# --- Secrets (extra safety; credentials live at ~/.velerian/, never in repo) ---
.env
.env.local
.env.*.local
credentials.env
*.pem
*.key
.aws/

# --- Scratch (Intellios clone, throwaway working dirs) ---
.scratch/

# --- Tempfiles created by sub-agent PowerShell commit/PR-body workflow ---
# (Per `[[powershell-git-commit-multiline]]`, sub-agents pass multi-line
# commit messages + PR bodies via `git commit -F <tempfile>` /
# `gh pr create --body-file <tempfile>`. The .tmp suffix variants
# occasionally get staged accidentally; this entry prevents that.)
.git-commit-msg.tmp
.pr-body.tmp
*.commit-msg.tmp
*.pr-body.tmp

# --- Python ---
__pycache__/
*.py[cod]
*$py.class
*.so
*.egg
*.egg-info/
.eggs/
build/
dist/
wheels/
.Python
pip-log.txt
pip-delete-this-directory.txt
.venv/
venv/
env/
ENV/

# --- Python tooling caches ---
.mypy_cache/
.pytest_cache/
.ruff_cache/
.coverage
.coverage.*
htmlcov/
.tox/
.nox/
.hypothesis/

# --- Node / frontend ---
node_modules/
.next/
out/
*.tsbuildinfo
.npm/
.yarn/
.pnpm-store/

# --- CDK / IaC ---
cdk.out/
cdk.context.json
.cdk.staging/

# --- IDEs ---
.vscode/
.idea/
*.swp
*.swo
*~

# --- OS ---
.DS_Store
Thumbs.db
desktop.ini

# --- Logs ---
*.log
logs/

# --- Eval-harness outputs (scripts/evals run_pack_corpus + render sample) ---
# Per-pack production-readiness gate scorecards + rendered evidence PDFs are
# CI-ephemeral (uploaded as workflow artifacts), never committed. The corpus +
# baseline fixtures under tests/evals/ ARE committed; these output dirs are not.
eval-output/
evidence-out/
scripts/billing/stripe_catalog_ids.json
