From e5a779ced2a2eb6697682aa4533501505158d88a Mon Sep 17 00:00:00 2001
From: Keysat <licensing@keysat.xyz>
Date: Sat, 9 May 2026 11:59:55 -0500
Subject: [PATCH] Strip prepare/build scripts from vendored keysat-client
 package.json

When npm install runs in server/ and processes the file: dep at
vendor/keysat-licensing-client/, it fires the vendor's 'prepare'
script even with --ignore-scripts (npm bug for file/git deps).
The prepare script calls tsup which isn't installed in the build
container, so the build fails with 'sh: 1: tsup: not found'.

The vendored copy ships its prebuilt dist/ in the repo, so we don't
need tsup. Drop the scripts entirely.
---
 vendor/keysat-licensing-client/package.json | 13 ++-----------
 1 file changed, 2 insertions(+), 11 deletions(-)

diff --git a/vendor/keysat-licensing-client/package.json b/vendor/keysat-licensing-client/package.json
index c057de0..f5ff606 100644
--- a/vendor/keysat-licensing-client/package.json
+++ b/vendor/keysat-licensing-client/package.json
@@ -14,12 +14,7 @@
     }
   },
   "files": ["dist", "README.md", "LICENSE"],
-  "scripts": {
-    "build": "tsup src/index.ts --format esm,cjs --dts --clean",
-    "test": "vitest run",
-    "prepare": "npm run build",
-    "prepublishOnly": "npm run build && npm test"
-  },
+  "scripts": {},
   "keywords": [
     "bitcoin",
     "licensing",
@@ -34,9 +29,5 @@
     "@noble/ed25519": "^2.0.0",
     "@noble/hashes": "^1.3.3"
   },
-  "devDependencies": {
-    "typescript": "^5.3.0",
-    "tsup": "^8.0.0",
-    "vitest": "^1.0.0"
-  }
+  "devDependencies": {}
 }