.gitignore

# Dependencies
node_modules/

# Build output
.next/
out/
build/
dist/

# Exception: the OpenClaw plugin ships compiled JS in its tarball,
# and ClawHub's ClawScan verifies tarball contents against the source
# commit — so the plugin's dist/ must live in git.
!packages/openclaw-plugin/dist/
!packages/openclaw-plugin/dist/**

# npm pack output for the OpenClaw plugin — versioned tarballs are
# distributed via NPM registry, not git. The plugin's dist/ source is
# tracked (see exception above); the packaged .tgz is a build artifact.
packages/openclaw-plugin/*.tgz

# Fuzz / test reports (schemathesis, playwright, etc.)
.fuzz-report/
.hypothesis/
playwright-report/
test-results/

# Environment files (NEVER commit these)
.env
.env.*
.env.local
.env.development
.env.production
.env.staging
*.env
!.env.example

# Vercel
.vercel/

# context-handoff-bundle session state (local tooling, not project artifact)
.context-handoffs/

# Debug logs
npm-debug.log*
yarn-debug.log*
yarn-error.log*
.tmp-dev*.log
.npm-cache/

# Local testing
*.local

# IDE
.idea/
.vscode/
*.swp
*.swo

# OS
.DS_Store
Thumbs.db
NUL
nul

# Python bytecode
__pycache__/
*.pyc
*.pyo
*.pyd
*.egg-info/

# Claude Code: ignore machine-local state by default (settings.local.json,
# worktrees/, agentlens session-notes, generated maps/inventory)...
.claude/*
# ...but track the reusable build tooling checked into the repo.
!.claude/agents/
!.claude/commands/
!.claude/hooks/
!.claude/rules/
!.claude/skills/
!.claude/workflows/
# Keep packaged skill artifacts and Python caches out of git.
.claude/skills/**/*.zip
.claude/**/__pycache__/
.desloppify/
scorecard.png

# Session tracking (root-level only, not app/api/routing/tasks/)
/tasks/

# Internal planning/agent artifacts
findings.json
/conductor/
/plans/
.supergoal/
.supergoal-archive-*/
# Completed One-System staging package (shipped as v4.20.0); local history only
/one-system/
# frontend-verify skill output (headless page-state dumps)
.frontend-verify/

# Brainstorming visual-companion sessions (mockups + server state; machine-local).
.superpowers/

# Self-improvement loop artifacts (weekly memory-self-review -> apply-self-review).
# Transient, machine-local; the tracked specs/RFCs elsewhere in docs/superpowers/ are unaffected.
docs/superpowers/applied/
docs/superpowers/memory-self-review-PROPOSAL.md
*.bak-apply-*

# Internal docs (not for public repo)
docs/FAILED_SWARM_LOG.md
docs/DashClaw positioning shift.txt
docs/archive/HANDOFF_REPORT.md
docs/archive/HANDOFF_LOCAL_DB_SPEED.md
docs/planning/

# Agent tools local data (SQLite databases, secrets)
agent-tools/tools/*/data/
agent-tools/secrets/

# Secrets (paranoid mode)
secrets/
!app/api/secrets/
!app/secrets/
*.pem
*.key
*.crt

# Database files
*.db
*.sqlite
*.sqlite3
.vercel
.env*.local
.gitnexus
.repowise/
.worktrees/

# Organism state (ephemeral)
.organism/state-reports/
.organism/heartbeats/
.organism/cycle-history/
.organism/logs/
.organism/shape-snapshots/
.organism/active-cycle.json
.organism/kill-switch
.organism/paused
.organism/consecutive-failures.json

# Behavior-learning telemetry (machine-local; redacted samples + dismissals)
.dashclaw/

# @dashclaw/mcp-server local launch-plan storage (machine-local)
.dashclaw-local/

# Full audit evidence log (untracked working artifact)
.audit-findings-full.md

# release:check machine-readable gate report (regenerated every run)
release-check-report.json

# TypeScript migration (Phase 1) — generated, never committed
next-env.d.ts
*.tsbuildinfo

# stray local installer — keep out of git (exceeds GitHub 100MB limit)
docs/plans/Rowboat-win32-x64-0.5.4-setup.exe
.vercel

# Agent-session working artifacts (gate/preflight logs, handoff notes, local tool dirs) — cleanup run 2026-06-11
*.log
*.tmp
.gate-*.log
gate-*.log
gate-*.exit
*-output.txt
# Marketing video — hosted externally, never in git (32 MB; history strip pending owner BFG decision)
DashClaw__AI_Governance.mp4
*.bak
.supergoalpreflight-*.log
.task3-*.log
.handoff-notes-*.md
.offlocal/
.playwright-cli/
.playwright-mcp/
# /launch skill scaffold + CostClaw audit output (local tool dirs, never project artifacts)
.launch/
costclaw-out/

# One-off audit/spec/ratchet artifacts belong in docs/archive, never at root (cleanup 2026-07-05)
/*-mega.md
/*-mega.json
/supergoal*.txt
# Mangled-Windows-path litter (absolute paths written as literal filenames by a buggy tool)
/C[:U]sers*
/C[:P]rojects*