The first lockfile was reconstructed from a node_modules tree installed with
--package-lock=false, so its entries carried no resolved or integrity fields
and npm ci could not fetch from it. Regenerated from a clean install.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The scaffold shipped with installs pinned to --package-lock=false, on a
misreading of AGENTS.md that has since been corrected. npm ci needs this file,
and npm ci is how every task worktree spins up.
Also adds 'build' to the commit-msg type list; it is a standard conventional
type and its absence rejected this very commit.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Marcos Paulo