# PHI data - NEVER commit
data/amd_phi/
data/patient_csvs/
data/cohort_analysis/*.parquet
services/amd/q1_raw_phi/
reports/

# Session transcripts (large, contain PHI)
sessions/daily/*/archive/
sessions/daily/*/*.jsonl

# Credentials
config/credentials/
tools/teams-channel/.env
tools/email-channel/.env
tools/rippling-mcp/.env
tools/curogram-mcp/.env
.mcp.json
.mcp.json.golden

# mcp-config: per-host secrets + render audit stamp
tools/mcp-config/hosts/*.env
!tools/mcp-config/hosts/*.env.example
tools/mcp-config/.rendered-by

# AutoBrowse traces (screenshots, session data)
autobrowse/traces/
autobrowse/reports/

# Node/build artifacts
node_modules/
.next/
.bun/
.wrangler/
*.log

# OS files
.DS_Store

# Rippling credentialing migration
scripts/rippling-credentialing-migration/data/
scripts/rippling-credentialing-migration/.env.local
scripts/rippling-credentialing-migration/*.session.json
Thumbs.db

# Temp files
/tmp/
*.tmp

# Temp automation scripts
amd_*.py
amd_*.mjs
reschedule_*.mjs

# Root-level screenshots (browser automation artifacts)
/*.png

# IDE/editor artifacts
.augment/
.factory/
.kiro/
.claude/worktrees/
# Personal Claude hooks/settings must not be committed (arbitrary code exec
# from repo config). Opt-in setup is documented outside tracked settings.
.claude/settings.json
.claude/settings.local.json

# Archive bundles
*.zip

# Python venvs + build artifacts
.venv/
__pycache__/
*.pyc
*.egg-info/

# Lock files (regenerated)
tools/rippling-mcp/bun.lock
tools/curogram-mcp/bun.lock
tools/ringcentral-mcp/bun.lock
tools/advancedmd-mcp/bun.lock
tools/mcp-shared/bun.lock
tools/rc-notifications-proxy/package-lock.json

# Playwright temp files
.playwright-mcp/

# Screenshots (temp)
sessions/*.png
sessions/*.html
sessions/screenshots/
sessions/debug*.png
sessions/frametest.png
sessions/iframe_wait.png
.env.browserbase
.codex/