# OS / Editor
.DS_Store
Thumbs.db
.idea/
.vscode/
.fleet/
*.swp
*.swo
*~

# Python runtime / build artifacts
__pycache__/
*.py[cod]
*$py.class
*.so
*.pyd
*.dylib
*.dSYM
.Python
build/
dist/
*.egg-info/
.eggs/
*.egg
pip-log.txt
pip-delete-this-directory.txt

# Virtual environments
.venv/
venv/
env/
ENV/
env.bak/
venv.bak/
.python-version

# Tooling caches / test artifacts
.pytest_cache/
.mypy_cache/
.ruff_cache/
.pyre/
.pytype/
.hypothesis/
.tox/
.nox/
.cache/
.uv-cache/
.ipynb_checkpoints/
.coverage
.coverage.*
coverage.xml
htmlcov/
.dmypy.json
dmypy.json

# Rust
/target/
**/target/
**/*.rs.bk

# Docs / static builds
/site/
docs/_build/

# Node / frontend (if generated locally)
node_modules/
next-step-plan.md
implementation_plan.md
AGENTS.md

# Local AI/editor agent state
.agents/
.codex/
.claude/
.continue/
.cursor/
.aider*

# Local environment and credentials
.env
.env.*
!.env.example
.envrc
.direnv/
.netrc
.authinfo
.authinfo.gpg
.npmrc
.yarnrc.yml
.pypirc
pip.conf
lockknife.toml
lockknife.conf
.lockknife.toml
.lockknife.conf
*.local
*.local.toml
*.local.conf

# Sensitive key / cert material
*.pem
*.key
*.crt
*.cer
*.p12
*.pfx
*.jks
*.keystore
*.kdbx
*.mobileprovision
*.der
*.csr
*.pkcs12
*.gpg
*.asc
id_rsa
id_ed25519
id_dsa
*.pub
.ssh/
.gnupg/
.aws/
.azure/
.config/gcloud/
.kube/
*.ovpn
wg*.conf
WireGuard/*.conf

# API keys and secrets
secrets.json
credentials.json
api_keys.json
.secrets
.credentials
google-services.json
GoogleService-Info.plist

# Local databases and forensic outputs
*.db
*.sqlite
*.sqlite3
*.db-journal
*.sqlite-journal
*.db-wal
*.sqlite-wal
*.db-shm
*.sqlite-shm
*.pcap
*.pcapng
*.cap
*.har
*.ab
*.hprof
*.lkenc
*.dump
*.dmp
*.raw
*.img
*.ips
*.crash
*.trace

# Allow committed DB fixtures in tests when explicitly added
!tests/**/*.db
!tests/**/*.sqlite
!tests/**/*.sqlite3

# LockKnife local output directories
evidence/
passkeys/
reports/
artifacts/
outputs/
snapshots/
cases/
extractions/
decompiled/
forensics_output/
derived/
logs/
exports/
case_manifest.json

# APK and Android artifacts
*.apk
*.aab
*.dex
*.odex
*.vdex
*.art
classes/
smali/
resources.arsc

# Misc local files
*.log
*.tmp
*.temp
*.bak
*.orig
.cursorignore
.cursorindexingignore
.abstra/
marimo/_static/
marimo/_lsp/
__marimo__/
.maturin/
*.whl
*.profraw
*.profdata
*.sarif

# Temporary files
tmp/
temp/

# Local scanner reports. Keep CI summaries in GitHub artifacts, not source.
.scannerwork/
.semgrep/
.trufflehog/
detect-secrets*.json
gitleaks-report.*
trufflehog-report.*

# Additional security patterns for forensic tools
*.session
*.state
*.cache
*.backup
*.old
*.orig
*.rej
*.patch
*.diff
*.dmp
*.core
*.stackdump
*.pid
*.seed
*.pid.lock

# IDE and editor specific files
.vscode/settings.json
.idea/workspace.xml
.idea/tasks.xml
.idea/dictionaries
.idea/shelf
.idea/contentModel.xml
.idea/dataSources.ids
.idea/dataSources.local.xml
.idea/sqlDataSources.xml
.idea/dynamic.xml
.idea/uiDesigner.xml
.idea/gradle.xml
.idea/libraries
*.iws
*.iml
*.ipr
*.classpath
*.project
*.settings/
.metadata/
.recommenders/
bin/
tmp/
*.tmp
*.bak
*.swp
*~.nib
local.properties
.terraform/
*.tfstate
*.tfstate.*
*.tfplan
crashlytics-build.properties
.loadpath
.repl_history
node_repl_history
*.log
*.log.[0-9]*

# Package manager files
package-lock.json
yarn.lock
pnpm-lock.yaml
npm-debug.log*
yarn-debug.log*
yarn-error.log*
lerna-debug.log*

# Runtime data
pids
*.pid
*.seed
*.pid.lock

# Coverage directory used by tools like istanbul
coverage/
*.lcov
nyc_output/

# Dependency directories
jspm_packages/

# TypeScript cache
*.tsbuildinfo

# Optional npm cache directory
.npm

# Optional eslint cache
.eslintcache

# Microbundle cache
.rpt2_cache/
.rts2_cache_cjs/
.rts2_cache_es/
.rts2_cache_umd/

# Optional REPL history
.node_repl_history

# Output of 'npm pack'
*.tgz

# Yarn Integrity file
.yarn-integrity

# dotenv environment variables file
.env.test
.env.local
.env.development.local
.env.test.local
.env.production.local

# parcel-bundler cache (https://parceljs.org/)
.cache
.parcel-cache

# Next.js build output
.next

# Nuxt.js build / generate output
.nuxt
dist

# Gatsby files
.cache/
public

# Storybook build outputs
.out
.storybook-out

# Temporary folders
tmp/
temp/
