# Keep the build context minimal and the image generic/secret-free.
# .env, config.toml, and the SSH key arrive via read-only mounts at runtime — never baked in.
.env
.env.*
!.env.example
config.toml

.git
.venv/
venv/
__pycache__/
*.py[cod]
*.egg-info/

# Mac-side launch scripts run on the Mac, not in this container.
scripts/

# Docs / OS cruft — not needed in the image.
*.md
.claude/
.DS_Store