node_modules/
dist/
dist.bak/
*.log
.DS_Store
*.tsbuildinfo
# packages/*/node_modules/
packages/*/dist/
packages/*/dist-chrome/
packages/*/dist-firefox/
*.cpuprofile

# Local orchestration artifacts
# Per-workspace runtime state written when OMK runs inside a package directory
packages/*/.omk/
.omk/*
!.omk/.codegraph/
!.omk/.codegraph/.gitignore
!.omk/extensions/
!.omk/extensions/**
.omk/extensions/**/node_modules/
!.omk/git/
!.omk/git/.gitignore
!.omk/npm/
!.omk/npm/.gitignore
# Harness-graph control plane: keep source scripts/docs; never commit generated artifacts.
!.omk/harness-graph/
!.omk/harness-graph/**
.omk/harness-graph/out/
.omk/harness-graph/out/**
.omk/harness-graph/**/__pycache__/
.omk/harness-graph/**/*.py[cod]
.omk/harness-graph/**/*.bak
.omk/harness-graph/**/*.bak-*
.omk/harness-graph/**/*~
.omk/harness-graph/**/DRIFT-*.md
# Local compact-index / agent backups if ever dropped under the tree
.omk/**/*.bak
.omk/**/*.bak-*
.omk/**/agents-backup-*.tgz
!.omk/prompts/
!.omk/prompts/**
!.omk/skills/
!.omk/skills/**
# Private research corpora; never version or publish.
.omk/skills/system-prompts-leaks/
.omk/skills/omk-godmod/
.omk/.sha256-sensitive

# Local jailbreak/policy-bypass research stays private, including artifacts placed
# below the otherwise publishable project skill and prompt trees. Defensive
# runtime code, tests, and security documentation remain reviewable.
/*jailbreak*
/*refusal-bypass*
/*policy-evasion*
.omk/skills/**/*jailbreak*
.omk/skills/**/*refusal-bypass*
.omk/skills/**/*policy-evasion*
.omk/prompts/**/*jailbreak*
.omk/prompts/**/*refusal-bypass*
.omk/prompts/**/*policy-evasion*
.pi/**/*jailbreak*
packages/coding-agent/omk-session-*.html
/GOAL-GJC-OMK-CONTROL-PORT.md

# Environment
.env*
!.env.example
!.env.sample
!.env.*.example
!.env.*.sample

# Private key artifacts
*.pem
*.key
*.p8
*.p12
*.pfx
id_rsa
id_dsa
id_ecdsa
id_ed25519

# Editor files
.vscode/
.zed/
.idea/
.claude/
*.swp
*.swo
*~

# Package specific
.npm/
coverage/
.nyc_output/
.pi_config/
tui-debug.log
compaction-results/
.opencode/
.pi/
syntax.jsonl
out.jsonl
pi-*.html
out.html
packages/coding-agent/binaries/
todo.md
plans/
.pi/hf-sessions/
.pi/hf-sessions-backup/
collect.sh

# Local Spec Kit bootstrap state; canonical project specs remain under specs/.
/.specify/

# Local strategy drafts, kept outside package and release content.
/OMK_REBRAND_VIRAL_MARKETING_MASTERPLAN_KO.md
/claw-stack-agentic-os-v2.md
/.agents/

# Local GJC session runtime state (token logs, runtime-state, workflow gates) — never version.
.gjc/

# Internal working docs (ADRs, roadmaps, evidence JSONs, superpowers specs) — local only, not shipped.
/docs/

# Local code-intel tool caches
.serena/
.understand-anything/
.bigpowers/

# Nested independent extension workspace (own lockfile/config); kept out of the monorepo tree.
/pi-extensions/
.turbo/
.turbo/**

# Local-only scratch / operator protocol notes (not package content).
# The root AGENTS.md and CLAUDE.md stay versioned as this project's rule surface, but the
# ~/.omk/agent protocol kernel and session directive they load are operator-local, like
# their *.hard.md twins. CLAUDE.local.md is Claude Code's per-operator memory file.
/dashscope-call.py
/maas-media.py
/AGENTS.GODMODE.md
/AGENTS.GODMODE.hard.md
/AGENTS.override.md
/AGENTS.override.hard.md
/AGENTS.stub.md
/CLAUDE.local.md

# OpenWiki generated pages ARE versioned (the scheduled workflow opens PRs against them).
# Local-only scratch inside the wiki can be ignored per-operator in .git/info/exclude.
