# Secrets — never commit. Covers .env (prod, main.ts) and .env.sandbox
# (sandbox, provisionSandbox.ts), plus any generated *.key.
.env*
!.env.example
.ai_agent_sandbox.key
*.key