Project-Template/.claudeignore

46 lines
947 B
Plaintext
Raw Permalink Normal View History

feat(plan): six sections every plan must name, and the files an agent reads first WORK_CYCLE.md covered only the end of the cycle. A cycle has two ends, and the same six questions kept having to be asked out loud on every piece of work. They are now mandatory in every plan, each justified by something this household has actually paid for: unified code eight copies of secrets.sh once existed here and five of seven could not detect the most common secret shape -- INCLUDING THE TEMPLATE, so every project scaffolded from it inherited a blind scanner error handling the recurring fault is the silent pass, not the crash logging an append-only log is unbounded by construction blind spots named ones get fixed landmine fixes the trap found while passing is cheapest to fix while passing hardcode little derive it, or justify the constant GUARDS.md was five sections behind the project that has been learning; 11, 12 and 13 are backported, genericised to match the template's style. 13 is the narrow form of the sixth rule, and WORK_CYCLE now cites it -- so backporting it is what makes that citation true rather than a broken reference. Also adds the three files an agent reads BEFORE it reads docs/: CLAUDE.md short, and it POINTS at DOC_TRUST_MAP rather than repeating it -- a second copy of the map is the failure that map exists to prevent. Carries the exit-code table, the commit gates, and two standing instructions: flag what looks wrong even when it is not what you were asked about, and never print a credential -- not from a file, not from a command's output, not from a config subtree "with the secrets filtered out", because that filter has failed before by matching key NAMES while the secret sat inside an object whose name was innocent .claudeignore excludes artifacts and NEVER docs/. The Command Center reads this repository's documents at a commit; a generic ignore file that sweeps "documentation" or "data" starves both the agent and the reconcile, and everything still runs, just blind .claude/settings.json deny rules in the double-slash absolute form. A tilde-style rule looks right in review and silently matches nothing. It closes the Read TOOL only -- a shell reads a file a hundred ways -- so it catches the accidental read, not the determined one scaffold.sh gains a ROOT array for the three, kept apart from DOCS so the H1-plus-status-block check stays meaningful rather than being loosened into a warning that is always wrong (GUARDS.md 5). Verified: scaffold --dry-run into a scratch repo creates 22 files including all three, with no HEADERLESS warning; doc-claims passes with 124 claimed paths, all present. Does not touch docs/architecture/scripts/secrets.sh, which carries someone else's uncommitted improvement.
2026-09-01 21:44:00 -05:00
# What Claude should not spend context on.
#
# EXCLUDE ARTIFACTS, NEVER THE RECORD. `docs/` is load-bearing: the Command
# Center reads this repository's documents at a commit, `DOC_TRUST_MAP.md` says
# which document owns which answer, and `docs/qa/ClaudeReport.md` is parsed for
# the sentence shown on the project screen. A generic ignore file that sweeps
# "documentation" or "data" starves both the agent and the reconcile, and the
# failure is silent -- everything still runs, it is just working blind.
#
# Same for the tracker: nothing here is a substitute for it.
node_modules/
.venv/
__pycache__/
*.pyc
# Build output
dist/
build/
.next/
*.tsbuildinfo
# Databases and captures — large, binary, and derived
var/*.db
var/*.db-wal
var/*.db-shm
var/archive/
*.sqlite
*.sqlite3
# Logs and rotations
*.log
*.log.*
# Media that costs context and answers nothing
*.png
*.jpg
*.jpeg
*.webp
*.mp4
*.pdf
# Local editor state
.idea/
.vscode/