# Secrets and environment — never committed
.env
.env.*
!.env.example
*.pem
*.key
*.p12
*.jks
*.keystore
# Downloaded OAuth clients and local credential bundles
.secrets/
client_secret*.json
credentials.json
service-account*.json
*-service-account.json
*.p8
terraform.tfvars
*.auto.tfvars
!terraform.tfvars.example

# Private test data (the Vantara case pack and its answer key)
testdata/private/

# Build outputs
target/
dist/
build/
out/
coverage/
*.test
*.out
*.prof
bin/
# The npm entrypoint is source, not a compiled binary.
!tools/terminal/bin/
!tools/terminal/bin/docmatch.mjs
.turbo/
.astro/
.next/
.cache/

# Dependencies
node_modules/
.pnpm-store/
vendor/
.venv/
__pycache__/
*.pyc

# Tool state
.terraform/
.terraform.lock.hcl
!infra/**/.terraform.lock.hcl
*.tfstate
*.tfstate.*
crash.log
packer_cache/
.gradle/
local.properties
*.xcuserstate
xcuserdata/
DerivedData/
.idea/
.vscode/
*.swp
*.swo
.DS_Store
Thumbs.db

# Local scratch
tmp/
scratch/
*.log

# Worktrees e estado de ferramentas locais de agentes
.claude/

# Corpora gerados em tempo de teste (contêm EICAR, bombas de compressão etc.)
testdata/security-corpus/**/generated/

# Private generated documents and delivery artifacts.
/output/

# SDK build outputs and operational-terminal exports
sdks/*/dist/
sdks/*/target/
sdks/*/node_modules/
sdks/**/*.egg-info/
docmatch-output/
