From 1dca110f3bad4f97de33f0635113f5571018c6d7 Mon Sep 17 00:00:00 2001
From: William Valentin <william.valentin.info@gmail.com>
Date: Sun, 15 Feb 2026 18:50:13 -0800
Subject: [PATCH] fix(nix): pin fetchPnpmDeps hash

---
 docs/plans/state.json | 2 +-
 nix/package.nix       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/plans/state.json b/docs/plans/state.json
index 87b7870..535d01e 100644
--- a/docs/plans/state.json
+++ b/docs/plans/state.json
@@ -72,7 +72,7 @@
         "flake.lock",
         "nix/package.nix"
       ],
-      "test_status": "nix build now evaluates; still requires real pnpm.fetchDeps hash from first build"
+      "test_status": "nix build dependency hash resolved (fetchPnpmDeps hash pinned from build output); run nix build .#flynn to verify end-to-end in host environment"
     },
 
     "deployment-targets-paas": {
diff --git a/nix/package.nix b/nix/package.nix
index 27d6592..31e5c1a 100644
--- a/nix/package.nix
+++ b/nix/package.nix
@@ -29,7 +29,7 @@ pkgs.stdenv.mkDerivation rec {
 
     # NOTE: Update this hash after the first `nix build` by copying the
   # "got: sha256-..." value from the error message.
-    hash = lib.fakeHash;
+    hash = "sha256-dyxGSSLoMVEKgTs+owdgRZw9uvJhQLEFsib/GPyxtxM=";
   };
 
   nativeBuildInputs = [