.gitignore

# okrdev is markdown and shell — nothing here builds, so this file is not
# about artifacts. It exists for the things that must never land in a public
# repo, plus the noise every clone accumulates.

# Secrets. The stack docs keep credentials in repo secrets and local env
# files; the env files stay local. This rule is why a future `.env` is a
# non-event instead of an incident.
.env
.env.*
!.env.example
*.pem
*.key

# Editor and OS noise.
.DS_Store
Thumbs.db
*.swp
.idea/
.vscode/

# Node. tests/gate-grammar.test.js runs on bare `node --test` with no
# install step, but a stray `npm install` shouldn't dirty the tree.
node_modules/

# Build output. `source: "./"` in .claude-plugin/marketplace.json makes this
# repo the plugin directory, which the marketplace copies into every
# installer's cache — so a tracked build artifact is something every adopter
# downloads. The repo PDF (tools/repo-pdf) was 91% of that payload before it
# came out. Regenerate it, don't commit it. Enforced by check_payload.
/dist/

# Anything you want ignored locally without editing this shared file belongs
# in .git/info/exclude.