.gitignore

# Rust
core/target/
desktop/src-tauri/target/
desktop/src-tauri/gen/
**/*.rs.bk

# Demo run artifacts
core/*.png

# Apple / Xcode
apple/build/
apple/DerivedData/
apple/Generated/
apple/*.xcodeproj
apple/*.xcworkspace
*.xcuserstate
.DS_Store

# Web
web/node_modules/
web/dist/

# Generated bindings
core/haven-ffi/generated/
*.xcframework
Scripts/export-compliance/
HavenApp/Info.plist

# agent worktrees (never commit)
.claude/worktrees/

# App Store screenshot pipeline scratch (committed copies live under docs/appstore-screenshots/)
apple/screenshots/

# Kotlin build cache
android/.kotlin/

# Generated store screenshots (regenerated by the capture scripts)
android/app/build/play-screenshots/
# The actual Play listing images — featureGraphic.png + phoneScreenshots/ — ARE tracked so CI
# (fastlane supply) publishes the whole listing, not just text. Only the framed intermediates the
# capture pipeline emits (supply never uploads them) stay ignored.
android/fastlane/metadata/android/*/images/framed/
desktop/screenshots/

# Local miniflare/wrangler state from `wrangler dev` — never a build input, and it has held
# real KV rows (an F1 ledger entry). Untracked + unignored made it a `git add -A` landmine.
push/.wrangler/

# Security audit reports are PRIVATE — never track them in this public repo.
docs/audits/
docs/SECURITY-AUDIT-*.md
**/SECURITY-AUDIT-*crypto*.md
core/.claude/

# cloudflared helpers (fetched by tools/fetch-cloudflared.sh — signed in CI, not committed)
desktop/src-tauri/binaries/cloudflared*
!desktop/src-tauri/binaries/README.md
apple/Helpers/cloudflared
apple/Helpers/cloudflared-*
apple/Helpers/*.version
desktop/src-tauri/binaries/*.version
!apple/Helpers/README.md
!apple/Helpers/cloudflared.entitlements

# QA harness artifacts + local build scratch
build/

# Soren's run reports, written into the repo root by _shared/soren/soren.mjs on every `soren run`.
# Named, not globbed as `soren-*` — the config beside them (soren.config.mjs) is tracked.
soren-junit.xml
soren-results.json

# Generated App Store creative — the localized screenshot/header renders, ~325 MB of PNGs. It is
# regenerable from the screenshot tooling, but slowly, so it is kept as a LOCAL CACHE rather than
# rebuilt on demand. Untracked-but-unignored it did two bad things: it sat in every `git status` as
# permanent noise, and it was one `git clean -fd` away from being deleted, which costs a full
# regeneration run to get back. Ignoring it keeps the files and drops the noise.
appstore-creative/

# iCloud CONFLICT COPIES. This repo lives under ~/Documents, which iCloud syncs, and it resolves a
# conflict by duplicating the entry with " 2" appended — "target 2/", "foo 2.dex", and so on. Those
# names match no existing ignore rule, so `git add -A` swept a 15GB copy of the Rust build directory
# into a commit and the push was rejected for exceeding GitHub's 2GiB pack limit. They are never
# source, on any platform.
* [0-9]
* [0-9].*
*/* [0-9]