From be38e919e0e887b59b02046be4119fee01bd7bbe Mon Sep 17 00:00:00 2001
From: Roger Chappel <miscanalysis@gmail.com>
Date: Sun, 26 Jul 2026 23:11:54 +1000
Subject: [PATCH 1/3] chore: declare TypeScript toolchain

---
 package-lock.json | 33 +++++++++++++++++++++++++++++++++
 package.json      |  5 ++++-
 2 files changed, 37 insertions(+), 1 deletion(-)
 create mode 100644 package-lock.json

diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..0533cd3
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,33 @@
+{
+  "name": "@bargekit/core",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@bargekit/core",
+      "version": "0.1.0",
+      "license": "MIT",
+      "bin": {
+        "bargekit": "src/cli.js"
+      },
+      "devDependencies": {
+        "typescript": "5.9.3"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    }
+  }
+}
diff --git a/package.json b/package.json
index 1579322..5b37877 100644
--- a/package.json
+++ b/package.json
@@ -53,5 +53,8 @@
   "bugs": {
     "url": "https://github.com/rogerchappel/bargekit/issues"
   },
-  "homepage": "https://github.com/rogerchappel/bargekit#readme"
+  "homepage": "https://github.com/rogerchappel/bargekit#readme",
+  "devDependencies": {
+    "typescript": "5.9.3"
+  }
 }

From 99401fe5a7296c32f362b8010b1267743997092c Mon Sep 17 00:00:00 2001
From: Roger Chappel <miscanalysis@gmail.com>
Date: Sun, 26 Jul 2026 23:12:46 +1000
Subject: [PATCH 2/3] ci: use clean npm installs

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d37016e..084dd2e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           node-version: 22
       - name: Install dependencies
-        run: npm install
+        run: npm ci
       - name: npm run check
         run: npm run check
       - name: npm run build

From 530d358fa655231923a27e318b250ed1f2a81307 Mon Sep 17 00:00:00 2001
From: Roger Chappel <miscanalysis@gmail.com>
Date: Sun, 26 Jul 2026 23:12:46 +1000
Subject: [PATCH 3/3] docs: document reproducible contributor setup

---
 CONTRIBUTING.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 8af807c..1c99b98 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -64,6 +64,14 @@ Next recommended task:
 
 Every contribution should include verification.
 
+This repository uses npm and commits `package-lock.json`. Install the exact
+development toolchain from a fresh checkout before running checks:
+
+```sh
+npm ci
+npm run release:check
+```
+
 Examples:
 
 - Documentation: inspect rendered Markdown or review the diff.