Urna
A vector database in one file, with citations that stay valid.
A .urna file holds the chunks, the embeddings, the source spans, the indices and the search contract. The Rust runtime maps it into memory, checks its hashes, and answers with exact cosine scores and a urna://content_hash/chunk_id citation for every hit. It works offline and rebuilds byte for byte. Python builds the file, Rust serves it.
Documentation: docs.urna.dev, with install, a quickstart, the concepts, the guides and the full CLI, build spec, Python and file format reference. Project site: urna.dev.
Install
bun, pnpm and yarn install the same package: bun add -g @urna/cli, pnpm add -g @urna/cli, yarn global add @urna/cli.
|
Then run setup once. It downloads the offline embedder, prepares a Python env and checks the install:
Python only, no setup step needed:
Windows, Docker, cargo binstall and how to verify a download are in the install reference.
In the terminal
urna setup shows the plan before it writes anything and ends on the doctor checks. A corpus built with a heavier model, like the pt-BR MiniLM, needs that model on the machine: urna setup --model minilm-multilingual installs it (or m on the plan screen), and the ask tab of urna tui offers the same install when a query needs it. Nothing is downloaded until you say so.
urna tui opens a corpus, validates it, and lets you ask it questions. Each hit shows its score, the stored text and its citation.
Quickstart
demos/quickstart/ has twelve short paragraphs and the spec that builds them. From a checkout:
ask prints the answer with its citation, retrieve prints JSON for another program, cite turns a citation back into the stored text, and validate checks every hash. To build from your own rows, see usage section 13.
What the file guarantees
| Property | How |
|---|---|
| Self-contained | The file is the whole database. Copy it like a SQLite file. |
| Verifiable | SHA-256 over the whole file and over the decoded content, plus a checksum on the header and on every section. urna cite resolves any citation. |
| Reproducible | Same chunks and same model give a byte-identical file on any machine. |
| Offline | The runtime never opens a socket. The CLI refuses a query from another model at the model_hash check; in Python, retrieve does when you pass expected_model_hash, as below. |
Python
=
=
=
=
# exact
# hnsw beam (floor: the build's ef_construction), then exact rerank
# bm25 + vectors, exact rerank
# chunk graph from the seeds
# one named multimodal space
assert is True
=
Each chunk is a dict with canonical_text, source_uri, byte_start, byte_end and embedding:
python demos/quickstart/quickstart.py runs the whole loop, build to cited hits, with no network.
CLI
The engine verbs take a file and a vector; two of them run Python (search-text for its embedder, doctor to probe the environment), the other ten never do. The agent verbs (ask, retrieve, build) take text and use the offline embedder; ask and retrieve search by what the file carries: BM25 plus vectors when the file has a BM25 index, HNSW when it has one, exact otherwise. setup and tui are the terminal UI. urna --help lists all three groups.
build reads one TOML: the source (SQLite, CSV, JSONL, an image dir), the media settings, and one or more embedding models from the registry (potion, clip-vit-b32, siglip2, wemm-2b, ...). Each model becomes a named vector space in the same file. The full spec is in usage section 13.
Benchmarks
100,000 x 384 rows, k=10, one thread, same machine for every store.
| Store | p50 (ms) | p99 (ms) | Cold open (ms) |
|---|---|---|---|
| hnswlib | 0.32 | 0.53 | 182 |
| usearch | 0.67 | 61.4 | 58 |
| Urna hybrid | 0.72 | 1.02 | 356 |
| Urna exact | 7.80 | 8.32 | 292 |
| LanceDB | 16.7 | 19.4 | 612 |
| sqlite-vec | 19.8 | 24.8 | 50 |
Both Urna rows return recall@10 = 1.000. Urna's cold open includes checking every section hash before the first answer. Urna does not do updates, filters or concurrent writers. Method and the full table: docs/BENCH.md.
| Preset | Embeddings | Index | Size | Recall@10 |
|---|---|---|---|---|
exact |
float32 | 1.000 | 1.000 | |
compressed |
float16 | 0.339 | 1.000 | |
tiny |
int8 | HNSW | 0.256 | 0.992 |
micro |
mrl256-int8 | HNSW | 0.223 | 0.810 |
nano |
int4 | HNSW | 0.209 | 0.913 |
hybrid |
float32 | HNSW + BM25 | 0.609 | 1.000 |
Measured on a 30,725-chunk pt-BR corpus. Recall here is rank stability under quantization, not real-query quality. Details in usage section 6.
Real-query quality is in fakenews-ptbr-urna-benchmark: seven public pt-BR fake-news datasets deduplicated into 23,335 documents, 2,601 queries with relevance judgments, three embedders and three presets each, rebuildable from pinned sources. On the exact preset, nDCG@10 is 0.528 for mpnet, 0.503 for the multilingual MiniLM and 0.326 for potion. The files are on Hugging Face.
| Profile | Media | File | Vs the JPEG source |
|---|---|---|---|
archive |
JPEG XL, byte-reversible | 3.61 GB | 1.10x |
stills |
AVIF, one image per file (q48) | 1.20 GB | 3.32x |
stills-av1 |
AV1 all-intra crf35 | 1.37 GB | 2.89x |
retrieval |
AV1 all-intra crf50 | 533 MB | 7.46x |
The profile names are the forge's ([media] profile = "...", usage section 14). Text-to-image hit@1 over every card: SigLIP2 0.750, wemm-2b 0.744, Jina 0.336, CLIP 0.098. The benchmark is mtg-urna-benchmark, and the .urna files are on Hugging Face; the recipes the forge uses are recorded in python/forge/media_profiles.py and docs/CHANGELOG.
Reference
- docs.urna.dev: the documentation site, with guides, concepts and the full reference
- docs/USAGE.md: every verb, presets, models, builds, install channels
- docs/BENCH.md: how the numbers were measured
- fakenews-ptbr-urna-benchmark and mtg-urna-benchmark: the text and image benchmarks, with their files on Hugging Face
- docs/SECURITY.md: reporting, hardening, data governance
- docs/CHANGELOG: releases with measured numbers
- docs/ARC.toml: the architecture map
- docs/ADR: architecture decision records, by category
- AGENTS.md: notes for dev contributors and agents of code.
The crates are urna-format (the container), urna-engine (search), urna (the binary) and urna-bridge (the PyO3 bridge behind the Python package).
Renamed from
nestafter 0.4.0. A.nestfile written by 0.4.0 still opens.
License
MIT, see LICENSE. Hoff Research
Made it simple, but significant (∂μfμν = jν)
Author: Brenner Cruvinel