mrplex 0.0.1

package/dist/kernel/query/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/kernel/query/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAqB,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG3E,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAoB1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAkB;IACjD,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,OAAO;IACP,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,4BAA4B,GAA4C;IAC5E,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;IACpB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;IACpB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IAChC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAC1C,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAC1C,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IAChC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM;IACxB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;IACpB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;CACrC,CAAC;AAEF,iFAAiF;AACjF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC5C,iBAAiB;CAClB,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,cAAc,GAAG,CAAC,OAAO,CAAU,CAAC;AAa1C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAA6B,EAC7B,IAAe,EACf,IAAe;IAEf,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAElD,2CAA2C;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,iEAAiE;IACjE,IAAI,SAA8B,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,wCAAwC;IACxC,MAAM,MAAM,GAAG,0BAA0B,CACvC,WAAW,EACX,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,cAAc,IAAI,KAAK,EAC5B,IAAI,CAAC,cAAc,IAAI,KAAK,CAC7B,CAAC;IAEF,4EAA4E;IAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACpD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9B,6EAA6E;IAC7E,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,MAAM,EAAE,6CAA6C;aACtD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAuD,CAAC;QAC5D,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,MAAM,EAAE,wCACN,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;aACH,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,MAAM,EAAE,yCAAyC,KAAK,CAAC,MAAM,CAAC,MAAM,WAAW,KAAK,CAAC,GAAG,EAAE;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC3C,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC5B,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,EACZ,SAAS,CACV,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAe;YACvB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,KAAK,EAAE,YAAY,CAAC,MAAM;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,KAAK;YACL,aAAa,EAAE,YAAY;SAC5B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAa,CAAC,IAAI,CAAC;YAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;gBAC3D,aAAa,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC;aACzF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,IAAI,GAAe;QACvB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,SAAS;QACrB,MAAM;QACN,KAAK;KACN,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAa,CAAC,IAAI,CAAC;QAC9D,OAAO,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAaD,oFAAoF;AACpF,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO,CAAC,GAAG,QAAQ,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,MAAyB,EAAE,MAAkB,EAAE;IAC7E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACpC,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,aAAa,CAAC;YAC1C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAoB,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,SAAS,YAAY,CAAC,IAAe;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAsB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE;gBACtC,MAAM,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE;gBACtC,MAAM,EAAE,uDAAuD;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE;gBACtC,MAAM,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,oEAAoE;gBACpE,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9D,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE;oBACtC,MAAM,EAAE,qBAAqB,IAAI,wBAAwB,QAAQ,GAAG;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,SAAS,0BAA0B,CACjC,MAA6B,EAC7B,IAAe,EACf,SAA+B,EAC/B,YAAwB;IAExB,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC;IAChD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,0CAA0C;AAC1C,gFAAgF;AAEhF,SAAS,0BAA0B,CACjC,KAAyB,EACzB,YAAwB,EACxB,aAAsB,EACtB,aAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmD,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF,SAAS,UAAU,CACjB,MAA6B,EAC7B,WAA+B;IAE/B,yEAAyE;IACzE,2EAA2E;IAC3E,kCAAkC;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,YAAwB;IACzE,OAAO,mBAAmB,CAAC,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/kernel/validation.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Slug + path segment validation — the write-time gate.
+ *
+ * Design §3.5.1 pins the structural constants (grammar, not policy):
+ *   PATH_SEPARATOR = "/", CURRENT_SEGMENT = ".", PARENT_SEGMENT = "..",
+ *   EMPTY_SEGMENT  = ""
+ *
+ * Design §3.5.2 defines the configurable policy layered per repo:
+ *   disallowed_chars: single chars forbidden anywhere in a user segment
+ *   system_sigils:    leading string prefixes marking kernel-owned segments
+ *   hidden_sigils:    leading string prefixes marking user-hidden segments
+ *
+ * Design §3.5.3 says validation is write-time only — existing rows keep
+ * whatever paths they had. §3.5.6 says slugs use the SERVER-level config
+ * (per-repo config doesn't gate slug validation).
+ */
+export declare const PATH_SEPARATOR = "/";
+export declare const CURRENT_SEGMENT = ".";
+export declare const PARENT_SEGMENT = "..";
+export declare const EMPTY_SEGMENT = "";
+export declare const SLUG_MAX_LENGTH = 64;
+export type EffectivePathConfig = {
+    disallowed_chars: string[];
+    system_sigils: string[];
+    hidden_sigils: string[];
+};
+/** True when `path` is a glob/pattern operand (not an exact document path). */
+export declare function isPathGlobPattern(path: string): boolean;
+/**
+ * Normalize an exact document path for API lookup and writes. Accepts a
+ * canonical slashless path unchanged, or exactly one leading `/` as a
+ * repository-root reference alias (Markdown-style). Returns the slashless
+ * canonical form after applying `validatePath`. Failure → `path_invalid`.
+ *
+ * Idempotent: `normalizeExactDocumentPath(normalizeExactDocumentPath(p))`
+ * equals `normalizeExactDocumentPath(p)`.
+ *
+ * Do not use for glob operands, CEL `$path` literals, or stored link text —
+ * those keep their own semantics.
+ */
+export declare function normalizeExactDocumentPath(input: string, config: EffectivePathConfig): string;
+/**
+ * Validate every segment of a canonical (slashless) user-written path.
+ * Applied at `docs.create` and `docs.put` (design §3.5.3) after exact-path
+ * alias normalization. Failure → `path_invalid`.
+ *
+ * The kernel bypasses these checks for its own deletion moves (§4.1 rule 4);
+ * that bypass lives in the write surface, not here.
+ */
+export declare function validatePath(path: string, config: EffectivePathConfig): void;
+/**
+ * Validate a repo or user slug against server-level path config (§3.5.6).
+ * Per-repo config doesn't apply: slug is validated before any repo has a
+ * chance to override, and users are global.
+ *
+ * Slug hygiene numbers are pinned by m1-plan §5: ≤ 64 chars, no leading/
+ * trailing whitespace, no control chars.
+ */
+export declare function validateSlug(slug: string, config: EffectivePathConfig): void;
+/**
+ * True if any segment of `path` starts with any of the given sigils.
+ * Design §5.1 uses this to compile the default-exclude clause.
+ */
+export declare function pathHasSigilSegment(path: string, sigils: readonly string[]): boolean;

package/dist/kernel/validation.js

@@ -0,0 +1,183 @@
+/**
+ * Slug + path segment validation — the write-time gate.
+ *
+ * Design §3.5.1 pins the structural constants (grammar, not policy):
+ *   PATH_SEPARATOR = "/", CURRENT_SEGMENT = ".", PARENT_SEGMENT = "..",
+ *   EMPTY_SEGMENT  = ""
+ *
+ * Design §3.5.2 defines the configurable policy layered per repo:
+ *   disallowed_chars: single chars forbidden anywhere in a user segment
+ *   system_sigils:    leading string prefixes marking kernel-owned segments
+ *   hidden_sigils:    leading string prefixes marking user-hidden segments
+ *
+ * Design §3.5.3 says validation is write-time only — existing rows keep
+ * whatever paths they had. §3.5.6 says slugs use the SERVER-level config
+ * (per-repo config doesn't gate slug validation).
+ */
+import { KernelError } from "./errors.js";
+// -----------------------------------------------------------------------------
+// Structural constants (§3.5.1) — grammar, not policy.
+// -----------------------------------------------------------------------------
+export const PATH_SEPARATOR = "/";
+export const CURRENT_SEGMENT = ".";
+export const PARENT_SEGMENT = "..";
+export const EMPTY_SEGMENT = "";
+// Slug hygiene — pinned in m1-plan §5.
+export const SLUG_MAX_LENGTH = 64;
+const slugInvalid = (slug, reason) => new KernelError("slug_invalid", { slug, reason });
+const pathInvalid = (path, segment, reason) => new KernelError("path_invalid", { path, segment, reason });
+// -----------------------------------------------------------------------------
+// Segment-level predicates (shared by slug and path validators).
+// -----------------------------------------------------------------------------
+function isReservedSegment(segment) {
+    return segment === EMPTY_SEGMENT || segment === CURRENT_SEGMENT || segment === PARENT_SEGMENT;
+}
+function containsDisallowedChar(segment, disallowed) {
+    for (const ch of disallowed) {
+        if (segment.includes(ch))
+            return ch;
+    }
+    return null;
+}
+function startsWithAnySigil(segment, sigils) {
+    for (const sigil of sigils) {
+        if (segment.startsWith(sigil))
+            return sigil;
+    }
+    return null;
+}
+// -----------------------------------------------------------------------------
+// Exact document path normalization (canonical-path-normalization plan).
+// -----------------------------------------------------------------------------
+/** True when `path` is a glob/pattern operand (not an exact document path). */
+export function isPathGlobPattern(path) {
+    return path.includes("*") || path.includes("?");
+}
+/**
+ * Normalize an exact document path for API lookup and writes. Accepts a
+ * canonical slashless path unchanged, or exactly one leading `/` as a
+ * repository-root reference alias (Markdown-style). Returns the slashless
+ * canonical form after applying `validatePath`. Failure → `path_invalid`.
+ *
+ * Idempotent: `normalizeExactDocumentPath(normalizeExactDocumentPath(p))`
+ * equals `normalizeExactDocumentPath(p)`.
+ *
+ * Do not use for glob operands, CEL `$path` literals, or stored link text —
+ * those keep their own semantics.
+ */
+export function normalizeExactDocumentPath(input, config) {
+    if (input.includes("\\")) {
+        throw pathInvalid(input, "", "path contains backslash");
+    }
+    let path = input;
+    if (path.startsWith(PATH_SEPARATOR)) {
+        if (path === PATH_SEPARATOR) {
+            throw pathInvalid(path, "", "path is empty");
+        }
+        if (path.length > 1 && path[1] === PATH_SEPARATOR) {
+            throw pathInvalid(path, "", "path has multiple leading '/'");
+        }
+        path = path.slice(1);
+    }
+    validatePath(path, config);
+    return path;
+}
+// -----------------------------------------------------------------------------
+// Path validation (§3.5.3).
+// -----------------------------------------------------------------------------
+/**
+ * Validate every segment of a canonical (slashless) user-written path.
+ * Applied at `docs.create` and `docs.put` (design §3.5.3) after exact-path
+ * alias normalization. Failure → `path_invalid`.
+ *
+ * The kernel bypasses these checks for its own deletion moves (§4.1 rule 4);
+ * that bypass lives in the write surface, not here.
+ */
+export function validatePath(path, config) {
+    if (path === EMPTY_SEGMENT) {
+        throw pathInvalid(path, "", "path is empty");
+    }
+    if (path.startsWith(PATH_SEPARATOR)) {
+        throw pathInvalid(path, "", "path has a leading '/'");
+    }
+    if (path.endsWith(PATH_SEPARATOR)) {
+        throw pathInvalid(path, "", "path has a trailing '/'");
+    }
+    const segments = path.split(PATH_SEPARATOR);
+    for (const segment of segments) {
+        if (isReservedSegment(segment)) {
+            throw pathInvalid(path, segment, `segment is reserved ("${segment}")`);
+        }
+        const sysSigil = startsWithAnySigil(segment, config.system_sigils);
+        if (sysSigil !== null) {
+            throw pathInvalid(path, segment, `segment starts with system sigil "${sysSigil}" — reserved for the kernel`);
+        }
+        const bad = containsDisallowedChar(segment, config.disallowed_chars);
+        if (bad !== null) {
+            throw pathInvalid(path, segment, `segment contains disallowed character "${bad}"`);
+        }
+    }
+}
+// -----------------------------------------------------------------------------
+// Slug validation (§3.5.6) — server-config only, single segment, no '/'.
+// -----------------------------------------------------------------------------
+/**
+ * Validate a repo or user slug against server-level path config (§3.5.6).
+ * Per-repo config doesn't apply: slug is validated before any repo has a
+ * chance to override, and users are global.
+ *
+ * Slug hygiene numbers are pinned by m1-plan §5: ≤ 64 chars, no leading/
+ * trailing whitespace, no control chars.
+ */
+export function validateSlug(slug, config) {
+    if (isReservedSegment(slug)) {
+        throw slugInvalid(slug, `slug is reserved ("${slug}")`);
+    }
+    if (slug.length > SLUG_MAX_LENGTH) {
+        throw slugInvalid(slug, `slug exceeds ${SLUG_MAX_LENGTH} characters`);
+    }
+    if (slug !== slug.trim()) {
+        throw slugInvalid(slug, "slug has leading or trailing whitespace");
+    }
+    if (slug.includes(PATH_SEPARATOR)) {
+        throw slugInvalid(slug, "slug contains '/'");
+    }
+    // Control chars (0x00–0x1F, 0x7F) are always illegal — they don't need to
+    // be in disallowed_chars to be forbidden.
+    for (const ch of slug) {
+        const code = ch.charCodeAt(0);
+        if (code < 0x20 || code === 0x7f) {
+            throw slugInvalid(slug, "slug contains a control character");
+        }
+    }
+    const sysSigil = startsWithAnySigil(slug, config.system_sigils);
+    if (sysSigil !== null) {
+        throw slugInvalid(slug, `slug starts with system sigil "${sysSigil}"`);
+    }
+    const hidSigil = startsWithAnySigil(slug, config.hidden_sigils);
+    if (hidSigil !== null) {
+        throw slugInvalid(slug, `slug starts with hidden sigil "${hidSigil}"`);
+    }
+    const bad = containsDisallowedChar(slug, config.disallowed_chars);
+    if (bad !== null) {
+        throw slugInvalid(slug, `slug contains disallowed character "${bad}"`);
+    }
+}
+// -----------------------------------------------------------------------------
+// Sigil classification helpers (used by both writes and query default exclusion).
+// -----------------------------------------------------------------------------
+/**
+ * True if any segment of `path` starts with any of the given sigils.
+ * Design §5.1 uses this to compile the default-exclude clause.
+ */
+export function pathHasSigilSegment(path, sigils) {
+    if (sigils.length === 0)
+        return false;
+    const segments = path.split(PATH_SEPARATOR);
+    for (const segment of segments) {
+        if (startsWithAnySigil(segment, sigils) !== null)
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=validation.js.map

package/dist/kernel/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/kernel/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAmBlC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CACnD,IAAI,WAAW,CAAkB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAErE,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc,EAAE,EAAE,CACpE,IAAI,WAAW,CAAkB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9E,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAEhF,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,cAAc,CAAC;AAChG,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,UAA6B;IAC5E,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,MAAyB;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAEhF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,MAA2B;IAE3B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;YAClD,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAA2B;IACpE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACpC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,OAAO,IAAI,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,WAAW,CACf,IAAI,EACJ,OAAO,EACP,qCAAqC,QAAQ,6BAA6B,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,0CAA0C,GAAG,GAAG,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAA2B;IACpE,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,WAAW,CAAC,IAAI,EAAE,gBAAgB,eAAe,aAAa,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACzB,MAAM,WAAW,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,0EAA0E;IAC1E,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,WAAW,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,WAAW,CAAC,IAAI,EAAE,kCAAkC,QAAQ,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,WAAW,CAAC,IAAI,EAAE,kCAAkC,QAAQ,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAClE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,WAAW,CAAC,IAAI,EAAE,uCAAuC,GAAG,GAAG,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAyB;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/kernel/version-id.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Opaque `version_id` wire encoding. Design §3.3 says clients echo these back
+ * and never construct or parse them; the server owns the representation.
+ *
+ * M0 decision (see docs/archive/m0-plan.md §5): `v{integer}` — trivially readable
+ * during dev/debug, opaque by *contract*, and already the form the design's
+ * deletion-path examples use (`:deleted/…/foo-v45129.md`).
+ */
+export declare function encodeVersionId(id: number): string;
+export declare function decodeVersionId(versionId: string): number | null;

package/dist/kernel/version-id.js

@@ -0,0 +1,21 @@
+/**
+ * Opaque `version_id` wire encoding. Design §3.3 says clients echo these back
+ * and never construct or parse them; the server owns the representation.
+ *
+ * M0 decision (see docs/archive/m0-plan.md §5): `v{integer}` — trivially readable
+ * during dev/debug, opaque by *contract*, and already the form the design's
+ * deletion-path examples use (`:deleted/…/foo-v45129.md`).
+ */
+export function encodeVersionId(id) {
+    return `v${id}`;
+}
+export function decodeVersionId(versionId) {
+    const m = versionId.match(/^v(\d+)$/);
+    if (!m || !m[1])
+        return null;
+    const n = Number.parseInt(m[1], 10);
+    if (!Number.isSafeInteger(n) || n <= 0)
+        return null;
+    return n;
+}
+//# sourceMappingURL=version-id.js.map

package/dist/kernel/version-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-id.js","sourceRoot":"","sources":["../../src/kernel/version-id.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,IAAI,EAAE,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/kernel/wire.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Kernel wire types — the shapes returned to surfaces (design §6.4).
+ * Integer ids never appear here; version_ids are opaque strings.
+ */
+import type { KernelErrorCode } from "./errors.js";
+export type PathConfig = {
+    disallowed_chars?: string[];
+    system_sigils?: string[];
+    hidden_sigils?: string[];
+};
+export type Repo = {
+    repo: string;
+    path_config: PathConfig | null;
+};
+export type Version = {
+    version_id: string;
+    prev_version_id: string | null;
+    next_version_id: string | null;
+    repo: string;
+    path: string;
+    frontmatter: Record<string, unknown>;
+    frontmatter_raw: string;
+    body: string;
+    author: string;
+    created_at: string;
+    content_hash: string;
+};
+export type PathWarning = {
+    version_id: string;
+    path: string;
+    reason: string;
+};
+/** The operation a version row represents, derived server-side (§3.3). */
+export type VersionOp = "create" | "update" | "move" | "delete";
+/**
+ * A lightweight change-feed pointer (sync/history plan §3.3). Consumers fetch
+ * bodies via `docs.get_version` only when needed; `content_hash` lets them
+ * skip no-op materializations and `prev_path` names both ends of a move/delete.
+ * `op` is derived server-side so consumers never parse path sigils.
+ */
+export type VersionRef = {
+    version_id: string;
+    prev_version_id: string | null;
+    repo: string;
+    path: string;
+    prev_path: string | null;
+    content_hash: string;
+    op: VersionOp;
+    created_at: string;
+};
+/** Result of `history.since` — a page of refs plus the resume cursor (§3.3). */
+export type HistorySincePage = {
+    refs: VersionRef[];
+    next_since: string;
+};
+/** One live-set entry from `history.index` (§3.4). */
+export type IndexItem = {
+    path: string;
+    version_id: string;
+    content_hash: string;
+};
+/**
+ * A page of `history.index` (sync/history plan §3.4). `through_version` is the
+ * safe head `R` — captured on the first call, echoed on later pages;
+ * `next_after_version` is absent on the final page.
+ */
+export type HistoryIndexPage = {
+    items: IndexItem[];
+    through_version: string;
+    next_after_version?: string;
+};
+/**
+ * A projected `query` hit (docs/query-select-plan.md). `query` names the
+ * fields it wants via `select` and gets back these lean objects rather than
+ * full `Version` rows. Following `GraphDocument`'s precedent, any field that
+ * isn't user-authored frontmatter carries the `$` sigil, so a document whose
+ * frontmatter literally contains a key named `path`/`repo` still round-trips
+ * without colliding with the system's `$path`/`$repo`.
+ */
+export type QueryHit = {
+    [intrinsic: `$${string}`]: unknown;
+    [frontmatterKey: string]: unknown;
+};
+/** Direction lens for a graph expansion (§2.1). */
+export type GraphDirection = "out" | "in" | "both";
+/**
+ * Input to `kernel.graph` (§2.1). `roots` is a path or gitignore-style glob,
+ * string or array. `filter` is CEL, evaluated as *visibility* (not selection);
+ * `$degrees` is legal only here. `fields` restricts both traversal and the
+ * output `links`. `select` names bare frontmatter keys projected onto result
+ * documents (default `["title"]`).
+ */
+export type GraphSpec = {
+    repo: string;
+    roots: string | string[];
+    direction?: GraphDirection;
+    degrees?: number;
+    fields?: string[];
+    filter?: string;
+    select?: string[];
+    max_documents?: number;
+};
+/**
+ * A result document (§2.2): the filter language's data model reified. Bare
+ * keys are `select`-projected frontmatter; `$`-keys are system intrinsics, so
+ * no user frontmatter key can collide. `$degrees` is call-relative (minimum
+ * hops from the nearest root under this call's lens) and must not be persisted
+ * across calls. `$links`/`$backlinks` are counts of distinct scope-visible
+ * documents, independent of this call's filter/fields/degrees.
+ */
+export type GraphDocument = {
+    $path: string;
+    $degrees: number;
+    $links: number;
+    $backlinks: number;
+    [frontmatterKey: string]: unknown;
+};
+/** An induced link on the wire (§2.2): a distinct (source, target, field)
+ * triple, both endpoints present in `documents`. No `ord`, no counts. */
+export type GraphLink = {
+    source: string;
+    target: string;
+    field: string;
+};
+/** Structured result of `kernel.graph` (§2.2). */
+export type GraphResult = {
+    documents: GraphDocument[];
+    links: GraphLink[];
+    /** Paths of returned documents whose links were not fully enumerated —
+     * the continuation contract (§2.2, decision 10). Sorted by path. */
+    frontier: string[];
+    /** Largest d such that every effective-graph document within d hops of a
+     * root is present (§2.2). Equals `degrees` when `truncated` is false. */
+    complete_degrees: number;
+    /** True iff `max_documents` or the links ceiling elided anything. */
+    truncated: boolean;
+};
+/** Per-path failure from `docs.get_many` — the call still succeeds. */
+export type DocGetManyError = {
+    path: string;
+    code: KernelErrorCode;
+    data: Record<string, unknown>;
+};
+/** Result of `docs.get_many` — found versions plus per-path errors. */
+export type DocGetManyResult = {
+    items: Version[];
+    errors: DocGetManyError[];
+};

package/dist/kernel/wire.js

@@ -0,0 +1,6 @@
+/**
+ * Kernel wire types — the shapes returned to surfaces (design §6.4).
+ * Integer ids never appear here; version_ids are opaque strings.
+ */
+export {};
+//# sourceMappingURL=wire.js.map

package/dist/kernel/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/kernel/wire.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/links/backfill.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Links backfill — rebuild the derived index for a repo (design §11.2, WS3).
+ *
+ * Mirrors src/embed/backfill.ts in shape, but synchronous (no hook, no
+ * worker): extraction is pure CPU, so a full rebuild is just a walk over
+ * the repo's live versions, re-extracting + resolving each document's
+ * outbound edges. Because every live document already exists when the walk
+ * runs, candidate resolution binds immediately — no separate dangling
+ * sweep is needed for a full rebuild (a dangling edge here means the target
+ * genuinely has no live document).
+ *
+ * Used by `mrplex links backfill` (build the index for an existing corpus)
+ * and by link-config-change re-extraction (the effective config changed, so
+ * every document must be re-parsed under the new rules).
+ */
+import type { Storage } from "../storage/types.js";
+import type { LinkConfig } from "./link-config.js";
+export type LinksBackfillReport = {
+    documents: number;
+    edges: number;
+};
+/**
+ * Rebuild `repo`'s link index from its current live versions. Idempotent:
+ * re-running produces the same rows (links_replace is delete-then-insert
+ * per source). Each document is reindexed in its own transaction so a huge
+ * repo doesn't hold one giant tx.
+ */
+export declare function backfillRepoLinks(storage: Storage, repoId: number, config: LinkConfig): Promise<LinksBackfillReport>;

package/dist/links/backfill.js

@@ -0,0 +1,33 @@
+/**
+ * Links backfill — rebuild the derived index for a repo (design §11.2, WS3).
+ *
+ * Mirrors src/embed/backfill.ts in shape, but synchronous (no hook, no
+ * worker): extraction is pure CPU, so a full rebuild is just a walk over
+ * the repo's live versions, re-extracting + resolving each document's
+ * outbound edges. Because every live document already exists when the walk
+ * runs, candidate resolution binds immediately — no separate dangling
+ * sweep is needed for a full rebuild (a dangling edge here means the target
+ * genuinely has no live document).
+ *
+ * Used by `mrplex links backfill` (build the index for an existing corpus)
+ * and by link-config-change re-extraction (the effective config changed, so
+ * every document must be re-parsed under the new rules).
+ */
+import { reindexOutboundLinks } from "./maintain.js";
+/**
+ * Rebuild `repo`'s link index from its current live versions. Idempotent:
+ * re-running produces the same rows (links_replace is delete-then-insert
+ * per source). Each document is reindexed in its own transaction so a huge
+ * repo doesn't hold one giant tx.
+ */
+export async function backfillRepoLinks(storage, repoId, config) {
+    const live = await storage.versions_live_by_repo(repoId);
+    let edges = 0;
+    for (const version of live) {
+        await reindexOutboundLinks(storage, config, repoId, version.document_id, version.path, version.body, version.frontmatter);
+        const rows = await storage.links_by_source(version.document_id);
+        edges += rows.length;
+    }
+    return { documents: live.length, edges };
+}
+//# sourceMappingURL=backfill.js.map

package/dist/links/backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.js","sourceRoot":"","sources":["../../src/links/backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAOrD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,MAAc,EACd,MAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,oBAAoB,CACxB,OAAO,EACP,MAAM,EACN,MAAM,EACN,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,CACpB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/dist/links/extract.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Deterministic link extraction — design §11.2 "Extraction" (WS2).
+ *
+ * Body and frontmatter string values each honor their own LinkSyntaxes profile.
+ * Frontmatter links are discovered by walking all scalar string values — no
+ * per-field opt-in list.
+ */
+import type { FrontmatterJson } from "../markdown/frontmatter.js";
+import type { LinkConfig } from "./link-config.js";
+/** The `field` value for body-derived edges (§11.2 reserved sentinel). */
+export declare const BODY_FIELD = "$body";
+/** Repo-root absolute path ending in `.md` — whole frontmatter value form. */
+export declare const FRONTMATTER_FULLPATH_WHOLE: RegExp;
+export type RawEdge = {
+    ord: number;
+    field: string;
+    target: string;
+    wikilink: boolean;
+    dest_span?: {
+        start: number;
+        end: number;
+    };
+};
+export type ExtractInput = {
+    body: string;
+    frontmatter: FrontmatterJson;
+    config: LinkConfig;
+};
+export declare function extractEdges(input: ExtractInput): RawEdge[];