stats/
.env.bak
*cookies*txt
cookies*
cookies.txt
.claude
mutants
.mutmut-cache
CLAUDE.md
CLAUDE.local.md
.aider*
.scannerwork
llms-full.txt
aider*
.aider*
todo/
*.sarif
devskim-results.sarif
debug_login_page.png
docs/pstats.png
mcp.prof
mcp.pstats
.depsorter_cache.json
.depupdate.*
token.txt
*.db
*.bak
*.backup
cpex.sbom.xml
docs/docs/test/
docs/resources/
*.tgz
*.gz
*.bz
*.bz2
*.tar
TODO.md
minikube-*
.htpasswd
.env.gcr
packages-lock.json
packages.json
node_modules/
./depsort*
./depupdate*
.tmp*
mcp.db-journal
mcp.db-shm
mcp.db-wal
# Anchored: matches only ./certs/ at the repo root, not nested
# `certs/` directories under source. Bare `certs/` would silently
# hide any cert-management module / test fixture at any depth.
/certs/
FIXMEs
*.old
logs/
*.log
.sketchpad
.localtarget*

# Fuzzing artifacts and reports
reports/
corpus/
tests/fuzz/fuzzers/results/
.venv
mcp.db
# Anchored to repo root — bare `public/` would shadow any nested
# `public/` directory in source (common in web/frontend code).
/public/
ica_integrations_host.sbom.json
.pyre
dictionary.dic
pdm.lock
.pdm-python
temp/
*history.md
htmlcov
test_commands.md
cover.md
# Anchored: bare `build/` would shadow any nested build-output dir
# anywhere in the source tree.
/build/
.icaenv
commands_output.txt
commands_output.md
command_output.md
command_output.txt
command_outputs.md
.env
.env.ce
.ica.env
./snakefood.png
./snakefood.svg
./playground

.attic
.vscode/settings.json
scribeflow.log
coverage_re
bin/flagged
flagged/
# VENV
.python37/
.python39/

# Byte-compiled / optimized / DLL files
__pycache__/
**/__pycache__/
*.py[cod]
*$py.class

# Bak
*.bak

# C extensions
*.so

# Distribution / packaging — Python build artifacts. `build/` and
# `lib/` are anchored (root-only) so they don't silently hide
# nested source dirs of the same name. Other patterns (`dist/`,
# `downloads/`, `eggs/`, …) stay bare — they're less likely to
# collide with source-tree directory names.
.wily/
.Python
develop-eggs/
dist/
downloads/
eggs/
.eggs/
# Anchored: bare `lib/` would shadow any nested `lib/` source dir.
/lib/
lib64/
parts/
sdist/
var/
wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST

# PyInstaller
#  Usually these files are written by a python script from a template
#  before PyInstaller builds the exe, so as to inject date/other infos into it.
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.nox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
.hypothesis/
.pytest_cache/

# Translations
*.mo
*.pot

# Django stuff:
*.log
local_settings.py
db.sqlite3

# Flask stuff:
instance/
.webassets-cache

# Scrapy stuff:
.scrapy

# Sphinx documentation
docs/_build/

# PyBuilder
target/

# Jupyter Notebook
.ipynb_checkpoints

# IPython
profile_default/
ipython_config.py

# pyenv
.python-version

# celery beat schedule file
celerybeat-schedule

# SageMath parsed files
*.sage.py

# Environments
.env
.env.*
*.env
env.bak/
env.back
env.bak
.venv
env/
venv/
ENV/
venv.bak/

# Loose credential / token files — defensive net against accidental
# `git add` of dev-captured real tokens. The `.env` patterns above
# already cover the canonical case.
bearertoken*
*.token
*.tokens
*credentials*.json
*credentials*.yaml
*credentials*.yml
apikey*
*.pem

# Spyder project settings
.spyderproject
.spyproject

# Rope project settings
.ropeproject

# mkdocs documentation
/site

# mypy
.mypy_cache/
.dmypy.json
dmypy.json

# others
.pdm-build
.vscode

# Mac junk
.DS_Store

# MYPY cache
.mypy_cache
.idea/

# Sonar
.scannerwork

# vim
*.swp
*,cover

# model cache
.config
logging/

.ai*

# downloads
downloads/

# db_path
db_path/

# filelock path
tmp/

.continue
plugin-catalog
# Hugo build output
docs/public/
