# Dependencies / build artifacts
node_modules
dist
*.tsbuildinfo
coverage

# Environments — never commit; .env.example / .env.*.example are templates
.env
.env.*
!.env.example
!.env.*.example

# Local data / caches (matches at any depth — covers
# deploy/simulation/data/, indexer/data/, wallet-monitor/data/, etc.)
data/
*.log

# wallet-monitor: the real wallet list holds production mainnet addresses —
# keep it out of git; only wallets.example.json is committed.
wallet-monitor/wallets.json

# Generated wallet key dumps (e.g. tx:gen-keypair output, supplier/.deepseek-wallet.json)
# — these contain privateKeyHex. Never commit.
*-wallet.json

# Operator local file backups (e.g. docker-compose.buyer.yml.bak-20260609)
*.bak
*.bak-*
.vitest-cache
.DS_Store

# Claude Code local settings — per-developer, not for shared repo
.claude/

# Deck build intermediates (recreated by docs/build-deck.sh)
docs/EXECUTIVE_SUMMARY.rendered.md
docs/img/*.mmd

# Reference-only archives copied from other projects — these can carry
# secrets inside their entries that .gitignore can't strip from a zip.
# Don't republish them.
docs/*.zip

# Python bytecode (only present under docs/ reference material).
# .pyc files can embed absolute dev-machine paths via co_filename.
__pycache__/
*.pyc