# ============================================================================
# Command-center repo: config in, state out.
# Everything ignored here is runtime state a running agent mutates constantly.
# Git history must mean "the configuration changed", not "the agent breathed".
# ============================================================================

# --- databases + sqlite sidecars (hot, binary, unbounded growth) -----------
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite3

# --- runtime state dirs -----------------------------------------------------
cache/
agent/cache/
logs/
run/
sessions/
terminal-sessions/
ssh-control/
remote-host/

# --- quarantined secrets: never tracked, ever ------------------------------
auth.json
**/auth.json
.env
**/.env
*.env
# `*.env` is the rule that matters: `.env` alone does not match `postgres.env`
# or `frank-job-hunt.env`, and those are the files that actually carry
# POSTGRES_PASSWORD / API keys on this fleet (issue #40).
trust.json
**/trust.json
*.pem
*.key
identity*

# --- dependency installs (regenerable from manifests) ----------------------
node_modules/
bun.lock
package-lock.json

# --- misc ephemera ----------------------------------------------------------
gpu_cache.json
last-changelog-version
.DS_Store
*.swp
*.tmp

# --- per-host runtime identity + caches (never config) ---------------------
agent/blobs/
install-id
puppeteer/
webcache/

# --- local backups + staging artifacts: kept on disk, never in history -----
.AGENTTRASH/
*.save
*.bak-*

# deploy quarantine — never tracked
.quarantine/

# harness runtime transcripts: local-only, may contain raw session secrets
agent/sessions/

# harness diagnostic report bundles (tarballs of logs + session state)
reports/

# --- agent runtime scratch: research runs, decode predictions, worktrees ----
autoresearch/
agent/predict/
local/
wt/

# --- per-worktree memory buckets: keyed on ephemeral worktree paths ---------
# A session run inside a git worktree mints a bucket named after the worktree
# path; the worktree is deleted, the bucket is orphan state, not config.
agent/memories/--home-blank-.omp-wt-*

# --- theme media: content the pipeline consumes, not configuration ---------
# 23 wallpapers, 80 MiB. Tracked until 2026-10-20: every clone of a config repo was
# carrying a library no diff can review. The live library at
# ~/.local/share/noctalia/wallpapers is a real directory of real files (measured
# 2026-10-20), so this path in the repo was a duplicate of it, not its source — and
# note that untracking deletes the copy in every other checkout regardless of
# `git rm --cached` on the branch. A fresh box starts with an empty library; every
# filename carries its wallhaven ID; `/w/<id>` answers `text/html`, so resolve the CDN URL at
# `https://wallhaven.cc/api/v1/w/<id>` and download `data.path` — the recipe, with the reason it
# is not a plain `curl -L`, is on omp-docs/tools/dotfiles-deploy.md
dotfiles/noctalia/.local/share/noctalia/wallpapers/

# --- generated theme output: machine-written, never reviewable, never deployed ---
# noctalia/matugen rewrite these in place; a tracked copy is a stale snapshot that
# deploy.sh would push back over a live palette. These patterns are the ignore half of the
# exclusion list in `deploy_file` (scripts/deploy.sh): change one, change the other, or a
# generated file becomes tracked-but-never-deployed — the fiction class #41 removed. The
# capital-N rule is noctalia's own palette-directory naming, and it was in deploy.sh only.
# Law: omp-docs/inventory/home-config-census.md, Refs #42, #60
dotfiles/**/themes/noctalia*
dotfiles/**/colors/noctalia*
dotfiles/**/noctalia.*
dotfiles/**/noctalia-*
dotfiles/**/Noctalia*

# --- harness natives: unpacked runtime payloads, never configuration ----------
# 2.4 MB of tree-sitter grammars the harness unpacks into the repo root on first use (measured
# on blankpad 2026-10-21). Regenerable, unreviewable, not config — every clause of AGENTS.md's
# runtime-state doctrine applies, and it sat unnamed in the root, one `git add -A` away from
# being committed as if it were configuration.
natives/