# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class

# C extensions
*.so

# Distribution / packaging
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
wheels/
pip-wheel-metadata/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST

# PyInstaller
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.nox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
*.py,cover
.hypothesis/
.pytest_cache/

# Translations
*.mo
*.pot

# Django stuff:
*.log
local_settings.py
db.sqlite3
db.sqlite3-journal

# Flask stuff:
instance/
.webassets-cache

# Scrapy stuff:
.scrapy

# Sphinx documentation
docs/_build/

# PyBuilder
target/

# Jupyter Notebook
.ipynb_checkpoints

# IPython
profile_default/
ipython_config.py

# pyenv
.python-version

# pipenv
Pipfile.lock

# PEP 582
__pypackages__/

# Celery stuff
celerybeat-schedule
celerybeat.pid

# SageMath parsed files
*.sage.py

# Environments
.env
.venv
env/
venv/
ENV/
env.bak/
venv.bak/

# Spyder project settings
.spyderproject
.spyproject

# Rope project settings
.ropeproject

# mkdocs documentation
/site

# mypy
.mypy_cache/
.dmypy.json
dmypy.json

# Pyre type checker
.pyre/

# IDEs
.vscode/
.idea/

# Tool-generated
.claude/settings.local.json
.claude/worktrees/
.claude-flow/
.deepeval/
*.swp
*.swo
*~
.DS_Store

# Poetry
poetry.lock

# Project specific
*.db
*.sqlite
smoke_test.py
gap-analysis/
run-related/
iteration-docs/
playground/comparisons/
src/orchestrator/evaluation/eval-dataset/

playground/local

# extensions
extensions/

# claude-flow runtime lock (per-session state, not source)
.claude/scheduled_tasks.lock

# Redis TLS test certs (generated locally by tests/integration/redis_tls/gen_certs.sh — never commit)
tests/integration/redis_tls/certs/

# Tool-catalogue digest pins are per-environment trust decisions (F3), not
# shared config: committing one would silently approve a catalogue on behalf of
# whoever clones the repo. Reviewing the catalogue is the lesson these demos
# exist to teach, and a checked-in pin file would also go stale on every edit
# to a server.py docstring, spraying spurious drift warnings at everyone who
# pulls.
#
# Note this is the opposite of the advice for a real application, where the
# approved catalogue is a lockfile and belongs in version control. A demo's
# "third-party server" is a file three directories away, maintained by the
# same people -- nothing about it is a stable external dependency.
# The same rule covers the runtime's record of what a server last served,
# which sits beside the approval. That one is rewritten on every fetch, so
# committing it would dirty the working tree on each `python web.py` -- and
# unlike the approval above, it is ignored in real applications too.
#
# Whole directory rather than two filenames: the demos keep both in
# tool-trust/ so re-testing from scratch is `rm -rf tool-trust`, and ignoring
# the folder means anything else that lands there is covered without a new rule.
playground/**/tool-trust/

# Older layout, before both files moved into tool-trust/. Kept so a working
# tree that predates the move does not suddenly show them as untracked.
playground/**/tool-pins.json
playground/**/.tool-pins-last-seen.json

# Latency probe output (src/continuum/llm/timing_probe.py). Every record carries
# turn_meta.question — the user's actual prompt — so this must never be
# committed. Regenerate it instead: CONTINUUM_TIMING_LOG=1.
#
# No slash in the pattern, so git matches it as a basename at every depth — a
# `**/` twin would be redundant here, unlike the anchored `playground/**/...`
# rules above which do need it.
# Glob, not the exact name: parked/renamed variants (continuum-timing.mixed.jsonl,
# .armA-nogap.jsonl, per-run archives) carry the same turn_meta.question payload
# and were NOT matched by the exact-name rule this replaces.
continuum-timing*.jsonl
