@khorsheed/dsh-reader 0.2.1 → 0.3.0

package/lib/typert.remote-client.js

@@ -103,6 +103,17 @@ const _khorsheed_dsh_reader_reader_fetchEntryBody_result$schema = () => (_khorsh
   'truncated': z.boolean().optional(),
   'error': z.string().optional(),
 }))
+let _khorsheed_dsh_reader_reader_fetchImage_parameter_0$schema$value
+const _khorsheed_dsh_reader_reader_fetchImage_parameter_0$schema = () => (_khorsheed_dsh_reader_reader_fetchImage_parameter_0$schema$value ??= z.object({
+  'url': z.string(),
+}))
+let _khorsheed_dsh_reader_reader_fetchImage_result$schema$value
+const _khorsheed_dsh_reader_reader_fetchImage_result$schema = () => (_khorsheed_dsh_reader_reader_fetchImage_result$schema$value ??= z.object({
+  'url': z.string().readonly(),
+  'mime': z.string().readonly().optional(),
+  'base64': z.string().readonly().optional(),
+  'error': z.string().readonly().optional(),
+}))
 let _khorsheed_dsh_reader_reader_getBodies_parameter_0$schema$value
 const _khorsheed_dsh_reader_reader_getBodies_parameter_0$schema = () => (_khorsheed_dsh_reader_reader_getBodies_parameter_0$schema$value ??= z.object({
   'ids': z.array(z.string()),
@@ -396,7 +407,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_addSource_result$schema,
         schema: _khorsheed_dsh_reader_reader_addSource_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":71,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":72,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/capabilities',
@@ -412,7 +423,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_capabilities_result$schema,
         schema: _khorsheed_dsh_reader_reader_capabilities_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":59,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":60,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/clearRecent',
@@ -428,7 +439,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_clearRecent_result$schema,
         schema: _khorsheed_dsh_reader_reader_clearRecent_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":274,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":285,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/clearTranslations',
@@ -444,7 +455,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_clearTranslations_result$schema,
         schema: _khorsheed_dsh_reader_reader_clearTranslations_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":198,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":209,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/createTag',
@@ -471,7 +482,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_createTag_result$schema,
         schema: _khorsheed_dsh_reader_reader_createTag_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":210,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":221,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/deleteTag',
@@ -498,7 +509,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_deleteTag_result$schema,
         schema: _khorsheed_dsh_reader_reader_deleteTag_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":222,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":233,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/entryFetchStates',
@@ -525,7 +536,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_entryFetchStates_result$schema,
         schema: _khorsheed_dsh_reader_reader_entryFetchStates_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":145,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":156,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/entryTags',
@@ -552,7 +563,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_entryTags_result$schema,
         schema: _khorsheed_dsh_reader_reader_entryTags_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":234,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":245,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/fetchEntryBody',
@@ -579,7 +590,34 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_fetchEntryBody_result$schema,
         schema: _khorsheed_dsh_reader_reader_fetchEntryBody_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":115,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":116,"column":3},
+    },
+    {
+      id: '@khorsheed/dsh-reader#reader/fetchImage',
+      service: 'readerRemote',
+      namespace: 'reader',
+      method: 'fetchImage',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'request',
+          wire: 'request',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@khorsheed/dsh-reader#reader/fetchImage:request',
+            create: _khorsheed_dsh_reader_reader_fetchImage_parameter_0$schema,
+            schema: _khorsheed_dsh_reader_reader_fetchImage_parameter_0$schema(),
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@khorsheed/dsh-reader/types#ReaderImageResult',
+        create: _khorsheed_dsh_reader_reader_fetchImage_result$schema,
+        schema: _khorsheed_dsh_reader_reader_fetchImage_result$schema(),
+      },
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":133,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getBodies',
@@ -606,7 +644,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getBodies_result$schema,
         schema: _khorsheed_dsh_reader_reader_getBodies_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":101,"column":9},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":102,"column":9},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getCachePolicy',
@@ -622,7 +660,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getCachePolicy_result$schema,
         schema: _khorsheed_dsh_reader_reader_getCachePolicy_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":240,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":251,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getEntryBody',
@@ -649,7 +687,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getEntryBody_result$schema,
         schema: _khorsheed_dsh_reader_reader_getEntryBody_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":109,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":110,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getEntryTranslation',
@@ -676,7 +714,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getEntryTranslation_result$schema,
         schema: _khorsheed_dsh_reader_reader_getEntryTranslation_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":168,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":179,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getRawBody',
@@ -703,7 +741,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getRawBody_result$schema,
         schema: _khorsheed_dsh_reader_reader_getRawBody_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":151,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":162,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getSentenceTranslations',
@@ -730,7 +768,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getSentenceTranslations_result$schema,
         schema: _khorsheed_dsh_reader_reader_getSentenceTranslations_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":174,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":185,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/getStorageStats',
@@ -746,7 +784,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_getStorageStats_result$schema,
         schema: _khorsheed_dsh_reader_reader_getStorageStats_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":192,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":203,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/listBackfillCandidates',
@@ -773,7 +811,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_listBackfillCandidates_result$schema,
         schema: _khorsheed_dsh_reader_reader_listBackfillCandidates_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":157,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":168,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/listRecent',
@@ -789,7 +827,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_listRecent_result$schema,
         schema: _khorsheed_dsh_reader_reader_listRecent_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":268,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":279,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/listSources',
@@ -805,7 +843,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_listSources_result$schema,
         schema: _khorsheed_dsh_reader_reader_listSources_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":65,"column":9},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":66,"column":9},
     },
     {
       id: '@khorsheed/dsh-reader#reader/listTags',
@@ -821,7 +859,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_listTags_result$schema,
         schema: _khorsheed_dsh_reader_reader_listTags_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":204,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":215,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/pruneTags',
@@ -837,7 +875,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_pruneTags_result$schema,
         schema: _khorsheed_dsh_reader_reader_pruneTags_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":251,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":262,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/quoteToSideChat',
@@ -864,7 +902,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_quoteToSideChat_result$schema,
         schema: _khorsheed_dsh_reader_reader_quoteToSideChat_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":280,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":291,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/recordRead',
@@ -891,7 +929,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_recordRead_result$schema,
         schema: _khorsheed_dsh_reader_reader_recordRead_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":257,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":268,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/refresh',
@@ -918,7 +956,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_refresh_result$schema,
         schema: _khorsheed_dsh_reader_reader_refresh_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":95,"column":9},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":96,"column":9},
     },
     {
       id: '@khorsheed/dsh-reader#reader/rememberSentences',
@@ -945,7 +983,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_rememberSentences_result$schema,
         schema: _khorsheed_dsh_reader_reader_rememberSentences_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":180,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":191,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/removeSource',
@@ -972,7 +1010,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_removeSource_result$schema,
         schema: _khorsheed_dsh_reader_reader_removeSource_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":89,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":90,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/renameTag',
@@ -999,7 +1037,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_renameTag_result$schema,
         schema: _khorsheed_dsh_reader_reader_renameTag_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":216,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":227,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/setCachePolicy',
@@ -1026,7 +1064,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_setCachePolicy_result$schema,
         schema: _khorsheed_dsh_reader_reader_setCachePolicy_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":245,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":256,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/storeEntryBody',
@@ -1053,7 +1091,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_storeEntryBody_result$schema,
         schema: _khorsheed_dsh_reader_reader_storeEntryBody_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":128,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":139,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/tagEntry',
@@ -1080,7 +1118,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_tagEntry_result$schema,
         schema: _khorsheed_dsh_reader_reader_tagEntry_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":228,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":239,"column":3},
     },
     {
       id: '@khorsheed/dsh-reader#reader/updateSource',
@@ -1107,7 +1145,7 @@ export const TYPERT_REMOTE = {
         create: _khorsheed_dsh_reader_reader_updateSource_result$schema,
         schema: _khorsheed_dsh_reader_reader_updateSource_result$schema(),
       },
-      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":77,"column":3},
+      sourceLocation: {"file":"packages/dsh-reader/src/remote.ts","line":78,"column":3},
     },
   ],
 }

package/lib/types/client/ReaderPane.js

@@ -626,6 +626,8 @@ export function ReaderPane(props) {
     const [tipDismissed, setTipDismissed] = useState(false);
     /** The rendered article, so the segmentation can be applied to it. */
     const articleRef = useRef(null);
+    /** Images already rescued through the host, original URL → data URI (this mount's). */
+    const rescuedImagesRef = useRef(new Map());
     /** The detail view's scroller, which is where a reading position lives. */
     const detailRef = useRef(null);
     /** The live segmentation, or null while the article is untouched. */
@@ -1550,6 +1552,46 @@ export function ReaderPane(props) {
             return;
         toggleSegment(built, segment, translateClasses);
     }, [translateClasses, translatePhase]);
+    /**
+     * The CORP rescue. The extractor already emits absolute URLs with
+     * `referrerpolicy="no-referrer"`, which covers referer-gated CDNs — but a
+     * response headed `Cross-Origin-Resource-Policy: same-origin` (claude.dev's
+     * `/media/*` figures, measured 2026-09-29) is withheld from this page no
+     * matter what the tag asks for: the request answers 200 and the browser
+     * still refuses to hand the pixels over, leaving the broken-image icon over
+     * the alt text. A no-cors browser fetch cannot read those bytes either; the
+     * host process can, so the failed image is re-pointed at what the host
+     * fetched. Only images that ALREADY failed come here — a healthy image never
+     * pays the proxy — and each `<img>` tries once: the marker doubles as the
+     * loop guard should the data URI itself fail.
+     */
+    const onArticleImageError = useCallback((event) => {
+        const target = event.target;
+        if (!(target instanceof HTMLImageElement))
+            return;
+        if (target.dataset['readerRescued'] !== undefined)
+            return;
+        const url = target.getAttribute('src') ?? '';
+        // Only a remote URL can be rescued; a data: failure is a broken payload.
+        if (!/^https?:\/\//i.test(url))
+            return;
+        target.dataset['readerRescued'] = '1';
+        const known = rescuedImagesRef.current.get(url);
+        if (known !== undefined) {
+            target.src = known;
+            return;
+        }
+        void props.fetchImage(url).then(result => {
+            if (!result.ok)
+                return;
+            const { mime, base64 } = result.value;
+            if (mime === undefined || base64 === undefined)
+                return;
+            const dataUri = `data:${mime};base64,${base64}`;
+            rescuedImagesRef.current.set(url, dataUri);
+            target.src = dataUri;
+        }, () => undefined);
+    }, [props]);
     /* ---------------------------------------------------- the wall's own pass */
     // The wall has no article to segment: a card's unit is a FIELD (title,
     // summary), and the wall must translate lazily — a wall of forty cards is
@@ -2878,7 +2920,10 @@ export function ReaderPane(props) {
                             // `translate.ts` decorates THIS subtree in place when the reader
                             // asks for a translation (text nodes only), so the click handler
                             // is delegation: the sentences it creates are not React's.
-                            ref: articleRef, onClick: onArticleClick, onMouseOver: onArticleHover, onMouseOut: onArticleHover, className: `${css.article} ${isCjk(articleHtml) ? css.articleZh : css.articleEn}`, dangerouslySetInnerHTML: { __html: articleHtml } })), (articleTruncated || openEntry.truncated === true) && (_jsxs("p", { className: css.incomplete, children: [t('detail.incomplete'), " \u2014", ' ', _jsx("button", { type: "button", className: css.incompleteLink, onClick: () => { if (openEntry.link !== undefined)
+                            ref: articleRef, onClick: onArticleClick, onMouseOver: onArticleHover, onMouseOut: onArticleHover, 
+                            // Image error events do not bubble; the capture phase is the
+                            // only way one handler sees every failed figure in the body.
+                            onErrorCapture: onArticleImageError, className: `${css.article} ${isCjk(articleHtml) ? css.articleZh : css.articleEn}`, dangerouslySetInnerHTML: { __html: articleHtml } })), (articleTruncated || openEntry.truncated === true) && (_jsxs("p", { className: css.incomplete, children: [t('detail.incomplete'), " \u2014", ' ', _jsx("button", { type: "button", className: css.incompleteLink, onClick: () => { if (openEntry.link !== undefined)
                                         props.openExternal(openEntry.link); }, children: t('detail.readOriginal') })] })), _jsxs("div", { className: css.tagEdit, children: [_jsx("span", { className: css.tagEditLabel, children: t('tag.title') }), tags.filter(tag => (entryTagIds[openEntry.id] ?? []).includes(tag.id)).map(tag => (_jsxs("span", { className: css.tagChip, children: [tag.name, _jsx("button", { type: "button", className: css.tagChipRemove, title: t('action.remove'), onClick: () => { void toggleTag(openEntry.id, tag.id, false); }, children: "\u00D7" })] }, tag.id))), tagInputOpen
                                     ? (_jsxs("div", { className: css.tagEditField, children: [_jsx("input", { autoFocus: true, className: css.tagInput, value: tagDraft, placeholder: t('tag.placeholder'), onChange: event => setTagDraft(event.target.value), 
                                                 // A suggestion's mousedown is suppressed, so this fires only

package/lib/types/client/contract.d.ts

@@ -10,7 +10,7 @@
 import type { SessionId } from '@deepseek-ai/dsh-session/types';
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
 import type { GlobalStandardProps, InjectFace, PropsLocale, PropsStore } from '@deepseek-ai/dsh-client-ui-slots';
-import type { ReaderAddFailure, ReaderAddOutcome, ReaderAddRefusal, ReaderAnnotationOutcome, ReaderBackfillCandidate, ReaderEntryBodyView, ReaderEntryFetchState, ReaderBody, ReaderCapabilities, ReaderEntryTranslationView, ReaderMutationOutcome, ReaderRefreshResult, ReaderRecentEntry, ReaderSentenceLearn, ReaderSourceSummary, ReaderStorageStats, ReaderTag } from '../types.ts';
+import type { ReaderAddFailure, ReaderAddOutcome, ReaderAddRefusal, ReaderAnnotationOutcome, ReaderBackfillCandidate, ReaderEntryBodyView, ReaderEntryFetchState, ReaderBody, ReaderCapabilities, ReaderEntryTranslationView, ReaderImageResult, ReaderMutationOutcome, ReaderRefreshResult, ReaderRecentEntry, ReaderSentenceLearn, ReaderSourceSummary, ReaderStorageStats, ReaderTag } from '../types.ts';
 import type { createReaderStore } from './store.ts';
 export type { RemoteResult };
 /** The result of extracting one article, as the detail view consumes it. */
@@ -143,6 +143,14 @@ export interface ReaderPaneInjected {
      * extracted title/excerpt ride along for the card upgrade.
      */
     fetchEntryBody: (entryId: string, url: string) => Promise<ReaderEntryBodyView & ReaderExtractedMeta>;
+    /**
+     * Fetch one image through the host, for an `<img>` the browser already
+     * failed on (CORP/hotlink protection — the bytes answer 200 to a direct
+     * fetch but are withheld from a cross-origin page). The pane re-points the
+     * image at a `data:` URI built from the answer; a host without the verb (or
+     * an origin that refuses the host too) leaves the broken image alone.
+     */
+    fetchImage: (url: string) => Promise<RemoteResult<ReaderImageResult>>;
     /** The tags on one entry. */
     entryTags: (entryId: string) => Promise<RemoteResult<{
         tags: ReaderTag[];

package/lib/types/client/index.js

@@ -145,6 +145,7 @@ export async function apply(ctx) {
         listBackfillCandidates: entries => remote.listBackfillCandidates({ entries }),
         getEntryBody: request => remote.getEntryBody(request),
         fetchEntryBody,
+        fetchImage: url => remote.fetchImage({ url }),
         getEntryTranslation: entryId => remote.getEntryTranslation({ entryId }),
         getSentenceTranslations: request => remote.getSentenceTranslations(request),
         rememberSentences: request => remote.rememberSentences(request),

package/lib/types/image-fetch.d.ts

@@ -0,0 +1,81 @@
+import type { LookupFunction } from 'node:net';
+/** The outcome of one image fetch: the bytes and their type, or the reason not. */
+export type ImageFetchOutcome = {
+    readonly ok: true;
+    readonly url: string;
+    readonly mime: string;
+    readonly base64: string;
+} | {
+    readonly ok: false;
+    readonly url: string;
+    readonly error: string;
+};
+/** One resolved host address (the `dns.lookup` all-mode shape). */
+export interface ImageResolvedAddress {
+    readonly address: string;
+    readonly family: number;
+}
+/** Injectable resolver seam — the POLICY half's DNS (defaults to the system resolver). */
+export type ImageHostResolver = (hostname: string) => Promise<readonly ImageResolvedAddress[]>;
+/** The transport half's address supply — node's own `lookup` callback contract. */
+export type ImageTransportLookup = LookupFunction;
+/**
+ * The two seams a test injects: `resolve` answers what the POLICY validates
+ * (a public address), `lookup` answers what the CONNECTION dials (the fixture
+ * server's loopback). In production both default to the system resolver and
+ * the lookup is the validated answer set — that identity IS the pin.
+ */
+export interface ImageFetchSeams {
+    readonly resolve?: ImageHostResolver;
+    readonly lookup?: ImageTransportLookup;
+}
+/** Numeric limits, overridable in tests. */
+export interface ImageFetchLimits {
+    readonly maxBytes?: number;
+    readonly timeoutMs?: number;
+    readonly maxRedirects?: number;
+}
+/** An article figure is a few hundred KB; 8 MiB leaves room for print-resolution PNGs. */
+export declare const IMAGE_FETCH_MAX_BYTES: number;
+/** One image fetch never hangs the rescue: the pane's picture stays broken instead. */
+export declare const IMAGE_FETCH_TIMEOUT_MS = 15000;
+/** Redirect hops per image, each re-validated end to end (the classic SSRF hop). */
+export declare const IMAGE_FETCH_MAX_REDIRECTS = 3;
+/**
+ * The byte budget of the in-memory rescue cache (wire size — base64 is what
+ * the map actually holds). A figure-heavy article is a few MB; the budget
+ * covers several of them, and the oldest entry leaves first.
+ */
+export declare const IMAGE_CACHE_BUDGET_BYTES: number;
+/**
+ * The rescue cache: a pane remount (the sidebar unmounts wholesale when
+ * another panel takes over) re-fails every CORP-blocked image, and this map is
+ * what keeps that a memory read instead of a dozen outbound requests. LRU by
+ * insertion refresh, bounded by bytes.
+ */
+export declare class ImageFetchCache {
+    private readonly budgetBytes;
+    private readonly entries;
+    private bytes;
+    constructor(budgetBytes?: number);
+    /** The cached bytes for one URL, refreshing its recency. */
+    get(url: string): {
+        mime: string;
+        base64: string;
+    } | undefined;
+    /** Cache one fetched image, evicting the oldest entries until it fits. */
+    set(url: string, mime: string, base64: string): void;
+}
+/**
+ * Fetch one image, policy-checked end to end.
+ *
+ * Errors are values: the pane's only answer to a failed rescue is leaving the
+ * broken image as it was, so the reason string is for logs, not for display.
+ *
+ * @param rawUrl - the image URL the pane failed on.
+ * @param seams - resolver/lookup overrides (tests only; production pins).
+ * @param limits - byte/timeout/redirect overrides (tests only).
+ * @returns the image bytes base64-encoded with their declared type, or why not.
+ */
+export declare function fetchImageBytes(rawUrl: string, seams?: ImageFetchSeams, limits?: ImageFetchLimits): Promise<ImageFetchOutcome>;
+//# sourceMappingURL=image-fetch.d.ts.map