# Explicit allowlist; runtime state and credentials never enter image layers.
**
!package.json
!server.js
!library.js
!reading-direction.js
!chapter-identity.js
!catalog.js
!backup.js
!reading-analytics.js
!reading-access.js
!public/
!public/**
!greatest/
!greatest/**
!discovery/
!discovery/**
!runtime/
!runtime/**
!scraper/
!scraper/**
!peering/
!peering/**
!tools/
!tools/**
scraper/.cache/**
scraper/logs/**
scraper/*.manifest.json
**/*.log
**/*.tmp
**/test/**
**/node_modules/**
**/.env*
**/*.pem
**/*.key