.gitignore

node_modules/
.DS_Store
demo/_preview-*.png
*.log
*.tgz

# Playwright run output (baselines under test/e2e/__screenshots__ ARE committed)
playwright-report/
test-results/
blob-report/
.last-run.json

# GitHub Pages assembly dir (built in CI only)
_site/

# agent / reviewer tool caches — never commit
.aider*
.ruff_cache/
.pytest_cache/

# Local mise tool activation/overrides — never commit.
mise.local.toml
.mise.local.toml

# Example apps build only from the packed tarball in CI; their installs,
# lockfiles and outputs are local-only and must never reach this public repo.
examples/*/node_modules/
examples/*/package-lock.json
examples/*/dist/
examples/*/build/
examples/*/.astro/
examples/*/.svelte-kit/

# Local code-quality tooling (SonarQube) — config + output, never commit
.scannerwork/
sonar-project.properties

# Local SAST scanner output — keep reports, not raw machine artifacts.
.codeql/
.semgrep/
code-quality-audits/**/semgrep*/
code-quality-audits/**/trufflehog-exclude-paths.txt
code-quality-audits/**/readiness*/
code-quality-audits/**/visual*/
code-quality-audits/**/browser-*.png

# Local Claude Code harness state
.claude/

# Multi-agent audit scratch (dated review writeups) — local-only, never commit
reports-lab/

# Local-only public-boundary terms for scripts/check-public-hygiene.mjs.
# One term per line; use this to catch private consumer names before publishing.
.bronto-ui-forbidden-terms

# Core dumps. The Linux/amd64 Playwright image crashes its x86 chromium
# under QEMU on Apple Silicon and drops `qemu_<exe>_<ts>.core` files (GBs
# each) into the bind-mounted working dir. Never commit them — and don't
# author baselines in a local container at all: use the "Update visual
# baselines" workflow (see CONTRIBUTING.md "Visual baselines").
*.core