# ── Secrets — NEVER commit. Loaded to Secret Manager via --data-file only. ──
*.pem
*.key
*.p8
*.p12
*.pfx
*.jwk
*.jwk.json
**/keys/**
**/secrets/**
.env
.env.*
!.env.example
*.secret
service-account*.json
gcp-*.json

# ── Build output ──
dist/
build/
*.tsbuildinfo
.tsbuildinfo

# ── Dependencies ──
node_modules/
.pnpm-store/

# ── Test / coverage ──
coverage/
.vitest/

# ── Transport / scratch artifacts (not source) ──
files.zip

# ── Editor / OS ──
.DS_Store
Thumbs.db
.idea/
.vscode/*
!.vscode/extensions.json
*.log
npm-debug.log*

# ── Local runtime state ──
*.local
.cache/
tmp/

# Python — packages/evaluator-py is a separate distribution living in this repo
__pycache__/
*.py[cod]
.pytest_cache/
*.egg-info/
.venv/
