.gitignore

# Dependencies
node_modules/
.pnpm-store/

# pnpm is the canonical package manager (see package.json#packageManager).
# Block npm/yarn-only lockfiles to prevent lockfile-divergence supply-chain bugs.
package-lock.json
!tools/sca/package-lock.json
yarn.lock

# Build output
dist/
build/
*.tsbuildinfo
packages/*/dist/
examples/*/node_modules/

# Test output
coverage/
.vitest/
*.log

# SLO planning / execution documents are development-only agent work products,
# not user-facing published documentation.
docs/slo/

# TLA+ / TLC generated artifacts (keep specs and .cfg, ignore caches and traces)
**/*_TTrace_*.tla
**/*_TTrace_*.bin
**/states/
**/*-run.log
**/MC.out
**/MC.cfg
**/*.dot
**/*.toolbox/

# SLSA attestation staging paths (M5 release workflow writes here during build)
.attestations/
*.intoto.jsonl
*.sigstore

# OS / editor
.DS_Store
*.swp
.idea/
.vscode/
!.vscode/settings.json

# Coding-agent harness session state — none of this should ever be
# committed. Per-agent transcripts, scratch logs, prompt caches, and
# project-local config can leak credentials, prior conversations, and
# repo-internal context that doesn't belong in a public OSS repo.
# When adopting a new agent, add its scratch dir here BEFORE first use.
.claude/
.sldo-logs/
.cursor/
.cursor-tutor/
.cursorrules
.aider*
.continue/
.codeium/
.copilot/
.cline/
.cody/
.tabby/
.augmentcode/
.windsurf/
.devin/
.zed/
.roo/
.smol/
.gpt-engineer/
.opencode/
**/agent-logs/
**/.agent-state/
LESSONS-BACKLOG.md

# Drift classifier cache (users decide their own policy; we ignore in this repo)
.hulumi/

# Environment
.env
.env.local

# Pulumi checkpoints + local state (examples directory + ad-hoc scratch stacks).
# Committed stack configs (Pulumi.<stackName>.yaml) remain tracked; only
# generated / ephemeral state is ignored.
.pulumi/
**/*.pulumi.backup
Pulumi.*.yaml.bak

# Integration test scratch (M3): Pulumi Automation API operates in temp
# workspaces, but if developer-tools resolve them under packages/baseline/
# we ignore the Pulumi state directory there.
packages/baseline/**/.pulumi/
packages/baseline/tests/integration/.tmp/