.gitignore

# HelixCode Docker Setup Git Ignore

# Environment files
.env
.env.local
.env.production

# Docker volumes and data
/workspace/
projects/
shared/

# Temporary files
*.tmp
*.temp

# Log files
*.log
logs/

# Backup files
*.bak
*.backup

# IDE files
.vscode/
.idea/
*.swp
*.swo

# OS files
.DS_Store
Thumbs.db

# Test files
.env.test

# PenPot token
penpot.txt

# Build artifacts
bin/
*.exe
*.dll
*.so
*.dylib

# Go build cache
.cache/

# Submodule directories (ignored if not cloned)
Example_Projects/OpenCode/OpenCode/
Example_Projects/OpenCode/Homebrew-Tap/
Example_Projects/Ollama_Code/
Example_Projects/Qwen_Code/
Example_Projects/Codename_Goose/
Example_Projects/Claude_Code/
dependencies/LLama_CPP/
dependencies/Ollama/
dependencies/HuggingFace_Hub/
Example_Projects/DeepSeek_CLI/
Example_Projects/Mistral_Code/
Github-Pages-website/
Example_Projects/Gemini_CLI/
Example_Projects/Forge/
Example_Projects/Plandex/
Example_Projects/GPT_Engineer/
Example_Projects/Aider/
Example_Projects/Cline/
awesome-ai-memory/

# External memory provider repositories (cloned on demand)
helix_code/external/memory/mem0/
helix_code/external/memory/zep/
helix_code/external/memory/memonto/
helix_code/external/memory/baseai/

# Generated test challenges and results (but not the framework)
helix_code/challenges/
/challenges/

# CodeGraph Phase-C anti-bluff Challenge scripts + bank are first-party
# source (committed) — exempt from the broad challenges/ ignore (CONST-053
# recreatable-content test: these are the generator/source, not artefacts).
!tools/codegraph/challenges/

# Allow the e2e challenge testing framework but ignore test results
!helix_code/tests/e2e/challenges/
helix_code/tests/e2e/challenges/test-results/
helix_code/tests/e2e/challenges/.DS_Store

# Allow per-submodule anti-bluff challenge framework (CONST-035 / CONST-050(B))
# — round-305 minimal enrichment template exempts owned-static-content
!assets/challenges/
!assets/challenges/**


reports/demos/
governance-cascade-report-*.txt

# === Secret hygiene (CONST-041) — added P0-06 ===
.env
.env.*
!.env.example
*.pem
*.key
*.crt
id_rsa
id_rsa.pub
id_ed25519
id_ed25519.pub
helix.security.json
# === END Secret hygiene ===

# Worktrees created by HelixCode P1-F04 EnterWorktree (do NOT commit)
.helix-worktrees/

# P1.5 cleanup: leftover phase-1 development artefacts
helix_code/p1f*_challenge
helix_code/security-scan
helix_code/testhelper
helix_code/.helixcode/
.claude/

# P1.5-WP5: .env API-key dedup backups
.env.backup_p1-5
.env.diff_p1-5
**/*.env.backup_p1-5
**/*.env.diff_p1-5

# ============================================================================
# helix_qa evidence — screenshots, recordings, traces (NEVER committed)
# ============================================================================
# Per operator mandate 2026-05-13: "Created screenshots and video recording
# materials during the helix_qa QA sessions MUST BE Git ignored!"
# These directories collect runtime evidence used for anti-bluff verification
# (CONST-035 / Article XI §11.9). Evidence files are inherently per-run, can
# be very large, and may contain sensitive UI state — they MUST stay local
# and never reach upstream.
# Ignore everything under qa_evidence/ EXCEPT the README that documents
# the directory layout. The README MUST stay tracked so a fresh clone
# explains where evidence lands without needing prior context.
docs/qa_evidence/*
!docs/qa_evidence/README.md
helix_code/qa_evidence/*
helix_code/docs/qa_evidence/*
helix_qa/qa_evidence/*
**/qa_session_*/
**/*.qa-screenshot.png
**/*.qa-screenshot.jpg
**/*.qa-recording.mp4
**/*.qa-recording.webm
**/*.qa-trace.json
/helix_code/examples/multi_agent_system/multi_agent_system

# CONST-053: untrack stray binaries from earlier accidental commits
/core.test
/security-test
/security_test

# CONST-053: SQLite db files (helix_qa session memory etc.)
*.db
*.db-shm
*.db-wal
# §11.4.95 (HXC-013): the workable-items SQLite DB is the TRACKED single source of
# truth — NEVER gitignored (it IS authoritative source data, not a build artefact).
# Its transient WAL/SHM sidecars stay ignored (WAL-checkpointed before each commit).
!docs/workable_items.db
/HelixQA/
/qa-results/

# Replica configs generated for multi-instance testing
helix_code/config/replica-*.yaml

# === CodeGraph incorporation (CONST-053) — added CG2 ===
# CodeGraph runtime is a vendored npm dependency installed via
# `npm install --prefix tools/codegraph` — a build/dependency artefact,
# fully recreatable by tools/codegraph/install.sh. NEVER versioned.
tools/codegraph/node_modules/
tools/codegraph/package.json
tools/codegraph/package-lock.json
# CodeGraph: the scanned graph DB + caches are generated by `codegraph index`
# (recreatable per §11.4.77) and NEVER versioned. BUT `.codegraph/config.json`
# IS tracked (§11.4.78 — it is the source-of-truth index config, not a build
# artefact). Submodules' own `.codegraph/` dirs stay fully ignored.
**/.codegraph/
!/.codegraph/
/.codegraph/*
!/.codegraph/config.json
!/.codegraph/.gitignore
# === END CodeGraph incorporation ===

# docs_chain runtime artifacts (§11.4.77) — contexts/*.yaml stay tracked
.docs_chain/state.json
*.docs_chain.tmp
.playwright-mcp/