Chunk/KnowledgeSource/Retriever types, markdown chunker, SQLite FTS5 retriever, PublicSource llms.txt loader, KnowledgeService + search/get_chunk tools wired via config, shared async service across sessions.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…RRF fusion

Local ONNX bge-small embeddings, sqlite-vec store + VectorRetriever, HybridRetriever (reciprocal rank fusion), LocalDirSource corpus, config-selectable fts/vector/hybrid, lazy ONNX load, markdown-only ingest, bounded-concurrency fetch, batched embeddings (OOM fix), limit param + provenance.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…, pgvector

File-backed KnowledgeStore (chunks+FTS5+vectors), read-only retrievers over the store, ingest CLI, atomic ingest (temp+rename), index metadata validation, async store lifecycle + openStore factory, PgKnowledgeStore (pgvector + tsvector) with testcontainers pg tests.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…ToolPolicy

OpenAPI operation parser + operation-to-tool generation with pinned bundled spec, HttpDittoClient, credential passthrough (basic/devops/OIDC client-credentials, config + per-session), ToolPolicy (read-only default, write allowlist, spec-security-aware sudo gating), typed request-body schemas.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Consolidated README, example configs, hardened .gitignore; docs for HTTP/config, knowledge/persistence/pgvector, action tools/passthrough/policy, OIDC + typed bodies.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Squashes the devops-credential and openapi-spec-source work.

Devops credential:
- Add optional `ditto.devopsCredential` used exclusively for
  sudo-classified operations (/devops/*, sudo*, and the secret-bearing
  /api/2/connections* API); all other operations use `ditto.credential`.
- Sudo ops are refused at the MCP layer when no devopsCredential is set.
  Connectivity is classified sudo via a spec-independent path rule so it
  is always devops-gated.
- Remove the `devops` credential kind and the `isDevops` flag: devops
  capability is now positional (which credential slot). A per-session
  Authorization header overrides the selected credential without
  inheriting devops status. Credential kind is now `basic | oidc` only.

OpenAPI spec source:
- Resolve the spec by precedence path > url > version > in-repo canonical;
  add `openApi.version` (git tag/ref) and `openApi.versionUrlTemplate`.
- Default fallback reads the canonical in-repo spec
  (documentation/src/main/resources/openapi/ditto-api-2.yml) instead of a
  committed duplicate; drop mcp/assets/ditto-openapi.yml.

BREAKING CHANGE: kind:"devops" and the devops:true flag are removed; move a
devops credential into ditto.devopsCredential. Sudo operations now require
ditto.devopsCredential to be set.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

- Dockerfile (multistage node:22-slim, glibc), .dockerignore, and
  docker/config.docker.json: HTTP transport, non-root, native deps baked in.
  Secure-by-default DNS rebinding protection + loopback allowedHosts.
- bin shebangs so stdio/http/ingest run as installed CLIs.
- Lazy-load sqlite/pg store backends and local embeddings; friendly errors
  naming the missing native dep instead of raw MODULE_NOT_FOUND.
- knowledge.chunk.{maxChars,overlap} config wired through makeSources to
  PublicSource + LocalDirSource (was hardcoded to chunker defaults).
- README: Docker Deployment and Chunking sections (incl. bge-small
  512-token ceiling for vector/hybrid).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Retriever-agnostic context expansion in KnowledgeService.search: around each
anchor, pull ±context same-document chunks (same cite, adjacent ordinal) by id
— never re-scored or re-embedded. Results are deduped and emitted as contiguous
spans ordered by best anchor rank; neighbors are tagged role="context" so their
relevance isn't over-weighted vs. matches.

- Stops at document boundaries (different cite) even when ordinals are globally
  contiguous, so expansion never leaks across docs.
- knowledge.search.{limit,context} config (defaults 5 / 1); search tool gains a
  per-call `context` arg that overrides. `limit` counts anchors; neighbors extra.
- Works for fts/vector/hybrid: an anchor's neighbors are defined by document
  layout, not by how it was matched — so expansion is embedding-neutral and
  sidesteps the 512-token ceiling.
- README: Search (query-time) section incl. overlap-vs-expansion interaction.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>