# Environment and secrets
.env
.env.local
.env.*.local
.dev.vars
.release-env
.release-env.*
*.pem
*.key
.mcp.json
.eslintcache

# Sensitive business data (GDPR)
marketing/outreach/leads.json
marketing/outreach/outreach_log.json
marketing/outreach/CLIENTS.md

# Local tools (MCP servers)
tools/

# Customer data
customer-packages/

# Local doc backups (created during cleanup work)
.docs-backup-*/

# Security scan reports (contain vulnerability details)
security-reports/

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
*.egg-info/
.eggs/
dist/
/build/
*.egg
.venv/
venv/
ENV/
.pytest_cache/
.ruff_cache/
.mypy_cache/
.coverage
htmlcov/
.tox/
.nox/

# Databases (local SQLite fallback)
*.db
*.sqlite
*.sqlite3

# Node.js
node_modules/

# Frontend build output (regenerated by vite build)
frontend/dist/
frontend/.vite/
frontend/.turbo/
*.tsbuildinfo
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
.npm/
.yarn/
.pnp.cjs

# IDE
.idea/
.vscode/
*.swp
*.swo
*~

# OS
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
Thumbs.db
ehthumbs.db

# Docker
*.log

# Test artifacts (Playwright outputs from e2e/ directory)
e2e/test-results/
e2e/test-results-dark/
e2e/playwright-report/
e2e/node_modules/
e2e/.playwright/
e2e/e2e/.auth/

# Auto-generated marketing screenshots (regenerated on every E2E run by
# e2e/api/take-screenshots.spec.ts — should NOT be checked in)
website/assets/screenshots/*.png

# Video files (E2E recordings, demo outputs - all regenerated)
*.webm
*.mp4

# Cloudflare Wrangler (local development state)
.wrangler/

# Temporary files
*.tmp
*.temp
.cache/

# Claude Code config (ignore all except dispatch context)
.claude/*
!.claude/dispatch-context.md
.agents/
claude-*.md

# Frontend test coverage
frontend/coverage/

# Backup files
backups/
*_backup*/
*_backup_*/
*.backup
*.old
*.zip

# Logs
logs/

# Demo outputs
demo_output/

# MkDocs build output (regenerated by mkdocs build)
docs-public/site/

# Marketing rendered videos (regenerated by Remotion)
marketing/output/

# Marketing audio backups and voice samples
marketing/video/public/audio/backup/
marketing/voice-samples/
*.m4a

# Regeneratable marketing audio (cheap ElevenLabs — re-generate with one API call)
# KEPT: voiceover-demo.mp3 (6min George VO, expensive), voiceover-social.mp3, bg-music.mp3
marketing/video/public/audio/sfx-*.mp3
marketing/video/public/audio/reel01-s*.mp3
marketing/video/public/audio/voiceover-reel*.mp3
marketing/video/public/audio/tts_*.mp3

# Generated reports (can be regenerated)
reports/
*.pdf

DEPLOY_STHREE.md
# Lab — local secrets (never commit)
scripts/lab/.lab-env.local
scripts/lab/.deploy-aci-secret-key
scripts/lab/.deploy-aci-mi-principal-id
scripts/lab/.deploy-cae-secret-key
scripts/lab/.deploy-cae-mi-principal-id
scripts/lab/.deploy-aci-workdir/
scripts/lab/.deploy-aci-private-ip
scripts/lab/.deploy-cf-tunnel-id
scripts/lab/.deploy-cf-tunnel-token
scripts/lab/.deploy-cf-access-app-id
scripts/lab/.deploy-cae-fqdn
scripts/lab/.deploy-cae-workdir/
scripts/lab/.cf-origin-certs/
scripts/lab/.db-password-*.backup
scripts/lab/.deploy-sso-secret
scripts/lab/.cloud-creds/
