# ============================================================
#  BLACKBIRD .gitignore — hardened for the handover push.
#  Rule of thumb: if it's a secret, a build artifact, a binary
#  blob or a per-machine config, it stays out.
# ============================================================

# ---------- SECRETS ----------
# Never commit these. HANDOVER_SECRETS.md lists what must travel
# through an encrypted channel instead (Signal / Keybase / pw mgr).
.env
.env.*
!.env.example
*.key
*.pem
*.p12
*.der
*.jks
*.keystore
*.asc
*.gpg
HANDOVER_SECRETS.md

# Firebase service accounts and Google client configs — identify a
# live project; leaking them lets anyone push notifications as us.
google-services.json
android/app/google-services.json
*service-account*.json
firebase-adminsdk*.json

# ---------- BACKUPS (local-only snapshots) ----------
backups/

# ---------- ANDROID ----------
# Signing + per-machine config.
android/keystore.jks
android/keystore.properties
android/local.properties
# Build output.
android/.gradle/
android/build/
android/app/build/
android/app/release/
android/captures/
# IDE.
android/.idea/
# Shipped artifacts.
*.apk
*.aab

# ---------- BACKEND ----------
# Compiled Go binaries + vendored deps + runtime scratch.
backend/dexchatd
backend/dexchatd-linux
backend/vendor/
backend/tmp/
backend/*.db
backend/*.db-journal
backend/*.sqlite
backend/*.sqlite-journal
backend/logs/
backend/uploads/

# ---------- PYTHON ----------
__pycache__/
*.pyc
*.pyo
scripts/.venv/
*.egg-info/
.pytest_cache/

# ---------- NODE / DISCOVERY WORKER ----------
discovery/node_modules/
discovery/.wrangler/
node_modules/

# ---------- IDE / OS ----------
.vscode/
.idea/
*.swp
*.swo
.DS_Store
Thumbs.db

# ---------- ARCHIVES (don't commit distribution bundles) ----------
*.tar.gz
*.tgz
*.zip
*.7z
*.rar
