A peer satisfied by a file: dependency is linked to a directory aube never creates

[mwolson]

• Repo: https://github.com/mwolson/tmp-aube-issues
• Case: file-dep-peer-link-dangling
• aube: 2.8.2 linux-x64 (2026-10-23), also 2.7.0 through 2.8.1

Workspace member app depends on react from file:deps/react and on use-sync-external-store@1.5.0, which peers on react. After aube install --frozen-lockfile from a pnpm 12.14.0 lockfile, use-sync-external-store's sibling react link points at ../../react@file+app+deps+react/node_modules/react, but aube materializes the package as react@file+<hash>. So require("react") from use-sync-external-store fails, with and without --disable-global-virtual-store. pnpm links the file: package.

PNPM_BIN=/path/to/real/pnpm ./repro.sh

With aube's own aube-lock.yaml, the link works when the global virtual store is off and dangles when it is on. At the workspace root the bug is hidden, because Node walks up to the root node_modules/react.

Found in pingdotgg/t3code, where @react-navigation/native-stack can't resolve the react-native-screens tarball that apps/mobile depends on, so apps/mobile fails typecheck under aube.

[jdx]

Thanks for the report and the repro. I confirmed it on current main (the peer link dangles with and without the global virtual store) and opened #1850 based on your fork patch.

AI-assisted — Tool: Claude Code; model: anthropic/claude-sonnet-5-5; version: unavailable.

🤖 Generated with Claude Code

[github-actions[bot]]

Implemented in #1850: fix(linker): link peers satisfied by file: dependencies to the directory aube creates