# ── Backups (PII — never commit) ──────────────────────
backups/

# ── Python ────────────────────────────────────────────
__pycache__/
*.py[cod]
*.egg-info/
.env
.env.local
.env.*.local
.env.production
.env.staging
# But keep .env.example
!.env.example
.venv/
venv/
# ── Node / React ──────────────────────────────────────
node_modules/
dist/
.build/
# ── VSCode / IDE files ────────────────────────────────
.vscode/
.idea/
# ── Cursor / Claude Code / agenti (auto-generated skills, debug logs) ──
.agents/skills/
.cursor/skills/
.cursor/debug*.log
.cursor/*.log
.adal
.agent
.augment
.claude
.cline
.codebuddy
.commandcode
.continue
.crush
.factory
.goose
.iflow
.junie
.kilocode
.kiro
.kode
.mcpjam
.mux
.neovate
.openhands
.pi
.pochi
.qoder
.qwen
.roo
.trae
.vibe
.windsurf
.zencoder
# ── OS / Misc ─────────────────────────────────────────
.DS_Store
Thumbs.db
app_logs.txt
test_*.log
# ── Docker ───────────────────────────────────────────
**/db_data/
# ── Security / Deployment ────────────────────────────
*.pem
*.key
*.p12
*firebase*adminsdk*.json
scripts/.env.*
**/secrets/
ghp_*
*token*
*.token
# Exceptions: source files, not secrets
!backend/app/services/token_service.py
!backend/app/services/token_tracking.py
!backend/app/services/token_encryption.py
!frontend/src/components/TokenUsageDashboard.tsx
!backend/alembic/versions/step16_token_usage_table.py
!backend/alembic/versions/a4a1c714fbee_add_thoughts_tokens_to_api_usage_logs.py
!backend/alembic/versions/tiers004_token_based_allowances.py
!backend/alembic/versions/billing002_setup_pack_tokens_purchased.py
# MacOS
.DS_Store
*\ 2.*
*\ 2
# Desktop test runner artifacts
.last-run*.json
# Local dev media (uploads stored in R2 in production)
backend/media/
backend/Render log/
.gstack/

# BigQuery / GCP billing exports (analisi locali, non versionare)
bquxjob_*.csv
*.bq.csv
.snapshots/
