feat: Implemented Recovery Missions and Weekly/Custom Contest for Students engagement!

.env.ssh.example

@@ -1,6 +1,6 @@
 # samagama.in deployment example. Copy to `.env` on the SSH server.
 PORT=5003
 MONGO_URI=mongodb://127.0.0.1:27017/sakshi_spurti
-ALLOW_STUDENT_SEARCH=false
+ALLOW_STUDENT_SEARCH=true
 SPURTI_AUTH_SECRET=replace-with-the-same-secret-used-by-samagama
 SPURTI_COOKIE_SECURE=true

.gitignore

@@ -1,26 +1,169 @@
+# =====================================================================
+# Spurti — local-dev and secrets exclusion list
+# Generated 2026-07-05. Anything in here is INTENTIONAL: do NOT commit.
+# Personal/scratch notes stay local. Real code goes through PR review.
+# =====================================================================
+
+# ---- Node / package managers ----
 node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+.pnpm-store/
+.npm/
+.yarn/
+*.tgz
+
+# ---- Build outputs ----
+# Top-level (rare in this repo)
 dist/
+build/
+out/
+*.tsbuildinfo
+
+# Vite client
+client/dist/
+client/.vite/
+
+# Coverage / test artifacts
+coverage/
+.nyc_output/
+*.lcov
+junit.xml
+test-results/
+
+# ---- Runtime data & caches ----
+.cache/
+.parcel-cache/
+.eslintcache
+.stylelintcache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+*.pid
+*.seed
+*.pid.lock
+
+# ---- Environment & secrets ----
+# Real .env / .env.local must NEVER be committed.
 .env
 .env.*
 !.env.example
 !.env.ssh.example
-.DS_Store
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
+.envrc
 
-# raw uploaded session data (not source)
+# Keys, certs, tokens
+*.pem
+*.key
+*.crt
+*.cer
+*.p12
+secrets/
+.service-account.json
+firebase-adminsdk*.json
+gha-creds-*.json
 
-# editor backups
+# ---- Mongo / data dumps ----
+*.mongo dump/
+dump/
+data/
+*.bson
+*.json.gz
+
+# ---- Logs ----
+logs/
+*.log
+spurti_server.log
+spurti_server.err
+
+# ---- Local dev launchers (one-shot scripts using in-memory Mongo) ----
+run.sh
+run-mongo.js
+seed-students.js
+scripts-dev-only/
+
+# ---- Editor / IDE ----
+.idea/
+.vscode/*
+!.vscode/settings.json
+!.vscode/extensions.json
+!.vscode/launch.json
+!.vscode/tasks.json
+*.swp
+*.swo
+*.swn
+*~
+.vim/
+*.iml
+.nbproject/
+.classpath
+.project
+.settings/
+*.sublime-project
+*.sublime-workspace
+.cursor/
+.aider*
+.continue/
+
+# ---- OS junk ----
+.AppleDouble
+.LSOverride
+Icon?
+ehthumbs.db
+Thumbs.db
+Desktop.ini
+$RECYCLE.BIN/
+*~
+
+# ---- Hermes / agent scratch (local only) ----
+.hermes/
+.spurti-scratch/
+scratch/
+brain/
+.agents/
+spurti_scan.py
+spurti_*.py
+spurti_search.sh
+spurti_issues.json
+spurti_pulls.json
+spurti_branches.json
+spurti_tree.json
+spurti_pr*.json
+spurti_pr*.txt
+spurti_pr*.patch
+spurti_pr*.txt
+spurti_pipeline*.txt
+spurti-inspect/
+list_spurti.py
+spurti-*-intel.md
+spurti-contest-mechanics-menu.md
+spurti-engagement-mechanics-brainstorm.md
+spurti-design-system.md
+spurti-pr-analysis.md
+
+# ---- Temp / patch artifacts from local tooling ----
+*.tmp
 *.bak
 *.bak.*
+*.orig
+*.rej
+.gitignore.backup-*
 
-# pipeline secrets — never commit
-pipeline/.env
+# ---- Contest-feature working files (NOT for upstream PR) ----
+# These are personal scratch for the in-progress "your contest" work
+CONTEST_CHANGELOG.md
+CONTEST_INTENT_MAP.md
 
-# runtime log + local DB backups (not for the repo)
+# ---- Pipeline secrets & runtime backups ----
+pipeline/.env
 server.log
 sp-runs/
 
-# student data — LOCAL ONLY, never commit (untracked 2026-07-14)
-data/
+# ---- Misc ----
+.history/
+.firebase/
+.vercel/
+.netlify/
+.turbo/
+