From 882d028ad8fde0cc268b469627c289b405d18b94 Mon Sep 17 00:00:00 2001
From: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
Date: Tue, 2 Jun 2026 11:14:41 -0500
Subject: [PATCH] fix(plugin): restore private git install fallback (#30430)

---
 bun.lock                    |  1 +
 package.json                |  3 ++-
 patches/pacote@21.5.0.patch | 18 ++++++++++++++++++
 3 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 patches/pacote@21.5.0.patch

diff --git a/bun.lock b/bun.lock
index 431668f25..472668dc6 100644
--- a/bun.lock
+++ b/bun.lock
@@ -842,6 +842,7 @@
     "gcp-metadata@8.1.2": "patches/gcp-metadata@8.1.2.patch",
     "@ai-sdk/xai@3.0.82": "patches/@ai-sdk%2Fxai@3.0.82.patch",
     "@standard-community/standard-openapi@0.2.9": "patches/@standard-community%2Fstandard-openapi@0.2.9.patch",
+    "pacote@21.5.0": "patches/pacote@21.5.0.patch",
     "@npmcli/agent@4.0.0": "patches/@npmcli%2Fagent@4.0.0.patch",
     "@silvia-odwyer/photon-node@0.3.4": "patches/@silvia-odwyer%2Fphoton-node@0.3.4.patch",
   },
diff --git a/package.json b/package.json
index a403ff1e3..7f8f28740 100644
--- a/package.json
+++ b/package.json
@@ -145,6 +145,7 @@
     "solid-js@1.9.10": "patches/solid-js@1.9.10.patch",
     "virtua@0.49.1": "patches/virtua@0.49.1.patch",
     "@ai-sdk/xai@3.0.82": "patches/@ai-sdk%2Fxai@3.0.82.patch",
-    "gcp-metadata@8.1.2": "patches/gcp-metadata@8.1.2.patch"
+    "gcp-metadata@8.1.2": "patches/gcp-metadata@8.1.2.patch",
+    "pacote@21.5.0": "patches/pacote@21.5.0.patch"
   }
 }
diff --git a/patches/pacote@21.5.0.patch b/patches/pacote@21.5.0.patch
new file mode 100644
index 000000000..a681e1c2a
--- /dev/null
+++ b/patches/pacote@21.5.0.patch
@@ -0,0 +1,18 @@
+diff --git a/lib/git.js b/lib/git.js
+index 000ee9fc..a2a6cbb7 100644
+--- a/lib/git.js
++++ b/lib/git.js
+@@ -254,8 +254,11 @@ class GitFetcher extends Fetcher {
+           resolved: this.resolved,
+           integrity: null, // it'll always be different, if we have one
+         }).extract(tmp).then(() => handler(`${tmp}${this.spec.gitSubdir || ''}`), er => {
+-          // fall back to ssh download if tarball fails
+-          if (er.constructor.name.match(/^Http/)) {
++          // fall back to clone if the tarball download fails due to an
++          // HTTP error or if the response is not a valid tarball (e.g.
++          // a hosted provider returning an HTML sign-in page with 200)
++          if ((typeof er.statusCode === 'number' && er.statusCode >= 400) ||
++              /^TAR_/.test(er.code)) {
+             return this.#clone(handler, false)
+           } else {
+             throw er