@vzn/vx 0.0.413 → 0.0.415

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.413",
+  "version": "0.0.415",
   "description": "The fastest task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.413",
-    "@vzn/vx-linux-arm64": "0.0.413",
-    "@vzn/vx-darwin-x64": "0.0.413",
-    "@vzn/vx-darwin-arm64": "0.0.413"
+    "@vzn/vx-linux-x64": "0.0.415",
+    "@vzn/vx-linux-arm64": "0.0.415",
+    "@vzn/vx-darwin-x64": "0.0.415",
+    "@vzn/vx-darwin-arm64": "0.0.415"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cli/select.ts

@@ -3,7 +3,6 @@
 // cwd sits in, and the interactive picker. Every read of the workspace
 // here goes through the staged load, so the answer is the run's.
 
-import readline from 'node:readline/promises'
 import path from 'node:path'
 import fs from 'node:fs'
 import {
@@ -404,6 +403,9 @@ export async function pickTask(
     const desc = e.description ? `  ${e.description}` : ''
     out.write(`  ${n}. ${id}${desc}\n`)
   })
+  // Imported here, the picker's one use: a run that never asks paid ~0.7 ms
+  // for it at every start, past the stdout stream it shares code with.
+  const readline = await import('node:readline/promises')
   const rl = readline.createInterface({
     input: io.input ?? process.stdin,
     output: io.output ?? process.stdout,

package/src/exec/sandbox-violations.ts

@@ -682,6 +682,11 @@ export function refusedWrites(
     if (/^\/(?:dev|proc)\//.test(raw)) continue
     const abs = toRealPath(raw)
     if (isUnderAny(abs, binds) || underGlob(abs, globs)) continue
+    // A directory a write bind lies in exists, since bwrap made it to mount
+    // the bind: `mkdir -p node_modules/.cache/tool` under a grant of
+    // `node_modules/.cache/` met EEXIST on `node_modules`, wrote nothing,
+    // and the attempt failed a clean task (2026-10-03).
+    if (syscall.startsWith('mkdir') && [...binds].some((b) => atOrUnder(b, abs))) continue
     const key = `${syscall}|${abs}`
     if (seen.has(key)) continue
     seen.add(key)

package/src/workspace/migrate-scripts.ts

@@ -661,12 +661,15 @@ export function migrateScripts(
   // the task, so `--all` never runs one check twice.
   const outsideName =
     typeof outside?.['name'] === 'string' && outside['name'] !== '' ? outside['name'] : undefined
+  // insomnia's root is named as its `packages/insomnia`: a root config made
+  // it a project, and every later run was refused for the duplicate (D-129).
+  const clash = outsideName === undefined ? undefined : metas.find((m) => m.name === outsideName)
   const rootMeta: ProjectMeta | undefined =
     root !== undefined
       ? root.configPath === null
         ? root
         : undefined
-      : outsideName !== undefined && outsideDir !== undefined
+      : outsideName !== undefined && outsideDir !== undefined && clash === undefined
         ? { name: outsideName, dir: outsideDir, packageJson: outside as never, configPath: null }
         : undefined
   const memberTasks = new Set(
@@ -774,6 +777,11 @@ export function migrateScripts(
           ? `; left out as a member's task name, so \`--all\` never runs one twice: ${listed(shared)} — one that does other work maps by hand under a name of its own`
           : ''),
     )
+  } else if (clash !== undefined && outsideDir !== undefined && unnamedMaps().length > 0) {
+    const would = unnamedMaps()
+    notes.push(
+      `${clash.name} (the workspace root) not mapped: ${path.relative(outsideDir, clash.dir).split(path.sep).join('/')} has the same "name", and vx names a project by it; rename the root's and run \`vx init\` again to map ${would.length} of its scripts (${would.slice(0, 8).join(', ')}${would.length > 8 ? ', …' : ''})`,
+    )
   } else if (rootName === 'package.json' && outsideDir !== undefined && unnamedMaps().length > 0) {
     // react's nameless root: "its scripts run the workspace" was not why,
     // and 30 of its scripts (`build`, `lint`, `test`) map once it has a