Runtime state guard: hold a provider reference's node and module to the mesh's name pattern, so no credential rides in one (issue 1126)

node-tools/internal/bus/state.go

@@ -432,7 +432,7 @@ func credentialField(value json.RawMessage) string {
 	return walk(v)
 }
 
-// providerReference says whether v is exactly {"node": <string>, "module": <string>}.
+// providerReference says whether v is exactly {"node": <name>, "module": <name>}, each a name as mesh-sdk names them.
 func providerReference(v any) bool {
 	m, ok := v.(map[string]any)
 	if !ok || len(m) != 2 {
@@ -440,5 +440,8 @@ func providerReference(v any) bool {
 	}
 	node, okN := m["node"].(string)
 	module, okM := m["module"].(string)
-	return okN && okM && node != "" && module != ""
+	return okN && okM && referenceName.MatchString(node) && referenceName.MatchString(module)
 }
+
+// referenceName is a node's or a module's name as mesh-sdk names them: lower case, digits and dashes.
+var referenceName = regexp.MustCompile(`^[a-z0-9][a-z0-9-]*$`)