@wrongstack/plugins 0.308.6 → 0.309.0

package/dist/path-guard.js

@@ -1,79 +1,22 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/runtime/redos-guard.ts
-import { Worker } from "node:worker_threads";
-function withReDoSGuard(re, input, budgetMs = 50, options = {}) {
-  const opts = { budgetMs, ...options };
-  const start = Date.now();
-  const workerSource = buildWorkerSource(re.source, input, re.flags);
-  const worker = new Worker(workerSource, {
-    eval: true,
-    name: `redos-guard:${re.source.slice(0, 32)}`
-  });
-  return new Promise((resolve3) => {
-    let settled = false;
-    const onMessage = (msg) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      worker.terminate().catch(() => {
-      });
-      if (!msg.ok) {
-        resolve3({ timedOut: true, match: null });
-        return;
-      }
-      resolve3({ timedOut: false, match: msg.match });
-    };
-    const onError = () => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      worker.terminate().catch(() => {
-      });
-      resolve3({ timedOut: true, match: null });
-    };
-    const timer = setTimeout(() => {
-      if (settled) return;
-      settled = true;
-      const elapsedMs = Date.now() - start;
-      worker.terminate().catch(() => {
-      });
-      try {
-        opts.onTimeout?.({
-          regex: re,
-          input,
-          budgetMs: opts.budgetMs,
-          elapsedMs
-        });
-      } catch {
-      }
-      resolve3({ timedOut: true, match: null });
-    }, opts.budgetMs);
-    timer.unref?.();
-    worker.on("message", onMessage);
-    worker.on("error", onError);
-  });
-}
-function buildWorkerSource(source, input, flags) {
-  const S = JSON.stringify(source);
-  const I = JSON.stringify(input);
-  const F = JSON.stringify(flags);
-  return `
-const { parentPort } = require('node:worker_threads');
-const source = ${S};
-const input = ${I};
-const flags = ${F};
-try {
-  const re = new RegExp(source, flags);
-  const match = re.exec(input);
-  // parentPort.postMessage, NOT bare postMessage: with eval:true
-  // workers this Node version does not expose the bare postMessage
-  // global \u2014 the worker throws ReferenceError at startup and the
-  // host misreads it as a timeout (positive-path regression).
-  parentPort.postMessage({ ok: true, match });
-} catch (err) {
-  parentPort.postMessage({ ok: false, error: err && err.message ? err.message : String(err) });
-}
-`;
-}
+import {
+  withReDoSGuard,
+  guardedMatcher
+} from "@wrongstack/plugin-sdk/runtime";
 
 // src/path-guard/glob.ts
 var GLOB_REDOS_BUDGET_MS = 250;
@@ -189,8 +132,8 @@ function isRootPathScope(path) {
 function isDirectoryAmbiguousPath(path) {
   const normalized = normalizePath(path).replace(/\/$/, "");
   if (isRootPathScope(normalized)) return true;
-  const basename2 = normalized.slice(normalized.lastIndexOf("/") + 1);
-  return path.endsWith("/") || basename2.length > 0 && !basename2.includes(".");
+  const basename = normalized.slice(normalized.lastIndexOf("/") + 1);
+  return path.endsWith("/") || basename.length > 0 && !basename.includes(".");
 }
 function hasConfiguredProtectedDescendant(path, patterns) {
   const normalized = normalizePath(path).replace(/\/$/, "").toLowerCase();
@@ -1365,38 +1308,20 @@ function operationLabel(toolName) {
 
 // src/path-guard/index.ts
 import { realpathSync } from "node:fs";
-import { resolve as resolve2 } from "node:path";
-
-// src/runtime/index.ts
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
+import { resolve } from "node:path";
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
-function hasLeadingDash(arg) {
-  return arg.length > 0 && arg.startsWith("-");
-}
-function withinProjectPath(projectRoot, candidate) {
-  if (candidate.length === 0 || candidate.length > 4096) return false;
-  if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function withinProject(p) {
-  const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
-}
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/path-guard/index.ts
 function isSymlinkEscape(path, cwd) {
-  if (!withinProject(path)) return false;
+  if (!(0, runtime_exports.withinProject)(path)) return false;
   try {
-    const abs = resolve2(cwd ?? process.cwd(), path);
+    const abs = resolve(cwd ?? process.cwd(), path);
     const real = realpathSync(abs);
-    return !withinProject(real);
+    return !(0, runtime_exports.withinProject)(real);
   } catch {
     return false;
   }

package/dist/pr-drafter.js

@@ -1,24 +1,26 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
 // src/pr-drafter/index.ts
 import { execFile } from "node:child_process";
 import { mkdir, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/handles.ts
-function releaseHandle(off) {
-  if (off) {
-    try {
-      off();
-    } catch {
-    }
-  }
-  return null;
-}
-
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/pr-drafter/index.ts
 var API_VERSION = "^0.1.10";
@@ -216,7 +218,7 @@ var plugin = {
     state.draftsWritten = 0;
     state.draftErrors = 0;
     state.stopInvocations = 0;
-    state.stopHookUnregister = releaseHandle(state.stopHookUnregister);
+    state.stopHookUnregister = (0, runtime_exports.releaseHandle)(state.stopHookUnregister);
     for (const off of state.eventUnsubscribers) {
       try {
         off();

package/dist/prompt-firewall.js

@@ -2,213 +2,16 @@
 import { performance } from "node:perf_hooks";
 
 // src/runtime/credential-patterns.ts
-var CREDENTIAL_PATTERNS = [
-  // LLM provider keys
-  {
-    type: "anthropic_key",
-    regex: /(?<![A-Za-z0-9])sk-ant-api\d+-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g
-  },
-  { type: "openai_key", regex: /(?<![A-Za-z0-9])sk-(?!ant)(?:proj-)?[A-Za-z0-9_-]{20,}(?![A-Za-z0-9])/g },
-  // GitHub. `ghp_` is only the personal-access-token prefix — the OAuth
-  // (`gho_`), user-to-server (`ghu_`), server-to-server (`ghs_`) and
-  // refresh (`ghr_`) tokens grant the same or broader access and were
-  // previously not detected at all.
-  { type: "github_pat", regex: /(?<![A-Za-z0-9])ghp_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g },
-  {
-    type: "github_oauth_token",
-    regex: /(?<![A-Za-z0-9])gh[ousr]_[A-Za-z0-9]{36,}(?![A-Za-z0-9])/g
-  },
-  { type: "github_pat_v2", regex: /(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}(?![A-Za-z0-9])/g },
-  // GitLab
-  { type: "gitlab_pat", regex: /(?<![A-Za-z0-9])glpat-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  {
-    type: "gitlab_runner_token",
-    regex: /(?<![A-Za-z0-9])glrt-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // npm — a leaked publish token is a supply-chain compromise.
-  { type: "npm_token", regex: /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36}(?![A-Za-z0-9])/g },
-  // AWS
-  { type: "aws_access_key", regex: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g },
-  // GCP
-  { type: "gcp_key", regex: /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}(?![A-Za-z0-9])/g },
-  // Slack. `xoxe` (token-rotation) and `xapp` (app-level) were missing;
-  // both are as sensitive as the bot/user tokens already covered.
-  {
-    type: "slack_token",
-    regex: /(?<![A-Za-z0-9-])xox[abposer]-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g
-  },
-  { type: "slack_app_token", regex: /(?<![A-Za-z0-9-])xapp-\d-[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g },
-  {
-    type: "slack_webhook",
-    regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Za-z0-9_-]+\/B[A-Za-z0-9_-]+\/[A-Za-z0-9]{16,}/g
-  },
-  // Stripe
-  {
-    type: "stripe_key",
-    regex: /(?<![A-Za-z0-9])sk_(?:live|test)_[A-Za-z0-9]{24,}(?![A-Za-z0-9])/g
-  },
-  // Twilio
-  { type: "twilio_sid", regex: /(?<![A-Za-z0-9])AC[a-f0-9]{32}(?![A-Za-z0-9])/g },
-  // Telegram
-  {
-    type: "telegram_bot_token",
-    regex: /(?:(?<![A-Za-z0-9_])|(?<=(?:^|[^A-Za-z0-9_])bot))\d+:[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // JWT
-  {
-    type: "jwt",
-    regex: /(?<![A-Za-z0-9/+=])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9/+=])/g
-  },
-  // Private keys
-  {
-    type: "private_key",
-    regex: /(?:^|\n)(?:-----BEGIN (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----[\s\S]*?-----END (?:RSA|EC|OPENSSH|DSA)? ?PRIVATE KEY-----|-----BEGIN PGP PRIVATE KEY BLOCK-----[\s\S]*?-----END PGP PRIVATE KEY BLOCK-----)(?!\S)/g
-  },
-  // AI/ML provider tokens
-  { type: "huggingface_token", regex: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34}(?![A-Za-z0-9])/g },
-  { type: "replicate_token", regex: /(?<![A-Za-z0-9])r8_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "perplexity_key", regex: /(?<![A-Za-z0-9])pplx-[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "groq_key", regex: /(?<![A-Za-z0-9])gsk_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  // SaaS / infrastructure tokens — each grants API access on the user's
-  // account, and each was previously invisible to this gate.
-  { type: "sendgrid_key", regex: /(?<![A-Za-z0-9])SG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  { type: "digitalocean_token", regex: /(?<![A-Za-z0-9])dop_v1_[a-f0-9]{64}(?![A-Za-z0-9])/g },
-  { type: "doppler_token", regex: /(?<![A-Za-z0-9])dp\.(?:pt|st|sa|scim|audit)\.[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "shopify_token", regex: /(?<![A-Za-z0-9])shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32}(?![A-Za-z0-9])/g },
-  { type: "docker_pat", regex: /(?<![A-Za-z0-9])dckr_pat_[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  { type: "linear_key", regex: /(?<![A-Za-z0-9])lin_api_[A-Za-z0-9]{40,}(?![A-Za-z0-9])/g },
-  { type: "atlassian_token", regex: /(?<![A-Za-z0-9])ATATT3[A-Za-z0-9_\-=]{40,}(?![A-Za-z0-9_\-=])/g },
-  { type: "square_token", regex: /(?<![A-Za-z0-9])(?:sq0(?:atp|csp)-|EAAA)[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g },
-  {
-    type: "azure_storage_key",
-    regex: /AccountKey=[A-Za-z0-9+/]{80,}={0,2}/g
-  },
-  {
-    type: "google_oauth_client_secret",
-    regex: /(?<![A-Za-z0-9_-])GOCSPX-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  // Bearer tokens
-  {
-    type: "bearer_token",
-    regex: /(?<![A-Za-z0-9_.~+/-])Bearer\s+[A-Za-z0-9._~+/-]{12,512}=*(?![A-Za-z0-9._~+/-])/g
-  },
-  // Database URIs. Require password-bearing user-info; credential-free values stay scannable.
-  { type: "mongodb_uri", regex: /mongodb(?:\+srv)?:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  {
-    type: "postgres_uri",
-    // Query parsers decode percent-encoded parameter names. Recognize each
-    // encoded character in `password` so mixed forms such as `pass%77ord`
-    // cannot bypass detection while keeping the scan strictly bounded.
-    regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
-  },
-  { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  {
-    // Credentials serialised as JSON, keyed rather than prefixed. Every other
-    // entry in this table recognises a credential by its SHAPE (`ghp_`, `sk-`,
-    // `eyJ`), which means a key with no distinctive prefix — Azure, a
-    // self-hosted gateway, an Anthropic/Codex OAuth token — was invisible to
-    // both surfaces. `prompt-firewall` guards the outgoing provider request, so
-    // this is what stops a JSON-shaped tool result carrying such a value to a
-    // third party.
-    //
-    // The key is matched in a LOOKBEHIND, so the reported match is the secret
-    // itself and the pattern keeps zero capturing groups — `secret-scanner`
-    // maps a combined-regex group index back to the pattern that fired, and an
-    // inner group would shift that mapping (see the style note above, enforced
-    // by credential-pattern-parity.test.ts).
-    //
-    // Mirrors `json_credential_key` in
-    // `@wrongstack/core` → `src/security/secret-scrubber.ts`. Keep the two key
-    // lists in step; the core side additionally preserves the key name when it
-    // rewrites, which is why it is written with capture groups instead.
-    type: "json_credential_key",
-    regex: /(?<="[A-Za-z0-9_]{0,64}(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s{0,8}:\s{0,8}")[^"\\]{8,512}(?=")/gi
-  }
-];
-function cloneCredentialPatterns() {
-  return CREDENTIAL_PATTERNS.map((p) => ({
-    type: p.type,
-    regex: new RegExp(p.regex.source, p.regex.flags)
-  }));
-}
+import {
+  cloneCredentialPatterns,
+  CREDENTIAL_PATTERNS
+} from "@wrongstack/plugin-sdk/runtime";
 
 // src/runtime/redos-guard.ts
-import { Worker } from "node:worker_threads";
-function withReDoSGuard(re, input, budgetMs = 50, options = {}) {
-  const opts = { budgetMs, ...options };
-  const start = Date.now();
-  const workerSource = buildWorkerSource(re.source, input, re.flags);
-  const worker = new Worker(workerSource, {
-    eval: true,
-    name: `redos-guard:${re.source.slice(0, 32)}`
-  });
-  return new Promise((resolve) => {
-    let settled = false;
-    const onMessage = (msg) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      worker.terminate().catch(() => {
-      });
-      if (!msg.ok) {
-        resolve({ timedOut: true, match: null });
-        return;
-      }
-      resolve({ timedOut: false, match: msg.match });
-    };
-    const onError = () => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      worker.terminate().catch(() => {
-      });
-      resolve({ timedOut: true, match: null });
-    };
-    const timer = setTimeout(() => {
-      if (settled) return;
-      settled = true;
-      const elapsedMs = Date.now() - start;
-      worker.terminate().catch(() => {
-      });
-      try {
-        opts.onTimeout?.({
-          regex: re,
-          input,
-          budgetMs: opts.budgetMs,
-          elapsedMs
-        });
-      } catch {
-      }
-      resolve({ timedOut: true, match: null });
-    }, opts.budgetMs);
-    timer.unref?.();
-    worker.on("message", onMessage);
-    worker.on("error", onError);
-  });
-}
-function buildWorkerSource(source, input, flags) {
-  const S = JSON.stringify(source);
-  const I = JSON.stringify(input);
-  const F = JSON.stringify(flags);
-  return `
-const { parentPort } = require('node:worker_threads');
-const source = ${S};
-const input = ${I};
-const flags = ${F};
-try {
-  const re = new RegExp(source, flags);
-  const match = re.exec(input);
-  // parentPort.postMessage, NOT bare postMessage: with eval:true
-  // workers this Node version does not expose the bare postMessage
-  // global \u2014 the worker throws ReferenceError at startup and the
-  // host misreads it as a timeout (positive-path regression).
-  parentPort.postMessage({ ok: true, match });
-} catch (err) {
-  parentPort.postMessage({ ok: false, error: err && err.message ? err.message : String(err) });
-}
-`;
-}
+import {
+  withReDoSGuard,
+  guardedMatcher
+} from "@wrongstack/plugin-sdk/runtime";
 
 // src/prompt-firewall/index.ts
 var KIND_ALIASES = {

package/dist/refactor-suggester.js

@@ -1,164 +1,25 @@
-// src/refactor-suggester/index.ts
-import { readFile } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve2 } from "node:path";
-
-// src/runtime/index.ts
-import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-
-// src/runtime/local-bin.ts
-import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
-
-// src/runtime/bounded-map.ts
-var BoundedMap = class {
-  map = /* @__PURE__ */ new Map();
-  max;
-  ttlMs;
-  now;
-  /** Entries dropped to stay under `max`. Surfaced by plugin health(). */
-  evictions = 0;
-  constructor(options) {
-    const normalizedMax = Math.floor(options.max);
-    this.max = Number.isSafeInteger(normalizedMax) ? Math.max(1, normalizedMax) : 1;
-    this.ttlMs = options.ttlMs;
-    this.now = options.now ?? Date.now;
-  }
-  expired(entry) {
-    return this.ttlMs !== void 0 && this.now() - entry.storedAt > this.ttlMs;
-  }
-  get(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0) return void 0;
-    if (this.expired(entry)) {
-      this.map.delete(key);
-      return void 0;
-    }
-    this.map.delete(key);
-    this.map.set(key, entry);
-    return entry.value;
-  }
-  /**
-   * Read without promoting the key to most-recently-used. Use for
-   * diagnostics that must not perturb the eviction order.
-   */
-  peek(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0 || this.expired(entry)) return void 0;
-    return entry.value;
-  }
-  has(key) {
-    const entry = this.map.get(key);
-    if (entry === void 0) return false;
-    if (this.expired(entry)) {
-      this.map.delete(key);
-      return false;
-    }
-    return true;
-  }
-  set(key, value) {
-    this.map.delete(key);
-    this.map.set(key, { value, storedAt: this.now() });
-    while (this.map.size > this.max) {
-      const coldest = this.map.keys().next().value;
-      if (coldest === void 0) break;
-      this.map.delete(coldest);
-      this.evictions += 1;
-    }
-    return this;
-  }
-  delete(key) {
-    return this.map.delete(key);
-  }
-  clear() {
-    this.map.clear();
-    this.evictions = 0;
-  }
-  get size() {
-    return this.map.size;
-  }
-  /** How many entries have been dropped to respect `max`, since the last clear. */
-  get evictionCount() {
-    return this.evictions;
-  }
-  /** Drop every expired entry. Cheap enough to call from a status tool. */
-  prune() {
-    if (this.ttlMs === void 0) return 0;
-    let removed = 0;
-    for (const [key, entry] of this.map) {
-      if (this.expired(entry)) {
-        this.map.delete(key);
-        removed += 1;
-      }
-    }
-    return removed;
-  }
-  /** Live (non-expired) entries, coldest first. */
-  *entries() {
-    for (const [key, entry] of this.map) {
-      if (!this.expired(entry)) yield [key, entry.value];
-    }
-  }
-  [Symbol.iterator]() {
-    return this.entries();
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
   }
+  return to;
 };
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+
+// src/refactor-suggester/index.ts
+import { readFile } from "node:fs/promises";
+import { isAbsolute, relative, resolve } from "node:path";
 
 // src/runtime/index.ts
-var MAX_BUFFER_BYTES = 16 * 1024 * 1024;
-function hasLeadingDash(arg) {
-  return arg.length > 0 && arg.startsWith("-");
-}
-function withinProjectPath(projectRoot, candidate) {
-  if (candidate.length === 0 || candidate.length > 4096) return false;
-  if (hasLeadingDash(candidate)) return false;
-  const resolved = isAbsolute(candidate) ? resolve(candidate) : resolve(projectRoot, candidate);
-  const rel = relative(projectRoot, resolved);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
-function withinProject(p) {
-  const cwd = process.cwd();
-  return withinProjectPath(cwd, p) || relative(cwd, p) === ".";
-}
-var DEFAULT_EXCLUDE_DIRS = ["node_modules", "dist", ".git", "coverage"];
-async function collectSourceFilesAsync(root, opts) {
-  const { readdir, stat } = await import("node:fs/promises");
-  const files = [];
-  try {
-    const s = await stat(root);
-    if (s.isFile()) {
-      if (matchesExtension(root, opts.extensions)) files.push(root);
-      return files;
-    }
-    if (!s.isDirectory()) return files;
-  } catch {
-    return files;
-  }
-  const exclude = opts.excludeDirs ?? DEFAULT_EXCLUDE_DIRS;
-  const excludeSet = new Set(exclude);
-  async function walk(dir, depth) {
-    if (opts.maxDepth !== void 0 && depth > opts.maxDepth) return;
-    let entries;
-    try {
-      entries = await readdir(dir, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    entries.sort((a, b) => a.name.localeCompare(b.name));
-    for (const entry of entries) {
-      if (excludeSet.has(entry.name)) continue;
-      const full = resolve(dir, entry.name);
-      if (entry.isDirectory()) {
-        await walk(full, depth + 1);
-      } else if (entry.isFile() && matchesExtension(full, opts.extensions)) {
-        files.push(full);
-      }
-    }
-  }
-  await walk(root, 0);
-  return files;
-}
-function matchesExtension(p, exts) {
-  return exts.includes(extname(p).toLowerCase());
-}
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
 
 // src/refactor-suggester/index.ts
 var API_VERSION = "^0.1.10";
@@ -170,7 +31,7 @@ var state = {
   warningCount: 0,
   errorCount: 0,
   hookUnregister: null,
-  lastHookWarning: new BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS })
+  lastHookWarning: new runtime_exports.BoundedMap({ max: 512, ttlMs: HOOK_WARNING_COOLDOWN_MS })
 };
 var DEFAULTS = {
   enabled: false,
@@ -204,7 +65,7 @@ function toPosix(p) {
   return p.replace(/\\/g, "/");
 }
 function relativePath(p) {
-  return toPosix(relative2(process.cwd(), p));
+  return toPosix(relative(process.cwd(), p));
 }
 function leadingIndentLevel(line) {
   const leading = line.match(/^(\s*)/)?.[1] ?? "";
@@ -291,9 +152,9 @@ function detectSmells(filePath, content, rules) {
 }
 async function scanPath(rawPath, cfg) {
   const root = process.cwd();
-  const resolved = isAbsolute2(rawPath) ? resolve2(rawPath) : resolve2(root, rawPath);
+  const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
   const exts = normalizeExtensions(cfg.extensions);
-  const files = await collectSourceFilesAsync(resolved, { extensions: exts });
+  const files = await (0, runtime_exports.collectSourceFilesAsync)(resolved, { extensions: exts });
   const suggestions = [];
   let scannedFiles = 0;
   let truncated = false;
@@ -371,14 +232,14 @@ var plugin = {
       const inp = input.toolInput ?? {};
       const sourcePath = inp["path"];
       if (!sourcePath || typeof sourcePath !== "string") return;
-      if (!withinProject(sourcePath)) return;
+      if (!(0, runtime_exports.withinProject)(sourcePath)) return;
       const exts = normalizeExtensions(cfg.extensions);
-      if (!matchesExtension(sourcePath, exts)) return;
+      if (!(0, runtime_exports.matchesExtension)(sourcePath, exts)) return;
       state.hookInvocationCount += 1;
       const now = Date.now();
       const lastWarning = state.lastHookWarning.get(sourcePath);
       if (lastWarning !== void 0 && now - lastWarning < HOOK_WARNING_COOLDOWN_MS) return;
-      const resolved = resolve2(process.cwd(), sourcePath);
+      const resolved = resolve(process.cwd(), sourcePath);
       let content;
       try {
         content = await readFile(resolved, "utf-8");
@@ -411,7 +272,7 @@ var plugin = {
       async execute(input) {
         if (!cfg.enabled) return { ok: false, error: "refactor-suggester is disabled" };
         const rawPath = typeof input.path === "string" ? input.path : ".";
-        if (!withinProject(rawPath)) {
+        if (!(0, runtime_exports.withinProject)(rawPath)) {
           return { ok: false, error: "path is outside the project root" };
         }
         state.scanCount += 1;
@@ -425,7 +286,7 @@ var plugin = {
         state.suggestionCount += result.suggestions.length;
         return {
           ok: true,
-          path: relativePath(resolve2(process.cwd(), rawPath)),
+          path: relativePath(resolve(process.cwd(), rawPath)),
           scannedFiles: result.scannedFiles,
           discoveredFiles: result.discoveredFiles,
           // Say so when the cap stopped the walk early: a partial scan