# Never manage these — they are secrets or machine-local runtime state.
# chezmoi will neither read them into source state nor write them to the target.

# Git credential store (plaintext tokens — .gitconfig sets helper=store)
.git-credentials

# Atuin runtime state + sync encryption key.
# The key is tracked by hand in secrets.yml; restore with `atuin login`.
.local/share/atuin/**

# Claude runtime state — history, per-project memory, session data.
# Only statusline-command.sh is managed. settings.json is deliberately NOT
# tracked: it pins the model and sets skipDangerousModePermissionPrompt, which
# is a per-box decision. Set it by hand on each machine.
.claude/projects/**
.claude/todos/**
.claude/statsig/**
.claude/.caveman-active
.claude/settings.json
.claude/settings.local.json

# Fish machine-local state (generated by fish itself)
.config/fish/fish_variables

# Out of scope for this repo (installed by their own installers, if at all)
.config/fish/conf.d/fnm.fish
.config/fish/conf.d/dtop.env.fish