.gitignore

__pycache__/
*.pyc
*.pyo
.env
*.db
*.db-wal
*.db-shm
*.db-journal
*.db.*.bak
*.sqlite
*.sqlite3
*.sqlite-wal
*.sqlite-shm
*.sqlite-journal

# Webhook fulfillment runtime state — dedup DB + the undelivered-key fallback,
# which can contain live license keys. Must never be committed.
.engraphis_processed_webhooks
undelivered_license_keys.tsv

# Automation/autosync runtime policy + last-run state (engraphis/automation.py —
# lives next to the DB or in ~/.engraphis/). Regenerable local state, not content.
automation.json
autosync.json
# Dashboard update-check cache; machine-local, regenerable runtime state.
.engraphis_update_check.json
.venv/
venv/
dist/
build/
*.egg-info/
# Extracted sdist directory (e.g. engraphis-0.1.0/) — regenerable build artifact
/engraphis-[0-9]*/
.pytest_cache/
/.pytest-*-tmp/
# Focused UI/API test runs use named repository-local base directories.
/.pytest-tmp-ui-*/
/.codex-pytest-tmp/
.ruff_cache/
.coverage
node_modules/
.playwright/
playwright-report/
test-results/
models_cache/
.secrets/
internal/
.private-eval/
.hosted-eval-results/
# Repo-local test base directories are the only private-ledger exception outside
# .private-eval.  They are transient and must never be considered release inputs.
/.tmp[-_]*/
/.release-full-tmp/

# Private product research. Public releases may include reproducible benchmark artifacts,
# never narrative commercial/competitive audits or market-analysis working papers.
/COMMERCIAL_AUDIT.md
/COMPETITIVE_ANALYSIS.md
/docs/COMMERCIAL_AUDIT.md
/docs/COMPETITIVE_ANALYSIS.md
# Git ignores are case-sensitive on many release builders. Spell these with
# character classes so an all-caps or mixed-case private working paper cannot
# slip through merely because a contributor is on a case-insensitive machine.
*[Cc][Oo][Mm][Mm][Ee][Rr][Cc][Ii][Aa][Ll]*[Aa][Uu][Dd][Ii][Tt]*
*[Cc][Oo][Mm][Pp][Ee][Tt][Ii][Tt][Ii][Vv][Ee]*[Aa][Nn][Aa][Ll][Yy][Ss][Ii][Ss]*
*[Cc][Oo][Mm][Pp][Ee][Tt][Ii][Tt][Oo][Rr]*[Rr][Ee][Ss][Ee][Aa][Rr][Cc][Hh]*
*[Mm][Aa][Rr][Kk][Ee][Tt]*[Rr][Ee][Ss][Ee][Aa][Rr][Cc][Hh]*
*[Pp][Rr][Ii][Cc][Ii][Nn][Gg]*[Rr][Ee][Ss][Ee][Aa][Rr][Cc][Hh]*
*[Pp][Rr][Ii][Vv][Aa][Tt][Ee]*[Rr][Ee][Ss][Ee][Aa][Rr][Cc][Hh]*

# Schema-migration snapshots contain the entire local memory database. The
# original database may have any extension (or none), so do not key this rule
# to ``*.db``.
*.pre-migration-v*.bak

# Local review/snapshot staging. These archives can recursively capture ignored runtime
# state (including engraphis.db), so they must never enter a source or release archive.
/_to_delete/

# Local internal design-review tooling output (candid self-assessment, not for the repo).
.commandcode/

# Runtime logs (e.g. dashboard.log from `engraphis-dashboard`) — regenerable, not content.
*.log

# One-off local dashboard measurement/smoke scripts (Playwright/d3 timing probes) that keep
# landing at the repo root — throwaway dev tooling, never part of the package. The already-
# tracked _smoke*.mjs / _measure_*.mjs must be removed with `git rm` (see audit handoff).
/_*.mjs

# Generated screenshot from tools/manual_slider_test.js — throwaway test artifact.
/dashboard_slider_test.png

# Local machine-specific launchers (absolute user paths / PM2 deploy specifics — not portable)
/Start-Engraphis-Dashboard.bat
/Engraphis Dashboard.lnk
# Local PM2 singleton MCP-HTTP launcher: hardcodes this machine's ENGRAPHIS_DB_PATH and PM2
# venv. The portable, env-configurable equivalent is the packaged engraphis-mcp-http command.
/engraphis-mcp-http.py

# Generated screen-demo payload and encoded video.
/demo/generated/
/demo/output/

# Local demo variants and large media assets are working files, not package inputs.
/demo/*_killer.html
/demo/*_social_demo.html
/demo/assets/

# FUSE mount artifacts: orphaned unlink-while-open handles from the Cowork
# mount layer, not real content. Safe to ignore; delete host-side once the
# holding process releases the handle (rm from the sandbox gets EPERM).
.fuse_hidden*

# Local curl/testing cookie jar — may contain live session cookies. Never commit.
cookies.txt

# uv lockfile (generated tooling, not a project dependency)
uv.lock

# Every-node stress fixtures (local only)
.scratch-*.db*
.seed20k*.py
.seed-graph*.py

# Schema-migration flock lives next to the DB (engraphis/config.py _migration_lock);
# regenerable runtime state like *.db itself. Held live while the server runs.
.*.migration.lock

# One-off diagnostic/report dumps that keep landing at the repo root — regenerable
# command output, never package content (same policy as /_*.mjs above).
/404_paths.txt
/disk_report.txt
/large_files.txt
/stats_pm2.txt
/venv_status.txt
/r3.txt

# Local Command Code session-transcript analysis prompts - inspect private
# ~/.commandcode/ session data, never commit these. Character classes keep
# mixed-case variants from slipping through on case-insensitive machines.
/[Pp][Rr][Oo][Mm][Pp][Tt]_[Ss][Ee][Ss][Ss][Ii][Oo][Nn]_[Tt][Rr][Aa][Nn][Ss][Cc][Rr][Ii][Pp][Tt]_[Aa][Nn][Aa][Ll][Yy][Ss][Ii][Ss].md
/[Ss][Ee][Ss][Ss][Ii][Oo][Nn]_[Tt][Rr][Aa][Nn][Ss][Cc][Rr][Ii][Pp][Tt]_[Qq][Uu][Ee][Rr][Yy]_[Pp][Rr][Oo][Mm][Pp][Tt].md

# Command Code per-session scratchpad (agent working files, never package content).
/$COMMANDCODE_SCRATCHPAD/