From 372490707aad948f5e1ae62ed9db29cb7fd52db6 Mon Sep 17 00:00:00 2001
From: Hare <kei.hiracchi.0928@gmail.com>
Date: Fri, 29 May 2026 09:28:49 +0900
Subject: [PATCH] chore: use static crate fetch for nix vendor

---
 package.nix | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/package.nix b/package.nix
index 07ba9312..d969b880 100644
--- a/package.nix
+++ b/package.nix
@@ -40,7 +40,30 @@ rustPlatform.buildRustPackage rec {
     filter = sourceFilter;
   };
 
-  cargoLock.lockFile = ./Cargo.lock;
+  cargoHash = "sha256-8ZT5moKFxj/5vbp5rsUG7UkPLY1fvQKhYTyjRWQ58xk=";
+
+  depsExtraArgs = {
+    # nixpkgs 25.11's fetchCargoVendor still uses crates.io's API
+    # download endpoint in this environment, which returns 403 while the
+    # immutable static CDN endpoint works. Keep this local package build on
+    # static.crates.io until the upstream fetcher is fixed in our nixpkgs pin.
+    buildPhase = ''
+      runHook preBuild
+
+      if [ -n "''${cargoRoot-}" ]; then
+        cd "$cargoRoot"
+      fi
+
+      vendor_util="$(command -v fetch-cargo-vendor-util-v2 || command -v fetch-cargo-vendor-util)"
+      cp "$vendor_util" ./fetch-cargo-vendor-util-static
+      substituteInPlace ./fetch-cargo-vendor-util-static \
+        --replace-fail 'https://crates.io/api/v1/crates/{pkg["name"]}/{pkg["version"]}/download' \
+                       'https://static.crates.io/crates/{pkg["name"]}/{pkg["version"]}/download'
+      ./fetch-cargo-vendor-util-static create-vendor-staging ./Cargo.lock "$out"
+
+      runHook postBuild
+    '';
+  };
 
   strictDeps = true;