.gitignore

__pycache__/
*.py[cod]
*.egg-info/
.venv/
.uv-cache/
.uv_cache/
.uv-appdata/
.uv_python/
.pytest-tmp/
.pytest_out.txt
.env
scout.db
*.db-shm
*.db-wal
.pytest_cache/
dist/
!dashboard/frontend/dist/
build/
*.egg
.mypy_cache/
dashboard/frontend/node_modules/
*.ssh_out*
_*.py

# Local TLS MITM debug artifacts (never commit)
__*.cer
__*.pem
__git_ca_bundle_plus_*.crt

# SSH two-step diagnostic dumps (the bash→file→read pattern per CLAUDE.md)
# Accumulate as `.ssh_<topic>.txt` during investigation sessions; never tracked
.ssh_*.txt

# Broken venv backups (e.g., .venv_broken_bak/ left by recovery operations)
*_broken_bak/
*.bak

# Defensive: ad-hoc scratch / temp files
.tmp/
.tmp_*
.scratch_*

# Local npm caches (sandbox-safe builds)
dashboard/frontend/.npm_cache/
dashboard/frontend/.npm_tmp/

# BL-064 Telegram session — authenticates as the user; never commit
*.session
*.session-journal

# BL-072 hook bypass audit log — local-only, not source-controlled
.claude/hooks/bypass.log

# BL-NEW-SOURCE-CALL-PRICE-COVERAGE-SAMPLE-CG-GT — vendor sample responses.
# Operator-approved one-off API responses cached for audit. May contain
# vendor-specific quirks; never commit. Sample script enforces a two-layer
# pre-check before any call dispatches.
tasks/vendor_samples/

# --- Autonomous-session scratch artifacts (never commit; PR-1 2026-06-01) ---
# Codex SDLC scratch, PR probes/diffs, git worktrees, deploy/smoke scripts that
# accumulate during autonomous sessions. Previously uncovered → `git add -A`
# footgun (the working tree carried ~350 such untracked files at session start).
.codex_*
.codex-worktrees/
__codex_*
_codex_*
.review-pr*/
.pr[0-9]*
.wt*
_deploy_*
_smoke_*
_restart_*
_actionability_*
_eligibility_*
_mirofish_runtime_probe*
_sandbox_build/
GITCHK.txt