# Dependencies

node_modules/

# Build output. `stoneware build` writes here; deleting it is always safe.

.stoneware/

# Scratch output from the payload-budget test, removed on success.

.stoneware-budget/

# Scratch projects built by the build/deploy tests. These live inside the repo

# rather than in a temp directory because the fixture's config imports

# "stoneware" and needs the project's module resolution to find it.

.build-security/

.relocatable-build/

.relocatable-run-elsewhere/

.vercel-target-test/

.cli-commands-test/

.export-csp-test/

.dev-refresh-test/

.hot-reload-test/

.no-output-at-all/

.no-output-either/

.vercel-assets-test/

.vercel-assets-traced/

.inline-assets-test/

.static-range-test/

.vercelsim/

# Client chunks copied by `build --target vercel` in the scratch projects.

public/_stoneware/

# Vercel's own local artefacts, if the CLI is ever run here.

.vercel/

# Package tarballs from `bun pm pack` / `npm pack`.

*.tgz

# Secrets. Bun loads .env files natively, so they never reach the repo.

# .env.example is the tracked template and must stay tracked.

.env

.env.*

!.env.example

# npm auth. `npm config set //registry.npmjs.org/:_authToken=...` writes to

# ~/.npmrc, but a stray project-level one would carry a publish token.

.npmrc

# Logs

*.log

# TypeScript incremental cache

*.tsbuildinfo

# Test coverage

coverage/

# Editors and tooling

.claude/

.vscode/

.idea/

# OS cruft

.DS_Store

Thumbs.db

# Local-only docs. Everything else under version control stays tracked.

#

# Do not replace these with a blanket `*.md` rule. That was tried, and because an

# ignored file never appears in `git status`, new docs went missing with no

# untracked marker to notice. Opt files out by name instead, so this list is the

# one place to look when a document seems to have vanished.

PUBLISHING.md

notes/

*.local.md

# Note: bun.lock is deliberately NOT ignored. Commit it so installs are

# reproducible.

.csp-lab/