@suzumiyaaoba/mdxr 0.15.0 → 0.16.0

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { Bv as fenceFilename, Dv as attrTrue, Fv as takeUsedIcons, Ha as shadcnModules, Hv as parseLineRange, Iv as DocContext, Jf as dependencyMatrixModel, Jv as isRecord, Kv as langForPath, M_ as parseDiff, Mh as parseSyntaxLines, Ov as numOf, Qg as calculate, Qv as urlScheme, Rv as parseProps, S_ as tableRecords, Uv as splitPathLines, Vv as fenceLang, Wv as SKIP_LANGS, Xf as diagramModel, Xv as own, Yf as queryPlanModel, Yv as nonEmpty, Zf as flameModel, Zv as safeHref, __ as isDataRecord, _v as textList, av as isStatus, b_ as readRecords, ch as PERFORMANCE_LABELS, dh as performanceDetails, fh as performanceResult, g_ as display, gm as PlanHeader, gv as numList, h_ as columnsOf, i_ as schemaRows, lh as PERFORMANCE_TARGET_SCHEMA, n_ as reportModel, nm as PLOT_NAMES, qf as bundleModel, qv as isComponent, r_ as comparisonModel, rm as plotModel, rv as STATUSES, sh as CLAIM_LABELS, t as builtinComponents, t_ as REPORT_SPECS, uh as RESEARCH_CLAIM_SCHEMA, v_ as numberValue, x_ as records, y_ as parseJson } from "./ui-CyLil0AF.mjs";
-import { a as loadUserModule, c as srcDir, i as importBundledCode, n as loadConfig, o as resolveModuleEntry, r as SHARED_PACKAGES, s as pkgRoot } from "./config-DSZfMOIO.mjs";
+import { $v as own, Av as attrTrue, C_ as readRecords, F_ as parseDiff, Fh as parseSyntaxLines, Gv as parseLineRange, Ha as shadcnModules, Jf as dependencyMatrixModel, Kv as splitPathLines, Qv as nonEmpty, Rv as takeUsedIcons, S_ as parseJson, T_ as tableRecords, Uv as fenceFilename, Vv as parseProps, Wv as fenceLang, Xf as diagramModel, Xv as isComponent, Yf as queryPlanModel, Yv as langForPath, Zf as flameModel, Zv as isRecord, a_ as reportModel, b_ as isDataRecord, bv as textList, cv as isStatus, dh as PERFORMANCE_LABELS, ey as safeHref, fh as PERFORMANCE_TARGET_SCHEMA, gm as PlanHeader, hh as performanceResult, i_ as REPORT_SPECS, jv as numOf, mh as performanceDetails, nm as PLOT_NAMES, o_ as comparisonModel, ov as STATUSES, ph as RESEARCH_CLAIM_SCHEMA, qf as bundleModel, qv as SKIP_LANGS, rm as plotModel, s_ as schemaRows, t as builtinComponents, t_ as calculate, ty as urlScheme, uh as CLAIM_LABELS, v_ as columnsOf, w_ as records, x_ as numberValue, y_ as display, yv as numList, zv as DocContext } from "./ui-CawgRB1q.mjs";
+import { a as loadUserModule, c as srcDir, i as importBundledCode, n as loadConfig, o as resolveModuleEntry, r as SHARED_PACKAGES, s as pkgRoot } from "./config-By0YyXJs.mjs";
 import module from "node:module";
 import fsp, { access, lstat, mkdir, open, readFile, readdir, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
 import path from "node:path";
@@ -46,7 +46,7 @@ import { compile as compile$1 } from "@mdx-js/mdx";
 import { renderToStaticMarkup, renderToString } from "react-dom/server";
 import rehypeKatex from "rehype-katex";
 //#region package.json
-var version = "0.15.0";
+var version = "0.16.0";
 //#endregion
 //#region src/agent-options.ts
 const validateAgentOptions = (agent, session, server) => {
@@ -3147,18 +3147,25 @@ const outputRenderers = {
 	])] },
 	Endpoints: { flow: endpoints },
 	Graph: { flow: graph },
+	GraphGroup: { flow: (node, ctx) => [...caption(attr(node, "label") ?? attr(node, "id")), ...ctx.children(node)] },
+	GraphView: { flow: (node, ctx) => [
+		...caption(attr(node, "label") ?? attr(node, "id")),
+		para([txt(`nodes: ${attr(node, "nodes") ?? ""}; edges: ${attr(node, "edges") ?? ""}`)]),
+		...ctx.children(node)
+	] },
 	Ins: { text: (n, ctx) => [
 		html("<ins>"),
 		...ctx.inline(n),
 		html("</ins>")
 	] },
+	InteractiveGraph: { flow: (node, ctx) => [...caption(attr(node, "title")), ...ctx.children(node)] },
 	Json: { flow: json },
 	Node: {
-		flow: (n) => [para([
+		flow: (n, ctx) => [para([
 			icode(attr(n, "id") ?? ""),
 			...nonEmpty(attr(n, "label")) ? [txt(` = ${attr(n, "label")}`)] : [],
 			...suffix([attr(n, "note"), attr(n, "status")])
-		])],
+		]), ...ctx.children(n)],
 		text: (n) => [icode(attr(n, "id") ?? "")]
 	},
 	Span: { flow: (n) => [para([icode(attr(n, "name") ?? ""), ...suffix([attr(n, "duration"), attr(n, "note")])])] },
@@ -5797,6 +5804,217 @@ const installInstructions = async (opts) => {
 	return await Promise.all(prepared.map(async (target) => await installTarget(target, opts.force === true)));
 };
 //#endregion
+//#region src/library-document.ts
+const ignoredNodeTypes = /* @__PURE__ */ new Set([
+	"definition",
+	"mdxFlowExpression",
+	"mdxjsEsm",
+	"mdxTextExpression",
+	"toml",
+	"yaml"
+]);
+const searchableMdxAttributes = /* @__PURE__ */ new Set([
+	"alt",
+	"aria-label",
+	"caption",
+	"description",
+	"heading",
+	"label",
+	"name",
+	"placeholder",
+	"summary",
+	"text",
+	"title",
+	"tooltip",
+	"value"
+]);
+const blockNodeTypes = /* @__PURE__ */ new Set([
+	"blockquote",
+	"code",
+	"heading",
+	"listItem",
+	"paragraph",
+	"tableCell",
+	"tableRow",
+	"thematicBreak"
+]);
+const mdxParser = unified().use(remarkParse).use(remarkMdx).use(remarkFrontmatter).use(remarkGfm);
+const markdownParser = unified().use(remarkParse).use(remarkFrontmatter).use(remarkGfm);
+const scalarText = (value) => {
+	if (typeof value === "string" || typeof value === "number") return String(value).trim();
+	if (typeof value === "boolean" || typeof value === "bigint") return String(value);
+	if (value instanceof Date && !Number.isNaN(value.valueOf())) return value.toISOString();
+	return "";
+};
+const rawNode = (node) => node;
+const appendLeafNodeText = (node, current, chunks) => {
+	if (node.type === "text" || node.type === "inlineCode" || node.type === "code") {
+		if (typeof current.value === "string") chunks.push(current.value);
+		return true;
+	}
+	if (node.type === "image" || node.type === "imageReference") {
+		if (typeof current.alt === "string") chunks.push(current.alt);
+		return true;
+	}
+	if (node.type === "break" || node.type === "thematicBreak") {
+		chunks.push("\n");
+		return true;
+	}
+	if (node.type === "html" && typeof current.value === "string") {
+		chunks.push(current.value.replaceAll(/<script\b[^>]*>[\s\S]*?<\/script\s*>/giu, " ").replaceAll(/<style\b[^>]*>[\s\S]*?<\/style\s*>/giu, " ").replaceAll(/<!--[\s\S]*?-->/gu, " ").replaceAll(/<[^>]*>/gu, " "));
+		return true;
+	}
+	return false;
+};
+const appendMdxAttributes = (current, chunks) => {
+	for (const rawAttribute of current.attributes ?? []) {
+		if (!isRecord(rawAttribute)) continue;
+		const { name, value } = rawAttribute;
+		if (typeof name === "string" && searchableMdxAttributes.has(name.toLowerCase()) && typeof value === "string") chunks.push(value);
+	}
+};
+const appendNodeText = (node, chunks) => {
+	if (ignoredNodeTypes.has(node.type)) return;
+	const current = rawNode(node);
+	if (appendLeafNodeText(node, current, chunks)) return;
+	if (node.type === "mdxJsxFlowElement" || node.type === "mdxJsxTextElement") appendMdxAttributes(current, chunks);
+	const isBlock = blockNodeTypes.has(node.type);
+	if (isBlock) chunks.push("\n");
+	for (const child of current.children ?? []) appendNodeText(child, chunks);
+	if (isBlock) chunks.push("\n");
+};
+const plainText = (node) => {
+	const chunks = [];
+	appendNodeText(node, chunks);
+	return chunks.join("").replaceAll("\r\n", "\n").replaceAll("\r", "\n").replaceAll(/[ \t]+\n/gu, "\n").replaceAll(/\n{3,}/gu, "\n\n").trim();
+};
+const firstHeading = (tree) => {
+	let heading = "";
+	visit(tree, "heading", (node) => {
+		if (heading === "") heading = plainText(node);
+	});
+	return heading;
+};
+const withoutFrontmatter = (source) => {
+	const lines = source.replace(/^\uFEFF/u, "").split(/\r?\n/u);
+	if (lines[0]?.trim() !== "---") return source;
+	const closing = lines.findIndex((line, index) => index > 0 && (line.trim() === "---" || line.trim() === "..."));
+	return closing === -1 ? source : lines.slice(closing + 1).join("\n");
+};
+const parseLibraryDocument = (source, relativePath) => {
+	let metadata = {};
+	let parseWarning = false;
+	try {
+		const file = new VFile({ value: source });
+		matter(file);
+		metadata = isRecord(file.data.matter) ? file.data.matter : {};
+	} catch {
+		parseWarning = true;
+	}
+	let tree;
+	try {
+		tree = (path.extname(relativePath).toLowerCase() === ".mdx" ? mdxParser : markdownParser).parse(source);
+	} catch {
+		parseWarning = true;
+		tree = markdownParser.parse(withoutFrontmatter(source));
+	}
+	const title = scalarText(metadata.title) || firstHeading(tree) || path.basename(relativePath, path.extname(relativePath));
+	return {
+		body: plainText(tree),
+		parseWarning,
+		status: scalarText(metadata.status),
+		title
+	};
+};
+//#endregion
+//#region src/library-files.ts
+const MAX_STABLE_READ_ATTEMPTS = 3;
+const READ_FLAGS = constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0);
+const isWithinRoot = (root, candidate) => {
+	const relative = path.relative(root, candidate);
+	return relative === "" || relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+};
+const filePathForId = (root, id) => {
+	if (id === "" || id.includes("\\") || id.includes("\0") || path.posix.isAbsolute(id) || path.win32.parse(id).root !== "") return;
+	const parts = id.split("/");
+	if (parts.some((part) => part === "" || part === "." || part === "..")) return;
+	const filePath = path.resolve(root, ...parts);
+	return isWithinRoot(root, filePath) && filePath !== root ? filePath : void 0;
+};
+const isMissingPathError = (error) => isRecord(error) && error.code === "ENOENT";
+const signatureOf = (stats) => [
+	stats.dev,
+	stats.ino,
+	stats.mode,
+	stats.size,
+	stats.mtimeNs,
+	stats.ctimeNs
+].map(String).join(":");
+var UnsafeLibraryPathError = class extends Error {
+	constructor() {
+		super("Path is not a regular file inside the library root");
+		this.name = "UnsafeLibraryPathError";
+	}
+};
+const checkedFileStat = async (root, filePath) => {
+	if (!isWithinRoot(root, filePath) || filePath === root) throw new UnsafeLibraryPathError();
+	const parts = path.relative(root, filePath).split(path.sep).filter(Boolean);
+	let current = root;
+	let currentStats;
+	for (const [index, part] of parts.entries()) {
+		current = path.join(current, part);
+		currentStats = await lstat(current, { bigint: true });
+		const final = index === parts.length - 1;
+		if (currentStats.isSymbolicLink() || (final ? !currentStats.isFile() : !currentStats.isDirectory())) throw new UnsafeLibraryPathError();
+	}
+	const actualPath = await realpath(filePath);
+	if (!isWithinRoot(root, actualPath)) throw new UnsafeLibraryPathError();
+	if (currentStats === void 0) throw new UnsafeLibraryPathError();
+	return currentStats;
+};
+const readFileAttempt = async (root, filePath) => {
+	let handle;
+	try {
+		await checkedFileStat(root, filePath);
+		handle = await open(filePath, READ_FLAGS);
+		const opened = await handle.stat({ bigint: true });
+		if (!opened.isFile()) throw new UnsafeLibraryPathError();
+		const source = await handle.readFile({ encoding: "utf-8" });
+		const afterRead = await handle.stat({ bigint: true });
+		await handle.close();
+		handle = void 0;
+		const current = await checkedFileStat(root, filePath);
+		const afterReadSignature = signatureOf(afterRead);
+		const currentSignature = signatureOf(current);
+		if (signatureOf(opened) !== afterReadSignature || afterReadSignature !== currentSignature) return;
+		return {
+			signature: currentSignature,
+			source,
+			stats: current
+		};
+	} finally {
+		await handle?.close();
+	}
+};
+const readStableFile$1 = async (root, filePath) => {
+	for (let attempt = 0; attempt < MAX_STABLE_READ_ATTEMPTS; attempt += 1) {
+		const result = await readFileAttempt(root, filePath);
+		if (result !== void 0) return result;
+	}
+	throw new Error("File changed while it was being indexed");
+};
+const assertRootDirectory = async (root) => {
+	const requestedRoot = path.resolve(root);
+	let rootStats;
+	try {
+		rootStats = await stat(requestedRoot, { bigint: true });
+	} catch {
+		throw new Error(`Document library root does not exist: ${requestedRoot}`);
+	}
+	if (!rootStats.isDirectory()) throw new Error(`Document library root is not a directory: ${requestedRoot}`);
+	return await realpath(requestedRoot);
+};
+//#endregion
 //#region src/library-search.ts
 const segmenter = new Intl.Segmenter(void 0, { granularity: "grapheme" });
 const titleCollator = new Intl.Collator("ja", {
@@ -5999,203 +6217,10 @@ const markdownExtensions = /* @__PURE__ */ new Set([
 	".markdown",
 	".mdx"
 ]);
-const ignoredNodeTypes = /* @__PURE__ */ new Set([
-	"definition",
-	"mdxFlowExpression",
-	"mdxjsEsm",
-	"mdxTextExpression",
-	"toml",
-	"yaml"
-]);
-const searchableMdxAttributes = /* @__PURE__ */ new Set([
-	"alt",
-	"aria-label",
-	"caption",
-	"description",
-	"heading",
-	"label",
-	"name",
-	"placeholder",
-	"summary",
-	"text",
-	"title",
-	"tooltip",
-	"value"
-]);
-const blockNodeTypes = /* @__PURE__ */ new Set([
-	"blockquote",
-	"code",
-	"heading",
-	"listItem",
-	"paragraph",
-	"tableCell",
-	"tableRow",
-	"thematicBreak"
-]);
-const mdxParser = unified().use(remarkParse).use(remarkMdx).use(remarkFrontmatter).use(remarkGfm);
-const markdownParser = unified().use(remarkParse).use(remarkFrontmatter).use(remarkGfm);
-const scalarText = (value) => {
-	if (typeof value === "string" || typeof value === "number") return String(value).trim();
-	if (typeof value === "boolean" || typeof value === "bigint") return String(value);
-	if (value instanceof Date && !Number.isNaN(value.valueOf())) return value.toISOString();
-	return "";
-};
-const rawNode = (node) => node;
-const appendLeafNodeText = (node, current, chunks) => {
-	if (node.type === "text" || node.type === "inlineCode" || node.type === "code") {
-		if (typeof current.value === "string") chunks.push(current.value);
-		return true;
-	}
-	if (node.type === "image" || node.type === "imageReference") {
-		if (typeof current.alt === "string") chunks.push(current.alt);
-		return true;
-	}
-	if (node.type === "break" || node.type === "thematicBreak") {
-		chunks.push("\n");
-		return true;
-	}
-	if (node.type === "html" && typeof current.value === "string") {
-		chunks.push(current.value.replaceAll(/<script\b[^>]*>[\s\S]*?<\/script\s*>/giu, " ").replaceAll(/<style\b[^>]*>[\s\S]*?<\/style\s*>/giu, " ").replaceAll(/<!--[\s\S]*?-->/gu, " ").replaceAll(/<[^>]*>/gu, " "));
-		return true;
-	}
-	return false;
-};
-const appendMdxAttributes = (current, chunks) => {
-	for (const rawAttribute of current.attributes ?? []) {
-		if (!isRecord(rawAttribute)) continue;
-		const { name, value } = rawAttribute;
-		if (typeof name === "string" && searchableMdxAttributes.has(name.toLowerCase()) && typeof value === "string") chunks.push(value);
-	}
-};
-const appendNodeText = (node, chunks) => {
-	if (ignoredNodeTypes.has(node.type)) return;
-	const current = rawNode(node);
-	if (appendLeafNodeText(node, current, chunks)) return;
-	if (node.type === "mdxJsxFlowElement" || node.type === "mdxJsxTextElement") appendMdxAttributes(current, chunks);
-	const isBlock = blockNodeTypes.has(node.type);
-	if (isBlock) chunks.push("\n");
-	for (const child of current.children ?? []) appendNodeText(child, chunks);
-	if (isBlock) chunks.push("\n");
-};
-const plainText = (node) => {
-	const chunks = [];
-	appendNodeText(node, chunks);
-	return chunks.join("").replaceAll("\r\n", "\n").replaceAll("\r", "\n").replaceAll(/[ \t]+\n/gu, "\n").replaceAll(/\n{3,}/gu, "\n\n").trim();
-};
-const firstHeading = (tree) => {
-	let heading = "";
-	visit(tree, "heading", (node) => {
-		if (heading === "") heading = plainText(node);
-	});
-	return heading;
-};
-const withoutFrontmatter = (source) => {
-	const lines = source.replace(/^\uFEFF/u, "").split(/\r?\n/u);
-	if (lines[0]?.trim() !== "---") return source;
-	const closing = lines.findIndex((line, index) => index > 0 && (line.trim() === "---" || line.trim() === "..."));
-	return closing === -1 ? source : lines.slice(closing + 1).join("\n");
-};
-const parseDocument = (source, relativePath) => {
-	let metadata = {};
-	let parseWarning = false;
-	try {
-		const file = new VFile({ value: source });
-		matter(file);
-		metadata = isRecord(file.data.matter) ? file.data.matter : {};
-	} catch {
-		parseWarning = true;
-	}
-	let tree;
-	try {
-		tree = (path.extname(relativePath).toLowerCase() === ".mdx" ? mdxParser : markdownParser).parse(source);
-	} catch {
-		parseWarning = true;
-		tree = markdownParser.parse(withoutFrontmatter(source));
-	}
-	const title = scalarText(metadata.title) || firstHeading(tree) || path.basename(relativePath, path.extname(relativePath));
-	return {
-		body: plainText(tree),
-		parseWarning,
-		status: scalarText(metadata.status),
-		title
-	};
-};
-const isWithinRoot = (root, candidate) => {
-	const relative = path.relative(root, candidate);
-	return relative === "" || relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-};
-const filePathForId = (root, id) => {
-	if (id === "" || id.includes("\\") || id.includes("\0") || path.posix.isAbsolute(id) || path.win32.parse(id).root !== "") return;
-	const parts = id.split("/");
-	if (parts.some((part) => part === "" || part === "." || part === "..")) return;
-	const filePath = path.resolve(root, ...parts);
-	return isWithinRoot(root, filePath) && filePath !== root ? filePath : void 0;
-};
-const isMissingPathError = (error) => isRecord(error) && error.code === "ENOENT";
-const signatureOf = (stats) => [
-	stats.dev,
-	stats.ino,
-	stats.mode,
-	stats.size,
-	stats.mtimeNs,
-	stats.ctimeNs
-].map(String).join(":");
 const warningFor = (relativePath, reason) => ({
 	path: relativePath || ".",
 	reason
 });
-var UnsafeLibraryPathError = class extends Error {
-	constructor() {
-		super("Path is not a regular file inside the library root");
-		this.name = "UnsafeLibraryPathError";
-	}
-};
-const unsafePathError = () => new UnsafeLibraryPathError();
-const checkedFileStat = async (root, filePath) => {
-	if (!isWithinRoot(root, filePath) || filePath === root) throw unsafePathError();
-	const parts = path.relative(root, filePath).split(path.sep).filter(Boolean);
-	let current = root;
-	let currentStats;
-	for (const [index, part] of parts.entries()) {
-		current = path.join(current, part);
-		currentStats = await lstat(current, { bigint: true });
-		const final = index === parts.length - 1;
-		if (currentStats.isSymbolicLink() || (final ? !currentStats.isFile() : !currentStats.isDirectory())) throw unsafePathError();
-	}
-	const actualPath = await realpath(filePath);
-	if (!isWithinRoot(root, actualPath)) throw unsafePathError();
-	if (currentStats === void 0) throw unsafePathError();
-	return currentStats;
-};
-const readStableFile$1 = async (root, filePath) => {
-	const flags = constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0);
-	const readAttempt = async (attempt) => {
-		let handle;
-		let stableRead;
-		try {
-			await checkedFileStat(root, filePath);
-			handle = await open(filePath, flags);
-			const opened = await handle.stat({ bigint: true });
-			if (!opened.isFile()) throw unsafePathError();
-			const source = await handle.readFile({ encoding: "utf-8" });
-			const afterRead = await handle.stat({ bigint: true });
-			await handle.close();
-			handle = void 0;
-			const current = await checkedFileStat(root, filePath);
-			if (signatureOf(opened) === signatureOf(afterRead) && signatureOf(afterRead) === signatureOf(current)) stableRead = {
-				signature: signatureOf(current),
-				source,
-				stats: current
-			};
-		} finally {
-			await handle?.close();
-		}
-		if (stableRead !== void 0) return stableRead;
-		if (attempt >= 2) throw new Error("File changed while it was being indexed");
-		return await readAttempt(attempt + 1);
-	};
-	return await readAttempt(0);
-};
 const compareWarnings = (left, right) => {
 	if (left.path < right.path) return -1;
 	if (left.path > right.path) return 1;
@@ -6204,17 +6229,6 @@ const compareWarnings = (left, right) => {
 	return 0;
 };
 const statusList = (documents) => [...new Set(documents.map(({ document }) => document.status).filter(Boolean))].toSorted();
-const assertRootDirectory = async (root) => {
-	const requestedRoot = path.resolve(root);
-	let rootStats;
-	try {
-		rootStats = await stat(requestedRoot, { bigint: true });
-	} catch {
-		throw new Error(`Document library root does not exist: ${requestedRoot}`);
-	}
-	if (!rootStats.isDirectory()) throw new Error(`Document library root is not a directory: ${requestedRoot}`);
-	return await realpath(requestedRoot);
-};
 /** Index local Markdown documents without compiling or executing MDX. */
 const createLibraryIndex = async (root) => {
 	const absoluteRoot = await assertRootDirectory(root);
@@ -6256,7 +6270,7 @@ const createLibraryIndex = async (root) => {
 					return;
 				}
 				const read = await readStableFile$1(absoluteRoot, filePath);
-				const parsed = parseDocument(read.source, id);
+				const parsed = parseLibraryDocument(read.source, id);
 				const warning = parsed.parseWarning ? warningFor(id, "parse") : void 0;
 				const entry = {
 					document: {
@@ -6326,16 +6340,7 @@ const createLibraryIndex = async (root) => {
 			if (filePath === void 0) return { status: "invalid" };
 			try {
 				await checkedFileStat(absoluteRoot, filePath);
-			} catch (error) {
-				if (error instanceof UnsafeLibraryPathError) return { status: "invalid" };
-				if (isMissingPathError(error)) {
-					indexed.delete(id);
-					return { status: "not-found" };
-				}
-				throw error;
-			}
-			if (!indexed.has(id)) return { status: "not-found" };
-			try {
+				if (!indexed.has(id)) return { status: "not-found" };
 				await unlink(filePath);
 			} catch (error) {
 				if (error instanceof UnsafeLibraryPathError) return { status: "invalid" };
@@ -6353,15 +6358,13 @@ const createLibraryIndex = async (root) => {
 		}),
 		resolve: async (id) => await withOperationLock(async () => {
 			if (!hasScanned) await scan();
-			const filePath = indexed.has(id) ? filePathForId(absoluteRoot, id) : void 0;
-			let isSafePath = false;
+			let filePath = indexed.has(id) ? filePathForId(absoluteRoot, id) : void 0;
 			if (filePath !== void 0) try {
 				await checkedFileStat(absoluteRoot, filePath);
-				isSafePath = true;
 			} catch {
-				isSafePath = false;
+				filePath = void 0;
 			}
-			return isSafePath ? filePath : void 0;
+			return filePath;
 		}),
 		search: async (options = {}) => {
 			const refreshed = await refresh();
@@ -7270,6 +7273,26 @@ const libraryHtml = async () => {
 </html>`;
 };
 //#endregion
+//#region src/local-http.ts
+/** Match the loopback server's Host and, when present, Origin headers. */
+const isLocalOrigin = (request) => {
+	const port = request.socket.localPort;
+	const host = request.headers.host ?? "";
+	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (request.headers.origin === void 0 || request.headers.origin === `http://${host}`);
+};
+const replyText = (response, status, body, contentType, headers = {}) => {
+	response.writeHead(status, {
+		"cache-control": "no-store",
+		"content-type": contentType,
+		"x-content-type-options": "nosniff",
+		...headers
+	});
+	response.end(body);
+};
+const replyJson = (response, status, body, headers = {}) => {
+	replyText(response, status, JSON.stringify(body), "application/json; charset=utf-8", headers);
+};
+//#endregion
 //#region src/open.ts
 /**
 * The platform's "open in the default browser" invocation for a file path
@@ -7383,20 +7406,6 @@ const view = (conversation) => ({
 	})),
 	sessionId: conversation.sessionId ?? null
 });
-const reply$1 = (res, status, body, headers = {}) => {
-	res.writeHead(status, {
-		"cache-control": "no-store",
-		"content-type": "application/json; charset=utf-8",
-		"x-content-type-options": "nosniff",
-		...headers
-	});
-	res.end(JSON.stringify(body));
-};
-const sameOrigin$3 = (req) => {
-	const port = req.socket.localPort;
-	const host = req.headers.host ?? "";
-	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (req.headers.origin === void 0 || req.headers.origin === `http://${host}`);
-};
 const readMessage = async (req) => {
 	if (req.headers["content-type"]?.split(";", 1)[0]?.trim().toLowerCase() !== "application/json") throw new Error("Expected application/json");
 	let source = "";
@@ -7425,31 +7434,31 @@ const handleAgentRequest = async (req, res, agent, notify, beforeSend) => {
 	let started = false;
 	try {
 		if (agent === void 0) {
-			reply$1(res, 404, { error: "Agent chat is disabled" });
+			replyJson(res, 404, { error: "Agent chat is disabled" });
 			return;
 		}
-		if (!sameOrigin$3(req)) {
-			reply$1(res, 403, { error: "Request origin is not allowed" });
+		if (!isLocalOrigin(req)) {
+			replyJson(res, 403, { error: "Request origin is not allowed" });
 			return;
 		}
 		if (req.method === "GET") {
-			reply$1(res, 200, view(await agent.current()));
+			replyJson(res, 200, view(await agent.current()));
 			return;
 		}
 		if (req.method !== "POST") {
-			reply$1(res, 405, { error: "Method not allowed" }, { allow: "GET, POST" });
+			replyJson(res, 405, { error: "Method not allowed" }, { allow: "GET, POST" });
 			return;
 		}
 		const message = await readMessage(req);
 		await beforeSend?.();
 		started = true;
-		reply$1(res, 200, view(await agent.send(message)));
+		replyJson(res, 200, view(await agent.send(message)));
 		notify();
 	} catch (error) {
 		if (started) notify();
 		if (res.headersSent) return;
 		const detail = formatError(error);
-		reply$1(res, errorStatus(detail), { error: detail });
+		replyJson(res, errorStatus(detail), { error: detail });
 	}
 };
 //#endregion
@@ -10219,20 +10228,6 @@ const parsePreviewTheme = (value) => {
 	if (value === null) return;
 	return value === "light" || value === "dark" ? value : null;
 };
-const replyJson$2 = (response, status, body, headers = {}) => {
-	response.writeHead(status, {
-		"cache-control": "no-store",
-		"content-type": "application/json; charset=utf-8",
-		"x-content-type-options": "nosniff",
-		...headers
-	});
-	response.end(JSON.stringify(body));
-};
-const sameOrigin$2 = (request) => {
-	const port = request.socket.localPort;
-	const host = request.headers.host ?? "";
-	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (request.headers.origin === void 0 || request.headers.origin === `http://${host}`);
-};
 /** Reconstruct both sides from the same diff snapshot before highlighting. */
 const replyDiff = async (response, history, from, to) => {
 	const { lines } = await history.diff(from, to);
@@ -10243,7 +10238,7 @@ const replyDiff = async (response, history, from, to) => {
 		if (line.type !== "remove") afterSource.push(line.text);
 	}
 	const [before, after] = await Promise.all([highlightMdxSource(beforeSource.join("\n")), highlightMdxSource(afterSource.join("\n"))]);
-	replyJson$2(response, 200, {
+	replyJson(response, 200, {
 		from,
 		lines,
 		syntax: {
@@ -10256,7 +10251,7 @@ const replyDiff = async (response, history, from, to) => {
 const replyPreview = async (response, history, filePath, id, requestedTheme) => {
 	const theme = parsePreviewTheme(requestedTheme);
 	if (theme === null) {
-		replyJson$2(response, 400, { error: "Invalid preview theme" });
+		replyJson(response, 400, { error: "Invalid preview theme" });
 		return;
 	}
 	const source = await history.read(id);
@@ -10266,24 +10261,19 @@ const replyPreview = async (response, history, filePath, id, requestedTheme) =>
 		initialTheme: theme ?? void 0,
 		liveReload: false
 	});
-	response.writeHead(200, {
-		"cache-control": "no-store",
-		"content-type": "text/html; charset=utf-8",
-		"x-content-type-options": "nosniff"
-	});
-	response.end(html);
+	replyText(response, 200, html, "text/html; charset=utf-8");
 };
 const replyHistoryView = async (response, history, filePath, params) => {
 	const view = params.get("view");
 	if (view === null) {
-		replyJson$2(response, 200, await history.list());
+		replyJson(response, 200, await history.list());
 		return;
 	}
 	const id = params.get("id");
 	if (view === "source" && id !== null) {
 		const source = await history.read(id);
 		const syntax = await highlightMdxSource(source);
-		replyJson$2(response, 200, {
+		replyJson(response, 200, {
 			id,
 			source,
 			syntax
@@ -10302,20 +10292,20 @@ const replyHistoryView = async (response, history, filePath, params) => {
 		await replyPreview(response, history, filePath, id, params.get("theme"));
 		return;
 	}
-	replyJson$2(response, 400, { error: "Invalid history view or version" });
+	replyJson(response, 400, { error: "Invalid history view or version" });
 };
 /** Read-only endpoints for the local, token-free MDX version store. */
 const handleDocumentHistoryRequest = async (request, response, history, filePath) => {
 	if (history === void 0 || filePath === void 0) {
-		replyJson$2(response, 404, { error: "Document history is unavailable" });
+		replyJson(response, 404, { error: "Document history is unavailable" });
 		return;
 	}
-	if (!sameOrigin$2(request)) {
-		replyJson$2(response, 403, { error: "Request origin is not allowed" });
+	if (!isLocalOrigin(request)) {
+		replyJson(response, 403, { error: "Request origin is not allowed" });
 		return;
 	}
 	if (request.method !== "GET") {
-		replyJson$2(response, 405, { error: "Method not allowed" }, { allow: "GET" });
+		replyJson(response, 405, { error: "Method not allowed" }, { allow: "GET" });
 		return;
 	}
 	const url = new URL(request.url ?? "", "http://localhost");
@@ -10324,7 +10314,7 @@ const handleDocumentHistoryRequest = async (request, response, history, filePath
 	} catch (error) {
 		const detail = formatError(error);
 		const missingVersion = error instanceof DocumentHistoryError && (error.kind === "invalid-version" || error.kind === "unknown-version");
-		replyJson$2(response, missingVersion ? 404 : 500, { error: detail });
+		replyJson(response, missingVersion ? 404 : 500, { error: detail });
 	}
 };
 //#endregion
@@ -10345,20 +10335,6 @@ var FilePreviewError = class extends Error {
 		this.status = status;
 	}
 };
-const replyJson$1 = (response, status, body) => {
-	response.writeHead(status, {
-		"cache-control": "no-store",
-		"content-type": "application/json; charset=utf-8",
-		"x-content-type-options": "nosniff",
-		...status === 405 ? { allow: "GET" } : {}
-	});
-	response.end(JSON.stringify(body));
-};
-const sameOrigin$1 = (request) => {
-	const port = request.socket.localPort;
-	const host = request.headers.host ?? "";
-	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (request.headers.origin === void 0 || request.headers.origin === `http://${host}`) && request.headers["sec-fetch-site"] !== "cross-site";
-};
 const readPreviewFile = async (file, limit) => {
 	if (await realpath(file.path) !== file.canonical) throw new FilePreviewError(403, "The referenced file has changed location");
 	const handle = await open(file.canonical, "r");
@@ -10421,11 +10397,11 @@ const previewData = async (file, theme) => {
 };
 const replyError = (response, error) => {
 	if (isRecord(error) && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
-		replyJson$1(response, 404, { error: "The referenced file no longer exists" });
+		replyJson(response, 404, { error: "The referenced file no longer exists" });
 		return;
 	}
 	const status = error instanceof FilePreviewError ? error.status : 500;
-	replyJson$1(response, status, { error: formatError(error) });
+	replyJson(response, status, { error: formatError(error) });
 };
 /** Per-server capabilities, issued only for files a rendered FileRef uses. */
 const createFilePreviews = () => {
@@ -10433,22 +10409,22 @@ const createFilePreviews = () => {
 	const files = /* @__PURE__ */ new Map();
 	return {
 		async handle(request, response) {
-			if (!sameOrigin$1(request)) {
-				replyJson$1(response, 403, { error: "Request origin is not allowed" });
+			if (!isLocalOrigin(request) || request.headers["sec-fetch-site"] === "cross-site") {
+				replyJson(response, 403, { error: "Request origin is not allowed" });
 				return;
 			}
 			if (request.method !== "GET") {
-				replyJson$1(response, 405, { error: "Method not allowed" });
+				replyJson(response, 405, { error: "Method not allowed" }, { allow: "GET" });
 				return;
 			}
 			const params = new URL(request.url ?? "", "http://localhost").searchParams;
 			const file = files.get(params.get("id") ?? "");
 			if (file === void 0) {
-				replyJson$1(response, 404, { error: "The referenced file is unavailable" });
+				replyJson(response, 404, { error: "The referenced file is unavailable" });
 				return;
 			}
 			try {
-				replyJson$1(response, 200, await previewData(file, params.get("theme") === "dark" ? "dark" : "light"));
+				replyJson(response, 200, await previewData(file, params.get("theme") === "dark" ? "dark" : "light"));
 			} catch (error) {
 				replyError(response, error);
 			}
@@ -10475,6 +10451,125 @@ const createFilePreviews = () => {
 	};
 };
 //#endregion
+//#region src/preview-watch.ts
+/** Dependency/build output dirs — never worth a watch fd. */
+const SKIP_DIRS = /* @__PURE__ */ new Set([
+	".git",
+	".mdxr-cache",
+	"dist",
+	"node_modules",
+	"storybook-static"
+]);
+/**
+* The set of directories being watched. `fs.watch` recursive mode exists only
+* on darwin/win32 — elsewhere `arm` puts one non-recursive watcher per
+* directory, which also survives atomic saves (rename-over kills a watch
+* aimed at the file itself).
+*/
+const createWatchSet = () => {
+	const watchers = [];
+	const armed = /* @__PURE__ */ new Set();
+	const track = (w, dir) => {
+		watchers.push(w);
+		if (dir !== void 0) {
+			armed.add(dir);
+			w.on("close", () => {
+				armed.delete(dir);
+			});
+		}
+		w.on("error", () => {
+			w.close();
+		});
+	};
+	/** One watcher on `dir` itself (no descent). */
+	const armFlat = (dir, onEvent) => {
+		if (armed.has(dir) || SKIP_DIRS.has(path.basename(dir))) return;
+		try {
+			track(fs.watch(dir, onEvent), dir);
+		} catch {}
+	};
+	/**
+	* Recursive fallback: a watcher on `dir` plus every directory under it.
+	* The `armed` check guards only the watcher install — the descent still
+	* runs on an already-armed root, so directories created mid-session get
+	* picked up on the next rebuild (armDependencies re-arms the tree).
+	*/
+	const arm = (dir, onEvent) => {
+		if (SKIP_DIRS.has(path.basename(dir)) || path.basename(dir) === "history" && path.basename(path.dirname(dir)) === ".mdxr") return;
+		if (!armed.has(dir)) try {
+			track(fs.watch(dir, onEvent), dir);
+		} catch {}
+		let ents;
+		try {
+			ents = fs.readdirSync(dir, { withFileTypes: true });
+		} catch {
+			return;
+		}
+		for (const e of ents) if (e.isDirectory()) arm(path.join(dir, e.name), onEvent);
+	};
+	return {
+		arm,
+		armFlat,
+		close() {
+			for (const w of watchers) w.close();
+		},
+		get size() {
+			return watchers.length;
+		},
+		track
+	};
+};
+const watchTarget = (watch, target, notify) => {
+	let recursiveWatch = false;
+	try {
+		watch.track(fs.watch(target.watchDir, { recursive: true }, notify));
+		recursiveWatch = true;
+	} catch {
+		watch.arm(target.watchDir, notify);
+	}
+	if (watch.size === 0 && target.watchFile !== void 0) try {
+		watch.track(fs.watch(target.watchFile, notify));
+	} catch {}
+	return recursiveWatch;
+};
+const RELOAD_DEBOUNCE_MS = 80;
+const SESSION_TEMP_FILE = /^\.sessions-.*\.tmp$/u;
+const isIgnoredChange = (watchDir, filename) => {
+	const parts = filename?.split(path.sep) ?? [];
+	const isHistoryWrite = parts.includes("history") && (parts.includes(".mdxr") || path.basename(watchDir) === ".mdxr");
+	const isInternalMdxrWrite = path.basename(watchDir) !== ".mdxr" && parts.includes(".mdxr");
+	return parts.some((part) => SKIP_DIRS.has(part)) || isHistoryWrite || isInternalMdxrWrite || parts.some((part) => part === "sessions.json" || SESSION_TEMP_FILE.test(part));
+};
+/** Own the preview's filesystem watchers and debounce source change bursts. */
+const createPreviewWatcher = (target, onChange) => {
+	const watch = createWatchSet();
+	let closed = false;
+	let timer;
+	const notify = (_event, filename) => {
+		if (closed || isIgnoredChange(target.watchDir, filename)) return;
+		clearTimeout(timer);
+		timer = setTimeout(onChange, RELOAD_DEBOUNCE_MS);
+	};
+	const recursiveWatch = watchTarget(watch, target, notify);
+	return {
+		/** Watch external dependencies and newly created source directories. */
+		armDependencies(dependencies) {
+			if (closed) return;
+			if (!recursiveWatch) watch.arm(target.watchDir, notify);
+			for (const dependency of dependencies) {
+				const directory = path.dirname(dependency);
+				if (directory === target.watchDir || directory.startsWith(`${target.watchDir}${path.sep}`) || directory.split(path.sep).includes("node_modules")) continue;
+				watch.armFlat(directory, notify);
+			}
+		},
+		close() {
+			closed = true;
+			clearTimeout(timer);
+			watch.close();
+		}
+	};
+};
+//#endregion
 //#region src/workspace-export-data.ts
 /** Collect a complete, internally consistent archive of one served document. */
 const createWorkspaceExportData = async (filePath, history, agent) => {
@@ -10499,26 +10594,13 @@ const createWorkspaceExportData = async (filePath, history, agent) => {
 		versions: exportedVersions
 	};
 };
-const replyJson = (response, status, body) => {
-	response.writeHead(status, {
-		"cache-control": "no-store",
-		"content-type": "application/json; charset=utf-8",
-		"x-content-type-options": "nosniff"
-	});
-	response.end(JSON.stringify(body));
-};
-const sameOrigin = (request) => {
-	const port = request.socket.localPort;
-	const host = request.headers.host ?? "";
-	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (request.headers.origin === void 0 || request.headers.origin === `http://${host}`);
-};
 /** Serve a complete archive to the local workspace export action. */
 const handleWorkspaceExportRequest = async (request, response, filePath, history, agent) => {
 	if (history === void 0 || filePath === void 0) {
 		replyJson(response, 404, { error: "Document history is unavailable" });
 		return;
 	}
-	if (!sameOrigin(request)) {
+	if (!isLocalOrigin(request)) {
 		replyJson(response, 403, { error: "Request origin is not allowed" });
 		return;
 	}
@@ -10564,14 +10646,6 @@ const workspaceJs = async () => {
 //#endregion
 //#region src/serve.ts
 const errorPage = (err) => `<!doctype html><meta charset="utf-8"><body style="font-family:monospace;background:#1c1917;color:#fca5a5;padding:2rem"><h1>mdxr render error</h1><pre>${formatError(err).replaceAll("&", "&amp;").replaceAll("<", "&lt;")}</pre></body>`;
-/** Dependency/build output dirs — never worth a watch fd. */
-const SKIP_DIRS = /* @__PURE__ */ new Set([
-	".git",
-	".mdxr-cache",
-	"dist",
-	"node_modules",
-	"storybook-static"
-]);
 /** Upper bound on consecutive EADDRINUSE retries before give-up. */
 const MAX_PORT_ATTEMPTS = 100;
 /**
@@ -10604,78 +10678,6 @@ const handleDocumentResponse = (req, res, target, html) => {
 	res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
 	res.end(html);
 };
-/**
-* The set of directories being watched. `fs.watch` recursive mode exists only
-* on darwin/win32 — elsewhere `arm` puts one non-recursive watcher per
-* directory, which also survives atomic saves (rename-over kills a watch
-* aimed at the file itself).
-*/
-const createWatchSet = () => {
-	const watchers = [];
-	const armed = /* @__PURE__ */ new Set();
-	const track = (w, dir) => {
-		watchers.push(w);
-		if (dir !== void 0) {
-			armed.add(dir);
-			w.on("close", () => {
-				armed.delete(dir);
-			});
-		}
-		w.on("error", () => {
-			w.close();
-		});
-	};
-	/** One watcher on `dir` itself (no descent). */
-	const armFlat = (dir, onEvent) => {
-		if (armed.has(dir) || SKIP_DIRS.has(path.basename(dir))) return;
-		try {
-			track(fs.watch(dir, onEvent), dir);
-		} catch {}
-	};
-	/**
-	* Recursive fallback: a watcher on `dir` plus every directory under it.
-	* The `armed` check guards only the watcher install — the descent still
-	* runs on an already-armed root, so directories created mid-session get
-	* picked up on the next rebuild (armDeps re-arms the tree for this).
-	*/
-	const arm = (dir, onEvent) => {
-		if (SKIP_DIRS.has(path.basename(dir)) || path.basename(dir) === "history" && path.basename(path.dirname(dir)) === ".mdxr") return;
-		if (!armed.has(dir)) try {
-			track(fs.watch(dir, onEvent), dir);
-		} catch {}
-		let ents;
-		try {
-			ents = fs.readdirSync(dir, { withFileTypes: true });
-		} catch {
-			return;
-		}
-		for (const e of ents) if (e.isDirectory()) arm(path.join(dir, e.name), onEvent);
-	};
-	return {
-		arm,
-		armFlat,
-		close() {
-			for (const w of watchers) w.close();
-		},
-		get size() {
-			return watchers.length;
-		},
-		track
-	};
-};
-const watchTarget = (watch, target, notify) => {
-	let recursiveWatch = false;
-	try {
-		watch.track(fs.watch(target.watchDir, { recursive: true }, notify));
-		recursiveWatch = true;
-	} catch {
-		watch.arm(target.watchDir, notify);
-	}
-	if (watch.size === 0 && target.watchFile !== void 0) try {
-		watch.track(fs.watch(target.watchFile, notify));
-	} catch {}
-	return recursiveWatch;
-};
 const broadcast = (clients, event) => {
 	for (const client of clients) try {
 		client.write(`event: ${event}\ndata: {}\n\n`);
@@ -10743,25 +10745,7 @@ const servePreview = async (target, port) => {
 		}
 		handleDocumentResponse(req, res, target, html);
 	});
-	const watch = createWatchSet();
-	let recursiveWatch = false;
-	let timer;
-	/**
-	* Dependency files (theme CSS, its nested imports) may live outside the
-	* watched document directory. Inside the watch dir the root watcher covers
-	* them; outside, a flat watcher on the file's own directory suffices —
-	* and avoids descending into a potentially huge ancestor tree. Also
-	* re-arms the tree so directories created mid-session are picked up.
-	*/
-	const armDeps = (onEvent) => {
-		if (!recursiveWatch) watch.arm(target.watchDir, onEvent);
-		for (const dep of target.deps?.() ?? []) {
-			const dir = path.dirname(dep);
-			if (dir === target.watchDir || dir.startsWith(`${target.watchDir}${path.sep}`) || dir.split(path.sep).includes("node_modules")) continue;
-			watch.armFlat(dir, onEvent);
-		}
-	};
-	const rebuild = async (onEvent) => {
+	const rebuild = async (watcher) => {
 		try {
 			if (target.history !== void 0) {
 				await target.history.capture(capturedInitialVersion ? "change" : "initial");
@@ -10772,31 +10756,23 @@ const servePreview = async (target, port) => {
 		} catch (error) {
 			html = errorPage(error);
 		}
-		if (!closed) armDeps(onEvent);
+		if (!closed) watcher.armDependencies(target.deps?.() ?? []);
 	};
 	let reloading = Promise.resolve();
-	const reload = (onEvent) => {
+	const reload = (watcher) => {
 		const prev = reloading;
 		reloading = (async () => {
 			await prev;
 			if (closed) return;
 			try {
-				await rebuild(onEvent);
+				await rebuild(watcher);
 				broadcast(clients, "reload");
 			} catch {}
 		})();
 	};
-	const notify = (_event, filename) => {
-		const parts = filename?.split(path.sep) ?? [];
-		const isHistoryWrite = parts.includes("history") && (parts.includes(".mdxr") || path.basename(target.watchDir) === ".mdxr");
-		const isInternalMdxrWrite = path.basename(target.watchDir) !== ".mdxr" && parts.includes(".mdxr");
-		if (closed || parts.some((part) => SKIP_DIRS.has(part)) || isHistoryWrite || isInternalMdxrWrite || parts.some((part) => part === "sessions.json" || /^\.sessions-.*\.tmp$/u.test(part))) return;
-		clearTimeout(timer);
-		timer = setTimeout(() => {
-			reload(notify);
-		}, 80);
-	};
-	recursiveWatch = watchTarget(watch, target, notify);
+	const watcher = createPreviewWatcher(target, () => {
+		reload(watcher);
+	});
 	const closeAgent = async () => {
 		try {
 			await target.agent?.close();
@@ -10804,11 +10780,10 @@ const servePreview = async (target, port) => {
 	};
 	server.on("close", () => {
 		closed = true;
-		clearTimeout(timer);
-		watch.close();
+		watcher.close();
 		closeAgent();
 	});
-	reloading = rebuild(notify);
+	reloading = rebuild(watcher);
 	await reloading;
 	try {
 		await listenOnFreePort(server, port);
@@ -10831,7 +10806,7 @@ const openPreview = async (server, port) => {
 /**
 * Wraps a render fn with dependency tracking: `deps` reads the paths the
 * last render reported via `onDependencies` (theme CSS + its imports), so
-* `armDeps` can watch files outside the document's own directory.
+* the watcher can track files outside the document's own directory.
 */
 const trackDeps = (renderDoc) => {
 	let deps = [];
@@ -10962,19 +10937,6 @@ const createPreviews = (opts) => {
 		}
 	};
 };
-const localRequest = (request) => {
-	const port = request.socket.localPort;
-	const { host } = request.headers;
-	return (host === `localhost:${port}` || host === `127.0.0.1:${port}`) && (request.headers.origin === void 0 || request.headers.origin === `http://${host}`);
-};
-const reply = (response, status, body, type = "application/json; charset=utf-8") => {
-	response.writeHead(status, {
-		"cache-control": "no-store",
-		"content-type": type,
-		"x-content-type-options": "nosniff"
-	});
-	response.end(body);
-};
 const parseSort = (value) => {
 	if (value === null) return "relevance";
 	return value === "relevance" || value === "updated" || value === "title" ? value : void 0;
@@ -10991,12 +10953,12 @@ const openDocument = async (pathname, response, index, previews) => {
 	try {
 		id = decodeURIComponent(pathname.slice(21));
 	} catch {
-		reply(response, 400, JSON.stringify({ error: "invalid-document" }));
+		replyJson(response, 400, { error: "invalid-document" });
 		return;
 	}
 	const file = await index.resolve(id);
 	if (file === void 0) {
-		reply(response, 404, "文書が見つかりません。一覧を更新してください。\nDocument not found. Refresh the library.", "text/plain; charset=utf-8");
+		replyText(response, 404, "文書が見つかりません。一覧を更新してください。\nDocument not found. Refresh the library.", "text/plain; charset=utf-8");
 		return;
 	}
 	const url = await previews.open(file);
@@ -11010,23 +10972,23 @@ const openDocument = async (pathname, response, index, previews) => {
 const deleteDocument = async (pathname, response, index, previews) => {
 	const encodedId = pathname.startsWith(DELETE_PREFIX) ? pathname.slice(DELETE_PREFIX.length) : "";
 	if (encodedId === "" || encodedId.includes("/")) {
-		reply(response, 400, JSON.stringify({ error: "invalid-document" }));
+		replyJson(response, 400, { error: "invalid-document" });
 		return;
 	}
 	let id;
 	try {
 		id = decodeURIComponent(encodedId);
 	} catch {
-		reply(response, 400, JSON.stringify({ error: "invalid-document" }));
+		replyJson(response, 400, { error: "invalid-document" });
 		return;
 	}
 	const result = await index.remove(id);
 	if (result.status === "invalid") {
-		reply(response, 400, JSON.stringify({ error: "invalid-document" }));
+		replyJson(response, 400, { error: "invalid-document" });
 		return;
 	}
 	if (result.status === "not-found") {
-		reply(response, 404, JSON.stringify({ error: "not-found" }));
+		replyJson(response, 404, { error: "not-found" });
 		return;
 	}
 	await previews.remove(result.filePath);
@@ -11039,18 +11001,18 @@ const deleteDocument = async (pathname, response, index, previews) => {
 const handleDeleteRequest = async (request, pathname, response, index, previews) => {
 	if (request.method !== "DELETE") {
 		response.setHeader("allow", "DELETE");
-		reply(response, 405, JSON.stringify({ error: "method-not-allowed" }));
+		replyJson(response, 405, { error: "method-not-allowed" });
 		return;
 	}
 	if (request.headers[DELETE_ACTION_HEADER] !== "delete" || request.headers["sec-fetch-site"] === "cross-site") {
-		reply(response, 403, JSON.stringify({ error: "forbidden" }));
+		replyJson(response, 403, { error: "forbidden" });
 		return;
 	}
 	await deleteDocument(pathname, response, index, previews);
 };
 const handleLibraryRequest = async (request, response, index, previews, html) => {
-	if (!localRequest(request)) {
-		reply(response, 403, JSON.stringify({ error: "forbidden" }));
+	if (!isLocalOrigin(request)) {
+		replyJson(response, 403, { error: "forbidden" });
 		return;
 	}
 	const url = new URL(request.url ?? "/", "http://localhost");
@@ -11060,25 +11022,25 @@ const handleLibraryRequest = async (request, response, index, previews, html) =>
 	}
 	if (request.method !== "GET") {
 		response.setHeader("allow", "GET");
-		reply(response, 405, JSON.stringify({ error: "method-not-allowed" }));
+		replyJson(response, 405, { error: "method-not-allowed" });
 		return;
 	}
 	if (url.pathname === "/") {
-		reply(response, 200, html, "text/html; charset=utf-8");
+		replyText(response, 200, html, "text/html; charset=utf-8");
 		return;
 	}
 	if (url.pathname === "/__mdxr_library.js") {
-		reply(response, 200, await libraryJs(), "text/javascript; charset=utf-8");
+		replyText(response, 200, await libraryJs(), "text/javascript; charset=utf-8");
 		return;
 	}
 	if (request.headers["sec-fetch-site"] === "cross-site") {
-		reply(response, 403, JSON.stringify({ error: "forbidden" }));
+		replyJson(response, 403, { error: "forbidden" });
 		return;
 	}
 	if (url.pathname === SEARCH_PATH) {
 		const sort = parseSort(url.searchParams.get("sort"));
 		if (sort === void 0) {
-			reply(response, 400, JSON.stringify({ error: "invalid-sort" }));
+			replyJson(response, 400, { error: "invalid-sort" });
 			return;
 		}
 		const result = await index.search({
@@ -11086,14 +11048,14 @@ const handleLibraryRequest = async (request, response, index, previews, html) =>
 			sort,
 			status: url.searchParams.get("status") ?? void 0
 		});
-		reply(response, 200, JSON.stringify(result));
+		replyJson(response, 200, result);
 		return;
 	}
 	if (url.pathname.startsWith(OPEN_PREFIX)) {
 		await openDocument(url.pathname, response, index, previews);
 		return;
 	}
-	reply(response, 404, JSON.stringify({ error: "not-found" }));
+	replyJson(response, 404, { error: "not-found" });
 };
 /** Browse a local directory without evaluating its documents during indexing. */
 const serveLibrary = async (dir, port, opts = {}) => {
@@ -11111,7 +11073,7 @@ const serveLibrary = async (dir, port, opts = {}) => {
 				await handleLibraryRequest(request, response, index, previews, html);
 			} catch (error) {
 				console.error(`mdxr: library: ${formatError(error)}`);
-				reply(response, 500, JSON.stringify({ error: "library-error" }));
+				replyJson(response, 500, { error: "library-error" });
 			}
 		})();
 	});