# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib64/
parts/
sdist/
var/
wheels/
*.egg-info/
.installed.cfg
*.egg

# Virtual Environment
venv/
env/
ENV/

# IDE
.vscode/
.idea/
*.swp
*.swo
*~

# Environment
.env
.env.local

# Database
*.db
*.sqlite3

# Logs
*.log
backend.log
server.log
logs/

# OS
.DS_Store
Thumbs.db

# Docker
docker-compose.override.yml

# Alembic
alembic/versions/*.pyc

# Test
.pytest_cache/
.coverage
htmlcov/

# Backup
*.bak
*.backup
backups/

# Local Training Doc
CODEBASE_KNOWLEDGE_BASE.md
.claude/

# Local agent instructions (auto-generated by gitnexus setup/analyze)
AGENTS.md
CLAUDE.md

# --- Secrets: alle .env-Varianten, Zertifikate, Keys ---
.env.*
!.env.example
*.pem
*.key
*.crt
*.cer
*.p12
*.pfx
sp.key
sp.crt
idp-metadata.xml
secrets/

# --- AI-Tooling-State (nie in einem public Repo) ---
.serena/
.gitnexus/
.aider*
.cursor/
.windsurf/
.continue/
.gemini/

# --- Python-Luecken ---
.venv/
.mypy_cache/
.ruff_cache/
.tox/
.hypothesis/
coverage.xml
.coverage.*

# --- Node/Next auf Root-Ebene (frontend/.gitignore deckt nur frontend/) ---
node_modules/
.next/
out/
.turbo/
*.tsbuildinfo
npm-debug.log*
yarn-error.log*

# --- OS/Editor-Luecken ---
._*
.Spotlight-V100
desktop.ini
.zed/
.fleet/
.history/

# --- Generierte Exporte mit echten Scan-Daten ---
vulnerabilities_report_*.csv
executive_summary_*.pdf
audit_log_*.csv
exports/
uploads/
reports/
*.sqlite
*.dump

# --- Eingebetteter Fremd-Checkout (eigenes Repo, kein Submodul) ---
wazuh-risk-insight/