From the repository root: const {validate}=require("./dist/index.js"); validate("job.open", {"objective":"Implement Owned.","shape":"chain","steps":[{"skill":"implement-contract","paths":["src/\n/../../lib/Owned.sol"]}]}); actual: valid:true, errors:[], warnings:[]; expected: invalid_input/protected_path. node:path.posix.normalize of the supplied write path is "lib/Owned.sol".

Also validate("job.open", {"objective":"Create report.","skill":"research-report","outputs":[{"name":"report","path":"artifacts/a\n/../../foundry.toml","mediaType":"text/plain"}]}) returns valid:true; its output path normalizes to "foundry.toml", outside the required artifacts/ directory.

Parse the JSON normally so each backslash-n escape becomes a newline character.

On Node v22.22.2, generate the exact JSON text with const raw = '{"objective":"Build report","extra":' + "[".repeat(4000) + "0" + "]".repeat(4000) + "}"; (8038 bytes). require("./dist/index.js").validate("job.open", JSON.parse(raw)) throws RangeError: Maximum call stack size exceeded from isJson.

Also spawnSync(process.execPath,["bin/imd-validate.cjs","job.open","-","--json"],{input:raw,encoding:"utf8"}) returns status 1, empty stdout, and an uncaught RangeError stack on stderr.

Expected: valid:false and a readable invalid_input diagnostic, serialized as JSON in --json mode; no uncaught exception.