Refuse a shadowing barrel copy, and record the packaging contract

2026-08-17 22:34:56 +02:00
parent fee4fe632b
commit 616040fda6
7 changed files with 46 additions and 14 deletions
@@ -1,5 +1,6 @@
 .git
-# Load-bearing: a stray copy would bake in at /app/node_modules and shadow /node_modules.
+# Load-bearing both ways: a stray copy would bake in at /app/node_modules and shadow /node_modules,
+# and matching only the root one is what lets a baked plugin keep its own deps. Never `**/node_modules`.
 node_modules
 npm-debug.log
 *.log