diff --git a/.gitignore b/.gitignore
index 0f243e6f..28aa7920 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,3 +47,5 @@ grammars/tree-sitter-echo/bindings/
 grammars/tree-sitter-echo/node_modules/
 grammars/tree-sitter-echo/.build/
 
+# cf (Cloudflare CLI) local cache
+.cloudflare/
diff --git a/scripts/gate b/scripts/gate
index 33de5aee..cf65c78a 100755
--- a/scripts/gate
+++ b/scripts/gate
@@ -378,7 +378,7 @@ run_layer() {
       if [[ ! -d www/node_modules ]]; then
         # sharp (via @huggingface/transformers) tries a source build when the
         # host has a system libvips; always use its prebuilt binary instead.
-        SHARP_IGNORE_GLOBAL_LIBVIPS=1 run_quiet npm --prefix www install
+        SHARP_IGNORE_GLOBAL_LIBVIPS=1 run_quiet npm --prefix www ci
       fi
       run_quiet npm --prefix www run lint
       run_quiet npm --prefix www run format