# macOS
.DS_Store
.AppleDouble
.LSOverride
Icon
._*
.Spotlight-V100
.Trashes

# Xcode
build/
DerivedData/
*.xcuserstate
*.xcscmblueprint
*.xccheckout
xcuserdata/
*.moved-aside
*.hmap
*.ipa
*.dSYM.zip
*.dSYM
timeline.xctimeline
*.profraw
*.profdata

# Swift Package Manager
.build/
.swiftpm/

# IDE
.idea/
.vscode/
*.swp
*.swo
*~

# Local workspace metadata — editor and agent configuration is per-machine and
# never part of the shipped source.
.claude/
.codex/
.agents/
.cursor/
CLAUDE.md
AGENTS.md

# Signing and local build configuration. Copy Configuration/Developer.xcconfig.template
# to Configuration/Developer.xcconfig and fill in your own team ID.
Configuration/Developer.xcconfig
Secrets.xcconfig
*.pem
*.p12
*.p8
*.cer
*.der
*.key
*.keychain
*.keychain-db
*.mobileprovision

# Credentials and environment files. Real secrets never ship; only committed
# example/template stubs are allowed back in.
.netrc
.env
.env.*
!.env.example
!.env.template
!.env.sample

# Packet captures and session/export artifacts — real traffic must never be
# published. These are product data, not source.
*.pcap
*.pcapng
*.pcap.gz
*.pcapng.gz
*.pcap.zst
*.pcapng.zst
*.pcap.xz
*.pcapng.xz
*.pcap.bz2
*.pcapng.bz2
/captures/
/sessions/
/exports/

# Maintainer automation — not part of the published source.
scripts/
!.github/scripts/
!.github/scripts/check-public-safety.sh
RELEASE.md

# Release artifacts
releases/
signatures/
*.dmg
*.dmg.sha256
*.xcarchive
*.zip
*.tar.gz

# Tooling
*.log
.swiftformat.lock
