vde-open 0.1.8 → 0.1.10

package/README.md

@@ -28,7 +28,7 @@ To install from a clone of this repository (Node.js 24.21.0 is pinned in `mise.t
 pnpm install --frozen-lockfile
 pnpm build
 pnpm test:pack                                   # builds artifacts/vde-open-<version>.tgz and verifies an install in a separate directory
-bun add -g "$PWD/artifacts/vde-open-0.1.8.tgz"   # bun add -g needs an absolute path
+bun add -g "$PWD/artifacts/vde-open-0.1.10.tgz"   # bun add -g needs an absolute path
 ```
 
 ## `vde-open` and `vo`
@@ -45,7 +45,7 @@ Installing never overwrites or removes an existing `vo` (another tool's command,
 ```bash
 vo open README.md docs/design.md        # open documents (starts the daemon if needed)
 vo open docs -w                          # open a directory and follow new documents
-vo ui                                    # open the management UI (one-time URL)
+vo ui                                    # open the management UI (no authentication)
 vo list --json                           # list open documents
 vo search "authentication design" --json # search open documents
 vo read <documentId> --section sec_0003 --json   # read a section
@@ -53,6 +53,8 @@ vo close docs/design.md                  # remove from the list (the file is not
 vo daemon stop                           # stop the daemon
 ```
 
+The management UI does not require authentication. The URL printed by `vo ui --print-url` can be copied to another browser or tab on the same machine while the daemon is running. URLs that select a document work directly too. Both listeners bind to `127.0.0.1`; viewing from another machine is not supported.
+
 For how agents search, read, and ask questions, see [docs/agent-usage.md](docs/agent-usage.md).
 
 ## Agent skill
@@ -80,7 +82,13 @@ ln -s ~/.bun/install/global/node_modules/vde-open/skills/vde-open ~/.codex/skill
 - Scripts run only in HTML opened with `--html-mode interactive`. Use it only with HTML that you or the agent prepared and trust: scripts can load only registered files and cannot reach the management UI, the management API, or other files, but this does not block every outbound request (navigation inside the view, for example). After the daemon restarts, the HTML is static until you allow scripts again in the management UI.
 - "Differences from the original document" in the management UI lists what the view changed, why, and what to do.
 
-## Markdown display limits
+## Markdown display
+
+Use "Color palette" in the management header to choose Standard (the default), GitHub, Gruvbox, Catppuccin, or GitHub High Contrast. Light, Dark, and Match OS setting are separate controls. Both preferences are saved in the browser. The palette applies to the management UI and Markdown, including code highlighting; HTML keeps its own styling and PDFs keep their print styling.
+
+"Wide view" in the document header expands Markdown to the available width. Press it again to return to the standard width. The width preference is saved in the browser. Tables keep their column widths and scroll horizontally when they do not fit. To scroll with the keyboard, focus the table and press the left or right arrow key.
+
+### Display limits
 
 Markdown is rendered with TanStack Markdown 1.0.0. It is not fully compatible with CommonMark or GFM.
 
@@ -125,7 +133,7 @@ The person answers in the answer panel of the management UI. The answers are sub
 | Symptom | What to do |
 |---|---|
 | `vo` runs a different command | Use `vde-open`, or check the order of `PATH` |
-| The management UI asks you to open it again from the CLI | Open a new URL with `vo ui` (each URL works once; after the daemon restarts, earlier windows stop working) |
+| An earlier URL stops working after the daemon restarts | Open the current URL with `vo ui` (the port may change on restart) |
 | Exit code 8 (cannot connect to or start the daemon) | Check with `vo daemon status`, and look for leftover files with `vo doctor` |
 | Images or CSS are not shown | Open "Differences from the original document" and register them with `--assets-root` or `--asset` |
 | Search does not find a document | Check with `vo list --json` that the document is open and its `searchState` is `ready` |
@@ -137,7 +145,7 @@ The person answers in the answer panel of the management UI. The answers are sub
 |---|---|
 | Linux and macOS on CI (GitHub Actions `ubuntu-latest` and `macos-latest`, Node.js 24.21.0) | Verified (format, lint, typecheck, unit/integration, build, pack, e2e; `.github/workflows/ci.yml`) |
 | Windows on CI (`windows-latest`, Node.js 24.21.0) | Verified: build, pack smoke (install, both bins, IPC, starting and stopping the daemon, JSON output, the UI and workers), and the daemon and document integration tests. The other unit and integration tests and the e2e tests are not run on Windows |
-| Browsers | Chromium (Playwright's Chrome Headless Shell): the full suite is verified. Firefox and WebKit (Playwright 1.63.0): the view isolation, CSP, HTML bridge, and authentication tests (`pnpm test:e2e:cross`) are verified. Other UI interactions in Firefox and WebKit (search, answer panel, narrow screens, a list of 1,000 documents) are not verified |
+| Browsers | Chromium (Playwright's Chrome Headless Shell): the full suite is verified. Firefox and WebKit (Playwright 1.63.0): the view isolation, CSP, HTML bridge, and direct URL tests (`pnpm test:e2e:cross`) are verified. Other UI interactions in Firefox and WebKit (search, answer panel, narrow screens, a list of 1,000 documents) are not verified |
 | PDF export | macOS (development machine): verified with Google Chrome 154 and Microsoft Edge 154. Linux on CI: verified with the runner's Google Chrome (e2e). Windows: printing with a real browser is not verified (the pack smoke test checks rendering the print document) |
 
 More details: [docs/performance.md](docs/performance.md) (measurements), [docs/architecture.md](docs/architecture.md) and [docs/security-model.md](docs/security-model.md) (design). Development records (in Japanese): [docs/implementation-status.md](docs/implementation-status.md), [docs/dependency-validation.md](docs/dependency-validation.md), and [docs/adr/](docs/adr/).
@@ -156,7 +164,7 @@ cd ../..
 pnpm build:watch
 ```
 
-`build:watch` rebuilds when the sources, the build configuration, or the packaged files change; a failed build keeps the last successful output. The next linked CLI invocation uses the new build, but the watcher does not restart your daemon: run `vo daemon restart`, then `vo ui`. Restarting keeps registered documents and saved answers, but changes the UI address and invalidates earlier browser sessions and interactive HTML permissions.
+`build:watch` rebuilds when the sources, the build configuration, or the packaged files change; a failed build keeps the last successful output. The next linked CLI invocation uses the new build, but the watcher does not restart your daemon: run `vo daemon restart`, then `vo ui`. Restarting keeps registered documents and saved answers, but changes the UI address and invalidates earlier render grants and interactive HTML permissions.
 
 For frequent UI changes, use `pnpm dev` instead. It runs the daemon from source with a separate `.dev-home` and serves the UI with Vite HMR. It does not rebuild the linked CLI or restart the backend when its source changes. To run CLI commands against it, set `VDE_OPEN_HOME` to the absolute path of `.dev-home` (for example, `VDE_OPEN_HOME="$PWD/.dev-home" vo list` from the repository root).
 

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as decodeStateFile, D as daemonEntryPath, E as resolveStateRoot, O as referencedBlobs, S as renameWithRetry, T as resolveRuntimeLocation, a as DAEMON_LOCK_NAME, b as proofMatches, c as readIpcKey, d as inspectOwner, f as readCurrentLock, g as encodeFrame, h as FrameDecoder, i as requirePrivateDirectoryIfExists, k as version, l as readPointer, m as systemProcessProbe, n as ensurePrivateDirectory, o as POINTER_FILE, p as releaseLock, r as inspectPrivateDirectory, s as START_LOCK_NAME, t as startDaemon, u as acquireLock, v as computeProof, w as currentPathEnvironment, x as removeWithRetry, y as createNonce } from "./main-001DhaNk.js";
-import { A as successEnvelope, C as VdeError, D as ExitCode, E as isVdeError, O as envelopeSchema, T as isErrorCode, Y as LIMITS, k as errorEnvelope, w as exitCodeForError } from "./search-index-B7DqaWh6.js";
+import { C as decodeStateFile, D as daemonEntryPath, E as resolveStateRoot, O as referencedBlobs, S as renameWithRetry, T as resolveRuntimeLocation, a as DAEMON_LOCK_NAME, b as proofMatches, c as readIpcKey, d as inspectOwner, f as readCurrentLock, g as encodeFrame, h as FrameDecoder, i as requirePrivateDirectoryIfExists, k as version, l as readPointer, m as systemProcessProbe, n as ensurePrivateDirectory, o as POINTER_FILE, p as releaseLock, r as inspectPrivateDirectory, s as START_LOCK_NAME, t as startDaemon, u as acquireLock, v as computeProof, w as currentPathEnvironment, x as removeWithRetry, y as createNonce } from "./main-BI-4X6_3.js";
+import { A as successEnvelope, C as VdeError, D as ExitCode, E as isVdeError, O as envelopeSchema, T as isErrorCode, Y as LIMITS, k as errorEnvelope, w as exitCodeForError } from "./search-index-NiN4l6Hg.js";
 import fs, { fstatSync } from "node:fs";
 import { lstat, readFile, readdir, stat as stat$1, writeFile } from "node:fs/promises";
 import path, { join, resolve } from "node:path";
@@ -3815,23 +3815,22 @@ async function runCli(rawArgv, context) {
 		}
 	};
 	const openBrowser = async (connection) => {
-		const { data } = unwrap(await connection.request("ui.bootstrap", {}));
-		if (await browser.open(data.bootstrapUrl)) return [];
+		const { data } = unwrap(await connection.request("daemon.status", {}));
+		if (await browser.open(data.uiUrl ?? "")) return [];
 		return [{
 			code: "W_BROWSER_OPEN_FAILED",
 			message: "The browser could not be opened. Open the URL shown by `vde-open ui --print-url` in your browser.",
 			details: { uiUrl: data.uiUrl }
 		}];
 	};
-	const showUi = async (printUrl) => {
+	const showUi = async (printUrl, json = false) => {
 		const connection = await control.ensure();
 		try {
 			if (printUrl) {
-				const { data } = unwrap(await connection.request("ui.bootstrap", {}));
-				context.stderr("This URL contains a one-time secret valid for 60 seconds. Do not share it.\n");
-				context.stdout(`${data.bootstrapUrl}\n`);
+				const { data } = unwrap(await connection.request("daemon.status", {}));
+				if (!json) context.stdout(`${data.uiUrl ?? ""}\n`);
 				return { data: {
-					uiUrl: data.uiUrl,
+					uiUrl: data.uiUrl ?? "",
 					opened: false
 				} };
 			}
@@ -4051,12 +4050,8 @@ async function runCli(rawArgv, context) {
 	watchCommand.command("remove").description("Remove a watch rule. Open documents stay open").argument("<watchId>", "Watch rule ID").option("--json", "Output the result as JSON", false).action(async (watchId, options) => {
 		await execute("watch.remove", options.json, () => viaDaemon("watch.remove", { watchId }), renderRules);
 	});
-	program.command("ui").description("Open the management UI in the browser").option("--print-url", "Print a one-time URL instead of opening the browser", false).option("--json", "Output the result as JSON", false).action(async (options) => {
-		if (options.printUrl && options.json) {
-			fail(new VdeError("E_INVALID_ARGUMENT", "--print-url cannot be combined with --json because its output contains a secret."), true);
-			return;
-		}
-		await execute("ui", options.json, () => showUi(options.printUrl), () => "");
+	program.command("ui").description("Open the management UI in the browser").option("--print-url", "Print the UI URL instead of opening the browser", false).option("--json", "Output the result as JSON", false).action(async (options) => {
+		await execute("ui", options.json, () => showUi(options.printUrl, options.json), () => "");
 	});
 	const renderStatus = (status) => status.state === "running" ? `running  pid=${String(status.pid)}  open documents: ${String(status.openDocuments)}  ${status.uiUrl ?? ""}` : "stopped";
 	const daemon = program.command("daemon").description("Start, inspect, and stop the daemon");

package/dist/daemon.js

@@ -1,5 +1,5 @@
-import { k as version, t as startDaemon, w as currentPathEnvironment } from "./main-001DhaNk.js";
-import { E as isVdeError } from "./search-index-B7DqaWh6.js";
+import { k as version, t as startDaemon, w as currentPathEnvironment } from "./main-BI-4X6_3.js";
+import { E as isVdeError } from "./search-index-NiN4l6Hg.js";
 //#region src/daemon.ts
 function notifyParent(message) {
 	if (!process.send) return;

package/dist/{main-001DhaNk.js → main-BI-4X6_3.js}

@@ -1,5 +1,5 @@
 import { C as roleAllowed, N as __commonJSMin, P as __toESM, S as isValidLogicalPath, _ as classifyLink, b as encodeLogicalPath, d as analyzeDocument, g as assetTypeOf, u as ParseLimitError, v as classifyReference, x as hasHiddenSegment, y as dirnameOfLogicalPath } from "./html-static-BDV6MgA7.js";
-import { $ as literal, A as successEnvelope, B as readParamsSchema, C as VdeError, D as ExitCode, E as isVdeError, F as htmlModeChangeParamsSchema, G as sha256Schema, H as reorderParamsSchema, I as htmlModeSchema, J as watchRuleSchema, K as sourceKindSchema, L as linkOpenParamsSchema, M as closeParamsSchema, N as documentFormatSchema, P as documentIdSchema, Q as boolean, R as listParamsSchema, S as validateAnswers, U as revisionSchema, V as renderGrantParamsSchema, W as searchParamsSchema, X as _enum, Y as LIMITS, Z as array, _ as feedbackWaitParamsSchema, a as uniqueTokens, at as canonicalJson, b as submissionSchema, c as feedbackAckParamsSchema, d as feedbackDraftParamsSchema, et as number, f as feedbackForgetParamsSchema, g as feedbackSubmitParamsSchema, h as feedbackStatusSchema, i as codePointLength, it as ZodError, j as assetRecordSchema, k as errorEnvelope, l as feedbackCancelParamsSchema, m as feedbackListParamsSchema, n as batchesOf, nt as strictObject, o as answersSchema, p as feedbackIdParamsSchema, q as sourceStateSchema, r as partsOf, rt as string, s as cancellationSchema, tt as record, u as feedbackCreateParamsSchema, v as questionnaireSchema, w as exitCodeForError, x as utf8Length, y as requestIdSchema, z as openParamsSchema } from "./search-index-B7DqaWh6.js";
+import { $ as literal, A as successEnvelope, B as readParamsSchema, C as VdeError, D as ExitCode, E as isVdeError, F as htmlModeChangeParamsSchema, G as sha256Schema, H as reorderParamsSchema, I as htmlModeSchema, J as watchRuleSchema, K as sourceKindSchema, L as linkOpenParamsSchema, M as closeParamsSchema, N as documentFormatSchema, P as documentIdSchema, Q as boolean, R as listParamsSchema, S as validateAnswers, U as revisionSchema, V as renderGrantParamsSchema, W as searchParamsSchema, X as _enum, Y as LIMITS, Z as array, _ as feedbackWaitParamsSchema, a as uniqueTokens, at as canonicalJson, b as submissionSchema, c as feedbackAckParamsSchema, d as feedbackDraftParamsSchema, et as number, f as feedbackForgetParamsSchema, g as feedbackSubmitParamsSchema, h as feedbackStatusSchema, i as codePointLength, it as ZodError, j as assetRecordSchema, k as errorEnvelope, l as feedbackCancelParamsSchema, m as feedbackListParamsSchema, n as batchesOf, nt as strictObject, o as answersSchema, p as feedbackIdParamsSchema, q as sourceStateSchema, r as partsOf, rt as string, s as cancellationSchema, tt as record, u as feedbackCreateParamsSchema, v as questionnaireSchema, w as exitCodeForError, x as utf8Length, y as requestIdSchema, z as openParamsSchema } from "./search-index-NiN4l6Hg.js";
 import { n as scanReferences, r as extractTitle } from "./render-BX3arVZj.js";
 import { n as measureHeap, t as collectGarbage } from "./heap-C3qHm7SE.js";
 import { accessSync, constants, existsSync, stat, statSync, unwatchFile, watch, watchFile } from "node:fs";
@@ -154,7 +154,7 @@ function parseStrictJson(text) {
 }
 //#endregion
 //#region package.json
-var version = "0.1.8";
+var version = "0.1.10";
 //#endregion
 //#region src/documents/cursor.ts
 function invalidCursor(reason) {
@@ -6900,12 +6900,9 @@ function decodeUtf8(bytes) {
 	}
 }
 function createRenderService(options) {
-	const { store, documents, sessions, parse } = options;
+	const { store, documents, parse } = options;
 	const grants = /* @__PURE__ */ new Map();
 	const snapshots = /* @__PURE__ */ new Map();
-	sessions.onAnyRevoke((sessionId) => {
-		for (const [key, grant] of grants) if (grant.sessionId === sessionId) grants.delete(key);
-	});
 	const snapshotOf = async (documentId, revision, mode = "static", withSdk = false) => {
 		const { record, entry } = documents.describeRevision(documentId, revision);
 		const cacheKey = `${entry.revision}\n${entry.documentLogicalPath}\n${mode}\n${String(withSdk)}`;
@@ -7004,14 +7001,13 @@ function createRenderService(options) {
 	const liveGrant = (key) => {
 		const grant = grants.get(key);
 		if (!grant) return null;
-		const record = documents.state.documents[grant.documentId];
-		if (!sessions.isActiveId(grant.sessionId) || !record?.isOpen || documents.openEpoch(grant.documentId) !== grant.openEpoch || grant.mode === "interactive" && documents.interactiveGeneration(grant.documentId) !== grant.permission) {
+		if (!documents.state.documents[grant.documentId]?.isOpen || documents.openEpoch(grant.documentId) !== grant.openEpoch || grant.mode === "interactive" && documents.interactiveGeneration(grant.documentId) !== grant.permission) {
 			grants.delete(key);
 			return null;
 		}
 		return grant;
 	};
-	const issue = async (sessionId, params, context) => {
+	const issue = async (params, context) => {
 		const interactive = params.mode === "interactive";
 		const permissionOf = () => {
 			if (!interactive) return null;
@@ -7054,7 +7050,6 @@ function createRenderService(options) {
 		}
 		const key = randomBytes(32).toString("base64url");
 		grants.set(key, {
-			sessionId,
 			documentId: record.documentId,
 			openEpoch,
 			revision: entry.revision,
@@ -7064,8 +7059,11 @@ function createRenderService(options) {
 			bridge,
 			missing: /* @__PURE__ */ new Set()
 		});
-		const owned = [...grants].filter(([, grant]) => grant.sessionId === sessionId);
-		for (const [oldKey] of owned.slice(0, Math.max(0, owned.length - LIMITS.renderGrantsPerSession))) grants.delete(oldKey);
+		while (grants.size > LIMITS.renderGrants) {
+			const oldest = grants.keys().next().value;
+			if (oldest === void 0) break;
+			grants.delete(oldest);
+		}
 		const filesBaseUrl = `${options.previewOrigin()}/r/${key}/files/`;
 		return {
 			grant: key,
@@ -7100,14 +7098,14 @@ function createRenderService(options) {
 				snapshots: snapshots.size
 			};
 		},
-		async createGrant(sessionId, rawParams, context) {
+		async createGrant(rawParams, context) {
 			const params = renderGrantParamsSchema.parse(rawParams);
-			return issue(sessionId, {
+			return issue({
 				...params,
 				requestId: null
 			}, context);
 		},
-		async createGrantForRequest(sessionId, requestId, context) {
+		async createGrantForRequest(requestId, context) {
 			const request = Object.hasOwn(store.payload.feedbackRequests, requestId) ? store.payload.feedbackRequests[requestId] : void 0;
 			if (!request) throw new VdeError("E_REQUEST_NOT_FOUND", "The question was not found.", { requestId });
 			if (request.status !== "pending") throw new VdeError("E_REQUEST_NOT_PENDING", "The question is not pending.", {
@@ -7115,16 +7113,16 @@ function createRenderService(options) {
 				status: request.status
 			});
 			const interactive = request.renderMode === "interactive" && documents.interactiveAllowed(request.documentId);
-			return issue(sessionId, {
+			return issue({
 				documentId: request.documentId,
 				revision: request.revision,
 				mode: interactive ? "interactive" : "static",
 				requestId: interactive ? request.requestId : null
 			}, context);
 		},
-		bridgeOf(sessionId, key) {
+		bridgeOf(key) {
 			const grant = liveGrant(key);
-			if (!grant?.bridge || grant.sessionId !== sessionId) return null;
+			if (!grant?.bridge) return null;
 			if (store.payload.feedbackRequests[grant.bridge.requestId]?.status !== "pending") return null;
 			return {
 				requestId: grant.bridge.requestId,
@@ -7132,9 +7130,9 @@ function createRenderService(options) {
 				revision: grant.revision
 			};
 		},
-		release(sessionId, keys) {
+		release(keys) {
 			let released = 0;
-			for (const key of keys) if (grants.get(key)?.sessionId === sessionId && grants.delete(key)) released += 1;
+			for (const key of keys) if (grants.delete(key)) released += 1;
 			return released;
 		},
 		async resolve(key, logicalPath) {
@@ -7162,9 +7160,9 @@ function createRenderService(options) {
 				mode: grant.mode
 			};
 		},
-		missingOf(sessionId, key) {
+		missingOf(key) {
 			const grant = liveGrant(key);
-			if (!grant || grant.sessionId !== sessionId) return [];
+			if (!grant) return [];
 			return [...grant.missing];
 		},
 		pruneClosed() {
@@ -11016,7 +11014,7 @@ function createEventQueue(options) {
 		if (pending === 0) progressAt = now();
 		pending += 1;
 		writes = writes.then(() => {
-			if (stopped || !options.beforeWrite()) return void 0;
+			if (stopped) return void 0;
 			return write();
 		}).then(() => {
 			progressAt = now();
@@ -11216,27 +11214,9 @@ async function startManagementServer(deps, options = {}) {
 			if (Number(c.req.header("content-length") ?? "0") > 0 && !(c.req.header("content-type") ?? "").startsWith("application/json")) return fail(c, new VdeError("E_INVALID_ARGUMENT", "The body must be sent as JSON."));
 		}
 		if (deps.isStopping()) return fail(c, new VdeError("E_DAEMON_STOPPING", "The daemon is stopping."));
-		if (c.req.path === `${API_PREFIX}/sessions/bootstrap` && method === "POST") return next();
-		const authorization = c.req.header("authorization") ?? "";
-		const token = authorization.startsWith("Bearer ") ? authorization.slice(7) : "";
-		if (token === "" || !deps.sessions.authenticate(token)) return fail(c, new VdeError("E_UNAUTHORIZED", "Authentication is required. Open again from the CLI."));
-		c.set("token", token);
 		return next();
 	});
 	const api = new Hono();
-	api.post("/sessions/bootstrap", async (c) => {
-		const body = strictObject({ ticket: string().min(1).max(256) }).parse(await c.req.json());
-		const token = deps.sessions.exchange(body.ticket);
-		if (!token) return fail(c, new VdeError("E_UNAUTHORIZED", "This URL has already been used or has expired."));
-		return c.json(successEnvelope({
-			token,
-			idleTimeoutSeconds: LIMITS.sessionIdleMs / 1e3
-		}, { command: "sessions.bootstrap" }));
-	});
-	api.delete("/session", (c) => {
-		deps.sessions.revoke(c.get("token"));
-		return c.json(successEnvelope({ revoked: true }, { command: "session.delete" }));
-	});
 	api.get("/status", (c) => {
 		const state = deps.documents.state;
 		const status = {
@@ -11322,28 +11302,27 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/feedback/:id/render-grants", async (c) => {
 		const requestId = requestIdSchema.parse(c.req.param("id"));
-		const result = await deps.render.createGrantForRequest(deps.sessions.idOf(c.get("token")), requestId, { origin: c.req.header("origin") ?? origin });
+		const result = await deps.render.createGrantForRequest(requestId, { origin: c.req.header("origin") ?? origin });
 		return c.json(successEnvelope(result, {
 			command: "feedback.render-grant",
 			catalogVersion: deps.documents.state.catalogVersion
 		}));
 	});
-	const bridgeOf = (token, grant) => {
-		const found = typeof grant === "string" ? deps.render.bridgeOf(deps.sessions.idOf(token), grant) : null;
+	const bridgeOf = (grant) => {
+		const found = typeof grant === "string" ? deps.render.bridgeOf(grant) : null;
 		if (!found) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has expired, so draft answers from the HTML are not accepted.");
 		return found;
 	};
 	api.post("/render-grants/bridge/ready", async (c) => {
 		const body = strictObject({ grant: string().min(1).max(128) }).parse(await c.req.json());
-		const { requestId } = bridgeOf(c.get("token"), body.grant);
+		const { requestId } = bridgeOf(body.grant);
 		return ok(c, "render-grants.bridge-ready", deps.feedback.getForUi(requestId));
 	});
 	api.put("/render-grants/bridge/draft", async (c) => {
 		const { grant, ...draft } = parseAnswersBody(await c.req.text());
-		const token = c.get("token");
-		const { requestId } = bridgeOf(token, grant);
+		const { requestId } = bridgeOf(grant);
 		return ok(c, "render-grants.bridge-draft", await deps.feedback.updateDraft(requestId, draft, { authorize: () => {
-			if (bridgeOf(token, grant).requestId !== requestId) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has changed.");
+			if (bridgeOf(grant).requestId !== requestId) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has changed.");
 		} }));
 	});
 	api.post("/feedback/:id/submit", async (c) => ok(c, "feedback.submit", await deps.feedback.submit(requestIdSchema.parse(c.req.param("id")), await c.req.json())));
@@ -11356,7 +11335,7 @@ async function startManagementServer(deps, options = {}) {
 			revision: string().optional(),
 			mode: string().optional()
 		}).parse(await c.req.json());
-		const result = await deps.render.createGrant(deps.sessions.idOf(c.get("token")), {
+		const result = await deps.render.createGrant({
 			documentId: c.req.param("id"),
 			...body
 		}, { origin: c.req.header("origin") ?? origin });
@@ -11367,7 +11346,7 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/render-grants/missing", async (c) => {
 		const body = strictObject({ grant: string().min(1).max(128) }).parse(await c.req.json());
-		const missing = deps.render.missingOf(deps.sessions.idOf(c.get("token")), body.grant);
+		const missing = deps.render.missingOf(body.grant);
 		return c.json(successEnvelope({ missing }, { command: "render-grants.missing" }));
 	});
 	api.post("/documents/:id/html-mode", async (c) => {
@@ -11379,7 +11358,7 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/render-grants/release", async (c) => {
 		const body = strictObject({ grants: array(string().min(1).max(128)).max(256) }).parse(await c.req.json());
-		const released = deps.render.release(deps.sessions.idOf(c.get("token")), body.grants);
+		const released = deps.render.release(body.grants);
 		return c.json(successEnvelope({ released }, { command: "render-grants.release" }));
 	});
 	api.post("/documents/:id/links/:linkId/open", async (c) => {
@@ -11408,7 +11387,6 @@ async function startManagementServer(deps, options = {}) {
 				closed = true;
 				wake();
 			};
-			const token = c.get("token");
 			const queue = createEventQueue({
 				writeEvent: (event) => stream.writeSSE({
 					event: event.type,
@@ -11416,11 +11394,6 @@ async function startManagementServer(deps, options = {}) {
 					data: JSON.stringify(event)
 				}),
 				writeHeartbeat: () => stream.write(": heartbeat\n\n"),
-				beforeWrite: () => {
-					if (deps.sessions.isActive(token)) return true;
-					drop();
-					return false;
-				},
 				onError: finish
 			});
 			const drop = () => {
@@ -11431,7 +11404,6 @@ async function startManagementServer(deps, options = {}) {
 			};
 			streams.set(finish, queue);
 			stream.onAbort(finish);
-			const stopWatchingSession = deps.sessions.onRevoke(token, drop);
 			const send = (event) => {
 				if (!closed) queue.send(event);
 			};
@@ -11443,10 +11415,6 @@ async function startManagementServer(deps, options = {}) {
 			});
 			const unsubscribe = deps.events.subscribe(send);
 			const heartbeat = setInterval(() => {
-				if (!deps.sessions.isActive(token)) {
-					drop();
-					return;
-				}
 				if (queue.stalledFor() >= (deps.stallMs ?? LIMITS.sseStallMs)) {
 					drop();
 					return;
@@ -11457,7 +11425,6 @@ async function startManagementServer(deps, options = {}) {
 				await done;
 			} finally {
 				clearInterval(heartbeat);
-				stopWatchingSession();
 				unsubscribe();
 				await queue.settled();
 				streams.delete(finish);
@@ -11864,99 +11831,6 @@ async function startIpcServer(options) {
 	};
 }
 //#endregion
-//#region src/server/session-service.ts
-function digest(secret) {
-	return createHash("sha256").update(secret).digest("hex");
-}
-function newSecret() {
-	return randomBytes(32).toString("base64url");
-}
-function createSessionService(now = Date.now) {
-	const tickets = /* @__PURE__ */ new Map();
-	const sessions = /* @__PURE__ */ new Map();
-	const revokeListeners = /* @__PURE__ */ new Map();
-	const anyRevokeListeners = /* @__PURE__ */ new Set();
-	const drop = (key) => {
-		if (!sessions.delete(key)) return;
-		const listeners = revokeListeners.get(key);
-		revokeListeners.delete(key);
-		if (listeners) for (const listener of listeners) listener();
-		for (const listener of anyRevokeListeners) listener(key);
-	};
-	const isActiveKey = (key) => {
-		const lastUsedAt = sessions.get(key);
-		if (lastUsedAt === void 0) return false;
-		if (lastUsedAt + LIMITS.sessionIdleMs < now()) {
-			drop(key);
-			return false;
-		}
-		return true;
-	};
-	const sweep = () => {
-		const current = now();
-		for (const [key, expiresAt] of tickets) if (expiresAt < current) tickets.delete(key);
-		for (const [key, lastUsedAt] of sessions) if (lastUsedAt + LIMITS.sessionIdleMs < current) drop(key);
-	};
-	return {
-		retainedCounts() {
-			let listeners = 0;
-			for (const set of revokeListeners.values()) listeners += set.size;
-			return {
-				tickets: tickets.size,
-				sessions: sessions.size,
-				revokeListeners: listeners,
-				anyRevokeListeners: anyRevokeListeners.size
-			};
-		},
-		createBootstrapTicket() {
-			sweep();
-			const ticket = newSecret();
-			tickets.set(digest(ticket), now() + LIMITS.bootstrapTicketTtlMs);
-			return ticket;
-		},
-		exchange(ticket) {
-			sweep();
-			const key = digest(ticket);
-			const expiresAt = tickets.get(key);
-			tickets.delete(key);
-			if (expiresAt === void 0 || expiresAt < now()) return null;
-			const token = newSecret();
-			sessions.set(digest(token), now());
-			return token;
-		},
-		authenticate(token) {
-			const key = digest(token);
-			const lastUsedAt = sessions.get(key);
-			if (lastUsedAt === void 0) return false;
-			if (lastUsedAt + LIMITS.sessionIdleMs < now()) {
-				drop(key);
-				return false;
-			}
-			sessions.set(key, now());
-			return true;
-		},
-		isActive: (token) => isActiveKey(digest(token)),
-		idOf: digest,
-		isActiveId: isActiveKey,
-		onAnyRevoke(listener) {
-			anyRevokeListeners.add(listener);
-		},
-		revoke(token) {
-			drop(digest(token));
-		},
-		onRevoke(token, listener) {
-			const key = digest(token);
-			const listeners = revokeListeners.get(key) ?? /* @__PURE__ */ new Set();
-			revokeListeners.set(key, listeners);
-			listeners.add(listener);
-			return () => {
-				listeners.delete(listener);
-				if (listeners.size === 0 && revokeListeners.get(key) === listeners) revokeListeners.delete(key);
-			};
-		}
-	};
-}
-//#endregion
 //#region ../../node_modules/.pnpm/readdirp@5.1.1/node_modules/readdirp/index.js
 const EntryTypes = {
 	FILE_TYPE: "files",
@@ -14342,7 +14216,6 @@ async function startDaemon(options) {
 			emit
 		});
 		const answering = feedback;
-		const sessions = createSessionService();
 		const startedAt = (/* @__PURE__ */ new Date()).toISOString();
 		const devOrigin = isSourceRun ? environment.env["VDE_OPEN_DEV_UI_ORIGIN"] ?? null : null;
 		let managementOrigin = null;
@@ -14350,7 +14223,6 @@ async function startDaemon(options) {
 		const render = createRenderService({
 			store: openedStore,
 			documents,
-			sessions,
 			parse: parser,
 			previewOrigin: () => previewOrigin,
 			onMissing: (documentId) => emit({
@@ -14379,7 +14251,6 @@ async function startDaemon(options) {
 			daemonId,
 			version,
 			documents,
-			sessions,
 			events,
 			render,
 			search: searching,
@@ -14441,8 +14312,7 @@ async function startDaemon(options) {
 						documents: documents.retainedCounts(),
 						search: search?.retainedCounts() ?? {},
 						render: render.retainedCounts(),
-						feedback: answering.retainedCounts(),
-						sessions: sessions.retainedCounts()
+						feedback: answering.retainedCounts()
 					},
 					workers,
 					activeResources,
@@ -14486,11 +14356,7 @@ async function startDaemon(options) {
 				const result = await documents.removeWatchRule(params);
 				watching.sync();
 				return result;
-			},
-			"ui.bootstrap": () => ({ data: {
-				bootstrapUrl: `${uiUrl}#bootstrap=${sessions.createBootstrapTicket()}`,
-				uiUrl
-			} })
+			}
 		};
 		ipc = await startIpcServer({
 			socketPath: location.socketPath,

package/dist/{search-index-B7DqaWh6.js → search-index-NiN4l6Hg.js}

@@ -5601,8 +5601,6 @@ const LIMITS = {
 	printRenderTimeoutMs: 1e4,
 	pdfExportTimeoutMs: 6e4,
 	watchDebounceMs: 200,
-	bootstrapTicketTtlMs: 6e4,
-	sessionIdleMs: 432e5,
 	sseHeartbeatMs: 15e3,
 	ssePendingEvents: 256,
 	sseStallMs: 6e4,
@@ -5610,7 +5608,7 @@ const LIMITS = {
 	documentAssetBytes: 100 * MiB,
 	documentAssets: 500,
 	cssReferenceDepth: 8,
-	renderGrantsPerSession: 64,
+	renderGrants: 64,
 	searchLimitDefault: 5,
 	searchLimitMax: 50,
 	searchQueryCodePoints: 512,
@@ -5876,14 +5874,6 @@ strictObject({
 	openDocuments: number().int().nonnegative(),
 	previewOrigin: string()
 });
-strictObject({
-	bootstrapUrl: string(),
-	uiUrl: string()
-});
-strictObject({
-	token: string(),
-	idleTimeoutSeconds: number().int().positive()
-});
 const renderGrantParamsSchema = strictObject({
 	documentId: documentIdSchema,
 	revision: revisionSchema.optional(),