.gitignore

# Work tree is $HOME, so deny everything by default and allow only
# user-authored config. A trailing-slash rule like /*/ matches directories
# only, which would leave every top-level dotfile addable.
/*
!/.agents/
!/.claude/
!/.config/
!/.pi/
!/.gitconfig
!/.gitignore
!/.install.sh
!/README.md

# Never track the git database, at any depth.
.dotfiles

# .config: deny by default, allow the directories we track
/.config/*
!/.config/.ignore
!/.config/AGENTS.md
!/.config/aerospace/
!/.config/agents/
!/.config/bat/
!/.config/btop/
!/.config/fish/
!/.config/ghostty/
!/.config/homebrew/
!/.config/lazygit/
!/.config/mise/
!/.config/nvim/
!/.config/starship/
!/.config/tmux/
!/.config/workmux/

# Machine-local state inside otherwise-allowed .config directories
/.config/bat/themes/*.1
/.config/fish/completions/
/.config/fish/conf.d/*
!/.config/fish/conf.d/fzf-theme.fish
!/.config/fish/conf.d/github-packages.fish
/.config/fish/functions/*fzf*
/.config/fish/fish_variables
/.config/ghostty/*.bak
/.config/homebrew/trust.json
/.config/homebrew/trust.json.lock
/.config/tmux/plugins/

# .pi: deny by default, allow specific user-authored config
/.pi/*
!/.pi/agent/
!/.pi/web-search.json
/.pi/agent/*
!/.pi/agent/AGENTS.md
!/.pi/agent/themes/
!/.pi/agent/agents/
!/.pi/agent/extensions/
/.pi/agent/extensions/node_modules/

# .claude: deny by default, allow specific user-authored config
/.claude/*
!/.claude/CLAUDE.md
!/.claude/settings.json
!/.claude/skills/

# .agents: deny by default, allow specific user-authored skills (vercel skills cli)
/.agents/*
!/.agents/.skill-lock.json
!/.agents/skills/