fix(e2e): stabilize sandbox dependency resolution

Declare bundle polyfills explicitly and verify the app-resolved packages so clean CI installs cannot drift with workspace hoisting. Avoid misleading final invariant errors before scenario seeding begins.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 2 people

apps/sim/e2e/scripts/run.ts

@@ -117,6 +117,7 @@ async function main(): Promise<void> {
   let canaryCoverageComplete = true
   let diagnosticsRetained = true
   let failed = false
+  let seedAttempted = false
 
   const persistFakeRequestLogs = (): void => {
     const failures: unknown[] = []
@@ -373,6 +374,7 @@ async function main(): Promise<void> {
     )
     assertNoForbiddenProviderInitialization([app.logPath, realtime.logPath])
 
+    seedAttempted = true
     await seedE2eWorld({
       ...commandOptions,
       env: {
@@ -435,7 +437,7 @@ async function main(): Promise<void> {
       process.off('SIGINT', handleSigint)
       process.off('SIGTERM', handleSigterm)
 
-      if (runDatabase) {
+      if (runDatabase && seedAttempted) {
         try {
           assertSeededScenarioManifestExists(manifestPath)
           await Promise.all([

apps/sim/e2e/support/sandbox-bundles.ts

@@ -1,7 +1,8 @@
 import { createHash } from 'node:crypto'
 import { readFileSync } from 'node:fs'
 import path from 'node:path'
-import { REPO_ROOT } from './paths'
+import { readAppResolvedPackageVersion } from '@/lib/execution/sandbox/bundles/dependency-resolution'
+import { REPO_ROOT, SIM_APP_DIR } from './paths'
 
 const INTEGRITY_PATH = 'apps/sim/lib/execution/sandbox/bundles/integrity.json'
 
@@ -36,12 +37,10 @@ export function verifySandboxBundleIntegrity(options?: { runningBunVersion?: str
   verifyHashes('source', integrity.sources)
   verifyHashes('output', integrity.outputs)
   for (const [packageName, expectedVersion] of Object.entries(integrity.dependencies)) {
-    const packageJson = readJson<{ version?: string }>(
-      path.join(REPO_ROOT, 'node_modules', packageName, 'package.json')
-    )
-    if (packageJson.version !== expectedVersion) {
+    const resolvedVersion = readAppResolvedPackageVersion(packageName, SIM_APP_DIR)
+    if (resolvedVersion !== expectedVersion) {
       throw new Error(
-        `Sandbox bundle dependency ${packageName} changed: expected ${expectedVersion}, received ${packageJson.version ?? 'missing'}`
+        `Sandbox bundle dependency ${packageName} changed: expected ${expectedVersion}, received ${resolvedVersion}`
       )
     }
   }

apps/sim/lib/execution/sandbox/bundles/build.ts

@@ -15,6 +15,7 @@ import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import { dirname, isAbsolute, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { createLogger } from '@sim/logger'
+import { readAppResolvedPackageVersion } from './dependency-resolution'
 
 const logger = createLogger('SandboxBundleBuild')
 
@@ -37,7 +38,11 @@ const HERE = dirname(fileURLToPath(import.meta.url))
 const APP_SIM_ROOT = join(HERE, '..', '..', '..', '..')
 const REPO_ROOT = join(APP_SIM_ROOT, '..', '..')
 const INTEGRITY_PATH = join(HERE, 'integrity.json')
-const INTEGRITY_SOURCES = [join(HERE, 'build.ts'), join(HERE, '_polyfills.ts')] as const
+const INTEGRITY_SOURCES = [
+  join(HERE, 'build.ts'),
+  join(HERE, '_polyfills.ts'),
+  join(HERE, 'dependency-resolution.ts'),
+] as const
 const INTEGRITY_DEPENDENCIES = ['pdf-lib', 'docx', 'pptxgenjs', 'buffer', 'process'] as const
 
 interface BundleSpec {
@@ -187,8 +192,7 @@ function writeIntegrityManifest(): void {
     dependencies: Object.fromEntries(
       INTEGRITY_DEPENDENCIES.map((packageName) => [
         packageName,
-        readJson<{ version: string }>(join(REPO_ROOT, 'node_modules', packageName, 'package.json'))
-          .version,
+        readAppResolvedPackageVersion(packageName, APP_SIM_ROOT),
       ])
     ),
     outputs: Object.fromEntries(

apps/sim/lib/execution/sandbox/bundles/dependency-resolution.ts

@@ -0,0 +1,29 @@
+import { existsSync, readFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { dirname, join, parse } from 'node:path'
+
+const PACKAGE_ENTRYPOINTS: Readonly<Record<string, string>> = {
+  buffer: 'buffer/',
+  process: 'process/browser',
+}
+
+export function readAppResolvedPackageVersion(packageName: string, appRoot: string): string {
+  const requireFromApp = createRequire(join(appRoot, 'package.json'))
+  const entrypoint = requireFromApp.resolve(PACKAGE_ENTRYPOINTS[packageName] ?? packageName)
+  let directory = dirname(entrypoint)
+  const filesystemRoot = parse(directory).root
+
+  while (directory !== filesystemRoot) {
+    const packageJsonPath = join(directory, 'package.json')
+    if (existsSync(packageJsonPath)) {
+      const manifest = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {
+        name?: string
+        version?: string
+      }
+      if (manifest.name === packageName && manifest.version) return manifest.version
+    }
+    directory = dirname(directory)
+  }
+
+  throw new Error(`Could not locate the package manifest resolved for ${packageName}`)
+}

apps/sim/lib/execution/sandbox/bundles/integrity.json

@@ -2,8 +2,9 @@
   "schemaVersion": 1,
   "bunVersion": "1.3.13",
   "sources": {
-    "apps/sim/lib/execution/sandbox/bundles/build.ts": "5ac7773ab65451f908fe54ba609978469117fcaa61cff47be973d7ba528a9982",
-    "apps/sim/lib/execution/sandbox/bundles/_polyfills.ts": "131dd6e7aec37bff3acf6507d6fe7bc95aeabae07fa2e97bbf2e32aa7251d491"
+    "apps/sim/lib/execution/sandbox/bundles/build.ts": "c4036e734738b44b5169c46a008f595c95a691865777117980cc13c5684f7580",
+    "apps/sim/lib/execution/sandbox/bundles/_polyfills.ts": "131dd6e7aec37bff3acf6507d6fe7bc95aeabae07fa2e97bbf2e32aa7251d491",
+    "apps/sim/lib/execution/sandbox/bundles/dependency-resolution.ts": "dac56d7744c09f8d577b575ffdbb4dfd219fb16918fc529f84b017f0ec9d1f3f"
   },
   "dependencies": {
     "pdf-lib": "1.17.1",

apps/sim/package.json

@@ -135,6 +135,7 @@
     "better-auth": "1.6.23",
     "binary-extensions": "3.1.0",
     "browser-image-compression": "^2.0.2",
+    "buffer": "6.0.3",
     "busboy": "1.6.0",
     "cheerio": "1.1.2",
     "class-variance-authority": "^0.7.1",
@@ -196,6 +197,7 @@
     "posthog-node": "5.28.9",
     "pptxgenjs": "4.0.1",
     "prismjs": "^1.30.0",
+    "process": "0.11.10",
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "react-hook-form": "^7.54.2",