@wrongstack/plugins 0.295.1 → 0.296.2

package/dist/index.js

@@ -295,6 +295,17 @@ function safeJsonStringify(value, indent) {
   }
 }
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var META_CHARS = /["'`;&|<>\r\n]/;
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
@@ -757,7 +768,7 @@ var plugin = {
     state.findingCount = 0;
     state.hookInvocationCount = 0;
     state.lastResult = null;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["accessibility-auditor"]);
     const hook = async (input) => {
       if (!cfg.enabled || !cfg.onWriteEdit) return;
@@ -2584,8 +2595,8 @@ var plugin7 = {
     state7.invocationCount = 0;
     state7.blockCount = 0;
     state7.warnCount = 0;
-    state7.hookUnregister = null;
-    state7.configUnregister = null;
+    state7.hookUnregister = releaseHandle(state7.hookUnregister);
+    state7.configUnregister = releaseHandle(state7.configUnregister);
     state7.lastBlock = null;
     branchCache.clear();
     let cfg = readHostConfig(api.config);
@@ -3975,7 +3986,7 @@ var plugin11 = {
     state11.invalidCount = 0;
     state11.suggestFixCount = 0;
     state11.suggestFixErrors = 0;
-    state11.hookUnregister = null;
+    state11.hookUnregister = releaseHandle(state11.hookUnregister);
     state11.lastValidation = null;
     const cfg = readConfig10(api.config.extensions?.["commit-validator"]);
     const hook = async (input) => {
@@ -5507,7 +5518,10 @@ function findUnusedSymbols(files) {
   for (const file of files) {
     const fileExports = extractExports2(file.content, file.path);
     for (const exp of fileExports) {
-      const pattern = new RegExp(`\\b${escapeRegex(exp.identifier)}\\b`, "g");
+      const pattern = new RegExp(
+        `(?<![A-Za-z0-9_$])${escapeRegex(exp.identifier)}(?![A-Za-z0-9_$])`,
+        "g"
+      );
       let usedElsewhere = false;
       for (const other of files) {
         if (other.path === file.path) continue;
@@ -6602,7 +6616,7 @@ var plugin19 = {
     state18.fallbackCount = 0;
     state18.throttledCount = 0;
     state18.duplicateContentCount = 0;
-    state18.hookUnregister = null;
+    state18.hookUnregister = releaseHandle(state18.hookUnregister);
     state18.lastSummary = null;
     pathMemo.clear();
     const cfg = readConfig16(api.config.extensions?.["diff-summary"]);
@@ -6868,7 +6882,7 @@ var plugin20 = {
     state19.sourceWrites = 0;
     state19.docWrites = 0;
     state19.warningsIssued = 0;
-    state19.hookUnregister = null;
+    state19.hookUnregister = releaseHandle(state19.hookUnregister);
     const cfg = readConfig17(api.config.extensions?.["doc-sync-guard"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -8715,10 +8729,63 @@ async function runGit3(args, cwd, timeoutMs = DEFAULT_GIT_TIMEOUT_MS) {
     );
   });
 }
+function unquotePorcelainPath(raw) {
+  if (!raw.startsWith('"') || !raw.endsWith('"') || raw.length < 2) return raw;
+  const inner = raw.slice(1, -1);
+  const bytes = [];
+  for (let i = 0; i < inner.length; i++) {
+    const ch = inner[i];
+    if (ch !== "\\") {
+      for (const b of Buffer.from(ch, "utf8")) bytes.push(b);
+      continue;
+    }
+    const next = inner[i + 1];
+    if (next === void 0) {
+      bytes.push(92);
+      break;
+    }
+    const simple = {
+      n: 10,
+      t: 9,
+      r: 13,
+      a: 7,
+      b: 8,
+      f: 12,
+      v: 11,
+      '"': 34,
+      "\\": 92
+    };
+    const mapped = simple[next];
+    if (mapped !== void 0) {
+      bytes.push(mapped);
+      i += 1;
+      continue;
+    }
+    const octal = /^[0-7]{1,3}/.exec(inner.slice(i + 1));
+    if (octal) {
+      bytes.push(Number.parseInt(octal[0], 8) & 255);
+      i += octal[0].length;
+      continue;
+    }
+    for (const b of Buffer.from(next, "utf8")) bytes.push(b);
+    i += 1;
+  }
+  return Buffer.from(bytes).toString("utf8");
+}
+function parsePorcelainLine(line) {
+  const body = line.slice(3);
+  if (!body) return null;
+  const status = line.slice(0, 2);
+  if (status.includes("R") || status.includes("C")) {
+    const arrow = body.lastIndexOf(" -> ");
+    if (arrow !== -1) return unquotePorcelainPath(body.slice(arrow + 4).trim());
+  }
+  return unquotePorcelainPath(body.trim());
+}
 async function getChangedFiles(cwd) {
   const output = await runGit3(["status", "--porcelain"], cwd);
   if (!output) return [];
-  return output.split("\n").filter((l) => l.trim()).map((l) => l.slice(3).trim());
+  return output.split("\n").filter((l) => l.trim()).map((l) => parsePorcelainLine(l)).filter((p) => p !== null && p.length > 0);
 }
 async function getStagedFiles(cwd) {
   const output = await runGit3(["diff", "--cached", "--name-only"], cwd);
@@ -8734,7 +8801,7 @@ async function stageFiles(files, cwd) {
     }
   });
   if (existing.length === 0) throw new Error("No files exist to stage");
-  await runGit3(["add", ...existing], cwd);
+  await runGit3(["add", "--", ...existing], cwd);
 }
 async function commitWithMessage(message, cwd) {
   return await runGit3(["commit", "-m", message], cwd, GIT_COMMIT_TIMEOUT_MS);
@@ -8787,7 +8854,7 @@ async function externalChangesSinceStage(cwd) {
     const unstaged = out.split("\n").filter((l) => l.trim()).filter((l) => {
       const idx = l[0] ?? " ";
       return idx === " " || idx === "?";
-    }).map((l) => l.slice(3).trim());
+    }).map((l) => parsePorcelainLine(l)).filter((p) => p !== null && p.length > 0);
     return unstaged.length > 0 ? unstaged : null;
   } catch {
     return null;
@@ -9389,7 +9456,7 @@ var plugin27 = {
     state24.organizedCount = 0;
     state24.cleanCount = 0;
     state24.errorCount = 0;
-    state24.hookUnregister = null;
+    state24.hookUnregister = releaseHandle(state24.hookUnregister);
     state24.lastResult = null;
     state24.probeComplete = false;
     state24.linterAvailable = false;
@@ -9596,12 +9663,19 @@ var PATTERNS = [
     re: /(?:\u200B|\u200C|\u200D|\u2060|\uFEFF){20,}/
   }
 ];
+var INVISIBLE_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g;
+function stripInvisible(text) {
+  INVISIBLE_CHARS.lastIndex = 0;
+  return text.replace(INVISIBLE_CHARS, "");
+}
 function scanForInjection(text) {
-  const hits = [];
+  const hits = /* @__PURE__ */ new Set();
+  const cleaned = stripInvisible(text);
   for (const p of PATTERNS) {
-    if (p.re.test(text)) hits.push(p.name);
+    if (p.re.test(text)) hits.add(p.name);
+    else if (cleaned !== text && p.re.test(cleaned)) hits.add(p.name);
   }
-  return hits;
+  return [...hits];
 }
 var plugin28 = {
   name: "injection-shield",
@@ -10827,7 +10901,7 @@ var plugin32 = {
     state29.hitCount = 0;
     state29.fixCount = 0;
     state29.linterErrorCount = 0;
-    state29.hookUnregister = null;
+    state29.hookUnregister = releaseHandle(state29.hookUnregister);
     state29.lastResult = null;
     linterCache.clear();
     const cfg = readConfig27(api.config.extensions?.["lint-gate"]);
@@ -12054,7 +12128,7 @@ var plugin35 = {
     state32.llmAnalysisCount = 0;
     state32.llmFallbackCount = 0;
     state32.lastPlan = null;
-    state32.hookUnregister = null;
+    state32.hookUnregister = releaseHandle(state32.hookUnregister);
     const cfg = readConfig30(api.config.extensions?.["migration-planner"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -13828,7 +13902,7 @@ var plugin40 = {
     state38.draftsWritten = 0;
     state38.draftErrors = 0;
     state38.stopInvocations = 0;
-    state38.stopHookUnregister = null;
+    state38.stopHookUnregister = releaseHandle(state38.stopHookUnregister);
     for (const off of state38.eventUnsubscribers) {
       try {
         off();
@@ -15849,8 +15923,8 @@ var plugin46 = {
     state44.leakCount = 0;
     state44.lastBlock = null;
     state44.lastLeak = null;
-    state44.hookUnregister = null;
-    state44.postHookUnregister = null;
+    state44.hookUnregister = releaseHandle(state44.hookUnregister);
+    state44.postHookUnregister = releaseHandle(state44.postHookUnregister);
     const cfg = readConfig42(api.config.extensions?.["secret-scanner"]);
     PATTERNS3 = [...BASE_PATTERNS];
     for (const cp of cfg.customPatterns) {
@@ -17618,7 +17692,7 @@ var plugin50 = {
     state48.commitCount = 0;
     state48.startedAt = null;
     state48.lastActivityAt = null;
-    state48.stopHookUnregister = null;
+    state48.stopHookUnregister = releaseHandle(state48.stopHookUnregister);
     for (const off of state48.eventUnsubscribers) {
       try {
         off();
@@ -18224,8 +18298,15 @@ function relativePath7(p) {
 function escapeRegex3(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var IDENTIFIER_RE = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+function isIdentifier(name) {
+  return IDENTIFIER_RE.test(name);
+}
 function renameInContent(content, oldName, newName) {
-  const re = new RegExp(`\\b${escapeRegex3(oldName)}\\b`, "g");
+  const re = new RegExp(
+    `(?<![A-Za-z0-9_$])${escapeRegex3(oldName)}(?![A-Za-z0-9_$])`,
+    "g"
+  );
   let replacements = 0;
   const preview = content.replace(re, () => {
     replacements++;
@@ -18287,6 +18368,12 @@ var plugin52 = {
         if (!newName || typeof newName !== "string" || newName.length === 0) {
           return { ok: false, error: "newName is required" };
         }
+        if (!isIdentifier(oldName)) {
+          return { ok: false, error: `oldName "${oldName}" is not a valid identifier` };
+        }
+        if (!isIdentifier(newName)) {
+          return { ok: false, error: `newName "${newName}" is not a valid identifier` };
+        }
         if (!withinProject7(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
@@ -18684,8 +18771,8 @@ var plugin53 = {
     state51.skippedNonMd = 0;
     state51.readErrorCount = 0;
     state51.autoFixApplied = 0;
-    state51.postHookUnregister = null;
-    state51.preHookUnregister = null;
+    state51.postHookUnregister = releaseHandle(state51.postHookUnregister);
+    state51.preHookUnregister = releaseHandle(state51.preHookUnregister);
     const cfg = readConfig47(api.config.extensions?.["spec-linker"]);
     const postHook = async (input) => {
       if (!cfg.enabled) return;
@@ -18842,6 +18929,7 @@ import { readFile as readFile16, writeFile as writeFile5 } from "node:fs/promise
 import { isAbsolute as isAbsolute25 } from "node:path";
 var API_VERSION35 = "^0.1.10";
 var templates = /* @__PURE__ */ new Map();
+var contributorUnregister = null;
 function expandTemplate(template, variables) {
   let result = template;
   result = result.replace(/\{\{(\w+)\}\}/g, (match, key) => {
@@ -19114,7 +19202,8 @@ var plugin54 = {
         };
       }
     });
-    api.registerSystemPromptContributor(async () => [
+    contributorUnregister = releaseHandle(contributorUnregister);
+    contributorUnregister = api.registerSystemPromptContributor(async () => [
       {
         type: "text",
         text: `Template engine available:
@@ -19129,6 +19218,7 @@ var plugin54 = {
   teardown(api) {
     const count = templates.size;
     templates.clear();
+    contributorUnregister = releaseHandle(contributorUnregister);
     api.log.info("template-engine: teardown complete", { cleared: count });
   },
   async health() {
@@ -19258,7 +19348,7 @@ var plugin55 = {
     state52.skippedCount = 0;
     state52.lastOverallPct = null;
     state52.lastResult = null;
-    state52.hookUnregister = null;
+    state52.hookUnregister = releaseHandle(state52.hookUnregister);
     const cfg = readConfig48(api.config.extensions?.["test-coverage-gate"]);
     const hook = (input) => {
       if (!cfg.enabled) return;
@@ -20448,7 +20538,7 @@ var plugin58 = {
     state55.errorCount = 0;
     state55.extensionSkippedCount = 0;
     state55.cachedSkipCount = 0;
-    state55.hookUnregister = null;
+    state55.hookUnregister = releaseHandle(state55.hookUnregister);
     state55.lastResult = null;
     lastPassedHash.clear();
     const cfg = readConfig51(api.config.extensions?.["test-runner-gate"]);
@@ -20699,7 +20789,7 @@ var plugin59 = {
     state56.lastMessageId = null;
     state56.lastPayloadHash = "";
     state56.lastBroadcastAt = 0;
-    state56.hookUnregister = null;
+    state56.hookUnregister = releaseHandle(state56.hookUnregister);
     const cfg = readConfig52(api.config.extensions?.["todo-listener"]);
     const mailbox = api.mailbox;
     const hook = async (input) => {
@@ -21315,16 +21405,36 @@ function modelMatches(pattern, model) {
   }
   return model.toLowerCase() === pattern.toLowerCase();
 }
+function readBoundedNumber(value, min, max, fallback) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return fallback;
+  if (value < min || value > max) return fallback;
+  return value;
+}
 function readConfig53(raw) {
   if (!raw || typeof raw !== "object") return { ...DEFAULTS50 };
   const r = raw;
+  const warnPercent = readBoundedNumber(r["warnPercent"], 1, 100, DEFAULTS50.warnPercent);
+  const stopPercent = readBoundedNumber(r["stopPercent"], 1, 100, DEFAULTS50.stopPercent);
   return {
-    limit: typeof r["limit"] === "number" ? r["limit"] : DEFAULTS50.limit,
-    warnPercent: typeof r["warnPercent"] === "number" ? r["warnPercent"] : DEFAULTS50.warnPercent,
-    stopPercent: typeof r["stopPercent"] === "number" ? r["stopPercent"] : DEFAULTS50.stopPercent,
+    limit: readBoundedNumber(r["limit"], 0, Number.MAX_SAFE_INTEGER, DEFAULTS50.limit),
+    warnPercent,
+    // A warn threshold above the stop threshold can never fire — the run
+    // stops first. Clamp so the pair always describes a reachable window.
+    stopPercent: Math.max(stopPercent, warnPercent),
     model: typeof r["model"] === "string" ? r["model"] : ""
   };
 }
+function clearRegistrations2() {
+  for (const key of ["hookUnregister", "postHookUnregister"]) {
+    const off = state58[key];
+    if (!off) continue;
+    try {
+      off();
+    } catch {
+    }
+    state58[key] = null;
+  }
+}
 var plugin61 = {
   name: "token-budget",
   version: "0.1.0",
@@ -21371,9 +21481,8 @@ var plugin61 = {
     state58.stopFired = false;
     state58.warnContextInjected = false;
     state58.stopContextInjected = false;
-    state58.hookUnregister = null;
-    state58.postHookUnregister = null;
     state58.lastRequest = null;
+    clearRegistrations2();
     const cfg = readConfig53(api.config.extensions?.["token-budget"]);
     api.onEvent("provider.response", (payload) => {
       const p = payload;
@@ -21470,6 +21579,12 @@ var plugin61 = {
           remaining,
           percent,
           requestCount: state58.requestCount,
+          // The EFFECTIVE thresholds, after out-of-range values fall back to
+          // the defaults and warn/stop are ordered. Without these the user
+          // cannot tell that a rejected or clamped setting is not in force.
+          warnPercent: cfg.warnPercent,
+          stopPercent: cfg.stopPercent,
+          model: cfg.model === "" ? null : cfg.model,
           breakdown: {
             prompt: state58.totalPromptTokens,
             completion: state58.totalCompletionTokens
@@ -21488,20 +21603,7 @@ var plugin61 = {
     });
   },
   teardown(api) {
-    if (state58.hookUnregister) {
-      try {
-        state58.hookUnregister();
-      } catch {
-      }
-      state58.hookUnregister = null;
-    }
-    if (state58.postHookUnregister) {
-      try {
-        state58.postHookUnregister();
-      } catch {
-      }
-      state58.postHookUnregister = null;
-    }
+    clearRegistrations2();
     const final = {
       totalTokens: state58.totalTokens,
       requestCount: state58.requestCount,
@@ -21927,7 +22029,7 @@ var plugin63 = {
     state60.errorCount = 0;
     state60.skippedCount = 0;
     state60.lastResult = null;
-    state60.hookUnregister = null;
+    state60.hookUnregister = releaseHandle(state60.hookUnregister);
     const cfg = readConfig55(api.config.extensions?.["type-gate"]);
     const hook = async (input) => {
       if (!cfg.enabled) return;

package/dist/injection-shield/index.d.ts

@@ -41,6 +41,22 @@
  * @public
  */
 import type { Plugin } from '@wrongstack/core/types';
+/**
+ * Strip invisible characters so a payload cannot hide between letters.
+ *
+ * Every pattern here is written against readable words, so a single
+ * zero-width space inside a keyword — `i​gnore previous
+ * instructions` — defeated all of them while the text stayed perfectly
+ * legible to the model it targets. That is the textbook evasion for this
+ * class of detector, and the existing `zero-width-flood` rule did not
+ * cover it: it only fires on 20+ *consecutive* invisibles, not on the one
+ * character it takes to break a word.
+ *
+ * Scanning is done on both forms: the stripped text catches hidden
+ * payloads, and the original still catches the flood rule (whose whole
+ * purpose is to notice the invisible characters themselves).
+ */
+export declare function stripInvisible(text: string): string;
 export declare function scanForInjection(text: string): string[];
 declare const plugin: Plugin;
 export default plugin;

package/dist/injection-shield/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/injection-shield/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AA6GrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAMD,QAAA,MAAM,MAAM,EAAE,MAwJb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/injection-shield/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAuHrD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAUvD;AAMD,QAAA,MAAM,MAAM,EAAE,MAwJb,CAAC;eAEa,MAAM"}

package/dist/injection-shield.js

@@ -64,12 +64,19 @@ var PATTERNS = [
     re: /(?:\u200B|\u200C|\u200D|\u2060|\uFEFF){20,}/
   }
 ];
+var INVISIBLE_CHARS = /[\u00AD\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g;
+function stripInvisible(text) {
+  INVISIBLE_CHARS.lastIndex = 0;
+  return text.replace(INVISIBLE_CHARS, "");
+}
 function scanForInjection(text) {
-  const hits = [];
+  const hits = /* @__PURE__ */ new Set();
+  const cleaned = stripInvisible(text);
   for (const p of PATTERNS) {
-    if (p.re.test(text)) hits.push(p.name);
+    if (p.re.test(text)) hits.add(p.name);
+    else if (cleaned !== text && p.re.test(cleaned)) hits.add(p.name);
   }
-  return hits;
+  return [...hits];
 }
 var plugin = {
   name: "injection-shield",
@@ -204,5 +211,6 @@ var plugin = {
 var injection_shield_default = plugin;
 export {
   injection_shield_default as default,
-  scanForInjection
+  scanForInjection,
+  stripInvisible
 };

package/dist/lint-gate.js

@@ -103,6 +103,17 @@ var BoundedMap = class {
   }
 };
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 
@@ -331,7 +342,7 @@ var plugin = {
     state.hitCount = 0;
     state.fixCount = 0;
     state.linterErrorCount = 0;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     state.lastResult = null;
     linterCache.clear();
     const cfg = readConfig(api.config.extensions?.["lint-gate"]);

package/dist/migration-planner.js

@@ -53,6 +53,17 @@ async function runOptionalPluginLlm(request) {
 // src/runtime/local-bin.ts
 import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
 
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
 // src/runtime/index.ts
 var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 function hasLeadingDash(arg) {
@@ -318,7 +329,7 @@ var plugin = {
     state.llmAnalysisCount = 0;
     state.llmFallbackCount = 0;
     state.lastPlan = null;
-    state.hookUnregister = null;
+    state.hookUnregister = releaseHandle(state.hookUnregister);
     const cfg = readConfig(api.config.extensions?.["migration-planner"]);
     const hook = (input) => {
       if (!cfg.enabled) return;

package/dist/pr-drafter/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pr-drafter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AA4MhE,QAAA,MAAM,MAAM,EAAE,MAyNb,CAAC;eAEa,MAAM"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pr-drafter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,wBAAwB,CAAC;AA6MhE,QAAA,MAAM,MAAM,EAAE,MAyNb,CAAC;eAEa,MAAM"}

package/dist/pr-drafter.js

@@ -2,6 +2,25 @@
 import { execFile } from "node:child_process";
 import { mkdir, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
+
+// src/runtime/local-bin.ts
+import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+
+// src/runtime/handles.ts
+function releaseHandle(off) {
+  if (off) {
+    try {
+      off();
+    } catch {
+    }
+  }
+  return null;
+}
+
+// src/runtime/index.ts
+var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+
+// src/pr-drafter/index.ts
 var API_VERSION = "^0.1.10";
 var state = {
   commits: [],
@@ -193,7 +212,7 @@ var plugin = {
     state.draftsWritten = 0;
     state.draftErrors = 0;
     state.stopInvocations = 0;
-    state.stopHookUnregister = null;
+    state.stopHookUnregister = releaseHandle(state.stopHookUnregister);
     for (const off of state.eventUnsubscribers) {
       try {
         off();

package/dist/runtime/handles.d.ts

@@ -0,0 +1,46 @@
+/**
+ * @wrongstack/plugins — unregister-handle discipline.
+ *
+ * Plugins keep their hook/listener unregister functions in module-scope
+ * state, and every plugin's `setup()` is expected to be idempotent: calling
+ * it twice must not leave two live registrations. The house style calls
+ * this the "H1 pattern".
+ *
+ * The failure mode this helper exists to prevent is subtle and was present
+ * in ~15 plugins: `setup()` reset the handle with
+ *
+ * ```ts
+ * state.hookUnregister = null;   // WRONG
+ * ```
+ *
+ * which drops the only reference to the *previous* registration without
+ * calling it. The old hook stays live in the registry, unreachable, and
+ * fires alongside the new one — so counters double, warnings appear twice,
+ * and a gate can block on a stale closure holding the previous config.
+ *
+ * `releaseHandle` makes the correct spelling a one-liner with the same
+ * shape as the wrong one, so the two are hard to confuse:
+ *
+ * ```ts
+ * state.hookUnregister = releaseHandle(state.hookUnregister);
+ * ```
+ */
+/** An unregister function returned by `registerHook`/`onEvent`/etc. */
+export type Unregister = (() => void) | null | undefined;
+/**
+ * Invoke `off` if present, swallowing any error, and return `null` so the
+ * caller can assign the result straight back to the handle.
+ *
+ * Unregistering is best-effort by design: a handle whose owner has already
+ * been torn down may throw, and that must never prevent the rest of
+ * `setup()`/`teardown()` from running.
+ */
+export declare function releaseHandle(off: Unregister): null;
+/**
+ * Release several handles held on one state object, clearing each in place.
+ *
+ * @example
+ * releaseHandles(state, ['hookUnregister', 'postHookUnregister']);
+ */
+export declare function releaseHandles<S extends object, K extends keyof S>(state: S, keys: readonly K[]): void;
+//# sourceMappingURL=handles.d.ts.map

package/dist/runtime/handles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handles.d.ts","sourceRoot":"","sources":["../../src/runtime/handles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;AAEzD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CASnD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,EAChE,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,SAAS,CAAC,EAAE,GACjB,IAAI,CAIN"}

package/dist/runtime/index.d.ts

@@ -31,6 +31,7 @@
 export { parseLlmJsonObject, runOptionalPluginLlm, stripOuterMarkdownFence, type OptionalLlmRequest, type OptionalLlmResult, } from './llm.js';
 export { BoundedMap, BoundedSet, type BoundedMapOptions } from './bounded-map.js';
 export { UNSERIALIZABLE, safeJsonStringify } from './safe-json.js';
+export { releaseHandle, releaseHandles, type Unregister } from './handles.js';
 export { clearLocalBinCache, findOnPath, resolveExecInvocation, resolveFirstNodeBin, resolveNodeBin, resolveWin32Command, type ExecInvocation, type ResolvedNodeBin, } from './local-bin.js';
 export type LanguageId = 'typescript' | 'javascript' | 'python' | 'go' | 'rust' | 'shell' | 'ruby' | 'java' | 'kotlin' | 'dotnet' | 'generic';
 export type PackageManagerId = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'pip' | 'poetry' | 'go' | 'cargo' | 'gem' | 'maven' | 'gradle' | 'dotnet' | 'none';

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,OAAO,GACP,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,OAAO,GACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf;;;;OAIG;IACH,cAAc,EAAE,gBAAgB,CAAC;IACjC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAkDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,cAAmB,GAC3B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAmB,GAC3B,eAAe,GAAG,IAAI,CAoExB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,SAAS,CAAC,CA+IpB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,YAAc,EAC9B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAWf;AAMD,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAyC/E;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAwCnB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAEnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,IAAI,GACJ,MAAM,GACN,OAAO,GACP,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,IAAI,GACJ,OAAO,GACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf;;;;OAIG;IACH,cAAc,EAAE,gBAAgB,CAAC;IACjC;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAkDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,cAAmB,GAC3B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAmB,GAC3B,eAAe,GAAG,IAAI,CAoExB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,SAAS,CAAC,CA+IpB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,YAAc,EAC9B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAWf;AAMD,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAyC/E;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAwCnB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAEnE"}