libretechandClaude Opus 4.7
c9b8c4445b
internal/tenant/ provides FS, a sandboxed handle for a single tenant's notes directory. Implementation strategy: - Defence in depth: every relative path is validated up front (rejects "..", absolute paths, NUL bytes, empty), then handed to os.Root (Go 1.24+) which enforces the boundary at the syscall layer using openat(2)+RESOLVE_BENEATH on Linux. This closes TOCTOU races and symlink-target swapping. - WriteFile is atomic (write to .tmp, rename in-root). Mode 0o600 on files, 0o700 on directories. Tenant root is created with 0o700 by Open(). - Errors are normalised: fs.ErrNotExist -> ErrNotFound, anything os.Root rejects as "outside" the root -> ErrInvalidPath. The HTTP layer can map cleanly to 404 / 400. Tests cover the full traversal attack surface — "../", absolute paths, mixed separators, NUL bytes, "." and "" — plus symlink escapes and cross-tenant isolation. All vectors return errors; none escape the root. Closes #10. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
librenotes
Cloud-native, multi-tenant notes application. A fork of Notesium extended with authentication, per-user data isolation, sync, and PWA support so it can run as a hosted service at librenot.es.
Features
- Markdown notes with bi-directional links (Zettelkasten / evergreen notes)
- Embedded web app — no Electron, no Node runtime, single static binary
- Multi-tenant backend with magic-link authentication (in development)
- Offline-capable PWA with background sync (planned, Phase 4)
Build
Requires Go 1.20 or later.
go build ./cmd/librenotes
This produces a librenotes binary in the current directory. The web
frontend and shell completion are embedded into the binary at compile
time, so no extra files are needed at runtime.
A Makefile with build, test, run, and clean targets is provided
for convenience:
make build
make test
Run
./librenotes web --notes-dir ~/notes
See ./librenotes help for the full command list.
Development setup
A Nix flake provides a reproducible development environment with Go,
build tools, and the project CLIs. Use the plain dev shell for a
non-sandboxed Go toolchain:
nix develop .#dev
Alternatively, build a Docker-based dev environment:
docker build -f Dockerfile.dev -t librenotes-dev .
docker run --rm -it -v "$PWD:/workspace" librenotes-dev
The repository layout follows the standard Go project structure:
cmd/librenotes/ Binary entry point
internal/notesium/ Core notes package (forked from Notesium)
internal/notesium/web/ Embedded frontend assets
The Go module path is git.librete.ch/public/librenotes.
Fork attribution
librenotes is a fork of Notesium by Alon Swartz, used and redistributed under the MIT License. See NOTICE for the upstream commit hash at fork time and instructions for tracking upstream changes.
License
MIT — see LICENSE. Copyright is shared between the original Notesium author and the librenotes contributors.