@omnitron-dev/titan-lumen 0.0.0-stage → 0.4.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 LuxQuant
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,251 @@
-# Temporary Holding Version
+# @omnitron-dev/titan-lumen
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Lumen's Titan integration provides document reads, search, theorem graphs and
+controlled authoring through Netron. The AST compiler remains in
+`@omnitron-dev/lumen-ast`; transport authentication and invocation isolation
+belong to Titan's Netron core.
+
+## Integrating with an existing Titan application
+
+Register `LumenModule.forRoot({ docsDir: '/absolute/docs' })` in the application's
+modules, or use `LumenModule.forRootAsync({ useFactory, inject })` for configuration
+provided by DI. Resolve `LumenService` and expose it on the application's
+Netron peer using `peer.exposeService(app.resolve(LumenService))`. The application owns its
+listeners and authentication adapter; Lumen does not need a second HTTP auth
+middleware.
+
+The equivalent explicit composition is:
+
+```ts
+import { LumenService } from '@omnitron-dev/titan-lumen';
+
+const documents = new LumenService({
+  docsDir: '/absolute/docs',
+  enablePlayground: false,
+});
+await netron.peer.exposeService(documents);
+```
+
+Configure authentication on the host Netron before opening its listeners. Use the
+same application authentication/session provider as other Titan services. Never
+accept a role list or `valid: true` in a request as proof of identity.
+
+## Published RPC surface
+
+The service name is `Lumen`. `LumenServiceContract` describes its network methods:
+
+| Method | Result | Authorization |
+| --- | --- | --- |
+| `search(query, options?)` | Ranked document hits | Public projection or verified caller's document access |
+| `getDocument(path)` | Authorized Markdown or `null` | Document and node access |
+| `getEditableDocument(path)` | Whole document, revision, hash and access or `null` | `lumen.documents.write` and access to every section |
+| `getSymbolContract(symbol)` | Symbol contract or `null` | Configured source access, internal by default |
+| `getTheoremGraph()` | Theorem nodes and edges | Authorized document projection |
+| `executePlayground(code)` | Execution result or error | `lumen.playground.execute` |
+| `saveLiveEdit(payload)` | Revision or conflict | `lumen.documents.write` |
+
+Grant mutation permissions through the host application's role/permission system.
+They are independent: an editor can receive document write access without code
+execution access. The same requirements apply to HTTP and WebSocket; missing
+identity returns 401 and insufficient permissions return 403.
+
+Netron supplies the admitted identity through `getCurrentInvocationContext()`.
+`session` is not part of the wire contract. Extra arguments cannot impersonate an
+administrator. Search filters cannot override the verified caller's roles.
+`getOptions()` and `getAccessFilterService()` are internal service APIs and are
+not published RPC methods.
+
+Direct in-process reads outside an admitted Netron invocation are anonymous.
+Mutations require the corresponding admitted service method and a verified
+identity. There is one service and one contract; there are no session arguments,
+controller wrappers or alternate service tokens. Titan resolves the service and
+its `AccessFilterService` and `LiveEditService` collaborators by their classes.
+`LUMEN_OPTIONS_TOKEN` is the configuration token.
+
+An empty corpus returns empty results. A missing configured corpus reports an
+error on document, search and graph reads; it never substitutes demonstration
+documents or symbol contracts.
+
+## Durable authoring
+
+Without `liveEdit`, Lumen reads the filesystem and refuses edits. Enable authoring
+with `liveEdit: { corpusId: 'product-docs', connectionName: 'default' }` and the
+application's `TitanDatabaseModule`. Both synchronous and asynchronous Lumen
+module providers resolve that module's `DATABASE_MANAGER`; they do not create
+another pool. The connection must use PostgreSQL or file-backed SQLite with its
+native driver installed. Choose a stable `corpusId` shared by every instance that
+serves the same corpus. Different corpus IDs have independent document identities.
+
+Apply the exported migration through the application's explicit migration workflow
+before enabling authoring. Runtime dependency injection never creates tables:
+
+```ts
+import { MigrationRunner } from '@omnitron-dev/titan-database/migration';
+import { lumenAuthoringMigration, type LumenAuthoringDatabase } from '@omnitron-dev/titan-lumen';
+
+const db = await databaseManager.getConnection<LumenAuthoringDatabase>('default');
+await new MigrationRunner(db, [lumenAuthoringMigration], {
+  useTransactions: true,
+  enforceChecksums: true,
+}).up();
+```
+
+An unavailable database or missing migration is an error for enabled authoring,
+including document reads, search and graph operations. No in-memory store or
+stale filesystem substitute is used.
+
+Editors first call `getEditableDocument('guides/start.pdx')`, then send its exact
+`revision` and SHA-256 `hash` as `baseRevision` and `baseHash` with each edit:
+
+```ts
+const document = await lumen.getEditableDocument('guides/start.pdx');
+if (document) {
+  const saved = await lumen.saveLiveEdit({
+    docId: document.docId,
+    baseRevision: document.revision,
+    baseHash: document.hash,
+    mode: 'replace',
+    patch: updatedMarkdown,
+  });
+  if (saved.conflict) {
+    // Reload the current revision and let the editor reconcile its changes.
+  }
+}
+```
+
+Paths include their `.pdx`, `.md` or `.mdx` extension and must be canonical relative
+paths. A disk document starts at revision zero. Its first successful edit stores
+that exact seed, provenance and hash as history revision zero and the edit as
+revision one, in the same transaction. The database then owns that path: later
+filesystem changes cannot replace it. A new document uses revision zero and the
+SHA-256 of the empty string as its base. `append`, `replace` and one-based
+`line-range` edits preserve submitted whitespace.
+
+Current content and append-only revision history commit atomically. A database
+compare-and-swap checks both revision and hash. Competing editors receive a
+conflict; SQLite snapshot conflicts and PostgreSQL serialization/deadlock errors
+use TitanDatabase's bounded whole-transaction retry. Connection failures are
+reported. Success and `live-edit` notifications occur only after commit. The
+author comes from the verified Netron invocation; client `author` and `access`
+fields are rejected. Existing content is authorized before conflict details are
+returned; every section of edited content is authorized before commit. Reads and
+edits verify stored revision numbers, UTF-8 byte lengths and content hashes;
+corruption is an explicit error.
+
+Accepted documents are never evicted. Writes default to 256 KiB per patch and
+2 MiB per document, configurable up to 8 MiB. `readCorpus` checks entry and byte
+metadata in one consistent database snapshot before reading content, then the
+service merges unowned filesystem documents within the remaining corpus budget.
+Document reads, search and graph therefore share the same durable source.
+Internal `getHistory` requires an authenticated actor and access to both the
+current document and each returned revision; it defaults to 50 versions and
+8 MiB per page, with hard bounds of 100 versions and 64 MiB. History is not an
+additional public RPC.
+
+## MCP on the existing Netron HTTP host
+
+`LumenMcpAdapter` uses the official MCP SDK for protocol negotiation, schemas and
+errors. It translates tool/resource calls into the host's native Netron HTTP
+entry point in process. Authorization headers and the host-supplied connection
+address enter the same authentication, permission and rate-limit path as RPC.
+The adapter has no listener, authentication callback or mutable caller session.
+
+```ts
+import { HttpNativeServer } from '@omnitron-dev/titan/netron/transport/http';
+import { LumenMcpAdapter } from '@omnitron-dev/titan-lumen';
+
+let mcp: LumenMcpAdapter;
+const http = new HttpNativeServer({
+  host: '127.0.0.1',
+  port: 8081,
+  customRoutes: [async (request, { remoteAddress }) =>
+    new URL(request.url).pathname === '/mcp'
+      ? mcp.handleRequest(request, remoteAddress)
+      : null],
+});
+http.setPeer(netron.peer);
+mcp = new LumenMcpAdapter({
+  http,
+  resources: ['guides/start.pdx'],
+  allowedHostnames: ['localhost', '127.0.0.1', '[::1]'],
+  allowedOriginHostnames: ['localhost', '127.0.0.1', '[::1]'],
+});
+await http.listen();
+```
+
+The adapter publishes `search_corpus`, `get_document`, `lumen_inspect_ast` and
+`lumen://corpus/{path}` resources. Resource lists contain only documents readable
+by the caller; every read re-enters the service, so no independent content store
+can bypass document access. Tool schemas reject undeclared role/session fields.
+
+The endpoint uses stateless Streamable HTTP with JSON responses. POST is the
+only accepted method; it does not open persistent SSE sessions. The default
+body limit is 1 MiB. Configure host/origin hostname allowlists for the actual
+deployment; they default to loopback names. Set `rpcPath` when the host changes
+its native invocation route. The host owns TLS, authentication and shutdown.
+See the [official TypeScript MCP SDK](https://github.com/modelcontextprotocol/typescript-sdk).
+
+## Qualification status
+
+Server playground calls use the shared Lumen WASM interpreter in a fresh Node
+Worker with an empty environment. Netron checks `lumen.playground.execute`
+before admitting a call. At most four workers run per service; excess calls
+receive 429, and capacity is released only after worker termination. The outer
+five-second timer includes initialization. Execution, memory, source and result
+limits are enforced by `@omnitron-dev/lumen-ast/execution`; no `node:vm` or host
+JavaScript fallback is used. Keep `enablePlayground: false` when execution is
+unnecessary; public read access never grants execution permission.
+
+The 0.4.0 audit is in progress. Do not infer that a test with a PDF header,
+hydration flag or mock request establishes production readiness. The repository's
+`audit/LUMEN-0.4.0.md` records release qualification work. Durable authoring is
+covered by real SQLite and PostgreSQL transactions, independent connection races, commit failure,
+restart, native RPC and shared document/search/graph tests. The isolated execution engine has
+local negative tests through actual Netron, including memory exhaustion,
+constructor escapes and concurrent admission. Browser and final package checks
+remain part of the release gate. Nothing in this package's audit
+activates changes on running Omnitron controllers or applications.
+
+## Corpus bounds and source visibility
+
+Filesystem documents use canonical relative paths. Symlinks, hidden paths,
+`node_modules` and generated `dist` trees are excluded. A missing document is
+`null`; a missing configured directory, invalid UTF-8 or failed read is an error.
+Search and theorem graphs consume the same complete, deterministic inventory.
+The default inventory budget is 10,000 entries, 64 MiB and 32 directory levels;
+`corpusLimits` configures these bounds. Documents are limited to 5 MiB and source
+files to 2 MiB. Exceeding a bound fails the request rather than returning a
+successful partial corpus. Search accepts limits from 0 to 100 and queries of
+at most 4 KiB.
+
+Each service admits at most four concurrent corpus reads, independently of its
+four playground workers. Read admission covers the complete operation through
+authorization and projection; excess calls receive 429 and can retry after the
+current operations finish. An overload is an error, not an empty search result.
+
+## PostgreSQL qualification
+
+The dedicated `test:postgres` target exercises the built package on a real
+PostgreSQL 16 container through TitanDatabase and Kysera. Build the SDK first,
+then set `LUMEN_POSTGRES_DATA_ROOT` to an existing absolute directory reserved
+for disposable test data. On this development Mac, use the mounted AGI workspace.
+The regular unit target excludes this container suite; the explicit PostgreSQL
+target fails if Docker, PostgreSQL or test storage is unavailable.
+
+The suite creates its own Docker network, loopback port and data directory.
+The existing DockerTestManager enforces 1 CPU, 512 MiB of memory and 128 processes
+from container creation; tests inspect the actual Docker configuration. Cleanup
+owns only these resources, and the global orphan reaper is disabled for this run.
+No configured application database is used.
+
+Qualification covers migration and checksum enforcement, races between eight
+independent PostgreSQL connections, rollback when a deferred constraint rejects
+COMMIT, canonical transaction retry after SQLSTATE `40001`, and history/source
+hashes after restarting the isolated PostgreSQL server. PostgreSQL durability
+settings remain enabled throughout the run.
+
+`sourceAccess` and `knowledgeBaseAccess` default to `internal`, independently of
+public Markdown. Set either to `public` only when that entire configured source
+is intended for anonymous readers. Per-entry and section restrictions still
+apply to knowledge-base search results. A failed KB query or source scan is
+reported explicitly; it does not silently fall back to a different corpus.

package/dist/access/access-filter.service.d.ts

@@ -0,0 +1,25 @@
+import { type DocumentAccessOptions, type LumenDocumentAst } from '@omnitron-dev/lumen-ast';
+export declare function extractDocumentMetadata(content: string): {
+    id?: string;
+    title?: string;
+    access: string;
+};
+export declare function extractDocumentAccess(content: string): string;
+export declare class AccessFilterService {
+    private readonly options;
+    constructor(options?: DocumentAccessOptions);
+    isAllowed(userRoles: string[], accessLevel?: unknown): boolean;
+    filterSections<T extends {
+        access?: string;
+        level?: string;
+    }>(sections: T[], userRoles: string[]): T[];
+    projectContent(content: string, userRoles: string[], explicitAccess?: string): {
+        allowed: boolean;
+        ast: LumenDocumentAst;
+        strippedAny: boolean;
+        content: string | null;
+    };
+    filterRawMarkdownContent(content: string, userRoles: string[], explicitAccess?: string): string | null;
+    filterAst(ast: LumenDocumentAst, userRoles: string[]): LumenDocumentAst;
+}
+//# sourceMappingURL=access-filter.service.d.ts.map

package/dist/access/access-filter.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-filter.service.d.ts","sourceRoot":"","sources":["../../src/access/access-filter.service.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAUxG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,qBACa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,GAAE,qBAA0B,EAAI;IAEpE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAE7D;IAED,cAAc,CAAC,CAAC,SAAS;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAGrG;IAED,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM;;;;;MAc3E;IAED,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErG;IAED,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAEtE;CACF"}

package/dist/access/access-filter.service.js

@@ -0,0 +1,61 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from '@omnitron-dev/titan';
+import { createDocumentAccessPredicate, projectDocumentAccess, parseDocumentSync, parseSafeFrontmatter, toCleanMarkdown, } from '@omnitron-dev/lumen-ast';
+export function extractDocumentMetadata(content) {
+    const parsed = parseSafeFrontmatter(content);
+    const { id, title, access } = parsed.frontmatter;
+    return {
+        id,
+        title,
+        access: parsed.diagnostics.some((diagnostic) => diagnostic.severity === 'error')
+            ? 'restricted'
+            : (access ?? 'public'),
+    };
+}
+export function extractDocumentAccess(content) {
+    return extractDocumentMetadata(content).access;
+}
+let AccessFilterService = class AccessFilterService {
+    constructor(options = {}) {
+        this.options = options;
+    }
+    isAllowed(userRoles, accessLevel) {
+        return createDocumentAccessPredicate(userRoles, this.options)(accessLevel);
+    }
+    filterSections(sections, userRoles) {
+        const allows = createDocumentAccessPredicate(userRoles, this.options);
+        return sections.filter((section) => allows(Object.hasOwn(section, 'access') ? section.access : section.level));
+    }
+    projectContent(content, userRoles, explicitAccess) {
+        const allows = createDocumentAccessPredicate(userRoles, this.options);
+        const result = projectDocumentAccess(parseDocumentSync(content), (access) => allows(explicitAccess) && allows(access));
+        return {
+            ...result,
+            content: result.allowed
+                ? result.strippedAny
+                    ? toCleanMarkdown(result.ast, { includeFrontmatter: true })
+                    : content
+                : null,
+        };
+    }
+    filterRawMarkdownContent(content, userRoles, explicitAccess) {
+        return this.projectContent(content, userRoles, explicitAccess).content;
+    }
+    filterAst(ast, userRoles) {
+        return projectDocumentAccess(ast, createDocumentAccessPredicate(userRoles, this.options)).ast;
+    }
+};
+AccessFilterService = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [Object])
+], AccessFilterService);
+export { AccessFilterService };
+//# sourceMappingURL=access-filter.service.js.map

package/dist/access/access-filter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-filter.service.js","sourceRoot":"","sources":["../../src/access/access-filter.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IACjD,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC9E,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YAA6B,OAAO,GAA0B,EAAE;uBAAnC,OAAO;IAA+B,CAAC;IAEpE,SAAS,CAAC,SAAmB,EAAE,WAAqB;QAClD,OAAO,6BAA6B,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,cAAc,CAAgD,QAAa,EAAE,SAAmB;QAC9F,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,SAAmB,EAAE,cAAuB;QAC1E,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,qBAAqB,CAClC,iBAAiB,CAAC,OAAO,CAAC,EAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,OAAO;YACL,GAAG,MAAM;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;gBACrB,CAAC,CAAC,MAAM,CAAC,WAAW;oBAClB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;oBAC3D,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,OAAe,EAAE,SAAmB,EAAE,cAAuB;QACpF,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC;IACzE,CAAC;IAED,SAAS,CAAC,GAAqB,EAAE,SAAmB;QAClD,OAAO,qBAAqB,CAAC,GAAG,EAAE,6BAA6B,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAChG,CAAC;CACF,CAAA;AAnCY,mBAAmB;IAD/B,UAAU,EAAE;;GACA,mBAAmB,CAmC/B"}

package/dist/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const LUMEN_OPTIONS_TOKEN: unique symbol;
+export declare const DEFAULT_DOCS_DIR = "docs";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,eAAoC,CAAC;AACrE,eAAO,MAAM,gBAAgB,SAAS,CAAC"}

package/dist/constants.js

@@ -0,0 +1,3 @@
+export const LUMEN_OPTIONS_TOKEN = Symbol.for('titan:lumen:options');
+export const DEFAULT_DOCS_DIR = 'docs';
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC"}

package/dist/corpus-files.d.ts

@@ -0,0 +1,12 @@
+export interface CorpusScanLimits {
+    maxEntries?: number;
+    maxBytes?: number;
+    maxDepth?: number;
+}
+export declare function isCanonicalDocumentPath(path: unknown, extensions: ReadonlySet<string>): path is string;
+export declare function readCorpusFile(root: string, path: string, maxBytes: number): Promise<string | null>;
+export declare function scanCorpusFiles(root: string, extensions: ReadonlySet<string>, maxFileBytes: number, options?: CorpusScanLimits, ownedPaths?: ReadonlySet<string>): Promise<Array<{
+    path: string;
+    content: string;
+}>>;
+//# sourceMappingURL=corpus-files.d.ts.map

package/dist/corpus-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus-files.d.ts","sourceRoot":"","sources":["../src/corpus-files.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,MAAM,CAMtG;AAGD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAsCzG;AAGD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,EACnG,UAAU,GAAE,WAAW,CAAC,MAAM,CAAa,GAC1C,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAiCnD"}

package/dist/corpus-files.js

@@ -0,0 +1,114 @@
+import { constants } from 'node:fs';
+import { lstat, open, opendir, realpath } from 'node:fs/promises';
+import { extname, isAbsolute, relative, resolve, sep } from 'node:path';
+function inside(root, target) {
+    const path = relative(root, target);
+    return path !== '' && path !== '..' && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+}
+export function isCanonicalDocumentPath(path, extensions) {
+    if (typeof path !== 'string' || !path || Buffer.byteLength(path) > 1024 || /[\\%:?#]/.test(path) || isAbsolute(path))
+        return false;
+    if ([...path].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+        return false;
+    if (path.split('/').some((part) => !part || part.startsWith('.') || ['~', 'node_modules', 'dist'].includes(part)))
+        return false;
+    const extension = extname(path).toLowerCase();
+    return !extension || extensions.has(extension);
+}
+export async function readCorpusFile(root, path, maxBytes) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0)
+        throw new TypeError('Corpus byte budget must be a non-negative safe integer');
+    const target = resolve(root, path);
+    if (!inside(root, target))
+        return null;
+    let current = root;
+    for (const component of relative(root, target).split(sep)) {
+        current = resolve(current, component);
+        try {
+            if ((await lstat(current)).isSymbolicLink())
+                return null;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+    }
+    const before = await lstat(target);
+    if (!before.isFile())
+        return null;
+    if (before.size > maxBytes)
+        throw new RangeError(`Corpus file exceeds ${maxBytes} bytes`);
+    const canonical = await realpath(target);
+    if (!inside(root, canonical))
+        return null;
+    const file = await open(canonical, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const opened = await file.stat();
+        if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino)
+            throw new Error('Corpus file changed before reading');
+        const buffer = Buffer.alloc(Math.min(opened.size + 1, maxBytes + 1));
+        let offset = 0;
+        while (offset < buffer.length) {
+            const { bytesRead } = await file.read(buffer, offset, buffer.length - offset, offset);
+            if (!bytesRead)
+                break;
+            offset += bytesRead;
+        }
+        const after = await file.stat();
+        const currentPath = await lstat(target);
+        if (offset > maxBytes || after.size > maxBytes)
+            throw new RangeError(`Corpus file exceeds ${maxBytes} bytes`);
+        if (after.size !== offset || after.mtimeMs !== opened.mtimeMs || after.ctimeMs !== opened.ctimeMs ||
+            currentPath.ino !== opened.ino || currentPath.dev !== opened.dev || currentPath.isSymbolicLink() ||
+            await realpath(target) !== canonical)
+            throw new Error('Corpus file changed while reading');
+        return new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(buffer.subarray(0, offset));
+    }
+    finally {
+        await file.close();
+    }
+}
+export async function scanCorpusFiles(root, extensions, maxFileBytes, options = {}, ownedPaths = new Set()) {
+    const maxEntries = options.maxEntries ?? 10_000;
+    const maxBytes = options.maxBytes ?? 64 * 1024 * 1024;
+    const maxDepth = options.maxDepth ?? 32;
+    if (!Number.isSafeInteger(maxFileBytes) || maxFileBytes < 1)
+        throw new TypeError('Corpus file limit must be a positive safe integer');
+    if ([maxEntries, maxDepth].some((value) => !Number.isSafeInteger(value) || value < 1) ||
+        !Number.isSafeInteger(maxBytes) || maxBytes < 0) {
+        throw new TypeError('Corpus entry/depth limits must be positive and byte budget non-negative safe integers');
+    }
+    const files = [];
+    const directories = [{ path: root, depth: 0 }];
+    let entries = 0;
+    let bytes = 0;
+    while (directories.length) {
+        const directory = directories.pop();
+        if (directory.depth > maxDepth)
+            throw new RangeError(`Corpus directory depth exceeds ${maxDepth}`);
+        if (await realpath(directory.path) !== directory.path)
+            throw new Error('Corpus directory changed during scan');
+        for await (const entry of await opendir(directory.path)) {
+            if (++entries > maxEntries)
+                throw new RangeError(`Corpus entries exceed ${maxEntries}`);
+            if (entry.name.startsWith('.') || ['node_modules', 'dist'].includes(entry.name) || entry.isSymbolicLink())
+                continue;
+            const target = resolve(directory.path, entry.name);
+            if (entry.isDirectory())
+                directories.push({ path: target, depth: directory.depth + 1 });
+            else if (entry.isFile() && extensions.has(extname(entry.name).toLowerCase())) {
+                const path = relative(root, target).split(sep).join('/');
+                if (ownedPaths.has(path))
+                    continue;
+                const content = await readCorpusFile(root, path, Math.min(maxFileBytes, maxBytes - bytes));
+                if (content === null)
+                    throw new Error('Corpus file changed during scan');
+                bytes += Buffer.byteLength(content);
+                files.push({ path, content });
+            }
+        }
+    }
+    return files.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+}
+//# sourceMappingURL=corpus-files.js.map

package/dist/corpus-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus-files.js","sourceRoot":"","sources":["../src/corpus-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAQxE,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAa,EAAE,UAA+B;IACpF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChI,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB;IAC/E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,QAAQ,QAAQ,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACtI,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACtF,IAAI,CAAC,SAAS;gBAAE,MAAM;YACtB,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,QAAQ,QAAQ,CAAC,CAAC;QAC9G,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAC7F,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,cAAc,EAAE;YAChG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC/F,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACvG,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EAAE,UAA+B,EAAE,YAAoB,EAAE,OAAO,GAAqB,EAAE,EACnG,UAAU,GAAwB,IAAI,GAAG,EAAE;IAE3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IACtI,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACjF,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,uFAAuF,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,KAAK,GAA6C,EAAE,CAAC;IAC3D,MAAM,WAAW,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAG,CAAC;QACrC,IAAI,SAAS,CAAC,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QACnG,IAAI,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC/G,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,IAAI,EAAE,OAAO,GAAG,UAAU;gBAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;YACxF,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACpH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;iBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC;gBAC3F,IAAI,OAAO,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACzE,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { LumenModule } from './lumen.module.js';
+export { LumenService } from './lumen.service.js';
+export { LUMEN_OPTIONS_TOKEN, DEFAULT_DOCS_DIR } from './constants.js';
+export { AccessFilterService, extractDocumentAccess, extractDocumentMetadata, } from './access/access-filter.service.js';
+export { LiveEditService, DEFAULT_MAX_PATCH_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, type DocumentState, type DocumentRevision, } from './live/live-edit.service.js';
+export { lumenAuthoringMigration } from './live/migration.js';
+export type { LumenAuthoringDatabase } from './live/schema.js';
+export { LumenMcpAdapter, type LumenMcpOptions } from './mcp.js';
+export type * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AACjE,mBAAmB,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { LumenModule } from './lumen.module.js';
+export { LumenService } from './lumen.service.js';
+export { LUMEN_OPTIONS_TOKEN, DEFAULT_DOCS_DIR } from './constants.js';
+export { AccessFilterService, extractDocumentAccess, extractDocumentMetadata, } from './access/access-filter.service.js';
+export { LiveEditService, DEFAULT_MAX_PATCH_BYTES, DEFAULT_MAX_DOCUMENT_BYTES, } from './live/live-edit.service.js';
+export { lumenAuthoringMigration } from './live/migration.js';
+export { LumenMcpAdapter } from './mcp.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,0BAA0B,GAG3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAwB,MAAM,UAAU,CAAC"}

package/dist/live/live-edit.service.d.ts

@@ -0,0 +1,47 @@
+import { EventEmitter } from 'node:events';
+import { type DatabaseManager } from '@omnitron-dev/titan-database';
+import { AccessFilterService } from '../access/access-filter.service.js';
+import type { LiveEditActor, LiveEditPayload, LiveEditResult, LiveEditServiceOptions } from '../types.js';
+export declare const DEFAULT_MAX_PATCH_BYTES = 262144;
+export declare const DEFAULT_MAX_DOCUMENT_BYTES = 2097152;
+export interface DocumentState {
+    docId: string;
+    content: string;
+    revision: number;
+    hash: string;
+    updatedAt: number;
+    access: string;
+    byteLength: number;
+    author: string;
+    origin: 'disk' | 'created';
+    seedHash: string;
+}
+export type DocumentRevision = Omit<DocumentState, 'origin' | 'seedHash'>;
+export declare class LiveEditService extends EventEmitter {
+    private readonly database?;
+    private readonly options?;
+    private readonly maxPatchBytes;
+    private readonly maxDocumentBytes;
+    private readonly accessFilter;
+    constructor(options?: LiveEditServiceOptions, database?: DatabaseManager | undefined, accessFilter?: AccessFilterService);
+    isEnabled(): boolean;
+    private connection;
+    validatePayload(payload: unknown): {
+        valid: boolean;
+        error?: string;
+    };
+    private authorize;
+    getDocument(docId: string): Promise<DocumentState | undefined>;
+    readCorpus(limits?: {
+        maxEntries?: number;
+        maxBytes?: number;
+    }): Promise<DocumentState[]>;
+    getHistory(docId: string, actor: LiveEditActor, options?: {
+        beforeRevision?: number;
+        limit?: number;
+        maxBytes?: number;
+    }): Promise<DocumentRevision[]>;
+    private conflict;
+    applyEdit(payload: LiveEditPayload, actor: LiveEditActor, initialContent?: string): Promise<LiveEditResult>;
+}
+//# sourceMappingURL=live-edit.service.d.ts.map

package/dist/live/live-edit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-edit.service.d.ts","sourceRoot":"","sources":["../../src/live/live-edit.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,OAAO,EAAwB,KAAK,eAAe,EAAiC,MAAM,8BAA8B,CAAC;AACzH,OAAO,EAAE,mBAAmB,EAAyB,MAAM,oCAAoC,CAAC;AAChG,OAAO,KAAK,EAAE,aAAa,EAA+B,eAAe,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAIvI,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,eAAO,MAAM,0BAA0B,UAAY,CAAC;AAQpD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;AA2B1E,qBACa,eAAgB,SAAQ,YAAY;IAMD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IALxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,YAAY,OAAO,CAAC,EAAE,sBAAsB,EAAmB,QAAQ,CAAC,EAAE,eAAe,YAAA,EAAE,YAAY,CAAC,EAAE,mBAAmB,EAQ5H;IAED,SAAS,IAAI,OAAO,CAAuC;YAE7C,UAAU;IAYxB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAgBpE;IAED,OAAO,CAAC,SAAS;IAWX,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAMnE;IAGK,UAAU,CAAC,MAAM,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAgBlG;IAEK,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA4B/J;YAEa,QAAQ;IAOhB,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA0DhH;CACF"}