node_modules
.DS_Store
dist
.env
.env.*
.env.local
.env.development
.env.production
.next
.turbo
coverage
# Go binaries
main
server
*.exe
!**/cmd/**/server/
!**/internal/**/server/
!**/lib/**/server/
bin/

# Build artifacts
*.zip

# Local tooling configs that may contain secrets
.claude/settings.local.json

# Temporary files
tmp/
*.log

# Local CloudWatch Insights dumps (do not commit)
.cursor-cw-*.json

# Audit artifacts
audit-screenshots/
audit-browser-results.json
scripts/audit-*.cjs
scripts/audit-*.mjs
scripts/audit-*.ps1
tmp_login.json

# Playwright prod report
playwright-report-prod/

# mTLS certificates (generated, contain private keys)
infra/mtls/certs/

# AWS backup (contains secrets, credentials, and sensitive configs)
infra/aws-backup/secrets/
infra/aws-backup/iam/

# Local recovery data and credentials are never source code
infra/aws-backup/
**/.work/
**/gha-creds-*.json
**/*encrypted.xml
**/client_secret_*.json
*.tsbuildinfo
playwright-report/
test-results/
all_logs.txt
failed_logs.txt
*_logs.txt
gitleaks-report.json

# Generated development signing keys
**/dev-keystore.json

# Generated diagnostic reports
/curl_output.json
/gosec.json
