@vodmal/vdx-cli 0.25.0 → 0.27.0

package/src/index.ts

@@ -2,8 +2,9 @@
 import * as path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import { loadRubric } from './rubric.ts';
-import { loadManifest, loadOverrides } from './manifest.ts';
+import { loadManifest, loadManifestAt, loadOverrides } from './manifest.ts';
 import { autoDetectStack, type Ctx } from './facts.ts';
+import { at, errorMessage } from './narrow.ts';
 import { LIFECYCLE_VERBS, type LifecycleVerb, resolveLifecycleVerb, renderResolveError } from './run.ts';
 import { audit } from './audit.ts';
 import {
@@ -285,7 +286,14 @@ function cmdAudit(opts: ParsedArgs): void {
     );
   }
 
-  const manifest = loadManifest(projectRoot);
+  const found = loadManifestAt(projectRoot);
+  const manifest = found?.manifest ?? null;
+  if (found?.place === 'vdx') {
+    process.stderr.write(
+      'note: the manifest is in [vdx] of mise.toml, and mise 2026.10 warns about it on every run; ' +
+        'its place is [_.vdx], once every machine of the project runs vdx 0.26 or newer\n',
+    );
+  }
   const overrides = loadOverrides(projectRoot);
 
   const rubricPath = (opts.flags.rubric as string) || DEFAULT_RUBRIC;
@@ -346,8 +354,8 @@ function cmdInit(opts: ParsedArgs): void {
   try {
     writeInit(plan, { force: Boolean(opts.flags.force) });
     process.stderr.write(`\n✓ wrote ${plan.miseTomlPath}\n`);
-  } catch (e: any) {
-    process.stderr.write(`\nerror: ${e?.message ?? String(e)}\n`);
+  } catch (e) {
+    process.stderr.write(`\nerror: ${errorMessage(e)}\n`);
     process.exit(2);
   }
 }
@@ -380,8 +388,8 @@ function cmdPublish(opts: ParsedArgs): void {
   const replan = () => {
     try {
       return planPublish(planOpts, auditResult, ctx);
-    } catch (e: any) {
-      process.stderr.write(`error: ${e?.message ?? String(e)}\n`);
+    } catch (e) {
+      process.stderr.write(`error: ${errorMessage(e)}\n`);
       process.exit(2);
     }
   };
@@ -418,8 +426,8 @@ function cmdPublish(opts: ParsedArgs): void {
 
   try {
     executePublish(plan, deps);
-  } catch (e: any) {
-    process.stderr.write(`\nerror: ${e?.message ?? String(e)}\n`);
+  } catch (e) {
+    process.stderr.write(`\nerror: ${errorMessage(e)}\n`);
     process.exit(3);
   }
 }
@@ -434,14 +442,15 @@ function cmdRun(verb: LifecycleVerb): void {
 
   try {
     execFileSync('mise', ['run', verb], { cwd: projectRoot, stdio: 'inherit' });
-  } catch (e: any) {
-    if (e?.code === 'ENOENT') {
+  } catch (e) {
+    if (at(e, 'code') === 'ENOENT') {
       process.stderr.write(
         `vdx: \`mise\` binary not found on PATH\n` + `hint: install mise — https://mise.jdx.dev/getting-started.html\n`,
       );
       process.exit(127);
     }
-    process.exit(typeof e?.status === 'number' ? e.status : 1);
+    const status = at(e, 'status');
+    process.exit(typeof status === 'number' ? status : 1);
   }
 }
 
@@ -462,8 +471,8 @@ function cmdDoctor(opts: ParsedArgs): void {
       process.stderr.write(
         done.length > 0 ? done.map((d) => `✓ ${d}`).join('\n') + '\n' : 'nothing to fix in ~/.gitconfig\n',
       );
-    } catch (e: any) {
-      process.stderr.write(`vdx doctor --fix: ${e?.message ?? String(e)}\n`);
+    } catch (e) {
+      process.stderr.write(`vdx doctor --fix: ${errorMessage(e)}\n`);
       process.exit(2);
     }
   }

package/src/init.ts

@@ -1,11 +1,12 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { Ctx, readJson, listAllTasks, autoDetectStack, findSubPackages, type SubPackage } from './facts.ts';
+import { at } from './narrow.ts';
 
 export const STANDARD_VERBS = ['up', 'down', 'build', 'test', 'check', 'fix'] as const;
 export type Verb = (typeof STANDARD_VERBS)[number];
 
-export const DEFAULT_BASELINE = 'github.com/VoDmAl/vdx-rubric-vodmal@v1.4.0';
+export const DEFAULT_BASELINE = 'github.com/VoDmAl/vdx-rubric-vodmal@v1.4.2';
 
 const VERB_ALIASES: Record<Verb, string[]> = {
   up: ['docker:up', 'docker-up', 'docker:up:detached', 'start', 'dev', 'serve'],
@@ -77,9 +78,9 @@ const VERB_SUFFIX_GROUPS: Record<Verb, string[]> = {
   fix: [':fix', '-fix', ':format'],
 };
 
-export type MatchReason = 'exact' | 'alias' | 'prefix-group' | 'suffix-group' | 'not-found';
+type MatchReason = 'exact' | 'alias' | 'prefix-group' | 'suffix-group' | 'not-found';
 
-export interface VerbMapping {
+interface VerbMapping {
   verb: Verb;
   nativeTask: string | null;
   runCommand: string | null;
@@ -218,21 +219,12 @@ export function selectVerbTask(verb: Verb, tasks: Set<string>): VerbMatch {
   return { task: null, reason: 'not-found', alternatives: [] };
 }
 
-/** Kept for back-compat with potential external callers; prefer `selectVerbTask`. */
-export function mapVerb(verb: Verb, tasks: Set<string>): string | null {
-  return selectVerbTask(verb, tasks).task;
-}
-
 function collectTools(ctx: Ctx): Record<string, string> {
   const tools: Record<string, string> = {};
-  const composer = readJson(ctx, 'composer.json');
-  if (composer?.require?.php && typeof composer.require.php === 'string') {
-    tools.php = stripVersionConstraint(composer.require.php);
-  }
-  const pkg = readJson(ctx, 'package.json');
-  if (pkg?.engines?.node && typeof pkg.engines.node === 'string') {
-    tools.node = stripVersionConstraint(pkg.engines.node);
-  }
+  const php = at(readJson(ctx, 'composer.json'), 'require', 'php');
+  if (typeof php === 'string' && php) tools.php = stripVersionConstraint(php);
+  const node = at(readJson(ctx, 'package.json'), 'engines', 'node');
+  if (typeof node === 'string' && node) tools.node = stripVersionConstraint(node);
   return tools;
 }
 
@@ -256,7 +248,7 @@ function quoteToml(s: string): string {
   return '"' + s.replace(/\\/g, '\\\\').replace(/"/g, '\\"') + '"';
 }
 
-export function renderMiseToml(
+function renderMiseToml(
   tools: Record<string, string>,
   mappings: VerbMapping[],
   stack: string,
@@ -264,7 +256,7 @@ export function renderMiseToml(
   primarySubpackage: string | null = null,
 ): string {
   const out: string[] = [];
-  out.push('# Generated by vdx init. The [vdx] block is metadata for vdx audit.');
+  out.push('# Generated by vdx init. The [_.vdx] block is metadata for vdx audit; mise leaves [_] alone.');
   out.push('# Lifecycle verbs follow the vdx contract: up/down/build/test/check/fix.');
   out.push('');
 
@@ -294,7 +286,7 @@ export function renderMiseToml(
     out.push('');
   }
 
-  out.push('[vdx]');
+  out.push('[_.vdx]');
   out.push('schema_version = "0.2"');
   out.push(`baseline = ${quoteToml(baseline)}`);
   out.push(`stack = ${quoteToml(stack)}`);
@@ -337,7 +329,7 @@ export function planInit(projectRoot: string, opts: { baseline?: string; stack?:
       const list = subs.map((s) => `${s.relPath}(${s.stack})`).join(', ');
       warnings.push(
         `stack="meta", найдено несколько subpackages: ${list}. ` +
-          'primary_subpackage не выбран; укажи его руками в [vdx] блоке.',
+          'primary_subpackage не выбран; укажи его руками в блоке [_.vdx].',
       );
     }
   } else if (!stackOverridden && (detectedStack === 'unknown' || detectedStack === 'monorepo')) {

package/src/manifest.ts

@@ -2,6 +2,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import * as TOML from 'smol-toml';
 import YAML from 'js-yaml';
+import { at, dict, type Dict } from './narrow.ts';
 
 export interface VdxManifest {
   schema_version?: string;
@@ -29,18 +30,38 @@ export interface Override {
   until?: string;
 }
 
-export function loadManifest(projectRoot: string): VdxManifest | null {
+/**
+ * Where the manifest lives in mise.toml. `[_.vdx]` — mise documents the `[_]` table as never
+ * read, for other tools' data. `[vdx]` — where it lived before vdx 0.26; still read, but mise
+ * 2026.10 warns about an unknown field on every run.
+ */
+export type ManifestPlace = '_.vdx' | 'vdx';
+
+/** The manifest table of a parsed mise.toml and its place: `[_.vdx]`, else the older `[vdx]`. */
+export function manifestTable(data: unknown): { table: Dict; place: ManifestPlace } | null {
+  const table = dict(at(data, '_', 'vdx'));
+  if (table) return { table, place: '_.vdx' };
+  const older = dict(at(data, 'vdx'));
+  return older ? { table: older, place: 'vdx' } : null;
+}
+
+/** The project's manifest and where in its mise.toml it was found. */
+export function loadManifestAt(projectRoot: string): { manifest: VdxManifest; place: ManifestPlace } | null {
   const miseToml = path.join(projectRoot, 'mise.toml');
   if (!fs.existsSync(miseToml)) return null;
   try {
-    const text = fs.readFileSync(miseToml, 'utf8');
-    const data = TOML.parse(text) as { vdx?: VdxManifest };
-    return data?.vdx ?? null;
+    const found = manifestTable(TOML.parse(fs.readFileSync(miseToml, 'utf8')));
+    // The fields are the project's to write; readers check what they use.
+    return found ? { manifest: found.table, place: found.place } : null;
   } catch {
     return null;
   }
 }
 
+export function loadManifest(projectRoot: string): VdxManifest | null {
+  return loadManifestAt(projectRoot)?.manifest ?? null;
+}
+
 export function loadOverrides(projectRoot: string): Override[] {
   const file = path.join(projectRoot, '.vdx-overrides.yml');
   if (!fs.existsSync(file)) return [];

package/src/mcp-server.ts

@@ -8,12 +8,13 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import * as TOML from 'smol-toml';
 
 import { loadRubric } from './rubric.ts';
-import { loadManifest, loadOverrides } from './manifest.ts';
+import { loadManifest, loadOverrides, manifestTable } from './manifest.ts';
 import { autoDetectStack, readToml, type Ctx } from './facts.ts';
 import { audit } from './audit.ts';
 import { reportJson, reportMarkdown } from './report.ts';
 import { DEFAULT_BASELINE, STANDARD_VERBS, type Verb } from './init.ts';
 import { resolveDefaultRubric } from './defaults.ts';
+import { at, dict, errorMessage, isStringList, str, type Dict } from './narrow.ts';
 
 const DEFAULT_RUBRIC = resolveDefaultRubric();
 
@@ -30,18 +31,16 @@ function freshCtx(): Ctx {
   return { projectRoot: PROJECT_ROOT, stack, cache: new Map() };
 }
 
-function readMiseToml(): any {
+function readMiseToml(): unknown {
   return readToml(freshCtx(), 'mise.toml');
 }
 
-function getVdxBlock(): any {
-  const t = readMiseToml();
-  return t?.vdx ?? null;
+function getVdxBlock(): Dict | null {
+  return manifestTable(readMiseToml())?.table ?? null;
 }
 
-function getTasks(): Record<string, any> {
-  const t = readMiseToml();
-  return (t?.tasks as Record<string, any>) ?? {};
+function getTasks(): Dict {
+  return dict(at(readMiseToml(), 'tasks')) ?? {};
 }
 
 interface RunResult {
@@ -61,10 +60,10 @@ function spawnVerb(verb: Verb, extraArgs: string[]): Promise<RunResult> {
     });
     let stdout = '';
     let stderr = '';
-    child.stdout.on('data', (b) => {
+    child.stdout.on('data', (b: Buffer) => {
       stdout += b.toString();
     });
-    child.stderr.on('data', (b) => {
+    child.stderr.on('data', (b: Buffer) => {
       stderr += b.toString();
     });
     child.on('error', (e) => {
@@ -91,32 +90,33 @@ function spawnVerb(verb: Verb, extraArgs: string[]): Promise<RunResult> {
 function buildCapabilities() {
   const vdxBlock = getVdxBlock();
   const tasks = getTasks();
-  const verbsList = (vdxBlock?.verbs as string[] | undefined) ?? STANDARD_VERBS.slice();
+  const declared = vdxBlock?.['verbs'];
+  const verbsList = isStringList(declared) ? declared : STANDARD_VERBS.slice();
   const verbs = verbsList.map((name) => {
     const t = tasks[name];
-    const nativeCommand = t && typeof t === 'object' && typeof t.run === 'string' ? t.run : null;
     return {
       name,
       has_manifest: Boolean(t),
-      native_command: nativeCommand,
+      native_command: str(at(t, 'run')) ?? null,
     };
   });
 
-  const sharedInfra = vdxBlock?.shared_infra
+  const infra = dict(vdxBlock?.['shared_infra']);
+  const sharedInfra = infra
     ? {
-        provider: String(vdxBlock.shared_infra.provider ?? ''),
-        precheck: Boolean(vdxBlock.shared_infra.precheck),
+        provider: str(infra['provider']) ?? '',
+        precheck: Boolean(infra['precheck']),
         is_running: false,
       }
     : null;
 
   return {
-    schema_version: String(vdxBlock?.schema_version ?? '0.2'),
-    stack: String(vdxBlock?.stack ?? autoDetectStack(PROJECT_ROOT)),
-    baseline: String(vdxBlock?.baseline ?? `file://${DEFAULT_RUBRIC}`),
+    schema_version: str(vdxBlock?.['schema_version']) ?? '0.2',
+    stack: str(vdxBlock?.['stack']) ?? autoDetectStack(PROJECT_ROOT),
+    baseline: str(vdxBlock?.['baseline']) ?? `file://${DEFAULT_RUBRIC}`,
     verbs,
     shared_infra: sharedInfra,
-    last_verified: vdxBlock?.success_path?.last_verified ?? null,
+    last_verified: at(vdxBlock, 'success_path', 'last_verified') ?? null,
   };
 }
 
@@ -138,40 +138,44 @@ function recordSuccessPath(input: {
   notes?: string;
 }): { ok: boolean; manifest_path: string; agents_md_updated: boolean } {
   const manifestPath = path.join(PROJECT_ROOT, 'mise.toml');
-  let doc: any = {};
+  let doc: Dict = {};
   if (fs.existsSync(manifestPath)) {
     const text = fs.readFileSync(manifestPath, 'utf8');
     try {
       doc = TOML.parse(text);
-    } catch (e: any) {
-      throw new Error(`mise.toml parse error: ${e?.message}`);
+    } catch (e) {
+      throw new Error(`mise.toml parse error: ${errorMessage(e)}`, { cause: e });
     }
   }
 
-  doc.tasks = doc.tasks ?? {};
+  const tasks = dict(doc['tasks']) ?? {};
   for (const v of input.verbs) {
-    doc.tasks[v.name] = { run: v.command };
+    tasks[v.name] = { run: v.command };
   }
+  doc['tasks'] = tasks;
 
-  doc.vdx = doc.vdx ?? {
+  // An existing manifest is updated where it is; a new one goes into [_.vdx].
+  const found = manifestTable(doc);
+  const vdx = found?.table ?? {
     schema_version: '0.2',
     baseline: DEFAULT_BASELINE,
     stack: autoDetectStack(PROJECT_ROOT),
   };
-  doc.vdx.verbs = input.verbs.map((v) => v.name);
+  vdx['verbs'] = input.verbs.map((v) => v.name);
 
   if (input.shared_infra) {
-    doc.vdx.shared_infra = {
+    vdx['shared_infra'] = {
       provider: input.shared_infra.provider,
       precheck: input.shared_infra.precheck,
     };
   }
 
-  doc.vdx.success_path = {
+  vdx['success_path'] = {
     last_verified: new Date().toISOString().slice(0, 10),
     verified_by: 'vdx-mcp',
     ...(input.notes ? { notes: input.notes } : {}),
   };
+  if (!found) doc['_'] = { ...dict(doc['_']), vdx };
 
   const newText = TOML.stringify(doc);
   fs.writeFileSync(manifestPath, newText, 'utf8');
@@ -191,7 +195,7 @@ server.registerTool(
       'Возвращает manifest проекта: stack, baseline, доступные глаголы и их native команды, shared_infra и last_verified. Самый частый вызов агента, входящего в проект.',
     inputSchema: {},
   },
-  async () => {
+  () => {
     const payload = buildCapabilities();
     return { content: [{ type: 'text', text: JSON.stringify(payload, null, 2) }] };
   },
@@ -221,7 +225,7 @@ server.registerTool(
       format: z.enum(['json', 'markdown']).optional(),
     },
   },
-  async ({ baseline, format }) => {
+  ({ baseline, format }) => {
     const fmt = format ?? 'json';
     const payload = buildAuditPayload(baseline, fmt);
     return { content: [{ type: 'text', text: payload }] };
@@ -232,14 +236,14 @@ server.registerTool(
   'vdx_record_success_path',
   {
     description:
-      'Записывает обнаруженные команды в [tasks.X] секцию mise.toml + обновляет [vdx.success_path]. Используется после успешной верификации команд агентом.',
+      'Записывает обнаруженные команды в [tasks.X] секцию mise.toml + обновляет [_.vdx.success_path] (у манифеста в старом [vdx] — там). Используется после успешной верификации команд агентом.',
     inputSchema: {
       verbs: z.array(z.object({ name: z.string(), command: z.string() })),
       shared_infra: z.object({ provider: z.string(), precheck: z.boolean() }).optional(),
       notes: z.string().optional(),
     },
   },
-  async ({ verbs, shared_infra, notes }) => {
+  ({ verbs, shared_infra, notes }) => {
     const args: Parameters<typeof recordSuccessPath>[0] = { verbs };
     if (shared_infra) args.shared_infra = shared_infra;
     if (notes !== undefined) args.notes = notes;
@@ -254,7 +258,7 @@ async function main() {
   process.stderr.write(`vdx-mcp connected (project: ${PROJECT_ROOT})\n`);
 }
 
-main().catch((e) => {
-  process.stderr.write(`vdx-mcp fatal: ${e?.message ?? e}\n`);
+main().catch((e: unknown) => {
+  process.stderr.write(`vdx-mcp fatal: ${errorMessage(e)}\n`);
   process.exit(1);
 });

package/src/narrow.ts

@@ -0,0 +1,56 @@
+/**
+ * What a parsed file (JSON, YAML, TOML) or a caught error holds is `unknown` until checked.
+ * These helpers check it on the way in, so the code past them works with real types.
+ */
+
+export type Dict = Record<string, unknown>;
+
+/** A plain object — not null, not an array. */
+export function isDict(v: unknown): v is Dict {
+  return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+
+/** `v` when it is a plain object, else undefined. */
+export function dict(v: unknown): Dict | undefined {
+  return isDict(v) ? v : undefined;
+}
+
+/**
+ * The value under `keys`, one level per key — an object's property or an array's index ("0");
+ * undefined as soon as a level is not an object.
+ */
+export function at(v: unknown, ...keys: string[]): unknown {
+  let cur = v;
+  for (const k of keys) {
+    if (typeof cur !== 'object' || cur === null) return undefined;
+    cur = (cur as Dict)[k];
+  }
+  return cur;
+}
+
+/** `v` when it is a string, else undefined. */
+export function str(v: unknown): string | undefined {
+  return typeof v === 'string' ? v : undefined;
+}
+
+/** `v` when it is an array, else an empty one. */
+export function list(v: unknown): unknown[] {
+  return Array.isArray(v) ? (v as unknown[]) : [];
+}
+
+export function isStringList(v: unknown): v is string[] {
+  return Array.isArray(v) && v.every((x) => typeof x === 'string');
+}
+
+/** The message of a caught value, whatever was thrown. */
+export function errorMessage(e: unknown): string {
+  return e instanceof Error ? e.message : String(e);
+}
+
+/** What a failed child process said: its stderr, else the error's message. */
+export function stderrOf(e: unknown): string {
+  const err = at(e, 'stderr');
+  if (typeof err === 'string' && err) return err;
+  if (Buffer.isBuffer(err) && err.length > 0) return err.toString();
+  return errorMessage(e);
+}

package/src/personal-hooks.ts

@@ -9,14 +9,13 @@
  */
 import * as fs from 'node:fs';
 import * as os from 'node:os';
-import * as path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import type { CheckResult } from './doctor.ts';
 import { loadEnvironment, resolveEnvironmentPath, type PersonalHook } from './ai.ts';
 import { missingMachinePaths } from './hooks.ts';
 
 /** Git reads hooks from config since 2.54; older git skips the keys without a word. */
-export const CONFIG_HOOKS_SINCE: [number, number] = [2, 54];
+const CONFIG_HOOKS_SINCE: [number, number] = [2, 54];
 
 export interface PersonalHookDeps {
   env: NodeJS.ProcessEnv;
@@ -62,7 +61,7 @@ function events(h: PersonalHook): string[] {
 }
 
 /** The hooks of the profile that apply on this machine; null — no profile, or none declared. */
-export function applicableHooks(deps: PersonalHookDeps): PersonalHook[] | null {
+function applicableHooks(deps: PersonalHookDeps): PersonalHook[] | null {
   const file = resolveEnvironmentPath(deps.env, deps.home);
   if (!file) return null;
   let hooks: PersonalHook[];
@@ -185,8 +184,3 @@ export function fixPersonalHooks(deps: PersonalHookDeps = defaultPersonalHookDep
   }
   return done;
 }
-
-/** For messages: where the user config lives. */
-export function userGitConfigPath(deps: PersonalHookDeps): string {
-  return deps.env['GIT_CONFIG_GLOBAL'] ?? path.join(deps.home, '.gitconfig');
-}

package/src/predicates.ts

@@ -15,8 +15,9 @@ import {
 import { checkingJobs, ciSystems, ciTaskCalls, mainPushSteps, readWorkflows, shippingJobs, upstream } from './gha.ts';
 import { detectHookFrameworks } from './hooks.ts';
 import { covers, expandTasks, isVocabularyTask, projectTaskCalls } from './vocabulary.ts';
+import { at, isStringList, str } from './narrow.ts';
 
-type Args = Record<string, any>;
+export type Args = Record<string, unknown>;
 
 /** A fact vdx could not read here — a CI system or a hosting it does not inspect. */
 export interface Unknown {
@@ -42,7 +43,7 @@ const DEFAULT_TEST_PATTERN =
 
 function testPattern(args: Args): RegExp {
   try {
-    return new RegExp(String(args.pattern ?? DEFAULT_TEST_PATTERN));
+    return new RegExp(str(args.pattern) ?? DEFAULT_TEST_PATTERN);
   } catch {
     return new RegExp(DEFAULT_TEST_PATTERN);
   }
@@ -102,7 +103,7 @@ export const REGISTRY: Record<string, PredicateFn> = {
   has_file: (args, ctx) => fileExists(ctx, String(args.path)),
 
   file_contains: (args, ctx) => {
-    const paths: string[] = Array.isArray(args.paths) ? args.paths : [String(args.path)];
+    const paths = isStringList(args.paths) ? args.paths : [String(args.path)];
     const expanded = expandPaths(paths, ctx);
     let re: RegExp;
     try {
@@ -119,7 +120,7 @@ export const REGISTRY: Record<string, PredicateFn> = {
 
   package_present: (args, ctx) => {
     if (typeof args === 'string') return isPackagePresent(args, 'any', ctx);
-    return isPackagePresent(String(args.name), String(args.ecosystem ?? 'any'), ctx);
+    return isPackagePresent(String(args.name), str(args.ecosystem) ?? 'any', ctx);
   },
 
   tsc_flag: (args, ctx) => {
@@ -143,7 +144,7 @@ export const REGISTRY: Record<string, PredicateFn> = {
   gh_workflow_blocks_pr: (args, ctx) => {
     const dir = path.join(ctx.projectRoot, '.github', 'workflows');
     if (!fs.existsSync(dir)) return false;
-    const wanted = args.check_name ? String(args.check_name) : null;
+    const wanted = str(args.check_name) || null;
     try {
       for (const f of fs.readdirSync(dir)) {
         if (!/\.ya?ml$/.test(f)) continue;
@@ -166,21 +167,19 @@ export const REGISTRY: Record<string, PredicateFn> = {
       const text = readText(ctx, f);
       if (text && new RegExp(`^${hook}:`, 'm').test(text)) return true;
     }
-    const composer = readJson(ctx, 'composer.json');
-    if (composer?.extra?.hooks?.[hook]) return true;
-    return false;
+    return Boolean(at(readJson(ctx, 'composer.json'), 'extra', 'hooks', hook));
   },
 
   config_value: (args, ctx) => {
-    const filePath = String(args.path ?? '');
-    const jsonpath = String(args.jsonpath ?? '');
+    const filePath = str(args.path) ?? '';
+    const jsonpath = str(args.jsonpath) ?? '';
     if (!filePath || !jsonpath) return false;
     const data = readStructured(ctx, filePath);
     if (data === null || data === undefined) return false;
     const value = resolveConfigPath(data, jsonpath);
 
     // Operator resolution: explicit `op`, otherwise infer from arg shape.
-    let op = args.op ? String(args.op) : null;
+    let op = str(args.op) || null;
     if (!op) {
       if (args.equals !== undefined) op = 'equals';
       else if (args.gte !== undefined) op = 'gte';