Rag

.claude/settings.json

@@ -0,0 +1,14 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(/usr/local/bin/node --version)",
+      "Bash(/opt/homebrew/bin/node --version)",
+      "Read(//opt/homebrew/bin/**)",
+      "Bash(curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh)",
+      "Bash(bash)",
+      "Bash(curl -LsSf https://astral.sh/uv/install.sh)",
+      "Bash(sh)",
+      "Bash(python3 -c \"import secrets; print\\(secrets.token_hex\\(32\\)\\)\")"
+    ]
+  }
+}

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   push:
-    branches: [main]
+    branches: [main, rag]
   pull_request:
-    branches: [main]
+    branches: [main, rag]
 
 jobs:
   backend:
@@ -38,22 +38,22 @@ jobs:
         with:
           python-version: "3.11"
           cache: pip
-          cache-dependency-path: services/ai/requirements.txt
+          cache-dependency-path: services/ai/pyproject.toml
 
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: pip install -e ".[dev]"
 
       - name: Type check (mypy)
-        run: mypy .
+        run: mypy app
         env:
           DATABASE_URL: postgresql://bitcoin_academy:bitcoin_academy@localhost:5432/bitcoin_academy
-          SECRET_KEY: ci-secret-key-32-chars-minimum!!
+          SECRET_KEY: CI-AUTH-JWT-KEY-FOR-PIPELINE-ONLY-32!
 
       - name: Run tests (pytest)
         run: pytest
         env:
           DATABASE_URL: postgresql://bitcoin_academy:bitcoin_academy@localhost:5432/bitcoin_academy
-          SECRET_KEY: ci-secret-key-32-chars-minimum!!
+          SECRET_KEY: CI-AUTH-JWT-KEY-FOR-PIPELINE-ONLY-32!
           ENVIRONMENT: development
 
   frontend:
@@ -82,6 +82,8 @@ jobs:
 
       - name: Lint
         run: npm run lint
+        env:
+          NEXT_PUBLIC_API_BASE_URL: http://localhost:8000/api
 
       - name: Run tests (Jest)
         run: npm test -- --ci --passWithNoTests

.gitignore

@@ -55,6 +55,9 @@ htmlcov/
 .dmypy.json
 dmypy.json
 
+# Test coverage reports
+apps/web/coverage/
+
 # Node.js / npm / yarn / pnpm
 node_modules/
 npm-debug.log*
@@ -77,8 +80,10 @@ out/
 .env.*.local
 .env.production.local
 
-# Lock files (optional - uncomment if you want to exclude)
+# Lock files — ignore root-level, but track app lock files for reproducible CI
 package-lock.json
+!apps/web/package-lock.json
+!workers/qvac-service/package-lock.json
 # yarn.lock
 # pnpm-lock.yaml
 
@@ -103,7 +108,7 @@ temp/
 
 # Docker
 .dockerignore
-docker-compose.override.yml
+docker-compose.local.yml
 
 # IDE config
 .editorconfig
@@ -150,3 +155,8 @@ docs/
 *.jsonl
 parsed_output/
 chroma_db/
+
+# AI service runtime artifacts
+services/ai/uploads/
+services/ai/qvac_ingest/
+services/ai/rag_test_results*.json