.gitignore

# --- Repository-wide ignores (best-practice) ------------------------------
.venv/
env/
.venv-*/
env-*/
compendium/chrome/
compendium/temp
build-*/

# Confidential business/strategic documents (marked with .confidential.md extension)
**/*.confidential.md

# Backup files
**/*.backup
**/*.bak

# Temporary files from editors/IDEs
**/*.tmp
.tmp_issue_*.md

# Local workflow event payloads for act (developer-local only)
.act-event-*.json

# Generated code (e.g., from codegen tools, not manually maintained)
**/generated/
*.sarif
*.txt.sarif
*.generated.*
**/*.generated.*
build*.txt

# release packaging artifacts (e.g., generated by release scripts, not manually maintained)
releases/

# models and data files (if not needed in VCS, e.g., large pre-trained models or datasets)
models/

# wix
tools/wix311/

# Broken/dead-code stubs
**/*.broken

#sccache logs and files
.sccache/
.sccache-*/

# VSCode user-specific settings (keep .vscode/ for enhanced config)
.vscode/settings.json
.vscode/launch.json
.vscode/tasks.json
.vscode/extensions.json
.vscode/.ropeproject
themis.code-workspace

# Example binaries
examples/**/usage_example
examples/**/usage_example_enabled

# Build directories (CMake, Ninja, MSVC, other build outputs)
enterprise*/
# Explicitly un-ignore edition-specific deployment/packaging directories
# (these are part of the release strategy, not build outputs)
!docker/enterprise/
!docker/enterprise/**
!packaging/enterprise/
!packaging/enterprise/**
!packaging/hyperscaler/
!packaging/hyperscaler/**
test_*/
/release
/build/
/build-*/
/build_*/
/out/
/bin/
/lib/
CMakeFiles/
*/CMakeFiles/
CMakeCache.txt
cmake_install.cmake
CTestTestfile.cmake
Makefile

# Logs
/logs/
*.log

# vcpkg (local installs - 163k+ files!)
vcpkg_installed/
vcpkg_installed_linux/
.vcpkg/
.vcpkg-cache/
vcpkg/
# But allow vcpkg/downloads structure for offline builds (with placeholder files)
!vcpkg/downloads/
!vcpkg/downloads/.gitkeep
!vcpkg/downloads/README.md

# Prebuilt cache (for Docker mounting - generated by scripts/prebuild-vcpkg-*)
prebuilt-cache/
packages/
downloads/
buildtrees/

# vcpkg multi-platform package store (50-60 GB, too large for Git)
vcpkg_packages/
!vcpkg_packages/README.md

# external/vcpkg - deprecated, use root ./vcpkg instead (v1.3.0+)
external/vcpkg/

# Distribution artifacts (not needed in repo)
dist/
*.tar.gz

# Release packages (allow in release/ directory)
*.zip
*.deb
*.rpm
!release/*.zip
!release/*.deb
!release/*.rpm
!release/**/*.zip
!release/**/*.deb
!release/**/*.rpm

# Exclude pre-created runtime directories in release packages
release/**/data/
release/**/logs/
release/**/cache/
release/**/plugins/
release/**/backups/
release/**/temp/
!release/**/data/.gitkeep
!release/**/logs/.gitkeep
!release/**/cache/.gitkeep
!release/**/plugins/.gitkeep
!release/**/backups/.gitkeep
!release/**/temp/.gitkeep

# IDE / editor
.idea/
# Note: Enhanced VSCode config in .vscode/ is now tracked (c_cpp_properties.json, cmake-kits.json, cmake-variants.json, README.md)
# User-specific VSCode files are ignored via rules at top of file
.vs/
*.suo
*.user
*.sln
*.vcxproj*
*.vcxproj.filters

# JetBrains project files
/.idea/

# OS files
.DS_Store
Thumbs.db

# Temporary / swap files
*~
*.swp
*.swo
*.tmp
*.temp

# Compiled object files / libraries / executables
*.o
*.obj
*.a
*.lib
*.so
*.dll
*.exe
*.pdb
*.ilk

# Security: Private keys and sensitive certificates
*.key
*.pfx
*.p12
*.pem
!**/certificate-chain.pem
!**/manufacturer/*ca.crt
!**/manufacturer/*signer.crt
certs/manufacturer/*.key
certs/test/*.key
certs/minimal/*.json
certs/community/*.json
certs/enterprise/*.json
certs/hyperscaler/*.json

# Docker build artifacts
.docker/
docker/tmp/
.docker-build-*/
.dockerignore.optimized
.dockerignore.prebuilt
.buildx-cache/
.buildx-cache-new/
.buildx-cache-tmp/

# Environment files (may contain secrets)
.env
.env.*
!.env.example
!.env.sample

# Local clone of optional LLM engine (excluded from VCS)
# Kept locally for optional builds; never committed
llama.cpp/

# Logs and runtime files
logs/
*.log
server.pid
server.err
server.out
server_err.log
server_out.log
themis_server.log
vccdb.log
vccdb_server.log
testsserver_start.log
build_log.txt
# Keep the decision-record directory structure in VCS (generated YAML files remain ignored)
!logs/decisions/.gitkeep
build_final.txt
build_output.log
build_attempt_*.txt
build_pii_fix.tmp.txt
build_no_sccache.txt
build_parallel*.txt
build_graph_*.txt
build_fourth_attempt.log*
build_release_*.txt
docker-build.log
docker_build.log
docker_build_*.log
tidy_full.log
cfbuf_stderr.txt
ctest_*.txt
test_failfast_latest.txt
test_failures_detail.txt
test_results_*.txt
test_results_*.xml
test_run_*.txt
current_test_run.txt

# Local data directories (development/testing only)
/data/
!data/docs_database.json
!data/docs.db/
!data/.gitkeep
llm_cache/
models/*
!models/.gitkeep
test_geo_integration_db/
Testing/

# Temporary test/development files
tmp_*.json
tmp_*.txt
tmp_*.log
tmp_*.ps1
body.json
test_output*.txt
test_*.txt
CTempmetrics_from_test.txt
diff_aql.txt
geo-aql-todo
test_geo_integration_db/

# Build/test output files in root (should not be committed)
/SUMMARY.txt
/build-log.txt
/ctest_*.txt
/ingestion_output.json
/_codeql_detected_source_root

# Test outputs and integration scripts (moved to tests/)
tests/outputs/
tests/integration-scripts/*.ps1
tests/standalone/test_*.cpp

# Documentation build output
docs/_build/
docs/html/
docs/latex/
site/
!docker/README.md
!docker/CHANGELOG.md
!docker/ROADMAP.md

# WordPress assets (marketing site integrations; not part of server operation)
wordpress-theme/

# Namespace analysis reports (generated)
namespace_analysis/

# Test / coverage / profiling
.pytest_cache/
coverage/
.coverage
*.gcov
*.gcda
*.gcno
*.prof
perf.data*

# Python virtualenvs / packaging
venv/
.venv/
env/
ENV/
pip-wheel-metadata/
*.egg-info/
dist/
build/
__pycache__/
*.py[cod]

# Node / JS
node_modules/
npm-debug.log*
yarn-error.log*

# Documentation build artifacts
site/
wiki-temp/
*.wiki/
artifacts/docs/
artifacts/docs-db/
!artifacts/docs-db/.gitkeep
artifacts/perf_nv/
artifacts/perf_expectations_rootcause_audit/
artifacts/perf_coverage_top10_audit/
artifacts/perf_expectations_audit/

# Docker / containers
docker-compose.override.yml

# GitHub Actions local testing secrets (never commit act secrets)
.github/act-secrets

# RocksDB / DB artifacts and local test data
*.db
*.sst
rocksdb/

# Jaeger artifacts
tools/jaeger/*.zip
tools/jaeger/

# Rust / Cargo (if present)
**/target/
target/

# CMake user-local presets (machine-specific overrides — copy from CMakeUserPresets.json.example)
CMakeUserPresets.json

# Allow CMakeLists and cmake/ directory helper files (explicitly)
!CMakeLists.txt
!cmake/*.cmake
!cmake/platforms/Toolchains/*.cmake

# End of .gitignore

# Additional ignores for generated build artifacts and logs applied during stash restore
dist/
dist/**
docker-qnap-build-*.log.err
themis_server_qnap
tmp_*.json
tools/*/obj/
tools/*/bin/
**/obj/
**/bin/
**/obj/**
**/bin/**
!tools/bin/
!tools/bin/**
**/obj/**/*.AssemblyInfo.cs
**/obj/**/*.AssemblyInfoInputs.cache
**/obj/**/*.GeneratedMSBuildEditorConfig.editorconfig
**/obj/**/*.csproj.FileListAbsolute.txt
tools/**/PublishOutputs.*

# --- Enterprise Source Code (not included in public repository) ---
# Enterprise modules are available only under commercial license
src/enterprise/
include/enterprise/
plugins/enterprise/
examples/gpu_impact_analysis/
tests/test_enterprise_*.cpp
tests/test_gpu_impact_analysis_plugin.cpp
benchmarks/bench_gpu_impact_analysis.cpp
benchmarks/run_enterprise_benchmarks.py

# Enterprise documentation (implementation details only, feature docs remain)
docs/enterprise/gpu_impact_analysis_*.md
docs/enterprise/ENTERPRISE_BUILD_GUIDE.md
docs/enterprise/enterprise_implementation.md
docs/enterprise/enterprise_final_report.md
docs/enterprise/GPU_IMPACT_ANALYSIS_PROJECT_SUMMARY.md
docs/enterprise/PROJEKTZUSAMMENFASSUNG.md
docs/enterprise/SECURITY_NOTES.md
docs/enterprise/LLM_INTEGRATION_BENEFITS_ANALYSIS.md
docs/enterprise/enterprise_analytics.md
docs/enterprise/enterprise_http_pool.md
docs/enterprise/enterprise_scalability.md

# Internal confidential docs (excluded from VCS - v1.3.5+)
internal/
# Exception: operator/internal/ contains the operator controller source
!operator/internal/

# Ephemeral server harnesses and experimental apps (not part of public release)
epServer/

# --- Sensitive Business/Strategic Documents (confidential, not for competitors) ---
# Market analysis, pricing, revenue projections, and strategic planning documents
# Note: Also covered by internal/ exclusion above for future content
docs/analysis/MARKET_POTENTIAL_ANALYSIS.md
docs/audit/COST_VALUE_ANALYSIS.md
docs/reports/reports_project_valuation.md
docs/enterprise/ENTERPRISE_ANALYSE_DE.md
docs/stakeholder/STAKEHOLDER_VALUE_PROPOSITION.md

# --- Confidential Documentation (German language-specific, v1.3.6+) ---
# Business secrets, internal strategies, pricing models, and confidential analysis
docs/de/confidencial/
docs/en/confidential/

# Test results and benchmarks
results/
*.log

# --- Documentation Verification Reports (generated, not committed) ---
# Generated by scripts/verification/ tools
scripts/verification/reports/
*_verification.md
*_verification.json
verification_report*.md
verification_report*.json
comprehensive_verification_report*.md
/tmp/issues/
qlora_poc_output/

# Temporary test directories
test_plugin_standalone/
build-test/

# Documentation validation reports (generated, not committed)
*-report.json
lint-report.json
link-report.json
toc-report.json
validation-report.json

# Performance regression test files
test_regression_report.*
test_metrics.prom
benchmarks/test_*.json

# Security audit results (generated by scripts/comprehensive-code-audit.sh)
audit-results-*/
audit-results-*/*-report.txt
audit-results-*/*-report.xml
audit-results-*/*/clang-tidy-report.txt
audit-results-*/*/cppcheck-report.txt
audit-results-*/*/gitleaks-report.json

# Audit Reports (generated files from audit framework)
build/.audit-reports/*.html
build/.audit-reports/*.xml
build/.audit-reports/*.json
build/.audit-reports/*.txt
build/.audit-reports/*.log

# Keep the audit directory structure
!build/.audit-reports/.gitkeep
!build/.audit-reports/README.md
a.out

# CI-generated benchmark results (never commit raw run data)
benchmark_results/
*.gch

# Temporary alternative build directories created during testing/CI
build2/
build_temp/
build_alt/

# Local build directories (non-standard names)
/build3/
/build4/
/build5/

# act local CI secrets and config
.secrets
.actrc