# Secrets & local env
.env
.env.*
!.env.example

# Local deployment config + runtime state (per-deployment; never committed)
config.toml
state/

# Claude Code — deny by default, allow-list shared wiring.
# .claude/ also accumulates worktrees, editor configs, and OS cruft; commit
# only the shared parts so new local scratch (or a stray secret) stays out.
.claude/*
!.claude/rules/
!.claude/agents/
!.claude/commands/
!.claude/skills/
!.claude/settings.json

# Python
__pycache__/
*.pyc
.venv/

# OS cruft
.DS_Store