# Secrets — NEVER commit
infra/.env
**/.env.local
**/.env.production

# Go build artifacts
services/*/bin/
services/*/main
infra/terraform/provider/main
# Go binary named 'main' — only match files, not directories
services/**/main
packages/**/main

# Python
**/__pycache__/
**/*.pyc
**/.venv/
**/venv/
**/*.egg-info/

# Node
**/node_modules/
**/dist/
**/.turbo/

# IDE
.idea/
.vscode/settings.json
*.code-workspace

# OS
.DS_Store
Thumbs.db

# Test artifacts
**/*.test
**/testdata/tmp/

# Claude Code worktrees
.claude/worktrees/

# Go workspace sum (regenerated)
go.work.sum
infra/.env.secrets

# Private scratch workspace — never commit
scratch-pad/

# Superpowers session plan files — may contain credentials/tokens
# Note: plans/ subdir is intentionally tracked (no secrets, implementation plans only)
docs/superpowers/plans/.gitignore

# TypeScript build cache
**/*.tsbuildinfo
.gstack/
