teqo-backup/.gitignore
Francisco Solla 9e9864f420 feat(C234): busca por selfie no álbum público — índice A/C consentido, selfie on-device
- /fotos/encontre + POST /api/fotos/selfie: só o vetor 128-d, sem imagem, sem score e
  sem nomes de terceiros; fail-closed pela flag photoAlbum.selfieSearchEnabled (default
  false) e pelos Consents por chave estável (busca-selfie-fotos/busca-selfie-indice, não
  seedados — a superfície nasce fechada até o aval jurídico/DPIA).
- Índice A/C do gate (PR #1370): só quem aderiu é indexado; descriptors do acervo são
  transitórios. Collection faceSubject (admin-only, sem vínculo com Contact), vínculos
  matchedPhotos e marker faces.checkedKey no archivePhoto (modelo + enrolledAt).
- Engine @vladmandic/face-api nos dois lados: browser lazy com modelos same-origin
  (copy-face-vision-assets no prebuild/predev/Docker) e CLI node-wasm sem tfjs-node.
  CLIs ops-only faces:enroll / faces:index --apply|--verify com guardas C231/C232.
- Opt-out self-service por reconhecimento (leave-index) + canal de remoção do C233;
  rate limit próprio (namespace selfie:<hash>) e bounded body extraído do beacon.
- UI portada classe-a-classe do design estendido (paridade certificada, tier primário);
  e2e frontendFotosSelfie (manifest+curado+projeto, engine stubada) e canário do engine
  real; runbook §C234, contrato em AGENTS-public.md e changelog.
- Migration aditiva add_face_subject (SQL revisado); hard-stops aprovados na sessão.
2026-09-27 20:04:41 -03:00

171 lines
4.5 KiB
Text
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
# dependencies
/node_modules
/.pnp
.pnp.js
.yarn/install-state.gz
/.pnpm-store
/.idea/*
!/.idea/runConfigurations
# testing
/coverage
/playwright-report/
/test-results/
/.playwright-cli/
/.playwright-mcp/
# Aider (local agent history + tag cache)
.aider*
# next.js
/.next/
/.next-e2e/
/.next-e2e-check/
/out/
# Payload importMap (OPS99: build artifact, not committed)
/src/app/(payload)/admin/importMap.js
# OPS99: removed guard script (importMap now generated at build time)
/scripts/check-importmap-s3.mjs
# production
/build
# misc
.DS_Store
*.pem
# debug
npm-debug.log*
yarn-debug.log*
yarn-error.log*
# local env files
.env*.local
# vercel
.vercel
# typescript
*.tsbuildinfo
next-env.d.ts
.env
/media
/reelMedia
/recordingMedia
/contentMedia
/internetSpeechMedia
/archivePhoto
# TSE open-data zip cache (pnpm db:seed:tse)
/data/tse/
# Research source deposits (paywalled books/papers obtained legally) — keep only README/NOTES
/docs/research/sources/**
!/docs/research/sources/**/
!/docs/research/sources/README.md
!/docs/research/sources/**/NOTES.md
# IBGE geometry download cache (pnpm build:geometries)
/data/geometries/
# IBGE demographics download cache (pnpm build:demographics)
/data/demographics/
# AI fill masters (pnpm images:fill — regenerable drafts, never commit)
/data/ai-fill/
# Câmara pilot media/JSON cache (pnpm camara:pilot — VOD MP4 + report, never commit)
/data/camara/
# C215 — web-speech ingestion batch cache + reports (pnpm falas-web:import)
/data/falas-web/
# C231 — Flickr photo-archive cache + receipts (pnpm flickr:import)
/data/flickr/
# C229 — speech semantic index reports (pnpm acervo:index)
/data/acervo-index/
# C232 — photo-archive cataloguing receipts (pnpm archive:catalog)
/data/archive/
/data/face/
# Solla × Ceuci report HTML cache (scripts/build-solla-ceuci-salvador-report.mjs)
/data/solla-ceuci-salvador/
# C163 — city pre-trip report: snapshot/research/HTML cache + internal PDF/MD.
# The repo is public; the report carries campaign-internal data and is never committed.
/data/relatorios-cidade/
/docs/research/relatorios-cidade/
# C186 — dossiê Solla por cidade + boletim modelo: same rule (internal, dated,
# carry campaign-internal data). Only the skill/scripts/changelog are committed.
/data/dossie-solla-cidade/
/docs/research/dossie-solla-cidade/
# C187 — dossiê Solla por instituição + boletim modelo: same rule (C186).
/data/dossie-solla-instituicao/
/docs/research/dossie-solla-instituicao/
# C190 — dossiê Solla por tema/área + boletim modelo: same rule (C186).
/data/dossie-solla-tema/
/docs/research/dossie-solla-tema/
# C191 — Instagram data charts: raw input + chart-spec intermediates + final
# PNG/SVG carry campaign-internal data; the public repo never commits them.
/data/graficos-instagram/
/docs/research/graficos-instagram/
# C196 — reels tutoriais: o shot list é versionado (scripts/reels/shot-lists);
# o pacote (reel.mp4/capa.png/narracao.srt/roteiro.md/metadata.json) e os
# intermediários são regeneráveis.
/data/reels/
# C197 — venv do provider TTS (edge-tts) do rascunho de narração: local da
# workstation, nunca versionado (o deploy npm não o toca).
/scripts/reels/.venv/
# C208 — artes da Rádio Jorge Solla 1313 (zeno.fm): o que é versionado mora em
# public/campaign-kit/radio/; aqui ficam só rascunhos/previews locais.
/data/radio-artes/
# Local-only sensitive material (agents may read; never commit content)
/private/**
!/private/README.md
# Former tracked sensitive locations — never re-add
/docs/general-coordinator-interview/
/docs/sheets/
/output/
# Audio / media field captures
*.m4a
*.mp3
*.webm
# S21 — the int/e2e jingle fixture (~5 KB, sine tone): the only audio the repo
# commits; every real jingle lives in the media collection.
!tests/fixtures/*.mp3
# opencode secrets (Penpot MCP token, etc.)
.opencode/secrets/
# Design review screenshots (regenerable via Playwright, never commit)
/*.png
# Proprietary design font files kept only in the local workspace
/public/arial-mt/
# S15 — MediaPipe wasm runtime, copied from node_modules at dev/build time
/public/cards/mediapipe/
/public/fotos/modelos/
/data/encode/
/data/poster-candidates/
# Changelog aggregate is a regenerable artifact (OPS85) — entries live in docs/changelog/
/docs/CHANGELOG-AGENTS.md
/data/tse-2022/
# Briefing Geral de Militância (interno; repo público).
/data/briefing-geral-militancia/
/docs/research/briefing-geral-militancia/
# Playwright CLI output (may contain credentials)
.playwright-cli/