From fbf3049dc085b01c124308c0d61dba06cdc92a16 Mon Sep 17 00:00:00 2001
From: Will Lillis <will.lillis24@gmail.com>
Date: Wed, 24 Jun 2026 01:49:11 -0400
Subject: [PATCH] fix(dsl): forbid invalid field names

---
 crates/generate/src/dsl.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/crates/generate/src/dsl.js b/crates/generate/src/dsl.js
index f522fd7fc..dcaa4127f 100644
--- a/crates/generate/src/dsl.js
+++ b/crates/generate/src/dsl.js
@@ -34,6 +34,9 @@ function blank() {
 }
 
 function field(name, rule) {
+  if (typeof name !== "string" || !/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
+    throw new Error(`Invalid field name '${name}': field names must start with a letter or underscore, followed by letters, digits, or underscores`);
+  }
   return {
     type: "FIELD",
     name,