[ajianaz]

What

HTTP reporting for the privacy filter, as agreed with cloud in uteke-cloud#218: POST /remember and POST /room/remember return redacted (boolean, additive); in strict mode a write with a secret is refused with 400 {"error": "secret_detected", "message": ..., "kinds": [...]} (also PUT /memory), and the value is never echoed. POST /import reports redacted and rejected_secret; ImportResult gains the two counters (also counted in skipped).

Why

Part of #1464. Before this, strict mode would surface as a 500 and clients could not tell that the stored text differs from what they sent. MCP and CLI reporting follow in 2b-2c. Refs #1464.

Testing

• clippy -D warnings, fmt, cargo test --workspace and cargo run -p docgen (no diff) pass
• 3 new server tests (redacted flag and masked text, strict 400 on remember, room remember and update with nothing stored, room remember flag); the import counters are asserted in the core import test
• the pinned key list of the /remember response now includes redacted

[github-actions]

🔍 Cora AI Code Review

✅ No issues found. Code looks good!

---

Review powered by cora-code · BYOK · MIT