[jrusso1020]

Registry installs now also refuse QWEN.md, CRUSH.md, WARP.md and CONVENTIONS.md at any depth. These are instruction files that coding agents load on their own, like the AGENTS.md, CLAUDE.md and GEMINI.md names that #7523 already refuses.

What

AGENT_INSTRUCTIONS in packages/cli/src/registry/installer.ts gains qwen, crush, warp and conventions. Names are compared after lowercasing, with either path separator.

Why

Follow-up to #7523. Its root allowlist (TEMPLATE.md only) stops these names at the project root, but a block could still write one inside compositions/ or assets/. The official catalog's nested .md files are SKILL.md and README.md, which this change leaves alone.

Related work

Refs #7523

Test plan

• Unit tests added/updated: installer.test.ts refuses compositions/QWEN.md, assets/Crush.md, compositions\WARP.md and compositions/conventions.md before any write. All 63 installer tests pass. With the source change reverted, the 4 new cases fail and the rest pass. The official-catalog test still accepts every target.
• Manual testing performed
• Documentation updated (if applicable)
• Comments follow CONTRIBUTING.md "Comments"

— Rames Jusso

🤖 Generated with Claude Code

[github-actions]

Edit accuracy: accurate 267 (base branch 267), smooth 92 of those

The gate passes.
Smoothness is reported in the artifact, not gated. A case fails only if it fails 2 of 3 runs.

Quarantined, measured but not gated (8)

• seqplainkeys-none-center-r0-nested-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): pass, passes
• seqplainkeys-none-center-r0-root-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): fail / pass / pass, passes
• seqplainkeys-none-center-r30-root-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): not run
• seqplainkeys-none-pct-r0-root-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): fail / pass / pass, passes
• seqplainkeys-none-pct-r30-root-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): not run
• seqplainkeys-none-px-r0-nested-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): pass, passes
• seqplainkeys-none-px-r30-nested-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): not run
• seqplainkeys-none-px-r30-root-z100 (fixed by studio: undo/redo on a keyframed plain element sometimes leaves the box 230-400px off (edit-accuracy seqplainkeys-none-*) #6989): not run

[heygengenesis]

Verdict: APPROVE · 0 blocker · 0 important · 0 nits · d3a6459

All four names are now refused at any depth, after lowercasing and separator normalization. The four new test cases sit in compositions/ and assets/, so on the base regex each one reaches the agent rule and is accepted, which means they really pin this change. No catalog target or remote example writes these names. All Actions runs on this head are green.

Scope

Read installer.ts CONFIG_TARGET_RULES and targetSegments end to end. Rule 2 sweep: the other non-hidden instruction names that agents load on their own (AGENT.md, AGENTS.override.md, CLAUDE.local.md, CRUSH.local.md) already match through agents? and the optional (\.[a-z]+)? group. Cursor, Windsurf, Cline, Kiro and Junie keep their files in dotfiles or dot-directories, which the hidden-path rules already cover. Repo conventions.md exists only under skills/ and is not installed by the registry.

— Genesis