.gitignore

# Logs
logs
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
lerna-debug.log*

node_modules
dist
dist-ssr
*.local

# Rust build output
/src-tauri/target/

# Staged Tauri sidecar binaries (generated by scripts/prepare-sidecar.mjs)
/src-tauri/binaries/

# Internal strategy docs - not for the public repo
/docs/COMPETITIVE.md
/docs/PLAN.md
/docs/STATUS.md
/docs/LAUNCH.md
/docs/LAUNCH-DAY.md
/docs/MONETIZATION.md

# Draft MCP-registry manifest (references an unpublished gateway package; not for launch yet)
/server.json

# Editor directories and files
.claude/
.vscode/*
!.vscode/extensions.json
.idea
.DS_Store
*.suo
*.ntvs*
*.njsproj
*.sln
*.sw?

# Mobile icons from `tauri icon` (desktop-only project)
/src-tauri/icons/android/
/src-tauri/icons/ios/

# Raw (uncaptioned) demo recording - the captioned demo.mp4/demo.gif are tracked
/docs/demo-raw.mp4

# Raw screen recordings (keep local, not in the repo)
/docs/Recording*.mp4

# One-off marketing/demo assets (e.g. per-post videos + their caption scripts),
# kept local; the README's demo.mp4/.gif/.srt stay tracked.
/docs/conduit-llmstudio-demo*.mp4
/captions.srt
# Standalone HTML animations rendered for individual posts/videos.
/mcp-usb-animation.html
/toolport-cta-end-card.html

# Stray test artifacts (e.g. share/export test exports)
/src-tauri/test.json

# Benchmark run outputs - can contain real account data (product/project names, team IDs)
/benchmark/**/answers.txt
/benchmark/**/sweep-results.csv
/benchmark/**/sweep-summary.md
/benchmark/answers.txt
/benchmark/sweep-results.csv
/benchmark/sweep-summary.md
/benchmark/ctx*/
/benchmark/smoke/
.smoke-test/
/benchmark/capable/
/benchmark/local-*/
/benchmark/local-compare*.json
/benchmark/groq/
/benchmark/gemini/
# Local ground-truth for grading (your real account items) - never commit
/benchmark/expect.local.json

# Generated at build time by the Windows signing step (holds the resolved signCommand)
/src-tauri/tauri.signing.conf.json

# Signing key material + certs - NEVER commit (private keys, .p12 bundles). The
# real signing identity lives only in the APPLE_* / AZURE_* GitHub secrets.
*.p12
*.pfx
*.key
*.pem
*.cer
*.mobileprovision
# `*.key` doesn't match these: a local Open WebUI test secret and a stray 0-byte file.
.webui_secret_key
license-signing.keycd

# Internal planning/strategy docs (kept local, like MONETIZATION/STATUS/COMPETITIVE/PLAN)
/docs/SITE-MESSAGING.md
/docs/specs/
/docs/drafts/
# Captured design direction, explicitly "not a committed spec".
/docs/HIL-TEAMS-MOBILE.md

# Agent/session scratch (never commit)
_poll_pr.py
_cr*.txt
src-tauri/rate_limit_counters.test.json

# TypeScript build output. `tsc` writes these next to their sources whenever the
# typecheck runs, so they show up untracked after any `npm run build` or bare
# `tsc -p`. Only `vite.config.ts` is source; the .js/.d.ts beside it are emitted.
*.tsbuildinfo
/vite.config.js
/vite.config.d.ts

# Rendered per-release AUR package (scripts/render-aur.sh). PKGBUILD/.SRCINFO
# carry the sha256 of ONE release's .deb, so a checked-in copy would either be
# stale or be a checksum nobody verified. CI renders them on release; only
# packaging/linux/aur/README.md is tracked.
/packaging/linux/aur/PKGBUILD
/packaging/linux/aur/.SRCINFO
/aur/