MiMo-V2.6-RL code in Harbor (mimo_harbor 1.2.0): hardening + plain-language deviations, Daytona job

README.md

@@ -67,6 +67,8 @@ Example: [task.toml](https://huggingface.co/datasets/FineEnvs/MiMo-V2.6-RL-harbo
 hf download FineEnvs/MiMo-V2.6-RL-harbor-code --repo-type dataset --local-dir mimo-code
 cd mimo-code
 PYTHONPATH=agents HF_TOKEN=hf_... harbor run -y -c jobs/code.yaml
+# or on Daytona (builds the Dockerfile, runs the agent unprivileged natively — closer to Xiaomi's pods):
+DAYTONA_API_KEY=... DAYTONA_API_URL=... PYTHONPATH=agents HF_TOKEN=hf_... harbor run -y -c jobs/code.daytona.yaml
 ```
 
 The job runs `agents/mimo_opencode.py` (OpenCode 1.18.32) on HF Sandbox with the reference settings: the step
@@ -83,7 +85,7 @@ openenv harbor serve --dataset FineEnvs/MiMo-V2.6-RL-harbor-code --llm-url http:
 
 ## How it was converted
 
-With the [mimo_harbor adapter](https://github.com/adithya-s-k/FineEnvs/tree/mimo-explorer-rollouts/mimo-explorer/mimo_harbor). It reads the source at one pinned revision and every image through
+With the [mimo_harbor adapter](https://github.com/adithya-s-k/FineEnvs/tree/main/tooling/mimo-rl-explorer/mimo_harbor). It reads the source at one pinned revision and every image through
 a digest lock, so a rerun produces byte-identical tasks (`manifest.json`). Setup and grading follow Xiaomi's
 harness step by step, as the explorer's runner does, using the same vendored graders:
 
@@ -92,7 +94,15 @@ harness step by step, as the explorer's runner does, using the same vendored gra
   so Harbor records an error rather than a 0.
 - Images are pinned by digest; HF Sandbox and other prebuilt-image backends run them without a build step.
 
-Deviations from the reference, and why, are listed in the adapter's README.
+## Where this differs from Xiaomi's setup, in plain terms
+
+The task, its files, how it is graded, and the reward you get are **exactly Xiaomi's**. These are the only differences, and how we handle each:
+
+- **The agent is [OpenCode](https://opencode.ai), not Xiaomi's own agent.** The model gets the same instruction and the same reward — only the tool it uses to do the work is different.
+- **It can't look the answer up online.** Xiaomi ran with no internet. We let the model reach its own model API but block, by name, the places an answer could come from — code sites (GitHub, GitLab, …), search engines, this dataset's own page on the Hub, and package registries — so they don't resolve while it works.
+- **No answer in the git history.** If an image still carries the fix in its git log, we delete those later commits before the agent starts, so it can't be read out of history.
+
+That's the whole list. The detailed, technical version is in the [adapter README](https://github.com/adithya-s-k/FineEnvs/tree/main/tooling/mimo-rl-explorer/mimo_harbor#deviations-from-the-reference-and-why).
 
 ## Validation
 

jobs/code.daytona.yaml

@@ -0,0 +1,55 @@
+# Same, on Daytona: builds the Dockerfile and runs the agent as the task's unprivileged user natively.
+# Needs DAYTONA_API_KEY / DAYTONA_API_URL and `pip install 'harbor[daytona]'`.
+# From the repo root:  PYTHONPATH=agents HF_TOKEN=... harbor run -y -c jobs/code.daytona.yaml
+jobs_dir: jobs/code
+n_attempts: 1
+timeout_multiplier: 1.0
+orchestrator:
+  type: local
+  n_concurrent_trials: 4
+environment:
+  type: daytona
+  delete: true
+agents:
+- import_path: mimo_opencode:MimoOpenCode
+  model_name: hf/zai-org/GLM-5.3:deepinfra
+  kwargs:
+    version: 1.18.32
+    opencode_config:
+      autoupdate: false
+      share: disabled
+      provider:
+        hf:
+          npm: '@ai-sdk/openai-compatible'
+          name: Hugging Face Inference Providers
+          options:
+            baseURL: https://router.huggingface.co/v1
+            apiKey: '{env:HF_TOKEN}'
+          models:
+            zai-org/GLM-5.3:deepinfra:
+              name: zai-org/GLM-5.3
+              tool_call: true
+              limit:
+                context: 1000000
+                output: 65536
+              options:
+                reasoningEffort: low
+      agent:
+        build:
+          steps: 500
+      snapshot: true
+      lsp: true
+      formatter: true
+      permission:
+        webfetch: deny
+        websearch: deny
+        bash: allow
+        edit: allow
+  env:
+    HF_TOKEN: ${HF_TOKEN}
+    OPENCODE_DISABLE_MODELS_FETCH: '1'
+    OPENCODE_DISABLE_AUTOUPDATE: '1'
+    OPENCODE_DISABLE_LSP_DOWNLOAD: '1'
+    OPENCODE_DISABLE_SHARE: '1'
+datasets:
+- path: tasks

registry.json

@@ -1,7 +1,7 @@
 [
  {
   "name": "mimo-v2.6-rl-harbor-code",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "MiMo-V2.6-RL Code: 2698 Harbor tasks",
   "tasks": [
    {

tasks/format-code-task-000001/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000001/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000001/task.toml

@@ -6,7 +6,7 @@ description = "Stuck transactions caused by excessive gas limits"
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Go"
 domain = "code"
 keywords = ["code", "Go"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000002/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000002/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000002/task.toml

@@ -6,7 +6,7 @@ description = "\"method\":\"zkevm_batchNumberByBlockNumber\","
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Go"
 domain = "code"
 keywords = ["code", "Go"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000003/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000003/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000003/task.toml

@@ -6,7 +6,7 @@ description = "SHL opcode not implemented"
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo H4sIAAAAAAAC/+1YbW/cNhLO5/0V7MZObDeS7KSHAA5cnJv6mgDnJkh8uDu0xYKSKIm2JCoktevNy3+/Z0jtrrQvSQ537ZdaTmxxSM4M543PKJOlMFFcquSmlMbe+z2eYzxPj4/d3+PNv0+OnzxevHv6yfHT757eY8f3/oCnNZZriL/353zus0pWivHazIQOSsFv2DIY2AHN8VzU9nB0HLoflktbtHGYqGpJms1m4RYyb+Q2suaL1a0ROlG1Bf/BikSlolQ83bZbxdciseYLHHJov213j757qy35cFcsbdwmN8KGSudLqlGtTkQGkghrYfsMwhuha1EOlieFVpVsqzBXKkfOud1De9WpVjLdvcCTcs2bYqhfm5twyb8vVBrTChMqY4Ksff9+aMntxGmYiunAh+s0iHsvy5KHlfJ/+xIbrW7nOELJ63xoLnf0DXJzk4M84O/Pvxlhm+RYgtv6ug1iCt/Rf4jpkwtbleGOOSO4Toow1ny65gLLkxs1FTor1WzIrs1zSM64c9pAox1TRdYfpdxyI6wJEJfgv2tTktZBmZkvTAetCU6+tEa0u9fcCpc7QxUTboJYyxQBv3O+037rvNUoM9mu2WZOsdYLjYyuprCZ20LVhTJWpINpLSib9Tysm+rabJ+ac11ThA2qi+YWfKXqO9XKJNyc0G08z0W1zrxRJ2GFyKiHAe5jZnOibvO10kFZtUltEFrcVah1ceH2qULchk3V92t4bVA65VQPKlK7YQNhqtAU/Z2wYFKqNs1Krn3I37t7/gQPSk7bIBZ+Txmfx38nJ09PTob4D/DvyZM7/PeH4L9vIlyYUcxRDu6zN21tmKoT8Yhxw7RS9hGLCeMIZgvBHBSkcqmtOWUvuI6VfmjYL6KeSq3qirBUIXhpi6QQyc1vVHlQuQw2S8MyVaZCM1lbBVHRlOuolHHU4c8U1RbCAZ7YT6IWVItTFs8dPJ0UTtQz1FiBFYa9uTj/8fICHDUr1IwJnhRQSzSs4g2kKfYvyYGGoBt21sKYcHR5NpA4+oUFGRvvXUZa8HQ+Zr+xBw+YuJWWHY+SolIpQ8jSgvEo47I8OGQfmEgKxcYuZU7Z3tGYff/g8TO/6eQZ+4RTOSt9CUvDuE1TSpwPmkbCJhFdb4ZOu7KylnlhGc8smczCajB7WZrRTEsrJku+Tq+kcSfJhr3c2BFXQ9IQKj4Huj5lS21Yz3kmWqCQSDWi9nhzQnAc1zD7liFK6M0FB2kqbpsSsaEXrmMHOFiEAfwXpari0Jp2ksjDcPT8nz+eRbhibSzSEWAygH6dyZwFQV6qmJd44WnKDM9EmEoNnK/0HIfAvvEoSbs39vEjI4+wca3YTOkbwBe2Wu5Xy4x9Q0gc1+c0aLg2gqRIG2Ah+z4C3IzqtizZ4+8fwHM4S80Yu884johY9wcHXhGwVC6nFHRuzuByrQX0rippR8xJkDV+Be8ofGhIJwjOF6MgYdRohDWvxJmL9AVFwDqlI/0VHuIlhUDHmLgF1UoczFICbgaiaux8lMnRD+dvL872Dobne4GcwHmWZztEiO99uE9rP7FAvGPfHSPIl8ZLVFumrFbEwqhy6jOcZC60kHVnTB/2e8QJIe+jCuvGCKaXFYLIMDJa3MrSshmaK4Zsd76wCIXEJTK3S/Yhe5mhxsCmhsQ/chOZvGVeo1gwykimWstU5oxYqvwRZBnFQmdwZLVMU7hsViDiezlD0WBcLWmwO0bpcSUCHVNKTcHo7+dXF296hnOJ6ayL32SKxSF7ZmQfgbOgT1Czv+A9Bx4jH4ZkSZxPHI50xQKdsUVkRzWifYIC0lI2hglqk9g1OZVE74t75pg6nsSyaiJyVwgT+FHDUcx6IwvImcqsW0vcJuvEI7d+IGOpMqaTkrepCI4Ho6MVP1EtRk3bNMIKoSfgNHENp5ig4aO6gzUbEvpKeTB/bVS9W5NrWni0el/IpchKe68TlKzdXNAw0F6VBXR/DWgdv9APJwvXgDSZNHM3nEx2c85V4OR3bFCQ65Tr1Pghgi9tkEvd8L3M+1Z0ibUaISV2mqtqjkL8WjgvxjXiXlFtUeOWNrEzbo62K0sH7yJvqfSOYwm6eAZTmUT+RAgZgyKEd9Ego09YgMYCzh+urW6ongaNXx/5LPTv6AJlJnE3dFPaSjSZ1jxj3e369Ol/tcur5a5wRHNg5w2qxjatFom5OuTi3m9QYpG/5l0ZHeHHZdGOuSafrCXNim1PEwITc+zpDVWdqzReKUiVnz10Ofjw69T13kNXG02cFzpCzGNR+gzqKIMw/oyq8CO/9X78jgV4m3Zq4a6/QS6bRMvGSlWHFeocykcBhSFwkWvR0Rc0dyXLXegAPTUiOb1FQRW3SYlactYveT1yrICSAC6qBpcBsEdvKixaczPvEdBSpyjkKwIApU5R6bTtL8NZmj6faYLGd9JBJ6RcT8KUashAQH8Y0pVRir5ArtGv95f4rFoR4P3hdD3kcMlrmcFfoVVV2Vd6nVHoPjIFdJn1qCnuqqAWM2PnYLsGYUbe0T4sqsfL6Pv1YBmAwdufz1+/ffHqKrzmGv5UmzOBxz3mMytcvfjC/JDNr4fbS8cw2q/bUvKIgkGWIv3cSu+ZyAW98fdB4AZUbQdLUi6qXdfNNl5HkU8Es30apzHBVxTcmL8X5ZYrHZD0FwAMh0HGLMjRaLDfPPYcEfZcInJ0LanIeAs0hZyaUB+BW1YgRClHCf6MjYWi41PWFHMjAR7LOfBMpToQBzAVxIJrAsZZa1u9gHSGMF1T8oQgrhPqABXibW6ASnlcCoeeAIUK2kyizSNGoqlV4a4j9FgrZC9kKvx+VUM+jkeynWYs4fVDS1Cuq+fpswUIc1IPqKWYUKyEpjgkAAq4SDByAewc267xJEzt2iXfczjA5CEOeEHqAbpCJKZQrJGNILTkSxF1oAQiA4SfpQbRYbttBcyth6yA+shAC1TtAMOK27Px/gHGFOaHY+iZmYjAoAEQ9NjTQVU0pqlySLVt0EAJz4L6FT0eBkJKuLcvlbyGzPjIblFfULpQ4+oT1pvp3Pq/ag3U6tzuBnAvjOle4XpTLJZUK3rjK0sfBf9/Dvy1Cluer1nZOqHLxq4SKMiBg1VBIE3A68SFEZRA57vh667Jo51g7ZX9YO8vZUWfxpt9YSa3uiwjaAA0hp7TFWh6wS0361qJXb5C15AnYYOeSFz09jhqotvMvqZvJWcZL3GmPAE3t9at2sbTh33bi/ur8zc/XVxNrl5eXry9Or983bU6hr6RBGZl7v1Eegsdjs7/hnI02EEO9fZZZ8e+BQ40Al17OmYPv93/d7BfBfsp239xun95uv/24eHo+avLy5dXk+ev/vHzVSfdwbUAVlz1svhtJPx1Nt5bkz8mn+PorntFv99jN3ZNLPWwh8uqybpPMouGk3q4QdO594GOeXp8evL40+l6MXS1qsHCRVUcg6WA9R3nauo/OERUjPy3FPqA4CvU2H0t+pxslNG29hKorp76mva5xpWko7nHv7VvPKORVS0K2Opr1aj3JcpF6Pjuc/3dc/fcPXfP3XP33D1f+/wHU1w18QAoAAA= | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000004/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000004/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000004/task.toml

@@ -6,7 +6,7 @@ description = "Dans Pix Admin, sur l'écran de recherche d'organisations, quand
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "JavaScript"
 domain = "code"
 keywords = ["code", "JavaScript"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000007/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000007/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000007/task.toml

@@ -6,7 +6,7 @@ description = "Filling an order against a non-contract takerAsset silently \"suc
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "JavaScript"
 domain = "code"
 keywords = ["code", "JavaScript"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000008/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000008/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /workspace/repo/node_modules/.cache /workspace/repo/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000008/task.toml

@@ -6,7 +6,7 @@ description = "I want the `manimgl` and `manim-render` commands to support openi
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo H4sIAAAAAAAC/+1YbXPcthH25/sVyFmyJcUkJdutZ+RRpqqjxp6pEo+tTttJMjcgCZKQSIIBwDudX/57nwV4d+S9WOm0yZeIsiViAewu9g3PMpOlMFFcquSmlMY++C2eYzwvjo/d3+PNv8+Onz1dvHv6yfGL5y8esOMHv8PTGss1xD/4Yz4PWSUrxXhtZkIHpeA3bBkM7IDmeC5qezg6Dt0Py6Ut2jhMVLUkzWazcAuZN3IbWfPF6tYInajagv9gRaJSUSqebtut4muRWHMHhxzab9vdo+/eaks+3BVLG7fJjbCh0vmSalSrE5GBJMJa2D6D8EboWpSD5UmhVSXbKsyVypFzbvfQXnWqlUx3L/CkXPOmGOrX5iZc8u8Llca0woTKmCBrP3wYWnI7cRqmYjrw4ToN4j7IsuRhpfzfvsRGq9s5jlDyOh+ayx19g9zc5CAP+Pvzb0bYJjmW4La+boOYwnf0H2L65MJWZbhjzgiukyKMNZ+uucDy5EZNhc5KNRuya/MckjPunDbQaMdUkfVHKbfcCGsCxCX479qUpHVQZuaO6aA1wclda0S7e82tcLkzVDHhJoi1TBHwO+c77bfOW40yk+2abeYUa73QyOhqCpu5LVRdKGNFOpjWgrJZz8O6qa7N9qk51zVF2KC6aG7BV6q+U61Mws0J3cbzXFTrzBt1ElaIjHoY4D5mNifqNl8rHZRVm9QGocVdhVoXF26fKsRt2FR9v4bXBqVTTvWgIrUbNhCmCk3R3wkLJqVq06zk2of8g/vnD/Cg5LQNYuG3lPFl/Hdy8uLZn4f4D/Dv+dN7/Pe74L+vIlyYUcxRDh6yd21tmKoT8YRxw7RS9gmLCeMIZgvBHBSkcqmtOWWvuY6VfmzYj6KeSq3qirBUIXhpi6QQyc3PVHlQuQw2S8MyVaZCM1lbBVHRlOuolHHU4c8U1RbCAZ7Yd6IWVItTFs8dPJ0UTtRL1FiBFYa9uzj/9vICHDUr1IwJnhRQSzSs4g2kKfYvyYGGoBt21sKYcHR5NpA4+pEFGRvvXUZa8HQ+Zj+zR4+YuJWWHY+SolIpQ8jSgvEo47I8OGQfmUgKxcYuZU7Z3tGYffPo6Uu/6eQl+4xTOSvdhaVh3KYpJc4HTSNhk4iuN0OnXVlZy7ywjGeWTGZhNZi9LM1opqUVkyVfp1fSuJNkw15u7IirIWkIFV8BXZ+ypTas5zwTLVBIpBpRe7w5ITiOa5h9zRAl9OaCgzQVt02J2NAL17EDHCzCAP6LUlVxaE07SeRhOHr1z2/PopnSNwZRISK62UZAy8D7dSZzFgR5qWJe4oWnKTM8E2EqNeC+0nOcBdvHoyTt3tinT4wcw8a1YsQUKIatlvvVMmNfESDHLToNGq6NICnSBljIvomAOqO6LUv29JtHcCCOVDPGHjKOkyLk/fkBWwQMlsspxZ6bM7hjawG9q0raEXMSZI1fwS8URTSkEwTni1GQMOo3wppX4swF/IIiYKTSkf4CR/GSIqFjTNyCaiUOZimBOgNRNXY+yuTor+fvL872Dobne43UwHmWZztEpO99fEhrP7NA/MKeHyPWl8ZLVFumrFbEwqhy6hOdZC60kHVnTB/9e8QJke+DC+vGiKk3FWLJMDJa3MrSshl6LIakd76wiIjE5TO3S/Yhe5Oh1MCmhsQ/cROZvGVeo1gwSkymWstU5oxYqvwJZBnFQmdwJLdMU7hsViDwe6njQsyVlAa7Y1QgVynQOKXUG4z+fn518a5nOJefzrr4TaZYHLJnRvYJcAv6BDX7E95zBC/5MCRL4nzicKQrFuiMrQV4VCP2JygnLeVmmKBSiTvWTJHgUKgn/KUT4SRAgK2aiJwXwiB+1HBUuN7IAoemMuvWErfJOvHIrR/IWByAppOSt6kIjgejoxU/US1GTds0wgqhJ+A0cV2omKALpGKENRsS+kp5hH9tVL1bk2taeLR6X8ilOEt7rxPUsd1c0EXQXpUFdKkNaB2/0A8nnYeINJk0czecTHZzzlXg5HdsUKXrlOvU+CEcnTbIrG74QeZ9K7o0W42QIDvNVTVHIX4tnBfjbnGvKMGoeEub2Bk3R9uVpYN3AbhUesexBN1Gg6lMIpsihIxBScK7aJDfJyxAtwHnD9dWN1Rdg8avj3xO+ne0hjKTuDC6KW0lOk9rXrLuyn3x4r/a5dVy9zqiObDzBjVkm1aLNF0dcgEGGhRcZLP5pYyO8OOyaMdck0/WkmbFtqcJIYw59vSGqs5VGq8UpHuAPXY5+PjXqeu9h1Y3mjgvdISYx6L0GdRRBmH8BVXhR37r/ficBXibdmoBANwgl02iZWOlqsMKVQ/lo4DCELjItejoDs1dyXLXO5BQjUhOb1FexW1Sopac9UtejxwrQCcgjqrB1QBA0psKi9bczHsE9NkpyvqKAJSpU1Q6bfvLcJamz2eaoBuedHgKKdeTMKUaMhDQH4Z0gZSiL5BrNPH9JT6rVgR4fzhdDzlc8lpm8FdoVVX2lV5nFLovTwFdHD1qipsrqMXM2DnYrgGakXe0D4vq6TL6fjpYBmDw/vvzt+9f/3AVXnMNf6rNmcCjIPOFFa5e3DE/ZPPT4fbSMYz267aUPKJgkKVIv7TSeyZyQW/8fRC4AVXbwZKUi2rXdbON11HkE8Fsn8ZpTPArCm7MP4hyy5UOgPoj4IZDJGMW5Og+2M8eiY4IiS5hOlqZVGS8BbZCTk2oucAtKxCilKMEhsbGQtHxKWuKuZGAkuUc6KZSHaQDtApiwTXB5Ky1rV4APEMIrykBRgCtnFAHrxBvcwOMyuNSOCwFYFTQZhJtnjASTf0Ld22iR14hey1T4ferGvJxPJLtNGMJrx9bAnZdPU9fLiCZk3pAfcaEYiU0xSHBUYBHApULmOfYdt0oIWzXQ/lGxAEmD3HAC1IP0CoiMYVijWwEoSVfiqgtJUgZIPwsdY0O6W0rYG49ZAXUXAZaoGoHGFbcno33DzCmMD8cQ8/MRAQNDWChR6IOuKJbTZXDrW2Drkp4FtS96PEwEFJCwX2p5DVkxid2i/qC0oUaV5+w3kzn1v9Va2BP53Y3gHthTPcK15tisaRa0RtfWfqY+P9z4F+rsOX5mpWtE7ps8yqBghw4WBUE0gS8TlwYQQm0wxu+7lo+2gnWXtmP9uFSVvR5vNklZnKryzKCBkBj6EBdgaYX3HKzrrHY5Sv0EHkSNuiQxEVvj6Mmus3sW/qAcpbxEmfKE3Bza92qbTx92Le9uL86f/fdxdXk6s3lxfur88u3XeNj6MNJYFbm3k+kt9Dh6PxvKEeDHeRQb591duxr4EAj0MOnY/b46/1/B/tVsJ+y/den+5en++8fH45e/XB5+eZq8uqHf3x/1Ul3cC2AFVedLX4bCX+djffW5I/J5zi662XR/ffYjV1LSx3t4bJqsu47zaL9pI5u0ILufaRjnh6fnjz9fLpeDF2tarBwURXHYClgfce5mvrPDxEVI/+BhT4n+Ao1dp+QviQbZbStvQSqq6e+pn2pjSXpaPXxb+3Dz2hkVYsCtvqENep9nnIROr7/hn//3D/3z/1z/9w/98+W5z/bwqY/ACgAAA== | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000011/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000011/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000011/task.toml

@@ -6,7 +6,7 @@ description = "1277 and 338 directories are placeholders — please fill them in
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Go"
 domain = "code"
 keywords = ["code", "Go"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo H4sIAAAAAAAC/+1YbW/cNhLO5/0V7MZObDeS7KSHAA5cnJv6mgDnJkh8uDu0xYKSKIm2JCoktevNy3+/Z0jtrrQvSQ537ZdaTmxxSM4M543PKJOlMFFcquSmlMbe+z2eYzxPj4/d3+PNv0+OnzxevHv6yfHT757eY8f3/oCnNZZriL/353zus0pWivHazIQOSsFv2DIY2AHN8VzU9nB0HLoflktbtHGYqGpJms1m4RYyb+Q2suaL1a0ROlG1Bf/BikSlolQ83bZbxdciseYLHHJov213j757qy35cFcsbdwmN8KGSudLqlGtTkQGkghrYfsMwhuha1EOlieFVpVsqzBXKkfOud1De9WpVjLdvcCTcs2bYqhfm5twyb8vVBrTChMqY4Ksff9+aMntxGmYiunAh+s0iHsvy5KHlfJ/+xIbrW7nOELJ63xoLnf0DXJzk4M84O/Pvxlhm+RYgtv6ug1iCt/Rf4jpkwtbleGOOSO4Toow1ny65gLLkxs1FTor1WzIrs1zSM64c9pAox1TRdYfpdxyI6wJEJfgv2tTktZBmZkvTAetCU6+tEa0u9fcCpc7QxUTboJYyxQBv3O+037rvNUoM9mu2WZOsdYLjYyuprCZ20LVhTJWpINpLSib9Tysm+rabJ+ac11ThA2qi+YWfKXqO9XKJNyc0G08z0W1zrxRJ2GFyKiHAe5jZnOibvO10kFZtUltEFrcVah1ceH2qULchk3V92t4bVA65VQPKlK7YQNhqtAU/Z2wYFKqNs1Krn3I37t7/gQPSk7bIBZ+Txmfx38nJ09PTob4D/DvyZM7/PeH4L9vIlyYUcxRDu6zN21tmKoT8Yhxw7RS9hGLCeMIZgvBHBSkcqmtOWUvuI6VfmjYL6KeSq3qirBUIXhpi6QQyc1vVHlQuQw2S8MyVaZCM1lbBVHRlOuolHHU4c8U1RbCAZ7YT6IWVItTFs8dPJ0UTtQz1FiBFYa9uTj/8fICHDUr1IwJnhRQSzSs4g2kKfYvyYGGoBt21sKYcHR5NpA4+oUFGRvvXUZa8HQ+Zr+xBw+YuJWWHY+SolIpQ8jSgvEo47I8OGQfmEgKxcYuZU7Z3tGYff/g8TO/6eQZ+4RTOSt9CUvDuE1TSpwPmkbCJhFdb4ZOu7KylnlhGc8smczCajB7WZrRTEsrJku+Tq+kcSfJhr3c2BFXQ9IQKj4Huj5lS21Yz3kmWqCQSDWi9nhzQnAc1zD7liFK6M0FB2kqbpsSsaEXrmMHOFiEAfwXpari0Jp2ksjDcPT8nz+eRbhibSzSEWAygH6dyZwFQV6qmJd44WnKDM9EmEoNnK/0HIfAvvEoSbs39vEjI4+wca3YTOkbwBe2Wu5Xy4x9Q0gc1+c0aLg2gqRIG2Ah+z4C3IzqtizZ4+8fwHM4S80Yu884johY9wcHXhGwVC6nFHRuzuByrQX0rippR8xJkDV+Be8ofGhIJwjOF6MgYdRohDWvxJmL9AVFwDqlI/0VHuIlhUDHmLgF1UoczFICbgaiaux8lMnRD+dvL872Dobne4GcwHmWZztEiO99uE9rP7FAvGPfHSPIl8ZLVFumrFbEwqhy6jOcZC60kHVnTB/2e8QJIe+jCuvGCKaXFYLIMDJa3MrSshmaK4Zsd76wCIXEJTK3S/Yhe5mhxsCmhsQ/chOZvGVeo1gwykimWstU5oxYqvwRZBnFQmdwZLVMU7hsViDiezlD0WBcLWmwO0bpcSUCHVNKTcHo7+dXF296hnOJ6ayL32SKxSF7ZmQfgbOgT1Czv+A9Bx4jH4ZkSZxPHI50xQKdsUVkRzWifYIC0lI2hglqk9g1OZVE74t75pg6nsSyaiJyVwgT+FHDUcx6IwvImcqsW0vcJuvEI7d+IGOpMqaTkrepCI4Ho6MVP1EtRk3bNMIKoSfgNHENp5ig4aO6gzUbEvpKeTB/bVS9W5NrWni0el/IpchKe68TlKzdXNAw0F6VBXR/DWgdv9APJwvXgDSZNHM3nEx2c85V4OR3bFCQ65Tr1Pghgi9tkEvd8L3M+1Z0ibUaISV2mqtqjkL8WjgvxjXiXlFtUeOWNrEzbo62K0sH7yJvqfSOYwm6eAZTmUT+RAgZgyKEd9Ego09YgMYCzh+urW6ongaNXx/5LPTv6AJlJnE3dFPaSjSZ1jxj3e369Ol/tcur5a5wRHNg5w2qxjatFom5OuTi3m9QYpG/5l0ZHeHHZdGOuSafrCXNim1PEwITc+zpDVWdqzReKUiVnz10Ofjw69T13kNXG02cFzpCzGNR+gzqKIMw/oyq8CO/9X78jgV4m3Zq4a6/QS6bRMvGSlWHFeocykcBhSFwkWvR0Rc0dyXLXegAPTUiOb1FQRW3SYlactYveT1yrICSAC6qBpcBsEdvKixaczPvEdBSpyjkKwIApU5R6bTtL8NZmj6faYLGd9JBJ6RcT8KUashAQH8Y0pVRir5ArtGv95f4rFoR4P3hdD3kcMlrmcFfoVVV2Vd6nVHoPjIFdJn1qCnuqqAWM2PnYLsGYUbe0T4sqsfL6Pv1YBmAwdufz1+/ffHqKrzmGv5UmzOBxz3mMytcvfjC/JDNr4fbS8cw2q/bUvKIgkGWIv3cSu+ZyAW98fdB4AZUbQdLUi6qXdfNNl5HkU8Es30apzHBVxTcmL8X5ZYrHZD0FwAMh0HGLMjRaLDfPPYcEfZcInJ0LanIeAs0hZyaUB+BW1YgRClHCf6MjYWi41PWFHMjAR7LOfBMpToQBzAVxIJrAsZZa1u9gHSGMF1T8oQgrhPqABXibW6ASnlcCoeeAIUK2kyizSNGoqlV4a4j9FgrZC9kKvx+VUM+jkeynWYs4fVDS1Cuq+fpswUIc1IPqKWYUKyEpjgkAAq4SDByAewc267xJEzt2iXfczjA5CEOeEHqAbpCJKZQrJGNILTkSxF1oAQiA4SfpQbRYbttBcyth6yA+shAC1TtAMOK27Px/gHGFOaHY+iZmYjAoAEQ9NjTQVU0pqlySLVt0EAJz4L6FT0eBkJKuLcvlbyGzPjIblFfULpQ4+oT1pvp3Pq/ag3U6tzuBnAvjOle4XpTLJZUK3rjK0sfBf9/Dvy1Cluer1nZOqHLxq4SKMiBg1VBIE3A68SFEZRA57vh667Jo51g7ZX9YO8vZUWfxpt9YSa3uiwjaAA0hp7TFWh6wS0361qJXb5C15AnYYOeSFz09jhqotvMvqZvJWcZL3GmPAE3t9at2sbTh33bi/ur8zc/XVxNrl5eXry9Or983bU6hr6RBGZl7v1Eegsdjs7/hnI02EEO9fZZZ8e+BQ40Al17OmYPv93/d7BfBfsp239xun95uv/24eHo+avLy5dXk+ev/vHzVSfdwbUAVlz1svhtJPx1Nt5bkz8mn+PorntFv99jN3ZNLPWwh8uqybpPMouGk3q4QdO594GOeXp8evL40+l6MXS1qsHCRVUcg6WA9R3nauo/OERUjPy3FPqA4CvU2H0t+pxslNG29hKorp76mva5xpWko7nHv7VvPKORVS0K2Opr1aj3JcpF6Pjuc/3dc/fcPXfP3XP33D1f+/wHU1w18QAoAAA= | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000013/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000013/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000013/task.toml

@@ -6,7 +6,7 @@ description = "The small `lib/lru` package is now being used by callers that nee
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Go"
 domain = "code"
 keywords = ["code", "Go"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000014/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000014/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /workspace/repo/node_modules/.cache /workspace/repo/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000014/task.toml

@@ -6,7 +6,7 @@ description = "I want the `github.com/8treenet/freedom/infra/kafka` package to p
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Go"
 domain = "code"
 keywords = ["code", "Go"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000016/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000016/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000016/task.toml

@@ -6,7 +6,7 @@ description = "Sync IDA Pro type definitions across collaborating analysts"
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo H4sIAAAAAAAC/+1XW2/cNhb2s37F6cRIbDeSxlm3Bmw4qLcNNgU2u4ukwC6QBgNKoiR6KFEhqRmPk/z3/UjNRbJn4u5DCyw6DDImDw/P/aZcSG7iRKp0KoWxB7/HGmOdj8f+7/jh39PvxqerfQc/HZ+ffX9A44M/YLXGMg32B3/O9YQqUSlitZlzHUrOprQOBjpyd6zgtT0OxpH/R4WwZZtEqarWoPl8Hm0Bs0ZsA2u2wm4N16mqLegPMFKVcalYtu21Sm54as0jFApIv+11D777qZVs+CoRNmnTKbeR0sUaalSrU54DxKOa2z6BaMp1zeUAPS21qkRbRYVSBXLOvx7aq860EtluhA5UaNaUQ/nawkRr+n2mwpiWm0gZE+bt3d3QktuBsyjjs4EP78PA7k5IyaJKdX/7HButbhdQQbK6GJrLq/4A3EwLgAf0O/0fRthDcCJA7T7eA2AG37n/YNMHl7aS0Y47w5lOyyjRbHbPBZalUzXjOpdq7m/+z/PfcNs2kSl/Tx6P1P/vz/9yNqz/KP9nZ/v6/4fU/29iJEycMFMGT+htWxtSdcqfEzOklbLPKXE1jpMtOflW4HJAW3NBr5lOlH5m6D2vZ0KrunK1tORM2jIteTr9QG3dIF8MHgtDuZIZ1yRqq8AqnjEdS5HEy/6TkXbMUTzpb7zmmlmeUbLw7WlSelaXyEsODENvX13/9OYVKGoq1Zw4S0uIxRuqWANuiv4jGKohZMPLmhsTBW+uBhyD9xTmNDp8E2vOssWIPtDTp8RvhaVxkJaVyggh6xBGQc6EPDqmT8TTUtHIp8wFHZ6M6OXTF5fdo9NL+gKtvJUe66UwbtNIAf0gacxtGpfKQCtou7GyFkVpieXWmczCajC7lCaYa2H5ZE3Xy5U2XpN8OMuNPHBzdBJCxB/RXS9oLQ31nGfijFkG/UysGl53/Wbi2nHULOhbQpS4nQ8OJym/bSRiQ69cR0dQLMYB/oszVTFI7V46lsdR8OO/f7qKLTc24VmANolGX+eioDAspEqYxIZlGRmW8ygTGn1e6QWUwLtRkGbLHX3+TM4jNKoVzZWeot7TBr3DFjl94zoxaT4LG6YNd1yEDYFIL2O0m7hupaQXL5/Cc9ClJqInxKAiYr1TnKzmsFQhZi7o/J3hUtQccleVsAF5DqLGT/jRhY87Og3C69UpTMkNGlHNKn7lI30F4bCO9KAf4CEmXQgsCTtqYbVhB7NItJuQV41dBLkI/nr97tXV4dFQv9fICeiz1u0YIX746YnD/UIh/0hnYwT52nipamVGtXIkjJKzLsMdz5UUol4aswv7Q0cJId9FFfBGCKafKwSRIWe0pBXS0hzDFSHbvS8sQiH1iczsmnxEP+eoMbCpceyf+4tc3FInUcLJZSSp1pLKvRGlKp6Dl1EUeYMjq0WWwWXzEhHfyxkXDcbXkgavE5QeXyIwMWVuKAj+fv3Lq7c9w/nE9NbFrzPFSsmeGekzlU6esKbvsC80qgx8GDlLQj9+HOjKlZLYVk3sTBtB3O7UMBSe3slipMhEvsR1iTC5Dzzx+D32l+TI6+V1Klmb8XA8OJ1s6PFqdWrapuGWcz0BpYkfDvkEw5mrEcB5wKEvlK8j0Y1R9W5JbhziyWa/4uuiIOttJygvu6k0C8cwVHnoes0AtqQXdcdJihLPO9Bk0iz8cTLZTblQoee/JIPiWWdMZ6Y7IlCyBnG/PN6Jom9FnwSbE8J3p7mq5iTCz8p5CUq+36Iyoh6tbWLnzJxsF9YpHkden7XQO9TirkkMrnKBWI8RMgYFA3veIPtOKcT3E5w/xK2mrvaFTYcfdxnT7THPilygji+vtBU5w1fWJS074fn5//SqE8u3W0RzaBcNMnybVKsk2ii56tENyiFyzXyU8Qn++SzacdcUk3tJsyHbk8Q1/gXe9I6qLlSWbAR0VZqe+Rx89tvE7bxXN1U88V5YAhKW4PPPZ9ASMgjjr4gKP7Lbzo9nFGI3W4qFvjxFLptUi8YKVUcVahLKRwmBwXCVa/HJI5K73675YkCpEcnZLYofv00laslVjU49gctbVIAeOFGYaDAIVA0KN+aE3lVUtma66AFmvM5QdDcADH86Q6XTto8GXZo+nVmKT8HJcsxByvU4zFwNGTDoHyNX3iXvM2T4Jrd9lC6rNgB4f3hdDym8YbXI4a/Iqkr2hb5PKPIfhKFrPD1ohr4S1nxu7AJk740bQefoLiyqF+vo+/VoHYDhu39c/+vd63/+Et0wDX+qhzdhN6OYr2D4evHI/ZDMr8fbS8cw2m9aKVjsgkFInn0Ns/NM7IPedP0g9AdXbQcoGePVrnazjdZJ3CWC2X4NbUz4Gwpuwu64HKL5/MD4+B7DgJ8XRhQW+CigD92ciKmvmnWjaOzGkW7KdqNlN5SMgNANTKspyA0Wg0no8JObMi7GF6cvvlx0M83XBpqRG/nujf1BYFWLj57NB0zQ+zihDGk6Cg72a7/2a7/2a7/2a7/2a7/2a7/2a7/2a7/260+//gutXB4pACgAAA== | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000018/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000018/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000018/task.toml

@@ -6,7 +6,7 @@ description = "Persist sublattice metadata atomically and track the root dispatc
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000019/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000019/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000019/task.toml

@@ -6,7 +6,7 @@ description = "Bulk-delete dispatches by status filter"
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000020/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000020/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000020/task.toml

@@ -6,7 +6,7 @@ description = "I'm working with a custom ACSet implementation, and `elements(myS
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Unknown"
 domain = "code"
 keywords = ["code", "Unknown"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000022/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000022/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000022/task.toml

@@ -6,7 +6,7 @@ description = "Test accounts can't sign EIP712 messages"
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000023/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com

tasks/format-code-task-000023/environment/setup/setup.sh

@@ -21,12 +21,31 @@ echo "$BASE" > "$M/base"
 # Images are built with history truncated at the base. If one is not, the fix could be read out of git log,
 # so .git is hidden while the agent works and put back for grading.
 LATER=$(git rev-list --all --not "$BASE" 2>/dev/null | head -n 5 | grep -c . || true)
+rm -rf /testbed/node_modules/.cache /testbed/node_modules/.vitest 2>/dev/null; true
 rm -f /tmp/fail.log /tmp/pass.log /tmp/patch.diff /tmp/test_patch.diff /tmp/*.log 2>/dev/null; rm -rf /tmp/claude-0 /tmp/claude-* /tmp/testem-* /tmp/puppeteer_dev_chrome_profile-* 2>/dev/null; rm -f /tmp/test_files.json 2>/dev/null; rm -rf /tmp/jest_* /tmp/jest-* /tmp/build /tmp/build_env 2>/dev/null; rm -rf /tmp/pytest-of-root /tmp/pytest-* /tmp/.pytest_cache /tmp/__pycache__ 2>/dev/null; rm -rf /tmp/go-build* /tmp/standards /tmp/wordpress /tmp/zig-* /tmp/testbase /tmp/testbed 2>/dev/null; rm -f /tmp/tmp*.tmp /tmp/*.bak /tmp/expect* /tmp/butwas* 2>/dev/null; rm -rf /root/.cache/go-build 2>/dev/null; rm -rf /tests 2>/dev/null; find /logs -mindepth 1 -delete 2>/dev/null; mkdir -p /logs/agent /logs/verifier /logs/artifacts; chmod 777 /logs/agent /logs/verifier /logs/artifacts; find /var/log -type f -delete 2>/dev/null || true; rm -rf /var/lib/postgresql/*/*/log /var/lib/postgresql/*/*/pg_log 2>/dev/null || true; find /var/lib/mysql /var/lib/mongodb -type f -name '*.log' -delete 2>/dev/null || true; rm -rf /root/.npm/_logs /root/.babel.json /root/.pytest_cache 2>/dev/null || true; find / -maxdepth 4 -xdev -name task_description.md -path '*/.build_env/*' -delete 2>/dev/null || true; true
 git clean -fdx --exclude=node_modules --exclude=bower_components --exclude=.husky --exclude=vendor --exclude=third_party --exclude=_deps --exclude=vcpkg_installed --exclude=.venv --exclude=venv --exclude=.gradle --exclude=target --exclude=.build --exclude=lib --exclude=.bundle --exclude=Manifest.toml --exclude=_build --exclude=.stack-work --exclude=dist-newstyle >/dev/null 2>&1
 find /root/.m2 -type f \( -name '*-SNAPSHOT.jar' -o -name '*-SNAPSHOT-sources.jar' -o -name '*-SNAPSHOT-tests.jar' -o -name '*-SNAPSHOT-test-sources.jar' \) -delete 2>/dev/null; rm -rf /root/.julia/compiled 2>/dev/null; rm -rf /root/.gradle/caches/build-cache-* /root/.gradle/daemon 2>/dev/null; rm -rf /root/.gradle/caches/*/scripts /root/.gradle/caches/jars-* 2>/dev/null; rm -rf /root/.cache/bazel 2>/dev/null; true
 if [ "$LATER" -gt 0 ]; then
-  mv "$CWD/.git" "$M/git-hidden"
-  echo "history not truncated at ${BASE:0:12}: .git hidden while the agent works"
+  # mimoagent's default git_leak_prevention is "strip": physically remove the fix-bearing future commits in place so
+  # .git stays usable and nothing leaks, even to a root agent. Hide .git only if the strip can't be verified; grading
+  # (code_test.sh) restores a hidden .git before it applies the test patch.
+  if ( set -eo pipefail
+git checkout --detach $BASE 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/heads | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git remote | xargs -r -n1 git remote remove 2>/dev/null || true
+git for-each-ref --format="%(refname)" refs/replace refs/notes refs/stash refs/remotes refs/pull 2>/dev/null | while read r; do git update-ref -d "$r" 2>/dev/null; done || true
+git for-each-ref --format="%(refname)" refs/tags | while read t; do if ! git merge-base --is-ancestor "$t" $BASE 2>/dev/null; then git tag -d "${t#refs/tags/}" >/dev/null 2>&1; fi; done || true
+git reflog expire --expire=now --all 2>/dev/null || true
+git -c gc.pruneExpire=now -c gc.cruftPacks=false gc --prune=now 2>/dev/null || true
+set -euo pipefail
+TARGET_TIMESTAMP=$(git show -s --format=%ci $BASE)
+AFTER_TIMESTAMP=$(date -d "$TARGET_TIMESTAMP + 1 second" '+%Y-%m-%d %H:%M:%S')
+COMMIT_COUNT=$(git log --oneline --all --since="$AFTER_TIMESTAMP" | wc -l)
+[ "$COMMIT_COUNT" -eq 0 ] ); then
+    echo "history not truncated at ${BASE:0:12}: future commits stripped in place"
+  else
+    mv "$CWD/.git" "$M/git-hidden" && echo "history not truncated and unstrippable: .git hidden while the agent works"
+  fi
 fi
 write_blocklist
 

tasks/format-code-task-000023/task.toml

@@ -6,7 +6,7 @@ description = "The project compiler cache is used on every project load, but its
 keywords = ["mimo-v2.6-rl", "code"]
 
 [metadata]
-adapter = "mimo_harbor 1.1.0"
+adapter = "mimo_harbor 1.2.0"
 category = "Python"
 domain = "code"
 keywords = ["code", "Python"]
@@ -34,7 +34,7 @@ build_timeout_sec = 1800.0
 
 [environment.healthcheck]
 # one-time setup before the agent (environment/setup/setup.sh)
-command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
+command = "bash -c 'test -f /var/lib/mimo/ready || { mkdir -p /var/lib/mimo && echo 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 | base64 -d | tar -xzf - -C /var/lib/mimo && bash /var/lib/mimo/setup.sh; }'"
 timeout_sec = 1200.0
 retries = 0
 interval_sec = 5.0

tasks/format-code-task-000024/environment/setup/files/blocklist

@@ -31,3 +31,32 @@
 0.0.0.0 html.duckduckgo.com
 0.0.0.0 search.brave.com
 0.0.0.0 stackoverflow.com
+0.0.0.0 huggingface.co
+0.0.0.0 www.huggingface.co
+0.0.0.0 hf.co
+0.0.0.0 datasets-server.huggingface.co
+0.0.0.0 cdn-lfs.huggingface.co
+0.0.0.0 cdn-lfs-us-1.huggingface.co
+0.0.0.0 cdn-lfs-eu-1.huggingface.co
+0.0.0.0 xethub.hf.co
+0.0.0.0 cas-bridge.xethub.hf.co
+0.0.0.0 cas-server.xethub.hf.co
+0.0.0.0 transfer.xethub.hf.co
+0.0.0.0 pypi.org
+0.0.0.0 files.pythonhosted.org
+0.0.0.0 registry.npmjs.org
+0.0.0.0 registry.yarnpkg.com
+0.0.0.0 crates.io
+0.0.0.0 static.crates.io
+0.0.0.0 rubygems.org
+0.0.0.0 repo1.maven.org
+0.0.0.0 search.maven.org
+0.0.0.0 nuget.org
+0.0.0.0 api.nuget.org
+0.0.0.0 packagist.org
+0.0.0.0 repo.packagist.org
+0.0.0.0 hex.pm
+0.0.0.0 cdn.jsdelivr.net
+0.0.0.0 unpkg.com
+0.0.0.0 esm.sh
+0.0.0.0 cdnjs.cloudflare.com