@wipcomputer/wip-ldm-os 0.4.80 → 0.4.81

package/SKILL.md

@@ -9,7 +9,7 @@ license: MIT
 compatibility: Requires git, npm, node. Node.js 18+.
 metadata:
   display-name: "LDM OS"
-  version: "0.4.80"
+  version: "0.4.81"
   homepage: "https://github.com/wipcomputer/wip-ldm-os"
   author: "Parker Todd Brooks"
   category: infrastructure

package/lib/deploy.mjs

@@ -59,6 +59,57 @@ function writeJSON(path, data) {
   writeFileSync(path, JSON.stringify(data, null, 2) + '\n');
 }
 
+export function validateSkillFrontmatter(path) {
+  let content;
+  try {
+    content = readFileSync(path, 'utf8');
+  } catch (e) {
+    return { ok: false, line: 1, message: `cannot read SKILL.md: ${e.message}` };
+  }
+
+  const lines = content.split(/\r?\n/);
+  if (lines[0] !== '---') {
+    return { ok: false, line: 1, message: 'SKILL.md must start with YAML frontmatter' };
+  }
+
+  let end = -1;
+  for (let i = 1; i < lines.length; i++) {
+    if (lines[i] === '---') {
+      end = i;
+      break;
+    }
+  }
+  if (end === -1) {
+    return { ok: false, line: 1, message: 'SKILL.md frontmatter is missing a closing --- marker' };
+  }
+
+  for (let i = 1; i < end; i++) {
+    const line = lines[i];
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#') || /^\s/.test(line)) continue;
+
+    const match = /^([A-Za-z0-9_-]+):(?:\s*(.*))?$/.exec(line);
+    if (!match) {
+      return { ok: false, line: i + 1, message: 'frontmatter line is not a simple key/value mapping' };
+    }
+
+    const value = match[2] || '';
+    const valueTrimmed = value.trimStart();
+    const first = valueTrimmed[0] || '';
+    const isQuoted = first === '"' || first === "'";
+    const isStructured = first === '[' || first === '{' || first === '|' || first === '>';
+    if (valueTrimmed.includes(': ') && !isQuoted && !isStructured) {
+      return {
+        ok: false,
+        line: i + 1,
+        message: 'value contains an unquoted colon; quote the scalar value',
+      };
+    }
+  }
+
+  return { ok: true };
+}
+
 function ensureBinExecutable(binNames) {
   try {
     const npmPrefix = execSync('npm config get prefix', { encoding: 'utf8' }).trim();
@@ -1195,6 +1246,12 @@ function installSkill(repoPath, toolName) {
   if (!existsSync(skillSrc) && existsSync(permanentSkill)) skillSrc = permanentSkill;
   if (!existsSync(skillSrc)) return false;
 
+  const frontmatter = validateSkillFrontmatter(skillSrc);
+  if (!frontmatter.ok) {
+    fail(`Skill: invalid SKILL.md frontmatter at ${skillSrc}:${frontmatter.line}: ${frontmatter.message}`);
+    return false;
+  }
+
   // Find references/ source: repo path first, then permanent copy
   let refsSrc = join(repoPath, 'references');
   const permanentRefs = join(LDM_EXTENSIONS, toolName, 'references');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.80",
+  "version": "0.4.81",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {
@@ -19,6 +19,7 @@
     "build:bridge": "cd src/bridge && npm install && npx tsup core.ts mcp-server.ts cli.ts openclaw.ts --format esm --dts --clean --outDir ../../dist/bridge",
     "build": "npm run build:bridge",
     "prepublishOnly": "npm run build:bridge",
+    "test:skill-frontmatter": "node scripts/test-skill-frontmatter.mjs",
     "fmt": "npx prettier --write 'src/**/*.{ts,mjs}' 'lib/**/*.mjs' 'bin/**/*.js'",
     "fmt:check": "npx prettier --check 'src/**/*.{ts,mjs}' 'lib/**/*.mjs' 'bin/**/*.js'"
   },

package/scripts/test-skill-frontmatter.mjs

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { validateSkillFrontmatter } from '../lib/deploy.mjs';
+
+const dir = mkdtempSync(join(tmpdir(), 'ldm-skill-frontmatter-'));
+const bad = join(dir, 'bad-SKILL.md');
+const good = join(dir, 'good-SKILL.md');
+
+writeFileSync(bad, [
+  '---',
+  'name: bad',
+  'description: Read when: guard blocks a tool call',
+  '---',
+  '',
+  '# Bad',
+  '',
+].join('\n'));
+
+writeFileSync(good, [
+  '---',
+  'name: good',
+  'description: "Read when: guard blocks a tool call"',
+  '---',
+  '',
+  '# Good',
+  '',
+].join('\n'));
+
+const badResult = validateSkillFrontmatter(bad);
+if (badResult.ok) {
+  throw new Error('expected unquoted colon frontmatter to be rejected');
+}
+if (badResult.line !== 3) {
+  throw new Error(`expected failure on line 3, got line ${badResult.line}`);
+}
+
+const goodResult = validateSkillFrontmatter(good);
+if (!goodResult.ok) {
+  throw new Error(`expected quoted frontmatter to pass: ${goodResult.message}`);
+}
+
+console.log('skill frontmatter regression passed');