fix: post-audit edge case fixes + titlebar focus ring

- Sync tauri.conf.json version to 0.1.3
- Use io_error() consistently for backup persist errors
- Walk up ancestors in path canonicalization for non-existent parents
- Clear saveQueueRef on unmount in useAppPersistence
- Remove default focus outline on titlebar buttons (keep :focus-visible)
- Add .audit/ to .gitignore

Author: danscMax

.gitignore

@@ -41,5 +41,8 @@ docs/plans/
 docs/research/
 docs/mockups/
 
+# Audit reports (generated, not source)
+.audit/
+
 # Portable build output
 Sidearm-Portable/

src-tauri/src/config.rs

@@ -801,10 +801,7 @@ fn write_config_to_path(
         .map_err(|error| io_error(Some(&backup_path), error))?;
         backup_tmp
             .persist(&backup_path)
-            .map_err(|error| ConfigStoreError::Io {
-                path: Some(path_string(&backup_path)),
-                message: format!("Failed to persist backup atomically: {}", error.error),
-            })?;
+            .map_err(|error| io_error(Some(&backup_path), error.error))?;
     }
 
     let serialized = serde_json::to_string_pretty(config)

src-tauri/src/lib.rs

@@ -342,9 +342,9 @@ fn validate_user_file_path(path: &str) -> Result<PathBuf, CommandError> {
     })?;
 
     // For existing paths (reads): canonicalize the path itself.
-    // For new files (writes): canonicalize the parent directory, then append filename.
-    // std::fs::canonicalize returns NotFound on non-existent paths, so we must
-    // handle the write case (new file) by canonicalizing only the parent.
+    // For new files (writes): walk up to the nearest existing ancestor, canonicalize
+    // it, then append the non-existent tail.  This handles writes where intermediate
+    // directories don't exist yet (create_dir_all runs after validation).
     let canonical = if path.exists() {
         std::fs::canonicalize(&path).map_err(|e| {
             CommandError::new(
@@ -354,19 +354,30 @@ fn validate_user_file_path(path: &str) -> Result<PathBuf, CommandError> {
             )
         })?
     } else {
-        let parent = path.parent().ok_or_else(|| {
-            CommandError::new("invalid_path", "Path has no parent directory.", None)
-        })?;
-        let canonical_parent = std::fs::canonicalize(parent).map_err(|e| {
+        let mut tail: Vec<std::ffi::OsString> = Vec::new();
+        let mut cursor = path.as_path();
+        loop {
+            tail.push(cursor.file_name().ok_or_else(|| {
+                CommandError::new("invalid_path", "Path has no filename component.", None)
+            })?.to_owned());
+            cursor = cursor.parent().ok_or_else(|| {
+                CommandError::new("invalid_path", "No existing ancestor directory found.", None)
+            })?;
+            if cursor.exists() {
+                break;
+            }
+        }
+        let mut canonical = std::fs::canonicalize(cursor).map_err(|e| {
             CommandError::new(
                 "invalid_path",
-                format!("Parent canonicalization failed: {e}"),
+                format!("Ancestor canonicalization failed: {e}"),
                 None,
             )
         })?;
-        canonical_parent.join(path.file_name().ok_or_else(|| {
-            CommandError::new("invalid_path", "Path has no filename.", None)
-        })?)
+        for part in tail.into_iter().rev() {
+            canonical.push(part);
+        }
+        canonical
     };
 
     if !canonical.starts_with(&home) {

src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Sidearm",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "identifier": "com.sidearm.desktop",
   "build": {
     "beforeDevCommand": "npm run dev",

src/App.css

@@ -121,12 +121,18 @@ button, input, textarea, select {
   width: 46px;
   height: 100%;
   border: none;
+  outline: none;
   background: transparent;
   color: var(--c-text-muted);
   cursor: pointer;
   transition: background-color 0.12s, color 0.12s;
 }
 
+.titlebar__btn:focus-visible {
+  outline: 1px solid var(--c-accent);
+  outline-offset: -1px;
+}
+
 .titlebar__btn:hover {
   background: rgba(255, 255, 255, 0.08);
   color: var(--c-text-bright);

src/hooks/useAppPersistence.ts

@@ -61,6 +61,7 @@ export function useAppPersistence(onAutoSaved?: () => void): AppPersistence {
     return () => {
       disposedRef.current = true;
       clearTimeout(saveTimerRef.current);
+      saveQueueRef.current = null;
     };
   }, []);