# --- SECRETS / CREDENTIALS: never commit ---
*token*
*secret*
*.pem
*.key
*.lic
*credential*
*.credentials
*_sa.json
*service_account*
*api_key*
*api_keys*
.env
.env.*
.netrc
.semurg_gh_token

# --- generated data / large artifacts ---
data/
*.bin
*.ndjson
*.tsv
*.csv
corpus*
bulk*
*_topk*
generators/out/

# --- build / runtime ---
target/
*.o
*.so
__pycache__/
node_modules/
.DS_Store
tmp/
*.log

# generated per-domain datasets
.data/

# MANIFEST.tsv is SOURCE (the lane registry), not a generated dataset -- keep it
!MANIFEST.tsv

# large incumbent binary -- auto-downloaded by lanes/kuzu.sh, never committed
/bin/kuzu
