feat: initial commit from workspace-mcp

.dxtignore

@@ -0,0 +1,67 @@
+# =============================================================================
+# .dxtignore — defense-in-depth denylist for dxt pack
+#
+# IMPORTANT: Always use dxt-safe-pack.sh instead of bare `dxt pack`.
+# The script guarantees only git-tracked files are packaged.
+# This file exists as a safety net in case someone runs `dxt pack` directly.
+# =============================================================================
+
+# ---- Caches ----------------------------------------------------------------
+.mypy_cache
+__pycache__
+*.py[cod]
+*.so
+.pytest_cache
+.ruff_cache
+
+# ---- Build / packaging -----------------------------------------------------
+*.egg-info
+build/
+dist/
+
+# ---- Environments & tooling ------------------------------------------------
+.env
+.venv
+venv/
+.idea/
+.vscode/
+.claude/
+.serena/
+node_modules/
+
+# ---- macOS -----------------------------------------------------------------
+.DS_Store
+
+# ---- Secrets & credentials — CRITICAL --------------------------------------
+client_secret.json
+.credentials
+credentials.json
+token.pickle
+*_token
+*_secret
+.mcpregistry_*
+*.key
+*.pem
+*.p12
+*.crt
+*.der
+
+# ---- Test & debug -----------------------------------------------------------
+.coverage
+pytest_out.txt
+mcp_server_debug.log
+diff_output.txt
+
+# ---- Temp & editor files ----------------------------------------------------
+*.tmp
+*.log
+*.pid
+*.swp
+*.swo
+*~
+
+# ---- Development artifacts not for distribution -----------------------------
+scripts/
+.beads
+.github/
+tests/