/.DS_Store
**/.DS_Store
/.gitignore
# Python artifacts
**/__pycache__/
*.py[cod]
*$py.class
*.pyc

# Build and distribution
/build/
/dist/
/installer/build/
/installer/dist/
/prole-app/dist/
/prole-app/dist-*/
/prole-tools-app/dist/
/prole-tools-app/.build/
/prole-tools-app/.build-cli/

# Binaries and generated tools
/net/prole-agent
/net/prole-scan
/bin/prole-agent
/bin/prole-scan

# MagicMock artifacts (likely accidental)
/MagicMock/

/bin/*
!/bin/prole-env.sh
!/bin/prole-kpf.sh
/lib/
/include/
/.idea/
/.vagrant/
/.vscode/
/.venv/
/prole-tools-app/.build/
/prole-tools-app/.build-cli/
/prole/backup/

# Secrets and local config
*.kubeconfig
*.kubeconfig*
etc/secrets/
*-password.txt
# Catches both the legacy literal `.prole_user_password` (was committed
# to history under prole-db/ and knoe-db/) and any future variant.
.prole_user_password
**/.prole_user_password
*_password
*.password
postgres-password*
mssql-password*
*secret.yaml
*-secret.yaml
*-secret
.vault_pass
/conf/prole.cfg
/secrets/
# etc/secrets/ holds plaintext values for secretref:// indirection.
# The directory is ignored, but keep the .keep marker tracked so forks see
# the pattern and know to create the directory locally.
!etc/secrets/.keep
/data/
/logs/
/storage/
# Runtime data directories — never version-controlled
knoe-db/data/
var/
/target/
**/target/
/pyvenv.cfg
.output.txt
deploy/gcp/terraform-setup.txt
.terraform/
.terraform.lock.hcl
*.tfstate
*.tfstate.backup

# SSL material — never check in private keys
/ssl/

# Local MCP / AI tooling config (personal, per-clone)
.ai/

# Ad-hoc run artifacts — deploy.sh and friends leave these in the repo root
/end_time.txt
/start_time.txt
/start_time_final.txt
/sidekiq_logs.txt
/network_description.txt
/network_prompt.txt
/test_resolve.sh
/docs/deploy_*.log
/docs/compressed-history.log

# Large binaries
*.zip
*.tar.gz

# Ansible
.ansible/

# Coverage and testing
.coverage
htmlcov/
.pytest_cache/

/ssh-keys/
/mock_val/secrets/
/prole-db.iml
supabase/helm/generated/values.generated.json
/.claude/