.gitignore

# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class

# C extensions
*.so

# Distribution / packaging
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib64/
parts/
sdist/
var/
wheels/
pip-wheel-metadata/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST

# PyInstaller
#  Usually these files are written by a python script from a template
#  before PyInstaller builds the exe, so as to inject date/other infos into it.
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.nox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
*.py,cover
.hypothesis/
.pytest_cache/

# Translations
*.mo
*.pot

# Django stuff:
*.log
local_settings.py
db.sqlite3
db.sqlite3-journal

# Flask stuff:
instance/
.webassets-cache

# Server-side session store. NEVER commit this — Flask-Session writes pickled
# session payloads here, which in apps built on this boilerplate carry Clerk
# identity data and live session ids. Committing it leaks credentials.
flask_session/

# Scrapy stuff:
.scrapy

# Sphinx documentation
docs/_build/

# PyBuilder
target/

# Jupyter Notebook
.ipynb_checkpoints

# IPython
profile_default/
ipython_config.py

# pyenv
.python-version

# pipenv
#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
#   However, in case of collaboration, if having platform-specific dependencies or dependencies
#   having no cross-platform support, pipenv may install dependencies that don't work, or not
#   install all needed dependencies.
#Pipfile.lock

# PEP 582; used by e.g. github.com/David-OConnor/pyflow
__pypackages__/

# Celery stuff
celerybeat-schedule
celerybeat.pid

# SageMath parsed files
*.sage.py

# Environments
.env
.venv
env/
venv/
ENV/
env.bak/
venv.bak/

# Spyder project settings
.spyderproject
.spyproject

# Rope project settings
.ropeproject

# mkdocs documentation
/site

# mypy
.mypy_cache/
.dmypy.json
dmypy.json

# Pyre type checker
.pyre/

.DS_Store
.idea

# Runtime analytics store written by lib/analytics_tracker.py on app start.
# Generated state, not seed data — committing it means every local run shows up
# as a diff. Unanchored so it matches whatever directory the app is run from.
visitor_analytics.json
visitor_analytics.json.lock
visitor_analytics.json.tmp

# The two control-board stores. Same reason as the analytics ledger above:
# with POLICY_STORE_FILE / PAGE_VISIBILITY_FILE unset they fall back to the
# app directory, so a local run of the board writes a real policy file into
# the checkout. In production both point at the mounted disk and boot warns
# loudly when they do not.
policy_overrides.json
policy_overrides.json.lock
policy_overrides.json.tmp
page_visibility.json
# Reporter lease — which worker POSTed the last hourly rollup to 2plot.ai.
.satellite_report.lease

# Node
node_modules/

# Build output. scripts/make_social_card.py renders the 1200x630 card here.
# Deliberately NOT committed and NOT served by the app: the card is published
# to https://cdn.2plot.ai/github_assets/<domain>.png, because a card served by
# the app is fetched at unfurl time and a cold free-tier container times out —
# the preview renders blank once and platforms cache the miss. Regenerate with
# the script; do not treat this directory as the source of truth.
build/

# Handoff notes for work that belongs in ANOTHER repo — the kickoff docs that
# start a session elsewhere. Local scratch by design: a task list for
# 2plot.dev has no business in the checkout of the template, and every
# satellite forking this repo would inherit a to-do list that was never theirs.
kickoff/
# Session working documents are LOCAL BY CONVENTION, network-wide: sync
# reports, handoffs, and kickoff briefs name hosts, topology, and process.
# Two public fleet repos were caught tracking theirs and clerkhook's staged
# handoff (naming the full satellite inventory) was one push from public
# (2026-08-24). The ignore rule is the enforcement, here and in every fork.
X402-SYNC-REPORT.md
HANDOFF-*.md
KICKOFF-*.md

# The .claude/ development kit IS shipped — it is how every fork inherits
# the network's behavioral contract, skills, and settings (the F1 fabric
# build, 2026-08-24). Everything else in .claude/ stays local: session
# scratch, screenshots, settings.local.json (per-seat model overrides),
# vendored iteration copies. Allow-list, not blanket ignore — a dir-level
# ignore cannot be re-included beneath, hence the /* form.
.claude/*
!.claude/CLAUDE.md
!.claude/settings.json
!.claude/skills/