.pii-allowlist

# Narrow allowlist for git-shield false positives in this repo.
# One regex per line. See https://github.com/vekexasia/git-shield#allowlist

# ── CSS hex color literals ──
# OPF extracts hex colors in two forms: '"#cc9166' (with leading quote) or
# 'C47A4F' (bare uppercase digits when the model drops the # prefix).
# Pattern: optional leading quote/hash, exactly 6 hex digits, optional trailing noise.
(?i)^["#]*[0-9a-f]{6}["#,]*$

# ── Public URLs that aren't PII ──
^https?://(www\.)?keepachangelog\.com(/.*)?$
^https?://(www\.)?nextjs\.org(/.*)?$
^https?://github\.com/vekexasia/tony-menu(\.git)?(/.*)?$
(?i)^tony-?menu$
# RFC 2606 reserved example domains used in test fixtures.
^https?://([a-z0-9-]+\.)*example\.(com|org|net)(/.*)?$
# test.local fake hostname used in worker integration tests.
^https?://test\.local(/.*)?$
test\.local

# ── Drizzle snapshot identifiers ──
# drizzle generates a fresh UUID for each migration snapshot's `id`/`prevId`.
# These appear in backend/drizzle/meta/*_snapshot.json and are not secrets.
^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

# ── Italian food / menu vocabulary in test fixtures + demo seed ──
# Dish, course, and translation names that the PII scanner mistakes for personal names.
(?i)^pizza\s+margherita$
(?i)^margherita$
(?i)^tiramis[uù]$
(?i)^cucina$
(?i)^antipasti$
(?i)^primi$
(?i)^secondi$
(?i)^dolci$
(?i)^bevande$
(?i)^vorspeisen$
(?i)^entr[ée]es$
(?i)^speisekarte$
(?i)^bruschetta$
(?i)^carpaccio$
(?i)^burrata$
(?i)^ravioli$
(?i)^spaghetti$
(?i)^branzino$
(?i)^tagliata$
(?i)^prosecco$
(?i)^merlot$
(?i)^carbonara$
# Italian regions used in custom-locale fixtures (not personal names).
(?i)^veneto$
(?i)^v[èe]neto$

# ── Italian admin UI strings in messages/it.json ──
# Verbs / labels that the PII scanner mistakes for personal names.
(?i)^riordina$
(?i)^salva$
(?i)^salvataggio$
(?i)^annulla$
(?i)^modifica$
(?i)^elimina$
(?i)^rimuovi$
(?i)^cambia$
(?i)^conferma$
(?i)^aggiungi$
(?i)^crea$
(?i)^nuova$
(?i)^nuovo$
(?i)^cerca$
(?i)^filtra$
(?i)^carica$
(?i)^caricamento$
(?i)^traduci$
(?i)^traduzione$
(?i)^traduzioni$
(?i)^ritraduci$
(?i)^mancanti$
(?i)^mancano$
(?i)^nascosti$
(?i)^nascosta$
(?i)^nascosto$
(?i)^visibili$
(?i)^esaurito$
(?i)^congelato$
(?i)^duplica$
(?i)^riprendo$
(?i)^pausa$
(?i)^completate?$
(?i)^completato$
(?i)^categoria$
(?i)^categorie$
(?i)^piatto$
(?i)^piatti$
(?i)^lingua$
(?i)^lingue$

# ── Multi-language admin UI strings (false-positive person matches) ──
(?i)^oberfl[äa]chensprache$
(?i)^hauptsprache$
(?i)^speisekarten?$
(?i)^prinzipale$
(?i)^prinsipale$
(?i)^principale$
(?i)^principal$
(?i)telefono
(?i)tełefono

# ── Diet / label vocabulary used in test fixtures and placeholder copy ──
# "Vegano" (IT/ES) and "Vegan" (EN/DE) are diet labels, not personal names.
(?i)^vegano?$
(?i)vegan(o|label|tag)?

 # Test entry id containing a tab; public fixture for path encoding tests.
(?i)^003-teciada-di-pesce-in-guazzetto\tcon-crostini$
(?i)^003-teciada-di-pesce-in-guazzetto%09con-crostini$
(?i)teciada

# ── Multi-language admin/allergen UI strings ──
# These are public UI labels in web/messages/*.json that OPF can mistake for secrets or names.
(?i)^sulfites?$
(?i)^sulfitos$
(?i)sulfit
Сульфиты
(?i)^sulfite$
^Сульфиты$
(?i)^negrito$
(?i)^it[aá]lico$
(?i)^ovos$
(?i)^peixe$
(?i)^amendoins$
(?i)^soja$
(?i)^leite e derivados$
(?i)leche y derivados
(?i)frutos de cáscara
(?i)cacahuetes
(?i)amendoins
(?i)leite e derivados
(?i)frutos de casca rija
(?i)^frutos de casca rija$
(?i)^aipo$
(?i)^mostarda$
(?i)^s[eé]samo$
(?i)^tremoços$
(?i)^moluscos$
(?i)^sprachdiktat$
(?i)^hangdiktálás$
(?i)^tétel( szerkesztése)?$
(?i)^tony(-chat)?$
# npm registry tarball URLs in package-lock files are public dependency metadata.
registry[.]npmjs[.]org
^https?://([a-z0-9-]+\.)*example(/.*)?$
^https?://github\.com/sponsors/[a-z0-9-]+$
^https?://www\.patreon\.com/[a-z0-9-]+$
^https?://[a-z0-9-]+\.org/support$

# ── Demo restaurant seed data (backend/src/lib/demo-seed-data.ts) ──
# Placeholder contact details for the public "Trattoria Demo" — all fake.
# Fake phone numbers (all-zero Venice placeholder, with/without spaces).
\+?39 ?041 ?000 ?0000
\+?390410000000
# Bare social profile roots and the Google-maps URL template (interpolated vars).
^https?://(www\.)?instagram\.com/?$
^https?://(www\.)?facebook\.com/?$
^https?://(www\.)?google\.com/maps/.*$
# Far-future promotion expiry date in the demo seed.
^2030-12-31T

# ── Demo dish/UI strings the scanner mistakes for personal names ──
(?i)^uova$
(?i)^orari di apertura$
(?i)^ravioli de$
(?i)^hausgemacht$

# ── Test fixtures (not PII) ──
# Fake URL used as the request target in chat worker handler tests.
^https?://x/chat$
# Fixed system-clock dates used in vitest rate-limit/daily-cap window tests.
^2026-02-01T

# ── TonyMenu marketing site (website/) public domains and doc links ──
# Unanchored: also matches wrapped in markdown bold/backticks, or bare
# hostname with no scheme (e.g. shown as plain text in the landing page).
https?://([a-z0-9-]+\.)*tonymenu\.app(/[^\s*`]*)?
([a-z0-9-]+\.)*tonymenu\.app(/[a-z0-9_-]*)?
^https?://([a-z0-9-]+\.)*astro\.build(/.*)?$
^https?://astro\.badg\.es(/.*)?$
# Third-party CDN/font includes used by the landing page.
^https?://fonts\.googleapis\.com(/.*)?$
^https?://fonts\.gstatic\.com(/.*)?$
^https?://cdnjs\.cloudflare\.com(/.*)?$
# Starlight starter template boilerplate (create-astro default content).
^https?://(www\.)?diataxis\.fr(/.*)?$
@astrojs/starlight(/[a-z-]*)?

# ── Dutch order-flow UI strings (#20) the OPF NER model misreads as person names ──
^Toon dit aan de kelner$
^Ongeldige link$