From 5b33efdddda5a0a62d6b06a3550729c3fdaecb23 Mon Sep 17 00:00:00 2001
From: Test User <test@example.com>
Date: Sat, 18 Apr 2026 10:09:30 +0000
Subject: [PATCH] chore(GRO-720): harden .gitignore against agent runtime leaks

Add defensive entries to prevent agent home artifacts, gh tokens,
and infra-repo checkouts from being accidentally committed.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .gitignore | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.gitignore b/.gitignore
index 14923ee..112405c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,16 @@ dist/
 .turbo/
 coverage/
 minimax-output/
+
+# Agent runtime artifacts — never commit
+.gh-token
+*.gh-token
+.config/gh/
+**/.config/gh/
+infra-repo
+infra-repo/
+**/instructions/.gh-token
+**/AGENT_HOME/**
+$AGENT_HOME/**
+.claude/
+.codex/