.gitignore

node_modules/
.output/
.nitro/
.tanstack/
dist/
.env
target/

# Python bytecode. Tracked copies got swept in by a `git add -A` after a
# local pytest run (#1742 work) and had to be deleted again -- ignore them so
# that cannot recur.
__pycache__/
*.py[cod]

# Playwright MCP writes accessibility snapshots and screenshots into the
# directory a browser session was driven from; they are session scratch, not
# source, and one already reached main inside a backend-service commit.
.playwright-mcp/

# Filled-in installer answer files. These carry real WireGuard private keys,
# SSH key paths, backup-host addresses and the deployment's real public domain
# -- scripts/check-public-leaks.py fails on exactly that content, which is the
# point. Both .conf.example templates are tracked; the filled-in copies must
# never be. Untracked-but-not-ignored was one `git add .` away from putting
# them in a public repository.
conf-local/
install-homeserver.conf
install-vps.conf

# Rev·Deck upstream build context, cloned by install-homeserver.sh
# (step_revdeck_source). Upstream source, deliberately not vendored here.
analysis/ghidra/revdeck/

.grit
.orchestrator/