From 55e8cc1a88f8f7aa066b54bc3c010651f95fe5ff Mon Sep 17 00:00:00 2001
From: Jakob Wennberg <jakob.wennberg@gmail.com>
Date: Fri, 6 Mar 2026 09:15:14 +0100
Subject: [PATCH] fix: remove personal emails, gitignore sensitive paths,
 untrack local settings

- Replace hardcoded personal email in clear-user-data.sql with placeholder
- Change SECURITY.md contact to role-based security@arcim.io
- Add supabase/.temp/ and .claude/settings.local.json to .gitignore
- Untrack .claude/settings.local.json (keeps file on disk)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .claude/settings.local.json | 44 -------------------------------------
 .gitignore                  |  6 +++++
 SECURITY.md                 |  2 +-
 scripts/clear-user-data.sql |  2 +-
 4 files changed, 8 insertions(+), 46 deletions(-)
 delete mode 100644 .claude/settings.local.json

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 166cb159..00000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "mcp__ide__getDiagnostics",
-      "Bash(grep:*)",
-      "Bash(xargs:*)",
-      "Bash(ls:*)",
-      "Bash(find:*)",
-      "WebFetch(domain:www.skatteverket.se)",
-      "WebSearch",
-      "mcp__plugin_supabase_supabase__apply_migration",
-      "Bash(cat:*)",
-      "Bash(wc:*)",
-      "Bash(git -C /Users/jakobwennberg/erp-base log --oneline)",
-      "mcp__plugin_supabase_supabase__list_projects",
-      "Bash(python3:*)",
-      "Bash(git -C /Users/jakobwennberg/erp-base status --porcelain)",
-      "Bash(__NEW_LINE_421a23f44da9923d__ echo '=== Checking which index exports are used ===' grep -r @/components/calendar /Users/jakobwennberg/erp-base/app --include=*.tsx --include=*.ts 2)",
-      "Bash(/dev/null __NEW_LINE_421a23f44da9923d__ echo -e '\\\\n=== Checking which calendar deadline components are directly imported ===' grep -rE \"DeadlineList|DeadlineCard|DeadlineForm|DeadlineFilters|PaymentSummaryCard|TaxTodoWidget|UpcomingDeadlinesWidget\" /Users/jakobwennberg/erp-base --include=*.tsx --include=*.ts)",
-      "Bash(npm run build:*)",
-      "Bash(npx supabase:*)",
-      "Bash(curl:*)",
-      "Bash(npx tsc:*)",
-      "Bash(findstr:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "WebFetch(domain:raw.githubusercontent.com)",
-      "WebFetch(domain:support.fortnox.se)",
-      "Bash(npx vitest run:*)",
-      "WebFetch(domain:www.bjornlunden.se)",
-      "WebFetch(domain:www.scb.se)",
-      "WebFetch(domain:stripe.com)",
-      "WebFetch(domain:tullify.se)",
-      "WebFetch(domain:www.momsens.se)",
-      "WebFetch(domain:www.bokforingstips.se)",
-      "WebFetch(domain:rattsakuten.se)",
-      "WebFetch(domain:www.faronline.se)",
-      "WebFetch(domain:www.worldstopexports.com)",
-      "WebFetch(domain:www.riksbank.se)",
-      "WebFetch(domain:www.avalara.com)",
-      "Bash(done)"
-    ]
-  }
-}
diff --git a/.gitignore b/.gitignore
index c8247446..4939e10c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -41,6 +41,12 @@ yarn-error.log*
 *.tsbuildinfo
 next-env.d.ts
 
+# supabase temp files
+supabase/.temp/
+
+# claude local settings
+.claude/settings.local.json
+
 # Extension registry (auto-generated but defaults are committed)
 # Run `npm run setup:extensions` to regenerate after changing extensions.config.json
 # The empty defaults in lib/extensions/_generated/ are committed so core compiles
diff --git a/SECURITY.md b/SECURITY.md
index 8c4d3b6d..87efc28c 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -4,7 +4,7 @@
 
 If you discover a security vulnerability in gnubok, please report it responsibly. **Do not open a public issue.**
 
-Email: **jakob.wennberg@arcim.io**
+Email: **security@arcim.io**
 
 Include:
 - Description of the vulnerability
diff --git a/scripts/clear-user-data.sql b/scripts/clear-user-data.sql
index 945974b4..67841b51 100644
--- a/scripts/clear-user-data.sql
+++ b/scripts/clear-user-data.sql
@@ -15,7 +15,7 @@
 DO $$
 DECLARE
   -- >>> SET THE TARGET USER EMAIL HERE <<<
-  target_email TEXT := 'jakob.wennberg@arcim.io';
+  target_email TEXT := 'user@example.com';  -- change this to the target user's email
   target_user_id UUID;
 BEGIN
   -- Resolve email to user ID