# Binaries
platform/server
platform/molecli
*.exe
*.out
*.bin

# Go
*.test

# Dependencies
node_modules/

# Build output
dist/
**/.next/
canvas/tsconfig.tsbuildinfo
canvas/next-env.d.ts
mcp-server/dist/

# Environment & secrets
.env
.env.local
.env.*.local
.env.production

# OS
.DS_Store
Thumbs.db

# IDE
.vscode/
.idea/
*.swp
*.swo
*~

# Python
__pycache__/
*.pyc
*.pyo
.venv/
venv/
*.egg-info/
.pytest_cache/

# Brand monitor runtime state (never commit)
brand-monitor/.surge_state.json
brand-monitor/.monitor_state.json

# Docker
*.log

# Local docker-compose overrides (per-developer port remaps, etc.)
docker-compose.override.yml
docker-compose.override.yaml

# Test / coverage
coverage/
.coverage
.coverage.*
.nyc_output/
test-results/
playwright-report/

# Databases (local dev)
*.db
*.sqlite
*.sqlite3

# Langfuse / ClickHouse / Docker volumes
langfuse_data/
clickhouse_data/
postgres_data/
redis_data/

# Auth tokens
.auth-token

# Awareness memory (local agent memory, not project code)
.awareness/

# Claude Code (local agent config — not shared)
.claude/

# Workspace instance configs (auto-generated by provisioner, not templates)
workspace-configs-templates/ws-*

# Local dev cruft — provisioner writes here at runtime; templates live at repo root
platform/workspace-configs-templates/

# Codex/Gemini agent skill cache (local only, not authoritative)
.agents/

# Workspace runtime markers (written by agent containers, not committed)
.initial_prompt_done

# Exported bundles (may contain env vars / secrets)
*.bundle.json

# Logs
logs/

# Backups
backups/
docs/.vitepress/dist/
.claude-bridge/
org-templates/**/.env
org-templates/**/.auth-token

# Migration additions (2026-04-13)
.initial_prompt_done
.claude-bridge/

# GitHub App private key + other local-only secrets — never committed.
.secrets/
*.pem

# Cloned-via-manifest dirs — populated locally by scripts/clone-manifest.sh,
# tracked in their own standalone repos. Never commit to core.
# Ignore all cloned org-template content except the molecule-dev reference
# system-prompt template (tracked in core as the canonical shared-context
# source; role-specific prompts live in molecule-ai-org-template-molecule-dev).
# Pattern uses content-glob (/org-templates/*) rather than directory-ignore
# (/org-templates/) so git can re-include specific files via ! negation.
/org-templates/*
!/org-templates/molecule-dev
/org-templates/molecule-dev/*
!/org-templates/molecule-dev/system-prompt.md
/plugins/
/workspace-configs-templates/