# --- pre-existing ---
# Local build/test tooling, not committed (jcardsim fork etc.). Matches the
# top-level build-tools/ dir only — applet/build-tools/ is a different beast
# (vendored AMD-H exports etc.) and IS committed; see negation below.
/build-tools/
!applet/build-tools/

# --- secrets / private keys ---
# aliro-trustgen emits aliro_trust.h with the reader's PRIVATE scalar.
# Never commit, anywhere in the tree. Regeneratable from the trust bundle.
aliro_trust.h
**/aliro_trust.h

# Trust bundle artifacts (PEMs, group IDs, access docs) — these are produced
# outside the repo by aliro-trustgen and should never be inside it.
*.pem
*.key
issuer.pem
reader.pem
access_credential.pem
reader_group_id.bin
reader_group_sub_id.bin
access_document.bin
device_response.bin

# Misc credential / env material
.env
.env.*
secrets/
credentials/

# --- vendor archives (large, redownloadable) ---
x-cube-aliro.zip
*.zip

# --- vendor source clones (regeneratable via git clone in setup) ---
reader/vendor-sources/

# --- Python / harness ---
**/.venv/
**/__pycache__/
**/*.pyc
**/*.pyo
**/.pytest_cache/
**/.mypy_cache/
**/.ruff_cache/
**/*.egg-info/
**/.coverage
htmlcov/
harness/dist/
harness/out/

# --- Java / Maven applet build ---
applet/target/
applet/.tools/
**/*.class

# --- C / firmware build outputs ---
# CMake/Make/Ninja build dirs anywhere
**/build/
**/build-check/
**/build-debug/
**/build-release/
**/CMakeCache.txt
**/CMakeFiles/

# Compiled outputs (but NOT vendor's precompiled .a libraries — those are
# distributed as part of X-CUBE-ALIRO and live under Middlewares/ST/*/lib/
# and Projects/Common/Aliro/Lib/. They are vendor-shipped, not our build
# output, so we keep them.)
*.elf
*.bin
*.hex
*.o
*.obj
*.lst
*.map
*.su
*.d
# Java Card .cap (build product of applet/)
*.cap

# --- stray / unrelated workspace files ---
# VivoKey thermo reader logs, not part of this project
vkthermo_*.csv

# --- IDE / OS ---
.vscode/
.idea/
*.iml
*.swp
*.swo
.DS_Store
Thumbs.db