# Binaries for programs and plugins
*.exe
*.exe~
*.dll
*.so
*.so.*
*.dylib
bin/

# Frontend
web/node_modules/
web/dist/

# Test binary, built with `go test -c`
*.test

# Output of the go coverage tool
*.out
coverage.out
coverage.html

# Go workspace file
go.work

# Dependency directories
vendor/

# Environment variables
.env
.env.local
.env.*.local

# IDE
.idea/
.vscode/
*.swp
*.swo
*~
.DS_Store
*.iml

# Temporary files
tmp/
temp/
*.log
*.bak

# Private keys (agent-generated, never commit)
cmd/agent/*.key
cmd/agent/*.pem

# Database
*.db
*.sqlite3

# Allow migration SQL files (don't ignore *.sql globally)
# SQL files in migrations/ are tracked

# Build artifacts
certctl-server
certctl-agent
certctl-cli
/server
/agent
/cli

# Private strategy docs
strategy.md
SECURITY_REMEDIATION.md

# OS
.DS_Store
Thumbs.db
mcp-server

# Local Go build/module caches (session-scoped, never committed)
/.gocache/
/.gomodcache/