Function validateStoreName

src/services/SessionMemory/multiStore.ts:87–114

(store: string)

}

function validateStoreName(store: string): void {
  if (!store) {
    throw new Error('Invalid store name: store name must not be empty.')
  }
  if (store.length > MAX_STORE_NAME_LENGTH) {
    throw new Error(
      `Invalid store name: "${store.slice(0, 20)}…" is too long (max ${MAX_STORE_NAME_LENGTH} chars).`,
    )
  }
  // Reject path separators (forward slash, backslash), Windows drive colons.
  // Null bytes checked separately to avoid biome noControlCharactersInRegex warning.
  if (/[/\\:]/.test(store) || store.includes('\0')) {
    throw new Error(
      `Invalid store name: "${store}" contains illegal characters (path separators, null byte, or colon).`,
    )
  }
  // Reject names starting with "." — covers ".." and hidden names
  if (store.startsWith('.')) {
    throw new Error(`Invalid store name: "${store}" must not start with ".".`)
  }
  // Guard: resolved basename must equal the store name itself.
  // This catches any path-like names that slipped through the above checks.
  if (basename(store) !== store) {
    throw new Error(
      `Invalid store name: "${store}" is path-like and would escape the base directory.`,
    )
  }
}

// validateKey is now imported from src/utils/localValidate.ts (shared with PR-1/2)