# KidLisp WASM render output
kidlisp-wasm/output/

# Wrangler local cache
.wrangler/

# MongoDB backup (contains user data)
mongodb-backup/

# entire ac-pill directory
ac-pill/

# GPG-encrypted secrets (unpacked from vault, not for version control)
*.gpg

# GPG private key backups (passphrase-protected but never commit)
jeffrey-private.asc
jeffrey-private.asc:Zone.Identifier

# SSH keys (keep in aesthetic-computer-vault only)
oven/ssh/
**/oven-deploy-key*
**/*-deploy-key*
**/id_rsa*
**/id_ed25519*

# ignore tokens dir (static outputs of ac pieces for archival purposes)
tokens/*.zip
tokens/*/
!tokens/README.md
!tokens/pack-for-objkt.fish

# ignore objkt output (packaged pieces for OBJKT deployment on teia.art)
objkt/output/*.zip
objkt/output/*.html
objkt/output/*.gif
objkt/output/*/
!objkt/output/README.md

# ignore tezos keep bundles and IPFS temp files
tezos/keep-bundles/
tezos/ipfs-temp/
# Tezos Python virtual environment
tezos/.venv/
# Tezos client state
tezos/.tezos-client/
tezos/.tezos-client-local/
# Old compiled Michelson files
tezos/*_compiled.tz
# Node modules in tezos
tezos/node_modules/

# ignore reference tools output directory (bake/tape generated files)
reference/tools/recording/.tape-frames-cache
reference/tools/recording/_
reference/tools/output
!reference/tools/output/.gitkeep
# ignore strudel reference (local clone only, not needed for builds)
reference/strudel/
packed
packed/*/
objkt/output

# assets (ignore all - synced via CDN)
system/public/assets/*
!system/public/assets/.gitkeep
!system/public/assets/papers/
system/public/assets/papers/*
!system/public/assets/papers/readings/
system/public/assets/papers/readings/*
!system/public/assets/papers/readings/text/
system/public/assets/papers/readings/text/*
!system/public/assets/papers/readings/text/Gallope-Harren-Hicks-The-Scores-Project-2025.txt

# AestheticAnts runtime (logs, runs, test output - not part of the score)
ants/*.log
ants/runs/
ants/test-*.txt

# ignore offline index.html
system/public/index.html

# any instance of the aesthetic-computer-vault repository
aesthetic-computer-vault/
# Local clones of external repos
feral-file/
modes/

# SSH deploy keys (secrets)
oven/ssh/

# Wallet extension node_modules
wallet/extension/node_modules/

# built vscode extension packages
vscode-extension/*.vsix

# Any emacs or vim backups.
*~

# Thomas Lawson gig backups, credentials, ssh, ssl
gigs/thomaslawson.com/backups/
gigs/thomaslawson.com/credentials.json
gigs/thomaslawson.com/ssh/
gigs/thomaslawson.com/ssl/

# Scratch directory for temp files
scratch/

# Agent memory local state (encrypted local-first store)
.ac-agent-memory/
.agent-memory/

# Temporary webapp inspection artifacts
/.tmp/

# Dev logs from remote debugging
dev-logs.txt

# Local dev uploads (fallback when S3 credentials are missing)
local-uploads/
.#*

# NPM
node_modules/

# IntelliJ
*.iml
/.idea/

# macOS
.DS_Store

# redis dumps
dump.rdb

# development certificates
/ssl-dev/.ssl
/ssl-dev/combined.pem
/ssl-dev/localhost.pem
/ssl-dev/localhost-key.pem
aesthetic.crt
localhost.crt

remote-debug/

# hosting for the frontend
.vercel

# environment variables for the server
*.env

# type definitions generated by tsc
system/types/

# Local Netlify folder
.netlify

# FFOS local build cache
utilities/ffos-build/.ffos-cache/

# Parcel's caching folder (I don't even really use parcel.)
.parcel-cache/

# Any firebase configuration.
aesthetic-computer-firebase-adminsdk*.json

# The .emacs.d directory in micro/machine
micro/machine/.emacs.d

# gcp keys for deploying services
gcp-service-key.json
gcp-firebase-service-key.json

# aider chat history and other potential state
.aider*

# GitHub workflows directory - track workflows for CI/CD
# Ignore .github contents except workflows and FUNDING.yml
.github/*
!.github/workflows/
!.github/FUNDING.yml

__pycache__/

# Ignore lockfile for ac-site
/tmp/ac-site.lock

# Backup of netlify.toml when using no-SSL version in Codespaces
system/netlify.toml.backup

# XDG runtime/cache directories (dev container auto-generated)
.xdg/

# kidlisp-n64 build artifacts and dependencies (recursive patterns)
kidlisp-n64/**/*.z64
kidlisp-n64/**/*.n64
kidlisp-n64/**/*.v64
kidlisp-n64/**/*.o
kidlisp-n64/**/*.bin
kidlisp-n64/**/*.log
kidlisp-n64/**/*-header-dump.txt
kidlisp-n64/**/build/
kidlisp-n64/**/build-*/
kidlisp-n64/**/*-build/
kidlisp-n64/test-build/
kidlisp-n64/swamp-rebuild/
kidlisp-n64/libdragon-build/
kidlisp-n64/libdragon-source/
kidlisp-n64/go/
kidlisp-n64/n64-sdk/
kidlisp-n64/spicy-patched
kidlisp-n64/spicy-source/
kidlisp-n64/node_modules/
kidlisp-n64/package-lock.json
# External git repositories
kidlisp-n64/Swamp-Hero-64/
kidlisp-n64/emulator/
kidlisp-n64/libdragon/
kidlisp-n64/peter-lemon-n64/

# ============================================================================
# SECURITY: Private Keys, Secrets, and Credentials
# ============================================================================

# SSH Private Keys (all common types)
**/id_rsa
**/id_rsa.*
**/id_dsa
**/id_dsa.*
**/id_ecdsa
**/id_ecdsa.*
**/id_ed25519
**/id_ed25519.*
**/*_rsa
**/*_dsa
**/*_ecdsa
**/*_ed25519

# SSL/TLS Certificates and Keys
*.pem
*.key
*.crt
*.cer
*.p12
*.pfx
*.p7b
*.p7c
*.der

# AWS Credentials
**/.aws/credentials
**/.aws/config
**/aws-credentials*
**/aws-config*

# GCP Service Account Keys
**/*-service-account*.json
**/*-firebase-adminsdk*.json
**/gcp-key*.json
**/gcloud-key*.json

# API Keys and Tokens
**/*api-key*
**/*api_key*
**/*apikey*
**/token.json
**/tokens.json
**/*-token.json
**/.token
**/.tokens

# Environment Files with Secrets
.env.local
.env.*.local
.env.secret
.env.secrets
.env.production
.env.staging
**/*.env.local
**/*.env.secret

# OAuth and Auth Tokens
**/.oauth
**/oauth_token*
**/.netrc

# Docker secrets
**/docker-secret*
**/.docker/config.json

# Kubernetes secrets
**/k8s-secret*
**/kube-secret*

# Database connection strings and credentials
**/database.yml
**/db-config*.json

# Password files
**/passwords.txt
**/.password
**/.passwords
**/credentials.txt

# Keychain and credential stores
**/.keychain
**/.gnupg/private-keys*
**/.ssh/known_hosts

# Terraform state files (may contain secrets)
**/*.tfstate
**/*.tfstate.backup

# Session server specific (this repo)
session-server/session_server
session-server/session_server.pub
aesthetic-computer-vault/session-server/session_server
aesthetic-computer-vault/session-server/session_server.pub

# Playdate development (build artifacts)
kidlisp-playdate/build/
kidlisp-playdate/KidLisp.pdx/
kidlisp-playdate/sdk/

# Root build directory (Playdate builds)
/build/

# Secret directories
secret/
secrets/
**/secret/
**/secrets/
.secret/
.secrets/
system/.env
ac-vst/vst3sdk/
*.amxd

# Emacs performance logs (keep directory, ignore log files)
.emacs-logs/*.log

# Devcontainer entry logs
.devcontainer/entry-logs/

# GPU/Vello WASM Rust build artifacts
gpu/vello-wasm/target/
gpu/vello-wasm/pkg/
gpu/vello-wasm/Cargo.lock
ff1-cli/
.mcpregistry_*

# Test scripts that may contain secrets or tokens
test-keep-mint-*.mjs
check-*secrets.mjs

# Silo scripts that access production database or contain wallet keys
silo/use-staging-wallet.mjs
.claude/settings.local.json

# Fedac build output (disk images, local bundles)
fedac/out/

# Fedac native build artifacts (kernel sources, object files, images)
fedac/native/build/

# External project artifacts (not part of AC repo)
surface-architecture.html

# LaTeX build artifacts
papers/**/*.aux
papers/**/*.bbl
papers/**/*.blg
papers/**/*.log
papers/**/*.out
papers/**/*.toc

# babypat build artifacts
fedac/babypat/*.o
fedac/babypat/*.so
fedac/babypat/*.efi
fedac/babypat/*.elf
fedac/babypat/*.bin
fedac/babypat/*.img
fedac/native/upload.env.gpg

# Stray GPG key backups (canonical copies live in aesthetic-computer-vault/gpg/)
/gpg/