This app had @google/genai in its dependencies and a GEMINI_API_KEY in its env template. Not a single line of code imported either one. AI Studio exports come with nine scaffolded dependencies you never asked for — hookform resolvers, class-variance-authority, canvas-record, firebase-tools, the whole shadcn starter kit. Grepped every import, found zero hits, ripped all nine. Install went from 1,100 packages to 456. The lesson that keeps repeating: trust the grep, not the package.json.