@wrongstack/plugins 0.319.1 → 1.0.0

package/dist/checkpoint.js

@@ -1,5 +1,5 @@
 // src/checkpoint/index.ts
-import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import { mkdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 var state = {
   snapshots: [],
@@ -28,13 +28,46 @@ function readConfig(raw) {
     maxFileBytes: typeof r["maxFileBytes"] === "number" && r["maxFileBytes"] >= 1024 ? r["maxFileBytes"] : DEFAULTS.maxFileBytes
   };
 }
-function resolveProjectPath(rawPath, cwd = process.cwd()) {
+async function resolveProjectPath(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
   const root = resolve(cwd);
   const resolved = isAbsolute(rawPath) ? resolve(rawPath) : resolve(root, rawPath);
   const rel = relative(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return resolved;
-  return null;
+  const lexicallyInside = rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+  if (!lexicallyInside) return null;
+  if (await realResolutionEscapes(resolved, root)) return null;
+  return resolved;
+}
+async function realResolutionEscapes(absPath, root) {
+  let real;
+  try {
+    real = await realpath(absPath);
+  } catch {
+    let current = dirname(absPath);
+    let hops = 0;
+    while (hops < 64 && !await pathExists(current)) {
+      const parent = dirname(current);
+      if (parent === current) return false;
+      current = parent;
+      hops++;
+    }
+    if (!await pathExists(current)) return false;
+    try {
+      real = await realpath(current);
+    } catch {
+      return false;
+    }
+  }
+  const realRel = relative(root, real);
+  return realRel !== "" && realRel !== "." && (realRel.startsWith("..") || isAbsolute(realRel));
+}
+async function pathExists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
 }
 function hashContent(s) {
   const cap = Math.min(s.length, 65536);
@@ -135,7 +168,7 @@ var plugin = {
         const ti = input.toolInput ?? {};
         const raw = ti["path"] ?? ti["file_path"] ?? ti["filePath"] ?? ti["TargetFile"] ?? ti["targetFile"] ?? ti["file"];
         if (typeof raw !== "string" || raw.length === 0) return;
-        const safePath = resolveProjectPath(raw);
+        const safePath = await resolveProjectPath(raw);
         if (!safePath) return;
         const captured = await captureFileForHook(safePath, cfg.maxFileBytes, runtime.signal);
         if (captured === "too-large") {
@@ -206,7 +239,7 @@ var plugin = {
         const rejectedOutsideProject = [];
         let skipped = 0;
         for (const p of paths) {
-          const safePath = resolveProjectPath(p);
+          const safePath = await resolveProjectPath(p);
           if (!safePath) {
             rejectedOutsideProject.push(p);
             continue;
@@ -313,7 +346,7 @@ var plugin = {
             error: rawId ? `no snapshot with id "${rawId}"` : "no snapshots captured yet"
           };
         }
-        const targetPath = rawPath ? resolveProjectPath(rawPath) ?? rawPath : null;
+        const targetPath = rawPath ? await resolveProjectPath(rawPath) ?? rawPath : null;
         const targets = targetPath ? snapshot.files.filter((f) => f.path === targetPath || f.path === rawPath) : snapshot.files;
         if (targets.length === 0) {
           return { ok: false, error: `snapshot ${snapshot.id} has no entry for "${rawPath}"` };

package/dist/index.js

@@ -2805,7 +2805,7 @@ var plugin8 = {
 var changelog_writer_default = plugin8;
 
 // src/checkpoint/index.ts
-import { mkdir, readFile as readFile3, stat, writeFile } from "node:fs/promises";
+import { mkdir, readFile as readFile3, realpath, stat, writeFile } from "node:fs/promises";
 import { dirname as dirname2, isAbsolute as isAbsolute5, relative as relative5, resolve as resolve5 } from "node:path";
 var state9 = {
   snapshots: [],
@@ -2834,13 +2834,46 @@ function readConfig8(raw) {
     maxFileBytes: typeof r["maxFileBytes"] === "number" && r["maxFileBytes"] >= 1024 ? r["maxFileBytes"] : DEFAULTS8.maxFileBytes
   };
 }
-function resolveProjectPath3(rawPath, cwd = process.cwd()) {
+async function resolveProjectPath3(rawPath, cwd = process.cwd()) {
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
   const root = resolve5(cwd);
   const resolved = isAbsolute5(rawPath) ? resolve5(rawPath) : resolve5(root, rawPath);
   const rel = relative5(root, resolved);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute5(rel)) return resolved;
-  return null;
+  const lexicallyInside = rel === "" || !rel.startsWith("..") && !isAbsolute5(rel);
+  if (!lexicallyInside) return null;
+  if (await realResolutionEscapes(resolved, root)) return null;
+  return resolved;
+}
+async function realResolutionEscapes(absPath, root) {
+  let real;
+  try {
+    real = await realpath(absPath);
+  } catch {
+    let current = dirname2(absPath);
+    let hops = 0;
+    while (hops < 64 && !await pathExists(current)) {
+      const parent = dirname2(current);
+      if (parent === current) return false;
+      current = parent;
+      hops++;
+    }
+    if (!await pathExists(current)) return false;
+    try {
+      real = await realpath(current);
+    } catch {
+      return false;
+    }
+  }
+  const realRel = relative5(root, real);
+  return realRel !== "" && realRel !== "." && (realRel.startsWith("..") || isAbsolute5(realRel));
+}
+async function pathExists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
 }
 function hashContent(s) {
   const cap = Math.min(s.length, 65536);
@@ -2941,7 +2974,7 @@ var plugin9 = {
         const ti = input.toolInput ?? {};
         const raw = ti["path"] ?? ti["file_path"] ?? ti["filePath"] ?? ti["TargetFile"] ?? ti["targetFile"] ?? ti["file"];
         if (typeof raw !== "string" || raw.length === 0) return;
-        const safePath = resolveProjectPath3(raw);
+        const safePath = await resolveProjectPath3(raw);
         if (!safePath) return;
         const captured = await captureFileForHook(safePath, cfg.maxFileBytes, runtime.signal);
         if (captured === "too-large") {
@@ -3012,7 +3045,7 @@ var plugin9 = {
         const rejectedOutsideProject = [];
         let skipped = 0;
         for (const p of paths) {
-          const safePath = resolveProjectPath3(p);
+          const safePath = await resolveProjectPath3(p);
           if (!safePath) {
             rejectedOutsideProject.push(p);
             continue;
@@ -3119,7 +3152,7 @@ var plugin9 = {
             error: rawId ? `no snapshot with id "${rawId}"` : "no snapshots captured yet"
           };
         }
-        const targetPath = rawPath ? resolveProjectPath3(rawPath) ?? rawPath : null;
+        const targetPath = rawPath ? await resolveProjectPath3(rawPath) ?? rawPath : null;
         const targets = targetPath ? snapshot.files.filter((f) => f.path === targetPath || f.path === rawPath) : snapshot.files;
         if (targets.length === 0) {
           return { ok: false, error: `snapshot ${snapshot.id} has no entry for "${rawPath}"` };
@@ -6931,7 +6964,7 @@ Consider mentioning these changes in the documentation.`;
 var doc_sync_guard_default = plugin20;
 
 // src/duplicate-code-detector/index.ts
-import { readFile as readFile6, realpath, stat as stat3 } from "node:fs/promises";
+import { readFile as readFile6, realpath as realpath2, stat as stat3 } from "node:fs/promises";
 import { extname as extname4, isAbsolute as isAbsolute8, relative as relative9, resolve as resolve9, sep } from "node:path";
 var API_VERSION14 = "^0.1.10";
 var HOOK_WARNING_COOLDOWN_MS = 6e4;
@@ -7290,7 +7323,7 @@ var plugin21 = {
       if (!isWithinRoot(projectRoot, resolvedFile)) return;
       let changedFile;
       try {
-        changedFile = await realpath(resolvedFile);
+        changedFile = await realpath2(resolvedFile);
       } catch {
         state20.errorCount += 1;
         return;
@@ -9530,7 +9563,7 @@ function classifyArtifact(relPath, patterns) {
   }
   return null;
 }
-async function pathExists(p) {
+async function pathExists2(p) {
   try {
     await access3(p);
     return true;
@@ -9539,7 +9572,7 @@ async function pathExists(p) {
   }
 }
 async function readGitignoreLines(file) {
-  if (!await pathExists(file)) return [];
+  if (!await pathExists2(file)) return [];
   try {
     const content = await readFile9(file, "utf8");
     return content.split(/\r?\n/);
@@ -9571,7 +9604,7 @@ function relDirOf(rel) {
 }
 async function firstExistingGitignore(candidates) {
   for (const c of candidates) {
-    if (await pathExists(c)) return c;
+    if (await pathExists2(c)) return c;
   }
   return null;
 }
@@ -9582,7 +9615,7 @@ async function appendPatterns(target, patterns, limit) {
   );
   const missing = patterns.filter((p) => !seen.has(p)).slice(0, limit);
   if (missing.length === 0) return { appended: [] };
-  const current = await pathExists(target) ? await readFile9(target, "utf8") : "";
+  const current = await pathExists2(target) ? await readFile9(target, "utf8") : "";
   const base = current.length === 0 ? "" : current.endsWith("\n") ? current : `${current}
 `;
   const next = `${base}${missing.map((p) => `${p}
@@ -12781,7 +12814,7 @@ import {
   runOptionalPluginCouncil,
   runOptionalPluginLlm,
   stripOuterMarkdownFence
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/llm";
 
 // src/migration-planner/index.ts
 var API_VERSION25 = "^0.1.10";
@@ -14033,11 +14066,15 @@ var plugin38 = {
 };
 var notify_hub_default = plugin38;
 
+// src/path-guard/index.ts
+import { existsSync as existsSync6, realpathSync } from "node:fs";
+import { dirname as dirname6, resolve as resolve17 } from "node:path";
+
 // src/runtime/redos-guard.ts
 import {
   withReDoSGuard,
   guardedMatcher
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/redos-guard";
 
 // src/path-guard/glob.ts
 var GLOB_REDOS_BUDGET_MS = 250;
@@ -15323,17 +15360,32 @@ function operationLabel(toolName) {
 }
 
 // src/path-guard/index.ts
-import { realpathSync } from "node:fs";
-import { resolve as resolve17 } from "node:path";
 function isSymlinkEscape(path, cwd) {
   if (!(0, runtime_exports.withinProject)(path)) return false;
+  const abs = resolve17(cwd ?? process.cwd(), path);
+  let real;
   try {
-    const abs = resolve17(cwd ?? process.cwd(), path);
-    const real = realpathSync(abs);
-    return !(0, runtime_exports.withinProject)(real);
+    real = realpathSync(abs);
   } catch {
-    return false;
+    const ancestor = nearestExistingAncestor(abs);
+    if (ancestor === null) return false;
+    try {
+      real = realpathSync(ancestor);
+    } catch {
+      return false;
+    }
+  }
+  return !(0, runtime_exports.withinProject)(real);
+}
+function nearestExistingAncestor(abs) {
+  let current = dirname6(abs);
+  for (let hops = 0; hops < 64; hops++) {
+    if (existsSync6(current)) return current;
+    const parent = dirname6(current);
+    if (parent === current) return null;
+    current = parent;
   }
+  return null;
 }
 function createState() {
   return {
@@ -15482,6 +15534,9 @@ var plugin39 = {
               path: relativeToInvocationCwd(resolveTargetPath(path, effectiveCwd), input.cwd),
               kind: isRootPathScope(path) && deletesImplicitScope || isUnresolvedPathScope(path) || recursivelyDeletes && (isDirectoryAmbiguousPath(path) || hasConfiguredProtectedDescendant(path, cfg.protect)) ? "deletion-scope" : "file"
             };
+            if (target.kind === "file" && isSymlinkEscape(target.path, input.cwd)) {
+              return target;
+            }
             if (targetFullyAllowed(target, cfg.allow, allowRes)) return null;
             const protectedShellTarget = await targetIntersectsPatternsGuarded(target, cfg.protect, protectRes, {
               onTimeout: bumpRedos
@@ -15609,7 +15664,7 @@ var plugin39 = {
 var path_guard_default = plugin39;
 
 // src/performance-regression-gate/index.ts
-import { existsSync as existsSync6, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync11 } from "node:fs";
 import { isAbsolute as isAbsolute16, relative as relative16, resolve as resolve18 } from "node:path";
 var API_VERSION26 = "^0.1.10";
 var state36 = {
@@ -15675,7 +15730,7 @@ function flattenResults(results) {
   return flat;
 }
 function loadResults(path) {
-  if (!path || !existsSync6(path)) return null;
+  if (!path || !existsSync7(path)) return null;
   try {
     const raw = JSON.parse(readFileSync11(path, "utf-8"));
     return raw;
@@ -16073,7 +16128,7 @@ var plugin_stack_observer_default = PLUGIN;
 // src/pr-drafter/index.ts
 import { execFile as execFile9 } from "node:child_process";
 import { mkdir as mkdir2, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname6, isAbsolute as isAbsolute17, relative as relative17, resolve as resolve19 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute17, relative as relative17, resolve as resolve19 } from "node:path";
 var API_VERSION27 = "^0.1.10";
 var state38 = {
   commits: [],
@@ -16205,7 +16260,7 @@ async function writeDraft(cfg, llm) {
   }
   const draft = await buildDraft(cfg, llm);
   try {
-    await mkdir2(dirname6(resolved), { recursive: true });
+    await mkdir2(dirname7(resolved), { recursive: true });
     await writeFile4(resolved, draft.body);
     state38.draftsWritten += 1;
   } catch {
@@ -16349,7 +16404,7 @@ var plugin41 = {
         const resolved = resolveProjectPath7(outputPathStr);
         if (!resolved) return { ok: false, error: "outputPath resolves outside project" };
         try {
-          await mkdir2(dirname6(resolved), { recursive: true });
+          await mkdir2(dirname7(resolved), { recursive: true });
           await writeFile4(resolved, draft.body);
           state38.draftsWritten += 1;
           return {
@@ -16579,7 +16634,7 @@ import { performance as performance2 } from "node:perf_hooks";
 import {
   cloneCredentialPatterns,
   CREDENTIAL_PATTERNS
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/credential-patterns";
 
 // src/prompt-firewall/index.ts
 var KIND_ALIASES = {
@@ -22532,7 +22587,7 @@ var test_coverage_gate_default = plugin56;
 import { execFile as execFile13 } from "node:child_process";
 import { readFileSync as readFileSync15 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname7, isAbsolute as isAbsolute25, relative as relative24, resolve as resolve26 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute25, relative as relative24, resolve as resolve26 } from "node:path";
 var API_VERSION37 = "^0.1.10";
 var state52 = {
   invocationCount: 0,
@@ -22663,7 +22718,7 @@ function resolveTestCommand(baseCommand, testPattern) {
     const packageJson = JSON.parse(readFileSync15(packagePath, "utf8"));
     const relativeBin = typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin?.[runner] ?? Object.values(packageJson.bin ?? {})[0];
     if (!relativeBin) return null;
-    const packageDir = dirname7(packagePath);
+    const packageDir = dirname8(packagePath);
     const candidate = resolve26(packageDir, relativeBin);
     if (isAbsolute25(relativeBin) || !isInside2(packageDir, candidate)) {
       return null;
@@ -23310,7 +23365,7 @@ var test_generator_default = plugin58;
 // src/test-runner-gate/index.ts
 import { execFile as execFile14 } from "node:child_process";
 import { access as access5 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname8, isAbsolute as isAbsolute27, join as join7 } from "node:path";
+import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute27, join as join7 } from "node:path";
 import { buildWin32CmdShimInvocation, resolveWin32Command } from "@wrongstack/tools/win32";
 function resolveExec(command, args) {
   const resolved = resolveWin32Command(command);
@@ -23403,7 +23458,7 @@ var ALLOWED_COMMAND_TOKENS = /* @__PURE__ */ new Set([
 function resolveTestFiles(sourcePath, patterns) {
   const name = basename6(sourcePath).replace(/\.[^.]+$/, "");
   const pathNoExt = sourcePath.replace(/\.[^.]+$/, "");
-  const dir = dirname8(sourcePath);
+  const dir = dirname9(sourcePath);
   const candidates = [];
   for (const pattern of patterns) {
     const candidate = pattern.replace(/\{name\}/g, name).replace(/\{path\}/g, pathNoExt).replace(/\{dir\}/g, dir);
@@ -24050,7 +24105,7 @@ var todo_listener_default = plugin60;
 // src/todo-tracker/index.ts
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
-import { dirname as dirname9 } from "node:path";
+import { dirname as dirname10 } from "node:path";
 import { atomicWrite as atomicWrite3, ensureDir as ensureDir3 } from "@wrongstack/core/utils";
 import { nowIso } from "@wrongstack/primitives";
 function deriveFilePath(api) {
@@ -24083,7 +24138,7 @@ async function loadFile(filePath) {
   }
 }
 async function saveFile(filePath, file) {
-  await ensureDir3(dirname9(filePath));
+  await ensureDir3(dirname10(filePath));
   await atomicWrite3(filePath, JSON.stringify(file, null, 2), { mode: 384 });
 }
 var state56 = {
@@ -24990,7 +25045,7 @@ var plugin63 = {
 var token_throttle_default = plugin63;
 
 // src/type-gate/index.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 var API_VERSION41 = "^0.1.10";
 var state59 = {
   invocationCount: 0,
@@ -25074,7 +25129,7 @@ async function runTypeCheck(cfg) {
       argv = [...argv, "-p", tsConfig];
     }
   }
-  if (!cfg.command && tsConfig && !existsSync7(tsConfig)) {
+  if (!cfg.command && tsConfig && !existsSync8(tsConfig)) {
     return null;
   }
   const result = await (0, runtime_exports.runRunnerCommand)([argv[0], ...argv.slice(1)], {

package/dist/migration-planner.js

@@ -26,7 +26,7 @@ import {
   runOptionalPluginCouncil,
   runOptionalPluginLlm,
   stripOuterMarkdownFence
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/llm";
 
 // src/migration-planner/index.ts
 var API_VERSION = "^0.1.10";

package/dist/path-guard/index.d.ts

@@ -7,7 +7,14 @@
 import type { Plugin } from '@wrongstack/core/types';
 export { compilePathGlob } from './glob.js';
 export { destructiveTargets } from './shell-targets.js';
-/** True when `path` is a project-local symlink whose real target escaped. */
+/**
+ * True when `path` is a project-local path whose canonical resolution
+ * escaped the project — including when the leaf does not exist yet (e.g. a
+ * `write` of a brand-new file): the nearest EXISTING ancestor is
+ * canonicalized instead, so a new file created THROUGH an escaped symlink
+ * is still detected. A brand-new path under ordinary project directories
+ * resolves to an ancestor inside the project and returns false.
+ */
 export declare function isSymlinkEscape(path: string, cwd?: string): boolean;
 declare const plugin: Plugin;
 export default plugin;

package/dist/path-guard.js

@@ -12,11 +12,20 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 
+// src/path-guard/index.ts
+import { existsSync, realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+
+// src/runtime/index.ts
+var runtime_exports = {};
+__reExport(runtime_exports, runtime_star);
+import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
+
 // src/runtime/redos-guard.ts
 import {
   withReDoSGuard,
   guardedMatcher
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/redos-guard";
 
 // src/path-guard/glob.ts
 var GLOB_REDOS_BUDGET_MS = 250;
@@ -1301,25 +1310,33 @@ function operationLabel(toolName) {
   return `write via "${toolName}"`;
 }
 
-// src/path-guard/index.ts
-import { realpathSync } from "node:fs";
-import { resolve } from "node:path";
-
-// src/runtime/index.ts
-var runtime_exports = {};
-__reExport(runtime_exports, runtime_star);
-import * as runtime_star from "@wrongstack/plugin-sdk/runtime";
-
 // src/path-guard/index.ts
 function isSymlinkEscape(path, cwd) {
   if (!(0, runtime_exports.withinProject)(path)) return false;
+  const abs = resolve(cwd ?? process.cwd(), path);
+  let real;
   try {
-    const abs = resolve(cwd ?? process.cwd(), path);
-    const real = realpathSync(abs);
-    return !(0, runtime_exports.withinProject)(real);
+    real = realpathSync(abs);
   } catch {
-    return false;
+    const ancestor = nearestExistingAncestor(abs);
+    if (ancestor === null) return false;
+    try {
+      real = realpathSync(ancestor);
+    } catch {
+      return false;
+    }
   }
+  return !(0, runtime_exports.withinProject)(real);
+}
+function nearestExistingAncestor(abs) {
+  let current = dirname(abs);
+  for (let hops = 0; hops < 64; hops++) {
+    if (existsSync(current)) return current;
+    const parent = dirname(current);
+    if (parent === current) return null;
+    current = parent;
+  }
+  return null;
 }
 function createState() {
   return {
@@ -1468,6 +1485,9 @@ var plugin = {
               path: relativeToInvocationCwd(resolveTargetPath(path, effectiveCwd), input.cwd),
               kind: isRootPathScope(path) && deletesImplicitScope || isUnresolvedPathScope(path) || recursivelyDeletes && (isDirectoryAmbiguousPath(path) || hasConfiguredProtectedDescendant(path, cfg.protect)) ? "deletion-scope" : "file"
             };
+            if (target.kind === "file" && isSymlinkEscape(target.path, input.cwd)) {
+              return target;
+            }
             if (targetFullyAllowed(target, cfg.allow, allowRes)) return null;
             const protectedShellTarget = await targetIntersectsPatternsGuarded(target, cfg.protect, protectRes, {
               onTimeout: bumpRedos

package/dist/prompt-firewall.js

@@ -5,13 +5,13 @@ import { performance } from "node:perf_hooks";
 import {
   cloneCredentialPatterns,
   CREDENTIAL_PATTERNS
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/credential-patterns";
 
 // src/runtime/redos-guard.ts
 import {
   withReDoSGuard,
   guardedMatcher
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/redos-guard";
 
 // src/prompt-firewall/index.ts
 var KIND_ALIASES = {

package/dist/release-notes-generator.js

@@ -7,7 +7,7 @@ import {
   runOptionalPluginCouncil,
   runOptionalPluginLlm,
   stripOuterMarkdownFence
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/llm";
 
 // src/release-notes-generator/index.ts
 var API_VERSION = "^0.1.10";

package/dist/runtime/credential-patterns.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { cloneCredentialPatterns, CREDENTIAL_PATTERNS, type CredentialPattern, } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/credential-patterns (granular). */
+export { cloneCredentialPatterns, CREDENTIAL_PATTERNS, type CredentialPattern, } from '@wrongstack/plugin-sdk/runtime/credential-patterns';
 //# sourceMappingURL=credential-patterns.d.ts.map

package/dist/runtime/h1-state.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { createH1State, type H1State } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/h1-state (granular). */
+export { createH1State, type H1State } from '@wrongstack/plugin-sdk/runtime/h1-state';
 //# sourceMappingURL=h1-state.d.ts.map

package/dist/runtime/handles.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { releaseHandle, releaseHandles, type Unregister } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/handles (granular). */
+export { releaseHandle, releaseHandles, type Unregister } from '@wrongstack/plugin-sdk/runtime/handles';
 //# sourceMappingURL=handles.d.ts.map

package/dist/runtime/index.d.ts

@@ -1,10 +1,27 @@
 /**
  * Backwards-compatible re-export: the runtime helpers moved to
  * `@wrongstack/plugin-sdk/runtime` so third-party plugin authors get the
- * same audit-hardened helpers first-party plugins use, without depending
- * on the whole @wrongstack/plugins package. This shim keeps the
+ * same audit-hardened helpers first-party plugins use, without depending on
+ * the whole @wrongstack/plugins package. This shim keeps the
  * `@wrongstack/plugins/runtime` subpath (and every in-repo relative
  * import) working unchanged.
+ *
+ * Why this one still imports the BARREL while the six leaf shims
+ * (`redos-guard`, `sandbox`, `llm`, …) import granular
+ * `@wrongstack/plugin-sdk/runtime/*` entries: the language-runner helpers
+ * (`resolveRunnerCommand`, `sanitizeRunnerPath`, `runRunnerCommand`,
+ * `probeRunnerCommand`), `withinProject`, `collectSourceFiles(Async)` and
+ * `matchesExtension` are defined in the sdk's runtime barrel module itself.
+ *
+ * The runner-extraction unlock LANDED 2026-09-06 (round core-utils-r1):
+ * `@wrongstack/core/utils/child-env` imports in ~4.5ms and the plugin-sdk
+ * barrel uses it. The extraction was re-attempted as round sdk-runner-r2
+ * and REVERTED on measurement: the primary arm's win landed inside the
+ * noise band (path-guard 12.33 -> 11.46ms, band ~5.4ms) because the
+ * child-env entry already banked the barrel's cost, and the granular
+ * 10-resolution shim measurably regressed multi-symbol consumers
+ * (branch-guard 10.87 -> 16.95ms). Do not re-attempt without a new
+ * hypothesis; see PERF_LOG round sdk-runner-r2.
  */
 export * from '@wrongstack/plugin-sdk/runtime';
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/llm.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { parseLlmJsonObject, runOptionalPluginCouncil, runOptionalPluginLlm, stripOuterMarkdownFence, type OptionalCouncilRequest, type OptionalLlmRequest, type OptionalLlmResult, } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/llm (granular). */
+export { parseLlmJsonObject, runOptionalPluginCouncil, runOptionalPluginLlm, stripOuterMarkdownFence, type OptionalCouncilRequest, type OptionalLlmRequest, type OptionalLlmResult, } from '@wrongstack/plugin-sdk/runtime/llm';
 //# sourceMappingURL=llm.d.ts.map

package/dist/runtime/redos-guard.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { withReDoSGuard, guardedMatcher, type ReDoSResult, type ReDoSOptions, } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/redos-guard (granular). */
+export { withReDoSGuard, guardedMatcher, type ReDoSResult, type ReDoSOptions, } from '@wrongstack/plugin-sdk/runtime/redos-guard';
 //# sourceMappingURL=redos-guard.d.ts.map

package/dist/runtime/sandbox.d.ts

@@ -1,3 +1,3 @@
-/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime. */
-export { safePath, isInsideProject, type SafePathOptions, } from '@wrongstack/plugin-sdk/runtime';
+/** Shim: implementation moved to @wrongstack/plugin-sdk/runtime/sandbox (granular). */
+export { safePath, isInsideProject, type SafePathOptions, } from '@wrongstack/plugin-sdk/runtime/sandbox';
 //# sourceMappingURL=sandbox.d.ts.map

package/dist/secret-scanner.js

@@ -16,7 +16,7 @@ var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "defau
 import {
   cloneCredentialPatterns,
   CREDENTIAL_PATTERNS
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/credential-patterns";
 
 // src/runtime/index.ts
 var runtime_exports = {};

package/dist/test-generator.js

@@ -8,7 +8,7 @@ import {
   runOptionalPluginCouncil,
   runOptionalPluginLlm,
   stripOuterMarkdownFence
-} from "@wrongstack/plugin-sdk/runtime";
+} from "@wrongstack/plugin-sdk/runtime/llm";
 
 // src/test-generator/index.ts
 var API_VERSION = "^0.1.10";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.319.1",
+  "version": "1.0.0",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,10 +303,10 @@
     "vitest": "^4.1.11"
   },
   "dependencies": {
-    "@wrongstack/core": "0.319.1",
-    "@wrongstack/primitives": "0.319.1",
-    "@wrongstack/plugin-sdk": "0.319.1",
-    "@wrongstack/tools": "0.319.1"
+    "@wrongstack/core": "1.0.0",
+    "@wrongstack/primitives": "1.0.0",
+    "@wrongstack/plugin-sdk": "1.0.0",
+    "@wrongstack/tools": "1.0.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",