@vzn/vx 0.0.552 → 0.0.554

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.552",
+  "version": "0.0.554",
   "description": "The fastest task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.552",
-    "@vzn/vx-linux-arm64": "0.0.552",
-    "@vzn/vx-darwin-x64": "0.0.552",
-    "@vzn/vx-darwin-arm64": "0.0.552"
+    "@vzn/vx-linux-x64": "0.0.554",
+    "@vzn/vx-linux-arm64": "0.0.554",
+    "@vzn/vx-darwin-x64": "0.0.554",
+    "@vzn/vx-darwin-arm64": "0.0.554"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cache/layer.ts

@@ -329,7 +329,8 @@ export interface PruneResult {
  * the full `workspace-outputs/<rel-to-root>` tar entry name as the
  * discriminator — least-invasive row format, no schema change. A
  * project output dir literally named `workspace-outputs/` would
- * collide with the namespace; the name is reserved.
+ * collide with the namespace; the name is reserved, and a project
+ * output glob under it is refused at load (config-schema.ts).
  */
 export const WORKSPACE_OUTPUT_PREFIX = 'workspace-outputs/'
 

package/src/cli/last.ts

@@ -34,6 +34,12 @@ interface LastArgs {
   error?: string
 }
 
+/**
+ * A run id as typed beside `--list`: a UUIDv7's first group (8 hex digits)
+ * at least, whole or cut as `--list` prints it.
+ */
+const RUN_ID_SHAPE = /^[0-9a-f]{8}(?:-|$)/i
+
 export function parseLastArgs(args: readonly string[]): LastArgs {
   const out: LastArgs = { format: 'pretty' }
   for (let i = 0; i < args.length; i++) {
@@ -41,10 +47,15 @@ export function parseLastArgs(args: readonly string[]): LastArgs {
     if (a === '--list' || a.startsWith('--list=')) {
       // `--list 5` is the count, like every other value flag's space form:
       // it read as a run id, which `--list` then ignored, and ten runs came
-      // back (item 899). A run id is never a bare integer, so the next
-      // argument is taken only when it is one.
+      // back (item 899). The next argument is the count unless it is a flag
+      // or has a run id's shape: `1.5`, `-3` and `abc` read as run ids and
+      // were told a run id does not combine with --list (X-29).
       const next = args[i + 1]
-      const spaced = a === '--list' && next !== undefined && /^\d+$/.test(next)
+      const spaced =
+        a === '--list' &&
+        next !== undefined &&
+        (/^\d+$/.test(next) ||
+          (!RUN_ID_SHAPE.test(next) && (!next.startsWith('-') || /^-\d/.test(next))))
       const lv = a === '--list' ? (spaced ? next : '10') : a.slice(7)
       if (spaced) i++
       const n = Number(lv)
@@ -86,6 +97,10 @@ export function parseLastArgs(args: readonly string[]): LastArgs {
     out.runId = a
   }
   // One run's replay or a list of runs, not both: the id was dropped.
+  // Beside --list, a word no run id could be is just an extra one.
+  if (out.runId !== undefined && out.list !== undefined && !RUN_ID_SHAPE.test(out.runId)) {
+    return { ...out, error: `unexpected argument: ${out.runId}${seeHelp('last')}` }
+  }
   if (out.runId !== undefined && out.list !== undefined) {
     return {
       ...out,

package/src/workspace/config-schema.ts

@@ -650,6 +650,15 @@ export function validateProjectConfig(config: ProjectConfig, configPath: string)
               `name the directory the task writes, such as "dist/**"`,
           )
         }
+        // An artifact stores workspace outputs under `workspace-outputs/`,
+        // and its index read a project output there as one: every hit was
+        // a "corrupt artifact", dropped and run again.
+        if (!g.startsWith('!') && normalizeGlob(g).split('/')[0] === 'workspace-outputs') {
+          throw new UserError(
+            `${where}.cache.outputs.files: "${g}" is under workspace-outputs/, a name vx's ` +
+              `artifacts reserve for outputs.workspaceFiles — write the task's files to another directory`,
+          )
+        }
         // A `!` entry takes a path back from the outputs (A-44): it is not
         // cleaned, saved or restored, and it stays an input.
         assertNotDoubleNegated(g, `${where}.cache.outputs.files`)