.gitignore

# External assets — cloned/vendored, not part of this repo's history.
# Provenance & re-clone instructions live in references/README.md (tracked).
references/*
!references/README.md

# Python
__pycache__/
*.py[cod]
.venv/
venv/
.env
.env.*
!.env.example
!.env.template
*.pem
*.key
*.p12
*.pfx
*.jks
credentials*.json
service-account*.json
.secrets/
secrets/
*.egg-info/
.mypy_cache/
.pytest_cache/
.ruff_cache/

# Node
node_modules/
dist/
build/
*.tsbuildinfo
.turbo/

# Rust
target/

# OS / editor
.DS_Store
Thumbs.db
.idea/
.vscode/
*.swp

# Local scratch
scratch/
*.local

# Internal-only design references (non-confidential internal architecture notes used as
# design input; NEVER published — public docs/ + notes/ must stay vendor-neutral).
internal/
shinkend-linux-*

# pytest coverage data
.coverage
sdk/python/.coverage

# Claude Code harness state (worktrees, local agent scratch)
.claude/
.cursor/
# agent-harness onboarding mirror (local-only; CLAUDE.md is the tracked canon)
/AGENTS.md

# Claude/Cursor session artifacts written into the working dir — transcripts, subagent
# logs, tool-results, workflow journals, and the auto-memory mirror. These contain
# internal references and API keys from the live session and must NEVER be committed.
# (A `git add -A` once swept these into a PR; the no-internal guard caught it. Root-anchored
# UUID-shaped globs match the per-session <uuid>.jsonl file and <uuid>/ dir.)
/????????-????-????-????-????????????.jsonl
/????????-????-????-????-????????????/
/*.jsonl
/memory/

# local operator map (key files / secrets / branch state) — never upload
map.md

# local run receipts (minimal; raw ones never uploaded)
runs/

# Maintainer-only cloud/provider probes and their raw outputs. These were previously hidden
# only by .git/info/exclude, which is local to one checkout and is not a repository
# safety boundary.
/cloud/
/devtest/

# Local-only Docker context and unpublished CUA/OSWorld image experiments. These files
# may contain environment-specific paths, guest credentials, or private launch topology.
/.dockerignore
/images/linux/*cua*
/images/linux/private/
/images/linux/local/
/images/linux/sk-exec-sidecar.py
/scripts/osworld_arm_vm.sh
/docker-compose.override.yml
/docker-compose.override.yaml
/compose.override.yml
/compose.override.yaml

# This one generic, public reference image is intentionally tracked. The wildcard above
# protects unpublished CUA/provider variants such as Dockerfile.cua-<local-experiment>.
!/images/linux/Dockerfile.cua

# Local agent analysis and paper-draft artifacts; keep source-derived notes out of the
# public repository even when they do not contain a literal credential.
/AGENTIX_ANALYSIS.md
/CODEX_BU_AND_CU_RUNTIME.md
/CODEX_CUA_HARNESS_ANALYSIS.md
/SHINKEN_CUA_HARNESS_WALKTHROUGH.md
/SHINKEN_PAPER_HARNESS_SECTION.md
/SHINKEN_RUNTIME_DEEPDIVE.md