[codex] Stop tracking runtime data files

.github/workflows/ci.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Check for committed sensitive data files
         run: |
-          if git diff --name-only origin/main...HEAD 2>/dev/null | grep -qE '^data/(spending|orders)\.json$'; then
+          if git diff --name-only --diff-filter=ACMR origin/main...HEAD 2>/dev/null | grep -qE '^data/(spending|orders)\.json$'; then
             echo "::error::Sensitive data file detected in PR diff (data/spending.json or data/orders.json). Remove it before merging."
             exit 1
           fi

.github/workflows/pr-meta.yml

@@ -0,0 +1,21 @@
+name: PR Metadata Guard
+
+on:
+  pull_request:
+
+jobs:
+  block-runtime-data:
+    name: Block committed runtime data
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Block data JSON files
+        run: |
+          base_ref="${{ github.base_ref }}"
+          if git diff --name-only --diff-filter=ACMR "origin/${base_ref}...HEAD" | grep -qE '^data/.*\.json$'; then
+            echo "::error::Runtime data files under data/*.json must not be committed. Keep them local or migrate to a managed database."
+            exit 1
+          fi

.gitignore

@@ -5,9 +5,9 @@ dist/
 .env.local
 .dev-seed
 *.log
+data/*.json
+!data/.gitkeep
 data/audit.log.jsonl
-data/spending.json
-data/orders.json
 data/pharmacy-pricing.sqlite
 data/pharmacy-pricing.sqlite-*
 data/pharmacy-pricing.sqlite-shm

README.md

@@ -112,6 +112,10 @@ cd dashboard && npm run dev
 # 6. Open http://localhost:3000
 ```
 
+### Local runtime data
+
+CareGuard writes development runtime state under `data/`, including local order history and spending ledgers. Treat this directory as machine-local working data: JSON files under `data/` are ignored by git, and only placeholder/documentation files should be committed.
+
 ### Docker dev (one command)
 
 For a single-command boot of the full stack — server, dashboard, redis, prometheus, grafana — use Docker Compose. See [issue #111](https://github.com/harystyleseze/careguard/issues/111).
@@ -217,7 +221,7 @@ careguard/
 │   └── types.ts           # Shared TypeScript types
 ├── scripts/
 │   └── setup-wallets.ts   # Testnet wallet creation + USDC trustlines
-├── data/                  # Persisted spending data + orders
+├── data/                  # Local runtime data (JSON ignored by git)
 ├── .env.example           # Environment variable template
 ├── QUICKSTART.md          # Setup guide
 ```

data/.gitkeep

@@ -0,0 +1 @@
+# Keep the data directory in git; runtime data files are ignored.

data/README.md

@@ -17,4 +17,4 @@ These files contain **sensitive financial data**. They must never appear in a co
 
 All paths are listed in `.gitignore`. If you see them untracked in `git status`, do not stage them.
 
-CI will fail any PR where these files appear in the diff (see `.github/workflows/ci.yml`).
+CI will fail any PR where these files appear in the diff (see `.github/workflows/pr-meta.yml`).