.git
.env
**/.env
**/.env.*
**/*.key
**/*.pem
**/*.crt
**/*.cer
**/*.der
**/*.p12
**/*.pfx
**/*.p7b
**/*.p8
**/*.jks
**/*.keystore
**/id_rsa*
**/id_ed25519*
**/id_ecdsa*
**/id_dsa*
**/private_key*
**/private-key*
**/secrets/**
**/.secrets/**
**/credentials/**
**/secrets.yaml
**/secrets.yml
**/secrets.json
**/credentials.json
**/service-account*.json
**/.npmrc
**/.pypirc
**/.netrc
**/.git-credentials
**/.htpasswd
**/pip.conf
**/pip.ini
**/.ssh/**
**/.aws/**
**/.config/gcloud/**
**/.state/**
**/__pycache__
**/.pytest_cache
**/.mypy_cache
**/.ruff_cache
**/*.pyc
frontend/node_modules
frontend/dist
frontend/tsconfig.tsbuildinfo
backend/tests
node-agent/tests
runtime-worker/tests
docs

# Runtime state and downloaded model files must never enter a build context. Keep these paths
# anchored so config/models/initial-candidates.yaml remains available to source packaging.
/models/
/model-artifacts/
/artifacts/
/data/
/.data/
/.state/
/state/
/hf-cache/
/huggingface/
/.cache/huggingface/
/.quarantine/
/quarantine/
/downloads/
/container-state/
/postgres-data/
/redis-data/
/runtime-traces/
**/*.safetensors
**/*.gguf
**/*.ckpt
**/*.onnx
**/*.pth
**/*.pt
**/*.bin
**/*.h5
**/*.pb
**/*.model