chore: move internal docs to a private internal/ companion repo

Consolidate all gitignored reference material (fedex-docs/, documentation.yaml,
build brief, ADRs, planning specs, scaffold guidance) under a single internal/
directory, which is its own private git repo (nodrel-dev/n8n-fedex-node-internal)
and is gitignored here. Collapses ~10 .gitignore entries to one (/internal/),
keeps the docs colocated in the working tree, and adds bootstrap-internal.sh to
restore them on a fresh clone. Updates the internal/ path references in CLAUDE.md
and two code comments. No published artifact changes.

Author: noctisreus

.gitignore

@@ -146,17 +146,12 @@ fedex-docs/.DS_Store
 # macOS
 .DS_Store
 
-# Internal planning/reference — kept local, never published
-/specs/
-/.specify/
+# Internal docs, reference specs & planning — consolidated under internal/, which is
+# its own private git repo (nodrel-dev/n8n-fedex-node-internal). Never published.
+# Run ./bootstrap-internal.sh on a fresh clone to restore it. See CLAUDE.md.
+/internal/
+
+# Local Claude session dir + machine-local runtime state (never leave this machine)
 /.claude/
-/.agents/
-/fedex-docs/
-/docs/adr/
-/docs/manual-review-video-script.md
-/scripts/n8n-demo.sh
-/AGENTS.md
-/fedex-node-build-brief.md
-/documentation.yaml
 dev.sh
 .jwt-secret

CLAUDE.md

@@ -12,14 +12,14 @@ accounts hit the carrier API with their own rates. npm has no direct FedEx node
 done, `pnpm build` + `pnpm lint` verified green-toolchain. The node still contains the
 **placeholder `User`/`Company` resources** — these must be replaced with the four real operations.
 The full spec, decided scope, API map, and acceptance criteria live in
-**`fedex-node-build-brief.md`** (read it first). All doc links are centralized in
-**`documentation.yaml`** — consult it before web-searching for any FedEx or n8n reference. The
-scaffold's own n8n build guidance lives in **`AGENTS.md`** + **`.agents/*.md`** (load the relevant
-`.agents/` file before editing nodes/credentials — see the table in `AGENTS.md`).
-
-**The FedEx docs are captured locally in `fedex-docs/` — do not web-search FedEx, read these.**
-The `.md` files are the portal prose; **`fedex-docs/json-schemas/*.json` are the OpenAPI specs and
-are AUTHORITATIVE** for request/response field names, enums, and nesting. `documentation.yaml`
+**`internal/fedex-node-build-brief.md`** (read it first). All doc links are centralized in
+**`internal/documentation.yaml`** — consult it before web-searching for any FedEx or n8n reference. The
+scaffold's own n8n build guidance lives in **`internal/AGENTS.md`** + **`internal/.agents/*.md`** (load the relevant
+`internal/.agents/` file before editing nodes/credentials — see the table in `internal/AGENTS.md`).
+
+**The FedEx docs are captured locally in `internal/fedex-docs/` — do not web-search FedEx, read these.**
+The `.md` files are the portal prose; **`internal/fedex-docs/json-schemas/*.json` are the OpenAPI specs and
+are AUTHORITATIVE** for request/response field names, enums, and nesting. `internal/documentation.yaml`
 maps each operation to its `local_md` + `local_schema` and lists the confirmed Ship label enums
 and a MIME map. The portal pages require login, so the captured specs are the working source.
 
@@ -69,7 +69,7 @@ against `ship.json` — the leaf is `LabelResponseVO`, which also carries `track
 the chosen `imageType` (`PDF`→`application/pdf`, `PNG`→`image/png`, `ZPLII`/`EPL2`→
 `application/octet-stream`) and a sensible filename (e.g. `label-<trackingNumber>.pdf`). Pass the
 JSON (tracking number, rates) through on the main output. Send `labelResponseOptions: LABEL` to get
-the base64 inline (vs `URL_ONLY`). The full confirmed enum lists are in `documentation.yaml`.
+the base64 inline (vs `URL_ONLY`). The full confirmed enum lists are in `internal/documentation.yaml`.
 
 **Auth — the scaffold uses n8n's built-in OAuth2.** The generated credential
 `FedexOAuth2Api` (`credentials/FedexOAuth2Api.credentials.ts`, credential name `fedexOAuth2Api`)
@@ -88,41 +88,45 @@ What still needs fixing before it works:
 - The node's `requestDefaults.baseURL` is likewise hardcoded to prod — tie it to the same env choice.
 
 `client_id`/`client_secret` map to the FedEx **API Key / Secret Key**. FedEx errors: surface
-`errors[].message`; treat `4xx` validation distinctly. Exact OAuth shape: `documentation.yaml` → `fedex.auth`.
+`errors[].message`; treat `4xx` validation distinctly. Exact OAuth shape: `internal/documentation.yaml` → `fedex.auth`.
 
 **Account number is sensitive and required for Rate + Ship.** Source it from the credential or a
 node field — never a default, never hardcoded. Same for API keys and base URLs.
 
-**File layout (scaffolded).** Package lives at repo root; reference docs (`fedex-docs/`,
-`documentation.yaml`, `fedex-node-build-brief.md`) sit alongside but are excluded from the npm
-tarball (`package.json` `files: ["dist"]`). The node is `nodes/Fedex/Fedex.node.ts`; per-resource
+**File layout (scaffolded).** Package lives at repo root. All internal reference docs, specs, and
+planning live under **`internal/`**, which is gitignored by this public repo and is **its own
+private git repo** (`nodrel-dev/n8n-fedex-node-internal`). On a fresh clone, restore it with
+`./bootstrap-internal.sh`; commit doc changes from inside `internal/`, code changes from the root.
+The reference docs (`internal/fedex-docs/`, `internal/documentation.yaml`,
+`internal/fedex-node-build-brief.md`) are also excluded from the npm tarball (`package.json`
+`files: ["dist"]`). The node is `nodes/Fedex/Fedex.node.ts`; per-resource
 descriptions live in `nodes/Fedex/resources/<resource>/`. The two resources **mirror the two FedEx
 dev-portal projects / credentials** (ADR-0004): `tracking/` holding **Track** (binds
 `fedexTrackOAuth2Api`), and `shipping/` holding **Get Rates**, **Create**, and **Validate** (binds
 `fedexShippingOAuth2Api` — the shipping project bundles Rate + Ship + Address Validation under one
 key). Resource = FedEx project, operation = verb; credentials bind per operation (operation values
 are globally unique). Keep files focused (<800 lines), one resource per folder, so operations stay
 independent and the pattern is reusable for a future UPS package. The rationale behind the resource
-model and the sandbox/production credential design is captured in the local `docs/adr/` notes (kept
-out of the published repo, like `fedex-docs/` and `documentation.yaml`).
+model and the sandbox/production credential design is captured in the local `internal/docs/adr/` notes (kept
+out of the published repo, like `internal/fedex-docs/` and `internal/documentation.yaml`).
 
 ## Hard constraints (these will fail the build / lint if violated)
 
 - **pnpm only.** npm breaks the install.
 - **Do not modify the eslint config** — `n8n-node lint --strict` fails if it differs from default.
 - **Verify FedEx field names / paths against live docs** before coding each operation — versions
-  drift. `documentation.yaml` flags which entries need re-verification (`verify: true`).
+  drift. `internal/documentation.yaml` flags which entries need re-verification (`verify: true`).
 - Surface the real FedEx error (`errors[].message`) via `NodeApiError` / `NodeOperationError`;
   honor n8n's **Continue On Fail**.
 - Package must be named `n8n-nodes-fedex`, include the `n8n-community-node-package` keyword, and
   declare the `n8n` config block pointing at built nodes + credentials.
 
 ## Reference shortcuts
 
-- Full spec & acceptance criteria → `fedex-node-build-brief.md`
-- All doc URLs, local doc map, confirmed endpoints/enums, OAuth shape → `documentation.yaml`
-- FedEx request/response shapes → `fedex-docs/json-schemas/*.json` (OpenAPI, authoritative);
-  prose → `fedex-docs/*.md`. Operation→file mapping is in `documentation.yaml`.
+- Full spec & acceptance criteria → `internal/fedex-node-build-brief.md`
+- All doc URLs, local doc map, confirmed endpoints/enums, OAuth shape → `internal/documentation.yaml`
+- FedEx request/response shapes → `internal/fedex-docs/json-schemas/*.json` (OpenAPI, authoritative);
+  prose → `internal/fedex-docs/*.md`. Operation→file mapping is in `internal/documentation.yaml`.
 - Live n8n SDK types (`INodeType`, `INodeTypeDescription`, `IExecuteFunctions`, `ICredentialType`)
   → prefer the n8n-mcp (MCP_DOCKER) or Context7 MCP tools over recalling from memory.
 

bootstrap-internal.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+#
+# Restores the private internal/ docs repo into this working tree.
+#
+# The public repo gitignores internal/ — it is its own private companion repo
+# (nodrel-dev/n8n-fedex-node-internal) holding the captured FedEx specs, build
+# brief, doc map, ADRs, and planning. Run this once after a fresh clone.
+#
+# Usage:
+#   ./bootstrap-internal.sh                 # uses the default SSH remote below
+#   ./bootstrap-internal.sh <git-remote>    # override (e.g. an HTTPS URL)
+set -euo pipefail
+
+REMOTE="${1:-git@github.com:nodrel-dev/n8n-fedex-node-internal.git}"
+DIR="internal"
+
+if [ -e "$DIR/.git" ]; then
+  echo "internal/ is already a git repo — pulling latest instead."
+  git -C "$DIR" pull --ff-only
+  exit 0
+fi
+
+if [ -e "$DIR" ] && [ -n "$(ls -A "$DIR" 2>/dev/null)" ]; then
+  echo "ERROR: ./$DIR exists and is non-empty but is not a git repo." >&2
+  echo "Move or remove it first, then re-run." >&2
+  exit 1
+fi
+
+git clone "$REMOTE" "$DIR"
+echo "✓ Restored internal/ from $REMOTE"

nodes/Fedex/cores/extractLabel.ts

@@ -9,7 +9,7 @@ export interface LabelMime {
 	ext: string;
 }
 
-// encodedLabel imageType -> binary MIME type + file extension (confirmed in documentation.yaml).
+// encodedLabel imageType -> binary MIME type + file extension (confirmed in internal/documentation.yaml).
 export const LABEL_MIME: Record<string, LabelMime> = {
 	PDF: { mime: 'application/pdf', ext: 'pdf' },
 	PNG: { mime: 'image/png', ext: 'png' },

nodes/Fedex/cores/fedexTypes.ts

@@ -1,5 +1,5 @@
 // Typed FedEx request shapes produced by the pure cores (ADR-0003). These mirror
-// the authoritative OpenAPI specs in fedex-docs/json-schemas and are intentionally
+// the authoritative OpenAPI specs in internal/fedex-docs/json-schemas and are intentionally
 // free of any n8n coupling so the cores stay unit-testable in isolation.
 
 export interface FedexAddress {