.gitignore

# === OS / editor ===
Thumbs.db
.DS_Store
*.swp
.vscode/
.idea/
.wrangler/

# === Haskell (core/) ===
dist-newstyle/
.stack-work/
*.hi
*.o
cabal.project.local
cabal.project.local~

# === Rust (cli/) ===
# Cargo.lock is tracked for binaries — do NOT ignore it
# NOTE: no "bin/" rule here — plugin/bin/ launcher scripts and
# cli/src/bin/ MUST be committed (delta-review D1-1)
target/

# === Tauri GUI (gui/, M6 S4) ===
# tauri-build regenerates these ACL/schema json files every build;
# capabilities/*.json (hand-written) ARE tracked
gui/src-tauri/gen/

# === Generated / scratch ===
*.log
*.tmp
scratch/
# sidecar staging for the GUI bundle — release.yml creates it fresh in
# CI; a local repro build must not leak binaries into the tree
gui/src-tauri/binaries/

# RCA -o joins outdir with the input's relative path; keep tool output out of fixtures
contracts/fixtures/crosscheck/**/*.json

# ce's own per-project index (ce dedup)
.ce/

# M4 evaluation-set payloads: full file contents from OTHER private
# repositories (user decision 2026-08-10 — manifest in-repo, samples
# local). Regenerable + hash-verifiable via tests/eval_extract.
/.ce-eval/

# === Local credentials (NEVER versioned) ===
# API keys the user hands to tooling live here; the repo is PUBLIC.
/.secret

# === cc-memory (local session state, NOT versioned) ===
# User decision 2026-08-07: the whole memory/ tree stays out of the repo —
# MEMORY/PLAN/PROGRESS.md are machine-local handoff state, not content.
# ANCHORED on purpose: a bare "memory/" would also hide a stray
# <subdir>/memory/ from `git status`, and that is exactly how a 184 KB
# cli/memory/memory.db rode into commits 64780b9 / e296178 / d3f48df.
# cc-memory anchors its own root now (>= v2.6.0); if it ever regresses, the
# stray dir must show up as untracked noise, not vanish.
/memory/
.gstack/

# === Claude Code session-discipline files (local, NOT versioned) ===
# User decision 2026-08-23: CLAUDE.md (project card / session
# instructions) and .claude/ (per-machine Claude Code + cc-enforcer
# config) are development-machine state, untracked from the public
# repo. They remain in git HISTORY before this decision — judged
# publishable by the M7 pre-public full-history audit; purging would
# rewrite every release tag and break the pin chain. NOTE: the
# repo-root .claude-plugin/ is NOT ignored — it is the public
# marketplace manifest `claude plugin marketplace add` resolves.
/CLAUDE.md
/.claude/