# Secrets — NEVER commit. These are the files the gateway and the kit read at # runtime; .app.env holds the session secret, the Postgres password and the DB # URL, .bw-auth.env the Pattern B client secret. .app.env .bw-auth.env .db.env .env .qa-invite.txt # Runtime state, not source: mockup bundles, attachments, the seed corpus, # the SQLite fallback DB. Postgres lives in a docker volume, not here. data/ # Build products and local tooling. main/app/static/ main/frontend/node_modules/ main/frontend/src/api/schema.d.ts .bw-venv/ **/__pycache__/ *.pyc # Gateway-owned markers/logs. .logs/.last-deploy .logs/deploy-failed.log # Large reference media in notes/ — kept on disk, never in history (a 150MB # video in a git object store is permanent). Transcripts and notes ARE tracked. notes/*.mp4 notes/*.mov notes/*.zip # Convenience upload bundle for option 2 — derived, not source. The concept # lives in leaguelaw/prototyping and the seed copy in data/seed/league; this is # just those two collated into one folder to drag into the uploader. notes/**/img/ # local `tsc -b` typecheck artifact main/frontend/tsconfig.tsbuildinfo