axon-rag 0.1.0__tar.gz

axon_rag-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Open Source Contributor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

axon_rag-0.1.0/PKG-INFO

@@ -0,0 +1,300 @@
+Metadata-Version: 2.4
+Name: axon-rag
+Version: 0.1.0
+Summary: General-purpose open-source RAG engine with multi-LLM, hybrid retrieval, GraphRAG, and MCP support
+Author: Open Source Contributor
+License: MIT
+Project-URL: Homepage, https://github.com/jyunming/studio_brain_open
+Project-URL: Documentation, https://github.com/jyunming/studio_brain_open/tree/main/docs
+Project-URL: Repository, https://github.com/jyunming/studio_brain_open
+Project-URL: Bug Tracker, https://github.com/jyunming/studio_brain_open/issues
+Keywords: rag,llm,embeddings,vector-search,knowledge-base,mcp,ollama,graphrag
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: numpy>=1.20.0
+Requires-Dist: pydantic>=2.0.0
+Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: sentence-transformers>=3.0.0
+Requires-Dist: tf-keras>=2.0.0
+Requires-Dist: ollama>=0.1.0
+Requires-Dist: openai>=1.0.0
+Requires-Dist: google-genai>=1.4.0
+Requires-Dist: rank_bm25>=0.2.2
+Requires-Dist: httpx>=0.25.0
+Requires-Dist: mcp>=1.0.0
+Requires-Dist: pyyaml>=6.0.0
+Requires-Dist: pandas>=2.0.0
+Requires-Dist: Pillow>=10.0.0
+Requires-Dist: tqdm>=4.66.0
+Requires-Dist: fastapi>=0.100.0
+Requires-Dist: uvicorn>=0.22.0
+Requires-Dist: python-docx>=1.0.0
+Requires-Dist: python-pptx>=0.6.18
+Requires-Dist: pymupdf>=1.24.0
+Requires-Dist: pypdf>=4.0.0
+Requires-Dist: openpyxl>=3.1.0
+Requires-Dist: pyarrow>=10.0.0
+Requires-Dist: prompt_toolkit>=3.0.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: tiktoken>=0.7.0
+Requires-Dist: lancedb>=0.8.0
+Provides-Extra: ui
+Requires-Dist: streamlit>=1.30.0; extra == "ui"
+Provides-Extra: chroma
+Requires-Dist: chromadb>=0.4.0; extra == "chroma"
+Provides-Extra: qdrant
+Requires-Dist: qdrant-client<2.0.0,>=1.7.0; extra == "qdrant"
+Provides-Extra: fastembed
+Requires-Dist: fastembed<1.0.0,>=0.1.0; extra == "fastembed"
+Provides-Extra: graphrag
+Requires-Dist: networkx>=3.0; extra == "graphrag"
+Requires-Dist: leidenalg>=0.11.0; extra == "graphrag"
+Requires-Dist: igraph>=1.0.0; extra == "graphrag"
+Provides-Extra: gliner
+Requires-Dist: gliner>=0.2.0; extra == "gliner"
+Provides-Extra: llmlingua
+Requires-Dist: llmlingua>=0.2.0; extra == "llmlingua"
+Provides-Extra: rebel
+Requires-Dist: transformers>=4.20.0; extra == "rebel"
+Provides-Extra: loaders
+Requires-Dist: ebooklib>=0.18; extra == "loaders"
+Requires-Dist: striprtf>=0.0.26; extra == "loaders"
+Requires-Dist: extract-msg>=0.28.0; extra == "loaders"
+Provides-Extra: eval
+Requires-Dist: deepeval>=0.21.0; extra == "eval"
+Provides-Extra: dev
+Requires-Dist: pytest<8.0.0,>=7.4.0; extra == "dev"
+Requires-Dist: pytest-asyncio<1.0.0,>=0.21.0; extra == "dev"
+Requires-Dist: pytest-cov<5.0.0,>=4.1.0; extra == "dev"
+Requires-Dist: black==23.12.1; extra == "dev"
+Requires-Dist: ruff<1.0.0,>=0.1.0; extra == "dev"
+Requires-Dist: mypy<2.0.0,>=1.5.0; extra == "dev"
+Requires-Dist: pre-commit<4.0.0,>=3.4.0; extra == "dev"
+Provides-Extra: all
+Requires-Dist: streamlit>=1.30.0; extra == "all"
+Requires-Dist: chromadb>=0.4.0; extra == "all"
+Requires-Dist: qdrant-client<2.0.0,>=1.7.0; extra == "all"
+Requires-Dist: fastembed<1.0.0,>=0.1.0; extra == "all"
+Requires-Dist: networkx>=3.0; extra == "all"
+Requires-Dist: leidenalg>=0.11.0; extra == "all"
+Requires-Dist: igraph>=1.0.0; extra == "all"
+Requires-Dist: gliner>=0.2.0; extra == "all"
+Requires-Dist: llmlingua>=0.2.0; extra == "all"
+Requires-Dist: transformers>=4.20.0; extra == "all"
+Requires-Dist: ebooklib>=0.18; extra == "all"
+Requires-Dist: striprtf>=0.0.26; extra == "all"
+Requires-Dist: extract-msg>=0.28.0; extra == "all"
+Dynamic: license-file
+
+<div align="center">
+  <img src="docs/assets/repl-animation.gif" alt="Axon" width="400" />
+
+  <h3>Your documents, answerable. On your hardware.</h3>
+
+  <p>
+    Drop in PDFs, code, spreadsheets, or URLs — ask anything, get cited answers from a local LLM.<br/>
+    Nothing leaves your machine.
+  </p>
+
+  [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+  [![Tests](https://img.shields.io/badge/tests-passing-brightgreen.svg)](tests/)
+  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+  [![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)
+
+</div>
+
+---
+
+<div align="center">
+  <img src="docs/assets/repl-demo.png" alt="Axon REPL startup" width="820" />
+</div>
+
+---
+
+## 🤔 Why Axon?
+
+Most RAG tools make you choose between **cloud power** and **data privacy**. Axon runs entirely on your hardware — full capability, zero egress.
+
+- 🔒 **Private by default** — all inference runs locally via Ollama or vLLM. No API key, no upload, no telemetry.
+- 📄 **Ingest anything** — 54 file formats (PDF, DOCX, Jupyter, code, images, URLs) in one command. SHA-256 dedup skips unchanged files.
+- 🤖 **Works in your tools** — `@axon` in Copilot Chat, MCP for Claude Code / Codex / Gemini CLI / Cursor, Graph panel in VS Code or your browser.
+- 🤝 **Built for teams** — share your knowledge base with signed, revocable read-only keys. Per-user permissions, full audit trail, no extra infrastructure.
+- 🕸️ **See your knowledge as a graph** — interactive 3D entity-relationship graph. Embedded webview in VS Code; opens in your browser everywhere else. Click any node to jump to the exact source line.
+- 🔬 **Production-grade retrieval** — hybrid search, reranking, HyDE, multi-query expansion, and automatic web fallback. Zero manual tuning.
+
+---
+
+## ✨ Capabilities
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+### 🔍 Retrieval
+- Hybrid semantic + keyword search
+- HyDE, multi-query, step-back, query decomposition
+- Sentence-window context retrieval
+- BGE reranker for second-pass precision
+- Web fallback via Brave Search (CRAG-Lite)
+- Smart per-question query routing
+
+</td>
+<td width="50%" valign="top">
+
+### 🧠 Graph Intelligence
+- **RAPTOR** — hierarchical corpus summaries
+- **GraphRAG** — entity/relation/community graph (local / global / hybrid)
+- **Code Graph** — file/class/function graph with import edges
+- Interactive 3D graph — embedded webview in VS Code, browser elsewhere
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+### 📥 Ingest Everything
+- **54 file formats** — PDF, DOCX, XLSX, PPTX, Jupyter, images, 24 code formats
+- URL ingestion — any public web page
+- SHA-256 dedup skips unchanged files
+- Stale detection for modified sources
+- 4 content-aware chunking strategies
+
+</td>
+<td width="50%" valign="top">
+
+### 🔧 LLMs & Embeddings
+- **Local:** Ollama, vLLM
+- **Cloud:** OpenAI, Gemini, xAI Grok, GitHub Copilot (API)
+- Hot-swap provider and model — no restart needed
+- Streaming on all providers
+- 4 embedding providers; BGE-M3 for multilingual
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+### 🏗️ Projects & Privacy
+- Isolated knowledge base per project, with nesting
+- Federated search across projects (`@projects`, `@mounts`, `@store`)
+- **Strict offline / air-gapped mode** — zero outbound calls
+- **AxonStore** — signed read-only sharing across OS users
+
+</td>
+<td width="50%" valign="top">
+
+### 🛡️ Governance & Agents
+- **Governance Console** — full audit trail of every query
+- Graceful maintenance states: `normal → draining → readonly → offline`
+- **REST API** — 54 endpoints with Swagger docs at `/docs`
+- **MCP server** — 30 tools for Claude Code, Codex, Gemini, Cursor, Copilot
+- **`@axon`** VS Code chat participant with Graph and Governance panels
+
+</td>
+</tr>
+</table>
+
+---
+
+## ⚡ Quick Start
+
+```bash
+pip install -e .   # requires Python 3.10+ and Ollama
+axon               # launches the interactive REPL
+```
+
+**[→ Full installation guide with VS Code, MCP, and cloud provider setup](docs/GETTING_STARTED.md)**
+
+---
+
+## 🚀 Entry Points
+
+| Command | Starts | Default Port | Best For |
+|---------|--------|-------------|---------|
+| `axon` | Interactive REPL | — | Day-to-day exploration, power users |
+| `axon-api` | FastAPI REST server | `8000` | Agents, scripts, CI pipelines |
+| `axon-mcp` | MCP stdio server | — | Any MCP-compatible agent (Claude Code, Codex, Gemini CLI, Cursor, Copilot…) |
+| `axon-ui` | Streamlit UI | `8501` | Browser-based exploration |
+
+---
+
+## 🔌 VS Code + GitHub Copilot
+
+<div align="center">
+  <img src="docs/assets/AxonCopilot.gif" alt="Axon Copilot integration" width="400" />
+</div>
+
+<br/>
+
+<div align="center">
+  <img src="docs/assets/vscode-graph-panel.png" alt="Axon VS Code Graph Panel — answer, cited sources, and interactive 3D code graph" width="820" />
+</div>
+
+<br/>
+
+Install the bundled VSIX to unlock the **`@axon` chat participant**, **Knowledge Graph panel**, **Code Graph panel**, and **Governance dashboard** — directly inside VS Code alongside Copilot.
+
+```
+Extensions panel  →  "..."  →  Install from VSIX...
+→  run `axon-ext`  (or install from VSIX manually)
+```
+
+Or connect via MCP for Copilot agent mode — point `.vscode/mcp.json` at `axon-mcp` and all 30 tools appear in the agent hammer menu automatically.
+
+**[Full setup guide →](docs/SETUP.md)**
+
+---
+
+## 📚 Documentation
+
+**Getting started**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🚀 | **[Getting Started](docs/GETTING_STARTED.md)** | First-time walkthrough — ingest, query, settings |
+| ⚙️ | **[Setup Guide](docs/SETUP.md)** | Install, models, VS Code extension, MCP connection |
+| 🔧 | **[Troubleshooting](docs/TROUBLESHOOTING.md)** | Common errors and platform-specific fixes |
+
+**Reference**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🔑 | **[Admin Reference](docs/ADMIN_REFERENCE.md)** | Every endpoint, REPL command, CLI flag, and config option |
+| ⚡ | **[Quick Reference](docs/QUICKREF.md)** | Commands and flags at a glance |
+| 📡 | **[API Reference](docs/API_REFERENCE.md)** | Full REST endpoint reference with request/response schemas |
+| 🔌 | **[MCP Tools](docs/MCP_TOOLS.md)** | All 30 MCP tool signatures with parameter defaults |
+
+**Deep dives**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🤖 | **[Model Guide](docs/MODEL_GUIDE.md)** | Choosing LLM and embeddings; per-provider config examples |
+| 🔬 | **[Advanced RAG](docs/ADVANCED_RAG.md)** | HyDE, RAPTOR, GraphRAG, CRAG-Lite — how each technique works |
+| 🌐 | **[Web Search](docs/WEB_SEARCH.md)** | Brave Search integration, CRAG-Lite fallback setup |
+| 🏝️ | **[Offline / Air-gap Guide](docs/OFFLINE_GUIDE.md)** | Full air-gap setup, model pre-download, local-assets-only mode |
+| 💻 | **[Code RAG Guide](docs/CODE_RAG_GUIDE.md)** | Code graph retrieval and structural search |
+| 🤝 | **[AxonStore](docs/AXON_STORE.md)** | Multi-user sharing, revocation, and the lease lifecycle |
+| 📊 | **[Governance Console](docs/GOVERNANCE_CONSOLE.md)** | Audit trail, maintenance runbook, session management |
+| 📈 | **[Evaluation Guide](docs/EVALUATION.md)** | RAGAS metrics, running evals, building testsets |
+| 🛠️ | **[Development Guide](docs/DEVELOPMENT.md)** | Tests, contributing, pre-commit hooks |
+
+---
+
+## 🔒 Security
+
+Ingestion is sandboxed to a configurable base directory (`RAG_INGEST_BASE`). Requests outside it are rejected with `403`. See [SECURITY.md](SECURITY.md).
+
+## 📄 License
+
+MIT — see [LICENSE](LICENSE).

axon_rag-0.1.0/README.md

@@ -0,0 +1,201 @@
+<div align="center">
+  <img src="docs/assets/repl-animation.gif" alt="Axon" width="400" />
+
+  <h3>Your documents, answerable. On your hardware.</h3>
+
+  <p>
+    Drop in PDFs, code, spreadsheets, or URLs — ask anything, get cited answers from a local LLM.<br/>
+    Nothing leaves your machine.
+  </p>
+
+  [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+  [![Tests](https://img.shields.io/badge/tests-passing-brightgreen.svg)](tests/)
+  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+  [![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)
+
+</div>
+
+---
+
+<div align="center">
+  <img src="docs/assets/repl-demo.png" alt="Axon REPL startup" width="820" />
+</div>
+
+---
+
+## 🤔 Why Axon?
+
+Most RAG tools make you choose between **cloud power** and **data privacy**. Axon runs entirely on your hardware — full capability, zero egress.
+
+- 🔒 **Private by default** — all inference runs locally via Ollama or vLLM. No API key, no upload, no telemetry.
+- 📄 **Ingest anything** — 54 file formats (PDF, DOCX, Jupyter, code, images, URLs) in one command. SHA-256 dedup skips unchanged files.
+- 🤖 **Works in your tools** — `@axon` in Copilot Chat, MCP for Claude Code / Codex / Gemini CLI / Cursor, Graph panel in VS Code or your browser.
+- 🤝 **Built for teams** — share your knowledge base with signed, revocable read-only keys. Per-user permissions, full audit trail, no extra infrastructure.
+- 🕸️ **See your knowledge as a graph** — interactive 3D entity-relationship graph. Embedded webview in VS Code; opens in your browser everywhere else. Click any node to jump to the exact source line.
+- 🔬 **Production-grade retrieval** — hybrid search, reranking, HyDE, multi-query expansion, and automatic web fallback. Zero manual tuning.
+
+---
+
+## ✨ Capabilities
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+### 🔍 Retrieval
+- Hybrid semantic + keyword search
+- HyDE, multi-query, step-back, query decomposition
+- Sentence-window context retrieval
+- BGE reranker for second-pass precision
+- Web fallback via Brave Search (CRAG-Lite)
+- Smart per-question query routing
+
+</td>
+<td width="50%" valign="top">
+
+### 🧠 Graph Intelligence
+- **RAPTOR** — hierarchical corpus summaries
+- **GraphRAG** — entity/relation/community graph (local / global / hybrid)
+- **Code Graph** — file/class/function graph with import edges
+- Interactive 3D graph — embedded webview in VS Code, browser elsewhere
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+### 📥 Ingest Everything
+- **54 file formats** — PDF, DOCX, XLSX, PPTX, Jupyter, images, 24 code formats
+- URL ingestion — any public web page
+- SHA-256 dedup skips unchanged files
+- Stale detection for modified sources
+- 4 content-aware chunking strategies
+
+</td>
+<td width="50%" valign="top">
+
+### 🔧 LLMs & Embeddings
+- **Local:** Ollama, vLLM
+- **Cloud:** OpenAI, Gemini, xAI Grok, GitHub Copilot (API)
+- Hot-swap provider and model — no restart needed
+- Streaming on all providers
+- 4 embedding providers; BGE-M3 for multilingual
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+### 🏗️ Projects & Privacy
+- Isolated knowledge base per project, with nesting
+- Federated search across projects (`@projects`, `@mounts`, `@store`)
+- **Strict offline / air-gapped mode** — zero outbound calls
+- **AxonStore** — signed read-only sharing across OS users
+
+</td>
+<td width="50%" valign="top">
+
+### 🛡️ Governance & Agents
+- **Governance Console** — full audit trail of every query
+- Graceful maintenance states: `normal → draining → readonly → offline`
+- **REST API** — 54 endpoints with Swagger docs at `/docs`
+- **MCP server** — 30 tools for Claude Code, Codex, Gemini, Cursor, Copilot
+- **`@axon`** VS Code chat participant with Graph and Governance panels
+
+</td>
+</tr>
+</table>
+
+---
+
+## ⚡ Quick Start
+
+```bash
+pip install -e .   # requires Python 3.10+ and Ollama
+axon               # launches the interactive REPL
+```
+
+**[→ Full installation guide with VS Code, MCP, and cloud provider setup](docs/GETTING_STARTED.md)**
+
+---
+
+## 🚀 Entry Points
+
+| Command | Starts | Default Port | Best For |
+|---------|--------|-------------|---------|
+| `axon` | Interactive REPL | — | Day-to-day exploration, power users |
+| `axon-api` | FastAPI REST server | `8000` | Agents, scripts, CI pipelines |
+| `axon-mcp` | MCP stdio server | — | Any MCP-compatible agent (Claude Code, Codex, Gemini CLI, Cursor, Copilot…) |
+| `axon-ui` | Streamlit UI | `8501` | Browser-based exploration |
+
+---
+
+## 🔌 VS Code + GitHub Copilot
+
+<div align="center">
+  <img src="docs/assets/AxonCopilot.gif" alt="Axon Copilot integration" width="400" />
+</div>
+
+<br/>
+
+<div align="center">
+  <img src="docs/assets/vscode-graph-panel.png" alt="Axon VS Code Graph Panel — answer, cited sources, and interactive 3D code graph" width="820" />
+</div>
+
+<br/>
+
+Install the bundled VSIX to unlock the **`@axon` chat participant**, **Knowledge Graph panel**, **Code Graph panel**, and **Governance dashboard** — directly inside VS Code alongside Copilot.
+
+```
+Extensions panel  →  "..."  →  Install from VSIX...
+→  run `axon-ext`  (or install from VSIX manually)
+```
+
+Or connect via MCP for Copilot agent mode — point `.vscode/mcp.json` at `axon-mcp` and all 30 tools appear in the agent hammer menu automatically.
+
+**[Full setup guide →](docs/SETUP.md)**
+
+---
+
+## 📚 Documentation
+
+**Getting started**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🚀 | **[Getting Started](docs/GETTING_STARTED.md)** | First-time walkthrough — ingest, query, settings |
+| ⚙️ | **[Setup Guide](docs/SETUP.md)** | Install, models, VS Code extension, MCP connection |
+| 🔧 | **[Troubleshooting](docs/TROUBLESHOOTING.md)** | Common errors and platform-specific fixes |
+
+**Reference**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🔑 | **[Admin Reference](docs/ADMIN_REFERENCE.md)** | Every endpoint, REPL command, CLI flag, and config option |
+| ⚡ | **[Quick Reference](docs/QUICKREF.md)** | Commands and flags at a glance |
+| 📡 | **[API Reference](docs/API_REFERENCE.md)** | Full REST endpoint reference with request/response schemas |
+| 🔌 | **[MCP Tools](docs/MCP_TOOLS.md)** | All 30 MCP tool signatures with parameter defaults |
+
+**Deep dives**
+
+| | Guide | What it covers |
+|-|-------|---------------|
+| 🤖 | **[Model Guide](docs/MODEL_GUIDE.md)** | Choosing LLM and embeddings; per-provider config examples |
+| 🔬 | **[Advanced RAG](docs/ADVANCED_RAG.md)** | HyDE, RAPTOR, GraphRAG, CRAG-Lite — how each technique works |
+| 🌐 | **[Web Search](docs/WEB_SEARCH.md)** | Brave Search integration, CRAG-Lite fallback setup |
+| 🏝️ | **[Offline / Air-gap Guide](docs/OFFLINE_GUIDE.md)** | Full air-gap setup, model pre-download, local-assets-only mode |
+| 💻 | **[Code RAG Guide](docs/CODE_RAG_GUIDE.md)** | Code graph retrieval and structural search |
+| 🤝 | **[AxonStore](docs/AXON_STORE.md)** | Multi-user sharing, revocation, and the lease lifecycle |
+| 📊 | **[Governance Console](docs/GOVERNANCE_CONSOLE.md)** | Audit trail, maintenance runbook, session management |
+| 📈 | **[Evaluation Guide](docs/EVALUATION.md)** | RAGAS metrics, running evals, building testsets |
+| 🛠️ | **[Development Guide](docs/DEVELOPMENT.md)** | Tests, contributing, pre-commit hooks |
+
+---
+
+## 🔒 Security
+
+Ingestion is sandboxed to a configurable base directory (`RAG_INGEST_BASE`). Requests outside it are rejected with `403`. See [SECURITY.md](SECURITY.md).
+
+## 📄 License
+
+MIT — see [LICENSE](LICENSE).