From fa89a00aeba7cc9a51352e13b21667e706b0761f Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 3 Jul 2026 13:37:55 -0400
Subject: [PATCH] Add --frozen-lockfile to CI Checks

Normal bun install treats bun.lock as updatable. If package.json requests a requirement bun.lock doesn't satisfy, bun quietly rewrites the lock and moves on. The committed lock is never updated.
---
 .github/workflows/ci.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bea69ae..ba20d8cb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -111,3 +111,13 @@ jobs:
       # Python, so no uv sync / deps needed.
       - name: triage.md is up to date with triage.jsonl
         run: make triage-check
+
+  ui-lockfile:
+    name: ui bun.lock in sync
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: oven-sh/setup-bun@v2
+      - name: ui/package.json and ui/bun.lock agree
+        working-directory: ui
+        run: bun install --frozen-lockfile
\ No newline at end of file