# Environment secrets
.env
.env.local
.env.*.local
.env.local.override
.env.production
.env.staging

# Python
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
dist/
build/
.eggs/
*.egg
.venv/
venv/
.mypy_cache/
.ruff_cache/
.pytest_cache/

# Node.js
node_modules/
.next/
out/
.vercel

# Cloudflare
.wrangler/
.dev.vars

# Supabase
.temp/

# IDE
.vscode/
.idea/
*.swp
*.swo
*~

# OS
.DS_Store
Thumbs.db

# Coverage
htmlcov/
.coverage
coverage.xml

# QA smoke fixtures — regenerated locally per docs/qa/cli/CLI_PreLaunch_Smoke_Tests.md
qa-fixtures/medium.bin

# Admin tooling audit log — local-only, never commit
scripts/admin/.audit.log

# MCP §9.3 manual-HITL transcript exports — operator stores locally; never commit.
# Keep the per-phase directories (and their .gitkeep) tracked so the archive
# convention survives; ignore every transcript file the operator drops in.
docs/qa/mcp/transcripts/**/*
!docs/qa/mcp/transcripts/**/
!docs/qa/mcp/transcripts/**/.gitkeep
