# Deny by default: credentials, databases, attachments and local build outputs
# must never reach the build daemon, even when added elsewhere in the workspace.
**
!package.json
!package-lock.json
!apps/
!apps/web/
!apps/web/package.json
!apps/web/next.config.ts
!apps/web/next-env.d.ts
!apps/web/tsconfig.json
!apps/web/src/
!apps/web/src/**
!apps/web/public/
!apps/web/public/**
!apps/mobile/
!apps/mobile/package.json
!packages/
!packages/contracts/
!packages/contracts/package.json
!packages/contracts/src/
!packages/contracts/src/**
!apps/api/
!apps/api/requirements.lock.txt
!apps/api/alembic.ini
!apps/api/phonebuzz/
!apps/api/phonebuzz/*.py
!apps/api/migrations/
!apps/api/migrations/*.py
!apps/api/migrations/*.mako
!apps/api/migrations/versions/
!apps/api/migrations/versions/*.py
!deploy/
!deploy/staging/
!deploy/staging/*.Dockerfile
!deploy/staging/*.py
**/.env*
**/*.db
**/*.db-*
**/*.key
**/*credentials*
**/__pycache__/**
