build(desktop-artifact): use BUN_FROZEN_LOCKFILE env var instead of --no

- Remove bun.lock copy to staging directory. The staging package.json is a flat
  workspace subset with structural differences from the repo lockfile, causing
  resolution conflicts in frozen mode.
- Set BUN_FROZEN_LOCKFILE=0 environment variable instead of passing
  --no-frozen-lockfile. This is cleaner and lets bun generate a fresh lockfile
  for the staging subset without conflicts.
- Add @effect/platform-node-shared to support the build dependencies.

Author: tyulyukov

apps/server/package.json

@@ -26,6 +26,7 @@
     "@anthropic-ai/claude-agent-sdk": "^0.2.77",
     "@effect/platform-bun": "catalog:",
     "@effect/platform-node": "catalog:",
+    "@effect/platform-node-shared": "catalog:",
     "@effect/sql-sqlite-bun": "catalog:",
     "@pierre/diffs": "^1.1.0-beta.16",
     "effect": "catalog:",

bun.lock

@@ -12,6 +12,7 @@
       "@effect/atom-react": "4.0.0-beta.43",
       "@effect/platform-bun": "4.0.0-beta.43",
       "@effect/platform-node": "4.0.0-beta.43",
+      "@effect/platform-node-shared": "4.0.0-beta.43",
       "@effect/sql-sqlite-bun": "4.0.0-beta.43",
       "@effect/vitest": "4.0.0-beta.43",
       "@effect/language-service": "0.84.2",

package.json

@@ -684,28 +684,22 @@ const buildDesktopArtifact = Effect.fn("buildDesktopArtifact")(function* (
   const stagePackageJsonString = yield* encodeJsonString(stagePackageJson);
   yield* fs.writeFileString(path.join(stageAppDir, "package.json"), `${stagePackageJsonString}\n`);
 
-  const repoLockfile = path.join(repoRoot, "bun.lock");
-  const stageLockfile = path.join(stageAppDir, "bun.lock");
-  if (yield* fs.exists(repoLockfile)) {
-    yield* fs.copy(repoLockfile, stageLockfile);
-    yield* Effect.log(
-      "[desktop-artifact] Copied bun.lock to staging directory for deterministic installs",
-    );
-  }
-
   yield* Effect.log("[desktop-artifact] Installing staged production dependencies...");
   yield* runCommand(
     ChildProcess.make({
       cwd: stageAppDir,
+      env: {
+        ...process.env,
+        // The staging package.json is a flat non-workspace subset of the monorepo.
+        // There is no pre-existing lockfile, so bun generates a fresh one during
+        // install. In CI, bun defaults to --frozen-lockfile when it detects CI=true,
+        // which would reject any install that produces a new lockfile. Explicitly
+        // disable it so the staging install can resolve and lock its own dependencies.
+        BUN_FROZEN_LOCKFILE: "0",
+      },
       ...commandOutputOptions(options.verbose),
-      // Windows needs shell mode to resolve .cmd shims (e.g. bun.cmd).
       shell: process.platform === "win32",
-      // The staging package.json is a flat non-workspace subset of the monorepo,
-      // so the copied bun.lock will have structural differences. Allow bun to
-      // reconcile the lockfile while still using it for dependency resolution
-      // guidance. Without this, CI (which defaults to --frozen-lockfile) rejects
-      // the install because the lockfile doesn't match the staged package.json.
-    })`bun install --production --no-frozen-lockfile`,
+    })`bun install --production`,
   );
 
   const buildEnv: NodeJS.ProcessEnv = {