@vzn/vx 0.0.229 → 0.0.231

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.229",
+  "version": "0.0.231",
   "description": "A fast, correct task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -17,10 +17,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.229",
-    "@vzn/vx-linux-arm64": "0.0.229",
-    "@vzn/vx-darwin-x64": "0.0.229",
-    "@vzn/vx-darwin-arm64": "0.0.229"
+    "@vzn/vx-linux-x64": "0.0.231",
+    "@vzn/vx-linux-arm64": "0.0.231",
+    "@vzn/vx-darwin-x64": "0.0.231",
+    "@vzn/vx-darwin-arm64": "0.0.231"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/orchestrator/plugin-host.ts

@@ -216,6 +216,13 @@ export async function applyKeyHooks(
             `plugin '${plugin.name}' failed in key: value for '${name}' on ${node.id} is not a string`,
           )
         }
+        // The fold joins a part as `name\0value`: a NUL in the name let
+        // `{ 'a\0b': 'c' }` and `{ a: 'b\0c' }` fold the same bytes.
+        if (name.includes('\0')) {
+          throw new UserError(
+            `plugin '${plugin.name}' failed in key: a name on ${node.id} holds a NUL, the fold's delimiter`,
+          )
+        }
         parts.push([`${plugin.name}/${name}`, value])
       }
     }

package/src/util/bun-version.ts

@@ -32,7 +32,7 @@ export function isUnsupportedBun(version: string): boolean {
   return patch < reqPatch
 }
 
-/** The warning a CLI entry prints once, before the verb runs. */
+/** The refusal the gate's `check.bun` prints (`scripts/bun-floor.ts`); `vx info` reports the floor in a row of its own. */
 export function unsupportedBunMessage(version: string): string {
   return (
     `vx needs Bun >= ${MIN_BUN.join('.')} (running ${version}). ` +

package/src/util/errors.ts

@@ -88,7 +88,7 @@ export function isExecutableMissing(err: unknown): boolean {
 
 /**
  * The one refusal for a git that is not on PATH, wherever vx needed it — a
- * `--affected` base, the input enumeration, a watch judgement. A minimal
+ * `--affected` base, the input enumeration. A minimal
  * image without git met a stack from `defaultAffectedBase` before
  * (2026-09-16); the enumeration had this line and the others did not.
  */