Files
Priya Raman 191c61d23b fix(security): ignore materialized Paperclip runtime directory
Adds .paperclip-runtime/ to the root .gitignore alongside the existing
.paperclip/ and .paperclip-local/ entries, and adds a Vitest regression
test that asserts git check-ignore covers adapter credential paths.

Without this entry, adapters that materialize runtime state into
<workspace>/.paperclip-runtime/<adapterKey>/... expose those files as
committable untracked entries inside the git working tree. A git add -A
while an auth.json is materialized would stage plaintext credentials.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-09 00:30:00 +00:00
..