# ── Secrets / local config (NEVER commit) ─────────────────────────────
# Real values live in these; templates are committed as *.env.example.
.env
*.env
.env.local
*.env.local
.maf-webapp-agent.env
# keep the templates
!.env.example
!*.env.example
!.env.sample
!*.env.sample

# Certs / keys
*.pem
*.key
*.pfx
*.p12
*.crt
*.cer

# ── Python ────────────────────────────────────────────────────────────
__pycache__/
*.py[cod]
*.egg-info/
*.egg
build/
dist/
.eggs/

# ── uv / venv ─────────────────────────────────────────────────────────
.venv/
venv/
# uv.lock IS committed (reproducible builds) — do not ignore it.

# ── Tooling caches ────────────────────────────────────────────────────
.mypy_cache/
.pytest_cache/
.ruff_cache/
.coverage
htmlcov/
.tox/

# ── Runtime data / local state ────────────────────────────────────────
*.db
*.db-journal
*.sqlite
*.sqlite3
control-plane.db
.local/
.data/

# ── Node (examples / any JS tooling) ──────────────────────────────────
node_modules/

# ── OS / editor ───────────────────────────────────────────────────────
.DS_Store
__MACOSX/
Thumbs.db
*.swp
*~
.idea/
.vscode/

# Generated Azure deploy manifests (contain rendered secrets)
.last-manifest-*.yaml
