# ============================================================================
# Never commit real secrets or local data. (Learned from the previous build:
# the incumbent committed a plaintext SMTP password. Spiti forbids it.)
# ============================================================================

# Real environment files — NEVER committed. Only .env.example is committed.
.env
.env.local
.env.*.local
*.env

# Local database + generated data
data/
*.db
*.db-journal
*.db-wal
*.db-shm

# Dependencies
node_modules/

# Logs and OS cruft
*.log
npm-debug.log*
.DS_Store
Thumbs.db
