.gitignore

# Turborepo
**/.turbo

# Node.js and pnpm
node_modules/
npm-debug.log*
pnpm-debug.log*
.pnpm-store/

# Rust
target/
.cargo/
.rustup/

# TypeScript
*.tsbuildinfo
dist/

# IDE
.vscode/
.idea/
*.swp
*.swo

# OS
.DS_Store
Thumbs.db

# Core dumps. Patterns target dump files (`core`, `core.<pid>`) without
# swallowing source directories named `core` such as `packages/core/`.
/core
core.[0-9]*
**/core.[0-9]*

# Secrets
secrets/**/*

# Registry build artifacts
registry/native/target/
registry/native/vendor/
registry/native/c/build/
registry/native/c/vendor/
registry/native/c/libs/
registry/native/c/.cache/
registry/native/c/sysroot/
registry/software/*/bin/
registry/software/*/wasm/
registry/software/vim/share/
registry/software/*/agent-os-package.meta.json
registry/.last-publish-hash
registry/software/*/.last-publish-hash
registry/.build-markers/

# Experiments C build artifacts
experiments/wasm-gui/third_party/**/*.o
experiments/wasm-gui/third_party/**/*.a
experiments/wasm-gui/third_party/**/.libs/

# Ralph agent artifacts
scripts/ralph/archive/
scripts/ralph/codex-streams/
scripts/ralph/.last-branch
scripts/ralph/prd.json
scripts/ralph/todo/prd.json
scripts/ralph/progress.txt
scripts/ralph/reviews/
scripts/ralph/.codex-last-msg-*

# Agent working files live user-scoped in ~/.agents/; ignore any in-repo .agent/ as a safety net
.agent/
.claude/scheduled_tasks.lock

# Local caches and stray outputs
crates/execution/assets/v8-bridge.js
crates/execution/assets/v8-bridge-zlib.js
crates/execution/.agent-os-pyodide-cache/
crates/execution/async-out.txt
crates/sidecar/.tmp-sidecar-tests/
packages/browser/.cache/
packages/benchmarks/results/*
!packages/benchmarks/results/baseline-local.json
!packages/benchmarks/results/baseline-ci.json
website/.astro/
website/public/docs/

# Vendored V8 bridge bundles staged at release time for crates.io publishing
crates/execution/assets/generated/
crates/v8-runtime/assets/generated/

# WASM command binaries vendored into @secure-exec/core at build/prepack time
# (whitelisted in package.json `files`, so they still ship in the npm tarball).
# Derived from registry/native build output; never committed to git.
packages/core/commands/

# Transient repro scratch files and Vite/Vitest config timestamp artifacts
.tmp-*
*.timestamp-*.mjs
website/vendor/