#lockfile

Codex Added a Package but the Lockfile Did Not Change

Codex edits package.json but never ran npm install, so package-lock.json diverges. How to enforce lockfile updates via setup.sh, CI, and AGENTS.md.