Skima/.gitignore at main · henfrydls/Skima · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
# Local planning docs
PRODUCT_STRATEGY.md
TODO.md
ROADMAP.md

# Internal planning docs (not for public repo)
docs/plans/
docs/superpowers/
Stitch/

# Logs
logs
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
lerna-debug.log*

node_modules
dist
dist-ssr
dist-ssr
*.local
coverage
.claude
CLAUDE.md

# Editor directories and files
.vscode/*
!.vscode/extensions.json
.idea
.DS_Store
*.suo
*.ntvs*
*.njsproj
*.sln
*.sw?

# Local data files (user-specific, not tracked)
data/database.json

# ===========================================
# SECURITY: Sensitive files - NEVER COMMIT
# ===========================================

# Environment files (may contain secrets)
.env
.env.*
!.env.example
*.env
server/.env
client/.env

# Database files (contain user data)
*.db
*.sqlite
*.sqlite3
server/prisma/*.db

# Secret/credential files
*.pem
*.key
*.cert
.jwt-secret
secrets/
credentials/

# Backup files that might contain sensitive data
*.bak
*.backup

# Internal working docs — NEVER commit to this public repo (plans, briefs,
# inventories, strategy, growth, infra/credential references).
# Convention: keep internal docs under docs/plans/ (already ignored above).
# Safety nets for docs created elsewhere: HANDOFF-*.md and any *.internal.md.
HANDOFF-*.md
*.internal.md

# Pre-restore auto-snapshots (runtime recovery dumps, may contain user data)
server/prisma/pre-restore-snapshots/

# Tauri
src-tauri/target/
src-tauri/binaries/
# Ignore the contents of src-tauri/resources/ (built artifacts only)
# but make exceptions for tracked files. Note: cannot use the dir-form
# `src-tauri/resources/` here because git refuses to re-include files
# whose parent dir is ignored — we have to glob the children.
src-tauri/resources/*
!src-tauri/resources/.gitkeep
# Ship the compiled macOS 26 Asset Catalog (built locally via
# scripts/build-macos.sh from src-tauri/icons/Skima.icon). GitHub Actions
# macos-latest runners still use Xcode <26 as of 2026, so actool there
# does not produce Assets.car — we have to ship the prebuilt artifact.
!src-tauri/resources/Assets.car

# pkg output
*.exe
!src-tauri/icons/**

# Playwright
/test-results/
/playwright-report/
/e2e/.auth/