.gitignore

# ============================================================================
#  ⚠️  THIS REPOSITORY IS PUBLIC ⚠️
#  Never commit secrets, private keys, store credentials, or mobile signing
#  material. The block below is the safety net — keep all such files LOCAL.
#  Commit only *.example / *.template placeholders for anything sensitive.
#  If you must track a file matched below, force it explicitly: `git add -f <path>`.
# ============================================================================

# ─── 🔐 Secrets, environment & credentials — NEVER COMMIT ───────────────────
.env
.env.*
*.env
!.env.example
!.env.template
!.env.sample
*.secret
*.secrets
secrets/
secret/
**/secrets.*
credentials.json
**/credentials*.json
**/service-account*.json
**/serviceAccountKey.json
**/gha-creds-*.json
.netrc
*.token
api_keys.*
apikeys.*

# ─── 🔑 Private keys & certificates (PEM / PKCS / DER / SSH) ────────────────
*.pem
*.key
*.pfx
*.p12
*.p8
*.cer
*.der
*.crt
*.csr
*.certSigningRequest
*.jks
*.keystore
id_rsa
id_dsa
id_ecdsa
id_ed25519
*.ppk
# (Firmware signing/NVS-key blobs, if ever used, are covered by *.bin below.)

# ─── 🍏 Apple / iOS signing, provisioning & store config ───────────────────
*.mobileprovision
*.provisionprofile
AuthKey_*.p8
**/ios/ExportOptions.plist
**/ios/Runner/GoogleService-Info.plist
**/GoogleService-Info.plist
**/ios/fastlane/.env*
**/ios/fastlane/report.xml
**/ios/fastlane/Preview.html
**/ios/fastlane/test_output/
**/ios/fastlane/screenshots/

# ─── 🤖 Android signing, Google services & store config ────────────────────
**/key.properties
**/keystore.properties
**/signing.properties
**/android/app/google-services.json
**/google-services.json
**/android/app/upload-keystore.jks
**/android/fastlane/.env*
**/android/fastlane/report.xml
**/android/play-store-credentials.json

# ─── 🚀 Fastlane (keep Fastfile/Appfile/Matchfile/Pluginfile tracked) ──────
**/fastlane/.env*
**/fastlane/report.xml
**/fastlane/Preview.html
**/fastlane/test_output/
**/fastlane/screenshots/

# ─── OS / editor junk ──────────────────────────────────────────────────────
.DS_Store
.AppleDouble
.Spotlight-V100
.Trashes
._*
Thumbs.db
desktop.ini
*.swp
*~
.idea/
.vscode/
*.iml

# ─── Flutter / Dart (app/) ─────────────────────────────────────────────────
.dart_tool/
.packages
.pub-cache/
.pub/
build/
**/build/
.flutter-plugins
.flutter-plugins-dependencies
*.lock.bak
coverage/
**/doc/api/
.fvm/
# Keep pubspec.lock and Podfile.lock TRACKED (app build reproducibility).

# ─── Node.js / Next.js public site (tools/web/) ─────────────────────────────
tools/web/node_modules/
tools/web/.next/
tools/web/out/
tools/web/next-env.d.ts
tools/web/.open-next/
tools/web/.wrangler/
tools/web/.vercel/
tools/web/.turbo/
tools/web/playwright-report/
tools/web/test-results/
tools/web/*.tsbuildinfo

# Generated Dart (build_runner / drift / freezed / l10n / launcher icons)
*.g.dart
*.freezed.dart
*.config.dart
*.gr.dart
*.mocks.dart
**/generated/

# ─── iOS build / generated (signing material is in the 🍏 block above) ─────
**/ios/Pods/
**/ios/.symlinks/
**/ios/Flutter/Flutter.framework
**/ios/Flutter/Flutter.podspec
**/ios/Flutter/Generated.xcconfig
**/ios/Flutter/flutter_export_environment.sh
**/ios/Flutter/ephemeral/
**/ios/Runner/GeneratedPluginRegistrant.*
**/xcuserdata/
**/*.xcuserstate
**/DerivedData/
*.xcarchive
*.dSYM.zip
*.ipa

# ─── Android build / generated (signing material is in the 🤖 block above) ─
**/android/.gradle/
**/android/.kotlin/
**/android/captures/
**/android/local.properties
**/android/app/release/
**/android/app/debug/
**/.cxx/
*.aab
*.apk

# ─── Firmware (firmware/) ──────────────────────────────────────────────────
firmware/build/
firmware/**/build/
sdkconfig
sdkconfig.old
*.elf
*.map
*.bin
managed_components/
dependencies.lock
# Generated by build.sh from versions.lock [pyble] (BLD-12) — never hand-edited.
firmware/user_c_modules/pyble/pble_version.h
.idf_tools/
# ESP-IDF is installed from the pin into a gitignored dir, not an outer
# submodule (BLD-11). Default install location for firmware/scripts/*.
firmware/.esp-idf/
.esp-idf/
# firmware/upstream/micropython/ is now a tracked git submodule (see .gitmodules);
# its working tree is managed by git-submodule, not ignored here.

# ─── Release artifacts (published via GitHub Releases instead) ─────────────
releases/
dist/

# ─── Scratch / local-only notes (never committed at repo root) ─────────────
local/
scratch/
tmp/
.tmp/
*.local
*.local.md
# Local assistant state and working device screenshots stay outside the repo.
/.claude/
/ScreenShots/
**/.claude/agent-memory/
docs/**/.claude/

# ─── Python bytecode (firmware modules + host tests) ───────────────────────
__pycache__/
*.pyc
*.pyo