Marius CiepluchandClaude Opus 4.8 c30dd9126a search-with-proof: reproducible npm builds for old lockless projects (--before commit date) ...

A lockless npm project (e.g. glance, 2015) resolved an unpinned transitive range to the
latest major ([email protected] -> mime@4, which dropped .lookup()), so the built app crashed
serving files -- a build-reproducibility defect, not an app or agent fault. The executor
now, for the npm-install (no-lock) case only and only when .git is present, resolves
dependencies as of the checkout's HEAD commit date via `npm install --before <date>`,
giving era-appropriate, compatible versions. npm ci (lockfile present) is untouched, and
any git/date failure falls back to plain install. demo.py also recognizes
npm-shrinkwrap.json as a lock for the ci-vs-install choice.

Tests: executor + smoke 75 passed, demo 107 passed; ruff clean; mypy clean on executor.py.
Executor-side change -> image rebuild required.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-10-07 13:37:23 +02:00

..

probe_apps

search-with-proof: declarative demos, brain/executor split, kube-ax constraints

2026-10-05 17:12:46 +02:00

__init__.py

search-with-proof group 2: verifier with owned oracles and differential

2026-10-05 14:09:48 +02:00

_sandbox.py

search-with-proof: one interpreter for pip and apps; checkout root on sys.path; real node_modules path

2026-10-06 14:37:58 +02:00

board.py

search-with-proof: startup environment and data files, dead-end dedupe, task_spend continues

2026-10-06 00:24:26 +02:00

budget.py

search-with-proof: readiness from the budget with a probe, 4096-token tool turns, 40-step tasks

2026-10-06 09:37:47 +02:00

coordinator.py

search-with-proof: feed the control signal back to the agent (served-root hint)

2026-10-07 12:03:45 +02:00

demo.py

search-with-proof: reproducible npm builds for old lockless projects (--before commit date)

2026-10-07 13:37:23 +02:00

executor.py

search-with-proof: reproducible npm builds for old lockless projects (--before commit date)

2026-10-07 13:37:23 +02:00

oracles.py

search-with-proof: path oracle covers the prefix-check-bypass class (sibling canary)

2026-10-07 11:24:31 +02:00

probe.py

search-with-proof: ecosystem-aware build recipes and stderr in build failures

2026-10-05 21:37:56 +02:00

task_storage.py

search-with-proof: ecosystem-aware build recipes and stderr in build failures

2026-10-05 21:37:56 +02:00

verify_task.py

search-with-proof: split compressed verifier archives, isolated pip installs, verifier module paths

2026-10-06 11:15:09 +02:00

verify.py

search-with-proof: positive control for path oracle — honest serve signal, no false negatives

2026-10-06 17:07:24 +02:00

worker.py

search-with-proof: path oracle covers the prefix-check-bypass class (sibling canary)

2026-10-07 11:24:31 +02:00