chore: release v0.6.3 (image + link resolution fixes)

Issue #3 follow-up: the 0.6.1 SVG fix never ran for the reported document,
because the image loader rejected absolute paths (and relative paths escaping
the doc's directory) before reading a byte. Local images now load from any
readable path — display-only and safe, since the bytes must decode as an image
and only ever reach the screen as pixels; remote fetching stays opt-in.

- Fixed: absolute/out-of-tree, percent-encoded, and file:// image paths load;
  the same policy applies to followed .md links
- Fixed: failed images state why ("image not found" / "cannot decode image")
  instead of a bare placeholder indistinguishable from a rendering bug
- Added: linked images, image galleries, raw HTML <img>, data: URIs,
  ~/ expansion, ?raw=true / #fragment suffixes, EXIF orientation
- Added: resvg "raster-images" so <image> elements inside SVGs render
- Bump version 0.6.2 -> 0.6.3, refresh Cargo.lock, update CHANGELOG

Also ships the 0.6.2 panic fixes: 0.6.2 was bumped in-tree but never tagged,
so this is the first published build to carry them.

Author: borghei

CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.6.3 — 2026-07-26
+
+Also carries the 0.6.2 robustness fixes below: 0.6.2 was tagged in the source
+tree but never published, so this is the first build to ship them.
+
+### Fixed
+- **Images referenced by absolute path now render** ([#3](https://github.com/borghei/ink/issues/3) follow-up). The 0.6.1 SVG fix never got a chance to run for the reported document: `![](/tmp/sample.svg)` is an absolute path, and the image loader rejected every absolute path (and every relative path escaping the document's directory) before reading a single byte — which is also why a PNG referenced the same way didn't show. Local images now load from any readable path, like kitty's `icat`. This is display-only and safe: image bytes must decode and only ever reach the screen as pixels, never as text, and remote fetching stays opt-in via `--remote-images`.
+- **The same root cause, fixed everywhere it appeared:**
+  - Percent-encoded destinations resolve: `![](my%20pic.png)` finds `my pic.png` (the encoding Obsidian/Notion exports and standard markdown produce). Applies to images and followed links; a file literally named with `%` still wins.
+  - `file://` image URLs load as local paths instead of silently failing.
+  - Following a `.md` link works for absolute and out-of-tree paths, matching the image policy.
+- **Failed images now say why.** A missing file shows `🖼 … (image not found)`, an undecodable one `(cannot decode image)`, instead of a bare placeholder indistinguishable from a rendering bug — the reason #3 took two rounds to diagnose.
+
+### Added
+- **Linked images render.** `[![alt](shot.png)](https://…)` — the badge/linked-screenshot pattern — now renders the image as a block; the caption carries the link so hint-mode and open still reach it.
+- **Image galleries render.** A paragraph holding several images in a row renders each one, instead of degrading all of them to inline placeholders.
+- **Raw HTML `<img>` renders.** `<p align="center"><img src="logo.png" …></p>` — the README way to size/center a logo — now shows the image (alt text as caption) instead of dim raw markup. A mid-sentence inline `<img>` shows the standard `🖼` placeholder instead of vanishing.
+- **`data:` URI images render.** Base64 or percent-encoded payloads, as produced by notebook and HTML exports.
+- **`~/pics/x.png` resolves** to the home directory, for images and followed links.
+- **`pic.png?raw=true` / `pic.png#gh-light-mode-only` resolve.** GitHub-habit query/fragment suffixes are stripped as a fallback; a file literally named with the suffix still wins.
+- **EXIF orientation is honored.** Phone photos no longer render sideways.
+- **SVGs with embedded raster images render** (resvg's `raster-images` feature was off, leaving `<image href="…">` elements blank; relative hrefs now resolve against the SVG's own directory).
+
 ## 0.6.2 — 2026-07-24
 
 ### Fixed (robustness)

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "ink-md"
-version = "0.6.2"
+version = "0.6.3"
 edition = "2021"
 authors = ["Amin Borghei <borghei.mohammadamin@gmail.com>"]
 description = "The most advanced terminal markdown reader"
@@ -60,8 +60,12 @@ unicode-width = "0.2"
 # Image decoding for inline image rendering
 image = { version = "0.25", default-features = false, features = ["png", "jpeg", "gif", "webp", "bmp", "ico", "tiff", "tga", "qoi", "pnm", "hdr", "exr", "ff"] }
 
-# SVG rasterization (vector → pixels) for inline SVG images
-resvg = { version = "0.47", default-features = false, features = ["text", "system-fonts", "memmap-fonts"] }
+# SVG rasterization (vector → pixels) for inline SVG images; raster-images
+# renders <image> elements embedded in SVGs (otherwise they come out blank)
+resvg = { version = "0.47", default-features = false, features = ["text", "system-fonts", "memmap-fonts", "raster-images"] }
+
+# data: URI images embedded in documents (notebook/HTML exports)
+base64 = "0.22"
 
 # Cross-platform file watching for --watch (FSEvents on macOS, inotify on Linux, ReadDirectoryChangesW on Windows)
 notify = "8"

Cargo.toml

@@ -729,12 +729,10 @@ fn run_inner(
                         let base = std::path::Path::new(&tabs[active_tab].filename)
                             .parent()
                             .unwrap_or(std::path::Path::new("."));
-                        // Contain link targets: stay inside the current doc's
-                        // directory tree or the directory ink was launched in.
-                        let cwd = std::env::current_dir().unwrap_or_default();
-                        let Some(target) =
-                            crate::sanitize::resolve_within(base, &[base, &cwd], &link_path)
-                        else {
+                        // Same trust model as images: following a link renders
+                        // a local .md file to the local user, so any readable
+                        // path is fair game (absolute included).
+                        let Some(target) = crate::sanitize::resolve_local(base, &link_path) else {
                             continue;
                         };
                         if let Ok(src) = std::fs::read_to_string(&target) {
@@ -847,7 +845,7 @@ fn collect_link_hints(lines: &[crate::layout::StyledLine]) -> Vec<LinkHint> {
 }
 
 /// Act on a chosen link: open web/mail URLs in the default handler; follow a
-/// relative `.md` link in-place (with containment + nav history).
+/// local `.md` link in-place (any readable path, same trust model as images).
 #[allow(clippy::too_many_arguments)]
 fn open_link(
     url: &str,
@@ -870,16 +868,17 @@ fn open_link(
             return;
         }
     }
-    // Relative markdown link: follow in-place if it stays in-tree.
+    // Local markdown link: follow in-place. Same trust model as images —
+    // rendering a local .md file to the local user, so any readable path is
+    // fair game (absolute included).
     if !(url.ends_with(".md") || url.ends_with(".markdown")) {
         return;
     }
     let base = std::path::Path::new(&tabs[active_tab].filename)
         .parent()
         .unwrap_or(std::path::Path::new("."))
         .to_path_buf();
-    let cwd = std::env::current_dir().unwrap_or_default();
-    let Some(target) = crate::sanitize::resolve_within(&base, &[&base, &cwd], url) else {
+    let Some(target) = crate::sanitize::resolve_local(&base, url) else {
         return;
     };
     if let Ok(src) = std::fs::read_to_string(&target) {