# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.

# dependencies
node_modules
.pnp
.pnp.*
.yarn/*
!.yarn/patches
!.yarn/plugins
!.yarn/releases
!.yarn/versions

# testing
coverage

# next.js
.next/
out/

# production
build
dist

# cloudflare / wrangler local state
.wrangler/
.dev.vars
.dev.vars.*
!.dev.vars.example

# misc
.DS_Store
*.pem

# generated audit reports (blog freshness)
.reports/

# debug
npm-debug.log*
yarn-debug.log*
yarn-error.log*
.pnpm-debug.log*

# env files (can opt-in for committing if needed)
.env*
!.env.example

# vercel
.vercel

# typescript
*.tsbuildinfo
next-env.d.ts

# generated brand contact sheet (published as an Artifact, not source)
.brand-sheet.html

# scratch scripts kept out of the tree
*.tmp.mjs

# local throwaway postgres cluster (apps/api/scripts/local-db.mjs)
.localdb/
.localdb-server*.log

# Credentials written to disk by an operator script so they are never echoed
# to a terminal, a CI log or an agent transcript. Read them, put them in a
# password manager, delete the file.
.gate-token.txt
.owner-password.txt

# ad-hoc QA captures and dev-server logs (see scripts/shoot.mjs for the real tool)
.qa/
.qa-*.mjs
*-dev.log

# release gate: the stamp written by `npm run release:check` (one machine's run)
# and the per-build identifier each static app serves at /version.json
.release-check.json
.release-check/
apps/*/public/version.json

# scratch working directory for one-off migration and patch scripts
.tmp/

# SDK build output and local virtualenv/pub artefacts
sdks/typescript/dist/
sdks/python/src/*.egg-info/
sdks/python/**/__pycache__/
sdks/python/.pytest_cache/
sdks/dart/.dart_tool/
sdks/dart/pubspec.lock

# Agent worktrees (separate git checkouts; never commit)
.claude/worktrees/
.sandbox-staff-password.txt
