# Dependencies
node_modules/
.pnpm-store/

# Build outputs
dist/
.next/
.turbo/
out/

# EXCEPTION: a GitHub Action distributed via `uses:` runs its committed
# dist/index.js on the runner with no build step — so this bundle MUST be
# tracked. CI (github-action-build.yml) keeps it in sync with src/.
# ONLY index.js: the tsup byproducts (.d.ts/.map) are build noise, re-ignored.
!packages/github-action/dist/
packages/github-action/dist/*
!packages/github-action/dist/index.js

# Examples are intentionally lockfile-free (installed fresh by docs-snippets CI);
# local `npm install` runs during build verification must not leave lockfiles.
examples/*/package-lock.json

# npm-pack artifacts (e.g. packages/open-intent/*.tgz from a publish dry-run)
*.tgz

# Terraform provider locks belong to root modules (envs), not reusable modules —
# a module-level lock is an artifact of running `terraform init` inside the module.
infrastructure/terraform/modules/**/.terraform.lock.hcl

# Environment
.env
.env.local
.env.*.local

# IDE
.idea/
.vscode/
*.swp
*.swo
*~

# OS
.DS_Store
Thumbs.db

# Test & Coverage
coverage/
*.lcov
.venv/
playwright-report/
test-results/
blob-report/
.playwright/

# LaTeX build artifacts (docs/papers/)
docs/papers/*.aux
docs/papers/*.log
docs/papers/*.out
docs/papers/*.toc
docs/papers/*.fdb_latexmk
docs/papers/*.fls
docs/papers/*.synctex.gz

# Prisma
packages/db/prisma/migrations/**/migration_lock.toml

# Docker volumes
postgres_data/
redis_data/

# Local dev databases (repo root data/)
data/*.db

# Logs
*.log
npm-debug.log*
pnpm-debug.log*
*.db-shm
*.db-wal
__pycache__/
*.pyc

# Generated
proto/gen/ts/
proto/gen/go/

# Secrets (NEVER commit these)
*.pem
*.key
*.cert
credentials.json
service-account.json

# Exempt: pinned test keypair for the intended-verifier crate.
# Never used in production — the JWKS endpoint generates fresh keys.
!crates/intended-verifier/tests/fixtures/*.pem

# Proprietary LIM Knowledge Assets (NEVER commit unencrypted)
# These are INTENDED's competitive moat: intent taxonomy, domain models,
# risk ontologies, and evaluation datasets. Ship as encrypted bundles only.
# See packages/domain-lim-packs/README.md.
packages/intelligence-engine/semantic/intent-library.json
packages/intelligence-engine/semantic/intent-ontology.md
packages/intelligence-engine/semantic/action-ontology.json
packages/intelligence-engine/semantic/entity-ontology.json
packages/intelligence-engine/semantic/lim-gold-dataset.json
tools/golden-datasets/

# Encrypted pack build output (ships as release artifact, not in git)
packages/domain-lim-packs/dist/

# Stale build artifacts
apps/console/.next.stale.*
apps/console/.next.broken-*
apps/console/.next.bak.*

# Local archive for legacy docs/reports (not tracked)
archive/**
!archive/README.md

# Terraform local state and secrets
.terraform/
**/.terraform-build/
*.tfstate
*.tfstate.*
terraform.tfvars
*.auto.tfvars
tfplan
tfplan.*
tfplan-*
crash.log
.vercel
**/.vercel
.worktrees/
*.tsbuildinfo

# Java / Maven build output (e.g. examples/spring-boot)
target/
