| # Auth & secrets | |
| auths/ | |
| data/ | |
| *.key | |
| *.pem | |
| *.env | |
| .env | |
| .env.* | |
| # wrangler 本地变量（Cloudflare Worker 的 api_key 等，绝不进版本库） | |
| .dev.vars | |
| .dev.vars.* | |
| # ……但模板必须能进版本库（里面只有占位符，没有真密钥） | |
| !.dev.vars.example | |
| .wrangler/ | |
| # Binaries (anchored to repo root only — bare "login"/"credit" would also ignore cmd/login/, cmd/credit/) | |
| /login | |
| /credit | |
| /wb2api | |
| /wb2api-launcher | |
| /wb2api-sync | |
| /signin_bin | |
| # Config with secrets (use config.example.json) | |
| config.json | |
| # Build artifacts | |
| *.tmp | |
| __pycache__/ | |
| # Backups (contains auth tokens) | |
| backups/ | |
| # IDE | |
| .idea/ | |
| .vscode/ | |
| LOOP.md | |
| PLAN.md | |
| SPEC.md | |
| docs/ | |
| # 设计/计划文档（但 README.md 与 go:embed 的内置提示词必须进版本库） | |
| *.md | |
| !README.md | |
| !internal/prompt/defaultprompt.md | |
| # Windows binaries | |
| /wb2api.exe | |
| /wb2api-launcher.exe | |
| /wb2api-sync.exe | |
| /login.exe | |
| /credit.exe | |
| # 本地验证工具（判据逆向过程脚本，结论沉淀于 data/desktop-task-protocol.md） | |
| /cmd/desktopverify*/ | |
| *.zip | |
| server.exe | |
| .DS_Store | |