@vzn/vx 0.0.553 → 0.0.554

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vzn/vx",
-  "version": "0.0.553",
+  "version": "0.0.554",
   "description": "The fastest task runner and build cache for JavaScript monorepos.",
   "type": "module",
   "exports": {
@@ -21,10 +21,10 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@vzn/vx-linux-x64": "0.0.553",
-    "@vzn/vx-linux-arm64": "0.0.553",
-    "@vzn/vx-darwin-x64": "0.0.553",
-    "@vzn/vx-darwin-arm64": "0.0.553"
+    "@vzn/vx-linux-x64": "0.0.554",
+    "@vzn/vx-linux-arm64": "0.0.554",
+    "@vzn/vx-darwin-x64": "0.0.554",
+    "@vzn/vx-darwin-arm64": "0.0.554"
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.76"

package/src/cache/layer.ts

@@ -329,7 +329,8 @@ export interface PruneResult {
  * the full `workspace-outputs/<rel-to-root>` tar entry name as the
  * discriminator — least-invasive row format, no schema change. A
  * project output dir literally named `workspace-outputs/` would
- * collide with the namespace; the name is reserved.
+ * collide with the namespace; the name is reserved, and a project
+ * output glob under it is refused at load (config-schema.ts).
  */
 export const WORKSPACE_OUTPUT_PREFIX = 'workspace-outputs/'
 

package/src/workspace/config-schema.ts

@@ -650,6 +650,15 @@ export function validateProjectConfig(config: ProjectConfig, configPath: string)
               `name the directory the task writes, such as "dist/**"`,
           )
         }
+        // An artifact stores workspace outputs under `workspace-outputs/`,
+        // and its index read a project output there as one: every hit was
+        // a "corrupt artifact", dropped and run again.
+        if (!g.startsWith('!') && normalizeGlob(g).split('/')[0] === 'workspace-outputs') {
+          throw new UserError(
+            `${where}.cache.outputs.files: "${g}" is under workspace-outputs/, a name vx's ` +
+              `artifacts reserve for outputs.workspaceFiles — write the task's files to another directory`,
+          )
+        }
         // A `!` entry takes a path back from the outputs (A-44): it is not
         // cleaned, saved or restored, and it stays an input.
         assertNotDoubleNegated(g, `${where}.cache.outputs.files`)