# Build context exclusions — keep the image small AND prevent secrets # from accidentally leaking into a layer. # The audit caught that the previous absence of this file shipped a # 7.6 GB build context, with .env files reachable via `COPY . .`. # Version control .git .gitignore .gitattributes # Local env / secrets .env .env.* !.env.example # Node / pnpm node_modules .pnpm-store .pnpm-debug.log npm-debug.log yarn-debug.log yarn-error.log # Next.js build artifacts (regenerated inside the image) .next out # Tooling caches .cache .turbo .eslintcache .vercel .swc # OS noise .DS_Store Thumbs.db # IDE .vscode .idea *.swp # Testing / coverage coverage .nyc_output test-results playwright-report tests/e2e/visual/snapshots.spec.ts-snapshots/*.png playwright/.cache # Project artefacts that don't belong in a runtime image .claude .husky docs AGENTS.md AUDIT-*.md SECURITY-GUIDELINES.md PROMPTS-*.md README.md *.log *.tgz # Generated / scratch .serena .superpowers .remember .audit-cache .specstory