# ── secrets / credentials — NEVER commit ───────────────────────────────
*.key
*.crt
*.pem
*.p12
*.env
.dev.vars
**/.dev.vars
**/secrets/**
**/*secret*
lighthouse/beacon.json

# ── wrangler / cloudflare worker local state ───────────────────────────
.wrangler/
**/.wrangler/
**/.mf/

# ── the trusted-build template is its OWN (public) repo ─────────────────
trusted-build-template/

# ── generated / runtime artifacts ──────────────────────────────────────
__pycache__/
*.pyc
build.receipt.json
private-dev/panels/*.svg
var/
*.log

# ── os / editor cruft ──────────────────────────────────────────────────
.DS_Store
node_modules/
.venv/
