@vodmal/vdx-cli 0.25.0 → 0.26.0

package/src/facts.ts

@@ -2,6 +2,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import * as TOML from 'smol-toml';
 import * as YAML from 'js-yaml';
+import { at, dict, str } from './narrow.ts';
 
 export interface Ctx {
   projectRoot: string;
@@ -52,7 +53,7 @@ export function readText(ctx: Ctx, rel: string): string | null {
   }
 }
 
-export function readJson(ctx: Ctx, rel: string): any {
+export function readJson(ctx: Ctx, rel: string): unknown {
   const key = `json:${rel}`;
   if (ctx.cache.has(key)) return ctx.cache.get(key);
   const text = readText(ctx, rel);
@@ -61,7 +62,7 @@ export function readJson(ctx: Ctx, rel: string): any {
     return null;
   }
   try {
-    const data = JSON.parse(text);
+    const data: unknown = JSON.parse(text);
     ctx.cache.set(key, data);
     return data;
   } catch {
@@ -70,7 +71,7 @@ export function readJson(ctx: Ctx, rel: string): any {
   }
 }
 
-export function readToml(ctx: Ctx, rel: string): any {
+export function readToml(ctx: Ctx, rel: string): unknown {
   const key = `toml:${rel}`;
   if (ctx.cache.has(key)) return ctx.cache.get(key);
   const text = readText(ctx, rel);
@@ -88,7 +89,7 @@ export function readToml(ctx: Ctx, rel: string): any {
   }
 }
 
-export function readYaml(ctx: Ctx, rel: string): any {
+export function readYaml(ctx: Ctx, rel: string): unknown {
   const key = `yaml:${rel}`;
   if (ctx.cache.has(key)) return ctx.cache.get(key);
   const text = readText(ctx, rel);
@@ -107,7 +108,7 @@ export function readYaml(ctx: Ctx, rel: string): any {
 }
 
 /** Parse a structured file by extension. Returns parsed object/array or null. */
-export function readStructured(ctx: Ctx, rel: string): any {
+export function readStructured(ctx: Ctx, rel: string): unknown {
   const lower = rel.toLowerCase();
   if (lower.endsWith('.json')) return readJson(ctx, rel);
   if (lower.endsWith('.toml')) return readToml(ctx, rel);
@@ -122,14 +123,7 @@ export function readStructured(ctx: Ctx, rel: string): any {
  */
 export function resolveConfigPath(root: unknown, jsonpath: string): unknown {
   if (root === null || root === undefined) return undefined;
-  const parts = jsonpath.split('.');
-  let cur: any = root;
-  for (const part of parts) {
-    if (cur === null || cur === undefined) return undefined;
-    if (typeof cur !== 'object') return undefined;
-    cur = (cur as Record<string, unknown>)[part];
-  }
-  return cur;
+  return at(root, ...jsonpath.split('.'));
 }
 
 /**
@@ -142,25 +136,12 @@ export function listAllTasks(ctx: Ctx): Set<string> {
   const tasks = new Set<string>();
   const own = ownCtx(ctx);
 
-  const miseT = readToml(own, 'mise.toml');
-  if (miseT?.tasks && typeof miseT.tasks === 'object') {
-    for (const k of Object.keys(miseT.tasks as object)) tasks.add(k);
-  }
-
-  const composer = readJson(own, 'composer.json');
-  if (composer?.scripts && typeof composer.scripts === 'object') {
-    for (const k of Object.keys(composer.scripts)) tasks.add(k);
-  }
-
-  const pkg = readJson(own, 'package.json');
-  if (pkg?.scripts && typeof pkg.scripts === 'object') {
-    for (const k of Object.keys(pkg.scripts)) tasks.add(k);
-  }
-
+  for (const k of Object.keys(dict(at(readToml(own, 'mise.toml'), 'tasks')) ?? {})) tasks.add(k);
+  for (const k of Object.keys(dict(at(readJson(own, 'composer.json'), 'scripts')) ?? {})) tasks.add(k);
+  for (const k of Object.keys(dict(at(readJson(own, 'package.json'), 'scripts')) ?? {})) tasks.add(k);
   // monorepo-ish fallback: server/package.json (см. bookmap)
-  const serverPkg = readJson(own, 'server/package.json');
-  if (serverPkg?.scripts && typeof serverPkg.scripts === 'object') {
-    for (const k of Object.keys(serverPkg.scripts)) tasks.add(`server:${k}`);
+  for (const k of Object.keys(dict(at(readJson(own, 'server/package.json'), 'scripts')) ?? {})) {
+    tasks.add(`server:${k}`);
   }
 
   const make = readText(own, 'Makefile');
@@ -180,18 +161,14 @@ export function isPackagePresent(name: string, ecosystem: string, ctx: Ctx): boo
   const eco = ecosystem ?? 'any';
   if (eco === 'any' || eco === 'composer') {
     const composer = readJson(ctx, 'composer.json');
-    if (composer) {
-      if (composer.require?.[name]) return true;
-      if (composer['require-dev']?.[name]) return true;
-    }
+    if (at(composer, 'require', name)) return true;
+    if (at(composer, 'require-dev', name)) return true;
   }
   if (eco === 'any' || eco === 'npm') {
     for (const rel of ['package.json', 'server/package.json']) {
       const pkg = readJson(ctx, rel);
-      if (pkg) {
-        if (pkg.dependencies?.[name]) return true;
-        if (pkg.devDependencies?.[name]) return true;
-      }
+      if (at(pkg, 'dependencies', name)) return true;
+      if (at(pkg, 'devDependencies', name)) return true;
     }
   }
   return false;
@@ -222,19 +199,17 @@ export function expandPaths(paths: string[], ctx: Ctx): string[] {
   return out;
 }
 
-export function readTsconfig(ctx: Ctx): any {
-  let cfg = readJson(ctx, 'tsconfig.json');
-  if (!cfg) cfg = readJson(ctx, 'server/tsconfig.json');
+export function readTsconfig(ctx: Ctx): { compilerOptions?: Record<string, unknown> } | null {
+  const cfg = dict(readJson(ctx, 'tsconfig.json')) ?? dict(readJson(ctx, 'server/tsconfig.json'));
   if (!cfg) return null;
+  const own = dict(cfg['compilerOptions']);
   // basic one-level `extends` resolution
-  if (cfg.extends && typeof cfg.extends === 'string' && cfg.extends.startsWith('.')) {
-    const baseRel = cfg.extends.endsWith('.json') ? cfg.extends : `${cfg.extends}.json`;
-    const base = readJson(ctx, baseRel);
-    if (base?.compilerOptions) {
-      cfg.compilerOptions = { ...base.compilerOptions, ...(cfg.compilerOptions ?? {}) };
-    }
+  const ext = str(cfg['extends']);
+  if (ext?.startsWith('.')) {
+    const base = dict(at(readJson(ctx, ext.endsWith('.json') ? ext : `${ext}.json`), 'compilerOptions'));
+    if (base) return { compilerOptions: { ...base, ...own } };
   }
-  return cfg;
+  return own ? { compilerOptions: own } : {};
 }
 
 const MANIFEST_TO_STACK: Array<[string, string]> = [

package/src/gha.ts

@@ -8,6 +8,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import YAML from 'js-yaml';
 import { fileExists, readText, type Ctx } from './facts.ts';
+import { at, dict, isDict, list, str } from './narrow.ts';
 import { projectTaskCalls } from './vocabulary.ts';
 
 export interface GhaStep {
@@ -48,9 +49,8 @@ function filterMatches(pattern: string, branch: string): boolean {
 }
 
 function branchSelected(filters: unknown, branch: string): boolean {
-  const list = Array.isArray(filters) ? filters : [filters];
   let selected = false;
-  for (const f of list) {
+  for (const f of Array.isArray(filters) ? (filters as unknown[]) : [filters]) {
     if (typeof f !== 'string') continue;
     if (f.startsWith('!')) {
       if (filterMatches(f.slice(1), branch)) selected = false;
@@ -65,15 +65,16 @@ function branchSelected(filters: unknown, branch: string): boolean {
 export function pushesMain(on: unknown): boolean {
   if (on === 'push') return true;
   if (Array.isArray(on)) return on.includes('push');
-  if (!on || typeof on !== 'object') return false;
-  if (!('push' in on)) return false;
-  const push = (on as Record<string, any>).push;
-  if (push === null || push === undefined || typeof push !== 'object') return true;
-  const hasBranchFilter = push.branches !== undefined || push['branches-ignore'] !== undefined;
-  if (!hasBranchFilter && (push.tags !== undefined || push['tags-ignore'] !== undefined)) return false;
+  if (!isDict(on) || !('push' in on)) return false;
+  const push = dict(on['push']);
+  if (!push) return true;
+  const { branches, tags } = push;
+  const branchesIgnore = push['branches-ignore'];
+  const hasBranchFilter = branches !== undefined || branchesIgnore !== undefined;
+  if (!hasBranchFilter && (tags !== undefined || push['tags-ignore'] !== undefined)) return false;
   return MAIN_BRANCHES.some((b) => {
-    if (push.branches !== undefined) return branchSelected(push.branches, b);
-    if (push['branches-ignore'] !== undefined) return !branchSelected(push['branches-ignore'], b);
+    if (branches !== undefined) return branchSelected(branches, b);
+    if (branchesIgnore !== undefined) return !branchSelected(branchesIgnore, b);
     return true;
   });
 }
@@ -83,34 +84,41 @@ function truthy(v: unknown): boolean {
 }
 
 export function parseWorkflow(file: string, text: string): GhaWorkflow | null {
-  let data: any;
+  let data: unknown;
   try {
     data = YAML.load(text);
   } catch {
     return null;
   }
+  // An array is an object too, and the workflow it would be has no jobs.
   if (!data || typeof data !== 'object') return null;
   const jobs: GhaJob[] = [];
-  for (const [id, job] of Object.entries((data.jobs ?? {}) as Record<string, any>)) {
-    if (!job || typeof job !== 'object') continue;
-    const needs = job.needs === undefined ? [] : Array.isArray(job.needs) ? job.needs : [job.needs];
-    const steps: GhaStep[] = (Array.isArray(job.steps) ? job.steps : [])
-      .filter((s: unknown) => s && typeof s === 'object')
-      .map((s: any) => ({
-        ...(typeof s.run === 'string' ? { run: s.run } : {}),
-        ...(typeof s.uses === 'string' ? { uses: s.uses } : {}),
-        continueOnError: truthy(s['continue-on-error']),
-      }));
+  for (const [id, value] of Object.entries(dict(at(data, 'jobs')) ?? {})) {
+    const job = dict(value);
+    if (!job) continue;
+    const needs = job['needs'] === undefined ? [] : Array.isArray(job['needs']) ? list(job['needs']) : [job['needs']];
+    const steps: GhaStep[] = list(job['steps'])
+      .filter(isDict)
+      .map((s) => {
+        const run = str(s['run']);
+        const uses = str(s['uses']);
+        return {
+          ...(run !== undefined ? { run } : {}),
+          ...(uses !== undefined ? { uses } : {}),
+          continueOnError: truthy(s['continue-on-error']),
+        };
+      });
+    const name = str(job['name']);
     jobs.push({
       id,
-      ...(typeof job.name === 'string' ? { name: job.name } : {}),
-      needs: needs.filter((n: unknown): n is string => typeof n === 'string'),
+      ...(name !== undefined ? { name } : {}),
+      needs: needs.filter((n): n is string => typeof n === 'string'),
       steps,
       continueOnError: truthy(job['continue-on-error']),
-      matrix: Boolean(job.strategy?.matrix),
+      matrix: Boolean(at(job, 'strategy', 'matrix')),
     });
   }
-  return { file, pushesMain: pushesMain(data.on), jobs };
+  return { file, pushesMain: pushesMain(at(data, 'on')), jobs };
 }
 
 export function readWorkflows(ctx: Ctx): GhaWorkflow[] {
@@ -118,7 +126,7 @@ export function readWorkflows(ctx: Ctx): GhaWorkflow[] {
   if (ctx.cache.has(key)) return ctx.cache.get(key) as GhaWorkflow[];
   const dir = path.join(ctx.projectRoot, '.github', 'workflows');
   const out: GhaWorkflow[] = [];
-  let files: string[] = [];
+  let files: string[];
   try {
     files = fs
       .readdirSync(dir)

package/src/hooks.ts

@@ -16,6 +16,7 @@ import * as path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import YAML from 'js-yaml';
 import { fileExists, isPackagePresent, readJson, readText, readToml, type Ctx } from './facts.ts';
+import { at, dict, isDict, list } from './narrow.ts';
 
 export type FrameworkId = 'husky' | 'lefthook' | 'simple-git-hooks' | 'cghooks' | 'githooks';
 
@@ -69,7 +70,7 @@ interface InstallStep {
 
 /** Yarn 2+ does not run a project's `prepare` (husky docs, How To → Yarn). */
 export function yarnBerry(ctx: Ctx): boolean {
-  const pm = readJson(ctx, 'package.json')?.packageManager;
+  const pm = at(readJson(ctx, 'package.json'), 'packageManager');
   if (typeof pm === 'string') {
     const m = pm.match(/^yarn@(\d+)/);
     if (m) return parseInt(m[1]!, 10) >= 2;
@@ -79,22 +80,24 @@ export function yarnBerry(ctx: Ctx): boolean {
 
 function installSteps(ctx: Ctx): InstallStep[] {
   const out: InstallStep[] = [];
-  const pkg = readJson(ctx, 'package.json');
-  const scripts = pkg?.scripts ?? {};
+  const scripts = dict(at(readJson(ctx, 'package.json'), 'scripts')) ?? {};
   const npmHooks = yarnBerry(ctx) ? ['postinstall'] : ['prepare', 'postinstall'];
   for (const name of npmHooks) {
-    if (typeof scripts[name] === 'string') {
-      out.push({ where: `package.json ${name}`, text: expandNpm(scripts, scripts[name]) });
+    const body = scripts[name];
+    if (typeof body === 'string') {
+      out.push({ where: `package.json ${name}`, text: expandNpm(scripts, body) });
     }
   }
-  const composer = readJson(ctx, 'composer.json');
-  const cmd = composer?.scripts?.['post-install-cmd'];
+  const composerScripts = dict(at(readJson(ctx, 'composer.json'), 'scripts')) ?? {};
+  const cmd = composerScripts['post-install-cmd'];
   if (cmd !== undefined) {
-    out.push({ where: 'composer post-install-cmd', text: expandComposer(composer.scripts, cmd) });
+    out.push({ where: 'composer post-install-cmd', text: expandComposer(composerScripts, cmd) });
   }
-  const up = readToml(ctx, 'mise.toml')?.tasks?.up;
-  if (up && typeof up === 'object') {
-    const runs = (Array.isArray(up.run) ? up.run : [up.run]).filter((r: unknown) => typeof r === 'string');
+  const up = dict(at(readToml(ctx, 'mise.toml'), 'tasks', 'up'));
+  if (up) {
+    const runs = (Array.isArray(up['run']) ? (up['run'] as unknown[]) : [up['run']]).filter(
+      (r): r is string => typeof r === 'string',
+    );
     if (runs.length > 0) out.push({ where: 'mise task up', text: runs.join('\n') });
   }
   return out;
@@ -135,7 +138,7 @@ function findStep(steps: InstallStep[], re: RegExp): string | null {
 /** Hook scripts in a directory: file name = event; the body is the command. */
 function hooksFromDir(ctx: Ctx, dir: string): Map<string, string[]> {
   const out = new Map<string, string[]>();
-  let names: string[] = [];
+  let names: string[];
   try {
     names = fs.readdirSync(path.join(ctx.projectRoot, dir));
   } catch {
@@ -162,15 +165,14 @@ function scriptBody(text: string): string {
 
 function lefthookRuns(node: unknown): string[] {
   const out: string[] = [];
-  if (!node || typeof node !== 'object') return out;
-  const o = node as Record<string, any>;
-  if (typeof o.run === 'string') out.push(o.run);
-  if (typeof o.runner === 'string') out.push(o.runner);
+  if (!isDict(node)) return out;
+  if (typeof node['run'] === 'string') out.push(node['run']);
+  if (typeof node['runner'] === 'string') out.push(node['runner']);
   for (const key of ['commands', 'scripts']) {
-    if (o[key] && typeof o[key] === 'object') for (const v of Object.values(o[key])) out.push(...lefthookRuns(v));
+    for (const v of Object.values(dict(node[key]) ?? {})) out.push(...lefthookRuns(v));
   }
-  if (Array.isArray(o.jobs)) for (const j of o.jobs) out.push(...lefthookRuns(j));
-  if (o.group && typeof o.group === 'object') out.push(...lefthookRuns(o.group));
+  for (const j of list(node['jobs'])) out.push(...lefthookRuns(j));
+  out.push(...lefthookRuns(node['group']));
   return out;
 }
 
@@ -204,14 +206,14 @@ export function detectHookFrameworks(ctx: Ctx): HookFramework[] {
   for (const file of LEFTHOOK_FILES) {
     const text = readText(ctx, file);
     if (text === null) continue;
-    let data: any;
+    let data: unknown;
     try {
       data = YAML.load(text);
     } catch {
       continue;
     }
     const hooks = new Map<string, string[]>();
-    for (const [event, def] of Object.entries((data ?? {}) as Record<string, unknown>)) {
+    for (const [event, def] of Object.entries(dict(data) ?? {})) {
       if (GIT_HOOK_EVENTS.has(event)) hooks.set(event, lefthookRuns(def));
     }
     if (hooks.size === 0) continue;
@@ -231,11 +233,9 @@ export function detectHookFrameworks(ctx: Ctx): HookFramework[] {
     break;
   }
 
-  const sgh =
-    (pkg?.['simple-git-hooks'] as Record<string, unknown> | undefined) ??
-    readJson(ctx, '.simple-git-hooks.json') ??
-    readJson(ctx, 'simple-git-hooks.json');
-  if (sgh && typeof sgh === 'object') {
+  const sghInPackage = dict(at(pkg, 'simple-git-hooks'));
+  const sgh = sghInPackage ?? dict(readJson(ctx, '.simple-git-hooks.json') ?? readJson(ctx, 'simple-git-hooks.json'));
+  if (sgh) {
     const hooks = new Map<string, string[]>();
     for (const [event, cmd] of Object.entries(sgh)) {
       if (GIT_HOOK_EVENTS.has(event) && typeof cmd === 'string') hooks.set(event, [cmd]);
@@ -243,7 +243,7 @@ export function detectHookFrameworks(ctx: Ctx): HookFramework[] {
     if (hooks.size > 0) {
       out.push({
         id: 'simple-git-hooks',
-        declaredIn: pkg?.['simple-git-hooks'] ? 'package.json simple-git-hooks' : 'simple-git-hooks.json',
+        declaredIn: sghInPackage ? 'package.json simple-git-hooks' : 'simple-git-hooks.json',
         hooks,
         installedBy: isPackagePresent('simple-git-hooks', 'npm', ctx)
           ? 'simple-git-hooks package (its postinstall)'
@@ -255,10 +255,10 @@ export function detectHookFrameworks(ctx: Ctx): HookFramework[] {
     }
   }
 
-  const extra = composer?.extra?.hooks;
-  if (extra && typeof extra === 'object') {
+  const extra = dict(at(composer, 'extra', 'hooks'));
+  if (extra) {
     const hooks = new Map<string, string[]>();
-    for (const [event, cmd] of Object.entries(extra as Record<string, unknown>)) {
+    for (const [event, cmd] of Object.entries(extra)) {
       if (!GIT_HOOK_EVENTS.has(event)) continue;
       const list = (Array.isArray(cmd) ? cmd : [cmd]).filter((c): c is string => typeof c === 'string');
       if (list.length > 0) hooks.set(event, list);
@@ -301,7 +301,7 @@ export function installCommand(fw: HookFramework, ctx: Ctx): string {
   if (fw.installedBy === null) return fw.manualInstall;
   if (fw.installedBy.startsWith('composer')) return 'composer install';
   if (fw.installedBy === 'mise task up') return 'vdx up';
-  const pm = readJson(ctx, 'package.json')?.packageManager;
+  const pm = at(readJson(ctx, 'package.json'), 'packageManager');
   if (typeof pm === 'string' && pm.startsWith('pnpm')) return 'pnpm install';
   if ((typeof pm === 'string' && pm.startsWith('yarn')) || fileExists(ctx, 'yarn.lock')) return 'yarn install';
   if (fileExists(ctx, 'pnpm-lock.yaml')) return 'pnpm install';

package/src/index.ts

@@ -2,8 +2,9 @@
 import * as path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import { loadRubric } from './rubric.ts';
-import { loadManifest, loadOverrides } from './manifest.ts';
+import { loadManifest, loadManifestAt, loadOverrides } from './manifest.ts';
 import { autoDetectStack, type Ctx } from './facts.ts';
+import { at, errorMessage } from './narrow.ts';
 import { LIFECYCLE_VERBS, type LifecycleVerb, resolveLifecycleVerb, renderResolveError } from './run.ts';
 import { audit } from './audit.ts';
 import {
@@ -285,7 +286,14 @@ function cmdAudit(opts: ParsedArgs): void {
     );
   }
 
-  const manifest = loadManifest(projectRoot);
+  const found = loadManifestAt(projectRoot);
+  const manifest = found?.manifest ?? null;
+  if (found?.place === 'vdx') {
+    process.stderr.write(
+      'note: the manifest is in [vdx] of mise.toml, and mise 2026.10 warns about it on every run; ' +
+        'its place is [_.vdx], once every machine of the project runs vdx 0.26 or newer\n',
+    );
+  }
   const overrides = loadOverrides(projectRoot);
 
   const rubricPath = (opts.flags.rubric as string) || DEFAULT_RUBRIC;
@@ -346,8 +354,8 @@ function cmdInit(opts: ParsedArgs): void {
   try {
     writeInit(plan, { force: Boolean(opts.flags.force) });
     process.stderr.write(`\n✓ wrote ${plan.miseTomlPath}\n`);
-  } catch (e: any) {
-    process.stderr.write(`\nerror: ${e?.message ?? String(e)}\n`);
+  } catch (e) {
+    process.stderr.write(`\nerror: ${errorMessage(e)}\n`);
     process.exit(2);
   }
 }
@@ -380,8 +388,8 @@ function cmdPublish(opts: ParsedArgs): void {
   const replan = () => {
     try {
       return planPublish(planOpts, auditResult, ctx);
-    } catch (e: any) {
-      process.stderr.write(`error: ${e?.message ?? String(e)}\n`);
+    } catch (e) {
+      process.stderr.write(`error: ${errorMessage(e)}\n`);
       process.exit(2);
     }
   };
@@ -418,8 +426,8 @@ function cmdPublish(opts: ParsedArgs): void {
 
   try {
     executePublish(plan, deps);
-  } catch (e: any) {
-    process.stderr.write(`\nerror: ${e?.message ?? String(e)}\n`);
+  } catch (e) {
+    process.stderr.write(`\nerror: ${errorMessage(e)}\n`);
     process.exit(3);
   }
 }
@@ -434,14 +442,15 @@ function cmdRun(verb: LifecycleVerb): void {
 
   try {
     execFileSync('mise', ['run', verb], { cwd: projectRoot, stdio: 'inherit' });
-  } catch (e: any) {
-    if (e?.code === 'ENOENT') {
+  } catch (e) {
+    if (at(e, 'code') === 'ENOENT') {
       process.stderr.write(
         `vdx: \`mise\` binary not found on PATH\n` + `hint: install mise — https://mise.jdx.dev/getting-started.html\n`,
       );
       process.exit(127);
     }
-    process.exit(typeof e?.status === 'number' ? e.status : 1);
+    const status = at(e, 'status');
+    process.exit(typeof status === 'number' ? status : 1);
   }
 }
 
@@ -462,8 +471,8 @@ function cmdDoctor(opts: ParsedArgs): void {
       process.stderr.write(
         done.length > 0 ? done.map((d) => `✓ ${d}`).join('\n') + '\n' : 'nothing to fix in ~/.gitconfig\n',
       );
-    } catch (e: any) {
-      process.stderr.write(`vdx doctor --fix: ${e?.message ?? String(e)}\n`);
+    } catch (e) {
+      process.stderr.write(`vdx doctor --fix: ${errorMessage(e)}\n`);
       process.exit(2);
     }
   }

package/src/init.ts

@@ -1,11 +1,12 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { Ctx, readJson, listAllTasks, autoDetectStack, findSubPackages, type SubPackage } from './facts.ts';
+import { at } from './narrow.ts';
 
 export const STANDARD_VERBS = ['up', 'down', 'build', 'test', 'check', 'fix'] as const;
 export type Verb = (typeof STANDARD_VERBS)[number];
 
-export const DEFAULT_BASELINE = 'github.com/VoDmAl/vdx-rubric-vodmal@v1.4.0';
+export const DEFAULT_BASELINE = 'github.com/VoDmAl/vdx-rubric-vodmal@v1.4.2';
 
 const VERB_ALIASES: Record<Verb, string[]> = {
   up: ['docker:up', 'docker-up', 'docker:up:detached', 'start', 'dev', 'serve'],
@@ -225,14 +226,10 @@ export function mapVerb(verb: Verb, tasks: Set<string>): string | null {
 
 function collectTools(ctx: Ctx): Record<string, string> {
   const tools: Record<string, string> = {};
-  const composer = readJson(ctx, 'composer.json');
-  if (composer?.require?.php && typeof composer.require.php === 'string') {
-    tools.php = stripVersionConstraint(composer.require.php);
-  }
-  const pkg = readJson(ctx, 'package.json');
-  if (pkg?.engines?.node && typeof pkg.engines.node === 'string') {
-    tools.node = stripVersionConstraint(pkg.engines.node);
-  }
+  const php = at(readJson(ctx, 'composer.json'), 'require', 'php');
+  if (typeof php === 'string' && php) tools.php = stripVersionConstraint(php);
+  const node = at(readJson(ctx, 'package.json'), 'engines', 'node');
+  if (typeof node === 'string' && node) tools.node = stripVersionConstraint(node);
   return tools;
 }
 
@@ -264,7 +261,7 @@ export function renderMiseToml(
   primarySubpackage: string | null = null,
 ): string {
   const out: string[] = [];
-  out.push('# Generated by vdx init. The [vdx] block is metadata for vdx audit.');
+  out.push('# Generated by vdx init. The [_.vdx] block is metadata for vdx audit; mise leaves [_] alone.');
   out.push('# Lifecycle verbs follow the vdx contract: up/down/build/test/check/fix.');
   out.push('');
 
@@ -294,7 +291,7 @@ export function renderMiseToml(
     out.push('');
   }
 
-  out.push('[vdx]');
+  out.push('[_.vdx]');
   out.push('schema_version = "0.2"');
   out.push(`baseline = ${quoteToml(baseline)}`);
   out.push(`stack = ${quoteToml(stack)}`);
@@ -337,7 +334,7 @@ export function planInit(projectRoot: string, opts: { baseline?: string; stack?:
       const list = subs.map((s) => `${s.relPath}(${s.stack})`).join(', ');
       warnings.push(
         `stack="meta", найдено несколько subpackages: ${list}. ` +
-          'primary_subpackage не выбран; укажи его руками в [vdx] блоке.',
+          'primary_subpackage не выбран; укажи его руками в блоке [_.vdx].',
       );
     }
   } else if (!stackOverridden && (detectedStack === 'unknown' || detectedStack === 'monorepo')) {

package/src/manifest.ts

@@ -2,6 +2,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import * as TOML from 'smol-toml';
 import YAML from 'js-yaml';
+import { at, dict, type Dict } from './narrow.ts';
 
 export interface VdxManifest {
   schema_version?: string;
@@ -29,18 +30,38 @@ export interface Override {
   until?: string;
 }
 
-export function loadManifest(projectRoot: string): VdxManifest | null {
+/**
+ * Where the manifest lives in mise.toml. `[_.vdx]` — mise documents the `[_]` table as never
+ * read, for other tools' data. `[vdx]` — where it lived before vdx 0.26; still read, but mise
+ * 2026.10 warns about an unknown field on every run.
+ */
+export type ManifestPlace = '_.vdx' | 'vdx';
+
+/** The manifest table of a parsed mise.toml and its place: `[_.vdx]`, else the older `[vdx]`. */
+export function manifestTable(data: unknown): { table: Dict; place: ManifestPlace } | null {
+  const table = dict(at(data, '_', 'vdx'));
+  if (table) return { table, place: '_.vdx' };
+  const older = dict(at(data, 'vdx'));
+  return older ? { table: older, place: 'vdx' } : null;
+}
+
+/** The project's manifest and where in its mise.toml it was found. */
+export function loadManifestAt(projectRoot: string): { manifest: VdxManifest; place: ManifestPlace } | null {
   const miseToml = path.join(projectRoot, 'mise.toml');
   if (!fs.existsSync(miseToml)) return null;
   try {
-    const text = fs.readFileSync(miseToml, 'utf8');
-    const data = TOML.parse(text) as { vdx?: VdxManifest };
-    return data?.vdx ?? null;
+    const found = manifestTable(TOML.parse(fs.readFileSync(miseToml, 'utf8')));
+    // The fields are the project's to write; readers check what they use.
+    return found ? { manifest: found.table, place: found.place } : null;
   } catch {
     return null;
   }
 }
 
+export function loadManifest(projectRoot: string): VdxManifest | null {
+  return loadManifestAt(projectRoot)?.manifest ?? null;
+}
+
 export function loadOverrides(projectRoot: string): Override[] {
   const file = path.join(projectRoot, '.vdx-overrides.yml');
   if (!fs.existsSync(file)) return [];