fix: stop shadowing the repo pnpm lockfile on Vercel (both apps)

AGENTS.md

@@ -0,0 +1,33 @@
+# Project agent memory
+
+This file is the project's committed home for project-intrinsic agent knowledge: build, test, release, architecture, and sharp-edge notes that should travel with the code.
+
+- Add durable project-specific notes here as they are discovered through real work.
+
+## Vercel deploys and the pnpm workspace root
+
+Every Vercel project sets `rootDirectory` to a package (`ripguard` and
+`ripguard-testnet` -> `packages/app`, `ripguard-sol` -> `packages/app-sol`) with
+"include source files outside the root directory" on. Vercel therefore runs
+`pnpm install` *inside* the package directory, not at the repo root.
+
+pnpm picks the **nearest** `pnpm-workspace.yaml` walking up from the cwd. A
+`pnpm-workspace.yaml` inside `packages/<app>/` makes that package its own workspace
+root, so the repo-root `pnpm-lock.yaml` is ignored and every dependency is re-resolved
+from its semver range at deploy time. Production then drifts away from CI and from
+local, and an unrelated upstream release can break the build weeks after the last
+green deploy — which is exactly what took ripguard.xyz down. Both nested files have
+been removed; keep pnpm settings (`ignoredBuiltDependencies`, overrides) in the root
+`pnpm-workspace.yaml` / root `package.json` only, and do not reintroduce a
+`pnpm-workspace.yaml` under `packages/`.
+
+Verify a deploy the way Vercel does, not the way CI does:
+`cd packages/<app> && CI=1 pnpm install && ./node_modules/.bin/next build`.
+A green `pnpm install --frozen-lockfile` at the repo root does not exercise this path.
+
+## Maintaining this file
+
+Keep this file for knowledge useful to almost every future agent session in this project.
+Do not repeat what the codebase already shows; point to the authoritative file or command instead.
+Prefer rewriting or pruning existing entries over appending new ones.
+When updating this file, preserve this bar for all agents and keep entries concise.

CLAUDE.md

@@ -0,0 +1 @@
+AGENTS.md

pnpm-workspace.yaml

@@ -1,2 +1,6 @@
 packages:
   - "packages/*"
+
+ignoredBuiltDependencies:
+  - sharp
+  - unrs-resolver