diff --git a/.github/workflows/engineer-bot-followup.yml b/.github/workflows/engineer-bot-followup.yml
index 73adffcd..c771d888 100644
--- a/.github/workflows/engineer-bot-followup.yml
+++ b/.github/workflows/engineer-bot-followup.yml
@@ -103,6 +103,10 @@ jobs:
       - name: Install connector deps (npm ci)
         run: npm ci
 
+      - name: Restore lockfile after dependency installation
+        # Keep setup-jfrog's registry rewrite out of the agent's changes.
+        run: git restore --source=HEAD --worktree -- package-lock.json
+
       # Scope the JFrog credential away from the model-driven followup step:
       # `npm ci` above consumed ~/.npmrc, and the agent's `npm test` doesn't need
       # the registry. (Addresses the reviewer-bot finding on the odbc onboarding PR.)
diff --git a/.github/workflows/engineer-bot.yml b/.github/workflows/engineer-bot.yml
index 04917627..7e1ef2ee 100644
--- a/.github/workflows/engineer-bot.yml
+++ b/.github/workflows/engineer-bot.yml
@@ -81,10 +81,13 @@ jobs:
 
       - name: Install connector deps (npm ci)
         # `prepare` lifecycle runs `npm run build` (tsc) automatically here, so the
-        # dist/ + lib/version.ts are built for the agent. Both are gitignored, so
-        # this leaves no tracked-file churn for publish to trip on.
+        # dist/ + lib/version.ts are built for the agent. Both are gitignored.
         run: npm ci
 
+      - name: Restore lockfile after dependency installation
+        # Keep setup-jfrog's registry rewrite out of the agent's changes.
+        run: git restore --source=HEAD --worktree -- package-lock.json
+
       # Scope the JFrog credential AWAY from the model-driven steps. setup-jfrog
       # wrote ~/.npmrc with an embedded auth token + exported JFROG_ACCESS_TOKEN to
       # $GITHUB_ENV; `npm ci` above already consumed them, and the agent's test