# Dependencies
node_modules/

# Build output
dist/
.dist/

# Environment — NEVER commit .env (secrets at rest: DB passwords, OIDC secrets, encryption key)
.env

# Editor
.vscode/
.idea/
*.swp
*.swo

# OS
.DS_Store
Thumbs.db

# Logs
*.log
npm-debug.log*
pnpm-debug.log*

# TypeScript
*.tsbuildinfo

# Drizzle migrations (generated — not secrets, but keep clean)
# apps/api/src/db/migrations/

# Test coverage
coverage/
.nyc_output/