# Allow only what the image build needs. Everything else, including secrets
# and local state, stays out of the build context.
*
!pyproject.toml
!uv.lock
!README.md
!LICENSE
!src/

# Never send these, even if they appear under an allowed path.
**/.env
**/.env.*
**/*.db
**/*.sqlite
**/*.sqlite3
**/__pycache__
**/*.py[cod]
**/.mypy_cache
**/.pytest_cache
**/.ruff_cache
**/.venv
**/.git
**/.claude
