@lmzhen/dsh-evolution-core 0.1.0-rc.27 → 0.1.0-rc.28

package/lib/index.js

@@ -1696,8 +1696,15 @@ var SkillLibrary = class {
 		return summaries;
 	}
 	async read(name) {
+		if (this.badName(name) !== null) return null;
 		return this.io.readText(join(skillDir(this.root, name), "SKILL.md"));
 	}
+	/** Name-format guard shared by every path-building mutator/reader. */
+	badName(name) {
+		const normalized = name.trim();
+		if (!SKILL_NAME_RE.test(normalized) || normalized.length > this.limits.maxNameLength) return `Invalid skill name "${normalized}". Use lowercase letters, digits, and hyphens (<= ${this.limits.maxNameLength}).`;
+		return null;
+	}
 	async writeProtection(name, origin = "foreground") {
 		const dir = skillDir(this.root, name);
 		for (const marker of ["bundled", "hub-installed"]) if (await this.io.exists(markerPath(dir, marker))) return marker;
@@ -1720,16 +1727,19 @@ var SkillLibrary = class {
 	}
 	/** Whether the skill carries the bundled marker (curator prune-builtins eligibility). */
 	async isBundled(name) {
+		if (this.badName(name) !== null) return false;
 		const dir = skillDir(this.root, name);
 		return await this.io.exists(markerPath(dir, "bundled"));
 	}
 	/** Whether the skill carries the pinned marker (the marker is the factual source; usage.pinned mirrors it). */
 	async isPinned(name) {
+		if (this.badName(name) !== null) return false;
 		const dir = skillDir(this.root, name);
 		return await this.io.exists(markerPath(dir, "pinned"));
 	}
 	/** Count non-empty support subdirectories (richness input for quality scoring). */
 	async countSupportDirs(name) {
+		if (this.badName(name) !== null) return 0;
 		const dir = skillDir(this.root, name);
 		let entries;
 		try {
@@ -1836,6 +1846,11 @@ var SkillLibrary = class {
 		};
 	}
 	async update(name, content, origin = "foreground") {
+		const badName = this.badName(name);
+		if (badName) return {
+			ok: false,
+			message: badName
+		};
 		const dir = skillDir(this.root, name);
 		const md = await this.io.readText(join(dir, "SKILL.md"));
 		if (!md) return {
@@ -1866,6 +1881,11 @@ var SkillLibrary = class {
 		};
 	}
 	async patch(name, oldString, newString, filePath = "", replaceAll = false, origin = "foreground") {
+		const badName = this.badName(name);
+		if (badName) return {
+			ok: false,
+			message: badName
+		};
 		const dir = skillDir(this.root, name);
 		const skillMd = join(dir, "SKILL.md");
 		if (!await this.io.exists(skillMd)) return {
@@ -1927,6 +1947,11 @@ var SkillLibrary = class {
 		};
 	}
 	async archive(name, options = {}) {
+		const badName = this.badName(name);
+		if (badName) return {
+			ok: false,
+			message: badName
+		};
 		const dir = skillDir(this.root, name);
 		const md = await this.io.readText(join(dir, "SKILL.md"));
 		if (!md) return {
@@ -2085,6 +2110,11 @@ var SkillLibrary = class {
 		};
 	}
 	async writeSupportFile(name, filePath, content, origin = "foreground") {
+		const badName = this.badName(name);
+		if (badName) return {
+			ok: false,
+			message: badName
+		};
 		const dir = skillDir(this.root, name);
 		if (!await this.io.exists(join(dir, "SKILL.md"))) return {
 			ok: false,
@@ -2120,6 +2150,11 @@ var SkillLibrary = class {
 		};
 	}
 	async removeSupportFile(name, filePath, origin = "foreground") {
+		const badName = this.badName(name);
+		if (badName) return {
+			ok: false,
+			message: badName
+		};
 		const dir = skillDir(this.root, name);
 		if (!await this.io.exists(join(dir, "SKILL.md"))) return {
 			ok: false,

package/lib/types/skill-store.d.ts

@@ -57,6 +57,8 @@ export declare class SkillLibrary {
     constructor(root?: string, io?: EvolutionIoLike, limits?: SkillLimits);
     list(): Promise<SkillSummary[]>;
     read(name: string): Promise<string | null>;
+    /** Name-format guard shared by every path-building mutator/reader. */
+    private badName;
     writeProtection(name: string, origin?: WriteOrigin): Promise<string | null>;
     deleteProtection(name: string, options?: {
         allowBundled?: boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.1.0-rc.27",
+  "version": "0.1.0-rc.28",
   "publishConfig": {
     "access": "public"
   },