# Secrets and local environment
.env
.env.*
!.env.example
.secrets.env
**/.secrets.env
*.pem
*.key

# Dependencies and build outputs
.venv/
node_modules/
dist/
build/
coverage/

# Logs
*.log
logs/
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*

# OS/editor noise
.DS_Store
Thumbs.db
.vscode/
.idea/
.obsidian/

# Temporary workspace files
.tmp_*
tmp/
temp/
scratch/
.worktrees/

# Local nested repos
cli-printing-press/
bob/

# Pi local runtime/cache/package artifacts, if created
.pi/cache/
.pi/tmp/
.pi/logs/
.pi/npm/
.pi/hermes/jobs/
.pi/bob/jobs/
.pi/observability/db/

# Local memory stores/backups must not be committed
**/.pi/memory/
**/.fastmem/
.fastmem/
memory-backups/
memory-export*.jsonl
*.sqlite
*.sqlite-wal
*.sqlite-shm

# Codex
.codex/

# Watchlist/automation state
watchlist_updates.md
automation/state.sqlite
automation/events.jsonl
automation/runs/
automation/logs/

# Python bytecode/cache artifacts
__pycache__/
*.py[cod]

# Claude Code local-only config
**/.claude/settings.local.json
.claude/commands/
.claude/worktrees/
.claude/skills/

# Playwright MCP screenshot output
.playwright-mcp/

# pytest cache
.pytest_cache/

# Standalone research artifacts (not tracked)
docs/civ7/

# Rendered portfolio artifacts -- stored in Google Drive, not git
# (source .html/.js/.md stay tracked; only the rendered outputs are ignored)
docs/portfolio/linkedin-fastmem/*.pdf
docs/portfolio/linkedin-fastmem/*.png
# broll-studio hi-res icon master (derived runtime icons stay tracked)
tools/broll-studio/public/icons/icon-source.png

# Local Cloudflare deploy credentials (never commit)
**/deploy.env
**/.deploy.env

# Cloudflare wrangler local cache/state
.wrangler/

# Generated public mirrors -- separate git clones built by the extractors
# (tools/memkeeper-extract, tools/warden-extract); never tracked in this repo.
/memory/memkeeper/
/memory/memkeeper-warden/
/memory/memkeeper-harness/
/memory/memkeeper-librarian/
# memkeeper-ingest is a standalone clone published via tools/memkeeper-ingest-publish
# (snapshot + scrub + force-push), not extractor-generated; same never-tracked rule.
/memory/memkeeper-ingest/

# Extracted to standalone public repo github.com/teflon07/token-burn
/tools/token-burn/
