chore: move the pnpm tooling into website/, where the only package is

[macanderson]

⚠️ Requires one setting change outside this repo before merge. Vercel's Root Directory for the docs project must be website. See Before merging.

Why

The repo root carried a package.json, pnpm-workspace.yaml, and pnpm-lock.yaml describing a workspace that never linked anything:

• the root importer was literally .: {}
• zero workspace: protocol dependencies
• no catalogs, no overrides, no patches
• exactly one member — website/

It was one package with a workspace wrapped around it. The root package.json had no dependencies at all; its dev/build/typecheck scripts only forwarded to pnpm --filter website, and its rust:build/rust:test/rust:lint/rust:fmt/gate aliases have no caller anywhere in the repo (not the Makefile, not .github/, not scripts/, not .githooks/).

Nothing is shared across the two toolchains. The Rust crates aren't pnpm packages, the only build.rs shells out to nothing, there's no wasm/napi bridge, and stella ships no npm channel (binaries, Homebrew, curl | sh — confirmed in RELEASING.md and release.yml). The one thing that genuinely crosses between Rust and the site is the brand palette, and its generator is Python: docs/brand/build.py writes both stella-tui/src/palette.rs and website/src/app/tokens.css, via make brand, and never touches node.

What moved

From	To	Note
pnpm-lock.yaml	website/pnpm-lock.yaml	sole importer promoted website: → .
package.json → packageManager, engines	website/package.json	rest of the file deleted
pnpm-workspace.yaml → allowBuilds, minimumReleaseAge, minimumReleaseAgeExclude	website/pnpm-workspace.yaml	keeps the filename; drops packages:

website/pnpm-workspace.yaml keeps its name because pnpm 10+ reads those policy settings from that file rather than from .npmrc. It no longer declares a packages: list, because there is nothing to list. The minimumReleaseAge: 1440 supply-chain gate and the esbuild/sharp build approvals are preserved verbatim, comments and all — those were the two things in the root file doing real work.

The lockfile diff is three lines. No resolved version changed:

 importers:
-  .: {}
-
-  website:
+  .:

CI

docs.yml gains defaults.run.working-directory: website. Two uses: steps need explicit paths, since working-directory doesn't apply to them:

• pnpm/action-setup reads packageManager via package_json_file: website/package.json
• setup-node hashes the lockfile via cache-dependency-path: website/pnpm-lock.yaml

Both workflows' path filters drop the three root filenames — website/** already covers their new home. ci.yml only ever listed them in paths-ignore, so those lines were about to become dead.

Verification

• make gate passes end to end (rebased onto current main, post-fix(ci): unbreak main — record #722's deck growth in the size baseline #724).
• From a deleted node_modules, in website/: pnpm install --frozen-lockfile → pnpm typecheck → pnpm build all succeed. That's precisely the docs.yml sequence. The 78-page static build completes.
• --frozen-lockfile succeeding is the proof there's no dependency drift — it fails by design if the lockfile would need to change. The lockfile is byte-identical after a clean install.

Before merging

Vercel Root Directory → website. No vercel.json exists, so this is a dashboard setting and I can't change it from here. website/README.md previously said the project "auto-detects Next.js + pnpm" and credited the root pnpm-workspace.yaml for the build-script approvals, which suggests it may currently install from the repo root. If Root Directory is already website, confirm "Include files outside root directory" isn't relied on for the lockfile. I've updated that README to state the requirement.

Worth a preview-deploy check on this PR before merge, since that exercises the real Vercel path in a way CI can't.

Not in scope

.dockerignore:47-48 references a stella-docs/ directory that doesn't exist — a genuinely stale entry, but unrelated to this change, so I left it.

[sourcery-ai]

Sorry @macanderson, you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
stella-cli-docs	Ready	Preview, Comment	Jul 26, 2026 7:46pm