migrations/** */
.DS_Store
.AppleDouble
.LSOverride
Icon
?
._*
dist/**
dist/**/*
# Editor / IDE
.idea/
.vscode/
*.swp
*.swo
*~
**pycache__/
**pycache**
# Claude / local AI tooling
.claude/
.audit.js

# Backups
.backup-prebrand/
*.bak
*.backup
*/node_modules/*
# Python
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
.venv/
venv/
env/

# Environment / secrets — NEVER commit real .env files
.env
**/.env
.env.*
**/.env.*
!.env.example
!**/.env.example
!frontend/.env.development
!frontend/.env.production

# Postman/Insomnia environments holding real API keys
*.postman_environment.local.json

# Logs & temp
*.log
tmp/
temp/
.cache/

# Frontend build
node_modules/
frontend/dist/

# Uploaded content — user data, never in git
backend/uploads/

# Google OAuth ADC / Desktop client secrets — never commit
backend/credentials/*.json

**.pdf
# Per-machine alembic autogen revisions only — the old bare `**_**_**.py`
# also swallowed any module with two underscores (e.g. test_talent_plugins.py).
backend/migrations/versions/**_**_**.py
Utopia-ai-hr-ats-portal 1.pem

# Local-only Compose overrides (never deployed)
docker.local.env
tests/**
**/.env**

# Paper form source documents (Annexure A/E/J) — reference material, not code.
# Root-anchored: backend/candidate_forms/ is the forms domain package and IS tracked.
/candidate_forms/
frontend/dist/** */
docker.local.frontend/dist/** */
frontend/dist/index.html
frontend/dist/index.html
tests/**
/backend/tests/**