.gitignore

/dew
/dew-agent-*
*.test
/initramfs/cache/
/initramfs/vmlinuz
/initramfs/initramfs.cpio.gz
/initramfs/work/
/kernel/vmlinuz-turbo
/kernel/config-alpine-base

# Secrets — never commit
.env
.env.local

# Local build artifacts
dew-darwin-arm64
dew-darwin-amd64
dew-darwin-amd64.zip
dew-darwin-arm64.zip
*.p12

# Local VM image/initramfs cache (built via initramfs/build.sh)
initramfs/initramfs-*.cpio.gz
initramfs/vmlinuz
initramfs/vmlinuz.*
# systemd profile (R1) local build scratch (build-systemd.sh output)
/initramfs/.r1work/
initramfs/alpine-minirootfs-*.tar.gz

# Local test outputs
my-slide.tar.gz

# website (Astro + Cloudflare Workers)
website/node_modules/
website/dist/
website/.astro/
website/.wrangler/
# Generated by website/scripts/sync-install-scripts.mjs (prebuild).
# Sources of truth are /install.sh + /install.ps1 at repo root.
website/public/install.sh
website/public/install.ps1

# Release staging for goreleaser prebuilt darwin binaries (CI only).
# Populated by .github/workflows/release.yml from the macos-binaries
# artifact, consumed by .goreleaser.yaml `prebuilt.path`.
/dist/
/prebuilt/

# Internal R&D experiments — never commit
experiments/

# CI copies repo README into npm/ at publish time so npmjs.com has
# something to display on the package page. Source of truth is the
# repo root README; the copy is a build artifact, never committed.
npm/README.md

# Release pipeline writes this from assets-shas.txt (build-linux
# artifact) right before goreleaser invokes go build. Dev builds run
# without it; the map declared in assets_shas.go stays empty and SHA
# verification skips.
cmd/dew/assets_shas_generated.go