@lmzhen/dsh-evolution-core 0.2.0-rc.2 → 0.2.1

package/lib/index.js

@@ -2573,15 +2573,22 @@ function fuzzyPatch(content, oldString, newString, replaceAll = false) {
 }
 /**
 * Support-directory references in a markdown body (009 kernel): `references/…`,
-* `templates/…`, `scripts/…`, `assets/…` relative links. Pure — who checks
-* them and what the verdict is belongs to the caller's context (a moved/
-* appended body whose references travel with an archived source is a dangling
-* link; a restructure pointer is a fresh link to a file written in the same
-* plan).
+* `templates/…`, `scripts/…`, `assets/…` relative links — any extension and
+* nested paths (v7 audit P3-1: `.md`-only matching missed `scripts/run.sh` and
+* `references/sub/x.md`, both of which dangle just like a `.md` link once the
+* source package is archived). Pure — who checks them and what the verdict is
+* belongs to the caller's context (a moved/appended body whose references
+* travel with an archived source is a dangling link; a restructure pointer is
+* a fresh link to a file written in the same plan). `..` traversal is a
+* different defect class (path validation owns it) and is not a support link.
 */
 function supportRefs(content) {
 	const refs = [];
-	for (const match of content.matchAll(/\b(?:references|templates|scripts|assets)\/[A-Za-z0-9._-]+\.md/g)) refs.push(match[0]);
+	for (const match of content.matchAll(/\b(?:references|templates|scripts|assets)\/[A-Za-z0-9._/-]+/g)) {
+		const ref = match[0];
+		if (ref.includes("..")) continue;
+		refs.push(ref);
+	}
 	return refs;
 }
 function planRestructureSections(body, moves) {
@@ -3228,17 +3235,18 @@ var SkillLibrary = class {
 			message: `Skill "${name}" not found.`
 		};
 		const normalized = md.replace(/\r\n/g, "\n");
-		const plan = planRestructureSections(normalized, moves);
-		if ("error" in plan) return {
-			ok: false,
-			message: `Restructure rejected: ${plan.error}`
-		};
 		const frontmatterEnd = normalized.indexOf("\n---", 3);
 		if (frontmatterEnd < 0) return {
 			ok: false,
 			message: "SKILL.md has no valid frontmatter; refusing to restructure."
 		};
-		const newMd = normalized.slice(0, frontmatterEnd + 4) + plan.body;
+		const header = normalized.slice(0, frontmatterEnd + 4);
+		const plan = planRestructureSections(normalized.slice(frontmatterEnd + 4), moves);
+		if ("error" in plan) return {
+			ok: false,
+			message: `Restructure rejected: ${plan.error}`
+		};
+		const newMd = header + plan.body;
 		const newMdCheck = validateFrontmatter(newMd, name, this.limits);
 		if (newMdCheck) return {
 			ok: false,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.2.0-rc.2",
+  "version": "0.2.1",
   "publishConfig": {
     "access": "public"
   },