node_modules/
**/node_modules.__bak*/
**/node_modules.bak*/
dist/
build/
.svelte-kit/
.env
.env.local
*.exe
*.test
bin/
.tmp*
tmp/
.DS_Store
apps/api/internal/db/sqlc/
coverage/
.idea/
.vscode/
*.log
*cookies.txt
*.cookies.txt

# Runtime uploads (keep data/sample-*.csv)
data/uploads/
apps/api/data/uploads/

# codehelper (generated local - do not commit)
.codehelper/
.cursor/
.claude/
.codex/
.mcp.json
AGENTS.md
CLAUDE.md
CODEHELPER*.md

# Migrator artifacts (ID maps / set-password hooks may contain PII - never commit)
artifacts/
maps/
**/set-password-hooks.json
**/password_invites.json
**/id-map.json
**/validation-report.json
# Local run artifacts
.bin/
**/.bin/
**/restart.pids.json
*.pids.json

# Local scratch / one-shot agent artifacts (never ship)
.tmp/
.tmp-*/
**/.tmp/
**/.tmp-*/
*_test-out*.txt
*.ps1.tmp
scripts/_layout_snip.js
scripts/write_001.py
apps/web/scripts/_*
apps/web/scripts/tr-*

# Never ship local browser-audit dumps as public static
apps/web/static/.audit/

# codehelper (generated local — do not commit)
.zed/