thePR0M3TH3ANandClaude Opus 5 bc6ee2288e Declare tsx where the fuzz runner actually lives ...

The differential-fuzz CI job failed with "tsx: not found" — the TypeScript
side of the fuzzer never ran at all, so the job was reporting on Python
output alone.

`tsx` was a devDependency of @seedpass/cli only, while the fuzz runner lives
in packages/core and is invoked with cwd there. It worked locally because
core's node_modules/.bin had a stale tsx from an earlier install, and could
never work from a clean `pnpm install --frozen-lockfile`. Precisely the class
of bug that only CI can see, on the first run after wiring these checks up.

Declared in @seedpass/core rather than papering over it with a path or a
--filter, so the invocation is correct by construction. Verified by removing
core's node_modules, reinstalling frozen, and running CI's own seed 1 end to
end: 1050 cases, no divergences.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01Vtx94nXDmNgXEeThUZP4QN

2026-08-20 09:05:13 -04:00

..

packages

Declare tsx where the fuzz runner actually lives

2026-08-20 09:05:13 -04:00

.gitignore

TS port first slice: fixture generator, js/ workspace, P0 derivation parity

2026-08-13 10:16:08 -04:00

package.json

TS port first slice: fixture generator, js/ workspace, P0 derivation parity

2026-08-13 10:16:08 -04:00

pnpm-lock.yaml

Declare tsx where the fuzz runner actually lives

2026-08-20 09:05:13 -04:00

pnpm-workspace.yaml

security: keep secrets off argv, fix packaging, add JS supply-chain CI

2026-08-14 23:13:21 -04:00

SECURITY_AUDIT.md

docs: all seven audit findings closed; record the deferred L-1 v2 design

2026-08-19 09:11:09 -04:00

tsconfig.base.json

TS port first slice: fixture generator, js/ workspace, P0 derivation parity

2026-08-13 10:16:08 -04:00