84b027feed
The WebUI screenshot helper CLAUDE.md already tells agents to use only ever existed on the maintainer's box. Vendoring it means it survives a machine rebuild and the setup steps are written down. It does NOT ship: make_release.sh builds with `git archive`, which honours export-ignore, so scripts/dev joins scripts/release and docs on that list. Verified — the staged tarball has 1666 files and none under scripts/dev. Keeping it out of releases is deliberate, not incidental. lp-shot signs itself a session from the jwtSecret in frontend/.auth.json, which is fine on a box where you already own that file, and has no business sitting in a user's install where it would read as a backdoor. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
12 lines
445 B
Plaintext
12 lines
445 B
Plaintext
# Paths excluded from release tarballs. `git archive` (used by
|
|
# scripts/release/make_release.sh) honours `export-ignore`, so these dev-only
|
|
# trees never ship in libreportal-<ver>.tar.gz.
|
|
scripts/unused export-ignore
|
|
scripts/release export-ignore
|
|
scripts/dev export-ignore
|
|
site export-ignore
|
|
docs export-ignore
|
|
.claude export-ignore
|
|
.gitignore export-ignore
|
|
.gitattributes export-ignore
|