tractatus/.gitignore
TheFlow 43fa6cca61 SECURITY: Remove all internal/confidential files from public repository
CRITICAL SECURITY FIX:
Removed 226 internal and sensitive files from git tracking to protect
the public tractatus-framework repository from exposing confidential
development information, server details, and internal strategies.

SCOPE:
This cleanup separates the INTERNAL repository (tractatus) from the
PUBLIC repository (tractatus-framework on GitHub).

REMOVED DIRECTORIES (entire):
- .claude/ (framework session state, metrics, archives)
- governance/ (internal operational governance)
- For Claude Web/ (internal development specs)
- scripts/hook-validators/ (internal enforcement)
- scripts/framework-components/ (internal components)
- docs/planning/, docs/testing/, docs/outreach/
- docs/stripe-analysis/, docs/economist-analysis/
- docs/framework-incidents/, docs/deployment-logs/
- docs/analysis-archive-2025-10/

REMOVED ROOT FILES:
- CLAUDE_*.md, ClaudeWeb*.md (internal development)
- PITCH-*.md (internal pitch documents)
- PHASE-*.md, MEETING_NOTES*.md (internal planning)
- SESSION*.md, OPTIMAL_NEXT_SESSION*.md (session handoffs)
- ARCHIVE_SUMMARY*.md, CLOSEDOWN*.* (session archives)
- EXECUTIVE_BRIEF*.md (internal briefs)
- Tractatus-Website-Complete-Specification*.md (internal specs)
- UI_TRANSFORMATION_PROJECT_PLAN.md, SITE_IMPROVEMENT_PRIORITIES.md
- SCHEDULED_TASKS.md, TRACTATUS_BRAND_SYSTEM.md
- .stripe-ids.json, .rsyncignore (sensitive/deployment)
- deployment-output.txt, migration-output.txt (logs)
- ECONOMIST_LETTER*.docx, PERPLEXITY_USER_PROMPT.txt (correspondence)

REMOVED SCRIPTS:
- scripts/deploy-*.sh (contain server IPs)
- scripts/session-init.js, scripts/check-session-pressure.js
- scripts/analyze-violations.js
- scripts/hook-validators/*.js (5 files)
- scripts/framework-components/*.js

REMOVED DOCS (96 files):
- docs/SESSION*.md, docs/session-handoff-*.md
- docs/DEPLOYMENT*.md, docs/MULTI_PROJECT*.md
- docs/DOCUMENT_AUDIT*.md, docs/DOCUMENT_*.md
- docs/BLOG-POST-OUTLINES.md
- docs/PHASE-*.md, docs/STRIPE_*.md, docs/KOHA*.md
- docs/SECURITY_AUDIT*.md, docs/FRAMEWORK_FAILURE*.md
- docs/BENCHMARK*.md, docs/IMPLEMENTATION_PROGRESS*.md
- docs/BOOTSTRAPPING*.md, docs/GOVERNANCE-RULE-LIBRARY.md
- docs/SIMULATION*.md, docs/API_MEMORY*.md

ADDED PROTECTIONS:
1. Comprehensive .gitignore (172 lines)
   - Blocks all internal directories
   - Blocks all internal file patterns
   - Prevents accidental commits

2. PUBLIC_REPO_CHECKLIST.md
   - Security verification checklist
   - Weekly maintenance procedures
   - Clear guidelines for public vs internal

REMAINING PUBLIC FILES: 6,435
- src/: 85 (open source services)
- tests/: 35 (unit/integration tests)
- public/: 178 (website frontend)
- scripts/: 111 (public utilities)
- docs/: 107 (public documentation)
- root: 13 (README, LICENSE, package.json, configs)

VERIFICATION:
✓ No server IPs
✓ No SSH keys or credentials
✓ No payment system secrets
✓ No internal planning documents
✓ No session handoffs or development logs
✓ No deployment scripts with production details

RESULT:
Public tractatus-framework repository now contains ONLY:
- Open source code
- Public documentation
- Implementation guides
- Apache 2.0 licensed content

Internal tractatus repository (local) retains ALL files for development.

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 18:50:16 +13:00

171 lines
2.8 KiB
Text

# ============================================
# PUBLIC REPOSITORY CONFIGURATION
# tractatus-framework (GitHub Public)
# ============================================
# This .gitignore protects internal development
# files from being pushed to public repository.
# Only open source code and public documentation
# should be in the public tractatus-framework repo.
# Dependencies
node_modules/
# Environment variables
.env
.env.local
.env.*.local
# Logs
logs/
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
# MongoDB data
data/mongodb/*
!data/mongodb/.gitkeep
# Generated files
public/downloads/*.pdf
public/downloads/*.epub
public/downloads/*.docx
# IDE
.vscode/
.idea/
*.swp
*.swo
*~
# OS
.DS_Store
Thumbs.db
# Testing
coverage/
.nyc_output/
# Build
dist/
build/
# Temporary files
tmp/
temp/
*.tmp
# ============================================
# INTERNAL FILES - NEVER PUSH TO PUBLIC REPO
# ============================================
# === ENTIRE INTERNAL DIRECTORIES ===
.claude/
governance/
For Claude Web/
umami-local/
# === INTERNAL DEVELOPMENT DOCS ===
CLAUDE.md
CLAUDE.md.backup
CLAUDE_*.md
ClaudeWeb*.md
PRE_APPROVED_COMMANDS.md
BACKEND_FRONTEND_MAPPING.md
# === SESSION HANDOFFS & ARCHIVES ===
SESSION*.md
SESSION-*.md
OPTIMAL_NEXT_SESSION*.md
NEXT_SESSION*.md
ARCHIVE_SUMMARY*.md
# === INTERNAL PITCH DOCUMENTS ===
PITCH-*.md
TRACTATUS-ELEVATOR-PITCHES.md
# === INTERNAL PLANNING ===
PHASE-*.md
MEETING_NOTES*.md
EXECUTIVE_BRIEF*.md
# === INTERNAL SCRIPTS ===
scripts/deploy-*.sh
scripts/session-init.js
scripts/check-session-pressure.js
scripts/analyze-violations.js
scripts/hook-validators/
scripts/framework-components/
scripts/reset-admin-password.js
# === INTERNAL DOCS DIRECTORIES ===
docs/session-handoff-*.md
docs/SESSION*.md
docs/planning/
docs/testing/
docs/outreach/
docs/stripe-analysis/
docs/economist-analysis/
docs/framework-incidents/
docs/deployment-logs/
# === INTERNAL DOCS FILES ===
docs/DEPLOYMENT*.md
docs/MULTI_PROJECT*.md
docs/DOCUMENT_AUDIT*.md
docs/DOCUMENT_OPTIMIZATION*.md
docs/DOCUMENT_REORGANIZATION*.md
docs/DOCUMENT_SECURITY*.md
docs/BLOG-POST-OUTLINES.md
docs/PHASE-*.md
docs/STRIPE_*.md
docs/KOHA*.md
docs/SECURITY_AUDIT*.md
docs/BENCHMARK*.md
docs/IMPLEMENTATION_PROGRESS*.md
docs/BOOTSTRAPPING*.md
docs/GOVERNANCE-RULE-LIBRARY.md
docs/SIMULATION*.md
docs/SESSION*.md
docs/API_MEMORY*.md
docs/HOOKS*.md
# === SENSITIVE FILES ===
*.key
*.pem
*.p12
*.pfx
secrets/
credentials/
ADMIN_LOGIN_INSTRUCTIONS.md
.admin-credentials.local
# === DATABASE DUMPS ===
dump/
backups/
*.sql
*.sql.gz
*.dump
# === SSH KEYS ===
*.ssh/
id_rsa*
id_ed25519*
~/.ssh/
# === DEPLOYMENT CONFIGS ===
deployment-config.json
production.json
# === TEMPORARY AUDIT FILES ===
/tmp/*.md
/tmp/*.txt
# === SCREENSHOTS ===
Screenshot*.png
*.screenshot.png
# === BACKUPS ===
*.backup
*.bak
old/