# Dependencies
node_modules/

# Environment & secrets
.env
.env.local
*.db
*.db-shm
*.db-wal
bot/tokens.env

# Agent configs with tokens
adapters/zylos/config*.json

# User uploads (avatars, attachments)
gateway/uploads/

# Poll state files
gateway/.nc-poll-state.json
gateway/.plane-poll-state.json
adapters/zylos/.last-event-ts
adapters/zylos/.last-event-ts-*

# Runtime data
gateway/data/preferences/

# Next.js
shell/.next/
shell/.next-app/
shell/out/
shell/tsconfig.tsbuildinfo
shell/nohup.out

# Built shell static export (generated by `npm run build:app`, not source)
# Tracked previously to ease quick App pull for testing — switched to ignored
# now that build:app auto-rsyncs out/ → shell-dist/. Run `npm run build:app`
# locally to regenerate.
shell-dist/

# Electron build output
release/


# OS
.DS_Store

# Docker volumes (local only)
dex-data/

# PM2
ecosystem.config.cjs
.worktrees/

docs/superpowers/
shell/docs/superpowers/

dist/

*.tgz

# Secrets and credentials (defensive)
*.pem
*.key
*.p12
*.pfx
*.crt
*.cer
.env.*
!.env.example
*.token
*-token.json
*-secret.json
*-credentials.json
secrets/
credentials/

# AI assistant configs (may contain API keys)
.cursor/
.aider/
.aider.input.history
.aider.chat.history.md
.claude/

# OS-specific (defensive)
Thumbs.db
desktop.ini
*.swp
*.swo
*~
.idea/
.vscode/

# Backup files (often contain secrets when devs are debugging)
*.bak
*.backup
*.orig

# Coverage and test artifacts
coverage/
*.lcov

# Adapter runtime config (contains agent_token, openclaw_auth_token)
adapters/**/config-*.json
!adapters/**/config-*.example.json
adapters/**/.last-event-ts-*
*.db.cleanup-bak-*
node-runtime/
