@vzn/vx 0.0.151 → 0.0.153

package/README.md

@@ -143,28 +143,29 @@ keep your Turbo or Nx remote cache. [Parity map](packages/vx/docs/parity.md) ·
 
 ## Tried on real repos
 
-Eleven public monorepos, each run with its own `turbo.json` or Nx graph
+Twelve public monorepos, each run with its own `turbo.json` or Nx graph
 and nothing rewritten, against the tool it ships with. Same machine and
 tasks per row, medians; vx first, theirs second.
 
-| Repo                                                        | Against | Cold build            | Restore outputs | Nothing to do       |
-| ----------------------------------------------------------- | ------- | --------------------- | --------------- | ------------------- |
-| [solidjs/solid](https://github.com/solidjs/solid)           | Turbo   | 40.6 s / 45.5 s       | 66 ms / 127 ms  | 51 ms / 95 ms       |
-| [withastro/astro](https://github.com/withastro/astro)       | Turbo   | 48.0 s / 57.9 s       | 478 ms / 1.43 s | 249 ms / 1.38 s     |
-| [payloadcms/payload](https://github.com/payloadcms/payload) | Turbo   | 126.9 s / 127.5 s     | 3.44 s / 3.46 s | 256 ms / **237 ms** |
-| [medusajs/medusa](https://github.com/medusajs/medusa)       | Turbo   | 308 s / 315 s         | 3.86 s / 7.16 s | 947 ms / 3.29 s     |
-| [n8n-io/n8n](https://github.com/n8n-io/n8n)                 | Turbo   | 137.2 s / **133.7 s** | 8.27 s / 12.5 s | 842 ms / 1.36 s     |
-| [calcom/cal.com](https://github.com/calcom/cal.com)         | Turbo   | 245.7 s / 250.7 s     | 17.4 s / 19.9 s | 14.7 s / 18.5 s     |
-| [TanStack/query](https://github.com/TanStack/query)         | Nx      | 34.6 s / 37.1 s       | 910 ms / 1.62 s | 291 ms / 1.60 s     |
-| [strapi/strapi](https://github.com/strapi/strapi)           | Nx      | 238.2 s / 245.7 s     | 1.61 s / 3.94 s | 341 ms / 4.02 s     |
-| [novuhq/novu](https://github.com/novuhq/novu)               | Nx      | 291.2 s / 299.4 s     | 3.10 s / 9.05 s | 655 ms / 8.55 s     |
-| [TanStack/router](https://github.com/TanStack/router)       | Nx      | 123.0 s / 138.0 s     | 1.27 s / 3.82 s | 626 ms / 3.91 s     |
-| [refinedev/refine](https://github.com/refinedev/refine)     | Nx      | 96.2 s / 105.9 s      | 1.06 s / 1.19 s | 303 ms / 1.16 s     |
+| Repo                                                        | Against | Cold build            | Restore outputs     | Nothing to do       |
+| ----------------------------------------------------------- | ------- | --------------------- | ------------------- | ------------------- |
+| [solidjs/solid](https://github.com/solidjs/solid)           | Turbo   | 40.6 s / 45.5 s       | 66 ms / 127 ms      | 51 ms / 95 ms       |
+| [withastro/astro](https://github.com/withastro/astro)       | Turbo   | 48.0 s / 57.9 s       | 478 ms / 1.43 s     | 249 ms / 1.38 s     |
+| [payloadcms/payload](https://github.com/payloadcms/payload) | Turbo   | 126.9 s / 127.5 s     | 3.44 s / 3.46 s     | 256 ms / **237 ms** |
+| [medusajs/medusa](https://github.com/medusajs/medusa)       | Turbo   | 308 s / 315 s         | 3.86 s / 7.16 s     | 947 ms / 3.29 s     |
+| [n8n-io/n8n](https://github.com/n8n-io/n8n)                 | Turbo   | 137.2 s / **133.7 s** | 8.27 s / 12.5 s     | 842 ms / 1.36 s     |
+| [calcom/cal.com](https://github.com/calcom/cal.com)         | Turbo   | 245.7 s / 250.7 s     | 17.4 s / 19.9 s     | 14.7 s / 18.5 s     |
+| [unocss/unocss](https://github.com/unocss/unocss)           | Turbo   | 45.1 s / 47.3 s       | 859 ms / **185 ms** | 770 ms / **126 ms** |
+| [TanStack/query](https://github.com/TanStack/query)         | Nx      | 34.6 s / 37.1 s       | 910 ms / 1.62 s     | 291 ms / 1.60 s     |
+| [strapi/strapi](https://github.com/strapi/strapi)           | Nx      | 238.2 s / 245.7 s     | 1.61 s / 3.94 s     | 341 ms / 4.02 s     |
+| [novuhq/novu](https://github.com/novuhq/novu)               | Nx      | 291.2 s / 299.4 s     | 3.10 s / 9.05 s     | 655 ms / 8.55 s     |
+| [TanStack/router](https://github.com/TanStack/router)       | Nx      | 123.0 s / 138.0 s     | 1.27 s / 3.82 s     | 626 ms / 3.91 s     |
+| [refinedev/refine](https://github.com/refinedev/refine)     | Nx      | 96.2 s / 105.9 s      | 1.06 s / 1.19 s     | 303 ms / 1.16 s     |
 
 **Bold** marks the other tool winning. Versions, revisions, scopes and
 harness per repo: [benchmarks](packages/vx/docs/benchmarks.md) (astro
-and refine as re-measured on 2026-09-27, TanStack/query and
-TanStack/router through `nx()` on 2026-09-28, the rest 2026-09-10 and -11).
+and refine as re-measured on 2026-09-27, TanStack/query,
+TanStack/router and unocss through their plugin on 2026-09-28, the rest 2026-09-10 and -11).
 
 ## How it compares
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.151",
+  "version": "0.0.153",
   "description": "A fast, correct task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -17,10 +17,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.151",
-    "@vzn/vx-linux-arm64": "0.0.151",
-    "@vzn/vx-darwin-x64": "0.0.151",
-    "@vzn/vx-darwin-arm64": "0.0.151"
+    "@vzn/vx-linux-x64": "0.0.153",
+    "@vzn/vx-linux-arm64": "0.0.153",
+    "@vzn/vx-darwin-x64": "0.0.153",
+    "@vzn/vx-darwin-arm64": "0.0.153"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cache/file-hashes.ts

@@ -11,6 +11,7 @@ import { lstatSync, readlinkSync } from 'node:fs'
 import path from 'node:path'
 import { fileIdentity, repoFacts } from './git-inputs.js'
 import { FILE_HASH_RACY_MS, isIndexFull, racyWindowMs } from './layer.js'
+import { isPermissionError, UserError } from '../util/index.js'
 
 const FILE_HASHES_SWEPT_AT = 'file_hashes_swept_at'
 const DAY_MS = 24 * 60 * 60 * 1000
@@ -301,7 +302,19 @@ export class FileHashStore {
    * spawn per file.
    */
   private async hashFileFromDisk(filePath: string): Promise<string> {
-    return this.hashBytes(await Bun.file(filePath).bytes(), filePath)
+    let bytes: Uint8Array
+    try {
+      bytes = await Bun.file(filePath).bytes()
+    } catch (err) {
+      // Left raw, the scheduler added the write hint to an input vx only
+      // reads: "a path vx must write is not writable by this user".
+      if (!isPermissionError(err)) throw err
+      throw new UserError(
+        `${filePath} is not readable by this user (${err.code}), and vx reads it to derive a ` +
+          'cache key. Make it readable, or, for a task input, take it out of cache.inputs.files.',
+      )
+    }
+    return this.hashBytes(bytes, filePath)
   }
 
   /**

package/src/index.ts

@@ -31,6 +31,10 @@ export { machineMemoryBytes, machineParallelism } from './util/index.js'
 // wildcards (`[` `]` are not; item 667) — for a plugin that turns declared
 // outputs into something else (`@vzn/vx-reapi`'s literal `output_paths`).
 export { isLiteralPattern, normalizeGlob } from './util/index.js'
+// A task's command as vx prints it: values of its `exec.env.secret` names
+// masked. `vx show` and telemetry show this; a plugin that hands a command
+// to someone else (`@vzn/vx-mcp`'s `listTasks`, an AI agent) does too (L-26).
+export { maskedCommand } from './util/index.js'
 
 // Schema types and helpers (used by user vx.config files and presets).
 export type {