# -- Python --
__pycache__/
*.py[cod]
*$py.class
*.so
*.egg-info/
dist/
build/
*.egg

# -- Virtual environments --
.venv/
venv/
env/

# -- IDE / Editor --
.vscode/
.idea/
*.swp
*.swo
*~

# -- Testing --
.pytest_cache/
.mypy_cache/
.ruff_cache/
.coverage
.coverage.*
coverage.xml
htmlcov/
# Coverage temp files
_cov*.txt
.tox/

# t16 (2026-07-21): ad-hoc test runners with hardcoded absolute paths — should
# never be committed. Use `python -m pytest` from py/ instead.
test_output.txt
batch_run_tests.py

# -- Environment variables --
.env
.env.local
.env.*.local
# Low-2 fix: .env.sandbox 含运行时沙箱转发策略，可能含敏感配置，不应入库
.env.sandbox

# -- Runtime data (SQLite databases + generated state) --
data/*.db
data/*.db-shm
data/*.db-wal
data/*.db2
data/.admin-password
data/.enc_key
data/jwt_secret
data/backups/
data/sandboxes/
data/wiki.json
data/memory.json
data/evolve-suggestions.json
data/tools.json
# P2 fix: runtime-generated state/cache files (not seed configs)
data/pev-loop.jsonl
data/dynamic-routing-cache.json
data/graph-edges.json
data/graph-nodes.json
data/agent-versions.json
data/budget_ledger.json
data/vectors.json
# runtime DAG execution checkpoints (per-run state, not seed configs)
data/dag-checkpoints/
# MAOS clock_guard 的防回拨水位线（enterprise/clock_guard.py: WATERMARK_FILENAME），
# 本机跑测试时按 MAOP 仓库根写入；纯运行时状态，绝不能入库。
data/clock_watermark.json

# -- Logs --
logs/

# -- Dashboard build output --
dashboard/dist/
dashboard/dist-enterprise/
dashboard-enterprise/dist/

# -- Temp / Cache --
temp/
cache/
output/

# -- Snapshots (test artifacts) --
tests/snapshots/
*.snap

# -- OS files --
.DS_Store
Thumbs.db
desktop.ini

# -- Docker --
docker-compose.override.yml

# -- Node (if any frontend tooling) --
node_modules/

# -- Temp test results / scripts --
py/data/
py/test_full.txt
py/test_results.txt
py/test_results_async.txt
pytest_results.txt
test-html.py
scripts/rename_dist.py
scripts/rename_pev_to_maop.py
security-audit.md
# Ad-hoc inspection/debug scripts (root-level, underscore-prefixed)
/_*.py
py/_*.py
# Ad-hoc cleanup/audit reports (large generated artifacts, not source)
py/_shim_cleanup_report.txt
config/agents.yaml.bak
config/agents.yaml.bak2

# -- Audit artifacts / temp scripts (not source) --
dashboard-enterprise/api_audit.json
dashboard-enterprise/orphan_audit.json
dashboard-enterprise/audit_api.py
dashboard-enterprise/audit_orphans.py
dashboard-enterprise/coverage/
dashboard-enterprise/frontend_dev.log
test_full.log
test_*.log
# -- Python runtime/test logs accidentally committed under py/ (see audit D7) --
py/*.log
py/**/*.log

# -- Credentials / runtime secrets --
data/.admin_initial_password
data/.write_test
data/backend_run.log
# S-P1-3 fix: Docker secrets directory (must NEVER be committed)
secrets/

# Alembic cache
py/maop/migrations/alembic/__pycache__/

# -- Security: Keys and Certificates (P0 fix: prevent private key leakage) --
# P0 fix: development Ed25519 private key leaked to history - cached removed above
*.pem
*.key
*.p12
*.pfx
scripts/dev_*
scripts/*_private_*
data/*_secret*
*.private
# -- Scrubbed backup dirs (must NEVER be committed) --
data_bak_*/
# -- Runtime error logs --
*.err
# -- Test baseline/result artifacts --
py/test_baseline_*.txt
py/test_final_*.txt
py/test_precommit_*.txt
py/tests/_baseline_cov*.txt
py/tests/_final_cov*.txt
py/.maop-snapshots/
.maop-snapshots/
dashboard-enterprise/test-results/
# 前端测试运行产物（此前被误提交，131KB 的 vitest 结果 JSON）
dashboard-enterprise/vitest_result.json
# -- Runtime degradation log --
data/degradation.log
# 带时间戳的轮转副本（历史累积产物；原先只忽略固定名，导致
# data/degradation_<ts>[_<ts>...].log 被误提交）
data/degradation_*.log
data/jwt_revoked.json
# -- Agent tool internal --
.codeartsdoer/
deliverables/

# Packaged-module runtime DB (orphan artifact, not a seed; VectorStore uses <root>/data/)
py/maop/data/*.db
py/maop/data/*.db-shm
py/maop/data/*.db-wal

# -- IDE: InsCode --
.inscode/

# -- Temporary attachments --
attachments/

# WorkBuddy session data (AI assistant workspace memory)
.workbuddy/

# WorkBuddy session data (AI assistant workspace memory)
.workbuddy/
