diff --git a/.gitea/workflows/deploy-staging.yml b/.gitea/workflows/deploy-staging.yml
index 82669ee..c45d15a 100644
--- a/.gitea/workflows/deploy-staging.yml
+++ b/.gitea/workflows/deploy-staging.yml
@@ -88,6 +88,11 @@ jobs:
           # "Module not found: convex/_generated/api" at build time.
           # Copy it manually so the Dockerfile has the generated types it needs.
           cp -r convex out/full/convex
+          # turbo prune cannot fully parse the npm 11 lockfile format, so it generates
+          # an incomplete out/package-lock.json that omits non-hoisted workspace entries
+          # (e.g. apps/storefront/node_modules/@heroui/react). Replace it with the full
+          # root lockfile so that npm ci in Docker installs every package correctly.
+          cp package-lock.json out/package-lock.json
 
       - name: Authenticate with registry
         # docker login sends HTTPS even for HTTP-only (insecure) registries, so it