.gitignore

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
# /lib/ intentionally NOT ignored: it's the app's Python package
# (ad_client). The template's /lib/ entry (virtualenv layout) silently
# kept it out of the ad-network deploy.
/lib64/
parts/
sdist/
var/
wheels/
*.egg-info/
.installed.cfg
*.egg

# Virtual environments
venv/
env/
.venv/
.env/

# Node.js
node_modules/
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# IDE
.idea/
.vscode/
*.swp
*.swo
*~

# OS
.DS_Store
Thumbs.db

# Testing
.pytest_cache/
.coverage
htmlcov/
.tox/
.nox/

# Jupyter
.ipynb_checkpoints/

# Environment variables
.env
.env.local
.env.*.local

# Dash
# Note: .min.js.map files ARE committed — needed for production deployment
# Runtime visitor ledger written by lib/analytics_tracker.py — generated
# state, not seed data; committing it means every local run shows up as a
# diff. Unanchored so it matches whatever directory the app is run from.
visitor_analytics.json
visitor_analytics.json.lock
visitor_analytics.json.tmp
# The control board's override store falls back to the app directory when
# PAGE_VISIBILITY_FILE is unset — running the board locally must never write
# a real page-visibility policy into the checkout (same reason as the ledger
# above). Template 1.6.8 added these; the gate-wave port missed them.
page_visibility.json
page_visibility.json.lock
page_visibility.json.tmp
# Reporter lease — which worker POSTed the last hourly rollup to 2plot.ai.
.satellite_report.lease
# Legacy Gen-0 hit-log directory (pre-retrofit) — may linger on dev boxes.
analytics/

# Session working documents are LOCAL BY CONVENTION, network-wide: sync
# reports, handoffs, and kickoff briefs name hosts, topology, and process.
# Two public fleet repos were caught tracking theirs (2026-08-24). This repo
# kept X402-SYNC-REPORT.md out through .git/info/exclude, which is per-clone
# and invisible to everyone else — the rule belongs here, where it ships.
X402-SYNC-REPORT.md
HANDOFF-*.md
KICKOFF-*.md

# The .claude/ development kit IS shipped — it is how every fork inherits
# the network's behavioral contract, skills, and settings (the F1 fabric
# build, template 1.6.15). Everything else in .claude/ stays local: session
# scratch, screenshots, settings.local.json (per-seat model overrides), the
# component-library agent notes, and .claude/worktrees/ (a real git worktree
# lives there). Allow-list, not blanket ignore — a dir-level ignore cannot
# be re-included beneath, hence the /* form.
.claude/*
!.claude/CLAUDE.md
!.claude/settings.json
!.claude/skills/
# The fork's launch name (sync 1.6.44 item 23b). Its CONTENT is this fork's
# own app key, so it is NOT byte-copyable from the template — a fan-out that
# copied it would start every session in the fleet under the template's
# address. It needs its own allow-list line for the same reason the three
# above do: without it the file is written, passes every test run off the
# WORKING DIRECTORY, and is invisible in a fresh checkout.
!.claude/session-name

# The visitor-key salt (sync 1.6.44 item 16). Generated on first use, never
# committed: a committed salt makes every visitor_key in every fork of this
# repo recomputable by anyone holding the tree, which would make the hash a
# slower way of storing the address it exists to avoid storing. Ignored in
# the SAME COMMIT that introduced the file, deliberately — the template
# nearly committed its own with `git add -A`.
.visitor_salt