`deploy_file` excludes `*/Noctalia*` (noctalia's capital-N palette naming) but `.gitignore` had only the lowercase classes, so a generated palette file could become tracked-but-never-deployed — the fiction class #41 removed, reintroduced by the ignore list falling out of step with the deployer. The patterns are one contract in two files; both halves are now stated and the comment says so. `natives/` (2.4 MB of tree-sitter grammars the harness unpacks into the repo root on first use, measured on blankpad) sat unnamed in the root, one `git add -A` away from being committed as configuration. It is runtime state by every clause of AGENTS.md's doctrine, so it is ignored. The wallpaper re-fetch note pointed at `https://wallhaven.cc/w/<id>`, which answers text/html — it now names the API resolution the deploy page carries. `git-lfs` was installed because `.gitattributes` routes image types through the LFS filter — for wallpapers this week's diff untracked: `git lfs ls-files` is zero, so those four rules match nothing. The manifest now states what the tool is actually for (cloning LFS-backed upstreams such as Hugging Face model/dataset repos) and the file records its own inert state. Deleting `.gitattributes` is a pruning call for a session with Frank, not a cleanup an agent runs alone. Verified with `git check-ignore -v` for both new rules. Refs #60
113 lines
4.0 KiB
Plaintext
113 lines
4.0 KiB
Plaintext
# ============================================================================
|
|
# Command-center repo: config in, state out.
|
|
# Everything ignored here is runtime state a running agent mutates constantly.
|
|
# Git history must mean "the configuration changed", not "the agent breathed".
|
|
# ============================================================================
|
|
|
|
# --- databases + sqlite sidecars (hot, binary, unbounded growth) -----------
|
|
*.db
|
|
*.db-shm
|
|
*.db-wal
|
|
*.sqlite
|
|
*.sqlite3
|
|
|
|
# --- runtime state dirs -----------------------------------------------------
|
|
cache/
|
|
agent/cache/
|
|
logs/
|
|
run/
|
|
sessions/
|
|
terminal-sessions/
|
|
ssh-control/
|
|
remote-host/
|
|
|
|
# --- quarantined secrets: never tracked, ever ------------------------------
|
|
auth.json
|
|
**/auth.json
|
|
.env
|
|
**/.env
|
|
*.env
|
|
# `*.env` is the rule that matters: `.env` alone does not match `postgres.env`
|
|
# or `frank-job-hunt.env`, and those are the files that actually carry
|
|
# POSTGRES_PASSWORD / API keys on this fleet (issue #40).
|
|
trust.json
|
|
**/trust.json
|
|
*.pem
|
|
*.key
|
|
identity*
|
|
|
|
# --- dependency installs (regenerable from manifests) ----------------------
|
|
node_modules/
|
|
bun.lock
|
|
package-lock.json
|
|
|
|
# --- misc ephemera ----------------------------------------------------------
|
|
gpu_cache.json
|
|
last-changelog-version
|
|
.DS_Store
|
|
*.swp
|
|
*.tmp
|
|
|
|
# --- per-host runtime identity + caches (never config) ---------------------
|
|
agent/blobs/
|
|
install-id
|
|
puppeteer/
|
|
webcache/
|
|
|
|
# --- local backups + staging artifacts: kept on disk, never in history -----
|
|
.AGENTTRASH/
|
|
*.save
|
|
*.bak-*
|
|
|
|
# deploy quarantine — never tracked
|
|
.quarantine/
|
|
|
|
# harness runtime transcripts: local-only, may contain raw session secrets
|
|
agent/sessions/
|
|
|
|
# harness diagnostic report bundles (tarballs of logs + session state)
|
|
reports/
|
|
|
|
# --- agent runtime scratch: research runs, decode predictions, worktrees ----
|
|
autoresearch/
|
|
agent/predict/
|
|
local/
|
|
wt/
|
|
|
|
# --- per-worktree memory buckets: keyed on ephemeral worktree paths ---------
|
|
# A session run inside a git worktree mints a bucket named after the worktree
|
|
# path; the worktree is deleted, the bucket is orphan state, not config.
|
|
agent/memories/--home-blank-.omp-wt-*
|
|
|
|
# --- theme media: content the pipeline consumes, not configuration ---------
|
|
# 23 wallpapers, 80 MiB. Tracked until 2026-10-20: every clone of a config repo was
|
|
# carrying a library no diff can review. The live library at
|
|
# ~/.local/share/noctalia/wallpapers is a real directory of real files (measured
|
|
# 2026-10-20), so this path in the repo was a duplicate of it, not its source — and
|
|
# note that untracking deletes the copy in every other checkout regardless of
|
|
# `git rm --cached` on the branch. A fresh box starts with an empty library; every
|
|
# filename carries its wallhaven ID; `/w/<id>` answers `text/html`, so resolve the CDN URL at
|
|
# `https://wallhaven.cc/api/v1/w/<id>` and download `data.path` — the recipe, with the reason it
|
|
# is not a plain `curl -L`, is on omp-docs/tools/dotfiles-deploy.md
|
|
dotfiles/noctalia/.local/share/noctalia/wallpapers/
|
|
|
|
# --- generated theme output: machine-written, never reviewable, never deployed ---
|
|
# noctalia/matugen rewrite these in place; a tracked copy is a stale snapshot that
|
|
# deploy.sh would push back over a live palette. These patterns are the ignore half of the
|
|
# exclusion list in `deploy_file` (scripts/deploy.sh): change one, change the other, or a
|
|
# generated file becomes tracked-but-never-deployed — the fiction class #41 removed. The
|
|
# capital-N rule is noctalia's own palette-directory naming, and it was in deploy.sh only.
|
|
# Law: omp-docs/inventory/home-config-census.md, Refs #42, #60
|
|
dotfiles/**/themes/noctalia*
|
|
dotfiles/**/colors/noctalia*
|
|
dotfiles/**/noctalia.*
|
|
dotfiles/**/noctalia-*
|
|
dotfiles/**/Noctalia*
|
|
|
|
# --- harness natives: unpacked runtime payloads, never configuration ----------
|
|
# 2.4 MB of tree-sitter grammars the harness unpacks into the repo root on first use (measured
|
|
# on blankpad 2026-10-21). Regenerable, unreviewable, not config — every clause of AGENTS.md's
|
|
# runtime-state doctrine applies, and it sat unnamed in the root, one `git add -A` away from
|
|
# being committed as if it were configuration.
|
|
natives/
|