From 427ed9f1fbbc0971eb90af96e8d25eeefca62332 Mon Sep 17 00:00:00 2001
From: savez <saverio.menin@gmail.com>
Date: Fri, 3 Apr 2026 12:09:24 +0200
Subject: [PATCH] fix(security): add .mcp.json and opencode.json to .gitignore

Prevent MCP configuration files containing API tokens from being
tracked. These files are generated by `dvmi sync-config-ai` and
must remain local-only.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitignore | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.gitignore b/.gitignore
index 4e51137..7078c4c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,3 +56,7 @@ Desktop.ini
 .claude/
 specs/
 TODO.md
+
+# ─── MCP / AI tool configs (contain tokens) ─────────────────────────────────
+.mcp.json
+opencode.json