# Python
__pycache__/
*.pyc
*.pyo
*.egg-info/
.pytest_cache/
.mypy_cache/
.ruff_cache/

# uv / venv
.venv/

# CDK
cdk.out/
.cdk.staging/

# Env / secrets
.env
.env.local
.env.*.local
.env.*
# (no tracked .env* files; if an example is ever committed, add `!.env.example`)
# Migration record files hold test credentials — never commit.
workos-migration-accounts-*.md

# IDE / OS
.vscode/
.idea/
*.swp
.DS_Store

# Demo seeding artifacts (live tenant credentials + sample IDs; not for source)
demo/

# ffmpeg layer tarball — fetched at deploy time via infra/layers/ffmpeg/fetch.sh
infra/layers/ffmpeg/*.tar.xz

# Local scratch space for one-off rendering, debugging, etc.
tmp/
# FE handoff docs + test-account credentials — never commit (untracked working files).
fe-*.md

# CEO/stakeholder reports — working files, not product docs
report/
cost/
infra/sam/*.pt

# e2e seed/validation package + keyrings (untracked working files)
e2e/
sdk-plan.md

# SDK build artifacts
sdk/dist/
ops-*.md
sdk/site/
