build/
bin/

# Generated by the server product before the wasm build, from the same route
# table and Post model the pages use (see .forgejo/workflows/deploy.yaml).
# Checked-in copies drift: the committed sitemap.xml that used to live here
# still listed three blog posts that no longer exist.
sitemap.xml
feed.xml

# Post media, mirrored from the source instances by tools/fetch-media.sh.
# Content-addressed, so re-running is cheap and only new files download. Kept out
# of git because it is tens of megabytes of binaries that are reproducible from
# content/posts.json — but see deploy/README.md: on the server it lives OUTSIDE
# the rsync --delete target, because a source instance deleting a file makes it
# unreproducible.
media/

# Runtime order state — belongs in /var/lib/catcrafts in production and in a
# temp dir under dev.sh/e2e; never in the repo, never in the web root.
orders.jsonl
*.fake-paid
*.financials.json
*.financials-seen.json
*.financial-rules.json
bunq-state.json
# tools/bunq-callback.sh's client keypair (a PRIVATE key) and the bunq server
# public key it saves for BUNQ_CALLBACK_PUBKEY. Home-machine credentials.
bunq-client-key.pem
bunq-server-public-key.pem

.env

# Local Claude Code permissions — dev-machine tooling config, not project code.
.claude/