isorite 0.8.1 → 0.10.0

package/dist/main.js

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 import { chmodSync, closeSync, copyFileSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
-import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { Document, Scalar, isMap, isScalar, isSeq, parseDocument, stringify } from "yaml";
 import MarkdownIt from "markdown-it";
 import { parse, stringify as stringify$1 } from "smol-toml";
+import { execFileSync, spawn, spawnSync } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";
 import { arch, constants, homedir, hostname, platform, release, tmpdir } from "node:os";
 import { createSecureContext, getCACertificates, setDefaultCACertificates } from "node:tls";
-import { execFileSync, spawn, spawnSync } from "node:child_process";
+import { get } from "node:http";
 import { Worker } from "node:worker_threads";
 import { Agent, request } from "node:https";
 import { Readable } from "node:stream";
@@ -17,9 +18,11 @@ import { Hono } from "hono";
 import { streamSSE } from "hono/streaming";
 import { z } from "zod";
 import { OpenCode } from "@opencode/client";
-import { appendFile, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import { appendFile, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import { createInterface } from "node:readline/promises";
 import { createServer } from "node:net";
-import { createInterface } from "node:readline";
+import { isSea } from "node:sea";
+import { createInterface as createInterface$1 } from "node:readline";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __esmMin = (fn, res, err) => () => {
@@ -139,7 +142,7 @@ function normpath(p) {
 	}
 	return "/".repeat(initial) + out.join("/") || ".";
 }
-/** SHA-256 as hex, synchronous and dependency-free, so the core runs anywhere. */
+/** SHA-256 as hex, synchronous and dependency-free, so the core runs anywhere: of text (as UTF-8), or of bytes. */
 function sha256(message) {
 	const K = new Uint32Array([
 		1116352408,
@@ -207,7 +210,7 @@ function sha256(message) {
 		3204031479,
 		3329325298
 	]);
-	const data = new TextEncoder().encode(message);
+	const data = typeof message === "string" ? new TextEncoder().encode(message) : message;
 	const len = data.length;
 	const padded = new Uint8Array(len + 9 + 63 >> 6 << 6);
 	padded.set(data);
@@ -374,7 +377,7 @@ function linkTexts(body) {
 	return out;
 }
 /** Every link and image in a body, in order: where it points, its title, and whether it is an image
-*  (`![…](…)`, which for an artifact or a picture means "shown here", an embed). */
+*  (`![…](…)`, which for an artifact or a picture means "shown here", an embed), with an image's alt text. */
 function citeRefs(body) {
 	const { tokens } = parse$1(body);
 	const out = [];
@@ -388,7 +391,8 @@ function citeRefs(body) {
 		else if (c.type === "image") out.push({
 			href: c.attrGet("src") ?? "",
 			title: c.attrGet("title"),
-			embed: true
+			embed: true,
+			alt: c.content
 		});
 	}
 	return out;
@@ -443,6 +447,64 @@ var init_markdown = __esmMin((() => {
 	SPACES = /[\s_]+/gu;
 }));
 //#endregion
+//#region packages/core/src/picture.ts
+/** Width and height in pixels, or null. */
+function pictureSize(bytes, type) {
+	const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength), n = bytes.length;
+	const at = (i, s) => [...s].every((c, k) => bytes[i + k] === c.charCodeAt(0));
+	const ok = (w, h) => w > 0 && h > 0 ? {
+		width: w,
+		height: h
+	} : null;
+	try {
+		if (type === "image/png" && n >= 24 && at(12, "IHDR")) return ok(v.getUint32(16), v.getUint32(20));
+		if (type === "image/gif" && n >= 10 && at(0, "GIF")) return ok(v.getUint16(6, true), v.getUint16(8, true));
+		if (type === "image/jpeg") {
+			for (let i = 2; i + 9 < n;) {
+				if (bytes[i] !== 255) return null;
+				const m = bytes[i + 1];
+				if (m >= 192 && m <= 207 && m !== 196 && m !== 200 && m !== 204) return ok(v.getUint16(i + 7), v.getUint16(i + 5));
+				i += 2 + v.getUint16(i + 2);
+			}
+			return null;
+		}
+		if (type === "image/webp" && n >= 30 && at(0, "RIFF") && at(8, "WEBP")) {
+			if (at(12, "VP8 ")) return ok(v.getUint16(26, true) & 16383, v.getUint16(28, true) & 16383);
+			if (at(12, "VP8L")) {
+				const b = v.getUint32(21, true);
+				return ok((b & 16383) + 1, (b >> 14 & 16383) + 1);
+			}
+			if (at(12, "VP8X")) return ok(1 + (bytes[24] | bytes[25] << 8 | bytes[26] << 16), 1 + (bytes[27] | bytes[28] << 8 | bytes[29] << 16));
+			return null;
+		}
+		if (type === "image/svg+xml") {
+			const head = new TextDecoder().decode(bytes.subarray(0, 4096)), tag = /<svg\b[^>]*>/i.exec(head)?.[0] ?? "";
+			const attr = (name) => new RegExp(`\\s${name}\\s*=\\s*["']\\s*([\\d.]+)\\s*(px)?\\s*["']`, "i").exec(tag);
+			const w = attr("width"), h = attr("height");
+			if (w && h) return ok(Math.round(Number(w[1])), Math.round(Number(h[1])));
+			const box = /\sviewBox\s*=\s*["']\s*[-\d.]+[\s,]+[-\d.]+[\s,]+([\d.]+)[\s,]+([\d.]+)/i.exec(tag);
+			return box ? ok(Math.round(Number(box[1])), Math.round(Number(box[2]))) : null;
+		}
+	} catch {}
+	return null;
+}
+var TYPES$1, pictureType;
+var init_picture = __esmMin((() => {
+	TYPES$1 = {
+		png: "image/png",
+		jpg: "image/jpeg",
+		jpeg: "image/jpeg",
+		gif: "image/gif",
+		svg: "image/svg+xml",
+		webp: "image/webp",
+		avif: "image/avif"
+	};
+	pictureType = (path) => {
+		const dot = path.lastIndexOf(".");
+		return dot < 0 || path.lastIndexOf("/") > dot ? null : TYPES$1[path.slice(dot + 1).toLowerCase()] ?? null;
+	};
+}));
+//#endregion
 //#region packages/core/src/kinds.ts
 function kindOf(type) {
 	const t = type.trim().toLowerCase();
@@ -515,11 +577,25 @@ function outwardLinks(body) {
 		}
 		seen.add(href);
 	}
+	for (const { href, embed, alt } of citeRefs(body)) {
+		if (!embed || seen.has(href)) continue;
+		const c = codeTarget(href);
+		if (!c || !pictureType(c.path)) continue;
+		out.push({
+			kind: "code",
+			href,
+			text: alt || c.path.split("/").at(-1),
+			path: c.path,
+			picture: true
+		});
+		seen.add(href);
+	}
 	return out;
 }
 var ABOUT, DONE, EMBED;
 var init_kinds = __esmMin((() => {
 	init_markdown();
+	init_picture();
 	init_text();
 	ABOUT = {
 		question: "about",
@@ -722,7 +798,7 @@ var init_bundle = __esmMin((() => {
 				concept.links = links;
 				concept.outward = outwardLinks(concept.body);
 				for (const link of links) if (link.broken) this.issue(concept.path, "warning", "broken-link", `broken link to ${link.target}`);
-				for (const { href, title, embed } of citeRefs(concept.body)) {
+				for (const { href, title, embed, alt } of citeRefs(concept.body)) {
 					const path = this.filePath(concept, href), kind = path === null ? null : citeKind(path);
 					if (path === null || kind === null) continue;
 					const t = strip((title ?? "").toLowerCase());
@@ -732,10 +808,11 @@ var init_bundle = __esmMin((() => {
 						embed,
 						broken: !this.files.has(path),
 						rel: rating(title),
-						align: t === "left" ? "left" : t === "center" || t === "centre" ? "center" : null
+						align: t === "left" ? "left" : t === "center" || t === "centre" ? "center" : null,
+						...embed && alt ? { alt } : {}
 					};
 					concept.cites.push(cite);
-					if (cite.broken) this.issue(concept.path, "warning", "broken-link", `broken link to ${path}`);
+					if (cite.broken) this.issue(concept.path, "warning", "broken-link", kind === "image" ? `picture not in the notes: ${path}` : `broken link to ${path}`);
 				}
 			}
 			const byName = /* @__PURE__ */ new Map();
@@ -1806,13 +1883,16 @@ function mapModel(base) {
 			s
 		]);
 	}
+	const holdsFiles = /* @__PURE__ */ new Set();
+	for (const f of base.files) holdsFiles.add(f.includes("/") ? f.slice(0, f.lastIndexOf("/")) : "");
 	const dir = (id) => {
 		const d = base.directories.get(id);
-		return {
+		const children = [...[...d.children].sort().map(dir).filter((c) => c !== null), ...[...d.concepts].sort().map(note)];
+		return id && !children.length && (holdsFiles.has(id) || d.children.length) ? null : {
 			kind: "dir",
 			id: "d:" + id,
 			ref: id,
-			children: [...[...d.children].sort().map(dir), ...[...d.concepts].sort().map(note)]
+			children
 		};
 	};
 	return {
@@ -1827,6 +1907,7 @@ var init_map = __esmMin((() => {
 //#region packages/core/src/index.ts
 var init_src$1 = __esmMin((() => {
 	init_bundle();
+	init_picture();
 	init_frontmatter();
 	init_source();
 	init_markdown();
@@ -1881,8 +1962,9 @@ function loadBundle(root) {
 }
 //#endregion
 //#region packages/engine/src/api.ts
-var EngineError, Conflict;
+var MAX_FILE_BYTES, EngineError, Conflict;
 var init_api = __esmMin((() => {
+	MAX_FILE_BYTES = 2e7;
 	EngineError = class extends Error {
 		status;
 		constructor(message, status = 400) {
@@ -1944,19 +2026,50 @@ function unreachable(err, url) {
 	try {
 		host = new URL(url).host;
 	} catch {}
-	const advice = UNTRUSTED.has(code) ? `Its certificate is signed by an authority not trusted here, often a company's own. Add it to the system's authorities (isorite trusts those), or set NODE_EXTRA_CA_CERTS to its certificate (a .pem), or name that as ca in [provider].` : code === "CERT_HAS_EXPIRED" ? "Its certificate has expired: that is the gateway's to fix." : code === "ERR_TLS_CERT_ALTNAME_INVALID" ? `Its certificate is not for ${host}: check the url in [provider].` : /CERTIFICATE_REQUIRED|HANDSHAKE_FAILURE|BAD_CERTIFICATE|UNKNOWN_CA/.test(code) ? "It asks for a client certificate (mTLS) and was given none it accepts: name yours as pfx (with pfx_passphrase), or cert and cert_key, in [provider]." : code === "UND_ERR_SOCKET" && url.startsWith("https:") ? "It closed the connection as it was being set up. A gateway that asks for a client certificate (mTLS) does this: name yours as pfx, or cert and cert_key, in [provider]." : code === "ENOTFOUND" || code === "EAI_AGAIN" ? `The name ${host} could not be found: check the url in [provider], and whether it is only found on the company's network or VPN.` : code === "ECONNREFUSED" ? `Nothing answers at ${host}: check the url and its port in [provider].` : code === "ETIMEDOUT" || code === "UND_ERR_CONNECT_TIMEOUT" || code === "ENETUNREACH" || code === "EHOSTUNREACH" ? `${host} did not answer. If the company's network reaches it through a proxy, set HTTPS_PROXY.` : "";
+	const proxy = /Proxy response \((\d{3})\)/.exec(said)?.[1];
+	const advice = proxy === "407" ? "The proxy (HTTPS_PROXY), not the provider, refused with 407: it wants credentials of its own, as http://user:password@proxy:port in HTTPS_PROXY, or its own sign-in. isorite can't answer a proxy that signs in by Kerberos or NTLM." : proxy ? `The proxy (HTTPS_PROXY) answered ${proxy}, not the provider: check HTTPS_PROXY, and NO_PROXY for hosts reached directly.` : UNTRUSTED.has(code) ? `Its certificate is signed by an authority not trusted here, often a company's own. Add it to the system's authorities (isorite trusts those), or set NODE_EXTRA_CA_CERTS to its certificate (a .pem), or name that as ca in [provider].` : code === "CERT_HAS_EXPIRED" ? "Its certificate has expired: that is the gateway's to fix." : code === "ERR_TLS_CERT_ALTNAME_INVALID" ? `Its certificate is not for ${host}: check the url in [provider].` : /CERTIFICATE_REQUIRED|HANDSHAKE_FAILURE|BAD_CERTIFICATE|UNKNOWN_CA/.test(code) ? "It asks for a client certificate (mTLS) and was given none it accepts: name yours as pfx (with pfx_passphrase), or cert and cert_key, in [provider]." : code === "UND_ERR_SOCKET" && url.startsWith("https:") ? "It closed the connection as it was being set up. A gateway that asks for a client certificate (mTLS) does this: name yours as pfx, or cert and cert_key, in [provider]." : code === "ENOTFOUND" || code === "EAI_AGAIN" ? `The name ${host} could not be found: check the url in [provider], and whether it is only found on the company's network or VPN.` : code === "ECONNREFUSED" ? `Nothing answers at ${host}: check the url and its port in [provider].` : code === "ETIMEDOUT" || code === "UND_ERR_CONNECT_TIMEOUT" || code === "ENETUNREACH" || code === "EHOSTUNREACH" ? `${host} did not answer. If the company's network reaches it through a proxy, set HTTPS_PROXY.` : "";
 	return [
 		said || err?.message || "no reason given",
 		code && !said.includes(code) ? ` (${code})` : "",
 		advice ? `. ${advice}` : ""
 	].join("");
 }
+/** The header the key goes in, and what goes before it: Authorization with "Bearer " unless said otherwise (M21).
+*  `key_header = "authorization"` alone means Bearer too: a bare key in Authorization is rarely what a gateway
+*  wants. `key_prefix = ""` sends it bare. */
+function keySent(p) {
+	const header = p.keyHeader || "Authorization";
+	return {
+		header,
+		prefix: p.keyPrefix ?? (header.toLowerCase() === "authorization" ? "Bearer " : "")
+	};
+}
+/** How the key is sent, as said to the person: `Authorization: Bearer <41 characters>`. */
+function keySentAs(p, key) {
+	const { header, prefix } = keySent(p);
+	return `${header}: ${prefix}<${key.length} characters>`;
+}
+/** What a provider said with a refusal: its `error.message` (or `message`, or `error`), else its text without
+*  markup, cut to 300 characters, and never the key, should it say it back. */
+function refusal(body, key = null) {
+	let said = "";
+	try {
+		const j = JSON.parse(body);
+		said = (typeof j.error === "string" ? j.error : j.error?.message) ?? j.message ?? "";
+	} catch {
+		said = body.replace(/<[^>]+>/g, " ");
+	}
+	said = said.replace(/\s+/g, " ").trim();
+	if (key && key.length >= 8) said = said.split(key).join("<the key>");
+	return said.length > 300 ? said.slice(0, 299) + "…" : said;
+}
 /** The address of `path` at the provider, and the headers that go with every request to it: its key, where it
 *  wants it, and its own. */
 function endpoint(p, key, path) {
 	const url = new URL(p.url.replace(/\/+$/, "") + path);
 	for (const [name, value] of Object.entries(p.query ?? {})) url.searchParams.set(name, value);
-	const auth = !key ? {} : p.keyHeader ? { [p.keyHeader]: key } : { Authorization: `Bearer ${key}` };
+	const sent = keySent(p);
+	const auth = !key ? {} : { [sent.header]: sent.prefix + key };
 	return {
 		url: url.toString(),
 		headers: {
@@ -2023,13 +2136,7 @@ async function completeOnce(http, p, key, call, heard) {
 	if (!res.ok || !res.body) {
 		let detail = "";
 		try {
-			const said = await res.text();
-			try {
-				const j = JSON.parse(said);
-				detail = (typeof j.error === "string" ? j.error : j.error?.message) ?? j.message ?? "";
-			} catch {
-				detail = said.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim().slice(0, 300);
-			}
+			detail = refusal(await res.text(), key);
 		} catch {}
 		if (DOWN.has(res.status)) throw new ModelError(`${p.name} is unavailable (${res.status}${detail ? `: ${detail}` : ""})`, 502, {
 			kind: "unavailable",
@@ -2041,7 +2148,7 @@ async function completeOnce(http, p, key, call, heard) {
 			retry: true,
 			after: afterOf(res)
 		});
-		const advice = res.status === 401 ? " The key was not accepted: set it again in settings." : res.status === 402 ? " The key's credit is spent." : res.status === 404 ? ` ${p.name} may have no model called ${call.model}${p.defaultTiers ? ", which is OpenRouter's name for it: name this provider's models under [tiers] in config.toml" : ""}.` : "";
+		const advice = res.status === 401 ? ` The key was not accepted${key ? `, sent as ${keySentAs(p, key)}` : ""}: set it again in settings, or check key_header and key_prefix.` : res.status === 402 ? " The key's credit is spent." : res.status === 404 ? ` ${p.name} may have no model called ${call.model}${p.defaultTiers ? ", which is OpenRouter's name for it: name this provider's models under [tiers] in config.toml" : ""}.` : "";
 		throw new ModelError(`${p.name} said ${res.status}${detail ? `: ${detail}` : ""}.${advice}`, res.status === 401 || res.status === 403 ? 409 : 502);
 	}
 	let text = "", usage = null, finish = "";
@@ -2671,6 +2778,9 @@ something at one place in the note they have open.`;
   is drawn as the diagram. Draw one where a picture of how things stand to
   each other helps, or when asked; not by habit. Maths in a label goes
   between $$ and $$.
+- A picture is shown as ![what it shows](its/path.png). You can't see it: what
+  you know of it is the words in the brackets. Keep a picture's line as it is
+  when you rewrite around it, and never make up a picture's path.
 - Ordinary Markdown otherwise. No HTML.`;
 	FORMAT_RULES = FORMAT;
 	LOOKUP = (rounds, meaning) => `# Looking things up
@@ -2779,7 +2889,7 @@ var init_lookup = __esmMin((() => {
 			...str$1,
 			description: "The note's id or path: basics/entropy or /basics/entropy.md."
 		} }, ["id"]),
-		fn$1("read_note", "Read one section of a note, by its heading, or the whole note when no section is named. Prefer a section.", {
+		fn$1("read_note", "Read one section of a note, by its heading, or the whole note when no section is named. Prefer a section. A picture in it is ![what it shows](path): you have its words, not the picture.", {
 			id: str$1,
 			section: {
 				...str$1,
@@ -4002,18 +4112,41 @@ var init_engine = __esmMin((() => {
 			const notes = {}, broken = await this.brokenCode();
 			for (const c of this.bundle.concepts.values()) {
 				const bad = broken.get(c.id) ?? [];
-				const links = c.outward.map((o) => ({
+				const links = c.outward.filter((o) => !(o.kind === "code" && o.picture)).map((o) => ({
 					kind: o.kind,
 					href: o.href,
 					text: o.text,
 					...bad.includes(o.href) ? { broken: true } : {}
 				}));
+				const pictures = [], shown = /* @__PURE__ */ new Set();
+				for (const p of c.cites) {
+					if (p.kind !== "image" || !p.embed || shown.has(p.target)) continue;
+					shown.add(p.target);
+					pictures.push({
+						href: p.target,
+						path: p.target,
+						from: "notes",
+						text: p.alt || p.target.split("/").at(-1),
+						...p.broken ? { broken: true } : {}
+					});
+				}
+				for (const o of c.outward) {
+					if (o.kind !== "code" || !o.picture) continue;
+					pictures.push({
+						href: o.href,
+						path: o.path,
+						from: "code",
+						text: o.text,
+						...bad.includes(o.href) ? { broken: true } : {}
+					});
+				}
 				notes[c.id] = {
 					title: c.title,
 					tokens: estimate(c.body.trim()),
 					...c.kind !== "note" ? { kind: c.kind } : {},
 					...c.done ? { done: c.done } : {},
-					...links.length ? { links } : {}
+					...links.length ? { links } : {},
+					...pictures.length ? { pictures } : {}
 				};
 			}
 			return {
@@ -4410,6 +4543,107 @@ var init_engine = __esmMin((() => {
 			this.queue = run.catch(() => void 0);
 			return run;
 		}
+		/** A picture (M22), in the notes or in the base's repository. The path must be a picture's, within its folder,
+		*  and (in the notes) never in a hidden folder such as `.isorite/`: nothing but a picture is given this way. */
+		async file(path, from = "notes") {
+			const type = pictureType(path);
+			if (!type) return null;
+			let files, at;
+			if (from === "code") {
+				const target = codeTarget(`code:${path}`), where = (await this.settingsOfBase()).repository;
+				files = target && where ? this.opts.repository?.(where) ?? null : null;
+				at = target?.path ?? "";
+			} else {
+				at = path.replace(/^\/+/, "");
+				files = at.split("/").some((p) => !p || p === "." || p === ".." || p.startsWith(".")) ? null : this.opts.notes;
+			}
+			const bytes = files ? await files.readBytes(at) : null;
+			if (!bytes) return null;
+			if (bytes.length > 2e7) throw new EngineError(`${path} is larger than isorite gives (${MAX_FILE_BYTES / 1e6} MB)`, 413);
+			return {
+				bytes,
+				type,
+				version: sha256(bytes).slice(0, 16)
+			};
+		}
+		/** What was read of each picture, kept while its size and time are the same. */
+		pictureCache = /* @__PURE__ */ new Map();
+		/** Every picture in the notes (M22), found afresh: one put in the folder by hand since the base was opened is
+		*  among them, and from then on in the bundle too, so a link to it isn't broken. A hidden folder is never looked in. */
+		async pictures() {
+			const found = [];
+			const visit = async (dir) => {
+				for (const f of await this.opts.notes.list(dir)) {
+					if (f.name.startsWith(".")) continue;
+					const path = dir ? `${dir}/${f.name}` : f.name;
+					if (f.dir) await visit(path);
+					else if (pictureType(f.name)) found.push({
+						path,
+						...f.size === void 0 ? {} : { size: f.size },
+						...f.mtime === void 0 ? {} : { mtime: f.mtime }
+					});
+				}
+			};
+			await visit("");
+			const out = [], seen = /* @__PURE__ */ new Set();
+			for (const f of found) {
+				seen.add(f.path);
+				const kept = this.pictureCache.get(f.path);
+				if (kept && f.size !== void 0 && kept.size === f.size && kept.mtime === f.mtime) {
+					out.push(kept.info);
+					continue;
+				}
+				const bytes = f.size !== void 0 && f.size > 2e7 ? null : await this.opts.notes.readBytes(f.path);
+				if (!bytes) continue;
+				const px = pictureSize(bytes, pictureType(f.path));
+				const info = {
+					path: f.path,
+					bytes: bytes.length,
+					width: px?.width ?? null,
+					height: px?.height ?? null,
+					sha256: sha256(bytes)
+				};
+				this.pictureCache.set(f.path, {
+					...f.size === void 0 ? {} : { size: f.size },
+					...f.mtime === void 0 ? {} : { mtime: f.mtime },
+					info
+				});
+				out.push(info);
+			}
+			for (const path of this.pictureCache.keys()) if (!seen.has(path)) this.pictureCache.delete(path);
+			let changed = false;
+			for (const path of seen) if (!this.files.has(path)) {
+				this.files.set(path, { path });
+				changed = true;
+			}
+			for (const path of [...this.files.keys()]) if (pictureType(path) && !seen.has(path)) {
+				this.files.delete(path);
+				changed = true;
+			}
+			if (changed) this.built = this.index = null;
+			return out.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+		}
+		/** Put a picture in the notes (M22). The path must be a picture's, out of any hidden folder, and free: a file
+		*  that's there is never replaced. Not journaled: a picture has no history, and stays when its link goes. */
+		savePicture(path, bytes) {
+			return this.one(async () => {
+				const type = pictureType(path), parts = path.split("/");
+				if (!type || parts.some((p) => !p || p === "." || p === ".." || p.startsWith(".")) || /[\\\x00-\x1f]/.test(path)) throw new EngineError(`not a picture's path: ${path}`, 400);
+				if (bytes.length > 2e7) throw new EngineError(`the picture is larger than isorite takes (${MAX_FILE_BYTES / 1e6} MB)`, 413);
+				if (await this.opts.notes.readBytes(path) !== null) throw new Conflict(`${path} is there already`, null);
+				await this.opts.notes.writeBytes(path, bytes);
+				this.files.set(path, { path });
+				this.built = this.index = null;
+				const px = pictureSize(bytes, type);
+				return {
+					path,
+					bytes: bytes.length,
+					width: px?.width ?? null,
+					height: px?.height ?? null,
+					sha256: sha256(bytes)
+				};
+			});
+		}
 		/** Where a note's file is: drafts and Understanding notes are among isorite's own files. */
 		where(id) {
 			if (!inBase(id)) return {
@@ -6463,6 +6697,8 @@ var init_ports = __esmMin((() => {
 	systemClock = { now: () => Date.now() };
 	MemoryFiles = class {
 		files = /* @__PURE__ */ new Map();
+		/** Files held as bytes (pictures), apart from text. */
+		bytes = /* @__PURE__ */ new Map();
 		constructor(files = {}) {
 			for (const [path, text] of Object.entries(files)) this.files.set(path, text);
 		}
@@ -6475,22 +6711,42 @@ var init_ports = __esmMin((() => {
 		async append(path, text) {
 			this.files.set(path, (this.files.get(path) ?? "") + text);
 		}
+		async readBytes(path) {
+			const b = this.bytes.get(path), t = this.files.get(path);
+			return b ?? (t === void 0 ? null : new TextEncoder().encode(t));
+		}
+		async writeBytes(path, bytes) {
+			this.files.delete(path);
+			this.bytes.set(path, bytes);
+		}
 		async remove(path) {
 			this.files.delete(path);
+			this.bytes.delete(path);
 		}
 		async list(dir) {
 			const prefix = dir ? dir + "/" : "";
 			const found = /* @__PURE__ */ new Map();
-			for (const path of this.files.keys()) {
+			for (const path of [...this.files.keys(), ...this.bytes.keys()]) {
 				if (!path.startsWith(prefix)) continue;
 				const rest = path.slice(prefix.length), cut = rest.indexOf("/");
-				if (cut < 0) found.set(rest, false);
-				else found.set(rest.slice(0, cut), true);
+				if (cut >= 0) {
+					found.set(rest.slice(0, cut), {
+						name: rest.slice(0, cut),
+						dir: true
+					});
+					continue;
+				}
+				const b = this.bytes.get(path);
+				found.set(rest, b ? {
+					name: rest,
+					dir: false,
+					size: b.length
+				} : {
+					name: rest,
+					dir: false
+				});
 			}
-			return [...found].map(([name, isDir]) => ({
-				name,
-				dir: isDir
-			}));
+			return [...found.values()];
 		}
 	};
 	MemorySecrets = class {
@@ -6697,7 +6953,7 @@ function writeHome(dir, { gateway = null, plugin = pluginDir, instructions = []
 			recursive: true,
 			force: true
 		});
-		symlinkSync(plugin, link, "dir");
+		symlinkSync(plugin, link, process.platform === "win32" ? "junction" : "dir");
 	}
 	return dir;
 }
@@ -6724,12 +6980,14 @@ function withLocal(config, local) {
 	};
 }
 function linksTo(path, target) {
+	const plain = (p) => resolve(p).replace(/[\\/]+$/, "");
 	try {
-		return lstatSync(path).isSymbolicLink() && readlinkSync(path) === target;
+		return lstatSync(path).isSymbolicLink() && plain(readlinkSync(path)) === plain(target);
 	} catch {
 		return false;
 	}
 }
+const PACKAGE$1 = `@opencode/cli@2.0.32`;
 /** The version a `--version` line names, as "2.0.32", or null. */
 function parseVersion(output) {
 	return output.match(/(\d+)\.(\d+)\.(\d+)/)?.[0] ?? null;
@@ -6749,20 +7007,57 @@ const probe = (command) => {
 		return null;
 	}
 };
-/** ISORITE_OPENCODE if set, else `opencode2`, else `opencode`: the first that is OpenCode 2. */
-function findOpenCode(env = process.env, run = probe) {
+/** isorite's own prefix for OpenCode 2. Not ~/.config/isorite/opencode, which is OpenCode's configuration as
+*  `term` writes it (home.ts): an npm prefix there would put node_modules among it. */
+function ownPrefix(env = process.env) {
+	return join(env.XDG_CONFIG_HOME || join(homedir(), ".config"), "isorite", "opencode-cli");
+}
+/** The OpenCode 2 in isorite's own prefix, as npm links it; on Windows, the package's own opencode.exe, as npm's
+*  opencode2.cmd can't be run without a shell (Node refuses .cmd files since 2024). */
+const ownCommand = (env = process.env, platform = process.platform) => platform === "win32" ? join(ownPrefix(env), "node_modules", "@opencode", "cli", "bin", "opencode.exe") : join(ownPrefix(env), "node_modules", ".bin", "opencode2");
+/** A command on the PATH as Windows can run it without a shell: `<name>.exe`, or for npm's `<name>.cmd` the
+*  package's opencode.exe beside it, in the global node_modules. Null when there is neither. */
+function onWindowsPath(name, env = process.env, exists = existsSync) {
+	for (const dir of (env.PATH ?? env.Path ?? "").split(win32.delimiter).filter(Boolean)) {
+		if (exists(win32.join(dir, `${name}.exe`))) return win32.join(dir, `${name}.exe`);
+		const exe = win32.join(dir, "node_modules", "@opencode", "cli", "bin", "opencode.exe");
+		if (exists(win32.join(dir, `${name}.cmd`)) && exists(exe)) return exe;
+	}
+	return null;
+}
+/** The line that installs OpenCode 2 for isorite alone, to copy. */
+const installLine = (env = process.env) => `isorite opencode   (npm install --prefix ${ownPrefix(env)} ${PACKAGE$1})`;
+/** OpenCode 2 wasn't found. `old` is an OpenCode 1 that was, if one was. */
+var NoOpenCode = class extends Error {
+	old;
+	constructor(tried, old, env) {
+		super((old ? `isorite term needs OpenCode 2; ${old} is OpenCode 1 (${tried.join("; ")}).\n` : `isorite term needs OpenCode 2 (${tried.join("; ")}).\n`) + `  Install it for isorite only, leaving the global one as it is: ${installLine(env)}\n  or name one with: ISORITE_OPENCODE=/path/to/opencode isorite term`);
+		this.old = old;
+	}
+};
+/** ISORITE_OPENCODE if set, else isorite's own prefix's, else `opencode2`, else `opencode`: the first that is
+*  OpenCode 2. */
+function findOpenCode(env = process.env, run = probe, platform = process.platform, where = onWindowsPath) {
 	const tried = [];
-	const candidates = env.ISORITE_OPENCODE ? [env.ISORITE_OPENCODE] : ["opencode2", "opencode"];
-	for (const command of candidates) {
+	let old = null;
+	const candidates = env.ISORITE_OPENCODE ? [[env.ISORITE_OPENCODE, "ISORITE_OPENCODE"]] : [
+		[ownCommand(env, platform), "isorite opencode"],
+		["opencode2", "the PATH"],
+		["opencode", "the PATH"]
+	];
+	for (const [named, from] of candidates) {
+		const command = platform === "win32" && from === "the PATH" ? where(named, env) ?? named : named;
 		const output = run(command);
 		const version = output === null ? null : parseVersion(output);
 		if (version && Number(version.split(".")[0]) === 2) return {
 			command,
-			version
+			version,
+			from
 		};
-		tried.push(output === null ? `${command}: not found` : `${command}: ${version ?? "unknown version"}`);
+		if (version && Number(version.split(".")[0]) < 2) old ??= `${command} ${version}`;
+		if (output !== null || from !== "isorite opencode") tried.push(output === null ? `${command}: not found` : `${command}: ${version ?? "unknown version"}`);
 	}
-	throw new Error(`isorite term needs OpenCode 2 (${tried.join("; ")}).\n  Install it with: npm i -g @opencode/cli\n  or name one with: ISORITE_OPENCODE=/path/to/opencode isorite term`);
+	throw new NoOpenCode(tried, old, env);
 }
 //#endregion
 //#region packages/server/src/config.ts
@@ -6850,6 +7145,7 @@ function providerFrom(config, env = process.env) {
 		...headers ? { headers } : {},
 		...query ? { query } : {},
 		...typeof p.key_header === "string" && p.key_header ? { keyHeader: p.key_header } : {},
+		...typeof p.key_prefix === "string" ? { keyPrefix: p.key_prefix } : {},
 		...p.stream_usage === false ? { streamUsage: false } : {},
 		...typeof p.max_tokens === "number" && p.max_tokens > 0 ? { maxTokens: Math.floor(p.max_tokens) } : {}
 	};
@@ -6953,6 +7249,23 @@ function lendBase(name, lend, path = configPath()) {
 }
 //#endregion
 //#region packages/server/src/model.ts
+/** Where a mirror keeps the .tgz (M21): ISORITE_MODEL_BASE_URL names the folder it's in, tried before the rest. */
+function mirrorOf(env = process.env) {
+	const base = env.ISORITE_MODEL_BASE_URL?.trim();
+	return base ? `${base.replace(/\/+$/, "")}/${RELEASE_FILE}` : null;
+}
+/** How to fetch the model by hand, to copy: the file, its SHA-256, and the command that takes it. */
+function byHand(env = process.env) {
+	const mirror = mirrorOf(env);
+	return [
+		"Fetch this file another way (a browser, or a machine that can reach it):",
+		`  ${RELEASE}`,
+		...mirror ? [`  or from your mirror: ${mirror}`] : [],
+		`  SHA-256 ${RELEASE_SHA256}`,
+		"then run:",
+		`  isorite model --from ~/Downloads/${RELEASE_FILE}`
+	];
+}
 /** Where the server looks for the model, in order, and why each place is there. */
 function modelPlaces(env = process.env) {
 	if (env.ISORITE_EMBED_DIR) return [{
@@ -7042,7 +7355,7 @@ function unpack(pkg) {
 }
 /** Fetch the model's files into `out`, keeping only files whose SHA-256 is the one expected: from a folder if one is
 *  named; else from npm, then the GitHub release, then Hugging Face, each tried in turn. */
-async function fetchModel(out, say = console.log, { from, pkg = PACKAGE, release = RELEASE, hub = HUB, files = FILES } = {}) {
+async function fetchModel(out, say = console.log, { from, pkg = PACKAGE, release = RELEASE, mirror = null, url, hub = HUB, files = FILES, tgzSha = files === FILES ? RELEASE_SHA256 : null } = {}) {
 	mkdirSync(out, { recursive: true });
 	const missing = () => files.filter(([, to, want]) => !(existsSync(join(out, to)) && sha(readFileSync(join(out, to))) === want));
 	for (const [, to] of files) if (!missing().some((f) => f[1] === to)) say(`${to}: already here`);
@@ -7071,31 +7384,42 @@ async function fetchModel(out, say = console.log, { from, pkg = PACKAGE, release
 		}
 	};
 	const why = (e, url) => e.message === "fetch failed" || e.cause ? unreachable(e, url) : e.message;
-	if (missing().length && pkg) try {
-		fromPackage(pkg);
-	} catch (e) {
-		tried.push(`npm (${pkg}): ${e.message}`);
-		say(`From npm (${pkg}): ${e.message}`);
-	}
-	if (missing().length && release) {
+	/** The .tgz at an address, checked by its SHA-256 before it's unpacked; a failure is kept in `tried`. */
+	const fromWeb = async (where, address) => {
 		const tmp = mkdtempSync(join(tmpdir(), "isorite-model-release-"));
 		try {
-			say(`From GitHub: ${release}`);
-			const res = await fetch(release);
+			say(`From ${where}: ${address}`);
+			const res = await fetch(address);
 			if (!res.ok) throw new Error(`it said ${res.status}`);
-			const tgz = join(tmp, basename(new URL(release).pathname));
-			writeFileSync(tgz, new Uint8Array(await res.arrayBuffer()));
+			const buf = new Uint8Array(await res.arrayBuffer());
+			if (tgzSha && sha(buf) !== tgzSha) throw new Error(`not the file expected: its SHA-256 is ${sha(buf)}, not ${tgzSha}, so it was not unpacked`);
+			const tgz = join(tmp, basename(new URL(address).pathname) || "isorite-model-granite-1.0.0.tgz");
+			writeFileSync(tgz, buf);
 			fromPackage(tgz);
 		} catch (e) {
-			tried.push(`GitHub (${release}): ${why(e, release)}`);
-			say(`From GitHub: ${why(e, release)}`);
+			tried.push(`${where} (${address}): ${why(e, address)}`);
+			say(`From ${where}: ${why(e, address)}`);
 		} finally {
 			rmSync(tmp, {
 				recursive: true,
 				force: true
 			});
 		}
+	};
+	if (url) {
+		await fromWeb("--url", url);
+		if (missing().length) throw new ModelFetchError(tried);
+		say(`The model is in ${out}`);
+		return;
+	}
+	if (missing().length && mirror) await fromWeb("the mirror (ISORITE_MODEL_BASE_URL)", mirror);
+	if (missing().length && pkg) try {
+		fromPackage(pkg);
+	} catch (e) {
+		tried.push(`npm (${pkg}): ${e.message}`);
+		say(`From npm (${pkg}): ${e.message}`);
 	}
+	if (missing().length && release) await fromWeb("GitHub", release);
 	if (missing().length && hub) {
 		say("From Hugging Face");
 		try {
@@ -7115,6 +7439,19 @@ async function fetchModel(out, say = console.log, { from, pkg = PACKAGE, release
 *  checked by using it: it must load, and give DIM numbers for a sentence. Kept in the user's models, and used from
 *  then on. */
 async function installFrom(from, say = console.log, env = process.env) {
+	if (/\.(tgz|tar\.gz)$/.test(from) && existsSync(from) && statSync(from).isFile()) {
+		const got = sha(readFileSync(from));
+		if (got !== "8d8ab528ae289dfc81fd2bfa80c867ca0c8342a2d98f7c86141df4b15fdf028c") throw new Error(`${from} is not ${RELEASE_FILE}: its SHA-256 is ${got}, not ${RELEASE_SHA256}`);
+		const dir = unpack(resolve(from));
+		try {
+			return await installFrom(join(dir, "package"), say, env);
+		} finally {
+			rmSync(dir, {
+				recursive: true,
+				force: true
+			});
+		}
+	}
 	if (!hasModel(from)) throw new Error(`${from} has no model: it needs model.onnx and tokenizer.json`);
 	const granite = !existsSync(join(from, "isorite-model.json")) && FILES.every(([, to, want]) => existsSync(join(from, to)) && sha(readFileSync(join(from, to))) === want);
 	let out = userModelDir(env);
@@ -7142,7 +7479,7 @@ async function installFrom(from, say = console.log, env = process.env) {
 }
 /** `isorite model [--from <folder>]`: says which model is installed and where, or installs one, and on failure
 *  where it looked, what it tried, and what to do. */
-async function modelCommand(from, say = console.log, env = process.env, sources = {}) {
+async function modelCommand(from, say = console.log, env = process.env, sources = {}, url) {
 	const told = (i, why) => say(`search by meaning: ${i.name} at ${i.dir} (sha256 ${i.sha.slice(0, 12)}, ${i.pooling} pooling), found by ${why}`);
 	if (env.ISORITE_EMBED === "off") say("ISORITE_EMBED=off: search by meaning is switched off, whatever is installed");
 	if (from) try {
@@ -7159,27 +7496,35 @@ async function modelCommand(from, say = console.log, env = process.env, sources
 		return 0;
 	}
 	say(`No model in ${places.map((p) => p.dir).join(", ")}`);
+	if (!url) say(`If it can't be fetched from here: ${RELEASE} (SHA-256 ${RELEASE_SHA256}), then isorite model --from <that file>`);
 	try {
-		await fetchModel(userModelDir(env), say, sources);
+		await fetchModel(userModelDir(env), say, {
+			mirror: mirrorOf(env),
+			...sources,
+			...url ? { url } : {}
+		});
 		return 0;
 	} catch (e) {
 		say(e.message);
 		say([
-			"What to do:",
-			`  - copy the model's files from a machine that has them (${userModelDir()} there), then: isorite model --from <folder>`,
-			`  - or the package's .tgz, from ${RELEASE}: unpack it, then isorite model --from <its package folder>`,
-			`  - or any compatible model (ONNX, 384 numbers out, with its tokenizer.json): isorite model --from <folder>, or ISORITE_EMBED_DIR=<folder>`,
+			...byHand(env),
+			"Or:",
+			`  - a mirror: ISORITE_MODEL_BASE_URL=<the folder ${RELEASE_FILE} is in> isorite model, or isorite model --url <its address>`,
+			`  - the model's files from a machine that has them (${userModelDir()} there): isorite model --from <folder>`,
+			`  - any compatible model (ONNX, 384 numbers out, with its tokenizer.json): isorite model --from <folder>, or ISORITE_EMBED_DIR=<folder>`,
 			"Search by words works without it."
 		].join("\n"));
 		return 1;
 	}
 }
-var NAME$2, MODEL, RELEASE, PACKAGE, HUB, FILES, sha, userModelsDir, userModelDir, hasModel, ModelFetchError, modelFiles;
+var NAME$2, MODEL, RELEASE_FILE, RELEASE, RELEASE_SHA256, PACKAGE, HUB, FILES, sha, userModelsDir, userModelDir, hasModel, ModelFetchError, modelFiles;
 var init_model = __esmMin((() => {
 	init_src();
 	NAME$2 = "granite-embedding-small-english-r2";
 	MODEL = `${NAME$2}-q8`;
-	RELEASE = "https://github.com/lachlanjs/isorite/releases/download/model-granite-1.0.0/isorite-model-granite-1.0.0.tgz";
+	RELEASE_FILE = "isorite-model-granite-1.0.0.tgz";
+	RELEASE = `https://github.com/lachlanjs/isorite/releases/download/model-granite-1.0.0/${RELEASE_FILE}`;
+	RELEASE_SHA256 = "8d8ab528ae289dfc81fd2bfa80c867ca0c8342a2d98f7c86141df4b15fdf028c";
 	PACKAGE = "isorite-model-granite@1.0.0";
 	HUB = `https://huggingface.co/onnx-community/granite-embedding-small-english-r2-ONNX/resolve/1dc7835ba0cb9c76a3618d0bf0c427c97671b3c8`;
 	FILES = [
@@ -7861,6 +8206,7 @@ var Terminal = class {
 };
 //#endregion
 //#region packages/server/src/http.ts
+init_src$1();
 init_src();
 const LOOPBACK = /* @__PURE__ */ new Set([
 	"localhost",
@@ -7882,6 +8228,8 @@ const TYPES = {
 	".map": "application/json",
 	".txt": "text/plain; charset=utf-8"
 };
+/** What a picture may do when opened on its own: be drawn, and nothing else (no script, no fetch, no form). */
+const PICTURE_CSP = "sandbox; default-src 'none'; img-src data:; style-src 'unsafe-inline'";
 const Edit = z.object({
 	base: z.string().max(64),
 	text: z.string()
@@ -7982,6 +8330,7 @@ const SetupDraft = z.object({
 	url: z.string().max(2e3),
 	keyHeld: z.boolean(),
 	keyHeader: z.string().max(200),
+	keyPrefix: z.string().max(50).default(""),
 	headers: z.array(Pair).max(40),
 	query: z.array(Pair).max(40),
 	pfx: Path,
@@ -8103,6 +8452,42 @@ function createApp({ api, token, loopback, web, allowHosts = [], notes, terminal
 	app.get("/api/map", (c) => answer(c, () => api.map()));
 	app.get("/api/timeline", (c) => answer(c, () => api.timeline()));
 	app.get("/api/search", (c) => answer(c, () => api.search(c.req.query("q") ?? "")));
+	app.get("/api/pictures", (c) => answer(c, () => api.pictures()));
+	app.post("/api/file", async (c) => {
+		let origin = "";
+		try {
+			origin = new URL(c.req.header("origin") ?? "").host;
+		} catch {}
+		if (!c.req.header("origin") || origin !== c.req.header("host")) return refuse(c, 403, "cross-origin request refused");
+		if (c.req.header("x-isorite-token") !== token) return refuse(c, 403, "bad token");
+		const path = c.req.query("path") ?? "", type = pictureType(path);
+		if (!type || (c.req.header("content-type") ?? "").split(";")[0].trim().toLowerCase() !== type) return refuse(c, 415, "a picture, of the type its name says");
+		if (Number(c.req.header("content-length") ?? 0) > 2e7) return refuse(c, 413, "picture too large");
+		const bytes = new Uint8Array(await c.req.arrayBuffer());
+		if (bytes.length > 2e7) return refuse(c, 413, "picture too large");
+		return answer(c, () => api.savePicture(path, bytes));
+	});
+	app.get("/api/file", async (c) => {
+		const code = c.req.query("code"), path = code ?? c.req.query("path") ?? "";
+		let found;
+		try {
+			found = await api.file(path, code === void 0 ? "notes" : "code");
+		} catch (e) {
+			if (e instanceof EngineError) return refuse(c, e.status, e.message);
+			throw e;
+		}
+		if (!found) return refuse(c, 404, `no picture at ${path}`);
+		const etag = `"${found.version}"`;
+		const headers = {
+			"Content-Type": found.type,
+			"Cache-Control": "no-cache",
+			ETag: etag,
+			"X-Content-Type-Options": "nosniff",
+			"Content-Security-Policy": PICTURE_CSP
+		};
+		if (c.req.header("if-none-match") === etag) return c.body(null, 304, headers);
+		return c.body(found.bytes, 200, headers);
+	});
 	app.put("/api/note", async (c) => {
 		const refused = writeRefused(c);
 		if (refused) return refused;
@@ -8437,12 +8822,26 @@ var NodeFiles = class {
 			throw e;
 		}
 	}
-	/** Written beside the file and renamed over it, so a reader never sees half a note. */
+	async readBytes(path) {
+		try {
+			return new Uint8Array(await readFile(this.at(path)));
+		} catch (e) {
+			if (gone(e)) return null;
+			throw e;
+		}
+	}
 	async write(path, text) {
+		await this.replace(path, text);
+	}
+	async writeBytes(path, bytes) {
+		await this.replace(path, bytes);
+	}
+	/** Written beside the file and renamed over it, so a reader never sees half a note. */
+	async replace(path, data) {
 		const full = this.at(path), beside = `${full}.${process.pid}.${this.n++}.tmp`;
 		await mkdir(dirname(full), { recursive: true });
 		try {
-			await writeFile(beside, text, "utf8");
+			await writeFile(beside, data, typeof data === "string" ? "utf8" : void 0);
 			await rename(beside, full);
 		} catch (e) {
 			await rm(beside, { force: true });
@@ -8456,10 +8855,27 @@ var NodeFiles = class {
 	}
 	async list(dir) {
 		try {
-			return (await readdir(this.at(dir), { withFileTypes: true })).filter((e) => e.isDirectory() || e.isFile()).map((e) => ({
-				name: e.name,
-				dir: e.isDirectory()
-			})).sort((a, b) => a.name < b.name ? -1 : 1);
+			const at = this.at(dir), entries = await readdir(at, { withFileTypes: true });
+			return (await Promise.all(entries.filter((e) => e.isDirectory() || e.isFile()).map(async (e) => {
+				if (e.isDirectory()) return {
+					name: e.name,
+					dir: true
+				};
+				if (e.name.endsWith(".md")) return {
+					name: e.name,
+					dir: false
+				};
+				const s = await stat(resolve(at, e.name)).catch(() => null);
+				return s ? {
+					name: e.name,
+					dir: false,
+					size: s.size,
+					mtime: s.mtimeMs
+				} : {
+					name: e.name,
+					dir: false
+				};
+			}))).sort((a, b) => a.name < b.name ? -1 : 1);
 		} catch (e) {
 			if (gone(e)) return [];
 			throw e;
@@ -8481,6 +8897,7 @@ const FORM = [
 	"auth",
 	"key",
 	"key_header",
+	"key_prefix",
 	"headers",
 	"query",
 	"pfx",
@@ -8512,6 +8929,7 @@ function readSetup(config) {
 		url: gateway ? p.url : OPENROUTER.url,
 		keyHeld: text(p.key) !== "",
 		keyHeader: text(p.key_header),
+		keyPrefix: text(p.key_prefix).trim(),
 		headers: pairs(p.headers),
 		query: pairs(p.query),
 		pfx: text(p.pfx),
@@ -8553,6 +8971,9 @@ function applySetup(config, draft) {
 	}
 	if (gateway) {
 		if (draft.keyHeader.trim()) p.key_header = draft.keyHeader.trim();
+		const prefix = (draft.keyPrefix ?? "").trim();
+		if (prefix) p.key_prefix = prefix + " ";
+		else if (old.key_prefix === "" && draft.keyHeader.trim()) p.key_prefix = "";
 		const pairs = (field, given) => {
 			const before = table(old[field]), out = {};
 			for (const pair of given) {
@@ -8713,7 +9134,7 @@ var Setup = class {
 };
 //#endregion
 //#region packages/server/src/version.ts
-const VERSION = "0.8.1";
+const VERSION = "0.10.0";
 //#endregion
 //#region packages/server/src/git.ts
 /** The top of the repository `folder` is in, or null: the nearest folder holding `.git`, a directory or, in a
@@ -8946,6 +9367,27 @@ async function serve$1(path, { host = "127.0.0.1", port = 4767, allowHosts = [],
 	process.on("SIGTERM", stop);
 }
 //#endregion
+//#region packages/server/src/self.ts
+/** Whether this is the single executable. */
+const single = () => {
+	try {
+		return isSea();
+	} catch {
+		return false;
+	}
+};
+/** What runs isorite again with `args`, given the script (npm's or a checkout's) to run when not single. */
+function self(script, args, execArgv = process.execArgv) {
+	return {
+		command: process.execPath,
+		args: single() ? args : [
+			...execArgv,
+			script,
+			...args
+		]
+	};
+}
+//#endregion
 //#region packages/server/src/term.ts
 init_src$1();
 const MAIN = import.meta.url.endsWith(".ts") ? fileURLToPath(new URL("./main.ts", import.meta.url)) : fileURLToPath(import.meta.url);
@@ -8992,14 +9434,14 @@ async function ensureServer(path, { port = 4767, env = process.env, wait = 12e4,
 		if (!opened) throw new StudyError(`nothing is serving on port ${port}: name a base`);
 		const log = join(tmpdir(), `isorite-term-${port}.log`);
 		const out = openSync(log, "w");
-		started = spawn(process.execPath, [
-			MAIN,
+		const again = self(MAIN, [
 			"serve",
 			path,
 			"--port",
 			String(port),
 			"--held"
-		], {
+		], []);
+		started = spawn(again.command, again.args, {
 			stdio: [
 				"ignore",
 				out,
@@ -9068,6 +9510,25 @@ async function freePort() {
 		});
 	});
 }
+/** Whether `address` asks a browser that opens it for a password (M21): a 401 with Basic, as OpenCode 2 answers
+*  for /api (its page itself is served to anyone). Asked as a browser navigates, by node:http: OpenCode leaves the
+*  challenge out for its own page's fetches (Sec-Fetch-Mode: cors), which is all Node's fetch can send. */
+function asksPassword(address) {
+	return new Promise((done) => {
+		const req = get(address, {
+			headers: {
+				Accept: "text/html",
+				"Sec-Fetch-Mode": "navigate",
+				"Sec-Fetch-Dest": "document"
+			},
+			timeout: 3e3
+		}, (res) => {
+			res.resume();
+			done(res.statusCode === 401 && /^\s*basic\b/i.test(String(res.headers["www-authenticate"] ?? "")));
+		});
+		req.on("timeout", () => req.destroy()).on("error", () => done(false));
+	});
+}
 /** A POST to the isorite server, made as its page makes one: from its origin, with the token it hands out. */
 async function tell(url, path, body) {
 	const token = await tokenOf(url);
@@ -9187,8 +9648,57 @@ function where(port, models, env, tty, page = "/") {
 async function tokenOf(url) {
 	return (await (await fetch(`${url}/api/session`)).json()).token;
 }
+/** `isorite opencode` (M21): OpenCode 2, at the version isorite is tested with, in isorite's own npm prefix, the
+*  global one left as it is. npm's registry, proxy and mirror settings apply. Run again, it installs it again. */
+function installOpenCode(env = process.env, say = console.log, npm = "npm") {
+	const prefix = ownPrefix(env);
+	say(`isorite opencode: installing ${PACKAGE$1} in ${prefix}, for isorite alone; nothing global is changed`);
+	const win = process.platform === "win32";
+	const done = spawnSync(npm, [
+		"install",
+		"--prefix",
+		win ? `"${prefix}"` : prefix,
+		"--no-fund",
+		"--no-audit",
+		"--loglevel=error",
+		PACKAGE$1
+	], {
+		stdio: "inherit",
+		env,
+		shell: win
+	});
+	if (done.status !== 0) {
+		say(`npm could not install it${done.error ? `: ${done.error.message}` : ""}. If npm's registry or mirror is the trouble, fetch an OpenCode 2 another way and name it: ISORITE_OPENCODE=/path/to/opencode isorite term`);
+		return 1;
+	}
+	try {
+		const found = findOpenCode(env);
+		say(`OpenCode ${found.version} is ${found.command}: isorite term uses it from now on`);
+		return 0;
+	} catch (e) {
+		say(e.message);
+		return 1;
+	}
+}
+/** OpenCode 2, or, when there's none and a person is at the terminal, the offer to install it for isorite alone. */
+async function openCodeFor(env) {
+	try {
+		return findOpenCode(env);
+	} catch (e) {
+		if (!(e instanceof NoOpenCode) || env.ISORITE_OPENCODE || !process.stdin.isTTY || !process.stdout.isTTY) throw e;
+		console.error(e.message);
+		const ask = createInterface({
+			input: process.stdin,
+			output: process.stdout
+		});
+		const yes = /^y(es)?$/i.test((await ask.question(`Install OpenCode 2 for isorite only, in ${ownPrefix(env)}? [y/N] `)).trim());
+		ask.close();
+		if (!yes || installOpenCode(env) !== 0) throw new StudyError("isorite term needs OpenCode 2");
+		return findOpenCode(env);
+	}
+}
 async function term(path, { port = 4767, cwd = process.cwd(), env: given = process.env, wait = 12e4, onServer } = {}) {
-	const opencode = findOpenCode(given);
+	const opencode = await openCodeFor(given);
 	const server = await ensureServer(path, {
 		port,
 		env: given,
@@ -9207,7 +9717,6 @@ async function term(path, { port = 4767, cwd = process.cwd(), env: given = proce
 	}
 	const { gateway, env } = models;
 	const said = where(port, models, given, void 0, new URL(server.url).pathname.replace(/\/?$/, "/"));
-	for (const line of said) console.log(line);
 	const agents = path === void 0 ? null : join(locate(path).notes, AGENTS_FILE);
 	const home = writeHome(defaultHome(env), {
 		gateway,
@@ -9229,6 +9738,8 @@ async function term(path, { port = 4767, cwd = process.cwd(), env: given = proce
 		server.release();
 		throw e;
 	}
+	if (await asksPassword(`${backend.url}/api/session`)) said.push(`  OpenCode's own web page (port ${new URL(backend.url).port}) asks for a password: don't open it. isorite's page is above, and /web in the terminal opens it`);
+	for (const line of said) console.log(line);
 	await tell(server.url, "/api/terminal/attach", {
 		url: backend.url,
 		password: backend.password,
@@ -9295,6 +9806,7 @@ const READ = [
 	"SSH_CONNECTION",
 	"ISORITE_EMBED",
 	"ISORITE_EMBED_DIR",
+	"ISORITE_MODEL_BASE_URL",
 	"XDG_DATA_HOME",
 	"XDG_CACHE_HOME"
 ];
@@ -9341,7 +9853,10 @@ async function checkProvider(p, h, key, say) {
 			const missing = models.filter((m) => !listed.includes(m));
 			say("reached", "ok", `${to.url.replace(/\?.*$/, "")} answered with ${listed.length} models`);
 			if (listed.length && missing.length) say("models", "fail", `${missing.join(", ")} not among them; it has ${listed.slice(0, 12).join(", ")}${listed.length > 12 ? ", …" : ""}. Name its models under [tiers]`);
-		} else say("reached", res.status === 401 || res.status === 403 ? "fail" : "ok", res.status === 401 || res.status === 403 ? `it said ${res.status} to the list of models: the key${p.keyHeader ? "" : ", or the header it goes in (key_header)"}, or a header it wants (headers), is not accepted` : `it answered (${res.status} for the list of models, which some gateways don't have)`);
+		} else if (res.status === 401 || res.status === 403) {
+			const said = refusal(await res.text().catch(() => ""), key);
+			say("reached", "fail", `it said ${res.status} to the list of models${said ? `: “${said}”` : ""}. The key${key ? `, sent as ${keySentAs(p, key)},` : ""} or a header it wants (headers), is not accepted: check key_header and key_prefix`);
+		} else say("reached", "ok", `it answered (${res.status} for the list of models, which some gateways don't have)`);
 	} catch (e) {
 		reached = false;
 		say("reached", "fail", unreachable(e, p.url));
@@ -9401,7 +9916,7 @@ async function doctor(folder, o = {}) {
 		const tls = gatewayTls(path, env);
 		http ??= gatewayHttp(provider, tls, env);
 		if (existsSync(path)) say("config", "ok", `${path}: ${provider.name} at ${provider.url}`);
-		say("key", key ? "ok" : tls ? "warn" : "fail", key ? `${hidden(key)}, sent ${provider.keyHeader ? `in ${provider.keyHeader}` : "as Authorization: Bearer"}` : tls ? "none; the client certificate alone is sent" : "none: set one in Iso's settings, or as key under [provider]");
+		say("key", key ? "ok" : tls ? "warn" : "fail", key ? `sent as ${keySentAs(provider, key)}${provider.keyHeader?.toLowerCase() === "authorization" && provider.keyPrefix === void 0 ? ` (key_header = "${provider.keyHeader}" alone means Bearer since 0.9.0; key_prefix = "" sends it bare)` : ""}` : tls ? "none; the client certificate alone is sent" : "none: set one in Iso's settings, or as key under [provider]");
 		if (tls) say("certificate", "ok", `${tls.files.join(", ")}${tls.pfx || tls.cert ? "" : " (an authority only, no client certificate)"}`);
 		const tiers = `low ${provider.tiers.low}, mid ${provider.tiers.mid}, max ${provider.tiers.max}`;
 		say("models", provider.defaultTiers ? "warn" : "ok", provider.defaultTiers ? `${tiers}: OpenRouter's names, kept because [tiers] names none for ${provider.name}; a gateway usually calls its models otherwise` : tiers);
@@ -9427,11 +9942,21 @@ async function doctor(folder, o = {}) {
 		if (!o.report) out(`  asking ${p.name}: its models, then ${models.length + 1} replies of a few words (a few hundred tokens in all)`);
 		await checkProvider(p, h, key, say);
 	}
+	const began = Date.now(), git = spawnSync(o.git ?? "git", ["--version"], {
+		encoding: "utf8",
+		env,
+		timeout: 3e3,
+		killSignal: "SIGKILL"
+	});
+	const took = Date.now() - began;
+	if (git.error && git.error.code === "ENOENT") say("git", "skip", "not found: isorite doesn't need it; OpenCode works without it, as a folder that isn't a repository");
+	else if (git.status !== 0 || took >= 3e3) say("git", "warn", `git --version ${took >= 3e3 ? "didn't answer in 3 s" : `failed after ${took} ms`}: likely a wrapper (a company's) that waits on the network. isorite no longer waits on git to start; OpenCode may, and isorite term then says it's waiting for OpenCode's server`);
+	else say("git", took > 1e3 ? "warn" : "ok", `${git.stdout.trim()}, in ${took} ms${took > 1e3 ? ": slow, likely a wrapper; OpenCode may wait on it as it starts" : ""}`);
 	try {
 		const found = findOpenCode(env, o.probe);
-		say("opencode", "ok", `${found.command} ${found.version}`);
+		say("opencode", "ok", `${found.command} ${found.version}${found.from === "the PATH" ? "" : ` (${found.from})`}`);
 	} catch (e) {
-		say("opencode", "warn", e.message.replace(/\n\s*/g, " "));
+		say("opencode", e instanceof NoOpenCode && e.old ? "fail" : "warn", e.message.replace(/\n\s*/g, " "));
 	}
 	const port = o.port ?? 4767, url = `http://127.0.0.1:${port}`, served = await serving(url);
 	say("port", "ok", served === null ? `${port} is free: isorite term starts a server there` : `${port} is isorite's, serving ${served}`);
@@ -9449,6 +9974,12 @@ async function doctor(folder, o = {}) {
 		known = false;
 	}
 	say("terminal", known ? "ok" : "warn", terminal);
+	const hint = "isorite term also runs OpenCode's own web server, on a port of its own, which asks for a password: open isorite's pages and panes (/web in the terminal), not OpenCode's";
+	if (served === null) say("browser pages", "ok", hint);
+	else {
+		const asking = (await Promise.all([`${url}/`, `${url}/api/session`].map(async (at) => await asksPassword(at) ? at : null))).filter(Boolean);
+		say("browser pages", asking.length ? "fail" : "ok", asking.length ? `${asking.join(" and ")} asked for a password (401, Basic): that is not isorite's server; stop it, or give isorite another port (--port <n>)` : `isorite's pages at ${url}/ ask for no password. ${hint}`);
+	}
 	if (env.SSH_CONNECTION) say("browser", "ok", `over SSH: on your own machine, ssh -L ${port}:localhost:${port} <this host>, then http://localhost:${port}/`);
 	let model = null;
 	if (env.ISORITE_EMBED === "off") say("search by meaning", "skip", "switched off (ISORITE_EMBED=off)");
@@ -9460,7 +9991,23 @@ async function doctor(folder, o = {}) {
 			say("search by meaning", "fail", `${dir}: ${e.message}`);
 		}
 		if (model) say("search by meaning", "ok", `${model.name} at ${model.dir}`);
-		else if (!dir) say("search by meaning", "warn", `no model in ${modelPlaces(env).map((p) => p.dir).join(" or ")}: isorite model fetches it (53 MB). Search by words works without it`);
+		else if (!dir) {
+			let reach = "";
+			if (!o.offline) {
+				const from = mirrorOf(env) ?? RELEASE;
+				try {
+					const res = await fetch(from, {
+						method: "HEAD",
+						redirect: "follow",
+						signal: AbortSignal.timeout(1e4)
+					});
+					reach = res.ok ? ` ${from} answers from here.` : ` ${from} said ${res.status}.`;
+				} catch (e) {
+					reach = ` ${from} can't be reached from here: ${unreachable(e, from)}.`;
+				}
+			}
+			say("search by meaning", "warn", `no model in ${modelPlaces(env).map((p) => p.dir).join(" or ")}: isorite model fetches it (53 MB).${reach} By hand: ${mirrorOf(env) ?? RELEASE} (SHA-256 ${RELEASE_SHA256}), then isorite model --from <that file>. Search by words works without it`);
+		}
 	}
 	if (folder) try {
 		const { notes } = locate(folder);
@@ -9538,7 +10085,8 @@ function proxied(env, execArgv = process.execArgv) {
 }
 /** Run this command again with `env`, its input and output its own; its exit code. */
 function rerun(env, argv = process.argv, execArgv = process.execArgv) {
-	const child = spawn(process.execPath, [...execArgv, ...argv.slice(1)], {
+	const again = self(argv[1], argv.slice(2), execArgv);
+	const child = spawn(again.command, again.args, {
 		stdio: "inherit",
 		env
 	});
@@ -9746,7 +10294,7 @@ async function mcp(path, { port = 4767, agent = "mcp", quiet = QUIET_MS, input =
 		}
 		throw Object.assign(/* @__PURE__ */ new Error(`no method ${rpc.method}`), { code: -32601 });
 	};
-	const lines = createInterface({
+	const lines = createInterface$1({
 		input,
 		crlfDelay: Infinity
 	});
@@ -10829,6 +11377,19 @@ const finderHttp = (pace = 0) => scriptedHttp(finderAnswer, pace);
 //#region packages/guide/src/node.ts
 /** In a checkout, the package's notes/; in the npm package, where this is bundled into dist/, the guide/ beside it. */
 const GUIDE_DIR = [join(import.meta.dirname, "..", "guide"), join(import.meta.dirname, "..", "notes")].find((d) => existsSync(join(d, "start-here.md"))) ?? join(import.meta.dirname, "..", "notes");
+/** The guide's pictures (M22), by path, as bytes. */
+function loadGuidePictures(dir = GUIDE_DIR) {
+	const out = {};
+	const visit = (at) => {
+		for (const name of readdirSync(at)) {
+			const path = join(at, name);
+			if (statSync(path).isDirectory()) visit(path);
+			else if (/\.(png|jpe?g|gif|svg|webp|avif)$/i.test(name)) out[relative(dir, path).split(sep).join("/")] = new Uint8Array(readFileSync(path));
+		}
+	};
+	visit(dir);
+	return out;
+}
 /** The guide's files as they stand in the package: its notes and its AGENTS.md, by path. */
 function loadGuide(dir = GUIDE_DIR) {
 	const out = {};
@@ -10856,7 +11417,7 @@ function writeGuide(folder) {
 		fresh: false
 	};
 	if (existsSync(at) && readdirSync(at).some((f) => f !== ".isorite")) throw new StudyError(`${at} has files in it that are not the guide: name another folder, isorite guide <folder>`);
-	for (const [path, text] of Object.entries(loadGuide())) {
+	for (const [path, text] of [...Object.entries(loadGuide()), ...Object.entries(loadGuidePictures())]) {
 		mkdirSync(dirname(join(at, path)), { recursive: true });
 		writeFileSync(join(at, path), text);
 	}
@@ -10905,8 +11466,21 @@ async function writeExample(folder, now = Date.now()) {
 		mkdirSync(dirname(at), { recursive: true });
 		writeFileSync(at, text);
 	}
+	copyPictures(NOTES_DIR, notes);
 	return { notes };
 }
+/** The pictures among a folder's notes (M22), copied as they are: they have no history. */
+function copyPictures(from, to, dir = from) {
+	for (const name of readdirSync(dir)) {
+		const path = join(dir, name);
+		if (statSync(path).isDirectory()) copyPictures(from, to, path);
+		else if (citeKind(name) === "image") {
+			const at = join(to, relative(from, path));
+			mkdirSync(dirname(at), { recursive: true });
+			copyFileSync(path, at);
+		}
+	}
+}
 const GEOMETRY_DIR = join(import.meta.dirname, "..", "geometry");
 /** The geometry example's notes, and the code beside them, as they stand today, by path. */
 function loadGeometry(dir = GEOMETRY_DIR) {
@@ -11037,7 +11611,8 @@ init_model();
 const USAGE = `isorite: an agentic harness for understanding
 
   isorite new <folder>                   start a knowledge base: the folder, empty, with isorite's .isorite/
-  isorite check <notes>                  check a folder of notes: frontmatter, links, cycles
+  isorite check <notes> [--unused]       check a folder of notes: frontmatter, links, cycles; --unused lists
+                                         the pictures no note shows
   isorite serve <notes> [--port <n>] [--allow-host <name>]
                                          open it in the browser, on this machine only
   isorite migrate <study base> [--merge] move a study base (format 1) into its notes' .isorite/; exercises
@@ -11051,9 +11626,13 @@ const USAGE = `isorite: an agentic harness for understanding
   isorite mcp [<notes>] [--port <n>] [--agent <name>]
                                          the knowledge base's tools over MCP, on stdio, for Claude Code or Pi:
                                          claude mcp add isorite -- isorite mcp <base> --agent claude-code
-  isorite model [--from <folder>]        the model for search by meaning: which is installed, and where; else
-                                         fetched (53 MB, once) from npm, GitHub or Hugging Face; or from a
+  isorite model [--from <folder|.tgz>] [--url <url>]
+                                         the model for search by meaning: which is installed, and where; else
+                                         fetched (53 MB, once) from ISORITE_MODEL_BASE_URL, npm, GitHub or
+                                         Hugging Face, or --url alone; or from the .tgz fetched by hand, or a
                                          folder: its files copied there, or any compatible model
+  isorite opencode                       OpenCode 2 for isorite term, installed in isorite's own folder
+                                         (~/.config/isorite/opencode-cli), the global one left as it is
   isorite doctor [<notes>] [--report] [--offline]
                                          whether isorite can work here: the configuration, the network, the
                                          provider (asked a few words, a few hundred tokens), the terminal and
@@ -11070,7 +11649,7 @@ const USAGE = `isorite: an agentic harness for understanding
                                          the browser; run again, as you left it. Iso is your model, or with
                                          none set up, the guide's finder (also: isorite --tutorial)
 `;
-function check(notes, out = console.log) {
+function check(notes, out = console.log, unused = false) {
 	const root = resolve(notes);
 	if (!existsSync(root) || !statSync(root).isDirectory()) {
 		out(`no folder at ${root}`);
@@ -11081,12 +11660,18 @@ function check(notes, out = console.log) {
 	for (const c of cycles) out(`warning requires cycle: ${c.join(" -> ")}`);
 	const errors = issues.filter((i) => i.level === "error").length;
 	out(`${bundle.concepts.size} notes in ${bundle.directories.size} folders; ${errors} errors, ${issues.length - errors} warnings, ${cycles.length} requires cycles`);
+	if (unused) {
+		const cited = new Set([...bundle.concepts.values()].flatMap((c) => c.cites.map((x) => x.target)));
+		const idle = [...bundle.files].filter((f) => citeKind(f) === "image" && !cited.has(f)).sort();
+		for (const f of idle) out(`unused  ${f}`);
+		out(idle.length ? `${idle.length} ${idle.length === 1 ? "picture" : "pictures"} no note shows` : "every picture is shown by a note");
+	}
 	return errors ? 1 : 0;
 }
 function main(argv) {
 	const [command, ...rest] = argv;
 	try {
-		if (command === "check" && rest[0]) return check(rest[0]);
+		if (command === "check" && rest.find((r) => !r.startsWith("--"))) return check(rest.find((r) => !r.startsWith("--")), console.log, rest.includes("--unused"));
 		if (command === "new" && rest[0]) {
 			const made = newBase(rest[0]);
 			console.log(`${made}: a knowledge base, empty. Open it in the browser, or beside your code in the terminal:\n  isorite serve ${made}\n  cd <your code> && isorite term ${made}`);
@@ -11151,13 +11736,18 @@ function main(argv) {
 			});
 		}
 		if (command === "model") {
-			const from = rest[rest.indexOf("--from") + 1];
+			const from = rest[rest.indexOf("--from") + 1], url = rest[rest.indexOf("--url") + 1];
 			if (rest.includes("--from") && !from) {
-				console.error("--from takes a folder");
+				console.error("--from takes a folder, or the model's .tgz");
+				return 2;
+			}
+			if (rest.includes("--url") && !/^https?:\/\//.test(url ?? "")) {
+				console.error("--url takes the address of the model's .tgz");
 				return 2;
 			}
-			return modelCommand(rest.includes("--from") ? from : void 0);
+			return modelCommand(rest.includes("--from") ? from : void 0, console.log, process.env, {}, rest.includes("--url") ? url : void 0);
 		}
+		if (command === "opencode") return installOpenCode();
 		if (command === "memory") return memory(rest.find((a) => !a.startsWith("--")));
 		if (command === "bases") return bases(rest);
 		if (command === "--version" || command === "-v") {
@@ -11232,16 +11822,19 @@ function starting(argv, env = process.env, write = (s) => process.stderr.write(s
 	write("isorite: starting…\n");
 	return true;
 }
-if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(resolve(process.argv[1]))).href) {
-	starting(process.argv.slice(2));
+/** The command as run: said to be starting, the proxy turned on (running itself again), the system's authorities
+*  trusted; its exit code. The single executable calls this (M21). */
+async function run(argv) {
+	starting(argv);
 	delete process.env.ISORITE_STARTING;
 	const env = proxied(process.env);
-	if (env) process.exit(await rerun({
+	if (env) return rerun({
 		...env,
 		ISORITE_STARTING: "1"
-	}));
+	});
 	trustSystem();
-	process.exit(await main(process.argv.slice(2)));
+	return main(argv);
 }
+if (!single() && process.argv[1] && import.meta.url === pathToFileURL(realpathSync(resolve(process.argv[1]))).href) process.exit(await run(process.argv.slice(2)));
 //#endregion
-export { check, main, starting };
+export { check, main, run, starting };