silica-core 0.7.0__tar.gz

silica_core-0.7.0/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "silica-core",
+  "interface": {
+    "displayName": "Silica Core"
+  },
+  "plugins": [
+    {
+      "name": "silica-core",
+      "source": {
+        "source": "local",
+        "path": "./"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Productivity"
+    }
+  ]
+}

silica_core-0.7.0/.claude-plugin/marketplace.json

@@ -0,0 +1,14 @@
+{
+  "name": "silica-core",
+  "description": "Silica for Claude Code: retrieval tools over the folder you work in, no model in the loop.",
+  "owner": {
+    "name": "Alessandro Carosia"
+  },
+  "plugins": [
+    {
+      "name": "silica-core",
+      "source": "./",
+      "description": "files, search, read, code_pack, write_note over MCP; located evidence, never answers."
+    }
+  ]
+}

silica_core-0.7.0/.claude-plugin/plugin.json

@@ -0,0 +1,17 @@
+{
+  "name": "silica-core",
+  "version": "0.6.1",
+  "description": "Retrieval tools for coding agents, no model in the loop: files, search, read, code_pack and write_note over the folder the session is opened in, served over MCP, plus a skill that teaches when to search and how to read coverage.",
+  "author": {
+    "name": "Alessandro Carosia"
+  },
+  "keywords": [
+    "retrieval",
+    "search",
+    "bm25",
+    "mcp",
+    "agents"
+  ],
+  "skills": "./silica/skills",
+  "mcpServers": "./mcp.json"
+}

silica_core-0.7.0/.codex-plugin/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "silica-core",
+  "version": "0.6.1",
+  "description": "Retrieval tools for coding agents, no model in the loop: files, search, read, code_pack and write_note over the folder the session is opened in, served over MCP, plus a skill that teaches when to search and how to read coverage.",
+  "author": {
+    "name": "Alessandro Carosia"
+  },
+  "keywords": [
+    "retrieval",
+    "search",
+    "bm25",
+    "mcp",
+    "agents"
+  ],
+  "skills": "./silica/skills",
+  "mcpServers": "./mcp.codex.json",
+  "interface": {
+    "displayName": "Silica Core",
+    "shortDescription": "Located evidence from your folder: search, read, inventory, code packs. No model, no memory lane.",
+    "developerName": "Alessandro Carosia"
+  }
+}

silica_core-0.7.0/.dockerignore

@@ -0,0 +1,15 @@
+# Allowlist, not a blocklist: the repo root holds .env, a 346 MB data/, dist/,
+# .venv and five caches, and a blocklist chasing them is one `git add` away from
+# leaking the next one into the build context.
+*
+!pyproject.toml
+!README.md
+!LICENSE
+!LICENSE-COMMERCIAL.md
+!silica/
+# setuptools-scm reads it in the build stage to derive the version; without it
+# the wheel installs as pyproject's fallback_version, 0.0.0, and the image can no
+# longer say which build it is. Costs ~115 MB of context. If that matters more
+# than the version does, drop this line and pass
+# --build-arg SETUPTOOLS_SCM_PRETEND_VERSION_FOR_SILICA_CORE=$(git describe --tags)
+!.git/

silica_core-0.7.0/.env.example

@@ -0,0 +1,77 @@
+# Silica core: every variable the code reads. Copy to ~/.silica/.env, or export
+# in the shell; an exported value wins over the file. Everything below is
+# optional: with no file at all the five tools work, offline, on the folder
+# the session is opened in.
+
+# ---------------------------------------------------------------------------
+# The root
+# ---------------------------------------------------------------------------
+# Silica serves the folder it is started in. SILICA_VAULT pins another root
+# and is honoured ONLY when exported in the shell or passed as --vault: in
+# this file it is ignored with a warning, because a pinned root belongs to
+# the invocation, not to every session on the machine.
+#
+#     export SILICA_VAULT=/path/to/folder
+
+# ---------------------------------------------------------------------------
+# The runtime directory
+# ---------------------------------------------------------------------------
+# `~/.silica` holds this file, `index/`, `tmp/` and `inbox/`. SILICA_HOME
+# points all four somewhere else and, like SILICA_VAULT, is read from the
+# shell alone: the variable that says where the config lives cannot live in
+# the config. Use it to run a second tree on one machine without either
+# inheriting the other's model, keys or index.
+#
+#     export SILICA_HOME=~/.silica-core
+
+# ---------------------------------------------------------------------------
+# Converters (`silica import FILE`)
+# ---------------------------------------------------------------------------
+# PDF text layer: pdfium (default, one wheel, no OCR), or a binary you install
+# and Silica calls: mineru (the only OCR path), docling, opendataloader.
+# SILICA_PDF_PROVIDER=pdfium
+# Languages mineru's OCR is given, comma-separated.
+# SILICA_PDF_OCR_LANG=en,it,fr,de,es
+# Root-relative folder the converted .md notes are written to.
+# SILICA_INBOX_DIR=Inbox
+
+# Audio and video are transcribed, not parsed: ffmpeg demuxes, then either an
+# OpenAI-compatible /v1/audio/transcriptions endpoint (`endpoint`, the
+# default; LM Studio, a local whisper server, or a hosted key) or a local
+# whisper.cpp binary (`whispercpp`).
+# SILICA_STT_PROVIDER=endpoint
+# SILICA_STT_BASE_URL=http://localhost:1236/v1
+# SILICA_STT_MODEL=whisper-1
+# SILICA_STT_API_KEY=lm-studio
+# SILICA_STT_LANG=auto
+# SILICA_STT_WHISPERCPP_BIN=/path/to/whisper-cli
+# SILICA_STT_WHISPERCPP_MODEL=/path/to/ggml-model.bin
+
+# ---------------------------------------------------------------------------
+# Embeddings extension (`silica index --embed`, `silica search --hybrid`)
+# ---------------------------------------------------------------------------
+# Off until a base URL is set. Any OpenAI-compatible /v1/embeddings endpoint:
+# LM Studio, llama-server, Ollama, or a hosted key. One vector per document.
+# Not part of the core contract: BM25 alone is what TOOLS.md promises.
+# SILICA_EMBEDDING_BASE_URL=http://localhost:1234/v1
+# SILICA_EMBEDDING_MODEL=text-embedding-qwen3-embedding-4b
+# SILICA_EMBEDDING_API_KEY=lm-studio
+
+# ---------------------------------------------------------------------------
+# REPL (`silica repl`), the one surface with a model in the loop
+# ---------------------------------------------------------------------------
+# "provider/model" with a preset provider, or a bare model id served by
+# SILICA_PROVIDER_BASE_URL. Presets and the key each one reads:
+#   openrouter  OPENROUTER_API_KEY     openai   OPENAI_API_KEY
+#   deepseek    DEEPSEEK_API_KEY       groq     GROQ_API_KEY
+#   mistral     MISTRAL_API_KEY        xai      XAI_API_KEY
+#   gemini      GEMINI_API_KEY         lmstudio, ollama: local, no key
+# SILICA_MODEL=openrouter/deepseek/deepseek-chat
+# SILICA_PROVIDER_BASE_URL=http://localhost:1234/v1
+# SILICA_PROVIDER_API_KEY=
+
+# ---------------------------------------------------------------------------
+# Obsidian bridge (`silica connect`, needs the [connect] extra)
+# ---------------------------------------------------------------------------
+# SILICA_WS_PORT=0
+# SILICA_WS_TOKEN=

silica_core-0.7.0/.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# Renders the "Sponsor" button on the repo, on issues and on PRs.
+# github: needs Sponsors enabled at github.com/sponsors first, or the button stays hidden.
+github: [kiycoh]
+ko_fi: kiycoh

silica_core-0.7.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,26 @@
+name: Bug report
+description: Something Silica does that it should not.
+labels: ["bug"]
+body:
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened
+      description: What you ran, what you expected, what you got instead. A minimal reproduction helps most.
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version and how you installed it
+      placeholder: "0.7.0, uv tool install silica-core"
+    validations:
+      required: true
+  - type: textarea
+    id: doctor
+    attributes:
+      label: silica doctor
+      description: Optional, and it answers most environment questions in one paste. It prints setting names, never their values.
+      render: text
+    validations:
+      required: false

silica_core-0.7.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,15 @@
+# Questions and open-ended ideas belong in Discussions, security in the advisory
+# flow: this file is what keeps them out of the tracker. blank_issues_enabled is
+# false so every issue arrives through a form carrying a reproduction or a problem
+# statement, because triage on a solo project is the scarce resource, not filing.
+blank_issues_enabled: false
+contact_links:
+  - name: Question, or something behaving in a way you did not expect
+    url: https://github.com/kiycoh/silica-core/discussions/categories/q-a
+    about: Ask in Q&A. Faster than an issue when you are not yet sure it is a bug.
+  - name: Idea, or a use case you want to talk through
+    url: https://github.com/kiycoh/silica-core/discussions/categories/ideas
+    about: For anything that is not yet a concrete feature request.
+  - name: Security vulnerability
+    url: https://github.com/kiycoh/silica-core/security/policy
+    about: Never open a public issue for a security problem. Read the policy first.

silica_core-0.7.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,18 @@
+name: Feature request
+description: Something Silica should do and does not.
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: The problem
+      description: What you were doing when you hit the wall. Describe the situation, not the solution you already have in mind.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: What you would want instead
+      description: Silica takes the smallest diff that works, so a proposal that reuses a path already in the codebase lands where one that adds a layer does not.
+    validations:
+      required: true

silica_core-0.7.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,13 @@
+## What and why
+
+<!-- One paragraph: what changes, and what made the obvious alternative wrong. -->
+
+## Checklist
+
+- [ ] `uv run pytest` passes
+- [ ] Non-trivial logic (a branch, a parser, a write path) leaves a runnable test behind
+- [ ] No mutation reaches the vault outside the Injector FSM
+- [ ] Code, comments and UI copy are English-only
+- [ ] Conventional commits (`feat(scope): …`), one logical change each
+
+By opening this PR you accept the license and relicensing terms in [CONTRIBUTING.md](https://github.com/kiycoh/silica-core/blob/main/CONTRIBUTING.md#license).

silica_core-0.7.0/.github/dependabot.yml

@@ -0,0 +1,31 @@
+# Dependabot version updates.
+# Two ecosystems match this repo: uv-managed Python deps (pyproject.toml + uv.lock)
+# and the pinned actions in .github/workflows/release.yml.
+# Commit prefixes (build / ci) map to cliff.toml's "^build|^ci" -> Build & CI section.
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "build"
+      include: "scope"
+    open-pull-requests-limit: 5
+    # Minor/patch bumps arrive as one grouped PR to cut solo-maintainer noise;
+    # majors stay individual so breaking changes are reviewed on their own.
+    groups:
+      python-minor-patch:
+        patterns: ["*"]
+        update-types: ["minor", "patch"]
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    groups:
+      actions:
+        patterns: ["*"]

silica_core-0.7.0/.github/workflows/ci.yml

@@ -0,0 +1,83 @@
+name: ci
+
+# The gates CONTRIBUTING already asks for, run where they can actually block:
+# every PR and every push to main. A checklist the author ticks by hand is not
+# a gate, and dependabot's weekly PRs have nothing checking them without this.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  # A superseded push on the same branch is dead work.
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        # The two versions pyproject claims in its classifiers. A claim no job
+        # checks is how a package promises 3.12 and ships broken on it.
+        python-version: ["3.11", "3.12"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
+        with:
+          python-version: ${{ matrix.python-version }}
+          enable-cache: true
+
+      # --locked fails when uv.lock has drifted from pyproject.toml, so a
+      # dependency edited without a relock dies here and not at a user's
+      # install. Extras: exactly the ones the suite reaches for with
+      # importorskip (fastapi/uvicorn, websockets, mcp).
+      # [rerank] stays out: 2 GB of torch to run tests that skip. There is no
+      # [pdf] extra any more — the mineru subprocess is patched in the suite.
+      - run: uv sync --locked --extra dev --extra connect --extra mcp
+
+      - run: uv run pytest -q
+
+      # Both are seconds and both were green when this file landed
+      # (2026-08-22: 9/9 contracts kept, 0 mypy errors over 206 files). They
+      # are here because a contract nothing re-checks is a comment.
+      - run: uv run lint-imports
+      - run: uv run mypy silica
+
+      # Third of the seconds-long gates, added 2026-09-03 at 0 findings after a
+      # cleanup of 158 unused imports. Narrow by config (F, E9 in pyproject):
+      # it blocks dead code, it does not arbitrate style.
+      - run: uv run ruff check silica tests
+
+  # The Dockerfile landed unbuilt by anything and went stale in place: the
+  # rename to silica-core walked past a build arg in .dockerignore that no job
+  # was exercising. An image nobody builds is a promise that breaks in the hand
+  # of the first person who tries it.
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+        with:
+          # .dockerignore ships .git so setuptools-scm can name the wheel; the
+          # default shallow checkout carries no tags and every image would
+          # install as pyproject's fallback_version, 0.0.0.
+          fetch-depth: 0
+
+      - run: docker build -t silica-core:ci .
+
+      # Building proves the wheel resolves; it does not prove the image runs.
+      # One vault, one file, one search covers the parts that actually rot: the
+      # [mcp] extra, the HOME=/data relocation the index writes through, the
+      # entrypoint, and the /vault working directory.
+      - name: smoke
+        run: |
+          mkdir -p vault
+          printf '# Compaction\n\nLSM trees merge sorted runs on write.\n' > vault/notes.md
+          docker run --rm -v "$PWD/vault:/vault" silica-core:ci search compaction -k 1 | tee out.json
+          grep -q notes.md out.json

silica_core-0.7.0/.github/workflows/release-shim.yml

@@ -0,0 +1,67 @@
+name: release-shim
+
+# Publishes one of the redirect distributions: `silica-agent` (the 2026-08-23
+# rename) or `silica-harness` (the 2026-09-08 rename), both pointing at
+# `silica-core` (see packaging/*/pyproject.toml for why the old names are kept
+# alive rather than deleted).
+#
+# Manual, not tag-driven: a shim's job is to point at a moving target, so one
+# release keeps working for every silica-core that follows it. Run this only
+# when a shim's own metadata changes, which should be close to never.
+on:
+  workflow_dispatch:
+    inputs:
+      shim:
+        description: which redirect to publish
+        required: true
+        type: choice
+        options: [silica-harness, silica-agent]
+
+permissions: {}
+
+concurrency:
+  group: release-shim-${{ inputs.shim }}
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    # Same environment as release.yml, so PyPI's trusted publisher for the shim
+    # narrows to it the same way. NOTE: that publisher must name THIS
+    # repository (kiycoh/silica-core) and this workflow file — a publisher
+    # configured before a rename points at the old repository name and cannot
+    # match the OIDC claim.
+    environment:
+      name: pypi
+      url: https://pypi.org/p/${{ inputs.shim }}
+    permissions:
+      id-token: write   # OIDC for PyPI Trusted Publishing (no stored token)
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
+        with:
+          python-version: "3.11"
+
+      # rm for the same reason release.yml does it: uv build writes a
+      # .gitignore into the output directory, and packages-dir uploads what it
+      # finds there.
+      - name: Build the shim
+        run: uv build --out-dir "$GITHUB_WORKSPACE/shim-dist" && rm -f "$GITHUB_WORKSPACE/shim-dist/.gitignore"
+        working-directory: packaging/${{ inputs.shim }}
+
+      # The only thing this distribution does is resolve to another one and
+      # keep the `silica` command working, so that is what gets checked before
+      # the irreversible step. A shim that installs but leaves no executable is
+      # the failure mode worth catching: nothing in the metadata shows it.
+      - name: Verify the shim resolves and still carries the command
+        run: |
+          uv venv /tmp/shim-check
+          VIRTUAL_ENV=/tmp/shim-check uv pip install "$GITHUB_WORKSPACE"/shim-dist/*.whl
+          VIRTUAL_ENV=/tmp/shim-check uv pip show silica-core > /dev/null
+          /tmp/shim-check/bin/silica --version
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
+        with:
+          packages-dir: shim-dist

silica_core-0.7.0/.github/workflows/release.yml

@@ -0,0 +1,87 @@
+name: release
+
+# Cut a release by pushing a SemVer tag, e.g.:
+#   git tag v0.3.0 && git push origin v0.3.0
+# setuptools-scm reads the tag to stamp the version; git-cliff builds the notes.
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions: {}   # the one job below asks for what it needs; nothing inherits
+
+concurrency:
+  # Never cancel a publish in flight: half a release is worse than a late one.
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    # Scopes the Trusted Publishing OIDC to this environment (set the same name
+    # on the PyPI publisher for the narrowing to be real), and gives the repo
+    # one checkbox, required reviewers, to make a stray tag push wait for a
+    # human instead of shipping.
+    environment:
+      name: pypi
+      url: https://pypi.org/p/silica-core
+    permissions:
+      contents: write   # create the GitHub Release
+      id-token: write   # OIDC for PyPI Trusted Publishing (no stored token)
+    steps:
+      # Actions are pinned by commit, not by tag: this job holds a token that
+      # can publish to PyPI, and a tag is mutable. Dependabot (github-actions,
+      # weekly) bumps the pins and rewrites the version comment.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+        with:
+          fetch-depth: 0  # full history + tags for setuptools-scm and git-cliff
+
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
+        with:
+          python-version: "3.11"
+
+      - run: uv sync --locked --extra dev --extra connect --extra mcp
+
+      # A version on PyPI is burned even after a yank, so the irreversible step
+      # gets the gate: no green suite, no publish. ci.yml runs the same command
+      # on PRs; duplicated on purpose, because a tag can be pushed onto a commit
+      # no PR ever covered.
+      - name: Test before anything irreversible
+        run: uv run pytest -q
+
+      - name: Build sdist and wheel
+        # The rm is not tidiness: `files: dist/*` below attaches everything in
+        # here, and uv build writes a .gitignore that reached the v0.5.0
+        # release as an asset named default.gitignore. Excluding it there would
+        # mean listing the artifacts by name, which is a second way for the
+        # release to fail when one of them is not matched.
+        run: uv build && rm -f dist/.gitignore
+
+      - name: Verify built version matches the tag
+        run: ls -1 dist/ && uv run python -c "import pathlib,sys; t='${{ github.ref_name }}'.lstrip('v'); files=[p.name for p in pathlib.Path('dist').glob('*.whl')]; sys.exit(0 if any(t.replace('-','_') in f for f in files) else f'tag {t} not in {files}')"
+
+      - name: Verify the wheel ships the skill
+        # Guards the package-data config: `silica setup` copies SKILL.md out of
+        # the installed package, and a wheel that drops it fails at runtime.
+        run: |
+          unzip -l dist/*.whl | grep -q "silica/skills/silica/SKILL.md" || { echo "MISSING from wheel: SKILL.md"; exit 1; }
+
+      - name: Publish to PyPI
+        # Trusted Publishing via OIDC — the PyPI project must have this repo +
+        # workflow registered as a trusted publisher. No API token in secrets.
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
+
+      - name: Generate release notes
+        uses: orhun/git-cliff-action@f50e11560dce63f7c33227798f90b924471a88b5  # v4.8.0
+        id: notes
+        with:
+          config: cliff.toml
+          args: --latest --strip header
+
+      - name: Publish GitHub release
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228  # v3.0.2
+        with:
+          body: ${{ steps.notes.outputs.content }}
+          files: dist/*
+          fail_on_unmatched_files: true

silica_core-0.7.0/.gitignore

@@ -0,0 +1,126 @@
+# Python & Bytecode
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.sage.py
+
+# Build & Packaging
+build/
+dist/
+bin/
+develop-eggs/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+silica/_version.py
+*.manifest
+*.spec
+pip-log.txt
+pip-delete-this-directory.txt
+.pdm-plugins/
+.pdm-python/
+.pdm-build/
+__pypackages__/
+
+# Virtual Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Testing, Linting & Coverage
+.cache
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.tox/
+.hatch/
+.coverage
+.coverage.*
+htmlcov/
+.htmlcov/
+.nosenvy/
+.noscript/
+.nosetests/
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.run/
+tests/fixtures/synthetic_vault/*
+.import_linter_cache/
+.grimp_cache/
+
+# Editors & IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+.spyderproject
+.spyproject
+.ropeproject
+profile_default/
+ipython_config.py
+.ipynb_checkpoints
+
+# OS Files
+.DS_Store
+Thumbs.db
+
+# Documentation
+docs/_build/
+/site
+/docs/*
+
+# Silica & Agent Specific
+# .agents/ is local agent tooling, except the Codex plugin marketplace, which
+# Codex looks for at exactly .agents/plugins/marketplace.json.
+/.agents/*
+!/.agents/plugins/
+.claude/
+CLAUDE.md
+.impeccable
+/memory
+.superpowers
+.silica/
+.silicaignore
+.obsidian
+
+# Databases & Locks
+ruvector.db
+agentdb.rvf
+*.rvf.lock
+
+# Evals & Benchmarks
+evals/.oracle/
+evals/golden/metrics.json
+evals/*/metrics.*.json
+bench/
+# downloaded benchmark corpora (LongMemEval s is 265 MB)
+data/
+
+# Generated Files & Reports
+graph.html
+CONTEXT.md
+PRODUCT.md
+DESIGN.md
+
+# Research corpus: papers pulled for design decisions, kept out of the tree.
+# Silica still indexes them — .gitignore is deliberately not an index rule.
+docs/research/