node_modules/
dist/
.next/

# Stale compiled TS output in source directories (build to dist/ only)
apps/*/src/**/*.js
apps/*/src/**/*.js.map
apps/*/src/**/*.d.ts
apps/*/src/**/*.d.ts.map
apps/*/src/**/*.jsx
apps/*/__tests__/**/*.js
apps/*/__tests__/**/*.d.ts
apps/*/app/**/*.js
apps/*/app/**/*.d.ts
packages/*/src/**/*.js
packages/*/src/**/*.js.map
packages/*/src/**/*.d.ts
packages/*/src/**/*.d.ts.map
__pycache__/
*.egg-info/
.venv/
.env
.env.local
.env.*.local
*.pyc
.turbo/
*.pem
*.key

# Bundled public trust anchors — not secrets, must ship with verifiers.
!packages/verifier/src/tsa-roots/*.pem
!packages/verifier-py/src/primust_verify/tsa_roots/*.pem
.DS_Store
.claude/
.claude.json
.claude.json.backup
.pytest_cache/
*.db
*.db-shm
*.db-wal
.vercel
artifacts/
calibration_artifacts/
primust.lock

# Java/Maven build artifacts
**/target/
# C# build artifacts
**/bin/Debug/
**/bin/Release/
**/obj/
tsconfig.tsbuildinfo

# Side-car prover input written by the Noir witness integration harnesses
# (packages/zk-core/scripts/witness-integration-test.mjs and
# packages/zk-core/scripts/witness-integration-test.production.mjs).
# Canonical Prover.toml files stay tracked; only the harness-written
# sidecars are ignored.
packages/zk-core/circuits/*/Prover.integration.toml
packages/zk-core/circuits/*/Prover.production.toml
packages/zk-core/circuits/*/Prover.fullstack.toml
