@hydranium/core 1.0.0-next.333 → 1.0.0-next.335

package/lib/lsp/edit-requests-guard.d.ts

@@ -0,0 +1,31 @@
+/********************************************************************************
+ * Copyright (c) 2026 EclipseSource and others.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the MIT License which is available in the project root.
+ *
+ * SPDX-License-Identifier: MIT
+ ********************************************************************************/
+import { type LangiumSharedServices } from '@hydranium/langium/lsp';
+import { type Connection } from 'vscode-languageserver';
+/**
+ * Refuse with `ContentModified` a request whose answer edits documents, when
+ * the editor of the request's document is behind the store as it arrives, or
+ * when a document the answer edits changed while it was computed, by another
+ * client, by a rebuild of a closed document or by its release, or its editor
+ * is then behind.
+ *
+ * The editor applies the edits by position to the text it holds, and sent the
+ * request's position in it, so an answer computed on other text rewrites the
+ * wrong characters. The check runs on the answer, since the documents a rename
+ * or code action edits are only known there, and on the connection, so an
+ * adopter's provider for these requests is covered. Edits that arrive by a
+ * resolve request, a file operation, `willSaveWaitUntil`, an inlay hint or a
+ * command's `workspace/applyEdit` are not.
+ *
+ * Read-only answers are not refused, since a refusal would blank them. An
+ * editor ahead of the store does not exist, as its changes reach the store
+ * before any request it sends after them.
+ */
+export declare function guardEditRequests(connection: Connection, services: LangiumSharedServices): void;
+//# sourceMappingURL=edit-requests-guard.d.ts.map

package/lib/lsp/edit-requests-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-requests-guard.d.ts","sourceRoot":"","sources":["../../src/lsp/edit-requests-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAGlF,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EACJ,KAAK,UAAU,EAMjB,MAAM,uBAAuB,CAAC;AAS/B;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAgG/F"}

package/lib/lsp/edit-requests-guard.js

@@ -0,0 +1,125 @@
+/********************************************************************************
+ * Copyright (c) 2026 EclipseSource and others.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the MIT License which is available in the project root.
+ *
+ * SPDX-License-Identifier: MIT
+ ********************************************************************************/
+import { LSPErrorCodes, ResponseError } from 'vscode-languageserver';
+import { LANGUAGE_CLIENT_ID } from '../documents/client-ids.js';
+import { HydraniumTextDocuments } from '../documents/hydranium-text-documents.js';
+const wrappedConnections = new WeakSet();
+/**
+ * Refuse with `ContentModified` a request whose answer edits documents, when
+ * the editor of the request's document is behind the store as it arrives, or
+ * when a document the answer edits changed while it was computed, by another
+ * client, by a rebuild of a closed document or by its release, or its editor
+ * is then behind.
+ *
+ * The editor applies the edits by position to the text it holds, and sent the
+ * request's position in it, so an answer computed on other text rewrites the
+ * wrong characters. The check runs on the answer, since the documents a rename
+ * or code action edits are only known there, and on the connection, so an
+ * adopter's provider for these requests is covered. Edits that arrive by a
+ * resolve request, a file operation, `willSaveWaitUntil`, an inlay hint or a
+ * command's `workspace/applyEdit` are not.
+ *
+ * Read-only answers are not refused, since a refusal would blank them. An
+ * editor ahead of the store does not exist, as its changes reach the store
+ * before any request it sends after them.
+ */
+export function guardEditRequests(connection, services) {
+    const store = services.workspace.TextDocuments;
+    if (wrappedConnections.has(connection) || !(store instanceof HydraniumTextDocuments)) {
+        return;
+    }
+    wrappedConnections.add(connection);
+    // A Hydranium store implies the Hydranium shared services.
+    const keyOf = (uri) => services.workspace.DocumentUriPolicy.canonicalUri(uri);
+    const versions = () => new Map(store.all().map(document => [document.uri, document.version]));
+    // A closed document records no author per version, so a rebuild of it
+    // while an answer is computed is what refuses the answer. A release clears
+    // the authors, so a reopen would attribute another client's change to the
+    // editor, and refuses it as well.
+    const watching = new Set();
+    services.workspace.DocumentBuilder.onUpdate((changed, deleted) => {
+        if (watching.size === 0) {
+            return;
+        }
+        const keys = [...changed, ...deleted].map(keyOf);
+        for (const watched of watching) {
+            keys.forEach(key => watched.rebuilt.add(key));
+        }
+    });
+    store.onDidReleaseDocument(event => {
+        for (const watched of watching) {
+            watched.released.add(event.uri);
+        }
+    });
+    // The editor's own changes are not counted: it discards or re-filters an
+    // answer that predates them, and counting them would blank completion
+    // while the user types.
+    const changedByAnother = (uri, from, to) => {
+        if (from === undefined) {
+            return true;
+        }
+        for (let version = from + 1; version <= to; version++) {
+            if (store.getAuthor(uri, version) !== LANGUAGE_CLIENT_ID) {
+                return true;
+            }
+        }
+        return false;
+    };
+    const refused = () => new ResponseError(LSPErrorCodes.ContentModified, 'The editor does not hold the text the answer was computed on');
+    // The request's position is in the editor's text, which an answer
+    // computed on the store's would be applied past.
+    const behind = (uri) => store.isLanguageClientBehind(uri, store.version(uri));
+    /** Watches the documents an answer may edit while it is computed; dispose it after. */
+    const watch = () => {
+        const computedOn = versions();
+        const watched = { rebuilt: new Set(), released: new Set() };
+        watching.add(watched);
+        return {
+            changed: uris => [...new Set(uris)].some(uri => {
+                const document = store.get(uri);
+                const key = keyOf(uri);
+                const changed = watched.released.has(key) ||
+                    (document === undefined
+                        ? watched.rebuilt.has(key)
+                        : changedByAnother(uri, computedOn.get(document.uri), document.version));
+                return changed || behind(uri);
+            }),
+            dispose: () => watching.delete(watched)
+        };
+    };
+    const guard = (register, edited = () => []) => handler => register(async (params, ...rest) => {
+        const uri = params.textDocument.uri;
+        if (behind(uri)) {
+            return refused();
+        }
+        const answer = watch();
+        try {
+            const result = await handler(params, ...rest);
+            return result instanceof ResponseError || !answer.changed([uri, ...edited(result)]) ? result : refused();
+        }
+        finally {
+            answer.dispose();
+        }
+    });
+    connection.onCompletion = guard(connection.onCompletion.bind(connection));
+    connection.onDocumentFormatting = guard(connection.onDocumentFormatting.bind(connection));
+    connection.onDocumentRangeFormatting = guard(connection.onDocumentRangeFormatting.bind(connection));
+    connection.onDocumentOnTypeFormatting = guard(connection.onDocumentOnTypeFormatting.bind(connection));
+    connection.onRenameRequest = guard(connection.onRenameRequest.bind(connection), editedUris);
+    connection.onCodeAction = guard(connection.onCodeAction.bind(connection), actions => (actions ?? []).flatMap(action => ('edit' in action && action.edit ? [...editedUris(action.edit)] : [])));
+}
+function* editedUris(edit) {
+    yield* Object.keys(edit?.changes ?? {});
+    for (const change of edit?.documentChanges ?? []) {
+        if ('textDocument' in change) {
+            yield change.textDocument.uri;
+        }
+    }
+}
+//# sourceMappingURL=edit-requests-guard.js.map

package/lib/lsp/edit-requests-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-requests-guard.js","sourceRoot":"","sources":["../../src/lsp/edit-requests-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAIlF,OAAO,EAIJ,aAAa,EACb,aAAa,EAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAGlF,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAU,CAAC;AAIjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAsB,EAAE,QAA+B;IACtF,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC;IAC/C,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC,EAAE,CAAC;QACpF,OAAO;IACV,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,2DAA2D;IAC3D,MAAM,KAAK,GAAG,CAAC,GAAiB,EAAU,EAAE,CACxC,QAAgE,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,GAAgC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3H,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqE,CAAC;IAC9F,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC9D,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;QACV,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE;QAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,yEAAyE;IACzE,sEAAsE;IACtE,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,IAAwB,EAAE,EAAU,EAAW,EAAE;QACrF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACf,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC;YACf,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAwB,EAAE,CACvC,IAAI,aAAa,CAAI,aAAa,CAAC,eAAe,EAAE,8DAA8D,CAAC,CAAC;IACvH,kEAAkE;IAClE,iDAAiD;IACjD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,uFAAuF;IACvF,MAAM,KAAK,GAAG,GAAkE,EAAE;QAC/E,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,GAAG,EAAU,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;QAC5E,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;YACJ,OAAO,EAAE,IAAI,CAAC,EAAE,CACb,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;oBACzB,CAAC,QAAQ,KAAK,SAAS;wBACpB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBAC1B,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/E,OAAO,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC,CAAC;YACL,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;SACzC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,KAAK,GACR,CACG,QAA8B,EAC9B,MAAM,GAA8D,GAAG,EAAE,CAAC,EAAE,EACvD,EAAE,CAC1B,OAAO,CAAC,EAAE,CACP,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,OAAO,EAAK,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAC9C,OAAO,MAAM,YAAY,aAAa,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAK,CAAC;QAC/G,CAAC;gBAAS,CAAC;YACR,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAET,UAAU,CAAC,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1E,UAAU,CAAC,oBAAoB,GAAG,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1F,UAAU,CAAC,yBAAyB,GAAG,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpG,UAAU,CAAC,0BAA0B,GAAG,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACtG,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC5F,UAAU,CAAC,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,CACjF,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC1G,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,CAAC,UAAU,CAAC,IAA6C;IAC/D,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;QACjC,CAAC;IACJ,CAAC;AACJ,CAAC"}

package/lib/lsp/index.d.ts

@@ -10,6 +10,7 @@ export * from './completion/hydranium-completion-provider.js';
 export * from './lsp-latency.js';
 export * from './connection-features.js';
 export * from './diagnostics-connection.js';
+export * from './edit-requests-guard.js';
 export * from './semantic-token-provider.js';
 export * from './language-module.js';
 export * from './shared-module.js';
@@ -20,7 +21,7 @@ export * from './save-text-document.js';
  * head: framework overrides + the start function live behind one
  * `@hydranium/core/lsp` subpath, mirroring Langium's own `langium/lsp`
  * convention. Signature-compatible with Langium's `startLanguageServer`, plus
- * a guard that the head's shared module was composed.
+ * the composition check and the connection guards listed in its doc.
  */
 export * from './start-language-server.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/lsp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lsp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AAExC;;;;;;GAMG;AACH,cAAc,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lsp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AAExC;;;;;;GAMG;AACH,cAAc,4BAA4B,CAAC"}

package/lib/lsp/index.js

@@ -10,6 +10,7 @@ export * from './completion/hydranium-completion-provider.js';
 export * from './lsp-latency.js';
 export * from './connection-features.js';
 export * from './diagnostics-connection.js';
+export * from './edit-requests-guard.js';
 export * from './semantic-token-provider.js';
 export * from './language-module.js';
 export * from './shared-module.js';
@@ -20,7 +21,7 @@ export * from './save-text-document.js';
  * head: framework overrides + the start function live behind one
  * `@hydranium/core/lsp` subpath, mirroring Langium's own `langium/lsp`
  * convention. Signature-compatible with Langium's `startLanguageServer`, plus
- * a guard that the head's shared module was composed.
+ * the composition check and the connection guards listed in its doc.
  */
 export * from './start-language-server.js';
 //# sourceMappingURL=index.js.map

package/lib/lsp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lsp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AAExC;;;;;;GAMG;AACH,cAAc,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lsp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AAExC;;;;;;GAMG;AACH,cAAc,4BAA4B,CAAC"}

package/lib/lsp/start-language-server.d.ts

@@ -34,14 +34,15 @@ import { type LangiumSharedServices, type ServiceRequirements } from '@hydranium
 export declare function assertLspHeadComposed(services: LangiumSharedServices): void;
 /**
  * The framework's LSP server entry point: {@link assertLspHeadComposed}, then
- * {@link guardDiagnosticsConnection} on the tree's connection, then the
- * console's wrapping for the log file, then Langium's `startLanguageServer`.
- * Signature-compatible with Langium's, so it is a drop-in for adopters
- * importing from `@hydranium/core/lsp`. Calling Langium's directly skips the
- * composition check, the guard without which a publish racing teardown fails
- * the build that validated the document, and the wrapping, which a stdio
- * connection discards where a logger was built before it (see
- * `installConsoleTee`).
+ * {@link guardDiagnosticsConnection} and {@link guardEditRequests} on the
+ * tree's connection, then the console's wrapping for the log file, then
+ * Langium's `startLanguageServer`. Signature-compatible with Langium's, so it
+ * is a drop-in for adopters importing from `@hydranium/core/lsp`. Calling
+ * Langium's directly skips the composition check, the guard without which a
+ * publish racing teardown fails the build that validated the document, the
+ * guard without which an edit lands on text the editor does not hold, and the
+ * wrapping, which a stdio connection discards where a logger was built before
+ * it (see `installConsoleTee`).
  */
 export declare function startLanguageServer(services: LangiumSharedServices, serviceRequirements?: Partial<ServiceRequirements>): void;
 //# sourceMappingURL=start-language-server.d.ts.map

package/lib/lsp/start-language-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-language-server.d.ts","sourceRoot":"","sources":["../../src/lsp/start-language-server.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,OAAO,EAEJ,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EAC1B,MAAM,wBAAwB,CAAC;AAKhC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAe3E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,mBAAmB,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,IAAI,CAQjI"}
+{"version":3,"file":"start-language-server.d.ts","sourceRoot":"","sources":["../../src/lsp/start-language-server.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,OAAO,EAEJ,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EAC1B,MAAM,wBAAwB,CAAC;AAMhC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAe3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,mBAAmB,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,IAAI,CASjI"}

package/lib/lsp/start-language-server.js

@@ -9,6 +9,7 @@
 import { startLanguageServer as startLangiumLanguageServer } from '@hydranium/langium/lsp';
 import { HydraniumDocumentUpdateHandler } from './hydranium-document-update-handler.js';
 import { guardDiagnosticsConnection } from './diagnostics-connection.js';
+import { guardEditRequests } from './edit-requests-guard.js';
 import { installConsoleTee } from '../langium/diagnostics/console-tee.js';
 /**
  * Fail the LSP head's start when its shared module was never composed.
@@ -50,20 +51,22 @@ export function assertLspHeadComposed(services) {
 }
 /**
  * The framework's LSP server entry point: {@link assertLspHeadComposed}, then
- * {@link guardDiagnosticsConnection} on the tree's connection, then the
- * console's wrapping for the log file, then Langium's `startLanguageServer`.
- * Signature-compatible with Langium's, so it is a drop-in for adopters
- * importing from `@hydranium/core/lsp`. Calling Langium's directly skips the
- * composition check, the guard without which a publish racing teardown fails
- * the build that validated the document, and the wrapping, which a stdio
- * connection discards where a logger was built before it (see
- * `installConsoleTee`).
+ * {@link guardDiagnosticsConnection} and {@link guardEditRequests} on the
+ * tree's connection, then the console's wrapping for the log file, then
+ * Langium's `startLanguageServer`. Signature-compatible with Langium's, so it
+ * is a drop-in for adopters importing from `@hydranium/core/lsp`. Calling
+ * Langium's directly skips the composition check, the guard without which a
+ * publish racing teardown fails the build that validated the document, the
+ * guard without which an edit lands on text the editor does not hold, and the
+ * wrapping, which a stdio connection discards where a logger was built before
+ * it (see `installConsoleTee`).
  */
 export function startLanguageServer(services, serviceRequirements = {}) {
     assertLspHeadComposed(services);
     const connection = services.lsp.Connection;
     if (connection) {
         guardDiagnosticsConnection(connection);
+        guardEditRequests(connection, services);
     }
     installConsoleTee();
     startLangiumLanguageServer(services, serviceRequirements);

package/lib/lsp/start-language-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"start-language-server.js","sourceRoot":"","sources":["../../src/lsp/start-language-server.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,OAAO,EACJ,mBAAmB,IAAI,0BAA0B,EAGnD,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA+B;IAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QAC7B,OAAO;IACV,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,YAAY,8BAA8B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACZ,oGAAoG;YACjG,IAAI,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,SAAS,uEAAuE;YAClH,kHAAkH;YAClH,kGAAkG;YAClG,4GAA4G;YAC5G,4CAA4C,CACjD,CAAC;IACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA+B,EAAE,mBAAmB,GAAiC,EAAE;IACxH,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACd,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,iBAAiB,EAAE,CAAC;IACpB,0BAA0B,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"start-language-server.js","sourceRoot":"","sources":["../../src/lsp/start-language-server.ts"],"names":[],"mappings":"AAAA;;;;;;;kFAOkF;AAElF,OAAO,EACJ,mBAAmB,IAAI,0BAA0B,EAGnD,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA+B;IAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QAC7B,OAAO;IACV,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,YAAY,8BAA8B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACZ,oGAAoG;YACjG,IAAI,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,SAAS,uEAAuE;YAClH,kHAAkH;YAClH,kGAAkG;YAClG,4GAA4G;YAC5G,4CAA4C,CACjD,CAAC;IACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA+B,EAAE,mBAAmB,GAAiC,EAAE;IACxH,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACd,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACvC,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,iBAAiB,EAAE,CAAC;IACpB,0BAA0B,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC7D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hydranium/core",
-  "version": "1.0.0-next.333",
+  "version": "1.0.0-next.335",
   "description": "Foundational runtime of the hydranium framework: AST coordination layer (services, integrity, AST extension, serialization, multi-client documents) plus the LSP textual head at the /lsp subpath. Consumed by protocol-head packages (@hydranium/data-server, @hydranium/glsp-server).",
   "keywords": [
     "ast",
@@ -87,8 +87,8 @@
     "diff": "^5.2.0"
   },
   "devDependencies": {
-    "@hydranium/langium": "1.0.0-next.333",
-    "@hydranium/protocol": "1.0.0-next.333",
+    "@hydranium/langium": "1.0.0-next.335",
+    "@hydranium/protocol": "1.0.0-next.335",
     "@playwright/test": "^1.55.0",
     "@types/diff": "^5.2.0",
     "fake-indexeddb": "^6.2.5",
@@ -101,8 +101,8 @@
     "vscode-languageserver-types": "^3.17.5"
   },
   "peerDependencies": {
-    "@hydranium/langium": "1.0.0-next.333",
-    "@hydranium/protocol": "1.0.0-next.333",
+    "@hydranium/langium": "1.0.0-next.335",
+    "@hydranium/protocol": "1.0.0-next.335",
     "@playwright/test": "^1.40.0",
     "vscode-jsonrpc": "^9.0.0",
     "vscode-languageserver": "~10.0.1",

package/src/lsp/edit-requests-guard.ts

@@ -0,0 +1,152 @@
+/********************************************************************************
+ * Copyright (c) 2026 EclipseSource and others.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the MIT License which is available in the project root.
+ *
+ * SPDX-License-Identifier: MIT
+ ********************************************************************************/
+
+import { type URI } from '@hydranium/langium';
+import { type LangiumSharedServices } from '@hydranium/langium/lsp';
+import {
+   type Connection,
+   type Disposable,
+   type HandlerResult,
+   LSPErrorCodes,
+   ResponseError,
+   type WorkspaceEdit
+} from 'vscode-languageserver';
+import { LANGUAGE_CLIENT_ID } from '../documents/client-ids.js';
+import { HydraniumTextDocuments } from '../documents/hydranium-text-documents.js';
+import { type ServerSharedServicesMinimal } from '../langium/shared-services.js';
+
+const wrappedConnections = new WeakSet<object>();
+
+type Register<P, A extends unknown[], R, E> = (handler: (params: P, ...rest: A) => HandlerResult<R, E>) => Disposable;
+
+/**
+ * Refuse with `ContentModified` a request whose answer edits documents, when
+ * the editor of the request's document is behind the store as it arrives, or
+ * when a document the answer edits changed while it was computed, by another
+ * client, by a rebuild of a closed document or by its release, or its editor
+ * is then behind.
+ *
+ * The editor applies the edits by position to the text it holds, and sent the
+ * request's position in it, so an answer computed on other text rewrites the
+ * wrong characters. The check runs on the answer, since the documents a rename
+ * or code action edits are only known there, and on the connection, so an
+ * adopter's provider for these requests is covered. Edits that arrive by a
+ * resolve request, a file operation, `willSaveWaitUntil`, an inlay hint or a
+ * command's `workspace/applyEdit` are not.
+ *
+ * Read-only answers are not refused, since a refusal would blank them. An
+ * editor ahead of the store does not exist, as its changes reach the store
+ * before any request it sends after them.
+ */
+export function guardEditRequests(connection: Connection, services: LangiumSharedServices): void {
+   const store = services.workspace.TextDocuments;
+   if (wrappedConnections.has(connection) || !(store instanceof HydraniumTextDocuments)) {
+      return;
+   }
+   wrappedConnections.add(connection);
+   // A Hydranium store implies the Hydranium shared services.
+   const keyOf = (uri: URI | string): string =>
+      (services as LangiumSharedServices & ServerSharedServicesMinimal).workspace.DocumentUriPolicy.canonicalUri(uri);
+   const versions = (): ReadonlyMap<string, number> => new Map(store.all().map(document => [document.uri, document.version]));
+   // A closed document records no author per version, so a rebuild of it
+   // while an answer is computed is what refuses the answer. A release clears
+   // the authors, so a reopen would attribute another client's change to the
+   // editor, and refuses it as well.
+   const watching = new Set<{ readonly rebuilt: Set<string>; readonly released: Set<string> }>();
+   services.workspace.DocumentBuilder.onUpdate((changed, deleted) => {
+      if (watching.size === 0) {
+         return;
+      }
+      const keys = [...changed, ...deleted].map(keyOf);
+      for (const watched of watching) {
+         keys.forEach(key => watched.rebuilt.add(key));
+      }
+   });
+   store.onDidReleaseDocument(event => {
+      for (const watched of watching) {
+         watched.released.add(event.uri);
+      }
+   });
+   // The editor's own changes are not counted: it discards or re-filters an
+   // answer that predates them, and counting them would blank completion
+   // while the user types.
+   const changedByAnother = (uri: string, from: number | undefined, to: number): boolean => {
+      if (from === undefined) {
+         return true;
+      }
+      for (let version = from + 1; version <= to; version++) {
+         if (store.getAuthor(uri, version) !== LANGUAGE_CLIENT_ID) {
+            return true;
+         }
+      }
+      return false;
+   };
+   const refused = <E>(): ResponseError<E> =>
+      new ResponseError<E>(LSPErrorCodes.ContentModified, 'The editor does not hold the text the answer was computed on');
+   // The request's position is in the editor's text, which an answer
+   // computed on the store's would be applied past.
+   const behind = (uri: string): boolean => store.isLanguageClientBehind(uri, store.version(uri));
+   /** Watches the documents an answer may edit while it is computed; dispose it after. */
+   const watch = (): { changed(uris: Iterable<string>): boolean; dispose(): void } => {
+      const computedOn = versions();
+      const watched = { rebuilt: new Set<string>(), released: new Set<string>() };
+      watching.add(watched);
+      return {
+         changed: uris =>
+            [...new Set(uris)].some(uri => {
+               const document = store.get(uri);
+               const key = keyOf(uri);
+               const changed =
+                  watched.released.has(key) ||
+                  (document === undefined
+                     ? watched.rebuilt.has(key)
+                     : changedByAnother(uri, computedOn.get(document.uri), document.version));
+               return changed || behind(uri);
+            }),
+         dispose: () => watching.delete(watched)
+      };
+   };
+   const guard =
+      <P extends { readonly textDocument: { readonly uri: string } }, A extends unknown[], R, E>(
+         register: Register<P, A, R, E>,
+         edited: (result: R | null | undefined | void) => Iterable<string> = () => []
+      ): Register<P, A, R, E> =>
+      handler =>
+         register(async (params, ...rest) => {
+            const uri = params.textDocument.uri;
+            if (behind(uri)) {
+               return refused<E>();
+            }
+            const answer = watch();
+            try {
+               const result = await handler(params, ...rest);
+               return result instanceof ResponseError || !answer.changed([uri, ...edited(result)]) ? result : refused<E>();
+            } finally {
+               answer.dispose();
+            }
+         });
+
+   connection.onCompletion = guard(connection.onCompletion.bind(connection));
+   connection.onDocumentFormatting = guard(connection.onDocumentFormatting.bind(connection));
+   connection.onDocumentRangeFormatting = guard(connection.onDocumentRangeFormatting.bind(connection));
+   connection.onDocumentOnTypeFormatting = guard(connection.onDocumentOnTypeFormatting.bind(connection));
+   connection.onRenameRequest = guard(connection.onRenameRequest.bind(connection), editedUris);
+   connection.onCodeAction = guard(connection.onCodeAction.bind(connection), actions =>
+      (actions ?? []).flatMap(action => ('edit' in action && action.edit ? [...editedUris(action.edit)] : []))
+   );
+}
+
+function* editedUris(edit: WorkspaceEdit | null | undefined | void): Iterable<string> {
+   yield* Object.keys(edit?.changes ?? {});
+   for (const change of edit?.documentChanges ?? []) {
+      if ('textDocument' in change) {
+         yield change.textDocument.uri;
+      }
+   }
+}

package/src/lsp/index.ts

@@ -11,6 +11,7 @@ export * from './completion/hydranium-completion-provider.js';
 export * from './lsp-latency.js';
 export * from './connection-features.js';
 export * from './diagnostics-connection.js';
+export * from './edit-requests-guard.js';
 export * from './semantic-token-provider.js';
 export * from './language-module.js';
 export * from './shared-module.js';
@@ -22,6 +23,6 @@ export * from './save-text-document.js';
  * head: framework overrides + the start function live behind one
  * `@hydranium/core/lsp` subpath, mirroring Langium's own `langium/lsp`
  * convention. Signature-compatible with Langium's `startLanguageServer`, plus
- * a guard that the head's shared module was composed.
+ * the composition check and the connection guards listed in its doc.
  */
 export * from './start-language-server.js';

package/src/lsp/start-language-server.ts

@@ -14,6 +14,7 @@ import {
 } from '@hydranium/langium/lsp';
 import { HydraniumDocumentUpdateHandler } from './hydranium-document-update-handler.js';
 import { guardDiagnosticsConnection } from './diagnostics-connection.js';
+import { guardEditRequests } from './edit-requests-guard.js';
 import { installConsoleTee } from '../langium/diagnostics/console-tee.js';
 
 /**
@@ -59,20 +60,22 @@ export function assertLspHeadComposed(services: LangiumSharedServices): void {
 
 /**
  * The framework's LSP server entry point: {@link assertLspHeadComposed}, then
- * {@link guardDiagnosticsConnection} on the tree's connection, then the
- * console's wrapping for the log file, then Langium's `startLanguageServer`.
- * Signature-compatible with Langium's, so it is a drop-in for adopters
- * importing from `@hydranium/core/lsp`. Calling Langium's directly skips the
- * composition check, the guard without which a publish racing teardown fails
- * the build that validated the document, and the wrapping, which a stdio
- * connection discards where a logger was built before it (see
- * `installConsoleTee`).
+ * {@link guardDiagnosticsConnection} and {@link guardEditRequests} on the
+ * tree's connection, then the console's wrapping for the log file, then
+ * Langium's `startLanguageServer`. Signature-compatible with Langium's, so it
+ * is a drop-in for adopters importing from `@hydranium/core/lsp`. Calling
+ * Langium's directly skips the composition check, the guard without which a
+ * publish racing teardown fails the build that validated the document, the
+ * guard without which an edit lands on text the editor does not hold, and the
+ * wrapping, which a stdio connection discards where a logger was built before
+ * it (see `installConsoleTee`).
  */
 export function startLanguageServer(services: LangiumSharedServices, serviceRequirements: Partial<ServiceRequirements> = {}): void {
    assertLspHeadComposed(services);
    const connection = services.lsp.Connection;
    if (connection) {
       guardDiagnosticsConnection(connection);
+      guardEditRequests(connection, services);
    }
    installConsoleTee();
    startLangiumLanguageServer(services, serviceRequirements);