# Legacy archive: contains plaintext credentials, cracked software, Capcom-derived assets.
# See .planning/codebase/CONCERNS.md before ever changing this rule.
legacy/

# Node deps and build artifacts (general)
node_modules/
**/node_modules/
dist/
coverage/
*.tsbuildinfo

# Phase 1 extractor working state (D-08); the committed `extracted/` tree is NOT ignored.
.extracted-cache/

# Plan 07 ad-hoc trace scripts (transient debugging tools, not part of build)
tools/extract-gmd/trial-parse.ts
tools/extract-gmd/trace-objects.ts
tools/extract-gmd/trace-actions.ts

# Editor / OS
.DS_Store
Thumbs.db
.vscode/
.idea/

# Claude Code agent session state (live agent IDs, ephemeral worktrees)
.claude/

# Stray tsc emit (no outDir set in apps/server/tsconfig.json) — production
# uses dist/. Sibling .ts files are tracked.
apps/server/src/**/*.js
apps/server/test/**/*.js
apps/server/scripts/*.js

# Dev-side keys created when `pnpm --filter @rebno/server dev` runs with
# CWD=apps/server. Canonical signing keys live at repo-root keys/.
apps/server/keys/

# [impl->REQ-SRV-13] Ed25519 PRIVATE signing keys (CONTEXT D-11). Public-key
# siblings (*.pub.pem) remain committed so CI's lint:room-layout (Plan 04-12b)
# can verify signatures without access to the private half. Pattern is
# recursive (`**/keys/`) because `pnpm --filter @rebno/server dev` runs with
# CWD=apps/server and creates `apps/server/keys/` instead of the repo-root
# `keys/`. Both dev locations must be excluded.
keys/*.ed25519
**/keys/*.ed25519

# tools/room-converter creates a local keys/ dir when invoked without --key.
# The canonical signing key lives at repo-root keys/. Exclude the local copy.
tools/room-converter/keys/

.uat-secrets.tmp

# Local env files (BETTER_AUTH_SECRET, DATABASE_URL, etc.). Only .env.example
# is tracked. @colyseus/tools/loadenv (side-effect-imported by `colyseus`)
# auto-loads .env.development and .env at boot — without this rule a stray
# secret in either file would commit silently.
.env
.env.*
!.env.example

# Local dev SQLite created when `pnpm --filter @rebno/server dev` boots with
# the .env.development DATABASE_URL=./rebno-dev.db default.
apps/server/rebno-dev.db
apps/server/rebno-dev.db-*

# Playwright transient artifacts (videos/traces/snapshots from e2e debug runs)
.tmp-pw-artifacts/

# Phase 7 smoke-test LDtk world — operator-local artifact, ~100MB+ inline
# tile-data blob. Configuration (9-chunk dims, layer setup, tileset binding)
# captured in .planning/phases/07-.../SMOKE-NOTES.md; the .ldtk itself is
# throwaway. v1.2 BNCentral conversion will use externalLevels=true so each
# chunk lives in its own small .ldtkl file.
maps/_smoke/*.ldtk