# Secrets and generated state.
#
# These patterns are deliberately UNANCHORED (`**/`). A profile directory is
# normally `~/.devoriz/profiles/<name>/`, but nothing stops someone pointing
# `DEVORIZ_HOME` at a checkout, or adding a `.env` beside the bundled example
# profile — and an anchored `profiles/*/.env` would match neither, which is how
# credentials get committed. Match them wherever they land.
**/.env
**/.env.*
!**/.env.example
**/.state/

# Everything the tool caches or mints, in case one escapes a `.state/` dir.
*.cookies
pii.salt

__pycache__/
*.py[cod]
.venv/
venv/
dist/
build/
*.egg-info/
.pytest_cache/
.ruff_cache/
.coverage
.coverage.*
coverage.xml
htmlcov/

.DS_Store
.idea/
.vscode/
