, depth + 1));
+    const out = [];
+    for (const item of input) {
+      const redacted = redactInput(item, depth + 1);
+      if (!redacted.ok) return redacted;
+      out.push(redacted.value);
+    }
+    return { ok: true, value: out };
   }
   if (typeof input === "object") {
     const out = {};
     for (const [k, v] of Object.entries(input)) {
-      out[k] = redactInput(v, depth + 1);
+      const redacted = redactInput(v, depth + 1);
+      if (!redacted.ok) return redacted;
+      out[k] = redacted.value;
     }
-    return out;
+    return { ok: true, value: out };
   }
-  return input;
+  return { ok: true, value: input };
 }
 var DEFAULTS39 = {
   matcher: "bash|write|edit",
@@ -15099,20 +15815,21 @@ function buildHook(cfg, log) {
     }
     if (cfg.mode === "redact") {
       const redacted = redactInput(input.toolInput);
-      if (redacted !== null && typeof redacted === "object" && !Array.isArray(redacted)) {
+      if (redacted.ok && redacted.value !== null && typeof redacted.value === "object" && !Array.isArray(redacted.value)) {
         state44.redactCount += 1;
         log.info(`[secret-scanner] redacted ${toolName} \u2014 matched: ${summary}`);
         return {
           decision: "allow",
-          modifiedInput: redacted,
+          modifiedInput: redacted.value,
           additionalContext: `secret-scanner: redacted ${matched.length} credential pattern(s) from the ${toolName} arguments before execution.`
         };
       }
       state44.blockCount += 1;
       state44.lastBlock = { toolName, matchedTypes: matched, when };
+      const detail = !redacted.ok ? redacted.reason === "oversized_input" ? "an input field exceeds the safe scan limit" : "the input exceeds the safe nesting depth" : "the input has a non-object shape";
       return {
         decision: "block",
-        reason: `secret-scanner: cannot safely redact '${toolName}' input (non-object shape); refusing to run.`
+        reason: `secret-scanner: cannot safely redact '${toolName}' because ${detail}; refusing to run.`
       };
     }
     state44.allowCount += 1;
@@ -15130,10 +15847,21 @@ function buildPostHook(cfg, log) {
     const matched = findMatches(result.content);
     if (matched.length === 0) return;
     const toolName = input.toolName ?? "unknown";
-    const summary = matched.join(", ");
+    const oversized = matched.includes(TOO_LARGE_MARKER);
+    const credentialMatches = matched.filter((type) => type !== TOO_LARGE_MARKER);
+    if (oversized && credentialMatches.length === 0) {
+      log.warn(
+        `[secret-scanner] POST-TOOL UNSCANNABLE: ${toolName} output exceeds ${MAX_TOTAL_SCAN_LENGTH} characters`
+      );
+      return {
+        additionalContext: `
+\u26A0\uFE0F secret-scanner: the output of '${toolName}' exceeds the safe scan limit and could not be inspected for plaintext credentials. Do not treat this output as verified clean; avoid echoing, storing, committing, or transmitting it until it can be reviewed in smaller bounded sections.`
+      };
+    }
+    const summary = credentialMatches.join(", ");
     const when = (/* @__PURE__ */ new Date()).toISOString();
     state44.leakCount += 1;
-    state44.lastLeak = { toolName, matchedTypes: matched, when };
+    state44.lastLeak = { toolName, matchedTypes: credentialMatches, when };
     log.warn(`[secret-scanner] POST-TOOL LEAK: ${toolName} output matched ${summary}`);
     return {
       additionalContext: `
@@ -15195,8 +15923,8 @@ var plugin46 = {
     state44.leakCount = 0;
     state44.lastBlock = null;
     state44.lastLeak = null;
-    state44.hookUnregister = null;
-    state44.postHookUnregister = null;
+    state44.hookUnregister = releaseHandle(state44.hookUnregister);
+    state44.postHookUnregister = releaseHandle(state44.postHookUnregister);
     const cfg = readConfig42(api.config.extensions?.["secret-scanner"]);
     PATTERNS3 = [...BASE_PATTERNS];
     for (const cp of cfg.customPatterns) {
@@ -15326,8 +16054,8 @@ var plugin46 = {
 var secret_scanner_default = plugin46;
 
 // src/security-hotspot-scanner/index.ts
-import { readdir as readdir2, readFile as readFile11, stat as stat5 } from "node:fs/promises";
-import { isAbsolute as isAbsolute19, relative as relative19, resolve as resolve20 } from "node:path";
+import { readdir as readdir2, readFile as readFile12, stat as stat5 } from "node:fs/promises";
+import { isAbsolute as isAbsolute20, relative as relative20, resolve as resolve21 } from "node:path";
 var API_VERSION30 = "^0.1.10";
 var state45 = {
   scanCount: 0,
@@ -15337,7 +16065,7 @@ var state45 = {
   skippedCount: 0,
   blockedCount: 0,
   lastResult: null,
-  knownHotspots: /* @__PURE__ */ new Set(),
+  knownHotspots: new BoundedSet({ max: 5e3 }),
   hookUnregister: null
 };
 var DEFAULTS40 = {
@@ -15418,7 +16146,7 @@ function isSourceFile2(filePath, extensions) {
 async function scanPath5(inputPath, cfg) {
   const start = Date.now();
   const root = process.cwd();
-  const resolved = isAbsolute19(inputPath) ? resolve20(inputPath) : resolve20(root, inputPath);
+  const resolved = isAbsolute20(inputPath) ? resolve21(inputPath) : resolve21(root, inputPath);
   if (!withinProject(inputPath)) {
     return {
       path: inputPath,
@@ -15435,11 +16163,11 @@ async function scanPath5(inputPath, cfg) {
   const scanFile2 = async (filePath) => {
     if (!isSourceFile2(filePath, cfg.scanOnChange)) return;
     try {
-      const content = await readFile11(filePath, "utf-8");
+      const content = await readFile12(filePath, "utf-8");
       filesScanned += 1;
       const findings = scanSource(content, maxPerFile);
       for (const f of findings) {
-        allFindings.push({ ...f, snippet: `${relative19(root, filePath)}:${f.line}: ${f.snippet}` });
+        allFindings.push({ ...f, snippet: `${relative20(root, filePath)}:${f.line}: ${f.snippet}` });
         if (allFindings.length >= cfg.maxFindings) return;
       }
     } catch {
@@ -15454,7 +16182,7 @@ async function scanPath5(inputPath, cfg) {
     }
     for (const entry of entries) {
       if (allFindings.length >= cfg.maxFindings) return;
-      const full = resolve20(dir, entry);
+      const full = resolve21(dir, entry);
       try {
         const st = await stat5(full);
         if (st.isDirectory()) {
@@ -15723,8 +16451,10 @@ var security_hotspot_scanner_default = plugin47;
 
 // src/semantic-search-indexer/index.ts
 import * as fs2 from "node:fs/promises";
-import { isAbsolute as isAbsolute20, relative as relative20, resolve as resolve21 } from "node:path";
+import { isAbsolute as isAbsolute21, relative as relative21, resolve as resolve22 } from "node:path";
+import { DEFAULT_WALK_IGNORE_DIRS } from "@wrongstack/core/utils";
 var API_VERSION31 = "^0.1.10";
+var escapeRegex2 = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 var state46 = {
   index: null,
   cachedPath: null,
@@ -15768,7 +16498,11 @@ var DEFAULTS41 = {
     ".scss",
     ".html"
   ],
-  excludePatterns: ["node_modules", "\\.git", "\\.wrongstack", "\\.temp_files", "coverage", "dist"],
+  excludePatterns: [
+    ...DEFAULT_WALK_IGNORE_DIRS.map(escapeRegex2),
+    "\\.wrongstack",
+    "\\.temp_files"
+  ],
   maxFileBytes: 1e6,
   defaultLimit: 10,
   minTokenLength: 2,
@@ -15798,18 +16532,18 @@ function normalizeSlashes2(p) {
 function withinProject5(p) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
   const root = normalizeSlashes2(process.cwd());
-  const resolved = normalizeSlashes2(isAbsolute20(p) ? resolve21(p) : resolve21(root, p));
-  const rel = normalizeSlashes2(relative20(root, resolved));
+  const resolved = normalizeSlashes2(isAbsolute21(p) ? resolve22(p) : resolve22(root, p));
+  const rel = normalizeSlashes2(relative21(root, resolved));
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute20(rel)) return false;
+  if (isAbsolute21(rel)) return false;
   return true;
 }
 function resolveProjectPath8(p) {
   const raw = typeof p === "string" && p.length > 0 ? p : ".";
   if (!withinProject5(raw)) return null;
   const root = normalizeSlashes2(process.cwd());
-  return normalizeSlashes2(isAbsolute20(raw) ? resolve21(raw) : resolve21(root, raw));
+  return normalizeSlashes2(isAbsolute21(raw) ? resolve22(raw) : resolve22(root, raw));
 }
 function tokenize(text, minLength) {
   const tokens = [];
@@ -15839,7 +16573,7 @@ function shouldIndexFile(filePath, cfg) {
 var INDEX_BATCH_SIZE = 32;
 var YIELD_EVERY_FILES = 64;
 function yieldEventLoop() {
-  return new Promise((resolve27) => setImmediate(resolve27));
+  return new Promise((resolve28) => setImmediate(resolve28));
 }
 function addFileToIndex(relPath, content, size, cfg) {
   if (!state46.index || content.includes("\0")) return;
@@ -15893,8 +16627,8 @@ async function walkDirectory(absPath, cfg, excludes, fileBatch) {
       state46.truncated = true;
       return;
     }
-    const absChild = normalizeSlashes2(resolve21(absPath, ent.name));
-    const relChild = normalizeSlashes2(relative20(root, absChild));
+    const absChild = normalizeSlashes2(resolve22(absPath, ent.name));
+    const relChild = normalizeSlashes2(relative21(root, absChild));
     if (relChild === "" || relChild === ".") continue;
     if (excludes.some((re) => re.test(relChild))) continue;
     if (ent.isDirectory()) {
@@ -15936,7 +16670,7 @@ async function buildIndex(rootPath, cfg) {
     return;
   }
   if (rootStats.isFile()) {
-    const relPath = normalizeSlashes2(relative20(normalizeSlashes2(process.cwd()), rootPath));
+    const relPath = normalizeSlashes2(relative21(normalizeSlashes2(process.cwd()), rootPath));
     await indexFileFromStats(rootPath, relPath === "" ? "." : relPath, rootStats, cfg);
     state46.fileCount = state46.index.files.size;
   } else if (rootStats.isDirectory()) {
@@ -16232,15 +16966,15 @@ var semantic_search_indexer_default = plugin48;
 import { expectDefined as expectDefined2 } from "@wrongstack/core/utils";
 import { toErrorMessage } from "@wrongstack/core/utils";
 import { execFile as execFile12 } from "node:child_process";
-import { access as access3, readFile as readFile13, readdir as readdir4, writeFile as writeFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute21, join as join4, relative as relative21, resolve as resolve22 } from "node:path";
+import { access as access3, readFile as readFile14, readdir as readdir4, writeFile as writeFile4 } from "node:fs/promises";
+import { isAbsolute as isAbsolute22, join as join5, relative as relative22, resolve as resolve23 } from "node:path";
 var API_VERSION32 = "^0.1.10";
 function resolveProjectRoot(rawCwd, root = process.cwd()) {
   if (typeof rawCwd !== "string" || rawCwd.length === 0) return root;
-  const base = resolve22(root);
-  const resolved = isAbsolute21(rawCwd) ? resolve22(rawCwd) : resolve22(base, rawCwd);
-  const rel = relative21(base, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute21(rel)) return resolved;
+  const base = resolve23(root);
+  const resolved = isAbsolute22(rawCwd) ? resolve23(rawCwd) : resolve23(base, rawCwd);
+  const rel = relative22(base, resolved);
+  if (rel === "" || !rel.startsWith("..") && !isAbsolute22(rel)) return resolved;
   return null;
 }
 var state47 = {
@@ -16252,7 +16986,7 @@ var state47 = {
   lastBump: null
 };
 function runCommand3(command, args, cwd) {
-  return new Promise((resolve27, reject) => {
+  return new Promise((resolve28, reject) => {
     execFile12(command, args, {
       encoding: "utf-8",
       cwd,
@@ -16260,7 +16994,7 @@ function runCommand3(command, args, cwd) {
       windowsHide: true
     }, (err, stdout, stderr) => {
       if (!err) {
-        resolve27(stdout.trim());
+        resolve28(stdout.trim());
         return;
       }
       const failure = err;
@@ -16281,21 +17015,21 @@ async function getPackageJson(cwd) {
   const path = cwd ? `${cwd}/package.json` : "package.json";
   try {
     await access3(path);
-    return JSON.parse(await readFile13(path, "utf-8"));
+    return JSON.parse(await readFile14(path, "utf-8"));
   } catch {
     return null;
   }
 }
 async function collectManifests(root) {
   const paths = [];
-  const rootPkg = join4(root, "package.json");
+  const rootPkg = join5(root, "package.json");
   try {
     await access3(rootPkg);
     paths.push(rootPkg);
   } catch {
   }
   for (const group of ["packages", "apps"]) {
-    const groupDir = join4(root, group);
+    const groupDir = join5(root, group);
     let entries;
     try {
       entries = await readdir4(groupDir, { withFileTypes: true });
@@ -16304,7 +17038,7 @@ async function collectManifests(root) {
     }
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const candidate = join4(groupDir, entry.name, "package.json");
+      const candidate = join5(groupDir, entry.name, "package.json");
       try {
         await access3(candidate);
         paths.push(candidate);
@@ -16499,7 +17233,7 @@ var plugin49 = {
         };
       }
       const root = cwd ?? process.cwd();
-      const bumpScript = join4(root, "scripts", "bump-version.mjs");
+      const bumpScript = join5(root, "scripts", "bump-version.mjs");
       const changed = await collectManifests(root);
       let hasBumpScript = true;
       try {
@@ -16515,7 +17249,7 @@ var plugin49 = {
           return { ok: false, error: `bump script failed: ${msg}` };
         }
         for (const rel of ["package.json", "package-lock.json", "src/lib/utils.ts", "index.html"]) {
-          const p = join4(root, "website", rel);
+          const p = join5(root, "website", rel);
           try {
             await access3(p);
             changed.push(p);
@@ -16523,10 +17257,29 @@ var plugin49 = {
           }
         }
       } else {
+        const pending = [];
         for (const manifest of changed) {
-          const pkgData = JSON.parse(await readFile13(manifest, "utf-8"));
+          let pkgData;
+          try {
+            pkgData = JSON.parse(await readFile14(manifest, "utf-8"));
+          } catch (err) {
+            return {
+              ok: false,
+              error: `cannot bump: ${manifest} is not readable as JSON (${toErrorMessage(err)}). No manifests were modified.`
+            };
+          }
+          if (!pkgData || typeof pkgData !== "object") {
+            return {
+              ok: false,
+              error: `cannot bump: ${manifest} does not contain a JSON object. No manifests were modified.`
+            };
+          }
           pkgData.version = newVersion;
-          await writeFile4(manifest, JSON.stringify(pkgData, null, 2) + "\n", "utf-8");
+          pending.push({ path: manifest, contents: `${JSON.stringify(pkgData, null, 2)}
+` });
+        }
+        for (const { path, contents } of pending) {
+          await writeFile4(path, contents, "utf-8");
         }
       }
       try {
@@ -16864,8 +17617,8 @@ async function readTranscriptTail(transcriptPath, n) {
   if (!transcriptPath || n <= 0) return [];
   let raw;
   try {
-    const { readFile: readFile17 } = await import("node:fs/promises");
-    raw = await readFile17(transcriptPath, "utf-8");
+    const { readFile: readFile18 } = await import("node:fs/promises");
+    raw = await readFile18(transcriptPath, "utf-8");
   } catch {
     return [];
   }
@@ -16939,7 +17692,7 @@ var plugin50 = {
     state48.commitCount = 0;
     state48.startedAt = null;
     state48.lastActivityAt = null;
-    state48.stopHookUnregister = null;
+    state48.stopHookUnregister = releaseHandle(state48.stopHookUnregister);
     for (const off of state48.eventUnsubscribers) {
       try {
         off();
@@ -17206,15 +17959,15 @@ var session_recap_default = plugin50;
 // src/shell-check/index.ts
 import { execFile as execFile13 } from "node:child_process";
 import { readdir as readdir5 } from "node:fs/promises";
-import { isAbsolute as isAbsolute22, join as join5, relative as relative22, resolve as resolve23 } from "node:path";
+import { isAbsolute as isAbsolute23, join as join6, relative as relative23, resolve as resolve24 } from "node:path";
 var API_VERSION33 = "^0.1.10";
 function withinProject6(p) {
   const root = process.cwd();
-  const resolved = isAbsolute22(p) ? resolve23(p) : resolve23(root, p);
-  const rel = relative22(root, resolved);
+  const resolved = isAbsolute23(p) ? resolve24(p) : resolve24(root, p);
+  const rel = relative23(root, resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute22(rel)) return false;
+  if (isAbsolute23(rel)) return false;
   return true;
 }
 var MAX_PATH_LEN = 4096;
@@ -17307,7 +18060,7 @@ async function findShellFiles(dir, pattern) {
     return results;
   }
   for (const entry of entries) {
-    const full = join5(dir, entry.name);
+    const full = join6(dir, entry.name);
     if (entry.isDirectory() && entry.name !== "node_modules" && entry.name !== ".git") {
       results.push(...await findShellFiles(full, pattern));
     } else if (entry.isFile() && (entry.name.endsWith(".sh") || entry.name === "Dockerfile")) {
@@ -17506,8 +18259,8 @@ var plugin51 = {
 var shell_check_default = plugin51;
 
 // src/smart-rename/index.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "node:fs";
-import { extname as extname5, isAbsolute as isAbsolute23, relative as relative23, resolve as resolve24 } from "node:path";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync2 } from "node:fs";
+import { extname as extname6, isAbsolute as isAbsolute24, relative as relative24, resolve as resolve25 } from "node:path";
 var API_VERSION34 = "^0.1.10";
 var state50 = {
   renameCount: 0,
@@ -17529,24 +18282,31 @@ function readConfig46(raw) {
 function withinProject7(p) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
   const root = process.cwd();
-  const resolved = isAbsolute23(p) ? resolve24(p) : resolve24(root, p);
-  const rel = relative23(root, resolved);
+  const resolved = isAbsolute24(p) ? resolve25(p) : resolve25(root, p);
+  const rel = relative24(root, resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute23(rel)) return false;
+  if (isAbsolute24(rel)) return false;
   return true;
 }
 function toPosix7(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath7(p) {
-  return toPosix7(relative23(process.cwd(), p));
+  return toPosix7(relative24(process.cwd(), p));
 }
-function escapeRegex2(s) {
+function escapeRegex3(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var IDENTIFIER_RE = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+function isIdentifier(name) {
+  return IDENTIFIER_RE.test(name);
+}
 function renameInContent(content, oldName, newName) {
-  const re = new RegExp(`\\b${escapeRegex2(oldName)}\\b`, "g");
+  const re = new RegExp(
+    `(?<![A-Za-z0-9_$])${escapeRegex3(oldName)}(?![A-Za-z0-9_$])`,
+    "g"
+  );
   let replacements = 0;
   const preview = content.replace(re, () => {
     replacements++;
@@ -17608,17 +18368,23 @@ var plugin52 = {
         if (!newName || typeof newName !== "string" || newName.length === 0) {
           return { ok: false, error: "newName is required" };
         }
+        if (!isIdentifier(oldName)) {
+          return { ok: false, error: `oldName "${oldName}" is not a valid identifier` };
+        }
+        if (!isIdentifier(newName)) {
+          return { ok: false, error: `newName "${newName}" is not a valid identifier` };
+        }
         if (!withinProject7(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
-        const ext = extname5(rawPath).toLowerCase();
+        const ext = extname6(rawPath).toLowerCase();
         if (!cfg.extensions.includes(ext)) {
           return { ok: false, error: `extension ${ext} is not allowed for rename` };
         }
-        const resolved = resolve24(process.cwd(), rawPath);
+        const resolved = resolve25(process.cwd(), rawPath);
         let content;
         try {
-          content = readFileSync12(resolved, "utf-8");
+          content = readFileSync13(resolved, "utf-8");
         } catch (err) {
           state50.errorCount += 1;
           return { ok: false, error: String(err) };
@@ -17628,7 +18394,7 @@ var plugin52 = {
         state50.replacementCount += replacements;
         if (input.apply) {
           try {
-            writeFileSync4(resolved, preview, "utf-8");
+            writeFileSync2(resolved, preview, "utf-8");
           } catch (err) {
             state50.errorCount += 1;
             return { ok: false, error: String(err) };
@@ -18005,8 +18771,8 @@ var plugin53 = {
     state51.skippedNonMd = 0;
     state51.readErrorCount = 0;
     state51.autoFixApplied = 0;
-    state51.postHookUnregister = null;
-    state51.preHookUnregister = null;
+    state51.postHookUnregister = releaseHandle(state51.postHookUnregister);
+    state51.preHookUnregister = releaseHandle(state51.preHookUnregister);
     const cfg = readConfig47(api.config.extensions?.["spec-linker"]);
     const postHook = async (input) => {
       if (!cfg.enabled) return;
@@ -18159,10 +18925,11 @@ ${lines}${overflowNote}`
 var spec_linker_default = plugin53;
 
 // src/template-engine/index.ts
-import { readFile as readFile15, writeFile as writeFile5 } from "node:fs/promises";
-import { isAbsolute as isAbsolute24 } from "node:path";
+import { readFile as readFile16, writeFile as writeFile5 } from "node:fs/promises";
+import { isAbsolute as isAbsolute25 } from "node:path";
 var API_VERSION35 = "^0.1.10";
 var templates = /* @__PURE__ */ new Map();
+var contributorUnregister = null;
 function expandTemplate(template, variables) {
   let result = template;
   result = result.replace(/\{\{(\w+)\}\}/g, (match, key) => {
@@ -18207,9 +18974,12 @@ function renderTemplateRaw(template, variables) {
   return result;
 }
 function validateRelativeTemplatePath(field, value) {
-  if (isAbsolute24(value) || value.split(/[\\/]+/).includes("..")) {
+  if (isAbsolute25(value) || value.split(/[\\/]+/).includes("..")) {
     return `${field} must be a relative path without ".." components`;
   }
+  if (!withinProject(value)) {
+    return `${field} must resolve inside the project directory`;
+  }
   return null;
 }
 var plugin54 = {
@@ -18333,7 +19103,7 @@ var plugin54 = {
         }
         let content;
         try {
-          content = await readFile15(template_path, "utf-8");
+          content = await readFile16(template_path, "utf-8");
         } catch (err) {
           return { ok: false, error: `Could not read template file: ${err}` };
         }
@@ -18432,7 +19202,8 @@ var plugin54 = {
         };
       }
     });
-    api.registerSystemPromptContributor(async () => [
+    contributorUnregister = releaseHandle(contributorUnregister);
+    contributorUnregister = api.registerSystemPromptContributor(async () => [
       {
         type: "text",
         text: `Template engine available:
@@ -18447,6 +19218,7 @@ var plugin54 = {
   teardown(api) {
     const count = templates.size;
     templates.clear();
+    contributorUnregister = releaseHandle(contributorUnregister);
     api.log.info("template-engine: teardown complete", { cleared: count });
   },
   async health() {
@@ -18465,7 +19237,7 @@ var plugin54 = {
 var template_engine_default = plugin54;
 
 // src/test-coverage-gate/index.ts
-import { readFileSync as readFileSync13 } from "node:fs";
+import { readFileSync as readFileSync14 } from "node:fs";
 var API_VERSION36 = "^0.1.10";
 var state52 = {
   invocationCount: 0,
@@ -18506,7 +19278,7 @@ function readConfig48(raw) {
 }
 function readCoverageSummary(coveragePath) {
   try {
-    const raw = readFileSync13(coveragePath, "utf-8");
+    const raw = readFileSync14(coveragePath, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -18576,7 +19348,7 @@ var plugin55 = {
     state52.skippedCount = 0;
     state52.lastOverallPct = null;
     state52.lastResult = null;
-    state52.hookUnregister = null;
+    state52.hookUnregister = releaseHandle(state52.hookUnregister);
     const cfg = readConfig48(api.config.extensions?.["test-coverage-gate"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -18722,9 +19494,9 @@ var test_coverage_gate_default = plugin55;
 
 // src/test-flake-detector/index.ts
 import { execFile as execFile14 } from "node:child_process";
-import { readFileSync as readFileSync14 } from "node:fs";
-import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname7, isAbsolute as isAbsolute25, relative as relative24, resolve as resolve25 } from "node:path";
+import { readFileSync as readFileSync15 } from "node:fs";
+import { createRequire as createRequire3 } from "node:module";
+import { dirname as dirname8, isAbsolute as isAbsolute26, relative as relative25, resolve as resolve26 } from "node:path";
 var API_VERSION37 = "^0.1.10";
 var state53 = {
   invocationCount: 0,
@@ -18795,15 +19567,15 @@ var ALLOWED_RUNNER_FLAGS = /* @__PURE__ */ new Set([
 ]);
 function withinProject8(p) {
   if (p.length === 0 || p.length > 4096 || p.startsWith("-")) return false;
-  const root = resolve25(process.cwd());
-  const resolved = isAbsolute25(p) ? resolve25(p) : resolve25(root, p);
-  const rel = relative24(root, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute25(rel);
+  const root = resolve26(process.cwd());
+  const resolved = isAbsolute26(p) ? resolve26(p) : resolve26(root, p);
+  const rel = relative25(root, resolved);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute26(rel);
 }
-function isInside2(parent, child) {
+function isInside3(parent, child) {
   if (parent === child) return true;
-  const rel = relative24(parent, child);
-  return rel !== "" && !rel.startsWith("..") && !isAbsolute25(rel);
+  const rel = relative25(parent, child);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute26(rel);
 }
 function tokenizeCommand(command) {
   const trimmed = command.trim();
@@ -18840,14 +19612,14 @@ function resolveTestCommand(baseCommand, testPattern) {
   if (runnerArgs.some((arg) => !ALLOWED_RUNNER_FLAGS.has(arg))) return null;
   let resolvedEntry;
   try {
-    const requireFromProject = createRequire2(resolve25(process.cwd(), "package.json"));
+    const requireFromProject = createRequire3(resolve26(process.cwd(), "package.json"));
     const packagePath = requireFromProject.resolve(`${runner}/package.json`);
-    const packageJson = JSON.parse(readFileSync14(packagePath, "utf8"));
+    const packageJson = JSON.parse(readFileSync15(packagePath, "utf8"));
     const relativeBin = typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin?.[runner] ?? Object.values(packageJson.bin ?? {})[0];
     if (!relativeBin) return null;
-    const packageDir = dirname7(packagePath);
-    const candidate = resolve25(packageDir, relativeBin);
-    if (isAbsolute25(relativeBin) || !isInside2(packageDir, candidate)) {
+    const packageDir = dirname8(packagePath);
+    const candidate = resolve26(packageDir, relativeBin);
+    if (isAbsolute26(relativeBin) || !isInside3(packageDir, candidate)) {
       return null;
     }
     resolvedEntry = candidate;
@@ -19089,8 +19861,8 @@ var plugin56 = {
 var test_flake_detector_default = plugin56;
 
 // src/test-generator/index.ts
-import { readFileSync as readFileSync15 } from "node:fs";
-import { isAbsolute as isAbsolute26, relative as relative25, resolve as resolve26 } from "node:path";
+import { readFileSync as readFileSync16 } from "node:fs";
+import { isAbsolute as isAbsolute27, relative as relative26, resolve as resolve27 } from "node:path";
 var API_VERSION38 = "^0.1.10";
 var state54 = {
   generateCount: 0,
@@ -19125,18 +19897,18 @@ function readConfig50(raw) {
 function withinProject9(p) {
   if (typeof p !== "string" || p.length === 0 || p.length > 4096) return false;
   const root = process.cwd();
-  const resolved = isAbsolute26(p) ? resolve26(p) : resolve26(root, p);
-  const rel = relative25(root, resolved);
+  const resolved = isAbsolute27(p) ? resolve27(p) : resolve27(root, p);
+  const rel = relative26(root, resolved);
   if (rel === "" || rel === ".") return true;
   if (rel.startsWith("..")) return false;
-  if (isAbsolute26(rel)) return false;
+  if (isAbsolute27(rel)) return false;
   return true;
 }
 function toPosix8(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath8(p) {
-  return toPosix8(relative25(process.cwd(), p));
+  return toPosix8(relative26(process.cwd(), p));
 }
 function detectExports(content) {
   const exports = [];
@@ -19230,7 +20002,7 @@ function generateTestContent(sourcePath, sourceModule, detected, cfg) {
   return lines.join("\n");
 }
 function generateForFile(filePath, cfg) {
-  const sourceContent = readFileSync15(filePath, "utf-8");
+  const sourceContent = readFileSync16(filePath, "utf-8");
   const detected = detectExports(sourceContent);
   const sourceFile = relativePath8(filePath);
   const sourceParts = sourceFile.split("/");
@@ -19349,7 +20121,7 @@ var plugin57 = {
         if (!withinProject9(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
-        const resolved = resolve26(process.cwd(), rawPath);
+        const resolved = resolve27(process.cwd(), rawPath);
         state54.generateCount += 1;
         let result;
         try {
@@ -19435,7 +20207,17 @@ var test_generator_default = plugin57;
 // src/test-runner-gate/index.ts
 import { execFile as execFile15 } from "node:child_process";
 import { access as access4 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname8, isAbsolute as isAbsolute27, join as join6 } from "node:path";
+import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute28, join as join7 } from "node:path";
+import { buildWin32CmdShimInvocation as buildWin32CmdShimInvocation2, resolveWin32Command as resolveWin32Command2 } from "@wrongstack/tools/win32";
+function resolveExec(command, args) {
+  const resolved = resolveWin32Command2(command);
+  const needsShell = process.platform === "win32" && (resolved.endsWith(".cmd") || resolved.endsWith(".bat"));
+  if (needsShell) {
+    const shim = buildWin32CmdShimInvocation2(resolved, args);
+    return { cmd: shim.command, args: shim.args, windowsVerbatimArguments: true };
+  }
+  return { cmd: resolved, args: [...args], windowsVerbatimArguments: false };
+}
 var API_VERSION39 = "^0.1.10";
 var state55 = {
   invocationCount: 0,
@@ -19500,7 +20282,7 @@ function pathContentHash(content) {
   }
   return h >>> 0;
 }
-var lastPassedHash = /* @__PURE__ */ new Map();
+var lastPassedHash = new BoundedMap({ max: 1024 });
 var ALLOWED_COMMAND_TOKENS = /* @__PURE__ */ new Set([
   "npx",
   "pnpm",
@@ -19518,7 +20300,7 @@ var ALLOWED_COMMAND_TOKENS = /* @__PURE__ */ new Set([
 function resolveTestFiles(sourcePath, patterns) {
   const name = basename6(sourcePath).replace(/\.[^.]+$/, "");
   const pathNoExt = sourcePath.replace(/\.[^.]+$/, "");
-  const dir = dirname8(sourcePath);
+  const dir = dirname9(sourcePath);
   const candidates = [];
   for (const pattern of patterns) {
     const candidate = pattern.replace(/\{name\}/g, name).replace(/\{path\}/g, pathNoExt).replace(/\{dir\}/g, dir);
@@ -19527,7 +20309,7 @@ function resolveTestFiles(sourcePath, patterns) {
         candidates.push(candidate);
       } else {
         candidates.push(candidate);
-        candidates.push(join6(dir, candidate));
+        candidates.push(join7(dir, candidate));
       }
     }
   }
@@ -19554,12 +20336,15 @@ async function detectRunner(requested) {
     const match = candidates.find((c) => c.name === requested);
     if (!match) return null;
     try {
-      await new Promise((resolve27, reject) => {
-        execFile15("npx", [`${match.name}`, "--version"], {
+      await new Promise((resolve28, reject) => {
+        const ex = resolveExec("npx", [`${match.name}`, "--version"]);
+        execFile15(ex.cmd, ex.args, {
           encoding: "utf-8",
           timeout: 5e3,
-          cwd: process.cwd()
-        }, (err) => err ? reject(err) : resolve27());
+          cwd: process.cwd(),
+          windowsHide: true,
+          ...ex.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
+        }, (err) => err ? reject(err) : resolve28());
       });
       return match;
     } catch {
@@ -19568,12 +20353,15 @@ async function detectRunner(requested) {
   }
   for (const candidate of candidates) {
     try {
-      await new Promise((resolve27, reject) => {
-        execFile15("npx", [`${candidate.name}`, "--version"], {
+      await new Promise((resolve28, reject) => {
+        const ex = resolveExec("npx", [`${candidate.name}`, "--version"]);
+        execFile15(ex.cmd, ex.args, {
           encoding: "utf-8",
           timeout: 5e3,
-          cwd: process.cwd()
-        }, (err) => err ? reject(err) : resolve27());
+          cwd: process.cwd(),
+          windowsHide: true,
+          ...ex.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
+        }, (err) => err ? reject(err) : resolve28());
       });
       return candidate;
     } catch {
@@ -19588,7 +20376,7 @@ function resolveAllowedCommand2(customCommand) {
   if (ALLOWED_COMMAND_TOKENS.has(head)) {
     return { cmd: head, args: tokens.slice(1) };
   }
-  if (isAbsolute27(head)) {
+  if (isAbsolute28(head)) {
     if (!withinProject(head)) return null;
     const base = basename6(head);
     if (ALLOWED_COMMAND_TOKENS.has(base)) {
@@ -19619,14 +20407,21 @@ async function runTests(testFile, runner, customCommand, timeoutMs) {
   let stdout = "";
   try {
     const { stdout: out } = await new Promise(
-      (resolve27, reject) => {
+      (resolve28, reject) => {
+        const ex = resolveExec(cmd, fullArgs);
         execFile15(
-          cmd,
-          fullArgs,
-          { encoding: "utf-8", timeout: timeoutMs, cwd: process.cwd() },
+          ex.cmd,
+          ex.args,
+          {
+            encoding: "utf-8",
+            timeout: timeoutMs,
+            cwd: process.cwd(),
+            windowsHide: true,
+            ...ex.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
+          },
           (err, out2, stderr) => {
             if (err) reject(Object.assign(err, { stdout: out2, stderr }));
-            else resolve27({ stdout: out2, stderr });
+            else resolve28({ stdout: out2, stderr });
           }
         );
       }
@@ -19743,7 +20538,7 @@ var plugin58 = {
     state55.errorCount = 0;
     state55.extensionSkippedCount = 0;
     state55.cachedSkipCount = 0;
-    state55.hookUnregister = null;
+    state55.hookUnregister = releaseHandle(state55.hookUnregister);
     state55.lastResult = null;
     lastPassedHash.clear();
     const cfg = readConfig51(api.config.extensions?.["test-runner-gate"]);
@@ -19994,7 +20789,7 @@ var plugin59 = {
     state56.lastMessageId = null;
     state56.lastPayloadHash = "";
     state56.lastBroadcastAt = 0;
-    state56.hookUnregister = null;
+    state56.hookUnregister = releaseHandle(state56.hookUnregister);
     const cfg = readConfig52(api.config.extensions?.["todo-listener"]);
     const mailbox = api.mailbox;
     const hook = async (input) => {
@@ -20035,7 +20830,7 @@ var plugin59 = {
         0,
         200
       );
-      const body = JSON.stringify(payload, null, 2);
+      const body = safeJsonStringify(payload, 2);
       const sendInput = {
         from: `plugin:todo-listener`,
         to: "*",
@@ -20139,6 +20934,7 @@ var todo_listener_default = plugin59;
 // src/todo-tracker/index.ts
 import * as fsp from "node:fs/promises";
 import { randomUUID } from "node:crypto";
+import { atomicWrite as atomicWrite3, ensureDir as ensureDir3 } from "@wrongstack/core/utils";
 function deriveFilePath(api) {
   const raw = api.config.extensions?.["todo-tracker"];
   const explicit = typeof raw?.["filePath"] === "string" ? raw["filePath"] : null;
@@ -20168,10 +20964,8 @@ async function loadFile(filePath) {
   }
 }
 async function saveFile(filePath, file) {
-  const tmp = `${filePath}.${randomUUID().slice(0, 8)}.tmp`;
-  await fsp.mkdir(filePath.replace(/[/\\][^/\\]+$/, ""), { recursive: true });
-  await fsp.writeFile(tmp, JSON.stringify(file, null, 2), { encoding: "utf8", mode: 384 });
-  await fsp.rename(tmp, filePath);
+  await ensureDir3(filePath.replace(/[/\\][^/\\]+$/, ""));
+  await atomicWrite3(filePath, JSON.stringify(file, null, 2), { mode: 384 });
 }
 var state57 = {
   filePath: null,
@@ -20611,16 +21405,36 @@ function modelMatches(pattern, model) {
   }
   return model.toLowerCase() === pattern.toLowerCase();
 }
+function readBoundedNumber(value, min, max, fallback) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+  if (value < min || value > max) return fallback;
+  return value;
+}
 function readConfig53(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS50 };
   const r = raw;
+  const warnPercent = readBoundedNumber(r["warnPercent"], 1, 100, DEFAULTS50.warnPercent);
+  const stopPercent = readBoundedNumber(r["stopPercent"], 1, 100, DEFAULTS50.stopPercent);
   return {
-    limit: typeof r["limit"] === "number" ? r["limit"] : DEFAULTS50.limit,
-    warnPercent: typeof r["warnPercent"] === "number" ? r["warnPercent"] : DEFAULTS50.warnPercent,
-    stopPercent: typeof r["stopPercent"] === "number" ? r["stopPercent"] : DEFAULTS50.stopPercent,
+    limit: readBoundedNumber(r["limit"], 0, Number.MAX_SAFE_INTEGER, DEFAULTS50.limit),
+    warnPercent,
+    // A warn threshold above the stop threshold can never fire — the run
+    // stops first. Clamp so the pair always describes a reachable window.
+    stopPercent: Math.max(stopPercent, warnPercent),
     model: typeof r["model"] === "string" ? r["model"] : ""
   };
 }
+function clearRegistrations2() {
+  for (const key of ["hookUnregister", "postHookUnregister"]) {
+    const off = state58[key];
+    if (!off) continue;
+    try {
+      off();
+    } catch {
+    }
+    state58[key] = null;
+  }
+}
 var plugin61 = {
   name: "token-budget",
   version: "0.1.0",
@@ -20667,9 +21481,8 @@ var plugin61 = {
     state58.stopFired = false;
     state58.warnContextInjected = false;
     state58.stopContextInjected = false;
-    state58.hookUnregister = null;
-    state58.postHookUnregister = null;
     state58.lastRequest = null;
+    clearRegistrations2();
     const cfg = readConfig53(api.config.extensions?.["token-budget"]);
     api.onEvent("provider.response", (payload) => {
       const p = payload;
@@ -20766,6 +21579,12 @@ var plugin61 = {
           remaining,
           percent,
           requestCount: state58.requestCount,
+          // The EFFECTIVE thresholds, after out-of-range values fall back to
+          // the defaults and warn/stop are ordered. Without these the user
+          // cannot tell that a rejected or clamped setting is not in force.
+          warnPercent: cfg.warnPercent,
+          stopPercent: cfg.stopPercent,
+          model: cfg.model === "" ? null : cfg.model,
           breakdown: {
             prompt: state58.totalPromptTokens,
             completion: state58.totalCompletionTokens
@@ -20784,20 +21603,7 @@ var plugin61 = {
     });
   },
   teardown(api) {
-    if (state58.hookUnregister) {
-      try {
-        state58.hookUnregister();
-      } catch {
-      }
-      state58.hookUnregister = null;
-    }
-    if (state58.postHookUnregister) {
-      try {
-        state58.postHookUnregister();
-      } catch {
-      }
-      state58.postHookUnregister = null;
-    }
+    clearRegistrations2();
     const final = {
       totalTokens: state58.totalTokens,
       requestCount: state58.requestCount,
@@ -20890,7 +21696,21 @@ function estimateRequestTokens(request, charsPerToken) {
   walk(request["messages"]);
   return Math.ceil(chars / charsPerToken);
 }
-var sleep = (ms) => new Promise((resolve27) => setTimeout(resolve27, ms));
+function sleep(ms, signal) {
+  if (signal?.aborted) return Promise.resolve();
+  return new Promise((resolve28) => {
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve28();
+    }, ms);
+    timer.unref?.();
+    function onAbort() {
+      clearTimeout(timer);
+      resolve28();
+    }
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
 var plugin62 = {
   name: "token-throttle",
   version: "0.1.0",
@@ -20949,6 +21769,7 @@ var plugin62 = {
         name: "token-throttle",
         owner: "token-throttle",
         async wrapProviderRunner(_ctx, request, inner) {
+          const signal = _ctx?.signal;
           const req = request ?? {};
           state59.invocations += 1;
           const now = Date.now();
@@ -20962,7 +21783,7 @@ var plugin62 = {
             api.metrics.counter("throttled");
             api.metrics.histogram("delay_ms", delay);
             api.log.info("token-throttle: delaying provider call", { delayMs: delay, projected });
-            await sleep(delay);
+            await sleep(delay, signal);
           }
           const response = await inner(_ctx, request);
           const used = (response?.usage?.input ?? 0) + (response?.usage?.output ?? 0) || projected;
@@ -21110,7 +21931,9 @@ async function runTypeCheck(cfg) {
     if (!resolved) return null;
     argv = [resolved.cmd, ...resolved.args];
   } else {
-    argv = ["npx", "tsc", "--noEmit", "--incremental"];
+    const tscFlags = ["--noEmit", "--incremental"];
+    const localTsc = resolveNodeBin("typescript", "tsc", process.cwd(), tscFlags);
+    argv = localTsc ? [localTsc.cmd, ...localTsc.args] : ["npx", "tsc", ...tscFlags];
     if (tsConfig && tsConfig !== "tsconfig.json") {
       argv = [...argv, "-p", tsConfig];
     }
@@ -21206,7 +22029,7 @@ var plugin63 = {
     state60.errorCount = 0;
     state60.skippedCount = 0;
     state60.lastResult = null;
-    state60.hookUnregister = null;
+    state60.hookUnregister = releaseHandle(state60.hookUnregister);
     const cfg = readConfig55(api.config.extensions?.["type-gate"]);
     const hook = async (input) => {
       if (!cfg.enabled) return;