mathiasandClaude Opus 5.5 796d226497 feat(ingestion): symlink tripwire for the Syncthing-shared brain dir ...

The brain dir is a Syncthing sendreceive folder and Syncthing syncs
symlinks; search, vectorstore, context and graph readers follow one out
of the brain and would index or return what it points to (reproduced
with search.Query). Decision (#157): a tripwire now, brain-wide os.Root
readers next.

- symlinkguard.Scan lists every symlink inside the brain dir (skipping
  .git; the brain dir itself may be a mount symlink).
- At startup the server refuses to start while any exists, naming them.
- symlinkguard.Watch rescans every BRAIN_SYMLINK_SCAN_INTERVAL seconds
  (default 300) and sends one ntfy alert per new set of symlinks.

The live brain dir had 0 symlinks on 2026-10-03, checked before this
change, so deploying it does not trip.

Refs #157

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-03 17:04:41 +02:00

..

api

fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152)

2026-10-03 14:38:07 +00:00

audit

style: apply gofmt

2026-09-05 12:40:34 +02:00

brain

fix(brain): a one-word tunnel title must match the prose case-exactly

2026-09-17 00:08:40 +02:00

brainstore

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capture

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capturehttp

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

claim

feat(brain): validate the claim-property envelope on write (brain#21) (#102)

2026-08-22 08:58:34 +00:00

classification

feat(classification): data-sensitivity taxonomy + per-wing/repo tags (#50)

2026-06-22 22:42:05 +02:00

claudewatcher

fix(claudewatcher): scrub credentials embedded in URL userinfo

2026-09-30 16:08:17 +02:00

embed

feat(brain): hybrid BM25 + pgvector retrieval (opt-in)

2026-05-18 23:11:25 +02:00

extract

fix(ingest): parse docmark's SSE-framed response, not bare JSON

2026-07-09 08:53:24 +02:00

frontmatter

fix(frontmatter): consolidate 3 independent fence-parsers into one (#139)

2026-09-23 13:07:32 +00:00

gitea

fix(gitea): WriteFile creates via POST, updates via PUT (real contents API)

2026-06-23 17:22:37 +02:00

graph

fix(search,graph): M4b wiki/entities/ → tier=knowledge

2026-05-25 18:49:37 +02:00

graphstore

feat(graph,graphstore): M2 parse tier+topic from frontmatter, persist via Upsert (infra#72)

2026-05-25 12:35:38 +02:00

graphsync

feat(graph): wire graphsync into MCP write/ingest/tunnel handlers

2026-05-23 15:21:33 +02:00

llm

feat(brain): add Gemini as brain_answer's third LLM tier

2026-08-30 14:43:25 +02:00

mcp

fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152)

2026-10-03 14:38:07 +00:00

metrics

feat(ingestion): expose Prometheus /metrics for brain query latency

2026-05-22 07:13:05 +02:00

notes

feat(mcp): record and alert on a governance-file rewrite (#97) (#98)

2026-08-22 06:09:53 +00:00

oauth

feat(brain-mcp): OAuth 2.0 client_credentials flow for claude.ai

2026-05-18 22:21:54 +02:00

pipeline

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

provenance

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

reranker

feat(brain_answer): Qwen3-Reranker cross-encoder filter (opt-in)

2026-05-18 22:55:46 +02:00

search

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

session

style: apply gofmt

2026-09-05 12:40:34 +02:00

startupretry

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

symlinkguard

feat(ingestion): symlink tripwire for the Syncthing-shared brain dir

2026-10-03 17:04:41 +02:00

textutil

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

vectorstore

style: apply gofmt

2026-09-05 12:40:34 +02:00

watcher

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

webhook

fix(lint): check fmt.Fprintf errors in webhook handler (infra#190)

2026-07-09 08:29:39 +02:00

wiki

feat(pipeline): feed the current source page into the extraction prompt (#106) (#132)

2026-09-23 05:45:47 +00:00