# Binaries
platform/server
platform/molecli
*.exe
*.out
*.bin

# Go
*.test

# Dependencies
node_modules/

# Build output
dist/
**/.next/
canvas/tsconfig.tsbuildinfo
canvas/next-env.d.ts
mcp-server/dist/

# Environment & secrets
.env
.env.local
.env.*.local
.env.production

# OS
.DS_Store
Thumbs.db

# IDE
.vscode/
.idea/
*.swp
*.swo
*~

# Python
__pycache__/
*.pyc
*.pyo
.venv/
venv/
*.egg-info/
.pytest_cache/

# Docker
*.log

# Local docker-compose overrides (per-developer port remaps, etc.)
docker-compose.override.yml
docker-compose.override.yaml

# Test / coverage
coverage/
.coverage
.coverage.*
.nyc_output/
test-results/
playwright-report/

# Databases (local dev)
*.db
*.sqlite
*.sqlite3

# Langfuse / ClickHouse / Docker volumes
langfuse_data/
clickhouse_data/
postgres_data/
redis_data/

# Auth tokens
.auth-token

# Awareness memory (local agent memory, not project code)
.awareness/

# Claude Code worktrees and runtime artifacts
.claude/worktrees/
.claude/scheduled_tasks.lock
.claude/audit.jsonl
.claude/freeze
.claude/judge-subagents
.claude/per-tick-reflections.md

# Workspace instance configs (auto-generated by provisioner, not templates)
workspace-configs-templates/ws-*

# Local dev cruft — provisioner writes here at runtime; templates live at repo root
platform/workspace-configs-templates/

# Codex/Gemini agent skill cache (local only, not authoritative)
.agents/

# Workspace runtime markers (written by agent containers, not committed)
.initial_prompt_done

# Exported bundles (may contain env vars / secrets)
*.bundle.json

# Logs
logs/

# Backups
backups/
docs/.vitepress/dist/
.claude-bridge/
org-templates/**/.env
org-templates/**/.auth-token

# Migration additions (2026-04-13)
.initial_prompt_done
.claude-bridge/
.claude/scheduled_tasks.json

# GitHub App private key + other local-only secrets — never committed.
.secrets/
*.pem