# Dependencies
node_modules/

# Local environment noise
.npm/
npm-debug.log*
.DS_Store
**/.DS_Store

# Operator ICE override holds TURN credentials — never commit it.
# Use config/ice-servers.example.js as the template.
config/ice-servers.js

# Internal security review notes. These describe attack paths against specific
# releases in enough detail to reproduce them, which is useful in private and
# harmful in a public repository — users who have not updated yet would be the
# ones exposed. Keep them out of the tree.
SECURITY_AUDIT.md
SECURITY_AUDIT*.md
audit/

# Agent tooling — local only. Skills (mine or third-party), their lockfile and
# the per-machine Claude Code settings describe how someone works on this repo,
# not what the repo is. They must never reach GitHub.
.agents/
.claude/
skills-lock.json