diff --git a/.gitignore b/.gitignore
index ac20520a..5fcb3cb0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,5 +16,11 @@ docs/
 # Local-only Supabase config for the web sample
 samples/passkey-web/src/wasmJsMain/resources/config.js
 
+# Codegen credentials (kept local, never committed). The credentials are passed via
+# SUPABASE_URL / SUPABASE_KEY env vars; this guards any stray files. The *generated*
+# models contain no secrets (just table structure) and ARE committed — see
+# samples/chat-compose/.../generated/SupabaseModels.kt.
+codegen.local.properties
+
 # Local-only JVM desktop demo app — kept on this machine, never pushed to GitHub
 samples/desktop-demo/
diff --git a/samples/chat-compose/src/main/java/io/github/androidpoet/supabase/sample/chat/generated/SupabaseModels.kt b/samples/chat-compose/src/main/java/io/github/androidpoet/supabase/sample/chat/generated/SupabaseModels.kt
new file mode 100644
index 00000000..d249311f
--- /dev/null
+++ b/samples/chat-compose/src/main/java/io/github/androidpoet/supabase/sample/chat/generated/SupabaseModels.kt
@@ -0,0 +1,36 @@
+// Generated from the Supabase schema. Do not edit by hand.
+package io.github.androidpoet.supabase.sample.chat.generated
+
+import kotlinx.serialization.SerialName
+import kotlinx.serialization.Serializable
+import kotlin.String
+
+@Serializable
+public data class E2eMessages(
+    public val id: String,
+    public val body: String,
+    @SerialName("created_at")
+    public val createdAt: String,
+)
+
+@Serializable
+public data class ChatRooms(
+    public val id: String,
+    public val name: String,
+    @SerialName("created_at")
+    public val createdAt: String,
+)
+
+@Serializable
+public data class ChatMessages(
+    public val id: String,
+    @SerialName("room_id")
+    public val roomId: String,
+    @SerialName("sender_id")
+    public val senderId: String? = null,
+    @SerialName("sender_name")
+    public val senderName: String,
+    public val body: String,
+    @SerialName("created_at")
+    public val createdAt: String,
+)