.git
.github
node_modules
tools
tests
Dockerfile
.dockerignore
fly.toml
*.log
.DS_Store
**/.DS_Store
# Source maps are debug-only and never needed at runtime; excluding them keeps the
# build context small (the .map files are several MB) and the deploy upload fast.
**/*.map
# Marketing screenshots are referenced only from the README, not served by the app.
assets/screenshots
# ...with one exception. The desktop client's store screenshots ARE fetched from
# this domain: its AppStream metainfo names them by URL, and both Flathub's
# reviewers and the store listing load them over HTTPS. Excluded, they 404 and
# the submission is rejected. Only the desktop-* set ships; the README's
# full-size marketing captures stay out of the image, which is what the rule
# above was for.
!assets/screenshots/desktop-*.png
# The Snap Store badge is served from this origin so the page makes no
# third-party request; it has to actually ship for that to be true.
!assets/badges/*.svg

# Everything COPY'd here becomes a public URL under securebit.chat, so anything
# git-ignored as private has to be listed again here: .dockerignore does not read
# .gitignore. Without these, the local agent settings were being served from the
# live site, and a security-audit file left in the folder during a deploy would
# have been published with it.
.claude
.agents
skills-lock.json
SECURITY_AUDIT*.md
audit
# Replaced by config/ice-servers.prod.js in the Dockerfile; the local copy may
# hold a developer's TURN credentials.
config/ice-servers.js
# Local proof-of-concept and scratch scripts at the repo root.
/*.mjs