Track bundled vendor runtime sources

.gitignore

@@ -38,9 +38,51 @@ package-lock.json
 *.jsonl
 *.pid
 
-# downloaded third-party runtimes and model/download tools
-/vendor/*
-!/vendor/README.md
+# vendored runtime source is tracked; local artifacts are not
+/vendor/**/.git/
+/vendor/**/.venv/
+/vendor/**/node_modules/
+/vendor/**/__pycache__/
+/vendor/**/*.pyc
+/vendor/**/*.pyo
+/vendor/**/.DS_Store
+/vendor/**/logs/
+/vendor/**/cookies/
+/vendor/**/db/
+/vendor/**/*.sqlite
+/vendor/**/*.sqlite-*
+/vendor/**/*.db
+/vendor/**/*.db-*
+
+# ComfyUI runtime state and downloaded models
+/vendor/ComfyUI/models/
+/vendor/ComfyUI/output/
+/vendor/ComfyUI/input/
+/vendor/ComfyUI/temp/
+/vendor/ComfyUI/user/*.db
+/vendor/ComfyUI/user/*.sqlite
+
+# AIGCPanel local installs/build output
+/vendor/aigcpanel/node_modules/
+/vendor/aigcpanel/dist/
+/vendor/aigcpanel/dist-electron/
+/vendor/aigcpanel/data/
+
+# social-auto-upload local runtime state
+/vendor/social-auto-upload/.venv/
+/vendor/social-auto-upload/logs/
+/vendor/social-auto-upload/cookies/
+/vendor/social-auto-upload/db/
+/vendor/social-auto-upload/social_auto_upload.egg-info/
+/vendor/social-auto-upload/sau_frontend/.env*
+/vendor/social-auto-upload/uploader/xhs_uploader/accounts.ini
+/vendor/social-auto-upload/media/
+/vendor/social-auto-upload/videos/
+
+# vendored docs/demo media that are not needed for runtime development
+/vendor/Agent-Reach/docs/wechat-group-qr.jpg
+/vendor/funclip/docs/images/
+/vendor/aigcpanel/demo/
 
 # IDEs and editors
 /.idea