# Warp / Wick global gitignore template
#
# Append these lines to your global ~/.config/git/ignore (or
# ~/.gitignore_global) so a misplaced credential file in any project
# repo can't end up in version control.
#
# The keystore lives at $XDG_CONFIG_HOME/warp/ (or ~/.warp/) — outside
# any project repo by design — but a careless `cp` or `tar -C .` can
# still drop a copy into a checkout. These rules are belt-and-suspenders
# defense against that, per security_spec.md §1.

# Plain-secrets keystore (Slice 32).
**/.warp/credentials.env

# OAuth credentials keystore (Slice 32b).
**/.warp/oauth.json

# Catch-all for anything Wick or any agent writes under .warp/ in error.
**/.warp/
