# Dependencies
node_modules/
package-lock.json

# Build output
out/
dist/
*.vsix

# Test coverage
coverage/

# IDE
.vscode-test/
.vscode/
.idea/
*.swp
*.swo

# Logs
logs/
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# Environment variables
.env
.env.*
!.env.example

# Credentials and secrets — defense in depth on top of gitleaks + GitHub
# native secret scanning. If you find yourself wanting to commit any of
# these, stop and rotate instead.
*.pem
*.key
*.keystore
*.p12
*.pfx
*.cer
*.crt
*_rsa
*_dsa
*_ecdsa
*_ed25519
id_rsa*
id_ed25519*
credentials
credentials.json
client_secret*.json
service-account*.json
.aws/
.ssh/

# Common leak files
secrets/
private/

# OS
.DS_Store
Thumbs.db
