@vzn/vx 0.0.52 → 0.0.54

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.52",
+  "version": "0.0.54",
   "description": "An open, extensible monorepo task runner.",
   "type": "module",
   "exports": {
@@ -17,10 +17,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.52",
-    "@vzn/vx-linux-arm64": "0.0.52",
-    "@vzn/vx-darwin-x64": "0.0.52",
-    "@vzn/vx-darwin-arm64": "0.0.52"
+    "@vzn/vx-linux-x64": "0.0.54",
+    "@vzn/vx-linux-arm64": "0.0.54",
+    "@vzn/vx-darwin-x64": "0.0.54",
+    "@vzn/vx-darwin-arm64": "0.0.54"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cli/run.ts

@@ -437,9 +437,10 @@ export async function resolveRunOptions(
   // changed-only `[<base>]` (item 287). `--filter '[<base>]'` stays the
   // "only what I touched" form. Merging it into the filter list means the
   // same code path handles plain filter use, --affected alone, and the combo.
-  // It goes FIRST: filters apply in argv order, and appended last it came
-  // after every `!` exclude, so `--affected --filter '!app'` still ran app
-  // (item 955). An include's place does not change a union.
+  // Its place does not change the selection: `applyFilters` takes every
+  // include before any exclude (item 979), so `--affected --filter '!app'`
+  // drops app from either side (item 955 had put it first for that). First
+  // it stays, so a message naming the filters names it first.
   const filterStrings = [...parsed.filters]
   if (parsed.affected !== undefined) {
     const root = await findWorkspaceRoot(cwd)

package/src/orchestrator/plugin.ts

@@ -72,7 +72,7 @@ export interface VxPlugin {
 
   /**
    * The task graph, after `dependsOn` expansion and before scheduling. Add
-   * or drop edges (`node.deps`), mark tasks requested, adjust resources. A
+   * or drop edges (`node.deps`), mark tasks requested. A
    * dep naming a task that is not in the graph, or a cycle, is refused with
    * the plugin's name.
    */

package/src/orchestrator/prepare.ts

@@ -242,8 +242,9 @@ export async function prepareRun(options: RunOptions, log: Logger): Promise<Prep
   const workspaceFingerprint = fingerprints.unclaimed
   mark('open cache')
 
-  // Frozen mode (--frozen, CI): configs load FROM vx-lock.json after a
-  // content-hash tripwire — no evaluation; env-dependent configs keep
+  // Frozen mode (--frozen, CI): configs load FROM vx-lock.json with no
+  // evaluation and no check of the config bytes (`vx lock --check`
+  // compares `configHash`; a run does not); env-dependent configs keep
   // their locked values. Default (local) runs ALWAYS evaluate live:
   // a byte hash can't see a config's import closure (shared presets),
   // so consuming the lock by default would silently serve stale
@@ -333,7 +334,10 @@ export async function prepareRun(options: RunOptions, log: Logger): Promise<Prep
         })
   } catch (err) {
     // A cache plugin that throws or returns something off-contract is
-    // refused by name; the local handle opened above must not leak with it.
+    // refused by name; the local handle opened above must not leak with it,
+    // nor what another plugin's factory opened: the factories have run
+    // (C-4, item 1029's contract).
+    await teardownPlugins(plugins, (m) => log.status(m))
     localCache.close()
     throw err
   }