CI: pnpm install fails on @jsr/creit-tech__stellar-wallets-kit returning 404

[Benjtalkshow]

Bug: CI pnpm install --frozen-lockfile fails with 404 from JSR registry

Symptom

The build-and-lint CI job fails at the Install dependencies step with a 404 error fetching @jsr/creit-tech__stellar-wallets-kit from https://npm.jsr.io. This blocks every PR from passing CI regardless of whether the change touches anything related to wallet kit.

Root cause hypothesis

Two likely explanations:

• The package was unpublished from JSR (or the version pinned in pnpm-lock.yaml was removed)
• The CI environment needs JSR registry auth configured (.npmrc token for @jsr scope)

The package is referenced in package.json as:

"@creit-tech/stellar-wallets-kit": "npm:@jsr/creit-tech__stellar-wallets-kit@^2.0.1"

Investigation steps

• Confirm the package's status on https://jsr.io/@creit-tech/stellar-wallets-kit (does the version still exist?)
• Check whether https://npm.jsr.io/@jsr/creit-tech__stellar-wallets-kit/-/creit-tech__stellar-wallets-kit-2.0.1.tgz is fetchable with no auth
• Inspect the CI logs for the exact failing URL (it should be in the pnpm install --frozen-lockfile output)
• Try pnpm install locally with a clean store to confirm whether it's CI-specific

Possible fixes

• If the package was unpublished: pin to a published version, switch to a different stellar wallets kit, or vendor it
• If it's an auth issue: add .npmrc config to the CI workflow that registers the JSR scope, e.g.:

  @jsr:registry=https://npm.jsr.io
  

• If it's transient: retry the install in CI

Files affected

• .github/workflows/ci.yml
• package.json
• pnpm-lock.yaml (likely needs regeneration once the registry issue is resolved)

Acceptance Criteria

• pnpm install --frozen-lockfile succeeds in CI from a clean checkout
• Root cause documented in the issue (unpublished vs auth vs other)
• PRs that don't touch wallet code are no longer blocked by this install failure
• If a workaround was applied (e.g. fork/vendor), follow-up tracked separately

Additional notes

This was first surfaced by a contributor on PR #172. Several other PRs (#176, #177, #178, etc.) have been failing CI for the same reason, so unblocking this is a force-multiplier.

[linear]

BOU-190

[coderabbitai]

🔗 Related PRs

#166 - feat: implement hybrid auth with passkey-first smart wallet signing [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!

[helenahelenavanbeek-png]

@helenahelenavanbeek-png has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

I would like to work on this issue. I have experience with CI/CD, pnpm, and package registry configuration. My ETA is 2-3 hours. I will investigate the JSR registry 404 error, check package availability, fix the CI configuration with proper .npmrc setup or alternative resolution, and ensure pnpm install --frozen-lockfile succeeds. Thanks for considering!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @helenahelenavanbeek-png to this issue.

[Stephan-Thomas]

@Stephan-Thomas has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

hi, i would like to work on this.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Stephan-Thomas to this issue.

[jotel-dev]

@jotel-dev has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

pls assign me to this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @jotel-dev to this issue.

[lamborghini21]

@lamborghini21 has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

Please I will be glad to fix this issue. Kindly assign it to me. I will investigate the missing package error, verify if it is a registry or auth issue, and update the configuration so pnpm install works correctly in CI.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @lamborghini21 to this issue.

[Benjtalkshow]

Sorry guys, this issue was solved internally. Thanks