chore: stop tracking local agent session state (#567)

The .codexclaw/ goalplans and ledgers are per-machine agent state. They were
committed with 'git add -f' despite the ignore rule, and once tracked the rule
stopped applying, so they rode along into main and preview.

Untrack them (files stay on disk), drop two .DS_Store files that got in the same
way, and add tests/repo-hygiene.test.ts so a forced add fails CI instead of
landing silently. Also drop a registry.ts comment pointing at a .codexclaw
evidence file that was never committed and cannot be resolved by any reader.

Author: lidge-jun

.codexclaw/goalplans/opencodex-4-pabcd-work-phase-wp1-wp2-dev2-go-pr/goalplan.json

@@ -8,8 +8,14 @@ devlog/
 .opencode/
 
 # Local agent/session artifacts
+# These are per-machine agent state (goalplans, ledgers, evidence scratch).
+# They are never part of the product and must not be committed, not even with
+# `git add -f` — see tests/repo-hygiene.test.ts, which fails if any path here
+# becomes tracked again.
 .codexclaw/
+**/.codexclaw/
 .omo/
+**/.omo/
 
 # Test-generated artifacts
 tests/.tmp-*/

.codexclaw/goalplans/opencodex-4-pabcd-work-phase-wp1-wp2-dev2-go-pr/ledger.jsonl

@@ -978,7 +978,6 @@ export const PROVIDER_REGISTRY: readonly ProviderRegistryEntry[] = [
     authKind: "key",
     dashboardUrl: "https://ollama.com/settings/keys",
     // Live IDs verified 2026-07-10; qwen3-coder:480b retires 2026-07-15.
-    // Evidence: .codexclaw/evidence/260710_wp9_ollama_cloud_model_ids.md.
     models: ["glm-5.2", "deepseek-v4-pro", "qwen3-coder:480b", "gpt-oss:120b", "kimi-k2.6", "minimax-m3", "qwen3.5:397b", "gemma4:31b"],
     defaultModel: "glm-5.2",
     noVisionModels: [

.codexclaw/goalplans/opencodex-live-unfinished-issues-and-prs-triage/goalplan.json

@@ -0,0 +1,57 @@
+import { describe, expect, test } from "bun:test";
+import { fileURLToPath } from "node:url";
+
+const repoRoot = fileURLToPath(new URL("../", import.meta.url));
+
+/**
+ * Local agent/session state must never reach a commit.
+ *
+ * `.gitignore` alone does not enforce this: `git add -f` overrides it silently,
+ * and once a path is tracked the ignore rule stops applying to it entirely. The
+ * `.codexclaw/` goalplans and ledgers were committed exactly that way and rode
+ * along into `main` and `preview` before anyone noticed.
+ *
+ * This test closes that gap by asserting against the real index instead of the
+ * ignore file, so a forced add fails CI on the commit that introduces it.
+ */
+const FORBIDDEN_TRACKED_DIRS = [".codexclaw", ".omo", ".claude", "node_modules", ".tmp"];
+
+const FORBIDDEN_TRACKED_FILENAMES = [".DS_Store", "Thumbs.db"];
+
+function trackedFiles(): string[] {
+  const result = Bun.spawnSync(["git", "ls-files"], { cwd: repoRoot });
+  if (result.exitCode !== 0) {
+    throw new Error(`git ls-files failed: ${new TextDecoder().decode(result.stderr)}`);
+  }
+  return new TextDecoder()
+    .decode(result.stdout)
+    .split("\n")
+    .map((line) => line.trim())
+    .filter(Boolean);
+}
+
+describe("repository hygiene", () => {
+  test("no local agent or session state is tracked", () => {
+    const offenders = trackedFiles().filter((path) =>
+      path.split("/").some((segment) => FORBIDDEN_TRACKED_DIRS.includes(segment)),
+    );
+
+    expect(offenders).toEqual([]);
+  });
+
+  test("no OS metadata files are tracked", () => {
+    const offenders = trackedFiles().filter((path) =>
+      FORBIDDEN_TRACKED_FILENAMES.includes(path.split("/").pop() ?? ""),
+    );
+
+    expect(offenders).toEqual([]);
+  });
+
+  test("gitignore still declares the agent-state directories", async () => {
+    const ignore = await Bun.file(new URL("../.gitignore", import.meta.url)).text();
+
+    for (const dir of FORBIDDEN_TRACKED_DIRS) {
+      expect(ignore).toContain(`${dir}/`);
+    }
+  });
+});