.gitignore

# Secrets — Article IV: never commit credentials.
.env
.env.*
!.env.example

# Python
__pycache__/
*.py[cod]
*$py.class
.Python
.venv/
venv/
*.egg-info/
dist/
build/

# Tooling caches
.pytest_cache/
.ruff_cache/
.mypy_cache/

# Database state — defense in depth (the named volume should never land
# on disk in the repo; this catches a bind-mount mistake).
pgdata/

# OS / editor
.DS_Store
Thumbs.db
.vscode/
.idea/
desktop.ini
$RECYCLE.BIN/

# Local sample dataset — bulky and unreferenced by code. The curated/
# subfolder is tracked (a few small PDFs for reviewers); everything else
# in this dir stays local. The `*` (not `**`) is deliberate so the
# negation re-includes the subdirectory.
data/sample-pdfs/*
!data/sample-pdfs/curated/

# Generated sample PDF (created by `make sample-pdf` on a fresh clone).
data/sample.pdf

# Coverage & type-checker daemon artifacts.
htmlcov/
.coverage
coverage.xml
.dmypy.json

# Claude Code local-only settings (project-shared settings.json stays tracked).
.claude/settings.local.json

# Jupyter checkpoints.
.ipynb_checkpoints/