# Dependencies
node_modules/
.pnp/
.pnp.js
.yarn/

# Build outputs
dist/
out/
release/
# Retired HealthKit bridge output that may remain in older checkouts
build/healthkit-bridge/
native/healthkit-bridge/.build/
build/location-helper-macos/
build/location-helper-linux/
build/location-helper-windows/
native/location-helper-macos/.build/
native/location-helper-macos/.swiftpm/
*.app
*.dmg
*.exe
*.deb
*.rpm
*.AppImage

# TypeScript
*.tsbuildinfo

# Database
*.db
*.db-journal
*.sqlite
*.sqlite3

# Logs
logs/
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# OS
.DS_Store
Thumbs.db
Desktop.ini

# IDE
.vscode/
.idea/
*.swp
*.swo
*.sublime-*

# Environment - IMPORTANT: Never commit secrets!
.env
.env.*
!.env.example

# Cache
.cache/
.eslintcache
.turbo/
*.cache

# VitePress docs build output
docs/.vitepress/dist/
docs/.vitepress/cache/

# Local npm pack artifacts
cowork-os-*.tgz

# Test coverage
coverage/

# Claude Code
.claude/
CLAUDE.md

# Local editor/tool output
/.cursor/
/.playwright-mcp/

# Local Codex config
.codex/

# CoWork local state
.cowork/

# Runtime-generated outputs
artifacts/
output/
# Agent task outputs can contain personal notes; never commit them by default.
outputs/

# VM artifacts
vm-bundle/
*.img
*.qcow2

# Electron
*.asar
/build/numbat/

# Temporary files
/.tmp/
tmp/
temp/
*.tmp
*.temp
*.bak
*.backup
*.orig
*.rej
*~
*.pid
*.pid.lock
*.seed

# Python cache artifacts
**/__pycache__/
*.py[cod]
.pytest_cache/
.mypy_cache/
.ruff_cache/

# Media files — user audio/voice recordings must never be committed
*.ogg
*.opus
*.mp3
*.wav
*.m4a
*.aac
*.flac
*.webm
*.caf
*.aiff

# iOS companion project (separate repo)
cowork-oss/
docs/ios-companion-example.swift
Mission_Control_Comparison_Recommendations.docx
CoWork OS founder vault/
AGENTS.md
# This compiled guide is bundled skill content, not local agent configuration.
!resources/skills/react-best-practices/AGENTS.md
/Users/
/solana-dapp/
changed-file-set-review-artifact.pdf
exact-changed-file-set.xlsx
recovery/
jsonl-preview.png

# Release automation source (the generic release/ rule is for build outputs).
!scripts/release/
scripts/release/*
!scripts/release/package-bundle.mjs
!scripts/release/package-bundle.test.mjs
!scripts/release/registry-publication.mjs
!scripts/release/registry-publication.test.mjs
!scripts/release/smoke-bundle.mjs
!scripts/release/smoke-input.test.mjs
!scripts/release/install-macos.test.mjs
!scripts/release/install-windows.test.mjs
!scripts/release/fetch-with-retry.mjs
!scripts/release/fetch-with-retry.test.mjs

# Signing keys and certificates — never commit
*.p12
*.pfx
*.p8
*.pem
*.key
*.cer
*.csr
*.keychain
*.keychain-db
*.mobileprovision
*.provisionprofile

# Screen recordings and debug captures (can contain personal data, cookies, tokens)
*.mov
*.mp4
*.mkv
*.har
*.heapsnapshot
*.cpuprofile
trace.zip

# Stray documents and images dropped at the repo root
/*.png
/*.jpg
/*.jpeg
/*.pdf
!/ZeroLeaks-Report-*.pdf
/*.docx
/*.xlsx
/*.pptx
/*.csv

# CoWork bootstrap stubs written to the root
/HEARTBEAT.md
/source-ledger.json

# Xcode / SwiftPM / Python environments
xcuserdata/
*.xcuserstate
DerivedData/
.swiftpm/
.venv/
venv/

# Locally generated research and reports (never committed)
/reports/
research_notes/
