# Docker secrets
.env
Server/.env

# Claude Code — local-only by default. The exceptions are committed on purpose:
# a cloud session clones this repo and sees ONLY tracked files, so the CLAUDE.md
# files, skills and workflows have to be here or it starts with no instructions.
# Machine-local state (settings.local.json, locks) stays ignored.
.claude/*
!.claude/skills/
!.claude/workflows/
!.claude/settings.json
CLAUDE.local.md
.mcp.json

# GitHub Copilot instructions (internal)
.github/copilot-instructions.md
.github/instructions/

# Agent worktrees (Mission Control fleet isolation)
.worktrees/

# AI-specific / internal planning docs
docs/brain/
docs/CODEMAPS/
docs/designs/
docs/research/
docs/superpowers/
/skills/

# Mutation-testing output (npm run test:mutate). Local-only by design: a
# surviving-mutant report maps exactly which behaviour nothing tests.
Client/tauri-client/.stryker-tmp/
Client/tauri-client/reports/

# Server runtime artifacts
Server/chatserver.exe
Server/chatserver.exe~
Server/owncord-server.exe
Server/server.exe
Server/config.yaml
Server/data/

# Test coverage artifacts
*.out
Server/cov.out
Server/cover.out
Server/coverage.out
Server/ws_cover.out
Server/ws_cov.out

# Client build artifacts
Client/publish/
Client/publish-single/
Client/publish-release/

# HTML mockups (large design reference files)
Client/login-mockup.html
Client/ui-mockup.html

# Tauri typegen (auto-generated IPC bindings)
Client/tauri-client/src/generated/
.typecache

# Node modules
node_modules/

# AI tooling
.gstack/
.claude-flow/
.rust-review-results/

# Bug-hunt ledger: shared so contributors can add findings. Only the ledger,
# its render and its validator are tracked; hunt transcripts, .bak snapshots
# and debris patches are per-session scratch and stay local.
.superpowers/*
!.superpowers/findings-ledger.json
!.superpowers/FINDINGS.md
!.superpowers/render-ledger.mjs

.claude/worktrees/

# Internal dev tools (e.g. tools/livekit-server.exe) are ignored, but the
# owncord-introspect MCP server is a committed, shared dev tool.
tools/*
!tools/mcp-introspect/
tools/mcp-introspect/node_modules/
.cache/

# Internal dev files (root-level scratch only)
/SKILL.md
TODOS.md
DESIGN.md
Client/CLIENT-REVIEW.md

# Agent tooling state
.serena/

# Client env (holds API keys - never commit)
Client/tauri-client/.env

# Rust review output
.rust-review-results/

# Claude Code worktrees (local scratch, never commit)
.claude/worktrees/

# local server run logs
server.log

# Knowledge graph (graphify). The top-level built graph is tracked so a fresh
# clone can query it without a rebuild. Every subdirectory stays local: cache/
# is a per-machine AST build cache, and graphify parks the PREVIOUS graph in a
# dated YYYY-MM-DD/ backup on each rebuild — 18 MB of stale duplicate that is a
# local rollback aid, not shared state.
graphify-out/*/

# Transient graphify rebuild-state file.
graphify-out/.pending_changes