https://github.com/saagpatel/knowledgecore
Local-first encrypted knowledge vault — semantic search over your documents, no cloud
https://github.com/saagpatel/knowledgecore
encryption knowledge-management local-first rag rust tauri vector-search
Last synced: 1 day ago
JSON representation
Local-first encrypted knowledge vault — semantic search over your documents, no cloud
- Host: GitHub
- URL: https://github.com/saagpatel/knowledgecore
- Owner: saagpatel
- License: mit
- Created: 2026-03-22T06:31:38.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2026-06-19T10:07:10.000Z (10 days ago)
- Last Synced: 2026-06-19T11:11:41.198Z (10 days ago)
- Topics: encryption, knowledge-management, local-first, rag, rust, tauri, vector-search
- Language: Rust
- Size: 864 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
- Agents: AGENTS.md
Awesome Lists containing this project
README
# KnowledgeCore
[](#) [](#)
> Your documents, encrypted and semantically searchable — no cloud, no accounts, no compromise.
KnowledgeCore is a local-first, encrypted knowledge vault for ingesting, indexing, and querying documents. Documents are stored in an encrypted SQLite vault (SQLCipher), content-addressed with BLAKE3 hashes, and indexed with LanceDB for semantic retrieval. A trust and lineage layer tracks document provenance, authorship, and policy governance across devices.
## Features
- **Encrypted vault** — SQLCipher-backed storage with Argon2 key derivation and ChaCha20-Poly1305 encryption
- **Semantic search** — LanceDB vector index with Apache Arrow for fast similarity queries
- **Content addressing** — BLAKE3 hashes ensure integrity and deduplication
- **PDF extraction** — pdfium-render for high-fidelity document parsing
- **CLI + desktop** — full-featured `kc_cli` plus a Tauri 2 desktop app covering the same workflow
- **Recovery escrow** — AWS KMS backend (real SDK); Azure, GCP, and HSM adapters use local filesystem emulation only (no cloud SDK)
## Quick Start
### Prerequisites
- Rust 1.77+ (2021 edition)
- Cargo
- Node.js 18+ and pnpm (desktop app only)
### Installation
```bash
cargo build --release -p kc_cli
```
### Usage
```bash
# Initialize a new vault
./target/release/kc_cli vault init --vault-path ./my-vault --vault-slug my-vault
# Ingest documents
./target/release/kc_cli ingest scan-folder \
--vault-path ./my-vault --scan-root ~/Documents --source-kind local
# Rebuild the semantic index
./target/release/kc_cli index rebuild --vault-path ./my-vault
```
## Tech Stack
| Layer | Technology |
|-------|------------|
| Language | Rust (2021 edition) |
| Vault storage | SQLCipher (rusqlite + bundled) |
| Encryption | ChaCha20-Poly1305, Argon2, BLAKE3 |
| Vector index | LanceDB + Apache Arrow |
| PDF parsing | pdfium-render |
| Identity | Ed25519 (ed25519-dalek), JWK/JWKS |
| CLI | clap 4 |
| Desktop | Tauri 2 + TypeScript frontend |
## License
MIT