OpenGlasses/.gitignore at main · straff2002/OpenGlasses · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# Xcode
.DS_Store
build/
*.pbxuser
!default.pbxuser
*.mode1v3
!default.mode1v3
*.mode2v3
!default.mode2v3
*.perspectivev3
!default.perspectivev3
xcuserdata/
*.xccheckout
*.moved-aside
DerivedData
*.hmap
*.ipa
*.xcuserstate

# Swift Package Manager
.build/
# xcodebuild -clonedSourcePackagesDirPath target (CI caches this; see .github/workflows/tests.yml)
.spm-checkouts/
.swiftpm/
Packages/
Package.pins

# CocoaPods
Pods/

# Carthage
Carthage/Build/

# Claude settings
.claude/*

# Dev tooling — keep local, don't push
.claude/*
.cursor/

# …but DO track project rule docs (loaded as guidance; belong in the repo)
!.claude/rules/
# …and DO track the workflows. `.github/` on its own silently swallowed a new workflow file:
# ignore rules do not apply to already-tracked files, so the existing ones kept working while
# anything added later vanished from the commit that added it. Excluding the contents rather than
# the directory is what lets the negation below be heard at all.
.github/*
!.github/workflows/
# …and the composite action the workflows share (same reasoning as above).
!.github/actions/
# …and the Dependabot config, which lives beside them rather than inside either directory.
!.github/dependabot.yml
.impeccable.md
CLAUDE.md
AGENTS.md
impeccable-style-universal/

# XcodeGen — regenerate locally: ./Scripts/generate-xcodeproj.sh
OpenGlasses.xcodeproj/
xcschemes-backup/
project.local.yml
.openglasses-generate.env

# Local secrets — private keys, never commit (the .example is the template)
secrets/*
!secrets/*.example
Config/Entitlements/Personal/*.entitlements
!Config/Entitlements/Personal/*.entitlements.example
# Meta DAT credentials live in project.local.yml (ignored above) as build settings substituted
# into the committed Info.plist. The old Config/Info/Info.personal.plist override is gone — a
# whole-plist copy went stale (ITMS-90683) and later swallowed those credentials.
Config/Info/Info.personal.plist

# Xcode user data (don't track)
xcuserdata/
*.xcuserstate
*.pbxproj.backup

# Post-clone tool downloads — the pinned, checksum-verified XcodeGen and gitleaks
.ci-tools/
Transport/.tools/
Transport/Frameworks/
__pycache__/
*.pyc

# Release evidence, generated per run rather than committed. Both are reproducible from the
# commit (Scripts/generate-sbom.sh is byte-deterministic), so a copy in the tree is a copy that
# can go stale and be believed. CI uploads them as artifacts instead.
sbom.cdx.json
sbom-again.cdx.json
dossier.md
release-dossier-*.md

# MediaPipe Tasks binaries — fetched by Scripts/fetch-mediapipe-frameworks.sh (too large
# to commit: the graph static libraries exceed GitHub's 100 MB per-file limit)
Vendor/MediaPipeTasks/Frameworks/

# llama.cpp engine (Plan DZ) — the xcframework itself is committed, as SherpaOnnx's is: a clone
# builds the app without first spending four minutes compiling an inference engine. The pin and
# the digests are tracked beside it (Vendor/LlamaCpp/{REVISION,SHA256SUMS,BUILD-INFO}), and the
# engine-reproducibility workflow rebuilds from the pinned sources to prove the committed bytes
# are still the ones those sources produce. `.build/` holds the upstream checkout, the cmake
# build trees, and the digests of whatever build last ran here.
Vendor/LlamaCpp/.build/

# Local TLS material — never commit private keys
*.crt
*.key
# Throwaway DerivedData for headless builds. `.dd-agent/` was the first; the glob covers the
# per-configuration ones a verification matrix needs (.dd-relsim, .dd-reldev, .dd-device …) so a
# parallel build's output can never be picked up by `git add`.
.dd-*/

# Example vaults: authored core files are committed; the OEM manuals dropped into documents/ are not
# (they are the manufacturer's copyright). The README in each documents/ folder stays.
examples/vaults/*/documents/*
!examples/vaults/*/documents/README.md
# The originals a vault's manuals were extracted from, and a manual dropped anywhere else in a vault
# folder: OEM manuals and licensed code books never enter the repository. Committed rather than left
# to a developer's own .git/info/exclude, so a fresh clone is covered too.
examples/vaults/*/source-pdfs/
examples/vaults/**/*.pdf
examples/vaults/**/*.epub

# CI provenance record — written by the test workflow, uploaded as an artifact
/provenance.txt

# Staged GitHub Pages site — built from the allowlist in Scripts/stage-pages-site.sh, never committed
/_site/

# Safety-evaluation run artefacts (W08.4). The corpus and its thresholds are tracked; the Markdown
# report a run writes is not — it is regenerated by every run and by Scripts/safety-eval-report.sh.
.safety-eval/