vde-open 0.1.9 → 0.1.11

package/dist/{main-DwpMMOjm.js → main-BH6i8EXC.js}

@@ -1,6 +1,6 @@
-import { C as roleAllowed, N as __commonJSMin, P as __toESM, S as isValidLogicalPath, _ as classifyLink, b as encodeLogicalPath, d as analyzeDocument, g as assetTypeOf, u as ParseLimitError, v as classifyReference, x as hasHiddenSegment, y as dirnameOfLogicalPath } from "./html-static-BDV6MgA7.js";
-import { $ as literal, A as successEnvelope, B as readParamsSchema, C as VdeError, D as ExitCode, E as isVdeError, F as htmlModeChangeParamsSchema, G as sha256Schema, H as reorderParamsSchema, I as htmlModeSchema, J as watchRuleSchema, K as sourceKindSchema, L as linkOpenParamsSchema, M as closeParamsSchema, N as documentFormatSchema, P as documentIdSchema, Q as boolean, R as listParamsSchema, S as validateAnswers, U as revisionSchema, V as renderGrantParamsSchema, W as searchParamsSchema, X as _enum, Y as LIMITS, Z as array, _ as feedbackWaitParamsSchema, a as uniqueTokens, at as canonicalJson, b as submissionSchema, c as feedbackAckParamsSchema, d as feedbackDraftParamsSchema, et as number, f as feedbackForgetParamsSchema, g as feedbackSubmitParamsSchema, h as feedbackStatusSchema, i as codePointLength, it as ZodError, j as assetRecordSchema, k as errorEnvelope, l as feedbackCancelParamsSchema, m as feedbackListParamsSchema, n as batchesOf, nt as strictObject, o as answersSchema, p as feedbackIdParamsSchema, q as sourceStateSchema, r as partsOf, rt as string, s as cancellationSchema, tt as record, u as feedbackCreateParamsSchema, v as questionnaireSchema, w as exitCodeForError, x as utf8Length, y as requestIdSchema, z as openParamsSchema } from "./search-index-B7DqaWh6.js";
-import { n as scanReferences, r as extractTitle } from "./render-BX3arVZj.js";
+import { C as roleAllowed, N as __commonJSMin, P as __toESM, S as isValidLogicalPath, _ as classifyLink, b as encodeLogicalPath, d as analyzeDocument, g as assetTypeOf, u as ParseLimitError, v as classifyReference, x as hasHiddenSegment, y as dirnameOfLogicalPath } from "./html-static-C_wwQAJx.js";
+import { $ as literal, A as successEnvelope, B as readParamsSchema, C as VdeError, D as ExitCode, E as isVdeError, F as htmlModeChangeParamsSchema, G as sha256Schema, H as reorderParamsSchema, I as htmlModeSchema, J as watchRuleSchema, K as sourceKindSchema, L as linkOpenParamsSchema, M as closeParamsSchema, N as documentFormatSchema, P as documentIdSchema, Q as boolean, R as listParamsSchema, S as validateAnswers, U as revisionSchema, V as renderGrantParamsSchema, W as searchParamsSchema, X as _enum, Y as LIMITS, Z as array, _ as feedbackWaitParamsSchema, a as uniqueTokens, at as canonicalJson, b as submissionSchema, c as feedbackAckParamsSchema, d as feedbackDraftParamsSchema, et as number, f as feedbackForgetParamsSchema, g as feedbackSubmitParamsSchema, h as feedbackStatusSchema, i as codePointLength, it as ZodError, j as assetRecordSchema, k as errorEnvelope, l as feedbackCancelParamsSchema, m as feedbackListParamsSchema, n as batchesOf, nt as strictObject, o as answersSchema, p as feedbackIdParamsSchema, q as sourceStateSchema, r as partsOf, rt as string, s as cancellationSchema, tt as record, u as feedbackCreateParamsSchema, v as questionnaireSchema, w as exitCodeForError, x as utf8Length, y as requestIdSchema, z as openParamsSchema } from "./search-index-BoGly_y4.js";
+import { n as scanReferences, r as extractTitle } from "./render-BJa4uW0H.js";
 import { n as measureHeap, t as collectGarbage } from "./heap-C3qHm7SE.js";
 import { accessSync, constants, existsSync, stat, statSync, unwatchFile, watch, watchFile } from "node:fs";
 import { appendFile, chmod, link, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, rmdir, stat as stat$1, writeFile } from "node:fs/promises";
@@ -154,7 +154,7 @@ function parseStrictJson(text) {
 }
 //#endregion
 //#region package.json
-var version = "0.1.9";
+var version = "0.1.11";
 //#endregion
 //#region src/documents/cursor.ts
 function invalidCursor(reason) {
@@ -283,7 +283,7 @@ function decodeSource(bytes, label) {
 		throw invalid(label, "invalid-utf8");
 	}
 }
-async function readSourceFile(path) {
+async function readSourceFile(path, format = "markdown") {
 	let canonicalPath;
 	try {
 		canonicalPath = await realpath(path);
@@ -317,7 +317,7 @@ async function readSourceFile(path) {
 			return {
 				canonicalPath,
 				bytes,
-				text: decodeSource(bytes, path),
+				text: format === "image" ? "" : decodeSource(bytes, path),
 				signature: statSignature(after)
 			};
 		} finally {
@@ -3387,7 +3387,10 @@ const FORMAT_BY_EXTENSION = /* @__PURE__ */ new Map([
 	[".htm", "html"]
 ]);
 function formatOfPath(path) {
-	return FORMAT_BY_EXTENSION.get(extname(path).toLowerCase()) ?? null;
+	const document = FORMAT_BY_EXTENSION.get(extname(path).toLowerCase());
+	if (document) return document;
+	const asset = assetTypeOf(path);
+	return asset?.role === "image" || asset?.role === "svg" ? "image" : null;
 }
 function compareText(a, b) {
 	return a < b ? -1 : a > b ? 1 : 0;
@@ -4086,6 +4089,7 @@ const ANALYSIS_CACHE_BYTES = 33554432;
 const MISSING_RETRY_MS = 1e3;
 const MISSING_RETRY_INTERVAL_MS = 100;
 function profileOf(format) {
+	if (format === "image") return "image-v1";
 	return format === "markdown" ? MARKDOWN_PARSER_PROFILE : HTML_STATIC_PARSER_PROFILE;
 }
 function toSummary(record, order, searchState = "excluded", pendingRequestIds = [], interactiveAllowed = false, repository = null) {
@@ -4290,6 +4294,20 @@ var DocumentService = class {
 			});
 			documentLogicalPath = fromRoot.split(sep).join("/");
 		}
+		if (source.format === "image") {
+			const type = assetTypeOf(documentLogicalPath);
+			if (type?.role !== "image" && type?.role !== "svg") throw new VdeError("E_UNSUPPORTED_FORMAT", "The file extension is not an image format.");
+			if (extraAssets.length > 0) throw new VdeError("E_INVALID_ARGUMENT", "--asset is not available for standalone images.");
+			return {
+				...source,
+				assetsRoot,
+				extraAssets: [],
+				documentLogicalPath,
+				assets: [],
+				trackedFiles: [],
+				assetScanFailed: false
+			};
+		}
 		let assetScanFailed = false;
 		const manifest = await buildManifest({
 			format: source.format,
@@ -4598,7 +4616,7 @@ var DocumentService = class {
 		for (const [canonicalPath, { candidate, format }] of resolved.unique) {
 			let loaded;
 			try {
-				loaded = await this.#readSource(candidate.absolutePath);
+				loaded = await this.#readSource(candidate.absolutePath, format);
 			} catch (error) {
 				if (!(error instanceof VdeError)) throw error;
 				problems.push({
@@ -4699,7 +4717,7 @@ var DocumentService = class {
 				sha256
 			}))
 		});
-		const title = options.title ?? extractTitle(item.text, item.format) ?? item.fallbackTitle;
+		const title = options.title ?? (item.format === "image" ? null : extractTitle(item.text, item.format)) ?? item.fallbackTitle;
 		const revisionRecord = {
 			revision,
 			format: item.format,
@@ -4869,6 +4887,10 @@ var DocumentService = class {
 			sectionId = payload["sectionId"];
 		}
 		const entry = this.#requireRevision(record, revision);
+		if (entry.format === "image") throw new VdeError("E_UNSUPPORTED_FORMAT", "Images have no text source, outline, or sections.", {
+			documentId: record.documentId,
+			format: "image"
+		});
 		if (mode === "outline") return this.#readOutline(record, entry, params.maxBytes, offset ?? 0);
 		if (mode === "section") return this.#readSection(record, entry, sectionId ?? "", params.maxBytes, offset ?? 0);
 		const source = await this.#store.readBlob(entry.sourceSha256);
@@ -5245,7 +5267,12 @@ var DocumentService = class {
 		let failure = "error";
 		const deadline = Date.now() + MISSING_RETRY_MS;
 		for (;;) try {
-			loaded = await this.#readSource(canonicalPath);
+			const format = this.#store.payload.documents[documentId]?.format;
+			if (format === void 0) return {
+				changed: false,
+				signature: null
+			};
+			loaded = await this.#readSource(canonicalPath, format);
 			break;
 		} catch (error) {
 			if (!(error instanceof VdeError)) throw error;
@@ -5362,7 +5389,7 @@ var DocumentService = class {
 			if (isOpenPath(before, path) || rule.suppressedPaths.includes(path)) continue;
 			let loaded;
 			try {
-				loaded = await this.#readSource(path);
+				loaded = await this.#readSource(path, format);
 			} catch (error) {
 				if (error instanceof VdeError) continue;
 				throw error;
@@ -5825,6 +5852,7 @@ function createPdfService(options) {
 	const run = async (documentId, revision, signal) => {
 		const started = Date.now();
 		const { record, entry } = documents.describeRevision(documentId, revision);
+		if (entry.format === "image") throw new VdeError("E_UNSUPPORTED_FORMAT", "PDF export is available for Markdown and HTML.");
 		const source = (await store.readBlob(entry.sourceSha256)).toString("utf8");
 		const slot = randomBytes(16).toString("hex");
 		let assets = entry.assets.filter((asset) => asset.role === "image" || asset.role === "svg");
@@ -6900,12 +6928,9 @@ function decodeUtf8(bytes) {
 	}
 }
 function createRenderService(options) {
-	const { store, documents, sessions, parse } = options;
+	const { store, documents, parse } = options;
 	const grants = /* @__PURE__ */ new Map();
 	const snapshots = /* @__PURE__ */ new Map();
-	sessions.onAnyRevoke((sessionId) => {
-		for (const [key, grant] of grants) if (grant.sessionId === sessionId) grants.delete(key);
-	});
 	const snapshotOf = async (documentId, revision, mode = "static", withSdk = false) => {
 		const { record, entry } = documents.describeRevision(documentId, revision);
 		const cacheKey = `${entry.revision}\n${entry.documentLogicalPath}\n${mode}\n${String(withSdk)}`;
@@ -6919,6 +6944,28 @@ function createRenderService(options) {
 				snapshot: cached
 			};
 		}
+		if (entry.format === "image") {
+			const type = assetTypeOf(entry.documentLogicalPath);
+			if (type?.role !== "image" && type?.role !== "svg") throw new VdeError("E_UNSUPPORTED_FORMAT", "The file extension is not an image format.");
+			return {
+				record,
+				entry,
+				snapshot: {
+					format: "image",
+					documentLogicalPath: entry.documentLogicalPath,
+					hasDocument: true,
+					files: /* @__PURE__ */ new Map([[entry.documentLogicalPath, {
+						kind: "blob",
+						sha256: entry.sourceSha256,
+						...type
+					}]]),
+					assets: [],
+					links: [],
+					diagnostics: [],
+					headingTargets: []
+				}
+			};
+		}
 		const source = (await store.readBlob(entry.sourceSha256)).toString("utf8");
 		const stylesheets = [];
 		for (const asset of entry.assets) {
@@ -7004,14 +7051,13 @@ function createRenderService(options) {
 	const liveGrant = (key) => {
 		const grant = grants.get(key);
 		if (!grant) return null;
-		const record = documents.state.documents[grant.documentId];
-		if (!sessions.isActiveId(grant.sessionId) || !record?.isOpen || documents.openEpoch(grant.documentId) !== grant.openEpoch || grant.mode === "interactive" && documents.interactiveGeneration(grant.documentId) !== grant.permission) {
+		if (!documents.state.documents[grant.documentId]?.isOpen || documents.openEpoch(grant.documentId) !== grant.openEpoch || grant.mode === "interactive" && documents.interactiveGeneration(grant.documentId) !== grant.permission) {
 			grants.delete(key);
 			return null;
 		}
 		return grant;
 	};
-	const issue = async (sessionId, params, context) => {
+	const issue = async (params, context) => {
 		const interactive = params.mode === "interactive";
 		const permissionOf = () => {
 			if (!interactive) return null;
@@ -7054,7 +7100,6 @@ function createRenderService(options) {
 		}
 		const key = randomBytes(32).toString("base64url");
 		grants.set(key, {
-			sessionId,
 			documentId: record.documentId,
 			openEpoch,
 			revision: entry.revision,
@@ -7064,8 +7109,11 @@ function createRenderService(options) {
 			bridge,
 			missing: /* @__PURE__ */ new Set()
 		});
-		const owned = [...grants].filter(([, grant]) => grant.sessionId === sessionId);
-		for (const [oldKey] of owned.slice(0, Math.max(0, owned.length - LIMITS.renderGrantsPerSession))) grants.delete(oldKey);
+		while (grants.size > LIMITS.renderGrants) {
+			const oldest = grants.keys().next().value;
+			if (oldest === void 0) break;
+			grants.delete(oldest);
+		}
 		const filesBaseUrl = `${options.previewOrigin()}/r/${key}/files/`;
 		return {
 			grant: key,
@@ -7100,14 +7148,14 @@ function createRenderService(options) {
 				snapshots: snapshots.size
 			};
 		},
-		async createGrant(sessionId, rawParams, context) {
+		async createGrant(rawParams, context) {
 			const params = renderGrantParamsSchema.parse(rawParams);
-			return issue(sessionId, {
+			return issue({
 				...params,
 				requestId: null
 			}, context);
 		},
-		async createGrantForRequest(sessionId, requestId, context) {
+		async createGrantForRequest(requestId, context) {
 			const request = Object.hasOwn(store.payload.feedbackRequests, requestId) ? store.payload.feedbackRequests[requestId] : void 0;
 			if (!request) throw new VdeError("E_REQUEST_NOT_FOUND", "The question was not found.", { requestId });
 			if (request.status !== "pending") throw new VdeError("E_REQUEST_NOT_PENDING", "The question is not pending.", {
@@ -7115,16 +7163,16 @@ function createRenderService(options) {
 				status: request.status
 			});
 			const interactive = request.renderMode === "interactive" && documents.interactiveAllowed(request.documentId);
-			return issue(sessionId, {
+			return issue({
 				documentId: request.documentId,
 				revision: request.revision,
 				mode: interactive ? "interactive" : "static",
 				requestId: interactive ? request.requestId : null
 			}, context);
 		},
-		bridgeOf(sessionId, key) {
+		bridgeOf(key) {
 			const grant = liveGrant(key);
-			if (!grant?.bridge || grant.sessionId !== sessionId) return null;
+			if (!grant?.bridge) return null;
 			if (store.payload.feedbackRequests[grant.bridge.requestId]?.status !== "pending") return null;
 			return {
 				requestId: grant.bridge.requestId,
@@ -7132,9 +7180,9 @@ function createRenderService(options) {
 				revision: grant.revision
 			};
 		},
-		release(sessionId, keys) {
+		release(keys) {
 			let released = 0;
-			for (const key of keys) if (grants.get(key)?.sessionId === sessionId && grants.delete(key)) released += 1;
+			for (const key of keys) if (grants.delete(key)) released += 1;
 			return released;
 		},
 		async resolve(key, logicalPath) {
@@ -7162,9 +7210,9 @@ function createRenderService(options) {
 				mode: grant.mode
 			};
 		},
-		missingOf(sessionId, key) {
+		missingOf(key) {
 			const grant = liveGrant(key);
-			if (!grant || grant.sessionId !== sessionId) return [];
+			if (!grant) return [];
 			return [...grant.missing];
 		},
 		pruneClosed() {
@@ -7471,7 +7519,7 @@ function createSearchService(options) {
 			if (indexed.get(documentId) === attempt) indexed.delete(documentId);
 		};
 		try {
-			const text = (await store.readBlob(entry.sourceSha256)).toString("utf8");
+			const text = entry.format === "image" ? "" : (await store.readBlob(entry.sourceSha256)).toString("utf8");
 			const { sections } = await analyzeOnce(entry.format, text);
 			if (!current()) {
 				await giveUp(false);
@@ -11016,7 +11064,7 @@ function createEventQueue(options) {
 		if (pending === 0) progressAt = now();
 		pending += 1;
 		writes = writes.then(() => {
-			if (stopped || !options.beforeWrite()) return void 0;
+			if (stopped) return void 0;
 			return write();
 		}).then(() => {
 			progressAt = now();
@@ -11216,27 +11264,9 @@ async function startManagementServer(deps, options = {}) {
 			if (Number(c.req.header("content-length") ?? "0") > 0 && !(c.req.header("content-type") ?? "").startsWith("application/json")) return fail(c, new VdeError("E_INVALID_ARGUMENT", "The body must be sent as JSON."));
 		}
 		if (deps.isStopping()) return fail(c, new VdeError("E_DAEMON_STOPPING", "The daemon is stopping."));
-		if (c.req.path === `${API_PREFIX}/sessions/bootstrap` && method === "POST") return next();
-		const authorization = c.req.header("authorization") ?? "";
-		const token = authorization.startsWith("Bearer ") ? authorization.slice(7) : "";
-		if (token === "" || !deps.sessions.authenticate(token)) return fail(c, new VdeError("E_UNAUTHORIZED", "Authentication is required. Open again from the CLI."));
-		c.set("token", token);
 		return next();
 	});
 	const api = new Hono();
-	api.post("/sessions/bootstrap", async (c) => {
-		const body = strictObject({ ticket: string().min(1).max(256) }).parse(await c.req.json());
-		const token = deps.sessions.exchange(body.ticket);
-		if (!token) return fail(c, new VdeError("E_UNAUTHORIZED", "This URL has already been used or has expired."));
-		return c.json(successEnvelope({
-			token,
-			idleTimeoutSeconds: LIMITS.sessionIdleMs / 1e3
-		}, { command: "sessions.bootstrap" }));
-	});
-	api.delete("/session", (c) => {
-		deps.sessions.revoke(c.get("token"));
-		return c.json(successEnvelope({ revoked: true }, { command: "session.delete" }));
-	});
 	api.get("/status", (c) => {
 		const state = deps.documents.state;
 		const status = {
@@ -11322,28 +11352,27 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/feedback/:id/render-grants", async (c) => {
 		const requestId = requestIdSchema.parse(c.req.param("id"));
-		const result = await deps.render.createGrantForRequest(deps.sessions.idOf(c.get("token")), requestId, { origin: c.req.header("origin") ?? origin });
+		const result = await deps.render.createGrantForRequest(requestId, { origin: c.req.header("origin") ?? origin });
 		return c.json(successEnvelope(result, {
 			command: "feedback.render-grant",
 			catalogVersion: deps.documents.state.catalogVersion
 		}));
 	});
-	const bridgeOf = (token, grant) => {
-		const found = typeof grant === "string" ? deps.render.bridgeOf(deps.sessions.idOf(token), grant) : null;
+	const bridgeOf = (grant) => {
+		const found = typeof grant === "string" ? deps.render.bridgeOf(grant) : null;
 		if (!found) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has expired, so draft answers from the HTML are not accepted.");
 		return found;
 	};
 	api.post("/render-grants/bridge/ready", async (c) => {
 		const body = strictObject({ grant: string().min(1).max(128) }).parse(await c.req.json());
-		const { requestId } = bridgeOf(c.get("token"), body.grant);
+		const { requestId } = bridgeOf(body.grant);
 		return ok(c, "render-grants.bridge-ready", deps.feedback.getForUi(requestId));
 	});
 	api.put("/render-grants/bridge/draft", async (c) => {
 		const { grant, ...draft } = parseAnswersBody(await c.req.text());
-		const token = c.get("token");
-		const { requestId } = bridgeOf(token, grant);
+		const { requestId } = bridgeOf(grant);
 		return ok(c, "render-grants.bridge-draft", await deps.feedback.updateDraft(requestId, draft, { authorize: () => {
-			if (bridgeOf(token, grant).requestId !== requestId) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has changed.");
+			if (bridgeOf(grant).requestId !== requestId) throw new VdeError("E_RENDER_GRANT_INVALID", "The render grant has changed.");
 		} }));
 	});
 	api.post("/feedback/:id/submit", async (c) => ok(c, "feedback.submit", await deps.feedback.submit(requestIdSchema.parse(c.req.param("id")), await c.req.json())));
@@ -11356,7 +11385,7 @@ async function startManagementServer(deps, options = {}) {
 			revision: string().optional(),
 			mode: string().optional()
 		}).parse(await c.req.json());
-		const result = await deps.render.createGrant(deps.sessions.idOf(c.get("token")), {
+		const result = await deps.render.createGrant({
 			documentId: c.req.param("id"),
 			...body
 		}, { origin: c.req.header("origin") ?? origin });
@@ -11367,7 +11396,7 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/render-grants/missing", async (c) => {
 		const body = strictObject({ grant: string().min(1).max(128) }).parse(await c.req.json());
-		const missing = deps.render.missingOf(deps.sessions.idOf(c.get("token")), body.grant);
+		const missing = deps.render.missingOf(body.grant);
 		return c.json(successEnvelope({ missing }, { command: "render-grants.missing" }));
 	});
 	api.post("/documents/:id/html-mode", async (c) => {
@@ -11379,7 +11408,7 @@ async function startManagementServer(deps, options = {}) {
 	});
 	api.post("/render-grants/release", async (c) => {
 		const body = strictObject({ grants: array(string().min(1).max(128)).max(256) }).parse(await c.req.json());
-		const released = deps.render.release(deps.sessions.idOf(c.get("token")), body.grants);
+		const released = deps.render.release(body.grants);
 		return c.json(successEnvelope({ released }, { command: "render-grants.release" }));
 	});
 	api.post("/documents/:id/links/:linkId/open", async (c) => {
@@ -11408,7 +11437,6 @@ async function startManagementServer(deps, options = {}) {
 				closed = true;
 				wake();
 			};
-			const token = c.get("token");
 			const queue = createEventQueue({
 				writeEvent: (event) => stream.writeSSE({
 					event: event.type,
@@ -11416,11 +11444,6 @@ async function startManagementServer(deps, options = {}) {
 					data: JSON.stringify(event)
 				}),
 				writeHeartbeat: () => stream.write(": heartbeat\n\n"),
-				beforeWrite: () => {
-					if (deps.sessions.isActive(token)) return true;
-					drop();
-					return false;
-				},
 				onError: finish
 			});
 			const drop = () => {
@@ -11431,7 +11454,6 @@ async function startManagementServer(deps, options = {}) {
 			};
 			streams.set(finish, queue);
 			stream.onAbort(finish);
-			const stopWatchingSession = deps.sessions.onRevoke(token, drop);
 			const send = (event) => {
 				if (!closed) queue.send(event);
 			};
@@ -11443,10 +11465,6 @@ async function startManagementServer(deps, options = {}) {
 			});
 			const unsubscribe = deps.events.subscribe(send);
 			const heartbeat = setInterval(() => {
-				if (!deps.sessions.isActive(token)) {
-					drop();
-					return;
-				}
 				if (queue.stalledFor() >= (deps.stallMs ?? LIMITS.sseStallMs)) {
 					drop();
 					return;
@@ -11457,7 +11475,6 @@ async function startManagementServer(deps, options = {}) {
 				await done;
 			} finally {
 				clearInterval(heartbeat);
-				stopWatchingSession();
 				unsubscribe();
 				await queue.settled();
 				streams.delete(finish);
@@ -11864,99 +11881,6 @@ async function startIpcServer(options) {
 	};
 }
 //#endregion
-//#region src/server/session-service.ts
-function digest(secret) {
-	return createHash("sha256").update(secret).digest("hex");
-}
-function newSecret() {
-	return randomBytes(32).toString("base64url");
-}
-function createSessionService(now = Date.now) {
-	const tickets = /* @__PURE__ */ new Map();
-	const sessions = /* @__PURE__ */ new Map();
-	const revokeListeners = /* @__PURE__ */ new Map();
-	const anyRevokeListeners = /* @__PURE__ */ new Set();
-	const drop = (key) => {
-		if (!sessions.delete(key)) return;
-		const listeners = revokeListeners.get(key);
-		revokeListeners.delete(key);
-		if (listeners) for (const listener of listeners) listener();
-		for (const listener of anyRevokeListeners) listener(key);
-	};
-	const isActiveKey = (key) => {
-		const lastUsedAt = sessions.get(key);
-		if (lastUsedAt === void 0) return false;
-		if (lastUsedAt + LIMITS.sessionIdleMs < now()) {
-			drop(key);
-			return false;
-		}
-		return true;
-	};
-	const sweep = () => {
-		const current = now();
-		for (const [key, expiresAt] of tickets) if (expiresAt < current) tickets.delete(key);
-		for (const [key, lastUsedAt] of sessions) if (lastUsedAt + LIMITS.sessionIdleMs < current) drop(key);
-	};
-	return {
-		retainedCounts() {
-			let listeners = 0;
-			for (const set of revokeListeners.values()) listeners += set.size;
-			return {
-				tickets: tickets.size,
-				sessions: sessions.size,
-				revokeListeners: listeners,
-				anyRevokeListeners: anyRevokeListeners.size
-			};
-		},
-		createBootstrapTicket() {
-			sweep();
-			const ticket = newSecret();
-			tickets.set(digest(ticket), now() + LIMITS.bootstrapTicketTtlMs);
-			return ticket;
-		},
-		exchange(ticket) {
-			sweep();
-			const key = digest(ticket);
-			const expiresAt = tickets.get(key);
-			tickets.delete(key);
-			if (expiresAt === void 0 || expiresAt < now()) return null;
-			const token = newSecret();
-			sessions.set(digest(token), now());
-			return token;
-		},
-		authenticate(token) {
-			const key = digest(token);
-			const lastUsedAt = sessions.get(key);
-			if (lastUsedAt === void 0) return false;
-			if (lastUsedAt + LIMITS.sessionIdleMs < now()) {
-				drop(key);
-				return false;
-			}
-			sessions.set(key, now());
-			return true;
-		},
-		isActive: (token) => isActiveKey(digest(token)),
-		idOf: digest,
-		isActiveId: isActiveKey,
-		onAnyRevoke(listener) {
-			anyRevokeListeners.add(listener);
-		},
-		revoke(token) {
-			drop(digest(token));
-		},
-		onRevoke(token, listener) {
-			const key = digest(token);
-			const listeners = revokeListeners.get(key) ?? /* @__PURE__ */ new Set();
-			revokeListeners.set(key, listeners);
-			listeners.add(listener);
-			return () => {
-				listeners.delete(listener);
-				if (listeners.size === 0 && revokeListeners.get(key) === listeners) revokeListeners.delete(key);
-			};
-		}
-	};
-}
-//#endregion
 //#region ../../node_modules/.pnpm/readdirp@5.1.1/node_modules/readdirp/index.js
 const EntryTypes = {
 	FILE_TYPE: "files",
@@ -14342,7 +14266,6 @@ async function startDaemon(options) {
 			emit
 		});
 		const answering = feedback;
-		const sessions = createSessionService();
 		const startedAt = (/* @__PURE__ */ new Date()).toISOString();
 		const devOrigin = isSourceRun ? environment.env["VDE_OPEN_DEV_UI_ORIGIN"] ?? null : null;
 		let managementOrigin = null;
@@ -14350,7 +14273,6 @@ async function startDaemon(options) {
 		const render = createRenderService({
 			store: openedStore,
 			documents,
-			sessions,
 			parse: parser,
 			previewOrigin: () => previewOrigin,
 			onMissing: (documentId) => emit({
@@ -14379,7 +14301,6 @@ async function startDaemon(options) {
 			daemonId,
 			version,
 			documents,
-			sessions,
 			events,
 			render,
 			search: searching,
@@ -14441,8 +14362,7 @@ async function startDaemon(options) {
 						documents: documents.retainedCounts(),
 						search: search?.retainedCounts() ?? {},
 						render: render.retainedCounts(),
-						feedback: answering.retainedCounts(),
-						sessions: sessions.retainedCounts()
+						feedback: answering.retainedCounts()
 					},
 					workers,
 					activeResources,
@@ -14486,11 +14406,7 @@ async function startDaemon(options) {
 				const result = await documents.removeWatchRule(params);
 				watching.sync();
 				return result;
-			},
-			"ui.bootstrap": () => ({ data: {
-				bootstrapUrl: `${uiUrl}#bootstrap=${sessions.createBootstrapTicket()}`,
-				uiUrl
-			} })
+			}
 		};
 		ipc = await startIpcServer({
 			socketPath: location.socketPath,

package/dist/{print-Cfa1Ytrj.js → print-vae7mHCU.js}

@@ -1,4 +1,4 @@
-import { A as escapeAttr, D as defaultTreeAdapter, E as serialize, M as footnoteReferenceId, O as NS, T as parseFragment, c as renderedLinkOf, h as parseMarkdownDocument, i as transformStaticHtml, j as escapeHtml$2, k as parseMarkdown, l as MARKDOWN_PARSE_OPTIONS, n as resolveAssetUrl, o as transformCss, s as localImagePath, t as DiagnosticLog, w as parse, y as dirnameOfLogicalPath } from "./html-static-BDV6MgA7.js";
+import { A as escapeAttr, D as defaultTreeAdapter, E as serialize, M as footnoteReferenceId, O as NS, T as parseFragment, c as renderedLinkOf, h as parseMarkdownDocument, i as transformStaticHtml, j as escapeHtml$2, k as parseMarkdown, l as MARKDOWN_PARSE_OPTIONS, n as resolveAssetUrl, o as transformCss, s as localImagePath, t as DiagnosticLog, w as parse, y as dirnameOfLogicalPath } from "./html-static-C_wwQAJx.js";
 //#region ../../node_modules/.pnpm/@tanstack+markdown@1.0.0_react@19.3.0/node_modules/@tanstack/markdown/dist/html.js
 function renderHtml(input, options = {}) {
 	return (typeof input === "string" ? parseMarkdown(input, options) : input).children.map((node) => renderBlock(node, options)).join("\n");

package/dist/{render-BX3arVZj.js → render-BJa4uW0H.js}

@@ -1,4 +1,4 @@
-import { _ as classifyLink, a as scanCssReferences, f as assertWithinLimits, i as transformStaticHtml, k as parseMarkdown, l as MARKDOWN_PARSE_OPTIONS, m as markdownUrlTransform, n as resolveAssetUrl, o as transformCss, p as inlineText$1, r as scanHtmlReferences, t as DiagnosticLog, w as parse, y as dirnameOfLogicalPath } from "./html-static-BDV6MgA7.js";
+import { _ as classifyLink, a as scanCssReferences, f as assertWithinLimits, i as transformStaticHtml, k as parseMarkdown, l as MARKDOWN_PARSE_OPTIONS, m as markdownUrlTransform, n as resolveAssetUrl, o as transformCss, p as inlineText$1, r as scanHtmlReferences, t as DiagnosticLog, w as parse, y as dirnameOfLogicalPath } from "./html-static-C_wwQAJx.js";
 //#region ../../packages/document/src/title.ts
 const TITLE_SCAN_CHARS = 65536;
 const MAX_TITLE_LENGTH = 160;

package/dist/{search-index-B7DqaWh6.js → search-index-BoGly_y4.js}

@@ -5601,8 +5601,6 @@ const LIMITS = {
 	printRenderTimeoutMs: 1e4,
 	pdfExportTimeoutMs: 6e4,
 	watchDebounceMs: 200,
-	bootstrapTicketTtlMs: 6e4,
-	sessionIdleMs: 432e5,
 	sseHeartbeatMs: 15e3,
 	ssePendingEvents: 256,
 	sseStallMs: 6e4,
@@ -5610,7 +5608,7 @@ const LIMITS = {
 	documentAssetBytes: 100 * MiB,
 	documentAssets: 500,
 	cssReferenceDepth: 8,
-	renderGrantsPerSession: 64,
+	renderGrants: 64,
 	searchLimitDefault: 5,
 	searchLimitMax: 50,
 	searchQueryCodePoints: 512,
@@ -5634,7 +5632,11 @@ const LIMITS = {
 const documentIdSchema = string().regex(/^doc_[0-9a-f-]{36}$/);
 const revisionSchema = string().regex(/^rev_[0-9a-f]{64}$/);
 const sha256Schema = string().regex(/^[0-9a-f]{64}$/);
-const documentFormatSchema = _enum(["markdown", "html"]);
+const documentFormatSchema = _enum([
+	"markdown",
+	"html",
+	"image"
+]);
 const sourceKindSchema = _enum([
 	"file",
 	"stdin",
@@ -5876,14 +5878,6 @@ strictObject({
 	openDocuments: number().int().nonnegative(),
 	previewOrigin: string()
 });
-strictObject({
-	bootstrapUrl: string(),
-	uiUrl: string()
-});
-strictObject({
-	token: string(),
-	idleTimeoutSeconds: number().int().positive()
-});
 const renderGrantParamsSchema = strictObject({
 	documentId: documentIdSchema,
 	revision: revisionSchema.optional(),
@@ -5974,7 +5968,11 @@ const searchHitSchema = strictObject({
 	]),
 	score: number(),
 	sourceRange: sourceRangeSchema.nullable(),
-	extraction: _enum(["markdown", "static-html"])
+	extraction: _enum([
+		"markdown",
+		"static-html",
+		"image"
+	])
 });
 strictObject({
 	query: string(),
@@ -8862,7 +8860,7 @@ var SearchIndex = class {
 				matchKind: kind,
 				score: Math.round(score * 1e3) / 1e3,
 				sourceRange: null,
-				extraction: meta.format === "markdown" ? "markdown" : "static-html"
+				extraction: meta.format === "image" ? "image" : meta.format === "markdown" ? "markdown" : "static-html"
 			});
 		}
 		return hits;