From 7f9a0cd550f6a643abffafe9e4c9736bfa538ef2 Mon Sep 17 00:00:00 2001
From: Lily Shen <115414357+lilyshen0722@users.noreply.github.com>
Date: Sun, 25 Oct 2026 19:27:55 -0700
Subject: [PATCH] fix(ci): install the package before the version guard packs
 it

Since #2739 bundled @commonlyai/seats into the cli, its prepack refuses
to pack without node_modules, so the guard failed on every main push.
Run the same `npm ci --ignore-scripts` npm-publish runs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VD3azQJZrdMmw8g51iscWD
---
 .github/workflows/package-version-guard.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/package-version-guard.yml b/.github/workflows/package-version-guard.yml
index 5cf9ca7c97..c9c98cb36a 100644
--- a/.github/workflows/package-version-guard.yml
+++ b/.github/workflows/package-version-guard.yml
@@ -128,6 +128,9 @@ jobs:
           git merge-base --is-ancestor "$sha" origin/main \
             || { echo "::error::$tag points at $sha, which is not on main"; exit 1; }
           git checkout -q --detach "$sha"
+          # Same install as npm-publish: the cli bundles packages/seats, and its
+          # prepack refuses to pack without node_modules/@commonlyai/seats.
+          ( cd "$PKG" && npm ci --ignore-scripts )
           bash scripts/npm-artifact-diff.sh "$PKG" "$reg_v" \
             || { echo "::error::$name $reg_v does not match the commit its tag names ($tag → $sha)"; exit 1; }
           echo "✓ $name $reg_v = $tag = $sha"