# ============================================================
# CEO AI OS — .gitignore v2 (2026-09-08) + DR Backup Updates
# ============================================================

# ----- Secrets & Credentials -----
auth.json
.env
.env.*
*.key
*.pem
*.crt
credentials.json
token.pickle
google_token.json
config/lark_schema.json
instance/

# EXCEPTIONS cho file mã hoá an toàn
!.env.enc
!backups/secrets.enc

# ----- Runtime & State -----
sessions/
.state/
state.db
state.db-shm
state.db-wal
logs/

# EXCEPTIONS cho thư mục memories và bản SQL Dump
!memories/
!backups/sql/*.sql

# ----- User Data -----
# users/ (Đã bỏ ignore để đồng bộ tiến độ học thuật & profile lên Git)

# ----- Generated / Cache / Build -----
node_modules/
workspace/
local/
*_cache/
__pycache__/
*.pyc
*.pyo
*.egg-info/
dist/
build/

# ----- Personal Uploads -----
uploads/personal/
uploads/**/*.pdf
uploads/**/*.key
uploads/**/*.crt

# ----- OS files -----
.DS_Store
._*
Thumbs.db
*.swp
*.swo
*~

# ----- NotebookLM -----
company_kb/notebooklm_ingest/

# ----- Hermes Profile Internals -----
profiles/**/skills/.usage.json
profiles/**/skills/.usage.json.lock
profiles/**/skills/.bundled_manifest
profiles/**/skills/.curator_state

# ----- External Integrations -----
integrations/notebooklm-mcp-cli/
lib

# ----- Intelligence Vault Transient Receipts -----
shared/intelligence/vault/run-receipts/*
!shared/intelligence/vault/run-receipts/.gitkeep

# ----- AI Agent Cache (Graft & RTK) -----
graft/
**/graft/
.graph/
**/.graph/
.graft/
**/.graft/

# ----- Application Runtime / DB Data -----
projects/**/data/
**/data/postgres/

# Prevent empty junk files at repo root (from unescaped Bash/Mermaid)
/Cần
/LƯU
/Nếu
/Sản
/Thông
/Thặng
*.pyc
__pycache__/
/puppeteer-screenshot/node_modules/
/node_modules/
/dist/
.graft/
graft/