# Python
__pycache__/
*.py[cod]
.venv/
venv/
dist/
build/
*.egg-info/
.pytest_cache/
.ruff_cache/
.mypy_cache/
.coverage
htmlcov/

# Env / secrets
.env
.env.*

# macOS
.DS_Store

# Editors
.idea/
.vscode/

# Test runtime state
.hypothesis/

# Internet-Draft local build output (already matched by the generic
# `build/` rule above; named explicitly for discoverability).
ietf/build/

# Node (TS verifier)
node_modules/

# Playwright
test-results/
playwright-report/
.playwright-mcp/

# Transparency log: the UNSIGNED checkpoint candidate is a handoff between
# `log append` and the signing ceremony, never a published artifact. Every
# other file under site/public/log/ is committed and served.
site/public/log/checkpoint.candidate

# Credentials. Signing seeds are written by `attest keygen` (the docs name them
# *.seed); none of these belongs in a commit or in the sdist, which hatchling
# builds from every file not ignored here.
*.seed
*.pem
*.key
.npmrc
.pypirc
.netrc
