# --- Secrets -----------------------------------------------------------------
# Credentials belong in environment variables (see README "Credentials"),
# never in the repo. These patterns are a safety net.
.env
.env.*
!.env.example
*.env
secrets.*
*secret*
*.key
*.pem
*.pfx
*.p12
credentials*
*_token*
*password*
.netrc
_netrc

# Local configuration -- may contain recipient addresses and usernames.
# config.example.toml is the committed template.
config.toml

# --- Runtime state -----------------------------------------------------------
data/
reports/
logs/
*.sqlite3
*.db

# --- Python / dependencies ---------------------------------------------------
__pycache__/
*.py[cod]
.venv/
venv/
env/
.pytest_cache/
.mypy_cache/
.ruff_cache/
.coverage
htmlcov/

# --- Build output ------------------------------------------------------------
build/
dist/
*.egg-info/

# --- OS / editor -------------------------------------------------------------
Thumbs.db
desktop.ini
.DS_Store
.vscode/
.idea/