@vzn/vx 0.0.343 → 0.0.345

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.343",
+  "version": "0.0.345",
   "description": "A fast, correct task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.343",
-    "@vzn/vx-linux-arm64": "0.0.343",
-    "@vzn/vx-darwin-x64": "0.0.343",
-    "@vzn/vx-darwin-arm64": "0.0.343"
+    "@vzn/vx-linux-x64": "0.0.345",
+    "@vzn/vx-linux-arm64": "0.0.345",
+    "@vzn/vx-darwin-x64": "0.0.345",
+    "@vzn/vx-darwin-arm64": "0.0.345"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cli/select.ts

@@ -60,18 +60,20 @@ export async function workspaceGlobOwners(
     }
     return false
   }
-  // A frozen run with no lock is refused here, before the tolerant sweep
-  // below could answer "nothing affected" and exit 0 without ever reaching
-  // the run's own refusal.
-  if (load.frozen === true && (await readLockfile(root)) === null) {
-    throw new UserError(FROZEN_WITHOUT_LOCK)
-  }
   try {
     const staged = await stagedLoad()
     return [...staged.values()].filter((p) => declaresMatch(p.config)).map((p) => p.name)
   } catch {
     // Fall through to the per-file sweep.
   }
+  // A frozen run with no lock is refused here, before the tolerant sweep
+  // below could answer "nothing affected" and exit 0 without ever reaching
+  // the run's own refusal. Asked only once the staged load failed: a
+  // frozen load that succeeded read the lock, and a second read parsed it
+  // again (1,000 projects: a 1.1 MB lock, ~10 ms).
+  if (load.frozen === true && (await readLockfile(root)) === null) {
+    throw new UserError(FROZEN_WITHOUT_LOCK)
+  }
   const owners: string[] = []
   await Promise.all(
     projects.map(async (meta) => {

package/src/orchestrator/sandbox-request.ts

@@ -187,6 +187,15 @@ export async function sandboxRequestFor(
    */
   cacheDir?: string,
 ): Promise<SandboxRequest> {
+  // SRT reads a Linux path holding a bracket as a glob and drops it from
+  // the writes, so no grant here could be mounted (B-60).
+  const home = toRealPath(node.projectDir)
+  if (process.platform === 'linux' && /[[\]]/.test(home)) {
+    throw new UserError(
+      `exec.sandbox: ${home} holds a bracket ([ or ]), and the Linux sandbox mounts no path ` +
+        `that does — rename the directory, or run the task without exec.sandbox`,
+    )
+  }
   const depDirs = [
     path.join(node.projectDir, 'node_modules'),
     path.join(workspaceRoot, 'node_modules'),

package/src/workspace/fingerprint.ts

@@ -38,7 +38,7 @@ export const WORKSPACE_FINGERPRINT_FILES = [
   'bunfig.toml',
 ]
 
-// DELIBERATELY ABSENT: `vx.workspace.{ts,mts,js,mjs}`. Everything it can
+// DELIBERATELY ABSENT: `vx.workspace.{ts,mts,js,mjs,cts,cjs}`. Everything it can
 // declare — `concurrency`, `cacheDir`, `timeout`, and the
 // plugin list — is placement, storage or observability, never what a
 // command produces; core's three seams may change WHERE a task runs, not

package/src/workspace/project-loader.ts

@@ -23,6 +23,10 @@ export const WORKSPACE_CONFIG_FILENAMES = [
   'vx.workspace.mts',
   'vx.workspace.js',
   'vx.workspace.mjs',
+  // A CommonJS config (`module.exports = …`), as Vite and TS name theirs: it
+  // was ignored without a word (D-86).
+  'vx.workspace.cts',
+  'vx.workspace.cjs',
 ]
 
 /** Project configs already loaded in this process, by absolute path. */
@@ -660,7 +664,7 @@ async function refuseStaleWorkspaceImports(configPath: string, since: number): P
 }
 
 /**
- * Find and load `vx.workspace.{ts,mts,js,mjs}` from the workspace
+ * Find and load `vx.workspace.{ts,mts,js,mjs,cts,cjs}` from the workspace
  * root. Returns `null` if no such file exists (the common case;
  * the schema is fully optional). Validates the shape and throws
  * a `UserError` on malformed input.

package/src/workspace/workspace.ts

@@ -35,7 +35,7 @@ export interface ProjectMeta {
   /** Absolute path to the project directory. */
   dir: string
   packageJson: PackageJson
-  /** Absolute path to vx.config.{ts,mts,js,mjs} or null. */
+  /** Absolute path to vx.config.{ts,mts,js,mjs,cts,cjs} or null. */
   configPath: string | null
 }
 
@@ -51,6 +51,10 @@ export const PROJECT_CONFIG_FILENAMES = [
   'vx.config.mts',
   'vx.config.js',
   'vx.config.mjs',
+  // A CommonJS config (`module.exports = …`), as Vite and TS name theirs: it
+  // was ignored without a word (D-86).
+  'vx.config.cts',
+  'vx.config.cjs',
 ]
 
 const decoder = new TextDecoder()