@vzn/vx 0.0.122 → 0.0.123

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.122",
+  "version": "0.0.123",
   "description": "A fast, correct task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -17,10 +17,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.122",
-    "@vzn/vx-linux-arm64": "0.0.122",
-    "@vzn/vx-darwin-x64": "0.0.122",
-    "@vzn/vx-darwin-arm64": "0.0.122"
+    "@vzn/vx-linux-x64": "0.0.123",
+    "@vzn/vx-linux-arm64": "0.0.123",
+    "@vzn/vx-darwin-x64": "0.0.123",
+    "@vzn/vx-darwin-arm64": "0.0.123"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/orchestrator/shell-verdict.ts

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, statSync } from 'node:fs'
+import { accessSync, constants as fsConstants, existsSync, readFileSync, statSync } from 'node:fs'
 import { constants as osConstants } from 'node:os'
 import path from 'node:path'
 import { execWord, exitSignal } from '../exec/index.js'
@@ -46,8 +46,12 @@ function fileVerdict(file: string): string {
   try {
     const st = statSync(file)
     if (st.isDirectory()) return 'is a directory'
-    if ((st.mode & 0o111) === 0) return 'is not executable — chmod +x it'
-    head = readFileSync(file, 'latin1').slice(0, 256)
+    // Ask the kernel: an execute bit for the group or others does not
+    // make a file this user owns executable to this user (root aside).
+    if (!executable(file)) return 'is not executable — chmod +x it'
+    // The kernel reads the #! line as bytes, and a path's bytes are its
+    // UTF-8: a latin1 read named a present non-ASCII interpreter missing.
+    head = readFileSync(file).subarray(0, 256).toString('utf8')
   } catch (err) {
     return `could not be read (${(err as Error).message})`
   }
@@ -115,3 +119,12 @@ const SIGNAL_WHY: Record<string, string> = {
   SIGSYS: 'a system call was refused — a seccomp filter, or the sandbox',
   SIGQUIT: 'the process was sent a quit (Ctrl-\\, or a kill -QUIT); a core dump may be beside it',
 }
+
+function executable(file: string): boolean {
+  try {
+    accessSync(file, fsConstants.X_OK)
+    return true
+  } catch {
+    return false
+  }
+}