.gitignore

.pio/
.vscode/
__pycache__/
*.pyc

# Confidential business docs (pricing, margins, strategy) -- never commit to the public repo.
business/

# Stock-firmware dumps and other large bench binaries stay local (insurance copies, never shipped)
bench-logs/*.bin

# Manufacturing record written by scripts/provision-device.py: one row per board
# with its factory MAC and derived deviceId. Not a secret (the device KEY is never
# written anywhere), but it is customer-hardware data and a public-repo leak of the
# fleet roster -- keep it local. Override the location with --log if you want it
# somewhere else entirely.
provisioned.csv
provision-logs/

# Per-run bench ledgers written by scripts/bench-capture.ps1 (machine-specific,
# one file per capture run). The historical soak logs above stay tracked.
#
# The animation rig produces these by the dozen -- a single afternoon of tuning
# LIFTOFF left 25 of them -- and they are only ever read minutes after they are
# written. What survives a run is the numbers copied into docs/animtest-results-*.
bench-logs/s3-128-*.log
bench-logs/animtest-*.log
bench-logs/gametest-*.log
bench-logs/deto-*.log
bench-logs/splash-*.log
bench-logs/capture.pid
bench-logs/capture-*.pid

# wrangler local state (dev server, deploy cache) -- per-machine, never shared
.wrangler/

# Stray npm/vitest caches if a workspace command is ever run from the repo root
# (the real dependency trees live in proxy/ and dashboard/, ignored there).
node_modules/

# Operator scratch file for the revocation list (see src/revocation.ts).
# Fetched from KV, edited, put back -- never a source of truth, and it holds
# real device ids, so it does not belong in the repo.
proxy/revoked.txt

# Transient stderr capture from scripts/reconcile-fleet.py.
.reconcile-stderr.log

# Everything bench-side is local only (serial captures, flash logs, pid files,
# logbook backups, firmware dumps) -- device IDs live in it. Never commit.
bench-logs/

# Recorded aircraft traffic (docs/v18-label-declutter.md, docs/v18-next-overhead.md):
# WORKSTATION-ONLY -- a capture locates a home. scripts/check_no_traffic_captures.py
# refuses these names AND the capture's line format anywhere in the tree, in CI.
*.traffic.jsonl
*.traffic.log
*.traffic.csv
traffic-captures/