# Built binaries (root only) /mavend /mavenclient /mavsttd /mavttsd /mavweb /mavpoll /mavcaldav # Certs (private keys, don't commit) certs/ # Dependencies (fetch/build, not vendored) deps/ # ML models (large, downloaded separately) models/ # Runtime data *.db # Deploy secret (the at-rest db key) — never commit deploy/db_key.env # Temp files /tmp/ # opencode config (per-project, not for sharing) opencode.json # Test coverage output coverage.out