# Keep the build context minimal and secrets out. The workspace
# Cargo.toml/Cargo.lock, crates/** sources (incl. Trunk.toml, index.html,
# style/, bootstrap.js), rust-toolchain.toml, rustfmt.toml and the secret-free
# config template are REQUIRED to build, so they are deliberately NOT ignored.

# VCS / tooling state
.codegraph/
.git/
.github/
.omo/
.opencode/
.playwright-mcp/

# Build output
/target
crates/web/dist

# Node / end-to-end tests (all four sub-artifacts under e2e/)
e2e/
node_modules/

# Provisioning runbook only
demo/

# Editor / OS noise
*.orig
*.rej
.DS_Store
__pycache__/

# Secrets and local/derived config: never bake into the image
.env
.env.*
config/*.local.json
config/client.json
config/config.json
config/dpop-key.json
config/e2e.json

# Keep the secret-free template available for operators
!config/config.example.json