# WordPress core (managed by WP itself, not tracked)
/wp-admin/
/wp-includes/
/wp-*.php
!/wp-config-sample.php
/xmlrpc.php
/index.php
/license.txt
/readme.html
/wordpress/
/wordpress-*.zip

# Config & secrets
wp-config.php
.env

# Uploads (media library — too large / environment-specific for git)
/wp-content/uploads/

# Default WP themes we are not customizing
/wp-content/themes/twentytwentythree/
/wp-content/themes/twentytwentyfour/
/wp-content/themes/twentytwentyfive/

# Third-party plugins (installed via WP-CLI/composer, not vendored into git —
# see project-docs/PLUGINS.md for the install list)
/wp-content/plugins/*
!/wp-content/plugins/index.php

# Cache / logs
/wp-content/cache/
/wp-content/debug.log
*.log

# OS / editor cruft
.DS_Store
Thumbs.db
.vscode/

# Local access notes (contains credentials — never commit)
/project-docs/access-notes.local.md

# Production deployment artifacts (DB dumps — never commit)
/deploy/

# Build scripts, photo candidates, screenshots
/_tmp/
