security: ignore genesis.jsonc, add safe genesis example, purge tracked genesis history

genesis.jsonc.example

@@ -0,0 +1,63 @@
+{
+  // SAFE EXAMPLE ONLY
+  // Do not commit real secrets (nsec, API keys, private relays, or private admin data).
+
+  // ─── Agent Identity Key ─────────────────────────────────────────────
+  // Use your real Nostr nsec locally in genesis.jsonc (gitignored).
+  "key": {
+    "nsec": "nsec1REPLACE_WITH_YOUR_AGENT_NSEC"
+  },
+
+  // ─── Administrator ──────────────────────────────────────────────────
+  // Admin pubkey may be npub or hex.
+  "admin": {
+    "pubkey": "npub1REPLACE_WITH_ADMIN_PUBKEY"
+  },
+
+  // ─── DM Protocol ───────────────────────────────────────────────────
+  // Supported values: "nip04", "nip17", or "both".
+  "dm_protocol": "nip04",
+
+  // ─── LLM Provider ──────────────────────────────────────────────────
+  // OpenAI-compatible endpoint settings.
+  "llm": {
+    "provider": "openai",
+    "api_key": "sk-REPLACE_WITH_API_KEY",
+    "model": "gpt-4o-mini",
+    "base_url": "https://api.openai.com/v1",
+    "max_tokens": 512,
+    "temperature": 0.7
+  },
+
+  // ─── HTTP Admin API ────────────────────────────────────────────────
+  "api": {
+    "enabled": true,
+    "port": 8484,
+    "bind_address": "127.0.0.1"
+  },
+
+  // ─── Startup Events ────────────────────────────────────────────────
+  // Minimal relay list required for relay pool initialization.
+  "startup_events": [
+    {
+      "kind": 10002,
+      "content": "",
+      "tags": [
+        ["r", "wss://relay.damus.io"],
+        ["r", "wss://relay.primal.net"]
+      ]
+    }
+  ],
+
+  // ─── Default Skill ────────────────────────────────────────────────
+  // Keep this generic and non-sensitive for repository examples.
+  "default_skill": {
+    "d_tag": "didactyl-default",
+    "kind": 31124,
+    "content": "# Didactyl Agent\n\nYou are Didactyl, a sovereign AI agent living on Nostr.\n\n- Be concise, accurate, and practical.\n- Use tools when needed and report real results only.\n- Never reveal private keys or secrets.",
+    "tags": [
+      ["app", "didactyl"],
+      ["scope", "private"]
+    ]
+  }
+}