cesnimda
f0f178d77e
Deep, code-grounded audit of Job Tracker producing the mission deliverables under docs/remaster/: system audit, bug report, architecture/data-model/AI/UX reviews, remaster proposal, migration plan, competitor research, and the gated REBUILD_DECISION. Verdict: Incremental Refactor (no full rebuild). Evidence: no Critical defects; hardened cookie/CSRF auth (token never in JS storage), real SSRF defence, enforced multi-tenancy via global query filters, decoupled provider-swappable AI service, 135 backend tests. Debt is localised (god controllers/entity, missing hot-path indexes, prompt-injection hardening, CRA build debt) and reachable by in-place, test-guarded refactors. Also harden .gitignore: exclude agent tooling (.claude/, .bg-shell/, .agent.md) and restore/broaden the runtime-secrets block (**/keys/, **/backups/, exports, CV artifacts) so nested DataProtection keys can't be committed accidentally. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
96 lines
1.2 KiB
Plaintext
96 lines
1.2 KiB
Plaintext
# OS / editor
|
|
.DS_Store
|
|
Thumbs.db
|
|
.vscode/
|
|
.idea/
|
|
|
|
# Environment files
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# Python
|
|
.venv/
|
|
__pycache__/
|
|
*.pyc
|
|
venv/
|
|
|
|
# .NET / Visual Studio
|
|
bin/
|
|
obj/
|
|
bin_build/
|
|
.vs/
|
|
*.user
|
|
*.suo
|
|
*.userosscache
|
|
*.sln.docstates
|
|
|
|
# Logs
|
|
*.log
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# Frontend build artifacts
|
|
node_modules/
|
|
build/
|
|
dist/
|
|
coverage/
|
|
.next/
|
|
.cache/
|
|
|
|
# Local temp / scratch files
|
|
temp_job.json
|
|
temp_post_job.py
|
|
todo jobtracker.txt
|
|
tmp/
|
|
/tmp/
|
|
|
|
# Runtime data that must never be committed (DataProtection keys, exports, CV artifacts)
|
|
keys/
|
|
**/keys/
|
|
backups/
|
|
**/backups/
|
|
JobTrackerApi/exports/
|
|
JobTrackerApi/CvArtifacts/
|
|
JobTrackerApi/CvExports/
|
|
JobTrackerApi/CvBenchmarks/
|
|
|
|
# Local app data
|
|
*.db
|
|
*.db-*
|
|
Attachments/
|
|
website_details.md
|
|
|
|
# Private local test files
|
|
vendor/
|
|
target/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
*.code-workspace
|
|
|
|
# Agent tooling — must never be committed
|
|
.claude/
|
|
.bg-shell/
|
|
.agent.md
|
|
|
|
# GSD
|
|
.gsd
|
|
|
|
# GSD runtime / ephemeral
|
|
.gsd/auto.lock
|
|
.gsd/completed-units.json
|
|
.gsd/STATE.md
|
|
.gsd/metrics.json
|
|
.gsd/activity/
|
|
.gsd/runtime/
|
|
.gsd/worktrees/
|
|
.gsd/parallel/
|
|
.gsd/reports/
|
|
.gsd/milestones/**/continue.md
|
|
.gsd/milestones/**/*-CONTINUE.md
|
|
|
|
# ── GSD baseline (auto-generated) ──
|
|
.gsd-id
|