memroos/.gitignore at main · lac5q/memroos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.

# dependencies
node_modules/
/.pnp
.pnp.*
.yarn/*
!.yarn/patches
!.yarn/plugins
!.yarn/releases
!.yarn/versions

# testing
coverage/

# next.js
.next/
out/

# production
build/

# misc
.DS_Store
*.pem

# debug
npm-debug.log*
yarn-debug.log*
yarn-error.log*
.pnpm-debug.log*

# env files (can opt-in for committing if needed)
.env*
!.env.example
!**/.env.example

# vercel
.vercel

# typescript
*.tsbuildinfo
next-env.d.ts
.gitnexus
__pycache__/
*.pyc
.venv/

# Local tool caches & worktrees
.claude/
.code-review/
.playwright-mcp/
.worktrees/
.understand-anything/

# Screenshots / debug output (root only)
/*.png
/download.txt
/data/
logs/
services/**/logs/

# GSD internal counters
.planning/.next-call-count

# Local agent/tool state — never committed
.codex/*
!.codex/
!.codex/config.example.toml
.agents/
.gemini/

# Private client recall contracts
evals/memory-recall/critical-anchors.local.json

# Private context-sources overlay (never commit; copy from context-sources.local.json.example)
context-sources.local.json

# Local workspace memory; public repos should ship examples/docs instead.
/SOUL.md
/USER.md
/MEMORY.md
/memory/*.md
!/memory/.gitkeep

# Local runtime stores generated by demo/dev profiles
/.qdrant_storage/
/.qwen/
/apps/memroos/data/
/INSTALL_NOTES.md
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite3
.gitnexus.backup*/
.gitnexus.pre-*

# Skill signing layer (Phase 148 / SKILLTRUST-02): operator Ed25519 keypair.
# The private key must never reach git — the public_key_fingerprint stored in
# skill_registry.public_key_fingerprint is sufficient for verification.
# Also ignore the legacy *.pem files that Node.js crypto may emit.
apps/memroos/data/skill-signing-key.json
apps/memroos/data/skill-signing-key.*

# Operator load harness (Phase 124 / ENTOPS-01) — live run artifacts.
# baseline.json + .gitkeep are committed so the CI gate has something
# to read on first run; the gate treats baseline as NOT pass.
reports/operator-load/latest.json
reports/operator-load/latest.md

# Recall-ship LaunchAgent secrets (operator API key) — must never reach git.
services/memory/.memroos-ship.env
etc/