.gitignore

# secrets
.env
*.key

# python
__pycache__/
*.py[cod]
*.egg-info/
.eggs/
build/
dist/
.pytest_cache/
.venv/
venv/
*.egg-info/
src/*.egg-info/

# agentlift deploy state (per-project lockfile is meant to be committed by USERS,
# but in THIS repo's examples + test fixtures we keep generated state out — it
# carries real resource IDs and is regenerated on every deploy)
examples/**/.agentlift-lock.json
tests/live/**/.agentlift-lock.json
tests/live/**/.agentlift-google.json
tests/live/**/.agentlift-harness.json
tests/live/**/.agentlift-bedrock.json
# live-harness operational state (deploy bookkeeping; points at real/short-lived
# resources). The committed *receipts* are the evidence; this scratch is not.
tests/live/receipts/_state-*.json
tests/live/receipts/_preflight-*.json
# the un-redacted harness ARN sidecar (carries the real AWS account id) and the
# read-only inspection dump of a personal harness — operational, never committed.
tests/live/receipts/_secret-*.json
tests/live/receipts/_inspect-*.json

# generated Google Agent Engine source package (rebuilt on every deploy)
.agentlift-build/
**/.agentlift-build/

# local agent runtime state (Claude Code scheduled-task locks, etc.)
.claude/

# scratch
Temp/
*.log