# --- Secrets and credentials: never commit ---
.pi
.env
.env.*
!.env.example
*.pem
*.key
*.p12
*.pfx
*.keystore
*.jks
id_rsa*
id_ed25519*
id_ecdsa*
*.gpg
.netrc
.npmrc
.pypirc
credentials*.json
service-account*.json
secrets.*
*.secret
.mcp.json
.claude/settings.local.json

# --- Local Patchground state (may hold AI payloads, transcripts, config) ---
.patchground/
/sessions/
*.transcript.*
.session/

# --- Agent / tool working state ---
.thinkrail/
.cursor/
.aider*

# --- Python ---
__pycache__/
*.py[cod]
.venv/
venv/
build/
dist/
*.egg-info/
.pytest_cache/
.mypy_cache/
.ruff_cache/
.coverage
htmlcov/
site/

# --- OS / editors ---
.DS_Store
.idea/
.vscode/
*.swp

# --- pgnd validate output: CI re-validates every push; local image ids don't travel ---
examples/**/verification.json
tests/fixtures/**/verification.json
.wrangler/
