# Secrets. Never committed, never pushed.
.env
credentials/
tokens.json
*-oauth-token.json

# The owner-only drawer. Lives on this machine only. The folder ships empty so
# it exists from day one; nothing put in it ever leaves this computer.
private/*
!private/.gitkeep

# The raw dump. Whatever gets thrown in here (client lists, financial summaries,
# chat exports, half-finished docs) stays on this machine. /install-aios reads it and
# distils it into context/; the originals never reach the backup.
context/import/*
!context/import/.gitkeep

# Local state
# .install-state is deliberately NOT ignored: it holds a first name, an OS and how
# far the setup got, nothing sensitive, and committing it is what lets someone resume
# on a new machine after a dead laptop.
.DS_Store
__pycache__/
*.pyc
.venv/
venv/
node_modules/
scripts/voice/.voice.pid
scripts/voice/.voice.log

# Databases and big local files
*.db
*.db-shm
*.db-wal
*.zip

# Per-machine seat identity
.seat

# /test evidence bundles and per-run artifacts. Never committed. The **/ matters:
# apps live in subfolders, and without it the gates lint their own sealed copies.
**/tests/_evidence/
.claude/skills/test/_runtime/
*.last-test-result.json
**/tests/visual/__snapshots__/*-actual.png
**/tests/visual/__snapshots__/*-diff.png
.stryker-tmp/
reports/mutation/
.mutmut-cache/
**/tests/_a11y-scanner.py
**/tests/_console-capture.py
