# If you prefer the allow list template instead of the deny list, see community template:
# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
#
# Binaries for programs and plugins
*.exe
*.exe~
*.dll
*.so
*.dylib

# Test binary, built with `go test -c`
*.test

# Locally built CLI helpers (Makefile writes here)
/bin/

# Output of the go coverage tool, specifically when used with LiteIDE
*.out

# Dependency directories (remove the comment below to include it)
# vendor/

# Go workspace file
go.work
go.work.sum

# env file
.env
.aider*

#python
__pycache__
.coverage
bin/*

DONOTUSE

# Helm chart packages (output of `helm package` / `make helm-package`)
dist/
frontend/coverage
/workspace-agentd

# SDK build artifacts
sdks/typescript/node_modules/
sdks/typescript/dist/
sdks/vscode-llmsafespaces/node_modules/
sdks/vscode-llmsafespaces/dist/
sdks/python/__pycache__/
sdks/python/*.egg-info/
sdks/go/live-test

# Frontend build / dev artifacts
node_modules/
frontend/node_modules/
frontend/dist/
frontend/test-results/

# Epic 17 Phase 0 artefacts: contain JWTs, audit logs, baseline snapshots.
# These are reproducible from the scripts; never commit.
design/stories/epic-17-security-review/phase-0/phase-0-artefacts/
design/stories/epic-17-security-review/phase-0-prod/phase-0-prod-artefacts/
.tmp/

# Compiled canary binaries (built on-the-fly by canary runner / CI)
sdks/canary/go/s-*
sdks/canary/go/d-*
sdks/canary/mcp/mcp
sdks/canary/go/cmd/seed-accounts/seed-accounts

# Generated build artifacts — never track (regenerable, large, host-specific).
# Caught after a stray `git add -A` swept 76MB into PR #276 (worklog 0389).
controller/bin/

# Root-level CLI binaries built from cmd/ (redact, tools, migrate-kek, etc).
# Regenerable via `go build ./cmd/<name>/`; committed by accident — never track.
# One entry per binary so the intent is explicit and the list mirrors cmd/.
/mcp
/migrate-kek
/redact
/relay-proxy
/relay-router
/repolint
/rotate-kek
/seal-key
/tools
/workspace-agentd
cmd/workspace-agentd/workspace-agentd
sdks/java/target/

# Local credentials and binaries
.cf

# Cluster-specific helm overrides (redis host, disabled components, etc.)
# Create helm/values.local.yaml to persist local deploy config.
helm/values.local.yaml
node_modules/.vite/
go.sum.backup
site/
crd-doc-gen
