Skip to content

chore: the staged hub bundle's .opencode package-lock pins msgpackr-extract-darwin-arm64 (mac npm artifact on the Linux hub) #866

Description

@aarontrowbridge

Important

Problem — Found during the #856 sweep (2026-09-07): the staged server bundle's .opencode directory carries a package-lock pinning msgpackr-extract-darwin-arm64 — a macOS-arch npm artifact synced from the mac — on the Linux hub. If msgpackr's native-extract path resolves through it, plugin loading on the hub may silently degrade or fail on the affected module.
Approach — Verify whether the hub's plugin runtime actually resolves that artifact (it may be inert lock noise — prove which, with evidence, before touching anything); if load-bearing: regenerate the lock on Linux (or make the staged bundle platform-agnostic), and add the platform-artifact check to the #856 guard test's sweep so a mac-synced lock can't land again.
Found by: the #856 chore cast's honesty sweep (PR #865 description).

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    hitlNeeds human decision or review

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions