"""Shared OKF (Open Knowledge Format) ingestion library.

Three entry doors: spec-based ingestion (manifest -> connector ->
deterministic materialization -> index), a bundle inbox converting common
file types to OKF concepts, and import of external OKF bundles.

Security is owned by llm-ingestion-guard, never reimplemented here. Note
what that does and does not mean today: Door A is UNGATED. It has zero
runtime dependencies and calls no guard function on the way to disk. A
caller that materializes external or otherwise untrusted content is
responsible for gating it -- via guard's okf.import_bundle for received
bundles, or prepare_input/screen_output around extracted text. Do not read
"security is delegated" as "safe by default": materialize_bundle writes
what it is given. The guard-calling persist gates arrive with Doors B and C.

Door A (spec-based ingestion) public surface: materialize_bundle plus the
typed error hierarchy rooted in IngestError.
"""

from .errors import (
    IngestError,
    ManifestError,
    MaterializationError,
    NetworkGateError,
    RenderError,
    SourceError,
)
from .manifest import (
    Extraction,
    FileSource,
    HttpSource,
    Manifest,
    SqlSource,
    load_manifest,
)
from .materialize import IngestResult, materialize_bundle

__version__ = "0.3.1"

__all__ = [
    "Extraction",
    "FileSource",
    "HttpSource",
    "IngestError",
    "IngestResult",
    "Manifest",
    "ManifestError",
    "MaterializationError",
    "NetworkGateError",
    "RenderError",
    "SourceError",
    "SqlSource",
    "load_manifest",
    "materialize_bundle",
]