# OS
.DS_Store
Thumbs.db

# Runtime
*.pid
.runtime/

# Python
__pycache__/
*.py[cod]
*.egg-info/
.venv/
.pytest_cache/
*.env
.env.*
!.env.example
!*.env.template
ENV/

# Key material. Nothing private ever belongs in the repo; these rules keep an
# accidental `git add -A` from committing a key that was dropped in a work dir.
*.pem
*.key
*.p12
*.pfx
*.jks
*.keytab

# SAML SP keys + pinned SWAMID metadata signing cert (operator-generated)
saml-keys/

# Runtime secret files. Bind-mounted at launch so secret values are not exposed
# through Docker environment inspection. README.md is intentionally checked in.
secrets/*
!secrets/README.md

# Node
node_modules/
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
*.tsbuildinfo

# Build artifacts
dist/
/dist
.vite/
.coverage/
coverage/
root/feedback/*
!root/feedback/.gitkeep
root/projects/*
!root/projects/_template/
root/archive/*
!root/archive/.gitkeep
root/shared_modes/*
root/mode_submissions/*
!root/mode_submissions/.gitkeep
containers/chat_server/frontend/root/projects/*
.claude/worktrees/
.claude/projects/
.gstack/security-reports/
.vscode/
.claude/worktrees/
containers/chat_server/docs/.source/
containers/chat_server/docs/build/
.gstack/

# codon-ai build output and caches
packages/codon-ai/dist/
packages/codon-ai/.venv/
