.gitignore

# apxs / libtool build artifacts
*.o
*.lo
*.la
*.slo
*.so
.libs/

# Editor/scratch
*.swp
*~
.DS_Store
.vscode/

# Python test framework (M11.4+) — venv + pytest caches + egg-info
# + per-run reports are per-box artifacts that don't belong in the
# repo. .pytest_cache/ pattern is unanchored: pytest writes one
# wherever its cwd was when invoked, so the repo-root copy and the
# tests/-relative copy are both caught.
tests/.venv/
.pytest_cache/
tests/*.egg-info/
tests/reports/
__pycache__/

# Hypothesis property-based testing cache. Created wherever pytest is
# invoked from (repo root or tests/), holds saved failure examples +
# Unicode DB cache. Local working state, not repo content.
.hypothesis/

# AI-tool workspace markers / settings — per-user state from
# Claude Code, OpenAI Codex, etc. Not project content meant for
# the team.
.claude/
.codex

# Playwright MCP server scratch directory — DOM snapshots and
# console-log dumps from any browser-automation session that ran
# from this directory. Pure session breadcrumbs; no replay value
# beyond the moment they were captured.
.playwright-mcp/

# pytest-playwright screenshot/video artifacts — gitignored; CI
# uploads as artifacts on failure.
tests/test-results/

# Fuzz harness build artifacts + per-run corpus. The corpus grows on
# every fuzz run with newly-discovered inputs; we don't track it in
# git. seed_corpus.py regenerates a starter set any time.
tests/fuzz/fuzz_cookie
tests/fuzz/fuzz_robots
tests/fuzz/corpus/
tests/fuzz/corpus-robots/
# LibFuzzer also drops crash-* files next to the binary on a finding
crash-*
leak-*
timeout-*
slow-unit-*
tests/bench/results/

# Backup of the previous active vendor file produced by
# tools/refresh-bot-directory.py and refresh-top-user-agents.py.
# Operator-local rollback artifacts; the committed .json + .default.json
# are the canonical sources.
vendor/bot-directory.json.prev
vendor/top-user-agents.json.prev

# Operator-managed overlay files. Loaded last (after upstream + the
# committed .builtin overlay) by both the build-time codegen and the
# refresh scripts; entries here win on slug collision. Optional — an
# operator who doesn't want custom additions can skip the file
# entirely. NOT committed: this is for deployment-specific bots,
# internal scrapers, custom monitoring tools, or named entries an
# operator wants to override locally.
vendor/bot-directory.local.json
vendor/top-user-agents.local.json
vendor/verified-bots.local.json