# Secrets / local config
.env
.env.*
!.env.example
*.pem
*.key

# A365 CLI runtime config — `a365.config.json` is operator-edited; the
# `*.generated.config.json` files emitted by `a365 setup blueprint`
# contain the agent blueprint client secret in plaintext on platforms
# where DPAPI is unavailable (macOS, Linux). Never commit.
#
# The trailing `*` also catches operator-suffixed snapshots
# (e.g. `a365.generated.config.json.r5-cleared`, `…json.bak`) so a
# stray `git add .` can't ship a tenant-shaped artefact.
a365.config.json*
a365.generated.config.json*
*.generated.config.json*
# Newcomers seed `a365.config.json` from this template — keep it tracked.
!a365.config.json.example
# `a365 cleanup -y` writes timestamped backups of the above files.
a365.config.backup-*.json
a365.generated.config.backup-*.json
# `a365 publish --aiteammate` extracts manifest templates + zips them
# under ./manifest/ as a build artefact (slice 19g, walkthrough finding).
# Regenerated each publish — keep it out of git.
manifest/

# Python
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
.venv/
venv/
.pytest_cache/
.mypy_cache/
.ruff_cache/

# Node (in case templates/scripts pull anything)
node_modules/

# macOS
.DS_Store
._*

# Editors
.vscode/
.idea/
*.swp

# Build / dist
dist/
build/

# Local-only working files
local/
scratch/
