.gitignore

# Reference repos (large, read-only)
sources/

# Claude Code
.claude/
.mcp.json

# Rust build output
target/

# Forgeplan workspace
# Markdown artifacts = source of truth (tracked)
# Derived index, embedding cache, local config = NOT tracked
.forgeplan/lance/
.forgeplan/.fastembed_cache/
.forgeplan/session.yaml

# Embedding model cache — match at ANY depth, not just the two paths we
# happened to think of. fastembed resolves its cache relative to the
# process CWD, so a bare `forgeplan embed` from the repo root writes
# `./.fastembed_cache/` — which the `.forgeplan/`-prefixed rules above do
# NOT cover. That directory holds the BGE-M3 weights: 2.1 GB measured, so
# a single `git add -A` would have committed 2.1 GB of model binaries.
# Keep this leading-slash-free so it matches at every level.
.fastembed_cache/

# Node.js
node_modules/

# Environment secrets
.env
.env.local

# OS files
.DS_Store

# Editor swap files
*.swp

# Local todo files
todo/
crates/forgeplan-core/.fastembed_cache/

# cargo-dist generated manifests
dist-manifest.json
plan-dist-manifest.json

# Forgeplan backups and exports (not workspace data)
.forgeplan-backup/
.forgeplan-backup-*/
.forgeplan-export-*.json

# Playwright MCP cache
.playwright-mcp/

# Agent skills (local, not versioned)
.agents/skills/

# Local notes, research, planning — NOT versioned
.local/

# Astro build cache
.astro/

# Working screenshots in root (website mockups, not part of repo)
/forge-anim-*.png
/forge-flying-*.png
/forgeplan-*.png
/qf-*.png

# Binary office files
*.xlsx

# Playwright screenshots
*.png
!.github/assets/*.png
!favicon_pack/*.png
*.pen
W1-L2-CLAUDE-additional-sources.zip

# Soft-delete trash directory (PRD-055) — receipts are ephemeral
# per-workspace runtime state, not version-controlled.
.forgeplan/trash/

# Activity log (PRD-054) — append-only JSONL of MCP tool calls,
# per-workspace local data, not version-controlled.
.forgeplan/logs/

# Phase state (PRD-058) — per-artifact current_phase markers,
# workspace-local runtime state.
.forgeplan/state/

# Claim / lease files (PRD-057) — per-artifact agent claim markers,
# workspace-local runtime state, auto-expire by TTL.
.forgeplan/claims/

# Workspace advisory lock file (PRD-057) — fs2 flock on .forgeplan/.lock
.forgeplan/.lock

# Playbook execution journal (PRD-065) — per-run JSONL of step results,
# workspace-local runtime state, not version-controlled.
.forgeplan/journal/
.forgeplan/session.yaml

# Sprint handoff files for new-chat sessions (cold-context briefings).
# Local meta-documentation about future tracks of work; not part of the
# code or project artifacts.
/HANDOFF-*.md

# generated by @forgeplan/web init
.forgeplan-web/

# === forgeplan workspace runtime state (managed by `forgeplan init`) ===
.forgeplan/lance/
.forgeplan/.fastembed_cache/
.forgeplan/session.yaml
.forgeplan/state/
.forgeplan/trash/
.forgeplan/logs/
.forgeplan/locks/
# Per-developer API keys loaded by config/secrets.rs (PRD-077 FR-023).
# Never commit — config.yaml holds env-var *references*, this file holds values.
.forgeplan/secrets.env
# === end forgeplan section ===
.forgeplan/anomalies-journal.jsonl

# dev/ reference clones — external repos studied as prior art, not ours to track
dev/vibe-kanban/
dev/gastown/
dev/swarm-forge/
dev/effective-html/
dev/architecture-diagram-generator/

# dev/ derived + vendored artifacts — regenerable, never source
dev/forge-understand/spike/vendor/
dev/forgeplan-project-map/
dev/forgeplan-project-map.zip

# Serena tool state (per-developer, regenerable)
.serena/

# vNext pack: per-machine GitHub issue-creation state
docs/vnext/engineering-contract-layer/.created-issues.json

# Local agent/tooling state and scratch material — never belongs in git.
# Added after `git add -A` swept `.codex/config.toml` (which held a live
# HINDSIGHT_API_KEY) into this public repo. Removing the file does not undo
# exposure — the key was rotated. This stops the same sweep repeating.
.codex/
design/
ref/
log_*.md
*.jpg