Sync from GitHub himanshu748/ContextFirewall@ddbc82a33f0907eb351883be52cc026e4a7dfdb5

Sync from GitHub himanshu748/ContextFirewall@972a3c7543a04156d3e1edf954e61a18f43169db

Sync from GitHub himanshu748/ContextFirewall@0d5dc22b776588c59d0d38fa4fe96596c02ebb2d

Sync from GitHub himanshu748/ContextFirewall@3120e8754cae33dd4a7a844e6dc01957a72cb11e

Sync from GitHub himanshu748/ContextFirewall@46fe5cc3ee5c3ee03a1ab5dbd7aac71850376bcd

Deploy Supabase Auth + per-account API key resolver

fix(security): admin-gate destructive reset; non-destructive idempotent demo seed

fix: uvicorn --proxy-headers so MCP redirect uses https (fixes hosted MCP handshake)

fix(mcp): allow public Space host (disable DNS-rebinding host check); json responses

Headline MCP server at /mcp; remember + activity endpoints; hardened contradiction parsing

feat(privacy): redact secrets at ingest; block on marker; defensive read-path redaction

chore: remove stray backend/ dir uploaded to wrong path

fix: remove em dashes from firewall reasons and seed (correct Space root paths)

fix: remove em dashes from firewall reasons, comments, and seed text

Fix /ingest ordinal coercion + clean error

/pack returns full audit + evidence ids on verdicts

Baseline = real raw recall (assembled), drop pooler-exhausting GRAPH_COMPLETION call

Swap demo seed to generic taskflow-api sample; refresh queries; generalize secret hydration

Add neo4j + asyncpg + pgvector drivers for managed stores

expose block_check in MemoryVerdict

idempotent /demo/seed (prune-first) + /reset endpoint

Deploy ContextFirewall backend (FastAPI + Cognee, local stores)

initial commit