# Internal planning docs (local only)
TODO_DEEP_ANALYSIS.md

# Dependencies
node_modules/
junk/
.pnp
.pnp.js

# Testing
coverage/
.nyc_output

# Next.js
.next/
out/
build/
dist/

# Production
build/

# Misc
.DS_Store
*.pem
*.p12
*.key
*.pfx

# Debug
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# Local env files
.env
.env*.local
.env.development.local
.env.test.local
.env.production.local
.env.prisma

# Vercel
.vercel

# TypeScript
*.tsbuildinfo
next-env.d.ts

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
# Python lib directories (but not frontend src/lib)
/lib/
/lib64/
apps/backend/lib/
apps/backend/lib64/
parts/
sdist/
var/
wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST

# PyInstaller
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
.hypothesis/
.pytest_cache/

# Translations
*.mo
*.pot

# Django stuff:
*.log
local_settings.py
db.sqlite3

# Flask stuff:
instance/
.webassets-cache

# Scrapy stuff:
.scrapy

# Sphinx documentation
docs/_build/

# PyBuilder
target/

# Jupyter Notebook
.ipynb_checkpoints

# pyenv
.python-version

# celery beat schedule file
celerybeat-schedule

# SageMath parsed files
*.sage.py

# Environments
.env
.venv
env/
venv/
ENV/
env.bak/
venv.bak/

# Spyder project settings
.spyderproject
.spyproject

# Rope project settings
.ropeproject

# mkdocs documentation
/site
/WORKSPACE_CLEANUP_SUMMARY.md
# mypy
.mypy_cache/
.dmypy.json
dmypy.json

# Pyre type checker
.pyre/

# Security & Secrets
*.pem
*.key
*.p12
*.pfx
*.crt
*.csr
*.pem
private_key*
public_key*
id_rsa*
id_dsa*
id_ecdsa*
id_ed25519*
*.env
.env*
secrets*
config/secrets*
credentials*

# JSON files (but allow important config files)
*.json
# fumadocs section indexes order the docs navigation; they are source, not data.
!apps/docs/content/**/meta.json
!package.json
!package-lock.json
!research/aibom-fairness-evidence/**/*.json
!apps/backend/src/domain/assurance/evidence-passport-v2.schema.json
!apps/backend/src/api/routers/pack_catalogue_data/*.json
!apps/backend/reference_data/frameworks/*.json
!apps/eval-runner/seccomp/sandbox.json
!tsconfig.json
!next.config.js
!tailwind.config.ts
!postcss.config.js
!eslint.config.js
!babel.config.js
!jest.config.js
!vite.config.js
!rollup.config.js
!webpack.config.js
!metro.config.js
!bunfig.toml
!pyproject.toml
!setup.py
!requirements.txt
!Pipfile
!Pipfile.lock
!poetry.lock
!Cargo.toml
!Cargo.lock
!go.mod
!go.sum
!composer.json
!composer.lock
!Gemfile
!Gemfile.lock
!yarn.lock
!pnpm-lock.yaml
!bun.lockb

# Database
*.db
*.sqlite
*.sqlite3
*.db-journal

# Logs
*.log
logs/

# IDE
.vscode/
.idea/

# Local/external nested repositories (never track in this repo)
.claude/worktrees/
.wiki/
_external/
apps/backend/src/domain/bias/bias_bench_repo/
apps/backend/uploads/
*.swp
*.swo
*~

# OS
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db

# Temporary files
*.tmp
*.temp
*.bak
*.backup
*.orig

# Large files
*.zip
*.tar.gz
*.rar
*.7z
*.iso
*.dmg
*.pkg
*.deb
*.rpm
*.msi
*.exe
*.dll
*.so
*.dylib
*.bin

# Model files (large ML models)
*.pkl
*.joblib
*.h5
*.hdf5
*.onnx
*.pb
*.pt
*.pth
*.safetensors
*.tflite
*.mlmodel
models/
checkpoints/

# Data files
*.csv
!research/aibom-fairness-evidence/**/*.csv
*.xml
*.yaml
*.yml
# GitHub workflows and composite actions are source.
!.github/**/*.yml
!.github/**/*.yaml
data/
datasets/
*.parquet
*.feather
*.hdf
*.h5
*.nc
*.netcdf

# Cache
.cache/
cache/
tmp/
temp/

# Specific security-sensitive files
localhost.har
*.har
apps/backend/public_key.pem

# The broad ML artifact rule ``models/`` must not hide active API source.
# Re-including the directory still leaves *.pt, *.pkl etc. ignored inside it.
!apps/backend/api/models/
!apps/backend/api/models/**/*.py
!apps/backend/src/**/models/
apps/backend/private_key.pem
apps/backend/api/services/real_bias_detection_service.py
apps/backend/email_service.py
apps/backend/neo4j_integration.py
apps/frontend/src/app/\(auth\)/signup/page.tsx
apps/website/bun.lock
apps/website/src/content/docs/installation.mdx

# Local Netlify folder
.netlify

# Archive directory
archive/
neura-dash-backup/

.qoder/

# Playwright test artifacts
.playwright-mcp/
playwright-report/
test-results/

# Screenshots and images (except logo and issue screenshots)
*.png
!**/public/logo.png
!**/logo.png
!docs/assets/issues/*.png
!assets/logo/*.png
!assets/diagrams/*.png

# Temporary documentation files
.temp-docs/

# Frontend archive (preserved for reference)
apps/frontend-archive/
apps/frontend-archive/node_modules/
apps/frontend-archive/.next/
apps/frontend-archive/out/
apps/frontend-archive/build/
apps/frontend-archive/dist/

# graft's local graph cache: regenerable, not committed (run `graft build`).
/graft/
