.rsync-filter

# ========================================
# Pinakes - rsync Filter Rules
# Used by build-release.sh to create distribution packages
# CRITICAL: In rsync, INCLUDES must come BEFORE EXCLUDES
# Format: + (include), - (exclude), processed in order
#
# IMPORTANT: Rules without a leading '/' match at ANY directory level.
# Always use '/' prefix for root-only excludes to avoid accidentally
# excluding files in vendor/ or other nested directories.
# ========================================

# ========================================
# EXPLICIT INCLUDES (must come first!)
# ========================================

# Keep .env.example (root only)
+ /.env.example

# Keep README and LICENSE (matches at any level, protects vendor READMEs too)
+ README.md
+ LICENSE.md

# Keep installer SQL files
+ installer/
+ installer/database/
+ installer/database/*.sql
+ installer/database/migrations/
+ installer/database/migrations/*.sql

# Keep storage directory structure and htaccess files
+ storage/
+ storage/.htaccess
+ storage/logs/
+ storage/logs/.gitkeep
+ storage/cache/
+ storage/cache/.gitkeep
+ storage/backups/
+ storage/backups/.gitkeep
+ storage/backups/.htaccess
+ storage/uploads/
+ storage/uploads/.gitkeep
+ storage/uploads/.htaccess
+ storage/uploads/plugins/
+ storage/uploads/plugins/.gitkeep
+ storage/tmp/
+ storage/tmp/.gitkeep
+ storage/calendar/
+ storage/calendar/.gitkeep
+ storage/calendar/.htaccess

# Keep bundled plugins (CRITICAL!)
# Note: Exclude .DS_Store and CLAUDE.md within plugins before ** patterns
+ storage/plugins/
+ storage/plugins/.gitkeep
- storage/plugins/**/.DS_Store
- storage/plugins/**/CLAUDE.md
- storage/plugins/**/claude.md
# Keep every source plugin except the explicitly non-bundled premium plugin.
# The build verifier compares the result with BundledPlugins::LIST, so an
# unregistered directory or a missing registered plugin fails the package.
- storage/plugins/scraping-pro/
+ storage/plugins/*/
+ storage/plugins/*/**

# Keep public uploads STRUCTURE + security sentinels only — never the actual
# uploaded/generated files (dev covers, E2E fixtures under archives/, etc.).
# The dir + placeholder/.htaccess includes come first (first-match wins), then a
# catch-all drops every other file anywhere under uploads. build-release.sh's
# verifier enforces this too (it errors on any unexpected upload).
+ public/uploads/
+ public/uploads/.gitkeep
+ public/uploads/copertine/
+ public/uploads/copertine/placeholder.jpg
+ public/uploads/digital/
+ public/uploads/digital/.htaccess
- public/uploads/**

# Keep backups structure
+ backups/
+ backups/.gitkeep
+ backups/.htaccess

# ========================================
# EXCLUDES (come after includes)
# ========================================

# Version control
- .git/
- .gitignore
- .gitattributes
- .gitmodules

# IDE and AI assistant folders
- .gemini/
- .qoder/
- .claude/
- .vscode/
- .idea/
- .cursor/
- CLAUDE.md
- claude.md
- /.code-review-graph/
- /graphify-out/
- /test-upgrade/
- /.playwright-cli/
- /.playwright-mcp/
- .project
- .buildpath
- .settings/
- *.sublime-*
- *.swp
- *.swo
- *~

# Server & development directories (root level only)
- /server/
- /sito/
- /internal/
- /documents/

# Scripts - exclude dev-only files, keep maintenance.php
- scripts/clean-git-history.sh
- scripts/copy-vendor-assets.js
- scripts/export-email-templates-to-installer.php
- /scripts/ci-*
- /scripts/create-release*.sh
- /scripts/list-source-expectations.php
- /scripts/reinstall-test.sh
- /scripts/remote-pr-verify.*
- /scripts/verify-schema.sh

# Root Node tooling exists only for Playwright/CI. The independently usable
# frontend/ package remains available to installations that customize assets.
- /package.json
- /package-lock.json

# Development dependencies
# node_modules/ without leading / catches any level (intentional: vendor packages too)
- node_modules/
# Keep frontend/ source for customization (users can rebuild with npm)

# Vendor bloat: dev-only packages, bin directory, and nested vendor directories
- /vendor/phpstan/
- /vendor/bin/
- /vendor/**/vendor/

# Testing (root level only — don't strip vendor test utilities)
- .phpunit.result.cache
- .phpunit.cache/
- /tests/
- /test/
- /coverage/
- /.nyc_output/
- /.coverage
- /htmlcov/
- /.playwright-mcp/

# Development files
- *.log
- *.tmp
- *.temp
- *.cache
- .DS_Store
- .DS_Store?
- ._*
- .Spotlight-V100
- .Trashes
- ehthumbs.db
- Thumbs.db
- desktop.ini

# AI/ML models and database files
# IMPORTANT: /models/ with leading / = root only (don't exclude tinymce/models/)
- /vectors.db
- /models/
- *.onnx
- .env
- .env.local
- .env.production
- .installed
- config.local.php
- config.local.sample.php
- /todo.md
- /updater.md
- .distignore
- .rsync-filter
- error_log
- npm-debug.log*
- yarn-debug.log*
- yarn-error.log*

# Development files
- /router.php
- /.coderabbit.yaml
- /.semgrepignore
- /phpstan.neon
- /phpstan-baseline.neon

# Temporary scripts
- clean-*.sh
- convert-*.php
- export-*.php
- fix-*.php
- debug_*.php
- test_*.php
- migration-*.php

# Release artifacts
- /releases/
- /build/
- /build-tmp/
- /migrations/

# CI/CD & documentation (root level only — don't strip vendor docs)
- /.github/
- /docs/
- /*.md
- .travis.yml
- .circleci/
- azure-pipelines.yml
- .gitlab-ci.yml

# Backup & archive files
- *.bak
- *.backup
- *.old
- /*backup*
- backup_*.sql
- old.sql
- *.zip
- *.tar
- *.tar.gz
- *.rar
- *.7z
- Archive.zip

# SQL files (except installer already included)
- *.sql

# Security files
- .htpasswd
- *.pem
- *.key
- *.cert
- *.crt
- *.p12

# Root level directories to exclude
- /backups/*
- /cache/
- /tmp/
- /temp/

# Storage user data (structure already included above)
- /storage/logs/*
- /storage/cache/*
- /storage/backups/*
- /storage/tmp/*
- /storage/calendar/*
- /storage/uploads/*
- /storage/settings.json
- /storage/*.log

# Exclude non-bundled plugins
- /storage/plugins/*

# Public uploads and user-generated assets
- /public/uploads/*
- /public/assets/logo_*