# Build artifacts
/target/

# Environment
.env

# IDE
.idea/
.vscode/
*.swp
*.swo

# macOS
.DS_Store

# Plugin binaries
plugins/*.dylib
plugins/*.so
plugins/*.dll

# Release artifacts (secret signing scripts stay Syncthing-only); Bento build
# recipes are non-secret and tracked.
dist/*
!dist/recipes/
# Artifact signing. sign-artifacts.sh holds no secret (the key and its password
# live outside the repo, under ~/.minisign), and the public key is public by
# definition: README.md tells people to verify downloads against it, so both have
# to arrive with a checkout. Named individually rather than as `!dist/*.sh` to
# keep the rule above in force for anything else that lands in dist/.
!dist/sign-artifacts.sh
!dist/makecreative.pub

# Tauri generated
src-tauri/gen/

# Claude Code instructions (project-local; not for the public repo)
CLAUDE.md

# Generated by src-tauri/build.rs from makeover's embedded theme set
/src-tauri/themes/

# Generated by src-tauri/build.rs from makeover-geometry's scale
/src-tauri/frontend/css/geometry.css
/src-tauri/frontend/css/timing.css
/src-tauri/frontend/css/layout.css
/src-tauri/frontend/css/typography.css
# The house faces, cut by quasi-type in build.rs. The pipeline is the source;
# a committed face is a second one that nothing rebuilds.
/src-tauri/frontend/fonts/

# Secrets and credentials. The baseline every repo under ~/Code carries, kept
# identical so no repo is the one that forgot. Suffix-matched rather than
# `*.env`, which would also catch committed environment files that hold no
# secrets (sweep systemd/sweep.env). `.env.example` is a tracked template and
# is negated back in.
.env.*
!.env.example
*.pem
*.key
*.p8
*.p12
*.pfx
credentials.json