@vzn/vx 0.0.18 → 0.0.21

package/src/workspace/workspace.ts

@@ -1,7 +1,8 @@
+import type { Dirent } from 'node:fs'
 import { readdir, stat } from 'node:fs/promises'
 import path from 'node:path'
 import type { ProjectConfig, WorkspaceConfig } from '../config.js'
-import { relPosix, UserError } from '../util/index.js'
+import { relPosix, UserError, normalizeGlob } from '../util/index.js'
 
 export interface PackageJson {
   name: string
@@ -89,8 +90,9 @@ export async function findWorkspaceRoot(start: string): Promise<string> {
 /** True when one of `below` (dirs under `root`, toward `start`) is a member. */
 function claimsMember(root: string, below: readonly string[], globs: readonly string[]): boolean {
   if (below.length === 0 || globs.length === 0) return false
-  const rels = below.map((d) => relPosix(root, d))
-  for (const pattern of globs) {
+  const { positive, negative } = splitPackageGlobs(globs)
+  const rels = below.map((d) => relPosix(root, d)).filter((rel) => !excludedBy(rel, negative))
+  for (const pattern of positive) {
     const normalized = pattern.replace(/\/+$/, '')
     // `.` means the root itself is the project — never a directory below it.
     if (normalized === '' || normalized === '.') continue
@@ -100,6 +102,37 @@ function claimsMember(root: string, below: readonly string[], globs: readonly st
   return false
 }
 
+/**
+ * pnpm, npm, yarn and Bun all take `!packages/fixtures` in the package
+ * list. Handed to `Bun.Glob` raw, a leading `!` negates the WHOLE pattern,
+ * so `!packages/fixtures/package.json` matched every manifest in the tree
+ * and every directory holding one became a project — the excluded package
+ * ran under `--all`, and a fixture repeating a name killed the run with
+ * "Duplicate package name". Negations subtract from what the positive
+ * globs found; a literal one excludes its tree.
+ */
+function splitPackageGlobs(globs: readonly string[]): { positive: string[]; negative: string[] } {
+  const positive: string[] = []
+  const negative: string[] = []
+  // `!./packages/legacy` and `!packages//legacy` excluded nothing, silently
+  // (2026-09-10): the same spellings the input globs normalize.
+  for (const raw of globs) {
+    const g = normalizeGlob(raw)
+    if (g.startsWith('!')) negative.push(g.slice(1).replace(/\/+$/, ''))
+    else positive.push(g)
+  }
+  return { positive, negative }
+}
+
+function excludedBy(rel: string, negative: readonly string[]): boolean {
+  for (const neg of negative) {
+    if (neg.length === 0) continue
+    if (rel === neg || rel.startsWith(`${neg}/`)) return true
+    if (/[*?[\]{}]/.test(neg) && new Bun.Glob(neg).match(rel)) return true
+  }
+  return false
+}
+
 /**
  * Package globs declared by `dir`, or `null` when `dir` is not a root
  * candidate. A bare `package.json` (no `workspaces`) is single-project mode:
@@ -188,6 +221,23 @@ export async function loadWorkspace(root: string): Promise<Workspace> {
 // path.
 const SIMPLE_STAR_RE = /^[^*?{}[\]!]+\/\*$/
 
+/**
+ * The directory each `<dir>/*` package glob names — where a member comes
+ * and goes as one directory entry, so `vx watch` can hear a package added
+ * or removed without walking anything. A glob of another shape (`apps/**`)
+ * has no such directory and contributes none.
+ */
+export function memberBaseDirs(workspace: Workspace): string[] {
+  const bases = new Set<string>()
+  for (const pattern of splitPackageGlobs(workspace.packageGlobs).positive) {
+    const normalized = pattern === '.' ? '' : pattern.replace(/\/$/, '')
+    if (SIMPLE_STAR_RE.test(normalized)) {
+      bases.add(path.resolve(workspace.root, normalized.slice(0, -2)))
+    }
+  }
+  return [...bases]
+}
+
 /**
  * The directories a workspace glob names. For the `<dir>/*` shape this is
  * one readdir of `<dir>` — the same answer `Bun.Glob` gives, at a third of
@@ -237,31 +287,66 @@ async function memberDirs(root: string, pattern: string): Promise<string[]> {
 
 /**
  * The project's config file, by `CONFIG_FILENAMES` precedence, or null.
- * Stats the candidates in order rather than listing the directory: across
- * 1000 projects a readdir each cost 9.6 ms against 6.3 ms of stats even
- * with the config at the LAST name (measured 2026-09-03), and a `.ts`
- * config — the first name — pays one stat.
+ *
+ * Two shapes, one per platform, each the measured winner there across
+ * 1,000 projects with the manifest read in flight alongside:
+ *   - macOS stats the candidates in order: a readdir each cost 9.6 ms
+ *     against 6.3 ms of stats even with the config at the LAST name
+ *     (2026-09-03), and a `.ts` config — the first name — pays one stat.
+ *   - Linux lists the directory once: a readdir each is 12 ms against
+ *     43 ms of stats at the last name and ties the one-stat case
+ *     (2026-09-09, a `vx.config.mjs` workspace; stats there cost a
+ *     thread-pool round trip apiece).
+ * Both answer identically: a directory or dangling link under a config
+ * name is skipped for the next name, a symlink to a file counts.
  */
 async function findConfigFile(dir: string): Promise<string | null> {
-  for (const name of CONFIG_FILENAMES) {
-    const candidate = path.join(dir, name)
+  if (process.platform === 'linux') {
+    let entries: Dirent[]
     try {
-      if ((await stat(candidate)).isFile()) return candidate
+      entries = await readdir(dir, { withFileTypes: true })
     } catch {
-      // not this name
+      return null
     }
+    const byName = new Map(entries.map((e) => [e.name, e]))
+    for (const name of CONFIG_FILENAMES) {
+      const entry = byName.get(name)
+      if (entry === undefined) continue
+      const candidate = path.join(dir, name)
+      if (entry.isFile()) return candidate
+      if (entry.isSymbolicLink() && (await isFile(candidate))) return candidate
+    }
+    return null
+  }
+  for (const name of CONFIG_FILENAMES) {
+    const candidate = path.join(dir, name)
+    if (await isFile(candidate)) return candidate
   }
   return null
 }
 
+async function isFile(p: string): Promise<boolean> {
+  try {
+    return (await stat(p)).isFile()
+  } catch {
+    return false
+  }
+}
+
 export async function listProjects(workspace: Workspace): Promise<ProjectMeta[]> {
   // Run all package globs concurrently. Disk-bound walks parallelize
   // well; serializing them just stretches the discovery phase by N×.
+  const { positive, negative } = splitPackageGlobs(workspace.packageGlobs)
   const perPattern = await Promise.all(
-    workspace.packageGlobs.map((pattern) => memberDirs(workspace.root, pattern)),
+    positive.map((pattern) => memberDirs(workspace.root, pattern)),
   )
   const matches = new Set<string>()
-  for (const arr of perPattern) for (const m of arr) matches.add(m)
+  for (const arr of perPattern) {
+    for (const m of arr) {
+      if (negative.length > 0 && excludedBy(relPosix(workspace.root, m), negative)) continue
+      matches.add(m)
+    }
+  }
 
   // Per-project discovery: the manifest read answers "is there a
   // package.json" (an ENOENT is the "not a member" answer, at the cost of

package/plugins/local-cache/index.ts

@@ -1,2 +0,0 @@
-// Subpath shim for Bun's compiled binaries — see ../../index.ts.
-export * from '../../src/plugins/local-cache/index.js'

package/plugins/local-executor/index.ts

@@ -1,2 +0,0 @@
-// Subpath shim for Bun's compiled binaries — see ../../index.ts.
-export * from '../../src/plugins/local-executor/index.js'

package/plugins/schedule-history/index.ts

@@ -1,2 +0,0 @@
-// Subpath shim for Bun's compiled binaries — see ../../index.ts.
-export * from '../../src/plugins/schedule-history/index.js'

package/src/cache/cas-backend.ts

@@ -1,115 +0,0 @@
-// CASBackend — pluggable content-addressed storage beneath the cache.
-//
-// Today's Cache + LayeredCache both bundle "where do the bytes live"
-// with "how do we look up entries metadata + key derivation."
-// CASBackend separates the former so a future R2/S3 backend
-// or REAPI CAS bridge can drop in without touching the
-// orchestrator or the SQL entries index.
-//
-// Two reference implementations in this file:
-//   - MemoryCASBackend — testing + in-memory builds. Holds raw bytes.
-//   - FsCASBackend     — writes bytes to a directory; mirrors what
-//                        Cache.save does today. Bun-native using Bun.file
-//                        for the read path so big artifacts stream
-//                        without slurping into memory.
-//
-// Cache.ts has NOT yet been rewired to use a CASBackend — that's a
-// follow-up (Phase 1b). This file ships the abstraction + the two
-// reference impls so downstream work (R2, otel-bridge, distributed-ci)
-// can rely on the type. Byte-identical behaviour today.
-
-import { mkdir, rename, rm } from 'node:fs/promises'
-import path from 'node:path'
-import type { Digest } from './digest.js'
-
-/** Per-process counter for put() temp names; uniqueness only. */
-let casTmpSeq = 0
-
-export interface CASBackend {
-  /** Write bytes under `digest`. Idempotent — putting the same digest twice is a no-op. */
-  put(digest: Digest, bytes: Uint8Array): Promise<void>
-  /** Read bytes under `digest`, or null if absent. */
-  get(digest: Digest): Promise<Uint8Array | null>
-  /** Cheap existence probe — no bytes round-tripped if possible. */
-  has(digest: Digest): Promise<boolean>
-  /** Drop one entry (eviction). No-op if absent. */
-  remove(digest: Digest): Promise<void>
-}
-
-/** In-memory backend, useful for tests and ephemeral runs. */
-export class MemoryCASBackend implements CASBackend {
-  private readonly store = new Map<string, Uint8Array>()
-
-  async put(digest: Digest, bytes: Uint8Array): Promise<void> {
-    if (bytes.byteLength !== digest.sizeBytes) {
-      throw new Error(
-        `MemoryCASBackend.put: sizeBytes mismatch (digest=${digest.sizeBytes}, actual=${bytes.byteLength})`,
-      )
-    }
-    this.store.set(digest.hash, bytes)
-  }
-
-  async get(digest: Digest): Promise<Uint8Array | null> {
-    return this.store.get(digest.hash) ?? null
-  }
-
-  async has(digest: Digest): Promise<boolean> {
-    return this.store.has(digest.hash)
-  }
-
-  async remove(digest: Digest): Promise<void> {
-    this.store.delete(digest.hash)
-  }
-
-  /** Test-only: how many entries are held. */
-  size(): number {
-    return this.store.size
-  }
-}
-
-/** Filesystem-backed backend writing `<rootDir>/<hash>.tar.zst` files. */
-export class FsCASBackend implements CASBackend {
-  constructor(private readonly rootDir: string) {}
-
-  private pathFor(digest: Digest): string {
-    return path.join(this.rootDir, `${digest.hash}.tar.zst`)
-  }
-
-  async put(digest: Digest, bytes: Uint8Array): Promise<void> {
-    if (bytes.byteLength !== digest.sizeBytes) {
-      throw new Error(
-        `FsCASBackend.put: sizeBytes mismatch (digest=${digest.sizeBytes}, actual=${bytes.byteLength})`,
-      )
-    }
-    // Temp + rename, the same shape `Cache.writeArtifactAndIndex` and the
-    // archive extractor use: two writers of the SAME content-addressed
-    // blob are expected (that is what content-addressing invites), and a
-    // plain write lets a reader observe a half-written file under a name
-    // that promises complete bytes. rename(2) is atomic, so a concurrent
-    // reader sees either the old file or the whole new one.
-    const final = this.pathFor(digest)
-    const tmp = `${final}.tmp-${process.pid.toString(36)}-${(casTmpSeq++).toString(36)}`
-    await mkdir(this.rootDir, { recursive: true })
-    try {
-      await Bun.write(tmp, bytes)
-      await rename(tmp, final)
-    } catch (err) {
-      await rm(tmp, { force: true })
-      throw err
-    }
-  }
-
-  async get(digest: Digest): Promise<Uint8Array | null> {
-    const file = Bun.file(this.pathFor(digest))
-    if (!(await file.exists())) return null
-    return new Uint8Array(await file.arrayBuffer())
-  }
-
-  async has(digest: Digest): Promise<boolean> {
-    return Bun.file(this.pathFor(digest)).exists()
-  }
-
-  async remove(digest: Digest): Promise<void> {
-    await rm(this.pathFor(digest), { force: true })
-  }
-}

package/src/cache/digest.ts

@@ -1,32 +0,0 @@
-// Digest — the explicit content-address used by every cache layer.
-//
-// Lifted as a first-class type (architecture-review-2026-06.md §4.3)
-// so storage backends become pluggable beneath CacheLayer: local FS,
-// R2, S3, or a future REAPI CAS bridge all speak (hash, sizeBytes).
-//
-// Two practical wins from making this explicit:
-//   1. sizeBytes is the truncation check at transport boundaries (HTTP
-//      Content-Length, R2 ETag-by-size). Free correctness, free corrupt-
-//      artifact-early-fail.
-//   2. CASBackend.has(digest) can answer with just the metadata, no
-//      bytes round-trip — what existence probes want.
-//
-// Why sizeBytes is `number` and not `bigint`: Bun.file().size returns
-// number; JS Number safely represents integers to 2^53-1 (~9 PB); no
-// real cache artifact gets there. Bigint would create the same
-// JSON.stringify-throws nuisance we already navigated for ns timestamps.
-
-export interface Digest {
-  readonly hash: string
-  readonly sizeBytes: number
-}
-
-export function makeDigest(hash: string, sizeBytes: number): Digest {
-  if (!/^[0-9a-f]+$/i.test(hash)) {
-    throw new Error(`invalid digest hash: ${JSON.stringify(hash)}`)
-  }
-  if (!Number.isInteger(sizeBytes) || sizeBytes < 0) {
-    throw new Error(`invalid digest sizeBytes: ${sizeBytes}`)
-  }
-  return { hash, sizeBytes }
-}

package/src/cli/migrate-emit.ts

@@ -1,21 +0,0 @@
-// Shared TS-literal emission helper for the migrate mappers. Lives in its own
-// leaf module so both migrate.ts (the config emitter) and migrate-turbo.ts (the
-// preset renderer) can escape strings identically without a dependency cycle
-// (migrate.ts already imports the turbo/nx mappers, so a back-import of a value
-// from migrate.ts would close a runtime cycle).
-
-/**
- * Escape an arbitrary string into a single-quoted TS literal. Escapes
- * backslash + quote AND raw newlines/CR — a value with an embedded newline
- * (legal JSON, e.g. a script `"echo a\necho b"`, or a glob with a `'`) would
- * otherwise splice into a single-quoted literal as an unterminated / malformed
- * string that fails to load (generated files must round-trip through the
- * loader).
- */
-export function quote(s: string): string {
-  return `'${s
-    .replaceAll('\\', '\\\\')
-    .replaceAll("'", "\\'")
-    .replaceAll('\n', '\\n')
-    .replaceAll('\r', '\\r')}'`
-}