@vzn/vx 0.0.465 → 0.0.467

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.465",
+  "version": "0.0.467",
   "description": "The fastest task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.465",
-    "@vzn/vx-linux-arm64": "0.0.465",
-    "@vzn/vx-darwin-x64": "0.0.465",
-    "@vzn/vx-darwin-arm64": "0.0.465"
+    "@vzn/vx-linux-x64": "0.0.467",
+    "@vzn/vx-linux-arm64": "0.0.467",
+    "@vzn/vx-darwin-x64": "0.0.467",
+    "@vzn/vx-darwin-arm64": "0.0.467"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cli/last.ts

@@ -208,6 +208,10 @@ export async function lastCmd(args: readonly string[]): Promise<number> {
   noteSchemaReset(cache, warnToStderr)
   try {
     const db = cache.dbHandle()
+    // Nothing recorded at all is its own answer: `--failed` said "no
+    // recorded run failed" and a run id pointed at a `--list` that lists
+    // nothing, while `--list --failed` past green runs said there were none.
+    const noRuns = (): boolean => listInvocations(db, { limit: 1 }).length === 0
 
     if (parsed.list !== undefined) {
       const invocations =
@@ -219,7 +223,9 @@ export async function lastCmd(args: readonly string[]): Promise<number> {
         return 0
       }
       if (invocations.length === 0) {
-        process.stdout.write('no recorded runs\n')
+        process.stdout.write(
+          parsed.failed === true && !noRuns() ? 'no recorded run failed\n' : 'no recorded runs\n',
+        )
         return 0
       }
       for (const inv of invocations) {
@@ -241,11 +247,13 @@ export async function lastCmd(args: readonly string[]): Promise<number> {
           : (listInvocations(db, { limit: 1 })[0] ?? null)
     if (inv === null || inv === undefined) {
       throw new UserError(
-        parsed.runId !== undefined
-          ? `vx last: no recorded run ${parsed.runId} (vx last --list shows recent runs)`
-          : parsed.failed === true
-            ? 'vx last: no recorded run failed'
-            : 'vx last: no recorded runs yet — run something first',
+        noRuns()
+          ? 'vx last: no recorded runs yet — run something first'
+          : parsed.runId !== undefined
+            ? `vx last: no recorded run ${parsed.runId} (vx last --list shows recent runs)`
+            : parsed.failed === true
+              ? 'vx last: no recorded run failed'
+              : 'vx last: no recorded runs yet — run something first',
       )
     }
     const detail = getRun(db, inv.runId)

package/src/orchestrator/doctor.ts

@@ -114,8 +114,34 @@ export interface CollectInfoOptions {
 export async function collectInfo(cwd: string, opts: CollectInfoOptions = {}): Promise<InfoFacts> {
   const warn = opts.warn ?? warnToStderr
   const reads: LoadReads = new Map()
+  // Both first: outside a workspace, or under a workspace config that does
+  // not load, the doctor refuses at once, with no probe (~180 ms) ahead.
   const root = await findWorkspaceRoot(cwd, reads)
-  const { workspaceConfig, plugins } = await loadWorkspacePlugins(root, warn)
+  const workspace = await loadWorkspacePlugins(root, warn)
+  // The sandbox probe asks nothing of the workspace, so it runs under the
+  // loads below instead of after them. Awaited on every path: it resets
+  // the runtime it brought up, whose sockets would hold the process open.
+  const probing = sandboxProbe()
+  // Rejects only if the reset does; awaited below, never unhandled.
+  probing.catch(() => {})
+  try {
+    return await collectWorkspaceInfo(cwd, root, reads, workspace, opts, probing)
+  } catch (err) {
+    // The workspace's refusal is the error worth reporting.
+    await probing.catch(() => {})
+    throw err
+  }
+}
+
+async function collectWorkspaceInfo(
+  cwd: string,
+  root: string,
+  reads: LoadReads,
+  { workspaceConfig, plugins }: Awaited<ReturnType<typeof loadWorkspacePlugins>>,
+  opts: CollectInfoOptions,
+  probing: Promise<Omit<InfoFacts['sandbox'], 'declared'>>,
+): Promise<InfoFacts> {
+  const warn = opts.warn ?? warnToStderr
   const cacheDir =
     opts.cacheDir === undefined
       ? resolveCacheDir(root, workspaceConfig)
@@ -173,7 +199,10 @@ export async function collectInfo(cwd: string, opts: CollectInfoOptions = {}): P
   }
 
   const lockPresent = await Bun.file(lockfilePath(root)).exists()
-  const sandbox = await sandboxFact(sandboxed)
+  // Asked while the probe runs: each is a synchronous spawn.
+  const git = gitVersion()
+  const statusCache = gitStatusCache(root)
+  const sandbox = { ...(await probing), declared: sandboxed }
   return {
     vx: VERSION,
     // An unsupported Bun does not stop a run, it makes the run's ANSWERS
@@ -183,12 +212,12 @@ export async function collectInfo(cwd: string, opts: CollectInfoOptions = {}): P
     // have, which is a property 19 tests hold on purpose.
     bun: Bun.version,
     bunSupported: !isUnsupportedBun(Bun.version),
-    git: gitVersion(),
+    git,
     // The one `git status` walk per run is the warm path's critical path on
     // a large tree (~55 ms at 1000 projects, measured 2026-09-02). git's
     // own caches make it near-free after the first run, and they are OFF by
     // default — say so, since nothing else in a run would.
-    gitStatusCache: gitStatusCache(root),
+    gitStatusCache: statusCache,
     workspaceRoot: root,
     projects: metas.length,
     tasks: taskCount,
@@ -224,24 +253,19 @@ export async function collectInfo(cwd: string, opts: CollectInfoOptions = {}): P
 }
 
 /**
- * The runtime probe's verdict — one sandboxed `true` (memoized) — and the
- * count of loaded tasks that would meet it. The probe initializes the
- * Linux runtime, whose proxy sockets would keep a standalone process
- * alive; reset after asking, since the doctor runs nothing.
+ * The runtime probe's verdict — one sandboxed `true` (memoized). The probe
+ * initializes the Linux runtime, whose proxy sockets would keep a
+ * standalone process alive; reset after asking, since the doctor runs
+ * nothing.
  */
-async function sandboxFact(declared: number): Promise<InfoFacts['sandbox']> {
+async function sandboxProbe(): Promise<Omit<InfoFacts['sandbox'], 'declared'>> {
   try {
     const verdict = await probeSandbox()
     const untraced = verdict.available ? await untracedReason() : null
-    return {
-      available: verdict.available,
-      reason: stableSandboxReason(verdict.reason),
-      declared,
-      untraced,
-    }
+    return { available: verdict.available, reason: stableSandboxReason(verdict.reason), untraced }
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err)
-    return { available: false, reason: stableSandboxReason(message), declared, untraced: null }
+    return { available: false, reason: stableSandboxReason(message), untraced: null }
   } finally {
     await resetSandbox()
   }

package/src/workspace/affected.ts

@@ -151,7 +151,6 @@ export async function affectedProjects(args: AffectedArgs): Promise<Set<string>>
         `("${since.slice(0, range) || 'HEAD'}"); vx diffs it against the working tree.`,
     )
   }
-  await verifyRef(args.workspaceRoot, since)
   // Diff from the MERGE BASE of `since` and HEAD, not from `since` itself:
   // on a branch whose base has moved on, `git diff <base>` reports every
   // file OTHER people changed on the base (over-selection that defeats a
@@ -160,7 +159,9 @@ export async function affectedProjects(args: AffectedArgs): Promise<Set<string>>
   // when there is none (unrelated histories, a detached probe) the ref
   // itself is the base, as before. Turbo's two-dot range `A..HEAD` is the
   // one form that diffs from A itself.
-  const base = fromMergeBase ? await mergeBase(args.workspaceRoot, since) : since
+  const base = fromMergeBase
+    ? await mergeBase(args.workspaceRoot, since)
+    : (await verifyRef(args.workspaceRoot, since), since)
 
   const [diffed, untracked] = await Promise.all([
     // `--no-renames` is crucial for project-affected detection: with
@@ -693,7 +694,13 @@ const resolvedRefs = new Map<string, string>()
 /** A ref that names an ancestor of HEAD by its own spelling (`HEAD~1`, `HEAD^`). */
 const HEAD_ANCESTOR = /^HEAD(?:~\d*|\^\d*)+$/
 
-/** `git merge-base <ref> HEAD`, or `ref` itself when the two share no ancestor. */
+/**
+ * `git merge-base <ref> HEAD`, or `ref` itself when the two share no
+ * ancestor. A merge base proves the ref resolves, so `verifyRef`'s own
+ * spawn (synchronous, ~3.5 ms) runs only when there is none: to refuse a
+ * ref that does not resolve, or to pass one that does (exit 1, unrelated
+ * histories; a tree).
+ */
 async function mergeBase(workspaceRoot: string, ref: string): Promise<string> {
   // HEAD's own ancestor is its merge base with HEAD: the commit it names,
   // which the default base's search already resolved (`HEAD~1`).
@@ -702,7 +709,9 @@ async function mergeBase(workspaceRoot: string, ref: string): Promise<string> {
   const proc = spawnGit(['merge-base', '--end-of-options', ref, 'HEAD'], workspaceRoot)
   const [out, exit] = await Promise.all([new Response(proc.stdout).text(), proc.exited])
   const sha = out.trim()
-  return exit === 0 && sha.length > 0 ? sha : ref
+  if (exit === 0 && sha.length > 0) return sha
+  await verifyRef(workspaceRoot, ref)
+  return ref
 }
 
 async function verifyRef(workspaceRoot: string, ref: string): Promise<void> {