Neurocognitive System v0.2 foundation cleanup

.env.example

@@ -1,12 +1,12 @@
 # PostgreSQL
 DATABASE_URL=postgresql+asyncpg://utopia:utopia@localhost:5432/utopia
-DATABASE_URL_SYNC=postgresql+psycopg2://utopia:utopia@localhost:5432/utopia
+DATABASE_URL_SYNC=postgresql+psycopg://utopia:utopia@localhost:5432/utopia
 
 # WHOOP (placeholders — requires developer account)
 WHOOP_CLIENT_ID=
 WHOOP_CLIENT_SECRET=
 WHOOP_REDIRECT_URI=http://localhost:8000/integrations/whoop/callback
 
-# AI Providers (placeholders)
+# AI providers (placeholders)
 ANTHROPIC_API_KEY=
 OPENAI_API_KEY=

.github/workflows/ci.yml

@@ -0,0 +1,79 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+      - "cleanup/**"
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  secrets:
+    name: Secret history scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: gitleaks/gitleaks-action@v3
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_ENABLE_COMMENTS: "false"
+          GITLEAKS_ENABLE_UPLOAD_ARTIFACT: "false"
+
+  test:
+    name: Python / migrations / tests
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: pgvector/pgvector:pg16
+        env:
+          POSTGRES_USER: utopia
+          POSTGRES_PASSWORD: utopia
+          POSTGRES_DB: utopia_test
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U utopia -d utopia_test"
+          --health-interval 5s
+          --health-timeout 3s
+          --health-retries 10
+
+    env:
+      DATABASE_URL: postgresql+asyncpg://utopia:utopia@localhost:5432/utopia_test
+      DATABASE_URL_SYNC: postgresql+psycopg://utopia:utopia@localhost:5432/utopia_test
+      ANTHROPIC_API_KEY: test
+      OPENAI_API_KEY: test
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install
+        run: python -m pip install -e ".[dev]"
+
+      - name: Compile
+        run: python -m compileall -q src tests migrations
+
+      - name: Ruff
+        run: ruff check --select E4,E7,E9,F src tests migrations/env.py migrations/versions/014_operator_scoped_embeddings.py
+
+      - name: Apply migrations from zero
+        run: alembic upgrade head
+
+      - name: Verify cleanup migration is reversible
+        run: |
+          alembic downgrade 013
+          alembic upgrade head
+
+      - name: Test
+        run: pytest -q

.gitignore

@@ -8,8 +8,14 @@ build/
 .venv/
 venv/
 .env
+.env.*
+!.env.example
 *.db
 *.sqlite3
+*.log
+*.dump
+*.sql
+*.parquet
 .ruff_cache/
 .pytest_cache/
 .mypy_cache/