node_modules/
dist/
data/
.env
config.yaml
.superpowers/
*.db
*.db-wal
*.db-shm
input/
output/
logs/
.worktrees/
.claude/
.playwright-mcp/
.superpowers/
orch.pid
.server.pid
src/generated/
.worktrees/
vendor/
# Added by code-review-graph
.code-review-graph/

# Local debugging / scratch scripts (kept out of tree)
scripts/dump_payload.mjs

# Benchmark output (run results / copied workspaces)
bench/results/
.context/

data/secrets/master.key
data/browser-sessions/*
!data/browser-sessions/.gitkeep
.gstack/

# Core dumps from native crashes (sqlite/playwright/sharp). These contain raw
# process memory — including the decrypted master key, SSH private keys and the
# session secret — so they must never be committed.
core
core.*