fix: scope Gitea registry to @mosaic packages only (#374)

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mosaic/cli",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "repository": {
     "type": "git",
     "url": "https://git.mosaicstack.dev/mosaic/mosaic-stack.git",

packages/cli/src/commands/gateway/daemon.ts

@@ -211,10 +211,23 @@ const GITEA_REGISTRY = 'https://git.mosaicstack.dev/api/packages/mosaic/npm/';
 
 export function installGatewayPackage(): void {
   console.log('Installing @mosaic/gateway from Gitea registry...');
-  execSync(`npm install -g @mosaic/gateway@latest --registry=${GITEA_REGISTRY}`, {
+  // Scope only @mosaic packages to Gitea; all other deps resolve from npmjs normally
+  const npmrcContent = `@mosaic:registry=${GITEA_REGISTRY}\n`;
+  const tmpNpmrc = join(GATEWAY_HOME, '.npmrc');
+  ensureDirs();
+  writeFileSync(tmpNpmrc, npmrcContent);
+  try {
+    execSync(`npm install -g @mosaic/gateway@latest --userconfig=${tmpNpmrc}`, {
       stdio: 'inherit',
       timeout: 120_000,
     });
+  } finally {
+    try {
+      unlinkSync(tmpNpmrc);
+    } catch {
+      // Ignore cleanup failure
+    }
+  }
 }
 
 export function uninstallGatewayPackage(): void {

packages/mosaic/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mosaic/mosaic",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "repository": {
     "type": "git",
     "url": "https://git.mosaicstack.dev/mosaic/mosaic-stack.git",