# Secrets & local env — never commit (rotate if leaked)
.env
.env.*
!.env.example

# Dependencies & build output
node_modules/
vendor/
dist/
build/
coverage/

# Local JSON-mode data store (backend/internal/jsonstore, STORAGE_DRIVER=json) — dev/test
# data only, never shared or committed.
backend/data/

# Logs & DB dumps — NOT migrations. Migration files (goose / golang-migrate / prisma)
# are SOURCE and must be committed, so never ignore *.sql broadly — only real dumps.
*.log
*.dump
*.sql.gz
/dumps/
storage/logs/*

# Kit runtime state (regenerated — not shared)
.kit/audit.log
.kit/audit.log.*
.kit/build-manifest.json
.kit/state/
.smkit-backup/
