.gitignore

node_modules
dist
.env
.DS_Store
nul
*.txt
*.log
.worktrees

.worktrees/
.claude/worktrees/

# Python (browser_use smoke runner)
.venv/
__pycache__/
*.pyc
.pytest_cache/
.mypy_cache/
.ruff_cache/

# This repo ignores `*.txt` broadly, but we want to keep this pinned list in git.
!test/browser_use/requirements.txt

# Playwright
test-results/
playwright-report/
blob-report/
# Electron build artifacts
bundled-node/
server-node-modules/
server-node-modules-staging/
release/
dist/wizard/
artifacts/perf/

# Runtime / agent artifacts
.superpowers/
.opencode/
sdk.session.snapshot
.kata.local.toml

# --- Rust/Tauri port (additive; port-scoped so the Node repo is undisturbed) ---
# Cargo build output for the workspace at this worktree root.
/target
**/*.rs.bk
# Note: Cargo.lock IS committed for the workspace (it will host binaries).

# claude sidecar deps (npm install in the sidecar dir; not vendored in git)
crates/freshell-claude-sidecar/node_modules/

# --- vm-bridge session scratch (SECURITY: mandatory, per 2026-07-10 adversarial
# security review). The bridge watchers EXECUTE any *.cmd that appears in an
# inbox. If an inbox file were ever committed, `git pull`/checkout would drop it
# into a watched folder and it would run on any machine with a watcher live --
# i.e. git becomes an RCE channel. These patterns keep every bridge artifact
# (inboxes, outboxes, liveness beacons, quarantine, outbound bundles) out of git.
port/vm-bridge/inbox-*/
port/vm-bridge/outbox-*/
port/vm-bridge/quarantine-*/
port/vm-bridge/alive-*.txt
port/vm-bridge/outbound/

# agent/tool scratch
.ai/
.amp-council/
.verify-vantages.env