# Dependencies — reinstalled inside the image
node_modules
**/node_modules

# Build output / caches
.next
**/.next
dist
**/dist
.turbo
**/.turbo
*.tsbuildinfo
**/*.tsbuildinfo
coverage

# Generated MCP build contexts — recreated at runtime in a volume
build-context

# Secrets — never bake into an image (injected via env_file at runtime)
.env
.env.*
!.env.example
!.env.production.example

# OAuth signing keys — persisted in a named volume, not the image
keys

# Local / VCS noise
.git
.gitignore
.DS_Store
*.log
.vscode
.idea