diff --git a/.gitignore b/.gitignore
index 729a784..d73b7a4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,4 +5,14 @@ node_modules/
 dist/
 playwright-report/
 test-results/
-*.log
\ No newline at end of file
+*.log
+# Agent runtime artifacts — never commit
+.gh-token
+*.gh-token
+**/.gh-token
+.config/gh/
+**/.config/gh/
+**/AGENT_HOME/**
+$AGENT_HOME/**
+.claude/
+.codex/