# Secret, auth, cache, and session paths — never sync (fail-closed on pull).
credentials
credentials.json
*credentials*
tokens
*.key
*.pem
auth*
settings.local.json
history*
sessions*
*.sqlite*
cache
caches
.cache
Cache
CachedData
*.cache
*-cache
*_cache
*.log
*.err
scratchpad
runstate
node_modules
.venv
backups

# Editor/agent backup copies — never config, and they carry pre-redaction content.
*.bak
*.bak-*
*.orig
*~

# Python bytecode caches — regenerated at runtime, churn the tree.
__pycache__
*.pyc