mathiasandClaude Opus 5.5 8a91feb02b fix(ingestion): every brain/raw/ reader goes through an os.Root; symlinks are inert ...

raw/ is writable via Syncthing (a sendreceive folder shared with
flamingo, symlinks synced) and by the brain CronJobs, and several
readers followed symlinks out of it:

- /pending and brain_pending showed a symlink target's contents;
  brain_promote would copy it into wiki/ (then brain-sync to Gitea);
  brain_reject would copy it into raw/rejected/.
- The watcher, which needs no API call at all, ingested symlinked files
  (WalkDir yields them; extract.Text followed them). Not in the issue;
  found while fixing it.
- Ingest checked a path then reopened it by name (TOCTOU).

OpenRawRoot opens brain/raw as an os.Root and refuses a raw/ that is
itself a symlink. ListPending, PromoteNote and RejectNote read through
it and refuse anything not a regular file. extract.TextIn reads through
a root (temp copy for pdf/docmark); /ingest-path, brain_ingest and the
watcher use it, and the watcher archives via the root too, so a file
swapped for a symlink after a check still cannot lead out.

Refs #153

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-03 16:47:43 +02:00

..

docmark_test.go

fix(ingest): parse docmark's SSE-framed response, not bare JSON

2026-07-09 08:53:24 +02:00

docmark.go

fix(ingest): parse docmark's SSE-framed response, not bare JSON

2026-07-09 08:53:24 +02:00

extract_test.go

feat(extract): implement PDF extraction via pdftotext

2026-04-23 15:53:46 +02:00

extract.go

fix(ingestion): every brain/raw/ reader goes through an os.Root; symlinks are inert

2026-10-03 16:47:43 +02:00

pdf.go

feat(extract): implement PDF extraction via pdftotext

2026-04-23 15:53:46 +02:00

root_test.go

fix(ingestion): every brain/raw/ reader goes through an os.Root; symlinks are inert

2026-10-03 16:47:43 +02:00