# Secrets and per-instance config — never commit
.env
.DS_Store

# Certificates and keys — per-instance, never push
certs/
*.pem
*.crt
*.p12
*.pfx
*.key

# Exception: bundled Samsung OCF Root CA (public cert, no key material)
!custom_components/localthings/ocf/ocf_root_ca.pem
token.txt

# Python artifacts
__pycache__/
*.pyc
.venv/
venv/

# Bridge runtime
bridge.log
course_mapper.log

# Capture / dump files
*.pcap
*.har
*.mitm
capture/
flows/

# Local-only research tools (not part of the bridge runtime)
local-tools/

# Claude Code per-project state (permissions allowlist, etc.)
.claude/

# HA dev instance — persisted config and secrets
ha_config/
