CRITICAL SECURITY FIX:
Removed 226 internal and sensitive files from git tracking to protect
the public tractatus-framework repository from exposing confidential
development information, server details, and internal strategies.
SCOPE:
This cleanup separates the INTERNAL repository (tractatus) from the
PUBLIC repository (tractatus-framework on GitHub).
REMOVED DIRECTORIES (entire):
- .claude/ (framework session state, metrics, archives)
- governance/ (internal operational governance)
- For Claude Web/ (internal development specs)
- scripts/hook-validators/ (internal enforcement)
- scripts/framework-components/ (internal components)
- docs/planning/, docs/testing/, docs/outreach/
- docs/stripe-analysis/, docs/economist-analysis/
- docs/framework-incidents/, docs/deployment-logs/
- docs/analysis-archive-2025-10/
REMOVED ROOT FILES:
- CLAUDE_*.md, ClaudeWeb*.md (internal development)
- PITCH-*.md (internal pitch documents)
- PHASE-*.md, MEETING_NOTES*.md (internal planning)
- SESSION*.md, OPTIMAL_NEXT_SESSION*.md (session handoffs)
- ARCHIVE_SUMMARY*.md, CLOSEDOWN*.* (session archives)
- EXECUTIVE_BRIEF*.md (internal briefs)
- Tractatus-Website-Complete-Specification*.md (internal specs)
- UI_TRANSFORMATION_PROJECT_PLAN.md, SITE_IMPROVEMENT_PRIORITIES.md
- SCHEDULED_TASKS.md, TRACTATUS_BRAND_SYSTEM.md
- .stripe-ids.json, .rsyncignore (sensitive/deployment)
- deployment-output.txt, migration-output.txt (logs)
- ECONOMIST_LETTER*.docx, PERPLEXITY_USER_PROMPT.txt (correspondence)
REMOVED SCRIPTS:
- scripts/deploy-*.sh (contain server IPs)
- scripts/session-init.js, scripts/check-session-pressure.js
- scripts/analyze-violations.js
- scripts/hook-validators/*.js (5 files)
- scripts/framework-components/*.js
REMOVED DOCS (96 files):
- docs/SESSION*.md, docs/session-handoff-*.md
- docs/DEPLOYMENT*.md, docs/MULTI_PROJECT*.md
- docs/DOCUMENT_AUDIT*.md, docs/DOCUMENT_*.md
- docs/BLOG-POST-OUTLINES.md
- docs/PHASE-*.md, docs/STRIPE_*.md, docs/KOHA*.md
- docs/SECURITY_AUDIT*.md, docs/FRAMEWORK_FAILURE*.md
- docs/BENCHMARK*.md, docs/IMPLEMENTATION_PROGRESS*.md
- docs/BOOTSTRAPPING*.md, docs/GOVERNANCE-RULE-LIBRARY.md
- docs/SIMULATION*.md, docs/API_MEMORY*.md
ADDED PROTECTIONS:
1. Comprehensive .gitignore (172 lines)
- Blocks all internal directories
- Blocks all internal file patterns
- Prevents accidental commits
2. PUBLIC_REPO_CHECKLIST.md
- Security verification checklist
- Weekly maintenance procedures
- Clear guidelines for public vs internal
REMAINING PUBLIC FILES: 6,435
- src/: 85 (open source services)
- tests/: 35 (unit/integration tests)
- public/: 178 (website frontend)
- scripts/: 111 (public utilities)
- docs/: 107 (public documentation)
- root: 13 (README, LICENSE, package.json, configs)
VERIFICATION:
✓ No server IPs
✓ No SSH keys or credentials
✓ No payment system secrets
✓ No internal planning documents
✓ No session handoffs or development logs
✓ No deployment scripts with production details
RESULT:
Public tractatus-framework repository now contains ONLY:
- Open source code
- Public documentation
- Implementation guides
- Apache 2.0 licensed content
Internal tractatus repository (local) retains ALL files for development.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
171 lines
2.8 KiB
Text
171 lines
2.8 KiB
Text
# ============================================
|
|
# PUBLIC REPOSITORY CONFIGURATION
|
|
# tractatus-framework (GitHub Public)
|
|
# ============================================
|
|
# This .gitignore protects internal development
|
|
# files from being pushed to public repository.
|
|
# Only open source code and public documentation
|
|
# should be in the public tractatus-framework repo.
|
|
|
|
# Dependencies
|
|
node_modules/
|
|
|
|
# Environment variables
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# MongoDB data
|
|
data/mongodb/*
|
|
!data/mongodb/.gitkeep
|
|
|
|
# Generated files
|
|
public/downloads/*.pdf
|
|
public/downloads/*.epub
|
|
public/downloads/*.docx
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Testing
|
|
coverage/
|
|
.nyc_output/
|
|
|
|
# Build
|
|
dist/
|
|
build/
|
|
|
|
# Temporary files
|
|
tmp/
|
|
temp/
|
|
*.tmp
|
|
|
|
# ============================================
|
|
# INTERNAL FILES - NEVER PUSH TO PUBLIC REPO
|
|
# ============================================
|
|
|
|
# === ENTIRE INTERNAL DIRECTORIES ===
|
|
.claude/
|
|
governance/
|
|
For Claude Web/
|
|
umami-local/
|
|
|
|
# === INTERNAL DEVELOPMENT DOCS ===
|
|
CLAUDE.md
|
|
CLAUDE.md.backup
|
|
CLAUDE_*.md
|
|
ClaudeWeb*.md
|
|
PRE_APPROVED_COMMANDS.md
|
|
BACKEND_FRONTEND_MAPPING.md
|
|
|
|
# === SESSION HANDOFFS & ARCHIVES ===
|
|
SESSION*.md
|
|
SESSION-*.md
|
|
OPTIMAL_NEXT_SESSION*.md
|
|
NEXT_SESSION*.md
|
|
ARCHIVE_SUMMARY*.md
|
|
|
|
# === INTERNAL PITCH DOCUMENTS ===
|
|
PITCH-*.md
|
|
TRACTATUS-ELEVATOR-PITCHES.md
|
|
|
|
# === INTERNAL PLANNING ===
|
|
PHASE-*.md
|
|
MEETING_NOTES*.md
|
|
EXECUTIVE_BRIEF*.md
|
|
|
|
# === INTERNAL SCRIPTS ===
|
|
scripts/deploy-*.sh
|
|
scripts/session-init.js
|
|
scripts/check-session-pressure.js
|
|
scripts/analyze-violations.js
|
|
scripts/hook-validators/
|
|
scripts/framework-components/
|
|
scripts/reset-admin-password.js
|
|
|
|
# === INTERNAL DOCS DIRECTORIES ===
|
|
docs/session-handoff-*.md
|
|
docs/SESSION*.md
|
|
docs/planning/
|
|
docs/testing/
|
|
docs/outreach/
|
|
docs/stripe-analysis/
|
|
docs/economist-analysis/
|
|
docs/framework-incidents/
|
|
docs/deployment-logs/
|
|
|
|
# === INTERNAL DOCS FILES ===
|
|
docs/DEPLOYMENT*.md
|
|
docs/MULTI_PROJECT*.md
|
|
docs/DOCUMENT_AUDIT*.md
|
|
docs/DOCUMENT_OPTIMIZATION*.md
|
|
docs/DOCUMENT_REORGANIZATION*.md
|
|
docs/DOCUMENT_SECURITY*.md
|
|
docs/BLOG-POST-OUTLINES.md
|
|
docs/PHASE-*.md
|
|
docs/STRIPE_*.md
|
|
docs/KOHA*.md
|
|
docs/SECURITY_AUDIT*.md
|
|
docs/BENCHMARK*.md
|
|
docs/IMPLEMENTATION_PROGRESS*.md
|
|
docs/BOOTSTRAPPING*.md
|
|
docs/GOVERNANCE-RULE-LIBRARY.md
|
|
docs/SIMULATION*.md
|
|
docs/SESSION*.md
|
|
docs/API_MEMORY*.md
|
|
docs/HOOKS*.md
|
|
|
|
# === SENSITIVE FILES ===
|
|
*.key
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
secrets/
|
|
credentials/
|
|
ADMIN_LOGIN_INSTRUCTIONS.md
|
|
.admin-credentials.local
|
|
|
|
# === DATABASE DUMPS ===
|
|
dump/
|
|
backups/
|
|
*.sql
|
|
*.sql.gz
|
|
*.dump
|
|
|
|
# === SSH KEYS ===
|
|
*.ssh/
|
|
id_rsa*
|
|
id_ed25519*
|
|
~/.ssh/
|
|
|
|
# === DEPLOYMENT CONFIGS ===
|
|
deployment-config.json
|
|
production.json
|
|
|
|
# === TEMPORARY AUDIT FILES ===
|
|
/tmp/*.md
|
|
/tmp/*.txt
|
|
|
|
# === SCREENSHOTS ===
|
|
Screenshot*.png
|
|
*.screenshot.png
|
|
|
|
# === BACKUPS ===
|
|
*.backup
|
|
*.bak
|
|
old/
|