*/__pycache__/
*.pyc
*.pyo

# Node
node_modules/
dist/

# Environment
.env
*.env
# Committed, secret-free per-environment values of the target topology
# (audit Q05); secrets live only in the hosts' target.env.
!deploy/*/target-defaults.env
.env.local
.env.*.local
.stripe-live/

# OS
.DS_Store

# SvelteKit build
.svelte-kit/
frontend/build/

# IDE — may contain API keys / secrets
.cursor/mcp.json
frontend/.claude/

# Build artifacts
hypergraph_memory.egg-info/
.coverage
rust/target/
.parity-artifacts/
artifacts/rust-control/
/artifacts/
/rust/artifacts/
/tmp/

# Terraform local state and operator-specific inputs. Provider lock files are
# committed; state, plans, credentials, and real environment values are not.
**/.terraform/*
*.tfstate
*.tfstate.*
*.tfplan
*.tfvars
!*.tfvars.example

# graft's local graph cache — regenerable, not committed (run `graft build`).
/graft/

# llvm-cov raw profiles written next to the crates by the remote-store suite
*.profraw
