Ignore CodeGraph indexes from the repository root as well.

A second ignore layer keeps the SQLite database local even if codegraph init overwrites the nested policy file.

Co-authored-by: Cursor <cursoragent@cursor.com>

.codegraph/.gitignore

@@ -1,5 +1,13 @@
 # CodeGraph data files — local to each machine, not for committing.
-# Ignore everything in .codegraph/ except this file itself, so transient
-# files (the database, daemon.pid, sockets, logs) never show up in git.
+# Ignore everything in .codegraph/ except this file itself. Known transients:
+# SQLite database and WAL/SHM, daemon.pid, sockets, and logs. The catch-all
+# covers anything codegraph init adds later.
+codegraph.db
+codegraph.db-wal
+codegraph.db-shm
+codegraph.db-journal
+daemon.pid
+*.sock
+*.log
 *
 !.gitignore

.gitignore

@@ -0,0 +1,4 @@
+# CodeGraph local index. A second layer so the database stays untracked even
+# if .codegraph/.gitignore is overwritten by codegraph init.
+.codegraph/*
+!.codegraph/.gitignore

README.md

@@ -38,6 +38,10 @@
 - 重试单一责任层：步骤级归调用方，传输级有界归 adapter，turn 上限归 runtime。
 - Workspace 路径授权 ≠ OS 沙箱。
 
+## CodeGraph
+
+`codegraph init` 的索引写在 `.codegraph/`。仓库只跟踪 `.codegraph/.gitignore`。SQLite 数据库、WAL、pid、socket 和日志留在本机；根目录 `.gitignore` 与该文件双重忽略，避免索引被提交。
+
 ## 开发
 
 在仓库根目录：