[BUG] npm ci fails after npm i when bundledDependencies are present

Is there an existing issue for this?

• I have searched the existing issues

This issue exists in the latest npm version

• I am using the latest npm

Current Behavior

npm install generates a package-lock.json that npm ci immediately rejects with hundreds of "Missing: X from lock file" errors.

npm error `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync.
npm error Missing: json-schema-to-ts@3.1.1 from lock file
npm error Missing: @babel/runtime@7.29.2 from lock file
npm error Missing: ts-algebra@2.0.0 from lock file
npm error Missing: @aws-cdk/toolkit-lib@1.16.0 from lock file
npm error Missing: @aws-cdk/cli-plugin-contract@2.182.2 from lock file
npm error Missing: @aws-cdk/cdk-assets-lib@1.4.5 from lock file
npm error Missing: @aws-cdk/cloud-assembly-api@2.1.1 from lock file
npm error Missing: @aws-cdk/cloudformation-diff@2.187.1 from lock file
npm error Missing: @aws-sdk/client-cloudformation@3.1043.0 from lock file
npm error Missing: @aws-cdk/cx-api@2.253.0 from lock file
... (310 missing entries total)

Expected Behavior

npm ci should succeed after npm install with no manual changes to package-lock.json.

Steps To Reproduce

echo '{"name":"repro","private":true,"devDependencies":{"@aws-amplify/data-construct":"^1.17.2"}}' > package.json
npm install   # succeeds
npm ci        # fails with 310 "Missing: X from lock file" errors

Environment

• npm: 10.9.7
• Node.js: v22.22.2
• OS Name: Debian container (standard nodejs devcontainer) on Debian

Start with the minimal package.json reproduction and run npm install followed by npm ci, focusing on the bundledDependencies case. Compare the generated package-lock.json with npm ci's missing-dependency errors; done means npm ci succeeds immediately after npm install without manual lockfile edits.