# Pre-built binaries (use `make build` instead)
bin/
*.exe
*.dll
*.so
*.dylib

# Go build output (matches cmd/ directory names)
# Keep this list in sync with cmd/* so accidental `go build ./cmd/foo`
# runs at the repo root don't commit the binary. Real builds go to bin/.
/bench-allocate
/bench-session
/capsule-auth-sidecar
/capsule-control-plane
/capsule-manager
/capsule-thaw-agent
/data-snapshot-builder
/derive-snapshot
/git-cache-builder
/git-cache-freshness
/onboard
/pty-client
/snapshot-builder
/snapshot-converter
/workload-key

# Build outputs (use `make build-rootfs`)
images/microvm/output/
*.img
*.bin

# Terraform
deploy/terraform/**/.terraform/
deploy/terraform/**/.terraform.lock.hcl
deploy/terraform/**/*.tfplan
deploy/terraform/**/*.tfstate
deploy/terraform/**/*.tfstate.*
deploy/terraform/**/*.tfvars
!deploy/terraform/**/*.tfvars.example

# Packer
deploy/packer/*.pkr.hcl.bak
*.box

# Kubernetes secrets (generated)
deploy/kubernetes/*-secrets.yaml
deploy/kubernetes/*-secret.yaml

# Helm
deploy/helm/**/charts/
deploy/helm/**/*.tgz

# IDE
.idea/
.vscode/
*.swp
*.swo
*~

# OS
.DS_Store
Thumbs.db

# Secrets and credentials
*.pem
*.key
*.crt
*.p12
*.pfx
secrets/
.env
.env.*
!.env.example

# Logs
*.log
logs/

# Go
vendor/
go.work
go.work.sum

# Test artifacts
coverage.out
coverage.html
*.test
*.prof

# Temporary files
tmp/
temp/
*.tmp
*.bak

# Docker
.docker/

# Cache directories
.cache/
__pycache__/

/deploy/terraform/tfplan

.claude/

# Terraform provider cache (non-glob match for root terraform dir)
deploy/terraform/.terraform/

sdk/python/dist
sdk/python/.venv/

scripts/scale/
scratch/
