# If you prefer the allow list template instead of the deny list, see community template:
# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
#
# Binaries for programs and plugins
*.exe
*.exe~
*.dll
*.so
*.dylib

# Test binary, built with `go test -c`
*.test

# Code coverage profiles and other test artifacts
*.out
coverage.*
*.coverprofile
profile.cov

# env file
.env
*.env.hetzner

# Editor/IDE
.idea/
# .vscode/
.DS_Store

*/kubeconfig/*
*kubeconfig.yaml

*/bin/
*/bin/*.worktrees/

*/manifest.json
*/manifest_*.json

# dbt generated files
dbt/services/*/.user.yml
dbt/services/*/logs/
dbt/services/*/target/
dbt/services-fixed/*/.user.yml
dbt/services-fixed/*/logs/
dbt/services-fixed/*/target/

# SKILLS
*.archmcp/

# WORKTREES
*.worktrees/
*.scheduler-stop/.worktrees/
.worktrees/
.wrkt/
.worktree/
.worktree/*

ui-service/.superpowers*
docs/superpowers/*
docs/future-dev/*

# CLAUDE
.claude/settings.json
.claude/settings.local.json
.claude/settings.local.json
docs/superpowers/*

.rtk/*
.venv

# e2e per-service image tags (written by setup.sh / provision-k8s-test-env.sh)
tests/e2e/.image-tags

# Python bytecode / test cache (never commit)
__pycache__/
*.py[cod]
.pytest_cache/
.venv/

# Local agent/tooling artifacts (never commit)
.enola/
.claire/

# Private keys and certificates must never be committed
*.pem
*.key
*.p12
*.pfx
id_rsa*
id_ed25519*

# Populated values files hold real datastore credentials and belong in the
# private infrastructure repository, never here. Only the .example template
# that ships alongside them is safe to commit.
values.secret.yaml
values.secret.*.yaml
deploy/infra/

# Local engineering notes: architecture audit findings and known-issue write-ups.
# Kept out of the public repo deliberately — they are working notes, not docs.
docs/ddd-violations/
docs/known-issues/

# SARIF scan reports, written only when SARIF_DIR is set (CI does; local runs
# do not). Machine-readable output for code scanning, never source.
sarif/
