@hickeroar/tsbayes 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+All notable changes to this project are documented here.
+
+## [1.0.0] - 2026-02-21
+
+- Initial TypeScript implementation of the classifier core.
+- Added HTTP service with training, scoring, classification, and lifecycle endpoints.
+- Invalid `/train/:category` and `/untrain/:category` params now return `400` with `{"error":"invalid request"}`.
+- Added JSON model persistence with validation and atomic file writes.
+- Added strict testing, linting, and CI foundations.
+- Added scoped security audit policy in CI (blocking production dependency audit + non-blocking full-tree visibility report).
+- Pinned vulnerable transitive `minimatch` via npm `overrides` to clear high-severity audit findings.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ryan Vennell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,277 @@
+# tsbayes
+
+A memory-based, optional-persistence naive Bayesian text classification package and web API for TypeScript/Node.js.
+
+[![CI](https://github.com/hickeroar/tsbayes/actions/workflows/ci.yml/badge.svg)](https://github.com/hickeroar/tsbayes/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/%40hickeroar%2Ftsbayes.svg)](https://www.npmjs.com/package/@hickeroar/tsbayes)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
+
+---
+
+## Why?
+
+```text
+Bayesian text classification is useful for things like spam detection,
+sentiment determination, and general category routing.
+
+You gather representative samples for each category, train the model,
+then classify new text based on learned token patterns.
+
+Once the model is trained, you can:
+- classify input into a best-fit category
+- inspect relative per-category scores
+- persist and reload model state
+```
+
+## Installation
+
+Requires Node.js 20 or newer.
+
+Package usage:
+
+```bash
+npm install @hickeroar/tsbayes
+```
+
+Contributor/development setup:
+
+```bash
+git clone <your-repo-url>
+cd tsbayes
+npm ci
+```
+
+---
+
+## Run as an API Server
+
+```bash
+npm run dev
+```
+
+Production-style run:
+
+```bash
+npm run build
+npm run start
+```
+
+Environment variables:
+
+```text
+TSBAYES_HOST
+TSBAYES_PORT
+TSBAYES_AUTH_TOKEN
+```
+
+When `TSBAYES_AUTH_TOKEN` is configured, all API endpoints except `/healthz` and `/readyz` require:
+
+```text
+Authorization: Bearer <token>
+```
+
+## Use as a Library in Your App
+
+Import and create a classifier:
+
+```ts
+import { TextClassifier, loadFromFile, saveToFile } from "@hickeroar/tsbayes";
+
+const classifier = new TextClassifier();
+
+classifier.train("spam", "buy now limited offer click here");
+classifier.train("ham", "team meeting schedule for tomorrow");
+
+const classification = classifier.classificationResult("limited offer today");
+console.log(`category=${classification.category} score=${classification.score}`);
+
+const scores = classifier.score("team schedule update");
+console.log(scores);
+
+classifier.untrain("spam", "buy now limited offer click here");
+
+await saveToFile(classifier, "/tmp/tsbayes-model.json");
+const loaded = new TextClassifier();
+await loadFromFile(loaded, "/tmp/tsbayes-model.json");
+console.log(loaded.classificationResult("limited offer today"));
+```
+
+Notes for library usage:
+
+- Classifier operations are safe for concurrent request handling in a single Node process.
+- Scores are relative values; compare scores within the same model.
+- Default tokenization applies Unicode NFKC normalization, lowercasing, non-word splitting, and English stemming.
+- Category names accepted by `train` and `untrain` match `^[-_A-Za-z0-9]{1,64}$`.
+
+File API notes:
+
+- `saveToFile` and `loadFromFile` default to `/tmp/tsbayes-model.json` when no path is provided.
+- Provided file paths must be absolute.
+
+## Development Checks
+
+```bash
+npm run format:check
+npm run lint
+npm run typecheck
+npm run test:coverage
+npm run build
+npm run standalone:audit
+```
+
+Security checks used by CI:
+
+```bash
+npm audit --omit=dev --audit-level=high
+npm audit --audit-level=high
+```
+
+---
+
+## Using the HTTP API
+
+### API Notes
+
+- Category names in `/train/:category` and `/untrain/:category` must match `^[-_A-Za-z0-9]{1,64}$`.
+- Invalid category path params return `400` with `{"error":"invalid request"}`.
+- Request body size is capped at 1 MiB.
+- Error responses are JSON: `{"error":"<message>"}`.
+- If `charset` is declared in `Content-Type`, it must be UTF-8.
+- The HTTP service stores classifier state in memory; process restarts clear training data.
+- Empty request bodies are accepted for `/train/:category` and `/untrain/:category`; this is a no-op for model token tallies.
+
+### Common Error Responses
+
+| Status | When                                                                                                        |
+| ------ | ----------------------------------------------------------------------------------------------------------- |
+| `400`  | Invalid payload or route params (for example non-UTF-8 charset, non-text body, or invalid category pattern) |
+| `401`  | Missing/invalid bearer token when auth is enabled                                                           |
+| `404`  | Invalid route                                                                                               |
+| `413`  | Request body exceeds 1 MiB                                                                                  |
+| `500`  | Unexpected server error                                                                                     |
+
+### Training the Classifier
+
+##### Endpoint:
+
+```text
+/train/:category
+Example: /train/spam
+Accepts: POST
+Body: raw text/plain
+```
+
+Example:
+
+```bash
+curl -s -X POST "http://localhost:8000/train/spam" \
+  -H "Content-Type: text/plain" \
+  --data "buy now limited offer click here"
+```
+
+### Untraining the Classifier
+
+##### Endpoint:
+
+```text
+/untrain/:category
+Example: /untrain/spam
+Accepts: POST
+Body: raw text/plain
+```
+
+### Getting Classifier Status
+
+##### Endpoint:
+
+```text
+/info
+Accepts: GET
+```
+
+Example response:
+
+```json
+{
+  "categories": [
+    {
+      "category": "spam",
+      "tokenTally": 6
+    }
+  ]
+}
+```
+
+### Classifying Text
+
+##### Endpoint:
+
+```text
+/classify
+Accepts: POST
+Body: raw text/plain
+```
+
+Example response:
+
+```json
+{
+  "category": "spam",
+  "score": 3.2142857142857144
+}
+```
+
+If no category can be selected (for example, untrained model), `category` is returned as `null`.
+
+### Scoring Text
+
+##### Endpoint:
+
+```text
+/score
+Accepts: POST
+Body: raw text/plain
+```
+
+Example response:
+
+```json
+{
+  "spam": 3.2142857142857144,
+  "ham": 0.7857142857142857
+}
+```
+
+### Flushing Training Data
+
+##### Endpoint:
+
+```text
+/flush
+Accepts: POST
+Body: raw text/plain (optional)
+```
+
+### Health and Readiness
+
+##### Liveness endpoint
+
+```text
+/healthz
+Accepts: GET
+```
+
+##### Readiness endpoint
+
+```text
+/readyz
+Accepts: GET
+```
+
+`/healthz` and `/readyz` are intentionally unauthenticated even when API auth is enabled.
+
+## Operational Notes
+
+- The HTTP server is in-memory by default; deploys/restarts wipe trained state.
+- Use `saveToFile` and `loadFromFile` in library workflows to persist/reload model state.
+- `/readyz` returns `200` while accepting traffic and `503` when draining during shutdown.

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli.js

@@ -0,0 +1,15 @@
+import { loadConfig } from "./server/config.js";
+import { startServer } from "./server/start.js";
+async function run() {
+    const config = loadConfig(process.env);
+    const context = await startServer(config);
+    const shutdown = async () => {
+        context.readiness.setReady(false);
+        await context.app.close();
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown());
+    process.on("SIGINT", () => void shutdown());
+}
+void run();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,KAAK,UAAU,GAAG;IAChB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,GAAG,EAAE,CAAC"}

package/dist/core/classifier.d.ts

@@ -0,0 +1,36 @@
+import type { CategorySummary, ClassificationResult, PersistedModelState } from "./types.js";
+/**
+ * In-memory naive Bayes classifier for train/untrain/score/classify workflows.
+ * Scores are relative ranking values, not calibrated probabilities.
+ */
+export declare class TextClassifier {
+    private readonly categories;
+    /** Adds token counts from text into the target category. */
+    train(category: string, text: string): void;
+    /**
+     * Removes token counts contributed by text from a category.
+     * Missing categories/tokens are treated as no-ops.
+     */
+    untrain(category: string, text: string): void;
+    /** Returns per-category relative scores for the input text. */
+    score(text: string): Record<string, number>;
+    /** Convenience API returning only the predicted category. */
+    classify(text: string): string | null;
+    /** Returns top category plus score; ties resolve lexicographically. */
+    classificationResult(text: string): ClassificationResult;
+    /** Clears all trained model state. */
+    flush(): void;
+    /** Summarizes trained categories in stable lexical order. */
+    categorySummaries(): CategorySummary[];
+    /** Serializes classifier state into the versioned persistence model. */
+    save(): PersistedModelState;
+    /** Loads and validates a persisted model state into memory. */
+    load(model: PersistedModelState): void;
+    private ensureCategory;
+    private validateCategory;
+    private totalTally;
+    private tokenTotal;
+    private calculateBayesianProbability;
+}
+/** Validates persisted model invariants before load. */
+export declare function validateModelState(model: PersistedModelState): void;

package/dist/core/classifier.js

@@ -0,0 +1,227 @@
+import { CATEGORY_PATTERN, MODEL_VERSION } from "./constants.js";
+import { PersistenceError, ValidationError } from "./errors.js";
+import { tokenize } from "./tokenizer.js";
+/**
+ * In-memory naive Bayes classifier for train/untrain/score/classify workflows.
+ * Scores are relative ranking values, not calibrated probabilities.
+ */
+export class TextClassifier {
+    categories = new Map();
+    /** Adds token counts from text into the target category. */
+    train(category, text) {
+        this.validateCategory(category);
+        const tokens = tokenize(text);
+        const tokenOccurrences = countOccurrences(tokens);
+        const state = this.ensureCategory(category);
+        for (const [token, count] of tokenOccurrences) {
+            const currentCount = state.tokens.get(token) ?? 0;
+            state.tokens.set(token, currentCount + count);
+            state.tally += count;
+        }
+    }
+    /**
+     * Removes token counts contributed by text from a category.
+     * Missing categories/tokens are treated as no-ops.
+     */
+    untrain(category, text) {
+        this.validateCategory(category);
+        const state = this.categories.get(category);
+        if (!state) {
+            return;
+        }
+        const tokenOccurrences = countOccurrences(tokenize(text));
+        for (const [token, count] of tokenOccurrences) {
+            const existing = state.tokens.get(token) ?? 0;
+            if (existing <= 0) {
+                continue;
+            }
+            const decrement = Math.min(existing, count);
+            const nextValue = existing - decrement;
+            state.tally -= decrement;
+            if (nextValue <= 0) {
+                state.tokens.delete(token);
+            }
+            else {
+                state.tokens.set(token, nextValue);
+            }
+        }
+        if (state.tally <= 0) {
+            this.categories.delete(category);
+        }
+    }
+    /** Returns per-category relative scores for the input text. */
+    score(text) {
+        const tokens = tokenize(text);
+        const occurrences = countOccurrences(tokens);
+        const totalTally = this.totalTally();
+        if (totalTally <= 0) {
+            return {};
+        }
+        const scores = new Map();
+        for (const [token, occurrenceCount] of occurrences) {
+            const tokenTotal = this.tokenTotal(token);
+            // Unknown tokens add no evidence to any category.
+            if (tokenTotal <= 0) {
+                continue;
+            }
+            for (const [name, state] of this.categories) {
+                const tokenInCategory = state.tokens.get(token) ?? 0;
+                const probability = this.calculateBayesianProbability({
+                    tokenInCategory,
+                    tokenTotal,
+                    categoryTally: state.tally,
+                    totalTally
+                });
+                const current = scores.get(name) ?? 0;
+                scores.set(name, current + occurrenceCount * probability);
+            }
+        }
+        const response = {};
+        for (const [category, value] of scores) {
+            // Keep output aligned with reference behavior: only positive scores are emitted.
+            if (value > 0) {
+                response[category] = value;
+            }
+        }
+        return response;
+    }
+    /** Convenience API returning only the predicted category. */
+    classify(text) {
+        return this.classificationResult(text).category;
+    }
+    /** Returns top category plus score; ties resolve lexicographically. */
+    classificationResult(text) {
+        const scores = this.score(text);
+        const orderedScores = Object.entries(scores).sort(([a], [b]) => a.localeCompare(b));
+        let bestCategory = null;
+        let bestScore = 0;
+        // We sort first so strict ">" makes tie results deterministic.
+        for (const [category, score] of orderedScores) {
+            if (score > bestScore) {
+                bestScore = score;
+                bestCategory = category;
+            }
+        }
+        return { category: bestCategory, score: bestScore };
+    }
+    /** Clears all trained model state. */
+    flush() {
+        this.categories.clear();
+    }
+    /** Summarizes trained categories in stable lexical order. */
+    categorySummaries() {
+        return [...this.categories.entries()]
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([category, state]) => ({
+            category,
+            tokenTally: state.tally
+        }));
+    }
+    /** Serializes classifier state into the versioned persistence model. */
+    save() {
+        const categories = {};
+        for (const [name, state] of this.categories) {
+            categories[name] = {
+                tally: state.tally,
+                tokens: Object.fromEntries(state.tokens)
+            };
+        }
+        return {
+            version: MODEL_VERSION,
+            categories
+        };
+    }
+    /** Loads and validates a persisted model state into memory. */
+    load(model) {
+        validateModelState(model);
+        this.categories.clear();
+        for (const [name, persisted] of Object.entries(model.categories)) {
+            const tokens = new Map();
+            let tally = 0;
+            for (const [token, count] of Object.entries(persisted.tokens)) {
+                tokens.set(token, count);
+                tally += count;
+            }
+            this.categories.set(name, { tally, tokens });
+        }
+    }
+    ensureCategory(category) {
+        const existing = this.categories.get(category);
+        if (existing) {
+            return existing;
+        }
+        const created = { tally: 0, tokens: new Map() };
+        this.categories.set(category, created);
+        return created;
+    }
+    validateCategory(category) {
+        if (!CATEGORY_PATTERN.test(category)) {
+            throw new ValidationError("invalid category");
+        }
+    }
+    totalTally() {
+        let total = 0;
+        for (const state of this.categories.values()) {
+            total += state.tally;
+        }
+        return total;
+    }
+    tokenTotal(token) {
+        let total = 0;
+        for (const state of this.categories.values()) {
+            total += state.tokens.get(token) ?? 0;
+        }
+        return total;
+    }
+    calculateBayesianProbability(input) {
+        const { tokenInCategory, tokenTotal, categoryTally, totalTally } = input;
+        if (categoryTally <= 0 || totalTally <= 0) {
+            return 0;
+        }
+        const categoryPrior = categoryTally / totalTally;
+        const nonCategoryPrior = 1 - categoryPrior;
+        const inCategoryProb = tokenInCategory / categoryTally;
+        const remainingTally = totalTally - categoryTally;
+        const nonCategoryTokenCount = tokenTotal - tokenInCategory;
+        // If no non-category evidence exists, treat non-category probability as zero.
+        const notInCategoryProb = remainingTally > 0 && nonCategoryTokenCount > 0 ? nonCategoryTokenCount / remainingTally : 0;
+        const numerator = inCategoryProb * categoryPrior;
+        const denominator = numerator + notInCategoryProb * nonCategoryPrior;
+        return numerator / denominator;
+    }
+}
+/** Validates persisted model invariants before load. */
+export function validateModelState(model) {
+    if (model.version !== MODEL_VERSION) {
+        throw new PersistenceError("unsupported model version");
+    }
+    for (const [name, category] of Object.entries(model.categories)) {
+        if (!CATEGORY_PATTERN.test(name)) {
+            throw new PersistenceError("invalid category in model");
+        }
+        if (!Number.isInteger(category.tally) || category.tally < 0) {
+            throw new PersistenceError("invalid tally in model");
+        }
+        let sum = 0;
+        for (const [token, count] of Object.entries(category.tokens)) {
+            if (token.length === 0) {
+                throw new PersistenceError("invalid token in model");
+            }
+            if (!Number.isInteger(count) || count <= 0) {
+                throw new PersistenceError("invalid token count in model");
+            }
+            sum += count;
+        }
+        if (sum !== category.tally) {
+            throw new PersistenceError("inconsistent tally in model");
+        }
+    }
+}
+function countOccurrences(tokens) {
+    const occurrences = new Map();
+    for (const token of tokens) {
+        occurrences.set(token, (occurrences.get(token) ?? 0) + 1);
+    }
+    return occurrences;
+}
+//# sourceMappingURL=classifier.js.map

package/dist/core/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/core/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAQ1C;;;GAGG;AACH,MAAM,OAAO,cAAc;IACR,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE/D,4DAA4D;IACrD,KAAK,CAAC,QAAgB,EAAE,IAAY;QACzC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC,CAAC;YAC9C,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,OAAO,CAAC,QAAgB,EAAE,IAAY;QAC3C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClB,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;YACvC,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC;YAEzB,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,+DAA+D;IACxD,KAAK,CAAC,IAAY;QACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1C,kDAAkD;YAClD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC5C,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,IAAI,CAAC,4BAA4B,CAAC;oBACpD,eAAe;oBACf,UAAU;oBACV,aAAa,EAAE,KAAK,CAAC,KAAK;oBAC1B,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,GAAG,WAAW,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACvC,iFAAiF;YACjF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,QAAQ,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6DAA6D;IACtD,QAAQ,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,uEAAuE;IAChE,oBAAoB,CAAC,IAAY;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,+DAA+D;QAC/D,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9C,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBACtB,SAAS,GAAG,KAAK,CAAC;gBAClB,YAAY,GAAG,QAAQ,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtD,CAAC;IAED,sCAAsC;IAC/B,KAAK;QACV,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,6DAA6D;IACtD,iBAAiB;QACtB,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,QAAQ;YACR,UAAU,EAAE,KAAK,CAAC,KAAK;SACxB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,wEAAwE;IACjE,IAAI;QACT,MAAM,UAAU,GAAsC,EAAE,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,GAAG;gBACjB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,UAAU;SACX,CAAC;IACJ,CAAC;IAED,+DAA+D;IACxD,IAAI,CAAC,KAA0B;QACpC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;YACzC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACzB,KAAK,IAAI,KAAK,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAkB,EAAE,CAAC;QAC/E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,KAAa;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,4BAA4B,CAAC,KAKpC;QACC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QACzE,IAAI,aAAa,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,CAAC;QACjD,MAAM,gBAAgB,GAAG,CAAC,GAAG,aAAa,CAAC;QAC3C,MAAM,cAAc,GAAG,eAAe,GAAG,aAAa,CAAC;QAEvD,MAAM,cAAc,GAAG,UAAU,GAAG,aAAa,CAAC;QAClD,MAAM,qBAAqB,GAAG,UAAU,GAAG,eAAe,CAAC;QAC3D,8EAA8E;QAC9E,MAAM,iBAAiB,GACrB,cAAc,GAAG,CAAC,IAAI,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/F,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;QACjD,MAAM,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;QACrE,OAAO,SAAS,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,UAAU,kBAAkB,CAAC,KAA0B;IAC3D,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;YAC7D,CAAC;YACD,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAgB;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/core/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const CATEGORY_PATTERN: RegExp;
+export declare const DEFAULT_MODEL_FILE_PATH = "/tmp/tsbayes-model.json";
+export declare const MODEL_VERSION = 1;

package/dist/core/constants.js

@@ -0,0 +1,4 @@
+export const CATEGORY_PATTERN = /^[-_A-Za-z0-9]{1,64}$/;
+export const DEFAULT_MODEL_FILE_PATH = "/tmp/tsbayes-model.json";
+export const MODEL_VERSION = 1;
+//# sourceMappingURL=constants.js.map

package/dist/core/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/core/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,6 @@
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+export declare class PersistenceError extends Error {
+    constructor(message: string);
+}

package/dist/core/errors.js

@@ -0,0 +1,13 @@
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+export class PersistenceError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PersistenceError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/core/persistence.d.ts

@@ -0,0 +1,7 @@
+import type { TextClassifier } from "./classifier.js";
+/** Saves model state to disk via temp-write + rename for atomic replacement. */
+export declare function saveToFile(classifier: TextClassifier, filePath?: string): Promise<void>;
+/** Loads model state from disk and validates structure before classifier-level validation. */
+export declare function loadFromFile(classifier: TextClassifier, filePath?: string): Promise<void>;
+/** Helper for tests and tooling that need an ephemeral persisted model file. */
+export declare function saveToTempFile(classifier: TextClassifier): Promise<string>;

package/dist/core/persistence.js

@@ -0,0 +1,92 @@
+import { mkdtemp, open, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join } from "node:path";
+import { tmpdir } from "node:os";
+import { DEFAULT_MODEL_FILE_PATH } from "./constants.js";
+import { PersistenceError } from "./errors.js";
+/** Saves model state to disk via temp-write + rename for atomic replacement. */
+export async function saveToFile(classifier, filePath = DEFAULT_MODEL_FILE_PATH) {
+    if (!isAbsolute(filePath)) {
+        throw new PersistenceError("model path must be absolute");
+    }
+    const model = classifier.save();
+    const dir = dirname(filePath);
+    const tmpDir = await mkdtemp(join(dir, ".tsbayes-"));
+    const tmpFile = join(tmpDir, "model.json.tmp");
+    const payload = `${JSON.stringify(model)}\n`;
+    try {
+        await writeFile(tmpFile, payload, "utf8");
+        // fsync before rename to reduce the chance of partially persisted writes.
+        const handle = await open(tmpFile, "r");
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await rename(tmpFile, filePath);
+    }
+    finally {
+        await rm(tmpDir, { recursive: true, force: true });
+    }
+}
+/** Loads model state from disk and validates structure before classifier-level validation. */
+export async function loadFromFile(classifier, filePath = DEFAULT_MODEL_FILE_PATH) {
+    if (!isAbsolute(filePath)) {
+        throw new PersistenceError("model path must be absolute");
+    }
+    const content = await readFile(filePath, "utf8");
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        throw new PersistenceError("model file is not valid JSON");
+    }
+    if (!isPersistedModelStateShape(parsed)) {
+        throw new PersistenceError("model file has invalid structure");
+    }
+    classifier.load(parsed);
+}
+/** Helper for tests and tooling that need an ephemeral persisted model file. */
+export async function saveToTempFile(classifier) {
+    const path = join(tmpdir(), `tsbayes-${Date.now()}.json`);
+    await saveToFile(classifier, path);
+    return path;
+}
+/** Fast runtime shape check so invalid JSON shapes fail with clear errors. */
+function isPersistedModelStateShape(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (!Number.isInteger(value.version)) {
+        return false;
+    }
+    if (!isRecord(value.categories)) {
+        return false;
+    }
+    for (const [categoryName, categoryValue] of Object.entries(value.categories)) {
+        if (categoryName.length === 0 || !isRecord(categoryValue)) {
+            return false;
+        }
+        const tally = categoryValue.tally;
+        if (typeof tally !== "number" || !Number.isInteger(tally) || tally < 0) {
+            return false;
+        }
+        if (!isRecord(categoryValue.tokens)) {
+            return false;
+        }
+        for (const [token, count] of Object.entries(categoryValue.tokens)) {
+            if (token.length === 0 ||
+                typeof count !== "number" ||
+                !Number.isInteger(count) ||
+                count <= 0) {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=persistence.js.map

package/dist/core/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../../src/core/persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAI/C,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAA0B,EAC1B,QAAQ,GAAG,uBAAuB;IAElC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA0B,EAC1B,QAAQ,GAAG,uBAAuB;IAElC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;IACjE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA0B;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;gBAClB,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBACxB,KAAK,IAAI,CAAC,EACV,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/core/tokenizer.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Default tokenizer used by classifier training/scoring.
+ * Pipeline: NFKC normalize -> lowercase -> split -> trim/filter -> stem.
+ */
+export declare function tokenize(text: string): string[];

package/dist/core/tokenizer.js

@@ -0,0 +1,17 @@
+import { newStemmer } from "snowball-stemmers";
+const NON_WORD_SPLIT = /[^\p{L}\p{N}]+/u;
+const stemmer = newStemmer("english");
+/**
+ * Default tokenizer used by classifier training/scoring.
+ * Pipeline: NFKC normalize -> lowercase -> split -> trim/filter -> stem.
+ */
+export function tokenize(text) {
+    return text
+        .normalize("NFKC")
+        .toLowerCase()
+        .split(NON_WORD_SPLIT)
+        .map((token) => token.trim())
+        .filter((token) => token.length > 0)
+        .map((token) => stemmer.stem(token));
+}
+//# sourceMappingURL=tokenizer.js.map

package/dist/core/tokenizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenizer.js","sourceRoot":"","sources":["../../src/core/tokenizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI;SACR,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,16 @@
+export interface CategorySummary {
+    category: string;
+    tokenTally: number;
+}
+export interface ClassificationResult {
+    category: string | null;
+    score: number;
+}
+export interface PersistedCategoryState {
+    tally: number;
+    tokens: Record<string, number>;
+}
+export interface PersistedModelState {
+    version: number;
+    categories: Record<string, PersistedCategoryState>;
+}

package/dist/core/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { TextClassifier, validateModelState } from "./core/classifier.js";
+export { tokenize } from "./core/tokenizer.js";
+export { saveToFile, loadFromFile } from "./core/persistence.js";
+export { createApp } from "./server/app.js";
+export type { AppContext, AppOptions } from "./server/app.js";
+export type { ClassificationResult, CategorySummary, PersistedModelState } from "./core/types.js";

package/dist/index.js

@@ -0,0 +1,5 @@
+export { TextClassifier, validateModelState } from "./core/classifier.js";
+export { tokenize } from "./core/tokenizer.js";
+export { saveToFile, loadFromFile } from "./core/persistence.js";
+export { createApp } from "./server/app.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/server/app.d.ts

@@ -0,0 +1,15 @@
+import { type FastifyInstance } from "fastify";
+import { TextClassifier } from "../core/classifier.js";
+import { Readiness } from "./readiness.js";
+export interface AppOptions {
+    authToken: string | null;
+    classifier?: TextClassifier;
+    readiness?: Readiness;
+}
+export interface AppContext {
+    app: FastifyInstance;
+    classifier: TextClassifier;
+    readiness: Readiness;
+}
+/** Builds the Fastify app and wires classifier, auth, validation, and health endpoints. */
+export declare function createApp(options: AppOptions): AppContext;

package/dist/server/app.js

@@ -0,0 +1,107 @@
+import Fastify from "fastify";
+import { TextClassifier } from "../core/classifier.js";
+import { CATEGORY_PATTERN } from "../core/constants.js";
+import { ValidationError } from "../core/errors.js";
+import { Readiness } from "./readiness.js";
+import { checkAuthorization } from "./auth.js";
+const MAX_BODY_SIZE_BYTES = 1024 * 1024;
+const CATEGORY_PARAMS_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["category"],
+    properties: {
+        category: {
+            type: "string",
+            minLength: 1,
+            maxLength: 64,
+            pattern: CATEGORY_PATTERN.source
+        }
+    }
+};
+/** Builds the Fastify app and wires classifier, auth, validation, and health endpoints. */
+export function createApp(options) {
+    const classifier = options.classifier ?? new TextClassifier();
+    const readiness = options.readiness ?? new Readiness();
+    const app = Fastify({
+        logger: false,
+        bodyLimit: MAX_BODY_SIZE_BYTES
+    });
+    // Parse all payloads as UTF-8 text; endpoint handlers decide how to use content.
+    app.addContentTypeParser("*", { parseAs: "buffer" }, (request, body, done) => {
+        done(null, body.toString("utf8"));
+    });
+    app.addHook("onRequest", async (request, reply) => {
+        // Charset checks happen early so invalid content types fail consistently.
+        const charset = parseCharset(request.headers["content-type"]);
+        if (charset && charset.toLowerCase() !== "utf-8") {
+            throw new ValidationError("content must be utf-8");
+        }
+        if (!checkAuthorization(options.authToken, request, reply)) {
+            return reply;
+        }
+        return undefined;
+    });
+    app.get("/healthz", () => ({ status: "ok" }));
+    app.get("/readyz", (request, reply) => {
+        if (!readiness.isReady()) {
+            return reply.code(503).send({ error: "not ready" });
+        }
+        return { status: "ready" };
+    });
+    app.get("/info", () => ({ categories: classifier.categorySummaries() }));
+    app.post("/train/:category", { schema: { params: CATEGORY_PARAMS_SCHEMA } }, async (request, reply) => {
+        const { category } = request.params;
+        classifier.train(category, bodyAsText(request.body));
+        return reply.code(204).send();
+    });
+    app.post("/untrain/:category", { schema: { params: CATEGORY_PARAMS_SCHEMA } }, async (request, reply) => {
+        const { category } = request.params;
+        classifier.untrain(category, bodyAsText(request.body));
+        return reply.code(204).send();
+    });
+    app.post("/classify", (request) => classifier.classificationResult(bodyAsText(request.body)));
+    app.post("/score", (request) => classifier.score(bodyAsText(request.body)));
+    app.post("/flush", (request, reply) => {
+        classifier.flush();
+        return reply.code(204).send();
+    });
+    app.setErrorHandler((error, request, reply) => {
+        if (error instanceof ValidationError) {
+            return reply.code(400).send({ error: error.message });
+        }
+        if (error.code === "FST_ERR_VALIDATION") {
+            // Route-schema validation failures map to one stable API error.
+            return reply.code(400).send({ error: "invalid request" });
+        }
+        if (error.code === "FST_ERR_CTP_BODY_TOO_LARGE") {
+            return reply.code(413).send({ error: "payload too large" });
+        }
+        request.log.error(error);
+        return reply.code(500).send({ error: "internal server error" });
+    });
+    app.setNotFoundHandler((request, reply) => reply.code(404).send({ error: "not found" }));
+    return { app, classifier, readiness };
+}
+function bodyAsText(body) {
+    if (body == null) {
+        return "";
+    }
+    if (typeof body === "string") {
+        return body;
+    }
+    throw new ValidationError("body must be text");
+}
+/** Extracts optional charset from Content-Type (for example "text/plain; charset=utf-8"). */
+function parseCharset(contentType) {
+    if (!contentType) {
+        return null;
+    }
+    const parts = contentType.split(";").map((part) => part.trim());
+    for (const part of parts) {
+        if (part.toLowerCase().startsWith("charset=")) {
+            return part.slice("charset=".length).trim();
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAiC,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,gBAAgB,CAAC,MAAM;SACjC;KACF;CACO,CAAC;AAcX,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,cAAc,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAC;IAEvD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,iFAAiF;IACjF,GAAG,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC3E,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChD,0EAA0E;QAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;IAEzE,GAAG,CAAC,IAAI,CACN,kBAAkB,EAClB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAC9C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,oBAAoB,EACpB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAC9C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9F,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACpC,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAK,KAA2B,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC/D,gEAAgE;YAChE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAK,KAA2B,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAEzF,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,6FAA6F;AAC7F,SAAS,YAAY,CAAC,WAA+B;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/auth.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+/** Probe routes intentionally bypass auth checks. */
+export declare function isProbePath(path: string): boolean;
+/** Validates bearer auth for protected routes and writes 401 responses when needed. */
+export declare function checkAuthorization(token: string | null, request: FastifyRequest, reply: FastifyReply): boolean;

package/dist/server/auth.js

@@ -0,0 +1,49 @@
+import { timingSafeEqual } from "node:crypto";
+/** Probe routes intentionally bypass auth checks. */
+export function isProbePath(path) {
+    return path === "/healthz" || path === "/readyz";
+}
+/** Validates bearer auth for protected routes and writes 401 responses when needed. */
+export function checkAuthorization(token, request, reply) {
+    if (!token || isProbePath(request.url)) {
+        return true;
+    }
+    const header = request.headers.authorization;
+    if (!header) {
+        reply.header("WWW-Authenticate", "Bearer");
+        reply.code(401).send({ error: "unauthorized" });
+        return false;
+    }
+    const match = /^Bearer ([^\s]+)$/i.exec(header.trim());
+    if (!match) {
+        reply.header("WWW-Authenticate", "Bearer");
+        reply.code(401).send({ error: "unauthorized" });
+        return false;
+    }
+    const value = match[1];
+    if (!safeEqual(value, token)) {
+        reply.header("WWW-Authenticate", "Bearer");
+        reply.code(401).send({ error: "unauthorized" });
+        return false;
+    }
+    return true;
+}
+/**
+ * Constant-time comparison for token equality.
+ * For mismatched lengths we still run timingSafeEqual on padded buffers.
+ */
+function safeEqual(left, right) {
+    const l = Buffer.from(left, "utf8");
+    const r = Buffer.from(right, "utf8");
+    if (l.length !== r.length) {
+        const max = Math.max(l.length, r.length);
+        const lp = Buffer.alloc(max);
+        const rp = Buffer.alloc(max);
+        l.copy(lp);
+        r.copy(rp);
+        timingSafeEqual(lp, rp);
+        return false;
+    }
+    return timingSafeEqual(l, r);
+}
+//# sourceMappingURL=auth.js.map

package/dist/server/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,qDAAqD;AACrD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC;AACnD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,OAAuB,EACvB,KAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAExB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/server/config.d.ts

@@ -0,0 +1,6 @@
+export interface ServerConfig {
+    host: string;
+    port: number;
+    authToken: string | null;
+}
+export declare function loadConfig(env: NodeJS.ProcessEnv): ServerConfig;

package/dist/server/config.js

@@ -0,0 +1,19 @@
+import { ValidationError } from "../core/errors.js";
+export function loadConfig(env) {
+    const host = env.TSBAYES_HOST ?? "0.0.0.0";
+    const port = parsePort(env.TSBAYES_PORT ?? "8000");
+    const authToken = (env.TSBAYES_AUTH_TOKEN ?? "").trim();
+    return {
+        host,
+        port,
+        authToken: authToken.length > 0 ? authToken : null
+    };
+}
+function parsePort(raw) {
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1 || value > 65535) {
+        throw new ValidationError("invalid port");
+    }
+    return value;
+}
+//# sourceMappingURL=config.js.map

package/dist/server/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/server/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAQpD,MAAM,UAAU,UAAU,CAAC,GAAsB;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAExD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/readiness.d.ts

@@ -0,0 +1,5 @@
+export declare class Readiness {
+    private ready;
+    isReady(): boolean;
+    setReady(value: boolean): void;
+}

package/dist/server/readiness.js

@@ -0,0 +1,10 @@
+export class Readiness {
+    ready = true;
+    isReady() {
+        return this.ready;
+    }
+    setReady(value) {
+        this.ready = value;
+    }
+}
+//# sourceMappingURL=readiness.js.map

package/dist/server/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/server/readiness.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAS;IACZ,KAAK,GAAG,IAAI,CAAC;IAEd,OAAO;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,QAAQ,CAAC,KAAc;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/dist/server/start.d.ts

@@ -0,0 +1,3 @@
+import { type AppContext } from "./app.js";
+import type { ServerConfig } from "./config.js";
+export declare function startServer(config: ServerConfig): Promise<AppContext>;

package/dist/server/start.js

@@ -0,0 +1,10 @@
+import { createApp } from "./app.js";
+export async function startServer(config) {
+    const context = createApp({ authToken: config.authToken });
+    await context.app.listen({
+        host: config.host,
+        port: config.port
+    });
+    return context;
+}
+//# sourceMappingURL=start.js.map

package/dist/server/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/server/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,UAAU,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "@hickeroar/tsbayes",
+  "version": "0.1.0",
+  "description": "A trainable Bayesian text classifier library and HTTP service.",
+  "type": "module",
+  "author": "Ryan Vennell <ryan.vennell@gmail.com>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hickeroar/tsbayes.git"
+  },
+  "homepage": "https://github.com/hickeroar/tsbayes#readme",
+  "bugs": {
+    "url": "https://github.com/hickeroar/tsbayes/issues"
+  },
+  "keywords": [
+    "bayes",
+    "naive-bayes",
+    "text-classification",
+    "fastify",
+    "typescript"
+  ],
+  "bin": {
+    "tsbayes": "dist/cli.js"
+  },
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "clean": "rm -rf dist coverage",
+    "start": "node dist/cli.js",
+    "dev": "tsx watch src/cli.ts",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "precommit": "npm run format:check && npm run lint && npm run typecheck && npm run test",
+    "prepublishOnly": "npm run clean && npm run lint && npm run typecheck && npm run test:coverage && npm run build",
+    "standalone:audit": "node scripts/standalone-audit.mjs"
+  },
+  "dependencies": {
+    "fastify": "5.7.4",
+    "snowball-stemmers": "0.6.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "10.0.1",
+    "@types/node": "25.3.0",
+    "@vitest/coverage-v8": "4.0.18",
+    "eslint": "10.0.1",
+    "eslint-config-prettier": "10.1.8",
+    "prettier": "3.8.1",
+    "tsx": "4.21.0",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.56.0",
+    "vitest": "4.0.18"
+  },
+  "overrides": {
+    "minimatch": "^10.2.1"
+  }
+}