# Python
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
dist/
build/
.venv/
venv/
.eggs/

# 环境变量
.env
.env.local
.env.*

# IDE
.vscode/
.idea/
*.swp
*.swo

# 系统
.DS_Store
Thumbs.db

# Node
node_modules/
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# 前端构建
frontend-agent/dist/
frontend-h5/dist/

# 日志
*.log
logs/

# Docker
*.pid
*.seed
*.pid.lock

# =============================================================================
# P0 安全: SSL 私钥 / 部署包 / 历史日志 (2026-06-14 强化)
# =============================================================================

# SSL 私钥 + 证书请求
*.key
*.pem
*.csr

# docs/ 下所有 servyou.com.cn 证书(目录 + 文件 + zip 全部,** 匹配任意深度)
docs/servyou.com.cn**
docs/*证书*/
docs/*ssl*/
docs/*SSL*/
docs/*证书*.zip
/docs/*证书*.zip

# 部署包 + 部署产物(体积大 + 经常含私钥)
deploy-*.tar
deploy-*.tar.gz
deploy-packages/
deploy-patch.tar
deploy-admin.tar
deploy-agent.tar
deploy-backend.tar
deploy-h5.tar
deploy-portal.tar
*.tar
*.tar.gz

# 历史日志 + 构建日志(stderr 噪声)
*.log.err
build_logs/
agent_build.log.err
build-agent.log.err
build-agent2.log.err
build-h5.log.err
build-h5-fix.log.err
build_all.log.err

# 本地部署脚本 + 部署目录
build.ps1
build_all.ps1
deploy-frontend-nas.bat
deploy-nas/

# 部署产物 zip(体积大 + 含 dist)
frontend-*-dist-fix*.zip
frontend-*-dist-fix-*.zip
it-smart-desk-*-deploy.zip

# deploy-server/ 部署配置(nginx conf 入仓, .env 排除)
deploy-server/**/.env*
deploy-server/**/secrets/
deploy-server/**/*.pem
deploy-server/**/*.key

# SQLite 本地测试库
it_smart_desk.db
*.db
*.sqlite
*.sqlite3

# pytest / 临时
.pytest_cache/
/tmp/
*.pid
.coverage
htmlcov/

# 本地开发脚本 + 临时文件(2026-06-14 强化)
dev-start.bat
dev-start.ps1
start-backend.ps1
temp_*.txt
temp_*.py
wecom-it-desk-nas.zip
wecom-it-desk-server-deploy.zip

# =============================================================================
# P0 安全: workbuddy 凭据(2026-06-14 强化)
# =============================================================================
# workbuddy config 含 Gitea access token,绝对不入仓
# 类比 .git/config: 工作目录可写,但 git add . 时排除
.workbuddy/config.json
.workbuddy/config.local.json
.workbuddy/*.token
.workbuddy/credentials*
.workbuddy/.env*
# workbuddy 临时日志(评审/任务跑批的中间产物)
.workbuddy/logs/
.workbuddy/*.log
.workbuddy/*.log.err
# workbuddy 记忆目录(个人上下文,不 入仓)
.workbuddy/memory/
