# Secrets — never commit. The repo is PUBLIC.
.env
.env.*
!.env.example

# Caller-mode / caller-group list files (ADR-0020 / ADR-0021): phone numbers
# are PII and must NEVER be committed. These are the default filenames an
# operator may drop at the repo root; the real lists live alongside .env / in
# 1Password. Any *.caller-*.json or *.hermes-caller-groups.json is ignored so a
# stray copy cannot be staged by accident.
.caller-allow.json
.caller-deny.json
.caller-grey.json
*.caller-allow.json
*.caller-deny.json
*.caller-grey.json
# N-group config file (ADR-0021)
.hermes-caller-groups.json
*.hermes-caller-groups.json
# Caller-list working directory: any caller-list file dropped here holds phone
# numbers (PII) and must NEVER be committed.
/.caller-lists/
# Multi-intercom openings config file (ADR-0045): maps caller-IDs (PII) to named
# openings whose dtmf_code / webhook url+headers+body may carry secrets (door
# codes, bearer tokens). The real file lives alongside .env / in 1Password; these
# are the default filenames an operator may drop at the repo root, ignored so a
# stray copy cannot be staged by accident. NOTE: HERMES_VOIP_INTERCOM_CONFIG_FILE
# may point ANYWHERE — only these default names are gitignored, so keep a
# custom-named config file OUTSIDE the repo tree.
.intercom-config.json
*.intercom-config.json

# Local memory MCP store — never commit
.memory/

# Worktree lanes — disposable, never committed
.worktrees/

# Autonomous orchestration-loop wave journal (ADR-0072) — a per-clone optimisation
# rebuilt from docs/backlog.md + GitHub each wave; never committed.
.orchestrator/

# Local model-weight cache — large binaries, NEVER committed (rule 33). The STT/
# TTS/VAD/guard weights are downloaded + sha256-verified at validation time from
# their pinned manifest revisions (see docs/runbooks/0002-voip-live-validation.md);
# the default cache path used there is `.models/`.
.models/

# Python virtualenv, caches, build output
.venv/
__pycache__/
*.py[cod]
.pytest_cache/
.mypy_cache/
.ruff_cache/
dist/
build/
*.egg-info/
.coverage
.coverage.*
htmlcov/

# OS / editor noise
.DS_Store
*.log
