# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class

# Distribution / packaging
dist/
build/
*.egg-info/

# Virtual environments
venv/
env/
.env/

# IDE
.vscode/
.idea/
*.swp
*.swo

# Test / coverage
.pytest_cache/
.mypy_cache/
.ruff_cache/
.coverage
htmlcov/

# Build
dist/
build/
*.egg-info/

# Checkpoints
checkpoints/
*.checkpoint.json

# Logs
*.log

# OS
.DS_Store
Thumbs.db

# Secrets (NEVER commit real credentials; .env is git-ignored)
.env
.env.local

# Committed, non-secret config + templates
# config.yaml            <- committed (no secrets)
# .env.example          <- committed (placeholders only)
# NOTE: never put a real app_password into config.yaml or .env.example.

# Pre-commit baseline (if you later adopt trufflehog/git-secrets)
.secrets.baseline.json

# Audit rollback backups (generated at runtime)
audit_backups/
