.gitignore

node_modules/
gateway/dist/
.env
config/.vault/
config/user.json

# ── Workspace runtime data (manuscripts, memory, images, configs) — NEVER commit ──
# Deny-by-default: ignore everything under workspace/, then re-include ONLY the
# product-default files meant to ship with the open-source repo. This prevents a
# stray `git add -A` from ever sweeping in the author's private manuscripts,
# conversation logs, goals, launch plans, website configs, or generated covers.
workspace/*
!workspace/soul/
# ...but the live VOICE-PROFILE becomes the author's personal writing
# fingerprint once analyzed — ship only VOICE-PROFILE.template.md, never the
# live file.
workspace/soul/VOICE-PROFILE.md
!workspace/SKILLS.txt
!workspace/projects/
workspace/projects/*
!workspace/projects/.template/

# Generated audit/report artifacts (not for repo)
SECURITY-AUDIT-REPORT.md
*-AUDIT-REPORT.md
*.log
.DS_Store
nul

# Claude Code config (local dev only)
.claude/

# Premium skill packs (purchased separately, not bundled)
skills/premium/*/
!skills/premium/README.md

# Author OS tools (mounted at runtime)
author-os/

# Internal testing docs (not for repo)
scripts/FULL-TEST-CHECKLIST.md
ROADMAP.md
dashboard/dist/index.html.bak