# Python
.venv/
venv/
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
.pytest_cache/
.ruff_cache/
.mypy_cache/
.uv-cache/
dist/
build/
*.egg

# Node / TypeScript
node_modules/
.pnpm-store/
*.tsbuildinfo
.next/
.svelte-kit/
out/

# Tauri / Rust
target/
**/target/
*.rs.bk
Cargo.lock

# IDE / editor
.vscode/
!.vscode/extensions.json
!.vscode/settings.json.example
.idea/
*.swp
*.swo
*~

# macOS
.DS_Store
.AppleDouble
.LSOverride

# Secrets / local config (NEVER commit these)
.env
.env.*
!.env.example
*.pem
*.key
*-credentials.json
service-account*.json
auth0-*.json
gcp-key*.json

# Terraform
infra/terraform/.terraform/
infra/terraform/*.tfstate
infra/terraform/*.tfstate.*
infra/terraform/*.tfvars
!infra/terraform/*.tfvars.example
infra/terraform/.terraform.lock.hcl
infra/terraform/crash.log

# Logs
*.log
logs/

# Claude Code agent worktrees + local agent state (never commit)
.claude/

# Operational state (local dev only)
.local-state/
local-data/
.firestore-emulator/
.memorystore-emulator/

# Build artifacts
*.pyc
*.so
*.dylib
*.dll

# Documentation builds
docs/_build/
docs/site/

# Coverage
.coverage
.coverage.*
htmlcov/
coverage.xml

# Local-only dev MCP wiring (machine-specific; never committed —
# a localhost dev server must not ship to clones). See docs/integrations.md.
.mcp.json
