# Rust
agent/target/
search/target/

# Go build cache (go build ./... without -o doesn't normally leave
# binaries in-tree, but be defensive)
/ingest/ingest
/api/api
/cli/cairnobsctl
/terraform/terraform-provider-cairnobs
/alerting/alerting
/hack/windows-fixture/windows-fixture
/hack/benchmark-fixture/benchmark-fixture
/hack/alert-load-test/alert-load-test
/hack/webhook-sink/webhook-sink
/hack/mock-ollama/mock-ollama

# Node / SvelteKit (web/ has its own more detailed .gitignore too)
web/node_modules/
web/build/
web/.svelte-kit/

# Dev-only generated secrets
hack/dev-certs/out/

# Local overrides that may carry real credentials (e.g. a real OIDC/SAML
# dev-tenant client secret for manual SSO testing) -- never committed.
docker-compose.override.yml

# OS / editor
.DS_Store
Thumbs.db
*.swp