.gitignore

# ─── CRITICAL: Never commit these ────────────────────────────────────────────
.env
.env.local
.env.production
.env.staging

# Keypairs and secrets
*.keypair.json
*_keypair.json
node_keypair.json
genesis_root_key.*
*.pem
*.key
*.p12
*.pfx

# Genesis private keys — NEVER commit
genesis-data/founder-keys.json
genesis-data/founding-vp-keys.json
genesis-data/founding-node-keys.json
genesis-data/genesis-keys.json
genesis-data/backups/

# Dev-only temp users (output of scripts/seed-temp-users.js).
# Carries private keys — strictly local test fixtures, never committed.
genesis-data/temp-users/

# Node registration output (private keys)
node2/
node3/

# Generated per-node keys + .env from scripts/register-node.js
generated_nodes/
generated-nodes/
# register-org.js writes org private keys here
generated_orgs/
generated-orgs/

# Genesis public data — OK to commit
!genesis-data/seed.db
!genesis-data/seed-output.json
!genesis-data/genesis.json

# ─── Node.js ─────────────────────────────────────────────────────────────────
node_modules/
npm-debug.log*
yarn-debug.log*
yarn-error.log*
.npm
.yarn-integrity
.pnp.*
dist/
build/
.next/
out/
package-lock.json

# ─── Python ──────────────────────────────────────────────────────────────────
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
env/
venv/
.venv/
ENV/
.env/
pip-log.txt
pip-delete-this-directory.txt
*.egg-info/
dist/
build/
eggs/
.eggs/
*.egg
MANIFEST
.pytest_cache/
.coverage
htmlcov/
.tox/
.hypothesis/

# ─── Database ────────────────────────────────────────────────────────────────
*.db
*.sqlite
*.sqlite3
!genesis-data/seed.db
data/
data2/
data3/
data.bak/
!data/.gitkeep

# Multi-node env files
node-2.env
node-3.env
node-*.env

# ─── Logs ─────────────────────────────────────────────────────────────────────
logs/
*.log
*.log.*

# ─── OS ──────────────────────────────────────────────────────────────────────
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db
Desktop.ini

# ─── IDEs and editors ────────────────────────────────────────────────────────
.idea/
.vscode/
*.swp
*.swo
*~
.project
.classpath
.settings/
*.sublime-project
*.sublime-workspace

# ─── Testing ─────────────────────────────────────────────────────────────────
coverage/
.nyc_output/
test-results/
junit.xml

# ─── CI/CD ───────────────────────────────────────────────────────────────────
.env.ci

# ─── ZK Circuit artifacts ────────────────────────────────────────────────────
# ptau files are large (100MB–1GB) — download from iden3/snarkjs GitHub README
circuits/*.ptau

# Intermediate build artifacts — regenerated by zk-setup.js
circuits/*.r1cs
circuits/*.sym

# These ARE committed — other devs need them to run the node and SDK:
#   circuits/vkey.json          (node loads to verify proofs)
#   circuits/dedup_final.zkey   (SDK uses to generate proofs)
#   circuits/dedup_js/          (SDK uses to generate proofs)

# ─── Temporary ───────────────────────────────────────────────────────────────
tmp/
temp/
*.tmp
*.temp
*.bak
*.backup
issues.md
todo.md
pilot.md

# ─── Package locks (commit these for apps, not libraries) ────────────────────
# Uncomment the lines below if this is a library package:
# package-lock.json
# yarn.lock

package-lock.json
chrome.crx
.claude
.cursorrules
.mcp.json
.opencode.json
.windsurfrules
AGENTS.md
CLAUDE.md
GEMINI.md
content_hash_problems.md
spec-audit.md
flow.md
my-notes
node/logs/
browser-extension


# Local dev node environments (generated by register-node.js — contain keys + data)
genesis-data/seed.db
genesis-data/seed.db-shm
genesis-data/seed.db-wal
node2-env/
node3-env/
node4-env/
node5-env/


# Local-only documentation
BFT_TIME_TESTING.md
CONSENSUS_TESTING.md
COMMITTEE_ROTATION_TESTING.md
DAG_EXPLAINED.md
INFRA_PLANNING.md
LOCALDEV.md
PRODUCTION.md
CMDS_LOGS.md
ISSUE_WE_HAVE.md
TIP_Protocol_Overview.md
.worktrees
scripts/mariadb-init.sql
scripts/mssql-entrypoint.sh
scripts/mssql-init.sql
scripts/oracle-init.sql
scripts/oracle-init.sh
scripts/postgres-init.sql
# Added by code-review-graph
.code-review-graph/

# Local-only dev artifacts (not committed)
COMMANDS.md
docker-compose.classifier-stub.yml
docker-compose.mixed-db.yml
scripts/start-mixed-db.sh
scripts/verify-mixed-db.sh
docs/superpowers/
docs/tech-debt/
node6-env/

# Prod observability: local copies hold the metrics token + admin password
infra/observability/prod/prometheus.yml
infra/observability/prod/.env
infra/observability/agent/promtail.env
deliveries/
generated/