@vzn/vx 0.0.612 → 0.0.613

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.612",
+  "version": "0.0.613",
   "description": "The fastest task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.612",
-    "@vzn/vx-linux-arm64": "0.0.612",
-    "@vzn/vx-darwin-x64": "0.0.612",
-    "@vzn/vx-darwin-arm64": "0.0.612"
+    "@vzn/vx-linux-x64": "0.0.613",
+    "@vzn/vx-linux-arm64": "0.0.613",
+    "@vzn/vx-darwin-x64": "0.0.613",
+    "@vzn/vx-darwin-arm64": "0.0.613"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/orchestrator/plugin-host.ts

@@ -34,7 +34,16 @@ function describeValue(v: unknown): string {
   if (v === null) return 'null'
   if (Array.isArray(v)) return 'an array'
   const t = typeof v
-  return t === 'object' ? 'an object' : `a ${t}`
+  if (t !== 'object') return `a ${t}`
+  const proto: unknown = Object.getPrototypeOf(v)
+  if (proto === Object.prototype || proto === null) return 'an object'
+  return `a ${(v as object).constructor?.name || 'class instance'}`
+}
+
+function isRecord(v: unknown): v is Record<string, unknown> {
+  if (typeof v !== 'object' || v === null) return false
+  const proto: unknown = Object.getPrototypeOf(v)
+  return proto === Object.prototype || proto === null
 }
 
 /** Every method `CacheLayer` requires (the optional ones are probed with `?.`). */
@@ -197,7 +206,8 @@ export async function applyProjectHooks(
  * against the LAST plugin that ran: usually the one whose edit made it so,
  * but an earlier plugin's edit that a later one left in place is blamed on
  * the later one, since the structure is not checked between plugins.
- * Each node's task config is (`afterEach`), like the `project` stage's.
+ * Each node's task config is re-validated after EACH plugin (`afterEach`),
+ * like the `project` stage's.
  */
 export async function applyGraphHooks(
   plugins: readonly VxPlugin[],
@@ -271,8 +281,10 @@ export async function applyKeyHooks(
       if (material === undefined) continue
       // `Object.entries` over a string yields its characters as string
       // values, so a plugin returning `'v22'` used to fold parts named
-      // '0', '1', '2' into every key — silently, and permanently.
-      if (typeof material !== 'object' || material === null || Array.isArray(material)) {
+      // '0', '1', '2' into every key — silently, and permanently. A Map or a
+      // class instance keeps its data off own enumerable keys, so
+      // `Object.entries` read it as no material at all: a silent miskey.
+      if (!isRecord(material)) {
         throw new UserError(
           `plugin '${plugin.name}' failed in key: returned ${describeValue(material)}, not a record of string values`,
         )

package/src/workspace/config-schema.ts

@@ -254,12 +254,16 @@ export function validateWorkspace(config: WorkspaceConfig, configPath: string):
       }
       for (const cap of PLUGIN_FUNCTION_HOOKS) {
         if (plug[cap] !== undefined && typeof plug[cap] !== 'function') {
-          throw new UserError(`${configPath}: \`plugins[${i}].${cap}\` must be a function`)
+          throw new UserError(
+            `${configPath}: \`plugins[${i}].${cap}\` of plugin '${pkg}' must be a function`,
+          )
         }
       }
       if (plug.commands !== undefined) {
         if (plug.commands === null || typeof plug.commands !== 'object') {
-          throw new UserError(`${configPath}: \`plugins[${i}].commands\` must be an object`)
+          throw new UserError(
+            `${configPath}: \`plugins[${i}].commands\` of plugin '${pkg}' must be an object`,
+          )
         }
         // A list of commands loaded as the verbs `0`, `1`, … that help listed.
         if (Array.isArray(plug.commands)) {
@@ -276,7 +280,7 @@ export function validateWorkspace(config: WorkspaceConfig, configPath: string):
             typeof c.description !== 'string'
           ) {
             throw new UserError(
-              `${configPath}: \`plugins[${i}].commands.${verb}\` must be { description: string, run: function }`,
+              `${configPath}: \`plugins[${i}].commands.${verb}\` of plugin '${pkg}' must be { description: string, run: function }`,
             )
           }
           // A verb the dispatcher would never reach is refused, not left
@@ -287,10 +291,12 @@ export function validateWorkspace(config: WorkspaceConfig, configPath: string):
           // package: two plugins one package exports (`bun()` and `pnpm()`
           // both carry `prune`) are one owner, and the first declared runs.
           // `vx --version` and `vx ''` never reach a plugin: a flag is
-          // core's, and an empty word is no verb (X-21).
-          if (verb.trim() === '' || verb.startsWith('-')) {
+          // core's, and an empty word is no verb (X-21). `vx completions`
+          // writes verbs unquoted into a shell script, so a space or a `$(`
+          // in one would break or inject into the user's rc.
+          if (!/^[A-Za-z0-9][A-Za-z0-9:._-]*$/.test(verb)) {
             throw new UserError(
-              `${configPath}: plugin '${plug.name}' declares command '${verb}', which no command line reaches — a verb is a word, not a flag or empty`,
+              `${configPath}: plugin '${plug.name}' declares command '${verb}', which is not a word — a verb is a letter or digit, then letters, digits, ':', '.', '_' or '-'`,
             )
           }
           if ((CORE_VERBS as readonly string[]).includes(verb)) {
@@ -317,7 +323,7 @@ export function validateWorkspace(config: WorkspaceConfig, configPath: string):
           typeof claim.affected !== 'function'
         ) {
           throw new UserError(
-            `${configPath}: \`plugins[${i}].fingerprint\` must be { files: [name, …], affected: function }`,
+            `${configPath}: \`plugins[${i}].fingerprint\` of plugin '${pkg}' must be { files: [name, …], affected: function }`,
           )
         }
         for (const file of claim.files as unknown[]) {
@@ -357,7 +363,7 @@ export function validateWorkspace(config: WorkspaceConfig, configPath: string):
       // — an empty `{ name }` object is a no-op authoring mistake.
       if (PLUGIN_HOOKS.every((hook) => plug[hook] === undefined)) {
         throw new UserError(
-          `${configPath}: \`plugins[${i}]\` must contribute at least one of ${PLUGIN_HOOKS.join('/')}`,
+          `${configPath}: \`plugins[${i}]\` (plugin '${pkg}') must contribute at least one of ${PLUGIN_HOOKS.join('/')}`,
         )
       }
     }