node_modules
.next
dist
.env
.env.local
.env.*.local
.turbo
.cache
.pnpm-store
*.tsbuildinfo
*.log
.DS_Store
.expo
android
ios

# Sensitive credential files — never commit
credentials.json
/credentials/
*.jks
*.keystore
*.pem
*.p8
*.p12
*.pfx
TESTDATEN.txt

# Claude Code local settings (may contain command history with secrets)
.claude/

# Playwright MCP screenshots (may contain sensitive UI state)
.playwright-mcp/

# Playwright test run artifacts
test-results/
playwright-report/

# Test scripts with hardcoded keys — never commit
test-flow.mjs
test-gateway.mjs
packages/shared/test-gateway.mjs
packages/shared/test-*.mjs
packages/shared/sign-*.mjs
packages/shared/e2e-ssh-test.mjs
scripts/e2e-ssh-test.mjs

# Throwaway working dir for E2E scratch files (signed requests, ed25519 keys)
tmp/
/tmp/

# superpowers brainstorm artifacts (server PIDs, HTML prototypes)
.superpowers/

# Python bytecode cache
__pycache__/
*.pyc

# Name-clash backup files (Windows duplicate-save format)
*# Name clash *#*

# Stray root-level test screenshots and placeholder configs
/test-*.png
/app.json
graphify-out/
.graphify_*
