Repository navigation
Home
AncestryLLM is a local-first genealogy tool with one-shot commands, an interactive console, and a bounded desktop control shell. Choose a task below. The desktop supports local setup and diagnostics; use the CLI or console for genealogy workflows.
Follow a complete workflow:
- Desktop first run — reach a network-free Home state in the supported 0.6.0 installer and choose the next supported surface
-
Merge fictional GEDCOM records offline
— produce a rooted GEDCOM 5.5.5 file and quality report with
provider=noneand no network calls.
Complete a specific task or recover from a problem:
- Run an offline GEDCOM merge — merge the public fictional fixtures, verify the results, and recover from failure
- Explore commands in the interactive console — inspect the implemented prompt-toolkit/Rich REPL safely
- Recover with desktop diagnostics — interpret sanitized startup state and retry the private desktop service
- Interactive console guide — start and use the REPL
- Encrypted backup and recovery — create and restore backups
- First-run storage diagnostics — troubleshoot setup
- Release runbook — prepare and publish a release
These guides cover gated adapters in source. They are outside the supported 0.6.0 installer claim and require target-matched packaged and security evidence before support can expand. A fictional development preview is not that evidence.
- Grant desktop file access — understand scoped opaque grants and the immutable-input boundary
- Configure a desktop provider and consent — test an endpoint, review exact disclosure scope, and revoke consent
- Monitor and cancel desktop tasks — follow backend-owned progress and cancellation safe points
- Use transient desktop chat — work with the bounded, unsaved advisory conversation surface
Start with the local, provider-none Home state, then use Desktop shell to understand the bounded control surface and its sanitized recovery path. Continue with the interactive console guide for genealogy commands, and use the CLI reference when a one-shot command is more appropriate. These surfaces share application contracts, but the desktop shell does not silently grant provider, network, filesystem, or genealogy authority.

The CLI, interactive REPL, and released bounded Electron desktop control shell are the implemented product surfaces. The shell supports Home, Diagnostics, Settings, and capability onboarding. Desktop-domain capabilities remain planned or gated; see the desktop shell guide for the supported boundary and source-level contracts.
The CLI and REPL use the same command specification, transport-neutral executor, application DTOs, and genealogy services. User-selected files follow the shared bounded file-ingress policy, including byte and record budgets, race detection, output alias rejection, and transactional publication.
The deployment guide covers the reviewed macOS arm64 runtime-tool controls. They do not activate an AncestryLLM application container or a remote runtime; Local Desktop remains the only available deployment choice.
Factual, accurate information to look up:
- Desktop reference — routes, states, stable codes, platform behavior, accessibility, and recovery
- Desktop diagnostics contract — local schema, event catalog, retention, privacy, and support boundaries
- CLI reference — commands, options, and exit codes
- Provider guide — provider policy, profiles, and capabilities
- GEDCOM compatibility and release checks
- Versioning and compatibility
- Bounded file ingress
- Continuous integration
- ty advisory evaluation — 0.6 checker evidence and cutover disposition
- Ruff rule-expansion evaluation — reviewed 0.6 static-analysis batches and regression evidence
- uv_build evaluation — reproducible backend comparison and fail-closed adoption disposition
- Architecture ownership and dependency contracts
- Command executor
- Built-in module authoring — constraints, registration, and tests
- Application contracts — service DTOs and ports
- API reference — authenticated health and capability control API
- Local LLM benchmarks
- Local-first retrieval evaluation
Concepts, rationale, and design context:
- Privacy and consent — local-first boundaries and consent model
- REPL architecture — internal session and dispatch design
- Desktop shell (released bounded v0.6.0 plus marked source-level gates) — supported Home, Diagnostics, Settings, and onboarding plus source-level gated Tasks presentation and transient-chat contracts
- Published documentation — browse the canonical guides on GitHub Pages
- Wiki synchronization — reproduce the publishing step locally
- Wiki operations and recovery — dispatch, verify, rollback
- Security response checklist
- Verified uv bootstrap — executable trust policy, receipts, and reviewed updates
- Documentation authoring guide — Diátaxis map and authoring rules
- Release notes for v0.6.0 — release scope, limitations, installation, and verification
- Desktop verification (released bounded shell and later changes) — exact-head verification, not release approval
- Desktop deployment (released bounded shell publication) — installer publication and app-owned macOS arm64 runtime-tool controls, not a hosted application
- CORE-42 extraction benchmark and dependency report — measured input for standalone package extraction decisions
- GEDCOM and RootsMagic extraction decision ADR — separate keep-internal decisions and revisit triggers
- Local-first container and advanced remote deployment ADR — implemented profile and macOS arm64 runtime-tool boundaries plus future application-runtime gates
- Electron and FastAPI desktop ADR — released control-shell boundary and excluded domain scope
- Provider framework evaluation ADR — recorded provider choice
- Data-flow threat model and control matrix — security governance
- Release evidence index — retained verification artifacts
- Run an offline GEDCOM merge
- Explore commands in the interactive console
- Recover with desktop diagnostics
- Interactive console guide
- Encrypted backup and recovery
- First-run storage diagnostics
- Release runbook
Gated source adapters; outside the supported 0.6.0 installer claim.
- Grant desktop file access
- Configure a desktop provider and consent
- Monitor and cancel desktop tasks
- Use transient desktop chat
- Desktop reference
- Desktop diagnostics contract
- CLI reference
- Provider guide
- GEDCOM compatibility and release checks
- Versioning and compatibility
- Bounded file ingress
- Continuous integration
- Dependency maintenance
- ty advisory evaluation
- Ruff rule-expansion evaluation
- uv_build evaluation
- Architecture ownership and dependency contracts
- Command executor
- Built-in module authoring
- Application contracts
- API reference
- Local LLM benchmarks
- Local-first retrieval evaluation
- Privacy and consent
- REPL architecture
- Desktop shell (released bounded v0.6.0 plus marked source-level gates) — Tasks and transient-chat source boundaries
- Wiki synchronization
- Wiki operations and recovery
- Security response checklist
- Verified uv bootstrap
- Documentation authoring guide
- Release notes for v0.6.0
- Desktop verification (released bounded shell and later changes)
- Desktop deployment (released bounded shell publication)
- Release evidence index
- CORE-42 extraction benchmark and dependency report
- v0.7.0 test-suite audit