@wrongstack/plugins 0.308.6 → 0.308.7

package/dist/schema-evolution-guard.js

@@ -1,29 +1,25 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/schema-evolution-guard/index.ts
 import { readFileSync } from "node:fs";
-import { basename as basename2 } from "node:path";
+import { basename } from "node:path";
 
 // src/runtime/index.ts
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
-function hasLeadingDash(arg) {
-  return arg.length > 0 && arg.startsWith("-");
-}
-function withinProjectPath(projectRoot, candidate) {
-  if (candidate.length === 0 || candidate.length > 4096) return false;
-  if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function withinProject(p) {
-  const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
-}
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/schema-evolution-guard/index.ts
 var API_VERSION = "^0.1.10";
@@ -212,7 +208,7 @@ var plugin = {
       const filePath = typeof toolInput["path"] === "string" ? toolInput["path"] : void 0;
       if (!filePath) return;
       state.invocationCount += 1;
-      const fileName = basename2(filePath);
+      const fileName = basename(filePath);
       if (!matchesAnyPattern(fileName, cfg.filePatterns)) {
         state.skippedCount += 1;
         return;
@@ -225,7 +221,7 @@ var plugin = {
       let content;
       if (typeof toolInput["content"] === "string") {
         content = toolInput["content"];
-      } else if (withinProject(filePath)) {
+      } else if ((0, runtime_exports.withinProject)(filePath)) {
         try {
           content = readFileSync(filePath, "utf-8");
         } catch {

package/dist/secret-scanner.js

@@ -1,151 +1,27 @@
-// src/runtime/credential-patterns.ts
-var CREDENTIAL_PATTERNS = [
-  // LLM provider keys
-  {
-    type: "anthropic_key",
-    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
-  },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
-  // GitHub. `ghp_` is only the personal-access-token prefix — the OAuth
-  // (`gho_`), user-to-server (`ghu_`), server-to-server (`ghs_`) and
-  // refresh (`ghr_`) tokens grant the same or broader access and were
-  // previously not detected at all.
-  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
-  {
-    type: "github_oauth_token",
-    regex: /(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g
-  },
-  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
-  // GitLab
-  { type: "gitlab_pat", regex: /(?<![A-Za-z0-9])glpat-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  {
-    type: "gitlab_runner_token",
-    regex: /(?<![A-Za-z0-9])glrt-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // npm — a leaked publish token is a supply-chain compromise.
-  { type: "npm_token", regex: /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36}(?![A-Za-z0-9])/g },
-  // AWS
-  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
-  // GCP
-  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
-  // Slack. `xoxe` (token-rotation) and `xapp` (app-level) were missing;
-  // both are as sensitive as the bot/user tokens already covered.
-  {
-    type: "slack_token",
-    regex: /(?<![A-Za-z0-9-])xox[abposer]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g
-  },
-  { type: "slack_app_token", regex: /(?<![A-Za-z0-9-])xapp-\d-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
-  {
-    type: "slack_webhook",
-    regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Za-z0-9_-]+\/B[A-Za-z0-9_-]+\/[A-Za-z0-9]{16,}/g
-  },
-  // Stripe
-  {
-    type: "stripe_key",
-    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
-  },
-  // Twilio
-  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
-  // Telegram
-  {
-    type: "telegram_bot_token",
-    regex: /(?:(?<![A-Za-z0-9_])|(?<=(?:^|[^A-Za-z0-9_])bot))\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // JWT
-  {
-    type: "jwt",
-    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
-  },
-  // Private keys
-  {
-    type: "private_key",
-    regex: /(?:^|\n)(?:-----BEGIN (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----[\s\S]*?-----END (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----|-----BEGIN PGP PRIVATE KEY BLOCK-----[\s\S]*?-----END PGP PRIVATE KEY BLOCK-----)(?!\S)/g
-  },
-  // AI/ML provider tokens
-  { type: "huggingface_token", regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g },
-  { type: "replicate_token", regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "perplexity_key", regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  // SaaS / infrastructure tokens — each grants API access on the user's
-  // account, and each was previously invisible to this gate.
-  { type: "sendgrid_key", regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  { type: "digitalocean_token", regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g },
-  { type: "doppler_token", regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "shopify_token", regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g },
-  { type: "docker_pat", regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  { type: "linear_key", regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "atlassian_token", regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g },
-  { type: "square_token", regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  {
-    type: "azure_storage_key",
-    regex: /AccountKey=[A-Za-z0-9+/]{80,}={0,2}/g
-  },
-  {
-    type: "google_oauth_client_secret",
-    regex: /(?<![A-Za-z0-9_-])GOCSPX-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // Bearer tokens
-  {
-    type: "bearer_token",
-    regex: /(?<![A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?![A-Za-z0-9._~+/-])/g
-  },
-  // Database URIs. Require password-bearing user-info; credential-free values stay scannable.
-  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  {
-    type: "postgres_uri",
-    // Query parsers decode percent-encoded parameter names. Recognize each
-    // encoded character in `password` so mixed forms such as `pass%77ord`
-    // cannot bypass detection while keeping the scan strictly bounded.
-    regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
-  },
-  { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  {
-    // Credentials serialised as JSON, keyed rather than prefixed. Every other
-    // entry in this table recognises a credential by its SHAPE (`ghp_`, `sk-`,
-    // `eyJ`), which means a key with no distinctive prefix — Azure, a
-    // self-hosted gateway, an Anthropic/Codex OAuth token — was invisible to
-    // both surfaces. `prompt-firewall` guards the outgoing provider request, so
-    // this is what stops a JSON-shaped tool result carrying such a value to a
-    // third party.
-    //
-    // The key is matched in a LOOKBEHIND, so the reported match is the secret
-    // itself and the pattern keeps zero capturing groups — `secret-scanner`
-    // maps a combined-regex group index back to the pattern that fired, and an
-    // inner group would shift that mapping (see the style note above, enforced
-    // by credential-pattern-parity.test.ts).
-    //
-    // Mirrors `json_credential_key` in
-    // `@wrongstack/core` → `src/security/secret-scrubber.ts`. Keep the two key
-    // lists in step; the core side additionally preserves the key name when it
-    // rewrites, which is why it is written with capture groups instead.
-    type: "json_credential_key",
-    regex: /(?<="[A-Za-z0-9_]{0,64}(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s{0,8}:\s{0,8}")[^"\\]{8,512}(?=")/gi
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
   }
-];
-function cloneCredentialPatterns() {
-  return CREDENTIAL_PATTERNS.map((p) => ({
-    type: p.type,
-    regex: new RegExp(p.regex.source, p.regex.flags)
-  }));
-}
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 
-// src/runtime/handles.ts
-function releaseHandle(off) {
-  if (off) {
-    try {
-      off();
-    } catch {
-    }
-  }
-  return null;
-}
+// src/runtime/credential-patterns.ts
+import {
+  cloneCredentialPatterns,
+  CREDENTIAL_PATTERNS
+} from "@wrongstack/plugin-sdk/runtime";
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/secret-scanner/index.ts
 var BASE_PATTERNS = cloneCredentialPatterns();
@@ -490,8 +366,8 @@ var plugin = {
   setup(api) {
     const previous = runtimes.get(api);
     if (previous) {
-      previous.state.hookUnregister = releaseHandle(previous.state.hookUnregister);
-      previous.state.postHookUnregister = releaseHandle(previous.state.postHookUnregister);
+      previous.state.hookUnregister = (0, runtime_exports.releaseHandle)(previous.state.hookUnregister);
+      previous.state.postHookUnregister = (0, runtime_exports.releaseHandle)(previous.state.postHookUnregister);
     }
     const cfg = readConfig(api.config.extensions?.["secret-scanner"]);
     PATTERNS = [...BASE_PATTERNS];

package/dist/security-hotspot-scanner.js

@@ -1,155 +1,25 @@
-// src/security-hotspot-scanner/index.ts
-import { readdir, readFile, stat } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
-
-// src/runtime/index.ts
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/bounded-map.ts
-var BoundedMap = class {
-  map = /* @__PURE__ */ new Map();
-  max;
-  ttlMs;
-  now;
-  /** Entries dropped to stay under `max`. Surfaced by plugin health(). */
-  evictions = 0;
-  constructor(options) {
-    const normalizedMax = Math.floor(options.max);
-    this.max = Number.isSafeInteger(normalizedMax) ? Math.max(1, normalizedMax) : 1;
-    this.ttlMs = options.ttlMs;
-    this.now = options.now ?? Date.now;
-  }
-  expired(entry) {
-    return this.ttlMs !== void 0 && this.now() - entry.storedAt > this.ttlMs;
-  }
-  get(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0) return void 0;
-    if (this.expired(entry)) {
-      this.map.delete(key);
-      return void 0;
-    }
-    this.map.delete(key);
-    this.map.set(key, entry);
-    return entry.value;
-  }
-  /**
-   * Read without promoting the key to most-recently-used. Use for
-   * diagnostics that must not perturb the eviction order.
-   */
-  peek(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0 || this.expired(entry)) return void 0;
-    return entry.value;
-  }
-  has(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0) return false;
-    if (this.expired(entry)) {
-      this.map.delete(key);
-      return false;
-    }
-    return true;
-  }
-  set(key, value) {
-    this.map.delete(key);
-    this.map.set(key, { value, storedAt: this.now() });
-    while (this.map.size > this.max) {
-      const coldest = this.map.keys().next().value;
-      if (coldest === void 0) break;
-      this.map.delete(coldest);
-      this.evictions += 1;
-    }
-    return this;
-  }
-  delete(key) {
-    return this.map.delete(key);
-  }
-  clear() {
-    this.map.clear();
-    this.evictions = 0;
-  }
-  get size() {
-    return this.map.size;
-  }
-  /** How many entries have been dropped to respect `max`, since the last clear. */
-  get evictionCount() {
-    return this.evictions;
-  }
-  /** Drop every expired entry. Cheap enough to call from a status tool. */
-  prune() {
-    if (this.ttlMs === void 0) return 0;
-    let removed = 0;
-    for (const [key, entry] of this.map) {
-      if (this.expired(entry)) {
-        this.map.delete(key);
-        removed += 1;
-      }
-    }
-    return removed;
-  }
-  /** Live (non-expired) entries, coldest first. */
-  *entries() {
-    for (const [key, entry] of this.map) {
-      if (!this.expired(entry)) yield [key, entry.value];
-    }
-  }
-  [Symbol.iterator]() {
-    return this.entries();
-  }
-};
-var BoundedSet = class {
-  inner;
-  constructor(options) {
-    this.inner = new BoundedMap(options);
-  }
-  has(value) {
-    return this.inner.has(value);
-  }
-  add(value) {
-    this.inner.set(value, true);
-    return this;
-  }
-  delete(value) {
-    return this.inner.delete(value);
-  }
-  clear() {
-    this.inner.clear();
-  }
-  get size() {
-    return this.inner.size;
-  }
-  /** How many entries have been dropped to respect `max`, since the last clear. */
-  get evictionCount() {
-    return this.inner.evictionCount;
-  }
-  *values() {
-    for (const [key] of this.inner) yield key;
-  }
-  [Symbol.iterator]() {
-    return this.values();
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
   }
+  return to;
 };
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
+// src/security-hotspot-scanner/index.ts
+import { readdir, readFile, stat } from "node:fs/promises";
+import { isAbsolute, relative, resolve } from "node:path";
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
-function hasLeadingDash(arg) {
-  return arg.length > 0 && arg.startsWith("-");
-}
-function withinProjectPath(projectRoot, candidate) {
-  if (candidate.length === 0 || candidate.length > 4096) return false;
-  if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function withinProject(p) {
-  const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
-}
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/security-hotspot-scanner/index.ts
 var API_VERSION = "^0.1.10";
@@ -161,7 +31,7 @@ var state = {
   skippedCount: 0,
   blockedCount: 0,
   lastResult: null,
-  knownHotspots: new BoundedSet({ max: 5e3 }),
+  knownHotspots: new runtime_exports.BoundedSet({ max: 5e3 }),
   hookUnregister: null
 };
 var DEFAULTS = {
@@ -242,8 +112,8 @@ function isSourceFile(filePath, extensions) {
 async function scanPath(inputPath, cfg) {
   const start = Date.now();
   const root = process.cwd();
-  const resolved = isAbsolute2(inputPath) ? resolve2(inputPath) : resolve2(root, inputPath);
-  if (!withinProject(inputPath)) {
+  const resolved = isAbsolute(inputPath) ? resolve(inputPath) : resolve(root, inputPath);
+  if (!(0, runtime_exports.withinProject)(inputPath)) {
     return {
       path: inputPath,
       scanned: false,
@@ -263,7 +133,7 @@ async function scanPath(inputPath, cfg) {
       filesScanned += 1;
       const findings = scanSource(content, maxPerFile);
       for (const f of findings) {
-        allFindings.push({ ...f, snippet: `${relative2(root, filePath)}:${f.line}: ${f.snippet}` });
+        allFindings.push({ ...f, snippet: `${relative(root, filePath)}:${f.line}: ${f.snippet}` });
         if (allFindings.length >= cfg.maxFindings) return;
       }
     } catch {
@@ -278,7 +148,7 @@ async function scanPath(inputPath, cfg) {
     }
     for (const entry of entries) {
       if (allFindings.length >= cfg.maxFindings) return;
-      const full = resolve2(dir, entry);
+      const full = resolve(dir, entry);
       try {
         const st = await stat(full);
         if (st.isDirectory()) {
@@ -382,7 +252,7 @@ var plugin = {
       const inp = input.toolInput ?? {};
       const sourcePath = inp["path"];
       if (!sourcePath || typeof sourcePath !== "string") return;
-      if (!withinProject(sourcePath)) return;
+      if (!(0, runtime_exports.withinProject)(sourcePath)) return;
       const ext = sourcePath.includes(".") ? sourcePath.slice(sourcePath.lastIndexOf(".")).toLowerCase() : "";
       if (!scanOnChangeSet.has(ext)) {
         state.skippedCount += 1;

package/dist/session-recap.js

@@ -1,19 +1,21 @@
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/handles.ts
-function releaseHandle(off) {
-  if (off) {
-    try {
-      off();
-    } catch {
-    }
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
   }
-  return null;
-}
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/session-recap/index.ts
 var state = {
@@ -206,7 +208,7 @@ var plugin = {
     state.commitCount = 0;
     state.startedAt = null;
     state.lastActivityAt = null;
-    state.stopHookUnregister = releaseHandle(state.stopHookUnregister);
+    state.stopHookUnregister = (0, runtime_exports.releaseHandle)(state.stopHookUnregister);
     for (const off of state.eventUnsubscribers) {
       try {
         off();

package/dist/spec-linker.js

@@ -1,22 +1,24 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/spec-linker/index.ts
 import * as fs from "node:fs/promises";
 
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/handles.ts
-function releaseHandle(off) {
-  if (off) {
-    try {
-      off();
-    } catch {
-    }
-  }
-  return null;
-}
-
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/manifest/index.ts
 var OFFICIAL_PLUGIN_NAMES = [
@@ -348,8 +350,8 @@ var plugin = {
     state.skippedNonMd = 0;
     state.readErrorCount = 0;
     state.autoFixApplied = 0;
-    state.postHookUnregister = releaseHandle(state.postHookUnregister);
-    state.preHookUnregister = releaseHandle(state.preHookUnregister);
+    state.postHookUnregister = (0, runtime_exports.releaseHandle)(state.postHookUnregister);
+    state.preHookUnregister = (0, runtime_exports.releaseHandle)(state.preHookUnregister);
     const cfg = readConfig(api.config.extensions?.["spec-linker"]);
     const postHook = async (input) => {
       if (!cfg.enabled) return;

package/dist/template-engine.js

@@ -1,40 +1,25 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/template-engine/index.ts
 import { readFile, writeFile } from "node:fs/promises";
-import { isAbsolute as isAbsolute2 } from "node:path";
-
-// src/runtime/index.ts
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/handles.ts
-function releaseHandle(off) {
-  if (off) {
-    try {
-      off();
-    } catch {
-    }
-  }
-  return null;
-}
+import { isAbsolute } from "node:path";
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
-function hasLeadingDash(arg) {
-  return arg.length > 0 && arg.startsWith("-");
-}
-function withinProjectPath(projectRoot, candidate) {
-  if (candidate.length === 0 || candidate.length > 4096) return false;
-  if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function withinProject(p) {
-  const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
-}
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/template-engine/index.ts
 var API_VERSION = "^0.1.10";
@@ -92,10 +77,10 @@ function renderTemplateRaw(template, variables) {
   return result;
 }
 function validateRelativeTemplatePath(field, value) {
-  if (isAbsolute2(value) || value.split(/[\\/]+/).includes("..")) {
+  if (isAbsolute(value) || value.split(/[\\/]+/).includes("..")) {
     return `${field} must be a relative path without ".." components`;
   }
-  if (!withinProject(value)) {
+  if (!(0, runtime_exports.withinProject)(value)) {
     return `${field} must resolve inside the project directory`;
   }
   return null;
@@ -398,7 +383,7 @@ var plugin = {
         };
       }
     });
-    contributorUnregister = releaseHandle(contributorUnregister);
+    contributorUnregister = (0, runtime_exports.releaseHandle)(contributorUnregister);
     contributorUnregister = api.registerSystemPromptContributor(async () => [
       {
         type: "text",
@@ -414,7 +399,7 @@ var plugin = {
   teardown(api) {
     const count = templates.size;
     templates.clear();
-    contributorUnregister = releaseHandle(contributorUnregister);
+    contributorUnregister = (0, runtime_exports.releaseHandle)(contributorUnregister);
     api.log.info("template-engine: teardown complete", { cleared: count });
   },
   async health() {