PC-ONLY MANIFEST — what does NOT travel by git, and where it lives (LIVING doc)
Born 2026-07-02 (Sam: "the VM has to KNOW what's there and where to find it — I don't want to discover a limit mid-use"). Rule: anything gitignored/untracked is INVISIBLE to clones. This doc is the map every session (especially VM sessions) reads so nothing is a surprise. Update it whenever something moves.
✅ MOVED TO THE VM (7/2 sweep — no longer PC-only)
- All 19 skills (
.claude/skills/+hookstreet-skills/, both levels) ·.remember/session histories - clasp credentials + MIS/v2 project bindings (
.clasp.json,appsscript.json) - Operational secrets (19 keys: Hospitable, ops tokens, Telegram, MIS, iCals, GitHub, Finnhub, Mildred, V3-obligations) →
ops-api/.secrets.jsonon VM MIS/data/broker archives (Fidelity year CSV, lot table, Schwab tx pull, old workbooks)- Full
STR-Operations/incl. gitignored PDFs (Airbnb earnings, P&Ls, Joint Stipulations, HOA notices, mortgage proofs, bank CSVs) - Root OS workbooks (HS_Unified, Operating_OS, Command_Center, Monthly Obligations v1+v2, Pipeline) ·
contacts_clean.csv· Lee/ · Villatel/ · Stam/ · BeginsMusic BH/ · dist/ - notify config + connections keyring (
command-inbox/.claude-notify.json,.connections.json)
🖥 STILL PC-ONLY (deliberate — each is one consented copy away)
| What | Where on PC | Why held back | Needed for |
|---|---|---|---|
| Plaid bank credentials | ops-api/.secrets.json (full) | bank-grade; no VM session needs it yet | balance pulls from VM |
| Gmail OAuth client secrets | same | account-grade | gmail-personal MCP on VM |
| OpenAI/Anthropic API keys | same | billing keys | VM-side TTS/AI calls (bot uses cloud copies) |
| NVR/camera logins + CAM_CF | same | home security | camera work from VM |
| Chanie/Manny family-bot tokens | same | family-walled lane | family relays from VM |
| Cloudflare wrangler auth | %APPDATA%\xdg.config.wrangler | classifier-gated; Fable-3 lane | ops-api/portal deploys from VM |
| Claude Code local memory | .claude/projects/.../memory/ | by DESIGN — D1 cloud brain is the VM's memory (brain-sync 3h cron) | n/a |
| MCP connectors (Gmail/GCal/Drive) | Claude account, interactive auth | one-time /mcp auth in a VM session if wanted | inbox/calendar hands on VM |
☁️ ALREADY CLOUD-NATIVE (never were PC-things)
MIS engine + triggers (Google servers) · ops-api + D1 brain + portal (Cloudflare) · the Sheets · Gmail · Hospitable (via ops-api Worker) · Telegram bot.
📍 THE "WHERE DO I FIND IT" ANSWER (Sam's standing question)
- Read on your phone: the portal —
/operate(control page),/briefings.html(all outputs),everything.html(all pages), docs-reader (window 1 building). - Ask: the bot (D1 brain, 633 facts, re-synced every 3h).
- Work: VM tmux windows (everything above is there now).
- Source of truth: the private GitHub repos — OneDrive is just the PC's local folder; the planned OneDrive migration changes NOTHING about where things live. Year-folder switching (like tax years) is fine — git doesn't care where the working copy sits.
Forgotten-things pointers Sam named (so they're findable, not lost)
- Cameras/NVR/DDNS/eero history:
docs/CAMERA_SYSTEM.md+ memoryreference_camera_nvr_connection(NVR-direct, ports 8500/8501 story, eero verified 7/1). - Hermes: appears in brain-dump history — grep
.remember/+ D1 (/memory/search?q=Hermes); if it's not there, it never got captured — re-dump it to the bot. - Automations/rotations/plugins/connections:
docs/CONNECTIONS.md(the hub) +docs/CLAUDE_TOOLS_AVAILABLE.md+.claude/skills/(now everywhere).