@aiquants/markdown 5.0.0 → 6.1.0

package/dist/index.server.js

@@ -1,56 +1,459 @@
-import { load as I } from "cheerio";
-import { L as B } from "./simple-logger-i94ikRyH.js";
-import { visit as J } from "unist-util-visit";
-import { spawn as $ } from "node:child_process";
-import { existsSync as k, unlinkSync as C } from "node:fs";
-import { createRequire as H } from "node:module";
-import * as _ from "node:net";
-import * as M from "node:path";
-import { fileURLToPath as L } from "node:url";
-import { createClient as O, ConnectError as q, Code as D } from "@connectrpc/connect";
-import { Http2SessionManager as F, createConnectTransport as K } from "@connectrpc/connect-node";
-import { Message as S, proto3 as o, MethodKind as U } from "@bufbuild/protobuf";
-const Y = async (r) => {
+import { l as L, L as O, a as se, b as ke } from "./linkCards-1JxY8wdm.js";
+import { l as h } from "./simple-logger-DwH1YQvq.js";
+import { Resolver as be } from "node:dns/promises";
+import * as ie from "node:net";
+import { BlockList as ye, isIP as le, connect as Te } from "node:net";
+import { Agent as Se, buildConnector as Y, fetch as ve } from "undici";
+import { Parser as Ae } from "htmlparser2";
+import { spawn as _e } from "node:child_process";
+import { existsSync as M, unlinkSync as Re } from "node:fs";
+import { createRequire as Le } from "node:module";
+import * as C from "node:path";
+import { fileURLToPath as Oe } from "node:url";
+import { createClient as Pe, ConnectError as Me, Code as Ce } from "@connectrpc/connect";
+import { Http2SessionManager as Ie, createConnectTransport as xe } from "@connectrpc/connect-node";
+import { Message as x, proto3 as d, MethodKind as Ne } from "@bufbuild/protobuf";
+const De = [
+  [[0], 8],
+  [[10], 8],
+  [[100, 64], 10],
+  [[127], 8],
+  [[169, 254], 16],
+  [[172, 16], 12],
+  [[192, 0, 0], 24],
+  [[192, 0, 2], 24],
+  [[192, 168], 16],
+  [[198, 18], 15],
+  [[198, 51, 100], 24],
+  [[203, 0, 113], 24],
+  [[224], 4],
+  [[240], 4]
+], Be = [
+  [[100, 65435], 32],
+  [[0, 0, 0, 0, 65535, 0], 96],
+  [[256, 0, 0, 0], 64],
+  [[256, 0, 0, 1], 64],
+  [[8193, 0], 32],
+  [[8193, 2, 0], 48],
+  [[8193, 3512], 32],
+  [[8194], 16],
+  [[16383], 20],
+  [[24320], 16],
+  [[64512], 7],
+  [[65152], 10],
+  [[65216], 10],
+  [[65280], 8]
+], y = new ye();
+for (const [r, t] of De) {
+  const e = [...r, 0, 0, 0].slice(0, 4).join(".");
+  y.addSubnet(e, t, "ipv4"), y.addSubnet(`::ffff:${e}`, 96 + t, "ipv6"), y.addSubnet(`::${e}`, 96 + t, "ipv6");
+}
+for (const [r, t] of Be)
+  y.addSubnet(`${r.map((e) => e.toString(16)).join(":")}::`, t, "ipv6");
+const U = (r) => {
+  const t = r.replace(/^\[/u, "").replace(/\]$/u, "").replace(/%.*$/su, ""), e = le(t);
+  return e !== 0 && y.check(t, e === 4 ? "ipv4" : "ipv6");
+}, ce = "ERR_LINK_CARD_PRIVATE_ADDRESS", Z = Object.freeze({ timeoutMs: 1e3, tries: 2 }), q = new be({ timeout: Z.timeoutMs, tries: Z.tries }), Q = (r, t) => ({
+  error: Object.assign(new Error(`Blocked hostname resolving to a private address: ${r} -> ${t}`), { code: ce })
+}), He = async (r, t) => {
+  const e = le(r);
+  if (e !== 0)
+    return U(r) ? Q(r, r) : { error: null, family: e === 4 ? 4 : 6, addresses: [r] };
+  const [n, o] = await Promise.allSettled([t === 6 ? Promise.resolve([]) : q.resolve4(r), t === 4 ? Promise.resolve([]) : q.resolve6(r)]), s = n.status === "fulfilled" ? n.value : [], a = o.status === "fulfilled" ? o.value : [], i = [...s, ...a].find((R) => U(R));
+  if (i !== void 0) return Q(r, i);
+  const [l, ...c] = s;
+  if (l !== void 0) return { error: null, family: 4, addresses: [l, ...c] };
+  const [f, ...S] = a;
+  return f !== void 0 ? { error: null, family: 6, addresses: [f, ...S] } : n.status === "rejected" ? { error: n.reason } : o.status === "rejected" ? { error: o.reason } : { error: Object.assign(new Error(`No address for ${r}`), { code: "ENOTFOUND" }) };
+}, Ue = (r, t, e) => {
+  const n = t.family === 4 || t.family === "IPv4" ? 4 : t.family === 6 || t.family === "IPv6" ? 6 : 0;
+  He(r, n).then((o) => {
+    if (o.error !== null) {
+      e(o.error, "");
+      return;
+    }
+    const { family: s, addresses: a } = o;
+    t.all === !0 ? e(
+      null,
+      a.map((i) => ({ address: i, family: s }))
+    ) : e(null, a[0], s);
+  });
+}, $e = /* @__PURE__ */ new Set(["127.0.0.1", "0.0.0.0", "[::1]"]), je = [".local", ".internal", ".home.arpa"], j = (r, t) => {
+  let e;
+  try {
+    e = new URL(r);
+  } catch {
+    return { ok: !1, reason: "forbidden-url", detail: "Invalid URL" };
+  }
+  if (e.protocol !== "http:" && e.protocol !== "https:")
+    return { ok: !1, reason: "forbidden-url", detail: "Only http(s) URLs are allowed" };
+  if (e.username !== "" || e.password !== "")
+    return { ok: !1, reason: "forbidden-url", detail: "URLs with a user name or password are not allowed" };
+  e.hash = "";
+  const n = e.hostname.replace(/\.+$/u, "");
+  return n === "localhost" || n.endsWith(".localhost") || $e.has(n) ? { ok: !1, reason: "private-network", detail: "Localhost access is not allowed" } : U(n) ? { ok: !1, reason: "private-network", detail: "Private network access is not allowed" } : !(n.startsWith("[") || n.includes(".")) || je.some((s) => n.endsWith(s)) ? { ok: !1, reason: "private-network", detail: "Internal domain access is not allowed" } : { ok: !0, href: e.href };
+}, ue = (r) => {
+  let t;
   try {
-    const e = new AbortController(), t = setTimeout(() => e.abort(), 1e4), c = await fetch(r, { signal: e.signal });
-    if (clearTimeout(t), !c.ok)
-      return null;
-    const s = await c.text(), a = { url: r }, i = I(s), n = i("title").text().trim();
-    a.title = n;
-    const w = i("meta");
-    for (const m of w) {
-      const h = m.attribs.property;
-      h === "og:site_name" && (a.site_name = m.attribs.content || void 0), h === "og:title" && (a.title = m.attribs.content || n), h === "og:description" && (a.description = m.attribs.content || void 0), h === "og:image" && (a.image = m.attribs.content || void 0), h === "og:type" && (a.type = m.attribs.content || void 0), m.attribs.name === "description" && (a.description = m.attribs.content || void 0);
+    t = new URL(r);
+  } catch {
+    return "(unparsable URL)";
+  }
+  return t.protocol !== "http:" && t.protocol !== "https:" ? `(a ${t.protocol} URL)` : (t.username = "", t.password = "", t.href);
+}, de = 1024, ze = /^[\t\n\f\r ]$/u, w = (r) => ze.test(r), B = (r) => r.replace(/[A-Z]/gu, (t) => t.toLowerCase()), $ = (r) => {
+  try {
+    return new TextDecoder(r).encoding;
+  } catch {
+    return null;
+  }
+}, Je = (r) => r[0] === 239 && r[1] === 187 && r[2] === 191 ? "utf-8" : r[0] === 254 && r[1] === 255 ? "utf-16be" : r[0] === 255 && r[1] === 254 ? "utf-16le" : null, Ke = (r) => {
+  for (const t of r.split(";").slice(1)) {
+    const e = t.indexOf("=");
+    if (e !== -1 && t.slice(0, e).trim().toLowerCase() === "charset")
+      return t.slice(e + 1).trim().replace(/^"(.*)"$/su, "$1");
+  }
+  return null;
+}, Fe = (r) => {
+  let t = 0;
+  for (; ; ) {
+    const e = r.indexOf("charset", t);
+    if (e === -1) return null;
+    let n = e + 7;
+    for (; w(r.charAt(n)); ) n += 1;
+    if (r.charAt(n) !== "=") {
+      t = n;
+      continue;
     }
-    return a;
-  } catch (e) {
-    return B.error("Error fetching site metadata:", e), null;
-  }
-}, b = /* @__PURE__ */ new Map(), j = (r, e) => e.fetchAll ? !0 : e.urlPatterns && e.urlPatterns.length > 0 ? e.urlPatterns.some((t) => t.test(r)) : /^https?:\/\//.test(r) && !r.includes("localhost") && !r.includes("127.0.0.1"), pe = (r = {}) => {
-  const { enableCache: e = !0 } = r;
-  return async (t) => {
-    const c = [];
-    J(t, "block-link", (a) => {
-      j(a.url, r) && c.push(a);
-    });
-    const s = c.map(async (a) => {
-      const i = a.url;
-      if (e && b.has(i)) {
-        const n = b.get(i);
-        n && (a.data = a.data || {}, a.data.siteMetadata = n);
-        return;
-      }
-      try {
-        const n = await Y(i);
-        n ? (a.data = a.data || {}, a.data.siteMetadata = n, e && b.set(i, n)) : e && b.set(i, null);
-      } catch (n) {
-        B.warn(`Failed to fetch metadata for ${i}:`, n), e && b.set(i, null);
+    for (n += 1; w(r.charAt(n)); ) n += 1;
+    const o = r.charAt(n);
+    if (o === '"' || o === "'") {
+      const a = r.indexOf(o, n + 1);
+      return a === -1 ? null : r.slice(n + 1, a);
+    }
+    const s = r.slice(n).search(/[\t\n\f\r ;]/u);
+    return s === -1 ? r.slice(n) : r.slice(n, n + s);
+  }
+}, fe = (r, t) => {
+  let e = t;
+  for (; w(r.charAt(e)) || r.charAt(e) === "/"; ) e += 1;
+  if (r.charAt(e) === ">" || e >= r.length) return { attribute: null, end: e };
+  let n = "";
+  for (; ; ) {
+    const a = r.charAt(e);
+    if (a === "") return { attribute: null, end: e };
+    if (a === "=" && n !== "") break;
+    if (w(a)) {
+      for (; w(r.charAt(e)); ) e += 1;
+      if (r.charAt(e) !== "=") return { attribute: { name: n, value: "" }, end: e };
+      break;
+    }
+    if (a === "/" || a === ">") return { attribute: { name: n, value: "" }, end: e };
+    n += B(a), e += 1;
+  }
+  for (e += 1; w(r.charAt(e)); ) e += 1;
+  const o = r.charAt(e);
+  if (o === '"' || o === "'") {
+    const a = r.indexOf(o, e + 1);
+    return a === -1 ? { attribute: null, end: r.length } : { attribute: { name: n, value: B(r.slice(e + 1, a)) }, end: a + 1 };
+  }
+  if (o === ">") return { attribute: { name: n, value: "" }, end: e };
+  const s = r.slice(e).search(/[\t\n\f\r >]/u);
+  return s === -1 ? { attribute: null, end: r.length } : { attribute: { name: n, value: B(r.slice(e, e + s)) }, end: e + s };
+}, Ge = (r, t) => {
+  const e = /* @__PURE__ */ new Set();
+  let n = !1, o = null, s = null, a = t;
+  for (; ; ) {
+    const { attribute: i, end: l } = fe(r, a);
+    if (a = l, i === null) break;
+    if (!e.has(i.name))
+      if (e.add(i.name), i.name === "http-equiv")
+        n = i.value === "content-type";
+      else if (i.name === "content") {
+        const c = Fe(i.value), f = c === null ? null : $(c);
+        f !== null && s === null && (s = f, o = !0);
+      } else i.name === "charset" && (s = $(i.value) ?? !1, o = !1);
+  }
+  return o === null || typeof s != "string" || o && !n ? { encoding: null, end: a } : s === "utf-16be" || s === "utf-16le" ? { encoding: "utf-8", end: a } : { encoding: s === "x-user-defined" ? "windows-1252" : s, end: a };
+}, Xe = (r) => {
+  const t = Array.from(r.subarray(0, de), (n) => String.fromCharCode(n)).join("");
+  let e = 0;
+  for (; e < t.length; )
+    if (t.startsWith("<!--", e)) {
+      const n = t.indexOf("-->", e + 2);
+      if (n === -1) return null;
+      e = n + 3;
+    } else if (/^<meta[\t\n\f\r /]$/iu.test(t.slice(e, e + 6))) {
+      const { encoding: n, end: o } = Ge(t, e + 5);
+      if (n !== null) return n;
+      e = o + 1;
+    } else if (/^<\/?[A-Za-z]/u.test(t.slice(e, e + 3))) {
+      let n = e + 1;
+      for (; n < t.length && !w(t.charAt(n)) && t.charAt(n) !== ">"; ) n += 1;
+      for (; ; ) {
+        const o = fe(t, n);
+        if (n = o.end, o.attribute === null) break;
       }
+      e = n + 1;
+    } else if (/^<[!/?]$/u.test(t.slice(e, e + 2))) {
+      const n = t.indexOf(">", e + 1);
+      if (n === -1) return null;
+      e = n + 1;
+    } else
+      e += 1;
+  return null;
+}, Ve = (r, t) => {
+  const e = Je(r);
+  if (e !== null) return e;
+  const n = Ke(t), o = n === null ? null : $(n);
+  return o !== null ? o : Xe(r) ?? "utf-8";
+}, We = (r, t) => {
+  const e = new Uint8Array(t);
+  let n = 0;
+  for (const o of r)
+    e.set(o, n), n += o.byteLength;
+  return e;
+}, Ye = (r) => {
+  const t = [];
+  let e = 0, n = null;
+  const o = () => {
+    const s = We(t, e);
+    t.length = 0;
+    const a = new TextDecoder(Ve(s, r));
+    return n = a, { started: a, text: a.decode(s, { stream: !0 }) };
+  };
+  return {
+    write: (s) => n !== null ? n.decode(s, { stream: !0 }) : (t.push(s), e += s.byteLength, e < de ? "" : o().text),
+    end: () => {
+      if (n !== null) return n.decode();
+      const { started: s, text: a } = o();
+      return a + s.decode();
+    }
+  };
+}, Ze = (r, t, e) => {
+  const n = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map();
+  return (s) => {
+    const a = n.get(s);
+    if (a !== void 0 && a.expireAt > e()) return Promise.resolve(a.value);
+    const i = o.get(s);
+    if (i !== void 0) return i;
+    const l = r(s).then((c) => (!n.has(s) && n.size >= t.maxEntries && n.delete(n.keys().next().value), n.set(s, { value: c, expireAt: e() + t.ttlMsOf(c) }), c)).finally(() => {
+      o.delete(s);
     });
-    await Promise.all(s);
+    return o.set(s, l), l;
   };
-};
-class d extends S {
+}, qe = 65536, Qe = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]), et = /* @__PURE__ */ new Set(["text/html", "application/xhtml+xml"]), tt = /* @__PURE__ */ new Set(["ERR_IP_BLOCKED", ce]), me = Object.freeze({ timeoutMs: 5e3, maxRedirects: 5, maxBodyBytes: 8 * 1024 * 1024 }), rt = Object.freeze({ lookup: Ue, blockList: y }), nt = (r, t) => {
+  const e = Y({ lookup: r.lookup, blockList: r.blockList, timeout: t }), n = Y({ timeout: t });
+  return (o, s) => {
+    if (o.protocol !== "https:") {
+      e(o, s);
+      return;
+    }
+    const a = Te({ host: o.hostname, port: Number(o.port === "" ? 443 : o.port), lookup: r.lookup, blockList: r.blockList }), i = (l) => {
+      a.destroy(), s(l, null);
+    };
+    a.setTimeout(t, () => i(Object.assign(new Error(`Connect timeout: ${o.hostname}`), { code: "UND_ERR_CONNECT_TIMEOUT" }))), a.once("error", i), a.once("connect", () => {
+      a.setTimeout(0), a.removeListener("error", i), n({ ...o, httpSocket: a }, s);
+    });
+  };
+}, ot = (r) => new Se({
+  maxHeaderSize: qe,
+  connect: nt(rt, me.timeoutMs)
+}), H = async (r) => {
+  r.body !== null && await Promise.allSettled([r.body.cancel()]);
+}, at = (r) => r !== null && et.has(r.split(";", 1)[0].trim().toLowerCase()), st = (r) => {
+  const t = [r];
+  for (let e = 0; e < 16 && t.length > 0; e += 1) {
+    const n = t.shift();
+    if (!(n instanceof Error)) continue;
+    const o = n.code;
+    if (typeof o == "string" && tt.has(o)) return n.message;
+    t.push(n.cause, ...n instanceof AggregateError ? n.errors : []);
+  }
+  return null;
+}, pe = (r, t) => {
+  const e = st(r);
+  return e !== null ? (h.info("Refused link-card connection to a private address:", t, e), { ok: !1, reason: "private-network" }) : (h.error("Error fetching link-card metadata:", r), { ok: !1, reason: "unreachable" });
+}, it = () => new Promise((r) => {
+  setImmediate(r);
+}), lt = async (r, t, e, n) => {
+  if (r.body === null) return { ok: !0, value: t.end() };
+  const o = r.body.getReader();
+  let s = 0;
+  for (; ; ) {
+    let a;
+    try {
+      a = await o.read();
+    } catch (f) {
+      return pe(f, n);
+    }
+    if (a.done) break;
+    const i = e - s, l = a.value.byteLength > i, c = l ? a.value.subarray(0, i) : a.value;
+    if (s += c.byteLength, !t.write(c)) {
+      await Promise.allSettled([o.cancel()]);
+      break;
+    }
+    if (l) {
+      await Promise.allSettled([o.cancel()]), h.warn("Link-card page body exceeds the size limit; parsing only its first bytes:", n, e);
+      break;
+    }
+    await it();
+  }
+  return { ok: !0, value: t.end() };
+}, ct = async (r, t, e, n) => {
+  let o = r;
+  for (let s = 0; s <= t.limits.maxRedirects; s += 1) {
+    let a;
+    try {
+      a = await ve(o, { signal: n, redirect: "manual", dispatcher: t.agent });
+    } catch (f) {
+      return pe(f, o);
+    }
+    const i = Qe.has(a.status) ? a.headers.get("location")?.trim() ?? "" : "";
+    if (i === "") {
+      if (!a.ok)
+        return await H(a), { ok: !1, reason: "unreachable" };
+      const f = a.headers.get("content-type");
+      return at(f) ? lt(a, e({ url: o, contentType: f }), t.limits.maxBodyBytes, o) : (await H(a), { ok: !1, reason: "not-html" });
+    }
+    await H(a);
+    let l;
+    try {
+      l = new URL(i, o);
+    } catch {
+      return h.error("Blocked redirect to an unparsable Location from:", o), { ok: !1, reason: "unreachable" };
+    }
+    const c = j(l.href);
+    if (!c.ok)
+      return h.info("Refused link-card redirect:", ue(l), `(${c.reason}: ${c.detail})`), { ok: !1, reason: c.reason };
+    o = c.href;
+  }
+  return h.error("Too many redirects while fetching link-card metadata:", r), { ok: !1, reason: "unreachable" };
+}, ut = (r, t, e) => {
+  const n = new AbortController(), o = setTimeout(() => n.abort(), t.limits.timeoutMs);
+  return ct(r, t, e, n.signal).finally(() => {
+    clearTimeout(o);
+  });
+}, dt = 256, ft = 4096, mt = 64, pt = /* @__PURE__ */ new Set(["html", "head", "title", "meta", "link", "base", "basefont", "bgsound", "noframes", "script", "style", "template", "noscript"]), ht = /* @__PURE__ */ new Set(["title", "script", "style"]), wt = /* @__PURE__ */ new Set(["noscript", "template", "noframes"]), gt = (r) => r?.toLowerCase().split(/[\t\n\f\r ]+/u).includes("icon") === !0, Et = (r, t) => {
+  if (r === void 0) return t;
+  let e;
+  try {
+    e = new URL(r, t);
+  } catch {
+    return t;
+  }
+  return (e.protocol === "http:" || e.protocol === "https:") && e.href.length <= se ? e.href : t;
+}, ee = (r, t, e) => {
+  const n = r?.trim();
+  if (n === void 0 || n === "") return;
+  let o;
+  try {
+    o = new URL(n, t);
+  } catch {
+    return;
+  }
+  return o.href.length <= se && j(o.href).ok ? o.href : void 0;
+}, kt = (r, t) => {
+  let e = !1, n = 0, o = 0, s = 0, a = null, i = null, l = null, c, f, S, R, z, J, K = !1, F, G = !1;
+  const N = () => {
+    e = !0, D.pause();
+  }, D = new Ae(
+    {
+      onopentagname(u) {
+        n += 1, o += 1, s = 0, (n > dt || o > ft || a === null && !pt.has(u)) && N();
+      },
+      onattribute() {
+        s += 1, s > mt && N();
+      },
+      onopentag(u, m) {
+        if (!(e || a !== null)) {
+          if (wt.has(u)) {
+            a = n;
+            return;
+          }
+          if (u === "meta") {
+            const p = m.content;
+            m.property === "og:site_name" && (R = p), m.property === "og:title" && (f = p), m.property === "og:description" && (S = p), m.property === "og:image" && (z = p), m.name === "description" && (S = p);
+          } else u === "link" && !K && gt(m.rel) ? (K = !0, J = m.href) : u === "base" && !G && Object.hasOwn(m, "href") && (G = !0, F = m.href);
+          ht.has(u) && (i = u, u === "title" && c === void 0 && (l = ""));
+        }
+      },
+      ontext(u) {
+        a === null && (l !== null ? l += u : i === null && /[^\t\n\f\r ]/u.test(u) && N());
+      },
+      onclosetag(u) {
+        if (!e) {
+          if (n -= 1, a !== null) {
+            n < a && (a = null);
+            return;
+          }
+          u === i && (i = null, l !== null && (c = l, l = null));
+        }
+      }
+    },
+    { decodeEntities: !0 }
+  );
+  return {
+    write: (u) => (e || D.write(u), !e),
+    end: () => {
+      e || D.end();
+      const u = L(f, O.title) ?? L(c, O.title), m = L(S, O.description), p = L(R, O.siteName), X = Et(F, r), V = ee(z, X), W = ee(J, X);
+      return {
+        ...u === null ? {} : { title: u },
+        ...m === null ? {} : { description: m },
+        ...p === null ? {} : { site_name: p },
+        ...V === void 0 ? {} : { image: V },
+        ...W === void 0 ? {} : { icon: W }
+      };
+    }
+  };
+}, bt = /* @__PURE__ */ new Set(["authorize"]), yt = "private, max-age=1800", Tt = 3600 * 1e3, he = Object.freeze({ "private-network": 1800, "forbidden-url": 1800, unreachable: 300, "not-html": 300 }), St = 1e3, P = "no-store", v = (r, t, e, n, o = {}) => new Response(r.method === "HEAD" ? null : JSON.stringify(e), {
+  status: t,
+  headers: { "Content-Type": "application/json; charset=utf-8", "Cache-Control": n, "X-Content-Type-Options": "nosniff", ...o }
+}), te = (r) => new Response(null, {
+  status: 204,
+  headers: { "Cache-Control": `private, max-age=${he[r]}`, "X-Content-Type-Options": "nosniff", [ke]: r }
+}), vt = (r) => {
+  if (typeof r != "object" || r === null)
+    throw new TypeError("createLinkCardHandler: options must be an object with an authorize function");
+  if (typeof r.authorize != "function")
+    throw new TypeError("createLinkCardHandler: options.authorize must be a function (pass () => true to serve everyone)");
+  const t = Object.keys(r).filter((e) => !bt.has(e));
+  if (t.length > 0)
+    throw new TypeError(`createLinkCardHandler: unknown option(s): ${t.join(", ")}`);
+}, At = (r) => (t) => {
+  const e = Ye(t.contentType), n = kt(t.url);
+  return {
+    write: (o) => n.write(e.write(o)),
+    end: () => (n.write(e.end()), n.end())
+  };
+}, _t = (r, t) => {
+  vt(r);
+  const { authorize: e } = r, n = ot(), o = Ze(
+    (s) => ut(s, { agent: n, scope: t, limits: me }, At()),
+    { maxEntries: St, ttlMsOf: (s) => s.ok ? Tt : he[s.reason] * 1e3 },
+    Date.now
+  );
+  return async (s) => {
+    if (s.method !== "GET" && s.method !== "HEAD")
+      return v(s, 405, { error: "Method Not Allowed" }, P, { Allow: "GET, HEAD" });
+    if (await e(s) !== !0)
+      return v(s, 401, { error: "Unauthorized" }, P);
+    const a = new URL(s.url).searchParams.get("url");
+    if (a === null || a === "")
+      return v(s, 400, { error: "Missing 'url' parameter" }, P);
+    const i = j(a);
+    if (!i.ok)
+      return h.info("Refused link-card URL:", ue(a), `(${i.reason}: ${i.detail})`), te(i.reason);
+    let l;
+    try {
+      l = await o(i.href);
+    } catch (c) {
+      return h.error("Unexpected error while reading link-card metadata:", i.href, c), v(s, 500, { error: "Internal Server Error" }, P);
+    }
+    return l.ok ? v(s, 200, l.value, yt) : te(l.reason);
+  };
+}, Yt = (r) => _t(r, "public");
+class E extends x {
   /**
    * @generated from field: string markdown_text = 1;
    */
@@ -146,12 +549,12 @@ class d extends S {
    * @generated from field: markdown.v1.DenyRules deny = 13;
    */
   deny;
-  constructor(e) {
-    super(), o.util.initPartial(e, this);
+  constructor(t) {
+    super(), d.util.initPartial(t, this);
   }
-  static runtime = o;
+  static runtime = d;
   static typeName = "markdown.v1.ConvertRequest";
-  static fields = o.util.newFieldList(() => [
+  static fields = d.util.newFieldList(() => [
     {
       no: 1,
       name: "markdown_text",
@@ -194,46 +597,46 @@ class d extends S {
       /* ScalarType.BOOL */
     },
     { no: 12, name: "max_html_bytes", kind: "scalar", T: 13, opt: !0 },
-    { no: 13, name: "deny", kind: "message", T: l }
+    { no: 13, name: "deny", kind: "message", T: g }
   ]);
-  static fromBinary(e, t) {
-    return new d().fromBinary(e, t);
+  static fromBinary(t, e) {
+    return new E().fromBinary(t, e);
   }
-  static fromJson(e, t) {
-    return new d().fromJson(e, t);
+  static fromJson(t, e) {
+    return new E().fromJson(t, e);
   }
-  static fromJsonString(e, t) {
-    return new d().fromJsonString(e, t);
+  static fromJsonString(t, e) {
+    return new E().fromJsonString(t, e);
   }
-  static equals(e, t) {
-    return o.util.equals(d, e, t);
+  static equals(t, e) {
+    return d.util.equals(E, t, e);
   }
 }
-class l extends S {
+class g extends x {
   /**
    * @generated from field: repeated string segment_patterns = 1;
    */
   segmentPatterns = [];
-  constructor(e) {
-    super(), o.util.initPartial(e, this);
+  constructor(t) {
+    super(), d.util.initPartial(t, this);
   }
-  static runtime = o;
+  static runtime = d;
   static typeName = "markdown.v1.DenyRules";
-  static fields = o.util.newFieldList(() => [{ no: 1, name: "segment_patterns", kind: "scalar", T: 9, repeated: !0 }]);
-  static fromBinary(e, t) {
-    return new l().fromBinary(e, t);
+  static fields = d.util.newFieldList(() => [{ no: 1, name: "segment_patterns", kind: "scalar", T: 9, repeated: !0 }]);
+  static fromBinary(t, e) {
+    return new g().fromBinary(t, e);
   }
-  static fromJson(e, t) {
-    return new l().fromJson(e, t);
+  static fromJson(t, e) {
+    return new g().fromJson(t, e);
   }
-  static fromJsonString(e, t) {
-    return new l().fromJsonString(e, t);
+  static fromJsonString(t, e) {
+    return new g().fromJsonString(t, e);
   }
-  static equals(e, t) {
-    return o.util.equals(l, e, t);
+  static equals(t, e) {
+    return d.util.equals(g, t, e);
   }
 }
-class u extends S {
+class k extends x {
   /**
    * @generated from field: string html_content = 1;
    */
@@ -242,12 +645,12 @@ class u extends S {
    * @generated from field: repeated markdown.v1.Heading headings = 2;
    */
   headings = [];
-  constructor(e) {
-    super(), o.util.initPartial(e, this);
+  constructor(t) {
+    super(), d.util.initPartial(t, this);
   }
-  static runtime = o;
+  static runtime = d;
   static typeName = "markdown.v1.ConvertResponse";
-  static fields = o.util.newFieldList(() => [
+  static fields = d.util.newFieldList(() => [
     {
       no: 1,
       name: "html_content",
@@ -255,22 +658,22 @@ class u extends S {
       T: 9
       /* ScalarType.STRING */
     },
-    { no: 2, name: "headings", kind: "message", T: f, repeated: !0 }
+    { no: 2, name: "headings", kind: "message", T: b, repeated: !0 }
   ]);
-  static fromBinary(e, t) {
-    return new u().fromBinary(e, t);
+  static fromBinary(t, e) {
+    return new k().fromBinary(t, e);
   }
-  static fromJson(e, t) {
-    return new u().fromJson(e, t);
+  static fromJson(t, e) {
+    return new k().fromJson(t, e);
   }
-  static fromJsonString(e, t) {
-    return new u().fromJsonString(e, t);
+  static fromJsonString(t, e) {
+    return new k().fromJsonString(t, e);
   }
-  static equals(e, t) {
-    return o.util.equals(u, e, t);
+  static equals(t, e) {
+    return d.util.equals(k, t, e);
   }
 }
-class f extends S {
+class b extends x {
   /**
    * @generated from field: string text = 1;
    */
@@ -283,12 +686,12 @@ class f extends S {
    * @generated from field: string id = 3;
    */
   id = "";
-  constructor(e) {
-    super(), o.util.initPartial(e, this);
+  constructor(t) {
+    super(), d.util.initPartial(t, this);
   }
-  static runtime = o;
+  static runtime = d;
   static typeName = "markdown.v1.Heading";
-  static fields = o.util.newFieldList(() => [
+  static fields = d.util.newFieldList(() => [
     {
       no: 1,
       name: "text",
@@ -311,20 +714,20 @@ class f extends S {
       /* ScalarType.STRING */
     }
   ]);
-  static fromBinary(e, t) {
-    return new f().fromBinary(e, t);
+  static fromBinary(t, e) {
+    return new b().fromBinary(t, e);
   }
-  static fromJson(e, t) {
-    return new f().fromJson(e, t);
+  static fromJson(t, e) {
+    return new b().fromJson(t, e);
   }
-  static fromJsonString(e, t) {
-    return new f().fromJsonString(e, t);
+  static fromJsonString(t, e) {
+    return new b().fromJsonString(t, e);
   }
-  static equals(e, t) {
-    return o.util.equals(f, e, t);
+  static equals(t, e) {
+    return d.util.equals(b, t, e);
   }
 }
-const G = {
+const Rt = {
   typeName: "markdown.v1.MarkdownService",
   methods: {
     /**
@@ -332,148 +735,147 @@ const G = {
      */
     convert: {
       name: "Convert",
-      I: d,
-      O: u,
-      kind: U.Unary
+      I: E,
+      O: k,
+      kind: Ne.Unary
     }
   }
-}, p = process.env.MARKDOWN_SOCKET_PATH || "/tmp/markdown.sock", W = new F("http://localhost", void 0, {
-  createConnection: () => _.connect(p)
-}), N = 64 * 1024, X = 4294967295, v = Math.floor((X - N) / 2);
-class Z extends Error {
+}, T = process.env.MARKDOWN_SOCKET_PATH || "/tmp/markdown.sock", Lt = new Ie("http://localhost", void 0, {
+  createConnection: () => ie.connect(T)
+}), we = 64 * 1024, Ot = 4294967295, re = Math.floor((Ot - we) / 2);
+class Pt extends Error {
   /**
    * Wraps the service's or the transport's resource-exhausted error.
    * サービスか転送の resource exhausted のエラーを包む処理。
    *
    * @param cause - The connect error. connect のエラー。
    */
-  constructor(e) {
-    super(e.rawMessage, { cause: e }), this.name = "MarkdownResourceExhaustedError";
+  constructor(t) {
+    super(t.rawMessage, { cause: t }), this.name = "MarkdownResourceExhaustedError";
   }
 }
-const x = () => {
+const ne = () => {
   try {
-    return M.dirname(L(import.meta.url));
+    return C.dirname(Oe(import.meta.url));
   } catch {
     return __dirname;
   }
-}, A = () => `@aiquants/markdown-${process.platform}-${process.arch}`, E = () => process.platform === "win32" ? "bin/markdown-api.exe" : "bin/markdown-api", z = () => {
+}, ge = () => `@aiquants/markdown-${process.platform}-${process.arch}`, oe = () => process.platform === "win32" ? "bin/markdown-api.exe" : "bin/markdown-api", Mt = () => {
   const r = process.env.MARKDOWN_API_BINARY;
-  if (r && k(r))
+  if (r && M(r))
     return r;
   try {
-    const t = H(M.join(x(), "index.js")).resolve(`${A()}/${E()}`);
-    if (k(t))
-      return t;
+    const e = Le(C.join(ne(), "index.js")).resolve(`${ge()}/${oe()}`);
+    if (M(e))
+      return e;
   } catch {
   }
-  const e = M.join(x(), "..", "..", "go", "markdown-api", "dist", M.basename(E()));
-  return k(e) ? e : void 0;
-}, V = () => [
+  const t = C.join(ne(), "..", "..", "go", "markdown-api", "dist", C.basename(oe()));
+  return M(t) ? t : void 0;
+}, Ct = () => [
   `markdown-api binary not found for ${process.platform}-${process.arch}.`,
-  `Expected the optional dependency ${A()} to be installed.`,
+  `Expected the optional dependency ${ge()} to be installed.`,
   "If your platform is unsupported, build the service yourself",
   "(https://github.com/fehde-k/aiquants/tree/main/packages/go/markdown-api)",
   "and point MARKDOWN_API_BINARY at it."
-].join(" "), R = () => new Promise((r) => {
-  const e = _.connect(p);
-  e.on("connect", () => {
-    e.destroy(), r(!0);
-  }), e.on("error", () => r(!1));
-}), P = async (r) => {
-  const e = Date.now();
-  for (; Date.now() - e < r; ) {
-    if (await R()) return !0;
-    await new Promise((t) => setTimeout(t, 100));
+].join(" "), Ee = () => new Promise((r) => {
+  const t = ie.connect(T);
+  t.on("connect", () => {
+    t.destroy(), r(!0);
+  }), t.on("error", () => r(!1));
+}), ae = async (r) => {
+  const t = Date.now();
+  for (; Date.now() - t < r; ) {
+    if (await Ee()) return !0;
+    await new Promise((e) => setTimeout(e, 100));
   }
   return !1;
 };
-let y = null, g = null;
-const Q = 2e3, ee = () => {
+let A = null, _ = null;
+const It = 2e3, xt = () => {
   const r = Number(process.env.MARKDOWN_API_STARTUP_TIMEOUT_MS);
   return Number.isFinite(r) && r > 0 ? r : 1e4;
 };
-let T = null;
-const te = async () => {
-  if (await R()) return !0;
-  if (g) return g;
-  g = (async () => {
-    const e = z();
-    if (!e)
-      return await P(Q) ? !0 : (T = V(), !1);
-    T = null;
+let I = null;
+const Nt = async () => {
+  if (await Ee()) return !0;
+  if (_) return _;
+  _ = (async () => {
+    const t = Mt();
+    if (!t)
+      return await ae(It) ? !0 : (I = Ct(), !1);
+    I = null;
     try {
-      k(p) && C(p);
+      M(T) && Re(T);
     } catch {
     }
     try {
-      y = $(e, [], { stdio: "ignore" });
-      const t = () => {
-        if (y) {
+      A = _e(t, [], { stdio: "ignore" });
+      const e = () => {
+        if (A) {
           try {
-            y.kill("SIGTERM");
+            A.kill("SIGTERM");
           } catch {
           }
-          y = null;
+          A = null;
         }
       };
-      return process.once("exit", t), await P(ee()) ? !0 : (console.error("markdown-api Go server did not become ready on socket:", p), t(), process.removeListener("exit", t), !1);
-    } catch (t) {
-      return console.error("Failed to spawn markdown-api Go server:", t), y = null, !1;
+      return process.once("exit", e), await ae(xt()) ? !0 : (console.error("markdown-api Go server did not become ready on socket:", T), e(), process.removeListener("exit", e), !1);
+    } catch (e) {
+      return console.error("Failed to spawn markdown-api Go server:", e), A = null, !1;
     }
   })();
-  const r = await g;
-  return r || (g = null), r;
-}, re = (r) => {
+  const r = await _;
+  return r || (_ = null), r;
+}, Dt = (r) => {
   if (!Array.isArray(r.deniedPathSegments))
     throw new TypeError("parseMarkdown: deniedPathSegments must be an array of path segment patterns (an empty array denies nothing)");
-  if (!Number.isSafeInteger(r.maxHtmlBytes) || r.maxHtmlBytes <= 0 || r.maxHtmlBytes > v)
-    throw new RangeError(`parseMarkdown: maxHtmlBytes must be an integer from 1 to ${v}, got ${r.maxHtmlBytes}`);
+  if (!Number.isSafeInteger(r.maxHtmlBytes) || r.maxHtmlBytes <= 0 || r.maxHtmlBytes > re)
+    throw new RangeError(`parseMarkdown: maxHtmlBytes must be an integer from 1 to ${re}, got ${r.maxHtmlBytes}`);
   if (r.timeoutMs !== void 0 && (!Number.isSafeInteger(r.timeoutMs) || r.timeoutMs <= 0))
     throw new RangeError(`parseMarkdown: timeoutMs must be a positive integer, got ${r.timeoutMs}`);
-}, we = async (r, e, t, c, s) => {
-  if (re(s), !await te()) {
-    const n = T ? ` ${T}` : "";
-    throw new Error(`markdown service is not reachable on ${p}.${n}`);
-  }
-  const a = {};
-  c && (a.Authorization = `Bearer ${c}`);
-  const i = O(G, K({ baseUrl: "http://localhost", httpVersion: "2", sessionManager: W, readMaxBytes: 2 * s.maxHtmlBytes + N }));
+}, Zt = async (r, t, e, n, o) => {
+  if (Dt(o), !await Nt()) {
+    const i = I ? ` ${I}` : "";
+    throw new Error(`markdown service is not reachable on ${T}.${i}`);
+  }
+  const s = {};
+  n && (s.Authorization = `Bearer ${n}`);
+  const a = Pe(Rt, xe({ baseUrl: "http://localhost", httpVersion: "2", sessionManager: Lt, readMaxBytes: 2 * o.maxHtmlBytes + we }));
   try {
-    const n = await i.convert(
+    const i = await a.convert(
       {
         markdownText: r,
-        filePath: e,
-        workspaceRoot: t,
-        validateExistence: s.validateExistence ?? !0,
-        enableSubscript: s.enableSubscript,
-        enableSuperscript: s.enableSuperscript,
-        enableMark: s.enableMark,
-        enableTableMerge: s.enableTableMerge,
-        enableEmbeds: s.enableEmbeds,
-        enableZennDirectives: s.enableZennDirectives,
-        resolveImports: s.resolveImports ?? !1,
-        maxHtmlBytes: s.maxHtmlBytes,
-        deny: new l({ segmentPatterns: [...s.deniedPathSegments] })
+        filePath: t,
+        workspaceRoot: e,
+        validateExistence: o.validateExistence ?? !0,
+        enableSubscript: o.enableSubscript,
+        enableSuperscript: o.enableSuperscript,
+        enableMark: o.enableMark,
+        enableTableMerge: o.enableTableMerge,
+        enableEmbeds: o.enableEmbeds,
+        enableZennDirectives: o.enableZennDirectives,
+        resolveImports: o.resolveImports ?? !1,
+        maxHtmlBytes: o.maxHtmlBytes,
+        deny: new g({ segmentPatterns: [...o.deniedPathSegments] })
       },
-      { headers: a, signal: s.signal, timeoutMs: s.timeoutMs }
+      { headers: s, signal: o.signal, timeoutMs: o.timeoutMs }
     );
     return {
-      htmlContent: n.htmlContent,
-      headings: n.headings.map((w) => ({
-        text: w.text,
-        depth: w.depth,
-        id: w.id
+      htmlContent: i.htmlContent,
+      headings: i.headings.map((l) => ({
+        text: l.text,
+        depth: l.depth,
+        id: l.id
       }))
     };
-  } catch (n) {
-    throw n instanceof q && n.code === D.ResourceExhausted ? new Z(n) : n;
+  } catch (i) {
+    throw i instanceof Me && i.code === Ce.ResourceExhausted ? new Pt(i) : i;
   }
 };
 export {
-  v as MAX_HTML_BYTES_LIMIT,
-  Z as MarkdownResourceExhaustedError,
-  Y as fetchSiteMetadata,
-  we as parseMarkdown,
-  pe as remarkBlockLinkMetadata
+  re as MAX_HTML_BYTES_LIMIT,
+  Pt as MarkdownResourceExhaustedError,
+  Yt as createLinkCardHandler,
+  Zt as parseMarkdown
 };