# ── Secrets & credentials ──────────────────────────────────────────────────
.env
*.env
*.key
*.pass
*.token
*.pem
*.p12

# LiteLLM tokens (API keys, access tokens)
litellm-copilot-tokens/

# Kubeconfig (cluster credentials)
swarm-kubeconfig.yaml
ansible/host_vars/*/kubeconfig*

# ── OpenClaw runtime data ──────────────────────────────────────────────────
# Secrets and credentials — never commit
openclaw/secrets.json
openclaw/credentials/
openclaw/identity/
openclaw/devices/
openclaw/telegram/
openclaw/delivery-queue/
openclaw/exec-approvals.json

# Large ephemeral data — not useful in git
openclaw/workspace/
openclaw/workspace-*/
openclaw/memory/
openclaw/agents/
openclaw/logs/
openclaw/extensions-quarantine/
openclaw/sandboxes/
openclaw/sandbox/
openclaw/canvas/
openclaw/media/
openclaw/completions/
openclaw/cron/
openclaw/hooks/
openclaw/subagents/
openclaw/data/
openclaw/extensions/
openclaw/update-check.json

# Keep only the main config file for reference
# (secrets are excluded above; openclaw.json itself has no keys)

# ── OS / editor noise ─────────────────────────────────────────────────────
.DS_Store
*.swp
*.swo
*~