# Dependencies
node_modules/

# Environment variables and local secrets
.env
.env.*
!.env.example

# Runtime data, uploads, and evidence (NEVER upload to the server)
data/
uploads/
evidence/
backups/

# Databases and SQLite runtime files
*.sqlite
*.sqlite-*
*.db
*.db-*

# Logs and local runtime artifacts
*.log
cookies.txt
state-snapshot.txt

# Test/debug artifacts
test-debug*
test*.png
test3.png

# Local preview workspace (WIP, screenshots, marketing backups)
.preview/

# OS and editor files
.DS_Store
Thumbs.db
.idea/
.vscode/

# Local runtime artifacts
server.log
server.err
server2.log

# Windows reserved device names that occasionally leak in via bad
# shell redirects. Never commit these — they're never real source files.
nul
con
prn
aux

# Shell-misuse junk files at repo root. They appear when a typo'd
# redirect (`echo foo > {` for example) is followed by `git add .`
# before anyone notices. They're never source — kill on sight.
({src
{
document.querySelectorAll*