@ashx-j/lunr 0.2.24 → 0.2.26

package/dist/utils/image-resize-core.d.ts

@@ -3,6 +3,7 @@ export interface ImageResizeOptions {
     maxHeight?: number;
     maxBytes?: number;
     jpegQuality?: number;
+    includePixelFingerprint?: boolean;
 }
 export interface ResizedImage {
     data: string;
@@ -12,6 +13,7 @@ export interface ResizedImage {
     width: number;
     height: number;
     wasResized: boolean;
+    fingerprint?: string;
 }
 /**
  * Resize an image to fit within the specified max dimensions and encoded file size.

package/dist/utils/image-resize-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-resize-core.d.ts","sourceRoot":"","sources":["../../src/utils/image-resize-core.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACpB;AA2BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqG9B","sourcesContent":["import { applyExifOrientation } from \"./exif-orientation.ts\";\nimport { loadPhoton } from \"./photon.ts\";\n\nexport interface ImageResizeOptions {\n\tmaxWidth?: number; // Default: 2000\n\tmaxHeight?: number; // Default: 2000\n\tmaxBytes?: number; // Default: 4.5MB of base64 payload (below Anthropic's 5MB limit)\n\tjpegQuality?: number; // Default: 80\n}\n\nexport interface ResizedImage {\n\tdata: string; // base64\n\tmimeType: string;\n\toriginalWidth: number;\n\toriginalHeight: number;\n\twidth: number;\n\theight: number;\n\twasResized: boolean;\n}\n\n// 4.5MB of base64 payload. Provides headroom below Anthropic's 5MB limit.\nconst DEFAULT_MAX_BYTES = 4.5 * 1024 * 1024;\n\nconst DEFAULT_OPTIONS: Required<ImageResizeOptions> = {\n\tmaxWidth: 2000,\n\tmaxHeight: 2000,\n\tmaxBytes: DEFAULT_MAX_BYTES,\n\tjpegQuality: 80,\n};\n\ninterface EncodedCandidate {\n\tdata: string;\n\tencodedSize: number;\n\tmimeType: string;\n}\n\nfunction encodeCandidate(buffer: Uint8Array, mimeType: string): EncodedCandidate {\n\tconst data = Buffer.from(buffer).toString(\"base64\");\n\treturn {\n\t\tdata,\n\t\tencodedSize: Buffer.byteLength(data, \"utf-8\"),\n\t\tmimeType,\n\t};\n}\n\n/**\n * Resize an image to fit within the specified max dimensions and encoded file size.\n * Returns null if the image cannot be resized below maxBytes.\n *\n * Uses Photon (Rust/WASM) for image processing. If Photon is not available,\n * returns null.\n *\n * Strategy for staying under maxBytes:\n * 1. First resize to maxWidth/maxHeight\n * 2. Try both PNG and JPEG formats, pick the smaller one\n * 3. If still too large, try JPEG with decreasing quality\n * 4. If still too large, progressively reduce dimensions until 1x1\n */\nexport async function resizeImageInProcess(\n\tinputBytes: Uint8Array,\n\tmimeType: string,\n\toptions?: ImageResizeOptions,\n): Promise<ResizedImage | null> {\n\tconst opts = { ...DEFAULT_OPTIONS, ...options };\n\tconst inputBase64Size = Math.ceil(inputBytes.byteLength / 3) * 4;\n\n\tconst photon = await loadPhoton();\n\tif (!photon) {\n\t\treturn null;\n\t}\n\n\tlet image: ReturnType<typeof photon.PhotonImage.new_from_byteslice> | undefined;\n\ttry {\n\t\tconst rawImage = photon.PhotonImage.new_from_byteslice(inputBytes);\n\t\timage = applyExifOrientation(photon, rawImage, inputBytes);\n\t\tif (image !== rawImage) rawImage.free();\n\n\t\tconst originalWidth = image.get_width();\n\t\tconst originalHeight = image.get_height();\n\t\tconst format = mimeType.split(\"/\")[1] ?? \"png\";\n\n\t\t// Check if already within all limits (dimensions AND encoded size)\n\t\tif (originalWidth <= opts.maxWidth && originalHeight <= opts.maxHeight && inputBase64Size < opts.maxBytes) {\n\t\t\treturn {\n\t\t\t\tdata: Buffer.from(inputBytes).toString(\"base64\"),\n\t\t\t\tmimeType: mimeType || `image/${format}`,\n\t\t\t\toriginalWidth,\n\t\t\t\toriginalHeight,\n\t\t\t\twidth: originalWidth,\n\t\t\t\theight: originalHeight,\n\t\t\t\twasResized: false,\n\t\t\t};\n\t\t}\n\n\t\t// Calculate initial dimensions respecting max limits\n\t\tlet targetWidth = originalWidth;\n\t\tlet targetHeight = originalHeight;\n\n\t\tif (targetWidth > opts.maxWidth) {\n\t\t\ttargetHeight = Math.round((targetHeight * opts.maxWidth) / targetWidth);\n\t\t\ttargetWidth = opts.maxWidth;\n\t\t}\n\t\tif (targetHeight > opts.maxHeight) {\n\t\t\ttargetWidth = Math.round((targetWidth * opts.maxHeight) / targetHeight);\n\t\t\ttargetHeight = opts.maxHeight;\n\t\t}\n\n\t\tfunction tryEncodings(width: number, height: number, jpegQualities: number[]): EncodedCandidate[] {\n\t\t\tconst resized = photon!.resize(image!, width, height, photon!.SamplingFilter.Lanczos3);\n\n\t\t\ttry {\n\t\t\t\tconst candidates: EncodedCandidate[] = [encodeCandidate(resized.get_bytes(), \"image/png\")];\n\t\t\t\tfor (const quality of jpegQualities) {\n\t\t\t\t\tcandidates.push(encodeCandidate(resized.get_bytes_jpeg(quality), \"image/jpeg\"));\n\t\t\t\t}\n\t\t\t\treturn candidates;\n\t\t\t} finally {\n\t\t\t\tresized.free();\n\t\t\t}\n\t\t}\n\n\t\tconst qualitySteps = Array.from(new Set([opts.jpegQuality, 85, 70, 55, 40]));\n\t\tlet currentWidth = targetWidth;\n\t\tlet currentHeight = targetHeight;\n\n\t\twhile (true) {\n\t\t\tconst candidates = tryEncodings(currentWidth, currentHeight, qualitySteps);\n\t\t\tfor (const candidate of candidates) {\n\t\t\t\tif (candidate.encodedSize < opts.maxBytes) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tdata: candidate.data,\n\t\t\t\t\t\tmimeType: candidate.mimeType,\n\t\t\t\t\t\toriginalWidth,\n\t\t\t\t\t\toriginalHeight,\n\t\t\t\t\t\twidth: currentWidth,\n\t\t\t\t\t\theight: currentHeight,\n\t\t\t\t\t\twasResized: true,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (currentWidth === 1 && currentHeight === 1) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tconst nextWidth = currentWidth === 1 ? 1 : Math.max(1, Math.floor(currentWidth * 0.75));\n\t\t\tconst nextHeight = currentHeight === 1 ? 1 : Math.max(1, Math.floor(currentHeight * 0.75));\n\t\t\tif (nextWidth === currentWidth && nextHeight === currentHeight) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tcurrentWidth = nextWidth;\n\t\t\tcurrentHeight = nextHeight;\n\t\t}\n\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t} finally {\n\t\tif (image) {\n\t\t\timage.free();\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"image-resize-core.d.ts","sourceRoot":"","sources":["../../src/utils/image-resize-core.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA6G9B","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { applyExifOrientation } from \"./exif-orientation.ts\";\nimport { loadPhoton } from \"./photon.ts\";\n\nexport interface ImageResizeOptions {\n\tmaxWidth?: number; // Default: 2000\n\tmaxHeight?: number; // Default: 2000\n\tmaxBytes?: number; // Default: 4.5MB of base64 payload (below Anthropic's 5MB limit)\n\tjpegQuality?: number; // Default: 80\n\tincludePixelFingerprint?: boolean;\n}\n\nexport interface ResizedImage {\n\tdata: string; // base64\n\tmimeType: string;\n\toriginalWidth: number;\n\toriginalHeight: number;\n\twidth: number;\n\theight: number;\n\twasResized: boolean;\n\tfingerprint?: string;\n}\n\n// 4.5MB of base64 payload. Provides headroom below Anthropic's 5MB limit.\nconst DEFAULT_MAX_BYTES = 4.5 * 1024 * 1024;\n\nconst DEFAULT_OPTIONS: Required<ImageResizeOptions> = {\n\tmaxWidth: 2000,\n\tmaxHeight: 2000,\n\tmaxBytes: DEFAULT_MAX_BYTES,\n\tjpegQuality: 80,\n\tincludePixelFingerprint: false,\n};\n\ninterface EncodedCandidate {\n\tdata: string;\n\tencodedSize: number;\n\tmimeType: string;\n}\n\nfunction encodeCandidate(buffer: Uint8Array, mimeType: string): EncodedCandidate {\n\tconst data = Buffer.from(buffer).toString(\"base64\");\n\treturn {\n\t\tdata,\n\t\tencodedSize: Buffer.byteLength(data, \"utf-8\"),\n\t\tmimeType,\n\t};\n}\n\n/**\n * Resize an image to fit within the specified max dimensions and encoded file size.\n * Returns null if the image cannot be resized below maxBytes.\n *\n * Uses Photon (Rust/WASM) for image processing. If Photon is not available,\n * returns null.\n *\n * Strategy for staying under maxBytes:\n * 1. First resize to maxWidth/maxHeight\n * 2. Try both PNG and JPEG formats, pick the smaller one\n * 3. If still too large, try JPEG with decreasing quality\n * 4. If still too large, progressively reduce dimensions until 1x1\n */\nexport async function resizeImageInProcess(\n\tinputBytes: Uint8Array,\n\tmimeType: string,\n\toptions?: ImageResizeOptions,\n): Promise<ResizedImage | null> {\n\tconst opts = { ...DEFAULT_OPTIONS, ...options };\n\tconst inputBase64Size = Math.ceil(inputBytes.byteLength / 3) * 4;\n\n\tconst photon = await loadPhoton();\n\tif (!photon) {\n\t\treturn null;\n\t}\n\n\tlet image: ReturnType<typeof photon.PhotonImage.new_from_byteslice> | undefined;\n\ttry {\n\t\tconst rawImage = photon.PhotonImage.new_from_byteslice(inputBytes);\n\t\timage = applyExifOrientation(photon, rawImage, inputBytes);\n\t\tif (image !== rawImage) rawImage.free();\n\n\t\tconst originalWidth = image.get_width();\n\t\tconst originalHeight = image.get_height();\n\t\tconst format = mimeType.split(\"/\")[1] ?? \"png\";\n\t\tconst fingerprint = opts.includePixelFingerprint\n\t\t\t? createHash(\"sha256\")\n\t\t\t\t\t.update(`${originalWidth}x${originalHeight}:`)\n\t\t\t\t\t.update(image.get_raw_pixels())\n\t\t\t\t\t.digest(\"hex\")\n\t\t\t: undefined;\n\n\t\t// Check if already within all limits (dimensions AND encoded size)\n\t\tif (originalWidth <= opts.maxWidth && originalHeight <= opts.maxHeight && inputBase64Size < opts.maxBytes) {\n\t\t\treturn {\n\t\t\t\tdata: Buffer.from(inputBytes).toString(\"base64\"),\n\t\t\t\tmimeType: mimeType || `image/${format}`,\n\t\t\t\toriginalWidth,\n\t\t\t\toriginalHeight,\n\t\t\t\twidth: originalWidth,\n\t\t\t\theight: originalHeight,\n\t\t\t\twasResized: false,\n\t\t\t\t...(fingerprint ? { fingerprint } : {}),\n\t\t\t};\n\t\t}\n\n\t\t// Calculate initial dimensions respecting max limits\n\t\tlet targetWidth = originalWidth;\n\t\tlet targetHeight = originalHeight;\n\n\t\tif (targetWidth > opts.maxWidth) {\n\t\t\ttargetHeight = Math.round((targetHeight * opts.maxWidth) / targetWidth);\n\t\t\ttargetWidth = opts.maxWidth;\n\t\t}\n\t\tif (targetHeight > opts.maxHeight) {\n\t\t\ttargetWidth = Math.round((targetWidth * opts.maxHeight) / targetHeight);\n\t\t\ttargetHeight = opts.maxHeight;\n\t\t}\n\n\t\tfunction tryEncodings(width: number, height: number, jpegQualities: number[]): EncodedCandidate[] {\n\t\t\tconst resized = photon!.resize(image!, width, height, photon!.SamplingFilter.Lanczos3);\n\n\t\t\ttry {\n\t\t\t\tconst candidates: EncodedCandidate[] = [encodeCandidate(resized.get_bytes(), \"image/png\")];\n\t\t\t\tfor (const quality of jpegQualities) {\n\t\t\t\t\tcandidates.push(encodeCandidate(resized.get_bytes_jpeg(quality), \"image/jpeg\"));\n\t\t\t\t}\n\t\t\t\treturn candidates;\n\t\t\t} finally {\n\t\t\t\tresized.free();\n\t\t\t}\n\t\t}\n\n\t\tconst qualitySteps = Array.from(new Set([opts.jpegQuality, 85, 70, 55, 40]));\n\t\tlet currentWidth = targetWidth;\n\t\tlet currentHeight = targetHeight;\n\n\t\twhile (true) {\n\t\t\tconst candidates = tryEncodings(currentWidth, currentHeight, qualitySteps);\n\t\t\tfor (const candidate of candidates) {\n\t\t\t\tif (candidate.encodedSize < opts.maxBytes) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tdata: candidate.data,\n\t\t\t\t\t\tmimeType: candidate.mimeType,\n\t\t\t\t\t\toriginalWidth,\n\t\t\t\t\t\toriginalHeight,\n\t\t\t\t\t\twidth: currentWidth,\n\t\t\t\t\t\theight: currentHeight,\n\t\t\t\t\t\twasResized: true,\n\t\t\t\t\t\t...(fingerprint ? { fingerprint } : {}),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (currentWidth === 1 && currentHeight === 1) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tconst nextWidth = currentWidth === 1 ? 1 : Math.max(1, Math.floor(currentWidth * 0.75));\n\t\t\tconst nextHeight = currentHeight === 1 ? 1 : Math.max(1, Math.floor(currentHeight * 0.75));\n\t\t\tif (nextWidth === currentWidth && nextHeight === currentHeight) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tcurrentWidth = nextWidth;\n\t\t\tcurrentHeight = nextHeight;\n\t\t}\n\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t} finally {\n\t\tif (image) {\n\t\t\timage.free();\n\t\t}\n\t}\n}\n"]}

package/dist/utils/image-resize-core.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { applyExifOrientation } from "./exif-orientation.js";
 import { loadPhoton } from "./photon.js";
 // 4.5MB of base64 payload. Provides headroom below Anthropic's 5MB limit.
@@ -7,6 +8,7 @@ const DEFAULT_OPTIONS = {
     maxHeight: 2000,
     maxBytes: DEFAULT_MAX_BYTES,
     jpegQuality: 80,
+    includePixelFingerprint: false,
 };
 function encodeCandidate(buffer, mimeType) {
     const data = Buffer.from(buffer).toString("base64");
@@ -45,6 +47,12 @@ export async function resizeImageInProcess(inputBytes, mimeType, options) {
         const originalWidth = image.get_width();
         const originalHeight = image.get_height();
         const format = mimeType.split("/")[1] ?? "png";
+        const fingerprint = opts.includePixelFingerprint
+            ? createHash("sha256")
+                .update(`${originalWidth}x${originalHeight}:`)
+                .update(image.get_raw_pixels())
+                .digest("hex")
+            : undefined;
         // Check if already within all limits (dimensions AND encoded size)
         if (originalWidth <= opts.maxWidth && originalHeight <= opts.maxHeight && inputBase64Size < opts.maxBytes) {
             return {
@@ -55,6 +63,7 @@ export async function resizeImageInProcess(inputBytes, mimeType, options) {
                 width: originalWidth,
                 height: originalHeight,
                 wasResized: false,
+                ...(fingerprint ? { fingerprint } : {}),
             };
         }
         // Calculate initial dimensions respecting max limits
@@ -96,6 +105,7 @@ export async function resizeImageInProcess(inputBytes, mimeType, options) {
                         width: currentWidth,
                         height: currentHeight,
                         wasResized: true,
+                        ...(fingerprint ? { fingerprint } : {}),
                     };
                 }
             }

package/dist/utils/image-resize-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"image-resize-core.js","sourceRoot":"","sources":["../../src/utils/image-resize-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,MAAM,eAAe,GAAiC;IACrD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,iBAAiB;IAC3B,WAAW,EAAE,EAAE;CACf,CAAC;AAQF,SAAS,eAAe,CAAC,MAAkB,EAAE,QAAgB,EAAoB;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO;QACN,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAC7C,QAAQ;KACR,CAAC;AAAA,CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,UAAsB,EACtB,QAAgB,EAChB,OAA4B,EACG;IAC/B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,KAA2E,CAAC;IAChF,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACnE,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAExC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAE/C,mEAAmE;QACnE,IAAI,aAAa,IAAI,IAAI,CAAC,QAAQ,IAAI,cAAc,IAAI,IAAI,CAAC,SAAS,IAAI,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3G,OAAO;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAChD,QAAQ,EAAE,QAAQ,IAAI,SAAS,MAAM,EAAE;gBACvC,aAAa;gBACb,cAAc;gBACd,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,KAAK;aACjB,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,WAAW,GAAG,aAAa,CAAC;QAChC,IAAI,YAAY,GAAG,cAAc,CAAC;QAElC,IAAI,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC;YACxE,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,CAAC;YACxE,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,CAAC;QAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,aAAuB,EAAsB;YACjG,MAAM,OAAO,GAAG,MAAO,CAAC,MAAM,CAAC,KAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAEvF,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAuB,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC3F,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACjF,CAAC;gBACD,OAAO,UAAU,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACV,OAAO,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC;QAAA,CACD;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,YAAY,GAAG,WAAW,CAAC;QAC/B,IAAI,aAAa,GAAG,YAAY,CAAC;QAEjC,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YAC3E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACpC,IAAI,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC3C,OAAO;wBACN,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,aAAa;wBACb,cAAc;wBACd,KAAK,EAAE,YAAY;wBACnB,MAAM,EAAE,aAAa;wBACrB,UAAU,EAAE,IAAI;qBAChB,CAAC;gBACH,CAAC;YACF,CAAC;YAED,IAAI,YAAY,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM;YACP,CAAC;YAED,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC;YACxF,MAAM,UAAU,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;YAC3F,IAAI,SAAS,KAAK,YAAY,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;gBAChE,MAAM;YACP,CAAC;YAED,YAAY,GAAG,SAAS,CAAC;YACzB,aAAa,GAAG,UAAU,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;YAAS,CAAC;QACV,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import { applyExifOrientation } from \"./exif-orientation.ts\";\nimport { loadPhoton } from \"./photon.ts\";\n\nexport interface ImageResizeOptions {\n\tmaxWidth?: number; // Default: 2000\n\tmaxHeight?: number; // Default: 2000\n\tmaxBytes?: number; // Default: 4.5MB of base64 payload (below Anthropic's 5MB limit)\n\tjpegQuality?: number; // Default: 80\n}\n\nexport interface ResizedImage {\n\tdata: string; // base64\n\tmimeType: string;\n\toriginalWidth: number;\n\toriginalHeight: number;\n\twidth: number;\n\theight: number;\n\twasResized: boolean;\n}\n\n// 4.5MB of base64 payload. Provides headroom below Anthropic's 5MB limit.\nconst DEFAULT_MAX_BYTES = 4.5 * 1024 * 1024;\n\nconst DEFAULT_OPTIONS: Required<ImageResizeOptions> = {\n\tmaxWidth: 2000,\n\tmaxHeight: 2000,\n\tmaxBytes: DEFAULT_MAX_BYTES,\n\tjpegQuality: 80,\n};\n\ninterface EncodedCandidate {\n\tdata: string;\n\tencodedSize: number;\n\tmimeType: string;\n}\n\nfunction encodeCandidate(buffer: Uint8Array, mimeType: string): EncodedCandidate {\n\tconst data = Buffer.from(buffer).toString(\"base64\");\n\treturn {\n\t\tdata,\n\t\tencodedSize: Buffer.byteLength(data, \"utf-8\"),\n\t\tmimeType,\n\t};\n}\n\n/**\n * Resize an image to fit within the specified max dimensions and encoded file size.\n * Returns null if the image cannot be resized below maxBytes.\n *\n * Uses Photon (Rust/WASM) for image processing. If Photon is not available,\n * returns null.\n *\n * Strategy for staying under maxBytes:\n * 1. First resize to maxWidth/maxHeight\n * 2. Try both PNG and JPEG formats, pick the smaller one\n * 3. If still too large, try JPEG with decreasing quality\n * 4. If still too large, progressively reduce dimensions until 1x1\n */\nexport async function resizeImageInProcess(\n\tinputBytes: Uint8Array,\n\tmimeType: string,\n\toptions?: ImageResizeOptions,\n): Promise<ResizedImage | null> {\n\tconst opts = { ...DEFAULT_OPTIONS, ...options };\n\tconst inputBase64Size = Math.ceil(inputBytes.byteLength / 3) * 4;\n\n\tconst photon = await loadPhoton();\n\tif (!photon) {\n\t\treturn null;\n\t}\n\n\tlet image: ReturnType<typeof photon.PhotonImage.new_from_byteslice> | undefined;\n\ttry {\n\t\tconst rawImage = photon.PhotonImage.new_from_byteslice(inputBytes);\n\t\timage = applyExifOrientation(photon, rawImage, inputBytes);\n\t\tif (image !== rawImage) rawImage.free();\n\n\t\tconst originalWidth = image.get_width();\n\t\tconst originalHeight = image.get_height();\n\t\tconst format = mimeType.split(\"/\")[1] ?? \"png\";\n\n\t\t// Check if already within all limits (dimensions AND encoded size)\n\t\tif (originalWidth <= opts.maxWidth && originalHeight <= opts.maxHeight && inputBase64Size < opts.maxBytes) {\n\t\t\treturn {\n\t\t\t\tdata: Buffer.from(inputBytes).toString(\"base64\"),\n\t\t\t\tmimeType: mimeType || `image/${format}`,\n\t\t\t\toriginalWidth,\n\t\t\t\toriginalHeight,\n\t\t\t\twidth: originalWidth,\n\t\t\t\theight: originalHeight,\n\t\t\t\twasResized: false,\n\t\t\t};\n\t\t}\n\n\t\t// Calculate initial dimensions respecting max limits\n\t\tlet targetWidth = originalWidth;\n\t\tlet targetHeight = originalHeight;\n\n\t\tif (targetWidth > opts.maxWidth) {\n\t\t\ttargetHeight = Math.round((targetHeight * opts.maxWidth) / targetWidth);\n\t\t\ttargetWidth = opts.maxWidth;\n\t\t}\n\t\tif (targetHeight > opts.maxHeight) {\n\t\t\ttargetWidth = Math.round((targetWidth * opts.maxHeight) / targetHeight);\n\t\t\ttargetHeight = opts.maxHeight;\n\t\t}\n\n\t\tfunction tryEncodings(width: number, height: number, jpegQualities: number[]): EncodedCandidate[] {\n\t\t\tconst resized = photon!.resize(image!, width, height, photon!.SamplingFilter.Lanczos3);\n\n\t\t\ttry {\n\t\t\t\tconst candidates: EncodedCandidate[] = [encodeCandidate(resized.get_bytes(), \"image/png\")];\n\t\t\t\tfor (const quality of jpegQualities) {\n\t\t\t\t\tcandidates.push(encodeCandidate(resized.get_bytes_jpeg(quality), \"image/jpeg\"));\n\t\t\t\t}\n\t\t\t\treturn candidates;\n\t\t\t} finally {\n\t\t\t\tresized.free();\n\t\t\t}\n\t\t}\n\n\t\tconst qualitySteps = Array.from(new Set([opts.jpegQuality, 85, 70, 55, 40]));\n\t\tlet currentWidth = targetWidth;\n\t\tlet currentHeight = targetHeight;\n\n\t\twhile (true) {\n\t\t\tconst candidates = tryEncodings(currentWidth, currentHeight, qualitySteps);\n\t\t\tfor (const candidate of candidates) {\n\t\t\t\tif (candidate.encodedSize < opts.maxBytes) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tdata: candidate.data,\n\t\t\t\t\t\tmimeType: candidate.mimeType,\n\t\t\t\t\t\toriginalWidth,\n\t\t\t\t\t\toriginalHeight,\n\t\t\t\t\t\twidth: currentWidth,\n\t\t\t\t\t\theight: currentHeight,\n\t\t\t\t\t\twasResized: true,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (currentWidth === 1 && currentHeight === 1) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tconst nextWidth = currentWidth === 1 ? 1 : Math.max(1, Math.floor(currentWidth * 0.75));\n\t\t\tconst nextHeight = currentHeight === 1 ? 1 : Math.max(1, Math.floor(currentHeight * 0.75));\n\t\t\tif (nextWidth === currentWidth && nextHeight === currentHeight) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tcurrentWidth = nextWidth;\n\t\t\tcurrentHeight = nextHeight;\n\t\t}\n\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t} finally {\n\t\tif (image) {\n\t\t\timage.free();\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"image-resize-core.js","sourceRoot":"","sources":["../../src/utils/image-resize-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,MAAM,eAAe,GAAiC;IACrD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,iBAAiB;IAC3B,WAAW,EAAE,EAAE;IACf,uBAAuB,EAAE,KAAK;CAC9B,CAAC;AAQF,SAAS,eAAe,CAAC,MAAkB,EAAE,QAAgB,EAAoB;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO;QACN,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAC7C,QAAQ;KACR,CAAC;AAAA,CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,UAAsB,EACtB,QAAgB,EAChB,OAA4B,EACG;IAC/B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,KAA2E,CAAC;IAChF,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACnE,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAExC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,uBAAuB;YAC/C,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACnB,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,GAAG,CAAC;iBAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;iBAC9B,MAAM,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,SAAS,CAAC;QAEb,mEAAmE;QACnE,IAAI,aAAa,IAAI,IAAI,CAAC,QAAQ,IAAI,cAAc,IAAI,IAAI,CAAC,SAAS,IAAI,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3G,OAAO;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAChD,QAAQ,EAAE,QAAQ,IAAI,SAAS,MAAM,EAAE;gBACvC,aAAa;gBACb,cAAc;gBACd,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,KAAK;gBACjB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,WAAW,GAAG,aAAa,CAAC;QAChC,IAAI,YAAY,GAAG,cAAc,CAAC;QAElC,IAAI,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC;YACxE,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,CAAC;YACxE,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,CAAC;QAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,aAAuB,EAAsB;YACjG,MAAM,OAAO,GAAG,MAAO,CAAC,MAAM,CAAC,KAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAEvF,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAuB,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC3F,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACjF,CAAC;gBACD,OAAO,UAAU,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACV,OAAO,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC;QAAA,CACD;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,YAAY,GAAG,WAAW,CAAC;QAC/B,IAAI,aAAa,GAAG,YAAY,CAAC;QAEjC,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;YAC3E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACpC,IAAI,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC3C,OAAO;wBACN,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,aAAa;wBACb,cAAc;wBACd,KAAK,EAAE,YAAY;wBACnB,MAAM,EAAE,aAAa;wBACrB,UAAU,EAAE,IAAI;wBAChB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvC,CAAC;gBACH,CAAC;YACF,CAAC;YAED,IAAI,YAAY,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM;YACP,CAAC;YAED,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC;YACxF,MAAM,UAAU,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;YAC3F,IAAI,SAAS,KAAK,YAAY,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;gBAChE,MAAM;YACP,CAAC;YAED,YAAY,GAAG,SAAS,CAAC;YACzB,aAAa,GAAG,UAAU,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;YAAS,CAAC;QACV,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { applyExifOrientation } from \"./exif-orientation.ts\";\nimport { loadPhoton } from \"./photon.ts\";\n\nexport interface ImageResizeOptions {\n\tmaxWidth?: number; // Default: 2000\n\tmaxHeight?: number; // Default: 2000\n\tmaxBytes?: number; // Default: 4.5MB of base64 payload (below Anthropic's 5MB limit)\n\tjpegQuality?: number; // Default: 80\n\tincludePixelFingerprint?: boolean;\n}\n\nexport interface ResizedImage {\n\tdata: string; // base64\n\tmimeType: string;\n\toriginalWidth: number;\n\toriginalHeight: number;\n\twidth: number;\n\theight: number;\n\twasResized: boolean;\n\tfingerprint?: string;\n}\n\n// 4.5MB of base64 payload. Provides headroom below Anthropic's 5MB limit.\nconst DEFAULT_MAX_BYTES = 4.5 * 1024 * 1024;\n\nconst DEFAULT_OPTIONS: Required<ImageResizeOptions> = {\n\tmaxWidth: 2000,\n\tmaxHeight: 2000,\n\tmaxBytes: DEFAULT_MAX_BYTES,\n\tjpegQuality: 80,\n\tincludePixelFingerprint: false,\n};\n\ninterface EncodedCandidate {\n\tdata: string;\n\tencodedSize: number;\n\tmimeType: string;\n}\n\nfunction encodeCandidate(buffer: Uint8Array, mimeType: string): EncodedCandidate {\n\tconst data = Buffer.from(buffer).toString(\"base64\");\n\treturn {\n\t\tdata,\n\t\tencodedSize: Buffer.byteLength(data, \"utf-8\"),\n\t\tmimeType,\n\t};\n}\n\n/**\n * Resize an image to fit within the specified max dimensions and encoded file size.\n * Returns null if the image cannot be resized below maxBytes.\n *\n * Uses Photon (Rust/WASM) for image processing. If Photon is not available,\n * returns null.\n *\n * Strategy for staying under maxBytes:\n * 1. First resize to maxWidth/maxHeight\n * 2. Try both PNG and JPEG formats, pick the smaller one\n * 3. If still too large, try JPEG with decreasing quality\n * 4. If still too large, progressively reduce dimensions until 1x1\n */\nexport async function resizeImageInProcess(\n\tinputBytes: Uint8Array,\n\tmimeType: string,\n\toptions?: ImageResizeOptions,\n): Promise<ResizedImage | null> {\n\tconst opts = { ...DEFAULT_OPTIONS, ...options };\n\tconst inputBase64Size = Math.ceil(inputBytes.byteLength / 3) * 4;\n\n\tconst photon = await loadPhoton();\n\tif (!photon) {\n\t\treturn null;\n\t}\n\n\tlet image: ReturnType<typeof photon.PhotonImage.new_from_byteslice> | undefined;\n\ttry {\n\t\tconst rawImage = photon.PhotonImage.new_from_byteslice(inputBytes);\n\t\timage = applyExifOrientation(photon, rawImage, inputBytes);\n\t\tif (image !== rawImage) rawImage.free();\n\n\t\tconst originalWidth = image.get_width();\n\t\tconst originalHeight = image.get_height();\n\t\tconst format = mimeType.split(\"/\")[1] ?? \"png\";\n\t\tconst fingerprint = opts.includePixelFingerprint\n\t\t\t? createHash(\"sha256\")\n\t\t\t\t\t.update(`${originalWidth}x${originalHeight}:`)\n\t\t\t\t\t.update(image.get_raw_pixels())\n\t\t\t\t\t.digest(\"hex\")\n\t\t\t: undefined;\n\n\t\t// Check if already within all limits (dimensions AND encoded size)\n\t\tif (originalWidth <= opts.maxWidth && originalHeight <= opts.maxHeight && inputBase64Size < opts.maxBytes) {\n\t\t\treturn {\n\t\t\t\tdata: Buffer.from(inputBytes).toString(\"base64\"),\n\t\t\t\tmimeType: mimeType || `image/${format}`,\n\t\t\t\toriginalWidth,\n\t\t\t\toriginalHeight,\n\t\t\t\twidth: originalWidth,\n\t\t\t\theight: originalHeight,\n\t\t\t\twasResized: false,\n\t\t\t\t...(fingerprint ? { fingerprint } : {}),\n\t\t\t};\n\t\t}\n\n\t\t// Calculate initial dimensions respecting max limits\n\t\tlet targetWidth = originalWidth;\n\t\tlet targetHeight = originalHeight;\n\n\t\tif (targetWidth > opts.maxWidth) {\n\t\t\ttargetHeight = Math.round((targetHeight * opts.maxWidth) / targetWidth);\n\t\t\ttargetWidth = opts.maxWidth;\n\t\t}\n\t\tif (targetHeight > opts.maxHeight) {\n\t\t\ttargetWidth = Math.round((targetWidth * opts.maxHeight) / targetHeight);\n\t\t\ttargetHeight = opts.maxHeight;\n\t\t}\n\n\t\tfunction tryEncodings(width: number, height: number, jpegQualities: number[]): EncodedCandidate[] {\n\t\t\tconst resized = photon!.resize(image!, width, height, photon!.SamplingFilter.Lanczos3);\n\n\t\t\ttry {\n\t\t\t\tconst candidates: EncodedCandidate[] = [encodeCandidate(resized.get_bytes(), \"image/png\")];\n\t\t\t\tfor (const quality of jpegQualities) {\n\t\t\t\t\tcandidates.push(encodeCandidate(resized.get_bytes_jpeg(quality), \"image/jpeg\"));\n\t\t\t\t}\n\t\t\t\treturn candidates;\n\t\t\t} finally {\n\t\t\t\tresized.free();\n\t\t\t}\n\t\t}\n\n\t\tconst qualitySteps = Array.from(new Set([opts.jpegQuality, 85, 70, 55, 40]));\n\t\tlet currentWidth = targetWidth;\n\t\tlet currentHeight = targetHeight;\n\n\t\twhile (true) {\n\t\t\tconst candidates = tryEncodings(currentWidth, currentHeight, qualitySteps);\n\t\t\tfor (const candidate of candidates) {\n\t\t\t\tif (candidate.encodedSize < opts.maxBytes) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tdata: candidate.data,\n\t\t\t\t\t\tmimeType: candidate.mimeType,\n\t\t\t\t\t\toriginalWidth,\n\t\t\t\t\t\toriginalHeight,\n\t\t\t\t\t\twidth: currentWidth,\n\t\t\t\t\t\theight: currentHeight,\n\t\t\t\t\t\twasResized: true,\n\t\t\t\t\t\t...(fingerprint ? { fingerprint } : {}),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (currentWidth === 1 && currentHeight === 1) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tconst nextWidth = currentWidth === 1 ? 1 : Math.max(1, Math.floor(currentWidth * 0.75));\n\t\t\tconst nextHeight = currentHeight === 1 ? 1 : Math.max(1, Math.floor(currentHeight * 0.75));\n\t\t\tif (nextWidth === currentWidth && nextHeight === currentHeight) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tcurrentWidth = nextWidth;\n\t\t\tcurrentHeight = nextHeight;\n\t\t}\n\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t} finally {\n\t\tif (image) {\n\t\t\timage.free();\n\t\t}\n\t}\n}\n"]}

package/docs/computer-use.md

@@ -0,0 +1,362 @@
+# Image-only computer use
+
+The image-only implementation shipped on `lunr-dev` as `0.2.21-dev.12.1`
+and received user testing. Automated validation passed on the dev integration.
+The stable implementation builds on that work without dev-channel naming or update
+changes, and repairs failure reporting and unchanged-image detection. Smooth cursor animation is not implemented. CuaDriver 0.28.1 has production approval for lunR 0.2.26; broader hardware acceptance remains unverified.
+
+## Setup and permissions
+
+Run `/computer setup` in the local lunR terminal. Setup verifies and installs the
+bundled runtime without downloading code, capturing the screen, or operating an
+application. It is unavailable in headless and gateway sessions.
+
+Windows needs an active, unlocked desktop. On Apple Silicon macOS, setup prints
+the exact installed `CuaDriver.app` path. Add that app to Accessibility and
+Screen & System Audio Recording in System Settings > Privacy & Security, then
+restart lunR. Older macOS versions call the second grant Screen Recording.
+Only the user can grant these permissions. Setup leaves an existing
+`/Applications/CuaDriver.app` alone.
+
+Computer use and Allow foreground control default to on. Windows x64/arm64 and
+Apple Silicon expose `computer_load`; detailed tools load on demand. Linux and
+Intel macOS have no native discovery tool. All computer tools except release
+require an image-capable model. There is no text-only accessibility fallback.
+Gateway sessions operate the gateway host, not the chat client's device.
+
+`computer_end` releases without approval. Read-only allows relevant observation
+and release, but blocks mutation. Yolo and Auto permit input. Auto allows
+requested, implied, or necessary GUI work without lunR per-call prompts. In
+Yolo, ask before introducing GUI work into an otherwise non-GUI task. These
+intent rules are agent guidance, not a natural-language authorization classifier.
+
+Prefer background window input. Foreground window input requires a verified
+background failure and a fresh image. Desktop input requires `desktop=true` and
+`foreground=true`. Disabling foreground control blocks desktop input, foreground
+window input, launch, and window management. An application can still change its
+own focus after background input.
+
+Native tools are excluded from children and refuse child execution. Children
+with shell access are not OS-sandboxed. No raw driver administration, update,
+recording, or permission tool is exposed.
+
+## Recovery contract
+
+A failed tool result keeps its text, any recovery image, and structured outcome details together. The error flag does not mean the input had no effect. Results distinguish validation/preflight without dispatch from uncertain native delivery, and include the workflow state (`ready`, `stopped`, or `cleanup_unconfirmed`). A healthy workflow remains loaded after recoverable mistakes such as an expired or mismatched token or invalid coordinates. Use `computer_observe` directly for a new image and token; `computer_load` is not a runtime restart. Never replay an uncertain click or launch merely because the call reported an error. If the native response is settled and the target remains safe to capture, one recovery image may accompany the failure. When capture fails, do not infer the action failed or substitute another target automatically. An unavailable window calls for explicit app/window discovery or a desktop observation. Broken transport, cancellation, loss of ownership, and unconfirmed cleanup stop the workflow.
+
+Launch takes `{name}` only, without an observation token. It may activate an existing app, start a new one, or return without a usable window. If launch status or window discovery is uncertain, try `computer_apps` with the app name or a valid positive returned PID before deciding whether to launch again. Observe an exact discovered PID and window ID before input. Launch has a separate longer native timeout budget inside the 90-second workflow limit; a timeout does not prove that the app did not start.
+
+## Observe, act, inspect
+
+1. Use `computer_apps` for app identities or windows for a PID. For a known app
+   or title, pass `query` to avoid paging through unrelated identities. It matches
+   a case-insensitive literal substring in `name`, `app_name`, or `title` before
+   pagination and display truncation in the requested collection: ordinary app
+   queries match apps, while a PID query matches that PID's windows. It does
+   not search every app's windows by title. `total` counts matching rows.
+   Omit `query` to browse all rows. With `include_windows:true`, a named app
+   query without `pid` also looks up windows for up to five matching running
+   PIDs, with at most 50 window rows. More than five matching PIDs asks for a
+   narrower query or an explicit PID, rather than choosing one arbitrarily.
+   Per-PID lookup failures and truncation are reported; an ordinary query
+   stays app-only and cheap. Results allowlist at most 50 rows and truncate titles to
+   240 characters. Pass `next_offset` as `offset` with the same PID and query to
+   retrieve more matches. Lists refresh per call, so changing native order can
+   shift page boundaries. PID zero
+   identifies an installed app that is not running. Window `bounds` are native
+   geometry, not screenshot coordinates.
+2. Use `computer_observe` with an exact `pid` and `window_id`, or `desktop=true`.
+   The result contains one image and a short coordinate/token record.
+3. Choose one action from that image. Pass its `observation` token and coordinates
+   in the returned image. The workflow applies the mapping; do not scale twice.
+4. Inspect the post-action image before continuing. The tool executes one action
+   and captures the same target once, including when a settled native refusal
+   permits safe recovery capture. It never polls or retries input internally.
+5. Call `computer_end` when finished.
+
+The token lasts 30 seconds, belongs to one exact target, and permits one action.
+Copy it exactly, without abbreviating or reconstructing it. A failed action
+consumes the active token. Capture again before any next action, including window
+focus. Read-only app discovery preserves an existing token but does not renew
+its original 30-second expiry. `background_unavailable` makes foreground input the next candidate after
+a fresh capture, if permitted. Do not substitute another background shortcut.
+Token rejection does not prove foreground typing failed.
+
+Every new observation invalidates the previous token before capture. Failed,
+cancelled, or malformed captures issue no token. Old tokens cannot be replayed,
+including after a successful action returns a new image.
+
+Supported input is single, double, and right click with modifiers, a complete
+press-drag-release gesture, scrolling at image coordinates, Unicode text, and
+keys or modifier shortcuts. Window text/keys can use image coordinates or the
+observed focused field. Desktop text/keys use the observed focused field only;
+change focus with a separate grounded click.
+
+`computer_window` supports `frame` in native window-bounds units and `focus` on
+an exact observed window. Minimize/restore uses a grounded image click on a
+visible control. The pinned driver has no portable minimize/restore RPC.
+`computer_launch` returns bounded app metadata, not an inferred input target;
+capture an exact window before acting.
+
+A successful transport or a changed image does not prove the intended application
+effect. Results preserve partial/unverifiable outcomes and bounded refusal codes.
+Pre-dispatch failures report `input:"not_dispatched"` and state that this call
+sent no input. They do not establish whether earlier calls had an effect. Token
+codes distinguish a missing active observation, a mismatched token, a wrong
+target, and expiry only while that state is available. A closed workflow cannot
+identify whether an old token was consumed or unknown. Recoverable token
+rejections keep a healthy workflow open and report `input:"not_dispatched"`;
+they require a fresh image rather than a new load. Once dispatch begins,
+transport failure reports `input:"uncertain"` and possible effects. Neither path
+retries input. Unparseable driver text is omitted rather than forwarded as a
+message; structured refusal fields remain bounded and allowlisted.
+When input returns but its post-image fails, the tool reports possible effects
+and either allows an explicit fresh observation when safe or stops if runtime
+safety cannot be confirmed. Capture again before deciding; never repeat input blindly.
+After an unchanged post-image, the same action against identical captured pixels
+is refused. Pixel identity hashes decoded full-image RGBA values and dimensions,
+not PNG encoding bytes, before cropping or resizing. Full captures reuse the
+image processor's decode, and crops reuse the existing full-image decode. Click signatures normalize omitted left-button/single-click/empty
+modifier defaults and modifier order. Three consecutive unchanged full observations
+stop polling in that workflow. Crops are explicit requests, not an automatic retry loop.
+
+Partial typing retains validated `requested_chars`, `delivered_chars`, `retryable`,
+and `retry_from_character` when supplied by the driver. Counts must be safe integers
+within the submitted text's Unicode code-point length, capped at 20000; the retry
+index must equal the delivered count. The index is zero-based in Unicode code
+points, not UTF-16 units. Verify the field in a fresh image before considering a
+remaining suffix. `retryable` is driver advice, not permission or proof that
+repeating input is safe. The workflow never retries typing automatically.
+
+On supported Windows x64/arm64 hosts, `computer_hover` takes exactly
+`{desktop:true,foreground:true,observation,x,y}` from a fresh primary-desktop
+image. It moves the real pointer without pressing a button, waits about 700 ms
+with cancellation support, then returns one full-desktop post-image. A tooltip
+outside a selected crop may appear in that full image. Only the visible topmost
+application receives the hover, which can itself trigger application behavior;
+this is not background window hover or an all-monitor capture. Foreground
+control must be allowed and read-only mode blocks hover. The pinned Windows
+window-scoped movement is a synthetic overlay, so lunR does not offer window
+hover. macOS and unsupported platforms do not register this tool. Desktop
+origin/DPI mapping and tooltip behavior still need an authorized live test.
+
+## Image contract and cost limits
+
+Window capture requests `include_accessibility_tree:false` and
+`include_screenshot:true`. Neither native accessibility trees nor duplicate raw
+JSON reach the model. The macOS driver still reads minimal native accessibility
+facts for window identity and background-input safety. Windows window discovery
+can use UIA as a fallback. Image-only describes application observation sent to
+the model, not the removal of every native accessibility API call.
+
+Window capture requests a 2560-pixel maximum. The runtime can impose a lower
+configured ceiling, so this is not a promised capture resolution. The workflow
+checks actual PNG dimensions against native screenshot metadata and rejects
+invalid frames. Primary-desktop capture is tree-free and uses the native PNG.
+Desktop coordinates map back to that PNG once; macOS `scale_factor` is not an
+additional multiplier.
+
+Returned images have a maximum 1280-pixel edge, one million pixels, and 1.5 MiB
+of base64 payload. The existing image processor bounds dimensions and encoding
+size. The workflow refuses images it cannot decode or map. Source PNGs also have
+allocation limits. These are engineering bounds, not measured token savings.
+
+For small text or controls, request `crop:{x,y,width,height}` with the latest
+observation token. The rectangle uses that returned image's pixels. The workflow
+captures fresh pixels, maps the rectangle into the full capture, and sends only
+the crop. Its record gives the source dimensions, crop offset, and separate x/y
+ratios. Changed source dimensions or reported window bounds reject the crop;
+request a full image again. Cropping cannot recover detail absent from the native
+capture. Post-action captures return the full target so dialogs outside a crop
+remain visible.
+
+Saved sessions retain the returned screenshots. Provider-facing screenshot
+history also accumulates until normal compaction. This change does not prune
+user images, rewrite saved sessions, or implement a generic rolling history
+filter. A targeted `context` hook could remove old computer screenshots while
+leaving sessions intact, but a rolling cutoff changes an earlier prompt prefix
+and can invalidate cached input. That tradeoff needs approved provider measurements
+before adopting a retention policy. Image-only is not automatically cheaper than
+text. Current cost controls bound each new payload, remove tree/JSON duplication,
+and combine one action with its post-image.
+
+## Cursor status
+
+Cursor animation remains a separate native-runtime decision. The inherited
+runtime launch still uses `--no-overlay`. Upstream Windows drag animation uses a
+timer separate from actual input, and desktop pointer movement can teleport.
+This branch does not claim smooth actual-cursor motion or synchronized drag
+feedback. Any eventual animation must stay local, preserve full gestures and
+cancellation, and send zero intermediate frames to the model.
+
+## Ownership and cancellation
+
+An OS-account lease spans observations and actions, independent of settings
+profiles. Competing workflows receive busy rather than queueing. Calls within a
+workflow serialize. One cross-process lock covers creation, atomic replacement,
+and deletion of the owner record. A separate lock protects runtime installation.
+A live owner is not displaced because its heartbeat is late.
+
+After MCP initialization and before any driver tool dispatch, the adapter records
+the transport PID and, on macOS, daemon PID. Missing identities or failed lease
+updates refuse dispatch. Recovery requires both owner and recorded runtimes to
+have exited. PID reuse and malformed owner records fail closed. A crash during
+initialization can leave an unrecorded idle runtime that received no input.
+
+Release, cancellation, agent end, settings changes, and session shutdown close
+the owned runtime before releasing the lease. Queued work cannot survive
+cancellation. Unconfirmed shutdown retains ownership. Cancellation cannot retract
+already delivered input, and forced termination does not prove held input was
+released. Driver-internal helper lifetime and held-input cancellation still need
+native acceptance.
+
+Gateway cron creates fresh permission contexts with the configured default mode,
+without gateway approvals or its approval handler. Read-only blocks input, and
+missing approval blocks operations that still require confirmation.
+Session shutdown precedes disposal, even after partial extension binding failure.
+TUI cron continues to use its live permission context.
+
+## Runtime and distribution
+
+The development pin is [CuaDriver 0.28.1](https://github.com/trycua/cua/releases/tag/cua-driver-rs-v0.28.1),
+source `d8028a7943087ee258dc1b4d19dc12a7cd27669c`. Archive identities and approval
+are in `scripts/computer-use-release.json`; `release.generated.ts` derives from
+it. The upstream MIT license is under `native/computer-use`. No runtime pin or
+native binary changed in the image-only workflow work.
+
+The runtime resolves the host's optional payload package or matching archive
+beside a standalone executable. It verifies the archive, extracts a fresh
+reference tree, and checks cached files/helpers against it. Redirected paths and
+escaping symlinks are refused. Installers do not overwrite an existing runtime.
+After confirming all owned processes stopped, an inactive cache can be removed
+for reinstallation. Runtime code is never downloaded at first use.
+
+Windows uses system `tar.exe` and an isolated `mcp --direct --embedded
+--no-overlay` process. A hidden system PowerShell metadata probe refuses session
+zero, disconnected sessions, and inaccessible/non-Default input desktops. It
+never switches desktops. Both platforms isolate profiles, strip inherited
+`CUA_*`, set standard permission mode, and disable telemetry/update checks.
+
+macOS preserves the unchanged signed app at its stable lunR-owned path, verifies
+its signature with `codesign --verify --deep --strict`, and launches that exact
+path through `open -n -g -W -a`. A private HOME, socket, stdin FIFO, and
+`--parent-liveness-stdio` isolate daemon state and lifetime. Shutdown uses the
+private PID-bound endpoint and waits for the app to exit. No re-signing occurs.
+
+Release staging creates exact-version host-specific optional payload packages.
+They contain unchanged archives and no install scripts. Workspace manifests keep
+unpublished payload dependencies out. Standalone asset copying selects one
+opaque archive. The v0.2.26 release records production approval for the pinned
+runtime; the publish workflow checks that approval before building. Dev-channel
+update/publication changes were not ported here.
+
+## Verification and remaining acceptance
+
+The recovery reporting, bounded window enrichment, and Windows desktop-hover
+contract have offline fake-driver coverage only. The original taskbar-click
+failure phase is still unproven. No new real-desktop, native-runtime, macOS,
+provider-driven, or release qualification is claimed by this change.
+
+
+After integrating v0.2.24 master, all five offline package builds and the Node
+bundle pass. With the PR #118 baseline repairs integrated, validation passes
+391 focused tests across 31 files and eight archive/package tests. Installation and archive staging tests now create inert
+fixtures, so source tests need no native release payload. The Windows installation
+test exercises real extraction, locking, cache reuse, and helper-tamper rejection
+without executing either fixture file. Fake-driver tests cover exact-token
+rejection with zero action dispatch, background refusal followed by fresh-capture
+foreground input, and uncertain or partial post-dispatch outcomes. Real PNG
+fixtures reproduce encoding-independent pixel identity and preserve crop mapping.
+First-paint and first-request checks pass for both browser settings; removing only
+`computer_load` reproduces master's unchanged tool hashes.
+
+All three pinned upstream archives match their committed byte counts and SHA-256
+hashes. Seven public-name tarballs staged with those unchanged real payloads pass
+relocated installation, first requests, all supported OS/CPU selections, omitted
+optional-payload recovery, and standalone installer `npm ci --ignore-scripts`.
+Staging validates rewritten JavaScript and declaration imports and exact payload
+versions in both locks. These checks ran on Windows x64 without launching the
+native driver; OS/CPU selection tests do not establish operation on other hardware.
+Archive integrity and packaging are verified, but native signing, permission and
+input acceptance remain separate. The owner approved production publication of
+CuaDriver 0.28.1 with lunR 0.2.26; this does not establish operation on other hardware.
+
+The PR also incorporates the separately tracked baseline repairs from PR #118.
+That work fixes AI catalog subpath resolution in extension loading and updates
+fixtures for current gateway, shutdown, provider and subscription contracts.
+Its 152 focused tests across ten files pass. The complete Ubuntu log before
+those repairs records 101 coding-agent failures across 27 suites and 11 AI
+failures, more than the subset exposed by check annotations. Agent passes
+181/181 in that run. Clean full-suite CI still requires broader baseline work;
+local Windows-only diagnostics are not evidence of Ubuntu failures.
+The automated checks did not operate a desktop or launch CuaDriver.
+
+A separately authorized Windows x64 smoke test used this branch's compiled
+computer tools with the real pinned runtime. It launched a new blank Notepad
+window, captured that exact window, and typed a fixed 39-character phrase using
+background delivery. The post-action screenshot showed the complete expected
+text and character count. The driver's outcome remained `unverifiable`; the
+image established the application effect. `computer_end` confirmed shutdown and
+released the desktop lease. No document was saved or installed CLI changed.
+This verifies basic launch, window capture and background text input only.
+A later Windows x64 test on an owned scratch Notepad window found that background
+Ctrl+A failed with `tool_invocation_failed`; a fresh image showed no selection.
+A fresh-token `foreground=true` retry initially returned the same XAML/UIA error.
+Pinned upstream source at `d8028a7943087ee258dc1b4d19dc12a7cd27669c`
+routes `hotkey` for a XAML window through UIA before checking `delivery_mode`.
+This native refusal was not a `background_unavailable` code. The unchanged
+screenshot established that the background shortcut had not selected the text.
+
+The Windows workflow now sends foreground modifier shortcuts without x/y through
+that pin's `press_key` with `modifiers`, whose foreground branch uses verified
+window focus and SendInput. Background shortcuts, keys with image coordinates,
+and non-Windows dispatch remain unchanged. On a subsequent parent-run test,
+foreground Ctrl+A selected all 39 characters in the same owned Notepad scratch;
+its post-action image showed the selection. Foreground Ctrl+N then opened a
+blank unsaved tab in that window, leaving the earlier scratch tab intact.
+
+The parent next cancelled a 2048-character `computer_text` call 86 ms after the
+real SDK call began, while it was still pending. The result reported
+`input_dispatch_failed`, `input:uncertain` and `cleanup:confirmed`. The native
+runtime exited and its desktop lease was absent before a fresh workflow captured
+the same owned window. That image showed exactly six characters in the new tab.
+This verifies partial text input followed by in-flight cancellation, cleanup and
+reacquisition, not a pre-dispatch cancellation or complete text delivery.
+`computer_end` shut down the new runtime and released its lease. Both tabs
+remained unsaved; other user documents were untouched. No global CLI changed.
+The complete-gesture tool API did not exercise held modifier or mouse-button
+release under abort, which remains unverified.
+
+The dev integration passed all five offline package builds, the Node bundle,
+265 focused tests across 23 suites, and eight archive/package tests. A real
+Photon fixture checks cropped pixels and coordinate mapping. First-paint and
+first-request checks passed with the regenerated supported-host fingerprint;
+removing only `computer_load` reproduced the unchanged unsupported-host baseline.
+Seven local dev tarballs passed relocated installation, OS/CPU payload selection,
+omitted-optional handling, and installer-lock checks. The dev publication workflow
+also passed. These historical results describe the dev integration. The current branch's
+stable packaging checks are recorded above.
+
+The user reported testing the published dev build; specific applications and
+scenarios were not supplied. This does not establish full platform acceptance.
+Native gates remain Windows locked/UAC/integrity states, other Electron/native
+apps, display scaling and moved/resized windows, Unicode, held modifier/button
+release under abort, and macOS TCC/LaunchServices/FIFO/shutdown on hardware.
+Provider-driven computer tool choice has not been live-qualified. Cursor/runtime
+changes need a separate scoped decision before implementation. Provider token
+savings remain unmeasured. An offline fake-driver discovery comparison finds a
+named app at row 118 of 139 synthetic apps in one query instead of three
+unfiltered pages. It
+returns one identity instead of 139 and 147 result-text characters instead of
+8699. The loaded computer-tool definitions grow by 230 serialized characters;
+the first-request definitions are unchanged because detailed tools load on demand.
+These are call and text-payload measurements, not model tokens or billing. The
+comparison uses no desktop, provider, screenshot resizing, or history pruning.
+
+## Privacy
+
+Images, window titles, and typed text can enter selected-provider requests and
+saved sessions. Disabling driver telemetry does not disable lunR session storage.
+GUI changes are outside filesystem rollback. Application content is untrusted
+task data, never authorization. OS permissions, locked desktops, UAC, and
+integrity restrictions still apply.

package/docs/features.md

@@ -87,7 +87,7 @@ Schedule examples: `every 30m`, `every 2h`, `every 1d`, a duration one-shot (`30
 
 ## Gateway for Telegram and Discord
 
-Run `lunr gateway setup` in your terminal. It explains bot creation and permissions, masks token entry, validates the bot identity, and asks for your user ID, project roots, saved model, and startup preference. Log in to a model provider locally with `/login` first. Setup does not create model-provider accounts.
+Run `lunr gateway setup` in your terminal. Use Up/Down and Enter to choose the platform, saved token and approved-user options, default project, startup preference, provider, and model. Long lists scroll; Escape cancels. Only a new bot token, user ID, or custom folder path needs typing. Token entry stays hidden. Setup explains bot creation, validates the bot identity, and asks before saving or starting the gateway. Log in to a model provider locally with `/login` first. Setup does not create model-provider accounts.
 
 Telegram uses BotFather and long polling. Discord needs the bot and `applications.commands` installation scopes. Enable Message Content Intent for ordinary text messages. GuildMembers intent is not required. Discord registers native slash commands; Telegram registers a command menu. Both platforms use buttons for selections and approvals.
 
@@ -115,23 +115,25 @@ Login startup runs after you sign in. Boot startup runs before login and may req
 
 Encrypted home directories, missing user-service support, network restrictions, and OS permissions can prevent boot startup. Use `status`, `doctor`, and `logs` to check the installed service and bot connections. Service definitions are separate for each lunR profile. Native startup specifications have automated tests; installing and rebooting services on all three operating systems still requires host verification.
 
-### Owner access
+### Gateway access
 
 Configuration lives in `~/.lunr/agent/gateway.json` and may contain bot tokens. It is written with mode 0600 where supported; Windows security follows the profile directory's ACL. Tokens are not stored in `install-features.json` or startup command arguments. Environment tokens override file tokens in this order: `LUNR_<PLATFORM>_BOT_TOKEN`, then `<PLATFORM>_BOT_TOKEN`.
 
 If you skipped your user ID during setup, message the bot privately and approve its pairing code locally:
 
 ```bash
-lunr gateway pair approve telegram <code> --owner
-lunr gateway pair approve discord <code> --owner
+lunr gateway pair approve telegram <code>
+lunr gateway pair approve discord <code>
 lunr gateway pair list
 ```
 
-Owner access includes local projects and saved TUI conversation history. Ordinary pairing, group access, and Discord roles do not grant it. Project browsing, cross-project sessions, permission changes, and file downloads require an explicitly configured owner in a private DM. Removing owner access invalidates later owner actions and approvals.
+Approval grants full gateway access, including local projects, saved TUI conversations, permission changes, and file downloads. Existing paired users work immediately without pairing again or receiving a separate owner grant. User allowlists, approved chats, and Discord roles use the same access check for messages and commands. Only approve people, chats, and roles you trust with this computer. In shared chats, other members may see replies and downloaded files.
+
+Legacy `owners` entries and the `--owner` flag remain compatible, but do not grant a separate permission level. Unapproved users remain blocked. Removing every applicable access grant prevents later commands, approvals, and result delivery. Picker and approval buttons still belong to the user who requested them; session transfer and tool permission checks remain in effect.
 
 ### Projects and mobile controls
 
-Use `/project` to browse approved roots, open child folders, go back, select a folder, or create one. `/project <path>` opens the browser at an approved path. The gateway remembers the selected working directory for that conversation. Project instruction files, skills, tools, and trust checks use that directory rather than the daemon's launch directory.
+Approved users can send `/start` to check setup before the first task, `/model` to select an authenticated model before a task, and a normal message immediately when setup's default project remains approved. With multiple approved roots and no explicit default, choose `/project` first. Use `/project` to browse approved roots, open child folders, go back, select a folder, or create one. `/project <path>` opens the browser at an approved path. The gateway remembers the selected working directory for that conversation. Project instruction files, skills, tools, and trust checks use that directory rather than the daemon's launch directory.
 
 **The selected project is a working directory, not a shell sandbox.** Shell commands and tools can access other locations allowed by your OS account. The folder browser and `/download` check their own path boundaries, including symlinks.
 
@@ -145,7 +147,7 @@ Use `/project` to browse approved roots, open child folders, go back, select a f
 
 Upload images or documents in chat. Images reach the model as images; documents are saved under the project's `.lunr/uploads/` directory and passed to the model as paths. `/download <project-relative path>` sends a file back. Files are limited to 8 MB; common credential filenames are blocked from download. This filename check is not a content-based secret scanner. Only send files you intend to share with the chat platform.
 
-Extension notices and background results reach the originating conversation even after the foreground answer. Undelivered notices persist for retry. Tool approvals, pickers, and text questions do not become model prompts; they expire when the session changes. Terminal-only custom screens report that limitation rather than pretending they accepted a selection.
+Foreground replies, follow-up answers, errors, and extension notices enter a disk-backed outbox before sending. Successfully sent chunks are acknowledged in order; failed sends retry up to five times per destination without blocking other chats. A failed final preview edit falls back to a full reply. Permanently failed deliveries remain in `gateway-outbox.json` with `failed: true` and an error in gateway logs for diagnosis; they do not retry forever. A send can still reach the platform just before the process exits without recording its acknowledgement, so a restart can repeat that chunk. Existing outbox entries without the newer fields remain eligible for delivery. Session changes cancel stale interactive prompts and notices, but finished assistant results still reach their originating chat when authorized. Revoked access prevents delivery. Discord role-only authorization needs a fresh inbound role check after restart before it can authorize new sends; an old stored role assertion cannot authorize outbox replay. Tool approvals, pickers, and text questions do not become model prompts; they expire when the session changes. Terminal-only custom screens report that limitation rather than pretending they accepted a selection.
 
 ### Continue between desktop and phone
 

package/examples/extensions/custom-provider-anthropic/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pi-extension-custom-provider",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pi-extension-custom-provider",
-      "version": "0.2.24",
+      "version": "0.2.26",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.52.0"
       }

package/examples/extensions/custom-provider-anthropic/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-custom-provider-anthropic",
 	"private": true,
-	"version": "0.2.24",
+	"version": "0.2.26",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/examples/extensions/custom-provider-gitlab-duo/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-custom-provider-gitlab-duo",
 	"private": true,
-	"version": "0.2.24",
+	"version": "0.2.26",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/examples/extensions/gondolin/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "pi-extension-gondolin",
-	"version": "0.2.24",
+	"version": "0.2.26",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "pi-extension-gondolin",
-			"version": "0.2.24",
+			"version": "0.2.26",
 			"dependencies": {
 				"@earendil-works/gondolin": "0.12.0"
 			}

package/examples/extensions/gondolin/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-gondolin",
 	"private": true,
-	"version": "0.2.24",
+	"version": "0.2.26",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",