@andespindola/brainlink 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.6.0
+
+- **Declarative vault git remote (`vaultRemote`).** New optional config field naming the git remote used to version the vault. When set and `autoVersion` is `true`, Brainlink ensures the vault git repo exists and its `origin` points to that remote before the auto-version push (init + add/update origin, idempotent). When unset, versioning uses whatever `origin` already exists and stays a no-op if there is none — Brainlink never provisions a remote on its own. `autoVersion` still defaults to `false`; inline-credential URLs are rejected.
+
 ## 1.5.0
 
 - **Graph shows every node at any zoom.** The viewport stream previously replaced nodes with per-context clusters below a zoom threshold, so nodes vanished when you zoomed out and reappeared on approach. Graphs that fit a cap (6000 nodes) now render every node in near mode at all zoom levels; larger graphs keep the far/mid/near level-of-detail.

package/README.md

@@ -1156,6 +1156,8 @@ If no `vault` is configured and no `--vault` flag is passed, Brainlink uses `$HO
   "defaultAgent": "shared",
   "autoIndexOnWrite": true,
   "autoCanonicalContextLinks": true,
+  "autoVersion": false,
+  "vaultRemote": "git@github.com:you/brainlink-vault.git",
   "autoUpdateCheck": true,
   "updateCheckIntervalMs": 86400000,
   "defaultSearchLimit": 8,
@@ -1190,6 +1192,7 @@ If no `vault` is configured and no `--vault` flag is passed, Brainlink uses `$HO
 
 `autoIndexOnWrite` is optional and defaults to `true`. Set it to `false` to defer indexing after writes.
 `autoVersion` is optional and defaults to `false`. When enabled (e.g. by `blink vault-provision` / `brainlink_vault_provision`), a successful index that changed Markdown commits and pushes the vault to its git remote automatically, best-effort — a git or network failure is logged and never breaks indexing. It is a no-op unless the vault is a git repo with an `origin` remote.
+`vaultRemote` is optional. When set and `autoVersion` is `true`, Brainlink ensures the vault git repo exists and its `origin` points to this remote before pushing (initializing the repo and adding/updating `origin` as needed). When it is unset, versioning uses whatever `origin` the vault git repo already has, and stays a no-op if there is none — Brainlink never provisions a remote on its own. Inline-credential URLs (e.g. `https://user:token@…`) are rejected; use SSH or a git credential helper.
 `vaultEncryption` is optional and defaults to `false`. When enabled, vault versioning commits AES-256-GCM ciphertext (`<note>.md.enc`) and git-ignores the plaintext Markdown, so the repository is opaque to anyone without the key — only a Brainlink instance holding the per-vault key can decrypt it. The key lives at `$BRAINLINK_HOME/keys/vault-versioning-<hash>.key` (outside the vault, never committed) or can be supplied via `BRAINLINK_VAULT_KEY` to restore an encrypted vault on another machine. Pull, restore and clone decrypt back to Markdown before reindexing; encryption is deterministic per note, so unchanged notes add no git churn. `blink vault-provision` enables this by default.
 `autoCanonicalContextLinks` is optional and defaults to `true`. When enabled, `blink add`, `brainlink_add_note` and `brainlink_add_file` add a canonical `## Context Links` entry to the inferred context hub, creating that hub when needed.
 `autoUpdateCheck` is optional and defaults to `true`. Brainlink checks the npm registry no more often than `updateCheckIntervalMs` and prints an update notice to `stderr`; it never installs updates automatically.

package/dist/application/index-vault.js

@@ -5,7 +5,7 @@ import { ensureVault, readMarkdownFileSummaries } from '../infrastructure/file-s
 import { readIndexState, writeIndexState } from '../infrastructure/index-state.js';
 import { ensureSearchPackManifest } from '../infrastructure/search-packs.js';
 import { openKnowledgeStore } from '../infrastructure/knowledge-store/index.js';
-import { autoVersionVault } from './vault-git-core.js';
+import { autoVersionVault, initVaultGit } from './vault-git-core.js';
 import { assembleIndexedDocuments, createTitleMaps, decidePackRebuild, detectChanges, embedChangedDocuments, rebuildSearchPacksIfNeeded } from './index-vault-phases.js';
 const toIndexResult = (documents) => ({
     documentCount: documents.length,
@@ -177,6 +177,12 @@ export const indexVaultWithOptions = async (vaultPath, options) => {
         // origin remote — commitVault itself skips when nothing is staged.
         if (config.autoVersion && changedDocumentsByPath.size > 0) {
             try {
+                // When a remote is configured, ensure the vault git repo exists and its
+                // origin points there before pushing. Without it, autoVersionVault falls
+                // back to whatever origin already exists (no-op if none).
+                if (config.vaultRemote) {
+                    await initVaultGit(absoluteVaultPath, { remote: config.vaultRemote });
+                }
                 await autoVersionVault(absoluteVaultPath, `chore(vault): update ${new Date().toISOString()}`);
             }
             catch (error) {

package/dist/infrastructure/config.js

@@ -16,6 +16,7 @@ export const defaultBrainlinkConfig = {
     autoIndexOnWrite: true,
     autoCanonicalContextLinks: true,
     autoVersion: false,
+    vaultRemote: undefined,
     vaultEncryption: false,
     autoUpdateCheck: true,
     updateCheckIntervalMs: 86_400_000,
@@ -218,6 +219,9 @@ const sanitizeConfig = (value) => ({
         ? value.autoCanonicalContextLinks
         : defaultBrainlinkConfig.autoCanonicalContextLinks,
     autoVersion: typeof value.autoVersion === 'boolean' ? value.autoVersion : defaultBrainlinkConfig.autoVersion,
+    vaultRemote: typeof value.vaultRemote === 'string' && value.vaultRemote.trim().length > 0
+        ? value.vaultRemote.trim()
+        : defaultBrainlinkConfig.vaultRemote,
     vaultEncryption: typeof value.vaultEncryption === 'boolean' ? value.vaultEncryption : defaultBrainlinkConfig.vaultEncryption,
     autoUpdateCheck: typeof value.autoUpdateCheck === 'boolean' ? value.autoUpdateCheck : defaultBrainlinkConfig.autoUpdateCheck,
     updateCheckIntervalMs: typeof value.updateCheckIntervalMs === 'number' && Number.isFinite(value.updateCheckIntervalMs) && value.updateCheckIntervalMs > 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andespindola/brainlink",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Local-first knowledge memory for agents with Markdown, backlinks, indexing and context retrieval.",
   "type": "module",
   "license": "MIT",