# Tractatus Production Deployment - Exclusion List
# Prevents sensitive internal files from being deployed to production

# ============================================
# CRITICAL: Internal Documentation
# ============================================
CLAUDE.md
CLAUDE.md.backup
CLAUDE_*.md
*_Tractatus_Maintenance_Guide.md
SESSION_CLOSEDOWN_*.md
SESSION-HANDOFF-*.md
NEXT_SESSION.md
NEXT_SESSION_PRIORITIES.md
ClaudeWeb*.md
Tractatus-Website-Complete-Specification-*.md
DEPLOYMENT-*.md

# ============================================
# CRITICAL: Session State & Framework
# ============================================
.claude/
.claude/**

# ============================================
# CRITICAL: Credentials & Secrets
# ============================================
.env
.env.*
!.env.example
*.key
*.pem
*.p12
*.pfx
secrets/
credentials/

# ============================================
# CRITICAL: Internal Documentation Directory
# ============================================
# The docs/ directory is ENTIRELY internal. No production
# code reads from it (Express serves only public/).
# Previous approach used a denylist of specific patterns,
# which repeatedly failed as new files were added.
# Fix: exclude the entire directory.
# See: docs/SECURITY_INCIDENT_REPORT_2026-02-11.md
docs/
docs/**

# ============================================
# Development Files
# ============================================
node_modules/

# ============================================
# AL Integration - Large Model Files
# ============================================
al-integration/models/
al-integration/venv/
demos/**/venv/
demos/*/venv/
.git/
.gitignore
package-lock.json
*.log
logs/
npm-debug.log*
.DS_Store
Thumbs.db

# ============================================
# Database & Backups
# ============================================
data/
dump/
backups/
*.sql
*.sql.gz
*.dump

# ============================================
# Build & Test
# ============================================
coverage/
.nyc_output/
dist/
build/
tmp/
temp/
*.tmp

# ============================================
# IDE & Editor
# ============================================
.vscode/
.idea/
*.swp
*.swo
*~

# ============================================
# SSH Keys (extra safety)
# ============================================
*.ssh/
id_rsa*
id_ed25519*

# ============================================
# Local Scripts (deployment from local only)
# ============================================
scripts/deploy-*.sh
scripts/validate-public-sync.js
scripts/session-init.js
scripts/check-session-pressure.js
scripts/pre-action-check.js
scripts/recover-framework.js
scripts/framework-watchdog.js