# Secrets — never commit API keys / credentials
auth.json

# Per-machine session transcripts (large, machine-specific, may contain private data)
sessions/

# Installed packages — regenerated by `pi install` / startup from settings.json
npm/
git/

# Per-folder trust decisions (machine / working-dir specific)
trust.json

# Debug output written by the hidden `/debug` command
pi-debug.log