# ============================================================================
# Command-center repo: config in, state out.
# Everything ignored here is runtime state a running agent mutates constantly.
# Git history must mean "the configuration changed", not "the agent breathed".
# ============================================================================

# --- databases + sqlite sidecars (hot, binary, unbounded growth) -----------
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite3

# --- runtime state dirs -----------------------------------------------------
cache/
agent/cache/
logs/
run/
sessions/
terminal-sessions/
ssh-control/
remote-host/

# --- quarantined secrets: never tracked, ever ------------------------------
auth.json
**/auth.json
.env
**/.env
*.env
# `*.env` is the rule that matters: `.env` alone does not match `postgres.env`
# or `frank-job-hunt.env`, and those are the files that actually carry
# POSTGRES_PASSWORD / API keys on this fleet (issue #40).
trust.json
**/trust.json
*.pem
*.key
identity*

# --- dependency installs (regenerable from manifests) ----------------------
node_modules/
bun.lock
package-lock.json

# --- misc ephemera ----------------------------------------------------------
gpu_cache.json
last-changelog-version
.DS_Store
*.swp
*.tmp

# --- per-host runtime identity + caches (never config) ---------------------
agent/blobs/
install-id
puppeteer/
webcache/

# --- local backups + staging artifacts: kept on disk, never in history -----
.AGENTTRASH/
*.save
*.bak-*

# deploy quarantine — never tracked
.quarantine/

# harness runtime transcripts: local-only, may contain raw session secrets
agent/sessions/

# harness diagnostic report bundles (tarballs of logs + session state)
reports/

# --- agent runtime scratch: research runs, decode predictions, worktrees ----
autoresearch/
agent/predict/
local/
wt/

# --- per-worktree memory buckets: keyed on ephemeral worktree paths ---------
# A session run inside a git worktree mints a bucket named after the worktree
# path; the worktree is deleted, the bucket is orphan state, not config.
agent/memories/--home-blank-.omp-wt-*

# --- theme media: content the pipeline consumes, not configuration ---------
# 23 wallpapers, 80 MiB. Tracked until 2026-10-20: every clone of a config repo was
# carrying a library no diff can review. The live library at
# ~/.local/share/noctalia/wallpapers is a real directory of real files (measured
# 2026-10-20), so this path in the repo was a duplicate of it, not its source — and
# note that untracking deletes the copy in every other checkout regardless of
# `git rm --cached` on the branch. A fresh box starts with an empty library; every
# filename carries its wallhaven ID, so `curl -L -o <name> https://wallhaven.cc/w/<id>`
# puts it back. Law: omp-docs/tools/dotfiles-deploy.md
dotfiles/noctalia/.local/share/noctalia/wallpapers/

# --- generated theme output: machine-written, never reviewable, never deployed ---
# noctalia/matugen rewrite these in place; a tracked copy is a stale snapshot that
# deploy.sh would push back over a live palette. Patterns match the exclusion list in
# scripts/deploy.sh. Law: omp-docs/inventory/home-config-census.md, Refs #42
dotfiles/**/themes/noctalia*
dotfiles/**/colors/noctalia*
dotfiles/**/noctalia.*
dotfiles/**/noctalia-*
