Deploy hosts use Node 22 / npm 10, which followed broken package-lock links to empty phantom paths and failed with Cannot find module brace-expansion. Point overrides at the vendored shim and declare it as a direct dependency so npm ci resolves correctly.
westfarn