# graphify knowledge-graph output — one-shot audit artifact, not a tracked
# repo surface (34MB graph.json + chunk JSONs, stale within days on a hot repo).
# Re-run on demand with the /graphify skill; the standing query surface is `ao inject`.
graphify-out/

# macOS
.DS_Store
.AppleDouble
.LSOverride

# Editor directories and files
.vscode/
.idea/
*.swp
*.swo
*~

# Node modules (if you add tooling)
node_modules/
npm-debug.log*

# Build outputs
dist/
build/
*.log
# ...except the skill-probe egress logs. They are bound evidence: every rep binds
# the digest of its own lines, and the verifier recomputes both counts from this
# file, so a set whose log the tree ignores has a digest with nothing to check.
!evals/skill-probes/**/network.log

# Python
.venv/
venv/
env/
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
.pytest_cache/
.coverage
.coverage.*
htmlcov/
.mypy_cache/
.ruff_cache/
coverage.xml

# Generated reports
reports/
/release-notes.md
wiki/

# Agent runtime state
# Repo-root .agents/ is local/private runtime state for Codex, Claude,
# AgentOps, and other agents. It must never be tracked in git — except the
# AgentOps project config, which pins repo-wide settings (e.g. tracker=br)
# and must survive fresh clones.
/.agents/*
!/.agents/ao/
/.agents/ao/*
!/.agents/ao/config.yaml
tests/claude-code/.agents/

# Allow test fixtures under .agents/ paths
!cli/cmd/ao/testdata/**/.agents/
!cli/cmd/ao/testdata/**/.agents/**

# Runtime state
state.json
.runtime/
.claude/memory.md

# MkDocs build output + local venv
_site/
.venv-docs/

# Local temp artifacts (generated during skill self-tests / hooks)
.tmp/
skills/.tmp/
.x/
cli/.x/
hook-output.txt
skills/vibe/README.md

# Go binaries (built locally)
cli/ao
cli/bin/ao
cli/bin/witness-crosscheck
cli/bin/probe-headroom
cli/cmd/ao/ao
cli/cmd/ao/ao-test-bin
cli/coverage.out
cli/coverage.html
# Go test binaries
*.test

# CLI local state (generated by ao runs in cli/ workdir)
cli/.agents/

# Agent Farm temp files
.farm.meta
.witness.pid
.witness.heartbeat
.witness/

# Gas Town (added by gt)
.claude/
.logs/
.beads/*
!.beads/identity.toml

# Session artifacts (generated by agents)
HANDOFF_SUMMARY.md

# Dolt database files (added by bd init)
.dolt/
*.db
.coverdata/

# Coverage artifacts
cli/*cov*.out
cli/*cov*.html
cli/cmd/ao/.tmp
MEMORY.md

# Beads / Dolt files (added by bd init)
.beads-credential-key

# Local agent-runtime scratch written by `gc` at a repository root.
# The managed deployment template under deploy/gc is product source.
.gc/
city.toml
!deploy/gc/city.toml
city.toml.bak

.doctor/

# Release evidence/output dir generated by the release CI (pre-publish-evidence
# SBOM + security-gate summary). Must be ignored so GoReleaser's --clean dirty-state
# check passes in the publish job.
release-artifacts/
ag-1aav-primitive-selection/
ag-mjlg-materialize/
ag-hlng-regen-docs/
ag-vb3q-authoring/
ag-dxqy/
ag-lkxx/
ag-z8c4/
ag-sjz8-gut-poison/
egpu1-schema-v2/
ag-b4p9-prepublish/
ag-okfu-judgment/
ag-maaa-r3/
ag-32xk-autosnap/
wt-tcf0-1/
wt-ag-469h/
wt-mm6q/
ag-2zf8/
# bd worktree
ag-60jd/
# bd worktree
wt-soc-xn5s/
# bd worktree
ag-dclv/

# Beads / Dolt files (added by bd init)
.beads/proxieddb/

# bv (beads viewer) local config and caches
.bv/
# bd worktree
ag-ni1b-agy-consolidated/

# Local orchestration/session artifacts.
.ntm/
test_budget.env
thread_output.md

# Local bd/git worktrees kept inside the checkout; reconciled by cp-snx.
wt-ag-28dp/
wt-ag-ddrb/
wt-ag-ni1b/
wt-ag-y4ac/
wt-gofmt/
# bd worktree
wt-ag-pj51/
# bd worktree
wt-ag-if7p/
# br tracker ledger — PRIVATE nested repo (boshu2/agentops-beads); never commit to the public repo
_beads/
# foreign nested worktree (recon F5)
wt-ag-qidx/
wt-*/

# build binary (compiled, not source) + run-output dumps
bin/ao
outputs/

# Provenance ledger advisory-lock sidecar (cross-process append lock; never committed)
docs/provenance/*.lock
