| 1 |
# Build artifacts |
| 2 |
/target |
| 3 |
**/target |
| 4 |
|
| 5 |
# Frontend (regenerable — tsc output + installed deps; rebuilt by build.rs) |
| 6 |
server/static/dist/ |
| 7 |
server/frontend/node_modules/ |
| 8 |
multithreaded/static/dist/ |
| 9 |
multithreaded/frontend/node_modules/ |
| 10 |
|
| 11 |
# Generated stylesheets (makeover-build emits these from makeover-geometry and |
| 12 |
# makeover-webview; the crates are the source, a checked-in copy would drift) |
| 13 |
server/static/geometry.css |
| 14 |
server/static/layout.css |
| 15 |
server/static/embed-geometry.css |
| 16 |
|
| 17 |
# Environment files (contain secrets) |
| 18 |
server/.env |
| 19 |
server/.env.local |
| 20 |
server/.env.*.local |
| 21 |
**/env.production |
| 22 |
|
| 23 |
# IDE |
| 24 |
.idea/ |
| 25 |
.vscode/ |
| 26 |
*.swp |
| 27 |
*.swo |
| 28 |
*~ |
| 29 |
|
| 30 |
# Secrets and credentials |
| 31 |
*.pem |
| 32 |
*.key |
| 33 |
*.p8 |
| 34 |
*.p12 |
| 35 |
*.pfx |
| 36 |
credentials.json |
| 37 |
service-account.json |
| 38 |
|
| 39 |
# OS files |
| 40 |
.DS_Store |
| 41 |
Thumbs.db |
| 42 |
|
| 43 |
# SQLx offline mode cache |
| 44 |
.sqlx/ |
| 45 |
|
| 46 |
# Generated template partials (build.rs output) |
| 47 |
server/templates/_island.html |
| 48 |
server/templates/_sheet.html |
| 49 |
|
| 50 |
# Generated rustdoc output |
| 51 |
server/rustdoc-out/ |
| 52 |
|
| 53 |
# Mutation testing output |
| 54 |
mutants.out* |
| 55 |
**/mutants.out* |
| 56 |
|
| 57 |
# Claude Code agent worktrees |
| 58 |
.claude/worktrees/ |
| 59 |
|
| 60 |
# Claude Code instructions (project-local; not for the public repo) |
| 61 |
CLAUDE.md |
| 62 |
|
| 63 |
# Private working files — live in _private/, synced via Syncthing |
| 64 |
todo.md |
| 65 |
# Glob, not the literal name: audit reports drifted to dated files |
| 66 |
# (audit_doubledown_2026-07-01.md, etc.) that a literal `audit_review.md` rule |
| 67 |
# left unignored — one `git add docs/` from leaking internal findings into the |
| 68 |
# public repo (audit Run 17). |
| 69 |
audit_review.md |
| 70 |
audit_*.md |
| 71 |
docs/audit_*.md |
| 72 |
# Same intent for the risk-lens reports: /fuzz writes dated fuzz-*.md (and |
| 73 |
# fuzz-doubledown-*.md) full of concrete attack paths and PoCs — never public. |
| 74 |
fuzz-*.md |
| 75 |
docs/fuzz-*.md |
| 76 |
|
| 77 |
# sandod local state (regenerable) |
| 78 |
sando/daemon/sando.db |
| 79 |
sando/daemon/sando.db-* |
| 80 |
sando/daemon/work/ |
| 81 |
sando/daemon/releases/ |
| 82 |
sando/daemon/cargo-target/ |
| 83 |
|
| 84 |
# mt-db and the server use sqlx compile-time macros; their offline query cache |
| 85 |
# must be committed so build hosts (and the Sando gate) compile without a live DB. |
| 86 |
!multithreaded/.sqlx/ |
| 87 |
!server/.sqlx/ |
| 88 |
|