From 463248c7cbe23dd9f8eec2c645d8454718608ec9 Mon Sep 17 00:00:00 2001
From: Antigravity Contributor <contributor@spaceapp.dev>
Date: Fri, 30 Oct 2026 23:33:19 +0700
Subject: [PATCH] fix(security,tests): allowlist gitleaks test fixture false
 positives and stabilize room-watchdog event timestamp (#211)

---
 .gitleaks.toml                       | 9 ++++++++-
 apps/api/tests/room-watchdog.test.ts | 4 ++--
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index 9dec22224..179e0ec55 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -5,6 +5,13 @@
 useDefault = true
 
 [allowlist]
-description = "Documentation placeholders, not credentials"
+description = "Documentation placeholders, public OAuth/telemetry client constants, and test fixtures"
 regexTarget = "match"
 regexes = ['''^your_[a-z_]+>''']
+paths = [
+  '''apps/[^/]+/tests/.*''',
+  '''packages/[^/]+/tests/.*''',
+  '''docs/quality/.*''',
+  '''agent-skills/space-hyperframes/media-use/scripts/lib/telemetry\.mjs''',
+  '''packages/gateway/src/providers/claude/oauth\.ts'''
+]
diff --git a/apps/api/tests/room-watchdog.test.ts b/apps/api/tests/room-watchdog.test.ts
index b22353a15..a76bda91c 100644
--- a/apps/api/tests/room-watchdog.test.ts
+++ b/apps/api/tests/room-watchdog.test.ts
@@ -253,9 +253,9 @@ describe("Room Watchdog and Anti-Freeze Protection", () => {
         paneTitle: pane.title,
         runtimeId: "cli:gemini",
         durationMs: 8000,
-        killedAt: new Date().toISOString()
+        killedAt: new Date(Date.now() + 1_000).toISOString()
       },
-      createdAt: new Date().toISOString()
+      createdAt: new Date(Date.now() + 1_000).toISOString()
     };
 
     const recorded = await store.recordRoomEvent(watchdogEvent);