From 1690da3fab669dcd67a9785d9d7a46a1a692fe24 Mon Sep 17 00:00:00 2001
From: Stefan Mogeritsch <stefan.mo.co@gmail.com>
Date: Tue, 2 Jun 2026 13:32:00 +0200
Subject: [PATCH] chore/ai-guardrails-centralization

Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>
---
 .dockerignore                        |  2 +-
 .gitea/workflows/desktop-tests.yml   |  2 +-
 .gitea/workflows/docker-publish.yaml | 10 +++++-----
 .gitea/workflows/feature-build.yml   |  2 +-
 .gitea/workflows/pr-guard.yaml       |  2 +-
 .nolik/.aiignore                     | 21 +++++++++++++++++++++
 6 files changed, 30 insertions(+), 9 deletions(-)
 create mode 100644 .nolik/.aiignore

diff --git a/.dockerignore b/.dockerignore
index a043ecb8..bde0550a 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -193,7 +193,7 @@ secrets/
 # ===================================================================
 TODO*.md
 NOTES*.md
-**/.junie/
+.junie/
 
 # ===================================================================
 # Keep essential files (override exclusions)
diff --git a/.gitea/workflows/desktop-tests.yml b/.gitea/workflows/desktop-tests.yml
index a8ac5f51..9e492aa2 100644
--- a/.gitea/workflows/desktop-tests.yml
+++ b/.gitea/workflows/desktop-tests.yml
@@ -18,7 +18,7 @@ jobs:
   desktop-tests:
     # Komplett deaktivierbar über Repo-Variable: Settings → Variables → DESKTOP_CI_ENABLED=true
     # Zusätzlich: Für Plan‑B‑Builds überspringen, wenn Commit-Message [planb] enthält
-    if: ${{ vars.DESKTOP_CI_ENABLED == 'true' && !contains(github.event.head_commit.message, '[planb]') }}
+    if: ${{ vars.DESKTOP_CI_ENABLED == 'true' && !contains(gitea.event.head_commit.message, '[planb]') }}
     name: Compose Desktop — Tests (headless) & Build
     runs-on: ubuntu-latest
 
diff --git a/.gitea/workflows/docker-publish.yaml b/.gitea/workflows/docker-publish.yaml
index 2ac453e6..97a0eeda 100644
--- a/.gitea/workflows/docker-publish.yaml
+++ b/.gitea/workflows/docker-publish.yaml
@@ -1,5 +1,5 @@
 name: Build and Publish Docker Images
-run-name: Build & Publish by @${{ github.actor }}
+run-name: Build & Publish by @${{ gitea.actor }}
 
 on:
   push:
@@ -117,8 +117,8 @@ jobs:
           images: ${{ env.REGISTRY_INTERNAL }}/${{ env.IMAGE_PREFIX }}/${{ matrix.image }}
           tags: |
             type=ref,event=tag
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
-            type=sha,format=long,enable=${{ github.ref == 'refs/heads/main' }}
+            type=raw,value=latest,enable=${{ gitea.ref == 'refs/heads/main' }}
+            type=sha,format=long,enable=${{ gitea.ref == 'refs/heads/main' }}
 
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
@@ -132,5 +132,5 @@ jobs:
           provenance: false
           sbom: false
           build-args: |
-            BUILD_DATE=${{ github.event.head_commit.timestamp || 'unknown' }}
-            VERSION=${{ github.sha }}
+            BUILD_DATE=${{ gitea.event.head_commit.timestamp || 'unknown' }}
+            VERSION=${{ gitea.sha }}
diff --git a/.gitea/workflows/feature-build.yml b/.gitea/workflows/feature-build.yml
index af28efbf..45e30ab9 100644
--- a/.gitea/workflows/feature-build.yml
+++ b/.gitea/workflows/feature-build.yml
@@ -39,7 +39,7 @@ jobs:
             chmod +x install-conveyor.sh
             ./install-conveyor.sh
           fi
-          echo "$HOME/.conveyor/bin" >> $GITHUB_PATH
+          echo "$HOME/.conveyor/bin" >> $GITEA_PATH
 
       - name: Windows .msi mit Conveyor bauen
         run: |
diff --git a/.gitea/workflows/pr-guard.yaml b/.gitea/workflows/pr-guard.yaml
index 0106401f..c18f02f6 100644
--- a/.gitea/workflows/pr-guard.yaml
+++ b/.gitea/workflows/pr-guard.yaml
@@ -5,7 +5,7 @@ on:
 jobs:
   no-hardcoded-versions:
     # Für Plan-B-Builds überspringen: Commit-Message enthält [planb]
-    if: ${{ !contains(github.event.head_commit.message, '[planb]') }}
+    if: ${{ !contains(gitea.event.head_commit.message, '[planb]') }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
diff --git a/.nolik/.aiignore b/.nolik/.aiignore
new file mode 100644
index 00000000..6ee1e1fa
--- /dev/null
+++ b/.nolik/.aiignore
@@ -0,0 +1,21 @@
+# .aiignore - Verhindert Token-Waste für Nolik
+
+# Abhängigkeiten & Binaries
+build/
+.gradle/
+*.jar
+*.deb
+*.msi
+
+# Sensible Daten (auch lokal!)
+.env
+.env.*
+config/docker/certs/
+*.pem
+*.jks
+postgres-data/
+valkey-data/
+
+# Doku-Builds (Nolik soll die Source-Files in docs/ lesen, nicht die HTML-Exporte)
+build/dokka/
+docs/Neumarkt2026/*.pdf