LlamaIndex for TypeScript 0.12.1

Apply the Node.js 24 and TypeScript 7 prompts first. These rules target server-side llamaindex@0.12.1, its @llamaindex/core@0.6.22 and @llamaindex/workflow@1.1.24 dependencies, and @llamaindex/readers@3.1.21 when installed.

Dependency scope and configuration

• Treat LlamaIndexTS as a deprecated, unmaintained dependency: plan migration and assign responsibility for security fixes while existing deployments remain in service.
• Keep the reviewed package graph explicit, including the separately resolved @llamaindex/workflow-core dependency and optional provider, reader, and vector-store packages. Do not assume their versions match llamaindex, or that Python LlamaIndex APIs and advisories describe this implementation.
• Configure provider endpoints, credentials, models, and transformation implementations on the server. Use explicit instances or Settings.withLLM, Settings.withEmbedModel, and Settings.withCallbackManager around construction and execution; per-request assignments to global Settings can affect other tenants, and constructed objects can retain earlier instances.

Readers and document metadata

• Configure SimpleDirectoryReader.loadData with a narrow fileExtToReader map and defaultReader: null; otherwise unknown extensions fall back to TextFileReader. Keep overrideReader server-owned because it overrides extension selection.
• Stage uploads in a bounded private directory before directory ingestion. The recursive walker uses fs.stat and follows symlinks; prevent traversal outside the staging root and recursive cycles.