tools.rag module

LLM-facing RAG tools using the multi-tool TOOLS list format.

Provides tools for searching, indexing, listing, and managing RAG stores, plus per-channel auto-search configuration.

Host-path ingestion (rag_index_file, rag_index_directory) is gated behind the UNSANDBOXED_EXEC privilege because it can be used to read arbitrary files (config.yaml, ~/.ssh/id_*, /etc/shadow, etc.) into a queryable pgvector store. URL ingestion and queries remain open.