.gitignore

# Rust
/target
**/*.rs.bk
Cargo.lock.bak

# Tauri
/src-tauri/target
/src-tauri/gen
/src-tauri/WixTools
# Issue #25: the privileged helper sidecars - the VSS helper on Windows
# (DESIGN s5.3.1) and the APFS mount broker on macOS (DESIGN s5.3.2) - are
# BUILT in CI (release.yml / dev-channel.yml) and copied here with a
# target-triple suffix just before `tauri build`; never committed source
# artifacts.
/src-tauri/binaries

# Node
node_modules/
ui/dist
ui/.vite
*.local

# Coverage artefacts (cargo-llvm-cov + vitest; regenerate with `just coverage`)
ui/coverage
/coverage-rust.json
/coverage-baseline.json
/scratch-rust-cov.json

# Editor
.idea/
.vscode/
*.swp
*.swo
*~

# OS noise
.DS_Store
Thumbs.db
Desktop.ini

# Driven runtime / dev artefacts
.env
.env.local
.env.test
.env.*.local
*.log
/logs
/state.db
/state.db-*

# sqlx prepare scratch DB (regenerate with `cargo sqlx prepare`)
/.driven-prepare.db
/.driven-prepare.db-*

# OAuth client credentials (Desktop client secret is technically not-secret
# but treat as one for hygiene). Stash values into .env.test instead.
client_secret*.json
gcp-oauth-*.json
*-oauth-client.json

# Pre-implementation audit (informational; not part of source)
/.audit-out

# Claude Code session state stays local, but repo-committed skills (the
# agent-facing QA runbook lives there - issue #239) are tracked.
/.claude/*
!/.claude/skills/

# Tauri build outputs not under src-tauri/target
/release

# Mobile icon output from `cargo tauri icon` - Driven is desktop-only, so these
# are regenerable cruft, not source.
/src-tauri/icons/android
/src-tauri/icons/ios

# gstack skill scratch
/.gstack

# codex review stderr capture (transient, never source)
/codex-err.txt