.gitignore

node_modules/
.env
accounts.json
accounts.creds.json
accounts.creds.json.tmp
devin-connect-image-tag.json
.devin-connect-calibrated.env
model-access.json
sshpass.sh
sshpass2.sh
deploy-us.py
# scripts/ is IGNORE-BY-DEFAULT with a per-file allowlist below. A new script is
# therefore invisible to git until it gets its own `!scripts/<name>` line — `ls`
# shows it, `git status` does not, and it is silently absent from the commit.
# Measured: scripts/mutate-verify-dirty.mjs was written, tested and referenced in
# a handoff before anyone noticed git had never seen it; it surfaced only because
# `git status` still reported the same file count as before.
scripts/*
!scripts/gen-star-history.mjs
!scripts/native-bridge-smoke.mjs
!scripts/special-agent-smoke.mjs
!scripts/lsp-capacity-matrix.mjs
!scripts/web-search-direct-probe.mjs
!scripts/sync-docs-contributors.mjs
!scripts/secret-scan.mjs
!scripts/run-test-shard.mjs
!scripts/spec-static-check.mjs
!scripts/spec-baseline-audit.mjs
!scripts/cascade-survival-probe.mjs
!scripts/devin-connect-smoke.mjs
!scripts/devin-connect-paid-verify.mjs
!scripts/devin-connect-image-calibrate.mjs
!scripts/devin-connect-login.mjs
!scripts/devin-connect-calibrate.mjs
!scripts/cline-compat-verify.mjs
!scripts/cline-smoke.sh
!scripts/dashboard-cdp-check.mjs
!scripts/exe-boot-smoke.mjs
!scripts/verify-release-version.mjs
!scripts/mutate-verify.mjs
!scripts/mutate-verify-dirty.mjs
!scripts/mutation-harness-utils.mjs
!scripts/mutation-network-deny.mjs
src/get-token.js
src/test-cascade.js
src/runtime-config.json
proxy.json
logs/
*.log
.playwright-mcp/
.claude/
__pycache__/
deploy-main.py
windsurf-api/
codeium.zip
codeium_ext/
bugsy/
windsurf-grpc/
*.db

# internal dev notes — not for distribution.
# All AI/handoff/dev docs live in docs-internal/ (folder is git-ignored).
# Root keeps only README*.md + LICENSE (public GitHub face) + CLAUDE.md.
docs-internal/
CLAUDE.md
AGENTS.md
GEMINI.md
COPILOT.md
HANDOFF.md
.devin-connect-forward-plan.md
.devin-connect-next-plan.md
.devin-connect-annotations.json
# external reference repos — deleted 2026-07-11; guard against re-clone
AIClient-2-API/
copilot2api-go/
.cursorrules
.windsurfrules
.aider*
.continue/
.codex/
.devin/
audit/
tmp/
tmp-testing/
runtime-config.json
stats.json
*.png
*.pem
.docker-data/
PR-FLOW.md
# workflow analysis output — moved into docs-internal/workflow-results/ on 2026-07-11
# (docs-internal/ is already ignored above). Legacy line kept as a guard in case
# a script re-creates .workflow-results/ at the root.
.workflow-results/
.paid1-session.env
# Free-account login/session envs (tokens + credentials) — never commit
.free*.env
*-login.env
*-session.env
ghidra-proj/
.ghidra-corpus/
# AI session transcripts / context dumps — contain account credentials, session
# tokens and proxy strings verbatim from the conversation; never commit
*claudetxt.txt
没跑完的上下文.txt
*-context-dump.txt
上下文*.txt
docs/*.bak

# Full-chain request traces + raw wire dumps (self-use debug/RE, never commit)
.trace/
.wire-dump/
.wire-dump-pull/

# Exported chat-session transcripts (/export output — never commit)
2026-*-local-command-*.txt
2026-*dprojectwindsurfapiclaudetxt*.txt
*这个是*.txt
*这也是*.txt

# Windows single-exe build artifacts (built in CI, never committed)
/dist-windows/
/dist-macos/
/src/_bundle.cjs
# OTA 回滚点（运行时记录，勿提交）
data/self-update-before.json
data/self-update-before.pending.json

# Machine-local; never product
.DS_Store
.codegraph/