.gitignore

# Operating System
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db

# Node.js
node_modules/
npm-debug.log*
yarn-debug.log*
yarn-error.log*
# package-lock.json - REMOVED: Required for Docker builds with npm ci
.pnpm-debug.log*

# Build outputs
dist/
build/
*.js.map

# Frontend - Generated documentation (synced from /docs during build)
services/web-ui/frontend/public/docs/**/*.md
services/web-ui/frontend/public/docs/architecture/
services/web-ui/frontend/public/docs/api/
services/web-ui/frontend/public/docs/guides/
# Keep UI-specific assets
!services/web-ui/frontend/public/docs/pic/

# Frontend - Generated manifest and types (allow stub for CI TypeScript check)
services/web-ui/frontend/src/generated/*
!services/web-ui/frontend/src/generated/docs-manifest.json

# Environment variables
.env
.env.local
.env.development.local
.env.test.local
.env.production.local
.venv/

# IDEs
.vscode/
.idea/
*.swp
*.swo
*~
.project
.classpath
.settings/

# Logs
logs/
*.log
audit.log
production_install.log
final_production_install.log
dry_run*.log
install*.log

# Installation state (idempotency tracking)
.install-state.lock

# Docker
docker-compose.override.yml

# Backup files
*.bak
*.backup
*__*
backup/
Backup/
.version-sweep-backup-*/

# PII Modernization - Never sync to repo
vigil-guard-pii-rollback-*/
services/presidio-pii-api/models/*.whl
services/presidio-pii-api/models/*.tar.gz

# Temporary files
*.tmp
*.temp
.cache/
.vite/

# Testing
coverage/
.nyc_output/

# Database
*.db
*.sqlite
*.sqlite3

# Vigil Guard Data Directory (persistent volumes)
vigil_data/

# Webhook authentication token (runtime secret, not for repository)
services/workflow/config/.webhook-token

# Bootstrap token files (runtime secrets, not for repository)
services/workflow/config/.bootstrap-token
services/workflow/config/.bootstrap-token-meta.json

# LLM Models (must be downloaded separately)
# Keep the directory structure but ignore model files
Llama-Prompt-Guard-2-86M/*
!Llama-Prompt-Guard-2-86M/DOWNLOAD_INSTRUCTIONS.md
!Llama-Prompt-Guard-2-86M/.gitkeep
!Llama-Prompt-Guard-2-86M/download-here.sh
vigil-llm-models/

# Claude Code artifacts
.claude/
**/CLAUDE.md
CLAUDE.md
CHANGELOG.md

# Claude Code UI state (runtime-generated, not for repository)
.claude-code/
# Note: Entire .claude-code/ directory is IDE-specific and should not be synced

# Codex tooling (local-only)
.codex/
bin
bin/vg-orchestrate
# Codex agent system (local-only, do not sync)
AGENTS.md
codex-protocols.md
codex-agents/
codex-state/

# Project management and scripts (not for repository)
IMPLEMENTATION_TODO.md
UX_TODO.md
CODEX_MIGRACA.md
MONITORING_TODO.md
DASHBOARD_UX_OPTIMIZATION.md
MONITORING+UX_TODO.md
update_logo.sh
logo_backup_*/
vigil_logo_new.png
services/workflow/workflows/backup/
services/workflow/config/version_history.json
services/workflow/config/*.bak
TODO.md
mustfix.md
TEST_ANALYSIS.md

# Claude Code wrapper scripts (local-only tmux integration)
scripts/claude-code-wrapper.sh
scripts/tmux-agent-status.sh

# Roadmap directory (internal planning, not for repository)
Roadmap/

# Browser Plugin - now part of the project
# plugin/

# Study documents (not for repository)
clickhouse_retention_study.md

# Operational/monitoring documentation (user-specific, not product docs)
docs/PII_MONITORING_QUERIES.md
docs/TMUX_STATUS_BAR.md

# Grafana datasource with secrets (generated from .example by install.sh)
services/monitoring/grafana/provisioning/datasources/clickhouse.yml

# Browser extension build artifacts
plugin/Chrome.crx
plugin/Chrome.pem
audit-logs/
Roadmap/

# Development/debug scripts (moved to ../Vigil-misc/)
debug_*.js
debug_*.cjs
debug_*.mjs
fix_*.js
fix_*.cjs
normalize_node.js
test_*.sh

# Auto-generated test files (moved to ../Vigil-misc/)
**/tests/**/auto-*.test.js
**/tests/**/fixtures/auto-*.json

# Branch analysis results (generated by branch-analysis.js)
services/workflow/tests/branch-analysis-results.json

# Temporary documentation (moved to ../Vigil-misc/)
FIX_*.md
DEBUG_*.md
VERIFICATION_*.md

# Test summaries (temporary analysis)
TEST_SUMMARY.md
PII_SCORE_REGRESSION_ANALYSIS.md

# Archive - v1.8 legacy files
old_1.8_files/
# Codex agent system (local-only, do not sync)
AGENTS.md
codex-protocols.md
codex-agents/
codex-state/

# Semantic Service - E5 Migration (Phase 3-4)
# Models (downloaded via scripts, too large for git)
services/semantic-service/models/
!services/semantic-service/models/.gitkeep
# Embeddings data (generated from source datasets)
services/semantic-service/data/*.jsonl
services/semantic-service/data/_backup_*/
# Keep source pattern files from external datasets only as needed