gendesign/.gitignore
bot-backend 4a33347aee chore(claude): security hardening — hooks/settings в git, dangerous-commands hook, restricted DB для reviewer/qa
- .claude/settings.json закоммичен (секретов нет): бот-окна и чистые checkout
  получают hooks/deny/statusLine вместо молчаливого их отсутствия
- новый PreToolUse hook check-dangerous-commands.py: ловит force/amend/no-verify/
  rm -rf/reset --hard/push в main И внутри powershell-обёрток (deny-префиксы позиционны);
  24/24 тест-кейсов; + Read-deny **/.env
- postgres MCP reviewer/qa → --access-mode=restricted (декларируемый read-only
  теперь enforced, не проза)
- auto-analyst: принята throttle-политика ready>=10 (конфликт с work-as-analyst устранён,
  just-in-time нарезка)
- defaultMode:auto перенесён на project-уровень (глобально снят — balance_platform
  вернулся к обычным промптам)
2026-07-02 18:10:26 +03:00

96 lines
2.4 KiB
Text
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Memory graph (hardlink to C:\mcp\.aim\memory-gendesign.jsonl)
*.jsonl
!memory/memory-gendesign.jsonl
# Python / Node / venv
.venv/
__pycache__/
*.pyc
*.egg-info/
node_modules/
# Next.js build artifacts
.next/
frontend/.next/
out/
# Sentry CLI config (auto-generated, contains auth tokens)
.sentryclirc
frontend/.sentryclirc
# TypeScript incremental build info — must NOT be committed; locally-generated
# and changes on every build, which busts Docker build context cache.
*.tsbuildinfo
# Env / secrets
.env
.env.local
.env.*.local
.env.runtime
.mcp.json
# креды-заметки — НЕ коммитить (см. issue #391)
sshkey.txt
# Session cookies (browser-export) для local-sweep — НЕ коммитить (#770)
tradein-mvp/scripts/.cian-cookies.json
tradein-mvp/scripts/*.cookies.json
tradein-mvp/scripts/*cookies*.json
tradein-mvp/scripts/.*cookies*.json
# IDE
.vscode/
.idea/
*.swp
# Claude Code — local state only (cache, locks, sessions, schedules).
# Agents and rules ARE tracked: they are team-shared config.
# Explicit per-path list — `.claude/` + `!.claude/agents/` whitelist pattern
# does not work because git cannot re-include files under an ignored parent.
.claude/settings.local.json
.claude/cache/
.claude/sessions/
.claude/locks/
.claude/file-history/
.claude/shell-snapshots/
.claude/tasks/
.claude/plans/
.claude/telemetry/
.claude/projects/
.claude/worktrees/
.claude/daemon/
.claude/session-env/
.claude/stats-cache.json
.claude/history.jsonl
.claude/mcp-needs-auth-cache.json
.claude/paste-cache/
.claude/downloads/
.claude/backups/
.claude/plugins/
.claude/agent-memory*/
.claude/scheduled_tasks.lock
# Local data (raw CSVs from Rosreestr/etc — too large for git)
data/raw/
data/raw/prinzip_crm.sqlite
data/raw/domrf_photos/
# Objective API smoke dumps (ходят в backend/data/raw когда скрипт запускают из backend/)
backend/data/raw/
# Antonov SQLite snapshot для ETL (340 MB)
sf_anton_snapshot.db
sf_anton_snapshot.db-*
*.csv
*.csv.zip
!backend/db/init/*.sql
# OSRM routing graph build output (#39) — ~1.5GB .osrm* + intermediate .pbf.
# Строится offline на VPS через scripts/build_osrm.sh, монтируется в osrm-service.
# НЕ коммитим артефакты; .gitkeep держит каталог.
data/osrm/*
!data/osrm/.gitkeep
# Log cruft at repo root
debug.log
.ds-sync/
ds-bundle/
.design-sync/.cache/
.design-sync/learnings/
.design-sync/node_modules