# Build context hygiene (v0.8 P2): secrets and runtime droppings never # enter an image layer. The .env* exclusion is the hard rule — the v1.8 # class of leak (tokens) must be structurally impossible here. .git .gitignore .dockerignore .env .env.* **/.env **/.env.* !.env.example .ciagent **/.ciagent **/.venv **/node_modules **/__pycache__ **/*.pyc **/.pytest_cache **/.mypy_cache **/.ruff_cache **/.turbo **/coverage **/dist apps/web/out apps/web/.next **/*.tsbuildinfo .turbo node_modules *.log