# Dependencies
node_modules/

# Environment & Secrets
.env
.env.local
.env.*.local
*.pem
*.cer
*.key
debug_cert_*.pem

# The rotating service token file must be provided locally for Docker mounts (and runtime writes).
# Never commit real tokens.
config/webex-service-tokens.json

# Logs & Runtime data
logs/
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# Storage / Certificates / Debug artifacts (provide aeoroots.cer etc. locally for your clone; volume mounted in Docker)
storage/

# Dev / test artifacts (local only)
characterization-runs/
scripts/*
# Tracked operational scripts (whitelisted; keep local dev helpers ignored above)
!scripts/reclaimWebexHosts.js
!scripts/removeAdvancedMessaging.js
!scripts/findEmptyLocations.js
!scripts/lib/
!scripts/lib/**
characterize-*.js

# Backup & temp files
*.bak
*~
*.swp
.DS_Store
Thumbs.db

# IDE / Editor
.idea/
.vscode/
*.sublime-project
*.sublime-workspace
.history/

# Build / Output
dist/
build/
coverage/
.nyc_output/

# DECT relay agent deploy bundles produced by dect-relay-agent/bundle.sh.
# The datestamped zip lands at repo root and shouldn't be committed —
# it's ~40MB (Docker image tarball) and rebuildable on demand.
dect-relay-agent-bundle-*.zip
dect-relay-agent-bundle-*/

# Docker / Misc
docker-compose.override.yml

# OS generated
.AppleDouble
.LSOverride
._*
.Spotlight-V100
.Trashes

# Misc project artifacts
testobjects.json
meraki-store-topology-demo.html
config/config.json
config/config.bak

# Local spike samples pulled from lab DBS-210 (never commit)
.dect-samples/

# Per-user report CSVs written by the bulk admin scripts.
# These contain emails, personIds, and per-user outcome — PII, never commit.
reclaim-*.csv
remove-*.csv
empty-locations-*.csv