.gitignore

node_modules/
tmp/
dist/
dist-electron/
dist-zotero/
dist-browser/
server/dist/web/
release/
*.log
.DS_Store
.vite/
.kilo/
# GitHub Actions workflows are release infrastructure and must be versioned.
*.nodus
*.sqlite

# Personal photos used to verify the image tools stay on the machine that runs
# them: a real camera file carries device, timestamp and location metadata, and
# this repository is public. Point the verify scripts at a path outside the tree
# (see design/nodus-toolkit-plan.md §6.2-bis) instead of adding one here.
*.heic
*.HEIC
*.heif
*.HEIF

# Local credentials and signing material must never be committed.
.env
.env.*
!.env.example
*.pem
*.key
*.p12
*.pfx
*.mobileprovision

# esbuild smoke-test bundles (generated at repo root)
.smoke-*.mjs
.smoke-*.cjs
# Bundles the perf benches build next to the sources they import (esbuild needs the
# output inside the repo for --packages=external to resolve).
.bench-*.cjs
.bench-*.cjs.map
.bench-*.mjs
.dump*.cjs
.tmpbench/
build/NodusDockTile.docktileplugin/

# Local tooling / caches
.claude/
__pycache__/

# Locally generated analysis reports
reports/

# Reproducible throwaway profile retained by `npm run qa:notion-parity -- --retain`.
.qa/notion-parity-userdata/

# Local artifact previews (published website manuals live in site/manuals/)
output/
pages-artifact/

# Locally generated legal texts (rebuilt from node_modules on every build).
legal/generated/*
# ...except the pinned upstream license texts, which are vendored so packaging
# never depends on reaching gnu.org/apache.org/creativecommons.org/GitHub from
# CI. Their canonical URLs and SHA-256 digests stay in legal/remote-notices.json;
# the bundler reuses these whenever the digest matches instead of re-fetching.
!legal/generated/GPL-3.0.txt
!legal/generated/LGPL-3.0.txt
!legal/generated/CC-BY-4.0.txt
!legal/generated/APACHE-2.0.txt
!legal/generated/ONNX_RUNTIME_LICENSE.txt
!legal/generated/ONNX_RUNTIME_THIRD_PARTY_NOTICES-1.18.0.txt
!legal/generated/ONNX_RUNTIME_THIRD_PARTY_NOTICES-1.21.0.txt
!legal/generated/ONNX_RUNTIME_THIRD_PARTY_NOTICES-1.22.0-dev-89f8206ba4.txt
!legal/generated/SHARP_LIBVIPS_LICENSE.txt
!legal/generated/SHARP_LIBVIPS_THIRD_PARTY_NOTICES.md
!legal/generated/SHARP_LIBVIPS_VERSIONS.properties
!legal/generated/GITHUB_COPILOT_SDK_LICENSE.txt
!legal/generated/GITHUB_COPILOT_CLI_LICENSE.md
!legal/generated/OPENAI_CODEX_LICENSE.txt

# Nodus Toolkit test caches (Tesseract traineddata, etc.)
scripts/.cache/

# Local verification screenshots (scripts/verify-*-ui.mjs)
.tmp-shots/

# Tutorial video pipeline output (frames, audio, renders — never committed)
.tutorial-out/

# Local Nodus Server state (admin hashes, device tokens) — never committed
server/data/