feat: thin deployment shim — clone private source from GitHub at build time

The actual sumit-mcp-server source now lives in a private GitHub repo
(rockerritesh/sumit-mcp-server). This Space is just the deployment
front-end: a Dockerfile that clones that repo at build time using a
Space secret (GITHUB_TOKEN) and runs the server from the cloned source.

Runtime behavior unchanged. Source privacy improved.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitattributes

@@ -0,0 +1,34 @@
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.arrow filter=lfs diff=lfs merge=lfs -text
+*.bin filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.ckpt filter=lfs diff=lfs merge=lfs -text
+*.ftz filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.h5 filter=lfs diff=lfs merge=lfs -text
+*.joblib filter=lfs diff=lfs merge=lfs -text
+*.lfs.* filter=lfs diff=lfs merge=lfs -text
+*.model filter=lfs diff=lfs merge=lfs -text
+*.msgpack filter=lfs diff=lfs merge=lfs -text
+*.npy filter=lfs diff=lfs merge=lfs -text
+*.npz filter=lfs diff=lfs merge=lfs -text
+*.onnx filter=lfs diff=lfs merge=lfs -text
+*.ot filter=lfs diff=lfs merge=lfs -text
+*.parquet filter=lfs diff=lfs merge=lfs -text
+*.pb filter=lfs diff=lfs merge=lfs -text
+*.pickle filter=lfs diff=lfs merge=lfs -text
+*.pkl filter=lfs diff=lfs merge=lfs -text
+*.pt filter=lfs diff=lfs merge=lfs -text
+*.pth filter=lfs diff=lfs merge=lfs -text
+*.rar filter=lfs diff=lfs merge=lfs -text
+*.safetensors filter=lfs diff=lfs merge=lfs -text
+saved_model/**/* filter=lfs diff=lfs merge=lfs -text
+*.tar.* filter=lfs diff=lfs merge=lfs -text
+*.tar filter=lfs diff=lfs merge=lfs -text
+*.tflite filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.wasm filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
+*tfevents* filter=lfs diff=lfs merge=lfs -text

Dockerfile

@@ -0,0 +1,41 @@
+# syntax=docker/dockerfile:1.4
+#
+# HF Spaces shim: clones private GitHub source at build time using
+# a Space secret (GITHUB_TOKEN) and runs from there. This keeps the
+# actual source code private on GitHub while the Space runs publicly.
+#
+# Required HF Space secret:
+#   GITHUB_TOKEN = a GitHub PAT with read access to
+#                  github.com/rockerritesh/sumit-mcp-server (private)
+#
+# See: https://huggingface.co/docs/hub/en/spaces-sdks-docker#buildtime
+
+FROM python:3.13-slim
+
+# Install uv + git
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends git ca-certificates && \
+    rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Clone private source using HF build-time secret
+RUN --mount=type=secret,id=GITHUB_TOKEN,required=true \
+    GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) && \
+    git clone --depth=1 --branch=main \
+        "https://x-access-token:${GITHUB_TOKEN}@github.com/rockerritesh/sumit-mcp-server.git" \
+        . && \
+    git log -1 --pretty=format:"source: %H %s%n" > /app/BUILD_INFO
+
+# Install dependencies from the cloned project (locked)
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --locked
+
+# HF Spaces runtime expectations
+EXPOSE 7860
+ENV PORT=7860
+ENV UV_CACHE_DIR=/app/.cache/uv
+RUN mkdir -p /app/.cache/uv && chmod -R 777 /app/.cache
+
+CMD ["uv", "run", "sumit-mcp-server"]

README.md

@@ -0,0 +1,28 @@
+---
+license: mit
+title: SUMIT SERVER MCP
+sdk: docker
+emoji: "\U0001F680"
+colorFrom: yellow
+colorTo: green
+short_description: Federated memory MCP server with audit trail
+---
+
+# sumit-mcp-server
+
+Federated memory MCP server for AI agents — every memory has a transaction trail, every read and write is audited, every version is preserved.
+
+## About this Space
+
+This Space is a **thin deployment shell**. The actual server source lives in a private GitHub repository and is cloned at build time using a Personal Access Token stored as a Space secret (`GITHUB_TOKEN`). The container runs publicly; the source stays private.
+
+**Source (private):** `github.com/rockerritesh/sumit-mcp-server`
+
+## Part of the trust layer for AI agents
+
+- **[agentguard](https://github.com/rockerritesh/agentguard)** — zero-trust identity, policy, mTLS, and audit for agents ("Istio for agents")
+- **this Space** — audited memory infrastructure for agents (the memory half of the trust layer)
+- **[spiffe-core](https://github.com/rockerritesh/spiffe-core)** — SPIFFE identity primitives
+- **[trat-multi-agent](https://github.com/rockerritesh/trat-multi-agent)** — IETF Transaction Tokens for multi-agent workflows
+
+Cross-linked so any one walks you through the whole story.