.DS_Store
.idea
.vscode
*.log
*.iml
.env
.env.local
.env.production

node_modules/
__pycache__/
*.py[cod]
.output/
.tanstack/
.nuxt/

/app/node_modules/
/app/.output/
/app/.tanstack/
/app/src/routeTree.gen.ts

.clickhouse_db_vol/
.clickhouse_db_vol*
tmp/
dist/
coverage/

# Private operational records and one-off production migration scripts
/deploy/CLEANIP.md
/app/scripts/migrate_cleanip.py
*.pem
*.key
.env.*
!.env.example

# Runtime databases, exports, backups and local credentials are never source.
*.db
*.db-*
*.sqlite
*.sqlite-*
*.sqlite3
*.sqlite3-*
*.dump
*.dump.gz
*.sql
*.sql.gz
*.sql.bz2
*.sql.xz
*.bak
*.backup
*.tar
*.tar.gz
*.tgz
*.zip
*.jsonl
*.p12
*.pfx
*.jks
.pgpass
.netrc
backups/
backup/
logs/
data/
credentials/
.credentials/
secrets/
.secrets/
credentials*.json
secrets*.json
accounts.json
id_rsa
id_ed25519

# Reviewed SQL source may be versioned; runtime dumps remain excluded.
!app/migrations/**/*.sql
!app/src/**/*.sql

# Unified encrypted recovery packages and local operations state.
*.lsb
*.lsb.partial
*.env
*.before-restore
*.restore-*.json
.litestats-ops.lock

# Edition workspaces are independent repositories; hosted source stays private.
/self-hosted/
/cloud/
/website/
