.gitignore

# Dependencies
node_modules/
vendor/

# Build outputs. dist/app/.placeholder stays tracked so `go build` works
# before the first `npm run build` (embed.go needs the directory to exist);
# dist/phone/.placeholder is the same rule for the phone bundle (`make phone`).
dist/*
!dist/app
dist/app/*
!dist/app/.placeholder
!dist/phone
dist/phone/*
!dist/phone/.placeholder
bin/
# A stray `go build` in the repo root drops a binary named after the module.
/gadak
/scry
build/
coverage/

# Local runtime data
.gadak/
*.db
*.db-shm
*.db-wal
tmp/
.private/
e2e/.tmp/
e2e/perf/.tmp/

# Playwright
test-results/
test-results-agent/
playwright-report/
blob-report/
playwright/.cache/

# Exception: the committed demo snapshot and its content original (GDK-1751)
!examples/demo.db
!examples/demo-source.db
# Exception: the committed demo snapshots
!examples/demo.db
!examples/demo-linear.db

# Environment
.env
.env.*
!.env.example

# Go
*.test
*.out

# OS and editor
.DS_Store
.idea/
.vscode/

# goreleaser output (see .goreleaser.yaml `dist:`)
.release/

# Local word list for scripts/scan-internal.sh (never commit — see the script header)
.scan-wordlist

# Local scratch: audit reports and working notes, never part of a release
scratch/

# Local desktop build output (desktop/build-app.sh, `go build ./...` in desktop/)
desktop/build/
desktop/desktop
e2e/demo/test-results-search/
e2e/demo/test-results-groupby/
# a bare symlink named node_modules (worktree lanes) must never be tracked
node_modules
web/node_modules

# site: public/media is a symlink to the tracked docs/media (one source of media bytes)
site/public/media

# Astro build output (site/)
site/dist/
site/.astro/
e2e/demo/test-results-scale/
e2e/demo/test-results-history/
e2e/demo/test-results-terminal/
e2e/demo/test-results-issue-command-shots/

# CPython bytecode from the media editors (e2e/demo/edit-claude-drive.py et al.)
__pycache__/

# Phone e2e captures for vision rounds (mobile/e2e/a1-captures.spec.ts) — artifacts, not sources.
mobile/e2e/.shots/

# Browser-MCP page snapshots. Driving the app against a real workspace writes
# the site hostname and the operator email into these — scripts/scan-internal.sh
# caught exactly that (GDK-1621 measurement round).
.playwright-mcp/
e2e/demo/test-results-sprint/
e2e/demo/test-results-retro/
e2e/demo/test-results-sprint-retro-hero/

# outsource delegate session dirs — a relative --config-dir once landed them in desktop/ (2026-09-11, audit a13-shells)
sc-w*/
**/glm-cfg/